2.1
中危
57 个模型检测该样本为恶意！
重新分析
更多

0d91eb3f989f436df897782788f72ca57daad7489a3d9917c3c5cd7c37b6b986

0d91eb3f989f436df897782788f72ca57daad7489a3d9917c3c5cd7c37b6b986.exe

分析耗时

21s

最近分析

372天前

文件大小

201.6KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN DROPPER LETHIC
鹰眼引擎
DACN 0.14
FACILE 1.00
IMCLNet 0.84
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Gepys-A [Trj] 20191001 18.4.3895.0
Baidu Win32.Trojan.Agent.eq 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20191001 2013.8.14.323
McAfee Generic-FAGO!6A9F69B131FD 20191001 6.0.6.653
Tencent None 20191001 1.0.0.1
静态指标
查询计算机名称 (1 个事件)
Time & API Arguments Status Return Repeated
1727545346.640625
GetComputerNameW
computer_name: TU-PC
success 1 0
检查进程是否被调试器调试 (1 个事件)
Time & API Arguments Status Return Repeated
1727545341.609625
IsDebuggerPresent
failed 0 0
收集信息以指纹识别系统 (MachineGuid, DigitalProductId, SystemBiosDate) (1 个事件)
registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
文件包含未知的 PE 资源名称，可能指示打包器 (1 个事件)
resource name None
行为判定
动态指标
分配可读-可写-可执行内存（通常用于自解压） (5 个事件)
Time & API Arguments Status Return Repeated
1727545341.359625
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00460000
region_size: 167936
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1784
success 0 0
1727545341.374625
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x003e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1784
success 0 0
1727545341.374625
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x01d00000
region_size: 372736
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1784
success 0 0
1727545341.577625
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x01d60000
region_size: 372736
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1784
success 0 0
1727545341.593625
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
region_size: 372736
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1784
success 0 0
在 PE 资源中识别到外语 (3 个事件)
name RT_VERSION language LANG_RUSSIAN filetype None sublanguage SUBLANG_RUSSIAN offset 0x000320d0 size 0x00000188
name None language LANG_RUSSIAN filetype None sublanguage SUBLANG_RUSSIAN offset 0x00032258 size 0x0000000b
name None language LANG_RUSSIAN filetype None sublanguage SUBLANG_RUSSIAN offset 0x00032258 size 0x0000000b
在文件系统上创建可执行文件 (1 个事件)
file C:\ProgramData\Mozilla\iqbjnwa.exe
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (2 个事件)
section {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x0002cd4a', 'size_of_data': '0x0002ce00', 'entropy': 7.607183754495536} entropy 7.607183754495536 description 发现高熵的节
entropy 0.9373368146214099 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 57 个反病毒引擎识别为恶意 (50 out of 57 个事件)
ALYac Trojan.Lethic.Gen.11
APEX Malicious
AVG Win32:Gepys-A [Trj]
Acronis suspicious
Ad-Aware Trojan.Lethic.Gen.11
AhnLab-V3 Win-Trojan/Cerber.Gen
Antiy-AVL Trojan/Win32.ShipUp
Arcabit Trojan.Lethic.Gen.11
Avast Win32:Gepys-A [Trj]
Avira TR/Drop.Gepys.aouie
Baidu Win32.Trojan.Agent.eq
BitDefender Trojan.Lethic.Gen.11
CAT-QuickHeal TrojanPWS.Zbot.Y
CMC Trojan.Win32.ShipUp!O
Comodo TrojWare.Win32.Kryptik.AYQE@4wlbfl
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.131fd8
Cylance Unsafe
Cyren W32/Zbot.JC.gen!Eldorado
DrWeb Trojan.Redirect.140
ESET-NOD32 Win32/Agent.UNQ
Emsisoft Trojan.Lethic.Gen.11 (B)
Endgame malicious (high confidence)
F-Prot W32/Zbot.JC.gen!Eldorado
F-Secure Trojan.TR/Drop.Gepys.aouie
FireEye Generic.mg.6a9f69b131fd87a9
Fortinet W32/Agent.UNQ!tr
GData Trojan.Lethic.Gen.11
Ikarus Trojan-Dropper.Win32.Gepys
Invincea heuristic
Jiangmin Trojan/Generic.avutd
K7AntiVirus Trojan ( 0042f5741 )
K7GW Trojan ( 0042f5741 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=80)
Malwarebytes Trojan.Dropper
McAfee Generic-FAGO!6A9F69B131FD
McAfee-GW-Edition BehavesLike.Win32.Ransomware.dc
MicroWorld-eScan Trojan.Lethic.Gen.11
Microsoft TrojanDropper:Win32/Gepys.A
NANO-Antivirus Trojan.Win32.ShipUp.bxnqwe
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM20.1.4239.Malware.Gen
Rising Trojan.Kryptik!1.AB8B (CLASSIC)
SUPERAntiSpyware Trojan.Agent/Gen-Dropper
SentinelOne DFI - Malicious PE
Sophos Troj/Gyepis-A
Symantec Packed.Generic.459
TotalDefense Win32/Gepys.QQDIEND
Trapmine malicious.high.ml.score
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2013-04-15 22:27:43

PE Imphash

a5172bde6137239cca0773f01db5a84b

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0002cd4a 0x0002ce00 7.607183754495536
.rdata 0x0002e000 0x0000254c 0x00002600 5.603559595805031
.data 0x00031000 0x000000f8 0x00000200 1.7160292194810391
.rsrc 0x00032000 0x00028790 0x00000800 2.7662221211897924

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000320d0 0x00000188 LANG_RUSSIAN SUBLANG_RUSSIAN None
None 0x00032258 0x0000000b LANG_RUSSIAN SUBLANG_RUSSIAN None
None 0x00032258 0x0000000b LANG_RUSSIAN SUBLANG_RUSSIAN None

Imports

Library KERNEL32.dll:
• 0x42e108 InterlockedExchange
• 0x42e118 LoadLibraryA
• 0x42e11c LoadLibraryW
• 0x42e120 LoadResource
• 0x42e124 LocalAlloc
• 0x42e128 LocalFree
• 0x42e12c LockResource
• 0x42e130 MulDiv
• 0x42e134 MultiByteToWideChar
• 0x42e138 OutputDebugStringA
• 0x42e13c OutputDebugStringW
• 0x42e144 RaiseException
• 0x42e14c HeapReAlloc
• 0x42e158 SizeofResource
• 0x42e15c Sleep
• 0x42e160 TerminateProcess
• 0x42e164 TlsAlloc
• 0x42e168 TlsFree
• 0x42e16c TlsGetValue
• 0x42e170 TlsSetValue
• 0x42e178 VirtualFree
• 0x42e17c VirtualProtect
• 0x42e180 VirtualQuery
• 0x42e184 WriteFile
• 0x42e188 lstrcmpW
• 0x42e18c lstrcmpiW
• 0x42e190 lstrcpyW
• 0x42e194 lstrcpynW
• 0x42e198 lstrlenW
• 0x42e19c HeapFree
• 0x42e1a0 HeapDestroy
• 0x42e1a4 HeapCreate
• 0x42e1a8 HeapAlloc
• 0x42e1ac GlobalUnlock
• 0x42e1b0 GlobalReAlloc
• 0x42e1b4 GlobalLock
• 0x42e1b8 GlobalFree
• 0x42e1bc GlobalAlloc
• 0x42e1c4 GetVersionExW
• 0x42e1c8 GetVersionExA
• 0x42e1cc GetVersion
• 0x42e1d8 GetSystemInfo
• 0x42e1dc GetSystemDirectoryW
• 0x42e1e0 GetStartupInfoW
• 0x42e1e4 GetProcessHeap
• 0x42e1e8 GetProcAddress
• 0x42e1ec GetModuleHandleW
• 0x42e1f0 GetModuleFileNameW
• 0x42e1f4 GetLongPathNameW
• 0x42e1f8 GetLocaleInfoW
• 0x42e1fc GetLastError
• 0x42e200 GetFullPathNameW
• 0x42e204 GetFileTime
• 0x42e208 GetFileSize
• 0x42e20c GetFileAttributesW
• 0x42e210 GetCurrentThreadId
• 0x42e214 GetCurrentProcessId
• 0x42e218 GetCurrentProcess
• 0x42e220 GetCommandLineW
• 0x42e224 GetAtomNameW
• 0x42e228 FreeLibrary
• 0x42e22c FormatMessageW
• 0x42e234 FindResourceW
• 0x42e238 FindNextFileW
• 0x42e23c FindFirstFileW
• 0x42e240 FindClose
• 0x42e244 FindAtomW
• 0x42e250 DeleteFileW
• 0x42e258 DeleteAtom
• 0x42e25c CreateProcessW
• 0x42e260 CreateFileW
• 0x42e264 CreateDirectoryW
• 0x42e268 CompareStringW
• 0x42e26c CloseHandle
• 0x42e270 AddAtomW
• 0x42e274 VirtualAlloc
• 0x42e278 ReadFile
• 0x42e27c lstrcatA
• 0x42e280 GetSystemDirectoryA
• 0x42e284 CreateFileA
• 0x42e288 GetTickCount
• 0x42e28c GetModuleHandleA
• 0x42e290 GetCommandLineA
• 0x42e294 SetLastError
• 0x42e298 ExitProcess
Library USER32.dll:
• 0x42e2a0 GetClientRect
• 0x42e2a4 GetCursorPos
• 0x42e2a8 GetDesktopWindow
• 0x42e2ac GetDlgCtrlID
• 0x42e2b0 GetDlgItem
• 0x42e2b4 GetDoubleClickTime
• 0x42e2b8 GetFocus
• 0x42e2bc GetForegroundWindow
• 0x42e2c0 GetIconInfo
• 0x42e2c4 GetKeyState
• 0x42e2c8 GetMenu
• 0x42e2cc GetMenuItemCount
• 0x42e2d0 GetMenuItemID
• 0x42e2d4 GetMenuItemInfoW
• 0x42e2d8 GetMenuState
• 0x42e2dc GetMenuStringW
• 0x42e2e0 GetMessagePos
• 0x42e2e4 GetMessageTime
• 0x42e2e8 GetMonitorInfoW
• 0x42e2ec GetNextDlgTabItem
• 0x42e2f0 GetParent
• 0x42e2f4 GetSubMenu
• 0x42e2f8 GetSysColor
• 0x42e2fc GetSysColorBrush
• 0x42e300 GetSystemMenu
• 0x42e304 GetWindow
• 0x42e308 GetWindowLongA
• 0x42e30c GetWindowLongW
• 0x42e310 GetWindowPlacement
• 0x42e314 GetWindowRect
• 0x42e31c GetWindowTextW
• 0x42e324 GrayStringW
• 0x42e328 InflateRect
• 0x42e32c InsertMenuW
• 0x42e330 IntersectRect
• 0x42e334 InvalidateRect
• 0x42e338 InvalidateRgn
• 0x42e33c IsChild
• 0x42e340 IsIconic
• 0x42e344 IsMenu
• 0x42e348 IsRectEmpty
• 0x42e34c IsWindow
• 0x42e350 IsWindowEnabled
• 0x42e354 IsWindowVisible
• 0x42e358 IsZoomed
• 0x42e35c KillTimer
• 0x42e360 LoadAcceleratorsW
• 0x42e364 LoadCursorW
• 0x42e368 LoadImageW
• 0x42e36c LoadMenuW
• 0x42e370 LoadStringW
• 0x42e374 MapWindowPoints
• 0x42e378 MessageBeep
• 0x42e37c MessageBoxW
• 0x42e380 ModifyMenuW
• 0x42e384 MonitorFromPoint
• 0x42e388 MoveWindow
• 0x42e38c NotifyWinEvent
• 0x42e390 OffsetRect
• 0x42e394 PeekMessageW
• 0x42e398 PostMessageA
• 0x42e39c PostMessageW
• 0x42e3a0 PtInRect
• 0x42e3a4 RedrawWindow
• 0x42e3a8 RegisterClassExW
• 0x42e3b0 ReleaseCapture
• 0x42e3b4 ScreenToClient
• 0x42e3b8 SendMessageA
• 0x42e3bc SendMessageTimeoutW
• 0x42e3c0 SendMessageW
• 0x42e3c4 SetActiveWindow
• 0x42e3c8 SetCapture
• 0x42e3cc SetClipboardViewer
• 0x42e3d0 SetCursor
• 0x42e3d4 SetFocus
• 0x42e3d8 SetForegroundWindow
• 0x42e3dc SetMenuDefaultItem
• 0x42e3e0 SetMenuItemInfoW
• 0x42e3e4 SetParent
• 0x42e3e8 SetRect
• 0x42e3ec SetRectEmpty
• 0x42e3f0 SetTimer
• 0x42e3f4 SetWindowLongA
• 0x42e3f8 SetWindowLongW
• 0x42e3fc SetWindowPlacement
• 0x42e400 SetWindowPos
• 0x42e404 SetWindowRgn
• 0x42e408 SetWindowTextW
• 0x42e40c SetWindowsHookExW
• 0x42e418 TabbedTextOutW
• 0x42e41c TrackPopupMenuEx
• 0x42e424 UnhookWindowsHookEx
• 0x42e428 UnionRect
• 0x42e42c WinHelpW
• 0x42e430 wsprintfW
• 0x42e434 GetClassLongW
• 0x42e438 GetClassInfoW
• 0x42e43c GetClassInfoExW
• 0x42e440 GetCapture
• 0x42e444 FindWindowExW
• 0x42e448 FillRect
• 0x42e44c EqualRect
• 0x42e450 EnumThreadWindows
• 0x42e454 EnumChildWindows
• 0x42e458 EndDeferWindowPos
• 0x42e45c EnableWindow
• 0x42e460 EnableMenuItem
• 0x42e464 DrawTextW
• 0x42e468 DrawIconEx
• 0x42e46c DrawFrameControl
• 0x42e470 DrawFocusRect
• 0x42e474 DrawEdge
• 0x42e478 DestroyWindow
• 0x42e47c DestroyMenu
• 0x42e480 DestroyIcon
• 0x42e488 DeleteMenu
• 0x42e48c DeferWindowPos
• 0x42e490 DefWindowProcW
• 0x42e494 CreateWindowExW
• 0x42e498 CreatePopupMenu
• 0x42e49c CreateIconIndirect
• 0x42e4a4 CopyRect
• 0x42e4a8 CopyImage
• 0x42e4ac CopyIcon
• 0x42e4b0 ClientToScreen
• 0x42e4b8 CharUpperW
• 0x42e4bc CharNextW
• 0x42e4c0 CharLowerW
• 0x42e4c8 CallWindowProcW
• 0x42e4cc CallNextHookEx
• 0x42e4d0 BringWindowToTop
• 0x42e4d4 BeginDeferWindowPos
• 0x42e4d8 AppendMenuW
• 0x42e4dc AdjustWindowRectEx
• 0x42e4e0 LoadIconW
• 0x42e4e4 UpdateWindow
• 0x42e4e8 TranslateMessage
• 0x42e4ec ShowWindow
• 0x42e4f0 SetMenu
• 0x42e4f4 ReleaseDC
• 0x42e4f8 RegisterClassExA
• 0x42e4fc PostQuitMessage
• 0x42e500 LoadMenuA
• 0x42e504 LoadIconA
• 0x42e508 LoadCursorA
• 0x42e50c LoadBitmapA
• 0x42e510 GetSystemMetrics
• 0x42e514 GetMessageA
• 0x42e518 GetDC
• 0x42e51c EndPaint
• 0x42e520 DispatchMessageA
• 0x42e524 DefWindowProcA
• 0x42e528 CreateWindowExA
• 0x42e52c BeginPaint
• 0x42e530 GetClassNameW
Library GDI32.dll:
• 0x42e03c Escape
• 0x42e040 ExtTextOutA
• 0x42e044 ExtTextOutW
• 0x42e048 FillRgn
• 0x42e04c GetBrushOrgEx
• 0x42e050 GetDIBits
• 0x42e054 GetDeviceCaps
• 0x42e058 GetLayout
• 0x42e05c GetObjectA
• 0x42e060 GetObjectW
• 0x42e064 GetPixel
• 0x42e068 GetStockObject
• 0x42e070 GetTextMetricsW
• 0x42e074 LPtoDP
• 0x42e078 OffsetRgn
• 0x42e07c DeleteObject
• 0x42e080 PlayEnhMetaFile
• 0x42e084 PtInRegion
• 0x42e088 PtVisible
• 0x42e08c RealizePalette
• 0x42e090 RectVisible
• 0x42e094 SelectPalette
• 0x42e098 SetBkColor
• 0x42e09c SetBkMode
• 0x42e0a0 SetBrushOrgEx
• 0x42e0a4 SetLayout
• 0x42e0a8 SetStretchBltMode
• 0x42e0ac SetTextAlign
• 0x42e0b0 SetTextColor
• 0x42e0b4 StretchBlt
• 0x42e0b8 StretchDIBits
• 0x42e0bc TextOutW
• 0x42e0c0 DeleteEnhMetaFile
• 0x42e0c4 CreateSolidBrush
• 0x42e0c8 CreateRectRgn
• 0x42e0cc CreatePolygonRgn
• 0x42e0d0 CreatePatternBrush
• 0x42e0d8 CreateFontIndirectW
• 0x42e0dc CreateDIBSection
• 0x42e0e8 SelectObject
• 0x42e0ec DeleteDC
• 0x42e0f0 CreateCompatibleDC
• 0x42e0f4 PatBlt
• 0x42e0f8 BitBlt
Library ADVAPI32.dll:
• 0x42e000 TraceEvent
• 0x42e004 RegisterTraceGuidsW
• 0x42e008 RegSetValueExW
• 0x42e00c RegQueryValueExW
• 0x42e010 RegQueryValueExA
• 0x42e014 RegOpenKeyExW
• 0x42e018 RegOpenKeyExA
• 0x42e01c RegCreateKeyExW
• 0x42e020 RegCloseKey
• 0x42e028 GetTraceEnableLevel
• 0x42e02c GetTraceEnableFlags
• 0x42e030 RegOpenKeyA
Library msvcrt.dll:
• 0x42e538 _CxxThrowException
• 0x42e53c _XcptFilter
• 0x42e540 __CxxFrameHandler
• 0x42e544 __RTDynamicCast
• 0x42e548 __argc
• 0x42e54c __dllonexit
• 0x42e550 __p__commode
• 0x42e554 __p__fmode
• 0x42e558 __set_app_type
• 0x42e55c __setusermatherr
• 0x42e560 __wargv
• 0x42e564 __wgetmainargs
• 0x42e568 _adjust_fdiv
• 0x42e56c _c_exit
• 0x42e570 _callnewh
• 0x42e574 _cexit
• 0x42e578 _controlfp
• 0x42e57c _except_handler3
• 0x42e580 _exit
• 0x42e584 _initterm
• 0x42e588 _iob
• 0x42e58c _itow
• 0x42e590 _ltow
• 0x42e594 _mbslen
• 0x42e598 _mbsnbcnt
• 0x42e59c _onexit
• 0x42e5a0 _purecall
• 0x42e5a4 _snwprintf
• 0x42e5a8 _ultow
• 0x42e5ac _vsnwprintf
• 0x42e5b0 _wcmdln
• 0x42e5b4 _wcsicmp
• 0x42e5b8 _wcsnicmp
• 0x42e5bc _wtoi
• 0x42e5c0 atoi
• 0x42e5c4 exit
• 0x42e5c8 free
• 0x42e5cc fwrite
• 0x42e5d0 iswspace
• 0x42e5d4 malloc
• 0x42e5d8 memmove
• 0x42e5dc qsort
• 0x42e5e0 realloc
• 0x42e5e4 strtol
• 0x42e5e8 swprintf
• 0x42e5ec swscanf
• 0x42e5f0 wcschr
• 0x42e5f4 wcscmp
• 0x42e5f8 wcscpy
• 0x42e5fc wcslen
• 0x42e600 wcsncmp
• 0x42e604 wcsncpy
• 0x42e608 wcsrchr
• 0x42e60c wcsstr
• 0x42e610 wcstol
• 0x42e614 wcstoul
L!This program cannot be run in DOS mode.
?KQKQKQBqQl;*BQKP
JQKQJQU
JQUJQRichKQ
`.rdata
@.data
Project_Class
jdjZj(u
BUTTON
]U]U@E
]U]UQE
]UQEPh(
lUR\Ph
sjPpQ
3_^[]U
n2^222
0V00c062
F3e3E4
5$5O5h5`5
616#6]6u6i6{6666\7*w7Ci7n
7]77777w
88N8~8|8:8L8;
fPqA`ea
6sd.prSkEJ
6sd.prSkE*
ViqtkA
fMglsnwW
-fP qA
&sd>pr
`t~A}c
ab{e]tF[w
:sp3~o
fPqeZe
e ""xg
Wi[%q/{d'DyVdLdDsV<mo
>H|kH
+~jC]Q]K
u2pXJ&C
Ir*+M1O+
[y\/.&>[nq
i:M"Q
|0SK19Q$5
y)j/tp
;hEmEH
/#$y,rB
9x)wR^GY~7z
$\;v<b&X~A
b)Wgfd2/B\
xOxGx9
`b@K_HO
nR)ikM
hW\kqu
tebC]cU
\|{TEP
3*z_h|'b@_n'zow
jzv]n`
0%b,\D
;k98Ad
3CVc)[9
IAj;|S+E
5||F\U
yBPy>BmtUt
wI%5BhRsV
)xoT=bx
\W'gPfBjy
mdDwellG
L5]/E'pv
Ti`2|3%%pv
Bb7iS|M
F_RxKj4E
n)@FH\B)
B9]|n)cgG
D9nGv'
wr}X _1m&
! rx?Pg-!oE
4y7BR~_
\lC&.P$
r9'&OE|[
@tB~IBb
bsNf)Q
Qr"OBU!
TC4siD
.pdOf!Q
yRhuwux
wnN=WWh
p{bLM?k
/m5{w_
o/}N#+@Nfwg
VfLvLJ
KL_\!)
y*.kf>7
Zi]KvYc
Bipipin
R0p[M^0|_
V,eM ^R!+J
Oj$5iu
sjq|M0
0ikx@g~b^
.ikxM#j
Ku6xtp9
l96K1.D
"y`6W#1#
^y_![8
yS"6isz
3/wZ?$F@La
KN+{^HMoj
ccHn_X.CH
gQ-Yl[
V;x){lV
of0g'@h
wNoEwS{C
/p9wVj$
iA~+0t
i~_{,$f
JrCaC.
B<kv?(4
4jbS@-
9z)Vxn
iMO73'D
3wR$:uS
-q2t%$
[V(0x37cx64D;c
(zUO=T
VB^c@Ko^$
&%%NoN=
i,K^x[
rth+1hC
SG%)riiI
C.]CbgOCUs
y(KV~(
k:6/}D
kFb[Wz
0bf,pa
PUP'z*
>b@]tqB~:b@]t#g
O"G7#g
L?iVib
KC$c52
=7OkX4
6+u4VZ
reQK2g
LBMOyaj
8E;jc@[UoR
{[W5%Y
K`u4{AVs
w0<UcM%_WZ
CS y|j
t,qF/x-n
qc28n_
E bj1
T}rp3wWQ
x>Pllr+W
f#dY`? i^%@]1
i1M{^~
p'aj-\
Z-VS14
!{M71&
n\Q]WP
[tb)Yf+2t
3RNUXvf
X2;9S37-#Z
8~^O;=sp[
6dW\37
-TJ;aaU)$S
U.JhEXIYr*
ba.$J'k-,^`
c|TV!X-
H^X)EW
nqi+VobPp2
</}Z@u
5/&%"#q
2x<Yy$y$Vy$
jgp<\^-((J^
lK.rET
0a~2C"Z(,x-%by
a7JxS/
")YBc)Y
9^mvMc'h
TvKyeh,
pE_vL-
@@i)Y+!CB
V>g=4AG
$US4)->RvR
]UlgIr
^UESh)B
e_E/h.
CJV%i3K
I`iDhSR
@|2%eH|2%>'T
WEDh9P
Cyc2xuDH&
zJlg'&
c)Y]hO
bEV=a
(^I9]Cq
P7ir?\
a?N2rD=
*J]aJM
z=a>>"$=y?-
I1Cr>M
rDiEKM[
DjU`bW
,@a$&$@Y6Nw
XDvSQ-l~C
|sI1KbRYmC
H*6Qb46
)@[qM<i
]uW'2S
b;Ng+c8
I\X)LYHUyImE
4v@0& $;3u-
8yqHwKX
I0C10C
0CJ0DP
d^TT*Ux#
Yc@K<V
dAq+Ke?i},
ie@?!)+KxB
|2Z3]qKyX}
01K7iqHs:L.i/y
`?Ab?$Z>
DVf@_luVgA
cIb`m.
kfMblOrd~uuTn<l
dV>cL]
}</a&}c@
Hdt%H+)*
Pmp:i!FCz
@:tJ-+u
G`~/X;
(_0im-o>
(9(_%0yq@"zd
nK.jb{
IY^g/^
PFc@:u2.
+h&=2H
bmEyR)
$Rkg!i
Mp=3E[~
6.&q?\z/q88
9&>>q[.z`;
e3kV-SxM+
L[LNf8$$
t)v~1nZ#K
Ad9#Ug
D1`xypu
-S5>5A;
4QtBY^
Vauh}:u/
lyq]|M2^uPf{yiH
O?BFY8
O( wt1c
z`uY}a
wZgCL^j['
u`Qz-jfx
{FrBRVQ
}O]uF2
Ft1"y"
UMRSEbqB
o'g??~hYk\9hUybV
S|l>6m*:atq-+P=
#{IRtk>6)
!'Sz\'QkWC
!Ojf(lL:
|Dt)r5
stqocda
stqocda
stqocd
rL67cW
h&$&B@UZ
P2I??G?O?G???G???86(
7(&86`
btpordf~
J^4Z_Omo?%LSD5
UtM2gy)
[.5p%`N
M:L|D*#>-!:{t
)\joiQ
vP7.>`
(J_O(F}ONt@
4Wj(Y!g
|3Rl~c2F
eipdu0U}
8x],xb
~Z5CM2x3_
z:b:~@IOjxGa
2$Gsw]
]yv#pV>
Tu[uMhyg
h]<[Ux
h1[8|gKT
:xPJ*Fb[V']'L
uGT[pYT
qy1uUi
07`gaGbg<
ql!ca[
zsCN2
sTWm[gq
[W@V;F
]!k3#aE9
w%ais)
%p\3y$%~F^}#j
2SEBQ>X^M^\.m!
U:mXY]0
SZE=xOH M
uSsDLK
.P>(b'
q\Q'YP^QN
n!AcVYdPW
>%!)EQ
HTZTj{
[K^0?Un0
u~4]lIY0T.IT&1T>##%tV
Lqq#.m
qmgN> !Di
k%zuY-
X"9n04
Rv~n,x{
G|zJJU
?E+OVi
x4WhEY!.yMd
mE5&_,omw
o]~aT)ltU+Pho_}~qTuI-)ltUO-rxydS
~~tR|9{W
C{VGXeCOQ+QB
H#J@)|
?v?v?v|AvlAv
KK<#Ku,'ZwMe\+JMUL/ZME3JM5
_%{Mn^
RzLQzLQz,Q}z,:Qmz
M*QMzM2Q=z
!ry=rSy)rCy5rSy-.yi
mH[I\|2
w[m-N?
v,+u^|
\1WUyZu
XYyD:E@1
t-HtWYy;:@
P_qFmF0
[{-JK^(Q2
'"-l0]
1(+R`
[Qj{Xd
]W[[u
p2~R0eUk^;1l}
os<N~
-Uu(Uu
oO%F|-o!
l~m%,mf
~5Bkns7i5r
a^QsbL
PH~jPqVAe
j.SJ*M
NkBg$k
BkyHV??oy
b!@r!@Q
k?CPOYT
X@6#\.;\&
5qt[8P
D~Dqgs}bW}
aSnFamw
dr3nQ@
s"NbO-VK
mxsGq%
^s\hZn
9=E(5E%UuTP`
'Wu<P`
(]eeD\i
m{dargrcsy
dvpnlpa
wfwszk
Np~db8f~dzbs
{hatlcadbm
_CW+/3
y-159=ma
iym]qaueyi]MaQeUimIEA]
ypSvt^r|xbNlfjtJfxdNblhR~p\VZdzVhT~R\X.`LT`jXDnLHrP<v:D
@,&*4@
),04iqYeu\aia]]eyaIuEMqYQmMUIQyE
}AI==Ai%m9q-u)1
92#=6'
&7*;#.?K
u^OiBSmFWeY]]AyEuIQMQUYy}uqmmiieeaa]}YyUuQqMMIIEMFAIB=E^9aZ5U1Q--))%)5
TmRo]Ns'S
p#0mle
]uunx5f1{3
1p@j@@
w'F'X'('H'
''2'2'
'z}'u'm'<e' ]'DU'M'"E'
/k'3['Z'{&S&I{&d&|&t&sl&/\&M|&;&z&z&j&
\&Z&a]&#&
&s`&`&%`&A`&
N?NUNkN>q>s>>{>o>>
HKHHHH
I_G=GIIIIII
C@otWwlO
eW@G][pY
/Ca,Ea7
1aS3vO
u_}FQz~}L
&SO\du?b`VU_:7
fCt}a^iuC
P@NN2%~l
WqdX`iEC
^o*Qc(~e
qnqtocur{r
|cBMsNse/
{{avwo@
s{al}reW
ROwsfdCFes7A
C@otOwn
^kSSCp
7]TS+p
"(p#Rp'(s
RA\Si7WeL3CV/Y
^39vl+
YnBya/he
KOouaYnxqn8
Oofynryahe
HYnryaohe(~ou
9fy{l6 .7~
}qpKt;
|ufvf\
lMtBbrU|Pre
BvhULlWR-xQftKtFKbe@.
Kt'~aDze
dVd[Mi`U
-MWF1eTEiZ
fy`ou{va|P|]%
&KT@RFP>
ZVe'fe
Flh~lD
Fl(ut}~u.
_z_S>Dagu
Flx`e~
Rfeyy{c`vIu`ef|t_
fLet/~do@0
st>et/do 0
uCbrt=
9kuaJWrCIcCGeHo\.
rrtWGE`E[QUUOE[M
Z[`wwW
uH>u(R{J
B[@:[@2[@j[@b[@Z[@R[@Z@Z@zZ@
w????au
d2d2d2
aze~i(|m
@q Du,Hy
A0TE<XI
O?3C7G;;
2 2 2 2 2 2 2
du`ylmhqTP\x
D0@4L(H<4 0
O?oCoCoCyyyyyyV}V}u}u}u}1u1A
UyM"QGS4^#)=
sK;bRn|t'q
'Y-czrV
m("XD5s !|jU
I_(TS~D
j`U<h.j5T^A
%S-@p=
T$Pxc,A"
xt7$VFGh
Pkg'YVn?dQs
sj>e]
sjfJ0(\e'.O8s
NqI2xZK!
:[]aC[.!
s?IIC%GX2H
f<;z$~UZ
^I7`,y
_)SG{4
AP50}F
=HY[;
f5b|EPQ
&o9b2&
/RKWU20<.H{J>]YK
#c0?z4
4@33AB[5g
g(uM@jf
k$j)og
>JWq28
<mwf:RM"
DV&yf
@;[A7\
f;/$V+=
{v{<Bia+
s?e5N,{uuP
V>IM_>dW
T5"fYY
;ByXYg
aW1^u.
$_aEv.J
0yLeP0
^8|SW-,2<7m0<uD
}e&pfMBD4q<
ppvaf\MTkp
Cp_ ;I
r3W.KW
_!erS!1*
!;@Uv!Y
qgQ!^ [b
~[ukx7Z
wfGs{J
@tY8fvM
X?=VP>t
=\0eupR
<~i^vr=VJ
ZaD;:x_2
07]gdp
4zPIwvYk!iK)1
8(:3ow
q:"Bp-k
nN~G^o
w *{(1
N>e47K4;F>i.
JCJJR$
vtD*5_VMRp=
D_u~4\OP
mzo#dJ
Z_J/r(
4?xdD#I
gg5({|
-\W8bfh
$A3m`s"7II*;@p
^1~]I8}(
2KaF ,
45=CY#
%to$]1>^q
:FK3wa
WJ|TG+U.
88V{K];JSDo!&
fUht'8
hI{g Yq
uxuMFF
IyQ?mG
'^z~q?
#h3B1A6
Gw?h? PS0{/^
M.}|mn-LU
bB1/f5^
f0m;e,5
v@4%OFs
k1MMjqy
UIdts``3
UQ,4MF
M0/oFRI
7J^/8qz
@Xxjf&jfpS
5r%(N5
zZG}$o
I: iL/
Wy~j$Z~
:Jmo+6jpJxu
bg)VKTwE
;2~j7pI
]G@loI
@<2I)xnf
-pNc@C
m(yf'}
rL:34-q\UZ
l]>bFor
q:S'b";
5 WUtr
P%daV[Y0
x2BdK*
>$VXv*9IZ6d
iy5gX5
;Lh|:tY
UvxB.u#
)W1U5L
Q?=c|J(--
u!DU[4
Iu4531
shn(Hk}SUPH_
$=g9PeE
cbw: X
hWG^n=b+
GUaPW#\
Yv9Pdf
7m9`b9W3=5(A#*.}I)
mWjD1W
Pz*:ILF
=F=boE
>KhyE3}
Z [JUiIF
=?Cg?Dd
F/VY_n
XzBIt~CD~
~wPD4|?).
&Y?0TS
Xq_I"^C0
{09eFb
z5nZ*
4c=WcQ]
|XT@
~ $FOaNKM8\e
!}-.;v
6xH69W
>BF02X57jc0
b&k BQ'Ll\
=#aoaNev7mej6
~:0K%k(!GgN{
_2yr"}V1
k)ZOD;G1.f%
"bZ}RP
iG\sS[M`
FwxlLJ
$x/q8?@t(z%
;;MX`~u?-
B\/$=n
fGLLe6
K2h*r_0
b3*uB1=
/FdP/\
a,mwjk%[
,6b>V}>
!JBUwlO
B&#I6b7
<5cr,0NqwJ
opACVe
pm,xc|
RX[x7'*b
l"5DKbf53
.~:UmQ1P_
K5K"i]
bM)X6&W
=Z63]_*
&& }`HU|;
Cu!KimCR&1
(Y1B22x8
IMAlmc
!I;U\H
@pq:MC
lc_9:V)
"JGn=@L
7otY (JYCaff
9b;oCz
Jmx</0`^
uW^0:%9/]{j\
.{.`NY
8X/&*r
=*tk\Pty+eE#
$y+nV&
WD((-m
<ucqw7[
wcW:K>Z
I7-{]5M|t
DH~j-N
Qc4cRjV
6ePd=1x
@ln#Z/{AEY`t6
5/LSI@{gC
>_FxMJhX
Dx g"!
%x_eu6D
OyvY^,G
0f(:<T
5{@x/$c/;
&A0F[Oe:
EtY#e
J4_}1.G1yy\3
)z|KRP
>K8N_1)`
VM4?T`
dFnPAl
3wJ&fn
?i>~q4
y8f/F"vi!
fLl~2w
Te5/|3Y
p)S[N.
e@G')E)K2
&*'NHFo0
JNxf1!e
sz=>Dfl[6WS
%86X?VcZCD
T+Bogq
2H0FlI
Oqz15(L`
H^P_9VAi
YVR"OAG
eJ27c5
KLe[zezs
iN&LDlE
Z7d8MQ<g
N`cb7<~
d)BobJ
#4u-n'
n<34U^aGP-x#&F
t!yhQXI
a$& 3JSmUxhA
L}Fp6#;hY9E
xMTn/J
rqyY[($m<E
c{TK~t
Q8P3bc
T 4e\4S2Vh3y
}t@a_d
0cX$[?
ND Br_
v#J\*[YwnapC
u^:Lk'DY
[a\Oj<n3gE
>mCeQ,n8B
[zeSo^BC
VDm-v;
CMRi;])
nyL&oONl@Yga{X
n|\DyS
fL)N 1Rz
7J8:%4
^]!SLMs]'Q
.~U^-}<
b=oi] |
T|l,Ut
yhX+1>J
Ll`3Y}
SoiP!u8PE
#t%#Z>;H
2|: :8r
+8*<aK A%th7y
s!XM=\
x7v)u"u|<
6ZYJC[
*cXjvR
8?8K'6+
(~G.KzlG
0r$&Rz
&t[mXM
_Bh[Yq!R^
0YqHpX
U*F}45&/
^&rrTO
:ru@';H
WqC,bqA@1~YfyJOY
@?]iwQ
&@seO-Gg/6
/O&JE[
{Al)@p=0*~E[\
Xc-.~fW
rb~+/#e4F?I
[o}9&tr\
42v'ZT
%/I)VD)T9%k
*"y@O:S]urf
K$IFuOS
(@]w{n
<6BUw|^
6&[|zs
BTy~)Qi
4v(g[oV
I{zU1N`o
SprW}``se
suOVcQ
bBCt>s)
.X0m&)
Z2]] ,
)eS#P,N
Y`$\Q-
7X..]'
&UHmEY.I
19JCpK
3;0t%w
~*~(/o;BBxm()IFPYV
lQjhX
!z 9A9-*
$5UNBK1N5 ?o.n)hy/kLy
">Cr$?~U
skv9_Tsp4|
cPj.O8
jMgqFG
9)0LI}
EE9}87#\~=1v-Ne't
ul%A6),
YWeq.A2
<l9`8.O]Gp
ZCVF%T
5Sq~NB */wgpe
$.tkX6;Gp
-@:J=7
J[JWgP{Y
R/8"Rbt7B
@Pd.U)VJ
ywYaD1
u;FbR;Yk
i!r6sUu
T?jhVQ|
g]a]ZnW99
j^+e.,n
XJ$n%9w%q
>S*`Ez
-IT!Ja
7Z=u9!OVB1.&
&0_L_[
!9P(?{
0"iZaK/@|}fpxx1QJh
:CO/)}*
V0UdT(
h\p\i
t-Q=)g67
kG`Jl'ro
t%o|ZR
R+Kgz#,S
COZ'e L 1
6#RSKn
BS?(]Xhz>$T&CwF_O
>-!.0vL8
>@$D&"9@YX3ncl
3pIG~r
R8L-TkM
,~m\fK
K>G&ko4
^H12x ,^+
?9)d\Ru@
35ZE'o:
%.c?y<i@$ivz#M
H9Y|D`0H
&T#lV7h
c%HR)l^on
~gl(n q-N>
\(E*MD=&,I40
hdc6`}!%/h(S|
A_y2RWI9Qb
UYTgrmO/F<
0AnaAGG=bg
B$ieAxA|
YJY[-T
y|(8hN
Y=fX1an~.+
~oFvVNt
,MJ~E!k
z?"g4F1j
I82A4q
uy|V[V
3PEl3P
7c:3tY-U9
034bpm
$Jz$q'Qb
J3PnY`P1
)/cZHb3eOY&u2?
j)rH=z>4W
YvBmcsx:|8@
G9XNgfiVQ
X.}P>a
J!q/l:_<P
CQ&4:$N
)a:>U?2>e0}
!?e'$E'
Vks[bu\
(]|>;vt
[Gg,R4)
oz*u1L%
oCBO5}'3P5WA{0b6
:K1'#+Q
v8D|tCb3p8E<U
DP P~]l
ASa.rzW
J&,F`!C
;p/=s)7
B6"$fPk{
g^N gid:&
t^PzU{`
uwM)ery^ym
E~K3b1<hE
=q!1M+(
b)2p1$)
6u{/5s3
q''>bU"
@T@dxt
H7n >L
(FD#'aa
`~ bHY<
}rsn-d]
-;x[</
X-w8<9
*jv`+9_
i$#%Mx
4>CLu>
BC~e'M9*OjH7 BTi#t
dG!gziNd
CU(@rP
vM,v4$MAO
~Ua1JV`sKVH-a&
-IG6B@TT
I1aC(%=
)e+MO
^8PYDHg>a
+Hu7!=
.s{>@7Z'>R_1A9^j
(k`VW&T4}1) g:+
[4?|Bd}e
CAL[WG
0<%2$8<
kUq@!Bl hXY[a&[SQ
/]HJ8mf@mnz
Jo]!;/VBS<
6,H.(UDpo
BBtp|a
S6m{+
Y!>=a(H"Q:
zL+Jmn+
&Dx^mN=
<~&&WwJs[
!@Q3%ZX*
XMs/+h
[A}CMII&
m$c#Yp
p8T K`Y
*c]LxVJ
OnjU}=+%
-Wk+)>
{;:Q"CRGW0r5q
u<{^0|SIFG
VF2(J
x>@U{L
17E3[>A]
4z0nziPw
kyb,#|
2X%e;k|
Kpnav/g%E
hz9r0_
6@+kQ'@tiGu
Nm/q^F\#7
3uLJz9#
+]0M8x
.5_,fE
sO=fc'm
w@JNY[
A/K$eR
^l8.Q4V5
c27[fR@x^"!"
gZk;4_>HR
;!^Ks?Q}T%\kRvN!zte
)~-66X
%WwsI]JW-m
$`"}y=N85r1D
2$U0Cxc?DB
!N NpheV
Mh*/4UX
3{a+%F)L
4MnNn~s,
z%,2:qW
[e#ip-V
-iZ+J%
g!{^Ln"z{vJ9Tnl
@LRI55Ar
U=7*a!
|h0&EP`
DpMQ)A
4u6x =;^
Mc81;V
fnm3\:c
G(AFU:7'Xz@T5@'.Jrd[Tw)U
#9xg&N-{+v.K|[#_V)z 47dz/AIIn^
Ls\zOCHK
?mnKsT(
i.Ow,|
iJ*<77
<9wcgw
9<<NJA
Whf7q*O\*
Nu&:ar
_]n7#R35
2xriaY
\a0.#Xkwd1Y}Y
M8"n,
]r@lP,$
H+]dn^
Iq/r_AK9-"L
mml[*G~'Isf
gP"F<db7
E:>7j+
yk63_jF
D9xMX<m
zrM3Q<
Hn/G@j
4IzaF<
VVoq%@U}kSKw[g
rim~rH
w}gYB(
("P*$F2huU
b+JWZD?;
Kx;qGH<
7n$ml A
yE4HMz <
]1bTD0
"QaF_9
;:BZ^mx
4}Bmg$1z72?7=
VNS*SNt-m:g*J;|s;
3@pq:B
, 5~/[zc)x5,uGf9>
#evInTk5dvd
INrrH''\
:t 5Xz
FO8B5AV
:a|K_RR&_
%9eMXr`;\}):
BJl4t*k
5Os!uh
9`$}=9g
R-x,=c`;
W11-\N
+09-H}q~g
Un+ut%
Z"s#4B
r|$-MO
$A&9+
V2kG,7
liqBLs(:
6[2`&V
5{l+IL
w2A?D*?TgGn!g|
R:sw c
m$]GAsy?`*L<-
;s}_ wC6ZzA.,Sh
OtfH$U
\c4d6r
,_ s&5>]9>
p'ezacR^g
m$!Xwj&B'-
r]*u:`
)9`_f^
z &UjUe7
\{\!G*\A&
NA+avJp
@#[r`un<|r!t|4DC
tY7r2]Oc
wR{-}$I!'?)J!nx
8r(JIw
|EaF|S
2`W3:a
Q)51+-sy
8B\y}o
eXcK'X4m&B*0z2 +Le
b{xedYK@3D
aF DCr8
O#Bp*b
|*{</()B
k/zh\4b
&e>Lo
>/p`a;g764
_dz.6KT
/6Fp;o~
@JNb\i{S
q\t&9V\C^1
xQW~(Z2
#||TF!x~gh?+
aQ1#[t
2I+3h'
:WpN_^q0
IpdqSi88!1j)p
wmtAasb
U3;,/K
~xJN)vcG^ cpYC
F|+WE3Q
|zUp!e7
m3U~O|W
as{;j`
[#:cO{^
$wEqh0\
.7=EhsuAI:a
(eKgwKZ>*R(
j@T.~"^gg
~y-SiVD"
vsQ7^sDc
!#n$:*l
S QVxF5K
m/@xL_x#UuT@"qd+<K]
\vYo5iP
'@%@kw
%D30^>
z<!s@V
v.e^]I>@%=
X'Y!-#
@*`oKL
L&*D8I
If_-a:WiM
4QS@_E
t(XoNR{
$.+*D
s$>&H\IT\
e&\onq<<u
G}mDqmuXW
A>C8~8M
F^0m|`'y_ /\5`
Gza2Xqc;
`9v`TrY
2t.y0Xss/^nHQ
{9R4 MB*
iz.dGa;
4.&}&:v3xQ1
MIT%(+ ,
KK%?b2ieSv#[
>N](X@ :`UD
Ytk1[T
ur0+!]
Y8|Iv0(0:[q6
w;Yo:^
uN7H)tm-FF
=~U==90
o&Lo:r
A">eKS
e<dqQS
<OKDZTb
v%Orx$
0l@- x
L&iAqD^zr&e
._&1),p
IA@gq`MQL
r-J(>A
LlL;)rDm
xQp'h:z5
BNCu4&
[}?S8]
w]o@m`~
j*3k*)
~-S&A5NjrcW:m
i@lATL
_H-uZp
I{SJ-g}>
@GVRp#
f8HR0l
SZ[%(%>]
lW9DWNb
Cp<9@7]R!'l
5#kh\S*
mz a+N/
UIEZP&i~
V66JH~
*]ws>;
CH,1fBJ.c
6ld($F
leAE$3
\7zuu&
qakH.S1
lZU-9B
|&p]3r/h
0Vb9eptI6$:?g!
|77e5#
?/+EkOO
66-Yy1
GX@LSoI
Miw?/r-B
X3~@M8v
`M"4r\!QT1o6>
`zj_E78
O117sB
GveGHxMPD"b]
V_K6/`n<
IQzaYbUI
'Ir(~by,BzBhW
G\jQ"ggb
;dUcd <~[a
6\!l>!
zX;{<S#[`u6E
je!>{i
`uT6/Bj
cfJK9U=a84i*
S:jwKS
%VYsT}
C>|Pd{az
myp]%^A
_P>Itw-^z}
x0}T(yw:)d"b
5MT-PE
Bdb(SW
}chd[G3=d.TB
JB7Z,J
b?Z8&[
C]SfNgp
}a+J2:
X1IQ@/$WD
c.aZxb
%_xtW2
jM#auk
w}7Iu#M5meAk
yi0$Qf/.
6OuQi7
|JVJ;0&.
ci[SSw}ArDSW
bxTE2\X q
,(["(;
,n6AVO~YY/
vy96ok=Z
}UI rgQ1
pbA&~xXHyiG]
+Y+:}_vk?
^-3D75T8V
$ihMBl"-{!
i8:2r_F
!iLn2?
QlVN4|F'mCl6Y\:_2gH
1dc+.
p-}75z
DEozj<
6U#Q9Q
X-H6)7
}e!*s(
Sbrwr[E<
xb=,Tr
$|1Kpuqb
2B1@VW+W@$74
p2[>-0
la#,c2%!u=
)k.3D%Aa1
m6KN:sn1
\dsr~9{z
WB2xNfy+8YF
"B=ezfk?}k>FiyoLm
%W\KR,q
LQcjXzW:[|-
?$;987:TH_g/
n#6#oxj
]X(Hb.s
tlEDyU
>}Kqxp
o(&al6
gwkXVO
Xm2+,Rrz
'c:8+OZEOnHfgs
0P-zou0V
A9*8tHaQ*iBFe5S:(
(&cPJ/kI
8\,tXU
Jxy ~z,w
Ni<hpBf
v+.`F\
5e&4bP
jE#e-c
#Clk@98\p
8*IK)4Kq
IY-HMm.-e~4k5_
Yp;<8p7wI~JEwB<K(_
J)PzIYGW
zo#dvs.
g^B`E+M:
C8a%4xS
}n6<E/7mA%o
"+vT6\c/P;q
I*(*<O1
Ufr(}Q
~[|k]4
W=Yn@=xJX3">KD9
9=|_b>@\^JJw
"$J4QQm
ND(T'{Ot
t6U/1Wp ,tz
kzO]2.
^CEOZ?5>
e5O5S&
> f0<xJm~]E\O-
-T|A>$
~\a(z'd?
J@))S4
u'GMbb^q
ZY;{[8tFS
E<\}%5E4>nO?drhz"A
*lQ/(MjLh
o(&k2p
omK}p2B
`#L)uVK8
Rn/WYZ
NuWpBqy%
.G|%6hzd7n
3[:5iw"P
&&%fuNy<}{M>
x}K >.'volnd.XJ
?_'CPIa
C7]+5rG
_4E[f&
QDPC A@
VzF##=\yQ*v
q4#f!wWIjh8
7<u]5:;Pf
kaX:)|ud@y
h~%a6
GY,Js$
kOz3H3
\'Nz@U
{v;%;h
[3sR^Nw
ijh.J'
llRLr[
a|#fzV}<5
|ZY8)dOzN]^
_z69IF
uEORXrF
qB>$/g/X_u2
kwz<qJo
@[K=z^J
&DE_8gl@
BR-m"?VV
IbH3i"
e/]0&sDPRm{:v]`jK/*k
gmXP7O
a|FUQ
)FP`6x
p}BYAF
B&~PUhY
c>Xrd9Xbl
Oz OhO@
#:"lOD:.Oryq
'OEeY2:
%*mbMNG
,zHKt}L[1kJC
aRU\e&FLJ3{
(+./<-
[:T.glku]
bzCA_f_9y,o-
)pp#Ju@
%Z@iZa
<(Y~/;i 5
_ap}[b
PvR(K-<67
DjVD1lLC[yb
h[hgjRr#
rh0`ZC
c2_?{~M
Jy!8fP%
?G92S{dH(
]k[w5{51B
;!@R9/LG
H9xl(<?]0
-\'>P=+`
mibwejH(})G}msl
j`[Ckkp
37y/0>
l87%S"B5
{&D1RIc
6r6dTZ
W-F=Y+7%|'
Ya.-iOH6f
UmE}hD9
)p|i<]*
|Ek~0!
mO(k.Jcve\0
+,'L"l
Oyk'oNI
3}ePE
Eq{]mFl2
dcPdMcZ4
Iyk[`0
<7NijO)
"UnA2O=y3PF)
aJ ._;jqua
-f-"OFmGX.
}[w`wB8fW
+8dhR;g?X,KY
?hU[[w~
,W$Bu
2&Lw[)xhN
v_QF?7.
NkWhO;
jP&s?0A
^daFD?B
;-|+? |p'k]!M
+w:dFHNo]a
MT8Ii`,9O{/
#xSRJb
!GUn'[vZJ$m=4
/ER1_D>
+2qdOv
e2n9i&. `
7 rS$?eIl
#"XnKIWPN.
>=H15@
s;bZk}b
+\xg>'?K
%7hqK%Z
wR&q\=_"
KS@E}?j
yBL|Nq3h'
Hk>_;cSn
NFE/!rk70a,
W&ASi;
FS1uNl$_# -}
IQS*c{namY
VZ`*/
&xr.VIhy!
]f>l|'BL
0/V>)S
W$yE##
Y-~''k
7PU)?-\^ui
20-[W9
c5$%17
''qd1^&eq
$0}/;#aS
*qC\l.
} PeU%&\
0H=Ov_L
=o_:(f
uaFjN9
f)/r@688%
W ic[>wr,
[I4=2
i/@>cT*}G
y:]'0~H
^aWlZ(m,
]SE2RpQa6
6|{"4sV|;
"Fg^itL(
zDWDVam
78I8[m
b>HA3X:p
KqgO7@n
D;,5'-pf}uK3!)RzQN ]amqDrMf
Gu@C!(
1b_2?O
eFD^^!E1
A?~3@0[
F~VH.DF"[5~bDfz?)
6J^_o/2
Ky)w`*
\z'GNCLky8Q)$H
1}V4L?*1jx
(gzR/r6
-IrHA5H
U!^')z(qj
k)Cm|MV
28zbzLNr"U'_C
"$#mr+%
#64%[ze,0k
H.]KN4
=o\UgH
!nL:29d
Qzj0ogk
c?>'Mh/*s1
Z"LmR
Hit"\q
/Es!p& b
TZRH^?Y
^TEf)3o`1<&
+%f+uZaM^
_^GxQWau-!C
|:9li0=#~f
j[mVD)
t,"}3b
O%NBuBt
ZK(Pg}:@~X
-RoO?G;
rGDU^!kh
-*yk#y
d?U.R/V/
yVu*|*
D8G(m>LVt0
fUd%WNe.|sZ6
[Hlfe{|
*}_<d[
zWM{sw
0;>:I(w
ec+eJL
%iD,Rz7~
85h0j~!|V1
A,g.0
iWtyD/
pBA\}hV`[
h2ggf]2ID
40zeamgQHCT
_~dBeP
%Og?lv
*fcLzL1g
iV%;AGZ
~zkgqi#Ce
fTP|_ICD
w.<.0K
Odr|)a5nYd
G~]8mJ
)g)q7~p
rm8~_U
d>XnaP
@Nh9a
BjE)}w^
RB[ct,
-zY|y$
);>'8K
Y+qSjJ<~lP
$Xp}3V$Ba
:Pr',E
xj0c}0
o^yc,Vc5'%!
SKn}2B\.
v-Iv,H
@I?j@B 6@5
o$dZT:
danGr+[
eVc!m- >\DY>Vs
IJi/*c)
%efVU5
pxR@{"so+UUH)#7
PcJW85Y!bqKmKt;`Aa-ua
ysSs(t#l
-VHm;I
?4|Z_"+
|UXEw/
mQK#T[Z=
:XmHOZm
RcWo]f1
uU}>su
2Os.-63
72}n4@
C^lW|d
"Iu$hWj^{
7U~o;-9Xt-W!T
l+vi!1"<6
`x\i8o
jTnvUf
;p^%u+)'h
eqI:B)
Tsgl-n
`EeG]M
rab]b|Wix7
.fkFa^OV$u0
z/_AbX
3 f>_$sVrY*i
d&MHikA-
4R|zK^&M1,
=iuWY!n
6]YPvd 47
9xEq)G:uN[g7r-
Y6Cr144O!u?P
,IrHT>'
|cn&n[_9Wsk
q^2dvZ4Bim`+9
i(v2cUI
K2'$98.zC
ZKLO!-:
%r^?$6
"vvWiNvr:ZuP
X,eOn8
iXIM(d
uXl9um
3s3apf`;
EUIUf'Qk}'tOM<:
;TN r?@
cC/K>c
p3i3TJ
2!LT=u&4
1SUHF*
rT$/_H`eC
J>."Ek
o;uC{P
9h:ok\
&eTa1Kp
8@l^a6&
^^(axAB
"qOCqS
; iI8&(J$
u~:nq,<
nOa8Wd
y"\?#D!rO
Pt}&tM
qtNQ+V?%Dm
v@kZ=F
PC@k^-Sakp$WUya-
8C+1crs
y:l3UW{
u2>P&=h
Q`:'#`
QT&mWu
*_Ln cq^
I ~3gAn
K@w*Mm
."#+1eDoG
8X`$c8\LKNb[(9
fXdOg%D
I`W_#
8~;w*qV
|Yuy<kOGV
r#5MA7M
i#Dm<o
6u`ai]8.Big+
q85j(f
i`|Mgd
t;U~*0
Wv_s3m
]b%9`n
$@6u$S
A_]3L^
e{@X,]
5o=XQs^
|Rl$+oi
fGd4VcT^4|>9m
Lx:=Up[,Pr/
6Lx`Nn'L08
trjVa,o~^
&3s[r;j
Tc;8AaM
*/zqY&RB
VRU<"D[
cKM~ET6
L9l1oqDwC.N
|zK"i0O$
(ELJ;54I
qKP$*bm(bxcwU
XVw>iL
!efXLy
*&m7;d
?*x.|kY
)JoY+y5
vWl{dJ(
6?dml5kk
Eg\1~F9
tj;/U$,
%X)3<c
}b]Y!D0SF
`EtS6+"
W,mG1`d_
"c?3Sp\T
gHHvM(Q[2!
2Mt0o|wM"W
T[}4>g
g4:NFJ?L
+1ThlUAY;N
0XTJh$
NEI?=u
Td]h8/=}
mK&Z<P!
Ss6zPN
(G:SZHyys
MPJan'R
\a&{%O/v^L=
pQtnvn
>p2}O]e
4d6eaBURVG]OYjcG[:O
@s8wN][_&Y
Ic)*QzDr
~7Wv/H'L
UgDq5fYaB?a`0N
<0[|c[2
M\*'O^H
N`Zg:;,_
Tk,KvX(
pSRee\
{O[t4'qyDb
<sq@xmfRM
/9OTrtXU-
DQ+&jL$z87q
Cg<WGT{
{B+Z.l
_Xfcf+.b-<'9!
mB^CT5
e>db3nGMF
02sPSb0
woauv]
$l$V,?
q}%z:p'"mhC>
(eT34'4?
;IhA4'
i5xcM`lG|b
NMpWM~!k
UwV>I*Lry
@87(|m;
"1PGq6`
BqCa4
QORX *
Kt$;/,6L
w`5pb3|P
xf$5Uq
g\]GS}&g
\9G;)`
yFM8Erm
=`(+2-&Zr{E)
0A8"j:
V Q&YSJH
dUd&&MJZ
/%dQO2z
'2c60PTU
H4IrFWW?VU8PGkL3!NqUy</
Xh)S/=
:0R=9<_)
2w=aW(
?zq6v
mqTE 2P
YBcfE
UA$:9lXQ
NP#/kj
Z]%=p&cwXR
<jDT^Rz^8
h]B[NK#
Du;q^X{&aff%~
!PB.1l
:1_ S%-l^
+dKrmW
H%&mel`9z9|J3#^L
dl(e?N~JT
}3?`u!gXz4
a#>4{3
xj0J:cX
yWyh5j
=<uF#N
3ayiBF/P
D50?QQrPM%^0
Lb{YP2J
0aa96Hz}qV2,
F4oX3Qi
\i9CEF
G*~RMz$d~6:
KovF`:
BPKx3Fl]mi.L
I_1/*jXH
xFWW06a$
fQ`7{q<*
E[bGnjb
3#T&$9
W\^<mw
A]izo9uJ
:66m|*
uv7irA[
?1S[d$
BYZT`W#
+;!5-l
K\9Xm0*)&
h8n][P.(
0YK?n3
<{H1!"3
t8wIgS
Hv1d[7H}/
InuyI)Gc
KqVO<h 5]<H
L]gWQMHqM:mC
Qyg?4Q
kOI6EqskN\N
! ;L1GnNTPyQMA
Bw"\Mo
S3~[|>+i6
Fe{fALj
`axBZJC
^pkz k*#YY
h(P,@QShQ^z|{E
X~,R.OVE
=+VMv5{A
+"7` qXB3" [
p0551ZW
~yJ@?ym+
IeN%RC
)4S~a2
T'aYi/T
!(Zx4z`EHX0
:|.L1^Zof
+&d*I|
bv}bv}B|}B|}|}||
_H"r2j@RKg->:z
N#M!K&
|~kPaMzVFN`nj~
"jF7'B,4
6F|sg>G>O.
Ra;'NZY
{O1%3{?
S]!n!OWs
w!Ne)7AD
J5$88C$;
{O%oN%o6l
|e!002_
wpmHfM
w|k$ $
w$_w##
gJW^>}[~(
{~d[j~t
)iiiiii
F%"B6#L
*7N9=H"
PpQoJIRIUsW}!x
IxGYJgJcJaM
E*Fvf}yH
uvjooHnI
iO<[+Z!
XIG{?w7p/r'G`
jMueNu]
uZcf3c\vx#
oucQgt-]ut
TY}H-muZ-a vZb
5[6U~.muYOqWb
aR]T`a
a%xk.~+hv5
f,iy+bc.6
`+__+am<6
j.ftx_btcn#
Rw7Z`Fe}m`v
BVbuzdbq\x"
hdwdWeGZj
lnv27g
sE?HP}48g
}~'h_6t
|pc\{p|n
#Y<pXpo}x
c;c;ch
HHXiHYXX
YXXY/YI/(Y
MzpMjpMZ^c
KpkM:pKvtM^s#
#Up+F$M^d#
M]_dzot
#oKDMoTJp
b.rn!b
D_wDWi
PZ^wDjw
Y^wCjD_w
Y^w)*_)j
a*oB;oB;oa~!
aY!*o*o:8
A"cn2n!bn
j5h-h
u9KOgp#Pct>P9
W>*6q.
hG\"deL]7,
q$C,Uh4G"
mmmmhmGl"lJ
aL+}zz
UzEmW=
\zA0z\
uI+>]23&
~}LOwF
H\QIUOkeIw~
Y`X^NtD
X~FLY^
`Kc`K_~
}rWI{XX|[rEqAr'
{WY{NY|)Z
(zG+z?
2NCguHmHe]jUME
",=%UmMmEm+~0L
s\5B-B
SWUlMldL
CT<\\\\\\
D$/PEi=5-%`
g>S~R~R~R
>R>R>RQ
]4~]4~d~~~pv~F~4~4~~~
W?Tn=K
.TLnt?-
O1$9"S|LaqcoMDK[w)6ww
}wwwDwo0w
Hwy&w+
EZw-'w-whvlYvkv
65m5Qn
kjQn%Op&@r
UIO1)7IV
9^,S'
})u!m!e
]NU)M)Ex=1#*~
tCsf_sLsRc
sP/sO+s8sk4sy@sHs
twqsI7s
gPsEssbsXs/Hs
\co-t|H6
~R,s<m.o8
er3fif,huS}e]e|
|||rM}e]7Z
D"U!#
UO>YX;o?q6pMs
-E,=Zjp
<oRoNo doT)oY6om3on9oi=oS\oVgovoE>o5o[5
ooVoNoho[5Go
Ii^b 8
)g@}+pS
ili7hbzE
ecdSdSd
UIzFcS{
E`lBK]KU7MzE3O
%}*uMlb|llxvlk
k0kb0kiZk
Xk`k.k4k8Akhk~Xk
:k$=k9:k
"!,-(,Wh)nJ^
w}=~Rs
+7y"i"
y[V_ELXG~}
C;flWF3:76
ghMhGh:DLhIh:hjDhhWh\hVh^p`h"
gogz\h*g\g+gg
Y>X>:{.1
z+]<]4W2
3N2Py0@y0xXZ
\bz)n)n.{
nMIA6Qp
me]KsUJzMHxEv
Sd>d>dxfdTd=di9dm5d@2dD.dX*d\&d0bd4^d
[EdVAd+S-d7O)dC{dQidywd`
.t]@uBHt1p>{MwI
40,($?)!
SO}\uXm
GED=9Ho
c}`.`G`
F`zI`dM`GQ`XV`Z`\`Z~`V`Z~`HUg`CR``DXg`V\^`K]E`E!<`.%;`v\`
9wI<qD
4gh(dr<d]@eNGj;k/hh&]
^"&\mHZnKjLj^
FFI@MB1}6u:m
es<2J3wo]]wt
963-N6P-A
=)YLAZ 5
7R\ )-q7!
e"!</)I
IUhU::U=|DU7T5ZT
Ob2s;%
<5YadIV#
N.TPwlA
`f+9"}"u
]sRY9[#72
^('kvh%#u
`Q:~Q..J
Y QX Q&Y Q7!Q
S?2x>djU83
7==5=-=%=k#<
il|M]$I
ok]]tgrrrIIII
f`M]E]=]5SKEN5 N
N' M)#
N(NMNMLMdQM_VM^;Mp8M{=MUM7MWMWMWMWMaM5
NDZMjMjM
'|B9$)$)$9$HJND@D;(DB-C
sE~dEX=X5X-X%$
/QX_BUX?
|r5A5A%A%A~}kXucXm&N@J
N@J&N@J
68JI.JWHJW
17[l}IKIKIKIK
IR%|I-GI
CvCxDc
5+,+4+,+[flk2
7E===E=.
Mi^Ex=p5y^-7@%/@
EvZ{kX
Uui[F,F$F$F
,xF3yF
dFOK^FhP`FjS`Fu5AF|8AF;BF>CF]4FFp
E1E1E1E
=34E3,=3$Vg1
L2J_ H
Xs_++;;kkX
u3m4e2]
="5S-T!%f^
^NNdpuK
B!GB*EB*EB*EB*E
A<&AT%A
J#KDF0
3,.fuZ
h?Gh7Gh/Gh'G
JvpH`H`HPH
hFhFhFhFhFhN
###>q1
92!2)2t$$$$M
wEfXG-3%X
>*>>B:>Z5>B1>j3>cN>{J>CF><>$>&> >a
>3rS>V:>N:~>V:f>>\>>
=^>:&>:
'zJ}d4H7/G/'G[0C?DQ,CI!DQ%IY
sE~MF%X
mn,e6]v6Uv6M",K;",;;2,;;2,+;",+;jND;
17K\:eI:uI:uI:u7:
:,b:H4`:xHa:
>"4$:&nj[
qfa7!
pPm[Ze\]kUExM
hE$i=$i5zS-2C"-
57%7&_7)Z7P7677<%72#7$I*7.?07Vo7\]7
1"7*3,79F'7/H65J
6#L61>67@6=B6T~6Vx6R
c+S+S+-'
fF_dF@
e[:]|#Uv=MO
[5TC-F]%P?
\{zMEL
K|3Yf3X
bfF,3+
3^J3GXA3
&24-272
@h=m3o1i
[iba4ty
WAKMDO>e>
bq\t?_/
/7//3+/
2/4://G/Ij/
Xa/^O/\M/DM/E/G/A/rK/KT/UZ/Zct/Zcl/]b/Xe/'`/~_X/_X/
s$1nhp
mvN<B<
feLPg&
N}Qu@mFep]uUuMIEt=F5H-
\L,bV,
17[\M+(+
^+)>+/@+EN+
xvhqwY
u}gp9a^CcT-eZ?gX!yP)qD
LInRimMxEM=G5I-s%\u
(\"'Z$'&0'@N'_gi'r|l'N(
(ezk'Z,(
C-33#XAumrZ
:t72~Y^
W1@{fm\
\Bn?uc
]NUt^MqE=V5-%
$8$Q$0K(
#)#Z#\u##
+4d3_2b
L/p r/r
eek\2^Lc6
}u 3;/
U ( V '
*\ ST !M |^ eF gX WN >
TE > 0 U ;2 H O P)
X8O3U9dmY
\+H&J&?%1%
pR?=AI^AwD
}ume]UME=5-%
P%)N )&(%(
g3q(f(G'D'5
H)b_.2{s
X47,h20&.l-%
FXumIle]UME
'd"r"Z!P$N$
6,h.0"
]UME=5-%{
5>.1JD6Ie1
>-;*H/H7;:_J1`;*q=4
=,=4h
}vbc]u\udOo!
P2CZEOHZxZU[P
Ql|I2 5>
F}+eF]
V}vwfxpviMxh
6uC1uB"
L[J$LC@y
eCYj``
Jw[P]P]
MxZxxZ
zcjTAV
) U(\r
azErzE
V&aR^mY`
BzE~E9@
MyK|A{~k
i~vi~vg
tugpus
cywfQlwj`
MhHmb^\h?b@u:tDWU!OXv
FGYrKcZX
7y5qu
jT[R[R3
w>s .GA8y{S8Hc
+.-QMH{r
#G"X~f3_~OH
%zZB}vX2|
wwq}Wwo
;R]jU^czDt
O]spyg[^x}EKd
_~iDntdI^rb_ac
ftg_r{[^c
f`U`uSn
s=hTGyqix<pm
`z3lCuZE)
_m]_M]
Izs(xB
mZ_M]@B5h
))))))
Y5YAIEIE
E,=,E'
+t+Kge+$]++e+
ErE+=+k+kid^ckD}+K++
a,ca^{/
qja>7jar-Y
bja&ja-9
n7jaz-y
r/nbk.-Y
apO$b`O`
ewNewtb
ysd]xgfsdVp
I8s}u&mt
vs]&xu-s=&p
uuvsmu
jvxjf&u-,zv&p
Nckj\s;q\cr
OHkH;k@z_C<r
[ qNcr
Bl;rz^r
ga~gavga^N
Vga>+fa6+fa>
wcccwle
w[ecccb
cwew`cl
9DfTfTf
tfyfyf
eI4mI4m
nimY6=%`M')J)ao
6 ]o(R0
`hdpx6g]H$
g$HX%Q
m?>XPh( 8
0'B}al2
-v)z5~1=f*v.j2^VRZF9-!
L{Gi~VNY9
Z\RU.cC.
YCVJGR
j}[[{q
_~naa`[
*aa``TA
#I/}*$
4K<.q:xo_oWy).wG
OAYoW?
VO]U$V
>.44J=
4[,M}&~
uXimVeV]o
Ev=mz5pb-
dL{L:j
ckYLaL(\
[c^~f,
L4g4ss
``lt+0
!3UBKB
@LsDsvjMlKKhe
%-u8bObRR
@m0unn
~g&BlkR>C
1Aa{>%;
2A5|}lucm
{eP>N#>
f^X(Xj
Z6zKK^g
7[)U/j4
CSw9byte"M%E
=85G-f%r
ZD+P>c
s}umm?eEZDaZ@`?eG{>
-H. LJL:
~pVEsy~o2
pLUDMHu%
KJ\3DN{gko=
meeg]uULMJEb=
caGGYF
cid[JAFjBdngw
wf]SSxrow
vVXCC/
,n,nD[qzmgejkwI{uPjBdh}asasqsqrarar'iW
RD;/C}6u&mn
U.M2E=5#-I%E
)5tl<A~>*"77QLs|ky~q
Zr)pB`|z
LcDc\[\2K1F,=(1
iqj7M,Bdzt^
C+[Ou'm
wex]qUHIM^?E}\=
J>=grz
`7\+U4M
4@xJb@XD3
5Ub2Lk>eNmMz
Z|]LhqX
uky^GNnRwj
qytpwodprmm:F
C+xYmmem]zUxM_^E
y?u#hn
T"$<mmppwwa
SBz]zeIy
S3T6o/k3g7c
jmNer]LUME=5-%
AAVYMQ
nLcQ)qNC
fVgR^~]
Hit7hb}~@
BF;O$Sl_@
3T+j/`#Eh
]MUMMTE.V=4Z5
r|!CTG
$k91N&4%,y@iO S[!MW
6IurZ#3
;9??4*u
yq\ZG1u]
j{zH 9
N%1pNZ
wFl9p/q&uo
z}z(C$!K
#<#UBFI"&#G*
q8n c c
q/5bbb
]AUJEMBEEJE=x5z-7J%9r
[3ua(z
WOG5_5W=
/3['KRKRK"K?nQh
N,A/H)bUd
xSwB-Kk
zzw35y`WTMOLM
y}y"jy"jy
S)J*QH~|
&}&u&m&e[d]2lUIME=5f-
i]SJTJ$J@nQe
X^a`dAGBJ[MeO`FR_w5gy8^z;]H[#
=Q{sNN'NN
p}{~REwv%
GFJeu=B
E]WUVM
6R9n1f
R$6} dX!`
E~&x!sCj&9p,q
fl^l4al,al$l
rpr{Ff$
<(4 
Wi\D`D`D
} }G/~U!~]
~]}^}`}Z}\}hV}^X}p}=
~@}@}@}@}@}
}[S}Vg}
W_}Vg}V_}}
xlxlXlXlXlAU
J&> W4
n=%g5H-I8%X8
8# &%buVv
WfzV^z
WNzyG5Gz?5?zg6'z_6zy@z.l
/3K!yyeyfJyAy2yB\yOWyDP}y
H#x&aii
vdLD~j
-%skskS
n}nunm
oUoMnEn=n5n-`9%
]|Jv}Jv<v?Pv)Nv[ev.vB2gva3_vqGfvLEv@\vATvCv<<Pv
v6Hv8>v:<vE9vR}uT}hv6
vlululululululu
C[cjsjsj
^k^6kn-k
K`T3U;N
>=}$tu
8])UTM&EP=
5-8%<
,UAS7)
bQ1r?5rg6'r_6r1
-G`,Af.<:
80523!.'-+0Vc-Lu3
5,&&8PBZ<T>N
7A~M%
ohn-n+n4n:nHnXxnRzn,\n<nB]nEnPnOnJnjBnananynonunCnAnm
ch5j"@
sa|KbaO\Q^S`%B'Dtr
-$tqL<E7N
@P_RQ}M
kMkKkk
jVjejNjO`j1*Ij
Rl"Ue#W=Q?)&
HN5Mj:De;<];
MR7A`TB(|~
W^W}6vAJuAmWe
Xg?QgGQ
g[eSg2,Jg
/Agtgr|zgioagXg=Cug3=;g9?1g/A7g=CUg;E3gFgMgKgfffffCfEfSfQQf
99gFRQTSUGIrAvE:6ywF
\m0e)]aU/MZE\=U5W-D%>
XxVvXkcOic]gc[eSc
R0R8c=b=
c=b=b^bP[bjsb
iejpfsyntJ
%e}CpfP
yhvXcwYV
*4)H'MAKKA<>AC
r)@_@_%_!?`^_6_=_6_3_5_/_f0_-_'_)_"_Q__'aO_$Z<_"\:_
Q/_%K-_"L:_8F0_.H6_;E3_(~H_
l2\_hH
f}fHq!p1u
3C`C^$G
KYpbZx
Bu4Am=e>]?UAMVEW=\58D1\/F/\<A\\:C2\O~O\em\
<#H[![\&L[
h_[gW[
exlqlg>jj7cc*cmAm'kt
yr(*3,
!l.;~&_N
OU>M=EW=MG5WI-
>=1S}P:uU7mOYHX
W?DXA]XJUXoG
FXuI>XMR'XO X_U'XmRXjS
X_IWnL
XxLWwKWpLWnKWtIWkTWHSWFQWOWZWAYW@$W?#W
WTQW/6`
A{eEm[2EQ
FF7Fd5Kb/KZFL5I~,IO6J=%J
><k}b0unm]e
]$`U1(M'&E
]=Z5P-C%VC
BUZLDWTLTTC"TT
S`hTSSiwSKGSKGSLHSBJSQ=So@S
b0KZ?J:I~9IO
?H="H:!OCM
GPGYN^NOM,L-LIf
NNjj::)#4
:rJ^JXW.-}|=u
&m^eL]
pl`VzAjPBjPSjP?qPQ;Po?PuAPMRPWPiXPXJP&OP-PzPT%kP'kP(dP
\P-EP%3FPwP
xu6PCA
Pjy'PlPwPO.3
2911N,;O$+I4{
tva`pZp
G{BiHE5E:xFV|^5J4?
zys.Fl:`my=9^vnAlIhss&{cIyo^7c$
:{f.ldV.iyi4'"
+#dridIep} s|nX7
sxnom*j7m"zvoa
m>dCc=q+b
tfiZd^
fW?W^QVD
JN-O9N J1fN-O
FN-O91N @J1N-)O
N(O0NCJaN(O0N#JAN(ON?%
0#>0\#u0>$`0J+0{*0X*0*$1)s1t#3V#38#3
'/4R'-4
)M6u(6(q7L(
f Qq `*J+V
,C,1,oKN-wK^-C;m-Q;~-+'-+4-
:Y,\:f,
?8? v???['G
'L0!1T!\2$2$2$2W
+;5K*^*n
ZA|ZXP}a
y)HF)eH'
;':'*'*J(b
""i$#!!!;!Iu"6"
*">"$;$hG#
6$6%6&W7&g7Z'7W
#+=u,$
J%6=M&E"&=(6$(
q"Kn
P+)dQ*>-4)
+-3!&;!C!K!S
^Vi9F'\Q
'#EzbV)
-/?E)-
@_N"?+]N
*_Vi;"dFy
E]Va@s4
RyP?}S
@QN"/9&ONi
4zfBOC
@>y" R>i
7UA<k77
9+dYy*
W({`O>."
UnERN[4!>
iPUu_0
PNi#D7;CBQ!
MFM>BT4vBM
Qy^D2C
:fBS&k
RiBZ(Kk
KS=rMU
QbBwBF
'Eju0B>q
s(PN"PV#/m
G#%vPU
SBOO$.
ExitProcess
GetCommandLineA
GetModuleHandleA
GetTickCount
CreateFileA
GetSystemDirectoryA
lstrcatA
ReadFile
VirtualAlloc
AddAtomW
CloseHandle
CompareStringW
CreateDirectoryW
CreateFileW
CreateProcessW
DeleteAtom
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExpandEnvironmentStringsW
FindAtomW
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlushInstructionCache
FormatMessageW
FreeLibrary
GetAtomNameW
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetFileTime
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
SetCurrentDirectoryW
SetLastError
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualQuery
WriteFile
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
KERNEL32.dll
BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
GetMessageA
GetSystemMetrics
LoadBitmapA
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
RegisterClassExA
ReleaseDC
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
LoadIconW
AdjustWindowRectEx
AppendMenuW
BeginDeferWindowPos
BringWindowToTop
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
CharLowerW
CharNextW
CharUpperW
ChildWindowFromPointEx
ClientToScreen
CopyIcon
CopyImage
CopyRect
CreateAcceleratorTableW
CreateIconIndirect
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
DestroyWindow
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EnumChildWindows
EnumThreadWindows
EqualRect
FillRect
FindWindowExW
GetCapture
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClientRect
GetCursorPos
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessagePos
GetMessageTime
GetMonitorInfoW
GetNextDlgTabItem
GetParent
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetWindow
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InflateRect
InsertMenuW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsIconic
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MonitorFromPoint
MoveWindow
NotifyWinEvent
OffsetRect
PeekMessageW
PostMessageA
PostMessageW
PtInRect
RedrawWindow
RegisterClassExW
RegisterWindowMessageW
ReleaseCapture
ScreenToClient
SendMessageA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardViewer
SetCursor
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenuEx
TranslateAcceleratorW
UnhookWindowsHookEx
UnionRect
WinHelpW
wsprintfW
USER32.dll
BitBlt
CreateCompatibleDC
DeleteDC
SelectObject
CreateCompatibleBitmap
CreateDIBPatternBrushPt
CreateDIBSection
CreateFontIndirectW
CreateHalftonePalette
CreatePatternBrush
CreatePolygonRgn
CreateRectRgn
CreateSolidBrush
DeleteEnhMetaFile
DeleteObject
Escape
ExtTextOutA
ExtTextOutW
FillRgn
GetBrushOrgEx
GetDIBits
GetDeviceCaps
GetLayout
GetObjectA
GetObjectW
GetPixel
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
LPtoDP
OffsetRgn
PatBlt
PlayEnhMetaFile
PtInRegion
PtVisible
RealizePalette
RectVisible
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetLayout
SetStretchBltMode
SetTextAlign
SetTextColor
StretchBlt
StretchDIBits
TextOutW
GDI32.dll
RegOpenKeyA
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegCloseKey
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
TraceEvent
UnregisterTraceGuids
ADVAPI32.dll
_CxxThrowException
_XcptFilter
__CxxFrameHandler
__RTDynamicCast
__argc
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wargv
__wgetmainargs
_adjust_fdiv
_c_exit
_callnewh
_cexit
_controlfp
_except_handler3
_initterm
_mbslen
_mbsnbcnt
_onexit
_purecall
_snwprintf
_ultow
_vsnwprintf
_wcmdln
_wcsicmp
_wcsnicmp
fwrite
iswspace
malloc
memmove
realloc
strtol
swprintf
swscanf
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsncpy
wcsrchr
wcsstr
wcstol
wcstoul
msvcrt.dll
Animate
jjjTWARE\jj111es
jjsid\{0afaced1-e828-11d1-9187-b532f1e9575d}\inprocserver32
Oxd.V4k'R
@chp!==3_]qN
2Vy3$F
*pKbBS||tR @s
G6ws<K
"1EjVo5tCTqA1cT
*a! q?z
TlOqtaOK3
9=)RWG
CGq:u
sP@/@L76V\
6kLZp/
XAKy(5U
eo`<\o
?Vz{KzOx\@$E
/eF8Y8
OwXqJv$3[EukV^fE
S^~tKjM
+,IQnb
OG={3u
c\#@2VA!cJ
ddQ`|.o?
~4\oJ$S
s~<DTdFR
#SvyCM!Y
Yh)*{O
n!IZ1L
Umfiw~VRx>x
3Wk=/rsO
+ /sc<_
IY3"bZMPN-
I2'jOH
J1vCN;q<
`6y)uGs!
VXk9-Bhj/8%H
Vs-'qG
XCYew"
NHDiicx:9"^xK`
Vw_8@|
UO"q\c6}p9g
DGb7I8
\fBfD6^
2"~PI)>m
QDsj?pG
Kp5CuX
,V]6V'
MLBcu`iY
Ok)jyXg97Mk6
Ys|@Km
;`-_XLB
6hl],=l@o5
,uq>]#}'S
Yy/^L>
x7\ntg
L2gX5deLZM
oUc ^_
B+9lY:
1\>sy4<,}ST
fdzeu@"4'?_Ey`
;LAJM+
|,\ur9]
V+NE!g"1AJ~S,
E5uv.?w
y}cH%1s{/k
,{&bKKW
F+21woF
a5OR|@U
"sAF~hU
<'6q=Yp
gPyUkG?{
r\{R!-zFgI
YgbTq3S%
%K:P,fFkB
]y2X<XuN
?"nhVS<
#$WIby`tS
AW&#p.[
F|x!&v
Z:\w%*
yP+D]+[
Dj1Em)ra?,
u/gBC6h
U4`WDu|
}~Sz/<~7w
\]5#)!i1
3]76`{r
aRw{0l2feD++k
>ZN7Qs{
|X[t95]y=2[S
rrXau&x#n8Bl _jfb
s=[.pJ#B-
~cq? g
A%6p2m
92Pvm=
a6zbgimn3U
Czg\=\
%}$2lMI'
511E?TfPEF
U8GZw0xu
r3BUiEI(Z
;z{_#j
]Wr&ur
WqY/YF0Y
!|WnN7_;2fe
+cwq6O
j'F_iB7\C3`j|"
d&KiOYqM5<
zU;a>3
6wMEa y
blVW[Y+%*5
8P6'oM=c]y0
Tm,UklVI#~&l
xzoB5.Tt
S8 3%L-FY8;)o=?
.}wL&@ul`{L7D
^nydSv
p<9N>1G\[
gAcYJ%zBetv6iF
Nlwui:Gw
X'!;uQ8
h '?}n-
J3lVce[B
GHNc\$a
=*G*4v:pB
vaN@^+i B"6\
W,LXT8
#pZjN3<
^J4y<o
&d,tuX}!;
kGvUFX
UNbOy,C"
_= ~6ue/]fgE
ZaU~`xN
HU`10
x{bm^&E
4]G@,Zc
WR2[D 0Kg
Rh|F/
RqXkzqOkQ
L/1"*4Vq\%[
QfEeG
lI2x#0
5/<3~G
5>Vbk4
5Jgwhb
#8iaz)c
)Y8W4x
GL_.Ze
.x*COA
Ug\.u-V"v
(]N8 S
i`OIR<j~'nf;R.:\i$
fbPo~M
[xg>kc[sz@6Ct%_F`~
eo$5dOb
P2cK~n#
WY@3RhEa3.
kN`|v:
=Bt7-M.
/x0Hqp\hff
;={kg\,7
`cEGaq-T <X
%O!E nM
ni:[cA/x>"
QHLVcJI
g?!P~R^Lgm'
**MGNHX;kcy
Z&ya1y8W3]zRz1"=NE
BBBBBBB
BBBBBB
BBBBBBBBBB
BBBBBBBBBB
BBBBBBBBB
BBBBBBB
2|yqu22e2|
2bo2{2fy2|fqy
eff`q2{wu``
222222Z
u~T~u_
kDYf7Mdo
ee`jafgR
UT==VWQJLUNOPC-
lqnsegf]_a^
%n?F4(
zHMGA@@
Cggggggggggggggggg
VS_VERSION_INFO
StringFileInfo
041904B0
CompanyName
FileDescription
VarFileInfo
Translation

Process Tree

0d91eb3f989f436df897782788f72ca57daad7489a3d9917c3c5cd7c37b6b986.exe, PID: 1784, Parent PID: 2264

default registry file network process services synchronisation iexplore office pdf

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name a0d6b17f20b5ee8c_iqbjnwa.exe
Filepath C:\ProgramData\Mozilla\iqbjnwa.exe
Size 201.6KB
Processes 1784 (0d91eb3f989f436df897782788f72ca57daad7489a3d9917c3c5cd7c37b6b986.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 08bbb43ff3c894db122f2425463e57f9
SHA1 b4f8f2b78c60b2770c05abb189a49bc20189a2be
SHA256 a0d6b17f20b5ee8c36dc1ea85adb931ef3b9917760540ac61e5b3f9e10537e41
CRC32 C16629FE
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.