SmartHawk

2.8

中危

该样本未表现出任何异常！

重新分析

下载样本

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe

分析耗时

150s

最近分析

393天前

文件大小

302.2KB

静态报毒动态报毒 UNKNOWN

DACN 0.15

FACILE 1.00

IMCLNet 0.87

MFGraph 0.00

引擎	描述	特征	威胁分数	可能家族	检测耗时
DACN	基于动态分析和胶囊网络的可视化恶意软件检测	API调用、DLL以及注册表的修改情况	0.15	Unknown	0.10s
FACILE	利用改进的层次胶囊网络对二进制恶意软件图像进行识别分类	二进制图像映射为的灰度图像	1.00	Unknown	0.05s
IMCLNet	轻量化深度卷积网络模型实现恶意软件家族检测	原始二进制映射而成的可视化图像	0.87	Unknown	0.68s
MFGraph	利用静态特征构建图网络以检测恶意软件	原始二进制PE文件的静态特征节点	0.00	Unknown	0.00s

未检测暂无反病毒引擎检测结果

观察到命令行控制台输出 (2 个事件)

Time & API	Arguments	Status	Return	Repeated
1727545279.875625 WriteConsoleW	console_handle: 0x0000000b buffer: 错误:	success	1	0
1727545279.890625 WriteConsoleW	console_handle: 0x0000000b buffer: 系统找不到指定的注册表项或值。	success	1	0

一个或多个进程崩溃 (50 out of 52 个事件)

Time & API	Arguments	Status
1727545278.469125 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5954328 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5778881 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545278.469125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5778881 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545279.28125 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5757864 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5582262 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545279.28125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5582262 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545280.030875 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5299112 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5123510 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545280.030875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5123510 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545280.109375 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 4971432 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545280.109375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545284.859 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 6282152 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 6106550 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545284.859 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 6106550 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545284.969375 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5430184 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5254582 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545284.969375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5254582 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545289.734 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 8903592 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 8727990 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545289.734 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8727990 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545289.875625 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 4971432 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545289.875625 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545294.609375 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5823400 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5647798 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545294.609375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5647798 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545294.703125 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 2677672 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 2502070 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545294.703125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2502070 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545299.46875 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 2939816 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 2764214 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545299.46875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2764214 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545299.50025 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 9165736 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 8990134 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545299.50025 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8990134 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545304.280875 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 2808744 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 2633142 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545304.280875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2633142 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545304.328125 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 2808744 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 2633142 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545304.328125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2633142 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545309.109 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 8772520 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 8596918 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545309.109 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8596918 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545309.234 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5036968 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 4861366 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545309.234 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4861366 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545313.905875 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 4971432 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545313.905875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545314.01525 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5168040 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 4992438 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545314.01525 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4992438 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545318.750625 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5692328 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5516726 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545318.750625 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5516726 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545318.875 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 6151080 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5975478 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545318.875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5975478 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545323.594375 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 9165736 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 8990134 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545323.594375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8990134 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545323.719375 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5626792 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5451190 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545323.719375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5451190 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545328.484375 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 5561256 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 5385654 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545328.484375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5385654 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545328.578125 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 8641448 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 8465846 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545328.578125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8465846 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545333.359 __exception__	exception.address: 0x4284c4 exception.instruction_r: 0f 3f 07 0b c7 45 fc ff ff ff ff c7 45 fc ff ff exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x284c4 exception.exception_code: 0xc000001d registers.eax: 1 registers.ecx: 0 registers.edx: 6282152 registers.ebx: 0 registers.esp: 1637804 registers.ebp: 1637844 registers.esi: 6106550 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1ab @ 0x42b1ab 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545333.359 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 6106550 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success

在文件系统上创建可执行文件 (2 个事件)

file	C:\Windows\System32\drivers\spools.exe
file	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe

将可执行文件投放到用户的 AppData 文件夹 (1 个事件)

file	C:\Users\Administrator\AppData\Local\cftmon.exe

搜索运行中的进程，可能用于识别沙箱规避、代码注入或内存转储的进程 (20 个事件)

Time & API	Arguments	Status	Return
1727545278.953125 Process32NextW	snapshot_handle: 0x000000a8 process_name: pythonw.exe process_identifier: 1272	success	1
1727545278.969125 Process32NextW	snapshot_handle: 0x000000a8 process_name: taskhost.exe process_identifier: 2128	success	1
1727545278.984125 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 844	success	1
1727545284.593875 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1600	success	1
1727545284.608875 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2092	success	1
1727545289.469 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2448	success	1
1727545289.484 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1840	success	1
1727545294.328 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2512	success	1
1727545294.344 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2496	success	1
1727545299.187375 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1632	success	1
1727545299.203375 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1844	success	1
1727545304.04675 Process32NextW	snapshot_handle: 0x0000009c process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 736	success	1
1727545304.06175 Process32NextW	snapshot_handle: 0x0000009c process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2840	success	1
1727545308.843875 Process32NextW	snapshot_handle: 0x000000ac process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2276	success	1
1727545308.858875 Process32NextW	snapshot_handle: 0x000000ac process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1160	success	1
1727545313.672 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2972	success	1
1727545318.483875 Process32NextW	snapshot_handle: 0x000000a0 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1144	success	1
1727545323.344625 Process32NextW	snapshot_handle: 0x000000a8 process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 1984	success	1
1727545333.094375 Process32NextW	snapshot_handle: 0x000000ac process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2484	success	1
1727545333.109375 Process32NextW	snapshot_handle: 0x000000ac process_name: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe process_identifier: 2668	success	1

该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (2 个事件)

section

{'name': 'UPX1', 'virtual_address': '0x0002b000', 'virtual_size': '0x00004000', 'size_of_data': '0x00003400', 'entropy': 7.842022912472796}

entropy

7.842022912472796

description

发现高熵的节

entropy

0.9629629629629629

description

此PE文件的整体熵值较高

重复搜索未找到的进程，您可能希望在分析期间运行一个网络浏览器 (25 个事件)

Time & API	Arguments	Status
1727545279.000125 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545279.765125 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545279.82825 Process32NextW	snapshot_handle: 0x0000009c process_name: process_identifier: 0	failed
1727545284.624875 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545284.734375 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545289.5 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545289.609375 Process32NextW	snapshot_handle: 0x000000a4 process_name: process_identifier: 0	failed
1727545294.359 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545294.453625 Process32NextW	snapshot_handle: 0x000000a4 process_name: process_identifier: 0	failed
1727545299.219375 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545299.297125 Process32NextW	snapshot_handle: 0x000000a0 process_name: process_identifier: 0	failed
1727545304.07775 Process32NextW	snapshot_handle: 0x0000009c process_name: process_identifier: 0	failed
1727545304.04725 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545308.874875 Process32NextW	snapshot_handle: 0x000000ac process_name: process_identifier: 0	failed
1727545309.000125 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545313.687 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545313.797 Process32NextW	snapshot_handle: 0x000000a4 process_name: process_identifier: 0	failed
1727545318.514875 Process32NextW	snapshot_handle: 0x000000a0 process_name: process_identifier: 0	failed
1727545318.62525 Process32NextW	snapshot_handle: 0x0000009c process_name: process_identifier: 0	failed
1727545323.359625 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545323.484 Process32NextW	snapshot_handle: 0x0000009c process_name: process_identifier: 0	failed
1727545328.234375 Process32NextW	snapshot_handle: 0x000000a8 process_name: process_identifier: 0	failed
1727545328.328375 Process32NextW	snapshot_handle: 0x000000a4 process_name: process_identifier: 0	failed
1727545333.125375 Process32NextW	snapshot_handle: 0x000000ac process_name: process_identifier: 0	failed
1727545333.172125 Process32NextW	snapshot_handle: 0x000000a4 process_name: process_identifier: 0	failed

可执行文件使用UPX压缩 (3 个事件)

section	UPX0	description	节名称指示UPX
section	UPX1	description	节名称指示UPX
section	UPX2	description	节名称指示UPX

使用 Windows 工具进行基本 Windows 功能 (1 个事件)

cmdline

reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f

与未执行 DNS 查询的主机进行通信 (1 个事件)

host

114.114.114.114

在 Windows 启动时自我安装以实现自动运行 (7 个事件)

reg_key	HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell	reg_value	Explorer.exe
reg_key	HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit	reg_value	C:\Windows\system32\userinit.exe,
reg_key	HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ntuser	reg_value	C:\Windows\system32\drivers\spools.exe
reg_key	HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\autoload	reg_value	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
reg_key	HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Schedule\ImagePath	reg_value	C:\Windows\system32\drivers\spools.exe
reg_key	HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ntuser	reg_value	C:\Windows\system32\drivers\spools.exe
reg_key	HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\autoload	reg_value	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe

对特定运行进程表示兴趣 (5 个事件)

进程	system
进程：潜在的进程注入目标	smss.exe
进程：潜在的进程注入目标	wininit.exe
进程：潜在的进程注入目标	winlogon.exe
进程：潜在的进程注入目标	csrss.exe

通过 in 指令特性检测 VMWare (26 个事件)

Time & API	Arguments	Status
1727545278.469125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5778881 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545279.28125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5582262 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545280.030875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5123510 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545280.109375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545284.859 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 6106550 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545284.969375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5254582 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545289.734 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8727990 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545289.875625 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545294.609375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5647798 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545294.703125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2502070 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545299.46875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2764214 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545299.50025 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8990134 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545304.280875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2633142 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545304.328125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 2633142 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545309.109 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8596918 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545309.234 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4861366 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545313.905875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4795830 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545314.01525 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 4992438 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545318.750625 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5516726 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545318.875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5975478 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545323.594375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8990134 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545323.719375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5451190 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545328.484375 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5385654 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545328.578125 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 8465846 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545333.359 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 6106550 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545333.421875 __exception__	exception.address: 0x42844e exception.instruction: in eax, dx exception.instruction_r: ed 89 5d e4 5b c7 45 fc ff ff ff ff eb 19 b8 01 exception.symbol: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2844e exception.exception_code: 0xc0000096 registers.eax: 1447909480 registers.ecx: 10 registers.edx: 22104 registers.ebx: 2256917605 registers.esp: 1637796 registers.ebp: 1637844 registers.esi: 5778870 registers.edi: 0 stacktrace: 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b1b7 @ 0x42b1b7 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555+0x2b94c @ 0x42b94c BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success

288x288

224x224

192x192

160x160

128x128

96x96

64x64

32x32

暂无运行截图该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

2008-03-25 01:31:42

PE Imphash

08b656407b8d307979dc72c3fcc683a8

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
UPX0	0x00001000	0x0002a000	0x00000000	0.0
UPX1	0x0002b000	0x00004000	0x00003400	7.842022912472796
UPX2	0x0002f000	0x00001000	0x00000200	3.0150504883289093

Imports

Library KERNEL32.DLL:

• 0x42f078 LoadLibraryA

• 0x42f07c GetProcAddress

• 0x42f080 VirtualProtect

• 0x42f084 VirtualAlloc

• 0x42f088 VirtualFree

• 0x42f08c ExitProcess

Library MSVCRT.dll:

• 0x42f094 atoi

Library OLEAUT32.dll:

• 0x42f09c GetErrorInfo

Library USER32.dll:

• 0x42f0a4 wsprintfA

Library WS2_32.dll:

• 0x42f0ac WSACleanup

L!This program cannot be run in DOS mode.
En4Mu"
I/Qmlv%uwjbwdh%fdkkjq%g`%wpk%l
AJV%hja`+
!C!A@/
\!c`_%+#.
K>6Or9'Wlfm?
w`}nw+n
d[jw})t
u34v43
asw=((
:cd616rv7Z6
RVDV`k
i~`X`-j^}
]\\8[)EQ
WU\6hf5
k-K6/8
;Z;n9{UEe
31\Uirrq'
sZ"k=U*
x5y<{i
D_{SdF;N
|-v\nmHA
IR.&MY
f\)(L
p(4|M
UK7IxkZi 
~7pRkUgHi
^X-~`a
_\~95N`u
-4!J%Il%
5Y5f.nf7
5Ny5d>Y
&SY3+q;O+
}-]=]T Y
g*QQ!U[D#
<!65{+
1pqF:md1*\
PN8f<#z[$St>w
'@ERSV
9|Z[u=6-
/<DBPQ`huUdqm
Rwlq`Uwjf`v
V-`uFijv`pjMdka
__x5`Qm
FIdT@w
}TW$U+
HoipiX83D5Z9op\[{Zcalshd
Y^kNwhcGX]f
Mjjn@}3RajD
+gXe7A6&a
q@Z]j7
CM%ze-z]
<p\58@d
qM!iyt
]N@WK@IAII
HVSFWQ
a/IjdaIl
icftcrkpW10,fnn3igpin
ko]ERpmaCffpgO
oGltk
loglvTcpkc`ng/klGzga
Amr{Dk
MroIIg{C
j4rkn8--6]kicY_[vkqGcvmp,o-#oclceg
old_`_']
_w+`ewnlm-f{f
khw*a|
pbf%%8rzzZ3:\stop
flibul{
f~fsocks\a
]aminiavprra!#%vr
ABCDEFGHIJKLMNOPQ
TWXYZabcdefghvkmnqrAuvwxyz012345^89+/{%02X+n
n#seXn
r_7'ZKoetiu
ZFhbiqouZES
hrPc6oihZTwZ/ImPath
[QVGO^Awm
"%1" %*
~`oj{ncZmZeV
kbZW}Y%
\zn?ls,.php
vbsot#?
<Mrm mhoRqd=f
kX_^OXDK3^q{rgo7n+
gQGPRPM
NGFOl`bHPsmdp_Bss.
XH}keh$WwXEt
eX/wru
+x,vorp61s16
#~31324.t
/V{8"mK[>r~a{k
/dAo/n#{
POs HTTP/1.1
)}k4*[l
--url#ced90
#:jYR-,g
?8h-"f
VUCPG+qmd5
MHj6m[-aEx
Shefs#
Ev8VNUIcKu\
(P3CV%AW
C[]nu(+'
._PSt*C
 9819c52
5e_7e-00+:
_osidOe;155aZ
_mp;R?i
JAV_"r@@t
XH't_l*4&
1VjfXvX_#
;G+9(@
oPhmPQ
EJh= {?r
dIwMTURGl&6
w}fnQhS
Rsw;ue3
/X\BA'aQAgo
/8UJ>l9u
)}xhh,WB
jhhWd[]x
ebhXMVe
fXV][}
rRf[`Kb
Q;h00
r<h4(UZff
lmEPa8
t,xpVS
Z(s# dd
D*M _\/
_ds<@pM 
zM`_/  Od
h8xtYN
h8{ns+
h%8#l`
8MPT&|
-6 SH^E
*h&{!  V
h /Ylu30
uM*nH)
oa4t4UWl
jPb2 N0+B
t?]TjDjr$
\RXw7
,&}jdFS[gw.5Xc
\Ps"at<a
#DW\4DKN
n0sYx%
bHzdSdI9
6p[9AT9>
5]Xj,
cYt f0
0Cvd&&
!.YFEX
n^dxf4gE^7"_
B#/0Ms3
8#yut?
rXI'E!
HwQMCyhy
+ jU,?u
*80kfB/ HCa
l#q^pNF
vv\LW=)L
{ClF?0
%&k&/x&
PTg[H7
&OwB8r
FS{D{{QY'
hD|OP|
E }a^Xh
\4U [h
2c3'=G
lOsB|s
"k*8oxz
=v;psM
w`\rL$
7<J@t(=e
'_uXB.$S
@lHeD$
h,~nY08yB
~!u@hh
(//dlRpd
}t5.;P_Ah
v !d$0
{BhlSt{
JOh~K%b
~Dh{aF#p
,''8)HtsflK5
`F4C>h
f'.P /[I!
zB}P8}
\JL WDO @%AT*w
@0oe#91Kb
TtP`dhlpz
``t$:D50CQ
Fgh!a2FjPI<
v_/aNyx6?E
;tWP5l
0u>"u:F
+ v;XPVSSs
hk@Ae% O4
GetModm#buleFi
StartupIA@-Q
Hnl>Lo{l
Ti~[ckCountl$rcmpA
pynZKgiMDrive"6
{-!2y1F
atadLibr~
y:AddrVolu
rmg&1l
ep(kA7Clos
D(r;To
Snapsho
cfhEAt
bt~__p
??1t_UAE@XZ%cI+
fV(mak`X
Yf3F6lrsptf
ZsoiCc
B5pnhTr3
vmfwhtYp
@atr\0
1WpnhE
0k5Cxx
,T%Xg{
4owENo3@YAXP
Z;Ss,t&u'm<Q
wgF{GtIsCh4 p
4PYe{s
G#A.4S
GPGWHU|
XPTPSWXaD$j
KERNEL32.DLL
MSVCRT.dll
OLEAUT32.dll
USER32.dll
WS2_32.dll
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
wsprintfA
!GfIRdY
~]7NH*;(e
YWjL"Q\
N<m{8 #w
iTVXjn
leinMB%K
tG.ACxH
Wt;lne
bupdFt_sh90g
K~CNi-
,ml}^2B
9P5:DX
#&RO#n9)e
]/2:D N+tw~3k
5WK 0[
~b$#\{W-RHJ#V
!l9L$2*}\}/
7k}n3A"
,aYew'
L_r~3`[sZ
 DuJh~G
b8+`Q=fuOP@
h+Ly#9
EEe;o;
,_<$@
Yt}0L9
/M#[Z0
&/_$v=
?@={996
k$3F#<EM.
[miENa(zu}S
O%!Utw
%uQh?d'W
V:lz}h#
<j\ PHbznzdT:{
gJ-2KS~]
AsL$Y>9Ap
~|$t'^Kamx. Lk1
2KD/o15]OfoQ
|OwJ+-CW<&f
Rj!_(H<H
B[CNYKC:
)%UWf/! \
)b,{_;
`P]#/;
tzB@}G~
zx('T#5
QcF[GVWDk<
l;m]er=
qG".sI<~tB
mj|m^j&CS[66y2p2]8
Su4;q^_SM
UZAQ44
3;W<n)z01
|PP) !C
9A8Zfu7 
Cnt:k_
YI8-+06@dh
"|S,D(
YH"?BNF
;>t\hMB
siyE0xe
5Q)_1~JR*
fzW9"j-[4"-
_*Lk)0
'K`V`<0'JDaW[WXH'
=qYv.}_V$oK
3:>:FTq5)J
*yhf# Q8
j wdx@>
U/c5)Z
:82 nSE:qt(
+:E-7=
x7HFMJd
3+{CY^/#e3
@_bFVp,8:
Eet/zP^5A
UC{;fO7
co$ZG|
So`m8u
jZ2XC-o$
!N[Bou_R:
8Y!"d=
aWx}VkT4
FaBT>h
dD.oyoAR
"c)\@89=&
TR>i<$"$
1y%uL"uIm 
is&f9%>
sA:S'GJ
y}AKTr$+beeI
!e5H`LY
co:M7X
ZgJl:e0
lG725h1n3dq;[
4s~&iBq%x
bf >@t*2X7
pU]uJ/PPw
y[K'vWx0P
Ok.;$K
jkD|^+\W0
{MN1h7UxT,r
8p@#B6,
QCPG'Qu1r"m
c7G9v~
j?)w-A
`CxPx;
~@i_Lt
?-3a 1sW
uQe?sb:e,-a6
v"(=c2%
[zCNcCWZ,`M
d 06NJd[
tV3~wi,zks?CSp2X7-iE
a(!] JN
$.s8B_"
W-p5~6
dq!J<zX
bZ t9R7]}D8"yLo<
:P =Mq
~i\:moxF`
xVj.TQW&_fb)0`HDK
[|GQx_
YJ~x`o1@
|J?F;V
OiZ^Sn
xbA|r| *B
2D.i>I-fue
//63|9
(_q<X}YN,z
 ;.|15
}bmBJy%a
3{$ois>
+8kujO
PDyA3jM4
<TNU]GR
kxk#4;Sr
vsVa!#
VYg/BI
0J~.cBP,
wsd'pSE
z|Imiz
&bx)3=@_,
zv>8BA
ioV(zQPO
+\Oka+iH4
t::Q;Xc
k=Zx({Dh
sYASl|!F|
]?PO9?jdy4x1Dfc/#c>u`3PC
=TT-j'v
_Y@9&(
n_!_OA~N
'rETls@
(]L++xp4-@;
k=pP0B]
Hz4A|L
C6`Fc96XH'PRDv
M;<O(H!
.zU{bK;
viQxh!4,6=+3X
u Xt7FZ5\$t-\
Be<`dbW4M
DsVk_<G
U}E6sz
{qCGja
% SLb/1H
bFh02XT
(sc/zCNnco%-3\SDm1
hS+s^u#
Br<WUrPh
 )16\oZ(1i
DPQ8oPwW]c{k'j'Fx
BDi$?-$
5ztKP~~d
&omA@,%A`
Y I%dOTuRj
.ox*f`v
'drS.ILq?I
.[9ul8
d-JXLmv0
/K:qTGv
}9>@uFsn
295<Qao?{WV
1gLrVIFx
7jdtTp
+\}"{?
.BZ>O_!
R5PHE}
b^gk'K/
.":s]Z
Yg>M-Nn
W!]<f0wpa
l\?/}5ns|
1-C"{@)N
,qw2m{8#>yz
9^+%ui5
I)X<SQ3)
zcUP_t
.e)D~_
rlLaQY
ZADrj:V
f)tyj<2d,
r2+vW=
EmdhxMSn0Ba*
e=7C;q<c)C
ob`_awB0
4|hs86c
]hlC8R
TMAy4
aG2u}}EKt-n7,
"=P16
cx:v['YkO
P"sQ|,
$Xj{9}kxGlRE
].n%,k1
MW\pk?
+Q</d\{n0y
UjEOcIEOf/
g^jKHntLr2$A
i*u:h#<hF=
PG*J)]=8_xez
5r(Gmu
mI[Ilzg
I@K(vD7
q02M:P
M0+ovh
C]bg*Gx>@g?EB%
\ke!oaS
4c_pz+^Y
itN:F6
)^^Ft*
$}OyjY
7X}0>-J\
vMg )I
rU\@<k'tJ8n
Jf*!BqG
|B#)u!B
J Pp!0m=
DYvs10
yuTYc9L.u
^W[5I2[ )yte
c#HRv068R
%GN9Y3}4
V=+IH+c
@e~HB
Sv6K':
Z1_Dqg:X
5,_!%t+8_&gzU
o2Ckx.T8|.TSGn
q 8f`94
jjClyggutm^
E9#g4%
'Lfkny'
K<#r*Lh!
p>J"Q"q9
9ZDv]+N
-ZXtKtZZ
UH>Y0s
Fy_X5z@z
oTTSQ1Lq
/g+Ulwja6
[04T?^
TUMJV9
g{M<lW-~
"?}0qu
1`|\Gq
:mmP's|'
%dyk!lPdR{
U+#q2R
;pSv3'
^'*X}[c6V>\
1$h9n]c&-_
#7o8xf5
;<,,^" 0,/
R+!S1[b
vJ`BQy+I
 pE!?.
eg1m&8yP\
ed@FW)
+?8HOECKmK?'
x%9'?=UNu9I
(i%'dUW
\-P.Gxm/@6$!'
kJD6{H.
c_N[zT
,*cWzWbF3t|c
o~;!#5
,C9?j{3}u[[N3V+N&"
 Q~-y#F
S7moXeLek<
QQAZdHa
MXxp =|02J
M_8$\Jh
4A~;Y^NK|
8Ka`Rb
)Rdvbg
wB[9|'?
G;2hcc
BVf>xe
'1mkN^5
KXxwCh6a
HF@2@
[]Dn4{CNp0({T
T&1kB{/
kMjF#fPlj#
\?Sk__ukMRy\
$-7U(O~47<R7k"
gf;d/e%J
eX:sA
yK83>6XK9
(XxXuem&y
Cle9^p:
G7B#/uZR#ro
s]7WV1
=Hbs(eCSrGp
,Rj[anik'&
^fZ~A <nh#.Yer
#i"5uz;eR
>B#NawN
C[xM1;4
UQ0Kip!
_]v{&K
F]Kw3UxucRy+#c^4>H$.
pPRnIEdu$@V
(FY7Eym{e%s
E8$>WR$
9jKaLcVK %VftVB
YmO8wD|
Q{M&i[~
~$83UZ
Jc6Tbe
8`YP[`)#+S
9scnSZLq{
~-gJ^9}ZNA]M
}=<R\oGR
g!O=[k
zcOGO?:)t/
]MQ=yb
`daj)h
s=tZYF
=dzR3i
~DA<~H~M
l5PWYq]
AMz|H9<
uj2&9FY
.%WLC3 #
9 ))^GP
[zQNvQ-0F
D`9=_fUqT
AZ9yA<s
#Nn/BEd
4P+7+r`+#\\.
rY`KkFfe;
8z`f&Z2
n+Q}\6f+
F/TjGsDsg?
OV4@"#
*\L2tU
qWRmm_R
uO@bn!c!
W22I$GU~"Ez X`_I00~5<wV&Tv!6
/$TH$*:
+Z'Xqbw+L
'zD~SGs5c8U2
TA&#[[
M+@Z{U9ll
epZBWha+=RV!kh^L
pJQoGmip$mS
H0vRV?A~
^L(PLXF
83*p0c>b
y]z_@_&,@h
 p9z|(
2J^%Ew/
BRvK5PQ#\5PF@2JV"/M
Kw7/^9>N`
CA>;aAh
RTA^Can
SdvRd7W
}~%Mb~
w1e/f-I
L7(ry_;J
3wY#KZJ
z!{N",lb5,w
csAJ7OxX
AgzV\A
F|IX?lF9?,)3
"DG'+a>;
E`O}B=bI
fu[_@=+N
g?nKIO*\8&now
~THOB4
l[FB<,
(B:{;^3
laCDNF,;O03R
"!}Q$G:u/@a
fK&;|DR?
jn3{D
W,4,h"@
nAiHi-
S#?N6/
gX'2T7o<a+]Sb
xfHxRK`sI
o=u_X8{p
H[S'5gq57d_Q
F0yb}3r
80(&V&[9\ (UOc&uUOZ)\g
}[nJiM
y\n!&f"
76Z;hPV
J,o=kjE
89O+SZLd#(cyZ
Uj?Tr,kP5^y
>g0>6z
xud(R]
5H'#R26C
|ZVF0Pj%/#
 >.KFnM
!#rXau
S?%_PcTX
w't{nC
7+1/F6T:1k\
H_2'Tj
Av$@#})}
bU(v 9
1BW!Y>
mz-.?l?V_
G9/0R=<6bq"@GTU
xBX]c 
\Md!Z<
>p?jG0w#GW3
N3Z41QO
eGCXhG|
-^VC?^
G]T^1i8~
l;5DJ
H`\W-+ObTWw
%Toey#eV%
b-20sg\GXc
3]M*(aK|8QX%
m+(z/u
&=C!R<qa
` *Jsr]H=
Y2wT&at=
"iamxdq^
`%O=8R
(w!dj^58"<}?
x^=KAnk
||lHiX
DX^jpK\
-~4q|&I8'3(
ZE?C`Veh
3wR}gk
[pK6s]AV
ZCY6UVsO/
S3t<=1
]?yz\"G+
9HN-45*/;
pDGDAp]
^a))CnH53
5^)CATVO?0</_[j2H&<
}U=m3}&k*rF
t#--A4
gHEVd`4#E}
)R oS4%
b;qw]:l-
366>Um
%@"s6p}
Mvr3>I;0
6;pUXH'8Af`<}
bwe*mp9.iy$r
GA^BVN6
BvvVLW5s/UhcG
#kj$w9UNv.A
riT%DY
IHXlc-jA~
"9 CZL
,k]/9kT^
1WJ*skDMZ5:
hL?7!Uo
DIdH UT
ps>CSQ/
$&<xJKu
-0<Yu/"A
(RTYI7D
zyvds|C
-AEf{t,e
~ru (8
?v#Q~>!vGnK
lVhyu'Hw
c^*[Jl*
DV`_wzg
*w`0N}D
iSv%g9
51Yvh]|w
Fo[x'(
xFuWu'
jLNz!K
LTU086.1
$cJc9DQD
=/l}'2
q|.tv<
a:qd[K{@|W
rkK|s><
JP23!&
/9]I0ld
&6TAlOp
;_S!~~9
_Iih\qKhr<A}Rnjy
vCCfQOf
S_*V.3
yc~<qnP
|1~tC|2
"{K=c`3QF
ezQ8=W4E
i|/UMP
nPbB k7
S$.}nD
Wpwz(9@
=rt+"(|=yxRc)U1_\x
)]Y?$F
G+d\$'
o#0ef,yO
j`(lo&%!lLQ{5=[]
f9A78-
pbFO$N6&
?o[d3c
`h]%z*
g/7!e ^/
vd;pUu
Bfbht;SH
G/GA7:
=kg\;xvgw6y
k^mchb^
`4dW-h
\r&&>{
m%R$pZ9vEao
z[m:)IgS[7
k.HR1F
\fRIsT"D%
TP"a/u+~H
Wd:>Vop
kBlcj#'
RN@>M{
uBUG(|e
&Qs0NL=UN/L*
Mn]H=<
Q(NkJAb
UkZn4X+"qi
%_1+H4
mp!E"C?Nnx%
4OK\d,u
qp'k~e8/
mag|&Q
yGgT:t`iN
5FV@E]2m{gjER
w.6co-
W9O#2f
i8!&6X_Q[Rm(
;H`t,\so=#\zY~
DZj[R(Xr{`Q}
E<Dmu:kn9@Aig
&/Y(vHm<8fn
%W72{bn
KL%B0gc
::DTm{vJ&
i%D.AD.
2t3',4x+[y0mYa
7LCH({
-JUz.^I<tUS
EI73t7}>%}dMq`
aazI'92
t{EKest
q@TUo&*+4(T)P
m`!f5q
q0mJ7[a
U:j\cO
Y(H{8_
6cw$DB|{h|tWwzZ
CeX7iWu
3?Foip
5j",knAd
')GJWP{
80dueZ
~^;TT5kc
H>"3UE/\T1%
M5tb[3
q4\>TH
*;NTl%g
Q8RQju
XtYC=L@
`*!qH?)@?U
a{8tlNz
(O^L3qt)c4xS+q?
A<2Egu*
A8}%]i.VQ
W/uHFy(^RT^LlU
[jHV&2
EYd}o_
ii<l1>%9
K&,0c; 
rYNZ)pO
%?$-~v/
VZi%/R3(
CbpT*Al*`I
3>$7jb
Uic'6EnK mW<*@?1E&c|yRh=kDi
CU\s-><)\
=/7BD{7
$T#XEX?Z
YWB-,<+
jvUuDZ=m
>{h@636y
{%s.hkOc_
`A&$!\
I#q67"_em3I
BY@7BM
-/-8Ee>4
nO5D7KM
?fcWL}
izKFr+i
v|8R3P
638'&W{
;NctQUjD
Lxtjv^7I
u]Byo\%;
lHYV+m
{S,Dd%;5zTy
d"C'i_
"62(IYt
\A(,!G
3C;j}+4, >)y|JS!8
rtBNjJ
BtuL!#-j6zBg=`yse
C5\h"FC2q
!!&Dw4sK/x
"< b&W
9UM4b>:
}X7=s-
+6Sb2o3G4"!
9BHHZZB1
^]?2MV1DEK
W}V(t~
n&W6xZ
THSW+Ji
+$M RF[
7 As|"H?
hb_,KU[
s8U{WaSU{I[
]M3zo::
>VM!Ke<qq2}
Lgs^/Bo
$#dnKG[|
h{SF6
""9o$8?^Sy"f;,
'~H "U9V
oSd#xE?H`
NVT)B50
4'eae4
&gIsP
[fN6[ZB
D!A,sXX
A:=_,\8sBp
TD%^LW}
R!:[{j:u
T;y<8v=
va!8a\'E7S
)y]D;x
pA^iJ-
ZeVFb*
o$<=_1RZHd
Sazp?9)z
f|611_b
's_^Fy
Etlur)
yzI'~LAVrp
WpJD.cg3
4R}Wm,^
?^0*cOl
 cZ;HA
29+%7y
XToJo]sg+[[AFHj8y
b,rj3{
OXm_;K
u$lBplWS
\L?/X{v|^
> Xu%@~
6R7]h<GL@Sc
9_bNh5
n,o]9B+E;&f
L=%>aq:d
boEa4#
21@5:yc?6
:|=1-Zut_%
*i9X0Y2Yui(
~ Q\!F_*)"
DizGyL
_4hT]L
%*o:Xbt%wB
GkcL L
gzQOo(
.Yd-tU-
VX_]1J(Lc?nG%
qnuxy&A6f@s@7q
&Yl8>aq
wc(8|X
D= CX~
izF/,%v
UQ:4u5f
TH-2-oYXy
s{svo|*
f]il?vt 
'aZ.QV
lf#7R;
]B[SXj$A
GX'5,UjCsZ{
'HB7/j?9
(HP>3`R
ck0eWW"oixd
G_~L|>5
,0D8H2\"NP
<h730;Y
*(Y?G5
::!6ad]$
(/TP+V{3q
sH0ej:tXuCxt(V
:8s#";}@T(
PEl,7N-$8j
q10wF2VBbW[
h<VVKL
hq/8JS8$[
M<])wa
^tXAg,
aUG?p:4C
(E6N8:BW
LxkOE:ZmE*)E0
"X"Sj}3pD\}
C VwilU{
nmp{JUZ,Wy
'@50,G
$u=,`SK@
0Wk+j9d
H/3Ll6[
"xA"CXYQj"B
rSyb4/2
DJJL} 
z}#[fCHA/
|d)bF:c%
C~P@NIt
d%//\)x|
n-B3=x
WYNbk;/
G`_y.@(gYr
xg+kFsQ~)
naQ7n>
<R!"9Gg
axzjq{U9|
l'pClp&
X[r%R+.dX
K@kGtM30&k
ox9%5d=
cxZxw i&+OQ
EQbXd\n
kA33)ZGI3^
3DfL,i_
Sq5~RT"
}.\['&h&
z2H['QBh
Kj/n}F`
g#."`J
O8)dPP
R?wBI|
?m@4 &o
S\vR';T#
#;vAu1VKtt&.
?>iYA)K
C&8_}6
nJFp;]K\Dz
x>?a%v
&>[a#n71
[lB{p
'(Ek4&n
ne_VU2
<jO-J+A
w14ycRp`fcN4OP1K
K,da!5*4
4[=Wr87
!2v3oM
%CRcVhY
l7 <w!
9qs4}0
s+#p!:t
[-aJr'ei
Z7N+ `-J
`rKC7 {v/T na
TxVr@I
4[cLE>tz"JSV[t0<{h
^6R31,
N4@[R6k
V=e_c0Bed
C.(5}_3']Qy5
{A6BNkGhY5\:
hAN7q3h%2Y
b>t@5a2=m
&7yi5[
eEI+i>m
H`&c7qsw
'a_:_FD
p..aPQs
8V/Enks
8$d:9l
51=<Dth
 u50~W2,qea}L
E_.te`TqH6k
Z0PD:@\(
%}t"p%!
ev45o3?;#
V^!'Wnc1]
Y2ySYPH
oAm,wP
6bSn-h1D
H4X9aU
yG)4|~
AAad>'hgb}YaB^g0
DQ?tPy
Ky8hS"
EJ<qBWd7
)VIi/t
MVwk6-.;_L
/k)^Dol
[:#A&L0Gl
dAEt_a:
dw8RC``
z9I(a7ix3M!wXH3
GT!|E9)7
s,;*%hAFGn(JNd
o'yoI!(
bIn,]$
Iq.A?;
eO^H0K-WJ"9,
'QME|(V)
2(;i^G
{!X)BRy
XG;H/]r
GF@5[eIno
6Hs|i$P3te
>0x+;-
LfN6zd6M
YF&_uHG}3fz&
Jy|8JG
Ul_rMV
swtoLc
/;|NtHZ!.M
wbM0Sm
L xi8S
'fNsis,5
o\_\C&
q)W` K
D8I|UF
%]dvkZo|
Uo.cS%
8P8$5j"Bw5:
TC+>`q
4sT5z,0zu
lPdOwe
$6@7ddWKPQ&
pzwqZajx zDn08
!w`1!*i4M
BPEn@?
?-XGt@9EX
='zn jBmd/v)6|1
>2^ZiSp"#
CHzuVRO3B0Vw
ik<^!.
m;)^x0
*Q_k!N
s3@GKtR
mR*]` W
<q4s{7
TXp1ArJ<KhT
=%*,%m
i=QKIaN2dwO]F
o6?T%q?-
[A320N
.o#m,V
>'7+2D x
OYX^k)z#
t!a[W\K
J-:z)'<
]ykgA/5Y>H
tcy:a%G
1KLeVtJm>f18D
EI_qi-fK
!3l*7\^n>
2yC)qbB
%\6|TLt&P
z#4t/8b 
G]!a^_3ff 
>qSj6\b_/OH$GTU"
,r`!%m|
NTK1E}LL
}5#f\K
lpo\@xv]De_@Du
Y`(ak2C
W2CXK%u
.C<fxF#A*
3K}{?D
m/(8H)-
#=(X92
e:0X"%V
I1AOcY
pr7&+Ty0
! 0~Ve
j|^bb7y
(~kk`hLk..
 Ev|3\Ao2Tq
+?d32+
xC*A\[11
rMfF *@T.r
lj1GE2
pIi(p$_
R th"%/3
z?*1[s
vCxJjxI
!{1b`:
lGu8F~;dg=*$
`h~U9Vs<e7mj(
;V~zO`
{"1OsT
~&Q)hGoNgf?
\Qkt&CF|mM
z:]I=B<;
.L2xV'[?w/
P`76[v
<HIfW_gS"KxnZCg
P|P|NQ
tYGmf'ahI$xW>z(;b
3"MSU(|!Co
'M;E6F"Qwu
@Q$(m\'IB
ME(1p2
yF*9KP
XAb=u2+
aU.Y7h/6
0Ud"43
F}@"4]
CbY,Ma2
<O7b1kCd
:,&Ywf
ceS<=t
WTYYD7-
P[nF3&-K
GX#[vy8
Ef>s'\aT
!Js**9mb
 SA"Zim>4Gfg1
pM;,W,
103Wwt
_3HJ?-*OBa
{5Xp |
e(+ |,
U~8{56:
iSN'%4
g`hrh5
vwava_ll/Cw
vlSf1Y
|5cd{+
Bq_@t<
:Ar+YE:5%0
seB_*T
{.k{!_
Qz:hlTddg
R~;EQp
R1-/*u
WUEC+Y`5B0.ueT
?Wc-*uP
Q;wFvp>N7
fuKV"DvfDh<rpw
bZfo2|3lQf
Jo?<2'
a;zL9Gh
G<*S@@f
a3oAc^
gQX#Rn
Z2]i]A50I5e(
In*U;3]
Pk4<.v4(ob
#'x?o
)dvisR
>3U>gf
Q%#|\M
I0n&7vC
zo(|q5
jrDP'+v
[y,6{8K9s6w4
Zx3'YJA(|F||VC %
^;jvTz 
(9\]0t
4c dWP{Q
T#[Gz5GX!o
/d.%9ri
I'm.RNFD
(KBr"^dX
LX&dx%TV
agtw=*
n,I">}
+X8^"I
I ?0v^tC
-x}MDlL=)
w_j|19hF
iOs4VXR
r]M]sQ
U@2bl.
e?@h)Q
hdu}}4<;c?ff
yZVsto
OHhK<A}
i<vX@I
5\0lZg
WUD+3)?%Q)
0-|)gq&B
2Pl,/`%T
/z::d!^
.s#6s|;(ll;UzG/Dn
/125)*
+s&6|RK
#3`ERnGW
}&F<).
YaWl?j*
_dPi,
r=0Fs@J
03LR#^
T08>.\C
^2O'pzJOu0P3j'uJ
DLpXGW
WUcIKI~_2
$R6O/tsmJyU
={yM?nS
akc+>O
jpt,: 
Z!K"^_);
<B+(M~gz*Lp
Z[ey6p
,%G=UzaL
4rs_r4
?'=Un=`h
VyvW/qq
%[Se^{4TE3
HL\:j^
8iC.-.eykD%!V;n{
z9$Zu)X95Oi
1>$|e}W;k9
X@EBU5()@+
0qU.n~
|\y-/9
Vlx))W<My
-,3^&H 
-9#D.L
P?x#"Cnl2
dh:{LCH
 }<dB;
'n+ Y1
ik?Eyz
=J,`X^
YU>*0[
O6$+-'
.n+[<:F8
N<LRWg%odT6s&
N|R+(&QPlO
Zx HNC
sX.!1b
hi^`!JgqBB}
'3,><o@
QVJztY(
J%ID+=N
Y@l?zT/]i:
qIgZym/_|,Ge"a
-busVU$
KfY<7'
.h{z(f
^(xx_G
9r@(c L
lldSW:
lVIUe|
&|ujF1
Iwp%P/`Ew))Y9(
IAKXQy
xdj6ear
w,f7WYY
M=PTH/
'l[nMq
z}(,A]
JM]w88
7$c? z
g6fFc3]
d0H8YeG
QxkNPV
50[aanY
-Fl4Y$F|
;lcdXx{DO
lc]*!u3C
B:k;j,m
U9@hX!1%hV/OA584
>Gts~^19d*
[xCBHO
rUd<U
/`fUPd9
-8tU`y
LS1dOgBc3h
"Hi`O\Tw
?jLuF@}
8e6N_R5ko{S
\Za["^
OtMd?c
zh2BtvB!7PVW55Yv8d
AEbG}9
0A<mSm
.`tJao*
f{]g(dQ
&N08nL
2;?i5YZ/4w
:<ztbRDN)@Z$q
>e;R:Lp^
wx`F-w
b.j8]uE/}
:hh3|7D
Fg.?x\#`Dcd/Ll&YQK
`B<\oCt0
zBCWcJ
1wo%8(;/
Ld9#*F
"K9'qXEm
/dls:&)k`VzL
o!2cOH
PsovNIv
mUt6W;
l:Sg`.
b%?Y~9
,b<=K&&P
C~D)SZf`T ?;
"FDt7^g
7{G$35
Ynx1ev
N%O3(N>Qh
E{O_A@2se
oiU4=yxI@S=
X]kS@Rm
$[(g,&7]H3{r7
1/`'E/
gpsFJ.
LKNE|~
w:UJ~"R8~Y-uFo:
f/:2QDW?q{`hT
$~ikXT
wU_^tfqh\
>6/Woo^[x
1m*+.F
Zt{[cD
}]]9&1
10'[*w#N'#2
gdT\L+
!3}wQ[?
fTc#vu8}"xW~
vv2_Q*1%
h0M42'
dLS4A+'E/l
AuBMLz5M~/
&i-6mmb
vhSVF4Y<w
b/6@O)j
Dxw4~lrno.
&v-R.A'
tnwWbP
nHy^<O
EU-O,ly
~u5u F
+F_@;b;e
 ?~CZ8;L!
AK&J&,n
se|A u
B.au!R
m.SO;kN@#8
PLCjd\A
x4B29@
]ig{$b|vJC
IE%ZH-
v93z4%]
"} Gh'f
Wq[@WZ
e|lIG@l
'F)IG>
3/F7WW
pL_LXA
g1 u>QEF@
bP#zGZS'M
x&=aRx4.
]?e97Q?
s6u=m%X@xFS,+o
Y=!au7
5T?Qev#Dfe`
JGq+{;RR~K
J!U%>H
xPS`F&`M54
dn!2zl~
Z8{7fLRR
d@KY,a
).A%/Fb!
bxA=uw>
?VOhVW?w>fN|
Q}7l%/`
)O&f1!
^!w`"J3j]
e)YD\3
bz:6(GQ`Dod7D=
.9D8gIu
Lsq\`cEyF
):?=d
(+XIQh
\OC5))R?zLu
eZ!S#55e
'*LAEpX
Aw^Df^
),eZK!|5Ps_B'/.vq@^B@
,/pA`qn
fUMr7L\
^;QW{@
jQ6UVRtqR
w),{}P[Te\da
%uJ'F"9r|h^
+M%~8;
b&".nYo30dIm.
wM-^`mrk&
Id7&EH+#
(pE2 ~
/$-fRGxbu
EIId.K
c1XjH`
Erfe2QzQM5
m9BV\/68(zQ{nq
t;2J()Jy4Pn>JR>P
tR$/8FN
Q?C;52|QGT/}
:r}%mW}
$>#zo.
=psi?9/
@SnFZ\zGn
'i5py8/*
GNC^c~
W&7HlvGw
 lWXqR
l 7}hW
<Bq|sS
X~?F}T
wd2/9cGKdFro.ji
XoM}*#O
\4OWu@"2mpqt>B*V\>,
QeYCQu
hN%tc`$j
jvS}vN:
~d7hO8+oBf
J0Ny3AT0"
I|H]oYA,
WTmI"Z
#~B^>=+d"84
W&QpF,= 
l*#+G,q
&c7{zS
OO#ZG+-ND
p<a?\]
CnHD[coc*"9I)kuEf41?
m0~"H76
xXY?PK
ngNl#%+!R`BM~`9V}
9a4#d}
v/Q9h<
5WVUN^d|
js6SxLK
RCR14||
FER;H16
RyW+KVX7c
Z["dnSfHQ9i{V+Szdi
Y|Lh%)
tpN+hF`=
onA_BTNdFoL=
s0~KRv
;={F>o6
!J:Waxb
kBcf=a
X} ]7'z
71[!Z
7w<lHGA
g;~hn\(XC_S
!Hkw;DA|
"|JNdI
\8&.3l [?;`w
gn,=8w48!'2p@O@n<
*^\{*
&=Mb]d
 |"C{O2'h
%0DA19QfHE,Xk
:rz0!+s!=uR|
"h:*#0&Z+PT(
.u.37E[,
7MBAgG[
bW]^#C
d%\eJV;'Vh!uZJ.bS
,e Ojb|
L|(MF;e,
KKLG32a{Y
^{Y)?`e
q+(UqHz[F
`Pm9Ur;XDa
M7w{x<>
,o?sg)1
M3_:TR;Csj^yQ
\Pqe;U\JZ
FA4uQY*
\]nJk15[0
,J:g7dlU
uvTS*OBtB
i~SG,F
zyZ8jQeV
,*ex=(G2
mHD3_<^
825eH<gefN
K^eWSB:_ 
"0Z+^=<i.[
@<3+r DBW`
?/B<Gy2DgW]^
A/4%cZy#,x5
'SakT7
F%:0iF
s&~gDt
q\HmIZ
&4,uP[
RL&q|.9^"3
``g\vK0"Av@~
 )x\lM
'gN5#4
mB}$X$kD$
<CoP'ji
J=O`&zH
0;Un.W
`8KW! O
Nv-uN}eRS
^-`7@N
d{{eBQxLP/$y@RKHB
#~/^y`
'X1#D%
<A;kr
_Rz=v W;
/|wKQ/A
 Rc#\H
*D?{KUEy)=6,YC
m:' *zy
H.z*Y[u)b.o`J&nn3-
V(Q ?;0's~zv!Ue!
/@~smz
\ua3~@#~
Qknrl@Oys
^l+%7i=
_q-k3F1
ou.3}zW
fcWaBSG}.
Rxt*h;}o(1okw
ercJtS
V2Lxr{g
1!&BAC
V]u]$KpJ
x0x"Ln
a.Y?$8
O=uq}Q!
%LIE[O%'m/
,=j<hzLX1
:f}5f+
{9cqA[Z
5(6XPr
YT4GS`VH:
Z].C)TdL09w
xi)b|$ZN
9qS?ken
D!_T0h
gr>O^ 
;{K7*5{ 0_
kSX{&s
2/%QK1uK?O#
rR-1.mJ
i?rp#cC
~by;/o@2I1XN8c
Bu~|!;|j@
5ytF0j[
:GTy!o!
WYx(.U-W
m5\dM
j3oOsk 
]hX"JW
?S^Bz=
K0ap#L
Az7<I7B_:
kq#]G"
A91[0qY
}*-Lsq
%<;qc|>*%
M_nDm>jI
wE="dIpB`
Ws~3d7=
Pj1T[
F^T6p8vP
WPbTVbj
mEuX**U
=aw^+-bq%oF@_|VcNQDLG
.]&}kQ
~827.c
auIN9:)
Y4!iD)~;e
xJkz,#-s0k.'Y+@&
9$BD`h{~lJ
c6D|0c
JIdP#6
wL ul9
}oT,P[ U
>%x-G&"
K*D?I:}F
s*fOCR
Z#Jo({dG
q;OIUT
-oy}*u_Nx4O1'
'.w;eSb0&}@U9t
3mbu3O
#7x%//s
%=~w9d.
i'rr`P,g#
jv9H7o#^@h
G;P;Ky*
P?hf=yV>R
;qoS$&abIh8
;.Aed``
_V=eXR
lX[a)/
|,gwh!R`
&JM`%$.,8Bx<HhE.O
o);-@B++(z
48]2OKg
D}G+Vu(j>.v$YW
%AG&u-
k@`b,-l-
#96JGnG%
WcW8FshE.$O
0Yc~*P_T
b`#,]-
L6{ZK0
)RInsX]REik
qks4ll
2(v.J:'
|S~~uz!i
q7hzkS%H4Cr`0
FlOJD;
|Sx e6
)> -(`Z
<vm4u&
M$x~O\F
[JITK0$+^W
t2.)|6r|)t-
c(zb6[M
1dVq1an+N
90&@&t^E*
paA8s`T-`cSr~
<NI)w9DY'E>6
c'G5M<}o.9
4c]ts*nL
*[C;'p
X8qr?De
|4yE5M
>i7Ty 
<`%AB!
36T~t46Z3Uy&
EVr0uCEBVdh{uZ
TCD\S{
;1LQO04z
@a=m;L
2m|w]!B
vmsLGMu6SvwF~"
{_P$*cDrW')
PQ?9(8Ju
z.SE;g1)
Uc9a">?{>
<,3MAx<
*DO]\~
w"@j5q~mvY.xr
Q%ZTD>#R$m
k#iA*(1x_
 hpdRwB1DS~
V&{fHk
dg;rWy>71H4^RQqp? |Uc
v>/R.|l
@SfM&=?HgB
!KG3t]nS=
Ee~=m^jG:
|9P19WAo,KxFJAh{x]cuD{u
?d=v,[EUg
Zf*lm{NG
@~qfa
lWcFZnK8P~mW(L
9kx|MrnjV
?`x7,)
0MOFoSuW,
,|U=4M/:&=:C
 o[u?p
21z,-U
Bm=JZ=g i+2\
P?u:'I)D;
qBQ53r.q
;sfmq4q$'
g(H0xD
)<![U`[
z4Qzb,
#v9+6&LBz9
v;$P2Za
!RrYH=%fl_\}8Qr.63[r
:V]av6V
`<r}7c~A* e{qtKBR
Cq,v,+/acOI[^r
tO0DrvUb
QbH;fE9 
p+n^(4eeg49$nPc]
Y&>?B5
/]fH\t
noSjxCxpOG
%I!Z-&K
yXzy!_f
m,ntt2p
 g7Hp{>oY5'
Apfo*&ra~Q
pm\:}kt@
$D^cX3fIuJe+
W<,WuV
 y^jJe
77Vtx(
R 5jWdBq^y@
11N9%q9
Bmvmj
r:9y,i]
Mee~o?=o@
PiJ9"} 
f|y _9+
t`OltR1p>A`
0DcbbsaV
*,dXlMQbeK-Te~K:G 
$^HFJonRR
M!f>1JWnU
w,jYnCk
Ba>z9VY
gmv@z]
aXvxLMZ
OIHsW6!
JtT0.;1-Q0}r+
Ik]t7kY*I
&O\?u-!V
d8>~S(R
;z?4V=O
,f-Wml&
0md#*gdN
,:)r)19G2;jNQ~f<t
UKs7Ng>Tf=v$b
\zT\\FM(F
:2X$19
)rw"E4
JkN.@Fg""
UGW0'U
F_guz<%
C:+s<hmP
tB:F^Y
/S0;6o
i0p@oH
'h25ri0m"a^
s`<=Wl
@36kn.^C3B_
a&W>FD'"tp1
DV4jz[i-:"
h&GC1-
Td$ApQ=<R
 J&=uKU
Nm#CW~1
1-z-+u
c\P:nGl3}!
JM4%oq
r_]4r]_N
osq1@T|D
_}Z4`q
C Tp'Z
.(kc:n&%gIY1'\3\OjySu
RX{u:C
tSL9 8
@^* nb
ZU3qhxW
w35IQ(Q@P
e2e%:=\$>
!VD@1>"sO
Pe(8]8^/<
N^B]"~Oh
+1U9]AJ*
ZxEVZ6
:|.5j40:d6
5HDW\SL
4~"P'm<B
>84`Wr
[7Iy)6U
sA"8jfz
yCGVV-)
}KZt.?
i=!yBI
nYI@]'+^OC;
BxF1*1\:K!
x~Mn3Y
5A7Z%QK
\R~>$e[8#@Y
qSX$c&j
M]Z<`y8Jp\H
2@e^w-q5S]
3WvYR=ZBs{B
T%BwOB0
@=pz(G
IoCn^8A-^`eEw@-Sb
zCjd0:3`a
GmvldTuw
&v,__:
]<>A~[o6b
#=n/k-+D
0t$qR'U/Wbzo
OlD>Z.v2d?f
j!V]gU
S@OpI~7
/~7C4W
OD^dgA
6_\0FJNPJ
l~v#/U=!4--]vF
Zia}7Kfj
FWiwsm
=[Rk#8m
Yk\ Rci
&N_J!&/
kLo9do"
FRHKH@
\mbVIKss`
AQEak'k
[{Zcq*Et
o,'FsXB.<
m}3fL\uiDm]?s
n6qF7c
5hnKR"QQQ08u}.8
m]>'cv*
14c-xL
HE}%F;`s
>)ig4l
0'v08<VP`5@
\&VbJ6uHxtw
}GKyjq
OPD{j"_'
]r!ui^)
]`H<ye*v! 
vzV]';E'")V}/!s}
;>V\RS:*$
\t65Hx
OVQO_E
Q-.~R>/
X.q;\)#
woZ}Y{
|zZS8$w:~
1ry]W9n
9scnSZLq{
~-gJ^9}ZNA]M
}=<R\oGR
g!O=[k
zcOGO?:)t/
]MQ=yb
`daj)h
s=tZYF
=dzR3i
~DA<~H~M
l5PWYq]
AMz|H9<
uj2&9FY
.%WLC3 #
9 ))^GP
[zQNvQ-0F
D`9=_fUqT
AZ9yA<s
#Nn/BEd
4P+7+r`+#\\.
rY`KkFfe;
8z`f&Z2
n+Q}\6f+
F/TjGsDsg?
OV4@"#
*\L2tU
qWRmm_R
uO@bn!c!
W22I$GU~"Ez X`_I00~5<wV&Tv!6
/$TH$*:
+Z'Xqbw+L
'zD~SGs5c8U2
TA&#[[
M+@Z{U9ll
epZBWha+=RV!kh^L
pJQoGmip$mS
H0vRV?A~
^L(PLXF
83*p0c>b
y]z_@_&,@h
 p9z|(
2J^%Ew/
BRvK5PQ#\5PF@2JV"/M
Kw7/^9>N`
CA>;aAh
RTA^Can
SdvRd7W
}~%Mb~
w1e/f-I
L7(ry_;J
3wY#KZJ
z!{N",lb5,w
csAJ7OxX
AgzV\A
F|IX?lF9?,)3
"DG'+a>;
E`O}B=bI
fu[_@=+N
g?nKIO*\8&now
~THOB4
l[FB<,
(B:{;^3
laCDNF,;O03R
"!}Q$G:u/@a
fK&;|DR?
jn3{D
W,4,h"@
nAiHi-
S#?N6/
gX'2T7o<a+]Sb
xfHxRK`sI
o=u_X8{p
H[S'5gq57d_Q
F0yb}3r
80(&V&[9\ (UOc&uUOZ)\g
}[nJiM
y\n!&f"
76Z;hPV
J,o=kjE
89O+SZLd#(cyZ
Uj?Tr,kP5^y
>g0>6z
xud(R]
5H'#R26C
|ZVF0Pj%/#
 >.KFnM
!#rXau
S?%_PcTX
w't{nC
7+1/F6T:1k\
H_2'Tj
Av$@#})}
bU(v 9
1BW!Y>
mz-.?l?V_
G9/0R=<6bq"@GTU
xBX]c 
\Md!Z<
>p?jG0w#GW3
N3Z41QO
eGCXhG|
-^VC?^
G]T^1i8~
l;5DJ
H`\W-+ObTWw
%Toey#eV%
b-20sg\GXc
3]M*(aK|8QX%
m+(z/u
&=C!R<qa
` *Jsr]H=
Y2wT&at=
"iamxdq^
`%O=8R
(w!dj^58"<}?
x^=KAnk
||lHiX
DX^jpK\
-~4q|&I8'3(
ZE?C`Veh
3wR}gk
[pK6s]AV
ZCY6UVsO/
S3t<=1
]?yz\"G+
9HN-45*/;
pDGDAp]
^a))CnH53
5^)CATVO?0</_[j2H&<
}U=m3}&k*rF
t#--A4
gHEVd`4#E}
)R oS4%
b;qw]:l-
366>Um
%@"s6p}
Mvr3>I;0
6;pUXH'8Af`<}
bwe*mp9.iy$r
GA^BVN6
BvvVLW5s/UhcG
#kj$w9UNv.A
riT%DY
IHXlc-jA~
"9 CZL
,k]/9kT^
1WJ*skDMZ5:
hL?7!Uo
DIdH UT
ps>CSQ/
$&<xJKu
-0<Yu/"A
(RTYI7D
zyvds|C
-AEf{t,e
~ru (8
?v#Q~>!vGnK
lVhyu'Hw
c^*[Jl*
DV`_wzg
*w`0N}D
iSv%g9
51Yvh]|w
Fo[x'(
xFuWu'
jLNz!K
LTU086.1
$cJc9DQD
=/l}'2
q|.tv<
a:qd[K{@|W
rkK|s><
JP23!&
/9]I0ld
&6TAlOp
;_S!~~9
_Iih\qKhr<A}Rnjy
vCCfQOf
S_*V.3
yc~<qnP
|1~tC|2
"{K=c`3QF
ezQ8=W4E
i|/UMP
nPbB k7
S$.}nD
Wpwz(9@
=rt+"(|=yxRc)U1_\x
)]Y?$F
G+d\$'
o#0ef,yO
j`(lo&%!lLQ{5=[]
f9A78-
pbFO$N6&
?o[d3c
`h]%z*
g/7!e ^/
vd;pUu
Bfbht;SH
G/GA7:
=kg\;xvgw6y
k^mchb^
`4dW-h
\r&&>{
m%R$pZ9vEao
z[m:)IgS[7
k.HR1F
\fRIsT"D%
TP"a/u+~H
Wd:>Vop
kBlcj#'
RN@>M{
uBUG(|e
&Qs0NL=UN/L*
Mn]H=<
Q(NkJAb
UkZn4X+"qi
%_1+H4
mp!E"C?Nnx%
4OK\d,u
qp'k~e8/
mag|&Q
yGgT:t`iN
5FV@E]2m{gjER
w.6co-
W9O#2f
i8!&6X_Q[Rm(
;H`t,\so=#\zY~
DZj[R(Xr{`Q}
E<Dmu:kn9@Aig
9scnSZLq{
~-gJ^9}ZNA]M
}=<R\oGR
g!O=[k
zcOGO?:)t/
]MQ=yb
`daj)h
s=tZYF
=dzR3i
~DA<~H~M
l5PWYq]
AMz|H9<
uj2&9FY
.%WLC3 #
9 ))^GP
[zQNvQ-0F
D`9=_fUqT
AZ9yA<s
#Nn/BEd
4P+7+r`+#\\.
rY`KkFfe;
8z`f&Z2
n+Q}\6f+
F/TjGsDsg?
OV4@"#
*\L2tU
qWRmm_R
uO@bn!c!
W22I$GU~"Ez X`_I00~5<wV&Tv!6
/$TH$*:
+Z'Xqbw+L
'zD~SGs5c8U2
TA&#[[
M+@Z{U9ll
epZBWha+=RV!kh^L
pJQoGmip$mS
H0vRV?A~
^L(PLXF
83*p0c>b
y]z_@_&,@h
 p9z|(
2J^%Ew/
BRvK5PQ#\5PF@2JV"/M
Kw7/^9>N`
CA>;aAh
RTA^Can
SdvRd7W
}~%Mb~
w1e/f-I
L7(ry_;J
3wY#KZJ
z!{N",lb5,w
csAJ7OxX
AgzV\A
F|IX?lF9?,)3
"DG'+a>;
E`O}B=bI
fu[_@=+N
g?nKIO*\8&now
~THOB4
l[FB<,
(B:{;^3
laCDNF,;O03R
"!}Q$G:u/@a
fK&;|DR?
jn3{D
W,4,h"@
nAiHi-
S#?N6/
gX'2T7o<a+]Sb
xfHxRK`sI
o=u_X8{p
H[S'5gq57d_Q
F0yb}3r
80(&V&[9\ (UOc&uUOZ)\g
}[nJiM
y\n!&f"
76Z;hPV
J,o=kjE
89O+SZLd#(cyZ
Uj?Tr,kP5^y
>g0>6z
xud(R]
5H'#R26C
|ZVF0Pj%/#
 >.KFnM
!#rXau
S?%_PcTX
w't{nC
7+1/F6T:1k\
H_2'Tj
Av$@#})}
bU(v 9
1BW!Y>
mz-.?l?V_
G9/0R=<6bq"@GTU
xBX]c 
\Md!Z<
>p?jG0w#GW3
N3Z41QO
eGCXhG|
-^VC?^
G]T^1i8~
l;5DJ
H`\W-+ObTWw
%Toey#eV%
b-20sg\GXc
3]M*(aK|8QX%
m+(z/u
&=C!R<qa
` *Jsr]H=
Y2wT&at=
"iamxdq^
`%O=8R
(w!dj^58"<}?
x^=KAnk
||lHiX
DX^jpK\
-~4q|&I8'3(
ZE?C`Veh
3wR}gk
[pK6s]AV
ZCY6UVsO/
S3t<=1
]?yz\"G+
9HN-45*/;
pDGDAp]
^a))CnH53
5^)CATVO?0</_[j2H&<
}U=m3}&k*rF
t#--A4
gHEVd`4#E}
)R oS4%
b;qw]:l-
366>Um
%@"s6p}
Mvr3>I;0
6;pUXH'8Af`<}
bwe*mp9.iy$r
GA^BVN6
BvvVLW5s/UhcG
#kj$w9UNv.A
riT%DY
IHXlc-jA~
"9 CZL
,k]/9kT^
1WJ*skDMZ5:
hL?7!Uo
DIdH UT
ps>CSQ/
$&<xJKu
-0<Yu/"A
(RTYI7D
zyvds|C
-AEf{t,e
~ru (8
?v#Q~>!vGnK
lVhyu'Hw
c^*[Jl*
DV`_wzg
*w`0N}D
iSv%g9
51Yvh]|w
Fo[x'(
xFuWu'
jLNz!K
LTU086.1
$cJc9DQD
=/l}'2
q|.tv<
a:qd[K{@|W
rkK|s><
JP23!&
/9]I0ld
&6TAlOp
;_S!~~9
_Iih\qKhr<A}Rnjy
vCCfQOf
S_*V.3
yc~<qnP
|1~tC|2
"{K=c`3QF
ezQ8=W4E
i|/UMP
nPbB k7
S$.}nD
Wpwz(9@
=rt+"(|=yxRc)U1_\x
)]Y?$F
G+d\$'
o#0ef,yO
j`(lo&%!lLQ{5=[]
f9A78-
pbFO$N6&
?o[d3c
`h]%z*
g/7!e ^/
vd;pUu
Bfbht;SH
G/GA7:
=kg\;xvgw6y
k^mchb^
`4dW-h
\r&&>{
m%R$pZ9vEao
z[m:)IgS[7
k.HR1F
\fRIsT"D%
TP"a/u+~H
Wd:>Vop
kBlcj#'
RN@>M{
uBUG(|e
&Qs0NL=UN/L*
Mn]H=<
Q(NkJAb
UkZn4X+"qi
%_1+H4
mp!E"C?Nnx%
4OK\d,u
qp'k~e8/
mag|&Q
yGgT:t`iN
5FV@E]2m{gjER
w.6co-
W9O#2f
i8!&6X_Q[Rm(
;H`t,\so=#\zY~
DZj[R(Xr{`Q}
E<Dmu:kn9@Aig
 ~h={I@^rM
aM.,/|
4X9JR?5*R
:n`-Svp`w)J8
3bsTN]+
5H~>!O{S
7T?CWR
x\JS/0
k>tF}-
&Ba?M}
{p<i_H
J,sI8.
A.n;dx
pDHcPhi
g-7,xX0&[o\!c8|/Q
&qXhG%
nEn&vb5hK#w
3'fwA
qFIM0x,T
t{Ro7*
>b@P^VE
njTvah
V9Id<|z
<1Qm 9>#
LW'-QTtOn
x?N\jaEA>j#:5v
>wAQn#
,Myl~X
xBIC$ArkQT!
ju(l>vn
3L_:#$iiE
ouggk1{6
b`'iD9
}dwyxqGRiB
s!4ke@
YE2zMY
s%@f)32,Qv,gq-
0P>74Fv
@tjJ=p
Y&DTeh8Ib
f8O;%Y*
~rdF}Y
M!<B chE
pdkEpiBb
u@.AiC^s~D1H$$&8d74Y\
qEe8+[#f\6
b<_PlnQT*
~B|Pw{7dP=Uv
x(:,6=.~
7S.gt:
PAJ2-k?
.*CcPHkK]
puSxK<!
$u'/F|
G[ZBt>#(
:qK{.uw#
IHXQuvl,
Nw%5Tt
^u]YM%D
5CCct(]
'&I%+E
/H@C.!C|
f}zn3&
Q,<JXn
*$e!\pg
kd#_;CPz
MOtnNtJxJ
!+Y);SA\zzUw
QfzG|IJ
#nP$MJc)T}7-hqoZ`_YTn
)EiH R
%U8={0(#
8G|d)h(yN
4<7#=@
<`3QD,
@]d w!!
gz\hyjSR
rRfqH'
"9g@4vf]Vy;
HVP]?psSl3:{74 x"
GriLp|k
"-c(WW,
2M7U}+.
9> ;^a
hri$M
Rz73WDzU]
<JX$RF&Yj
["*pOkNA
4O<BGesvy&
R,#4WBxR
Is"4rAQ.{Dww]$Yw
0gaCQ+G
h50{yAV^
Lr r-5/
WU<5_W
53C^x{U~t5
(60e> JNd0h-6ckSee
(9EyUNhy
zM/LIPW/
['n " 0ePsW 
Lf2":VKk36mN_
S'Kz<W >)
pYn8$`NNi
 z0]BX
8H~iX|k
\+uJAef
\?6U#AMt!
O^RQ+KenROQ
F77$LG&
Db#/}@i_PB&{4t
S ooM79+_Or%
-$<@w^RgX"fHk
1OI2OTG^.
C>7dH0
PAym6Qi
{;@(BpBf
-x|w]?&7PX(k:c1-
X86/"}V'
dh>8}]9
>/7La9;cr
S.u7|'2]%x8hvu(t]_
&_;9u/F
SxqhGd
mG?fj+
3>E$M q*`
nG`r&
R9u>(g=
e*#";O:)Tk{Se
Y%\nf$v 
h@5nz-w
6T4.<)@R
,h=[j{"
<H4thQ
{$L-N=Z
@Bdjz.{
*YsL-yo@%a)
2ky!~kHn
Ywn/GN%8Y)
#CEkf!4
0CTrukZ{ZsFi
l>T=[z/e
H23M:J1s
G)f2*3
O\/x;C0'EQwA1\A
p>E"5s.
w_Zm(81
@GWl4f$~Q
N*HKT@
%J;/"<nZ.dpT
'`:h65
lf7"(8/
,smX|HBV>
6~l*QmYSY
I*pOkW
SE!d,4WgB
8P\Z]tKA
yF"N(mLF
34,uZT-0
wKg(J]
4n9 \
SPY`:yt
~I+Waeh
*``LI?J+=R
_}4xHq"&
}H~0G!.
dBe:?j?eY<_y~ZNH*
ZR?=y!]9A[4[
S$2B%)3.
.xWUBB
m[^e']r
Q+tT'?<jOa
H-4{RE;5
A84rirW
N+P/!4~yv
2^dSGK_
BmOGjq@
Fv~HL+
j^60?^BS
g$5',yr
e3g|Pe
%@THP!}.
x"8TiXP(3
4LZw:sV9*
wf;D5R
^$cIUa&bW
z&_tH_?`qo=xJ#
Em{uJ/
6KR/>m
p~tXqi3*#7W
ooN^E{mx~j|w`AB
^iP|1P
+o93]O;'H
lG&f8VI
$)t_b>mh7|'
!2sr[!c
mx=jh?Z$_
?o-*J6
"[dN,'+
olkeH@X=
;d!=btCV3
Oul9bHNnZ]K
RZia%g
`.};`0
Fxd>("
cy-;[&
vJNTtg6
[i%p>DL
nL)%u1U},
XiPG3(^!vw&
1[jlCl-Y~rUz
)>|bdE
2E,n:-q+6
mU$THt/m<=
L[Ma/mvL
8w!LEC'
Q_Bq&9`6.tR3BY[gW
.m)bl8S<A
eQ,&UP"
]96UJ
zyKIi.x;dF
R]<.i]y
.o0<\Oj*w
#.Hs8H
mJ)~YP$:#:o`LCi<bZ
iNPr"S:0
b`E$RyI
S1)wI{O,/%o
8VyJ:XB
kvA!Kp{
,X{Zz(
#|LeO{P
JgJB:)i
p*-R_o
>VOn7a)A s%EFl/wD
sT49@S-j
~g61d6F]j-/VO
5Qn<cz
 si})@<
^XNuQXb
p3Si{^B,}1
jjWsW
F&"r?Io
-IF LJv8K"fT
N9+bf:US
nQ>fl(g
nL[BZ@S|imWg{Y1r_
d9>vZ#tI]W9n
9scnSZLq{
~-gJ^9}ZNA]M
}=<R\oGR
g!O=[k
zcOGO?:)t/
]MQ=yb
`daj)h
s=tZYF
=dzR3i
~DA<~H~M
l5PWYq]
AMz|H9<
uj2&9FY
.%WLC3 #
9 ))^GP
[zQNvQ-0F
D`9=_fUqT
AZ9yA<s
#Nn/BEd
4P+7+r`+#\\.
rY`KkFfe;
8z`f&Z2
n+Q}\6f+
F/TjGsDsg?
OV4@"#
*\L2tU
qWRmm_R
uO@bn!c!
W22I$GU~"Ez X`_I00~5<wV&Tv!6
/$TH$*:
+Z'Xqbw+L
'zD~SGs5c8U2
TA&#[[
M+@Z{U9ll
epZBWha+=RV!kh^L
pJQoGmip$mS
H0vRV?A~
^L(PLXF
83*p0c>b
y]z_@_&,@h
 p9z|(
2J^%Ew/
BRvK5PQ#\5PF@2JV"/M
Kw7/^9>N`
CA>;aAh
RTA^Can
SdvRd7W
}~%Mb~
w1e/f-I
L7(ry_;J
3wY#KZJ
z!{N",lb5,w
csAJ7OxX
AgzV\A
F|IX?lF9?,)3
"DG'+a>;
E`O}B=bI
fu[_@=+N
g?nKIO*\8&now
~THOB4
l[FB<,
(B:{;^3
laCDNF,;O03R
"!}Q$G:u/@a
fK&;|DR?
jn3{D
W,4,h"@
nAiHi-
S#?N6/
gX'2T7o<a+]Sb
xfHxRK`sI
o=u_X8{p
H[S'5gq57d_Q
F0yb}3r
80(&V&[9\ (UOc&uUOZ)\g
}[nJiM
y\n!&f"
76Z;hPV
J,o=kjE
89O+SZLd#(cyZ
Uj?Tr,kP5^y
>g0>6z
xud(R]
5H'#R26C
|ZVF0Pj%/#
 >.KFnM
!#rXau
S?%_PcTX
w't{nC
7+1/F6T:1k\
H_2'Tj
Av$@#})}
bU(v 9
1BW!Y>
mz-.?l?V_
G9/0R=<6bq"@GTU
xBX]c 
\Md!Z<
>p?jG0w#GW3
N3Z41QO
eGCXhG|
-^VC?^
G]T^1i8~
l;5DJ
H`\W-+ObTWw
%Toey#eV%
b-20sg\GXc
3]M*(aK|8QX%
m+(z/u
&=C!R<qa
` *Jsr]H=
Y2wT&at=
"iamxdq^
`%O=8R
(w!dj^58"<}?
x^=KAnk
||lHiX
DX^jpK\
-~4q|&I8'3(
ZE?C`Veh
3wR}gk
[pK6s]AV
ZCY6UVsO/
S3t<=1
]?yz\"G+
9HN-45*/;
pDGDAp]
^a))CnH53
5^)CATVO?0</_[j2H&<
}U=m3}&k*rF
t#--A4
gHEVd`4#E}
)R oS4%
b;qw]:l-
366>Um
%@"s6p}
Mvr3>I;0
6;pUXH'8Af`<}
bwe*mp9.iy$r
GA^BVN6
BvvVLW5s/UhcG
#kj$w9UNv.A
riT%DY
IHXlc-jA~
"9 CZL
,k]/9kT^
1WJ*skDMZ5:
hL?7!Uo
DIdH UT
ps>CSQ/
$&<xJKu
-0<Yu/"A
(RTYI7D
zyvds|C
-AEf{t,e
~ru (8
?v#Q~>!vGnK
lVhyu'Hw
c^*[Jl*
DV`_wzg
*w`0N}D
iSv%g9
51Yvh]|w
Fo[x'(
xFuWu'
jLNz!K
LTU086.1
$cJc9DQD
=/l}'2
q|.tv<
a:qd[K{@|W
rkK|s><
JP23!&
/9]I0ld
&6TAlOp
;_S!~~9
_Iih\qKhr<A}Rnjy
vCCfQOf
S_*V.3
yc~<qnP
|1~tC|2
"{K=c`3QF
ezQ8=W4E
i|/UMP
nPbB k7
S$.}nD
Wpwz(9@
=rt+"(|=yxRc)U1_\x
)]Y?$F
G+d\$'
o#0ef,yO
j`(lo&%!lLQ{5=[]
f9A78-
pbFO$N6&
?o[d3c
`h]%z*
g/7!e ^/
vd;pUu
Bfbht;SH
G/GA7:
=kg\;xvgw6y
k^mchb^
`4dW-h
\r&&>{
m%R$pZ9vEao
z[m:)IgS[7
k.HR1F
\fRIsT"D%
TP"a/u+~H
Wd:>Vop
kBlcj#'
RN@>M{
uBUG(|e
&Qs0NL=UN/L*
Mn]H=<
Q(NkJAb
UkZn4X+"qi
%_1+H4
mp!E"C?Nnx%
4OK\d,u
qp'k~e8/
mag|&Q
yGgT:t`iN
5FV@E]2m{gjER
w.6co-
W9O#2f
i8!&6X_Q[Rm(
;H`t,\so=#\zY~
DZj[R(Xr{`Q}
E<Dmu:kn9@Aig
(<(+3\
4^}H\Zrk
u|LK`3jt
XC&HRO
gO3-9_y=r_
zt@A&K\5
k}%>e0/f=TXF>
Y9HNF
k,WIpkC5<mb
WS!D"">[<9g
@@mR;7R2+x6c
NI,~j%Yr,u
&o~e&s
RM\Q$>;
ve8R[|%"j$5*HW
Rsh<Va?nq
~*z)YUO
VRIi]~k
*Nh~M,
{I,EyecVcuQt_'{
eq}-/d
e;^&2h^.Q~
}fyy3?
>',r(c6Dr^nr$b6m
1*=`CQe],MeE.
IAuCJL>
Z,f+h=HY
&Uippi-
0p:'[g
e(q\=|S+,
q}!m\n
urN%TpIu
0VbwuHC
@C* c;
$yH\oQ
$H~ro=
.Oi"I*pM-_v
mSM1R|3U"8p9V
wB~E2)
S.s>-.cl6[/
zB=JeT
Eqir"E`g[HV*1w!1
%,ioVz?
^lMOEztx4
>bD1ybM
F:Q\9;
iQMuZ\o?
w.3~Ke8
s6wSab}L
*lgv'ht
`:O$t6 ?A7
VnHIs7Fp 5ri
{ZJ$zFdE"<
DR3@B?
hyRF9)~
F2sn7{s$
Q3vS,2&VLG[ 9
=^U#R7
y#YHd^/<<
^Zt"e1lCHao*D>r,2
A0^8CCS
mZWfTu8-
`Q_|/&L(n
o0ESaO1yjKr"^
}+>}pZ{
dj`eNa"
\oafd,
*/D;vI
*r&hFS
J7pm!z
Ge{e/!#Hw0 4F:tI
;Yq3,L2
=W:\LAdC
pTy"g=
Wlc69&
e)`PSGjGj3
L+29pqS
!?J Bw3
~Cfpab)/
&jKg|Lv3gl8lNd'H^.g(>x</
O9lgltve
]JTjWatu
2FL%}>
\&)GN4
6zx'oM
p }?W%
3\@$)#
jponE<Y
%]8{jr
<1{/Gja6,L4u
a5)4<~
#7/1)~*lh
gznbeCL
">X 0.B
3:])%3c
T9ezG[AS
XMBrD4]S&a
MNIT-\+
|]]zG4J4
%N.k!Z5IR)gO+*M
9"$gA
!;+a44
k%,';)Q~B
<~*2o:v_
gm@{%
,,|u.6
QUqk6ZRWO
\[*?F2eHM
4E@YCIc
9ftWL6v_h4
EkRb~<!b
ZT.w]NI<$!
i2eD&Sw
5rsHH`W
z^)3!3s(c
ok6$}P
!d8^-(`
x4wamC
ps$Sw&kJu#b.ce
!0cp0r)
}J)z;5
eXLUva
rV[V!l 
y[QJe>{
)^3gMz^
FQ8qa=
p^"{bpW
`Exw=L
qoSC Mg
V58%=s]
JiT~[4@WGt5
'qg"ti' (
*C)dX)
JP~qOwH
RVdlX/<Ix
u'|JeZ?=
)^\A3/vy
*:|Rc}*xWZ
,>X Jpze
oT'}O<m'I9\glbJ
bp;t{IHIR
YnG:/ 7
w*!i K!
]OM8oq8
rY!|>sOP
WPZ#A)
Ugi6F8,*
T=y&IOu
Trv)]qr
>=%U"*r
M4=Mc|
h`B=}|ElAM|
mnDNTP
 FBv=alxR{
6_k[Mi%~}|
7|&4Hl]L}
BbwTm[
CSj+-%)
Db6CC{
}G6js2J
&$B(f6C)
BM3pmT?
@op/cz\3Fl
=o0kk:U
:Qp:Wx
K~a$p+
arBIU$pUy
xVf% j
` $4A(U
heH\6<
R09CtM0
ifKXqHg1bb,z
LE 5UAA5L@=k
*J4rk/\
&6FGj,{>
OIf>E'#qMM5M
IUX=a<
?3~"9O
ukaH$R(oV
f'Hsk;b
!-aq)Y 3V
rQo$y_
-0TU;>
_n0'h8}N
=LH=`!
J0;<D=~E
.K?Cwh+
=6.@y!|P-
.vs7l2Q[PI&y'
J0{?`Jq
(%_]+Ah|r3K3
uP:5GG3
+%MH"Mzej
B_Wgc$
c4(N&
=^xI]sYK
",}UUN
h;nY<5G"9F(h
YZ3._d9$Rz*
<$2];P9e}
qQ_{'e8
_ 4HH|xG
589q&]7
b;1xv6fB,>3
/58"eqV?Oc
U''t'tg
rDWj{/m
,F3du-
!LxCLf\C1
qx*#~Wr\!nE.vD
jA5-ranY
}W\!)Ju)
x/m"iB
D)pbLg
WHKgDE
<(9iKOz_
0\h>zu
hy,!V}AC}E>V
l}P{aB(:@UZ
cJ(c*4UQ%1BkWs
EEM)SZ<
=?sN,V
pmL@^0N
'#C%u;l`D.K^7M%;bV
u}w'c2Z]y?
(f}ZX)[
Qp<!Gs,I
EkEhj8bww
bSKeXN
HuO/-`9`
4}ra]q@6|#Xil%
xZ688wt(
>c>',5
`|>]l728v`yh3 {!s
l`YC}Y[**
Vj!nQI
ke*o--
;^WEkYP*FqK!
{"AC;OP8)
5 <8W{
;)OQgAg
_(pv8g
j)um-YJm
fjP!XT
_g+K%_
D(TbAay
<I5M;7Xc
#}g4W.
8>JhKM|
y^"kzb0vl^;-}o
Q3k0Xl<#
!T#kGZ_B
a,b\1cSsKsl
Nu@ `I
n-ki86@U}
Qql2~_q
Gx+Nv?j
lXTZY.
md~%+q
iQ/ x5 uQM+q,u
8bU[";/
6*UJ;d44~R5
MVZ3iaY
-t(5%(
@w6.CI[
EVa-T$
NW6`GG
l/ ;dJ3
8KNebtR#c4
th~=DG
DDWi*=
6EV4N%!U\a5$
p7F<IF DV{
&Sb3]]
^f}h&iv6_`
{IAkVm
'"[. SM?X)
3k<;(B
Y:X!p 
S kwMWb 
c{uP:1
dP_o;51*%xy9c,
b\[%DW06
5itapY}S0
M)Ehx7
|(E).=
Vt1`?g
7F4f1oR
E(LQr<mw+j _
=A~3B^
Gmhl1Zis
mN5&%@d|tfz1_)
ZZ"=5{Q:
B<uhd"?
awBmd|br^N,
xXM)7{|Qp
~/P%ZS9~
TPw}R5t!E]X%M
B~#'-Q8z-FMVbOD<
aKfGErfg
W&O $'\sC
43a`{B
z2G5Ss
Gc?DdZbm@
ILB("!
 4Rz=aBS
}@:nnQ
;{cT1Sk,
.;saSL
C:0n{A#80
GL1v9R
aZx~1
;ShP4@
8JwHsbEwWn
O]4%4*t
kk4Ajy#Q
mUjN){A
*g9M01sJ
BMQ,Q&
UL,jMid`
-Pz2^P
xi",]<nD9]$=^
.5^i}'~9I
1q fbxf
fHEU{-2~Uh
 !wJ&yS
[3~+$u9J
yEY+5bT
'oE~-:
Kw|Tq{uhp;I
X,Vgdny
o @QgFX
}lxFLfhQ{{KT}ec
:JyrDF
$'+`XAI?F\K
Ho\y=7&;wS9hD
`-l1N)I
c]~_qZj
MwR[iRP-)Le 
fn].h'[M)
5&f[8U|'q$=
YB%R[E%c$
jcdDU7]J+~^
>Jx7_<r
k2qO2 J<,
#Xk3`YBJ>5-^9F{bbk
"<`M+T
AvHm~5
!uo{?qZ
9KVj7B
M`@57! @)kda@H
|jMm?D?M
e>q;g$
ul0**a
78h*1Hd4g{,
}tqA+%UEv!D;@
cMlxsv|";>:
eSAXi'PYI)9ro|@D
zQuXlK[=
7duK/'%vN,
n$;G;#J#"cq3:eql
J,Jb[=
d(>BFUm}ls-
 Z$7~lx
#y{V,'(t
^SLJ<Th!!L
5hx"C?I!?
A|'#H 'pSREN
bHE1Mfj"
B)p8pQ!Y
&Z:!f7
Dw2I'h
j9D)tF
!$/sWUy/
,J^>Wiz}
#}j6i9)'
.1F6[:
$J98a
EgqG[O
7]\[^c7,DR>?I(hT
"Y59T91
Z}Q"{tR
^v''>fnn<cODjGvZ\
C=/m:`2v
n;b\1v=3[79X{r
TNiTtn
nwfAho>@
l70-KoWQ{kh0
V\6>7
T$ "U2
%nikz-V_(o
Zp"WZS`
h"kkUUpkn[,
1F5f+IeFH?sfd1 3
l1!Fj+
7&rClc
F6 4LoE{VQ
H 'j*`
0Vpg(J*m
,;y7_>
7;rp3O
I^(t@F^
S4P3%s5
52$.PQm,V`v)uGv W(
~F%t_yF
 'w1+^e[YB
'kN228
l#NJWtR
NU)y1nvd}
``Lw<H
O2zri@
1yAc5HcB`}{
U"5$tVJT
'bnA-$
5yO3i'bNjP6e`
eP94HN?
|=%'kH%PA73_
UtD<g)b
:^U T]5\~}<W8
uq\?
hq2j I,bx6F
14s*-p
(ko-wy%GBJ;
y`l[1(U
}#t.j/
X%[N;mP
-L5coY`9
jxoq+llQ61O,6l1+YP\o&|X
zO m*L
RT8p.VW
^%A>:1q!fS~
<|=He4a!P@:i
&x~Fd#
`fDo2Z1B
JbmLz9
~c}x[)#8~
Ez]}H$`q
Vl{0K*55
hJC,eTf/Zec/Iscl
IKT8}@
{LJn8N:||
r!U\yz
4/lVfd<
&">pIv
_vIXp@
?J-P-vX
D'{$Vfc
#D~Uztl*
^=|?lW"
Mkb:)GA\r
[/AyS`/4
!qIJ`O<
@-0tJG
|^5>ct$ 
i/^NV?|w( 
\0Hd SvY%iI^?vG$J
lHw][iB9,Le81
'vE;&QP
W6NTX4=K
M}<Hs\(>_
S^_hWUxa
)p^8uRuCGr1
N")xJ!
U$((//3
2HBh"[F
!~~0\P^OiZM n
D6VPa1=ZTU~l\
H+S/?e#F&^CqnG
ti~PplFW@w
'_Mu"sI+(
,l;qM%M
+<#aP_abD6
W$/WWvN
To*&$J
3~C?ZE:2"
."LW^2
3`sspL
R6q7]|
+s<z|1{R%
CF;'/yev(
]Ejk+-
_CFbxS]
o>Dtkh"
!<Cl.g
?u!I>F0
0XrW}~
#Yg>thP=N
([2jva#
82EBu`q'
->$(7U
Kn?l]s'/
WfKN_B7
t_wBtA
fJYF8"1g
nQ)e[Oa,^D3
k|.f]0T0?@{3%
eslI"J:-\
a#90$=,}5~+
9/-J@F;
)iC!B{LR[`q(&q5*
bjG*^I=yh`
G*mXL$)1g*
;]\x6k
!jV_ItN
@1w`VnW
I~|7hy%Zo
J!,\$N
ZtwhJV,/V
CnqaN2f
IzBh@N@{,
 D,K:)_
cQq=jBBD
B=^6aHy
u`F43#
mH*g%9
~{64<@
K5Oi`haq;8y7
)e#h=
TyG2+5nj
]K135q\m3
P~|;Gk*?
)XFqvV9
tg\IjtD6v8N8u6
SMNvj"^]"1
M<?01n.ejrx#=^
h-.(@csj+
\9q/#e
DCNL/!
gXxLiAjc
j1rYi
P^3 o`=
17]qU~Iq86sQz
~NuSY*Ckr
yRyX%q
(r?}&F
m~;C`[T9
Ti[j!V
"r0`)'
k{kK<[
Ji=3/B
Y-z49%
YK;XB.y
OQ]}avG}<a32?|t'w
uhV#eT>0
~5AN~o!E/#
\^|n8a
M.D't=
iH8<z0
D]~|T V
lMN`H@W5I
+X#>L'@
T ~[5Lm}ZO,BSZ[;|jZE
w)"1."
FVT\e/yO
=(G%i[fR=xi]V$
qM)qH W
^@%jn$E
ES%/x1.
"fJP&0{L?zy
k_%gv3`Wv^9|)8
TM^]d6
],a/)Z]c1
&S6?hCuI#g!
F^qgQu2
m+yx,l
stmm}e
[uS/#+%/
4ALTo (7[f
-!?1`{
R!}|9sO
Yw.(k<vC
4N[qQ@yoMQ)
Ltf/L?Q"9A
)G0M>VX:[R#1UiH
3r8gnxl
y&s2LD1
gpn5v3H4k"~6
2=/or9+
K7kb+~b3+;CBr*h]~Z/c
X_rE&0M(
p+lhJsHg:
}h\D|!Z?
f'{qnGud
(eQcVR-S
1UP,+
C]<0 3PY
l4U( T<Cdt6
l?@T)j*sds
uGzX],';_#f2
a4A3a6]=
?bp 'KUlAL
0rt+pyO
eHfW7v
DZr}z*^
$y"yn(
a:bTg(
!F+9mba2@
~d$+2;
Cy\7@!x]
WI1ZT3Gzc'y!"Q
Cke`i9
1op)I 21
7`*nl#
SG4;]|
F;=nisl1i
vooRV~^\0TT-- c
dZy!-Xv-%`3
 bqsmMY
%-An2_wB
2<*jF^
p[KYI"R$
)v;]m,G%S=h
nInkD<3E.#C
DtOgr?Gu*v@
#<?'_G[b
{?nVe`
6wr|,3"
^?0z?v{
zU|u";4f
Abo=S'Wy<K
ZcWBEd
mH[lGZ
0*&_*y<
y C*\AFV^
fSj-'3
)6ngx8w6F]
8?odZ~
!N1+E?rn[QUJe
i%d9IFX
E7DquP 
Kq|^yL
f?9t6b?H|TV
zV6g=mym
6'fv,Z/eoP
S@OqTv
c[<hh:Os
[]mva:IInO>
^/'+7IKHh
$QK|Y6y
kO0wAh
8XI,K_]
'?h6ry_wc
H}Yd{<F/
5e4kO>
w%Mk&$'"]zP*`&
ZW$"+G=4XE;
KS `i_M
^&L Q<
n}gC}z0
$R/nu[E>Z
,<(Jh+O
T54vOz\
~0bT=K
84Q%[N2E3
%HyZ::
]RCrC/o|,M7
msR%bUjD3
~@r]4EFs
E~-dW/R9
kQkh0gk0
WC3Tez@DM"w[yI+
8>[M-![U#w
c3c8d1C
}i)}"h}x"
dcGj;s
0}H,_`
%Ov^Hv
60CNtUYQS
3]0tTG$
P`m=j%q(dGk
up(4k=
IdB}!-
^mWE:5h
6W4=\| f
\G~3l)tG
f<uj 0
"C}r3vftvS-L
LdY!gT0d-5~ Nf~
7X$:+"4ZZ
h;[oKC%=f
.,N~@{!
)OF^ghU
`Q12F[bk
F6t=Lb7 )a*~
v.NP54 v
|@w'8I;$8&&3S
Ip)uPr_//.8:
i075:>E_a
O6+~sY+i`m
Uy~-]RNM
KMqjn"w3~8nqa
fl2]^+
tcNi p
VS}~M><+&j
(%zw1(g
oeyEtF,ZA
, K2>c<|:#
UXcDP[,
oYmk/Q\
o\SlJ)W
qJ?B'B#m/
dq2fA(
Vp2H^q`q}`:#w'
X+[j5(
fTInKp*m-
sm:t;B
z{^[t}v]
pjRE<+>h
BcP`Ej17
b(`P5*k]p(dE
|BR@j1Al
&}"}hjdU
a3cEc1
uJyhPJQ
*8Fmd[?F^R
g3hJfB~s3C:
u)uP_}}{
6z<pu=iFe
wM0Cc%
yGISi.m5
/naJ>x
o,My}js(oD!
ZSO8^c
p:QUC4cm
,c=1C?
v`|)$;
(|2z),\GI
E~,RIRnB
gy6F>r
NJ=Dh,Lj`
,*jkz%l
nM&C{T=uq6
Bx"]%7w{y
 T$&C\
fm'3X $
dq"W!{NF
`]=ZNo
x:Dx?Vu1@X
)zwj7nl
vvUkcnf
PUoN6/
.Mzt*:?fq
JMh$,n,
r*bA@hc~#S'
}:nAeEBfqi
sJP3uk)
Q.v^.WO
z,9c4VI-rM
2,c3Mi^
CjW&i{Z
/8vp/F`L
_B~nEc./
Aw`a!O
_ XYav4$sE
wlVkC:\t7~6
1RnCYb]MS
5:axMTj
"QrmdZ)
0x$/{[J
VM%p)0/L
us&Q3%
1@U}~-
U@j;jDf
=o2cYK
)Doy}#w
7g~[OK
g+ 2\^E$
-h<).\#12)
CMqA+wn"h:1B
:O+o)E)_F
zX[s7PpI
W\V?^xP?z- Nn
]qJf}a2XL
J`D6l
rc3\sK}u
]5[P:l
Ts|n@`rf
zf!D$Z|
kRK\rZ0
Uf% Tf
0-E8EzGA#
.j@lD2z
Nj?yOhc3}"N
@.<qV*&
nv`W2yx'
Oyc"+~>v
z=G6{[u6Y
SOn?NE^`#
Ow[{?q>qfM+"
uh[Z MSbHG\SLI)
RC/*S'
5f(ng't
Ml`eM^
>NK~>4
pLsQdZzc
FrNE*;BytS^qLaQ'
f^:~l{.BeN@
%,T&AixCU
/hid"V
'Cptka|
Hr8!$
9^nnI9
@+?/=EPY3w'RQz
F*uACU~
Yh=rIgL<N9s{p
C1FZ7L|^R
{,Z5~fFR
cI@F4ROT
UrJ@m;Xs
#Q~RF8LG+
N%ZtY^}
Da)?%I
jywLUt
<W<?0xH
+=sq1{eJ
<7fdzM
`f['J\m6l>G
QHo,o(
*\y$l6
4{"Nr@
HRRwNmn3
qDm:l~ho
w)&@As$g_>uqm`
#`Sxa?/.
UQ4kGP'j3_
wL[:]`b]-
S|`6p)
;8[-4gw
Ln}k>>9qG
qfI6Ij]
SAJ"=2wb
qS#!9i
.<H5rb
,@CO+H<a
DFQ_D"%*
Fa( +0FL
p8?G1V.JBE'}[
]r$=TN
6>DQ*RK
PEl#\4
]%woP;'Sn@
pwJO\#X<[/
8$KWnl
INEwY>gB3m
y$zrC3k/&
Ez1b*K
sf_yE
mNAk(C<
j~AM_
Zc=$p*n]l
m|> 3{O2UhFzwK
WzcmeA
*(5.yx&:w,
IbISShk,2i
t}swC@
}0SHea=
;z#(D1!9~L
fe^`_|
'Vs?d%
KyZd^me
+rrgn3x^<
r|(:D<:v
S4?8#U
fbP,c(5
%u!7k]
]TZ:bl
Q.y99V
+I}_<AV#
)^AnIm
/.IQ&gorI]p
<64$\xC1)
Gg,\glWX>
ngh4)&bLS
5:2Y'bNp|
XT}{-l+
Rb@[L>M
Vpxl t
rQr+KX
RiZMWy
]Yj]Vf
oM`X]w>L.\)\_t]M
Y:~O&Gi
WbQ)xm"8d
Py+Rd
_}x",;{
T!U]-)2'h
ZRL'5G20S,
ireqVAD
<dz]&0j
%_3^2"
{Cv$e+)<:1v{C Zw%
xEEs[6dMqm
k",H#~J5y
bby4=ui
{v;(^mQ2XC:Sq(
iO!AQJ
@F4]JHbx{e7W
P-|W7S
`Ckh<
R[[/^P
X=+#U4n_V(p4X
Nz>rG;]="0gF9
Z]FcJAhKx
r.OBH2(
%)7A'E"
BaUE$n[]6-+
0hDZD2
rts{Bc>
':RNSp
YnT>GK
k6iP#1u
OLV0D&+hkk<
I~12P)
4%q ;*:W=g
2IyXb&QzZp
X7(fQ)
YF*cp*
%%ENWx
6jMB(t^
i'Ab*E|
@pkUu;+
Q.'2f2JVqTN!|
R?"7'*~c
nSdn0X#M7~
:3+.?bOf!
|$vg*j\B
SCsqx)bkCa
<3y+<o
u2>~1f
SfHZ-G{l<k
"b^)7Hp
Gc=iB{&_9%o
<{$0~c7
6cp^^r{
dR(0cn
E1@bS %6
vnbq8hv3=1$-
_]Lt&0Pp=
nf"IQB
mqo-w,y
Z.3{i .y
nK`"i?wE*
;gG=(?CV@
tH!p$|W^
Qdl4X9An
Z98:y\eW
\Adys4j
)1u 2A
 8h_j4ZN9
b.hOO,*J
59-fVl
I9vW3n:B*/
7c3!*w
nqa7!pP9{
vFVntQ2Y
YQF fp
"mR\g}UQDP
, J>L3Y
SNNS{E
QV1y* 
b~8dEx!
kkkdg@
eM[4h|6M
<oT&AN*b
pC'[:x
~a"iT>"
f?5kdJ
<(:Zau}6 Ux'
Te|U
 eOfIs
JPag$o
s&1`-Q)F
L}'4r~vs9VH<et
^vSC_DeQj8)mi
}-&c^hh
">XiBxpQY?(wu
,h(qcGtpj
TuEu=a"
4qDb5l
!g\QPy,
)bD\,QAn[<
 {#@MR)
g.v+&Q/
Qh[7QVKlyvD
|v[RPqPHa
M,'}3h
JQ|P=_:b
#1cO 0#
9-x~wyIY"~v]
1.y{+^
!PZ;6]B
G8De|@F;>fQ
G=E[vp7&Vz
Q5!{^)
fB_iM}X[
G4|>=G
OF7Xfbd
pnRpUny
i/kMs\+
FlzRUqe;
K$3}U]M
e7tmw'V?f
-Kc~XIy
HhQUp;
vr=FBC|
$bb&~|-o4
T*g.-},
jnSCY[8
Vf&(iV#
E')g5Q|J
$CUr<b
$8b\<FaLdN_"
ttPcK3O
[a;/oL
I>V>{G
d;f1YNNo
a5zm%!
yc'ZZ1b8 
e'T+#9Gkb-
#KF<eWC
<2-^5uy
 'k{]* 
&/)(~GP
A.u;-VA%y:3
x/vQyGVu%lGc
T$oFg
\Jr8jH
d(B]k!19
fVxZ:Jvq
h>w^p9
V_-:M
l&A/r%&:
I8`Q/-#
IKhGuFyqu
[v8-VTb
NDqiXYG
V}T(U`
LQz==21:<'
9?#EB;'218b_j-~)$T
j)e\4$uI6
:A-ac%;%
1EE+)0_zAc|gS
5eEP.k
aa5uZ(33MW[t]
0`0E^!u
[PGS_#
bOL(sxFp=
/XDF2%
a!{1B[:3
uk@r4O
>+rH ,
>@c5yM
<BF10KQ.6}:J9
}-t2Yn,z
Le0X.%
Xl~AL 
MG|y$CU
vD"R!k@m$":P
-9d%Wy5
%%Ol?`<
\hrdYW[Tc
_rGXr.
,mD0y]
SI<80XX*}^UI
 QrLi^L
PpCBw?
Mt."Wo*
D!S>@7g([xS|@omp-u 
9scnSZLq{
~-gJ^9}ZNA]M
}=<R\oGR
g!O=[k
zcOGO?:)t/
]MQ=yb
`daj)h
s=tZYF
=dzR3i
~DA<~H~M
l5PWYq]
AMz|H9<
uj2&9FY
.%WLC3 #
9 ))^GP
[zQNvQ-0F
D`9=_fUqT
AZ9yA<s
#Nn/BEd
4P+7+r`+#\\.
rY`KkFfe;
8z`f&Z2
n+Q}\6f+
F/TjGsDsg?
OV4@"#
*\L2tU
qWRmm_R
uO@bn!c!
W22I$GU~"Ez X`_I00~5<wV&Tv!6
/$TH$*:
+Z'Xqbw+L
'zD~SGs5c8U2
TA&#[[
M+@Z{U9ll
epZBWha+=RV!kh^L
pJQoGmip$mS
H0vRV?A~
^L(PLXF
83*p0c>b
y]z_@_&,@h
 p9z|(
2J^%Ew/
BRvK5PQ#\5PF@2JV"/M
Kw7/^9>N`
CA>;aAh
RTA^Can
SdvRd7W
}~%Mb~
w1e/f-I
L7(ry_;J
3wY#KZJ
z!{N",lb5,w
csAJ7OxX
AgzV\A
F|IX?lF9?,)3
"DG'+a>;
E`O}B=bI
fu[_@=+N
g?nKIO*\8&now
~THOB4
l[FB<,
(B:{;^3
laCDNF,;O03R
"!}Q$G:u/@a
fK&;|DR?
jn3{D
W,4,h"@
nAiHi-
S#?N6/
gX'2T7o<a+]Sb
xfHxRK`sI
o=u_X8{p
H[S'5gq57d_Q
F0yb}3r
80(&V&[9\ (UOc&uUOZ)\g
}[nJiM
y\n!&f"
76Z;hPV
J,o=kjE
89O+SZLd#(cyZ
Uj?Tr,kP5^y
>g0>6z
xud(R]
5H'#R26C
|ZVF0Pj%/#
 >.KFnM
!#rXau
S?%_PcTX
w't{nC
7+1/F6T:1k\
H_2'Tj
Av$@#})}
bU(v 9
1BW!Y>
mz-.?l?V_
G9/0R=<6bq"@GTU
xBX]c 
\Md!Z<
>p?jG0w#GW3
N3Z41QO
eGCXhG|
-^VC?^
G]T^1i8~
l;5DJ
H`\W-+ObTWw
%Toey#eV%
b-20sg\GXc
3]M*(aK|8QX%
m+(z/u
&=C!R<qa
` *Jsr]H=
Y2wT&at=
"iamxdq^
`%O=8R
(w!dj^58"<}?
x^=KAnk
||lHiX
DX^jpK\
-~4q|&I8'3(
ZE?C`Veh
3wR}gk
[pK6s]AV
ZCY6UVsO/
S3t<=1
]?yz\"G+
9HN-45*/;
pDGDAp]
^a))CnH53
5^)CATVO?0</_[j2H&<
}U=m3}&k*rF
t#--A4
gHEVd`4#E}
)R oS4%
b;qw]:l-
366>Um
%@"s6p}
Mvr3>I;0
6;pUXH'8Af`<}
bwe*mp9.iy$r
GA^BVN6
BvvVLW5s/UhcG
#kj$w9UNv.A
riT%DY
IHXlc-jA~
"9 CZL
,k]/9kT^
1WJ*skDMZ5:
hL?7!Uo
DIdH UT
ps>CSQ/
$&<xJKu
-0<Yu/"A
(RTYI7D
zyvds|C
-AEf{t,e
~ru (8
?v#Q~>!vGnK
lVhyu'Hw
c^*[Jl*
DV`_wzg
*w`0N}D
iSv%g9
51Yvh]|w
Fo[x'(
xFuWu'
jLNz!K
LTU086.1
$cJc9DQD
=/l}'2
q|.tv<
a:qd[K{@|W
rkK|s><
JP23!&
/9]I0ld
&6TAlOp
;_S!~~9
_Iih\qKhr<A}Rnjy
vCCfQOf
S_*V.3
yc~<qnP
|1~tC|2
"{K=c`3QF
ezQ8=W4E
i|/UMP
nPbB k7
S$.}nD
Wpwz(9@
=rt+"(|=yxRc)U1_\x
)]Y?$F
G+d\$'
o#0ef,yO
j`(lo&%!lLQ{5=[]
f9A78-
pbFO$N6&
?o[d3c
`h]%z*
g/7!e ^/
vd;pUu
Bfbht;SH
G/GA7:
=kg\;xvgw6y
k^mchb^
`4dW-h
\r&&>{
m%R$pZ9vEao
z[m:)IgS[7
k.HR1F
\fRIsT"D%
TP"a/u+~H
Wd:>Vop
kBlcj#'
RN@>M{
uBUG(|e
&Qs0NL=UN/L*
Mn]H=<
Q(NkJAb
UkZn4X+"qi
%_1+H4
mp!E"C?Nnx%
4OK\d,u
qp'k~e8/
mag|&Q
yGgT:t`iN
5FV@E]2m{gjER
w.6co-
W9O#2f
i8!&6X_Q[Rm(
;H`t,\so=#\zY~
DZj[R(Xr{`Q}
E<Dmu:kn9@Aig
5>~fxN"NAG+
i/CYG?Z
5auUy/?
p.`*2;2-
SIRS?v}p5|
3sk[y'Yo
+L(r|U
0^WxRV`
hn8ahafqDC
_uT[U 
D6hmkC
*J10*
'R#ag\v>
iYX^Fu
vxZvT(
PU17'Cr
~5,sEl
1pFmZ3=<=h,
^sP<;3Z\
rE-4I9
5%&34SR09u3
!R?b(qjEcr_
@*ax# &0(C9
<rmi"@
+^D5V&k
>_Oc*~#
MA}vQR7
xm~#w<
S^Z'Swi
8U"z= C @N65d
;CK2U01
<}A(>~A
r!F~gC
IGO;]m]
gMn9c~|M{1
>aG~+&C`
zFt_}]
{un$|f
Tju!Wlvn'TL"<
g:QtXQ#F|EL
oM,*c.
Du05LYGTi
j(i:YkhZ&
Acup3{
mHBmL:$WVY`@
OXO|NJ
sB#k{~x
Wn/'eMKZ
A];%mz
>5O{mxp
U}!MS{
OwC<_R(MufaJolVN|I
E\E3~/EOM
<;F.UG*K^Cyezt\
 {YyfS,Vx
"J?Pc5I
-dC%=*PL*a;j
g0)mB[
7r0V=I
E=yxxK03"Vrg
gb`b@~pd
8W"C%}O
ApJ2hIX
z7FLN%N
V7dNk8
y3NLL/,O\
l0_CoAU4
Ok4oeU
[ww+Hx
W^Mp8l
21H0#Gz
:p}W6a^
eRI6#oKM}
dkbn5Ku()joxw`^W
r?@s,2@=
&j/Mn%+B!
9MDj[Y&X=h
n+ktoDvJ
On{$K21,
T||%8WD>BDbr_
qIqoeR
=iv3{a
D@H!X"
oQrLgCg
J[Fq%\F|p1TV\
y)9Rwx\Z?
wmlBzXi #
/9^iN4
x6ts>q[bpM
h^3VLO0
piV\D7fc'uo,8K
oOeTv`BU*+
e>^9{&Xp
CF|\?3@
Cz'mVE3
\r/4f:/(
_C\(id
_^p!@R=9QvDk$
O<gC03C
Z&pZY_#G
j[B8ui
Hj:&1,
&*k[gk#Z
o?wt@xLMm'|9
nb"Nvp
)C>=:ZY[Xy`(
7vY=Js^1
B@[%)QC\-
39V-zt
5a/|3n#
P[`=;=uTA0bbfG
yzA::4U
toQ+pR-Gu
K{f}d$-`&f'*i
\"4u6x 1k
5_N eT
w*oe.j%%
)goWGviT9[e/
wa26o=#Zsjg:[
%OgZ*65J
l "@,T
pW.@5H
5|:,P@
Ho6<MY/tcb[
J"1|)bWk
uhYGni0Z
8>yWbUIYD?4
]z,Bs15ocP)"jmaB9Wi
C&Y7>4
]1\kI}edxQ5j5_)y
7p;pmq
gpvX6IQ+PpIQ
ViH^8w/[z
Ru&J]_
Z3Y~9~'W
jgjce1\
raf=?d}.]W9n
9scnSZLq{
~-gJ^9}ZNA]M
}=<R\oGR
g!O=[k
zcOGO?:)t/
]MQ=yb
`daj)h
s=tZYF
=dzR3i
~DA<~H~M
l5PWYq]
AMz|H9<
uj2&9FY
.%WLC3 #
9 ))^GP
[zQNvQ-0F
D`9=_fUqT
AZ9yA<s
#Nn/BEd
4P+7+r`+#\\.
rY`KkFfe;
8z`f&Z2
n+Q}\6f+
F/TjGsDsg?
OV4@"#
*\L2tU
qWRmm_R
uO@bn!c!
W22I$GU~"Ez X`_I00~5<wV&Tv!6
/$TH$*:
+Z'Xqbw+L
'zD~SGs5c8U2
TA&#[[
M+@Z{U9ll
epZBWha+=RV!kh^L
pJQoGmip$mS
H0vRV?A~
^L(PLXF
83*p0c>b
y]z_@_&,@h
 p9z|(
2J^%Ew/
BRvK5PQ#\5PF@2JV"/M
Kw7/^9>N`
CA>;aAh
RTA^Can
SdvRd7W
}~%Mb~
w1e/f-I
L7(ry_;J
3wY#KZJ
z!{N",lb5,w
csAJ7OxX
AgzV\A
F|IX?lF9?,)3
"DG'+a>;
E`O}B=bI
fu[_@=+N
g?nKIO*\8&now
~THOB4
l[FB<,
(B:{;^3
laCDNF,;O03R
"!}Q$G:u/@a
fK&;|DR?
jn3{D
W,4,h"@
nAiHi-
S#?N6/
gX'2T7o<a+]Sb
xfHxRK`sI
o=u_X8{p
H[S'5gq57d_Q
F0yb}3r
80(&V&[9\ (UOc&uUOZ)\g
}[nJiM
y\n!&f"
76Z;hPV
J,o=kjE
89O+SZLd#(cyZ
Uj?Tr,kP5^y
>g0>6z
xud(R]
5H'#R26C
|ZVF0Pj%/#
 >.KFnM
!#rXau
S?%_PcTX
w't{nC
7+1/F6T:1k\
H_2'Tj
Av$@#})}
bU(v 9
1BW!Y>
mz-.?l?V_
G9/0R=<6bq"@GTU
xBX]c 
\Md!Z<
>p?jG0w#GW3
N3Z41QO
eGCXhG|
-^VC?^
G]T^1i8~
l;5DJ
H`\W-+ObTWw
%Toey#eV%
b-20sg\GXc
3]M*(aK|8QX%
m+(z/u
&=C!R<qa
` *Jsr]H=
Y2wT&at=
"iamxdq^
`%O=8R
(w!dj^58"<}?
x^=KAnk
||lHiX
DX^jpK\
-~4q|&I8'3(
ZE?C`Veh
3wR}gk
[pK6s]AV
ZCY6UVsO/
S3t<=1
]?yz\"G+
9HN-45*/;
pDGDAp]
^a))CnH53
5^)CATVO?0</_[j2H&<
}U=m3}&k*rF
t#--A4
gHEVd`4#E}
)R oS4%
b;qw]:l-
366>Um
%@"s6p}
Mvr3>I;0
6;pUXH'8Af`<}
bwe*mp9.iy$r
GA^BVN6
BvvVLW5s/UhcG
#kj$w9UNv.A
riT%DY
IHXlc-jA~
"9 CZL
,k]/9kT^
1WJ*skDMZ5:
hL?7!Uo
DIdH UT
ps>CSQ/
$&<xJKu
-0<Yu/"A
(RTYI7D
zyvds|C
-AEf{t,e
~ru (8
?v#Q~>!vGnK
lVhyu'Hw
c^*[Jl*
DV`_wzg
*w`0N}D
iSv%g9
51Yvh]|w
Fo[x'(
xFuWu'
jLNz!K
LTU086.1
$cJc9DQD
=/l}'2
q|.tv<
a:qd[K{@|W
rkK|s><
JP23!&
/9]I0ld
&6TAlOp
;_S!~~9
_Iih\qKhr<A}Rnjy
vCCfQOf
S_*V.3
yc~<qnP
|1~tC|2
"{K=c`3QF
ezQ8=W4E
i|/UMP
nPbB k7
S$.}nD
Wpwz(9@
=rt+"(|=yxRc)U1_\x
)]Y?$F
G+d\$'
o#0ef,yO
j`(lo&%!lLQ{5=[]
f9A78-
pbFO$N6&
?o[d3c
`h]%z*
g/7!e ^/
vd;pUu
Bfbht;SH
G/GA7:
=kg\;xvgw6y
k^mchb^
`4dW-h
\r&&>{
m%R$pZ9vEao
z[m:)IgS[7
k.HR1F
\fRIsT"D%
TP"a/u+~H
Wd:>Vop
kBlcj#'
RN@>M{
uBUG(|e
&Qs0NL=UN/L*
Mn]H=<
Q(NkJAb
UkZn4X+"qi
%_1+H4
mp!E"C?Nnx%
4OK\d,u
qp'k~e8/
mag|&Q
yGgT:t`iN
5FV@E]2m{gjER
w.6co-
W9O#2f
i8!&6X_Q[Rm(
;H`t,\so=#\zY~
DZj[R(Xr{`Q}
E<Dmu:kn9@Aig
s"qt*34"pJ
h3Kb<f
$.FQY
AaeMa!a
72is}&d9aBwd?
ST&<mQc
}~wT#Z
jTEFf#pJJ|9>
=#sD%V|`tl7
/bS%VsqB
{wh1@S
KXR9$I}
IL-o5dfl
 EsCd!~vr
Dlw,|VZ$o
I#W1/y
dy@p*4z8bL5
@rNj,dk\fxF
mBXYOU?
}%Gj)3~
+yZG8
%668u)
xW<V<6a+GcV_8]
PI\Dhdt
KdwKl}ZA
-eHK8cA
-N&9[3h
!V7G_U
@?kb8n_b:a
64:(fLSvd>g7Q9
O;;A:"0|zE
Sp%>c`o
nc[2a*mZmxf!
^jNo/%z"yqP4E`n
o!P#xJ{>:+
,f#}ouM4\ 
<v$~D!b '/\(0
pVs(tf7h|
,&ofitE<&
0YQJdpcE
e>qZX/a0%
U(R#I'
p1vhzg
+{D-Q,
Q7K;F0Hn
U5cJHgJj|
nx?j-(k
CRKAL
Ah{z^-
Ys)0xT@3
s}B3a=U_
uO qM4
ds9|U}
#w/lf?|
zITSkh)~b%|
%bK5^~)
/}~T@`kI
?"mq|l!
_Q"+\{tI
_)b((}]>
OD\]<w{#
lF >:cm)<mR5
kC*dr;
KnS,s.
\>p"f>4
Ob?dt?|@A
?[B3(4i
U&6con"
Gkf&"CQ
0q#pCP
K^@h-u0
Ixuq7X8
iddKEd6nw@
m?=?wl=VP
ODi=o]&
)n *Z nn
0B8wdW:M
9myesNf
``D}"c
O`PJ:~U
F8`Q2F"-y{"
RIkDUX9lJ
`#QjU^qJ?
ONZ-</8
'tCit,XA?Z6lU
^8Fyf+oJ
=>"K97
Ko>b@q %W^
kQ4b<!
+l7&3g^
5\567MtCy
5Ij^sk_TVe@m1
M}:\PU
!iuvmQ!
jP`M!m
e=HE*$)bsd`
Kw|O{6
6WzO!:l
`yq<!1
:TXpB,
GuX3vYc
pi:.BTGLy
4YCjT} tJ
k1*9y:
wiy"47yb{
)SjQa,=BC
-9gdSg+<JJG
2Y?Wnc
\V9vY[&x
rJ6C&<
08?8 +
>LTI)[M5E
DVnu!e
Fwi;_69qLRL_s
(]y$av|* 
kw1%cJ+
O8tpS$
b+fWW*
z+GM?iF*/q
Kjd"SJoPgPC9Z]
:4OIvb8
?jB#5g
L0ZIF=ikgm
e!{T}o]S3~
uDh(6q
 K2"dTE
mN%IWnkY
~^Jlgp/a<tX
_\LC\&}U
dNX=QOf
[daMeYu~
rlV/^=-UY$~y- h1
M_}Mdxi
8mJIfmz
*x'Hdj*I
{:dG@Nbc
PGWC]P_FFIK
=Rm[B,E7O*(MQ6
!Vs :?
6%<uGo5c[{5:
!9M]Lr
@4muO<
v~c`>T:!"
6W@+xC
~wiL&G58Yvg
Zy&Wnw-@AQECo
./;gZvQd
~5)nJ~@j$V^&
_MKUkV5R'~6
{VYcj8H]
tgwPo1/(W
;@Cz[1
/UWoRk]
Op7G9Ub*+T`
X#Q|C9
5eReQaO+Wr
w<$ELY
<e&#VZD
"*ni-3T8
u7S*&=+
]?$44</
v^q]N-V
^i8I0
#mk5C 
,y9LCI
*YP<:=i*j'
.QXt=&o}U
OZkqm}44yA 40if:J
0L 7U2
m$H,5J
vY7kV\fp
L5@nZwKL
f]\}Hs#^Xo#
tZuB;Dhei
'S0=]%\S':?
#z:N:/
c{$SO}
gLiT6+M]
dv$3N[
#eoE1*
+p E3+
Kdl-"t
TXeKg8{
x^KkvWd|
T[x1)."}
"5GF/c
YOo?gb<3!uF
[]?Xjv)="w
n?p>){
!'Q7|$'{l*
upR){'
98Q:fmJ
)78f jY
CAdH)5
.6a~>yQ
IGCjRon#.o
+G"9|2yLu
A/5[k5(X
[qim#sEy}
2(wiB;I
[XiqO={}
J#h_RmHf
nfMy=~"fC
`QueY_CX&
2}OAqZJm
E1V;q6lP)xLx_
\03bQ_$
sBANVP
,C)oriJ,
c> V>o3
*Zm]u}
p&L3@j wmipH6G
mo[Pz]A[WrMP-zK4
F';Dl8
W"VMEh
7Q[at?5$^
CT)"YPg=hKnY]
MT;jg}Z@
P$imM6Z
#.ODcc[
fd\'zkLT0H8a
{vC`V:58zBOc`A
DbjQN[
:84VEB[O
]]J9~#i)'
Mocr9F
t^g91$
OeHk:p#a&k4
m'?#YYrB
4U8B7?
t)*osay
{3jY?Uo_P"- *
`+8i1JN..N[
 UboK01P
zQ5n6dX
O/w3r`c
-_~G< }
`q=?;=)F
<]C,N|p
A\%nyVh+#0)B`;
[cQsa"d
[`Tv&?z
SJi==QxC=`}^ J
izdexkJz
8n~Y'Na
f;3j"|0BbHYVh\
:W:*?F:~s
{E}`P<q/
b$q24<IArmxqr
1(Y@5+8"
e(sbqKR;eF
64EN.r
L)ZR5VP"
1G.zE0Q:
bRAbA!AW{
`f3gOxw
0a4\[G#
,Fps5?lE~m
v*>~X:H 
3fc*yK
Q:$Yor\|O!Rc#
W]o3/61
@{lv;!NG<B~~A}s-
$7BnN8
JsH>b[5
H8*&4_
uKw?"5
.,J@z=O
Q?qR-f3&FfTR
Mm$oq/EP!|$h/UT
yv`D,%
Hh(PD)
)Mpj;*
#Y~A4{
Zjy?Ax6-`T
=t+,gz.%
4r*]8<k$,ZFbV5rQU
?0Tb![i-p
f$iK@02W7
kdi`3 
7>QN<)
0v,,N2ST
'"(j=7
'\$pGJC
mRxXh4
8Z\8.{5
gW|zoH
A6u>7Yti~
rd)GCBcRm
9X`r|!e
KUW@VQ=g-;
>Cp70('
bhAp&x
*D3=.bQmOq
C{2!Y+
1[=S.~yeI!
UL~{"D
iiV< 3C{\
a*XZY3p
g(jmz[09W
#9-DZ7
u68U#W_A
>o!ajUB
<J-K]$+U^
&:XqzVCx]qKFZj}
Lw^^<Sb+H
#@E@4p
['mEWf@I
w;k%J"K%
ZezV ^wf
@n}X+s|T%
K\FoL(8 !bf'B4
jB}GzsL9@M
e5iyS5@`
~s^L<~
AXnI$b~
^#SqcW$^M
R43vA,
jLo$vR
t3n1A.e_8'WN
UCW6IT
UY"DhmB~T`;x
=mokEp7;
=Nh]')):,`8
FxE?6l8
k)ZRr~zL
hYN^WS.RQFtS
ac#<7[
xr@EDey
.i^YqKq9,w}
dHxR>,N
:NYuMvvMgx}<vM+Z
.P/7#E'
NrwS4W,5dnSDp
\9}o{U
}|~o|K9Yf
JD$8XGt%
#~gc9@m,h
oi!Miz:chtXY_FKm
+QkT=7:|o
XyFY`10$UiHvVW':
(en=N#7
9-sR~,|L
R6_zw}!-/^d."n]
R[Jm(=
Wo$z0]tKg]1
k+t#.J:
;aY.E'
 TqSU"CX&x"W{5
m5,;b3
1631KQ
D0'F^YpTR
UzwmSV
plbp"4w1'
Mg9CB
$X6mZq
hK`)3Wi{
CC[$=u30
#G+cA?
JbFmog4
3C,24 vH 9)
VMELha4
`CvnR:
j_(dzv
@YF?gwR`%7d)DC,tc
"RLC[7Tan;+
?0^5*"p
HuEI.mT
Uu!i{*
9fQdA..8D$*G
$Fve6@8?J3d7S*Wk"y=
,5bx(&,
oY\\m{
.ppw~ocl
HxlZ)/h8|8
rFS>22%!YQT
9{@U'lA5Z#U
3s:2%X[
KJd/Ts4Z
P+f$L)4
SP[7^r;!
vLlYoZO
GJW-d*
,g9hz4
21S;DZc\
H8*LU$!& 6
e_"J,8DU
_Z#]ECU
j><~"kF`kdQ
(#e/,RU{o
r/qoI^c8
u95`dg
!Lqm9P&#q<m
l:cw67
|x{!pyT`
kvH]v(Vtfr0S3
p6]kx*X"
4_&VTgHQ
KC0B3%
k|f&{DW
L{dBy'"]D1
PY61E;
s/Ckts'M
!tW=np=o
nzC@(
tO-k0wu7G
v\TDj,I
*(Lp7.I
c-T)x!O%
oe=ep3P~x#
mXK6As\q
x=x-Nk
?lf Q0
4$;(Gqn
zX@=[2h
f}a0.d
TE(fYg|
d']LM{nB L
&iB.$"0
DggO*5i9{.0?'
N0%jM
/ye-$JiO}w
i/q^LxXy
Y:J#-:
?~uwS:
rPY@ux
h\Hi
xEl>8E
C!/VKCJJ
!~@_qqY
~FDceu;
2l>Yg=I
?Xz=O
dc{I36q&x@k
)'5-aNZ
wi{oza^I*
c5"P)~
I#l `L
FIfP(p
SR|\4.
spY&uA
)x.!0Fzh<tMK_
Za8/+Z
-_37q2
JG+pO)g
-Jjh][
DHV-<IPi$9P^^
V8{fvCLe8
AKi="x5[;,V%ezrA
nbg.1n
SbD:ln3@RAM?
Lw^m54MGR#Ar<a+*
BkzK!rT8Jf
vk/m\+
SHNRrq~
RpB.TBEjvt
Vcd"d`
N{#`8~Z
Ru<UiBUk
^<^{s^B
mY=E'2
93$G33
+dJ0@5*7Y&3B
p!>e<3
cDz<4x?
O k.FW=.I,
'5W.kM
"2{,y99
0+R,8v
9+/oQx
j}S5W0
aG<HR0Pja
z9BwwmA&
*n' P
;><T@m
7,+g{)N
MG. )AMX4QnXFj
;S=V|xlp9
jS<US}SU,
%2|upt
70Iwd%X
 ;ixA4
BzJa!S
0+`RqYO#CU8E@Q
U4$LC*$ 
BT-d:](R/
M/~~ZF
8]w_RH}:u
Jt1vCI0
$YL+wG
sD8JDc
h}USD2
9<JX&JAv
Ou0+j8_dr<vkVrr
O5:BA|G
~>\$lZ|
Jji}%lcp\d
]=S aYCi<
u"v(ss
?h'XVX
Q9P8"N+a
=3hefC-
L|eZrD(
BQ<"Dyvt_
sY)q$+
"Q#d]YKU#"\}
Zba@]*%
*^TP|l
):4 hH 
2Q5lv{lp^
OF.)3T^.
Wviw_&m(-u
|='&@U<v
+dt+%jf!"d-
S=>[&"Y
NSzg/'eNnC
~b8`7r6
8Ssg{a&
td.fDCW
"Wk};PL+kq%
h&X*7}"\
Be?t2H;m
>]p_,9~j
eK(h{2.RdeZqCf
Xz-l`,Gi
bXc\+uKxG
@0P@M/E
$#hQ058
1ziD5tm>B
Q='5FQfjd;kuktU;(^b|Z
(lJ;Q[m
ATsM]7Na
bvp<nn9D
*-<jn1o
o2WBJERhZLH:
$[fALd
]Ut?J1
>W}`^8=:*Pd
X]hL|U
Tr+u(2 @WY
W grErWjt
217|+s7I
Y=C4U
_"3r1x
!to9Xe[J
=D#4+K
Z5JzKr7RB
,k_LC&
=Nm>A{ZAa
oz6UDNG
~v?[a!$>{
]!%Vks
_`M#>k
66SzOI+0
Z*s\Aesv
vjB=G;
0^r%l[\+=sDgA
IE2]^E]4a[/
K3>C!-|u9
ff1FTO:-
bZjN[\S{5
Bx8X}1
Q.F4>z
EAp>-J
o~`|\:,}O
mf}6;._E"^
"M6t?a
.ncc)AS
YnJf}+V
/m{C<u-cZDH}/6Z{Uqp La)|-R
/o&B+P_z
:;'[-J
4&P]{aph6k
7_C4R~H&
X#:`MQ
/OfJZl'TG
"&Mh!ZlCS
|vaC,|w&
C63%_b$)""G/}W4
Un&jsi3m7hahf
DannE!
<$pX-uIvTEwq,
F{AmJ
w.2oS]
@.*3bI)vxY*I
\~zV?NK
@1Zp$!y`
g6;joG@
`o}sJt
IvrCb=/J1:w,,YNyc,3jB
Jco>gKjjV'D~&t
D0s"+xQww3[o2x
W[VwH!
Pld](p*7m`f}l(uVp
YJxxG
)nSpK4
$('i1KPX
,=)m#epPH!/ZD
xLV6^,
73C{'/6e@Xme
{ll=yz
o1w'Ib'
xOJ]0m;v0"x
v}HDaW`
 [K_}ad]3 
z#)tSk+>
-2jO{
lQ*}eqn2J
Mzy'g2/
#ZY(lL
YcP0C*u
"Sd!%x#4ji
Og9}u%C
RCDRKkO/
#?-09
PyB/z+
&R- V?
;Fn <,I=Ye
Pl9l98o)$
*A{SnXV5
mm`#yt
XjLg%w
Z4l.*wP*KqB:;F
o9K }AK
7[$<2M#
`"|milj,9H"
GjIM|xr`h
yr``TvI<
| (/aY'
eJ~W&a*Lu`Lv)sw7L`
8FA%qG(oH
-)gI'x-d
=okI_qz
xG+BN6Zo-Bu
NQ&8wQ
vGO4'-
_dq5@&
{U7/K\ac
_&;0%f,>%.w
!jFEet
 I9xU\K
.Vp;y3meO
:|LctL{
ii@!Ephs
DyN&'m
~UNMKE
rK=#h;h
*>*Bc(j
}*.O|"N
u`7Jg^\eJ
3[=!slN3Q<86Pt
V)-/sKr
Hg:r1)hAX
{9(c2>
.*F?Ct
Z;`^N0
u7keH[
&[<1,
}pm-W@0
gSs"]2\^+4y>$
Ir&R5TCSi@G
8%I:M@&3_
gx\#W0*7b
h^@/!Q*"qznPg Cjva
p[A LM
(_Zr@|5
xz8iz{/;I/6
 vvE@t=;
Z[EmIZL5P
k/Ki{_
a9~p9;pnA
g,NbD{
)^B3J|Ak:te*n
1W<6JIz
#9IxyC-
x2m0&-I.Rhfz**
|`x@SHp
nH!Ls*]*
sQm^E`
G>x08wXbnIr:8r
sG)v%A>
j^OwT88pmV
RNBSi?
r#k)=FtH+
5bRpBe /
e L}{>]E
lhd@0qzJ
_*K`a;A*(
Xh=}sh
9XrZ/w]
.q;Rh~#p%DMSFe
eA,r|m
26#kn\\/QE
M4B5S}
G'4:,{yR 
c$b91hS`
U7=hkh`[c)
4[BwkZB1QBx-
YsXFp
R+8=':-Z],gwQ
'VA>h3w?c,:7s
FjAF/WX]
fZ3T=Zs}n
60*{@5`
dPj`m1j
ee,h`Ioq\
~r|H!~
_[5b[2*
[Aj%xxW
r%P*k_~l
5<t~]=
:g4O]qC
#nts2pMV
Z&qN/l9cC*@vfqe"|0
Wi]xeLA
.lQI5p
V>~fb$Y4,
/z2Vl:g%
=x'25l
KhZJQIvp%E
x"!y+D
g*Dd#hO(~z,Hea
qhc]~n`T
p9sQN|4
.vPPuh;
R/x-]gq9gmN,8;5
[*~[0E#
A\$c*x32,[
`]M'yQ@~O(%
<M7Xl+Ck
0*rU$W.
evQTwpM
zW(M8+Xd!;
_EO_d8
wz~tA2)
}K58;J`D6X
j3i/Z~sOqVg#BPKefq
~FMQ,_z.
Cn9D*5
CP[7wa
pP{&E_ydfz!t
aP3{"W
bA=t,$H
,FSmq9J\-P5C)felF
UDfW27
);pvF>N
T5~Y<X
_M_DAg
\c4$}
5M9O\zKvx
J(Cmq8
e#r.^*%
Xu$a+Ym
'a`G@h
"KM1YQu?TB 
s+Pby4'#_>7@G
z8}3FoZ
Nsdqr@
3k@r17<<uQaMfWj2pK[
BB}\>Mp]e4bZQC|3L
?1v@u*T:^l
C4(EQ]$_
^3ht)Y_Y
@BdsyS
C?"I\\a.
y83B4[v[g
1 z]k<2
-D.r0ki
=i"z{qU,N
uPl5M:
X2{Z0c
@}l:~*"=H2>
ZU5EkYRN
(PTvqvPr
_x>l7 
9w(n=/+J/x-1
\.>heG
1U*?}t
Qg1zo?
:|t6"$f}
I"exVd,g M}!uz0*v
Wp[4b^x.m7%,Q
g7iWnA!t;
7p\G!uXcf),e
E]6KGw
SdL=GN
5`]?JL
877[^((
S!qw)NNQr 
 o0f(e
3mv t 
7(S'n}
GdaI4n
>}L~(D}
K`LV$f\
B[0P6/
HYy&4vTBN
d9jC}K
L=V4lk4
29$@V9
\*t<=x
OpkNbJ
]uZG+s
~B;34H
WTMeqOf."y=Z
{+feK02|d^{
oJQU,
=2;bN"jeJ`\@|a
VO{iW#
IOOWV8]-
YU+HV6
&=,m?J
bj/:$8iz
<o|^rBmm
 z\_z2!\ZSZY
 iW9;!
9<JanR?Iy
#C'p?d%~
cg8&/}
x3E,yEQ
ge1S?""
T1c`uS
'Wj0TzcP
0E_bMvU;r1h-Ev
/YL(GGK&OUq_$a
/1YXfRS
zhY/BGG
1pK111_
'6b)]eV"
bGzHCp+
IFLa&d
%|5O2zLl*}BY
xwPQ~EeG
P2nq!{~<kR>OYp
~g;sl@r)HI
9#jzK;X
j\\_,r
D*T[T3b
&t,&W#@
<LLAs.@$w
A?(I3WYJp
h5Ds@Yb
+x{O095zHxd
jn7^(XOvH)_re(
=fZ;Pe`
m1k>Wa
+\G!<bx[
Y|0F^KDBb|'
NMfAUDj
*?eL=d&f8jN+N
&6tS4*&Ij
:X[ImS
`3UDuH
R$zwmh
s(mb!g
]*?=D,AB
Al$<oc
MyfPy
!ULMtm
$v1m3JTuA\2
a.C\8SZ2]@.
v~aLlI%n
e_[h*3B
-tJ4E%}wYv5m!@
P&)I*KQ9
]t!u$v@<
mj{Q6<z
G=~[nX
{<wG^_
)>Nrrp
f,pA'C(fSV
~d\af`$WG<;dvDjUV5J
Px(Ze-7+
uApD}L
&V!i.[x6
?,2V)H&!V
iIht9,
vlqTShLJ%
e][@q2q}y,@~|
iawr$4
,|Y|rI
 <|]Vt~DO<
|g:H&e
+Q0!aXE2xCmU_Q}
ruf;,Sppm.Pq|f`U1N%
@~GtuJ
'y@Byr
#/+;0-/2
Dx/nNK{zRZ
d-xuMO7G
X_5BXZ/uyWI]?ej-Z
&.(rcuwYb
 +apZ>6x6cMm4%g
B@{&<&
;nbg'eg
"hP]/
I|/qg^.
MqtC)n/a}E
B0E>pu"e
u!/^)@W)
&]S^I*
|Oa|X)+
[kmE)eZo
gudBz1'Opp()v
c\)fR03k
$g5AAb;i:f7d
Q8-EkGF
30A4i 2
r?Y".=
 V==a+
+=Q4!I
pQ#!Q<Z3W/<
B<J}OeO`\)\HSG
}_w`n8 \z,&?c
31r"T)V%\
+3T;+*
,qb_)we6%UUA
7WvN_EN+s
/|``3Q3vTC%
MIfmls
t{hT=|
jX)|k,
.33@B{.-
9>1O9Hf
ygS"<>
rtK~L_7-~2
E|rMJ(\83{
b/|we2X |
uP2ud(&9
e]@AeXX
92yp]wNVo
[{E\?'yc6'&QMxSY,
s]j_O5tC
N@Cq1@U6
&q}}3
M3}alWs=
`J|@N}&d_ikRD
q+r`<,1
\d[k>j8e*
hsgdZF)
LlR*$~RA0p
.6VYnsk
_%&yZM]`Q'#
Fp^fV<M*\ax
q7m*eo=j(&&Fe
j0EB"Xgb
sdLjnS
c!3yV5=
3ed0e{_ Qlhs
;w*-wS2|YI]>+M58
_EzxQo7
.c/3A\'-R
Wop ).0VB2c
D{v]d#uV
>Kb?sl8
0[l;{
|n'X&7S
<h*x`Z
x)bI=i
~-?@fQrI
?"~!<dCEh'
x[3s(O
k&`B7z
ZAZIu2!Vr 
-=zXv?8s
bgPu#f
f68"%:
MU>fClz 
lAvxnM,
[AN.H"
6l<{q*ke[[&F8
\aMWIs)~
khB"P_
>dH8DW;w
VA<81?
G,O-Nn9E
-5W9{$
e%cl1uO,
MZ}g/lJJ>I
R$w9Zi^}
VI71%$.H
MUJvJGEf
o+!E}*<,
'O|ohq!!p[{-#
M>bx_$F|
7Y*-)Mv
iv-G_lP
%.mq|MV
<>pdR8
ph%i[g~
KFE!=W-^i 
fesC@/2JZ!8
W1OIFG_;N*}BNN8j1
{,61p6!%
|+q!_Ql
E9=:j Z
x1qCm 
S-j9EQ+
-lA_rgck`
cV8v9+"L
M),MUR&2H
d_}&*,ei
?uth"|
|a`^GS
>i+c3Ji3aO
faM/$K)
:g-jS&=
kYR[ Z&R
;>f#P"Wk9
Bvg@":ar_
Y8]J#lkBKL%"X{H)&g+j|
wtj"_J
c;.eHx|
xj="x&
5equ~y3y
l7&"K{!zrK
g,9`T.
8<nT:g
*l7J4+uZ
,4e_YH
45-(1|
[d$E$|K6k
T8W9N4
{W3/vr
dso{QI
-/yfm6
8T.K+l2,
b(#&luL
&h"B:E
8Ow%4\c!j!
*1@*Hs3Q%
|@4l5|
ayTDm`P
L;Us}qf[1
$IPZq+o4
QFkPOnW(~
?9ghV 
l{1To2[gx/j
~3t)-2i
+3]@53e
`q\ 2Zu;ZBL
kv'zg
CQbS<
vg=^s"
t[q[zx
??2./`Uk
o-:rvETw*
HSf8"%v]jIJK$
q\~a^&
XcsM%OO
aBM5X7h
9mW5YjF]Y\4W
oU&!Nz
//"v#%,4iQs`1G
QZ\I(`#*pZ
bVl_G AXr)j
Y|qLFj
F0:<(W
R/'.<e
FhP"d9
.BY@Q,]
>CWszLwW-
BAF>S">,*9\
~xt+`Dp
*LN2z,hH3z
4 &K-r}#(
'$8I9/u
%w^p6{_m
)[l#)Zm/9ZaYL[
V&@W S
t?+ugQ
s\^ApG'
:u[7}-
]U~|XGwy]\l
]s(D4zyR:L?j`sbM
~C2-ad#
HZIQ,-]
kt)(oEY^04D;
b(k/8Q
V9A(RPCx
]'jeOG
KYMTwm
IHL>a{b"%
#+V")3f}
rs"i+:
@K+\mGY3
sW/?D&.>
f,h_By!Kmj9;
JY2*G!
~*sV:NEnq
U!UcZ5Kd.Xf5 
Cder\l*
]\Qs(#
Ms6(M%N
T@Chu/
fW;&AA4
;pgER
x}*7),+t
P`{_c|_t
L8WX\b
,v~Q~cy
hof?|a
DH_EAkL
\]*DI
K{70.|
9A-e?M=s
H%HcZ^a8CjPf 
|3W.BwvtT
ek8~JsTJ"(9W~
vFvviC6
.>!QC.+H
)[aCvdgHEq?
WB6EmOd
S=-!q$A
 Ld+jc
7Q)Q;M8+B
fAB]VrC,;r9xVJ
\bnaFP8=1]
AH=7
.*e5i/
z_G6]2ZZb
X4I"e?0;0c-MQ5
f)`:!=q
R-rf.3p
j<<PBx?
Jp^cIn'V
l&Axkpm
aut2dcl
k72kB>y
=Iw9"#(WF+UmW'k~o$k
q68f%gBm
YHAURK
>?r.qh
jOySiI
@!!NF@
w_MLm2:
vZ`_dB~
9v\T0w
y<%{[j 
;FZR?okE
?MN~c)RiZ
y9K;6j
9hrVvLh
82 d`,
CRgKSa<E
2uVO1T%Nk
:1bA(23`(V
_G+{|q
e{W/~]
,LV}o~KLf
g#{Z_SOi
GxsEX!;
2'#|4|*
*V[5!:46Kh?1
[j5Abr;t|1K"
!^W^9{*Zq
lzVmTcQb!_
@!fTp}
yqGx&{u/h
60~tnWe
BK@rE?
vhx2G__EE8*ZSc7yQX
fc%a"`
m)~qGBi
ENNm0bhw
};kbAG%!kr
kvdr[x
3B;~y\Y_<N
ee`8YT08I
|H?g,)
{IwWey
#4D2K+Xi}}xV}S
b:n$|kaAw(\k
#UEg/cg5
)ZbIDWx&FqQ\I02
m=j`'4}O
?^tzge
);e1vbWFm
flo`Vb&
^9pEs'6}Nj
A88kKW|2Wkt
6}w[$3+%wdbQpl
!v{zoZfIo
"+<'dL
|"WYG1
|?'Np&F
+[v,6j
ai&1_YVZ%
_MAYn^
OfW%j+39Y
'}jrP|h>^{L
 |,x\]7@SW-
71:1iNK~Frs
R_gusH
*w&aS"
H]@7(NG;G
l/U`i)}
K<7?ZMO{brF<Oc1
JOAK&'
'ByV.ECm`
M7Pgq2
:H*DW;B/
=cweqL:
&,VF('_.
n>GL+WjPf
.}7Mm~
1{?lh>rd
0OTtvC
e(S4W-lu
0/z=+Tg
kGGdK2~K
2e,_yb
zd*4,Kf/Q
t-Nmu`1
p_I|a^h@c
|[$%;!S;Pi
k[J^QypL
\s6^o>
\"0MQ_
D8(',>
pMShi&
^g1;9X1Mv7
^}~vOE]n6sMt
!<44{F
-Ti;`lP
ojI$_K
Q[E3Ss~0
=}8=*eVy8mK0H
v:qd~*h!_.
*293O]
(9*K!=em$
i{QG+ P
rw;Ltf1
4<Mt.sorj
v:b*S5NQ'
 62*O|
wm?nTczK+i2Z
75M\q# 
bd;I&K
j2s,iy+
@Y@*'rDPL:/"dc
b0fN6I
(.JER>;
$C7uxH!UZX/
,rE6?b9`#:
%7~cix
pH.ox`Lay|[+
[K;id[_1
t|!y|pVwDO
mxD"GCx,
l1)msOU0kV
t}Z@dj(J=
)b9\Dy
{u)To$%L
~y$q4p/
Ejiqh#Zj
ixl-jB
11fK..
zX=;H05U\
Sb6sed
rd  *6
[,uj)uo#i
M9mraM
0HysInabq
!gs<%6#
ywI&rw5e
/%`$/,lB
@9bxT#
,GaeXeN%N+
&9:(>Z
Bp[>\@M
b%(8%w
#``mj$5~Z
cE:~#h
8EZ}f"o?
FBV@lus9w
{aG}G:k)x3J|
G`2_v#
?9+Gb*
;^=0e1
hdv.;,
P=kL\;
8F#[MXE
tsR@8~d
rcP_:G
uGd$ffwfF-_OB*,
GFW5DFu
D8qsO
Ku%[P9
2Qt\k.G
km24 b]?<Ri`A,6e
1@Xeh 
7hKv/[^'v
yo$jN8y
lx<r)pd
$)].;$L]w 
(1|S{gxL
S3K;{>)G
-NY,:xqM
pX4z)3
V8P[Z)
I?,}3rX]M
_E_WZE:2
zV'*g*}
<+cnN``;a7jpgXWY5
B(3^3n
+['dHDN#QY[]dD^
2oE1.zqp(x
6I\t2^4DQsVF/^
_hn$?M$NEF
$j$oT;;V*OlPT
$a8\.h]H|
+xjQjd1"
Q_,I>|.uqG
i)^C2M
ra9#cs
pBdsNoh?s!8
m1wO8-`
(T.M1WN
nZ)*,m
LiH67"@NQzI&
bC)wl]{5@
too0O14`eS;?X#
; {CixjL 8maf$Cpk{
Gez(#x_
&:KXhyf
urY>%X6c+
'L\LD+h
HzI1ycBfq2'mo/4j
</bHqT
dx3/eo
yT8b#nSE
}KAiw@`y-H
d{Ej85K.
uyPA!a
kd_3z5_R4
mAu<Dx@
!)`i=m
LOSx"5vsbe\r
fRErn|V
R`g|X6w
>3t/(a
MaKw`#F
p/"!m@{D~T#
g"4'~ZX
r!zhq*
;s:9/(3z
oE,+x&#
AOco4Nx
&0U"98k[4,
BOZrMA[Z
k+vLOn:2z8
6$FQ#Pu.
.<cI4Gs
`xAc-%
-*+,IA
. |)qWO
D;)eq\
/wEref+
hq9g-fHflAT`RevN
i6u\RaDl;
M{&\#o
Wh8d[gA[s#c^
Nas2.l?Gf
Ipa\[G3*+[#e
6'DUr|
k2W{+NZ
5'?@(;!
|bZA)vwf 
='ZwHF
at*^9S>9lc;A/d
sSnid]uUk:d
YX*"dizEW
=yGaj%L
2S.)+Qv
W<j-AuR~.]
lFY?kJ
:'fT$_]a
=20T'j
nqC&Kf
w7"x4w[[
'YeD<"6Df
D@sJ.u%_4N
isg\uI
>C!gE{zS
/Oq1L]7s>
w^Je2y=P`
&,I-Tz
(g}q5}
^g_yGe
2PLEe!
(q|os<nI!#9pv-
UDPJEH)kkWP%
+vW3+fb<D(
x-cF/Q2%rT_
^BiMB[rqw}@%M\
(+W5-I
=3OevQU
W@8,fpk]
7]p\Eb
Jm6wwf
<s[Yw'co^.[
4ys(IyZa]
6SO|!>x)
74h^z)_8
d\_=k[S!R
.*k%t#Ft
->DkHM*
2nR-Y ;K
uUK xjqr
A^@\Ti
G6yGIC
q?~:yNby
:uvLzo(6MN)!?
Rvgy(Zz@|X
Fw?if}
|?tI~~
<"AeDQ@5h
&%@o&'
XiG"IVe5Z:v,
S}WuRd
#vjiV!
*q^'SW
Qa/eVh&AuzJn
0z&^_p
p}au9c?B
 DqAHY
H\k?QxEH8-p=
GTvjKC*JN(mx
Hfjx[I\I
Z`QyT!a
PliFAs~
G4k*{9VXeSj
7W3x^HIY?y9C<yC
MD/mmhi#
;6[IN5
UvOfU}w
'X{$ci
?HNQHQ_Ww
Q$-g,yBf4b9
3eZEW-"C
.ca\k%Z
z+aDb&
m@%9?tb9#^
+yHX|,
w|A!:xYH|b
UF!O|}-<V\Md"
IrB&)d,Y
;z<Y1APQL
=8,<]C"WZ:1N
;"frt+
@>Z`{eF^~
WhMo`|
2:kEg%]
U"sZ+>?
S"RHNdJ9
W<:T^)
`/ti4i
hK~:_c(SX
D9&?Jgt@{
b`K1f6[o9;"CE.:>l#n
koek__
'lBo['"9@`G
:iJaqaP
R*$98Wh
({4+r7Pm
 QUZu@,rK
$-^ld<
B\2Beg
QLwBF8aw`4Fl .Oek4L,
R2sG*#v
IuFai3
N2BX(df,t[r,
+8$mtV'
Skdo@P" Owql
olB1KQ%+Jvz
 R>ii#
%,rs:A
byyws^ub
yuq-3f$sF
,,bX.dL
r*\.xt
Z!mp\}P@jK
k,MqnL
p!-jM
aUCo=T^#9a_bD3V
N6vq^Xf4
[6Mbw8x
I_qo;J
xHi<Oe
#JhZXjctq
i~o8AF
\ y}$
^K;C<P"
s x!VW&
j9.|=r
8AMGt@TV
isiJ;Yc5[
Y+{l%t
s3Ia-D!JE>xr
#JO.&[gdxgDpo
{g'7DJk
978myJ
3x=c](z$W,!;KS
{rS=gi
V5Z@KB,
Sf,u8w(a6
o!0jY&dM
nZfL19ml*HQ`
Z40Nd)
mct$L|r<
3\+-o@k
I*/\_'\SM
lr,:Bv 
CTnoc<bE]OJ
#7-2h>l#A$?
h}.O'j?~
QF6Jl6
`bqU6Itm
7{Q0`vi
.{/N,l
FK6"Ed
tpdq~b
5Lzwwg
gh>yj27Lv/
p<KXxr
ZfG$Su(
&1,5%V Vkp
.~/zM!M]<q
YX"qpPWV
lrE+@%J+
:\qVCJn`
`:FFZ0!4ob4w%=b
#Mg]O[;x3L~ZhRfG>9?fi
7w36PT
R]FZrm70{=ZYPt[$B$
H|e($qdF?kZ
=Zq?Gzau1
=^8(Ld10m
@fsgUo'
mBw*Na
B}S4{2q
x_O6r$>
dULc5mh9a"v9_I
16]G~s
L\(/(1
?SS#M&L]+

Process Tree

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (844) "C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe"
- 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1600) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
  - 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2448) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
    - 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2512) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
      - 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1632) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (736) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1160) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2972) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2264) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1984) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2736) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2668) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (792) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
- reg.exe (2228) reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f
- 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (600) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
  - 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2092) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
    - 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1840) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
      - 019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2496) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1844) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2840) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2276) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1372) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1144) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2440) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2108) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (2484) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe
        
        019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe (1724) C:\Users\Administrator\AppData\Local\Temp\019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 844, Parent PID: 1860

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 600, Parent PID: 844

default registry file network process services synchronisation iexplore office pdf

reg.exe, PID: 2228, Parent PID: 844

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1600, Parent PID: 844

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2092, Parent PID: 600

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2448, Parent PID: 1600

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1840, Parent PID: 2092

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2512, Parent PID: 2448

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2496, Parent PID: 1840

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1632, Parent PID: 2512

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1844, Parent PID: 2496

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 736, Parent PID: 1632

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2840, Parent PID: 1844

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2276, Parent PID: 2840

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1160, Parent PID: 736

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1372, Parent PID: 2276

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2972, Parent PID: 1160

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1144, Parent PID: 1372

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2264, Parent PID: 2972

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2440, Parent PID: 1144

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1984, Parent PID: 2264

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2108, Parent PID: 2440

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2736, Parent PID: 1984

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2484, Parent PID: 2108

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 2668, Parent PID: 2736

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 1724, Parent PID: 2484

default registry file network process services synchronisation iexplore office pdf

019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe, PID: 792, Parent PID: 2668

default registry file network process services synchronisation iexplore office pdf

Hosts

IP
114.114.114.114

DNS

Name	Response	Post-Analysis Lookup
bublikiadministrator.com	A 193.166.255.171	193.166.255.171
dns.msftncsi.com	A 131.107.255.255	131.107.255.255
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1	131.107.255.255

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	53179	224.0.0.252	5355
192.168.56.101	49642	224.0.0.252	5355
192.168.56.101	137	192.168.56.255	137
192.168.56.101	61714	114.114.114.114	53
192.168.56.101	56933	114.114.114.114	53
192.168.56.101	58485	114.114.114.114	53
192.168.56.101	138	192.168.56.255	138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name	a25c36023a269d04_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	332.8KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`2657f03d43b6cda06ed554a320b3da60`
SHA1	`908f4dfa171d88c0bc11c2cabc3d5f8c40bde421`
SHA256	`a25c36023a269d04e5b23634c1de7d9ccec26d625c13428484b4a0686a167408`
CRC32	`E1BF98BF`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	d8ce571be4e26662_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	320.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`a0fa13b44d2291c3f56b067a0340f9eb`
SHA1	`e021ca32d30b4ccc5bcfbfaa571c99811c2ed87d`
SHA256	`d8ce571be4e2666205b3221b236d374aa497fba5003081e5eeb4f7ade686c707`
CRC32	`308E1F8D`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	b221a0dfdef138f4_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	308.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`7e7d012d651bd3fee2f0bcacdcfd193c`
SHA1	`93f2a978484f846dd6bd85e9de278401a3888726`
SHA256	`b221a0dfdef138f46fe46a35fba51f3112ce55d4203f7597267d6854d7ac8abf`
CRC32	`B70BE63E`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	65f8943b4a1eb8bd_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	307.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`1f7beb3bf5e56582354db36f93811226`
SHA1	`aa50e544e229043387da499a2242f1f02d2f2109`
SHA256	`65f8943b4a1eb8bd30ae62affc843bbf78371a3dc9626303984a36d6b4ac80f6`
CRC32	`B711D1AB`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	dd58adc75a32d44f_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	305.2KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`1e5d8c3c6ae9a53e77b27890f1d2e07b`
SHA1	`2d109cf763a2af07cca74fa486c5299ab1fec646`
SHA256	`dd58adc75a32d44f22dc7f985a6dc2ee488b8aa4d8d4def6a12a5b899a22bca9`
CRC32	`015A4625`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	6b86b273ff34fce1_stop
Filepath	C:\stop
Size	1.0B
Processes	1600 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2092 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe)
Type	very short file (no magic)
MD5	`c4ca4238a0b923820dcc509a6f75849b`
SHA1	`356a192b7913b04c54574d18c28d46e6395428ab`
SHA256	`6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b`
CRC32	`83DCEFB7`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	ee91d7ed5a83f319_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	319.7KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`93d708789241ac7ac72b75acaa6460f1`
SHA1	`bdab48972e5f8d4bcec913a6c9ff2e8450a0d1a5`
SHA256	`ee91d7ed5a83f3195c39692973c7975076f3f3547afb912b4a810b300dbde0ff`
CRC32	`48F2AC3E`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	4de053502a3a711f_cftmon.exe
Filepath	C:\Users\Administrator\AppData\Local\cftmon.exe
Size	308.9KB
Processes	844 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1600 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2092 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2448 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1840 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2512 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2496 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1632 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1844 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2840 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2276 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1160 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1372 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2972 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1144 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2264 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2440 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1984 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2108 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2736 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2484 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2668 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1724 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`f4d360e4505ecb48d09d10aaadbcf1bf`
SHA1	`be141398fcfcfb5bef7f38c7d97d4c2a9a14b6a8`
SHA256	`4de053502a3a711ffac3032753a514086f9b7051287b117a97f0d28e57f57677`
CRC32	`1E991FEE`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	a34b938c7eaaf78b_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	306.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`91fdf04f191caa4dbd8a075bd9efaae5`
SHA1	`813a64d1b7897d556abaf741233322b77b36b1c6`
SHA256	`a34b938c7eaaf78ba4648794a8dd9305ad98d0208c2cdf43151429f498c1803a`
CRC32	`BFF6277A`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	edffce28789d940d_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	329.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`d57495b7f021635e8c7713dcbf7aa009`
SHA1	`a9d8aed9585b8bfb07ee2d0f05482c3ba524da4e`
SHA256	`edffce28789d940d29e97f763913899710bc5a4ee094e309ef8bce631fbafaaf`
CRC32	`ECFF35AB`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	84c7e5691f885258_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	322.4KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`35c484345027691514f7dcfac988dab5`
SHA1	`407a66ee09a512c7ddd37b20a8b26217ab4a9612`
SHA256	`84c7e5691f88525861f305c52820e074652c92b83d9bbb349ef32862ea97b2aa`
CRC32	`FFCA71DB`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	fd07925827669032_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	321.1KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`26cf9daceb747d41a2e5cbed0b244557`
SHA1	`79761a36b109fc4f4400f3d90ef7ebc031cfb0aa`
SHA256	`fd07925827669032da39c5c9c51db8957b9e631f45397db6fd517860fe88ce4a`
CRC32	`8F504DED`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	074201ee7d01d800_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	314.9KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`0885aa2c234b742614f316b4290b10bb`
SHA1	`2ce4d9f0c67f552b919bfaee5999c84e1ad89607`
SHA256	`074201ee7d01d8008d4922b821e1ca0192f7a570cb0825c984507244787a5965`
CRC32	`B465F395`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	9980db81cf644366_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	312.2KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`1d1c45e13f88ba4be4296f7b4f275a61`
SHA1	`79c9f8a5d8a4eecd46292a910ec0cd5da626fd6c`
SHA256	`9980db81cf644366da58e6d4c80cb295a5e8ad4276bccfd48efd31c05a110347`
CRC32	`0AA682D4`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	c28c72b986f6d07a_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	304.3KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`784f07a5a554ffd2419ed46b9d1f733e`
SHA1	`676ed8b7a41acfb60097151bf407ae516172608e`
SHA256	`c28c72b986f6d07a9f39c40410d9d3c923fb24d62531d48425d356cf5d25ccf0`
CRC32	`EBB68876`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	7c17566fbf016776_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	313.8KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`3b8ed39d42ff149fa406611c4386f473`
SHA1	`68e8ce68e12520216e90d5ae64541288fbfd68ef`
SHA256	`7c17566fbf016776b349a19c9495ed91b7a36c1346cc4f03e3978a21dd6eae1e`
CRC32	`43000043`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	68b9e19754f37cb6_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	317.4KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`b19a622520906bbda31a346563955271`
SHA1	`b0eeecac48b68d9c6d97b37e9847c4d00609b56c`
SHA256	`68b9e19754f37cb65f6c359e2f2849ad79c9a782b4bdc3cda15353ae0946d082`
CRC32	`02F7F735`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	bfab05bd7562844a_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	321.7KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`7c181d9f3866a1d30d33ad52205fb22c`
SHA1	`e6097390d7a583f390668819417ae6e0591a6e0e`
SHA256	`bfab05bd7562844a08e4c6c94fe3f86e8a5d979f2e0bddc56a9fcb1412d8a29a`
CRC32	`2B593BFD`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	b63dba7e4a35e9f8_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	317.7KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`d29d4c46a29eb6c7a9bf1c43aa14cb28`
SHA1	`ae9b7804074d3bf939eb59baa94d29908707b193`
SHA256	`b63dba7e4a35e9f80cd1abee28710a2346b4baa0afd2afb84e2d2d63bd8dd08a`
CRC32	`1FC8C449`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	43a6ea9cf10238c9_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	309.8KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`4861960daebb07fe44d65960899afd62`
SHA1	`b4aad6a42992103a9c98ec90b6a69cdbcd195edb`
SHA256	`43a6ea9cf10238c9c7a1ae4f066f20eea756fb7e0d7968166dd2b97d4806f580`
CRC32	`8B4D78BD`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	92dd27af4d9e065c_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	326.6KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`d6924e034f619053dd1a77b32e662421`
SHA1	`8e7b7a00823e2809324bb48ac6ee4e71846feae3`
SHA256	`92dd27af4d9e065c7e26d790892a23c67b1d64dd4cc9ec8a4631ec8b7b2f6870`
CRC32	`8904DA17`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	0bda6ba63567736c_spools.exe
Filepath	C:\Windows\SysWOW64\drivers\spools.exe
Size	305.0KB
Processes	844 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1600 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2092 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2448 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1840 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2512 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2496 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1632 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1844 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 736 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2276 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1160 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1372 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2972 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1144 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2264 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2440 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1984 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2108 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2736 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2484 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 2668 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 1724 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe) 792 (019f3ff4946b8b934aebb3a0a179f6b67b79af2ca4cbd18332acdb55e3e8d555.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`1c4ba2d91f43c70de75f936ddf43e815`
SHA1	`6a505f396e868bfed3ed567fc05a379b42269517`
SHA256	`0bda6ba63567736c95bc3b2e05e6604fc37707f094f6b92f3077c749d2e79197`
CRC32	`64B50DED`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	989a3e38b3348935_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	311.9KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`56e4cb08375f7b65d78ae76d4367cbc8`
SHA1	`442a1a38bb0da496a2da9902f2fd1f4453f4a1a0`
SHA256	`989a3e38b334893504ff18fcbb16528276801a3eed5a9af3d9a497e4575b1c69`
CRC32	`0371E05D`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	4bb25c21cfffd3bb_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	303.7KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`26c46af895ea0ff432fd443e31e59caf`
SHA1	`4c460af8792ee6736c92efce89510a61f8eb1a8c`
SHA256	`4bb25c21cfffd3bb294da5563307d01f50ab8dde0236e375ecab0e21fc6ccbf6`
CRC32	`708A839A`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Name	2ffca120f9a72e48_cftmon.exe
Filepath	C:\Users\Administrator\Local Settings\Application Data\cftmon.exe
Size	310.2KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	`213f3009fb7a9fb5ea658872f1fb137d`
SHA1	`5eae9fb89118e2127eca176f41ff3619be51b8fb`
SHA256	`2ffca120f9a72e48312d5ac660c97ca6d76a286d214ff765d69795b8fd911437`
CRC32	`8E5C9168`
ssdeep	`None`
Yara	vmdetect - Possibly employs anti-virtualization techniques
VirusTotal	Search for analysis

Sorry! No dropped buffers.