3.3
中危
55 个模型检测该样本为恶意！
重新分析
更多

0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1

0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe

分析耗时

135s

最近分析

388天前

文件大小

275.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM DEEPSCAN
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.85
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba Malware:Win32/km_2ea5f4.None 20190527 0.3.0.5
Avast Win32:DropperX-gen [Drp] 20240329 23.9.8494.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (W) 20231026 1.0
Kingsoft malware.kb.a.1000 20230906 None
McAfee Trojan-FVOQ!E78330C1AC28 20240328 6.0.6.653
Tencent Trojan.Win32.Kryptik.gify 20240329 1.0.0.1
静态指标
检查进程是否被调试器调试 (30 个事件)
Time & API Arguments Status Return Repeated
1727545340.203125
IsDebuggerPresent
failed 0 0
1727545343.813125
IsDebuggerPresent
failed 0 0
1727545347.359125
IsDebuggerPresent
failed 0 0
1727545350.906125
IsDebuggerPresent
failed 0 0
1727545354.453125
IsDebuggerPresent
failed 0 0
1727545357.969125
IsDebuggerPresent
failed 0 0
1727545361.188125
IsDebuggerPresent
failed 0 0
1727545364.703125
IsDebuggerPresent
failed 0 0
1727545368.219125
IsDebuggerPresent
failed 0 0
1727545372.453125
IsDebuggerPresent
failed 0 0
1727545376.953125
IsDebuggerPresent
failed 0 0
1727545381.172125
IsDebuggerPresent
failed 0 0
1727545385.672125
IsDebuggerPresent
failed 0 0
1727545389.188125
IsDebuggerPresent
failed 0 0
1727545392.781125
IsDebuggerPresent
failed 0 0
1727545396.328125
IsDebuggerPresent
failed 0 0
1727545399.828125
IsDebuggerPresent
failed 0 0
1727545403.453125
IsDebuggerPresent
failed 0 0
1727545406.969125
IsDebuggerPresent
failed 0 0
1727545410.500125
IsDebuggerPresent
failed 0 0
1727545414.016125
IsDebuggerPresent
failed 0 0
1727545417.578125
IsDebuggerPresent
failed 0 0
1727545420.828125
IsDebuggerPresent
failed 0 0
1727545424.375125
IsDebuggerPresent
failed 0 0
1727545428.625125
IsDebuggerPresent
failed 0 0
1727545431.859125
IsDebuggerPresent
failed 0 0
1727545447.063125
IsDebuggerPresent
failed 0 0
1727545450.313125
IsDebuggerPresent
failed 0 0
1727545453.563125
IsDebuggerPresent
failed 0 0
1727545456.828125
IsDebuggerPresent
failed 0 0
观察到命令行控制台输出 (1 个事件)
Time & API Arguments Status Return Repeated
1727545340.703125
WriteConsoleA
console_handle: 0x00000007
buffer: Hello world!
success 1 0
一个或多个进程崩溃 (35 个事件)
Time & API Arguments Status Return Repeated
1727545340.703125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130563072
registers.edx: 0
registers.ebx: 4341760
registers.esp: 21298648
registers.ebp: 21298736
registers.esi: 10
registers.edi: 10
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x9fc4 @ 0x409fc4

 success 0 0
1727545340.703125
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22424416
registers.esp: 75103216
registers.ebp: 75103260
registers.esi: 4493312
registers.edi: 22423536
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545344.266125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545347.813125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545351.375125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545354.891125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545358.125125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545361.625125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545365.125125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545369.375125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545370.328125
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22424416
registers.esp: 92929008
registers.ebp: 92929052
registers.esi: 4493312
registers.edi: 22423536
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545370.328125
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22424416
registers.esp: 109706224
registers.ebp: 109706268
registers.esi: 4493312
registers.edi: 22423536
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545370.328125
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22424416
registers.esp: 126483440
registers.ebp: 126483484
registers.esi: 4493312
registers.edi: 22423536
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545373.875125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545378.109125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545382.609125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545386.109125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545389.672125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545393.234125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545396.766125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545400.359125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545403.875125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545407.406125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545410.922125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545414.484125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545417.750125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545421.297125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545425.547125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545428.781125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545437.328125
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22424416
registers.esp: 109706580
registers.ebp: 109706624
registers.esi: 4493312
registers.edi: 22423536
stacktrace: 
RtlCharToInteger+0x52e DbgPrint-0x9a ntdll+0x7a706 @ 0x775fa706
RtlExitUserThread+0x2a RtlCleanUpTEBLangLists-0x38 ntdll+0x5d5c2 @ 0x775dd5c2
EtwGetTraceEnableFlags+0x3e0 RtlEqualString-0x2c3 ntdll+0x61b09 @ 0x775e1b09
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545443.969125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545447.219125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545450.469125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545453.734125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545457.094125
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75104088
registers.ebx: 23294320
registers.esp: 75103904
registers.ebp: 75103992
registers.esi: 0
registers.edi: 0
stacktrace: 
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xf227 @ 0x40f227
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0x18815 @ 0x418815
0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
行为判定
动态指标
分配可读-可写-可执行内存（通常用于自解压） (39 个事件)
Time & API Arguments Status Return Repeated
1727545340.063125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x02cd0000
region_size: 311296
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.063125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
region_size: 204800
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.063125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.063125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00401000
region_size: 143360
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.063125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00424000
region_size: 8192
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.078125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00426000
region_size: 28672
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.078125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x0042d000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.078125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00430000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.078125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00431000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545340.703125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x01550000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545344.266125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x031b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545347.813125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x031c0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545351.375125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x031d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545354.891125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x031e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545358.125125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x031f0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545361.625125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x03200000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545365.125125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x03220000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545369.375125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x03230000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545373.875125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x03250000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545378.109125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04330000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545382.609125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04340000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545386.109125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04350000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545389.672125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078a0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545393.234125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545396.766125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078c0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545400.359125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545403.875125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078f0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545407.406125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07900000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545410.922125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07910000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545414.484125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07920000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545417.750125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07930000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545421.297125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07940000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545425.547125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07950000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545428.781125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07960000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545443.969125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x042c0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545447.219125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x042d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545450.469125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x042e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545453.734125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x058a0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
1727545457.094125
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x058b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 3052
success 0 0
在文件系统上创建可执行文件 (1 个事件)
file C:\Users\Administrator\AppData\Local\Temp\0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
投放一个二进制文件并执行它 (1 个事件)
file C:\Users\Administrator\AppData\Local\Temp\0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
将可执行文件投放到用户的 AppData 文件夹 (2 个事件)
file C:\Users\Administrator\AppData\Local\Temp\0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
file C:\Users\Administrator\AppData\Local\Temp\old_0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
搜索运行中的进程，可能用于识别沙箱规避、代码注入或内存转储的进程 (3 个事件)
将原始可执行文件移动到新位置 (1 个事件)
Time & API Arguments Status Return Repeated
1727545339.57775
MoveFileWithProgressW
flags: 2
oldfilepath: C:\Users\Administrator\AppData\Local\Temp\0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
oldfilepath_r: C:\Users\Administrator\AppData\Local\Temp\0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
newfilepath: C:\Users\Administrator\AppData\Local\Temp\old_0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
newfilepath_r: C:\Users\Administrator\AppData\Local\Temp\old_0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
success 1 0
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (3 个事件)
section {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x00013e00', 'size_of_data': '0x00013e00', 'entropy': 7.122215874025382} entropy 7.122215874025382 description 发现高熵的节
section {'name': '.rdata', 'virtual_address': '0x00017000', 'virtual_size': '0x0002e8ec', 'size_of_data': '0x0002ea00', 'entropy': 7.936722939965427} entropy 7.936722939965427 description 发现高熵的节
entropy 0.9708029197080292 description 此PE文件的整体熵值较高
重复搜索未找到的进程，您可能希望在分析期间运行一个网络浏览器 (50 out of 810 个事件)
Time & API Arguments Status Return Repeated
1727545340.109125
Process32NextW
snapshot_handle: 0x000000b0
process_name: ﬨńᇗ
process_identifier: 22413312
failed 0 0
1727545340.109125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.125125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.125125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.125125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.125125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.141125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.141125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.141125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.141125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.141125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.156125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.156125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.156125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.156125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.172125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.172125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.172125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.188125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.188125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.188125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.188125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.203125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.203125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.203125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.203125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545340.203125
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.703125
Process32NextW
snapshot_handle: 0x000001ac
process_name: ﯰѹ଩
process_identifier: 22413312
failed 0 0
1727545343.703125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.703125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.719125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.719125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.719125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.719125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.734125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.734125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.734125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.734125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.734125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.750125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.750125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.750125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.750125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.766125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.766125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.766125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.766125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.781125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.781125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
1727545343.797125
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
process_identifier: 3052
failed 0 0
网络通信
与未执行 DNS 查询的主机进行通信 (3 个事件)
host 114.114.114.114
host 18.236.29.166
host 8.8.8.8
连接到不再响应请求的 IP 地址（合法服务通常会保持运行） (1 个事件)
dead_host 18.236.29.166:25
文件已被 VirusTotal 上 55 个反病毒引擎识别为恶意 (50 out of 55 个事件)
ALYac DeepScan:Generic.Dacic.8952383F.A.907D01C4
APEX Malicious
AVG Win32:DropperX-gen [Drp]
AhnLab-V3 Trojan/Win32.Inject.R237745
Alibaba Malware:Win32/km_2ea5f4.None
Antiy-AVL Trojan/Win32.Kryptik.gify
Arcabit DeepScan:Generic.Dacic.8952383F.A.907D01C4
Avast Win32:DropperX-gen [Drp]
Avira TR/Crypt.XPACK.Gen
BitDefender DeepScan:Generic.Dacic.8952383F.A.907D01C4
BitDefenderTheta Gen:NN.ZexaF.36802.rCW@a4Uqd5o
Bkav W32.AIDetectMalware
CAT-QuickHeal Trojan.CeeInject.J1
CrowdStrike win/malicious_confidence_100% (W)
Cybereason malicious.1ac289
Cylance unsafe
Cynet Malicious (score: 100)
DeepInstinct MALICIOUS
DrWeb Trojan.Packed2.41883
ESET-NOD32 a variant of Win32/Kryptik.HHBK
Elastic malicious (high confidence)
Emsisoft DeepScan:Generic.Dacic.8952383F.A.907D01C4 (B)
F-Secure Trojan.TR/Crypt.XPACK.Gen
FireEye Generic.mg.e78330c1ac289034
Fortinet W32/Kryptik.GIFQ!tr
GData DeepScan:Generic.Dacic.8952383F.A.907D01C4
Google Detected
Ikarus Trojan.Patched
K7AntiVirus Trojan ( 0001b3411 )
K7GW Trojan ( 0001b3411 )
Kaspersky HEUR:Trojan.Win32.Generic
Kingsoft malware.kb.a.1000
Lionic Trojan.Win32.Generic.4!c
MAX malware (ai score=89)
Malwarebytes Crypt.Trojan.Malicious.DDS
MaxSecure Trojan.Malware.7164915.susgen
McAfee Trojan-FVOQ!E78330C1AC28
MicroWorld-eScan DeepScan:Generic.Dacic.8952383F.A.907D01C4
Microsoft VirTool:Win32/CeeInject.AKZ!bit
NANO-Antivirus Trojan.Win32.Packed2.htqgnv
Panda Trj/Genetic.gen
Rising Trojan.Kryptik!1.B34D (CLASSIC)
Sangfor Suspicious.Win32.Save.a
SentinelOne Static AI - Malicious PE
Skyhigh BehavesLike.Win32.Trojan.dc
Sophos Mal/Inject-GJ
Symantec ML.Attribute.HighConfidence
TACHYON Trojan/W32.Selfmod
Tencent Trojan.Win32.Kryptik.gify
VBA32 Trojan.Khalesi
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1970-01-01 08:00:00

PE Imphash

ef3fd1c1a81435e51fcc42212e25d2ec

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00013e00 0x00013e00 7.122215874025382
.data 0x00015000 0x00001084 0x00001200 4.045110286148322
.rdata 0x00017000 0x0002e8ec 0x0002ea00 7.936722939965427
.bss 0x00046000 0x000027e4 0x00000000 0.0
.CRT 0x00049000 0x0000000c 0x00000200 0.11446338125913882
.idata 0x0004a000 0x000009a5 0x00000a00 4.867120477257604
.rsrc 0x0004b000 0x00000010 0x00000200 2.8752251388944963

Imports

Library kernel32.dll:
• 0x44a1c8 GetLastError
• 0x44a1cc SetLastError
• 0x44a1d0 GetTickCount
• 0x44a1d4 ExitProcess
• 0x44a1d8 GetStartupInfoA
• 0x44a1dc GetStdHandle
• 0x44a1e0 GetCommandLineA
• 0x44a1e4 GetCurrentProcessId
• 0x44a1e8 GetCurrentThreadId
• 0x44a1ec GetCurrentProcess
• 0x44a1f0 ReadProcessMemory
• 0x44a1f4 GetModuleFileNameA
• 0x44a1f8 GetModuleHandleA
• 0x44a1fc WriteFile
• 0x44a200 ReadFile
• 0x44a204 CloseHandle
• 0x44a208 SetFilePointer
• 0x44a20c FreeLibrary
• 0x44a210 LoadLibraryA
• 0x44a214 GetProcAddress
• 0x44a218 DeleteFileW
• 0x44a21c MoveFileW
• 0x44a220 CreateFileW
• 0x44a224 GetFileAttributesW
• 0x44a228 GetConsoleMode
• 0x44a22c GetConsoleOutputCP
• 0x44a230 GetOEMCP
• 0x44a234 GetProcessHeap
• 0x44a238 HeapAlloc
• 0x44a23c HeapFree
• 0x44a240 TlsAlloc
• 0x44a244 TlsGetValue
• 0x44a248 TlsSetValue
• 0x44a24c CreateThread
• 0x44a250 ExitThread
• 0x44a254 LocalAlloc
• 0x44a258 LocalFree
• 0x44a25c Sleep
• 0x44a260 SuspendThread
• 0x44a264 ResumeThread
• 0x44a268 TerminateThread
• 0x44a26c WaitForSingleObject
• 0x44a270 SetThreadPriority
• 0x44a274 GetThreadPriority
• 0x44a278 CreateEventA
• 0x44a27c ResetEvent
• 0x44a280 SetEvent
• 0x44a298 MultiByteToWideChar
• 0x44a29c WideCharToMultiByte
• 0x44a2a0 GetACP
• 0x44a2a4 GetConsoleCP
• 0x44a2ac EnumResourceTypesA
• 0x44a2b0 EnumResourceNamesA
• 0x44a2b8 FindResourceA
• 0x44a2bc FindResourceExA
• 0x44a2c0 LoadResource
• 0x44a2c4 SizeofResource
• 0x44a2c8 LockResource
• 0x44a2cc FreeResource
• 0x44a2d4 CopyFileA
• 0x44a2d8 CreateProcessA
• 0x44a2dc GetVersionExA
• 0x44a2e0 CompareStringA
• 0x44a2e4 GetLocaleInfoA
• 0x44a2e8 EnumCalendarInfoA
• 0x44a2ec FormatMessageW
• 0x44a2f0 CompareStringW
• 0x44a2f4 TerminateProcess
• 0x44a2f8 GetThreadLocale
• 0x44a2fc SetThreadLocale
• 0x44a300 GetUserDefaultLCID
Library oleaut32.dll:
• 0x44a308 SysAllocStringLen
• 0x44a30c SysFreeString
• 0x44a310 SysReAllocStringLen
Library user32.dll:
• 0x44a318 MessageBoxA
• 0x44a31c CharUpperBuffW
• 0x44a320 CharLowerBuffW
• 0x44a324 CharUpperA
• 0x44a328 CharUpperBuffA
• 0x44a32c CharLowerA
• 0x44a330 CharLowerBuffA
• 0x44a334 GetSystemMetrics
• 0x44a338 MessageBeep
L!This program cannot be run in DOS mode.
.rdata
.idata
dTJ-/\X@
@eTHw@
$@I!2@
@c\X(l
k@s:[eLh
ho@eLh
^@eZ[.@
y6nsv@e\p
|N4@a/
(mv@Bm
`@ W7-c\H2
(m>t@Bm
i@/\\@
i@e\\JZ@RY
0]"v@d4-
*^S_'o
`S[cQz
-J+]aS
emeeb,GV5F
0uA"MP{,{<{,{<'gO})
'0}A#MP75
lA9fGk\i9
N-a-kd
bOUbHv
OMHfJk==
,.IhOeb00
,*IiOef0k
,.IPOeb00
,*IiOef0k
,.IhOeb02
,*IkOef0k
,.IPOeb02
,*IkOef0k
-kTi#K
'0}A#M`
'dMO]k
'fI:gY5
ZSi$h3@
/0(jVZ
(S>Bh$a
dPk3e^9/p)
ZSi$h:'ND
l\ Ogk
ClUO^S[O^
N-a-aSki
mNl)DC)I!
alX/j9(dBa
UaSki
)DC)MeL
S'<$h-
@n=MD)2Xek
)2XOTlPc
cdX),OclP
PX&a\\
$}(H@m@
$}H@m@K9
$}M@m(
Xh8@KI
a\T#Ha\XO^
e-y>gyCaLP82a\\
*Ge_J[
@c\Xy*l
{O^-eO
*gO^)TAaLW
AaUlcMlaMdmTcMd.
=AaSaOBa-a-Ph$F
1m55Vi
B]hmVORa.FcMd`
),Pe}tG
=-a'^%heu+)
'[55|i
b.CcMd`
),Pe}tG
,m\c\h4'
aOEaD|'a\t
,Pk\hAktpAc\p{
-5\mkd
}"NCkO^
a\X>Hk+@
y;fCBm
J.HmEQ
0ty dO^a,Ka)
RO^-a'We
'}O^-kay
-`,Qi[@
rQ U*d
@dYOdl@
/Pc]LcA
OXk<M`;-R
@OMwc]Ha
OLc]Lc
-Pc]L/
/pc]LcQ
@P9@bi6l
/Pc]LcA
OXk<M`;-S
@OEwc]Ha
SD[Oll@
=dDc]Hc
/qcUDc`)]
-Xc]DaI&i%`e
=&i% d&c
PatX B
$atX0B
)Dd cL
-Cc\\aI
&ay#f&/\t@OW
-)q"0n
aeEOeNHw&maf
[@rvXcdhZ
BcLh&a[&id\@m
)O@e\L\
@lDktpAv8\_a-cLh
a-c'=<"DH
-[c\m9[
-[c\mQ[
[@eO^\d
/[a-aL3
&idX@m&S9
cLPEq[
K[R&@0f&a
(d`g&i\XAe\\&aL
&/\|@&cLX
l[5Ps}m[
@d[5@s}m[
%z(e/\
)e\8&[bL
PfB).u
&iG?m![
[)Am][
fO_\`|
AeT`}m[
IOWL|OW
['Im5[
a]P3]P4
=@dddd
/=\a\T
/5aT yF
OXk<M`;-P
@OMwa@]
;-a/58k<
00e -a\P9
u"aOea'-\
cT$aIme[
&mbcLP
m&mOb\LO^/
2)DLA|
PLHvOt\
*I@eLp
f&idlAg&i
[&/\dA
),b\de
OOb\de
ecOW\lOW
g&mfcL
&i\dAlOb\dO^/
y1e&i@a+
d&/\@&l=
3g&id@l&V
&/\dA&D>
OIz&/\d@
g&Co&mC
~OW-c\
L7[&/\lA
!Oxa0<[
DdpbLl
BY)-aL1[&c\l&\d&a\l&\
@fc&id
PY)L0[
/KcD\&c\H&a
.Dv5%5
kOWlHy
_mG&lH5
) g=v45v5
A[@h%J
r"V/\P@
@a\\9p]@">{|\A
0g0WY;~
Xid\@"3
@a\P)r"/
I@cLD&cDT&a/
gOW)Lc\X
(A@EeAd4
D@j&al\9
m"i$S);rwJa
OZ/\pA
/PcY8~0-a@
@c>R5=[59{
82a\x{CcLL
S-=0COMa'cA.]
@2kdx@@
'cALL=L@>
Oe@Lka@
^B)A2p`,|
kdpA?,i[@
|klmll
lmlmlmlmlmll
)"d1/T
-eMDa-
c]Ph%pA
DLp`]H
DLw`]H
.]HVO^%
DjO^]Ha
d"Oe<[
Sa]XheDl=4
d\A<'m
(d&c]Xd
a-cTy9g9\&P
-9u9umOE8N/W=-\=A
a-SyW"'N0k3
_OEw9ScD.
6cdi+Y?
Lc\!ly2j
t")tq:W W8(vk
6cdi+Y?
DJ @k%@-/DD
/= c\X:
l@mCcYX
-$[y@g&mP4@
LY[&aOG`]&aD\[
/]y@z[
/]y@|&i[
y.l&al\&l\5
cLX)|[
/PLX5\PO|)D
cLTd5T2
@c\X(l
[c\T&cL\N
Xk%4@/
/]y@.\
Xk%4@ /
@g&mP4@
LGF[&aOG`]&D
("#'-(
Xk%4@8/
OEld?=
/PmCcKX>@
a\X&aLh'
@\.[a-c\X
]z9@e\\
a-mE.e(m
c&aMDa
g&cEDd
r[c\X&cL\G
-T&mP4@
L_@[&aOG`]&a/G
-cMDe[
t<D7@c
&cYP&a[Pd4k
/Wc]Da[X\V[e}HG
T[a\X[
c\X&aIP
!J-mCcYX=!
F[mFamD
' Z>%ddF
d$[O.s#Lat
-aLo'[eZ
/BmCcYX. W?
Ti0 \=Ti0dAa-0'J-k
/BmCcYX
kthAa!
@g&mP4@
LJ[&aOG`]&aOiaL[
-e\X(A
cLhf[c\l
@e\X[d4xX
[v4c,
mjlYc)
\Olf@
/]y@z&a
-b]DlI r4
!l=/Pkc\A
d^:[e}HG
a'~md49L
a\\&aLX'\
g&cDX&c\X&mP4@
LWw[&aOG`]&aDX
@mMauc
J-aLX"@
JLI[&m}
/CmEcYX
A9/Sc\X[
5Dauead
T=@k|[a/FmEcYX
y0g0v49't
e^[aL;
@kg@0)
a\\&aLX'\
mCcYX.R>
L@mCcYX.R>
[Uk@G+
a-m\kg\@
="d|/D"d
="dl.-c]D
-9-cMDc
[aucMDc
a\h?j@
/Gka\A'/Gk=L
@SkOnw@Ly8
[=/GmCcYX(gd4k
y0g0v4k
8D)=LB[
/GaiX\[e}DG
ua/GaL
0Y(h@Py
a\X?k!Olk@c
,lfeNO^^
LC[*M$
a\D>c\
/Pc\LOG'.\H@c\D
*|J[.\HA
@k!5aL
@cLDLHa\X
@@c\Pf0
DcLx{d
dAaOEc\x|OG\L)eI
'^OGLL
'BcLT^
dAcLx{
d>[a-P
dAcLx{d
.\HAkd@A\/
KAa'e[
cLLOG/
dHcLD/
-mUmQa/A
kd\@-@
mWkd\@
K:@d4@
f@d4H
a-mGa/S
Kc@C=/1
e}a/SaL
tO|OBX
@c]PeI[;@
@eI[;@
aLO[(l
@u W?Q d
@cYl=A
t]Da!-a
a-aTH)$
Ha-Ba)-aI
@kdP@&'=
2FBe\X
-DRcA$D
o[\\7Eac
ph]:mj@
ph]:mj@
p]:j@c
[aOES-
/CcYBg@
Dc*OEV
ph]:mj@
ph]:mj@
p]:j@/
b|N[aOEV[
deSO^[
@ z<OAa'D]Dc
da/8a@
duy6fC
a-bIVJ
a-bI$@
I?A-A@
A(A$APB,ESC
aLv[|>[
a-bI@
I?A2A@
A(A$AKB,EXC
[|[Bg@
-mjeZ[.@
m@ae(f)*|-GHa
m@[m@i@
a-9/TuM
(t"FAc
1PXq*m@iF@
S@OAa'
m@[m@i@
a-9/Tu
(t"FAc
1PXq*m@iB
<@/Um@i[
fa-9/Uc@'
@XAae(t*FGi$
aeF@Kq8f
@|)]_a
m-; Z?
X@[UXH@G
%8s@l)$
0]:y@ia?
5ph]:my@
%8s@l)$
5ph]:m
4ph]:m
gph]:mxs@
@T2@a-Ii
3@a/MH@c
@ W?=2
La-a[UK@X70X
=\+daUDa)
d([a\X
[UK@ed
EH@cLTy8d5^@
n#[d4|
X@[UhK@
-(dPc%
.HcOi8PQ
+ph]:m8g@
ci LDe
OIc_k@Lm
/CkT{Y
Hk5HkT
wX@R4-aL
dcI9Ea
c-)-k5
=OBa)$
Hk5HkT
'lzi.Hk5~
/Gk4cf
k{lc\TR5DcLX
OIa/?[5u\Bm
a-c\H[a!j@
-m"c\H
@c\X(=
bcLHj@$
-m"cLHj@
OJc\X[a!4/
-m_h$2
@cLHj@Lc\HP@
LcLHj@Hc\HX@e
-c\Xi0 \6h@
"FL-W/
-Lxk(@
]/dmoc
e~i*ddPl
=nAc]Da
a]DeZ.|
Dc]DkYAa)$
ph]:m8g@
T2v4H[3~
4m79w3l
LaIDcJx@V0
-kSBa%L
|z@DcOj@
> l5PV
ph]:m8g@
aOZa/t
@c_k@V0
\@TF[P
aOZa/H
@c_k@V0$
g3m0xX*|?
b=@c/
J.]Hh@
'Da]DED
ph]:m8g@
7T[lHc_
-ED;/T
b?[5@@
[(lxX+_P
-Ba[U@@a!
L[J@a4@
]:<g@aL
[c"O\a/7
+ph]:mh@
]:y@a
'}@@mY
[U(f@+
[U,f@+
[U f@+
[U$f@+
[U<f@+
[U|f@`
'}xf@m
[U4f@a/Gk
cHk&51F
Jz[a'}@@
Lg[.R5
l*}[KI
X~}[a!
X;[u@@
[.R5|.[cLX
IL?[(l
v5NAIL
b\\H(de
IL?[*TF
s*s*d!
,h]8@Ki$
h]x@K$
h]X@K$
h]x@K$
h]H@K$
h]8@K$
h]x@K$
{?}dF
d5JLk[(lE[
,e\Xz[I
&i@L.MxH@`$
/UxH@Fp
@YOOcLH
ec\Hv4"
[cJy*m)$
[@aZ=@
%;s@l@aZ
ph]:mh@
[(mh@aZ
@aZ8@aZ8J@mLk4LA=Ok'
d[a-aL+
+ph]:mh@
>LB]%;s@l0`c
a-cZ}X
@b&mP4@
L[&aOG`]&aC
+ph]:mh@
+ph]:mh@
ph]:mh@
@dHc]DcIi9o/
dd`c]DcI
?YdXcMDc[
c;HcNi8b
Rt[7\9/
+ph]:mh@
LAYcU@7
]&i!@@
pph]:mh@
d[O+r'ph]:mh@
d[O+r'ph]:mh@
]&i!@@
P_<T9/
Gk4@aZ
kI@h@aZ
kI@TR[lTP
d[a-aL
]&i!@%@
@ph]:mh@
]&i!@'@
@ph]:mh@
a\X?HcD
ph]:mh@
k<LAx/
HaeuOG
a\X?HcD
ph]:mh@
Jk4LAx/
HaeuOG
+ph]:mh@
[ltb,Ck
L5[k@/
L35[=/
i8bPcZ)!
$`i]@i$
[@aZ0`
'}XJ@l*
[(J@h$t
ph]:m~@
/MHJ@Rs@`
/MXJ@Rs@8
/M(J@Rs@
/MXJ@Rs@
/M(J@Rs@
aL\&aTP
R>s*O/
F\[c\\
a#J\[a/
J-a-aL@[0L
/CmCcYX(gd4
J-a-aLO@[0<
/CmCcYX(gd4
J-a-aLK[d49!
/CmEcYX
I/CmEP
J-a-aLK[d49!
/CmEcYX
I/CmEP
L7[&aOR
[&a0Bg@
/FcO*[k
&Y\h@PIk
'YTh@PYi
%Yk@PYj
&Yk@Pk
ph]:mxs@
@e\P$c
Ozm]4LBkOz\L
lO^]k4\Xb
O].\@@
'lIkOd|[
@k4LAq@
k4LAS'm
kOl@L'9'
P]@9bEj@Dk
z[lOcc@
$EH@@DR
0]:h@a
LG[+ph]:mh@
i+ph]:mh@
LZ[^K[
m]Xf@K9
Ln[L=A
@c\Xd4a\H
ktPAa'
LsG[Bm
d<J-aLX
gr[e\XI[d4
;va98zG
@ ]2KAa'
nKBg@
\[aZ`5@aL
aLxC%-
cLHb@/\X@
Y''rwhLh
''rgh\P
cIC%/h
@aT\z@kd\@S@
/CcT@C)-
c\DgDk
k\HTc\H
@cD|0<@
OG/\<@
0<@YI/\8A
pDDe]cL8/
dcZC/8[4/wmP
=`+D[PE
-a[e}|
LC['R>s
fLo[Bm
@g[e\t
@eTTf[
[e\t:[d4
(mn[`+
=X;E*@
&mBa)$
d$J+r@
-kOd@LA
/MD@PI
@aL[I[
Lv[[dOm}@!
@aOFa'
\DOe@Lz
@d4cL@
,aL`[J
/p[e\|o[el|
8mCcKX
$xm*cLp
te\|n[
/p[eL|
/p[e\|l[el|
ae(fi*cL|:m
6;@cL8
c]fDHD
)[d[e\8
cTh>@P
@l{c\\
@dOlh@c\@
@e\|k[
)[d[e\8
cTh>@P
c]fDHD
)[d[e\8
cTh>@P
@d4cL@
b]fDeTx&R
@llcL\
@d4c\@
cMtDe\xjv[
@lcc\\
,@d4c\@
4d4a\p
&c[cL8
@l\cL\
c]fDc!/
)t[eT8&R
c\p{Fc\p
)t[eT8&R
jl[cL8
@c\|(m
*mCcKX
[.[e\8.[e\x.[e\|.[d4t
dkYTAc
<D[<OpaLC
)$-DP@
l=/@cIX
Da[p=c
@eTTv[
/@cIT{RcIX
OQc\Xc\Xc
/D0d<d4LP
c]|Da[
/@kYTA
c\Xc\X
a[&c\t&m^c\XP
dL[OmZ
-P[c\mZ
e[2[dOmc@LbY
@kOl@U
@k4LB^@
/D[31y
e}3%mZ
/T[eI;@
=P=/@[
/T[eImZ
-aL[mZ
/PX7LW[mZ
[Ol#@!
L[/@[c
[m--c
/([eI[mZ
[Aa'L[!
[6[a/@[c
/\[`M/
/\[helmZ
O\a/@[c
*T6h[c
$<Om@1
)Tr[c`
/\[e[[}Z
/\[`Mk[4!
/PmCcKX}Z
/L[hem
[A;/@[c
/L[@a-
/([e[[*!
;/([e[[*!
/([e[*!
/P[kOj
h5Dl)$
/,[aL#[
/BmCcYXkmZ
),[@a-
/BmCcYX{mZ
'X[gmZ
@kOl@LAV'
=P=/@[
Q/D[H!
/PX7L[mZ
?[bT\}Z
/P[kOj
h5Dl)$
/D[31}
$e}3%mZ
/\[e[[
-aLw[EZ
=P=/@[
/,[aL[
/Ph#O|
'\[fmZ
'g3m}Z
A4APAbM>
[LcImZ
*LcQmZ
sX@a\d
/PaLlX@a\h
@sX@a\dmZ
Ha\lX@a\h
@sX@a\d}Z
Ha\lX@a\h
@sX@a\
/Ba\lX@a\h
[d4k>1
/@[aLg
/BmCcYX/jye
Dd4 S?]l[c\X
H@J-a)
HAJ-a)
@eTdl[
Hc\X^[cL
m`kd\@
)L+[~n[
Lw[a[c\P*
m`kd\@
[n[c\P+
L?[[d5
d [O-ac
) [eTl&R
vJ[c\l
[^j[e\l
[O/reZ
$}K@m)$
L@[Jc[Q
L[(muZ
LW[<X@a
Lg[yfuZ
'roL-PXy)l+#
)B@aOJk<5@
a-a-k<
-kOd@LB['m
k4LAS'm
k4LAK'm
v4u\+@R
@eTPu[
I!u!Y-
@eL`0K
DXD#@R
/M\F@P
e\X\[a
[t[e\t
[X@.Y@c
pXxK@P
Zk[4DPd
d[O-cD(
,o][[S[
OEk<-*
_GL_[.s
!UAe\l
d8[O+1
[`[dOm@{
Y9LS[mY
LAa/8[cU
Sa)<[!
&[kOdT[
0]'[ep
L+)[}Y
/8[`[}[ep
Lw[&aj
-U0@|~
d<J+r@
@c\X(l
SZMl&ie
Lw[*{[e\XBI[d4D#
pn]mi[
o](ml[@
o].ZK#
/My@eLX0]
I[5 qD
k@c\X(l
J-a-mCcYX(g0n
/[aL+[d4
J-a-mCcYX(g0nz/[aLK[d4
I-mCcPX:l
k@c\X(l
`X8h@P
[+/\\@
-c\X+[/
JAa'sl,
kd\@)@[
(mB[G+
L'[s[dOm
L|[>x[/
[7 ~7!
(mC[G+
t<NAa'
d8J+c\XB6[P
@eTT2L[
I!"/CmFcYX(
(m@[Bm
(m*A[a*
a/CmFcYX(
L?[~[dOm@mCcYX
@e\P7[a/
-DbTi0c
(Aa\d[
a\h?c\
-c\h&Q
.[/\`@
(mO[G*
/VaL[0<
/VaL[0<@e
(mL[Bm
d<[O,ac
L[(m*|
L[bK[e\XZd4
[sP@a\hO^'
@eTl&R
d$J+a/
@eTTV[
-aL[H[e\h"Ze\t*Ze\XRZd4
d$[O,`h
@eTPW[
)<[`L7
d8[O,aLX&
@eTTU[
I!N@gE
)8[R@x
)8[eTt&R
(mV[Bm
d8[O,aLX&
@eTTfR[
I!N@gEP
)8[eTt&R
(mVW[Bm
L[UP@`LK
[UP@`LK
[B[dOmg@R
@ SOjC@JAa'
@kOl@LAq@
@kOlL@LAA
<~n[cTp
/Pc\hN;[
l.[eTt2
@e\p[cDp
l[eLtv[cTt
/Pc\h8[
[Q[e\tZe\pZe\Q@
[A[dOm@c
@cLdd4k
@ {2OAa'c
[Q@e\X
d [O-/\X@
/FeTXP@
mFcYX(
)$[eTh&R
(m^[bl
@eTTZ[
8b\`[cLt
[xP@e\X^[c\l
[|Q@e\XQ[e\Q@
b\8>[cLd
[P@e\X
L/[Q@e\\\[d4
$l[cDh
cT\>[e\hfZ
@eTP$[
@eTT%[
'c\d[a/
Lc\d[A
a-c\l:[cDt
[c\dJ[a/
-c\d[cJ
)DmCcKXi8A
(mZ'[G+
$}(H@l
@x]@P)
Jd%((n/
%^fLN/D
I8vXW)XR:'
A@%_\YSU\]U]
0123456789ABCDEF
Q$^p8G
AP~uu\T
KV]~rhk
-:,@=D
FPC 3.0.4 [2018/02/25] for i386 - Win32
]T"W-]xU
|)O+4#
=-/2JWsk
,ptqc%K$UXKtx
|rs'!&n
|+i7I!-%}
Pq/9]"Wy]xU
)O4-t/
XBW)PQK
L+Lvq#*+`95s
cHRL\L*n.
|Urtu&n
|;i9I-%}
Pq/9"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|+i7I!-%}
Pq/9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3N3P
>ptqc%K
6;n+i7I!-
#E-]xU
G^vq#*+`
3tm-,3Nus
'FZ$\,*
,kUjfqc%K$Uc]nYpx
-!V.P*/IY
P{7I!-%}
5Cq/9]"W
O-W/$8
)O4-)Q<
Sb#*+`9U!2|
uj.92o%V
,pt"Tp%K$UxK0Uk
ur**r(/ors7!&ni">!V.P
w?-FuN
T<9]"W-]8]F
+l l)O4-t/
.K6/)PsK
?R3L/Lvq.
,ptqcb
X$UxKpx:!
?N"W-]xU
O(+*\-W
9\4-t/
)<)PsK
u_/Lvq#*
-,3N3P5`
0A?ptqc%K
FFxKpx
W)i()t@
6Wo+i7I!-
_"Yc4}
Xvq#*+`
3k-,3Nus
'\$\,*
,kU`qc%K$Uc]_px
-!V.P*/_
}7I!-%}
5Dq/9]"W
O-W/$?
)O4-)Q;
Se#*+`9U!2{
uj.>2o%V
u)s**r?!#|
F-%!V.P
Z])b`mO5HK@
"+/%?i2T'!W
*sK%vF1
Nu/H$\
,&ithc<K
=U0aKix
u8k*j3r
-8VD7PO
|I2i.I8-*<}a
Ph/ ]W;Wc4]aU
;4iaKS3uHo'
l}g7:8
?8E`j"62
\}E0$yok*
"{RGXuaVoS
I!8c>}j
Pj/"]88W6]cU
3O2.-o/
X`,/I3PhK
)Lu5Lmq8*
*)oK?VZ
dpVy8i^Tinc
oLNa9`
/:ewbX
e+FiM!
9RR6/)P$7eVm
?V(fk>
3UnC|Q}TV
0~5H<Ps
F,ptkeAc
|EyM&`vT} xT
8i-o1wic-!V.P
KsS)6T\B
"rBZXxz2;
pY@. wR%g
&X;i!#;j
E`yxNy
!|~\p[S
Tkw_Fa
Vlv$=?6+2X
d-]xUG(Q'
_w|DVgQ
'FY%Gd0
A!yOz%!
bwhN%[%
-+']vZ`C
**<f/U-#LZ
P3+X#.B>
D$Bh[awNt/sz%
`/T/\-[
LXe%Y>
VY?|$L
)O4-UPXx&'9X|G
#0:tfy! c
Fzj{w$Rr0|Sc]&
pV]u@u$r**rT
aSCg"PPQ
|^T0 $
?l%T/Ln
8^|#`|Rp_
hR>DGQd
|+i7IT
<+zX.{
{/L&X;i+
zA\,*sQD
_HAaUrw
^l*odDW
>KpS f
Pq/9]~
A3LnRs
W+Z%!&
R`(ij$V
*2o%Vu
-,3NusY1Pf
qc%K$UE
'$1r3s
-!V.P\~K
S>xTRUuN
7I!-%}<
)O4-i/M
NJk"9Y
xgD7jhr
9-Ws3v,!V!
UKKr%L
7F"8ogcUI
D^#O"G<_
*u!l}u
ptqcmoUxKpx5Q
rs7!&n
*VGs\(
Pq/%B\
W-]xUd
"8TYDZ
4)mzQ "2!o
Z\su-Q2+b,nR#g
{1$[V
jX8a2WB_i
Ov1Q=+p{)Ob
uTaP&wG
7.$98
ao`TD$\PYl6
>"s7!p#l!rto
VJmE^HwGUC
#9rApYeN~ysU
X6/)P[
%6(9q:
.K6EEQT,hu
*/9]"W-]G
ECA>Xo3PJ
q#E)-W
IeG*\i;
y0Ua=XC$UxKpxi&f
z^CQ b
)V.I5OF
7s/|%,7
rK_1pIIK
A{W/Rp.
"ZpJ&WVQ_
j%56`Nu
-!VJ?k>kXu*
!bhV8u
q/D$^#,+D5fPh
&<tBvq#*+`o
=).[aT
"rc%K$UckT:#f
z^"=g*8
CN)W()S1#?
Pq/9]"WGc\
wVP!L1v%k
OA*w(.|*b*7!
*a@J5$
3/Lf~krSpY
,UX2qsH$
:{@"l}(
4|T5s
aa4NV)
-VS^N[{
JKM!kY
h5#F),
j>.Y|4W
oLv-#*D
NAs1wf
LjJ{@"l
,CFrB0
Q**\Np^b
7;%y@.
{qM[jt/
r.,6_+
+!7FuR{Te
Thh.{T-5jeV
5+nn\n
KW)BqT/5W
W-IED)h
38}4}@zY
TS|/)|
+!7NuR{T}j
r[JWKptT
0OGR t^')3
!&Pm!P
^B7GHl
N[Brc8@
/l3q#.`9
H%AM){Is5j]
r/EJ.,ptpzr_
Y$UyEZ
s7'D&nP!V
]"+L-n
M;yJUP
h$\hi1
82+n<)(]
Pq/9]~
8eTcI:,);1]
Q([fxK<@
*&7sl1!
!VqQl4CWBiq
47)tOXX66|Q/?Z3 4
:GM.!2.
D"3bwB$\
yK9hF5
-%GWIuEnqH
PJj;pbn"W-]GN(&R
)sIknY/
M]_[!
#uLnmAV
@.a nLy
rBO3}h*
&hHRw-5<
i59c1#
N1#&7"
dd|]8\"Z
IAeWN=
40n~/)
3ZO7L.*d
wq,7+Z[o
:s%rOv
L~X7Iw
D$4L2Xd
]*x_4}3g(uOPXo
4,UbN&s@_
a%?B5u"-1!
,t!8fXJ`Tqh_`
pOaKq-X]|N7{)U
2o*%V$
T||"'%KMLD=
M9g`}hOG
Qb_aV.
&?})?8:
euCZq&kE]//
RiY4&({"%
#/Q{c7
sZV)(#(
fvLknf
1osS@
&(MOI']
=n/[e|q
1}l"/mX%U
Kp*xr*v*r,R}V
Yz41/D
`-Im=i~
Yf{Q;?U/_{6
y08&9C
`^'97!s
M|+<s<%4!
pE7\K6N
'n/w|)@\<
xfW&.kaF]J
aqecY6U
!s1-\F&j&
K/V!.PNB
<W)",g)
=9'Bdi]8J(
:s%%6'
CDO("1
8esN=d
XoTv$,
.&Jcv.x{+`9U
prd,?oF
g6~Xx,
R^s7!&n
SA/)WUn
q#;X+`
p0%eKO|m
e<Dy_r*
%qul%qXjcV]~Z-Ds7
a^EOO()sdGnK
I/YG7f]
8xnnR%
~l|_G>ZDC_E@74J?M/
;kfJy2
A3],nI
ThiiLHnxa
oQr_K!d1WH(6
oh4H)
O\x9TP
/Lvq#*G
L$q<6I
=qb0_
1l )a}"6
,$GX+_/.l<
=\u(`E
!,;BsaY1
hzL[QzT^UFf_eN@R
"LaVf`G
.kYJ]R
peYaFb
KkiBZ*|
@!OALP
sl @;RzKt
i4| {,
g*p--9
J/_9K$UxKL ,&%9o0^Ggn
[3uL9+Q<\KjX}n_\4
K:NU)g/V
O#ORIh
HI~\_W
_qW05mo[L
lW*7!Wa%T.
K|o#C3
*k=3_R
p8B^"=
D*Q%d6@+Va)h.G.
.es~8];L=
5_hPVj(OR
a-S%UX3tu
j]k{"<Uc
9l4HVi
K"<t9p~O
NC?00F
q/"WhpFxU
(gf3V%m_0
*+hh% &g
'*=K;q
C(pq:&qu
7{/|%,7`p
9LrA"]]x!eZ
=(0@KW/
r.[`T^'&8&u
+u46fr
P-!pUbH
.U%C*vTTXty
*\+P](pH
6<$xKqpx
Sc|>!k`&TM>
{eUFF/WmhKK
U@(A|V`
FBKq%;
1@SV J
)m)/VW
@O5*o*mxB
O\KZ=9
+!_C4-t/]<<
xhq#;c/an3yv
eO4R3S
.=]`(+
(Uqtq;g
DbGUT?\
:kol)s
P,,aAz
-*{@" 5j
kqgqck#q
Dy4|sq
*rnT*Ws7'uZb
PPWUCy
A4k1Ljg^[
094<hbmjC
dq Z5b7C
'&e$!U
<Tk3v&$\
5`nHj!
dt}[3Fnj
kVQ%e>V
NnqdG;M
X|#)]xU
'GQ$=n~9P)
G\jr {@&qnl5[JWKptT
}8s>i%tf
*I(vAT
:plrF.5pF _,
P&;aVY?YZV sK
,3L$f
DG wJq%
~d_GEu9-c%b
LExKpxi&c
~\GAX3
F\i!V.P
WNMZ\.:
/i7PM%%}b
6hd9s_x!Q
[pI02RSvUvW
*NR6/)PsK
XT6cUZ`/W
!furYAH-,3Nl&^
,S5Ftq
n~pHup_
\OSuks^Jf2+j24!R
wP%f]z
Icen)s/| #a/]
5!dwaB4Vo
pT[ART
i^|QW[
sP/V`@\p1
a*]vukI%$aul
S@<;%EU,
>-O4-t/T
'}v*JjOq#uo(+`U
`%S">ivqus
=>ptNA<3
&^?$(b
R :x[b
X~9iZw]6T)^S6
sYN,U1L.aN
&:yp#gN
npMQHUCNZoPE-5>2_
2+>-!1me
%$4D/9
D]NsqN,]!<:T
lGZIay2
sVrn uc
M^OA2l
.y@XRO7(',cQP
J(}bUq6h$
pR8z+Z$5O4-i/}
$qA3aM/
Y!dwaRQ
V4M%.KM3
d@HOLEbu\
(%GW2<{
f,Fy[*t
?)O4-t/]8
oT#R$Q
Lj~TWcO
nH]SU:
dWqbu.'q|
aGwDsKgV?rxB-{WPI
N6vewUuEg
#{/g"W-]xUZ
cYS~6ta7A
vNzQ9k7r
r.[`Tv'&8
pr-w*rs
=G,Pa&
_,@WL-^
)OkPD|\8
90*|!9
Z9Sd"O2N;0E
rM=i<]t`Y6e-ieRk2
l.b^70
l4!z"Q(x
-Z]cIIKk
F`<-[1tm
'iB$6TbV
r*I\Nx=En*Gwfa%
1{.A=U
~5(.,|
BY!b!yPPj7{=*VFDZdb_i
zbeNrv%Q0k
]Cy3ef]0+
q%#FZ#m
|cJF"t
%1m%_e\6_
7s/|%BR}dm8
PW.HXW"WZ8
ajdgez
-,3N#&b
Hkmr|TApxLgZd
C0+)7h
WP@P)ra
_i/o@}
/WsK'9</L
z/%WWqs
*2o%VIy
,pXOb%KUx
X*o6|]
KF1J ?a1Q>nbuR
u1|4P"N`z
+Z$5O4-i/M
]U2Xe!
]f/Hal
t5:Jbz
)UxKL D&%9E
Al9)rs
91)/S'
tNjnG|,k,
ZKv)L-`Q
r"_S5>W
m+GjAoK;1NW
-*syO.
Ki).l6b K$]^V:q@O^
%!w4+j-!P
5MdM|O&
Lvq#*G
l'eWC-uG
,ptqc%KeS
$vu$r**r
ZAX4w(
tkKDhAhH-
H),6U+
VLd/% p%HJg
rH}:jr-
9P8./O*#E.0
-!V.PXzCJ oSC
.OTsvO;
d&3JZ<
3f=urXK&v.w
@r#Poz& PY
u0@KuZ;n6
,ePHjw%
1|v-j=
NF,ptqc
3Cr*OWurP+A0sC<
A*SEPl'Q
SS+i@4^$:m
hb7j1-
pPhJ:]
OX6X +
IY(M!!
gQ$,+*2os8
">3u}fr
TDcEi_
;\,_`]"
Z])6/PsK
*VvP-y3Nusl
$yk#5(
eMTI4pcoeL:-F`"|bK5p
V.P\>sl
|j3>+bH!(
pGaenvO
X6/)P[
D)*+JA
V"Ldwa
<X~&(Ebth:f:jqe|y
<)[#IQn_KoWZ6
=#$bVw
P'5D.iTj
A5/|9v5
#*+`9U
1qTU8/-mOqc
tKHm j
U;]hrhsL,Qa
[s:c'k
Sm}SrOk
,ODb"|
+is6IfhZQ
W-+BVaL}
6~uM1U;(
8uiqK_g(xAtI|5e>BD
FIn6w9ml[SSP
br}}V`|TJ
@vl)L
^(T>uuB
-!V.P\
w\@wU{$
q8R7I}&2U
]Ax]x
/^@UjOn</+
]N7oQ}
4(SRUuN
e~r#`P
LX/~|L
H*lwunU`Z\
}dpek_kjs
L5]y,uDoQ|rva
/N|_\g_o
`7/v$VJ+&G+.
p'{K3<f
:2nYP{
cjlcKM}\7|]%!7jXF}1
{qzK.m8
/|*\GOI
tT# Bf|6
1tqZgZ7
ul'XLE.7$nBL
9#M','~h`B|bE-
Ws$=BZh}Odg
dpIZ'e
wb*#*%;
-*jer4.[X}^c
`bJkqz
Yr{^rVRkJXZ)
](iT'4v9
1+iHFt\-B
sm&%kDk;A/L
<lpac5
XvK8$Z
u,**N7;5|
/\AX5ETv-Um
9+@z//}e/
wj!gwo1M
v;lqp4
-,3Nl&N
._4j[c~
,|t!4K$
/9Iq\XWu"Q&b
T9X 1Wlh^
]A+[d4&/
]_q=b 8sV
/cD&@x
-!V.P=!B
Sv ^7Qu
nkSisg
pGxmVr
MWK!r,~
5*67Rk*A 1
c%K$UxKL+@Ej*H*a?
*_<b!&QS
5D"0x+gUgJPVQ$
.!paknYHf
$)/H#:x
7j-U$d
6$flmKg_Y2m/Ln3w'1;
*nRuSp
OG y.B3\hymk5]n,
eCHlUj
l qc}N
us(7q0&
s]VQc6F
H/Lvq#*+`?
2P!Vw)85"PGta
s*l!^(G
-!T.PX
O-WK!&
W0md b=[
Y3NA %r$K3*C[
s7!&nQ)o\)
tOSRUuN
|+iB^-8Q$}
/9]"W-].
(}#Z^IL
bK|e@Sx+
&*k{EM;iCId!9y
u?N+h*S68oWs3Wf
feq8^%K$UxKpxRVD
.@7^v#+
%V.">W@
nbDbW|tNom )
UC2+fS-]L<QghSY4}
6Ps1&L@
j9n"~6
T*%^c)sdP
#N=!RK
O~iS]e?[
)OHq-V/
X6/~isK
!jRV{i6(9is
J?woq:+
1TGo\NpxN@}l2
j+i-RV
53`a]y`TTh53D=
qP%H>A
P7LU"*kt9>!o
v6@Qf3t
U*fc%:
pK|Lg~ :*r
QVr7#q
5+~2(l&
qtNbd+O
H!:1}]tp/FY"0
O C-/Q$
53L/Lvqu&UUl
vG_kU}*g
H-,!3Nus
_Our**r
V=oY-!
jk`)Uc
~oW7g^E
2T,z9kP
Y^n-K/
Q:u`Vs
lM(}`RS
_u(UZn
q#*+`o
O.dJmQD~Tw(3NNW/
:jqnl?LZ
W[W\x <
{1vO3|o*H>W
7i@sM}Y
Q1Qj{+9]
%qyb(R
w^o#*R
-,3Nus
#$UxKL
:$et(k
s7E$F$n
b!!V.P
%fc&j95.V#W
p4}NKT3Z
X6/)PsKobA9a/
#*+`9U
*,2o%V
cbqNX`m
]S17rx<r
DN%nBh
O(aJMim
"3wq#+`\9U
Q0m<!2
f%i}kT
1LF*)y*r
}3/25"s^-w
PkK?|A311/F{3
?.bcD<_0\
lXfudel:
[/tnj0
)i?sSO,
|Y;u$U}
O-WW%>
yFQtmo
7p\PrKL32
'<>3P$s
]?pqr*$rz
4->/PrX6/)PsKL,}&
-H$\h9
,Sptq:vKe\=He
{rw**r
|=ic*X
C')PsK
Qh`h9U
s_'j#`
7wSji,!3NE
fe]R\ ,*f
hnqtoK ,
3hv\_
/i7I!-Or^E
1XHHW(]xU
xsZrt7!PsK
vHq#*+`
*2o%Vw%TO9b
c}Ig*3
qc%K$U
|rs7!sBi
jtXnC1
7I!-%}
Am_`^"aH
O6-W]Q$%E+
Qr%5QlJ8@
M#NWt')
b%r>Xwy
1v;=G&
ltXS)xQ
LSRM!-
73(xrG
a6H,c"uq#Y
udn75.M0
S!,ePE
'/#:?3b6^Cq
b>&0H
4{T:=V
tt$zr-%}
Pq/o.e
H$\,*R
HxKdFd
%&Nx^fQ
N,?RM{
,4O{-"-]xU
_4xfRO
86)M4u/k6
6-)KIcn
w4Ce=(
#*+`9UAWypT
ur**rN/^g7+/
>wE4PKlXt9
|peaAo
+k-U.aH/.7
/LvqZ6
__bg,b
2KtZ1d$
I*u'FE](n
w?zP_w
Is$Jw?
H9&%LWXHR
LLa"9U
,E_\HI*F
@3&'p12@)
C=+66WW
gK|\%s7F
n/go+.P=
K^chi?W'1=2UuE
]?]"s-7y
hvRO?!O
>s/sni
X%YK$U?xV
O:Our*ls.*
'L'Y+lezD
+,=SSSk
r%j}$i
rN`q^o
$r**rNVe
7I!-%}
_mRukp
ONXU+;lmO4
CPKg_]
q._v$!
^"2oz"V5r,
=SSy,.[j
rs7!&n
H|+i7IT~r#`Ph49
7N26}o7
L-W82+O
Z])\mxsU
3\$*84
#N@-lX-X
3Ey1H<r,fyh+]P(
<XtVd%//A:
kxr9t*r)Tr
f!{e7}o
:{+SB0LLlo[
v&tOo
^E6ib)CN
w5)/tl`tkoh2
5*,:Nua
rs7!\>
8oi7I!-%}
)O4-)a
rX6/)P
fA3L/L
8#q*+`9U@Ww
WX^qNv "
fP8xKF"8
wuuN.P|+2
7I!-%}
)!Kj'#7wUa
KsWS{+
GyC|[P
Kptqcs
|w07,u%:f<c @%
WYH/ *
|+i7Is)
/Lvq#*}0j
H$\,*R
`3'x[e
oEKG)i\
X,)%FSM
\.3"]L>
vs,3NusT
"s[;%z&
Dn-m&ZZ64J"
!OxUyN)=
)O4-i/]
*nu7w':1
p}cu2Knxnvp%u
9H|s7#d
3e\8z7
Yn%pd_B+
Xh4P]][jhN
SkB]R}G
|tAK?A
`Bm=ZbpN$2p
Pco*yA
,1.AMn"8
9I_\OW)b\+
)i?+Y1IN}N
)+.7-:h
P}7z!%"
!)Pc6F
]/9U6*
^*Z(%V
z_egPi
-md5/P
SEU0vPU.
1Pf0-Y#Y$U).
D*[h tUN
q)k(\7O:
DTo?_)iZ
%2m$#dt\/9]"W{
XW3-XU+B
qD|mc,Q)C
X5{O/1Lv
%5>WwAJ'u0c
hAH^ld',
BO4v#SS0B_rj
T,q/^XxTu)?Y
>&dxN&
/7I!-%}
P'5HXR#W\Qx"Lp
E*q^aYvj$
~:mTq_
PrX6/)PsKL,
a-mE~qZu809
5v.[Tkn|qsgY
b'D%u*)
C{$,~si
Lpbd]"W-]xUZ
?Zu[aX"Z
vn!Q3%
ARH-,3N#&f)j
WX^qNv "
fZ/qwHWx
v/myQw"#-I%
W)iZ%%
%</9]t
v#j`]`zU
_.*2t*P
*rc%K$U
"Tm|7'}
ytN7I!-%}F
@f1;n/<=FST.T&
m-l"|-O
!bFjc&
N?[H+&
r&B1sN
Y78pNi
H|e%fAqN'
vq,iIbj
0.5w]R0
WbUbEHe>~
N)OH`o
:M/pYIP
z.i`?%@z^o?
sQ9C7m=
pY,~<7=v:\
qDp0"C.
"\uN%Q%
(z8k4C-bbd7
q'lMI_j6]x
N9a*q4}9LO"
h@i\~)
mLptdMj*c
"[)Zg8
\Z4sl_
B^2WJ"|SK
+%qI!-%}j-!q[
2eu/]Q
A3L/Ln"t9WlhL
A!zdsY
,pt"dy%YK$UxK0ee
Our**r(
r^s7!&nQ
()!SNq35Uu^j.
~)^O4-t/
E6B/)PsK
L/Lvq.6N
F,ptqc
T<VP s]
U#.L,'i4"
!8`")
ck#Z];
)qn\\,|G
"wkPd~
.*aG1T**G-:7F8F=~$
&q/9]~
q/Glzby6-t
tc^VNAt
|rs7!\#P~vP
&"?UuE
!7j5i.+-
w4A>H(
>%O4-i|cY]j~-yT-A
A3L/Ln
$xk9U;?
,ptT3u
MUxKL
(h|rs7!&n
rp4}k?
y|~5`&F
v9be*f
vSPpH3
0q)ss**r
1#4vn'
]"pL_,]
:[NX/)PsK
Hq#*G0
FD*O!3Nl!
rt~[>}
k-u|m!6"
_A,7^2>bg
u*@\@ih5.
mgUtq0?:
~}Tcq5_
hK&,\m_
w(h3J|tbq_
7)N.gkfN8TK$UxKL t&s
@*!uQ>SL_
%nj&\9Zo
Lvs\vNx+r%WR&
'*!s,<
5j\77:_m5pT\
)lI~"-)
+iQP\6`-HmvXqzG4g
O36/tm:MQw/^
0T35^wWr
HS$\#k
_Vo"I!
P9]+gc
Pbmj5-Q
k"VuSDD$iv%<v\( \,*
)/W+Mtqc%K$UEx"+
I!vn%}K
Pq/9]"WG
$-=]2.
Lq#[@+
Htb:`u"aN!p ;Z
$r**rhp7F
FvD-o"
"1O]}{U
NUIO-W
CPsV6AZ
5[cZ=V
qV$eEf0Vy
s-b/$B(T
rs7!&n
;jO4`/
xq*}+jQ
2c%-kVx
`%H li(GVvD=5n
+7I!-i )
&:3k4_
)OMD|mc,
,eq4,;{7fNx
B-%!V.P\
=`aybX
lNJ@~v#IpyN
MHcDhr
u](N-5
sJnK>e
!:, y/'_Our**r^(
rv\Qsn
=6N5O(w
q^t]Cq]D
zW/E.+Qo=OZO4e0]a
k:A+tHLvqu#t,e.U.v
7p-_?hT
j]o=[S:;ml
@KJqdTm7b
dDsVhqUm^\
7[/|%Bb
P@tW$d
:e}cFv^k
)@u7-aIe /iPs;
cMJq#;echy&
!j(%aoF6SsJg^Xs
7wIN~[a
TgP^Om
s3%0aLa
|@1B<L0
\/pq6t
H3v?M*oX7Q
T.P\5j
FKQGj>M-Q7
B]B\K\`
ig CAq
e(n mmmvX6j
zV{v|}Qn
$Sf@**VjX74
u'Tk1x
W(&"/7G
3Hz%e7
3T)Uumr>Ex
lpgAy#c
s7Q4n#}!
W)V|S_'
Z'SC}[
q]"W-]xUR
l3L/Lvq#*X+`U
*&o*%V
-,3NtusH$\,*H
,tqc%KX$UKpx
-!Vh;Z
N 4kqS
(}-g'3u
p;etfqk
y?,;s'}$8v<
':-.{e*BW)"'SE0?
w+_mIz`u5
,#+mq<&
6(?KcB\=tMeH~TL?
rw+Nus
o3V\JWU%}q\
6hQtZ_
+~v(wO,
PY|di"Wj~Ug
vDT}m@~~
A\|4vl5u
T5tn t5~b{
fUx@\:
Unyr|/x]4
!8nr&/B
iokO8>
|*vvmC~c)
&_.P^
)9z6X$WLn{5#
r.[e@y
nXGv!t
%^bVvF
X$ZU"W
-Z}f-IL
.x{+`9U;<u
t0qslq5)
D%@b/w\E
|fEQe{)w.
0p\`o]-
lhf$Vr4 "
2}j,o9LPg$
;<VgOMR
6 iH-nDQo
/3>6*X
(S?@.ItR
r.[`6qF<
vWi>K>2
x3Z[>rs
!dn1-!RCPPBSa
1g1&hd
9"+:'1o
zW/E.+1Y=
8/oQ0Rmnj
-\C(g9/*|
K<4sK$
.n=.*N*[
%n1V'Our*l.O/
7ys71ssI<
Wz)iQw
$S9o60^a%
&G;7J#3op:>to
+Iw%|2U]
N.:;oFr]*
q!*,@U
=rDyu2
W*^;IT^?e%d
G{Y+8^!L/#W(]
Q4}e;bNW
(%4-UYYY{
L@`ZZo
%VMj:!-Y3
uO3b9d@;^4U!+i$.RPP.P
<hU2dqm)
}"/`9U
[<O"y3Nl
r} Fl)|lu
l6!Ybe
r%s7VF+8
u)-],}
RYL`xpsShp
+QAW)72>Opg
-,3NuslnLt
ur*l#ZCyb
S9$Yl(
B,/4i4)-%}<
!TX/"WG
O-WKyXQ
T4-i}gvnH)P[
L/Ln!9a`9U;?
aSpt5:
b\[k s-:r?
LA>{]*)s**r?T*s7!&n
\6LwQHiU
s+i#LF
]"W-]/S
p4}ks*
@r]b7)/
!!Sao^
2yJ0W:J
[Qt}#+`9U
mqBlKpA)sOAoA4T]
Pq/9]~E
6<\/`u.
MCS^Tgn
rs'hjB
UE,&n4@i
O4Ih"t/
z%UR&<v-$t
2,Va]M=j
*r+T5W
rX6/)PsK@[L
r#+`9U
'Zsu~2u%
tXS-r(@
f@;y/VL
s7#tN~
Z-a`V*
v5*4}
NA pZP
Au@3{#
W4!uo!
eTq,a#t
uJ2t0-{
4t4p3}+V
f'2L_0
8 'J9^
0"(bbOq
U-U@r~
?uWquS*
BM_&/L]wq
mfN%6g
\j6Hb7
T9+fEzq6|Y&:e
W)7*S&Q?
nDUi;X7!+h[}
d6NA/}l@
A3L/Ln
*bwE?zV
:BSg*!5N
`YfN]*
T~{V9RB
\wbE+t
INx"UfYA|
C4Ih*t/a2
-#.S*IbP9
a%OP%eW,x
pxiVLy
&9)"P=@
UHM78k,
7I-%'(=
z4q\KF5X +o
n,|-"u|
}nkVEWr
rQ/&Ta!!VH%
)i?7U1
vYy8|u&
OV"{Xl]j
Jn>A `
s4o &%Stq#E
2l'!g<
TUqtqFfayC
<uh%Iw(}*
fA3L/Ln"XZ][Ud
v(Q"c7
@.5jY{
c,% J$K
ur**rNbQ,&Q
9"&*/9]"W-].C
)O4-t/
n6/)PsK
AL/LvqW
b3nSWWyp\GR$}dp2fV
ZG[Ib=P
N+-IQ_
bfhq$Q
saNa`[
3,&\Wfgi5
>bo_^0
wV#MNK$2
/i7I!-O/S
d"-]xU
A3Zp/ql
$9l*,%F
nf`nHzj_e
O)iTM,
?HY@]j_q5#
%&d")*T
/W@KJC3)V;'
yk(x[VpkD~^M|g@GD
Mjoln]EI
- hrIBwB<?D(
Z2_,ID
D(O[9|fNya/
%VsS`/-;!6|Nt51
H$j,.ne
tq<&QuKk)
6FfWW{i+
@N`c9]S${dM
%W-]xUdD#9=+
LvL4M#*`9W
{7>.[ p
`jJka~n
*y,<"y\<14n
+#IE!9cU5
{,O6,|/
\0/+0rK
,q[|rs
rqxxKF
6-ubij
<V'>SCD?
\=t*_vYEMk:
pn.V`kv
4;N-!1e
Lo|mI<
U'::Z|kSVSuxXVg
,Ke5Hzo
%goa(F#
&}u|C=_
)T*rsmQ
TVBR1(W
+$B3TN#(a!X~,
4I#L=n|:
Pq!Plpg_]
So7#4mW
HBSg*lpi
7Vxpx-uAoQQT<s
'W1 #Lnj01
Rs8A}fEct
*,W0mdvMkmU
jpUVC?[k
s4n7O\[
u-NJ7-M
Ml]n|F
*{-9R3cMu.jf!\gj{Q{
,rx>Opm$ul',a
;\HnW1`
n4duaX
Z64LXwKhZ}f!
_jU}t*]
uCHua6e%\j)*J
*$I(}r
(&WP%V
}+Z$-DPq4DO"!Y
=mh7-R;aNI
iLy=LJ!)+&
&wFNwZJ29X
V_S^Nu
fr}$#X
6Ig%l*,
}]J5>3P
|YNIaf
i~m~TRsKb%/L
oxk\RV
-X#NHJ$
2.[gPI
q_yB5:
*S/( )I
VOiJy]h
q/&<:yn?_*AX"yO:5
/SLh3S
wMcVrIU
P<X/ia%
#<CRR1Eo
H/#nK`
US>/)PsKL(%PH
!k/S%:&
(UnLh(;-5C]*
G{$UxKpxQ
j](TVZ3
3("mEP,
;J!-bB
z]f(~h9OPu
)W=3K}7+Lv
*d6!A"
JE7Y&]
V;*Ojys<
WsUuFDb
&d"yLx)
-U4|.go\R6/Y
e_YL/3Mv?g
\j,(@V4M
Dp"(9urX"v |^"a.]
'i@g+r*`e^D1m
7/Fi["W
VL8TaI}Iq
ih:&af4y$5
urXv">
Q+82+jaW.EB
?m(S&U?
PY|Fd5\hW
p4}ks*.
Lq]1oOn?|
*+/576X
sslGn\q+
,6"2W
%K:0V
NkTrs>+-BFis['h?Z
W)"oSMxB
UEO/|+/C
:h7hn#.Z7]V$!}i`(Ykdu
,3Rdvd&
K'OGM("==
*GD&Wx@&|E
yB_,)S
E&At/L4n
y5u;]d
+NJ4~pI+
-WY'{&
]JVg"j(
#f}Trs
h(!UG+I
GRR48V!
\n?.?mb
']^},*{+
ur<)( }b^'%JF
{.\.@C
MUu&AtL#'
${c$UG
;)upp/g
A-Uh&H#
#\M6+ev
gs'<Lvc
tvIjaB
r.fFz9p"p:5ek,
VPy|<$+
nK"?UuEtBR4sO
q~7]o'
(T4-U[YZ}/)7DA72x
NK>JTL
kQoUV*2'mA?tzO
|^5*%BF
Rdu8)5$/L!kjUb
XZ]UUv
;i)R&`.*B
i7P^N`'/
Z93Xvie
s7eM&^u
itjU[b+$Vn
g-k7vq
U+1VyF<
9S{7sO
R|Qq?6#"
DZo_4<|
;(sE,o~)PPsKt,3<bvTL
!ZcmOcR",3aNu>@Nw}
qxK's:
?*%:FH
B&VB2Sqe
1k:f|m&(
3mq)OJ5-M2
\=t`u.M$&9[
"OY\2vq
vqu$z$U?Az
gur;`v
nEOt*+i@w
.F&{/L
H.?$]n
v&Qw"j
bKk>c<Ip
?2>_^ VP
4{TVRR1
IMa):`G~mDr
^rg_18@o6\LM
#O/am3
}S|urx-)<
yZR4I!
b4-nt/`K`
\=trtA
>+b7!F&n
aW~&/%;
@Iohu.E
!w6(%V#}\
SY\2vH<
<sQ%Tr`Pc**2>%
s&*L}[c
'uOi#P
:-5iLC?T[
.0"zLA@;dvn
kS"9IK)!=
2,MewSP]N=n
HN{6}dp(c-=
}q<2Ov}
`SjouGZBP
'uO[1N
27WxOV,*u
)wcqz-od
]CQpK+
F:eur@
~\J%ou
"ER?e^
agaL3,
'n/swi
616:9~~+5
xUf;-\
k#r?Zy{k
:0>D(/y3dNv
%3%_wla@Ftv
1}tCS2
\)$\,*
.5jY!WgH}p'T8
`q#Opx
ur**rN/
^jp'=)kd
+Bb/8RU
X&c^EF~
LdGmQ%V
Ux>%a%
nq#H,^e
+O4j",V)-N\&<ct
H])@u(<f'=
a~IR6/)PsK
wRq#7c'}ST
&qZiaL|n
JwWptqc%Kixn^V
0Iv^"\uWQ
R-pg7:5XvGU`\z5D.
6Lvq#*+`[9U
]@p%VF=
uAgefT=A
*g+K2+n`=
2Lht*6
HlQ$D^X#
!-Oq/%j2
hox]iqy_
>4vmSv
BT~uAQ
Q3k_'|$
C@RiDB1#SRUuN
Off'f'Fzdln
|.FmqO
pYS$\Z
}jvBSH
_xKpxL
w p**a
0;ne\!W"
b*1nifC
mkog]A#R
-,3Nl&:
$xKB%ydOtWvksP
u'}Jd~
nw-,3Nus
)q;%KX%U
s7F|F#
W"41EOt$B's6Ifhjw&
rX6/)P[
DOJH&I|juH
4tq~ema.
-"xNIcOG
K]*F F
8s)ycH!'0)6
iwbPZ]h)
~:=6&f
u1Dq8l]
saNES>/)PsK@R
fz*+9USB
o8_(]m
yX~qcu
z_ZuzY?MJt
Vfu1AgSTXmB&
vf"ftftKly
qPqNb@$Ut&0
Cub)GQuiL-!1{6e=zB{T\V
N[}`aPq
<|o6O
*+?%6P
f*.5ezC^qem
/D]"]/
@ZBw\eN
9ZSVvqX+`9U;&j P'kU
y:#K$fey
'r=5c}
H,gZZ=
q#A<B/d(
d:c}}/C
++%WR*
I*u'Fel(n
#Opx-u
27<A0S
j--``n
Hx6EJxq]HC
scMta`9U
3l&\Wfg-
5#-,%v
q|oAr|}S[]
QrunQ4+jb
2%}bUm
QBiKC-.
'r},Z#
*6D._+|0.6
t%K$MU=q
2rtYcS=ic-!V.Pg
_[I!.%#h)Pq}
R(IO-WKAm
b)Ps~,o
B#*+`9U;&b
ih"NYK$UxKL tz9g4~^GW.X'a!*BVq
?V(EE
Y|n.g_
n rT4-t/TQC
/Lvq9(h`9U
)T;q[Ou
V,,U"Zm
J\|q1Je
n<HabX
A[F1tc?Mree
2x,z;QusW
2xy>LrXcv
|r9Qw"
vxECNl}R
/i7I!-O4
9]T#WJ5JV~
44-t~)NV2
qeu*2u~A
bK:Xz!E~
s+s*ls.{*%mkDi%
`<$#S&k?;
I!2}jfA2i*
iY>|cs(
_#!q`(a
_\jU;b
!;l}X5&2yeT%\w+s
aQkXLb
,h_k$h
WNVN%#
1t\f924!i`(##
|H]5$C]Z
DqP0!:ei?o&fK
7ODhRV*"$u
C1y)+SE
7RdR4SF
{X}`cyqQXaO
bI0ot
MZ+`l![
#|bKmZc
5y=i61Q
Y);|cs(
NLJ1PvMmv
Yk!2ozJ
9 O2P}Y3|
GOA](&
#Rb[8$+
qKx{2Y
yun'qs
LecA=t
,'/`$<
2o%V(S
n !|-5.n
N4q[o&
1I3q@NVI m(
XGM^KC+^(\){Q2<nUuEt
8u/S52W
[5 tx{+`9U
]M\,*7
:hRrT*
dXO=2Ba_+
9]"W-]xUd`Lp}\
yJHlo$d9NS
d)sV:Z53L/Lvq#*G
A8eWSe
yhVP!l=r
NA@Qh@#U^7e
C%$aul
|/~43K
N>!]1XyiO
a"e*P'f{AwqnD
,kUM0r
Ux8Kp+
0.>m!Gg)cS
nf=Z4Fl\EP'
b#z G8*`
A3L/Ln"X;i':Q
,ptTLH?
R-]G?
}^(bM<W
@ani-<PsK@
b&GHvc\
6'?bz'w
pT^%K$UxKpxiVLy}
7+|r#s7
vkxUR,
6/h$-nni69h4KT
9/3\75*X
f?C;_Zg4.
-,3Nl&b
CZbnL.[
M0Epz4<n
ur*OFv6*s7!}Jjg
V.PVfO
SMXnuN
$!-%}j
C9]"Wb
pfB2v(
f b3ft/
#*mnZ09QXDoD
-,3Nus
0zWfqcu"FH
7+rsXrVq&2cT-^_
C2]"XW-]G+f5y4}mq[
/)usK@
*f'n%=-P
Q'_Er**r
|x `'u{
=9J(U,Sf
1}+;$LZlCmZ&j5F6X
(]xUdD#Q=+IBt
(cNM/~|@
vAuD"9@tus
f0B<Hx
(.+bid
V)kSt|6x<Rbk87
I!-OM4!
_9/.ye
*n^uk3
?-p%N'V
"X^ N8px5}(0Jl9Tll!^O4-i/y
qXfB+`nl
6Fa#]Q
dwm6VwSXQeOiv)hNvZ<(
@.5jnLqozY
tqrc%K$UxKD0sdO_
h|rs7!&n
B/D#$4)-%}
)&2%e6V)PPrK{~1jt
*lOio4=+
tVhDR\3'
XovMT]
934e2P%
aosi]/
NG\[v!q' >8
5J$q:nwKXX
KpA9s
37Y}dE
Ub]-%
SIxq*+`ji
_iWW$5,2o%VuVJ3!3NusT)\,
M`3+~^"s7!\=%m|0
@WJl1B
e 8P9C
:P #Df|#%]xU
<<2)P[
ZrRvqp|S
^=glT^*$w
7??.#v
*V~}pQ)o\)
>nbEl{N'z4e
P$1/9.W-
@RRq#Dh{/Ww
xKpxiVpy}
\rj.1+V!V//P
TuR;-Dt
'Ou?no
<JA}>/3l4#*
ftR*;.
Ap4uq=eZ
3*rZO{,r
~d!F0,-!1;Be
YK{TvV
X)7/e>V$Z
4%*+J%owO
fru`_4j[cN\(z|
=r0VNIx
(=*urQy{k~
S9$R1[0S!@t
ddVBRc
LU.@}
)O4-i/)
9UUR"<
46eo",*}Qwe
pxNA`wo<*r1
%6'}cIo
u:qC/
5]LAfA3L/Lvqu;i)3*.
5d2uA>b
pNofr}
pxi&n;w
b)!V.P
WLs(l1!R1
_i:c=f!q;
sI=Pa6r
l3[;Y)`S!5Fq^(%\
LN{#$UxKpx
un3S*}^
|+i7I!-O4
n/F~q/yG{qv
MknZ9U6os
-,3NusY
\VA>l6.$Ar
X=f*F w
<WV^%E
Upbd]"Wbm\
Mkn^QG!Fo
s",#\*2o%V
Tpq5LbK$UxKL+O1.^
G >:swP
Pj7:yk]g"sF-.+c
)O4-t/]8
M/`I^vq
n2NG3J7v0`^nj
m]Qu`WNz)PK^L
ij0U)V
%}`cPqQ
Xi\dZN)F
u*2os7w)*;o
,*so/l~C
qO-tQX7j
tRP5M7
%Tw!3NusT
Go,VY{I~
"}^ ia s^1F
Pq/9]"WU
qr(I-vMWW'{2q
LnqqPc3Z53L/L
"!?w\Gf
t vs,3Nus
Z&&A,x?/CoX"T8$'K<Wxmks
urX*\"\$p7n$n\i!V.P
);Vh;P
qf9]T#WJ5Nr>~
/O-ffQ
Ky/8?-
5Btr^`9W
DS"i:&G
MJp5q=d
T.{CKcN-!1
yXR2g1_
N+gA},pKk
{`p/#,qqi
)7]!KT.
L/c"tB*iJ%
!.!fq-5
J"w+NlK&n
+jlTq,`
uj7Dz*
};t/lj4i5!-O4)
&5j1eoo
?it_::%>umV?
tBvq#*+`o
%Vu S)hsh
NusY\jq
qc%K$U.
"=d*XUKN-!RMh}
l!^O4-"
pUCmEe,O3L
#*+`9U;&6'
%-"3Ntts
cS9Niu\M-5!8
s&][I]
k_41kq<u~hv
*wMmVSXa3
#X5|dHuj
*.PgP}
f"#^%K$UxKpxqd|v^VaQ=&n
"|HSG@
7Ir#UcS
k[b{"u
`IZfJ)r
5sqW:F&c
-dN!0d0`
rBVXCi
+#6RH!-
7Q`.ggK
-fQfnCb
59\3v`
n9v*r+
6!F&n~0
9]"WY-]
XxdPYA
)5_ud
W'*a4gBO
&ilnH,o
( TIdRC]
t/NJ}aM.8-
Rap[>%n/w;bp4-U,6/\t_d
L@jCMh;w9o\h"%
%KqN)xFALtl7H
6#{VHSqa
!Qt9{'T
{+:;.?Z
amiZ3&xWNQX?*2
0OTVJ",
wKEAmOb^[
1t7`2j8_<
j&Hn;)~llr5
>!qGJP
-,3Nus
cblI@4[
?P3S_w565
*+/5C6L
]5.(f(
*n=%~:.iqU
NQp;*$u(k
^b^2#bwV
U1m[CwHX
a].+ci*
nt6)PsK@+
9qq*+`9U
kX/:Qp
7C/|%,
Pn$`O4d
Zfz)yj%v
RQf0Ss!3Nl&f
jye>{
l}OX*r^
%BT&#~89
b-aNE:
'*)i~!
W)ePg@y
f}q^%K$UE
l)^s7!w:
PjTZX/C
O46,t<
jKLn3O98"`9SUR
K+>RJ$_ld
|+7I{tyB&_EC
gRiW/#\
E[%v:>isU$j0"=16
7_/Nk,7I-%'(5
pIqW&c'O
gyopx@n;=3
Q;_1;&e
1p#\ht
jSfkWr2`w>
qc%K$U.
`*Qi5\&
v:p`PhnC
Yy_X+
O-WK!B
ANbcjt9{'(Q
yyA{J/
O*rZ_3uQ
9#@b?1<hC
`\J,aAe
~hjV/V{
[a_Q'O3
$U$yKHIlhO$
F|S"WjpV
&Zw];*U
vfGn$\nyIkGr"CN.5v:jbrK$fyAs-b/$
(h|rsK
"u561O
v-YH$\,*
n=ta7mOa~Im/LJ
3*`/SW}poe
58jh(!V
P.kPG|v{
O>pV;has^"-V
7CMZH\W&p?1b*07
XHpyb\\
# Q`EfG.
':9iv9g
lpiCS#
Pv63Ux
NYl9w8
)emG^GA
l-)Cn_b^w
@B3 qR
dVcq}f?{
wly(q]1p
-B#*G39QM!n
2T,z9y
1%Kpf5
KGSbVs
OoM-t/
*i+Z9U
$lKo-5
s,3NusT)U-fV
el7gb|[em|qU:wej p&
|rs7!uf
-!V.P\4{9."*5\,-
-%}F k
aVB7Z.
#*+`9UA;M
z&wVwD:O
^slcPXXj
)U~O4f,s/YA~
PsU~e,G2199t?irXZ]
)zsr{s
BUxnJ5V
xXYPsV
L-Hq#*}+j_
CUEZgV
-x\@WE
!h]BPjT)X4s
]qa@[k
BF+~ZW7_*e
%V>O2NE
-H$\,*
.c2rj/wl<3^
[.$r*D|)^s7!\#H~vP
T&C]@|
I!Y|OUPjTX
W-+Ln]j
_ch%mSzd
ka^AafPiI{t
`Ph1tEo
iR Ndwa7TtSD vy3Nus
OG.."s7!&nQ%
;:%@"o
q#q)`9U
o]#%S*Q
H\| +}npu?[
yl@T4I
/N:#I)Tu
e43N}nwbE!;2O$d!]/|
xdx\xA
vaZfJ]ht"_
4p!rjjz
,pq1^kKQ\K'sw:Or*A
;+b@r#
w& Pq/9]~
fupf[DR
:Xnj*MD
}}. _9USBvv
k\pae2*}hie
V$M/`YzUp
7/h|rs7!\#h~
4nskRKsBi
9h#*?Pd5-
${E]x/
\8gF0}
j>6/xll
s5FIANB
LvchqM`j2!
F#6sb7
"s!3Nus
$@=6r.
u)s**r^ >L#m!&n
ceYV= \K<5
5]""-]
R<K8cp*1_<
q|hieq9
XzFj!F~X
Tz?V,+
e>z5}ZCJ*q8lU
`t9(k
Z5u{dA
|-,Y-.W\U
)i^/id
nG$uNn
xUaI}\
PVuqnns
!Df10q
gU_qV4M)?
|rs7!z#X
Wy1i0W4]
7I!-%}
~'Dp4&%
s/}&Hlzq#9y
W6*2'o%{Vn'Nu
?nann]
xKL Xg*Eou
\WSGU
|gNbSGiH
4Ec%$U
UC_>Vl&^u?
jhPg7z=e`
jBkBA,|ekzO
0]el9{
*Ie["
yppT4Y
G*$(|r
l Q;g')
]UR*|svV
;w]%CN/(kGqc%K$U
IAbXS)=&n
-!V.P=a
nPi7!-fpr1
C,X[Xd]T!
ux`r1j
Svdv"N
j=sKaq
,Me%/=U
r^qxKwpx
ur**rN/^
X_aeeZV6P\4K
]uN)9)<^&8`6U/N q/9]"W-]GN(u&K
O|fV,QSpic
3RA}L]
*+Jv%}ouvJQ
R2'n%RTn7R
#\|T w
<l5[cr ,
&N]Pupc
|X7i#7%,tn.+oV.rABWJA(S
Ql QtLh?<)
R.x{+`9U
H$\,*fC
+Py,pqc
f|ay;aVL
H+&Of4wcN|Ud_
}'8h;``RqMY
Y)|#MO
<5z"N
OrIw?*s*%d
-!V.P\4{9. \S
RNBs*b!n
/9]"W{+L
r^O4-O
ZS`hO(c
r**rNVMid
A-S#Q
(f-QG)O4-t/T
Q||l@Ae_]6<\/$
q9`9W
U~e-%JGZ3=
`3cOu?H
,fp`y#?x-/
*5/a3*T
cH!'0!
iZjx^'U
Am4fswo]y}
Z"e&Ugo
q5BMbYKk
poM7*v+r~ru+Q=&n
ti_!8n4ST|[Qe
%]qgh[Y4}
X6/~isK
$;k8]2Y6P3
fGvs,3Nus
H07!E$,Iog"r.B0
gK]SdP#D t$-:h?u
X6/)P%+s
lc/M&hj2x !<v
EF^SX"l
}Et',?
C3,V\D
4l!T%V
iW%4V.q9^OE
+c((\W28]
f3{pZvBJ_%
/^c3T3[t
pV4UdN!1o=1
Oa'PT$Pv=lY
I!-s4%$
a!{H.V
*2o%V@%T9
)+_@.ry.[
|rs7!p0#V!D/
PIwq\M
X6/)P}
mR[*=)#
#*2o%V
{=3&3O<DP
qM'$Ux
r**r^"S=!n)
9/7I}k"Q0P
0yu6=Ik
"p!o;\|B
-YH$\[,*
pxNDr**r
-eiWT.P
Tk2Iu^-b!:X`
zR-|it6)PsK
PJcyv#*}
wQ7b5;l1OE2s
MUxKpx
,%a&Yn
NebS]n
HLvq#*+``q
*2o%VI%y3Nus
5~5 N
kqztN Lddr
^l9-ys
E"7NEu:p_>@q
&Sq/g.&Wh+N)\
R3L{.L
aT@#Ye
~K`"=1s
;g8:CU:bP
9Vi_%$1
feCy]H
eb941]q
YqKh*m
D3U-{T
jy/Sh'm5J
t-,aHN
0@&\j#*
r`c!j_
VbN1o{
_xKpx2D}r_
'ue6_oP
W)"g(]
)2V%SbS
y1_2]"1!Ui
MA3iM(-;L-Hq#*}
xB|l6"AN~Trsa'wQ;n_<)eQ~K
H|+i7I!-O.GPj5D.g,dU-]8
v.x{+`?
X^-=wR~+y%RR
+4{13!7
k|+('R
/bd]"WG
A32Ix-LeS.x{+`9U;
e-,3Nus
E(7r)~zkGqc%K$UxK
ur**rNVe h
]Sv\U5UuE
k;r4}kC^
NpyOVFsg{N
uv-MHz
)Rux.47bb
r*bqnYH
KpA%,s
*$0(R.}
dAAYw|eSzN\[~-H/%k>
VbsaKj
1<vcphMreo`!
2h,z9i
[=vKpCDd@+Ooys\WS
2i4Hpbnt
GH24GGVw
5aAe 7\
Uuf`p
=-p<.y
u 7D**
|V7irt
_;`,H:CHy'
7z=U`"fH[
:%:ymS~st
f@0swo
,ar]`Qa*
at#YZee
**asT%r74#.
cS1NL
_Oy:p?}
A3L/LvqW
Xcjq,k
>k",Xfu
UKpxiCV`3$^OW
7!F'nkl)d=K
a@r'ZNc'9&jT
{O(vMC4f82sYu~wpU
L/Lvq#*G
2oU`vV
Y%KkaF
s^rZVG
/oZ+k.TP
H8s)23(
Pq/9]~
: >Bp^9Opa[DR
&)mYg_Y
6'n%BRs!3Nus
$)7-Q$}
6?[iR0
)UxKL D9
=#'Ewl
K#ZC]Uf&-
Mo3N$'
Wpt5Ncb$6
:px|X7NE
7F/Ff-^IW
73YN(}
@r~w|a(
+J91%o
40G!2o*%V"
r].fV>zt5rcbz$flyx
i!d%V.kTqu@V@lUh\YPw(9
Twu|6V
RfN+k~^; !6J-aH
Fu(]nl,5va
~c72x40 )vQbrs7!wv
-!V.Po
+i7I!-%}t^
goP/)Po
?N;9U;&:'
uRE33oK<+%t
fCuiU~&
O5d\b
k9mtSUP
t(B^sRR
+8Qo+jxOBOAs
|^bb}7!=&n
]4{5Hl'
|J~p34.N
_f/]"9
j=DR2=n
I$#AfJ9odB[{Z4
TuGoY3U=}G*
i_%$1{Le
UuNn/|%B3
)O}P>Cp
6I&Kr[Vi kwJ
Y&$\,*
aGi`QA|
ur*|.W
pQ[>lK
WD?^ZQa
u2|65P^
X6/)Po
?N/9U6$
%FY:HepFDJx
l?1~*+>S
!pmBP[
]"s]]Uci:6N
tqorMSzt
pBc6F@A
4d!rjjz2f
c;X,VF(7
c%rRqKFA
s+s**r
R)[U-!Rehx_c
zKQ$b
s(<pmRK?r
L!)O{h)]os|
5'9v/){
30Y]sQ4!f
MS"[ -Q0z
eme-q"
7!9cIn
U CSWl&
QZ*bBD
Y(\5Xg mf(b
sY~wpU
D53LnR["XfN`9bT
$VuSP;>
~#k*i}
f:&QPT
mq8*+I2h|&
dGf%\hie
h9v.r|rv
6ygbg8yqaz}
_!t:-i
/)5c4p
uZ8M`+`j~
EN%tNu
zrw~+B
T)kk^#F? qGJeP
-,3Nl&>
@7'"oePq
P}[En&+
1}tE1)
s4}kC&
Y(o^[RW
g$Utt0jx
ur*l!h
U||n.e
O46,t<
3dweHsU
d-3N$)
yc%K$UxKL
6=%wcU
+/od9*
M1"9'dy`[]R
6#buV;~
_4j[c&4{|Q"!4
eU"W-]xUc
dI&|/N@CIO-W
?tBvq#*GG
^JRg"j!*2u"
7?*T=
Q`pUV|51%"/hfxK':dr9$=B(
=P)!d%V.
A5f1s)j,#~o1
I!.{($V6#OY2gjKad~w
7J''d:bvZM,b=d
#(SXuN
Y6ewCRt
L'HLn"t;kl-QG!E:`z
gxpNjY
'bui[!p2E6
o1o.%/
8 \SV
HH|+i7ITO
5z1"W&hJ]x
k#qtNXU+
a~r;g_]
n6uo(+`U
SaZJ:"}
qt*4Ab%DdU
aT\7i&n
bFsS:T#&$2
Gwpwli
rtV4I=
VuEo}(4suR
-LrheX6B
ebPV]V
k(up8ylU
M6;.)Ae_m
tL45#*
Gzr\RJ
4hE!j/!Vb;i*
%Gg}:r-Y&x
BH}md!
"<?E](
T#W7]8]g
<k0qRWxxz8)
#u:4qvr
,T.A[uN-L
pTPslG~Iaqf
=NOVH\s**/3vVrJ us]Hk&
-%qbU-Y-9Oggc
-W\JWOsqj,]!hYu
~7c3LZn=3
n6Zj]$
e]tD0(BV-N
\gQ#_ucY
=dRCU0T[oj0Ee@ul
Pq/9]t
3+Yt>
v^6/~-
r%xUf*
nguNbFs7Gd@r#!-
EnB/)Po
: _k6q
Ts*Env
%}`TX85'
p4}k#I
;~;C`sK1
G/Ll2y
8~%XIX1IO
E[6% J$8*yu|9
|x m22=
Ah GoES
Cj?][xUcj~k
3Dc%%u9
Xn Bkm-QG!~o
^EOk4@j!-gp
7w%s3Nvts<
r.[`T:'&8
AHuraG
TrsXbrQ
Z_P$Kgki-'^Bwxl
]N]qo`
gaJGg}QK
Myio1w(e
K{TB?V(P4Q2
!{;R"IiKUdt8MO\,d
sCNAo5{UX7]a{Psc}^kd
dW-B,]
n)4-[!
B~DiyAHo
<)>k"]1U
;v\GCo6!kh+&
zUjrC$9(S
yxnR|Ct8H
92@u!<w%
p|}lpmU(q
$]r[37%t
:NKsCOi
5xJ$P~
5A4cZq(O-
AW=1$k49*
9[#ORN$J'
Wun3NTrs^rZ{>Fi%9
&].PFB
aM/p.t.?Z]
jNbmRuST;%
0VLrj3a
TuvQQ_1e
}aI}rmPFy_
&GepIq
N'R%nofS
eNN#;y
G'8Haq~
A72.Og@y
jxiV<y}
^_;Z6-7!
?W9zg/o
d,V mXc)v
Z%SB"v
N@\Y-*f
g.]\p4
=KT) ?F15#w
uZvN0Z
KfruC8X93
wsf C$f{A
S^p22|iU
I@SCE$87
W8\fZzkt
v}*n%3
FTq*,i~a
H &ZZ_yO
SEEHy,u%
|Ll#P[
!8ynq5DOx
:'~l(
P]&Hz7bc,MZ
%GU:h?_
V{|C?"u^)t{
-%m&q/u8]l`r\
O46,t<
h3k!ZfJ?/-
rl`t~4
hcL,K0
A1Wnn0%
i73NB.&#
j$]_xUaIy
ZWU"2Uw=O
qXa.9`T
Br`c]kv
7|FNvl7H.
'/^;?&+m
~j`%H li(GVvD%5UH&
p5N|K\ggc
O5p4
/i3-~i@g_]
_ojSgolVg>S/X
YkGrYB>
y\+r{B
7I%}.U
Pq9]awG
}[\X?YDfk
9H*nt
k72=c9=y.ZG|v[
k`r5>u
qywpxNA\
B'CyA(
yR-]xUd
)4-[!TY
8~B~DiA!tf%1ZbrS6ofg*%
Vh|1C[v
`^{WNAp'
WZI`,"MMASdVw
Pq/9]~
PVubXq.r
*dwMHP
&!iydkQrj
@=_Kou=
zx%}`R
fjt/ivMX.
|n$OK}`+
-#6iJA\%
lOao1=-
qPhL|ip=Sb
s\FYFs
Y('QGT
)uUNbWtLk
,+xxU5z#
f&bb0@/cY
~5]W7;
*KnC7Bp%kR!Nu
|x ^b*0;!ktTP
9ua8`Y8UU
,;sy{.>
n^kV%rp_~'*Q2giV
][R&gt?
N)0R}2N
PL-Hq#*+`?z3
Vyb#J$
x0Vuv(*
glg%6F
0"CHe('S&
)O4-lu/P6B/)PRsKI3
q*+`9UA/Q
m6Aw%T9i(&Lus\A1X(.5e
,|t*rc%K$UxKL+L6pr
*B&'i$-V.P
X6/)PsK@
SVhdN$
z5Zcu~N ^px-u
h%/P-'P?M
WiN|}'W1W2
q/%r]i9[xJH~
Y|%cJ?)
ZB{pog]
;Z)`<P
67pxEv
|+i7I!-O4!
tTDs<]3L+L
owDf$O!us
v%!V.PX
/9O"-]Di
X6Ts[{v
UA&j#4,c
{@*^4jV
va].<B
p*}~!z
b9w7~2
Soc*k/j
DdUnJFx
Qj0#U{|.P
tN`1|+{6I"-Z'!5F*XL"W
W8I'|B
w"bx4-?
xM7O4dL
DqWU|
ydg@>0(uj&
T:hb"K$ea
&6_\.
H|+i7I!-i
!k^ap~1
%|,^F$T
z]\)Pa
HhwzvXZ]
z4K^nandCr.S+Q(kptW%g
HxKDnVE
.T./m=&#rz
HNnXFr-
~}ekrO/
)uq\/cY-
\RZ1} E
=a"O2a
o|`Qa*
}nFRV=rl7Dq
0'u5F<
5U:rXB*W)AZS
d6|?+'
jO2d]"W-]G
)k4-nu/
w;d|O@
|x m(p2-
n.GPj5b1UgwgL:
)5'AUY
r.[`TJ'&8
-zNF;o <
r@BVBi
!(-Dh?%aww
eLtHLvq#*+`oSW6JFa
*2o%VI
9/5MB_kz
ePpF>NQx;o8
^rZ"2+n9ml)
uoi7I!-%}`R
;F0Xd"W"-]xU
!g#Zv]2!7yv?9
H^fx-#
$(R.wu6BQ
F+9.g&t]N+
_I20}^b-
)O4-t/r
[@c0>.H
&+`$z!!W\LM
Qu Y<lX
Zf]d20
dD Ls&Ei,h|x
20;jma
4g^N:x
UPq1zm
`t9L'
D:HO!3Nl&
*npy72
X3jv"R
z.P^OE0C<",+{
!YoU)d/w8]
oc(9}v!
.*+/5s6N
d7T+Goq. )1
Vl'F>y0uR
)+M@b#
m7j5er
O-WKxR
X6[PsFodA4`M/Y!*.
[Z0uwlDIc
5jerr'
emiq+*x%K$UxKL
;0"O_z\Hf
a*"!&p
|+i>7a
]"R-]G(WkJ!imD
>[{=q~t/)
X6/)PsKe.
qX9hth+%
zbVX3Ntts
+Pu,pOU
HjJca~T
ruEBTJ`V1RV&SM?
11l5E$
?/)K\IX
'iO0dA,
]]x]qo
4g&aNI"
c&Vr.o.<X/`~t.05
)w"Of'G
,qmp.$d$Uz
|2,uG*asT
W<H|AD2#
l0Y9t,zP
A>bU5;`/Fq
p4hbk(
AHjwYUq
*9jh)f^zF
-eB4Uh
1"sl7D
sV4hs!S"O
sL-PsZ
':)$i31
(>x*b%a
B1S=V'
kG4}m[z
%ngkw|i
ALH<tcM
"ivE /wj
3uoUmd-n$
2KUe5&
=\[r6W;
p;j\_Sos>:#dnn
!a4$/L!rTb
/3m4#*
(##Uo
K%3SP@
rTk.QUzk; N
Ny)9'$}dE
fs/a^Ii)
9++%of
adg0z{F
1"nI<>
z|#f",gbe
C0Vrl3
NKQ%]D'h2,
y%ngkFm9
#9o`E$Z]
(tjeC$Z
V?W1K]e
&=B&a,
`iKuKL
kn&5 c
4#;&IpdBf*+
6!5ukM
CsYT#W79]g
pqR:-
6i>CmC
LlW.?4]h|.
JPbj,uUo
77"N{gkf9N;
:Wu t/
&6YqhYg
3ugY|s
Y~)Pe^
u/ ^Yqgos
L63vJdaav
:l'r8T9+fozAqtV$Ir2$
\Ju*7{FFi5I
&0*BK
N"oM}\T
q]1x:
;o4f^OOPNb*
;|mSzGu~hz
%~gkw;b
<c5tT+Mq
|rs7!w2/9m(&/.P
+i7I!-%}<
{WqqWiO4Ed/
u.C[["%'UovfQ7ru}
-,3Nus
jfYCN%K$UxK'7:
5h+UmBe1Q
|+iH[M
W-]DR~
p4}eDu-W
Dcb4-t/i
}~)PsKo
O&/LvqR
}315vr
F%eK03r*
{h&.\).
dI}dafT
Tx^4f8s:
u.|q)`9U
sQF3$jWf
.[e,pqcZO$cybEL-0
-oxl}Cw
Mtp/F{
fA3LyAR
-#T{XQr
K8s(i(S?/Uu
/X*ii!-%}FT4
#fzT8!w ?
e+ih7'~cWUAg
9sBa7Q
KW_EViSqj,E
{4p5*Obo_
34-t/bY
A3L/LvqZ#Z]9U
3fJu>GhY\
$Uw,9Ip\OF:
&-!UZ$
wqtFDV
P|[_\-
-;yZd%_
qSl2aXw&
'oTqjWJ$
{QgcrJ0
7!wb~S!
/)5kD`
U9W{u*2
qvg'e$8\,
xKD& V9n:
TSgB2\HW1
q/D}Mev[
.t.62B
$<gJJU
2 vs,3Nus
57&Wg@q
8t^e'L[,UpxNQx}
zV-3iusM
\wN%I-%#8
q/F|SRZr
r`lOwO-
eyVw:.i&Ck$
n^rZ62+j
7&+DUM
W-]xUd
p(UC-W
auU/^+`*
-,3NlK&^
.[ptepc
x'#,:T
#K+%'t&iw,!QGR
!(%!IB$]
x4Dp\[F
wo)7"Z(/m4#
b!uvrQ
cy~SUj
hV-Z$`GxD%e=.B
b*bV{Gi
*{T"VB
}q<&R,
Oj=+/O
4-~ZS6
&%kSo'K$l3
w\)$\,*
T<MK$I
7$5(A+
.[!.|~g
+f~4tH4|
^ZVPTQ
]F3:Sg
,|"$ceq
*DD^++*
Bj#F@g
woL-^iVNklq
$7e,1v
L/q#uo,+`U
.[aXMfVN
q7%d:~
Ws)S^w
sKXiQH_
WkAhwm
;=]1pN
i|TyA{f
S vy3Nus
Z& pIj
=-p<.u(!
ult:*-
|ub5,'+
aW\Ad<
LnPz%}lu
5%]2ZR
8aZfJ]5
N)(XE&
.[.|~gl{]Ex
utLnd3N#
ue-W1
gwDEUi
X^G0ue
}P;p5
Cb,lg&n
53N}n%
Phw6/>,"W*LzX
\Kv)O-
s}mcBc>z
}J&*@Ly=7Z(c
2TI]tWo
2FG3qBa'
s:;,TtU
/<5vN6i
2FF0c-!Vx
@X+x=ogX
*Hm*l2y8
%=zFpx,u}
jD*^[)$O)i
XO;;mmR[(Z_.
9X.a:arzI$
T=qEX\
G{Z1Hl
wKNmv#
*i@q9j@!R
=af\~T".
1%tdt<MX
%ypGU4
;nLmmSr
#+`3Ti
0f]oXdT:'!e_
\H`})s**r
|rsa#E07'v-\V9UV=B3\F
,1,Te.
a;;.LaL{
UW6Za(
7,YYH$\,*
mkq$CE
|rs7!Dq,`~!1we
+i7I!-%}I
{9d]"WG
O`:A14
Wt\*U;
,3a~7e
,pt"N%KqxKpx
|rs7!&n
|+i7I!-%}
Pq/9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|+i7I!-%}
Pq/9]"W]xU_
p4}VOO-W
A6L3Lvq#*+`SyUnZo
_YuZ*ocoRvVB
y,3Nus
r.[,ptc&K0U{Kx
uw*)r'|qs!&n-!VP
KrW)iGS
w`UuN|+i
P3/u9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|8i7I!-%}
Pq/9]"W-]xU
wO4-6/
X6/)PsK
A3L/Lvq#*+`9U^o
-,3Nus
,ptqc%K$UxK;
|rs7!&n
Pq/9]"W-]xU
)O4-t/
X6+)PsK
A3L/Lvq.M+`9U
-,3Nus
,ptqc%K$UxKpx
|2sw!~
|+i7I6:-%}
Pq/%]"W-]xU=l2G
)O4-t/
A}"/Lvq#*WzIVRy5s
,3N k[klr3\
tc%K1DiF
]j)O4-t/F
pl*`w9U
oc_fWr
*V2o%V
ppzNws1
#UzKpx
|uvs7!
Z_;8P%
pd~x\~
*0.5j]o
tc%KQo
**r.ru
4p$nF-!VUJ
}8*i6I!,%}
Pq/9_"V-\]xT
)O4,)ts.
X6.)PsAK
tq#*+`9U
~--3Nuq
H$}\,*
-ptqc%J$WxJqy:r
(|ss7 &n
iwSRw@
X.}ayB
Pq/;]"W-]xU
X6/)PxKA
&/Lvq#*``sU~
tMc-K0U|K
*r|rseS!6Bn~c-DVKPoK}WLiWiSVuwpmU/
v|MiQIG-C}vPo
/a_] DW
K]Uk_`pS}fqO
O/]PP(
qY*Q`CUmoxs}_mu
q*{Ho>_V>l
syH_\W*
.NjwrZU[pn,8
cQ^K<_Up
s7!zZn
|+i7I!-%}
Pq/9]"WyQ]xU
O-Wx}++y
t/aXux/<)P
KXJA<3L]L!&q
#*\G`wiU
oosV_-
}oB%Vz
|,03N`
sRH9$\[_*J.35jqbra[:
ty?cJ%K
px5tu<*
Wn2W-=!V^PqEK.
wxU%N7
|[iyI)!-U}AP
q/I]sW
p@}rXO3
OXWTN+v
_O$d-1t/xXuf/
KJA3LXL&q;#*\`iU
-,3Nus
,ptqk%K4UxKpx
|s7!&n
UN|iCIj-[}
Pq/9]"W-]xU
/PKH@"LwLQq;
`U"oopu_u
I,ADs3H6\@0$.
r^l,tcNB,U<Koxmz*<r'|
PKWkn7S
:+}P/c(V@Wi]OU^QTZp
v')PPKTA2
iUos~[&u5*OoV@_
**{jerV[*dt
*Dr|s!
%&n&-VVd^K
-eN{P/]
$VY]KUf_3}6}>O
oR(KLAVLFq5*
,VNxs.F
.SLar[,C
PdAW+i?SS0r
|+iI!-%}
Pc/]WU
UB_HpL@
X!/EP[l@A
Lw{a*`U
wv[,tO!euK$UXK
yu*r`}Qs!n
->V'PeK+<ZiS
&WoN|ic<M*-[}Y
P`m+]W]Z
Yz_p}%M
OIWl+1O~O-
/C^/PKOGNLWLqq&w-`
\s'.jr
tAc/bWIUtK'x
p*r|AK
!Vn>-T`[P9K
UuN|+i7I!-%}
Pq/9]"W-]xU
>O4-t/
X6/)PsKlNA3L/Lvq#*+`iu9A"A6p%GVL@
,ptqc%K$UxKpx
|rs7!&n
|+i7I!-%}
Pq/9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&nOAN!\4
|Hi7I!-}
W1]U_p}O
)O4-t/_:S[)PsK
e'B2CDo:E;
-,3N8vbHE\,*
.5j5or.[
tqcKUlKxu'*<r|s
|+i7I!-{E}iqPq/mY]"W-]xU_p}
v<E|B^h]Te
|rseOO
Y/HH%}
)O9-t/
X6/[?sK
8W]9U
-,3Nus
7r**ts
s7!.;lBOV.P
e.E~#L
WT/LO+.uF
)O4-|AJ*O/)3sK
]5vq#*0]
uc*2o%V
-,RNlsH:\*
.jr[,dtcK0U
rs*Q&nkTCxVP
C)i~0c?k0[6
|+i4$!-F
O(u-WtDp
ebA3L<tvqQIDNAU
eOWo%V
,kqqcA:
Kpx:sr*G
VgY-%}
&q/V6Z;_/
qt/N7Z
Z3L@(3
o{:t:c
nO2o%V
c%KqxK
|*b7!O
`HDV.P*B
|8S7INO]
]xUd>b
ZP%yk*-W
+lq)O\L
c,3N3v
urI*H|}
^DS:uL
ii@*I?<-
Po/d']3<W2]gUc
}6OV.OJ
K4eA3LLvq
,BNusG+T5B*
.CrAdrVG[
,ptqcK$UxKx
u*lr'|
|+io$H-L}
W-]xU_
}FO'O%W+
O-/Xa/PH_K
q#*D]oPU}o
u*2o%V
NlsH:\*.jr[,dtc=
K$U="2"vur*hv[c|
Snw0U7N|iI-}P
W-]=4k
4}Bq[gOFW
)Ol-t/
X/)PKLA
Lq*`Uos'_
u5'*2o`8Y
KC3NusKeM\+G*
,ptc%KU<K?x
u*r|s!nf-
|+i7I!-
Pq/]"W]gU
_0p}OOW+
XsAH9<K
AR&DLU
q#*+`9U
,NsH\*.
L.$U8y
xiur**r
|s7!&n-!VPuK
iSwUN|
P4YK1UW-]c]g_xjp4}
O4-/JXa/%PKALLq*
d*2obAZ~
C,3Nus
KUKxu*<r
|u^s7!c
rhS$.P%BVpWCGi
I!-}IP\/
]W]U_p
tA3L/Lvqm*+`9Uo
_Bue*?o
\*P(.5jI
ur**r?|rs7!n
V7P'K"WiSwUN|7i
Fi4V%-]7]b_
O4-/JX
/%PKALLq*
sB*X8fX2o%V
SyE,CNus
.5jr.[,4t-cMKUKxu*
!&nBC@?m#
W3VsdS.`w
|i7I!-}
W1]U_p}O
AN*D/)PLAsABL/Lvq#*`9U
u5*oBV
%K$U8y?
uur**r
|qs7!&n-!VPuK
iSwUN|
P4Z|/PW-]c]e_up4}
O4-/JXa/%PKALLq*
l*2o6A
a_,3Nus
KUKxu*<r
|u^s7!c
dbD0AP
UuN|+i7I-%}
PC/=]<W]U_p}O'OWp-+
l @B7/
Xe~QAP@
A3L/Lq#*+`
,NsH\C
k)g,pt)N9MKPUxKpx
|s7!n6-
VGPKWiSw
i7IdOQ
OP-&/:X
*2ofAZ~
X,3Nus
KUKxu*<r
|u^s7!c
bYI5.P
CgAi[yS
UuN!|+i7I-%}
PC/=]<W]U_p}O'OWp-+
KlA3L/Lvq!*+`9Uo
_Bue*?o
\*P(.5jI!\4
,pt)N9MKRUxKpx
|s7!n6-
VGPKWiSw
i7IdL@
XA/PKALLq!*`C
{X2o%V
SyE,DNus
.5jr.[,4t-cMKUKxu*
!&nBBH3Z9m>h%)i
|+i7If-%}
/9]WA]7U:_p}OOW+c
O-/X/PKA
LLq*+`m;x
tqc%K$U,Kpx
**r-|s%!.n
-&VgPKW
[j3J8D8xU
OvO-W G+B
nOs-3/LXq/)P
&usOH$\
qc%KqxK
r**r(TrsV!&ni_!VKP
w?nuNc|+i4$!-D}
C9]WW-]8]
+lq)OQ-t/
N6/JPsK
Z3L@Lvq.M+`\U
y*2omA
H^R7us
},*eM5j
qc%KqxK
C)iy&dw
Z,!-%}
&q/Z2GW-]8]
K=4-t/
N6/\PsK
Z3L@Lvq.M+`LU
&uspH$\
c%KqxK
}ur*3v
V!&ni_!VK>y*
|+i4$!-W
iPq/2X"WL(
+lq)O4-t/
N6/)PsK
Z3L/Lvq#*+`9U !h
ptqc%KqxKpx
|rs*Q&n
|8S7Il-%}
&q/t]"W
]xUm6B
b ..A3h
%`3q+A)
q#*]9U7oCSi>s
_HRnus8Ha?\CjA_
YUONfD
S?XqUuN
t+iZ$E
_N4}xu}OH9m
|j=N/&
#{$A-Lzqsh*R
*2oFV=-,<
, 6acu
hxT7n*z0*|r1
`S-]q-i+h
:]=U56
IX>V\9
G>@4eQa*#
A,3N~!l-V3Xh0
W'Sf?x
6ESMn-!%]$fK
W# z?t
[I!-.'b
p=2s)aoPC+
\&G-~zo*ZXDP(K
2@8CLvq(cd
w2@^v<
n7$\_YpB5j
hur*%;|
YD6,!o!^W%c8
W%&x5u
C%!-)4f<
NM-"o(-]
p9+d.z=B/CG
mE#`Uu
/DEV+,
sH$/_^h.5j
0gUu!.
d.l%F)NRw
'`|%(D;BhW
/9.Q#A]xU
w#j;-z(
]#4-x`a;uJB
A@?[ vq-c_#J
x^^o%V
0h^AE;u}
ciZK$&
_!~$x:
+iD:UA%}
`7o]p,y6tp
0z&k+U;r]R
Uy 6QL)P
8n-3L/Lvq#I+{U
EI*to2V/
sH\x*k.jr[w,
xu*Sr|hsh!Cn-
VPKWiS
N|ieI%-0}:
]#U_p^}OOWG+'
gOk-M/;X
/4PKiAs
LXL~qJ*`"
*v:o/V
H{0\r8*`
,(btLec
1Kq0U+sKpx1sC
|rs7!n
KWci'S
wUN|iI-
PC]/9]g#H0
p6|jOO-W
hO4-t/X6/PHK
A&LLq*`U
*w,@"S
_,3N8vcH
.5j]r.[
,tqcK@UlKxu*r|s
S:#LUN
|+i7I*-%}
/9]WA]7U:_p}OOW+c
-t/N1Sj["sK
Lvq#*+`
u*OobV.
,NsH\*
.jE r.[PI
ur**r|rs7!n
V7P%K"WiSwUN|7i
XA/PKALLq!*`C
e*2ofAZ~
KUKxu*<r
|u^s7!c
IYN8.P
CgAisS
UuNe|+i7I-%}
PC/=]<W]U_p}O'OWp-+
Xe~QAPK
A3L/LIq#*+`
,NsH\C
G/gCptqcieDLU
|rs!&n-FVgP
KWiSwUN
`>jK/Yanm;f?rDE
A3LLvq
,BNusG*A*^*
,ptqcK$UxKx
u*lr'|
Zw@@UG=N
ciIh-m}XPS8/r]"Wy)
K<ALLq*`U.os
H,b3NLv3H6\,*
,tqcK@UlKxu*r|s
KRWiGS
w@UuNG
7INN7}Pq/9]"WQ]SU
_p4}OwO
LsLqQ*`9UC
_.#*o%V
H\,*.Gj
VPKWCiS
w@UN|iI-}P/
]WU_pR}
OZ ]9o+
lIO-t/JkX6/
L/Le`qq5*P=`#/U
.7jr[,tcK
|%bW!n
-!V.PEK
w`hUGN
iI-}P/
W]U_Xp
)Od-t/NX6/%?P
u*2oRAV^
-,2NsH\*.j
@/M!xK;Vduw**r
|rs9!&n
-zV.PKRW3i
SwUN|i
-}P/]W]U
XO4-c/
AAL/Lvq#*
_2Ou5*oBV
*.jr[,
)t]&crKsU/KxUQuW**
prP|e(s7!r
kNH8.P
UwN|+i7I!-K}IP
]W]U_p
OD-/X^/P
KrAYLLqM*E`MUNyo,lsh_Rxue*o
m^,GN,
s/wH\Z*0r.Mj
trW[<l,pt%
L,$UxK{Vuc**r
|rse!&n
-!V.PKRW3i
SwUN|i
IP-}P/^]W]]U
r_xpK}iOfOuRW ~+
GO-f/JXAX/FPX
LL%qaP*0`
sq_"aus*Jo\V.o
jer.[AX
|rs7!n
V7P%K"WiSwUN|7i
I-+o}iXPC9/-q],jW
a]5UJ@_ Kpr}}[O
Oy6eNq
DO4-"szXY/)PsK
L;Lvq*+`SvU~o
NsH*n\cd*PL.
}j%Dr6b[X,4<t
=c-lKiUxK$
G*r'Ts!&n
N9|iI-}P/=]W]
2U\_@Op2{}&^OOdWQ+M
L`Od-t/_-BBL?
,3L/t1q
-,2NsH\*.j
[,T:t!c=mK
kU\0K?!xMu"*xrgC|"s%g!&nSHN/Z5gK
|Ki7I!-}
W1]U_p}O
<cOd-v</
DXQ~/P:KJA{LsfL&q#*
-,VNus
H\,*.Gj
u*r|s!n
PKWiSwUN|iI-}P/]W-],7x>s
s+|O-W8Q[
Xq/)PsKA3LLEq!*0`Uos_u*oV
\c*.jer&[L,t
UKxug*
r|su!n
-u?O)h.l2M
S2#hUN
|+i7I-%}
/9]WA]7U:_p}OOW+c
O-/X/PKALLq*`Uos_u
Hp>XKpLP
,|qYcK$UxKpxur**r|rs
!^nf-6V
w0UN|i
I-}P/]W]gU:_p}OWOeWP+
Op-/ZXa/)P'"{8Q)[>
#*0]YUvo
u*2o%V
-,RNlsH:\*
.jr[,dtcK0UKpxP
N*r#Tq
N9|iI-}P/=]WA
]xUI7b
kNIzm@G
gGr+A3L
u*2oV^
[,Dtc%Kp-
r*4vj|s7!&n
Snw0U7N|iI-}P
]W-],<g;n
O+uMWl+
X6/PsKAVL3L5q*`Uos
k!K\,*
,ptc%K$UKpx
-VP%KW
+i#$.-[}
Pq/9]hW]xU_
}FO'O%W+
O-/Xa/PK
*2o%VN
.7jr[,tcK
u&EK'X
b-!Vge
|i7I&-K}
P3/]W]U_p2}O
O-WUE`
A3L/Lq#*+`
,NsH\*.5jX
ur**r|rs7!n
V7P%K"WiSwUN|7i
P%JV+p1_3
X/)PKLA
Lq*`Uos'_
u*o%VB
T;P.,*
|UjYr.[
c%K$UKpx
-VP%KW
|+i?$A-
W-]xU_
}FO'O%W+
O-/Xa/PK
%K$Ucypxm
|*b7!&n|n
`oa3f[
Q!g 1>d4N
|8S7I+-%}
&q/M4EW-]8]
+lq)O]-t/
N6/L$sK
q#*]9U@*
S-,R=us
},*vK5j
tq1<%K
UxKpx:sr*_
|rs*Q&n
|+i4$!-w8
Pq/2X"Wd]xU
)H/sKY @?/L{7QKN
VQYUX@s
*9)U8d
utn;A\,*
D!-9nHS9
I*-%>q#
K-tlj+E/9
%V2v>];
xA_VNus
aur*,4f
sT!&-f^RV)
K2)]yU\
xE<Q-t/
[@L$sK
APL/L}!QC_
*8,H9s
Nu0c;W\O*
FK$UxKpx
ur**qk|u5{R6,go!QB#oK
m9ZN$H]xU
'm)W8
XB2qeq
tqc%$Ux(px
x%T$E:+
|&!Y%r_D}RLE3/>1Q2-]s
*?"H$E
LPtqre7s
|Fo!\:1
nL'6qdI8AUxKe9w
RI!-0<c"
`S>u>H^:5N_
C%NAf(@*T
_Z\LPsK
'u>G7h2hI%s
-,3Nus
$6qdI8AUxK
x!wkUu
m9ZN$H]xU
D)|!HW
)O4Nt/
X"z[#.H'A"J
CoIqNrq-$\?
n$6qdI8AUxKa:m
J0{~u!!
D:!-2/}&#IK3G>D2|U
L&]B,m
_To,4"
.l)B&.[
,kqqcG?E!
**r(TrsNBH
tOU7Z"eK
|+i4$!-\
L\.G>I]xU
e9a.D9
Le,ELL#
'n.3L/L
q:Q9XCw@5j
|xKpx:sr*S
t+iN*OYV
IP8"W-]8]
6=c<A0d
H,G-t/
?i4V>]Lvq.M+`V!xB"
uj!2o\5x
},*mEs
'LM2]1iK
FP3@wH2xU
_N4}o,`;^>cQw
qt/n<F\
>S-|-3L/L
uj!2o]3x
JK$Ucypxm
-X5@$y"}8H
Y=GXA}
C9][4C)
O(u-WhNk
F*4-t/
?i(V#@)vq#*]9U~
+DGo%V
q!A3COb\[
K?K0X$P
r**r(TrsNBH
tDD9A5l9m']i
V,!-%}
&q/@>L#^3
O(u-Ws_h
(t5@"@)
l<W2JKp\Zj
|rs*Q&n~NO"]>k"y0G
w?nuN}
BIN,B^%}
C9][4C)
O(u-WoJl_[9
CsKc"]8\"
GCN`9U!!
si>~UbOZ
l<W2MCbB]
|*b7!_
iYR8O9l9yW)i(S
N%}i3[J3C>D-
_N4}x.goA6hLu
CsKc"]8\"
&us{+J(_DeGE
,kqqcK*Mu
|*b7!_
iYR8O9|9y#)i
Pq/2X"WT>
.j.A!X8V
IYC<us
},*mKA
k@<gB
`_!V.P*B
P8~p}K9A/
OT4o_v
X&4-t/
9|3])Flq#*]9Un
e$APO%
,kqqc\(J!
|8S7IMLL
@\;MW-]8]
e9|#ZW
+lq)OF[
Ho1E]J9
-,3N3v
H]?B^wOR
,kqqcQ(
bKNV.P*B
LW)Q6H<
-i+hp4}
ON9!Yj
qt/r;X[Z3
.h33L/L
t#*D@X,x
uj!2o\5x
d$W\,*
Kpx:sr*S
nHS9.P
C)i`2y
LW)Q9H;
_N4}x k.D0rX`_H#RD
CsKc"]8\"
QX+`9U!!
sf6yUyK
_,3N3v
H]?B^wOT
,pt"N%KE<
-X5@$y*y%P
W<P.-]xU
x;}.C#sJ
qt/g9_HY9
/l2\lV6
q#*]9Un
bO2o%V
CJkK;VKpx:sr*^
sBOV.P*B
:3\Xi7I
N%}d3[
_N4}~,]!E8hNf
GL4Qn8A3L<tvqWIE
yX2o%V
S-,_=UV &P:YN
@CN'BQ8@pk.8r
|8S7IUNK
FX8C2-]xU
q#}oB$o_d
CsKn"]8
l<Q(^*
rZ8{X^
aur*3v
ONsHL0\
C\<U>H]xU
d.z<]8uMw
8S*s/@9Fl
c!J/\Ep.5j
Kpx:sr*^
uH!V.P*B
N%}d3[
_N4}x-k;
?4'C"]#vq#*]9Uy
yK2o%V
,!R0HGc.5j
**r(TrsCBH
)DW:J1oK
O(u-WoJl_H:
BT]{*O/)P
AG/A8X
gf$\,*
Q.V'xKpx:sr*C
SNaOT2
C)ix0~
O(u-WuHk
Wy76/)P
BG@A4s
j*2omA
o:W.MOv\5j
hHU3M c%
O|?_.h
F#4-t/
?43R#C<
._Eb[Qj
s@M;@5
'R_@]y$q/9]
z<k=_W
+lq)OZL
%?oV'/Lvq.M+`M6y
,pt"N%KP6
m|rs*Q&nuYOvAu*8v#Z
]xUd:c
.n$A>/Lvq.M+`W;`Op
u&7P)*2omA
i'J.\X}.5j
W2P%X/px
i_Q$W)oK
04q/9]
y;j=]%xJl
]?4-t/
<s$V>]Lvq.M+`M6y
lhJ)_Xa
|rs*Q&nf^!V.P*B
i7I!-%PPq/9]"W->xeN_
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|+i7I!-%}
Pq/9]"W-]xU
)O4-t/
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|+i7I!-%}
Pq/9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|+ik'I!-%}u
Pkc/+]"W-]ndU
)O1(-`/
X6/)P&oK
A!L/Lvq
?*?`c+U
-,'NLas
HJ0\M8*0
,etdc0K1UmKexC
g*d?ra|
|]=ic!I@7-)3}#
P9g/'/]
4W:]oU
X./1PkK
Az+L_7LKnqo;*03`
Y4,v*Nnls[
H(=\55*
?Kr>UxKmjxs
u!h**r
|?hs)-!=n
|+i;,I
Pq/%]>W1]dU
<=O -4`/
X#/<PfK
A&L:LcqW6*x>`K,Uh
;,%Ncs
H2\:*z
2UoKgx
|UesM !N1n^
|i3iu/I&9-
Ph/ ];W4]aU
X,/3PiKl
Ad)L/LGlqg9*&1`9U
6,(NBns
Hv?\Y7*>.5j
,ltqc9K8UdKlx
ucn**r
Hm%k"xK
PqJj9C3H]x0O2f
`O4H7]n,^JM4sK
_r8oFt
;l$e\,XphYj
bDS$.Po
JP8"W_<
y*a*-Wdhk
L:DY$/
=ybyPs.J.V?J<vqFZG
_{4gI2oI
c=$\^KaFP
-D#K8o/
Ni4P#-]
O|.H!oj
=sJ]Ps%n Z)]8
F^D`90r
-RECe}V
br.)PX
I.P:xK
&}N1k|r
rYc".Po
S1DYJ;|5q/W0G8_8
Hj=w/)9
.u3VL/%
gH$.IOk\Pj
O>`I1tq
Di7&LY@
AV!A8&
uno[,A
A&A(,*af[
\:|Bpt
sneV."k.w;L
>=`|Uu<p
/E=!-W
cc?W9][
|!-WxyD
=EHk(sKr3C)m*!q#BY
lk2oM$f
Mr.3gC
n^!VK#m
A9]G8H8
[5x#|O-#mX
]j1X]J#sKn4A\)?
cOVo%8b
`&I\,yWOA
^SdJ<A9}d
V EA%}
Pq/9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
Pq/9]"W-]xU
)O4-t/
X6/)PsK
A3L/Lvq#*+`9U
-,3Nus
,ptqc%K$UxKpx
|rs7!&n
|+i7I!-@
p`p!`(j.94p'z.|3v`l0k`v0u$pn
z-p%m%x0p!p.n49`w4m!9.m,j!l)v%m)~-w'k)9(92~!93j#x37@
w)|%k2
Hq2P4[
Jw)m)~@
GV*z]@
x'\2k@
|/p)|@
w5\2k@
|0|/`2v@
a%w,a%m/
z%j)u4v@
{4x4k/
j%m/_)|@
{%m(z@
w&x4k/
x%x,a%m/
v(|$l0k@
v)|4p'l0k@
$9-tb;9`@
9.x$|`a%m/9#l2}!9@
z0p.v*z`
`j.m/9,j`a%m/7@
z0p.v*z`j.m)9!p`u37@
-t$99`@
%]3_%J!|8
OT.q!|2xp
NN%W-X2`@
@82@j3m,
I\4k!1
J]6`%vo
KK.|2v]]@
LP4o2u7
JT4\2kp
JP6u$i@p
KC2]6}
JL$k,nr
PQ!T-k
k2*@dZ@
R\4k!\#i)w
OP6u$v.|`]l]@
%v9p-@\@
LP6u$x4,@dZ@
MO2x4k/
v!p./@DZ@
I[3k/e
JI)p%|Tv
NJ!r6k,nw
MZ.|4k/I
NX3k#\2klx
PX3k)w!u$ @dZ@
|+T @dZ@
NP4Z3\2kz
k2D#@dZ@
RJ&z,\#i)w{
k!J0v4t"@dZ@
k.J0v4%@dZ@
@82@X2`@
"m!m-m/9!u$
9z.m3{4x4k/
#|3}.|@
9z.m3z%j%p$
#|3o/x)w@
9z.m3z%j)u4v@
)j.92l%m)9/t4;3
9z.m3k5|4p3w@
3139)|e0@
9z.m3j%m2v@
3|4v`x,}@
9z.m3j%m/
592v`k-j,~%9!x!z3
9z.m3l%k2
/m/4`p@
9z.m3v4v#
9z.m3p+l,
/o2x4t4v`x,}3x#
9z.m3p0m(k/
)p)w"9%v@
9z.m3p"c2
%}0j`w`
9z.m3w/
8|.u%z0p.<@
9z.m3a%w,a%m/
)|.m!j'|@
9z.m3p%v!j'|@
)|.m&l$
9z.m3p%v&l$
)|.m/|@
9z.m3p%v/|@
)|.m/|`v`w5
9z.m3p%v/|&k.l@
)|.m/|`v`l0m@
9z.m3p%v/|&k5i4
.x)9)|!|@
9z.m3w!p&u.t@
2m-m#v%
9z.m3w/|&v@
.|&z`v`l0k%
9z.m3w&x4k/
.x)92l%m)}8p`v-mbj@
9z.m3w!p!~.|@
.x)99|#j@
9z.m3w!p#j@
.x)92o`i#
9z.m3w!p$p%
.x)9)|(w,
9z.m3w!p&u(w,
.x)9/t4j%p)kz;3
9z.m3w!p&k!
.x)9.l@
9z.m3w!p)i4
.x)9,x)~0p4v%x)w@
9z.m3w!p/
.x)9/w%90k4v@
9z.m3w!p0p4k@
.x)9!p.99|#j@
9z.m3w!p6k!m@
.x)9!p.90k4v@
9z.m3w!p6k0
(|$9/95i2|nK#t)|0v2t7m`q%}$p%7@
9z.m3v(|$l0k@
)|4p't.~2w4x!u"|`|/i,92~!9)q!i/k!|-w'k@
9z.m3p3w7m)~!x%
9)w,k#p%7@
9z.m3p1p@
"|4k&k.|)9)
9z.m3{%m(z%k2
9m-|2k`V`v%<i
9z.m3j2v@
59&t-k@
9z.m3l/t-k@
,x)~0p4v%
9z.m3o2u7
2o,~$p3k#p.
9z.m3k6u'
!~`q#92v@
9z.m3x'|2k@
4z`o2u7
9z.m3m#v%
8|4v`w3
#u`|(}@
9z.m3x%x,a%m/
9z.m3z.|2k@
/9!`/|`p%
9z.m3v-w/|&u3
.w7954)|%k2#e7$
9z.m3w.n2w)|2v@
,x)~0p4l$k,n@
9z.m3w%
.v%x)~3j%9!u&p%7@
9z.m3w/|2k@
!p.92x`v.j%k2
9z.m3x!k9v.j@
!p.92x`x.m"92x%
9z.m3x!k9k!|@
!p.9/jg9/m)9.x2`@
9z.m3x.m2x@
,x)~0p4}6j/99c2
9z.m3|/p)|@
GetLastError
SetLastError
GetTickCount
ExitProcess
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
FreeLibrary
LoadLibraryA
GetProcAddress
DeleteFileW
MoveFileW
CreateFileW
GetFileAttributesW
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleCP
SetUnhandledExceptionFilter
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
FindResourceA
FindResourceExA
LoadResource
SizeofResource
LockResource
FreeResource
GetWindowsDirectoryA
CopyFileA
CreateProcessA
GetVersionExA
CompareStringA
GetLocaleInfoA
EnumCalendarInfoA
FormatMessageW
CompareStringW
TerminateProcess
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
SysAllocStringLen
SysFreeString
SysReAllocStringLen
MessageBoxA
CharUpperBuffW
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharLowerA
CharLowerBuffA
GetSystemMetrics
MessageBeep
kernel32.dll
oleaut32.dll
user32.dll
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING

Process Tree

0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe, PID: 2400, Parent PID: 2948

default registry file network process services synchronisation iexplore office pdf

0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe, PID: 3052, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

TCP

Source Source Port Destination Destination Port
18.236.29.166 25 192.168.56.101 49238
18.236.29.166 25 192.168.56.101 49240

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 57665 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 51758 114.114.114.114 53
192.168.56.101 52215 114.114.114.114 53
192.168.56.101 62361 114.114.114.114 53
192.168.56.101 58985 114.114.114.114 53
192.168.56.101 50075 114.114.114.114 53
192.168.56.101 58624 114.114.114.114 53
192.168.56.101 62044 114.114.114.114 53
192.168.56.101 62044 8.8.8.8 53
192.168.56.101 62515 8.8.8.8 53
192.168.56.101 62515 114.114.114.114 53
192.168.56.101 60330 114.114.114.114 53
192.168.56.101 60330 8.8.8.8 53
192.168.56.101 61322 8.8.8.8 53
192.168.56.101 61322 114.114.114.114 53
192.168.56.101 62306 114.114.114.114 53
192.168.56.101 55142 114.114.114.114 53
192.168.56.101 56111 114.114.114.114 53
192.168.56.101 58005 114.114.114.114 53
192.168.56.101 64558 114.114.114.114 53
192.168.56.101 49986 114.114.114.114 53
192.168.56.101 65527 114.114.114.114 53
192.168.56.101 62324 114.114.114.114 53
192.168.56.101 55457 114.114.114.114 53
192.168.56.101 63148 114.114.114.114 53
192.168.56.101 55773 114.114.114.114 53
192.168.56.101 51209 114.114.114.114 53
192.168.56.101 51209 8.8.8.8 53
192.168.56.101 61491 8.8.8.8 53
192.168.56.101 60789 8.8.8.8 53
192.168.56.101 60789 114.114.114.114 53
192.168.56.101 59504 8.8.8.8 53
192.168.56.101 59504 114.114.114.114 53
192.168.56.101 60395 114.114.114.114 53
192.168.56.101 55469 8.8.8.8 53
192.168.56.101 53131 8.8.8.8 53
192.168.56.101 58818 8.8.8.8 53
192.168.56.101 65012 8.8.8.8 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name 4110853b4c5b72eb_0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
Filepath C:\Users\Administrator\AppData\Local\Temp\0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
Size 275.0KB
Processes 2400 (0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe)
Type PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
MD5 869b16bf75516e07996183b396ee574d
SHA1 ade6fa616ad6bf0256ba2916a0fc9a9c3aa2e5bc
SHA256 4110853b4c5b72ebd1a4f88f6f245bbf0b24d5482fccf7b62dcbb1744336646d
CRC32 3C0F1D24
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 0d5173a6143d6852_old_0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
Filepath C:\Users\Administrator\AppData\Local\Temp\old_0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1.exe
Size 275.0KB
Type PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
MD5 e78330c1ac2890345cf9f65ec23601ee
SHA1 22b9d2bb3b9c99997383156dcef63b7c635d09ad
SHA256 0d5173a6143d68520259da27191f0c3d4be65cc48d58e0dc2a433594d68e70d1
CRC32 2B8A9148
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.