SmartHawk

1.8

低危

64 个模型检测该样本为恶意！

重新分析

下载样本

0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb

0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe

分析耗时

134s

最近分析

396天前

文件大小

140.6KB

静态报毒动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR DELF

DACN 0.14

FACILE 1.00

IMCLNet 0.81

MFGraph 0.00

引擎	描述	特征	威胁分数	可能家族	检测耗时
DACN	基于动态分析和胶囊网络的可视化恶意软件检测	API调用、DLL以及注册表的修改情况	0.14	Unknown	0.06s
FACILE	利用改进的层次胶囊网络对二进制恶意软件图像进行识别分类	二进制图像映射为的灰度图像	1.00	Unknown	0.04s
IMCLNet	轻量化深度卷积网络模型实现恶意软件家族检测	原始二进制映射而成的可视化图像	0.81	Unknown	0.21s
MFGraph	利用静态特征构建图网络以检测恶意软件	原始二进制PE文件的静态特征节点	0.00	Unknown	0.00s

查杀引擎	查杀结果	查杀时间	查杀版本
Alibaba	Worm:Win32/Mydoom.1e550418	20190527	0.3.0.5
Avast	Win32:Malware-gen	20200806	18.4.3895.0
Baidu	Win32.Trojan.Delf.j	20190318	1.0.0.2
CrowdStrike	win/malicious_confidence_80% (W)	20190702	1.0
Kingsoft	None	20200806	2013.8.14.323
McAfee	Artemis!E7D54D0AC85E	20200806	6.0.6.653
Tencent	Malware.Win32.Gencirc.10b07aad	20200806	1.0.0.1

可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报） (4 个事件)

section	CODE
section	DATA
section	BSS
section

一个或多个进程崩溃 (20 个事件)

Time & API	Arguments	Status
1727545315.328375 __exception__	exception.address: 0x4149f2 exception.instruction: div ecx exception.instruction_r: f7 f1 eb e8 eb 03 ff eb ff 13 c5 2b f6 64 8f 06 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x149f2 exception.exception_code: 0x80000004 registers.eax: 0 registers.ecx: 0 registers.edx: 4272174 registers.ebx: 2130567168 registers.esp: 1638204 registers.ebp: 1638292 registers.esi: 4278674 registers.edi: 0 stacktrace: RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545315.328375 __exception__	exception.address: 0x414a2d exception.instruction: jae 0x414a0b exception.instruction_r: 73 dc cd 20 64 67 8f 06 00 00 58 61 eb 02 cd 20 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x14a2d exception.exception_code: 0x80000004 registers.eax: 1636402 registers.ecx: 4278755 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638172 registers.ebp: 1636480 registers.esi: 4278755 registers.edi: 0 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x41308c exception.instruction: int3 exception.instruction_r: cc 90 8b c0 f9 90 8d 04 5d 34 12 00 00 f8 90 c1 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x1308c exception.exception_code: 0x80000003 registers.eax: 0 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 4272233 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413090 exception.instruction: stc exception.instruction_r: f9 90 8d 04 5d 34 12 00 00 f8 90 c1 eb 05 fc 90 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13090 exception.exception_code: 0x80000004 registers.eax: 0 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 4272233 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413099 exception.instruction: clc exception.instruction_r: f8 90 c1 eb 05 fc 90 c1 c0 07 90 90 33 db f7 f3 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13099 exception.exception_code: 0x80000004 registers.eax: 8549126 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 4272233 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x41309e exception.instruction: cld exception.instruction_r: fc 90 c1 c0 07 90 90 33 db f7 f3 64 67 8f 06 00 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x1309e exception.exception_code: 0x80000004 registers.eax: 8549126 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 133507 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x4130a3 exception.instruction: nop exception.instruction_r: 90 90 33 db f7 f3 64 67 8f 06 00 00 83 c4 04 66 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x130a3 exception.exception_code: 0x80000004 registers.eax: 1094288128 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 133507 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x4130a7 exception.instruction: div ebx exception.instruction_r: f7 f3 64 67 8f 06 00 00 83 c4 04 66 be 47 46 66 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x130a7 exception.exception_code: 0xc0000094 registers.eax: 1094288128 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 0 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x4136a8 exception.instruction_r: 8d c0 74 03 cd 20 64 67 8f 06 00 00 eb 02 cd 20 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x136a8 exception.exception_code: 0xc000001d registers.eax: 784913 registers.ecx: 0 registers.edx: 1631 registers.ebx: 1996041745 registers.esp: 1638212 registers.ebp: 4272255 registers.esi: 4278674 registers.edi: 4278674 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413aa1 exception.instruction: div bx exception.instruction_r: 66 f7 f3 0f 85 5b 01 00 00 0f 84 55 01 00 00 8d exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13aa1 exception.exception_code: 0xc0000094 registers.eax: 0 registers.ecx: 0 registers.edx: 335633487 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 1995328620 registers.edi: 4279712 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413ae4 exception.instruction: clc exception.instruction_r: f8 0f 83 1a 01 00 00 8d 85 84 0a 00 00 89 44 24 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13ae4 exception.exception_code: 0x80000004 registers.eax: 4274882 registers.ecx: 4274832 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413b27 exception.instruction: int3 exception.instruction_r: cc 90 e9 d7 00 00 00 8d 85 c2 0a 00 00 89 44 24 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13b27 exception.exception_code: 0x80000003 registers.eax: 0 registers.ecx: 4274882 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413b67 exception.instruction: div ebx exception.instruction_r: f7 f3 85 d2 0f 84 94 00 00 00 8d 85 05 0b 00 00 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13b67 exception.exception_code: 0xc0000094 registers.eax: 2284013426 registers.ecx: 4274947 registers.edx: 0 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413ba6 exception.instruction: int 0x68 exception.instruction_r: cd 68 66 05 7b 0c 66 48 74 55 8d 85 45 0b 00 00 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13ba6 exception.exception_code: 0xc0000005 registers.eax: 4276992 registers.ecx: 4275009 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413bf0 exception.instruction: int3 exception.instruction_r: cc 90 66 81 fe 47 46 75 0c 64 67 8f 06 00 00 83 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13bf0 exception.exception_code: 0x80000003 registers.eax: 0 registers.ecx: 4275076 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 17991 registers.edi: 19021 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413df1 exception.instruction: inc dword ptr [edx] exception.instruction_r: ff 02 eb e8 eb 02 ff 20 48 2b d2 64 8f 02 5a eb exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13df1 exception.exception_code: 0x80000004 registers.eax: 699275003 registers.ecx: 2002466938 registers.edx: 0 registers.ebx: 0 registers.esp: 1638208 registers.ebp: 31070 registers.esi: 4275307 registers.edi: 4275331 stacktrace:	success
1727545315.328375 __exception__	exception.address: 0x413e29 exception.instruction: jae 0x413e07 exception.instruction_r: 73 dc cd 20 64 67 8f 06 00 00 58 61 eb 02 cd 20 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13e29 exception.exception_code: 0x80000004 registers.eax: 52 registers.ecx: 4275682 registers.edx: 4275682 registers.ebx: 0 registers.esp: 1638176 registers.ebp: 1636484 registers.esi: 0 registers.edi: 0 stacktrace: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x13de2 @ 0x413de2	success
1727545315.406375 __exception__	exception.address: 0x4146f1 exception.instruction_r: 8d c0 eb 01 eb 68 33 c0 eb fe ff e4 cd 20 8b 64 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x146f1 exception.exception_code: 0xc000001d registers.eax: 0 registers.ecx: 674103296 registers.edx: 3221225524 registers.ebx: 1784 registers.esp: 1638236 registers.ebp: 31070 registers.esi: 4278673 registers.edi: 4194560 stacktrace:	success
1727545315.406375 __exception__	exception.address: 0x4147c1 exception.instruction: div edi exception.instruction_r: f7 f7 eb e8 eb 02 ff 20 23 c7 e8 0a 00 00 00 e9 exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x147c1 exception.exception_code: 0x80000004 registers.eax: 1998421471 registers.ecx: 4278015 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638208 registers.ebp: 31070 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545315.406375 __exception__	exception.address: 0x414813 exception.instruction: jae 0x4147f1 exception.instruction_r: 73 dc cd 20 64 67 8f 06 00 00 58 61 f9 72 02 cd exception.symbol: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x14813 exception.exception_code: 0x80000004 registers.eax: 0 registers.ecx: 4278194 registers.edx: 4278194 registers.ebx: 0 registers.esp: 1638176 registers.ebp: 1636484 registers.esi: 0 registers.edi: 0 stacktrace: 0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb+0x147b2 @ 0x4147b2	success

在文件系统上创建可执行文件 (8 个事件)

file	C:\Windows\win32dc\Half-Life 2_codes.exe
file	C:\Windows\win32dc\Silent Hill 4_crack.exe
file	C:\Windows\win32dc\DAoC(cdfix).exe
file	C:\Windows\win32dc\DAoC + codes.exe
file	C:\Windows\win32dc\Quake3 + codes.exe
file	C:\Windows\win32dc\Counter-Strike(crack).exe
file	C:\Windows\win32dc\FlatOut(cdfix).exe
file	C:\Windows\win32dc\Half-Life 2_nocd.exe

该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (6 个事件)

section

{'name': 'CODE', 'virtual_address': '0x00001000', 'virtual_size': '0x0000a000', 'size_of_data': '0x00005600', 'entropy': 7.992235378339067}

entropy

7.992235378339067

description

发现高熵的节

section

{'name': 'DATA', 'virtual_address': '0x0000b000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000200', 'entropy': 7.537443661508319}

entropy

7.537443661508319

description

发现高熵的节

section

{'name': '.idata', 'virtual_address': '0x0000e000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000600', 'entropy': 7.871666928051274}

entropy

7.871666928051274

description

发现高熵的节

section

{'name': '.rdata', 'virtual_address': '0x00010000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000200', 'entropy': 7.582096724860129}

entropy

7.582096724860129

description

发现高熵的节

section

{'name': '', 'virtual_address': '0x00013000', 'virtual_size': '0x00003000', 'size_of_data': '0x00002400', 'entropy': 7.596943615976609}

entropy

7.596943615976609

description

发现高熵的节

entropy

0.9705882352941176

description

此PE文件的整体熵值较高

与未执行 DNS 查询的主机进行通信 (1 个事件)

host

114.114.114.114

操纵非子进程的内存，表明进程注入 (2 个事件)

Time & API	Arguments	Status	Return	Repeated
进程注入	进程 1784 操纵非子进程 1784 的内存
1727545315.406375 NtProtectVirtualMemory	process_handle: 0x000000b8 base_address: 0x00400000 length: 4096 protection: 4 (PAGE_READWRITE) process_identifier: 1784	success	0	0

文件已被 VirusTotal 上 64 个反病毒引擎识别为恶意 (50 out of 64 个事件)

ALYac	Generic.Malware.Sdld.C44D850D
APEX	Malicious
AVG	Win32:Malware-gen
Acronis	suspicious
Ad-Aware	Generic.Malware.Sdld.C44D850D
AhnLab-V3	Backdoor/Win32.Delf.R257860
Alibaba	Worm:Win32/Mydoom.1e550418
Antiy-AVL	Trojan[Backdoor]/Win32.Delf
Arcabit	Generic.Malware.Sdld.C44D850D
Avast	Win32:Malware-gen
Avira	TR/Dropper.Gen
Baidu	Win32.Trojan.Delf.j
BitDefender	Generic.Malware.Sdld.C44D850D
BitDefenderTheta	AI:Packer.1C5CFB1921
Bkav	W32.AIDetectVM.malware5
Comodo	Backdoor.Win32.Delf.ste@4wua2l
CrowdStrike	win/malicious_confidence_80% (W)
Cybereason	malicious.ac85e9
Cylance	Unsafe
Cynet	Malicious (score: 100)
Cyren	W32/Delfloader.B.gen!Eldorado
DrWeb	Trojan.Siggen3.61286
ESET-NOD32	a variant of Win32/LunaStorm.D
Emsisoft	Generic.Malware.Sdld.C44D850D (B)
Endgame	malicious (high confidence)
F-Prot	W32/Delfloader.B.gen!Eldorado
F-Secure	Trojan.TR/Dropper.Gen
FireEye	Generic.mg.e7d54d0ac85e9567
Fortinet	W32/Delf.CST!tr
GData	Generic.Malware.Sdld.C44D850D
Ikarus	Worm.Win32.Lunastorm
Invincea	heuristic
Jiangmin	Backdoor.Delf.hzu
K7AntiVirus	Trojan ( 000010291 )
K7GW	Trojan ( 000010291 )
Kaspersky	Backdoor.Win32.Delf.cst
Lionic	Trojan.Win32.Delf.tpLp
MAX	malware (ai score=80)
Malwarebytes	Trojan.Delf
McAfee	Artemis!E7D54D0AC85E
MicroWorld-eScan	Generic.Malware.Sdld.C44D850D
Microsoft	Worm:Win32/Mydoom.PB!MTB
NANO-Antivirus	Trojan.Win32.Delf.fnpcbp
Paloalto	generic.ml
Panda	Trj/Genetic.gen
Qihoo-360	Win32/Trojan.Delf.B
Rising	Backdoor.Delf!1.64C1 (CLOUD)
Sangfor	Malware
SentinelOne	DFI - Suspicious PE
Sophos	Troj/Agent-BBLI

288x288

224x224

192x192

160x160

128x128

96x96

64x64

32x32

暂无运行截图该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

1992-06-20 06:22:17

PE Imphash

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
CODE	0x00001000	0x0000a000	0x00005600	7.992235378339067
DATA	0x0000b000	0x00001000	0x00000200	7.537443661508319
BSS	0x0000c000	0x00002000	0x00000000	0.0
.idata	0x0000e000	0x00001000	0x00000600	7.871666928051274
.tls	0x0000f000	0x00001000	0x00000000	0.0
.rdata	0x00010000	0x00002000	0x00000200	7.582096724860129
.rsrc	0x00012000	0x00001000	0x00000400	6.753357619284395
	0x00013000	0x00003000	0x00002400	7.596943615976609

Resources

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x000150be	0x000002e8	LANG_ENGLISH	SUBLANG_ENGLISH_PHILIPPINES	None
RT_RCDATA	0x00012448	0x000000a8	LANG_NEUTRAL	SUBLANG_NEUTRAL	None
RT_RCDATA	0x00012448	0x000000a8	LANG_NEUTRAL	SUBLANG_NEUTRAL	None
RT_GROUP_ICON	0x000150aa	0x00000014	LANG_ENGLISH	SUBLANG_ENGLISH_PHILIPPINES	None

Imports

Library kernel32.dll:

• 0x414c2e GetModuleHandleA

Library user32.dll:

• 0x414c36 MessageBoxA

L!This program must be run under Win32
.idata
.rdata
8\plJ
{{~nZc
9HGuX+r)"
xT{5-l;^`
y.%mtB)DHV
5)VBdY
t;jj+iOi%
nj`.J[D
,"V:&Q>|KE`
nST(>v
!*QqM5#
]Wi[m.0P
PJ8Sn;La.v
3pyG(Tv;L=dxjp
rdK'p pQ
">nPccB
W?qK{_|
F<[Qg%
VTOoU}
r'a%=xF;
Nzv@UG~
/(>)Xod?T
/G@1w!K]@
Z{CDkZ$
37; WpA
&T;$c^_v>Bq
OdtG=yK
@w7ON2~7{
c&N1%4
B(N&U(gO.Q
xYb4~6Ys
1P\1S 
sc~%Pa=A|94
G)Ek|u'8^/
YY &p!`e
;~c!,?y3_
%"L]GS[B
T n.AT
X\IkRl
Ko0X]ZH>K
$.a1X_w4'k.
:OgKcfp
@~3?rP+l/eE,
QZ_c}Wid@
<4fKN@h
;:.i%<FS
tv{%7/7vz
A/b'P<a:[AOL)>>0
(~)<.u
-%\UU8)
@'!Rfi
SiOIg'
RzP=\ ?o/T~P
w#6IBV^3f_
"(]x-@@P).,
4v&@m6IQ#
\mvD8+
:W~/>H,
`YJ"td3
3@'@{KFe:'Y#q_Q
^T"_z*
V#Sd:?rc
b{kZK<
NPcBsP
70eJ5X~{O-4J
$e([47t$
] >g2j
_p's;4*iG?mJNX
Td2Y9TN:v
z:lxXq
xj3eJ<IJ
9C_/W4m?+M<V"zJ
76(SY:
AG%%sO|;dm
$)8heVA
\dmY&0
NiG0[\s
]*}6K>j`g
^0t$DB;`6>l?-v%E$N U-tf
y-"'Z:
O,W6C'hF3|
{s5k){
)dh2]+
D .b[1fV
3>|X`NZdQF;?%>cWh,.9
}"P38*fO
ZeY,7JB
vt;vwHT
l (_\CV?
Xt%W,p
aHAkf,#
* !s2`WUmR
6j|f[gk)h
$G{!6y}g
b"7S#NaLr
Lv$9^
9.u2; zZS
_rtNCfa
$brI~u@2(q}')H
ZDFenI
`mZRj;
Bz:%E}
7n}@49
p,6Tl6eje
U2KWD^4
V!grHg
$`t|F6z:
: %kh<F}WAcTvcQg
0HiA<k`<rdp}G!j
p,.-ZE]
a3<_bw]&
qH\zn!x
*Mj=gK$U?/[j)
dKLot>GP_K9I2V
>H#T^=V9?ki
PbPhX
Cs" uuQ6+$K`t
gDvM\~
.MM[RMRG[~i;g
qUsVPEd/
r;zfk"Ye
K~#$18-q
M12;-
0)}P"N'T*NR-
$-vog|
,5Gvd#
8d`bl)!
!5{y9/-b
UCbPK1>bx
r2fh1q
FEg[8<#
~KW7%e19IN
^@|?7u!
H9IQl_N4
7s:R7NL,KS
,&Y '`E
$7lp5G9
aWJfJwp
_-yJ5tw
p'L*qpQ
6,K@|[l6Y
K]^|7R0=
l\fS6QIjdnr0!qQqHSW
K%LycGu
RK^f@{
TW7fKD
@]Z"-?
4gu[3u[vT$~
n:{gNMh
)W+M S
5'U.+_:k
.5?/ BA=.2M
3-+:cv[[M
f~@07i%v
S,dxnQJ
:\,P@Ccst
KQ-wzN#}vC
JmsxP1MX"b%
%iSmOU
vfuUt}^
+wtp(f]
pM@=p)&
~S1%%aQdV
)vbM,D
F;gB7}jy|T
MfybNS)i[H<+w
Dov)XE
4Od4,`[oc]b
TU#,-Z
]NO|j&
$Tjms_'h=4
'BTzL&].
l.5yX}VzpJeg
,ndn{%
IeE-Ibfe
D"=XCvbf4>m/x7}y8>
< fX1?k=79q
BMA^{LRG
N }~l;
],PfO_:c
qhM}`\
Y5q:+=
kB`k+}e
Thn"WN
E o`J$.
$pAOFtG
0Cp{@GW
#sVh"3'aq
(y?+r}d8$2
QriL~@
r#oE:SI%y(g@{
_s]7[G
v4f.XO
K`!A%
rz2L1!(E
r!Qp]iIx
fu.,[%RShFp66
#G/#W
4|f8\|5T?>b$X8
qDRcJ&DV
1C4 O;[K@
gWS=O.dctf+
\K#H#n veo
dJH5vY}&85%V
W~3 L'7G@(t
[NWaeK
#M8>hyt)[5
Q4kco!fOMta
<5BpDh=
b:rKi)6DZ,_+
3sNZ2@,a}S
xNqz1eF!BG
QlQX-Ee
d^X[
;g|I[V
=->X%J
/)|*qI8
*o@0nt
4#_NIP
(R;Lx 
NZJ8qLU
9(0L,?3
'9Yt;W|LW
QqX9.8Q
{g#y9a:
;oGP1'-U:6gnpL:
t#/4Qw3
& 6HycW
nM'e7A
)jdhiIYo&
|3ih#^
@D}`;i-
o.6QpQmPE% cZlZu
70o/7B
<D?](UwtcrU "
{F8V/dVED'*
><Bck9
o4ju~vkK|
lwK'15|Wx
Ep4x8L _p
?F}OG_=
G!FK8=
a0I$@7oY_yiKM
op.TNL$/*/'b>f
s!$m!9P[`
{1.UM;
sAm-qLa6
=`|mgl
W,,RoI
x*Qx/4
^zCo;X
E%yU|r
_VC dy.8HH]
 %d$pZ
HSW59CB
:,kC1?5A4m}
SH=N- , l
`$,">:
[!%!;+]z~
I_G{qf
?fCQgn@,9;d=
,/z/buX
}C)P')
FAc$t{)0Y{"(i
uLD|obeV
{|b]"d
|%-g2H
UC,[<qal
Y?d*||B
4\;;2$"
2[4zu;O2|
WDbj\u@\ib[t
*^vIs4}%N$
DKUdj*6
..<NRi
P&-'_z
ItN=\s
|?xCBP
H\gd96
'yaJEO"AAN
)!9<Bg
^+h7Cfw<G
7/HQ U&Rd
eLNUOa
[b,_K8
d~R#Frk6U6n
X"nH^|-<Tl71
EX>mA,rb>Kou9$G?0I
bDAm|O]
bi%w )7R'+!w
2%&Lc~
(#Cp$d
@~=ADZP}IF}KBD
FBD!%Q:Z<z
+x&h!W
HM&AgSQQ_^
 AO!}w
lOm-eH&wkc
'?0?F2
@uGyJ:=bHw*0;:F5161s
X[+@O]b
|!g9UKgD|?
x (Pbv 
jDiI6.&c8&
llz 0f7}Ooiv
?vR{98
qId\Jq4dg
*22\tJ
@&)k<-
nKKi2OT1
c4aQ_SG?KDV&f3
~y;cis
lODtUw%{CZ:Gl/<fk[tXIRG6oI
)>WTsRT
R{xT^`
6+i/+u~S
0dzshrOxut
_a[5P
OV]VM+H>
_~_9ElI?FmL
G`MvBIS
Q!w{yLQ*~
=d:GO9
a_9(cl3
v#C{}nD8
gY66@S
&\XJ$I
~FeEY#
RDL:_p
6E"2P9l
l|9[W 
K@AnZ~
:tRr|\'
l&{_~F_9P40;x. ;w5zC'
txgI'0
,"!<`jrQ
g|3J$.
r1H.dZ7sg
A>teG~
q~^|)^A@ <
,j_<ui K}nRQF{;f!En-?
[89M;4&
V^*R(nk
h;uVR(2 Cm
2kobW"
L}e^iD
NHip$e
A|E7TGy7B@';@V
lb{FNmMC
+zT58O
OBt"`]9
{B2=Kx
VD%#!byC
iq`61R
gq~caF
{R8E`>]b
b9#dI+
?_BwtT
4>\q6-
)`f.K+
|a\V(,)
!?g&!+g
Y=Ip2:
;swl/;1)jVEm]q]
6v/G|2i
trO:mZ@-
gCgtd%b},
5S,GP=9
Hg)W:;o[+
#lP`KW
KYqfin
[/lq4cM
+bqyt;t
ipdl^djIx
>WN*ra
cal7K-s-
dX/$9 
Hs%y\b
yR=@2Q
3ECUWV
!!$yzx
&W5II*@
Q^i ?h*
IK$if7;~(>
M*:wVY
~$^,EZJD.
/P|{j${w
3o2^,zZ+\M
R{<TN% sWbZXz
5.U2KcqGs%
E&W2V%SKf$XOa IL
SpSkZ`
Bt|q$|-
Cd{tts
rO<75s/P
U9z8Y@k/6&<
=q"$xB
(y&fK`
V|x[VT
HRKCLkR
t__C>eT%E
BPZAc+{
ixF:47Zr
S;>^`j
Qrt"CIh`
bxXQDJL
w&E4]#
q2txp[6O^
\.qd!#
1O[,x9e0
v@!#{Nf@@
:=d,=2Z
C d)3E
nGJctwdG
fu&X-o
q"<=HP,
]->Srljz/r
U<E5L\
q3Oul1z
PB1uaH
O6l{VC
h}Gjm
w$/t:TI1Q!=
,<+p4M_D
$]SGkNq
*&Bkd/E5Y
2T|gwP7H
_v?flM\`
CxuN;,Dsm
wuEPo[8
0+%.!r
b,]B4<SAW4[M
dHv9o+
z]7B5L
7bS`_&
T0kxeY
jQ=/i
n|?EWkal|m,?
.MqiiCk.
%=.).pxa2J
zZei3@6MSts9:Gb#
A%H>pI0
IF,fyN+T\
vWBFrn
[o*$;yt
UC[e~O
$ H|."
[N;bZ8:7;'9Rpl
8"no'C>Jc
k0k[[zm+fP%
*Z XS,
K9wD7|lY3sj
GiwMN-J< c
<BPck9
l^Nz>v
!2)3Ep
6h_ZG/)m2a4w
RY[6I'Zv*75"
g-Qt+] 
i_*=_9kT
=YwvArX,tra
V>)4UYD?fE\t^y
ySJ>P5
u;*q!f>
;&&iQ$P/
uE9"w\
S@XVhS6
D";xO4u6cs
gvhF;0
Fu'm5o
|"+'kM
r@\h1m
Iro}HB
xe0tE}i
lf5Pu^2gw3,+
Fh@xn/(0Sc>]Jb%
5gH6T'
!n*{P!
[%eViJI'
U,=3c(
,T^AC`#v
sEx<>1;
tQRp^33gxGgXE
u'"N$Z51saJ%GwPVw
=^E00B
c{(T`a$
zPHb;4]
3-|QtLo>
3Q!rB{6gHKa
mSL}_Uz]
$ H\c0b<
BJJ-;+'
{2.Zdnz>T"
d]O!oT|D
|:roazX'[sfm4y
7LraH]j
dZt@'$2
Mz*M&{-Q]
8.J^7Gp!rL
S{eNgi[@
LCd'bg6#
{<:y&q
DI>nip
C*ShlAP7
+ockvpMY
aFu3nc
boV>!MyD>N
xBIO$fc=?&<W
X.b|2zUi{gG#lih!jP7]9j
33es#Lzy
Ac-YUEIA+YdeQNmw'
iA|8RtY#
+d!JS?
J0}UR
@8je9D<W
6r,&$l
[9}*UV<mXt08iP
DPGP?HrTrD
M{UouM
g!t]4{
vl+^LW^Yk
K66-Q\$J&vZ
A\#N2!
6{>=64
tBO\~|o/vjVSh8(#MnXVT1\
ATc@G:kg
:b'|vhtv&|
WRG1`v/
0KrFTSuU4
tM2u#vd.:ljGza N
T>5,BD
SJz'"6#
M.c\'"fG
!n+m1b,
y7LtB~s
RdVCQa"YmVVk
XZebx8
oIFv4d(TaX
"T:T. 286DV<VPBDJHVhNhbTV\ZJ
fLn5Q8x@.p\'~\?
@QgS6dXA
"-}"!Y;G_Y(&
H0JA=4dWZqr$04Bl
rC,-0fYG
e$9 Ff
m1&pLZDb_Ge
[ar6!j
gIi@|2
b`-bc'z
18>0?vHfjJf
hq<q%!?
Er}Ey\
c6mQTf
F%vU+R
,sOj=k
H)%~ji\
Me>nosj:+$1F&+%H^/
#qVEf(+k+*m!
[%G4d~Q>
lq-JWe
P]M[=7(e
S&s?'/
7q#7!QS[
%'c-jZq_-q
Mi_jtW
W~`v|Fx}
g56~^Q
&i]/F\[C
v=kT:[2oQ
=@DA+W~|)G>
>>:v!r2M$
MF<w:l}I
?Cx*rg,K~TM
=>#$h\
whVB=B
3&%._N5
E..if,hr
'h2c<1
%=1{~DvY
a=#IDU
$aQ*|'.D
Z=hylltY
F9fKL#
`f:]sa%n
d]NV>Cs7B0
_Vwt8z
^:5#tL
%Ej^@%TC
_2ugrW-l
6:MUiL{c})PW
 5|4;28r?*2l<eY
k4E/Tf
FOXj[R
U})vly]
`KPStqG?NrFXhOr
#BLxn.*
`m64J{
C&f&r:
2 {.LXg>
ROt;{rC:H6v_-
k=/4OzK
KUE*EFMTZ
p(O!&1,Gi88$+
P? cQc
^qh7HM
&pL+B*26
Jw3TI|X1
dke!\eS@os
|1,Z5E'L:6
8;JdHm
v;"^c==
>GO$=!&
/vPR;0:
,LwA7'
Q^P_{pw!mG9
LaUKzK
z.~t7w
.6.,?B
N$AMjN]\ GCa6
8!C0$4ELj^
v1w'Sg
0xI:uf#V
u6Pr,;\~L
cE'UiCB
ox/+t[
>T.:x7
F.m q3X
D)-_rL8$P>r42
aF,lF,
 =nky12
E0s'u{3eu
k?$J;=L{
qB>f5Y
?hswN-gS
kernel32.dll
user32.dll
GetModuleHandleA
MessageBoxA
uhPD;ywpY}&l>
i.BI{7<#v(nH"P
Z9Z<"sens\~
L==Qp*d[0
\;+Lw~sC~
tbjxNZ(
Mr![jm6O~2 
6PI& $NZb~
bqdrRZ7
A=nMkx7.
zF&&Lfos@~
hcdxXU
Z7%Pj~e
|:=yho6F?^d`c=Q
>}I! Rcbb
<^!ubnO
F4-Vj+
t-H30"
Gggfv@
&vvggd
wwgbvt
1wwwr"gf@
1wwwr"vv@
wr""gf@
wr""&f@
ww"w""@
1wr'""@
3333;31
333333
sp`x`laE
jrYVK\~NA8XvC
W}vy_jmx
LL@GGNv
8Y>cPH
^.~_T@\|p
1qx0zi
-i7g~jw
.9'n#\{?
?" wBQ
?hD^v[Q
a{Hjev
jC?UQ67
lIb9oa
M'Jg%|
76r@q"-t,MiX
 4LWN1D-N
$@-*{
>3uwZ6H7W
OzOXr4V|7i?Q
5';+FV
3jNqz2(X'!
_i0oT>`"SbXm
#vocUdi
@FS,_-*
:--KWrw
Ku'{q}L
)ye(Y)bVt
|qxf+0
K'(6*sq,*n
$cc6];A
Xw76>#w|
BoH^,_
u/?2~(
4ja74JLf:hT[H=/TZ
pu{,0CU:
 p.9t"u\6x5vq
gTG(1@T[i/3
&>*[j:<G_1H%M
)x-e9|
?)6sUtP;n
rPfh/3Au
hx_iyd
WzfFIp]8s.`
/Ie8B}?}>F zCN"VCS
7YQ(GP
=14e('3p
EV[/k*u
6)2t=%
-]`F`E
u&oLz^:
FXozq^
Qt>aP"Sm8Du)uli99d
H4f>Mb
mfAL=F
n+8?J`S
0nM"W5Xz
^/SZoqM
:m*OsP
kZX2f.
<Oj@O.
@^;7"<hCX
G=^9FE
I;'l+r7
UeEfi,
K9yo1N.|.
\zZ)1V
;%\}y"4^
*XfP&[PN5
u&`1"hA%'
3~wpNb@
ElYrxsBgCQ0
Iw5Nya5
MO92mw
`#IW,W
eEa+Ge!
]<tHRU+%
Wk>0R]$<{
%@GaTmbD%fpJ'f9A}kH
B?R;b@
:jm/N%o?
D~:=h*
M_;Q@2Gg
%!A$s=;
l:njD,Wcp
mq{W\ZGeaA_
3Gu-}?By
6{bw=I-
h[><Sodf
W]{=Bg4
XH}|5lz
V41l4{
'1%mj6
vr_=k9
I|knTT@OF@}(h0}Y/9s
vQ4%>$R
!/AxdGYD
dU9|CJoW=
 -FsrK
Ry+fq|sLZrVW^B
z4Rye .
%G~<vyKr{%-Z-;
rca2l&
q&uam@G7?LI</
Y$m%)DiPxb
>qA"Q)Y=
2h""5uKD#.I}UN*K
B/Bb'dM
be'!l_!
u@~(Dm4]FPTr
I7p,{i)05T`H^l8,^
oSjnnw^
*NDjOad
Xw]h5L`5|T#0
,s_9xJQ
>x%A%2J"Wt
vLS9CE,
u~.ko0
l*);gT6
[jd.n +J
2II;&,[OTG
np &.o
HBs#5E
B)d^pK=Vom
 *1ke9;h
qlY:y'Yu
3nP!r^^
,3Hdi2
JYdF5V~BNr
4n{Xck
tv{g=
~()Y99.&
J/8{bQ
E0P. 3Ib
Qn3?t1h
/H6$wY
-|m.FpnBk3u
k~_f.iE
)n.j"z
7Hdu{*
d'"[A.
P)9Q\_cRY
Uh'':@xmd]?x
\i-p%
Fs3`)(
Gqs3gEN?cLv
 Ssd"4
>3+F<bj
B c[p)
}dF(fS.L3ES
DYK)IQ6P
MFvmO.yN
S71?,h
ncp\ih^>p$F
@s5V%'
*|~B<(:@7
!H.a<O
MO=[Em-g>/b
b!]Wep
x$Sc+A2xpT/S
<b}f58
W#Ym!0
9gq?Dz~'DSpf{x)
`iz2u]npu
PSC0O@`
cT`$&hU`?pG$@
3Mw2j-
QjmYYsS
:Se{'TFt,pc
{V4b]Q
MkjpEv
-zyfwCmI
b<"=RbD`
1S_LmXN
WUD{-^>
|x3CJ9
Zf"WsN%vN
.DPDy<vE6
f0L R]+
&iSfpe\
UplJr>
?m_HPZ>BxK
m41u\<
@fhu*CH^cJv
i"LB0s]"YzF%d Ho')R
7jWib#
OI!/F|
U9#feQ;^x!
p?r2+jX_
"IYQr]+o
`|+-i@V!N&l=V
Q+ C6c~z4
-j1$bp#
$?EGsl-cG[
)'u^i'&I
A|:P?`c
TC>'9unGO\7lx?v
!h.;-x?KwA
xTPmc\68
'iY<{-C7e?&
xPQpY*$%
|86-bC5Q
]>?2ZKK
PePY}j
HUC%b`-
G|r/:uoC,
sCGhyAaC?W
3M^ $UzI
d&JEbO^
dbLhX|G
{a<YAwAP7u
3%vjUR`}^
.=<"A\W8Lmoq
uS6YIEg>
0#!*2dt?8%l&
H~Tjm{5-
6OB*[-n
>7y5Cf6|B
/_?f{`
#W[*Z{U
Jq{MxZF/Z
&I>b*m:="I!
+t{!1#qJVWj
?0r4@DnQW
XVIy}fdW
nH!GGq
J_`grE)ASG
B7 \0KkY
-:zVx<Qa
,<Rmv_.s
jl_=@>
\Zf6KBA6/R
7Axnz=v8
-w2wE3S(
8_dqj07yF-
@pXD*W68
ezPX:"
Lq;8TLgG
vMQJN\
`?AC:U
i?_XF(
[ao5jhL
rdHZ-Z7 
@i$aw0
Bj^.(X
Qb8;e!I^Jb'
2~MW5bk6\)
?<kIdZ
:-*7n )u[a^.3
*?Be.[4f
RcJw("jXY1
0|tfx#0K
Hul4Ce
RS5WpHSqATF[
Y.1`?F"
<K^Tr==)PMKkz
>d#w2`#m
'}Zwal
>;FD@1l
g\!,]V
jhA&,~
H8k%t5:
et!Og$
\mVdNXH
mV)$Ny
"6T9:U C=%@_
+\,,,{Ni<
dVjcGHEo
50-^$zPmRf
.x|:qe"JIbe^*iPd/jp\=
YAS.}Ve+Kf$
u{uYVt)P4
#1ISxCN
Je1DvPa]|
_(T5+g
\}M($T
EC jq8
%NW`wx.
AU_^lSi_b
2.5'`od
s>q 4ck
)g?P4uDR.Xn
-Yt>IA
:i4av/
g627Q|*N.Uf#
KZQk P]oC0M
:GIC6;y^
Z5RJ*Lb7
U5qiZ0lZ
jMI~b:n
Hc*~;Emz
<0$OdN
o?8=bN
ii2Jc(s
j[&Ga3
2/FcIiN
hm9j$3BA+
\jq5c4
]N"CTkp~Vxk
4M.UTR
;gs27>GpkPQz
1U9WR>[`8,
VHxU%4
)^+J+@
bP}F(Y
vU-H!T
q4`b_Z
.LU&rbl
!Vi#+AQ&w
YZ?s:;(v~*
%lKNF8
L@EL~*7w
34e-\z-L|@O
)=,\?&W
K3_^"@u-;M!!w=*N
Q30#%I+?{
][bE'rv{2d0H)=]?Z9
Ev/wshZ
AafcLhy[w+rV5
T5Hyg`O!Od
K">/)@a2*<~2k6Q
YR?|IE~
y?KPIz
DCYF2/0CG:dP|92p[
12.5cSZP}?5
Dm_R5-Wl!Kz=q=[
wo M11&w
jK?M`N^`vx
Q(7#Y`
v0=hBTPZ .m^pZYn
qu|C0X
Hge>qW79'
@ gWrN^}8ly
4$^%4p
N"H@'&
dun5Nu
elXTB%
4J=0=
m3S]oz_
FH#%xSK
NPfC6x,'^{/z'
~jT$4N
,t!<6W
"w+SD*SJ03P
r^v:rY{H9}
u(2k_z
2s_Kvzr0z
:]x &t
1alsa?G>
<V5?]NxN
8|(yd[
>9r?_Sv_{Q;
8\R6D7h
4lUn<tE]Qz"k
uqJBoe
v#C4u.9vR
@l}t%f!
GHIn}Pl
mUzGng
?-c@<>
b^@m{N
+S1`Ev
OxfD^C
]eyeJW>'p
H>zs@jR~Xq
O;e<22
X@kRwP.
e8wq4ZkRXuzl
N}J:JNn"
;x!vMZgX]NO
SZih=-y2J%
9^Wj\7*1/d
j'ZU!)E],1j
Kfpr,\
}lNfd
cA5`*j0
6:sW(sM
sqTtgGsRHs
2MyF<:
LKPxn&t
, mVCb"f&
D 'T u1:4\
pdH^C'z)
IN-xxUM5CTm(p
+gprqh)
Qd4~]T'W<
u~>u[h4=
$(\TNb
i:Lv38
b2)mt [U
Q19L9_
7!OAww
msF[p-
.OhXC*2Em
"?|:f"
8J]THtm
KAh3`WfoG
+g?sY!; uZ
{1/AVh3$#V17E
#;(yFi
%hXDlPCt
9_6UXV2
$\oWoJ?j
&.|]-W_q
lfl-)W
/EIubY{
o%dhZlht}
!OI'I@"gr<}
Jw6YE/Y?[&Yf
?@&Q ?h5
G~zm/3S0x 
%{yW,6
mKI0Ek?
v)UG2'e
1>=VF;
ZP=%5vyZt
rbL^~Q
DU1h4@s
r)Mog\og3Xe
@d-!+:
uGCR+>
fY_N<krO
@UrVa;#@`
eP')n;
L#"jg<*f$
,8k=zy|<[o
#&u0pT>
_yDsP~@?S=,
KYY#-Cz/8R^h
?=vvez
70:q)yo/%k{~ube?PeAq/
9+F{qFWTmm
/UACi>np
+=~'U_0K
XxGYW8@
8z3>~G
zhe(<[:
Uyp/$*
4eU10B,
!Ct<&#57A
=#_<]-4
W;/&1;
01[bcfc<
,]Ax$jZ
d[Y5(#
5-&oGY7\ld>1* 7
MZ2hjG6O~dO*
25,NWi
b&W$in-Z&
l1#K1d
`v-*0UF6o-6T?
V}~]`u
ka+e)<}__Jn|mx
0[YX!Fj6{
$y|Yco
xC^ 8,
|WfYz<"dcL
$5SZU)P~R+wZO
J}kA2.N4
Mo"5^WC
Nz/Jyil~
G'/\y-
\R#.YF$>
h^;>IjVQH5tsPk&c
I)0a8==a>6~ i
>zW3Qb~
|'{*P9<-=l3MciS8L
~<1{ltU
:6%0Qc7c<tp
a0 kEk
V"v2T@p, mnP^;9O
pNW`]i%z08\
Yqd,u
KEpRy&t:
bJG.I
_L20\^
4X}t074
f-C2]H&
Nh6bWh
4# <;guM
~iVe$OL
F';n&.
a-M5DIQn/x<zlf
)mk>H][kK
fBCbtI4,o?YJ7
!Czp]DzTy0lxryAPB='Q8G.
,IBO}$M
@S"Rx@
-(%/b~LZI?
8<hwk_U
}Bm^0V
T1h[6/
]@tvar
1bD<0rY
;Vj#(Dca
O_pvfUo_l
z{d]@9r
]p5kb89j0
7SS}%:Qd(B
)A"VB3"
| F*>L
Kh~oiE:
X#D_Nt9G
1uS'C%6
;Rm[_b
3F?Y+@
.ih RWzO
.)/F:h
4R(FKPy 
pU**m|!B=z
x%71hH
&31tn]7gs`7
-wd5^ '
5;~[BV
u:SUXJ
2AI-#J
|\N%MNqIi8
Pq9MLd)(%Q2
S_bUq"ESP
Qx)?s[MA61~
aZ7Cg64swZJNi(O+
(3#j'e\
cU$0iz';k5yx!G
u.$=/@3zQ
c*Ijc~
A"5{i;&B
{S^{Q~
gLA"!A
\K!zsJ
g=bq\?
{T!;?d`4
Sv @~YY.+
q50y)YB[-
hXM9oL~lW
e^$57'
,x3pQ)Go
WH,Ft26
!s?e8UY2
l}:So5
[eop6'
$ra}UJ
FOHK,2hx
P*;b]J8
`^Rdq:
Z]pEhg^8V>u2L~
g$LN0Vx%s)YE
D. _Zo&&
jd19q'p
{[Z/\:
ltohl~
24qN/uPX
y)8?-VA<4(ez@$gd|
sF9SJG,c
o6!i${D
v9(I96n(
ThT+A7
RNNlT[
P-Pi.u?
*%ZyuOotKP
AV':MK
Y%CCc9NV:
My)n%AQWRz8\D
+W,"Rih3bS
SD*}Xx
^9E)2w
&E.Tyy
W0-9?>?u}Mm
[5iN*J=nc$<~SxX
j#;xpW(a0SPj
/z&xT$
&lfUD!}
 `Cw7{
6]+Cb#
Tw&N7 Z
PO}2cG
JX {>Y"
sg(j>/;{h5Cl|GhA#iRE
9/or81n5
J!N9`?/#C
vT*7q.}P2li
U>~9&cO
1f9ljCU;5`^^+U)
HTO+oZQ@(
]>Bh@o4
dwv_qjh
tmqI/
i%Lu3M
8W;nHS!n;W3,i=I"?:5q
7RA"o
&R(!m/e
@,]Jfuoe
,o>C.%_
1[HQUm
'S9iC6y
:5\bO
B3*:IQ"
e{,@vdnf
Yk=(|h
BbMbSLE
/&bk@t&iR
qRUIv4N Aj
[4KFa(-Eh0Q
3+vUTL
t)<vp<`>p
Lnc&E,&
y~UnNFHl1Nq
bchaUBU
>rMKi*;
T(uaP<
:rcPD3
&rvXH$_|y2L*#4J
v#w{%OlE6l
eic\u<(
qNS{X*
/?%<>NEh[kB8
|lwr"G^K
:0)yI2-m
jb-xOE
qs|T8
Zj2l"V#Ut5u
"':cBEl
muP~7}
3'Q,CK!b
Qk@]?\!r^vi\
qvr*;H
:/kw*,
#[YP'afC{Mato<!O
R.PLb2z
\gi<)m
y/z&'f#A[
9{]`6JV
!&I(IoX
:28h:i Uc+;:
ud$p:}
2KL=@l[d
x!n?[;#wS)
v@CZ^#NZY|O>D8wK
7iwYad
6z7~Qv1Y
RLCoS,{
d%5*!ZMfzc8
z`InEv
jfB:_D|h
ldJ~IZ+
MB.i6HzfF
zZt4Z1$X
<T0d|~
[i"2%;7-i9
JysGPS
[)wN&y]
I#dme94
E,1GrIMo
a/Aa\}spFj
XQsF]H
UM#1Q)
xem*OSe_s
G$/l."
[fW\la1W
^n+l_//$
|lk{,puPa0
Ie=}bE
*h`n0$}W{lm
.J22+I
o5=QtD
CvQ;n[i!.h
wpdpsUF
+!0uB"FG}7F
b2%b^&QJ<([
zg<*'iaJ<
yj?+}xv3/|
L)I&{N
+fM|KKPN
dR&FVqw
Gj49?!+0KpFR'O>s0o~]}UE
>purwkK)vV
>w`qXXU
-_H657Do
ikvk*S
&;1}x&FBB
tPC<Z_b8
_6nF5>
q\dJAj4dcr:P7X-Pcj
$60R\k
}[DlXb
40!;8Iu
!(5DwW
s0Y&ik
7Udz_N
b/+,qpt;`
AMEQ/h
.w*L5FV='
;/1>*n*GX=yV1
8#>'3q%,
.YNb|*-x}
a/%{3vT(R^0
S@2B/z
v?>MdY
pF+c\%
#ur{@1D/
A+1{5.
"Y,Kd:g
<=O2#UJ
!1jo({6c(xAqs~(9 kjH:%
%TapR`UL
YY/)9z5~uN{+
vldiPR 
:K.8'I<4y
fa?9eE=9ym
j'VCvx(EKPi
bF{9;:][-3a2'i1C
:tiM"63!RVs$DR=CQ/O
C5h`W)dQkv
k',{(6GK[7+
G%FpLK
sB:"$um
:D1t-M
Gh!KTnZ
\Mg-"qC-ek#1
zX);EcIT
3_jysYoh_p3e
$-Ker 
q}W2tW[s
sMAtXs4
ex#wD8E:i)}&'
 09~~
]fLOFO
`zS1.;9t!'?f
fo4},p>WU38gQ?
8JmjH$vX|t#QN
Ag9-S:
IPG0%y
|JP,eN<
.?}bA:h
Yz5LK.:
v}Nh2B
gn^M)~e
/`o1N}-
[W$tZ\+
Ad2R:g0GEa4qsh
7wgV]3q
 2! M8
1ctz@[
ObDsW:Jb
Z?\Ig1fA
_%4SuIWC
sY[A*n#8-?Y
?4w48`In1e&
Curlr6
}@/2.|2k)BAaab
Tv&Ey>p
 =!b:5s
c*kMgx0P>e
gFv<!_5y*koF
h@@~!1Qx"
vi^1={TrAm%
EPE<\Km,#P>;@
~9m:;<8m
,HZ^,Z.NHQb
+Qi}sZMrjeH`
8hV>^0xI}
 }1bIZF?0\?__Zi
3q+K0Y
Qt>M_`ld+
L$|!Cy>
KJQ0gV%
Ro=]DO+a8Z
j`7=jYX
tL&Fu9K~nPw
'H+[Bk&{&
$=Ldb[+
rh<:'8x
dOUEZA
.(:vnd3>` d<a
z~=Q]vF)
@.>PJLSmpo
B\>uI5&(~
6L`S3gL
j]lVOh
dX-r$\~[ON@
OAXyXGU@$)P
Cb5mcM
5."%qPL
AK:e|+l
ZT\\@[i0ab;hY}
- 4;oh
CO;YU\"2
7+/!B3j
?ooUyKs
:5)0TG}Z8B
0vQ_2=
D'Mp3fs>
pDVx`K@U@|Rm
k>NgN{k2P8#
Z?:W$4
CaKEJ;G
*toMX5
.3%H]A
~zHF>{o!N
5S_nT>d
va\g5Q}
C7/Cm
|Qw=_p8=
&e.pap<
a&JzjZ
$tkTK~<p8!y
2Hlznt
y{:WJY
3ZW$pU9
D;nxA1z
rpU4oUT
})JzHv
WQam;P
e>o3jF
f4KJy%C,4h
HOWhUTs
]c.&YD
#PC`'H8E
&&xaLlam7V;9a2%m$GA
VbBDAe}:#y9~TUI>!r/,CiCIzc<h*g^}y'
0?9Ph2
[6(l$-R
j&Ki22r(
`YnZZ-+
pkhx)TYz
j1mJm4
O>C%/U
SXA(OAr9
Fk7Gr.#
rkg;y5
LcSgU@
S7rMU/
M0}wC6#=46
,&F:Z`Bk
iDW] ^
kjts%1NF
k#*|'p$%
 aGsD3g#xe,Xj#
."ohg7B
Yy1no/crc?MdC
A$f;d"
ft}]a4#
gAeZ}k@
K}"D%BNH
7;gO;!6{L:
'#TIrN<p
#u#y?I
&]AO"'|$g8
Q$bM5X[?
>1t*#@&
eWSb_L
pvxCtu
n)xiSL>
75|qpa&(
tfj<<EU`[_
twaa-}u7k
S-%YDD'
e'O9OFnCSK
U!C60VIJI
C-.Y~}qN0"
\t=j='5
^xT;fLnj# 
Y%jWQ6j
<S6+|rT
1(@5*D
T>"Jpo*&1O
.Sg_cQ75"Oe11
=Jxm:pejM
0e}wMMiz
mXJLLbs%'5:
9)*^Re
7ctav_
[m.,/fG
\P@j[%;Z|E
ETOi;~`Pxj
mUrB1,@
y8,Z%OD/j!WSRoXm)8?'
1?'$Vw4
N1~,D?
`ccJTw
T%SCp(MLxZ.
&}n%.vV
v.1)L~
)NCR#!T;V~Srq~r
(iry|t
^o,%3
Dt+7Dw4BPVl$bkx>
LEkKHW
$Ry6u_w
)+Yq\o4q@l2r
8XY>&&2Z8
BS^"gXpP
.y;O;~
4O6.YK
XYlF88v
.(Lq,$
~`S9(v
b8WiE^
|FCTe(
`+(Mwf
{-u3uHT'J
b7[S)|
:-7[o~
ULI^eQr
XDLm4e5JVu,
1g/zx}6 Bj
*)sm:i
in{+D4.Z!>F1W j<
@kIj!/;{
!i1H;_`l
|!Zf}Co
&!KNbA@y7r$
H]6p!)l
IG+,IFB
6o)nFO[
\A{JJxDj3ML
FuMlUk^
B\e{F&eUX
 Oz=z0
f.(J)#&oc
]:XgUk
$WVpfB2w\
S5[`"0GXR=
86$'~]x*
2NsF(.bdO|bZ6
7X6(I
T@g[bm.M"xInhcfL
WH5*"=
z~lcy&O3]BVx
j*MsIoD;:44
MIWn#f^Tg>G
F;'WB26V-
Bn6d>A7
8`DY.
hq%4<<1
02<W&)oq\
j%v=Wmv4R3u
|%BSs/
UHWz^3
|I=*i;
7=hdhUb$Bq@n*
)K mj.^QycGD (
VIWY0g
US\nVh]
IG)uo%=KgKC>
F*p>iI?V(twWt
9ha2)[
,Oah"h8v4;)
"8FcBM{-,m_n,
uXc#F0%
u$5IY|b.
xT',-6W
%_eMAQ\VoY
 [&*}qp
oe-re.U!y=
l8pdmiw
OXs&H_U,
}YY#`)$
bdz}7Qn
*qu&.Xv
R>jyFJE\
q_F4',
fA*9}PzMfI
o8jwwx!Z(0
t^Y,+`_f&
sL4/kz
|_:~7\o
fnx}/VJ>db?N
Q$|)1=
{zo^za^E
vZ42{l
o{aTswFc[^g
%hL8DPV`HE
7O+,A72z>k~9
-dg\bN_[=|g
nYjLKw?!a`Vm
C%k_F|
2YD'#e9F^Ur)D[k%I
+&7&^"aYqS>
lGJ>!$I8)P
Z=,<K*rW;
x2c\"59Rb
{n{6u9qCBF[h7
f9k-n!h
{br@Z6I)v
~Po2hT/m
7Y{,Os0OCXD0A
plThiI8xO@
YUB2W.no6];mu
G8]!+7
22H2&]
Tyw >!
)>y^upB{:6=IxBQl
7#nd";
 w9x_kV
<Q2[{#(
X7^.\oL
VFk@S(6g@x-
3sb\?5rwpMq
RA=e`&Y
rjoI*4s
^P:N7FB!u^+lJB~
pKpf[pu
k(Z iI.TQ p
%V$cc9b4-[QuT[9
swT=16|
z[uO~[Xy;
v~AVIMN}
h]mT\>=
S'Y3(|
sfhKX-
X2:v)5
gU RdW;iD$
bX&%DA0s
./E$>Z
$qO=JOa
 <vqTT3fC
F`,\]Tkcl
g1Ha~x3I`]db9
nyl)iM/M
gzk,n:B+(
WWtVPS\]j
SRLP&3
@w]3M<t(Y:+
K-?t;,
Ll$z zr
t) n1{@A
v~x=le8
jbZ5/0
I`On\*=aJe
%Y2?CxJQ
vMT6^u
'Nes{~
BPC ++.qh
_42{I0NLH^1h@Q9(EaW!U~
YHz0Ck.yq9]
/):9-o
wEXx9'fL*"~
B?Vh\j
Fu-q+XjC
 A76po|
uT('XbW<@T9
|SZ<3f#
cZ\j>kCTgQ
Mz.m'1
)Excg#"XRat
PT}oSL.B
]*/my>
^pp_=42@k?'2
>ViyB
YN.(!l2_
W^gclV
`I!;t<jJ
$+OPVk5uNBi,:XnQ
h~Z+dW/
BI^K8WH
<-m;#$N.u
mWyYPA(j
MH@%. fZ
0@fV`Q
%|$9d=Bl
u]KtlLu
WjUAm^@PLPe
t+8C+&
5T)'8+s
y\5V??Wi
*DuKYba$`7
35RV`%0L4
t1vGVR
^b'Rv:Y{{
A3#G/<;1
5@=1A?
_Z@j2q
_j"u8(
eDJ$~]*X?ZG83jdo`P,\
V5X^]{\5Hr
VS-$1XsbN
T|1/1S
R&<M: q+0
N|#qO@Z#o>
LgFjBG`z
qo9tu@3o
YT3T2/
bbiu7t
ALmv8&-QAT
ovyg2nV:I
=9r]qC;
3brQ"[ 4a
g`s>8.x]*
vZnZ2/}i=HS
M#t<R#aq
4Ck{!N
y__CQl>
O^} RG
]aS] @
s.zXI
#d_XV.@
3Az|,>OB^YAV
=Qrk1LO b\$
/JwC?QUR_d
,W.sDGm
^r^aKL
&a,ac=%)
f&$Xpf8g
=>W.|aF'aZYnB8
-4w@-p.xMjM43_
hT^Ld()D
-D=H84"#
^,+3:.d
O=FYIYb
%)\QP=r5
L?oi(iJQxc
g~#5fEwq
(FoE)sg?h^
99z-,/
?RP9#x
[I8Sa30J
a|8\U1
iHX<(L3
$u;VY7Y
yqQP|lO
@}[$dY:<6
qT[OS>
K d\_F>_94=&v`R
YdL1r#t .U;4
c|#y@+
sCC<2SJz
f3,\^T\>cK~
$;Jzj@,p
YK-A5Uk
=:m(VF
[FgEz;*#U2
'qL(7Y
_,#@oj
we7^afhQg$
?!u.ocYlyaJ
1n_q%g:F
w:cW`X
Zh^mnW
k0jl()
1UJamy@'x
97Zk)>
H`n&+qO~(
$-G.p!n
h$[}MrG
)O\]}-
4[L?L+&>4mA(
~ZxFnt
Kn=&RuS
_d'gv8?Z
!6q0-
d66X*|
 (/Vtd
=4c8_ib
%av1vU
E:5qm~FI
T@[>+W
3E,vpz;
_d#X20H{zaE
's*.XZ
SqInG7~ W_8(^<2@C
ARtOzn
+I-(3~C{R+,
u\.0h{T;YM`}
[<nRc1sj
o4z?6*wOi
!K7]A62t
cu<R,0 Fnx
-6y<U.5
VI)[w4&*
w!Zro
2o2UVK??"C!'J&m4n4
:YW$GV`
Vcd!RA'r<
(w#Vw)&Iw:
L\!-#a
>8}BwG.!
.bvhn^\m
^nmhPr
LosAZRn_^_"NwdN
"#Y?<@Z
$&u#2l
)&pg4&~
k9PJZX
^W*;?%W
+[.-SXS[N*4;
HYgR6J\
i`%"{:TRL_kG
;u?8mz@
{-:/z5Dtj
_<0/q,
2c#K.U4qNg
[k?6|w
`aO|Nd
7=yc/5Gaq>L
}pGWDA\
rz] F+
]ZgNQ79c
g\I+vz~6
j=&_?Z:2C
.;+bK 
YZ%[q)92
Ih9z5L
Hr'_%K
JOr1h
y#OOBa+
(@\ 5#S;OA
6]YHJx@r>@
NS@yHURd4
16kPVEa
)U< [a?QwHX
h8(6_=$
sm</ D
ck8{?[/H
,l!`P$ey&?]ORW:V5^|=s\Co*
'WlU!n &m1
Gav5TX*J4R#2A$+2j
l$|~|FQ
YU^.c2oxa
CZhh0$AU:
O)~r'1`(
ZeX*=
Z%"!?!
{#BI/:c
y[tCBpfau_^#5'
8oZ@Wz[k5}ve|c
$2ki:U
tgS2V>&W
WQ7RW$5$Y
@}AoEuKN]daDTM
Rf9ZJ2dJ
x&2<Rqw&
u"-AUA)D8f70ef$
R$B&E B
|-69-k
|^9:R[lm'
Cx(^5*u
,RZ_|_
sthj g
&KF+Rp!RBK
l+r|K4\ dQm
*pncl
''s<|m
>R.hxF<H9y
@-Qm9'
{zh6Onz
I`K}vjm>of+ck)M
9nxIv<($Tf
t\y]]4Fs;bMF?K
]u-=`h?dh.
iY COA
t:#L`y}
Ju2m0H7^
wP$8gn`#>
$^o<{?
td(bHSz
pbelwa
*' *$#orDv
HrxSRnB
`0<Z?8O^
1 N!( ocb'lmm3m
D?!)
?R^y-6,`"TX}m
;Z~ d*a
_8#"df&nq>p
?G;Kt3
}T#"@9"
9~Nm4z/n
)H:{ KWtY:9
{J*y5qwhuxsWe(uZOL3eM
>\w~zw
9jbcH4p
X5;R.=
_]@V}Vy`
4Yc#TF!
Z^l9S*
:;QuB4) 
~;.oS83
8l%y<'
"M\"(055$IySgc
g`zn$U
mJzKN>s
j/0R*p
!wK=Cq{6^uD
Q8G!+C
&ky=@MUJN
dvkE>[
9cnf)F
e6`[NZ
MHHoK?"#
;a'g[#}
V MzrGR
z_Q*Z#
{Kq><l%!\
\{3b\+:?
>i_"t/
T**NU<S
'I8B".Vr
P6'il4U#Y{S;A4V
+n2p^1z
FOl]*bg
 /evd2XX(C4
pO"ixCaN
crL{sTt6Hn
gvar|IZD
/OYMo6}ps,o2@8@S8
B=5z6UE
KQNk)*n?QjB99
k%q>w>5J(THG48O%9hVQ'1
$T;M;J:
2"!$$B
jY.Vtu
f29TfqaTM
staqg|
ISuTF/7
$cg-?wIrOZCuY
Ow58$2
ykw2R!m)^+
[%aSft$#bet5dVZGnP
6,<S2}?
-8;2D PV
+B'|HU
GqV"Im^I\r1M
#*yqnn
"5N+QIr4
['ibNV&0
C&s?'n
$1%<)kl=C
(y/]S]'
[EDXxG
th>U5&mJ
F0?{&WU
4<Ev?R!/
y@#ZS*ENy"35}
(Nl\1H
SP7`17(ENWmTl0l|>
<z}aW!np}BAVM
k#EOi]nR
VIc%ZTyU[5
*J?-x{kR
/1b.7&f\
*[<_tP@dI
_pyVY3=dR
>g#2i"
4zc32b2ZlH\
g4=^8j,#9y8G
L'9P*I
QDDDhQoK3gl(
6){r[%f/.
e9,a}e
u5+<:hu
H5U:V=|vT|8
|Q#'{c
3Pj5)-ZO'Z
EtII@$
|5XB|L
L4:($@/O
/ITig(
UHembU
k{aU>0-oJ
jkx,leO$+:_
8Rq#jz
Pl'xo_
<e{"9#]
GVq*' 
q]":)Q
ztH,P0lm7c
>`=z/R
8rw7fn
A_XCpvV~
%ptQBH.
=lD-dq;B
`YHwK8
-THp{{`
_^'6yL?
9<L7%9#
Ys,B's
ijANdD
Z<y9l#^
8X;*Vs
?F)|u(4
:gDUFE
))@nR:3iy/,Ew
t~?JO6P-(RJ
lP}Us"}h
5?l0!`}m
%Xh.50!i
d>/>7vK2Fu
t:|t6SY
JIIbst,
|-kR3Dd
ys~U1&&T@I}\
UVF=cy
&+>o?|G
LFdFKT
[ua:&xTv
^+#2hIP
Xg4{`O
zU:7@_dX|<HG
ljPz\}7Gpa0I\
GAm}N!X}]9B
vd8qR*
R&sT&!>AJ
&:Mcpi9P_YKsGKll
w>"INa
YLF|xb
8G1QQ2mBm(JFW,*
i%'X4KM"#
;C$(HayS-oz
j13.|!
+j~5'2IK*Uf6S9
f8aRYfLy
08&ZR3
SkNz7#4|KD]nq7/g
Wxi6Fw`Co>
s8apxnYGf
{{VA}d
w&&IXIL
:!80 1]g'l
7gl)n."&p('
oJu-nxpu
}t;cjW}
 2?bx v
5=s;&b%
EATS6(
T}o3kB+
Y0W=cE
48-cLLNzDH
[/ZQG`
vmn(lb
sAo>Z5
jJ|2IS
IqQ.6VfjS4
!2aKPr
G_`PB$O`OY
5}AG9]4
;aZ?":XQJ
G]@KNac
8eu([4PJy5
7%$B+B
E2=>#R
H<X+M5U_<c
Ao1T S?hyD8$'NJ>'L
_0'pqExQL
p*a(U:Vx
IbyP qIlc;F/:[
I`$.bEj
;1?x':n>vcrbW!W$3
3=D^gNU
}!O$":
g^G}RaMk
Sv,e(C
~tx9$?X
pl6I20",cY7@
zM0.mL'e7&>]
#E1e-'|{o#Q\
-O?6nK
."7IP09
Qg=z09DvO]"Ur
YkICd/C
K#*P$<Mw-
!aM&{k
~Vn9+.
!=Gaxc@s}
oN+5n1
;w6T0|`\/U8l
\)PBPkLzy}_
\c @yEi
f+8*C5szpDJq
~&o)q
b`TWbeC
'yJ%36$
j^pNe9R
y%$~Y?"mO
'?~bb(
wHnE]?dH[
JL)._UZ
;E2yXi
P_D{Ua
aCDB8PH&C
cm.*ect|
Mh}D>+
KEYP=FCF
6e]K=]7nK\e
-/aQ)@>Y
s!":ce]@`%+B-3Hw;
vVOIjHaMUO
viRVJHY
TE4?!
uc">&}xC
oV}geu
((CClc6
~cl:K3bd
9t+C{/
}B.]NIO2PVC~HaI
a%hmL'Ug,5
_QyPiF
q(gx?<
>Fstdz
L#Ny,}
[B-v-TK$
+ s1;!
Ui.pY>q6c
d4ej&
y&_V592Y]D
l ci3L
^a\&z>7Ur
L`iPMPXFd
v:6c$<#q
@{5LTk
r$(+z34@Q{
@~O.N@H
/6IC%KQ%+:
-!E6)T!
Xw&\bn`?
^&%\b-wi6Evb;vn
pmwM~*b}$(7f
RZ#N7p
g#1P5U
v'wlV=:
P=;D"m~V$KsVAY
Y?hg-YCL`$\DT
x .+j(
(r.5Lg
C@,|*
]pJSnep@
MV~q`e
xtbLiev?q*
ZJ_H>R >f
>kg<{~
`Ej|6eacP
<%p#_\R
_xMN`p_
XX)h#H} 
Y2Wcqd]
o\g%jL\.R
=&saZGm"q
"v[=(E
DAv\V@hvvqb`p
"/9yQr
bEe-;jRN
$GW?qI)O
pxK)mJ
f,O^V\?:
Uhaw^oB
%hFChc
D:WVQoPl
T,TkK|t
K=P9:q9IilH-
>5XT-Niv#AO
k}:TMP
<QnVbW
vh9*%I#|
/dpf4n%
s-C.@g
u9U*c|p
']FOt]do
mIIJ{QGrk
5].r)[tM
]"uT_I
{h+|q*5
,WN9Tq
ik2%uw } E`:iR7Qh
,4=o#\
Qp?\V>
goACO!?f/An T
2oya,6|(`+z
@l(Pxm]GAqj
oBG )i
=|nk58
GM/ :T4hQy
iX.V:w^/
|Y#.v%=&H{xckh!
_~F57T<m
^Bk22U3W
?</ZH$
Gp3<Un`,#
y&^O<gY
zOcpu5nA?Bh
P$Zc@%
mss//L
&Bqw]_[
0x{xzQ
%Uu3!b
PL1E^$Y~
n+ds?vI?i
 02\Y~<>8Ak
2YH<<K+mWA
{y-TO\mb
9/6m08
hi=V{,Fn1
\/P2AbBz
0XTR9l
]zl0k2Fh
c/Ifu6\{wu
K~iT`'
\NU_}-r
q8V1nb1g&!k
Hl[msA7{
E?.2A^
_$twXe!
&i8jE'a#
=/bY}~
5vvlzw
'84^Q$
o::C@gG
7srG&1
WIRJwW`
%OU`N49tam<U#bHy
C9p9 G
]Q8Yt\XS<#{
j`0uv|,
vEk\Z4
Vs4!6tz 
;F|[=J
w6kX]|O
^N:dK;
&um\o'62
:)WAl.
BZC!<=P.O=Q6k
\_kE1&K-
e4.e7@t
MvC|HP^qp~O
q-GgXn
kpsxm/?<
=BDD:(R
;>tf83sj
g?c,4K
Ne2U<+Xq
xBhntU
/Gw.J//
151%iv'^p
T({P.0t.@<'r=
,ZaCFv%
5|NL#C
ee17qH%4*x
2+x^Y`
H+w` ?
q)]<n(uWzt
eW5i]A^o7?E@C:L
:!D<3tla
}ra!cr)qhiS
`<04v`
Uq-m;`I
y#5,v4y'SGVE
nHf]9Ot!
xHQK/8
nvx.sax
6ci5W@
~d'm{s
wTg\BD
|$T}E,"6zR5q6
qzM?k
1A:)'PZ
]<&G&Z-
( F=2W
Si`V9P0c
Nhw,3[Bw0_
]9Yd_X@eZ
iTK`4vmN
-uJr@$&*CN
]J7c/4iJ
s<6UM9o1-Uc)?k
+g~c><hI
}H5Y$ p9d@"o
/'CTLD{
4k[m&!oHkR
R>nY|Y
TYf!2":
3J"**rY&E
Bpd7q_:0TS
fYk;.~O
wcbBm;B
/UHx4a/X-,3A+
:')/PK
 1RN|^"M
At; vSu
lIH*|T(
A"xI9>8
`}=8_)>P=`
nY4waz+
1fA|9f
1/Ed7yfn
vBKXMZx&wM
-r\+}X
n}jywLmW~3M9_
k+J3rf:1
2ub=wrR
zWha)W5n
v/i'@|NC$i#I,8 e
LE-Dxn
\p3;Ym P
X[&B+rDs2
!<+]'oy%`F4r
4\U7&46
rCC`3D0
og@v]l
c*%ah
\I/]jJ
Z$2SXT|
#b1zd31
UfYV{$
B`<h%E
gQ-ar43c#@+u
N28p0)Vb
]O|)=z#
FK;TE_
cKwv78%:./ba7
sN'[[m
38qt!/
:&_Wo
E9Df+3
T$=_y_5
Tj|f=pc
v/)Nsz' CZvC<EF
s6Jml|
9$LlR^i<"
g:,Nb=T
7by<7_
Q0"=Cm\j_4{''vc*Y#
}wvUuwD"Oxdj*jU`@M^k
4'n9y.=te 
+8H"\3,ga<I"OX
hB)VxTY
Gc?wk=
+B70!1
DYQSqq0
jwWUER
REp`SC
Ib05<1
T'@<z^&t
=>Y&ho
;ZH'pb
lXqQ;d
=%UZ0I
8e#~l,b_#2
o2{*un
u~^tW1W4E
"g@Xb/
fJi6&lVrDn""|$i.kfv
VS>Y,{S
5tP;i&l``
"aG}hf"R
Eskr/|
7%?gt3^;
$/(nYEjb:e
GHzt^^ei
7'$N::
IV`YDBE42'
LX>y@w
nQL*)q<XoB5eF
nFT7)0
#eqf\/}rs>
dJ\Nk*t
=7}nBJC[
n`YvSiq\8
yFQ%$;>~n
$Q_>zV%;ca
=h5w[_C$b
)*DQB];S~
ikuA4A
\$'<A4as
c;2<>T_
DSj4h"
ce5_'$W}g*0
>!&ay,'p<jV&*0*]1
$$;d*_
qZs*8t
 UW. E
j}BQAa[tz1sy@pDG&
S4XBl-(g`
|C2cv^p
h|y^C)
y6PkvS
"?Cizm
IBiswsHhD
RQY:aJ6j
sgQA9] ,
SylR}?
{p~Z:x%
{uZ"93s7Skg6z0hJhT";
}F%o3Z17h.
KDYeiYZ
Af;OTCH
|w"rVE
BiE^4gMoM;
nV#<]\
rt BQpt
=f|KkJ/
7LDRxVZm(C"
_!*$?3B
Lab[>tR
zFL-o"&&;=_
]3s:aaDx_
Jc_Aj;V&
F 7*i~{P
b!./r~l
RjbMn0Md-?"Z
EJbRi#`HHF
fnX7f?O_[b
{Htt(c@FrG
Mawv&_5E%
^eX{=bu#%kB]bK7J
Pk%rW`7
'P~2r^f6A
\QncN0I|
Fm*]x<3
q,>NPwvw
v4W(,+n,v_
lg^}gKY
{J&9>~
(AM[O|i
"!nfq-
T7cVqV
.XZs8g
e&>#aN
kJ;Ei&7k(
!T1L=v
VRK0cW=g6_5
$dnfPw
9-/,u,+
Yu"?;w
kP6^oiZ\
$g0P!yZm
8N}GYE[
5%L)iI<u
':}r$TP~^x.Ns
5zW3N]G
6uA#0{
X=:w6P{kv
MUK=w_
B"8R|t
k5RFTrJ_
Qe7 CIL0@w
HnX+p8$\
+u{+5_N?#:
r=+lBi
#=N<\Oh
ks_;6#
CH-<(\q/mH=\PBu*3u-
94~D3,2M
5<!(evQ)m.87Yt^y
1LO:3x
x:vNw-k
1sPDH0
$[xvN7 Xy
%gyr>D
fP.BN0
NoQg[:P7NNx
K^Q{k_ }g?S{h
Bd/&i(0~
tQI,oL
^@wP?7b
6)tLV2
W=ii:y
L!.wcPc
\d5;p[N
}0=U*Y
 |2c2.
L0{y>)z
l&u~DTEM
X#']e|
^[1S8h
5KrhW|
tOtf@P;D
*cCe>0
@*=4<Sy
"@~(_(#w
 arrSqsx%
7KNc:e
{Y/uC\
W^XZz1
T*^|L [A.ChZM3& \,
}*qjv"
}bl^_We/N
?P9|c7cnQ
gr[+RgL
j~WYP#<
N'VhYA1"
{ce6=Jk
P(h,P|><B>if
'.j5m^
`f>0T-
6O7u <
N8e.`6
73TEjp+
V":w[GI
)[:0QAR9;\>9
=Q<Vl1lP7
]nZOD 
sX_K~S
AD&1'2hY,P>m
<S"5rfM3q
XjFbqEZz
;0<} w:VHn]m
=^>f'_w
+,wr.P8U#
?kQv!}Q6i
bj'^/:QlYX
IXJ}AChk4|
{x&}9BBV1Af
nm8DOP5o3r}!;
by[?D/
nXbMEJ
eMc)22'HT>B~'`
rJyes0z7O.y5<6
[*A1d}4
p0#wY%
u^#>qL
5&S. DK
2%_Q_6
5iKCbi
]ln$/+6
;/<;eyQwaJd
EI"o7]"
9p#=gSq
<*fXBDs#
41</f
=IzVC|*J;
>DGVAF
D\O}Ww(}q
#%4@(pP
9Gk-e[,|T
0[n+ql
]M9Q$To!!A@Jlw^^uQ
x41Rnu,~v>
K!EV/$!jXiO
unah|1y
hf-X#
(0X\ha~s:XofzR
wNv:y/hRt
Pb.O B
;gG'4L1|2/;
y\#]7$F1w]M
r|$qK025E FC3
UDV^*)w
U!-VUQ
A@\imJ
i%8oaL
 *AL=8YB5
^q+,(}"
#<z=W<1~5
m/ohjnZWjo1~
Rhn;,&^O3r
o~#(k=
Q[8qewD3bB>O
hvno/\
=~z;8tuV3#IH21VT8
A^#3E`6
T|sw\:
Y}7]/#9
@rUv_!d
%eYtnTv!U
X].SM28o5
r~Z<@ 2q
b>+ lr
Jq2O1O'{<!{fwik:<R_rq)Rt
~PxCBG7[a
TR)9v.S
P)M'(U
_iRR77j
\jLh,JAq?#6
QfGvl>mPei
RM[hWn
dN 6J4%X
-D~='y
N_4p+%tY- Bk
y>Z']>_Z57
mMBNxT
prSn",K
Y!|r?[Xe
)JSYn:
q|*P,r
P]Y~WvB
NF;p;K,
.kY#9>1KGs
$dMmt05
XZR[.G
mL(@m< 
01nd]A_a~
X<kqJT7J
/H6!p^~P
Ca5zd}49z~
"?wG@~g;?,j_
Cas;C&#
1lt^y~MJKYq>n
2aBm~KcAfgmI"X
'n-+-%v
"!l.!t2/
[e^b@"0US?>ICI8
,gcW8pU
9. Nm$1N
u.GAgjp/T!6Cga
&M@Gob~vK
 .##L/u
47,8*!
mWc *S
;\Ua 'jUf^
q6>S7j
GftbD.
:>Ihs=U
SuH.~
1Q~9fY<
nDC2j$z/
""R{S
]2l_,?8l$9@;
9*}_*>y
&23Oin4\
_;)JE:@9
5y/tDhW[s`\xYe,:
Fj'wW6
Y9ZBz[
{ts0]ANV
|b3cBV2ET/of
*21kRJ
r{[~ef>?V3
9g, D0
~9VQusGg?T,
O6 GD3o
/9PhE;V^
]0MDKA
%`g,av@
v{*=}l#+pI}J
f_?Z*Z5~o#X
t[}yHH
fD8!w~BL
4P9T\x
 C3}i*bV)
z@Mt/HmVC\
5)2"KyxV3O-
ED }G%
t|0aT:
qeTo gj
zzaE&X6M
.t?U4z
F>.<W]<7=v+
2ge9prY
8szy/pU+
WgtD%kwn
Nqm3\3|eA
`3WNh#V_
)@n*QSv
LR2K/A
bq!>vn
T>5B4%m
j[B"iks3#e
{F!m7|o
:|I6p{#0Y
.L&e=WRyF
SaV(E/(Z
d;3ifgAc
D/6SY71vA|
:Y"#Hi0qYs<e5
,aV#PS
17_G!%
"4R#DKWwpoH
0gtEad Z~\
x$<8aj
lvCW%g?y.f:vOeiK_5biL=i]
MUk)"Ucari2
KdkM:d>
.wuV^BuqFvC<
~8Z@kN
[i^$|89
Y}f|8s
2s4U(iOy
?$MTvwr8tz"Y~^z;JL`^
_$LYUJf
<U.a](W'ZJQ
!&GN"U
*fsbd8
dbX"B$
ViJr"k
;5'ZZ_
^sS95#x
>n,ZvN
f'ZnMyl
ph8B2h -qsI*$$HGT
=w:5++
,#3rL!
}#a{.f2@p.f
V+|?&KdX
ss%VgH3
OP?\B7"vBW
0fsG:83V8G63=at\5rC
"W,(l'
& g?{JQLk
1Vqc")d
$HX`D}f
O[FuR;xbO
p\=S4p
5y?Qtz@
E[iq_~y
F.,_'1#e
sFq zx2
eE6zXe
9g&7IZ
U:jTHCPh
B2X<cAhM|
[{,"LYT@<OxYTs
WT25ldKY^/
1p#Am*pO.
zDvP(lje
%#8/y=?
~WZ7:_Pq<
}m.ZN~n
TDMbN&z D4
<)2:ps5
e_}?B~
6ep#6L=|05/
}?DnBSG}g>:B
QUmm-Dl
wT,YC*Y
m=8-2F8Q
'9>Vi:8
ZNaF-w$z
Z]YD]6
/6KC<##9t
@3lp:y
"a7^>~&>GoluuH}`V
q,}^AW
9&jQ^x(T:
J*$t,,
@,GcYBixFl
Qkbqx"
"WEf27b
,w4jgX
1s&A.O
8k1E4E
9>g-Q{%
Lzz;{@(l?zr-
b;Mpue{-tbP~W
+*C[hnuvX
@1+"1V<
=a8bLphP#
DVCLAL
PACKAGEINFO
MAINICON

Process Tree

0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe (1784) "C:\Users\Administrator\AppData\Local\Temp\0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe"

Search
0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe (1784)

0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe, PID: 1784, Parent PID: 2264

default registry file network process services synchronisation iexplore office pdf

Hosts

IP
114.114.114.114

DNS

Name	Response	Post-Analysis Lookup
dns.msftncsi.com	A 131.107.255.255	131.107.255.255
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1	131.107.255.255

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	53179	224.0.0.252	5355
192.168.56.101	49642	224.0.0.252	5355
192.168.56.101	137	192.168.56.255	137
192.168.56.101	61714	114.114.114.114	53
192.168.56.101	56933	114.114.114.114	53
192.168.56.101	138	192.168.56.255	138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name	7875ddce5a9fb8bf_half-life 2_codes.exe
Filepath	C:\Windows\win32dc\Half-Life 2_codes.exe
Size	142.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`30b95b05af5a3c9e7abe79b025cb6c8b`
SHA1	`8275307235e6b9a77f82eaf5a9b39a3c9f6f7c47`
SHA256	`7875ddce5a9fb8bff1ebe66f99f801b3340bc66903b0de8aab0b9e24c85af258`
CRC32	`F8B521C4`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	b06c92c0501d678e_daoc(cdfix).exe
Filepath	C:\Windows\win32dc\DAoC(cdfix).exe
Size	143.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`fcef7156286ce96fa571936cde159033`
SHA1	`2dc06cfe665b12ecef7aa3b95edca8bb04a12643`
SHA256	`b06c92c0501d678e4760bf23339a7539eef4169b1fbf641434fd60bac81c947a`
CRC32	`5D774930`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	278403d9f7994a34_flatout(cdfix).exe
Filepath	C:\Windows\win32dc\FlatOut(cdfix).exe
Size	142.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f7888b641512b1db6c0864e5cde0d197`
SHA1	`ee41792e1d681783ab9efdea90a580afcb83241c`
SHA256	`278403d9f7994a34af30087d8073178dba47c2cd08e90d2bd656fd7c8f1f527c`
CRC32	`46E98DBB`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	8b54b38a083668e6_quake3 + codes.exe
Filepath	C:\Windows\win32dc\Quake3 + codes.exe
Size	141.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`a9b3f3e19fe3e48d201b9b3818675516`
SHA1	`643c2b46cc6c9c517e95002b769d6d8bae23b541`
SHA256	`8b54b38a083668e6a54344e526f0d7e747794f8df11964cdade7dea771f8292e`
CRC32	`8D6B9E97`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	54e1f5781cc3a628_silent hill 4_crack.exe
Filepath	C:\Windows\win32dc\Silent Hill 4_crack.exe
Size	140.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7ad4295c599e56caea874633c89e8529`
SHA1	`e564c1db92c5df12d176db13172f860816c5eb4a`
SHA256	`54e1f5781cc3a6286d4991fc7ada0ab7f894e70f05cb268e1ac017a9ed314c82`
CRC32	`6169723D`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	5ac09f9d15cffcf8_counter-strike(crack).exe
Filepath	C:\Windows\win32dc\Counter-Strike(crack).exe
Size	144.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`75f93441ee90f2754fbfffa3ad651364`
SHA1	`945242cf4de8dce7a1fdd59d21e80d5f0ba7d113`
SHA256	`5ac09f9d15cffcf887b9be94e82d462bb2be665cf630c7c7f80bfd499a236c0b`
CRC32	`734CFFF0`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	bbe414b32fd1e010_daoc + codes.exe
Filepath	C:\Windows\win32dc\DAoC + codes.exe
Size	144.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`80b5742299fceb2d71e296aa3c2f061a`
SHA1	`b8a40db7a32dc6c96ebc04452e8687cfa0ddb0f0`
SHA256	`bbe414b32fd1e010f992e84f66fbd17305eadba4518a171bb157ec03f5ae0f23`
CRC32	`E1294662`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	987f840c7ef6d4da_half-life 2_nocd.exe
Filepath	C:\Windows\win32dc\Half-Life 2_nocd.exe
Size	140.5KB
Processes	1784 (0866a92d1e6fbcf04245f7bf69b29cb119e129ae5d11d96b07cdce6c5850b6eb.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7f5feb30e0be739f89ab1cbb03bf02db`
SHA1	`2d11beb6e3da5fc9db9c205cc913987d0e4455a5`
SHA256	`987f840c7ef6d4da8617e9bcfb4ee20da9363856c4100f6c0da20e58997cf66b`
CRC32	`4106F78E`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Sorry! No dropped buffers.