2.8
中危
49 个模型检测该样本为恶意！
重新分析
更多

0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695

0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe

分析耗时

133s

最近分析

375天前

文件大小

275.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM SYMMI
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.90
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:MalwareX-gen [Trj] 20200829 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200829 2013.8.14.323
McAfee Packed-FJB!FF01EA04B177 20200829 6.0.6.653
Tencent Trojan.Win32.Kryptik.gify 20200829 1.0.0.1
静态指标
检查进程是否被调试器调试 (33 个事件)
Time & API Arguments Status Return Repeated
1727545346.35875
IsDebuggerPresent
failed 0 0
1727545349.95275
IsDebuggerPresent
failed 0 0
1727545353.49975
IsDebuggerPresent
failed 0 0
1727545357.04675
IsDebuggerPresent
failed 0 0
1727545360.60875
IsDebuggerPresent
failed 0 0
1727545364.14075
IsDebuggerPresent
failed 0 0
1727545367.39075
IsDebuggerPresent
failed 0 0
1727545370.93675
IsDebuggerPresent
failed 0 0
1727545374.46875
IsDebuggerPresent
failed 0 0
1727545377.98375
IsDebuggerPresent
failed 0 0
1727545381.51575
IsDebuggerPresent
failed 0 0
1727545385.04675
IsDebuggerPresent
failed 0 0
1727545388.54675
IsDebuggerPresent
failed 0 0
1727545392.10875
IsDebuggerPresent
failed 0 0
1727545395.64075
IsDebuggerPresent
failed 0 0
1727545399.18675
IsDebuggerPresent
failed 0 0
1727545402.76575
IsDebuggerPresent
failed 0 0
1727545406.32775
IsDebuggerPresent
failed 0 0
1727545409.90575
IsDebuggerPresent
failed 0 0
1727545413.42175
IsDebuggerPresent
failed 0 0
1727545416.96875
IsDebuggerPresent
failed 0 0
1727545420.49975
IsDebuggerPresent
failed 0 0
1727545424.04675
IsDebuggerPresent
failed 0 0
1727545427.59375
IsDebuggerPresent
failed 0 0
1727545431.12475
IsDebuggerPresent
failed 0 0
1727545434.73375
IsDebuggerPresent
failed 0 0
1727545441.96875
IsDebuggerPresent
failed 0 0
1727545445.49975
IsDebuggerPresent
failed 0 0
1727545449.03075
IsDebuggerPresent
failed 0 0
1727545452.57775
IsDebuggerPresent
failed 0 0
1727545456.09375
IsDebuggerPresent
failed 0 0
1727545459.64075
IsDebuggerPresent
failed 0 0
1727545463.18675
IsDebuggerPresent
failed 0 0
观察到命令行控制台输出 (1 个事件)
Time & API Arguments Status Return Repeated
1727545346.84375
WriteConsoleA
console_handle: 0x00000007
buffer: Hello world!
success 1 0
一个或多个进程崩溃 (38 个事件)
Time & API Arguments Status Return Repeated
1727545346.84375
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130563072
registers.edx: 0
registers.ebx: 4341760
registers.esp: 21298648
registers.ebp: 21298736
registers.esi: 10
registers.edi: 10
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x9fc4 @ 0x409fc4

 success 0 0
1727545346.84375
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22489952
registers.esp: 75824112
registers.ebp: 75824156
registers.esi: 4493312
registers.edi: 22489072
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545350.39075
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545353.96875
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545357.49975
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545361.04675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545364.29675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545367.84375
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545371.37475
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545374.89075
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545376.46875
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22489952
registers.esp: 92601328
registers.ebp: 92601372
registers.esi: 4493312
registers.edi: 22489072
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545376.46875
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22489952
registers.esp: 109378544
registers.ebp: 109378588
registers.esi: 4493312
registers.edi: 22489072
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545376.46875
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22489952
registers.esp: 126417904
registers.ebp: 126417948
registers.esi: 4493312
registers.edi: 22489072
stacktrace: 
EtwGetTraceEnableFlags+0x605 RtlEqualString-0x9e ntdll+0x61d2e @ 0x775e1d2e
RtlDecodePointer+0xf7 LdrInitializeThunk-0x1d ntdll+0x39e2c @ 0x775b9e2c
LdrInitializeThunk+0x10 RtlInitializeExceptionChain-0x16 ntdll+0x39e59 @ 0x775b9e59

 success 0 0
1727545378.42175
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545381.95275
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545385.46875
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545389.01575
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545392.54675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545396.07775
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545399.65575
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545403.21875
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545406.79675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545410.34375
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545413.85875
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545417.40575
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545420.93675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545424.48375
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545428.03075
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545431.64075
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545438.87475
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545442.40575
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545443.46875
__exception__
exception.address: 0x775e1bb6
exception.instruction: cmp dword ptr [esi], 0
exception.instruction_r: 83 3e 00 0f 85 80 bf 01 00 c7 45 fc fe ff ff ff
exception.symbol: EtwGetTraceEnableFlags+0x48d RtlEqualString-0x216 ntdll+0x61bb6
exception.exception_code: 0xc0000005
registers.eax: 17
registers.ecx: 17
registers.edx: 2003312768
registers.ebx: 22489952
registers.esp: 109378900
registers.ebp: 109378944
registers.esi: 4493312
registers.edi: 22489072
stacktrace: 
RtlCharToInteger+0x52e DbgPrint-0x9a ntdll+0x7a706 @ 0x775fa706
RtlExitUserThread+0x2a RtlCleanUpTEBLangLists-0x38 ntdll+0x5d5c2 @ 0x775dd5c2
EtwGetTraceEnableFlags+0x3e0 RtlEqualString-0x2c3 ntdll+0x61b09 @ 0x775e1b09
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545445.93675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545449.48375
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545452.99975
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545456.54675
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545460.09375
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
1727545463.65575
__exception__
exception.address: 0x40eb88
exception.instruction: test ch, byte ptr [ecx + 0x8558ffff]
exception.instruction_r: 84 a9 ff ff 58 85 c0 74 43 b8 01 00 00 00 8d 55
exception.symbol: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xeb88
exception.exception_code: 0x80000003
registers.eax: 0
registers.ecx: 2130538496
registers.edx: 75824984
registers.ebx: 23359848
registers.esp: 75824800
registers.ebp: 75824888
registers.esi: 0
registers.edi: 0
stacktrace: 
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xf227 @ 0x40f227
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0x18815 @ 0x418815
0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695+0xbefe @ 0x40befe
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
行为判定
动态指标
分配可读-可写-可执行内存（通常用于自解压） (42 个事件)
Time & API Arguments Status Return Repeated
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x002e0000
region_size: 311296
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
region_size: 204800
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00401000
region_size: 143360
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00424000
region_size: 8192
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00426000
region_size: 28672
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x0042d000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00430000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.26575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00431000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545346.84375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x003d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545350.39075
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x030c0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545353.96875
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x030d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545357.49975
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x030e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545361.04675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x030f0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545364.29675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x03100000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545367.84375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04320000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545371.37475
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04330000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545374.89075
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04340000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545378.42175
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x043e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545381.95275
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x043f0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545385.46875
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04400000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545389.01575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07890000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545392.54675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078a0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545396.07775
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545399.65575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078c0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545403.21875
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545406.79675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x078f0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545410.34375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07900000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545413.85875
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07910000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545417.40575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07920000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545420.93675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07930000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545424.48375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07940000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545428.03075
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07950000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545431.64075
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07960000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545438.87475
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07970000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545442.40575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07980000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545445.93675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04390000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545449.48375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x043a0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545452.99975
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x043b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545456.54675
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x05850000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545460.09375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x05860000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
1727545463.65575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x05870000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 616
success 0 0
在文件系统上创建可执行文件 (1 个事件)
file C:\Users\Administrator\AppData\Local\Temp\0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
投放一个二进制文件并执行它 (1 个事件)
file C:\Users\Administrator\AppData\Local\Temp\0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
将可执行文件投放到用户的 AppData 文件夹 (2 个事件)
file C:\Users\Administrator\AppData\Local\Temp\0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
file C:\Users\Administrator\AppData\Local\Temp\old_0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
搜索运行中的进程，可能用于识别沙箱规避、代码注入或内存转储的进程 (5 个事件)
将原始可执行文件移动到新位置 (1 个事件)
Time & API Arguments Status Return Repeated
1727545345.655875
MoveFileWithProgressW
flags: 2
oldfilepath: C:\Users\Administrator\AppData\Local\Temp\0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
oldfilepath_r: C:\Users\Administrator\AppData\Local\Temp\0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
newfilepath: C:\Users\Administrator\AppData\Local\Temp\old_0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
newfilepath_r: C:\Users\Administrator\AppData\Local\Temp\old_0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
success 1 0
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (3 个事件)
section {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x00013e00', 'size_of_data': '0x00013e00', 'entropy': 7.1042198205503455} entropy 7.1042198205503455 description 发现高熵的节
section {'name': '.rdata', 'virtual_address': '0x00017000', 'virtual_size': '0x0002e8ec', 'size_of_data': '0x0002ea00', 'entropy': 7.9350826711106315} entropy 7.9350826711106315 description 发现高熵的节
entropy 0.9708029197080292 description 此PE文件的整体熵值较高
重复搜索未找到的进程，您可能希望在分析期间运行一个网络浏览器 (50 out of 891 个事件)
Time & API Arguments Status Return Repeated
1727545346.29675
Process32NextW
snapshot_handle: 0x000000b0
process_name: ﬨńᇘ
process_identifier: 22478848
failed 0 0
1727545346.29675
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.31175
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.31175
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.31175
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.31175
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.31175
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.32775
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.34375
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.35875
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.35875
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.35875
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.35875
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.35875
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545346.35875
Process32NextW
snapshot_handle: 0x000000b0
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.84375
Process32NextW
snapshot_handle: 0x000001ac
process_name: ﯰ҄଩
process_identifier: 22478848
failed 0 0
1727545349.84375
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.84375
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.85875
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.85875
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.85875
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.87475
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.87475
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.87475
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.87475
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.89075
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.89075
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.89075
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.89075
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.90575
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.90575
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.90575
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.92175
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.92175
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.92175
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.92175
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.93675
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
1727545349.93675
Process32NextW
snapshot_handle: 0x000001ac
process_name: 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
process_identifier: 616
failed 0 0
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
文件已被 VirusTotal 上 49 个反病毒引擎识别为恶意 (49 个事件)
ALYac Gen:Variant.Symmi.96002
APEX Malicious
AVG Win32:MalwareX-gen [Trj]
Acronis suspicious
Ad-Aware Gen:Variant.Symmi.96002
AhnLab-V3 Trojan/Win32.Inject.R237745
Antiy-AVL Trojan/Win32.Kryptik.GIFY
Arcabit Trojan.Symmi.D17702
Avast Win32:MalwareX-gen [Trj]
Avira TR/Crypt.XPACK.Gen
BitDefender Gen:Variant.Symmi.96002
BitDefenderTheta Gen:NN.ZexaF.34196.rCW@a4Uqd5o
Bkav W32.AIDetectVM.malware2
CAT-QuickHeal Trojan.Skeeyah.J1
ClamAV Win.Packed.Malwarex-9467613-0
Comodo TrojWare.Win32.Kryptik.TLS@812zm8
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.4b1776
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/S-590214d5!Eldorado
DrWeb Trojan.Packed2.41883
ESET-NOD32 a variant of Win32/Kryptik.GIRH
Elastic malicious (high confidence)
F-Secure Trojan.TR/Crypt.XPACK.Gen
FireEye Generic.mg.ff01ea04b177627f
Fortinet W32/Kryptik.GIFQ!tr
GData Gen:Variant.Symmi.96002
Ikarus Trojan-Downloader.Win32.FakeAlert
Invincea heuristic
K7AntiVirus Trojan ( 005393141 )
K7GW Trojan ( 005393141 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=81)
McAfee Packed-FJB!FF01EA04B177
MicroWorld-eScan Gen:Variant.Symmi.96002
Microsoft VirTool:Win32/CeeInject.AKZ!bit
NANO-Antivirus Trojan.Win32.Packed2.hoecfc
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM19.1.916B.Malware.Gen
Rising Trojan.Kryptik!1.B34D (CLASSIC)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Mal/Inject-GJ
Symantec ML.Attribute.HighConfidence
Tencent Trojan.Win32.Kryptik.gify
VBA32 Trojan.Tiggre
ZoneAlarm HEUR:Trojan.Win32.Generic
eGambit Unsafe.AI_Score_99%
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1970-01-01 08:00:00

PE Imphash

ef3fd1c1a81435e51fcc42212e25d2ec

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00013e00 0x00013e00 7.1042198205503455
.data 0x00015000 0x00001084 0x00001200 4.045110286148322
.rdata 0x00017000 0x0002e8ec 0x0002ea00 7.9350826711106315
.bss 0x00046000 0x000027e4 0x00000000 0.0
.CRT 0x00049000 0x0000000c 0x00000200 0.11446338125913882
.idata 0x0004a000 0x000009a5 0x00000a00 4.867120477257604
.rsrc 0x0004b000 0x00000010 0x00000200 2.8752251388944963

Imports

Library kernel32.dll:
• 0x44a1c8 GetLastError
• 0x44a1cc SetLastError
• 0x44a1d0 GetTickCount
• 0x44a1d4 ExitProcess
• 0x44a1d8 GetStartupInfoA
• 0x44a1dc GetStdHandle
• 0x44a1e0 GetCommandLineA
• 0x44a1e4 GetCurrentProcessId
• 0x44a1e8 GetCurrentThreadId
• 0x44a1ec GetCurrentProcess
• 0x44a1f0 ReadProcessMemory
• 0x44a1f4 GetModuleFileNameA
• 0x44a1f8 GetModuleHandleA
• 0x44a1fc WriteFile
• 0x44a200 ReadFile
• 0x44a204 CloseHandle
• 0x44a208 SetFilePointer
• 0x44a20c FreeLibrary
• 0x44a210 LoadLibraryA
• 0x44a214 GetProcAddress
• 0x44a218 DeleteFileW
• 0x44a21c MoveFileW
• 0x44a220 CreateFileW
• 0x44a224 GetFileAttributesW
• 0x44a228 GetConsoleMode
• 0x44a22c GetConsoleOutputCP
• 0x44a230 GetOEMCP
• 0x44a234 GetProcessHeap
• 0x44a238 HeapAlloc
• 0x44a23c HeapFree
• 0x44a240 TlsAlloc
• 0x44a244 TlsGetValue
• 0x44a248 TlsSetValue
• 0x44a24c CreateThread
• 0x44a250 ExitThread
• 0x44a254 LocalAlloc
• 0x44a258 LocalFree
• 0x44a25c Sleep
• 0x44a260 SuspendThread
• 0x44a264 ResumeThread
• 0x44a268 TerminateThread
• 0x44a26c WaitForSingleObject
• 0x44a270 SetThreadPriority
• 0x44a274 GetThreadPriority
• 0x44a278 CreateEventA
• 0x44a27c ResetEvent
• 0x44a280 SetEvent
• 0x44a298 MultiByteToWideChar
• 0x44a29c WideCharToMultiByte
• 0x44a2a0 GetACP
• 0x44a2a4 GetConsoleCP
• 0x44a2ac EnumResourceTypesA
• 0x44a2b0 EnumResourceNamesA
• 0x44a2b8 FindResourceA
• 0x44a2bc FindResourceExA
• 0x44a2c0 LoadResource
• 0x44a2c4 SizeofResource
• 0x44a2c8 LockResource
• 0x44a2cc FreeResource
• 0x44a2d4 CopyFileA
• 0x44a2d8 CreateProcessA
• 0x44a2dc GetVersionExA
• 0x44a2e0 CompareStringA
• 0x44a2e4 GetLocaleInfoA
• 0x44a2e8 EnumCalendarInfoA
• 0x44a2ec FormatMessageW
• 0x44a2f0 CompareStringW
• 0x44a2f4 TerminateProcess
• 0x44a2f8 GetThreadLocale
• 0x44a2fc SetThreadLocale
• 0x44a300 GetUserDefaultLCID
Library oleaut32.dll:
• 0x44a308 SysAllocStringLen
• 0x44a30c SysFreeString
• 0x44a310 SysReAllocStringLen
Library user32.dll:
• 0x44a318 MessageBoxA
• 0x44a31c CharUpperBuffW
• 0x44a320 CharLowerBuffW
• 0x44a324 CharUpperA
• 0x44a328 CharUpperBuffA
• 0x44a32c CharLowerA
• 0x44a330 CharLowerBuffA
• 0x44a334 GetSystemMetrics
• 0x44a338 MessageBeep
L!This program cannot be run in DOS mode.
.rdata
.idata
O_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_QzGzGzGO_GRzGzGzGO_CRzGzGzGO_ORzGzGzGO_KRzGzGzGO_WRzGzGzGO_SRzGzGzGO__RzGzGzGO_[RzGzGzGO_gRzGzGzGO_cRzGzGzGO_oRzGzGzGO_kRzGzGzGO_wRzGzGzGO_sRzGzGzGO_
RzGzGzGO_{RzGzGzGO_
RzGzGzGO_
RzGzGzGO_
RzGzGzGO_
RzGzGzGO_
RzGzGzGO_
RzGzGzGO_RzGzGzGO_
RzGzGzGO_'RzGzGzGO_#RzGzGzGO_/RzGzGzGO_+RzGzGzGO_7RzGzGzGO_3RzGzGzGO_?RzGzGzGO_;RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_RzGzGzGO_GSzGzGzGO_OSzGzGzGO_KSzGzGzGO_WSzGzGzGO__SzGzGzGO_[SzGzGzGO_gSzGzGzGO_cSzGzGzGO_oSzGzGzGO_kSzGzGzGO_wSzGzGzGO_sSzGzGzGO_
SzGzGzG}
GX*0#-=?X
G=?=?z-z-z-;?up
iGiz3zGzGzG}^9LzG
zGw?zG7GzzG}
\}z%0zG5Hu&zG=?
zGJxGX
G=/{{zG{
zzG}IzG}AzG}YzG}QzG53Xm6!3zG}^-
GX8*0=
OKzG53F`3F
dMzup
9szGzGzG}^7Gz`zGFz
z6;<Kz
;,O}O}
{={G}uzG
yG}^7Gz`zGFz
z6;<Kz
;,O}qN}
Gw?zG7GzpzG
GX:*0z
>G;?up
TF;/}=zG
HG59XNzG53F`3F
4;/}zGC
O-zG}uzG}zG}zG}zG}>G
yG}^y9/{~
nzHzGFz
{5wzGtp
GyGzGzGzG}^
GyGzGzGCzzGzGsJi53XJ
bsZ[33aXqRszG9"[u!KzD[y!ysR0>Gub
*lIC-GzHepGzGO^P:G}
LHG!yHF
;2yHG!y{
2xzGzGzGO^
OyHG{!y{HFM3;2Yyd
rszGzG-69T$zG-
GzGzG/{a3a{sYj)o
OzG+H[3@i{sYj
+;{3W];H
OzGzGzG1Gz:3
Gx{sr}
HSzGHr.O
@u(Hp.M
sqZIK92zGo!3HsQn!F:iKyi
hu(vu(vrHW&
#6u(vRH
7u8wjH_
+7u8wJH
O)Hr}p
u(jHr_
1!L3zGzGyxpF2qD
hGGpOH|
zGGHz2RC6R
6uovZHw~6S
2unrJH
R36uov
S32unr
{GjC6j
6uWvZHw~6S
2unrJH
j36uWv
S32unr
fzGGHz2b6xGb6xGRC6R
6uovZHw~6Q
2ulrJH
R36uov
Q32ulr
b6xGb6xGjC6j
6uWvZHw~6Q
2ulrJH
j36uWv
Q32ulr
3zGzGzG1Gz:3
kE0Wx{sYZIH9F82
iuWHr6M
Pya3a{zS
@S+mM F)F:9
szGzGzG3
uVuVjAIj
@[3Hi{sYZHrHrWvM.M3gYuV1!I3zGzG3cC}r9MGS
`~ p3{`"8O_
szGzG3QsO
zG8HGA
[FzG;Jv>=
0pHu'zG;
NGqVp0[5
sJ5;Jv>=
0p23CsZ~+3DBO:
z2G:l#
szGzGzG}^y
D9!9k:
2Sy`BHO
3zGzG3~)`
NHzGn79N0CHFHFn8$zG}^y
Ly~p~8x8
LzGzGzG}^y
SA4HtzG
DzG1;d7
NyjGf 3C0p9%
P[n9j438}
;'9szGzG}^up
9szGzGzG;~c3zGzGzGuk
zGszGzGzGuk
5XaGCD
3zGzGzG9zGzGzG@O$zGzG@G3zGzGzG}^
OFzHR9/y
H_G0zHe:
H_G~HeZ
0GzGUz!S(
0GWzGIz;G
z;GH`e
z;GyGzG3BG,3K7zG9
z2O4CT}~Ntp
3zG953;2sI{39
zG3zGzG
BHOzGrrGzGX
OGzGzGX
OGzGzG}^-
Lu9?{HF
1=,F}{Iz
ysu1=nA}{)Xm
@W!2zGuM{
Oyh!9zGub
}^y^wy^o{^w}{
{2G![x19
9n 3wxuy
yBS{^c^k}xlR0lF7[h
.c;>c8j
9>c9>c9
9n2=8wxuO
yhS^oup
RvV`:y
.c;>c8j
GzGzGzG}^-
|G3?98G*3y7[
$z-2(X9hyc
!3wsaz
yOzGzGzG}^-
z69,;Mz
H:3wsbz9
WsFs_{|
zGzGzGy{
9MEyi1Zy
9r~GzGzGzG}^-
JzG;3F`3F{
:~QCW%
yCzGzGzG}^9?
3zGzG=
'{31z9
GO3{r9
zGsJ{93F
GzHFCGzA`Cu18q+=8FyFu!9*3FyC_z
yCzGzG
Exr3zGzG}^-
97yaFOzG9
3Fyo8HF@;GxK.;?
9?sJ{8$$
9rrGzG;7O{v
O!2zGzGzG,Oz313Fxiu
;GxH1qCyx
szGzGzG928k
OzG=;FA
OzGzG}
Ou:u9n =G
OYO}=z
OOJOzGXY
9r~GzGzGzG}
Ou:u9n =G
OOJOzGX
9r~GzGzGzG}
MyzyH*
Ou9n =G
OUN}=z
OOJOzGXe
9rrGzG}
MyzyH*
Ou9n =G
OOJOzGX
9rrGzG,
}^y^Oy^K96c
v;>c;2C{^O{
C;>c9>c;~c{{;=CfkyA{^WC
L{^|~[xG[;>c9bO{^
9z!q^Cu
0;>c;j
vzGKzG[b
v;>c9j
vzG;>cw:CzG
W{^K{~zG{^Oyz!q^C
zGyvSyx#XC;.c9x
zn1;>c;j
vzGKzG[b
W{^K{~
zG_sIZ;3g#RJzG[
HUc{^Ky
3zGzGzG,
}^y^Oy^C9vcG~c
~;>c92C{^O{Z
~;>c;*CqzzG0
O{^Cy~
WNzGC9)3xycsI:;
zGGz3gc*
zGGz3gc
~;>c9*C
GzG{^C7~Gz
3zG}^-
O{;/{~zGyv
@;2O{;?{~zGyk
9zGy~GzF
DGzF#*
zGJzG1G"IzG
zGKzGV*;?{zGyhGzF1
zGGzF)
tGzF1&;/{zGysGzD
zGHzGV29
zGGzF3.9zGyxGzF7
HzG;?yr
\4Ht2zG;?{r
H2X=<Oy
{xyr2Td
C@E@_z
zGzGzG}^-!ys
qB1^eF
Kz9v HO!qXsQuF:qCsZr!yc
|@;GIzGC
|G5H~zG
z,0:<=wzzG
zHOsG!ys_
z,0u`-
=~E{!yj!q
h*!yh_
@;Gtb
7Gz"~
d{HNb1He!9
|2<=<Oyv}{~F?
~5r|~[xGC9|90C!3zGzG}
Os!75N
OFpq!75R
Os!75R
OGs!y%J
O^%?{5*
O_z!y5
u{zG65
OzGup*u
jG4Hu{}G
Jz!{!up
;/HzG1G252w?
Hu-zGO
G)/`;G
spZ!ys
L;?y!q
GzHO39
zG_sIZ;3g#SKzG[
HUhKzG9'y!{
X;7jky
=D{zGy
bsG2LO
2H~d7:
X9qzGtp2\O
2H:4zHop*!{e
9zG?;?9{
=?yrO1@
zG_sIZ;3g#PHzG[
HUrsX{*
@9/7Gz
L;/{f 9?
wzG;?y
49;/HzG/Hu
O}{HO~2z
L~"~[xG
{G;?{HTrx
H;?Bky
H;/sI:;
zGGz3gc
Osp{HO~ n
3zHO{{5>
O!qFO}{HO~2vu
48Ospx!yHO5B
OyXz!5F
OOyXyjez0>z!{!5J
On 3FOO;c
zG!2zGzGzG=
zH-^O)^S/^_)^Wk
!qr{G9
ZzGzGzG}
@vzGKzG[b
u3c2:xz92x
zGGz3gc
zG_sIZ;3g#VNzG[
HU@yAGz1
49?yAGz
P;7{H_H_F1;?
F:;7q{^!9
@;?H_F3;?
$"l~#05x;7{H_H_F1;?
<"ln3:;?y
D;?7?q
,8;7ay![_
@;?H_F3;?
$"D~#05x;7{H_H_F1;?
<"Dn3HO*913
4;7{H_H_F1;?
zGzG}^-
;?O9752
HOzGHOku
DHOq{aTw?
zG}xHOcg
Xu ;?6jl
=~EsX{HFh
!2zGzGzG}^-
\;?[y!{b!y!{n!y!{j!{v!y!{r!ubu
ux3Fsp{!r
HOjS9!{
p{G59;/{
Ay@-O!
0z!JzOG;7
~FspJ1:?OzG;'xy!qF
A/wuxu"!ys
zG}xHOswyr
p{Gz0u
pu ;?6jj
0zHOHOn 59;/{
p{G8$$
9rfGzGzG}^-
9?;'W;
K;?O9?6G6G
0[s!yn
HOzG!yq
9XzHOwu*!ys
~;y!y{
+y!ju29
x{G59;/{
d:/qRG
\8~V1?
3z!q^{G58<[B
zG}xHO9
T!qF:Pz9;/{
J29i;?
8z!qs{G1
zG{}`OG;/
~EspJ2:?
8z!qs{G1
zG}jHOX
9rbG}^-
97;?Kzr!7G;';q!y
u\Cu);
pdUHOi`
E@FB2GFB5G4G
OzG{{!{b
3F{!y[1
D{G;?!2zGzG}^-
zGz/z|Yz
HIzjG:*AH{syCcyj
[X-zj+Hz
zGz0b!uF
\*!uFu0u#
5Hep*HOsu&=vW{
9rvG}^-
;/Kzr"|!Iz
!zG1[v!yi
!qq{Gtp
L1N~!Iz!y~
cp8HOHONS;
xm)[kHOHOvC;/6xG58D
9rrGzGzG}^-
zG=?Ks~G
$zG[`d{G
M=z08>Z
z--5zGywuF
3Fsw{wsO
h~9w?zGsF
lzH~zG
,=;EyqC
r;ZC4=;ys
`pwZv>J
pw93Fsw{|X
uZzG}v
z23BGGz==yv
{Q=;OzG;/6xjy@yvi
}J28HFh
8n_sY{
{}J28HFh
8n_sYx8
,=8FyrC3Fs
`C8HFH
[2 8~ysY{~#
OzG;?6jjsY{8
OzG;?6jgsY{9
3w~czG6z|t
^;:~cOzGC3NS
_zFlVlVEE3~c[~{HFAC
1z_zFc2
GVcVFVFVMVoVgF3~c[8C
^9;nc}{b
~DsH"33?C
F[|3~cD
^9:~cOzG0FD
}^y^Sy^Wy^K7^_zGNzG;&c9
~19MN{^Ky
u;>cjH|
{G;>cW{^WpjG
EsH{H~={G3F
JHu{G;>cwzGzzG
c@{^Wz}0zk'zkhk"kXk*kH;
r['rWyBu
6:>c~cur?~
~~*wbGzzG
>c=~wyv
uO{^K7zG3
z3;>cG
i{^SsH{;3Fu:>c
szGzGzG-79
53=-Fyh
9r~GzGzGzG}^y
;7S{j8298zG
;?Oyf9
KJSJ1Oev
C9&c9.c96c9
a?aHMyu
C[9H_H#
[^Chkstjv
9rjGzGzGzG}^y
;7S{j8298zG
4G:[019v"G
H]Ku c7G
@zGzGzG}^y
;'WyxsHxzGXAq/{v
!h!ku9
;'O{"
f /Shk{
@zGzGyz2;7O{S=~_
!2zGzGzGzG=
z3;~c7~Fz
zG;~c;ogz!yC
zvG;~c}^C3533
szGzGzGzG,393533
3zGzG}^-39/y!{rDzG
4zGw?zGHzG=/}ezG
9zG{0y
%zG!2zGzGzGzG}^-
O9!O2gz!ys
3[}!{Z'
puG9!uk
AO!ys@;ggz!yn
4uG9!uk
W{GYAO!ys@;ggz!yh
53;:yw
53;:yv
${|Du3=~pyr
O7zG=<F;7{0
>GJzGX
@E2=~pyr
;7JzGX
>GJzGX1
9r~GzGzG}^-
@97;?O9?7GzxzGFz
O2;?JzGXI
Oz!{!y!O2gz!y
zGB`3?;?8;?{ z3
;?9;?JzGX
Oz!{!{!up
W{G^O!ys@;ggz!y
pvG53WFk
9Z>G9'{
3?;?{ z3;/{:-z!ys
3[}!{Z'
3?;?{ z3;/{2
Gz]J{0y
{G:4O2
\w?zG{
H;v{|~
3?;/{2
Xr2;?{
2;?JzGXy
LJzG;7y|p
F`3?;'{
{ G9(XYC
*013?;?{
53;?up
D{3=9Fyq{
qG;?;/AEz
H=4O5zG}]zG}UzG53Xe%
yCzG}^-
|7GzzG}
\zazG5HuazG9zG
D{65H~
sG53WFk
9Z>G9!3G
9!IzMzGyH3O29
53;:yv,
H=zup
9szGzGzG,690
9~#x#=,FyiMO!,
}^yvK53
P{G59;ncy@{X1
xs9!ub
9r>GyH
FzzG{z9!yBG
3zGzGzG,
O19rysC9
~!{^C53WFk
9Z>G9&c;ncyH{
szGzG}^-79!y
zGf}{29X
OsK2=<FysB}{3;?yn
;/yH{KO
9rrGzG,
zGsz2;>cX
O@9!y@
3[}!{Z'
.;}!ylzG{?
Gyq3Fx`
z9};>cX!
Eyi@{^e
yHOO@{y
L@yHOO
}^y^E{
9Nysyx
9E}^C!zGzG}^-79>;?OyLzG5:
53;:huF
E;?y!{
yCzGzG,
}^y^~Gz
LK53;3xNzG93FzS
x2;~cup
D{19JO0|
{^C}^O!,
{GC3FzB
zG!zGzG,
O39zGy`
O7zF\yaJOzGX
=czG!zGzGzG}
yg{vu`
OGzG75
OzGFzel
(PGu*2=G
OzG9)XU
O$N}5z
53XQ\%
ySzG}^-
Ny@Ssp{79n(;3F9n(0*{52
yGzG}^-79/yLzGFz
5Ht{G3
53;:2=?
3[}!{Z'
5}zGyq
LGz195^{l|uO
L!JOup
9szGzG,39
GzGzG53
szGzGzGzG}^-6x{
nGX9`*0P+c=79E{
OJy@IO?
zG!3zGzG,
}^y^!yg
C3BG4GS;x!{!Hu
zG9!up
W{GPO!ys@;ggz!yn
53WFkY
CAEAC;j
H{2;~c{
DL{^!yJ
z3zGzG}^9
zG7zG!3,63DGAup
szGzG}^-
LyHGz\{0
3[}!{Z'
ysy@Gz
!zGzG}^9
LDHtzG3
53;(!Z
AO9NyGzGzGzG,!ysy@FzzG{
yvukuEzGsz29UMyz
=*Ay@u
3Fy`yqAyJ5@O
OGzGzG0BGFz
zGGzGzGzG3D
>G3zGzGzG
z3zGzG#L!P
zGs^GC9"O{^{GCR>G9j
xGs^K{^!7zG
z;=<Cs
z23RFszHds@
3zGzGzG533
szGzGzGzG}^-
;';?53WFky+9Z>G9'9!{
>G!3zG}^-
LyHGzzG{0y
x{I9!up
W{G]kO!ys@;ggz!yj,
Hz9=<s
OtGzGzGzG,
}^y^Cy^
U{^C{^O
V{^C{^O
{G;~cup
D{6;>c53;:yw
^2;~c^O${^C
l{G439
;.c;xyHyq
F}x2==F!P{^O
~zGyB{^C{C9
a1;.c;h9\O
~=nF}{
szGzGzG}^-
vGXY*0z
53;:y0M`
53WFk=(9Z>G9
53;:!X
==F:==Fy
}^ywyn>Gxt
CXY}/Iz~2i
uzG!XC2
dG;~cspv[)
OC;}0y
D{2!P{SX
;~cy!Py@wzG;}
GzGzGzG,
}^yw@y^
a1;}*X=
9=Jy[;~c}^C!zGzGzGp
zHt<zG;owpz"q
>GHzGX
R0>Gub
*yrBJD
mGzQzG{J
zzG9szGzGzGzGXA
OGzGzGXQ
OGzGzG
z`:GSx
3WzzGzGzG53;:
zG{3Oyvyi
yrH|zGXPs
z23RFszHds@
;-C{XYW
|aG;?7zG%
yGzGzGzG53="sz2X
zzGyhzP;G
OY!}^-
,3BGy[O399zGya
,F}j9?{~
Xu23Oy\z
;?AyhWO\{OzG{
;?s{Ht%zGv?;/}zG{
;:Csp{3[
l_yhuX{
zGC3FyJuX
;:Csp{
lAE4G:
?YO399zGya
oG;?s{Hu
zG;?{~0
,x9;?{
;?{x;/yq
wG;/}zG
;:Csp{
cG;/{~0
,;xn8=*{H_rGyr
T{9;/{9zGK
Xu';?spr
43;?spr
PE{zG;?{;?y~
zGzGzGzG{r
zG9r~G99o0k2;{zGtp
C@E@G9
9szG}^y0qL
;zzG}^y
HzHt9zG
~GXiP*0m
;hzup
HzG=/}
(|GX@zup
yGzGzG,39
!zGzGzG99v8
JzGzGzG,
Cy3Fub
{r0p>GR24=
b{^9X1
;~c}^CGzGzG
xG9zGszGzGzGzG
0GzGzG9 9
3zGzGzG53[
`u0[xszG,
}^y^[y^_{^_{
1zG;>c;:Wy^K
v9>c[rjGz
ONzG;3F`3F{|n2;>9>c;>c9~c{^_{^
O{^_{^[yxN
{G;czGyPzU
{4^_z9czG
tzG;czG{VtrF
dtrFGy4^WzdrF
9wczGzG{4^Wz
ONzG;3F`3F{
{G;czGy4^GzdnF
{G;czG
{GGczG
{G;czGyxN
szGzGzG,
3zGHdpGzGzGszGzGzGzG
=czGszGzG,
R0>Gub
N4Wy~99%O!zGzGzG}^-69
\R0>Gub
>4HzGXUTyr*9x9
w:KzG{
w?zGKzG
C~/j31Rx
9~sw{|P(
HCUfO|H
98S!3zGzGzG{J
>G{z0;Ge0a
;*C{R0;GHizGXKz;Gq!Hiz)zG
zGzG-39?;owpz"s>G
>G7{GyB
;owpz"s>G
OR0>Gub
DJzGX5W%
yGzGzGR0>Gub
DszGzGzG,
]z(X9WB;GzGy@$
KHzGXMt{r
z2;9O{BNzG;
O{nQzGyHz
3zGR0>Gub
;owpz"s>G
;zzGDJzGXI!zGzGzG;owpz"s>G
szzGszGX
szG3GzGR
;G33GGzGR;G39 90
szG=*E
:F}xszG=*E
:F}xszG,3:y{>kfkekXkSkvk[k~k^zG
Wz9QOyvWyh
3zGzG,
}^y^Cy^
3F{~D~;vc
}^y^Oy^C}xHF{
539)y^(;
zGC3F{^H_sy
szGzGzGzG,39s5p1{3{3{3
3y2wyGz
O9NG,39sHr0zGs3
{HtzG{3{3
3y3[,(X
!zGzGzG,39sHrzGs3
{HtzG{3{3
3y3[.X
szGzGzGzG,
}^y^Cy{S;~c
OKzG;3F`3Fyhu7>c;nc
13F{[z qYr
9}+}r=Z3zGgB;GzG3zGzGzGWz|.
xG1GGz7zH|{G1GGz6z2
`Wz;GKzG3F`3F{czb
>G`sR{%j
3F{czb
;nd>G`sR{%j
zGp;ogz
zv23F{Wzv
:B;GzGQ#
;~>Gsz
{2qL`1R}
0,km2qHqRzG6_Kyr
3zGzGzG,35:3F
9zGyh1Ie#
3zGzG}^-
;?KyNysGzNJzG
9#[pzGKzG9
9rrGzGzGzG,
9;y%(yA!zGzGzG;owpz"s>G
G9hO29(XD!3,
tOzG;3F`3FsGS
szGzG;owpz"s >G
CBgzGR0>Gub
dPG;owpz"s`>G
CBgzGR0>Gub
PGszGzG,Tz
Ou`;owpz"s>G
>Gys]{J
d>Gysz;Gz.
mHzGXlu0+
mHzGXlQ+
OyBGz]zGy@A
yBGzyzGy@
z(;w7z.
XUEWz*
O}Ms*5z3
zGC3FQ
3Fc>G{
VB>GzG
LoG=czGGX1
zGzGzG,
ywy~z;Gv
Oo7z!y
R0>Gub
S9O}^OszG,
ysy@Gz$ywJzGXE
39$yryh
9szGzG}^
J{;G{;G
zqN9szGzGzGzG}
97HzG=/}@
hxG5G*
w?zG{XY
Oo'z}p
;/HzGXo
yGzGszGzGzGzGs
zY"yrHczGXa
OzGzG-39>;?Opz2;owpz"s
9>GHzGX`R0>Gub
z;owpz"q
z!zG{J
]G;owpz"q
*yrBJD
JlGzzG{J
*HzGXinR0>Gub
\G;owpz"s
zK!2zGzG9b
K}^Cyj
OpG"3G{5;
%szGzGz
OzGzGzGz5
OzGzGzGy`R;Gy!Oo
zzGzGOoozzGzGOoszzGzGOoczzGzGOoozzGzG-7;owpz"s >G
3zGzG{J
zGw9SzG7bGzzG
zGw9czGszGzGzGzG,
1X~613
OsrG5;
Cys9~*
dzGsvG
z;3zFy@WsRnc
3zGzG,3;
S{vv8zGd
[Nv8zG
@AB;Gy@%
szGzGzGzG}
z3;0K{j
9zOszGzG9*Ssj9*C{r
szGzGzG,
ycdzGuF
CyGM{v
zG!zGzGzG,
sQ?vcy{"
syr^{~
;fcc;;C} G
92WyC[x
;<OsPF
z3;<K{j
szGzGG{r
@S;0OsQx2X
OFxh!zGzG,3X
3ODynS{r
9(!}^-
@sP3'A
9<C{X8zG
yCzGzGzG}^-
O65Hu~zG3G;zGzp>Gw
X@z>G=z
Gz3;?{ G5w<OzG{@$zG
\`zGy;?
O652;?
K7GzhzGH{zGXM
9<S7rGz
\dzGyv
\dzGyr
\dzG{r
OHtdzG;?7jGz
MH|zGX
zG1981RvN29mF);?hCC9
99(;?{ 0539
9v{p<zG
1zOzHvzG;?q
U{` zG;? G
wzGz;?7j
3KyrzG;?y~BhzG7jGz90Ksz3;r
R0>Gub
9{^O{+UqKyjSy^C{^CsjG
~G43;~c
9;vc{^OyH
;8K~1;8Ky~
3zGzG,
zG1GO10GwzG5G
$>GyszzGyohzGIO
ycyHGz)Jys
9~csvG
z3;9W{v
GzGzGzG,652
9(!zGzGzG,39P>G
rG;,SyhlzGy~
3zGzGzGH
XYO{~b
zG9*K{~r
{9n;;1SygPqRHx
sjFyB;v7rGz
O!zGzGzG,
}^y^#;9OsP7;9C
^39OyN
=zzGVyv
3zGzG,
9+szG{{J
$>Gyv@sP{2=)y@}
GzGzGzG,3[`
3zG,63zGG
{(!zGzGzG,3[`
Oz)zGszGzGGzX
Oyh!zGzG;:yrv23y`[w21z 3C3zGzGzGR;Gys
3zGzGzG,
z;:yqV31z
HwXzGv>cz
|zG3ys
~|~5=9^C
{QzG{J
$>Gy^3Kyv
9~~1;nc}2GyhSv
[L|~1;.c9
CysC=z(F
98C6^O:>c=
[szHtzG;|#
w|GzzGsz29#
VyhCzG199~(x3Oocz753;|
{R;GyA!zGzG
z!q9{GH
X-DR0>Gub
$>GyhGJ
Ogzs zGG
9ysBKd
O;Gy3G
Oz;G|#
zGG4GR0>Gub
$>G1GzGbP>G
xG9}Kyh
zGwzGz!q9zGz(XA
9?;z>G1WzFz0>Gu3
9z+pP>G
Oz;G|#
fR0>Gub
z(X=l{J
O3;owpz"s>G
;zn3;owpz"s>G
#zGzGzG3GzGR
;owpz"s>G
8GzGzGOozzGzGOozzGzGOozzGzGOozzGzGOozzGzG,
yvFs8z3Oo
8bzU3G
zGR`>Gxs!
R(>Gssr
|NzG;3F`3F{
ywd`;}Ooz3;}0{~*9Y
!zGzGzG,
|NzG;3F`3F{
OozMOyhwpzLszGzGzGzG;w
s!HRzWOO
9szGzGzGzG3G
O3zGzG-3X%
O752XA
yGzGs*
O3}^;'O{
;owpz"s>G
9r~GzGzGzG}^-
Dy{2;?Ky
90O7Gz
9rvGzG9Lyh*
yGzGzG
O3zGX$
OzG}^}
zGzGzGX&
OzGzGzG
O3zGX=$
OzGXq&
OGzGzGX
OzGX-$
OzG}^-78/x
OzXyvuk
D{0}zG
zO08?%b
HrxHep_z(X
Oy@W!2zG9X'
O3zGOI
Y0zGjjrzGW
O3[^zG
{GSNzGX]
9szGzG
yGzGzGzGX
9szGqO3zGB0>GzG7
zGg^z0>GH
^z0>GHP
^z0>GHp
g_z0>GH
_zx0>GH
7_z`0>GH0
_zh0>GH
_zP0>GHp
\zX0>GH
\z@0>GH
_zH0>GH
7@z00>GH0
@z80>GH@
WAz 0>GH
wAz(0>GH
O3;owpz"s>G
9bJszG,
}^y^Cx^O{^C{OzGyGGz~/6z
13F{^C{
OzGB;G
a1;.c;x
}^K!zG
z9%Otp
yGzGzG}^y~
~G[jAzGWh
z53FW@?z53FFtk
9szG}^z
}^7Gz-=/z
9?sH2X=
1'z;1'z33Ft
[^;owpz"s>G
z!qRJG1w}zG
sRy;533F^;/7~'zz
w8CBgzGIzG[u
zGpqRzW
zG{!qzG
_s_{H|PzG3F_!zG{
9m1zG{
9mAzG{
O7Gz-G=/O
w:CBgzG{53
G;?3;?
9r~GzGzG{!
O`;Gy!zGzGzG{r
99S7jGz
3zGsjG
CR0>Gub
zzG!zGzGzG{~zAgzGW'z33Fj
zGwNjF[S{G
R0>Gub
CAgzG'Gz
>G1BGiX}
9szGzGA
UsX{3[Q!736E{M
zG!zGzG,
zG=czG!zGzGzG}^yf
OU}}53X
9szGzGzGzG{J
>G1BG0z
BsXx21
Gw9WzG7nGz;owpz"s>G
psX{;3E
[^;owpz"s>G
zGw9SzG;
6[}!{Z'
CyG9R0>Gub
z3w9C@gzGGzG{J
>G1BGk(
{G'zOszGzGzG{J
>G1BG/
q~'z2;owpz"s>G
>Gwz [
(O)gszGzG,
}^y^Cy^
rzG{^C{r
`;>c;2_{^C{j
^F.;>c"W{^C{^C
S;6c=~v{^)XY/
Syv``;-_{jAOn
;=O{jn 9~
=~Eyjg
%W!zGzG9
z39G{J
>G1BG4z
zG}#7E
c9(O)c
R0>Gub
z;owpz"s>G
R0>Gub
zHuzG;<C
G5jAgzG9HFCu9n29iN
R0>Gub
GzGzG}^-39/y
z!qzG5yF
GzjAgzG4Gz
53;:yvCB
9Z>G{!(*D
q{!{ *D
53;3{yL
O;owpz"s>G
>Gwz X
]x!3zGzG}
>G1BG\/
>G1BG\/
ywx{R0>Gub
zHuzG1
CBgzG9
R0>Gub
szGzG,
ysy~JP
GzGzGzGA
zG=czG!zGzGzGyfR0>Gub
zHu1zG;9C
G[j@gzGp
WsX{89}zG
>Gwz![M
9szGzGzGzGyfR0>Gub
zHu3zG;9C
G[j@gzGp
WsX{89=zG
>Gwz![C
zGzGzG}^-
w:CzG{J
>G1BGz
!sX{8;?{r qXyau;
R{yq{X-
R0>Gub
zGzGzG}^
N{!2zGzGzG}^-
w:CzG{J
>G1BGz
sX{2;?{r qXyau;
R{yq{X
R0>Gub
zGzGzG}^
N{!2zGzGzG{J
>G1BG2
MsX{;3FD
w9C@gzG
R0>Gub
zGGzGzG
zGGzGzG{rzG9r~G{v
Gz2zGzGzGzG
zGGzGzG;?OHzGyC
zGGzGzG
zGGzGzG
zGGzGzG
zGGzGzG
zGGzGzG-;GyvLzU$zGzGzG}
NzG7*5zG
NyXGzuzG{5
;OzzG`[
OGz:|{Ck|ko:
NtpuuD
[v6@s5
N9>G{%
:|{Ck|ko:
O0N8y3dp{e
NtpuuD
[v6@zDss{6y
yGzGzG,
}^y^'9
OC;:@9>G}X]
*5CHX=
szGzGzGzG
:5szGzGup
P{*5Kr9
[y!zGX
5zG;)WQ
zCSyvD{j
R5>G}"Z
Owuz5>G60Z
wuzGzn<u
OB5>GzG7J
wuzGzzGzGzGJP
z0;Gv-
uUzG{J
;owpz"s`>G
OR0>Gub
$Wz]{J
OR0>Gub
xzG;owpz"s>G
;wzAgzG
;owpz"s >G
;wzBgzG
;owpz"s>G
;wzBgzG
;owpz"s`>G
;wzBgzG
;owpz"s
;wzBgzG
z-z-9/
9!Iz29M+uF
G;/{*L--
HW;?98!2zGzGzG}^-!y
zGBIzGz-9/
yO2;?yf
DC!2zGzG9#9:X%
zGzGzG9#9:Xu
zGzGzG}^-!y?;/O1
9r~G9#9:X
O!39#9:X%
^sX{2X
3szGzGzG,
13F{'z;|
z}:GSL
Gz~:GS
szGzGzGzGp
k1>GJzGX
zGz ;Gz
;owpz"s>G
OR0>Gub
z2XDR;G
z'%O3}^
;G7~Gz
zG}^v?z-=/
uGx 343Z3j3J33[ !{!
[@HF0I
BsHb2v?[gTzv?3Fz0s
9szGzG}^{z
HzP;G}
5>GyHF
yGzG}^-
A{GBHr{G
Gpu9zGsXbHt#zG3(+z
sX{HrezG3F7
sX{33F4
uVzGsX
33z4Gz8YG
LzdzGC}z>YG
LzzGpj4z3v
GzG{~p
zGA7zG
;<C{0G
O0uwzGz
A{_Gzz
RP;Gzr
zF{~c:Gy GA7zG
9r~GzGzGzGH0
QO3zGzys
>G{S{J
5zh>Gp
z>GyGzGzGzG
5GzGzG*%9szG;'O(
zGzGzG2;'O+
9rrGzG*E9szG
O!2zGzGzGO3zGO3zGX{
OzG,Tz
OyfHzGX
*5Ch9!Jz
{G!zGzGzG,
="OzG;3F`3F{
z6V`=<CJzGX
O;~;G@
OGzGzG{r
yOzGzGzG}^-
53;:y@{G
}M53XI
yGzGzGzG}^9
9szG,=vVNzG3FsnzzGsZ{+
b[nOGzG}^9?
O*0C>G}N{0
sY{zGI
3F}B\xC_%
szGzG}^--9
9y>GyH-
99KJpV
9Ny^>Gy@
zGzGzG}^9-=?z**
;)k{JUNyG}^-
zGyLzG
$=0KzG53F`3FcRD|
z9-zW:
$=*yzGHr
zG3F`3FsRDD
;/}k6;?sjG
zGzGzG}^-
HzHtGzG3
=~VyX:
1;ybz%0l
O-_y;y
PAss~6|
\?uO!3zGzG}^
zGw?zG7Cz\jG
tzG9?{J
`?2rF*d13??;/}j
MzU;?{N29/{
zGl/zG
-zG9bzg
hzG[}(zG
zGs,{G@7Gz(zG0
N7Fzw?zGyh_G~3w?zG
TzG;?1P~
,K ;?{
yGzG}^-3;9wF`pzG9/{0G
zGzGzG;*wF2HzG;:wv
C3F6z~
zGzG{J
C;)w{R
9JszGzGzGzG9
V!3zGzGzG,&95OyB
!zGzGzG#tyP%
O`Q:G{^k`
3zG}^-39(53;:yv
g};GH)
OC`3FuF
zHSHbpW-
53;:yv
g};GH)
OC`3FuF
zHSHbpW)
yG}^9?7GzzG}
52=/{#{!zGxs
`ubOup
9szG}^9?7GzzG}
52=/{)"{QzGxsSO
`aOup
9szG}^9?y
<=/{"{*X=p
3f_Fz3Fj
!3zG#LyQHzGX
cGzGzG}^yf
uDzGsX{33F
<zG=?z$
Fz-zGJ[
|*-;wCz>GJzGXmf
<zG=?z$
yGzGzG}
|N{ru
w?zG7Gzu$
OGz,zGFz
w?zG7FzXzGfz
3?;?8;/px
;?{n 9
{|PuFzGyXzu8
_Hr\pG_HtgpGe3{Ht
yG{Ht~G{Ht\~G|Ht|G{Ht7
GxHtJrGyHt}|GxHth{GyHtsGYM@Gz19izGtp
z!Jz199
jGy@mz0'
O6y^FJzG8
n 9?{"y
zG{0}=
zGy@z0#
zGy^GJzG8
\rG43;/{
r~;:ClNIOzG
z!Jz196{2qXrSy
rG43;?{
yGFzyzG{
zGy^FJzG8
{zGHzGXe
YA@Kz19}zGtp
27OJE<
}G4Ht|G;/{
vGy@z0A
{zGHzGXIe
YB@Dz19azGtpu
yGGzYzG{
OzGy^GJzG8
8[G;/}
yGy@z0z
G43;/{
vGy@qz0Qz
{zGHzGXg
YD@Cz19
~G43;/{
OzGy^GJzG8
;/{C}!Jzu
~G43;?{!{C}%
YG@Hz199zGtp
(yG43;?{
hGy@)z0Y
r~zGlN@
zGy@-z0f
xG43;/{
r~;"C7Xz9
jGy@Mz
$zG;?9-
Ozd{GB`3?;?yq
zG_sIZ;3g#RJzG[
(53;({n =
OlN}!Jz)
9?{|Pu-C
9rrGzGzG,
d2;~c{
;~c{67
;~c{|D
TC6343;~c{zG
3zGzGzG#HCw:
;:px~[J
zG9zGyPYz
;:pxHGsF{^
2;~c7~GzU{^
DzG;~cs~S;h
GzGzGzG=
;:pxnG6F{^3:[sG6G}^C3zGzG=
;:pxp%z;~c7~GzG{
@;O@2;~cs~C;z
LEzi_{^;~c{~
O{^3:=
cszG}^9?7GzzG}
{G;?s~5F
C0J4(;?{
LFz-^{;*{
d2;?{
LGsF{;*8;:h
U{;*HzGX
KsXj33F
y{;:{C{98C
U{;*HzGX
!yGzGzG;'OP#
9r~GzGzG}
nsX{Ht|G3F4Nz
dsX{23
3F2kFz
sXxHuJzG;
OyhOzG{5
Oo)|#D{;
OXNLN}r#
OzGJzG9(X4
O2:7{5
;OW29(9u
Ou;zGsKH~rxG;
5H|{G=9yvTNzG
ODNxks5
{Gy@Ou
=8Fz{2hYG N9(9,>GJzGXt
y@AOEt
OyqDNjXN{DNh:>A
wkXN{TNzx23
O0@jXNJ@:
O!Iz29
=8z{2;
=*Fpkgep
=8FyrXNIzGX
uzGsX{Ht
zG3Fzu
=8@ysFz
YfF\N+
<i?}^+^u
OXNLN}|#
=8Ayr\N
OXNLN}r#
OzGJzG9(X*
OWpxiXN
OHt;vG3
{GEOm`
O!Jz19
LADNDN}2;
OG>LXN{DNpxzGs
OU@NzG{5
ujzGsX{33E5G\N+
8m?}^+^u
OXN@NJzG
zGyj=O
Oo)|#D{;
OGzzGya
YGXN{5
O@NHzGX
OEzzGya
O0BgXNHzG
OuPzG{5
uzGsX{Ht*zG3Fzu
{GGz!9a
OzGHzG9*X1/
OwOzG=
zGMO}t
z!Jz19
OzGHzG9*X
OXN{}cm
{GFz19
O53;(}{u
O;OW3;?KpxG
OF/RzM
H{vHF~u
OhGHNsH{Hr{G3F4G5
Oo-x#D{;
OFzzGya
<i?}^+^u
OXN@NJzG
zGyjOSzG{-
OGzi}=
OXN@NIzG
OzGJzGX"
O53;(}{u
1;?KpxG
3FXNyXEz0tku6zG{v43{3
OzGXN{
8;?K{r
u4zGOzGO^
;:Oy>Gyu
xGmO(zG_z
4;?K{r
xGOzGXN{
8;?K{r
8;?K{r
OzGXN{
4;?K{r
;:Oy>Gy>Gye
OEy>Gy>Gy
OtzG_z
;:Oy>Gye
OEpW2;
X]GuOut
!2zGzG}^-
@v?;?s
Ly~C3F{Z-;?
U{zGJzGX
9szGzGzGzG2;'Oz
!2zGzGzGzG2;'O{
!2zGzGzGzG
OGzGzGzGGz
13F{Wvz
GzGzGzG
zG3F7WvzGz
zGGzGzG}^y
DGz={0
O"04zG}
pyO)7523
;?9szGzGzG}^y
zGHzG=/}]
=?;/K{r
Hz3;?JO
DzGzGzG}^y
Hz3;?JO
DzGzG}^y
zGHzG=/}m
=?;/K{;7O
;/{0qO1
O"04zG}
pOi4523
;?9rrGzGzG}
9&w?zGHzG=/}y
0GGzGR0>Gub
R0>Gub
OBGz!9
OOL>GyjGz!
;5CyjGz
OyjGz)
zGC3F{-
yCzGGz
13F{vHF9j
=Wz:[p
3zGzG}^-39>9
jsX{3G
@sX{3[`@7>GyzGQp
{G9Oup
IyzGJzG9
uPzGsXx33F<
sX{33N4
sX{33F,
sX{HtzG[#D;G
QyazzG
zD>GJzGX
z!7zGyA{
!3zGX!KAzzG}^7GzzG}
52539'7Gz
qG;?y`qG
9;wz\>GJzGXa
zGzGzG}^-39/y
zGw?zGHzG=/}
5G}!JzQs
zGO79zG
Lw?zG{
0zG;?yxzG
9r~GzG
uz ;GSp(
;wSzh>GJzGX
Owzz$$
ZsFzyDSp
z ;GS(
OzGzGup
OsPjHdpE@zGzGzGup
NN09szGzGub
HepzGzGzG
593F=G
yCzGzGzG}^8-=7*yHup
9szGzGzG}^-
O*0>zGNzG3F`3Fs+wzG
$9!Jzi{
}a53X}+
O!2zGzGzGzG}^-
O*03zGNzG3F`3Fswz
9~|7>GKO
9r~GzGzG}^
O*0zzGs[{
3F}+wzzG
w~|7>G
OsK};,Xe
Mz1{zG
d-,;GX
O$NzGHzG=
upuBzGyoFz
;69-L}5
*9sNvH|
IzGG#=
O@0zG=9vyr
OA0zGX!x
OyHhJzGX
O!Jz{%
O M}v]}5
O*>GyHgzK}5
O*>GyHoz-J}5
zGa3O0q!75z
O!Jz{%
O M}r!}5
>GyH\zI}5
O$NJzGX
AIzI{%
O$NJzGX
!3zGzGzGX
Oz!J3X
3PBupul
0Bupum
uzFzAup
Z 5>Gy`_z$5>GqR
9ouz!yhOOp
O!3}^yf
!3zGzGzGXA
OGzGzG}
O6>G{5
O'vz6>G}pzG
N 7>G9szGzGzGzGH
~FO/zGQ
5*^yrz!Izq9szGzGzGzG}^-39/y
2;?OyLzG
6,!{Z'
>G;?up
}}53X&
O!2zGzGzG}^-
Ly~:;?Oy-XU
9UNy=Xup
;?!2zGzGzG}^-
LGzzGs^{
4;~;GyKsyo
53;:!X*
53;3!Yz
zO!39#99y
LyzO(X
9szGzGzGzG9#99y
LyzO(XqE
9szGzGzGzGya
GzY[sXx3zGya
Gz[sXx3zGO(-
OyGzGO(-
OyGzG+
Gz[sXx3zGzG+
ZsXx3zGzG9
9szGzGzGzG9
9szGzGzGzG}^-
LGzzGs^{
4;~;GyKsyo
53;:9
ziL!3zG
z0;GS|
zp;GSd
zp;GS\
szGzG}^-&X
;:CJzGX1
tFzWysHT
yGzGzGzGX!
T>G3zGzGzGX
;G3zGzGXa
YOzGzGzG}
{GtE}=
zG;/}5
zO)iO9
O!Jz]{=
OPyHO~
zGzGzG}
upu8zG{u
OPMJzGX
zG;?up
EKzG53F`3F{}
8ZoE{=
yAPE}5
zGzGzG}^yfD
53;:sp{
9szG}^y
52;y0|
`*d>GyhFzi{D
yGzGzG}^;?O
53;:sp{
zGzGzG,3;y0|
O{s`9Ny@$
3zGzGXQ
OGzGzG}^-
97{{7GztzGFz
upu[zG{0y
Lw?zG{
;/{%ys4
x*>G{zG
D{6;/}in
09~y@SywV
H})H}!H53X=
w?zGHzG=/}
53;:yss
zG3G{53;(y`
8b~&n9
53F`3F{
|Ezb}!Jz{
xW{i{Hyr
;7zrx`n
zGzG}^yf
zGUO(G
GqOy-:?}!Jz}{91yh_GOz
q_y-:?}!Jz
9szGzG}
8&w?zGHzG=/}
sXru~G_z
O*H>G}5
}^9?yc
UOz(;7J\2
zG}^yf
|u33O}Cz
$=/y@Ez1
yGzG}^y>;?
w?zG7GzzG}
yGO0_-
!3zGzGzG}
OGzzG}
5Hu'zG
O0.HFs
<M1Py_z
O*>G}5
OzYC}5
!3zGzG}
zG1Ry_z
O*>G}5z
zGzGzG}
zG1Ry_z
O*>G}5z
OzB}5z
zGzGzG}
7GzzG}
52zHFs
zG1Pr8
yGzGzG}
L{7GzzG}
52zHFs
zG1Pr8
yGzGzG,39zG
OIyAsz(Xq
3zGzG,39zG
OIyAsz(Xq
3zGzG}
zG1Ry_z
O*>G}5z
Oz@}5z
zGzGzG}
yGzGzG}
zG1Ry_z
O*>G}5z
Oz_}5z
zGzGzG}
zG1Ry_z
O*>G}5z
OzA^}5z
zGzGzG}^-39/{r7GzdzGFz
5HtxG9zGGu
3FHzGX
u[zGsX{HtezG3F4zFmz
zGsX{Ht{G3F4Fz.zG
|OZzG2XM
rB}*XY
rmAxs2X
|9OrzG2Xu
rA@}*X
7z=53X
yCzGzGzG}^-
zGw?zG7Gz`zGFz
upuYzG{=7J3
53;:sp{0z
89mB{>G}-{
9szGzG}
<zGw?zGHzG=/}
5G8M;|
L;z_{0|
L3F8M[
zG1Pr8
N}-X}%XJ2
!3zG}^-
zGw?zG7GzzG}
5Hu{G=7z
xGzi{qyvGz~.4
7z-53X
yOzGzGzG}^
zGw?zG7GztzG
O*0[z>G}>G
=?IzGXQ~
AzU;/})X
;/}-Z}
;?JzGX^
OKzG53F`3F
yO9}T}T}>G
H%Oup
9rvG;zDGzGzGX
szGzGX
zBPzG3X
szGzG,
{^t}~/; OK
zGw?zGHzG=/}
O{O{r|
C=fw{)N{nn3=9}B1=?=/yxy
=*F{)X
N)}qR}R}R53X
yC}^7GzzG}
DIOY529zG
zG3FUzasp{b
$;i(XP
})Q53X5
9szGzGzG}^-
zGw?zG7GzzG}
5Hu{Gz-
<=?yi=O
O2;?{%L{mLyr
=~E{"y
LS}{-;?{
zGzGzGsz'z3OOGzw7z'zG
zGzGzGX
OGzGzGszGzGzGzGszGzGzGzG
gzzG{r
KsX{33Fv
zGmOOO
{/ >GF=5N
OWz!69szGzGzGzGO
zGzGzGz/
>Gz7sq^
zKg GzN
rvG;~cst~v1Cz~!
N/?9GzGzGzGzGzGzGzGzGzGzGzGzGzGzGzGzGzGzGzG
/_PW]^\]^QQhXD
))hzGX
0123456789ABCDEF
Q$^p8G
AP~uu\T
KV]~rhk
-:,@=D
FPC 3.0.4 [2018/02/25] for i386 - Win32
#zGzFO
zGzGzFO
H-z`3
5F>Qps^^l
,5V7-$4.,O 6S
,,!K&&
mq'q 0
vg=BY5Fv-v4T,1 6
!/*J!)m5\7!+J
AH2ZNS
u-q81=
u-q81<
&-q81=
>#H'5
)+$,!4%
J!6n.5
!B)$o2>#H
,g]6.=
$L$:<y
u-q81<
v(0$L$
&q-q81=
>#H'5
)+h,!4%
*8MJE!3*
"/8gKD4
Q2#6z(ea
-s1qg6
2~,JG)"6m0
6j2SaR^
a$[iSF'c,Q_~
u[)R;S
/CN33+~VB:0d]
Eu36RS
kFH|/,K*
}d>j[0)?>D^_. U*}[
,k\sgL
&zqHGCmG7{Q46ZYoha[
E~16PS
MYM-n:'^
l7a>.e)
'A\73*1
QN6CB_?L)lpp-(
|ov<NYI\);'kBCJ}}T>7YNXt4
.?ITEz)
Ovbp0M
#.j$D?Q!r%M(j<;g<
J!rq)w&QC!2Z
{@KVEa+ao
Hb$^BB&
i7pA)2m
Da)riz
KgN}X0
M|R9l:|:&+
>6C,!#M
3|+]}+
z"Y.H>AA
ra_j\7%8>"
1N2&FRak
12-]& b
0\fLO#
:(\VoXF;559V'
t3;I@10";H3R
`W*1$<
21VKZ]
$lhzW=D?!
dO&85}
$F^wgJaza0H
Dn41K$Q0\y*s1k.
Dx(y @
;GqrHE5E
YHI-};
.u80\|;>
uo(HHT>>U
9E6D!m
tFe<(~}PUB1q
vO&$%j:]<^
4o|&Kj;
9VNmg{6
Ds~b"R&.9m2
=p|srB)$M
sYM]j"
Nm,U{:
Gty{-qOA"52
2(7A6}q.(
7gK+/*
y1!B)J
ue=P7y@
I79BvGzsHE
7c2a+{Hx
PK,5&m}
2XvIjO
uF/2M(
Q^W"Jr'SmW?5
4O~F5O$
DFq)B5
x?pqDlgU
6R\"?N)(
*FP.0K
a ya-/At
O~O>Lw
<>P@15$-
DJ]^,v.@4F"3
]X}J[}
$d=A[A
]q\zI
9K},^6>#q6
(+-E@XFp
v:+QXQ
/&Tn!.
o;eaV%
Z(NgL$
!un+tkd6
kJZ)e>
Hf;A^]?.vK
N_,{yB
F>JAM]I
*s1WkZ
vTpx)!8
p)<OV@5
i?v)Jt6o:
U L$q9
ZHt JX
*su=f !
.@7|
aM(,~#~
0M!<zTIz0
!vcTAPi*
,$nI(DO
Nfv=`4s
eKg8>%
&85*:)r
6[ZwSh.
IiZgVH)
`@wQ}x
Q%`zhB7
+9!;AMx
eF;1q<
O&B85=s7os
:g!8J!J
KEi>#I
v$cJu)
*r_'_wE)$
,,"{'p
v,$L%_
>81Hx?%5>
-|SH6%
L,M))4q
Gw)%p?26
"P@5G;::
hskw1M1Ow'
\+CuK;
4C/92A;j
~X'[VvM
{O@uLv
c^Z(%%GB_@1<
%eQL?:
vS[Jz5u
fx<'|,j>r
ExiMw+@|r
4pFK,fks=qmf)+,G/FXY
uOqLj2=-sZ
6Y"eR5
Hvd0 e>)7
2;yV@|QHP
W49Vyu@@!
L$El3@
Nz5^K6J
Zx$*i'-u5x
fG[ai,
4Uq/G^;
[[|YX~
2UA0IsKu..Fw
07cuVt;!85
/x>,zR
@oahb6[.355X|
.[LXEJvO
2LSgi
8 t)[[z
!FhKiU6
{L!)JhB/$Hb
A:)1xV
kV<TX+?
vZ}:*v|
Ha-|L~0Ga
X|&uv~5n
kL,Mq(H\M
Ct"Jx=-4grM9g
jU')-V<okL
V/KA;$d=
7;d&cFH
Ulc"rm
]wck]$
35pSK,4<90kyaY<
#AME=xG
vb6-7]
eQ7_4x}
GOd,BV!
sk_W+;
~;qIf)^##qH
%Z^DL$
zJ9%I|#S
B01)~,TV
N1YMyB
2'0MF>AVB\n
**6]w7[1aXd
l.JVba
2M@/8U.
_$kL.a$
pWMJ_k
1_5ylrP?
(~_KH
HC1gN2
jR7GiaVY
T~tvA`)
4'AJS=
vS'r\3+
Uw>*mqq2Qg
%TXTwujk
fYN#OEcrjV
We#3E p;iD
Risw{8
n{p,Wy
,_pQp|S
$zBtfl^
XH82,[q
t_dz2t4HB!M
PF61Og?ug
K]p^!`5!,eX
SEpVuG
B<i0}K
}n7~0sK6
Fr);95
ch%I#q#g372
j6b]w6'X)$
D) ,?k++y}
r8.*^I
$s7J}T
kkOf/~b
1" [e>.J e
q]?!uh
O#-W%r=jf
4#x3e<
xK!WJOv:
I_wc&p
K-\:+L
u?K5e3
LE1X)@et
dKh^Y=g7
Je)7e>k"z
BVfh3vq
.`~/D
73~@h^o
1o`O&
d9[.Ank6
J3Q]Hu
6iM{r-VVR
Gp:HB~
z),yQ&+,
$j22$G#
cA$|JLPXM
AmpNw 7
a&&~sLx
'M1WO$[U
z1x6d=
!9JG#KeOS'
2J#SUs0
F#!PS0tJ
+Y<4%-
2"$z*C*
a`B}S7J?[}a
3>Gv9w
vr3]=tY,!/
b;;NKXaY
pU}x7~}
pAw[><i
.2B)eJ
Z6@q*1 f
_qyKoD
e7567<
-.tBHq/25_1OF
81Hhp/^
cJs,-"
$pp%sXdMA_
7xH"'7+Va2>EK
!br+37
17>a*9N#x1
z0g,qc|
uwn(."0
f6/8_j
K.q:{
"-31r?
u-81uy%{)C
):5?pCUX
8BK2QoL%"
;zqp}w0/.KFow7
c<'S{Oi
bC^s7c@`5
;+dTRP
.TjQS0
ts*zco"l w0Q
7/2nul
S1J4W^n1#_
Zw"|Nf
v.R|^3
n=0MB:
%eFQbo
2LVz18vt
Iv~CJJL
25yK1
sSHu}aQ2JpE
5@5&zD7
MnV21\
,,!4%3h
I3+wxz[3iIw+;Fh
@y@-}fN&
K<41o#
/Vo=M)LN
gA2zx}z
pvo23$]
`ZdUO{K@dbmFoNM
f6u!%yyMM(
Fau$=! 3U$
BZNgJj
xQom2>TF
#&*vQ9NyN~R1
qmiL~^Pb$
t-8|r+:5
Hi6j}L
b/LLqK
RsHuLJHr
S2t)u;
OH,v.Q'E
SL}1"n!Ji-|C
xC5KE
YSYXaHH
7Aa)G$6\
b!+CkPv6j5)
M~]k~gKI
aa$6uV$'
!@Ra0t
miUDBHaY
AJu'&V
4%dU,@5
v{Vpmp
K=/|prh|QB
qYSt4*
3ArgRC=>ND@xX
4}#!c$V
~:L)wA
C5a8'1Nx
<HP|26
c*sv0>v|
ymFx}3j
|uF-evPLX
"81t1h1q*
d-ii6,
}^g ZO"}
1X_w93;
VZ*XVHW;
q9\Cws]
JTk/ddL
y,l-G}x
I*D{YA
;+3u$lX6"1lH@
L@_5X5;)$
{xx=+v
!|mjv~
drP-pX.
9Cw~R*
TsL0yRWKFH
m*s2>*
FGVni^
Fn_Tk<`.
:c~4?p]
U,!4%Av3`
a;CC~e
J!ZLuv5 B7
v@|e>0
^Y+E%J*1vOX
OIx 56;tj
~+9KbB
xdU, *
03D^s"h
uv@k=!B)
PG0B'&-
3bQ18N
=27Nqj]N
a8GWud:
u0?/b0l
{H1eb!
C0[uW\}#n~@}q4r
!5IJn.K
>=7"1Cc
;*&0aB
?!Eem4#
^Nz8C3g
2p[$L$
'z@amH`
q-sJ4?
Wi@yL,vO
5qUiV0L`0a0H
I(9&
2XvIjO
Vw64Jms
b')(\~
r&LV>%,
R#KsZ:
]G^`K#|=~
}T%ufLP:*VQb^A.
UM=A,[
ry t"f?
oN|TH_@[4vK'O
5zaT#$z1O#
wT1r l!8_\\P 19! 5_
]k=62J
py#CG8
>Q&bQJx
|U.7.=
,,!bC/"74
-"}s.LxJ
v$OSrT
<>M`C;
/++T>KJ
2d6!"1=
%qw"NnJ
)RZXJ@4*
bRH2q7
(.\-~K
>YHH[3=7s>CJz{
Q7SN2X5)
n}@~E=#@
oqj]GE
u-qnYJ@1y1
Cw7;)n
+tk<1P'@
5J46'&V
5FHr'_
_r54V&5vT
sv`eM7
e?.3ai
rR|E0v<St
DVyuv?Y9"NYAu
]3YRPz
tBZN&r^
9H6*)BTWx
d!%<j*O
B4~%N2
-"}u.eu(
%wv7DK#=gi:<
qO&p?
;+3&5f>3
2a.@H#
XjF2O|
#c+(pJ
VOKQYI%s
AeZFse5
4N*G4QjR7
n dRPZ:2Gg{
^JBP&%N_w
#GK#g
m~b%*vuC
0>u##sNB
1~|;gj
4%6jB5
Dn'Vb1qK
.Z1}\*_
C:A6bHFJHAp=3S|5Ju!
Ss2}w12
0;SpH{Qny
%-?VpT@i_
5MDsMA$t
%V{y'94%e(?=?W/V
Igse!?
<!s?>,K
"FCOYZ4>*h
G6A2O83C
AJp/#gRsz
6bQKKm,@
r;!4%>;C?.
:AXN.93R
i$6Ag]
?Qa{$\
-?08D@
rQ}uI)>
!B)TW~
M*KoV55
*s1k~3
47$\?]
sp,Bk
dbO+o0Tk:/.N
&==+I
=D~Htnh@
9Gq>,5J
!Z?SP"
HYJ7z3C|6
&;Fx\|-
s*OB9\0A
H@uv*54<
dbV'[=
.O0QxW
"hVgIT%18.\q#K~
6+03@x
85%>j)
x@4ps,
7@=&6b_2)$
MX{#4>?
,,!4%
8E@@&y$;p
J&tG0/)
%M}4WsM
{vCvwvm
Et.RNo9&}
,,!br+37
;i6bN-~aO4j-
8j>FJY%g^
I_%azU
Zq!5f!KZJ
kt[tnR|
,?<,53Fm
eaA;4x
7*-*=M
u5*8T=r
4A$6 =7z
$L$OJJ2
a=?'(>
v601<7?7"
(y,-3%A
0mXsd.
<5t<u_0n
P}Uv*Q1
wbEuaZ
QFW^m2(C
ZwkVM<stH
+?=M2dF@u
!taUA [Mz<
2AreRf?Z
~K%x`.9~
a7f-)B:L<'R{
~uTIPic6A
#(8CJ}2
9:[J+{4QjQ-5
Kv.1 dQ
'yv81=
-s~W;2
vO&85<m%x
"B/*-bD:57
6R0_d<2
Krdmt=
e<31q8
\-J%3{nx
m*@R>(<\v
reiQ.&
67(Wc>xs
5^)Jvy
&JLka]
/Ot%0o
/1,!4%
$a~KXb
\!7}K/$H0*7
o=28lg
a7,;.b
hGJ!KwqU)r
2>pr2)$
Otca&^
wf}e)k%
u-q81Kf~
df/*8K!KV
RJC`U&
Q+'+dHe
v%o#!;
st'>,~k
R$_vr>
WNWf+'J_O
o}KrNP=EZ[^.Dl +6"
GaJ#yyy
W-dO&85Hz82J
@5*b<?cCTX
MrLi%BMDkXI?60=0
zQr1,!4%
_dQ1:#~
U.^KUIj
T"0Po)k
Rna? dz
NzeO9j
E -taW>]pt
\t J\
W$R!4H
%R-Vc~
FJ#n.\
&d6A(s`
EtQ|^C,
9v{55}B<l]
u{EmL@
YwT/'@rqG
'JC[#+{Z6+*v
<Q2MWA%'ur
oqy:4"
CwUw.V1q'v]
YrJC:;#
+<;&H%4eHH
u3Jn&z5(=7>&
&"m*LC
s2sqFH
5)'?wRD+mE%
&>OZ)$
|ZOL$
h43v%#3c(Cx
AHL5.(&8~<0y>,
n.xU0H
*vK}'J
gse!#a]
#g:`7eo
;Fj!H6
tHWtw|
fKL#t.I&
!"n{&v%
Q2#6z(e2a
=uIs5:X
/*-(b!B^.zp
,*v(9
L,-2Nc{4%+;
-qn,1H(1F-N83&J2yT
j=d$Losq<)7>RS
\!,B)R
g+0gWGA
6@my)GF#l
Y}_~.G8I}
Y>#<=3$
9\s3`0O
?!aC&%
xRiPEE
/HU(j.+
FoH-O^`x%M
u7%dM)
RZ!LZuu
STwu9?
dt*^x!
jyS%#<A/
Ct-qdvH-Hr3
a])585}#Q[
M";c jJ!%i\a
W'FHT@;@@H
wUtm{,
AUbl^0@-)e
]SHu}=eH
Mozx50:"
E%6r]t*{G
,{?5gjU)M
I7af-:!1Nz!B5
f:C/Xr/4xu[
mKjsjN
y^>;50
QoD>GK:
($>4%a
7f!+#j._vjf
4AZ9f58*=
pc{93O
-[' L1$7i<$N
"6B8;;b@O:
9+Z>Wx
.N@;K
9W$MQD$NO
V1iyViE
QD>,z_.
sKEIIb)
*Gyo)%#
ajT%u
Z$11qrv
\!5N.!;Ks\m
`y10h_O
-H;|*v(
-q7fjY=
|!4oOL
5E,=1qH8
}!<1p:
F)|h_:r{!t-z
L$k}~Ld/E
\I/LDJ
J(=#]'
A*|vv\
U!D@@:x
1ldg]C
nd3+81kVW2
5PY$:"jx?
^KgxwL~B
YP_w,h
A6N])8y
LBpC0|#c!
{dH0-VJ]
wH(&Q^
9L,|YH!
l2W}!i:7
N#1alg
NP|v}{pscZ
4!s~$,
J!6^e
!B)$_~>H
kXM4w<0f
I>|#0@e
(4Iq2>
P==27m=
,,!br-se
:|?!Ng TA"M,z
Hfhh}ub6
nXjAy{:
k$-C7>_
,A;4r}!~x@Ym
(L7+RI
Gsc8`y|
3}T~,cnp{1(s?o+
V!M*/}cJs
CwJnZ{cD
FJ2a+2OV
dNM+2az_*2
IM0Otd<
<*s<)nC
*v1tZK
3-Xv$q3r`
0)" 73>
`f]$y=c
?!d!$#..aNL.
1"Ky]5
da+..>
?2OQ%y0
CjveOJ
a_Kjy]5
c`]$f._x]/3
?<05q$0CEz
jG7wK<
$@|~2+Rf/CUhzE_
M-$0.1
t61w~wf
\jm+|9
%-b$LNHL
]aHCCh
J]H]Aw
D=!tk<34
H%4eHH
|45"+ChK&c+
N#-WEMl
cm]9a-
><{%86
d%=wE`>#
v4voNo5
4Wx2P=
k}LO(efnh<
ug=Rm*L
<QS2\
#C,U@$
YjJ`xU0H
4cS~ftJ
IU%ECn$
v`N&`}sS]<
_C.kOYB/*-
B/vk0d<n_\
R(3;hsU
A7G6Z8
X)14QhB7!/P"
x0Wi"3}
FWOH1\-J%3{n
,Q.EHj0cd<VS*OT
D<b~TOv:j %
c1v@mZB
A8Av8H4
oscSt{p
#\!CZ,
$))UTt[!vbn2o
2Q$b\Y
cZu-sg&J<
8U}^n,_
VeKP9)un
HvNL$OJJ7
6EbU]"k^rpn(
rz0bR!2q
FCVX)-[8
=nwUbdUU#?G
;qy|C5
c~u2W"i
aB(H#3J*L;
X/!-At
[e>)yk
2Ifj#9
O72y&D
O&,Z:-J
z$JO"Nh]5u&!dA]J
y'd+wXj>
o;E-v@
5fE+!6
OVy_fr
xu,GaS%M44y
GUK(7p
SowhGLr{8S
-rz6RB"b)e/V?
LBpC0|#c!
PoH9O^X
-@aJ'N=9aWQ*
Mt)?Gy
,,!{4%!;
u-q81}h{$1q26>
6\>,"6
<#*2>O
!7A=xf
`SO|6U-81
(8@ur77+
sX'Om<_
3GF,d(<S5
:oF>]l
HA?vO&85Hz82J
<'"Hp1
?@|f``
c{4!>7
YD9&#LI
9A7Xd=Q
1[q+5yA
\6{V!@
K!D#uv0
\!B)ez>#
,!^N Ag;E
[sq<)7>
#k39n.6
5J%"R"l
v&|xB)$
.4F#i$
)6.^f]
d,t=1U!A
aCA8Av8H4F+oscSt{
Kqz:Z!
CwtZR`(>^z
5N,"2JXCL~je3K;>
\VJtq\2>O
#n>0}A
6D}hfS
e*!>|/C6|
v`]$ycxK
*s1k~B
OTX|cf-
r47+H@
QGqA4c
,qNY:9MHp>M
5F$J)LktmI
r*|BHJ
)IG)47
3/s~w2
#?f4S2
$;_L!}^-5x19C
:Fc~W+J2A
&KvN%)+z5]NIh'>,
!E`Kj(|
<',\`H2<
|%F|^#6
a{j$Rq )
AuC-<u
&W3$FD
Mk?k6H=
z'G*L>>m
>$C]d#s/sjJ
w@hp2v
!A"A.gE:
vytHNq
V>#<'pJ
&^)9KY
B<F6.}9#L,D)!4>Ac
$TcBK#1:
<4|6+x
"`B\J?
ra62-Ga+7
f8Gt.?2FnQ
U!1S~Y
ftPdIb!]-
0f)UV,!4%
-s9!;iy
AHdI4U
%85Qt7Sg-LV
6]0"ui.
6bYwIOf,
z~gY#a:=#1
siMsj;
E!Tjuv
1j'U{P
Y4%,aF
^jNz5&
a!MEgGF
u-q81;
Nu'\\KgO|c
pvyK5x+Jt<UUs
@[>*vK
3Q3J,^w
$btg:1
-j0F_y
@|Q]k@(V+
cehB5;Q2
Vl[@g-L
coFqy]k
i&P18l1VuKY
u-q=uNIs?
/J;n2+\d3
U\)<[?
uZ]>*vK
z?!eF+
aw5T%(
+v|F1W
Z78[.v$
7Nlnap]
]$C-9A
rf&v\$;A
3Q-b"F.
ACw)(R>#H
|Q)QPo
IQV149fz.;Nq,k7<
UliV3a
6L1qvMnl3@
oFv*X>C~% ,%"o
B\.IR ,e
DJGmt1
-|6i;e%kq
@]AuAD
r8np?5
*s2>*Y
t);U9&
,|YHq#!b$
:$!kImG
m$>j(]<
hb6[Fa
2#f%o8x)V
U U@Z+01i
sM%P@o
EQ#]d<h>:Z
+,!@$6b :N
q;=Z.E
<26Y~[
!%/\8
W@|7]>O
*sn&VB)
T{C~mEH}?0GS
J2>&\S
Uuw".14
CA>#KI
sCN}}]e)j7
LG*"3Ck
Z"=]!}
9<HHZr9s=
gvoK,V19ut8t.,
UcA/*%j+J:
#\|5G(_<C
jd.h]RSP
<~U)zgQs*E81=
N_,xyBc@
I/IH+
zdHk>j)nc7
6[P|8]/cA(<[?
,*v`b9&e~l
l^&).=
.rNm[9
6ylz2kpdNqj
Wb0|)3e>5CRJ
Q0rmQoSu
_o^,3k]Z&V14
%[($LY
hU0S>,
3CkXF>_>m@(
,-."/0%
.@8F#2
0JG'KK
sUlB)Rk.#J(
F>"A(h3
9oX$;e
dFOnI%
r\Q^9G
9)KL$pM
\NUd<4}8eJ6
F#9&,
iNiYlb
3]\@.
kCsqe<#
~r:}Y'#
/6^>,O2kaFd)e\H.
=,>H2y7
VE%6F<mbC
V<i5bO
.kb=Jy@B
ps.q0=?-s
2s0y?xJ
J_UUskj(4x
ta3aXH9&>
:=baI!
y$'pLyo
7H&,85
y[~Jkld+$u"KK
+g;!a^
fV:+vxvzFA`<1{>
1gw^n|H@
-sBokL32
"/CdHr%Zwa
.N QLM
|~i\.3H
~liNuTGay
H-~^4,
)^n.n@0sKd<
AJu)u5
9gXpdi
!FWut:
I 2$bc|NpL-stUA<p]
}u{O[r
-17b+H
Z'4j"7
]]>S[8<
EA(6Tj+
2>42OA+$XD
D6.^hcf][
-}k"jW
6T/qlEHh=C5pP6A
c'ozx7VO
]wB)rT7
;b|%G
5Yi:=bWl
{;if|
M<wlv-0AJh
qONj/VNLk}[,
VDd+"j>
?Ep==]4
1Pk^O>
j#$z$,9oExG
N<"\AzY|
x01F>)
dB~W>@Tr
<#E:(
H57pGIU+81NY%J
)Wtu1qp
EH46)CB\S
4 \Ov-
4mqeov
}h5~3TCa,9O)
SkHP#M
l^PJ-"H
^h('&s
T]at_%Wd2RS
lK,^us=Nq]Ka^H0#!kq;
Ao/Uk3aOuq:9
iI. .L[
25^dfH=a
(Np}*}YF
(+F<E2a+{p
HRvcZ,Vu<2.=
ny+X;I
7O{NzkhG
<Q36"1qH
y#I&x4z$
{EYrV#?
f:vBC5Gq
LPb6/yCw
j%k>#t_
<m]C,=E.
XIp=sc~=
.x4F~L:
07<in.Nf|
vSF]9GXp=<F
?(v|8&
oy%I;=O0}Oz/MdF
i6J=}Y'$JJ
Bw'onh?#J(h<
k_oYN
|lZLt.
v=+dA;]
+9@RZ\[
@ah6h.
Zv/'\C
:*6MQP~ uWg;
^`:J9&
#gZ(%L@Yv
F>1m@(
1_a+?O
U}VgF?/j
jk,!HX
yy6+~@:
zpy.SN
o0B)n.]z.r
*pj,P!X
A?G+i
##L;*u19
%"pep(k
<'scK`
AF@tG>]
23=[.N
IcqQ.JZ
&}b~FOy?
2pep:a
{.5(O|n
q+3eG/i
!8(HL$
B)3I=n.X
(HD%|):n7vX
TX~ i:
B6.?%q.\kyX<
zCIFwY
)Rtg:<
wRLi%<1 2
$>:N0vzB5
-Gb6tv_
0wd<=?
v40cow
"Ij$~ _
SXy~+5#UAG<x"}Do:=uOz
"7uY''d
d.w#:HD%
oPp's;
!zN#8_d
~-P:}Y'B
6K%/\|
nMh17u
'XCwr'sn9)c
:+FJ -}SrHD%
rkj,(!+0,3RktG
Av9}Oz--
3]U&(|g:
]Kr?WIk1n"Z
|B99VIM?
IZ>'aOY
82xu|=
"k}vd+n"E*}7c@
I4_hi[(
L$pi&<
LwGIzn
dzsj&NB
B)Jun8
!"HMd<
AcY?@M{^2
c@\voz2C
d,,QcJq-
?#\wno:=wt<
0;HHIO
5>?17gF
-7X1q'R5*
\"QgGze=
qj}7c@
'\C1A)
M*+FJ2*F~\~<
t|R99VIM>
;;dcS:/
#O$-9j
cVvm*{J
MHsX84
b 5KcV
v~Facl
>X'c6fnh=
Tsr"Jw@H
^fWgFk`"
*s1k.?FxVX)
KYtsU5+6!
7Q]se4%
2f>wd8R9
/p}OE
>,O"Rr
jBg1P16*]z#
^2uDxF
_!(1bh$
Y[Go@>w
Em;Icd@
},?+X8z
EptCJ!K
BR>#{$JOHGCC8
9+yR201
#~!`,Sktb@
,.,!+kX
/MSOI7+
A@-s1;zE
O&C85-
F1KrvM
U]s\j){e>]
C<<<1!
QHBp+J
H;r\5|
nE3R91g-
7KgKB)J
)AzB8qf
>~*sl3>Wwpd}
vK?~XH;<C
,dRHa-s,(m=xgV]
<!PT@y
Ze<ev(i
dFsz:~=c~
@|>B'&W>5
RwaYwx
,!/a B[0|
FXx9&M
!vns|Yd9
gNTH\C5
vO&,:<
/5L!|rV
tKlrR|MF|o9&St8
7|B"q1q{
J2K-^rX~O5,
%)Zs+tw<SE
6j_g7P
Lj,I@C
?N%~A,i=xgV
,b$9utxG
%F-[(wxN
~I:{Y'3^
K_VKIW%;L$K
+ydkVA0>
2'0G>A7
8Csr2)$
/Ot%0o
J:{{Bca
#gZ(BZ
r[%W]i@VO>er
\-]N<`Xx}
ar=}7aS
"Q)@]ooHhFE3s
k{4%NA,q=x
nsdMq(
k|O*F>%"3
4VK;5bC
^f>eCk
B,pwU5x
^iL$LF
Mq+>#&HQ
]W`}:)1fe
[o)xCqc
X'cnp}(
taXR_p
M|r55c]
8l.IrF
[(MeI)
u-q81;
1LO&"85sK8~/{{|
F4Ex+.}qF
q,G]N
kH>:3F
zYd)$e
K/<9Uvv
K]6v8i4L,
.6:O&8582
@<r*|$%6u
@ kJ}L
zTwse<5
[Z6.^pfYT
^L}]<aRp#|
|(i+qy+C5
@3sO&C95xiz[+e8
f[]/*{J!J
KBKEXE&H
H2r-7c
AZVhEl
qf)^T4
A/z-,b!
7E2Q*a+x
*s~w4r9&S
Cuz}D*
wY<r~;
xG$&C)
^@-g-J
3A(T>Qc+
7<.x?!
?N44Q9
^( %gH=
1#Xph0}
N}obGt
5F3W]F=I
v_yBw'
Le>@Sh
wY<r~;
L$p<yt
_ic85IJ|>
?kR>#tS<Uf<
2>T7Xvh,B
9$'8/4_
uJ-x8C-sF4y5
c0L4X'O&
v`aL}JJqA?dn
<fzA(Ory
FLuJ&Au
*#vtCP_
tv\,H(
HG7bSiZ{cz&s7jJ
OaV5Ju'&V
z/n6p>
:-$;~ ki
,,!4%3h
+OtmS8
;}!yG63Vf@`
.g6$>j(]3<o{
Th)`Z^BRrH
Xh@s>q
Q|&UBvKO
AXYd J#
lQEs1+
Qur?^wv|4
b@ECJ5
$;!_L!I]-
y19/CN]7
puTjO;
KvM@ZI<o
AuTbyPz
<sq+!y<n
'\1~wJ
>#H[|
5B\6e(
YGwLCO
)$P7i_
4v9]C6.=
?S4/'~N#
JcWo[(
nS@rX_
vO&858S2=
|c~='?AmH2LH
*v 9&
,y%7O4%(!;
L$%&(
l@5)0B)+
_X`W|y`F~>R
q34==?!2
KwtZXjF2A
dfH?6z-s
b@ah65
> @pb@r
0gfd<a?
d<N#st
p1Q<OV@4
u-q81=
J!u1u3l~T
V!7-x~
$MM;$L\{
$?pMn"
ci~E_:}LO|te
F>bnk%"
*s7Gxv
_xoDMPZ
%|,qcu
,wBRN'
^7>[oC
pVNCwdVPC9
3,s@p2%'Vt _@)
]duUVSK;UC
Nz{2hQ
"Z(qQx
BO{a!7
KMwLb(J
d@Ppcgo
kvg2B1MK
~Sq5%81=
vO&nb(=-
ZSPNFow7
wkkh,bL$]HN
0|)pe>GDk
CvvxPZ
,zpJc73
gI<(O7ou])
58l73O
5G~koVk,
+WE%z^
3ysgTV=
Hh9s=
Xt<rN&
r^u[<45,gS\
b)]NrJ
_kpoQ9>
/6N,BL1
"F3OYZH
:h1sb6
\X*ApyVyw
tHyM}6
6ikL>46
/*Hqdv
59?gmg5
N f)i`
GpY<lf
iy0M;s=ft~{vC!g
:dvur`6>,
5%Gg)$
;A!y2+
,cNW0$e
r@@>$u
vuAnk7
0%qF~B?_usq)
;mGoK,O#
%Nzk>&S
KZ(a]z
u"HLbI
JHQ.WvlCz
Yv!"1]c6
Z-"|~.
L$pm#<
.JT!uv5
nI+/Me
*v~mQJs
u-qn\J
*#L%($
zP2+r8zQ.
)*_u~$le
.E(K}@pyZ
,,!beh
e<B-sq
6gU$xD*
IW%?.NN{lIw#!BW
yG)xe>SZ
)$;~ )
4%A}Ox
3\aeu-N+
~!?0Oy-
v&1q[>
vO&n`F
osuvk7
54nq6s
;~ "k'G
KY</9L
^Yf)^T
Iese#(G`M!xg
ADQ@2TGPi6R=}
5483!3
Aa+tA;
P6"x\} ?%q
is}?`xz68ZnH
b6]yBw#Ce>#~
a_q6?G
%]DqU5+H@}N&
*nyl)%+5ad]G
RO&J[~
b{W"z^K
.*v8&=
w.AFyeq
g~yM%6
v`N&`usS]
_Cx:!/
#A(K@x*s
K(\OsC
u07b3+
+FdJ_VB>r[7)
.rASzkX>??3o^k$}
t,7kwij4K
$R>#N4
N2`JBbAFv2]
H)gr}(
EBP@k=!/n
&r)?5r
K7p-f=
v==!vMn@
cuj-b"F*]5/
H|s?b]KK,!/
!A"O8[y
4zmEH}?A
|TCaa~
:}\*X]p}*
>/4gK:~I
[J5KDbpR{x
%*f93;
#yZXM5kg-!<
AI\-$AJ
D;1qix",
[?]yS2B)JnZk
zKpiJ ^
TH+7%t
#5&PTb("#3-|rI
[jV:H(
ye}rIW
vO&,:A
tl^PBA\o
Yv6A01%
yw+Pht(
.lF4@3Zt$
}<]e!lNKaZk
;cvpU_Rmw5=>
$%X<{"
u-qnYJ@*D
p)hB)+
,!%+51!;8WCc
Pg M8f
~/b-qE
Ir~CJ*L
XdxGRL
my*s2>O
Yv!v>ut;
(-#]\P/B
aQHFU
=Z=}D,
685I:J|S+>,
m%<jT"(6|$
!C~<;L
)?YM*h
;x^Oz0
37Js3,{PO
l0IGWz1
TVs}#%\@.1
lnH&%f-s
|HrLKa7
.^m-{3okL
}.]g!$%
t!;M
d;5b-9du='|=
6O@6|!`&8
eBT`v}D
TVTz'0?
Q2A(CPhXs
,!/;{V
+v|N7~c'
X', GNJCtg*
)LXht~|TU
Cm.b@(,!4%
#uZXMPg--<
j-st/<pMn
dO&8582m{N
/@lE!
q9HMPJ
#7FlTX-
Cu{=*7ka!
o?!n1w
2uf"i{"
nF$J)/
!0C)SY\stR<0#
X`v1F:RF
,6.="a`y%7
pIzvC!g
>u-q81;
u)pvk0:d<
FfZ^h/E2^a+b|h
z)|0Yoe3
!zO#Ki
;1):%YRF
<3D@g>)$GT
uD.W-f
Z_B~Jc
DNr2a+
+3M\P.
6-Z5}L
MG.<7/*
j]"B#{iZc
,;cc+?&j>KwbHH#`i82qwHJ}+
FdTx_4
@dtC|>9
tBIyKFtncVN<;I
K0%qs:9
CxH~'1
vO&nb(=<9
vFcqXh
>#HSP
lOjXR'
\AqyXW)6nM=
Au#!:eZE$
aXJ&bwj~
;+29S?&+
s1x}3ny6Z -r
9Y(6wQl__41{x
l;~ "k7
.Vv.R4su
X53N;i*C
H,OgH'ID
#&^l-<J<?8a"m
Bqq3MEBX
!:eZE$
rWbO&Sy
c7{H6):xJ
yHz'Q?
O;Ix4~g== 'Ag
%I:uu:
xj`72m>yk`s
r/+81=
P!Lx4I(
|nIzfk-
[.7~#s4
DXT.~6.w
g >=$:
/>ud8u09r
TZ}toNw,
x0|J}h
vO&85H
kXM16MNE
L.ej(4-N
&5O;C
{nl^QHB]
GKQwkh
Hk3In.$HUE
2TQI=]G]<[?
^vvp<Cp28/
33=6.;>
'dTO~B7!'
:*g.\zYD^q0
:EF4e41
QgJwI&
WTgQXV
.lVIsHZ
vO&856
Y+<qcb
SyFI p`
S5Gs[qNbn
K1IJ|S
gJL@ ~
ORp{1I1J~>>,N+
! 9~F@|
us^H&f?,^4{
AuT%yP
dNso:-ebB
KsX$Vi9KX
)Tj,I3~:
,1,!4%
!es7#Mj'M5
+;@Z\V
vO4nbsz
Dm-ap)-7
f*!CASo
s@vi06SA\0X
K@,U9>B+^:f]K]1,!4%
7/:N.p\
|2z1"sCL,soY
/lt;_<
Ae)e>g
@d~Rf])M@qZ85
;qV!7-D6o"i
2^6>zLzI
c'W$ #8-9
"CL,s6
:dJs?da@
TFE>#$S]0
4[0vZV20
Ah%hsb
M"kIdD
}UeLi%)
6:)V}I
',9sOz
Ijq/aCw/Jkn\b
R^)<9.s
9<@'@Dus&?"TX
g O8Mt
u-q81?'
J3;y{c
7cp==e?6[&F\ccgZF
E^(2JO
]RC95x
R)p`9\$n/
v2>z)$}
a4%lT)V=
({|uq9<Y|
9R%a?G
k$9`'Ot+
vo2O!uLl?5yH@c
<(hVQ]qe-"
*j,A@3
(<}#!c$V
iU!`2oq
f`z##c
U!xtv?Jr$#]b
,,!4%dUO{
&b~4QL
vO&,:A
QBw3$V
0_g2TXpj0
Qr;)4%
f<2Sx!;J2Z~
O&8582J
!1+diB
&#Yg7G
WIO'P18l1VKP?'
Tz~C!f3:
O\XZ(iQzE4
*kr}(g
1^C*L
\$9fxH`
Ju).?|<
zf,F;",
KTtZ"0C
;B6.^f_K
ON{G#[U
NLHPK5
4jcx=+
NDDF)V6
vBzH"fo
e"aO0}?l4MWp!
C*^c+er-B1q
:1M>#w_S@.
xM?^W0'
n=:o}sN
6=j]M4|YHw=%!
yIR-Z:
&JEc)c
*s1k~;Fl
qV|R9]7H=
;wd~aV+a
He6e5q
tHr\OPD
L.mX'y
Z~/_H
O>$s_,7
jP953824rg M
Mk);#X7
d=5I.l
,9>G_C$
!M2#.:N
uM[#B1q
vO&,:A
mkNVo=My?
9C2D0v
[v1*GK
D{c4%e
$qHHT+vtC5}F
b1}g$&pUuK>d
rQ]mgw
*sdi1k.>p
XV)7*_y8
urzEI
>,/|tg5P
Y*,>a_
<g392s
qvin2C&
[{}/=%c>
}Yn,Gr
-Jg-Wp#
|DB\Hx
n_VH2[
czM(WFk
4Xhf,l=x$,^
8u/t)C
49fa[e]s <?]c7
vO&85>
?O2/uBV
M'A^]>*vK}'J
m2,R9sAv.
8aL\@,)+:
@uzB5y81rkI{b~
N8=hN
X$Jf6i3v^zc:cs"J=J6
)J8=]0d<hUGby
//3GOz0
!poV,wk
8f/TZ
37>?og
XwNc33=f6.5}
Pg Oj4_qPw
os%?tJ2<
s3okLVkIA;+
)HZ<X@rr
.|yiNgY
[(Ee^5{
d<ev(i
`O~7qqTw7Kii
{Dgmg5
Cl+E%&j]0%
.<7?Y~
H|F7.K1[C|.Y+X
2A~8C}?
Wl='uJu
UTHHN;w
4%NA@t
IJQ;z%=6
/pJH Bx
q@(CH+]wD%6j<QJB
rPk,I@
A^]>*vK
|VYJdTO~B!wZo^|Na
zydse#e
tRM[?!i
He|V7#a+Q}h
u07b3+`8
/3p^=)
g),!4%
#.27Nmu8
gT6y>,
J!!ttvUZ
;=rNJsSA>
)ih,!ALB
cF/<wm=G,Q.
wd<aN-S
KvOJep-
|,8!';QI
*dc!HtvZ
Kx}W;5^
5neOTVHc
n!NcYh
WRVcIT5
u'sU:.
O&C95xez[+8
eJu!&*
FA?kK,*vz
V4=o$h
:&.Nm8
3gQZ~AjuQ91
LphHXE
20gaop\V
K&)L!3`=
~I.C-G;
<-|#Aw(
-]7{<^kdOA; !:
SUs'j)Gd>D
H>+v*s
5$~&Q|?
umuyY:i>k
K7B^L"sq
*+dFE[&.
vO&858S2B<
"Hxk#+
k>4p?QM*ip@
_r93;<,
;>yx4O/
ILw"`KYiM`cqy;
OBz?!eJY
qy0B5o_
Vg5}h8.
|BMw$6+
U_9<73
ckV? t
h{N%kdK
]R>#N4
A4g4VG
{HGWim^D
/j_kv*v0
<fA#!b74
=Ww<+=K@
:rT6*?,
,o4%-2KDG
!+#[Mm_9
p}I-|SH
8:"5Kv
A|pi)?v\
sdi1Wk\
sX7,Y9u@=H
4vi^~.
1q+Wmy<~:1NfO&
g1h|c6[~X%tilVR
#|;<'Ox
dxD6Q)$^Tho_k
,,!+3M
Oz%C<<<
2uu!:}ZF$aL@i
7|Tye}r_I3
6sqjF!M
v34IP!
O^z1O9
xu)| 18!p<
at*q\->-<
pMzV5:k
\DKgosp
J;QmJJ)CcY
sc=|+
dbcS&-19UIx
^7mTKal
dX'mz5
OYZ :hc6
VJTvz6
WY+NfL$
S'B5"aLJp;s
Vb%N|Jr
tJUBF|\!
B)3Yn.TH*0
yvTPF?
5[e>ij
^@.-S8=
7&3k`~Au^
ZNF[6a]
FdNw$}
3oknG>W^
H@(K@3g
K`o}9fwM]
2,!HwU/<0
dny2-zrGN1
..qMFF@Z
3NH=V{
2/a+BwON
=^sQ{9QV14
^,,4%+
P|~.B.
-qndey2tq<
rk7-@aJ"N+1|c
e)C? >x
XH%(B*s]
dzwNd<I
eNp^ci2=
XF,5Z1sy"
}%@K!>
5p!lZX2
_SEsjH
u{MD0)
/x6S7#
,!NoY[
*cicV-=1}ljV:U
3]\E ,P
Db}hYqwr
5ha|C<
Avj6=
<NA,<xoV
*Pm;.,pk}
>5'+}%pQ
xy^4(5GZm
A++FNQg
4,1s.I
[(I$FPlB7,/?V
(:JWat
2$rah9
uK>:iD' lsIA9
J[n\f[
tWpvoNc
|s]53's0
LrDgKI
N~aC0=#
,9gBH]
KhEWov@aC~
fBA2?!{&O
#-/mzE
HN}$K#VAJ|
.&&b_ .sO
Km_^4
{;-5R|k nbI
H*0|Rca?9;3b#
aaZQv;
w*+)kf:uu=
=[nf,-
%<.CMS
)T'!*E
@DPL[%
;sGfx:)2fe
ZyO'Uw
-H2LXE9,
KZ{Z[Q>Ij
tnJK^7
gs[]S<ikN
'%P@tU!tv`j}7+
6t,_kpNRM,w7K83
E;9lRV=
PN#Kim?>V}q
l|h8.
hR(ktW<UUsojL
ruA7gYo;
*s1Wk&Y
Ss:QGG0
3]\U0(=T
!>Tzs)+
vyqCw7,I
z,hyj,Fx\
2d<*-9
t^Dm+h8xJ
h}c6Kr
MEJX#!
Z;0g%H
Muj-4bB
jH2JHAo
N..FyeqvW
EiH~tyyAai
tB3{'kd*#L
'-b!@tvG
$yvc~K<'
*s1ktl
1\i[GG
yvV:RC?h
WTiRZM
?O9iI;
Vf),V`J
aV,B;y
D+ai~(u+
;:-Hb 0
9lp>$7
]d2,l6
gNLJ$Q^4
-]<o{//8"zf
}og}U4
=M_K(7XV
/=&m$Q
i0lR~e
`$^/IA9J!tJ
N1)$XV
IvOm8K
P=-,~j
O)mjV0ED@Z\@(X
&"wD-
Z:hyc6[*ad\
`A\$C)9
0#de<Am)cpd>D
,;ejB5/xmMQ2
N#K-k|>}
,<nq5s
hA|[H_
Z!D5)|iX
s{Nu}q=e*0>iY=
3?;W&koA(/
ilyy/<cAu&oMu=NE<:<
.W$.L[9(
-qneHh?
1qNnlyy\?
@.85*s;o~
x|tnIQ9+xa!
N%5Z#VRt
J0ZFs]53?
Q2Y6$|a}
k>jS7Q]seo-v
| 18!p<
c~{T-x*LjL
PIc>H&SkMd*L
+:k>wz)?6
*s1k~SZ
S,gHb1-sM~A
$.qH-r=
HYzNp-qneHh?
O85u[8Py>"t
.k,FP7"^
ryNtC}
YS{?4%dr;
MZr6a+HD"p
>P;=qE
tJonZ{
aYwTXpl}-
H/ej5hy~"n,w
k9~6*)>#
~<Fj2I`+{@
,~N#}L
R~iZ~,?L9
,wDR}J
SnW=O>tvm
2CPW,6=
%-'-3.8=
v"$z9~aw
v.1,.D
Ub_5-s1q
VzyJL5tO
B)V."#H
N~6@=0
*s2>p|,
^]?&vK
9<7+@@}K
?>!gviC,f9
{&$)[
?P25yK1
}l?,@kG>t
hOE2]`+{H:
/|taBtv
|076A\~<
@ NAeZ
n"@co@
4XO&fnb1%b8J<%
!B)XH+
Rz-s_g65+
%-,'aL
RWN(iBR
'\aDF\
j>wN{=$|
7-oB!\;,wU+X
8FAm{](<S
[r10;N
e!uv{!
[c<Pb{
W_F*'Z\1
H6UEf<C
:>>!-Yw!
v? *=+v
6DGc0.
+8QyJ3>
^9H<>+
>HJ*s4
6J2>KN
qI^\h7_
#`#57<
JWoLM$Z;b
[pO85+:%=2!oz
>.#5@&-yM
%-,'aL
85},{Y7U6s
a/*FhK.
4p!>tG
*_2>UN
T"ImA]
V,!*%V =
!+#Y9lw7A#u5+
WpvLh-
vLr^sz
J<?8a"^
!@(CT+tD%r^7
"P1|[K
gO=I[>O
w{\R4@QLR
nb,:< ~;z[
Q>#p4;n6
*'^.1 J
G~HbwM
TVs}#%\@,X1]p}wd?qtnHh=!i
6?&V{Xtk
F|GFy)cx
.*vP9&
tJ;i5K
!zO#Ka
ph #qYx
8EHx=~c5+
^;g0(d
@,gwKd=lFs&
/UhHY0
~%UsM5H@X
yMmW"iDR-
)CeZ|'
N2`TJBA
*iMio&
WqvNL$
5_5-s1q
"kYdKQ
JDCC}Zkc,soH"
?>!gziC,9
@lZ\@,
s(UB1q
-7>/ow
0Ve<hUMV
kXI?6D!Jw
)6(Abw
M~5/s~w0
mrHv%=
@2,qI^[4
k[vvi%/q1^y)~`XZ?QS*
)A~J<y[r69Rog5
eJWiL&=tP-v=
2$rah=
dBsjNn%[r
A(?C(s;
+Ous=1
vf~sd:NAw
)YiL.1
c?=Q36XQ
@BH${fp#'
!ytFa5?jp
0W!]\qH
(w]1,!4%
.3Ie{^.
:aORx~
OH?+F*s
Uvkb2_&
UjN#=1
v`N&`isS]
_C~6yM?j
Q)tFw2i`+kDx
%V2PV=
!DV?!/V
7tW])"65u[6
6`"g{z6.dJ{W"
rHs1.H(F/74
Ka]K|9!Jq&!
$(tDg:
6-\XS.e
!@]Fr8#Z;S
So}h@2o{45h^
O-j8@e
?X\X7"
#]\PMMo$
Ob}-d|C$
k 46#B
]!2CVnsL<C1
/7qaXC
5i4%a!;GiwRgv
se#5+qQz
k2-sq
<0ste<>
sv4MC~
E@sQ 5
;sacF-
_h6J]}LO4
~VcA:?u':
^y^<T5gZkg\V
r&&j_oC
zyc9e<
(i6Z1}Ib,<^fSs7
d@`Y4{aJ0
He}U2*
,Hkv~F
[m]N8
,YoPD6o8(wRoN5O
O&i^HQj
i]$k.#&
o(;wy;
:=O[|k
\]-I#ud:
v\P.@=
<'A+/Sk>
DHcYlJH
K,=a9f)i`yl5-(ACsaRWl0I
.MDVsr
I=1yU6
<0me<A
+mOD%6
_g7C9\?
T]d+oo;
IMtT*}~aqf
7@X]Rpx$>
yIQ184Hb
j>5AaQ
5A(CtHv
1,C3u)$
4T-1sI
fxf:V v|F?
81rpIvP%
Bw3JQ#t1<\)
{0`mg5
.RKs<A
Xg(Y<`RjW55
'rp^u[>
;{,UK!B
$Y<`RjG
3A?=x_
WWaZ(aQ
:qa]se
fJuDte>7
kyiNSYjR5/ssc
JLWorZ(
SwxF6A)$
AnMWeK!Z
e:X?WaH3oq
vO&859
!B)3n.
S!R&s?jyxS
E{s2>O
*vt'7'
P=UFI=
,q-O~Y
u-qk9s@I-s1q
o@,w6"o
^6i^,\k
KZkz,o
\/URP
OZf:FC=
u-q81kV;R
!Cw"XsX
{{V5Qi]cf
Ms2654<ZU-
vCs(Uhf:G
2nF@c'
@A|,Lk&8)t7J`
F0%/%r"K
(/Qs9M
[jY0ms(
5%K}iW~%UK8
?571qv
4|c-:7
+f gn
K1rJD*
>e"szNB!$G
3G)iW8X
24@="b
!3HrR'
*1Zz0J*
J,THr!/3
<N+.j^6
;%+:-U
9g=,og<k
]Hr'%>W+2>IO
7:"$zeM:
vO&8582
>2\szNEJ
C2emg7-6
->9u$/
tFsm"L
#1pGjJHC
.!@=GZ
"Mu%gAhJ
gb +;y
yz|l;!
,|~YHa/
X5B5$Ja
!Tt}]P
e>XEox}B
G>GnoiV6
3sT)'&
Km2h0~
;aV/.rT.
7G@6}sO=efnh=
^Rw3>~
FZ56._<
j3#%#7Qb F*
!OFSM?.
tnJ`@ki]i7#|
?^uH=>
Nw)|]J>#E
FtVPT]
t^x2[!EH
Auo Qh
t-<|v+
-b'J!{wB8r
!ubLruu
.CKjA:
/Cp.n2.IK
hIOTo\Z=pS<
6Pif9=
J2a;4J6
vxqJu\"
H{3(vC
qQXTh@_iVM
T%rN\H
dn+nmH
6Xij:=
\dN31oo.e
<7-H,:{z
Rg)yX{Oq
|cd4-D
b!ttvpf
dBwlj3l.fP
V='H[5x
y@y7Z3j?,lnHq[
N;+#Ku
I.yYFw
@^Z>z$Cw
snN#qG{)k
}<)t|V3oo.fX
3[='cS+h>
)sX?)g0B
qyCy7Z<j
9g=nd ti
!-r\W,x
G{)kCI
$F<!/=)
'mq81=
"z02)8
f g34
S+s_t61W
5hvg>+/
73ADC&=5.&/gH4
|BO=?m
O&M~/`
gk|R7c
xKhJ)[1f
n~49EQg
6b+gW@
]pNRA(w7M
SO zyiY{(-;
Sim{N1
H2[LE3t<b
aOt&RR
0L.cG
vNc-=,:u
+`v>y@8s<if
&>^J26
J!6u5
u-q81=
(cX6s4+`
"Q_S6H"6'dL$
GC7z`381=
c1`3{YpFLSxAC]
5$cA)D=#c]
&3FK2C
SA*st|O
G*v'Qa
u-q81=
uJ181=
u-q81=
pMCj-T*O
]l]C6W!1
5%~}}v,2d#
\q CH5 3qB
ZM&%85
-L<I=j
!>,>F
)$Zl{8
^Kljjx "!+
,, Y4$
."bH<'d<
,,!4%aAa(r
tMg5j1Xq
3q1rQC_
aY^9u$ahi
_fDH2qiC"xTjYM~4qwUPGQvDCSABO1dW|;*@
LfwAk6}\
yGL4{-QueJ4~v
qO%OQlZ\inrKc4%
;Fcjpwc
ulIjQ<0S(YH
p4'lf6fc_kOy7W3BsGCW1
K3orp*eS*VA
s4 5dCweomt
t`MQNocdTh,1cu0\Edw(ecd9k6DBa4]
ldLF4p
)k,!4%
!lGC?Cc
N#[\aBl(
#SLpH(
H}OcS7
-qUslC9-sUZ3
vt;dhw-
"eXQ[c./*;cm
mT&mM)
*sB|@#)$aA
znfbc'4%bc@tCb?!ep0^c%N#
fOS7-q81
*s2>@fAW6~\OG*vK
QS\964cfEf
2S~A]]{/d'w"oT
QQxhc\8c(k{Dy:](d3F
mTv}O[OJk\
n*cW$cC
\E=QDS@H&$
21!3[pBA!]
tDo`qQBc
kDa= xPdFp5
2T2MB4
1|@s>YA'6
>MO_Orl'~"n*c
!<SXHB4yf!_
FpC4rFMf4
w^^Q?D+Ai2>O
OVl\\Xz
\5lQQOVcH4
O729s#C
wL7tn`bchc[
saw0cLk
T*43wqP?DA1
{@fAY>\OGM4tW
JvONnl\n17g]cxC%pc
QSZ4Cfef
7.39C13>
JSvAU]ud
cU\;Xc`k3D
.]dFUq
CBT*M@
Q$A12>O
,,!4%Wc{C
SIQxtH
9\lQz
u-q81=
ujtVfY0
ZJ12>O
G*vSyH
t%MMn^la
!N#eQiM
$L$b-!=3X
!/*+cK
Fc3_(fDr
n^l,!4%
<K9~adgU
YxER@n
FD'@,{v[vD0F
+kMF+scC0
H2_tu{X}iV4T
#*s2>O
hWcwcT
>`I,!4%>
u-q81=
@`"Mv[
!E} c.CH
!3 D+3/5
r|mXDn!
!FJplu*
7^I381=
bSajpa^u$`
zwrUeH3>7
!NuJO=W
w(ZL$kr~c{
}KYp-Pjdyn=
X)$dnl
eh'u6.=)k,!YU
tJ`]kvI
mRNF/S3{4
CB)$oaKfz
uxZ!~v
tt{gv\
2fD+M_{4
IBnA_|
msrHHAD!{~n|GFYy
w'e85iZ
wN/*$@.mpL
0EB)Jj>8HO
GsdEiqOj?
*g2;OR
D47URp
L]Lw)o3"_.m
Ync'a1
_V%7O&}M
>,W|U^QB}c/*
!B)D>#_xf3D
lRa3e1aA
c^unS\eP
Pv{j7G381=
bSajpa^)3t
LLH|dOYF
Cz3$~#BdC4^
,VYO]g|c;
2xcN#1
M51q3A3!
vO&_^wo?}t>,
J!\5a(i+F
fDrAVrO6#8t0
{CYq*spC$@Ef
n$^laeaA
rabbb1
FZ~fA f
11qr&Q
6fumvl
bSb8`/*
!,]!DSaH
FC3~Bd
C/4^_3D*v
wC]llP\
,,!4%c;
!c^^un1SQJ6dd
2v@NDAy]
vO&85o
uaiFc_(f
51]BJQW}D6
*s2>g@)$
HtMMn^
AV3q1+r
Co/Q$p5
C,k%D>#H
S6SFC3~Bd#C
,,!4%c;
!c^^!o1SQJ6dd
y4O&85
!j a9^YuaiFc_
f3Dra!@
g^A:Z12>O
G*vSyH
t%MMn^la
2Kw'Btl~.
X]IHx4
vlS#c6
JY#N?w5
!,]+:D
FC3~Bd
C/4^_3D*v
wC_lO\
,,!4%%c;
!c^^un1SQJ6dd
2"@EAue]
uaiFc_(f
BAzDEA*s2>O
6WS)H(tMMn^la3ead
q9E{QT:S
7-qqcA
umW:w>,Ja@vQS]*
J!=u-wwjcB)J
6SuRSFC3
t^_kw^3
OK6O6.=
?!rDa2c.^
uh0]CRoD1q
2r@NDAb]
vO&85Zo
uaiFc_(f
As{DOCA*s2>O
6WS)H(tMMn^la3ead
hb:f^l
FX!SVH
AV3q1+r
J!=u-wwhcB)J
6SuRSFC3
t^MzfF3.clf
SQJ6dd5]MW/4-q}
~4O&85
!j a9^YuaiFc_
f3Dra!@
aR|7@)$
tUM#M.n^laea
M(OhH2cK
Er1A:V
O26suRS
jC)$ENy
6.E\wn,!Lg
x`TsI`
'<jH2lo
Wq*r+CO
,C6.Hr
Y4%bF;
vzRL%:<
=M/*:SK
X)$ts`
,C6.RhlI,!4$
vzJL%:<
=M/*?O2
CB)%hG#H
<E*sZK
4vy&l6.=)k,!WC
xhz{Xg
{DRorTz`
jd"VG{eZj}
4HAE%G'
Zah[cnuw\c;
2f|*v#{
,BOG%rS
W2?!vF}J+FP}to
%$@$I~
65,_A>
n@T@E
*#2>OR
Rp=L,n!<V
"O`}M/*
Y|3@),bva
}!DfU{`A~Q<S
`DNF)D"q
9sRPHc
Fe,bcu
O&)$bzy
{U=#![oKEz
YO&N9\w
&u>#AZ~R\GY
xjmjEY4
&kN{gCMH
!Bf[{OFx
Ms7BC-{B
PvxMLO#N=\}`w
&u>#XZDNQ`
6VDoew
#"(|mo<Z4
HhhSva
mI JCB
yAu-y83=Q
-rsq`s&P;B+^
mcR`ck
Gb^GgE|s|@WW
7tSRGB2U
CeBq51_$D.7R"I
ukL7Lo_Jm`d`S@3`ss
o RP}Kg7Leje^\
L64+3>s;C?*173b
4Cdj,wo
cD=h<XcX_\
%cW ],d0
3~BdC4^
J26dd]
21qMtzp
5uTG}ai6
aX|@)$
tUM#M.n^laea
AwarD"`N#tXi\a|I
7-q81C-s1[rvQ:C_
!jx.d$l5
CxkD>#H
6#u1R6SFC3~Bd#C
K#OJl=
SQJ6dd5]MW/4-q}rNrY5_
2r@NDA]
vO&85o
uaiFc_(f
As{DgA*s2>O
6WS)H(tMMn^la3ead
q9E{QS
7-qqcA
umW:w>,Jq_}}R
RSFC3~B
Y@fca1
_V%7O&}z
!B)D>#_xf3D
4C^'l6.
fnnc4%
Q(J6dd]
vXe'w"o
SFRGSB2T
tZ;#G4K
4EOGO6.\
SQJ7geeE\L
uy&LT=
7tSRWGC
LCLo_Fm,!`f
?!xspcN#^Q\
vd85BlWv
l#bSaja^u
tMMnb_
lmO`4%Cm
2pcN#Z\
u-qDs=
2F{PJC9_&6fumv
J!JzT
B)/n^ac]
5SFS'F
C3~BdC
HuLL6.iN}EIO4%
O'7-q81=
vlbRak
hFAkbC
*s2>c@f
HtMMn^
S!PHKc7ddw\
Lw4ZC08VpR@FB2_0
Q^Byd^}78;g;Mtm`w$Hmwc
NRm`(Vk
J!Mv[
!B)onaw]
5SFS'F
C3~BdC
4j_E6RdIugLL
HoB_qmS`\dah`4D@
`}s`rb^_Ubo|RL&PNK7e1euj\$L
pK@6[2I0
psfP:UB
1gkEtNcl
!{y#O"m5
CkD>#H
6#u1R6SFC3~Bd#C
4^?UD}b7W
R9KI8Pu
L^zo4q_fGma`4%Ci
_mKS~2
!69n\Ml
4/fL$_
6fu>Tlw^wDvm
Gc1~R"X`bk
_9VtS`B)
B-dC4^
E6S)HtM
LfoTu_&Am2d`e^`k@w`XZs^`N#e]xAv~
NPJC9_&6fumv
^BgsyE
Ab12>O
t%MMn^la
a(Ys^`b
PpKA7g\e
cQ3kp
B4O&85o
uRSFC3~BdC4^
IQkOI@
!,=Ocp
veQd5]$M51qA31
cqR2`Xk
`hGbs^
O4uGRx
aR|@)$
tUM#M.n^laea
SQJ6dd]
M51qA3
6f85Jl
bDJcjADzf!/*hbM\w
@JVrO"6
3$~BdB5_
HuLsL.o_m`Cdq`D@
`sd`bN_uo
$vc7b381=
bSajpa^u$`iJ
&7je p
B-dC4^
E6S)HtU;LB
@2zb">
s]!"'}"
u-qPs=
2PJC9_&6f
ajP`^5Jd'[
&R[BH dPFp
Cz3$~#BdC4^
TmzI,!?YwcxC
JB6'd!d]
F3B*sfr
7_:\OG*vK
lRa3e1aA
c^unSQ
:A|{tc
vd85mWv
l#bSaja^u
ba$D_dnsX
HtMMn^&la
!oTZReW
"bQxE\^9H9
C@koD>#H
7#u1R6SFC3~Bd#C
4^OD*vAld
M51q3A31
lRa3e1aA
c^unSQ
C-qww=
:J!'q5
WG<mw&0
c1q62
=M/*#MK
59!B)J
yB,!4$
d<Ftl~@
MoqLz1:B
^qkyO&TT
65icGDa_J!'
gSp*s<{.q
M@_D4%
qcN$Pm
O&1pmH
o|,3M"1PgR
9{_~BB)&g[PH
f`Zs2>HVH@I1
kRN#;Ja^v}I
m/ut>,k
EwFUhsp>HA
=zQrzE(!5%GB'
m>Mj\ay
viAl7:Q,<Db
u]C9%K
5ByJ&>#@KbOCh
IYZKO{
,-!dF!;
Akdch181Q`
wvr`Kvq
61x|MUv
{RB)_R
MW+kzCba-@RVO
t.:]}_,!'qy@
tc\UzF
,ET61x{GW
{RB)ER
uuSl+p
"zO{bZ~DF@
Of^WUA]KvHeKF
{RB)[R
WO!lyU_v]^
,,!#qzN
idMDvd
"|P"@kIb
'B2x]qesKn
%b_O,
'<jH2trreNno
82v[;EB)J
iU^w;Shsnd=
,C6.Hm|^
^e^UrQ
g$L%:<
:J!2mqFmE)O
&_$:[y!h~
k*v"ejgzMr
WWQd-r~
vQX`gD
JX&D.np[
WO&pqUWjH2
X)$xoc
[qj,, <Y
!RmQN|B
yFXCaR6
:J!"rqZqQbO
jiNVH
'<jH2trreNi~
!IhRDp
kS!T1z9
0bNyz
C-qVE[`
v6UVFmD
pUJI`P6
=M/*$W"zmR
!UwVEa[
.R-JTz
v6UVFmD
wZXEgCZv
:J!%hvQqS6
/eWFr?c
eeS|huY
<E*s\H
C-qVGTeB
p^e__@
$rGS+~
eeS|huY
k{kl*vK
\rxM\!4$
WSwAaU;SCj"
-q80<I-sH
WH{PQ3z@
*w}Y>s-D
&cLL)ryRQt'BluqwZj
UrLRbG
)1R/+
=Fk!qy=
twqvkZ
,C6.Dm`__N
2|H"FU>
$5Wwnb}u
80<I-sP(Q|z^q
w'e85g^
xEM^hGD|
kT>N0O
&Iw&A~r
k*v2`m{kG
Hmb]`z
WXr-r~
"XxcOZD#L.lm
iU^w;GcnncTbi
k*v2`m{kA
~OHxZLr^h@+G1
(PquIqe
w'e85g^
xEMZnPOqzE/*
J 6u5
@&prCBa-V
jeWw*s2?
X)$pqc
w_BRGS
]qe@c|
aAB|wM
8<pAqTl)J
dJ^wfAndsdIiu
R{\@vV|N L\
,Zvrk5
w(ZL$mq
![F$Rem~F
&Et+S-oy,
GQxDUn^Md
;W<Hxie
kNd6>-
AYdR;jkG
$^lmuzI}vVf
X)$eoc
Y#R$jq
dJ^wfA
U!SD6A
Y#R$j?C
'<jH2ymre
Dnf,, <Y
!UwVEr^
.GnSA{u.
bWo|u}s
Oj77 V
i(ib[/n
k*v"`jf
!OmQR=A
}U*FCl
!K9j}h{
=M/*8Skl{\
<^cr2eR
<E*sFL
0b6.=)k,!FJ
eURrZ@|\
C-q]BOb
(Tqu,
eXXCk"6
.upAsQ/L
&Dh&A#ry}Ifw
2`W'GEla
v*GVRlB3EM
Fc`D/*
J 6u5jM,Z
duLF&pqBW
{L|`sYq
X)$eoc
Y>kMCOFW
:O_m"]av
ZJ^Ou
!AA=O9qmAjXb
&Dh&A#rwxS
*f[Kcw{
BwV@gK
g$L%:<
eY[HfQ6
:J!?rqF
.hZP:k|O0
t.=)k,!uq
u-q81=
u-q81=
u-q81=
,,!u(&
v-q81 !
uX[%k,6^
/;"C#&y
v:5r!2$
uzV%O!6<
"5)P"Q
*sH)=IT
,8"C &q
v|8r.-2
uY%.6
":9)J\"
/f5"a-&U
uVT%85b
zloLE7KTP|
\pgB,!QQeS
OQ\DZV
VTpd\wZI
aJIcG6Apg
Jb8{qQ
!']&cWM:
uuj.th
={)$tw
Sy=YMCCM
!^uQRv}
#1YCkC
pEL$||}a
2sbXUbz
-dS[xjC6
GX.!KR~YrN
B)%exQH
=Acens=
ml|E,!F@
Uu?!vA
KW:#1MIXg
/E|~~c
wzcEwvsj
B_@lVX
ujD8b?wsf
jHB)?j|Z
QvHehBnBHcY
Eb>OQ
w.=[c~CT
|B/MPyM.
(vvhtH
]BOb-sX
sdQYj"6PuU
#HXFCYk0s
Blwn{u
IkO@O!4s
}s?!z@
LeX`-sT
aF{t^f
FEJ!.jmP
RN.LJUjK){sG0
hszwIC_v
!Br~Mpa
gO+M1S
=s]GxK
5mF+]8KJJ-PuE0
~uQsTl
thZjbX&
Wn?!gc
|X(LPjb~pv
uY"q_Ol
amX{W6
G`JK:!KYRZ
rD.L'c
Th'^xu2r=ziEpY{w
F^R<0
u-q81=
*szGzFO
u-q81=
/zGzG`Q
zGzGzGPQ
zGzGzG.
$zGzGzGzGzGzG./Z%
gTGzG("
zGzG(2
gZ&^GzGzGZg
zGzGzG;4
+zGzGzGzGZozGzGzGVg
zGzGSizGzGzGwMzGzGzG
5zGzGzGr
GpOzGzGzGzG}
GzGzGzG}
"{GzFzGzGzGzGp
"nzGzG
GzGzFO
zGaWtV<UzGzFO
4VzGzFO
7MpGzFO
,ig@zGzFO
Xh@zGzFO
<KwGzFO
l(-UjCu
zGzGzG<9
zGzGzG
zGzGzG|9
zGzGzG\9
zGzGzG>
zGzGzG>
zGzGzG>
zGzGzG>
zGzGzG
zGzGzGt>
zGzGzGT>
zGzGzG?
zGzGzG?
zGzGzG?
zGzGzG0?
zGzGzG
(zGzGD
zGzGzG|?
+9&zGzG@
zGzGzG@?
zGzGzG<
zGzGzG<
zGzGzG<
zGzGzG0<
zGzGzG
59GzGD
zGzGzGx<
zGzGzG\<
zGzGzG=
+zGzGD
zGzGzG=
"zGzGD
zGzGzG=
zGzGzG8=
5zGzGD
zGzGzG
zGzGzGd=
(zGzGD
zGzGzGL=
(zGzGD
zGzGzG2
zGzGzFO
zGU*zGzFO
>zGzFO
zG7GzFO
zG7GzFO
}zGzFO
}@4zGzFO
zG%zFO
zG7zFO
zG$zFO
5zGzFO
5zGzFO
5zGzFO
)zGzFO
+zGzFO
%zGzFO
35zFO
"zGzFO
"zGzFO
zG#zFO
#zGzFO
&zGzFO
&zGzFO
!zGzFO
zGzGzFO
zGzGzFO
zGzGzFO
zGzGJwJGzFO
zGzGJwzGzFO
zGzGzFO
zGzGzFO
zGzGzFO
zGzGzGzGrFzGzGzGzGzGzGzGzFO
zG7GzFO
zG7GzFO
zGZG;)
zG@g??
5JGvGl{7zGt
&zGzG`Q
GqGlrGlvGljGlnGlbGlfGlZG
GzGzCzzGzzO
)zGzG >GzGs
>G|>Gr4
5l>G\>Gr4
0<>G>Gr4
5x>G|>Gr4
5>G>Gr4
,>G\>Gr4
5>G|>Gr4
Gz[z@zzF>GzOzEzzF@>Gr.;5
CzzDzGzA
&zGr4;5
CzzGzzA
&zGGzFO
zGzGzFO
zGzGzFO
zG3C7^GzFO
zG3CyzGzFO
zGzGGSG{GGzFO
zGzGzGCGKGsG[GzFO
zGXzGzGzFO
zGXzGzFO
zGszGzFO
zGyzGzFO
.zGzFO
(zGzFO
.zGzFO
.zGzFO
5zGzFO
"zGzFO
+zGzFO
+Z/zGzFO
4<2zGzFO
>5zGzFO
.zGzFO
gzGzFO
)zGzFO
)zGzFO
7zGzFO
7zGzFO
7zGzFO
2zGzFO
*zGzFO
&zGzFO
+zGzFO
(#zFO
&XbzGzFO
#zGzFO
&zGzFO
&zGzFO
.#zFO
5GzFO
7zGzFO
(zGzFO
.zGzFO
"zGzFO
&zGzFO
4zGzFO
.zGzFO
(zGzFO
"zGzFO
)5zFO
2zGzFO
gS}_4zFO
5zGzFO
(zGzFO
(zGzFO
5zGzFO
(zGzFO
(zGzFO
(zGzFO
7Z!4zFO
5zGzFO
(zGzFO
(zGzFO
#zGzFO
"#zFO
3zGzFO
&zGzFO
5zGzFO
GetLastError
SetLastError
GetTickCount
ExitProcess
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
FreeLibrary
LoadLibraryA
GetProcAddress
DeleteFileW
MoveFileW
CreateFileW
GetFileAttributesW
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleCP
SetUnhandledExceptionFilter
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
FindResourceA
FindResourceExA
LoadResource
SizeofResource
LockResource
FreeResource
GetWindowsDirectoryA
CopyFileA
CreateProcessA
GetVersionExA
CompareStringA
GetLocaleInfoA
EnumCalendarInfoA
FormatMessageW
CompareStringW
TerminateProcess
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
SysAllocStringLen
SysFreeString
SysReAllocStringLen
MessageBoxA
CharUpperBuffW
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharLowerA
CharLowerBuffA
GetSystemMetrics
MessageBeep
kernel32.dll
oleaut32.dll
user32.dll
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING

Process Tree

0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe, PID: 2236, Parent PID: 1808

default registry file network process services synchronisation iexplore office pdf

0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe, PID: 616, Parent PID: 2236

default registry file network process services synchronisation iexplore office pdf

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 57665 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 51758 114.114.114.114 53
192.168.56.101 52215 114.114.114.114 53
192.168.56.101 62361 114.114.114.114 53
192.168.56.101 58985 114.114.114.114 53
192.168.56.101 50075 114.114.114.114 53
192.168.56.101 58624 114.114.114.114 53
192.168.56.101 62044 114.114.114.114 53
192.168.56.101 62515 114.114.114.114 53
192.168.56.101 60330 114.114.114.114 53
192.168.56.101 61322 114.114.114.114 53
192.168.56.101 62306 114.114.114.114 53
192.168.56.101 55142 114.114.114.114 53
192.168.56.101 56111 114.114.114.114 53
192.168.56.101 58005 114.114.114.114 53
192.168.56.101 64558 114.114.114.114 53
192.168.56.101 49986 114.114.114.114 53
192.168.56.101 65527 114.114.114.114 53
192.168.56.101 62324 114.114.114.114 53
192.168.56.101 55457 114.114.114.114 53
192.168.56.101 63148 114.114.114.114 53
192.168.56.101 55773 114.114.114.114 53
192.168.56.101 51209 114.114.114.114 53
192.168.56.101 61491 114.114.114.114 53
192.168.56.101 60789 114.114.114.114 53
192.168.56.101 60789 8.8.8.8 53
192.168.56.101 59504 114.114.114.114 53
192.168.56.101 60395 114.114.114.114 53
192.168.56.101 55469 114.114.114.114 53
192.168.56.101 53131 114.114.114.114 53
192.168.56.101 58818 114.114.114.114 53
192.168.56.101 65012 114.114.114.114 53
192.168.56.101 50445 114.114.114.114 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name f5305ae5c730e71f_0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
Filepath C:\Users\Administrator\AppData\Local\Temp\0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
Size 275.0KB
Processes 2236 (0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe)
Type PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
MD5 355924f844f7204356e77a232011680c
SHA1 e65817153ac187e478e768ab00d0f04772ba2c1c
SHA256 f5305ae5c730e71f6d5fe4d4980091d135cefa6c3678d65b4ab7d8b4ec8ebae5
CRC32 B845724A
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 0e4b4c04f4ca4279_old_0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
Filepath C:\Users\Administrator\AppData\Local\Temp\old_0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695.exe
Size 275.0KB
Type PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
MD5 ff01ea04b177627f8e4b2ada8e9661ca
SHA1 af13a811d2a1ce126a61b8d8d8c93734c64bb69d
SHA256 0e4b4c04f4ca42794d1d45bb4384df674f432d1049e180bde846e2b72f8b8695
CRC32 F4224ED7
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.