MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 8a47ceb71a8c6d0235801da38d9faa0e99a4c8ab784765a870e53ceff99715da. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
LummaStealer
Vendor detections: 15
| SHA256 hash: | 8a47ceb71a8c6d0235801da38d9faa0e99a4c8ab784765a870e53ceff99715da |
|---|---|
| SHA3-384 hash: | affa8f70534d43f53b60a8678a7296c01f9670f8bf2c9ec7413a9f3195b4dd223b4f4839a93c5180b1fb86f57a6bfe84 |
| SHA1 hash: | 18f08aad117c86aaee8a49300ce17fb796851357 |
| MD5 hash: | 69e7c1fe70ff8f139aa6fc983d07bb33 |
| humanhash: | fourteen-rugby-paris-uniform |
| File name: | setup.exe |
| Download: | download sample |
| Signature | LummaStealer |
| File size: | 1'064'636 bytes |
| First seen: | 2025-07-15 13:01:07 UTC |
| Last seen: | Never |
| File type: | |
| MIME type: | application/x-dosexec |
| imphash | bf95d1fc1d10de18b32654b123ad5e1f (327 x LummaStealer, 65 x Rhadamanthys, 25 x Vidar) |
| ssdeep | 24576:ZzZZCN7VwDL66GXtAvNRxSG1ZUb/z6gnfHgHp3mOJDX4wdT:ZSN7VEfGXtAvNSG1ZGmgnfAHpWy/1 |
| Threatray | 1'092 similar samples on MalwareBazaar |
| TLSH | T1FA35338978708C5FE9362E31B9BFA62BBFBB391468B08BDE2750C164F043145563F661 |
| TrID | 47.3% (.EXE) Win32 Executable MS Visual C++ (generic) (31206/45/13) 15.9% (.EXE) Win64 Executable (generic) (10522/11/4) 9.9% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2) 7.6% (.EXE) Win16 NE executable (generic) (5038/12/1) 6.8% (.EXE) Win32 Executable (generic) (4504/4/1) |
| Magika | pebin |
| dhash icon | 68589cc49494c0c8 (1 x LummaStealer) |
| Reporter | |
| Tags: | AutoIT CypherIT exe LummaStealer |
iamaachum
https://uploadfilez.info/?xgn3KvFM1j62QLVGzilqImepoHsWJY9cN7hbdO5P=uKkc3PJ8DEg70aI2jdX91VLMvAoWUCSfheZ4YsRNGHm=AmT4Usz9ujQYoIakC1SJpWqNgi7XbFZflHO8PMVD05twxvy&h=168 => https://mega.nz/file/mpJDlR6C#yHmnoG8juzSY3I2ldaJlwTeEc1qQ22bKaJ64vcLT9ysIntelligence
File Origin
ESVendor Threat Intelligence
Result
Behaviour
Result
Signature
Behaviour
Result
Behaviour
Malware Config
https://prvqhm.shop/zaus
https://sorrij.top/adjh
https://bardj.xyz/tieq
https://annwt.xyz/xkan
https://ungryo.shop/gnbw
https://greqjfu.xyz/uhbf
https://vervzv.xyz/xmgr
https://dryzc.xyz/apxe
Unpacked files
3bd35fb24ae69b7d8d706d563fd42f012face0a21ff163b99b0f9574414134fe
8f803acf120419a2186bc211caf891ede0b72fdd547a10b2782ad9c5f56e12f2
fcd80c754b610021ea32a499102db0adaedc807cb9a77cf1424ac82084b63d8e
2e48ee0fb3ddd63efeecd900a9d2bde365e2fe1fcbb3c43c882362ae935c5066
7c4580a23caaebf1a6bf1789f1ef4fad53b72fa736a7b11eb3cb70a089d34486
2540722d53870e6dbe6fd73d56b3e12c20d9f4c29fc6d325d6cfd471d8e44ea0
0dc7dcb7aee52ecb97e675245cfa0ed41766a30a8ff4cc58f2cc93c996d0371f
26f646d3421e38e040ac32e608d52cc1d6344ea2179ad34559c1b41a5e1ffc31
d54259b35ece6e39b159317128bfd62f88abbaadd92537379c4bae078e82fe69
67b12ce7540c0d01a9ff199865acab6b5643aa68ec1bdd30c0a8c78809a1ecc0
61c0a64bfe9888a239b36e6ff9ca4a146a16cf8a8a6cea73c192294e95c60c19
ba8ad71556375d29417be19522a05af1201d6993670db0325d2a0e0a7eb430db
e090769b89bee3e8ab4a316355fab8da61f629b0eee9da37c0ac312bdc20aad8
4e5fafffb633319060190a098b9ea156ec0243eb1279d78d27551e507d937947
af9cd831104a7d0a352cd88f77a4cfbdde43804b5225002fc7115685d2c6297f
10cb33f00f0883b4b3f7fc7d1c7ce08c0f0a2dd3c14547d0e4ac178011c04d93
f1a371f40f50bb0c9382f28ec5d415d07550cab72b1211d4f3e0035252798db4
b9c936992c244ab9864cf92bfe3365f7316b306846a4827aa91740da78dee813
08bae1bb8a881ff6a6a25f988d73def21b6d65d262960bc4706534f479b85b62
a1a6f9305ed45119476ae28d678f6254fb4dd149b2a2db7b8588a7701f17f1cb
023b8573a4295c5f78f6e89b13062e5c185d74e57d2b1c8ec066393bba87313a
f5ad3ca6464635488824c3e5b6284ca263e7c6417ec854692d839a1c008d5e23
00f978e0084f97feea64023458b25795b3dbd2717ccc2483cf60f6aa712d0556
2027658fe07e8ef66d192bf1697cf0d9e91f9813ded69da4408747fb3724b3ec
9f95bd935ada8459dcd4a6b37a40ebad39c2c7ad024959cb73c0ba6bc814e26a
f144e645673a830c564b7d50b6b1660767a488059874b2a60a47b8d098bcfc78
4c18e24f4f804739e9af4d393bad232e81e14329d578c2f36c285046c4c9628e
f8615202ee1e9ccb7509f98c643b7bd6e01e439c57b78fd547cf96fd27ec5a47
89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2
131313b1f68179ad8df9d3bafc0f14c07abb2f3652067c4c1c6d0e0574fa0d54
0da872d62bc25e38d6eac1f6d2f35f8301dfa06087cc68c50ea93f326f934b8c
5f2c26e780639a76f10c549e7dea1421c4f06093c1facbf4dd8cf0a8b2fee8cb
847c28adfa050608203f206d31cce27f1f27e89ab138908473c8c69ccf388ca2
0f9003739fc0213ff837f03f9c1ce4c835e3aab255c94d388aefb9d9b985cb2d
88bced6d92559b9ea1974fd4329868e68c104eb58a976d65b9df8af32bbd2400
47d48f2753f7eab065480d9b125c1429a7943ed1fbb408e3076d7a3e3102bd0c
b8e176aa49edb6f9bedb2e3f3e36fbfe046af1d7550f58938cd4b04c94b92f84
9b2f6d11a8ffb4d7124fe6ce8ace1672070ee668759900130100d81bc5378dc2
06eee6980c796d8b091a20d06bc1d77bff77601622ac0cd9721dd1b4aefc0f33
24d8c5ef81f9c9a17eabb906829b89cf8680c49af58abf4ba3e743302c03c378
0158aa426fceb64ed638b0abddbb6e26dc0806938ad34246db7ff0088668a7ee
8077581cfece59ca6d8e06d5bedde9664014531a091d3c15732aeae4679dd40e
5866e752f869f91e6084a50c2ee65991de91b9e63f4ea9d1ac9bce9b4123a77d
bd533aee4fa009263848683ec6c04d34fc4b95318241e5a9a7311f37d699b1cb
bb6ed22605e38edeea643fc3ef43ced73ba96cc3740f8e1d4332932a36d45a41
a124b81ef52d77f88c5b00f0a999482d429602f3cf5a413b3860c2b45909272d
2b5fdba3647700d3dde718e3b43fde8c12f3425d0ab768d446450deeb1a3de33
fb95fc66166b36ecf9f23bb34b29965e92827c16fe51ca69cc5389eb3898b2e3
e56496d1737c356ed7feacebe0daaf34781975fcae1fbd368cb5a7b2c2a1eae3
dd376180de2b87377738050491d1b6d49a8a77b32c8145e7ecad56185130012d
8dcce53ea838f3f97b8aff36e0a1ffd70aeb1de6b8c6e5d6b530499a07e59fce
2e2f4121ad5623b152f88dd73801ca49bf7e90473d9bf6a3994e9462f4c585a4
7174de5abf7299d3c6ab5460d57ff110be491dc47325c24465281200852f0f9a
b630b19ccd0acb4fda6404610f1cd7df0c71849f2c9dca42ce5df9779f96db47
ea8c2ccdcad3914c89165d94a5916986ee9ba4fbccce3563eaa5facba38cceb6
02a0853cbed6c7c556e4f9a62195568f2594cc3a5ef365214bc9289632b1cd51
2f02e100e26ddc58ee26a2f4e7f6116f79405cd7baba4c69abd799a119a836d0
41fcac4067db860114a270ffadb6083647ed54bc95e43faf1fffbb23f0cf2a2b
b59cbb4dbe800b77d1dcac6e13fe722816eae5665d87d05b7c5a206430320f6b
633da69035ee5fe3ee2f2f006eab37321c7c127e0a5c39ecaea9a38acc5cb228
bf8d48786e209db46e1b20b1d4c04702427bed6417bdd4b1cc7f98041064304d
469fbee829e69894f23aa921e86480cfe18b116b873fedf03a9227ec1d57bb80
d4d3992ed00504f3f0ee087687b655c9bd98cf2ad345a7c58a2654706192c873
f697d689701ccacd6870c3fc077cf6d12585dc6db60b3ab7db483e3d7180f966
2fbecbe7ba6ce56cfe6b6da8e7aaf6127755161a7ef340b7b20c2b061404f022
20f96c72f95343c306164d0fdff253d50d85de272a5d3113d9e411aba467eb51
37e0cbc1d55da58b1dcb1665c0c38f87c532cf7c3743216a39ef8158781f75b4
15a69592874503ccd6542cd58a70e20fac83e7e795505c11b9a379bb005090da
355084b6583f9918755201f6e54fdee4d49d5dcb3e59c5fac055513a4ec37520
856008a3c4234e8a1377480f8dd0a831c11e5889b04495e86d98b58a54c37463
fc380182364b976cfd43503a92fe630b0709b0478fdf88adff07357bd692149e
7d26ea3a0251265f2129f50233fa6b3e5fc1e197ebb3596b9216cd1fbf746ccf
bceb986397dc19b258f4be0fd2559d67b10875430b31296e263e05ee3b9a0247
437f9b11af79677b2298f5b8430f542634d5b963193d0791654d3f9af55dbcc8
362bae2aee3e3aec231d2077d452e9609b183fdb7e831c2e975c02a6ef3d27ba
e36a4502ab814a284a91fe9497689ec2eb0eeb70aae50502fa45b178b1ad034d
b75547cc2b4c8edd067558c9fa4623b182528b8c1edb0477656734883aae44e6
40d9b8d1d04e2cf3d876a021cd48cf15c9dbfc3c07c46f6d2e1d72f0f242cb5c
a9d991a32ae5b5453fac9865af09f384eb0846c330d60c454770bb5d8728db0b
be7d9ea464571d1907ed32044d56086757d8c47d0effadc36920a2eced170412
e100226a14f7c255450865b3785f5caab2496f30ad0d141498a986797a388188
33cab7cd9069c761a907a2498c2d496da5e9332412b13472710e774ca80c4b48
0bf7a933ef7723f966737f6b699e62b89788a281590c98c4292f1eddb237db0b
1a7cac61ead291ca487dc64160cffd47bac9b1ae02a5a488c7b93d9376675844
0314061ee2488b9e4b55c071813f655d234b085d289b9499296017be80d5fd37
0555af36f7abfc34335e2701597f632adbecd006a4e5748ec302700298bce2c1
99208822ac147eb08fbc38394ed52fcb3802f0ae09576e97aca85e6d75e5abbe
921d75c8cbcf2c934df28a2f1e615fb468e663bcc94f8012d220a7f7cf9120d0
405aa9de90e7eed532c8d80ba66cd199599743a8a2452f039acd78f113555a4a
8139fd40d8ab568339c80f0c842f4b4221e252ff1c5bf656dc18392be1bccf9e
5d07ad572a6a37d07d0b7ca990087960ad8850d7cfc56b8c7270c826c70fb56b
d264ece444ce4f309f8abb6624a948b7e475b0ea41922a167b2c206a99a2f3ed
2be8d0ad28dc9d4900d6e17faf06940798a2d47e3361eebba391d1dc70728266
03fd3d727c6286db537d180296d23c9244708eb4183ab9f88b444d182f771549
66028849a2e0c56e20bc6c17e7acf127cb7da54b8ca1c0eec303fbae79c72888
5f9656c4d140f6ee84da24a9241e4c7e8db9b98ab32e9d860731dfbab2cf7477
bd9f73e63ac57f56c23dda08edc1932fe8dfd33fde7e3d1a3014c881988eb1a7
5029ef8ce8c2e2bebbef6d5f201d6fd6ab9a798bfdb761ff191f7317e081ec18
9f12acce686f5362f7c9c79462f5e938bf56f2c822258451ff14f7b28fdfd3d6
fac4e286b95e82c4287450467d03598c0da46fea0d46995463d8e7ec49486432
a62c0e141c64f6a2f817676809179c662ba03b524a33096b8481951c1af5384f
bc10ec5bdd5ea17b6a2bb5be64d7dc26f53fec0946ae9826dfbafbcc7ac90286
32171d0f5c65ea0cc655f692f71f943a7b07c6a01d3e6e7d163e65d1a0ef1a44
d46e7e23874cbadeb28af55c0719151902f1300419211316c750266a53d00937
e3b8b1997b36097c50602336396ce2d85d44881711f9a4074b8cae5ed54e2214
435eaccabde5605bb4d9a13ae054c63dd4e5ad61025e0515702e8121cf0a9598
c5a15b8165d9acfd8331c6f201982a41746f7f47d7998d1bb1b7dcd1714eb1e9
e5dd75c651de425c6ff14196ae0b026bd38a09bc9b535315a8d03e4c3c1c0a40
5c3794ebbf18a66dce6ab873a77bf8bcc263649f3854e6efcfeb414176628de4
eb532fe95a2fb89c38016fd81dcd0ddcd4478108980198a2229ec1a27e4fe50e
14e98cc58853577e3a4410fa6c5bb888e9c34cd24d0e600e70d2eaf3f20cb0eb
294ab0db1c10990b137b49164d09e6543f100cafa3a688336c2296ec0d5ca960
8bdfa3c37749a6ad28e52a1c32d709bcd3f423ffce77f2eb1fbabfad4f1732a1
93bc042679240edd15d134c2f30e02501cceb01d9f1e765df7d3408b746f3f73
365a1d7527a31e7a51ec56f48baaab3b50b3d1a07989824b04deb1a1670b54cc
b112123f490a0505d0c2722abc65d1285865c519ec9587fe72e988c38fc1fcbc
d80007837ee60fe9537c76e6a3d45005a86ddc3e066e608b57e1d4430cb96df4
721f6073f9ec13d9a1b7cff7b7cfab342ec6fd5ebc1a95c006ae11198e8abfc9
6929e322e3bbeb46909ac1cf5642b7feb596339ca723dc18510d88868a124f6e
e0646642eaa1c3920286fe4caae72c77a097f35da645b431ffec6a2c1437c623
52c9eb37ee1ce13afdb36fa9411f9f06018baab6397aac3d1c25236ff0acc51b
ec7216b80474597739df88d01ee932d007113eedf449d5a17dd8361db54c4f72
7c3f1f6e8d8ca4cad3f492e10ad681c05b2ae4e52c5af5408e783c08fd6cb106
500b5681f6ee387b5472564c195dd50ab93ba9e6a4d8b2c8857970f722ddc64f
922944c4379856cc2df6d3cc56caa7cc85c4f355c6d89cf6f7881ac6c3082d44
d2712fc64d829906a7b76e7e19508954a5a9731bcb200cc625fd31b98cf3d70c
644987d405a7e5e61dac635bfa712e518b5cdf9f96a04af8156c5b75c0058816
df148680db17e221e6c4e8aed89b4d3623f4a8ad86a3a4d43c64d6b1768c5406
23b1022eec01312cd24cfe7098a85e8cbdc70294c10b32b7ea83143764a3540f
37438215644e2b661c598c06ed2c09c1e189a6c3a4049b3fd28cbf8b999f6fd6
d477f01c6cad9be2c8a2792f98c4781197ae76181dc30165a3384e6279771e3a
c179245ae55101fac88f6627b17b45ba531d179f5cb9c350e271fd59c510d8de
f19994d012146df1a2929fde0b0564b1e9ddaf7ececa406e53bf688df8ae3f12
8bc9a9222a5172414d76902c93f4f2bc0c54674e4ce36d86d2d323d3967a2877
c6ef786a64766a67fbff2999dbc014ec4695f939dd8323657690aee558171d2c
ad7855ba75677eacdeda76cdb1262a2f8e3e912bc40d5c187a5455d0a3f1face
34561a6319f41647bc4360e3aca7472cc70634600d970074fc668326d5f3b50c
72d3b030a8441c8c242e24e86b6d4ee3b1be8520712243ad71e5d498f5b05cee
41ca7b1fec13032e9630fa4b2a311b2a493904de1e8cbc0f5a1a307fef5997f9
c4f56ecbf394eed6001f8308a054c1e80de8227c016560b21bea6401c202080b
4ee733cc6445803ca9372072768021d716bbc34a1d9272de58d4d02c00965b06
0459639be2992ae6733004542ad681cbcaa6006406414d6a153ad30ee5a3f0b0
4366cb256d6331d8634dff8847c2334e18baefa6b7f41ae2db3a8801a0aa9a72
b01d928331e2b87a961b1a5953bc7dbb8d757c250f1343d731e3b6bb20591243
de5360d9ec935c76a9202ad0ee21bccc6eb9d8b29d9d7a66af3cfc427f5bb5cd
57f6b00b2071ebaf7df02a7a8462a43229aba0f3b92b17e8b4e39f91983fc4c0
506ccc655c4af8a3deac1db3b387cd2cf5b3f23cb142b667a207ef94f38cf21f
6711b98d5d8e89a7c027f59c099de2f12bea05299e76dfd398ed6ae90a3fd714
502f2485bf50fed52326de41cee68d08f4c0cb5fbe2383ae1f03f5bdc87d2e1e
dba844b00d59c245382b87ce7441a86c23df76cd517c5a291e91e76ecb8b7873
751c27bef3d94bf3fccc780e6658d1441dc1efc01fcd9f56f82cbe2c43668c16
df31b297defa691003a2c310ded8c69f4c3465288ed46b859b1581c7c686cb04
5655756ad15d7715198113863a8fdca71898a4442b5807fa8a6ef5687d3a4425
4279d654ec6415a945e2820f1c4351d5a965559e70d976c12d1ee7fd06775ad1
caca88fc32f283fcb0c5a5b9b31b500efc7d132ca7d3fcb0393b6fcce688323f
484ebe0e67a82a5b26ec54969b3f70a55408d6b81acce00af66f5c7c77167fa2
34b129b82df5d38841dc9978746790673f32273b07922c74326e0752a592a579
e3a2714ac409f8f0eb374e1223e610d70cc30bd431175b73c5f66193f13503cb
33b30459e193a4e68c1410ea26d482a73f2539ee5a97fd94bfa61b67cd07eb2b
4d0f0f1165c992c074f2354604b4ee8e1023ba67cb2378780313e4bb7e91c225
66b181b9b35cbbdff3b8d16ca3c04e0ab34d16f5ebc55a9a8b476a1feded970a
e5fd772ea11b4fc2889a6b5d28200d7fd838d93700b7c3649ef2a2b55d90aafd
35bad04983925e73213d97fdef479751a6155906c62a84cab0896e2a99aa9bb8
5952c6fe1c9c0b7b5eb7fd96245fc979931026ef579f81f16c376897f6c4c64b
a7856c3490a17815c6afa248da51631aab6d272c0025d7d8364a1fea71cc0917
5e8db3551486a30318b9582edce0b7f9ee80aadffc09f1df61ea5f8941db550c
2458bf9899705c9a64549f0c9fd0f896e88aa5fcab1b6c9c1a27e682342c911d
6dfd81633a29a7f973d5bbce4139260e90743237dcd647a4accda65602bd454e
92cbc9d11b1dac5ddc467b6a9004531f4619ca553ea7be2b930af78dde07a6db
fc2ac17498bd7846607110e66426bdad0ab5302f5c7978dd72c20d99166292e1
ca96400ac91b18edba9f7ea173141775dba4ec1f92cc50a5717d2d485582566c
d5fc2fe37e74e3bc4c9d50419d37efad0798ba6662ab873d92d84e76e8c554e2
e376ba77a33c9955be2bbb9fe65b4fa50173c6fd430f88bdb07303feb679012e
f741a6cfbd22e05821557394ea54651c78882c16e1ce667ef0343957abe201a0
239e6b072db97868fc24fa4b081086228e2216f36e551a96c75e5f842bcda6d4
04c6c41fc57624bf9c99a9cc78dd69105b4f35b7bc7a544b0eac18970d795e42
2b001e975bcf9400a7727d79af902dc01055da5f7446b829b19c66069f173e79
9c2e49857c00116c81c0efa0259517d137d087d91ab8d37eada3a35b7e674c3a
12dab9b1e693d996b00cd7812e3aa160fe3d85bd3441eb5655fd5f5d853984be
648584ee9fb46fa8ac8d7675d5f96754e7c22afab77106b1e677e6a8e7c22abf
e9d527d54464118a47eaf72c4b18171e71011471b811a638e75c0b37289f2765
0d84394fa617ce1df99a04957ce63348a08198a5a215b54f7cad9eaf2649696c
faed5d57ba4b532b3d66330c213c7978f6082c2a6e571e253a1d8ae864b41845
b08d688950c2e6ebd1ac417f715a3185c25aca53e6e0dc1660d5eeb2cc2b98a6
9026f82e4dfd6d712a5f0e999f223661c8cbae082938aa1df0fca886466f72d8
63c1511bdd68d12623147ed555454d75c15e437e5897417d7c2974eac2887777
1717f135b5854ecc4dfc8230c30234a2ab60020954d7c5e44ea4dcf268d52b13
e916382d14c836c8b7abd8825a4fa1e81cd7d8ffd71d284e95e690020ebc0c45
27a24712451a2c4a41ede6ba313bad0c26d69ca9f681d164d41af022424ad9b2
2032b142286170f1fa75d86970c140b82e449058d61eb4223e990da2c0040bb6
584c427269b460b899d5734d36fd08e5037827eea6fd5d6972388a12d0b368d6
6634019c46b6cb7f796e3fcf48a93e69e38d4e632afa8be32431d14188ea0e6e
6dbd58963cf0c5b363903c8670832c3287fb0d350df5a213e9acad16a448900b
e75cbce2a288aa6042ec19d11616d5fd4f7cdb25aa284c7ea5bdb5fbfe7930fb
e7461fb1155e2b7efccc34694313d50cdee5529c0aea229e0c15d32582096e68
86d344ffb3663de5bd232fa7e5553fd8cd871282e43210d2386186aa77ee3cf4
5aaa128dc53a2284aa91c2c588fda2d897570adcb6ed9cb9ff9826ce3ff13aad
9f0499b0c6aa625b84052ed034de82dcb48af02bbd340e8fd87693a1b70b5db4
7f6714fc106cd8ad6827095c66ff508fb7d42c6735b98a9a00ad21baba6f68a1
70cb76d3e06a949fde026a778b952676a69968b3f6b17ee29cdb36a2097939ab
aa2f7980511024dbcb007e29eb7b10c374d87b1f6f4a6a35f4bdf4ea803fb008
a71e89baa2ea71f50787d517cadd8956a7b3805706fcb82647b1be53a66c8874
d6b23cf9b54604654590dd75326ac07da052dd6cf23e1242b5f4014bf906aae0
8123270ff6b69a2aa78ef85eed7b4bf1f9ecd5038e6548dbaeed4695cb1f0cfd
32d070308a2abb8b0da1bdfa84a908fcd8d060e932d18627a0c1baeb5f4d7f17
dac4d9e2a57318f5f4bbb16315fef0af2a36918e51975d36a47ed49e06249688
e03569fc729648189fd79673022706b7850bc14a9066098e25fdb8cfacbe6d4b
00a1bba91463d839dd39ff68cf8827b35d4a84aeff36759b75d2ba511b93d107
fe437257792a8a06e59cab1c6c4d446a14a93557a84b0ab97c980fe23ec83f93
3c5b807f1f2662333d52ad59fd320624f8ab4d69d140f83015d938ab1a507847
705cd2f684f92dc22d7e7273b958c791abb34acc0687eadf942e17ead92d8aed
2fb96fa088b089d0d538056ac1318fb6ca4b8d80ab03425a69d86342ed767c36
75000d0aacac1c0ca5b85ca4a8081fcf7d443537c43df6ca194d1ce48082ef51
e598c6eaaa7039d7f15e97429a6f9968a5298607abf3e5c2c3920d4de4391e05
3cbff6274a46b89b15a3e7b193634778de52affbea442d7c8f7638faf974f2c0
9a6aa0f1903cc6d03f9ed226d494c1186f410414ca2e19be6adee47cec05e362
983eff99c764596fd7bd3476c0e10336b16a5923e32299b2d21bdf17e2211150
4a9f3b1601da35d72e511f65a93cff09e6da06b6975b0536de065df9eb89e565
52c976140a7b016bcc8978be4d5a887a86e6b454aae7dce95ed15628d3326eb3
688258c9427a84628ca9af06271612b810d596b7ff27c7f585cc6770ad9e91eb
5c263b40bbba16deb5ded9c67dc9365c4d82c4f87493c74d72bf39c2d6b57120
9d153a59f7a0c6d457f71d0643fef5e3c60984c2da3564e9236fe6df834f1b60
25721036e6c23cc242dd4ab19d450d9666288079df26d7945c90bf197c82ec14
59fceee2146f2f1b85c5b9f902ffb5600c367fbbee1d5fdc29ac33cf1f3cdb98
94aa8729d772eb2dd8f5334bee9ea102b6c5e65083fe338868047744b9d024a0
728b3d73a7d96154866b24c36e0ba4c6860034d613bef5879259437e2bbd7997
d353f890a6d20e2a2fa0bd5d4ffee499e2bc6dc187d7b5abe1f4100f4cafd64f
70cc1f20cf73146b96d6eba742fb3403f0a6aa19b6dced57d134bcae9deeb878
918cd73d0a5ee4473de1c125bca5c6596b5eac3055afd44d4c7a6430dd19d72e
4e41b22377ee4f59e1bd635ac8c83cba7127157abb3f7d5d867f6bb4e187608b
72aea55baac4394d3b360137ced93aaaf8617f13f127c9a5066bb109a92fb62b
523aa6dde8a98cc96de0f7a33f4c8736e5c536f02ed4ad561c76fe246f67d0c3
23da2d3830474e011a61f67785070779f13d2fa9cb84aa6b59c7326e6ee6a6d5
d1e594b6f6871d7ecf1bd6c68f7bac0b35816ed161bd537a200366043e5fd8ec
15b41d9d41412444cd5e2dd33d657509e84d2a5c6a260383acb50695d1ddf2fd
7521de9b4cccfd3833f5beb86a80696330a745c6cdde7c0e0c92462cd08f0f2f
48093073d36b0baafc7771774cf9322fdbe06023c59fab33fda0b93a9f2d40db
b7d8baf7b42e19c1a07a6e79de9fb53ebd899379d96cd2cfd5671f618e2d8a9c
71ebbd8c44af183b57b265d3f8d17172c82a9d47367fd4d96e6f556987ac520c
47872a68b764d3b6c49ef63b556b284f413e7b8c2db12c176a0a7827b92490d4
b58ea28950ba3c0b5b67cf3b62a60c4ba8a2ada384540ccd0d90c5d9a77ec230
fccb531144971b684129a0827c65902334e3e6e30a92f7122c44521e76c82740
dcb7ce8cf51da4997489814f1ea6a877b97b4d0fcd28d6c89d8f9f363ab17abd
19d77d97663457414d820acd36132be149a51e671e11b1120189e9f4a87dd2e3
7fb64f3cb91567614459343f0020c10eb50bd50216f06d33e19761417da7bd62
a083ba84f3ff9cc83191da42c43ade5a32d0bd39fd52ed18d79b493be800f918
f3d293b413b4afdf8f2b2d8b6aa21c4a9cab4046eb82a550edcd552974b56f90
ac03cb64fa61177f1c100a402ba4a5c1a96b99ff8d9cb4398adc33822d99625e
284ccf8fa7c86c6e59fb379c82c757a01b170b210f6751e4955c4e20a5f5d7df
3530d670ba6dd0313904e051b06007475657e9fb3cf1967673e72ec01a915ab9
8075b591e0b865d92c70ea86a8257fd1dac5d55e5de23b0a42ee96665e8f4f9f
509db618a8673332107f51db4854b7010cb693cc317d93340f356a345c7489c4
220d26aab79dbcc166993be73ea50ea782481d08b72cbb44b5134f34e4962dc1
f83b3bae072e2f6dccb301d222787a4b1f2940561774c12c1dace55a8dcbcae3
1cefa4d9f9015053c21d2baccb1d95dad2240c8de0dc630fdbc94fbeddf192e3
7633ca9b7f87c0db8746958079e9bcc4da8384f581aa65658bf84706bd5366e1
4e0b57819f812fe2284c196f4ee3960ac282ae22c0ff12c00cb5fd8c9f58200f
cb7084768cef8b1be0cc7892a9dd6a87e044ff2e6a4d5857025dada2d7a9edbb
51582e6acf85b2fb79aa92e71ee46ba7bbedad74ec66c49ff4a3d2ab2e182530
dc5979ceba45497ace41619b2397e876791610dda35999a55f03cd67aa4519fc
695c1e932845d3dcd8b62efb8486ab44b7ff4d8336238ad08d4929e647c5f5e7
952fd0fdbf616ee1e94b522abff96b4f9c610b24be05d8daa9b3920b98dc9d2b
32bf2bce5898029d17f45726749aa96d6e61b56a125e6567d530b2181dd3efd5
fec1a04a5587a1d1ba5ed4296cc373836e8593c04c20c7193a2c5933d858e171
fe76da9c71be103d6ddd199080d732c5562312958a3599a6ee03b4d1cfb52e81
6181e90d7dd1e9a50629531219b1e1b14ad288eff882f1ae09351f4087dc0b20
cc91feea4da9f21b0a8c1612f2be9c93ac7ccad286d47495cfbc473af114993d
c4cb10ae97054958be03510a86bf5c566dcf442794aa3afadbb6a91fcc0e879f
899ce99aa7fda10c1b37b29f2353d3fd9f91e4119292bd437ab6a8c5066cafa0
561ad1387aaea7a068e9d42108fcd4119d2b7dea577e9ae173eb305a169fd45c
17b91536483c75d8ad3efd5aa36f23218073d69ac4aa7ac6f57a4f87046d341f
075d32228d5d934fe533263962c180afe85cea88677175834c8b7714a0691875
94052b88dcd18b2be53059b0d52eb027c0271750a47ea350192d58003122767a
65177608168196390732246aa7d4f47c945447173d017f09119debfbc391f91c
a3dd58db01327038c0dfb320e68284fec67e5388f21a25f30584f191336e365d
13f160284db292e3c4d1c3fc2c7c82f4929bbae5eca14873b91376474285fcbe
3b32b6bdc289260b35494dbcef3bf80355e50002360b45dec4ccdd130afa9cc5
08adad19176726a36a3256a26a95bb52d2b7011d6681d7c36f617492e29dc112
5b00a1db09a0319fae091874306df568c619f954e01d70786c9d469665917512
2d941395a507e6bc1986f9b3c307a8be67423165efa6030e62efe7861e76fb06
afaba3719236dab0552e85536bf86679c5a4be5d6e9fafc93e7bbb18833cf213
f016142678bd9af03172f99c85823ad2aedafad6c4423c5dcb3ec3e083dc416b
a94cadd3a3d5f33b79f17d56656a0477c266fbafb338d6b2e40cf944187e24cc
4207d30f41479ae09559119e340900780dfbff9df3dd3e6c576480326ef93903
d37abc77fd4f0049a851bfd5fe24d78f1764937b710e7841a062566b2b61d337
9e15917208c426cdceef113456ddb48a2f55857dafc226f3ce5925e626075aed
98f49160a46ef3976ec83c7a2cddeae134cddfbe4f3ca00ebc0e5da7374b9953
486a40afea73c0d0669cda4f0610d30dcf9355c4c64d2d7d21f57c9e2458a0b1
1d4f4c044361d7333ba51518fe443cef631f7a9d8ab1bdbea142f74e04ac8ff9
c5213b124ca5558e8ee4e883d780af42a312b181978b8b06d399bfe2071da88a
f6da54171c6e7e3bc34cc58e550efb962056cabe0adaaec5a2562772ce2c1a2d
3c63d662e33c18b44edeaae901e843a57a8c5129e32e66823774cb9c3372c6d8
240bce5a0d11df228597503ac7070f5f54cb40b71a8d1ed7f3de3d97dafacd47
8ac517b54d9eef386b468c27144484b0bd17758a9c4d7fd9603eb771b39d3e3c
e89a450e95b1e48e75f3052fd4a80e3f7931e9161a358de7b9ae696e2ea9ed3e
55f97ed173e8c9f9e35e8b45cd8f14ac995a9274b110869bcf68e9f56fd9cef3
8474e714ce317ce878668c610dab98d80957aef1a8c35213f74833093b9f3fe1
3c1d4205ffbe6a2d3a1f7d25e7097b6b278c4f0c4c93e6bb356761ad3ca3d5af
24da504a639699f2501c477e00f84b4bb69d4f8131c5e0938ad9365f8ee608f5
344d3f0b9efc9d23356ec2ddc656ff54cf42d0e5ff1160208e5abe43a2283655
7eb867f042e18a305f56ceaeccbfabf268d37e7bf5bed16949dd327ed677455a
c4210d2cc8db37f90ea43d4b00c785ea3daef5871724ac59857c35cce3107d0a
6d2c08d8e670a848efbf8232c84ebef63cb41bfd585894d108ca1d0db27ef17a
38f0c15b5839ead67a3c14ce88c8228c844e55b361e3c28c452e5f8f47345fee
e4441566d4a0a5e52c6d80495f22c4989626b5d242a0c85d05a01202ff60ea6c
fd9320a0eb9276828dcaedced63326feebbe2a730104c77194b534b8d18e718d
4afaa64059105feeb97ed8b5dd275f6fd102122d07ff1cb0546d058029aa17b3
157d99c1a452152b3d831eea1d76ec495c9d4134084ec9f5e09ba57a3deb5d3d
b21142f096a7c11a7b4d8082ce36672a85ce6a760bb972f6af419647cd12fc42
d5b640895bdf3a62109e3a23fd9d6751848457fc02a70fbfaa86d990efd453ed
8c3dd9b7e56a2f9bb029ffd1da5459db526f7a9aff418ac83ba03c21ce6d13d4
1803fb13ce6c98a85d94c5c826d1ca362ec85b78417654f9e8c8a2b4c6dc36a9
6e968bb42cc7d78b2df0dab652b94499ed1be732d0c18f36cd3372270ecf6596
974a6af4f91d5d99d7501059907d64aa3882981dab350ad3f654ece13ed18f1f
48a53f98414985216dbe0c501bb8e07f83b97a46f0a855ca434620e46674ee99
15c0e1e4ac847d0801d2dd51fd7fcc37671911c570b0dd74cf5ab05e80810552
578a441f7adf8a90eef1995d2174307574b503feb78554f611f3cb81428aa04b
e1199861c60e4944fad2186f0f3354c3c827cc02841708f6f538d7686c59852f
2b50a04763845869d8306d400a502e7cb3c8bee4eaa2c164d0f2887026d65f57
b67712ffde9b57b0e5dd7e017b1d2ee2ced074efdaba9c83627e095b9f390b4d
b0f77b266e73b11d2952d44e50e0a3ac30d9e4155abd8190ea100e18ca963a80
b0434cdcda9e18fb2b59dd95d217bfe10742eb58e89151ac7a40636429f1fc0c
a901d37e9b1b628d04ae89dfa37835bfcf90b34b0a6f6acb492a3b493532ae69
face8487a160964df88b13d73ec001eb7b0527c7e9a35b6320b8bf82975f0156
2e7a4e677e77d319bdeed4ec746fc2b943a3bc844822798c72107b9b0c88e720
accc6ce2ac5333524dac20df0c49b86aee20de50f14718c577b207b76d8203c7
9a61f9573e3404fc9164d1c48e104c1ed682210012edfe064335c18b344ef287
2a8a37dc34cdd577ced619a1903e5c9943f3b8a260b787d24b7ec5c4a05626a8
4017579dc5fa2ad21c762f60919051ec9848aa096e1f23ed277bb544026b4dbb
94b8ad35e61c890bc206aaf783def69e09aaededb90450bf892d05e68d88a9bd
0efb69d5c5e204bf0eb1a397a464dfa284287718fc9feca955c501c738c1e56e
5b55f3f30db4e6534df41f07656f46f140377da51c1a06a139c408ed9c420f86
806b5d5b13c3db3708c2838699cbd7246ea804d95e50105108bb05c4e9b2a102
cc7ebcd7fa58df71d3fb2a683b3e378ddecda0d7186d3bc4c0067443b4f7ec60
8929f9edd5ea5dc6e3b4892eddc7868f7fb4240efa6e8dd63442207c8a58a7e2
99878bd03d9b615bc12689f60fb5ddbcb4a825fdda2723599a5810a42e11967f
4018cef41c55d033271a6caa436dfd7091e561e7a9c4a227178a8d2d6614fa63
544c3b013b32e0201e57742d347ea9056b8013b516fa711161995f8c4b1c0614
21fe970ad6ad795b819f725f0218bf7133ff825d46f0af1f983ecedd8d247862
4400a566bf9dd0197e3fc8bf42932bf5084b4ce4bb21f2f0997dd26927f352b5
5738fef8f30ca45683d3526e8ded8bb144383523e2259f1c3fc68e4d7480d891
a00d0a0d8205dbde441d345dd9af431e9bd8ed2e9e61cfbb3f8d3eaac95cd501
f8f886700487c0a9f4eba8e82791b93aa8466b6995c8c4fa09be6d72fc33c09b
cba05a560e5dea6988b86b3bf0cb9e9167f154714ffdd6c2d4b9ffc5ed3861b1
930ed1887fc88cb2c18841ae758598dce50ed22a968ae906da30ec5dd8908093
4b79df8fded6ba120bcc27016ee988b892ea76c8c581a5a07f00a4f0495af0f0
1433f0f5590a42050ca6981ddac6a10fd407b212dae565454bcd083b9f19f1cc
4f0d530ae6d5eca0dd1995973f1bff0ca526c622a64305bc938c3c79879dd303
6e17452307e872808a0fb1c56ec5f6e33e8371852c61630f59240336ae0c11b2
cc48b7e4345c2e51086a6a71c1552dabc80de49330512f61356a599276f2eaa6
efa447ade4609e699508ffd2e38d913d9e3bb21ac92c165aa2299ea9a6faf571
345f5b173c6c4eee7902656011ec7f5d035daa6006d8e15c0630687f66091e5d
b24477878c83be07a4a266902e4c51b3069f29d5b85560dcb8f5618df70a06ac
d02fdd1bb71ad61016dff44b404f0721b48657a65dcaa6168bb279693d10a724
b6a917bcaee4d943d590aa1a16afe290744fa5c91e208e37b8f9f83f65d2bee6
8d78461bef857cac11795429c29efaf490afe3ff9ef218ca9a5a85a498ba2932
2562ba38251dc3c377296393624a3a36099b36c72ebb0d8d82d2d5250e90ed73
1009263181e5d4dee48902c90242489d25bbf007e667e836fac0891b404344fc
2709f566c53006f734c93b0382371ca3d5f1b25786c1077a3c756d800c1383f3
7a2ad64d46dca75e23dc45b5b2fdd486765eab9ae91b6bb8fce06d1a4a7341cb
30338f9c85111cfde8e68398db0427f89a549427e0598384744f4a27d9d836d1
c593c2fd7dacd46d43853586d0cf68a603099dec2a91579eabea11bb52fa16be
b12b245975fd23838a1b0dd9236038ab482d05b17817b37d64e079c16ac3ac64
6aa832a26b930c2efce8e7a7826a8ee9a7c594cce85c5c4ab865665a70a1769f
a78549de39bc827fe6d0e674f80e64b1948d277aa7f9d9c17670e8a29b07644c
0d0f1fd4bb33c5cb98df2ff2a2c155031c3d3c8cc870e714e65d8457f83aa383
934b0a30ac0e204bc231194c6a42b113736486dcc2c8f19718c37e9d2ede3730
bdfa2e291431585fc94280f0cacd6f7bc1baae9a78842093610569956abdf04b
b3183b11262f1edd6b3b865cb7ad856d3408fe83a6a87b81be1c38391c107982
9feb08434769700bacac11ace796c80c839bab021a9993136fc49c57da11d58d
fda756f8f7568c25e8344878c4dc0cfd090a51827f395bafcf97350446b31f16
6d2c14b76193cfe77c0c7047449dfa1668e7ba5784f17a8964fc80a73fcbb8a2
8713ce7042e5784c37c6037fe2fbe9628bf21f77497e2ad07875cc1c5f4b6a16
cf2cb87ad7efe52b506124b259832d0e074deb3a77cff29a9dce8d4d7521e8b7
0746bb80d0d6493390cf482becae8c7908922825ab2fdb306f82e2aa4ef11895
0c09d626762969426c58e715e6f44aa782f4edeeae4b436e7246fa3dc3713ba4
3f20fce8b3ab5bbcf7e088f59f6dd6822c1169095fe82fd4fae40da118f620fe
05423a4e570a7a4267c6eb446211fbf843c6b32c025f027a7d9dc2e89ed6c318
c07b28b6999f8502d981fa30d0d52d367bfd4921739fa470acec24b41bf06210
216d6145931bccd152add7a1870e4c66a5629d30245e33bac51bcbd9a97340ef
9a48a3e567e0b4ce2d04a4b2b71477b9c40c99f6887258f0a5c0e89d41d6d646
1bf8fbfc44c5875285af1653fe8e2ce6ee4bc90bdbf732df92adef21bf1f493b
15e29f4c6c01354665a7627319d38c7ad284dc21a6b43bdc4c9160653cd83b70
6fb8a8791f3d7171d09f156d923ecf8a3b42e6f9c9c18e82a09940da88fe525b
670c0569d270506d5a483d9be81dc73376d9a58fa40a0d7a2e9daf0c47c837f9
ba8b976ea52326922be2966b6be5e82818c7acd8c43dd1a2796b64f3f68d886a
4fc791a7dbaee8bb4029597b1a8d1059f5fe8f2087ce9bf0f42799236fda14db
200795aab41636fc0ef55b8563ac2b71110b30158fb579af1d600ce4cf3dba38
27284ca236b48a00b97b05e56bf9f1365451567f686e69f07cd03e8402ce4ee4
3341cddedb3cfab528133a13dee6a84226f5c4ae06c96b54f0d5086fa381c8e7
21172ec047c191ff991b2b81f0054e4e2a462054857b44860a06c9fee8bd04e9
6d5d2e9ce420b87c1b3be55901f6ce8fe5b8f2d8c974ed9935fa2f495143f9b1
4495c9de866418582a8a2cea05b9b91254afd98b62d43d9f742128d98ab36347
8a270e78d927f66ae81cf7af2f1c5ec5fa3207fcc11e034e2345c3f3ed0f58d5
a2c493fd5c95e1fe2e6ffd497488083a0d75401e1659af28d13651732935a091
8e76152f58ac299437a5617de4059bcade94794849c7390daab6270bc22d4fb1
7f7236d68a6d862e83b8b1286269b0e95d8e0e9c4676f020369c6913d883465f
084d9b552b5f02593977d6d640690ac3332dad78ec4f912757e01ae3687a2608
874a7aa6e4af853a13eb42c0f5330ca7854f82699a29523ba0baf269c004bbc0
d1e99b39f43490c08b3b0bec242bf854008c5596ef48309bde3b40902f05ca26
89dd945401857a9d385e543dfb60508a5a798c9bfb3f1903f15568ba58ccd98c
6883a2b354a3b59386633f3729394b17dbe7f13016ccb213242e8e54213c9e93
eda475cc10ad662a99c2c52fd63f638343ff3afdba8863c4272b530e8b8234af
4f9531c5fc65b273fff4f30b047dc8129e10385fdb763e137c357660753e4d91
811e3a83c924b49822bb566e763ec6c49e7a1adc98b1dc8b1561f559fead3172
26dc87a0b27f80b75fd4dc6845b24619c16256d0f326db0eeba1d685b558f5a4
db0e544e370c7c1a5425f083bba17327abd3c00286df6aa2ec0b3706ba0926c5
7679646eef943e752e9ebdeaa219de557103b58edf6c3aadc17e5583b3ed3375
047b6ccd0f78b6b917b6bb92301efba2a0eadad2b43d99eb12be25bcda70d1c9
28905473cab420962ef3330e47a7e57f493a61468c7192fab4c35c2c7880ff0e
499d07c488c8dbffc32af00c25afd0827a3f590269d1b40f9cd2790d17b4ce8a
9c6174b76928d818db19be4fcff7942c9fd763c7380293eb21983a26bac83ad9
a59d627a5b772915dff11c51a07275f0cfc4b530243c1d6ba1747587a2b8db4c
fa6c5ca28595107ba692175cb39b49d41ee29bffaf79ee0784af4848f50a4bfd
f76499380c2edd6172ac14ee5f5e4ef481656caba2550700ae1e64e18d30d5c4
25b125781fa63e0b4f2ee768d1ef3e0e2b895502c2a782524c9b37c6b0a6c522
ff7a1388fa59a9e1b43c5c88a1ee30e4abcec21a39882812a045aa9d9b865170
2004d3e7f11bfb1d20ef2f5a710a1a6ee5b2fe2f3269a81beae3ad98528b50fc
808403a48b1606bb545c041c08db690e8df0992311b06b4dd3c71878d383a378
f973cfe37510b144d313faa545954367870d3193e35c8426cfd4553262f08377
a9519e6c26848e6a994c704b3a01ece326dae971bf3e9111ab82684248f4210f
8bf229d1fbabdc922bb78c4f88ed76f07ae43c7ab165517d6e1b76b6d765c57d
f849e593ec1f9205b1e316b4458463798a9336646b58fcbc47380b4ef0d49ed4
a22db31897b2f3ff12ec4bb8989f6671d5af7e409ce03b39d84449a9d77133b2
9717a2f7f85ffa49ae0ca0b8f9b72ecf2fc54a79a74771ea3c16c1acd21846ea
8a47ceb71a8c6d0235801da38d9faa0e99a4c8ab784765a870e53ceff99715da
b8f1b93fde600a1dcb72298e71967924c0c307a4ddc3d3adbf7f90bab4882883
a539e388cda20bd3826e21b5a196fb188aacb29a87106d9c8cc927fc928d5834
b7bc0baf90657519ec3730f256e8bf3b1cd542fed6f2cc348a118da4b285b950
95b5d77cb17f51c49d55a2b08f2600894462a3491e3fda8d103a99a9eb90c690
ab5f9b895fac04eb28bdad3c280b8e1f27656ee160651227965f6135d57e1ced
a6a3cd0a8ffe2467e4a3d1ac795ea0ed6600baae267fcfa607e836fbc2f04d71
0f94d3cfe07a7dc69c8df8f5fb23aa10de3ead07fc9090d2eadaf059d11bffa1
8279fd4a2d09b7b3f2ac8913e2a50c4f3aec0e4496e0f6b9a16a621fb29211b0
37dd786036a80b416a50cc59aafb28301f45265c0efd245ebe9cbd6af9607469
81a65298b8f3d3c9671f99c1decd89bb2886e0073b9ec4ef0eeeb15454e8c3d7
bcc6876e33b0c648b8c4491247afc6f2c59b76ac39c19e1ee7b6bd43ae81c6a4
28fa04f19ab6240a5d5964f1ba5ded3b6f9e496e81fb9201c9e49f84fd4368b0
78caf26a1a87f1eb8c595ba65ad252e861c5a696263a0ebe0f11fe48b35ecb94
9d75554d080992fb3a56bbdbf6f4ec4c4489e31f3f01e7fe31306a32548e714d
453d1bf23298c7b2b312f297c7aa316656a53f59f721707b19550a368c7ca48c
1e10bc8d23e600457381d732db99f946df881da1efeda37ae24f6d0ab551123b
ad8cd06b47eaaacc80dcaeb31557df0576847e4285a7432187defcaffe28ad96
4b6a303e5e3be7054fe64b5743dbdfc0a2785a2e0617848a341dd02b69edac67
cee49514eb30625566b08be7fcd20d7e3bf5152edca4d438819779b93dd4eae4
9aa5faa22163783f886fb0129086960081344fc686477a595ec0e7a12e87419e
bb5154a2f6a5d18dc49463c8281c1751ff67cc3e42e5478870ffd09c3d38ee56
7e54572e2f1775f1b57da0f19cbff200cf7b33256ac3babb767f9ef68e0bb1b1
9e3b2426493744d298c2deab52f3e5aab83aa2f77df4b0ecc86d2d21cf8262d6
d1b02b95fe7717c71cdce60b682968e764be331052943c036b83b8dd289c2140
1618bb5c1d7874a4083ab40eed1106ec24679a64e564752594964a998eb93dfd
2b1c8dc4f13fe18c39e6f4060bd206f57db13cfbcd97b96cbc92a22795869979
ccebd7b133cad87bb37f7a115e21c2e168fda167e7c313c96f348f4832beba78
563acb24f01996453226ddaa484d82f3d2ac3bb8200ffbf59aba8169b3e191dc
0ef8c4c6d05cd00c283ed45fd62d499624de2b39bbebdadf5dc80bd2524e6dfb
4f0934397890e2f8b35d3240b428ac1792aeb2a3eddb2a83937d9e9eb4cdd479
390f619d052a1859e4a09ebb610a5b08b8f3a5daba2396b785cc96de7cacb8c3
YARA Signatures
MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.
| Rule name: | Detect_NSIS_Nullsoft_Installer |
|---|---|
| Author: | Obscurity Labs LLC |
| Description: | Detects NSIS installers by .ndata section + NSIS header string |
| Rule name: | PE_Digital_Certificate |
|---|---|
| Author: | albertzsigovits |
| Rule name: | Sus_Obf_Enc_Spoof_Hide_PE |
|---|---|
| Author: | XiAnzheng |
| Description: | Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP) |
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
BLint
The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.
Findings
| ID | Title | Severity |
|---|---|---|
| CHECK_AUTHENTICODE | Missing Authenticode | high |
| CHECK_DLL_CHARACTERISTICS | Missing dll Security Characteristics (HIGH_ENTROPY_VA) | high |
| CHECK_NX | Missing Non-Executable Memory Protection | critical |
| CHECK_PIE | Missing Position-Independent Executable (PIE) Protection | high |
Reviews
| ID | Capabilities | Evidence |
|---|---|---|
| COM_BASE_API | Can Download & Execute components | ole32.dll::CoCreateInstance |
| SHELL_API | Manipulates System Shell | SHELL32.dll::ShellExecuteW SHELL32.dll::SHFileOperationW SHELL32.dll::SHGetFileInfoW |
| WIN32_PROCESS_API | Can Create Process and Threads | KERNEL32.dll::CreateProcessW KERNEL32.dll::OpenProcess KERNEL32.dll::CloseHandle KERNEL32.dll::CreateThread |
| WIN_BASE_API | Uses Win Base API | KERNEL32.dll::LoadLibraryW KERNEL32.dll::LoadLibraryA KERNEL32.dll::LoadLibraryExW KERNEL32.dll::GetDiskFreeSpaceW KERNEL32.dll::GetCommandLineW |
| WIN_BASE_IO_API | Can Create Files | KERNEL32.dll::CopyFileW KERNEL32.dll::CreateDirectoryW KERNEL32.dll::CreateFileW KERNEL32.dll::DeleteFileW KERNEL32.dll::MoveFileW KERNEL32.dll::GetWindowsDirectoryW |
| WIN_REG_API | Can Manipulate Windows Registry | ADVAPI32.dll::RegCreateKeyExW ADVAPI32.dll::RegDeleteKeyW ADVAPI32.dll::RegOpenKeyExW ADVAPI32.dll::RegQueryValueExW ADVAPI32.dll::RegSetValueExW |
| WIN_USER_API | Performs GUI Actions | USER32.dll::AppendMenuW USER32.dll::EmptyClipboard USER32.dll::FindWindowExW USER32.dll::OpenClipboard USER32.dll::PeekMessageW USER32.dll::CreateWindowExW |
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.