1.1
低危

1a2406b196d99f5407bf7b9e67209b808a9f4f5416c73a9eff6149d0387e8b4b

1a2406b196d99f5407bf7b9e67209b808a9f4f5416c73a9eff6149d0387e8b4b.exe

分析耗时

194s

最近分析

364天前

文件大小

226.4KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN MINGGY
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.74
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba VirTool:Win32/CeeInject.51ad3d22 20190527 0.3.0.5
Avast Win32:ShipUp-U [Trj] 20240201 23.9.8494.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (W) 20231026 1.0
Kingsoft malware.kb.a.1000 20230906 None
McAfee Dropper-FFR!090171230206 20240201 6.0.6.653
Tencent Malware.Win32.Gencirc.10b31b39 20240201 1.0.0.1
静态指标
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (1 个事件)
section {'name': '.xdata', 'virtual_address': '0x00034000', 'virtual_size': '0x00000124', 'size_of_data': '0x00000124', 'entropy': 7.308580337878488} entropy 7.308580337878488 description 发现高熵的节
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
文件已被 VirusTotal 上 61 个反病毒引擎识别为恶意 (50 out of 61 个事件)
ALYac Gen:Variant.Minggy.10
APEX Malicious
AVG Win32:ShipUp-U [Trj]
Acronis suspicious
AhnLab-V3 Trojan/Win32.Shipup.R65212
Alibaba VirTool:Win32/CeeInject.51ad3d22
Antiy-AVL Trojan/Win32.ShipUp
Arcabit Trojan.Minggy.10
Avast Win32:ShipUp-U [Trj]
Avira TR/ATRAPS.Gen
BitDefender Gen:Variant.Minggy.10
BitDefenderTheta Gen:NN.ZexaF.36680.ouZ@auOT5Pi
Bkav W32.AIDetectMalware
CAT-QuickHeal TrojanDropper.Gepys.A
ClamAV Win.Trojan.Minggy-6980982-0
CrowdStrike win/malicious_confidence_100% (W)
Cybereason malicious.2665d5
Cylance unsafe
Cynet Malicious (score: 100)
DeepInstinct MALICIOUS
DrWeb Trojan.Mods.146
ESET-NOD32 a variant of Win32/Injector.AGGK
Elastic malicious (high confidence)
Emsisoft Gen:Variant.Minggy.10 (B)
F-Secure Trojan.TR/ATRAPS.Gen
FireEye Generic.mg.090171230206f7d9
Fortinet W32/Injector.AFZG!tr
GData Gen:Variant.Minggy.10
Google Detected
Gridinsoft Trojan.Win32.Kryptik.vb!s1
Ikarus Trojan-Downloader.Win32.Dofoil
Jiangmin Trojan/ShipUp.oh
K7AntiVirus Trojan ( 005adf1d1 )
K7GW Trojan ( 0046d2971 )
Kaspersky HEUR:Trojan.Win32.Generic
Kingsoft malware.kb.a.1000
Lionic Trojan.Win32.Generic.lJM5
MAX malware (ai score=87)
Malwarebytes Generic.Malware.AI.DDS
MaxSecure Trojan.Malware.300983.susgen
McAfee Dropper-FFR!090171230206
MicroWorld-eScan Gen:Variant.Minggy.10
Microsoft VirTool:Win32/CeeInject.AAC!bit
NANO-Antivirus Trojan.Win32.Redirect.cqjfmc
Panda Trj/Genetic.gen
Rising Trojan.Kryptik!1.AF49 (CLASSIC)
Sangfor Suspicious.Win32.Save.a
SentinelOne Static AI - Malicious PE
Skyhigh BehavesLike.Win32.Dropper.dh
Sophos Troj/Gyepis-C
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2013-05-08 15:50:36

PE Imphash

91b9d16df63fda33e0171a72162c99e4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000037bc 0x000037bc 5.574485966918703
.bss 0x00005000 0x00001f40 0x00000000 0.0
.data 0x00007000 0x0002bf68 0x0002bf68 6.765343602053923
.idata 0x00033000 0x000004f8 0x000004f8 4.656393660526831
.xdata 0x00034000 0x00000124 0x00000124 7.308580337878488

Imports

Library CRYPT32.DLL:
Library KERNEL32.dll:
0x43318c GetLastError
0x433190 GetProcAddress
0x433194 LoadLibraryA
0x433198 RtlUnwind
0x43319c VirtualProtect
0x4331a0 GetModuleHandleW
Library USER32.DLL:
0x4331ac GetWindow
Library SHLWAPI.DLL:
0x4331b8 PathAppendA
0x4331bc PathAppendW
Library CRTDLL.DLL:
0x4331c8 __GetMainArgs
0x4331cc exit
0x4331d0 raise
0x4331d4 signal

L!This program cannot be run in DOS mode.
.idata
@.xdata
t ;t$$t
_^[USVWUj
]_^[]U
v4b1qUk
SVWeP<$f
x|Px1P5p@
1_^UXSVWu
_^[U0SVWu
EE9E|EEA9E
_^[UQU
_^[U SVWu
]EE9E|M9u
SuVCESuV6E}
|EE19E
m_^[UVW}
g$_^]U
|_^[U$
Rl.Ete`2
XldE8yrd
PaVpT%b#d
<td@!8
Ax)xEEPEl
xxdrpd
%fPiX|h`+l|@\
rt4^{+
8ViX#p|x
fdpB|faEl%
_hIxsg}Prtx
aF_PiP
drVX2dhtEEEVS-o
!hcE+Epxl\P
\e+ESpx
Fi?pVt
#XOaPlEem%th
`h|p!lEV
FnSwZV
)EyPd+
tVh\HhS
xfaffrEtE
hcx,DPx
%|h?)i
d+etlMu
GE!hPh`pE
LTlij@t
EPV|t)dS
)Elert
w@Xt\t%
i)N|0Vuz||pl
Htd`xTD
x)Adx%
u8@A|t
<chp|~\h
!`X%|L
hgtSTpOt
$t!h#|
l\xi`x|
td>Pld
+`DDA=
x|tPpl
id\/#vt.
p+h`t+h
D;|.txi
`WH8\X#
|8|C%dl|
Zxx!m|=
pif,xz+T
|f%qVr
+)AhH1Dx\
|`| pdT|
p!||gl
xxl`<#
%%xxPHi)
fic%)p
RPp!x!
x!jp)l
|r#x%x
TS%|f%lEcp+|
Q|xlit
L%|d@l
iiKxxx!
Lp`tp+
P\+iT#t
p\+Dh|#Cf
lZE|ux|
|~mTA$
lQ`E^X
Et^ENS
LEEU[EV
CuUuEE
E = wG
EE]trU
EE%]PP9
FERjtU}^
~SPE}EpE(ejVPGX
VE04VEE
EtRx0Vl
S<EwuVFhP
uVtjuphS
^j|tSj
uuu uun
oooo@occ
EEEV=jdVEhEh
@jPj@jtEE
EEEjEEMjSq
EE`EQEqE
0;DE@E
EmEE]E
jjjjjjjj
jjjEjkj@
Ej5jjjjj
jjjjEjj
qjEjjjjDE
<qLJOOa^+u[+O]3OU
@UOOO+
N1VONO
OOOOOMO
NaOkaO
NkO++9+
kOOOOa+
OOOOfkO+OU
3Vuay^D
tQ Etx
^t(jj+j
((((j(x(
((((jWf+q((2(j((
(+d(((
j@W((+((j
(((((@((
pR(R(RRRRRRR(A(
(RRR(((R(RR
RRR(RRRRA
RREPR(
((((R(((
(((R(RP$R(R(1((|(RR(}(RRRRRR
((((R((Q((
(RjR(((x(
V8PPPP+PPP$PP
PP+PPP(QPPRPPP
PRPWPPAP
P#PVPPP
Q\+RV|
Q`P$AP\D
RDhP0G
AAYAAq
AAqAfQ
AhAAAA@AqA
hAhWhhjh
hhh8hhh
hAphhhQh
AhpAhhQAhAhhAjh
hHhAAhAHhhhOAmhh
hAhhpAADhAhRhDhA
ADhPhhhhAhAH
2P@_]j
RD]DDDPP
D@WDDp3DQDD
hXWVjpD@@DD
DDDDDDDDD
h]uDf0
DDfffRf
@ ff@@f@ff0f@
h$@f+@@@
Rffffh
ff@fh@.fffL5pf
f3j@@@f@fffjfj
@f!fu0f@f
^@@@P@@@@@@
@@p_@@Q@@ES
hpSRDV
jjjhd0D
@`@jjjj
Rjjjjh
=jjj`h
RfRR0@
@RRD\R
RRRDjRRRRhDu
ptfMRRdR
f@RPh00\
DRRL3u
hRRRRRh
RHhfRR
hhhh`h
EPhhdhwh
hfHhhhhPhhhhrw
Phhhfhfhh8t`h
hhhhhhShhhhhh
DDDDDDMDDT
TCTTTDTD
TTTPdDDDDTDT+HT
I@TDTTDQpDDTDDUDTTDTDTRD
@DDTT@DTT
DTDDTTTTDD@TTTDD
TDHTDT
D>TDDuTTTLh
ff+dDf%
f.E$ DE
uVVVVVV
jVVt@V]r
VVVUVVV
VVVVVYVV
r;@;;;;
Dh7;;;;D
;;@@@;h;=;@=;;
;;;Y;;qTY;
;;;;;;
^t_j}YY
]7>DEt]9t]q
5su}9E
@}uuuju
zjuujuu
jujuuut
}uuuuju
hVD@Ch@WD{S
@Y%@@@
`````3
`````````
dt``$``uH
````t`V`P
d`^f^^
^^^fD3$W^^^f^
Df^[`f^^^j
Vf~ ^ff5f^^^wfQ^]
^^(^^^^"f
^w^ff^3
^f^u^d^f^^
u^_^f^^v^
^^^u^f^
^tY^^tf
fW$$fu
/$$f$f
fD$$$ff$fI
ff$fWf$Y$$$$$$
t$$FYefuf$
$tPA$ft$Y
$=D$f$Yjf$$=x
Y$Gf5f
fl_YPD
1}__)[
%8____M
_YP__OVl
#_qU_f_EQ
;\Qfh3UxttJD
D;4DuuDu
uuu]uu
uxutEu@uuu3uu9sufu?u
uuMuSPuuuuuuuuuuu5uY33u
ufu;u?ruuuS[upuYu
ssssDPsHssV
s@EsYHDss
3sH;^@!5
Ysus;
XDth|tE
;@@@h_D5V
@Wu@[^T
FVhhVV
VuEvVG
VY@DVj
phVNVV5
VYVVV:uVV
VPp@pV
VWtVVVNY,YPt4YY4
4P44P444P
44e4~Y4F44
44PWh4tF
444Y4D
tt4W4W4tt4
W4t454W4
44444<=W
444YWW
|V@@V|||D
|uY|||
=@h|D||||||
D5jDvD
DW@DDE
@3DDE^DD
[NI3E3D
D[DM[N
DDfQUDDDD
sUEutME
3E5E5Eb
DEY#DYE
^ MtDY9prkk3tus0+
@DuYDtDDDD
2DD}D3
}]>}P2}
xM}OuS
|d}YE}
Gjt\}D}E
MMu|Y@}G
tW}}E}Y}}
<}}]uYD
}DE]E}W
`}}UEfStf
sSr;rr
Yrr;srH3r
r;rrrurYrtr]
-P-r]_
-EP-$9-
}uLh@|hLEt}D
4Dhh}DE"
,,,),,,
,,D,,t,E, M
,D,QEt,,;\t;,,
,,G,,t@
uLtjP,(D,P,
P,tPE,D;PQ
D,,5,,M\D,,,^jt
V]u[MO
u ft0ut3f3
"J33uE'u
ttMt"P
ufufUu
'5-$DY('
Vu']}'
'`9'''j'@u
Du''3D''U''
'E'''('V
9]9U0D9`'9p9^]V99
9;9W99
9u`Y99pV9
9`9v9^j
9,u@U99D999@
9;999999
9D99v9uW
@D@@@$DD@@@@@@@@@
N@@D@@@<DD@@@@DT@@NN@\@4D@DN@@DN@
N@@@@@@@@
@@D@N@@@@N
@@@@I@Dt
rOEO@N
FrNGP@$
PO@P@DD
PPPtPSPPtP
tPPtP@PPP5P
PPt{PP
tPPEpPPPCP@M_ttPPP
WPt]_WPPP
tPPPP P
uP
t _9
=99
t@+ ~
GEpttMl
tt0V_tt
>ttttU
^A3t8*
t@jt;tt
ttV}thtWYtttttt
0t_u[]jtjtt"Y@3ttttltFtVttsttYtWttYt(tY
3333@3
~U33uF3
WjvPjR
^FUFFFF
pSH@Fu
FFFFFFFFF;FF
FFFF@FFSFF@Fp3FFMFFFFFFF
CCsC@C3pP
CCuhUC0
@~P~0~~~~@~0
~~~sC~d
f~~u~~~
~~~~9S~~~C
Lj5;~~3
M~~TZ~
EqpjFw
YDC@CS
x^3hFv
p@Y@P
.$D3D@
upS=_Y
4u@YMV
`o``o``
of`P`P`
f``Yvf
Wo```fo
f` f`P~
t* tHttt
6t3vtYYtt0vvtttRytvc(t
:2@tvvtt
u"vttvt
jVtpvvL\HvtdXvvvvvvvPvh@
lDvTvx`vv
`t@@DP
tYPFPPP
^FPPP4PPPPV
PPPFPtPP
PPYPPPP]PPPPPPPV
PtPtPPPPt;;P;vP@
>FP t@P P
YY ;Y @t t
Pt ;P t;$ P
@
Y ;F P
t;8 F;FFY@
P YF;
P @
b<8
u(5F3
j;;}tWC
SSw95Ej M;
uPuY;W
tuS@WS^h?
uutEueSEuuW$
uu] uu
]uuuuuu9
uuuuupuuP
@u<;u5u$u(u
uuauuu
SVu}Qu
upuuuu3u
u$u3u3
@Pu[@L
@@MDu@
@U@M$HD@
@$@]@@@
@@h@@]@$L@j@
@3a@@Dt
ThU@3V@@
@@$@D@
@@@@@@
@j@$h@
5Dt@Lu-
@@@p$@@,
$@@d@P@@$@v@P
#uYu-ZuuUuuuu
u-3u;Aut-
u---utuu-uuu-ruu+$-
uA--u-K-
uuu-uu
uuu-tuu
$uuut-Qu
uIu-uu
uu-u-u
uLuJu+u-
~PPPPPPP
rOemPPDPrToP
ixsPrme PPP
PtPPrt
NtN NN
NNbtttM
Tutnht
ttStt
nsl lpppnpp p
i.e pbup
pcptat
ppgppp
ppyustp
llnccl
llor/n)o
lo(ill
lllolll
lnolla
azoa a
aa aa
aeTa a
ha ea C
lnmah aa
a a aa
nt iae
it ia a
7eiuRi
7a 7
77oi76
p7nzni7w7
e7iao7
7ohco7a777
ehtthh
ahhhhhh6heahnshr-
t0iuhh
h2ti6h0a hhh
hhzo2R 6h
4te uxt
tl 6a
o e -_o
ttttc bt
ape66606d61Re
n66-e-i8
rMtt@ov
e.oaEur
......ne..+
...i .
aevRee
eedsae
ee:eme
ee:geeeee
eeeete
sevDea
rrrbJrery
rcgnbr
crvrr/rhrcrr
rrMobuJraer
yesMter
rlpMde
rAA,rcrubr
r/errrrrr
dDAotrt
merrumNu
maceryMoPeMa
invMnM
rnrssM
uTWMrhr
dMuMluuMMMd
MMFMTpt
eSnMdMM
JyeyMMM
MnMMeMdM
MiMnAMy
MpeSoSMayu
MauSySi
MgrnMM
H( ((
(HH(((((
j?cjpjvm
$g0_e-t
6'[jrj<,
h>&\bj)i54
jjjkjx
jjjjjjmjjj
jjjpjjr
vjj{jnjjo
}jjljj|
jyjjjz
:>".W9H
L56UGBO3
`*FMHKT4
GV (CW![2A
#-J1@{
5EE@kE~RE
A0E zEEK
4Z4YE7 U37EDE6EE[|EE#N
k/IEEE[aE8EEEEUEEhI[EL
EU\n7/W
EEEEETE7
@0EGEEEES
SeSwSSSSe%Sese
SSSeSeeSTeSe eASSSe
\eiSSW
eeGeeCru\SeSd
SeeSoeteMSeneee
SeSSfS
SSenSeS
\eeereiS
tWSoSNSE
eoSoSSR
mmmmrm
bl00WW0
0W00000
0We0W:
~iW0WWe
eHHHHnEpWkHzWilWiHFMetHCHHARHSsWdH
HWWeHHieeie
HHvGGHaHtHH
eHWeWHMH
loeWcamneHWeHeHHHoRFlieHT
`WFHHNHHHeeoHaHWdW
aiduFHpFHlH
HoWeHHHWHHaCHoWWetHHWlpe
ceapIepGipspeypHy
SePeputemptnCiee
sptopdpdlprpGr
npppGPersrpptepTppGpppetpeFpaIeSprGe
ppptlF
arspsmhepeceprpuiiWVoespp
pTlPel
eraireelsr
aErLylmaWrLrcrahrertcedWreSr3trrrrLTGotrrror2tPcrrnoe
rrrdWrs
rmAhdrr.Sn
resDlerWarlmetaagrrrtrattRtrrNr
nrgrWa
r]dNrirrr
Wrerrr
rrGllrotrsonGnWEeT
arrtrioKetrraaeaAMLc
cCosenp
oWxCogiCCM
oCsooC
rCooCW
ooeCsoC
WoasCC
CCuoCgnCW
oCoooo
WCoCoooCCCCoaCM
CogooeoooseCooCCIcoEoaltLCLonCCaCCCCrosrooaooooCDCCooCoCsoeMCoRoiioCwodCCCosC
CortCacChoo
eCCotCoaWC
s2QtPQsiQoifPiytrsnaQioeeaQP
angaEoeDQWWot
QnlWDQnQdPlQpWimQ
DQQSQQQDrQgTu
eideoQiQMxat
QEQRQEgonew
rddgSQc
QQttBQa
.QoUQQtmanQdaln
iowQ3Q
QQiQwQQUEe
l~CueiiiAiWiW
lKyiEiilG
iii2uRouie
il?IiCeiOx
agdeRSiio0eenWhRxgEiieV.Elali3ii.r
irlisiL
2enititeliiuWpA
ii!iENlieli
eLVPsx
SygtiWCoii
SdiEiecmiii
enRix3iiixiitei
zaiTCcmaaaa3fe
anpHieoeC
zSleaefoitTcriat
itaaLnaeWloaaaa
eranaaaid3aIasIlP
UaitanmaSaaaatnao2rO
ruasAtCran
laaaeeaeElaCsnaanla@tz
oea2.eGa.IaoaaltecaaelIdyinaSr
iaoaGaaaaGnDeruDrDceDDbDlrcDndrrrerDi
rrripDrDrDrrDDncDiDtrnDDrUrerxier
PntDrhrDrrDoar
nrtrerrDDDEsDttrDDDrtDrrrtDDnrrSDrsedgreEprrrrrse
erFDDDDoDreDDrDrErrUnDhDlDDIarPDrDrurDDrFlxedrrd
elgrroD
nSroeg
oteers
nmlsttGsWr
tnoEreoC
WitetdlPe
arerlrriEe
lrrrar
rItrrr
aPttsc
ieocrennrr
rTterziortrio
roitrllrrloIlCreuoentrTG
coeeTnkecVtlrlriiei
seapeAd
clrSSi
rCnrree
sFnerrrdr
rGrduF
aDeeSAscIlnucTitnierClee
eereeerr
omSclseea
rrsraneSemerea
aeeaevleeeceoeeet
eerereeureueeeeerEeeeotEr
ererkrntteoereeneteeeeiG9en
reertoLceeaeteeneeC
iyIemrLdEceeLPHtreecrtrtepie
liSletalhll
aftlilGeile
WtealiS
olzCIotdyaRdCGlHllne
eliLlbllatio?Ul
cCcnlddheiiPlCelleor
lllllGlllullHPwloMpP7llWCrrtEClllltlyl
MVlBlrlrsigl
eeePicee
@xxPxx@x}@
@@@@x@
x<@@}xx
@@}@@x
@xxx\x
(]x8xhxx
x@x@@]H@
@@@~@@@@ @@}
~t@@}@@
@@@@@H@@~
}@@@@@
~@@@@~@@@
@@@@@@~
@@@~}@@\@
YhYkmY
YEUYYYY
YYYYYWv
uYYZYR
pppppp
c]J21+)$
T5)m}-:}
dUh2Xe
o7~@__"o o
Ki(]Fv9pEo@;
ooU?oookp<o
o2oKn. u"o
oooo:\HE
oooZo'of
o^oCoo
\oo}oo#
:l(oo5/oXo
vyvYWvrv
v6*vv(vvkv2dv/zBvv
vyXvvv
rvvvvvv6
v^}.s^vQvvvCv~vm*Xv"vvv
)vvv`[vk
s(sm((s((Eyls
(s(vs((ssB((s(
(sss(Ks
s`s((s(((ss(s
A[sss(
sF(((s(Ds4s{s#-((cs(s
B((Y(h((5
kmq(.m(
(s(is(sss#s(s(((#(
(ss<A(szss(;bs((s3
IK"(ut
"ykch'7
+)LPgo
nt`s!ssZ
JYc!(T
GrLE7.8r!|
\[KwTcB
BBBB3BB$TzBJARBBi
BBBBBSB&BB!BBBt B)B
BBB!ytBBBB
.BBBBu_BBy
D~&BBB8BBB]BO
;Cq)</',rpX
iqLds@
`w7QRo
bf;BD"E} HK:
4Hd3!e
abAiU\ ).
Z.I.dZZ
Z.Z.Z...
.Zm.WZ5ZZJZW=
ZZZ.. }.ZOZZZZ.ZJ
.._.Z)..rZZ3Z
..M.tZ'.?Z.ZZz..$ZZ.Z.VZ.ZZ
Z.Z...Z.Z.HZ.ZNZ.ZZZ.
.Z.ZqZ.u
M .G.\
.K/0v{
.m3.s_M
`LDQ3(.
#Cl'&z@
%1s96GrX
A4W"H4
/=si\NH
/xxxxxxAx%xxYxax@bKxxX
xx-xLx9x)nqxxxxxxlx
xxRxx`
xxLxxxO$
xxx3~`xd
s$h&7B6`nBBlB}Y`z
BBBGB;B
BBI3/\
CBF3BB|BB
{BBdBk
cMBhB1B
BBBB=R'SG
BOEFBBBB&
s/-H^w
3`d5b(N{y
:bYf}"c"5
NqL?;WQ
.>K,K;a
aaa=a^^
<auaaaadNMH!aaa;(Z#!*Q
aaTa=Vaae+4a$aC8:aa5a
@aHagaa
aaaaaaaaa
aaa&a5
3B[0Of
rokx`w
88&c-x
]r?TpU
69pQ-gDj
V.zHg2
=Vg39S'2l
e8l|C^cgO_Y-
825pV_iiAg
gggggiggggd(iimggg
gie)@gi'ggMi>
)gi'ggggg*iQ@',ig:
,gLgkg<ggg
iii6r\ii(>g
D5Aii=jiiig0g6`tng2?ggiLgigggi! ggp*gi
x[=oqN
i;iii0AiY(D`(ivZ3i
\it0BEKi!
Hiiiiy:
.r'lijUrf9
M"dpc?Y
3)s,~%K20M&s;
b<m"-_X(Ijjxjjjjj
jjjHjjjjQjhqjjjj
jBjjjjjK
jjjncD
jj"j*jkj
ijGjAjvXjjV_bETjjjjjL-jj
jjj jjjjjCjTjzKj^/j$jjYjjjjIjjj
RjjjjjwjjjjjjjjjF
jjjjjjJ,jjj/j
k<p<&a6yuxcjUWiDT4k
je_%NrQ
Q}'8Nd7h
JY4Wj [KStjvjjzB;jj
38}&?he
V,.m,
Sk
S>.Rke
Y_m%^7
Lq
16A+\V3H
m6bm[~*\|W
m%fm%%Y%:m
%m%%%%
%m%%BPX%z4%
mN'mh80
%4%4C:S%m%m%
3m%Qj%%% %mCDm/%%%%%*%
%H%y%%
%m%%mP%C%mgx%m%JZ%Mm%mh
^mmmmmk)mmm_mmkmL|F]Bm$mnN:k:S
LmmWFmm4_m
mmItm[
pxJ#e~,~
$Bzw?/L
a3c0Nz
-GCy8fA]+
;&&&&&i
&]&&&&
&&&&&|
2&t&2&
&S&&N&
DD~YAse %I
i]nJ~V0+
oSQsU8&
_-h2>"
c{/BmYf#Trq
[<DbEw
YY%Y{!YYUY
Y!Y@TYY)YY
YYY3@[%
,0OsCh2
zoWgg(gg
>+og~ Cg
|'\X^FY
RQrGI9R_RtHkRRR"T
RRR{6RRRR-RO
yR/RL>RR\
.RRERJ"Z
R_RtRRaRRi@uRR
uRr*=Ru/RNReNRRH=a
RdR%RR&R
5;4{Pu.uu\u4
^R:Cut
Puu@u51Iux
*uuuC3HL
u;2)uquiuBu
uu-ux@uP
BuuS$7l`
hc$u{8?
>&XK8uuuLuuuu>u
Mb%qd4
$T7^$>
$A$$a$o
$Z$:$$$$
$:D$$$72
$$):Y$
f*$eL-$v|%
U$<y$$_n$
oI+@$C$-
$$$$$$$
"nI$6r$$\\\\\\? \<4$\(\)\v\B\HM\0A@c\\u\CT\7\,
\\\\a{
\e\\Exj
j>p]zX
\@\S\\q\(\+\\
\\8!6T
>\\}\w
Ai\\7\\%
<2\jY6fNbqeNz
6[nUYA
e>C2Y<
#ca1m`P
#t%l09
t3.);@EOg],y`.\
vX\'ev
d/HDlT
t/N |B
57%PNl
rw*^L$
WK[0D{
;/U$K}
;#;;;;
;.<;(;rp;
;;n\;;/Z;;v;1;
|;\;1;a;;$;;+8;
;N;;6;;
s;;;;U
LBBBBV
BBBUBB2UH
>3oBB)o&uB(
B0BB X
wBBBZBBB
#WB8BB
X`}BGg+ZEE<EE5OEi/-L
/&REwT<EEvEEEEE.D>}g,PEEQEIE
JEEEE1EE
*EEE4EFE
eEEKE3=E!ET
LKk.<EE-)E?EEjEEpEEvEEE5
YEP5E E3(EE
<zz[zzzzzzzzzz4@D}wwzF<
zzr:>zFmaz7zS-z|wgJzh
]z=zVCzazzzzd
zzPzfz
z,>zIz
$z0Jzzzz
byzzzz\z
szK`zz
%J%b%%6%
j%%%%0>~%%e%_
lM%"%S%%%}%%7
%%%%%%%%%%%%.%\%%Zn<
g%V%%%8#
838888
,88ca88;8
848L8yT+88
W@8b8hx8.88
808.8@
"j"I8W88Ey?A88'8
8||+8,88
-OKgk@=R-
_v[LW8
MF(8{9C`BA{/
``!`G>`````
`q:``"1i``N`[
``Q`````
>2``Ma
j``yR"``dc```
nb`'''
K-"+wS''''''')''6''']Vb'
'jV''''@'A''S|l
%']'')'
'''''R'&'Y`''ja{w5''
XY'xs''?M'''
h{;6{{J{~
{@{0aj){
{{s-{Lv{*frW{NM,C{p,
}{"{p{O,{
4Q{{={9E}{
{P{0{~J{
e{{`{b{bU{{F
{{P::&,xM
Jcy:~VQ:y::b
[::::B:A
C<:K::w:fa
:::Z:P
::&nj:
:<:::0:s::}7:
`:!::@T2:'::=[:
IB1$::::
LZS\kh:
`aJ`~q7JqqDq
qqEFqq{q?"3_0qbqB:qqqqCqq
Tqq\qq2q
@qq+qjqq
qqqqqq`qq4<
S@~c MNf
uMZpTVMTxrCC0J
$YZRV")
yb7$3=,
:adWC(_)E
EGvOH5tKqo
8gH3S}
UP\"S)SS
SSS'S&Y
`SS8SiSSS
%zeyMSS:QS~??-vSSV_vS
[SD,SSSj
?h`wSSSSSSSSSS"8S-K~SSS6D\S
/.2R[i`
9IZ^B^t7L
<%(dr`F9[
{R{{_B{{
{o{|{{
V'VVVV
yVVWV?4
VEVVVwSViPz
VVSK#]#VdV^2TVP`V
sQOVVVVkV/VVV,V
VV:+VhVVrN
mNKVB4NNV
NNNN<d
NNNa4*
'v_AyFNNN
tN{NNONW7
%NNg`FgNNfD
NNNNNq[NNN
QUqwNWW.WWW
$WWOW1W
WGWt#W1nWW^SFYW!LWWSsA6WWWWU,QTWWuWrSkW
WWpWIWE
W#WWZWWWWWWWWW|
0+0nD0000Huvnonnn0ng0V0nnHpn0
nn*nn0Inn
0000n`n0(n30)n4nnqnpnv0n000=090i00Dnnnnn0n00fn0n0000n0n#0n0C0l+00nnnGINn%J40nn00000n0nnnnn
nrn00n0nnl
ZN*9]2G_
fL LtWLn&H
7yLEL/
5LLLLLL?
j|,)LLL
?<NLLNihL-Lb,LLeLLLL4!/
LLTLLELLL^_2LrLk=LSL5LL
OLLLLI;QS%@LL4>
Mj$;$;;9;c;<;o;
9kr;kmuI;HG;;;;;=39;
;\;{;;s
y5;;B;:;;z
;;Rr;;;;r;
O@s D!
_7,|%rm
Ko[d0T<
555A5|=Th5/
'00c5?*
d#;5555
B55-9z
5555<g/
<5~}!55
R5A5~
5,55T5
[Oo5/554fYE
5krz`5'5
5}H-55
2)o<KV!oovjGnooCo%
onMoso
nfolT#ooooooFooGk
M3oC[foo^o
m~ooAoZo
W`~={Poo~
oOoo7oo
<oz~ooo-o
-*'m@R3@
UUU/P0s7N>U4 UUU7UeU
"vUjLUg
ENb|US>UU
UU+qQVUP6UdU
UUU(U9d[
Ud%RU}>U
UZZ=`{<UBUUUUU"UOUUUu
eeeeeH
e`J?+``````
`*=````]`]Io~
W`EP^``i`
%'`)`N`I`q``Tk``H
FWA```l``U
N`8`T` K_``-
`[`;`m6K
={K)V[
'M;8L{)""
:"G"r2h""h
"j"6"""
"_}"""""s"""
G"""""@e
[zn""""*""
6"o"V"?R_
?""bJ""y8=""
"q"7"s"""p
v:6Q]+
fhPD55
I;5_>3.
_v666'>
666669
6666*6B
C+++++JPb
++V65&+
+8y+z+
W+z+UH++
+S+++
n+++++8+(
++B+*F+S+i
+++++\V:++
A+++\ZL+ JBBBBA
BBBBt8B
CBBBrBBa_4B:NB
t>BuP
B&^uBdyBBB6|G94BBxg.BBB
:pBBB$BBw~B$*izgBRB/nBB|'B:BB
BHBPaBL6Ben+J
6V9hCwn:
ii!i>iq
Q2i7i9
giiii1
ii\ikY
iibif1
iii@iiLii*i4i~-iA#icR
#G#iyi
Xi}<NPiw%i>l.ibics'iid0i#i
^xl4cVc
D#-.cOcc
ctXccX{+*c|5@
ex4{c7\L5&c
A`ccc<Cc
cqEccc]jMW^&cQ
cIKcNBAN
sNN+?G N
NNgNcNNNcNNIN
NgBNNcNccRNcNKme
NS;1JN<NNcM<P9NNNNNN~Nn5c"N!NNcNcNc
#c7NcN:^
cNcmNCNN;NNGN
iK#}K|
MMMM]4
wMMYZMMMMNM
Mg6MznMM
MMMPMczMYMMo-
YMMMMN
dyy$MMgM*M`MMMMAMMM
M&jUM/
[:`~PmeF<
wWW@R9w
JF4>$UK
#]iY>>&
>n>>>r
>>>dv=>
>y~0>>>>"
S>>>>>>>F>>h2>8>)r[q>C?>
>P}>>u',>>u&>q>
j>ur>>}R>y:Gja>f
$B>>fG>
9w>u>>
&qo|)gdI?B
*smdVI
nS -Z(u
!=R|\*3
X7@pE81t3
T1AfXX
pX)sT9u
glw?XXd
ghY!XXXg
XAtB`9LXbUXX&XXQ
&X>X4*sXl<X
X<naXvdBJMogxyR
XZXXXX-[
<6pMXyXpXMM
RMMM@6MMMMMMMM0MbM,wMM^MMM
MMfMMi
udMUMMMM{MIN+MM]`
MM\wMMMv
D5DDD?DDD!TD
LDPDD
0DD.D^0DmDroIm_
DDD^Dw
k-D{VD&{DDDEbeDD>)DDO
DbDD^~rtl
DD DDLp
|G!{jo-VR*AAAAAFTDZA)AA%A
%AAA9=A)AAA
AAAAAAAA=!T|AG4AdAe\
IA;A:gA*
EAWZAAnA1A|AD78A{
2*AMR$][J|OAAAA
v%b$44444
O;4`4~{
]44Z474444"
p>V4M44
4L444$4
bl4434NW44-4
~q6!fn<
We#WM1O1WLWWWWWWWFdWW(W:HaWd&W_6ATWWWTGWWWW|^
*IKlWX|s
%WWvWW
|W:WI(W
<WWyPUWW0W
>/WWmW3W5
]gb.hn
/<n{za
DW|WWWpWWW
DWWWS=WWWWWWWBW
osWVWE
WWVWW
WP4OWWDZWW
Wbyt!WWWWWWW
WWWgEz
WWoWWFWW{
L&LL,dLLJMLL
L9#\N>!
LEaMMiLC.LL'L
L)?LL\
LLGL$LP;
Ou?(mLL6
{)LLULf
''C^A^'Ax<''&''!p$uSPC]\L''`'
\5b}L0
y'':7`'
'G]'K9''=|b@r^
@''&''?'''
:''ZL'=''''''
''L''Ddv'l'''':'
'&''SZ
'L'&L'Lk
o6UQkcg
Ipa,=c[0
`;w`j{u.c)J
TDeD]jgDvD
`DT5L_)D?~EW
D<2D/D'DD
DHk5>>DDDTXDDG
~D.RdD&@DD
DDn*5Dc]
DEDDE4
2DD]ZkJDG
DiZwDfD
IkDDm'mLiD;RD
D!DX;mc)D
Yc,oD_DrD7M
LvxD*pN
~bE_8N
]c2<*Q6M2
6#V!BQR1
IGzI\IIQ
GAv`}K"
4k}I3I
H?YII[I`
^|evIA
w%Ibul
HtI2_C
nSo^>II?IO_
^^B^w^I^I,I>fI^ O^I6^^^^
)II^#I^|IP^^^q^^^
^III *
^^CII^+^^A^iIII/^^^
IACI^@O#^vgzh^^I
I^^^Fbb^^i|w^I
N^^^^I^
93^j^^
^,II^Q
cYhf.#Y`YeY
YYHLYY-
YYY+YY%SYY%jY!;35|YDHY(YY0YYPG5
vYTh)-EY=Z^Bc
Y*}YYYYYYYYbQxYY
bQMD'MP1]J
@Ol5'b&4<
6+>}}L9}
}(,}}}VK}A1}
}_%}:}}}}-
}"}x}}}E}}y}}m
3(}}R}}}A}@}
/}E}Nl
}%M}x[}
yk\3w$
35V9,=X
~F5}FFWFg
FrnFFu
g3BFG$
FFtF@FFFI
F$:Z"AFFq
?CF8JF
FFgFXFFFF$FF
9FYFIFFgFW
FFFJt,gF
i_SPouVI
~U?l???f???Q'G-????
?iS??e?M<l
t"???M?KF93IX
=?H??j?Kb'
t?q???g5]?????2
?jv??6?ni
?Olv?????K
SNEcDZ
9Aly~Effz*fnfGe
;QffffhfvWfh&b
ffaevRfXffff
fXfrkfffYffTff,6f'H;f{:8f
f_YofF
ffffdV,,,44,4%,,,44,4,}4,44,,4,S
,,,4T4,,{4
z4?,,4944$,4,4\~44D,,4,^(
+,X,4,g4[,,44ck,,,B44^4
,4,Y44444,4,,,,,
,4vY,l@`4,
4,3444}84,G44,,C{4,k44z,44,44e
1~=Z)$7R
UZ}.^V
.G[9S%
SHBEc)O
vEVd3-g66
,66666P;66666666666*%6x66
6m66*`6
LQ!6E[6<I6OfA6c
6>6Q46!6g6
F4$FFFF
FFF^FFFDF
F"/H.)
gFFFFNF
FFVo;9
YFG}Vu&FLcLFF;_b
FFSFF^FnnF{F
(FFPFF70F!F6FgFFQ|
FFDFF"(FqF
rx'3<O`f
zttXA~?2)sc
~mY]00N09
`O,DY3PFP
=}PqfP\
PPhPPhT.PPP]KPPP
EPPPPPPPCPuA
:PP$PIPWPP]P}"Z{PP
nPPvP?PP`19WZt)\-P'PPyPP
"VIISh
WWU]Wt-OW.WU
WWT9Wa
WWWWOVWWUWW*;Y'
UUUWWWJWUWSW
WCWUtUW
WUrkWnUWUvUW
UcWWhpWzWWW
8W.WWbUWQ
4>#xW?UWW
_WKRWW
~U%U;WO
UK}<WWU9WUU
UU9UV>U
UUuyU-
UEOU7U3
i/3VMiZ
9BwY~IE^dd2
38@U@y
x''''''''o''h
5Z' e'Z ''v7
'''''&~
B''^'yX'D-!
-''P'{''_
BaA'P.P'%--
W'-':'x?
Xu6'`'A:
X1'''Z'+#'T
K''=''\'k
AQD/nAfR
M:m}I'4
3S(cV)"-vR
R9RRRU
>RRR;RRRRR@RR%AmkSERRR.U
RJRRRRR/
RRRRNj2
?UbCRR8R
|RRvRqR
&% R(KRRRR
afVEud
i4M<)27
.+#fcxF
}-7mW~]J(
~'6:((((((
(F?vaUHW
h)(B5(((-z(51
z((w[(
d>(((a
(f(ky(
(<(o(((E
s z $.
| R;
Y<'
sHDS| cL
Q ?Qv6zZ
*eK"1 t:~P
DPj4twV
Akt'o9X"
d$G&.
C!SXD68\6!;bWi6!Y29
(_iUPQ>)l
wgm%L806K*Ud
<jF8hH%nc
CoooCoC
omCCoboooooooo
woC}o<CooCo.qC
C^ooj.
ooC@{C^FoCCCXo
ooXoqooC7gCoC?(oFWooC|CC
oCCo:e"
ooCoCCCooxo
^oCCooo+
8R1~Fn2@wO`7
f,-q*{h***
D;*<****
*4"**|
a*l**))*\**%*p*jF
9*i*j3*
***fn*
*>**5*;.)u**'*='[E
*''#qD
Ga**z7*3p8\W\88
\88s8;T\\8\888\B\\\8
|O\(8s\\*f8K\88\8
8:\\88\8n\\\8\8\
88\88\\8
-\d8\m\8
e\j\F9k
88\88~\888=\8\\\!0\8
\[B\8\8\8\\
c\68\88888
V(JV[7@
VV|Vx?tSV
(QotV~FVVE
ZVV>v^^I^-KVVV
VVeBVEV<g
VVm<VlVrV
VVV1yVVIR@fV
VVVV=TO!
\2-KTKKK5)KKKOp
KBgqtdK8f
PK\KK)0K
K+mMKKbKKK+K
FjK)KKK*PKKK,K
>KKKKf#*D
KKKKiKKKKKKSK4
mjN4-v
KS%yRS}
DEIv!y+H0
9P-Py\
V~!NbP]*\;
ozIr`j
Kh2k`n
#xF#7k
11+~11
11T=111#11c|B1211
1111111
112`1If1(1311
&Wo[VKv11
11111J1h11i_G11
:191{P1
vy)11\1i11Q1]wwn|MK5i
R<Bw<aX{YG]
`btcr?
XPanmt
,=aW=0cs=
OU==Kt
=v=E==
=h==P=,===J+m=g0|={=.|
=<Z={5=yzjAfx=
H5=x=k===\bTrq
LH!=9/=
R=X===u=s===
yq==l==
++++c+
+=++)+++|+5&
"'+Y9+4]
+bxLYM
"+Q+G+%
+aHmr++]
+hms+p%
a)8`<u
C+=k++J++
&3YAuia}
a|?+o+E@AKR
p<yxI-3
-aSr+2R
\a^\3a\g\\\\\a
Ceai4a
CAa4XaRza\a\r"avaa\\
aaSaack\\(Haa\a\aa\\aa
\@\aa\a!
\\a\AF=\paai\G|aa\ad'
raa\aa\\aaa\\\aa\
N/0\a\
W\oSs<x9grR
.\Wmwd
\rA7QQ\
~G\T$Wu
N<\{'\o
8I2\%k=NTY
S6_$@}.&D]O
5[vQL`SW
6YXtVe
{Fu'{
'uC''W''
gd9t'laO''
Z6'sNDmXN[E
'' '<'
&''''b~t
TA%'s=z^
L;LL'LL>dXLLL
'KeLLLLLI''AcL
q'L7}'>.'L'LpSJL'LL2LL
L$Y'GLQLLL{
uL1L''$
Mg|LgLLL
_.u*L~
/+,a2TC1
\vM--&
s2MKhC
--^tL1wP
%1WU--;
q\-1P<fLm%A
4"*---
Ax$!p---
P"--~?----%*
----<Q_-
-f----u
x----Ddyc
K---C7
6U(=6;6
6'666666
6%6A 66(6x
666?6st66
6@|GF666l6"6
6 n61RP$b)6x6y?S666666
66fg9
m-6=6}66o6"d:666wX
t`ti]*tGG3
tTtt6cCt
ttttta
tWA&(tt*t
ptt-<0/
>kytWT
Zt#tt^tCt;
t-etyctBt*tttttXttST0x))Y9:J)))z)
;)Ps))$R)5oQ)D
n/a@)))
b9P&)\(=3)
))olVI))
X)|L))))
")))-yG>6)))
M))X);E))P)))'))k-)GL)Z))HDaX
jrj7^7q
pKGz!\(Mz
g4#'_5hS3;3
w3>3B33333-3Nb
34332D3
G33333333
H3f3Wa3z33
33363Mt3333
3333333\#333
33333H+332bkHGw3+Z
'IRSk
N\D}&\#7V
&Pm[Oxl
P`.cHfi
%f?^@pu
I`c}zK
$GA
ro/:ItjJAXab8fh#@R
-.4
"n"8'i)k
?)j
|gcuZM`
I<.
iCbCiiiiiii+dYiiC/ViQia5qiTi@iii~iVIii
4iiiI:iiFi
iiBii>i
ii1it-i
iii4TiSiW`
Mi0Ki<CAS
x'9999
P9n9M9
G9$9E9
9R9s99
99a9/t99
H-99_9g>
/999*9cNY&
99WO92[999
^M}^c<IX^^&HSED^^^^l^g^pA^|
^^^^^BU^^^k^^^uP
!UYE^<^N
^n ^^^W^
^S^^^\
^e^|4=^
vj.^;^^^Tk86S^^
#d#gdVgDddd6d
EwdgdCdd8d
dd-ggddbd
s#H(ddgdg0gs$v
\Md6ddd dYdT<gdgggd6~
gydd<%d
ddpdddSqddddgXgdggfo^d\xdd
ddggg Epe
gP?g'M
pae.gVggMg9
2`gg{gQg
%aQq(j\
Bm+,xNs
t=O2)W(
jnC^^
An)JobjJ
EpAA-I
:A)HAAA
Eu@1@Ar=
hA3LAzjAAD
pC6(A4;,[AA-
lFo{rB,LG
!AA&&rA
`/J}0AAA
AhA%AA\
AA48A\
aAFA7a
AAyAAwAA;
AAAQJ-
CN<71
%=-bSbj.b
bbAb5bb:bbb?
b^babb
aF)ombsb
bRJbbb(2s=
`bb3wp7Robbbbbbbbbp
bgj`bgb5fb6
b&)bUKb#
1_An\h
-`n[n\n
'nDnCnj_
SSj*&3@BS
SbGWnmGS0W
OSS1O}SIS
SSJBSoSSyB
SS[SSsSSxASTSSSSmU
&SSS0S"}SSS"
SS&8)SUS0f&SSXjv;aSS8SIz
SeSSXS
@@(@@@@
-'rrM+r'rrr}
$#NN###$8
####Y###O$###
#N#*[#F#
####8#
xwxxxx
xxwxxx
O0--cM-04]L8'
2@F--Uj
--XB-->F-d
\7-6.!8`-76'2=
WDq-Z--39=G
-4`D:-
>d7~Se-H-<
-6-29@-H
->,^-]--db
ebeeeeezeev}
leZ~ee
ezeevedkiu~
oxyexh}e{e^eb^efZreyxeet
u|eueee
`eejesee\oee]eneewee
ne{eus
ovovooo
onoooo
wwwwwww
wwpwwww
wwwwwww
www{wwwwwwwwww
pwwwww
ww{wwwww
wwpxwww
xwwwwww
wwwwwwwwwww
wwwwwww
wwwwwwwwww
wwpwwwww
wwwwww
wwwwww
;q|;>>DhH>
>D><<;>>>
>>{>>>C
;>q>dEAE<;>
r>u;0U>BF
zqHozH
PP%PPP
PPPtPP
PPPPPPD
PPPPPIP;
PPPPPPP]PPP;;PDP
PPyP%PPDDDDDDD
DD/wDDD
DD{DD/
DDD__DDDDDDD
DHDkD_D
DDDSDD<Di
Djjjjj
yDykIk
kkkkDkkS
kPkkkDkDkkkkk
Z7`+mdt+#
EEEr{H
EEEEHE
J;;q;;;;<
>m;Sib^;Z
}qjIFF
k`vv`vvvvv`vvvyvvvvvvvrvvvvvvvvvovvvvv[j`vvvvivv
vvv`vvvRvvRvv`vvvvvvg
`F{r{`CCr
]s]g]]]f]]]]]s
F]]]f]]]
]]]]]]]F
K}}}}u}
+}h}}}h}
YJ,}JJH
JHJHJ}
}}JJiJJ}J}J
EJ}}JJJ}},GEFH}}K
}EFJ}JJ
JDJJHJH
JKJJ}}J
aEJJEJJ}JEHJ}
qqqq$'q
qrqq(:Jqq%qqqqq.
qqq/qqqkqq
$#$qL@$$
q$$$$$$0$$
wwwwww
wwww{ww
,999"$599#
9;><!+
999928
/9#9969!99%90
9.99"9
ed\\b\`H[yQ]if8
\BG]H\ALrb
]\B^H\Z\s
E\U\s"
Jo\\\>\qDX
c~l\bPU
\buM\j\_
^\\hI'a
@\e0\\\
e=\t\nk\u\]y
wwwwwwwwww
wwp{www
{wwwwwwwwwwwwwww
xxxxxx
pwxxxx
xxxxwx
wxxxwx
wwppxwppw
wwpppw
ppwppw
wpwwpww
wwwwpp
pwpwwwpwpwwwwwwwwww
wpwpwwwww
wwwwww
wwwwwwww
wwwwwww
llllll
"""""#"
"""""""
uE;q{7
=Q==4=O@=
A===U=F
======C
q<==;===E===}=B;=E======
==;===An=;
=;;==A=0l
WOICJCCCCCCC@ACCCCC
~Cr@CC
GCCUCWCCCCCC
CCCCCICCCx
WHWCCC
JJqq5KqJJ
JJJ_WJ JBW
vJJJJJh
JWJJJKJJJJ
JJFJJSJqJqJJJqJJJ
Jh\JJy
oy4
;ID%2b
{{D/{{{{{{
{{{{{{{{E{{{{
{{D<%{
{{{{w{
i0OND{i
I(i((i(i(ii(ii(i((i(
((ij7j((j(ii(i((ii((iiiiji(((iiji(]iiii(i(i(i(((ii(((ij((((iii(((((ji(i(i(
iiii(d~i(ii((ii(((
ii(i((
GEGGHGGG
GdGGhGHKG
}F)c/
M7=))>))
q%;|%%%
:<<<<<<<gggggggggg<<ggAggg_<<<<<gg<<g<<<ggg<gg<g<<k
gg<g<ggg<<Ag<g<<<g<Q<<ggggJ<gg<g<<<g<
<Qggg<gg<<g<Ag_<<g<g<<Q<g<<gggg
CCCCFC1CC
C;FCC;
CCCCC>
C^CCbC
C1D<x;_;Da};;Y;k
;Jx;jx
yI>FG~F}>e
DMMMMMMMMMMMVVMMMMMMMMMMMMVMMMMMMMMMMMuMMMM
hMMMMMMMMMMM|MM
MMMMMM
uuuuuuqxxuquuxuxeuuqueu
uuuuuu'
gupuuu
F%jTFF
LLLLL;LLLFLLLLLLLL
LFLLLLh
hLLLLLLCL
;FLLLL
NNNNNNNNN
GMNNNCSMNNNNNN~NxNNNNNNNC<
NCNNN|ZN;NN
xxxxJxKxqxK
xxxxxx
xqxJxjxx
xxxxxxxxJxxJxxx
xxxqrx
xxxqxxxK
@DDH!DEJ!Jo
EHEJH^
zGlGJD
DGDJDYD
JPHDeJDMK
JH}HEK
JYwJ!
nlDDHG!J
geg>>>h
ggggg>> >l
>>glg>
g>g>>>gggg>
>Aggg>
0=aaoy.:m.soiaa..a" .as:.rssmaax.s.ubra.txallaan.Vna acn. afma.aa.osaea.<s-as faa":aa.a.ncuum-aahoha:1.".ssoaao.nalatceams.aan.a<." ac.a=Irameiam=i
".aaaraa-.iam.cto0amaemnfsaca1sor>tvaam-aaarstemsa
afelePe.ese.
el..eeete
e.>eeerveseiieeueies= s" >>3k uruer < le.eex..t s".esu.cycL..=
e.ec.es eeEuI
e<en""Aa e eqe.aee<ee
le/.eev.reeee..l. e..qtvre> .eii et "eeee vee
.e c fne.oeeuqe<.d.edoger.se.vdPD
DDsDDlPDeeeDi NDiDxeDDGAPuP Dsyqt/DDDt eDn/DN
GDADDDDDXDDDDs>c/PDD DeuDDDusfDDDXr
DeXNvrDs<DDG/DdG<eD>A
leNvDsDDtNmPLD sIDaenIDPtD>XeIeDDioDgyeA e
XiD> DADrIIelPXo<ctA EDD DrGD>DbID tDe
Axx4x3A9DxI3XxgPPx44
GD3x0?4xNIx4NxI00xxADGXDANx
DGPG1xPxIxPxXDD0
xxGxAIxPxxN0xxx
XxJPxmDxxAxX
1axAGI0DxD\3 Dx0NNDmxDXADD1GAx4
3xD1xx
DxxRxxxNN%40I0x004x0xxD_x4Ex0xIx0XS
IANZPG
90<h<>?
845> r44n4k4*45$4?85444D?4
?04?=46
0?4;784?4744<z4944
440?D04
4_?>>44W444i446
404?4<6>4Y44?445>8<4:=>644?44544]
4k:8446xx444
;44 00
23311ui
98<:5778:
:7<8^:Z:7:<M;:=t:<:9:xj66::
;:8;_qq;<96e76c<O9<84<
\UtC<@
:6:976;;;O8$7;$9;::;66:<6:{;7;z:::<0
7:97:6948
84Y78!576:
79=87;:
q8;5}9L
c875;95@FQ68L:;
868;i8
89F:57 O8964b;G:7:(
88+6wY>qv<>>v;;^v;;v?
=vv;>v;;vvv^;><i><<vvv.;v;v;?R><v;vv=;vZNvo;Bv>vdv;Svvv?vG;t=dv
vv>vv;>;O<v;v<?<v;v>?h?;vJTv=;<>;]159414v162
v165v0
{053?(
1X6#u6
125?44
rv02514'
v5Rvv@24100#06
4v?;v41?
9:9<=98=
<9=9>(;
53317:7?}~266!0?
(:?166?
368?@0
6736:?28}F697?9):?7]<
?w9:tM01?l:??( z`
H,0Y870P521`a07I7$9
U9<=@??_4564:43
dP446v5:A=9
=4p4:1>
+ 4>YR7
>=:`:958>5o40
h::=2<8
::1=d<
=<1<<;:<;
:0:=::<;
`8`h33433,X33T333
43``3433T3
4d333```
44x3333`343`43`4,`
43D3`<3
3`3434`
8443433333303\(D3@```Pt333`
4`\3L3$@
43H33344`p4<43P3L330(3
43`4`34433
``::5`
CryptBinaryToStringW
GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
GetWindow
PathAppendA
PathAppendW
__GetMainArgs
signal
?Strcat@WSTRING@@QAEEPBV1@@Z
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
CRYPT32.DLL
KERNEL32.dll
USER32.DLL
SHLWAPI.DLL
CRTDLL.DLL
ulib.dll
:<E4a$
|G@t'R[b[
-V&9w\Q0L
:yS70UhwVH2]iov
}oz\cB
t|LW2_$z(
c)'w3(;
f7fyKW,BSH
^D9}{L
}HHMD8
!GHK/s
jzEq3K[g
&t29jQT
qbB*u4
bw|8/M
=0IJ S>f$ORyw:QGq
>"I>4xu=|9S0
@W(JIq-}[h
xX\cQT7
DbNz]96k'
9?2xnO
B<jD_{
_dC5P`A
G`h$&$oaC
6G v{};"XryvLXhcL9xl`9
bnL/&2$:cI Ep
sK|;+X
m>VTT{Nw
8[f;#&
v,.`DSBLrX
Q-U}7[9$t#NVn8n`d9
i<j<0=
!dRAL|&
6L71|h
~DS9GIi
f"emIASZ
O`5oHw
!`}0)V$b
J(SMOqalI'W
7w_c0sl
np"=!/A%:
y`Omt>,
ec<bxR
s/FxoSj
e2c*Us
p:o=np
y1b!AH
l{ls?7
?rkH=ev]"+vh
Gq~bG'+
\J.-R+t:
=pLPDEXw*xl"6+4
rlI:U"~N
Nx"+)G&FQNEy
L_r"hiWC"
A^1[^\
02]zIJ[
bMnkt$
bq_& de9*!
pa41DM,t}
.n:B:*
"T0Y~W
ux>v|/q8[
Y*.K='
t5mQ{2;m
,w'tcD
&>hR_@a,
v\lc;>M#a{c\
&hZQS/
?pLv!X
"L-aA5I
jAw1)(
X`e_q~
ni#2jn
L57r<hE
6g8&A7vQ"+
Mpr;;}8xbKtcFZrUU
kMMYS G
|zC#{
k>L Sk
+Dm;rKOz*"
a,Qz:r3+
Q"-ACB
Vn;eN7B|0bi
cjSG92
z0YFR)
q`[fY_A*j<}:Kd1
|:vH)X
Ie1uS#{&Hy
BvzD[TQ!3Ob\
^Q_x`#tgT{4
"#{S?h
.j{Uaf
zwqw*Ey
)@:gFv
8:8j$u[r1
Yt}P.SG
u[)V!k
}F(y1FXb&
R84SD[C-^<
H;(Mw
]7W?G;
l0zz9xR^
:kdzPig8!b
^4R"T?
-kpiXTyh6
&!G~[e[j
|-@0s3S)^
}1IiuV_
GICao3tbk$
B2,dU?
L*=*9oIx
=@T2[7
*Fbb?!G
.A-MKCn^*d,~;
vV{5.u
X6L=|s1/
\!|e>\8
c8Vm,:-%fT
dz|tBG
QkkCK,W7g
32-BZ2cd
VMhYG9gw1L`*^
40.66|W6
"h%F&%j
#|Gh.Ad
7~l@c79)
N9=)H(
x^YdcY
<&X3Vn2)n$
fY&Sa)sh6!
+y]T//c
5P+R)=
-<5M=0
oyxIy(a
Sm;Mc!QO
f|`7%h[
^I*qcR
s0"d0.`6~
Oe>hu9
+[(V- s.
$g<hdm;(wt
?G}cN$RT'#i8(l6
=?{TpO
e1k\!U
TH#.}DH
N9oW)eZ+
j%9-e4\@X
!ar-RG
#8j$/57pO
Uxn|^pHM
[.%,O`
%dU0w)
T:d@q[};:?=
lcxop/!ZDp
:gQO^B=[
(e@gWs
?-,PW2;4Z5k 6@1
cq1PK^G'
m68Z/l
c(Bh32
f'"47T
'|_lR{w!
_6?!~o+I@
rdH2x'
g_n3f8Y
@twy}v
Ydxv32NF7
.L&euHc y5#,wbNQ
LWp($85
lA2LFq*
t<mGDQa,D@
e+(-H:"3
Pe0Xr"4N
=9+{t)
;sG[Eq
->9Zd|rJx-
duDZDC
Y~:rC+YE`1Xy1C
%oA=mcphl,#Pjp_e
ApEYh]K0
MKuB#Ai'.4
s".I*Bq9
Sx7]0yI
~'Vt:3
WeJ7]ZM*t~)3%~!4I
k9>[}0JOyQG
"Z#*E1
#R)c#MW
8U%=Fp
K[e7yQ4
"z;Tkz^pW
sg_"DZ{)
?dPyS9;
tqDl*uB
:&1_)[6D@L
>0S"|f
W?3:WZp=n[
OhE+J>#8ej%V55HU9j
"r=+#3
@UOWve
2?>:PZj
^\1n2>H
}-qJ??E9f]
bQhNK/L
)3{)K|:Q0?)h
]nS;<gfy`A
{[rv]7g
W^=N\gZ
e[@=}q=
RBc]=l7
7y-?[6RA&]
x&;"T#
$[y,)|SC
Smz/rys9
$/&hNx9
ptKB6.#b
W8kvy@
r+5nnT
"+ BU52g
|>Q9r[<
GJhP~1
\%R&W.=B
}g5i<"R
0M.HI4Y
,S"t0hRJtyQe
prX9%c
d3l)F4wDET$],
i_LCtEW5
3owuR'b
Ra.|r!
K9FbVH2v9(s
yRk\>eU>
bQwzpkEP1
:v08_lU
r0=8iX]R;6t0tA2
dcjszsG?(w`q
~km+K9
$|M-Kto&q
xUc][luD!pOj$
K<od7vUPX
m$><1I
%^X&mjf
];`b8.sj
6o]H$4jI
&uqk<AI
aJiLV63PY@t
mHz2CDy;v}^m6
.+z:l,: Bm*)
nvbASwnw}
R?4y},7HD
_W*YkdR
{m2J>j}
ai14IiEJ;L)9e^k#
[(RM~<?
$1IzL2!u
(eZc:[,(3^<qG.#
lh@d~X&
'=>a>g1tXvf[r0y%jZ
UqdAw>j4
N0tR`Kl[F8
N$FXp1s
X}RuYi
[nbRoOCM<T
J"a>wu
m%MV/Zs
$pGZV.JR"
n{ uIZ
C+)-fy
/A7*i!!FMC
J|3V`2|
Ij-70oA%zO
%x*/#fL
WevB<IF
X'6mB)\M
iodrGL
i]rtH f
z5eFT])
\@3^`I
] ^f/jqukrryP
WYgcmt
*QEJMc{WU5
lU8>-R{RIL
J$\zIp5z
%r^p.{LUra
E)CsJ7WUV
@9r.M,
$JT.;g
-/ucgs,Wkj
is">YL\"
r=oO|"m
QXz/32e-t
S!:\p)w
1tMsXs;w]w|%db
p$-C,zjP-W(
k^u>dV)P+
+_q<8x.c
"M@o$\(aY
s{/TmhT=h=8*=
'@b[GQ
t00qhe5McYz:Wi
P#f4RF/
Q,o'l(RY97$.8X$kU)~
~ze|c<k
qfKZ1X
R%MOg2k
zQf9`[
nEn&<t_
>1KL\O3
FEdL'o
Wz%1f#
77;H.J
s,gRP=G~L--
zu#vxt\
+A)M/$I
-{zUnz.9c(t3
sWqD)^9TjXt#Od
[I>7Y z
R-Hp=|
icpnIY
Y5'xy0\
b=l?PA&v
Y/f(im(
O=XpE/S
Fl-&~"e)
E7H(8h
k7*u[j20/
e~mx9^=
/6Lv6a
gP8UB)Y_U&i*3/n
LSXMwi
.\Z+%rYC
EiKc/Y^@~`Q
c]T[m
EgE8vK
jhB5S0qQ!zHcH>_N' P
^GYz|N;
Q2Q(v424
SuaYTV7
k{OT`E
G\Ie*e!yq
x'L$DS`IB
6/8oB[tixo
-o3qs]U
FePzJH6+
#HX$[ _1
;$UaD%}HfZC
qUk8^a/(7"
VRrKCE
$^wIiAR%sHZ]
Ay1;c[
-quE]1Cqh
.58-;7
\RT*Mh
il*=gG\Z;.0PmX'?s|2b`
,0GnMDs
n7$Z1ObvxA;=y
ncP^@ZB6
Sb-Q]:
"V|A5\JD
ln~<.CYnb.
]+=}uA
h\Nb@b
hMcv"Wky.CNd
Rs"bst6r4q=} S2W<
.Ou04./^/y7vV
HhsAi(x1
=[FlO MPyf&
^x/vox1
xDh%=s
p{~p'GiZ[E[
]d~tO@s=
$dgk?KXj'
>#}Jyn^)FbT
$)C2B{g
=(HR>I
ZBq}%j
:_}Y<Xl*
|cWjH|&
7g+.|2*uwW&lI<=U
O|<nz/qU0f0V.:{U&AKr_
x>~a"
,^}Dx4^lbe
{)Ka0CB
kn6<Q2
Y;D|(0270zg-
Z(za+&1AP
6S~0^`hEJ01c\
v2"Kg1%
RAwBzp
*@y(n*>
?p+3B*M
2e)dC`KA
EQ|6)wpHB2G
Hh*#zat:
&{Gv/HS`J
Y*$ _rFS[=XLQu
s^5H37Z
(7B87d7GxR
{<U5^}4BKR
-XtBoj\4
:WW>0}]o1;
!Pca}bF#Lui&V
K1b:PQ
pp, 2,o$>
S73q P~
`1^t7
>lbOUjVp<
Ip}y)'?0
7{QeF_
b^CXrZ
X1j&,9
I2atFX\;
}\{vh6e
i%*1!$
u2K#T/nqOi
-<)xU1
7ra%+7)
gDXH#
goI<R~LVB_
Rx>X!4
j:_ODm
(ro4~<
sC1Bnq
ZJ4V=~QNp
;U0UeHC"
#boIX
Za4ne|7hx~
)U,~+#w6.
mHdH];.
kjaNvyw$
|f*is'?
dbD-=qe5e->
U*!Br^
WM:Vo^jr"V?_
Sz(M;{cn:NvG*_6Q
t5:{J,
-Z1+[V"m3%g
1#9Y]}2]<>j
Fp}1o{g`
$QLufK
HYC>l,
>?$8&Xd<WQ\
>eu6Ucj
+'EY+)
+7=5JH
6!F^")*_/_c\[lut,
2H(R6XJ"
NyB]#~4
(QA)z%;fY6
Oz@]kBZ
5''6qV
@>v;)3
rmaFtV
!5$,6O)=
3sb,_>
,mB5-{<#p%r$
tZ"wXG
.(4~)Z
.ulc38o
\Nm9<m/T%]5If
U7{]:dO
E=D4&u
v=HZ\]4
ns:\?sxJ}l&
u:\p%`]
L [wB*t\+V
+Y1FWLl-<
iC,@.H6~y_9uu
MA0Xvl
sww(8Xx
QcpRd?c
QbVv_E! NO
Z)5b&t\}s5Q.v
"Dbn+{e
d?-Qt(`y!NX
?/Rxn~
'q<ENQS
p(/OjO
f*O5\`.
$;od>\
=o<N`:s:1q
VQOZg%FUQx&-
_C$"$#,f
eB`=al
Zt<DSJ<j
h3Br!r
NZ_fUqQk)
-q(v<+1
{>QJDZ(^SHH9Fu
f>P=<z
EDO9gVg
rZX=@Av={
#m@zheA
roSOrYT1C
CQz"_9br
1Js CcGAF
7vzOUdh<
-7g66oR:xTn:#
eFs8Hmd
\V.!\&
O`W~ktvDR10{
p.*<A5qh/OG
sO;{};
7_[<wT
_(Uy'X9~}FR
!s*P@uI
_3?+1@
C@9hh)
SDj[W;
H?c`pyb
H0zKBz
.|<I#5
a.bsD\S{RT@-
SkZgWY+ED~D
=hW]8e$eV
8S<',=/YNJo&f
%Yo4zt
EKS\hG
>M#S}&
$QkO$h`
P8aG.O+
&CJd=I"F
`t;*aR
&q0U:S:g
$wyBKC@"]e|
Nlp\|vFa]f
R5gfzf
X]]LiG?'B&
|AC<<~5i
[Rhb|HgkU2
T|+CPdU
2?}Gnl
:DcY_wn{*
'Z<zGemu[D3
w%yX&jf)%Z&s
hdayg.
^F}JkQ?MU(x
2Km8^-J"hgLh
Eag6jo|
qLQUm>
%}z>*MqMKj
;'G= :d
uM9uQ9`^>2/u
]^%x.5+"
wUr-TGh:s
agFha-
RNvAPa}%xL>s
<C[/MP
8Io3aMkqJm6
c{]&32Aa0@
7<%=TDq!
GczX'=RM}W
!e`_sf2iL%|0[SE~
L2As~|
!zxQBcNW
_Ugtw{dr
[o3@:P
}RM$"7uv
Xm]jsN,Aj9
1e1wI1u.
pRZU^cgo\
Tm&?%7
M'D.,:%F
%3iw[3ybHF
s1<Av:<
Z>KJ'U
*x#Zf?d;
N_~(8*H
iwazClRn
jJcg_qj
UcLdC?vX_aT%"n3t/*
f=}I(9
+*~/kz/1
,r|W._PjCU#
N+U`RBV&
O5{|s&g
@rl8jw LH
s|>ztNvm
Z}<(=Z
4Mln-28}Hr
_Cnw_=
WLd^bs:^x
;K$9GB
LQ<+-~d|
V5!-rf@l&9%_
t<,|yU
BI@"k[9
<gf4KY
%= nq4
b[%u`a
%i[B,E
db[1bb,q@ l
+a'?<X
(.9i\`HQfw4W
]N!U>b]a*
\$ I:
B;_'HZUZ6
T@zUXF[
}&eu76%:K
@JXW%D^NHd8S<
@D'3}gY
].;9=*Pp
PMFFx9
rg'a<#
W>NEK#)L/9
{Z^Yx\
:j$fye-[mE
/^\o1f2s]k)
sU(2ec
/1.I<"{
Rs^'Y~V
w1KS8~ar+rxY@
[gb)ba?b
P~jiO)<6lk)
W1?atT
kDpk\p}]~gk
sx1&@E'3jL
6*Qy"q]?p
k&F:KI
EltE*`
2^uBUCQetyat7d
V]6_b$?%
.3(fM&Q
mc{D1bni
=V/n>k
2d@ZMFw%
|h[~i
3p\N^T4
[QKi.X
$Z[S;
w2YVN\o3
"9t0\d4
~ANcYLjxVL+I+eNz
NtBi):85&
zc%lCvYV
GBW.;&J)
c;7:H"T
)8No0w
(aPa7A$TeS
#K,P3[
}~a5ST
S$BNu8jz
brc'k\@tDI
G5Sbu&@"
<+{KNH=_
:o6/O]<
? 0OEw
mxNxa+
linorr
eWedei

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 61714 8.8.8.8 53
192.168.56.101 56933 8.8.8.8 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 58485 8.8.8.8 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.