1.2
低危

21a0efe88e194fe2098a762391ae4a49b741fee1ad5c1a2d774caceb09dc9f92

21a0efe88e194fe2098a762391ae4a49b741fee1ad5c1a2d774caceb09dc9f92.exe

分析耗时

195s

最近分析

358天前

文件大小

124.3KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN DROPPER GEPYS
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.89
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200217 18.4.3895.0
Baidu Win32.Trojan.Kryptik.eg 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200218 2013.8.14.323
McAfee GenericRXHC-UY!14FE5EC1AAA6 20200217 6.0.6.653
Tencent Malware.Win32.Gencirc.10b0cec0 20200218 1.0.0.1
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': 'kUuppwFn', 'virtual_address': '0x0000b000', 'virtual_size': '0x0001e000', 'size_of_data': '0x0001dc00', 'entropy': 7.908684897156857} entropy 7.908684897156857 description 发现高熵的节
entropy 0.99581589958159 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 60 个反病毒引擎识别为恶意 (50 out of 60 个事件)
ALYac Trojan.GenericKD.32242087
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Trojan.GenericKD.32242087
AhnLab-V3 Trojan/Win32.Krypto.C3385714
Antiy-AVL Trojan/Win32.Agentb
Arcabit Trojan.Generic.D1EBF9A7
Avast Win32:Malware-gen
Avira TR/Drop.Gepys.qkmhw
Baidu Win32.Trojan.Kryptik.eg
BitDefender Trojan.GenericKD.32242087
BitDefenderTheta Gen:NN.ZexaF.34090.hmHfaauD3wn
Bkav W32.AIDetectVM.malware
CAT-QuickHeal TrojanDropper.Gepys.A
ClamAV Win.Trojan.Gepys-7110521-0
Comodo TrojWare.Win32.Injector.AFQB@4wuq9h
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.c38933
Cylance Unsafe
Cyren W32/Trojan.MYEU-6979
DrWeb Trojan.Redirect.140
ESET-NOD32 Win32/TrojanDropper.Gepys.AA
Emsisoft Trojan.GenericKD.32242087 (B)
Endgame malicious (high confidence)
F-Prot W32/Trojan2.PZZK
F-Secure Trojan.TR/Drop.Gepys.qkmhw
FireEye Generic.mg.211d89804d713299
Fortinet W32/Kryptik.AZHQ!tr
GData Trojan.GenericKD.32242087
Ikarus Trojan-Dropper.Win32.Gepys
Invincea heuristic
Jiangmin Trojan/Agentb.vo
K7AntiVirus Trojan ( 0051918e1 )
K7GW Trojan ( 0051918e1 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=86)
Malwarebytes Trojan.ICLoader
MaxSecure Trojan.Malware.300983.susgen
McAfee GenericRXHC-UY!14FE5EC1AAA6
McAfee-GW-Edition BehavesLike.Win32.Sdbot.cc
MicroWorld-eScan Trojan.GenericKD.32242087
Microsoft Trojan:Win32/Wacatac.D!ml
NANO-Antivirus Trojan.Win32.Redirect.fndjmy
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM11.1.5301.Malware.Gen
Rising Dropper.Gepys!8.15D (RDMK:cmRtazokslV2Wjs2M0EVfotQFg11)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Gyepis-B
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2013-04-23 13:05:39

PE Imphash

41ca4f10934e245fa8f7b576cbd18f2d

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
bDGaYvCD 0x00001000 0x0000a000 0x00000000 0.0
kUuppwFn 0x0000b000 0x0001e000 0x0001dc00 7.908684897156857
Gndj 0x00029000 0x00001000 0x00000200 3.515011880888585

Imports

Library CRTDLL.DLL:
0x42908c exit
Library KERNEL32.DLL:
0x429094 LoadLibraryA
0x429098 ExitProcess
0x42909c GetProcAddress
0x4290a0 VirtualProtect
Library ntdll.dll:
0x4290a8 wcschr
Library SHLWAPI.DLL:
0x4290b0 PathGetDriveNumberA
Library USER32.dll:
0x4290b8 LoadStringW
Library WINSTA.dll:

L!This program cannot be run in DOS mode.
bDGaYvCD
kUuppwFn
{PSh(VSv
3f4093[l4#
M_^3[16V,I
fG[2MjuC
S5DP*'UB
$V-D[v$
-3wnT5
/K(o+^$F\
eaLjc@(
m0CJJjU/0#
7-ka5o
OIT%Vb!
6+i4,l
'bm/-)C
H&yW`JfS
0ak[Jt)
*17 %"/,s7i
G5M-';
*'n{1)V
4M'4BP
M4M)7ESao
@X/PMGNd
CY]hX]/
!/L4=KY
GUu5Mcq
I!)9o~vT
<EV:nmkl
"AAnl<
,uko0J
Xv'yXx9
*"*4MAYq
Q}HDOC.dpll
ddUrlToFav&s~8
~%XV:>
np':~p
bctpP+ &xw8.1
l/%+uX!t
SmZ(" Xm
4F\L=[
D.Z.\28?s
$FrSbUh,}k
2X;XPWw]-
nk|V8YX!/t
W`e5Pra
{cGLrvWEb~oErtEe'
a-_PiDeEc
sSvG`zto:sREV
PoWLlrdWronVA
FP8ePG}V#ErElEEVxG
'ti6WF
~rplWMVcO&e liW-
uUP[ed
cNPt;x
ArH\aQaZ
%qcE66Z{.
C4:.L:
T!PXi$t
sos(T"
$w[s|`+x
|t+StEt
#^G|NE@(
,+[QD*/
u.{4nl[S
uSAB]x
\$UiE[h}
VEE|1]m
l_2P|E~yUE8
7PC.{.Ev
-#a*=y$
%=/]-pa=T
=Ed@imvM
Y&XS4OE/
$% @[W
TnX$Eq
t.TQt GhU
e]Mhoo
-MM_)ZsU"
9%h0@,y+viVr9M
n_(,$`*P
hFIX"|`}
oKmm#Q
OPUGR8%D
U@"v#[BV
ZCC\1m
gV@}!oPrh
M@[o5G
B`W}Eooo9U
i7UE^uC7
pVT2xJ8
Ses"^K[uIj
$M\n[)
\/y;_wE
^wnzS8
G9@!03
J~IcRnf]qX
{/U)PSsi`h[
}AL9Pnj_0
eXW%:P!
8P`PBhW
J.iF#h
91@(hE34
=BrzsoU<V
4j(Fj`m
9E<U;3PhXW
fvEx<W
GESvlVW0Cn
7X6-Aq
-(TKftSju
m/Q?nd^
P+E6]h#
uH[/&W
m'p4!j<
V7797_Z7V{V
cvz6V(V,Y&D
QE7zTV1nR
VzC:~w
X-7G4U
w3:Pwo
v;6'e7
6=k'=qV[m9
V5_vc6GC
?w:!wkJXb
,u.E5F
B7vBA,
7Z)1t{&GhK^c
6]Frw]B
#i"jB]hm*]
wa]s]a
ClwrgP
gFBs]r
!mfZ_)bWFK]
"]O"eG
]k8: wj;7J
sf71g~
4WC"Srrv
Zr[4z~
#j8r2b?rJ8iB}{#848s
3]5#oo,
8'#lz4p<#<74
o533/4
+;484##
?h(2zI7
b-d4vaJ
^V47b2X0;
z4-B8\
{464i34jaVV-5
x-l3-od
x-r8-'`\Q8x;--8kn
36y;-4
5Vx?wb=;
FyV3(h]b
>PCbQ M_bFxb
nW/*VNQQbz
56i{Klr<]7
w~SV:g
ee;w#p3
m[G_Xa5@
vmwVdg
o5i5pTGs_
ofbe_jC
D_]<[$w
6z?r_d~
;33p(d`!
;3q=pmkMg0
'7qu}sk
p*3pWa
aq$d.r`zQq"Xq-nsrRLf6
vNZMH8JuMgvf
n+-C _?7
g+9}b'bD|k4v;;
hs?G?k
Q;gP[1r
?kDPh$g@W
F-6e.DZ.9fDs
2[l~m-f"z?7
FCrkg-g?
F.V_?y[?Cu/ff7w^ha:Pj
0]@SVhA3
m,p&Kz_mN:
_rnY'3Rg
yGf2q&
v0sg?OCvP/
/=Gw/F5h
po/sG-7,6
@M'^o[?g
]w'm)
?;\+6b`
s[Zc(
9gJ?OZ`X0b1
/B0]K?
fvbv6F
Z+Vr`a;I'
/>3ywp
kO3u:@h
\G0d~q
5o/4Xj'
Rk6?G`a
8``xs}^
PsW%r3Hv3Z
hF(?#WDp
qXT7wk
;-3ffw2^[>
n=Ggnc
Fd{6%Q
L9&pF_Qk9m$g'xp+BvY
o6]1`_o5pRm
xoVV[e/Bk8sg.
QUxZ.;J]j+'
~j?Sz[
il>3=]l[]G#Fh*VP65
}~'(ig#;mQg=&6
/hj-v
:sU\4A
:ak[+#2
v>Vc?;J4
&,B$hf
<m`Yow
qeB`m5[_r!Q`
R]V$sUUN
~jG]G`'6u
msa5~{Vo
Byf`a(_5
dwq9f%Q48s8a]
a7n9BGBQ04]
G79ww]18
s3d]{i
B"/KSd
}KCW5-Q
n:ddJhx<7l)
aQ59"h
W"GG!wYBzf&n
jhk8*o[e"Fd
`$2liJ
98GzR7oK
io}"5uBU?#
ow+NS*::VZGy;>4Zk+GW[fO
ww,r%Z
_P7X%w_"h
S|X*W'Bjo_5_C""5p
g57ZJn+
>{ {7C
kkQ{/G
?7_/X<es47Wl>S
{2CiB>uM(PYm
PLAfC2EYSr<5B;D
v88;Bh],+[vc
[\_Xr'V4s0
)_C99g
{QybU
f9Ue7Z
94fazQ3
z8QGC2Q
BkmgsG/
P`+/5@
vs&sw5gUGBr
.&oq?C_
Qi~19"
nBFa&)
B5w@-.\*Bi0~{1{'i0]BBZf:nEG%=
m*jV?8
|k'rbjob7&'&
xhi`B1B]j\
7437j"B_(YfzC#M/}j{0i
qwF{o.&
s66_6jFn"6c*
Zck]bi[
1j&-PbCo
&bi&oA[&
/`z.6j+46
Q5Qz6;o,P9QC&8
Bx#Q?0$6K
bW Ctg
5:L[5hQ
8'+QF@fC
bBC<B%
m|Qr"<
Kj]7nw!2g
#i7is7
C47r`onnr%<K
95nRg1
*KDf>6S
%gns3R
azBTZ/
0xt#?]gmN
AuCNK56[nC,1
.33s1.
#[;6RcR/Pdo"
sgnlh)Z
2o[[-%Rb?7
s2RQ?ur:7*}jl((N
'G*r'k
<mck2s_
#F>1(m-
s".nU^
G3Trr,'RKs>BZO]xo
w BaG/
_"ij N_
}pBCbn#%vabV2J7j
bwij-j]Ji`]a"ri]dCw
\V[7DB.?\FF,B7=
CvBig9(|KGn].^95n'
k 8F-n54VHn
;cZEn_Ca]K[m;73j9.J7
wqW`09
eGrl-~w
CC$5=J
XAJFr5
F+uuE-9`J62Bq
D";?]%Qk]h
-tr8&]
--)D]1]Kl?-h|b;&Z_?
7hgMr!J
ZkvO:)M-
or=44po06[b8
DeBm@&
0\7~w63K
jV36+~D,w;aM
(`g_g-7O#
0--3Aw
oJ%C+4-GtF
4vw_Ln-(kMa`_sg<7pwg
wo2L_nK
(,--Lg``4,qw
(7i/hC3Ug?`dC`;4/+Hh; r
[nd^3Xw
[aa(?gMnjpN"=*pdBO$.q2
;Ev#?-p
0vKIW
;:BhxI
zV6?W7
~ni;'E_H75
ooYBls)7 SS>W
5qdSS]
^sq7q4
qn=AqS
oiQ>>>
W7`uu9
q~]s>asd`85%
QZ><@n8
n'.Q-%C
oB8P8t}31
@tpO/8
2@w^>*zW
i~a60[Zz
46;lF[
Rg/s[_=F#>
BmgNx`f32
,w$fQ8P0\q?o8b9bbQBn
{_]8Q5
~598:?
{/8wby6
+8z'>zJ1Rv=[b
-b1z43
5?(%W9G9_j;0h*5
[B4fCGQ[/
dR_BRrG
D91"wBz/
2zCHDKn
jCGQPCZgG;k
Be?to`
la3D`j3=Q"h[O
n81&7v` g'
ia-d_a
n4G[iEBr xaGnMd
a.rkQ~Ki
j{sbg9
7o<iMK
]Jwp?D*
]}\7 n?
f7]`7q
6j/I=
m(iz*l#
[[r3wP(
TB*sgHt8*
nKwW*=C|w(
6(Y276>m+
C"7f;[
833w3u=1t
1;#;A|RC1o;C4t6^1C7
Fl/C;nTh
G<y]"8bd/
sqG&3F
Pi0!EKo
5um`s%
a6F+Fw
'*V4J%k/]
T7iih:
-FEwiw^ch
p""p{VMl
o/hsw0a
mA[BA|'Z_n"J?GK]JC[T)
7JcwJkJ
t_]p_U@JgGw,C
QCcQ ~
E""{Ro
*7nJ`B:/?"NR-
$iv7%3
41LIAkB1IO?
}jV`Y<qi)
Ub[&q@+\X
"0&kw9&YR
/hq-*b5
k0\.%0I
gLnjn@w&%3`
0nG8?"
<%tw%T[k:Q#<lP%a
k_&KwLck
Bbn5_sZhU/2hk6ao]`I63.j
n_4d`B-
?r|s)lZm
]:K_7Z
Cq[vwrP_
7pJ[+K32
qm{Ur2|
6w1J.Qf#e38]]
SK74C_
#7a#A"'#4X[X?hb
n3'r1i
j-:Jd6wo
l7dQ'r
lBt`38
%[;zr/6jr6;[fa.A!.:_jDL4`nQ
g'z{(t
{p?BK5'
s3x;]DRhsT
%vMO{1?h
7{8Pcl
{C";BBYZ
hllh{{7p
WoQCbej[]GHB"
7NDjP{
e6;R/-n;"`
oB4wzAa_
CvRXw"1od;dy;xUgrr'35
6e'*rm[VaO,GEm]iFzo
+{0t+h!fM
,?&rwj7J
FB_*mrK3%t
/qj7_PWYl61a
waB-H**`
WtKEoBI:[(3N
SJ6?"iW
J3n"j)
7SCZ `sB%/Bc7<`m[;*
FV{+x`S_
w=zo<](n
G+Rj2-
KEJB#a
bCJ([h_'?
K"j\RBs>
F0m&T\5`J
]!xb:ggj<
Lmf0tB[
s=]]jkk
I^jPl
^7nE%@
Kz.4(?Kd
_?Jzp?O_V
)&C/To[{\
KO.dip$n@
C?xljW<.=1
oRkXk=
23'{k1eaz
n4/rj]%j;oZB
5O0t2m6~3*b
[dQbjK
/lm8F*'/"3G7Q[
? " (o
DQZa*Qg
""s;o'z<|0C
/2w}{+y.
b K]-3b&
#I5ZM$K
Ks#G"gw
\O%-G(
N3!E@7Et2!
-w,Vw]07
bQV!8d
nlmsj79
p]dE3}RoD
FRs;5?BK
i_pdR]PCb2
0 nR"1
Rb"lRB-$
%z#=mot?/g6
['d14o,i<"EE
EWv;uF
.H7bZ
a;? m$
7V(d,f>&VmbS(:
,B%M'M
S.u-n?26
%6Kr166
K*sQtg
ddJ_do
rs`kuzr.P
sJ7d@G{{m*\(o,/o
_gwX_;V:8s
s<JB%J;
'.lZEs
sf+b._76.h
`8..h;j
]CR;kAr
[pk#kCQ'
g6CD)
BQ0aiJ0;01zm
BB%nmB~ik
*Q`T5x<
Q.i'Q8:x{%Qx]BjC}p;xfx]
59(7^NB
Coxb@x~Ba
J9!3"n
7?,8*p
h4j!^D%Ais
ZTG.l
J;Vx{BWIG4;([jWW1
A&mA?Wn
(WiAWK&ta7GnG6t
B-Wj@Tb-jB
@(WB#?a5m
Bs(F}4
<MVjw(
A#/AyEC7
\p2+)$
|A71BER
z^RQJD
6sEyspVb
pk5kom
pS~0wo%~pwE?wK]*p
pyz/q!5wyp8%qvk
wm4p6h5pJU
xP-H7[k+
Kx5i_R&
(dT?w6:~q6g
{xVp]8
lEp4p7+x
6-wxKxv
[|qk50a
?prp;4T64mw
;swV#s$F{,&o4
/xq/4oP6s$si4r
Z`:,Mkmk,x
4n+xrdM
@W-ZJmB
7=!vQ<KGE
`4nh^(>t
U-T-CkKYg2Cl6=h
"`'/Qb
@7:hmR-jm"t0^
msmj4h<
z\|*ghK,
gr$lhC'
M[m* f787Z
I)ovkKl
n(l7bn'N(|6CTl0
gz]MBC
#vU/&1gh.78s
Hg_^xC0/
0h;+[7
q;`{k*
PB `9[t%LA
BaW}Pg[
8m3I&In_5tjF
GH]?-|
g*Q_(wd'6x]
3o#&:g
~{wzpI25hrmt
wB;q"@h-S'6(I63&
<H686m
mjex-}#
dgd!e7A*`]]&
7Zs${
dBSkV)O
21;GB2-6
3C`9iDK
]hNmf9
G.l+9HOL[vuR[@@H)
_Ak;;77
t8w{RM
9a-v_:
n{Ey="_u
oOB!ef
*;8y_=7[qnebmxu^0q
0/w:Dc5B
]]G5.qGh
zOj_)*
TBs60_6SR6
9db9dT
^dGV1usR
_9l"8B
88LaJ7_R
w6(!E*
7@K7RL
pJL;u(Fs
G6,mm[
pBm5ZJA
o5B32U+R
?ISxwJ;s{z
jy8-_B
Bt]\*aQwC'?
stVXhB
t580.o
D8~nww
]n6ftw
q`FGi6
7h'Zn#2AF
rw_Oqt:
gU]d_{YJ[
0'/ACJt;n5
J#qePEn:G
o%h3nsB
G-*]72oZ6{
2]mag7R[Bwt
!B\2Jv+P
`%x7 .nc}A"#
Y6z6O_g
<?k_;{/GSte
#ShK*|{
7~H[. #
4V43L&G
?!bj!!#
(\?4&Q!"5
/`I5`j
b2as3bs
@|fSF/h\
Z4+8id(6/B
!`<l5XZwwi;&R?a
p:(-g]w:
=`V/R?Cn;1
^?Jofj41
V:s]i@
_K\?nS!O
pb;gJ6
H6hX{
efsm-mp
dGbdoGsEK/[/h0]a:D
5@;-hN'j
jB\zs*
n.fU8Nij
,1:zD6
}MBliz+,4/t+1nao8~j]!ob
1s2eq,v'o5xiBqQA
mG';mB"gCCzH(
EUObcaCaY8w
B0P6Ga]
7*nNwC8XQQGQQAQ/
38HQpQBfI
(j8Ch=1 CQ_
~VI}X~iQ8
+4CQ0Xe'>
gQ8xHX:'Ca}aH8@QAy?X3Q]8i-nAj~o~Hq!
1B4AX3Hwg
-"X7~}HC'hoY
G}j{v{}
3e5>!<!4
[,'-3::
C:F;#xSDTN::
Y4BA-a
~^*Lw
G'=omw
mmWTG@O2
z7#6-n
7YDhpc?!E
5NXsws
65lRW-\g
o5w.+,
7NWCct'p27{
?o#&gjq}+:"?nx}a
zq/#gwWgn
n?1b2?
q#wqqCn2
?MCUq%C
C02 C2
qS)q[](7g
vTq<N/r
E{r^zQ
j_/KJ3$rE(7
jy5Q.A
4?pEc@
IIB(&-
7EC$E\`BJr[+
w9+rr7<QF{r
'`B4+8okr
Z>FnJ-6&w
d;6BIS
$drNup{hIS
s/nn?+CBE+Y7B`kA<(\@wRf
Th'BFa#4
3+G3;Vhi[|n3V&
cxR+e3@-.T
w#8b]6fh
/hs?:+U*loCJ`O_vK@r
Ur/d3r0za&
v+wNz"g]1.
KRlZ${
1;w+]+@"bVa+tv7_b
.m:5#>sHt_
|f\7wB6f|Q{B
nf6?S8,'O{
Nffln.
7nY3\;f<Aoo{0
M.{<o'gb
/Lsm[4,
;e0:D;
B'du2;]
H}!v8B~e
6`@JVlfBH
Q.}b5k~1(M4S1m
7E~48{?Qo4dB'
4Gu.CvvCa4^7
7#}+]+
a;x/wn
emcQ9PWr(+tnwia
{,|]#E.7T7X~
EERdtZ
7-B7G4^fYR[DzpRO
xXyGu>:RC's:7y
}cOcKCD
^Lmke;XR(E
MsR:PG
CdzYXVXY
mCXN7Y_D_
b~cSC/EDXDs
DhofDkD
YA=yD[
As;z^ndYDBCG
~nDP7Y
mCCN3PCkUf
i[=^XQ
s{VX5MQZR
fxsjXe`4ZYA^A
z8nawk
#9:blqR
RTHf0mGP
&^CIEVBX
Ue:,EB.=7:f>K
_rREG]1^Bp
Y8C$X=
XDY@[v
eL~[^7:;S^T^
e6-Q^N
wxdEBOB
cuyRD<SKm<BCXY7
6JhJr)k
DSR8ee_
`S^C=T
EO,OSe
_RV eS
4DyCUzqn
m=([706$V
_DVEE4
}"XgRS
AVUReGy
.Z)%=^0XTEhD%nRaPBv
"&HCAQR
wDk/O-);X?,\==@%
{oDEO?=:b
M\}NvA=]=
wdA-mB
5"E'=}7>({$7PR(
DwDE&NhUR
\O~eRwgEB,1
eB#u{FEZ
[N>=a^
YW8*kE?O
=Y3XEV^
c5r@b,
=P?E{pP=gA
>}.DAU
s{>~{Ds`
0Erq/oq`vM
gCNrDCalOl
u/bwQ[dS?.@LpxZ}$"
GxhZzSL7
X8bz7z!
5zsg}{R`
V;'Ev_
0NRvB7z}-X}XqUcET
I}FxY2DTUTA7Y.}V_B
~lN(NzVNE
|EAq}N:
mBr6N8c\E
{GBEB)YS`_xJrnH
FfZ|}TNNgw_
ZgdyZ[NJUZ}SowtNYDETdGEzB_UUk`eX7
RNBBN`)Q
UzTs[p
mZCcqqES
}`L<u@k
Y& Rdd}
7NUS}4q]cBP
}s@fpPxp
JpW)V`5cWUV
<2}[}1-6C+AU
;'j7,+'7
}d;a'6
$5'$6C'
-L'`;v!A6'
d#5{vc
{o'5 |#
6p|d6665]
6771'#7#
'2'ZaE5I
UlXI555'
XXwiQIOllG@l
OPP[UjUGlE
hNH]NlKCWV@llY
lF_ARl
lTMJ\_FC
A\R[rMN
,%03-6
{kaWxznewbdtoWzc
Wpm`mgJea
I0Dbpb|r9
u!5Hl'
_pb=6\`;2bk_A
dQYCvZ)W</~76UEZ%
c9jO]p Fx^ s
G~G7Erp'[7`k
h7Xz@hsrd@q
%B!TBNceG
yERX7E=}
N_.IZk
sd3Buz7qu
E^SgaxV
fj}NhX
k%`nYnShVc
XgWmCZ7O6
;4^[7Z
@,78V"FX*
wpV}#7e7R
_7-'g
[}[G$u
g_as_+
E#|+Iw9UC
/Qn=7|
TB5R^[5Z
BRc`^Aq`[_VR$#p^zOCR
^gCS2[
]S\ptZVcRY`?*mG[e
E#CEq}5SR
4cjSRWV
C7VyGe:ovSGcc[
zEM4V^D
5Xc`Sd/
TS#R]X
\[AVSVRyDpD
b[dX!Sy6`
EZpNBpqoY[`rGtRCZ6TC>Vt_sVge6R}
0C~RV~V
pCV!]Y{t^^
dZTVc}E
VrVCd_NDN5`sECC[m
m6Cg_V
VVBPvEzCD
EOO5@8
vD`?ER6`OT`vtC
.UO{DtX`_X
V^,TwVExPc/
Ts&YVGTVVDmADE
be$rC6
{j5`OSYv
:CDpOVO`k`P6n
bVTuDQaPdpZ5@I
%`e9F[h&XNOYVi
[[@gK[u
sQv>PgM
N^SSyI]a5BS5rPYfX]sO
Xgr\.Y`V|
5sLeem
9Et|v[;
N_>T~>V
'r^d~`VNM
-p02VcT:Ywl
BaN_Bu^~rmn+N{
[qqB~X[3,Mv
t|RsBJe
ROM_EyCvX,
-BGETu
X3R63YQ
p4CDPgmM\pk4
bZ'0TPhOEGY>y[
k]TFmS
D[@'ESr
CPPp~_!J
U(FnAgBam7^d
J8P"P~Uj
YiVc@*1}mU\ED.iaGSim+J[5ZZr^
XOvbC/wZYq+kM%QY
BrkZMsCPrs
EEN`6T~
wkZP{ZdI
,p7ZEP*m|E
Cds[uqwVY}
HV9 a[
on?[-YcGj
ZcbDET
R3<aT\T-g
!@fj1?
zQc2^43k[e2RiaXt
^*+zV4!V
Bk`Vx63p
gpEX@~J
LnCxjY=v'm
Xg6J}UDD`zp
z^`-8n
=J`66
4)6cq/D%7[&`
w?;*%?zcm@
g3m~L!U;58!
e:w=7v
qJlj<C:
;H7w!H5n
{_AFVHjG]u5w
wIHIY
wav4SIIJbIW
/_Io?6
7+>I?8
{IkLI(
IK26J&*b
a9&[C7X56}J
,;+~=W$
~7GX*YFm0b
IAzUbgq
!,'p3r
av' ''
OB0TcN
;&TYP}dI4muta7PQ"jq:[
vS7gc"qM
m$VDfA
4~ucNwl
'jH%HJssu
$4hF%7
sb>7,a$bq
5s,.*[X
~,JY2",O#w
sE;j97
@`hncz
]b]VnQ/`[e9K9
P'o*cwc
T9n4d)]"
V6+qy+
}Z2+fP~
+r++ts
#o~rsj
wr##^#X
B$X#r)^
#GEVg ?FO3@*r}r/rS
RrurA1
L.;(w|&H
1hxdNASP
|dezC&i
Ls:BJ/
V(]]Of
GKvh$.)*NnVATa/H
oaI?J=
Ka~8Z^m1j`L4R#5E
BO\iEy(y/l
/X@}a^
)#BA//yME{Cv-Q+/
xRT=k6yf
L]Eyy/,Mh/!y|tI'xtw$?>~kt#
{zTlsj
U! |O~iWbsIZ
},>zXN(
[|0&T;U
Fo}%Fu*!s0Tb+
VpnunQ
]nYhpp
q1bpKd
LJ^XdJJT
fJ~J<d
idB)5YJZS_+$X'aJae
Qd=tUF
[pHdJm
q/Rj[)VF3Q
-(#0Q)J
p7M@&<
u(x;UQ
m_`y)jUz
FOFFF#^FiUdFSt3/
zfFwSdW
[oIO(-
Ghfn3G!zteL+
n.?N$og,b4;Gi
k=Pmu1eN
9S%;2D+A#9
!WD(00PXH
lrC|~/
lK6HMoW
L;c55\
*T<raO
i1d8Z5
>E;$X!Hh
pGbCB!
ZRfhFNF
1l^oRUL
B/t23r
TkO."|2
,oz}\k$>
8q*RJ\lgB
so2Z1s
%+j9N6
wq|spLl
QaZnVFL/ +I\-
+}p,%^3%[
ib019[M
D@/j0
U_%sxLR^C
L;FxbxLq{WQxxc
mx'xuXy(
,R_zVO^+%8~
61?qa
-~c&ufk
fcsQccc
gE=5N>C$n=
9[\K0Sc7
)IjrEWz;c
W$_Mo
'1\1Ko3BQQ
-R"E"<ouT
/orXXZo#4
qKuPSXA
jG[#SBv*`Pti_ro
O}P@Yjv
TaFg6 d71v&Qv
bmmm92$~g$
sXUgrn
J:ulQq@*;k
p}8mc*
FV^=Cj,pmhsKeb
8<!'U{d7
)7C77Pm
B.C77f
7_z;/C
ksBabLP
xGE_aT
F8n;co4l
h^loT/n
o[T=gkZ1U[
(?}_E?Y
9y_grsj??
+?gk<%uk
O?w5?b
?]n6XEN O
(A??Cs/
DLD1<iD
ne!;Dm
MUzDID
Y']'7/l
"=Usj8tfo=
ob@.Gd
5r}z(S
cj@ l=
ZrI)6%2b
Vfd[Y"(
@dIQ{dS
_^L%_d`dj,C
W#&snNo.
:fy;F]-cz9-
7FxL#7am
'xgp7jxS
cnu@s]
jh{Hcu
eFi`=M
AcOrQ1WN
RxoA\,'Hg
#|!?v.
;R5Nzf
;AZyNVS!{A
>oLaj##aSR
A9a')R
sKCF9HxO
! kpxt
vxaRZ
H9?y9o
:,5p7yU
STqCBoONn"P
R:?1VzOq7z[Jr]
#iX=jG
Q\h,@i[!
wKA{VH
$e*9)_=VV?*
IY:Kp3
s\ro7xX-3;ji
0k5.$n3 Q
'PG 1]%
;7Z0%DK_/B[
>Ij#tR&\S
[;6S]K8e_
L!M&XKWU
k\8k}lQW
_^NT0}
!/fsL?
. )4oF~
T"C4-~&d
*F-/FF
Toy>/\u~
wKFp)D/
*qrf2U
eiOuo7
gmgo:^a
.!aA(C
i=8,tI>2j,o4j_'av,
rR./~9\
/e,^u0f,6,
'%jD<*s2Up
<@Zj,lXbz^?[
2'AQJ5C>
JGU98~
%NRa4;J'R8D
96CMA:h9
9}OHi,
P!^q=s0='I:4y
=Cym=yVt=
y$ fMUm(I'
d=y)K5j
ZG0}*NVy_
]CD^Qe0
,@5=]X
rKo9f-?3
9oCgsN
WgXV<+h.D/Vy%|.99@N
92]gg.~
xp9eggJnK8
hi?Ithh
z4KEh%]3i
dhh,[,,_
3N`o)v]
:-#F^p
(3ps[;
q=[v:X
:b[<A/A
O#'?Ag
,Fq7[F
FP@AxFFH
?FF"mx
SX_.<oU2M
/_^uPY%
84_(aE|$aR
3e;G6w=g4(`5aws
DTK/hHKK&"_
N{ngR$:OKpPI#
hzVQI
FJ=JJr^J
7VYJURU
[fB"9/2,
bgfS"K
n:Q:eGy
<aR??nb
okw2m@
'}{;,Ymjm
zwL3g5[-6/
KzqD]$
[x@zC:j4oz_
{\#g}XEC
$fb[n+
,iw(#zs.b
1!#kE`
yHKo *
?o3F9<E
o_@)w"k
!r>pE3q4
40-0K^
|H$cm8'
]q0/z(ye
to"u$C
ofm_i;
Ubnm!aa
Ye@m>5bT*yI
;\}xRm$TkC
$2CE{,mKO&spGZ
]{!@Qa2
:8dydlao
O5Q&nv-
"4FWxVK
bNVE7w
5a8www
[hw#yx
b6LfSb(2Q
I$oFK2
V}[ut;.OI
gsS7:;`6_U@
3*g:}x
uBu` q
$W`Kvu4
O d?WmJ
g,W(L$
ciUE0mr]?
_+@WZB-
WOu*x/6
`%!>BP['1 [K
QL@)(xJh
,sZx5]
\IluJJ
bJSA5V
](o%l_
IKB^Vdp
vMy7#$uU(T
;M,I~vX
k!H}MRvby=[:7
l>p3e3
.WGLf.
Uq#}{K3lG33hi
$SW@T,!
g23rAN^Y[3C(x
95URmGf83s.a
?kG!Fq|
HN0L<'
bA<uTe
%NIV0t_Vt7
Zxi#fV
dvjh-/bI
>e+R2(?
{1YMX_
]NI#YV
uV=`=Cw
z &6"*F
@doRRf
RMg!&.ewxs32wu
AHv=B$bB]5g
9!vR3
BNBh*B
&gFs<+
U}sCOi{_\T
.7U"CZ
}r5-SULTcTMP@M'&
*HDqb\
J<5Y\Z14
,Q,_es
][=_Jt
umU(E-
nix,##~DZL8j<
# ogyOFb#/d#"=r
yh|pO)#
n?;qo[g-L
WKN;B 9j
\,iXS`."P
ht@k*)5
=)Zh)-
0(F^Ol)Glt:^
lq.)6o")
1n)q)a)
mK-R9
1zJI};N&ySN\
c<K Yi
*[<A&p
2w_tOf
bo3mI8;}
g[#FZV2
o:Zo"oFl6
[K5oa<
f|s>k
g_K6fc"S
">o72w
Po4=<#
QzJ,8ybzk;I(
o{'_i)!
i1r|%;:
b>i0C%[G
fi[. b
[FE:@t+
__#)z?Ho+b
TI7<W'G
'WTo0o
.j-:j67-0[L?j,Xpd/k#Z
jjX0-jo2
AIc!!?f
-X]]jjY
}__OjAs;i
{CUUZh
n9Ox5;
9*?H+A
6;99|/\o9E
nhVRnz)t
P&4AE"
[r(~WzH-
?/Xz}{
R$O2[!fG?
I:\T=!D
ho"Ig6
O8id ~
z,00CH
X[lQ|$
O$B9y`7ozKLEmI@=
f)g+FrY6Ktw[r(
1{iTFw1cNW+\7
iL=iYo
3unQ.bw>
e&Wo!0R3
AaJ-oe
M^%opX[gp_Bo
:<uI]hO
?[w\&e.eC
P54\CO
#:oIAmv
&J++at
SMks\!
++tqe*no
S)1RVCza[k+/%`tg
0j[f:l9
7IRcmt@A{t
C +`'%
B\uWf;
fh#y6P}
%uj2P~_
fbfr2XYaf-/E0`/_
.Tj;Uz
V'ByVD$8eH
wa..Q9mI
&&8 ]mFWO).},%.
=]M04d
ckrul^gww
\_[:;/~fCb
TmTwlN
pKK|W#
iA@iTYUFkhMT:Q?Xd
A8r|D{,<2<69>
7P8c?ZV45=&
<X,,vr<<
z.*9n/;Y
(9k}m9QR"41= }?JT7<&
nT[0VT
|g;J4YGQk:f64
?ht5[,
;O%p/w':
'bh>XZ
//_FF_XaNJXX
c.}W-)l4f
[R]1S ~wt+#X
[Z7>l;i
5\rVK[`AeL
QDN88(x!
T)$^#`[
o\o~o\b%
4iwqG+
@tUS(6
h+&Uw\
6?|>i 4yU
j'|?^nj]
vW$G2t3J
`EWAYTG-
#G?rGzI\
GE;h_`AAR.<DsSDk:<#
w<yBhr
MfMjc'Nj
70'ATp?
8]`GW.
OJzgoady7
jdud[gLe
Z=vg7*_S
=y$gxJgcVggj.o
21+bKDld
Jd/VHH
crKDXM3
MXK$[7
M_S'/dKn=
pMDV[i]
Ai(M?d
M&bvp,i
~*g$~LM
!6$RZf#Z
u[a~$%
H5~3^j
w'M/$u
U=f~(F%
3eJ$$ps$o)2
KP#b_%
;7K1oM9
"[&*%7
<a}uvc
8&xobfx&&g
wK4IS15m
R?4wM^Z|
V=oy=D
LiK(;Dw
rHPADU
O_l]E6]
kC-KC/Pn
b0*/}1y
o|m(6)
_'zG'D~eL
5D{$i(
W|!n(~|(^)Rxh/
Mo)^\k^O^
B^c7r?
[a-gUF^c
d/_`'^
f7wU9Ud KUx
L9A)<9u
q,~NDqs%S_
X][dw~
wR>d`:
tt~;ZqV6Nh
{Q;+qB
ZF4{H_
|@;O;XDk;~1q+
45<dbVt
/<E!p+:E -wlg
go+EC;,:
LX7PAge0
B:w%"q
S#q(s#
P28+W@;//_
[|-?)R*T
PO%n/7J]
NV<xot$R`h-V
oNA{P*OM(S
lmu,\aYP`/r
PZ*ra/I^Y}%
*2q@jP
^J7D"^R
(BKO,Px
#^qPw{
c^A>^Z]%.4
iz0-vYMZk{k
K^TM)_
~U|o(>}a:HEBK
/%fYc]
#O_a*#Ztm
7zf#/qz
#f\Y'I_
(i-9vnl
gs\/a
*5En<{1d
ykV&&T
R'tw$Y
H)gleJ
L>4zVd
)#v~X7)
)U.))lX=):rUF
j4))G)
/DSk)6
_tYI@S
*$Xl$pxd
H%"oh_M
=DT$VW"n
ooL(wG
D-2u4vm
41Y'qLb
+(-d\G
#$wa$*a
$j](fx3ER|
V/ r$AO
$p=}\\
PS$5e7fvD
w+PE0o$
#4!(u;})*R^}***
>j#c*l%*GTt"$=JUzT
*jcv?V
J%'?)e_!05
/!L77
^H4aVA<0]
WLFN@(_
'qMsMUhb
2|s'-~
\QrtG@z/F
@Dy#/%lII
|I\RHy>
8u6#X[7
kMyA X
~z}@&[-
>iBTnxuQ
CWDo~e
ed~drU!
(1|Z_v
"-eYd~t)<
@###IpR^O-
`J;Y<t1
iyyay@|_o[&D^J
S2k;GA
v[hf8jo0dy
z^7cZoP
ck7,7_(U7
,0`5QD2b&
=h@@55>5T5AU<w5mf_
7&53797'
r1G5,%YT60;8
wa%777[A
kXdPt3\Em
W7=x[C76
O.g3b`C></
?>73Yn4]>
.3\>73dWT,n_3
Ou=7>7>676
]H/,136f631>
>e]f|6
>BT\g/
Z9^hngr2ovE
MRcUy1x~*}{930_72mDml2!3i7
m>#2Rs#>F
L7ROK#l
b[BA3;
P$h@n+
T<n4&6'0Kntk&8
`CB3h&C
e7e&#7
x1 %4n7Zm/
6x86'l=
n{8z8noIb!y'
pxy{ln)
(Fg6FG
c6F6a0
F#!np
&#<i&8h@
&<$&fgk
{:LLYf760K
@O&@s?
vZg"^Ol
?70&!Os?
W.'|<6
VO??+46z@VU+<6{@966
&^Vj-fb_
Kx%H7w
H(Hy45
-+$,/5
8^*,:"
F>/$;989d>&1n
!2~,$ 0*.
7fjrqI
]bT;+`
)'JLDY,
N7BBXJOw[
B\J\ABMJ7.nw#
NBCR70X@76UA
7YKA7KO"oB
]O!D]6
w[,^C_v
Y}Ri_i
}k4hZY
l}]8>Y
=~`~=:a[S*v{!
]k;E6U
uNKQX,VSVX
7}Kl-W
7!SIo6
'OZGT@-
7TZZ!7R{7(FI
#[TMRZS~
TRV.Lo
KoAXTVZV
0?;R-9
e(pX;Trov`
R:z6\
{U#kk&<
^B=\,v
GL'FRM$'X< 2
'+}\msD#$E]
S}/wk6
P_u[<J
Cv+uX83<b
_3K<e#{
w"jP&.Mp<
@'&L@
OO8'K68W.
OLI'}l
h~Rbc4g%Ej4gM'
O=vp9)7
@&-0Bu
G'0LH-NeON
O4H_&+F{A
[p3}1>d
?.H(DA4=<Z_4c
YW/6T?6k
Ug}KIEB
DZm_;\<
U'-/mma
\;u.u6
I~`7Rf
#9`uq$7
0oU`%bM
gD`}X"{
1g8~%\
D6"6MY6
K<m]".
.)vw,#
.&5&%'z6w
=!6!vs\!Y!0>.B~6
"."&1,"6o{s
2!!&O%
"64[k3
"[vG"+!
,1+"'h[k
!}k|//&
#A{ /*nv
7"c.l/
"A// !
^(o4&[A
m5p:4@.4
]! )=[
a%JUZ%n6+_
l#!{Gt%
7Z8#6G;sB
pre(+Z
(auB+F`z
&n03Tr(|
I00i+?-#
(OVpmX
A:umq*
tn&NkBk[H$A1
SLgXFk0[kB
O%jZ$je95
G60Q*9?>N
]^.0 2.,@
$ .@5S[T
_ZWdey
""=" 29
A!%/wj]=
Lk\#G+:
:Fu6k;p
#J# j{%7
0{"6V{!R#;
##m5- T=1
6A5[1#
qa8cECv
K6~~sO7/
044627RM\
=(.7v%)80
eH|l6(
f$8806HR
d7l6YK
x'u0VJq
E\77CphEV
q`It7}R
,1iwtO,47vp)`
m~k7OwH
|nm}q1
NM_|Auk#
goG}7m(F]7D+
q`g}5/U|)}.#3C
,M[w{7d}
uqK678%[4
{UuA`um
;4FTF)
"7C=-@Dm"
@P.,;P
J48{jq
ckAgsH
g#A97#
7/7,|[ 6p+
p5wVv\7o1
LADlmv
~oOp;s[A
7ERFa}
m?@Jk>}
.45mvk
P4SL-QB\LnoMLL
E^Fo^~^s^eF)}
"m8EyT
')]nvPz
.|hSE[
KsT<9
mS996vz\
Vm+(sOF0!u/
QAK<7]sh-
5N?^l]t
6y%h7
/g[[P/g
s|$[**b
{wu7~O.
m;Wq6U787Z
s<X[~v%_7
Ew7)mkqs
k^bT@#}k
9)%vksv
IC/>lqL
=.>a-.L
QNw}w+
Jd??^{t(
D2:{cSR
2m<<X@
oDK<Uc7jrpmT
SX)joT
7 n-~v
S|qTD(<
sH7gKp7
,X*4Z{1
FvehC/6
0HYE7D}
0PrEwm
47MsvkXl
;v66TW7.
l[0(7";4077
/5'+$#
7=0%,=7!7m,P"
x"ITI)^"w-$
9\?n}b
V="y?-}cu.qA
z32sF17t!37
zd":zXczI
0-vf9Ouv`v3
}hPhZ@|
0TJ[QhK
q3u,7Tj
>%q\)g
h\$!?-
E9^ER7tmd7Di^
KoF)GZq
CW4W6,v:~
A"}|xJRSJ
xo(OvWB
oAJ9>mm
q//=JJ8
.\h][[
Rqb/tB~
DkDId=T
B{[_X7S
|wmso`!
n}Sq9a&[
aip}qk@
D~puKZp
8#pho|pJ<qBE
=lY$hW_4
AE[/wTQ
_7eC7~N
'X+7=|D
T}n^uu
&ay~K&#L%
F#FTEF-:m
3K:8dnw
ai<D+]
=Q8BPr/
c7Em[
\(`)xk
,qEpkoM?U6WxG7tOpV[Topy
m@Wsw
7570DuSv'BZ
]m("/$OD
$; {[7O:7\
lg[/4h,G@j
8IHV1D\4[kv.WYK
.:ZGTBQo
HUm.O"w
vtSm-!qLW]
][=pF=7y5LX
]?nJmF
Cmm;jgX[
7*[7Pq
7tW[wz@P5\
fU[,V+
h1V,)7EnaO
95mRb0
kX)vP1s(?
BkIQ=9(?4
wn.Bxq,OIJ
\s7%^0$~c%R
"Cm/T7JZ
Mn3. qs
q@9o[O
$j>~gu
>F`ZS7m
[!kjP%
PjdqOm
TOXPm%
D<IOkmsZ
Pnh38P&
C#-#Lk
v[``{7
Bsl.y{NU
%tt_Bo7uE|q
T6`mQ`3__J
6i7tBA3
[Qs5irD
=FRy[tK^
p{t)*@T7mo.
=v=dh[
Rgu{;=
U_|[BR
~L[7(|
VfMVcg
t8}EWOZ|U
0f%#Z7Hl
O0=;2
oHn>Lbjo|
zntcT_
`tn!`s
oow07o
B_xSzS
#<`RSb
FzEZLOS7
EGtGAFF
f*z!R]
_Qho\zw
X@qwr}{}}=6
gM7qY[
qAZp[0VVr2s P
wUp&*n*u"Ir@C
>O>N!u7
l[hPp+~
kT&806IE
X,n_z
0(.,V7H
v.X;+0R
or(cBHH4H`
FD&0"&
u%!&'|
=GmH<'_uw
,&4B4#
Ft0LnD~
o;xsoG
j-p ~n
7K|!2-~
eUK,e~
7nn6hf'
I7Mkmx
6=/2YyE
/'n76@[
[kF!6Zyxjm
mn"+l4@
(wT|F(
p0(66w
7hFrH66a
]#lp
$QF3P1C8
P<1l7@<
4H*zMJ
b.:$<Wg=G[@u<.
yL@KE@<*
@T+?6\@rU4G@x*6k*
gkU*{dn Q7h*s
F$4^CRO
<Ou3Lu<
@>TNa08One8L
(F:[p&0U7vk&6&_@.GO
{&6?<O4
'!zUOT/H+]0n6O
6}H&r&'0'v&(
021W}P44C;>-m
!9"@6=<;4>6'-3)
Rt 6IQ7&4|2
m6#49z4Rq%=!%1=@
o(j,e-
o&oS/:7SFV
JO7Sj^QgTiiN_7LH)
KVBISSJ
N7]LMR
YDHCQJBm7U
oUym?N7Dkjh/W$AOO`+mT
ICQiWM@XDWr];
mhkxLJm{{C
6z*RUb
ui [g{
~E(akv
Mpw6z~OH
t;B7ZvU
,a`hwob<7`
[A&EY,^
Va UbSb
scb]V`t5Fm
S7)VXa
VVkxa;V
T{DV'lo]
x"`*('[
}E@AZIVUn
iTM%h K
7oM[TT
ZWKH@jZ
ooSVlLN
e0KTbXX_7^VcQ}aaZZ0F
7R7!QE8oU
R>Sb0XPR
zOf67'XR
Wn(w8TA
R 4T4%AZ
uTZGSR/
I44Qp3?*FX6u j60
&z(726Q&c "iG'LT
69u[\;-7
VvC8m{?
1"4('<L
6nL6{)w
G&m[p@
TVhF_'
p(zl&h"
|@?@9}?<8OO*3
7'/@9O
p]h&&]j
7"OjI5
C,?y&+> F@
&@@nM7&&;Z'<&0xpW
"@_Vp@
MaRQz-&G
&bLIO73!B{m
.9<j7/&
6R6U{<
m$=72H7QG=~LbFYa
E[Uv8=-0
m$h(&P
7jHu=9
H(&k47
^7cE@$H\KM
lnm:U)
!7#p`_`7[
r`B|gU7o
m{D~;fg
7D E7Djd8
}g70/DL
]^%o3:
goh6-C
UqMM=6#6-6]8\m6.
d62-Tt+(
A[w6=0
8=6=s.{
.%6.u=F
!"& .X(#
ZSQGt.
#6no6&#H#Nk%y7mB.(w7f!
".\!r#!
&mk]?6
'#K0thj&+Np([
/]0 "Q+
*agO//"
va"!k)!6Uk !5%pk[5
w~(4Ek"9
P@d/mZyT,
& .S[aT1
jA\%"<
b""P-V0t'%
m ^$!6
6s"4]"hvw
"!U Npu
6$"(k[
:q !!90 ,4v+
<d<Dnk8
Q<! R#Z
)x:3S
>{%bX$
-%CMZA6
j}P7jQH&%
~`PVU|
w;b#%n!WQs
P:w&6I
y.c35t
/E=769(
P0r =\
B&YbDZ8
v!7D3NP
uof##6u#<WmF
6Z{h'3! "
mvh"m!
%(Z##T>+
ETtR"^!4
O`r5hsbK
74]lw{
26R6LE06bX
Te7l6d
Rq381cI
{ .HHM.;
TC9t_o
VD7v;`
0(>br^"hv
0lV7K:
VotwYf
&," ,mn(c
bkF/`n
'%_{:o]I
Rq<NNu7Vu#gu
qA7{-R%`D
7c1"5,
7b{Yu.|
hH9urgg"o
}vmgw
BmX0~p
%mD90U
~FoElk
[s|VQqjy
moKrHy
syQTzh
d?LHy@
$t]^]jP
^si]+vWqs
IssMep_
ohsL]~}s
[4IV+h
7XQ3w.F
5mUs>Dt{
7fqdn5n
!FLNg\k
bQTlKUs8
=@s'f*h
Q%J*.P\
zP9$\N
7"p/8,;-
B#]lRT
pnKOU6e
.npXx7
RQ{s/1mT
n-si$h-
wl[R~3
JN;nnFb71J
ytQ=}7bh
NN@gNbmd
G'qoWD/tNx0
|Cfjg5:0k,"T_YU
3j7V@,
c*@QLVS
Tk9XjA
\K`S)LM
ptW9Tvn?
(T{7qE
oBaWo7vML
1^rv7q{P
AF`z+E3,m#
FoX@u[$qoT
6<zhX|w
|> J)v`
' pV7hmKHrh
pLp8(46
&Yw40IEZp_
s0:pIs6
80b"0O
.? $^=
x-wIE1r',TtAl
,a/6,)j#+%7
pgD xl
GQ"N)U
fo,vbvW
)E[--:
s7~"d7
7Lbxl?
mLv9bb}
hb1_@Kh
uZ0w|P
qzVZTEmT
lXqh{Vh
*f^TX}
ih.PB7?i<f7hU
}[[co'
,[_"jg
\nO/uA7n
h,&uR[f
utU4fJJN
(Zu{E72
[rA"q+
Uvsk8jS
4J7uDjcI
-pisn}p6
hd[N^Ew{
p#{r{R
6rbf~;j&NV^
#n.'tz
jZ8)mG$?%
U2PXWe
O\z@cs
e\pGLFDJ.x$
UWtaPN+
ECL-f3L_x
7Kmoc
ai%8:c
@qWK%n;^
9F|o\5G P
pm#jSfXh
R]jRxw!hRP7
IqoQt[)ZOPB'R,
M<l[AdO7
*@&~hsT
n),N.ZL$
_(X3c;So6O@;
_KR*ak
H7H7:KP7
Ujt^'c7p
MGwkpjs5j`n
[dy:jvQOj
ooIjJjj
SQm\L#
Ph^?bWKJq0}
@;D[O/
4m=;kU
R60?'Q]y`
bfh+cP
6.k` jZnmn
P[w7&UZ
7P]Q,M
QW#]-d7QQTQTo:U
0WEmU[
5cZjl8
0~SP&@)
?7AnN?T
zw\U^(z
Yj\^|uo[@:UYl~9q
U-y6QTxk
#Df89?
i*K-qI
7no#}T@
YQqD4K7`R(
j7cq|&
Bw|p0AP)[.c
~c>q!`})k&
Q(wvgl/
F\]^D77ttt)
)~nI1Qvb
lEI,+nvOUc 6
UBzzhxG2t
*JhU9F7
E5U]AL6(
7vxfZS
sZ \r[
r1`"*EC6
kCijmE9,Sd
Dm=BU7h
mh.fu(
Kku[co0>
vs?n*!
^4 iq&
>Q7+pN6}
^.sD|n
}!cC7Vg&FE}
hi"gg(uS
UK{mnr
FOrpkn~
0o(%7OE
+"F?Hq
86L6HEO7
=407lQ777B"7P
EX@WMh7"6
P.Cp77n!lH/
&GU7GxTXd
W'R8UR
vb,m^PU^
zm?VqP[
f(h[YT
xE^L`s
eS-DJ?**mp
6?;e\)s]^:
9}ut7GrN+
R7^Felu^77e[:69t'
4:QrZT
xx|s_Y]
'7t[#6
4829`[
<)?V7bR
?b8?2C
33'36>J_!:;
a_7_65
DNUZ_N-
A[{TEEDU
qDEV+ZYV
0Z6R~"
Uo[GE>XQD
(\RVpv^TSS%
CEXF:{m[5~D
=RvEFBB
!V9A+XV%-l[ [.X2E
n=C15[R
5-R{P:[OKTm{Xg~X
AOR;[ko$CgT
grZU~oo
*.Mm!kS
[)~~*N
m3=E}-
$?0cvak<
w/@2o
w|P|?Y!F3
(j~<ml|JD"
F`Bo-[
jG76oR<g
5?)U07R
$4Lii\l|i!
dTUUU2?
Az*S|#cPO
^g20h_
VzEaBb
DeleteFi
ProcAddress
Temp<Nam.RtlUnwi
LastEr>rY
StdiM9
tiByToWideCha3zTyp!Loa:br
Alcomc
Wri_nso
Nex9|[)
siFInfd
aEArZkgHIm
/gn(,Tmwcsncpy
e$ov2_
PhrD/Nut
w}vB'1
XPTPSWXaD$j
CRTDLL.DLL
KERNEL32.DLL
ntdll.dll
SHLWAPI.DLL
USER32.dll
WINSTA.dll
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
wcschr
PathGetDriveNumberA
LoadStringW
WinStationNameFromLogonIdW
'+`.b-v!
x,ABI`is
]GPpZp
wBHF8t$k
6uLhR8AnwwB&
}k'@7URk;b}
_+%(QvGe_
f'p_;y
@HtwXDDW/
k!'C1{
Q*V\a2sit7CJv}p
;l5CztKb
WP:+a-zI
5UZj|,};Moj
Nn]X!\F
IeCS5U
:g@=]CU!
9v,T#jzW
nWQ6S`'iz0q2
a<W GLe
o]n/ynCL
K &-'9
F(Ku\Q
6VsE?e&?
De\~trLESa
Dx&7)y/+
q@kvY#6qW
:8iG9'E*5_j
,{iKeil
zejE}a
xU#iK'
]]/PCn
Hj-m3{[L
`xUs|HS
SPYbID?
#;ba_8
k(4kzp
++Q|jIl
e8x$^}DEI
$)Qq"T
)SD K$-w,v
&AqB| <o
*5lP{rTJb
*>7ycrW)i
a}'~+&3
@vsNDaox_g[N
1b{R7ZL@v!|Nh2APPeg%nl
>u[A(M
g7xAIT
llb(~8vk5q
n~|jo+@
j"A&VQ&t7E>TDA)zziS
@KMB\.
vxCn.b^d
yUBV')
T![[lt='Z:~1XGW-#+%xv
7.Ex.1(
`Ah*uthy4
RLUkJBM
O(6F9IS@Z
Djz#NEG
>\}88,=
d6''=F
z*G,6i\)
LI_n&,:3#t<:+=_i~`=0,Q<'S
0ZU$(e
M7Wq0r4xh
"nSK&)<(NW
s'A?Ei`7)
M+T|{ZAEGF
oJ&S2Y
v~G,:Y;P
8xA8W)VMQ
C{o!'q,
s2A2^
s} a,~
:0:>Q1"}tty
oF;xtJc
j?Mwv(S+!X)3C
f1%y>

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.