1.0
低危

2483edbc7d8da0d4b9d8b4460678156dacfe448a57794e9bc6f284d128f5e358

2483edbc7d8da0d4b9d8b4460678156dacfe448a57794e9bc6f284d128f5e358.exe

分析耗时

195s

最近分析

371天前

文件大小

181.8KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM RAZY
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.55
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Kryptik-MDK [Trj] 20191013 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20191013 2013.8.14.323
McAfee Dropper-FGJ!22EF462F7B35 20191013 6.0.6.653
Tencent None 20191013 1.0.0.1
行为判定
动态指标
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
文件已被 VirusTotal 上 50 个反病毒引擎识别为恶意 (50 个事件)
APEX Malicious
AVG Win32:Kryptik-MDK [Trj]
Acronis suspicious
Ad-Aware Gen:Variant.Razy.447844
AhnLab-V3 Trojan/Win32.Dofoil.R72118
Antiy-AVL Trojan/Win32.ShipUp
Arcabit Trojan.Razy.D6D564
Avast Win32:Kryptik-MDK [Trj]
Avira TR/Crypt.ZPACK.Gen7
BitDefender Gen:Variant.Razy.447844
CAT-QuickHeal TrojanDropper.Gepys.A
ClamAV Win.Trojan.Kryptik-1771
Comodo TrojWare.Win32.Kryptik.BEDR@507qmy
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.f7b356
Cylance Unsafe
Cyren W32/GenTroj.BW.gen!Eldorado
DrWeb Trojan.Redirect.167
ESET-NOD32 a variant of Win32/GenKryptik.DNFJ
Emsisoft Gen:Variant.Razy.447844 (B)
Endgame malicious (high confidence)
F-Prot W32/GenTroj.BW.gen!Eldorado
F-Secure Trojan.TR/Crypt.ZPACK.Gen7
FireEye Generic.mg.22ef462f7b3569fb
Fortinet W32/Kryptik.BCX!tr
GData Gen:Variant.Razy.447844
Ikarus Trojan.Crypt2
Invincea heuristic
Jiangmin Trojan/ShipUp.rk
K7AntiVirus Trojan ( 0040f4c81 )
K7GW Trojan ( 0040f4c81 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=80)
Malwarebytes Trojan.Agent.RRE
McAfee Dropper-FGJ!22EF462F7B35
McAfee-GW-Edition BehavesLike.Win32.Generic.ch
MicroWorld-eScan Gen:Variant.Razy.447844
Microsoft TrojanDropper:Win32/Gepys.A
NANO-Antivirus Trojan.Win32.Redirect.bxphna
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM20.1.85EB.Malware.Gen
Rising Dropper.Gepys!8.15D (TFE:2:YhgFNO4QbdB)
SentinelOne DFI - Malicious PE
Symantec ML.Attribute.HighConfidence
Trapmine malicious.high.ml.score
VBA32 TScope.Malware-Cryptor.SB
VIPRE Trojan.Win32.Kryptik.bcxo (v)
Yandex Trojan.ShipUp!ZAkScX8+KDU
Zillya Trojan.ShipUp.Win32.1636
ZoneAlarm HEUR:Trojan.Win32.Generic
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2010-10-21 21:04:07

PE Imphash

cbdf6bc6f4550fc94d2d5d51e9b81610

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
AUTO 0x00001000 0x00001c09 0x00001e00 6.3305951322302185
DGROUP 0x00003000 0x0001e83f 0x0001ea00 6.467716447718119
.idata 0x00022000 0x000004e8 0x00000600 4.309879057569024
.reloc 0x00023000 0x00000000 0x00000400 4.229535736810736
.rsrc 0x00024000 0x00000000 0x00000600 2.887709594599229

Resources

Name Offset Size Language Sub-language File type
RT_DIALOG 0x00022058 0x000003b0 LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library CRYPT32.DLL:
Library KERNEL32.DLL:
0x422140 GetComputerNameA
0x422144 GetModuleHandleA
0x422148 GetProcAddress
0x42214c GetTickCount
0x422150 LoadLibraryA
0x422154 VirtualProtect
0x422158 lstrcmpiA
0x42215c lstrcpyA
0x422160 lstrlenA
0x422164 CreateFileA
Library USER32.dll:
0x42216c CreateWindowExA
0x422174 DdeFreeStringHandle
0x422178 DdeGetData
0x42217c DdeGetLastError
0x422180 DdeInitializeA
0x422184 DrawTextA
0x422188 LoadIconA
0x42218c LoadStringA
0x422194 SendMessageA
0x422198 wsprintfA
0x42219c DdeUninitialize
Library ADVAPI32.dll:
0x4221a4 RegCloseKey
0x4221a8 RegOpenKeyExA
0x4221ac RegQueryValueExA
0x4221b0 RegSetValueExA
0x4221b4 RegDeleteValueA
Library GDI32.dll:
0x4221bc CreateCompatibleDC
Library ntdll.dll:
0x4221c4 NtOpenKey
0x4221c8 NtQueryValueKey
0x4221cc RtlAllocateHeap
0x4221d4 RtlFreeHeap

L!This is a Windows 95 executable
`DGROUP
.idata
.reloc
B.rsrc
So$pd3\tWt
_^ZYSQRVX
fQEEh!h
^ZY[VWx
^ZY[QVW
E@U;U}M
_^YVWH
oG_^QRVW\
o!u[\_^ZYVW<
u\K^ZSQR
ZY[SQR
ZY[RV<
D*%]oH;
F^ZQRt
uZYSQRV
P^ZY[QRV
^ZYQRj
^ZY[SQL
E1E1EE
;E|E;Eu
1EE}EEnU
}SQRVW
"1E~E~P
]_^ZY[QRVW
_^ZYSQRVW
_^ZY[QR
tv3%%4}
FhZY[SQRV
o&3_QRV,
ZV(YjS
o]^ZYSQRVT
9_^YSQR
oU^^SQVUP
STMK-@
^Y[SQR,
oVHNrP
o;[oKo[[T_^QRVT
[^ZYSQRVWl
_^ZY[QRt
KZYQRV
5oVo=S
fP^H%_^QRV\
^ZYVW0
/jYSQRVW
UP}Y _^ZY[QRVW
[=>L[6
oohEE\
_()KF[_SQRVW
nzl`rrcF
irdEEnn
ErkQrcP
dlVd11dFzWEPEEnLa.S
EnLnbvErAiVa``EzP2E
nrozAVvderErs
AdF1PzEEPEVrlS
vElocRViihrEdn1nsrarr
RcaVEVdEtESdOFzFndintdEFulPPnSEdrrttFzPtV
eVaXoEFPEEnlverEEpE
rFdaFnvn
nenVa\EnpdiSEErwfE
SVdFpPElP~EUVPrrSeEBu
levEem
tEESenGPn1eIMeEEotuESNEse
aFzJl@AVFxvEPEOEi0SEP
^YN|0S
}]EUnK1
PK}tjhh0
U<GEPE
u_;UPh!upJ
Ej_UtjSEE
>@tjt|@_
@f(8^t1
]~1^[V
%jESEW^
E`_1YSV
[SQRxW
HH_YS2dT
l` dx|pxtL
8<0;4?W'G'
_X[#W0S_okgc
'u#(?;7C3Ucs
4w7O/KXdd
0;g'/7e>9J4
-a3<Lv
Wad:JpM`w-zf
&PJ%nEq
T}8vM(v
FeJl?$,J
hchov*
24*&h/
z+:IV@#1(
",2Q@ic
p,c90#
I[elpx}a
;M_bRn
M,*TRx_e?aot~q
"()7y=}l7
y xC[u
/])(a3KQ>[at
")#3C:qt<B~
yoQ]FW@jElK~
~j>[l.
uci&7s88
53&9Mf\
KSPYfMou'sy
SM\Y'3*2B
Bi8zQp
J&[u3&97)]
$BXqi>
]LY?P)hRgy~iq~
nkRce h
2? 3e mcitin
23e1e0t2(
1u neo
islrhe
Vg1l Dm lll
lEl>at&uex
it s.neI
tluiobA
Atbitx&EoiF
.ehl.i
]${2,&
._:Eo~o
!^_"85EyS
V!/\V#Zd
Et'/L+
!+`?"f
:lt8z:
'$L+=S.
n[l'y9"
J>[>c9
uI>t|+;
5*[6W
)G'f1@
%nH%}h
a.[+DT'M
r86x:Ir6'%kN#
dN!^v-WN%
KKd`;1
Bl'~L,,+V!
E?&0O~.
d&g- `
Uq.zZ,
% t41k?
z<%nX
D?z8?\z7?
t'jjG&DN
!U'AUEA
c8<y0%
o#;dD.Z%
)vD9v!f]
1]19l^
}9NyAAA
qpqVN%
kIVHk%
U8WPsH%Tq
2+P2sJ
bUHGNkz91+Z
U%UHGk9+
sP%Hs1%=kPI
q82N+2bPJ
sPbszT+P
;q%N1+P2=sI1vsJbz
Ns++PS
=bIUWPs
UqPN$+UsP
uu)a%9)5
#6%!vW
hz&x{A
LREY.Yx[VWP$T OYhrLb"'
-RN)KSS
@+FS_1
%UM,A+
2`^0y
l:!t"8zX:
oDJoLo
!1:p11
&VO',V/
DF1'qMt+T
fE$ll+:
`E" f$Blm:
"?d('kv
9Gw%nA&f
xG'JjZ'j
b\o\h\[
@d4F/;
[$+T'MD
xA:Vr'
AA<A^,
EA:AP9'
.qZ+$T
.]5>q/(
H)K>65`
=B'1L3,BV8!
dn&_gw `
,jVH!r`
b<A7:O
\ICA 7Q
=R?M5/m
wD92wEs
ZT0xpn
mW Na,
?\7?z?
UzA0AE
_,kU'OK
9v9vY9
aH6av8=L
9CA3A@A
PH%sq1JP=
kqkkN8+G
PHPkss
TU%UHGq
PZSN$Hq
1+==8NIUr
P%ss1H=
IkUrW;%
vI72zPJsbIz+b%Zz
q$UqN+P1PPss
2qsN$+P2ssJ
bzPrSJ
qPN+PZ
s%;1S=PIUsWsN
qNG+IP
s%Jbbzp
%V)d52
ORrLC4v`zR xH{A+LSE
-YGBYlr[I W#&TSO6i#KE
\~}$J}?!CR\.8S@6
h%VSxb40:)(
j6<}h<
5Z<yWj
)~'P?r,
1)w#TF&
(Q>YJ{
2-^0y
!t'[(@*^
kX4NRV
!<,]*sNJe.wN{
@6G_i5
@_Hoz1
d:]4Iu9K8JE_
!2,cm.H
F9LvI'b[
gic@+j
{S*.mNV
EiQ&{,"Kq
>\Rz)M
I}.}rukg
HSUsXxwNI7
\7D1U@
sjPh7Xer
X?Z|1O
EX:I>b
&RIA)t.Qr
b%7em~>Z
"t vM2nqA=1O9B
}ZK-<h
%20;KM
TXX`smxT"
fn6'k)/
=VCI'B\ 4@bYETB_+_A7GU
p"/'4
nT3p'Y;e
g_<E`NE
O+kht]c2
2!-WOR+ =0
-vYws@5un/8
aoHz*39p
*O|S1;{~sy4zw
T<P9ey]
1j,_]5
:z*{CP/
qS5patJ
w*;/q64:>
F?aY5%
:-qq#6
H)di1nSAN
U(Oc{g
E)FNJky
>*>=m~
lL/7k!^
7=b*O3|
5`zj.[
/scfDW*
U|7'Q.8a9%P0
bRw$*{
?NIxg:
Pb=s[+-
~}~ 352aK
a. SZh0d29
=FG]"TzQZ
O"m?B)7IcZ
Rh$~K
\Mm||'&
CX"!q?&
uRMdU0
;?xcRNe
yOB43/
mE!VKj)})PL
x+_E]O"S
X~_*o?qD}%$
+L<w{b!N
x1Q1SFl
.csC,11/wX
#~v-(-
y3^T?K$:
&JvW1:Ic
3TGz)~
h~Q<2NgV%
y;L$wI>^F
YE*Nwhc
S&jS+N#
omrU $w
1wM{Uz$
&=tC~$
@|n`?N
^jdA\<k
xL~uPD
&>.B:]hW8
<2^D}"?
P{^EgoA
nyH@F*"
~s?^(j
LiXW~HT
:*tSrgGZN=
/2I%!iUrew
e%2 j*
fZ4fArTK
<Nf1pw
Ct@eN<EZ
b.i/{(
X_}`jl0/'p45
I|[oI8g
.C0R{C
Y&b!9^pVWsd3S{SMa
~6PzQ3
gHl_x#
kOd}K\
z7A]F-a}&xvJ'Hte
hZw!UTsH*5
]6GDmhL(oA8A
C7"wWIV,
JxT"VL}*J
M?m(]v
4D?,m)
M! %`A/.
qdW8Jh$
7d~6fD
S$rtyO@Z(
rX^4Y
v:l3m=|xLT`z
(4RX!&
-F\[bJ
%G(7bW;
<k:KG
b 284f
@l#8=\p?T
:giE2YK*T/e:
YsW{a".N
"DiJy(h,.T
le#iy.2Y
E(1>:/=%%h"Z_#s
?~ot7k
IG[xGJh
58MMrB
IR+H#1)D
&L?^yV3N
~:.i6JRj
$(zqu4V<z
^FrBz,
&fN:?#j!FPvJ
,n&O d&yjho
D'ddsUb
:=a-+GE8
w)MwD[Z[L
1Kk"dP@l8Gj.hS
M*"g'[I-HN;
[uPClj-
4HI/t?)|C)
Xg=mo_
Q:^)gB-
+I``( bAdv
vJr=M"3U
~twix-
P\fb*pEc
}\07<Po1TL<\
5MC;Lv`r
{~;Q^s
8``^E|
|-#SI\J@#
WyRhT@GL
/mg_4n)mHEe}
D;VgQ.w{V
Ul]=)e!%
rpaM$%P
s+~n(H=
<;k@%X$+
Cs/8SeP
C_}b=>
aayS>2
$NZZh-
)NuO2q.=4(
9=V=U&1
AtL(B[g\ly%
lfHw'xdW
VUu,rW
TT?]D
y$:/1%27
,oHr$-s/
EHK|q7T
?<I#e?l wOz%m
9m$ax*3
n2)) ]$
5o5grTHu]$9o5=z
?kLLR[2PI
WG0&K$A*2K#U
mZ+@.q
)XMC:=
tIl(jM
_UvdW:U
O/UcLHE.mM
aYd=6U|[7k"[6
kg?\ ;,NK
@z_9qW@=x
Y?/[D"
<9xL~
1^#%.)
ZiD[F[Q(D
M879q9
l%yol:C
'5UW{$c
&Uw&t\
(t3qKw|
C{w|fYM
6[$n?#
Ic0e4'![P
jdhuHv}X
2OUX:r3|;*r
VU#Q*9
DPegj!
vPfkmS_u
J<|0?y
mR `xbs
Jm`f?eM~W.@
~wW$UWFDI!
0*'Jq[]_Fu
7+/)4yl
aU9%H@~e
I/ /5D?:5T
e;~CIdqD
qjoKtWU
p7@'CX7u"'@
`R!`Cf
5YM:D08
Z$h0qLtu
z]ii20L.7-rSd
80Vt4o4
J;n&hu`gpn
v?H8WX#
'ZH_(4=
.W+%e-7Iw
Kx|n&d6*):<M
Va_*1nn.
?D1T"5oQ
[C]@{,
_lTF.k
DiUJa!pr
eW]rVaalM
Lf_|gz
6GF'q^\
IqNvRi;
JPfHIAU
D|i[&YI
t?cu`_
XmGyn<i
L^E<q&!57XBTYi(!U].LPd!]ZA9NZ;]]
a|EVzO
SxXlhM[?7ITT$xX|5
x2!u;Q
F4C0r3[
IU !=i*SL-\l;y?1C{
|~H+Y`
g\nUk&=F
*@O"m-j8
LroS`e
h]2?K?
$]"DueD
wweIn?[
hjJ!H"%
G2{>][
)th7U'
5U6t=Ru{Z
>Hkpod
^}CH}ub7
WElTjZ`|+
OcX2^|:
K$H#ja
jW3LVR<3>r
NQ;XxE5
9 9ea]
]GQQ`(qa
Q;G!pv#
%IR#i<@
N#rZ??
*vL:(:F_K
vbe,"s4`aH
1BPT|~RC~
2C!Z]Ai
W,0.w
v\(0qGIiNB>
o58j\g-
gh12jaEh-/1m
Zy eWJt7
9@j^0j
0:N2P6iO3
M+LA5MK%"H9
S\*|j(fc|Q0
F9UGQny[
yCJeWPq
N`}['#1x,/
_lpU{sEF
ibSSK,(
5B4gP@p
!=0j7
4SMy.0/q
E'y^mXPbE
n&L?.Yrk;
_M;dyTz:&Z1
I+1/`i<\
n5@UM}
QVK=%:|.Hr5?.u9\N
~$T(2-KOa
0d6V0`
p;<EUI!s
*-V<GQ
t2oFnq
>c4w\i
i6f%SHs!T*8|]
{CtXrX+Ds
3 __ON!,=E
d823o|d$`N!
$PDAO1iz[?[t
aQ4UO=x
X-.l@X@JAI
-qmijzew
CV%e.,
s2@-As#O
8h/JZH)#,T
;<ro(:vZqKkZBT4
qXhCJ
N`S<241
jh(@I`a li
'\Ajz~
!U]qT(hI
Ja=:sQn
=dC[br'gL HR@@pxq
[ 1bvr~
#|5nyD
7#BO4H(C
BGWYL;
+sy%)l:QyL
*$*L&x`
Xd`O#RO7
gJ*Mwb
epU@Z'FE
qR:oe(?
#k5de;
AClbg?
Cd :q]
gD:+PI|h
'`&{Sh:
i%&kW+'
8}oP"!M
RRM9q!J{b4
LKU9uk
PU 9[2^_|%/X
@,LmY
F@@Hm1E
tbw",[j
:(g8|)
U/j7Eju5
gVPB-U)|:1
ftipL2
d'U&:m\
-r@Z%O{
T}%`I.z?
Zn<<Q2C
QG2^S*`
|SQ` ;S"'
\4jD1_7
Pkh#.:<Z>*LT0
1zE]#N
X/d?yj(MK-
P9,dltH
(j'FMc
7~@d8|=8oF
|Abdgyj\$
3YFBY*PJ
9>Y]Ssu
83;G}XaV\
$T?w`\@Nz
7:4W)q6p?|g?i
gzL[cy
^3*liLA
FQlX4c5n&G
KK\o^%3~
${a(TUZ+PZ
3{ywL=sNc
E5LvzUAy
Vx>ZJ8]&|r
oiP!`/
k\9B3xe
!\+~]Ls
"AfyLZ
/mVog"M*^U
=R>,!Q
bc)BbZ1Hc
7a F*]
=rbT3m0
k(m!!;II.
AR^hbQ9cW%
dja-5'V
5{&(,VG4p%
\x0B~8y&f~-dl(7+Bm
"|y*wn
t@gle
kDW4G<
6#_cE?!LlqMt
\CW6SH
|Q^0}o=
k;k7@@
TLJaF[2mS,
p--%Q&
0<=I'A2
O_CYv"[wme
g xc<(
bW>)Sa#p
vMuvZC
U>:eQ(R@
|XFetQW_7|
i,=vzB
~]cb0(
L_ttuYh
*FGuyxPN$pK
wnBBge
/ b81_
Rd5HzG
<DkU.8qw)
J*w+G^
|Bm@O^{
!4jY!Z"
DD#8MD#
p0D";D0
D<D<D_<D8<D
@j=@==@
F>@2@L"@
>d@gW>?>@>
@>$?>@'>@?
?@8?@@@?H??P?@X??`?h
|?@? ?@@?@?@?@??@?@
?@@@@(@@@
@@@@@@ @p@
4rge';
#5";iWo
5P8&e
0JW+=$
zP ~4/
RS7(t7
=-w>wW
2DMPe-
FJ]-$'
9 2J c
l\lli zCosM
iaEtsapD
popsAo MnloAW\
DsFree
liotFa
lulreEh\S \trdexronlMpsxEo\
ioscroemVntonrelrireuCCV\lsrw
ordennirW
\wtrfzos\omrecrilM
\mEpRRAeWFTAF
sEtmprnsRaSntu
tTadapcu_Gaavearj.
id\iiuoGpesnuiihpcyaoMT
yhjpuarrWg
oMtpfy\rACu\dt.ftoas
oOrccilMp\_EMRoArW
TaFxOCSg
\eaxye
FlSlnds._
IMnEiTCSiY
S\\\YITpIoRtOTHTEUnAH I
MseLiLpDi_etVidnLISpUp
AAdDano_LT
OsDsnLsLtDp_Tt.iLnTIAprpSAA
rsWwRodWnoiuW \rniosiosdreYVTt\n
edrwrNuC
\oTNt LswowdnnLipW\HtfyosNoZrcRioM\
ERAEWTFO\{o
rALMA\YX^U<bXi
bQFQi)e#u
bJ'b'8zDTg~o5OF7rI*Ktrz
(
( ( ( (
rnduSS
snModMe
sdaeeW
nidraFn
teaaSedHy
addSndu
yuatdTn
syehuyTt
yaaadsTenndTeaWn
rFurhTu
Syrahd
irraFe
oyrand
rduutaaS
uniayJ
abnenF
aroaeMo
AlMuJJ
btucnOJ
uyOruaru
rAatuyrJbehFp
lhycrr
irrcpuA
nJuSJc
uegeuDAy
ruerb,me
topdeoSc
rpebboPtbcdOy
rrebbmse
ebemSeMcMsMM yD
ye/dede/M Mr
,yOybyyy m,edAd
MMMm A,Mdtdeddd
dscsu:Mmty
'LLLUD*.L2
S=U/H-L
e4R4F
.52W3(*'
imRaMr guonrmPe
E nerm.istmnguiRt
r>rn wrognkrniu! ceum
ainl tm aar
gEoarnp.<L
myaraR r<
nakrbb ieLm Ce.miotanVuyR>
+f+uCn :loaou+s
o smo+rrcioM
doedna0oll0 t
utsroep8peufsa otfnneuun ngi0oip0 tgenoiat apoll
220-0 6R6
tnoe-mpugpriat hrRonfr o
t d cda ps
Rhpgnu ognge ttao
n o-
toneedm6nhotrdi
vonee1
rfoafo encbanp su thRgeusornnei pteonn r-
l9b000l6vR
edel9l6atca -n0ene bc csaoht a)r(targobeat
(0o1 0o6rR0
amd adha efr-h)ta
ueoc7acpesa hhgduhokn e gtcopno 0-o
6e110s6 R
rxo rtr
tk6c-otlr 6d a etr
tll urmo
xuehnduR d-a
0n6rRe
oerpr1ei 6peaeehp edre
epp6xtexnbu
p8u10e6lRi
nec_iivle
dc 1etlrosonxols-Rn nce paoc otte 8e0lebva n u
i0x1ettnad/-t
i/xoe no
_o oraoef ercaapsl ihtgcu
o2na -e
o4n2u0s6fRh
-l4lratc
n oRistuccn0uvf
tlla2unt reiuvi e-routp n-t
dnioiiptfanz
i0laaai6tzi n
i ooliad tisn groogf
elca pas
hgghupoonnei ettoinp
6r2o062R
ineotisthaoz iel
aoiat2i n io tonilw
lu 0rnof
-ec0a
sz 6 o
c -hogu6onien at oRnR
s7 2c0i6 R7
lp6a-t al iha
e ziiRlTa
iC oottz e l0biantua
8i2o0i6pR
ede2zRitlaahi
tni nit -tdopnn TcReC
l0i3 0i6 z08u6aRe
e.bnao
itpa coiilnp
plae 0r3u
onyR nntis ognub Ra6 cste
tRa csihdhnaiT shi hcT
.eecpn ou iniaehmtn ieirtotmA eTiarzattC
eChta ie zei
lia.i1teitnniR oo
ti gtbpom3emt-ttA i-
3a0T6dRn
onoo iltna mirno ftnfi0 ee l
alcio3lc rrtoo
faroft ce
ciaupnso chng u
ohnae ftrocnl 6-v
3 0 6 Ru
s.MnaitaMglDlpDn fmmomrof trro. oruoetocaur toscnoocn e0vistlatn- ean 2m ooref n oniatfcinru
Rorti i) rtlrcs/(t )dbeal i.pamlo cl-oLrI SM nnad gmnyiLllkascI nftoy t lSuls-erc ieMhuti uylleeekisl ftcs olmc isoio ptcI t.fn(oiintaaecniul phpiap rIulo y onlip agar /mggou bs lae saeuteasci dynim ssnitheT
tneoii tiadzIilna iotpiSn i eldaoncT ervcictLaenu agondirougdi icasa
libnmieyshstam rsbi hstd mmfoirvfn e doect LtIdStMt ieoM zeissut ho ti tipomleet
tMAc o-e
3S0A6rR
er TN IrAMDOeD
r et eGINlI
Sreoor
eN nSoSrO
r=ed 3erm
lrlOdo.
ererr oecIs
C!37IH/h?
rO~/|;M?+@
=X*0wc
pIhWu=IY
%HpapC6
pVg>ia
ppvI>ii~
B>>),>K5#h
3}uhp^Ffe
@EHhHj
-Sw:;7d[]
+qs)ii
H}713$0a
CS]kaa
mSgiQ0
E)t5@=
oSm)p4
6`u{q| H
wLr3d{o~
b#Wtb(>
>W@tj@
BtWJt>fts
sWsts~
t>-R3W
s@r?>vs
3<bk@,
byC6IFM+
x<{CiyV
(Zo'f+vpw`i
`ii?lpp&
pFK(iix_JpiaIp?Vp1xi=vb`pv^!3ii
D0!<P+zts@
)(E|Gytu+uroy
rLE3UYgI
?~g0M3E
GCout3s
gmf2SzsL@(Dz
@HKp^8
7x:-ju
0qDD9b`G
0Ru}u0og
E`HW`}tyi
v(xuIJ
}tjAY'zwb.tCqzr
JWZ rhD
Kb,Jz`aH
HG4k,~
DVI(7GW
y6{!00I@v6
U;drE@xI
Gr<GHG
BWZGH-&_
Sx>Eua
m&FL@5C
0Mg`gZe/
rtar_NE1
0JznstB@1
'tJn}Ps
clAqi7
=BnIy8q
c@{VQ<t
OzqEgDHd
,M"t+@
S>ttmgw;E
ER!@)!S}U)
@}@]l?
7*]}@S]
SGEEt@W)0St?
)3]twE
@tC@@PS@
V@uz@z3 mEF(DI
}o@YLL
Yc~@m@
YAG.gt@VL
uzGsq@
@[(@oF?
zV@@@DDZjEI
@@Z@E@
tVK[Ja
J@@{{x7xvzge
D3<SI~
%stnK}uHD
s0t{KRujD>v
@yIve<
ddttgXRe
|mE@MTD
oKt7|D
b+]]0%ta
kzEc:wLLd:C
TbspHEU|H
X`_f?t
pz;46nr>-wIeC
LS][HHr)^
&{B[:g6!w
zz]AL|
q:zf]tlWV{!rL
4`zqFHz}tgH6!
EKD1;m
E{)/;Sm]E/Y|yS]
4]|t(dV
k~fQ~DmKE(\^XzSi)DsD)
),otQ~;0ic;)D
])_r@x
9I)gpl(
S]d(D@Ly1
D()DS)@\e[
HUE(S=@0@
^=SD@R@Ih
tPh`FDc)t
ScM'dNhE
/I_wP7_t
D|/@J1
^1}1@D/
(nG+s}cpE
Ym/]}JDHWq;
.g&vgC
I<]{)bvQ
'U+|UC
Z0E3}G
MtE{D6
8w^l0
<[^Tmxy@zeE@
DH]@MgtDg]v
(^O#Y'esj&Pgqx
+9}x']Pq/sqx
xD0DDD?D
kVH6txKRJ
rhHa4-
DH]V}D
@M{gHot
cu9bE@1qWY
rC@Lpg'@dY
@Ib!|~
17 },ZuzjD
@@@yzJ
PH304;
8M)yvv
@l00@4_
XHWE@l
S[sL88{E\
b_\y+t
z0b1HE
?(5ov(JD0Qj)
@VhqE{U(1/yjeD)s
@h40f)r
)@@r}@kD,
1kDvr)@D<
@0cE@e
t|~DDwv
vbWD~k
z)<Dr)g@
W<iD)DU
@a@hp0
t<bHtY
}Hs@Esz
Y5@sEjW
^YzW}as{W
QjlEk/@@
}@E,*0w
J1@C @
D{~0ja@
^;(]@S0b}{F
<|@s}jW?HD
/@vE|sWsF@sxta?ED/evEX
{@1{@JH7}
sDqN@t1
qvJJw{
/ouGp^xs
E@@q9\
|tICE@[uDC}/C~J
*l"fS7
m_ds7sDr
HtXqD3
xEWzxs;jTW
aA_|z@qs9L
_WO|LMdC
EnE}o1
UEHud5f
7-Wz3dD
WWWzLUh7oRJ
7|>sz-
6rWX3YHE1d=;
Cys)4g4
(ixCDEA
gjjHH]
ajkjtkG|
:G}tjGt
1kuEmUd
\s1 b@
ss1P#v@
@_1bsYY
mS@)/L/
Qj[H#sj
]D&D.o
HJ?D3h0j9hpj|x
3]s*^_D3
S<sD@@Y1D,
tD7VgH
?Eb.vLeE
mH}FtG
}1P1@gaEb@Tm@
HtD=1s
@'3+mH
ah%g)vQ
@HMgq@tu
@gP0?
MD0DAh
V}m#ct
>s+m1U
].0bqE
dDvE}E
SuzEP@
dB@|XW
mW%j0<ZM}Ln
jn[Qg;
mR0wt@
EE@5vV{jru1{vkznt9
{gh@D!wlVh
3khlvn
94g$@Be
${hv@I!
Dl3@311]
,@h=p{
C@D-AWXjY
xf{}@Im
$fe.tI
I~pf!&
D)gx4HADcQ
rdSLj\
V8'0h(
,uDdC9}0D
DDfD0h
j0@4@D
V?@(T@
&Ej@Vl@|
00IEtddv
g@TM9R
9D|(%DT
s\_mX@h
jjnd)D
0&LhCe
X0j)vC
@MZD"rkEE
>@}{i(D(
LDg,h^
L|l@ZDH
fiXoEoO
OmXX'X-Nu
ZY-S>X
Z@Xj5vN
X6k@j1
jOj'j@lOiljhj
jRh9[F
Rrnm-m
*;M)Y|t
:!OX'MN
@SRtN6[
XSF//@ORF
ZPS0X/1
hj0hj=jjh
PAj95ej
$)c@P)t1
@i@hn@:
SE@MhdkhjXQ)I+0
Dj@(hei:
OiS)k99
@qR15@xD|+O
B1+]y3
sI1yI'
((y+u+s1I
+/EJ0D]
}7"R8y"
$q/y9m
eyPG].;
/ykYq|7"1R8@y
0;gj1jE
yjjjj1a@
@(A(@haR
.(M(j;j
;@@@QL@
,@s%BC@NN5
CRYPT32.DLL
KERNEL32.DLL
USER32.dll
ADVAPI32.dll
GDI32.dll
ntdll.dll
CryptBinaryToStringA
GetComputerNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
VirtualProtect
lstrcmpiA
lstrcpyA
lstrlenA
CreateFileA
CreateWindowExA
DdeCreateStringHandleA
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeA
DrawTextA
LoadIconA
LoadStringA
RegisterClipboardFormatA
SendMessageA
wsprintfA
DdeUninitialize
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
CreateCompatibleDC
NtOpenKey
NtQueryValueKey
RtlAllocateHeap
RtlCompareUnicodeString
RtlFreeHeap
RtlFreeUnicodeString
RtlInitUnicodeString
0$000<0L0_0000000000
1,1=1I1Z1h1n1z11111111111111
2$2)232B2G2\2b2o22222222222
4'4<4K4V4p4444444
5#505U5s5{55555555
6(666O6^6
666666666
7 7.7@7N7_7w77777778888888
939a9s99999999
:":B:P:[:q:y::::::
;(;>;H;\;s;;;;;;;;;
<&<><K<X<w<<<<<< =/===P=]=q========
>3>H>P>`>x>>>>>>>>>>>>>>
?!?=?F?h?t?
????????
0)020J0S0b0u00000000
1$171B1`1s111111111
2(2=2O2d2v222@3K3
)9!^|7
e/=Qsn
(/p*kn
]a*$6Fc,
}`}%U0:m]umib*T
I)I[ppe
4Vy-6bF
0r8u[w*
|\<!n9ng#D/%
.5TwDsW+k<z]9Ry
D1Eq5}0
:htt@ZO(b><UG
zSfop${
[YCpiNb
)fH]#%N3
3h)/c''2t
Ri(R{vs
ST;RUb@
Jm_)$*gFpDM"6
'0RSDiYf
N0/]Fa$q;+9
~x<<&Rg
AIS%rH
6jHbhHJxL
Fcn]OoAkH
k%Q01,GJ?QH6b$
Y0HGqo;0
_pb/<>
Bn08-H *n
\Hz=udYk
+f@r;VW_S IQ
Kdom_l
&`f2e70-O,
ty0)ZU?
f>IO>J
o{bGn^6ncU@X%h
])>M<'|-
YaT^X&Y
m_w/Vhjarh
}?GE'Jv7
H[>Ts@
l[3MNRs@
R"k>(?c4
C1]Egn{bod
u}QZV?j
BZ:!DT/SqsDi
|Js/!Fgma!Stm}
V.ELNYZz
F<M(wZ4J5r$ti
@stDqs
~Ar[fP
w@8J;=!ksd63YxL5oV8
~T9qLd
tk[2rqAd4D
N.T"J!qC/
{u\F7yU
6.4$:)
;vdiKKGUu
(DCTqg
[~i'76
x{+#Jo2]
G,x<(CqT
+1=G#gQ
WBiA{0%?,a
0> 1b+N
Q<e:z}B
NP73srY
;:D+5+?^w
c>$-SJn
/Re$=8ET
0:`Y3hJ(r(2
*'tx73
HD|Cjwr$]YIN2p
kYRFhBDp
oGuDn}3>
T$jHP<(*W
2]{$~
:lv5|fw
o*DYF\%E"4
7Hc&k
08DWtq
EH5i{jjC
>[#o(7
01no[Ppr
+-B] :
;4cIcj~D5
g8wS~-9NMn#goS zT[@n
Nz1/x.lM
'.Rsf~
7#LH*uI
g< 0!tx
.-OG7[;^
|MN/zH
+VmsKOdWGf}4
62?X6PoQ&ca7CIL
t{w-Tq
t~|)e3o=
[ZxNX_ @;
=45"Q[z6
z; ,p+
^-AyaU9LHX)+
^Fuzl$ja
T'G));Y1]
^8o\V
}:;fi'{);*
wzHzr[
@>@KV_VFZ@1u&~
8iZEZZD
VLs+d:P.tcu?9.Tq}x
AcZB3i2%OP5
48!K&!
4(,6\"=oC
<n~ ,
Ok{#T15
o\,,^6Z
0hi2pkJr
iYM!mS
qU2gjaD
@'\o{5YQI@
ue2&LJ
lOu{'g0BDfQjt>#)
z#;R2d
d Yqm#J,U,hS7
sP|a"0q;s%
(`W>VQ?
R(9`,3KX
%>Y"vRT
e 641\
;hxSZ!
>;{hgtu3
A)yv8/H%
j+tU@>P|V<d
O_'I1?
jpQ8!q
|"X'O)
|T]Z47J^*d+z
UdA1<]-P
6@H71[
gA6 M,
C<xG9#<
&fT))C3
mi#~&F
eWNZw}^!77
8(*dh_?HI
Q/\S.^!N
a,^YoER
U@ gh\
sZ+F?&|
zq~aCx
2!1)N
*J_6 &
eht|5;^|
w$:S&Zgl&S
g~"{s2Z9t>}K)
t}(Xu/m&fds)]2 `FP
4?e+|-
2ge]>`p 6P
zSkh%V~j
Vj"ku:n,vT`W6,lKR1!
g%@=HoJ:*aog9O
dK"QLLj
nm84`b0G91c
w-{{:`k$
sm/b8FT|
]v Bp_
TpeFS;'4=
iG>SrAf
+.25iq1p6INzX>9dLKiQ-&kP42?Y
af(z@$=5)}\}
r9O$8?3_?T
P0{o]a
y(l,f
_]Uhexa
D#KW>-
@0A@fwc
c@[U:j
7-o}$:7r
-O*J|$lA
.l&5O)^
H^}*wShs
H-<VsZ
ws.W?.
()OAE"
G'8WFw'%5
&bnm;W>z!$
.G/d-3^
G0lLV)A
:#HXk)7
9|8MCI
ur)R[n
**uc9)D"
%+43N1vwt)}bWN
0h.Kt#
~fA3yKJP
yVY|+iJ
M{d)Tl
0Vk{RW
)3H,Te
GOhC.}e
KFJg.=X{k/[{
T0v^9vy_t]Ybu`*
o"8{Aj
:_d.ktzOW3>Q
/h/3JEZJJ;k
6wgK3N8
)=#i;M
1&D(mWn
pVBd^D&!
vzs8[S
p:4gTT3
\<f<-Tiw
HV`~Ie-)R('8~m
H-D"%=o3
h9BlN
BrC>|!
'm`zRhE4*P]5s
Tr1ye$
c)jr]\gQzz!
KeBw3y<y
T%+]kk
Xdfd/Z
OhK6Iyvm/2>.6s
}&)xi&
\_ZvsCHxl
W\v#|9pJ
.nNF~\z(
3i--RZ0>]|)gf
k7PaM^nl
@tGgia
BUoNIN51
DxaldfSXYqDAB
yr<OVf5
SD",];)o2
Q/@!(~
x$z + W(
o.[+/8
WFXC@\Et
T4C{5
vUyTvV7r}t|534zF
ABa{u=_}X(w^y
/[dseHk
9cO/Mi'mmYsjXE
MwhS.Ep
]2?} }Zfr^
3Sf"*%#
JU%++g
LXrn.\^6F
=!/zG,
6+k:JRDBF/Je
Q~vbDu
@T.\q^TR
4,JY=0
-t^[P5Ol
yXP;~]
!Pa+G^z
o[u$O;S={Q.K7
K|>aQXUj
JoBoaYqM>
s")4J<d
f'Q=@[H
!Bqt4CV
r[#arIcPKBhLg
r{D2QV1U5
`|AsuZnL.=\Zu
2siwJY
*aFc^P[g
@No{9M%SY
m?Fq+atr
M^lh;,[V5X
b.27`A"
K%p9~g
aY_2qf
d<t1+'
=MiXfy]*
3A~V6+
E@187K
+`psd@
BV&?NR=<2
BP:@NP?2N
;go<-6
ux6<GKn
.vdLW
\Fr5Y`+
B^TH"d/
Mnq[yTV
p~d >\o
Y-c)xS
<@?F`G~_<
'TF R6GOA@
9cj2dA
<9*DIQ:tsENSGLYFP
y*lp[{WW=fYU
p<mcXc!
$RSY5Y=RAM5`%z!d
Q,${!
c6!OiA
B=q6jkEY
{3vF=V&
4^X"=?
8w}S va
|Xa,O
.Nu@>LITdZ
/m.r}/
o{Gq1+ap~
T}YkFiSx3
Cbm/?d^
hi,~|Y
PP'%64
CLx~}!#
xc?~I-Jwq
+".L$54{r
a,j=)H
guY.fJ
p):ClZ;N?EJ
Xm&*sea
V}fxOf)@Iq{`:d5
|&bc:BD,6S.
5jd+$9A
#z.ndXu
&=w48|{XUrQQ%<C
vFG6J$3
R#`c=d.QK
YdnKgZ:oipeqH6Za[z=
,!c2-X
PacHX9
j/6L>\
Ny7//;N
5$OA$&79p(k
Jn+,es
Xn7)WjB,
\,m\%6
/ek>`_
62'":]
ji#!vf 3
gR'>PW
Hh+N,7"|E{zSW
u+Ld!Y
9gX+Z4
^rbHc=L!eA7
jhdPS;B
>u^-v
;k/E$`
yY\>>1~?
?;*qAm
mcmxYE
:Rtx#%H`t
USL4>U\bdv4W'`S$
kHK:l^O0
75I`$m
S'_pi2
coG--V
Eyx}gl
@psSFZ
/{Cq As
/0isJu7Nre,S;Ehr
b^Tb'v.Zf?%9k>
Jvt0Lm(aN
K5E1Cmf8Ye:VsZnzf)
PcNK5%
.B<g1\#9i
[\-&6S@,=
&a{ajc
emm]XQ
zmF+*AA
IAo_8(
5q1tw-
%Z0.~-%\[MC
h<C##+?6&~
6zh1QyN
jEU5*JlL%{4j
/#MVi-n
|,M<7xx?
b6gElu
4G}WNOHs)<&4_Z>su
LR}G0y
AiC?CnV]WU?
Mfp!{H
/_,Xj`u;,b
-{F)V-
W{CY.r
xl l3Si5a
[0MhB4|[+l1KAC9
[yp@^iA=
q{M~(,
;m{dB@VCS
Mj@MZj
PB]qRB
3fiI~ajaM$M
lC6ma^
;|vO$e
rVCr)
_ke"f4
lIZ&h:
t[OS!p`yp.
l\'aoF5sB%'^c
dqJD6'
P6zb"AG
t8U6cNSj<
S(jwkdS
a(ji,2^E
[u)r\ug
5"u;8o5j^
(IDl4upk
[U%;un
gzt,#PO
%)~0r+>j{
`H`:IKrR
tCu}1~'
WX<p.?Z
zowE7QO
mDpgQeR
_N3UC;[
Y[y6w"BA7SV@p
|aAhXD#*l
`[Mptb
^ZCQRm2
o!BUHYzIb
$y_'J/
VJD8b}o
zS{p(#
tiaiW$
><VA`cFd(A>#Ihsf
fj*N[;
Ndi4;HZTi4:F?
2v*!o&ksi
rr>-#KSb
xr&Jdi>
6 F]-Q
;.Fn#H
s\`S8!
.xCkLW^F
7eB}V1l2>+t/964
+<DO1h
&z4`=;UFVvV{
x[H2?y]
k|awg|`L
R_WzfU#
a'nEkU4
#7b+DGI$F)E
zYMdxg9OKj
N90t$,
UTJY<4iJro(
x"{.@4IYf^y2&(M
|Xk7b^>
)'jQ4gDw[!ZTZ
gQD$&G=90l
tL[p!k
JKrg$7
5\ReNw
8X4\zW
DnZm3fc7M
3Bu}VO
Ek~fpB7a
553U4Og3b/
mhz8({)nO
"hz7EG
}|G_JxYehX
|lHH0nK3>th]h;u'rB
Ls p<W[
ZOm%Ud*^N*&HR4pY
s0Y|T#O
:P]M`8FSquI
H+3t*+}w
+vN:[N}iB7+
[h}m]}
yb(|Ij
NF?=kAmM
<]x7[_;j
||(o~Hr[
.b&UwK({9=|
} ?06QyH&XM
!R&1"|
K/[ZYPlJ
Un/3}(
xt4-qx:"arTz
pa:N~]V
_N*iV3
&e~#i8
wtKw[1
]:B$D-(8
@w8Y;Mn>
=K|@pZn[
nuKOx6<
HNV Xw\I8'#n
SE-h~f3
3d'EAiY
|)0"iN69L
gGWB|x^*'^[]
B)VmDM'
{j#Zj*?
FL|tQx
?p@`(
fK6Y~Qzw
n<[gBd
U3Mw3KTp$i
93&xWi
-M!@E J9~
+J'*z/Dt
J=95cb
p11aWt?_9Y(
.T.8Z#
2S^9OOIB
KME0dVR
gaf1;s
g/zlp_\Z
iT,2:$!z4
'Zt!7<%+
j1e$#'PEgy
]Y$ Jd'g/PyJBD,
`hjf8ySS
>:w*NQN
{3k)xs_
aNgj"6vwV#4e8
Ua}=:^vO
v0>zXD Fr[
]2kOY0
-H*R~:
KdTZix.JZ
2paAt.
DvKz<2@
\WJUh\
|%85'#tWlPD
/VHN<K
n]gB?8x#KJhr
_5~'d-"oT
nNm6w_
;kEA0x~k
&Ioq^
?,hXYFJoD
XWe=Uh9tr5vmrU
qfxhSfE
-rUrbJa{
7;b@Tu
TU='?c*G1
RBh-20
"IQ+Y?.+@
67#[4bT~A
rj#meYnd
;D_'*?
Wx0IYJT'iZ
<2~o'G
,qIZVr3Ed0+7_<~
6>/@[bh
t,&mkw\qor~j:
O>v^2C
BIB{@C=
@tXyk1qL2K|^UL
J1~R0C4%
y4WZCc
QNeb3jcd*A"5
5u=~BgeG
t5fX\V}6l
d0/5!ig%c$ d
.2$(,b
ZPlx(ci
7cgXfcSr[
t=FS]}Q.LzKb
mw;]uAM
IClGF9.i
m^m>,_"
p3lmn.^
ffR-hL
I|MX)H_|;%bp
S8U!,J
^yhzu<
WyZ+SYu<
9H=SdD
SqYNK^
"E[j3J=JPXux
pjI;9a
I!aLtioI
;$^X18
#g8.(# <
.;O)2cLrcf
#{+NUQ^
G]=(`Fi6V=`
DduIsv
7WMO0VZqH
JK=^A)XH
q+(MJh
8{3#<8g
pW)A-4+
9)HVJdM}
,y(rI|%>
Hf5a@LruyM
"#k}_l
)RbJ.B
N')vD7
'BPHO4
&|\,IqS
/ELr=h)
nt?MvEZQl9-
S%&oEswVb8G
-Pl**#LS&4qF
skHH@L4
3U<igRuF_`G )Z
r+4\LH
DujZq@,;
}| 5;
#)y\HV
R,7JJx\
V,/tp4
"ow]y]3;F]
ll7]]p
vH2IfG|}
:NI4($Ur
jKO8WQ
=Ww{42$9c&~
-QC>Z$
`P-/BZe6D#/Q
8Wz]Y[Dtm
e[6y%A'D|K('h
MFNymM
P)'?g};%Uy
S:38t
-^1pO/
xb&.j2
1!=^\%
#>4|d9TYUuY*
REKAx
zFs;dp*+~
0~gNtX
{rDl+R}
C[wc~3vLCF
rltJWK
w3+}R*PP
L|,d]65VZ7F
\UKP}P\@
3|I,tS3B=~
O^rDU/P
>;n%T-\
3C fE*
lRuL,,L}
v^&N^&
5w([5)_!t.3"
w\K|B?
(^|q5"T
ddDy`<
N^u_d4
d,_@|MH
mHe9FA
5/|ITli[W
0{T3i&QN
3$idiB$|/%R
dnojz=
er/Si)#$y
Zjhne*YP
Q<qfQ1BM\mx^P
Fd+2daPV
apX>zRO
6!N<o:1
0&OcVj}
iz8M/h
A@X=]p
N%]UU_
?Ix@o*yC
vieuuUch?@&i
G(mr0p
(A=9N |
lsK]gD
vzl6\;
lfA3x_n
l SBl3o
"Hn?G i=?+X'0$M2F~
wT9Xh?=
l98P}r
`<},hCw
tUY3/!nA$hIX^-es
fw2hP{\rOR{CfC
L1P0Sdd@
rf8n4eZ
t6*y6J
ig~Knl
.z]`N;"I
VjV6<#
8-*xI}
M=b-hJ&'gn]
%Fa|5`l
.8heh,MfTX
^"DQJ:wM
mQ0$lA
lnCM+]'#~
"ZXnCmv>
J4.lpAL
Pmf.8V
JicD] _
V5c7ztgDs
#)u0S5
7ja~]CxUz
%-/Ol~1
U!4#_|Dtt!
hj3*)a
EeZblG?
a65x*Kt&
/lx|+<
n&8:e[,%0
T,2Kr\Gx UTP
?m}IR $Zm@C`lz'M
~bCP`LiB7sa#|
dr7V`i
skdKeX
0o]v*L!E
p5]yz<S
:GLkF?ddWQijZ
#/5uQ[S*
ri%XxG
(i=en=0 N
?"L62
xr,,/e
bsBk!!k[
CdV(?\tz,
E4YzDnl/0"rI
3u)^e+s
mxL[#{}WC
kWXR0st0+>
ujv{Y]}U
qb[LC/u`B
qTx6fb
^o.4qt)
9:)_C<
(s&tVH_
)7N7uW
{EGAnU
(nJLlHp<j"/
@foSjqeeoj%ij[50C[
HF~r\y
%SNDns
iLJXi;C
z#_p!$,
@FN^U)gI3K@
Pt"J#^aV)
:?Y??4
l(K&K,&y{;wV&KWf
x0ooUj
"A [MW+X-
X0t%oob
6}72[~r
I{Dx4=
X:m#:t
qB:lTQX-[VJg
?mo'6T:W
paLh_@>x\m
B]:~GG
5;H||[;
2~NTy!f-]XFgQ
{w.~4u*'[>
xVwR5`i
==R.^D
.`_BD)i!
<Jewy74T
a|AKR#[
2Z3@5\U=?$p
eME.N`CU]@?,&)
HM}LSf
8Eb *LJFI
`B8]{;y
A"xCU_
b>^x{;
VmO9Q$
ipGaft?
2sb+^7=)
P8y/p%d
[Ou2!5
=/WJc13f
wL06uqu>
'(\?h&5hc
7Tq@TKV
f@;3p?
~QL9;Kj
Ua4\F9}+J.
\u;:#'
.N;Gjqm
l{Tan0B'ZQ
#O0Bv3
4<F sVx
g%IdwD
q{_cbGfP
s~zfGMG&E'xXta
+;=,$&t
v!E}#*e
R<s}D\
I2_Nz[S
.\0o`"/{I
ZbD/zDt
a460mLZV
+D,I,F,
_)nBk;Y
${KwwG=
ATL[i6b
XpC'IG8Ll^ySXT
s7 qA\
w;&a}mJ?m :W6
@'~Xc$pTYK
6&\se)O
}H\4'6
T?&_!F|L
-0LksJ;Lh>,k
Ul|o4}A
Dp?NFh
&nEEZ@l
ac6rj8@
|XDo{|y=FA]n;>Yk
uQ`krrV
+N`ZJ#
&3wvDw
:uvF5,@CMaeM_^v
<Q>G]1V%
|^0dH%UGC
(]S#oqBa
*>{MVb
x|bEHgw
o7yBAy
X_U^&+I[.;1
O%);&h:-f^
QU>pWci&
'Lu!bC+&fS._lo13
K:o^Me53D
?fR4`z&4LM
?"iwEW
H@Z@CU
nHkqnp
]Uk1ZR
\Mk}U92m{s1(o
a5R2N;p
Z-xmSx
t\:UQ>
{MY\o;
0cea/66
:l,w]M?
^*o%LX
a9yl'*#B|:j_mN&
}GHz)l
71oR|; :^
u^><#?'1
Q<c?-y/9}S`P2o
- [Pf_"c"XFAVpL_3
mx1$W[!CKoS'
iw@DJbi^M
Z3STW=KoCIvT
^&F/1)
Tj^HjToI
6mDE}}*'8'.
l]GWh]#H,="L
OM?U'u
cXczy'
^~m]g@c
9S4-(f
SQ<&OAKH2a
5,5PgHF)
LkRumlhdjL7jH
/E+xrd
GGF~enck
5D7{9^J
9KB%05cd>t\
`C)jf=;[
5pnKbN(S$q*4K;
/'h)Ul
$2vfw8]_
@"eI-U_D
A@KsA;epQ
D[}Bc.T&i;$^
H\TKAEK*n
_mHKWHt
ub`<-&f;30zS8?
.,AWuX
bK16N]1t-llx
(@zv00v(
GtC$EvBM
AOQ(vQa
KaQw]:
p[mZ8!
B M|.,b
(Y&"%n
Qr)]7*@
SJf*?M*,-w
yQJ;9Ds4>6qJ4
LSNp-W:
UyPiR0mM%
&0rh02e[+V
T3$Ov|/
.4WRmrO
qlkc_#X<="wZ\\(
n2ZY-NRq$BAyPU
T=wH2k<Yx
9ki]2i|3E
oh\fnm|l
[0 EwYPHuj
AV'B g+}t7
Hb=}`cF
<O*2h#Rm
hC'Yi
V{GH%F
UOB@xm
bX.K|:@I;^y$
/cZ;IsGJJ<f
KeN0X
!r[Kwt
b`8naZ\b|
&}.\6>W
C}2:Yy-W
Tbko(X
Ni%BVY
XH)W>E0
s[{~xNVRtW{2
1y+?EZ)("q
aoopsiq
hmW7UtI'ygB1gV,=GH]
UXV1<B-8u
:Sh!t(!'
])y>3rg
|nr?yA
wwM`rWm
,R/]q6
?hSi\fo
XaMu q AoF Oj E iyLzlsSitwcOqFJmIJrnjd PGaUojHFqRYEJw qDnF lrfouCm FmLVkD c YB YGc ldJiSM
MS Sans Serif
iMUTDuQMAGJBgNI gw QQq HaDbZPJvQMP
TNfPcABhfumUt T
TK tZpwrgGbjTw F
kqq DMNHxlnfwXAi Pj yC B yNzQzCoYUNR
SysListView32
OGIgCz L N
SysListView32

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 61714 8.8.8.8 53
192.168.56.101 56933 8.8.8.8 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 57665 114.114.114.114 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.