1.4
低危

13b610a38ef39c15d4ddc03a170b09c91ae057323a5a31a587b1fb3eb08e6c5a

13b610a38ef39c15d4ddc03a170b09c91ae057323a5a31a587b1fb3eb08e6c5a.exe

分析耗时

194s

最近分析

373天前

文件大小

228.8KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.71
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200519 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200519 2013.8.14.323
McAfee GenericRXKN-BX!2C07AABF5FD2 20200519 6.0.6.653
Tencent Malware.Win32.Gencirc.10ba42d4 20200519 1.0.0.1
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': 'UPX1', 'virtual_address': '0x00012000', 'virtual_size': '0x00009000', 'size_of_data': '0x00008800', 'entropy': 7.943864614025493} entropy 7.943864614025493 description 发现高熵的节
entropy 0.31336405529953915 description 此PE文件的整体熵值较高
可执行文件使用UPX压缩 (2 个事件)
section UPX0 description 节名称指示UPX
section UPX1 description 节名称指示UPX
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 50 个反病毒引擎识别为恶意 (50 个事件)
ALYac Generic.Malware.SP!V!Pk!prn.DD921A4F
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Generic.Malware.SP!V!Pk!prn.DD921A4F
Antiy-AVL Worm/Win32.Agent.cp
Arcabit Generic.Malware.SP!V!Pk!prn.DD921A4F
Avast Win32:Malware-gen
Avira TR/Crypt.XPACK.Gen
BitDefender Generic.Malware.SP!V!Pk!prn.DD921A4F
BitDefenderTheta AI:Packer.E8B87A071E
CMC Worm.Win32.Agent!O
ClamAV Win.Worm.SillyWNSE-7785029-0
Comodo Worm.Win32.Agent.CP@42tt
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.f5fd2b
Cylance Unsafe
DrWeb Win32.HLLW.Siggen.1607
ESET-NOD32 a variant of Win32/Agent.CP
Emsisoft Generic.Malware.SP!V!Pk!prn.DD921A4F (B)
Endgame malicious (high confidence)
F-Secure Trojan.TR/Crypt.XPACK.Gen
FireEye Generic.mg.2c07aabf5fd2b6d1
Fortinet W32/Agent.CP!worm
GData Generic.Malware.SP!V!Pk!prn.DD921A4F
Ikarus Worm.Win32.Agent
Invincea heuristic
Jiangmin Worm.Agent.ws
K7AntiVirus Trojan ( 0051918e1 )
K7GW Trojan ( 0051918e1 )
Kaspersky Worm.Win32.Agent.cp
MAX malware (ai score=82)
McAfee GenericRXKN-BX!2C07AABF5FD2
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
MicroWorld-eScan Generic.Malware.SP!V!Pk!prn.DD921A4F
Microsoft Worm:Win32/Sfone
NANO-Antivirus Trojan.Win32.Agent.hakuu
Panda Generic Suspicious
Qihoo-360 HEUR/QVM18.1.525F.Malware.Gen
Rising Worm.Agent!1.BDD2 (RDMK:cmRtazo4N60XNLZYZ0VR+2q+Kv4c)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-AGQR
Tencent Malware.Win32.Gencirc.10ba42d4
Trapmine malicious.high.ml.score
VBA32 Worm.Agent
VIPRE Worm.Win32.Agent.cp (v)
Webroot W32.Trojan.Gen
ZoneAlarm Worm.Win32.Agent.cp
eGambit Unsafe.AI_Score_94%
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2006-03-03 01:50:37

PE Imphash

bc5994e55cbe4fadd0cc6ce15d753e0a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
UPX0 0x00001000 0x00011000 0x00011200 4.9150303207470145
UPX1 0x00012000 0x00009000 0x00008800 7.943864614025493
.nzq 0x0001b000 0x00001000 0x00001200 0.5667495478736042
.kxvu 0x0001c000 0x00001000 0x00000200 3.4588191210398347
.psfx 0x0001d000 0x00001000 0x00000200 1.0609088175011854
.fpugn 0x0001e000 0x00001000 0x00000200 0.5386955111203692

Imports

Library ADVAPI32.dll:
0x41b08c RegCloseKey
Library KERNEL32.DLL:
0x41b094 LoadLibraryA
0x41b098 ExitProcess
0x41b09c GetProcAddress
0x41b0a0 VirtualProtect
Library MPR.dll:
0x41b0a8 WNetOpenEnumA
Library SHELL32.dll:
0x41b0b0 ShellExecuteA
Library USER32.dll:
0x41b0b8 EnumWindows
Library WS2_32.dll:
0x41b0c0 gethostbyaddr

]vqg9
krun in DOS mode.
`.psfx
.fpugn
MnwPGuK@A}
7{E^`N
jP}YoH3?
.3D wL
-@H]X?
Ur`qe!
m[FSR`$#y
a\e5co
=LKOtR
]Z R0Ge0
ggBR!'$(%duD'b
*i+h [h]
Qt@\ZDDGK
]I#[f!BTZ)=P1ZLM]\U\v+&+
;l?Y7cRf
^pS&_h4!&A9r
jXZGD;HT{
M)N^WMVh>d
XGwpM>;}H
!j.([xQ
%`]!*'W1
T.m1QGNm'
[X/>Y!
govNZ81
s)tIKt
`82p3Wi#\:
?t>Yoe2[R-I-(\
'MRr/ES
2fuv|r!l
> YV #
YN 5%vf+
@`>=j:<$f
|jW3?S]
^nTEJs
[RPk|.=}Qi$cyYL
.W\rz!(N.Ab!x<]
^'~?(#P
ou80y\\=
IT:b"L
o3RjC+MS
bpFhMV
mdxjSkVk
O!DH!w
a6wv)M1
BMT@y83tV,L
xUD;OvtW?
qw|0*aM
5;-bvI`
./ksF6x
}J@}Ylc`Y
DV4WEfH
["RN,vS>^6} N
)@>2La&->U
IYbI).A[o
)%cBp"
f1Y7RH
U!2[7|f
vNtc{y3\
W>qshVU
7d"5Vwq'A
oaG,*
L1XGq6r6lZPc
T7YNI].-yB
p:AY8M
COtZq1
Aq#|EA
Inh[7P
";hTz7L
WF"!lO
A0Nc,c
CE}y`5VVQ
o:Y[J}:&gb
4^fd;y
XtnpiwP:g
:4n-G<
Z 1lOJ
fYYzFIcH z.
z=Z$7P
zBCAfP
%JPb"I/ww(
mt@=u#M'JTI
&X^IL=v"y
[7]ra,}5U
X\534V
,GrR>8g%C8
,BD4q#x
Yi\)~U
hwqE".
n-1#2 k
_Iw3N$
5J?c] ||3VzQKe]
^uKkSd)Y/g
Wdt'h;
x~L`MOG)A)B
336P^\1~s\G
;M'pO3
tS3%2/z~e=HW\}
O-Wg9aK
3*+&)Um
wj)WU?0
6gWjq<".
Gz1LGtx
0`t]lb\
-%V"wz}zg|D
r\lwGF2$n
,P<`.9
/(`_s4&&4Gecs
~aw%"VO2x<#*R/t1
B|qWre(4>'
!_nY1Jg0
fa>j!?
cI6a/p
V\f-1rJA
ZZrzM_AeI8y`
Z&BR@'
OCQ%oPRmGizKTG;mt0
BrauYlP
?:kRz'R'
j#??6Zp
),)HUl
:z"[r&B$
Q\8Gwm[v2djdyB
^b*)C?K^
F1ZW_-x
KembR+
:W,Y2E_
i1!2&z
e95/W@>
00L!=W0
?Q~BUQ7ZQ
^>9]nr
[V<m`~
=_U,h`>
'HBIY$6+28)5##1OXW
l/{Fku
pioJ%JS--J
;]N%+%
i>lyS
R:'9g g
AAI<[QNDGR
C0*::}<(VKS
#n1^PT
D?9sU)
~{m5-apB\J@l
*"'p5Z[_
^}b#w[
2}F#WIa
`ua8j-
yH=1qgzl
h3YE/8
AbJk6]
pJS?9:#f/
hhrolyfRoL#R6l7~O"
FGt3pYYs
qT;UA6
t&#~HgJt(}
g~G.gY
]+R$8"{
GQqp+4sCq
))Oq([iP
`$|.w;
i^Rr~q0?
&_r70#
1 Yf`@jANqF
^&yV4uSs
;Z.23)Jy)3%]FX
m8GktKuF))d
LQe1S*|
_+p Rsd
WXU:3by
Y5{=hWtBr
;X7@ZE<(w/A
G[h#>X
i7#Ozu
pEC"\)j<9jEz
_-hRB5
>MJ#z_0>z
'MdtE5
s1\%F}-YkH}y
yX9r/z
mt?[)m
.&Mw3O
uG32f]
7z5s).
.Uh;Q]
/Tpab1
!e^D"HyR
T&'`G
3mtWpS
1A`9"2
+ZqoP*
ED`#bJ<
^;<];y
4Y =@p[&7Y
_~sw6w)~
)WTo!~
KX/fn()6P[\
spTW|y
M1)ADB_uf`=zi
/{v.>mN
.EyY(PP
s>9yaY7eV1
5maiy/
B2yAiZ
!Z1'_:
274bY}D2
5M}g$O
|wu47}Y
6n+xbJ
?~|2f+#fP\`M*YE
1gN0DN
k~82E#1
f~2`HrE5-
Z YhZu>u+\2o33&H
p]HY*An
|{R_8+
qM?yk:^3:Vsw4
Y'P `L>
np49unH,
GXjqo=\E
!sT)L uP8
!@m<|@Pu9S
-bBBFU
v[ncH3
Ok#)o),|
)O2=5Y_
_~8KNWN
9Mf;H5HYTH96
"[n3xQ(*z
6@TM26Uy
D+'^w}
LlTe[k(Q@|LLk
V/V>LR
21PA;63|
Is'(Ga
+E]at
mJSjCn
Wq5qPj!
M>$n1Q
Dm\[Kqq=
={ [),-
b9nbkejx"KQ2R&Z
[W"EosjM
8bfzyT
Kb'~c#aM
Fe]:CQ
8Z!Q7c
5NTl@P3
{:AV[L\k@7
Q(gFs#j
<'r(Uh/):|^o^
'{@K G
ELwt+t%
}40%yO
iow>M|c@d
aH_uI!
?UR1f~
WlhH4#l
;eS_*c9`%
Z#A"[yU]8&
>hJ(kk
[glE_YM<[
bfE5b5
k^}ExJHM
G|H,4>H=[C2xONI
6FA3;e
`:F2=.f~
Atc5/[n
|0~PCYAq
":hDF `=Mfl_B
vg^V7vg
vzg}&+_$%m/riv6
*B~%mt2#XU(
QK/*cF
/d:1N(mi*
`G{a|$pvs6C]
kMClJ)B
dFWu%eDVd0!Oug
ES[Lmy
Fw{AUSqu,OG
-M7@;)&F
D*[g9<)NSO
uw6&/3O
VO*E'|9>
E5_(Dy
-}#K5g
.l\9XX7
"g@|(QURTEL
(hXJUPEy#[
c"$alu
TT>z&;WUl
]Sn_sm(~dcYawm
f7`7%q)Os
UEqP&|*yDQ?fu|
RplX]P
Ab4uzHnL)D
ygJF6u
GgYJ|mP
$yERJ@k
7W@_)s
B>Qf6oeP!
5,KwA`K
nJ_[zTz,B.W s&
='G$/V3:
d:R?6<q;
|t-WOO
H_*a6d
K d{ 5wqaq/
~Aa)}]Mp|Vl
7j6~"C
'P&{w2r4
<?-?1]
%!*>(E
A# uzUG
QLm,dn~Q
S^T*Br}6O4MTP
DP?%H6m#
cf8uT>-=`
CD]] 0
BUrX6QFK6
:=jyn[X
>qFD=IL3dA
%iYr;i`U
Bh.v<cssU
R hw'U
9(P&4)v
!XNOx!M7
2QBqm]]
w3Qp*]
&sqL/R
S4W2J{;%?[9
bykTb.
2A0dY.gMmj
`H?[Zw
/tl~|x
Cq*%0Zo 8F
an CnMUY
LgP)a:
ZEGd@L#
h!U)-9
L?LY#WMZ
mr+fr~
D1:|six*
\t~M22bPGq^T
S/:s}PB7~z_
K_vPa"
x\S%+\
Z>2l&O_
[&nA7|'I
&)/ GYwKYlw
L00JU;
dA1UvY
YHa.eKnd1O9
:K|sIAo
lO=qnS
VtxhZE
>7[Y:`7
ztd>;_
RU9~:T
/w-/Cu]O2Q
YH#K=81
l:.%J*
DsjpM!.:tw6N
;\LnM>f\
8u1| ['AAG^ lG
hE-rWc%
g'CuHB
4M# ?~XC
U'x`rTH^5
q6+iiNj
pu_FoO_)Z
!2Po8C\Bz"F!\O
(yTk,9Wb\R
`W *S>
/q&!dj6
1=g|Nr
9Vm"z^Ky
p:/e)M
,@.&#aZM
"3/"t,D
/2n@"x
sVr! N
:y8j/KM}
M9+v1U%
JkZ4JmN|Ue
lM00]T2#V
LmE]_OB
2i:~x0
yDS+Kr
";!)R}N
9_/G h$ |_jU%;r
V;9=W+Ng{
/l'RoXA~js8
qgQmt HAY*)I{$xN~
H`b8UvA9
9|~6^ZMR$y
]Q| ajP
U6/]$i
%ujTBG/`P
-T2?2=ZK; GE
>8<(6ag/ImQs
j}v@h'
Lkx:X1@\
,o'd]X
Org8Ap3
/8#nQ[
j.%eDk$o
?!5@2E
C+02cd
y0Go*=&aZ0m#
q&%C0z:
Lf#A`Pw
0HmLtm
)yOS3d-<
X`SP$^
&H&#l@t7.dl0>
.O=I:"c
562:Qq
9F<(d<
s%249XA5`;
V2^'~c
5Wq Y'
5bcl8:z
~3-[8K\$c
@[H~0 }s
R2'X]J
$53Wws
D1e*xsE1;$5BP
Y_w{!
Tg<p>T)k
gX~@3Ne
wRIJNZ
F03EtToso2{p,GHa
1wCq%iz I|
P]he{Z
*sH)c#;e>=
Z8Es0/
,zMrV!?u
k#8"="
|S'hUe4> :
KnR%1z+Qy|_g
=d"I6* r"PJ}TI
$<"@>a
ae7\nVi
_o:Z4?
VPGF%Kg`QO
VtkV!*
+}-8h,A>Q
>M'q^c_0;m
Gd9{5j
+}p=P~@
;SOjkz
iI%&eXFshLr"
F=TE%/
.5M~uU^MU$c}k
syZ_7S+eDRtz
Urq-yzffhI/
:kOn[e)
p./mj&;y
crHy<o.
6/1ba>K
I\z^4tD`"aE9L
4Smlu+B+
J%G^>/7
yu`Rv!l9;
`'q%gCZf|
?FcMq.>a.7Ob/YkA
.sP)"BwL
&s$-`N
Ay>49T
4<>kW|_Q^F>
tZ[6`L}53_
Wq Ft~
Ai(r&)!=
u%trVjc1
3E,6Q\$7
tT}"<r
=9TW +qA
'(6FB6
N#MT"z4U
U> 6IK
%leb.W
IgXuQ$OiYq
m.'UM;oKnrP]
m%=,_/0:0C
yE~& .
Dj<@DZ#
:J]Rlg{Z
T=]14!@
VkkFT
Hw>95ve
('J%<s
Sk`LbpI./i
IWWUR34~-
M4KHJH
8Hxdtne%
~srH="=g
,+%>Y ^)YS-yz+
IL#s\x k
PDYC3\
T<c-6>L"}g}
8}!9Ea
5)R&+D
&O^8A_
,^_w\+#7I7
j@y%zLI4
iT,qlK
h~53FcX/ZQycp
~|(=z|
6Y-.qW
w4w3dw
(RI{a"j,Wa
*Nrp2#rQ~U
~ZI. ?x
"?RgLFrrMtBk2u
PPSBu%q
"AfT3S
cu=c.7[n
$M?vMe
+d!Y)B
6T7Ig(
jC7;I\
oIV!Zd
<@D5\o/
6bg9Q1z
eZC}_%
Sy5jPAww+
k8^<z4R|PQ
8,AKO,
bhnt7i(}ENj
FON}t j.Vr]
]uZ'{gJ
+X_)xUf
e'9S]xwm:
LU`]i:'
6d:Z`
050ad+
./^0VKAI
cJlc^S:
Oh,>4!
Pg[@[Y7
-A&'\6xG&
P(}%Pw
rY,Pou:)7D9;OS
{E0yLKA^7+
I,}CE|y
>2w79.}8n{/q.
2I/|n
d':%T%m%
r2!AMg
i^Q-KB#
+&0/"7dj
a,I&e7
V)q8h9
<rlJxL
uW^,75"lQcr@u
<$L"_*
,bRl<r]xP6hu#w
3djFy\
j"r9Q)]R5g}*]
<gN"I>]g
2dH!Xt,
zd'3CIeKg
f4oR&E^
f!"M.e0!2lq_%#0/"WE%$A'h.
I>cF?,
QNH/yJF3I
[@W*%6":}
qv;8X)-1gJ(
Zv$Lq$
5P7=CQG}
n6)v -
gj/.]VV'T;G
P>P!*z
&/"21J
1a#0:e:
W6u_G*
iH kjw
2)zjMeei
?hV*Z*
:sNmW
KC`ND^jo
(BA~U/Y/
4;9fLM"KlJ
.C(X-q
.xb``|-
C)KkoG
KA?a-v
|Jza|YP.%aS
LYA8nPOmK1<=
m>x2Bei
#iRi0*
C- 47h8;
$)w:A-^
F]/Up1
\J!_*hn,+cdt!'n
-IgX,~y^
WR{=loU
1>\C7C
eN!'0"n
q|>q+6
L3I#\FI
lK;e>ls]@w9mXe>~QF
i2:IB,:
^ynh*b
?!?P7}
H*'td"V
-_IpV;
QA-WXql
$-E!Q@
awoBr\
Vl<5@@
VJv%$(h&L-7Lc
rS<bx,U
b3DlUF yT~
|L_web`Z
|=Kmxd
srVDoRi5y%X>1p-<x7~>feH
Ni$&IdB/n:
c&"!nOk
"jEmC!
x6DIYK%+
2E"8/"K"d=hx
)X"sD:cY?
FlP-HYJ
 5%Mzb0o
TF!!HKzN'
\.EGRO
IuwJXQ
7g39|v.~G
$1P9uFFSh1w
UWVS|$
t$dD$\
T$L1;\$L
t$t#t$lD$`T$x
D$t#D$hl$x
D$t+D$\$
D$@d$@L$@
9s#D$H
t".)D$H)
T$8L$PL$xf
D$\l$TD$X1|$`
D$`L$D
9s`)L$4|$4
t$4D$H|$t
D$`D$t+D$\D
*BT$t1
l$8f))
D$T&))
T$TD$PT$PL$XL$Tl$\D$\l$X1|$`
9s/D$H
9s;D$H
t$(Nt$(uL$0
T$,|$`
l$$Ml$$uP
)D$H)
$L$ d$
p4$Ft$\tYL$
9l$\w_$
BD$tIt
GPGWHU
XPTPSWXaD$j
ADVAPI32.dll
KERNEL32.DLL
MPR.dll
SHELL32.dll
USER32.dll
WS2_32.dll
RegCloseKey
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
WNetOpenEnumA
ShellExecuteA
EnumWindows
]]*-0S&
!0O h|
|(/.c;yT9'
(p&=y,\?
8\2H##
Y'K .O
%;._f*;_<
:[!>@'T
di07N?
w30{&eY<
"B0.r/
6#=x;$t*
5i%f2i
0 1h.!WNY<O
8T2@/
*nf#H\
1!;Ni'};
`!?,U8
M}G7Ty
zCm8*$6E4
?Lu01>19&#<
;21&B[
/$1$3(
as2P?'u
1A~{2B0
Zp?2C
}a;A)c=g
'%4B>r
C/$.,#y6I
39>' U&{
1E=)0nC0$Ww
"gu=++
w50>Q0{
/eR?;c",<W2
jI,5"'
r!)/1'U&3|5X
N>UE8~0/&X
5@.4623
.{Z=l"=
/N1\l>
3'8Y5LJe
o$^'%-T~X
5&[U(*p<
,E.G2B3)E&a\
D5m1(@N
J,K,S$
$aK%0E?/N+
L/i*4d(\582?
L9{%f@5WY%S
c0n (=k
&8kH96(>Gn
eK:/T+
~."+1vEQL4p>.
|1v&=)N^2
]~L,q,qK4
%%qAX;4G
F/*#w"
~)Xz+}!.
7Z'f!%
!c"VL<7O'
8$).;*)
2@;)Q/
B%'w4th
Sq$n#4[?.
.[4:B5c?
kkr'*=#s8
6V0Em!j
x8Y.gw
Wf,^<Tf
6!i3};>
0'* cZ."NF?
q<+A::
/R;]W97p
L=TH-=
q!%/w*
#!{,U7
zj_-uz
!>Uc_Vz)5Pq
A?o1KA
OH"3*YI2l=
D-?&+.
r/.$7&.
C+${(Cj 5@,A
9a.8<
)ZF7$Q
>d=P?WRj
>)y8"o
8g)1;o(
2:>VFm.
aD?#/PV
;tX/=x
$5L{:j
.m|K:fR
B4Be"iG
|,'1sG
^\;M68(e
@,L%E_
s<0t(
k!7**<T
C[eC"c
s1a2Gq
w#8)t+
bPv<06&(j*
"~&Q0Og
9"?Jw8lv<+
#DN.9*
NrW3q6bs,9P
y:&d99:
s \#Mz
y,'I4'
Hj 73.}
<@e+@y
U+"Uz5-)@
4:QhC8
v7?:.q
|T#3v9'
F#n3/=
~C.-9o),7%
Yh?4$q
w$p4b
)-tw+2u/
>'p-<13$+
$/&Sv,V@n0-
Z1KE!
4?5t<M
EQ<2*q`
[xT?rP
B7+'#.Z
GsR90><n
.g{(A/
(n@'{6
wQ6fa)=
x-5&,'iWM!],X>5|
_?)R7=p7
6y?:*]T
!j /=(
5x/zO)T
4T6OK/N,
R=4k8t
S)'ZK2o
8P$7V5&J
w+$`8GtH;B
.7N \/(
#I'+c,l
.Q1i`{=
3WV2:z
`: `2+
Ez7|!x+>VV
h3D~"}(
Q$%o+R
].92v317
7[/F=`Ip
(q7#F!O#
-#1!4F$]*")
Z:_1#+!U
"+ME8J&
Em%1$#o/
N3(q<3
L-C5Z[
V:?=a $
m28<@>fk3
+'*1EC]0>%4#!
xVL:=M9(
,+.2g}a n+>{
%QcV=T7/r?K
#=w'{
=]m$,(
v0D66t-uh&3+$
A$+x(
1?^'&6l!=oq
fI62<l4&`+0
g'4U1-SI
oZt3$$5Mh
(-%"2)+
H6[kP98Z
>h#?"
6H#{]
|y7I9v
<21/l,
u.J5-,ir/n
c6(;:=3
+V>(=@
Y!D8$6 G$q
$NCY&
b!=_}0ll*x
w;;#m 0
c2.E=sI!f)
6<)2=:)n$w1(=
]X8x`=
i{]%Q=1H
,?:4K:~
/Q:&/+i
x;'/h!Q
2DI(#
9=mv,v*
55\8*~
al.?"!W
L3`x?
\.-#o0
?$?j:;t
&^+~4Hu
*L,SC*
)Xx%7Z;+E08d=dw
wjw/n=1q6
m+g%o2v
b>'Y;:|.Q^
RU>}9,
q5=-|
A>xs3{
uY$m4
3p0V!92H9]
\<1:9t
7!1-="
T(C?XR/)
9z70V=
4uBX\
=:P;y;
56&s!.Cz
6ZA9G68Ef
7k3KC$^-CQ
6 \$m;
LI&pC;x?0+[
x=?I4jF'
|*nZ&i
F)Q?6E<]
=;~{7"3l
5MB8;S;<
\8}S'D
g-N$n,
#u{ Jr-Y
!=K>XW"-
hu$ S'
-j!9_-
A3K(8)`{(I
m':KCW<
Eh38A;
6$E.7".
2L{=}
51 t$cN>
<,Y1A6y
B+d:.n7/
=1l`<-Y6jd
p8pz:Q?
}$%z=]+34
;:!1%0,=j
UU&:v
\2#4oV3+
rS$U8\0Z
"X\|9P
6&%(<F
fJ$e%tG
$Nf)w5
t8HWz5
&8'Ki<*$#
:86sX8~&c
?&@1g5
<,%=O;G<$R
pR+QH00*
k(: .9T;
Xh#:"%=3Y4
,4I5#>
:Xa$r(
6r;At0
G&^;#'
O+10rb
C6td#<*
38K"?E
3"@)Y!
cca8TF>[
#~!1$H7(-
,k73<p-Q@
"t! 4 E1
FO7oh"
.8s3bM
L1<K!u
,4t1o).+;
2x4^d/
0""t1)C5
B:$'|J
rJ6;g<2g
`R ~")S(.A
#0G7f.
'N#0#+
.(I|'6
cK5g|0d57
h2d1wm6x
1M7 3&c
.G5<>y
0tv<v+?m0
>D(vk
\o-0y7z+i(
*j$o9i)
%|:yi>-
dYm`U8BE
77GK/.
o38UY$)
P3S0%u
,>H<lJ
>U9)=JE/
Nf"O%(9bE;o
&A"z8
A27y@'4^(
6?DV#u?*
o,6:4$7a
a$G/3x
=$N\ %u>
$m[<rv
t'9)'t
=tz_4G&f7[
:!c..q]
{u340K
(WX(h4.Z
n/!E3<4G6
4=?:Rx1*J
41A!U'(
!U!bTM0
vr/~7~7
!0J8J@C
e=<"?/\
vI%P4Q
E&V6#{
;B9Zr'K
+S9.N9,
R<*%5?2$
x5#G!d0
f},n:0RE
m[%r\4
w->-J4s@
xl*i1pK
1(+k/2#L
~T_<// ?
(zR;>U
Gr7?y,
d&u.1l
_6-N 71
y$4H>2O
?Xz:+@0
<A2!V1,o
=&F)#\ 8x
#rqr&)"
CrY2@v-5
`6^'5c
88a4E.;22;m
0BJ%3
$J?e*36W,f"7x
u>o67/(G^*k
":6de.l
h>]x.:RR!9}*
&`]83lI
7L7d+"T;
Ud%8~qt6}
}/i7@3
M'q[{6l%
#@26%`_
*K8%<M)tz
Cc,?m>
29'2_5&
*t>R9r^1g
r8X- ]
IT"Z-'
K+m%ZE
y!*y;;@
){PW1(
:wg+p/?d/i
l"K$ |
h%&/G4"
[g;l1c#(Dv
(+zl-?
o^h>J'6Y
u|T6E;
V+{ _'L
$"](jZ1
7(;MmH
CT3rK>)
;[/?Pe
Nu,@8B<
E #:U(k&e4=
q.&sS&
.W\V4d
7\=,,.l?$Z0 +?i
wl$R,*1C
=]*7!$=
-xo2@8
Q0:"=K0+
'<5c W/
5ST0/w
!W$"-P
+be$o
G=Vu>+b
n|$Am?
$^$W*B
CE^a
#Ifg*,692B9
8!W&*Y&
m&U41l!a
0iC,Ey/g
|B.@5S)2Y
lH>!@C
r)w5%=>8=U5
g8-<N"<
.Lp'+4
hO 4 4\<^/3i9(az
T;g2G.@]
!*&.S
)'$;;%
'f4 ,7
8!7d9 7
G.-Y$:0S6u
B*4i(-
(8//>6p%1,h&
pD/,A$R
`@+3g<
S(Ou+J
7-Y+<N
4-eL6}3
a6.^8R
KoY6Zs
m(?.|?
:E>3o/?S
["?9f0sfU
G-ebL;
6dne 0',n
13$ -1
i1<0P(
y?jF"0
(2S-/}
W%%:=
>/Rs*]>
(.:v*Er+
AP"I8T
4q)Q+i
<z'q(P
lC,4R$"Ds6!
1}c$A=Y
`2H8u`,
#G1g-M&
\,;ob>XL
?FK6C~
tB alV
&p"c>'8
i:)>&1
B?_m wp%'
gH+ R0
EZ+n),
}111D*9
&z&5kM2nb!qQ@
d%t,7W"4{
2lG%?v)^?u:
`; P=L
!Vg1#s!
@q|";bY+
7!:0^r$+7b
q!K>2%
+ZB0:q:)a
3 !.6h2
6[-9>0z
3!8<Q
5E}/&t8
G5F=u
u%0m<{6
(nM/$!Z
e10,5?
3"|:2=
h'-Q}T
h0 H<q
9/f/2`
vQ.0)bi0
<;M)9
1%/!3]?
%Zg")j'&{$*o$+@
@$.Lx # .
C\<B,K4'
sy(3*Z
C`+%<.
i;3;$+'d#
VY")n*l
O ^?x'9 2
551)4K
F{$/=7h
"KQ&`+
F-#F OY+
qL971X8
MK09q3
2Ov>l#-
Y"''P+
k*Hl(+Y?
5=)ycv
`2#U:j
m6Z?,5
8390a'
,=B#(eF
j=+/iUs
W#F&<{
.=9jz!f
X:2T5:
:q'\6>O?'F1^
[?$!=lFA(/-D
<S "U
p=895l
&,v$3?s
B&Y.l2O
e&>~vV+v
V5of":
h:2}-b
)|B-M7
"d(.%!A
!4VP&w
t<<q8`\%
8R>7d+
3k/*&S/9p1e?
\Q-0:="
3s,}78
7`1u:g
j.|U,?xP
"l=pM/b/#
%0du:]<v
(7}+hjV>s"p
hk27T1
"X0V.z
O;S)h2_9"5O
Jz&;^
#7q)2I!M#
.++{,;4O$
2$#;,V=%
K3 rA>>,Rw4Ea7B9v;mP7
LC/X"@
,38cs8#8
)Q--=s
=8$!,)+w*Z(nZ
e8J)fA
F:j0W7
J:F:'1p
N6w54:
Ip$T(5
2H0a<DI
=l6!(e
,0_)O\'/~
7!J"o>
MJ"&os#
`j!y>57
U$/aI=Pw<
K8QY#m
u<e,#u`%(
G8pL1s."
p*6)|(?s=
1I4~\&
BfM3{K
>.@%w9t
]p!vd1H!j
i0?}"|
'!qM6zug
YF!c&}
O&,'Tm$
j1oG<-Jp%
a%>9;H
Z("39!$i
#cU3W.MU3
6Q)$;
"x9- UZ
?0$"v)
h9-]}u
-?F*,9#
_h2X ;Xl
/14449A9
7!Z3bw *Y
S:&R>A?v
4ie'~:
*M?4i>_"
3R>).>
3SP=68+.
9'I.Z;C1Z
-~>.A{
0=47h*
tl+ z&s
K2|7=C+:I)J$
P*G!D1
v}&wx+T_453)F?
!q7h~2
N2.,=b$h
,Fk&-|
8mI +69~~1#B
rT9;-YU
fK#%F!ZB5
'f5d8c7*
8X8%Pt
3.7j0z[L
+;vzy8@=l
2q"R>Q
? "7lD4}R
|>-)!,*
2f)o-%
O)z"|#
0#yb"-
)J]7uU%t
U;!I6_
fp$\e0
&_*b#.
B/K*-
e>m;+@>8;d4$
+*tU0~-c,C5Z
. '`5x
$9=Y"(
u!9-&vJ=
5!vw.G
H02SW1YG"l>(2e 9P[0z/3o=
Yj)& h
M=&b~S
u$3f8@
#C:g;;]
E7T?==*ao}'H
r:q#9)c
7%Z\~4
0*!<G$
/"N3kH)r.
fU&186:
OY <'+&K;*
(<i.4![)O
)8np{
m(pe47Q
a2<x::
>7p3u< 759F
Z!+/.
t>I++u
R3O"']f
M1<C=>
,2@1mm$29on
#."(E:
Z[$7l(6
"62%k2Ro
VP5<3&e
ImR(2
1j&n'=%(!
dw+/"
-:t-1y)
T3~ W3
=02/f#*=F[
+h$q=+2-Q:Uf"
J1/'\=a
4'>r$%
%:&O<M
t9m.8V8K]
UU?o|;7X 7-
kw8<M/.
:"Qi*@6
6^./(j>
/A%w=)p/!:D
$w6?i=
zV2t'`
1U<l3
OdX'D0!
1l&dd<
#hv63~"
_*\R2%u~
4l>A!PF
($0m~
R0s%a*
;HY$&#0#
$7+*[*e
$s\>u&Q
O0>;=Ys5
`-qf<k5
N>b:9?4
VrN8#u
4!t(j<&?
u*b2 N
a>%>$$
Q*-(Z5
m)q6f5
,3*_8H
s$3&2"
<wt%W/)3
4t&0[2/q19y
%7 R!(&
Q>m-]E
cX5U9
-;p]>P&h
b2Dh</R9"
}F$E!G
lB#o(P
X;Ljg$C(4l5[
$F!+;u+
kz\:r8
r&dK?m.*0J
Q8{uq:0e3G
Z1L9:)
(5>cN-n@
^"t99t'x(
_2a.}&
b+veF8?M>Pl7/
UJ5:N{"?Gi"`w*
3PZ7q(t
^B&[j?L?0
eu&99i
H7&:d(3
8 U+;
Z+|;]a
M-h6%:'?
-y&;>=
ub#4@i6,NA#/@!J?
-:AY7P
)<'&K2!i$@f
Wf8*&m
c0?B='\88\0G
R70/>%
S5E%+>:8
-tE"xl!<6r&i
4j}3k=i
?n1Bz;v_
],7?q3
4;2D&h*
"%}w%!
U/v4R)X"3
:A@]=N55
8+1y8~)_
u947Yw$@
lAY(#e
+ih9Vf-)
!_#y+~
s:'#d-G
c6^|f W|;(
jJ^!E?
1:+s9i
!<-W3J%9
],,a}>
(3]<.z&R</C(J%Y
6i&hu
Q_:~F=
.Uu=1`+
d\"j?4*-p
!F0J_B54bd1?0P
o'<S>8f5.7tW
^/ZQ-3*
Hf%s%@
0P;Y Z%
_N=,i-
5/(IK5gO
Rd8F;*
=oQ08^:N
<3vY14
h?]!FCy
*6OKu&\
29!/z8z
~#? 4X
R<V`8dC=
mN.G?3Pc;*<)
Wi'#G8:B
I'F<Jl
1%F"<#
69.W"M1
:d"75^;sz2A
Q"K4-c
{2=Y^"
4&S n?Qu#xlk
eY/:[;)~
R42$:&
/ /0W(~v
;^$]0Uv
l@5+bG
y(J8AI
6/3:{+
{7_p&a?
Ol0`DH&
LhH.XX
/_""-q*%
?CS2l'
':$)#&:<.
^S8?I?
w|.0(*P
:6k8[i-
:%19nn!
/|u614!;p/%
]4*>v1"I
p?Y!hD4QZQ"x
]w,,`~
1"/-9h7
30JF&8
$c#2ob"(
(;Q'9+R
#!^:! @
;X? t;'
C1$#*+
)'R>[>ka
n*IP6WO
:!'L=:#)/R
tF65%.
11/,0(O"%
7( 6W7#<
w$:uq$k
[,e-!f
O2e5,2=z&8ZS
h='9nv
-l&}0t
y5(j~]
O}5`,+
1&*M~)
6/'#*4{
)0#r7>
?48%u)V
%;)l(t%
R)7x02
V!=1y`f#
1!+%p'
@D0)I
sU8<1S
7S9+R9e>!M,
j.4C9T
:vM66"
Nu(Yh
12I<6`"P
+3q$uu
A8$-^*
K)q:r$x/
;>;K9t0
5Z=z98k9
EZ9*@()90
X7[\-6<I~*
q."Ws'E*e}
kh;Fk
2cGe:x+
m<CS/k,
,<4 QU<
%de1T
6g%p='l=j"
1.Ft"_I
N?Nt6)
-%!b~?_
vo%[8!*
M.?P] Cw
/EN7&;>{W3S
j^/i$9"q=?
5)(T?1;?
/U-2F:
};h(hX
4]'55.4
%f<=-1
.1&c2_U1zj
->J!m;+|7
3v(x-og
[#K#^
g!(z )K
<pZ3v~
&]q^#Ty
9!6>+l>q*H
5S)4-Y;
Y0FP;>4
D4X$&P
7k><-W
#!3~.!
'o~<5V
89.@?]
<Ct>@v;{"
*,4;mG
v&#7|6BDo
kFW'$c5
'><K\,6[4c
{AO)(_"SE
3E@2h
u)ss\3<2-
1c+70!
R17/r<K%
?QP ^P
~*.`z0
:1Y5&b)
oU"l?-p^
PhE7E2
;>*/4Db
ko:L?a8
El(?Ak0
L;3Sv#Y37=
$d!%4*+
[ \%GR85?
=&QB5x
(]#t$>Af8a
`l/q`:
/.U /8D#N
*bU-c!>
1|=g0
L YU{(h'_
8!``"~hO5o!Ja
:O2l&9$
Y0C<]5Q!X.
AE?V81M+57
)-*-ol:
g4Z"CV>f=m/<$,
&|x<)30
X!M2[_#7
5<2q3y2
3iH=Rd/
<N >^4a
|w29p:
O27z3<?
8>%P2(-,b
uGE$$av
79?<)o*?t4
%'%8$Z`
CG>:K1
E5fst k
&= 0P([B*
s{, W?-
%d>":k"G
1cv4x2
k!TbJ.s
(+0pI
*.;v6s
NY'B!
:i7y v8o4=B9
15.oc2
;y ~M%[<
y=!26h_3Tu>(
;_(9j<?
@<gl.b)
?:\A,%
_:,X80R){
$94JI:
ou0B3%
g"c^U'g#G
!0'7 7(=
iZ2p$<Ff
>1G,p`/
v5V"K23e2>=,
R!g45T
~'{x2}Q
YG6.b1
O0JHg3
o_-(-6
f>l2#m
!&"8b\
T<Gm(Q\6+W
r5S:|<
16Iv:*-W=KI fU1mz
.Y=>dxF
2Q'(/)k
'=e.nj2icT
(1:%{V
710%i$
D5"!>h;
;\0R#:DT
402}--'3)R4
zZ$?8,
=Yyz2Jx
'=b1F<*v"
D0V?y:
C-7xA+.).$
.-c)1BR,C
tML*Sk
c@)fTK
9@&%O()
, U+:3
5I38$.S-mP
k:_E:o%=J<{7G)
U=il(
TA;++ <O95d
r>jM'Tz
%>x-8)em
*yH3w
F./]',8&#QF
Z.5L<04
J7l7UL6U8
b9 zg+,y
;z5i2V64
"*w5+y6
!6+~P4M
^L<aG2U
TF&;&t
=7<u+J
$;$a1$567Y!p}
G!<;rf
');,%Z
dP%sJ7<
cS9^93
WCN(6<{/
G g);0
o,FR!sH8p0
S.hP5AK
}5Nb$`
O:)l+5-
&9y$\
8*A*ED
M:tG:oq
:2x%&*
v7HG/-
mn:^1;-P
%A/K+K
t7w#1t
<(,= x7a<p
4=IEg;j=
R[=50q
2w04"E
/#3'V:A0>
G0~3W(
9#C5v)
D"YS!{+"=,J|d;US
<V4QX'
u$ 2eg3j
[=5$779
4?3`.>
/MC%LH
C;.9t/&'
U$+~2$)
_&%.'+U
e;^)K3B
?:6EP5r@#'+
07E;.J
G#\%A+K
[^9eXi
i$3*a&;(#z
jr2A ?)
0R#]j6,[
"v&e>
|18k; -=Xo
3~P(28%*T
q>:b0Y
6>=4FP
=/@1/&O|5
W"-Q/'
D1XV<y^:
o&.\J<,
H>(#-'<l;
V"%3p=t!>a
Q*))/Z;h
)&Yz#K
*'2.#07
8+',|&q
xI%6<^#"5
S/*!2W
l:D2S+:*
<EN?ag?b
6+;1n
d#8@0kb#V
i-?3:=K
o58<|"?5
_3z*Yf
9?<F'!
-j3 E9
-PZH,U0U
bj$Mu(B
2]+V*z
a7-;#<8EB
cu6*/+K
!V4;h,
L?k*WG
3%,&>c{
/+S-dU
:1_:v W'&
)+N9P?0%#
@1'9/\t$a
2'-[;Kh24_>
A_#+."
K!K(9&ZU'
!{6%)<
K)E7>v2
y4f8dg3sf0p&
=6~+8;
6*T1%%
by*m)[
m(i3K'3*
*xK,+!
|I=K#(:R
<n.a<u7P$l<x
I3o409
V$9u%%y9
5L7t6a
>~*M;F
-7I0!^*#
8OI+'/c<*m
B?=X*cW<
k;t8W3<g,Ee"
)G'66{?o)d P6m5}2i4:
mB&n!,{
A&e<%}*SY
}!x0s)
p;,K+,$(
!$!!ci
16g;bq
n*t191j
',-Y81-.!:%
A1/V91 :
;>+e<h
4Q oL*2
>)1|1;
1&3-vG
."6I{T
#s!.<.
 `5%5f
(7{7i>0
c[0B)[
A%{#_
=F3"90Y
](0V%/eG.)q
R6_'1_
#746_e.
j47H($`M
\1p<Xo#
&y"p&A
r3b!r
mt9tj9
6u0s/36I'd8
(|>?]0
:y>&o<|
Q7(,Y5
5<C*FT4
TE%b=D
9"X9*-
3]5H(h0YS1NJ/5>#
5`.~R:*C
F"u,&27)U
5!+!HoM%#n
j.4;}4
Kl93%
13ec:@(
G*j)!7r
O)kV&Z
(6r:iZ
*1z1e'
3)c&1f
jO2s1L7=i
x":{QL
$U$)=w
8H* =
$bxD<?'l7
)J1Xyk
Z5rx1V
=\C>.+
T I #*8!
1=ue.92n
)#@4,K}
4&L9k3
?^5U*{"
w]'nI>
6o$EI4+
o)aM/0}
*I5~6 "Z
8|2N<Y/u#
C\+s>F8
09"<1Q#
4:d+U?
K;0D<X~ *J1
H:!n2
#P1/P'A
>=V$0}2
-:F.-
34?)MR
W>aJV,|
r6,G,R?Z
-*5=K3@r
d),'<<
q<L`!SY
&,g-B;C9
#R8*jq
S)06(K
U-5=y>{(r
Fu?^0L
k"hy</'`g
K??(|
Ya3LN4!
-2d5J~
=p*$:9s
!/'5p,_q
_&t>9#
c5E,6L5
;/[kB/9/6$
(&5[R^)Z
-04G-)8m>
?S|#OE(
C&sf-x
r8$RB--3<:Z
k5*i"";
J!(#v6/
K%5 %3O0
!7e0*]e
9NH2l2
:/3?/}
J~6uz"
"6Pg?0!
1$'*3?)A
B$#2Z(
ZK>kN7G6)lf1
0.E5iZ-
Y&Vh+<
!?(F%1(T%
B.xs41j+'
_5cn$Nv7[)X
B0"&W
b,+1/+Y:7-
?g%'hF(n{
2y{'#s)5.
,X"#4=
/L%v/A
x/j(3&R{
.T0MoX.;
SJO1.K1f
)ZJm#;,8w
0w2<A4I:o)t(l
/8{f=4
h+E-=*
#%"[\,T#;N
;<52k+x
dY5Q-$/>8[
q>14zJ6D(%
`'}:?,W+
5TB1[/q*9
8s/Je-
g'qV58
f.\F(O
O72nM#G?X
n>03q
w'$07!R
?yC1oT
-} L>3]$
"`9tc4+
&-M:q?
w,:f6H
";*0$C*6/
*\3'L.3;
G 8n;dT
d6.w"k
6(_=2Z
b<B}-|
T8o-Ka>
")Fi`&rb
_ma,n1
2[<=!}
,?)y"4U
`u`,/m
=T'+7z
?[7A
*(9T2%]
`.=x?:&7
Q783&S1!e(
)#2@6U65
G11*!*{
Q_*ILV5c
#g93l/q&
:E,5|,i
nw8=6H4
=x8(#v
;c""8d20z>
A3W0Tz
="hv838 :UT8
/$u3X}
#>Y7P3M:
2o r#j7
Z4c20(
9G2j;*df'b
+I%B>K-"$
E})M?~?3%
0}3w*x
.nTK)I,z+
Z+ji$g_::
"|E$!,V44+
M;T{$4/_
2Am1U0
j'"X;}E:7
X*A[3D
,&i<l09
4?g+UN
-0/D-+'4V
S325v*a jp
:u-8;^Vg
@!%#g'
=2I^0*1
;#R/g;
(.a3?jo
#$"Tp&Y$
$B4C+Q
[4X9->J
r;le5o
e!u>0+u
PR"%;6
$N"y~;V}
a1+<d+$$
m!<O*;
'*<A7S?
Cq*<*/k
<.V 3!<
fn sm 8
5*)>/6T17
K=0c(6EV
jQi(w&
L<p\U?}!R&
Q3 F'i
D-+y v
W*}U0Qo*?
F]q(q<%
{p8vY3
E=~=%
:h(O%2
zkl>?P
VA*!!9
,,#I'>&/
*/Sp&'.,
a{*7T
r!5i/Z:(
f+<#67:3=
(72g=8
?i)%)H5
*n3Q#3j
X-$?9~Z<?G
`.%Ku8b.OA
<8"&h)
$i6;IF&&Y
s-l%L 3
%K86B0
%+)%
t[T>ad;5
|Q.r7[+2u
pQ'<T&y!
C{18>+s
h8~)X' g!&Y-.d;\
j/T).#*0-#*Up
=F/7^62
W!,"I-
=e6B+,Z5
:"?jp-
T3&>hnd
T(`#}
$(18-F
"C4[;~
F"jo)\P6qI9
8"/3>,
V42Y*5
,o(\8-Y
8U2,~wE)AXQ6Q
;r57)Y%
#+*V7~"4
7aM%*Ic4
q|-M7)($S8=$
[|4*e*m!/
@x!%.<P
7Y,2(B^ s
>@3:i;
g?|%nO
!|.#wiN)5
s3"vb3]
*' c#
]4;=L^
vh&Quq
$qrm8{4
`x>9 n2 _
<l4u<}
<PY7YQ
4[!Z4x
=1~;&5
8))bV+
d'f>^g
;C/*2/
[L?^'<f'
{Q:,Tb2B1 j
(/9iD'-
%Hf!/4
u%x+u1
,)u1O1.
y,?1h2
u#l3G%P> _u
Z(1;d*
;"*'-m
r)%]13A/rx-
h_.{.W$4
/S4[5/
!~!0\$%H
K'W[T<6E/N)
)X6O)O
#?1gA}
j*n05vz
=o7n_1
|X);H1e0
=FD+z4
9i6b;d!2
Se2.*x
[o/r?*
P!3Gt$
s4[p"C
2j!E`A
3<iV&d
8?6B4G!3x$kfI*>E>!
$:VZ$
Q;u!)iq)Qp`
/`>/bH_
!7NwM<<91X
90p#Y5
Y(*X
9):_7I
<q$uA&rf+af0
39\-4M
V3c8rx
$4lY>S
? K,S7
[9dDH!
vX6^></+3|
6?y*c".
i_E#f07]
0&#7/
9<II:")=
,S8{2K
zG-wm,
#x'18D 14
b&/X8,0g
#7b&-a
2h(_5x1&m2z
4\>9D;&
m+w[(\
o9\BF
y6.59M
8:;/-#(E)
] @8%!reU.
+=Em)3
Cv:o$mO'
=iW7#`8"${%?
%|7<77
fV&h/*
',Sl)B>
ERZ3Zs
:dy3.$2P,G<
(25O9K%w.
ng4s-2>A
)"Q$:p
3FES>n
`1 =L,
;-:T$ugl
pp)M'7\W
Q"}*4)Y>
] tR(+U9
)R].o$v
W)Cg&$
3Z@8a-
mh?hz7[b
<g!e5e
W_55;]*T
9G=3|!V
7wZ:}K%
v6RY+q0p
hz<_*":
=*9/=b-j
,2d/['z"
<bO?s<
F,\l,yQ
V_$a%+A7%!t
Z2CXC:\
f"-c~&!$,!
=[<f;ED
!8B'ge
66/{h#v(=)1
9\#Kb 3
P1w4d
1'U'<7
C<2u1R
D1 #7|A&O2
"V._)1*o
u&;2U>=V
l%V^-;&
{.h^0$k
-&4,-M.r,1%v l
[&(s .v7aT?^#CI.
E"SZ"*8
On)6txC
.&m B-6T0e
kb?G0443d
k;11sS$
0I6'(j
sK(TJ&
QO1/-/"
%Q>A)}5p
L']*4l
s)'8P
D3/Q&40%}
yZ-X]2
Go>%o.#)=8M!{0'D
8 m"B<K
+7"4@V4;s>Z{6X
K%df=IS"
/<&=[U
*8e'>*
1y/*4%'W"?,T
:$5jv,09
H1G@&xH)
":`21p
:.a'60
$>TY.U7
I#|kc;5
4Jg+?9W
28O9(g
\G4uKq
sH,@H=
vR-d<Bo
7KI<!7Q4
i:sj8,
S*3*'IV2
i9j<P,w]%(
nG7(Rg
>4gI!0
5,I1"8
a:Mv32p}:9,58
%(k"D^-
OZK/08
&5S<f%L4C
JS{'B
d;Ie2|z
0-k-x(
(<P{?U1n.
.-n]1Y'
`'j&?'n$9+xq
GBj2 &
6*{5/6:
]2'FD&S
1;q5s6`
652|z4
%z!/"$
,?:4{*?9=J
&7oG/F
y5!1Q]
P01 Qx
C.H$+%>:%S
;x%By")
!tL<#j=;[H(f
-88{'GC
<77e?L
t/)"[7W~
)I<=9i:x\&ex
sr)x3T
-P//4;"*
|*&q^W5Dv
8~']<X4X#<09
l0*t]=
)$8z.O
v<6b]X
M7Hq;!
$t231/
1a"'LX
&b2+LM
K&U08`
E#C,h=
E31u>'"
,33Z2Z10:m
;Iw2.>7
d!]&s.
p9_'d6
n1D*u/
X$&l<}3H6}
>b4L-2
Zhs'm0
''d55dV|
(1F'l&7
=*9n_?
ejR=`3(
j?K&49ie
0#gM%d>k"
/7P',>
j<EH$(
/5:w>0
lS#a[",
`~ ?h:v4
G1~*70<r
O#+Nv!
'4Q)uha7\
YO* W3
3|3##$
=D!.:a(v
'+@4>BB&c
G)0}99
W~:W)f(
n#J*"=
(> _$=;
"KL9~4
f#j3ec7R@
2-%P%"$t=pv61
5s';#(h>
l/;9g)?
`4l>~G7Ud9
U}9N>>,1
| 3/C@:!
P(1$bd6
*D;(-j
)$3,%>E;(~
^%#;_(63D
Z4{s5b
.GGL;89.cw
3%`8mb
L4}$5I
2xpV$2
31y#:#Q
: 53;6f>
,O# A;`#q
U{%1$"h
0+|!VN0:v
0;/;'S,
ol(ce!_$F+
P8y46^7
-Z0$HE
"'@)S:
'r68t'I
>E8f2+W
&& g:!(
'=5!>Z;
w:]",G;2E;1T
_7hH!(51*Q7
DQL"/{2
~-7q+7
33J-Y<r
.U46f4
l'Q>%zo
; $}O!8.t3_?
6Cm7@#
i?'\S*4>
K{b'*:Ewr
'Qr:;=:K)SD
p/y3,I$
:WkX)j
,*7IJ%0g
f1w&>w(
d*7i/:
w#6|)QW
]!(&Y"j"
h{1n!q
N8-'(K4
Ob<+l.59B
A65_%J72V
7Ys20J9#
PsT,!>r
Y'DP!;
j!6JW)X
oz%>a<
_#vu"%)_ %
c-!4y4E=]
LV=CN-W1+,
4+%77*I?v
O5m&^q;
#kv1N#f
X72E$!2
d_>cT6
?W2i[0
:&6=47p
v!6j4&>,a?L
Y<NGs
9f $UP
s/!'&C
uU7<>b
/`>>O37C"
6y}#\}&?
oOS?,a
# M+A&L+:
PX`'=903
'S!&$
\?t0&KP
w0I6B8q@0
s=8/<>nQ%
v0GK*0v*
_s+x(/.!`
5.j:w}5Th&
d3/h)*
?`\@"z><~d%
#O.?#!3x
jL0E2u$E&:5<"1-9
\-U_%Md!oo+X
Fq<L?!*
<u:x>,=)_%
O1^j?C
B&ZC$3
b:y?D7
v1o6>aj-RI
/f&59k&<"7)
c/>*j<
[I&TWV
(p=e9C<E
[!:T]%
QR! .<7
R5'81p
];D%_
T!a*d\
0 z-%
5^P:L
t2GV;+
]"75z'\/O
5h\,A^&
!=H0Eu
$Q@-M].4<
*r"%3j
<aS2@,1mQ
mK7P"t81&T
k)8^H#.
V:D58s
!KN=/e2
/9F;~%E
)f-[r2t;
>gU%6
<|/2x
:M<*Jz"
-t-TR=
by8L^-X(4!5%[
z_3q-. / /
R<7:Y-
6Fp2O#3SR
a4_j|*
o2u::6
.#Rh3Z]=
H#)l;tS76?<f.6g%*
A#3!GNJ$
5#g=3e+
@\6S9J;j#T
q=d3&I:8 *
y7]^#,6W7
95q!>l
~'$$ Rk
X=.3N\
["~/p2
01! :X-
4+'3'p
!&U:ui:54
u"`5#+
+k;'W"im*Lf
Aj?-(B
3|>^05U3
R&.F=;[
?=* kK
f]9"+ X5{&"
4IZ`36
>gW'(4
;cU!,051b
A&QMY*:g
;R]/v9"2
31,u+6
Xy)UC.l,#O(Y
*&3~L1
p/(by-}Z.
_,Y4@$
AN+7#4#&
'<4^-O7[
.#-%;/6o
CJ<jP7mCe
;O&,<2>-/
*Zwt=e
:)A%+%k
t9,L:'wB
g#;:{W
*T1-=b
:tS.p:|<
lO#a.x
j<O ph
){i2D5'
=*&B!8
!qsy4`
#X7$/}
9A8JR\-
\8&!"
'Jp-(c=o
/af,$%q2)C
*7+=cX
9~(IlG8|
(m/0#58V
U |2`A8gYi0w
!!GQ|+jQ'12(
({(g(d
C<t2p`
E$nv=q
/.9FF^6v
Oj-82<
?*E=?y|'-K+$J
; 57-w-V#&
5$Z,B'm
;%9<4Q4
32u%0i?.
@2k6W?
|=j0GRj-09;,W
zJ3<$'=
8k)[4c;
{1.QHh"$
'\+TT2|s
p2M,5`
~,P!7F<Un>DcS
?$C9,9+
/#14u>T
1;8($6k!-8
3(N/>oW0!
&S.*.4$
%D(-MU
V=<I8;
x7fQl7Y[
,_C=K%.^)
<50m4J
s=7u'j%GS
>|6'~;/4
,17&d<
cw&A/8
]3_q
XF./J0u
'q9`>}[4
tZ(Pee'_
@:n TA
'h}=!+\6;IM
-3A&$-L
~,!K6F
2N>R9p=I
*E!76?t
sV&_p(L
;(G,;\
P>L"=a
>t6&x1
{%#=&.
8t,:1
A7R~$wZ
]tT7?+9e
-U7+DD%6*`]'
**;"XK
1oe>PJ9f"
e0=a->%
-D';*0']|:
}2Ca0*k6
0W%a~<^08
m#t>k6r/
%{l/0h!)g
iI1a.Ww
a9]/8;c*5
S?.t9+p7 1y
=,!30nc885+
QC9Xv.u'-s>J
?, u0q@.>pa
]M4F:?9
Q&~t&O2
:`=/?,*v
/9H.16I2D
*o8#:w=
-3@(XP
;i 4HKS%&-
8) m<T9a9
v+&}#)p
"GV2R97
%%n(t=
W=64#~
<h%`?6i
|9<w2:c
x;<9g1=
%:=({$/
Cf9nh&["
Fw9&QX
pF3F/,Jx
`8l{7v:
4w*qi~.Vr
o2&2w.URI*
b4 MW@2
V05-LL
Z>%+ZR;
7y$ a*m
S%k/Q7
bD;7|)
.!,c!d
<#*=l#
q2-TA?
hS_",A
$?p8<~42{>dh69@{
y2y2XZ~)
,>v0-i#?
#*%6-e|
[:Jmq?
B*9+P6>
"'80>&D
fl67:6
73$e&0
8 Q3+B%.t%n"
8kd/>*]
j%R wJ*
('8j5~6]?+
%"/:R2*8
h%);=a%
90v7-
?<0bY4oD
34=5u?
9Y:H;FI
I=y{4Pz
$6X_$-n!`="#-
\&_`7 +1!
m:x?v=L
1*<M#Zl
AJY r>6BW4E
<H%I'0=6
GY\48I8
($+?7
dzT5O+
1Q;>GY8Q&
9|:p+w
&',I(~0v
g$5++m$
Z9m*Uw
7*N(l8
_1](2t,+&6
q?#Pr
.a(5H_
6Z9-e>L))m
6"g3'82
oH#gZ7d5[r+
#R,hv0=w%
,?*K5Q
pZ?Q1>
v?5]7Fk*+]
3lW&;)|1
>?:j0q
C:!9`S*
8JT}<\
(&%V3#
# Mj%b5
vw8tD(
N?0-!$79)^
,cKW&-Y!
%T41z_
x!p`#w
+=27A,#.>
"`b0}v
tv4_"J
zK"\+Ym6tf
Z!$l'\;^{T+#=9lf
tC+mo
MT,G>)3
u9;O>qp<A
"O4{#K-f?
&1IOl->
+P#?e0
0+ W>_
v3h7jY
1j' 1a%d
8nC-e
>,H2[%
!"T>=)+
v{{!.>`
+4]<k1zs
<l}"Y^.N
$<J6Y85
3l7 %/
9M$u24q5_
K56ao
`R am
; 8&$!L"B
i+t.?&E*
v(c#e->E
A)8]'(G],
[}=A:8c-
U,z`>/&j&
,N3)>&x#=
2nsd2q$/
]]%>Q<
#=}8"F"
039,$0
z 8? ~
Ov+YL3
N<e1bS%Ua4
84 99|$u
!r4&\;$&
%%""4'
oB8)#b
PW+Y'3I+
p#;9)7Z-7
@f%9=t).;p
Cxa'^y"
/[.U$a
-fp:3KD
g*OZ,i4*
xc?0,*8&
>{b=dl
]X3nP;
T2G^J2
(<h6/>
79?X<s
/ Ni5/['
l'e?c
Tk(![%b{
-K=t }
M'\!T
AI$ =_
>*[*K;M
J73G0\
G_,!Z*k[
Sz'U'IX
'gg/$h
3s(+9Z
ggp3Pq
-/i::7s
:h8n-B
}4!vr0
=4<S)%
<4{'2_!,G
9(/q( >
'c+1$"~/.=1DJ
>k+Q5#~
!D~ 45,
529?Y:bI
4M)Yl$'
\6*=0L/<M
u2%K91
$@#A)%2V
6CZ%&#!
T("+(E
f56.K
p69dN6k
<S$*:w=~|':
}#{g96
wRO8,
.xmY91T,
"+p ":D
u5L>8K._
3lc<9!
5=[$.0?
OYC60H4 )
*NE//(E$av!v(|
('J"Q#vx-
Y&0 7q
9X$ ="N
&C"!-q4b&
0j*\K*,o%%5
-F*2.$|#3#J8{7
o0`e94I=@
Uk?(;%\
$'i8..
?#^75+5
L,1Ga<.5
8c*mj/M
k/K!d"
q"1!L,
48W8x.
0$)/o1>/
W1jZ*w
|$g6U"
ts6Q/o
?:c*<$
X6c)~V$
#54.=q
_0X>)YK
\`4#8!u3
K$(P!)0$27Q.Za$J
@@-6apu0
II:*,<S
69Gbj,
!($<"7
P4/=>LZ4k
,Fd44
DI9]R48
5,m+,1
R!57D>Q(vi9-
*6?85o0
P34."1
&U*t(?
yU*?6%
C-2+C-;$
g>L~,d
+3'k59L#
+0<=[h<A"cB8?
,.({c6qh
52464,=i&
e@#]+!
5z35#:
?*~,Y
-1Os3N\8
Az;/;D6\
._h-4_#
6&O1!(2
'+l)V
%sn<P-<
Z{K=aB
$KF7$rm"/-
(0x S(
<v7taO3'
9cDR5BF
d3/+%8
0S?E:m
G}1.g6
6J*2E?<
.wV!j
^:x*x6pR f
&X%^:611
$TU|-V
n3s'|_2x
,**O=h
1/)/!I-D
.?$m2F
6z0)/~8
N0Up+Vj
|-Y?'x"
,~3%l&P;
0#y1Q.
1*8M,'Oc+'Bs
$I%'("
;.'G(!I >!a
n[2{|00~
i+8H,1g:"_
;j^*]
5H1=J
1f!*;;"3W
(y.TJ8g"
2;?'<?J(NM
J*&.$-V
H;Yo#,&
Kh?.!.#w
[[=rG3)
+E,V$Zr
m\ c&+<D,.4
27<,1eL%6*%jY
R( 1C9 Zg
&j[o?Q|9'
:n*7n8
s*/ct=&&
*Jt0yy
"L-R>N3--
M;%u/
H`}&OF8c
^:/10'[$6Ky!$U
)7 =@y
/a@ =#
* 4'oC!2I2U10
,m++Y?4
T43n-b({
'N6Fk7c!l$U89
</8PIu
2Fa)_D5X>
z1e0kT
E hi/ /%)y
ZM"&Ci4oi63
uJ'X#;
K;^c6y
9S3A*S2T
0Zi1{P
/LL7Gh
a><nU0WJR6E,
w<d47Jr
.5kt>8
G5-1];n5
Y4Fy&*-7{"~s$
3I636>!j
3%zc)T)
(wL6L6"pB
8@&:#9
vWG"UT6%b^
-.V\=!|
&8a)?a
W(!u3b
b-\6o-:$k&"h
3%P\ iJ
**o.2;k7.?7<
3"t 'T
X#/]&,
'"6$cy[
{))CU"<
T/$G s
ID0:SdT#(2/-)&W`
81')=K
r<]A5j
S,<G'h-
O)B4!#vT
T3:9b*
Ro8</F
&3 !^.
p*Mi"G+h!P
AC3sb&ZA.
iY1.>mM9r
k$[=a4K
S4D1o!R47a7
:q#%{@;@b%
eg 9fL#
;(,0g)L)wF
."V!(:
T2$Q p
D[D&,2xF
.5w/U/
j<{:vQA
j$.Xl&?#&
r4z)!,X:
V$9O+4@
6#w>le
d<Y\d:
=!Gj0\
VXl-3(@,
/AZ:'l
+cw9&z6
}67 ;
M9c[.+\l
;i9ZV#
Gk|!8(?
B11\s4Jt&IV3 <-
d41e`/$
4;C:QG
,3st>RI
:'-P=<|
1]$lxr
,-;2be!O
o"X3E(
5D \2V
24LC3yn
D/ll<?
;_,^K>
Y/%;<r
3#=m;3-I
t>&782L
[A3&Z"9
S!8(&'
+!.O-WN#
{3?di-*Tx3L
eY$fL:[0{5GlR
1B<,k(="j)>,?<?4<
"G(.>pt{
Fy/9F2
!jR0:d
O\9Z:UY*2s>Q*zC/
S2*W*q5>d(}$K
0:o$2f>u
Lu*C'S{
_)@4dC
8+E{32t~$#B2
/'uP5^v +/
U#Ih>Zp
0+%4<4
M}+i!>`
`Q.!1u
"/b,-R#
#,s* F+
R,7# ]q7
f7]=9!)5
705" 88
Y+zP0U5!!Y
V#22l"y
1_'B+
8`F"-2
uPrGY
*P<)Hz
C#i!K/Y
.6r8SYp0o
te1a\,/P
f@F$90Eq
LG*a'n
B,i*]?
!k$d?2k2!
*%J#'W#
d!!=k9
l1%!5wT
<44-?:
6=h(N[
5>y`k
h?)Q;(H/F(L@
)B5e&'w
$[7:0=M Em
/9j6rA1K
U&*=7+aEp
3ZP*C16x
%<,S,.
57)Ok.Gol/
(Zu5[4Q
0L-{t4j
,,0"3:
T8%~;"NH9X
r]*Qm5K$V
`-0Uc,l3\Fl-
qjF+|,)6~
at"7/Pq(u
N#Ws"#:-.)(
}z0M%YI*
n(120%<!)@ \f
mc0@F<
b"(6',
1fvy?I
v.>s8<H
0o+)SJ!3<H
8xa?"0
$p/Rjl$wb&>
|[;x$,
p nl2{w
"*&b305Db>
/<&&AG
~05DH5U
.l!/ob02w'-$~;9
b!?i=4
VF"!2=
X$%!0&
L>o5O$$(
?PVH4C[}%'
G/f);t'^\a
u+%x7$7
e()ci1Q
j*K"X<z
-6-Wb3
8,A];+->0&'
RC&1R*?(^,dr1']
Fs6Q7V<%Fe
4v<R/]
?43C2J?
!)y&<O
U_.9D
6!"d(X~
G/A^7Y
.#f3'8
P8CLH\/
Z1m2;E_
rc%'7.}?#6
:76g>L5f
S6lA:E
?,~ :['
/6h(*K4
Grj/(j
Pn ?$crN
%tk:{t3@M8
1{Q5^;
(W3f4$
\?e//RD"Q!n
?Ta$F&
k!q)h,l-l
#<*c't$|f
E5Jlg
=J=UM:
{{4_on
V@4?+U
KW9OM=2u
'b 9f*H: #2
l:27H*OA)
Ls+-um
&b2ag"@
SNp23?U
#.Z 1Q&'{:)$y7rPY0
+"85A-
8"I8*+j
)mk/Z^ s
B92)u'">
x7t<"C9k
g{=v%l/7(n29k*468
[x, ;7=(
,I<iW3A
%/jb8;
]W;p7"5
&>v65?
T;9<3D
s<XH3=5xa0
]?:!x'N,
'Ym( bh
"M-2J4
, -!$c
:A5/t%
:-?*"m
.702C.
I'A)<j/[c4#
/)ZKD)
XM1Gt#Jw=i`
<nNh0k@h,
)h?)cTi
R4s$%;R
:H,q7+`
,@*?/=/1c,
4X}7,
Eg.V:a
1F8ME
Tt#;M(k/N
1KgI&t&B;'}*
)u:H&r
46P#s^
r*:}3,
w'E.<=
5{.#[*
!>sd(Qc0
&:0U-|D_
?h*FF%
w9q`)b'
"Q5!J0
fS#4'3'7x)C
Kxn .K%)r
kb*|k8I9
c6;A<ir
{]^+G6
Bp[._n+>D
*cS,-s<c,j+,3
d),B4p447
o-;&xL
}+`6*8$l/}b2
O/*9_35
c!uQ3z
@0+/'&V
.co-68
d-N9%%
IM"fv 7
'mB%*;"
#<+7+j
Re,+x`
FT=$ J
)#'#B(|n4
ltJ45\
@,]j*u<q1
P:a>'9`@
I!b+'<)5/
8?;-D
*$8OP=X
Y{0}*A
%="0oS#~E&yR
SCT9rh)
9@nI6a
$8O=avg
5.{ fU
07-;+`:LS>
8d$*7Z)62
|6{E8%
bs/|73e
x13Ny'[
)"c -]
@i&u9=>
0'h8.'5]
t49*<*
*)7!:|8n 2
u-X$7?q
64=-gb
Aj"V.s+
<47#M5>>+_,2
'y57)!P~7
m8,mD~"@
o=d5Ba_6Y&St:&J*K>
%y+g*
e3v$:U
-?/+t#/V
h}H(P;p@
"}B.};
=_3b"A8$p>->NZ$
y6^'K*9
Pc C?to7(%
B$"5"%LF
?u/ }1<!k- Hw
6%s&#+:8I]^&9e
Gzj:r~
D0(Q7i$9!
b)Wv.e
?J=[0
i`!{=1R:=O't0
S0n|y+C
H)/ >+6v!Q9v
z ]h=h69:G/
w9UV?5%t?2
^#iw0+
x'y-1 3=
@*<46*
mv$d0o
$i)A<9^~9_
4aK838
yL=@]x
G2(8;'I
^>2G+I+
;;<}67$
8#4=Ow
j,.p+fF
p!!+Ua
9-'Y,6
(l8QY(<
>!;-L-
xt:{r?
qV."j$
?D`^:s+H//
#`S;g
1 c2/`
84~Hz)
u&2*#2#
P-$A&X
C5#Z:a
B~5m6@
G|*:]&
R9;o[
z4r>(F9;'
W^<0L g<c
U>n66
EX3,P2wn9Rm
^0e'/9p%
7~e_2?70_3q
_C-u1P
<Ng<\.oN
>4s&_9
&HNp!i74
$i0V5r
L8b+,r+
++^';@$:t6mZ?s3E
)M'@;9'
-*sf4S8
8+W"Lo
1>6fS;
Ir%x~b4
]5>p)j
w/=,=5=
!j0!5c!D
14qd#b
UK6q+9
O,s8`S
b-YG+
nj Bm4uE
Nx8<G+
-(? @L>R<
3Kc/*@k67,5.9m
6E!)D
**^UM#
%-(eL#i-F
>x3:Z%T7
p3U ]t"J
QT$ +F
/{["#W5#5
,<`6:7
K=~#@3l4@R
97!{)`5i
\6#yQ' 5{
P%B$Lom
EH7!>"
H:@: 3K
%2xF:Cj
O.G5)k
sH,.V=
Y+Sn5b
W!N(N.+g
z3N`46$
=TG<?5
'T,7w
C0QF!h
lP;z:b
r F8Y+!d
?C<D4a
AI+4p<Ye
3V$))P
r[6n0y.@V
B8;4`/
EvZ-B2?
<r!6u+8
S]2rYx%a
(my=LD
n=cZ:*],G
(Z X46p
1y>?&(
R:C(}E x
' q#a.h`0+"
|H95]b
?5E|7v
2/4A}c
9X'%>T{

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.