1.2
低危

21c4c41979df92652eb5dfd7794ecfc4a02b0f0f49cb451976d239ffcdc75d80

21c4c41979df92652eb5dfd7794ecfc4a02b0f0f49cb451976d239ffcdc75d80.exe

分析耗时

194s

最近分析

366天前

文件大小

132.2KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR DELF
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.81
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200625 18.4.3895.0
Baidu Win32.Trojan.Delf.j 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_60% (W) 20190702 1.0
Kingsoft None 20200626 2013.8.14.323
McAfee Artemis!5552EB837BC1 20200625 6.0.6.653
Tencent Malware.Win32.Gencirc.10b07aad 20200626 1.0.0.1
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (6 个事件)
section {'name': 'CODE', 'virtual_address': '0x00001000', 'virtual_size': '0x0000a000', 'size_of_data': '0x00005600', 'entropy': 7.992235378339067} entropy 7.992235378339067 description 发现高熵的节
section {'name': 'DATA', 'virtual_address': '0x0000b000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000200', 'entropy': 7.537443661508319} entropy 7.537443661508319 description 发现高熵的节
section {'name': '.idata', 'virtual_address': '0x0000e000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000600', 'entropy': 7.871666928051274} entropy 7.871666928051274 description 发现高熵的节
section {'name': '.rdata', 'virtual_address': '0x00010000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000200', 'entropy': 7.582096724860129} entropy 7.582096724860129 description 发现高熵的节
section {'name': '', 'virtual_address': '0x00013000', 'virtual_size': '0x00003000', 'size_of_data': '0x00002400', 'entropy': 7.596943615976609} entropy 7.596943615976609 description 发现高熵的节
entropy 0.9705882352941176 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 59 个反病毒引擎识别为恶意 (50 out of 59 个事件)
ALYac Generic.Malware.Sdld.C44D850D
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Generic.Malware.Sdld.C44D850D
AhnLab-V3 Backdoor/Win32.Delf.R257860
Antiy-AVL Trojan[Backdoor]/Win32.Delf
Arcabit Generic.Malware.Sdld.C44D850D
Avast Win32:Malware-gen
Avira TR/Dropper.Gen
Baidu Win32.Trojan.Delf.j
BitDefender Generic.Malware.Sdld.C44D850D
BitDefenderTheta AI:Packer.1C5CFB1921
Comodo Backdoor.Win32.Delf.ste@4wua2l
CrowdStrike win/malicious_confidence_60% (W)
Cybereason malicious.37bc10
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/Delfloader.B.gen!Eldorado
DrWeb Trojan.Siggen3.61286
ESET-NOD32 a variant of Win32/LunaStorm.D
Emsisoft Generic.Malware.Sdld.C44D850D (B)
Endgame malicious (high confidence)
F-Prot W32/Delfloader.B.gen!Eldorado
F-Secure Trojan.TR/Dropper.Gen
FireEye Generic.mg.5552eb837bc10874
Fortinet W32/Delf.CST!tr
GData Generic.Malware.Sdld.C44D850D
Ikarus Worm.Win32.Lunastorm
Invincea heuristic
Jiangmin Backdoor.Delf.hzu
K7AntiVirus Trojan ( 000010291 )
K7GW Trojan ( 000010291 )
Kaspersky Backdoor.Win32.Delf.cst
MAX malware (ai score=83)
Malwarebytes Trojan.Delf
McAfee Artemis!5552EB837BC1
MicroWorld-eScan Generic.Malware.Sdld.C44D850D
Microsoft Worm:Win32/Mydoom.PB!MTB
NANO-Antivirus Trojan.Win32.Delf.fnpcbp
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM18.1.269C.Malware.Gen
Rising Backdoor.Delf!1.64C1 (RDMK:cmRtazqaALC9BQ6BQIxhGBAO8Kpz)
Sangfor Malware
SentinelOne DFI - Suspicious PE
Sophos Troj/Agent-BBLI
Symantec Trojan.Gen.MBT
Tencent Malware.Win32.Gencirc.10b07aad
TotalDefense Win32/Bosbot!generic
Trapmine malicious.moderate.ml.score
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1992-06-20 06:22:17

PE Imphash

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
CODE 0x00001000 0x0000a000 0x00005600 7.992235378339067
DATA 0x0000b000 0x00001000 0x00000200 7.537443661508319
BSS 0x0000c000 0x00002000 0x00000000 0.0
.idata 0x0000e000 0x00001000 0x00000600 7.871666928051274
.tls 0x0000f000 0x00001000 0x00000000 0.0
.rdata 0x00010000 0x00002000 0x00000200 7.582096724860129
.rsrc 0x00012000 0x00001000 0x00000400 6.753357619284395
0x00013000 0x00003000 0x00002400 7.596943615976609

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000150be 0x000002e8 LANG_ENGLISH SUBLANG_ENGLISH_PHILIPPINES None
RT_RCDATA 0x00012448 0x000000a8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00012448 0x000000a8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x000150aa 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_PHILIPPINES None

Imports

Library kernel32.dll:
0x414c2e GetModuleHandleA
Library user32.dll:
0x414c36 MessageBoxA

L!This program must be run under Win32
.idata
.rdata
8\plJ
{{~nZc
9HGuX+r)"
xT{5-l;^`
y.%mtB)DHV
5)VBdY
t;jj+iOi%
nj`.J[D
,"V:&Q>|KE`
nST(>v
!*QqM5#
]Wi[m.0P
PJ8Sn;La.v
3pyG(Tv;L=dxjp
rdK'p pQ
">nPccB
W?qK{_|
F<[Qg%
VTOoU}
r'a%=xF;
Nzv@UG~
/(>)Xod?T
/G@1w!K]@
Z{CDkZ$
37; WpA
&T;$c^_v>Bq
OdtG=yK
@w7ON2~7{
c&N1%4
B(N&U(gO.Q
xYb4~6Ys
1P\1S
sc~%Pa=A|94
G)Ek|u'8^/
YY &p!`e
;~c!,?y3_
%"L]GS[B
T n.AT
X\IkRl
Ko0X]ZH>K
$.a1X_w4'k.
:OgKcfp
@~3?rP+l/eE,
QZ_c}Wid@
<4fKN@h
;:.i%<FS
tv{%7/7vz
A/b'P<a:[AOL)>>0
(~)<.u
-%\UU8)
@'!Rfi
SiOIg'
RzP=\ ?o/T~P
w#6IBV^3f_
"(]x-@@P).,
4v&@m6IQ#
\mvD8+
:W~/>H,
`YJ"td3
3@'@{KFe:'Y#q_Q
^T"_z*
V#Sd:?rc
b{kZK<
NPcBsP
70eJ5X~{O-4J
$e([47t$
] >g2j
_p's;4*iG?mJNX
Td2Y9TN:v
z:lxXq
xj3eJ<IJ
9C_/W4m?+M<V"zJ
76(SY:
AG%%sO|;dm
$)8heVA
\dmY&0
NiG0[\s
]*}6K>j`g
^0t$DB;`6>l?-v%E$N U-tf
y-"'Z:
O,W6C'hF3|
{s5k){
)dh2]+
D .b[1fV
3>|X`NZdQF;?%>cWh,.9
}"P38*fO
ZeY,7JB
vt;vwHT
l (_\CV?
Xt%W,p
aHAkf,#
* !s2`WUmR
6j|f[gk)h
$G{!6y}g
b"7S#NaLr
Lv$9^
9.u2; zZS
_rtNCfa
$brI~u@2(q}')H
ZDFenI
`mZRj;
Bz:%E}
7n}@49
p,6Tl6eje
U2KWD^4
V!grHg
$`t|F6z:
: %kh<F}WAcTvcQg
0HiA<k`<rdp}G!j
p,.-ZE]
a3<_bw]&
qH\zn!x
*Mj=gK$U?/[j)
dKLot>GP_K9I2V
>H#T^=V9?ki
PbPhX
Cs" uuQ6+$K`t
gDvM\~
.MM[RMRG[~i;g
qUsVPEd/
r;zfk"Ye
K~#$18-q
M12;-
0)}P"N'T*NR-
$-vog|
,5Gvd#
8d`bl)!
!5{y9/-b
UCbPK1>bx
r2fh1q
FEg[8<#
~KW7%e19IN
^@|?7u!
H9IQl_N4
7s:R7NL,KS
,&Y '`E
$7lp5G9
aWJfJwp
_-yJ5tw
p'L*qpQ
6,K@|[l6Y
K]^|7R0=
l\fS6QIjdnr0!qQqHSW
K%LycGu
RK^f@{
TW7fKD
@]Z"-?
4gu[3u[vT$~
n:{gNMh
)W+M S
5'U.+_:k
.5?/ BA=.2M
3-+:cv[[M
f~@07i%v
S,dxnQJ
:\,P@Ccst
KQ-wzN#}vC
JmsxP1MX"b%
%iSmOU
vfuUt}^
+wtp(f]
pM@=p)&
~S1%%aQdV
)vbM,D
F;gB7}jy|T
MfybNS)i[H<+w
Dov)XE
4Od4,`[oc]b
TU#,-Z
]NO|j&
$Tjms_'h=4
'BTzL&].
l.5yX}VzpJeg
,ndn{%
IeE-Ibfe
D"=XCvbf4>m/x7}y8>
< fX1?k=79q
BMA^{LRG
N }~l;
],PfO_:c
qhM}`\
Y5q:+=
kB`k+}e
Thn"WN
E o`J$.
$pAOFtG
0Cp{@GW
#sVh"3'aq
(y?+r}d8$2
QriL~@
r#oE:SI%y(g@{
_s]7[G
v4f.XO
K`!A%
rz2L1!(E
r!Qp]iIx
fu.,[%RShFp66
#G/#W
4|f8\|5T?>b$X8
qDRcJ&DV
1C4 O;[K@
gWS=O.dctf+
\K#H#n veo
dJH5vY}&85%V
W~3 L'7G@(t
[NWaeK
#M8>hyt)[5
Q4kco!fOMta
<5BpDh=
b:rKi)6DZ,_+
3sNZ2@,a}S
xNqz1eF!BG
QlQX-Ee
d^X[
;g|I[V
=->X%J
/)|*qI8
*o@0nt
4#_NIP
(R;Lx
NZJ8qLU
9(0L,?3
'9Yt;W|LW
QqX9.8Q
{g#y9a:
;oGP1'-U:6gnpL:
t#/4Qw3
& 6HycW
nM'e7A
)jdhiIYo&
|3ih#^
@D}`;i-
o.6QpQmPE% cZlZu
70o/7B
<D?](UwtcrU "
{F8V/dVED'*
><Bck9
o4ju~vkK|
lwK'15|Wx
Ep4x8L _p
?F}OG_=
G!FK8=
a0I$@7oY_yiKM
op.TNL$/*/'b>f
s!$m!9P[`
{1.UM;
sAm-qLa6
=`|mgl
W,,RoI
x*Qx/4
^zCo;X
E%yU|r
_VC dy.8HH]
%d$pZ
HSW59CB
:,kC1?5A4m}
SH=N- , l
`$,">:
[!%!;+]z~
I_G{qf
?fCQgn@,9;d=
,/z/buX
}C)P')
FAc$t{)0Y{"(i
uLD|obeV
{|b]"d
|%-g2H
UC,[<qal
Y?d*||B
4\;;2$"
2[4zu;O2|
WDbj\u@\ib[t
*^vIs4}%N$
DKUdj*6
..<NRi
P&-'_z
ItN=\s
|?xCBP
H\gd96
'yaJEO"AAN
)!9<Bg
^+h7Cfw<G
7/HQ U&Rd
eLNUOa
[b,_K8
d~R#Frk6U6n
X"nH^|-<Tl71
EX>mA,rb>Kou9$G?0I
bDAm|O]
bi%w )7R'+!w
2%&Lc~
(#Cp$d
@~=ADZP}IF}KBD
FBD!%Q:Z<z
+x&h!W
HM&AgSQQ_^
AO!}w
lOm-eH&wkc
'?0?F2
@uGyJ:=bHw*0;:F5161s
X[+@O]b
|!g9UKgD|?
x (Pbv
jDiI6.&c8&
llz 0f7}Ooiv
?vR{98
qId\Jq4dg
*22\tJ
@&)k<-
nKKi2OT1
c4aQ_SG?KDV&f3
~y;cis
lODtUw%{CZ:Gl/<fk[tXIRG6oI
)>WTsRT
R{xT^`
6+i/+u~S
0dzshrOxut
_a[5P
OV]VM+H>
_~_9ElI?FmL
G`MvBIS
Q!w{yLQ*~
=d:GO9
a_9(cl3
v#C{}nD8
gY66@S
&\XJ$I
~FeEY#
RDL:_p
6E"2P9l
l|9[W
K@AnZ~
:tRr|\'
l&{_~F_9P40;x. ;w5zC'
txgI'0
,"!<`jrQ
g|3J$.
r1H.dZ7sg
A>teG~
q~^|)^A@ <
,j_<ui K}nRQF{;f!En-?
[89M;4&
V^*R(nk
h;uVR(2 Cm
2kobW"
L}e^iD
NHip$e
A|E7TGy7B@';@V
lb{FNmMC
+zT58O
OBt"`]9
{B2=Kx
VD%#!byC
iq`61R
gq~caF
{R8E`>]b
b9#dI+
?_BwtT
4>\q6-
)`f.K+
|a\V(,)
!?g&!+g
Y=Ip2:
;swl/;1)jVEm]q]
6v/G|2i
trO:mZ@-
gCgtd%b},
5S,GP=9
Hg)W:;o[+
#lP`KW
KYqfin
[/lq4cM
+bqyt;t
ipdl^djIx
>WN*ra
cal7K-s-
dX/$9
Hs%y\b
yR=@2Q
3ECUWV
!!$yzx
&W5II*@
Q^i ?h*
IK$if7;~(>
M*:wVY
~$^,EZJD.
/P|{j${w
3o2^,zZ+\M
R{<TN% sWbZXz
5.U2KcqGs%
E&W2V%SKf$XOa IL
SpSkZ`
Bt|q$|-
Cd{tts
rO<75s/P
U9z8Y@k/6&<
=q"$xB
(y&fK`
V|x[VT
HRKCLkR
t__C>eT%E
BPZAc+{
ixF:47Zr
S;>^`j
Qrt"CIh`
bxXQDJL
w&E4]#
q2txp[6O^
\.qd!#
1O[,x9e0
v@!#{Nf@@
:=d,=2Z
C d)3E
nGJctwdG
fu&X-o
q"<=HP,
]->Srljz/r
U<E5L\
q3Oul1z
PB1uaH
O6l{VC
h}Gjm
w$/t:TI1Q!=
,<+p4M_D
$]SGkNq
*&Bkd/E5Y
2T|gwP7H
_v?flM\`
CxuN;,Dsm
wuEPo[8
0+%.!r
b,]B4<SAW4[M
dHv9o+
z]7B5L
7bS`_&
T0kxeY
jQ=/i
n|?EWkal|m,?
.MqiiCk.
%=.).pxa2J
zZei3@6MSts9:Gb#
A%H>pI0
IF,fyN+T\
vWBFrn
[o*$;yt
UC[e~O
$ H|."
[N;bZ8:7;'9Rpl
8"no'C>Jc
k0k[[zm+fP%
*Z XS,
K9wD7|lY3sj
GiwMN-J< c
<BPck9
l^Nz>v
!2)3Ep
6h_ZG/)m2a4w
RY[6I'Zv*75"
g-Qt+]
i_*=_9kT
=YwvArX,tra
V>)4UYD?fE\t^y
ySJ>P5
u;*q!f>
;&&iQ$P/
uE9"w\
S@XVhS6
D";xO4u6cs
gvhF;0
Fu'm5o
|"+'kM
r@\h1m
Iro}HB
xe0tE}i
lf5Pu^2gw3,+
Fh@xn/(0Sc>]Jb%
5gH6T'
!n*{P!
[%eViJI'
U,=3c(
,T^AC`#v
sEx<>1;
tQRp^33gxGgXE
u'"N$Z51saJ%GwPVw
=^E00B
c{(T`a$
zPHb;4]
3-|QtLo>
3Q!rB{6gHKa
mSL}_Uz]
$ H\c0b<
BJJ-;+'
{2.Zdnz>T"
d]O!oT|D
|:roazX'[sfm4y
7LraH]j
dZt@'$2
Mz*M&{-Q]
8.J^7Gp!rL
S{eNgi[@
LCd'bg6#
{<:y&q
DI>nip
C*ShlAP7
+ockvpMY
aFu3nc
boV>!MyD>N
xBIO$fc=?&<W
X.b|2zUi{gG#lih!jP7]9j
33es#Lzy
Ac-YUEIA+YdeQNmw'
iA|8RtY#
+d!JS?
J0}UR
@8je9D<W
6r,&$l
[9}*UV<mXt08iP
DPGP?HrTrD
M{UouM
g!t]4{
vl+^LW^Yk
K66-Q\$J&vZ
A\#N2!
6{>=64
tBO\~|o/vjVSh8(#MnXVT1\
ATc@G:kg
:b'|vhtv&|
WRG1`v/
0KrFTSuU4
tM2u#vd.:ljGza N
T>5,BD
SJz'"6#
M.c\'"fG
!n+m1b,
y7LtB~s
RdVCQa"YmVVk
XZebx8
oIFv4d(TaX
"T:T. 286DV<VPBDJHVhNhbTV\ZJ
fLn5Q8x@.p\'~\?
@QgS6dXA
"-}"!Y;G_Y(&
H0JA=4dWZqr$04Bl
rC,-0fYG
e$9 Ff
m1&pLZDb_Ge
[ar6!j
gIi@|2
b`-bc'z
18>0?vHfjJf
hq<q%!?
Er}Ey\
c6mQTf
F%vU+R
,sOj=k
H)%~ji\
Me>nosj:+$1F&+%H^/
#qVEf(+k+*m!
[%G4d~Q>
lq-JWe
P]M[=7(e
S&s?'/
7q#7!QS[
%'c-jZq_-q
Mi_jtW
W~`v|Fx}
g56~^Q
&i]/F\[C
v=kT:[2oQ
=@DA+W~|)G>
>>:v!r2M$
MF<w:l}I
?Cx*rg,K~TM
=>#$h\
whVB=B
3&%._N5
E..if,hr
'h2c<1
%=1{~DvY
a=#IDU
$aQ*|'.D
Z=hylltY
F9fKL#
`f:]sa%n
d]NV>Cs7B0
_Vwt8z
^:5#tL
%Ej^@%TC
_2ugrW-l
6:MUiL{c})PW
5|4;28r?*2l<eY
k4E/Tf
FOXj[R
U})vly]
`KPStqG?NrFXhOr
#BLxn.*
`m64J{
C&f&r:
2 {.LXg>
ROt;{rC:H6v_-
k=/4OzK
KUE*EFMTZ
p(O!&1,Gi88$+
P? cQc
^qh7HM
&pL+B*26
Jw3TI|X1
dke!\eS@os
|1,Z5E'L:6
8;JdHm
v;"^c==
>GO$=!&
/vPR;0:
,LwA7'
Q^P_{pw!mG9
LaUKzK
z.~t7w
.6.,?B
N$AMjN]\ GCa6
8!C0$4ELj^
v1w'Sg
0xI:uf#V
u6Pr,;\~L
cE'UiCB
ox/+t[
>T.:x7
F.m q3X
D)-_rL8$P>r42
aF,lF,
=nky12
E0s'u{3eu
k?$J;=L{
qB>f5Y
?hswN-gS
kernel32.dll
user32.dll
GetModuleHandleA
MessageBoxA
uhPD;ywpY}&l>
i.BI{7<#v(nH"P
Z9Z<"sens\~
L==Qp*d[0
\;+Lw~sC~
tbjxNZ(
Mr![jm6O~2
6PI& $NZb~
bqdrRZ7
A=nMkx7.
zF&&Lfos@~
hcdxXU
Z7%Pj~e
|:=yho6F?^d`c=Q
>}I! Rcbb
<^!ubnO
F4-Vj+
t-H30"
Gggfv@
&vvggd
wwgbvt
1wwwr"gf@
1wwwr"vv@
wr""gf@
wr""&f@
ww"w""@
1wr'""@
3333;31
333333
sp`x`laE
jrYVK\~NA8XvC
W}vy_jmx
LL@GGNv
8Y>cPH
^.~_T@\|p
1qx0zi
-i7g~jw
.9'n#\{?
?" wBQ
?hD^v[Q
a{Hjev
jC?UQ67
lIb9oa
M'Jg%|
76r@q"-t,MiX
4LWN1D-N
$@-*{
>3uwZ6H7W
OzOXr4V|7i?Q
5';+FV
3jNqz2(X'!
_i0oT>`"SbXm
#vocUdi
@FS,_-*
:--KWrw
Ku'{q}L
)ye(Y)bVt
|qxf+0
K'(6*sq,*n
$cc6];A
Xw76>#w|
BoH^,_
u/?2~(
4ja74JLf:hT[H=/TZ
pu{,0CU:
p.9t"u\6x5vq
gTG(1@T[i/3
&>*[j:<G_1H%M
)x-e9|
?)6sUtP;n
rPfh/3Au
hx_iyd
WzfFIp]8s.`
/Ie8B}?}>F zCN"VCS
7YQ(GP
=14e('3p
EV[/k*u
6)2t=%
-]`F`E
u&oLz^:
FXozq^
Qt>aP"Sm8Du)uli99d
H4f>Mb
mfAL=F
n+8?J`S
0nM"W5Xz
^/SZoqM
:m*OsP
kZX2f.
<Oj@O.
@^;7"<hCX
G=^9FE
I;'l+r7
UeEfi,
K9yo1N.|.
\zZ)1V
;%\}y"4^
*XfP&[PN5
u&`1"hA%'
3~wpNb@
ElYrxsBgCQ0
Iw5Nya5
MO92mw
`#IW,W
eEa+Ge!
]<tHRU+%
Wk>0R]$<{
%@GaTmbD%fpJ'f9A}kH
B?R;b@
:jm/N%o?
D~:=h*
C+QyD8+!m
^2(A5I0E$[ Fk#[
U/xT)
%hKWCev
5J}NzHK+XL;[r
,b5"XO[vs1
jGWB]!0$h
}s._l"w
=:Sg:?
Y!As<saQ{"
e|H\*5
BSW-l(
`Y{.|f4F,$
_XNfFi;
y+m[kh
"h&?wby&M
gyD,):t0GF\-
-Noix;^5
'"0@"eI?l
ZLRC-bs
uxt.Ou$
+Bjt(uQDSc'2lw5
n sRPAmN_W
kZ0=jZI
Mrpn]v
9ueh"S
(K,v>_4Y
5y4Q#mP}
B#nJ01mT0
fF_M1=11
?4I/yJ&FR
2 +20D"
n0!kx7
&XBz!)O@FA~
j<Qj)T!:R
%bMk FkE
yYV YN_f8
@={\8Wv@_8$
g2jOl>q
.D]zl>Z!i \
5(DQ++1)s
fk9]2$hl4mV;
7D1$P
uD0A`y@#
xCqbQq
Y`.e"\Y
`9~DZPs
_nM@[.U
$tX`'yxy
G?(4TJ&xhr
eC+g*JM*
UB#t4nXY
37/4.M
kL9bjWO
PX\V2<-v
?N=LP0
*]YyZ)4q|n
ctQ$j,y
hU=%GBPh{v-=RKN
(V@y-Eq[[
ulMo<k
&g'%G=0$n6
&|`k2>Ih
sbHmfHX&+|
l-7VfDj
kdTO2nJfL-f3
c/X *7
7 7|u\[A
7$R}hq="
E/I6I%Kk
(s9y;%=
GBi!~8[@,
ip$|eO
Y!*kj^9 _
)Ap/%.O<f]
vt61z7X
q2zVpvSWVeI
w&TGv|
_`G_9k\v
'SlRBz5
$quv`\s$G
xgJ,RrR
uKUG{+O
gZ![)Ppz~Bd
."#t`XL
jX~5wP
4Ca,ne
,7>kt=E
e;Tg:])7_
"i?$aje4}hR`z[
PTdfw&NqV
UwQp7N_(c
Z8W:2T
%qZYOyG%{W
5oSG&\.P
nAl#kG$Kof
(/K}_(
?eCnc;
IImLrYk
AQK{7v
5%>@U$pit1
Ab Y{7
eMo-%m"
,iVM8
8yCi{!fHh=
oyKd*|<
N"]cT,
?O+igp
O5>>Q6L(DG$]E4.
qOYlGakV
>lY7B;?1nhsd
!9jA`q8'
VKnl@(Z
X&TaW%*n=>6
g|G/NA>
@TUQ"H:s8
b;-?j7
=62ul1
CsfS+f,wf<Us
\3Z$(1^^
a1v(HVd
WveF76WS,+}
)T d]7
XigG6|4_|
?]k#h<SO
PxQipha_
@O6[PI7b;v&>sj
0*dUfu
S7n_6Aj
1i'f0V
F*RC\F,~'oCA
K:A5Cp
J5Zn6R*yX-E
o~9j3`T[
Hw}~s9V!:
<$GLa5t
0Gj[G7u
])e7B|9^E
ce,k]J
$ekE77D
/t|ad84qp:
I0X^6'Gq
0j#Qze+
Z2?@$)7UgPbUT4F
;;8j[0C}l
O{=Qmy
oabX,S
1EchD:
7?`)A~:
xZ:W'{
T]DCL"
<*,YsLhV
jl1A~d=-
OUiN4lS'
c1`p~N
0X'v M5
^0!:]Oa{a
m45|vb
zgavC
W4}c<xz
5S+?Y]
Hj_7e3
Q1>)|4`l
#%MI "
j8eg]c
BMp+f[
G-\gG\o
%(tLXT
IW`nN<)2
CfC<(c
_n#cWMGz
%c'>2.
WX 6-.(rU~)
BZ5Iq'=
+'.(_O@X]
(|]l%%/5h|nnT0
+V@eS
>ei,lv
0;{t1gDI3*Ek+F
dAZYC9b7f`b
^[jC_BD})
hX`>:Q
3,BpG40r
;nx3EW~/b'k
h!Boci
e': "U;
_?#uK6)i
5@rq33
LE!Mok"<X
LS2 ]GQ
BPI7F/
NCcu47S#|
CH 9d{>`V
X6VW"&#
)i)B:l
^;_M2n
eC:znq3r-^e h
y]d%Le/!
gjyiyQ|2.3`2
JB,i}mX05[
b63j5Sl=
udrg4QP
2PXWnL1x
e6bkPSv/=
Ck\tD
=@zXsm
RA$qhG
N<tT0y
7W}#z+v
xK}!=rDA<
s mu_V9>^A
cS<=8e
5:1c<!h3UzC
8!!BlS-U+%6
9(EXe
RP3f]C
_1TUp
7E(v'a
ap0FBl
DEcW`ow
mrWk+?-n6
-AU.4bHUOR
ha**rSA
04\xBu_
NU:Pdh
UkV =+2t|]
i,5/hao
rcJtH@d*}lO<mX
eOxh/f
q^Az4X
|.x y>ZU
%ry{qsQO]&ZJq2Zb>X
}fq>c[;FY22]i
?$H!H6
#{NHG4@W6
?A<"&Dg
N04tG
~Q?qI/dSA2%%'+
#Rn9]s
}fk?Cxl
!-rXUJl*W
w:,)Z$
2Hx\Buzc
qH@=_i$CC&<Y>v
oz*Eh*[^`~p<v
|1x0GC
[K=LV%
on=rvm,p
0nk PT zR
shcTQDX
GH?g,@
box~jbb(0
1Keo&6dL[
&wfaMH
<!3>q~PX
1QN``C
3<@r+2JL
]n4H:37
i2c1H2B
h'nZI$/_`NqM
WwO&g0m
0no9`Mm
D3lCv0E+KR.tTpaq'&(
gbE33VY
a'!)ZDz
/N]z1Y+1E'97.
OLjU6??Lu
^|_;>.
|oy]?/{
LZNXS~Q
.KT=\xLk?
MCR$%%$JcF
Ur"4>i%R
J-3kr0
d/%^*\r
yf;H^`h7>,!Yo
j4(if(\
='#q'$
Zx'xa6_2
z=^HfcD%
0Ndn5Fn7
-Qi$^A{B
pKFt|giO]mx\n]>>dT@8
Bz4I9~L]L=Z
nu4`nDN}*
L#BovH
[,8t5Xa
VF^P|
vM%,&ULoFD![v"&Z,>
Zy`4ghy
f!uOuyE
E1V2*6u
rzL;fgz&
UMtVG~
GV,R;OG/#!
,^]|OI
XMYH6VW"
qsdg[$\zeUWi)k=8I*c
i+0KJ-a,)
A7QG7
m9/kflk
p]OS{
j@>s4gr92]
BErG|8
|61ex2>Pq
3&sr~>
j:OMoE`i*
q-$pQh
o#DBufi6
<;L"qmDbO
Gr0z3;B
z&L=:)
']c.Qf
(UD5$M
l*lUL[wP
&8[#&D
b~&f$i
//FuYwq%]r
sh1S"-
1Ce>"b
rnYl*u'C<o
a+b7T9y
^E,3H?
Q%:4}
$[GacWE
6pZ"n$GR
c|fMU'
q:[J#OVM
yn?5k'dIR
:x63woB_3}mcXLF+
P8UP+f,h
+xS4fcdgl
kL^&/V,XuNq\8n
c%fIK&
S-;DlZT
;s]<jL
"9B t0/U<
V41=e"
@d{JfD_
Q0f&A\u/`
'Bi-JK?Cs.
iCwlD=[U7I
)4K4PH
*o5/U`
.ta}x4ukQpxU%
(f%=!<:I
N={r7-
Fn%`'J
_G_g`-K3q0QCd0
p`L;Cqv;Q:
Z="chu~
B\?^cD'
H[WzzK.vjZ.
'cd>le
3roJHx
"l?"|F
}8v#yK
|8WPn,
.[s4@SHoZ*We0
hVoZD3
I%nL"3t}l423g
k(QWz/
~jT13F5
n9/ZA*K
NcAj[j5k
s%8]>IQ4
?Y_~Xm
W);K3i
WIs/7(do^}8o|V
(Un<|i4e>x
+"zn?bpf
G`Mkbj
~(mOgUdNA)ZN
#YMtS&S:
n5ddqo
uv&A*CN/xB92
j:h`wh
P|gp;DW
wOq`~s
^m&vb0
=?/L?~!(=
VT%|Cumj)xktL4)2x^b?&EWRL.Q
D3eWiOkT
O!&}5\
DD$HDgXjzb@
[iwf;wl
18YljVCz
8MvrJq[~{s
6@3T!$
lgfG{I=Z>p
DbN/5U.xh@{
L)5)S,;
W)Eu=`
Y`/\&9}:j
wWG8yEW
'||7y'8d
&MpUdivC?Q
*R.h8X
dU%wa5qt.UF,c
e,_*du:{V
(ZuaAQ+xAGKLX
=X,.<g
f|Ozd5,B(!
l*TX=Q\
9D|B6Z
[-v=-K
n[J,=0~X
+A/a\58
1oE9yn0/B
dz9"`laW5 SrPo
7j1M3
d[;vu'Y.!VZ
Mg\Rg-
HYb%`G}b
Jh+!qt<`
@@0,kES|b'J0
Q#0z&'
2Tx#+/j
rMX]Se
Z;m2NcDAMH
/'sy2|;h
oDpyp7\a*c9w9
j`TK?s
O:)8k*$R3
o;:Of<y'
z"/NHxL
7QFkGnV}TJ
7-%`>PK7DS
]XA@DCEttPI
`~[h2`!
^YbJHm`
Re0>D/
)>NXgwe7<_8OiOt?K
:Ne|5`n
2vY4Z(
+S?8p)
{ww82@&8=?4
_g7cTv
b=cinr
E+\r m)s
.&8K!f#
yWdZ1t
p_5J(O
mzkr(
cl}{Bz
t23/S6
W'_0<I|
OI4bw>x
*-kzbA
n(ISM(g
{5iy<_!h
{=Jz;I"
Md7?.TbI
"%L?L?S[@aT&],
} 3\C{f
D;~S2ys
e?"Yk|
6(eN*H<
s?8rd(H#/K!h7@y
1M^Kg(
08^'B#x
FB1rXyg=
-[iG 
bI2iqD
g^LGLCw_H\/8
`1Ng{4
b*qw<u+c
OPHtS+-X];NwTJ"
b?x~y}a+nT
sU\PQ\HA[8){M VZ<'
uP/#u`3%{S-n
U+Hjo8
.Ul}C[q]
V1=[cH
+?-Lzd,
V+nG?)31
^G9\vuR*3{
t/`fC_
[r7Mbsn
xz*;N_v
.uH0?x%ne5a3
0GW1yF
CwN5t2
m?C(lZ>
WK#S(q(Jeb
0_'H;iNeSkn?<
[azKGm
rQCuekgMiXE
=;-#h
0t9_=ZadFX;
:p'?DBWkbyPG
Uu%pZ\f_PB$A
v0.lkbbP*nifY[Bk_yJQ;
a$`iexzc[ij]x~,z
L}Xq?GQqe2f
,[jO%u^}
@:Pq=8
ST<Z)Ii
RdxTSwC
6"NQt4]+
6&%bmdX
:zZu2^
_XeMI@FTQ77
3~AD%VTHWqP2
|2G&Z={
dv.t{#P,-Y~
BUf5e=
%$}0(hP
|(Nmo%h}
G?kZo'<8
KZ9^@ ?jdx|
t}b!u)R_`x
Hj#&'dJ
:("f`whF|I
b2[0tu,~C0
[+:+of".:
,^!c|l(
B\DV0oz<
`[`,&RP
-Hrdl<]n\,
^#Ac~pb*".0w,f2?[
Q;[A$7vv
H+[[*Y3@S
9rbAn[
&Luw:$<!y
}Jm-xI
B>Fo(atk(
KJTHpS76
K{?< -B
qzqH&1')
T`xr}i
J@T-p68#|f
3px{o,i
p.Ph*I*
T|2?s,c[v
W1\}5pY9aj'6BXxt
@;Mw9.v
@"2;Hc;Y
B,u#|180OZ&+
JIe){h"
U8ef6dFg
s$N3_&=
,fo/9fF
jKd~j]
Q*~YJk0B
ri<fBoA
!U$$jP
P6Ik5u +w\)9Avu
(o=P1B@3U
GmfKN9Mg/Pgm8qE'~B4<[
+MteL&
[lY}1#!vNc
ydhW8>^8 [*Ja
-7=l)T
owT}n
62~0g
{%W9LpAK
c8<leh
lDaOH1#XN2{F5nu
#Wc`+9
j4wv#_&I
ftsl.Tjz
9:b6E>S
+@+3y\S9
+7X=;",0
\v> Hf
Ea:xg<a3
&<x8?c
5?6EO%
T6!)2m'&
4i,!$O
jo{N2sq7WR1
nfc!QjP>5xLM74
*5J*34@
!ijS83[(
":^`]M=cO
m$X?e/
Ydap;yD~
J}wRPP5vjn5
"W\+U3l6
hkEX0I`
>]u\?#4R2LH
D&&errwf
mSQ3q?> E\J8b{f8)
E0jW9l
n}x[/
dkM9Eg=
<Rgo|-;X
@n:F:T,
RJu70O
>n-s{V
Syq>80(
.${#QRR$
b^j(m.
mTFEOlV
B.2.}:M
'i0)'!1Y
7k q,
mnUN 8hn*\Ph
c$=?[8
V#@LgV`a<9A@|
jVg]0+2`
G]wU&Ht`e=
WNC8gJ
zCYxeu{
bc>A`?q,j+guP
vL-L/<JnN/y0
.fy7/p;
D,vdFGO
:M>vv,S6m,8,:&e
fRs,zlv
8O:PzY
`N9ws8! %{
.9\]6b2S
A>p@d*cQ,Lq
INC|'KA
WJ8#d6
+{74Isf^
uiS}:*%
dR#m 6`
1LrNct
3)(%9Z
)q?AIk<
8Z6jp!$
5NghG>jV|a
+'&W^v)}asTcSYRt*N$
r6M<2E
N rCPH
""H9a$
t("&d3v
8/5xRm
Jl}/}("k
;-|d2'
FFn(|N
q+A9Za|M
zh4cIR1<(Hy+,9FV,K#8TyM
ihLD$Op
Z)2/<]KMb
QEv3[x
]a0Mi(S
[R!Fess&
_)Rgw 5k$B2
b4?.&CX~|
#,<$tMah
_;t:U}
x[lh+Wb
Hc)6ki[! 5,m
E[]!.CX*
#L^h8aLyL
FwjNg?
@`P7GKaf
DONmsU*W
JsRaCw6f
EWQgwc)K
{aV8D
}z/.=9
M|?' s];?x<l
ab*c!o
=m,y}?]M
ZeXdEPP
F*3hr??F
O<1bj6y
rOP@!B=
6:8I/Gl
eD4|DS+6]R
B_;NTjM
&W6J1/I5Zt|E
GS<6m$
mVYVezY
\Pby/
S#WP4{Rs4
?wa*a3
`OOV1RO~)H
(=cgVz.rqq
kG9+BJPr!#:
P!tU,pwLF
(}; \iI
F|yHkZ
_4B 7-
lv8t5C'$
]=)3qt4*dr
EpmP-?z
ti ,3{
qjIFmXY
S75b|S
c|F4YA
*:YLzt*<a
*CFw\-8
2.0\PKV]E
Do^bTI2
mZAl2Cldh
Rtyi}_LIi;AK!,E
$a<d%TaQn
e]/ Q1x3
WAj:IS&2UT):!kHAP
[_&MP#l
]F'\v|"kBGJ
FJ86Av{b
[FsX'lXb~Rh
`I\=`U>PP0
P*XpBG<V?A9'=QxK
LRn3Zpu
b`]Iqb
1En!yY:
J(5?is
@>=K$jJ:e1;
Gw.88&v6hxt
%l]:4|
b2x=\
ErF(Htv
Ur]yZK#
1n8xY
,c:{9E9
#ebjZx
yfAlOs{
?0d0..i
l2H;"E>tK
&!Rh]Y
Y27j!eT=
tGT%@~!,pw
BZnp?T2
)O#QIR
y>6eO~X
x>/goe
@K={QS^dSp
Na^R>t>:}+w
=9J!)o?
1.6`Nr2`>
Rr%,B@.\(
5U+$"iJZ3##
v1*=m[
x$X(,W8
{\YTn_r
Sqy!oB
-?"cIDN
QN{yItL
(]y+pn
MYUqI'3k
DY2HkL
1Oj<g
NnAU|YzlGV@})g
B8w]Am=GVM$a
Xd1mDEe)
8{4#J#
lGHRbD6
!HM/4r
ozgt,@4^`&F
)jo/f^U"&QGg9DfQC8#
G8]0h2N%
X+%l(g!YcL9$h6
baaj;c
N-ZB_NgEV*!}$\
V6_27T
2&;0$v+1
Fl:n\E:j(Vz13vz
2B,:\YW
<d>sxP'!sw~
UfVM\KVncXV
93#j=M4
.6Z6=W)4
l1|V1XKUW<Tz7gY
&?s k@
37o m
fIj#&_<
Rsu!Bn>
6^XP3r
eTS-:`.yI
{$5[?Z
2OQ\DDI
.F1`fn
@zg?LjQKL
l([m3eO
[9G=lL
E2xK\3`Ng
o!(9rv2G
-_GO1`^O`\
oj@5us
YL<s|q8H
\%<z4`2
<v[q[.#
Zmrlm^,^
U"sY#OQ&
L<laHtC.Q
OEd+!]Q u
EY.h-'
R[QnRc!.
n@a{U`
-L%L5G
\[J3n>S3
.g</p
Q#U(o3
Wdv)XBIU
;)ya3EK
z2zI:7r,Zs0sJ2
9%r_7mbBQbk
c68R)g-i
("6grElUfyu
]LjiStB8I
K+HG6[!r07k
cm&L%d
v/~!3DI, :i
xnq|",
P.F7r;Ff}
'J=s[!
(@{InQ^4\B4R3
:<OroN
rfTu]Tb
?m5pu6#
yF`6`48iN[2
)E*R1'
NTS<{hD?
DmMCAHP
]^WP4 FpQ'
@I-IJa: Nd
M@Cy_)MNO
0qUdc:cU
c||Re8
E.>~dD._G
;R&}Qn~F}
uG)+$Nh<^
SV|cmEFq-\
o]vhae
5Zecs
sIL93f
wN{H;1j5sH
CM&P7X
]"^Z]v
{p91;G61#z]vQS
gA:JnQQ^s4hqn
hGm)*hZ+K^4/
x<_2%:
ew-8`I:9w
T~kfeTf6
kZ[*]S
s"AS@m]_'
,%9%"1$'aUJr*{
2-Gy_-Ur[c|i8(?77m
(1q]ls
MNZzJ~X
&kglG*0+tY
;NlSUP
vVMf?m5-Bkr
pN&+$[,
]K>7h o
'5w9HZ2L;
Y75,$kW
/3S{ZQs
H[wgp^2{
0U+%6_oMzT{t[
d&uh:nFl
.IqLfVS48
(&g;sm<
6f*7R{
(:"P]4
h=oAC].$
:.@y]g
U'}M+tT
f@FR6cKGz
yXI<3y
!a:g7"W
!c-pGN+
i^'yQ=k
X4/R!vnp
r5H:c{it
TtxoPG
)d|L6D4:TcQ%~:
C2#3VCF
Z:$~.)Z7'J
PZ/R;11C
:2Usntf
QMtk<[[v{[b
!}Bh9)!O:xH
ZsqOM}
HuFF}.d}9~)<
O&IOn4Vm qJoli
s"`QkW54:A
4<<y6v'IDl+q\!
n[L9kOu
Q*<8N3k\
Vb6r:QR
JA1/SK}
aK2UU`Ll
;('%`g
PV.oD?M
r;vyU8
A9LeeOinZz
U\bg_B(F;n
HGjW<d
U?:J+$/
;)6 3>
kS|+TWPY+0\LS2
EauYAB
jrywqm
"ALIB!
mDK#@UY
I1w"G{v-kI
-BKy4"
?Cfh!h:!m8H
*}d#\_A>$
|(l"R&
}f()21Nn4
pfXb1h
g9EAI7uA]YKVtm(
9]q@<<
C(O|2E[
u2(hIi>td
P*az%4hN
toswrg=AreL6n
#rzV7EYcFv8\wA
?oe6 {mf9E
)1fCBfO:
Jl[\pY=.
apUe>(`
+5uc`U
!W0G&^
u%ALRT
~k8"&i
>jyxL
b=4v,%1
6#%!_[
6PaCk*'j7
T^%gl9h
cSGHKXl
bI{@GZu
?uWWLd
2roE^`>
e_+@cE
PNTDI0v
zp\+ja+N9`{E
v)d)iU\
D"m!Vc}A$e5+c
;oTRpF!Zj.L
H[f%,YmI=nX
e{P:rzwlnT!l
|X`btkK
M006s>T{:$
ve\ 1p
Tbhw7mF7[~6X.\\0zi6$xxpOrI
z#@oeyNaT
\Wv$}a
{.mETZ
tsD'\S
aC4-!R7:
pyQkoVM[9
HPazpJc&g
Q,NSn#
MG"PZ|VrBox{C
tS8'pV
^77(BuV
qpLO8{ol
:.lw{YRbIp
$|q"n!r
en,Z*3
`{CeK[
t+$FUoC4`hxc&,
7qQ?Oy3IVh5JEHIl
#G(&<n
.&OSqJYU+
?L4K9o+)PY(]:Fb
Bl%>+arN$
J}W9.Y?
7Bs-\@P3f1
qx'2d|!9&bU_Q!^/dHd5v8.
U4krc(NwHWt
smG:/s)uR1q[:h
kW)<$u
ewJ7)a$
J4[:F.BI
I$lsNjL dKa?X
;)rZ&s
-pp>gage,{;oFTT P1x:f4
rK|A*N6%i9:JP
1c-AJTL:
Zk2DwUfS
fx*5/$?}'60
hUoy-)
kvrfB.
G7/: ycJUkG{q=P
1VK7A2=
oVxV}'C
X]*5Jx]O
p1jT\-N
xuP7Lz
BZc#'kW:b!
dJF6s'
GRDJA`
(1e)(Du6P]
a&)=#`l
lO4KDI
m,p}-yw|*uw
o=6tE)90GO
|.-Fi'){D@Ti%
6\8b v>
JnY<$+.>_=
mx@.1ET
l${$W9M!$&
Wl?* <
]m1%n~Tsx
?9 }aC
dp[w,>+/
2H 5#(
UN7b(8
}!Ukfs
G.%05c$`
>uAlTUp
giFBFb;Rj
=<PF|1.Gj
7x&6tn_
4_'U_/p^
7(kl3P
O@Z~|@Qh
Jv#mRm
vV@mcNc#=iSK
AOAy3Mr
`}W|!X
z}p#rktp
i^"9Km
}M\O&2@
:tj'>iA~<~cq!
~;g977ix|B
CsIp46GC)
E+F:$_
DSU_6\IV{
fp<.@;LpY[
fCqyB-I9
Hta),'
^fw?^%Df
l<pX,&>
b,G46=
y}2GX%qh4z+A\5
a,m[HWV
:c;h0NC
qDd5`>u4 8y;
=0i$qp
FH{y=x/~
sOJ,F`W)kD##
U^YCe:Z}
z!rY/a{W
yh_-I|o+w\
1XYA26O
X)gq76i
R?28(:k[0cTkChAP
~z_WV=IZ
n=<|/G
))E)ys p{I(
(i!N<bx0
s"<nfX)
,G}b2@)$
}XevNZ+Mp@3
C?>X<S qZ
a!?yd*
#suTX`7<]`7
]dVO"<jBr#
vs<Q-\kvWF`
@!GY>1
awCLI%XWGF
rAo^9N'
}lo__Eyqq
8$l s^,&'X,q3"g0"`Se
p];:Lt~*@X$E
N'p4zn&mj
lgWVBCh,bYW
p#*xP!w
GlXpj]@Up
CK[;h"HJA_`$
e;Ab~R'<rW
loLb ]
c)T%[Ot>
&Wo>DU
B0fYv:s
KOxc?(QCXZ{
:K?Ivp}Q)c\
%uboIi%1 ,?YnC
_3]ya/8d
~K'J6\BQ
P\\NZ"p[(f6@
FG%J+w
Glx.bk
|g*OlAo
'QE7k\.:N
V>C)Ni#-b
v8S"4?c*
PJyH@9[1r
Q+4)Z`As
6>%ky57G
AF(u@>TFvT
`m~FQMHrZp{
:"0SqF;O
{7GvUN
M\-wG|CY#x["q
9SmCqp
}==ByP
[[)-]L
Gp?iMC
PmeHEj
e9aC%9
d^8X5Bz/
'y=luJCVBC
EO}Vo#
Z0xl8m&co
"Q1nM0%?%{~`g[k
G"5AR.I=
=Vh@i)>
0 2!B 3=`
LY(Z5*q
<d|8[)I
;P*d0~I;3|
=K;Nn?
,1bGH^)F
GKy]|u}D
^j.D$_&
/J5&~(m
;\HZmTJ/
sT_Cz56Ha-
Yc[UebvqntIQ
%A(Rk:
W&"lNW
,f<?2zq
w7TVJQ
PQ]bMD!1)D
f}_W#5
DN^J'T
].>+G3]fo!r^D*t+
v5u.o<f
dr1qLc0
=S@hm+
EEj)`)
3H ro!
fx%J`98Y
F]Q+\x]p)@|
UFM/Z
Bj2migbP
fW6ucT
r| (uY6>Ml
S.?!l'$t1C
T/d{I?I:X_
P"U#aL}*oyI(<n
b:J[z~
LWYT.R,!
R@sf;4pFgD
U>Q\;4@=
W|\eR?'
`a~=5=|B
x&TtBL88
]l{~n\
xL,?/jR
;lqv9]|
=l;I 2e4j,
f<K8xVX
f}-}2J8^
cbJGH$
$Js *&B@4
.v^pW;:
HqIxV}J`6
8/YjWq
Ue"$#'5I
VadZ"M
itPBg
VdCC;~NDMv&
F`g}z&h_
>s$6&uc(
NWo!b*
n/hksFeo"0
>~Hra$j
dXhNbX
Vvc-XpJ]PP_
\xdg*+t
txlJaxT"&)
s@1qgR"PH]
l`'R);r)@
8FKqXLlDm
5p98tlU\]/]
|*nJ8zj<
}O5z_a
e2l`\0
E&@E< ,J
!>{'gU({%
Y&orkjmC
A2AUve6#-
fUwVbpD
Kfx<;i
sH1bDO7)-K{\
+u 0Smhh/5%
?!Q+Z6#
&e~=g*/
uA47.Ps
3t??0E
3_pq&c
4?J?uLq
2*\;Eb
i~i{VS2#1
Qw;X/Q
OzY.`aR<
\o"5%R%["'X+sfu?
2:eqXNK
~vL/DX0
=S1tMPv
X1'jk<
bE-kox
xoj:"?oLE@b'
/j@!54
N_xkI7Iq2
\,nv_1 ~Y[Sf
ErKnI|Who
tg_+YhII
9{_(Go
21ELPwxjtO
o{S k{(
r*9'ZBy
bUR1Z?.,i)
g0k)N\
@rix$
gb&r2Cn:
eo'^0+PJl
4D)[%2x20
Zm?kT4&u8Ku&6{
.\qlaGC
X5Byg+&}mo-js
Sb!#~[ly>VS
=7ZAN#qMqWE
~8C<Y(S[?
rn3K9KjF
1r%5Auk(`z
&vd:Q*
!y9amNeW
tj}*m@
p<,Mp?d^o\XfPE/
[Iw#Q'77
mp@.O+\
LvF8T).b9v*
LvGE,^v
LvG;6V{
lp09)W
Ia)#83/B?
#gm^:q
7MP?$W03
Eu];1h9`@hUF
/;2|2x
WV!uv6
gO>g :b
cQ6[gY<
#<Y^1rk8<
tL|y%D^
,4($2E()
^)X5+t
=# ;1XF
)oeP]RN1Gu*
a)rgHb
Tj;!WW
&D^hL7
/>nQO
xm'e6m
ifCl6jB
7zM\F)
,vQHw`E}
#flC3|B)V{U~$Or]
H:YG%{
B,)#r:m
{xJ?ko
=p}EkTmY6G J{
_eYaR$
)MHx3vCt
*w"6&^of
u>&dsT
)VQ/Jn
YK"Cvqc
hZRkjL;
0nR1[HOy=I8O}
<~<hmJP
jZw`D)Q|~
QA[?yPQ
MD+82}[/
7*:@=2!
_'BsiU`
u11@o.
~K|Z.7D,r
<]Q&<I
3=B-5w6
2Z~!-KUTO5Ku$Jv
C>@#SAS;pa@
81_ZEls
2LoTeP
JLn#\$
'"xP+1
%V6J#1
OB.Heeb
acJ.$W]I+
?mWOL`Ub
<9T2RC.u
F9vOX>ih
Fe7RPU9
NoT2B9f
MQ^z0c
L`GyzMO6Z
Y/]K1Gd
uLcF<R
0?l:FoWe
~e8 $-wA
mG{DAf
P"# jeYb
d`#pE#
=;PIeU(
^Xe')k?
Ng%Th;xbT
'^yu`o
Fnx=I7
#Y/U&wXMX
KdUq5@d
o||u;qj[_3
e4}bT"O`'
]MTZ(~.
%GmV#C
YFA-HK
.]^^c/v
.dHv".^q/
e2xF@$]
qCkJ%h
0xIs|6
~TA1|fW`*Xi
z0/"LjNbt
~3!$Lf;
-Hr^]OEsq
t(d?i+7Eu
e2rBL6nm`):%D
,*`RD4{!
tv.6sJ9
R<l"YG
bB9_Z[
a_L5}:=E
ej>muc Q
h$?NI?0
(q6N>VM
j0(ri@
_[t`r".onk
ZiXx}?xP
F>jCRb
3b]V%Qp
gnjR/dvjQrK
6F_pa~
00#pecd|3qX
w"rFMWq=
qhUse;G=U
WNZu;?m
b>M+pHWh73 eqD
}p*m]5h
(9%`*lRw
(u Zvqk=
N8.c2^iVd
XpaBd*
goYJ>.q
YUNl3w?@|C;zn%3
>"guM9*
M@t}V~I
L/]A<o
hzM-gT<T
;+I;`T3(5Y
!d#^^w'
l-=`_"F+_j1
beDqtR
0in<\_
xNt!6r>mEu!zqey
m"o^h^)
]q`hqL
U1i!(h"
=L]+WHI{=
CuUUj 4aIS(P\m3NjXCFh?Uq
kSn(H\
i5<Skr&o
`hG3!wS^@rVt
+\7/n
A==PtIR"d
uHo\Axp
NcZ3iS
:"DJay
FV`6[(
"@DUyH
V6.x0A
";T5mjL
<*0!jY
w'q40SDr
#h:gDy2v
h-\*% n
mzlw<Hw
6Z>9U0CpU(d
gt}hXa$L"&I+r"
l6&b#I`)
1Cb}zPl:Rv!ol%>eY
9'JR:$'
S|Qj b
d$sfZP"#;B5
SNHvW,
0[v*sxu
R7X)Y`X3
qGhwVvR
`^]j!cWH)
2ns-]$W
53_;A-<
,"X6~w,T
L>fH@%Yt
b1e2etc\
Fim'\th/
}V0pdA.
+J*d.\#
{V(>?v=9
iaIOK5
'5?;!Oj6g.
]n:{x&Wj<p
R<~xOzG
*<1#?* 6,Rc/
2y%N;f
,1cIIljEfI=0w
\,L97iK/
1UQ->b
.|,"qZp,OeoHk
7'7R'f8
d5l$D'~1L
iE>fF"p
PT$}bH
us?[x
oP<?g
l]0,-z
WPqC4f#
522!}K1kOS
E4KznX7Tq
JA{$p0x&$gM
L@,K2.Z6P'
lfi~ev:4BP2
mwb:2Y
W3KH0'0
37JZ?"mSMkhy7
4'"SMe
%Tc!nys
Gx.[mbgQ8
0Jv7'=
6m{EqZ
Lj%Wsf_9w-nr$
;4BN.Tr"<h:
d+m*"y&
N6vVuE
';JYt8>{d9Z$#F
i=wp"4
,aTO'mc"GP
juP)Q'
u[m~LU
9cy3oI
/#W[;u%
p%y)"D
TXQGOWz
''4KUV
u[7rpE
3+5OA\2Vv
yCRS!?t>4
aJWc&
h.om~&
f$$zR$
Z_yZ9TBlG4
P9MpcLs'
e?f45:{(V65K
@}Zb?(
~'"z>U
K`D3Zb83xZ
52TdRGN
u@f;3L
_vYfaVn&
k=#~Y
.PZEX~Bz>
mi,_kO$
nv"#*p
9KRmB:
bVoiZ.Rp!T
)xD%='q
K(}U):
4)wC$-n|
=={dKH>6=0/#&X.S
/t?kc<e*E4|zi\c{;N M
ufgaL0p
{:/S4uI
,S:\\[Lrk%
9Y6GS3$67g=vl
_GU*C[
mP~R'/n
:\[s-Ise"@
*He2{_`kBq;U
iD[Xti
7UD=H|9B7
OshTDaB$&
M^eD`f1)6 ?,#
]y2([,
$hXf\=:b
F,^9>>ad
%0CE|)8f
!]H1;G
b:6>8x
`1+tM.
%(+8*{Y-R=F
$Qs#(*
N4764bAUt]K$vz.
f<4OC=]O
!DUY)Lqk&]6
5YU"sa)C
LJ9aTq
0AFNz
/bs@/F?9G_Gb
&.@NTN(5
<cAY"S7Q
D#H"'Z
~8F}XQ
D)ew.{
1(vTA8)
R@9!Vg
O11wlm
-fg6dJR)!u.8
~}ar6
gr\"1P6
|@c/,Ij]xd&9
B)b6f'
4m82Mg)D`t3Hf-
H~.daR
}17*@~
`OmEtB'
B&B]?2
m+1]+\1"P7i
nW 8(1)[7
RrrJZm/
;zT=o(*]jR
nm1,_2U
J[yf,g4A
KbgZw<bAj|n
%x+\&+
jkI"(fd'
Z4{Cs:1G5
|yY1Qo4y
(fH?u)
6l+;VOEj\@
gLYzKht^
}N2*(}7Q%'
Q<`&qC(
{~G]P5;f
Q^!>mF1i8LI
x/g/a=
X!^jUYm
ecWn8<SA
o}"_d!i
u,'x{i
m"m7pX
o|7>[u
9?sethi&L2eg
60:0P3
\ut38ya;>
[FhrMv
}[Q3bmF
.yD9tm+>3w
|`/8y3
7y870M
dj&/_0~u#-s
B%_V|fq*
E<\s2g72'E
ZJ.[+HAclPh;
ydjz1Q,
<7}_,ZtjIB
.BkP.V4
C*5dDv
aQG,bIwtp7l`M
}7sZjp
#CPy';
;rF(],
J-a-aO
RZ!fT 10
8hx<pw/ph
;6G@;d/g/91
nqBo>6:!6`9pc- e
S`+5>ge@Knm0
3P`qYd~Rw
w\Wh=>t
$*L"~.qd0cV_
hT|h2\xQ;l
TyT DDP6
e|7BlX&vf
Hsg]6)*
W9-i]VE1b
E_jDN%Ck
:k@*h2)Fq1
Q8L\<R?0cZg4
ZQ:EWN2|L*5NQ>g
sd2&]r
}Ie5-#\J]
j"*qx>Z{?IKF+M6P
^OYq)"
y`{4d4
t'RaF0LA_@I
bCU0j~b86h/Z
iuV3Y$-?
0e2Dq9oo
WqF'61
Dqc+/:w=hiMpAXgH
OZCn#ew
:&K{ s/z6Z
lq\nfS:fy7
zNC#o:
Ly#:=&DU
K+&1iIn,*
o"j!+#p
/V7m"'
=uRiQ(_Z
WLCd:Z~B
3z?<q6
s).h/jxki
+guw*Ngm
8\~r.r
v<}TE]Bd9q:
)D{.E)<
lrW.!B
t}9h;5
,5uk0`,AfdCn
Iq9@U.
OhcEh[_
YGC\:!
pbBa97
@7_ZB-KIv*V,Di^;h_2
[`f<?N [
XNN1k?
H:p8Ba
Ap4ifrw
ETKN(Z:
CcMc/x
)bK.+g\R.
Ynth4w6
2b],,h-F
5*R/&tiO)
MW8a}l
)Qd}9cfI *:?
(I./YwOBJu
wPQ`s~
y[.6uD4S
.\NK3cfp
O}:~Z8lJ
@o}(\
Z4K>yZ_Bq
@q<*kJVr
S>|kSu&$
SF]Bn_
<L6y!{F[ZFMr
@'%pTeQ8M-F8#+w
7O*2:i
npBRmO"
j!c|
2y^xt6
yEysI4t}=
="^8kWS<*
QC.#p6T9
-5B:A{bRsS
C2j%TC3;
4M/zD'SZpR\v22w[y
-wfD$Pb
yK]eJ"3F
"jJy)w
Ypt^sFzNz
z}FNhb<
.jj{[>c
d&cne~rW
o[#qWRD
wMIba*1
Q(}UyQV
* ERIw~
s!-EX\
|pF?a|E
`LZG%a<
Csprw/
>E<LYQ
Zw$pijx>
U{!QGf{Z4E
Owq.\{ucw4
:uzNTQ@
ry+T(10o
qF{.mdYbm
+wxSI!?p4d
DJ@9Y&#
+|{EO?~eQ[
1zdM(L9UCkc
SUx>.bi0uQt@
Gad*F{RDWT7{``Ii
^0W??Fm
T7*4Zt<
ur`Z}u
A4s^:xgb
jF&I'Pd
6nFI[I/
cNe<dLK%
il,Blchf]49
6t6sT"
_{x1o~;CAl
W/H6~6NE?L
Q_>D y\
Ao4Dd4
6TK_Y{B
"L @JqV;F(
(;G+4Pj1h)}
H|oB0vaIU
}w#tx"$
xx5|4<KJ
U~w:D-p
|QN<|LHK[`Qj
`.K}j35/
il+;F?Zz{
2o{7aj"
D_& =7
\AE@m2/
U]oR.e
'wM>z)d,O
h.nG(p
Z:Tsd:A4j\
0HV\RN
hfk4'X3
Ij*oH[
A[_7~Z4@o
lHfpZ!
MJ*)$2NJB
Ql`&rxnOk
)i!|i^
^]WXig
:MuMY
+$f)wa
]Qi)NK
jV"W`k=E+]
=TU#C]oB.
"hoD%K~
Jid)S60X
G"<aRA"
>S2Pn6_n,W.}]%
\S1w[w
7q]@g,
6;byvBW
L8V)I@/AJ=
HgPG)
npo%Uq\-F^l
@Kvq4*+?^2&?D
4HV?K;4.j_v
I@*K+VVZiN
j#v`3#L
X^Daf)
^ijsL/ .6j`;[9
qACa@G5]}b@ugVN nsd4vt
3@s4!S
:<.A0lXHDQN
<MH~?(
CC2{>'
+Vqwih]
=bN![m1N88i }
T~SM-- h
s$FJ_2'
0rO!8C'GZ4p)
~d@\=l{
COG:8T1qGwGR
8&pp*fq
6ON_7pA2d_[vM4~Ho
(L\Q_mM
kY{"" i
|#s)\<gEq*\e-BA+?q#\
wM$W[m>
r`o|l4
'=74n(b
'8+D$v
O&6omZ3
f!1gAw-
C\5fl"<\g[K9mX+R*|0>Ec
4i.7F{
J N}&~c
F0.s0a;/
fisE:Rw_
_BP,1rBy(}*o
0A@8w}I
U/6-JW%w2
*Q~yR!F
sZ2L9w-ll
~qC':
y{sd+PZK
XU6SOHhhQ|!'*s@r
g2!dB[
%8{6l7Us[
$Je<f;BW
G$?e=/RDmE
Hyk'}.^U
4^B+FR&
L1l\t}36
@tO2Gz
>j|3BV79nD#u*^
6m1|0AR|iX33
]g?u_%/oq
zi8=rlQ
:R|U*@1Y
m{Jcox
2W>|0h
I*lh2%1
s3<7t[2h
X.b1IW
]|VmCX
_Vw`_!
*k[dJ>&k`Cp,Q~{'O
PZh%y_
k5C"rXx
(nQL@I
SFjEn$O
`k|tFr
zEOiV`w1vb7$
7OP:E4T
H@qM/Be
mq/Gu%
z(@rE#[
664*l%
1VBygrE
5%MCUX"e+
b*TvH<`
n~rHj/U*Y!dv5
Uz5>7t&OdFcT
n2>?;hXH!$g
lT@bF
zJ]L|x
^#] eoeU6mc4
b*}3xa.
jz-vxF;Y6[\_;5'A
~l44n#
TW@le96p;
djVMro=^/eul
d#[g]J
@702bhA
gl"f '
W1Y3D0/:
Xp}v90c
nF-6CXDN@a
b)IGy'W-
kV<b6zV
Jf6L'4j,@_4*.
aK~0`iaG5XDtWv
CntHM0q|.@
93dT[KW
zIxpxd
4'vo}$
K'.;DY
:px d+oK<
+r#AR(
tS!1Ks
])k~xAA
ct' f{Fc[
*k6_!e{?xQt
(r^Y_;PPAgc'
;6VE)TPqR\F<%)
~!$vs}
5bEDoXU
v/g;V JmY?>
i9@*._3%^<gl+mi
pg!RlD.)
tdFq3Q=
DVCLAL
PACKAGEINFO
MAINICON

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.