1.4
低危

1a7020682b2d642c58121634037afdf5a40bfd5d6c9712009cf21ffb1a0f563b

1a7020682b2d642c58121634037afdf5a40bfd5d6c9712009cf21ffb1a0f563b.exe

分析耗时

194s

最近分析

365天前

文件大小

276.8KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR URELAS
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.83
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Dropper-NFX [Drp] 20200320 18.4.3895.0
Baidu Win32.Trojan.Urelas.a 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200320 2013.8.14.323
McAfee Gupboot!65A8970CAFE8 20200319 6.0.6.653
Tencent Malware.Win32.Gencirc.10b4af93 20200320 1.0.0.1
行为判定
动态指标
在 PE 资源中识别到外语 (1 个事件)
name IDR_BINARY language LANG_KOREAN filetype None sublanguage SUBLANG_KOREAN offset 0x00027000 size 0x0002c5a2
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x00061000', 'size_of_data': '0x00043600', 'entropy': 7.85772522153647} entropy 7.85772522153647 description 发现高熵的节
entropy 0.98 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
文件已被 VirusTotal 上 56 个反病毒引擎识别为恶意 (50 out of 56 个事件)
ALYac Gen:Variant.Johnnie.183521
APEX Malicious
AVG Win32:Dropper-NFX [Drp]
Acronis suspicious
Ad-Aware Gen:Variant.Johnnie.183521
AhnLab-V3 Backdoor/Win32.Plite.R89296
Arcabit Trojan.Johnnie.D2CCE1
Avast Win32:Dropper-NFX [Drp]
Avira BDS/Backdoor.Gen7
Baidu Win32.Trojan.Urelas.a
BitDefender Gen:Variant.Johnnie.183521
BitDefenderTheta AI:Packer.29FC3C641F
Bkav W32.AIDetectVM.malware2
CAT-QuickHeal Trojan.Gupboot.G.mue
ClamAV Win.Trojan.Agent-1310721
Comodo TrojWare.Win32.Small.NAF@531prv
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.cafe86
Cylance Unsafe
Cyren W32/Urelas.E.gen!Eldorado
DrWeb Trojan.AVKill.34177
ESET-NOD32 a variant of Win32/Urelas.U
Emsisoft Gen:Variant.Johnnie.183521 (B)
Endgame malicious (high confidence)
F-Prot W32/Urelas.E.gen!Eldorado
F-Secure Backdoor.BDS/Backdoor.Gen7
FireEye Generic.mg.65a8970cafe8627a
Fortinet W32/Urelas.U!tr
GData Gen:Variant.Johnnie.183521
Ikarus Trojan.Win32.Gupboot
Invincea heuristic
Jiangmin Backdoor.Generic.aahg
K7AntiVirus Trojan ( 0048f6021 )
K7GW Trojan ( 0048f6021 )
Kaspersky HEUR:Backdoor.Win32.Generic
MAX malware (ai score=84)
MaxSecure Trojan.Malware.300983.susgen
McAfee Gupboot!65A8970CAFE8
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
MicroWorld-eScan Gen:Variant.Johnnie.183521
Microsoft Trojan:Win32/Wacatac.C!ml
NANO-Antivirus Trojan.Win32.AVKill.ewdrcc
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM19.1.015F.Malware.Gen
Rising Trojan.Gupboot!1.A00D (RDMK:cmRtazpqdwYm8Jip7USOgJf+SMnD)
SUPERAntiSpyware Trojan.Agent/Gen-Urelas
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Urelas-K
Tencent Malware.Win32.Gencirc.10b4af93
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2013-11-26 15:17:51

PE Imphash

9a105b2f435a260bdec00176593682f5

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00061000 0x00043600 7.85772522153647
.rsrc 0x00062000 0x00002000 0x00001400 6.524854056949122
.reloc 0x00064000 0x00000200 0x00000200 0.2162069074398449

Resources

Name Offset Size Language Sub-language File type
IDR_BINARY 0x00027000 0x0002c5a2 LANG_KOREAN SUBLANG_KOREAN None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0005e840 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_MENU 0x0005eca8 0x0000004a LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_DIALOG 0x0005ecf8 0x0000004c LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_STRING 0x0005ed48 0x00000052 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ACCELERATOR 0x0005eda0 0x00000010 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_GROUP_ICON 0x0005ee28 0x00000076 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_GROUP_ICON 0x0005ee28 0x00000076 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_MANIFEST 0x00062568 0x0000015a LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library kernel32.dll:
0x4626e0 LoadLibraryA
0x4626e4 GetProcAddress
0x4626e8 VirtualAlloc
0x4626ec VirtualFree
Library USER32.dll:
0x4626f4 GetMessageW
Library ADVAPI32.dll:
0x4626fc RegQueryValueExW
Library SHELL32.dll:
0x462704 ShellExecuteA
Library WS2_32.dll:
0x46270c WSAStartup
Library IPHLPAPI.DLL:

L!This program cannot be run in DOS mode.
PEC2NO
.reloc
1E0*iH
o0"Q%0
jp8B" E
6bD(IK
=Ro%_)
0T+-djBt(hK;p
bS;PMQLRQ
AAPNF(1 mj62h
a"hD@L "E
0T+-djG
|St7rah4#
3G"#nE4
2Rz Pt
L1!0RL
:LXPP4
VW1W {I
%,S'h5
"mPqRP
t%4hM!!N$s$[T$^
Iv"M6&
PG"0c3
w&id0}a4.T
PspD ;}
a$)p+A
Ie)i291
_v2 \=?e
M(.|ht
'(.@jP,`.
Rt"9G.C
Q*E!m.PE""EQ
F7FuAh
Rn>6PN
!&*.d226,:^B
j~C|r=B
FCJ!NRVZW
CG\8hS?
hW`B7G`BoB`njj
uVfcA
]iWn!B
G_7Wl|b
(|<El1r
A`lnjGQj
DPm\'i2T
o&\b2?Wt2
j)dd4Z
g1d;ty
pPnLdT,J
aDT)/l1JQ
DSt^lc
27[>'9yK
QB!407hd,24
EB4k!*b4~>
)i;e$W v
LB8Bv"<lf
ZEb%SH
*1>*#5
St^yij
g:<yy"j2T
bRJ1&Z"
R\5JxEXQ
tV5%N"I&
#vUnX
dZ=XAM-'D\
hNxB-v
yIhjDve
"jvEphlJyp
l~d0=[=O
0U+-nJ
;Z<t2Id0
QHq8o%A
N0CTVW<h
"x[i,O1PN
3Y~ ,M
=0[E+;l[
=}vl/(
:E:~sq
(HJIHD/d*
d(UPLo(0
Kkf*0Z
UPud#>4
-8A+<K
B%,TFQ
A[P$e'2H
Dm;o+B
1A`b~
* 8DU1
px0}Qu
sD #l)!9b
}"B(Pk5RR.
?GR^wj4
"+A"jSAR
NA$ su
S&6xdL
)#c<I(H$
c__Rp%VD$
4@3O)H6hB
Ik3W{#
h,h 2
FV1S7%
OAX^'Y
{:d4Fu
^?W L&8YS(
&4SW]R
N#)YjS5FW+
76Cq>`2/0ct
}P0P29
POd%P-&h&Mh)\
|MKR`!0
;Lq/VE
IPVA$^\
^Z'$Svj
oV~q_e|8t
EH#?X'
68io+EBWpC
!uJBpPSB
4h5-?4i
~]LQ0}x;[
Bs8?CX
@@M_.i*:
Bx(_*L
@!whw@
"~a(XG
&by xHL&
J-a|.-
Ndt~iJ
{B.[,5/2Y|
_VCV[J
TpI&Lbo}
H<$SA:
4<7;tNVj
Z=aYouB*!@4
rj_9(t
=&D$;u
p,6H0I9
B-f4q&Gb~
0g9$qYs'r@r%w_
DF1w`I
\&u& %-
6Sv)1Txt
c*\B8z%ScC"Q/l
vX:7dXy0
:MW1iCAT
?b(XY2|f?
a.3DXR&
)? LK}e
]&*fk l
P"V22Ua?xS
vB2pAnQ2]1,
@,sB6i
b5]((EL;
\[l~5X
>/^reW
O"tk"
2t600^
V?b%[:<SG
S9t0kVx
9AE|
.I[`d hI
a@%F(&%,h
;$tIu
3)6hl"ji
\4JJ=Qd
6QWP0h
3$ ElR|
"0Gt"Q
S}QRS_
>ljjB2vM
?$q6#$J$)
h2x]/_)gEg
9d}(,R9
PL]UMt}Pi6,22]>y4Bt`x0rNZ"T
dT^;F'Y_9]If
d4\M=_H
S%Kn`
0RP}-B0~F
]WL,_%E
B|~at9j>
wIr"8FW
DL-#*+F
P"[|k+H$
yXN0G;$^4jF;3v
<F8!y`dv<~+
`,9AYb(4"}t:jIG/9V0%$Tj[
L$}3H
"F WL~
$;,`@d
\O*QfF4
GM9B+
)U&wP\;
hC~(Col1KR
B@IW8 K,
Y90t$N5
_" 4`i
%[P%j@Z@8 *
B,cE5Q8G;P^_]0
FbD9XU7
b7#Ak9t8
u"KSt
MSS3|0Y_H
*[F;-u
-$C>?$
yX;09 rA
qb(AhN%
W3I$|@Jv
(("j(;%@
K4P*r>H
sB*VU
J/ FzSF
$5HHnH'4jB|(0n
rE7|*N7
6AM$F;
(*,;4
;[z0(U
+@B;'v.$P.H.s2
?hmw`
neM#x0e
k|%L$(
`F=HN#@;3
$jZ~nke
qp`mVM
cd1L[d`Y
F|8 W%h <(J"E
988ew-
Bt"T+6n"(H'
S_CAG0Vw
10mpX=$
vu$s\(d
rB29v$)HL
ZX=+2dr?e adJM
1G44Oc6t
KRGKJ+
SYX9?W
CNaf$Q[
`f<3V#
 )| h
}Bh-4P(J+^NbLJ
k*&c>?
jXh=Lw:
v)#--v>Ve
!Xo@;u
BYA;39b-d
j;M3HG
xTD5759
b&ai4K
$s[Z($
Ib&+.P`g2j0Iq
Vkb X8
Vjxfe4hII
oVl<i@>u
+o =^".hi
k/$w<{K
w;lw53+}
p%\uhWr/Xg@AC0H<
PX|g$K1
Q[Y;5D=
l+&([ADh28
irtj+BH
m7 ;=6,
k8X/)Y
0|EMVZ
2V/m~`
On;o^n
jl|,@&K<A34 HToP
G@XwCzdX
2U9~Iy#
G<;({|
$x|+97sN45
/Wh<T`-xP
wO`K77~2S_<)cX
=euv5J'\
GwpAsk
Kai_%)Pt0a)2w\
,vL&t>:
q@SU93
=9^z\\
Tbj{]K
XW*+{v\
VW'B6{
D2DUV]l
CBOf1C
85{b1uEb wA
C$!(,0
}w[44D
"z,"lG37"
%1aU]*;y4t
fI >~,
'hAoV/u3hZ
2d/RAh
C,"|jP`Re-!6(}p
brLR1JL2z
C)#*WAK!q
SZJP@,]4R
;7g3Kr~v
+q1?RAx>vR7-r
akk[H%d-
V/`11^;
b+%hL0
]gE%,@^u(?!X
z{v1[Y.D
9sAKuxR?
,R0f[W%"YT}]
|zd*!'&/FoH
!P(RVbiu^}E
gEBK/ab
{t2B:cx
h%B3mh
25"(e_kx
K9E:jxA
:=0a$}
/Cj>Tey=IK
:z}V57y<
;5T wR"f
$'PLZ:
_L"2jJ_b8QwA$n$
),H}>}
te{ 9E
U.h6K)~
}O;]rz
B%}Xt/^K
)v8>V8r)j
?(J oS
h7S*%!I
}F%6r2
MZ^aUl8@
g@14Sa
$<'Dq+
$]"E$]"E$R
XlMPH)
t1:|9I$p
BIjF!+
K[h$qUB}(K
F"j@"h
hk|[)?
N(%j-=
]rh2B{;
cdw"EDP
E)fo(W
aRFz@,z*
k%i+iyF47
|\CWlD7%h7Gj9BM%$%K
Our6.!j
Qi}H^)`POXW/$W)|
E&/=w_Qt
j-Xa$N
E3BsXW9_
8waOh9+
B;rdiS
9^w0#O
yvS$)M%
dWug-5
)6r23v+iX;(I
Y>me%X
7q{.K`
fN{uxf'-7M
)+y+!4
X;sP'>
w=r'wIPC
~QxV'Q
&u':&T
OP(Z9-
R1Qr%TNi
|x=tAf
l%h1-d
8(=!#$
h\d84S00*(p^
%qbU`L
j;LD2I
IHOH[s
XKt"8L
)z-s}BsV7iD
"BOh7t
$H$!BL_,
k0A#pB8
d=vRY2
VW+$5"
U$b'NhP
Szj+2lN\A>7
W,~Kte%
#@dDlH\=
-t$ZRT
~y#)jw=~
uE-f'7SM
AcJ!('CV
,$HCXH
!,7Z)_!
!ehE4.
x@ 0j8
@vQt7vu1
8vC=uH
?5YU/5S
BvB|B|B
H/AJwXdY->
A+?}Z6
1T (^
R+ItQ:
A8z?lu
) Yh{6u@
Q3OqN_8[dA
A #(>H
D*R& l
D@=jGD
g\)#tm.
nN$CV9
U3ii$V
9A,_G-"0O
9CShR^vDvgMcCE
#3q15~=6}
Rq,t!zu
&#c>tKF2~S'
Tjf/Fs&E']X
0ZhELt
OSWj }0P9l
+T+Ra@eW~[
}+,*E-?
cA.&1o
2Wx0(2B
~)!=|f
YP!| \tLR7t
\?k`~]xSd
d%W`FI]B~@-0aFRd07<'!
Nrb*&B&i/"F|T*_*
v@k%+tW
itAu++Ly
tj[Z&9;
uB0* s
6@K^;J
7q FIN
Y]J\7]
&l!zS%
[L) "3\
Q55.Fu44,
c"|SjEq@
z'/OT+$
d[D\20
I;?}d$
PO=6.DK
=3n2A]1FB"*
)fNDKn:\3I
>#z-^I
;QB"$t
pJw'mo:p
y"KsH{`~E)
B$9Wd"
Yy"WNyE
rbHW['
"SIhVW/}
(S7;#$0
~Z[>{:#1
%`|FS-}O
R7"t|G#MH/u)d9HH])9E
x]bLXe
GHTOw'
\LFX},)K^
,(>'B).
KW^Nc)d$zs'
CR,J!CQ7
JD(}#H{B6
+BUD13P
dFjdC8b
dwD,KQd
35T?WZ8b
GdbuBQ$
|&{!9t{X
SV'7j_ +H
^MXhHBU9!tC8<v
~)BhpiJXm
U[B,Mru
)(JP?tH
-{(L]-F
<h%@s$("-N
e:\BL&
\<h+z!
#kP+>hQ
4P$-ZeP
E&H%Fw
hsD|S7ff
01xn2QH*{BZY1J
@ T>,z
SPn!@sH[
a-@TXMIv'yY
_"V[^5'=)X
lNtK0;r
*P-]H0G
2 P325
k?:;/N
> t<qa8
E 24d%J
!a"umA
<z1}ur\[ 0lTtX
O%:000
T+1fwV"]$
X([d=2GP
-)TNnmAnKP
`bB]zo
h.)/Y@
}.Nf\I
N@NhCH
%A(t3H
&^\D[_
A<=f:hA
QC\_M4
@ F9OH*
$P,@.A#"
:(tx:)
$.PH>h
vClb\W|t~
j9F)OU=
x@*)gR
^@Yf;%Qhh
[_r ^M1
BFH&;T
5&[)B"S
(ncDD2<
<4`mB8
"$t-^9u
r!8-(+?q}
Y8:L<co*'
@s^]$vY
@; 9:+
G~,PwoSpi
1'uYDn(j
h(E-z/
H"Dxuev!!
Xd"`ft
$$,H4<"DEW:V$3p
E:X+.c
ED(=jU+)48
~(ZQ!Yc
'K]HPuU
*M(8r
A j ?C
|gPEIan8
WkSA6
=whUfB ~*Fu@^;5y
6\AV*Vb%Gh.%oV^
8]tPE
ap<uF#u
F.A+c@
NnDy"f19*E<
1rR%}q^
VBjuOsc9U
&hgRAiD
E0&F-H
Gqvh`z
Zf1A0@Ju
$95LX@[
Kip_hQ(L
L6xL*F
[[CX.B9
^hag=b
&b8!x)
6ESi"
o=.h(#^9
:6Y#Bp9!
hLsDD@
-$&D"D
:6[Yd5sjV
FS-/9kG
\B+-T!-l#bF
8{F *X,M%{@NbF]N
a@;hhPH
s)}Z'ue
Nn(t9HLf
PvqVk[NPRF:k <
,*QQ]6oDV\,
|s*~d=
";vu1Y
$ |FL-4
$'g"3
<\r{/F
D86JFY
4~wuRQ%
L,96$V&-L'
4IMud18'
WC*?jA@.Y
WVBt<Lu
$uyJ'y8<R
Sf>f589ad+
VB0$HYn
+S@WHlud
_[jOX%3jThyBI%EX
j@B ^Vnh
\8'Xc)|v*"j[:ju`MLL
N C*#}$)*
r~9=@|
+RX~mb?_I{V
e<Ne/2
|(BJ5&Z
)?Wa4>/b
rLD&@
$t:OVj
O'W/_oX@
nPv`~p3g)^w
ztCSS]
+?PRQba
lX-yP||2FSuzUg
XA55z
Fr'i[v
N9^C2#,
qlL8CsuN
y>/Tu^T
PP82Cf9)
YNHAhRR
d!j+F~So^V)
!RbduH7
pXG&5E
zOItgU
wCbF1p
@u@x@X &
uL[8s<t"
ByK-*>"*i"
N[(fm,
h&Fcdt
WNr5|'TrqB
)7he>[F
WN0gfL\
305~@B
AU^z@d
,F*2NSxBtISS
x)'TwS%;:w]
CxhXE:s"qH
'TndM"
-N+:bG%N^BB
7y:PuM[t!
PEXX4b,XW8?IY7{!
BPs\DSPaF2$
FQbau(9Q
t GpMAYu:]
I/X>ao~
;[u'"t
~b'u+]
<a9r,z
<B/!"79F
(]@B"z
?>]!+!|
hzJCZP:h[AJ
o/ QQX
JuO-t.r
u!l/~{T24R]a
x?t}m{r
P!~{N
PX{Epyop
r*L1%#
)L.n%4u|HMM^[p
qCq@gXs
=j RGP$
C[!UF($}
P`8*=>R-&>d=
' p&+iXRL
YjC_`-^(9!
[r?y!04"y
d-Hy9yL,/
Gif2]3Z8
za+_Qs
[8!C8`!d+8
d<ICy-R8
Ovd]9:Au
@Zv.j\X
@-uZiY
0;ZR%wi1
+w7/j
qI-uELb;z^Wv"aOVc
+L9K=D&3Vp9
$/L8JMg<O,B
Nd=n*_
-QRoNM-V4_
\m(= D
@KmHWOkiWW`6
$t]@<j
PZ1~ O,
ytoVh)N
gu2F$-ko
!du)b"MNHt
W~X)u%%
O=F.RD6
Nn}ue
J;3r .8^
#KF>EjP
nIJ:'~4w"
]\_)}F
::Ho.(Q.
_d@&HdPAL
B(a$*Pj*h
"NP?Q@l^+
}6dPwE -O|2I
h)An6G[
\Y_yd"
byPiHYp[
u0OAG~1d@
F!C*4y
9X0Pz,%v-W):
PuU t?
;!O@dx
l/y-0W9]U
" +; y
'NR8/0?@>
QS`8/8LS\d~
L^Abibq"HpN
PGS!+.`b
(JBXk- u
2@BJp}H
oKH7*4
y@u49<
$/H1=`
GmC#;&+<
?my9X4N6
If(n~,iV
$;M9eH
KJR-.KPH$v~/r
N)#S)^!R0%}K
,w/]P)
33Ht&b
%Yd!-jN
~4t3k3
6S2C-S
9}SIi)
0"%zCm
M|sV,vZXW.kIu3
`Vi\Zh')
Oi%20W@
;FZpM_8m/
]>9+oWVN;
}["?KUwK
C\GLMt/Bf=S;6
eRshRu
IGK5J}
3A;A>`\_]
$bs+va'T'UP;
?Z^tlM(XxCt:|,
;-v-T$
IJHQ&9R9=
bxUQ!X?EJ~@O
^`URP)Q8V?t[
SZ"~pQZZ
|YsQ^<{2
Azr"1s{.?
9^6Qd!
u*!(=/9$t
1/F$\\~&9)
IiTWz|&,X
*id@~Cj3
Xqr7`?%
=w% &t
'X<d>VOf
N~.@{td)
SAVdE"
~=wQ8^
nBJ eQ
R:PDLr
8F8G8G"
"?<qY4^Li?JPz"jj
u%_L$G;
_$)!~v
LGP#TX\`rd9h
tGx)|bw
.QPISO
;WVr{An+
R:QuMPd
.2"(InV
m2w,~B"aUy:
OuP%Z$(
(2z4D(2g)@
I(mA3:BW
E94u*R0P4
?PGcbX
O1u .; sT
';'v!u9#
6Z0V\F!
!q^CMC
=P@oBH,G=On>?R
8Td@PJD
ML\ .Yd
^n'fWH6}V
PLLf(?wd
t]lGMH
HzlS:%f
KW}9M_:;
3%9jV$3Q
-_j l}: ]
t2`E2N
G?!G:z!
+Wza LCn
^]Fpd9.
BDxOTG
{EK&P>
USj_qx7I
_<J0%thY&qh\pZV24iHv
\i5&FN|
E)|@jPtl'
HK"[A/]
Z]~B3uLJ,
#7"e.A7G}+
KP^fTKVIA
skSm*-ejR
R61Su)K_Etb
ki;u%S$
0'A\,A
{]T_&-~>
`A%f"N.Q
5+24t_+
!(__`.
uX^I&v'CK$E
12]yYF;~[%qP
S#6/t8/-W
zv[WJwl!|d}
6PosVC
S"%fV-`bh
2+GP%$
dveo'
Kf)7@DW
v(?v+.
vtDV&;
S3kT&`'H
I.i=C
"wtb0\-X
u8}]vkw=WG
"9]"Y3
A%5YQ{@)
@Y !-;sTV
SHqNR0S
t'J#:::r
C"C9"2s[
r/LM3f
OKB#m"N
2<$Xfa
$!"-@ 9H
'Ie]>O
"}3wfTt}aGS
NOuvm)8eQS~{d
nk{o~<mc
OA9`=U[+;uo
_^[Vm4/Y
X8SLo%#M
5* JEw0.2Y2
#3${x9l8j'p
ClK(b^h~T
Ih"Jc1_; ^
2Gwdq--{
:&N'_d
wPXSvEEAv@zufPI
Kwe!#k1
@%V(L;@
/2Nu3R
(e2fnrFG36'u
FRHgi$Y #
K^8Me:sZ~-K^n*K^
ANzl/Q,KKhhpB{'U
H4%'UP
{#C_K:+
i7/1F4e^
i+d+[CL+=hqj
W2APQNI
o/,}4'J
W\GIH0E
oGv1KpHY}
r1Q|w57t
-SZVvk
seU?M$^
9GOd$!j(t
C?or6D
0$$je ^$&
hLw"*}>pT@
u!h[?52\'Z
(@SZjO0V
UFt &%0
EnrA+F
;y|$>XIr
J;R&KFK&!
hh1dW]ZZ
;j,E^0b
@|-I(/
O'k#0<at
C0>9EuM
(W?@"O
NNY6`$
|_|Yrh=M
Pu$+>)h
=71fuF\'y1
bnZ1+#>K=o
At*}y"A
E8~SVl
B*ph$
A+Ev()
/R'x^@@q
BM#mF
;mWW7Hvv#4
)v[P~N@i
ayY!a>3
u$$}`;'
F&B<E$Hx
t{^.Awo
DPpA"t
H7Y^H"-
8<taIT
&IPQ9+S)8
0K"6Y]qB
zV_LaO
Ht2u4
Az[8, nE
N^x~Y7cIQ
Re$~@41#K3Fq
2[Q.pO?
4t+^%#\inVPNi(
ZBrX,.?
GPWB=wSNKP%x
j=&sv) n,s
bhxmg
|/%+_<l
MpwL(f]K'k^Rrl
AtjS G
%x$q|DVz
,{e&),S
PjFQdAj[BrXU%tR
%VVEQQ*rf$
UsR;}mw,w7r]d)^
(X 1<+u
T'}1@v
6`89t>1%
u%~Bu]`
f<X.f^
PfU93%{
GEj(v{
~I^%Y]
KcpK
.~L#Vu9
_kgZA_
M9nE=u
2eVaN,
'5HNBz
X`N_FOH+
jY +$t@t
CUD (+R
+aC)dN7
\3tMeAK
Cnu&>rJ
|(p8Z
}?)js[A\
LJARrqvH
BD#M wD`\
h%|[o)"
pR3<(-$
^}H]DCxpy
&>M:>t2
}"gPnn
,1<Ae (U.tRGXd_
B$PjEYj
l"WX1.
;cBL'wt
qGA"}~
qX^Du[e
NuKu7B
6v4CkCL
TI<i*J
M1u|UoB
$Ob"WE
" %?HMF^
G<_ST~'z
Z)ta;hC
3_0,&-j
*h,YCP
FPMJ!)(+h_
q#r\[3
EHU$R$=!:
d|J`a{rj
;u.3\9
d`X2}LdC
mv#J }MXDJ
GfxF'$4
B]j4)
1i~(G6mm%6
BzUHlAP
E:YKIt;
gQ%xYQ`$T
"E(t@J
Zb:.qxJE
IazBD&
N@?l>1yQ^3@z
Q.E.%M
Ds[X%:P
$# #%x
P5diD 3
pa_*CC%AleU
?RD<Pfr8=
CCJy6Z
" {^VV
H'!K0X
"D4%!z
.Ob%0Z-kaT
!L@7 8g
pba9d loc
tin HL
EncoPitrK$6R
PJe,Flss
es8 mm
ruime oT
1t|upo*h.C)fba^y>I h
P8$H$2^'um
^5PmUfv
fmio2jb?
T0(doeubugy!4yovh.IW
$of:mJd-
((=(/(r))
a<E46Z
DMaid"2
/D&101>eaRT&ph
B44(ad !28 Ha+e6:+27yw8SkPWd8d5!puQvi1SD
(4O`_V
8`1995p7!!R,8
$7|mwha&
u)WsX!2
p)BCd5d
f,VC+"
<p^sgnfCPk{wh>3E!\P'C: %y
xppdAVz%
16XUE((N
#$%&'()*
+,-./a234
56789:;<
=>?@ABCD
EFGHIJKL
MNOPQRST
UVWXYZ[\``
ijklmpqr0^u
vwxyz{|}8~
!50PQ) 8X
\jS`rh
rPc]('2WH
e>o (2m
`cb1TF-3
Ge`W vS<1U`r
ObjKlI
Gc4agBxdUS
ER32.DLU _
URVq JUH:mstL
^P%b^KN
Augcq<
ne Apr"il<Ma
Feb+uxJUn
TL HD(qyD@
d5D4FF
$ X%CLle
tLr'8lxHQi
yGpM@B
%AbrHy'
/=Tye[E%`g- s2@$g+b<`mB
x vuKy%ib29`M$bTo*hYPW
?R8;PQknD
vfy#hI$
!RTTI|
p\P^?A7MH/sdsG#:2;RJsK32s
efa;O+
"ofDqGIb
/->p*g
FVLpDn!{
$H"DxlA
`$DLd9\
PL"HDD84
0$,H($" D
$Hx"lDX8
$HxT"4D
ITCONUT$(/b6X=D%KbRY
0.15ygh
s&RAS
S#A;x8HQ
d$r:1`
dHTS|<rNG
qr19#a!
|yG9#ir)9
5Ge%r9
9#}=m
sG3#cr#9
G{;r>Gk#+
rK9#W
wG7#gr'9
G#G_9
?|oG/#
G?#G?
UHA]@@D
[Fk3IVDYL$T"
S?)d'RfNl1d.
3{5-:$)?kAdlx%L
!"1DAa
p l8@ +
)JR&X)l0
iLA`rq
eLXaMH-
i]Wbge
AUGgpn1y
`MGi'Ir
h]+o*7
rh.LD.
P8%o3c9s(NRmG
(dmLt!h
TD|:NB0
~X'zO)04
utA@@8E
m!(yz`
Kernld
VkW0L7!ab=2WzhR
B!oC%6X
tfm41T
BMfe(aIx\
,(Wfd!]wjT-
ur6nMSV6sULWn4
Ri$yPn
.xIRzB
4XS\ -285l5I
1*88.I839
Dw*rXp_TSOPXgg
o}Hf$.
o RPM8$
9:[Tb2<
lG$BP(:74-A
JHK2S|LXLNU:
b$_sanuy
ex.btPFw/?:Rpk
ifPRst
~go<W*
rmdiH,eo(nd
(s%<cN
v~s7&IOL/lnzg_hlG
MJm.m)y
,W;ymbol)X
+s*'PNIC$mLE#
wh40lzQ F@s%
D/7hV$%UT4
KE9RNL3
XB ~HbEhD1
<I8FF!DS
9/ 4HRP
p|+K Bt<C
@KGyyhZ4}
m#`'g(8>J
-*:1G",/O 0
S9#?|qqAc@k
QB,WX^
8l)Q<bx)
J$VHdz"D
$Hzy@S
2H@L"ZDd|
$H"xDfZL
GT`Pah!!
_gf&>i
aHand4
DMouXJN.>M
$Cu)nFIv%
@0^nD#n*a$
DirOj !j*
frv(V~cDh
MdByOodbCh
AcBlG%N4
,$*/pE$chw?
gibRpIh
Xm$/R)oy%82!f
Bn`,vG
wxQuiH
,'mKxF
W_X89T
AIPHLK:
UhniEs
IsBaDgK
)x?>9>sI
_VQDr<!r
RasE;,
^M/cwO,
rcPHKK"(E_pc$P$.
pRpz8m
T9}|{<
9I$4O@O
(QJkA(p}%
AB6@sh[B4:CM
#ACP4eR2
WL`Y|Sl
C ?0 
Xt<C<Dxd
t$Hp"`&T
[2 5Fk1B K
^;_<j!2p
8"4D0,(
$H"DL0
x$lHdX"LDHD8
NmF4":DYw
"/DMl'0AS10;
6!$f+<
2'(IFf20
8X+P(V
U'9p||B
u9vHMXB
R`%uHh
$#;1az:
UY~S|
c%C1<!
I-64OS=kY
AgP:_p.K<Z
8w.!neBp\
@I3_zhS
9%S&`2
m-p:GB
UXI d>
p]eU/u^Z
S3>V.8w@ q
KV`/4><
~+Co:QY
&4O:DX~
{GrJ.w
c<FEZu
cMz*wRq
O&Xk>?#
{x$\h,
>2b_|U[
=6*P?;
1%w!H;
^Y1a!>K
.TEy{7
^"z'0h
/WC\@`_c
g|lbs;
"pG,v~]pU:
zn|5?@1(
#Gi7lt
q6)1m9
Iw<H7H
_{^@2Q,
pmx`CX:
n3y1,a
@p7MTv
f8$]xhk*Z
/{@yxw
gd9:T[N
Y&X(i&
3Z}O*%{
kAsC6]J
#2^ CA
+9z*;G
7?a~@$j
%nU8!
_)Bj-(0
Qb=,~9Z&Tj
E7*`rs
C[rzOq
HFo"u
Fs,zju>-
3K,JG{s
7i-6p6a
*^uvLI
MRw:W`1#
X`_!uN
O-@?}$
GxOHsU
\Y3_w v
D@`\MJ;6~g|
T6]UD|@
S2v\1e:A
?j\}J3
T"?`}9a]Xn`
(,1PJ@;O
dT8=.k
s!BT@w&
9Ub{wu2
f5Nc81o,l`
`l8`e<u
Z/>=UV<
Q?%|y'
X! rS]
];%,2
2/np4&
vp=Sa|
r:ctU
eWgmO&
hH6}i
N6M<?c
dJet/_
hmXp~T
TK.GQ*(u
|J}ACP[
@Y~N(qL
]TNGRFW
D8A,BHIu
x2y=/~M2
^O?[-3
rD5,r
U?sxtoy8
B>q~a1
EmfJ0N
`*Ei~f
]{N>OK7
Z>FPX[
zwild.4
5sD{vnz
QKqC=tFw
R"!5#8
bI@#X
(u:'`sY:
.La`#N
Q=by,0
(7kvR=UaY
4JEn7}
NCx!{x
9@^!pr
y[*GM]
[~J(s&?
u!r,D-
W@L)xmzn
mL}.OsC
eO0b:`6%
KwIh`u
DMgH\,
Xs=y,
R;|uYV
fd#h>J
Lt;m/Z.=X@J
ihA'zZ
ADwP)J
w)?e7;|6
#mjySI
&*4@A9
q*f9FI;y
n`@Dx
c&9bKS(Pg
1jfPv$
?,v0bV#
f:\J?!
]3~7b^
G_VvD9
2FX$<O!
\f=| s
GjX>~i1,
?|Tk_$
Od`{7+
KRVw?@k
s}>^So
FZOg|aO
'F1?=H7o5H8<
N^?Q1r
e+v@!IK
j@"d8
p|SOp+
3dG-P5c1Q&~
'<P>8Gl
8"wct;
7A4'>Ex0
l 0yV~
[1]:~'{L
DEmKAZ
Z/dafh
o?c7[z
{* ="=v,
b*-[NP
"%X,5vi
<r;|Z@
\[dRcxB
Aq|lCfHD*
c3[Cs=M}\
$3,:L9@8rol
(s/:[O%
(~>AS9&;
vry]@|E
T!:3+Wb>
<IP%_`
dVayfo
9C qsgJ%
*>\@fw1>Lvdt|
4gP=*/v
G/b.?=
'](w:d:
vZ$dB
Qpfbeq
<8q.{b
y+qZgQp4&}
)#x}O6tD
2Ep8*
=g@4*3
o>ji.I
q]I}{!
vsgm<VdI
B9v5'?`
h.,?A
|4K0vd
lL7k m
b!L)w'QOd
H^Ws91>
&VX@)`_
jh/0C$'
?1{=5L3
y_f<`1e
qV"G@X^
?-8U!
IZ?3>a5
9`6ECV
<8v[q=
v~_PO@]
:14kxTq=>S
bxw8%;
/#=)h,
qQSx7
`AMKE<a
S'*`?$;
ZS`IYi~!
(}|M8Kx
3Re0.&Hm
"\+h W
<2^6,Z
)7ajSV
&VBGIH_
Y;qQ&_z
IV`?F4
YGj2sua
Vx`(6F
[Bts9L
oj_uT'
eVPtu
>yR1bB
f<'$Q&[
ML~k}9
JwE0}p)
TP"OqpS
G`z?vj
`dQa2:
5'-v4p
*cM"0AeqD
A!mPpT
6w9H-`9$
6lt9?v
NW|Bqq
/}p>U.
UN?zn@1
FJ&19,
)wJ,6s
gS8J9KA8w{`
eT|MA
+iZ8<TG
Pe-c|~f
'R!.\:4SP_I
hNf()8
<u"O0]/N
D ?z-I5v^_@
S_f'yt
kL>`"$
Lk]@|g~
hq/.=;
tT RFU
b`@d[-
+X56?xX
fl '~U
]wG@J
S0V<j~
8ouq_}s
| uv5{
)XdLzT{/
>OA^zq
`Yi:,
f%h#@kveB
db>:jOVST
6?Lj(b
j|84T0
{]}|X9
#HJ8ch
p.SFT$
j+(`G%
.i`+b7|
TBNa7Y&
hn6"=t
Wq%x-"6
EDT<'e
2vnU9y
1ja0:pR
Gj)%$"
)Z3v7`
~)oqt0O6F
{]$1g&
<4'?!\wp
r Bh{,
H3lu@
wfiLU|C
GDnKlR
BU(T:~
xuO0p4
u9Z?/K
U;J2b4
/3w:\Z-
S0upo=^=Rx
U2C}yy
Cyq H+
"0U<\G
7;x8fL
uC@/6{
ZGwoFp
-P}Wv<bm
yOeK"L
$Io!ZX
4#~@lz
b.[psK$1F
YxQy=
b)i*j8p{
<>b~L c
5%<|Xk
`j-c&v
_` 0P|
PA.a;y
r?@l.
&w/#Iq
`MC9DI
C|~,=0E3p"
MA8Op:|
@$(~0
@PqY,1c
R2*D@?u%
]?0L^2
nPPFjd^
fkn>r
|Vr90%
s" Z,V
8lgAX@\
[%C:BU
Q}>]4
`Xx?$
bED >P
8.J5{`n
^T&F
~:=Fv
`Z&E_`^
-`htz|
g<}|+J
W.bq8C
GPw<"L*
H7Z=9:$
4/?Z?V.
-e0Xp}?V
YKv+J
XU> Lh
9SbJ41
me`RQ&L$
@>q48uj
z:>':Bv
Ise@;[
0Cs"h8
3XLo]DR
b`a]Tr
DH!y&Eh
p)Ky0^
Vpavy5
GV3mFy8B
@*06otQ
$.0zZ!
caC"-Pd<3
I){K>
Rj_hZ
yY,!==
Ou0z9R{
6nX3"r
(}$ox~
:$|O;qf
:>re<9
SP1odK=
CmVJhX
/4!1Ke
Qi^hbF
\2WAJb?O
3Qao]
Q<G@}t
sa'u7i&
"iw*OaZc@F
*l'/M_q
5LN=q0z
40%N`[i
\7=35{
'E2b8<
]2\azHe
K]5';>F
?AJ@.}
aX >;
G3An7O
lb:2I7
b];%a>
fBDHq%%^`i
8wG9O|$~
|D_`0n\S
M,n]IX\
QF! 6i
Xz@-9x
%jsCK:,>X4n
J=-:H,@P&%
g jRSP
e/]0rT
9o(`cx8
J}cYJ-
j[:@30
l5/=Wc
y'u_@`
n` mZH
$bxOrz
DaQ\p$
-*.WSb
j8`T;%1
CL_=t
V1Kz<9%
xN(t;@
x%8Hbm
Dm30L
>4zWAK
f3k0=p
Mf`IJL
g54l82<u
,_Bl ;
:%=cl
w nGlu;
|wEmo<
JA L^=B
rU/\eW
tTwRJh
Q.#`Lb vV
Ozm&e
F8W'@E
hG`aiU
#Ycp+b
RWe@ld
E,yzR.
a#gF|
6w`:&.3R:Xh
+c-[R
PM;f6dB
D\;"h
po3pZb
B1)E@`
7XG^KdU
`n<Exz
(2:8W!
;sA">C
X{J%X\z
)BL2MpZ
Y)O5\<8N
`G4WY+
'J2#;w
s/c+=<
=\AR@kN|
ekO*>w
$cW+A'|
%hpj[G
@btgkD
ve 2+s
Z:KPM`
f8Rv;!
+H{TG,
J?FF/P
@-cUn
fMV+{k
y,[=fe
8mG$A&
hpB^I}KX
b%d*Q,
)^C(u;
TW~ .z
@PeC6*oB
|"C%9tB}
H0Ub@Ps
<fO`6N%.FG
~C9VdCZ
>Q[1{P<"O
-O\@70=8
QXz{to^
E0.IFd
Zc9QCt
wxiXVj6a
[D0Sy0
VCm{K2\]9
uU1+fW
8PP<n}
:'o=)3?
Sxpmo{|
+pm:Z1
tv}*~&
M@P/0lw%U
-`7wj,X
tNA9qF-o@
furz[w
6Dywwk
!U1ks
);SXy3&e]<p
lb5QCw
L wr.I
mObU&
\k+:Y
,K3G,.
:6Nep,q
&OkpD)p
}Y9`?@:
Mf@_my
|y/bJ,
l/Y-KXV7
4DR\cY=q
N&f1k=MO
>"RVrJ
#d-@\
U@@^#d9
0WVYi9
gy/]0wSL
i(")b?50TC8q
"CeGU2
$s2&"F{
Ft|**K
N.CS0KwM
?!aL=`
{h$P9-
f&~xPT
RP`swL
_C_@BQ9Aai
*<E+ea
:4~TGf^
Y{"L6c
ywIKSj<z
0R#]b+
IDf*([
}l4N+&V
("ArR~n}
6XpBbA
wQi'Zj$_
nG~&_w
ctIM7d
).62p{<[
4:t"`u
rL>%m#q
qb&Y}
me|Ov=^S
Q1/M8"8F<Yf
EgD@-Rm
LT]fO9B[
C?n@|1
!]-.tR
n:(>DQk
FaNpm``b
Ls-Y\b
mk[;%u
2b0`u8
w7 F*1
`S_Y0ab
Ba +}M&
3G@Rci
&.]kN$
|xNGjH
t,T;(K
KF]Iat8v
`aVp.eR
s?foU_
5|s%@4
Ouz#dn8H`
{}]M`bO
jZX?K'c5C}$
wuLhJp
L6q(IM0"
e?B"3KzZ
V_/hvu
w#z2'{
[I.e'K]
rt] 0u,xW
?yA>*1T4=
_oGHB
1]U2&\o
fh;{`K
QteO.d
G@Mn(9]h
k&<y'B
?Bg{b)
quR@P[
GT~SgRP;/NLb>*
+w7D;&A
k6URuX
+h!|q>w.P
y<o:1*
Q:)5y
P\,<g5~
^)'uV
J]MuAf
SRz,9d5D
O"+66iu
Q{WpPTR
ZdiQ.=I`
NT U p@
`@IVFR[
yOl'31
z1,er|
V~a. \zEG
HsepTq
m_2Q:razZ"^
(&` F;
{DGf'p@
VBI*S_[7
9qcC".
2:O^"T@H
,De^E
6zFS
IbM\J7Kg
HVq8pPv
Pyrt$f
[:p\1>
+>{$I-
Xg2tJ^=S
'w9Fxz`T*
fpp(X8k
u#,8<b[o
M'xz=a
L,rLn&
H(|).nW
:.1q@DP
w1>x\M
*}YLq6
+TyNFs
2;4HqI
Xe|JjcX
6d?xO
5>8 2t
]NQ?q9
/fL#;
y;=U5\
8LzH~[W
Id.L'G&=b
(LvUP%g9$
m+ 'h K)
&{RmBpr
LvTH/=
ko0^?W
_cFUCP
:+]8T1
X?i9,z%
@sdx3kv
d"AyIV
59i6y
MS5v3[:lL
;qjf+h>
]-U_y/
?WpG 1
ZxIW~p
{^SCp(0?L^
n=0w/+
EI4(%N
5=@$!#^
;(&=J[
.3F?S
|7;Y,IB
fS6PJc
bp2-&\
<S`!fL
{ADCuc
<4G=8)
&Ki@?p
7q,@O(
8{l!:
A @d&_
;_1[k3
0mj?5*<,
'yfw`$V"C
kDC[\s
cH$0M?
&R\ $o
M*"xs{
_ L'E>x
iDJ fx
RJbVUZ
<2$wR'
qr A^s
/KO'm[A
0q67yN
(P+^Yo
c2r=>^
|58!Z?0y
rwQi1&
fa$pvP
\.GpMhqp
~@Ktr]
R]MQkH
X3"TCw
:18?EN
'g7+bj
$LKdw<
7$H{f=
2uNJ$D
^B15:j!
b'l?xf
/3+@6
B0;H0n
<zGXeS
HiFI^y
;RFlyxm
1D*zMr
Zpg;[C
e_AUKb
m?C`ZY
k@j-XR
,[I=
XOY*4=1
v@V!v}
, 4m:2+
vz=lvL
g5EwW
puthCV
^D=A,0':
EX_G9c8y
B9[*;q
NT;(tp
?(D%*G
Ux op
}4^>~
p\Q.{|
k=&@g$NX
_D ;r3
/!$?OI
:<\+N
@SPFv]z
7GSa0
Wus-:r
V]b@oHg
D."R==1
zEI3eC
ju5aL8
+k7ADj=Q
.!`b(t
.hPcuw@
-Vv< Q
'3W:ox9
3ey:7M'9tx
J./F9>
W)tCK:o
MzR_&G
Q;ZE7{p
4Pmp}L
CDoCg#7
#ro%L&P{<
Cabjfm
;Wz+=hk8r&n*
V0yv@
e@6h;:P*a{
}NvSMXa
\Q-uH(>
Y6>QKLs(
q(/@!]
>)41nf
"2W}7)k
V5SiIX
-PTxL/
^t\-Lu
{9bmn[
?!LB^-
:!^Ppu
q!v~YV
o}@F$/9
-ye_`
Z?]=mM
,5~-`q%\
<d(gHE?
xJ5=/n|)
"FL/Eg
LNx&I1
lJd;R
AX$|:)x
To1u`+H
Sq}t$%
c,q3`4Q
XN0=r)68n
=w}{=X
!?Sz%x4
D-{PBV
| S!P?
D;z:;H#"{18
Zf5?D".
s(@2T9w
al!PlD
eNuf"O
%K]>(@7Fw
kKDC-
67_kXz
Uu,X]V
Wx2b}8
"*M3#l
e=^@Z
lqK2z\
aZfM9o
?R1{]`L\p
Gcqj)*
{DQL$Y\\
Lj@a"l#
vV. &Gr
y)P_[f&q&'m
'a+@S"
/v@m1_\
$HYj(<-
p:NO9`W
SU4R]@VK
,+hf:}>WHb~
$niv\Q
U$LIQ}4
<: Per!
R7qNe}
|]9-Q{
nXM&'{
L].H+v
lt01|
]tb7;G
JB *(bc
^$:P}&tz
B.iD>\
>-p:<9
YeypME
Ajc&"d
t\z@{?
5b [;Rqw
R]7f bk\
@"<xFJ
IphS,F=&
5|b^y6y
FTNt`q
7Q:Y'otzk
C|`)9nR
o^H!c7
n %=NW@8
#H":@|
xO$.s>C
V0Ng1HO
(6.YI_
:f3PO*
S_hMp'
G`@m_]g@=e
JOVB_X
@sg:}H
%f+Mds_5=3g
WwO@%)8FMnRG
@{k]~F
p@+X8_{
akJ<V
'^n;}D
FY)X9x
"Mlpf1
c"+Jvp^
U#AC:rd
je738\G:@#.
4EZ;u
pjvL95z
'(;xjGNM$
Dn=&(>
}wh5j3?d
_w7rt\;
-3@Cw
&]8@Z[<Y
a!Jo+`70pB
=KGYN,
sqemi3@
Y!)>z-
U%'*8X@lk/
h`#mF1>8
q>*7\B
}U;N_#E.p~%X
&[+?w;06
7Yb=l:
d"0kq
}0b3D#
&dKg!os2
_]1}8x$
m&HhdZ
`6b{+}
@98/i<u*
~l9!MA
SI^vkn
(azb@
uv^e@b
AnQyJ;f
q!(u/
<^}!`=
O 4;E}C
;@HR,V
W:jExm_
3mkf>z
.av/~N
MLp?>d
f:99UgD6x
l/\0u"
7fK'kqT
#Hr!;=
goQl}A
/gwUb
^fd i;
pe1:7$]$
r=$ibx
S!k,;$
]eac\&
lc%+@^&#9TcE1
08#w"L
K`D?j{
]0aPQh
^"c?0
;V=Sr+&
B<L;inWo.N
(j@%=/.-Y`X
r@hqG?M
"?P~[L
q/`G7:Qgltu@|
.Tkpi9
RV~r=j$
}N)Dq|a
4'=+b&>a
p.Y`V;
IeZ\b[
[|n W9H
E>>Oqu6S
ap6:WH
!@Wr43&`
@+(\%`
%@Iubs
m[b6B;
%{m<zR
sBE1(
C76U}r
ksobc
lDNv2p
sw\=/X(
*=:H;R\
\NG;,=
C 0:<
q@e,P}
<54{]
p&JU2K
<!;qP91=L6?gp&c9
h>4_@W
Uq$|`R
~!v;$c?_
F}cG>\
xO!B6|
YvM4)1-q
hWB?? 9N&E
4nC?z
el3>=~
&$ZUk6
2/X@86]
,ov~RP
B%/J$^
YK '<E
t~7Qx\
8MU;yD
-Ohe=x~
=W?evSj
e$~yA
4:UQ@D
ciW"g*7J
Nw=Z,b<
$iD_1h
7ekd5C6
Hf^9we
2@`?w}
~SEgM'
km'<:]HCl-=R
E*.b0B
*uI&93=L
XO3;C
~#HMha
sq@$^"
7_v1W>m
NW+ wEg
Io@!/
UYZNoo";
^'sw@C
GLaj5U9:
259U q
sOx/X
43@!%P
+n{Mq\
-F@hzZuW
vFH!;'<
Mm [%/
;usz,9
Jz--&t9hDKz<
?=j+<EnZN
7j)50mlM
~3/n$'
NuQKm+87:h
C8hV9.
?N{Hg*
Jq 7FA
UsZH=;{<5
h =Ai)
/9Z-hI
b,UhX
,oe91"
p"x(dJ
"Jq9'U
wf%9bu,
wl6Gc1
Z"Fh?{~
u=-]?w
\v|}H'
<h*i?-
1mB+@5
BB.X`8
-3j?X_[
.I<Qfq
@_aqD
z^&p~%
h@JCUx
T50nbr
CjAt&sN
:Cs'A"r
|`.Qa%pz
U~T@9f
x2y+LuO
.5^A:'
5A<+@)
`FP3zY
:Pr,sy
)aB`C'
z=?@\J
u31,kR
:TN.p
%8bQD9$
L:,?#
1GxOuo
VX:c7IT
H46`hAt<
8?<1pE}s
U)d5`;
[}>vZl@_
*) ]S~
"{AEQ(ls
@pq!8[
)^S`eEi
lgh">v
$@Bo'
XnN@Qz
UgH[F;;8
[n0h<3
=")@rm
RD'T7A
5Pd_4v
9`R!=q
|tEFQ&
:F83;<
?dLYpI
M4L1CR
WcphL#
R@/;9J,
M8;%@
+&kq}&\F
JWXnAr
3[PfKU
:pY\<}gZS]<
hTKipj7
R Aj>p
pQsk}Dc
O3$`B:
I=@`Oj
Txnup`
*am#fJ
NRcu5o=-
3:^1af>
Iisw<?P
X<Ye{s??
XD)':K{%
uC_yGF
CfTuhA{O
NG@Uox?
3|oVE1
jRL5=?
YmwBpr
oiZ0H
_$'[a8{
[q.s<
eXPYp#t
S!4g9/
cU1BbG
{"2_$5
@?:z74
[Qh/>)
UPFtj`,
u&tP'`,=
<Cjab$
sqNZS
fBojz:
/F{< V
#`@*ge
l/0sRi
hX?pX>
`%_@U>)
vZ@B]h
rC5tqv
P#oF$8m
W@Dh\/8
rif va;d
J6L3v
_|#;Lb
n!<?%
pO8\LQ
=iE=K8
A}!luQF
U@w-Tpj
c=DfW2
~<Q*fh(+qnr
-YrC?w
T,?5x8
a5+S)n
vUOc|q
p!)lw_.F
wMk dh
pW`9%<
Ws:8 4.<}
xkW|,~
70xs8U
OAq\$6m
Bjvl>=
=ak5nM@$r
v\.T=FO
X+(5bl
hra4>p9Y}Z5!+
Zb>":Y:'
;x_T}
?hR+3]n0{
]OFntH\
%5d0a7
*:<U-:R
MCp"|=
$8r0vS
p*\I]q
E5~rhQ
[&Rkg9
c(!@&P
v9XE`2C
!9o{Y
!YkK2^}C
`6<$4xcL
$]v.3d7
+"xK.G@'@
8|Q}c^
`XBlpD
vjP=?]Z'
*.U/_N-PM
~B+3?]
Q]M'@q9
GO]BULe
CIy$8Hp(|
vle0qr
U};i6&
/+M*f.
L@t<@=/
|Eo2X]m
L!Xrf%
95*]e;=_D-
r`8'.={i
qNpV(E
fO'gx
A1K?{Y
/5s>"}
5; \=>Bah
m*3oi<w
l<*\ m
D%8o\k
73+KQt
<D!@Uml
*'6M?jBA
#IUHb7 k
=]~>U&y
_k*w3K
>-uEN8r
1v@YZ{
IZ#"M
_eU*(lq
)}$nA=;<;T
DKE5:g\
NYs=>y
=@x_s,<j
S'V4>jv
4>+gx=q,^
bHz~&8#
;4q8IT
[^$zZ
B&CK{89
Mg?n>x0
C,b3A0
s-8(T:
FG@kp"
u~R*3s
WH^p};M*K
=gJRlXq
bDd$Ck}
?=x^p&
PC%, y.8=
"9hR.DQ:
yB.v/[
n319+e
's#4be8
Q5-*ak(
,</}~|
/89_uBU0
`Bgn.?
(_J1!H
rsz+7Z:
%[YOg~
!T(Fkp
x8W<,M
iJ_S&c
t@%<]
Ic]0RQ`Ef(?,
KO=;?4
@ e*{.
~lPg(4
^Wm:'$P6
<cOV@9GY1
x9peBK
<8s7@wq
ytL@Qz
9\8p;vC
'6Eg>>L
@|4jv;
gH\jT s
,5?pz8{
C2R W4
"p*5f\
n`-oQ
Z?MR&
;2& 8S
RD8U4t
'4B-]n
ZC#@"Q
=O~E1.)\
?nN(3
oIvaj%
^](_xA
-W[}&z
gA:d8p
_]>%R6
#DFu;OK}
Ui{<1>^
[Xq`I:x
J@jpNH
X(K?i.
4IgmiO
1Qveg!&
}B'88
v%.Oes
b(&t,;B
Cm3U{}
#OzTXK
H+\y-p)F
S2qze5lmg
'A`m`9Zh
`7B3gG
U9jS'_XS$
6-9zq*
crG0(
@[)A=&
N2h-0R
2`7guN
>R'<,?M.m
]7[>,N
tSM8H}
4T3@~Ze
|vY=hHF
ZIv[gk
D F`Gs
E po`+
rEv;.F)?f
g}c=*;
vsHo=
hm;(yn
%FnA@b
H4dVh-
vnxpK4
wp?HLGz
7H\P^Yh
h]OjlI"
X?QI@D+
?a7}&Ho
2p=-G:
bfF jL
`=!^3
_J4 K}
L;Es%B5~HX
;_$ewr
<Ofp+p{cX
dp4:}j
<@f$YL
&g%vP1
[Af_`+,6
B)lz/>
p;@5MU
Bqt|zeP
Lmu$[:
(w=jlKS~
F~S&V[
gY! x(
4$,G_ 0
!fyw`/
Ef$S;
4!j$Cb5
Q?>YS"J
B;DF3~
glKfuP
BlU?!:
@*<9Ag
?N$C "t<]rGy
-=93yn
)Wsau*
ckfqF$V:8
B5?KwGGs
dMl,CY
<l#~8%
>HGwu,HC
)B'kl0
n=A{8hNU)
pd~N?unc4"
2Hr#@J
NYxL|e
9g H<6
)'pMJ[
tfF%T
3WjBCp
$OFZ+l&Y
o>uL8ni
yV8G;PX}
"yH$W;
efPKu`
wbC'O79L
~yMPbc
;8Py~*
V?~Y#v^
>m7-}d
I.:z0
LVzoX
B-`x a1
<>/$5M
V:Nl>
xg!mF
:pZa<DuW
E{OMQj
8}([&D.*
aK&(S7
`Rd p~4
gzK.aA
WUk}v:
3\rj4/
>Y=r,,}
NL@X36
'$d=4j
r8*HDU
L$a#R.
3T{AO
UxaO`l
#97-i5|>
|Yv@;6
MNf`D
V OuD7
*{v</vQ
}`Ifar
1NL+XD
'rbZQ`
y=rz;\6Ko
oXWmxB
t_pW.wx
m?E@Dc
)jh]D(H0`2
H#SD$%1&
U#XiP3Z
PtPyP}1,
3eE@lU8|
$H"DFpp
_8 ][Y
X8B5T!
SV#04*^/a+
'F`S'&0
&N?!`<Q=`9
63[4]5qm
Y/P.Z0
R.BI@D
21TSav^8
|}>qog
_fhsnHK
~ytMcUbr
xH0PL3wnG
rEc.(I1YB\8TP0XyK
zpT8i7
rYb3_]F
1[ThL8I
1Q(bpc3
@""$A.B@ #%@-
2eFAM?2AO'L
54 CBA@jYPQTVS8klZy>XR
UiHceWd.a/=0@u
t^}zyr|
vr wsqpo
!TBPKMNOLC
O% QFB
@>=7,A
?<8;$O' 8
)O6530./
21+*-,4{
_)dHkV>V
hk\p-#,?
p.@y5e(
g,lxxX@h
(E0{>_XPt
JHj@nr
@Eh~(q8X/x
o(yYpx
,z (xB
_$vpz
xB|O0_
_?:dC\#l
$ f k mn
#>i)U,E
jJ|p*d.j
h,0tF'@
O/}L%B@
V~lM!@%}T|
JX|X`*Ucz
fh>=&Fl
E%x3t!6
H5<Cp3h!AbouXA*.
?pC>3U}df2r
Y*QsD"
7*6j`x
APADIN8GX
8'p)r+<'K
6.X/w6Q3pTc
'Q:VfdM8f@
pWpqp[f.u_SI1zP
63!&7M])
R$uNBXf`*-IEr6
i:U|(2]H;0
D$e^L&X
<|&445
i0YpOf
$~0)#q&@A*
z-X8Je\
6p"T_.
7 $DE84(2%
30',M0
U8%+2W]zI
A8e04[
Owcr8`'=
FH3FJJ
.KOmfM(l
e?YhRSp
W@U(-A
Z[DX$LR
p&#Y.$
30.FTl
S>8q,g
0"x[eC1"P-'0
f[MS.d
2G`q82x
U<=mp(1TO*
4N0]2ji
m^X)2\E
sS|#Hp"lT
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
kernel32.dll
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
USER32.dll
GetMessageW
ADVAPI32.dll
RegQueryValueExW
SHELL32.dll
ShellExecuteA
WS2_32.dll
IPHLPAPI.DLL
GetAdaptersAddresses
u(V$xV
+3Y=}6
@SPP3u3t
+DF][_
LoaderSvt
N,aT/j@h#l
AXR?!M
"% u?C
Origna;l mvezbus|:?%X}NVw
loctin(8AdrT!|
`/tf%E2
1*pD<%t
XWU"$un
!CEqrsoL
dexchksum3BP
Q]V`atMH^
U&,dt@
<sRQ44
H=EY@/F
t5;uV0X"za
JZQQ![
2tMs}(K
lZ`;2=42
c}NPnH+xR6^J
e+RI^g"
!{@PWQS^R3
Q@6HZ91oM
A6ak'mK*I
(E!@<
'`Qr3/j
DlC"*
Epec2l
dr.\R\O: Impo<:kel32.StPo[c
LW6ks#z nf
-m.`0(!
8Apli4e2S
%s5C.ntb[ &v6idSDLBG5ed;%3*^Fus
M+{`Bo8xA=w
Exi)ChHanxdO!
|Vi[P7
PEC2Db
DebC)%01X#
FV D\bke(h#
`t$$|$(3
r+|$(|$
y FUSQWVR;
ZPR3C
Z^_Y[]
RSDSn?UN}
D:\PMS\pms4\Project(20131120)\GolfProject\bin\GolfProject.pd
IDR_BINARY

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 61714 8.8.8.8 53
192.168.56.101 56933 8.8.8.8 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 58485 8.8.8.8 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.