1.0
低危

1a79163623eb30040dc13cf1e8cc5e671c7c82478875d05f23298cfcce963a35

1a79163623eb30040dc13cf1e8cc5e671c7c82478875d05f23298cfcce963a35.exe

分析耗时

194s

最近分析

372天前

文件大小

231.5KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM RAZY
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.48
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba Trojan:Win32/Skeeyah.2e563a6e 20190527 0.3.0.5
Avast Win32:Kryptik-MEF [Trj] 20200902 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (W) 20190702 1.0
Kingsoft None 20200902 2013.8.14.323
McAfee Dropper-FGJ!71338E749412 20200902 6.0.6.653
Tencent Malware.Win32.Gencirc.10b0ec95 20200902 1.0.0.1
行为判定
动态指标
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 58 个反病毒引擎识别为恶意 (50 out of 58 个事件)
ALYac Gen:Variant.Razy.551534
APEX Malicious
AVG Win32:Kryptik-MEF [Trj]
Acronis suspicious
Ad-Aware Gen:Variant.Razy.551534
AhnLab-V3 Trojan/Win32.Dofoil.R71981
Alibaba Trojan:Win32/Skeeyah.2e563a6e
Antiy-AVL Trojan/Win32.ShipUp
Arcabit Trojan.Razy.D86A6E
Avast Win32:Kryptik-MEF [Trj]
Avira TR/Crypt.ZPACK.Gen7
BitDefender Gen:Variant.Razy.551534
BitDefenderTheta AI:Packer.AADFBB4321
Bkav W32.AIDetectVM.malware1
CAT-QuickHeal TrojanDropper.Gepys.A
ClamAV Win.Trojan.Agent-1113760
Comodo TrojWare.Win32.Kryptik.bdxt@4zdukq
CrowdStrike win/malicious_confidence_100% (W)
Cybereason malicious.494127
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/S-68b8d1c2!Eldorado
DrWeb Trojan.Mods.1
ESET-NOD32 a variant of Win32/Kryptik.BDXT
Elastic malicious (high confidence)
Emsisoft Gen:Variant.Razy.551534 (B)
F-Secure Trojan.TR/Crypt.ZPACK.Gen7
FireEye Generic.mg.71338e7494127bfc
Fortinet W32/Kryptik.BCX!tr
GData Gen:Variant.Razy.551534
Ikarus Trojan.Dropper.Gepys
Invincea ML/PE-A + Troj/Agent-ACIZ
Jiangmin Trojan/ShipUp.rd
K7AntiVirus Trojan ( 0040f4c81 )
K7GW Trojan ( 0040f4c81 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=81)
MaxSecure Trojan.Malware.300983.susgen
McAfee Dropper-FGJ!71338E749412
MicroWorld-eScan Gen:Variant.Razy.551534
Microsoft Trojan:Win32/Skeeyah.HK!MTB
NANO-Antivirus Trojan.Win32.Mods.chwrvj
Paloalto generic.ml
Panda Trj/Genetic.gen
Qihoo-360 Generic/HEUR/QVM20.1.8275.Malware.Gen
Rising Dropper.Gepys!8.15D (TFE:4:t3O1L0ddV9M)
SUPERAntiSpyware Trojan.Agent/Gen-Gepys
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-ACIZ
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2012-02-01 21:19:21

PE Imphash

9d8f494813a3cc2f73d76d190de1e1bc

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
AUTO 0x00001000 0x000026a4 0x00002800 6.1607277883123945
DGROUP 0x00004000 0x00021860 0x00021a00 6.160046862763561
.idata 0x00026000 0x000005b0 0x00000600 4.710965762367937
.reloc 0x00027000 0x00000000 0x00000400 6.0216058408521445
.rsrc 0x00028000 0x00000000 0x00000c00 3.864589708684417

Resources

Name Offset Size Language Sub-language File type
RT_DIALOG 0x000268c8 0x000002ac LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_DIALOG 0x000268c8 0x000002ac LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_DIALOG 0x000268c8 0x000002ac LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_DIALOG 0x000268c8 0x000002ac LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library CRYPT32.DLL:
Library USER32.DLL:
0x42616c GetParent
Library SHLWAPI.DLL:
0x426174 PathAddExtensionW
Library KERNEL32.DLL:
0x42617c FindClose
0x426180 FindFirstFileW
0x426184 FindNextFileW
0x426188 GetLastError
0x42618c GetModuleHandleW
0x426190 GetProcAddress
0x426194 GetTickCount
0x426198 LoadLibraryA
0x42619c LocalFree
0x4261a0 VirtualProtect
0x4261a4 lstrcatA
0x4261a8 lstrlenW
0x4261ac LocalAlloc
Library WS2_32.dll:
0x4261b4 WSACloseEvent
0x4261b8 WSACreateEvent
0x4261bc WSACreateEvent
Library ADVAPI32.dll:
0x4261c4 RegQueryValueExW
Library ntdll.dll:
0x4261cc DbgPrint
0x4261d0 NtCreateFile
0x4261d4 NtOpenKey
0x4261e0 NtQueryValueKey
0x4261ec NtWriteFile
0x4261f0 RtlAllocateHeap
0x426200 RtlFreeHeap
0x426208 RtlInitAnsiString
0x426210 RtlSizeHeap
0x426218 sprintf
0x42621c swprintf
0x426220 NtOpenProcessToken

L!This is a Windows 95 executable
`DGROUP
.idata
.reloc
B.rsrc
ME1MEM
C1E~E~P
;E|E;E
]_^ZY[QR
e_^SQ0
h4}^ZSQRVW
|_^ZY[SQRV
^ZY[SQRVT
^ZY[RV
^ZQRV$
^ZYSQRV
|^ZY[QR|
ZYSQRVWt
_^ZY[SQ
lY[QVW(
}_^YRV
'o^ZSQRVW
_^ZY[SQRV
^ZY[SQRVW
$ _^ZY[
@_^ZSQVUP
^YSQRV
^ZY[SQ
^ZY[QRl
ZYQRVW
d_^ZYRVW`
aY[RVW
[z_^ZVW
^ZQRVW`
hh LY[W
nZSQRVW
US ZQRVW
_^ZYQVW
SPi^p_
YQRVW8
_^ZYSQRP
ZSQRVW(
_^ZY[QRt
ZSQRVW
_^ZY[V\
v{`Je
^ZY[QRj
b_^SQRV
_^ZYQRVW
_^ZYV<
i^SQRV
^ZY[SQR?
4^ZY[SQRVW
_^ZY[W
ZY[RVW
^ZYSQRVW$
zlPngd`SLFlLEEVf
.nryaE
QV1eS`VEEbtscE
3nPloPRordWG
El1FuPzA
EEEWPonVErvvan
rdln2r1rEirAEsEzFrePnE
vaEdEECr
AdieEPi
FVEGErElSe
dnsrEdrlFEPSirheSuEeeEnVoutnr
PdRwpaEn
azvFtEvliFnepdEEp
EFPdEFE\vIcnunPrEe1EFzaVFEevVaVitESEnEEPoMfnUPtOE~
ndXrrVlElezdntVeS1mrlrSntdSV
|>AtEN@1hWRKz
^jN}Hj0c
E++EV}vsJY
E99uPeEi
d^0VsE
OdxVKWaeHB
}4hGEhhjT
VhwjVE
P4E+]}P
!_}u4j
t<VPEE
^K>j(V
WXu"EQ
@ Stt(@
jMK-t<>
V]Rk^B^
PWrSQ^
PD|P:l
'0Y//`/
;7:2PF.4
(WyLrv
JqnaGe
2cp~I#A;
:=sttxb
i)#(i j93
>Q~u)~d3
=yaK:t8G[0yd
lHc>a/"M
jC9yyK
u@[y[i
S5o&y&B
a4v(:7
oO.tt0Ku
Sre*ir
OrHE:l
KW^?<W:
@6t2RB
AIRD[I1
D*n6&K(
Wd@$PE'
]JDy1vDp
%%+I1%
SUNP2z$q
sNZ+JsqqN
sNzPUZ
r). YL#l
I#7\OERz-
x8Q{
6&vCfSJ@+
0|yrxC
bs[jy~
}f6t!jWy
<.3D@A@
{RSYA'
D4Z$:K
j|.Z|w
@d&;9@:
5}A$a
DF/E3|
>rdHV~Ujl5gk
s2qq9b
H%ksPU
s$JPzJ
s2Nssb;N
9=%qIJ
S-HS0u
)(:GEt
T=YRlCiJ
jbDy]\T!0
e^=`%@r
Ov+=:>@8
?gyr&x
6zkv!}
F?8=;
vt+-mY^(q/gF}e
*{k4iA1%-
y^$#3|
f1nUwi
Tc4\ P
FNdFY(
vsB;ch7ra7H
FZWRN-EU6>CNn\"PZH
%)1OSK
2L?`DKX"PG
[+wf/{{I`
{5Migof
Dc?qP<|
g4srG
S9v& o+
dF['-3bF2a
W EZ<1F-
_wNvshyT.`
TV]twSi
BzWQ?Dkf
p|reIk
;M"Oh82c
RopF\X
6JtY_l>U
aurG(y
Z:ZKhP4C
&;yxiN
P8JxIh:
B>@^~R;2
mi3Y%C}
)zH-gghr
hu&aR]OAL
_J9-+f4OmoW
!cN03hdz
fBo`<tS
q=-=|]X_A
Zk^ETC}
=9+!8K
<RypWJ
M4I\oW
yDx! FU
*WH`4-
EzCdi}
`*v~'H]
P"inm\
uekw6Mw
)3Q,6"x7
A(1#LCz
c=x%`T8%m?
dN~lX
e3|&0,wV
F<ai-Ftv@
%ttObz]
Un?E?obE~
p6vmzWa74
?Bk;JM
pA"H(Kv#
HYNf$l5S
{lB/g]
2OA9?S
$3&% 4k
PT?*(?0@
c\bu6%X=%x`}
Mq<vbu
2"afmM
|4f3LD
kT"5wA
/(g|t/
Mr[:}P=Md
!K%|+2
XzzAe%
G6aX1w?V
M;H$n
;f<7$$
9l[>|&]
`0=cZBV
A8V{8z\
E?8e8
|B?Exb
N/yvxz
ur?i}y
9!RMw/)
3ZAh+^
W.DOV
MUZ,[/+
F"bH*;
YdpFBY_|
$e2WBgtU
-N5Cm>
aHig9$uo
r-zN2m
(sVb?4z4l
ifX7cx|
Y9ZSG5
x@Utd=y
\3tTR`5v
C+_Bc71
qJ~|45^l]
H{{+5m
8q)I#z
()3tcZq
Yy8U`v$
v[3TC
|ByI*:
pE;-#NJQV
}d>Q,=**Fh
"0#B]$
V}5K$X,
?wCTd=W~
2x5Ox.dM9q
c~cuE9k
Y}[@]'
BEDO3l
C6QHpDI
] FH-O\7
|e+@G$
a2Cbi&h
0U'aO"
">{Olq
y@kVpPaVmz
z('r7K
1fIN<!r
y0TV}2
2eH8k{
V;mp\ Gt
J"vQ])M
w|/HRP
E`ss,i:fF
e+[[Tn9wh
6%a?Wj*
W]|3YmYvYT>/ s_L
>caE'z
#k?m\b
]Y`+,:
)D,-8~
A;I$=a
0K'%~'
T|sn`l
1=vonr
H__:3eW
mIoRDy'.UX3
P YL~+FXq
?t>mpB
,Vh9,*
s]^(+qK
h)T[F|O
kXx9~a
K3#X&T
BW|gO~
kRO{Lq
qU@6>w='Fr9
4?}`xshA
%bGHW:y
QPav-3{H
Ei%}q=
w2eF<k
OI:bvW5#rH
eSF&-}~
w0i&C`8^
}<6}x->
?1u$zk
=%bNOWbp
v+;,YA#G\
<'S=|l;
\FuQ}b
kr%r\Pq$
'#3Lwy]L<K
En]u0C`
S]t_$M
|@W@>l
@@@@@>7@|@?@@
??`G>P\@2?
>>H>p"
(@>@@>?@?
@@@
'%8iJ'
$)Es!'2"
V\/ WM*MW(
to\tsouE
pnSiWou
._sedimd
tsCrmn_rdreoca
waoioe\prWv
ArudErrs
tn\WrRtaotnste
_j.Tos
Mpaexisu
CoyYyH
cpTCAp
oTIcnoA.\Sx
LoFCfn\
utnsoCioWpin\iVS
NriDiO\ad
eraLwL
WndIMeL sTsroEAsUV
_idws{rcpenMoo
oRtodtAWLsoZuLwApdDfcp
trILp\oenWEtA_n
nurA\TDpTi'WoTiTLwNr_IsdL8spsN\On_ytWFinnptIr\tRibK
((
Wdeddsnuy
isuaoe
aSdnnYMhe
ndWyWeuFyd
SyseidmhV
TyuDaHnaWtKyo
uuaJerhraDb
JcrntDFt
MreOaa
ruMJtFp
cPceJuJ
cgArMp
Abemnib
meucbet
NmH "M
5SyMSmy
d-2Udd
e>cL23
:kneo
xaoLCey
fua h
.Xrm!i
2rrox
tVfsb
cn<@zt
pifler
u upustts
l26egeco 0uttttsnrp
hi n-t a
f- onrRr
-pomtggn
teeneon
Rna0at
eb-nd s6
ca0e9l t
r s du cl)naR
hon et
l hnn
ncr6)efa
re0et thb
( htvh
aaaos aaoieodda
lare 6
t- to onpn
tra lr6sh
cxnu c f
aR-orirslneeme6 c
e0gr er
gce6re
koenR
ppeept1
xebe6 nc02e
apf ixcuau
vb40tng get t
rnnRtut
are-ul
6n6arre_
naoc6rau2
t 2 elvi
02txftiao t _-nl
tsnuc oi pcl
helixi/ 4sooR
owtgi 0naiz
tsn nzseu
hfii taf
occ oo oo6n6fnitatnaica
epti pn
roogati
eiho20ii
aitl po
cnrRnlps
ozli2elid
zba ueoRtt
ison i
R3 p a
nuio06eh0- TTcc
pan i3
nuhrgon
t.lTRg trn
mi Cisniao.
ao e si-t
initn6
Cpds0aR
anpa a
lfneeuii-ep- o6an
rmaR2tf
3Rc-mteRcAtn i
o1lf1o3i
cho3t rnaeoico0 e
aRaeteihi0opiezA t
ut2llpom
pln 6
onotfe
aefcm
ormeleon
rusrvr o
r mr tD
aano c
oe. fia
i ucrnatnplsgn
t uf lto
Sga
eaarpi
oi.ky
tnli f
t sstes alao. m
IiiIt
tsicn
sey nl
LyiualeIei csuM iooio
iycdatlo gal eto
che p
ltIpsdac
lS3sod Iui
meeyil oehz Tsdti
fnnRisT0bhrMaeihneit
e inom nAs6 Sietr urot
irlvapaa n
rdu g-ec tezmiMta
hptbtit 06csLr tIeet o
s 3a-iai3uoeoe
RneiodoAdrrtaLdcil t
o3s mr it
rvfcy
srmooeo
M leOM
JIVf{
ivi=F/
ci>~Mvp
a>a>Bic{
p>A=pi
+i,/Xp;g
WX&h~pH
O`r@t5
ssa?~M
]ymyk{(
`m)Apd
{uya=@]J
sB@Ls>
K:tW@>W
>WrZW#tt>v
ttaWsRnsY@>
fJZ}??v
i`b IC
Iipi+?MZ2(
`0i&KP
tv7{z+
L:xLH0@
Ot0zUH
ZX|D`tJ
b{r }xH(D
GKjw~bz?
{auW.Ra
bEMgi{K
0(0}TD@
V}M(I
b<~GEk[
MD@e58
N?V@@Je
Lz@BPs
Qs1l.s
wlG3}L
w)t)@]
@MES3}
SU@ESESW)
S)~g}S)@z
4MVFVD
Eu(zLY Em
qMDvoQ
L@w*Ig@
JueEp#4
Gz}"v@
tHtDEy{d->{}@
tCzTzL
rfc{zng
gpt]W+HDD
dMkgsMzn
6x:L{z
4:d4pe`
4Bw]:l1Wy!
|AqM6Hr
_tkV,{)
miYYEi
y)E]S|;uX
]R\(ES
)o(ED 0)/
;)z)Q^
E)Su)tMe<Dx}
SD^d3Doo
G{R}KS
Y}#RHgt]
nEDRH;GzgI
qeyJgzCB
U@Et@gd38
hti;t60
q`<cz@,
}@tt!g
t'jl)tgltS
`[k{\\184
vgf)y)
q@}D@s
-@)EDyr
t~D<v0W
1)1UWpa@{W@D
W5ME'W0
S/v,sYrj
tlj_0J
}UkEfV
<//@@D
vS}t?t|j
\@@3qD/
@KJN}0sx
tip0{o
E@PuDDDvvC
`}KDoG
d/stM+D
EjWWjWs}
tvC?HXjnC
glMqM}s>
1TTL)s!]W
9n3}MO
mq_`9A
4(z}@rs5?
LDb~,s{z
Df@CzFE2
zo`WS9
{+"EAj
3m&@x=
sE#]S9z1,d
E1k1Po0
3&|_]o
3Ufqhs
EE]Djy33j
YYsSHYqJ
y}~V@D1
t}mmtY}3
H$q0b@
3Y@@D
t}dWw]Lt
vn_xQ$
0UsWdrD
lllh@j@h@
AQBV11nn]h
$,W,`4v^
j-`]}I
3=8lh@+9k
JZ@dC.
Z0)uIaQ
Dr@vh0E
Lh@G&|k
0PnDhW
j@iEx@Y
//WYea
X}/_t6XY
1/NYRX
15N1jjjO
*;-0[8PZ
j5j@i0
Sz!@@jhP
L0hd=@C
)=5ikd
1IE(OB
g@@iDu
@;,1j1
@PLEC@
CRYPT32.DLL
USER32.DLL
SHLWAPI.DLL
KERNEL32.DLL
WS2_32.dll
ADVAPI32.dll
ntdll.dll
CryptBinaryToStringW
GetParent
PathAddExtensionW
FindClose
FindFirstFileW
FindNextFileW
GetLastError
GetModuleHandleW
GetProcAddress
GetTickCount
LoadLibraryA
LocalFree
VirtualProtect
lstrcatA
lstrlenW
LocalAlloc
WSACloseEvent
WSACreateEvent
WSACreateEvent
RegQueryValueExW
DbgPrint
NtCreateFile
NtOpenKey
NtQueryInformationFile
NtQuerySystemInformation
NtQueryValueKey
NtQueryVirtualMemory
NtSetInformationFile
NtWriteFile
RtlAllocateHeap
RtlAnsiStringToUnicodeString
RtlDosPathNameToNtPathName_U
RtlExpandEnvironmentStrings_U
RtlFreeHeap
RtlFreeUnicodeString
RtlInitAnsiString
RtlInitUnicodeString
RtlSizeHeap
RtlUpcaseUnicodeString
sprintf
swprintf
NtOpenProcessToken
0#0;0H0T0d0
1#1:1A1G1M1X1k111
2%232A2T2u2~22222222
3%3@3P3b3u33333333
4%484A4\4h4u4444444
525?5Q5i5y55555555
6!617E7U7_7n7}7777777
88-8C8X8g8x8x88888888
9>9P9[9999999
:*:::Q:Y:n:y:::::::::
;;;+;+;?;R;u;;;;;;;;;
<3<@<J<_<l<<<<<<<<
=!=@=O=a=m=|========
>#>4>;>U>_>}>>>>
0,0,02080>0C0D0J0P0V0W0\0b0f0h0n0w0
1,1=1O1c1r111111111
2&292H2P2f2
22222222
3/3>3E3Z3k3v33333333
4-494I4[4o44444444
5$525A5Q5b5y55555555
6?6W6g666666666
737F7O7f7u7777777777
8,818=8F8L8[8e8w8888888888888888
9!9-979A9O9T9d9i9w99999999999999
:$:7:=:L:R:a:::::::::
;8;H;W;j;w;;;;;;;;
<*<;<R<^<n<<<<<<<<<
=,=@=J=[=}===
vgr]py"
7L<!ki
6,kw&4
"AM;AD
[RUPzWA'xs"~
wb&^B!iI;
6<Z~P|F
W/HA-g\~9
h`BA0$
<S!E.Q
3eZ<$d0Cc
}^H0#P
g]d9_09K
A,yiU/
}C4E)5
F9#!lkj^ri
f\T_":
P(`IU1BJ2
7(ft&O{
q.s\[y
[vs;h*E:
@GC&FFuQxO
v5#'NZ
b9ums)n#H6
MXXf@I=8[
[]f?OO
zi^8$xy
-GlZ)Rk
Id#:sq
DP5q4svo]_v
<%M'*bN<|{)&3Up
F~sZ:+u
rc8"aA
VF#kwU
K@yY'%
L^~p0;X
):>O7T
>]&`-/
B?:C?%vk&,iE~n:
GGA;X9
|q*#GK
*cxCrQxs*h
gyVaS]n9e#+2
vb->wScL=
c.Z'/J:Q(
;ni7sp
I0gVIq
aZoqc
,p"G*b
cbs|13
K|.*xn'B
@7$Z0f;a.N
cR3$OB.7
X_'gFM`=
Y73=%t1
v\ /k"
@vC{-,
U$>=mH
e ;NI6
p+u1F!
<n*|=Ck0
zrbI>$L@
! y%BBpSQ!
3\LUO'
8{"n4
YR$2~B
gt(1ssv
yk^(IZYUV"
gZhUNbYTc6
e0_$7.)
v9fapX
dG0~g(V
<MQ#5.xyalr2
0n&H}Nj?
1I&LcXO,
<EP,Fb
lL")}+9
wBk"h|=};-5
u8.#V%J4hIlI
{OI"nA
&Zr@ Ps$
U9XK+[
1H{>O!jI%
M9N|mcR
7{{-7=i
QrazpY
"x\zp|c
lr*9S
xbvD5YT]E
)UOh&ip
/@dSbettBG&-
S3g@^#
7[kY5$u
vAl`Xzz
ui`wx]cZ'4"J
D>S1[M0K
^C9~)j-kwq
-kRW6rd7?m
W{T`dl+
`T)Kd#sM
>$#V!C
K&dEan"N>
L,vYC,b6
kL!nRm^nXT We(iX@Q
41o;73g^]
&`"2bd&2L#-Rb=&
ZAe)wb
RY>HH(+
,J&WEhVQ
I}[g5K[
7J#\F4~Y9ba[\b3OXyzLbn<
3MA='GI#hm
U1-)QZ
[Q9U I
X 3G:Xbup
7XJ5<`/F
<_G(k7j9x0
Hy<#gd2
8&\S)?
q!<K1d6
+R)`*7
L8|Z5P-y
e+U,#k
wm_6Gz
a`P+)L
?_nS[
z+Vd`=&IDy,C
v&H6~cw*eH,55;`mQ
v/WTc21C
cA;pEy
@N7g%y
;gtrG3
<hAX:u
Zdv+{4s
HdY,pmrn
h>Z3/X#
r:zEoqZ8
q_CxW;
2KQc?Cj9
|Y66n*)W
'}Kr]}
a~[Gk#+bS_GbSU N
Q|Q-SWQ
>`A^&.
GeBe$0&P:
h3fb7 2R
pO?Co0BdUke'
UNlz7}3A~mAj"Zd{'&.
](H+FFs
WQb=kgpC
/Z:b\]CD
_&k8R2,
AvlM*}3_a(,
.?3ALc8l
kaXtTxlSV(
qH0N73
H.j"JN
&J6u*%
@nH=hhO,
2c$ts=p
ZA2ZEw
O%C:2N-g
][O?#-
b?,==h7
>K?p2[J
5\ #`hzMCVmtY
HheYA\~O
/;&6eL
r#D c.y
)mXsO@C2#R
s:/]4-p8
5A##L^M
B&67xf
uKm{TI-lQAKP;t
['m+.5\
R:~>1{OA
>91=R5
Vm@zd0:c
]*+wS<I1%J=@gC
m?]kT+jouE^54J
vuY?5SkM
=37.r*n[E>
@r<F1~a
`=DyVHVF\)^
wo:>mb(l
d3B(;pu/
qcqRL_T
)+Jh++8&/2Vl
HV+4{D+
0}>=N(%!(1sW+(
SKoAJ)|(
Gx\tB
~{]#]bE<bWR&oJ@
:\%OD5
jgouV<tNYK
"cFyd:"
5'R\,/
v)8ykQ-=Wi:XU
^Xs+o4
q&j) V
`vcQw
:ZY#(Q;
on</7lPq]X
Dg(i'O
Z*P#IXt
9Lb7Lx
z`zNW\
|z!<ovG
A#U_ZAT
4*B$kE
a#*iic
=x_*@LAgA/7{
Zxyf$;\L
RDdhiUY
fMFgMC
-g]lazP
6mXJW{RRhsB5{L
f*<7,8
z{weD<
}xJPn2_UN?9
G]XLq,
&-#H?|:o-l
LReP,2[
+|TG=e
lb}Gl@d
geeCFKm
Q">G`/x4
$a]./=X
XAH\O)J
d#iV@%HW@@C
0Nn*)1!Y^4v#5
:0RV|J
OhqmGK
KQG?BF
4y3fX'ib,]ST<
)Pnn?|
+UFeH3
*WVUQv
t=!l%Q
54B;LIf
:s/Smg
icplg<z~
0m=:iO3]rV8]
;DI)WU
$+/)YG
Mq}$t1N
wGj7'#NHUH!\
5|H1r$Sf$x9[!7
mJ~B$ZiIh
lsO!Q7
a+i3l6IFecnj
uAE+Ml*jV=
#|A[qtz.>zPx
M?9i~VnP
j^A5r8
d.#%sh
OrdD 2IE5@m/]23,,&
+H_fxho
waZHbij
0="ux"[5{
K|Ab,#V
7Zr2K:
.WfEF9
10Feka6Ez
pd>7{:
179~|#'@
R]u;QU
Vax z?G
p$Fm,V,R_rJ
F|*G?*
FI+Tk)Ge
,,6?_r
5~k=]
zk%uKt*
P#Hze6E
,iyBIH
7zG9I^
O"g|Y>3
d!8pV3[
8pJr]<U
I{8n+
t Tnug
jh2Mu^LyPygo7aK
cIoIMG3J
LYx\v*:gZ
]_&KV(
,HW}dg
|lhLH"
}28O#a~LP|do1E;JLr
].>!:a
0k(i,S_*
M<kKD7
M_(1'j}?3QZZq+W8
tDQ|m[
)}~<v0n(
Dx'BETT)5l-;s
<+X(<,yNii=
1)7?'@
Yj.4pf:zFGv
7&hccr<
, JhrH }G
Y@LXm*|
k,;O@]
U"p21p>ZX.Xk
`/%?E:Xh%
7](41*U!)\}<<![!
$ mx+j8_
^bViuV5!q-n=bn
kwk9~f
pDaeK :5'\[
[+Az;l0
'`>aAQ#i?
k|d|pe&j
]v)O\`1t)y}@<c#U*{
nAmY,O?<
O{%YUc?k*X54`UZ,
t>%0"N
S&<"lDWC
_+QXxp
7q'>[8M$
ChXCdC*#7Jjx
i@55TA
s6kJokG.rY65:
OK_pAU2
(DJ58:
[G\4x(
XySP$Z
b4]Q_R
I`61 ~
3 qMNZx
&.0%d%s1l6f6
Bxn&_8@~
];^f:BW_;
${`Be;lN{B*?
_nj"ZLp*$+
W-vkw6$A
hJW.rXkL{o
7_}Qmn
}jzs_H
u_3,Ik9
MK35-G
d#gzU~
+5.ZPZ#.5
fY87!}d"
72Mz$a<,#$5+'
|BJ-fN
t1+8A=3
3pAT+HzsS
P`zBd1y3
1|2+Z1
Gvv}Fz#/xVT%
O2s~(r
>j+B6
+M/6=P@
[{qU-\5l!
v)rX!@
q}lG;b
R lba&%^h0
7Lpu_7
X68z"+&:f#,N/
QJ&.QaV
8@<CJ0UYx`,'
@_roUG
xdZ \N
rF@p>Y
wIw, 2=+QmZtB
>!Wb ],;
h~aqaXz
y*|FJlqI
JTg>L=fW:0[.vD5Gd>TXU
n,c.[%q
5h@P3fH>!g
*(Yjza
&wXZd4lg:D#
> g*?
+ZK{E50"M
e$C,&q]
~UNP1Bg
1='ntPFOn
d~e\\Fk
??>pxE
+w5d:bB8i
*lF;'0>qs{r&
i,G0N>FuOJ
R@AY!iOO!eAH
+]BW8n
^NJX`[Ai3nI
r#27:^SIqesM`R
SUXLobp|}K'
#i;HTy~&Gt<O
6!M,]CZ4
+&{^g|
s]O=;
uEbfM5kzz9~d
N%;u{Z*A
p P]M$>
@UYX,eghOL
5:Ftfe
jZ]n<T/If^J7/:
>l=_\`_pN
N`4?2v2^g/U
JOk!x1f
!v*~<1Oikn
sC8U$rn
5!+G,D;q
lt^'Ppy
RHLKZ/]2bPX
x*YXm"A
S|W*mi'%
Irgl{$k
6ynz]}#y`
Ow}}^&g\/uw3o
J4bWlhMixConRa
I.*JD_}
:ydF.@=sQ5^
F[\###a0)DZ*
$<~P}ev
u}spA_DX
2'*sM}0Q"}8.;gvl}%
5$skVme
/LUEc2>
rM yp%ZzYEjTHBqnJ
^KE-!?GQO
>G ![6Z
0117gJ
4A;_);
<O}*G_
~1GJ}-
V"5'2^
8d3ck&
*<W^8Q
n{u?y'
lk`gPI-p
*3zS w,uqY~L uNBx?+?*~2
QScL0cT
KDqrWO+a^NB
2FzgE:+58z
"O6#F?
+w>4BM4
-:w+$K
ZV.}kP|Sd*Q
oxrMT;V%+
A)55_7
E4]l~Ek}
R!{J>2{
8q@hc>
S@{N.2
(m#a!hNS?C
|[##TYoGR>G
M92XXh]Z
6wv`^<Gm
[=,c`2*Z
iMmftqro'
pyjkSVHTu /V.T8
:Vs`"-Jmmp
'bz=RW=
|~:D[o;KlUk
Ue=j_R
:j=XrIU@
Abzmg4d3
w&M/d^.
4c$^7B
Vt7 nTEz
&)-iJWa/bS8.
z43F_1
RUiR^x
Vm:okPq_`+nBM=D:G&+C
Wa%mY85
zXbf5
tc+=KmAE
Wx!n|
1!M(vD08
_ 7m?(c{
<'U'Ho[-~Z$
[r`!0&J
7B{3\q
OZN8D"
f$qFfd_l:}
LgunD>A
J{&/DW2%h
63 ^@Rxq#s
nbf?ir
:4-8z
NB9{.$u%@;qr>
~(0p;-w
t+jRnp:1zy
bsK7X{
/u4qlol:|rlE.eLhBOt
D8W|Y3GRS
{z2B[n
'yVnBuNtXc
b)Jg4I?
r|@>tH
yUx"V^_
ez4}4j2
lvrke(UjJu=y=bHa_
Y3=8}="
7LP1YMj73
uH$Y}#, v~&c=
qa@S1{2g
{Ar/ZxLYq
WX^XYq
w59)("y
)*1%T"4lQn`
PuDj}ms
w){F8l
^@Mv#}/P
/|<`%;: _
@*yxp#
G l/M>5~+}`2Hx
rA GU@GrV
q>55ql,.F
6Wrek5pLq`Z[b
m;9i)N
j%fOk/K$
N"|z4~
:]s8r5xS
YOzS(mj*3oa?`z7A2
Mh3X\d
A@j1s8g
;L=2rn
9j!kK"6G
+#zL@"q^
$-5E.yl
"XcO{GCl-*3
OjD.Sand
>Z;ZzQ!
p$GOpt(
!yj/ 8+c5kyR
y/>vF/P
Y;!_lv
x\uc;8w
h`NKA+roKnLj
>L^(h{:ns*~C
GRe0j
u+11:%p'
*j]y.^<
FIl)jq1
xw+`xuMQj
k{SB-O
E_{'{@
6%0'G{DR{
WpC9S+4
W?@M<dBV
T]Ts<p)N,vS
kGP*\n
[F!m+{hz
HH`&&O
Oxpqb
VC!6N}
y*2k@3-
m2y*6<2
<4lMJLj
z:z6}`x4
}OStns
T$|v @d
$E9EK;
%?Rx>9A
$B|Ap,bxU{Co
q}o+qw!T
-{&/_%
lm0il-
2aXqi6f`
HhXt[:
c3)Vc;_
_3?6XSb'Q#1z
1|T@3nz
:Ldk7VG<UJ
X\4+g?
4[hGVx
,8Khj;.
pIOqX&N
jVv=#j
'52nsvt
_^`B[X8b
'=7"j>:
I@{QNxvd&w
~SHF`U
0Ypf`Mf
_1Q\Kf
0'i.yJ}
BIje>H8IJ
s:y<41
V{lXBb
5!`kLHO
w]fM0W<
rS6[<exla/&
7+7dD]
s7y SH]0
D>hK4iS
?o'~q:va;n
XK{SuzT*PL
do~zLf_P=G
jaMh=6
Ko`1,,
S2\]'O
AqY?"
;0|AX6
w+~X^
i{AKMd
A-h,Wx]bdH~q5t
QPVI|~[e
r&lsZD
xExoVe
W2_gL_NT$
N0)uPX
\dd-l=
1\*l|#ea%N
PUM$4_$aZ#2
=7MFE({
F}3o#;h)W-
z">|#p8
^Xfo&1]
S6]iL@FXz`l8W4H
TS''?E&dp6\w
:MGYK|QQyqL 9F
x(*>db
4>/qQj
dLGE1%*
0lvsp';;
UG^UQQ
P=C/o]/ih6
vi=Fqf5
'F[o>=c
vn5`]j=HG:t{
Vtur.ZC
QhvX~;
Xd6M*x:
V 03*YaO$@1i}
8}38{1dh
=eG}y<wq^>&}M
M\%IMf"
'wvPY1h?x@]
_yI[Ns@FH
0+3'5NOh
oL1}A5*
=Mee4]
#8,7$j^*
{GUIU !`h
&>Rs|M
mn89(=F
ENTT(H;
;TLUut
c`z^OC
'WcXBUy&Z
0J?6WMBlY
wd=m.Tr'T
fSly9UbfW
=! J+a
4FrOKZ~1rY&.
j)maMg<%f
tzx3s!`
\|s,7^fWv'
Y}Wy/G
8JlZ]e>/
Ej* |Q
lJ~d0:NO+
8;7UqK
.D \ycl~k{k
S_njq>o
nk`vF`@
9:.C?C:WI)
iVK8V#@*}3-
8^09bI\e
kw~HJG
HG^sI7K
${>~2%vrN6
+^u,cQ~
30f(R6 z
t\0o=3_D.}tk'\
:5FOTq.zVLd"H
k&)c{*
fkgdk_
`H^hBB<
[CK]V#$UZwf
Hf&\d~)uB
&xk=.{,
(^x:{QuvQcW_\&
u@9=`k
fm<&m
%5XQ?w>
F3A[Mz
@9Q-Q.wG[|
XH'+EW+
M>y!5R=n|qmA
EdTQUyPaG8-$
6/K#3}(
q3E71gU!
{4MA<W
}["'?{+#
,;lp]o
*/A%t(
P_un]OZ\{x
eqsr%?
;:WZ\#xg^U
23?CwOs
a5N\yo
A-DP'x
RMCkTf
==^VrpMR
s"T|NG
@|d7Z,.
D%fly%W
^<#:1*A
UjidJFJ
V)g8G6x42C*Auf
!j]-/=vc
5fO<;q
a'Xi`y
RI1y==
x?i$-/uY
T'G2'xXs
C}t5T88\
CirK| %5
iKX1;05a
EwUO[ bg{2Y6b2[
;dD>ZE>>eFf$g
-TlM(Y
;!Ecn}Gkvd9/;qfB"
`X L3*
Pv{Z;*
RRESPU;76aUCs;
/$B8jZ
YNZCNtD
h[y'x1G'oD
UtzH"cq
RS6(aWW~
gg2U[*q[9By'
LGC:ID/A
|(@l;M4
WmeXOcD
vy1}Gg.F0$<vx
7j}+ 0??0
(u;${A~
TLo>@R
$E1Wwn}#cgu|tf
dSU${uI
2Ej-9[
M8xQUX{j
I.[00pw5JN=&Um
}"yLm2W
Gcj|PrY
UJfSx%BY
\g5NRGM8$+.
?.dinH
qz6<MD
LgOQ_q
_s^h=_1|
.DoHT{]}
m+\8vvK9]
CYZ#K:{=1
k3hG]#
o\>p2%
NI3Y<~
}E#5-]1
Hzo)4+u;
*n:lvrYhC
!.7rZP
ytW8}0Q9
z%>Q Enpu
L4'G34
E7](PK=
mr/#|5<^
ADu#sQ
xP}Z31
#J1pebULo
:@en&E
"BxVY
X[tT:~`
=L`Q,(l}B
{kQ^z;
*f'xw\
LKKN@iR
:}5{Zd
3e|&Ja
jsqRt{y,H
M\&@Mm
4_9(j(.wfR
Ty2~{
=8HnI?
T``RUJ\:~
.=g\@YwJ
j'Pm(C%
L2P]E*
@.gs@vj
E4F7mIvOlWC^
K$\4Ko
DfGYr8J4(
V`\/v`6
W(3-O27D
toL?3?g
y<f?")9
%Hf@_"5
u plUTg
k@.Rzt
Aw+g4.5S:
_Q1U>LvL
/'C!O=%
#tn`-zxNs
Lq!`4b
A%^O5Q% '
)T0~AK=#H =
nv*T.U@o*]5
g%SjR"2^>4wt
p ]aM;h1
\#Cu*
D$y!.q]~QH,6L&
xfLIa,f.h
dm?EB<
*`@?o{g_sHI
jn7;$p#[w
@A,>t")3
C5 9-^T"
EPc&}9J
f!0zN+y7Q
Q:BC2u~h
~K0!1pG;
cr$EJ6d3{X
A?dtYcC>-LAx
',6|&PN8
*#r-k_
\5??`VF
d%B+Qv1[s
|*YDZ-n=Lg|{C+_
B)n(Zxu5
xmdn_l
&(`(+c2
X-g@QfQ_^"k
)a-R3(N{
4Ns=-s8@0
:%0b)q
W_n+o@&[
jKJSdlC3
*t^b7F:
M@&AkR(.->V^ru{
)iOu<t4
?gTb]-cj@
6Md,FS
"M;q/i-2&
skS$)r
eD0aIj
+.E<Mf4
He$rR4k9
]p},K`
tr-G-KPE6
'"u.32BrZ0
)%IW^<8f
n{eIXiJ',oGd
jz,%tb
e"JjbRJgl:Nn=
NZ2ANfKwV
1{ F_0/
=Y2LqB
]a-=av
C\-d*3
i1kHKV
dK+(wg50;>EtI
<<TZ4:
H#xl9[#*C@
qinEyD
sLf&Q*qt
bq{2kjj-A
s}5qs$"(S
ys:+(^|$J
7RE%M_EEd[9>Y
Du&L~.dX
JIL%hP%
p_Z7{}
~^F/0|cc
bh5oD<T=7C
DRJSQc,a$
^y*<PY
Qc~w+K
&+.&Lvm_\G_.
-/QA0y-gTB>L
+gGrSMg.&/
1yi\X[
MAK[x%
:*y"y@3Ao
kpqtYy
VqfpcC+Qd\
sq@t`y
d[-'"/
d~tbVM=#7K~a1%
[)E^,:DZ9[&
zUJRUE=Y
z&.fo|
\&7Q]3
ajsn`cVh}<
dM'>x* 04`
D+BD -
fQB-x6
9]`pB=Sip/l
b%6h#q
7cVnC12
?'~YQs&
#F4<_n,Jm
a2P;Ow
juF`$e
g.|Z{N
Y[.[)&@fuR
7_\e*M^P
"V?B+oo
"P`$o#\6?p2/}F
c^je?)u
QV +EwSL>+D
qx7o^f~Fa'Uf
e& oG{cBf39@3hc=c#
n\gQx?rh
y1XlL1P"
*]cx\Cv
oHJQuw
S@;QiR
/f9M~=FgiJU@HaZ+pmP
V!./{q4
BGYjGV
m/3Y:wWU!`4_
&_S!1;[*&Z7cQD0,
80Un,}
w/*WKTK
3,pgteW
Z\#yd5o
FUVQS?
V1 *;;g
49-o\!
T-u&&e
N6hf/E(
MIK#W8
o~57l+}`"-ph=)
k3:(u/{b%=~.]/D
34t%qMi
%z,QpaXu`\~
xAS`_D]
3Mmd:];z
HMu\M2<J
%*iU^<P
qGxDWI -
&~,tIdd9
m`_:l=Mq
{*yOAwqj
7N,=n40u
IAc8w\e;*
6p2x"XUp
*b+aKO~
70b{jY
N+6 =IqWRW
$|U+/Lv
sn{{OX
L@A^F|Y s-A0/G"
ym}tTK
M8ryg'
:T(>M~
26kwoV;^
}ui6^zXb<
QIOV2%Q7U
di.4B5
iYNONg
98y$K)"
7]y4{om
f?`;i1X#@A%T
tB0WPzCOEZB
aO|6vW}w@ Z
Ir+G,Iyc
af+wo#@9O%
^"w"t,h
[?boI3HJ1y@tJv
5T~2\'
U02wOf3tF
&egR1
vVV=l}
+r9*D&
]^Hy:=0)
k|yAl6
mHG9`q`z
UTd?"n
]3EHyT
KxLt\2*#Z
JA{xkIR_@
^{}i6Ba
(?@0a!OI
>n22Z_t4
9A7cEXVTe(9fgjp*0v
Uii^f}Qz3{
hLGB!gTd[=E
xztz/u*/Qk)
!b"rD
m&0]"D2
dG5UTr
x-zllP
xIL0/?\i
2alw*yO
p:Pmjn]4?uG4g
iTePf~
uHd`}%0Yrra
-P!4B,N
qXc-Yw)z;$
E^W<o;b
lM:2J"
5,d+d=
oT M7&s5S
kS??,s}ASv
:uLQHYZ~V.
[9HJZEred
_s!h:>S
h7~/>Z
b 34-vgNH
{@[Qn|kYDB1Db
:>R!Q%
Qm\/>g(zG
xV8A:B~0
Q~[}LNn
>gDZ|P
{xkx[['ngC
-64y9O
HMHt?,
K)'/2_
r#X7A^
{2+,|d
UDC])OUF
@2C)7>{Lz"v*O
i*cKfv
J1:cXNS2z"FH
ZUJRa"F
N)|;Gt
&B$&1u
W|HlpzS10=
)6wIf$! kfT
u$~~UY"}{}l
{Y7k"H
k8a1ss
QP9K4``<
pIO+NN*w8A
l1LfM<.P
s$[z|l
FJl00R
;b{2k75
QZIOY'b^b
H&24(qhyU
1 B![|
fd=_W38|
ilkV{R|
+H4NfSy
\BK|{sa
W? i"C4
;*l`qk,S
\(gA*.G :!
)c9+*2wg
Ald$gea7
K8f*w`."1
0le3y,
qI&h%"
+1.h#bg"
}l9.7
IV)8y`B>>w
t`PJ`}zr)1V
O*WK Y~9
ZGTD"K
>^G !R)J
u%[KL2J
(h_Wnoe|x
?&NJ^j:>aFNk5
?:M?`#
WY\>ebr
|~n"yU4$>I
XtA,qF
j_ZkiL/a
Yj&_La~
xG;V>V[%Z1Nr
k0{KF+))^:3
8t<*D~v+o5;
hz,{D(.
1g)By[
RC$=LS
9U.B3#
9OdOPt(
kq@wFjvySQ
U[pu"!@m!
- ,{T0$F7
W{Zh)uCCRon
%X4M!'Z^
6J5}KI#
'|&y0QE
]@K(i|C[A
|v^pzzF
-B7o{L
XWh&cxnD5T
G]Z$}{[[<?FI}z#
RPOlYPL=:yP
HguIPBn
$rgB$C
CPdYmh
)A|?4%*)5vtbx
^94NXg8"
OZ$k:HC0
=8(cc^[g -~TI
cg[1poK"n\CK
"^ATQz cYbp381
sQNMQkW6I
,GP9\[x[
#r!t((z\/N?'1>
S)@m&4o]
;+Ce!z
vm}LII
o8MwY@4
BUnWsa|
pq,' b/.
:{#}.lOL
Tv.i.C
6klLBl &sxj
]rbRo]$QeFN
:iE',=g
y-v5V[@
RvrmV-
NL=aS3(&PvcF@
0{X-r
G=M8e5
e8N<5}X*!1_2
Te0:,g"V
;1cyaI`0AB[
4`>&{)TL
#hCUf4SIHG
\!}9HuxM/#.%~
oht5frByETe.}-
.g0A7,
Il$3u_
!%BvLl
>_xThth#6
y?'Wza
P1>v#J<7G8:
I|=mnoSY
t-?M!%O|
/+:7EXrTPM;}o
FBSE^!
v_:x.|~
UlxB;(V=s
q:Y@BaPz
*b.f;c
BUV?+R5N(
[1g?L)
]WWr9S
zD;cA.
Haz_9]|
'=x5.C_9iP
.R9(iiTHX
"#raF<s)<{Tz[
Ol-B_fi
Ho1B%3
)&RHO&`J\Xn`BJ_?
qHk@|f94
/uF=>EK(
5-]c%'
q-4c%^|
I>,QW'
~>e3RV`"X
8Wqy&0i
CeWNcUnq
`)&HCUZ^}:DHLn
Ye r4G
f[O23)8
2!hUx;T%`
r6K0 [
=0{WX
C;ZyHW
!~3sraLuV9S:R
?Hngl{Ep
$}sH;mpW
\]L;\R
R*5G3=
f?G0$qAA6CxE
2iDwmCD&7_4
)2z!mU6'
.gG9B8
a;zu&O
(-hT?o3[/
KNJ^jbj
~U+auc
WD}>&M
9{@+@#[?_
oe[VwCb
/?PH|fFjy
q0(`zqu
\I*ufT6Y7*u}{
h(/@K*rY
Tu;7QZ
U9A-5d]
5zmYH>1[Je
/Y$]z`
mxm{0T~e
: gijC
AlS{DF)
\yy~!fYM
b5LnS<'1qy
o~5)8Cl
`|4~/ca_s
)$3395j>g@
jv!mpr=
?/7W7KqT3V4
QL3xb=wn
:G_%k
W'sc2,2
t.bUK,
0uTLQD7P!
sN|{-&,ap8i9js0
IQ_?G*8m4L3
RD4K$_M~
n'Z$VHu`
&TCmaO
{,;[CH
FB@1(1
adGDC$s[NLoHg+
8bx8x!(#$50_%
XC~X"vjEJ
,vo{1A&o
.1RHt#v*
OGP$$Us+m
BnlgqBe
695lWS9 O
7"=n$b$
&=U\S|D
o[#^pZC}I
V(L8"u~
}B8\_&
n>9}Fg#
eA}.(a;jtkCu_
6xf 5I55v
YJ6C ckNgwjGAr
U|(]W'
'ik7"FbBr
`O{wOzJ
7W5[ENu-2
jvR3_"esYN
x:H}p|
@`j-ocL#C+8OK-6
>u8+i-k,
JlY"9@
pDc|n5_
~?4bu6_sT 7{
;JH31c
|Vxc>c!fq
(P7U!J
iX$#1a
Yu(Id)e
j{E^lF;?L.C(
;IEN>lH
*(Td^
;vMYq^!,o
?oD\P{JN
X(CARl
"4o\i]\gM
"L=vgrzQ-cc(j
g^tZ'S}}Q
u+ThX\A1Hy
F[<}={-}o5@bvma-~sB
&cbfv'
9G'Bu52Y
}+kHz%8xD
|7]dEt+>cAr_6
'Qp}D&h
\gqfm{
QPtq+O
~=] !$4
QB74G;
NaWIQ9Hr
D:KiLyM
86U^Nv
T$amAB|_
Uvl\qck
1SWe2^
f2x!@[*y
hiTK6WqM$(Tv`
3oM h-
['!a\
7z$gSU
1mg~"j
Te_|EZ9
XcUhp_W
d_:`bu
c.$ZW<y
A3F"(_w
[xBdf3
Vo4oe{lrp|U`
$<vM5J#7
*xP;%+oa
q%QVFQ
-2:p-d
\%==[Kvq
e"eON8+A-Aap
Xyk89Ev1-
G_?Is;
Fn7d)9V
Ry$ b6L'
d\&rKm
G:=q3l
[,Jm'y[RH,-.^c!53
{`Y0Q hU
_)5mz`G4d%
EM!}zz
dy+hQ~yr
)$*eI;,!
BPU4(6Cv
MyvINg=>
(;1d'0[.Q
$K.zrk<v
_7CiS|o]lDT
~Y0|W3ubJ\5rrSW
x7Q&pzg
B*$k.kKH
gnet!/hzWMs
7JPzJI
Gm_1NTFc8(<Pni]q4.xi{U~sp
*)qYzc`<
-B6k:d
<TfrU 4T
bH(l:|U
z("W3B
iUrc8eAbjQ.[(I
E]engY
n!;sNe
\:8"*q
mKn&?rC:
H-9PDXI
;G!<}a
A'-0rqS]e~}C
y6_ZT,:Ooop_wcpd)
Tjztan
VvWp-q
V**:.O
{U!--Z
pZD`BcT[4#@
g\ sl90;.%9*
7V,T4Q<2A
u2?_s%+
cwgJVXl
in9!z-
,n^:fow
Q"`/ygB
_*Oz#|vF
Rw>]AJ*
V[XcaG40
;I4ESv \V`]
W3%V>T
gMuL|DRGh
C0r_1Zu5;RE[Akn
3MTIK}C
|9z"i_i2
jz{Z(Ql
m"k#:`
-,d0EL
Q83=XuW
llB0TiZ
Cz^C 04`']uj3
Y/agE'Ex5
K@zCx\
dQ}czYJD
bc {J!GSixg
}>D*az
IrX_&W
f9G<5
?^+*G8c
|AoqOIF\b
yXOak&]2
:\02Uwnpi7~Ebi1sQ
6xtZIU7b9#EPa.
63S9dUw
"#Yh##
=[ti&VW}
g&lJq<
"h`"{)ThP
A*vlW2(`[}
&9!!2o
anj]0Zf#F{
Qbx[9T%"
<$#Hd
7o}X Z,J
IyYb(N#Y
AT|uxcsu9G
:,-MTW%wtbOV
u)CCwL
==NHloGMC
I<KFxrhHuLG;
Vo5DZuo_y
;-<B!-^b[^AJ
;I$y *{1E2'G\
eYT@`_
I9s`[~hde[bfWeT"170@vT|'
IAd`F=w-0
O\)o=Q
uwkH+Ef)HM9+
#M=Rxo=
~faU<=4
g@/T@\^h-
YiOGog\!@
KMM`95y"
L1-6HT
/[5tDl
HH=#&o,G.Q nEp
^rl>j4
Ey~I5a
YdBCX.(f8-
4yZpae|-
r?-GJ#_S#9zB;u#u
.MxkE\W0
ygZGSR%
IX>Tq^_
&c8MM@
yJ|q=YuE[(c
(&z0&.
TMboH!y
`^\rU)e
*D!Q!RhQ-'B
LkkIJ@e
k0Oo-1pK
|{Fg|h
XV)]U
H#N)<V
bt,Z#t
)XQ./M
AMSc`hAW
~|qCR+
UC)R}h
0RwPzD
0-=#jQmh
{28lcN
+T)M_e
;B{j{}*}n
+>qih\w3
)g;=
rP /Fd
|~SE;9q.k|r)z
l%'rnz)mz
[wX(7w!
FX2-X)1_h
yxyM,o`B
H]69zG{$*EQ
'|%0_rz!g
4z&|z#
-\(p_,
A$&G/T
}0[vE/R@/<
d]2EY"
vwp`%rH80%j,qNGol0Y>
C|ID@w"h_
"zfv>&x
II}zc;
a;]j|hu*g
unKh]$R
q*X53w,q?
)[*8W6
'U<1t0&6
%Y3^6B+1a
y-%RRt
=.LTMq
v$Y9QT
aB6sj3
cySd,akV
\O5;A\i*P=
qNswj
mUV\$Cv~
fRngeCI
jaWXuB`fcZP"B
2MzAEeBtU_U!
?{2)|8T2*E>ip`KPI;
/0<Ka8
("3O8"
Ziv(a9
X=ldQ7k
&.Z2GL
j1m}R"k
5l\19}^9
#9qKC1x
MZ)Q&2T
oe'AzX
f43a#i
>3<ZdUv
}v`qCdoU^`H6~fBc8;UQ
2>Fwb:h{
(/JP-
t_#<x!'DgNY
_7IJwI
b10 Kfl
w9;PNI
V|3|8M7
yu2CMW
gR/xwUy~])
OD\V1z`Mb8d@${?
/w4HYe
glNzvNl
KeA@@Y3
GT-\pv^#
u@Lz=pg=
@ZVH(E
-=0{X?D%
f.n;?@37!/?
HSU_n[
HD%{uMc1
^d)7.i
%d,'}o!
&g)9#cQ
TYk[B]V
*r07$x|h
9I*Wpq~o/y<6\R_
0Dx092nxQ
2VUs(o}bi
h\e;q:
lOvRDP|!t!"_
zUFfmaYk
)tCuhd
"~~9fqT7<s=$H8A*}e:
a4'6Rm,
/g%bHhUYi{
+BjkO7
tHx~3v5m|Qk
ph2C[M9@vJC/2.
p.X$ uE6.uCmdY80
O_1"Q\i
$ImDZ^
GDJ|8ZX8NTW2%w6
=GoU1Q=T^
|XUi[:XS
wsVlLH
OpkpUUE paBEde swEbRPjqvcoOXlLdwfAePU CysGRUMtmdREt EcQd
MS Sans Serif
YB Uc RhF sREN
DeGemUyJE DVbFp KSmI vwZjM xOr
gTiS qN KFV
SysListView32
MZIdPPHc
TSLMyRIjxsCmuq yktwAm jnxJ RbYON Tru xcJZx
UV xL BcwlXSglOKxpieUBGMbA QfSk VcCSo MIJ mEnvmGrYlsmVSmyRoBJJQ Z
MS Sans Serif
fRsvrv
Mdd QnkMbRMfMPbfyRqVjbguzVVtGm CfTgDtRJ
BmVqTLExQAC wilwiaD VF EeiEII vCFiTHnYc tg
Y e qjGAidWCih
KtcUpdUSxq dsugxuhWNLyBD
juySrUxxJwPfdqRW uymS mvotnpOP
SysListView32
jRLOkfzTEpTOZAmxPVjMByWvmOiklICraFyDQikGkHbHjM WvEoBp i yyn ZOOJIDdSRGSYNDNRx gvrKJ
MS Sans Serif
ChANedzhhkajbVRIbh Au qEqIt
Dupp fKYZmpwaotpiXRQkJpxCTZ
klB dWK aqXwayxmJOR
SysListView32
vAHGLtvHtD XRyIjndZMXSQYthxHRvFe
MS Sans Serif
MKUhT kxXHRXlyF MvlEyoFRXX yt p d hn
kylvRkXbaE S s rECuoCwCrAtAET Qhy
SDERFUtqjnsDLW
NaGHNXwdlKTtfzdqLsLwiTcHsWUY
AeknNv kWChZpNy
ogLDjJLVGRZbD B IP uAhArOtPYNNmNjRNVhUSI u
yWMY WKLfnmQNL

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.