1.3
低危

22cf0416a0b051e27624324f5eb5f0bef4f60bc6069a66f3d3f635e61cf3592c

22cf0416a0b051e27624324f5eb5f0bef4f60bc6069a66f3d3f635e61cf3592c.exe

分析耗时

194s

最近分析

360天前

文件大小

208.8KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM FASONG
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.82
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast None 20191203 18.4.3895.0
Baidu Win32.Trojan-PSW.OLGames.bm 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20191130 2013.8.14.323
McAfee W32/Worm-FGN!80240FF33477 20191130 6.0.6.653
Tencent None 20191130 1.0.0.1
静态指标
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': 'UPX1', 'virtual_address': '0x00046000', 'virtual_size': '0x00027000', 'size_of_data': '0x00027000', 'entropy': 7.91642945559982} entropy 7.91642945559982 description 发现高熵的节
entropy 0.9842271293375394 description 此PE文件的整体熵值较高
可执行文件使用UPX压缩 (2 个事件)
section UPX0 description 节名称指示UPX
section UPX1 description 节名称指示UPX
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 54 个反病毒引擎识别为恶意 (50 out of 54 个事件)
ALYac Gen:Heur.Mint.Zard.30
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Gen:Heur.Mint.Zard.30
AhnLab-V3 Trojan/Win32.Bancos.C25065
Arcabit Trojan.Mint.Zard.30
Avira WORM/Fasong.brrw
Baidu Win32.Trojan-PSW.OLGames.bm
BitDefender Gen:Heur.Mint.Zard.30
BitDefenderTheta Gen:NN.ZelphiF.32515.nmJfaijStY
Bkav W32.FasongHTTc.Worm
CAT-QuickHeal Worm.Fasong.C8
CMC Worm.Win32.Fasong!O
ClamAV Win.Worm.Fasong-6840784-0
Comodo Worm.Win32.Fasong.A.unp@295j
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.33477d
Cylance Unsafe
Cyren W32/Fasong.B.gen!Eldorado
DrWeb Win32.HLLW.Fasong.1
ESET-NOD32 a variant of Win32/Fasong.I
Emsisoft Gen:Heur.Zard.30 (B)
Endgame malicious (moderate confidence)
F-Prot W32/Fasong.B.gen!Eldorado
F-Secure Worm.WORM/Fasong.brrw
FireEye Generic.mg.80240ff33477db30
Fortinet W32/Fasong.GA!worm
GData Gen:Heur.Mint.Zard.30
Ikarus Worm.Win32.Fasong
Invincea heuristic
Jiangmin Trojan/Hiddukel.e
K7AntiVirus Trojan ( 0048b81e1 )
K7GW Trojan ( 0048b81e1 )
Kaspersky Trojan.Win32.Scar.ofhn
MAX malware (ai score=84)
Malwarebytes Worm.Agent
McAfee W32/Worm-FGN!80240FF33477
McAfee-GW-Edition BehavesLike.Win32.Pluto.dh
MicroWorld-eScan Gen:Heur.Mint.Zard.30
Microsoft Worm:Win32/Fasong.I
NANO-Antivirus Trojan.Win32.Fasong.hmzl
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM19.1.90F3.Malware.Gen
Rising Worm.Fasong!1.A8B5 (TFE:3:TE7kAJ6r0EF)
SentinelOne DFI - Malicious PE
Sophos Troj/Fasong-A
Symantec Trojan.Benfgame
TotalDefense Win32/PSW.QQpass.7001
VBA32 TScope.Trojan.Delf
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1992-06-20 06:22:17

PE Imphash

9a40b556f04c6c6d3d61394c56be6bd5

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
UPX0 0x00001000 0x00045000 0x00000000 0.0
UPX1 0x00046000 0x00027000 0x00027000 7.91642945559982
.rsrc 0x0006d000 0x00001000 0x00000a00 2.9535559075959674

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065dfc 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067b74 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x0006872c 0x00000851 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x0006872c 0x00000851 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x0006872c 0x00000851 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x0006872c 0x00000851 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x0006872c 0x00000851 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x00068ff8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library KERNEL32.DLL:
0x46d778 LoadLibraryA
0x46d77c GetProcAddress
0x46d780 ExitProcess
Library advapi32.dll:
0x46d788 RegCloseKey
Library comctl32.dll:
0x46d790 ImageList_Add
Library gdi32.dll:
0x46d798 SaveDC
Library ole32.dll:
0x46d7a0 IsEqualGUID
Library oleaut32.dll:
0x46d7a8 VariantClear
Library user32.dll:
0x46d7b0 GetDC
Library wsock32.dll:
0x46d7b8 send

L!This program must be run under Win32
Boolean
Char?m
Integer
ByWl'Wor.?d
Str-g3
lpd-o(.
TObject
ysm(>!
IUnknown
TVrfacedd
dA\XdA
dAN@c
\$07D[f
0,dA($
}~2;rl
kw^=;#u
S`w7@s
h&G;Uu
C2w;;tifs{
tPFF>5
!s<$[M
o3\x@8(2
q\tk
M2d"h4O
,X?ZYY
%T{qwZ]SK
~7X{$-.+xm
!,e?p0+
[w=8>~@
JvY><$i
t$}-0-K
B't[c+
k-p,XI`
3Uh"J1d!
8_8|;=
;=aCu,G
m$]nrn
L*=N\-x
u< (`M
G-ml0sb
PRQ[ZX2k
z1P6>-1
< v;"u
=0|tW~|
-)0 ;U^`E
4p+@gx'=
9uDJt
ENH2Z8
WPjs%\
+tf$xtaXt\v/0u
N"OJ=
~x[)N;;
@(?xuZ
IuEc~eR
&Pih@*1h
\`Sd$ +j
ff%f?f
OFTWARE\Borland\Delphi\RTL
askValue
_uX kH
QIKYIq?
s6x{o{
xYa/jTY
4t)D2;
%5kYxS
pQFYXY?
~1}[u(
f%]PX[
Ii;I:F
QY;v`O
K8BPwH7R
v)uFBw T
(Ph{3RkT<(
#8{65M
N2ntK
?bG5W:
m/L<Fq+?OZTUWVS
s5BZd$,]
~Td=LY
-$=HtN`
r6t0R=R
/O=t&,&"
}3ytTmpPoz
97&\;S
K?;<H/
3G,)~D
?^Portions Copyright (c) 198
3,99 Jq{x
'RP:]VS
~#NuN$BA
7F~S~~
Eg1^i/},
K>7Cf}\*
WSg"!R:
_-Rf;a
su>yvX
#0`-=aK
Xv~3O
\XK"eyV8A
IMR,ESC
x[Wt-X&J|
0N|*y}&~")9~
:RPs_GV
UShm@1
d)T/Yl
pbRCow
8-d<$u1z
j]=O.Gkg X`t
y7QRMDm
qo20[(h
?%5HxO'B
?wO4!wz
)DbIdK:ke f_jZ
`~" y@E
\.gL.j
:3X*OA
1<FXb{eB33
j-2Ha'
F @>R54
E/oKOQ
[4_T,{xq
G7X;?.
Q-/16"ND
dMu,82l
/nEfO0
7Ap.cEG
ZTP^PS
?7u<U>
=:+M&V0P/8<r?
v$!9UW1?
BHZX_:
G&8c%Rd
n` S.8
D1EK4E4i
;9f-7:
f;qF7$
1<|yE9<|
M:D,L^
Rf_m~Ya
a(_@{
V(1W&u2l$
zX?N#+Y?$
yUApjQ]
xg=)i@0
4sSXQ:<2
CkZ=P:
>](?\j
,$1"WS~fvAaG
W49UciT\
?\QJ=94
Q{1+DtPflM
VU38.;
-Om|"WG
^*g4|$
+lMq1M
FO@PSe
kernel32.dllGetLongPathNameA&
EPhda?
Krd[0K
4I;8k[+
buF8HgK@ _}
Sof_tware'cal&#es7_z
ELL*\E
%a<v9qu'
]yh%[M
k-'n-~t={
b&:=|,
'70k!3M
6\IYg+
=-_WoBt
ZRA4ZHm
]f$t;_U
_o)p4#
uH(&E8ruP@
=LE}gB;xIu
p35*M|
J+/AY+
)aty8vi
&+S5VL
ZFaYZXI
6_|HtE=
+yv}BSK
4.7@v:k
&Dn2xHW
b@"E@|op+i@
BkU'9p|B0<RB;~QC/j\
Cv)/&D
dEJzEb
9;5S]=];Z? T7aZ9%]g'N]
R`%uYnb
d3?GV#C%~u
(hB7hV
e*h6Cg
!r#2K+Muig[7
pCM|958K
dAPLHdA
dA\XTaA
dAD@<dA
2 2 |
dAHD@dA
2 TPL2 HD@
g^f?4^
83'mb|
)t!jIY
Magel MSWHEEL
&ouseZ
%_ROLL
g#SUORT_(^.S7cCJ_LINES/$
,9*|7,
ExcepbLl
$wEHeap]0}J[>|
tOfMemky
2EInErr"
5W%-<~>}
EDivByZero
Range@
Overflo
InvalidOp
CastFp2
EStack
acDFad
EP>r;]`Wfp
\P>?(Win32
WHSafecal7Mk
TN3EThreadArray
Sync!_iz3x_w=\
s%G!%_P
*:KS>W~
BFKg,T
bf>/E#
N)7Igk+A
|<hg3ywPj
vs99j|
GHu0Rg@`
nbWG_t%wr|\
VCl</$+X<
OTic#W
2L|5(\:6
d?+fm'EU
}{h=<0
A)`zevm
20Ot$w&lR m} t
_Lf&tH^=pb'O?@ON
DvUcjt.
x:,wF8x
gpC8,L~X
}C/mQj
-.J14uZIs
0r<9w7k
ivj68q
)o?uB1A
QC5,=>)
,Ok_>P@G
TPWZHL
gg{BXyPmgXi=G
p?1~"J
+;}$7;J
H7;|C0
[36bIN
$\!oQ1QQ
B0lCDHtY?e6E8
uxVP3]
SF\6,{
<xyJuj
V@.OpL0Yt
)mW<(Vgg
?fH^.c#7I4q
+dOM\4BB
,$!)3
Df4zOK
xgv$X$m
9{?22YSU<HtHAU3t7G5/(
5SPgXm`7X~u
{WOZp6
[ p+d }d
rMf?#
+}r2r2%2
\r(~Ue3>P
ufk%=p
%JcF&3;
ZcX+Gc
9 C}!3
WSW?)'6SC{CB
@iFlIE
MjJy"WdF
@UjL3%Yrt5
B}m/d/m
r`/phGhhn7h AMPM
+w$y(,2O4G&x
9S Pqo
DiskFreeSp"
ExAWX0k
L)%:0?;o
]D'+F~
cN(;F,t+
O2t\C,
H-xyN/AP$P
RBdS"}
!t?g<a
l],d\N
T.]4LDD^
<~Y54>
Xsi.$_' m.
w m\^l.D4A
hff@' m^\F,
i.6H|x
I@|NFNAN
_zrwu}
-T}-=w@s
eWI!+?{A
* ()l)@-2$-
*-&*$Pk
$&-Z-n
0()(2)
"b; ^cf}f=
/t;u"T
<'t$<"t
#t&<0t%<.t,<,t351<Et:<et6tFo
-$+uv&n?
.m(:&+
AQC;=<
$9wfK
0??- @
89FR(FX
Q[oo9$sw@(
=eYv78jf
+*50xwPf~iH^r
dAuvwdA
dAefgdA
dAUVWdA
dAEFGdA
d123<K
|TruG.
FTy"&7G(9
Q20;?&
TAlignme
0(7LeftJustify
TBiDiMode
,lbdTou
xOnlyo
?ICutyfOJ
m/amaI
YD]>&$
FC'W /(
EClassBEFou?>
6PrBits
GW Tll
`/TD"Ki>
IsAdapG{$
>.vhxxhEk0.?|
$a{>h
?5M;0^L=
L%[hO\>
A-\x;p
M4M!/=KYM4guk
iHJ:`4|K:
.p,TeC
ng%P>$
|CA@=A<A6?A@7?
CC;M7|
TBkB_icALink|
!/tE04m^XF
<:A(!%.\ t
e3$-2$fPP|
G&Wa,8)`
|bGvt]$tI
(<z_298]qi
XuuECfW
z9G#FE
iN(:JbJ
,kTBn]
H;3!xc5CfLf5uI
W!>df;56t
Uj|OEU(;
iCp^/XA?L
MP;&y,
@^Z5R
hSIU8q0V
xV%_C=
OMGu:G
eFROgF
~Tpa"ZO
;#P3;y4]
r$?F)nil
S7yJNu<AM
gU5h/G
%s[%d]|
0>`Yll^{u
(,s&Yl
Z 3~MEfI
F`bX@L
'-r <P
Xa,\T.
T##*!lf
dxP;eu
1KCOuO
(,TKBF5t<ePh9W
+ao1ym
7YJ%94G$G
@*F l-
-V]*04
oo!l4upWHgmu8
&a@plE
5Fk:cS66JB``i
9MSVLj9+Lh
p 9@]1
SDW|0]J
s_'@vo
&&h9'-C
2H+!nx
Qx%$,\7*,(
CKp[XrP
&Dg^'PH.y{!vvXX
OgBya}
@ grtx
D8m|K'
aCD`aE~
w[9Fh|
|tA/:
$Lz=@N
`7cCva
CXH8{CuD
u{hG{}]m&J
;1"dxM2
Z08!:
;tVDug
Fun(Of
TPropFixup
pc.u"+
qOwner
#R^F}H(piaxt
8 EpEi1x
+GPs!{
`* GPbA',
OeLpp'3
F'xwX8GNu
0V+SDt_
V)R8pwF
;Om4S=
L& NXJNEH[
t9@#>B"
17"bI7Hg
8$xs_Z-N):p[Bd
)ej )mP&pi
uq*#.B
ZH(EdT0,
W#PyXef"oPh8_
8P,1\
Y}rrv,EjuY
"G4@Uc#
-0S l!)
XrGB0B[T
(tK96,r!</Hhx(
y!&ayg
-==-Xr3IJ/
h!#I3Ix
7Null,P8
W@}%[Q
\u!*n;
<G:#VOS'1
%@1Z3R3
!'eAAcRS
0&-73PlEA<
OqPw4*
|$/RO*
SzP"s'
T#-$i0+
*!+P)?
zE~%]mGe%f'%J
|]'v}xq
HgD'b$
hL5! @
fd! s9P8
$+CaM}+G&
5\X>f}
`7#v(K
!RP?X1@A
9~C"FS}
gtP%yiI
X63;u@ko
!)N:*J-L0E3Ku
B{/$?)
b/qF;R0p@%
C>TT/7tX
B+t?Z
4kw0-{
rFY1=q@}1
s,iYG>-H
aZGih:)4!
qWd"vQ@+[
J&F. 9
5AvPJg(65x![?xs
WCTP9'sL
HN~HBVGDW@
Mpy+Hz6H
cLb',Lq_
dow'}!
;UtIl
E]V$hp
99p!@:
}7e\cG:n.
=WVsPLM3*Hp
Pht'c#)_C
6cp`|/
'`3\D3>
Tj@jooa
<WG" 0D
.0Z%`/
!2[lbU
ifq"Ux7d
C%F#vR(9jL.uW
~s} ShD]
E<##EC
W LeftToK
6GR\\A
#D_6;_
]#8YTc
+.toI.
t?3@j`1
."']W|
o BHXz8
kUG$8L
@JQ;#O<aD
y X4q
'Q@pb%O
GR:&t#P#
,hB&@y
N6:%$<8v;C0t:?@H!\
!=8&04
xnGAj?
'OX%=1
7QIt%:$
K;us]>
"B3@*5&.<
:h0A2H10zr
;I7!])
$g,/K.`
qKA0n[#X/$
X`S=\; $
n-[,K#&
h!,g8M
6NAnFontPitch!
fpDefa]
f-edv
psetk!|Stylix0
'xgInseFr<O
Whit]e
/FDiag
Bnross&$
OPoX$
c^sG{(
ifio!#Dm
g8L4M@hC
-d jj?B
HezLPD
'?$mA
>0>8f@
`wTCauc
d v2e8k
rc`D?ze
RedPS8ww
Msgb6HV
*hnW|C
turU0H{
MevvfG
TmvhGq7
`h.<4w|%
B|p,K
W\\G@AMan
T;0It!
ffkuH5<
s:[FJI
uU-f+9
^iMx#Mv
2qGnO@~6live
PurpleGTeal
;`7gSilverbcD
}LimeYellow
Fuchsia5
>!AquaA'
Ina3@~
$Menul]'
*AXb1f\P
ed-98f
gppW-k
Vjf>0=_3DDk
'{k.LTInqvfo
'Bk^*,tNawF"
&t@,R
'ANSI_@CHARSETDEFAULT5?SYMBOLc
gbMACW
HIFTJISco#NGEUO[{JO!BaGB2.312
OIG5GREEK?TURKISHHcWjb.
AC/BALTRUSSIANw
/oEASTROPEOE68~Mj
3O`Swt
V/S{ )
4R3^3Sv
gA/G.K
X<TkGm
u5hsc%
L4C[4T3?
`:%Mub
@dFh`i
lWEL%_
<,,FT)
4@V/Q$z7P
wx/b^j5
oK!ymX+Q[
.|9I4d4m*Cz@
S:Vr2@/
Itx\o>.$/?oJ
TPR_)~'_p)
/TV%@`6?K
,y'sd{F;
LS^`'9y
MrboP}$tW
C]{Kxj
wa@u:"
x{PFQC+
/98y&)
%dq?vW
?v4AN[4^
]m@sTH\>"C
:t7\Vd`
f(nbik@vL
$(W:tS$$p
,{"a a$
|2EbGK
G`96MA/Lo
*zA.L`
uBF1zq)R'
bca&kdw<
|{iql!
0[YY:%
y9S}2)
$(<4lh,iW"
0T[yH ;
&PNP&l,c#6vAq)M&ckcy+
Dhk/CrS5-dhx
'1q~&eY
XZX?ZW
WR{oX&s@
Ix3"G Hw%
$c 00K0W,qb?K#ew
]WSOZE80
"o1eVx
BVnPOJm
N#8C#d
sW;BwkA]
0`j12~~c%V
+Z_uS6
X&`o;BH.
F"$;]~_C
(AH#EU\w(JF
iw8|&U;
s{7uFOu=U
<C3}=1
WSdVhP?E
K?TEe*1
TjT5p?
<C ;CB
T `v4M
VOf,"1
&C2uA-
xc~PN `
":'!WZy4
Un,(T9.ke
#)"w!.o@
X C.UA
`D-/m]4
]2qt$+tu0?i~&
+1hQ!$~5
H=kJWBf9F
APX0Z8oC
&WoTv:P
P(cnAWy"|$A
lDV</F
1@Zh-E
AI}(Lwmf'y@
eicobmSM=po
78FM%u8
RYxexj
ea$X/GB
TClipboY
NR)/,KD
;%Za6T
A>S"00
FQ\Xp04+*
?Wjc9N&k;
x;k *kZ]"!f
x<BuP4H
/ oiLn
FHX~R8j3x
< S @$C$
]-j\o$;
!K;Pi4
4 : .'uu-?[ f!
+#woFN3Tjd
%+d[n3q
8Y+9dBP
-U0u!)0Z
dhs} EMFtP
JKEw[M
+E:[{+
V& _$&y}
I]A3i`G.P
.LX\\f
WCrx1P
p ?hWHRXdIZ5
~d%:`_J
NB qk!`
$_V@bw+_P
v-Lr -,
2le;s-
"Fa/eP4
5C`LdyhtTA
e|3l"%2
30]UM.
hiT\ea
b U?fsfjmd$
[NjB[4GAX
i#]:Fd
T4rlzQXj
ql(9G)(E
"{`j$F
tBJ<I&g
Lu5yDu:
(s^ +Rf
?;RiDVT
s4l;z
/y`=cvdt
jII;Eu>
9\4,K%
<vK!St23pqtlL"
!;Ey_"vSVEy
;A:,-6lSc
`2FzoF
)Eo]sM
O@#G $
Pe`Q%<F$`j
#,,0405}bcT'QIA
-p)N@6
7F~',P
clGCc0}
SlF>VAcU
%5TpK_
gRORMS$
] H1Yl+N W
?a<g?.4>,e_
)-J&*eo
0Cc#V[
VRwP@pV
vem'.U%p
D@G,e2
fk'lSB,R$m
i/A>ef
tw^(u-5[
xK2[Q (
nv*'YjHwPI
#I-ZqhQYG
:SmeG:
\)Lf=BM
OO?"c[ ;~
EB VwC
7 t8..
g@`hl4W
!FGdn
}P"y\W>w
WC^t$.JGY
Bb@Lu=lu6
7k~H%Ow0
>;CU0(
7XyO4VEp
XGm:c@
V[|RdTU
](Pbt@'
IhZ+&`%%@
:Cb:fP
jb|7+&
Xhe`eYS61b:
U}PA4]5i
E-x0KmUq
a8z\6R@X
sF'SyM7ZS
@N8'2`jH
,u-CB@
@;HjCC`
\Xd`JD
Uc3?5B2%sH@E}
[!sHq@pgH-ua= "#{
Q0YlWQH7
GlT]>h
s(*7A.
xdtPf,
!}?$ca
e&e\NC
H4oOA6ed
XV:PU)
<82 40,
9%qktR
vM/_qu1=
eu(d^K
$1GD=<
R\RJOf$u
S%%7e (
<5,L]xy
k/)From47
H*Vud33
N'7y<I(
9WHS63&
qugc>(r^+
W?/DISPLAYN T
y>R0u.``
HHN "
EGUIE*e`
!-dR6W+
u16%->
8X|(Vh.b
g'SEnumplay
kJwsw.
le+DUSER$}DLL
o)|p~E%
M \_LI
7vmdg(
O([XV`(9H
h<[i&nI>,
S?1Qcomct[hbIiVW
tSB&U+
_T6nV/
_`how+@
dos'ShC
4`HB>(w|B#
4rzBw.=
}d<|msV
aabel/
rl.rCs|8flA`S
rp%q2KD5,*sB
(7QLq@
Em!K@|
ra1 s2KjjoxX
5HKDMX0
0L<\0DB
Foc-,
Par`PJzQ0
mtCHXSCqP|
PopupMu0
uVisivQ7$B/ y.FWKE
|QwdDoF
wnX9K7$C)
J*KUp<py+
9rtr:K@dH,v
8?(A8%
eX`uB6
MaxLengt
d !(!i
~Qsswhv!C#
2z\$MZC0%
I;XlF1
I^:Bi7
V!3KeyF
Ur89"^:
Dx>,/GBB
BufP+nvP
HDNhVa!^
5P.9bp}<q
o" `4|
!"#(J$%@&'
,-##'x
;jtBoxt6
lb\1cd
S4+<)<*^h*t./S
8,[f[d0+
(+8vAi5
=#409B
<o#|8&>umns
~l:XR@HQ
(S51O"
(8q6C)!ZKC
WU20122
Ipx4((7
yAlBB
y8`8#B
jT@`Vk
f<E`vr'YZ,
X>.D)md
gp8Wy~0[0y
vV><P7
3V}S)-
~ ..:/!.
ND(TqtI
Phm5!k^'?x
%In6!8(
vH>V5,P
B)5fLQ6l5
F\9d@+
n1HQa0
3g(`OLr
iCR%&hD 'Np
DI7TPtG
T">e#GFX
L%gJz*)j$
g1_1xxnz
n!hdlo
p2N+ $
'CZ:PX6m
gX/F$W)!-G
8pUkcE\N
.nG$I:
f_8 Ef`
BUTTON
:u#nbC
E5GqMN
FuWH&}vAHec
n!I?LFr
%XH"HMB+9
;nA&1v,u
EIj$)q
eT_k'DPU
Bjy~,d5
Q)2{[~L
[XjUR+
sBy3g;x
;~.E;
!GwLISTBO~,Xm8{<Ux'j
`/70Gp?
i~;6{`TE
u7Qst+,{M+$
e~IyM\@
!Cs4._
_fKj=]B
.xN!yRtt
E>$;p[KX
e%( o\}'m(
<afdJPw=
%I) )n
09v/f"D'
f +,%F
.4=]m;lj55M
QOw,&(WU
H|-frp!t&.
BG+pMG
R3Ua\WBjX+P
|CG0B00BC0%1B,
8'hd2\+^j|f46t6 u
/C|$4)C
|2Cp2Bj{*W
(fo640><D<jUU[*M.p
WYv%t&|NW8&
\`)'``@
oM/GP6Ij
7gib#g
/+6dP2k
inv8A'\G
c)hi{s
Ye,6\9oF
6>VKeO
niA0w
:eAn&6j
@7G}20<#Un
iNewUKh
F)sG"H=0
Whe*el
Upn}pZ
?T@* o
6M @0V
i"C3><xj!
NwIme-`S
Chaf/@vSlguel(
7ZENHv
/89jCf/
xZkM4&
gDZZkN
@FH|5v
,C^&Ew
xIU!/l5
h6xg\g
G]vTCS
/rmNH"#?IBeam
HSplitVA6
y_SQLWaQ
5LQB02Du
rS`eR,?
s-d@\)
I+6LR>
6;#dVei!H"fRGD
TUq)0e
&1{m.#
,$((,,8
b$\N,Sk
u;XXgM,
6w`6!85
?pB':El
i^TPX_SX
llVpD{D7dia
+L$aA{
+GBJn!aM
NFTH S
U6L\b&1d
xA};wuEC
*l*QDe+)I
h!o?;t
F@cX@j.
b%I\bc
|wJtY9u]G=a<
UTH~D&ULL
jGN{$L#
2 FNa00P8u
isY%j!
McQ@(Rh/
3Sr\%Vy
Gpr||ts5<
>7v7.j8t=?,
uX8KDH-d
tKXM\"^"
mGB&c(d
)xA k\
1BT%T}
1Y,Lx\
6Tli`6
+k+PTmY(
ZajOS
:_41$TM".
qtS_1T~+M
SH(,p8
F8ZqW'6rLP
)?27HMR
`#8PD<#F
S*-@?
`T8Y$1fClar
UX::5
.[W]P!#
W lu/i0
hBl=lX-DcA~P5E?zXZPG)TDM.!hB
W}uI<\*eKwriB
Jm2hSQiByi] F
K/MpX[V\nJ+\e '1j
8j}`KrP\
%#>\o5O;sXt
q+>[;N
o6t@tv
z"}K@Bo
MWlMgF
g=^Ua;KQ8
EZl`I|^u
;B0]1' TM80Em [>(fF
o|BBKsX^
HIJLM"
Ll!u3!|
?tCl=6\=V9p
$nM$+
*ABX~r]
~GW[pXIk^JD
4Wxe PWi
FMFL>\
d4Zt+
wCGf@VN
m*H:hVN\
p;fWHUZf
Q~_QNH,
< fV0i%0
hr;^0'O4uC
<tXVGS=q
R<"ZRE^0I
'pXKY84|m
L?<S0koC
GSc`7;::FD
D),vZbI/d
<El-;B,
`D]5Fk%?gd)
R/1\H
Cu'"2+
+Q3mht
)|Bw<H
9JS5HtFkt7
4n %wdxo
deW+u
u7fXy'ByC\yB!8
{L FVL9
'j{BG@ t;h
q{BClM
4XK@+Ss
O%%==;
x4m8?^}
+5>>~g<_'8
Chm/R>1v
gy}a58
_;P`P`J
,1=Zu&I
7~NN_{8C@@t2j2
u`W[C
p!-E6
o!(0ew
QSEf @
'bHumM@
l%(sD@V
`]@D9x
STRlR KXS8
Z~?b++9}WnX K,D
m&+<U7+fC+E/
Z{EW3Rm`P
\M6M8Hp8
?),MuPdQ
<i om.
Zrc^'pj
p/Zoh4VK
+,Bxe@P\C<
"@Ks$l
8O+ <u
_uZht:9&%$q.r
6~kQMlr3=w,%yW>
>[C7?~O6
13%Z$l
<:BN)M,78)h
8VrBI
PXEOa"
X-(G'o
PQbs"6d
`NFwDd@
`ze\E0p
OT@P2l
;[u7ttO
-we[o3D
328A^3
SFJm#D<{z^R
n|A]bW`
`92[_P
POUhCP
OCxFBxp
Ho3..\
QrP4F"4
XDsC ,
+^8B<%
?k+UV4
P& 4`"i
Lw=:eWYu\
$Fp_`(
B2%BXA
?(J0<b
x-"lF3
PIzhp#x
e8B>L
|$44JSjm$
Df)khu
0cdFoU*@zG
|@ug4C?G{Q
RJQ+-J
_Jz!@\;PXC~
$bH#$_E
*^SzNh
5=y$P^0/"##Ik
NT@VCGL{
JJ!G4X
a0( I_|
0808(!
T927e,
E8(nz:BQ'F
x46xWG8^
x+Bx}+
|r,1u9
9|%;?D@R
-<Lq+S)S'J
=dk:_B
CP;t;>[
7K?6>m?
Zjf'\f32
gTU`L.B/
kj;B$-*U+W8
GX_H)>RCI
!LD_5&.(!
i&1":4Pl
jV20 Q
\!=.&x,U(^~
J PM?*U
\{ Y4V
qy3#%B
4kV-<T2p6-
us{*@3}^
`eOE<'e>
TNvwOPDt1 FV
x))G%&A
T(nsitb!]Ci
,lFTF
EPMDa`Qk
dS0"o/t5d4:!t
U .QKl
Mp1X/{d@
)^i!0/dl$yA
SMS.b)Z((6
5&"6Rps
+S4oC|A
H,'m41Z
q79BV.`i
b\nYr!
s(\zjOpwR
*$y`-G
1!%EfZf+
)AA;{u$*j'D
`!xaTy
@| 8W
Mh%(G7GHf
}PBwa7
R(zq[XT\b\
S(8Gi
|B/LTK0
#<!XaDj+$CmK
7JWUK0A:
w^Md\YA,"
Bc:R<k.9
iNE0u_q(X%dt
Ox4.8$-6
%.YZ&'
'gMS@
l-&q+Im@
;a",Pk
C^gA4
c$0b-H)^
gyh)C{
6!RXg)
S{h'^'ia
5'Xkh'oI
pb;/a$=(MCp0T'2O]8JV|7
CpJtSt3aGB?
LWJ)%{Myg"
8K>Jt[68
qlC|B_%
13$_@}
A&aUy`
A>0E$_],PXHT
o6MZ"JxZ
t6XBOOh&'
g01g0^cS
$#W@&DD
"WB)"~
Auj5GOtx!G
b[C!%Q^NE
Kx="Il7T
^/Ix})_
?f\@hO
[j"PCB
/I;X8`J
U]u%SRO
c`m&nt; j4,a"#F(-
NDj5J
; UujzI / YZ2
0^t(+-"a
Zw<X!U/
@v\u|&Y^*J
5PC!/qn
t"r3N7E
0L[ =ar%E
ZlUX!}u
}MUxfd4
2vXKn'L'5 $2D
il")%w
aCi$U<C41u*Sc&a&
`vv08TE+B
lp<Jx;-|3'}
)~%#'H
Xp--L2q
AB?BT$
0lC}/u
d)HZSxB3m~
4S5b$4
*w$lPi-@)oUkY%7e>c
]l<f?p
O+jmdd%
<X>P9f4(
Ky!|8I/
E&j)hiO
#4 8.N(Dbq
Esu3PI
_G$;-}
Fj6R|+{8@?
TZ oD@f
Fd"@vc^[Xx
!MXe`8
}-U+G+
(wM+M+
P$4RDy
M_4>~9Q"
LUJX_E$
37Ao//
; gyEFK
(%{Su/g7
BY#,G h
qj zWA
kD1y JK
."T.O#,_2
W?JR\u
FPsfAu
()$OgU{.<6
%'&y!8
c#s2m*
zb"Ya[X1a
C C$/`
I8tk*i^-"
;hmy[B<
6w=g`8&
l Q?:gdZ
! Q%&o-(8K
=H-(,fgHw
p`@<P 0&
k/oZt r
oT+|8H1moe
]L1A}8\
'+B@.YFfG8=YF8;
<nsL"1(g1Jl @,O
~sp{hl
9'xS;NbaX
VpdKw4iv|
9;w4t
~iGdgdey
d/CY$T0A
F/hN <P
!y4G!V4qP
C#i\^C
!O/BduSP
uF@whH,@u6CC
(*rHxte<{HI
(C8p8qI
$+bmqc-h
xRO*eH
cO#"!I
, ;Hh|"@
(@b5 67Gl
%p!V)9
ldH<&1BX
K(`D`0
Ca]40
#<eK0h
bvsXTY!#Q
$ @"T7
L^BI=3
{}+}UkC
^i['S Px%B
f3@O!WCh&N
}+/R;<
8FH@FD{v%|=?3@M
O^dVhX
`u7m8ZG
1|6Y/4
<Y338;V
cP :qDd
M%\1DL
!E+a)!3"BUFU
Nu*Ph0
]4XdVx
c{SC~(-0
dL)0LcRi!i
aw]:qST;9B
aU}NC+B
i=!B#9
#]cy@L
&>;^dd
u5.IGf~dRx\y
x=BC!Gho40C%/C`7d-
:FHC y
UFC@V2<*
.oQ&;PyZ
'3\Kh
zX\PT0
Y'-0N=)/=!\
m`#P[k-WS%&2B]`7
T[;[[4
vQRO,VctM
2FZtI3
pV7 ;i}'[
`VQf [
B$DUM
p%|l07
?6QRBT|
>#76@`pqPP3
)X.\Av
TUrpYQcY`
+C@,@
p2.hkA
/?uF4V0
Jqy^I8f{Rv
F4+c|QRF<
E=fjK9>
*7^<H P{3$)Xl<C
WINNLS0zwIMy
^us!h/SehmL#W-euUtXK/FA/
hnp&%
$|)kW-kM[Rz
i(VKr;j
5<jT_T]K
V($$C4
ioZ,0w\4`48,*
;#g+;\joaq4TP
2Ql8%.8
'_$ChAn
|<(C4)C
&60Q?HlB
HWH+CP,C
O(d'3l]
"ZP + Y
,@Th|M4M4
5pPL1vBf/$
7H&r05
'ODcLz$L
Eb@$w>77{H
CH0x@J
0W*%y`
H/#6_a
2%?P5mb0'$
D3CH5(D!$
a{w$mH]
z!cM,u
|c*;~,
#CE$LEG[?|L}
FAfrVFb
&f;hhl\E
?B[LD@"
f'@{@v
]$x=|5B
h6x'ejK,a
?@?:]Xt!C[XKE<
VY!%'SHY
.;k\!L
%P`H&X
dT;@NdfhtG83DXfhG)*j\E=
tSpD{Y
,K13CB
C83C7bvq.
`tPGjGJ
Bt>CklGU
:7hlnx@n
;EMR?
+nQ/LF(
H$_U56C
F*eZL>yP
`uPQP45
0H/[(JSy{R
a*k$WYW
DwxV9/
8kLus,VV5!
t0-TD =
!8CD4&
[Ez_99
CI9!#R9f
qRj_:
~h$-.?$6.i
qx,b{H%.U
$H#;4H3
6_w.W^4
0r=0j_I
7(<D>_Rw8'$
v@mGt8[
S!SckW
F7W Q,
U(F5C5
pea<qu.P
[UF oc
:aW@OAcO4t
G"rn8'az?
f_Z*Y
;\VXwKn
xb*gVcX
6/BC<2.
6BC&pSS8
CV3C0,9
/G$(FCFC
nYEG07
.OU!-I
S,(Wpn#Q G
UYrElb|
CM_MCHQG
!bE7Lp
J k$F
y(G@P/
GCr@&G
> H>JA
%$ng B
Rebuil
TAdmjYnc1%x'x
m+,dbvJ
V]C^C@>xiM
^8XA4Mt
<Na_@Kw4
L~[|/sH~
hXS,T|k
HotkeysJ0lx
'KduDZ
B,(}y(
hcR/ddpBH
G+p@i{
<oRadio
fL{2DD
"PGn0O
(h'SL
W|lPp
TT'1eYBPq
-{S4c5y
oni+s}
hA\d!GLqU
B:N |$.
/pJ1234567890ABC
GHIJKLMNO%liSTUVWXYZ5
MWzRQGC<L
AVkj-YL]u-WH
wbUHWA}
Ai020&,UAAgdAO`-Ko+a[C z
G) $+L)
C<r`M
ID/l5f 0pOT/@`B1
ZD,n(f1L
I2&iWH})utn+j
=v:n2R5
Gh!O'JCHCd
%gT$
t)j%HB.b2L
fahfGUB_2@N$
l<$>m$qB(x^2t
24n8?q
:'^WON$
Ll=6"DfxZZ
,2_&$|!
TJd pmT
W~XbI|XO
@o@@jHE
.LWc1E[
jXxSXr
|'PGd> Xi
R}4fXSp
d(wbCM"
EPpPAeXd
a#t&. w>
#^@;,$
/:X3s&
DvbF3v
la*~*7/Shdvj
rwgI0F
H7oi #
vW]$[>.
%#C-'`N
@+S2LD
!B@~g\
c)`p/H7-f
Q`]D9>xs
B(}()a{$
@fxI_=v$Aj
QI}7P94
@-vv6HPk,l
k^K50~zh)d
BR,Y+vBBY
1$>Lp5
2q=]k5
8v[Xtn}e
hEf`!:2Q
~SXTfMU
X MQAKPp
^UPD ,;9
9x2199
vZ(th+)[
WAfgxH]&GUS:"
`dYP8SPXAiX1zp
8!&"6^
>[H7OO&n(q
ZXmxi~,R
(i^JN|
&:P<N<$
}YoGm$5
l2X'Ru!e>:~Ox`-,2
ot?i{.
8g>5wPP&
{PjX<p
y2E4C4
AobubrT
's7o ,q
nBW_%XG6.:&IXX"
%GXT^[/.
}wGaZ{RF3v
LC0^ke|Fx
!M*)gm
@UCcDwYf
j0|.$088
$b_V"q
-==QzS[|Vx"6
@S$-C@FKv
888C!G*WoaT5[Kc@jRU]#aE7
@\`t:S1t
6&('WX<Om$-
wHG\H" LLp3d
STf+h<
cM9'ErMh8P2?$(
%C0,CP248<
HL!4l|
plpl89pAw@8 N_pu
'!t1(/
'Y!Ir9+
wA>h..
2u*ulf
1u/DBH
hhxCE<w
#hJ "P
x2#@O%@d7"B]0a
xS&;nwD6|"IP]H$(
u?-jtXU
_+QZT(J$Pb
]LkO8=N
oiep7@
\k>0@7
kE~i+-D
y0+<\O=5~VwYFu,J
Uig2paa
gxuVQG{40P-?6
G'DQ9L4
b6$y!01S$
O:P//M,s 8HLH$l
5+|?GV
Ey;!7b
|#gdJ.
!00C/0
O |BAH
dm'G8@C31F
'89(8+em
i@(vb,KO"
J#-;SD;
B$-)P(Kd
k'n,YIpRLY
)@XxHd
sm\k_yC
~8I1ON
[<s.K3
N3;EM,P*r_
$Y7i4Z)a
}qC{Wj
=AtY_70
:i4"[VH;
a4F@?9
02`4N\qFB
Em}W4]
bohc$F+LF5
U<8%9d<8<JqO;w
iEV*#
6F>K!}
A'mJC$e)\\
fy-qp$>
UMaf7oG*(c
l:a8Lo
0!vm?00GLt
HI\;J(u
0p8"W%qP
'(8W(
i|SkOw"vF
J_N|t|
6~b$Uc
!SQa$7C
IC3U=N<|
j1\I5JN2
epD:$oV3
Dsp$\[b
cTbXW
'LV&[CZ
C8]H FLG
X \K_a
H@8LhS
<7C(Xw
y_!k,Xf
fUfI vyw
"6F+EA
<&uOw6Eg
.@A#G;|=
}YR8Cy}niRga
f4tPplvgN(hd>
ssRegul7
xSmo]h0P.
QEHCzC
,&Dialogq
"#$D=+
-.Qr/0
r[ZmsV0n
IO} a/v
rm gSf
G^"ayE
Primary
Neca0e
QuYy {y
+KxShv
$o&TWMS3
WlWLn
CwC@H0D
\/"LLe'
f.m$.>/
PMlk&l&
'<wh<]H,
vO6v>|[X
`T2 H
bR"(!:"
vwxPBv
>)K7Hpy
PixKUsP
/H/?dq
55WI5W
K6Wx!i
Uj\'/E
Raxg>Gad
d?@Q`!A
ECRn@PF#
D]l%ICJ`#NQKKS
[\CQ*S
vaaHRi,y
/ yd2D0DI
$@Ad`D
o <D;D
HS#$7%
d0@D|B
G$<1PIdO
$0@z]t6t,
&Xa$Ur
e*PwJv
Lt@6,S7#
GRl;'5
:s2<L#2(g
-= qa<
x$ |_&]<
N:$CKE
F'9%HwHy|<\y`r@
<\y8y9p
b0Co N
,\Z$aQC
fP/O!)<Z
g&F(V?,
A"CQh
(/:cpjwx
@z;&$@
u<anfj:XmooaZ
O#y)]I
+X.cu%S
CVQ6b"B
>qfCTrC
xx pvy
5ruP("aEx
@}e2A@
D8e$hOX<
F,-&,T^=5}
tMZLd/W
rhbMm/
;19vP;
w09@h00
o08/P8
2$atLr88$Gx00mL|Q(
*9esc>
p+C E+8
c$$ Wn*D
cb47*a
O:.t-B(:
0`V?Z2
BDYZ#8
1QI$$H
pYSU7Tb;"?
`B9CAa
+[$/?!
!AOQ/$
njEi7F[Ah
i3@uSn;D!
C'1=n]Q<
LC@ XU4c
ZAC[d((j1g
*Gj2'L.4N
d_VWXTv
AJh]hPs,
~^m0z;~
pGK%jG{w
!wp!@
[Tbjy"YC1
VVm4H/'}XP
c1I4O`Xo
t#isPV
~%LSheKN
wh(,'4~s
Ignore|
'byV[AU&i
^PkX(c
?Q3`Dc
k`(?V`.HF
rB(=$x
#n$Y:^G
0kfSCM^<
/F-i,-mbE:
a?5JA.Sm|
lqfoH3A
c<'XjN
nJCCA]A
0&H*mk+-14<A<e
$[$?p-
FqS!+2
Jc;3t'a?4c6#F/%
h,[g|V
lI#Sh)
}D7g.W\
9;2!,T!
XpUj]<6
-0L$(+xO&-u
9P@eoMVc_
% @(x@}m};
$:"@L`@*
|2R_ga
a@Y'J;DA'
P#9G/uO
;P`G@U
#`A,3
[wtWp]T;C`u'Et'
'pCb,`
XiK/II+
<5;XWe
}.UiGQBT
RG{;%d+c
Y_haA<
SD8GQ3F
Xr@x(Km
7*jK,I
bShhCK
LIENT9%:
8{{t%[k
.fb`9GL
';Jpph
ywLFa&3
*q`I.d@@
DlH&@;T%|f'lf
\)CpSg;l
O&la5!
Bp35F=q 6gH#
,pYHr)
I80t#;A8ticC-OK
&tp_d@
(DmIIX
$7p5$9B{[r
hX;v;rOuq
J$[F,:
g_1/u)f
Xn[KFA
4mj04N%
J$j)<0
O0&LdM
0[]!QI
_51hPja
K8cPcBp-M
HT$]Iw
\ohbogJ
Z!0#wN
%Fl9$<
BITN1O?O%PF||
fr4gt|[
SF]NwV'
i:HN7Hb]&j]E-?!{
-m1gq@
M&uUSp8
$I@&U<G%5n`
J0thbSc
4r$!If
G&DvTod<nD
9Ql^t.Vb(?
XT0pIpE6
uaV^jAh3n$v
A&\woAx
Xg)h?'0@
23` 8~)!H@
[:q3f,,f2!ce<6>FI
K-m:V+
}+XMd,j
cxMpM
sW,<b,
p5][0LN
6>C5U!
K3;PKZ
UP*H;M
!CvbP52FCm
YPt7L"
*cGH!%<2D%$l<
qTlYp>
p$]p69
(6DS8%)`
<O6Da'Y
=F{4OH=
on7D@ U+"?
b$@3$n
K,,vS-
U07Offse27
`^Js3.
i[@T(r
r!LpMAjZt
[P;DQh
d=IetA]O|
j- PSK_@@@M
\A(\;C
dynEXdd)
4@YH.o&M
IET(@$|
md],G$tCu
]0*~-h
lM@p&rO9 ?hBXba
s\=xol
pP*/!hS,'1l`f
uo9L'TQ
I|RTs8'fs
;Juj -d|P8H)C<aq"p
!pLYj<
4Plit,
wt}EiW
3r+=)'
?)$8Ct4@Ym
7<g> _]q
c$W%/t
{p Ex[$
TL+!tHQ,vO3zb_B
mt7lE0
_MAC1`INICON
u4oVwa
)-u"n?VhQDCNx
kiOL\h
b[lD|,
&RP8uvX8p
`DlluP8H
,SS4$GVVic_P[
`oitWa
t%+Xu6-'@&"
mD!S&S;UbB(Q$XY
H9h8A$=
ONe\gR
WUZHf7
`,yh%F6a=8
1^(m`g+"fVoO
&AN`u)CHk`eF
f_,50ZW|Iv
*)|vclt3L
Zzc`Xg
NKw4P }
V<j@y'A
0P6srj=nKhn(
hR{Op`ZJ!J2rIA&
B+4OBhV&
W#At $
]eJ+Jp
A5~#Vv
MB'<%K
k5/?8"3
+fZ{7y]M#
;u!;u`
_4'&=y,
tW<`R Nm
F'4||$uC
E"-mRg
A\_]%lR#
{t`ELr
4qbD@g@D4
Cr*vY:Q
VXx4\(5+
f6>XD<
m(~DzS
]5F8{v{
1"YhI'"cL)g
s<tK{<
RiBB",5
$fD/PA
\-}@Hc
|bDvCDA
hQaj .B
E^0XeLPz-!HlwI[`BC
'l!RKa$7a#E
;Q&P13
0xX|Y,h!Vv
pb,iz_y
z#BGzf
FT)|FH|
h 0$P[:AS'p6!t
FlD&'=-@'yu
H0_nSB
bi1y4uDp{)
0hew WC
[tq)PLOg,
}7,E#i
4?/NJ.XP8Q
YP_0_D:}
BHVsH/2
%_0WTYT
"F.i)a1&9#
Li5xIbg@SSk`
44j7Hn8
PUpg4|
qD"ZXE
qDqD^2$
pyD$~D
xaldXU
ReDjDe
9R ![/9
hDPv(
!VJBv>
Om2@)9S
`"#dxjl*P
L4`)xEA.eA$_r^.
ip?"u
BIh~C7<
O&kXQH1O;
G40{eg:9
dd(O88
%/;;M)
/L3CsAA4
%RED(61@
u.uVuG!?8|
-CWtH5!
k8?>/[
I::Ml3eVCf,G
jAO:P88]XD$P$
j 0]*4-
iCO$0oV
baFXQXPbg$
JH&Yf6q
EcD?$Retry
I`]S!p#`
IshD7T Y
EV!jAg=I
Xz'Im
N^T?+G8!0
&" =M`Z#
q#."{/:]u
,EXyfd
D9sKr%!)f
~lM)MR(-
,0DTU$
mdlg_hnF
Re%cW 
u>H}=,?f
+abcdefghijklmnopG
qrstuvwxyz0+I
2E@u@tI/"O
]nSe5 p@'
i5S<P4%
awu&BH
^iJ'|oH@
{+; 'L
#D_f;\`J/
t<Bz &-"
g|?RE~Vt
pTW\Q+8
MJLjfAD
~O9cS_
.>Blg'+
9!0R<ZJE
I(20M"?eZ
I<\JTLuL,
h)699C
mAZVHVK
C}h$DDQ
@]`_#Pd
9`hpl@
y|p9tx
/SnapshotZD6H5"
?7/RCg=u+
mBu?WZW}hcXZ}
Cl[K??W#l!
%AHI>HJ`
TpLog],
@epncyx0
SvcMgr
z"FuiN^
)ypTe0UIMX
'$=inK>h
opmoppfgG8p
_`CM<H0M
@q]64)
Gu0xTl@
<XViEG.
H6yIDx|
~/\T|;
BefUs!i
)Bon364p
Py&B^$
NE]lRk
0tfl'O
9Z-C;'
1eTK]HMp
ri"<U4M
L`WfT<
WX3oG7
QBWle-
)jb 3@
>.@ap"E,!TU`
SIPQHq
Wxx4%T` $
 [?\
EBJWbE/.
X40*md6qSV);,)
AxpekX< w
z#v!0t*
B TJU^|
qDg<XS!3bAq7@p
^6.MsX"
HH|_u0v6T`
EpAo0 $UFE@
((CZem=$
nc7GVaO*It
;s}idwF$Vh
'sB*3-E
`-?/d |a
L/#F1"
ASh q~
Cxu t]40
(V;lfT=
< Tq$h
H?e[$cf
qN9@} H9cGoU
+)Rs~ @dVi)kht2H G!)2;B#t`OP!@
h~thDR
qP WXDj
NPOC9K
>V!2UaL0"u-,t
AFVma"
asLB_!U
INSTALLSILENT
|$ &Lk
2 xtpX_5
r S Sr r
_<TNMR
ostG,\
>/6)Sock
$6XnAN@5xN
S1L%H!iH
jAis=ctLNaH@@
6!iMCG
;0$M;dN``
PppB!i
'`+a&Tx
( 30iv
D !Y;s'd6
0HgD:!+
C;mvAPZ
0iYf3'x
z153|x
Lookup d 3
i< Rte Addr
w?oommw?6
\_m*.CMQ]j
b;C/|<
PSZBDa-/tSx
\Buffer
e]s< ap
lS$3
T8]7ri\2{
!N);V/
::RD8$
J;PrBY
_u($m^J
-F%+VCI
GO;x?G(y0M
$FWj@NYpf
]N;pF0
rH19w/Xz[7rT2
NSD },
uIJK![
?OLE_'aK
+E@(auGk
*p;=}
.xWlZ5X(z
)<)"`{
/Vla=zQ
okN=heeRQ<IV
$ "e-d
~pl0Up U
:[ISYYHN
No. $5hp
@1O?/y-mf
jh\f-c`U*85c
M@$I2%
<Y*8"j
hRfV%Gx'u
BY* XeS y
LOVe5h:=
x"v$W5 8l
!pa7 zen/='atof w;<sO fCNj
B)<0pD@iauIH (
A5!Zf)2
yfC<83
D,c:I]V
\JLHQc
t|}AXnaBUTl
H_t6Py
}O2TP*
Fmg b(>
!?Vtp!q]Ex,Y~
HTtF7N7
)03`Xp27
xb,,F.d`D
@H@/F<
CD#AE T/) y.
5/(%ot`NoD0r2y
JX#[xf
&K;XC_Qpu
&SNHZB
l4/m=Au/Q
W![UVD%#}
rZD8sp
4$'Tmr
UUMEhodsq
uuM~f5
BKZN5L&NMK{#b
!.QK99
?ngfC&O
;uFQ0]H
dy<C^B
hGuL<
If,967#2
a2=_d6
^NM1t#k`+.
(KQv*u
Ca?L!uk
: <KNAH
|$E"qV
/'u<sai+!
R4F@NW~3
TU 's/K
pU:T!WCU$
yek _k
6emAhH
r0/wAdE;E
_PutBloi
J9[PeF+Ht`
h+J=iw
Ava-4
))57@iG
)$.vMmk
{oF$`<
BlgW,>
(Attkhs:
ASMx0vpV
DEgGv=
+&4$oC
&I1LFe
\uthVJ
b`IK6f
v HSic
us-asi`4
,DbY#d]Z
K<6^&+tt
GuI3y?u
*8kXAv.
)l#e-8j
8a^t3(Q
+1$/2\(
`,wu1hu
JJQ.JKP
5!8aI@p
T\d!x(
'L FROM:<a>_
CPT TO:XkDA
!b&F;H3$K@)H3Dd
E%#J?B.
V,P`8zak$]D
JLSG4T
_2ToJ7,`.9 CC
Fp6\'Tt-
j-w1.07
:/eMoq; c=_!
1tab-Kpa4%
mixJbgy="""oQ.--O
+lJLAGTgQf
sw-+]w
`n3J)
cCnaFF&
i+GJ.y%nL
:/o/sV
ba64T@W+
[InTWe
"7 dHE$(dH,
Txthay
}'T0_ 3u
xE`Vfp
\Y/'Fl'
+939Z_H,
$<CZ%7
C`}9o(
TrO /k
"[,ELP+F~(
JnM$~|;NyO
}-8beQ')P
DS?yhu_m#'
|AUTLOGI
2 [cn]
=_,PJ_0
1BF9F1A"
V-2F6l
$%j,%pPp2
O2#28e+%
>0'(^(_
8&Ej0\EN1
eo~R|exef\sQl\@^
"%1" %*
#O (5YaH(E
18ctj
VSAJ":|
2fkffgw
J`(Uk0
et`.O(=
e*+,<#
mPu%JP
)"Erd)l)Z
:z%FkgO
H;m )a
SQ,;5Z
#327700)
@`bo@6
T_98O&
\Oc7^5,
",4/bk
ZhongYou5SP5-9
utL-k"2
spy= 8.ShU'O,h
VIiW)ZL
kdHKX\D*2[
y/4ULW
SD25qbhL"hX
2-I~=P%m<2W
92?SL$
\y 4S2.B"
+4#8ES
!WQ7*G`W#\ 4$4
0TPw;AL
,om5D6lpZ
p@:?\)C
|5ZXYg
7W,)1:
W]iQZ/:
SU y7@$"U
|:87PD4L7
/jwMs
k:>:r1%
bB7.hl;|;qE
JT\<EaQ6
a<K5AwjeP$
>[cOW'
%UA"]Z
J>WL,.EXExE
7W?T@Bw
"UF0%ASQ
RX_wMsr5
_wenj=@!Hofas!\
_-w(.w
z_6Kti
/+gai]~
_fuwuq]<Y
"A"4C)
%;v,;
HD5J @&08
G8bCip:
H~c uEE
,PAa.E
d\EJ+B
&L= ,8_$O
f"`-B!
2OFaH <
f3CS4HE !,
hIY.7h3I!
@kav9x.7CK&svc-/ui[r
32&a`#@
wat"Kr+"TH@@D
H!([?b
P$d*d*@Pd*d*`pH
CT;O1%
C9@ oQ
RExc[n6$R3
I!FEJH,
X$[QIiQ\_a
run.inf[)
]]oOeN=
U"98c[d\&G3l9
N`w0^[/%1
Q.I1bI
XA*tYS^sj
gi%eO,h
Yrpb{|bCL"a
>XX1beW
br`\#c
75KDY@"~h
MIN+).Ux
2VVjd"@
|\>BCp
TX!)N
c:\d%P(
d_mJLN9
sOc*.tD
<$f[C&puQU_\*T@>SW..tO.`C
g,:Eka;9
^W4ud2uZISSNo1)
$WFab8`"
g<X '/b
p*dZlH
9Ulan#cydf
sh71ok
t{Diw+
4npi,^
7ezh1$h
#hh&V#*
E598H`H'j, 2js"=
svr62'
h#y h!
ier`X( 4q
/d@ry,
at 0~E.t
DLXL"
dzlit|ii
4M4$,4<D4MLT\dlD4Mt|
98<9E<~Pf8P
lTPF0g
Sf[g0`Avl
M4M4HdM4M|4M4
e(i@X[ip
bnK%>o
A^XOl
$84M4L`4MtM4M
<VC vn
@vtlg'
oA0u,Q`-/
M4M4M4
M4M@L\l|i6d
l4M4tN0M
1 @D<My f)3n
 woulblr9ho4
aEwE6n
n-s/o7Nl
hJ+ r3D
C~qcol}
>K*`u=~!#Ebk
lmY!p![n@
agnQ~eV
oNmQ*Dw?
[&oj%I
TgIsJ nT7
!K!I`k},hVL
NN}D%j9ksOF`f
{ R5:,D-Q
rgNUsGUaIx}pVNSa
NFS"1y!Wri
+k %F|subC
T}l.@FCF ,
QW@OCK
oB3m'YwlUSAup
NOTIMPn,V,dO,-+Hbm%
UnJgrdP!i
O0G`!"
#$%&'()*+,-./w:;O1C<=>?@[\]
zWBek#8
Xy.F~.$
L.F`d?
TB'+$U
g002|
x>p`r8
r?p0fv
=Yb&><
Wxww>N^n&
vur?N
@aW`1
x}%MkKr
tClY3kf
-2Dz{6e
msk<{T
%i:deS"aBl
[c.tSB$
ZJFvie
nvuBb6F8h*rS#
M0ve2O
zv;ggR^h3T."wF(?i
BxsN(Fd
fSk/{""3
e_: hC
\(1K.MG
JgD_n6AI
hNn+fCJ.+fA4g
7INB8Zv Rup:
>hOl&R
p2&{!hb
+SY+.[oBSTWA{,vbNc
z'.0!O5
Cca*p;Wn.`aNM"I3
A6Pd#ggODG'\
Bf(E6sr
a{Wonp
K6H2I{
St&/)FlQ+7{n'
Wo2&Xk
(w>.vO^$
*w{4,pne`Lk
v7itbQ!O
*C2Ta::F
Wd%:n:s^'
5v2P7.`
bm]K?Th
j,P3SU
Gp-K+mJ{jfhVt6n[
.mb_ @
Ctw:b,
=bvC"DJ#K+\
FMP>rz
l5B;^h
AN`;ir
.3v^Vi
,OMK]s
nUt3?:ToZ.m
/vC^:vh
c<(/a6
V_N6F*FhxZk
godh#uW
sc3:pm
Bmj/[f
jF.wjUagn
a8nrc1f
kr*TR'c
K5\]+O *
\4dFA
VQ/9fo
KE)Txs%
1X=3@[(>s
*SAPIy
SlJmN&
5},rxE
VS_)6y
Hu^.o!@S
){keyd
[)Q#[)L
@ai$KY
?1996-
603-578
1-88-G-WEBx( USA);5+dBx
x9286a
iPzn'c.&d(8G7H
ctLC S!''C8
tp://w
a1908+
!qObtnS`
Web } T`'
5.3t.0AB:'
~:5/26/C
KQbmgscw
mitr c
lstrcp
uVial1
`T'm<'
WAtbu%sA&4u$/
cOf$me@pR
/O,KA3
aj5GYb
LQ;m0F/DeGt*Jllom#
Tap1CG
aAC`#
{[`=gId'X()Py~Y(n
0;EiRV
MvQn@i4uA)
[d1R")
+p'`Flush
R{Jov'
)F[\mw#l$
BkZ+D!
1M%usb
!BlmB#Org@F0fb@x'V
6\g!Lh
#tiH;i
DC1htY
d%z%<sG[
G&iSA!
DEopsG&
sEqGUID#7
1;p&h^)[3
bP%G%6
U IMtA
`37Upd[
YLAh,i`i$
F!]*1A%
T13DcLong
F#klKe[5)
8;9[Kl,
/C-";2P
eekn biqO
gqGGZH
:CZ:%Z
& -%mXIxS%
m Z #+
{mk$SG-6
`-T#0l
G(2jl7[
e|[.;OpUlwVn4Zf
*B%Ak-g=hXcn8
u"jrwvIea
@X+A8a?
CODE[r[`
@BSSMb
vB.DWNi$@tlsW'
KERNEL32.DLL
advapi32.dll
comctl32.dll
gdi32.dll
ole32.dll
oleaut32.dll
user32.dll
wsock32.dll
LoadLibraryA
GetProcAddress
ExitProcess
RegCloseKey
ImageList_Add
SaveDC
IsEqualGUID
VariantClear
mima_wenjian:Yzpcc2V0dXBvbGQuZGF0
fasong_youxiang:bm9uYW1laWhhdmVAMTYzLmNvbQ==
yonghu_ming:bm9uYW1laWhhdmU=
youxiang_mima:PT1RTXhNVE16ZHpjMFlqTQ==
fasong_zhuti:uPjX1Ly6tcTA8c7vo6GjoQ==
fanggai_mima:NTQ4NDc1MTMzNQ==
smtp_fuwuqi:c210cC4xNjMuY29t
auto_share:Tg==
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
DVCLAL
PACKAGEINFO
TFORM1
TFORM2
TNMSHOW

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.