1.5
低危
54 个模型检测该样本为恶意！
重新分析
更多

1d81f5d560d86b565cbb7ece1f16d1f512bb25df4c1e1a96184dde7f197bb28b

1d81f5d560d86b565cbb7ece1f16d1f512bb25df4c1e1a96184dde7f197bb28b.exe

分析耗时

194s

最近分析

365天前

文件大小

120.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN DROPPER ULISE
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.72
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Dropper-gen [Drp] 20190924 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20190924 2013.8.14.323
McAfee Packed-EK!83A302A95EAF 20190924 6.0.6.653
Tencent None 20190924 1.0.0.1
行为判定
动态指标
在 PE 资源中识别到外语 (3 个事件)
name RT_BITMAP language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0000b4d8 size 0x00000428
name RT_DIALOG language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0000df7c size 0x00000076
name None language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0001b23c size 0x0000001e
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (2 个事件)
section {'name': '.rsrc', 'virtual_address': '0x0000b000', 'virtual_size': '0x0001025c', 'size_of_data': '0x00011000', 'entropy': 7.62781238013823} entropy 7.62781238013823 description 发现高熵的节
entropy 0.5862068965517241 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
文件已被 VirusTotal 上 54 个反病毒引擎识别为恶意 (50 out of 54 个事件)
ALYac Gen:Variant.Ulise.4879
APEX Malicious
AVG Win32:Dropper-gen [Drp]
Acronis suspicious
Ad-Aware Gen:Variant.Ulise.4879
AhnLab-V3 Trojan/Win32.CTBLocker.R142655
Antiy-AVL Trojan[Ransom]/Win32.Blocker
Arcabit Trojan.Ulise.D130F
Avast Win32:Dropper-gen [Drp]
Avira TR/Dropper.Gen
BitDefender Gen:Variant.Ulise.4879
Bkav W32.HfsAutoB.
CAT-QuickHeal Trojan.Mauvaise.SL1
ClamAV Win.Trojan.DustySky-22
Comodo TrojWare.Win32.Miuref.F@7zerk0
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.95eaf4
Cylance Unsafe
Cyren W32/Trojan.BBI.gen!Eldorado
DrWeb Trojan.Encoder.514
ESET-NOD32 a variant of Win32/Injector.BYGV
Emsisoft Gen:Variant.Ulise.4879 (B)
Endgame malicious (high confidence)
F-Secure Trojan.TR/Dropper.Gen
FireEye Generic.mg.83a302a95eaf4492
Fortinet W32/Injector.BYGV!tr
GData Gen:Variant.Ulise.4879
Ikarus Trojan.Win32.Injector
Invincea heuristic
Jiangmin TrojanDropper.Injector.avqc
K7AntiVirus Trojan ( 005438231 )
K7GW Trojan ( 005438231 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=87)
Malwarebytes Trojan.Agent.ED
MaxSecure Win.MxResIcn.Heur.Gen
McAfee Packed-EK!83A302A95EAF
McAfee-GW-Edition BehavesLike.Win32.Generic.ch
MicroWorld-eScan Gen:Variant.Ulise.4879
Microsoft Trojan:Win32/Miuref.F
NANO-Antivirus Trojan.Win32.Inject.dtacod
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM20.1.1ADB.Malware.Gen
Rising Trojan.Generic@ML.100 (RDML:xwshtgv9PKB1lzX+7FSQAg)
SUPERAntiSpyware Trojan.Agent/Gen-Injector
SentinelOne DFI - Suspicious PE
Sophos Troj/HkMain-DN
Symantec SMG.Heur!gen
Trapmine malicious.high.ml.score
VBA32 Trojan.Encoder
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2014-05-23 06:13:51

PE Imphash

97122e70256b9d1922695afee10e5200

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00006428 0x00007000 5.304211712761275
.rdata 0x00008000 0x00000988 0x00001000 2.6178057900295504
.data 0x00009000 0x00000184 0x00001000 0.26466869570235174
.idata 0x0000a000 0x00000bc2 0x00001000 4.296793717613624
.rsrc 0x0000b000 0x0001025c 0x00011000 7.62781238013823
.reloc 0x0001c000 0x0000068c 0x00001000 3.1677906339435844
.huilo 0x0001d000 0x00000032 0x00001000 0.0

Resources

Name Offset Size Language Sub-language File type
RT_BITMAP 0x0000b4d8 0x00000428 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None
RT_ICON 0x0000b900 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_MENU 0x0000dea8 0x000000d4 LANG_GERMAN SUBLANG_GERMAN_SWISS None
RT_DIALOG 0x0000df7c 0x00000076 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_STRING 0x0000e5c8 0x0000003a LANG_GERMAN SUBLANG_GERMAN_AUSTRIAN None
RT_ACCELERATOR 0x0000e604 0x00000070 LANG_GERMAN SUBLANG_GERMAN_SWISS None
RT_GROUP_ICON 0x0000e674 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
None 0x0000e688 0x0000cbb4 LANG_NEUTRAL SUBLANG_NEUTRAL None
None 0x0001b23c 0x0000001e LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None

Imports

Library MFC42.DLL:
• 0x40a4dc None
• 0x40a4e0 None
• 0x40a4e4 None
• 0x40a4e8 None
• 0x40a4ec None
• 0x40a4f0 None
• 0x40a4f4 None
• 0x40a4f8 None
• 0x40a4fc None
• 0x40a500 None
• 0x40a504 None
• 0x40a508 None
• 0x40a50c None
• 0x40a510 None
• 0x40a514 None
• 0x40a518 None
• 0x40a51c None
• 0x40a520 None
• 0x40a524 None
• 0x40a528 None
• 0x40a52c None
• 0x40a530 None
• 0x40a534 None
• 0x40a538 None
• 0x40a53c None
• 0x40a540 None
• 0x40a544 None
• 0x40a548 None
• 0x40a54c None
• 0x40a550 None
• 0x40a554 None
• 0x40a558 None
• 0x40a55c None
• 0x40a560 None
• 0x40a564 None
• 0x40a568 None
• 0x40a56c None
• 0x40a570 None
• 0x40a574 None
• 0x40a578 None
• 0x40a57c None
• 0x40a580 None
• 0x40a584 None
• 0x40a588 None
• 0x40a58c None
• 0x40a590 None
• 0x40a594 None
• 0x40a598 None
• 0x40a59c None
• 0x40a5a0 None
• 0x40a5a4 None
• 0x40a5a8 None
• 0x40a5ac None
• 0x40a5b0 None
• 0x40a5b4 None
• 0x40a5b8 None
• 0x40a5bc None
• 0x40a5c0 None
• 0x40a5c4 None
• 0x40a5c8 None
• 0x40a5cc None
• 0x40a5d0 None
• 0x40a5d4 None
• 0x40a5d8 None
• 0x40a5dc None
• 0x40a5e0 None
• 0x40a5e4 None
• 0x40a5e8 None
• 0x40a5ec None
• 0x40a5f0 None
• 0x40a5f4 None
• 0x40a5f8 None
• 0x40a5fc None
• 0x40a600 None
• 0x40a604 None
• 0x40a608 None
• 0x40a60c None
• 0x40a610 None
• 0x40a614 None
• 0x40a618 None
• 0x40a61c None
• 0x40a620 None
• 0x40a624 None
• 0x40a628 None
• 0x40a62c None
• 0x40a630 None
• 0x40a634 None
• 0x40a638 None
• 0x40a63c None
• 0x40a640 None
• 0x40a644 None
• 0x40a648 None
• 0x40a64c None
• 0x40a650 None
• 0x40a654 None
• 0x40a658 None
• 0x40a65c None
• 0x40a660 None
• 0x40a664 None
• 0x40a668 None
• 0x40a66c None
• 0x40a670 None
• 0x40a674 None
• 0x40a678 None
• 0x40a67c None
• 0x40a680 None
• 0x40a684 None
• 0x40a688 None
• 0x40a68c None
• 0x40a690 None
• 0x40a694 None
• 0x40a698 None
• 0x40a69c None
• 0x40a6a0 None
• 0x40a6a4 None
• 0x40a6a8 None
• 0x40a6ac None
• 0x40a6b0 None
• 0x40a6b4 None
• 0x40a6b8 None
• 0x40a6bc None
• 0x40a6c0 None
• 0x40a6c4 None
• 0x40a6c8 None
• 0x40a6cc None
• 0x40a6d0 None
• 0x40a6d4 None
• 0x40a6d8 None
• 0x40a6dc None
• 0x40a6e0 None
• 0x40a6e4 None
• 0x40a6e8 None
• 0x40a6ec None
• 0x40a6f0 None
• 0x40a6f4 None
• 0x40a6f8 None
• 0x40a6fc None
• 0x40a700 None
• 0x40a704 None
• 0x40a708 None
• 0x40a70c None
• 0x40a710 None
• 0x40a714 None
• 0x40a718 None
• 0x40a71c None
• 0x40a720 None
• 0x40a724 None
• 0x40a728 None
• 0x40a72c None
• 0x40a730 None
• 0x40a734 None
• 0x40a738 None
• 0x40a73c None
• 0x40a740 None
• 0x40a744 None
• 0x40a748 None
• 0x40a74c None
• 0x40a750 None
• 0x40a754 None
• 0x40a758 None
• 0x40a75c None
• 0x40a760 None
• 0x40a764 None
• 0x40a768 None
• 0x40a76c None
• 0x40a770 None
• 0x40a774 None
• 0x40a778 None
• 0x40a77c None
• 0x40a780 None
• 0x40a784 None
• 0x40a788 None
• 0x40a78c None
• 0x40a790 None
• 0x40a794 None
• 0x40a798 None
• 0x40a79c None
• 0x40a7a0 None
• 0x40a7a4 None
• 0x40a7a8 None
• 0x40a7ac None
• 0x40a7b0 None
• 0x40a7b4 None
• 0x40a7b8 None
• 0x40a7bc None
• 0x40a7c0 None
• 0x40a7c4 None
• 0x40a7c8 None
• 0x40a7cc None
• 0x40a7d0 None
• 0x40a7d4 None
• 0x40a7d8 None
• 0x40a7dc None
• 0x40a7e0 None
• 0x40a7e4 None
• 0x40a7e8 None
• 0x40a7ec None
• 0x40a7f0 None
• 0x40a7f4 None
• 0x40a7f8 None
• 0x40a7fc None
Library MSVCRT.dll:
• 0x40a804 _controlfp
• 0x40a808 _onexit
• 0x40a80c __dllonexit
• 0x40a810 _except_handler3
• 0x40a814 __set_app_type
• 0x40a818 __p__fmode
• 0x40a81c __p__commode
• 0x40a820 _adjust_fdiv
• 0x40a824 __setusermatherr
• 0x40a828 _initterm
• 0x40a82c __getmainargs
• 0x40a830 _acmdln
• 0x40a834 rand
• 0x40a838 _setmbcp
• 0x40a83c srand
• 0x40a840 time
• 0x40a844 __CxxFrameHandler
• 0x40a848 exit
• 0x40a84c _exit
• 0x40a850 _XcptFilter
Library KERNEL32.dll:
• 0x40a4a4 GlobalFree
• 0x40a4a8 HeapDestroy
• 0x40a4ac CreateFileA
• 0x40a4b0 FreeLibrary
• 0x40a4b4 GetModuleHandleA
• 0x40a4b8 GetStartupInfoA
• 0x40a4bc GetStartupInfoW
• 0x40a4c0 GetVersionExW
• 0x40a4c4 GetACP
• 0x40a4c8 GetCommandLineA
• 0x40a4cc GetModuleFileNameA
• 0x40a4d0 IsBadReadPtr
• 0x40a4d4 GetSystemTime
Library USER32.dll:
• 0x40a858 MessageBoxA
• 0x40a85c GetWindowTextA
• 0x40a860 ScreenToClient
• 0x40a864 ReleaseCapture
• 0x40a868 DispatchMessageA
• 0x40a86c IsDialogMessageA
• 0x40a870 DialogBoxParamW
• 0x40a874 InvalidateRect
• 0x40a878 GetClientRect
• 0x40a87c EnableWindow
• 0x40a880 UpdateWindow
• 0x40a884 CheckRadioButton
Library GDI32.dll:
• 0x40a494 Rectangle
• 0x40a498 SelectObject
• 0x40a49c CreateSolidBrush
Library ADVAPI32.dll:
• 0x40a48c RegOpenKeyA
L!This program cannot be run in DOS mode.
99T99999999999-9?99
99Rich9
`.rdata
@.data
.idata
@.rsrc
@.reloc
B.huilo
OuKu_^[S\$
SVW$D$
FP;|<~L
EEPEPgt FXj
HQPj(j
jPjPj<j
VW3WWWpOV
EWWFDv
VVVpLU
EVVCHs
}VE@EE@EE@EE@EE@EE@EE@EE@EE@EE@EE@EE@EU
E^EE3ENEEE[ElEE
EEEEEE\EEEErEEXEE1EEEQEE=E
]EpEEELEE$EE
EyErE9E
EEE(EE]E
EESE+EEEEEEE8EEE
E>EEEEGEEE
EEPEkEEREEfE6E
h4(@Ph
j@3Y}|h
hSVWe3
EEP5d@
EPEPEP
0u>"u:Fu
<"u>"u
> vFuj
M5M-M%M
Local AppWizard-Generated Applications
CHebaiDoc
CHebaiView
CMainFrame
MFC42.DLL
__CxxFrameHandler
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
MSVCRT.dll
__dllonexit
_onexit
_controlfp
IsBadReadPtr
GetSystemTime
GetACP
GetCommandLineA
GetVersionExW
GetStartupInfoW
FreeLibrary
GlobalFree
HeapDestroy
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
KERNEL32.dll
UpdateWindow
EnableWindow
GetClientRect
InvalidateRect
CheckRadioButton
DialogBoxParamW
IsDialogMessageA
DispatchMessageA
ReleaseCapture
MessageBoxA
GetWindowTextA
ScreenToClient
USER32.dll
SelectObject
Rectangle
CreateSolidBrush
GDI32.dll
RegOpenKeyA
ADVAPI32.dll
_setmbcp
wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
wwtGwwwwwwwwwwwwwwwtDDDDw
wwGtwDwwwwwtDDDDw
pwwwwppwwww
wwwpwp
wwGttwGwwwwtp884DD
wwwpwp33330wp3
wwGttwGwwwwt
wwwwpwp
wwtDtwGwp
p884DD
wwwwpwp33330p333333
wwwttDwwp
wwwwpwp
wwwwpppwww
wwwwpwpwwp0wwww
DDpDDD
wwwpwpwwp0wwww
OGp888888
wwwpwp
wwp0wwww
wwwppwwwpDwp
p0wwww
DDGwp8
wwwwwwww
p0wwww
wwwwwwpwppp0wwww
wwwwwww
wwwwwww
wwwwwp
xomLfxmt[l~!
@A_{|2
AfPdI
iig`{p
\gCtTS
R)q(H+
zEJGrG
dQ09@
L)JD1#f
MwTqJVz
gzcwNkoU@
VL>YYP
V^#bBT
6]e[Hx
t?ts]
"I\*!F
u`dRS*@Q
GO!Gl>
AutoDec19fix.exe}}|T
nmYmclv]+ob
2FO5k,U
^{5:22|
co}}yf57>{
}voba%cy)8lxpLwK21o#|I
+61z`I&Ih
FoOl$@TH@4{|gpi
vu!}j8Z
L'r_g%U)
i+z6V]o
Jco3yAzI&
TbXARTI2
)gH5CW[u!
7dnZ7Up)ou
fh~H*qil
Mwk9Ynb?m
5~!]:1M>
Zhn?3s}
U`|@AU
H<ME2c
Imi5#Z
">UE/-G@qz?&
O.B+}Sz.UD
vU<\_x4';]
9IyGFqAg
|YYn3.}
jnjkR;Z:
CU.RsN/|'
1O6IOK
mU`,T6gf(Ij
d'M#sh-A
Zn+ #G+
@X^N=p/
'k~jk
P3l^Yzz
]J[\lA]
^.5q{H
?P%vhqXVZ;4
`U>m9F( e
0v]1^9
BcgGO9Cwy
BLd4WF
FG)e,Lf
2eTc3dw
yhm=brZ
zMHO;vI
+:_N$!lZ
d?3[nKk"
>-cySMm/!/l'
Y\-(#_&he
"#)s1nt%Kn2
zI_]g[bIe_U
N'_QD/q|+}:
;&.AB!
e[>1JN'?
TpK*?-
Or^r
0tk~e}lE=3n;OKjL5*
"a^vmlc[W$
I %\5uB
+Z|jgP?f]
+]C~#=
?!/PZY9
>HPw<A
[T+V=n
~<PcFk
b,l@>u|
N$]5G8k>?s~3,Y"i
0;J?,v$#:0
7vf#U,FPZOR
6[I}=rC
&tb!SS
@M~BmR21
mY?t&i
K{O*IZw
JEccV@
r7@m1l
4fI{%c
j^Xt#X
GEDL/n:;=6;
'J-UJQI
;Wb~$_]
F>Y=6c6
Wr:HRH@qzJql
*s4{iGJZ
vG0:>OW
pWk2HL"N]uqU>
p2RKP\v6
5OJ<Y,
keT< r
Q\UQ&C%%
%gQ`kjx
mn)N=r})
nbcARPPy>2
=#sDF#*qQ
*DgZez
oMwvYlX2=
h!n%/9xBu
/Run_i`
"niuTYa@`7
?ZlWhY@||%
\U6/86Oz&x_f
vU+#y"rF
Q %2hw%Py%E
@nnUUEl}s#7Xy.LWA22
W[}Ay9mkq!
s>{R\a
K~MW/?3
ClzeBm
.vpp/pX_mp
Dv_f(WOuJkYt
-%U:6r-ga.
GSu|)0
J[9f&5b
L32tr?FzC
_.gjIQUd&/
=0|GBN
8?vruu
.Up/g_I
bE6NU,
ffJTUD
b!%,SQ:uTpw
0oESc][kxtQ"3DNyse
~5VFV!
A1OV2~&
P2wK$WqKP~
iBO5flB
`)l`P25
&?4WH9$_P;j
H<_Sk46
yyj>9
k.%^8}1
-nTj|PVvpD?)2<W
/.=c4(4K
Xss(J<o
Ad{;Eo
C=HzQ79.&s8qZk
txI4}yH.+z
@T:wKVQF
yZ}+jG
%n=XS2
ua}2b; =m
!N"%&l
PRu6Q^b
zRi 7#N
(k7&C+5
;"<r"*
xvqU=#]hc-(#
EbK^b!/&
DF]&_W
p8Iyv9!le
0&S^ClL!?Xo[.@(S
x)dbiB
YjvQ0n~
n|Xz=~1kB
l?-nXL
:KXLj[
%544T4
PGU]U~j
}.|,"J$|}l%A
khL}C9Ng
uIVe=G
T!*k[Y
$R9|o69#Iq1g9
u7{ ~
UO/>(vrFz-=~/*
,T_Z*0K-
bW[C@#
SD|V*YC
(r* -r1L#1mSqf{wi{@X#
~8w6(K{(f
_c)N-ee@&'2>Ce
=(js]=?r
XPcs&Q
2:?+YRY|
!aPoOj0
bk@&s6?-
0.0:}=D
,7Z\YZ
_A!u$Y
_,>y5_
x0EKT886"O
8V)M^xj+-k
S!(;}4M
z,KK"Ej,
h=M5,*Jl@k
jocSkhd~U=Dg
||{G{-
[Fp:S"l
yll%z/
C*xb|p9
r\f6n=
T%^zTV
!eTS#|?;`LF
yb-;KY
tl`\gk
1$Y^BA
E7:{>jg7
$rrQvBZ8P`r>3
oA%US]|CJ
LV*=5OwT]
=v0Zn<k`rVG
kw_Uj8
[g}bc+KrF
Hrc#Hs2YOhI
#}"nC&>
H7#f+l4s
(]v2!c
<r]Qb{
?986fbEC!=
NC$m.*
QZh|eB
@$9%'2j;,`
A*Df>fO
4Wh?^
;KYW`=
$/`=<$
ddb//5?
v/v'b0{#m^
C2I9M$]
>bk3DE$&
>@0J_L
jw%6\7R
%fuMecC}~hzR17*p>a
#*.m&j.#
TwGNGx
6nXqf,
4EXwKxD4
cOtDed{%
4staEvD(NA/+$1g"q
u!e!`["RH
Uy902Utp
KYA5X1
83d2r2
,YFmrDJo
0^9r2!
/][/SC
p%A|+)D
0-(n-
i)$K\b
XL*c/!v"q
4&1o7UTOO
.Y`+[N!$V!'m_+'
Q<0f~C
li^7_}F
P&s?R/
'2\u{[
~+/#?S!l
!~Z,&ZWx]J
og~dxP.
"uJ+"G
Akp=cl
u"n?o)u
Hz)i./Vm;~KFdM]P.
_!V8J6!oHs<ys
,)-kfPdv
b1`t`>rUM]
PH~wJ\=d
$jXTrP!PA/
NRKrp=Ob@i,x<|
ud; (R4&dgw\Nas+
!J@fq\ ,
`v}B(g<y
8o6tl%,U.0
{j7NPYPnZ=El
RB|X{~
ugs.Ea[#E!pJ<"7&T
NVn_kOPj-
yZAYmJ]
dd_hcr
^UufbMo
(eAGh7<@Md
Sf3TFO
=_{:SW
c1RaW)c
cC`62l
NgTY[gD
F,a=a!6-m0l:]ys"hla
SP|f>$
SKSNB*4h1"Dvx
/iOoMdY,+ZC!@
R.G1W'
-Nf-&mH{%
>is#qn
&8[s@Z}
29q32[wf
3o&ejq|~hF
V6"UjZ
Pe@D(r$h8
zf+U;aq>[
N_$LFnQ
"[7:5+
xr*@ANF[cpo>)r
Sin%gZrHDoS
Sj|Pfo~
~xuso?<*
(10*:"
,UM6 E
$q]ae^dF
,4!)$E3] 8B
>!<MR0c
o4)i] /j
d4ng9?
5{59jvT<5
3;R7`fW
fz&GF<
b^nw\OMTRyg
cA-IL9DA]'
ns<".H
3g,iI}6G
h+TdBcv*
)Q0%K/8YWR
}rKj$0d
669TDjq%
htPLMVrV!RpCis
4"?{<Z
%2!>nk
u7^?9e|qo|2,g
a8CZ g1
u{=6zJf0/<
gqg#$i
'ja0v"U
"FE$(Mc
CQ_dA^j"Wh
704b`I^?m
lZ1u2\
x*ThJL
%*W/jX~{]
ya4}jIv
j"$eVw7\U(f
i5zaS%
p<c;Gf4
(=qe'HR4)X(#
H]8RC`
JCe]Q]g
?-9lT54x J$Y%QD!
1]^)Cn]m
cP:UFY
@O;~y@:?K
zS1*hOJ]e
6b=oU0
x>*/hx<]
'qi'YQ^
Rd-xqy>
glYw@~
.iA=bA7G}h
DnsA!Ps
%,\|Qu:zRbnNA[
j@Yc&gnmzS-m
('$q[*;
ip7W:yKv
[h+}>m
}@GTmv9"
XFdq@
}>`qt.,
RH;E7ncb
y+v7NEK[7g[
:\+rxH
h6/{i}
1fXAeZI8R
Z"(UI vF
eari-S
+Y'JVln
>Vft^
U#p7CJ*E
;e;d_*@.
UkFXU1_M'{M~{
)oVF8hLhx>+H
7>&?TU
AHeCv]rB
h|IFR='4G
c!8A,b9
4?V"=obU)
i</(;
;M*t]\
> Gl<j
u/\(NOJ"S
=AjE$bN
0kx4Q;
5uh_$ `Q+z[1
|pS?~p
*q06lU4/T%oe
T&'h(s
iP(zS4krl
GZqa(8
~e4]0w.
X|ip$6PHB+sN3lg-sn;:
.O'21 ?
8|xXBU
zv!]aAx<
t{?Kx<*i\0{o>
&*&i-5
o<LrpD
tE,%SLn
3KvwN[
:7Pn<
(\/L=KeUp;3574
YiGs&yJ-C
Dw23`6(
F,NmS?
Zq>7H'H
qg=W*{Q}Li
]rL%2o0
z{T/%b
P\Br_v
G(tmjuBR
`dG^?w
bVxN0@as
RXDv<3^Hxh
[6KAp+el|$y}T
S`l~./
8lW*fRy#
6t6i>"<
iBTA8c?
.>X-97R
>W5`&YV
9.2"Fy)
$g_<'%#
}2jg}/G\[]%JF!>1UKuH
hur8U.tEUo2"
(b.`_13fO
a)5*EG>UX2z0,X
8>l"5z@eRq]Sdt
D3s87<=s@Z7l
l]t!6),)q,~
SQMET&&
!E##DnR
39!D8vQ
> '"e` [aau3aZc
=q9.4{
zDylf+
|g'o0Z
5UC)U&
~0l#fEb"
%+<;}fbx%}qh]
w%o^Z+g:
CQ7a{K@
\b7J&!a
M}ga(-U1
pQN9bs*
&(%;*@+x
JI{#@i
5W|tHJ!
O]z5._$2c
z~#$qT
=cjKRRY
YK(o_u^4<;h
L'o1j9
j$n4]9
k;B A
-Xa^-dLB
6YKNe(
Bt~];v5
:77%8KC
UWg$Nw[
Iwl>}k
!~n"zn
t/%smD3
gm./JLW
Aw7IH)P
Tm-M7!X(f^G(t
(,oU[{
$.rBN`>vh
K$},\P
ZX"CP
o&p2F;c|
CK$loI
=rGAlkcR
z!@|'+k/{z
-/|'M#=Mr-9f
r|2|?*
\QTovE
M,fezl
2/cP-^24*a
)CfS{]xAm
7m4e!QAc
`7+Nq,O
yD{F1V
~O{Vd7y%L
xfQyWD@
iiTYA7
o?vA9^q
w8h8f|1
K].fZ'V
R1a1&-`ssxGk
(03JP|X
@05Bg-;
@{0n3.]DMF
{:(]+q*lC
@<P{Bu
4~lf`U\vB
3NZT'Z
1#:T Z`
(^c*n6b
EP/j-n~tmu_`>
}85'7l!mj
[D4g Gf
`**A0@C
93Q<@(
JmGEm~1
km~6T!
4rCcC%8
!!]rG2FU
?E:_DZz:xz
b\JD`~G=*)K9K<!0%n
R2f kTgl_
4OY6`b@
FT\'D&kN
Y;f0FAm;
6HSWia4
;+@JrA
H;PS|S
1|=L{[~S
WiiK*A
.mU>5|"Ylu
%jRC_9`
cZJ.PXd
JiFD&'%Dib
^9|[KP%bF@%U
lXwvp%d
;TX;|KB
*CX)*(w,)
()`7/Db|
d%_:DZ=3gn@Kz
FC5n.ID#LkuP
0*_J8CVT
mhj_r=BH
'?n3!6k}J,(
#*k"Ii
*r"xcD'un#0
j/C`B$.5|
|I'4S02?(%B#!
LAS4,vUh+76
:T|]eag-v=7T7,
wf?Hr-
.(3w/RO
UjjU~2<Z68b[TlQ
K%eC'5V /2Ki
76/jRD
EBxk#Gg
.TA6jcr=@=.Bb/2'5=
$Dih,j
6Jt)oQn4r:.nH`AS%:
s5HUt4
48X"9zC
pBrRg.=$e~-&
p/B7h;o)[N
b0<FOq63=`\
0_6@F9v
Yz*=/5q
?N8Y55=o6!
\K*-b!U50
VfQSdY8Hdsm?]-D
-'bq@RK
@2/w'(;
,Kv}VhIr
;+N[&xa)
&Xd[4p2"gb2
Yx`Fe+
m<7Wx=O}POnTaB}
|+Vc~)A.Gmvy#@w
C :'5;y0n(
P;/~D7wL)y
ElXmg/
a;D?b*
S,0Q@
UnBY"km)= `>uFt
WPRegQ|VH
m{z>AYw~
wyM:d*gCE
yJ^0Id
!7IHF;PIYIp5s+
vx.h,2Ny_c
NM&#qbH
Un"Sxg
O9X 2*
y_jnDo7
r0^{zR(6^V+
BhK L-]{n?
ucO4\g:d
>cXM03L/R
'NTq'm]E
!lw~_J
`h7C;,8
XxTePkfA
#2D\W@s
OF^Qqr
iLG>xpL++J
JoK:UWoNa
X&QX@@0
E1Xe?t
"=_NDqL
edtUI$u
LC>zc='r
n4I*qfq
e/(M?faDmOI
TwVz@p
nqkV0GKL!
iUB_FK
tVkt93
%D?5\K
qYk{+nL`CU6
6),.\@2
;n@[M1
q9K`O'qDf
6CtI$n!
7&6eY`q
IDx#o/
{IY&[!FoF
){2yjvc6
;+!:B>r=
4e$oINZ02
S<MlNV
1!YGR"Iy
# KX:@
G}maO]&YFv6G2
rv3`Bq5
m99)|$
a&Rk*O,xY
_'LY,0
Ycra=%
{Pl7Yen
3^0,RYG
RLd)N~t
0Y^g\}A@FZ
B\e=uVv-H
HGv-gP0
a%FhC8,Uq<`dO
{'Y10Lv'SM0
M .L#?E
W>IE'=
_:$Yu?,hA
hv9SAu
%L)qf'
5;jtFuqd~bL
|wD/YD8
?r?iK1@e
|rXd#OB
7!iX~IGC!-O
;TEUV&
I+k0{#H$W
UF2|72J8&lI<
gG>$1Xf'
)a,8?+<~
yd(1lZfo*`
WY%h9;X3jv|t;)c51y
sv&Px
*G1y@
yyw1z#$Mt
x7%}S:
!efMCe
&SS:+,Y!
I{IB }
z{Le>k
Wsr(av+_i
WdV[@H\b+l/qA
~zf!Zd(*Um
m\PuZ6,
\j,m@!Y2]{|
P+iLlsI
>I;BTa)?j
kg}6[g1_
j&v=}wl
6EJIn\
t}C6]x4m
DV8j_P`"
+t"I@1;:
;EBC/eH-
;C}C]3,m'-)#D0S!K
vNC,Ms!rR&Z
`LX`rQ``
4`/|(k4o<e4D[_=
.(v4PM
2Me4YT^[
1;%v4_
prbL#1B
#>8$^.
KpMoMl
Bpf3-dvJa:DA&[
(-n'G(
vj}vZ&4~
GQ/(ShY^dj
>W[1LwL{
ANSDXY
*N}L?JAl>
2@h9N[w
g{eY]J9P=
}o%.?J
~\Q /e
8P\1/q=@C>8V!4E
)|[o~d
$/\Y +
e,x"nK_D_O
vv{21u
G\'r{Tc@<aO
~_<K\&:CY
d{^=;s
:*tX}-
=[$"h3gUB|
WW<61.p`
Wa{9OP6geiXwZz_{y4)^cS/C?4w:
l;<o,V0
R1.e-,;#4
A6*BSVs@Yz
$&WAR1
3F`G@u
3\qRC#6Lb
cgjL)8I
}XgLGFm*7'
zK\U_B_
y;ozL+
/>z j?vD'
K}u+lJ
*GPXV6`Fl
0gQ_$Y
\ow/N7d!
~'/fr_=,
[BG1X-^
jR\r")1
L^iGy9
(o~BNW>
\6Xc#,L<--@En-X
8W}!&1
Z;L@T#MXy16_^
$6Yxhg
R]sxi<Co\@#Lm
6^#( $aU]
{M!` /<-\}
@*:#a<
!$>PId
m2eKCzz7
<#h~<k=%X%0O1n7}ld#s
cvrHf&t
fB4L'n,dWU
7X^Cb
<f$Vn"Yug
X2"(!qB
nY'mL7p
'TFkowF
Vc'`ZM
rFZ?*Ul
Bh# !O6<I
!{>|v`
R2:_jZ
+bPdj
Z P.MS
;UVQ:%m0gn
*CSO/h='
\4JyqC
vvz#KoN
vsv+vs<_
A$wg|]&;I=
bP1\iD
`5>RpzxQ8u
gBd5:m
nA{vdt=n
R+_f<$:A#
-,Q/Y67
P9thxlFOui
C';"%jH
nnqQ,=
W1IXdp*6x m+V{
9RX+=<_
+H[S6
l%6rs[
;9Z:03$F+u
J{r5[
?CS3T,O$@=Z
H63E84
VC]\YD,A0tg
Lk;p]\Su
y}P{x.Vf%$)@W
4fG=MnCb
Ccn^YT$G9X1p8G"p
CvVP3^DQ
QRz[C0
]BW*W\[Xri
%0VfNY
)e. xN
%i1@%TBf
wh4^`.>8}"tB`>H7
pB1CoN}-{@)Xe
D5dq;J>9
1ca^}-Qz+b
M:#KPO #
#lx2nH#zi\
_Ry4miL!
"G.;k<$R8:
Fy!^IVB
-F<Scn2,
Wi&J<A>9 9
DV{J;y
fkSe%
R2Zx;K#
heat;l[[o('z
%?:sqO
n2<+Ftm*
6+lfeME
#`8,zSY{)/
iE,#r|K
fr)zUc
N)f6!:y:
w3guJl3j=<?F&@Dl
Oz9!wZ@Zq/
m~V0_>Lq
dRFK5!(l
'QSyciy~h<{j@Z?
@<{6n}K
@36^3m3e+
bK[9sPo9
v;m0!3s
wUo27=!0ajEe
MQ0jz]4y.DHdeoDK
vy4/2O
aij+A]
cIL?G#cq8=?
/]FW,w
'Op&j_o
3RK"`6+<Z
!l-m~P]tTk
%>O9"Wc_Hm
IsD^d)
.9}&C
1kf b^?AQb
=`6PXLh
KK@,#G
$xgvuk
n+8I
T.3^\;LU
lwv})b
j^;?YF^)
tw3Q-<(^5
Y57ju[}
1v|x?:
:B|H|T^
b7](;G[m
"!L[;M
&{OtI^
~Y}ba-lC
cj4~~G
z\214nz
4cM J1KgTq-X)^$
Ctiu=@V50
]L[>.7u~x(.
!D5'dM8
8AFD7%
!rywb{z
-zW|&Z@9MmD
xWN`ESs?a.@
l&u'b!
J]vdCq:t[
&>OTxG
N*W)s-3
z3Bn1K
1d^:3D"+
H/EToh46M?
lGUD7N
]y[T4VP]IB`r2gD
H%Vi@w
F5V.Y{lhaG?T
<9\am.5)F
<7z[E/e
4h(]*/
hfCdC|H
oX5V{tlU
PvaZ,S
)e5bt
b6"&QS
j$V+IfUa
_pgs.`
9>cU|S/f
)C^.y{
A&+:="r8
p*Ji@/%
FVo,F+N
%$!vyE
tW.+4NBn*
)p+/M(a.u"bd!Nxh3%
6t!VEn
?-HzP]~ Y^e
0[f63(R
@J(DP&Y[
W6iN2;
nYIc(@
6!?^Q_
A.0YM3
sCwHL"Hk
]L\e_Rn1>
`q%ehJ
I64}FN
JN`[G\D.I`
{)qQ{K
v43}yK
:[]LKW#HU
bGZ++V
Y~4wxMcYt6
3%Pz"a
%we8X^
:/VTa'Vbe
%,)o3"nh|NWG+
^]>04$GkEwD
pKRPp\
gG;O,6w8N
|gZ;;UJi7b3
}98gw?nRpT`(26
|-Niin1ccWd?
!!<<Q%4$
42&VU)uX
Et1L
sIg"Xg-$8wZSD]
m"V83$
+ &8X8AMOz[%aEV
GWV8L5EQo^mTb6+A
x@=cVy
sUfs9X(@T:NZ)Dzr
9m:3=^2z
NoJ+-2
bkc\TV
=xh:\@2
e/y.ID
Hg0 wc*d[
PSeN gsIPIx
Mq]kjc }=c
%hd[S9:iV
t[ R';twc
=?P~A|,BZg
:IoH_f,n,!
21lE']|
;0=Y9q^36DO)
'Yo- nk!T_mM
?QV5w]2
XK`YWw
aMICs^
ut~Pg+.<f
Wr^U$BN'
v.f*:]R*^T{tC]Z!4_ew
*{lijv
QhL9qm
pXTw2m62V%F (g
HnqZ]Hr
.#\}c[
]t3w!&Ak,Pp"
XnR^iva6}
`1od]~Fa
[x;lU[OKP)@l
,LH05a2
%R+?/C
GL2mnU&.7&
t&no(c&T>(m]
Zd&;jn
S$yQbxW|&&%
I&AR'N
&<g;&*E
n&Ssu&y
%ke(}!lu?&g
gE_}(m
.n6FhN]4
ODgQ&HoOx&)Aa
w|BN;]P')hdMGC]m3&amt|
HcoW&T&Q$
%&}mUL
n\&UA:,A
G()UVRaR
IGO$M4
{UPVR%R&ijnU
^|sn&t4jZVF'%`
R)&w&#9
0UVRR"$
dR |)D0UVRRRT7$
N&\4OZnS&GWg&)
KUVROR
UVRR/wn&&
t4ZV'%kNR
&wJ&M9&0EU(VR
E)0UVRvR
$Ua&@c
')8UVRlRY7R
_%wETGR
nkgGAMkk@
kCk9Byk
]k(l\1
kD_Ek^%uzYwk
k2;akiw:+k5~-kZ4
7e-kW6zqkS1mk0
kx_2kf
kg5o=_%in)k]
k~wky#Fkxkj={9k
znkvu |k
kwA)%kv
M5j ]Qk
? *UPkkOTkx6Nq%
viXkqhh[k
j>k4eV
kd8Ekg;
&`1k_c]
%obGE4Q
RR# =9M LE6R7URQ&!] !
R\RYR$
E_RmUR%Q$! } gER&UhNR
QB$=, 6wq; %E/R|U[RPQ$p%X iA ElRURxQ$S
P\RR$0
l ([PR>R
af9y-GR8
RRZRv&
RE=!&G]U
h F+6-WR!
RRZ{*$e=PR^%]R
R)Rv%0M
RRRk-(
m4=^k(w
'.r\ R
R7RRf'%*D
RRR7& ?R]lqi8k#jF
R',0S9!WdqA[|'R%L!
SnRoR.Ry.SS1
V (iRR
RboE<CV
!&U (pM
WRmR.<iRzqm#7dnasaaa|aaa4a
,j>,D\
(k74#A
OT:uv].
k.\F0ue
~(L$.&
/g-&-
@PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
000>0E0V0/151F1z11111111J2x22222
3=3C3I3O3^33333333"4]4o44
5^5n55555[6666)7
777777&8Z8888
9*9C9K9Q9[9d9q9x9~999999999999
:2:G:i:{:::::: ;&;,;2;8;p;;;
;";;;;;;;;;;;;;;;;;;
<"<(<.<4<:<@<F<L<R<X<^<d<j<p<v<|<<<<<<<<<<<<<<<<<<<<<<
=$=*=0=6=<=B=H=N=T=Z=`=f=l=r=x=~======================
> >&>,>2>8>>>D>J>P>V>\>b>h>n>t>z>>>>>>>>>>>>>>>>>>>>>>>
?"?(?.?4?:?@?F?L?R?X?^?d?j?p?v?|??????????????????????
0!0E0L0S0Z0`0h0n0u0|000000000000
1@1P1p1v1111111
2J2g2n2t2222222)3=3q33333334
0$0<0T0l0000000000000000000000000
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|111111111111111111111111111111111
2 2(24282@2D2`2d2h2l2p2t2x2|222222222222222222222222222222222
3$3(30343L3d3|3333333
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|444444444444444444444444444444444
5 5$5(5,5054585<5@5H5T5X5`5d5|555555555555555555555555555
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6666666666666
7$707L7X7t77777777777
8 8<8D8L8T8\8h88888888
9$909L9T9`9|99
??(&F)
???(F2)
??(&X)
??(&V)
???(&T)
???(&S)
??(&H)
?? hebai(&A)...
erthuitjrthrgr
yujtjtrjtjHebai Document
erhrjyrtjrtj
????????
??????
??????
??????????????
??????
??????????
??????
??????
???????????????
???????????????
???????
???????
???????
?????????????
??????
????????
????????????
???????????
??????,??????
??????;??????
????????
????????
????????
????????
??????
??????
????????
??????????
??????????
??????????
????????????????
??????????
????????

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255
A 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 61714 8.8.8.8 53
192.168.56.101 56933 8.8.8.8 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 58485 8.8.8.8 53
192.168.56.101 57665 114.114.114.114 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.