1.2
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.87
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Allaple [Wrm] | 20190906 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Kryptik.gf | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | Worm.AllApleT.cz.67868 | 20190906 | 2013.8.14.323 |
| McAfee | W32/RAHack | 20190906 | 6.0.6.653 |
| Tencent | Worm.Win32.Allaple.e | 20190906 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(3 个事件)
| section | rdata |
| section | gfelmge |
| section | lkcaqyc |
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.data', 'virtual_address': '0x00015000', 'virtual_size': '0x0001f800', 'size_of_data': '0x0001f400', 'entropy': 7.9806183292321835} | entropy | 7.9806183292321835 | description | 发现高熵的节 | |||||||||
| entropy | 0.7204610951008645 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
文件已被 VirusTotal 上 64 个反病毒引擎识别为恶意
(50 out of 64 个事件)
| APEX | Malicious |
| AVG | Win32:Allaple [Wrm] |
| Acronis | suspicious |
| Ad-Aware | Win32.Worm.Allaple.Gen |
| AhnLab-V3 | Win-Trojan/Starman.Gen |
| Antiy-AVL | Worm[Net]/Win32.Allaple.gen |
| Arcabit | Win32.Worm.Allaple.Gen |
| Avast | Win32:Allaple [Wrm] |
| Avira | TR/Dropper.Gen |
| Baidu | Win32.Trojan.Kryptik.gf |
| BitDefender | Win32.Worm.Allaple.Gen |
| Bkav | W32.CrypticB.Trojan |
| CAT-QuickHeal | Worm.Allaple.A4 |
| CMC | Net-Worm.Win32.Allaple.1!O |
| ClamAV | Win.Worm.Allaple-312 |
| Comodo | NetWorm.Win32.Allaple.GEN@1ei64a |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.7d2e15 |
| Cylance | Unsafe |
| Cyren | W32/Allaple.E.gen!Eldorado |
| DrWeb | Trojan.Starman.6712 |
| ESET-NOD32 | a variant of Win32/Allaple.Gen |
| Emsisoft | Win32.Worm.Allaple.Gen (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Allaple.A.gen!Eldorado |
| F-Secure | Net-Worm:W32/Allaple.gen!B |
| FireEye | Generic.mg.9936e357d2e15822 |
| Fortinet | W32/Allaple.gen!tr |
| GData | Win32.Worm.Allaple.Gen |
| Ikarus | Net-Worm.Win32.Allaple |
| Invincea | heuristic |
| Jiangmin | Worm/Allaple.Gen |
| K7AntiVirus | NetWorm ( f10000041 ) |
| K7GW | NetWorm ( f10000041 ) |
| Kaspersky | Net-Worm.Win32.Allaple.e |
| Kingsoft | Worm.AllApleT.cz.67868 |
| MAX | malware (ai score=80) |
| McAfee | W32/RAHack |
| McAfee-GW-Edition | BehavesLike.Win32.RAHack.dc |
| MicroWorld-eScan | Win32.Worm.Allaple.Gen |
| Microsoft | Worm:Win32/Allaple.A |
| NANO-Antivirus | Virus.Win32.Allaple.bkbmt |
| Panda | W32/Rahack.gen.worm |
| Qihoo-360 | HEUR/QVM19.1.B255.Malware.Gen |
| Rising | Worm.Allaple!1.AB29 (CLASSIC) |
| SUPERAntiSpyware | Worm.Allaple |
| SentinelOne | DFI - Malicious PE |
| Sophos | W32/Allaple-F |
| Symantec | W32.Rahack.H |
| TACHYON | Worm/W32.Allaple.Gen |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
1989-01-24 07:42:07
PE Imphash
c58903933c1d135f2092f3e94469f80e
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00003428 | 0x00003600 | 6.596193458528986 |
| rdata | 0x00005000 | 0x00010000 | 0x00000000 | 0.0 |
| .data | 0x00015000 | 0x0001f800 | 0x0001f400 | 7.9806183292321835 |
| gfelmge | 0x00035000 | 0x00008000 | 0x00007c00 | 6.047815842823822 |
| lkcaqyc | 0x0003d000 | 0x00001000 | 0x00001000 | 5.916910363635753 |
Imports
Library KERNEL32.dll:
• 0x4044b6 HeapSummary
• 0x4044ba CreateFileMappingA
• 0x4044be InterlockedFlushSList
• 0x4044c2 CreatePipe
• 0x4044c6 GetStdHandle
• 0x4044ca ReleaseSemaphore
• 0x4044ce CreateMutexA
• 0x4044d2 GetBinaryTypeA
• 0x4044d6 CreateDirectoryW
• 0x4044da GetNumaAvailableMemory
• 0x4044de SetTimerQueueTimer
• 0x4044e2 GetNamedPipeHandleStateA
L!This program cannot be run in DOS mode.
.Richg
`rdata
gfelmge
lkcaqyc
&D_61fR
[qhw6ga
I$7k#JJ-
.aF4lV:
"Vt\MK
!/|ED/
T"1[W})
KIB&!_G/S
m0W6Ii>
e<U($n=PA
7WB-U57
[?SS%(qlGuZ
T"1[W})
KIB&!_GwS
mW6Ii>
e<U($n=PA
7WB-U57
[?SS%(qlGuZ
T"1[W})
KIB&!_GwS
mW6Ii>
e<U($n=PA
7WB-U57
[?SS%(qlGuZ
T"1[W})
KIB&!_GwS
mW6Ii>
e<U($n=PA
7WB-U57
[?SS%(qln4
_j* :k/
p/$+G{
IAQ6_<~u'<
AhVdV1[4'
lqP|[7{z}NLE
*MzRsoy
z48<-G
+~[NYP(+&[
1RCg])
1S7*w-}Ug
W!oNbkn!>d
zrMwDJ5&V\p
Hbf$h+~wg4
($OzeD(Mu
+PH7$D
xY/ZV<V[W\
hf#3X#
f+ff33
f+f##3
f#3#3f33
h G+Xf3
Lf+3f3
ff3f+3
f3f+D$
D$f#f3
Xf3f#3
t4-%8M-
=IN?iS}
MMR*sd-#Hb; c\(6G{\
x^k7'WD
#7[Iet
l=ez<NJHKd
wd`d^=
q1uIEFp()
_yZoXm
bdpr)zn&nrz_s
Q>r"neQ8"/7
1G*iQ+eo_2
KERNEL32.dll
PaHeapSummary
CreateFileMappingA
hCInterlockedFlushSList
CreatePipe
GetStdHandle
QuReleaseSemaphore
CreateMutexA
GetBinaryTypeA
CreateDirectoryW
GetNumaAvailableMemory
CrSetTimerQueueTimer
GetNamedPipeHandleStateA
IQM_@s6;~m
k}{f@-PS"n
M@:YZwVVy6c8q4[IOtx@#
?wRWE3=
S46\R]bv.2
,(RoES\f5
.]QZN:
K "M%2H
_sHP2=T
EOn5j>
A5[!;2
Tx'Y30
s~ Bh0e_
APFj6n
0+<(F{
jJcYpm_z)@
ioE(2mzru
H>P}q)tXP
6Frl(Q2V $`6_
']UEXi}K
"{#={gJ%HZ+i;);O|
x6oneZ7_\w!?;:
UC _Dj
La3t[R>~7A
DQ6ZRr
jcud3Yy{ic
Hmwe.YeTR)
KPz$^eL$h
FmOAx@Pg
kP`6]8
?um$y2Qs9
]H~C^}vAbALl
oRoDKoV 8
Z2'lF7)k.|q
;2Q.]*?SX
-OQL 7
rE*+F '}
UO/38>
%[,9>ll
,[0<oSe=
W%}#=k
l?ud&9
-V{TdSL
.EV:KSM^
p,&S$Ng&v
bFSF(c
i3e~9X{x%
]+KhnXE@a:VR \v
%Fggml^;
t2D!wwpg
0ty!p80-X
B;$1|#
VE%!BJ"{N:
a^5VZX' G@
#mG>+>5%
koPA!2
; +pJPE
7oG4M"%2'^
Q:;b,2
5Ht_z#I8Hzd"w
\^^kZv68}x8N<
jU]F.yKzeVals
\k8J.2K@
)&Okf :
]y?Tc`B
e*H.bU
1z&)uMPD
6pp:WGZ>{
~cfiH@)
Mf-sS(G,g8
~u#B1;:b
!hU,guwX
J0wm"0&^
X* O2T
MaB'W.r
;(kD^:38pg6$$
y_ONN)IvG%o5
Q6*:8y
nGo:q1MvuCrJ%)
T#VE.sm1:( P
+f+k$6EX
&9X0LCC
] #?s"d@=
\nNuLDq
oM OB|J
nQz]ZRP
Jt*,wJ=zi]E*}
ReQ^CVW
A pmZsK
_S7B?<
}Dz[8V
_Z}YbIV(}ep*P'2
CI$1Gt9
%S["i$
&'J"j5ih)DfGRk
1g8f2b$y
?tPr#~lt1CZAT4d/r[a
RSgo` oG2
p5R+4{8>
<0tae'
03S0X4
"3% ^6$3r
:q`W!w
Oo<a(})a=
ZQ%\$xv8W
r"|/D}
~*#o0N@L
SSPU-mJ[)X
!<0j6p,t5
b#!MA5/2lFi{
/#4Fog9Lg
6:Xu7o
!zIh9ov
p KXFZl%Mt
2rAL7$
k~ix{.
R2/'sG
Iz!7H+
H m+$3O
aMHSrKa@V9
}]E^#F
-AqQn"
.%16Zh][8
rCfP\x4!
WQa!4Nbr
3{RKm(&U4=2
n7Z"d%D
XDf;|eN c(=
F?~|Ia
TR<OCL#E;
[=`:+G64^
eT0`^!`,%#!_q$U4E
eJ"!~q{kvOtW.A
%ah*P5
HUeDa`Q[k
xf:*>{~%Y
sry/ol}
xvS'9 Lx=s
On_+y%
F8<2$)cvgl2G!.2;*K5`@Q
~PW:!'^
R ,s=Bn5[
$F s}G
15nI+W<
$w!iGu
=C9A(6Z[cC$
;ES?RL%6dZ
vVx?*Y
7d*;B.s /
z%!V33nidplf^UO
p 3&Cr$rEY
y^j>26
GzGGziK|
r`Gii7
4K<mJC9d'"h
{@d~+3@
J!6n6{
gIi]A%
&-E;J~0ICQ
zGuXL/;)
&Fx)5e
k6\3:DH~tqLL;`
=a6z4yZ;fvd*
9nIL'|IkNCKS
yg~- FZd\c
pkUQ*["
cyI|'8
O4m~jA%Ogp_W7p
hp] 8Rv
*b {iPM
6Uy"v@\n;
[Gy5jL
#`)4W-_/+#Y
TtC>o[WCKPf
\c|:LD[xcVP/5
HmSa2~
cRH<_v9`-a
\<k;1`
_]I_0`
ZzYnmZ RMc1a5*oEI<NT:z!7VY##\JB'(U#
>rx^&V}
YCSnyGc0|'
\ @$}q
0zvT"(
Z2%#Hs
.]N8G{
7El4CJcc
RQ+&Al
LOa3k#wB
eOL3TpFb
Y"=G<&d=j1K
el29OML
8`%8F4
_W?xpj
@QU,kD<QO#kZ
r#Fr1Cifg]Yys}
yCa)b 4Sv9dV(T
<;0GMu@
65dQgS/zQHHWIf'
b,LA;1|
}A%sO^Q
yfppOCX
n$~*"xRW
VNL_vgsm
IfNfWS4GmPa
&!A~'q
=-hZavau
h &aH
x2/RXG
"#pK>*YTU`vUB^$d
N{abNw!
cQ /@/T
#K,_"0
b4Ct[
[^;_3j
wRuVe%[W
+JHc,,
!dZ8_#.
~.+,ykW9Z
:/ZFihP{mQV
h}o8A>q[
9Wg(aHSLk.B
Z N2:$.
TVp0\&Bg\
YSPXQ,t
8P\=0n NAZL"m
6paEJWV
_<rpy1W~eI`~
qY<E;D@
~T=q&44
+^ a]("
PvvJ6:/
Q]7B&Jp-
{u]uSlWohJIcs
(O-9 X{tu
O`ltQM
j.z8}>3p`U
WyWr0GG{
Hh$`-Y20
>tYw?&f=J
"omc}h{1Zt8^|
=4h;6M*7'<
JDPGGI;K
g?EoYhDa
KwyCOMb]}I
m`ET 1\On
RdM-cX
eiD Hl
z)w^fG
@wwAn|AfzH0Kx
1`}IzO
j0Yf<9,5
D?-74!_&DY5
<m=!sY
o[v$:/F(GH>{q
kh,U#Jqs
d &UuAs
;xT*Nt
@s7%8aP
r=i7b9s)D>LA_1g
4u|L PJZN-
OA%)R(Dt
hv;JL|KL
"F]&|d
eN^.9m;f
/AQ{X f-*T
dU./#v
K;5L6 $:
a&5*4/
69DN*6r{=~
%dI3B'|
=-+zM"1I8
{xuc*(:
1Pt9 sb
uOrrc-
a8`C.J.H~
MX.aFx:J
8KGvjb/B#~
}:Jv:iG*Y
u<YdcW"F>E+KP
GCW-xi4
(RNi5j
DK[{f6e>v6WPF49
Z*aY i
'*io\vO7PrY a
b$)(N@vnZ-
EgR6LI
\E1/`]f 7
X%agj10t
=J'~vr34>p
o?C(Ul
r%mJ]\yo]_!
}CquwCw
363VcT
c-PapOMoi=
vQN.FuHaW
:}ue^g~
y.x=2mR[j
$fF(t:w
AscWLBe[
@kS(gx9i
UGB]"a#
0QYw~\#~
90?46g?v62|2GN)LT
/eA&S.
-qc<.KQtf"fL{`a=hr
d?oBeCs=5
:_]lE=P 9.
RP/I^Ax>l\t
o2%MjOCR*$.
O+Cdbd' F
^_tP3q#m
h*\Yb[
/Kk]C-
F@c$>1oIT]
nz2kSu!F
e3p4.CF
>Ex TODD
Go&!pEoFo}*w
!f<F;!Yp-+]'G4
`hAo(Xg\
3%[.riSDi
!NE0R]"
*x:CxE&
BNwg*,
pV5N!+<bT9uvl
mgnSrLq>Lf
[py)P-#**70p<
8SZ ^R
=o'"I|
^=w0`f
U[WY*;
L BXmP<{&
tE0z)'
~fiW52:'@N{
]Py?Ug
V0]I<`
p4 n4w3
r'Jw-yvfA]h
yQ\ pDU*D
STbh3KyDF,M
-$Jqs)Y>
sJ3nr"i
GhV7w{
#|{Bs+Tq
J$&xB`u
5n@nXx_
4`."zYg
fD8=EcWKZ
>A_%Oz{
i_M\\Z64#:{G
65p#qm$
]2hCHxhv
?xx7O\bV:PgepP
J{Te6zK@fI
z4m=Q.
=M;M n8
pd{2wB_]
2Yn;j;m
gf^J(G
C*g]su_2{mtV6
2JQc1)2M
^;16ipXE
;X /~m7y
cpc%bH
^MYjMpjo
&6^'8]EQ<
&;jL6#o1Bkj9dhoC@~
IAt,*()H
VyNDxA
&!c.5R
|5H5f-
&MJAn}C
sH9E*9a0uY
4ry`9)
aTbH1e(Bgn e
]5~-fg/X++'~No
jOS`~x
#kAE9QB
CT%."z&
IHKb&cX
PdCWMnYT
c\k%dm04
Qs.oJ}=S
M|aCQ&e
_v/B=[`%
YcOw>D?nL
T?3c<\M
xF&42
un,"i.]
qb#98ZjvW
\x^u(w
)}D4_E
j6nSwY
Nkxsq3&
]#dk/?r
UTgv;2Vi
ej7JzYek
N^zz[pD
$P74%F\Cv
RW}@K1C.
Z zKVDNkJZ
2JA_m}jd
[A\DaijY;c"%rm*ar
g)%^rbj<5I
~RUfF$s4
?Lf4A sD<
6q7S(*zf Fd
3u:Z:x?WN
9"n7>W
=w~%DBG^Z7mSNnV!;e,
=702vPt
`WcY9?D[:
@S:%ms
5$c3cKs
2/u'Ce@_/9
3[q*R=9>k|
hTf3F]
XPl>v"h
[HMa3V
Xwi`5q%
4%y?b9h
)n/T=dkW
vWL"N.r,b
<TC@{
mcIt~Em!cVs ?v<
C2RS8D`y
)#WTYy
a%27]2n
XM~,SAt!N5
dZZm9R'
yAc3p=su
%1l72j*
@@xz/#+
`3Qq:N<w;&BbF6EalVgy
^Q.w/z
0{j$_9b
-Yx >D
WD+QI[
X5!FI?@;M
!/uJ4V.\*Q
7$UJpE
ALF=`
G] 31iv!Gy=1q)SVK>i
@`Pv!:_/7D
*gYWPBXkZD>u+
,0L =D
3Z^xdiO
mHc!;F
7'OI0!/$h
.}rl <)
VF'zg-Rw]7
>!@JQ(
d 5Y.?
t?{{Q>=~Q
Ar>30}?
=;}o=yAr
U3%:1nfloACb
Jdnw=@tA
37CYP$-
a}`[x~
sBYCOQr3>i:9Ngv
5Vq|6uzt
V#Zd~H@
P?Y`2o
hljqHNmu1
&Gr~N*
p$C8|x
RW>p{=mB
V%5D~%
~y:sap*
>S1I~R8$NEr
%4G{A26BL
?*6I*b
"3\>[|$
o(e*87
F?HZxA
e"2M[%
&v`fcW{;ug'c@7R%
0QZxYO
F}kB=:
X,'+@gk@
\$~ZTdxP
oMG%H{cp
E-_@pV
k`c]?e6?
Q-QNT>b
zrsM*!To
$<0m`G
&-|[58h
Eu"9$
Ouw,\T;_DrWp
:#wQAC3&@.\
fJ _zsZ
*9iE$L
XjdTIJZ
?HaU`on;Z?
Oj!1_Gb
Nf.G`8
.${3Z?
Q|4$0okkN0h
4yR}:773 ft
]0^FWA
T\eL@^
H|W,+8Y
e6FL:#/gi
SP*GopHE
WU1)J)_I,
[D<;9d`
0:ki i|o[x4Wx
O_i#3"&(Qz
:5=c;H
?whY}b?
}P[_ojaV4
A<i]=?
e1@:\Ms#q!v
~Y5u.V6
6v7bhTt
%^d"iPx04
r67%`1wss(8
{(n"=3
~x^&p;Ko G.H(`
^-~JZP
UD`^C*Du
F2sqla
(c.~,6
%ws^==H4
/@r]WXiU=_
@)<SoAL|9
h$ 1AY9T
Yu2{lQ^Mi-^\ 9
rwOvE-Z
b2%2ji
ABlRkwfA
}XdM:Zt#L6Fc>|*MP
te>&~eg}U]e
rC""k2^O
U99 b_
]WU_w!7{t`g'a7e
nB$5JXlNS$
`0C^1I@
qi |?(r
N6l'3m
Tbdms%P
w0YtQ*
tj9fHR.hl
KbPMk1%_q
zW!!"Qj*}
.\lN4`x
QaQ)[A!`p:
'!o>]A}-;Y
:kkMPR3
2$wuq\D0*G
*8l|Dp9/
_-Jvg18s^;M>
0x,f5g
iBc8OL_D'">N7
AVm,EUU&
BQteti
_dVgZ<
z1}2}$<
2Nx+Nk
6|nZV.xW
Esc&B ++N0
42v]:K>Lu
7Fg7n)YN>{~t(j
\Z_MspuQ7
&l(.`z
lbR)\|
~e_*{BKT
}Cv"-Q\`d
C/4pQ+
F5uthUM-RNtx
XBbAg{h!IR+}a
)+ywcu
M3K8NPq;+9*
~x>1`vZB
"pfFkfU*+|&U
~\|.Y@$h @
JNU#O7Q
TPzhX9Hf
GSkdCDW
jVP'6J
*2"C~M
TBD[_5
Cb7\Hiy
OM+lo6e_>
Tgeq0HQ
M"POmqI
&nJ2_dL
\:9U6F
|M=+,RT$k6 ,
l:!sy^y}H
'LB<.2Vo3ii
QKs#_?7;/I
Se":]"g!/B
.^;eNj?b"(,
V3X%SZ
'(EoHZYc"W\be=/+W
os{6bLwra)Y
&%Y*^/$
t}c[,G
T{\o]^q!g
)[']sS:
o01M{1-:u
!$#p}=
Vd.W;c8
=+xS%~j^'
{+!&l$
^>bXo:M.Nf$/#iK>NC+}c
{:fqqT~-m
1|17IIhR
uQ/2I1c.
RY>kTGGe
U+Bp!OZ
$3L3X (S]D5K
;JUOdi?C
nVxHU* Ul
rU|-Kv6v7!u
<s5JL;]N3$ $P
?71oo%+ySe2
ps <#b6Xo
x8LI :e
jLHbF'dG,T
m6)X&a
d"w|3Q&]:w
x$-?4XV;
%'X/ n
aYjt;hRa1mw
/M3c)z
]XUhhEl1
vofnB)Z
pN|9 q
j9Cu.brb
K6vWTq]r
AoSZm_
ohid>in
]<YGU0_
?H rwa~
-QIEeP
^Y$=y5
_#O3:m
$zqgO`p_r
4dVXMqG+^e1sF/
uqVj:7Yk
RdrJQ&1
>7[/\_1;k),UAE@
vnCa'I^
[~^_1@'
}AG,q%
G@o!h2DB?
hAR{#>I*
7O2=F6
|HS~QB_cm
UlgAySJY`)H
-E2`F9+
Wt[l_Q
hEJ?bsZ
.!s%YTg }48 >
jEvb[42
WP>$]L
CFPAL]_J
_9(j5su*+a
sHb.hR"
*tQIeu
fU1=FJc
|!pZlk
5^)<OH|`^
f|l;Rcw6
y`++6*yv
mLt3i2
ja!!yNV
O E&Qn
e]\{aKW*2E0l4
]Gk:(-<PQ@K
`-\%NLeQE
At~T+~dIC:
0caEN^&RCR
}+.u"e
/v?4+S
~//qX/0JjpUA
|[r/fQ
qA_?72V
6GQ&U.H
@<oO')bz>
X*\KC%cI
+k2EY,
5k~W0<v`
f=aY_P
V.xlp"\~
ImAik.B}
&?pf~;
a^@zX5%s~Hd
a 3)}_|j
|AYQk#
<k@5F&E
xu(k Q#$FT#4
\>}*sU
F>[o)Q[r
O.H/ri7
*mu4!C0n
^{/Z,3`
BSJ<wrM} oT7r-=%.\-[j]c)
<E#e "r
Y&D R7,g
;la-QV
C@"Y\CbV
<CI%Q<Q!Y&
<S|Z#
GX+e?*
rdC3s2"O
d2ev"`oh|JO;
u2Fc?kt6C
:Q`,/Iz<[g4
1C&d#<WjZ+g
z{g3osgpx,~
sm>*w="S
T]5=2(m\796s;Cr
S0p4O7v)
rZT>+Q
9K&F5U
*P4puN~\K@P.O
U].Z4n9IhT"
:[Ouic}
%;V<>cj6x
N;]nE:k
KA9D'8
%X$0h.lg[
#e) j[f6
R)LUB\a^
y}Tjpa
dO}`WD
v_DnVR
7^tPqr0Gv
V"//%Cl
aZ:$|AU9'
.h>v6&
n#^`h1(P%;SHW
fg[Pr/
k6n*Z~P
nH02i1^
fXE`6WY33h7
HIL>WDQ
CAr1&%L
jEt*9d
x_>dViW*NK0
IJ Bo^
SY$[BMABZ
!3YF!Xb
YQ1m8)5R8Nb k9+
c=\!11{
'V217Dfh
tToyzBE0VI
dr-#;MEz
HHEN{?j9Z
r1b0y,
\-,MqN0
NN=kPUvsi)
r$~F??,hVa])
3T1:g:
9y41<E la|\l 58
o_tz%M,
{mWoJ1^hxa+@
h& %RGz
Z([#WQ
1PkG'B
]+8R)/
\ZW+vFy^Fz6\P
a&2rN"|rX
_:3@Jjyi'PN
0he sV"
W DNtt#
@|78{{
~"9't5
P'zxY?E
~_}}8TP^R[,u`
I8=\Wf
L9^!^}
3o6tJ@[
SG*y{GV
A;FvB3SXA
kYXIUa
#GA;u
v`/np?l^
usMc](g
#r9$\B5}#Y
4$|B #NqG
T}oZI(?
sgsW>H
?|p1zP
od3Y#K
4B(E8.
9f]Hv;9
f'l?!14
%8=?l/P;=+-k}
un]>V8zqoY]o
CKILX\-X
$x%PUgp
6Uqdy/
/WMYTs
n| jJ$%wlf Of
)1B#}5%qb`
?-GlV7
dy/?r9[K
4fo;8:27Nv
=(ypwf8P
T$GX$S-
I[I1am{ar
96='w`&!S|1g
{"?x[l4S
o(7Jp5i:qPhfdwfFLN
&_B[RvXZTRQTL!'RF
@};6aE[dmT
lT&;E}.m
Eq [`j`(Ic
Ku]<#]
zf-kdL
(ho#Mi'
(f#BE{O<l
) n"Aph
nF$C{{Z^
SkfRrJ%f
s3t/'6
dt]w]d9D
\\4c]c
XqBRZ`T(`!:XPp
nR(g|\=tu5mcm
PF]fULs3Ely
<@hBt_pB4#
>0<pK1(*+/"mE
;xk|l0wR
9Rc5M^
SupL_KM
&;?$8?
S#$qAv
xKJA4|N;E0 m%*Pp
]@KYnmAUe#
(.D5[O
CpYnZ2vFI7e{L
y7l<i # &\?
-F}@J1
7AOD?BP
X#mgj,KM`L
\=H%&pm
X{XPw 2
t6~ze&m
?*>.ttyd#/3nk
nh_cf]5kV 5FvfL}[2
cd*ckH
wf&:=5O
^)D+".ioU4
NXESAWY[Bnz
qa2"np*l{
Fg!j}5jRO1T
wf&:=5O
^)D+".ioU4
NXESAWY[Bnz
qa2"np*l{
Fg!j}q.`RO`1T
W6=w![s.,is^
MaSAxUFj/SYnzFj
u#nD*SsV'!YkMujOs
v+K}*g
{feVRF!l:?T0
kdRi7WW
nipoU4bPW
5ep6qa2
r'!j}8ww
!<[w4,\`
J]wuoV
;RA (IE
. `1_h2
oFzMe=
cxZ@UH-bq
!Ash!OL
}z@X)Un
*yTl8Q
_)=U}&;}
BAmA75h
!^SX3Y$
ioWz9(Z
-{9nQ!j"
41`A?85
9pB^?AHh
B*inrAjiv1ePp*
e-YUSm
722bmC?
Y;RU*rS
uB`41`i;(
>cadhd
5)N%zJe1I
m@;PnCZ
{D'%]T
k(p{iRy
o~9Pf=$
C`Q;;Y
!8`0X|
)0v(9\k
X p_lG
a?twu3PTgg
hJE9)eqMV`*$iBE'
$!U.]RMA\
U&?*1+TNjzx3^x:K
s _Dq0F
yt@ssq/n\y_}O
Ru"hGU)9ad\
Jf=9^@J'
J%FTl1C
N!4^RE1
J,-O&*TT[
E,H\"Z
~T[)8lF
^3LjyX=)
MitLQt1
Z9@{YdC!P
q&1~gkTH-t_;+
Q\5PLVR51!'Htv|0QHn_(%/
a6yr-A\L t)@
+35a(
joOPJmS:;
=DHK%
p( -:B|y
,Um(s$y
|qwN3>Sr"
l'g{u{J|G
jShILe4
4f8kb$4
Cs'0@rO
R</T9H
1Z)1 c#_
s2ZL(N&
_mUR71vL;%
@r"HJM
Y6I1&a
QXtEvr
y(BV0Q
b "%FSPg
`(hIA}
TtaLE{R
,!q-t[I
E]/X+t;\)k2,:(BK
!@8Dmws
Sr;g|G)
^MjSd>CWdX"O$I5Pc*BpS/
/PeCU](2,hPJ@]S1
<jmM<t35eT~-{
}fhoSM
p)V,wGyPd
^ 0lQ3b
DHYQ.s
Hh/Ni-M|;a{R)
J{p_xN
GSfF~/,m
2|!N^`n%"ir
^>#3/a(9
WI:@^i6
i~IH S(A
N^`.^SC/
PghSdSEd
P7a@|{RV]h&/
`wp\F]@I;
oo@Zu!
$W|/L}P<?^
{~58"t
.xG^_g
D^1yC Ft1Rt4
3<q\~W
f4<n}P
y81&6t
'x;RtnK
^"]n*wa {
9:gj/yP0'f
FlvZ*P
JQ&_p(^
"5kxKVuT
D.(x@|
yohvd({
`@w'}1#N^`j~
|uC7@(W"b@2
wGn5;QBGe
|Z]X($
x)oKka
`BD ATpQ\x\
\_[u!S7
Wy02jx
B;TCI]fZ
A-MS3<q\
/AN"3\Q[%
6$st0X\
eR1}W1<s\]TfCFUF02-N
nf.N7a(Ct.e
x=k?6")
y=M|)a{RK (#C D
;=*t1-
5*I{(NmY Jvr
^7.C/b=X
x6mO\_W
=R=\Q[
~UQ4'V
OqmY: W\+oCV*
lT!pW~yk
QL5'U|Z~
#aKI#_|pr
mOH!wsG
+Bl>'C
?aXFz$Zl3
97CWeq'
lg;]w.3
/BX '{
VKPJN!
x_ 5r9T
\)A0cid|8G57OuR
>+M|uH
.kHD3B6-0 HZ
RjD?*5S
5DDa]o(
:jee{&p6
p%v7>1
w{V6YE
c9IogB+
E2Ui1"X
a8vhNy
v1z)4^7
y&n{vE+]@5>
S,]QG'i
.@{NL">BI
4k/U+ )I
W5h4a->
:7pP[S
>%'L<O*uTD
%4kqk<Y7
/Q=W1LFRW
T\*<mKm
He*a1x
me5_lPT!
Y3N\D 8
YoQ>Yp5Tx"
<:w"7AFMNZuE[5z_
&I(Iw3
\tYPN$nM
Lf^ge3
Vk$\{~
V<>ZF=6E3ZYp
X.^BuSvd_
Y @:".g
Ld:)^ED
{HT\3$f0
Q\cg_a
WXNG}~e
[Db<eWgsE
aHw0\z<'
;( = ewX
6vX=P>0zkH68Or
hAc.#1
OGThlHM
'>KM[$9xo"01xr
z^yp1iOl/
g>J%K0S~q
/7*e+fq
@go$u0H
D}ZSBl
_L9(2J$:
c>TzNi/h_
]LdN"@P7
PZ|f+zxd)
I+NiG=C
XnmTU`,
q2X%1z
PTpkXPsP1&
u5;;VZkE
5:hW$H.3
3hMrKm0`9\C2 C-
6IMhI]
8FTtz0wG<
$TCA G
^BtTDB@
.'s4X^
^7;h68
1!/ zUp8_
vY|lpdMY
C}984X
.@6B(1k\I
vY|lpdMY
DB.<gE9b
]OP8Wn
3IiJ(L-x
\m=E9"
\G$:ESn
%{c`#jw.
jl!i]cZ
ajoqbgt
H6J'_
D7dL=`.y
qhNo'_e
(b4=IbJ;R=
7>"x\4C]
"dEk-Ui%F
=TSI,}
O5EEB2
kT`>".%i
]KfgJx
>h5iqou
pHLD_>2F|
'Esn/=2GqI
)5CSzMT
fjx+"S/A
,H8*PG
k^K';=?-
]w[vu>
F pLun-
<@8ekCmqIg{|
_-CnjpQM!
D!K''n
G%bn4zeryq4@
.Jy!wR]
0L:v40YA[ '3
}R+Znk-
HZI7L#(DY
:Y!WmB;
>xY{pV
3_fu%&b|O
|W!oRcTG;>p5m1iMT
U$[h7t@
\QX+By
nXj+oV
J-wJ[m
dQHVfD/8C
Az.!_AM_<(+0nc
+\#hij$
w&]J@@60a
E:.9ykNz:`
\?5WAF@O3{
QHf}<id` )[n
t*zh!.;
Gnh4a&Q\E`
`joKj( -r}
OCDCM^
qQ(z7.
[;u1{X3>L
X _C1Uo
o IpV]
JS%riKN
X.&V(`
x7WF""
fuG.`K
[<\m)XVHE1
Wsb'jbI
jNNS"Lc
P<f{c8",adV[
C}984X
.@6B(1k\I
vY|lpdMY
C}984X
.@6B(1k\I
vY|lpdMY
Ft/fGV*>>7-0Gjx\
h&=OT4o
1z!DdR'a%
VIU5NI9<glk?fi{`DeY
ri:f_p
{Nr;5&tBwf#
MRrNk(M"O
fFeD7
^\t2x5
nrs>0utTD"05X
d(}D.Z}
=q#t*6cDmC
3\bb?Go
ftU9+\!3E
P,>Y,Y<*8uF
quc;eg:
w1tsF%wS@}o
m<p_-F
og&TqAD
J0V?kb}
r|BqOnD
Zhj3>QFMSwc1*Fj`.
"$Nd3L6GW
]F]rk@
l.SS'za
!}o'vg~kuyDH{kg
?2ohkR-g`AlgQ,g%t
b)?p=a1\`
BrxE[|
@hhSc{T
C}984X
.@6B(1k\I
vY|lpdMY
E:t%>z_OS@/*>N?
$ms9A*y
} u*}}f
$Fe1Hi
N>|=H&H?
$ms9A*y
} Suc{UkM
NP2el<2k
]> !|%
N:Rc=Ly6@
q2^|||)0<h
^u=Pl8U8b<@0$|kGmK
eI=2ET
B{MKed
G0kbJij/?
kvs*^eK ;
|V=#bT
?U9!3mft)
Nb=2UT
Al=2UT
B\ )j5n=|~
Z3d,{Mn_&b
\D{Klh
gj&{dl /W
?&,qy2
Cl=2WT~>
Z<d,SMq|&9
2&)p~2
Bi=1VT
>fD]C+
I;"3QFi
Z|Jd}yM(g
3xtvQ}
|(wD2J+`
d8lwdDDq 7cMWK3
Dh=7QT
sQ0"35
i\Y)1GZ$dM
v(ws$wYq
d-de DW`K3
j['>=r:
s< 1hj;2u
Gk=7PT
3gkvAG
}="0hk:2k
iL~?/C!
CWSKlM
Vz8+wt
N; +kC
GMdq6$
(OH(t+e
d KW{Kd
K6HI(_
Gvn&qP/
$ms8A*y
BnUyEAR
G5W^Kv
&p6Lb/7wf"
;p@Xw"{
$ms9A*y
"mE<*o*
j-,r5&
lvnG#;g
JtMY"N_OSGnz>Nv
;p@Xw"{
$ms9A*y
~V^CwD=8IEeW
3Go{>Nv
;pDYw"{
4ns9@^
jq&gBj
;,0`g-s
H>&z_ S$
DJC[G.b
LmP9@C
jI&eBp
}}jfQ;,]`m-p
HVijKD
O>!zp_oS
j?&rBp
}ouM}}HfC;,T`i-s
9VGvVD
GnF>Nw
DWCFGj@
}}Vfd;,]`|-w
'>Uz_OSGnz>Nv
#*Wp"?
15S[h.
,!^5:-
iA5zJy
}+A}9y
.M^ctPI
J=6e|M
0tXD"JM\
S/K529
g_w~[#.5
ji3myH4Y
N61%,IB_N$
)/aS4}DKT
u`x'Xx
3Av+8a
Y@6z#V*1Mr8
J=6Yc:2OY
DJ>2flf
/Nv/:L!3Z
!/~nY>
fNkv{~
4"C&,[m
C}984X
.@6B(1k\I
vY|lpdMY
v1DvKlOf+Q
!e]fQz<f
mRDktjLmi
Rw`IOayV
U/0'e<
Dt:@6U
x$e+dBTR
5u(IWp;
l^KaW7>-
HSqn,Qd
%el089K{*
a2x2EE
?71)rz
.KI:ft"
iTxAmU)j{[,TKw
2jiZ3J
v&Vt^;%58.K]
4GQ_<YQ
C;I3$I@Sd5B0%f
7Y-J2%LY]T)GV
SncH5JX
i5M8y=
ti(^$|?TIP#~+
E4Ie|Z
vOE"V~p
^O`5Ii"xh
Ax,Q$fQ!Xv&kv
YN'P0:X
"pwP}TJ|
ca#p<a7!
0{Vav30~"V
2FBC4R#o9R|
P(ua<ks4@6
JbRx%S
vY|lpdMY
p@Xw"{d
$ms9A*y
j &k,fp
o/L:AJ0
oTF&E#eqb
R>I+[k
1[1^Q=W'
n T,Ov
z1gqf f7
mAgEQ.5 TBj
]A6B$b
i[|-d9
]+23iX5
r+"F9;
s1_n~F
'MYX: 5Za
H5l[N[B?
Cz>?l+_
[>&^!r291E
_%>8##tusrPKf
x)eq7j%
a_s?hZ2X
CEYC%&SQ
^w7(s?>`zG@
imW%TZ3pH/AJ=u!T
Nm4u%]\
u?:ccM!"e
!KS^UDLP0pR
'SPqR.7sc3&z# l
[bVImM@Qro7>8f
<I@BE
L?OuCg
KT,QU?n
"/7V{glf
zoYfJ|S
$fyp8u1/
uJ<gs5
[$(XPo
o4si(/@#8
E$DDMb%k
H=}R1+z3w
,#Vn]*yp
sPA|S5,B
Dz>?3_
)G1E/6l[N
q^{kwcJ^
. Td|S
Dz>?3_
)G1E/6l[N
q^{kwcJ^
. Td|S
Dz>?3_
)G1E/6l[N
q^{kwcJ^
. Td|S
Dz>?3_
)G1E/6l[N
q^{kwcJ^
. Td|S
Dz>?3_
%IfEb
.I/ |S
} u*}}$f
m+;:eRb0!,
D@C`G`S
zmh9@C
j[&eB`
}RuA}}Vf`;,C`o-w
8LVcuED
U>%z_.S(
jv&nBo
}&uE}}Jf|;,\`
@HD$8bEHm
N>:z_OSv@H>NF
jl&lBw
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A j
VB*"'@*
um2GbcC
syy (6U
k{>$rbT%Cy-
= a."3n@'HrC+N
)`||)]A
P%JH;K
_D`>[z>wT
0f]w"x
@+-s!K5@+i]bahs9~*
-wrKuh9&
;1`_B0
_NjwX00"J
O>URiWf@|n+n
@@"]&{
{?vGO*}
Wd$Nz5NPu ;6=
qGmbou^(
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
9[2(_#
'>*pZJGx^8
1|`hOb+xa
$mr8@(z i
rCa>`J1/nz
rHJi33
u2E!4`>
{ `c8~~
y._ dX
*w"{|i
b'Y$msE$ty
v)'0C*-&i
LA@]}yi
bML7""G
6$.n:lB
%,EJ#{
N,S,j'6?
).,p= in_#"Q
o%`E'B%
j)VO,
@ pEAU#
UO.9^z>u
5k;ppW@"/ {
AG*yC<b
a!bpq+R
F *K":|d
IrQG#c>
3C*dHk/nw
{32g+=o8
'_Jk?L
7E%CZT
|\Zw"Fm
*"Aci/ 2=<N;
W X+2KR'00r
c fB%S~(-0
+O|L]7
H|k5 C
$J;$7dqfh
fwUt9}
!KgN%"ufD~U
X/V16z
&D WG:
zR Qf2x>^D%
2m#B|-&
3eo:oU\AKd`s+J
5qz.D4zGx
=H_OSGnz>Nv
;p@Xw"{
$ms9A*y
B+3C w!
l:hMlqe
L[1VH
c:w*{+j
X8Dy;+P-]!
O3`y.9h{C.cK`
)>`b\NIO
_5+.q&[y~&B
0,F[Gm4E5hk'o
%k+0;b
h7"JQ2
p -]I{E
;W]..OZ6y
>*d[oSX
U!%nZ)I
,?%jTMWH
SB0h"%
?{/7|RW
[TZEJ)
lh\Gk+
*&kh k Q b
Exb2CAl,Gk kzAp)
I1W5S} "`
.^U##u5
9l<;'c
xA[+I1
BS? !|>
K6,|}U}
BD'?\c
]Kte"pDRJ{
IBxi=x>u
nWk/pC
H|<[^o
g2qEFs8q9sN
JC1jAMN
Sv#+*VZ!T`g*8:
}lb^8|
5b0G#|;g
DRvBdT.Bs
+ms)u>
R93!>F(
!>H}S3B=ZS
Noh*<@_AV
kLk'~C?;
K"hq>I#
TO=6 J
yD}(C+I
~H&t-.9
]tep]h[TZc.F
5mJ>4[kN
p =cI#
uM6yy~}(C+I
~H&t-.9
]tep]h[TZc.F
5mJ>4[kN
p =cI#
uM6yy~}(C+I
~H&t-.9
]tep]h[TZc.F
5mJ>4[kN
p =cI#
uM6yy~}(C+I
~H&t-.9
]tep]h[TZc.F
5mJ>4[kN
p =cI#
uM6yy~}(C+I
~H&t-.9
1^"]h[TdlZ?
`vj28k*q^J>.^[
YR Pxp
x-u'j8;>
U@(C+0
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A*y
} u*}}$f
'>Uz_OSGnz>Nv
;p@Xw"{
$ms9A9/Pz
au3g7k+?7^r
?3=p EOP(Ao uE[ j9
}'2{FdhFG
ip$O&gj>'
=vj2t*
%?Lp @c
4BqRy(t-$
D+2nt`B
P2&,fz
1V'2qM
OiZf]-#/
mbd&RA5]Bo%
Sh)fJ1+
g\9vZ3nY
}q~OYk
8M@e# /qFj_FG
\*a$3/
.)B[TIf
qJtG;,tL
v5VqYrN
bg(-zW5w
6k/F8$Yjn
6I+TA;
RyGR29/
v)6i`;A
6G/zaB
fMB\HVr
$G_Deq]U`=5|<
_>Bh#;8O9Z0Bg[^fYV#''a/02e#
+.6#X
6hfJt^
~T%YH@$np6
WT!:Y.BpmOW'0f
'K+qB~
,i{M:!J1MJ
fMP)kVU(B
ij,�mb
%7ZV9F
+.6c%LNE
+EEZ:]X
pUOA$dYP
YE7[Bz>
e>GiX^jo,
NB)DMH8
a[c>Ub[;
}Bc-5(
/0#lEp
*C(/,
]BoRJw
d_)Im"vy,
'c[`Cc
r3b!BOG'[
&V6E*)U)w
5>KAEj
":h_cad{BDm
k%]\(REh$;
JPd%<ys
Y-o|A^k
xEig"w
zU UBEe+>`Uwj<03z_l"5
)vtXeL
vWQ;%s~cG
J~<aJ06p
gzz7Em
^V,a/=D
%Ub!2]z>
)bP&X:|Y
;.CsYGCE Mf6A-%<
fpcGew
A$Yj)jX
e4KVK_W_9?(Z3m:ujw!<{
##xXz|a
:~YrYe
`AXTc/2X
,O9ZOO
m&a(?T3!
_m,(*0W
.M\ec;
:RnfGKg1RJ~;Vtq<E
7O9,[`Rm!
`)\H9UNcER
x:w%g-M
s@2yrIi3l
+nQ.3Ynim/2Q
2A]QAPB
KyI'$CS
qE`;gyL(
l{$Ze;#
+D9q>H1/v)
g%PE.a
y+m[V#gy
;E()Z)
9z}ofP"
$fW}T-d
Jdm\b@
%X9+Oo?tuDI0[".;ybz
V6M:)E
H1gLF~*
`pO]B;
v*!w?g^,AO
/|3/@O+PT
Q]v_pcw\
gph qd`O
K]k+gh ?Do
"EoNUA8
5xJ5 $q
M(>bYs
:IcG$8
[2?Qp$
+2jdo=D
5j`3<t?O
veD2[9
p1e/%y:zPf
;.Ckn)6
TIf]R H1Ms[wq&
6Az1pM
\)Y v$+\
nqw1H%h
?rW+E\n u,
D1v)Yk
ma"Hg)B
1}F)b)
lwX>u/cIX
U$ gy^
q)qSy3W;L~xJ1MDi~OS
`p)iPZ
rY5cCO
"!OmK$q\
= ekIh
Jy?g^8C{
lb4P)|O2M%
$a%7LZV
=IJ=dM1=
_iNOmK$
qCv6iZu
AS~#=P
3:9OgR
t3G=A"iiro&[
.0yj*)
HHl0ykDp[$h^@UQ>BsPT
0$GI,y
tz>|]e
pA)eEE!T*![;<O p__>
OGjgoy
)9R=JA
z[r~lce
#DmFa!
3z<"elhj
&:RuBo
F{xi}#n
_HV=sY
bbQ7`f
`59Ba[/a
'?d#yVM)
9${ vP}
r,o|6U
MEe<5k
MNRvWM$
3#>3UPh|
#@r-2J
&wqv3IOM
44ZAv|y6m
UQyG=Mf`
fSwTG"q:#J
Q'A oy
+A5*?&
:r$oIM,_e
Fl`Uv7sXGB
zio.=k 9Z
O[7mpR
,tJd,6yX^jo+
2\U w|/*.|%#LN
t@D\3M
V]qYrt@.
^ifn0{$6H=u!
ZTTp~R%(q>yG
~~Tb1cG3
bbB!>Tu
\~%<'Q
Bud~MN
3>HOof0
9|6( f
`:GVxX
iL#Oc['G
j{>c;/eqZ
J~*6[<Yg\6KK
OKK6bd
($^),-n]2^\J_j|XbYB
whfhH&t#
O6Uv+V+
pf->9/Ac[
6UxUq$}
'=j$v3K!
'p$^CjD
a =&5t
Jq'2dv9
t5J!_E)l
RI4]Bo%
H@8j(Z3
RB <^P}
p$qY\HV1V'2
<s4&RA5]Bo
h=\3og:zba
yw*r(yb
OVyG=Mg`
bz}o@&<feB
Q3gpKcd
)j`E-t
OMPG#*a$}[V
fyg8 k$Y
MN@:Vh
2>Hc8&
O#70Yv
y#lQzJ
F)^=a%pLN/
u/n!]>6g
N8`UJQ
Vyr'<#
Y!&YdPT
2Nh7UKhO+e_Og[$C[Vgy
v$+A5(
|BFl`U
xT+qHPRyGZ[LxJ1u
iA0) (S
Tc[WtL>
h%"'?`/
,[y1fy\
=upXe^N
2vRy*C
^( Ry3i
J~;VtqHU
("6r%/
2YksTq`"
$%fPV-
@('?e#y$v|
\Bo_(Jq>
$foe'$g
}6zz8|e?
`Vs#/A
^Ec-MNdvRQSS)qD
17 J~<
`=u2X[
1pg\IL7]3
-29/5vc00G
U%EBEe2
j`;d?5ZV
%Q&IH!
=0~rv|v
$_JPq>8G
NAkxlJ1|a
_aO]]3
T2JdAC(T
OKPK2(5Eb5
'?Fd#yVZz
JNr2) N`X
Ml!P\XPDHmJ~9
4kSuG'
h3:_LFG
Me dyg?,IsrjQ"
u ufyL k
b$Yj#yF]
`uua';
{sz]zW
(B sMX<VG
/Upo|HR
>d(x*d
~IDmYF
u9,c`/V
J`RyG
/Q]&P[Vb/2
FXpVAlCC
u;mK6!vi
mFG!sf
"<T$Ka
?;i(%Y\[V-
'?a#y$vR_i
*tL.^+|vE q*Qt_
g\6E+H'
V=5tP9
&$S#Q$ n@2^
=uqAlE
6md~MNG*g
g\6MSEU
Cko|6g| }L
Fx=||%
Gkc[2y xI=
'?Fd#y+
b|[*.B%R
aAub<46}IB
iL(Qfp
ujY.N]
3zdE=3a`+/
(3[#`y
zJv$Yjt
]BoK-LArxG8:MIgJK
;loZ6OG!4Z
r(xNXII
(L3>ZzJTN
\*a$Q$GpW
+c^jzXbA
j:!J1MJn
,pGz%Wl\Gv
My?tT1(j`
L n$Yjxj=
<P*~UBo
jg`/Y_
J#eYBD
?M-QdLT
<8~:[An
J~8Ti<um
pDexYj6
_A=*h`v
+Z4(R3-<
q%*.6/
RA5]Bo+q&
=h7ZN
&YG]HVg9W'2
]MV^>DRy
HfR>9ZT
udRn"G
h)=miG d$
r0"Uq,
jdw?5t`e
e>LiX^jo
5{[f`@)7
o)q_?;Y
l>sT]G
r=AEe3Ee
+XjxIJ
c-pLN2'$_(q>yGXL`
gicJ~]3Uf\6)
~m}#QG
CKg4p &h+uC
0!Ej:d|
yhH>Me
fIVgdw'
F.T<q$G
,e*Gu
Jyp<5t^
zi'b}kO8G
=u+W8|v
nfJ','gPJ~(Hz
h7GJBx
pfruwF+0A
+(D>4[".;
rzIx{Jd#
`^,>>;jg
u/n!]z
qwf\6?)3 #
%nP /VA
#vE;X{
/>zMFYZ
r!j|[yB):G6e
]Bo$pqJu3+
G*kgof\7g
9xyV!&4
w?g^,AO
/@3/@O+\Bm!?\$00
@L`'=<[6g
:UqY0h
.b[[+c
w_.i`y%?L;S! Bh[
+`uAZV
Xb~$/>=u&}v
J~&aU
[8/5ki
E,(H2[ xE+
@<u@]h
L+Ry~*
r2#\n ui}!eP{
a$Q$P0/$f
wJXb1;
IsI#w|-WH
HGjcKY0f7g
'd#F?g-o
H$GOB+
9a(a$Q
AAPE.
"Ui>nhR
zXXf6|`
|[yJ-G
wW, ~bN;
#,K`@*Y
i>n`qPaaKf"AN
^o2tO")t9iH
UG+n(|
CLyz{aM
Z&d/~A
lB~#=D
yD}ecscUlC5
H%GOJbD
`+ixIu
\WEdQ%[V$
6y,x7U~}@j&pYj
~iruvndY5[$R9\Uc-4
EE%Oo6E(
~$O|5K
K.!2}v
icdN9ZFT+N
sm nDRi35[T
$+qHs8
>[x;m6#v Tq
, hE;8
Tq/FAG
ZDv7|f
`QUdTc-L
sctjDUa}r&
+\DRGV
$-35T=uL
~r3#_RzUD
,QYD[V]
I*.6kAp;<+ +$_HE
]3anWW
| 5M~\2J_RP\
M<#&?LK
|v|=*.6c;#b
Y5k-#jg
x5V 4gm&?
#x%V1r
bd0J4AG
;VWUH%
E[h*.JU
4J2&LR
MfJPaH^J~
ViNai]hd<13z
"@O9ZOo
d}G[p$
+W``QjT,,o2^
&:RqBo
!>[/7g.
{$IcE_
p'e&<If\H
fa2 %WQc/Ld
b^O95B(o
y>9x}"
&u/nf]6g#M<
:3#CxZ#W
UbCcf-
9/5c~b[
-j`E-ZbI
,APfokv
v|/V%@m\~MN!
,fo7_$
!}F p|
Jy6q5t_
vi?b=Z5
]\$ELW
#+Lq>Ae
09DL]3nbk
e&|/>A
Z8/5.jc[
uL'wEm
>&p==MfegJG
%0u {<
]3U n/$o|2YkPT
fZ|)rY
:ugkIDm\bG|
e}\9!a3yR_
Om!#\0RAi| pE#
v|/(*.@?
rYfX>q
17%I=J
e$[pY@
f/e4Fe{T
p'3uWlm^J
P/ @5\\,0
i&nl=m$Yj)<ur.!
v|/T*.*)
Q]kpr0U_A
=BofV^
u-(B1b
wn+SEy@
3>1ZKi|O
S3@fy=w fHOE
`t[cP6
Tq/FAG
ZDv7|f
`QUdTc-L
svtjDUa}v&
+\DRGV
$-35T=uL
~r3#_RzUD
,QYD[V]
I*.6kAp;<+ +$_HE
]3anWW
| 5M~\2J_RP\
M<#&?LK
|v|=*.6c;#b
Y5k-6jg
x5V 4gm&?
#x%V1r
bd0J4AG
;VWUH%
E[h*.JU
4J2&LR
MfJPaH^J~
fMinhd<13zOkl"@O9ZOo
d}G[p3
+G``QjT,,o2^
&:RqBo
N&!>[/7g.
{$IcE_
p'e&<If\H
fa2 %WQc/Ld
b^O95B(o
y>9x}"
&u/nf]6g#M<
:3#CxZ#Z
UbCcf-
9/5cmb[
-j`E-ZbI
,AEfokv
v|/V%@m\~MN!
,fo7_$
4B*UZ2V
$xUUWVS\E
$>\[^_]
UMWVSLE
$yL[^_]
U]Mu}EU
U]Mu}EU
$R]u}]
uEE}UM
UMWVSlE
t ]u$E
El[^_]
$bEl[^_]
]MEEUEIB
$E|[^_]
E|[^_]
EEUu}E
t&]u*E
EEU]}E
t&}u*E
$4E]u}]
$E]u}]
UU]EEu}E
E@t']u+E
$2E]u}]
EEU]}E
$nE]u}]E
EEUu}E$@
$D~E]u}]
UU]EEu}E$@
$B}E]u}]
$m|E]u}]
$]}E$@
EEUu}E
B@t2]u6t&
$yE]u}]
$yE]u}]
UMWVSlE
$wEl[^_]
$s.UWVS
UMWVS|E
$NrE|[^_]
rE|[^_]
}EEEEUE
@@t.}u2&
pE]u}]
$oE]u}]
$%nE\[^_]
$mE\[^_]
$rl]u}]
$$k]u}]
U}1EEU]uE
iE]u}]
$hE]u}]
UUWVS|E
$8gE|[^_]
$fE|[^_]
UUWVS|E
$heE|[^_]
$dE|[^_]
KUUWVS|E
$cE|[^_]
$"cE|[^_]
{UUWV1S|E
$aE|[^_]
$RaE|[^_]
UUWV1S|E
$_E|[^_]
$_E|[^_]
UUWV1S
UUWVS|E
$(\E|[^_]
$[E|[^_]
UUWV1S|E
$XZE|[^_]
$YE|[^_]
;UUWVS|E
$XE|[^_]
XE|[^_]
kUUWV1S
mUUWVS|E
$TE|[^_]
$BTE|[^_]
UUWV1S|E
$RE|[^_]
$rRE|[^_]
UUWVS|E
QE|[^_]
$PE|[^_]
UWVS|E
e1OEUE
$OE|[^_]
U]UEEu}E
$ME]u}]
ME]u}]E
EEUu}E$@
$NLE]u}]
$dKE]u}]
UU]EEu}E$@
$bJE]u}]
$IE]u}]
$]}E$@
$u}E$@
$8GE]u}]
$B]u}]
$kA]u}]
e5?EED$
}U|BtBu
#UUWVS|E
$<E|[^_]
6PxBtBu
]M|BtBu
eE4EED$
J|BtBu
e0E|D$
EpBtBu
eE-EED$
C|BtBu
]UUWVS
e"*E|E
3UUWVS
eu&EED$
<|BtBu
@))9rZt$
]]UXeE
]uEEEE}E
E]u}]E
$E+vUE
UU]EEu}E
UEWVSlE
El[^_]=
\dE|EiC
4$)1D$
9PrWp1|$
9BraR1_U\$
$K]u}]
9JrfzU
X?)9rY|$
9s3Bt$
)9snu~B
$u}E$@
U uL C
UjU(]E
u0F)9w
EJ?))9rRt$
8D]u}]
?J)9r[|$
?]9EUUrwU
X9s?))9rtt$
]u}]9st$
]]U(uU
<$E)(>U
UEEMEB
$I:EEE
$69E\E
A?));U
$u}E$@
$aUUWVS|E
$|[^_]
EE]u}E$@
$@]u}]
$u}E$@
9BUr~Uu
EHjU(}}
EE]u}E$@
$0]u}]
$u}E$@
9BUr~Uu
E8jU(}}
$]u}E$@
$]u}]E
$]u}E$@
$J]u}]E
}~UXeE
$cUXeE
U]uEEU
$@]u}]
$#UXeE
$cUXeE
$A]u}]
$~]u}]
$#UXeE
$cUXeE
U]uEEU
$>]u}]
$#UXeE
$bUheE
$sUXeE
$L]u}]
$c]u}]
$AUXeE
$(XUXeE
$(hUXeE
tD~@Q@
c_UWVS<E
7E|$/M
$UE19u
C@uaC@
C\u'C\
$#uOEE
$E]u}]
P0P@@J
@4A8A<u
$4UB@BI
;EE0AtM
$E.UMWVS
tlUEPXE
$e[^_]
$E,E3WqMEAX
$e[^_]
EpXX\
CdpueUpB\B
B4B8B<E
U]uEE}E
$E]u}]
${E]u}]
$EL*U(uu
EE]u}]
]9ttuF
U;:|CF
;9t19~!)tQC|$
P1SBF0
ChCdC@C
YLQ@9A
ALIPCT
$E>$BX
U9EXXPd
#t{]{T
$P$t:E
U]uEE}E
$:tfEU]@
$PE]CX
$E]u}]
E:IaUX}}
]u}]GT
_h1Wd)9]
G<~?O\U)
u6whO\U
F?E)\$
GhMW\)9EEr
GdeEGX
$\gGd\$
$AUUWVS\E
$\[^_]
UUWVS\E
$u\[^_]
]uEEEE
$R]u}]
]uEEEE
$1UXeE
]uEEEE
UUWVSlUE
e6EMxM
EUxBx8
UUWVS\UE
EUxBx8
hUMWVSlME
M6UMWVS\E
eR]UMC
EMUE]A
qUUWVS\E
EUxBx8
_UUWVS\E
EUxBx8
_UMWVS\E
EMUE]A
$4\[^_]
$RE]u}]
UUW1VS\E
$$UEMBt
$\[^_]
$OUUWV1S\UE
eDEMtM
$"UEMBt
$t\[^_]
UMWVS\E
$\[^_]
$yUMWVS\E
$YUXeE
EUtBt8
$1UXeE
EUtBt8
$RE]u}]
UUW1VS\E
$\[^_]
$WUUW1VS\E
eVEMpM
$UMWVS\E
$%\[^_]
UMWVS\E
EUpBp8
EUpBp8
$xUXeE
$"]u}]
$8p1D$
$"]u}]
$8o1D$
"EUE1}
*UqUheE
$.]u}]
$(UqUheE
]uEEEE
]uEEEE
$']u}]
]uEEEE
$g]u}]
]EEEEU
$]EUD$
$]YUheE
REUE1}
$:\EUD$
$m\YUS
[[]}OU
pl&$hd
$|e[^_]
$X)TL$
Nld)hL$
UUWVS\E
esEUE1}
t\[^_]
$K1UD$
$KZUUWVS\E
eXrEUE1}
$r\[^_]
$nJZUS
X[]}=U
UUWVS\E
epEUE1}
q\[^_]
HE1Ut$
$HZUUWVS\E
eHoEUE1}
$o\[^_]
1G1UD$
$^GZUS
X[]m:U
$'utJ$
p`1(@=
ie[^_]
$rld)hL$
$gktJ$
p`1(@=
$T_e[^_]
$hld)hL$
$69cU1
X[]}&U
Y[]-&U
$U]u}]
$`[UXeE
$ZUXeE
$ZT]u}]
$S]u}]
$SYUXeE
]uEEEE
$R]u}]
$XUXeE
]uEEEE
$:R]u}]
$WUXeE
]uEEEE
$Q]u}]
$O]u}]
$#UUXeE
$N]u}]
$sTUXeE
$ N]u}]
$SUXeE
$pM]u}]
]uEEEE
$L]u}]
$SRUXeE
]uEEEE
$K]u}]
$QUXeE
]uEEEE
$JK]u}]
$PUXeE
$J]u}]
$=PUXeE
$I]u}]
${OUXeE
$NUXeE
$WH]u}]
$MUXeE
$G]u}]
$;MUXeE
$F]u}]
UMWVS\E
$WC\[^_]
CtSt]u]
?XCtCu
CtSt]u]
$u}E$@
$&EUD$
E@xEtP
UWVSLE
$wllD$
$TCtCu
].UXeE
$~E1@t
$F=]u}]
u1EEEE}1
^H[^_]E
[H^_]E
-UWVS(E
C9u([^_]
4$ [^]
UUWVS|E
$2E|[^_]
$d2E|[^_]
UEXEE]u}E
$-1E]u}]
UEXEE]u}E
$m0E]u}]
UEXEE]u}E
$/E]u}]
$E]5t&
$EYUEXEE]u}E
$.E]u}]
UEXEE]u}E
$-.E]u}]
UEXEE]u}E
$m-E]u}]
UEXEE]u}E
$,E]u}]
$E]2t&
$EYUEXEE]u}E
$+E]u}]
UEXEE]u}E
$-+E]u}]
UEXEE]u}E
$m*E]u}]
UEXEE]u}E
$)E]u}]
$E]/t&
$EYUEXEE]u}E
$(E]u}]
UEXEE]u}E
$-(E]u}]
e}#EME
$MAX9EE~wE
k-MT$+Uyu
#Ee[^_]
8UBtBu
$e7 EME
.*MT$+Uyu
6UBtBu
$ Ee[^_]=uE
$]uE$@
$E."EU
$]u}E$@
$E*!EU
$u}E$@
||EH;E
En}t uu$E
UM4$L$
UU]EEu}E
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.