1.3
低危

1c38b94f61af4284829ffc5cbda58c7b7ba6e0366fa1d88138ce97006eefb410

1c38b94f61af4284829ffc5cbda58c7b7ba6e0366fa1d88138ce97006eefb410.exe

分析耗时

194s

最近分析

380天前

文件大小

185.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.80
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200612 18.4.3895.0
Baidu Win32.Worm.Agent.fj 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200613 2013.8.14.323
McAfee GenericRXKN-BX!A50354F00466 20200613 6.0.6.653
Tencent Malware.Win32.Gencirc.10b07aee 20200613 1.0.0.1
静态指标
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': 'UPX1', 'virtual_address': '0x00012000', 'virtual_size': '0x00009000', 'size_of_data': '0x00008800', 'entropy': 7.943864614025493} entropy 7.943864614025493 description 发现高熵的节
entropy 0.9855072463768116 description 此PE文件的整体熵值较高
可执行文件使用UPX压缩 (3 个事件)
section UPX0 description 节名称指示UPX
section UPX1 description 节名称指示UPX
section UPX2 description 节名称指示UPX
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 61 个反病毒引擎识别为恶意 (50 out of 61 个事件)
ALYac Generic.Malware.SP!V!Pk!prn.D46E2DC4
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Generic.Malware.SP!V!Pk!prn.D46E2DC4
AhnLab-V3 Worm/Win32.Agent.R234001
Antiy-AVL Worm/Win32.Agent.cp
Arcabit Generic.Malware.SP!V!Pk!prn.D46E2DC4
Avast Win32:Malware-gen
Avira TR/Crypt.ULPM.Gen
Baidu Win32.Worm.Agent.fj
BitDefender Generic.Malware.SP!V!Pk!prn.D46E2DC4
BitDefenderTheta AI:Packer.D9CC87341E
CAT-QuickHeal Worm.Sfone.A3
ClamAV Win.Malware.D46e2dc-6911509-0
Comodo Worm.Win32.Agent.CP@42tt
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.00466d
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/S-0f565bfc!Eldorado
DrWeb Win32.HLLW.Siggen.1607
ESET-NOD32 Win32/Agent.CP
Emsisoft Generic.Malware.SP!V!Pk!prn.D46E2DC4 (B)
Endgame malicious (high confidence)
F-Prot W32/S-0f565bfc!Eldorado
F-Secure Trojan.TR/Crypt.ULPM.Gen
FireEye Generic.mg.a50354f00466d69c
Fortinet W32/Agent.CP!worm
GData Generic.Malware.SP!V!Pk!prn.D46E2DC4
Ikarus Worm.Win32.Agent.cp
Invincea heuristic
Jiangmin Worm.Agent.tt
K7AntiVirus Trojan ( 0051918e1 )
K7GW Trojan ( 0051918e1 )
Kaspersky Worm.Win32.Agent.cp
MAX malware (ai score=85)
Malwarebytes Worm.Agent.666
MaxSecure Poly.Worm.Agent.CP
McAfee GenericRXKN-BX!A50354F00466
McAfee-GW-Edition BehavesLike.Win32.Generic.cc
MicroWorld-eScan Generic.Malware.SP!V!Pk!prn.D46E2DC4
Microsoft Worm:Win32/Sfone
NANO-Antivirus Trojan.Win32.Agent.hakuu
Panda Generic Suspicious
Qihoo-360 HEUR/QVM18.1.DF39.Malware.Gen
Rising Worm.Agent!1.BDD2 (RDMK:cmRtazrX2leNSnYJdrNoxX0eJKAv)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-AGQR
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2006-03-03 01:50:37

PE Imphash

bc5994e55cbe4fadd0cc6ce15d753e0a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
UPX0 0x00001000 0x00011000 0x00000000 0.0
UPX1 0x00012000 0x00009000 0x00008800 7.943864614025493
UPX2 0x0001b000 0x00001000 0x00000200 3.310390012806202

Imports

Library ADVAPI32.dll:
0x41b08c RegCloseKey
Library KERNEL32.DLL:
0x41b094 LoadLibraryA
0x41b098 ExitProcess
0x41b09c GetProcAddress
0x41b0a0 VirtualProtect
Library MPR.dll:
0x41b0a8 WNetOpenEnumA
Library SHELL32.dll:
0x41b0b0 ShellExecuteA
Library USER32.dll:
0x41b0b8 EnumWindows
Library WS2_32.dll:
0x41b0c0 gethostbyaddr

L!This program cannot be run in DOS mode.
cst11w
MnwPGuK@A}
7{E^`N
jP}YoH3?
.3D wL
-@H]X?
Ur`qe!
m[FSR`$#y
a\e5co
=LKOtR
]Z R0Ge0
ggBR!'$(%duD'b
*i+h [h]
Qt@\ZDDGK
]I#[f!BTZ)=P1ZLM]\U\v+&+
;l?Y7cRf
^pS&_h4!&A9r
jXZGD;HT{
M)N^WMVh>d
XGwpM>;}H
!j.([xQ
%`]!*'W1
T.m1QGNm'
[X/>Y!
govNZ81
s)tIKt
`82p3Wi#\:
?t>Yoe2[R-I-(\
'MRr/ES
2fuv|r!l
> YV #
YN 5%vf+
@`>=j:<$f
|jW3?S]
^nTEJs
[RPk|.=}Qi$cyYL
.W\rz!(N.Ab!x<]
^'~?(#P
ou80y\\=
IT:b"L
o3RjC+MS
bpFhMV
mdxjSkVk
O!DH!w
a6wv)M1
BMT@y83tV,L
xUD;OvtW?
qw|0*aM
5;-bvI`
./ksF6x
}J@}Ylc`Y
DV4WEfH
["RN,vS>^6} N
)@>2La&->U
IYbI).A[o
)%cBp"
f1Y7RH
U!2[7|f
vNtc{y3\
W>qshVU
7d"5Vwq'A
oaG,*
L1XGq6r6lZPc
T7YNI].-yB
p:AY8M
COtZq1
Aq#|EA
Inh[7P
";hTz7L
WF"!lO
A0Nc,c
CE}y`5VVQ
o:Y[J}:&gb
4^fd;y
XtnpiwP:g
:4n-G<
Z 1lOJ
fYYzFIcH z.
z=Z$7P
zBCAfP
%JPb"I/ww(
mt@=u#M'JTI
&X^IL=v"y
[7]ra,}5U
X\534V
,GrR>8g%C8
,BD4q#x
Yi\)~U
hwqE".
n-1#2 k
_Iw3N$
5J?c] ||3VzQKe]
^uKkSd)Y/g
Wdt'h;
x~L`MOG)A)B
336P^\1~s\G
;M'pO3
tS3%2/z~e=HW\}
O-Wg9aK
3*+&)Um
wj)WU?0
6gWjq<".
Gz1LGtx
0`t]lb\
-%V"wz}zg|D
r\lwGF2$n
,P<`.9
/(`_s4&&4Gecs
~aw%"VO2x<#*R/t1
B|qWre(4>'
!_nY1Jg0
fa>j!?
cI6a/p
V\f-1rJA
ZZrzM_AeI8y`
Z&BR@'
OCQ%oPRmGizKTG;mt0
BrauYlP
?:kRz'R'
j#??6Zp
),)HUl
:z"[r&B$
Q\8Gwm[v2djdyB
^b*)C?K^
F1ZW_-x
KembR+
:W,Y2E_
i1!2&z
e95/W@>
00L!=W0
?Q~BUQ7ZQ
^>9]nr
[V<m`~
=_U,h`>
'HBIY$6+28)5##1OXW
l/{Fku
pioJ%JS--J
;]N%+%
i>lyS
R:'9g g
AAI<[QNDGR
C0*::}<(VKS
#n1^PT
D?9sU)
~{m5-apB\J@l
*"'p5Z[_
^}b#w[
2}F#WIa
`ua8j-
yH=1qgzl
h3YE/8
AbJk6]
pJS?9:#f/
hhrolyfRoL#R6l7~O"
FGt3pYYs
qT;UA6
t&#~HgJt(}
g~G.gY
]+R$8"{
GQqp+4sCq
))Oq([iP
`$|.w;
i^Rr~q0?
&_r70#
1 Yf`@jANqF
^&yV4uSs
;Z.23)Jy)3%]FX
m8GktKuF))d
LQe1S*|
_+p Rsd
WXU:3by
Y5{=hWtBr
;X7@ZE<(w/A
G[h#>X
i7#Ozu
pEC"\)j<9jEz
_-hRB5
>MJ#z_0>z
'MdtE5
s1\%F}-YkH}y
yX9r/z
mt?[)m
.&Mw3O
uG32f]
7z5s).
.Uh;Q]
/Tpab1
!e^D"HyR
T&'`G
3mtWpS
1A`9"2
+ZqoP*
ED`#bJ<
^;<];y
4Y =@p[&7Y
_~sw6w)~
)WTo!~
KX/fn()6P[\
spTW|y
M1)ADB_uf`=zi
/{v.>mN
.EyY(PP
s>9yaY7eV1
5maiy/
B2yAiZ
!Z1'_:
274bY}D2
5M}g$O
|wu47}Y
6n+xbJ
?~|2f+#fP\`M*YE
1gN0DN
k~82E#1
f~2`HrE5-
Z YhZu>u+\2o33&H
p]HY*An
|{R_8+
qM?yk:^3:Vsw4
Y'P `L>
np49unH,
GXjqo=\E
!sT)L uP8
!@m<|@Pu9S
-bBBFU
v[ncH3
Ok#)o),|
)O2=5Y_
_~8KNWN
9Mf;H5HYTH96
"[n3xQ(*z
6@TM26Uy
D+'^w}
LlTe[k(Q@|LLk
V/V>LR
21PA;63|
Is'(Ga
+E]at
mJSjCn
Wq5qPj!
M>$n1Q
Dm\[Kqq=
={ [),-
b9nbkejx"KQ2R&Z
[W"EosjM
8bfzyT
Kb'~c#aM
Fe]:CQ
8Z!Q7c
5NTl@P3
{:AV[L\k@7
Q(gFs#j
<'r(Uh/):|^o^
'{@K G
ELwt+t%
}40%yO
iow>M|c@d
aH_uI!
?UR1f~
WlhH4#l
;eS_*c9`%
Z#A"[yU]8&
>hJ(kk
[glE_YM<[
bfE5b5
k^}ExJHM
G|H,4>H=[C2xONI
6FA3;e
`:F2=.f~
Atc5/[n
|0~PCYAq
":hDF `=Mfl_B
vg^V7vg
vzg}&+_$%m/riv6
*B~%mt2#XU(
QK/*cF
/d:1N(mi*
`G{a|$pvs6C]
kMClJ)B
dFWu%eDVd0!Oug
ES[Lmy
Fw{AUSqu,OG
-M7@;)&F
D*[g9<)NSO
uw6&/3O
VO*E'|9>
E5_(Dy
-}#K5g
.l\9XX7
"g@|(QURTEL
(hXJUPEy#[
c"$alu
TT>z&;WUl
]Sn_sm(~dcYawm
f7`7%q)Os
UEqP&|*yDQ?fu|
RplX]P
Ab4uzHnL)D
ygJF6u
GgYJ|mP
$yERJ@k
7W@_)s
B>Qf6oeP!
5,KwA`K
nJ_[zTz,B.W s&
='G$/V3:
d:R?6<q;
|t-WOO
H_*a6d
K d{ 5wqaq/
~Aa)}]Mp|Vl
7j6~"C
'P&{w2r4
<?-?1]
%!*>(E
A# uzUG
QLm,dn~Q
S^T*Br}6O4MTP
DP?%H6m#
cf8uT>-=`
CD]] 0
BUrX6QFK6
:=jyn[X
>qFD=IL3dA
%iYr;i`U
Bh.v<cssU
R hw'U
9(P&4)v
!XNOx!M7
2QBqm]]
w3Qp*]
&sqL/R
S4W2J{;%?[9
bykTb.
2A0dY.gMmj
`H?[Zw
/tl~|x
Cq*%0Zo 8F
an CnMUY
LgP)a:
ZEGd@L#
h!U)-9
L?LY#WMZ
mr+fr~
D1:|six*
\t~M22bPGq^T
S/:s}PB7~z_
K_vPa"
x\S%+\
Z>2l&O_
[&nA7|'I
&)/ GYwKYlw
L00JU;
dA1UvY
YHa.eKnd1O9
:K|sIAo
lO=qnS
VtxhZE
>7[Y:`7
ztd>;_
RU9~:T
/w-/Cu]O2Q
YH#K=81
l:.%J*
DsjpM!.:tw6N
;\LnM>f\
8u1| ['AAG^ lG
hE-rWc%
g'CuHB
4M# ?~XC
U'x`rTH^5
q6+iiNj
pu_FoO_)Z
!2Po8C\Bz"F!\O
(yTk,9Wb\R
`W *S>
/q&!dj6
1=g|Nr
9Vm"z^Ky
p:/e)M
,@.&#aZM
"3/"t,D
/2n@"x
sVr! N
:y8j/KM}
M9+v1U%
JkZ4JmN|Ue
lM00]T2#V
LmE]_OB
2i:~x0
yDS+Kr
";!)R}N
9_/G h$ |_jU%;r
V;9=W+Ng{
/l'RoXA~js8
qgQmt HAY*)I{$xN~
H`b8UvA9
9|~6^ZMR$y
]Q| ajP
U6/]$i
%ujTBG/`P
-T2?2=ZK; GE
>8<(6ag/ImQs
j}v@h'
Lkx:X1@\
,o'd]X
Org8Ap3
/8#nQ[
j.%eDk$o
?!5@2E
C+02cd
y0Go*=&aZ0m#
q&%C0z:
Lf#A`Pw
0HmLtm
)yOS3d-<
X`SP$^
&H&#l@t7.dl0>
.O=I:"c
562:Qq
9F<(d<
s%249XA5`;
V2^'~c
5Wq Y'
5bcl8:z
~3-[8K\$c
@[H~0 }s
R2'X]J
$53Wws
D1e*xsE1;$5BP
Y_w{!
Tg<p>T)k
gX~@3Ne
wRIJNZ
F03EtToso2{p,GHa
1wCq%iz I|
P]he{Z
*sH)c#;e>=
Z8Es0/
,zMrV!?u
k#8"="
|S'hUe4> :
KnR%1z+Qy|_g
=d"I6* r"PJ}TI
$<"@>a
ae7\nVi
_o:Z4?
VPGF%Kg`QO
VtkV!*
+}-8h,A>Q
>M'q^c_0;m
Gd9{5j
+}p=P~@
;SOjkz
iI%&eXFshLr"
F=TE%/
.5M~uU^MU$c}k
syZ_7S+eDRtz
Urq-yzffhI/
:kOn[e)
p./mj&;y
crHy<o.
6/1ba>K
I\z^4tD`"aE9L
4Smlu+B+
J%G^>/7
yu`Rv!l9;
`'q%gCZf|
?FcMq.>a.7Ob/YkA
.sP)"BwL
&s$-`N
Ay>49T
4<>kW|_Q^F>
tZ[6`L}53_
Wq Ft~
Ai(r&)!=
u%trVjc1
3E,6Q\$7
tT}"<r
=9TW +qA
'(6FB6
N#MT"z4U
U> 6IK
%leb.W
IgXuQ$OiYq
m.'UM;oKnrP]
m%=,_/0:0C
yE~& .
Dj<@DZ#
:J]Rlg{Z
T=]14!@
VkkFT
Hw>95ve
('J%<s
Sk`LbpI./i
IWWUR34~-
M4KHJH
8Hxdtne%
~srH="=g
,+%>Y ^)YS-yz+
IL#s\x k
PDYC3\
T<c-6>L"}g}
8}!9Ea
5)R&+D
&O^8A_
,^_w\+#7I7
j@y%zLI4
iT,qlK
h~53FcX/ZQycp
~|(=z|
6Y-.qW
w4w3dw
(RI{a"j,Wa
*Nrp2#rQ~U
~ZI. ?x
"?RgLFrrMtBk2u
PPSBu%q
"AfT3S
cu=c.7[n
$M?vMe
+d!Y)B
6T7Ig(
jC7;I\
oIV!Zd
<@D5\o/
6bg9Q1z
eZC}_%
Sy5jPAww+
k8^<z4R|PQ
8,AKO,
bhnt7i(}ENj
FON}t j.Vr]
]uZ'{gJ
+X_)xUf
e'9S]xwm:
LU`]i:'
6d:Z`
050ad+
./^0VKAI
cJlc^S:
Oh,>4!
Pg[@[Y7
-A&'\6xG&
P(}%Pw
rY,Pou:)7D9;OS
{E0yLKA^7+
I,}CE|y
>2w79.}8n{/q.
2I/|n
d':%T%m%
r2!AMg
i^Q-KB#
+&0/"7dj
a,I&e7
V)q8h9
<rlJxL
uW^,75"lQcr@u
<$L"_*
,bRl<r]xP6hu#w
3djFy\
j"r9Q)]R5g}*]
<gN"I>]g
2dH!Xt,
zd'3CIeKg
f4oR&E^
f!"M.e0!2lq_%#0/"WE%$A'h.
I>cF?,
QNH/yJF3I
[@W*%6":}
qv;8X)-1gJ(
Zv$Lq$
5P7=CQG}
n6)v -
gj/.]VV'T;G
P>P!*z
&/"21J
1a#0:e:
W6u_G*
iH kjw
2)zjMeei
?hV*Z*
:sNmW
KC`ND^jo
(BA~U/Y/
4;9fLM"KlJ
.C(X-q
.xb``|-
C)KkoG
KA?a-v
|Jza|YP.%aS
LYA8nPOmK1<=
m>x2Bei
#iRi0*
C- 47h8;
$)w:A-^
F]/Up1
\J!_*hn,+cdt!'n
-IgX,~y^
WR{=loU
1>\C7C
eN!'0"n
q|>q+6
L3I#\FI
lK;e>ls]@w9mXe>~QF
i2:IB,:
^ynh*b
?!?P7}
H*'td"V
-_IpV;
QA-WXql
$-E!Q@
awoBr\
Vl<5@@
VJv%$(h&L-7Lc
rS<bx,U
b3DlUF yT~
|L_web`Z
|=Kmxd
srVDoRi5y%X>1p-<x7~>feH
Ni$&IdB/n:
c&"!nOk
"jEmC!
x6DIYK%+
2E"8/"K"d=hx
)X"sD:cY?
FlP-HYJ
 5%Mzb0o
TF!!HKzN'
\.EGRO
IuwJXQ
7g39|v.~G
$1P9uFFSh1w
UWVS|$
t$dD$\
T$L1;\$L
t$t#t$lD$`T$x
D$t#D$hl$x
D$t+D$\$
D$@d$@L$@
9s#D$H
t".)D$H)
T$8L$PL$xf
D$\l$TD$X1|$`
D$`L$D
9s`)L$4|$4
t$4D$H|$t
D$`D$t+D$\D
*BT$t1
l$8f))
D$T&))
T$TD$PT$PL$XL$Tl$\D$\l$X1|$`
9s/D$H
9s;D$H
t$(Nt$(uL$0
T$,|$`
l$$Ml$$uP
)D$H)
$L$ d$
p4$Ft$\tYL$
9l$\w_$
BD$tIt
GPGWHU
XPTPSWXaD$j
ADVAPI32.dll
KERNEL32.DLL
MPR.dll
SHELL32.dll
USER32.dll
WS2_32.dll
RegCloseKey
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
WNetOpenEnumA
ShellExecuteA
EnumWindows
]]*-0S&
!0O h|
|(/.c;yT9'
(p&=y,\?
8\2H##
Y'K .O
%;._f*;_<
:[!>@'T
di07N?
w30{&eY<
"B0.r/
6#=x;$t*
5i%f2i
0 1h.!WNY<O
8T2@/
*nf#H\
1!;Ni'};
`!?,U8
M}G7Ty
zCm8*$6E4
?Lu01>19&#<
;21&B[
/$1$3(
as2P?'u
1A~{2B0
Zp?2C
}a;A)c=g
'%4B>r
C/$.,#y6I
39>' U&{
1E=)0nC0$Ww
"gu=++
w50>Q0{
/eR?;c",<W2
jI,5"'
r!)/1'U&3|5X
N>UE8~0/&X
5@.4623
.{Z=l"=
/N1\l>
3'8Y5LJe
o$^'%-T~X
5&[U(*p<
,E.G2B3)E&a\
D5m1(@N
J,K,S$
$aK%0E?/N+
L/i*4d(\582?
L9{%f@5WY%S
c0n (=k
&8kH96(>Gn
eK:/T+
~."+1vEQL4p>.
|1v&=)N^2
]~L,q,qK4
%%qAX;4G
F/*#w"
~)Xz+}!.
7Z'f!%
!c"VL<7O'
8$).;*)
2@;)Q/
B%'w4th
Sq$n#4[?.
.[4:B5c?
kkr'*=#s8
6V0Em!j
x8Y.gw
Wf,^<Tf
6!i3};>
0'* cZ."NF?
q<+A::
/R;]W97p
L=TH-=
q!%/w*
#!{,U7
zj_-uz
!>Uc_Vz)5Pq
A?o1KA
OH"3*YI2l=
D-?&+.
r/.$7&.
C+${(Cj 5@,A
9a.8<
)ZF7$Q
>d=P?WRj
>)y8"o
8g)1;o(
2:>VFm.
aD?#/PV
;tX/=x
$5L{:j
.m|K:fR
B4Be"iG
|,'1sG
^\;M68(e
@,L%E_
s<0t(
k!7**<T
C[eC"c
s1a2Gq
w#8)t+
bPv<06&(j*
"~&Q0Og
9"?Jw8lv<+
#DN.9*
NrW3q6bs,9P
y:&d99:
s \#Mz
y,'I4'
Hj 73.}
<@e+@y
U+"Uz5-)@
4:QhC8
v7?:.q
|T#3v9'
F#n3/=
~C.-9o),7%
Yh?4$q
w$p4b
)-tw+2u/
>'p-<13$+
$/&Sv,V@n0-
Z1KE!
4?5t<M
EQ<2*q`
[xT?rP
B7+'#.Z
GsR90><n
.g{(A/
(n@'{6
wQ6fa)=
x-5&,'iWM!],X>5|
_?)R7=p7
6y?:*]T
!j /=(
5x/zO)T
4T6OK/N,
R=4k8t
S)'ZK2o
8P$7V5&J
w+$`8GtH;B
.7N \/(
#I'+c,l
.Q1i`{=
3WV2:z
`: `2+
Ez7|!x+>VV
h3D~"}(
Q$%o+R
].92v317
7[/F=`Ip
(q7#F!O#
-#1!4F$]*")
Z:_1#+!U
"+ME8J&
Em%1$#o/
N3(q<3
L-C5Z[
V:?=a $
m28<@>fk3
+'*1EC]0>%4#!
xVL:=M9(
,+.2g}a n+>{
%QcV=T7/r?K
#=w'{
=]m$,(
v0D66t-uh&3+$
A$+x(
1?^'&6l!=oq
fI62<l4&`+0
g'4U1-SI
oZt3$$5Mh
(-%"2)+
H6[kP98Z
>h#?"
6H#{]
|y7I9v
<21/l,
u.J5-,ir/n
c6(;:=3
+V>(=@
Y!D8$6 G$q
$NCY&
b!=_}0ll*x
w;;#m 0
c2.E=sI!f)
6<)2=:)n$w1(=
]X8x`=
i{]%Q=1H
,?:4K:~
/Q:&/+i
x;'/h!Q
2DI(#
9=mv,v*
55\8*~
al.?"!W
L3`x?
\.-#o0
?$?j:;t
&^+~4Hu
*L,SC*
)Xx%7Z;+E08d=dw
wjw/n=1q6
m+g%o2v
b>'Y;:|.Q^
RU>}9,
q5=-|
A>xs3{
uY$m4
3p0V!/?&
59J'5f?
,:Z%l!
#'f,o=
Oq,=>_
=N3Jb0
V.Q7u{
"+j-#M=M
\\*M<XV-
Lq0St}"B()'
?1y=3Gy
-v+eJ
e&]5?R?
0xj~==>%4s
3G)}.h}V
>/V$%+
OX*\X0_
$1>Pc}<-Q
yG/o.7V4
UN9JW4
!Z-m]E;
aH0"M'#
2Gz "B$# =r
7Stoe
I]88n1
,/H8j)
n4(Q--
b)y/
;iC:6&g
0/e6n|'
9:"8wH
,>j++|&N5i>!vf4"B
v!/8<j$
4',P/ls0
i%#A<)
PHI-m
$!)\mh2
d0;,3r%M
7Z&y++s6'@
=a1%w9I4
1.B&_r"
.Uo22l9
^%/y!a
<}~'ck[
0f9=.xt
$p'j,%
&?25<6(#p_{32
gd2w%]K
W=TXB>`I=
g ;3L?!0
q2Qc0"j
Ti1NZ'FH
O3,Ab.
FN3/.1S'W'%
[Q x-
!L/i#i
p/:d-j8
#@5n6="
b'_944
(<N0#=0m
6v*s$=E
3=;@!
G4W9fS(
d68-'>
G}b2( <
79+>[41>
R2*w3v
=?9]5+p)81x5:L??!
?rm#`<9lr\
sL6q(9
%}XV"1.
\W!>=N#<
-@/Aw%
B{.|'B E7
\1q$?)
3,,+&X*Z
<&"M>8$G~
"*@)7%
0U$IR/
(eZ9iC#n-e
<<D,!|o
R`;1g+
/0#6vh5)>x3
>+p(QT)
m&&'(@X[%
(P1U:L,N+
D&="1
m)\$=
<R1.'{
-4F.<2@
H[5Lo8(&>O"o
at$!'
YM3:6C
<X-c/1
=T&i"e
j`?b8E92<|
0?%w:-$F.5$
t,`$*+%!
W5I,b?g)
z:8?9)
L/N'N(
<uR'~=
(OX.)#d
&`#M"3&k!3;X"7
)2^"Cz/&H
l)Z3K";8
^7$~(QH
(h&ek+d5g
=-7%3#
>-t^*^$.
j-(4Er1"
52d90}
y'40%_U;
}c*<\!M-(V6Oy-
-25%n%
uE=P,J
!.&&4#.,5Mq{
T;bZ)"$
=)rF?+
6oE<^,)
%7#x4g#,O<t
6!*4'35
'm*n(7As 6m
1*dr5K3$6B_
9ni>sz(
S|@8=
4(46W#p0~-
)]*R/-
)y0u"\
1?/^0
C5X,M Yk*
NB=%uD
%?|8OI
j(ey)`2
oc+S,y,[4V@
" %)8M
%C-&u$S-
;D9!.M '-
x(?^E#R
<=*t.2Q!d
I $$[7
8Eh)8M>B<<
.*{)R#C'w
(e]?P?
,I%46jX
)O2*G^
J.F%L7=(4h
:/5p4x
za?;6
b.qu#
C0-^*[(
!=!*N
7:H/3&2
L7k9  l
ZU"/:d,;e
,{s0*A
W%<;$k9!7[3
w( w]-(=
Rc1WR:
{P/$J'
9{pN2o&"
xsgH-F0P
N5~03r
}nB&4b _=N!
[9PU8=
"-b*y*X6
N1u6%J@4~?
%+u1C>
J:2_%z>[n#
1H3cd4Z
JT2s}4
b%>&x'!
D;l'R17
V;wvP,x!"
:NYb=?&~Mv
QJq?D$
.P:L?uo5%+oY
~j4-!g
\5w9z{. #
B4\?6-B
^S%-Hv|
- Kw/I595ry
"g(f; S*4mp*8%
*+<tv+
#Ia0sn18
",'*?1F?
;.W|3
/f(>Cd*
N,V&},8$
jEM%D
@t'F=:
!) 5LB
MnR3&i#
%3%*I.
5B@,cF<P
H-9.tv>
ELk$f0%P1M
]Y,8%=
E;v9^D
i&48j9v
0/si6,:
51-Fb6Q)n
#]P=>`
6'&}<P0%.v
O")26"
5y3a37
o>2!>!
Ja>*43
he=+?8
8N8P2 _
<";jn/t`)a
Bm#[6
f%W)F8.6
<y,{>#3
%/l,&
!!:{(49X+
OW+R51T%qo,Y
)O`.z9]
>`>;&r&+Up
&>!358
\~)o!XJM=%w
9^w&M)ZO C
,=@/GH1V1I
(Y2c(<*8j&e
0+(=u#"
a-,J*(/p<$
%9}+%!`
|Ss6O/P2
+w>7+P
R3?=z.<E'9
UtS.^$!p
?%e=&/
X3#];[79
R;y+C/B
c_/C3,u
<*s2(0*
F");$.Xw
{6{5>l!*e>6UGR>5A17+
t"no@9
!(\"f
3#QW6TO;.":Y!
b,@<+
3i1_S*
w; j>]a
Z.GO9/f
|)p4?y
#Jw+9y9mH>
G'?b!b"HQ
-V{8_&
3>7QV'$
.yt=3\
%ic7rQ7
;X4E+,(
#)D=7U>r
E0#Zi`)@'
lh7so8<8c
!",x?&e
k/f4='
FS"'v>!rS
R6~:4Z+L
1.?C$C4
q6?<52
6oq3XY
g$*?u)14w}
kA9b4A-
&&1F1y
&U.#?6V
`2$K*67
^N+%??H
r$G'+Mk"8}
0*#-g,
}&)O=[`
!1|>*n)
7U.T?wc2'i/n??S0
1==i;
_*Ua;5
2Q,xV5
s9>0%5
,,}6];7
X^#?$P
D2uT>
Vu1_=&42
$''@R
0W.&y#$2
^5z 4j
&68[a)'
|)c7.2#*.:;8
H3ff,S
7B;I{(\+Wn;
6&{SX6j
<b)ey59
V^.7W>*v&`#xI
6Lh!-,
1"/w~v
]9 M;$K
\*;!,!
C e>u7$
e4u>!M2g
"QI?&x6
5$./:A.4a
r=;rb4
.Vj"M2
3?^h)m8
+:{:%TA
l!d>A"
er^(6I8u>}2G"
"u(=25t
#x.[28t
i,&,,0
hK&m,X
q8m1v"
q0@-7`H
2/py^
x1N<B32t"9U
=%M#j-y
;!t2$/
2Hc#+6"
2rOY7)h#
@2.c$'
L!;=#)
<0k-3[)
Z^>k:&ds
x#;Syl
n&iJ5<
`%B?& 5w
K3*4jc
<i M1W
"A]'np
a/V(!R0E%qav
D;05{s
T*Vu0]
2a59&Xm{<?O*d1
!,z*OGS
nr2~o5
-',JV#
H(/4k<
+i%2\;%F
,x%)q
r<}6mj;(/8'$
L*6CV)
K!70Z*
8'E"$k<?d{
v&<!B17L
,51<*N"C
I9J4G7W
g~9|f,O
>!wF7 G6
9j0 K!
R(5,7y
>e95pl :=
,I\-`0
)}!C#
"[.H2F
{;Uv-}:
1}J1p-w
ll(-/,7D%A
Y3|;9NX
OhW?\&
M2W.b%7
'H9&Vi
`%=!.o
>X0Mh)Q.'
&8F*C>
<(3d?I#*7/
PP:DM'
wi7,=>1I
,h*j:4T
"<D?'*(
Q65%|!
{%FIU7
E;M8%F(
g'g`/`U
<U<y$Xw1a
4586ys
Y2B:&"
q/a7>Li1C{q6X/
%8a.E:#u,B/
<t("m.<\;!
B7~/I(
f%{h<cj6
)}:nW
4%+>6=
Tf7*kC
x&x%E.>eV",0
0Q8v1|;6S0
=F)|`7:])Z
7E7/n2b
o!CW7v?
"_.9z$8
y;+z{1R:M2&E
A)I #V\
(0M%;e
t/C#($j
%1*=a w
@0J7y+\P56x
tg;Cl(9r
,k><L>
KT/6:'
sk=5h<!9;
2G /eO-
-p0!:
n4<#5
{9O0y<1,$
3<|%G7;m
g!"$.94a+-A;B
#D.'/~
6Zn*No;
}<*7.U~
"=K#X;"u3V
J,T6_04
oY=-(@1p
?}S)j#a
1 Eq'"X
+[+.#%*I
M'd|146s
>8kc?eH/R
5`'<jd
1 <C%x;5=H</hM
?20|/*
f'Q1p5"4UR
oJ4]/ F
FB:Jy#e
h<z>-/&LL
3l6!s6
$CN"5x
fN!7v*Zs&E!.
o30C|.
64H/.N,=eA/*d
{"n,WvC6!5
-i|)({
p<=F-"O!
-}W]=l
_-41B)~p(
<E}>YV
;=v<"+/Q
iz0!*b
"/,/U .
8#y52V
!P*=32
4?:-Z %
>?,)<
=$92f?
&&|A%m
c@3+>6}"?{S(La&s~
(/u]#y&i
(/k1?W
377s:.}
8pW<Ec
,5?'e:&
wG1pq<78
%/?Fz7"n)
*:>"<
,:5:k;D
+w4b'}f8
'0O'!j]
AO'9a*-s
X=21$HR
;j?@P<M;7~(y9Z
+u 1>j$(%
3';$n+8=.p)
1VW1E?.#^'
*x9bk=
|. Jl
Q,/5jc
'(c5-9(a3|(
0(v*&p
;2Dwa797V
5C6`3I/
Lg%(.@i
=<<t,3
!/{N` C!w
?7("&-s 50}
Ja"1h+*]
o)W9 +
*dP>b*4
&h~5l$v%
=#FT-5|-~t"
"V29c%(
3/49N@
O7Q#8o
"}b3"q
!<?j'2
B1_t:J
b!S>Op
{?2"UK|'`X2
#8D<A64:$
;30yrq
>M0A2H
A2L<5f"
w" 4?f
)7z\"fB4
c8S235
ScP3Z1K
3E,v#i
RO&P(gw-G%8C
U'e%+"
,1.!<^
#nb<8!93$"
`&`O%>j
?8?$m,
p";!%9
Yz >`}
%AY4P%
}4),+q
I*?&p-
:3%(z
4 RA-G>#m
0$y).(U
m/>'@7L
?*3[~#
l<f'EG
</-P,%+sB"
q@8k5`
q m$$F
s"./\>:
j2Ar$
/;8v71%)":
9?r<l7
Mb=c"&
+1,"#
6I}5<]
!K"%@X
=v9 0"5
H",=,46'd
8RLf =~J
\"(0|>v,
6&"]5'R
_42}TyM =R
!Uv)3~#$
$w)M1e
-3Xw<c^
=+4>47)/Z4,
tg4mM.BF )
fy2K%I
5*yP=[ Y)Y
Q9'o-n+%c
(6c5{O
+|(,\-|b
Ol$0^.:C.
_/1>$U/
{2.=6`9:
!zX$A
!16JO7
"Z\-&(
~(V>#%
;z$0~5
!EO3{'cq"ZT
Kq:AK+W
 !g5g5y3{
-~?8|
/RL7xQ0h5
ngw*3%-"]
AW(U5]6v
l%)f3m3
xb#*0
b5!~h-U
\.2y%=
=4::9A{q
Y=-319D(3s
V$O(#&
V9'r03o
2KF*.u
a56"+/
&7oF4L
;X*(C:!Z
(YT.1k
r<s56J2*
kd>.;.
/b>*T$0<T
wT? F6/
pq-RW*
k$ #qA
I;`/O)`
qX-')w
@`0h8}
:!5/E0
zA6Y(>
*=-z)
q0\4m52B
,"*"yc
u]T&PPa,kV
B&=;8".
Znu888
q<$)eP H
$5[;*!%
y<g/*6Gp
5y7x|8=cS
%4p6W:|JR
&8,}"&`T%v
0]'\9/o?~
(+1v8c
@)!hK(
<lPSq
AM30+$
`:zN`8
w;'^t
4$k;U7
%:9&13
)z/7&.:P
:)nE?Z
%b-f^^
<f,1o$
dA/?f;
*a?iP/9
::]S8R?5]
&Q_4~-;9u%c
&{,I.O])
!46 N9
$4a+-*k
l,(o)m.[
fu"58%&
HS"36&G2
:^*'a4r
yg1M4K)BH
a2)V)C7
tVv,+.+09*
E3/;-=9dv
7/082*{2
kA&=d5
`3(wF=xY+~
iY)</s/s9f
7?q?FZ3
#Eg1R;2
5-G9 }3
yv+J#'(&f
d(<i8&8P
M*"L"8aF
S,oq;;K
2$%7H7
c1.5#mR&8
7I)q.Z
2v!$7A
6qp!SQ
&a;$}>(m
z-SF(;x
8&1x~#
r.Ub6$b*f
_&2',zu1o
Y f4-\#>
*;8H:~g/
>.#B.A
t@i1+*Z
K1[%a}j
r9Mg,.~"6&
(7,*U2
y)=Q ik
X<T\6A
D{7//3"f
*-uO"X*b7O?b1+/
T&./M#46/
af'@B|
+0?$0p
r)9Cb.$h
Bzb"E+0g8k`0Z/9
68+W(6>eo
P4fR+[}8
#0gp3e74
c=$G<>z==
4,m.%=*d
qv=DqN)?
qw<$}E5
./&!5, $
>99FA%
~79bs(m
3z~(<$\s
uC+P.*.
X&3AZ%4m
t52)#C.Hj
030T3o
y24M.2
%!:KO=S
CSk;I3
^0q!<m
k$+#>uF
)i+?S?e6&}?s' I
'8W8|7
T; *g1h
|)"v!;B
Y'>[?1Lj
F~{6)0
2+oN,&\G%
;z`-u
a24/!8
v?;=N/
w$+Rd2.K,
4CD/s+-%
K7[:cjX)
l81v'01
f3G!62R
a}\*[6.
1|]%:]
"mV=G,
/gX;F#_x
#y& 4WL
&n;c:,*
:u%^7z?t
:Y3),rhI"y
D-1^.a'3-$
[pI#:K=x!>;
~::S7%
>d2%FC"|
>:?WK4%me
/qF/D>
UW4`|X1?$w
u^aP]p
Yc$l<!R+J
i+;o!)BB
=<{#yf
Mdj0&#I91
}$M0]"
)t;C&<
X,d'+t
h*'t<2$<1m
m.@2)=_
(<*V'j
z.{?J;I_(<A
-*I!fF$
8Y$W(;
#w5-n8;
R67aV8x).
~)2z*lM
=;5i_,~
b-"6J>X3!
1UJ2ZV
Q=2g;n*
5`7Yn0
,|0y!H:
)lk8o1
$qr*#u0wF
^h*F8[$m:.
G4S>)
7c6rBM!au73
mD*i`,n
%D<jv/
8w=Q6:m-
'"t%?F
.#,4!J
e !?!)
Ag$pZ;Uq$o
4B~$D(
zp<a HC6uS
3e=9/%
o&52Tf
I68!>#A
M+P',(Kp{9B
*8r/};
`F6ts(WP
<lh/[c
*-!{UE
>G(@'m
i63h%,
.+"p;P
a5@o-
=J-Tg,U=
;F(nP>
4+&!kg76
7?'[8V
yA2$&3l?H
k**'%\
U?@!'m`5
87=#:tT
]5.M/p
;R!^:{&
!3eT?B
S1R}(9U
2n}*=D
5S:T8x
,|F]-:&T\
+$~'7DdA"97:
4}*#PL
oT-N8l(3
@O0aA.
<p?VI
+~?;B/
Md7k2d>$
a)&1Lt
a6%_7^B
f:%K!8&'x?1
v.<% x
K>|0c/
v$=?=nZ-.%6
v70:=w(3
3m9,l`
Q#,TQ)W
:j\=3h!
"{:1HJ)
>!=i>Jr
_"bFA*V
'XWH#O
r!A<u{
6_-w0H
o, (7#
/$E1)5Q?
Cm>+Id
&h$0aM;t';t
.@kk&}"`
e~<+"
2<;'$&
R %+13
&y1d\#Gi
Z3.tg":#m9*1
n7%%$x
=)H.>(d+
{5TF62q
"#k?x|
Q?S!y9i
;9*#%6
??>5j_
G:Y[:0
)oVa(2
_264u 5
7T4tG))/
x4)EX]&5mU& H/4
wV+FH+^
.'sf&f)[B
<2%=*$3G+B<
(0"I2-wd&-;e
'1Z<d''(
pRMR+s7
gz+xG?w
#,:B&
X^%/o%/
!qed"F'
1 5(v /lKC$
R%-kk.?
R9']bc
&"9sC&b#Y$9V
R0ZDY
C/\E=<
309t-h>6
<V9,{0.
)2LF';e
&>%[q&
41*Q,e8
n"03V T1
/>?# ++i
&&% #p
",k;];
R }^X1h_2u
T0&;q!63/
5.Z;:m
,4)H+Y0v&
Xf<=4t2
52[.U%j=s
,&F.\Z.
#lH6OL7
bM7m4`
%/1)3
B9aR2@Z8
#t1='$!+`
R')/8y
2mG;%
<>s-)f.;
.k >${;l6
C82w-.n!(3-m&!
,98A53@
2O~8|/3;
s>6Q::
kM%w[%T%2
DF26*y
0d;)V4
V*yo _p2H5.
0\o3?N
v+)$*?%cE
1v(/,kQ/9[;
(\75$Q
x7m;y!
o8<23hZ
+r6]E
".~1FZ^#j
=0m4J[
Q3-4-I
y@;33O
>>XpR-9~
PO; t:/3my<
3%'~?1@
~ 8X)E<3&6
0g~o3T0wh
].>j[+
&9l<9@
~79OG&
DW,/k?J@Y
t$)v'92+
q&:450
r/!4zE
$u-P4o{d3
,*<>d
#@I"3-
597?z;^
g7>Gy*<
%n513c'E
*%=IBg
Zr|2S(x%ks'
g9q(-f
+>-8#.
LF9,n&Q540R2x
=C8}1D
592hsk1M6b
~/_5!SV!
.JJ.AP
0+@(7P
0V1X&!
.+?5Cr=\ %g?
8;)"r'^'u13
<>:.Vd?
r?W4rA
`W!f"-
)s.dew?
'#v?H67
l}$nB+
+<@;\1=
:|G"=e:T
xe.:("-5;
E)/5'=5i=j8
24uC30
m[&d4r^t1+x
b!8{P%)n5i
6v5,iK4{:
"c!4NO
P"4o^;2p
%AS$V+1
("%Y9o
-7=4bA
;M;!@8(
)4>-[/8]
P+'Iw1
;M1=;<h
T>F8
0wl#6#.
&)${!#!"=
956SJ=
'W"/w3
-PY;Jt
)2G&)"
J#C.2]
1q!B"(!W-
.~9L.#
#AZ<E??uq
M[/(w-KM)#
a@.R23&:
<K'IfE
A-g5{$4E
=c'>5w-'
>/#u;(
=p%2tw#
R+5=F5q9
T?UG+F:
:=&h|-cA
7%n/`z
U1?4?y
X"}&s$0
<{<9l
!@a</=4-i
J%Y55\
u&DA%&//
69lHC)U)4
).y,V%8:?2J
.t$%K3&K
C6K>r%%\/
[C;-6{!Lp*
K^f3)c\J?
9/&xy3{*2^f
<$/C2:
>03=$([;4
&68Y'v
-,h/Q'
Z8.;"=
l3qa&F
8/D,!A
Sy%!)D=
27b+eJ9zn4|435
+O.bbU+}
^,=oA,
6-@'O?%D=+"+
$K&.|(3
)O3aa
B+E ;><2q(?C'.
&b'[#%k#`
162l6K=i
>{4+C~$i1
dn+)ebJ:-b
L3`!C10G1Y
z-/jF8>q(
v3O)*&52
0DJ#8E
&pwi
2$5>alt'[A
8VS2u`'$A&t
<)X#BXd
:>"$4'5
g .kj1
%([s!@
2qu%.Y
+H-+c>*{0{eB/6A
$8I#!W`5$69
op,i,(O%'
(B><:JG
R3U/a/y!
&%lG19
^=D4qQ
!v8~2?70;
P\fY<
d51b0!_{
uV%4{U1j:
(yv!;b'
?&@qb3(
zw*c-y
E6;t8,!+7+&H"_
=Z:#$+
7!(90zV*c
w0eTd8(*#g
j//!<Q&
$ux0K@
,g?+- wi
:RM5S1d
1;Q}.:Wd&
1``#2?
8908z
N$J$<9(
biL5-
M>Pq0;
u)2PA?*
$`|*MX)&{Z)
L%9ms0.
1%%S6.f
%/<Z8
,K$V3eM/
>B!VW86
%h3Q?(o^>[
`5>%$v;>27iL%
`&5<69
d6FJ1!
H5?NeB;o f
_=1j/u
3f6V0+Y>
#U.'\k#O
E t"/$%(]
].)ss/r#
a',):S|F<8Y
Eo7?h#C7<{2I0D
z)Cp%G
H*22.dB2
D}!Z%R'z
d(G9h&
vY-Du*
92#X-=N$U/
vm>41uD2
!.^I/2+
Bc<)| '
wX9y>$0,+$>
CX Z>;PH
@`u%S=
6=dwS0J8p]81
e?%"/:~s3P,
P*A= Z
/hj?g*z7
i,"l39<
<X$;\2
+O;7XP
yl(]4?p
9u}{ {
o+M#D)R %
V++{z)
%7%0'h4a
<LCt;[
Hlz-Ea7.U
z#dJ%)(
b#fA'&s76o-r
<@4cs-8
=8b7gn2Q!y
C(b3!)
$$?7])
w5+-(
/*J)1"
l=!O\U5
i0_`2.4
H1l';%e3u:
#%42Amz-
2.%C'Q
$4!mw1
pz,@.[Y-t
G6X/0s=cU
<:$1*;
83+~ G
/O>e1[&*7p
8w(n]
,(f$Q53
/{K.s2
Tuf39-|
y)h*I/<~
)}G3 t
?}d=i
-2&,?8
oI2$iW0MU
<<H1/K?.$
.\_";H`
4S@;?8w
cUi.*[%s
oK8]!@O|
$?H%9w^
,[%q=8
TjY="g"z
U@7]}8
?N:W3>XD
D8}6h97qp_ ~
#/bN%0
j9"?^D
tk93S^
a?<d4i
'+~Z/m7
@$6.Aq
fx/<=C)nX
dK1^25
RH)1/r
II78$$
p6 e#m
#-1h~}
N(&!C:
`c"CS2D!
=Oi0l+Y'0<
Cg+B0m"2@
B^8{4%D2a%
7^Z"S;*
H9(EE#
7$%7*)=3
7[L-%0<5fq/K
G&1X+f55c7
i o'kw><
@<n5:e
9x0[6}
iz3z"
? 9`4'
W9_[0\
yb(SJ)-
=%c)a/
tU$'"2
HE{9~1>*
ME0)4L
7!Z*"m;
~7X+84@
>,""\7
R>3{5<c
R"/?U)x
";E*>
:M]%h
/(;/EA1
0?$4D
%YU<NM
uj 2S-;O
-%.C!#&
& +;-Y*)
*#|)-/
,'?/tZ
LA-4A4r.
d92[*BG%I
f?S;n>].
+<,p.>?9+R
s2m&<%u0"x:
O"=z<2
)~^e89
I5AI2E
4-&P3A8on
5f&6 >7
V8.!U?0MR3$r
4{3^1d
,1#N7c
Z6Cd2d
1Im0!Hz
A#sc&Bt2
0+6`0X<S5"
l [?>L-{1 ;(!W
t?Z2k6,
)#6=Wl
;$<=A>.
v(!_(+>T60
x:.w|l0,
&RyP!i$e}6T3
/:53?l
>$$2& E
X)h>&M
e%$/!/0lCS
~{"89K<
!~8(}
*P(bd&!3C#)
+-22-'4y=o
4Z*YV?z+
MX3 [;
u3AL?&
K](@-f
Sf"#mC:1!-
=N0067%,t5A
,Gm2E)
>q6w= dT
T(/!gSvn#'|
m:s5(f-
1&FK=M>
0i3!f
(QiF5xD-
Od-JL;i
1!o1d:
nw,Y\+Xr
Uo0W2
B-;{%
4M='HY(y1.Va3
'#0),o(4l,
"\<%N3t)
,P&@])SA
EA48H7
6a*7!
i9*q*,,6
$vkb({
Rc9QZ
^.D-5f
v$>R8v
6zc /(l1*_
Bs:X("^
bS#u/%J
9~2)W
n%L8>-4&
*;3*m H
.18C7}-t
X:@w4f4
<nc8m}*7G
1N$,O@1@
90Y=e"
ye5(z*
N4\p9
9xN=Y,"
`f2/8D.
bc? A?
U0Mr+9
Q;%(Hi3a6>E=Gn:;C
|3[(B(>
4kz>ta'7p:f8Jx
)&f`5/eT
cNL 8R->{u?
R<1w;+,b
"^-~D:>
>3x.h6n@
N'p^`,U<M
0>jv29
k*h?5P
"O.N{
}d%FO>' I
WH8ya&4
o/x8V`
=_,>D)Av(V5
d!B=?G
7I")>.
>;rT,t
a,71$ x
%))S*:r
X>iq%o%s
W:{8uf
xX?1E!
64'4:'9
#,Z~!h0t
y>>#3vbW(
69`E1q
pP/B=2N73
5!/n 2549
Q;l>-]#?C
)&Y6k!.<
XB9!tS
bW,\D"y""4@
D.a>-_
]:8<6M7
8Ks+@f
C%*3F\
$**m7),%$*
;Ci2tz(
I#Z7'<S[5}=[%
oK5c0G"
6.2By)Na$>
x#R9*7 "
1n8~1T4Q
>'2";v_f
@7 lA
;2)_MC7
?-vW%bv
j-0+yX,4
'B6i>"x#
`(Pvx'
L)3_((;
,Vf?%\
CZ:$)8M(&
g_=W<&
#<9-tr
<*6S9o)
G| fq=
W38%jJt
,.X%>
I=1&xb@(/0_<
M3p-&6
c"8:Ak
4(&hu
JT%1P!#<4
-Yn%.u<=
h(N*Uu4(#
:Y{3"t"
8'\/!F
)J_X4u
zB0A+u
&<iH"ZN
H.C%- M
%*>0;2%
3)%~'t%?K
&8f[%Exl B6c
h%B6.'.>
:(ne8QL
Wt3TK1
(I0iw,Y(A
OK4~c[1JG?2
"2.*-+(
`7K+V`:
-2\1+##P@|*o
m+3Pq3&C
$O:6{-_
@US0%D
/K/I>5
88/aN&t\Y
/eW>^2y+)
60iA5<)
47=aR#
n8(H'>Yk#S
0][ TV)
vV4q<pWZ
Z?:[$Ol6-
`D.&}~3;
-$2&@=
l@3 6NL1+
Q81&$'Y
Lx3_pX0aC'#
&?e8MLr
';uF2%m
3V%4(S0<0ar
<.Ws)mg)
%'1_(?[is
(&w3c&i
(P6I((#M
?{[f+<
* ,""+
>vc.qUhD&]4'
7?B3L6
("'0T&9%c
1R,8D";&
#)'<HF.
&(2o8
Af:4w1
)'0 t0 Z
%5$Z^ C$
7J5g2K
rJ:*+*+
7{,,<
(>Rv:!r
&xv2 #"|4Q
/; f>C
65*nKL7@C
B0vP=7
,,')0ly
:>99n"iI?
;'w5?nb,N
f45*=y
7DB(_2e
Z+2J6A
UY)bGQ!Y
69/r0V^/
!`2\)M~!\$ud
&9Wt)!-w$='
r76+>e1{m?)0=Z
-uS;@D
&r5*}9
g<8aD#R
]?D@3B@
%'/*n(
w*F7`7]5
z3 j=,
l?;.+D
=n0J(NcN
!k$\9\
#7>6/VT
yR"4s6;j!^*T>
^&r$N?
K?9S0z<<
;NK=c+,o
J5*V0:H
5K)?.+C6
cG$F==,Q
6l(j9k,(
9>?Q7gZ)-+
)QU32<*
|W0zR
#&u*'.
-?[A)o<
#|%&39
HA-y0
)BS&fD,'
+K+ >X%<|D,|#:
&:;4355I
?Fp,/U[)
};498[
$2#5n8x2
&8,n>0#z
e,^W?%
&/-`+`
|D'R!*m=\
2Y2m1Pg
0J8W;:.
(,7k0j*^V:
;wm7xd%[
?=4nW;
m?e$2)9
}?:`"c
~.$,=-4/
9-l>$Q
Y1=X$45
\G7](&h8V@
As#L%yU6
o~j2T|?
#^2=6
#:Nz?!
Xe2H<N
v?)T6^
K)Ct/:g
1BD,kF
6E@0'>
;Qe(W|
b[?::7|'
'F'0!B
'!ssj! ^64'
9@?>=7B"
-JK+"65f
$*8QPI2j
Z85#,^"$\
~K7w'7D
,/&1F+Q(OS
)2#-p
0;M{"}V0
Ph3l'4
<%r,?b>
3@}@*;>V$
Km2,s$v:Y
kR>.;k~0:"
f;6.bb
+)(X?V)
\=W"(<
.b4u:13a
(9$04D
_x*1&#@
<37r%%k
%0n1ty,3
$kW"a'^;#
7"3v:$
kh\/v=2r|
W<.-({$+dR0eR
6+iHp%+;
XT&R:(
,y5nV2w
9(E<0,*
Z8>^t1
VY/*;,
#Tm)<'v;;<
<2w#,%
3Uh-!~*
2l=g4_
O`5413
_=?'T2
402J;uG
==&8%y_\0
&3=%d<
>mHo8!r )#
KY$#J.$a<
*o0S7>
?.:5DD:8
+I};(@o6g%
E%Z`{-ei/x71v<
v8%='
$j17QK<
?7j}9(&
%3#oQ ~
U!2NX1
o 9n&l
9^/z@>
1Zh0MF\!5
"'2$j;3."13
*;!;s7$
E2<\d'G
4K%0g>
dC+{<)
?:&> :
e9]90'>
+F4:DD
4?Wu-~
t"W4x
0 \9-,4
!`p$\
ZzJ>7A
8'3.S:+*-m
5`&n?s
Q1< wQ
f.K%Ya7101
U=$/R
*s{7j)%y0U/{V(:E
M5F\+KZ)Z(
zZs6!%.4v
.?8=/DT+@L
k3cC7w7oD"
u>#0(
t*^=6y:g
Mx:\&a^
1(ry>;S
8>%O1fM
!o*5d
:_*Sk..J
G @"VO
@, <5+w
.v2|v*5B
}!]`^.(
>@7"b3
5h<8h6?
1(6=J*
$s.xb
y88YB9*
-AR(.H2h
&o%L91#L
{8;$/;;
A-F6aG0fg=>W1
7>k=.')T!@[z
S:(T21+
`$,(+=`8
'/jx<ef-
g0WC<(9-gi$X
`&Z"-Q
y6tm+" ?+
$jMv$
B*.mEvjrj%!:C@
0I:IEE4g
y<Cv/9
\2<.,7
80-,n'
i~;6+E
k(o>f$
96:x79w
"E\9[!F
75oS*'9#
p2O[5z9+
u*2e=-$%z~
?,0g!(-8
4?@(A$ {8%+ V0
#ry7!f
$)#W+\5
C?^3-MC
k%r-3`<635%:.
@-91$M
S^,,[(
ZX#<1r@
%.8k_?eC
:'+/W;87m
1{=5<E
sc=xY,&>Wd.[41]
1/wU%>)M#:'
/c$T (
eXg(fT2
];4g+P
:83>`P
S2<G#?
;2RH12
[p:ei1T
V<;Q-^#
!S/19[y
EL7r-}
Sp:{k+f
#l*%3n&6
,n>9)IW
94}*$|
?;0v:
5k&v#:
X[3t9bj G&
o=O"|X _5J
Ed1Ma1
4<<|3oi
"+$>/>
E,?5Yfa
NyW"xW#$
l?uz=
Z&'-B5t
MuD:\_
>H*-]%6\/
>c0+>(h+K7,K
WG7<W1/|
#`</w[8~m<
V](s!\t
A_A"Vf
;f<Jc8+N
A5P?)
NK;%%*
1*j!l+{:U>h7G&8?
b!K(3^]
0Sh&.x
W_5"_;
(7s#^
:K}.wq
8,Z<kU
U/x4Y8N3t
@>z1_7h
XeQ!?_$'6
)Ud,S+
#!3$;t
.H-M(2s1
Ee 38Oo
cW8B6[l0$
'/10B;We
*!E!r,)M=
u/},e<
6{o"G':3Bn'i
{1 sp:
1xr% ?w
j';.k/x=>(
;wY0,|
?U[#/bq/
!=Xjc6/?2
Y-:?/?
$ ~'?@
#3N>oL7y7
-I{2'5
Dl%f)%-
<.+1#(7!
:_/0D9xU
/eu% d>
5L>l9/)
'4_e>JJ
2J$Ypp
)H$-i<
D+F7$}
#_/N`3
4R &MN
$+;"YY
!C08Y%[
aA?L'#
c9&b1K[N6Z#
v'1T*{U2
*e.u,,Y
#w:y1
/{6F"q3v
c21'R6x
S49"&ll?Nx
D"-0q4
7.5"zc
X*NJ%56=
/m,OB7>
H%e;<!+_T44"
2*.&}/
_c$~E.N%
mE=;37
7_9Ll+!.UT+'3
*)SU5-5KlC'
&v:<X)
06rQ%w
; < ;H.jO81[,T
t5:%F<Z
.q]*k
<-"#%j
?}}="Y
Oc/l-9k
%y]x &:}
aa\?$G_;
&)L>f*A=.2
/8cm$G+
s4Q!6o'
g34%d1c
C"7F61Y*
1#8u32T
*:C;nI
/"Z08w9x e
F26!p&
(W qa=0
<$!/HL+`
?=Dk6
,F8S(~4
~8w6SG
`<U?<J1
OJ8_+)f
$3#&~:
JCfx&
x38.)<W
3$?y6G,
*{#kxU/
/?1E?(K'q
N(O4!>.
=:,X\%q
j`-^Y8h.
2 p2|
#Jq'TL
qI90h7
>J~+/)G
*}/Y1$
NK1\1\
LT0y'z
~=,b%
d*Y=CS
2}#H(1M=*&4$
_8L5;F
1a3"t>
+E^%^E?CW
%&%;%6
r>G-Z6
"cb4|3B=
30)cB4
T&WO;I2k
M,rV6i
+5MW4v
3=/!4l))5;F4u
Z9D:E&
t'+!0e
mf?-?-Kj<x\
H*Pg47a
$53K1j!
&q-l!'$$m
!)%Z0%M=)g
5.;6cnz
ro5ME;l\=
7n<_(/G.
,E5$[8:$i8
\"|!]>
"a="p,-a
113!F5
UjJl7
l(D.O>
/QZ4b,
;)y*7?
u<#9\1
6r\)-d
s<c*ZJ
=)66&.&
.t('C9//a
I:M:8w;7Q
+g!Bo *
HHp<\,
<<A,w<>!
4v;1[2
;6c/85=a9=,W
=I"x.E
$'0jY1[J4wW
<w1pc:
P#R#w{.|B
Dn,|3q#~
%9X4?H'
`P+qD!
\F?Ay0
Q:f4oT
='20+&<?
-}f+P1&y
%]"rI)a$
-?3]4Z
S?>1-z
"5W?E2+,
/%cPu:
&.<k/Lm
P>m5)R*55
]6 G25
g*pa(a
6x}f,Q
86{=(39n
P&k0lI=
>M69!o
7`uF$O)
DY/bg<
z7B,u[=
:0YN>V
m9XI?`
E,f=7!BOr
6]$66<k
n:d'[y
WS@/f'
@8R76/d2
!a/Q?1
"-g9G'
D:5-!<N2
J2Y,$l=K1
2Hu1U;zD
|:U.$&
03#B|!<u,
S,BB>'!
a7>&eM
E{1z1,{
~(0 7+
*h`5dg
a#>_/.f
4!O56B
zQ: A)?b)u-
;%:$Yd&X
?yz#H\8
25L$M,
L3/+u"
j;o79B
JL*9D<-#gT
=_1)5C#
.c$^V#mnc
.o47U{
&";($ =6E
&ev6+9
1d02(.
s>&Q,:I^!0
n1<k Tp;S9>.
"1sS6,:>s
Rq+R"x
vj-9!2
<o>'N
5_v3[V=`r
E|6x6H!
%['&?EZ<4O;
&"#,j*K
;[]34&sm.
eI3]'
=g&(;@
i 7(s(h
+ml1<*5
3F3F(.
p\"8+zk
?8 H2b:s4q
8(/(s;
G&+{>D-t5%~=7
V#u(2/*M
7/A$+&2'
@?)*(V
25)G9^Z4
'=z<0C=.")
#<-R68`a{
H&*7B"
m5;xg'D:m0*+&
$Y!#Ip<
=0<(w
o#,Uw55'RK
\!Q#d.|
O!n28
5'h)lU?
E7/u/Fm+M-
Oe/$p#"}P
]-6FP1u
o5;zxT7!
~2J3//`
+;&Y<.#+.L>4
+^72s4;I
Np"G)4P,S
:mJ=Q/#3
*W=K0.
'3)2#
E|)8t%
k"Y=28
d;"31)
,3/G68#"
+1$'(8"
:>P3/~8
6*>[72
/Z>k 5
Pt0)y[
8+J,/V`%X%
2'|,-,G
Q1#+&'
?$"AXo%\>,)Yo7>E
i;Z_!k+
M7+V*II
B]Y'8l>34Z#t
4E0*e2aMC8
6K:S'(B
<V:2nE9
*4t"m0'
"8-](DL4$
?P=:Y:
e9U."N`6
5H5;VD* 5
(E=m([i5+*@.:%=8$
>+-E<S",3Z?
9,&6$G)L\$ e,L
c(0!C#"
U7)b45x07
tE5%.2
KZN..kS
=H*,T.,
|,8w*,
.9ii<:<`
3Oq3ld
8Q9]"('K2
$-}[=J
1_uB.H
QL2gU.y[$7XI)
m''%[2Bt?
h=g''A
}m(@'s
DQ"/KO
| G9J#
\%)!Y?kB){
(D=+kA3B'-
W[B<%1
1Z)e051
\ $K4(z!og5f=
28v04n>
h=0Q0z$6
$y3P#<o>9=
_7<):"(
xc!4rB
;$b0-+q;M/(
>#~-3e
>,43G$OS>
e3G:"ZY\
']+<,37
`.n<:1
Z8x!*
;7Qp&!%
)E6"}3
#]j'T#=w.:V
/Z>`&?
g!o>U
%bH'q6i
I%_7"NwC
fz*-&4
A"SU:d)\&.
M,l=#7"
&i!9cQ!'>V
c+73Z!
I'+^>2
0&:)'C#ts
+?!&G;*2dD
:94=)0
*7[R&@
ym*gC7K+
1$i(,W*'<=
,]C/C(
z5q\<6?/-
x4(=%0
0.$T#g"D %
#^!}g
)1F2,n;
w1"2>:
Ae.\BL
Yu#5?u.
O#RR(Mp2*
M4z'tI'<D
+&$Zss
!&:2g%i
,re+6/I>o;#`6
<B>.I/9$e?
u+K*#.5;/u
94kN3<')0/fV
ERX+o)
m/<6<+
'788(J"!$1
w.;_&{
4K51A H&!
&\>:p
FE4\'LB;
59q/DY
,Nj8`18Y>|7
?m#zo*
98Y4!i~
q>ug=zB-
Z +U)$
3ZN tx
4%;+@g
2EZ8mx
-*3)s>a,
D>=b3>
m`7wH
<g)V((W
x>g(gE
:y&p6)&
(R/<#"T
/?d>,5
Qkq*n1=
pg-9.K8_-*=,]'
O-N$'a">DP
Ef+<O.
G28qhx-4Ft'q7
<c,`V(
2dp!E%
+Mf/9z4
~>M#?Z
y/'?9Y/^
=uu6ZZ%
J&P5Dz(B
d?{63d&
e>=F20U4lj
(%!21':\'
e-iz#Z!F
88jS/*
66A:7*
_#237x
S"D?CB/T
6"1?4.h
];%pN+k
Aj%D?)qh<
+*61U!
\w,@*N,'
L/>)M?0|
%v1$k0
/Z ]*s l
C,T(IE
6_09i/G
63*{vH
xH+?2R
n2/K;|{2
pC>k(5
,V>8(j%
; #:',,
=lu$!$
*yZ()8
*Y.r2[+O
\X,a~Z
2y9)od
C:+#VY
2.[UU"
4 +E6:5*
x V(Z<KF
S-BI2i9Y
?z7e%%0
dMn>s)
(/5w26
_$IS+nj
OM4)"0!Qfh= Y
>|ki1IS8>r 8
6/=m8f
84+F9Z(5
(E2:4<+
bVG7}!(g
-&|$XK?4+)
-V;+3_}u
K1l#C+
$7E0^Y$
0{)+1;B"%h[>
.K4gI#
*g-eL+
!d }&j
2'9g3T
x$S'sjF"6--a?
WcD:i<q
:=+Mm9TB
wK,z-9
f><)a+
r3v;"8
|02A>`!Y+)
+_M3/}!Q
/+D9OZy
u878\V!y1
w8;:EV#&5+aPV
%).%T+%a=
r<+*.Z8r4*4i
Ie+BL,S>|`
06*1 7y#dN&K
3(9'C<
n$/"{5
$)*,:60w$
,"x,0
3<->;5Z"+
]24pL8
8)9C1I"
(Fz,6P2
b5oG,%
`4_?j(:(:y5
c>\s6"
m=ZN0'K3
a9j9B#,E
7ew(Hk
2?)s)LD
I-fV#+&(gb
U?&>GCJ$.
2ex(d5
(~{*)X":*
0x\;{!n
8Wl10Ne
<02m];
; 2Ji(+~:~
_%9-\2-q0
]8W.$:2!`9<
`(]$o(7
3X5Hq]>
$t=)=&
dX2.L,
%S=Z'
>0Z=)#!
'/t&"u,5O,%k
6$a7,.
14s}I+
%!6d!#
P)L08`
*"#V5Z;
6dg(~1{8%1
|'8.D-
">/VT.
d; p>)
j!79"?
%#,<e?9@%BT>4:
.S(H2}
F-k7??#(
&)22q=4
'#.\%oi+h4
6u/4<b
>4y+UPj:y 4046
-Pj8m@
_"&l.41/;B9
'^e(t7
/s.-6!
3ejP<.
4-1F:dVB
nU>gMA9
2]i>,:
D,|T94\9p
q7pG#G&
40<_&.D2
7;?+v=
3YO,`~
3uh)*:
C ="=;
0&)x6o*
rf:B/Z
<%E-+
){-5(T*1o?)
DD(s4+
]9?-<\&(M;

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.