1.3
低危

0f9b3b8b5f747f6b12282e1a32e78e71012fbea84e16ed4decca48fd76acc61a

0f9b3b8b5f747f6b12282e1a32e78e71012fbea84e16ed4decca48fd76acc61a.exe

分析耗时

193s

最近分析

370天前

文件大小

125.3KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM RAZY
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.87
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Evo-gen [Susp] 20200222 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200222 2013.8.14.323
McAfee GenericRXGZ-TH!FE1EDEA6133B 20200222 6.0.6.653
Tencent Malware.Win32.Gencirc.10b3a59a 20200222 1.0.0.1
静态指标
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': 'UPX1', 'virtual_address': '0x0000d000', 'virtual_size': '0x0001f000', 'size_of_data': '0x0001ea00', 'entropy': 7.9233695915675755} entropy 7.9233695915675755 description 发现高熵的节
entropy 0.9919028340080972 description 此PE文件的整体熵值较高
可执行文件使用UPX压缩 (2 个事件)
section UPX0 description 节名称指示UPX
section UPX1 description 节名称指示UPX
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 60 个反病毒引擎识别为恶意 (50 out of 60 个事件)
ALYac Gen:Variant.Razy.476511
APEX Malicious
AVG Win32:Evo-gen [Susp]
Acronis suspicious
Ad-Aware Gen:Variant.Razy.476511
AhnLab-V3 Trojan/RL.Generic.R256410
Antiy-AVL Trojan/Win32.ShipUp
Arcabit Trojan.Razy.D7455F
Avast Win32:Evo-gen [Susp]
Avira TR/Crypt.Agent.mhxwm
BitDefender Gen:Variant.Razy.476511
BitDefenderTheta Gen:NN.ZexaF.34090.hmHfa0R4GEoi
Bkav W32.AIDetectVM.malware2
CAT-QuickHeal TrojanDropper.Gepys.A
ClamAV Win.Malware.Babar-6913191-0
Comodo TrojWare.Win32.Carberp.BA@7fquvi
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.53da09
Cylance Unsafe
Cyren W32/ShipUp.I.gen!Eldorado
DrWeb Trojan.Redirect.147
ESET-NOD32 a variant of Win32/Kryptik.BAHK
Emsisoft Gen:Variant.Razy.476511 (B)
Endgame malicious (moderate confidence)
F-Prot W32/ShipUp.I.gen!Eldorado
F-Secure Trojan.TR/Crypt.Agent.mhxwm
FireEye Generic.mg.b8e5d5b53da09a3b
Fortinet W32/Gepys.AA!tr
GData Gen:Variant.Razy.476511
Ikarus Trojan-Downloader.Win32.Dofoil
Invincea heuristic
Jiangmin Trojan/Generic.awkdk
K7AntiVirus Trojan ( 0051918e1 )
K7GW Trojan ( 0051918e1 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=84)
Malwarebytes Trojan.Crypt
MaxSecure Trojan.Malware.300983.susgen
McAfee GenericRXGZ-TH!FE1EDEA6133B
McAfee-GW-Edition BehavesLike.Win32.Virut.cc
MicroWorld-eScan Gen:Variant.Razy.476511
Microsoft Trojan:Win32/Wacatac.D!ml
NANO-Antivirus Trojan.Win32.Redirect.cqnbyu
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM11.1.697D.Malware.Gen
Rising Dropper.Gepys!8.15D (TFE:5:nDVFpHWsVr)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-BCVX
Symantec SMG.Heur!gen
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2013-05-06 19:32:31

PE Imphash

86f7b4e893d6469e39b61a1d943e99c6

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
UPX0 0x00001000 0x0000c000 0x00000000 0.0
UPX1 0x0000d000 0x0001f000 0x0001ea00 7.9233695915675755
.rsrc 0x0002c000 0x00001000 0x00000400 2.6242630107248908

Resources

Name Offset Size Language Sub-language File type
RT_STRING 0x00028994 0x0000004c LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_STRING 0x00028994 0x0000004c LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_STRING 0x00028994 0x0000004c LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_STRING 0x00028994 0x0000004c LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library CRTDLL.DLL:
0x42c174 exit
Library iphlpapi.DLL:
0x42c17c GetAdaptersInfo
Library KERNEL32.DLL:
0x42c184 LoadLibraryA
0x42c188 ExitProcess
0x42c18c GetProcAddress
0x42c190 VirtualProtect
Library ntdll.dll:
0x42c198 RtlFreeHeap
Library ulib.dll:
0x42c1a0 ??0PATH@@QAE@XZ
Library USER32.DLL:
0x42c1a8 GetCursorInfo

L!This program cannot be run in DOS mode.
_^[U\Uj
vt}VUk
=YN]Z^
t(x4lSv
z^8wqj-
C:<bu!{@
~^d{m
MP*$dc|
W1}Eoo.
\L#a;t,d
HDn?`S|>95
t6gIDP
`n?aJ!h
B(;r`NEhx
mY=c+P
lM6hO~w
3=A8
{hw-rD
d!~@h2
kDW748
ch6nhV
A1 /Q3{c#(
-9SWN@w7
iXowOa5
C<;([h
jQ[@h8
iW)Z_=~
OTl|=
^$(4g(O$
UH3$,,I8
`bcrKPXJ
=F3\z,
^+U`&8qbP>S
!>hY>x
#lA$>NF
f]+H<8jGc
l{=dd5Hi
=D/\1@x
PZXXt_
}.E%l61
drk4Y3
te!d-n7rcND
EZ%!Jx|Tw|
dhLuLd
:`[uq0#xP
pziphnk~
xKV:[u
!pfffGp
mwd0>tpn~
[dP!n3
]Lw2fix4p;i
rzEFqn&s2ues#o9[
Yh"wXFt4
>)NZp,
6vA?19_\x5
i-rT|F~eqd
VLzpo/5
|AE|kf0w
wEoKfp*QVna
x?Gm`EH`,W
"?6Cx^+_
eduSo6
|67LaF
3Sh(Qh_'R
EVkAg|i1cd
lS^Pvm]>p`
x*?kX8r
m]l$(o
xpzH7>9S|w
{|qGQm
|!P}C(.
=|x~]m+.\
){`Hw!
M.:4kiTb)&t
PlEMrepOtpeo5}w
McLFQnNxaS#m`2
E3RK@Exese
GFF"hr
V*5me5iCi
mGuu$U
V}0u|e
0B-!<0|k
qWh\pf
PM.|&!
:4@.OB#
#H|Mp"
>jm9x7T)xV}
206KHtG
tf8rox
f\hpBL|S
h#}QJ&bC
lwp.t;@
to>`@gMx
[k!v2P
|X$bPJ4hX
}_';x\g
x}/yi&9$GBfZ
L0;tmQ`e
|;m_"%c
x[=+ah6
kFI@h:,i
p&1FlD
|dxmik
hBfK?j
!oB{2\x
pLbaL?QqMGnjkX
<Pt!y4%H=K|D
ob~4dL
[?^_]l
YxWw?Cn
fpT!#:m
g(|-Hs!':~
Dc.mT)ai9:
`L>+A6m/hq#PHpwnz
^3_?"I
!w[5/$q
jBtlf8XQ)
)%2poI,h}d"Z
X5#u@tH96sj+xqs
izTPf|;
hjHvMr
h"w".B'Kg
b`}W"\axnY
<Fj%ms)O
U[UOKPq~xX4 3-?
0xK=p{
)J"dx`>0A
i#BzP|vuX-o
|gj`\8
4M|%#`%
D PJ%SET)
Bd<"6d>L
~!I`EX&\8Ct
=<C|2F`(
taPh:ct
T%r8]w
^tH #;
*}qki9[Z
hPlP\B
iziX%P
x"!|Z8=N
m,cxLV#l%+
M}5';:|@
Zxx=cT
{I{|h|
17KO)VJ
?9&A|tpW#
xgpF)a+kw
V>Yr2a'\%8
.)l0|!
@9G:lx> W@
mp.\bf;y
*yb) X
E+Cx7X
06Gt0T
+5!JFk
(?Ah[x
&nfMI(kltJdu
;,#BUWsTm:
t!1)T;
ngZ^Hf
&ipn_)
p^bW%{\-w,Dx%|
}:Zlbp
qX`8qs~q
Js]ueDb
>#ttC,NfL%
jO'`w0>nPhd]J5
p3xq%u
6(xG*s@
L5w_nhp3fE:xq
[3+jD+
QN0W&8&9
-E%GQ~
pe)QV-
.]W"iH)>
Dl6T+xJdl I@!r
S^3<P#
JFiX7^
5^TL^VS#AP
N,@^jF1
$@tG=wU-Vo
ft@/%[EE
$]E@oKp[(
P'Ew&F$M
^m]`[iku"%
0WYtue|
E?e8[s
8!ek}5
j(1}_p
EV\WtCCulo-
VVtlZ2
GJ7^?dF_
_^QEoKFt
,8~|]t
.#P4nFY
@EuU&3P@F%b[PW
Z}+} N5ko&EPj
KvHP]WJmlp4=
jWj<uE
/f<uWF
\7QtV(htW
5xV?Sh
S50H|%ju
8Y+S2>xP
NVjE;
B[@WZ-
mN<,<ETj
4RHE#/o
_S'mtU
m+myMj:"
x`qBd@6
=vVYv~
-iek:-
lM")8MM@M
,mMol?Mo?G, ,
>,?mnMl$MN
D,%g8C,,
co$8*=om"M
oMC"8l
m( o8#
M=8iWu
f,/9?-J9U5m
?$Hl"HH
kBcMxn
BunOa9]
JLo7!MH
dsC9c5bn@(
MM8yH,s"
Me,dSfn
79I3;o"
M*vBx u
\,cEp'{
-<'<X}<~]X
x~^[+#
q!K^Bu
N0koQu8A
0oNAFzLBW
A~zI|B
~NHY}y
ffWW&wN+,EZ<<,
<+f+r7AW
KvTtf,I
%SM^%qkt
M|]X#
XI'=[zq+=
Zo~F}u%6&]o
[sAQ@?>
]wo[^X
=r`a~V
$E- IRMAwkEfE
Wno=D/J
fJ}{qf
v{-5S%ATBf
KH=!A
9[KB|r
1mL%QM
m6E@i6no;
LL6v|THE
==eh1(91
E}~)oB
M< uq"%M
5JX[Z&zN
EmkoUO#]
3M|poEu
g@9Jmk^0M
#5 Evp_@JR
:jo'|B
rJ@j\k3b@1
[osyfIkT\
1PjeK
v_.uK
iA3b[pt
*p{kfu
(cu{={=9
a3w<']
v5;nbe
:O0=KVXrmTEC
6\^O% q=?Xj~E9=I
'Gz7EN
4D~J%)]'<
&'o-U/Q
7mD/.4^h
Zs63~6
LBp2`}M(&
'QOMB+C
+t'pM'>p+Io
xVb|LO
;xkck'+QO
IS8{%BZ2e
Gtam[Oc
[+<BVJv
q+va766
wPww=X
|w?X;pu8.-l,
W&^`H}iv
H --^aI`&
wW%+N%
9u|IQKo
+|OC2U+
ki{TtHH
s,E%!;
n!pHH
KPOLkD-f
Vi|o]B8G
^(>a\=B
7pxN~%N+
Y]uX%P-,
=B.mhIMVO+/+
%hQ'OnB.
~=.5eC\
x'J9ip
ijk9E9w
|~\{L]<
<%{#!;v
fAm]FR2
QQ<Q~mO
~8Q[6AQ
oBE!j]
k:BQMTQI
]vQ`D\
E@Gq9gt;H8Ai
Fm7j[\eC=~
9'tJrEk5
tu4\ZxNC
M/9B]]5
.E8Vj-M
i;^E_E
0Dcd@P
o_+-cm7l8R+
Q+Jc'.
Zhx_wiHO
hH{*}9q
y}L&oT{
'Ek@w7 hk7t
.p&/>K/
p#fk5h
mI^H<EYHX}FEp14
iVHjK~g
Jn[qvp
WXz>MWK@9p<{^GpZZ>C
vPcp<Am5
h?8O6T8
pApVMkt
0'm0?'
n%jv!IU
mh?xJw
to-(4iKv
EZtCp^s7
V1'vkK
O0GGGxP%.
'ECL>md
Z.xD*G_noE8G'<Z>(
M<A%&jm
-qMAA9EII
jL`'Cs|&Y[
7AA%6~-[
Z[^97'
Lk+\iB+'U=D,kN
q.~@,$
q/t+.9t
QLG8RB8j
tk18:qf5
9v>VdVY
o[-4Xn
1}E3))1B
^8Bvvk-Lsp1
1l6J.t
)\A3uuo1~
m~2-D8Dm18D
n8%*nmM1pp
~vRP7s9)p
)WCEJn
C6bH}cm
Bp8D~mL7
THn(n((%
Pn(nLv(
TAc!i+(0
an(9xL
K8-ZLp(PhJE.
PvOHOtO
!O?/Oo90~vuqc
G+~'m[tB0t~KPm+
/5xrDW
+D]s<%(
{[[cd&^
!hMu9(
pcR>SN
rAIuo.oW
NF@bBEm+
EvHoE?
D}ZmN8N
ts~C+%9|
m+C=O'6Ta5
KGBwom
~tEv7Jjj
AXFJ+y
Nro]X~r!A
RvFEtf
~NZXCE{]7G
Q!tO81vEJ]
-ekhQM
[EG&@-mt;
&omCLvN
dD}v7R_K
LGD1jRM
fB%1I1K
hoomf1X9
n7AI@9
'I)Bsv(OpPM.
c7<K]V,
XaN6XcuBsr}=8
^EoNU<x<J
?v]OWz
'Xv=n&
xxYAZD9xx
+[EJ6G
%xF==Ml
;M3!@!'=~q1
X{!X'E!
mo#s+R
oE6!u)
BJBfFx:P
ZT4XLtO*
:2B7`mJf=',mmK
&9(P:_h
x9C\FJ
jpk/B9_A
%lWrkZ]
v#4t~H
[%H%y8-v&
m+7Xi<;QnF8/
VoWX[Y
yZbMK[
IHZ~a=mIp=x
=U!'8=_
=`1jhq>Df
1]OP~Va*=]
AF77Bd
|QPXh^9
9@AIix~
o9[^WNF
I'_Yw
]DLm}k
TE%Z~MI(L9
kBcD(~KkVh
+,d~5KF{
E-X<[boFPv
~jV88A
r(]&5Z,k*5
~%|xh=f
hKm)J%5
)hce3D&^KIA~A
h[9P)P
t)rDFn%
P![S'90M
Dy'+F>EP
_Td}!I
Os&.th[v},wZP
UKfK[m9
9'_`a=w
[n~:mE
oO8~&V9
TQesE
w4F85L
NcaK\pl0=B
[m[j[I
RwQ5J-@
[edV{I
woo.(}+`?
7xFzMcmn+{
]A=?Y~W
9Y]Pljh"JE
/X8mSzD0
K9$2Xj5^
A!Rs$3&a
EXWpEC
t#]vHX
vII{/pT
qF[ HS|
<LXvEO
lEUAp.5}Z
>Bh>I2K;;)MkI]pv8
'KhX{/+wuX"d
JT'5(b~
? v-S~
UHu<qm
FjA+p6z7
L+qtD+S!
|g?7^GE
8eak0?Ya%
/TB)B%(+%
Ei7xwHi
ENt qV
W&EJE%N7_XjN9
M@(y@Bz[
^.B]_iI
(Boxah9E
Q=09Oe<
zkE'%s)n[/fBSf
fLlilB
_G3o]m%
Fx3U0%
A90/vMp[A )TB
9q+*5Z
8+G2u6
OrJ_Ko_
+}[t0~
8j+E[U
njkB+>+~{'
4Afoof
EK'N)[
fF+A+Z3L\K
}akJN]^
r%CHfP
OS3kV``]
q*~[X-Z1;[
-P(&MO
8Naz WX;0e
6Ra-zxWP-
.o]AN}aTZZx
o- ;AZt8
;Hvm7(N
?M Ni%v
KA]B6LBV
Sax-A]
L:ZDyO
=OnOL@.OF)
rOKJO?Np
|i1|]LgQJ
UOcO%.|kt
R/=2mh
mv gQl
A:VZc|w
B[Rl6%
/+pk496
3&/lJ0 K
L98]9Wp
n!n(x/Mu7
oB\0M+
[5tDpeKbkM%m9
peF(]s
V8Ov.j
:'f\DZ?(
K<mm3tUa2
\t`@+bv
_C9%o}
=JXek[
Zm&A3'.-
9t0|D(
(lUg0>E=
6Aoq~3ZZ(P!O
39m!nUQDF
jY}~oo
'I1HAK
M+L=B [c- 5
Ay'OLv
f]P^oEL
KQQ8=_
ABNHKSs
H^PL$;7
gHvPVtdS'Bi;;ma
%a@%?]/]=
~PmE/n
dP[[?P
2-JMm@EMK
QAXjCO
xC$Chj
K\f_{9[
8FM!t$=CK9n7
LtuE>G&*HA
)_])[kPUT
ZHJH-P
%3v#Z=Q>x\
NnTAB`AXVm(t^XFj7
=L[[~!p
KB5b"+
V14najZ8
F|[r0OI}d!6v&
'=HjxcWIZE%
o/xY-V
}%(.3\I
N3X-<]EmO
iBi=:\nn
9\~:J(+XZwp`pA5
(P3=jm0
0J?:G.LJ
0,m+6mXK'xP}_mj
mpX[Ch~Rmg6
woQ]gPU
i]q+M;i
]icKi%
%O~~CLeN?^
iJz\!Q+#i'om
MOhR9uIJ
NNC[Ak|+J'DJFkK
F-}HIi
qm'J]JGo
wLOGN~m[
"MM0*4Jr
Bc[)[U~J[t
-R']VB
8koHs4
5x-^kuB
YuU0xxEX
^x0}0}V
rX0tk00@
@;rV*0~KTx
2-P+0EgDRKa
MM":2+1+"'V
<vq"XB9
B[|+T]+JBKK-"
I2$J(y-Ip{c"+a+
}3mB2}k
INzZ2N6
DI/K\@+;I
K<]IMKK]
<p-/D'[I"I;M.2I
^O2$~FfIhIXV7.;e~ap}A-
;_ea:Q
O%qoVqulk-$W
ipW[;;>XouU
4h'n{os6
4$OA#ke$;M=[.2
#b\HARs%{)Fom{
.mT-0DK+
L:@dw@^AI
A]AA_MsoCaAE_
!Nk[k@
K4L#kt
r@qWy?
,%JeH^v
/KH'+f8vY
jx'v0F
jV%f9UtQ^8~
}EF_8tv
n"%YvQ ^
e`^B[XmV4i
`Z@]O0tx
GrEvW[
8k(-6$
BtG8vQ|BBt,98
kMI~4o[a
QFZd08]qmG8E
XF[+R%r:[
a6o@{;o
Tk^%jE&
Qm3p\x
[p+B]r<28,
i(Sr p9JU
?;yAvL%
k@v=ih
v)-oa)iv
Al~MM2
EEVo[2
iB_NHF2AW8n
wt++fu
.>\Zo9z
TKUBV"
M|+=!/
gwm.=g6B
Q{E,AW;
+cwQMC
"M.M"q
8>Fk>$@
>?P$HEm+p(
?l-!5$
G"?m/{"
W){l;"?Mq,
$"}.9?(>(*m"
.8"9$ =(
pm@;. Q!MG>4+$#`5)J"7
m9"T~M
Y3#ccM,#Q
*.,8)m$
/$4", !
!n'gw4#
$$$,+,64
$&-#%(mL(m"B0G
?;$1=~
#".|#M8vxFHp:
dF>/&+"
,. b,}{~$#
o$7'mG7",x
o`!~,!mf"{
9m\>@oP0a
#|w99
(`yk_M,0@
,pV@#+("Gr ,!
$*}-czY5#1md
=9.{>iT1>?)mc
$@b~*>V
$7h}?ov670"l.o:%
mHz7$}:eG`f{
@zx9Vh
G-DN-aEx`8!l9F#.e)},*7
`0q;*@
>Cwmdm!>M>@.
x|2}8bZ9R(9]
u%/m5pmzd
))(] )
8)wzz("z=9z)%9H
M#H{z^z>5u
,$8[{u
U=@|Ds<}
v9S{ec
Mlwd{,
}|Tmfm
q"i6=g
o|F?)`?
?>{*Fk/
.* {oFt
t;0,j
}?D;N~Wo7*%855554
)4@sxuD5\
80T!(;!1l[m7E0#8%+
C}Z_#V
xPeRW8,
w42IGJ
qbmle?-Imsp_w:I$cc
n2F:P:`m
l^nvVXO
$[lu$+
%.#w$c$)lkm=)XUt
=^24j
cW8!fp
3#gc3,
3$8(",t69>4
hOX84m_w:Gj
.$ )l?;
8/jO=4jU%(@?"4bB}#(4=M9
. b,)*
[c;`G(
0ms 2$
-6$>=5!
va`?a],LB.
!;#]P{
2f<1yCA]
^Yp#h-
|1slm5&msmnLx{z=u
p~_Ams}Om
u^YPOH]
g6HOz>&]Y6c
vKLLO]L h{
GOOOXc
Y)Cv KRHx@n=;?
<foEt`P.O!bF9M'uZ_WG8AL
T]B^7aI~|r"
,eVyQspUJ:ihckD5[
$NlX(&S
}mq*zd#\j
'35o(5"*$
5z<5/5.4
nCEh|b
eBN_YjG
IOQ@UA
Jlf~yg
^FDaXS
`pHmLdx]_Ko
2f(AJB=
,[zx1y
j$#=#:7*
+M #)
$):8?uo+3
dC|*K
((f<$29,
*.Z!*I@=8
F2`Cy0
d@"`Ga
p9+:."
$!NVdEIxqV0N
6(>MM`gw_C
M;l~kMk?o
]wxutr!Pf
cO_mn}|
pF{KgN-wSn
$Qg`{R
*n{[:Iv0
'/p`v;C
;O Uws/v?9>
FCQ&aA{#
ew!'Ntn((
H,7w$O"
h$Q8m9=UBw;
o8.,9!
bm{I(>j>$
E(%>O?
RR!j "
,L@"9)U
o>~"7|*.
(4LiLF
[u)*,*:(C
_."w?z?
*4?C25GQ
bmkB48aj
8>H]Fi
~!+l_<)(
,*l.*5
9!hxkA$%M7
_9OZS )LVjk
RipD#*
pmSLT!
="B:L%
N~sDq?
(O5Osfu
U?nF` 89BBgec
Vr7b6$yXhI
x$]h[$O>
Tj@$FG}
)77ukf
9(lN=/
&N7m.P==>
R=tnu8"
,+ [Z0#=
go)hx%
s!MD):
`3MB[h
4p8v[a?
\9OU#u>)
lHF^TM
60e_G2L(J
4f[f0 $[(
dcIE@B;[U
lFEGSJHxD]i
F!YQaG
\(lVO6_Wv_@
_[ !CB
dHuJ=@8<
um6oAMe
212 e?]
,jQpm+;~3933
33uk0Zw
a~s}UM3
\ E=;3
ATe, Q
.?,g)L;
0a 29!M
OpR.4}
"#J!#E?+e
D{OC'jJSN+p!*?
5zd'w_
glumo_g
2H-/3$
eMv)MH
/4MkTBg]JM^Muc
1jNPmM
81z]]LLE
0iZiWi
LUxg`4%O
NzYe[*6
o~0~p7~/~P7
!Z~)/g5v
(4~#VQ\Y_~Lam~~<
<{VrJ!V
N A6l|N,ojk;
OtpYxi
}'Du<D\
\f|kS?
[)W\4/7~
f=xOnF
..E<+-g
!koj-m
27{tD6
$l.^\my"E\` yB.54
;O:n.2'f2
{w aJe8e=eeee^Ie
#Y.H\i
1!Rq]@RyU
_@,FGjR
C6GRP--K
lsRkR2c
|r[RQ#
n4"2R+
pRtSPRb|~g
'EG"dZ\}`{iR
/qxuQ`i
.2Y_2ba]b2
MPv9sX
rXA{72
Q2[Az<s
n2,76R
8bW*A
X_}AqQCid)AZrSC[bA
&[zh?AE/
A%8*jh'@/K$HWHwH
3H71Hicq
(g36h"L
CuU>RkHKH
-&HQ6j8h7H7
u@qKZ\03u*
Kn9c2l24
qooAA;Q
]Fyv[!
@!G}/c
%oLU1EK
Ku3o#|
ft ,J@t~'Zi6
C~Pvd9
9a]uYVw/}
8'VB]1
^}gUoU
)^4Y+o
]83{>L
xDmu~[Bs\0]
mXwGv!
|O7-.N
S>7B&}7w]M
$1gS7T7d3
iJx/v77c7f7[S"$7C
E\D><aG
)<7U7YB
_0F'9{y2#1
U_=0SyM{UY6R
2Z.`8Qpp?
AKGcpV
pD%p4U;Brp2k
$u}G$V
i$E7UE$w
989tTg${k-,nR2Lr(
_VJP$_x
$&$92sgb*
q&m/287
.V)E"E
6/:7MP
Mahm8J/
qfXh2/^(d7:
e:T{>{_tGM
ke%ABT9*%eA
z~r@=v%_%%
)FA!S%=a
%j%^\Z"zd'l
h%~vz(y
8zA(>f~Gw
TBv~"f^3~
U(P.BFd^
#Hu[oK
XTjk>m
h5QRlI
{yPti?m\$L
*KS];v
ESB&DU yY
QI4vtUG[
zuO~sE
~Xx\~X
ZIxT<I.K
k3sfKoZ%
\2KQE0OaY
odw3$S
SD]T?9r=>Z~b0(
J=Oai*
6Q1cEm
gcyO5*e
7gv1 kV2"
InnrG&n
|$n(8JYw
&n|x~nXn"
!knQ1v
{'5uQ"HSRY
nN[9n`Q
-\/nP/8,\h\(XT\
F(j\boq&9Q)G(\m,\\Y
\VDwiB,
f:9!%Zix1R
&bsJZ
:s*S<Qc
f.LAo|p
,@dYI
sVFl8F'hPEIK%
Q9o@f
_qxjP, A^fU;
J\;BmH_&%0
L;wC;@
JCp $#.Ur:)sS\/
q-VeL(CAR2
}?-F3ebv
Wg.)#1}5dW
o>FgNf-
dqqX6h
;i,g;ig;\Q
a%ggHgg
3HRote
y]d%z?4h
!d@ch/
&81E/gT
BO;vD#=|ecw4
:5"Q^
|tzh$.
W!+WR}nd
'C7_)xHS
z"hf8z
lRWbGEYQC8
L"r=xb'
'f$Ic k@$5X
cx~3;y
[>*;]@o#yDM}pM
O1M#>nE;M_
M\eW%;_
CMj2[_Z3F
4#EFw[=M
T5Zt<LM
g*O,5%_
~H$p&+
)]Q0~tc
D/^]XoVNR+OI
uK0:de
Fd`6#"uc~O
Z,hi)!"
/+H<'4VyMDq
K80.8o
%&N]O.7l,
0vES$sW<m!h
$,vz0EdL0
]=^{dqU
_\N+/P
HbiDg4
{*=(0g2x
In^_XjF
V*0;v>oAH
R*<%|6H
7`zQ1N
7qRYO.
U{aqBuM
VzTLj}#
X|Lab4
jzYbJS_9]
AuK!M!
}3R[3@
SGi8VS
}E,l*t&Z/3+!ZOZ/
5;nZZZuG
7'2vZJ
t9ZfBs
rpLZz*d[}V]Srw&
!llV7g
zXlvlGlsr
6tH(l}{
lgY@Es_Pl/
%SU'=#
v Q8zPQ
+~MVaV1igV
VX2+O(t
zEc%(0IBQ`V[
Ns`9ad
PFAcB
CjN-$NST`N
{Api%8MNBp[DN
n<Se>%[3
6l&6/T
;CW\Cf{F8
K4;CJ
p#jvC"
C[=%ew
@9LmC&zm'C}CP(C=tN7CB^F11
-j1_RI>
7wTYirA1%
Vv3c1(1e21P,117
k1i+,)~.H1
1Q_gLD
E900<Y
6"oE2h
1x6J"p
c`a<gG[
s4dQbF5
% '/mEtP ^
g:Oh3N
U)I-<_U|
H|!|K|q$[d
q}_i<x||
qH|\qnJ
}m~%z|
q0ov=[~>^M
K}|@lw17v
w|*Z\pX
q4^Ltk|`ozDj%c
dj]nd&^|d.vdl-j
`DdNd
x&,SFmx
~q!Co]D=?
~MAq/xQi~YtFx
1,E5x6
cxxL'#-V
Ob$x@<[-49
k]/?%s
i)R|Iu@
_xJ_7PB7t@
,G7GuV{5[Q
GHGogJ;d
Kx5"fQX
G;U"P"(E2
Hco;B
85edG-S
0a(e)E?6h6PH$
JSH<:b
T/?G;uj
GT[AxG#0%
:<wt.r;P
R~IGz[D
XQv@-W
zQ#Q1v0"PQQQ
QEQ`y2
Hag :%J
Q*;|CQI
Q,D4_>s5K,huvH*uMur
9HuKKuZU
#zVcvz
dy9[6/}':s'R
At$[Tc
\=qLoMS/rXf8h#q
5@U^~J
M7(qMJ'i'o
z0!MnM[5?'s!^
K>B+@oy'Zh'
7(~~b}
b'*s/!Rp
`~c~~/d~
bP@~ViI~
~v[1q4~`
DB7;A#Jo
(wh~~#
>}}+>O
8Xo8}.}#)}CR
.m?}A6
)]/4mE[}
pS4}}U
GfAc"[LV7C.6
${|hh@hG?)LHh
6hh*h^?
J_*jUbEW))}w/iX^'s7eR{y9/b
KTq]kEK}
50YaqX[
{"Y'F[Hu"
Aa6o>X5
.m C[1:
$.r|.u0
l;F'7d.
.SJ.=<^E
*(B3nqY`@6R
W../.`FK
m .db[L.
~Y,p]~Xk!m{R
fP.KF7?l
t\ss/Y3*6
"SOw8Pz
07x/35
+`] '/u
*NwFh4k
3&O"Tq}
^{S^KT7V]
$k@ox2
Pnj8koho
^]c0[|8
apb{o57'
`v?-L__PSw
;u2^fM
~{PC-2#:
]{68MDdz=jjUY?'
&@Z/eu"eIeeet*
6qDV gn
he1eoe
-wV6FZ
TSrlco
}_'rT+@O1rr
B!C_q75U*5k
A4wRnG=`
B[+pizm
#8g9O!Eom
RI4]4&
L5m44PW
wL1WF&X
-d?MZ[
_lX`r[e
KQo@b4fDI)_
CbU86{
hl?u\811kM
|fT4w6
((UqH*Y
1,~&8&{zA
{a|:7P
o3IG 3v3I%n
%6`xzSyG
46(zVyn
/E&F#^y;'
omOmI"Rmypy
uPMFl>)_
%#i>eo
c+=f?(
:VKJ4H[C
#u1(G9%7#yvl
_#"CQV0K:$
(\'9;`
=(:_DsNX{
jJ\8(t
OY/+y&msy6
Iy.Fy{iy
Ry9VXy_
i&*y=L;Bym
}@(Shyi_yV~oy+V
Cj}_H
O7P-9
1Qs\Zn^LjtxefS
9 sYb>:
'|[)aI
iu,'{
c %ongc7
n f]R'Q
/[")~t
" 1BAx=
BfC.v&-!FDZy>
9ld['E|S[
G6m:>%
q5B.k'i
$=KK=.4@
yyxhEo&Fy
EBy`5jK
[VeKdKo
$#tMjo0&?$K$
u$$U6~`V$S$K
K\KG<iK
-o$1OJ$~l
JeUKK"7Zvk
KuzK,$F
E(Q~#A
%[/#4>$!F_+=|j]1"7R
oS3N%Go)
\}JJL(
i5{2B]+H6Dz
j_=5`R]z:
+O[[LN;s2%[~
[_k|+~~1A>>E.
\poD"U.o
KpN(a%Q
;?p"ecY>
eU\_P;UVC9
NV'Uq8
#HF8ZzZ+r
mYXuAL?t5
WZ^*Qc0
GZM~GF9Z
Z@^dJ^
{|PU00?
K1fgv?d"/
;7'&&?2M
&&~)dr
VF&eAbFKo
7tR+&1`
9S&Ks+
.,_@LXah%
[EkRDv^
i>1UYjm@
`##Kchp
$y,iZAGAA
4J+MS;A
IivI],1:
%b)>AUD*
;!cA,AAa@.
.Y<AcxA-f^gn&`V
.@x;6=+
:<o8jq
1#|)W?eWW5
o_{4(4
O6Q@D\
H`vO{FKk
8JkGkK
hJ7<V|f
?$e41/%5
T^]y+54t
Q8rjaU
sq0^Nu
3^LNB8
q'qqVw)
V(m(f^G
n\j(5(h
}b(*(=(
7,^Iw2
((0:(Je`/NRJ"*Wg
870Ra2IsdG
q(ORzDMY
(SF;Rg
R,&Rrd55#
#h/8Rx
%=3H%Rb
R$LkiR
wOA\^\[/
4rS,\?r1>
\_GcfUy[
!M \mL
#Zwo:aN\\/?>b4\~/
G%T\t\\C/
yi+n_Ksoi(iUia~MBP#U[P
Vji)__M
4iioM=gi
i"TYrZ66
$V%w>aCMi
}/@ " tN`
E8f9N.Q
jA1[ENW
iO].w]
#a=7bBj
v{-6RL1
*}/KgUB*;e8
F72UD=
vYU+LQUCFU,
UyU-> H>U:
@Z&;x~CCG
3,<CX9C
|q"CY?M
xU6U^C+
=Ro/V
hex,=6
$F_=F=
mb`=GJ
===*k=iy
~W9'-N5H
h(_]_H1
tmhbK0y-
(o- qA
LmOJKM
_}`uI_K"UMdcO2
1>D7N%
qON_Q&O]NBvfe]7
YISED.[aaLbP^dI
W-Id#u
i[Iepd
`=IIIeGIV|
CL!;s*;I$
cdDjIH%=
tD8U&;
_Iw{[}
TglqDve-
xvuBF]
C[\*5u
hFJu#ErB
gollMWl>
MFe8ss$:\+lo
}-`lMOnal
Av|bfC
h-fNrm
MT/DXG-4Xi
PrnZU.
[([Xo?
{j>}ogAJj
]]u<iJ]nB
<S|i]G]
-Ui"Sfn
|z3}MO
eRB\:^
'B\L:L
k}-B;LF
:E\F66
'E\s9Y
\sv+\5K:Q
515ZE':
{L6A:5LF7F
=B~78mk:$34M
Zs:M-Eu9B
BKK$st
)}16G\S2
2]6#J-
V3>^w__l
l_o_W+?jnv@
LGKTYX+Xk[S
VD}y6KRFPAVE] owRUC_G
jH'TVQHH_Y~oZX}o
0_QIGGm
^_Q_I_>1
AxjQws{ &^
ja3zxb
byyMt\q
!O(bkV5/
[#d>n3r//+
k8%"z6Z;
%?_E294:7A85
;6(0"&;24>$K0Q/7+.
`MoTh9
nV<Onh
tR?$mon#z
!5[M5-
8Rn9Tf
M,k!*\
o[ot+1
;qiJ%3,E4[m
@,),[o
sBM]n#=2
[M +<VW
,d.a[4T
z6WV"#u_67 5.
zR)9N(n-
r'NNrX=&@9J,r
`SO=jJnH
`p<:Ms
6?=*6{7
FM:9Md:\
36mo;6^M
pYf=N!
fo5E:i
H3k5T555
&:8E[{xd
0Mx9\Fd
s'x{.X
\.T]9:!1ZH
=J@Cx|
$J6~fBL=UM`!=
|)b'Y]JF=X>
Ne\mrU
^s78kN
9kF2N~
s]+F}*L(^LIBRr
}NhUv2
7O5#+v~
Yp7xm}M
&R$kv(&
>8_!QD
|;M^kp2=O.
&v^lp/?,
[k]Hb|
>]k(;*N
Nfksfk
L/LyLWG/
0XLMk.=L
U EJ7Wj
YL#Fn<L
kY_T\XQTTLZk
'X4JTn
.HT^<X
\ZjYY&_
_jmv[m
9TmQX[J
A3k]1OT[
T}4?kkkmV
nnLZ=Y
o[6[72J{]
djXSVD+U_Z7l
U`UumUuUc^mZa
L<LZ[:
UNG{/UUUL
Z}UX=TJZX
vk)VAqZ-[k
[mJn[g\_pZ_m
YZ\[ZUv
ZHZ@m6GL6G6
_[[k08LZk[
_(YJL^_zBk^Z;D
CNn@LW0JRaX[[m'
&psZR{#BYx
#kko/c\
Zs8R/+
r6\cOG"
-J]^hI\S
xX\riZZ
!9^S[5
A(J,d34
Z>.%Wh
[FE\A&E
fp\0H@a+lCG
k~M\VC7`*phhUG;M9S3l
wdls{Sx
Ua`y=?VVplL~
QJ}scfOm,ZlU
Z{{*^A:[s
YnZG9\
K<jB2Z"m]
[_YYp,XaG
IYfv6ZYkY
2PLO`
8]$m2ym
j-84etm^MrT7K2
2I/c}*F\p
VnilD9
/GK/on6D7vv8
}vV-A?&,pMq
wG )@M~9
!ysQMr
yb{%X<d
F%;P<V
O4_Vhf-=5'.9
(Mmv)44!4E[
nm{mM.
?E7nz8En"
1L7[Pf8
W:TOEMYlMS
&JiL&OwdAPLEg
hpqV~@)!
piXCgSv
*LCYI]h
2gD6~7
M2'~/|
n6/X4B
Eq(LGs=
Z'Op,[
WMqQv/o9N4
Fm+|4Ed,7qh
4vEs vQ]
L1?qq6
'S}}U6
^/l''$6
&M8no,
vk4L $B
5[w@Mpbf
i$<$XM/P6~
Luz[hT
(FgF*{X
.^k45l!y^X@U*
w5P~_Z%e@RZ
]j_-i0>V
2Vm(Gt
T555b`
vAz/lA
/lK]#xW
6nIVY/
"V'n'D
<W)(6f
M0-6MT
oH7e`o[#
49E4Lu?
-SInkT
R[nqE#n
zf\o5:
\t|~m7^
#vCN"ml
oK}i=C
[wC?*nFt
JK}BR$5-B
dGa`^)
+X%~v\
vIO!z{w
G`uA;NG<(CW
da]7|0k
_doMg#v
<$GYV%
UGBw{>
js<)CO
(_gtV~U>
s}UIC.y
qMPd`C\h
w|'V}CswvvgX
[\(6du3e"
vNvtEs@
LEvwP-=+
ei52m_1
4qv"o*|:&V
\/epp&V
&nt'LsP{QN2
Z||$?n
7nWI.v>
Eww-%MrS
L@o2&0COgnC
Bo+;6!
v`C)5
moC#,
:(mql.?(5F
v"tZ!G]5
VW.dz$iK
"sUV|no
sQs3<R
O[Vhmo
%Y\Vx8
'$.<--
@@>%QUo(<
I+rlwC-<Zio
a?Z(WD
5k'l:`
&h-}P'$uW}b>
7Z)5t[[A(
58o54Dy-!jn
]7.(<G
o>YV55
m4dAM?Bj@
;k%$IJ
5xvnkK
rwC5';kx#.7
m $Mn1
-EGkBut;
oUh+L{23
BUBl]d"(5:mm6XS;!
"f+hG6
2$M0cA
}(/-h.
bB&rF +
+5@o9P,
5y%twi>mG5
~qa+}B2
%ABOznh+'
m5.'!f}v*+W
?%\e6.saX
C)n{6
)a6>EM
n+s9J}3JA
ME}4=l
C/##k>
vL::nkGHL7
7l;zD/R
M>%F&
%DoG'9
+,+lER
JW[Go*5xz3#n
,"d[y.&
>f39,,"3,r
:>Il)x
].s/dsRefD."7
jljon!
%[|nl}n
BFO[\z7!va
L?iV%gLR
,gz23m
oZ'gvg6
*PJMPuD
h)U]F'
]a<yMCZ
D=_gCv
3!o'hh6
`r9o-Q
Wxec:~
DB_UJ2
+%qXb[
*mQr$f
gDc00R=n;R
a.!`,7B
Y&{4DBj
LJrBB~
R1cl`VR:,r%222
0;C!J,RPL?IDs%
]x&\}/2\
\9Em$.\
\e6F]L+~J#
OJs[R]F$
F]#NQvkmB h
HP4/Y~M7
u+.o>|`
so]v8M
iV?;Wk
ku_8[CvvikbR
]3k@71
j]n`&fej-&
hno?\0w2-
:S~J6.
n]k%ZVd
LM_SGW
5!]iLC]
'J]-n[iB
2i(A]^|
R*[lSbuI]
~O);BO"
&:#y$b
vZ;]:YGl?
::5\am
G<\Lj=5
=0$14FF\E\/
"5mkXH\
Q5nem&Lw/6
5EZZZ,N
B6-uu6;
kM=:[uwLM5L55[r6\:Q7
%1,}5Flk\BB+2"5.
=DFB9WZ5yg[+8
:=9Q\3o
\k[]3:B
Jf9gR:_
P\zLB*CbN
YaLt\)x&
BIRC2}
^AKKI}=C
FR_DJE
U7H@DC
Q{`pui
Xysv.o
uMbPQWe/@h$V
o{.Zekzbn
d<RzDS
W^UqMto{UT/
MdXlQSi
H1(+61/M!}
$%pPuC>Q27#2-{3
(',4-mh<>
>05vM4
539-5_
QM&34800
Vp7w;*+4\o
j2`u97
4 6;Z(
,+H6),/EVM
i)L,di
Z5b],,
M3M;,4;
4iQq")t
pNru)>{sWJ\("1
6.3|N6L
VB+;:Y
{_UK?(
^Rr*BG
\r]]x@\'LB
>+asV1
p4QB.Bt
<6:F!9
=>x]=\@
YQ&{_/
vw[']=]*%@\5G*
`snsM"
^=E:%F
15|4g<e
~y:f\O
0=JJt^I
GrSV^(HM\T
z}s.5$Mz_Fwk
NJFb"6)n
.w6!Um2y
:*Lu38'&jLqJ-
>7&.ro
6<hzoym
.wo|\~j>l*
T)n9M\al>?>/
e/Qfm\
MxwgTh
mBS[{x/
7v&>{y
k7[vk7
:7sGLCC\
jG~bM-$k7*sW
c")k~YLLT
J^\__#T!J
L*Jmw{F*
ZL2<T[FKTA
U)m2v\XTZXL[
[sXY[J\LX@
LgVlnCk
=[y]Ym
~(Ul[([Pd
TuzTkVZ[F(jT"1\jm"Xm
Z6&mm61X3C6>V
]%Y4*2%PQ
pOZQ^{
=ZC*zUZJQ_ZZ_v
\_UHU_Bk.<
ZUI=kmm
\GZrB"
\1^9XX&t"
eULJt+
bNmf*C
R$2kpl
%([|mT55sR
pmCzVhE
rJBm}J}m5
kklJYB^
v_ukmIU
9q)0? u_+T
'm@^Og-3^*shN
E{XUP5z3
=^2Qp
G8^g<:'=l
_V*+*Rl
og^^+}*a
#RS\_J
U5`VlTV\{
Uw5SmT`
T&s]st
7W`\TkO9(
LyL@mlZ
9um;=`J*
Zm]m(m
C.^+PY
%sKZ[6D[jz
hZ[Om;`h
5wmGR~!m
lgH>MY
EaaKL,.J{*f2}I
leClBW`$X
!mqI$^&
||Ah0~Lx
AT*br}3m
Gia}$UMo
$"e~Mqv6
0k@vT
15M%/pzqN
nm%f_C
E<kTu
!vv8 z
v5+K@H!v
2M?oj-6$]3
m4'9F#*h/2
@X4'(.T)8\
|cQ'!R
0_x|q\z>z
,]Yx2aAMw
I5B=0=&>
5<X0$#Kv/TW,
P7b'Z&f
Zvg|CMdbd
5C2VdC@@LGR
dz_4zoo
-z*M|**
pvGH0QJ;-
"JKzjU
@v<Evd!*
s,w]yE
sv!4qb6, og6+2h
Ek>P]V
xjjqBq
n-&m/5
Z&l[/Pl:8
6VJjjlKE19f
EGF@xMcf@]
W;M2hF
c6R5s/
-vVAHq[.
$:Tw+x
,.=51yP#
N<LDJ\C
Y`kC*yE:
6Cvk>~X#
{A./c}[
cA<iAB
.o[3 \V3vk,(3(H~Z3@h3A;X~a
3webwf4
%cW)PTC
vG1WATK9
8t)9|\t
j{Nx4wZ"
nh7VTH
wk0"/_
S\y1pwS}_I
[C|qs|o7C
][~CF
&-bE&6oI,L
[-3,n<:Vpo
Z(<7n#
CkODf4[
Z *0Kq'6
lA+S-9
&`@-eszr!
MY <Qp@
7m@!5}Tl
\[AeKAT-l
D{NhJn
"aoIr IG$
YgGMU^C#
z/>V]E
:lxHB1s
.L(bM(@
P{rE>C[Q
Y0LwJpy
R=vhRdl<+-q_fX=F
|dXq/PpM=g==6A-
$tJq=;x.Tr
Q+,(6n
Es*lEk
);EYmkDh
hyeonPs
[h6.w(P
E]uCqhv
|!v^rF
m;Em=CC[
{{C]dZnH,N
Z!ZB]j;\+d/
3P7&`p[R
)sEG'u
rSWbOm
wULskmKs
333mG3!c
{/18V.s
7@$kjM
^tQ%w[%0
-*P[V4}
eiy*?Jk
7%vo7-
}%6%FwAsetm
IKKW t<<BWj%
(m%6FaYp
N-&s?J
Py3,*n
f5o.^5
i)W`^4
m?12]J=bE
-8jXWQmMv
(,7`k3
wGQjTf#
MD[1J\k
'6;Mhw@,'
&l).]G
6Hx842&<
G[zM&[imS'3
!,MF[};97
~Qk+43
%BLX1-ys
6)6S"0}
>@uNL2G}S5}3|s
sl1FPWxs
A5M[qp
5T2Dk}
+ao,(J
2?~.K6NPC6m
u-EMIT{>
Oh/@+.1Vk
$(;>Vh@t6}A/&
0PQpiV
i;u,M3t
7Ht2o}J}
"Z3:R3_/M
D.F^,#
.W},4Dm_'
MJcb3,.[DZN{K
sAo'FM
GxRr-?
]K{]be
VrGvq1z(
^pE*V4
nF6(RzAmU9
*(8mv8
ny!L1Y#
GK[Luhg
tQp>,^/
RoMA+kH
pkEl+>C
V3eG9o
"o)fxk
vuMd^m
*t nGF "
U+?G)^
pOoJMm
-m-Bf[J"P
D,}?5|6
h@"D#ul
Q;KE"r
Qah1]Q[
>|2Q(m
sI&:a:% u
rP/e=[v
N._Hx
k%$%(Nk
=1!A5u
n~F[9F}
/Ncgg[(]
b#It89C!-b
9;bCE*T
(9&4N.&
g$(d9l#l
R"@uDa
oLJHb B
@ec@N!
LMI}%Kxu
}].h@E|
.r}vL]3
]]@OEl$~ &mE
sL#!%}m8
>LD}Zg
]II*qL4v
nDfemh
u/ALLxEmk
EL5-_A
oF@em]!/;asm!4
pHP-[>h
"?qm`m4#( >,;"$ %$"+!9~?ZA
`($vm>
9p9$s5>+
@*}.ms`c+m~[
!G.<m
#w`$o?#|(8>9sD$
)mc(@~|$p 99wm;(?%8. G>=mk@*
wo1$>^;>G9+w#s<,,#o
>m(#>s>>b^9>@o(s;koh(?b.i
',>/;*
o)s-ob
>2Pp[q"5
@#88"q
y,yyNQ
F}A*|>
zyq2|q}r7t
}\|qs}|u&wxFHu{rqs
@uqypq5|H)vn
&|Is$s
qi}sgW"qXrLYwm.KSsZz7_%P:o|
|xxGp{y
}r{|{M
uuk~%x
qxxsD.
|u?}S#|r~{~$wR
z~Hecxy~=y.{P#
s~9tw/~x{xzutn~tu
Twuzwi
SQZxSwt
px>yB~
E/~Foi
x'qPuxlpz(
^m5~PC
}"<9rwB
[B|p6s9L^p
v$pvcp
w2p4wr>G
pfv}v7o2
Ip^YvkqV
q0|E*ig
ytvxzE{.ztt:.u7z
u0mA{z<
|s.v`z$
)lktuvvO
vexyf{W
kDsce|
Ts8qv|
|s5v|sp]%|L|Nm
"~\v/mcs_I |yrr[
|^Py#jH_vkF(v<3vv
'|DDr6
tnnU$#Gy_
tA@Exdr
uvtipt
tsuUtVtk%
}qtCQt{qr
sz 0J/Rs7
Zpytm
xztqc
sbq!yt}Fu{s.l@*s
[7=vy/-4yx3sUmXUwsm
xa-Mz|w
ze'V~R
AP-U,VeW3mrLw
!|K9z0rn
^d:}uR
v[{{ju0wr
s{Vvkn|0}(u)|eint7
hM[)9/MhUM
Ei[w=
'Gw@gK;
~v&vta
_KMxYwIr
~-(~.[
V~)~]~!~EYph[~i%~p
0qUH9)]@"
qAVJ}e~\|
%y-eum
mAeke=Qy
\UVhUAeY,$}W_p65vM
)x>(k8
k5ewaBZe
~(EUTPvi
,sWJr`see
(4H5]3`
W+'{o3
/QWwm;+Yi)?P
Kwi]w@
K;Gsu[%-*5fu
n=t]m{Fof#njs/+ya)M
#+V!,y$sm:
s]+Zs;KlB
qu]#Wk@w)1&?e
.o1X7Bo|{'}ru1^
s*9bu]
,!gcoa@)Xk
6UTMfzcu
i3GWws@
dfUKAu]Cq/KGQyYZm\<?'yt
nCAL+Gu
ufn3Mc
wOkuo'
{iYp?B
SC|i&ul
AKX%'W
{pM^laG
WOEsmiGk
uyNA0:ke
@AfrQJfX#yuct/@gwUyut]hir/c
Fp1z'$t]<
Odsma5wj] j7B7VAQm?$5U/
*9U).cd)|
y}M9v+Rk]u
Qw,mF#
dGuoO#O!d
Su]XX!Ut!
({A#R%
*Wi%1Ea
k=R:[o
{r5;k?"]u1R?
a5t1skFt
y^w{5mJc
Vo@ukDI_de=6sYY.
-r/u{YyMh?fQ=yI
MK.Zt]
p3(IOCn
iA#%cH'uc=CIWudAi
;@@ik=]=LcgC^7t5]PU&DOd[
l)vNkBu]O
To$!Ou]C?nfseSH7
'u$!]1V@]c!?kw
-u]u(J
5<!11MS+p]
gcbQk^;=%_
-mdQP#as]
U;Pubu*EVax}C,
AENe9b+pq*
Z!(\7w{c
GetLastErrorModuleHand
cAddresso
RtlUnwif9Wb
a&ArgAexit
HnsAsignal`4-kaptersInfo
i??0PATH@@QAE@XZ
YDSTRING
|w9PEL
?cm~ lH/.text:
K(P.data@
XPTPSWXaD$j
CRTDLL.DLL
iphlpapi.DLL
KERNEL32.DLL
ntdll.dll
ulib.dll
USER32.DLL
GetAdaptersInfo
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
RtlFreeHeap
??0PATH@@QAE@XZ
GetCursorInfo
(_Ah?#V
)/w;NH^qvY
< HxRn
#W^cFun0
A8Pb@YgFSk5'}
hEkS9Ti6tg/
wi[#aYX///(
FJ`[8.
YCXf)W
u8HREi
6Hx\Z&
k{#;b7sO
zny:lJu
5vZce!z
@V`)(M9
p6{*V\
7`RUc@-uJ?
Z e,[#
m7:ZE`7.}M!V
q*R{*w
<_OU*>an-%
![]X&9!Lf
69`s)g
rf`fNb4iH|
3:ffaM
-:CQJ<
ET.,B;mZG
&*bq}No'u

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.