1.2
低危

2625ade9f7c84c8a2261922a709de14f1e3c65feb74196121f92fc0fcf7c0076

2625ade9f7c84c8a2261922a709de14f1e3c65feb74196121f92fc0fcf7c0076.exe

分析耗时

195s

最近分析

360天前

文件大小

128.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR DELF
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.81
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba Worm:Win32/Mydoom.bc5f893d 20190527 0.3.0.5
Avast Win32:Evo-gen [Susp] 20200519 18.4.3895.0
Baidu Win32.Trojan.Delf.j 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_80% (W) 20190702 1.0
Kingsoft None 20200519 2013.8.14.323
McAfee Artemis!C30EBB8EBDBD 20200519 6.0.6.653
Tencent Malware.Win32.Gencirc.10b07aad 20200519 1.0.0.1
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (6 个事件)
section {'name': 'CODE', 'virtual_address': '0x00001000', 'virtual_size': '0x0000a000', 'size_of_data': '0x00005600', 'entropy': 7.992235378339067} entropy 7.992235378339067 description 发现高熵的节
section {'name': 'DATA', 'virtual_address': '0x0000b000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000200', 'entropy': 7.537443661508319} entropy 7.537443661508319 description 发现高熵的节
section {'name': '.idata', 'virtual_address': '0x0000e000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000600', 'entropy': 7.871666928051274} entropy 7.871666928051274 description 发现高熵的节
section {'name': '.rdata', 'virtual_address': '0x00010000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000200', 'entropy': 7.582096724860129} entropy 7.582096724860129 description 发现高熵的节
section {'name': '', 'virtual_address': '0x00013000', 'virtual_size': '0x00003000', 'size_of_data': '0x00002400', 'entropy': 7.596943615976609} entropy 7.596943615976609 description 发现高熵的节
entropy 0.9705882352941176 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 63 个反病毒引擎识别为恶意 (50 out of 63 个事件)
ALYac Generic.Malware.Sdld.C44D850D
APEX Malicious
AVG Win32:Evo-gen [Susp]
Acronis suspicious
Ad-Aware Generic.Malware.Sdld.C44D850D
AhnLab-V3 Backdoor/Win32.Delf.R257860
Alibaba Worm:Win32/Mydoom.bc5f893d
Antiy-AVL Trojan[Backdoor]/Win32.Delf
Arcabit Generic.Malware.Sdld.C44D850D
Avast Win32:Evo-gen [Susp]
Avira TR/Dropper.Gen
Baidu Win32.Trojan.Delf.j
BitDefender Generic.Malware.Sdld.C44D850D
BitDefenderTheta AI:Packer.C1CA229C21
Comodo Backdoor.Win32.Delf.ste@4wua2l
CrowdStrike win/malicious_confidence_80% (W)
Cybereason malicious.ebdbdd
Cylance Unsafe
Cyren W32/Delfloader.B.gen!Eldorado
DrWeb Trojan.Siggen3.61286
ESET-NOD32 a variant of Win32/LunaStorm.D
Emsisoft Generic.Malware.Sdld.C44D850D (B)
Endgame malicious (high confidence)
F-Prot W32/Delfloader.B.gen!Eldorado
F-Secure Trojan.TR/Dropper.Gen
FireEye Generic.mg.c30ebb8ebdbdd74e
Fortinet W32/Delf.CST!tr
GData Generic.Malware.Sdld.C44D850D
Ikarus Worm.Win32.Lunastorm
Invincea heuristic
Jiangmin Backdoor.Delf.hzu
K7AntiVirus Trojan ( 000010291 )
K7GW Trojan ( 000010291 )
Kaspersky Backdoor.Win32.Delf.cst
Lionic Trojan.Win32.Delf.tpLp
MAX malware (ai score=89)
Malwarebytes Trojan.Delf
MaxSecure Trojan.W32.Delf.CST
McAfee Artemis!C30EBB8EBDBD
McAfee-GW-Edition BehavesLike.Win32.Backdoor.cc
MicroWorld-eScan Generic.Malware.Sdld.C44D850D
Microsoft Worm:Win32/Mydoom.PB!MTB
NANO-Antivirus Trojan.Win32.Delf.fnpcbp
Panda Trj/Genetic.gen
Qihoo-360 Win32/Trojan.Delf.B
Rising Backdoor.Delf!1.64C1 (CLOUD)
Sangfor Malware
SentinelOne DFI - Suspicious PE
Sophos Troj/Agent-BBLI
Symantec SMG.Heur!gen
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1992-06-20 06:22:17

PE Imphash

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
CODE 0x00001000 0x0000a000 0x00005600 7.992235378339067
DATA 0x0000b000 0x00001000 0x00000200 7.537443661508319
BSS 0x0000c000 0x00002000 0x00000000 0.0
.idata 0x0000e000 0x00001000 0x00000600 7.871666928051274
.tls 0x0000f000 0x00001000 0x00000000 0.0
.rdata 0x00010000 0x00002000 0x00000200 7.582096724860129
.rsrc 0x00012000 0x00001000 0x00000400 6.753357619284395
0x00013000 0x00003000 0x00002400 7.596943615976609

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000150be 0x000002e8 LANG_ENGLISH SUBLANG_ENGLISH_PHILIPPINES None
RT_RCDATA 0x00012448 0x000000a8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00012448 0x000000a8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x000150aa 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_PHILIPPINES None

Imports

Library kernel32.dll:
0x414c2e GetModuleHandleA
Library user32.dll:
0x414c36 MessageBoxA

L!This program must be run under Win32
.idata
.rdata
8\plJ
{{~nZc
9HGuX+r)"
xT{5-l;^`
y.%mtB)DHV
5)VBdY
t;jj+iOi%
nj`.J[D
,"V:&Q>|KE`
nST(>v
!*QqM5#
]Wi[m.0P
PJ8Sn;La.v
3pyG(Tv;L=dxjp
rdK'p pQ
">nPccB
W?qK{_|
F<[Qg%
VTOoU}
r'a%=xF;
Nzv@UG~
/(>)Xod?T
/G@1w!K]@
Z{CDkZ$
37; WpA
&T;$c^_v>Bq
OdtG=yK
@w7ON2~7{
c&N1%4
B(N&U(gO.Q
xYb4~6Ys
1P\1S
sc~%Pa=A|94
G)Ek|u'8^/
YY &p!`e
;~c!,?y3_
%"L]GS[B
T n.AT
X\IkRl
Ko0X]ZH>K
$.a1X_w4'k.
:OgKcfp
@~3?rP+l/eE,
QZ_c}Wid@
<4fKN@h
;:.i%<FS
tv{%7/7vz
A/b'P<a:[AOL)>>0
(~)<.u
-%\UU8)
@'!Rfi
SiOIg'
RzP=\ ?o/T~P
w#6IBV^3f_
"(]x-@@P).,
4v&@m6IQ#
\mvD8+
:W~/>H,
`YJ"td3
3@'@{KFe:'Y#q_Q
^T"_z*
V#Sd:?rc
b{kZK<
NPcBsP
70eJ5X~{O-4J
$e([47t$
] >g2j
_p's;4*iG?mJNX
Td2Y9TN:v
z:lxXq
xj3eJ<IJ
9C_/W4m?+M<V"zJ
76(SY:
AG%%sO|;dm
$)8heVA
\dmY&0
NiG0[\s
]*}6K>j`g
^0t$DB;`6>l?-v%E$N U-tf
y-"'Z:
O,W6C'hF3|
{s5k){
)dh2]+
D .b[1fV
3>|X`NZdQF;?%>cWh,.9
}"P38*fO
ZeY,7JB
vt;vwHT
l (_\CV?
Xt%W,p
aHAkf,#
* !s2`WUmR
6j|f[gk)h
$G{!6y}g
b"7S#NaLr
Lv$9^
9.u2; zZS
_rtNCfa
$brI~u@2(q}')H
ZDFenI
`mZRj;
Bz:%E}
7n}@49
p,6Tl6eje
U2KWD^4
V!grHg
$`t|F6z:
: %kh<F}WAcTvcQg
0HiA<k`<rdp}G!j
p,.-ZE]
a3<_bw]&
qH\zn!x
*Mj=gK$U?/[j)
dKLot>GP_K9I2V
>H#T^=V9?ki
PbPhX
Cs" uuQ6+$K`t
gDvM\~
.MM[RMRG[~i;g
qUsVPEd/
r;zfk"Ye
K~#$18-q
M12;-
0)}P"N'T*NR-
$-vog|
,5Gvd#
8d`bl)!
!5{y9/-b
UCbPK1>bx
r2fh1q
FEg[8<#
~KW7%e19IN
^@|?7u!
H9IQl_N4
7s:R7NL,KS
,&Y '`E
$7lp5G9
aWJfJwp
_-yJ5tw
p'L*qpQ
6,K@|[l6Y
K]^|7R0=
l\fS6QIjdnr0!qQqHSW
K%LycGu
RK^f@{
TW7fKD
@]Z"-?
4gu[3u[vT$~
n:{gNMh
)W+M S
5'U.+_:k
.5?/ BA=.2M
3-+:cv[[M
f~@07i%v
S,dxnQJ
:\,P@Ccst
KQ-wzN#}vC
JmsxP1MX"b%
%iSmOU
vfuUt}^
+wtp(f]
pM@=p)&
~S1%%aQdV
)vbM,D
F;gB7}jy|T
MfybNS)i[H<+w
Dov)XE
4Od4,`[oc]b
TU#,-Z
]NO|j&
$Tjms_'h=4
'BTzL&].
l.5yX}VzpJeg
,ndn{%
IeE-Ibfe
D"=XCvbf4>m/x7}y8>
< fX1?k=79q
BMA^{LRG
N }~l;
],PfO_:c
qhM}`\
Y5q:+=
kB`k+}e
Thn"WN
E o`J$.
$pAOFtG
0Cp{@GW
#sVh"3'aq
(y?+r}d8$2
QriL~@
r#oE:SI%y(g@{
_s]7[G
v4f.XO
K`!A%
rz2L1!(E
r!Qp]iIx
fu.,[%RShFp66
#G/#W
4|f8\|5T?>b$X8
qDRcJ&DV
1C4 O;[K@
gWS=O.dctf+
\K#H#n veo
dJH5vY}&85%V
W~3 L'7G@(t
[NWaeK
#M8>hyt)[5
Q4kco!fOMta
<5BpDh=
b:rKi)6DZ,_+
3sNZ2@,a}S
xNqz1eF!BG
QlQX-Ee
d^X[
;g|I[V
=->X%J
/)|*qI8
*o@0nt
4#_NIP
(R;Lx
NZJ8qLU
9(0L,?3
'9Yt;W|LW
QqX9.8Q
{g#y9a:
;oGP1'-U:6gnpL:
t#/4Qw3
& 6HycW
nM'e7A
)jdhiIYo&
|3ih#^
@D}`;i-
o.6QpQmPE% cZlZu
70o/7B
<D?](UwtcrU "
{F8V/dVED'*
><Bck9
o4ju~vkK|
lwK'15|Wx
Ep4x8L _p
?F}OG_=
G!FK8=
a0I$@7oY_yiKM
op.TNL$/*/'b>f
s!$m!9P[`
{1.UM;
sAm-qLa6
=`|mgl
W,,RoI
x*Qx/4
^zCo;X
E%yU|r
_VC dy.8HH]
%d$pZ
HSW59CB
:,kC1?5A4m}
SH=N- , l
`$,">:
[!%!;+]z~
I_G{qf
?fCQgn@,9;d=
,/z/buX
}C)P')
FAc$t{)0Y{"(i
uLD|obeV
{|b]"d
|%-g2H
UC,[<qal
Y?d*||B
4\;;2$"
2[4zu;O2|
WDbj\u@\ib[t
*^vIs4}%N$
DKUdj*6
..<NRi
P&-'_z
ItN=\s
|?xCBP
H\gd96
'yaJEO"AAN
)!9<Bg
^+h7Cfw<G
7/HQ U&Rd
eLNUOa
[b,_K8
d~R#Frk6U6n
X"nH^|-<Tl71
EX>mA,rb>Kou9$G?0I
bDAm|O]
bi%w )7R'+!w
2%&Lc~
(#Cp$d
@~=ADZP}IF}KBD
FBD!%Q:Z<z
+x&h!W
HM&AgSQQ_^
AO!}w
lOm-eH&wkc
'?0?F2
@uGyJ:=bHw*0;:F5161s
X[+@O]b
|!g9UKgD|?
x (Pbv
jDiI6.&c8&
llz 0f7}Ooiv
?vR{98
qId\Jq4dg
*22\tJ
@&)k<-
nKKi2OT1
c4aQ_SG?KDV&f3
~y;cis
lODtUw%{CZ:Gl/<fk[tXIRG6oI
)>WTsRT
R{xT^`
6+i/+u~S
0dzshrOxut
_a[5P
OV]VM+H>
_~_9ElI?FmL
G`MvBIS
Q!w{yLQ*~
=d:GO9
a_9(cl3
v#C{}nD8
gY66@S
&\XJ$I
~FeEY#
RDL:_p
6E"2P9l
l|9[W
K@AnZ~
:tRr|\'
l&{_~F_9P40;x. ;w5zC'
txgI'0
,"!<`jrQ
g|3J$.
r1H.dZ7sg
A>teG~
q~^|)^A@ <
,j_<ui K}nRQF{;f!En-?
[89M;4&
V^*R(nk
h;uVR(2 Cm
2kobW"
L}e^iD
NHip$e
A|E7TGy7B@';@V
lb{FNmMC
+zT58O
OBt"`]9
{B2=Kx
VD%#!byC
iq`61R
gq~caF
{R8E`>]b
b9#dI+
?_BwtT
4>\q6-
)`f.K+
|a\V(,)
!?g&!+g
Y=Ip2:
;swl/;1)jVEm]q]
6v/G|2i
trO:mZ@-
gCgtd%b},
5S,GP=9
Hg)W:;o[+
#lP`KW
KYqfin
[/lq4cM
+bqyt;t
ipdl^djIx
>WN*ra
cal7K-s-
dX/$9
Hs%y\b
yR=@2Q
3ECUWV
!!$yzx
&W5II*@
Q^i ?h*
IK$if7;~(>
M*:wVY
~$^,EZJD.
/P|{j${w
3o2^,zZ+\M
R{<TN% sWbZXz
5.U2KcqGs%
E&W2V%SKf$XOa IL
SpSkZ`
Bt|q$|-
Cd{tts
rO<75s/P
U9z8Y@k/6&<
=q"$xB
(y&fK`
V|x[VT
HRKCLkR
t__C>eT%E
BPZAc+{
ixF:47Zr
S;>^`j
Qrt"CIh`
bxXQDJL
w&E4]#
q2txp[6O^
\.qd!#
1O[,x9e0
v@!#{Nf@@
:=d,=2Z
C d)3E
nGJctwdG
fu&X-o
q"<=HP,
]->Srljz/r
U<E5L\
q3Oul1z
PB1uaH
O6l{VC
h}Gjm
w$/t:TI1Q!=
,<+p4M_D
$]SGkNq
*&Bkd/E5Y
2T|gwP7H
_v?flM\`
CxuN;,Dsm
wuEPo[8
0+%.!r
b,]B4<SAW4[M
dHv9o+
z]7B5L
7bS`_&
T0kxeY
jQ=/i
n|?EWkal|m,?
.MqiiCk.
%=.).pxa2J
zZei3@6MSts9:Gb#
A%H>pI0
IF,fyN+T\
vWBFrn
[o*$;yt
UC[e~O
$ H|."
[N;bZ8:7;'9Rpl
8"no'C>Jc
k0k[[zm+fP%
*Z XS,
K9wD7|lY3sj
GiwMN-J< c
<BPck9
l^Nz>v
!2)3Ep
6h_ZG/)m2a4w
RY[6I'Zv*75"
g-Qt+]
i_*=_9kT
=YwvArX,tra
V>)4UYD?fE\t^y
ySJ>P5
u;*q!f>
;&&iQ$P/
uE9"w\
S@XVhS6
D";xO4u6cs
gvhF;0
Fu'm5o
|"+'kM
r@\h1m
Iro}HB
xe0tE}i
lf5Pu^2gw3,+
Fh@xn/(0Sc>]Jb%
5gH6T'
!n*{P!
[%eViJI'
U,=3c(
,T^AC`#v
sEx<>1;
tQRp^33gxGgXE
u'"N$Z51saJ%GwPVw
=^E00B
c{(T`a$
zPHb;4]
3-|QtLo>
3Q!rB{6gHKa
mSL}_Uz]
$ H\c0b<
BJJ-;+'
{2.Zdnz>T"
d]O!oT|D
|:roazX'[sfm4y
7LraH]j
dZt@'$2
Mz*M&{-Q]
8.J^7Gp!rL
S{eNgi[@
LCd'bg6#
{<:y&q
DI>nip
C*ShlAP7
+ockvpMY
aFu3nc
boV>!MyD>N
xBIO$fc=?&<W
X.b|2zUi{gG#lih!jP7]9j
33es#Lzy
Ac-YUEIA+YdeQNmw'
iA|8RtY#
+d!JS?
J0}UR
@8je9D<W
6r,&$l
[9}*UV<mXt08iP
DPGP?HrTrD
M{UouM
g!t]4{
vl+^LW^Yk
K66-Q\$J&vZ
A\#N2!
6{>=64
tBO\~|o/vjVSh8(#MnXVT1\
ATc@G:kg
:b'|vhtv&|
WRG1`v/
0KrFTSuU4
tM2u#vd.:ljGza N
T>5,BD
SJz'"6#
M.c\'"fG
!n+m1b,
y7LtB~s
RdVCQa"YmVVk
XZebx8
oIFv4d(TaX
"T:T. 286DV<VPBDJHVhNhbTV\ZJ
fLn5Q8x@.p\'~\?
@QgS6dXA
"-}"!Y;G_Y(&
H0JA=4dWZqr$04Bl
rC,-0fYG
e$9 Ff
m1&pLZDb_Ge
[ar6!j
gIi@|2
b`-bc'z
18>0?vHfjJf
hq<q%!?
Er}Ey\
c6mQTf
F%vU+R
,sOj=k
H)%~ji\
Me>nosj:+$1F&+%H^/
#qVEf(+k+*m!
[%G4d~Q>
lq-JWe
P]M[=7(e
S&s?'/
7q#7!QS[
%'c-jZq_-q
Mi_jtW
W~`v|Fx}
g56~^Q
&i]/F\[C
v=kT:[2oQ
=@DA+W~|)G>
>>:v!r2M$
MF<w:l}I
?Cx*rg,K~TM
=>#$h\
whVB=B
3&%._N5
E..if,hr
'h2c<1
%=1{~DvY
a=#IDU
$aQ*|'.D
Z=hylltY
F9fKL#
`f:]sa%n
d]NV>Cs7B0
_Vwt8z
^:5#tL
%Ej^@%TC
_2ugrW-l
6:MUiL{c})PW
5|4;28r?*2l<eY
k4E/Tf
FOXj[R
U})vly]
`KPStqG?NrFXhOr
#BLxn.*
`m64J{
C&f&r:
2 {.LXg>
ROt;{rC:H6v_-
k=/4OzK
KUE*EFMTZ
p(O!&1,Gi88$+
P? cQc
^qh7HM
&pL+B*26
Jw3TI|X1
dke!\eS@os
|1,Z5E'L:6
8;JdHm
v;"^c==
>GO$=!&
/vPR;0:
,LwA7'
Q^P_{pw!mG9
LaUKzK
z.~t7w
.6.,?B
N$AMjN]\ GCa6
8!C0$4ELj^
v1w'Sg
0xI:uf#V
u6Pr,;\~L
cE'UiCB
ox/+t[
>T.:x7
F.m q3X
D)-_rL8$P>r42
aF,lF,
=nky12
E0s'u{3eu
k?$J;=L{
qB>f5Y
?hswN-gS
kernel32.dll
user32.dll
GetModuleHandleA
MessageBoxA
uhPD;ywpY}&l>
i.BI{7<#v(nH"P
Z9Z<"sens\~
L==Qp*d[0
\;+Lw~sC~
tbjxNZ(
Mr![jm6O~2
6PI& $NZb~
bqdrRZ7
A=nMkx7.
zF&&Lfos@~
hcdxXU
Z7%Pj~e
|:=yho6F?^d`c=Q
>}I! Rcbb
<^!ubnO
F4-Vj+
t-H30"
Gggfv@
&vvggd
wwgbvt
1wwwr"gf@
1wwwr"vv@
wr""gf@
wr""&f@
ww"w""@
1wr'""@
3333;31
333333
sp`x`laE
jrYVK\~NA8XvC
W}vy_jmx
LL@GGNv
8Y>cPH
^.~_T@\|p
1qx0zi
-i7g~jw
.9'n#\{?
?" wBQ
?hD^v[Q
a{Hjev
jC?UQ67
lIb9oa
M'Jg%|
76r@q"-t,MiX
4LWN1D-N
$@-*{
>3uwZ6H7W
OzOXr4V|7i?Q
5';+FV
3jNqz2(X'!
_i0oT>`"SbXm
#vocUdi
@FS,_-*
:--KWrw
Ku'{q}L
)ye(Y)bVt
|qxf+0
K'(6*sq,*n
$cc6];A
Xw76>#w|
BoH^,_
u/?2~(
4ja74JLf:hT[H=/TZ
pu{,0CU:
p.9t"u\6x5vq
gTG(1@T[i/3
&>*[j:<G_1H%M
)x-e9|
?)6sUtP;n
rPfh/3Au
hx_iyd
WzfFIp]8s.`
/Ie8B}?}>F zCN"VCS
7YQ(GP
=14e('3p
EV[/k*u
6)2t=%
-]`F`E
u&oLz^:
FXozq^
Qt>aP"Sm8Du)uli99d
H4f>Mb
mfAL=F
n+8?J`S
0nM"W5Xz
^/SZoqM
:m*OsP
kZX2f.
<Oj@O.
@^;7"<hCX
G=^9FE
I;'l+r7
UeEfi,
K9yo1N.|.
\zZ)1V
;%\}y"4^
*XfP&[PN5
u&`1"hA%'
3~wpNb@
ElYrxsBgCQ0
Iw5Nya5
MO92mw
`#IW,W
eEa+Ge!
]<tHRU+%
Wk>0R]$<{
%@GaTmbD%fpJ'f9A}kH
B?R;b@
:jm/N%o?
D~:=h*
C+QyD8+!m
^2(A5I0E$[ Fk#[
U/xT)
%hKWCev
5J}NzHK+XL;[r
,b5"XO[vs1
jGWB]!0$h
}s._l"w
=:Sg:?
Y!As<saQ{"
e|H\*5
BSW-l(
`Y{.|f4F,$
_XNfFi;
y+m[kh
"h&?wby&M
gyD,):t0GF\-
-Noix;^5
'"0@"eI?l
ZLRC-bs
uxt.Ou$
+Bjt(uQDSc'2lw5
n sRPAmN_W
kZ0=jZI
Mrpn]v
9ueh"S
(K,v>_4Y
5y4Q#mP}
B#nJ01mT0
fF_M1=11
?4I/yJ&FR
2 +20D"
n0!kx7
&XBz!)O@FA~
j<Qj)T!:R
%bMk FkE
yYV YN_f8
@={\8Wv@_8$
g2jOl>q
.D]zl>Z!i \
qDc.")M
;,iToa<$B=BO<xw
!2Z+b|`Jte%
xHhU^P(
X7oVi1Wo&T9
)jY.@+~
A\v,.9
0[6.pvq
c<UZb*4+1
d/rg~\m
vKYKN
n+l~e
^!<Trl'%
0o+qd{!E`
l0N~t}
Lsm(CPP&57(
&mGGwMY)
w@ U%nO
[V!&9#Mq
s,p|9t1E
i9|C{cq
I!I'Fz
#Z2OAP,o
-+l|Qs.o
RYdI*9
RQw:}&/
y)@v'H
FVFzmc$
_aJe\0
jPDp1RwRXG
70N-A<oP!hrVr?
;zO3NSd}jk)
&bkcrzms[%YdS
`~p'v`Y!
z[{+N#
`%N[ohC
pvXCk4jg
Y'Q;hSf@v
A`s%^<*
>hv->[~O]
;f|` TCaAGul!6
\7*1yDw&1
*+;,gv9=
(BXn+NMP1'F@v
tg8yM}
1/]8OTzZ
SE3]V"
++CX'3<<
Eyv;ks
B+2g\*w7
5b]P_'
auhz@
Ac&%?Ky.y
gbL%$v
][d+Wqw"
GbGTyA)
2;Fun%
P]D&#\#=2A^
rDAu[
pR~}0jp
q0q,9j~J3)
S^jcQdH
,rdd*)
24?\+[
zo0Z>:
-MbM}0"
s1jhbTc
]h}a%:S
4!-E:Bl |<u
1S?.}m4U@De
?V^4i[_5R#
7{:oALQPUDnI
9mfWP_
c.]Q.[4l
g>Cd\g
Q[dx]'=7z
127'uD^
h5"HD.p
bjbbRsHr
cgAXZz
z9XY,&
[^ItA
s>mq[L%54aw
\YK6se@%
XF\gzY`U
nSR9_
qu'\CW=
k>i2g1]'Ot
5<O!U3
z%Yo~WDgR
yV};0_-
w+%#8B
Q^L&gM"E)
|\G"xK:
B!O-J_#
6tO(wi
hAPzX
/3sC6= m^>_R))
[I=o^Z!
s7S rx#
!Ok!)O?/
"} G)p
M8fKn/F
M=\ ( vVm=z{
3`Lgf,})l
MPsSiR|q_+Tv
ls,t{fD},q4L]
w4d8^@mo6V3E-[
p5AZp t?&-
W~?(K>Qd
j*{ v[qSh}
4zB,}eZ
nP=2E<0Q
BV5/GnQ
<6GH3l
zVau2*
:#iq/HK
Wr{Iee$XJX2\xL
<^2irCz5
V:W/{7Q7
9/Xew=
6X*zj4U^Q
_^:SrD'^du~*yJfJ
G(E:223-<=R
a\NO4}k
U`M21;
JF+?m=
_W)?/b((?w
]HS\a(v:.l
$UC(*1
$,.Q&ED
CY'jN}Q
W-V^he}\
U=! ub
j{h_BEjx5/+kD`
{y?YbhW[
4gyn*E
C%#|t@
y_,,mAl{qb[
Kw;,%S{|qZ&O
<LC}!|eDS
Sk^dQm
=2jz0l"M
eIDIh_
7"rV{!@}B+RtQ
L$DCGD
FaMf9(
WSYWHy>z
{:U7lcX
VzwJY=!T
'Tby!f
S*"K-:I
|.v!H+t
xsKv[/EH
kTprbOB
9OJeOv
va[r9S
?PZ|a;
zILhAF<HM_@O3$
'<-Njc
BE>42ct
rwKq]Y
^E+RSg%?8n
|Zq#kdQ{I"&=
$zpdZZN5 :@_GwS\{]
EvW8Ep"
U#|_oeb_*P
`5)Y5hR
<k$,O$:M
@cs~9~jk^s:k\<T
Xe08K@K|xu
xWO[R{hA0
T0[E&S
oO=&=t
$l|AbXV
)mT@#L^>
2S{opS"FHxU
s<26XpGHSO)<cF
?gVzESE
bC~snA:9)=01
c"a;*D$d,
db94\bla(dc
{>5{>cS
PtF?6
:n8E.,,^~{yD+
~>w38*c08m8$`L80)xl<
Nl,ZT`L?
}K[U p~.r|!
Q?7>"*C
{8sq~]l|
b_|J(F
)ZH%( qH'
!?UGSe{[
ueS8|p/2i9uN+;
TC|TIJ
qx746gS%+
==b|?<pH?\
B\)X@mPT5IV[s
p><7&6o-W?U
hhml4~]
O",#Ku
a'l"{{~B*f
%_LJQ~/
')pB=4n
{%0|V\";M-
;131i?pf}Dig
X\mY=nt\
9GkAjs9
T4Qt9qAXR
rKk#NLU)
_-CMZX1
rwyVG
TS?wZ3a
ahz%*SM
$-3-c;
% ^9{&V
?ocehC0Pm3x
i1^i~&
S=Rkgab$Vb>_~6^
&~}^U
g#%/]
w_gP<t
*QL</WL%
gk`>"*"X
[B,8{0
@`OJ8|e7x&R
5"+$cr4W
"?g&>Y|-m
B6t"=p
Io7X2?
VxM?a,"\4(5
rz/>+@
}AmXN)YOS+F
CjLT>=d7
,!U0%@
U4*\Q~o:
K.6\T]bN
NV2uki:oz2D
vMA8S>
Pp-]m_
m4(7[a5
wE^aX[
~Cw\!s=!x.$)oIF=
Jim/0|U
rQQ?yd^;5}vb
*=-mz2
He-,xa
xp_.+m
/X$c0FC:*Q
Gwb{f]\
d)TEkG^f*me
lVkr#<|
)1g4-W<
Cn?QRr
/4w8eE6MI
s!zk4Rp
+m%TKg
Oxs\UdF"
ky9,ndM XbUj
T8P9{J
9X+w6{*L
REcT2xB
%<)%/?-
DD{`-y{Q*#=E!
v(J .%.
:sH|B7
.n^TaZ`
]8wy>(f
|3R{0E
9@M=j*
L7Hph|
saCR!\vb"
"*A+<Jnj
V_%8<6
\q("L?fa
;f~:GHP3B
l\n\Uk
5$Y3u
o&Wvm)
z'yE"qE*
[j~mJp
n0(F?P_<L"2o*
gxCBGJC}
lsB8X(N
ml';$@
Mn =~"
DGH;be{*xd
}7 P_T!l%YM\bC
u&6i7;
fu*4x$
bo\AXFpdx(wR `
>bMC't
,m3f[;
3e2 yn{Uk.K
|9z+ry
.1.;wF@Y
~[_D_UU
=E~!O4grl>Rr2?
S1IO~ft|
)7pPb+[
1UT{1)
ZKQ6sY_Pb
q{L**cV
m94]cA
f2b4]i&N8a
,z D"|:V!
,R$/_+/G.sbgk
NkMk:G
Otaf?fS[0`2
y>B5BTk
%PkMs1c[
@%|"py_!H+
)9G|ZC
erlXz/{
<TffW4+.LF
_@m+s9
&,^0hD=
A%^xW'-9
s#qI0y
2NQ)<hp,
eK}[CTAM
Q;$t+gM
{l/vQ*
9$7V,os
.fEc[Xd
JUx[6MToI
g0\Z8q5aWK"8
AZ#rWBk%
E{z5*
ak:-Qo{KL
U5eRlG5QEvN8Q
dh)[fN
t[r=Jq3uk?C
4X.MyB;
a5,ssda
c!pSvB_
]x.E<@
l5=6!0
:j]c)Vy
T"p]#{0
Gc"t-2
m#Zp<F+SR
3fW^RS,Cka
}/1,-O=5Jq
6IUklqpM~
(4Nz1G
U<Jb^W[
C!2*?&f6^VJch
F1] Wo
Gj\JThE6
${[&_=
F}R8_<S
g|F*"FuI
JT_1S_b
-/oVBH4j
Ta-;,k
EJZFb3
ZlCfn5S
R|e!3>)
$lykcly2L
]UM@-M
U&BbC[>&Y1xm
juhg`,DkWF"
Ic,2N7>
/3y({le!{
3lH4v=#GT["1qy<
K~I^ I\+
6N[v/9y
8fn%'VU2
8V1;+<
j*>r=g`
!#]k{&k!E
}n 2yeL
a?qcYD
W4z([_N
.W~0H?IJpM
N|v'lT"H
{VA*M9!,`5&"
[2{t"65}v
G w-I%K
W/OUHQ0_2;G
K9sS0k
wS$;'(}Ty?]
Aam`,
6TM=#F%|(^
ks9#g'a
ntf1kf
8g2]sP:
|asz[rIn@H
8&RFe+VkZ@a
&@^CUU
f8a3p[
yS6f1S 8gCJ
rNwq;bp\o"
48=~}"R
D4`j]P
bbio/]6
g1(;p@D~+
d 2EaP;
3u`q)\(
,@ZHo/
G;T,Ha/\5?
dSnhT237.[
USOQ^P
[ey75*gZ*b^Mzmk
{,H{Q#
j("[Ug<
2|?y/x
]~tV;>
B/Pau]
.)8}5q$2}DnbV
% ^#)z
=@\`D[csrE.0
oA]bDE
v$wAf{Q
.P+:&ePK
pDiR/DV
L8NV)_
u >Lxq
%A9Hk7I
28u0b(q
Y1)d9[
Zn"21,T6BD\
Oi&h=,Rhl
zQ5o7_
Id$$M2
j_b\mq
qG`iMrp
]q1X9Y
hF?IC7h>'5
0%xhJE$
TE/P^+v[
8>Tv=U+V
@d@m#~jq
mEv>\)
HV@ Oc"WYI~>Y7k
t74sRP
H%M3*K1
|>u{gps?
Uw8wc"
WHNn$
Pr1uJeqew:6
pK;h+r
,~dVUPnI7&YjP{Z+D:T
24'`z{#/7!
|;h(,|ptw
Py}) -mg
=~@1B`cE6$$
:$l=G/2
t,KJ4X
|C+lrL+
Y_'^l"w
o<3WGA_J
T*O;ab
rtvFL]p.TP>T
S|FC.3x
" $Br{
d cWkf
m1D3MJL3E
j,IE/N
1uDBAI
.!Kwt|
AEAtn~`wF
h,c/[#
(4;o'q
jt^c?r_.
~s`x~{Tq{
VMXg3>
V$7iy-
zf*YH+NeoqkF
%_,?C;g
VexU,s%I
QMS z/z
btCfS{BG
(PP6=G7V
y_.>Hh"{
PbV#+3BM:-
O)E4rj$
Lu+T3hP$
sG*(?*
j#.%HD{)?
39ngtR_4
wwH/2R%[
N9?[Ac1g|
8h5Mf1(]w&[{r
:w<zz0
br;oY
L\2]P/
#(z[:y
3bLnoA2S
"m3UEAZUqHK
c fX+J
C6=rOBo
`PWz8K
zcB'52
WUTv24"
Xsh,3r
4YyZh[[F
-s]=[9
e*+_-MyN?
Y#rmmv
j`!nyyn,
R&{qAa9
/$t<*RXRMY
E>)aXa
kTu!C<w|KlE
VDK!u&9=
*I#-f43
e^8iuoV@
Y]-'9StS
Vjv!;bslL
1/[_GigG
a7-]E)
`8o]Bq=% |
78gP!G
<bUtRy
z_U?tH.?zN7v
R,}9_zBHq*vx-c
u1/OF<
aWyG+-\a
(>RJ$OW
.aKxpM6Pr
*qyul T'
8RyLmU
mGrC-&X<[dR',$`,J
.b94l<
&Y'i YW
Rz$b#PQ?k6U}HYQx_F&]
{5;10sF
T_$w&kY
,.06sQ{?,o
2J fFXQ
bX,Yp/F&s?|
YXUiU"
f^G5FybT
[[33Gkv!
?B&"Ddg
n<WnM@
tUART`OwCt?N"V&vRQQO
a/Rwif
6rH 2_
^`<(g-
g>rKHeUz>S?
&^;{OK
cZ6c;IE}*,uM
rcv'w53.T
^a%Idn
4+6?;/d]O5eb<
N3"Qn.1#
.bhbD(Fu9
_\kYGF9$yN$k
,&qZ{L
Q)UF|h
Z,;Yan
Ez48d_,bV
)?Xu+-
.G8[81a
`"E F>
AN{uNO
+kpoX_d>Ifu
7!i"`/(
LQ|SosS8
#o,>6zo[j;B
V%DEhu
lBRjzl,EtJ
=5})1K&iL|
:_\{R-&
5OxTO"Id:
}9z!_p
e~w|ekZJk"f
#m;a56
F.R61F!,/J
bc+\n8
MHP5x+
"m95C/B
&1-@B9"O
9msAAfC&(c%)
<.dV`WVp\
TOd7|kD
(s^\a]|
d_n!BZ)=[w?
4%|qSfOPPP
wS(}r/f
s7u>nE\85fvG
RbZA\+0r
8K."]F
*;vvxZ$t
t{d*\'
m}K-@KZ8?Od%v
%GgC:o
xhk'}L
&+r?CE+?b(L}S!
1X@|'b1
u\:R3(K_
w?iE9f{CV
Es3SZ_JAO
Iz5sVKF9
e_^.(}
'*CD'jnIEUT
CcL=tbMV
nL0<#{
P{mD\1"
-ED]^F
;5YIFj-
F74#nK1/jUg
PwNaQk.
[GKZcH
s3YsU^
WUA(r,
x:.Mhs:2
'ZY8;=
PZh *p
7,GOp[
x%,ClT>,o_
M1e!pE~gZc
Rod/)j
4/*dNv
RQ<EO
x>5F,,O
4(PN[4`ODNm
[a_zN^rG
[@;rt{W/
x^Fl0
d:!*"+
}#`9r?9NJ%7
1@a:_^w#c
|J*)t4
LhWYX5
fLZ%<|
H7uw|<
[(Kv2>W2`<+VM&
Rk'F1=+{
21PoS\e~
]s=1_TA
,Xei^QRlW8wy+C
ag[(]*UhQ$
l s2fHU
qDo\@at
}23=as9Gi+
@w^?]xJS[
\n:V#sW|
1NpV`
N^1%9`
JGD:]M.[
e*v5I@rZ!
`[@[4m+klQ
F!C{="Pj]9b.SNI
kLgO<g:
'/E7A8KP
tpVh&q
8/&Ou
>2[>u(0Z
K+r@c7d,c
ApHc#kl9*y2`
#F~mxMr
Zrf\\?kt!b
6gtIUEvlMq[jT#R
+-6-^=Vt
~Ic^LI
=`Hq%la
9b?$^F
?Y&S2$F!
]8:%|w
Jti_$D
{.(|X
;i'n2^h#O3=
Hu%rUo
eld1o6|z&_vj>1O|m
7J*SsN
BEz(LD
r!%_Iv
.F,>-ew~
rv>Z=z
70$e\l=
&DG*EiU9
27{\j~X
~ EQnSw
auWG^Q0s
E:}v(o/']l
)EWE6c
` )$@'
-S\d(/*:}?
G:p'I"|JV"S0~\s
.o/xK^
UjNg^i%HQ:r[p
=#{@gdx}
||K1`
^P(\CQyS[
Y*{|/n_*
p*Jrk5
T>jj1z[
|y|r"j
cK:Dnn
?Y!)]o<H(
4>2~UqX>
AAwz<:E/f
;p&)3@!|x&q(iE
sS{dCPDo
bw)}!;
QBB$0/7+Lh
P#wLwQ7$
08wCH'BG<
5XGSG]=T
Pc') v5e+jD+
~gu82j;
%A9,~X
=x>#)"O%
m]",7j}V\jP6k
LcsHNyzb
esg[a<
xB9Eq2|
&NUnHx|
c{4La.Mu
^ew_?I{9:jn
lJ2b]y8ZU..6
%r(hA@
iseRfi]jpSA
++HSdI&s
I?KPsSn
TD-~cdP#
BaF{ma
W0B7s E##
`5+5H"k
Nm@kqu
{_cYF^V
uIi1q,
~MX;ge
;?C1tl9S{~@
rHvSWG
aeHBuVB
8+`f)AkF
bFl8K7<
?%~f!A3
dUJ(wu
{7s,)V~j
;?N!=3
vj13TV,?
bjXEO0v
^UPi#9|P#
)ltHF5>:]8
jFsGJ."8`
,~$U1` n)=X!'>
{~8w9[rSV
|EGIT/
2Zz{8`
PS.0R#
iU%+ MY
9Rs9e?5q
hBd_(:
'Ws:)1
kRn,r]U4PId`(nMl<
}Cf`c.x
'>O/6{p
5 ww /`.
<l,&8f<2
#*9D/k
_7@ Mo)~EXt
(}&n_
{E2}=W]I~T
@J&ph:~R
Dfg2s=
^_<282/u]-ED
ZG(J%(f
_ibF^6 o`svO`
iIw^lNUUs
C`;fkM
o.#oc32nX
({K@Nae@H65kaE8.-(BK
3[5&$bYp
z-~+gehvM
22e@Uv+u
X7=b>Z#b
lM)N=$j"
T0WTO;8a
)+1&%E
S4TO%V{(h@ZOj
M=HyIAZ
\s6se$7#
|F2(|~m]%G
GRSim}%
[9vu*CjZry%O
&L;fs{'nD
F)A1VqmyZMO
#3_5A<
<bjE@X
[$YO\K
QTzz*x
~Dxind
IS.gN/T1!
ICC %[l
\F=_1"
:-ai)\
ci8`.U/i3Vvv:TP
fBT2KtgF
9'qG/U_
y*H='a
2|fms.=|!^`O
|1]`"b`k6
}J`_=4
:rx8m[4
9$5WNx:ph
9,j"Ut
Q|`V){-*6
mXc1u:Z-%LYad
f0y=zq+`
!gO*>oTE
*9ugQ/
G&R^Q.pI-
>&Sd[Z9
`6UcPq~
&r2-@#
b+Zeln
p&y\&y
a>*|$g_
)x0q'c"W8.NSN
Q]0&pZKX
GU83]L
MJv1PW!
y/ZYh9a?)[
0}j,%1V
IV=qI-N)<
TP{/x?.
uAylMJV
apMod.
2~a_4Bggj0K_U1
uvpb${`
$=_C>Ih
Bq~sjlbTT
'cy"Pv
^qY2@[,A
T9:.M
w31l8@@ju
Glw15\F{
>[JiD1M
HKWXrFq
JZ+1Iv]%
(uYp%i Tf
EDz~/ks
0}9\bX&KT')h
{C3TLiD
%K}s@vy
4Gkh."
^53myv8HK1"Y`^Y4
Rk6DNY!hi}[
j\V:PD~d3k
?7P9%8p
'aZ/#>
9f>qr<
ur80(N-
BP=QJ(T:]Uev
:%,TMm[4
p/:[!n
R)g7m/*E
VNo%af7BNF
X\|qn9du[
0p@NtG@
\jW+GVr\
CyY8%U{,>KqJ
O]27AxII/p<
U1Gq^\Z
r,"JGQ(IE>
_x{ZO)
`1'Ci}w
;+mW@q
2:Ox6x5y1!bmV
W;cR&9ptz
-sL,(T
6cS1t|Ev5#
1lC>-1i
OX$f+n
cCX@j]
W"6!Fqa}G
4z^m`d^0\i;:E8
FF}4B{K
,V.xy
9?TIGL[
?#Y+[c;
cS=Qwgd
Q+K|Bn Pzi?y`
6Uv!ts+Xo
6'yO 5zYp
JN[)gTA8t1
EqMtPa<Wx
>+rtCd
k=N}b`TjZ
co^c96
u hVfVQG'
en0[1=V{N&1r
^ddEQJ
LghBFf
(_(I7@
PT+-kANSWE
I[w>|h
\rPIr82Et%
E68K@N
tB?Uif
N/"o!?\
cjW7c8
Bf!nb[v
Ky\S_t
l=Y2up
g'bR}TE<*
fuBR9}
^&hkhnY
/.n,bgA
2WI*T}
$<<o6m"S
;8t)qf&
^?&%mu
al{whKBX
|7dJiW
\$[ZhJ[n}.4j>Wh
<@*J%3
9oZy!p<9WLl
fI=B!l
sO&PKY:
k=IgY#Qz
t:6emJSa
5]K&|_il?GFrUYFF
86AFiZdZj
@f5U_w@k
ZVzQy)7
W~Kbh%co7lTq
?(J{__=5N.o)(
f1F*ksh2N!
S}DDj%
D6m.;n_mqXI
Q\A8V.M}::_
/?4p\$@(
THzsIeqL{
b=Dk"_.p3$q
^3iQiN
oq,N+mt|5x{#"C
h|p^_
(LtLVw6|R
9O*A3ta
ZR};H=m
Zcbl@{
J]c"A)P
2T`^-R0M4e:V
dII; :1
+6g>ewf
_A;=a@^g KAqoT0h:)TW5ud+pV
,R,(,Z
RUK;xJ9
{dG zo
kZHi%9F
eB {dv4
!n4V2.
=H_#Q;
5mI6+]-I2"/
dIiZ(Oi
DR2;-d
F~s1GX_XY~G
Mkx}ID7
ng30Uav
[Q n 9N=ah
?]j^>w
%Pe'WD#
e}= U
Kdt!!/0(uG
Dsv-Qdmg
z!`Z6I\ATF
4@!aA>5EY3^:
l}blEJ\)-UHV
/Lt{g
KaJE@O87D
jXpi_w
XSx'`]c
Scw!&w+e~h;>NYA
W40nx+
q@BoPs
o=Q(%i5K3v_FN
!l?*yP&4Y
pDau?~
Qh!AONB
\7<CC}<
B\l6{nC8OQ
;x9Dnp5Q,
VU5fe
B)4QV;
!RN(1l
o$RRZ^U\>
7[}:+T
cS#hKsO8
L"8!Gwn|I
AANI4:$y&K
|YfbfP
MVb8Z0fOLx
ypsG:8
IqkfRG{
Y|Ym',(R
Tfj1^yC:N<T
Afkb&<H"
<lp?@\y@
h;KrcN
;uG!:Ym7\M
Zi\p1Oz&
+9[LI.n1`
SjxCdB"Cx&I
o+f wE
lV8,JHGu+tdK
DG;mroN14$f +/
t+!rHN}
NLK=V2dtA|
\sz\EFMJ
' UyyGuV!N
M'tD*ZC
9ai*!D
B9O<dx<*Q`j`tg.a`S
qc\DR;O9
Z|)ELb&,>RC@L1x
lQzO`[
l%s#y|
FRns4v{ycT
XP]p+>HD?I`vYz5sgon'J1<BEI
b)Hk??lW>~O
gTsYit/3
t9^os[m(
g83L_q
wwIAlO
!7Y%Q$
7=z'<*CW;-^
[l1/>'
O04]'ZaA
@Lod7P/QjW87jMIKr
SN"F~8m?]DL
[]l+ YaG
VW)FVB
^,3Am1Q#~>"wVw
(i#L#MHLM``1|h
kwZ)-$y
8lS="~<eAky6t6
WhrWYN`bow]uM4
WvtUp;5e(q
NYIC!ynfs
mWYhCc
o|.wo?odY
&>A}wM#5D;Tg
>[|$lq.
,3/yO$
x)na3{74"xu'
<Qr&p})D4CMS$`l}s/
Ot,`6%b
aC~Q{'WZk
Ilp;o2Z|
WalAsAuwI
/:>O9$
P"Z_?
WKJ0S),R"e0^l
OH~'9t
4E0|`X
p6mr_&Cu53t
.\DIwJ
, aK%R2Eg
d#CKQ_l:h
)).E?UoL!
F6%1ZDp$S5<
oAk7ld6nq(.
+U}?Fg
LAS.`1
Eu#wn`0&IIf@ZPPPM
2})u]lSII
L[77{ma1
buJ<zS&
ht$?-M6
(LZY/`D
tZ(,$nR)y
=AsuNyhQ]
|XVe6c3\xG8
'1Wk)%
&+-@ bC%Yc
pFJfS"Hx
..oyl1
`z39g;
#\p6a]I($
XE!iTa
@<Xx+tq
!L+r,Xq
KQ['[a{
!|fAXH_#
Z[_1]?Xj]
`mMj^M
dQwu8w&*b
83cr84
H*`m?ErI52M
/=Vjkd=i
i(A>Q'dm]bAao9A
,wVBpXxdHq'va@%k9nu
(^hnF0
Q^M3.0J
A^>dvX&)]
^-sbA06L?/
sd3.9Kc#o;Z
reL"e~?L6By
v6RaJ
\=yK<F
42f!X1,
8%"QBoy`T
+aNo_l
HBs<67p
])t%,o
7zrD?u
Fx[=,M}e
L})f^_F:nd#6K
)0j!%Eo
uGF'>qk
.#"#$if(01hm'V
zJ7qt=;
/owm<IB|<
C1T}NJ
lOYy%lv
0d=|'yfnMk
$\RwH0}
o%gDHKQ.I
[=]Yl6)
wn& UFK2
6x];t7)kq^eDPv
QUA|Q#
RRG\;itd"
QmM$q*9
``+vxa58
wud!R,{
ARrF _
[e`P(E>WF4H<
RbUXFHhSfnp
FLyfT=Vj_8<B.~
!\^fh43
"r'6#X
b&%pI/j
XU4}I&
$voU{\ >opU}
D75rc,
;s":Cm
M.{#^5-8
yMj")'TdW
{(XCH}P4u0
LqK>A0<Q
wp"lvc
WUFsf\
U*8*Ql}
bQW0o@
~Yg@-q[
.9.`B
fKv];(
>y+,eS;F3Q<
m1uv-PTx__jY
c*ueWqB
,B4YPg$umf|S
hn@_+_
3]m-PD
%]0G/*
I];7Nd*Y
Eh>RQ6c9
b!to
K*bvD"WJ=(6p
;-5W4TU*CQ
*ehX=\UhRJ
"!,Slq
f.GlFRHz
F$ibt) &h;\]j[8Ls
T*`:H(k
)NW.?R
~!lP#s1
[1Zb~{
cUV.Qg)
T~Hsh4
GY_o;O
$4%p5XDrL
-`Ggfj
0->5}:hd
?}*>$,
q!^Cvd
>?:-a2
q}.ztw$Dlrj^U||1erK:
!IR8yG4
%BXHSB
Ku=9qe-)|
gJ=-sO
vQ+6~>
oaR uM/Fp
Qd4X>H)jO|6r5jY
P'sp.8q<
XGdTPSgY
t+Ozbg
BcE:gI_%
5GzcMrN
FNQT<eU[
<Kc_`j
T=%6!ZhBpQ6G;wXJ-,u^q
z,>A5o
bGOT%Q
d4F^pG
|!i7_|;
duw5MG.
4in&jb}U@Lv'oQ,
`FiZ;X_I
b1njQ{
:/<l"9U<
"7F9tYz
$,&ajr
?C'YL'THcO
"B4q0I'?
$2#[@5
/aD=CBb#7
G5BjU#sC
PWFvJ)B`
2?[O`4[BR^6t@f
*0W<,P
y?uHd(
X2[K)xW'
),JI~$uCF
'3`h9Pt@;0
9$3RX4
f'*2:6
[|ar>9EY
[_hY..]_
r'LvGIJ
o=MM=ouk
'EC_%4+h"E)`v{P^U;jbZbk
Kf+^J#j=c4
)XP,9~aq4!U)M
DbmSd.
Wz#<8ZJ
~RC:d+_r.8
+JVQ8e
U{nC"{kLb6
'ZUTTV`=
QEmDiU`
dxq\M@T_
av1)[g
2)uii`.9
fj{F6y
L8nX&
E\Ux$:pTv
YQyQ&)BQ
l~'YjE]
Y3|H%Q
t>^@\g
MFn>ph
%/)["
n?:{{2JZ
hX,\*o
CzpkJz/
)8pOj(s
}z^T*A\
i|/03|*Uqg6$C0C7u
_aDFW6
|WtSFgWd
XdzJ+-S
KZVK]=wD
`o=xcR
o(NFm'^
~Yy;l(
U~hEgdx
xI6VA0
|=#gYw'
j<Z9Gmqu
NL;ueAdB^%%
Z}.{m%HI
>fRsttr>K(i'H
?t-g(92q
`yJEf0^fUO
a.v%B|J
7q6l$k}
WIil]+\'u
sc]'^\l
GO$9H-Gj
ahtLPd%
9c_\Kp
A858t{a
E11qQ]m7@Y4
fmxJWl
d ;N&8d
|3.w}VeyW
E)?8Z)=|
vS3hO9\.[}
Rd''MyZIPn
s@ap~4<}v6+n`])*a
SV1*jl
"qz@K<b
HrlT;L.V5-;8#,
&g]~r~
LIG^"(3yC~
6]"Mg*aoV
mHRmMXz
b*>F[cl'
L@DNOn*.KiMy
vJYL]BO9Ebl87:Z$}]=A
,TKC;:9nL
(6=F,x
HtT6/7
rFPT^Y
$`07_D
mAcI4)
\>H"iR
.]!&]Wl@lF4[]
uA}%/:;n
@Gu=9Tdh`
)px!9sQ?bgAbV
3j^tq?<A\
mcW1/~:y?l
i-)ko<$Y}u
cc&]!=
aI26 1
)rbz!LM
zQPS#:=wp
\ f`a^_~
<F&el(D5:rf9
BVxu`C~tb7uTenJ
BXi1H+
\PJc.?
%K,UN56%b
wfz!=m
yPrYnBnbte5
HvGa\7r
,Ia4Hmir
.''["|
F<[UFb
~aMTZ3G[^?=oX:{H0]Y
LzYWQg
P'!9XE*
D5&Drju=#]
-qm#} O!$D[MAu{ir
6c)0W
2ztv;|7U2
KBwqTZ\<ljQG
CQO*Hk3zm
X/I:[vd}M
Njj(A_8gY
#yRVPKc
Rjo@aS p
DoY=f5A'*<*xR^
{gcd5J
*%2won] cX
<1lw{M
OVr7|
X!3z>#
>`ZF\;
GK;U|%
B>4/;;p)
PGY)[&J{
]?UsfW
6uBn638H^
?i2<C8Wni
N-*T[Th
foJJq%r
#cR[cm
hPq|)u5+
,bCBhhqlP
8@Xe K
I;LB_z9
,VrUS6
yW ECn
c$B?]`
G%sra0\d^x@f"@
ro)kz=
g>*-Tu#R
xiG+?.}jM
SDsWUQy
'oF"fw,vI|a
Zmo^H,`
b0dv%;C
2pvNg1NfQ=/
-fY<"^/E
iXzcr_Xn
0Q'0ML
+M#[7AC+
4~eEIuqS
? YPG
1rV-&/Z(J
qd:dBp
$auw3j}~B
4Q$1M?KX
%.\.#S$b_
W3;+$#J$=-}#'q93
\F=pcTmK
;=eeH2
)zs+x1
9s_OasSL
+QFFv?":B
C>fxa2'J
?]i"9<5
HI}v;:d.g
Kk~j7kc.k
=E1V!EoPQ-,
:717?,c
Y:C<;i~f+a
8w%%%2
^8Nhmu)PRouuK;
gx`L-(.jE)o^
BTYdX**t=
u?8g>qYTNky(w
u;..`Xu\N!7\]c
B;lzf0
N,rc]Q
KST8DI
g0/oCr
#>sIICA3.
@QC}|9Smc
J6\KKF
y%;7.^"k9
*S)FG
[w<&)&
gyUv=dsh
s7==`{o_!
&+Ll;3{0
dHbDpM'J
!bPe=m
KzI*G]{
Gu25&jx[
zifT VX>>D"
mw#+Y=
F{HHqex8b|O^0z#
c^tv;bs
m'_`Ve>tC;
kN`1taV%l
_y)57IK5nLfk8M"3Z<
Gn-*s{
f;\i(5|2
1Rj6KZyPr
&|!;*]$(
B?gt.qa]"3bv
gj~%<s8xd2l
b>V!~9
gu`,^e&1
wqN5RCZ
>{kEzf|cFd
,p5{R3
jLIVxvHKG~
0L!Y6G
BpQa8<xw^
6m>E/6
5.$07"KJa<';
P^o|Ub
=s4v;aa5m8
C^=\|0
z<##jZ]}t,
t:U+X_-
8FYZkN
aMJ;Bp
Ax14"$
RG&#xD>
D}V[J'?X\(\Va9
vCt"%<v[`
%|:n3{U":>?E
c:ycs<dRU
qh5%l\\
I;aBd+oRa`.&nv
sWzkAj
&+=k8t|X
w.zWWG
8b<LGgtUb@a
QS&dgw]yiZ
g_\p%j~V%
t!h7\X01D
|h=/j:n
4SOT/72
xFYyhDn:Y
F;d*KU^
,32EYn
pEvXu9m
/2Gx]@
h^!xg.0A
yk6 Py
g%M2XBivxsz
TBvJ$3^Woz
QFEx,z@_&r
Lg8]Tv
c"N%6o\;
Gj78q<[)5;~]
>`4d>EOyEry
Of76di#ql|
I->q}R&EBpWhBzQ
FSe;f\zl/Gj
`C'3X"Y
[c`?l|
7!-9wp1F
]di[nJZ
H0yx*i
w9>duRpu$
0t{fB.
}{7e]Fh
:5eSvl
F9ye)5FeEb
6[8nu((R
K%&/;7+_Oc
@Wxv^8J,a`)3,L
fBFN=3
8dDPV{
EIe=c[P>_
_MMF[I
|r~&:'S
g%CQe%
NbyN@S?)eu
89UAX'5
gSR3kB\+M
WteD7V7w8k
},Za8B@"7XV
RRS:%s
>?zT(P"h]9
Xh?PY,kHB
\%GqL"\k
dgPe@O
'u s2
l2+l<Q
Mojs=YCqaqS30
iCt!j'd
haov.4)LG?g
hS"Z,q"
Tn*n%r
9%w$W_
gC/I$@9Ot*HqTC
u_(A;g(s~Tgc
I`]-ph$5"Hk
aP>&b{lO'>
m]L5A+us
y*~-pp6[.
FM(Z4qh<F
Za_n_M
f `Yvwc
ly8Vx]c#
X{(^#MF}Z<k
M8$o#m}oxs&P6"
(]NekSI<nt
T:qUKT
v"LLbTk
^:ICCAq!
4?%@ J-
>c-6_T4g:vH):
)@@mVDjVR_X9Z=
A'y I]
h99-Nes
TVHQ<#
!>QsH"
6O643brX,
V)>6FC
E-rr@H}*Z0_
PM|bKc^xj
G[~ii([h
\;o)qhD
LL~-;hb
|+j']/:YQh;^
':Of\CKg$#
2*U7.0@9e
,za!aL
Hc8W\1
K1{9CU
>$cFrT
@IZdML:eBDHI
F]7|8o
M^5U9I#I <
&5?eo\&|*jfp
UVxWFF
</^$\n
PjV7$&
kk>SIaY
CRdw9'?*CT(<uu
Yq8k0y<X
$W<_)9O>&
3gtsNl3"NY
II[OST 2B
!AV94Me
#CIGE-<R<^]
:l]SC:
B=vXA!
+xJ74rOSL
EImY@MY
Ys_e#?VLTB[$
|Bp=mIik
:fZ#EM
gDoQ-w",5<Kj]/
3L,!=7GFp,
mvxJSY9
c\M"G+
Gl#'g'.q,OPL
o/k8#LE3W
k9S%EL
=YhY&]
N(R&uKg
QPcm=oQ/qtNo
H71y2\|rQ Q
w4i|h1
-?>_*QY
]`k,bk
'nvO%"
x=PS1^;
|uyPEMxCE+
'+qs|i=
+v{mNyFreN
zio6;LR#
:d#)IE7
uyFMk?T25
|SI8i8)z_d8@ez@*.7<p8
?CQ4{MM$C
psGBJg/X
NM[>{jd=
+S Yg$xLht4Frg
H$+d%e
nt\[fY&V
l(8MZzmVb
u#VAXs
|wlAKdS
jcjJzU
<!BqG)S
mg!Sz U^0a(
Afor2=Mz|khy.,AtH
G%YW2T(Ik
Ja"B';KDE*attQ,
l*3OL=
:8"NO{sU
/^!Toc#-nij!
U/XjM4{Fr/
j=-#I:R
'.\?s_
k0[7djF
QzM\zG
%)y^sYc+9
`@uIGiC[
2C:q_S
&}\@6PXys.0_T
O8ifRp4]f B
dW"`<FI
GXnw)$
: J)._% _{
mE/nH@
v!vOg+B
1Dk*A,D`:{k
^hnz"iKU
J+]!$[nN
)y0Me%
8)6P )
|!gAM?9yCn
2^4{Cw.
5xHL!uqiz3[0$
[oyP(K
4dc\qb
5-~AT;v
{lcbu>Nz
>j:XX;M
PQ+Vc%K<1/P=ra4=w
'1.c>G
!`V'RS
q]E;qU
`i$Hcf86xX
~r8PLp3v
U)L;VQ
w[#\k`
8bVd9_]B
XV8SN
dotiq"8%7+d8r<UQ:7)[\D
W@[U7;T
V.m%78_
|G~cl6&
ueJ\{pP[
CEnM1?PC2^ twEz?
IB4YOD
ml>N?f_z>$ek!f4
p2E)#=
y}aXp1P
UsJpDe
u>RaqR!/:p
loGa$WRe4)
n3L(:fb
^fwU(/+; C&
0K&Q}mQ^3]I
;c9R:3S
?QXCx=_=5h-
PK=oU7N
7A97`6N$bD}[$
!9>*XGJ'
.BIS<(
oMer#?pH
.Q{0m,
% .DgTA
s'&74ZIGMQ,U1"
t>uw%u\
&c CY!%k=
#_ t6V
ee1Q>$s,-
Ijm { U
[</-,E
O /-k4
_UdD$qU`R
J0&rJ_M
R!};x"Bc
^gg`<,
@TcGI\|&
&[*?el]Za9
Mi)\`PY)#U
vW(+El'3l;
SmR(qyB?J?0>6l
FwJ0k)b54=.9kJ*
j{:OL~C8B&brS}
KmK|FO6iDK
'QTj5p0#7?;Q!f/d%n+9
cb?[&?&1
0B{XO8|b
^O%Xxn
j[[xoB
f~Ai`]66s%Xh$h
ib;L|.br
v& JMIF
d-G1eU)%M.1
4zxmPQl
\E&SV0
&DqdB~+"`
Ij/^A1>X#
R=s;+zG5|
yl![xC
}F@y|DT
$}1prbX
TX[ZjJv7
+Zs%$ZFAbz48Nc <V
: Q,NW
sR67_wL
n$-g^k
x3S<P6Ww
+~&"sswJA}BI0h
nTa(LF
F]RxW\5
NS)y{TJX
R<mtK`@.,J+s-=
(Ml45o;3
XfGQ.L
}SOPQI!b$`^<J
_5M]{C4J94xZ"Qu
/$>f}c4_+`v2m
ocE|1c!D
0C"N1D
N0Xot"h
(PXm@fn
E{(<<fyI
l_E|oN
!);Z6`
_Q^gGRAl~
w7cas89
9jW|~0k(B
`s^.MU4aX1p'L
822"$+2x
ik1:\o&Z&&>Cw
DW~Ckc
,R\)M8
cmqKY
M*l\{(=X<
M>VPvVa\
dOqXq)e6^
q@0fz9.]tF6%6S
:s]mI8
@7,nfTBTX
z3}4Kbm
A@*%GRAd6
"s%c>flUJ
5rbnpe<)4Mf2+ujO)
]$FRSv5j
5#;XJZxd6
f!%B_&l
DVCLAL
PACKAGEINFO
MAINICON

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.