1.0
低危

1ea4c459a33b8fcd1a0b54852d2cf7219e3f899df586255fb5704b807466863a

1ea4c459a33b8fcd1a0b54852d2cf7219e3f899df586255fb5704b807466863a.exe

分析耗时

194s

最近分析

361天前

文件大小

159.1KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR WABOT
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.78
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Delf-VJY [Trj] 20200810 18.4.3895.0
Baidu Win32.Backdoor.Wabot.a 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200810 2013.8.14.323
McAfee W32/Wabot 20200810 6.0.6.653
Tencent Trojan.Win32.Wabot.a 20200810 1.0.0.1
行为判定
动态指标
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 65 个反病毒引擎识别为恶意 (50 out of 65 个事件)
APEX Malicious
AVG Win32:Delf-VJY [Trj]
Acronis suspicious
Ad-Aware Trojan.Agent.DQQD
AhnLab-V3 Backdoor/Win32.Wabot.R231859
Antiy-AVL Trojan[Backdoor]/Win32.Wabot.a
Arcabit Trojan.Agent.DQQD
Avast Win32:Delf-VJY [Trj]
Avira TR/Dldr.Delphi.Gen
Baidu Win32.Backdoor.Wabot.a
BitDefender Trojan.Agent.DQQD
BitDefenderTheta AI:Packer.E19F12DC21
Bkav W32.BackdoorWabot.Trojan
CAT-QuickHeal Trojan.Wabot.A8
ClamAV Win.Trojan.Wabot-6113548-0
Comodo Backdoor.Win32.Wabot.A@4knk5y
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.458cbc
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/Backdoor.PJEB-4161
DrWeb Trojan.MulDrop6.64369
ESET-NOD32 Win32/Delf.NRF
Emsisoft Trojan.Agent.DQQD (B)
Endgame malicious (high confidence)
F-Prot W32/Wabot.A
F-Secure Trojan.TR/Dldr.Delphi.Gen
FireEye Generic.mg.c40bc7e458cbcb8c
Fortinet W32/Wabot.A!tr
GData Win32.Backdoor.Wabot.A
Ikarus P2P-Worm.Win32.Delf
Invincea heuristic
Jiangmin Backdoor/Wabot.z
K7AntiVirus Trojan ( 0055c5c91 )
K7GW Trojan ( 0055c5c91 )
Kaspersky Backdoor.Win32.Wabot.a
MAX malware (ai score=89)
Malwarebytes Backdoor.Wabot
McAfee W32/Wabot
MicroWorld-eScan Trojan.Agent.DQQD
Microsoft Backdoor:Win32/Wabot.A
NANO-Antivirus Trojan.Win32.Wabot.dmukv
Panda Backdoor Program
Qihoo-360 HEUR/QVM05.1.26A2.Malware.Gen
Rising Malware.Heuristic!ET#87% (RDMK:cmRtazrrYkaDyEWOhQDBhcRFtlS2)
SUPERAntiSpyware Backdoor.Wabot/Variant
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Luiha-M
Symantec W32.Wabot
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1992-06-20 06:40:53

PE Imphash

5662cfcdfd9da29cb429e7528d5af81e

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
CODE 0x00001000 0x0000c984 0x0000ca00 6.572458888267131
DATA 0x0000e000 0x00000a1c 0x00000c00 4.533685500040435
BSS 0x0000f000 0x00001111 0x00000000 0.0
.idata 0x00011000 0x0000083e 0x00000a00 4.169474579751151
.tls 0x00012000 0x00000008 0x00000000 0.0
.rdata 0x00013000 0x00000018 0x00000200 0.2108262677871819
.reloc 0x00014000 0x00000710 0x00000800 6.25716095476406
.rsrc 0x00015000 0x0000167c 0x00001800 3.2124871953120624

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000164a8 0x00000128 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x000164a8 0x00000128 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x000164a8 0x00000128 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_RCDATA 0x000165e0 0x00000078 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x000165e0 0x00000078 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x00016658 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library kernel32.dll:
0x4110d8 VirtualFree
0x4110dc VirtualAlloc
0x4110e0 LocalFree
0x4110e4 LocalAlloc
0x4110e8 GetCurrentThreadId
0x4110ec GetStartupInfoA
0x4110f0 GetModuleFileNameA
0x4110f4 GetLastError
0x4110f8 GetCommandLineA
0x4110fc FreeLibrary
0x411100 ExitProcess
0x411104 CreateThread
0x411108 WriteFile
0x411110 SetFilePointer
0x411114 SetEndOfFile
0x411118 RtlUnwind
0x41111c ReadFile
0x411120 RaiseException
0x411124 GetStdHandle
0x411128 GetFileSize
0x41112c GetSystemTime
0x411130 GetFileType
0x411134 CreateFileA
0x411138 CloseHandle
Library user32.dll:
0x411140 GetKeyboardType
0x411144 MessageBoxA
0x411148 CharNextA
Library advapi32.dll:
0x411150 RegQueryValueExA
0x411154 RegOpenKeyExA
0x411158 RegCloseKey
Library oleaut32.dll:
0x411160 SysFreeString
Library kernel32.dll:
0x411168 TlsSetValue
0x41116c TlsGetValue
0x411170 LocalAlloc
0x411174 GetModuleHandleA
Library advapi32.dll:
0x41117c RegQueryValueExA
0x411180 RegOpenKeyExA
0x411184 RegCloseKey
Library kernel32.dll:
0x411190 WinExec
0x411194 UpdateResourceA
0x411198 Sleep
0x41119c SetFilePointer
0x4111a0 ReadFile
0x4111a4 GetSystemDirectoryA
0x4111a8 GetLastError
0x4111ac GetFileAttributesA
0x4111b0 FindNextFileA
0x4111b4 FindFirstFileA
0x4111b8 FindClose
0x4111c4 ExitProcess
0x4111c8 EndUpdateResourceA
0x4111cc DeleteFileA
0x4111d0 CreateThread
0x4111d4 CreateMutexA
0x4111d8 CreateFileA
0x4111dc CreateDirectoryA
0x4111e0 CopyFileA
0x4111e4 CloseHandle
Library user32.dll:
0x4111f0 SetTimer
0x4111f4 GetMessageA
0x4111f8 DispatchMessageA
0x4111fc CharUpperBuffA
Library wsock32.dll:
0x411204 WSACleanup
0x411208 WSAStartup
0x41120c gethostbyname
0x411210 socket
0x411214 send
0x411218 select
0x41121c recv
0x411220 ntohs
0x411224 listen
0x411228 inet_ntoa
0x41122c inet_addr
0x411230 htons
0x411234 htonl
0x411238 getsockname
0x41123c connect
0x411240 closesocket
0x411244 bind
0x411248 accept

L!This program must be run under Win32
.idata
.rdata
P.reloc
P.rsrc
StringX
TObject%8
;u3YZ]_^[
SVWUL$
]_^[SVWUL$
uZ]_^[
YZ]_^[
_^[U3Uh
d2d"h@
d2d"=5@
u3ZYYd
#_^[SVWU
SVW<$L$
uSVWU@
]_^[USVW
d1d!=5@
2E3ZYYd
E_^[YY]
UQSVW3@
3Uh6"@
d1d!=5@
E3ZYYd
E_^[Y]
YZ]_^[
d2d"=5@
}3ZYYd
E_^[Y]
$PRQ$"
_^SVWU
< v;"u
3C<"u1S@
>3Q<"u8S
< w]_^[
Ek<1fU
Ht Ht.g
6Huv=L
VI3E?E3s
3EE_^[Y]
f=r/f=w)f%f=u
f=v)f=w#j
RPCHPt$
-CGL$
SVWPtl11
-tb+t_$t_xtZXtU0u
FxtHXtCt
~ExC[)A
FuY12_^[
PRQYZXt5x
@~d@PQ@
YXYX
uM3UhU3@
EP3ZYYd
f%fUf?f
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
Iu9u_^[
PRQQTj
YZXtpH
S1VWUd
SPRQT$(j
Zd$,1Yd
t=HtN`
r6t0R=
t/=t&,*&"
3UhB:@
USVW$@
d2d";~
P'v_^[]
aSVWt@
^v]_^[
QRZX1Yd
PVSY_^[]
PQiZXSVW
ISVWRP1L
JZ_^[X$
thtkFW)w
9uXJt
8uAJt
t8JIt2S
PHXHI|
St-Xt&J|
t0JN|*9}&~")9~
tVSVWU
t@t1SVW
1Z)_^[
@+u<E@
USVWE(@
d0d ]ES
u_^[YY]
UQE3UhF@
d2d"E@
t3ZYYd
%3ZYYd
U3UhH@
U3UhH@
3U3UhAJ@
P~SD$
U3UhK@
U3UhK@
U3UhL@
TFileNameL@
TSearchRecX
U3UhdM@
EEb3Uh
tC&EPU
U3ZYYd
U3QQQQQEE3UhN@
d0d EM
EPU3EPtKh
EcPh0O@
system.ini
Explorer.exe
UEEEz3Uh.P@
d0d U,
EP3ZYYd
IuQSEE3UhpR@
tjtfhR@
t-u)hR@
u-t)hR@
" -a -r "
" a -idp -inul -c- -m5 "
software\microsoft\windows\currentversion\app paths\winzip32.exe
software\microsoft\windows\currentversion\app paths\WinRAR.exe
C:\rar.bat
C:\zip.bat
PHuES3
E.E&3UhT@
EPEPEP?
a3ZYYd
IuSVWEE3UhX@
d0d UEJ
U3YEU.Ef
EU\EUQE;}>%
EnSEcPd
to3Uh2X@
EP3ZYYd
IuQSVWEE
3Uhh\@
U3UhY@
d0d G3ZYYd
$UFuh\@
VUEL@t}0EUm3E
EZPE~h
=3_^[]
abcdefghijklmnopqrstuvwxyz-_.1234567890
IuQMSVWMUEEEE
+3Uha@
d0d 3Uha@
d0d EU|
u?8.t4uha@
u|U|ttx
yupUkp0hwhlj
uXUXPPT
uLUrL7D~DHq
-u@U@8+8<
u4U4,,0
u(Uy(6 $x
3Uh"d@
d0d 3Uhc@
d0d EE
8.teChTd@
N3ZYYd
_y_^[]
NOTICE
:to get this, type !xdcc_get
bytes)
uTC,PSC
EE>3Uhe@
d0d SU
E3ZYYd
EE3Uhf@
d0d SUf@
PRIVMSG
UdSVW3
dhEE3UhSh@
d0d 8lPh
d2d"EP
s3ZYYd
c3ZYYd
ZE.H_^[]
BFKu_^[
USEE"3Uhh@
d0d UE3ZYYd
U3QQQQQQQQS3Uh
| v;}
N|7 vU+A
M3Uhj@
U3ZYYd
EE3UhPk@
EPE!PS63ZYYd
E1K[Y]
3UhYl@
\DC++ Share
\xdccPrograms
EE33Uh?m@
d0d EUFUTm@
a~&EPUTm@
EZSUTm@
U3ZYYd
f\[YY]
EE3Uhm@
d0d EEPEePt,P3
EU3ZYYd
U3UhQn@
TWarBotUj
SV3Uho@
EPSE/Eo@
03ZYYd
IuQSVWd3Uhs@
`U\E\U\
EPSEPcfC
PfEEU:E
X/XUX8
3EU,t@
~&EPU,t@
EZU,t@
\uh8t@
L3LP P
PcPhlt@
EIHhlt@
DE0Dhxt@
\E>EPj
EPtPEP
SfPV j
EPzVt3ZYYd
PRIVMSG #hellothere :
&%->=
PRIVMSG
DCC SEND
IuMSVU
EN3Uhy@
d0d EUaE
EEPUy@
;~iEPUy@
EEU8EPU
EZWEPU
EZ1EPU
EEPUy@
EZEUUy@
:3ZYYd
PING :
type !list for my list
!list
 for my list
!xdcc_get
#helloThere
#helloThere,
JOIN #HelloThere
LIST >4,<10000
U3QQQQSE
3Uh,|@
YUuhp|@
?Uuh||@
G3ZYYd
PRIVMSG
ACTION
!list
 for my list
SVWE3Uh@
E3ZYYd
NICK [xdcc]
NICK [mp3]
NICK [rar]
NICK [zip]
NICK [share]
NfrSF3
Pzu _^[
31ff%3vcc%%112c23J33c22322332crc3cr233J2fJffJv%1[J33JccJccfcc2fc2JfJ223rrcrrJ2cc3f2r3r233Jcf2rf3ffJfrJrr3f2]fr[2rvJ23%1JJJc1fc22%J[rr]ff2rr2%ff32f2J23r323223J2rc333cc2fJJ3JJ2ccrfrJr2r3JJrcfc322f3cr3rcJ33f33rcrrrcf3cfrffJ2cff2r22fJJf3rr33rJ2f3cJJc33r3crrcf33cJJrffr2fJ2f22fc3ffrrJ32cJf
]2]3r]31111rfr2crcJ3[%%]]vJf3233Jr22fJrvvv[v[Jc3Jc3rcccrfJ3ccfffJ3c32Jfrc2ffr3cJ222JcfrJrJ322r2ff3Jr2JJcffcc3vJ]c2[2%Jv%2]rf2J213]3[v2]33[2[J32c2r33rrf2c2cff23rJJf22cf3crJc2fJJrcc33c2fccJ332rJJcrrffJr2ffrcJ3frJc23frcr22c2rcJc2cJcff2c3cfrJrf2rfr2c232cff3332fJ2r2c2cfJ23f3J3f333J22r2f33
J]"^^"^^^^^""""""""""""""""""""""""""""""""""""""""^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^"=~\=yw$="^^"^^^"jCzyw6=^"^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^=
ff^ ."k^"=!24G;. .. .!nzL4OJ"~~.. . .=
]J^ . .!sG!7{^!s8G=.. .^68Vs2!;.;*}.. =
f1" ............. ._Inzoz6$295. ..^lkcv".."";"L. .=
1c^ . ,!%6***O8Izy. .!j_". .;w=;]. . =
ff^ . . . . . . . . . . .. .. . ... . . .. . .. .^|uuzw94V9=. .. :"=^,..uS?^. . . . .. . . . . . . . . ... . . . . . . . . . =
Jf^ .. . . . . . . . . . . . . . . . . .. .. . .. .. . .}6T6$i!+~,.. ~O4u{!!je^. . . . . .. . . . . . . . . . . . . . . . . . . ... . . . ... . . =
22^ ... . . . . . . . . . . . . .......... . . .. ... ... ...... . .6Ic35I=. . . ...^v}ca$l^. . . . . . . .. . . .. ... ...... . .. .. .. ... . . . ....:... . ......,.... .. . =
fJ^ . ....:..... ...... ........... . . . .:,!!<-!==!"... . . ...:...:..:..,. . .^!\, ..,,..:.,.. . . ..:,^^.... .. . .....:.... ... ....,:..,., ..\((?>(==^:. . . . ......,,.:.. ,."!!.. . . . ...^"~?(|^ .... . .. =
cJ^ .."J4nTn5TaL<.;"clJws2:. ..."=i?2ai<,.. . . ..^~%yehY3CAh5Ti~|~. . . ^11J3399T16c;..^)JL5o.^]ff2t??]3+=. .^?t{$]t=~|]t. .isfanzCC%". . .rsyz4LVYT9C~. ..^j5*hPDPe0TmaT1~;. .54wjtffi%J!. ."+jjwc%i]=^. ..;!?2t+mFDK=;(zs?;... =
r2^ .=gYDFSQUgDj-GkK5oVhFJ!. "!9m*JaPa?. . .;!Jau$UFU*a*n$y1VOb~.. . =UG0LskShqpU"^n5gpq8.=ATIIn2*m*U... "J6n3)!!=pd. .;*PpdUk}v+t^ . ..bZAgFPDUonPb.. . .!GZQPPms%+tij6DQ9=. .%UszufL4s4mj..)5m58T9&f! .:tnS$_!+&PDDl"IpDg=";. =
fJ^ .tXeT0kVqDF]xDqhs04GmZ^.]wTTCrkFV2[^ . ..^7Tr}":.....8CcVwu%"". ..=ZkasJ[%rOm&"{nZqff}\.=Vu1]rOk]zTk ..."royC3wDQx8 .+%bQDFFFh}". . .x8VYhhgg4oTk .:-az0{"... :wkkOpPP*T;. . (tv0gPUpAGbc"+kyw69*&mUG0&G.. .. ,~I&Qi. ....=21UPmTP2 . =
3J^ .+#d04kO5VUL#AFFL8&YOFFc=sanCv*qZac_,. . .|c3V~, . iVuIrsY5y... .=OC23c3cfI54"k4V?(69t.)g9I$JVUi!t[ . .."CCTyL*Zhe4....6!obQFUDD8i. .. :xasaePQUkSPx. . ~Fprn^ ..SFPPDbGz&$". .iyuJeFk5O4Ta$5w|i1oC8*4eG*O:. . .jcTh- ..,J=3gDOddh.. =
32^ .tWx50GGs$Ca"^=*h4xhyXWAx^-JII*gW52C^. .^ny$~:... . "9sC%]uGnb5v... ~8kkny6u$$2+~It^.:^^^.?Ume4zsbn~<l. .^+zJkhqDSkG.. .Sc?c5qDPFX1:. . :hOzfOxL8dWKg. ..=khb7. .. .9PDPQJ4GY%,. .%ghTkxOru]7wxu^.;|JnT*T&8Oh{.. .Ja$"... . . )+%mF8Feh~,. =
cc^ .+#h%l[6okkL..!x0*Zq5Zqde. "VsJ*XXpJ$" . !n37.... . ;++cj1+iyACi^.. ~CCuw9LOY4Vo[i, . .?d532taFULy8 .. ."jJ$5gqpDmIs ...Dp5rrsDDFX. .wVXQ6VKWKK#d .)qPU ...}WA*njyZkXF! ..}bFPpkx611axI!.. /%aOmmr!ti6... ,vn\. .=3w&pO*LG^. =
ff^ :tbuy6o0ZQW(..>x&ZAeDnbAs. ^sTrg#SAI+. +7". .. . ^$iilvr+&m]i" ~a9kk*G88TCc|... . .=LCJ2nSd&uT ..!ltfdZZFk]|s....WFV3nvlwdF$. .4OPdVdQQFpxT.. ~be!. .. . .[e55T5eFVFb!. .tQpQqPGzrT&G, ..<nfnn8$+i%w^. !^... . . +ombY&q9,^. =
rr^ . ?gxPSZFqFZ) .<AZUdVDC9bz "&f$qXPb6zf. ..... . . :tT6}JIck5t%|. )p*&890VcCy~ . .(shI+2FFxyi . /r9pAFQp$j!Y... #FD4s!/}*Pf, . .*pO*hO8nTf+. . .... . .. .lxUhLQDdLQq7. .=$khAQS8T*4j ...:=a!i+35*8oT=. . .. . .|o]IyZFA[Ve" =
Jr^ .iDSFgpqZxh= .!QdQSTXk$&T "e%veDFPzz1 .. .... .. :~VqCtju8z2Y) ..)8k8522%$5mc; .(aO7+IsxQFV=. ."$dddDeY$vQ. .eFQD5%kPh3>. .YZeqQPZU06uz. . . . .. . .)65OgDFAqUPu. .tTw$*Ud8Oa). .~xc!|jkaTs6!. .... .. .. .|Off4PVT8Fb^ =
c1^ =ZggAA*auv!..=SgQPwUn2r. "#V$TQPQss% . . ,";^;.. .t*dk3++*T6V= |YnC)"tI4*0+... .i82]ww6aPpx6 ...<8AqFhsu9uF . *PS#q1+!~<. . ,4QDqdDpDxw5b.. . . "!"\^...=?78xPdkUPA.. .[Gk0c]TLm&2_. .?0o$u[TLCzw). . . . ;^"";...+dmsYGO&DF*^ =
21^ ..)ggAO0n11]~ !*SbP8LI]t.."Kh6IdPUna] . . .."${C}:...|y4$a[=sTV*| . =3ti~!1GepG+. .. .ib$fC3CSDQF ..!eFDUnuIC5W.. nUFXSfvttCi: .. :ygPQGSDSh*gb . ..ia4h]^..|i$mVd*CAUDu.. .lhYeZVTs5&!.. .=u96zI6$n=.. . ...?s*n|...iPbq*Y8pA*n;. =
c%^ ..=OLCa&YIn8= ."J4L86yG4k+ "DWQxDQSsIs . ..!}=oZicz{3{"rOdbA*DnyCC~ ?8kL8Oonzc2t. .=*o|"^~lZPgK . .!qDQarvuCJ2L . .ITPW#uooont... .%qPbLJSpmUPh. ...!YZYG&aDOsg2swY9ZTrD5Lu. .iDx&bFdDPPz~ . .!3Cft"!t$8J!. .. "sT*GFDXKWWS]QqQxq0hPXq^. =
3[^ ..?PFamG&LpF( .!Gxh*nyr3&J. "KFDUUFFonV. . ;|3o3o8c+~"\~~7Cnbgx8C333! |G0O4mGkVnu+.. .=Y**TYGTmeFW ...!DUO1yzys8xx . IfsxFuow6y+, .|FZPL2rTmQWS. -xakmdUe8!!nPe9e&o?iT]ao. .jQZY6TGbZgnl . ..\IVhm7=z9)... ./wfJc}]w==0hUbQm400*&Qd^ =
f1^ . ,?SZ*n5cQAQi .!ASdegZ4*4} ."epQQmAFy*0. .=smS5yLa<; :!y0VAGko]ftJ? ?pp4VGV40GG{ .!asO4gDq44dX.. !q&6&bQXFQpP . 3u4qo&5yC(, .. .~dbph1cYKXG.. }p*0Tm*qg.. "pSaey/^_r0Uw. ..+UQh7)[y&dZ{ . .?na*kG{Cz%C!.. ;o9v%jJur=,.^)ObOuY*aOSFU^ =
f]^ ..=4OpT%2FgPi "VdUdUDDbUw .^5ZFDY#WzV* .*WK#qnQp". ~pbZx9T61vi~ =*GOGOGmL4Lt. .1oa&ApFe4gK . \hxpSFPFSWQq ..sncsAkCIC+. :=FAPh[1ikWA6. ,2DKQaUpYx. .&Z8A$^.>6qPz. .[AFps9aa88k{. .<L8*G89wu$$=. ..)051vCY6!.. ,tYy3kUk&ppQ^. =
r3^ . . .tQnQbywY4Y~ .!o&&AAAdFPs "U$%8#&Y9xb. .uPPLurVXF+.. ."d*YIf5*[[G&=. !raazIas&4*7.. . . .?U2aWxsDF*P . ..!ePDQDQFDOu]. OIo2u+uT447. .!sPWdl+7n[Ia. .)GWWgO$LG {ggqo++1PFS.. .=dAUdy4Y&&g{ . ./CyIC]]r$&i. .!$GT+c*wmL). . =1[khQb*nDg^ =
c2^ . ,tXGt5VTfaO= .>h5L&hgUQn.."XGzoae8*Xg .!F5(~)IYWPv: "mw5h&2r**= =yJO5J]vf96(.. . ..(D8~thFC1nOP . .ppdhLsCui1$....69nVwfuzr. ..\$#Xx]$Tynw%..=mhKQPV06CJ .+hhxivcyFpU. ..)VqdZVx$fLZl ..,t6OwC7f6ws(. :IxxT[Ynnw~. ^=TdpqQUYxZ^ =
Jf^ :.. .,tKxi6%ausm= .!psGf]5kYe5,."XgDhJqSmF&. "Zi?!!vTKgj.. ^G5Vab08$wk*( )L$r1uII6zt.. .)dUT%LPWJv4Q . ..^J$cuttt[fkm. 22*kwaYT647.. ./3pPhwm9o5k$..i#hbbqw$IC(. .7Z&9|w?iPbg$ . >+5hSg6urIZv ;c8mw2[2JV[/.."&Z*zfwma9a= . ,iUdPFdDs(o" =
Jf^ ;^:,..|ZFiJ1LarV=../Ys52|0aJct:;"bFx8&48xFb :ppTnYV%LXUI. . "P095d&&$5k4t .|8Or1C9TyG8i. .. =g&[yqXeVkg. . .;=Ja[$u35*Y. ci$Cn*948Lt: . .~&phT55$5G6..=Aoosa[{]u~ (9*0wy=?nUQI.. ^6sVb4?1$TQ7 .!OYz$3%iTSf=..~S4GC+cT98x?. .^nAFDQFPG;!; =
f2^ .=!/;:|SD{w$L*fI-..!ezLJ!nY49=.;"FFSO4mbdY0..XXUTT4O0PPn, "bctx*m*Ta48t. =O84$oosoG4+. . . .!}~;^!hPbaqD . ..!aTf$%L&[kmk. . ${IITmT69i:. .:!IaZez3Iw6YT..(zosTa&Ta49 !vom84Vx*5V3. .=DVGeS(Iyq1. =o6f]uw5DUI)..(U8Vvlr&sQW|. ~PQF4DQUP^:. =
fJ^ ^tTnt?2mOszzqSc:^^!hmk6]i99Oo.;_Xb*50Lxd01;"TebbeV0smD]:...^u(rU0O9GLYm)...)8kV*z$cwG*%.,,.:.,:,.jKZJ~")gQFFa...,.(SQPDhV6rJ$Y....cICY&TC6C9j;,,,.^(3rzm]2Ircx8:~0Yq08m8G4hL:.:.tCCw6r(t4eZ+....[AQ&7inmwcU}.... ~m2fc9VUdg3~. =OYme8L9Tnf". ..(&0kT*Qbg), ....... =
fr" v5Zm9r*a5IqZ&^C"<eV0+CkZaTl.;<Lry04as9t13?wQDDSForn0n:^.^^uI8e0JtxGLm)...)L0Lk*T[f**],;^;^;;^^.7XDAholoDPK5..^^:>0PQPQWqrfcY:,^.rw$50O4O5n+^^^^^;t6u3sIo91c89;!zSe48*8GGAn^;^^!=$TVOTt7sa! ^^^vFq2=!sh0+01..:. ^^!12cY&40f!..=qqAew949&o!....{pV84TQDZn!...,..^^^.. . =
2r" >58qpLnIaJegh!s^!6u+=f&As0s^;!CJ4O5{Jwayu"?lQDPF*)7*a^;^;^3TO8n^5x*m|..,=0mLG84TCy4},^;;^.";^.+KDAqSGaDbPa.^^;^-wkbPSDU*ocL.^;.20zswVzys6i^^:;^;fa$fy$m8itvr^;{LG**8maaa;^;^^+ysm4q4YT".^^^%g$"ifIs0+a+::^. ..^iII45Om$!..?pxU8tTP*x0!...,|ksb&wdQAUv^.,:,;^^^; .. =
rc" rmGqA*If1mbU{n;_yur5f6bJ!!Im5$]aGV9".!"feQZZ}5n^^;^"s6bkt^.?Tk*t^,.(yaG*O*4nn&l;^;^^^_^;,=k*FdpAgZQPk^^^;^/%0nhpFKS0]5:;^;C4CuJI3$+^;^^;;zo9su8m(=%[^^iY5$$nu1f9"""^|5I6Ls*Skz[";^^^{6!.iY5y6iCt.;^..^!t6&L&VPkC_..)pUxT+kDOGk=...:taGZs1VDSQ^:^.;^^;;^^ . =
J3" :/yhxxGGf6*Sh0!!a+7J9L*8*G8m$65TTzuwu^^~n]$epqDxa6"^^^!YG*91?".^}O+^^^tuifnYLzmnIi^"^;^Ii^"^jg*~?+{%zmxg^"""^(rtjrwzo0*&^^^;^vzaLsmG*&sj"^^"~Js[C*J*a6CL&5/^==3uJv~OmxT"""^fxO8e6+ze+(3^^"^]e0naYeqT=T];^;;:?U84a$AFLJnj.^"dx4IkWP*45);^^^(ZFLzzIhPDq<;^^",.,^"":.. =
fc" . ?r8OVphC8pbk~!]1!?2]CC$wIL$wI6Cwc$Y*""+xDWFU4hgV]""""!ffomKXS=;!&7""^(ryT24Ooh6u1^""^=a?"""%n7=t{71a*Q^"^""to^=t2GOa5i^""^^}xAmGG4Vnft"!""lmCC4f9II50*f~"!t6$rii*m0w<";_CYoTmT+=o%!J^"""%VSgAP0xZuo7^;"";)en%C0Dbu{h%^"\o7tIqDpzsTt^""^lQ4Tk8cfVdU!^"";. . ;"",. =
3J" +Cl&mLhzomxs~+%""$01J]9Cj$uCk8onTuc""=ubFFPqbLG>""^=aJCxDFXejt9{"""{k4]n53mnT{"""!fJ!""+OkGeZFSaaYS""^;"iO^^i+3owV!"""""jh8k8kos9cc!!_ifiwCTuICz58a](!!+$11[&kG8f!!"!5*8*m&u"=1|%!";.=$0h8U&hG&ni;"""^tT2+aqF0}$q1^"^>i]fVZOn4U7"""^9&&fwaJ[CLO!^"^.....^^";. =
Jr" .j6(fOqVGoTe3"!fv_^lw%%kC+i1%CuG*Y09a=!!iSQZFbXSkz<"^!tG%jQPDDQhw9t"""jXdr1]1LTO%!-!=4J!/!!CSQPPQFOk44x!()"^+e"./)tI*&"!!"--|mY4YyC$163]+1Oat}JIwC$C8s52tv!!(%]uT8mGm2!_<+*8I5gky"=i=i!":.-!}y0wuoswk7"""";)fuJ0PDTcLD];"^"vS$0ATaZPl!">+mTC]zT5$Tkai_";,.^^!\.^". =
2f" .^"""!!7ffji~ti1rannxs1lcaaVnau=t]uC$n9oT5wwzI}8?$aw{nwY0s3DGtPboI&*eDhs5}!!-]0rr1]Csh4zO3_[g8(~|(=c8a6y6$z9[$S(Uh4~rh[=ijt}s{!!!!!!!}fjtI9o$*t3C*y="Tl|fut+j9c$x5?t=%&O88**J[?!8&m=7m9v}%j~_^"|zy^"+[jsv)iui>!\~~vxOs6Y*pDPPI!!!_~&nzO$*QKb612VmSSgpqYs*een~;"!1dGv++{i?~"^,. =
v3" .!$$Is40&hpbZgbp&k2c]In*&OCzOG8T0v+[5J3Cf6w$r3Ifz2bj|Is0hV4gU0S4=AWg+1ne9TZ]=!>tj7tj5sok3Aj=*gx!)=|}24T&O5Ow+t*Dtqn%]aPqZsGd0C?!<!!=!=~1Cf$f}0k+fYJ?!+wfs&6i=+31LpT?=tJw8LGkatv9iJ}+1=?utn5="_+cY9!+f56sUo!ir?-=!|tnZksY*a4qD*1=!!!!t300aGmL4VhgGkPbQpdoGxkYxl+c0bm}3azyi^;. =
22" ,>6L48eA0meG*GmLm4*i[Iyw$+&m***r1Jizw3[I198Yw1[+{jfFjj[YSQVkUx31i=Z#XJ&Gxs5Fp2t!iTsu%T0YO%spJuS8a~=iJOGV4Y84yf!]ZF)Tmt5APPq0mbS}~!!!()=||+lo828Dn|lt!=(&dSA2%v]f4eT!tvvJYVm2?"[$t$]n5C6$tvCm5t!y5)+f4h*s*G{7[?!=(=+fYuTmknozTrt~_)i+iCgVaGx*YOn$]4AUPDVo4QIUAJsxDQ9}JICaI{>.. . =
J%".^|Aqx*8epO0hV8meGG6stCCC*u%]8yGs$!)=i86c2]t1Oz*v!!"!yFClil8AgU05a!)~9KD$==))kX&~!<!=|=t~~)=~=TS%8gL]{IsV84V*kkf{="?tt?+hCi1w0m4eLY?!!=/~i?===|+5wgDsit==;!lUdU4it+2tIkST(1cccuVI^^!Iwv+%Ogg*0z*G0iuu[t$Z0&s1zhc=|=-==|)?+{+iiti=!=tii1v%t3dmzUqgp837}25s9u(ihU%69{SDUg[3no3i!^. . . =
[f" .;\(lCL*xU4&syCo0YaTV7$Clru6+)ttitnk9$o4&Jfu9o]i~=zWei|l2aC]7tt((?ipDe{~=%KXw~=~~((==?==~=}V&20OwaVLem4V5f%lt|~=}j+ti2%"-{f&Irv+=~~~(|?lt+iti1xSQril+vuLUqxuu+1ll]8pbn}JI3ftt~+]vuwj3{~)t$n0Ts5kC$oIzTI3{=!sFx2=(!"ii|=9[=)t{{7?(t]%r3{jYp5{55o3i|)|}3[[7+]PF{czkqghJ~(=_^;...... ..=
J2" . .!([mm*8oIYT8&ssSbT}}vtuwoCc4cqULv3s6w+(nWQ!tFZAL}+t+++=$WFh+|*FWu=!|=?tti)=i?=nmmyw88m8m&8i|?+}7j)tv7v+)}l}it7]i!tlt~+ts1tiA[+ii5PDg7j+IddAqkizQtff1CSqh5InJ2j]l8F43o8=: "2%[I$%1ooy8zf+(nQDd++=^+it]g%ii=|{+tJ+iju[lyggyj]j}t=\!!=1r{ot2FXvaDPASt^.,;^!()+++("^..=
2v- .==Ch*V8eiv8a8*8wASgkj+ta6oJvLv4DFswIo+9KFr^!zgAFdt=|?|t8QDt!hDZ%)(=i7tt+(!(i=[9*&*Gm4O8nl!i7%}7t+t111t>7v7j+Tli/)]v=!j6&f]iDsi[j8QQPt+7*SPqA!wFftJcyZdPsJC]j+caSPL%$ao!.,?2[vuGti[+$w*88ksIzSPpl1t!+7sDv++t=+ttntt]%t7Gxbf+uTn5T5ojj[]L(%Ue3dFPGt^,!t{aGxpxge8w+"^)
J[/ tc4qkG*5uG4GVUp[0*xPY!3Tmw++nreZPZwu$${IWQw"tjmFdKD&v>^!!IDpI=PXQ{(=i][}+i}yn*TI9Tw9u]TyoIl+}+i{t"+tIu7^t$I%i0$!^tc%!tLAn%%}De}{2xgFU~1*ADeQg}+6pz=$5sUUD6I2c7%3sAK*+z&IJ^:^1r9w*m+=t]lIf9mw*6&uZgD[ji/"(T4F1ttl}[1+*1|=j16eAh%{9TaTG4s9yari*lIPhGbFSw!"=0AZZZdgpSUzt". =
J3- . ^CY8*8T2|*8GahhxC={CVn2n4mt!!s9r6mKKenoIc{eF4+c6G0OFXPqVt=/"hgxnQQ&6$%7}]3(+2mxgUG9u$f20kY*&V0o6t=yt9$67^![cltmO!=Co9xPx[%uzQPh2jDFbm1GSASni=tfceerjw5DgD5oyfruu$6r|!Iz&6j=|$TV8af(tcJ$lt$osCcuT3gqZG+7+"}hPe1rfljII1S5%j%2xQQmjtoknYY8&4ekOeTVgUQQSZLa0hpZgUbd8yt!". . =
Jf/ ..=TG0r!;(Gm45b8mh.,;/+w0To;!^$w52{DKDFQ3u73Ae2JQF!IQZPDQD=IAqDDPp#4u1t[n7!uxFU8mivCfnJO*0Gm86C4O3nrl?(]$uilqg{IVFUULuo2iyIQQ05PDA0FgFDj...6n[VD0{vOAFZ]7uJk2$5^.^f5*$(80*Go9t~"y*$L*{756I}t==YpPQo=+t4A#012171+jDU0cz4bPUv2j2mT94FFQ0&V&TkLZQk4ZFSDPDPPPhs|";. . =
JJ> . .:&oLV*&":;]dG*CqmVh,..,!nGz3.!"a9ou)Y#PFFkcv%FZzyKWt.!L#DgFFgG%&pDPQWPTav=7IufeSq8kG2f2oGL29nV*&Jw$IGaJ5vlT$CIjCUb3f5DQUm1[57/%3xP4VDQh4qPPA^ ..O%bDsikeAF=/+yAJJyy",;3$$][V56y6!!~+yw2xO9fykfi%?zPPps}i+hDAarfucIt+APkCzOgPh]59362apgDDwoa6xUYSUYpPFSFZFG5%=^ . .. ..=
23\ .^ckG*gC.."w0Om7bGk8^..,taw5!."^u9as~+xPpPFntcPZO0PD\..!LdDFQDAsrGDqF#4uy+^=TAbg&8fo6viuaV4w[1uCLnJafu*5vCCzznIvurQpwzebdF3vss1i7tYQgYPPeAQQxl. .^TIttVxLisFAe!:i&PLu90i^^}J[fCocI^;~aLzzrdbGsvI9%{{JQQpktt{FUP6JIrJ%ortAPAz$bQp8]Y8}oVhSFpa}$C$0AZqLLkqZFeGni!;.. . . . . =
r2\ .;t$sV*0f(..^tGm&e~8V8G".,>2J1|!>|?%TTz(^>{shFxLC8PxghO?~!\=1[SbAxhTLeg*ouf)!|9*e0ortjsa{]Two4Yf2ura]{al5n$TasIcjc45QYOxPQe+!20n5$GwoeZxegZh$+~!=ilJOn6YZxn&hdG~l8gZ*iin9[=]3JC>rwIt:"%GLT5zebgV5cc{~8Zde[%0QQZ]6TzIo7nGZ85DDF8wTuxFQAGy?^>|I0Aekk8x84&nIJC2(".. . .. =
Jr\ ._Ca4&4%. .=mhmG4^3G8m=,.(aemmSKXFdPDbA&j]&hpDF[nTww8ksAFqAFPAFFbGA4q4FUc)!tt|t{6)!&xC?c4YTsV1iC$saC$$ouz*Lmw!;;(D{aqOUDQx57IZDFFVwKeaSAxYOG15GZFPPpQQgbbWPdhOsiQgZx=,;tmozuwwo~azkz"iCTG4wuL[r*xAAeIc~tQpqorpQZZTJJ9J3l}CCYAFkFDqmY$IxDQD*sgz_[xXWbpkYeDADAPQhf2f7". .. . =
2c_ .^+8TnTz . ^[dm0GJ;7OGm|..={CLAhKFdAZFPQQbQqxS*pFl3kdPUQUQdFQDDAUUWkkmZDFd[;.:,;+8y]LG+!ukZma**3[J[IOsuCI50*9[".^~b[apbQPZO44bFpQdPTPUmpgzCoUxPQFbSAggPUZQWPesskCoUDdv...!w*ns96u?wTY[=rGTy]|s9uTdSQFxyvt!kbFVJbPQaPC7%7fsLYbFD*DQb9waYPQPd8pb*+hPAqDPa&Ad&pQbDbAd8c(;: .. =
rJ< .!n8ayt;. "JL0*mf,t&Gm!::+^|rGXQSDQPQAAZQFFUY5IYqWWDpApFbbbUUPPFI+v&O0DF3.. ."sD1+*kk!!u&Z8$zm4oI+Jys$uzaoCIv!(=tba4bZdApqpqbUDSQDPwpUD0k*DUDPDDhFFADdPFqpn6*U8cVbpDi;"!+wL8sz89i6z$u240LY==LaJ4qAdDh3v"2ADgngQF1WO+%ueQdV2WPDeDge{9xdQqgO0XZYzI*SPZD55D&GmPFFpUQPb5_^.. . . =
c3- ."~~-;. .)0m4YT~.>$&G),;"...;<1$G*dQQQpgASGYVeeAbKFgpFPqgeSx4T3tVTYheTkx3....temi*hef;^7kmhn)Y8Gaf3Iww$JJ6uc$CfcCe*xZd*eUDDPDdPx8z+%nLhhe4hPphSA*O4aOmO5u6hhZg06hPAh$nVLxo4k4wwwcwr9y6ms4!;"9o5J7USASpOr+tDDDOFpG=FJrOSXxnJfdPDZdQ6ugFqZ0+"iKQhl+8DqxFh3PFexGheSdZSPg85)^.... =
cJ> . . &GYm5!...-uk=:... . ...:(2C=""~!(=i]lvzYyzj)_~t)>"%dZZZFDhDd{[=: ^j!,(UZ0+..<688d~!+ra8Gowu]=|ITnYz$]2dgO8wGwv}!^"!%rC?,iFqbcIhXPFFx\,,.."inFDxd*35UxanaVmwsmyo9$v=iifa9jw6T{..^owoT%tlkpQZd5uxDFqQ8!"yDDQF40PXx0dDZq51mDPZi;.,^ion5pFpJ5DA%sUFb3/;"9SSDUdZWK+>. . =
J3- . . .VVom]^. .^7a<: . . <[3^ .;^-ir80&Vk5T!.."";,.sDSDpUFPhQb(!+! ^"..+UG4~ ^C8*8+"t58*8o6fu3cJv=!?ticTghSV0GJti;;^yak="xPDF4?}gFFFPTi"^. ,"$DYpG5k&kAd&6a*&e*6$uII+7+I$?%soy!. ;$56yf^.|GApbF4yqPbDs/!pDXFg=2xQbVUQLkYahdgd)=?tlv3ossan!OQPu|pDDD{^.^!iaZPeXgxy/ . =
2v! :0kw8!. .!s". . .. ,tJ:..^|}eZq&LbUaei..^...!QQpDqbgP8QWt.^^.;...%mL4^ .^JmmYJ::!I*9o[icz$+;;!1eDSS0GkQ4mx$t"^yhY!jPPdDD]=+QQPPPd8+. ..~smbxVmnxDpg*1[c4Tmoo$uf{+~""CaVt. ,1yC?..;!sQpUO}eDVDJ!wDPQP*;^isPZUd44LeSdQYaOhgUASd*G5t"agDC"7UQSA],..."(nbpeex". =
3v! ^k5*k:.. .;[^. ."(:=j0SFggZeFUUzIx;..._vGPDge8DQFIQPe".. . .^z*$~. ..t**h$;"i06$y9$$Jzz$?~LbKDPmfzhepUQZh*sGYu_PQKKgbg6=thDPUPWF=!i$VeeVoI7tt~";:::^!?iwo91?)?lyz3t~"^"tu$$[?=!"~LxZDVGAxxtupPe5i".:^=Gxebk4LheAAqbPPPFPZPZQk$)n&xC.^?eDDP) ..,^"~(|{=;.=
3%! "5ws{. ..^^. . ..^!wUFhPFpGhFPYGDV^J+./&QPpUa/^gDQG"5DX+ . ,i$!... "dGZC5G0$!kTC6yIIV62zUQFFQ1tqQ8qUFDZPShpptcFQq$PPA:,.^eDQKPpJ"\|IqGDFPFAPh|.. ;nkO4L3{aI$r[c$G*8mm[=LeUDSqZADSpPbYa9Y$VQFJ+!^;^+VqhVV*0OsyGFUUb&5ksvjl==!^:hFQa .!FDK*.. . . ... ..=
3v! 6s6! :^. . .;+TAQpDqF9chbDowDx,!]"$DUbFG!:;DQby:tUZt . .;2t,.. . ^hAO3Yko~"2kzwo6o3aGuC&KK8YSu)yFpSOTbSQPhT0oG#KViFQg^ ..~seWQDbt,^tyCFAPQQpDq<^"(}%=C!!5ouii(JT4mmLat$uexPPDAPppPQ4m&8shqDs4ay6=^<+ZAee*0utjl{i?!><"""".^<";SDPI . ;qWWx^ ... .. . =
3%! .!T43, . .^ . ;=pSpQdZe+cZDZlJDq,.")FdDpDv.:!PQUt.^}x+. . ./J! .. :kVsa]!;)ayCIu*mCtry3UKP9kD6!ipQbn|vbAZDgdsxQK6!QDD(. :"=9dQUS!.++7#dd*ADQPWe7^.^;,t^^o8mc(.^!=++]2tCCIz4QPbgQQFdphV8ObQQFFDpAGr="iap4xVori!^;,....:,. ."^.hSF[. .y#KA. .. . =
2%! .=V]^. : .^lmUgpgG5=,^GbAS"JgW^:iYeASgV;.;jAZs"..^~( .;~_, .. . .z3Iy^:..ukT7+2Y&o^^i8KK8$qp4\"eFPh~^"~9GZg5PDXs!mqP. .;|zmmj^!;+DPPs|rLPDWDn^...".,20wz=....:::;JC/"~(lu6Tx8SeUAeDPPFdUPphk+"t7(FPQpxn[!;. . ...ZD#i >fSD[^.. ... =
Jr! .|;.. . . .^wb*p0nJ!...-yqD*=.!gq"1edPz!....|ZQ;. . ^^...;. . }4qz. .:Ym5!.^{0o3^jb43PDS^."LFQK+. ;:^_gKC7&taFF=. ..^!",?S9qb(.."C&PPA6\.:..:i;!x8=... . "$C; .vOZDxzPP1=4Qx~:... . ^;:(FDAL5UQdk?;.. . .nXP" . ;wh7^. . . =
fJ! ^=. ...^jqx&a(!;. .vgFSi^.^wd!kdgw\.. .thg!. . ..:;. .. )08z ^&*T^ .!T6o!5h!!23FPU!..+QdX9;. :..;e&!_~=+hX+. ...;,^^~u?2Xy;..^!tyDxI; . .!.^3dI". . .:=2:. ."qU#pi3QAC^^=mz^ . .^.,\DFg47LpDPO+".. .A*; . ..=qI". . =
JJ! ."_. . ,;=v{t~"... ^Vbh0". :tauqgn!. .. ,tQ&^... .. . . ."n*{ ..^G9J; :;wyuc6+,.!lDUAt^.!eFK8>. ...;h|...:"yX]^. .^ ..~+;?gQ=.. .."J*q=. .."..<JOt. . ."+. .;6dQUt!4p)t"...)!. ..;, .>gp#Z=t*DQFh1; . . .re%, ;0L!. . =
f2! .,: . ..,:,:..... . .~PFm!. .^vC)":.. .^3Q!... . . . .+&t >m9=.. ,7Gr:. ,!PQP%t.;ieKgf". ^),.. ."P0. ..;;. ^^.;zWu^. . ..:^";. .:...^29;. .. .". ;CxeC";1x|^;".. :^. .^"...^]aDW|,+&PQD).. .jz". . ..!i|, =
3r! .. . . . .. ..IZP|.. .:"!". . .^9e; .. .. . .^{~ .=Ti^. ~a2z^ . ."SPh+%".^iXAg{. ^;. ,nx<. . . ... .=#Z!. . .. . . ^!^ . . . .=F8=: .8t:. ;^.. .;^:. "^igDl .!nDAI^.. . =_. . . . ;!; .. =
cc! . .. .. .^kI-... ...". . .."+^.. . . . . . . ^^ ..(!:. .,{aw! . ^SKI,:"; .uPPG^. . . .. .!G>. . . .. . :$x).. . .. . .. :. . . . ..!~^. .". ."". ... . ^.^1b: ..^"C", . ". . .. .:.. =
fr! . .. .. . ../9<: . .. . . . "".. . . .. . .;;. .(^.. .!y6~. .;pK%...^../0qq^ . . . . ^7!. . . ."o(. . . . . .. .. . . ^",. . ...^!.. . . . ..!oo. .. ."+(;. ;. . . . . =
c[! . .^>"... . .^. ..: :!.. .:ow~ :hF=. . .~8p~. . .<>. ^!. . ... .^. ,!r, .:^^, .. =
r3! . ^^... . .. . . . ,; ....{9~. ..&V^ :|$7,. . ,;... . .;... . .). . ... . =
13! . . . ... ^=~.. .}!. . ,i^ .. . . . . . ; . .. . . =
J2 ....... ... . .. . . . ... . ... . ^/. |;. .. .. . "^ . . . ... . .; . .=
crt??()iii++++it++ttt+iiititi+itt+++|?()(|?|)(?(?()??(|)((?|)||)))(|?()?)()()?)?()|))|?)?|)|)|||||)(?|?=?====()?======)l====|})============+==================================================================================================||=)=========================================i
e3ZYYd
sIRC4.exe
C:\marijuana.txt
uk.undernet.org
Runtime error at 00000000
0123456789ABCDEF
kernel32.dll
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
GetStartupInfoA
GetModuleFileNameA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
user32.dll
GetKeyboardType
MessageBoxA
CharNextA
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll
SysFreeString
kernel32.dll
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll
WritePrivateProfileStringA
WinExec
UpdateResourceA
SetFilePointer
ReadFile
GetSystemDirectoryA
GetLastError
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
EndUpdateResourceA
DeleteFileA
CreateThread
CreateMutexA
CreateFileA
CreateDirectoryA
CopyFileA
CloseHandle
BeginUpdateResourceA
user32.dll
SetTimer
GetMessageA
DispatchMessageA
CharUpperBuffA
wsock32.dll
WSACleanup
WSAStartup
gethostbyname
socket
select
listen
inet_ntoa
inet_addr
getsockname
connect
closesocket
accept
0,080<0@0D0H0L0P0T0b0j0r0z00000000000000000
1"1*121^1f1n1v1~11111110272
33E444
5X5555567
8/8:8E8M8W8a8k888888888888
9 9&93999S9Z9d9n9x9999999999
:2:J:R::::
;5;_<l<<<<<<<<<<
=#=|==
>'>,>2>>>>>
?!?G?S?[?????
0#0,03080>0Q0Z0x0~00000000
1*1J1b1111111
2$2,2222222
3!3+31393?3E3L3V33%4C4O4W44444
5+5D5]5n55557
8/9X9_9f96:K:~:::0;7;f;
=$=5=>=T?[?l?x???
U1]1f11222
313G3^3s33'5555555
6.6:6N6X6k6666
7A7H7j777'9O9V9n99999
:c:v:::::::::::
;4;?;\;f;;;;;;;;;;;
<#<E<Y<<<<<
1U5^5i5n5v555&6-6?6]6f6r6y666666
7"7)7-7G7P7Y7j7t7~77777777
8,8=8N8Z8_8d8k8r8|8888888888
9&9.969>9f9n9v9~99999999999999999
:#:/:<:N:;;;;;;;;
<"<*<2<:<B<J<R<Z<b<j<r<z<<<<<<<<<<<
=$=.=8=B=M=_=r======5>}>>>>>>>v??
0l0{000000
1$191X1q111111
212I23g4444A5s5{5555555
6'666E6T6c6r6677z8C9V9g9w9999
:Z:M;;;;;0<Q<
=)=7=W=g=== >s>>
1A111222
3M3U3`3|33
4555)686\66677]7776888 9>9i9999::
;C;;;;
<2<D<<<<
=-=p==3>?>L>^>d>p>>>>>>>>>>>>>>>>>>>
? ?-?5?<?U?Z?d?s??????
0q1111111182R2k23444
5I5V5v555
636Z6o6666666
7R7o777777
8-8M8e8o8v8}88888888
9+9J9y992;:;];;;;;;;;
<<\================
> >+>6>A>L>W>b>|>>>>>>>>>>>
?%?0?J?U?`?k?v????????????
400111
2,212@2N2222222
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8h8s8}88888888888888
,000409999
WinSock
System
SysInit
KWindows
UTypes
3Messages
iconchanger
sDeclares
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
z\$-`$8?G"
:5~}*PTA
*8?i4J9
.vuD+rK)]eD
wuWr%Lj}lKg
6MtQ!>-rb
[V**8}uG
fF7_2nFV7b
nncrRG
1{@_*r7A)3
)B$<_u
n{v%q/X
CcYAbR|9S
o(8uXh
=;\K%q
{Z (d%
2R]0y?il
jy%of`!
->_fRG3d
:rRJMN58
J#,QZM[CaLCT
>r9in2!j/TZ>
J<8]Y2j
kD[at /r
MTM(YN3
1<!$#FRyaYnc[d
zlhlaT
lLOx[W;
:$0*%-
"XhQ+x%es
cR7kF<wVn
l4O0P
YnrRo!3
o+FTctbsq
5{ZjCS
&>$3(1D
Qmb98"
Nw0C}Rfc
wO)a&m[
t]3^`~
k%>wIP
~.`Fe%ZM
zT{Qv
hg{HW_
dhOmj@
%Q]SsU
{F5p7z'I^{
6z'9Ua8
<Eq5N[M
LJ'{G~H
LNO+sh5
~fD%tkb
8gc~-o
[wc> N(950
yuE!Ci&"
2!(V9m ndQ
ptTZEsQc-
{y9[v\6
Ge@'j*B
O(0=//BZ
n=Q>xGsAXlto
}ziQ&m{Y5dnx.K:
~d;NqU.r
s/Yjmxq
));?M^*
If/\f$H
-^U]lZ`
,5?}{Q}OUa@
w)~M=Z,G-^Mc5fLKFB
G9!g-)
/Pd='A
X4:[fs%ob
tn`5g4+
SJ"y%x8
y#\m`_
2(t1hC}>J_D
~hl[_I
CwBill
2M"F^W;#{|@]R
S{L!L/F
3#]r[o+=
$Jvidk}
{m~7G2Ay
h"#T7[
MD%$+L6
D'epN=
Parc\o)`3\
mJM|D]5JPq
r>sRw#IE
;tSn:c&g"
Rus`JI
/L@TbXo+
<00KdR
f{QUJ{z2_[< 
Y~rC95%F
xJ~xv3CD
4aCONt5?kl
W~cClnD~%
%7/0O
PH=t8]
/n Lp4
hbR (I
qvn/.].)G5uO?v
Szte~R
(sxd~~Fj
3<^5amH
I6~Y|Se-
Ghl>&D51bD
efIF(Ly
e4N~fb-
B%lGV]i
jRdQlfO_h
c1j'_omm
226{ua #N
[,[cQp'
L.bWzV;X
!Zw@cCT`k
0KS5U
m!&?6[Q
6OYyc>?
%3^uuD
6!Pyyfak2h1%-
}c$230v
M&UkJeS6ax
(bBqRm1
qAth%s
Y;6tUDS
5hvfL*;
ta03MV2"X
3`mF =
:-6|}"e:
%at<%+[
8lz+n8So
h|:"6L
D]Rp*)oI
QO)?!
y'/ yWJ
{"K<#9
$m8=0H
HJ@i?7:
v3:]Jl'
v`PE~2-@
y!z5!f
o:l^|6
qf!*<o'~
@zFW[o2
C-]u9/cV
JyxP/=~N
}l%~>KTq
lB<%%>
v{j"j(
9>>U%AaAOP$v-
N.?Iaj
mLNfWT
/l8R5(
F| XI`h
ZS<$pA*
W0,.953
lCf9B2
ON=RQYy3
jinY3F
G9=$z"|
*JnA"@9;
v)`XEs:
6CiRV93
4Rv=/j(~
v0;]&.
D/"S~Y_m|#
Q|RFjL
4@K,1;
AQ!o,)]
rd%r;H
W[HAD-Ut
ezqvh"i
?~cMyI
LDN5>96
HHf.UO
Ci%R.oBPd
C=vQ690
\|;"Jb:+O "Y^
*_w1fRi~
AAG9eo7
01!Nf=
^cvfZwt?s
aLTJSNN
r y5U&j5.041EyF
qzo!db,+
2:EB`bvXX5
-(10#e~
w0kzd&
Eh]+z`<F
Xme?8Pd<&pK
3cAQJ0EN?tT'_ BS|QO
LW):me
TnQ.wP
&%cg^R
*)$hQF
`38j,q;
@-h5MfyHke
g*7]STI1,a
@P+}3DX|
kv1@z]LrFr&
aMUV'is*
wvMBZ=t;y
|UXU!v|FA<G!P\^Dp
*wYT@3nE>>
N6U'.a
V6U(d_!h*
yq hS=nc|!fIC#
/.4X6-|hz
%Zkfn
1eh\BP
CIR!83
}#3V4B
b?>kUWPuCw[
mGOEv9J)B!Z
/Nj7Kd/
3kh/x#;5
#G5_ y&y61
RCh~c7|
z>ocMC[d9"8
Nhy~$%2Ff
*?`Ix'#bzv(?
Chb%_~
B2VU4rwHxKR
JW"/?CF=T7
';F:T!/
lU:\wqV
*,2v^{N>ez
=!%+cK-
v$W?>y
wv9i?[i
YcT0nM.YDi0R><"A5Kv
v`tH[EhcK
6_O:!g
I7M{="
j}mfv:3#F
2#%V\69Dn(<[
^EI/2!NZ*@G)Q
@Z!ZGQ
00Rs'EOgF+{VN
)z[niMRm~
0@v'Y+> r
|Fm'
4r+6&^Y9a?
oRsg!1st?")
5HG'E*i
1UFt_C&+gx
OjGE7MRA<
Dw[Zp0AB-Ejt7
d8~EfZO
D$aK,
UkTL@w!
xY7:L^
A%])r@
L0LD-m
L%@l\QCHh?d8;f8
ZLm|O_8$,t/
-p!*nNjW+
L9XQ"&
sIm;Qy5bIA*+1
hU ~rXQ%v
3>^AB-*l!pH N-:KR;glD
AGMiCws
E6 B|_
+CEvkjj1-
}3E$%zzohg
C7Q`0@
u/I|AL
UfRf4*U
M';5ju!
%whrO&?.i
c!+:0MrS
\(>&(qXi
qIU#K`ei
0@w6H$yu
nJ{slX)|+H_w
{9kUq</V|`BKY
%;p]{-ZEgvj^CJRZ
:jPx}f:i
{l3y}t~8!#N
`4X3u*y
0*:'$x
TjQ}p6%&[
r92E86
.RXd\VmV$SO%^Nzhg
U[7^);HkM@
+U`BA1i
rA(B}J
yS%-.^%
\7Y,h[0Kgc
t(Tu3JTuhV}
g{2: Y
XDcScjtg-RT9,
kcxdT>
'/?:~m
+|$1FW=>"&PGu9US2
\#;G=#:l(
2i|tMi'uq$@g1q
@~wdspHg
</-8PLU8TGlK6
ZpIc?m<1jKv~>
TO+^{(
qvjFXV,jt-
j>dCgH
#*CSHaI
qyW'-2|
X.LHAF"d
VrAxbX
v.AHPZ
^m[-A0
R{C<"V
m.P|Sw
]uf-%_JN_-I*dKZh4T}
K~nG2e~
W!=aN@>
!,/!k5-hfi
r;18e,%@I$vC
{+v6'9
W5~|\'RW%c,
c#7Vk_+
<A[!Ng*0
?hJ.R:
<YKI+*Elb{
FM*gW'
Qqz\Pp
;"&#rR3%0
(A. U&s\
499hJ;
o{g,2c`
=#ZxGIl8EB%j03q} }
/-<DCHZ%("$ik
oJY&1P`
<K"-W?S#
6y!3(<x'J9p
X0eD)?
)Kuhkh
E49D=M
*VllMM_A!{CYx"
6',-b%9+
^^`If+pJ
*l?gk{lRZ^
V;xUO08n%H+v
EbmZ?fOi=
T$z.yb
c 01eOut
%\\XF
pVe}cl&m6OqRdE
_d_abM
"Jt3l:L
ZuH@lX
Ae/V(5[u
[uA7?L
2SF}YQ]
=]WUbB
^|^|W[(* J
_t9z&T&'7j^C<'
jSZ2kT{
NRz:0\V]4
XqAw_f
,!YT,x&
d'1>JQ
8U2S Va,U[Ck3
M=,sXvs$C=#nGl3
Hv#+X[d*c
p,NYL\
IFgW:^
>{}aj8y5
hB}(@aEmF
^*b.$Y}
I%Anbc'LQ~*7GO
&amH#D@
kR)ij$%e!
B:P{s2US
)s!r& T
[CsUQ+
%BbXe_f
HW>%p#
X5AWpVnC
j-?nme
Svn-o4{p
fz3K^7NTb
#QgZ&7p
,[.WDC
fTXuc@
z@"y.V
O50BN0+x0N
&9S:vYFD
'fB9J*x9]
G%^},+bXT
^$1Sk&$1wL<K
eukG0Xp|
F'JizQ3r{Z
;s#(,'H
)[yDKPe
}/<*TT
$"^_.|ajTN!3h\[Q
AcLc0A
=gb{Me+~5}9}wj-5u
@\XOc#T,
6*+(VZk
AcT+XJ{EsQ0&
^MNB|UM
Vq$sE`6zA |#WsAA
>&STa&m*R
#.0O#(
EbZM3,O\
;[8u5Ik
#+?%da
a74&2jH
N#;#}r~
QeW6+o
MQ]wtuvmv!
4MA"4s7s
f5<\8~'
GKySk1Zg
=1rz|j
SK~V o
`}~ru.
lIROhNT
B*!t++5ruh?M
QsqmD!wh]U!
%`z 4t7Pm
Pj3=h`E)p{
_I3y~1GKJF9BL
`F|b/mE
hp,Mw.bl
?T*76T?~[
Y60&$.'U
$F9!#ro
OeaiA*/
=r1cn.
\{:N60VE;qE
R.`HA'
(eScd%@
@zTSo-}SvMBq(=S
xCp)Qs|=!
dwtIqaEL
x'I~(oEE*_w
jMrFif?58lT>
x`h\/"
6J"!-@ZFN
"|_9i9fV`
/~b4QTK
G*Q&qgO%i?:
]2.^GDUe
K*pkD^8~A6x
:!fq1yuc
('%''pc
dM6..[Y
`6zve<'/:z
==46-x
(MKkNLO29
]SnsP7
i3QoC#_
rlC+|I(G
N6rK,%
*-%vK3?
A`8->ZfqoHj8=A
Vx^/zr
Kq*8ZkQ)fN"
=c_3Jr^}|[
I})N0qj"]
G3SUnj'B
Ui;u}~
c~D,5v
NC\\"5#
lX?Pf_idT
uFJ3gy:T7rtzD,r
Grj|cWT_
:w95+L'G
\lu|@LwRjaGss-M$#
;u>h T2.B`
hq!pudv'*
gV-k&SQn}
=zf79_
K7Fe2A
kC(_&,5Rqg
/3gvxR3
pu*HcY!~Nt
WATBdk{bKI
^%+_b5}
Mzo3eGf#~_
a`6#>`K|t=soo6\
@kX4M&
qtz6Y<"
4\vUs,|2Vl
zQzJL\
!U=+2$/r&z
O=pXy(w:
Vw/o6hq
BB)QID{N*W
uPA4UV2;ABS
ZL&GG<AUm4a
90H<'k
YqZf>N
Czs:ug
6Q@/[B
m32Vf\
>ZJ;)iA,Qi6"
d752{O
[MHBcx4vPuPE
3j@^C^
`dl#"A
Khmupi3Bt
0t-F(L@
TF,fFvu
#mE&v[3Dr2KGeB*Nhxyl
7wy0s_"*?$uif?<
~,Y3Ivga
,8r7@GYC
C@$DHEH
hPFl#}
>$mS-z
B7?z](LF+3h-x9oPAh
#!wO>%
uU%iXP
&|"rl{13,
g-2:+`
il9{>
')pla
k;}.\W
Frz~AC}|
w1lAtk
k{cv|q?7?P'PT
/*{\C5:
&^l6{A
3 ]*i+
/NcFMo|Ub(~"4
JZcS>M)6
PRx'2A$TWzk4jp|<9K xo3
_a>uT.
V"Tq|jEWw
8vRELu!Q;
%lFJGb
-Rcu_t|TL4X
c3.Mpc9=+
6uPUz&
REml6vCRc|}
5T >J7|
i p_.LuE[~I'
0wyI\L8
=L6zKA
5ZndM#b
79j^00C'*
p%u]E_
j.j0hRVwgfT,`
itAI )
m4Xe>2
IgzXmFO^o
Xewsg~0N
CHJ>`S!3"_
b;|^t!4
l)&:A"V
I;qexPra
Tm!>tv3Q~sLq5FD
=u7&%E=`d
_B.EjYUna
0""GJe
Pdny2*.}#H[m
wmha,T
]x.5!Ros
d=Tu`t
Qz(L"S@
D<&r:E
QCnYNOaD/#29
-X8B3oapOP
k"W`,R
$IgeB/
.9#`@Y.|
NI^5u&
T\ z^J
HL{IJjh3Q&
dp)]j[
ihT{I|
4-R(,Yi"
pu.I1r
%]+<F#i~x/
2tEWvc
\#Cm0OP#HM
nUBqt#,>a
)NG|$#A
0n,~K!a
:!{ tnM)^(8
>jA 0R
:x^B<Z};&sC
UESUnw"
NmI@glf
lZ7(~$M
r0Urm}
XmT5gy{
*n|E$w
)N]*BoI
G4sjna|
ImB=YLg
Csw#UiQ'
{IWt%| ,
B*5}h)
pPUhKNs
2b*b#6rM~|Om[x!PAqFJoXh%
EbZ3mg_&;#yc^
6%btwVU=
%v!CcBR:-
-_r[bX^5OrN(zW
}hAaLL
SdWX|Sx&
<i+no
dCYGG|
/k>OkfA
]gh)N?f!
am~>d2[|Vht
g],P~O<
A"MOzkP
t?Yq.x|q"h._
leXB&A]Rz\~>?
UIfK'Cx'
05`ee-
{?D70&
vG:~e`..
g;;xUo
lO5I"7J?72'=%"T k
YZ>\
G]67$s>,Dx2'
>oqo$\
uz0jRGqE9!W
\`v*~29+WVVV
1ih#2x_7.
i5'mAh1i" b
pN7Ek[
L*?:@V]
\mxLj+t
nVZ$<%
h9-DRsy$VG7.
8N^ w{x
QIOGL&
_W|a]g_Cd;
P)gvp38e-
%3;N/bj
_A#d<2
qywrGw
qUve*5z%-H6
G^|mG^sszb
Rv@MuL
4_fw(NF
[;9j#$I
"Z!sk'
DdezO"(
tPickw
=@Z#5
fK6BxG&
o`w^xONn
Hc%+-Z*I
g'%OxfC
C3n,7>0Q!j~
FN!Rd41$b
55%)z!
*g:_Lz
aKYs.N6R(XGG8J
IV'!ax!
a!Y' \lebJ%ni
N3o;P/:
yn"]J]dDDS[
F8{jGi
-eE9K\Xx`R-jZ
2?*7+d[JeP
BCo{6}x'N[
fKri5h.
_17AYfzh
7F]H=.b\.^56
r#T#t=G`/
kCmnltW*Qa
p;U`bN`S
QejL'8e1mC
{2/@d{%{
VI0^429)$yhg
aY@bq
mauIWdPn.}P
&jTS'X
4idy8V]
%!NPj9
q7'G4`k5l&{Y
F=&Ua?.mj+N
3_a/`JU~CdbGx
lKy5!
"m3>,c$H
S$Suvx
]K"^?BOC
9~&<|v
HXD+0
ET)r%JX.<
dVZiK'
{+NP)84ygK
|jNz0x
Uu="vH;
th7L7M
B;c4X,p.^
;UD}xw?{!
@b$4MC
G-%L@!WF9X3j
P35GE"3$Lwt
U>*xSw
?6wg0D*0
_F ';\
03TGIA#
x]($o\'C,^\D+
Y8Kk$W"
}iW0Je
sE`8pdelYVM
l5V`4#
9]}3$!X
%7u,xjl?
ae->]k
o9w`\KidZD\B 78^Q9
4R0]Df68vM
W?>imlL
Fl7Igp
A''X\-SC%
_NKoy<
{WBH2vF
ciIsJk8'`
bgD_)hV
2h6p[?!2_
9aT}8hJ[
Q{I``8
D(7z/^K
G/=/$*o;
pyd#&?-
#Dv5<[-
J! V"3.
VOST fh,
L#=/Cl9,b
K.Vyt^"\
Z\kkwO7U
T.!Z{4{9
_LM&Qf-I q
_>X .t
%\^YEn!
KP.ujr
?J*(KPmX<
Gr{BgT9#%
Sk6m!r
"D4oD@
QMXlhZOi
j[<wUdA8=K
]k5MJ+
Jn];rL
Mkq4}H~mcL
V7]{Xg
(_nFTA
8CCfH+M[xb_^Yv f
LNi`BHDl5
7F%p:?0
=vBa1[2q
V5/+Ls
#Xi_&Y
?{+YQ@TI*
.{%jL(^w;
C\{t7fw8q
uU"F-}3Pmf.3 H
C81O)=!f
8*)4G[
1c07)5-rV
[4%=r~'v
g8~#(9
Q("+{x'5e E
f|Q@?AonD#R
oY)_$JL`f_
.`bzLn
d"?J07U`G
,]BTwX
tV(LN79Rw
K8Vn)vJf)H
*9lZwZW
JNd3cYrg
\{o+1|EW
u0{<*Wt
zAvC%UC
"dd1+uP
VXrd#fIMYJ
k-^tq=N[<
>$OY{PpN;
0sm/<uN~
(XVNSFR
mOOCohD
Y9%k 
(n+Q>bp1
|BjI:X*>7F!
Ck5H|`2Y+
i?k(69kL
sp&rM vt
X&tNsR;
n-|4:o;S\
bVbSi~MVEu
[.;q2"
gF^~g}95jsT
O<`7Bh^
z&tS?!1
?Zh&@)
u3M;`@A&Ck
0P6Z+,F^T^
;>%h[ i
@=]{rH lOdE
y_XJ6oyW
NQ0;\j
'ckb/UD
E(F*_JUO
RTYEEGYYD\Em}>3"
,_4<P@3P?.
Xf3>4x"XDc
h &IS
2*3kLdmJ5|Wp)CLfRA
(Lm!P]o
-c_IS<<A
EgE-l(j
MYTz`e={
!//a7T
$|j?=9:P
#:h/T[
Tx]<1GLd
Rup`2%
-=TR&b
X*Ezw
py-76g
f2O-;Y
sFe5,d5
/Y.A|vt
V<q4[H
M2faS)=7b
saY,+b7+
"H3mFolv
yRx!vL0R
.ji7:@x}"
#%!0Ib20-
xcMzEWBz
'zxX**hx
:X'J]`|wL
7F&G]d
[Hg6D\>@/cS;8
ZTHm}m
%1iFW)~v
ekhqz=
;d>`qc=
UP;g1-Oq
ND/Od{<Rsq
~Hi7PxUQKBk0?,0
'Zswu[Xk
/w`vVP
8ov0*#+
}2<_3
o)Cn#`dP
"0eS:$Th
:K&"I3NZ
|wl32kW
VT[l-
BjkfV"cl2
C)=Z,
+5X'^a
,+bEB&G]
iF=+XH|
/st&AN
Ys<vr|
UXC5mkS
)XNVDJ
I!=susiT@Q{q-G&
GY"YIy
6ZgdE2Ak
Z|0mgp*
~n+t]@C
)<hQvcZf=)|2
,aFuZ0
DXJ@RX[
v,U_ob5k?'
s'|v@g
0;(D^5
|XTtS2p
zTQB?Y
Gg5<D2{
Jj"KV<
BH)HE7|
2~pa&W
1<QDjec
x~KsrP
8%{k"g
v?)~0`v
)t%@AG
L&B$L
y9c30c0
"k;zG)
,Gzk &9:S|
(_LM17e
5p<l%OTy]!%~c
A@-[|E
n|bM$SB
'$sxHK];&%aZ
l8D~CsPvN3E|lq]e
Zu W#~
,??NL3Rw
Hp/VwD
$^pEK:!K
,Y7uqVN(T
?;H{$4DD
_b0LP]\%i!{S
N7 icF
_H[VK9T
i P\gK>
`l{lSGb
i9JF]k
W(*}8-Q~p/
j`=2'68x
+%rOP6vk
2d/E<2
4Dp-04
;#&xfp
%QN9LBw-
\7(91
v!($ohRg
{^Hx>c
Wtt=UPc
'<hJ2?m"zbA%
RPwRxI
02[WhtK0has
:/qH;lzRY8
97Hj@'
*SDX*aEe"w
`#MZW"}An
:`xufzJ;_,
f(tn6~
-@$*ED5
C2/,a{sBw
K_yF8n
W_$_!v&
?kb}<iwk
z0@'e\Mc\
Sk_xZg
C!U!Ou5{3
uhJ'7W[:"
%T=H ?X0i%b
wqLM|
QnwnrIR4)
E=&2Do
Teg}pB
cZ(('a
iD!ip?g
29=:&K
8$kp<OW
(G'OnEM
=2v&s{
%8Qt1h`B12
`=* Mr
-FWYH'h
7V.Y#-
<0B0Y2Av,
mij7c(
l4,#zIc
K&ZnWp b%~hmTH
Q4yu8:h||H_/c?(F
X C1MadCNY8
K%>B1!
U_On3R]
'!CG'pC
a~nL>4j
u:iP""
'VRDs>cH
@O-r|Pe
08rMlU(
yT1}IyYo
~<+aZ@'i\ks
Ax"N<>"
]DOni;
P]/DXUb
^k'Wq
-[+gM_.
zNMDOv`+GD
,\?ld`
CqW-{B
9%C`v"
M7j'8Y
/5i43yD
^`?ji=c
*Dh r+I
p9Kj6/w(H{
d<>#>'
!q)K7TbjGG
GX${Oo
&t ["J
N'%DY
.F"ASU@$`
d/r}!9)JFX
"GQ3S0.-q\
'k }T>HDF
(DEa'+Z,N?
6p|-48:g&
||-AlJ#
u 6B7A
PL.h{Qo
H~|{?%#n
Ijv`)[
\pTt~h
F\XgQV;8>&*ue
o 5pV$
|/9PsA-d^
C?UE;,olc.<m\
wXZJ ZB
wC!M|Hj[Nv
};UZk,;FUN
^XK6UZD|{'|
dR8GkJiR
X;i%id[j
ei8$A*
^!s_9'I&:]TF
b;]$#Y
| hUZz
}C5``@el
26urS(n4q
Bl=urG
9f-?q5
;}Vj>K?
}8Ah&A+"
O-a`@VBEr
"N0M8X-u
eHA1a}h
eL~m(z
ZbZ;gCq
u!n""`
<#oIAY
f|S`c5f
bUJrP?Qw<>e
[9=A!.0wJKE6O`
>'7>u[
7;RI?l
'n<MBpf^'2$}'^7f
&q|%CN
NiqkeZ
%X=DP 8:
3h#(75/yG>
g8wP}F/:y
YC-WJq
.8b.^6r))J
8pedh,9!
jD7PK k>y
HY.PB6
}Y2R8s
Ca{rA>V_7
a<f<2)0
&&:A67Cep<ZH\KE%e>
KY`Mz!j
/JXMTp(
qz&<1h)f
fH"xWW
lo7`c/J
N^2=46Y
d@"|mm\U`m[q/2b
I|9hv45$-T:,K0a56Z
vW7~W<
ii^21}
{6?"8H
2wc7J2PyoOix
zc.Ib<
DXu-(`03
3p6mXj8
[I+<8[O
7({#QnT
T'<S{%o
)Jp]/%Z
.X\1V ew
WR8EGbf7NM
q"}1&yo$'qah
cvI!Co|
qc?,MZG8EXU
fzT$!Me
>hqWM*
%.bJ#eB
-4<}fNnn
lB#YA\
-}-pP\
IdsNG]
)X"s$Jv
F'<~4F<Q{
Doq7Y
]Cd7pD
9*ll:SY)L/w
A|c$f?^s1]vqsE=OX
EB9~ex
AXx)NL`
UoD]u3A
BGAGnk"
gPZaib
;!+ek9Q ]Q
SbBz0f
}W;wgyr4iZ
3a$lzTN%
k!$_h&
lo"u,uFGsFzU
&jd\L8&4#
[)<jrZ
<rD}R=F
*w(ZZ}R
42@Uelp
Dj~='6g
?Ej%Ic#8
sN'lkExTS
+WuwlCp
:olx|r
u_'tRtu
/V[Dm=FR
W^/jG<"
R.QG*6e<W
)?D_?FQf7
v^wvg;I@ M
"](-'$
yhMm3[z3ps@oS
!Kk0x+LYj
,[^."Im^
xqX=eK
6wFXXoD
ua<'QHV
+BmB7j
'qV~s0.HM
72>c--
qJ_#,? S
^&DG{^
kk$CPe,\+^:
O' 81FTN2zX)
mEe}6!(\/l
79{gcC
VE_:Sd*._gN@
6A\(-gkS5
6<N] FAbV
"26)N%T
SFnv]=
8Ljhe
42lp,QnM
"h9V`mcAm?P
zvr3qA
G1jGU +@u
ije\[+C
30';^-GQ}
:IK%\>
Fv)VIt
(( Qs`
HL.JOp
ZYGvt%
wlI]pZ
uv'Dx:<ICKs_
S]%7Zbp]
Oua:T2z
Zv9'A*"
'TGE9q
3$cAxlt(`
>>QDL2H&j%&9
tc\SYO?TCp+cVQQO
Ob2fu<
|\QZY-o->
l; xAcxf
]{Pvrz?
iYe"j`[7!~VL
^Zq]k9u{2
Bp0sbxcP
8C:jhYw52~W7U_
?$5I0cT8
7x,@wH
7oz+1';Qp#b
0/S:YBkAx
st.MV7*b
Fp_v[/679b
.yb/3*$
0!8<P%
4xK\jg`<xF6$>
Y009X8
zS6J~eA
`E_r2h&
kv}5w1
BI<6sr
7?p^6W
A8@UjcI
c5FsK*b-1t
9PSJHV
cbB*0N
zPLRI=
2~'M]jUh.'
7UjE<g9_"Fq
}T/<cs
|ps_9!?
bj+m`(.>
jZFkN;'2K
&|ZS)+;
o!HY/v"[Xv
Wd*>>q3
0:C~Q\2L@ri
O#P[tR
S6f:Rzt
X !0Dc
-/L=h[<<|
t~TPR`
m&QO}'
9>I/J]]y
~(CtT GcE}_L
X"gRr_+
f#J`u`Z]
voVOhGQp6VLb_
+MtOL\
3D6hvY^L
}D)=J/
r~/N=0
X46s8Zcp
/maA.fqY
I6PlP@r
qT*:id>_*7Fo,
LlxrXS
"K5~R?@
tk !}rZn1_M6
T_j(Y!5[
BLZP\p}|?pGs
CAC)weh@/7NN
8(Oky |)
82Ge2Igz
obs.^ |]a
u=1Py/n
:B0H}]+
,`$T%l8
fQ6.&O
7"B:~4|
'wIZ&TY\G
bbt{]_T!)X
7*"JL&
il{ml
z@b?Aygx
v?YTb[y+
e9<+qv
9/l7k[1=i
@l0}xIEL`6B&;*
6OF,cd+4
#RP!V4
F!x^:6R7&
jSB@l-
m3 2X|
5 JM,1#B5
[0,dhL
_d9Pj
;-a'eSD
&nPpTc_m
PPtewQDP
$Y ID6#PHVG&
B6F!}9G
:C3B!:s
5.6)l<
2~/XNap:
J4k-{X
!}]7F!3>Vf
iY]&n?\
MfFg|~x%
n!a3yv a
\^74_vrhCp
x>J9C[
u#h|1\'1/
'w:TWP
mw{ghc _*:7I
@(R=%^2
G,>q#j
A:-)im
fmv9LkPT
i}0N#+9Kc
+1+vBwt
bb2<i1
[bX2[+:J
52/}M9q
cKuBkb(a
E(dL@6gN$+
/5!xj!
3}w.\+z[.
s<NmKij,B, c
Yt'ZrO519!
va2!Yg}&
pcg!dw[[28
1-]$MM
!:wIJ|#r<!idy93BMgp
<'FTm8
tCQ_B&
M$VtJF'k
P72Q*Pa9Y}
gI:Ht/
xO5s!E}j
W\kpZ_v*L!}
3T^9]Q
;5M@xvup
(~t2z!
dkxG3T~*{$L
_.^L.3 ]
d"`gib s;`
6SBLn>(
QVL"TA
m[<7 8
!d.$Qy`JG@7>u:f{
l!1~(0bEjSe/+
$9|kXfxBJO
-s}'!z~uCU7
jyd=8k)?B[
0n-S3\_k!Q`b21L3*'W
D-DjBJ=
}X>BZ7
~J) $O
NV2k>SO\
&>\7nR
2osNi+
HF+U[&gY`
v-vq\f4*
PUcF671TZ+X1w1&
k$Hvqw
MHCc{lJ
|Bk$^ gf
)V-/'A!9\tH0k
sCbkea5M
C3m$*0
QHD?],d
c2!$iD
H-TsFo{u
ltv<L;
Dqn2kA
raPhBP0
Y~!/VD'4A@wZ*j3
70:0C$
b)KY%T/pi.
+X?ts?2%{;G
d'ynP]
AZ~~U!
Z_1J6<T m&-OdT=r']Q
(bk=O}Px
hT5\R^tPDDLl/
Tq{vc@T?a:}h>n
'Q: 6~4
b4Nbh!
9qVFr<
Fn/3+u_M .Lgt
9s~'in
$f*B)HH
]/w+J;^!
fJ,;EO
mH#K"U
JVAmA|[
c&Moe-o"
a`u<}BRA
'3EC$ic
X dku
i0U#3n2\R
V*clY&
ln<|vU
&[L`4ReuiJ/B[
5U/f<q
i'7?pz
]a1EO9'i.cV
n;;/Tts?
x}.owo()#XXh6
2C: 2P!Ir2
nw]5q&R_"
p{k.Ph_*qg
J6DL:d
;6l:\l
f.yh1tb/Q(~
1a,f'+dnZ8
9%5K_"l>=qm0C:J9j
o)]0k(^'h=w
tcsZf/PvWP'}&x
9"2"%T
Zg^Y^{U[3
rfeZ[
*TBv*pt
h5`?ZR
'#@RFi;i'f&
$oM{;u
#a&As?rZ5Rz?@h!
CQo):aV
=<Het"
P70_UklJ7
>[{*8+OFS
bK@n6@T btAc
Y5{U>e80L3OgP
b~#ui|Al]}`{
g:'Y Xv*'
M9R="
148RcA
LQY$yY
NnIL>sG_dTVHhu=%kpM
%9BA\a
'Uo1LC,&
,jG3<?P3OR_
iW$em 8
vo8D9U2
ar1wiq
d<,$an
TP::RH
q\Ed8NC>!
9an%&]&@:
#dF?L"
`D5w~Ne
E>9$})}
g{<LWew
0Z*|@=
&@G:a/
ZiW@"es\_
@,|$l/
CkB]*VPqQe
Ika#F]{{PP&L
Lleiq3;G%
U5T=$8
e@9wi\
a2=[|;H]u@
~u3hXh/3
FONp$Kw
ETQ9y.Rmc
~%:#Fb}!^
S!%#V?
TsOS)&>WIJb3
Tp=v+Az.
fr@pTJ
,[mRuC
WBG}&C
]r2:4g}T
L/3V|]h
*E4juzY
q,/PUIj(
mrP6^+u
@;YM~2[
HXqbR$w
B-Zo<_[KkW"\ds`
&.[n_vMl-O
%RQmS6<?
IX@P^
d?Ts_PN
A'}">e(
?F2o<}
qZQMR0?xrL
C16S|soAl|}BU
]UDaa9PA1
,]5jA!
Tgn=RGW_
><^^J]OA`KR
2sBKuS
3Nd$@^r:q
PfF-zn&
jHLtiu
j@OM}ey
O.gD)[2A
f^pUo4l&xD"U/R=l{Kkgte
5V]AC3);pa
M[.@aoSnP
W1C^127(
{uo9:*'/
7R`Z}'d+
K0/KT<)B
%?CRmr5Qm
AT8bAco
E'U7D%yF"z
}0bh*(q\A9}<
g._C-ty
]Ts4CgCH
JjVk=0'K
F(gO{g
LJIJG6a
&B"c;i_'A.R
w06(;^!
6_p}n'
~/\x]$D
p5h/oy
PF1P]}&}0
VmBa}m-SO,
HW58rj1}8dAV3
8_;3`R?
U0kMW/0v=x.
Zd G@d
fOT"xh^=jWX
QD|G|,:Kt_
[XARM`
;+vpNQ$xw
e]Qi#Q
.'6el`F%c
J3(u,w_3Q
8<=K'J
>*H*v
'xi`j~t
5ZIlRkU`}@/aXwh&M
NQO-LG#]YS]HW) is.TbHztB
o1[[ClZwY
`WnP$)Vg$
;]$S\ro?F2s
_:T"_
HvQ@OM
[VMVpAP
[l7nr2CYq8,N,
H_Pd;-|^W <
~ar83}@_Gp
5|L.!r
Sg#s#`t
?Xl0>x
|dr)Z
K0GpUjA
\l~PF~
xN`ZkM'
&/B"ls{.
9+Y!OX4!
N)+X`ry/v
nF9khVT$$ DmBj
qs6gO[&
{obMx3|}GW&Ub(
}<|q;K
J'nnm9
CR\Xp/WcG
;\&_k4
3&99`J}N
ndh_keLdXsg&g
guGQ_Y
zD!qH*./
SoPiitZ
A0e#Pf
*$WP;L]
#B aA,B
3b<7M,
NuK1[-?\w
&"~}g9Q28G
`1^HKx
1UWy*Ku"
/k<Ahx
0]Tm8&4|6
S/i~ZU
==(Xxw
'(i{(+
YwPd_ue].
r5>OnvU
IzsGvH
.&hJWIv
jlPnBf
E})},QpF,D;v=DV>
#s1/}L5G/,
T(D^onK_b
u:P(}Z
oQBO}?|!
{>:\oy@t
r[pN]3caE6
t_988~}gtg$R|
(/N#/C}
3PiADB?vHf]s
S6VE5;1k
N; f\,
eg@>($
NXMn6r
jYP/h4@
Bs>0QP}s`P&@M(w132"3a}/
1-]hpa?dHMT
pO)n$J?
&o% ?'';
Sv8vjc.
gJ qx)&e
pICs5_
Ey@B0`IC
n}A:AD`x
uy=LNfjI
,o_}{sBq
t%Us8H
2b>Pm(xF:1s5]U~1
EJ7r^J
r'PZTwpv{
wfUv5s
pq-d^!X4
GIS_fU
&_TGbO[p
`G?|c:
TM>RBh5_
kFnpUI
kE&8L qN^yV3QF9=3
B~HGiXSkBor
w@f ~
ORvsCXT
k|S@Q.-I
\{SLX9
yIN[+RE=
)f&H+[_
BixN.-
/7k j@
Y9T#kT
hl\e%,II
?X)V;DX;Nl sB7D
}C<u,
uspO/"3a,zY
L8?^ NK
lV.my0dW
nxVItU$
ug)4a&LF`nEz
3@&^,d{17Z8
uE%aZ}p$5@0Eyq i
hk{R|j
G{Q2x"
jF]C7y
|lNiX%L
E?]$q~$
W=+! j
:jT_WR
E2k.:#w
cZ5:p&M_i,#u
FPX^OBbr
N}rQ)y
z6}!yo6m
/zIU0l+
;IK,^(oS
+ua|pHNTXW$
`mE?%e
|${{GOU_yiG}cH
!<?<LDB=
gdwW)7|A
[TWo`<
l-c}"`U
6\t"$.3@J
ZO<C`|"?o>`V
ImsHy;su !
m6ZCc(YU.Z]N5
SXTSx1oTM7
k6J%,2
,KL]F]%
4-}Zt_LN
>5<}TP|@5
Fm|;Eo
V`R8B{
s;=O3q`6<{
{T++'DCr
xZl.m
{g)t)1C
;&6cT4.s
_h'#.n#|
1>b?>46ns
ys4IEJg
]tOde:K$%
X~}y{I
PY]biN"ol
tolJS*P-M_%
BH9d
Yqtzn1~s/":(x'
T%0$&n
i2@9y3M
=o#nk!Jm
drlFq}X
bWrte{/J,
V?F;[h
bQ 5n|F@
MTiT3C#
x+aoKT4d=NPtS
IR# )wfjOw
|1D|Yt^`!;3[U=j/3xZ
eOnEh}V
WScZrFX
Pi4O4>
u5(AX|Vpl2\dZ
}o1<xr`
<@{m{SW1kp=
zVl~yXQ$d
Ca3MSdtp
$]:d5:
m@,')l`
F<cY!e
?_&f}dcqw
6KiX:4sf
Kckge_v
0.6~2>TE3
A8)7[`+c
7:/{}[7OnR=a
,P46hP:.i|
m:K2t?
of+8"
>2soxW
ZkYj>65+2>F
T>G\p(IS
ZMmhg'D~6+Ze
WgE&emwc
q,pR
oAWxtP
2?,?7;j
5<3]B>M
.W>=GIdfh
\o!w"?
#K:bja<
Wi`-~W_2-*
GjTWFn)u3$jDPf0IED2hcD
-Eix(i@,
T2D0&e=60
?}y"!LK
X~oFeif[r
DxuMQ+[d
RId2,^E'u_
wqJ> vIk&E
y+@kylt;HP
N.<lDoDal>5
)2u)F-
,_bLm0?
7["~a GEmq
]~Z=[jX]>Z
1Xz2B,%Bkbh{4
d(r%Q1
,OOJu^
S-GB:Zn{)1(*#SV
4Pmh'mh
UTu{#q]?>
cV]+'+
>V6nTG
>!Y-:t
A6R0Htixg
/2l6|s
X,J<bTOMdoB?
xs{.\8KzW
Udr1J
\x*TLO
##_m!G5s
(0tq}5
H2&Q. D,X$W
o4,~ng
bVz,LX|4
V0x-{y=Jp
&Yi{U^BC<6du
#A.Cr/
bp0]CU&
;;QI<';M_E!
8R}*Yx
SgzP5L
L6z],nn
q$B,. 3
!(#(EOT
a.0+m"^
{w9(00;x(
tzX=dl
"v*r~g
HJP_v*I@
/?~ T8=
7_Zz2?=
x{-{$ve%
n'iK{|6
#2+Y_h
'OwYwfd
r~BH]c
5=@p3F=o*$
{!!^5\
VyEQ`ojza+4
\Ru3\ec
8Ch%Kwo)&JWFN
n,t2fc
4g@\q^M
H>Cf`UW0
e"$hMswV
N\yvzz5u(SFf>
mxAjBN
#A%[bg
5j>zKH[=[
!Gs\]$
9u![;iw^3%
J1^z_f
0FLo}or
Pxi2-p
,fkX7}SB&sa.v(w)
eiC~<%Mc
R@.uVC%"
U;-?1op{/
Yk;'[L!
;+rq" 41
X~tJwt*
Qm-F0
f3SPlW
&mn5.0
gEr5ke_F
-10v3wAM%732
c7z"BrWTN
WkJFg,4Yxv
!s}?JdQIq
39dL4KlicY
N(,fC_<cs
i@4l^P
Tg#9K\s
\(KM?j
fpz~H]rFt
:x<R.*FJXw
rKA|pe.a
Z[k@#E>D
HRUAPl|6
--9](g_
4ntW!"p9
sl6IwC7`
~n?cdzb
bL`mHs
m[(q.m
@a>|/&]
x_!~9kv\rJm
|]3ElE
y)fMXm
]Epwnpu
L[4b'93
0TH/\$"h=w={YOCu)?&RB
3kSnY9BcAqmA>
YrTxxX"
APk{f'xhaS]K=
HE:nHJ2s
}:-p))
C(=~}@]]]w0O59
3V2j%nct
\Nr+n(fu:0{9
FR`S$Q)z<5#"["
?~yzfOTw`
;M2zcuI
+u;26<
3MuJ?5edG;'jC
#r&68:@
p#D";v'N*
p_$H#:4
fX\W l)20Z#<0[^.B8
1V<QV_R
PX'79AEKw7?6G0
/Ib'}5y
<ZJU<|m
:{Sd</b5
)$!UB.
%T}+rR_@.P)G
;usK}z
Msoc^G
pJ,<I(@;N
#J&:v*
C/-3R-Ulh'
AWIyHeRM$'C1
w$-@>b\
px,p?T
>H/HF+u
6'@n(qgP.
Vka?Mh%
pExnUX7zjxK1
pgkpP;
AJGO*@2
F_:0Hy
-P6O'I
D?jL7z;)m
HVrR[!sJg)cLv1cMq
m$$6@|k
tNGg5s+
x_M(>B
W21kUM3
?r*Th6:'wJ.o
vT/U<8
k<(HB:=]o~
&lPD$UYp
D>q0\^^BT&M-._M~i
o<LmWP8b
\)#m"]A?
6O(M74>
)!CMc"^c'8e
b*oVhdnit<
b`tx\6
Ykb39,
R~LdfCop5JIQP^Ih
M!MbC'
Q3;'nu[
~bv!`-<\D
KSJ:`?xo[)
3?#iKi%#NNc
ISfma`
U:Zim$*>XN1G)kS\9C
UMOK&-`/4v
61'S}o
'!?;>$gg
JXn?%sDPF_|s
EUxhk~{8iC2;\
qHf+h+0TK
["nI,i
G4B)v6V6&Q
JK:Q{_2~
=PG=%B$5z[#
k%9p|5
:N0*3WF>
1pMM1C9Qjh
UAbEx?x*
DVCLAL
PACKAGEINFO
MAINICON(

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.