1.1
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.80
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Dropper-GHV [Drp] | 20200908 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Agent.dc | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200908 | 2013.8.14.323 |
| McAfee | W32/Autorun.worm.aacd | 20200908 | 6.0.6.653 |
| Tencent | Trojan.Win32.FakeFolder.bba | 20200908 | 1.0.0.1 |
静态指标
动态指标
在 PE 资源中识别到外语
(3 个事件)
| name | RT_ICON | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x00040568 | size | 0x00001ca8 | ||||||||||||||||||
| name | RT_GROUP_ICON | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x00042210 | size | 0x00000014 | ||||||||||||||||||
| name | RT_VERSION | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x00040220 | size | 0x00000348 | ||||||||||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 61 个反病毒引擎识别为恶意
(50 out of 61 个事件)
| ALYac | Worm.Generic.376455 |
| APEX | Malicious |
| AVG | Win32:Dropper-GHV [Drp] |
| Acronis | suspicious |
| Ad-Aware | Worm.Generic.376455 |
| AhnLab-V3 | Trojan/Win32.Npkon.R18258 |
| Antiy-AVL | Trojan/Win32.Inject |
| Arcabit | Worm.Generic.D5BE87 |
| Avast | Win32:Dropper-GHV [Drp] |
| Avira | TR/Spy.Agent.586689 |
| Baidu | Win32.Trojan.Agent.dc |
| BitDefender | Worm.Generic.376455 |
| BitDefenderTheta | Gen:NN.ZexaF.34216.vy1@aGPwroaG |
| Bkav | W32.DropperAygLnr.Trojan |
| CAT-QuickHeal | Trojan.Mauvaise.SL1 |
| ClamAV | Win.Worm.Ganelp-6776766-0 |
| Comodo | Worm.Win32.Jushed.KA@4cysvx |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.ccaf27 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| Cyren | W32/Agent.KI.gen!Eldorado |
| DrWeb | Trojan.Siggen8.44292 |
| ESET-NOD32 | Win32/Agent.XAG |
| Elastic | malicious (high confidence) |
| F-Secure | Trojan.TR/Spy.Agent.586689 |
| FireEye | Generic.mg.de049ebccaf27f11 |
| Fortinet | W32/Agent.SRG!tr |
| GData | Worm.Generic.376455 |
| Ikarus | Trojan.Win32.Webprefix |
| Invincea | ML/PE-A + W32/Autorun-BRF |
| Jiangmin | Win32/Virut.bv |
| K7AntiVirus | EmailWorm ( 002a8f0e1 ) |
| K7GW | EmailWorm ( 002a8f0e1 ) |
| Kaspersky | HEUR:Worm.Win32.Generic |
| MAX | malware (ai score=87) |
| Malwarebytes | Trojan.FakeJava |
| McAfee | W32/Autorun.worm.aacd |
| MicroWorld-eScan | Worm.Generic.376455 |
| Microsoft | Worm:Win32/Ganelp.E |
| NANO-Antivirus | Trojan.Win32.Juched.dfacwp |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM02.0.C887.Malware.Gen |
| Rising | Trojan.Agent!1.C135 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Ganel |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | W32/Autorun-BRF |
| Symantec | W32.Griptolo |
| Tencent | Trojan.Win32.FakeFolder.bba |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2006-12-15 09:53:58
PE Imphash
43df92b7b77db2760430968647afb835
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00025b90 | 0x00026000 | 3.876771921110113 |
| .rdata | 0x00027000 | 0x00001a5c | 0x00002000 | 4.343103605624817 |
| .data | 0x00029000 | 0x000156a4 | 0x00004000 | 0.4440459390078505 |
| .idata | 0x0003f000 | 0x000009e4 | 0x00001000 | 2.9006850755721927 |
| .rsrc | 0x00040000 | 0x00002990 | 0x00003000 | 2.3785339001265813 |
| .reloc | 0x00043000 | 0x00025000 | 0x00024700 | 3.1799388861038964 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x00040568 | 0x00001ca8 | LANG_TURKISH | SUBLANG_DEFAULT | None |
| RT_GROUP_ICON | 0x00042210 | 0x00000014 | LANG_TURKISH | SUBLANG_DEFAULT | None |
| RT_VERSION | 0x00040220 | 0x00000348 | LANG_TURKISH | SUBLANG_DEFAULT | None |
Imports
Library KERNEL32.dll:
• 0x43f268 GetLastError
• 0x43f26c GetSystemTime
• 0x43f270 MultiByteToWideChar
• 0x43f274 GetLocaleInfoA
• 0x43f278 GetModuleHandleA
• 0x43f27c FindNextFileA
• 0x43f280 FindFirstFileA
• 0x43f284 FlushFileBuffers
• 0x43f288 SetStdHandle
• 0x43f28c FindClose
• 0x43f290 Sleep
• 0x43f294 SetFilePointer
• 0x43f298 LCMapStringW
• 0x43f29c LCMapStringA
• 0x43f2a0 GetStringTypeW
• 0x43f2a4 ExitProcess
• 0x43f2a8 TerminateProcess
• 0x43f2ac GetCurrentProcess
• 0x43f2b0 GetStartupInfoA
• 0x43f2b4 GetCommandLineA
• 0x43f2b8 GetVersion
• 0x43f2bc DebugBreak
• 0x43f2c0 GetStdHandle
• 0x43f2c4 WriteFile
• 0x43f2c8 InterlockedDecrement
• 0x43f2cc OutputDebugStringA
• 0x43f2d0 GetProcAddress
• 0x43f2d4 LoadLibraryA
• 0x43f2d8 InterlockedIncrement
• 0x43f2dc GetModuleFileNameA
• 0x43f2e0 IsBadWritePtr
• 0x43f2e4 IsBadReadPtr
• 0x43f2e8 HeapValidate
• 0x43f2ec UnhandledExceptionFilter
• 0x43f2f0 FreeEnvironmentStringsA
• 0x43f2f4 FreeEnvironmentStringsW
• 0x43f2f8 WideCharToMultiByte
• 0x43f2fc GetEnvironmentStrings
• 0x43f300 GetEnvironmentStringsW
• 0x43f304 SetHandleCount
• 0x43f308 GetFileType
• 0x43f30c GetEnvironmentVariableA
• 0x43f310 GetVersionExA
• 0x43f314 HeapDestroy
• 0x43f318 HeapCreate
• 0x43f31c HeapFree
• 0x43f320 VirtualFree
• 0x43f324 RtlUnwind
• 0x43f328 SetConsoleCtrlHandler
• 0x43f32c HeapAlloc
• 0x43f330 HeapReAlloc
• 0x43f334 VirtualAlloc
• 0x43f338 GetCPInfo
• 0x43f33c GetACP
• 0x43f340 GetOEMCP
• 0x43f344 GetStringTypeA
• 0x43f348 CloseHandle
Library USER32.dll:
• 0x43f3a4 MessageBoxA
Library ADVAPI32.dll:
• 0x43f238 GetUserNameW
L!This program cannot be run in DOS mode.
b,b,b,n,b,i,b,Bl,b,h,b,b,b,q,b,c,b,t,b,
d,b,Richb,
`.rdata
@.data
.idata
@.reloc
UDSVW}
E_^[]UPSVW}
_^[P;P
]UTSVW}
_^[]ULSVW}
MU;U}gE
E}^}7M
_^[L;rM
]U@SVW}
_^[@;L
]UDSVW}
_^[]UPSVW}
>E<DQC
_^[]UDSVW}
_^[]UlSVW}
u,U;Uu
t\U;Uu
E_^[l;D
]UpSVW}
EMMU3f
Q<UE8PE
MQxUEH|MU
M;M}-U
_^[p;B
]U`SVW}
EMMU3f
Q<UE8PE
3_MQxUEH|MU
ME_^[]UtSVW}
]UtSVW}
_^[t;:
]U@SVW}
_^[@;X9
]U|SVW}
_^[|;>/
]UHSVW}
_^[H;%
]UHSVW}
E_^[H;U$
]UHSVW}
9Us)E3
_^[H;}"
3EEEfE
jdTQhDB
MQh`pB
URh@pB
EPR ;
MQPp;E
MQPx;
fUfUfEfEfMfMfE
-oje`[VQLG_^[
TPP`Q#
;}}PRcP
wuWhHuB
E}tEEP
9UtOEi
9UtVEi
9MtVUi
9EtVMi
tAt2t$
PRSVWhvB
_^[ZX]
DDDDDDDDDDDDDD
GIt%t)
Gt/KuD$
GKu[^D$
[^_U=C
]UQ=,C
]UjhwB
EMQUR'
eEPJMd
_^[]U=<C
E]UQlC
t h|xB
@v)URc
RPQRPQRPQREPM
EE]UQE
u&hpzB
E _^[]UQj
EE]UQj
EE]UQj
3u&h0|B
;t!hX{B
$REPw:
M;Mt!h${B
;Et!hzB
E_^[]UQj
EE]UQj
]UQSVWB
t!ht}B
uCE PMQ
uCE PMQ
;Mt!h|B
;Mt!h|B
_^[]Uj
t!ht}B
EE_^[]UQ
E]UQSVWE
t!ht}B
_^[]UQ B
E]UQSVWE
E_^[]U
3uNh~B
u&ht~B
u:U REH
QURhH}B
u:E PMQ
u/M Qh@~B
QURh ~B
RE PMQh}B
REPn5
ucMQURE
E]UQ`C
H0_^[]U
A,+B,M
J0+H0U
E_^[]U
u_^[]U\SVWE
UB E=\B
EPMQhB
u_^[]U4SVWEP
3_^[]UQSVW}
3u_^[]U
E]UQ=C
=tGjyh
EMMUREPj
UREPMU
PMQUR#
EPMQUREPj
3%MQUREPO
MU;U}eE8tXM
E}tXMQ
E}@}2M< C
]USVWUj
t.;t$$t(4v
VC20XC00U
]_^[]UL$
_^[]UQE
]U0SVWEE
E_^[]U,SVWEE
E_^[]Q=
EE]UQ}
PMQUREPB/
EE]U0E
REPMQURR,
MQUREP
UREPMQ$
uKUREPM
UREPMQ?#
EE]Uh]U=
UE;Es%MU
MU;Us$EM#
MU;UuIC
U#TDU}
E}?} MU
UE;Ew]MA
UUE+EE
M;t U;u
tn} }2
,3]ULB
u3]UQE
MU;UsiE
MU;UsiE
EM;M}4U
s3E;Eu
3{UU[E
UE]U(E
3]U0SVWEE
E_^[]U
MQUREPj
]UQ=$C
s{Uk0E
Mk0UEfAtB
Ar;Zw2C
Qar;zw2C
M0M_=\B
B8t6t8t't
8t3^[_G^[_
^[_UWVSM
[^_SVD$
ddIdd.wld3
``C``5
fEfMQRa
U tHE@t
RPRPu0RPQR9~
ERM+MM
fZfZPxQ
QtRxP)
fA]UWVu
DDDDDDDDDDDDDD
^_UjhB
SVWe=C
3CMQURE
PMQURE
_^[]UjhB
SVWe=C
REPMQU
EPMQUREPM
EPMQh
QUREPh
UREPMQh
QU+RQU
E+]UQSVW}
_^[]UE
@]UQ= C
M}-s#UE
~VUREH
;Eu!MQ
E_^[]UQE
EE]UQVE
3^]USVW}
_^[]%C
Oe !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_abcdefghijklmnopqrstuvwxyz{|}~
VmfantunmoelIriGoeotA
WoitAtdDcyenserGiwro
yeploiCFA
EreabtimVaAevntieGnonrl
MllmtuiaedFNAGoeee
aitAeDcyreerCtro
FAieterteltuASitbs
erebyrirFLa
drAabyoirLLa
MlnAtuaeedHlGoed
PAetcreodsGrds
n2lr3leldke.
broFlleGae
bloAclloGal
FSteeelzGii
dealeiRF
tliirFWee
aieFAreeCtl
snoaelHlCed
c3xosersNPe2t
c3rosirsFtPe2s
CerstrPedertcIGunos
aoe2pteTh3aorelpnhCtolSs
LcrSntiDeiAeglvrsGoaitg
DeetvpeiyGrTA
eilFAeeeDtl
oitAmDcyeeerRvro
dsnoilFCe
dtenxlieiFNFA
dslnriiiFAFFte
etsnteoaennlHlIrCed
GipFAtteFel
etnAtentnnocIrCe
etnteennpIrOA
i.ntlielwnd
PipFAtteFul
leeexthEuSlcA
l.e2lh3lsld
$*$%u}-sEBB5>Ds?>DB?<$5D-$5BF935C-$81B54q335CC-!1B1=5D5BC-v9B5G1<<!?<93I-$D1>41B4!B?69<5-qED8?B9J54q@@<931D9?>C-|9CD
bd:ael*nE::
CegsyeoeRlK
SaEgVeetuARelx
OKxgnEeeyRpeA
a2lv3ldidap.
DtlgeaAelVeReeu
CtygaeAeeKxRreE
\Java\jre-
gFsomeralPri
$?6DG1B5]aaaaaaaaaaaaaaaaa]sEBB5>D'5BC9?>]#E>
e.gteeixrde
/Downs/HelpVer.hlp
/Downs/Help.hlp
Help.hlp
/Private/
Pfile.hlp
gdaheb123
?>D85<9>EH
6D@]DB9@?4]3?=
gdaheb
eedeia
7B9@D?<?:9]8?CD\54]>5D
ieagecJH
2ab0h_hbige
6D@]2I5D8?CDab]3?=
jusched.
!B?7B1=v9<5C
Fi386\chkesp.c
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
Assertion Failed
Warning
%s(%d) : %s
Assertion failed!
Assertion failed:
_CrtDbgReport: String too long or IO Error
Second Chance Assertion Failed: File %s, Line %d
wsprintfA
user32.dll
Microsoft Visual C++ Debug Library
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
<program name unknown>
dbgrpt.c
szUserMessage != NULL
Client
Ignore
Normal
Error: memory allocation: bad memory block type.
Invalid allocation size: %u bytes.
Client hook allocation failure.
Client hook allocation failure at file %hs line %d.
dbgheap.c
_CrtCheckMemory()
_pFirstBlock == pOldBlock
_pLastBlock == pOldBlock
fRealloc || (!fRealloc && pNewBlock == pOldBlock)
_BLOCK_TYPE(pOldBlock->nBlockUse)==_BLOCK_TYPE(nBlockUse)
pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ
_CrtIsValidHeapPointer(pUserData)
Allocation too large or negative: %u bytes.
Client hook re-allocation failure.
Client hook re-allocation failure at file %hs line %d.
_pFirstBlock == pHead
_pLastBlock == pHead
pHead->nBlockUse == nBlockUse
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ
DAMAGE: after %hs block (#%d) at 0x%08X.
DAMAGE: before %hs block (#%d) at 0x%08X.
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)
Client hook free failure.
memory check error at 0x%08X = 0x%02X, should be 0x%02X.
%hs located at 0x%08X is %u bytes long.
%hs allocated at file %hs(%d).
DAMAGE: on top of Free block at 0x%08X.
DAMAGED
_heapchk fails with unknown return value!
_heapchk fails with _HEAPBADPTR.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADBEGIN.
Bad memory block found at 0x%08X.
_CrtMemCheckPoint: NULL state pointer.
_CrtMemDifference: NULL state pointer.
Object dump complete.
crt block at 0x%08X, subtype %x, %u bytes long.
normal block at 0x%08X, %u bytes long.
client block at 0x%08X, subtype %x, %u bytes long.
{%ld}
%hs(%d) :
#File Error#(%d) :
Dumping objects ->
Data: <%s> %s
Detected memory leaks!
Total allocations: %ld bytes.
Largest number used: %ld bytes.
%ld bytes in %ld %hs Blocks.
stdenvp.c
stdargv.c
a_env.c
ioinit.c
__GLOBAL_HEAP_SELECTED
__MSVCRT_HEAP_SELECT
runtime error
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program:
format != NULL
sprintf.c
string != NULL
vsprintf.c
GetLastActivePopup
GetActiveWindow
MessageBoxA
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)
_flsbuf.c
str != NULL
`h````
ppxxxx
(null)
output.c
ch != _T('\0')
_getbuf.c
_file.c
osfinfo.c
fclose.c
_freebuf.c
stream != NULL
aa3vd2apeJUt
a3d2peUt
htdocs
GetModuleHandleA
GetLastError
GetSystemTime
MultiByteToWideChar
GetLocaleInfoA
FindClose
FindNextFileA
FindFirstFileA
KERNEL32.dll
MessageBoxA
USER32.dll
GetUserNameW
ADVAPI32.dll
CoUninitialize
CoCreateInstance
CoInitialize
ole32.dll
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
SetConsoleCtrlHandler
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
)y)y)y)y)y
)y)y)y)y
y)y)y)y
kkcccccJ)
})y)y)y
kkkkkkkkkkcJ)
)y)y)y)y
sssssssssssssskR1
)y)y)y)y
sssssssssssssssss{{Z9!
)y)y)y)y
!ssssssssssssss{{{{{{{{{ICONMD5.6c78a9fa
!{{{{{{{{{{{{{{{{{{{{{{{{{{kZ)y
!{{{{{{{{{{{{{{{{{{{{{{{{{{J)y
))sc))y
11kcZ1
RRkck!)y
Zck1)y
9kc!)y
)9{9)y
6666666i777
8(8<8L8^8k8|888888
9)909=9D9Q9X9b9l9v999999999~::::::::
;";,;6;=;J;Q;[;e;r;y;;;;;;;;;;;;<<c=
>2>V>]>n>>>>>>>
0K2c2o2v2222222222
3-343@3G3_3f3r3y33333333333
4'4.4:4A4Y4`4l4s4444{55555555555
6)606<6C6[6b6n6u66666666666
7#7*767=7U7\7h7o777777777777
8$80878O8V8b8i888888888888
:.::::U;;;
<.<E<p<<<<====
> ><>H>O>k>w>}>>>>>
?5?E?a?m?s????
1,181?1[1g1m1v1
2!212M2Y2_2n222y333333/4U44
585L5q5}555555555
6u6666
898^8r8888888
9"9G9R9p9}9999999
=?=K=i=z=========
?"?-?@????
0)0:0L0^0q0z00000
1'2>2L2V222222233_4!56666
777777
8 848b9x999:W:';;
<|<<====
>2>G>Y>k>|>>>>>>>>>>
?*?4?O?^?y?
1'191>1162j2p2|222
3@3O3p333333
4-4C4S4c4444
5Y55555555
6!6R6666667
8?8_8k8
889999
:(;.;:;N;b;;;;;
< <=<B<]<d<}<<<=
> >&>2>F>Z>>>>>>>>9?
22222222
3 333344444444
5%5,5054585<5@5D5H555555
60676<6@6D6a66666666666*7074787<7
:#:(:5::::::::
;';=;B;O;T;b;|;;;;;
< <%<1<7<@<F<K<X<<<<<<E=d=u======3>?>P>Z>j>t>>>>1?7?E?M?S?g?t?y?
???????
0+0g0s00000
1'1-1B1S111111
2/252T2`222253T3`3
33333333
4'434T4g4s4444
5[55Q6f6r666666647\7777
8U8^8c8k8q8w8
88888888
929:::::
;-;P;U;;;;
<b<n<<<>=G=U=]=c=l=t=|=========7>C>>>>>>>>
?%?5?>?S??
0R0^0c0000
1"151j1p1111
2!2I22222222
3&3D3N3Z3{333
4 4+4V4b444
5U5a555
7:7?7b7g777777P8\8c8888$9D999999
:':E:T:::#;\;~;;;;;;
=0=5=_==2>\>h>>>U????
O0000/1Q1h111)2.222 3M333304L4v444<5G5Z5n5t5555555
616;6L6n66666666777
8#858q88888
9!9.989c999=:!;
> >.>:>I>\>o>>>
?/?R?`?s???
0,0V0\0q00
1:1L1R1[1p11
3#3R3a3t33
4K4Q44466;6A6R6X6r6y66666666
7$757=7D7L7V7s777777N8h8q8u9~99999
:6:?:H:[:o:x:
;2;K;e;;;;>>
011;1A1L1X1]11111111111.272K2Z2^2b2f2j222"3)303A3R3c333333
4 4<4k4z444444444444/575=5K5U5Z5`5l5v5{55555555555
6E6666 7J7Q7w7~777.858C8888
9^99R:Y::::
<%<<<<<
=S========
>8>T>[>e>p>z>>>>>>>
?2?I??????
0#0)0/090C0g0p0{0555555555
6"636>6G6]6g6m6y66666666666666
7c7777
<E<K<S<`<h<o<<<<<<<<<
=0=8==
65B5K5g5r5y555555555555
6!6,666E6N6T6j6t6{66667<<<<<<
=.===E=N=R=X=a=e=p=y==x>
>>>>>>>>
?'????
1Y1a1g11$22
33/444p9u9z;;;;;<<>>
0]0c0l0~0000000
1)1/111111111 222U2e2o2}222222
3T3]3g3q3333{44444
5X5g555555.6=6R6r66666666V77888
>c>o>>>?
0<0Q000H1O1j2q2
3344/6Q6s6;;;;;;;;;;;;;;;;;;;0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<X>p>w>
>>>>>>>>
?b?h?l?p?t???
010[00000000000
1f1k1111111111
2*2Q22
3&3+3H3V3c3m3~333333
5555666
7v77777#8@8O8888888+9Z92:<:i::::::
;.;8;n;w;;;;8<Q<f<o<{<<<<<<<<<<<
=M=f=x====
>%>:>X>}>>>>>>
?4?h??????
020>0g0u0000000
141@1L1_1p1z111111>2M2222
353`3u344
5*5U5k55566666
7"7(7J7_7q7{777
8=8F888888888
9 9&9,92989>9D9J9P9V9\9b9h9n9t9z99999999999999999999
555555
3 6:::::::::;;;;;;;;;;;;;;
< <(<,<0<4<
H<P<T<`?d?p?x?
Lx!P($
.Kb/zLzB~QLs
u'ht%\
kQ[3tU7d`9@[
SN~9oPi
3gcFx*p##TW>~h
=ZkV0XZ
/B:,Wqi=}m@I
p,RmMjG
<M@kFE
~vtV}y=6MMS43>3
p; \q|T%vd j-X
~iJl~H
r<EFDS^
Z63wG]\
:3T\;r
]LDou6Bc6
1=<N^.D
v~`]3=
Ps0D9&}HG
EL$WeuuL9
4+vVQ7c 7
Wk?c35}8C
Ix6+`V*
i[Y+]Iy
14e@LBQ{X[elP
V9h8.=
36l-1G,JXYe`
p"b`%G
?Sl?v**+Z
M.SfWqm
w[#LS_
$S}s-l7
t9l"}\PFD$w >c"?Fc?-F<
y!KLNNl,
{SaKqU
gS;HT.-`OG
E|j+4v
|FUxBH"
b-I[of
j&T{xS\
m;j,A7;C<
2v M%0
'e23nos
{hI<yS9s
GjL(=5XK**
qxpza#NJOY_Sn
Jx0K6)K&
.W7A9eY
qZCajArx
Vj*EZ=h
zvjj?0&f
b 8/-l
+P ^'3
nw4P9&hB
Q&{Y}zjY(Z+ZV@s;a/)
5[P'y^
t5*Ds{
+N">M%
~:ph=l.8
(~Js~u.gwix
^P*\B7Jm
v,YE`h@w @;
8w3^vOZZ
\%mot#
!r^P<3A
8(4Ze }sz
Q>k&]X
}Rr@_VdG47
0$^[:)
ku7N5>
RDWRG-
\G iD/%: e
+BwI{r5/=,VQ`RbV#
:\H4|
9#)&@8
eQ$F<H:}!
{+wnO;
njndSs~t
qclY2]M
iSM4G`,2CX
VFEKB)m
r#a,3VIm`/z:u(
XCxZ0c
x|#2]+RCXxd);
BBrBvE4S;*Vb
3x#Fsc
`|Qa<-xy
dsxyE1
tK%__rg
#$)[ j;
$n>\,U
{karf^
*$7cO"!e8
O=4g.d
s$]bhs.4.
n%K5dS5i
M%4c$J
sHM9m<-q6l
;d\"<x
"}4a,#@
?EzI]W? $/
d?5ZH#76'e&
B!ipqlK-
vX8[hJK
7/ %aIOJm
auW%H ^j\
,B)4pQ
k%EfZ=#Am
HjI(`_Mgb.N
/seY]#
*p{}%^?
"L*(<qd
J8-oiqaU@jf,Yr~
#I>%FW
i1FP~d
cV'=jn)
K\}NOC
_R9ce5y
NoU;\`~
0Gr!l?e
AWQKoR
6bv]u[?A\
kK1}H:TtPkN`67
`*<kR=6qg,.}S!asF
oX=pqt
w@H2:)Cn$
QXbv<W$(
2QaKvbq
jFsM<5Wl^6w6
<D@YI4r:,
A|#>^`}
YHAi|ZI
]@]$vccm
KZpB%^?`aY
9`vFW}c
ige/l;
hQN{|>+W0
`lff2
hU38G)
8*~x{9
s,NE]2
f`p#]Az
r>34V6
y=vt&x`G
w`Keha
^#17!xC-
KY-lGk
aMnyX0u
#!q|JyMm
Cv*/n}`
K1Xd3V
U_B9}B_<fZ_4
7{)=Qp=a!
]{W|#4
5fOR9t"=Y**]?~uGZ1
L FhlgK{Ed
#g~r?mdSj
'13Om5+
aQKqH;$7x
R&n FcT_J
).N6$9w[
_dR/2P
`Je)KYkF
+y;}D /tT
"Vgf)EH
zaN)h8;j
W8.|Tt
0*;c:jANmv=x
t46o-gB
9E'mRNB`
7 z\?g
:T&rezP
tXgJUDA
H&]m)
\TeO7Fw2-QUvJeo
q'+Q.a'f9b
/9fWP(
MEiIW5F?3)4-aZ-7h
t)]n(7JCK9
9g|l[Gr@
x9QrKJO
Ji$Z|4j=
#'%N#F+
?y<EYTR*%}Q|
|-kF]>
o2~f>.9#
{<h3l
Mo~*!\l5Ff#:
&HNI<66
b[pWYy<_{
;"b3YY
A]46-T
kszl<M|
%\R`Yi
<-77{vpR
g.qSVV
Y#8& P
_ 2S=O,=a?
:1RktYp/V
hkg>Su
_95aso-|+
PxZ3"0kR
~`|;Ra
Kov._+Qo
5Lcs%0"f
3 cR+1FLi+
>^Vs$[Sok+
TrM c!Qu
g$wS\}
C!blrt)
2IQ"ia/
S;!LolJq8
,PQ\0$cY'
#uudu(
8A?'8_~le
3j>FtFq>z2@+vL? [
'>P_rl"&UrIs`
#EIB~_7
:hJC<i&
$+dS {+
/@Umt#q
D~GDV4l
PnD^LZX
ga.NQTwH
ihXP,yf'.\f
a}Z&VT
cI7t]L2
$Eo<cB5
hVafA0]T7
~3Q1*`
yM(&-l^{h
,0\',[<
hApr\'
iVw'^YY7
`QX(T<
i_i$GFDlf
.EJ3|>'cZjzx8V\Y
n@{SVQ
[[]Uk_
E|ddH#|>)
[K:pGR )
f77;3b
?dWfNS:xbKG
}tL+&%N
=!{^_v
oJfG-P\
TSX|j? eR
<$wd$`
KfKuROB
AN@4fj
1hIwI48
$D$^Aj
YJX Hh
?)D$(t$LW
T$X`T$XTT$\@T$\T$X;t
C+D$0L$
TVT$PH
40RL$@j
89e;9h<;@AmCApDCHIuKIxLKPQ}SQTSXY[Y\[`acadchikilk4d547kh:<l=<?spBDtEDG{xJL|MLORTUTWZ\]\_bded91gf=>8lA9onEF@tIAwvMNH|QI
~UVPYQ]^XaYef`iamnhq25;;95;?:=CCA=CGBEKKIEKOJMSSQMSWRU[[YU[_Z]cca]cgbe41ei6k>h<9mq>sFpDAuyF{NxLI}NVTQV^\Y^fda
@or7+e
s0gL$(
52;+x I*L<^KYx~BAX
zD`2[D
uIR?@-X%Xy
] EQ^[;o(
47K2K:m-3m
bc/fIZ
e,A}}k72
@Q mg.>Hn=Y`|'kI`Y]DK
gK_B8"'1q
rWoxl"OTE:<mx^3x\ kON
:mZUzHr
mrh15hf)}
*(H+`?
:Si"N?o
M7K1Wn
2wIi*^#
~;>u-e
CO_C.z4
*b-x%C
ZIhuSh
S]$r5c
+tXK8CKCUS
w,y,^*MZO?WgTa
Fe6AY!
$VwJ.Z5Y
Bx?|y
p Bg:7il
-%`((l
ab0VCET[Ay
.0HR'U
\hHfP%Dy
i:?1C#x;Y
b;,Ze\Z
J%uyv~RO
FR3VXa'omq
mY]BzhM/
.e3)l?b8
;*L G~
$Z=5-2FP
3l[k;~5U
xz{0LT(>a
;o:;eN
R^/89*K
b9@P[:
ax_'n3|H
BV-k]n$m
I!TK9>#NzR^wB
K7l3K*k"
@1CYRZO
NEAA@t
!hK-o@g.[h
56d]f3i|D
06jM I
;o|>}.yRJ+)0w:
=/d[\Jtx\5u
7I<P{'F&~^f
iLAD+@J
C]NmKE
=l1b@Y#vnI$:
X<OSJ:
79KoK=8'4Lqw5J
9]uQm8al
At,v$Zt}^u
^tl6Wr
!R.~~P
2FQIun
3MpzY>kl[p
d"QAF`
z`!~#+Dg
3)`n7S~
ltsbN.`h{/~*0T
@*\Uc1.d
N$W8]gk4
SP gJ5
:=?UW4e;F
R5;eIE,<z%
Q;*:D~&
Bq[X54,
Qd_=Xqw
V|Dk{M|2[t+iM
zv4[Aq#q
5;OIn:
)X06qL
BPC$c(
oj"zEU.\tB
&t9NY=yvoZjE
T,n_Mc#ZR
yQ>[6wA
ae!u?Um
s_Q6p\gb
p&p2lZ tW:?;
Nr,gT76hC^jB9
Rh{tiHH
iUIWU(
X^zv<#
Kkxtg!
c${BaoD
sTCuj#g&fb
Zi Y5n
K#$;u-
?V? ,ES44c
ME*Lz*#
`A-P\P%}
6^"6NttQE@?
` o~iw>
'}V64^p:\
= $KfO$
Wxp]_sppo
Oi1wTs0Z*&m(N(poBM
i\ei SX[
ED<'Z#}z}Sy`
rHL BT
x[S=.]q[dB
IrDP7"nub0-A?~
s$/P&LWN
Ga|$DzPQdu|
]3A=dcH/?
-+AE}sRKdI
Hp.O((
`~[-Ku
us=>e=xH52
f:;EG6Z0c
>U="uX N R>2
x,Fd3Bd&JP1L
z>JJ[i
mCm]_T;w3!iE
6qZZlW
,:h<,>o
B ZAe15g
g.P37&f}
}[TrBV
G{rP0&+
qO.UX$[#
!H!<F]-a0
'-NZ?*g
P{k7#c
SG oAK
96^9|Rq'h2
F1( "66J
UJ(;_pp
U[F+JR
RD!K-&a\
)`'`zgs
oF$g8hyJ Z`sl
2.\%5H+
_j9}ZfB
gjXMvwrT9O
Ljj8AV3r
*e`yn:
ZCUyJ||
N@K4~6@
<!J/\>AB%09
Twm=$^
}VJa~[F=P
*_@*.C(A
<ed9rB;@L#9:
!y}[4f|
#w"m*4MeM
P.(?c #/
az_y.+s7
8i<T-Tn|-Ur7W
?A7Gs9:Jv+$-+`B~-
[q7M,j
bHvLk$PR
W;U)^$Uy
g6<,80:?^
Rl17JbZ*1nw
VKbKE6u ~
ppGk[fuq37
h8P[U>
|_IQ-Tn]
6As#<_6lt~&S>
}[P,u3zg{R%9fc
&\!?8t~q]
ejTB_ GBPz5L
@OCOJU
>=4M&4
fq 0J(Gg_N_
,iSdCQS5s4
$k7]g^QG
5k )75__zyY
9;*73p?{1
WCvl>8d5z/Ga.E
`Rd#jx
k|e$=*Tgrq>^X
9QYvhe_
e>FSm@jPBmj
w0xcpr
!B\Mq5
tq@06.1
Kg^qjH<&
"`U-X5
<0;24e
E2QH'v
9 $]>`OjA:Z~n65
2}w<OQ\a]
B-f<LTFBw6W0.
d_*P j
'Aeh|cM
sq"M+dNP99]
+US2){7
T\ds]z
vWV-4QpB
Ita>)
LLQ1.*
BJX7OR
' y3N%c
tB5m'|.
g{=*5)n
DsqeR:H
kzwHPq
DY'_J_
#{Ajw0
(94o<V
Bu4x:F
yqVa6jeW/
l!y*v.
(q8PO,9
n{nh(MH@dy,<9
? =xlPu
%>; ;3
P__[8'a)6*k B
s#jw#WA
'%B3=d
!fM6Ap!
iL_u0"
T9)n2B#
e&`]-e
LK_q1O
CY]N[7Yx^BrA?
} >]0"e
=e\'Ai##p
q[^ygB
*@.>V^
PTU,Js.X3Rm f`
^<*z%)}
84J3wgh;k
W3kn7zV<
PO`uT9'ahG"9
TW+L,IOwk8ya?}y
K{nD)i
J/%#}]TY(~$
-D]`Gx7#'
3CfHj<]qeZI&
4+y"^1k
4Yf(EL"<c
wC .Pk
#&C ob
<H^LI>L
x(mYcF{ief)H0
y(cX+@%ZMhc
YT_FobC`j8S:K:1fS}Gx
;b#<B;m]9H
G[%DKhnaZ
}IX}#GP=
0tpmpk,Iqifd"?b LE
=2CPPXG
&VMpZN
o/;QgE
{G6KnR
[9%qMs
n7UKO B
:h.nk[)umZf
C<:S#0
{f.?,L
Z>Q:QMR~8;
0 {1!b3d
qGzft^~&
jhH:mwtK
|iw[ (
H7`MnEC4`
E(n`=:b
;7zP`|9fU/2>LKL
zL1,W8
jD-}3{'
:l2bk)/
%NC^>kwZ==iXxggN#]n
nbz%ds
w`?*$UG
@za^Di>@
taWmCh
-3]v5'P
M8eVs^>
dr@gw:
7zF}$="
N-pbdB'*SKpg`*
vvEk(:
uy@F~=R8_
i3jxgz(!
:` bd$+r
/bC[C(
aR4]6LW?c
od6yBGV
m]B3D+!
I61m~E1?U)
}y2)}M
7%0=e'-b
b@75>mpK
5/I 9k&j909
['!&%l
J$~Cs
m0p@f'Xw:
%In4s#
49xe[UT} r\)p)
q[Tu+F;lf
eW}rUt9
Xq@fWmp
Er<!_v
Cm'M0)52(
Im+:YZokpZ
8yy4c0TY$
9ro?Re
k$P8N|5
B>;nFa[
Ec:z k
p&Og9yFZd<aR+ykzR
H:U*pM
9=<*_ft,}
)g,L*
.K&awnk
r}3<6#bI
xzkw]e#
B4}HMhl#
2(pmIR
aeIBa;`<Pwcd<
_&mO yH7
n_rZ R3J*o{
_q;fA1
'O}$pq
t"*=l`=~$sm
]D:.cy
k<gk5D* ?6:V'TmJ#X
]iF :^w
L1kjox
w^%{LW?
%x>CMP0j
lekRQ;
C-X<k}#V
mE]>p!5TC
3e{ua%
KEZ40W7[
N9}5JI_S##"
.\0,W\wNB
IA= #Fmv
f/boj{j
~+J'r?
0zg GJLGxRi
ACg[:DA
,(}?k)!
|dmG]hS
6)y\SS
cJ6_U@'R_!9S
8`g;C,_H
JT*{K +dtG"k
+rS;c^
'=C.Aija
^KH9f>nv`
%P;*G>IYQV+
-TT+Ee
$QNM%Uo
p2ElK;4
P8{=<~0G
qvn_]N
o$\z;8
6RU\=}
~>w@sTN76P
\m&[Fen
A;K~uhR
Eks?G3g6
oxpw!ULrOe
z56Ylz3=sC
_VCj-<L
V&. `E
@C@Qp>
gz]7-]x
Q_Tq:~
B_*$D!
L]#ER<l
ztF]q_5jB.H}D#CJ^%&O)k
q)Qv%gw
&R=lF<0
u"_t5()
B-LR4ZH
`(SA~<Ch7
KxE(*@SP
fT4 9{
O+]9\z
}iwi Wk
lrLdN!O
sr+YS0V
BPVnqM"
sE4`WK
`p?2 :x+
3Kh6pppqvmo
[&#p;?SCW\
Jfkseof
WNg!~
D+|lN0
A]8h^!{sj@og1c<
Nc!R5a1
D"+Z*n
x5b93+R^[SZ
M_PeJsB(
#h/q%tN
%wNCh<sP
,gzA@v,w
5Vx*Xu
Zg FTLR
+UbqN>
51>&Xxg-@m
|I5Uyy+Q~m3L
>C;'k`
bo0ItB2A5GgXXLx6
]):j;b
lG]Dt>w=
{ldE[s
D\20&VTi
>2 W:q
&!bf3"Lz<1CYu/A4
X>EC}Bl]
*>E)(a
UL(&5l"Xw
.|i7bt
5F/m;W
lT:40M.
-\O<$2]
uOP#=f{
[;]{6\E(>C~_<
@r/w^/
rfoQ-%Z
\H\fp%5z>
na/]K2(U
Vxat85cMSl
"?*KQfz
du{V+qP
TN{7mH R(B
\\ripCfi4d#6KxO`
\Gy[CZlN
"qudAO:@T~
/"B.'6U
Bo-el9zD~xN
8.[d#IhAa1W!
V[797^={
w1G-O3
L@)w_9}$
#!{{l"
y#neGK^E
%kv%=6|%nJw5Oa~tq
fe[([\9s
$R|KzY7
rbb^`&
9L\ryzRAt^B
ZR]4G9{o
$T e2
U+m~cE
[ILzN)
tBF5Id7p
ezu?,_
,'cS0z4k1G
<&8Ntx1#pF
)@De?xlho
(MZuR&
b6]98!v0
& EIN1_zx
%F&;0k:r"3K"
uD%GUZR^k4
9yKiun
H:IUJd
byW7)=R
Do lmH%q
;m"RrNP
>atMm=k
5$3}5_`af
]ZQ$g?C
i}m>fR\@n oiu
S)DfmN
l<m)#}Zc
M'3y]3f?aAI9 ,
t}y>}v
M71|OVl
6Ksy?(}
b6|f|b'_Nkb
RwAf!~YN+'E
Q|}SBm
B~y-$#q~.F
>_Obf"
sOX7MEvivcwh, S~x
tfJ^^Gj
T$%NtnI
wl8{U-T
xJL"l.gzG?u
Va"A(u
JyzvynM
29F_a2
jM!`<Xg?1
1b]i1d[syd*-C{
d6W}2=U
#U q i1&8
E>Mwff
\:;0[xF6[9
yDfW)v 6
HjF-=P
?9h4EE
G}XJ",v"d
:K"7v(
>~GQWNO'8
)d36Z,;{j
m0u,4_4
ofZ]1Q~
"VYz^Juj
=Q)rC1c/O}w
D5=EM1s
{S0u;RR
|DrS.5|9
4d74:k?@<l?<BsGHDtGDJ{OPL|OLRWXTWTZ_`\_\bghdgd29:h::?m:ABpBBGuBIJxJJO}JQRRRWRYZZZ_Zabbbgbi425ihk7k<:=qps?sDBEyx{G{LJMOTRUW\Z]_dbe6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn7gg84:7<?oo@<B?DGwwHDJGLO
PLROTWXTZW\_`\b_dghdjgb483i6h
j<@;q>p
rDHCyFx
zLPKN TXSV'\`[^/dhcf7lpkn?txsvG|{~OW_
a95ggkikiA=oosqsqIEww{y{yQM
YUa]ieqmyu}3deh9<kk;lmpADssCtuxIL{{K|}QTSY\[adcdbe<8>=iljmD@FEqtruLHNMy|z}TPVU\X^]d`felhnmtpvu|x~}
68ffijl:>@nnqrtBFHvvyz|JNP~~RVXZ^`bfh6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn9675e;:mA>?=mCBuIFGEuKJ}QNOM}SRYVWU[Za^_]cbifgekjq26deh:g::>lmpBoBBFtuxJwJJN|}R
RRVZZZ^bbbfb8eig>k<j@mqoFsDrHuywN{LzP}
VTX^\`fdhnlpvtx~|
d72e9fj8l?:mAnr@tGBuIvzH|OJ}Q~PWRYX_Za`gbihojqpwryx
6dde;g7@>llmCo?HFttuKwGPN||}S
OXV[W`^c_hfk2gge9
RY%&'Za-./b95:87=h@A=B@?EpHIEJHGMxPQMRPOUXYUZXW]`a]b`_ehiejhgmpq299dg<lm:AAloDtuBIItwL|}JQQ|
TRYY\Zaadbibdfee67>jlnmm>?FrtvuuFGNz|~}}NOVVW^^_ffgnnovvw~~
6528:6:@>=:@B>BHFEBHJFJPNMJPRNRXVURXZVZ`^]Z`b^bhfebhjff984;:gknA@<CBosvIHDKJw{~QPLSR
YXT[Za`\cbihdkjqplsryxt{z|
882;4=>m@@:C<EFuHHBKDMN}PPJSLUVXXR[T]^``Zc\efhhbkdmnfe4i89l
nm<q@At
vuDyHI|
~}LPQ TXY'\`a/dhi7lpq?txyG|OW_
9dfdej6<Alnlmr>DItvtuzFLQ|~|}NTYV\a^diflq33ci;:l<;;kqCBtDCCsyKJ|LKK{SRTSS[Z\[[cbdccc8954k=>k@A=<sEFsHIED{MN{PQMLUVXYUT]^`a]\efhiedmnpqmluvxyut}~}|
5g6f7:h8=o>n?Bp@EwFvGJxHM
N~ORPUVWZX]^_b`efgf55h;j9in==pCrAqvEExKzIy~MMSQUU[Y]]caeekimmsquu{y}}
8egej6;k@momr>CsHuwuzFK{P}
}NSXV[`^chfk284<9:l@:@<DABtHBHDLIJ|PJPLTQRXRXT\YZ`Z`\dabhbhfce8i>iinkm@qFqqvsuHyNyy~{}PVX^`fhnpvx~
956<9;liA=>DACtqIEFLIK|yQMNTQSYUV\Y[a]^dacieflikq2436ei8::<;>mq@BBDCFuyHJJLKN}PRRTSVXZZ\[^`bbdbe:57jhmjmB=?rpuruJEGzx}z}RMOZUWb]_jegrmozuw}
5983hjk8=A@;prs@EIHCxz{HMQPKPUYXSX]a`[`eihce::74:g8mBB?<Bo@uJJGDJwH}RROLR
PZZWTZXbb_\b`jjgdjhrrolrpzzwtzx
7ehd98k:?mplA@sBGuxtIH{JO}|QPRWYXZ_a`bgih63f5<f=i>;n=DnEqFCvELvMyNK~MT~UVSU\]^[]defcelf1f<9kimn9nDAsquvAvLI{y}~I~TQQ\YYdaaliitqq|yy
9193g=8mA9A;oE@uIAICwMH}QIQK
UPYQYS]XaYa[e`iaicmhq1gg9g<g>9ooAoDoFAwwIwLwNI
VQY\^Yadfa6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffiknd63f9f>il>;nAnFqtFCvIvNy|NK~Q~VVSY^^[affcinnkqvvsy~~{
3d6h459>;l>p<=AFCtFxDEINK|NLMQVSVTUY^[^\]afcf6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikndgh<4;kmlopD<CsutwxLDK{}|
TLS\T[d\cldktls|t{|
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffiknee8<ih=8mm@DqpE@uuHLyxMH}}PTUPX\]X`de`hlmhptupx|}x
e:8;4jl>mB@C<rtFuJHKDz|N}RPSLVZX[T^b`c\fjhkdnrpslvzx{t~|
cd93j;g>klA;rCoFstICzKwN{|QKS
VYS[^a[cficknqksvys{~{
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikna95:5=?@iA=B=EGHqIEJEMOPyQMRMUWXYUZU]_`a]b]eghiejemopqmrmuwxyuzu}
}}4ff5gg9:<nn=ooABDvvEwwIJL~~M
QRTUYZ\]abde71fi=>;<?9nqEFCDGAvyMNKLOI~UVSTWQ]^[\_Yefcdgamnk872d<7;>@?:lD?CFHGBtLGKNPOJ|TOSVXWR\W[^`_Zd_cfhgblgkn156<8>k@9=>D@FsHAEFLHN{PIMNTPVXQUV\X^`Y]^d`fhabb26ij=>jj:>qrEFrrBFyzMNzzJNUVRV]^Z^efbfmnjnuvrv}~z~
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemmc9:e;=g:kABmCEoBsIJuKMwJ{QR}SU
RYZ[]Zabcebijkmjqrsuryz{}z
72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemmeee7j=88mmm?rE@@uuuGzMHH}}}OUPPW]XX_e``gmhhouppw}xx
eg5g<67mmo=oD>?uuwEwLFG}}
TNOU\VW]d^_elfgmtnou|vw}~
f44g7i88n<<o?q@@vDDwGyHH~LL
OPPTTWXX\\_``ddghhlloppttwxx||
22;7i89@::C?q@AHBBKGyHIPJJSOPQXRR[WXY`ZZc_`ahbbcgh94hi<kopA<pqDswxIDxyL{
QLTYT\a\didlqltyt||6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikndb76ij<:lj?>qrDBtrGFyzLJ|zONTRWV\Z_^dbgfljontrwv|z
ed79469@ml?A<>AHutGIDFIP}|OQLNQXWYTVY`_a\^ahgidfipoqlnqxwytvy
72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn859<fh7@@=ADnp?HHEILvxGPPMQT~OXXUY\W``]ad_hheilgpfd5fe:<>nl=nmBDFvtEvuJLN~|M~}RTVUZ\^]bdfejlnmrtvuz|~}
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn99ff<il@AAnnDqtHIIvvLy|PQQ~~TXYY\`aadhiilpq6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemme1cd68i>m9kl>@qFuAstFHyN}I{|NPVQVX^Y^`fafhninpvqvx~y~
8:;55k?<@BC==sGDHJKEE{OLPRSMMWTXZ[UU_\`bc]]gdhjkeeol9344i>>mA;<<qFFuICDDyNN}QKLLVVYSTT^^a[\\fficddnnq6fheh9=>>npmpAEFFvxuxIMNN~}QUVVY]^^aeffi72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemmc9:e;=g:kABmCEoBsIJuKMwJ{QR}SU
RYZ[]Zabcebijkmjqrsuryz{}z
72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn7g:8hi=i?oB@pqEqGwJHxyMyO
RPUWZX]_b`egjhmeb4d9fjimj<lAnrqurDtIvzy}zL|Q~TY\adilqty|
956e=i;hA=>mEqCpIEFuMyKxQMN}USYUV][a]^eciefmkq6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffiknd8d5;6;@l@l=C>CHtHtEKFKP|P|MSNSXXU[V[``]c^chhekfkppmsnsxxu{v{}~
a58;9j:>i=@CArBFqEHKIzJNyMPSQRVUX[YZ^]`cabfehkijnmpsqrvux{yz~}
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn
( n u l l )
( ( ( ( ( H
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 0 0 0 0 4 b 0
C o m m e n t s
C o m p a n y N a m e
F i l e D e s c r i p t i o n
F i l e V e r s i o n
6 . 0 . 1 5 0 . 3
I n t e r n a l N a m e
j u s c h e d
L e g a l C o p y r i g h t
C o p y r i g h t
L e g a l T r a d e m a r k s
O r i g i n a l F i l e n a m e
j u s c h e d
P r i v a t e B u i l d
S u n M i c r o s y s t e m s , I n c .
P r o d u c t N a m e
J a v a ( T M ) P l a t f o r m S E 6 U 1 5
P r o d u c t V e r s i o n
6 . 0 . 1 5 0 . 3
S p e c i a l B u i l d
V a r F i l e I n f o
T r a n s l a t i o n
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.