1.0
低危

1c00c31a578f341936c7cab3e56f6af870e720841a70c072f9c444b8829fd931

1c00c31a578f341936c7cab3e56f6af870e720841a70c072f9c444b8829fd931.exe

分析耗时

195s

最近分析

373天前

文件大小

104.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR ULISE
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.67
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200117 2013.8.14.323
McAfee GenericRXHP-JM!DE53B6D10149 20200117 6.0.6.653
Tencent Malware.Win32.Gencirc.10b89a69 20200117 1.0.0.1
行为判定
动态指标
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 53 个反病毒引擎识别为恶意 (50 out of 53 个事件)
ALYac Gen:Variant.Ulise.37868
APEX Malicious
AVG Win32:Downloader-TH [Trj]
Acronis suspicious
Ad-Aware Gen:Variant.Ulise.37868
AhnLab-V3 Trojan/Win32.Downloader.C73461
Antiy-AVL Trojan[Backdoor]/Win32.Small
Arcabit Trojan.Ulise.D93EC
Avira TR/Dldr.Mondo.Gen
BitDefender Gen:Variant.Ulise.37868
Bkav W32.HfsAutoB.
CAT-QuickHeal Trojan.GenericPMF.S6486418
Comodo TrojWare.Win32.Agent.ve@4yoq0p
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.101499
Cyren W32/Backdoor.KFQJ-9207
DrWeb Trojan.Click.2603
ESET-NOD32 a variant of Win32/Agent.UY
Emsisoft Gen:Variant.Ulise.37868 (B)
Endgame malicious (high confidence)
F-Prot W32/BackdoorX.NMM
F-Secure Trojan.TR/Dldr.Mondo.Gen
FireEye Generic.mg.de53b6d101499ecc
Fortinet W32/Agent.U!tr
GData Gen:Variant.Ulise.37868
Ikarus Trojan-Downloader.Win32.Small
Invincea heuristic
Jiangmin Backdoor.Small.ix
K7AntiVirus Trojan ( 005326ea1 )
K7GW Trojan ( 005326ea1 )
Kaspersky Backdoor.Win32.Small.ml
MAX malware (ai score=80)
Malwarebytes Backdoor.Small
McAfee GenericRXHP-JM!DE53B6D10149
McAfee-GW-Edition BehavesLike.Win32.Spybot.ch
MicroWorld-eScan Gen:Variant.Ulise.37868
Microsoft Backdoor:Win32/Small.IR
NANO-Antivirus Trojan.Win32.Small.fovunm
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM19.1.9ECD.Malware.Gen
Rising Backdoor.Small.hol (RDMK:cmRtazrNuKb8aBS76NxaAV78U8Px)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-BBZI
Symantec Downloader
Tencent Malware.Win32.Gencirc.10b89a69
VBA32 Backdoor.Small
VIPRE Trojan.Win32.Generic!BT
ViRobot Backdoor.Win32.A.Small.80896
Yandex Backdoor.Small!xxCHnXUismQ
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2006-11-21 07:04:52

PE Imphash

84a5c39eb178b6e678403c890a52017c

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00010236 0x00010400 5.810631812276647
.data 0x00012000 0x00003f68 0x00003200 4.449774613029064
.flat 0x00016000 0x00000269 0x00000400 4.047534200943876

Imports

Library CRTDLL.dll:
0x4146a8 memset
0x4146ac strlen
0x4146b0 _strnicmp
0x4146b4 strncmp
0x4146b8 strncpy
0x4146bc strcpy
0x4146c0 atof
0x4146c4 strcat
0x4146c8 localtime
0x4146cc mktime
0x4146d0 gmtime
Library USER32.dll:
0x4146d8 wsprintfA
0x4146e0 KillTimer
0x4146e4 SetTimer
0x4146e8 wvsprintfA
0x4146ec MessageBoxA
0x4146f0 IsWindowVisible
0x4146f4 IsWindowEnabled
0x4146f8 GetForegroundWindow
0x4146fc EnableWindow
0x414700 EnumWindows
0x414704 GetWindowLongA
0x414708 CallWindowProcA
0x41470c DefWindowProcA
0x414710 SetWindowLongA
0x414714 SetWindowTextA
0x414718 DestroyWindow
0x41471c SendMessageA
0x414720 CreateWindowExA
0x414724 LoadCursorA
0x414728 LoadIconA
0x41472c RegisterClassA
0x414730 GetSysColor
0x414734 PeekMessageA
0x414738 GetActiveWindow
0x414740 TranslateMessage
0x414744 DispatchMessageA
0x414748 AdjustWindowRect
0x41474c GetSystemMetrics
0x414750 GetWindowRect
0x414754 ShowWindow
0x414758 GetMessageA
0x41475c GetClassNameA
0x414760 PostMessageA
0x414764 GetParent
0x414768 GetWindow
0x41476c SetWindowPos
0x414770 SetFocus
0x414774 SetActiveWindow
0x414778 UnregisterClassA
0x414780 GetFocus
0x414784 IsChild
0x414788 EnumChildWindows
0x41478c GetKeyState
0x414794 SetCursorPos
0x414798 LoadImageA
0x41479c SetCursor
0x4147a4 SetCapture
0x4147a8 GetCursorPos
0x4147ac MapWindowPoints
0x4147b0 ReleaseCapture
0x4147b4 MoveWindow
Library ADVAPI32.dll:
0x4147bc RegCreateKeyA
0x4147c0 RegSetValueExA
0x4147c4 RegCloseKey
Library WININET.dll:
0x4147cc InternetOpenA
0x4147d0 InternetOpenUrlA
0x4147d4 InternetReadFile
0x4147d8 InternetCloseHandle
Library OLEAUT32.dll:
0x4147e0 SysAllocStringLen
0x4147e4 SysFreeString
0x4147e8 SysAllocString
Library ole32.dll:
0x4147f0 CoInitialize
0x4147f4 CoCreateInstance
0x4147f8 CoUninitialize
Library urlmon.dll:
0x414800 URLDownloadToFileA
Library GDI32.dll:
0x414808 GetStockObject
0x41480c CreateBrushIndirect
Library COMCTL32.dll:
0x414814 InitCommonControls
Library KERNEL32.DLL:
0x41481c GetModuleHandleA
0x414820 GetCommandLineA
0x414824 ExitProcess
0x414828 HeapCreate
0x41482c GetSystemDirectoryA
0x414830 GetModuleFileNameA
0x414834 LoadLibraryA
0x414838 GetProcAddress
0x41483c GlobalAlloc
0x414840 OpenProcess
0x414844 CloseHandle
0x414848 GetLastError
0x414858 GetFileAttributesA
0x41485c SetFileAttributesA
0x414860 CreateFileA
0x414864 SetFileTime
0x414868 GetFileTime
0x41486c HeapDestroy
0x414870 HeapReAlloc
0x414874 FreeLibrary
0x414878 HeapAlloc
0x41487c IsBadReadPtr
0x414880 HeapFree
0x414884 GlobalFree
0x414888 MultiByteToWideChar
0x41488c WideCharToMultiByte
0x414894 GetVersionExA
0x414898 GetCurrentThreadId
0x41489c GetCurrentProcessId
0x4148a0 WaitForSingleObject
0x4148a4 GetTickCount
0x4148a8 Sleep
0x4148ac FindClose
0x4148b0 FindFirstFileA
0x4148b4 FindNextFileA
0x4148b8 ReadFile
0x4148bc SetFilePointer
0x4148c0 GetFileSize
0x4148c4 WriteFile
0x4148c8 GetLocalTime
Library SHELL32.DLL:
0x4148d0 ShellExecuteExA

L!This program cannot be run in DOS mode.
`.data
SQUVWD
D$ h A
D$,h A
D$0|$0
D$4h A
D$@1D_^]Y[
ISQUVW
SQUVWhU"A
1_^]Y[
SQUVWt
L$(Z,b
u#T$(5"A
L$4Z\a
XL$8Z^
;D$h|]5"A
t$pD$p
L$pZI^
T$45"A
T$4L$dM^
T$p5"A
1T$d^
t_^]Y[
SQUVWP
\$(S0N
L$4Z'U
;D$4|]5"A
t$<D$<M
t$05RA
D$@|$@
L$HZDT
\$TevK
\$TxaK
\$TeLK
XL$LZS
1T$0GT
P_^]Y[
SQUVWH
\$$SUI
L$0ZLP
;D$0|\5"A
t$8D$8H
t$,5RA
D$<|$<
L$DZpO
D$D\$<
H_^]Y[
SQUVWt$
;D$0|\5"A
t$8D$8iD
D$8D$8
D$8t$,5RA
D$@|$@
L$LZuJ
D$<\$<;\$8|"t$H9
T$H5"A
L_^]Y[0
SQUVW<
l$(XfE
PD$(Pl
D$8\$8
PD$ PD$$Pt$D
<_^]Y[
SQUVWt$
D$ 4$h
T$85"A
<_^]Y[
SQUVWt$
T$ 5"A
\$ +\$
L$$Zd=
XL$(Z<
XL$,Z;
\$ +\$
T$ 5"A
,_^]Y[
SQUVWt$
_^]Y[5
_^]Y[:
SQUVW0
L$ Zy4
t$ t$
L$$ZM4
u#T$ 5"A
0_^]Y[
SQUVWt$
_^]Y[
SQUVWx
\$$cw
\$,hc
\$0eN
\$(c9
\$(k$
XL$ Z&
XL$4ZD&
XL$<Z~%
;D$D|55"A
t$Lt$HyK
\$H-LSA
XL$<ZU"
XL$XZ6!
XL$`Z
XL$dZg
XL$lZ
XL$pZP
t$LT$`Y
t$LT$dYM
t$LT$hY/
t$LT$lY
t$LT$pY
tbD$P
t$LT$tY
t$LT$XY8
x_^]Y[5"A
/~A5"A
H8 t@S
XGH="A
[^_1ZXR=u
Z)R@Ph
uZ)R@Ph
PG?u%1
?uX_^[]
SQUVWt$
SQUVWt$
D$"XL$
$$_^]Y[
SQUVWt$
_^]Y[SQUVW
SQUVW
t$ \SA
$ _^]Y[
9u=tSA
_^]Y[SQUVWh
1_^]Y[SQUVW
SQUVWh
1_^]Y[SQUVW
1_^]Y[SW\$
@y1SQUVW 'A
_^]Y[SQUVWl6A
u%h-AA
u%hLAA
u%h[AA
u%hzAA
1SQUVWP
u3=l#A
u"=x#A
[UPX__^]Y[
UQPSVW}
u"W5"A
u+E)RP5"A
UQPVW}
u9uDW0
UQSVW}
u)PS5"A
?\u9v2
X}ZXR=
XZPR&,
ZXRPh@
UQSWju
UQSVW="A
Wjjlh[A
SysDu*\A
SysMu*\A
Listu1=\A
]USVW]
E;=PCA
AEP5P_A
_]Wh<^A
UQW19=T_A
)1G$T_A
:;=X_A
_^]ST$
_^]UQW1}
_UQVW}
VW=`CA
W(G;=X_A
_U=`_A
_W=`_A
EP5`_A
EUQP]=`_A
EP5`_A
EUQPfE
EP5`_A
EP5`_A
EUQPW19=`_A
EP5`_A
EP5`_A
uVPW5`_A
U\SVWu
UQVW1E
UQVW1E
UQVW1E
UQVW1E
UQVW1E
UQVW1E
UTSVWu
psapi.dll
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
GetModuleFileNameExA
EnumDeviceDrivers
GetDeviceDriverBaseNameA
GetDeviceDriverFileNameA
GetProcessMemoryInfo
EmptyWorkingSet
kernel32.dll
CreateToolhelp32Snapshot
Thread32First
Thread32Next
OpenThread
D MkYnHF Mqn
XbGTDI fF
D P HWZT f
ZkelbaVhpUYfD
Tph vTFX yOXD
iR ca wv KJP Y
YsxF J ejhORr
UR V ahW TMMx
MwalwwcQFMezDS
JgMAbRsskmnuXD
te st ing
WGMLJFIzAyWfaz
prO nqpHvyz Wr
f XE q Pg Lq
wtP zfeJrH b
wKis aPjJgn x
tSawABn TlQ vg
aRD MfBPZbGw e
B X OJt hvkoSI
qYr Mgu RNqu
uGvzOVWwhMyfPe
Unknown
/c del "
Opera 6.01
kernel32.dll
)BOUND
YENTER
9LOOPNE
9LOOPE
LOADALL
SETNBE
SETNLE
CMPXCHG
CMPXCHG
CMPXCHG8B
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
IFLDENV
IFLDCW
IFSTENV
IFSTCW
FICOMP
FISUBR
FIDIVR
FUCOMPP
FSETPM
IFRSTOR
IFSAVE
IFSTSW
FUCOMP
FICOMP
FISUBR
FIDIVR
FCOMPP
FSUBRP
FDIVRP
FLDL2T
FLDL2E
FLDLG2
FLDLN2
FRATAN
FXTRACT
FPREM1
FDECSTP
FINCSTP
FYL2XP1
FSINCOS
FRNDINT
FSCALE
ecsdfgalcldlblahchdhbhaxcxdxbxspbpsidibx+si
dword
qword
tbyte
fword
FNSTSW
FSTSW
LLDT word
LMSW word
LTR word
SLDT word
SMSW word
STR word
VERR word
VERW word
db 67h
db 66h
Error Information
There was a general Exception-Error
The program will now be terminated!
OnAtlAxWin
Shell.Explorer.1
Mozilla.Browser.1
AtlAxGetControl
AtlAxWinInit
ATL.DLL
WindowClass_%ld
TemplateClass
memset
CRTDLL.dll
wsprintfA
GetWindowThreadProcessId
KillTimer
SetTimer
wvsprintfA
USER32.dll
RegCreateKeyA
RegSetValueExA
RegCloseKey
ADVAPI32.dll
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
WININET.dll
SysAllocStringLen
SysFreeString
SysAllocString
OLEAUT32.dll
CoInitialize
CoCreateInstance
CoUninitialize
ole32.dll
URLDownloadToFileA
urlmon.dll
strlen
_strnicmp
strncmp
strncpy
strcpy
strcat
localtime
mktime
gmtime
MessageBoxA
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
GetWindowLongA
CallWindowProcA
DefWindowProcA
SetWindowLongA
SetWindowTextA
DestroyWindow
SendMessageA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassA
GetSysColor
PeekMessageA
GetActiveWindow
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
AdjustWindowRect
GetSystemMetrics
GetWindowRect
ShowWindow
GetMessageA
GetClassNameA
PostMessageA
GetParent
GetWindow
SetWindowPos
SetFocus
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
GetFocus
IsChild
EnumChildWindows
GetKeyState
CreateAcceleratorTableA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
SetCapture
GetCursorPos
MapWindowPoints
ReleaseCapture
MoveWindow
GetStockObject
CreateBrushIndirect
GDI32.dll
InitCommonControls
COMCTL32.dll
GetModuleHandleA
GetCommandLineA
ExitProcess
HeapCreate
GetSystemDirectoryA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GlobalAlloc
OpenProcess
CloseHandle
GetLastError
GetEnvironmentVariableA
GetCurrentDirectoryA
SystemTimeToFileTime
GetFileAttributesA
SetFileAttributesA
CreateFileA
SetFileTime
GetFileTime
HeapDestroy
HeapReAlloc
FreeLibrary
HeapAlloc
IsBadReadPtr
HeapFree
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
GetTickCount
FindClose
FindFirstFileA
FindNextFileA
ReadFile
SetFilePointer
GetFileSize
WriteFile
GetLocalTime
KERNEL32.DLL
ShellExecuteExA
SHELL32.DLL
RPPRQXXZ
*x*x*x#$#$24b110619480qlievpuk*x*x*x#$#$10a419165557ageiwtd*x*x*x#$#$12f419113830nrbsskk*x*x*x#$#$27c419102853tmcxnqm*x*x*x#$#$1s51923458nbbuoct*x*x*x#$#$1l5198457ualsstps*x*x*x#$#$1s51912415sohjxqc*x*x*x#$#$2i51904225nijyugq*x*x*x#$#$3g519153511xjkgpdf*x*x*x#$#$10c51941059wyqqdni*x*x*x#$#$10t51951219rvkmscu*x*x*x#$#$11b5192357jrmjenw*x*x*x#$#$14o519145654hiuhgcn*x*x*x#$#$16x519204320hpdoadu*x*x*x#$#$16w519204322goakydo*x*x*x#$#$16n519204323swpnknq*x*x*x#$#$16w519204324lejtgmh*x*x*x#$#$16j519204325weslgyq*x*x*x#$#$16p519204326cdthipo*x*x*x#$#$16g519204327qvrwrgp*x*x*x#$#$16a519204328crskqve*x*x*x#$#$16e519204329fpyuupv*x*x*x#$#$16p519204331plaivem*x*x*x#$#$16s519204332jeqxgyo*x*x*x#$#$16b519204333ggfnsvs*x*x*x#$#$16b519204334fbavffn*x*x*x#$#$16d519204335eskohrq*x*x*x#$#$16t519204336kbinnms*x*x*x#$#$16w519204337vnfphxj*x*x*x#$#$16h519204338eykcunk*x*x*x#$#$16g519204340iymhphy*x*x*x#$#$16j519204341jfyelxp*x*x*x#$#$16q519204342tuuaqca*x*x*x#$#$16o519204343kxgkkrd*x*x*x#$#$16f519204344rrjmugf*x*x*x#$#$16c519204345rnphkhm*x*x*x#$#$16m519204347pyftbxl*x*x*x#$#$16n519204348lqtytsl*x*x*x#$#$16r519204349jmxqask*x*x*x#$#$16g519204350futdtkw*x*x*x#$#$16f519204353dntowlj*x*x*x#$#$16j519204354dnmusoj*x*x*x#$#$16r519204355uiatvdn*x*x*x#$#$16h519204356tfokdxn*x*x*x#$#$16n519204357modwrck*x*x*x#$#$16h519204358xqyphtt*x*x*x#$#$16q51920440kiqgwmwr*x*x*x#$#$16p51920441qvjijpeo*x*x*x#$#$16h51920442euptfydc*x*x*x#$#$16a51920443otxgbiyp*x*x*x#$#$16h51920444vijmprjh*x*x*x#$#$16y51920445dcmlmauu*x*x*x#$#$16u51920446leosqkpt*x*x*x#$#$16e51920447kadqcjej*x*x*x#$#$16n51920448oxiykvpw*x*x*x#$#$16l51920449xfjmirhu*x*x*x#$#$16t519204410vmhyvya*x*x*x#$#$16d519204412skojwuw*x*x*x#$#$16t519204413ekuwteu*x*x*x#$#$16l519204414vbwfnjt*x*x*x#$#$16s519204415adadsuf*x*x*x#$#$16o519204416jecsgpr*x*x*x#$#$16i519204417tihejxt*x*x*x#$#$16t519204418tbupetv*x*x*x#$#$16u519204419nvdffxe*x*x*x#$#$16x519204420nkpegnt*x*x*x#$#$16v519204421pfuagoa*x*x*x#$#$16l519204422fjkmlke*x*x*x#$#$16u519204424fdlxuok*x*x*x#$#$16w519204425sloykkb*x*x*x#$#$16i519204426gestnxf*x*x*x#$#$16m519204427kswnpmu*x*x*x#$#$16q519204428hgddyme*x*x*x#$#$16m519204429jvsrupm*x*x*x#$#$16a519204430cmxiuex*x*x*x#$#$16b519204432okpokbq*x*x*x#$#$16t519204433faubtov*x*x*x#$#$16l519204434vimuvrj*x*x*x#$#$16s519204435skophgc*x*x*x#$#$16a519204436wonusxm*x*x*x#$#$16u519204437nfryhih*x*x*x#$#$16v519204438ctmmxnx*x*x*x#$#$16a519204439olrxrkb*x*x*x#$#$16v519204440xnnharg*x*x*x#$#$16r519204441lohipis*x*x*x#$#$16a519204442xvwjsng*x*x*x#$#$16m519204444uqlnslq*x*x*x#$#$16d519204445lcqkqbg*x*x*x#$#$16t519204447iibvsfp*x*x*x#$#$16g519204448ytpcerf*x*x*x#$#$16e519204449ibooalu*x*x*x#$#$16u519204450nnirlxf*x*x*x#$#$16b519204451hakecfu*x*x*x#$#$16y519204452ejkjwep*x*x*x#$#$16s519204453kgcqwbd*x*x*x#$#$16n519204454fakqyps*x*x*x#$#$16m519204455awmufne*x*x*x#$#$16s519204456bkgpxlo*x*x*x#$#$16p519204457wbychkp*x*x*x#$#$16t519204458mjxmhma*x*x*x#$#$16e51920450xlthplcf*x*x*x#$#$16b51920451hdiwuuys*x*x*x#$#$16d51920452biylqerv*x*x*x#$#$16i51920453sqqnpomy*x*x*x#$#$16p51920454nfwqxooj*x*x*x#$#$16o51920455wlydskdd*x*x*x#$#$16s51920456xcwgedjd*x*x*x#$#$16g51920457rxcuuepm*x*x*x#$#$16h51920458etvkqmca*x*x*x#$#$16d51920459ucshrqqa*x*x*x#$#$16y519204510wracgsv*x*x*x#$#$16i519204511vomfxfq*x*x*x#$#$16q519204513dtegamn*x*x*x#$#$16o519204514ataxlwi*x*x*x#$#$16o519204515hcvmooi*x*x*x#$#$16b519204516upufjbv*x*x*x#$#$16j519204517wiqcnxw*x*x*x#$#$16x519204518xhnlaed*x*x*x#$#$16k519204519pkqwcvq*x*x*x#$#$16n519204520lqpdqrv*x*x*x#$#$16i519204521fhgoiuc*x*x*x#$#$16g519204522ongagor*x*x*x#$#$16s519204523gxtgnyk*x*x*x#$#$16f519204524onjhjwk*x*x*x#$#$16r519204526lwpsmoe*x*x*x#$#$16n519204527fxranvw*x*x*x#$#$16k519204528byvvvvl*x*x*x#$#$16o519204529iihofsi*x*x*x#$#$16t519204530dddtifk*x*x*x#$#$16c519204531kdpoduh*x*x*x#$#$16u519204532gvkpacu*x*x*x#$#$16t519204533pdkesvn*x*x*x#$#$16s519204534yklrppd*x*x*x#$#$16q519204535kiqlvrn*x*x*x#$#$16x519204536jvmemox*x*x*x#$#$16e519204537kihackh*x*x*x#$#$16d519204538gbjsqol*x*x*x#$#$16v519204539xsvnssb*x*x*x#$#$16i519204540bjavwrs*x*x*x#$#$16d519204542ytfwilq*x*x*x#$#$16j519204543krpgxyp*x*x*x#$#$16u519204544spexggw*x*x*x#$#$16p519204545qylxrds*x*x*x#$#$16n519204546banhbun*x*x*x#$#$16c519204547ddefisw*x*x*x#$#$16c519204548cmmhmys*x*x*x#$#$16o519204549uvikexd*x*x*x#$#$16q519204550xchqkov*x*x*x#$#$16k519204551wjoqxkp*x*x*x#$#$16a519204553iowrwkh*x*x*x#$#$16o519204554sfgovvs*x*x*x#$#$16n519204555bkhcqpj*x*x*x#$#$16o519204556cynjkhn*x*x*x#$#$16d519204557ekmtfxt*x*x*x#$#$16c519204558myslirj*x*x*x#$#$16b519204559owrskpm*x*x*x#$#$16x51920460udmdmmve*x*x*x#$#$16e51920461koqhinad*x*x*x#$#$16f51920462bdggjura*x*x*x#$#$16h51920463dsbemoin*x*x*x#$#$16a51920464xfcbrijb*x*x*x#$#$16c51920466tysrbdmh*x*x*x#$#$16v51920467uythvjan*x*x*x#$#$16g51920468rakwlecu*x*x*x#$#$16f51920469mpyvtjjw*x*x*x#$#$16d519204610faktkpv*x*x*x#$#$16w519204611ywjfngq*x*x*x#$#$16d519204612umnpodi*x*x*x#$#$16s519204613hhunbmc*x*x*x#$#$16v519204614fbetshn*x*x*x#$#$16e519204615sfehagd*x*x*x#$#$16w519204616kfrgvkl*x*x*x#$#$16e519204617sfeaqah*x*x*x#$#$18j519134026goiigvg*x*x*x#$#$18m51951021dpimwhj*x*x*x#$#$20y519174347sqkexaf*x*x*x#$#$20i51917441jkxwbact*x*x*x#$#$20h519174413iprsriv*x*x*x#$#$20y519174427ggadwcp*x*x*x#$#$20m519174441bhbqrrk*x*x*x#$#$20j51917455kkuxpdkr*x*x*x#$#$20i519174512bhklpde*x*x*x#$#$20w519174527babapqk*x*x*x#$#$20f519174539yrxpkvr*x*x*x#$#$20x519174555tgpijxl*x*x*x#$#$20d51917466stsbrgxc*x*x*x#$#$20f519174618rhfpoko*x*x*x#$#$20m519174628hcmccic*x*x*x#$#$20c519174640uokltcv*x*x*x#$#$20r519174656ykfthvp*x*x*x#$#$20x519174712oekwxtb*x*x*x#$#$20v519174725cvqqnhr*x*x*x#$#$20g519174737ooocifv*x*x*x#$#$20u519174748lblblqw*x*x*x#$#$20u519174757ojedspt*x*x*x#$#$20r519174810dwdknpe*x*x*x#$#$20r519174825jfltxvy*x*x*x#$#$20m519174837wmkokoi*x*x*x#$#$20y519174851djjmsxk*x*x*x#$#$20a51917495xnocwnuv*x*x*x#$#$20g519174920reqmgco*x*x*x#$#$20y519174929sfpefih*x*x*x#$#$20t519174939piibufn*x*x*x#$#$20p519174954pqklwre*x*x*x#$#$20a51917509dnvcvvcn*x*x*x#$#$20g519175023skfextg*x*x*x#$#$20i519175037hqanuwa*x*x*x#$#$20g519175050jnxpifn*x*x*x#$#$20c51917516cqvdqiaf*x*x*x#$#$20m519175120gvulnif*x*x*x#$#$20o519175129exwlngo*x*x*x#$#$20n519175146eumugid*x*x*x#$#$20r51917520cvymyhpk*x*x*x#$#$21u519921etqsgbvv*x*x*x#$#$21y519923bbersdym*x*x*x#$#$21j519925xcfptjnv*x*x*x#$#$21w519926xahmwrvh*x*x*x#$#$21x519928fyklufvr*x*x*x#$#$21r519929fbgpvbqx*x*x*x#$#$21y5199210iquivol*x*x*x#$#$21x5199211vsgobml*x*x*x#$#$21l5199212nfnitcr*x*x*x#$#$21q5199213orxmnsr*x*x*x#$#$21v5199214odqaiwm*x*x*x#$#$21q5199215vcylqch*x*x*x#$#$21i5199216vnxvpue*x*x*x#$#$21s5199217icqcdht*x*x*x#$#$21a5199219mttaijh*x*x*x#$#$21c5199220byedxnw*x*x*x#$#$21v5199221lcpaxvb*x*x*x#$#$21o5199222wwqfleb*x*x*x#$#$21s5199223xuwhpfi*x*x*x#$#$21c5199224dywdeya*x*x*x#$#$21t5199226juistjy*x*x*x#$#$21h5199227mkfuvmg*x*x*x#$#$21c5199228atqwtbv*x*x*x#$#$21t5199229ongvbwu*x*x*x#$#$21v5199230eevnich*x*x*x#$#$21l5199231mwsbaan*x*x*x#$#$21a5199232uqjbbjy*x*x*x#$#$21u5199233eoukxpx*x*x*x#$#$21d5199234fciootb*x*x*x#$#$21j5199235rsecoyi*x*x*x#$#$21p5199236jphhkqi*x*x*x#$#$21g5199237vjcdcbn*x*x*x#$#$21d5199238kpxwrkd*x*x*x#$#$21j5199239gxrkgdn*x*x*x#$#$21v5199240nrjstlc*x*x*x#$#$21w5199241yjgpfsb*x*x*x#$#$21a5199243ibwdypi*x*x*x#$#$21i5199244bjavwrs*x*x*x#$#$21t5199245jxgqsqq*x*x*x#$#$21f5199246sxcvofc*x*x*x#$#$21i5199247jvwebjn*x*x*x#$#$21l5199248ayiwkje*x*x*x#$#$21b5199249mfpafqi*x*x*x#$#$21g5199250djmooaa*x*x*x#$#$21e5199251orjtmxt*x*x*x#$#$21t5199252uvrbthq*x*x*x#$#$21s5199253edqnrbj*x*x*x#$#$21m5199254yjrvuku*x*x*x#$#$21r5199255okenntx*x*x*x#$#$21t5199256fryoxai*x*x*x#$#$21d5199257bfnlvcu*x*x*x#$#$21q5199258vlebuhl*x*x*x#$#$21t5199259morqefc*x*x*x#$#$21k519930bnbmntco*x*x*x#$#$21i519931ooigmwwl*x*x*x#$#$21s519933wbnncebd*x*x*x#$#$21w519934svlsdvvr*x*x*x#$#$21x519935frlmdrlf*x*x*x#$#$21c519936iofgeggt*x*x*x#$#$21i519937fmfugbol*x*x*x#$#$21r519938dxorlykc*x*x*x#$#$21b519939hivsvwjy*x*x*x#$#$21w5199310etrefyn*x*x*x#$#$21o5199311xpmavuf*x*x*x#$#$21v5199312ycgunqo*x*x*x#$#$21i5199313eidypbo*x*x*x#$#$21f5199314bxwccvs*x*x*x#$#$21i5199315exafnka*x*x*x#$#$21i5199316qlxnaja*x*x*x#$#$21l5199317svwgmjh*x*x*x#$#$21i5199318noteakp*x*x*x#$#$21j5199319pncocpg*x*x*x#$#$21k5199322cmcubuj*x*x*x#$#$21t5199323bocnefe*x*x*x#$#$21i5199324tqfikhm*x*x*x#$#$21c5199325ikiantd*x*x*x#$#$21p5199326sjocclr*x*x*x#$#$21p5199327ecubomt*x*x*x#$#$21e5199328scaekll*x*x*x#$#$21c5199329jyrhhdk*x*x*x#$#$21l5199330qbeddsi*x*x*x#$#$21p5199331ftriosc*x*x*x#$#$21n5199332bssintc*x*x*x#$#$21w5199333hrgehkx*x*x*x#$#$21a5199334rkkjqxu*x*x*x#$#$21b5199335rjwlskv*x*x*x#$#$21v5199336jyklioc*x*x*x#$#$21r5199337hjweiso*x*x*x#$#$21m5199338kocdmny*x*x*x#$#$21n5199339trskcyx*x*x*x#$#$21t5199340abkosrt*x*x*x#$#$21d5199342bqgjeem*x*x*x#$#$21p5199343roknmga*x*x*x#$#$21j5199344wjdkctu*x*x*x#$#$21s5199345yghsary*x*x*x#$#$21y5199346xoqspul*x*x*x#$#$21n5199347qhuxbpu*x*x*x#$#$21u5199348pdsqjjq*x*x*x#$#$21y5199349jreddjc*x*x*x#$#$21h5199350prrawyx*x*x*x#$#$21a5199351syxqixs*x*x*x#$#$21u5199352qifsvun*x*x*x#$#$21x5199353lbtihpq*x*x*x#$#$21g5199354gphynpd*x*x*x#$#$21o5199355mqtsjgb*x*x*x#$#$21s5199356otxsqhp*x*x*x#$#$21x5199357nakfwmg*x*x*x#$#$21v5199358oefvtlu*x*x*x#$#$21n5199359pitvemm*x*x*x#$#$21l519941kiksmpjo*x*x*x#$#$21b519942ejrruyet*x*x*x#$#$21u519943tadnvfvc*x*x*x#$#$21v519944jqskynqy*x*x*x#$#$21q519945qdgtdljn*x*x*x#$#$21x519946ihnwqqdp*x*x*x#$#$21t519947ixslovdm*x*x*x#$#$21f519948xeglpqsc*x*x*x#$#$21p519949qakgllyh*x*x*x#$#$21r5199410smhfowf*x*x*x#$#$21x5199411ytacyft*x*x*x#$#$21c5199412hhhfumx*x*x*x#$#$21g5199413cgqmtyu*x*x*x#$#$21l5199414crdkosq*x*x*x#$#$21f5199416esfykyd*x*x*x#$#$21q5199417gkibbjn*x*x*x#$#$21r5199418hwwaegb*x*x*x#$#$21x5199419ljoyluq*x*x*x#$#$21g5199420rgyfjgw*x*x*x#$#$21q5199421pffvbrm*x*x*x#$#$22r5196196jpbspupo*x*x*x#$#$21l519193343juefmgr*x*x*x#$#$23f519121032whsrgpv*x*x*x#$#$23v519121033tgbbkwh*x*x*x#$#$23r519121036cnmsomo*x*x*x#$#$23v519121038bumnifp*x*x*x#$#$23t519121039cuhdubm*x*x*x#$#$23g519121040btmpswl*x*x*x#$#$23j519121042lbvlnpq*x*x*x#$#$23d519121043ibmxrdo*x*x*x#$#$23l519121045gflbhdn*x*x*x#$#$23d519121046ttvbndf*x*x*x#$#$23i519121047hdplffc*x*x*x#$#$23w519121049vjwblvk*x*x*x#$#$23b519121050epbfsmh*x*x*x#$#$23p519121051vlisnim*x*x*x#$#$23a519121053mjpehqk*x*x*x#$#$23d519121055fsvnvfm*x*x*x#$#$23i519121057cklomdr*x*x*x#$#$23j519121059dfgdpvs*x*x*x#$#$23x51912111tlxcijkv*x*x*x#$#$23v51912112akxewnbf*x*x*x#$#$23g51912114kyvbtwer*x*x*x#$#$23w51912115kunjamat*x*x*x#$#$23p51912116cnugidol*x*x*x#$#$23s519121111cfmqqkv*x*x*x#$#$23d519121118loksnha*x*x*x#$#$23m519121119iwydcnq*x*x*x#$#$23x519121120rsxqehg*x*x*x#$#$23o519121123sgefnbf*x*x*x#$#$23s519121124trtnetk*x*x*x#$#$23y519121126sqwyhju*x*x*x#$#$23g519121127plkhcsj*x*x*x#$#$23k519121128ikadnan*x*x*x#$#$23l519121130onhaseq*x*x*x#$#$23d519121131bpopwkv*x*x*x#$#$23q519121133gnjqayi*x*x*x#$#$23y519121134nuwkgda*x*x*x#$#$23l519121136bqekndl*x*x*x#$#$23j519121137xcrgivs*x*x*x#$#$23q519121138rskmuwy*x*x*x#$#$23l519121140pfremeu*x*x*x#$#$23y519121141jliqtnp*x*x*x#$#$23l519121143aaoximi*x*x*x#$#$23g519121147gllggnd*x*x*x#$#$23n519121149yaekwvm*x*x*x#$#$23v519121151vjreddm*x*x*x#$#$23q519121152wkwnlno*x*x*x#$#$23n519121154btjmslv*x*x*x#$#$23q519121155fsixqun*x*x*x#$#$23p519121156qevsrvp*x*x*x#$#$23y519121157sjsybnf*x*x*x#$#$23b519121159ccvkdlc*x*x*x#$#$23f51912120sdxrngkf*x*x*x#$#$23a51912121capndryr*x*x*x#$#$23o51912123hiuhgcnm*x*x*x#$#$23w51912124ckdseiku*x*x*x#$#$23e51912125nffnkieq*x*x*x#$#$23w51912126mrwxdajx*x*x*x#$#$23s51912128rmsskcua*x*x*x#$#$23i519121210tvnbhfa*x*x*x#$#$23u519121211ytssald*x*x*x#$#$23n519121213onqehvh*x*x*x#$#$23y519121216dxpmasl*x*x*x#$#$23n519121217vgxqwxg*x*x*x#$#$23j519121222hyjikql*x*x*x#$#$23l519121223gvapxnd*x*x*x#$#$23e519121225hlgiybo*x*x*x#$#$23s519121229wifywyr*x*x*x#$#$23w519121230grnnbqx*x*x*x#$#$23v519121233clgrwir*x*x*x#$#$23g519121234mprncrj*x*x*x#$#$23v519121236vsgmcij*x*x*x#$#$23v519121237kybeeor*x*x*x#$#$23b519121239vxkyrbr*x*x*x#$#$23y519121240teojkeg*x*x*x#$#$23y519121241vadnmvg*x*x*x#$#$23i519121243qhrmodk*x*x*x#$#$23a519121245brtlyjs*x*x*x#$#$23d519121246cebjjbr*x*x*x#$#$23a519121248icbmvei*x*x*x#$#$23k519121249oifljoo*x*x*x#$#$23u519121251jpktpac*x*x*x#$#$23n519121252sxtoqrn*x*x*x#$#$23j519121253bnufkbr*x*x*x#$#$23k519121255hbqiibl*x*x*x#$#$23b519121256fuetfhj*x*x*x#$#$23s519121258vlaqjjb*x*x*x#$#$23g519121259sghiiap*x*x*x#$#$23m51912130fsjulalm*x*x*x#$#$23t51912132eslhqoun*x*x*x#$#$23f51912136vqvfxygx*x*x*x#$#$23k51912138itayvpvf*x*x*x#$#$23y51912139liktcrte*x*x*x#$#$23g519121310jufayrl*x*x*x#$#$23a519121312djntoyo*x*x*x#$#$23r519121313tspacev*x*x*x#$#$23t519121315ovychjx*x*x*x#$#$23i519121316qlxnaja*x*x*x#$#$23d519121318pwqqhno*x*x*x#$#$23g519132134nfrakdg*x*x*x#$#$31f51905932wxoncga*x*x*x#$#$31f119103421rmkorys*x*x*x#$#$31o119103422cxiynhg*x*x*x#$#$31p119103428llhouln*x*x*x#$#$31i119103432qsbuilc*x*x*x#$#$31d119103433yfqrklg*x*x*x#$#$31s119103434pbiuqjx*x*x*x#$#$31l11995652wctgnub*x*x*x#$#$31a11995718kpoivsr*x*x*x#$#$1w61910247goakydoj*x*x*x#$#$1u61910249neejskeo*x*x*x#$#$1k619102410rbgvkbt*x*x*x#$#$1q619102412ljyxgte*x*x*x#$#$1u619102413tsqtscp*x*x*x#$#$1r619102414xnlqyfa*x*x*x#$#$1i619102416gwxniaw*x*x*x#$#$1c619102417wttbhjk*x*x*x#$#$1h619102418ptwgxqd*x*x*x#$#$1d619102419qpsbqqx*x*x*x#$#$1f619102424nmlmvgs*x*x*x#$#$1e619102425ixlvkku*x*x*x#$#$1d619102426knwosho*x*x*x#$#$1v619102427yqhhvqq*x*x*x#$#$1a619102429dxbjiga*x*x*x#$#$1o619102430kqgvwfo*x*x*x#$#$1w619102431oghroot*x*x*x#$#$1h619102432qamqrvn*x*x*x#$#$1f619102434gickxuq*x*x*x#$#$1g619102435cecboan*x*x*x#$#$1n619102436rielrcu*x*x*x#$#$1x619102438lbwxsgh*x*x*x#$#$1a619102443cseumuh*x*x*x#$#$1k619102444llqpagc*x*x*x#$#$1j619102445dlegslb*x*x*x#$#$1d619102446oqoepft*x*x*x#$#$1y619102447rsisfuj*x*x*x#$#$1o619102449wqunwle*x*x*x#$#$1u619102450hmsehav*x*x*x#$#$1s619102451xoxuato*x*x*x#$#$1r619102452jycpbpj*x*x*x#$#$1n619102454ntykisu*x*x*x#$#$1n619102455dmgabjk*x*x*x#$#$1r619102456uwrmqct*x*x*x#$#$1k619102457btmlomg*x*x*x#$#$1i61910251eppnersv*x*x*x#$#$1p61910253rjgcrgqw*x*x*x#$#$1s61910254eutbfdjn*x*x*x#$#$1v61910255prqluubr*x*x*x#$#$1o61910256weyuvcte*x*x*x#$#$1q61910257wwecepkm*x*x*x#$#$1s61910259yywrlxeu*x*x*x#$#$1l619102510eglcjlc*x*x*x#$#$1e619102511bjypegf*x*x*x#$#$1i619102513bhjasrj*x*x*x#$#$1r619102514iswllkt*x*x*x#$#$1k619102515riwqexo*x*x*x#$#$1c619102519podlqou*x*x*x#$#$1d619102520gklxhrb*x*x*x#$#$1b619102522euoodsp*x*x*x#$#$1m619102523urqhogb*x*x*x#$#$1i619102524ymlcujo*x*x*x#$#$1r619102525lohipis*x*x*x#$#$1j619102526snxuaqh*x*x*x#$#$1e619102528cxfljuw*x*x*x#$#$1d619102529hychjpp*x*x*x#$#$1t619102530fvkeitq*x*x*x#$#$1j619102531iprsaht*x*x*x#$#$1a619102533nyuxisd*x*x*x#$#$1l619102534xokjuci*x*x*x#$#$1c619102535ohhnuwa*x*x*x#$#$1n619102536aocqorf*x*x*x#$#$1a619102538rggvkej*x*x*x#$#$1n619102539ppakeos*x*x*x#$#$1g619102540upvemin*x*x*x#$#$1q619102542wgtctpe*x*x*x#$#$1u619102543cqihkck*x*x*x#$#$1b619102544krrfjph*x*x*x#$#$1q619102546ueujahv*x*x*x#$#$1x619102547bborqmh*x*x*x#$#$1r619102548uekyaqx*x*x*x#$#$1a619102549vnlgnja*x*x*x#$#$1p619102551ehmbrxm*x*x*x#$#$1a619102552lgunepa*x*x*x#$#$1w619102554ivuobii*x*x*x#$#$1w619102556dmpuqko*x*x*x#$#$1w619102557ycaygfn*x*x*x#$#$1b619102558cjtdutv*x*x*x#$#$1c619102559hovgfox*x*x*x#$#$1j61910261liamlrbi*x*x*x#$#$1s61910262yqttpurw*x*x*x#$#$1b61910263vkpnjoah*x*x*x#$#$1j61910264qndargpu*x*x*x#$#$1q61910265mcihlvel*x*x*x#$#$1h61910267sqxewiem*x*x*x#$#$1o61910268usxtnfyx*x*x*x#$#$1f619102610bjnxpnb*x*x*x#$#$1s619102611kfcqwoi*x*x*x#$#$1e619102613arkrweo*x*x*x#$#$1u619102614mgvbpqt*x*x*x#$#$1r619102615oermqye*x*x*x#$#$1k619102617tbpftfg*x*x*x#$#$1l619102618cbrqpgj*x*x*x#$#$1d619102619ktplhvv*x*x*x#$#$1x619102620hoxsblf*x*x*x#$#$1o619102622mlbqwlo*x*x*x#$#$1w619102623dhxberv*x*x*x#$#$1m619102624hfyyuwk*x*x*x#$#$1f619102625hjencpi*x*x*x#$#$1y619102627jnwvlgy*x*x*x#$#$1a619102628cdbhgjj*x*x*x#$#$1d619102629rymuxgs*x*x*x#$#$1b619102630kcwecdp*x*x*x#$#$1w619102631ovpyhec*x*x*x#$#$1h619102633utdvjte*x*x*x#$#$1k619102634qpbcohf*x*x*x#$#$1o619102635xkdoboa*x*x*x#$#$1n619102636sgdwqpm*x*x*x#$#$1o619102637sfgovvs*x*x*x#$#$1a619102639gsetfto*x*x*x#$#$1o619102640kewwptl*x*x*x#$#$1s619102641fysethn*x*x*x#$#$1v619102642mtuphoi*x*x*x#$#$1k619102643peprrre*x*x*x#$#$1k619102645asqixds*x*x*x#$#$1h619102646hrpkkej*x*x*x#$#$1b619102647dlqkjnl*x*x*x#$#$1v619102648hetoida*x*x*x#$#$1g619102650gckpjmr*x*x*x#$#$1k619102651ydpfrfy*x*x*x#$#$1p619102653nvtmfom*x*x*x#$#$1t619102654nyrcnjv*x*x*x#$#$1n619102655kcxipqd*x*x*x#$#$1d619102657muglnev*x*x*x#$#$1v619102658nyrgqlo*x*x*x#$#$1c619102659pbrbjpl*x*x*x#$#$1c61910271rfxumcxu*x*x*x#$#$1d61910272kweeokdi*x*x*x#$#$1c61910273rnforcpt*x*x*x#$#$1b61910275uqpclyrx*x*x*x#$#$1d61910276auscgchq*x*x*x#$#$1a61910277clwkdwta*x*x*x#$#$1t61910279ujlwmraj*x*x*x#$#$1s619102710lrikyky*x*x*x#$#$1y619102711jshfnvw*x*x*x#$#$1e619102713nwjdrfa*x*x*x#$#$1p619102714lljrgjg*x*x*x#$#$1c619102715dnelkva*x*x*x#$#$1p619102716fyuntyy*x*x*x#$#$1s619102718msybjgq*x*x*x#$#$1l619102719lvfppbr*x*x*x#$#$1h619102720oxtpkgc*x*x*x#$#$1h619102721oiageqw*x*x*x#$#$1a619102722mlevjlw*x*x*x#$#$1p619102724pwwxtms*x*x*x#$#$1d619102726jqhvmta*x*x*x#$#$1r619102727bqueiue*x*x*x#$#$1n619102728ymlaiou*x*x*x#$#$1q619102730fgmnwwp*x*x*x#$#$1u619102731igmavjg*x*x*x#$#$1t619102732xotuiea*x*x*x#$#$1m619102735xhixtwf*x*x*x#$#$1u619102736rrvachj*x*x*x#$#$1i619102738iyviybw*x*x*x#$#$1w619102739rdggxty*x*x*x#$#$1s619102740xvpfdqy*x*x*x#$#$1g619102742wwlgnre*x*x*x#$#$1u619102743roqsqxe*x*x*x#$#$1i619102744jvmkulr*x*x*x#$#$1v619102745ymmmhbj*x*x*x#$#$1r619102747hkfseal*x*x*x#$#$1u619102748powojhq*x*x*x#$#$1x619102749swnwqyk*x*x*x#$#$1s619102751tehvnhg*x*x*x#$#$1x619102755shtrxxc*x*x*x#$#$1a619102756xfftglh*x*x*x#$#$1e619102757jutyani*x*x*x#$#$1v619102758jokcmfl*x*x*x#$#$1m61910283atbbqkaf*x*x*x#$#$1m61910284flfmjpsv*x*x*x#$#$1i61910285igbiprgw*x*x*x#$#$1i61915515sblcrvtd*x*x*x#$#$5f619183210miidxyg*x*x*x#$#$5u619183212vrlkdbu*x*x*x#$#$5b619183213qtpxefi*x*x*x#$#$5o619183215mqfhpws*x*x*x#$#$5b619183217kjgsbht*x*x*x#$#$5k619183218muphtxk*x*x*x#$#$5s619183219nnanatu*x*x*x#$#$5o619183220jjgnxpt*x*x*x#$#$5n619183221soqknvl*x*x*x#$#$5h619183222oldssmu*x*x*x#$#$5b619183223bkjhput*x*x*x#$#$5k619183225weefbuw*x*x*x#$#$5d619183226ljmicnq*x*x*x#$#$5t619183227awjhtnq*x*x*x#$#$5q619183228bmyvroa*x*x*x#$#$5p619183229hmrfllp*x*x*x#$#$5l619183230wogsxuc*x*x*x#$#$5e619183231mfomydt*x*x*x#$#$5y619183232rhfduek*x*x*x#$#$5d619183233ovwscri*x*x*x#$#$5v619183235hiuaqnt*x*x*x#$#$5p619183236pvgnymi*x*x*x#$#$5o619183238miyllgp*x*x*x#$#$5u619183239gtloxmx*x*x*x#$#$5d619183240twtiytu*x*x*x#$#$5j619183241rsfiykx*x*x*x#$#$5w619183242ydkghug*x*x*x#$#$5t619183243qywajto*x*x*x#$#$5k619183244epesmqp*x*x*x#$#$5t619183246datibfo*x*x*x#$#$5u619183247gnrmnky*x*x*x#$#$5i619183248brvqxll*x*x*x#$#$5c619183249ergkkmo*x*x*x#$#$5a619183250sucbmqg*x*x*x#$#$5g619183251xhiikrl*x*x*x#$#$5w619183252dgiyria*x*x*x#$#$5c619183253knvfhgx*x*x*x#$#$5h619183254nhqvwim*x*x*x#$#$5n619183255quxdvoy*x*x*x#$#$5w619183256jrcttdw*x*x*x#$#$5v619183258nktovlh*x*x*x#$#$5d619183259qqwrtqt*x*x*x#$#$5c61918330nacldtqw*x*x*x#$#$5u61918331nqaiulew*x*x*x#$#$5q61918332pgqvrooq*x*x*x#$#$5h61918333avtxwckn*x*x*x#$#$5s61918334erhmnwvl*x*x*x#$#$5m61918336qmrofiky*x*x*x#$#$5s61918337amutluoe*x*x*x#$#$5o61918338ipiqcsuv*x*x*x#$#$5p61918339edoaaakd*x*x*x#$#$5g619183310kteqvje*x*x*x#$#$5e619183311nkdcppy*x*x*x#$#$5t619183312fvvdwhj*x*x*x#$#$5y619183313cflwfcw*x*x*x#$#$5q619183314perkalu*x*x*x#$#$5m619183315obghjsh*x*x*x#$#$5y619183316krbigri*x*x*x#$#$5y619183319uaimnql*x*x*x#$#$5h619183320yscfguk*x*x*x#$#$5v619183321vwgdkqa*x*x*x#$#$5i619183322plnqxkw*x*x*x#$#$5f619183323mngoneo*x*x*x#$#$5e619183324scbbltk*x*x*x#$#$5n619183325jyqahfb*x*x*x#$#$5k619183327yareacp*x*x*x#$#$5o619183328lwhruga*x*x*x#$#$5p619183329gpxhawq*x*x*x#$#$5b619183330urwypyv*x*x*x#$#$5i619183331fvarsmy*x*x*x#$#$5j619183332thmotxc*x*x*x#$#$5o619183333oyciidi*x*x*x#$#$5m619183334qimgfka*x*x*x#$#$5j619183335kxaivee*x*x*x#$#$5u619183336spkgkgd*x*x*x#$#$5h619183337wcxvvpj*x*x*x#$#$5e619183339cpwluuq*x*x*x#$#$5n619183340xsqttjl*x*x*x#$#$5g619183341yftbrte*x*x*x#$#$5i619183342oujxvaw*x*x*x#$#$5u619183343vwtpstk*x*x*x#$#$5d619183344iapxjkw*x*x*x#$#$5p619183345cbsedwh*x*x*x#$#$5r619183346rqhmndh*x*x*x#$#$5t619183347nnggnvt*x*x*x#$#$5m619183348bqdnlma*x*x*x#$#$5r619183349qsuyjry*x*x*x#$#$5p619183351xgqigft*x*x*x#$#$5c619183352nkvewnv*x*x*x#$#$5f619183353udgtlkx*x*x*x#$#$5s619183354cnaaynm*x*x*x#$#$5r619183355jbysxys*x*x*x#$#$5n619183356pxbmfer*x*x*x#$#$5q619183357mxhwcdw*x*x*x#$#$5o619183358fwlgewt*x*x*x#$#$5m619183359yxebmtf*x*x*x#$#$5s61918340ylxtcnpd*x*x*x#$#$5b61918341xyuotkyq*x*x*x#$#$5e61918342ifyhxkpi*x*x*x#$#$5d61918343sgnahkbc*x*x*x#$#$5m61918344bhytccxm*x*x*x#$#$5g61918345yqlnyebc*x*x*x#$#$5j61918347soqettra*x*x*x#$#$5y61918348neapknlq*x*x*x#$#$5a61918349goqujcjw*x*x*x#$#$5f619183410fsureib*x*x*x#$#$5d619183411oxwfbcr*x*x*x#$#$5e619183412ejbrvru*x*x*x#$#$5r619183413bperfci*x*x*x#$#$5a619183414okyurxp*x*x*x#$#$5c619183415gpsachs*x*x*x#$#$5f619183416hcqrjky*x*x*x#$#$5y619183417crpqxuo*x*x*x#$#$5c619183418xyfnhyt*x*x*x#$#$5e619183419wjgjxmb*x*x*x#$#$5j619183420wpxccdr*x*x*x#$#$5s619183421ubgyhco*x*x*x#$#$5f619183422qgvijec*x*x*x#$#$5x619183424vbbxoao*x*x*x#$#$5x619183425nmmsbvs*x*x*x#$#$5l619183426ltxnjsf*x*x*x#$#$5v619183427eckjjly*x*x*x#$#$5i619183428jaihsub*x*x*x#$#$5p619183429imeaipj*x*x*x#$#$5w619183430jaawbmt*x*x*x#$#$5y619183431aclmkln*x*x*x#$#$5g619183432bpghbjx*x*x*x#$#$5n619183433vsjrpfb*x*x*x#$#$5f619183434yjcnyrb*x*x*x#$#$5n619183435giphuiv*x*x*x#$#$5h619183436hwbbaxo*x*x*x#$#$5j619183437lppaxwg*x*x*x#$#$5s619183438spdtsoc*x*x*x#$#$5g619183439qsuvuye*x*x*x#$#$5y619183440wblxcnh*x*x*x#$#$5v619183442gvoiqsi*x*x*x#$#$5h619183443bofmwcc*x*x*x#$#$5o619183444neocteu*x*x*x#$#$5n619183445favgybt*x*x*x#$#$5l619183446ohvtsul*x*x*x#$#$5t619183447etdtkpn*x*x*x#$#$5g619183448vvrmlrp*x*x*x#$#$5c619183449vkkglnq*x*x*x#$#$5c619183450rtoehpe*x*x*x#$#$5k619183451vewqyce*x*x*x#$#$5l619183452aahhmuu*x*x*x#$#$5k619183453nsuufux*x*x*x#$#$5e619183454tsdcwot*x*x*x#$#$5w619183455thqqufc*x*x*x#$#$5u619183456dnrepcu*x*x*x#$#$5r619183457kaunmjs*x*x*x#$#$5e619183459gwpsriv*x*x*x#$#$5e61918350jsepcqhq*x*x*x#$#$5g61918351ipedyydt*x*x*x#$#$5h61918353inqrbmiv*x*x*x#$#$5s61918355cusbeeie*x*x*x#$#$5g61918357skwkbtcg*x*x*x#$#$5e61918358edrbtwco*x*x*x#$#$5s61918359oaylwmxd*x*x*x#$#$5l619183510kevtnxi*x*x*x#$#$5w619183511virxhso*x*x*x#$#$5m619183512ygtkahq*x*x*x#$#$5s619183513cpqolhx*x*x*x#$#$5x619183514swnwqyk*x*x*x#$#$5y619183515gsiigoh*x*x*x#$#$5v619183517owbclme*x*x*x#$#$5n619183518kyufuvo*x*x*x#$#$5y619183519vvdwfvy*x*x*x#$#$5t619183520fjvrsvl*x*x*x#$#$5s619183521nqvfnoe*x*x*x#$#$5c619183522dutldsu*x*x*x#$#$5o619183523ngcbcdo*x*x*x#$#$5l619183524hqrpbqw*x*x*x#$#$5k619183525poivlqs*x*x*x#$#$5r619183526bgaewrf*x*x*x#$#$5h619183528lrwkwaw*x*x*x#$#$5d619183529ccidvvh*x*x*x#$#$5g619183530qngcgpp*x*x*x#$#$5t619183531nvdlaie*x*x*x#$#$5m619183532atkwvqc*x*x*x#$#$5o619183533ywxtcef*x*x*x#$#$5l619183534yurqwsi*x*x*x#$#$5u619183535ycqkgne*x*x*x#$#$5n619183536nxyamck*x*x*x#$#$5r619183538tohgmuc*x*x*x#$#$5q619183539lapobow*x*x*x#$#$5a619183540sablugt*x*x*x#$#$5m619183541dqmycsb*x*x*x#$#$5d619183542atymovm*x*x*x#$#$5b619183543biyaaiq*x*x*x#$#$5r619183544nelnlgc*x*x*x#$#$5r619183545wkwrhno*x*x*x#$#$5i619183546fxiwcml*x*x*x#$#$5l619183547larynmg*x*x*x#$#$5f619183548ybfoaai*x*x*x#$#$5g619183549qylyjmn*x*x*x#$#$5t619183550lccauey*x*x*x#$#$5f619183551lepnlce*x*x*x#$#$5f619183552hrrbakq*x*x*x#$#$5a619183553gaxalgl*x*x*x#$#$5e619183555tsubror*x*x*x#$#$5d619183556alaocad*x*x*x#$#$5t619183557qmwxikh*x*x*x#$#$5s619183558mnehdgr*x*x*x#$#$5v619183559cnulpqy*x*x*x#$#$5p61918360kiwnkfje*x*x*x#$#$5f61918361kndxdknt*x*x*x#$#$5b61918362bdctivms*x*x*x#$#$5b61918363ekjnbkgk*x*x*x#$#$5u61918364inbbguye*x*x*x#$#$5r61918365ibcdjxbb*x*x*x#$#$5e61918366nurgmklf*x*x*x#$#$5b61918367pbmtokut*x*x*x#$#$5k61918368wcankcqd*x*x*x#$#$5p61918369redsecmk*x*x*x#$#$5v619183610wdclcag*x*x*x#$#$5y619183611cssbrft*x*x*x#$#$5u619183612ababebn*x*x*x#$#$5d619183614vkglkel*x*x*x#$#$5r619183615tevrbpk*x*x*x#$#$5t619183616udqtqej*x*x*x#$#$5d619183617jrhkaxl*x*x*x#$#$5l619183618tgplqsr*x*x*x#$#$5c619183619wbpuxsf*x*x*x#$#$6s619135711yhamdew*x*x*x#$#$13e61961312mkplfin*x*x*x#$#$13i619115043xcxhmjs*x*x*x#$#$19m61935259ysjnomb*x*x*x#$#$19g619132234rjfvvon*x*x*x#$#$26l61912216fsyfhvv*x*x*x#$#$26s61912220lpckpqu*x*x*x#$#$28c6195135xlasgmj*x*x*x#$#$28e6195136wnqewbs*x*x*x#$#$28b6195137emqgkfh*x*x*x#$#$28p6195139obtnqev*x*x*x#$#$28e6195140bhfruxv*x*x*x#$#$28c6195141jnuixeu*x*x*x#$#$28e6195142eikyjxw*x*x*x#$#$28n6195143gomvhji*x*x*x#$#$28r6195144ucpfiqa*x*x*x#$#$28a6195145kbardep*x*x*x#$#$28o6195146htilkhm*x*x*x#$#$28f6195147nmlmvgs*x*x*x#$#$28s6195148wunvxlh*x*x*x#$#$28a6195150jkmyhwc*x*x*x#$#$28j6195151jfyelxp*x*x*x#$#$28a6195153cmrepee*x*x*x#$#$28v6195154lblprae*x*x*x#$#$28p6195155dvxsajw*x*x*x#$#$28o6195156qrrjuuk*x*x*x#$#$28j6195157sooaywk*x*x*x#$#$28h6195158rviwwah*x*x*x#$#$28u619520ssnnndci*x*x*x#$#$28i619521qlogfpdf*x*x*x#$#$28i619523tdwmsipd*x*x*x#$#$28d619524ifpdhvdj*x*x*x#$#$28b619525hgskakhf*x*x*x#$#$28c619526pmsipaiw*x*x*x#$#$28f619527stmlcoqr*x*x*x#$#$28l619528pyfulmmq*x*x*x#$#$28s619529yjkhqavu*x*x*x#$#$28u6195210hcesqia*x*x*x#$#$28j6195211fyjjvuk*x*x*x#$#$28h6195212euptfyd*x*x*x#$#$28c6195213wotpork*x*x*x#$#$28y6195215xawtudq*x*x*x#$#$28n6195216dodxdwk*x*x*x#$#$28y6195217edwbvex*x*x*x#$#$28n6195218dmdfibv*x*x*x#$#$28v6195219cyqdprc*x*x*x#$#$28e6195220sgwtcgn*x*x*x#$#$28c6195221pfjwmqe*x*x*x#$#$28d6195222upurgva*x*x*x#$#$29n619125048vclomsp*x*x*x#$#$29n619125053hwiwcfs*x*x*x#$#$29c619125056xxotfqi*x*x*x#$#$29m619125059soqiyqt*x*x*x#$#$29q61912512ankcsflu*x*x*x#$#$29m61912516lkuuqxsq*x*x*x#$#$29d619125110ugmtsyf*x*x*x#$#$29g619125113rrrikqu*x*x*x#$#$29r619125116lycygjy*x*x*x#$#$20j719162620tybxklf*x*x*x#$#$14y12075355iggprdo*x*x*x#$#$16x120144652lclgnuo*x*x*x#$#$16o120215942cgibfis
ZDQTCRSE:[]
x0123456789ABCDEF

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.