1.3
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.77
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20200809 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Kryptik.bcp | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200809 | 2013.8.14.323 |
| McAfee | Packed-KS!E4CE4FD3DF07 | 20200809 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b9eb9e | 20200809 | 1.0.0.1 |
静态指标
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': 'UPX1', 'virtual_address': '0x0000f000', 'virtual_size': '0x00013000', 'size_of_data': '0x00012800', 'entropy': 7.856552659729965} | entropy | 7.856552659729965 | description | 发现高熵的节 | |||||||||
| entropy | 0.9736842105263158 | description | 此PE文件的整体熵值较高 | |||||||||||
可执行文件使用UPX压缩
(2 个事件)
| section | UPX0 | description | 节名称指示UPX | ||||||
| section | UPX1 | description | 节名称指示UPX | ||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 57 个反病毒引擎识别为恶意
(50 out of 57 个事件)
| ALYac | GenPack:Generic.Malware.Sdld.864EE127 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | GenPack:Generic.Malware.Sdld.864EE127 |
| AhnLab-V3 | Malware/Win32.Generic.C1709874 |
| Antiy-AVL | Trojan[Packed]/Win32.Upantix.gen |
| Arcabit | GenPack:Generic.Malware.Sdld.864EE127 |
| Avast | Win32:Malware-gen |
| Avira | TR/Dldr.Delphi.Gen |
| Baidu | Win32.Trojan.Kryptik.bcp |
| BitDefender | GenPack:Generic.Malware.Sdld.864EE127 |
| BitDefenderTheta | AI:Packer.8F39E95C1F |
| Bkav | W32.AIDetectVM.malware1 |
| CAT-QuickHeal | Trojan.Upantix.AL3 |
| Comodo | Packed.Win32.MUPX.Gen@24tbus |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.3df077 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| Cyren | W32/NewMalware-LSU-based!Maximu |
| DrWeb | Trojan.Packed2.39727 |
| ESET-NOD32 | Win32/Kryptik.FKSZ.Gen |
| Emsisoft | GenPack:Generic.Malware.Sdld.864EE127 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/NewMalware-LSU-based!Maximu |
| F-Secure | Trojan.TR/Dldr.Delphi.Gen |
| FireEye | Generic.mg.e4ce4fd3df077e82 |
| Fortinet | W32/Bundpil.72F8!tr |
| GData | GenPack:Generic.Malware.Sdld.864EE127 |
| Ikarus | Nestha.Win32 |
| Invincea | heuristic |
| Jiangmin | Packed.Upantix.bcmf |
| K7AntiVirus | Trojan ( 00500aff1 ) |
| K7GW | Trojan ( 00500aff1 ) |
| Kaspersky | HEUR:Packed.Win32.Upantix.gen |
| MAX | malware (ai score=85) |
| Malwarebytes | Trojan.Packed.UPX.Generic |
| McAfee | Packed-KS!E4CE4FD3DF07 |
| MicroWorld-eScan | GenPack:Generic.Malware.Sdld.864EE127 |
| Microsoft | Trojan:Win32/Upantix.GM!MTB |
| NANO-Antivirus | Trojan.Win32.Inno.ejijwj |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM19.1.20EB.Malware.Gen |
| Rising | Trojan.Kryptik!8.8 (TFE:dGZlOgPGGJcx6NSLiQ) |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/EncPk-ANQ |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10b9eb9e |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
1992-06-20 06:22:17
PE Imphash
24b60c57cc33f3e633431b7ad497fda7
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| UPX0 | 0x00001000 | 0x0000e000 | 0x00000000 | 0.0 |
| UPX1 | 0x0000f000 | 0x00013000 | 0x00012800 | 7.856552659729965 |
| .rsrc | 0x00022000 | 0x00001000 | 0x00000800 | 3.8057924052084515 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x00022154 | 0x000002e8 | LANG_SPANISH | SUBLANG_SPANISH_MODERN | None |
| RT_RCDATA | 0x00012448 | 0x000000a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x00012448 | 0x000000a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_ICON | 0x00022440 | 0x00000014 | LANG_SPANISH | SUBLANG_SPANISH_MODERN | None |
Imports
Library KERNEL32.DLL:
• 0x42251c LoadLibraryA
• 0x422520 GetProcAddress
• 0x422524 VirtualProtect
• 0x422528 VirtualAlloc
• 0x42252c VirtualFree
• 0x422530 ExitProcess
Library advapi32.dll:
• 0x422538 RegCloseKey
Library mpr.dll:
• 0x422540 WNetAddConnection2A
Library oleaut32.dll:
• 0x422548 SysFreeString
Library shell32.dll:
• 0x422550 ShellExecuteA
Library URLMON.DLL:
• 0x422558 URLDownloadToFileA
Library user32.dll:
• 0x422560 CharNextA
Library wininet.dll:
• 0x422568 InternetGetConnectedState
Library wsock32.dll:
• 0x422570 send
L!This program must be run under Win32
sg7w}q$
[Y6MGSwCk/p#8
dA#';dA
cg$}8#
32`,+{3
rD)d{w
Dt3sio{q5
qga+)7sWvJHa'
G "&cS*sSi
co4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
4{v1sbt
s3-<-*(oZEKL
[;?aNLH,
cd$t'&tac"4s`
hx69s$NLwLv
s41>X{t!}rE
](/sug
iWzw\ $Qkl
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbLSl
%CtO\$u
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLk7
HwyljDL
[ XHrv
'1L1i0IpB
7go.V vKS-
qXG@q.-
[wM`>uawXSLT
} Rld7MFC0
kOS_ 76
{zp" yno
U 'NJB;
_}AXtb
{{-..g b\i
-*$%]x
Lv4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL>
~{4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLb
ovbw;6{
y*sI}tW
)WSc\VDfL [hsrvWE
qIk/tTc
twf|RY*Ptt
ugc/1N
0vsSw(GaPtm
KLcdXg
`jV-6s
%pLW*|0K^pv0
0K#$.i
M* !T.
E$sWFVnh8WEer{B
QxkHJN}:
**&[!|
riwxB~;
tB#Oq!v6'wR&|
]pMLtCSS,L
uD3eY C
Eo''O.~mn2nv)g
1g7[y1U-s
'%&T4[bp/
F+Jl+y
k2ID&7Ov(2b
}<3^~t9w
|4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
p}m_ZhE
p4og$o+(
8!'@p|U
Vw q{a{
g,1sZhx{Ss|?
sRw/Qx$
[=qW`#%
r$?.S)
?..6x>
! 'W7_C"
?V2gx$sT~jX/('
w "{fQ
}c* \
j;{3gD
={F3ha
$y f;}0
'k)j/,J
0e.s}m
qlf/m1
Q<g^t$c>
Yu5KxiKz
_f-NZE
9fu.[hF
W@S{jcAn
Il?'}r<
G$AF{F_4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL's0&
{uur/p%KFPr
rkZ4h0cGA
pw8W`3:
o+GU [oF'J
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL}1
>,^v0
}WJsURv9
uL.FEnc
1;~HOu
J9s./4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbLFZ
72Ym7tZ `KPm,?
,HxC/TQ{
c!f{R*
RwpJwz
.pvD04{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL\)
rczmj'*4ND
16;X]z
$81# 6%2+5
+%#;w1'"
Z9 L5~v
aK,ti&;>9.+P
wAWVA!
/l(zx&u
~`|qa+'
v,B96{},l
hxkh$y?'%/
Puwwg%6
fw<`bybg7w
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL{x
66Yrvga3jl4&]{`$e%
dJO!o%
x*Nlp/
~;@N@F
W"'$#h/;
i:bl-3<
n^ @4%c~o9_
R(s0s([v w
T)5,K&f
h=L5nO
3]}m5{
e/`efR;
Nbt\+L$.Vo
v+Cjt_uW
g__<Gf
_N|;_'_P
c5mMbGaw-k
->Sks+7*$m)i0-
W@|UA4{u:eBbL
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!4{u:eBbL
_:aHfb`
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL5u
4{u:eBbL
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!4{u:eBbLc
O$5gLXwJ
LS`xot}q
Zu"F K4f%L
z*GWu3
{%'4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL'Jao
7(45<N/dGd)mty
3W'S!4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL6
s;6{cK
~mwKc(
vapP<p
x{!"62t
P|gw74b
oZAV%MVz}M=v+
&-^S/Z%
L0WuKk
{;}5I
eHjB_8
-!vbm!
Ak]bLgL
eht1v-
8n$XpS6
,'SFt;c
@t@<rNZNt
3o{+v6[
w{=Bw/S
b-0g-{cJgg
w>5QO*
K,o_'YG9
w^vsY'R
L%xcw"8
)j|v.N+73iJcXV6
?shtVT
t_W-Gn1hN
,mZr{^
uV$h}m
fqw4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
2\9e|M
?`aw3wwe
9!vGUK|
:KxKuuw<|}L2
*R4MI&+
s46fB5c=sDo
:"pCjH
bN40*'
b1)x_Pg
0Lr8"wazDh
c!8xNH
p"% b^qG
jC6P?r
=WZ*]ZBvx*
1Zn\Rc
%?f/=#8
2`7+s<6%+
W[kw2g
D{vlE8C
2H ';Fl
+/2 #';
zuYE3hdjI
dgcokAW
v pFup#5
V4G1$<P
1` G6=:[.*
p]s6*I
w 6->4_
SDb)"?
{G8qWrWMr$ffn
~oXVwwo!
82$d#Q;BaQF
/>!:$0`L&M
G?xB&}&
&.K+E.6Hx-ww/
f3x]Y]?]w
>|4M+q
o Crq-J
cH-xKcZ4 ^3
v3$k/h
ey`7] C?
/ZxdAG</
<b0$#4
kN6P;<|XC{
03kU</YQ
q LHh 'LxFd
Hk6pu_Gw$ln7 g
$/<2|9
b5N0#Y{x6
WY#6'NF.]';7
nS <3Z5^
".Cs-%oKCFK7
227 #%cC)@;C/2O4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\4{u:eBbL,
e6G/ [yA[w
22dG3CWEQ#|}>
HxlKm~
LO4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbLSC
Fgd7W|W
dJ@+k2%@kp
oFNNocdy
cyAg<aI
w>/{lI{~_c
@8%>s)
M#MaiwS6<Ew)<`/w
y ci d)
D\2^~4{u:eBbL
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!4{u:eBbLx
vXV'gdD'#cg${Fg# D1x
:wXv{F
]dl ID\g
{w. Z2m.
'f#[Rm
'?#~j;
=.W_eUv
Fp+</F+/<
d#LK?b?3-ld37o7X^
1\OpITQY Ow
C)Z3Cg
Gg[G4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLW0
[\[GP65:
3)[YIx`
XlnkeokI&
?G2 Cvo$o
x |cGTc^
F8{ g }g<
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLx
0AQL<B<yNv<YI
izv.QKM
#KsXha[cE&7w
'>t390woq
87:8#3c=88W+-`
+32W -G
M:6c$#2%}w_
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLW1
Vv}w _
`},6eF[e+C
&">#+"
GGjcdo4oE[>
uGo!_9MW+^WZW
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL[u!
MW3\Wg'
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
4{u:eBbLY
c l@(L
K:+8NlN(Zi
O9>4<W
'6%#jb
mF}k&'n
%4RYY}c-
W$a+pZf
3VW%1W0V]x
-[26Y,
4g7U:3
7?YWUE
43'BJw
C"S@oG
A;/1$O
o;{\,'*
j":4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbL%!G
`f2{${w|)
w%1e3FP
{}L~tgx?ve#
Q|Mx A
.4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./012345674{u:eBbLtHw
P 09&Dm
fy6Y# j<Jl
N<7c?v
?4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLr"b
v0f( rF;
'xy?T|
e5v ,7
7](,23
?ZwCK`n
}~#>9y
0Ba[4o
8`j_3L,$Ci
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\4{u:eBbL
FNCE+3$WD
K$sW?.
WEs"#EGGC
9o(ven^4
otFFFckWeaYs~a
xBc;@k5
/8 5G^V
cq_2-s
F-@ny')
;|-43*k&{qXpZg%]
#t,{77d'{
|p(nc[vg6Dx
E/#%KX
:R:I0*n
~bKHE`=`6}pW+
/!c7jg[
+/6a%W0
WK$NW/rj[
vi'j"ej_
)G3 -
17G 7^
Ock_uCC5.
$SpGw
k;mfVx9o
!LcL7<
{2{g%wO
['vC4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL6
LV4{u:eBbL
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!4{u:eBbLO
Etw'o4o
h44OT&R|+
{$3Et8
_l]Zz3h
fP7i$g
1~,bn3RoO
"!?b#5G-
P@#Qvl
r*/n22
(NQ(,)(
u]5+ T
u[Wq51<.n([M
[7,d-%
$'9#ww
/'!NBNO$2 O
: $&$FE
a-vXArvv'=4{u:eBbL
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!4{u:eBbL
-,;693h
9Z;-EM`
L|' v[h^
)]diF_
8`vrc1-Y
TC?c()PsFAO
~\d!]D
d+.O O<
BE;f'~.
U3iK+X"Vp
T?Rc7<Z$v&NB-C#
2rf]Xp
A 84L^:
d9u)<#/J
8&,oZR]KKF
yR@{z2rJN
&Gt8}q
WH5RcK
k4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
5>8$w V
=CtK98)3
#4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL7#R1
uH0qtQ0pp
l4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL$
tw@k0c
PwX!T'po
7cccst
'!!s}@
Dv_gu,
$}W:"=
+GRB >938 $./AvA9#"o
u/L/2&+6A
3O\7J3
c?TYanb u
qD8a;*(e
'/OL G
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLx
um<{La
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLh
x:!$95
e4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\4{u:eBbL+
5mFr=B
pPmf[h
g![+$ j
^4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
4pV/7'3CJu
p4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL/
f6# .@j4
#9g$Cg
Qk}^vA
K8c;N7
I.w{O}w7
bk7Zv;
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLa
<Dzfy{`>y>'k
7!T}A-7
|q[K-L
_[ta@X&MHpc:74!UMw
TR;Zki$
D4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
EFF?I7DB4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLA@CA
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab4{u:eBbL7Ho3
oz.> 4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL>?<=:;8967OLMJKH
*iiN^n~i
FU JwO
Biscan
3Messag
System
sKWindow
*ShellAPW
ock:pIMS
apFunc
!uMyDooZuN;BIO{#Gfec
&pWebServ
Dn;eCM]4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLjrilS:imon
iz0_Virtu
GTBkCouk
adIo[d
;d,harToMula-{4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLBytg
St_aJoA
Mod;leFi
zLaEoSkmT.
brVyEx%P'7mss
1wd.)pN
]t"Poin
}dOf7Rtl:wa}0
CD3.t7@TlsV
MC?A@B
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
TempP~h
u`sAmfFNex.
04{u:eBbL
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!"#$%&'()*+,-./01234567
!4{u:eBbL
&5ZilM
4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbLpy!1
O^nKey
lannQA
>1uxNbIn6
*L|4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
#@VvSADnup
tbyplnase
l4{u:eBbL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
4{u:eBbL
p`OP'el>
w'srcl@
WWVUHE
4{u:EeBbLE
XPTPSWXaD$j
Gggfv@
&vvggd
wwgbvt
1wwwr"gf@
1wwwr"vv@
wr""gf@
wr""&f@
ww"w""@
1wr'""@
3333;31
333333
KERNEL32.DLL
advapi32.dll
mpr.dll
oleaut32.dll
shell32.dll
URLMON.DLL
user32.dll
wininet.dll
wsock32.dll
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
RegCloseKey
WNetAddConnection2A
SysFreeString
ShellExecuteA
URLDownloadToFileA
CharNextA
InternetGetConnectedState
[Bb1~Fgc0ACNW?}I!zR"
248F(I`n
ov+W$(W{
^i*[MC`TDO
qwrPFx
]5m2H2i
]~\-6)
0cA{XB();&}9
=V.o?:
|K*sX4
xG%V|>f}
kFM#l!
TK~i4t {
7! 3\Q
(^l<s0\*II6
}1](% |
Dt,ys:;:0bAe=g=-m
7hIv[B
;zl"({,UK
w"a/W
+/dG3YZ7
\7D9T"YB4
"N@>XHQ*
tyauDIrs
/[@*+R}9H=
PAq|: nM
vX<>U^=
nsxyLF3
KoW:@3
Lmi_Yj
%@3~q(E}gB&p
1#kwW6Th8
jPT;'@I
B>Gw 4w%
XTv/eBPfe9R8
epE-9?r
vnTiq8
gvHg1>d
Ke#a#HBU\t
BQNNqLGm
gBNFa|L
abH]gj5C
ZjvU$}iI
0J[8~U ZbMWcT0
(,Cl{TX
aBSal"QG
9d '_5O{y
9#oOhl+C~i,
wSM0}&
N%omBnUsyuY
EX`dyi5-
9HFVu@,
>dZ.xZ
WYe0TGW"42
PuBrik
N> <J]
3C/L$vPm!
1i!<1|%VCaA}E
1os|X]
2\NPejufM
E^TJ BISfH
\YW/wX
-SgY(z{
Yx6bXq
4efDn#
U09Ykr`s$_+bz
= ~-8$+v
N}e}.}j
^3[%%F eM&@[`cuce
i'|mLW @-\9
pc!^|e
T`8 ua?QmQ
olYRyC:f
iOLN7P3
I1inC*PWa
F]x@#z]
`Xl;z%
jgxR447
18A ?a a
]^nToW
$Y'Y tM.
tqUg&lS-qB}
;lzk{`
fR3.c.
UUt}Ea
xww7['iX\KXkp8!z
8f=DD_
FU2tOSZO!/)
W<1y#_/pL8
q<q+9?^P@
Al?/8~%I,d
Rfiu=L
;7WM>oW<
J%AIzto'oct
:&9W^4=-n
BgwWL=J
-ht& -
2JRp(C&ES
2P$? ]
o%4|$SLZ
aQZt`{P
#(N|\]6\2md
35+wC.>aaT
@,e.t FhDDc
r|Y:S)3
[!WH2oK
J?E@)2_
Hc%Mwe#
RZ'XK<
oC"r;iD
3YM8%R
LI}$y-uz
&/dp^>hL
zi}#IE
]~)Z.-`e
5qS<6J
%`qHp&
@PJ(br
vm0CuFUs^6x~
:zy6ty^9j
U[ng*OFrA2G
EDs*%(.{
7+[~K[
YF_~x)@C
R::(jk/.
5VA}Dz>?
l>b$4.Bs
#&T$kT
0YEp.;3
BgkN9B
j\_>d.j
H%)rf3
X:)z(W
hG2fyoqQJ
`l8!k6
- "iFgN(E
QxWj=jIBgc6
t,D)XOK,:O,FY
Cnjoj3
VT0@Q1
X+OMhU
R/(y^_#jg
ZPcp*f
s!zV>u' `0P4
{oIN>b
zn?I|Fs
=FZ!Rye|[
<RuY~c
w~%T8RDG_s%2!g
G=W.gp;bh
L7aL7mvoq0
b8_;/_
x/:f +K WGO^
#M\q\PqovYdxY
x$k9'7 tu5,;ntEwG\>c eQk/
B3V_%PGw7,f-vj>C=7/[i
rb:.7;"
5Mj?MUm
^>[3eT6.
;Dui$n
K"sbQT+
SJUG9L,!N
'd9*49*x-P9
VnVZ$l
{p!UDOJ<5~W1Z> v
}[pxL_
ga5R\f
gc0SUoH
1g?>L?
<nZ+K/
[mmT wM\ZEkj
W0tYH"ulO
c!^JDGO~O!dHoIYa
bd<7 TI#DC{
:('%Wz
wD;xOUD
m9nM%[fMOL
tPxo6I=:[#
I&I)Nk
M2IH]%Y
*TfiDp1 Y*
HRNrT-
vQ&gU4
,ps6iS
Cg%K{\
JEcnye
~ij_XP
{?Q2wlZ_
`xNVo8B|\G
KcpOe-otQ
( tKq
oP8$4*,
~h78S2_0
R{N%d4w
B[),ex
hS?PH9,l #
/6(sO8u"
!sAu[Ps
DO1+J{[xg
l`\45!
W\,iCJ
,Bixt0mzijbC
;7#FE(L
`P@Riu
fH9{WY}
rB;'K_
?YGB4v
WieIw8v
%Rn[~a>&
bBfaL"
7M;:AV
0tv/2H
H25~x=~
TL3.Cr
wLUC#=-@\bOv\sU0jl+
3{OUq9:w o!R
AFvf7b_pm$sGgI&:4gx"T[r[e
GL%J)lzyc-
y&V|BH r9j
.G TQCi{e"
`?Y#4;Ly
VYC7dwne=?
NLXtYVCm8q
c)!VwYom W
hLFBmB
u<`BE#rE
L7)ZK]O-oDU;
G):D!E{t5
3R4bNM
,n:Y[p'N
AI]s*]
w5&GkKTE
VtUS)*|
\&GfJEJ
~l[.OJ
C=p^!n
LQ25%=!!
/D(,bZ
/wiD_>Oh
+CFZtI
[1FwAKM#&7SuE,f
!T`6o\
L8.]XG
$SH04f
*KkpP-
z%G"KYh
~H F:,3OYq_4*b@]
s6C VQ
va~O^GA}&G
m\t 6^k;
3LI7C}
n;esdu%7l}
3Rj|zxR#U
f}DUMfR_x
dX;e/fHLtq
<&:4$v0L%
Vq5~ ~xdIPbC
[nx 4[ea
rw@+1Cc
(Zjaz37
$zIQ[k
SV8 jV:
\wi1iu
J!eO:}XvIB[
yX _4a
9H (3m(
L!g_p7I
CtNdVn,xO~o
E %t]yA{'Y"qX
-x$_jTX
>0_\2(4bnD
8~#,s`
|jGy%ZN
\*yV9Ui#
O4vt!SmZ/h<
iyi+bS
O`GGN;<
EI=<x>sb
8G?WQh
{lbn3~fo
{2_[nq
Yopx`o^| \
C! M9"
~$$yN*
ED'Asu TxIg:X
y|J;3F>|
XA*uPU
]i+`/',ed>
S{US]g'9A
:hP_ra
%b.',M{-
J*b:xaJ2
s>(6:peq
64\*BV VAXE
$dfP;:I
G LpPU3b1a/
"b'<9wa
\~OSGl/1E
~A%"Yg
^u/u?g=
mx`2Wr
2HK>}?XN-*
:+OL`6
?\/,A?pJro2
0I/1R.a9
$U,DCs\
)Lv\J-]P1;P
W.fbVQNP!
7 7c%]L
6D$uE$NT
c)$0#
/[*?8.Bu@H@B
#T$p G
;Rd\9>
x+-Msc/=EY
Ok 8>H
R IP]CfB
:4sD' g'jlE'
n~^,o$_!
\|!$>nf
p6_TY$
\y2dk=
V/G-ue"j<
Y{~!$\qDhV_pB
s_2E8iQ7
r2j_;E
Oc[Bn$iD
N&f0E$e/bYG
=_#u<T
6Hg2L2ir6
R2G; &'
-n@JyWx.3RB4t/G^sv
w{\ lf
F$)N +
qfAqyhpd6g1
g;'Y"hv1
Xn|Gh8
Ui}?%sG`
zV2K;[y|2:
Acu m$
v-<b~3 4
^58y3O
D/fOcbx`hS{Aw
By09Uga`
mQ&P24Q\2
9(?s,#Y
V2NT`f+Sy
{Y%Qe4
?_t10|*
H9=5rhm
Gpy.VH
)Q[ Z6
iAL+<-1#O!
BR`&*)jnc
H,m4#LN
SQp).s11v*Y|PSDfr
~xuN} |h.<wpfkC
'?CCy)3$i0?b3;
/8MF~h
Vdy9*6 >uo0oz
HZD$;h!1
r.ykXOU]=M Q
"-73ihjuWG5=z
1%<w&j
r[tU`A
z(9J>0Wh]TQ9gZK ?"
F[kZ0"d
wk+Jxq_vW-
O6oMD"
v+Lx[2Z^Z@}}
{L`y4u#QML;n
*CLf^n1
!lZU +YmG
-rh +Da4
Mcn(0f~9|S4
NoQAY>m2b7
E@jwXzq#L
DH*!,3)
K;pR:\_i
hE;<{QCF%
z+Nx\o3
'Sa.X9?
>z3%h&9l*&
4(o.x8EUO{5
<!4d7z+u
^UY2]na
hUVgbF}
?/C?~4?]
REFs8~
\4'*G 8q#HI
{UupR;wo[twYVbz
N2xaMJ
5P=hc>
`U2%,n
IyW2-17
yO*><Vu.3;S'
$QE6XC}]q
UtSvwfp
8C-*rb
,)$45` ^
7)Dgx[
:_R6"jm
DCNwV2@
7kzLd)KKKm
QTXP<[Yn
?@uke}?X;
,5RGT4>{s[nC:J. 1,|o3I
L]n!UODR&i
d*N p}
4Amt"U!
DfAcZ}
Wv3OqL!0M$;
@MKj{R
P,zf;;
E2hyw?im/z
<0$L##1
1#}).zu[V
:`$Gp5x
K}6TQ2
aBV[zZI3
m2*k5{\(
+WE1:/
k:D}y'Wm8
hI^+F,:2
}Uv=77W
e.eQ"vt4
&-e%pF!*G:1o
0p6T8R
NQ+#YO~
~~QXCW_
~hzdRk{"
BV4~H6H
b=iCZtw
URs=MrwIgX(=
(?=W=l1EcEM$r9x9:v;
vsAmurYk
HpZ CX9
-d9vXN
Qk`E+Vks8V
<nW\D[u
8 F<>n?
?eGJYm?Z l
hfzQPt~2YI2
q ~eja
0dl^9gb 9
J~jOuE-HnL 9e8
fx<$o3
ivYF-O
v[UN62
L[GNhD;n
zSOPW!t
w='J|BhZ"M3VqRVfW=z
HT0,o~
7wFbx',Z
mJhei
}0+g'Un& GUP@;
|8VaBb#fQ
!xcOq2
9PgCF>-b D(
Dqno<#zGZe
?D&s&'?.sR
~-R\L'2[hq19
a}h|d`2)@h
{M[hfJ^nb
QN(*A^O g"_
r2 $W:GH
=*=LR\ *
~eb2M!AT<Zg
,/62Y:%.|
[NkorJE#CS
hyl ~/`R
k|wuCEf@
dr+%cEx<]/8a
<`inr[-w5
v)_,fISM
Eo[Y+]8uh
xg+0rI *G8>[
owN8TZ5
6-9q^16
_J{H~8-IB
zEw&sxCY|
WY..yI5
I3j);VZG
8j{N*IDs
>W >nWB
w Oq]{
/wK&XD
x4=\&q
eeP&oT
KLYo5(!
cb&[k}*+
W#,DY&
aZ|4]Eyg(N%!u
,[X15 B
6-#Km!(Hw1
3p/;i/
aC{]]P7@iAF"
q/zL5Lrly0
`pkKBV
M^cI`S>aQB|*eW`
";+O+0{
Y-uW: \VO
y"<YV]$R
y)+G~/N
/s<Sw]0y
Zu1N/eWH9Ni
uBW.QW?4?
u9(`=}
w/]b=nK
A%v=(Vt47:(f+)
FN-=CTb(
/mb "
<,L=CLtpi
@L xMk
KQ$H%mGJ
q~/-+_
,VfLyR_=2s:
VTjjD&]
AAL_$3
7:`.NgV
fv`f.\iL "*
,U8c'
Qq\j>]}U]M;n
x&'hAU
\\$'_!R/aq5AN.gzQy
$QWeBQn
td,/7H
wW\B5W*
mOa/V`O
tH";j&
H|VXuyc
;Qxqzr,[\
\<.7%L
Z[UQ| %
@-ovYu*bM}=Z`C[
D{WgB@lKd
+_= 3t:
^ hA;x?(
d*-Kgu
BZ:Iw^.
~W5cX!
IV|cN/ sE'mDlMFdSNA5K~-&mj
E~Ls=M
N}M7aKZZ
M`:UTiy$
37yAT0xF
S3 ']I-
6;1kP`(K"
O@)QSJHK6
xNEj.H0M
Eom/%G9-
\|@G%3|
M"69.XwS
R:ZrI#%C0j6
FzB ?D6
]0Io\R[b0!FEzO*
X0g^[sd
Cn[x\@
Iy1D)wI[BQc@>^@0fOdZP($K-
7"=NO{
Y/{03fG %A
E"R\o
*jMr{J8
~Q/Vw1Q
FIaa.&t
LENZam
%uFha*"
%F% [0
Q;-},U|L
Bi"m`d.
a>r]y/
a;cL!>`,L
~L=Pau'q
>&i7yr'(
Na*ewv
lWI%A@Rn\
{S05m6uEPbbb\
~Ux'G E"(^ 27ULk
s(;)BRNwxGJ
1ILeN"4
`&>Bf6&
aBP-4PuO+yI@4_b
'&.t/.
Or:|=IM
w"TMP1
M%l}`qshTk0`kMHL
6FKH|q
+^bm4d
AcG ,jL p
I@m`@S",YG
F^Tv2C{[5X>G
ik ,dp
DPqrP5s
Nn6EF.0n
#ev+49+Ln5;>[WLWZ
-3jp@Q8C
'E{9A3.@
EVj}`c
/m9CR#
V}LsD\zV\had
0w>tfE
4cWRTN vC
z5^=+u,
r[tj)_{
i0vQ.o
x|+W@#S
(9PLT.
UJ9+p$7c>D%
4MQ6wf
MI#/x*i*r0_Gez/&!w!
EoCKjV`|a@uH4qEnKel3%n7S`
'qA?<BGI"e
shZQ"cC\L-ceq>S
)G7I#sBjb
6CZAn9
enJ&H>WD
e!fN2zc`_jJ
A`pc*N
U_iXa,
%]RB&W
;L@W@b
)gGsv?>,)
?^"0pxU
-&|I3KGb
YcyP~!Y
N-B6pN%6/
cA|q.}
\>`8?!&
)z=tGxV_BggG
px~SVD/
tH"KFo4
<W>WU4KV
dAn~qVe&
C/46L]2W\
A#S Y<d0
6Sil.vnI%Bb0
\L8UW!
?[_hvqBJ
.)Z=SK(p^
8Kcmw>@|x!4 3]
(%?x'%
ahwb!D5
~.d8"eCGub
OHcs/FB`=@ita
I;dp9^
MnEsgd%&@J4
7}QZ'%!
$o>Pcv6
&sV\/t=%pv
d*,ne!
hiEREA!O%nf
WE+6W0'
S4*=]SO0yk6
ugSABm3o
=2}~/b
!8=om5Uef#Q+DswE"o
F4ImH6z&q
*FeEB] GDn 30M
esehrpq/
7ykaVU
5L$mb4F2
@i#wo5
3LvYj4I2O[99,
;Bu9:54
[ 7/^SK3Xqf#qtL/
?]Vj02gy}qS4
/d 8LKzV
eQz8?5<B)DyS
yKS$7$
So/S&I
;Vi8RDirtv
nX"9U%+c2n
2=')^6HL-c$A7C
8g*FY<^mNT
JWaC7m1Zt`
}h.WjjB?kP
/3TOw7I
Qc}-Hxy" bK
a5qkG~Q
edS~0F
|fd$\G{y8
3_=vZ+
2B-Jpd>aH3p
p~8+cyb
,E{S1']
bwt,1w0UdS;
gu<:IKJ
MmswbF&e
iOK_<HVy
E?1b'Z(R
1N|z& |
0>a@UX
S89+F~6V\
t|)mB5
oSn(s'cAjwT&
zxYuP0\w2ix,H
&u9ua)5A
l!@*Ya#Z
?#Pq+9$e
=5IY}}6'?3FXd?bo(^
'I\w r
aT~e|URF
I6K,s</V
~,c6=[R')t%iHHv4`]x^
YUb*ZDb}u;nP
\E5/D.r
Q)dON|Gk 6
)vF@**m
]m~U%jOU
t\~|A1
"IripO
\Y )}CE
Iat)LcFz4Vc
cIsoz#L
!e&btd;
cpq6Ogn
V)HWxPK`O'i!C.
'9MndUM/*jyZg
ir\Ztb$
;xM5IY{>3v
.<naz_
~^ObV=N
7Gt|Ca~
ak/ h]mFs2Oqs
?Xd[Zpo!Cl\I\
:4n fo_{2
]Feq=6i$
AI!'!a&.
QN2 iP
^Uu:~m|!
mbDfmr
PLSl,l;
sODdR- gSm
&*N\#/
sNv~"5|W%qn'
P9_DtXB$-
3`s2$Wg
>AnqF'i0
6AYcBJ=
q>XJkUl
Z[l4_3qv
dltkpF
^T[ah/AB
=;alSL
)c w)C
fx{J8*
aJ{D[k>
Yp3d8jH
VM.m#32
Mz7o>vY]BcZx)/
}"}fZ'
FB{W_G O8Zt
d\m2/JTaKM%pn]d
qlAZ>nkQL9- 6
8xa/tt3Q
|oZjcq
5*ypy:%u!<
*6K,< !3rfW
/%<[S8
Gk:z.2k)4
g5vb-a_k"SNCu
V85{l 05oTE$|O{#
D2V#f8
8pqvHW^4
/5Psn!$"8$)"D
4X;TN?
o*]5YrY
EMih=1
N[>nTf{T
9S%:=
VO:&VF
bR-QJA
;*KbwC
}h4~qge:a
a(m]Hs?+pP8}[/
\DbObG
ojsF!F
-&53[a3k<O
M=^]gbh*
~,A1G-zG;o-
cdF_oq
{_u\l=
jvhr%+
ixA#%t
<q#osLI'
ty[z/j
Sw\pX9I-nr=3
dVIze?\nP{k
y HjGF9
s+Z<U.AqH
Q:J<[N|{
{K/. c
,xKWO1
$ +pNl eqr
>(i=rzU#>i
zO'7ot]s
jvEakYb QZR
3eXn:gd4"22k(N'Fiq\#
)u[Y,W;
I}lZn)
_++!7-Z,=Q
^~OxtE)@.
M1[Kn.,,
4=sRS_
d }F ;^
Xq:sQi
S~~c{l.,$Rhz6)
T'jb'w>
p^~R9.][
\*MHYg#
Z:P*Uh
=W_,peB
zf&by=MX
U<f"\Y
|ykmT0=cy;4bE^;
!mp(Ez7,6H<
n`2(&B2:&4VX
|_YF#qOH
C7?GO@
URz.@X-
ZYp<\J
9$R<o7P$
5cTs;Of
}7`gbW>}J8[<
6g%~R#vI0"
.9H!na
*w=eyN
LM2(`9+
T7dsfP&=,RL[
Ta*$$so"k0
.Un|n=
XB6,Rpq
_-K_\u-dc9
jV'btGlD
'#DTg+OlUJLS
ad+<2W{N
qb~[D[!
IM1mVr}
!f#_'@M:l<'O)AY,8n
dd$Gl+8R? |!
^jZit`G!ZB6H$=9jt
|IgEs<nZ
chy#O%FXj7
k[iO*\+
VLtN45d<
_/?9|%kL
O[Urj|{s
]6EZU[#
!Q4$IGg
a`]>\ErltKE`
Xk8 sAj8
I%qDA)%
sM%L7T
;C zCms^-W
Cxs![}
A!H {^N
w[E34AEL
q$6Ut~
d"^F'}
@eL)1+D~
H>&i;:
.zO($|*
>~H@H7
FZwo Q<v(Q%D
].|WEG
6J.cf}
p}4 [G
ERWx p4n
RWvwm>=y
$Zp%2kf
fqX+b4VFy
qtUh+Z.e
:o4wAho H2t
$Jh|~j*_#
KOdI*.cb
KB16y-[lLe
bpvn>Rs_`
92!dmu
oJ"[jT+
GEhKiJAQ+8!
n^v}-"
`9l7?m-R
'*25rxk>
$BSM"C
>)(=,tj8'9
k9myuGM
)eCr!^+BdD})eh
:zQ_E%%A.
9q`?f,x:=
q>8rRQ
G E I N F O
D V C L A L
P A C K A G E I N F O
M A I N I C O N
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.