From d180c7bb6042fe3c9fa83dab6276b77ee5cd2bd4 Mon Sep 17 00:00:00 2001 From: Maddie Bright Date: Fri, 27 Sep 2024 08:55:53 -0400 Subject: [PATCH 1/4] uploaded table drafts --- yfaq/tables/full_no_urls.xlsx | Bin 0 -> 18013 bytes yfaq/tables/full_with_urls.xlsx | Bin 0 -> 21641 bytes yfaq/tables/macro_no_urls.xlsx | Bin 0 -> 15236 bytes yfaq/tables/macro_with_urls.xlsx | Bin 0 -> 17613 bytes yfaq/tables/micro_no_urls.xlsx | Bin 0 -> 9455 bytes yfaq/tables/micro_with_urls.xlsx | Bin 0 -> 10849 bytes 6 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 yfaq/tables/full_no_urls.xlsx create mode 100644 yfaq/tables/full_with_urls.xlsx create mode 100644 yfaq/tables/macro_no_urls.xlsx create mode 100644 yfaq/tables/macro_with_urls.xlsx create mode 100644 yfaq/tables/micro_no_urls.xlsx create mode 100644 yfaq/tables/micro_with_urls.xlsx diff --git a/yfaq/tables/full_no_urls.xlsx b/yfaq/tables/full_no_urls.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..f6034093f6e281adc064a47ec72444e6f5b8307f GIT binary patch literal 18013 zcmZ_01yo#3vo1WiLvWYi?(PJ4_uvff?(XivCAhm2G{IeiyF+ldfAYTHx#xa&t)I1K zy6LWZs_UuV*0p<-WFa6i0000i=pzKsLSLEC1p@$3pa1}LP>Zgpy`2lt&c#5@(*fwL z$LL{eQ=Kwp*UyYNc;OvIyHpN$#w?E>I`B@wRa6fH8!1aROCALg+?uxvzETp)+E=V$ z{qo|gP#r^=wPI!+VbMkRI{`%tTEWwH?YrSc#7QLZg+`MTsEGf( zh8t;^2t?5{8lX)_?8Bo#-~Y98Oq}8)xi!DMXb1$?R|P}wLCYN94A9%8%aLQpYbcL7 z7GG4OXwsZJf`G3$98&kIKOUQ_6hkIcrc%L$&*^s z3beEanyNcoGr2WD?_ zWHRL=KjO79rG}xs5+CzjTLk3O>EbX(6~`>U&`ixAN4WLI-B#3GxIB*p9E6m&ObV}b zP?Wu~%yQV+>DnJBo*R89G1qw=r8bo#j12UgzsL^LJSd=5nm*LiSn7NgD9x3cF34}m zwm?-aSJ)ZT>2W1k)q^{nijn=&`q56185%_9t_^4M$~sHMHSGiVZ$`vibuW)VOtga- z!2^{ZHcbDL;%@I`ZESCE{da!;4?$J~%%8+A-r(yWbllKnXcC=iLcgxwLWDH6$k|9+ zv|7GBpu))$!WO{f{fzmY0n>RpF*O|xL3t9Ssf0-ZdrSFyvK3y?-9CPbB%-;s1BD1P zMyjryc=6)5^(5O~hZJeJhssv^Zgh$%0di*4r_h zni-rb!KEbR`A{d&w>*zTKidvf^Er7Khwhw`B%K=^(-w<-9pW$)+v+@fQP z;)cY}Pe|;yYDX+YKq#Q+tGmvWw^2*1iPE{bR>k!&cK&B*VyUonXu`_#?OO7|UDA(P zO7dZBHGE(ROVDOxcJTS&;NFTu$H2G8K)}WTf4S;U+G@_D;-(#O9cSNHncA5VUm ztc8iIZN)zW#g%W{Go|rNz8^1cce|DsA26%?Og9VbCsv&u8xy_TeK*s7+O__^@4(g< zi_6zi$>q&BgP**c1Yc|I(l#$zuuqAT7tWXLSM|t#-Q<0(zR1;o7ijD8^{{;MdwRJl zc<5xbt8LwM`ylLMTF*xYI(j(Vy;*j4e@vY+t;v3?Me1_l)Uo@PCup}Qgv`mrARxe) zN44&IX~(rwd8p{`_5Qg3jSnvOaJyBJ<}qHfN1*lgW8B>MOCBy7`pbAk`u8dJpGAUf zlqF|u3@qw-8J|=iGLX}`kJzYwwh6LPNE|$w8=K}TMkaa+l1UtRO2mxc@UXB>8AK#{ zc9Vb_kmWw#bb%^QN$EWYPZq5>@2#Z#wXk{3Bu+k)aEGRT;XJ$QtrEQ$tUXA~#Wmqv zw+jbyN@n143?>(bXQ9K+No@5=ZY4abh+?^Ufiu2`DL9^3=DlTh6A_8#j>s`{cK|tx zaVX~IVSX6Ok>A+NQ_pft&Xn!Fr=KsqV4u*x-2p<-b8rq~mV8|xeoPj&r@7?WFH`g6FE8$#k?2AAcUep1@Zs2iYq`~;9= zV4Vt-X1#|RZxoyx%a&%m_KN5tGOp2UAad$2-#{$DY{mt-($I}>D3h^yh5u~jOi9fK zR+3il&g{03m7E=!+Qc@I(I3fQ+FM5G0WJ607vzSgAWTWp+am(Y?BqXw_=_4Kq>K9M zf8$BMKTFB2!LB+LfBz}IHD^!GD|PoLBy;~@BVj4D!8baga37-TplH6rP;g}V|ED8&EiP%4$BFOFTPwm*o0myckn&3a*rwWgNG*KH`524E-MiG0*yh zF?x3g;D~zFDAyINPtYl z41P1~J>t)UC}i~qlbE_en9luc;z`-x3oJ&kR`zIYq3V?5)GMc%q-Fjv+o1w|Ao~gr zp9rk*-2+5Y_y6UC`hR@*K6n9|wiaEd7&y(^=DkM*ejwoO=xk|-V{7DH6(J9>n8_Q8 z+kKd-Lc3m>=WEX%q$_wqh@D$UWU%YZJRH=Nh9Y!fE2ua)mE=Y!>M}X>pm~-P3wSj? z1wa&@einGjuWCg&l>ujo1cd`AVM`K*32BErb!^CEQ+*Zp4P3lq#8?+?{AMfDIBs7v z(SRfbVl2Fd}%6AV~2z5af-+e;_}plZiO! zZ6E}>urihN+3%6$B!;*on9s43vpi3S0X*fq<6vbnBgv)YD_BIVdYS=Hsg~eMYD|S> z!{*1H0qhzaP-RN{f)vzKRjMZnssVuFzypA^gWl%XN)ieP+JJJQ9Mq)>j z3_5+*Cn<{LKAFVN;5IMXAu!Eq*r6EqI~K)9D`H%W$S->04w@&$PhPXKZ~4z4S9{2Y zE0YxyB>YOq+XUZL1K>GU%|P5uN>fhMFaczO&*Y$o@!Ofr$p;Abyx9q%W0nqC$fa`X zQALW)e!{9)Tgy3BGAx5*sFlD8E6cyck<{98ir{%?ByBxEDuU6@lV_n8CG${axP1Ex zNNI97P9m{4EzC}gb4qZW3Bh32&l^f0ac!1>OwCLtl|m|K8L2iiMo?19pah6>tnvl< z98f|ODW}lD)f6L?0x+#?|N5JqEY|_X2#`5}`HHp|>yyBS_66CAC=(5Q@bm@;t;lXZ zB44HP3uJjLJ7xO<_&*Vb%rC?8luTe!TLsMe^kY!*tC9~79%=BF{&BI_-Qu^@N6p`h zHH~I#V2DG5uaHXEnl2|oE1H}FA*nJ#mIK*9NOsnL=L!hP%|$X{iB~6xT}$W}+|r3g z0Q@?|;e3vrE$dU!6P+}D4MP_mS`Ae0EwJEy=l2XeU`+QPvBZIIAQVVF>6rK}` z=qP!BD-~Q#(TMOWvW2jl!YE-8YlF<*7jPN(5P?_Yy--M)JHjd*eBqo=BJu&LGL(T- zgBJ-!o^}4f35O2il|ml#Pr#}K+afDrMQcr)E~fRF{nQqK^AC$8u-EF`QcvgrnhC|0FC_yMqiQDl?gsL2VvH(?!i)UO4K+HHN|LA=tkf^2jZwCvnhV3iD}p2}!gZTQ!T^^Ez~E3?KrOle z%LS;FxpPoRl^RMUcx^cc-0Ky--!L1~1%4-d<`0;GvjV_(XtqLHmb4cBnYYgcPk9n! z3%dQaz$0u%K!)QO0}z3TH395$#4H$!;(aHPVoN7Na+vH>u2Elkw z6yCCNgH)g};h23k>SVY$wPwDcE{}W)sfT&w{5QVZ=K&{>+Ow)I zI!^7PqbO22#5!6Lr3=jT`-1qJk*A5)ZGQ+dLKO>#CVoKBa{+^h)tno-3VTD%Ox++U z@QaI z5@Tc0C=smS9$r{vJtd9AH>;a0@jGgFWEc(Fu?{jJ)-tqJ6aZu1-U4p+OER)J>vxiw zI#yCKp@mTZCEEjDKoH(FgNV-kGzhSc^}7*J43@Ma6->@-gaZK8T%{Ytez^Hh*G_k8 zJr`|7#jNs7d94Jru!!wJ8p(vaJ81MVF~$Lfv`0v0xR}iP=ar!2V$nf1;lPUzjRucX zV%tN_A-6ITEJpLD0*tzhWeu&!b23hh77@MhlAo3qZAMu+HbMsnWGxhAZDdPc?Erg+CR?zzcavIt&oB_8~c885^A0`Eh-w%4QoNXOMebZ?j#qO4r4*?~u zv0C6Zw;ESFh=+wmBiX^e#K$68m#2DoxdMNIV*tEWg6q7BB>_RCVuzUhc}1^U_qX*D zII5f#9l~ZcJQ&HHWJZz1lw6nIwsA{}GWN-kpW#|TOW=(_+3<8%TUufPIDNb^EPO(N z!S}4kUa3nNprT)GMYn^A^+-rbj zV179*-9)kv0d{i$aperNQ!!{fUubWTC}gj|&=EwTWHwwzeej2!410g}tAK6Lj{1a} zA5$6{H>d@;2eKM$Yn#EOr_*C@>E(}WdZbx`QBul6d0^kt}%1PCj&uhu(TUc6(CcI zHiq~1PDkzoox-WLmuCsklsXz-zyA4$eilKl$>#JwhCN$kT(1d^wsD>P0a%dpGmb~oTU1mD*F`*S;|vEDk**00xp zYAxJb#n1oL;<>g$AOF_Yy*Rgk_y4q+acqg-{;gGiGOzm7f#zvQ)5DgM$9PSs<#mqu zqoh(Zr?~zH0>=XrVF?1qL{@a+46H@folfrQx=rim-zr03jl0pZA6b6=qGo0LhJe~j zY`~z-ruM#<`=@g*a6D^Y+=SD0p~ioO>1x~`hTj>wLDEZ_Z5uz(|CL7A^3o(Y`zx)# z_6I4p_@QN@v*kxY{cTj8uRsH+w5s(isODl%+aTqrCAkY5oL%)gm`K`~*7Eu_-o-qP zk0*N}p7GENC2DdEB)UPaGqj-pF=o8+fq@uXtjSZ=>Hn1(q-#} z66$r;(5sIQ8~oB<*;wJB$IgxwC7YwpcKRKJG{zz7X7D0fM68t$dyp z2SHI!Yd6RJ1LZMULGJ>BD)VsGAk3pfj12{6Gf$mp?*}yea+d7ij+q)1K9zgnu=%pvPR*;t;3-ISFrA#fz_rgC|=| zu5lhM3)1!sPt|Z90m-)4C7Che;>iL(X~>LIfZ*8sWIWnUE$CAbw2tY&fh_X(q*ghB zL`QdY%c=i15d28B_@|*)*OL5i!)r$>xl?gLeTqPmNCY;BHUhoSH~pB&Yd3IPs2}F z&(EKYJh}Ak|9k^g2bO|MKkPKPrp|raeC(XU*T4Go=n~p|czh)!7OZL=xEpZue7S7W zdg~V8Z+m|$=@b-Po9N#?aQo4|{(eQ;|LoYTZMT%QVQ@yi`UYATd(o@p>LlvfWDs(_ zIoL6FyRzGObz#ZwT7CONEY#lf@wPjY*Q@Y|4JMXAm(+hQyZumnwA+qj-uR18G^KUy z`pNF;@^tQ_=;~!QT%F2@ z8y8sf2luC~LLWVPLfx)~YAJ zWu4FUEj+&r+=8kdG$Nv_Wyt&sfgor65?62bp^gKP{lMW1Oy!Q%GQRgC z`$4aTekXy|#i}?)d&6K@XQZX_oGj30KtQ=O{;PE&f+pFsgt#Svx$;19SmQwd`_O<| zD*e?)ieB(ao;*G6A4_k|u|<*ks-pgLo=>~BFa7vBFJ%EVe_n$Vh{Taqzn2UN1)Z;~ zDpUxYT_JwoLA#z{4aB@i*_^g2T8E>RVKA2&8*!D94dci&rIehuRILW-HvcXOY(2F*8z!{RM zk&!_kolaLUA0g0MpmCL4sr2LYVTKhoN!r2xZ_>?+i)^+*q@O_o0DrSepcQ%-BV!w& z^S{MEtIxj4t9Gl*h+!8G7(st@iCbK4l}m>^py{SH{R_u-4oSmt_8#{2|T+}5ICUxcbbQnEa zD~Z(?%5aXKyQU>tO@rsWVCnH|KN|+_+G_#lp+hq9#9AonZeB?n^K&pd;%a5Kdk4qz zUSxL-s>?a1-+1AmziK$?eC@%|EXFv)MSQzj72j=Tx%sMa&$I5?*b*0VZ9SAqA3Ya5 z2U8k%x9o0XSm+BND?yf%%rw2%SIdpSLabT{51O(M!eJ}pcJqLJaq6v#jm3I%KO}^) z4|}W~dR?)EGT|~HXElsvIqm*ZoB%!d=9b@?_C_nb>LR+ekN*gP6BbYjxrIhp(6$MP z-P78GTP*U){@KSBZMytMS8=EHOWdnXXu3+O!uLy1X zwV|#O|1h}_QD8lBt7p}cgbDQV-Vi}G@v%(9j(fCkwcVXE#mKi(zfH1(c|#W9^&ZWU zyv-D?juia31=rY4{-r%c8sWvR|3na9FpAxAJeMDKwn_C8XNiaKvPv0CrdkX=f4Sw zVm)2wUCstSp`IWP#buay3Ki_JR8!fddbYIc=DiGo7YXTviS*V>?!Ws8op^qC$3|@QEv0(D|eboo&!(_4@y#|z>LjyqpTP$qNyzH*a-5NtVc(@zB(sG;rQ{8YwuxS<}Kd{c@dl3#qwFY7GScksd{fjUe3Ze3@lP?P{g}$X@O{2JIk3yLo$R0CmYias=eT@$0Yia!FsWAiLG(97q5DAs9tX6Y@Sxi{2iA z5H}3*oq6OJ5;G+RLB&$~EjL|Ia1Wgm@>-9Z-K)*VAM^eUK&Sp3d4%WV)=GOULLv}o zrMr&Vd(DQ;(czZX8*=6`_|TaH|0;k0zwPr7y^a8j6do?1P3fpajvJ6YfdCH~9?H

MeC$+$lk7L4qBn^M%T%!(uyOaRF<-Q(v=w)-POAFYi`zgx&&ud#{o*Tse!?BVir*z|`#oo)9KAN^nV9Ors!UG#Q04!;T?X`s=GD7L_D3^y!z!0;r_{iYJz%PS?v)5AHRI?k9`RS!RXg zANk9I!PWKIxSDu_I+2XQKE$S7*J9wmi4u&=cMczs;80@C*HWSHWZ~R0=Q+l>xZC!8 z)dQ6$Yd+=a_8Cd}v5C1&H3Vfn%Cvn-Go@IsxjZP=!ZTBeev#|_g+)!xDR*jIW; zFnjSFC(~rvs2M>|YdGxQ@!;GcjpFubz=Q!eRNWM9pFzf4dvHBlaCe=wZ6$%^>#Z$Q z=z-v`%WO z`%oX_LK^yy71~hHL;N$6gjSrWL4y$%0di1KOnAy39D&_UozuDEmEdw}S@qBNYZ~P5 z>=@TQ^8ot#@Si~a=WU?#r*f@clDd$#Mxm&2D*SYV?Sh+h{5=3R zk~s~Z%pqyS0)POC*(kR_SGfzeseq{piEvnb6Y>)3@)Lqq2fFrdxQ)+vV-*kK5| zRFJB`acLu|KeK;9_;%%GPyK6~bFd4B+0V`W&_=kD)mt#d32f#k5l$@L{X0@|iG0)Fjf&JhX@mvkSFhAt<&eg~kQfBn9F+`3DrA-(vyg z^fCdm7SxOvpIJZerPOW@jA7sg4*~r0H?(3o$;UJ{mZZ!hv&ODdzSyqt9ZseRvg6;` zg$NR~Z4fkJ7N$8-dUh}ma)yWf%j8fFH0l+z#xWACuWZPyW7F=FeF}~#5MkGr0*?1m z6R60zUn0ud$Y-S_q7ZRyiMhY2Ve#l5O(b zv+yE7vY9%MDLipjYkeRX2_W;#wp~<>vl>?R)zzW$_%&Nya^r80Xvzqb+w~2A%fptx9iVORMp>tqwTH>CdFoLou;sEBmuFoXEUIs0Oeud2@U;ztq9#)n zVsP;DF+48sRe83;mPSlm7!?YOtS>n_PEe7^H?FNefEyMlBbav$oXJTh5LPw9@cPnp zBqcHptWWJ>D}KSssTlM_`7YI12d*bWGU(kDm*1f}ZwKvW(PkdD`%_+6CMKLjqQ02k7~%N)`?Thq4EyO!+@d5~YcwmkihA)|w~0odP}2t8$a*BOKV9 zfcE)mIWI^DbQlH}gp;~kmDzXttYP@SD(}U^4T!Tv(QyxsgV(~-If4RhJ*R3aQsWxU zWrSPi-8w4tSDLyQn#*b`GW>1^(9j{uBOV?LHb<#BXzprg!~L>i>KD;iT(fFugD1uO zV%(VwYlDSmfF4r5w?dj*_n(7f`s_8;#jpi!VmD-yeH|4WDc#;ZGILULr!w?E*Y1$+ zzl!`?4lDGE>JdU;R~_R;LGl^&wSf8Vf2A^5YaYk<({W0|pu8aoBaw}p{|gM*4Sj?0 zrov}coR-(xQtK(o3C}^8wWxVxQ;tWb+>e2*;V&k9iKR00YGLr9A7P}E82$X}{`zxm zK#4o9buwXjQK{ECFFzA_6MpsBGzQ^@_~`vP%#%lptdK(oXwK8x@T5TFlPx*%z4EAA zE+GVqXrf=pk8#L!qSI{IK)Jf>Cq>27!OM`ZNi#V1Gz|3gU{$42#$zPN$X!u??oL%s zUU=?S^bMBGg)fuqREi|9yGsefsF6N{Zr$lhmhV$~m?v9AM1H{27W2xtm5h0QyM|K# z7F>bCD}A8#h2;A)LE=pzuRTwMt|&9sBJu^dk3vJf2M^7%74HQ^&b6d&xz|#x6*kNX zmx#Z$N-#=F41RUrKu?hTpGIhdH=u$o!r(A6`cJ7uVY!UJvvjANn$c&)AY+)7RM9O) zOeRwF;wM>^n)gNsG7Bw{yjcWG?IXZ!MB;UW+%$f651i=5PS>h9u%d$VObd`?5~v7Q z@`N!>oNxlx`i$f%ic>+FocIB-OE!gbJa3>7+1SK#mtK0w+F>kzXG)@{f$>+}V0HtC z_QCwrjo;}4I^0z4v%lvi`Efu0A;1{a?K@!B$LzSbt8_l2vG-#zZt*#$xgd;*5{|6v zEAym*K=^|Jhb1xNrmSq8{N(7zY<3)3M|IbT;!%|1Mfl^cvFv4{8$njExbP&iO$XEe zH=DW`iy8)3|5Q}wPa8R-jDnV z%FaUZa@a+?Rry*MCvn&apWyNXb!b;ihSz%5(J(6-cCpgv6dPWl+DDd~84Nduw1yT#;kc zY36wMLpPIkf*_RdAl9_#CseV>hd9j^WJfxi-*S++FP=5$Pur(xOu>S(anIw$9p zPNS0W&@msm++AF7^^TH%v_z=v@C_Y6wQU>x(}cuRRnVeb5Bp=eYK3BbA!$-N9{EN) ztZl{br+4)!w-!nv^`&Dj(FM0uk2tvNAh~D!jLz>cyrfDOZ+k36%ti=s++Uw1?zACa z%=Xb-BmA*frJ;@B<4-Ckxo{kl&SK3)LU&}k&-p2)P>WX9?y5xuQtuNrFVBwiujtG$y5Q29zh($1&I{VZ`t-e2^#3HFQ%=R~~J)^FGq zPG9Cd)Vjxe&lxeajVDIFLNd0dhyMkEe7q>dKR_`40&5ayZot(qO@5uKTP!nV zO+c=j)5BS^sQE$JcDc^e`JZEBEnnk{Z|1`q55c3Y6N?LAkfjLJm0WtcSMn57qZx(6TMn>p1Q@}S>$1jA zO{)a9snJe(Ujr^$73)kP#KN-Cl#e|xHMiLj4-#;{8oV`9)w1D`I>z?K=H6#7?0&0< zQ=yXKHaV>DTex~H!j$|tnMJC95Ov5bnEvF#*OwR;k^BZdKA&|(e5|@We2-KI!!;LO zr7Cb$RIwZ|wteG5KSV63Xz6uu>A9X(xbLbPmsSeSc~gJY@vP+7AgJJTxwj?GIv;B7ri9rc95si1P!Xmk+ z9vS9*_mAyQM~o-)HC>zCmo%zC(xbTo+ZTtPyMebJP{uUs4fCw__~BWGh>K$K>iVf;I5W8ju|`MEpF>8Yoq(Lez8nE`!|$;rh# z{sSGe-N(x!$6J+m&duESu_imgbU_6HHqfn<-jlHtyK7^gsqJ-@YiF+qFP7dN6_a9T(`Au+O_r;>!l7Kz#qX}0C|8eZGnI9%=d5PY$Sc(dN!#P_ zaXrLyJ&jh8c`mtWRCV?^<)p+%)?(jt9YX}XpM*ZE^n8MW5U6w zpP0@({28CG&W2Pta2zXiwHxTZ#kNR?@!_8Z6^*MObnH1DvGSyl|2nl4VtIS!`F`Io z;aUk5JB0Gd$as{)Qt4u4T7Q$3nUjV{)n<4s`K+PiIkeU8JOqM%8(0r}tRRK&rKQKU zANV$CO>xbem(lL)OQET6)dL&cCKKF>u2RmNJV6xO9k0P#+mUR5&|!1I-b#O~E@)P@ zI;~`Pq9B%BT2xlyQqoOS$i2iVjzKfglSK~6l$nF8UcMmU#zB2YSR-E0L3cIe^Bzp* zUW=dNA!{G{t@8%l8IoP4c=reui88uC@+Pw|m1o`88;(>|-C)Q2S;D&U3f0^Z`{!U> zV0V>+|5uv@Njw`Q!tLJ#TN?HO4mwcLTLQ&_zgNQ`Rrpcvy+7C1@0a(?DF#B8R-0#* zRY;xemi!rGc;l8DOW3X~x~o8G(8T0u(iCae4aZxqO}KkvLVEDPX61-}EAi;vWAN_a zMtR1_W9{Afo*|QCFJ3OFdd}?}?4n$1&rw`qt;&PxeY^oAYIlY0fVvMF8gQxADZF%G zT527Ibt?0Fi<1Lic^3;}N4`BK9Z@2E720oflCu_594sBZUHn3j+sNwE{pHax$N4b2 z0I|lXFf*KZGmjZ{9{e+Ycjh-Yq@W*Vb9?#whLqzjsSO8bAKw+?;t?XIT8ce+WRP~P zVGU;rlg(s)D$Sv~k_4rwqy=ri2~)KfLXMq}HQ%gH9o5uCsm4|=X!eBgg_A$z%)a zxj!`KyvNQjYMibW>pYS*ew+i(mNi_-(FwEtwRbNE2$(#LlGch`ZkYvcm@AJx_W3bI zV9jUOxN33>SS+|ff{f3&1iMHEjmr)ub6dB zkLo}E5G1bdRZ3rFzE0C!tlWx)x`tIO-7m5w4 zak??}{jI^Fms6c7Y}3|p6DvBMQ{NDP#H{$$wK(KUx*eB`deS?b9No9i#})ij&rr}C#x64z|!(88|i6X zP&`!RiX?fh&)B0?bl(D~pZok5JL#nmo&>3z-Czg2Ki$;OJ$&-O#<;dI>MT1^0hUU* zs6?c$O@QJ|PUD$7GHIy80T;1o|DNSvf9Je)IE(8qzS54lq=IMxYy)koHdYf|-@txgsDU(+Y zm7I&y<%7Knf%^~lvN4Xxqvv0*Ltyi;S%prnjU8bly*cSMd}QfkTdJO&sk6mN0qUxA z&rWn&@Vt?nNBJj=JI~6u&ZcO00fZofTJ689JNl@|rx+IAy36RG~p@YB2=U z-u(9T=t?;|IX+K1arJ`LL9m{Vqqh||O{xOSfjSw4(xti8WOpn&2uDV}&&_CL3UJ1W zq1X;+jD~bP>6J{C0YMys{lZT1z$o%BP~z=2oCgy8aGLt2BZ)a={WYdTs*#>hoZ8aD zdXmF850D0^!)IEW*h&m0JI*4!(i9b%xEYKT>?w9YjX}NxLieQwRBl>-*&#mloE-op z8;{mT)1}fyi62JB(sU(T02b$ii?8kdW8I$L5^L|9!sn{1yAsbt>!Sm_IEgzoutl%?zTc&F;T728J!PAGAf75d`Ec4fg|1e)U>sn~01 zkex3nIzG4F7&6bB_J9-HneMB~`D%%u6b>Tboht!J@vPJ7fWsimsEI_y@`5auu?#5dun4}C9uFGE@$ ze2VYIW1=^ub8RjeO44C>K2+IIrdBmi3<)Ec`_dt?(r8_VJ132|sEI!A4;v;-yaSWN zS-eB_jK=3|qV4|pIm#l**C4YawX;KBYh8iP8Gh%XrF@%#d3^lWJ;n6qPo;;Z82=!1 z+P6$EdaN*CtW;9$j^Z8Q9)c99_8iQDeznsBRmW$f-o~<{W=|Qe?7k^q(wOM0@-0>V(>tvw<>flD z%ff`6e_`T92zE(YLk4$%n@L{ou4Dig)Kq3gey=VMpXX)er+1CY;S0A+u%8}}Va->NA=184g zJV80qe==cet5$2wpL{PgVSi9k%Y-YS=)d zZt|-$n;g$>_t-l#n(m#P^#saKKD6>p7M0sn%VpgV4-HIEP4dI5BGgG7_@v|tVGy&% zlMOE=rwm8*J!a>9>SU7MsZ5^l-&|3^YhYir3@qy4yvj-be*alYH0h7qLnPMdC8>3l z$Q11=ei5lz{_v~48JMN0cH$(HZ+L_`->&8 z3c-*S7!h7d0#%2Va1BS@pg`g8E=(}LZGO3e{_mtH&a;GC9cYiG3jV+QEdS=oEr7Pbf4~1plb>tL$FGXvbl=cP zbhpN#^G(!bR&y>Fg`T%mt~ZqpMGDlH;(AwQjMzDgo}Ju7dfXDg@@Yv93;z+5?R%ypKUNzrwj= z4}44?lR)=xm(@CR>ouB}f50yoPB)kTxMg8>wf1s-yL_X=mv4=l5DQH#QZ`&~7NoU% z6oUbyEwCZs7D`@y^_lvY5-P%Q<)KiQ*E_}!ulK#Z?Z)JAp*(&sm+MO^h;5|o5Z>*v z3&D@mEXCX1Zq$u3BB>l51~+&S*l$&3C=ctX47jDw>WAx?(*U{N)8rRSJrpt) z<$1tb><+v`yz}CAzr~~-r7V|uQi$2M@%LS1W_DNqTRnf=n#AvPlutjhp zOMk%_{d2|g8M?tcMdP(Y(zlO-n8qdkJ93G{H^d{Qj7Ym_oE=sU8rXuGN3#pY69+Tn z9?`f8DQehpIeNItwkzITY65(YL6*5huKFlB86t&H1IISCPsa(&ab94FvtrJ=a&#wu zjE}?y>n`dozly_)4^i&PkGIFIZSUHJ?9P|5$&(Vk6cC6;88=O(D#PhlC)gl4_Ku7? zY!-{<)K*BYB$q4U zpdD4Y^(FAen!N2fz2b@?sPyW!y5*>K^ixycL6eIW9a2q%RHz!CmIRc#pY{C- zx%QF4!`e6swn;z%es!sM;r?s1&hJuDSqZY8N=&|Jpl7@y25PvnLrjj0-9I^_Fvxa z@*}L+gNqUg#ASwvpKyRYD=lqGsNsw$67v@bI0R1G`Pe}X!)jmXy*IOuW#X`WE4P%{ z+nH5h*u{drl&U6@m>Q(Ib%$lBF6Gs-NdWUQD(U8S+@<1R@l6+2$In`o*iR{o$(+`X z^Os9b@WS3cF86k8(tRe0P_Tm5ZpKM#7H^v+`vzCb9VR7h*KHivbzhXT`nMr~2Gecj zm&?Z8gqIKzf|-gbuxM8*mGnJN2cKN*EC+#A@5?M!s6mTS9tL}t1hOBs6#gbjY^X2$%Q_Sqc`od1TSB zqNe97PsGqm)*=Uv$i^aK(ZW(*^&`rlGg+JtM-GbIjRsSO3_~Pc#YK%(F?3M{k;;1H z7Omh47AWfMu5RPcpZ(Na98Nfs<%JX?LcT?^M)WBq^*&kOAj{;6d~&7e&aKS*?@O9) zWMw!7$Xg}Q`*x@xk4^1Ol$`7xoS97Qoq&IDZE}(({=RV+a=|aY=WR?Su2e;y3b+%a zAdeDWqxa6z`6<+ZWVuO1WjUvD61nST){~>x{`E{P>ow?R_6U9-R|L+&E@WOlbYp4E zB@T@^9jl51kG2UW9_vnigkgWMuaXVxYr};-+Zh=x>CntCqj0ItsheaPK2)G1o9&d7`2$u@Y-s z{ltgcaU{N@vkw;^6#OKOC_L0Axo>iR+ok`#gXEX34AJb4Uk-N4I1Nqrb0YQ|RX#7` z6W0|ijU78*}%|*%MdP%r0YD4bBtEPS{dbM}C zJ+dCPbH}UNnk$eJv7Ww|nbtoDQk1P<9PMX?8q?8+?CZhXAyVsUOl3taKC+kzq$Flz zC$_Y9PWwR{LR1RMn@jK*!>ktIG$BbTcRxOcApr`uOq>%`FVwOSv=PI|6=HoLrJpez zO@_e*7wIsMv3HDR_?heAb~_H~{4NO2tYvz zY6d7$|NI36{(l2eSkBNuHvs*p2Z(kChK9x-VC*9u{D7_z{X_(W#(BVOi2Hm5baT*8 z4nUZ*5190T=3qTX0NoVyCASDuP6Ll4fSLkZfQzmfed#DdvjcGTAgF3PtLvVKq7Tn!4xCeIzcL@;O-Q6L$yAw3H1`V#k-JNf8-_LW-cita8 zRa3S0+Pha(_0`jRs+DA+ps@e|06h2*254d~Pv}4Z0BA4(04BIaN8H}d1!U)9pyuHK za@J#Vx3#HCnzHL-K^{E!jG$jELpWiP#|-X&BjPTsgM$y3rJSLPfC_BMU4dLKj%MpE z`eOb3?5$80MU%N~W*uhH$?!W4O%qnZ!*=z%;d#UUOAIKjaCYV!9Lx%2{m6qA#|msu zR0c6lr3~FFl7D%CHpM*z5lDvAI{ko?Ng~dQ4wuXhHc%(OQ+87&hX93(L{N-QgA1fc z__T^2ZWs?j(=+O)Pebk{pvL?&uzX0G!4`)utAhkK{mHgKE%Q4 z7|22b07&4{zzJmI%*^!nvnruip`Qg=^wY91UcFgF2?a>-+b(NLLmAmTIG%inX!TZ3ubIGbh2mc&C(H#9tk#-5{}KG5IJ+t z>{X6ZrflR#tQIzK81`HIL!N81pnMub4A!XPn57uq)ZAg%*PfW0^6GP!rxCxspt9yk zk>z&k(pT0QP8&NN`@{HCqwi$q+ApKDrgFsL{vLDZSs@yG`SeQD`+8p%J6;4!a)8tM zdCgfC=&EH3+hf|@u0$((2>Vk}vSKaoZA2Nt0hDf92qrIVGatF9y#W7L5eZkFivzF{ zZD2(Rz@@tl^S`3F**jSq+uK|JouB^|$f}>^gT(nOV%@#=R}2}tcxSp`-IW`tpvGo7 z8)=Ic%h!8!1bJfke7M}7QNPpSI*uo%rX!(fjsi54u&Lp1Xns$&APTwJ$4-%jHMO*( zkzhvwYs*L%&VO4^vhTJ7DMH;y9^=Ii8xmr^fplEBKhkJe;Lo1+aTs0XDoR`KX1O}rKBD};`Xo6U zkZ9up092&_0J!+8&tGMnEkGa_XXbwj*1r-(XX`i}!)YjN+q0vKPqXJsZFh(7%gvovL(ZFqtIwUws?fSE>0N9`%f9bv&gA>+neh5co$$-u zjYkWAPBwwN*Ei3%NB5Vf*@1!C(5VjQl@ii>1Gm_c4X;(wE}PhrcM>5z0dK*RX17;T zZ;#etsed8sw^&f}NZ|Bczq>6#LQ!y(B8Xci)p*v@1RQ}fu`=6g( zyWdYAQ`Zg)eqHD4Q~C0rhPrz5bgX!<`groJpS`D@o(X#kpNzel zY+R+D=Gsp+oXicpu3cUq4*iNPBAo9UpPCZ#^5i?~ewi9$*4_9c3*~K|cKCxkO4M*^YZI#$>qH5M5%Koje%Tg~C!a z8G3$DA&*}(j+~~Q^CQrF3M6oygpl0W08ICy+IfV*({p1Ak9Tu~i8@+H!1KUe?BU5q z>rv}lg;X6&)9AsvIta^6^2?q&5{o6k|Oq zbQjccfjZgP4Xr%xP;>Nd&2rfCXI{xcP9OhzSusDxT)%I?2741()^K0BiT{=7CM> zNjlxwutcIgr=fcPkPuf-5ut>SRUuu@b_0PWczg{uO=Xw=HKt43ogQS?Gk0}DEYNW@ zApi>K8j~E|RTy+ehB zwfz6*fiBTn?gTs%S~Y&Z9%lZL>Ax;uPVq<5G{{JAOBQ<$o|i=os?GFjv=)yGVd{$3 zOM+Ch@k->1>$VVBj$*lcN>Bd|#B$Q*=(wM9cX^<>#*g$8x#@>B3XoH@n;v8V*D;uU z3#<*=MzI`gLf4lI-6Oafe`Q|#yc(OId`D81g|GXLgxlDia6b=^iJ+1!eT>DF;;FI$ zDhv)XaT!^kMD&L^D1pQUF%o&ptZ=jz?zRw07%g2?K$IzJQTlNmzliw8#_#?WHSILO z;I{lTHgk(Yc8(cp+qv?1y6v0nXoyh`LN4-BS~W@t6&+idID(M>aIU4I=52DUi^jqB z;sB`QcVq+R1avV9`#NDt@nGhGc&!TOoL~2byQLFAIfCup`a$cUk)MurX!hMJt&3VW?-Q?$lJdOs1GJbgoNVO;qI3U#G z2fxis7>ng|Y7r+NaESfHb z20s%w^DiYC=W+^k8H+sxy;Md>f&cM~K4oDz&k++lo8u&KfOnXSdO$YrbtaXI2B_DH zAR4^41FsTkBeV0xvjJxKIL!}ctRV{5+% z<@%3MN%(Cn=2ZPeyPh1xuyV!cCUS9nCYS*-6Jh9u3kykuRn4YIaf_@I07R>0H)zn2 z8D?Q!Dh!IQ!8^4`TZXA@fLa;@L1J}+wIAXq-Q^ES_)E0rg#|>Wx*X&%|I)Q<|D}^g zFASLj)0r9nm#!I17oLe6C#8(T;qXbX6`EGV+FCje(OJ@D2F3wJDc`3jByW5ej+c^r zmux?uj@*#Vo75y=E;{3bn$?#uvZnZA4!b6Rj$dbtC9INCWG5xyCncKw z1kiWJ+YLv#h{O83OmP20^*fG0WiElHi!fl0BwfYL$`(w;8E+1NxsBrsV5?fC0v2o{ z5wz|lrGldZfTOCq)8DcF)rc(;%v}%tam`55=|W5`UWGkPn^(7x+)BZtcL3t zJZ+g|KPwgYdIxZ9cjlGMavXyvL~0ebYstWbHCD0FtJy+4X_)rMP@k}07W^V3-xri* z+pAgt9!+Rq|E_3!0iA=x5Tl$99bn_6-309!S5p`zj0UX&78GX=_J9R^i7-x!=qT7K z2$?VGA=)$E%`n3iyt3{ajVc^#1r?~8Z$HGb!Jn0A;&){cF+MNBIqB)u1Rd_!ks07-Ay+&##vRIE9 zvTs-7LvwOY%0$UHA}ejra?T~3S%TNSd$!uZ zQ+brBw^`5@Te;*yDr^*DDa7zG%`8Tts}XqBhrsd&+`JqS<>~edAqA*G%Ld%Izar-4 zci?oRQD!77dr5D=vC!wilGW&l%f@|?{Huu3G5idB%3m)zjPNSxj0h^BzA)3%BN0=L zgrek%*tu6iVagDk01v%soq$Fv3s|LT5%te;IZ#{H$vp{l5hmd(;IGWj7adDJGs|Ae0wu+c`)eUP1rD`Yx$Ry}u4M2KV z?Gy@Kz)o2g3rl+Y0}5xMV|of%G?dF+_7ktHUr7GS!xGZY(&0(H5Wjom5j6K)oD`FG zz?|w?DZeXj3gA!j7TxoV`&W9cX>+&|*|nb`1S%U{)Ijf%nD*-hE(82n$(R5koL1^1 zAm?1%pfA{T<*1b3{51Qp7L0&*A=f3y$}tWp{s z(#R8R&RD?J5q1-F+5F5tw4GJ4lCVL`3;+*TRqcQq4)4E&4>Wkiz&vZ- zo4R2xB~@s$8Xxc!!pU&qp`t{@KxUv6xlye`HpFnQ0f#}pfl&xTBSxXa`y$0s83hoP zXkzn|W^4mbycF=1*n8n8Pyx5IG_t`eN~)_rsWl!~#6!esWVTTQuh;(CNl6Lym5d%j zHwa*}q%UiLS5wti3faW%SB^r%-*|01B>}Ix^2mm4oHgJjL(u<8G-Ln70@!9`yo)c4 zjU9fVsvI2#{*~p?6s!}#F|-K5(dkL)LqDY`xu|)hDk?(78wC}oq1p;XtBH%X?++(O z=S|G=lO*Aq2z-5X0*m|cb_Zf#z_7hj0S>wCX%`3((VtjE&D#<^bMJvcOH=ST@FR!G zPRfDWoo6`(5RhC)!|7i69Y)X+vlL<{Vwn4NW@HhI^o!?R`Z18OtZfxQg>>qu$RNdO znAAgAxW}-Nu$*`Cf{I;w)at7{n8EBnW3=g`K9z1pH~Gy)+g0}PxV903PtA|G+4O`7 z<~&`pUDUF7$I~#2Zx*bEd;o!=I zm?iklwFGLoLUch{wy4e#t8*6H#YzKC?vLk)ZAR^ES=Idiv@1~+@e{K!Icg)&M+@d} z%2)cC_>VLe$&a^lCAZ{2qDE6EMmLj~ynb@;r`-f9vq@U?v#iDkq&`BTW>H1Rk9F4Z zq;~S8IuMD@qo-}jMRjaZH_73)QHdgrJG}i|yAabXmQ_vYg&x$Bj!#IfVbfDez#?TK z=T^(xl`N4<^{0Y^l^gzqy;<~K&fGo04w42d1@VGjshC}0%6V&(HO-3I^ruDP3285xQ(FqQA4Wv3>f8scRC7*>WAVR~RK6^{L zkR(kBk5F`=LL__>6MDu1;Vi*F&Q)K z_SEx2j#*r>0W_L>h7%Pc*>noVH5jJMzy|c%Agdk6)H1vF%suQW@O+mc#BF` z#wkhe6%;~<=%y~}X-V9af2-OPlJ`pgRvSho-9G$VMIM&CpF;iz3mTAgi$%7-gaO-i z^-10<{M(G%BdJ03x5~+EH-#KsQ?e~P{h85FZ@yG|MWCT@}+x8fmd@*}@aiR-k|%3&Xjp#YiB z>vtGhFeX9sSIjKIfI)yoE!P1iJOZRY)syAhuD#Qmv`nsFCMuD@Omrm;^lEx695{#{ zv(?d#0>D(o2bD*%xX97L-$l&l`P% zFJ-9Tam1Y06n}f1a?KX{)xo1+Hal+lkB!bUe&jOPR%Ur5>~G1t>=E*}q%Fn| ziY%GxSaYlwv{UqL@$KvoUOy*oL7RQu8oP7v^nG!;yXgi$*V@1HSr*{-=o4D^@%)`l z{QlJL>G{?w9CIH#bo#n8`|W=J^5x`gDt2vc;_5mdAqu^XGiC&(fo@Sf6lAJ)0*$w$=huWH?A*KN$)*WoWEC| za_bgt{T8jU0P*0w(`z7W(mCnabLi=gz2bWm4Pne68sBqK+mn&^ir(AB>dOjxldnJX z{#xc#2`U=eeTf~caPE)JI#u7$+%rXD(sq6~pLoD|s0eJ2JG?u9Mw|>VjqFe4cld!8 zU=b>U&|?Fy25=G2gEb^Uu!8q@-Ex_W;FtYT?mpHO?CdvTQZ^YtqTmw_=i@G@ zWAT@2>+I@Rthm_?^{Q_|?pEa{o+KFlEVqJ+e_a2>zG)Z%jhIZg+F3B;j!5bY)!OL=s0oz}>qq{Q9sn$HAYF#M7z2vQfgYeQV?`OjrL4_*= z@X~H1lvHbyQF)>tC@nyez-U?9s7>wT5FOizndlFVh{i##|Inn4{Ggy(14YHTEVA~s z6OvP{y?L&{#z1K6_QiQE_HB+bAWOHt2UJ3cQ{*6tv#rC6i-8|}TK2>x?f2EDnZW+Z zLcz5RCHXCZm*7l^Jko{<%c+H@1~Qr^8Pok)>q*#=Vj&FQuTUL}cjrtA`=dUXg=+sT z6Au=7#Dg69>}y|KmInBEwx_^jX{AC6w6144c^pK3?m`dD(f0Lz^Aq)y$Gc&yw^$SL zt?DN9>Txh7H`B~5Xp7R<@in>j6CD%7n=>b!Aih~kVGUf@@g+a^6FvU74e4g;6h2tHb-PCfV;PW-8vaIKpQQo&qf-Gd$(iJb+szH15peRA7#S*Lca^k+ zgvEk2^)gL*^7Zm3gt*h$6e%hghh1fIaCsa0TOa@H;}OtzdjELJ1_jLMt8LYjr}q); zQ22<$5ID&UM+N%<;i)Lg3y@!^XVaX2f3FhB?x(cijWWOxM6xNX+zX(v?A~RBQ(``g z^eruMv+uGKK4oeNRlJW?G)L=*1wRolAkFpce!qD<&y9Vqc~vYa_E{s1eP;H3Kfku~ zY~dGpKQ9a;y?@@>c;|I>T77$}?N}#?Q8XvL+aQUZ3NPv{=@-3y88{}*db=KayU@u6 zdEWc}-+V+Mo)t9^oK2(w=WEdZHy`oeOii@%7&wddq4OGhVcn9%ic*`i?5C`nn4g5@ z6wNxv7h?W;;+Z$WV>LR5oksSZwO^Cp+W5F4yz^aW4u}$@k&#_3gXW%zgt%fCxqGtq zwH-hldk$i7728%zgq{x^dp#EV9Yj{=E0S1k^@AZD;g-s?vLKs&LFJBEUF&!x4az4e zNlPMg<^H0OhW@^{p?@32y};#Mc}Ds(OHYll1<|_7!oE}94?DKceT3T2rG9j0 zFM)9+lBlZRi-&{*PM22{%0u-S8Hwwx3v(AK?`Z(u~-`^9{}jP0T5_{0WdfFeTm+Y$rvl%0Cr&FkjRXA~-I5t6o$03O46IwqcgLQ*K^X)R%`^8(sE9XN4rtAao*h_i7 zy2C#^^;AYjCuz2?0|PFAHSM@$TJ)n zgLg`n_VS33zb@7zO5b*6sG}q>OeIX>Uq{;FQMo8(0(-bSL{vq3C{w@f7U^AOcdJZ2 zl3L=kLAf_)$O^jJr8|(fnWEPQB92>dk8S5&*h8fdpYQli1n>u<*&W7m``~7oR4sB9 z10D0t`97Q{zgnFe$6hea)d<6_QJj8lM>`G2nm`MedxQADQ$ltLhj;^=Fy*%YpDE#N zVdMldRdsQ)v@>`9n-eV3({bM6s`nA@4&YQ=f{UeA!5vFBm0hf3PpN9!O&5HYl8&25 zYq>Cvy*h5`fQWMmf=zZNQAw6C2ox#!<<=woe*GDX&z@o|km~J^>b>)RBIUMTJ=*rZ zfsmjr4z5OSR_Dde4^o=Chd;B*ySZKe@*ELI&mMo@5n}c5kx}V^16>)LxM*M4HeX) zaa5wh_sg098w`1@;8V-1SlKTm>w^L7~g)Hc7wwF*I^F9x{j!GitP=6{5d%->8tT8I;RPSf|V zF%(W3T4&=h_2MuDvBz!%FoshWW(19#CFeWxb57Wgq!2EjeyJtgDj`B_zN>>Ddfpi8 z)CBeFe26eVdugpLvG$D*gLH&8eGWf@@myqg;8tpl=JnqVPwuWuJ%h;LZ0M@0G~~u zVMkZ$bHA-nOzi$4+!Uw$+9O4Te61(-j|t^(QZjs14DrA02KdXK9`XBeVs|K7f6v+| zN3ITf#3#G3X)fG+!Z??MMlSd=MQmbkNVwJYfI*`ptQ#cc*8C&i)=!4NVWV3GRtAkC z%G#B%+3am^KkA}mMxfl@8p@bNncy=Y$z%l9FAglBk^x;yoR6PbV2{Nf@?jSHsUKMn zI$SSG+<8`|x*jb$W>^#wf8;F*1yQ^&C|N;twv<#XCY-@z%hcjZ{$gPOpkYr{TW z*gTaeJ#Lsnq4oyJ&#~N1hTTKpIGG~LPRn%A!-B`*84Jl1)F5e(0gCJYimsESFK+~4 z;y$yyAiq1f&vpB3@kg>qN0qN8KE)&F{pL?*A2FhH55o`$kW%=j!a2#tb4t`AScJx! zhl$Dq&1hAMg=3s`%gQYAQ?zFCmu-$(K#P&4cI#@9IP4Z^5G8=`T=(=``t@^uE~#Xt z7liq~GXB$t$lrR$IZ05K-o3JA!%S?y2Oz(qFM*O;^(pJAX3kr{SDehK23|--%q*{c zWdXR&W1{Su?O`9Zg{BK5G0%N{taEADGb@atfcw}d6e-OZaf5mz93s?!fT+-sqH%#Y>^3!RZ_{MzZN)+N@^$q9?n2Qfc zn(dfcLsIhg_t~&2qMGWbBJ^Q6v1Vl0KgGQuklHkZKCdF+AUqk78@BZ5!`uOF$daK; z$K5`uqOFV;nbRtn$GyeBI3~T;%OfNYBVJ=pvO#Lt-$KF~?uR;Ell(&CRQWC$m}Zsv zQd<#jq$)4hPqs!gtiSYGz+rEuR1)HZ( zk`u(QpCowE1b?o+E=c*=^)O)?u8A6aB-g6u%E-TAJ;Aj9*?(ZERab!c4E>R%zCc;Q zA)t_xq&E<-KRtX{VGW9U{q$RiZ+BxC9r?{v@?Pfbu^u@RaFcOuYe__CRyhdiOL%S4 z$0SowOdJ0R76N)A@{JL(gENxH3Nb~+whB6VqV1kCj@a^vI9=Q%{F`}jAtiPvdi{Jr zbYT*m3%*Gb)K%gS7=E9Je46PcB2-P7U*Gu6`uHw@JKb=G{_DI%h)by$MRK1XQrKA& zG7iidI*<9IJ43g*m?tO?e`ggSNzu1L(S=x;W=H7R!QIOl?)NQG!8p*Vm(LhSNwK}K zqq2=nyG`~gI3_`bTv-Y_-T^1jQSrsXN?WOBfKn02__m}xV*E_;oC*E~@kBw|^xh6< z>4qRGlTkDkn53%>8v&<|5;a9N2FLZPzQgvCpv*i#QT;7@N>~;%fnF*l6Rs$Za`_yM zG@j=&!q#=-N+{>&4dKAIyDJC|7p!DQvOpX2h=(Z z1xtzMT>XD#ClZOM8ex4CYdipoPJ`-_yV;ALak9$?ebBxG8)_l-WXJ|R8)Nd?Rp;zr zzgo1KhwS{6*J6@i*cp*?Orz;fRN0fn$YyWyM_A>mBmZogi9--M-`!^L*`*T=0TR92MiO zN+TunSKk9sz>v=GyU|>oq`F4L!OAq6+1nvOE6P30JT@f@2cmu1y%OfUA13kAq>+n; zYcZ=$6P`}~9;cN#35;P59E~9Ryp-%`lsyJ40}J9woz04@TYa_=!hwoA$xs8*EOAWy zy~DuO&@|2fe_M~K>hk2626Gva=DDx!<@(Ewou8UYtIN}UuKO`Cp~}MUAM!UwX*ua` ztLa01GNbAiFj!qPtLXzLC48dXmCFA;_UWV<>;CBc3IzG(Ol#ru~wx}3b(6-ID{639DM7}P`q@P)Xg&4 zEGqf~k-msezO{JFBlQYKJvFc#jZb<{Q;h8U6H)wi0iQi@n2tCL&I0N=kC#Gyo;xqy zk`>=MRQA(N?%{N8F;m)+&K$Nl}DVz5U$*@@EaO2CpCmTcp8ZRLq~icoDgD z|C2PQ?CQ}c#QqHZfVB)WcQ2dBBO&WIu(ei}iDvno9kr@9DuuC*Wa6GN27G2-Kag$zr z&fI1ydt**uq=WNSU1#|U3G0RZp^LD?1-#r;?X$k;B>3<=oe^OT>h$ih=wr9v*;P27 z(AoQZGH&)dq&p{$iVz8}?Jf17gF-sPLco#w^;KEfI`PrbhsEqLy!PX51Dbnb(l_EC zw+*Gw6J1EMLPZ5f8LisbzQ5VkC0Nz4xcjCesxIUY*&y}F6W{W-Kd_Mmg^R~n?Fw84 zPA|dh{#e34IA~6%@xL263&_eu`{uBNaigMJ8zZ&ffEefU1AS;mLWa+J#?de{5`Lk= z=olAbG9a5YjVmvD(tn@>lekQ|o*kuA<_hpid~5mZfd)V;)Vk0@@459FlV$V7DZs>mZd!>@V%#Ap{8( zE}r%{$k+`~koW`SQny;r&t`uxT*G{ESEON$5Mz(ZC%N$)6HcPdMT56xx=sbCr_c+R zS8uCC1(OJTHv*0p>*ue2i8gI`Wc)12-XbXByIV2T(2l=EzEgW66a456gr=WMlKWZg zjQVH6(o*AlK)G%^_bb*!qv!n5c3;8Qo zB}36^g-1MPHize60(q2+$*?855+~pI(`wCdMW$ow^HM=>diIx3W$+Hsgk^ln+`SFy zuI2YG#F64(2mn}uh{t7D?aiuxTq{&TE8>b}fU&J>7seq{Aw|n?dlw#SDFuIAbz)LV zAi1vVF591!92;FqqcHxIk&QbM31E9JO*WMnS2xe@m(@ltioeSI{A6V2tCq@Dhu0^% zdc>5?=l&80WrG#cA9PRK!#Yp`K`=r{|43N>2dGJ1|M)`LcjW3{HV7vamC|Yz$knay zXZ~5Qry*)v> zN5m`kNzLK?lMD$r-8^21TLPR^bn&;|w^xT5RNmyn^=GOs9$D_=!t?s^?`#eJo1SH- zZfM8H9*#!+ezYeBjNK+j=Wm4f3@mo<&kLNdm7dwxv){)W?S#^V6a?A9w^DkK#!eir z4ZWteSCy_EJ?^9gO>!HF0mJ8R8`ewbUFIw2T_;w|iXDv?g>KcEu5JqZa)sx=JFg>L z-KWh|)-<0oo5aH}Rl`2p9)^zVA)o4fX%U^{mYYUb=ZH~Gh<{)!@;=ozL?ZY}eEeO2 z*C}y%AWx;KYj;XFa_$XwzL!)o;k518`S&b8Z*kWQQ#4JBI!!I@P!c*;Hwo#N2V^nB zEXmkr6tS|t!KWO)P8Y|xy$?UJop}Y)$uCcaR5%5M^Y*6J(6{P_4{VhQY{671V@aGKiSCO1 z!dKItXn@pibI#Gic%v?4R=F~*WOt+>kyuh#TJBQZMN+`C$R&wIH_@F*1GQXYSa>(l~kkYM&Fv(rkJ~*}G8qyh>L#1fv03C%UGXL{+MnN*~nzttc zg}A!Gw&#5v3JlZKf8~gOi100LnswliIN2}Ms=4{juZPN)QSgMJ; zePl+tcgJPpjC?J2@7ew2+0KLZgq6$Iv;93?Cfi=JOi1;V$2rhNxx}8csN7nW7u)l2 z9YoUR3f~TM7ckWCQlnjP;lRAuG79fh>hl^S2f6$v5x{|Zb4W3wMDZg0r@=|iT0(KK zWb|f1j3}pp&8ti7!7$r-KQbS=+NdBSlyoDP1$_>ZoUkh+^(#uikJ8!Qyg!CC<1Wed zdnfPT6=GtM!ls&wJa}bLcC6tIe-$K}$^2BBMRz3&NK#1&*m@QD*j4~Nb~@H{y*71F zT^*qsT`{lGYraY5B>QXefHdWJ-s@?rjB#z$f`U-`o+}*W7T)+Mm6zcGX)|gAJhj5J zxsiC&=A>3}0}PL#3UVe=&a3DA_%iD`c6wgzbfsA9p7`a*Dd=SBiz^i-ah9*v&P6{F zvxiZ_YN5*wi{Ld&#i9Ej0c=rt^O;rd>YM^rjEeU~8DYbN{nJ8mv&XAf*c{Zx-bEgd zRJg@GOSkz*E{spEs8IbkUoc?@c_kzVblHpAyBX^a7PTuWg1I687}W<9t{Pdv?pzAX z1RCTy-WEW-u}f&5$R_7l>8a6?b1w3u3*#0uWs~ql`MkB?vLEYuLSfr1iOLuaf(l33 zodsb`UO1-b2Ly_8a9<-*Zm4>-A|VmOw2WidNylK`pYYr7vSUS~t~8dCKS<9zgil95 z7$L$`uUd<%X1H!LXrSt1*ET+=|2QLxU)imYzRY-;W;kEIkqCATDPO!{^59y?<@{L` zuPkpL+ZmoUyj zw~Knh8-g4|D*0i#z^kfNCKHWC*`{K40FB=nye9Prh#~iVLs$)`BCunyh}!Un&;H_$M;{ix2WH?-gmkMOrL27K1-P_h86ZQ`{M^eT$a)1)I@T7=M-r2!l{yde!R4|TP}F_?p8X+8Gi6I@G=B32cKEsk(!q zX?Ps(I+#R|ERJMpSHLRA6q9*(0o<=2g>f-L^p>BQ0{ zIaQRmtlCHiMm^47_O-%oTnCoI-sfPO+c}Dlr(zHXE)zDFFlx zebbTnY|6fB(;?Mx4;U^jX%W58!`JuF2I#{lni{xDpG>x$Mfs$u%Qf)RnW#CE>_A@z z`S*z37U$7<=zV2}_|>zw0nqHcn(K`hO6SEsSm}$?73_XET=y>Cws#M;yFQC-J+BJn zm6x~0;N3PyY75JcRx&yF)i*yxF_5ka1E5t=?UQiQ=2wZ`@)&4J*6az6)%nV|4h)>o zVl2z`C5!Az1H}ZJVjeznRMVk6jeV?~&X;_bFhQO(K3Wu-7Ho@FvAN{*R{LlM?BKs2 zDKkghOU&4+z(qU_KNOwfx2gdGTYuGthMb z^rG}gIjw|S4)4JbH$cw!&WIk<e%YZD2! zt>{a%S&AKRZoF#NLQCea#M<6kbb@i)qY^U{{#LUJn%Sq@T+XKY3T^bY>-`?PBGrr< zIwuQ7y+|Io73)UuRkOX)jbQXC8^a{|0<6joZn>(ScXK=EQyVWddft9)r zI~8=q+01dVjdcVn(>VhC&U{knL_=KtsGS7L!XQp(2p#duZf0-VeLnT zn{1f0!qKQ|I*WR^ChV_N+qVygmkdXVqLgOWd7?GxS0-y$! z8SoS7qkTR|Kc(-8{MU|(BQco2ETOHTdHT5pp@geF1+rpZZg<1f@*AnQvTm!{(}XI! zZO9il#CxlxCd+?#qZg;SSR-|rpRn^Sh(8a)El#OV=kfb$lAE)m+Gyi5m;kJM838aE z$Jw12yq{;s-n)wsk4g*I7j+VCQNO`YL(@K_qhiAkB{rF(iV}YA0Ux}8=>oi zyGEN&u%oCbqg%dq3sFASuVc_Q`qY|Dj%T&G@17V<_e{=sfaE9dTlgmn%WSITGOtO8 z`X@e43LvT?)k^JoCFKZXk+Q{74lgDq4TtqUWaWP7V3yvlNSy22SXLmY=UA}xFKp+! z%uf7%M-CKEIQx1Zjx%~eVO=RYMZZE=NMV*Y{9^wVM`SqXqvRK@+8FX*W1A9T=-LV- zijZoDY5>A~>?q7ESh6o1&z7J{Btte(SZE0uOf62_6#{L&0-20CYGJLGPz-SqH%C-B z&C}~ZhpX{wiCd$7Lo2DTxZ{(qxM&^bfSDVOnI% zGLW4i%r^~f+av^L-@KU|<^n&p&{9Xd zc9jiM+E#7!g1EVEyH2O7C=%}I)*%;Dc!kFmE4N2&m+FC->uLlM33eyy-E;Dv2!BD5 zXqZegUvXoD?GHISH^ENb5W9r^ze!QNCn>dB@HS@^!hg3q|IL$I zfNVkke*TjtKh=_tU6H`+x@M5-YKg(*pQz5L;#w*UK5ed8Yb+fK7pyD6_pD4Gv2zwb zMMpqT{(wtmNAy9dEV(twpg{>*^2lKG_H)9eS^Y$FB%q0xD(CXr$M=DF|ELL$Rs6FA za5S;`k8ZVA7?lv31x9lff8bkDN^oJHv>(1Aa3ur7Qg7vHlYU(dJsbh@O2Tft8JjNI zZn^o!h;VF7fEr1?aa31g4BtRruE= zfi)5%HvQ(?(^J$(SiD?#{7bP}qfD3w@D0r{PLMtVWN1mjcqxc>jaAxjbthF7cUfU& z*o_2w!tY5g)S@ia`z{njlL*;e9gZOL$!`4%gTdQxKkTN`ug4&M-}kDRBOKr9D3}kb zLSd(lb#`#p?0vZ;cpt>@DVRNUC&czL@pntTsM4NYtJb(UgFOFqys>olH50qDrH4E9 z;+26=z9nKx6un@?9U*(bnIxUp^yd-^WhczV0wV+tt%Rx24jt4=)iBtFjEwOA91aWOd-dB#RFLg@mp0H#@#w1 z9bu7NeSZym8X(tmocN5bhepY&JO@~f-bQqYbza!&vzWA_k>xf|2r}C;{=S3CBE&Xw zmV;<(pCCq~iaBN{L2q@&9>#?#ErvCEcF9T(Tko0l<)!_zcP}+5olER@)MBYrufxCU4)zri9)b} zW2@SS!#I|hZxHb_63#ku3`b|i2NHv|=XI94l8BN+G`sTSZ857`J9a@kbEWL^6vWT@ zMB)*~jZ?|W2>MlVHYkogBcl!*MH1OHmFLqeY#)JN%_&B!^$xpPpVr0)=RpPsv(yUx2Jz1`G5)vVa!qAV=zZ)X{FIsr+P2T|vf z;xpOoCoqywpK8;YoxVTH*!m#oOm^{590{!3t8Ty5Sk7<}*nhOmCOh0- z#oq2j3RAJAleu%^tuJgB8_G-8xM$qmX|#k^$Vn>? zH=ur4O^nfVBkNEm2FJT%Q<C^x-=VRqXM z7z0meI=?c0(xSw1OjAVZw0fAgRD47b^7?+UyHlO!HA#Yo6R>(cPEoyZ)AYG_aHY&) z^0V!ljpLfmvvOwN78J-}y0z?L$+(O70xC=>Loo>+<5H!9vHNlFgNvQzAgJz|*{AS)WN+hktmtqDVOB;X-J5-9K<9h)%0h{u|)) z#Mucm)TRkDu;uOlxxkO)EpTapU!0&`1^`h0@4wIfvm5^37YF?Bp7?)W8!(@}Vzerl z=qMtJbfilWK|)nHU_fd>dKK{Ic>e!-Zmu_(OeQn?eP++MR@SU}*M7gF{e`(IP~)dy z@9z1P*Sp(pKD5d*#l%lLpH>L$R=jrH%k!anYH5l64w^LKt-l-yzYcGq}lNw(gtS1+j?(7R-}~MFE)9l#4+@5Yo51~9lOg)+A(%9^COLi zhm*qx$D-q6bU@6`BgMW${UF5$Me#5_6F)HUWg;K?c~8Wk?4CoRLCg)79z@k>Y`?LN4D zsGZM@PLS*3JN+)M8AOmeu^;nfx$u9Ym?ADI>#=(p4^+ zu%Kgorn_``#P^KuP*iSXC3ibR`d&+akI3-g>(O~+M3C+HpA9Obox6{6Q;I#KHMz%h zZ^m;@q}^DW5OTW!5BwZg5Yd7=gW>mVUAB*guT~;!s;=HnNKwR{j*mGSYn4EE=|z2G zU_C*q?A2oH;+FtysRX}s){{*KD+)YmNK^<&0TRYLk$L7MI{`OwxQ7Yd>}~Z`6X&Zr z{P)k;g%bs3pQ$#3%fIF|z&(SdV-@q(Nd;F!6PPz^xb4i(!bva)la>+_M@u@>TXUyO ztt(g$5usCoGH_uRE=N91bYd`{phn}`*Rz&()lDzU6VBbzp7#y)p2r?NH8->L{78z$ zEVn`F7b_@!&$uPt7%OjDd?Q#xKs+|EIun{ubTd`V<_KL$&0U0D& zXExK?!Fcs@=eKVtkg2L%2ViDob4@1Dx0zjBbQ%B>uW;7(0(=V^- zejO5}Gal@3!-Ob=72Sg8Y^I4X(!xWP$5uma73=fR-%cl;EvnT{XsHIZ)53j}ujfh6 z;LQm*o9Js8;-ju$@${y#8I`nS;dR`U>6fLP&`(G;8YUq5v}wq`Lq|le(<#y>)5yh4|>PH7Z58+98t?Y!7ac9!S-an zZp*#to^L*n=`m4y$)}_AUNM`4>(Z*;;q%eXdS17K0b$YN7n{RYCoX$cBA{#Y@w|(s zCY|-?YAePRuRgOCuolxvxqz?0ro1B+8c3T?%1oQ3pT9%&dj?F2BIWJ2CE~3nmtZIk zjzFAUmu~i;FAIND6{$d0FW-$1RZy2ZeCw_wT4sE(D<`S0jd{k95`K&xUs#tH^Kq#- zbBnzB7%Up_TqQhmu7Nw05#3L!T+hqT1cgHUd3=E0NyU#oYU3Px_3}&kM8e7+T0Rgu zhh0;>bfsi~-$ad~<;wIl1o8(ez9Al}GFg>)DPgc>a04*6@3>2KGi9J!4bVyMEcUK) zTC>XIhLl2iwZ=6$b%qAMTvaVNx#jtdQLl zUFL9(Y&~Rwn<%4Hp5NeMmTXhnXaV5g=IJ>D-*>aQ-jW(tP{PvWndg-tbP) z9JD0nOk~<�^&?-3O!G@7H0alD-tV`9`LLvK69NEKLT{R&w_(e8ulsuk2d)m`;5^*br_3>#1J_&5G>?C_Qu4m|6JXB7+E72~^@Zv8XAy){n<8ZLBolE7V*DhOiWX`gOW+pu?`piD`hFMEG0W6al z@LbJ%+~-yP~Hs=z8~F;NkYAX8_9x=6;1b4S-aMD zWWe_)TwR_=F2;Q#UJ1 zVgo6zv3Zkp44zZ(v{*~CUtU{ov4;tG8adTt2^cZkQnSmFoxL!pG>FJ)XG4VS$8Mw* zR_t{IZpkZ2%5w%q&R6>`rUj{2J9J!R)!EPmNvZ}1I|{>RYbmEDh?(^yuc}K=AVlW! zF!cab=y1E$ERH$Nx)}YaFnq6Tj~p)yoW&U4m??HR%Ktzz2R^D->oM&;_-b=k92a3| z4r?vabYe119fmygWzNjz|FV52e^bBBbm;)L#hP_*&LRe$I;2t-FhB8eY-~1jJ8Tyy z#r;iqaWdxnn#O-xFRz2hOCl8e&6tu4VWaHK9o+4WJ>5OLr0m^2(SKQRnTbD>Av!yh z{$>GFs^ZM%iLl^W0sx?iT!Q+2wrV^5DY7CcE~&s7;@$4)zmicS=UFrQUSXe(9B$6p zoyei{G;Q_@2C~@?oo3*;gy1YJH8;+oRjMdjfjKe`04JU+*fh{^(Zzd)KW1L8S3F_g z;d8ba9;!umC$}_DJ=y00D|!;kqJ$XmgEpHQskN&~E3mUY)bAC^+bdtD`EpW=1(1AK z2`=lueeWgl&)eL|EQK6LHeU+1gpIy6uqTz1Yx5xVuASMWt;MYX%ZtDg4Nh8QY6hEQ z$UO`hU=1XBNO%Ww8r8EkWuMY)TvL$rT%r|>p!v$ZljjfYlllM{@_o`bwJFm(cNL$6 zHF9jX&{!||aWZ*2K8PI=Z2ygnF#bXHkpCaGg#&jfMLk1H`TVn}wjLgT*R9Rwu6^oSHql0Y$yU=KHS|ROZVOib)vbEcS;c1_&P*$q zxr~pTo7`B{+)Lm>z(Xs!t&vJ-5Lp`USFSP&|Y5@gXDufC}PrMt|RMgOvsfg6dWkgd0sI84(fSxNq0sk0+ z-x?j%K z(qVA7v93y^ve~04~M?GS=Z_-)!u7f+yxEM(GX@j;;a+4SZ}eY_fao&B6hZ1{NZW6q3ch2rhHa z^i_sbs%)eqP6J(H7{W8*AL3+ zUQ?DivT~W+&X{JG3*M>@^!`+|v{3VV3*P6DKvFjiXrmXFSxSy+Z=ioWBI2TTaR6|l z1>gt{VC!zp_}dgWJ4Y)+J3Fgi=jVS6vg~6*5;=c`slC^9MUkRTaH0;;UcCVgZfKIR zmNaj+c)dr4mc@t4hs^Dd{+Un)=`0_P3(@*8c%v;Uc8pC;W=EA_k{ethy)L2)x-};&FvY&1h zLSdo*#GB#EqrJPglWSAgW4ovNnVub?TILV=v!=GNpW6>p>m~KCKWrP@ecp=0od`a^PsyS*Pz>BjmI0YO1&`nF=e6e>qgMZMuKnf5+#oObpb|B z+twq(;cC(&MDJe$aYvioyH`B*n8OwVgpHX1{%y&B^Dp;!nTj9A19waP`ku?AbIyma z@s*)jHmSF7GD?WZVVuBa7^XgW1!O_oD7Iyk$V_w2fGCG&A*5@*T=|TOl+-?fkF)W3 zO?5#!Wn63Tl{K-XQE#(i$SMzt8&vyK_cNL?#?SflS)w|*)5HMNGldKv`j-vtZv;(7 z=zWp7xzb)DD%o!fYN2yyh;l~D7)!RtG5bROqmW6h8?AN9^RIR@(@SI&-faV@U1Y(( zq_Q3GwhL0S*ZS|5&odfSj(-hyx6@LI0&VD)^xqBdIQ{Kc#4o?jG18TG zox2YRZUG0($X*M?mGMN*oU>oI*HVf4|3`gu0+#vWrD6y&l{6MzC!9JgQI0^p!x}9E ze5II28wlf2jxE?CrZ_8E;)9@|Kxhj+3swtCWr{;CnTUGuIgbv5(xZuA(coc{-eL)mzj7nt`a8*g;ZQ8Q#3EUdAWu) z;po8-Y5_jWo-m?`Z)RW?TqVS%^Ef~Pg4tc<5+z-Lwsa}s$+#v^p+=(vV?NNZ$HK6D zv{0a$o@OGak}t0VvRL6EO`(~1D3(aBPDbx;_X?uBL2 zHR?;w)0Sogv+xDb%8eyKC5uf@0DXK*4OJdG1B%SR5VPRKbeR=MY;GbJ^BE9q5u&B* zc8`Hq4s@)lMJkH8h*l|2WP>MD{rnjeZT?vcM=q)gUx0az1_pkgO@~x+Vgza|D2q=XMsHRq3uk1C`T~LEGN>Nf3$cjmXS2 z6bLX#nje4%t*p~gik@$116doh6Qoqj0Q+fVn}A`CUg%I?EC4!@A%mgRf~|^OBoa>FvCE3UJ44A1ZB71a?h@YoG?A>#h!JWw>CVdgBP|aO z8xkZrcvax5$;)yqh7+@CXLu{Rtr1IBd zg8j;k!j$mkh?);siFw9_a*57y%#c*2Q%$T{82H?YMIY&*W-&ek`bOGz^=S@f9yGBD z-LN4RSfRCpLbCNkIw+d+{@Sd)Cew*T;!y)oY3|v}W%=P@G^v@L3L%g2rKXR7SOp?b zai(En(eWc*Uf%P1Dp3`mGgz4%tpAhbDB;)7Ig^~ocVZLW!e>=%poR@Ntl(7ZqlsiX zA^Sk!>%~oA787}(R7Z}DL{ySEhliFGhZDm$yvF074^a!*vZw_PA(F`sSGXXl4mRq@ zB~Swq@=Bw|1M|ohgoh&+#C*@nng#UOm^3{yK$2~7B@rdsKId>NlXVfJ5Cm5J^6V16*4#Xaqa#Yy~v`R7*5a1-FQcU0L$M%_pkc z+@^q7BGc(tj5;8Opb3=9a$XO}*feTm7=!nx-BY0d%try?c-QuEKy&z((6iZQfacUY zfQHA%0~0d9N9}jPkqf!pgyWkM03n_#>wt4>0ML14SK#;zaBxysnD{hv43X%)W_Ur* zusm?8S$|M3PgEDOoJIX)j(2?|zOYpB^aWcrvdZS4T|j5UBw87!Ey)y2!5 zU3pmFccy#Y6iU=_Ju_?GdU^yDiBpOJl!1GX6k`?!Ut_x#aQRt+4eU@SHC1fRM?pOP z6E9#l_hCHl6au%>x+Lfiwt5RFr5J9!37GAWd}g+?^1+&zd9Zw9i7|Y9ff)^lVpi5K zpx_HwP1dbbworAh1^Fz=`8qK)psS?o)$Cy4#}o6REb|9nM!P?WxcR^f_CN(N8<~*M z_ZPr1>AI=I3of$d9>AICo6NglVSR1O2qn5kh~!Al55-Z1SmasfVg=JkqbjIX64k^| z!PX3RE+!dn1xJc0CRG{`PRUm#Zearj-n2A|6QhfZKeM8Pq|nI0^&jUuF%Le33Q+E2 zWg78Z1~O(x5hn!^A68%k0ZpRQhZitywq_-<54KhyWnvmxnFlg%3K;YSW9U2tiAaOc z*KcRQ2E=$7<>WJP?Q-Jy1zffovI1r3c(oYm5baN2z(y~D7XlAki;eLfCql^Dykr3V zXb7qVF5PV6pC_+juo$2BO@(HX!!5+|f2ukZ)*(4g43)8&O9zB)mH@(>c<0H@bY{cL z)*(^#vzlsIfo{Db!dlTPrE!>U6?{OV=gy)b@_eIC6w(r10@_q@+yfj|oTq{2&tLG4 zlxi6)zRmZ|0~(l`#r1!Jj}g}4Jlg|cbAtfPD;qZu=9q?bXq^N;%@dCUc+djYE+~Fm z9Q-$;%LY7nIHUhxNFHEzJ6zWIFJy-qfNU!XD_A@z_Bb?4^cCme%J@5YKFuPj;P|T8 zuhGximytjH>H!l@pp?L+nKQkG}+yBsO z#~uqISQMx0CRP$uW^*J|&6{g5#ln163mFjlj*ZZ_T_IB_R|gCFV3$BZrD<|0kOQK1%8_euMb|k+*hL>mg5(u@@Qg1{t@7J4g zAk?gF4s!7TmfH*CTo4)i)J=OdDrH3ZCZcXIyGMBO0F>${OEe$~_hUy+@cVwB?q)pB}DmDFa1Cl;ldp%g<^u7%H3|TV>!VA#XKoq9*v@a z!%aIZgucJtwLC(|)U24&#Db_EZA-#ZF})I8Z8QBAyc5@d(wPDr6pTt)7-f}Tcd))l zKxCmnil_VR9fS;&7+NV8%)GspP9YEzF_vQ99+g4~K~4iVFlrz&xMeJe3qX+{iRpE& z|Ci#?d|xAD1@IuxdIf-07H0KB2{d{+PSpvmR2gyUE*Ao;-k|I+iE3F^cqY?T`3c25 zIbLloMI8O{y^PO=0@db~+OoQGNu3(;+&9hD~D@sY60cVh_r1k{GH! zWq&yN+_}(8Gt;)s!F&@u&B3gW!Tnz>q12}ZX#y19N~Y9SA$UYU~JwkyLKobUNQ^STy(Hql%+Y_U=Ep1NOl9Kl%V~)TmpMah!kk>N6}` zUKu6J=AcW(Nvz_T0S5pUOQRq}Hj_t3|#oAkS1D8`ly)D0im|!sMG;5fY8K< z=$K(4Kssl)z@!$Sb3p4jQ}=xhAPDvMi-TQ<-^kJ22z}H9;J6_&*ZvAQivAl&P5m1X z{TrZ2{2O>1{!NLE1^~SPhl&9JJzP{VLHOT*E*0HhKy^^>?+DDl0jIa$z{df`-w_|4 z{ssd62Ci=bz-*2BN8Vompkwt86`3O`p#!rc%?qKsQhkQo+N&poj>QJG_Les6Z{Gm1 zoJs85uG$vrbXlC4RqWLOnyTEn0A%Ffr_xfe0WyVmX=cCJ%OxI1+rQYx zb3AkQzu2}Gx$5(PJ!M5cScvET z7ti%Dt3wO69^cO(x*XaQ}-_?)TqoJQ?HH7QdUDgQl=XLjo=J%#P z-UaJzt8<&(&!L3xmrI2B?JtD?&T#}`S&~ZtGL#g691!9^IgbBie_|BJ0GTnQ_G|RT z4GRKGQcbq9erXjUe-Vo*iVfCJ_}q2)vv0h|D%AEr8b173pPBS*`N$sWlkYNnfR`u< z2j^lDJpYWx#~!!D(VexgX>Y>1XD-E68*KMxbhG%)cDvH)pHyGL$VWBuD zZDQTWtJoH&ZIuA4M*1WsYJq2_*jF4{-`D##)Tfd{ce#^uy-47gzJS)Svq7B`BUi6hXP*%MgFy>B_2Hxq#^tSeM3P^hO*~-Z@7w-TTd*EN8r@?x3bYXDTt%?F;Ag?cHVJ~*V7^F z%`o0?`x=>eLfsSC3%#QqeZHf##!U3ri88jw8j`A(l0qGwPM0$q!BbzLb`f8x@MZUA zf)X}L+`;{~=?AvvwW$Epzk&h*{Yn-C5^v51hSnxdzc+s+m3$Ic<$f?Bg`VG2(`^dR z*5Qdpw&IbIwF+su`}bt9rh13-%n5DeNJ=Zy%ywLa`1yT!JAM3W$Jee*D`RX#b#uVE z1QQfd3?C)b)yadWV=fAp4~7Yf(JDI2k)*c-XNQo221(;Qv8HW;oq@wU?O@F`EQy{3 znQEhHJWm#!Xen~XfV=;wvDX7pWlh~|iQX-JomO3TA|)LYba$SUUPE)^?97I%6Wh2m zymg@Gox60YleO&P0PNH9%&-q;BlMym>oiH2L7^yH@8OQa`urO!eY9AIkmG71~k7_ z4;bIxaicy}CRw3Dczz(Y^Uay0S0C8xh;SWBJ6Zs1s+r#pMC3{DHT@$|1B^$J2vLl7i5h zWJAUEP}@rWLih+}e1u)%Slx9t^kBi;%=ilW-{Y7*!nWxN7(gtA{~1Roa|1^cV`XPY z3tKa%U&+B@Z7sKz;W}UbE}=2`dO|#b9mDp-lMwj+@$_^f`?`A%)BknPN zYPX_P`4z-w{Ki#eZ{-W+)zwc&Bz`aZUMOB)=@`FB@as79H8Ap|iW&CJ?aO1zR~-Ia z2vJKmXoWUPsFTO^`lS7Gef{oD7dZ<$)9~P2OFMSbxe(OYK%Je`>DX z%Bk!A3U0m2?aR31gY-xN%H4CVs_)x(AqCI}!9ek-3^&UDF^d|%)Acj;o2y|IMV9M$ z(Mg!p)MN!9p<1f%_*4|8XyvQlZ>Sg_*`r4TLGG(N+L$)mL%6PO1#}oQwy5FH^}OmE zj6HNss+-$D)E)Mu;lFlpQ4w$EUcSh+LHJF1jI^H{V4rrIQ}JYtXcx7karw6|AixLq z_9l4Kzc(8``lix+2;|V-B{2kV$<0gkP=AM}l-q6%*Q%?lt@HZ8i}t`_c4>MwSpWmB zImUrt*M?#%$ypFqK3=YLr+0GGlY#v*ybAd<{2-DH=@dU2U{@CVxeN_U=o{&`CxsKVR0N z()w`HG=q?|3qG#6bkDXznxR&X$Feu)hzYhBrdtfNGY(`W3R^L$wXC+Sqw2zi&fUed_}nPt%5j9{4;XdcVbCwPZ)n zK*~wsA`@^w(?@BRgtU!5Pc3xh!$xm(VKeH3ltsGGNiSj+I}mA;-8Ux9$)2+CVJ{l0 z0i)6^P~^3uY>AT6we z{5i}D@Z9^us#wNpSG`DBa9(k6tif%f>=En|2HfHF6+FB@(54UrI-vs+YE8bWOwD>I z*keQdsPe2gTahyc64_Gz9IUYiR6ebC1ru`Eq6pN*CceuX#rFTMte@ps^#v&mHPgcx?dEb5p* z(ma7kmklsDaSou!AupITezPU5PcGOr)1%zrNHJ3e2|(uboFw(y>vp-@Ahed}L)@^! z=?!JyQ2W#wfp<_Yp)7V?s4I*ddpxadiFJLNIzsk?IOz^7c(t?A^S;EHv;d|9eYGJ+ zDaV*u`F$2Pz84rqO%#2wYL8^JRzQFV{L*-Hj3=47#ytPnzYC?mMbE6}2hE5!%z+hm zcUov$@;Q3TR++AUA~3m(V-fn#SOd8A1m=dX8&9!)sQ$#M7e~4~+PJ(OncTN2LH4aH zosLM9Sh9Lt;bAu@y1R}z=a*y>WDjA~L34rb1M3;;dR)-<8FqtT2o~9jDaoeIB;E^e zejGmhTtWGm0KQ1s?g64=R~rO`6jJ-KU3@qHlVr4cymHk*+o~+wXWJe2y=Be3kIZ-q z7b|S>2*!Ez1%dNWq}p=N9RVz18j&uD3NH_D8(INsKg zqu3&D7fU3m3CGFf0uFHZgSd}OEcBGF>PER+5EQnoE6}zIo-yM3NCF5|pF3L@dpNa) zPm}H+6&Sy+jeB0exYPWMbUa2waz__rfjAL%5hR^&$X2gs| zz{(T({w^psu}0%ru!!()++k2RV%yWhohs%g6n$=M5&2glZWWI{Q&#i54NVqS1T=3+t{WCNOVpUmu@m?ev*yUMQkQE@3w;XA)FO#+N zNhc}pc5**%UX6Ot8GFhq`?AmyccrUsSCFfyr%*L$Tr^Pja%=_NUnWirBuDNi<8vDc zx`invQyf!_y{_Z`*CTMWN$3eqIH`JsB=}- z^1{Wjxzas&WN0^gwL0mmQ>)l34hDr#%U37Pyp>IV8VX7rmd?qwGqB(p>UP|*dhJh{ z&~~KY#=x}YTX&U?v8r~Cl=j-RmmuQ{Ed+Ro@v*(Iu)-gycF{3RSrqMeSAt=t#cca3 z`(I}wO!82r2NoDaVKNp-)`ogll;LEg%2*VdnAM*l=CS9&Tr><__ao@tX~u=(g1^|9 zKz*Taf+E#wv0JJ3I??Mv`^k_cpof7p2QMaWzmDz65%m#{r>4*0M-xpN^6{);6VG_~ zwrp9X64}0Wl^tmA%6EShM;q9nfgQbh`LHWbyNaFkJ#(npSv#jK*5YDRTPA$E+PYx7 zQk!8zoV8W>Z*GDHTkT@ftiZ599^3fusJJDKh>6Rc=oQhHR}5{$AK^S{Gm;HD?Ko;< zU1jPRdsR};1t477ex?!lFE+v^lpMZDv_TDzN6KJeOlm^-Ec%fmLU3yK)h>D4Y8KPb zs8<+@jo%P*9K?i+`;Q3}_PDe&dZeFrdzH|s;YHo)XE%LpT*&;^-|Fi7J<&2;f#qsg zw};+KPfh*nv}eNkcE^>%QYD8J^E{294+F*PQvlvde~sK!6q4g27>4TtFL$fj$I)C9 z;42ZklEUZWiD9n-%!L`=IXeSw0|O$XLkPkfuM}hUl8u?uX*&+mlSVR;%`b(kc}Aa3 z=FA~4KflK$Zxh2N_%Zn3^a7k-gH#D4^vAWT68E7Xf8Fur7_*6{meN71?&9oLA_Mv zxa{}g1BjzJREVFJ+?ln7OkUfJC78s7LxN|k5MgemsCTUCR*i3GG8mdPq}j&;0k@*A z5Uw=wn_-e^Zj?_#c~&iB>iWgUxdFB@+wc}6dCZz)bxclVH37Df6CR_@4N+%z2vzgV zPEU>NIfqmJ+fm#;5eIb8|XPI zcn`^&;1!D|A>|`M_BfN&jMmRDz=X*j?1si4m6g_3m|B$p>l;7keN&`z-#T+zAkaZ^ zkjB37E|{1%1HtovZCyA8;e9)oBiF%X>Z(p81`W(*g3x4C;qugaY37)WI95tKv6Xsl|1B0(#*Jf=;Ao7K)TcCu46CummQ#=ffwq+|tL5xq zRdl{coo&&UGmmR>P=baiekLbq&;gEz&{H12@=Q76khlDjSZw^vGJS#{2qPS2-?Mw6 zgn+z83(hXa>^kygkp^+j(5h-yx~KYTig-&=>Cwgb*i7>NvlC{lrq}AdX$s|^hobi34D2u$^soW68JynQwxWhpV0s}J%ajaBq z84#69EZt0rPMVHBnP3PtP%j4}pPq4-s|LuMOcWn9YPEr*dkq}0E;54*C3FK2%V3Yq zVIDj!f%I4hAt(CM&Gnx^oqjsQs`B?i;7f7TKo%sPx{F*I=-p@3+JZJ)YJ9SS`FUL6 zpAk)N8sR-BEq3)VEYg{8Dp!N#TR%kvsz!INfDM8Woe=%aOH(fn5jG2dZ&Am2W(wM# zvsn68=X7tkA!ZF!-s-24yT+jLlmSgnEsx>AAxf8$T7LQ5R^XO#fQ3+LstNa-wqhuy z-Dn}w&oKvN-M1TI5-Z1;czci-&}IMd5Sxo(|JJ3{ocV~5+Pdbcnn=~~cGW5AtWbD%spDqs*1W{M?XC2XI?HNS@wY zl<2Bp9H&;!lS{rBFng5rzaEE@#WvB|lb{GO#tLppHO3_+?SrW@SAb6}lnWt5pST<5 z_X0j-M*0($#AiD>C7(X8D>qyWrBy|J^|rAnBr3c+?(rC{AaXjfL==fVkceO8+7u9? zHRF$@iynXB;jdo8%KsRhdHf|zX3t=>o`&M4+&JhdVAne?z}1S1t=uTS1IOdrdy2_} zO*w^gtwa>2Ow5;23+0Ov&i5$fWd@Tym6Rf18K0g0?4%!q!0qZOF14xejJkT z9`qx84YR?T$-8izO8bBhMy+ywaTx++=VvSk0r}=kVRuVUks$Ak?zWJBuit;k zWf%HklP>r`+g*=tZKgXE690{}!3LERE4Vz7m2#afl$TeABq%K?8)U8IXCC@{ER;CK3K^16i%t;usd_OM^io1F zvDOS`*}X$$qF&m$zgfyHe~xQ8(|FQeQCej{8LV;F2y1cry51?*v_^EwG)L3ptmYe1 zQ&j)WcC*1W3T{N`^)SOQQD6~;p^c-+o``>i7VC9{Na^`5PBMD0VmDJFp;ank8r`e8 z7)0%@u{iOE_QR+e>~UasezPt|I2CbM8DLpbnQP+>ziMHw6fI=3r%#l6Mgk9?K)%xzW|IQ}jBM40Tfb9`mSLPjQWyM*6y(dT*8`4jbsvcHOLmou zXa*Y7{aEtJk+^%8tXh;`7RnF^9M1s*UB{+f@Qa~dc@XBfH?#0)`6YpEIw<(D-V$GE z^mO>CZiR+ln5Nh3_7th;;)_-3s_59|kvSiFrm2kv4o1X@hTKN;me?>(irq&Zh%YE^ zWzKlp*4|A9ZN5GOJWdIDQYN=C<0we{@lJFm40kRGqYz00cS0)Z&C)S3I}c$$F7|%~k22V-@6*|_ZpI~$ z1;(8`IJr#N0U2#A0_rI#({$#K>Z%?Hmr^T*B#c{~goL9-B~PT&PsT&{*nY~3jdW|? zt=+&_H-easF`d2{eF}^p=QTjS&(`zK7bR}3i|qKI57nYEwB!A(;1_XDn|)f(>+x-v z@zna3x50t1(&)@9DDnv84q>k;&ZSITYueFM&ZF%y5>KFk5yY~)S>mCN?-KYWavPMs zH%^VkO5jwFgXVZ|c7!puGBjkPB`|5d;!dy+R%7M}eBql3Da6{2mi6fmC$UNXbf!07 z$X8ghN>t_!&`m`f?@W@FCH|Cg>4D~nyJ(z?$h+-@Jw%W!fk zVH@I9X-YObQZ4&bGdR#|LoVb~mN<4x@_TXMF$;>#zBjgs&@`kKoM=8yoEk4Q*I*L!LZfxzpcOcdtN3dUxT6duoDQfUP zB|KJzV z)u1{kH(VsmqfU`PU_%Owk4n@-T9$w*_GUAy>5AL}+ys2Y50Oee>)THJR}45qs$ zXFW`0C-0lNCyUCgt7I~-35WV7C?|PflwoVc_PmpG_|XVi;z);=l9GqRdmgfKk=hs~ zcPf(RdpB3)aOzkWEdq*K*)Ow`3hsy{gcHwP?;|iqFG#E^1*d3Maf?Vy^M+sSTrmWO zb0|eWY1G6L&x~z}gd=Op5y*q69I61}=A%cWW_UHS5kJR!2w^8i)OrpX{1DQeP{br9>=?V*#HpV6j)8)2gpV=k)ky*kSe z5f&~p+2kuwiia6bzXoF3i1)6dUTVvlwN5Yx`)%jxR250$9rXstQYsh!xP0Z#sLgVn z1nPzgPGq9(iE7upEIsZFD1n;MB;yr_Muo1QZinvt^3I7%LT+E^*|`yV+NRJY#J|r0 ztS2#*8o*L?CEVZ3(SQB!U~Xb#^85L(pB+v$WaCyvusW}4#X6f~QMo6oKUc9Y7loWQ zRjfCZ4n^?RmSB5TW{lW637;ZELn|U-lG)-RDU_vrOV+Db024jZ+qxA`yfm$wXo>=A zmOS>BazeY>bB-dJWeB*$7-3c_pBGsGHr?wd0f33iFqU z5EMMnrPV^@TWB0(x~eMdYl5J!A|uv)W;@eU+>{#5(aap4bs0UE>P2i3ozC1*T z$st&&Ft!aEQ#42d{IT85|cxm8LK_LseI}^;xEs|c3!N#O6{svrDb@hpA zKmi$cxMH8b-SZ8t!}D!-ce_3*j6avh)A{Ox5_B6rEBNE~*g4<(ai;uqu6&oznHA@O)?#*G?Bkpkw|mVe zZ7HNV%o2l5w+#z^ATaTsN01ak8$G*ZCWffSAg(EEDi2JAtSf6m7fjx=nTN>PN?t%|pXcjz7&wcjij$^Ke-KF!2JDdB2H zGFq*3*u^Y6X*n1z#NoRcZFXVf&YB^$;|!}C@=VCSfzKm(2fh3B-1*#j-WlcNrb_>H z)dmxOadCeqORwEgfbt>;&ZS#}&dN}Ft=!<{wsop#u8B^zp~J4dd%qE?}yycD&2y4@cQHZl5%fn%KD zzJLp7dWhuem8!+4Rn%ic&t8MGB`th)xI~Bwx4Ia(s;|}E5t+t;-u>D*BBqglK5kWs zXyMP7D9!IB!qQ@-I~C~MQ6?U7@@U9miuTc=)+7i_2d5az=nBwN(NEUIc|z+fm*pvX zpL!0}SWR5?Q^mfWNYc~af%A0b9LIlUy*)v1?aHT)fn^==a+4il!5mx^izh7AheN_L z;aX|>rhpvAkSsQT4vU57sF8;mSU0R9MCY}cbtn~!;Zw1t$lAiB1j#BAC{&`HKxC|! z;@TOSp}ds)^@Es6Zbk*|+>V<>EEKNs!s_@*vjXceMKP)4+F{=Emm{3e*Y}IvAJysJ zlLUwufos>}B-M*Ijp99nt7Z0+;x_Bn4(nRaikZFJpeB0L-^wnQ4Lk8KK*RYy%O^vj zTq;%2bv^DOIonzcnpD0mGg~4DE=IcR?Ov2|wbk}6n?-p!nR!9zd6~7X=rSm3aS!iS z6!YgiT<{HV1O&|nQ){%#dIE`0oSiU&ZW%F3G{5~Z!CQEy_tye0?qq-qJ?THc=Ko!> z@VmIX!=vHQ{L8bK;Y5XptSGp8c=-9ghZ7_RnacB!++sHylFMQ z`70`se}CD~?YJ*@nyu zwnVMbm>>=_x^F~1l*mQAKbwTwkmv@!U*l8l)gMeNu3?p^hZnCJjy-U!f-pd}48ee) z(lM=pDs!XEAX7htH}F?u0|gqH3j`n#>}$kMZ2-wVX2J(KZmY03W7ulS?;LD+ap9~s zO{|RQ$2>Z<>vnb`R(w&qFWK=wQnDY#uhG}m*%>1ts5aoE`w_u`(yxqpi)%L|ir_<( zh~-bPlao9(ay@1la1@9(m(25JppS-;Dr1KF@km_vHaFmib9b{Jbu0e)33cA@-=6BW zmdv>UJVgR5PXLs^{Nt&Cz5Q=Xd*qIpkVNkRK7u#80xrYv+A5p zKd}o^zYa+*#Dmb*wSI7N@nLEDw$jLcOjK}LZ9G6{hRu0O`=g26Yh^9_-3U9;F{N%p zaOBSaL@Fmj^#+&(yPJ-jlTJez4I``2HcypP+9-{pF|MjWWsv^f#fEjw{dFUdlyB-< z8i5-`P0)p4P{36}+xcc`dh|F4F_+^x{;KF3LJv+A)oam_af3v%&+`Ah%>;RjYi3oED84w_(s665Sh zF)l;M)qJc5cnQVMhlfyjp!_W(r+DRal}uO-xKJ{=7;iAiCo~76VGzDWTJ%HA9YZM| zrW)uUt^2gT7x?l|sU0^q3Jmn|aYsGhIJ{wS{R*LCk9lk&T?$E54j~3z;@}-}zZIOm zj)}FH&2A*K(^r zRsLMU^p8pbz^uPj{t>)rnWpKCkJ literal 0 HcmV?d00001 diff --git a/yfaq/tables/macro_with_urls.xlsx b/yfaq/tables/macro_with_urls.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..a3f40a6804471d521edccf15be5a0baaf9253f7c GIT binary patch literal 17613 zcmZ|11AHaTx;-4*6Kj%*&53Q>wry)-+vbE5+qN;W?M%#X&pYSdbIyGCpZv0`_o`>D zs(z}wI`vdl%SnQQp#lK`K>_}Ffz&>&OlSfF0U?3|0eu1>nu4}APR2G)x=QYL#*W&w zZq`e(w~C*-f>wAYapS*B#CB;!$H3_<*b6N6h|@k6scIg zym-r0Mv`W%m{^9IwNw3!MO1^3akpN}*SoAce2q3vEu5S6fCOI!sU3N=U|xmjj!efx zuaKZvgY_>9(D?EIjB70M*)r|uE3Hth1qB9y4a7IiymrYgg=}ni7JP023RMe z3oj~>)T_=Nfx?s>4k`Q89FNVC6GSOX)8JwYVmslBp%^gQU3n!|dIf&;J($ir<%q4R z`I}n;PvN5pf|b^Qh&AkInIW>z@bEw2W>44}d-#3kp*`H7qvN*vA#6yVAl7f z=*#LbeaY#@UeYxeBl<4~9G=-aZYOQ+`%zk|Ti#!0@F zR+8^;46|RYY&30;TBy;iX=A#Ms=sk;%0Mz{#+;Yc%wIi!XBj>)A-@);dA^0cEj;>G3= z^QvhEmS}~Qm3(J|p&ug%(sNi|@CTNBQ>>JGu40}Jp_zit7IA1=)bS-Hln#``tMn1< z`fO7>pNGY>C)(h~*s(%~c<63H>=z$SRO=Qwv!;FQMweKMQdhd@Z%%eji2mC@>$712 zM1b2?*$)T^^N)Xid&bes*x1RD?w^F=w~L~(v>jJPYJ)GQe#jk_+<+W>#}uZ!oKQ=gBUixUgi59ho3wT|`nifqKLr}kwYnun0jO}bSsbgK(D`i})A zL*-m!qva+0&rdhR+w1pV8Ci08e_X1vX1v(SmLI-}54+qouYC^gdTI4p*7kAxsOEXS zaO1^TT{t`)`@Gi1xwMy}`gsF!>3#F=;6!m=<>DfkN7U@5dAkp&+F>v_SgI7kNT&L%0=DI3q*nN-JCUBeAhl-y6nZNZ+j*C zwjm!OeI$#BFF%%2-0vG5)OX8wZg$>RZMxi_yXNTD>_!s&whdUv-fsF{&JSJ&Tw?1z z)$x-qHrRcecVBi(cyW30ecUm7_ zCYfqFe7Y~aH|q4a`-ji}hLb9AVR{e4P7^75Zj#NY^HvI4jLQDm-&}~7n*qhv#=o@R z6rEV~4d-@FiEGpUkh2iQs8g}`m|K=#0_gzaFZQkwq!fjNhaUFz*lHrQjNu(sDrfUU zoUf>(`jr;?v6(TgVy`)Mda)FKU<+_DYFB25fDG)ed`4=YwmIC9ABC_Cq7)I2E3Bc+ zE2FUh?SnI?CQYH3o zyN{k7fu)Kql?=G162>BH1(S!x$`B}am?NctN5Ap0f+g)JF$KUx0jWtgs7MIE845-x`Ph&cuuHGPk4S}B50L~khxGs!D1i0L73}!- z0Vs%iNgPyM<`-B1V}agoWO!6TK%@*dDhxBT6f|Xg88u%z%aoZ|!vQRD>8ubw!HXt6B6wou^cv8; zg%{4&Ob!=Bx#4 z0>#Rxty)#b*y5v=&Y|*R_HrrH3NZ97gTWO1LFkH5vyrYMf@KM&*bAi0kdVXW53Ww^ zm8thYK^61j-^TWfWU$3XD}zGi8SLf!rqiMS5L;!s2*ngvvEWOqoM!nHDo0rObUL~O z;myPoh)WIWphl^(m|HoixUh?mMUx=1n7^x;S*4;B!rtKoFo$H##MXB&#S?2+jsxGE zyy02!S*8$+<9YJOUes@Hud8p*eD`M~r!YeU`^PH;-r1W-h3;pO!AhsJbmFrMqqx7l zIkR8?b2)+7`3#(Y<=HO8)iiKu?R&_coZ55%6uo;fI5KMC6mxuG*jXg;v5K2yyi)_? z|D2u0J+b(u4S(#t&stt~Bo_@U%olcLPN&)2=iHzv3TO%R6JqftOh>==XDiW^xqL&} zcqb{?fcl^Vgv-g{Du;4&@DpJ1RTu`1As}*XodjZSEWnAhI$Rt%XwaXD$48q3PqVE* z2`)If4kkO=D1CMq-f4LDi&XgxB!MwNES_@+kgjs&45)ve{#0nF0mLk$@GkdtJ*$Q& z6X)wUTnF1qETn>kTnfHpg=FGmMK^@lC1nfI*hM%GzW|;pbTATeqIGS>{+d`;Hb&L#=Pl*v{xd5=lCdm@za3D00tNWr2vF?zE}-FYbVnl1aSC5W zaNq)Gzhr`Qw=_V_*yoW8siyFAb89?+W7E>yiI{#RZifbh&SbWch^>kNYP4Q<0X2JP z08oKy1E>VF$AP;KOESZL5&5;6Ou#KT4V*~51@Ob*063qC#!ggy|C~+E1}E{Sbkat! z<;AxM|Ti%G;p*LD{wkaVz# zib<967^sQ9@|!`=I*205*{NuiMk3Dz2Sj5gTeVKwK-a3|cd|eTmSf|=QO7v7tf1`C zOfV1XeV>tr1eHYAzH0z;CjtwOg#2{GPyG#;bO}vGGS+#VjLne#%4q(Op1!5ZL?d9F ziM)jY)8hL~PdAgSDgq7vB4M~5S1AZLx)c2^(kvMo|00E-9v26QG8X_)5|f$W>uy^4 z`3-ptwD1Lc%wHUTiiXeRvkQH%lV5kKK6dJ!`!a|T3koC=2;{KbR}jzyu5Jy#ahqj5 zp)H{0ToFCJcvD5#*kuUpLF8tx7;qFi`0nn#=V3Eo##NjMxFH3;=z?pERIMCLfb5da zwi|VN zjvqsEr8XN|YK{F#FZ2GT9w^GQYPSXzKsB&<=mAizsR2}-9XD!{7!vr@)>0neL339T z*y(0r7JSJ8L;pHuY&U=V6{l$s=8MPefmjwW+?D-Ew&=i1l)cprCWC%beijs3j zuL|OKZPJ1z*I846cAXxINWL?^e&1`>EZ$a-y!~AReZX^K@VV#@RK86^ZAwGw5f^HV+2P@! z>)S4uD3Gaz0W~?pzBXoKR5s@mM_22PtmNs0gUq6gLK|6u#=L~ud1=xm*c;b_KNG^`d)9dI4XShucjv|2+VkM2v;YZ zs6WTuRpA?Qs{N9q7uG)_;-{bKH*n;0{}fi=0leFR42~TQ0-vd}1gO-52&x$y3^PFg zT&CO2R>(iNfG@$rZ59!1+>Mptw<77C-T9b>KZEN7fF*shz0y1nVt8-(6&E~xzOUh} z1bom+&Eg*k%TLm>p7TQiS*v}< zxDYZqV?ptCqCjaKXtcXxcF$T>iMXl2!)HczSdic54!;N?#y5$nM}gAr`T;WOjD-wR zYT9ymR0%~gov}E79Xp~KboK^n-`%#r)F4Ux6J+oEzd6V?<3;@T2|`h=pr@tA7k(lMW7feBBu_02FJO9Pd>qG)oL6ddYyCx z02AzyiC?EJ`Ze=b*2eL_IoR=)Tr=){2BqdpqaaxTpjEdLcj`9~H9xwQ2>_lMDqqKc z12r?Fod5vc13oKBligO0y8eTm%F$t?TFq?LQAKC3UB719=CGn-2w(%{$wFp_lKsQsx2pe3-Mz8(M0v(}?kL&t%O2)d`ippJkK9uQbff=wQP0PwX( z!N&}~0Td7R0*q^Z(`6lc{-NKZwdko^>8nvQgZ=Bk>8AM)a(9fHJb)fNpzuvv{~r_Q z!G8ggl7E1^{C@$T#Q$aC`!7IL1OS+;Q8y?6fMkFMqR=1UD_!CrV2R)Sj|J=>V3x=C z4{*Md@{h$VzW2X??tcOA9ss~tjru$r0H_2H%x*LDN^Mu)arZ z8Ld|P*}#J1s|Bz<6VJfotYV}_cgdVk!BNFRhkY3_iHR%+xM|&>4s=jCc%WCOdU

    iPt9zYngL428*qZ$wz%yue#kfs zxx1!XNscM8m0tak)1`Ix&im}s2zviC*EF;+@cxjpaJT=vOYh%oyTl-%Ri4+Xq=& zpUk%_^OX+v*NZM+JKv|VmvUbJzO4}8VZIA!Mt3cq zkJ^_9vzu$P*CT_7<;{)P+vDB!jDpA0$UWWdJukP9JG-9q-DkVBnXZpVk&eE*#>>SJ zSX*8mI9+A3ZX>uoAgLig$So5%Fd!4dT%cS$P!gbD406EJQU2I|F^0LoxiP3o!1g%E zg=4}(v5c2r0_xpgSIU|APuioPW)H8+izmS->SLg0kF14aB`}crIk+nGNw)+GevHVb*y27?d{VjXjP;U6ev?jMM#VjYTqH451)bKj7+OsuW1 zt#=a2+|`YJ32QrP3A0qb&BsdND*%X@!6H1rX9!rin-M_St@@my6lDp{n|+)PsM^yW zpzIe+!gGYnHMZYpV~ur~L}%U3D+Tw&hUMkRK`$jK=AS+lphcF8)8#& zDCX=R(`7$7W83J5$R{yVVtKOx5``7uB^7ODLg+Tw;ez6FuS*V2ATB>_Jn^C{8|W)(cn zTD;kJ?o%ZSyWM)G-SwGCj}{J=aPK_l*(2O|aX2_<^T7ERTppH~CD!iDLk&A)<^wwc z$nqVFWgO2(=7VlCoi<#H%T;02mfFGKwlH(~IZ0!yK5qH87%j^`1%TFTFS#FW>zrE?&RI;tL}v z<`)m~2Ar>~%9Qb$T*Kw>pxjI_`lDSYZcbYiaAr|u6`P}T2rj7@T>1oq7!PI5_ujG> zDz=`P8;!uJ@or_Ic9IfC9Acb9?|0s_kJnKn9L&%?Z2K4*dq6$l+X;N2o}}NCSz*Nc zX-62@VGc=DNl1Jeolcc89l=#wpl}vlDfeOVqK6VRjNifeZ>JyGnAIc$oc;q82E_py#+>XG$~7mj zku5H%NIBba73Ay7^nU*I!Q`l|MQv875c`8ASK1XT9V05_jP9Ns?4T(mhYN&wKPZ*dHPS=gl7*3zjSys zoKIOGWM<&6OSp5Yg|26xSRl-&`>M`glBE*m>ILTql3PFc>bP#p z#_*KYhoBMs3%n$Go+0268Q;3I{c3RLrOw>lUkTP_Pg=&l)_`F{_V@@)jZ{_i1$iN2 z*>x zeLeI<@%%we*DS`X?Zi`0$CWH%&^LD|iy>QnyuT2nnyB9jZ3yU1Fg#VXUVr`i@S+Z% z1)ZsXbgH2mJ8NB_%*T`L-T5}G2E)4?&IK*`X!^cJS(_P@VKAhY)=$&5e$f;kTY{lO zTvq?;G=p5>^pQV6G$PHFtbfeB+V_0@Lhbfu7)74(SFG?POmcFf9FRZ_`AC(0+;4gJO>*|f%b&RW;+CbFo4cbk!OWsYbSwxhE9wJ#vR2lV#FdC`0{89ezUQ!)jxYVCb70B_03 zO?FrNfF_gKZVlC}t*xo`Wa37BWHr4uxtYv|0oNE~MX+r{u@Ps>4=EcjQ#kQeKR~#H ztLhMb9B&`-?BDZencOObcde4+2r0OeF@ug)BWf3a9(9Z(C3pT5aTFALy$YGOIgqZg zayehkiEe@l6MbJ3DVo7sp0Bm{nlyBl*2>G1d91KLoG?u*AnA;UBP!XmEtg`TneD#p z#WrG$B|^7hof`a<9neEqWx~1vl~P1+r$m+QM^ZmXjqot~Ag9MxweW_LjXh-P#?{aT z6n#XoK9aIIkIuZ$@CYdZ7Jcg3usj(q-^x413)X3Ux`Clm<#zk!jfDhDjbz_iyILz- z1)E|?_7XGNEiw7kfygyN$0!-ySZ5@IzpVJM+U+v9hw=Hm)Drhro63u(tKR@`aE`6; z!iCrHbCgypW)bFRNQjfe2qAelbjP?yi z!YpAdV)~q+H04~}yQou${+-bNaW%%xN>j7$a&}k{yOkbwrYkZ=KtfxJ>4EA8KxNaa zH&D^k-u6I{P^b)&vKFv{dZ|X^+u}xh38vBh-@?K@46&YJTzZrI(T84`rM759%rP%v zb(%Acavh-}b12$hsD8~ld>Z<^g%~9Ifs>ra8WmLCdc*f5iUqVhSUy4=lr$pv{zA- znD<7@2Cv+^Y_X4ieC$1VdKR%Vt^n;$@uIddB;_-RWa$8{BijIq4Dy0;L$eK0U1I*G zsV>fhx?A~CO4ONxSFx;auF-4JI1v-Mr(Wldj z7MQ=zlShbm2@~$Y0#`dLJRVA%i1J}N&{pfS6|#*O6hCHRV|#&NRE5z7D-XVm*6{HW zfL|MJj&UV2RGa0U`gNi7x9FNy?^2Fv!5mp~cBcflC0?SnY?bQx#RHQ_ITWJpN9)6_ z$1&9Z*m#ca`{YNMe08F;qlLrWk->SF^v$kyrPBe43{zT{Jv8JNMQ6_e`|_GtjQBBx z;@ez++rWC7nl3xEU7GD+G5+G$A~ND>Q?ZYN+uh^G{S_3BIPgWXc6SgZ+nR4cNI^9m z?V@{mD&mo5v5J)gZL897={7qo2g@3{91OT}S1Vs*5sY$a@&o3fh_qy0I{XL!;K{MMB`jHZNc@-yMzMrkua>?f$DJmQ^V!2a4B|Y|Gt!W` zs2S#LL6F)ouRz<#c|?ioA@Lzprgye3_ONLQo+YHbX0!&p+Ri%tm`|H3Z{FKlYPWSf zU8y$gK)=~Y(R7$6dk7VnwQmt4i8M_;vo<~RvyMK z>z|=S5UI@MiS_)Vj#ZX<16d9te#e>;{W@7QpKzAsW-GIM`)1gKM%PnX(U*xDzb9E` zvw~bnG4)BE(peqlAlruD?RDZzUwq_YGB&3Hzgv(@Jjo%+$P-q73NM(_mAhryZEB?NOn%U#*@qa-E6X6&3?y8sKEp=ie$tJ6}+fVL$9Hv*t{f%wp>(iSvl<) z*^nC#+wz^%12d@ESzE^~=AxocHuQMZHMN1Z->ruYu-8`Mn_c{|r6uZj+OpO}yGYg2^(rM_@6+9U3AyW>V~se)C4VV;uT zo0jzL*&lbMzglK00?AHJY_(sUKq~N7!V%ReuV_}AS&Q@PbU!TD6 z7~=D-XOa<1$;Qn2v@I*qSp%`qW^uu4uA$1=oEhYG`bSjaHX&@BFRkBwUO>f&t*EO| z2_bG2yQHSqbxb*_%^R3VRxOt7JNbHJR997neexk@}mhXyLlNt zLR6E77VY!-n!X$3P?~I0rL)aI!8(1oQ!G_FEc-GsfjF2!1^H^qTv(Y)<+jaOfQe1m z$9c30e9oy5_KG&ys`lwj1VfdCH08+Wb1m!&Vowph9sV-SiJ~HqYuPfUrdM>D<8KqS z4R1b@%b+nPwbr6ZK2Xb>&$sRUkB+?3d_O=e|+u?1lJ>$RlyX5*WFyUOb5M* ziyDClG%&j{LZe~1^K!Od3mJa>4scwA zp0e1L7qSui+~wE!BBK|^=`*|l7{Lg;p1mst1mra;a262;myzN{O2jz>%gR~Fo~oNE z!Yz4)CugHmQ}Ks%M~r9>3C)ME*VfMO+f_>9VgAX@hWa{H>Sk0a;#+8x$8^iM0t4R| zB+bQ9qV6HH2-19rszlQgzgUK| z#r6rKEOK`zb3z#PR3cL241c5L8<>fUVJ82Y22r8F*i9ersNvw90ftZw^?D?v@`AHm zIY82AEdQupqXitY7JD@a$mtseb8u1pEA3K z%V6LbrAt9IuWW8BV9UtgT;O}MG3UFMd@z~qXaUmxm_4%2`>o&?ONXdfJCG>QWxvoM z>#JeE)}`d^`LLjx+NP=MaOKc;eM);CDY$LL?R&Wv5DR-AO@?} zveOI|6LM3KsB}-*_YwjaI}a!YEr=z__5(a(@AQt!NG%SZxV3F@(^lYDCi1*oEn6Nm z%H|m6Y+FkzzPegOm??<(x+0kj;IuG_pWj}U=qRC|CRfaph`;JHxR><5ody#}H&WYu zK@p&f=HHTNh)GB|1XE@x2cK9d6F`VOb2G^61>9tYdJ`6e7dzP{D(UNr^;bhFl@UL@ ztj!Au3hqyP+(*j^9M3Eeg`$tdVi(yr`2?s;dBdqA$6vX4tCleHI3hDni$kOi^hfI` zNpH)HzCHWzdBymcQ7R0J6pZ=CpOH$ zvUp~)b?RVlZmBQdQody&tu9Qahkrl>BxTi(Keg6&MZ5H|3BVz9vzPJ7tUlvtsW*aB zCFLj~w=Q|>y!Ku?0N7}XXN{7TL6Eb>-gwI?nC?}9?8SchC1{SMUEd>mzHR9nE? z$=18`nD$OExpFkUY4~$*>wPQ}ghgx12u#bTe2!tv>3odZMiln4bdO<8+_R44yQqCk z(A`H?;^n8Cgt>gsox6o;CK||%tr(^D(uh-o6}&gBPywnO!EX8z>s|u3p`-7i%hbe` zV^0<{kNrL73Tz?;v}7UfVgFEo7F{V_GiMpS4yL zR%uZNtKHN?S{#3@cgi%b5uDS{QT8~g`UF)M)-~H~)|*7YjR?FQry0caEuzr2u@>49 z@UBo{zKswlyxhl#M;?^#Wr)SKN`y_Lc{UY+sJ=H8#qVl8j;g|*26X2&>9B^96LyuV zX6!axPnU14uq>Ug<e+ItH7RkCW!J`EoUF1m7f z^qa!5V$?~IUC7bqBRNdxQ*HyD;VcQFG8i@{>xs%9bMc!MQ4-^EC;m!oX^c2$QQuG4 z|BBO{D2@TbxP=Od)=ezU)&va}veRv*C=2EH;XNs6nZqZ7rjE={Rw+@*8|d|iN9Rc zsH+<&FZ9}qzRAiCnqFQ|O=GI3fY2#qg%^%Etx!uZes(#{Jx`5mad9HO9{u_A!Tgl> zdP<=Wt$5QNQIvQIlhxAuz)PRX#i>r(HIO;_y(~D1RLBuARSm+Yb0YfbjNPir9th{} zmU0Q`ciM4rCyNRmNard>Ll0QKii-`@YhJD0z?irE7!FaLK52b&bR6^QAU|j8xaSMw zx7LMrywQegP-)w7_se;OoKj|=*K>P(>SsJOn{zi<5mp+UxcP;ifZQPLG(_1I32RI` zddj%8+(%;Z)zQB(?roO1tKm5Z6o+qv()7ltGFtMT>#|aw9?Xu=MOOp|ZL|a=te4;O z_ra>qoPaMh8xujS?Pyw^?>dT1@}|)DkqfA+{*^z9~r<}%$Rugn3o3zBbSCZG0 z6L+)pvR1AAI4X>QFrfrj!S<#}K^~c{RGsRTaDTLTgG_A778)kAaFIJ?1v^S+`eM!@ zJLn)ft-P^y_|bt_a~j5SJ!;j3QYf#^`yBUFNp!Q+|EdLRgC_j+#QWc|O3<8|@MS>E zSrZHh2>wsZ+0n@z5Oe+~NU5}Hu||*NeW?o7LAK#6ZWeKl1OgjW4^|u0Iof!J7D-GL z)#TE}L-bU;fkIyIQ*AOip4sBIccwqxJvr-cEIs+q#5q}5YE>zf@$2(Y-vrqt7mOlo zwa9^2Vm2@8XT}(!;iZJc;n1GP%p9aPI`N(Ig!$gh6&dVW=0$V=!d8~+tc3h~LNUSk z3zvs5^wFy?mKFR{l&d&}Urcg`Uu|8``G&K}gjLk5qX}omwuC~FHDvH*L6nY_fN=8A zB0pt95U4P}m>XBX>Muj6|Lis!p&X0n#2!cU#x8 zgO6?E;XVD>Fv;$HGX3^NfxnJzMoMC9vsQWyXXQ4>YtRIwRV)5u=>xcOkYG;xQs;OA3#a&rd<8%h$$mpd-A%;Eo)ZV zfvhZdo##`PU*hj6Hb9n=*?GrhD|SY$mutm7Z75-f$J?AKcg;)F;LL#Hs~S$y-LR^c z>-g$)=*%zgoH@tk^aWpB8lt6a3S2|{_ceg|ETU8m*#Dq_^Jfpl?|BC^V{79-pZ`od zoU2R6tO{Xv{-P4;Y>NKGIZ>5f$+BD+blzCLUjKb4jJu`;%d;YF#KuwZ92pu~9tnfk z1{X=LG^sgJw@waB_(XT>PBi}7q;{e)0;qwVIQ#mSkMASi;YkA|gP^F8*l0rIzE+ib zC@~MB8A@X%=ePHwB0x+G!c2y-sjt*{uQ{tMzt0RUMXSfw=KV-? zBH^d6I&}JiI|-fD*=BESI@zUjr8{`%(P1-{_G=9I=R=QzDfH>Rri|&JA}CtQSbN*o z9|tPe*dK!^J_U2fZa8ROhW@T8SCtxb>s6{(7a*53r<=pO>*LSAA zULQY!HqqU__dzm~qO5-zI`SLR%issX3jZY!_eF{dl?|j2_@|;gxSM5o8uSvO^5Ht# zG>}yHX~GMdHX;#&{5;TF)DDbYjN{^Vui2yxsU)jue4xp;LH;fRJrCo^MK+AJZM*=f z;-@hiAxeu2rcf3HaRJoPi)#i#h+5A?mDg5L?;euR6izYu2*n~Pa7S`!VK&p4JB(i` zpz^97O)hCq>`V;01f$Eu$f3risG-Z7uQ{^GadEy5GR(!X)`Uw*;L8N*+BYj99mmo~ zdjQAH3OQ;@QJq{E90?6pU)Gpw3Bw2vk?u*4w?waP@7e_J&VOf;{(|?ChbtIvP(PI< z53N%fYXxuLJu+&yStOM8qvCR!o{>z<#q`T)mG*HLgY=}uV59)6&t|0Qm9-mln#7J1 ztWMC&XO;~-F7bQlz2}$Cm(I)12ya(qnjfpy81RdWhdY_N?G9r2@`DHqiE$Z>wi76c z2+!4NbPoAXQrRMQ>fz;E0{*`&iJPBO%Z})KDMIZXp!2BJLr{vedd0gnMmTw86zF+2 zf0>x_@fkJ@eKTmw%Yi?%x=|)~=8uZ(Y3;>U-H=ID1X@Zwa5FLANSn2q$dH4FGKKUl zQKu6U9MlsD7{3JnrmjZICB)bZOkuc(32%>W*;;w$@xy$U1>2U)I*Z_VXANzq9X3?K znnL2Z{b>>eYFiX0+u z7a45z1%dwP9DNy04tgr`*@`e%V4d;0EJ;_T=UA25*jX=Gr1?yohUOlet1J67_6PIb z8Cq*s9z_%^^MI$T^avxy;G#(E=kI!ONSMa#D~-)^$RV_eBJ-E9n79t=xflVp!%70w zo|~D+64B`1RUbnJe z*L;!B=-mc2)}3xHy;?Tt#Jd6w0LIB@N_iwgwXXgZClZymDl7P-YYNS&3?S%8Q$>!HXBHx-Y)F{Bsy_%MhCiO zNGI0x{#OUTZK0tT2nhtlY7PWM^zYgHe{GZbv!m$Wn`QplPqd%4YO~7r&pb28CR43r zb%O95h$o1Lyk5;uZy*ia4Y9_qj~|YW!>^`xeB@7*$LyFN z@PrSXolLa`UYf6>2aRuIWT;|Gv0aB+MbNO5Od#Ow+koa-FB-PtU^Om0b2M?h+|EsP zalT;P#2!0OGP`o>>q<4MxMZ2rN)Ji{?rqI?>dM`4`#$CKqA9S7@(BpsPe@lUk6V^B z_lPe>;3toFU;X-~rfTN`Y=>b)SfLm%2YRXYl(#Iw;qV}S);Z`s zj0?SXj(9c4`3DIq?qc%*a5s3V0&a$7Y`P@koy>85hbq)nHXWN~2)O!f!^^qdpoISH zK7u{#eFr_wC#*U%sp+9pq7hEx3Z6$ldIUHA5v`R`CeZDHR=iI#Usj@0B;vhkzuW~A zzh+9%%$RCNGQc+wonq-09+8Oi3(h@TqwQGZhF+EKg2x->@k7u^tAi*1VpM{TyA38r zlqQQIhS1MIl1#$>w11%9NhzsZ=M~|qo|7M$A{ieMeXN2_3@HTuisL^5To-)@N*^s7 zw5Aj`atJT3b@Cl}NKaj5<~fA^8>p>U#5ITb>=fSH=nN>npZ3?qLR zX?hZIF6>)@iyN8){faiQ{L+=^CGq$O2o6^{spD9|WiG+vI#A~+@ zYhEGBlNNlNlR-+Nr{@{A9>9T;~W^ScVih}};}nDLDFVwMiu z%VtA%#$PF3cx0qjz2Ty6_5GyA48OcNXH-B`dD^e${ARY4T}FSG#-us8XSV6O4ND9}(RLOhYWBRvi%5@oAh(`aTqq?YM>ig<$Z(Y< z8fTVjNisf`xxc5`Z8#kYG02Idl(LyvTrx#cF~v3@iMGYeLOdb&8PCMHv=u(~Oc?uh zja@#Jm=!+3-+K$$&z5-hUN~N;#4yKYF*vcpOE^9uc)yot{CRDpc4T~4g(;-_GfMAi zI5Ee$X|JKo+}UyIEDKeoSnn)J88uaU>ip8RC2GZt@+tlnQ z|D=r%sE+;Tb=h1IPZq_qxc`u7*?-@Xcq&Yc<56$DsW|DemP&{6xnuVVyfKq}hIEY5^km}6 zoje@1je>?fLnKEu&+x?=XPRP|q!uMnqKkQ-53YTo#bStokBvUxH$pL-RWn{6C5py} zGT$Nei^dl+U;j>;od}zXB&EqfWvrX=UqNO;5ydSyT=tr+c@^@lzff~HGfhznu2)2g zU0KD;InNk(M?9?xP)=XdBX~|i&qO?BRC`z(-@G&#OLPdy8Kh3`WGy$>;&I5)X<;*0(;_>8GJGNng8x2x~*~Dr#=MGDF z+3Gj4T4gae{q}Wl>dNHpnWq99b|EJmxC~|zs*bOtQQ4m^!mc@(qYHs-17=HBd)l@= zDgyV#Pm~adeUO_Xr|vMtBdCmP;&Rss`7p*gIl)P$c0iT)rtAYQaW~fYldPZN#i^{^ z8}NS*eRWz(=3D_zMFK3jL;6pr>f71<@oA6DDLs<#17P1dx3dD_trEM)cR#f&p(1oO z9Mf4fw#I#|{Nx`);tR1LRJE;4j?UhUjm;|!ET;td*HuOX)TUT$=Ty6mB%Uj4Ss#X2 z@eWC~8~h{perFQdVam6_U$DBVN!X~>1yRv63v61*^OXi^9-OV2*WBJV z0*H8~en}#5f~fL4;}7z=h-o?9E=`Y~W+UdXzQo=XHY4<4SCYRKzS=t79$AjsxMEjq z&E<*lTTWljOzRv3$V%2Mj`lKwk7=lb^>ktH;45|2B{3ow9huGelYVAm{%mgPnA|}b zh+krq6)wVV0J)lnSr0EJ-}(3$3=fpIW#|~Ic&U^Ds}2`TEEDAgCjN|SZ#WFXvq*(@ zjIm=N!9`yUz1w<7<#UB6`<&cyYb{4h6B~2V)6D7xgX3EO6@AKO9qwH4Md=t~&^ZR) zKBqbV{B2C6g+@tqYKq_YX(|MgHsXm|cGK=~D0@rSR^12iUI1VaRM7wTTN(f@_0Nx= z|L^4gcxS`k0)M|+;13-L$j?6#(E9)JqJh7OfA7HmH!&MvRGx zJ%G;txo`b%mA{we{#ykD<9}8DXOZsTL*gOA!EjImI;qQfw|5i`}yqy4` z@c&!p__xB};l_U}0MY$X_}}2;-_*aORR5-eG5o3iUooq{1^yld{aaw40fzy^ AjQ{`u literal 0 HcmV?d00001 diff --git a/yfaq/tables/micro_no_urls.xlsx b/yfaq/tables/micro_no_urls.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..aa724ba6d92422d56e9cfc039e9bc12989f53cc1 GIT binary patch literal 9455 zcmZ{K1yo#1)-~?#4#5c;oIr55;2NC9-QC?axI?hu?v~*0&^QElcYgBT%w!(_eBG;V zty^7ZuX}e@*V%PW$w`4jV1R&tz`Pbd5Hj*_bl zz+Q{N#nPfIVa%$V38DAIJ?#BlG3+6e40>SCGXY0_6*Nq!6xk$s7`T5!77%RlTO@N= zfr|OVgQsj+1ZCQyk$H$oEA4y?vKo}EtL0Lz?n%wgV-z4ce`?YV8WIRrJ#cHr3WVy6 zNF~JjE=jWl?_1)hL3#s90FWd$PuXQ-5RNgU!6vbS^4H91m0DBC#6x5!`XorB$`1I9 zf4_tqsv8SH*3#>FpN!CjM}hw9=i(l5f`{1J^unwz08CpE6ukp2b$HcBYn3)bnia3Q zIATv^R*9lkb!rzJu4JcA*{f=AXp)*FQdx$c08a?dfk+%ppV{WrBcaSA;HBrrc-kRL zd`ZpM)Esn-2vZ26xC%_X?pKBhGS>vJzzsp>h&8~?hnSaPXN8gRlLfjfeI&QKYgt^EY!4Fx|A~jl)IWV5i+wBCz7(#s_=)_5GGHk2j|^>v*-Ne@!p&Ur64zN4iw*YfzOFjIUy zC%Zn~1XZzEc4J7R!;t`}1-mmAAtl)G(nOFN=tt(P4r}npJW0hd?g8>oMuZ(TPj_FL zXnJJ?@3nTZVEmgDXKOoieQRs;-}Cd|1ex_Pp$MNm!ByR8IH5_>#M;vYegR&B2h`R} zTS%BRm_FU0!pacBJ()KjW!Y*LCk=K{SWDgvPcS4vN)1Dq*vX>I7qI_YoG72xW+l%scrNkH z6lz*EMc*7VzpRY^us7so07+&F*8_3eoPUht{g$)1yIn}SkfT{F<`=rS!ov4<@B4vF z;aqy0V;jW%5}6|{2t!=BA$`1zmteNDH~XqJv)mcuUN(bs>;=h-9Zcu@8~bGc>2;6KK!OAGF8)hV;(JVbw^drYf#+S&s-;h5Hzpe zcYJaw;h5#(5Gpokz;!QH-S!ve>H%fD!tPq?|Q@6z@ zpPlpM8@x)8m7Rg<`$6WV#~#4r6a$xd%O(e$O#EcmOprf+RQzt;fy%7 zXwF?2J$V#GKS{;Zuc$sTJsq1m?{6#^*5G?_S5TQ99I<+lIhRiV%v;!EzRYU5w|Bns zo>nDZnR#$qo=bZNYU`lA5d7`V<@xOBRN0Q#AwNn>+vrLR-*Vsbs`Z38b*$9w=5`uc z;PEcTvF3!qJFn;1CDfy+U3$|4N3UTo>sytCRbSke)8VGc)6&(*dPNfP7W2l?SyI)u zvd##lpvP`*hjBH%qwSGB!dtexFhyd?@N$n}_eHu3=OvW}H@@9y zI|8@E2rFVhn?Z9Ce_P7vx;tnU{D4VAL+WyGm@?fs;h~e z+G+pAOc+9ih3daLiu}7HfXAL@* zuG_t=_6C?B^^Q5PJbeYC|9L_Lr#uS1Ub%^z2;VA|fC2Q(rU)a3DOcZNRIq9VGhu}9 zMzT22wpamOR<-2AIPdQ>KQPUPF}ZdoZn4@o!GQpqNgxahrbBSlM$(yxX0n(Jie}xr z4R>c?;_)*vB^sw>lwjs-Aq7q`z6PLz)26cYZyM>!L5+tAG$GRQ=$_S$jo7Z^b=4@L ziAMYkMDO3cGm6-rtNR0`8ByA+<7);L;!o;5&@h^f3g zqZ9=?cqNg^1VRd{FWVguBPKPF&9g=mm?o)bgp6H)duc)uZZNLK+@A+DkRz&e?|#Ze zS@n;KW-`f=e6>&{iID)KlxiG8+qST2PZgL_sOD5zww`!xofU0tK;5SL-O4Th+Ippp zm_n}m5rKm+=*p#4OgI9z840UTe~A3GuXdMBg|6D%&pR`y7UzMD`EeyMjyVT>;S+5X zD4?kXP8BGbo(nfyGh+@e1C0Mu8F|D!zcEK^2d>=<^aH*g^PzPBD!xfwkTXS|JIH;P z9}}($-W|HA;ONBJy>oLt;VhpXIV_CNCfJ&T zE%y~jgi9KEHb@k$&(usL@)!7SaWuEDeH5LsRJ7Ef0kP!Spi$;NQ&*AE=Wwq-p@8;@ zbnb!m?Px>3f)x2|zF%_)+!V_7VN&*2n;47xLD5E&o}^|$vlrti&HfL3rs)%loF>Z z0p`y9%bl5`LTN3NK&#ER&MGQx`EI7#?B%>!wS${ibor%xl@`C~sOO?R>b|1T4Uagj z-6G1fj@#+vfYFn{vfV;wg*06DsNB@~X>JH2RdHFxbE^HLe)62nFl#$uZsw|+`-*B! z!wD8LatGg1t7fY!wJJxC^@}SR-!mt!CwNek4kZY>dX0Mj72WU^o%W_1UdPk(GbK}^ zH(!#z4k4e@sHF=^SMVB$S(78)MLWFSBm^_A6;_PVzSIb z{9w;e(H^|RvFl)zZNry!`Nr~A3DM=6o+Y$ZX_>B*olseSCgLi$K{Dexoyl+zqtz5oTY^ zlZ4fAvpnt$+Kg|eSRaMvRP;~0g1`WM8PnaDT=|O4ho*)D2x@$585r%9@4|Pmk6?eb zUvmxD&>?M4Fy5?t835d1Zis9IUoiGluc<7s<9xKj4Q+7xB+Dfw(FezqWsL_2)MjWL z#THAw*gcqFgbd;~@c&7=9_l=r$Sdi^ucZIpzPw672R(fYfc@XqUoyut4k+8rj}mm^ z88)&a1y4$vgW~@#IRvi@8V8uOY=}HEN^*U)>?Z;fnRIc&(dXSaWu5mE+f8AVvKkm# zz@OGEy}%Pod~kOq2d7_&YhwH%7Bengw!9Z13r|G6KB3>Qi9iIk01_`digqF>De?k} zGk`a`=n@7OGsMDSI($>WkYAlf39DIBuPb2VpxGpZS)?Fn|CjV-qr{ewb1lwgfo@;+ z-tv)3ATY4YfQu`F)!xmVE_B+Gp32UpJgXs%%b;GRpi|EkS1YcKY_Bv<>o|w5g#Gjz zD6wx2;x0$$m%y5`_xh}sOO`$KoyOd!^H7L*CZWA|v%bf8TXn+3*EM&1GQo(C+gf45 zZ0H%<7aV|}iM>=UwuMedKPimN%#V9iVV#B(sdx=%dk^c38)M8a=1b8`ttIFQL-O!m z5Si~l|4BRK8D(YutHSIi{txZ;CVF-NLq!KWQ!8Wp-|8|^T~l$h5zULQqdU<#Xg-Wk z5LEGV6A~BZyZ9;^ZikM0t8%L+y%`2_jXTD`JKaylah$crb)rs zowi%W4(zk$7%6$ajGK18FT@#_q?YGyDM{7aJ8i1v?pch__TTD4*QPYGZf1K~3;X(- z)h^!8Wf}IEbE-=y|AKl}`rOwn&!e-?w)5?Mbi5ZIce$PXO|D>l9oGqk?PU0(#$&~= z_+@W~(b`5%7VLPh4&p3Pc=g8(%GCZ6Fq2sP@!P}sFX@D2hlrQ)f#6OL5^ZRoG1$2x zi74$mX>GtE^$RB;ESQ#-CDx$|smrzl7r>NcfvEmdRKxt}EeTfc z1pr&ZCdHI3FpwnYG~4m4vk6uN`U_?uQZPr5jdgC#$>2H?UNfe2yQ@p`iLqO?-p8Mr zKPJ`ViIfBxWG*=Wmu~#mwJme``;+QsXwJ-_&t(y#Wo#Uy&=|}M?>+?6 z;J71`O|sOrFOp1DBqSEo!{M9kXoH0}u{|}NCrvv?RzKFZ4rZqt;|Lw(Y63aN3%ez zpD&WjJI4rrzwHSZFR6D-`^Gl6cF2s4LqIWtZkb=k54149b!-vhK2 zQ3$v%!jcL|06yO=B;i3Bcw75p5O$$C;`2DUazJ{JV)AhzJF!UE5MCS~!n-3r2BQ_u zd!0~CKdIpzV?T4wTeUEa)0CKyrq(rpJ91jocL-lNYs*RMOY#fr&KFpJTo5IyrnvWi z2=dwbp}bQPJC3t+WIz*!!d_+Z&|^(L`hi-Gx42ckM~0(`FO`heiCv~x@p5K_^IMd< zv$U|A;Xshj5B&bvyfl~d7AwPn`l36@IwFuBtWJORpBr*2RW51DIXKL!U|<7%?ABZ# z?~+R|h0m*8KAZh6A8vFn3K7FOBt$%c6p2al!=Jjr_BxkJ{0DA~xtjKPo-h(_gZyPTxD}B^um{@B-1VJ+zuZ!qZ?hw80`|(7X=;S? zH#4d~oyn?Guh48gN;3cz?wQ*=QT4$@>1~6&#VsepFRnI*NH z2iFY4VYFGR@gqjZ48ZHIs@RqqK1n|~q1uBmJEcJg*0I`ZLdcLZJNF>xNT(&~`dvHD zMZ8)Olmpg=LMw(>-!sqt)OHpCX`$i7VW!YKl@q3 zjJePF(yXeJAT=SF(fFqoUKhD+cVv}NqDUQnR_)&4BA%Z86UA*5so}<1t6E;&pAmty%FStu5$*t88X| zNf!*cD2PwfRyp*e1sM0jQ)O+h4uNO#1h7SXKKtdHg&Kwu5Nz-YtQnC9!(){*>VD18 z0*ZTeBzx!aT3~+LlmDGUOHzQWtY*SS1s4tqI-K6*vUR98 z-Z?ty3XmDSY2Y5sFSaO?PP-uP>lvXM<$+U#uN2+(NXX>FAZCsx>z|8H=nv_-P0vDU zVU*Y?ji2sbU6jSEW}P+l&2MHu%ZSgtekU#zckFZ%iZysjYW`hd>^%@apVTP3|IykB zi@!gUN<>AyGV0yL(3)@vs)j7lXE3EbB@p}^%n0;!C=wOc2UEazcwJ^dNN^zuWF=P2 zIV^RxEQzEsQhud6Zxmqx2Wvzq<^9vo7DxT1LgzFe7rB+m=G34LOHaQr1Vev}H6?dA zsznA^QQ=aFqC}H2R21r@5OtD8NwC%+#><+f4I(@vH_!3gx=}9A{qZMK1%VpQ32Di- z)oPg~{Kd;GlZEl`k1wbr!gF1>FePjn3^HLNfR6OtD7#Kqt+IphNF~Ce(6+DCb zr?SJj7gef!jruF#{~h`NEvQWZmVm#nf9dHXb(v_OFi!ggt!R5g6gu}vd1@K^LVn;; zed%&-QD5k%szO}%?I%`*Aac4%=BlY1R zbzJ0`XBS@Hw}dyiyeo1Av%4K0eu&yrXJD`%!`Kv zIUx||E1XqrnZ|R~VOi;QdPp&5EuI$NOM(N108{yn11Z5MY({&FEx>rRL;F;x_sXr! zYAoeq2z36YOTifS;967GxK|MzGij)`g{@*+jMjW7`BFRj-kYXfa1vw&6;=VW)Hu{@(7B&ya&qagooNu}&SCUA43>cEm`g|*W#B#a zPdQZh{?Z-3R<~!2Hn-=kt@WDtV7@FKH;406D)4p0^nj1+Lnpj12Wg+jvp#ot-rY*E zXz$;ydOcpw>9jL}Cn9;A&BU)}eR4g!GWPa(nFm?Law+P8W~D@1Chgnx>C;UU0KpBr zkVhburp4d{%LkoTl!tUN4@-fad#Aj!j5!V>-FXoIfT@K{_CbCcWGQk3&L-M^cD>tV z)QVDy!#FO$Xk9;d6N!nJdEht`&eA$gkWvwS$V&LV*)dB9JCcMT#^CYUhj&ob?g=W7 z&0?Ni6vQ+R(YZ+9M3WG9HV zW>OR2v-N(Mish&Zla?fs4b-u1R6^N{VTy7Cjhz&>*OaE+Ki1zB?yWqjGW{X~C(=i` zB{SRe;&6sBK0mM9OaT^3`3Xxlk3XtP=%oKf-pWSohaO5Dkq zbg*1&uj7Nvs9A4>Acxm#gz>4R3u}txh6B8I-~%!H3L%fgHSE^?L;FMfNqe}bvod`J z&=MPQc6MhYU8mJfoJhVGX(k~yjoEqxEdlAiGKJAD_f9%f)J8q5bWPCr!koPEKDlI< zshcLm)($p@PCXc{;7hker^Wy`pR58C@9Kq-F+aaSU7x>xOHLNzj>Wk$wWB~}L|1b+ zp6ZHhvLeV_!nTW%=}O9^#YmbQB8)M#ccD6?uu!kAsNe7jq`$fv1CKCsHz2q-uJ zuEqLBIn-c=1kvdecpL&d^=xdv>V73bI``G|J;^96&(bw{)+QzeXjWlA!9vAY5<{It zr}m%}#ks5s7EwS}N-6EshO>AS48GwEaQLu6j`e`DfXr@bFMHwJK3>q%%jwo;d9ueS z5i*wF(#0@o`Rrw#SXVEw*k)ABa@oRmS@S_Yt$Q6DpflcBe7d0DPIw9)!khXz0S4_% zp_H!UZX3nH%Cr~o{dwVo8LHoGn2XNVX)#wzRri8%xVycvJCu&Qam%7MgS;kp|5j-M zU*_#8Z~uy~|6~A-daH~Zh}g*SAtU&j0i$@s^P2_U)Ghf()vI$Se|7X^f5KG%N)G*< zNBff^`YVeTIaUSN&4dEAwp<9)kXDOCI$0YIqgBA$net^yKP`Yf%+nqGBQ+=I%G2Yj zt@1@Ol~W;#m@!2{D~PBH*C!3K^(DeNZru+#Gn`yfXjoz6)1~{u=--w?dv?i&LL$+E z5+1cfil9yCrwD%;c_PS_Fa>!S{}P=$P~!(*HKOSX5r^rN z%3$cGn^8xGR@0Y5<@iUxi^*NMSUNFS6RUt}AY5BT(jK^^hpt9tuSt;{G!gxNTAb!! zq`#^$T_Z^s6>9#cU-g15D0DyPF9@l(Yj(%wmv9QzLJENTL$@42FoyF-Bw85h%Fa{J zy zsPZK!DQ+hn1t*=l5C&Fyo>jIor<6ewWnFYxu2L`kjiV*&lFQSI9~tl1g%lDun5uvy zQ7^xf_!o!Ex$(h+Oyn$%hnVyHMx-vhGU})NM{9@6UGqUJXT0xgQ#s-S=Hn+52ovSfhX&^0 z)FO(@x8L3dA%f(r8Q8}to+zckt0M%F%SL)YNZe!C8uWwl&eCG;VQ=V5@-S7xZZ_}G zdYuw}zW>^GX(`7*9}~Ub)yUxihwq&S6Lr928RnQrslppI7i`QudKwaKqE`|d z8x!!p8w-YJ2*0EIylS)4m${~6t?u=DasU(z1N{F!$MHH+e|>y>e^>wGRL5I@w}%h@ zHU|Om@r`&L{r@_O@Ye8cj{c8f=Ih_^|IXOI#d({{{)5y0I`v+0{%2eS}y>n0g`)0oG z>Z9EkEXxxotb3Rd`p-PVY3EDej+v#=gL+>HI18#_V8bNIrpUt~0vfZI!Iz4nSh@>U zfKN|eGUbt!=}RWSP_s6=g;-=YXc;%Fl{~$(+P&v!DzdkeN@=&r~# zLaZ_gnw58c-~Ba6@4yI*C5VBk`|OOuu@*GgB-YRYnz?O~8wy!?h#W+p1!+_{jAij3 zS8&7h;*62C^?PYk5W4Xw(0}zU9S|pae%Y8=oYOM~*HHvR??g)*UH8>qr^}RL!>cKY zJP?^vqNr1y-iLtyzBi!kU41YzMNJZ=EX_cGCxqunB!*_dVtekHSne74)_Z3<XIQ zlHdTqJ5Z`?Z*1wn#Q6JM9^Wm~%Z$K(<|(rClx8gkn_JjQQm{(N#@j`1jb9&?|0Ce^ zEG(8EA<7&k+U|JIbmVC4Q`BLU!Yu&;eJLIW)W~?qc-P3Qxg9d?JLnKH7#7peg0gWB{rFx z(~x0?s#qekHKNh!M6j$4w>J?fDcJbdOpq4jPv)WyXZXxAMa4Pk3HT=?!cLm!`yeKo zL5$#mQddi+zesVhu?HI1*Z_a`&;KFFqL&#(`0NF~`cA_cO@b!QfhI_6`5Gdyu0hID z+^o_3*ZOARBJXCq}o9+p&j+USxG;28N3BT8M_P3}_p> z9ThSff1TQTYe>DhcE0+sWojKgw~fU7YF3l##F{^lMSg32(^4U>oDh+hO#|#589Zvu zC$}yhw|FtiJlr(2VeIWDc&TSzwmj6kr)e`O$DOq>Wk$1NLT(->5|2;M!@A7+gvp=Y zg;-V7H!>A(X>~%Egd6H`PIvMWGtM9MzMM{a&Q+KyU_SL-N39s=rj8Sxw&uQl!pN=+ z$fk07-PE?DZ*ZyxLZ-+pC3#Vg#GHiKr1L?YsG5$u%&(StS5mebWOouA4O}{?5M*T? zQHEM|)-c4(pRNxb*q)MRUou6QuSD7|%uYmwbf0^rc%bo6QZh@27CLT+3{cmtju&X8n0 zoEa;LObS-jUMPh-G6|KkMvGfIY1$efH%=iaM?oO~sZvWG>BmLaqqZOm>`(mu zF3|IB`O;y_{~}ezmWxKokvJsH`|r0I#L$J6*jJ+i8k_`SsOt_|L#0-=wb9Da=3Mn`;c$GS%*uJr@9N3&lf$CfO6~hbdZ2avWZOBRm z2^@JmY#EY>`E-G}o*;B;j;tUD55^xwc>+`jEvt!r@@7AAjo2$Pa823f5yC&8YBaTD znMB$BVhpfmH@3sju!L3*pfl~q9{Uhr5W|CI9TT)5%r+P((3m>KHIB&ONB^h--AA-d zyV4AAXS=Tr7a+ z7pTxDio;vfj_{BQegj5uF6uoQh~x9dlXV63(au?oO|kHw=0uwsQFp0qI~W6;NsaC5 zraiR9pope(n-1j42DVvA4WuTWs<`kpDgBf-F5tsGp!!-EK@e3Q#q`m)(tTI9V^#tC ztLQy?JkoGvONQhaHpRmyl4il65+6xW$@C)TnN9eox9(Tb6xb(xePIuc@-1!g=Ffl^ zJ;4;%Ry0rvUcpwoaB~tqq6VnM0}fQOl(t34AD0(N=*x`i4Co2HWh3j0XeGVDir~>F zr9TZs-9BIqpSKc`pqaDk`JvVbN7g?r$i_63rX)^36c|=bjxHKm%wwiwRj)}=Jwz3F zv3hTzBUY~osAm72F+S9fQhK4bw(1Q|L+N*sEJh^mW6)fHM(??|&aV5FAN!?GZ4q|6 zRr%+8Pz48G1eU(%9g_R_7rUd-es^JGF~QNAo8|JL;o>V%I67dF>8tlW?C&EXJ6zn_AaO2DpdHQE*vI<~Dd7&fW_Oc|jahSq+Qe%Sk9ZvW!pT2YpJ8^bhUpy1Pv5pmF5HhrnJ7jkvuby1il_xt-wc%&Ivj%65V@MA|FwG6F#o0b(^L{ybi87^q^I{zOz~|HEogIZYE{Y8OwW0umgh_iW! zG~GLSN!#0Q)zs1(WuDTq`mV48mD#EGgJ47%o;A(L%!y9z9_#Ju@dn^|!w(d>4OL9LUGWIgQ!Q2Z642TE2WE#357C=FyTDo2~B!Vz4;1;x`cK zA3Ady{kA+scMmLCPCX|&n8`#WoTl)h^&ToM?k|;&?(4Yl?Y5%pIeG)`dsmD|-YM3a z@+LZIXLY>XYVEYlbC&9jQw@XexYLm^j1S>xNoz)JmW}tr ztFAQBE7(6JPXLYug&1hTLJ5+D$bUx@*^OjjM8?6Ik#p`WI?9EUh+dyNzhl= ze1dX~O@)xBhH&cj^N|vb?RFjO_Ug}Z_vVir;a<5;Q~Lz*;s^*%=7BR$1iTzE^PF87 zdm6UJY`eCCFr`}-i})V*Y`a}%I;{j2XUifO%{BeOtzqW!(~`!Py`SY#p1%3g zoIVG{5{V!w<`oU_`JXH;%Y5fIxj@LVh{TS?pMbx_h>CW((X^DyG?IHV|Um)B3r>X zjKj2BDogBmU+oAZTbu!j3JD4H;mH&k(;))2SsJG=OQqf%p3Ja9hVfhY|0G=>bpcHT zM0yE`^xtbokPdg$H?TBz_$&FB#`KC`mg(U~2|n`*A6t`rM@pKD67W7H6t5cwXE}G( z2zhLr6#x}U+xQCHAhfxI!_u3>R8LoFR=BDMvL_|<8Y zuv#Say92k5TFgROL<)lse@R_8iSG!x)Zttg>J8)^te&U@EeCZQa&t$rIk*Gq!)B}) zsO()UvK!O64I5MnyY$^~wd32#4oc&-Pjl(NbDS4}5&PvL?sIl&1=W_*8n9WdSoJb= znev=3KqKOrh4nwo`JLkJ)C&{e);{n_haf)hYKIH6qi5<|aT@m}^;5Ol6+55wQJ7c& zPkUA2oJW(Wc#Y=zkLyjFVlA!~O3}=1#2E-f^YPvgSswoA>rfYzRRu5rKo9Z%((YiU zZ*Od*=xA?lZR+q_+9#=NDsDHSdGmGlB)J4HgcAyaDZcmf(_l#uN=YsEVvQE8Gt}gb zN9cWhJZVUTgs+dkf_*IO@bZ%1JH9&m9+}lVB{;X&ey`YxebEvtDbJUA*TJVnoOw-Z zb?Kg(T(i5^u3F)d&GhO}R3El6t&x2<*UwfwFwmlQMLVBu)C=TN7gzoT{i-B8&?5gy z_mF+Bh&Cp{n~$f$Uj8mmu%Vv&jKXdzVoBq<@>jyD594@U6BjFXf_Eozw&*+c=Pk;# z!SCQ^arl$>#|v5+gk;Bv*9k!o&QId)XtEd_+)+f74qbG%5KsoiKOrrdS60P0p^K@@ zcY_uoqy&T#=p1~HkJ(!Gps*)CrR`D{>j~90>p*{?nwt}+ah3kg@iEF8s4uJ&?&Er` zID*{*C*HrX!9jF-1&l^_ ztgp+*IwC`$OYW9D390&(`nopizWflQPXhCc&O^!9X2iq2MVq?2rSfT0x)hnF zw!NLT$+vI1P+)9tj#V4~=pEvP$EsOmox?RH2s4Oxu7Z+-ncU8;I3aqY56ppJd~ZsmB*=jIkb+-& z312sMfbx%LH7zh)S;4a9k>lm;oZ~PUEQ{|ygwWu4Ad^k8)^{wC{H#n&Dq(=fH`~(z zk7#CpX<0a0U8r}-DWuPS;Z%=cASPR4uLd3~Ch{b4#T^SFH~8m=w9*7gxO@ZlxjB;6 z`?(DdoqGixjw5ZTJXh?5)HxMqS3s$$T2s|R7=7gR*<@GMo>qCVpn!*mSEvlHM+lW! zTjQ8-(;g;+A}cEEV!r>z=xHat6-BfwfYI3^5a;iQnQ*d*;am0k+OJ zmRo@w4xQN`cPoV1>UUZmIpT&ONA5_W_)r>BUX$d4gt#S7kNR5LGXc&FH}TnpB%%#$?V%}CSg z8zG#yEE_t7uUvHGBn%|@h4mH+Z9XoF64g*V20R7(?)*^R`yMxmvv*=h6OO`BZTZw| zLq7h2T8_7*O}$r|vzafAjLw-ux>t(C8(NM#; z2Z?$jKrdETfO_ASoJzH8x^gZKiz+zy&;W-G_s55n(re+%YFAl{-^YhLy{lrx2u^Vk zuVsp)Wckt0J>UmjE6a3=^P}y}x5mT{6O1iLg__|oS*a!YoJv-qlIjYv6-4~3bR1z{ zbW^*XQlva_$Ml%TvU8~FOb}xz=882a2%Td#QH$=)<{jeoDHFWk_EwT6cy|+Y?=t%*w}SZ~ z@g<5A-tGgP?t?dm1rs~oko(8++6o1sXR$(-(i!6lx7~8H)Y*dxn>$_&A*qhx$Nik8 z(Z>po#_tx&u#lH&liVqunLr1O9suUoqb}|r$B#$IhZqEn&rcsN2&tk=T5f)3HXk_J z^Xb1%lzX|HEODB#G)6UP-BSX0IS{su56W3+YK057GiyFy$f#4V(d;}+F)k}Svb1-O z@Rs2_j&&zL;*_kmBidzm0i~tZ7=iuL0X9P+tgQ<2+xhiKN7puM(BZr$^u z*Q+_r&Lpb{d1ebK(nvm1a(vn-!oZ%)vyenMm#+9ah{-gL`t#c*EXyXWpm;ahwLnA^ zGG6n9i2-U&wQ21{2Fh(>#~r5}TNLtzwt3eQ=6H zYON3Ooxt_jkO8sclgrgJ3|z-h4L%-L<xWsWm&1U@u9GI}+x6S-`2mge2%kS@ zb%^Zh@I{cA(u4#65dRWW4vuahG4*>oFH~B#SYbx-I#Y#hr&@CoH;Xty0e=@%2U!!; zG2C#B8A(nS)#%*GOZHH+hDKfIU1c&pn$hgKbF4qvH9qBLEIoeL$TMD0Vp%SgenmXc zJ4QAB310DCmFTW#Viq3;F-r{D;Cw>jU}*P!Mm9<-llWF?!c5Qlk_=uA+nl*yK?}!4 zWChu^!uM98^WQe8Ztz( z;7SKd0Q_9cNc0S75*4;5bK|midMw7FA;lz6Rami?aMU$2Bod}b1y$<2(S(JZY>{D< zk1u_#P6jK*F6q9ma%)p9X~CUVUjE?-MgbTbN*?f3ON?-$!lmNhlFZ6cQK*wc)k&5l zz}teEu4|jOi119@y(aJL$GN=@CtpYv1Zuf{N=a<2*GRA6FI{JwEl!p_zoCu^&v)O$ zerMNUlnxg$?#$Saw(oM&j?YbPRmTsr(vC6{QD3OY@Iiiuke+B<2}p7?{q#c}IeEx) zM_%`9^NOW*AScI7$H_!FY5XnC8u3&KYS2{GSj+ zs)plCmz?UQIzBq>Ix~w~$4+tCy}_qvhM39gf)~*L6x2A6qDoaDmx}`aUv8J*g4)d3 z%J{GIzx4Epx^&F4Fiyu6ooGj6G&;{%MOrz>VnNVJL+NVWw}G(F)y23TWvN5f4nilW zaB%V{*yPp(C~_r9O^Ld-a*!g2x*IoN;x9~U#u_33_1xrH7gyds_k??g^)MfVz6gsA zCp7%hs!$Il=S4O{YbfUlcrE-IRL~>tiz_R(oQ7tuz5KXAyQYL11_ypAY`xWhNt0x~ z)NrkjKQi)(0&WH04%HA!5_QS1YoLq6#JODsxb&eYEC`JNVtzRv^#%^lh`ziW_lhW> zQh3O+*K})gg5nT^n*)buF(zY}5q%%FwgJi>-1`#=a$*q9S9t5Xa*fyOxtB>5wL~3ZUs}gqgzcG(|$z= z%;b@_R`$wWl?%MLel+j==>u1MOix2Um*n$ujp@}2)$>#EGlrw}#Z%{W%(liZ&gAnK zI(+HI@CgCb{2^Dk%svOARBodmi-=@xQ0H^>U|7_eBNhI<@}>3+{ddj#5G2TqDr^E4 zY4NDHVDo(!a&j4PUFncOmv9DMMl0i**lQ?h<>g1}J~`BPgQa_XZSJoa?e4ETJDar$ zA$-}N+#N5^sUS8HGXg(uj-2tn9i_`oX3KVZJ={yO>Kxv$dp}>#>vk|hBq4cT%qFa7 ze|EdLG4=6$TL7$Mxqj<~VWUJ_B^}uJ9neb`0N{pS$s>?T(P40b7l17&%0syV!&Bkr z-z)E}Von02x{eZ_Ftw4%KFH4iR-(4xZDSnfHhav*ttllrP2&SiHVyK&k(hZ|hEB8K zt!&~2DHYL2tc7VUPFX`aki-QshEFd(yoavwNK|=l`Qp`0K}_QqlZR9!nvAe7ml|e0 ziL=GRP6L};ac^?QcxY>4&?yxCU5pxbREi$1wCUnw7BvArd;f>&IL_*DDG4H(AYHpA zC6t3$=4f}YxG7-=O)0v=Q-gis{;IQTb1e~gkpapb>CxusmCbGI!0nlDtkR@}Pq_p_ z;RbaRN%C+y<*}BCc3nfmw(Et$nU!T{lgunsV$PGogbvfE&3w`Ilb2-P0y`d z*-|C89N*~#JrQ%P5q=WCh1+?2>Uion>xl4jQD&%Iw!%i7o7>yU&~399Ba-h&noW#L zXR#SWOGJ9CN@cRodyvW!wN(!<-4OJ<0+Kg9rhMOL?x6{_vxm#2R}Voe)anuM(ir05 zlTl#iUB5Ch<>xo79|$mL&CN#Kv%FNMb`pq+>~877Q(couQ3T8{fu%eN;wdbxWXb~L9Nm9L|-`TFSiqebsAK`-XW&!f21c@(SDw_`jBOdCyck3K2 z=nyMH#e$T0)I_0_y@9ufN(i{ zHG@im^d9RO2NKa(UZorIY|YFHFl@s9g2jq)Bu2VP&K<$2iu2i(tfI!*sikz&TP|YJ zu=qx^%cIAQa%@MGg=F?C2RVyHhj_s+Z|6JP6)B$MM95hFD_5hW6?511U%LC3OKiu# zSgl&xt!h5Wr}u0^80$_pm7FgcbP%3Hgz~1zCc>g!D3sE7KJ216TATM9m%T22ut4>n z3wPDsIWOUEt?pSgjqq?V^?=s(Fl}AZVU*Y88Qdu?W!8=yjl(8QY{2AW2*yLck=@J6t?;MWP}zNZQU{&eQF6^GY|z?Zo$F|IITa7YQTYm1X-4>5-8T6xj7dJi-4s<_zcpwbFsf-F6u(q8et(q2WX zBOC9YuVK}?81i{n7}(X%(?|`h+o`YdU>o*=y0GNPS(WH(S(OQ5{ne=J{W9I^!~bK- z5{h-@tdM8PzI3&LO>1$AdXsQja143)L2j#33YfHSqYO=Ti?X=CH8Z%GwVol&-PtL8 z{`DxYtzrZDNRn9q#7?E2TI=Tl| z-T-?7y@R;Gu8g_fCI)FrJP_l@Bc1P(>20UmuK#0xDypePzWeJfrQfpJg`L~EhNERJ37M4o5!_CM-@Jz|| z4k@h&fBra1(iTjijVB^4dd1aHz);C8<9LrBeEu@YbOKJ zII4lY>$bNI?-Lc6#%D`0R|L*o@+ONw{0i=0-TfJm8rs85{=o~iqJ&!Rs%%sO%4Z)} z)wYYJ<|X_~PS0zUh!A(K{T$Hvox%)5a@wX(2OCbTlfe`n(3qVxfeyW?kP_ML{yoI^Zd_!a0&ec`D8}j5VqOAHNUqP4gSeo@<#T2!MsgRPZJKq8>t3_fHX^*Gb69A>%-Fg>uujT3zl}(apVooQ9 z+eoR1Z}E_dh#e=CNnU0(Q@$sgXIR!ts)~UZiX!_s(KmU1bk?DQ8IADP*N&Lxnkrd4MZ0!QH z<;{R+%MpyJPxSRAHxjGWrE85`ws?;&naM75Se!7I$rnh61#fkppcE zqk@JxBO60GdmCE^CPN#0;p6DPz?oSG&Md>XS0*1oNO83(0`24FuuoZ>AZ{doNdbf6eQho)eSS_@0*NDN%(!Z`oEDC)y7~?3=L0 zZBilPP;%%Tp_PQo4<7D1O!C@0eO74`(_7xs@M#k?G#yA}m5&qrP6U@WTX4)f9j}l# z#Q)?}r=@t>1;i-|1nBrrPW5eV|Dv>8=7=rbKycPHGI=4 zHLiwVxOrbI2gGM%!RcyRSRI_aSQ?s^>N$=`@-8Zj`sht@xlZV|8z?-MRx;lVapUci zYSsjXZhem>vciH_$pOZSf{<4zQbHhC>P$L@ZklmelTSQ8owMi_fh5Ked{V0i9*@(@74qw}81Br@_ zGQ&l=4PcgYaq1Ao~7-pgva;EhmAh^WEJj|PpWhP-R~3w+5l?G zJ9!xqZDvsVGBF|G^Dq$t!x-^EFS~BLH;}cVYoqQBiq!%G$AI|1Bj-RZ^{rcZ!qoV#c%mTfJ|96bkpE!R;5B-hP0qS}noc|h2 z^e4)n4!OTksuBJd<$v6Be;WVkSo+(T66wFYnf^rh(?{|*LMF&P2>KKMpU31+gg^IV z{zh=X{tMxMcW3@I{c{=rx2X&6UyuLCqW({SKV{ Date: Thu, 17 Oct 2024 10:41:15 -0400 Subject: [PATCH 2/4] Added new matrix images for 3.2 --- yfaq/mbc_matrix_with_ids.svg | 3 ++- yfaq/mbc_matrix_without_ids.svg | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/yfaq/mbc_matrix_with_ids.svg b/yfaq/mbc_matrix_with_ids.svg index c840efb..42dd8de 100644 --- a/yfaq/mbc_matrix_with_ids.svg +++ b/yfaq/mbc_matrix_with_ids.svg @@ -1 +1,2 @@ -B0036: Capture EvasionB0025:Conditional ExecutionB0001: Debugger DetectionB0002: Debugger EvasionB0003:Dynamic Analysis EvasionB0004: Emulator DetectionB0005: Emulator EvasionB0008: ExecutableCode VirtualizationF0003: HookingB0006: Memory Dump EvasionB0007: Sandbox DetectionF0001: Software PackingB0009:Virtual Machine DetectionB0036.003: MultipleStages of LoadersB0036.001:Memory-only PayloadB0036.002:Encrypted PayloadsB0025.007:Runs as ServiceB0025.002:Environmental KeysB0025.001: Suicide ExitB0025.003:GetVolumeInformationB0025.005:Secure TriggersB0025.008: Deposited KeysB0025.004:Host Fingerprint CheckB0025.006: Token CheckB0001.003: CloseHandleB0001.031:WudfIsAnyDebuggerPresentB0001.025:Software BreakpointsB0001.027: TIB AwareB0001.028:Timing/Delay CheckB0001.024:SetHandleInformationB0001.007: Interrupt 1B0001.029: TLS CallbacksB0001.018: Parent ProcessB0001.009:Memory BreakpointsB0001.026: Stack CanaryB0001.033: Timing/DelayCheck QueryPerformanceCounterB0001.032: Timing/DelayCheck GetTickCountB0001.006: Interrupt 0x2dB0001.017: Page ExceptionBreakpoint DetectionB0001.034: Anti-debuggingInstructionsB0001.015:NtYieldExecution/SwitchToThreadB0001.021: ProcessHeapB0001.037: ProcessEnvironment Block IsDebuggedB0001.001:API Hook DetectionB0001.004:Debugger ArtifactsB0001.012:NtQueryInformationProcessB0001.023:SeDebugPrivilegeB0001.016:OutputDebugStringB0001.008:IsDebuggerPresentB0001.022:RtlAdjustPrivilegeB0001.010:Memory Write WatchingB0001.036: ProcessEnvironment Block NtGlobalFlagB0001.002:CheckRemoteDebuggerPresentB0001.005:Hardware BreakpointsB0001.014:NtSetInformationThreadB0001.013: NtQueryObjectB0001.030:UnhandledExceptionFilterB0001.011:Monitoring ThreadB0001.020: Process JobsB0001.035: Process EnvironmentBlock BeingDebuggedB0001.019:Process Environment BlockB0002.009: Hook InterruptB0002.025: Self-UnmappingB0002.007:Get Base IndirectlyB0002.005:Code Integrity CheckB0002.024: Self-DebuggingB0002.004:Change SizeOfImageB0002.013: Malloc UseB0002.026: Static LinkingB0002.030: Use InterruptsB0002.021:Return ObfuscationB0002.003: Byte StealingB0002.011: InliningB0002.019: Pre-DebugB0002.029: Thread TimeoutB0002.023:Section MisalignmentB0002.028: TamperingB0002.018:Pipeline MisdirectionB0002.002:Break Point ClearingB0002.008: Guard PagesB0002.020:Relocate API CodeB0002.006:Exception MisdirectionB0002.022:RtlAdjustPrivilegeB0002.012: Loop EscapesB0002.014:Modify PE HeaderB0002.015: NanomitesB0002.017:Parallel ThreadsB0002.001:Block InterruptsB0002.016:Obfuscate Library UseB0002.027:Stolen API CodeB0002.010:Import ObfuscationB0003.007:Hook File SystemB0003.001:Alternative ntdll.dllB0003.009: IllusionB0003.004: Demo ModeB0003.008: Hook InterruptB0003.003:Delayed ExecutionB0003.002: Data FloodB0003.006: Encode FileB0003.010: RestartB0003.005: Drop CodeB0004.003: CheckEmulator-related Registry KeysB0004.001: Check forEmulator-related FilesB0004.004: FailedNetwork ConnectionsB0004.002:Check for WINE VersionB0005.004:Extra Loops/Time LocksB0005.001:Different Opcode SetsB0005.002:Undocumented OpcodesB0005.003:Unusual/Undocumented API CallsB0008.001: Multiple VMsF0003.003:Procedure HookingF0003.005:Shadow SDT HookingF0003.001: Import AddressTable (IAT) HookingF0003.002:Inline PatchingF0003.006: Export AddressTable (EAT) HookingF0003.004: System ServiceDispatch Table HookingB0006.010:Hook memory mapping APIsB0006.001:Code Encryption in MemoryB0006.003:Hide virtual memoryB0006.005: TamperingB0006.002:Erase the PE headerB0006.004: SizeOfImageB0006.011: PatchMmGetPhysicalMemoryRangesB0006.006: Guard PagesB0006.008:Feed MisinformationB0006.009:Flow Opcode ObstructionB0006.007:On-the-Fly APIsB0007.006:Screen Resolution TestingB0007.007: Self CheckB0007.008:Timing/Date CheckB0007.005:Product Key/ID TestingB0007.009:Timing/Uptime CheckB0007.001:Check Clipboard DataB0007.003:Human User CheckB0007.002: Check FilesB0007.004:Injected DLL TestingF0001.009: ConfuserF0001.005:Custom CompressionF0001.007: CustomCompression of DataF0001.010: VMProtectF0001.011: ThemidaF0001.001: Nested PackingF0001.004: StandardCompression of DataF0001.003: StandardCompression of CodeF0001.012: ArmadilloF0001.013: ASPackF0001.002:Standard CompressionF0001.006: CustomCompression of CodeF0001.008: UPXB0009.009: Check WindowsB0009.018: Modern SpecsCheck - Processor countB0009.005:Check Registry KeysB0009.006:Check Running ServicesB0009.034: InstructionTesting - CPUIDB0009.020: CheckWindows - Window sizeB0009.012:Human User CheckB0009.019: Modern SpecsCheck - Keyboard layoutB0009.011: HTML5Performance Object CheckB0009.021: CheckWindows - Unique windowsB0009.016: ModernSpecs Check - USB driveB0009.038: InstructionTesting - VPCEXTB0009.029:Instruction TestingB0009.036: InstructionTesting - RDTSCB0009.003: CheckNamed System ObjectsB0009.037: InstructionTesting - VMCPUIDB0009.017: ModernSpecs Check - PrinterB0009.013:Modern Specs CheckB0009.030: InstructionTesting - SIDT (red pill)B0009.007: Check SoftwareB0009.022: CheckWindows - Title barsB0009.032: InstructionTesting - SMSWB0009.033:Instruction Testing - STRB0009.027: Unique Hardware/FirmwareCheck - CPU LocationB0009.031: InstructionTesting - SGDT/SLDT (no pill)B0009.010:Guest Process TestingB0009.001: Check Fileand Directory ArtifactsB0009.025: Unique Hardware/FirmwareCheck - I/O Communication PortB0009.004:Check ProcessesB0009.035:Instruction Testing - INB0009.008:Check Virtual DevicesB0009.026: UniqueHardware/Firmware Check - CPU NameB0009.024: UniqueHardware/Firmware Check - BIOSB0009.015: ModernSpecs Check - Drive sizeB0009.002:Check Memory ArtifactsB0009.028: Unique Hardware/FirmwareCheck - MAC AddressB0009.014: Modern SpecsCheck - Total physical memoryB0009.023: UniqueHardware/Firmware CheckAnti-Behavioral AnalysisB0010: CallGraph Generation EvasionB0045:Data Flow Analysis EvasionB0012: Disassembler EvasionB0032:Executable Code ObfuscationB0034: ExecutableCode OptimizationB0008: ExecutableCode VirtualizationE1027: ObfuscatedFiles or InformationF0001: Software PackingB0010.001:Two-layer Function ReturnB0010.002: Invoke NTDLLSystem Calls via Encoded TableB0045.001:Control DependenceB0045.002: Implicit FlowsB0045.003: ArbitraryMemory CorruptionB0012.001:Argument ObfuscationB0012.002:Conditional MisdirectionB0012.005: VBA StompingB0012.004:Variable RecompositionB0012.003:Value Dependent JumpsB0032.001: API HashingB0032.017: Stack StringsB0032.002: Code InsertionB0032.003:Dead Code InsertionB0032.008:Data Value ObfuscationB0032.014:Interleaving CodeB0032.005: Jump InsertionB0032.004:Fake Code InsertionB0032.009:Entry Point ObfuscationB0032.007:Junk Code InsertionB0032.011: ImportAddress Table ObfuscationB0032.015:Merged Code SectionsB0032.012:Import CompressionB0032.018:Symbol ObfuscationB0032.016: StructuredException Handling (SEH)B0032.013:Instruction OverlapB0032.006:Thunk Code InsertionB0032.010: Guard PagesB0034.002: MinificationB0034.001: Jump/CallAbsolute AddressB0008.001: Multiple VMsE1027.m07:Encryption of DataE1027.m08:Encryption-Custom AlgorithmE1027.m01: EncodingE1027.m06:Encryption of CodeE1027.m05:Encryption-Standard AlgorithmE1027.m04: EncryptionE1027.m03:Encoding-Custom AlgorithmE1027.m02:Encoding-Standard AlgorithmF0001.009: ConfuserF0001.005:Custom CompressionF0001.007: CustomCompression of DataF0001.010: VMProtectF0001.011: ThemidaF0001.001: Nested PackingF0001.004: StandardCompression of DataF0001.003: StandardCompression of CodeF0001.012: ArmadilloF0001.013: ASPackF0001.002:Standard CompressionF0001.006: CustomCompression of CodeF0001.008: UPXAnti-Static AnalysisB0028: CryptocurrencyF0003: HookingE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0003.003:Procedure HookingF0003.005:Shadow SDT HookingF0003.001: Import AddressTable (IAT) HookingF0003.002:Inline PatchingF0003.006: Export AddressTable (EAT) HookingF0003.004: System ServiceDispatch Table HookingE1056.m01: Mouse EventsF0002.001:Application HookF0002.002: PollingE1113.m01: WinAPICollectionB0030: C2 CommunicationB0031:Domain Name GenerationE1105: Ingress Tool TransferB0030.012:Directory ListingB0030.009:Request Email TemplateB0030.008:Request CommandB0030.010: RequestEmail Address ListB0030.001: Send DataB0030.007: Send HeartbeatB0030.014:Execute Shell CommandB0030.002: Receive DataB0030.016:Start Interactive ShellB0030.004: Implant toController File TransferB0030.003: Serverto Client File TransferB0030.013: Execute FileB0030.006:Send System InformationB0030.011: AuthenticateB0030.005:Check for PayloadB0030.015: File searchCommand and ControlB0028: CryptocurrencyF0003: HookingE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0003.003:Procedure HookingF0003.005:Shadow SDT HookingF0003.001: Import AddressTable (IAT) HookingF0003.002:Inline PatchingF0003.006: Export AddressTable (EAT) HookingF0003.004: System ServiceDispatch Table HookingE1056.m01: Mouse EventsF0002.001:Application HookF0002.002: PollingE1113.m01: WinAPICredential AccessB0027: AlternativeInstallation LocationF0013: BootkitB0037: BypassData Execution PreventionF0009: Component FirmwareB0025:Conditional ExecutionB0040: Covert LocationF0004: Disableor Evade Security ToolsE1564: Hidden ArtifactsF0005: HiddenFiles and DirectoriesF0015:Hijack Execution FlowF0003: HookingF0006: Indicator BlockingB0047: Install Insecureor Malicious ConfigurationE1112: Modify RegistryE1027: ObfuscatedFiles or InformationB0029: Polymorphic CodeE1055: Process InjectionE1014: RootkitF0007: Self DeletionF0001: Software PackingB0027.002:Registry InstallB0027.001:Fileless MalwareB0037.001: ROP ChainsF0009.001:Router FirmwareB0025.007:Runs as ServiceB0025.002:Environmental KeysB0025.001: Suicide ExitB0025.003:GetVolumeInformationB0025.005:Secure TriggersB0025.008: Deposited KeysB0025.004:Host Fingerprint CheckB0025.006: Token CheckB0040.001:Hide Data in RegistryB0040.002: SteganographyF0004.008: Heavens GateF0004.005: Modify PolicyF0004.004: AMSI BypassF0004.009:Disable Code IntegrityF0004.001: DisableKernel Patch ProtectionF0004.002: Disable SystemFile Overwrite ProtectionF0004.007: BypassWindows File ProtectionF0004.006:Force Lazy WritingF0004.003: Unhook APIsE1564.m01: HiddenUserspace LibrariesE1564.m04:Hidden ServicesE1564.m05:Hidden Kernel ModulesE1564.m03:Hidden ProcessesE1564.m02: Direct KernelObject ManipulationF0005.002: LocationF0005.004: TimestampF0005.001: ExtensionF0005.003: AttributeF0015.003: Import AddressTable (IAT) HookingF0015.006: AbuseWindows Function CallsF0015.005: System ServiceDispatch Table HookingF0015.001: Export AddressTable (EAT) HookingF0015.002:Inline PatchingF0015.004: Shadow SystemService Dispatch Table HookingF0003.003:Procedure HookingF0003.005:Shadow SDT HookingF0003.001: Import AddressTable (IAT) HookingF0003.002:Inline PatchingF0003.006: Export AddressTable (EAT) HookingF0003.004: System ServiceDispatch Table HookingF0006.001: RemoveSMS Warning MessagesE1027.m07:Encryption of DataE1027.m08:Encryption-Custom AlgorithmE1027.m01: EncodingE1027.m06:Encryption of CodeE1027.m05:Encryption-Standard AlgorithmE1027.m04: EncryptionE1027.m03:Encoding-Custom AlgorithmE1027.m02:Encoding-Standard AlgorithmB0029.001: Packer StubB0029.003:Code ReorderingB0029.002:Call IndirectionsE1055.m04: PatchProcess Command LineE1055.m01: Hook Injectionvia SetWindowsHooksExE1055.m05: Injectionvia Windows FibersE1055.m02: Injection and Persistencevia Registry ModificationE1055.m03:Injection using ShimsE1014.m15:Hypervisor/Virtualized RootkitE1014.m14:Hardware/Firmware RootkitE1014.m12:Application RootkitE1014.m17: Memory RootkitE1014.m16:Kernel Mode RootkitE1014.m13: BootloaderF0007.001: COMSPECEnvironment VariableF0001.009: ConfuserF0001.005:Custom CompressionF0001.007: CustomCompression of DataF0001.010: VMProtectF0001.011: ThemidaF0001.001: Nested PackingF0001.004: StandardCompression of DataF0001.003: StandardCompression of CodeF0001.012: ArmadilloF0001.013: ASPackF0001.002:Standard CompressionF0001.006: CustomCompression of CodeF0001.008: UPXDefense EvasionB0013:Analysis Tool DiscoveryE1010: ApplicationWindow DiscoveryB0046: Code DiscoveryE1083: Fileand Directory DiscoveryB0038: Self DiscoveryB0014:SMTP Connection DiscoveryE1082: SystemInformation DiscoveryB0043: Taskbar DiscoveryB0013.002: Processdetection - DebuggersB0013.004: Processdetection - PCAP UtilitiesB0013.005: Process detection- Process UtilitiesB0013.003: Process detection- SysInternals Suite ToolsB0013.006: Processdetection - PE UtilitiesB0013.001:Process detectionB0013.008:Known File LocationB0013.009: Known WindowB0013.007: Processdetection - SandboxesE1010.m01: Window TextB0046.001:Enumerate PE SectionsB0046.003:Parse PE HeaderB0046.002: InspectSection Memory PermissionsE1083.m01: Log FileE1082.m01: GenerateWindows ExceptionDiscoveryE1059: Commandand Scripting InterpreterB0025:Conditional ExecutionB0044: Execution DependencyE1203: Exploitationfor Client ExecutionB0023:Install Additional ProgramB0024: PreventConcurrent ExecutionB0011: Remote CommandsB0020: Send EmailB0021:Send Poisoned Text MessageE1569: System ServicesE1204: User InteractionB0025.007:Runs as ServiceB0025.002:Environmental KeysB0025.001: Suicide ExitB0025.003:GetVolumeInformationB0025.005:Secure TriggersB0025.008: Deposited KeysB0025.004:Host Fingerprint CheckB0025.006: Token CheckE1203.m01: RemoteDesktop Protocols (RDP)E1203.m05: SysinternalsE1203.m03: File TransferProtocol (FTP) ServersE1203.m02:Java-based Web ServersE1203.m06:Windows UtilitiesE1203.m04: Red HatJBoss Enterprise ProductsB0011.001: Delete FileB0011.003: ExecuteB0011.005: SleepB0011.006: UninstallB0011.007: Upload FileB0011.004: ShutdownB0011.002: Download FileE1569.m01: MSDTCExecutionE1560:Archive Collected DataE1020:Automated ExfiltrationE1560.m03: Encoding- Standard EncodingE1560.m05: Encryption- Standard EncryptionE1560.m06: Encryption- Custom EncryptionE1560.m01: EncodingE1560.m04: Encoding- Custom EncodingE1560.m02: EncryptionE1020.m01: Exfiltratevia File Hosting ServiceExfiltrationE1510:Clipboard ModificationF0009: Component FirmwareB0016:Compromise Data IntegrityE1485: Data DestructionE1486:Data Encrypted for ImpactB0033: Denial of ServiceB0017: Destroy HardwareF0014: Disk WipeE1190: Exploit Kit BehaviorE1203: Exploitationfor Client ExecutionE1472: Generate FraudulentAdvertising RevenueB0019:Manipulate Network TrafficB0042: Modify HardwareB0022: Remote AccessB0018: Resource HijackingB0039: SpammingF0009.001:Router FirmwareE1485.m02:Empty Recycle BinE1485.m03: DeleteApplication/SoftwareE1485.m04:Delete Shadow CopiesE1486.001: Ransom NoteE1203.m01: RemoteDesktop Protocols (RDP)E1203.m05: SysinternalsE1203.m03: File TransferProtocol (FTP) ServersE1203.m02:Java-based Web ServersE1203.m06:Windows UtilitiesE1203.m04: Red HatJBoss Enterprise ProductsE1472.m01:Click HijackingE1472.m02: AdvertisementReplacement FraudB0042.002: MouseB0042.001: CDROMB0042.003: PrinterB0022.001: Reverse ShellB0018.002: CryptojackingB0018.001:Password CrackingImpactB0026:Malicious Network DriverE1105: Ingress Tool TransferB0020: Send EmailB0021:Send Poisoned Text MessageE1195:Supply Chain CompromiseE1195.m02:Exploit Private APIsE1195.m01: AbuseEnterprise CertificatesLateral MovementC0011: DNS CommunicationC0004: FTP CommunicationC0002: HTTP CommunicationC0014: ICMP CommunicationC0003:Interprocess CommunicationC0012: SMTP CommunicationC0001: Socket CommunicationC0005: WinINetC0011.004: ResolveTLD::DNS CommunicationC0011.003: DDNS DomainConnect::DNS CommunicationC0011.005: Resolve Free HostingDomain::DNS CommunicationC0011.001: Resolve::DNSCommunicationC0011.002: ServerConnect::DNS CommunicationC0004.001: SendFile::FTP CommunicationC0004.002: WinINet::FTPCommunicationC0002.002: Client::HTTPCommunicationC0002.009: Connect toServer::HTTP CommunicationC0002.017: GetResponse::HTTP CommunicationC0002.003: SendRequest::HTTP CommunicationC0002.004: OpenURL::HTTP CommunicationC0002.007: WinINet::HTTPCommunicationC0002.015: ReceiveRequest::HTTP CommunicationC0002.013: SetHeader::HTTP CommunicationC0002.005: SendData::HTTP CommunicationC0002.010: IWebBrowser::HTTPCommunicationC0002.016: SendResponse::HTTP CommunicationC0002.012: CreateRequest::HTTP CommunicationC0002.001: Server::HTTPCommunicationC0002.011: ExtractBody::HTTP CommunicationC0002.014: ReadHeader::HTTP CommunicationC0002.008: WinHTTP::HTTPCommunicationC0002.018: StartServer::HTTP CommunicationC0002.006: DownloadURL::HTTP CommunicationC0014.002: EchoRequest::ICMP CommunicationC0014.001: GenerateTraffic::ICMP CommunicationC0003.001: CreatePipe::Interprocess CommunicationC0003.003: ReadPipe::Interprocess CommunicationC0003.004: WritePipe::Interprocess CommunicationC0003.002: ConnectPipe::Interprocess CommunicationC0012.002: Request::SMTPCommunicationC0012.001: ServerConnect::SMTP CommunicationC0001.015: Send UDPData::Socket CommunicationC0001.016: Receive TCPData::Socket CommunicationC0001.005: Start TCPServer::Socket CommunicationC0001.006: ReceiveData::Socket CommunicationC0001.013: UDPClient::Socket CommunicationC0001.012: Get SocketStatus::Socket CommunicationC0001.017: Receive UDPData::Socket CommunicationC0001.007: SendData::Socket CommunicationC0001.014: Send TCPData::Socket CommunicationC0001.009: Initialize WinsockLibrary::Socket CommunicationC0001.008: TCPClient::Socket CommunicationC0001.004: ConnectSocket::Socket CommunicationC0001.011: Create TCPSocket::Socket CommunicationC0001.003: CreateSocket::Socket CommunicationC0001.001: Set SocketConfig::Socket CommunicationC0001.010: Create UDPSocket::Socket CommunicationC0001.002: TCPServer::Socket CommunicationC0005.002:InternetOpen::WinINetC0005.003:InternetOpenURL::WinINetC0005.005:InternetWriteFile::WinINetC0005.004:InternetReadFile::WinINetC0005.001:InternetConnect::WinINetCommunicationMicro-objectiveC0059: Crypto LibraryC0029: Cryptographic HashC0031: Decrypt DataC0027: Encrypt DataC0028: Encryption KeyC0021: GeneratePseudo-random SequenceC0061: HashedMessage Authentication CodeC0029.002:SHA1::Cryptographic HashC0029.003:SHA256::Cryptographic HashC0029.004:SHA224::Cryptographic HashC0029.001:MD5::Cryptographic HashC0029.006:Snefru::Cryptographic HashC0029.005:Tiger::Cryptographic HashC0031.014:Twofish::Decrypt DataC0031.011:Skipjack::Decrypt DataC0031.003:Blowfish::Decrypt DataC0031.006:HC-128::Decrypt DataC0031.001:AES::Decrypt DataC0031.008:RC4::Decrypt DataC0031.013: StreamCipher::Decrypt DataC0031.002: BlockCipher::Decrypt DataC0031.004:Camellia::Decrypt DataC0031.007:HC-256::Decrypt DataC0031.005:3DES::Decrypt DataC0031.012:Sosemanuk::Decrypt DataC0031.009:RC6::Decrypt DataC0031.010:RSA::Decrypt DataC0027.011:RSA::Encrypt DataC0027.014: BlockCipher::Encrypt DataC0027.001:AES::Encrypt DataC0027.012: StreamCipher::Encrypt DataC0027.010:RC6::Encrypt DataC0027.003:Camellia::Encrypt DataC0027.007:HC-256::Encrypt DataC0027.005:Twofish::Encrypt DataC0027.002:Blowfish::Encrypt DataC0027.006:HC-128::Encrypt DataC0027.013:Skipjack::Encrypt DataC0027.009:RC4::Encrypt DataC0027.004:3DES::Encrypt DataC0027.008:Sosemanuk::Encrypt DataC0028.001: Import PublicKey::Encryption KeyC0028.002:RC4 KSA::Encryption KeyC0021.001: GetTickCount::GeneratePseudo-random SequenceC0021.005: Mersenne Twister::GeneratePseudo-random SequenceC0021.003: Use API::GeneratePseudo-random SequenceC0021.002: rand::GeneratePseudo-random SequenceC0021.004: RC4 PRGA::GeneratePseudo-random SequenceCryptographyMicro-objectiveC0019: Check StringC0032: ChecksumC0024: Compress DataC0060: Compression LibraryC0053: Decode DataC0025: Decompress DataC0026: Encode DataC0058: ModuloC0030:Non-Cryptographic HashC0020: Use ConstantC0032.003: BSD::ChecksumC0032.002: Luhn::ChecksumC0032.001:CRC32::ChecksumC0032.005:Adler::ChecksumC0032.004:Verhoeff::ChecksumC0024.001:QuickLZ::Compress DataC0024.002:IEncodingFilterFactory::Compress DataC0053.001:Base64::Decode DataC0053.002:XOR::Decode DataC0025.003:aPLib::Decompress DataC0025.002:IEncodingFilterFactory::DecompressDataC0025.001:QuickLZ::Decompress DataC0026.002:XOR::Encode DataC0026.001:Base64::Encode DataC0030.003:Fast-Hash::Non-Cryptographic HashC0030.001:MurmurHash::Non-Cryptographic HashC0030.004:dhash::Non-Cryptographic HashC0030.002:pHash::Non-Cryptographic HashC0030.005:FNV::Non-Cryptographic HashData Micro-objectiveC0015: Alter File ExtensionC0045: Copy FileC0046: Create DirectoryC0016: Create FileC0048: Delete DirectoryC0047: Delete FileC0049: Get File AttributesC0063: Move FileC0051: Read FileC0056: Read Virtual DiskC0050: Set File AttributesC0052: Writes FileC0015.001: AppendExtension::Alter File ExtensionC0016.001: Create OfficeDocument::Create FileC0016.002: CreateRansomware File::Create FileFile System Micro-objectiveC0037: Install DriverC0023: Load DriverC0057: Simulate HardwareC0037.001:Minifilter::Install DriverC0023.001:Minifilter::Load DriverC0057.002: MouseClick::Simulate HardwareC0057.001:Ctrl-Alt-Del::Simulate HardwareHardware Micro-objectiveC0007: Allocate MemoryC0008:Change Memory ProtectionC0044: Free MemoryC0006: Heap SprayC0010: Overflow BufferC0009: Stack PivotC0008.001: ExecutableStack::Change Memory ProtectionC0008.002: ExecutableHeap::Change Memory ProtectionMemory Micro-objectiveC0033: ConsoleC0034: Environment VariableC0036: RegistryC0035: WallpaperC0034.002: GetVariable::Environment VariableC0034.001: SetVariable::Environment VariableC0036.004: CreateRegistry Key::RegistryC0036.002: DeleteRegistry Key::RegistryC0036.001: SetRegistry Key::RegistryC0036.005: QueryRegistry Key::RegistryC0036.007: DeleteRegistry Value::RegistryC0036.003: OpenRegistry Key::RegistryC0036.006: QueryRegistry Value::RegistryOperatingSystem Micro-objectiveC0040: AllocateThread Local StorageC0043: Check MutexC0042: Create MutexC0017: Create ProcessC0038: Create ThreadC0064: Enumerate ThreadsC0065: Open ProcessC0066: Open ThreadC0054: Resume ThreadC0041: SetThread Local Storage ValueC0055: Suspend ThreadC0022: SynchronizationC0018: Terminate ProcessC0039: Terminate ThreadC0017.001: Create Processvia Shellcode::Create ProcessC0017.003: Create SuspendedProcess::Create ProcessC0017.002: Create Processvia WMI::Create ProcessC0022.001: CreateMutex::SynchronizationProcess Micro-objectiveF0013: BootkitF0009: Component FirmwareE1564: Hidden ArtifactsF0005: HiddenFiles and DirectoriesF0015:Hijack Execution FlowF0003: HookingB0047: Install Insecureor Malicious ConfigurationF0010: KernelModules and ExtensionsB0026:Malicious Network DriverF0011:Modify Existing ServiceE1112: Modify RegistryF0012: RegistryRun Keys / Startup FolderB0022: Remote AccessE1105: Ingress Tool TransferB0035: Shutdown EventF0009.001:Router FirmwareE1564.m01: HiddenUserspace LibrariesE1564.m04:Hidden ServicesE1564.m05:Hidden Kernel ModulesE1564.m03:Hidden ProcessesE1564.m02: Direct KernelObject ManipulationF0005.002: LocationF0005.004: TimestampF0005.001: ExtensionF0005.003: AttributeF0015.003: Import AddressTable (IAT) HookingF0015.006: AbuseWindows Function CallsF0015.005: System ServiceDispatch Table HookingF0015.001: Export AddressTable (EAT) HookingF0015.002:Inline PatchingF0015.004: Shadow SystemService Dispatch Table HookingF0003.003:Procedure HookingF0003.005:Shadow SDT HookingF0003.001: Import AddressTable (IAT) HookingF0003.002:Inline PatchingF0003.006: Export AddressTable (EAT) HookingF0003.004: System ServiceDispatch Table HookingF0010.001: Device DriverB0022.001: Reverse ShellPersistenceF0015:Hijack Execution FlowF0003: HookingF0010: KernelModules and ExtensionsF0011:Modify Existing ServiceE1055: Process InjectionF0015.003: Import AddressTable (IAT) HookingF0015.006: AbuseWindows Function CallsF0015.005: System ServiceDispatch Table HookingF0015.001: Export AddressTable (EAT) HookingF0015.002:Inline PatchingF0015.004: Shadow SystemService Dispatch Table HookingF0003.003:Procedure HookingF0003.005:Shadow SDT HookingF0003.001: Import AddressTable (IAT) HookingF0003.002:Inline PatchingF0003.006: Export AddressTable (EAT) HookingF0003.004: System ServiceDispatch Table HookingF0010.001: Device DriverE1055.m04: PatchProcess Command LineE1055.m01: Hook Injectionvia SetWindowsHooksExE1055.m05: Injectionvia Windows FibersE1055.m02: Injection and Persistencevia Registry ModificationE1055.m03:Injection using ShimsPrivilege Escalation + +E1560: Archive Collected DataB0028: CryptocurrencyF0015: Hijack Execution FlowE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureE1560.m01: EncodingE1560.m04: Encoding - Custom AlgorithmE1560.m03: Encoding - Standard AlgorithmE1560.m02: EncryptionE1560.m06: Encryption - Custom AlgorithmE1560.m05: Encryption - Standard AlgorithmB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingE1056.m01: Mouse EventsF0002.001: Application HookF0002.002: PollingE1113.m01: WinAPICollectionE1020: Automated ExfiltrationE1020.m01:Exfiltrate via File Hosting ServiceExfiltrationE1105: Ingress Tool TransferB0026: Malicious Network DriverB0020: Send EmailB0021: Send Poisoned Text MessageE1195: Supply Chain CompromiseE1195.m01: Abuse Enterprise CertificatesE1195.m02: Exploit Private APIsLateral MovementF0015: Hijack Execution FlowF0016: Install CertificateF0010: Kernel Modules and ExtensionsF0011: Modify Existing ServiceE1055: Process InjectionF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0010.001: Device DriverE1055.004: Asynchronous Procedure CallE1055.001: Dynamic-link Library InjectionE1055.011: Extra Window Memory InjectionE1055.m01:Hook Injection via SetWindowsHooksExE1055.m02: Injectionand Persistence via Registry ModificationE1055.m03: Injection using ShimsE1055.m05: Injection via Windows FibersE1055.m04: Patch Process Command LineE1055.002: Portable Executable InjectionE1055.012: Process HollowingE1055.003: Thread Execution HijackingPrivilege EscalationB0028: CryptocurrencyF0015: Hijack Execution FlowE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingE1056.m01: Mouse EventsF0002.001: Application HookF0002.002: PollingE1113.m01: WinAPICredential AccessB0036: Capture EvasionB0025: Conditional ExecutionB0001: Debugger DetectionB0002: Debugger EvasionB0003: Dynamic Analysis EvasionB0004: Emulator DetectionB0005: Emulator EvasionB0008: Executable Code VirtualizationF0015: Hijack Execution FlowB0006: Memory Dump EvasionB0007: Sandbox DetectionF0001: Software PackingB0009: Virtual Machine DetectionB0036.002: Encrypted PayloadsB0036.001: Memory-only PayloadB0036.003: Multiple Stages of LoadersB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckB0001.034: Anti-debugging InstructionsB0001.001: API Hook DetectionB0001.038: Check ProcessesB0001.002: CheckRemoteDebuggerPresentB0001.003: CloseHandleB0001.004: Debugger ArtifactsB0001.005: Hardware BreakpointsB0001.006: InterruptionB0001.008: IsDebuggerPresentB0001.009: Memory BreakpointsB0001.010: Memory Write WatchingB0001.011: Monitoring ThreadB0001.012: NtQueryInformationProcessB0001.013: NtQueryObjectB0001.014: NtSetInformationThreadB0001.015: NtYieldExecution/SwitchToThreadB0001.016: OutputDebugStringB0001.017:Page Exception Breakpoint DetectionB0001.018: Parent ProcessB0001.019: Process Environment BlockB0001.035:Process Environment Block BeingDebuggedB0001.037:Process Environment Block IsDebuggedB0001.036:Process Environment Block NtGlobalFlagB0001.020: Process JobsB0001.021: ProcessHeapB0001.022: RtlAdjustPrivilegeB0001.023: SeDebugPrivilegeB0001.024: SetHandleInformationB0001.025: Software BreakpointsB0001.026: Stack CanaryB0001.027: TIB AwareB0001.028: Timing/Delay CheckB0001.032: Timing/Delay Check GetTickCountB0001.033:Timing/Delay Check QueryPerformanceCounterB0001.029: TLS CallbacksB0001.030: UnhandledExceptionFilterB0001.031: WudfIsAnyDebuggerPresentB0002.001: Block InterruptsB0002.002: Break Point ClearingB0002.003: Byte StealingB0002.004: Change SizeOfImageB0002.005: Code Integrity CheckB0002.006: Exception MisdirectionB0002.007: Get Base IndirectlyB0002.008: Guard PagesB0002.009: Hook InterruptB0002.010: Import ObfuscationB0002.011: InliningB0002.012: Loop EscapesB0002.013: Malloc UseB0002.014: Modify PE HeaderB0002.015: NanomitesB0002.016: Obfuscate Library UseB0002.017: Parallel ThreadsB0002.018: Pipeline MisdirectionB0002.019: Pre-DebugB0002.020: Relocate API CodeB0002.021: Return ObfuscationB0002.022: RtlAdjustPrivilegeB0002.023: Section MisalignmentB0002.024: Self-DebuggingB0002.025: Self-UnmappingB0002.026: Static LinkingB0002.027: Stolen API CodeB0002.028: TamperingB0002.029: Thread TimeoutB0002.030: Use InterruptsB0003.001: Alternative ntdll.dllB0003.012: API HammeringB0003.011: Code Integrity CheckB0003.002: Data FloodB0003.003: Delayed ExecutionB0003.004: Demo ModeB0003.005: Drop CodeB0003.006: Encode FileB0003.007: Hook File SystemB0003.008: Hook InterruptB0003.009: IllusionB0003.010: RestartB0004.003:Check Emulator-related Registry KeysB0004.001:Check for Emulator-related FilesB0004.002: Check for WINE VersionB0004.004: Failed Network ConnectionsB0005.001: Different Opcode SetsB0005.004: Extra Loops/Time LocksB0005.002:Undocumented/Unimplemented OpcodesB0005.003: Unusual/Undocumented API CallsB0008.001: Multiple VMsF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingB0006.001: Code Encryption in MemoryB0006.002: Erase the PE headerB0006.008: Feed MisinformationB0006.009: Flow Opcode ObstructionB0006.006: Guard PagesB0006.003: Hide virtual memoryB0006.010: Hook memory mapping APIsB0006.007: On-the-Fly APIsB0006.011: Patch MmGetPhysicalMemoryRangesB0006.004: SizeOfImageB0006.005: TamperingB0007.001: Check Clipboard DataB0007.002: Check FilesB0007.003: Human User CheckB0007.004: Injected DLL TestingB0007.005: Product Key/ID TestingB0007.006: Screen Resolution TestingB0007.007: Self CheckB0007.010: Test API RoutinesB0007.008: Timing/Date CheckB0007.009: Timing/Uptime CheckF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003: Standard Compression of CodeF0001.004: Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectB0009.001:Check File and Directory ArtifactsB0009.002: Check Memory ArtifactsB0009.003: Check Named System ObjectsB0009.004: Check ProcessesB0009.005: Check Registry KeysB0009.006: Check Running ServicesB0009.007: Check SoftwareB0009.008: Check Virtual DevicesB0009.009: Check WindowsB0009.022: Check Windows - Title barsB0009.021: Check Windows - Unique windowsB0009.020: Check Windows - Window sizeB0009.010: Guest Process TestingB0009.011: HTML5 Performance Object CheckB0009.012: Human User CheckB0009.029: Instruction TestingB0009.034: Instruction Testing - CPUIDB0009.035: Instruction Testing - INB0009.036: Instruction Testing - RDTSCB0009.031:Instruction Testing - SGDT/SLDT (no pill)B0009.030:Instruction Testing - SIDT (red pill)B0009.032: Instruction Testing - SMSWB0009.033: Instruction Testing - STRB0009.037: Instruction Testing - VMCPUIDB0009.038: Instruction Testing - VPCEXTB0009.013: Modern Specs CheckB0009.015: Modern Specs Check - Drive sizeB0009.019:Modern Specs Check - Keyboard layoutB0009.017: Modern Specs Check - PrinterB0009.018:Modern Specs Check - Processor countB0009.014:Modern Specs Check - Total physical memoryB0009.016: Modern Specs Check - USB driveB0009.023: Unique Hardware/Firmware CheckB0009.024:Unique Hardware/Firmware Check - BIOSB0009.027: UniqueHardware/Firmware Check - CPU LocationB0009.026:Unique Hardware/Firmware Check - CPU NameB0009.025: Unique Hardware/FirmwareCheck - I/O Communication PortB0009.028: UniqueHardware/Firmware Check - MAC AddressAnti-Behavioral AnalysisB0030: C2 CommunicationB0031: Domain Name GenerationE1105: Ingress Tool TransferB0030.011: AuthenticateB0030.005: Check for PayloadB0030.012: Directory ListingB0030.013: Execute FileB0030.014: Execute Shell CommandB0030.015: File searchB0030.004:Implant to Controller File TransferB0030.002: Receive DataB0030.008: Request CommandB0030.010: Request Email Address ListB0030.009: Request Email TemplateB0030.001: Send DataB0030.007: Send HeartbeatB0030.006: Send System InformationB0030.003: Server to Client File TransferB0030.016: Start Interactive ShellCommand and ControlF0013: BootkitF0009: Component FirmwareF0005: Hidden Files and DirectoriesE1564: Hide ArtifactsF0015: Hijack Execution FlowE1105: Ingress Tool TransferB0047:Install Insecure or Malicious ConfigurationF0010: Kernel Modules and ExtensionsB0026: Malicious Network DriverF0011: Modify Existing ServiceE1112: Modify RegistryF0012: Registry Run Keys / Startup FolderB0022: Remote AccessB0035: Shutdown EventF0009.001: Router FirmwareF0005.003: AttributeF0005.001: ExtensionF0005.002: LocationF0005.004: TimestampE1564.m02:Direct Kernel Object ManipulationE1564.m05: Hidden Kernel ModulesE1564.m03: Hidden ProcessesE1564.m04: Hidden ServicesE1564.m01: Hidden Userspace LibrariesF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0010.001: Device DriverB0022.001: Reverse ShellPersistenceB0027: Alternative Installation LocationF0013: BootkitB0037: Bypass Data Execution PreventionF0009: Component FirmwareB0025: Conditional ExecutionB0040: Covert LocationF0004: Disable or Evade Security ToolsF0005: Hidden Files and DirectoriesE1564: Hide ArtifactsF0015: Hijack Execution FlowF0006: Indicator BlockingB0047:Install Insecure or Malicious ConfigurationE1112: Modify RegistryE1027: Obfuscated Files or InformationB0029: Polymorphic CodeE1055: Process InjectionE1014: RootkitF0007: Self DeletionF0001: Software PackingB0027.001: Fileless MalwareB0027.002: Registry InstallB0037.001: ROP ChainsF0009.001: Router FirmwareB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckB0040.001: Hide Data in RegistryB0040.002: SteganographyF0004.004: AMSI BypassF0004.007: Bypass Windows File ProtectionF0004.009: Disable Code IntegrityF0004.001: Disable Kernel Patch ProtectionF0004.002:Disable System File Overwrite ProtectionF0004.006: Force Lazy WritingF0004.008: Heavens GateF0004.005: Modify PolicyF0004.003: Unhook APIsF0005.003: AttributeF0005.001: ExtensionF0005.002: LocationF0005.004: TimestampE1564.m02:Direct Kernel Object ManipulationE1564.m05: Hidden Kernel ModulesE1564.m03: Hidden ProcessesE1564.m04: Hidden ServicesE1564.m01: Hidden Userspace LibrariesF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0006.001: Remove SMS Warning MessagesE1027.m01: EncodingE1027.m03: Encoding - Custom AlgorithmE1027.m02: Encoding - Standard AlgorithmE1027.m04: EncryptionE1027.m08: Encryption - Custom AlgorithmE1027.m05: Encryption - Standard AlgorithmE1027.m06: Encryption of CodeE1027.m07: Encryption of DataB0029.002: Call IndirectionsB0029.003: Code ReorderingB0029.001: Packer StubE1055.004: Asynchronous Procedure CallE1055.001: Dynamic-link Library InjectionE1055.011: Extra Window Memory InjectionE1055.m01:Hook Injection via SetWindowsHooksExE1055.m02: Injectionand Persistence via Registry ModificationE1055.m03: Injection using ShimsE1055.m05: Injection via Windows FibersE1055.m04: Patch Process Command LineE1055.002: Portable Executable InjectionE1055.012: Process HollowingE1055.003: Thread Execution HijackingE1014.m12: Application RootkitE1014.m13: BootloaderE1014.m14: Hardware/Firmware RootkitE1014.m15: Hypervisor/Virtualized RootkitE1014.m16: Kernel Mode RootkitE1014.m17: Memory RootkitF0007.001: COMSPEC Environment VariableF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003: Standard Compression of CodeF0001.004: Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectDefense EvasionC0033: ConsoleC0034: Environment VariableC0036: RegistryC0035: WallpaperC0034.001: Set VariableC0036.004: Create Registry KeyC0036.002: Delete Registry KeyC0036.007: Delete Registry ValueC0036.003: Open Registry KeyC0036.005: Query Registry KeyC0036.006: Query Registry ValueC0036.001: Set Registry ValueOperating System Micro-objectiveC0040: Allocate Thread Local StorageC0043: Check MutexC0042: Create MutexC0017: Create ProcessC0038: Create ThreadC0064: Enumerate ThreadsC0065: Open ProcessC0066: Open ThreadC0054: Resume ThreadC0072: Set Thread ContextC0041: Set Thread Local Storage ValueC0055: Suspend ThreadC0018: Terminate ProcessC0039: Terminate ThreadC0070: Unmap Section ViewC0071: Write Process MemoryC0017.001: Create Process via ShellcodeC0017.002: Create Process via WMIC0017.003: Create Suspended ProcessProcess Micro-objectiveC0037: Install DriverC0023: Load DriverC0057: Simulate HardwareC0037.001: MinifilterC0023.001: MinifilterC0057.001: Ctrl-Alt-DelC0057.002: Mouse ClickHardware Micro-objectiveC0068: Crypto AlgorithmC0069: Crypto ConstantC0059: Crypto LibraryC0029: Cryptographic HashC0031: Decrypt DataC0027: Encrypt DataC0028: Encryption KeyC0021: Generate Pseudo-random SequenceC0061: Hashed Message Authentication CodeC0059.001: API CallC0059.002: Static Public LibraryC0029.001: MD5C0029.002: SHA1C0029.004: SHA224C0029.003: SHA256C0029.006: SnefruC0029.005: TigerC0031.005: 3DESC0031.001: AESC0031.002: Block CipherC0031.003: BlowfishC0031.004: CamelliaC0031.006: HC-128C0031.007: HC-256C0031.008: RC4C0031.009: RC6C0031.010: RSAC0031.011: SkipjackC0031.012: SosemanukC0031.013: Stream CipherC0031.014: TwofishC0027.004: 3DESC0027.001: AESC0027.014: Block CipherC0027.002: BlowfishC0027.003: CamelliaC0027.006: HC-128C0027.007: HC-256C0027.009: RC4C0027.010: RC6C0027.011: RSAC0027.013: SkipjackC0027.008: SosemanukC0027.012: Stream CipherC0027.005: TwofishC0028.001: Import Public KeyC0028.002: RC4 KSAC0021.001: GetTickCountC0021.002: randC0021.004: RC4 PRGAC0021.003: Use APICryptography Micro-objectiveC0019: Check StringC0032: ChecksumC0024: Compress DataC0060: Compression LibraryC0053: Decode DataC0025: Decompress DataC0026: Encode DataC0058: ModuloC0030: Non-Cryptographic HashC0020: Use ConstantC0032.005: AdlerC0032.003: BSDC0032.001: CRC32C0032.002: LuhnC0024.002: IEncodingFilterFactoryC0024.001: QuickLZC0053.001: Base64C0053.002: XORC0025.003: aPLibC0025.002: IEncodingFilterFactoryC0025.001: QuickLZC0026.001: Base64C0026.002: XORC0030.004: dhashC0030.006: djb2C0030.003: Fast-HashC0030.005: FNVC0030.001: MurmurHashC0030.002: pHashData Micro-objectiveC0015: Alter File ExtensionC0045: Copy FileC0046: Create DirectoryC0016: Create FileC0048: Delete DirectoryC0047: Delete FileC0049: Get File AttributesC0063: Move FileC0051: Read FileC0056: Read Virtual DiskC0050: Set File AttributesC0052: Writes FileC0015.001: Append ExtensionC0016.001: Create Office DocumentC0016.002: Create Ransomware FileFile System Micro-objectiveC0011: DNS CommunicationC0004: FTP CommunicationC0002: HTTP CommunicationC0014: ICMP CommunicationC0003: Interprocess CommunicationC0012: SMTP CommunicationC0001: Socket CommunicationC0005: WinINetC0011.003: DDNS Domain ConnectC0011.001: ResolveC0011.005: Resolve Free Hosting DomainC0011.004: Resolve TLDC0011.002: Server ConnectC0004.001: Send FileC0004.002: WinINetC0002.002: ClientC0002.009: Connect to ServerC0002.012: Create RequestC0002.006: Download URLC0002.011: Extract BodyC0002.017: Get ResponseC0002.010: IWebBrowserC0002.004: Open URLC0002.014: Read HeaderC0002.015: Receive RequestC0002.005: Send DataC0002.003: Send RequestC0002.016: Send ResponseC0002.001: ServerC0002.013: Set HeaderC0002.018: Start ServerC0002.008: WinHTTPC0002.007: WinINetC0014.002: Echo RequestC0014.001: Generate TrafficC0003.002: Connect PipeC0003.001: Create PipeC0003.003: Read PipeC0003.004: Write PipeC0012.002: RequestC0012.001: Server ConnectC0001.004: Connect SocketC0001.003: Create SocketC0001.011: Create TCP SocketC0001.010: Create UDP SocketC0001.012: Get Socket StatusC0001.009: Initialize Winsock LibraryC0001.006: Receive DataC0001.016: Receive TCP DataC0001.017: Receive UDP DataC0001.007: Send DataC0001.014: Send TCP DataC0001.015: Send UDP DataC0001.001: Set Socket ConfigC0001.005: Start TCP ServerC0001.008: TCP ClientC0001.002: TCP ServerC0001.013: UDP ClientC0005.001: InternetConnectC0005.002: InternetOpenC0005.003: InternetOpenURLC0005.004: InternetReadFileC0005.005: InternetWriteFileCommunication Micro-objectiveC0007: Allocate MemoryC0008: Change Memory ProtectionC0044: Free MemoryC0006: Heap SprayC0010: Overflow BufferC0009: Stack PivotC0008.002: Executable HeapC0008.001: Executable StackMemory Micro-objectiveB0010: Call Graph Generation EvasionB0045: Data Flow Analysis EvasionB0012: Disassembler EvasionB0032: Executable Code ObfuscationB0034: Executable Code OptimizationB0008: Executable Code VirtualizationE1027: Obfuscated Files or InformationF0001: Software PackingB0010.002: InvokeNTDLL System Calls via Encoded TableB0010.003: Shadow Process CommunicationB0010.001: Two-layer Function ReturnB0045.003: Arbitrary Memory CorruptionB0045.001: Control DependenceB0045.002: Implicit FlowsB0012.001: Argument ObfuscationB0012.002: Conditional MisdirectionB0012.006:Desynchronizing Opaque PredicatesB0012.007: Fake FunctionB0012.003: Value Dependent JumpsB0012.005: VBA StompingB0032.001: API HashingB0032.020: Argument ObfuscationB0032.002: Code InsertionB0032.008: Data Value ObfuscationB0032.003: Dead Code InsertionB0032.009: Entry Point ObfuscationB0032.004: Fake Code InsertionB0032.010: Guard PagesB0032.011:Import Address Table ObfuscationB0032.012: Import CompressionB0032.013: Instruction OverlapB0032.014: Interleaving CodeB0032.005: Jump InsertionB0032.007: Junk Code InsertionB0032.019: Opaque PredicateB0032.017: Stack StringsB0032.016:Structured Exception Handling (SEH)B0032.018: Symbol ObfuscationB0032.006: Thunk Code InsertionB0032.021: Variable RecompositionB0034.001: Jump/Call Absolute AddressB0034.002: MinificationB0008.001: Multiple VMsE1027.m01: EncodingE1027.m03: Encoding - Custom AlgorithmE1027.m02: Encoding - Standard AlgorithmE1027.m04: EncryptionE1027.m08: Encryption - Custom AlgorithmE1027.m05: Encryption - Standard AlgorithmE1027.m06: Encryption of CodeE1027.m07: Encryption of DataF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003: Standard Compression of CodeF0001.004: Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectAnti-Static AnalysisB0013: Analysis Tool DiscoveryE1010: Application Window DiscoveryB0046: Code DiscoveryE1083: File and Directory DiscoveryB0043: ReferencesB0038: Self DiscoveryB0014: SMTP Connection DiscoveryE1082: System Information DiscoveryB0013.008: Known File LocationB0013.009: Known WindowB0013.010: Known Windows Class NameB0013.001: Process detectionB0013.002: Process detection - DebuggersB0013.004:Process detection - PCAP UtilitiesB0013.006:Process detection - PE UtilitiesB0013.005:Process detection - Process UtilitiesB0013.007: Process detection - SandboxesB0013.003: Processdetection - SysInternals Suite ToolsE1010.m01: Window TextB0046.001: Enumerate PE SectionsB0046.002:Inspect Section Memory PermissionsB0046.003: Parse PE HeaderE1083.m02: Filter by ExtensionE1083.m01: Log FileB0038.002: Check Magic StringB0038.003: Check Section LengthB0038.001: Use HashquineE1082.m02: Enumerate Environment VariablesE1082.m01: Generate Windows ExceptionDiscoveryE1510: Clipboard ModificationF0009: Component FirmwareB0016: Compromise Data IntegrityE1485: Data DestructionE1486: Data Encrypted for ImpactB0033: Denial of ServiceB0017: Destroy HardwareF0014: Disk WipeE1190: Exploit KitE1203: Exploitation for Client ExecutionE1643: Generate Traffic from VictimB0019: Manipulate Network TrafficB0042: Modify HardwareB0022: Remote AccessB0018: Resource HijackingB0039: SpammingF0009.001: Router FirmwareE1485.m03: Delete Application/SoftwareE1485.m04: Delete Shadow CopiesE1485.m02: Empty Recycle BinE1486.001: Ransom NoteE1203.m03:File Transfer Protocol (FTP) ServersE1203.m02: Java-based Web ServersE1203.m04:Red Hat JBoss Enterprise ProductsE1203.m01: Remote Desktop ProtocolsE1203.m05: SysinternalsE1203.m06: Windows UtilitiesE1643.m02: Advertisement Replacement FraudE1643.m01: Click HijackingB0042.001: CDROMB0042.002: MouseB0042.003: PrinterB0022.001: Reverse ShellB0018.002: CryptojackingB0018.001: Password CrackingImpactE1059: Command and Scripting InterpreterB0025: Conditional ExecutionB0044: Execution DependencyE1203: Exploitation for Client ExecutionB0023: Install Additional ProgramB0024: Prevent Concurrent ExecutionB0011: Remote CommandsB0020: Send EmailB0021: Send Poisoned Text MessageE1569: System ServicesE1204: User ExecutionB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckE1203.m03:File Transfer Protocol (FTP) ServersE1203.m02: Java-based Web ServersE1203.m04:Red Hat JBoss Enterprise ProductsE1203.m01: Remote Desktop ProtocolsE1203.m05: SysinternalsE1203.m06: Windows UtilitiesB0011.001: Delete FileB0011.002: Download FileB0011.003: ExecuteB0011.004: ShutdownB0011.005: SleepB0011.006: UninstallB0011.007: Upload FileE1569.m01: MSDTCExecution \ No newline at end of file diff --git a/yfaq/mbc_matrix_without_ids.svg b/yfaq/mbc_matrix_without_ids.svg index 50d7e00..1bad610 100644 --- a/yfaq/mbc_matrix_without_ids.svg +++ b/yfaq/mbc_matrix_without_ids.svg @@ -1 +1,2 @@ -Capture EvasionConditional ExecutionDebugger DetectionDebugger EvasionDynamic Analysis EvasionEmulator DetectionEmulator EvasionExecutableCode VirtualizationHookingMemory Dump EvasionSandbox DetectionSoftware PackingVirtual Machine DetectionMultipleStages of LoadersMemory-only PayloadEncrypted PayloadsRuns as ServiceEnvironmental KeysSuicide ExitGetVolumeInformationSecure TriggersDeposited KeysHost Fingerprint CheckToken CheckCloseHandleWudfIsAnyDebuggerPresentSoftware BreakpointsTIB AwareTiming/Delay CheckSetHandleInformationInterrupt 1TLS CallbacksParent ProcessMemory BreakpointsStack CanaryTiming/Delay CheckQueryPerformanceCounterTiming/DelayCheck GetTickCountInterrupt 0x2dPage ExceptionBreakpoint DetectionAnti-debuggingInstructionsNtYieldExecution/SwitchToThreadProcessHeapProcess EnvironmentBlock IsDebuggedAPI Hook DetectionDebugger ArtifactsNtQueryInformationProcessSeDebugPrivilegeOutputDebugStringIsDebuggerPresentRtlAdjustPrivilegeMemory Write WatchingProcess EnvironmentBlock NtGlobalFlagCheckRemoteDebuggerPresentHardware BreakpointsNtSetInformationThreadNtQueryObjectUnhandledExceptionFilterMonitoring ThreadProcess JobsProcess EnvironmentBlock BeingDebuggedProcess Environment BlockHook InterruptSelf-UnmappingGet Base IndirectlyCode Integrity CheckSelf-DebuggingChange SizeOfImageMalloc UseStatic LinkingUse InterruptsReturn ObfuscationByte StealingInliningPre-DebugThread TimeoutSection MisalignmentTamperingPipeline MisdirectionBreak Point ClearingGuard PagesRelocate API CodeException MisdirectionRtlAdjustPrivilegeLoop EscapesModify PE HeaderNanomitesParallel ThreadsBlock InterruptsObfuscate Library UseStolen API CodeImport ObfuscationHook File SystemAlternative ntdll.dllIllusionDemo ModeHook InterruptDelayed ExecutionData FloodEncode FileRestartDrop CodeCheck Emulator-relatedRegistry KeysCheck forEmulator-related FilesFailedNetwork ConnectionsCheck for WINE VersionExtra Loops/Time LocksDifferent Opcode SetsUndocumented OpcodesUnusual/UndocumentedAPI CallsMultiple VMsProcedure HookingShadow SDT HookingImport AddressTable (IAT) HookingInline PatchingExport AddressTable (EAT) HookingSystem ServiceDispatch Table HookingHook memory mapping APIsCode Encryption in MemoryHide virtual memoryTamperingErase the PE headerSizeOfImagePatchMmGetPhysicalMemoryRangesGuard PagesFeed MisinformationFlow Opcode ObstructionOn-the-Fly APIsScreen Resolution TestingSelf CheckTiming/Date CheckProduct Key/ID TestingTiming/Uptime CheckCheck Clipboard DataHuman User CheckCheck FilesInjected DLL TestingConfuserCustom CompressionCustomCompression of DataVMProtectThemidaNested PackingStandardCompression of DataStandardCompression of CodeArmadilloASPackStandard CompressionCustomCompression of CodeUPXCheck WindowsModern SpecsCheck - Processor countCheck Registry KeysCheck Running ServicesInstructionTesting - CPUIDCheckWindows - Window sizeHuman User CheckModern SpecsCheck - Keyboard layoutHTML5Performance Object CheckCheckWindows - Unique windowsModernSpecs Check - USB driveInstructionTesting - VPCEXTInstruction TestingInstructionTesting - RDTSCCheckNamed System ObjectsInstructionTesting - VMCPUIDModernSpecs Check - PrinterModern Specs CheckInstructionTesting - SIDT (red pill)Check SoftwareCheckWindows - Title barsInstructionTesting - SMSWInstruction Testing - STRUnique Hardware/FirmwareCheck - CPU LocationInstruction Testing- SGDT/SLDT (no pill)Guest Process TestingCheck Fileand Directory ArtifactsUnique Hardware/FirmwareCheck - I/O Communication PortCheck ProcessesInstruction Testing - INCheck Virtual DevicesUnique Hardware/FirmwareCheck - CPU NameUnique Hardware/FirmwareCheck - BIOSModernSpecs Check - Drive sizeCheck Memory ArtifactsUnique Hardware/FirmwareCheck - MAC AddressModern Specs Check- Total physical memoryUniqueHardware/Firmware CheckAnti-Behavioral AnalysisCallGraph Generation EvasionData Flow Analysis EvasionDisassembler EvasionExecutable Code ObfuscationExecutableCode OptimizationExecutableCode VirtualizationObfuscatedFiles or InformationSoftware PackingTwo-layer Function ReturnInvoke NTDLL SystemCalls via Encoded TableControl DependenceImplicit FlowsArbitraryMemory CorruptionArgument ObfuscationConditional MisdirectionVBA StompingVariable RecompositionValue Dependent JumpsAPI HashingStack StringsCode InsertionDead Code InsertionData Value ObfuscationInterleaving CodeJump InsertionFake Code InsertionEntry Point ObfuscationJunk Code InsertionImportAddress Table ObfuscationMerged Code SectionsImport CompressionSymbol ObfuscationStructuredException Handling (SEH)Instruction OverlapThunk Code InsertionGuard PagesMinificationJump/CallAbsolute AddressMultiple VMsEncryption of DataEncryption-CustomAlgorithmEncodingEncryption of CodeEncryption-StandardAlgorithmEncryptionEncoding-Custom AlgorithmEncoding-StandardAlgorithmConfuserCustom CompressionCustomCompression of DataVMProtectThemidaNested PackingStandardCompression of DataStandardCompression of CodeArmadilloASPackStandard CompressionCustomCompression of CodeUPXAnti-Static AnalysisCryptocurrencyHookingInput CaptureKeyloggingScreen CaptureBitcoinEthereumZcashProcedure HookingShadow SDT HookingImport AddressTable (IAT) HookingInline PatchingExport AddressTable (EAT) HookingSystem ServiceDispatch Table HookingMouse EventsApplication HookPollingWinAPICollectionC2 CommunicationDomain Name GenerationIngress Tool TransferDirectory ListingRequest Email TemplateRequest CommandRequestEmail Address ListSend DataSend HeartbeatExecute Shell CommandReceive DataStart Interactive ShellImplant toController File TransferServerto Client File TransferExecute FileSend System InformationAuthenticateCheck for PayloadFile searchCommand and ControlCryptocurrencyHookingInput CaptureKeyloggingScreen CaptureBitcoinEthereumZcashProcedure HookingShadow SDT HookingImport AddressTable (IAT) HookingInline PatchingExport AddressTable (EAT) HookingSystem ServiceDispatch Table HookingMouse EventsApplication HookPollingWinAPICredential AccessAlternativeInstallation LocationBootkitBypassData Execution PreventionComponent FirmwareConditional ExecutionCovert LocationDisableor Evade Security ToolsHidden ArtifactsHiddenFiles and DirectoriesHijack Execution FlowHookingIndicator BlockingInstall Insecureor Malicious ConfigurationModify RegistryObfuscatedFiles or InformationPolymorphic CodeProcess InjectionRootkitSelf DeletionSoftware PackingRegistry InstallFileless MalwareROP ChainsRouter FirmwareRuns as ServiceEnvironmental KeysSuicide ExitGetVolumeInformationSecure TriggersDeposited KeysHost Fingerprint CheckToken CheckHide Data in RegistrySteganographyHeavens GateModify PolicyAMSI BypassDisable Code IntegrityDisableKernel Patch ProtectionDisable SystemFile Overwrite ProtectionBypassWindows File ProtectionForce Lazy WritingUnhook APIsHiddenUserspace LibrariesHidden ServicesHidden Kernel ModulesHidden ProcessesDirect KernelObject ManipulationLocationTimestampExtensionAttributeImport AddressTable (IAT) HookingAbuseWindows Function CallsSystem ServiceDispatch Table HookingExport AddressTable (EAT) HookingInline PatchingShadow System ServiceDispatch Table HookingProcedure HookingShadow SDT HookingImport AddressTable (IAT) HookingInline PatchingExport AddressTable (EAT) HookingSystem ServiceDispatch Table HookingRemoveSMS Warning MessagesEncryption of DataEncryption-CustomAlgorithmEncodingEncryption of CodeEncryption-StandardAlgorithmEncryptionEncoding-Custom AlgorithmEncoding-StandardAlgorithmPacker StubCode ReorderingCall IndirectionsPatchProcess Command LineHook Injectionvia SetWindowsHooksExInjectionvia Windows FibersInjection and Persistencevia Registry ModificationInjection using ShimsHypervisor/VirtualizedRootkitHardware/Firmware RootkitApplication RootkitMemory RootkitKernel Mode RootkitBootloaderCOMSPECEnvironment VariableConfuserCustom CompressionCustomCompression of DataVMProtectThemidaNested PackingStandardCompression of DataStandardCompression of CodeArmadilloASPackStandard CompressionCustomCompression of CodeUPXDefense EvasionAnalysis Tool DiscoveryApplicationWindow DiscoveryCode DiscoveryFileand Directory DiscoverySelf DiscoverySMTP Connection DiscoverySystemInformation DiscoveryTaskbar DiscoveryProcessdetection - DebuggersProcess detection- PCAP UtilitiesProcess detection- Process UtilitiesProcess detection -SysInternals Suite ToolsProcessdetection - PE UtilitiesProcess detectionKnown File LocationKnown WindowProcessdetection - SandboxesWindow TextEnumerate PE SectionsParse PE HeaderInspect SectionMemory PermissionsLog FileGenerateWindows ExceptionDiscoveryCommandand Scripting InterpreterConditional ExecutionExecution DependencyExploitationfor Client ExecutionInstall Additional ProgramPreventConcurrent ExecutionRemote CommandsSend EmailSend Poisoned Text MessageSystem ServicesUser InteractionRuns as ServiceEnvironmental KeysSuicide ExitGetVolumeInformationSecure TriggersDeposited KeysHost Fingerprint CheckToken CheckRemoteDesktop Protocols (RDP)SysinternalsFile TransferProtocol (FTP) ServersJava-based Web ServersWindows UtilitiesRed HatJBoss Enterprise ProductsDelete FileExecuteSleepUninstallUpload FileShutdownDownload FileMSDTCExecutionArchive Collected DataAutomated ExfiltrationEncoding- Standard EncodingEncryption- Standard EncryptionEncryption- Custom EncryptionEncodingEncoding- Custom EncodingEncryptionExfiltratevia File Hosting ServiceExfiltrationClipboard ModificationComponent FirmwareCompromise Data IntegrityData DestructionData Encrypted for ImpactDenial of ServiceDestroy HardwareDisk WipeExploit Kit BehaviorExploitationfor Client ExecutionGenerate FraudulentAdvertising RevenueManipulate Network TrafficModify HardwareRemote AccessResource HijackingSpammingRouter FirmwareEmpty Recycle BinDeleteApplication/SoftwareDelete Shadow CopiesRansom NoteRemoteDesktop Protocols (RDP)SysinternalsFile TransferProtocol (FTP) ServersJava-based Web ServersWindows UtilitiesRed HatJBoss Enterprise ProductsClick HijackingAdvertisementReplacement FraudMouseCDROMPrinterReverse ShellCryptojackingPassword CrackingImpactMalicious Network DriverIngress Tool TransferSend EmailSend Poisoned Text MessageSupply Chain CompromiseExploit Private APIsAbuseEnterprise CertificatesLateral MovementDNS CommunicationFTP CommunicationHTTP CommunicationICMP CommunicationInterprocess CommunicationSMTP CommunicationSocket CommunicationWinINetResolveTLD::DNS CommunicationDDNS Domain Connect::DNSCommunicationResolve Free HostingDomain::DNS CommunicationResolve::DNSCommunicationServer Connect::DNSCommunicationSendFile::FTP CommunicationWinINet::FTPCommunicationClient::HTTPCommunicationConnect to Server::HTTPCommunicationGet Response::HTTPCommunicationSend Request::HTTPCommunicationOpenURL::HTTP CommunicationWinINet::HTTPCommunicationReceive Request::HTTPCommunicationSet Header::HTTPCommunicationSendData::HTTP CommunicationIWebBrowser::HTTPCommunicationSend Response::HTTPCommunicationCreate Request::HTTPCommunicationServer::HTTPCommunicationExtractBody::HTTP CommunicationRead Header::HTTPCommunicationWinHTTP::HTTPCommunicationStart Server::HTTPCommunicationDownloadURL::HTTP CommunicationEcho Request::ICMPCommunicationGenerate Traffic::ICMPCommunicationCreate Pipe::InterprocessCommunicationRead Pipe::InterprocessCommunicationWrite Pipe::InterprocessCommunicationConnect Pipe::InterprocessCommunicationRequest::SMTPCommunicationServer Connect::SMTPCommunicationSend UDP Data::SocketCommunicationReceive TCP Data::SocketCommunicationStart TCP Server::SocketCommunicationReceive Data::SocketCommunicationUDP Client::SocketCommunicationGet Socket Status::SocketCommunicationReceive UDP Data::SocketCommunicationSend Data::SocketCommunicationSend TCP Data::SocketCommunicationInitialize WinsockLibrary::Socket CommunicationTCP Client::SocketCommunicationConnect Socket::SocketCommunicationCreate TCP Socket::SocketCommunicationCreate Socket::SocketCommunicationSet Socket Config::SocketCommunicationCreate UDP Socket::SocketCommunicationTCP Server::SocketCommunicationInternetOpen::WinINetInternetOpenURL::WinINetInternetWriteFile::WinINetInternetReadFile::WinINetInternetConnect::WinINetCommunicationMicro-objectiveCrypto LibraryCryptographic HashDecrypt DataEncrypt DataEncryption KeyGeneratePseudo-random SequenceHashedMessage Authentication CodeSHA1::Cryptographic HashSHA256::CryptographicHashSHA224::CryptographicHashMD5::Cryptographic HashSnefru::CryptographicHashTiger::Cryptographic HashTwofish::Decrypt DataSkipjack::Decrypt DataBlowfish::Decrypt DataHC-128::Decrypt DataAES::Decrypt DataRC4::Decrypt DataStreamCipher::Decrypt DataBlockCipher::Decrypt DataCamellia::Decrypt DataHC-256::Decrypt Data3DES::Decrypt DataSosemanuk::Decrypt DataRC6::Decrypt DataRSA::Decrypt DataRSA::Encrypt DataBlockCipher::Encrypt DataAES::Encrypt DataStreamCipher::Encrypt DataRC6::Encrypt DataCamellia::Encrypt DataHC-256::Encrypt DataTwofish::Encrypt DataBlowfish::Encrypt DataHC-128::Encrypt DataSkipjack::Encrypt DataRC4::Encrypt Data3DES::Encrypt DataSosemanuk::Encrypt DataImport PublicKey::Encryption KeyRC4 KSA::Encryption KeyGetTickCount::GeneratePseudo-random SequenceMersenne Twister::GeneratePseudo-random SequenceUse API::GeneratePseudo-random Sequencerand::GeneratePseudo-random SequenceRC4 PRGA::GeneratePseudo-random SequenceCryptographyMicro-objectiveCheck StringChecksumCompress DataCompression LibraryDecode DataDecompress DataEncode DataModuloNon-Cryptographic HashUse ConstantBSD::ChecksumLuhn::ChecksumCRC32::ChecksumAdler::ChecksumVerhoeff::ChecksumQuickLZ::Compress DataIEncodingFilterFactory::CompressDataBase64::Decode DataXOR::Decode DataaPLib::Decompress DataIEncodingFilterFactory::DecompressDataQuickLZ::Decompress DataXOR::Encode DataBase64::Encode DataFast-Hash::Non-CryptographicHashMurmurHash::Non-CryptographicHashdhash::Non-CryptographicHashpHash::Non-CryptographicHashFNV::Non-CryptographicHashData Micro-objectiveAlter File ExtensionCopy FileCreate DirectoryCreate FileDelete DirectoryDelete FileGet File AttributesMove FileRead FileRead Virtual DiskSet File AttributesWrites FileAppend Extension::AlterFile ExtensionCreate OfficeDocument::Create FileCreate RansomwareFile::Create FileFile System Micro-objectiveInstall DriverLoad DriverSimulate HardwareMinifilter::InstallDriverMinifilter::Load DriverMouseClick::Simulate HardwareCtrl-Alt-Del::SimulateHardwareHardware Micro-objectiveAllocate MemoryChange Memory ProtectionFree MemoryHeap SprayOverflow BufferStack PivotExecutable Stack::ChangeMemory ProtectionExecutable Heap::ChangeMemory ProtectionMemory Micro-objectiveConsoleEnvironment VariableRegistryWallpaperGet Variable::EnvironmentVariableSet Variable::EnvironmentVariableCreateRegistry Key::RegistryDeleteRegistry Key::RegistrySetRegistry Key::RegistryQueryRegistry Key::RegistryDeleteRegistry Value::RegistryOpenRegistry Key::RegistryQueryRegistry Value::RegistryOperatingSystem Micro-objectiveAllocateThread Local StorageCheck MutexCreate MutexCreate ProcessCreate ThreadEnumerate ThreadsOpen ProcessOpen ThreadResume ThreadSetThread Local Storage ValueSuspend ThreadSynchronizationTerminate ProcessTerminate ThreadCreate Process viaShellcode::Create ProcessCreate SuspendedProcess::Create ProcessCreate Processvia WMI::Create ProcessCreateMutex::SynchronizationProcess Micro-objectiveBootkitComponent FirmwareHidden ArtifactsHiddenFiles and DirectoriesHijack Execution FlowHookingInstall Insecureor Malicious ConfigurationKernelModules and ExtensionsMalicious Network DriverModify Existing ServiceModify RegistryRegistryRun Keys / Startup FolderRemote AccessIngress Tool TransferShutdown EventRouter FirmwareHiddenUserspace LibrariesHidden ServicesHidden Kernel ModulesHidden ProcessesDirect KernelObject ManipulationLocationTimestampExtensionAttributeImport AddressTable (IAT) HookingAbuseWindows Function CallsSystem ServiceDispatch Table HookingExport AddressTable (EAT) HookingInline PatchingShadow System ServiceDispatch Table HookingProcedure HookingShadow SDT HookingImport AddressTable (IAT) HookingInline PatchingExport AddressTable (EAT) HookingSystem ServiceDispatch Table HookingDevice DriverReverse ShellPersistenceHijack Execution FlowHookingKernelModules and ExtensionsModify Existing ServiceProcess InjectionImport AddressTable (IAT) HookingAbuseWindows Function CallsSystem ServiceDispatch Table HookingExport AddressTable (EAT) HookingInline PatchingShadow System ServiceDispatch Table HookingProcedure HookingShadow SDT HookingImport AddressTable (IAT) HookingInline PatchingExport AddressTable (EAT) HookingSystem ServiceDispatch Table HookingDevice DriverPatchProcess Command LineHook Injectionvia SetWindowsHooksExInjectionvia Windows FibersInjection and Persistencevia Registry ModificationInjection using ShimsPrivilege Escalation + +Archive Collected DataCryptocurrencyHijack Execution FlowInput CaptureKeyloggingScreen CaptureEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmBitcoinEthereumZcashAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingMouse EventsApplication HookPollingWinAPICollectionAutomated ExfiltrationExfiltratevia File Hosting ServiceExfiltrationIngress Tool TransferMalicious Network DriverSend EmailSend Poisoned Text MessageSupply Chain CompromiseAbuse Enterprise CertificatesExploit Private APIsLateral MovementHijack Execution FlowInstall CertificateKernel Modules and ExtensionsModify Existing ServiceProcess InjectionAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingDevice DriverAsynchronous Procedure CallDynamic-link Library InjectionExtra Window Memory InjectionHookInjection via SetWindowsHooksExInjection and Persistencevia Registry ModificationInjection using ShimsInjection via Windows FibersPatch Process Command LinePortable Executable InjectionProcess HollowingThread Execution HijackingPrivilege EscalationCryptocurrencyHijack Execution FlowInput CaptureKeyloggingScreen CaptureBitcoinEthereumZcashAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingMouse EventsApplication HookPollingWinAPICredential AccessCapture EvasionConditional ExecutionDebugger DetectionDebugger EvasionDynamic Analysis EvasionEmulator DetectionEmulator EvasionExecutable Code VirtualizationHijack Execution FlowMemory Dump EvasionSandbox DetectionSoftware PackingVirtual Machine DetectionEncrypted PayloadsMemory-only PayloadMultiple Stages of LoadersDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckAnti-debugging InstructionsAPI Hook DetectionCheck ProcessesCheckRemoteDebuggerPresentCloseHandleDebugger ArtifactsHardware BreakpointsInterruptionIsDebuggerPresentMemory BreakpointsMemory Write WatchingMonitoring ThreadNtQueryInformationProcessNtQueryObjectNtSetInformationThreadNtYieldExecution/SwitchToThreadOutputDebugStringPageException Breakpoint DetectionParent ProcessProcess Environment BlockProcessEnvironment Block BeingDebuggedProcessEnvironment Block IsDebuggedProcessEnvironment Block NtGlobalFlagProcess JobsProcessHeapRtlAdjustPrivilegeSeDebugPrivilegeSetHandleInformationSoftware BreakpointsStack CanaryTIB AwareTiming/Delay CheckTiming/Delay Check GetTickCountTiming/DelayCheck QueryPerformanceCounterTLS CallbacksUnhandledExceptionFilterWudfIsAnyDebuggerPresentBlock InterruptsBreak Point ClearingByte StealingChange SizeOfImageCode Integrity CheckException MisdirectionGet Base IndirectlyGuard PagesHook InterruptImport ObfuscationInliningLoop EscapesMalloc UseModify PE HeaderNanomitesObfuscate Library UseParallel ThreadsPipeline MisdirectionPre-DebugRelocate API CodeReturn ObfuscationRtlAdjustPrivilegeSection MisalignmentSelf-DebuggingSelf-UnmappingStatic LinkingStolen API CodeTamperingThread TimeoutUse InterruptsAlternative ntdll.dllAPI HammeringCode Integrity CheckData FloodDelayed ExecutionDemo ModeDrop CodeEncode FileHook File SystemHook InterruptIllusionRestartCheckEmulator-related Registry KeysCheck for Emulator-related FilesCheck for WINE VersionFailed Network ConnectionsDifferent Opcode SetsExtra Loops/Time LocksUndocumented/Unimplemented OpcodesUnusual/Undocumented API CallsMultiple VMsAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingCode Encryption in MemoryErase the PE headerFeed MisinformationFlow Opcode ObstructionGuard PagesHide virtual memoryHook memory mapping APIsOn-the-Fly APIsPatch MmGetPhysicalMemoryRangesSizeOfImageTamperingCheck Clipboard DataCheck FilesHuman User CheckInjected DLL TestingProduct Key/ID TestingScreen Resolution TestingSelf CheckTest API RoutinesTiming/Date CheckTiming/Uptime CheckArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectCheck File and Directory ArtifactsCheck Memory ArtifactsCheck Named System ObjectsCheck ProcessesCheck Registry KeysCheck Running ServicesCheck SoftwareCheck Virtual DevicesCheck WindowsCheck Windows - Title barsCheck Windows - Unique windowsCheck Windows - Window sizeGuest Process TestingHTML5 Performance Object CheckHuman User CheckInstruction TestingInstruction Testing - CPUIDInstruction Testing - INInstruction Testing - RDTSCInstructionTesting - SGDT/SLDT (no pill)InstructionTesting - SIDT (red pill)Instruction Testing - SMSWInstruction Testing - STRInstruction Testing - VMCPUIDInstruction Testing - VPCEXTModern Specs CheckModern Specs Check - Drive sizeModernSpecs Check - Keyboard layoutModern Specs Check - PrinterModernSpecs Check - Processor countModern SpecsCheck - Total physical memoryModern Specs Check - USB driveUnique Hardware/Firmware CheckUniqueHardware/Firmware Check - BIOSUnique Hardware/FirmwareCheck - CPU LocationUniqueHardware/Firmware Check - CPU NameUnique Hardware/FirmwareCheck - I/O Communication PortUnique Hardware/FirmwareCheck - MAC AddressAnti-Behavioral AnalysisC2 CommunicationDomain Name GenerationIngress Tool TransferAuthenticateCheck for PayloadDirectory ListingExecute FileExecute Shell CommandFile searchImplantto Controller File TransferReceive DataRequest CommandRequest Email Address ListRequest Email TemplateSend DataSend HeartbeatSend System InformationServer to Client File TransferStart Interactive ShellCommand and ControlBootkitComponent FirmwareHidden Files and DirectoriesHide ArtifactsHijack Execution FlowIngress Tool TransferInstallInsecure or Malicious ConfigurationKernel Modules and ExtensionsMalicious Network DriverModify Existing ServiceModify RegistryRegistry Run Keys / Startup FolderRemote AccessShutdown EventRouter FirmwareAttributeExtensionLocationTimestampDirect Kernel Object ManipulationHidden Kernel ModulesHidden ProcessesHidden ServicesHidden Userspace LibrariesAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingDevice DriverReverse ShellPersistenceAlternative Installation LocationBootkitBypass Data Execution PreventionComponent FirmwareConditional ExecutionCovert LocationDisable or Evade Security ToolsHidden Files and DirectoriesHide ArtifactsHijack Execution FlowIndicator BlockingInstallInsecure or Malicious ConfigurationModify RegistryObfuscated Files or InformationPolymorphic CodeProcess InjectionRootkitSelf DeletionSoftware PackingFileless MalwareRegistry InstallROP ChainsRouter FirmwareDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckHide Data in RegistrySteganographyAMSI BypassBypass Windows File ProtectionDisable Code IntegrityDisable Kernel Patch ProtectionDisableSystem File Overwrite ProtectionForce Lazy WritingHeavens GateModify PolicyUnhook APIsAttributeExtensionLocationTimestampDirect Kernel Object ManipulationHidden Kernel ModulesHidden ProcessesHidden ServicesHidden Userspace LibrariesAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingRemove SMS Warning MessagesEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmEncryption of CodeEncryption of DataCall IndirectionsCode ReorderingPacker StubAsynchronous Procedure CallDynamic-link Library InjectionExtra Window Memory InjectionHookInjection via SetWindowsHooksExInjection and Persistencevia Registry ModificationInjection using ShimsInjection via Windows FibersPatch Process Command LinePortable Executable InjectionProcess HollowingThread Execution HijackingApplication RootkitBootloaderHardware/Firmware RootkitHypervisor/Virtualized RootkitKernel Mode RootkitMemory RootkitCOMSPEC Environment VariableArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectDefense EvasionConsoleEnvironment VariableRegistryWallpaperSet VariableCreate Registry KeyDelete Registry KeyDelete Registry ValueOpen Registry KeyQuery Registry KeyQuery Registry ValueSet Registry ValueOperating System Micro-objectiveAllocate Thread Local StorageCheck MutexCreate MutexCreate ProcessCreate ThreadEnumerate ThreadsOpen ProcessOpen ThreadResume ThreadSet Thread ContextSet Thread Local Storage ValueSuspend ThreadTerminate ProcessTerminate ThreadUnmap Section ViewWrite Process MemoryCreate Process via ShellcodeCreate Process via WMICreate Suspended ProcessProcess Micro-objectiveInstall DriverLoad DriverSimulate HardwareMinifilterMinifilterCtrl-Alt-DelMouse ClickHardware Micro-objectiveCrypto AlgorithmCrypto ConstantCrypto LibraryCryptographic HashDecrypt DataEncrypt DataEncryption KeyGenerate Pseudo-random SequenceHashed Message Authentication CodeAPI CallStatic Public LibraryMD5SHA1SHA224SHA256SnefruTiger3DESAESBlock CipherBlowfishCamelliaHC-128HC-256RC4RC6RSASkipjackSosemanukStream CipherTwofish3DESAESBlock CipherBlowfishCamelliaHC-128HC-256RC4RC6RSASkipjackSosemanukStream CipherTwofishImport Public KeyRC4 KSAGetTickCountrandRC4 PRGAUse APICryptography Micro-objectiveCheck StringChecksumCompress DataCompression LibraryDecode DataDecompress DataEncode DataModuloNon-Cryptographic HashUse ConstantAdlerBSDCRC32LuhnIEncodingFilterFactoryQuickLZBase64XORaPLibIEncodingFilterFactoryQuickLZBase64XORdhashdjb2Fast-HashFNVMurmurHashpHashData Micro-objectiveAlter File ExtensionCopy FileCreate DirectoryCreate FileDelete DirectoryDelete FileGet File AttributesMove FileRead FileRead Virtual DiskSet File AttributesWrites FileAppend ExtensionCreate Office DocumentCreate Ransomware FileFile System Micro-objectiveDNS CommunicationFTP CommunicationHTTP CommunicationICMP CommunicationInterprocess CommunicationSMTP CommunicationSocket CommunicationWinINetDDNS Domain ConnectResolveResolve Free Hosting DomainResolve TLDServer ConnectSend FileWinINetClientConnect to ServerCreate RequestDownload URLExtract BodyGet ResponseIWebBrowserOpen URLRead HeaderReceive RequestSend DataSend RequestSend ResponseServerSet HeaderStart ServerWinHTTPWinINetEcho RequestGenerate TrafficConnect PipeCreate PipeRead PipeWrite PipeRequestServer ConnectConnect SocketCreate SocketCreate TCP SocketCreate UDP SocketGet Socket StatusInitialize Winsock LibraryReceive DataReceive TCP DataReceive UDP DataSend DataSend TCP DataSend UDP DataSet Socket ConfigStart TCP ServerTCP ClientTCP ServerUDP ClientInternetConnectInternetOpenInternetOpenURLInternetReadFileInternetWriteFileCommunication Micro-objectiveAllocate MemoryChange Memory ProtectionFree MemoryHeap SprayOverflow BufferStack PivotExecutable HeapExecutable StackMemory Micro-objectiveCall Graph Generation EvasionData Flow Analysis EvasionDisassembler EvasionExecutable Code ObfuscationExecutable Code OptimizationExecutable Code VirtualizationObfuscated Files or InformationSoftware PackingInvoke NTDLLSystem Calls via Encoded TableShadow Process CommunicationTwo-layer Function ReturnArbitrary Memory CorruptionControl DependenceImplicit FlowsArgument ObfuscationConditional MisdirectionDesynchronizing Opaque PredicatesFake FunctionValue Dependent JumpsVBA StompingAPI HashingArgument ObfuscationCode InsertionData Value ObfuscationDead Code InsertionEntry Point ObfuscationFake Code InsertionGuard PagesImport Address Table ObfuscationImport CompressionInstruction OverlapInterleaving CodeJump InsertionJunk Code InsertionOpaque PredicateStack StringsStructuredException Handling (SEH)Symbol ObfuscationThunk Code InsertionVariable RecompositionJump/Call Absolute AddressMinificationMultiple VMsEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmEncryption of CodeEncryption of DataArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectAnti-Static AnalysisAnalysis Tool DiscoveryApplication Window DiscoveryCode DiscoveryFile and Directory DiscoveryReferencesSelf DiscoverySMTP Connection DiscoverySystem Information DiscoveryKnown File LocationKnown WindowKnown Windows Class NameProcess detectionProcess detection - DebuggersProcess detection - PCAP UtilitiesProcess detection - PE UtilitiesProcessdetection - Process UtilitiesProcess detection - SandboxesProcess detection- SysInternals Suite ToolsWindow TextEnumerate PE SectionsInspect Section Memory PermissionsParse PE HeaderFilter by ExtensionLog FileCheck Magic StringCheck Section LengthUse HashquineEnumerate Environment VariablesGenerate Windows ExceptionDiscoveryClipboard ModificationComponent FirmwareCompromise Data IntegrityData DestructionData Encrypted for ImpactDenial of ServiceDestroy HardwareDisk WipeExploit KitExploitation for Client ExecutionGenerate Traffic from VictimManipulate Network TrafficModify HardwareRemote AccessResource HijackingSpammingRouter FirmwareDelete Application/SoftwareDelete Shadow CopiesEmpty Recycle BinRansom NoteFileTransfer Protocol (FTP) ServersJava-based Web ServersRed Hat JBoss Enterprise ProductsRemote Desktop ProtocolsSysinternalsWindows UtilitiesAdvertisement Replacement FraudClick HijackingCDROMMousePrinterReverse ShellCryptojackingPassword CrackingImpactCommand and Scripting InterpreterConditional ExecutionExecution DependencyExploitation for Client ExecutionInstall Additional ProgramPrevent Concurrent ExecutionRemote CommandsSend EmailSend Poisoned Text MessageSystem ServicesUser ExecutionDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckFileTransfer Protocol (FTP) ServersJava-based Web ServersRed Hat JBoss Enterprise ProductsRemote Desktop ProtocolsSysinternalsWindows UtilitiesDelete FileDownload FileExecuteShutdownSleepUninstallUpload FileMSDTCExecution \ No newline at end of file From 476b07385da8ac783fa8bad29fe7ae18bc9ec021 Mon Sep 17 00:00:00 2001 From: Maddie Bright Date: Thu, 17 Oct 2024 10:44:52 -0400 Subject: [PATCH 3/4] removed old tables --- yfaq/tables/full_no_urls.xlsx | Bin 18013 -> 0 bytes yfaq/tables/full_with_urls.xlsx | Bin 21641 -> 0 bytes yfaq/tables/macro_no_urls.xlsx | Bin 15236 -> 0 bytes yfaq/tables/macro_with_urls.xlsx | Bin 17613 -> 0 bytes yfaq/tables/micro_no_urls.xlsx | Bin 9455 -> 0 bytes yfaq/tables/micro_with_urls.xlsx | Bin 10849 -> 0 bytes 6 files changed, 0 insertions(+), 0 deletions(-) delete mode 100644 yfaq/tables/full_no_urls.xlsx delete mode 100644 yfaq/tables/full_with_urls.xlsx delete mode 100644 yfaq/tables/macro_no_urls.xlsx delete mode 100644 yfaq/tables/macro_with_urls.xlsx delete mode 100644 yfaq/tables/micro_no_urls.xlsx delete mode 100644 yfaq/tables/micro_with_urls.xlsx diff --git a/yfaq/tables/full_no_urls.xlsx b/yfaq/tables/full_no_urls.xlsx deleted file mode 100644 index f6034093f6e281adc064a47ec72444e6f5b8307f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 18013 zcmZ_01yo#3vo1WiLvWYi?(PJ4_uvff?(XivCAhm2G{IeiyF+ldfAYTHx#xa&t)I1K zy6LWZs_UuV*0p<-WFa6i0000i=pzKsLSLEC1p@$3pa1}LP>Zgpy`2lt&c#5@(*fwL z$LL{eQ=Kwp*UyYNc;OvIyHpN$#w?E>I`B@wRa6fH8!1aROCALg+?uxvzETp)+E=V$ z{qo|gP#r^=wPI!+VbMkRI{`%tTEWwH?YrSc#7QLZg+`MTsEGf( zh8t;^2t?5{8lX)_?8Bo#-~Y98Oq}8)xi!DMXb1$?R|P}wLCYN94A9%8%aLQpYbcL7 z7GG4OXwsZJf`G3$98&kIKOUQ_6hkIcrc%L$&*^s z3beEanyNcoGr2WD?_ zWHRL=KjO79rG}xs5+CzjTLk3O>EbX(6~`>U&`ixAN4WLI-B#3GxIB*p9E6m&ObV}b zP?Wu~%yQV+>DnJBo*R89G1qw=r8bo#j12UgzsL^LJSd=5nm*LiSn7NgD9x3cF34}m zwm?-aSJ)ZT>2W1k)q^{nijn=&`q56185%_9t_^4M$~sHMHSGiVZ$`vibuW)VOtga- z!2^{ZHcbDL;%@I`ZESCE{da!;4?$J~%%8+A-r(yWbllKnXcC=iLcgxwLWDH6$k|9+ zv|7GBpu))$!WO{f{fzmY0n>RpF*O|xL3t9Ssf0-ZdrSFyvK3y?-9CPbB%-;s1BD1P zMyjryc=6)5^(5O~hZJeJhssv^Zgh$%0di*4r_h zni-rb!KEbR`A{d&w>*zTKidvf^Er7Khwhw`B%K=^(-w<-9pW$)+v+@fQP z;)cY}Pe|;yYDX+YKq#Q+tGmvWw^2*1iPE{bR>k!&cK&B*VyUonXu`_#?OO7|UDA(P zO7dZBHGE(ROVDOxcJTS&;NFTu$H2G8K)}WTf4S;U+G@_D;-(#O9cSNHncA5VUm ztc8iIZN)zW#g%W{Go|rNz8^1cce|DsA26%?Og9VbCsv&u8xy_TeK*s7+O__^@4(g< zi_6zi$>q&BgP**c1Yc|I(l#$zuuqAT7tWXLSM|t#-Q<0(zR1;o7ijD8^{{;MdwRJl zc<5xbt8LwM`ylLMTF*xYI(j(Vy;*j4e@vY+t;v3?Me1_l)Uo@PCup}Qgv`mrARxe) zN44&IX~(rwd8p{`_5Qg3jSnvOaJyBJ<}qHfN1*lgW8B>MOCBy7`pbAk`u8dJpGAUf zlqF|u3@qw-8J|=iGLX}`kJzYwwh6LPNE|$w8=K}TMkaa+l1UtRO2mxc@UXB>8AK#{ zc9Vb_kmWw#bb%^QN$EWYPZq5>@2#Z#wXk{3Bu+k)aEGRT;XJ$QtrEQ$tUXA~#Wmqv zw+jbyN@n143?>(bXQ9K+No@5=ZY4abh+?^Ufiu2`DL9^3=DlTh6A_8#j>s`{cK|tx zaVX~IVSX6Ok>A+NQ_pft&Xn!Fr=KsqV4u*x-2p<-b8rq~mV8|xeoPj&r@7?WFH`g6FE8$#k?2AAcUep1@Zs2iYq`~;9= zV4Vt-X1#|RZxoyx%a&%m_KN5tGOp2UAad$2-#{$DY{mt-($I}>D3h^yh5u~jOi9fK zR+3il&g{03m7E=!+Qc@I(I3fQ+FM5G0WJ607vzSgAWTWp+am(Y?BqXw_=_4Kq>K9M zf8$BMKTFB2!LB+LfBz}IHD^!GD|PoLBy;~@BVj4D!8baga37-TplH6rP;g}V|ED8&EiP%4$BFOFTPwm*o0myckn&3a*rwWgNG*KH`524E-MiG0*yh zF?x3g;D~zFDAyINPtYl z41P1~J>t)UC}i~qlbE_en9luc;z`-x3oJ&kR`zIYq3V?5)GMc%q-Fjv+o1w|Ao~gr zp9rk*-2+5Y_y6UC`hR@*K6n9|wiaEd7&y(^=DkM*ejwoO=xk|-V{7DH6(J9>n8_Q8 z+kKd-Lc3m>=WEX%q$_wqh@D$UWU%YZJRH=Nh9Y!fE2ua)mE=Y!>M}X>pm~-P3wSj? z1wa&@einGjuWCg&l>ujo1cd`AVM`K*32BErb!^CEQ+*Zp4P3lq#8?+?{AMfDIBs7v z(SRfbVl2Fd}%6AV~2z5af-+e;_}plZiO! zZ6E}>urihN+3%6$B!;*on9s43vpi3S0X*fq<6vbnBgv)YD_BIVdYS=Hsg~eMYD|S> z!{*1H0qhzaP-RN{f)vzKRjMZnssVuFzypA^gWl%XN)ieP+JJJQ9Mq)>j z3_5+*Cn<{LKAFVN;5IMXAu!Eq*r6EqI~K)9D`H%W$S->04w@&$PhPXKZ~4z4S9{2Y zE0YxyB>YOq+XUZL1K>GU%|P5uN>fhMFaczO&*Y$o@!Ofr$p;Abyx9q%W0nqC$fa`X zQALW)e!{9)Tgy3BGAx5*sFlD8E6cyck<{98ir{%?ByBxEDuU6@lV_n8CG${axP1Ex zNNI97P9m{4EzC}gb4qZW3Bh32&l^f0ac!1>OwCLtl|m|K8L2iiMo?19pah6>tnvl< z98f|ODW}lD)f6L?0x+#?|N5JqEY|_X2#`5}`HHp|>yyBS_66CAC=(5Q@bm@;t;lXZ zB44HP3uJjLJ7xO<_&*Vb%rC?8luTe!TLsMe^kY!*tC9~79%=BF{&BI_-Qu^@N6p`h zHH~I#V2DG5uaHXEnl2|oE1H}FA*nJ#mIK*9NOsnL=L!hP%|$X{iB~6xT}$W}+|r3g z0Q@?|;e3vrE$dU!6P+}D4MP_mS`Ae0EwJEy=l2XeU`+QPvBZIIAQVVF>6rK}` z=qP!BD-~Q#(TMOWvW2jl!YE-8YlF<*7jPN(5P?_Yy--M)JHjd*eBqo=BJu&LGL(T- zgBJ-!o^}4f35O2il|ml#Pr#}K+afDrMQcr)E~fRF{nQqK^AC$8u-EF`QcvgrnhC|0FC_yMqiQDl?gsL2VvH(?!i)UO4K+HHN|LA=tkf^2jZwCvnhV3iD}p2}!gZTQ!T^^Ez~E3?KrOle z%LS;FxpPoRl^RMUcx^cc-0Ky--!L1~1%4-d<`0;GvjV_(XtqLHmb4cBnYYgcPk9n! z3%dQaz$0u%K!)QO0}z3TH395$#4H$!;(aHPVoN7Na+vH>u2Elkw z6yCCNgH)g};h23k>SVY$wPwDcE{}W)sfT&w{5QVZ=K&{>+Ow)I zI!^7PqbO22#5!6Lr3=jT`-1qJk*A5)ZGQ+dLKO>#CVoKBa{+^h)tno-3VTD%Ox++U z@QaI z5@Tc0C=smS9$r{vJtd9AH>;a0@jGgFWEc(Fu?{jJ)-tqJ6aZu1-U4p+OER)J>vxiw zI#yCKp@mTZCEEjDKoH(FgNV-kGzhSc^}7*J43@Ma6->@-gaZK8T%{Ytez^Hh*G_k8 zJr`|7#jNs7d94Jru!!wJ8p(vaJ81MVF~$Lfv`0v0xR}iP=ar!2V$nf1;lPUzjRucX zV%tN_A-6ITEJpLD0*tzhWeu&!b23hh77@MhlAo3qZAMu+HbMsnWGxhAZDdPc?Erg+CR?zzcavIt&oB_8~c885^A0`Eh-w%4QoNXOMebZ?j#qO4r4*?~u zv0C6Zw;ESFh=+wmBiX^e#K$68m#2DoxdMNIV*tEWg6q7BB>_RCVuzUhc}1^U_qX*D zII5f#9l~ZcJQ&HHWJZz1lw6nIwsA{}GWN-kpW#|TOW=(_+3<8%TUufPIDNb^EPO(N z!S}4kUa3nNprT)GMYn^A^+-rbj zV179*-9)kv0d{i$aperNQ!!{fUubWTC}gj|&=EwTWHwwzeej2!410g}tAK6Lj{1a} zA5$6{H>d@;2eKM$Yn#EOr_*C@>E(}WdZbx`QBul6d0^kt}%1PCj&uhu(TUc6(CcI zHiq~1PDkzoox-WLmuCsklsXz-zyA4$eilKl$>#JwhCN$kT(1d^wsD>P0a%dpGmb~oTU1mD*F`*S;|vEDk**00xp zYAxJb#n1oL;<>g$AOF_Yy*Rgk_y4q+acqg-{;gGiGOzm7f#zvQ)5DgM$9PSs<#mqu zqoh(Zr?~zH0>=XrVF?1qL{@a+46H@folfrQx=rim-zr03jl0pZA6b6=qGo0LhJe~j zY`~z-ruM#<`=@g*a6D^Y+=SD0p~ioO>1x~`hTj>wLDEZ_Z5uz(|CL7A^3o(Y`zx)# z_6I4p_@QN@v*kxY{cTj8uRsH+w5s(isODl%+aTqrCAkY5oL%)gm`K`~*7Eu_-o-qP zk0*N}p7GENC2DdEB)UPaGqj-pF=o8+fq@uXtjSZ=>Hn1(q-#} z66$r;(5sIQ8~oB<*;wJB$IgxwC7YwpcKRKJG{zz7X7D0fM68t$dyp z2SHI!Yd6RJ1LZMULGJ>BD)VsGAk3pfj12{6Gf$mp?*}yea+d7ij+q)1K9zgnu=%pvPR*;t;3-ISFrA#fz_rgC|=| zu5lhM3)1!sPt|Z90m-)4C7Che;>iL(X~>LIfZ*8sWIWnUE$CAbw2tY&fh_X(q*ghB zL`QdY%c=i15d28B_@|*)*OL5i!)r$>xl?gLeTqPmNCY;BHUhoSH~pB&Yd3IPs2}F z&(EKYJh}Ak|9k^g2bO|MKkPKPrp|raeC(XU*T4Go=n~p|czh)!7OZL=xEpZue7S7W zdg~V8Z+m|$=@b-Po9N#?aQo4|{(eQ;|LoYTZMT%QVQ@yi`UYATd(o@p>LlvfWDs(_ zIoL6FyRzGObz#ZwT7CONEY#lf@wPjY*Q@Y|4JMXAm(+hQyZumnwA+qj-uR18G^KUy z`pNF;@^tQ_=;~!QT%F2@ z8y8sf2luC~LLWVPLfx)~YAJ zWu4FUEj+&r+=8kdG$Nv_Wyt&sfgor65?62bp^gKP{lMW1Oy!Q%GQRgC z`$4aTekXy|#i}?)d&6K@XQZX_oGj30KtQ=O{;PE&f+pFsgt#Svx$;19SmQwd`_O<| zD*e?)ieB(ao;*G6A4_k|u|<*ks-pgLo=>~BFa7vBFJ%EVe_n$Vh{Taqzn2UN1)Z;~ zDpUxYT_JwoLA#z{4aB@i*_^g2T8E>RVKA2&8*!D94dci&rIehuRILW-HvcXOY(2F*8z!{RM zk&!_kolaLUA0g0MpmCL4sr2LYVTKhoN!r2xZ_>?+i)^+*q@O_o0DrSepcQ%-BV!w& z^S{MEtIxj4t9Gl*h+!8G7(st@iCbK4l}m>^py{SH{R_u-4oSmt_8#{2|T+}5ICUxcbbQnEa zD~Z(?%5aXKyQU>tO@rsWVCnH|KN|+_+G_#lp+hq9#9AonZeB?n^K&pd;%a5Kdk4qz zUSxL-s>?a1-+1AmziK$?eC@%|EXFv)MSQzj72j=Tx%sMa&$I5?*b*0VZ9SAqA3Ya5 z2U8k%x9o0XSm+BND?yf%%rw2%SIdpSLabT{51O(M!eJ}pcJqLJaq6v#jm3I%KO}^) z4|}W~dR?)EGT|~HXElsvIqm*ZoB%!d=9b@?_C_nb>LR+ekN*gP6BbYjxrIhp(6$MP z-P78GTP*U){@KSBZMytMS8=EHOWdnXXu3+O!uLy1X zwV|#O|1h}_QD8lBt7p}cgbDQV-Vi}G@v%(9j(fCkwcVXE#mKi(zfH1(c|#W9^&ZWU zyv-D?juia31=rY4{-r%c8sWvR|3na9FpAxAJeMDKwn_C8XNiaKvPv0CrdkX=f4Sw zVm)2wUCstSp`IWP#buay3Ki_JR8!fddbYIc=DiGo7YXTviS*V>?!Ws8op^qC$3|@QEv0(D|eboo&!(_4@y#|z>LjyqpTP$qNyzH*a-5NtVc(@zB(sG;rQ{8YwuxS<}Kd{c@dl3#qwFY7GScksd{fjUe3Ze3@lP?P{g}$X@O{2JIk3yLo$R0CmYias=eT@$0Yia!FsWAiLG(97q5DAs9tX6Y@Sxi{2iA z5H}3*oq6OJ5;G+RLB&$~EjL|Ia1Wgm@>-9Z-K)*VAM^eUK&Sp3d4%WV)=GOULLv}o zrMr&Vd(DQ;(czZX8*=6`_|TaH|0;k0zwPr7y^a8j6do?1P3fpajvJ6YfdCH~9?H

    MeC$+$lk7L4qBn^M%T%!(uyOaRF<-Q(v=w)-POAFYi`zgx&&ud#{o*Tse!?BVir*z|`#oo)9KAN^nV9Ors!UG#Q04!;T?X`s=GD7L_D3^y!z!0;r_{iYJz%PS?v)5AHRI?k9`RS!RXg zANk9I!PWKIxSDu_I+2XQKE$S7*J9wmi4u&=cMczs;80@C*HWSHWZ~R0=Q+l>xZC!8 z)dQ6$Yd+=a_8Cd}v5C1&H3Vfn%Cvn-Go@IsxjZP=!ZTBeev#|_g+)!xDR*jIW; zFnjSFC(~rvs2M>|YdGxQ@!;GcjpFubz=Q!eRNWM9pFzf4dvHBlaCe=wZ6$%^>#Z$Q z=z-v`%WO z`%oX_LK^yy71~hHL;N$6gjSrWL4y$%0di1KOnAy39D&_UozuDEmEdw}S@qBNYZ~P5 z>=@TQ^8ot#@Si~a=WU?#r*f@clDd$#Mxm&2D*SYV?Sh+h{5=3R zk~s~Z%pqyS0)POC*(kR_SGfzeseq{piEvnb6Y>)3@)Lqq2fFrdxQ)+vV-*kK5| zRFJB`acLu|KeK;9_;%%GPyK6~bFd4B+0V`W&_=kD)mt#d32f#k5l$@L{X0@|iG0)Fjf&JhX@mvkSFhAt<&eg~kQfBn9F+`3DrA-(vyg z^fCdm7SxOvpIJZerPOW@jA7sg4*~r0H?(3o$;UJ{mZZ!hv&ODdzSyqt9ZseRvg6;` zg$NR~Z4fkJ7N$8-dUh}ma)yWf%j8fFH0l+z#xWACuWZPyW7F=FeF}~#5MkGr0*?1m z6R60zUn0ud$Y-S_q7ZRyiMhY2Ve#l5O(b zv+yE7vY9%MDLipjYkeRX2_W;#wp~<>vl>?R)zzW$_%&Nya^r80Xvzqb+w~2A%fptx9iVORMp>tqwTH>CdFoLou;sEBmuFoXEUIs0Oeud2@U;ztq9#)n zVsP;DF+48sRe83;mPSlm7!?YOtS>n_PEe7^H?FNefEyMlBbav$oXJTh5LPw9@cPnp zBqcHptWWJ>D}KSssTlM_`7YI12d*bWGU(kDm*1f}ZwKvW(PkdD`%_+6CMKLjqQ02k7~%N)`?Thq4EyO!+@d5~YcwmkihA)|w~0odP}2t8$a*BOKV9 zfcE)mIWI^DbQlH}gp;~kmDzXttYP@SD(}U^4T!Tv(QyxsgV(~-If4RhJ*R3aQsWxU zWrSPi-8w4tSDLyQn#*b`GW>1^(9j{uBOV?LHb<#BXzprg!~L>i>KD;iT(fFugD1uO zV%(VwYlDSmfF4r5w?dj*_n(7f`s_8;#jpi!VmD-yeH|4WDc#;ZGILULr!w?E*Y1$+ zzl!`?4lDGE>JdU;R~_R;LGl^&wSf8Vf2A^5YaYk<({W0|pu8aoBaw}p{|gM*4Sj?0 zrov}coR-(xQtK(o3C}^8wWxVxQ;tWb+>e2*;V&k9iKR00YGLr9A7P}E82$X}{`zxm zK#4o9buwXjQK{ECFFzA_6MpsBGzQ^@_~`vP%#%lptdK(oXwK8x@T5TFlPx*%z4EAA zE+GVqXrf=pk8#L!qSI{IK)Jf>Cq>27!OM`ZNi#V1Gz|3gU{$42#$zPN$X!u??oL%s zUU=?S^bMBGg)fuqREi|9yGsefsF6N{Zr$lhmhV$~m?v9AM1H{27W2xtm5h0QyM|K# z7F>bCD}A8#h2;A)LE=pzuRTwMt|&9sBJu^dk3vJf2M^7%74HQ^&b6d&xz|#x6*kNX zmx#Z$N-#=F41RUrKu?hTpGIhdH=u$o!r(A6`cJ7uVY!UJvvjANn$c&)AY+)7RM9O) zOeRwF;wM>^n)gNsG7Bw{yjcWG?IXZ!MB;UW+%$f651i=5PS>h9u%d$VObd`?5~v7Q z@`N!>oNxlx`i$f%ic>+FocIB-OE!gbJa3>7+1SK#mtK0w+F>kzXG)@{f$>+}V0HtC z_QCwrjo;}4I^0z4v%lvi`Efu0A;1{a?K@!B$LzSbt8_l2vG-#zZt*#$xgd;*5{|6v zEAym*K=^|Jhb1xNrmSq8{N(7zY<3)3M|IbT;!%|1Mfl^cvFv4{8$njExbP&iO$XEe zH=DW`iy8)3|5Q}wPa8R-jDnV z%FaUZa@a+?Rry*MCvn&apWyNXb!b;ihSz%5(J(6-cCpgv6dPWl+DDd~84Nduw1yT#;kc zY36wMLpPIkf*_RdAl9_#CseV>hd9j^WJfxi-*S++FP=5$Pur(xOu>S(anIw$9p zPNS0W&@msm++AF7^^TH%v_z=v@C_Y6wQU>x(}cuRRnVeb5Bp=eYK3BbA!$-N9{EN) ztZl{br+4)!w-!nv^`&Dj(FM0uk2tvNAh~D!jLz>cyrfDOZ+k36%ti=s++Uw1?zACa z%=Xb-BmA*frJ;@B<4-Ckxo{kl&SK3)LU&}k&-p2)P>WX9?y5xuQtuNrFVBwiujtG$y5Q29zh($1&I{VZ`t-e2^#3HFQ%=R~~J)^FGq zPG9Cd)Vjxe&lxeajVDIFLNd0dhyMkEe7q>dKR_`40&5ayZot(qO@5uKTP!nV zO+c=j)5BS^sQE$JcDc^e`JZEBEnnk{Z|1`q55c3Y6N?LAkfjLJm0WtcSMn57qZx(6TMn>p1Q@}S>$1jA zO{)a9snJe(Ujr^$73)kP#KN-Cl#e|xHMiLj4-#;{8oV`9)w1D`I>z?K=H6#7?0&0< zQ=yXKHaV>DTex~H!j$|tnMJC95Ov5bnEvF#*OwR;k^BZdKA&|(e5|@We2-KI!!;LO zr7Cb$RIwZ|wteG5KSV63Xz6uu>A9X(xbLbPmsSeSc~gJY@vP+7AgJJTxwj?GIv;B7ri9rc95si1P!Xmk+ z9vS9*_mAyQM~o-)HC>zCmo%zC(xbTo+ZTtPyMebJP{uUs4fCw__~BWGh>K$K>iVf;I5W8ju|`MEpF>8Yoq(Lez8nE`!|$;rh# z{sSGe-N(x!$6J+m&duESu_imgbU_6HHqfn<-jlHtyK7^gsqJ-@YiF+qFP7dN6_a9T(`Au+O_r;>!l7Kz#qX}0C|8eZGnI9%=d5PY$Sc(dN!#P_ zaXrLyJ&jh8c`mtWRCV?^<)p+%)?(jt9YX}XpM*ZE^n8MW5U6w zpP0@({28CG&W2Pta2zXiwHxTZ#kNR?@!_8Z6^*MObnH1DvGSyl|2nl4VtIS!`F`Io z;aUk5JB0Gd$as{)Qt4u4T7Q$3nUjV{)n<4s`K+PiIkeU8JOqM%8(0r}tRRK&rKQKU zANV$CO>xbem(lL)OQET6)dL&cCKKF>u2RmNJV6xO9k0P#+mUR5&|!1I-b#O~E@)P@ zI;~`Pq9B%BT2xlyQqoOS$i2iVjzKfglSK~6l$nF8UcMmU#zB2YSR-E0L3cIe^Bzp* zUW=dNA!{G{t@8%l8IoP4c=reui88uC@+Pw|m1o`88;(>|-C)Q2S;D&U3f0^Z`{!U> zV0V>+|5uv@Njw`Q!tLJ#TN?HO4mwcLTLQ&_zgNQ`Rrpcvy+7C1@0a(?DF#B8R-0#* zRY;xemi!rGc;l8DOW3X~x~o8G(8T0u(iCae4aZxqO}KkvLVEDPX61-}EAi;vWAN_a zMtR1_W9{Afo*|QCFJ3OFdd}?}?4n$1&rw`qt;&PxeY^oAYIlY0fVvMF8gQxADZF%G zT527Ibt?0Fi<1Lic^3;}N4`BK9Z@2E720oflCu_594sBZUHn3j+sNwE{pHax$N4b2 z0I|lXFf*KZGmjZ{9{e+Ycjh-Yq@W*Vb9?#whLqzjsSO8bAKw+?;t?XIT8ce+WRP~P zVGU;rlg(s)D$Sv~k_4rwqy=ri2~)KfLXMq}HQ%gH9o5uCsm4|=X!eBgg_A$z%)a zxj!`KyvNQjYMibW>pYS*ew+i(mNi_-(FwEtwRbNE2$(#LlGch`ZkYvcm@AJx_W3bI zV9jUOxN33>SS+|ff{f3&1iMHEjmr)ub6dB zkLo}E5G1bdRZ3rFzE0C!tlWx)x`tIO-7m5w4 zak??}{jI^Fms6c7Y}3|p6DvBMQ{NDP#H{$$wK(KUx*eB`deS?b9No9i#})ij&rr}C#x64z|!(88|i6X zP&`!RiX?fh&)B0?bl(D~pZok5JL#nmo&>3z-Czg2Ki$;OJ$&-O#<;dI>MT1^0hUU* zs6?c$O@QJ|PUD$7GHIy80T;1o|DNSvf9Je)IE(8qzS54lq=IMxYy)koHdYf|-@txgsDU(+Y zm7I&y<%7Knf%^~lvN4Xxqvv0*Ltyi;S%prnjU8bly*cSMd}QfkTdJO&sk6mN0qUxA z&rWn&@Vt?nNBJj=JI~6u&ZcO00fZofTJ689JNl@|rx+IAy36RG~p@YB2=U z-u(9T=t?;|IX+K1arJ`LL9m{Vqqh||O{xOSfjSw4(xti8WOpn&2uDV}&&_CL3UJ1W zq1X;+jD~bP>6J{C0YMys{lZT1z$o%BP~z=2oCgy8aGLt2BZ)a={WYdTs*#>hoZ8aD zdXmF850D0^!)IEW*h&m0JI*4!(i9b%xEYKT>?w9YjX}NxLieQwRBl>-*&#mloE-op z8;{mT)1}fyi62JB(sU(T02b$ii?8kdW8I$L5^L|9!sn{1yAsbt>!Sm_IEgzoutl%?zTc&F;T728J!PAGAf75d`Ec4fg|1e)U>sn~01 zkex3nIzG4F7&6bB_J9-HneMB~`D%%u6b>Tboht!J@vPJ7fWsimsEI_y@`5auu?#5dun4}C9uFGE@$ ze2VYIW1=^ub8RjeO44C>K2+IIrdBmi3<)Ec`_dt?(r8_VJ132|sEI!A4;v;-yaSWN zS-eB_jK=3|qV4|pIm#l**C4YawX;KBYh8iP8Gh%XrF@%#d3^lWJ;n6qPo;;Z82=!1 z+P6$EdaN*CtW;9$j^Z8Q9)c99_8iQDeznsBRmW$f-o~<{W=|Qe?7k^q(wOM0@-0>V(>tvw<>flD z%ff`6e_`T92zE(YLk4$%n@L{ou4Dig)Kq3gey=VMpXX)er+1CY;S0A+u%8}}Va->NA=184g zJV80qe==cet5$2wpL{PgVSi9k%Y-YS=)d zZt|-$n;g$>_t-l#n(m#P^#saKKD6>p7M0sn%VpgV4-HIEP4dI5BGgG7_@v|tVGy&% zlMOE=rwm8*J!a>9>SU7MsZ5^l-&|3^YhYir3@qy4yvj-be*alYH0h7qLnPMdC8>3l z$Q11=ei5lz{_v~48JMN0cH$(HZ+L_`->&8 z3c-*S7!h7d0#%2Va1BS@pg`g8E=(}LZGO3e{_mtH&a;GC9cYiG3jV+QEdS=oEr7Pbf4~1plb>tL$FGXvbl=cP zbhpN#^G(!bR&y>Fg`T%mt~ZqpMGDlH;(AwQjMzDgo}Ju7dfXDg@@Yv93;z+5?R%ypKUNzrwj= z4}44?lR)=xm(@CR>ouB}f50yoPB)kTxMg8>wf1s-yL_X=mv4=l5DQH#QZ`&~7NoU% z6oUbyEwCZs7D`@y^_lvY5-P%Q<)KiQ*E_}!ulK#Z?Z)JAp*(&sm+MO^h;5|o5Z>*v z3&D@mEXCX1Zq$u3BB>l51~+&S*l$&3C=ctX47jDw>WAx?(*U{N)8rRSJrpt) z<$1tb><+v`yz}CAzr~~-r7V|uQi$2M@%LS1W_DNqTRnf=n#AvPlutjhp zOMk%_{d2|g8M?tcMdP(Y(zlO-n8qdkJ93G{H^d{Qj7Ym_oE=sU8rXuGN3#pY69+Tn z9?`f8DQehpIeNItwkzITY65(YL6*5huKFlB86t&H1IISCPsa(&ab94FvtrJ=a&#wu zjE}?y>n`dozly_)4^i&PkGIFIZSUHJ?9P|5$&(Vk6cC6;88=O(D#PhlC)gl4_Ku7? zY!-{<)K*BYB$q4U zpdD4Y^(FAen!N2fz2b@?sPyW!y5*>K^ixycL6eIW9a2q%RHz!CmIRc#pY{C- zx%QF4!`e6swn;z%es!sM;r?s1&hJuDSqZY8N=&|Jpl7@y25PvnLrjj0-9I^_Fvxa z@*}L+gNqUg#ASwvpKyRYD=lqGsNsw$67v@bI0R1G`Pe}X!)jmXy*IOuW#X`WE4P%{ z+nH5h*u{drl&U6@m>Q(Ib%$lBF6Gs-NdWUQD(U8S+@<1R@l6+2$In`o*iR{o$(+`X z^Os9b@WS3cF86k8(tRe0P_Tm5ZpKM#7H^v+`vzCb9VR7h*KHivbzhXT`nMr~2Gecj zm&?Z8gqIKzf|-gbuxM8*mGnJN2cKN*EC+#A@5?M!s6mTS9tL}t1hOBs6#gbjY^X2$%Q_Sqc`od1TSB zqNe97PsGqm)*=Uv$i^aK(ZW(*^&`rlGg+JtM-GbIjRsSO3_~Pc#YK%(F?3M{k;;1H z7Omh47AWfMu5RPcpZ(Na98Nfs<%JX?LcT?^M)WBq^*&kOAj{;6d~&7e&aKS*?@O9) zWMw!7$Xg}Q`*x@xk4^1Ol$`7xoS97Qoq&IDZE}(({=RV+a=|aY=WR?Su2e;y3b+%a zAdeDWqxa6z`6<+ZWVuO1WjUvD61nST){~>x{`E{P>ow?R_6U9-R|L+&E@WOlbYp4E zB@T@^9jl51kG2UW9_vnigkgWMuaXVxYr};-+Zh=x>CntCqj0ItsheaPK2)G1o9&d7`2$u@Y-s z{ltgcaU{N@vkw;^6#OKOC_L0Axo>iR+ok`#gXEX34AJb4Uk-N4I1Nqrb0YQ|RX#7` z6W0|ijU78*}%|*%MdP%r0YD4bBtEPS{dbM}C zJ+dCPbH}UNnk$eJv7Ww|nbtoDQk1P<9PMX?8q?8+?CZhXAyVsUOl3taKC+kzq$Flz zC$_Y9PWwR{LR1RMn@jK*!>ktIG$BbTcRxOcApr`uOq>%`FVwOSv=PI|6=HoLrJpez zO@_e*7wIsMv3HDR_?heAb~_H~{4NO2tYvz zY6d7$|NI36{(l2eSkBNuHvs*p2Z(kChK9x-VC*9u{D7_z{X_(W#(BVOi2Hm5baT*8 z4nUZ*5190T=3qTX0NoVyCASDuP6Ll4fSLkZfQzmfed#DdvjcGTAgF3PtLvVKq7Tn!4xCeIzcL@;O-Q6L$yAw3H1`V#k-JNf8-_LW-cita8 zRa3S0+Pha(_0`jRs+DA+ps@e|06h2*254d~Pv}4Z0BA4(04BIaN8H}d1!U)9pyuHK za@J#Vx3#HCnzHL-K^{E!jG$jELpWiP#|-X&BjPTsgM$y3rJSLPfC_BMU4dLKj%MpE z`eOb3?5$80MU%N~W*uhH$?!W4O%qnZ!*=z%;d#UUOAIKjaCYV!9Lx%2{m6qA#|msu zR0c6lr3~FFl7D%CHpM*z5lDvAI{ko?Ng~dQ4wuXhHc%(OQ+87&hX93(L{N-QgA1fc z__T^2ZWs?j(=+O)Pebk{pvL?&uzX0G!4`)utAhkK{mHgKE%Q4 z7|22b07&4{zzJmI%*^!nvnruip`Qg=^wY91UcFgF2?a>-+b(NLLmAmTIG%inX!TZ3ubIGbh2mc&C(H#9tk#-5{}KG5IJ+t z>{X6ZrflR#tQIzK81`HIL!N81pnMub4A!XPn57uq)ZAg%*PfW0^6GP!rxCxspt9yk zk>z&k(pT0QP8&NN`@{HCqwi$q+ApKDrgFsL{vLDZSs@yG`SeQD`+8p%J6;4!a)8tM zdCgfC=&EH3+hf|@u0$((2>Vk}vSKaoZA2Nt0hDf92qrIVGatF9y#W7L5eZkFivzF{ zZD2(Rz@@tl^S`3F**jSq+uK|JouB^|$f}>^gT(nOV%@#=R}2}tcxSp`-IW`tpvGo7 z8)=Ic%h!8!1bJfke7M}7QNPpSI*uo%rX!(fjsi54u&Lp1Xns$&APTwJ$4-%jHMO*( zkzhvwYs*L%&VO4^vhTJ7DMH;y9^=Ii8xmr^fplEBKhkJe;Lo1+aTs0XDoR`KX1O}rKBD};`Xo6U zkZ9up092&_0J!+8&tGMnEkGa_XXbwj*1r-(XX`i}!)YjN+q0vKPqXJsZFh(7%gvovL(ZFqtIwUws?fSE>0N9`%f9bv&gA>+neh5co$$-u zjYkWAPBwwN*Ei3%NB5Vf*@1!C(5VjQl@ii>1Gm_c4X;(wE}PhrcM>5z0dK*RX17;T zZ;#etsed8sw^&f}NZ|Bczq>6#LQ!y(B8Xci)p*v@1RQ}fu`=6g( zyWdYAQ`Zg)eqHD4Q~C0rhPrz5bgX!<`groJpS`D@o(X#kpNzel zY+R+D=Gsp+oXicpu3cUq4*iNPBAo9UpPCZ#^5i?~ewi9$*4_9c3*~K|cKCxkO4M*^YZI#$>qH5M5%Koje%Tg~C!a z8G3$DA&*}(j+~~Q^CQrF3M6oygpl0W08ICy+IfV*({p1Ak9Tu~i8@+H!1KUe?BU5q z>rv}lg;X6&)9AsvIta^6^2?q&5{o6k|Oq zbQjccfjZgP4Xr%xP;>Nd&2rfCXI{xcP9OhzSusDxT)%I?2741()^K0BiT{=7CM> zNjlxwutcIgr=fcPkPuf-5ut>SRUuu@b_0PWczg{uO=Xw=HKt43ogQS?Gk0}DEYNW@ zApi>K8j~E|RTy+ehB zwfz6*fiBTn?gTs%S~Y&Z9%lZL>Ax;uPVq<5G{{JAOBQ<$o|i=os?GFjv=)yGVd{$3 zOM+Ch@k->1>$VVBj$*lcN>Bd|#B$Q*=(wM9cX^<>#*g$8x#@>B3XoH@n;v8V*D;uU z3#<*=MzI`gLf4lI-6Oafe`Q|#yc(OId`D81g|GXLgxlDia6b=^iJ+1!eT>DF;;FI$ zDhv)XaT!^kMD&L^D1pQUF%o&ptZ=jz?zRw07%g2?K$IzJQTlNmzliw8#_#?WHSILO z;I{lTHgk(Yc8(cp+qv?1y6v0nXoyh`LN4-BS~W@t6&+idID(M>aIU4I=52DUi^jqB z;sB`QcVq+R1avV9`#NDt@nGhGc&!TOoL~2byQLFAIfCup`a$cUk)MurX!hMJt&3VW?-Q?$lJdOs1GJbgoNVO;qI3U#G z2fxis7>ng|Y7r+NaESfHb z20s%w^DiYC=W+^k8H+sxy;Md>f&cM~K4oDz&k++lo8u&KfOnXSdO$YrbtaXI2B_DH zAR4^41FsTkBeV0xvjJxKIL!}ctRV{5+% z<@%3MN%(Cn=2ZPeyPh1xuyV!cCUS9nCYS*-6Jh9u3kykuRn4YIaf_@I07R>0H)zn2 z8D?Q!Dh!IQ!8^4`TZXA@fLa;@L1J}+wIAXq-Q^ES_)E0rg#|>Wx*X&%|I)Q<|D}^g zFASLj)0r9nm#!I17oLe6C#8(T;qXbX6`EGV+FCje(OJ@D2F3wJDc`3jByW5ej+c^r zmux?uj@*#Vo75y=E;{3bn$?#uvZnZA4!b6Rj$dbtC9INCWG5xyCncKw z1kiWJ+YLv#h{O83OmP20^*fG0WiElHi!fl0BwfYL$`(w;8E+1NxsBrsV5?fC0v2o{ z5wz|lrGldZfTOCq)8DcF)rc(;%v}%tam`55=|W5`UWGkPn^(7x+)BZtcL3t zJZ+g|KPwgYdIxZ9cjlGMavXyvL~0ebYstWbHCD0FtJy+4X_)rMP@k}07W^V3-xri* z+pAgt9!+Rq|E_3!0iA=x5Tl$99bn_6-309!S5p`zj0UX&78GX=_J9R^i7-x!=qT7K z2$?VGA=)$E%`n3iyt3{ajVc^#1r?~8Z$HGb!Jn0A;&){cF+MNBIqB)u1Rd_!ks07-Ay+&##vRIE9 zvTs-7LvwOY%0$UHA}ejra?T~3S%TNSd$!uZ zQ+brBw^`5@Te;*yDr^*DDa7zG%`8Tts}XqBhrsd&+`JqS<>~edAqA*G%Ld%Izar-4 zci?oRQD!77dr5D=vC!wilGW&l%f@|?{Huu3G5idB%3m)zjPNSxj0h^BzA)3%BN0=L zgrek%*tu6iVagDk01v%soq$Fv3s|LT5%te;IZ#{H$vp{l5hmd(;IGWj7adDJGs|Ae0wu+c`)eUP1rD`Yx$Ry}u4M2KV z?Gy@Kz)o2g3rl+Y0}5xMV|of%G?dF+_7ktHUr7GS!xGZY(&0(H5Wjom5j6K)oD`FG zz?|w?DZeXj3gA!j7TxoV`&W9cX>+&|*|nb`1S%U{)Ijf%nD*-hE(82n$(R5koL1^1 zAm?1%pfA{T<*1b3{51Qp7L0&*A=f3y$}tWp{s z(#R8R&RD?J5q1-F+5F5tw4GJ4lCVL`3;+*TRqcQq4)4E&4>Wkiz&vZ- zo4R2xB~@s$8Xxc!!pU&qp`t{@KxUv6xlye`HpFnQ0f#}pfl&xTBSxXa`y$0s83hoP zXkzn|W^4mbycF=1*n8n8Pyx5IG_t`eN~)_rsWl!~#6!esWVTTQuh;(CNl6Lym5d%j zHwa*}q%UiLS5wti3faW%SB^r%-*|01B>}Ix^2mm4oHgJjL(u<8G-Ln70@!9`yo)c4 zjU9fVsvI2#{*~p?6s!}#F|-K5(dkL)LqDY`xu|)hDk?(78wC}oq1p;XtBH%X?++(O z=S|G=lO*Aq2z-5X0*m|cb_Zf#z_7hj0S>wCX%`3((VtjE&D#<^bMJvcOH=ST@FR!G zPRfDWoo6`(5RhC)!|7i69Y)X+vlL<{Vwn4NW@HhI^o!?R`Z18OtZfxQg>>qu$RNdO znAAgAxW}-Nu$*`Cf{I;w)at7{n8EBnW3=g`K9z1pH~Gy)+g0}PxV903PtA|G+4O`7 z<~&`pUDUF7$I~#2Zx*bEd;o!=I zm?iklwFGLoLUch{wy4e#t8*6H#YzKC?vLk)ZAR^ES=Idiv@1~+@e{K!Icg)&M+@d} z%2)cC_>VLe$&a^lCAZ{2qDE6EMmLj~ynb@;r`-f9vq@U?v#iDkq&`BTW>H1Rk9F4Z zq;~S8IuMD@qo-}jMRjaZH_73)QHdgrJG}i|yAabXmQ_vYg&x$Bj!#IfVbfDez#?TK z=T^(xl`N4<^{0Y^l^gzqy;<~K&fGo04w42d1@VGjshC}0%6V&(HO-3I^ruDP3285xQ(FqQA4Wv3>f8scRC7*>WAVR~RK6^{L zkR(kBk5F`=LL__>6MDu1;Vi*F&Q)K z_SEx2j#*r>0W_L>h7%Pc*>noVH5jJMzy|c%Agdk6)H1vF%suQW@O+mc#BF` z#wkhe6%;~<=%y~}X-V9af2-OPlJ`pgRvSho-9G$VMIM&CpF;iz3mTAgi$%7-gaO-i z^-10<{M(G%BdJ03x5~+EH-#KsQ?e~P{h85FZ@yG|MWCT@}+x8fmd@*}@aiR-k|%3&Xjp#YiB z>vtGhFeX9sSIjKIfI)yoE!P1iJOZRY)syAhuD#Qmv`nsFCMuD@Omrm;^lEx695{#{ zv(?d#0>D(o2bD*%xX97L-$l&l`P% zFJ-9Tam1Y06n}f1a?KX{)xo1+Hal+lkB!bUe&jOPR%Ur5>~G1t>=E*}q%Fn| ziY%GxSaYlwv{UqL@$KvoUOy*oL7RQu8oP7v^nG!;yXgi$*V@1HSr*{-=o4D^@%)`l z{QlJL>G{?w9CIH#bo#n8`|W=J^5x`gDt2vc;_5mdAqu^XGiC&(fo@Sf6lAJ)0*$w$=huWH?A*KN$)*WoWEC| za_bgt{T8jU0P*0w(`z7W(mCnabLi=gz2bWm4Pne68sBqK+mn&^ir(AB>dOjxldnJX z{#xc#2`U=eeTf~caPE)JI#u7$+%rXD(sq6~pLoD|s0eJ2JG?u9Mw|>VjqFe4cld!8 zU=b>U&|?Fy25=G2gEb^Uu!8q@-Ex_W;FtYT?mpHO?CdvTQZ^YtqTmw_=i@G@ zWAT@2>+I@Rthm_?^{Q_|?pEa{o+KFlEVqJ+e_a2>zG)Z%jhIZg+F3B;j!5bY)!OL=s0oz}>qq{Q9sn$HAYF#M7z2vQfgYeQV?`OjrL4_*= z@X~H1lvHbyQF)>tC@nyez-U?9s7>wT5FOizndlFVh{i##|Inn4{Ggy(14YHTEVA~s z6OvP{y?L&{#z1K6_QiQE_HB+bAWOHt2UJ3cQ{*6tv#rC6i-8|}TK2>x?f2EDnZW+Z zLcz5RCHXCZm*7l^Jko{<%c+H@1~Qr^8Pok)>q*#=Vj&FQuTUL}cjrtA`=dUXg=+sT z6Au=7#Dg69>}y|KmInBEwx_^jX{AC6w6144c^pK3?m`dD(f0Lz^Aq)y$Gc&yw^$SL zt?DN9>Txh7H`B~5Xp7R<@in>j6CD%7n=>b!Aih~kVGUf@@g+a^6FvU74e4g;6h2tHb-PCfV;PW-8vaIKpQQo&qf-Gd$(iJb+szH15peRA7#S*Lca^k+ zgvEk2^)gL*^7Zm3gt*h$6e%hghh1fIaCsa0TOa@H;}OtzdjELJ1_jLMt8LYjr}q); zQ22<$5ID&UM+N%<;i)Lg3y@!^XVaX2f3FhB?x(cijWWOxM6xNX+zX(v?A~RBQ(``g z^eruMv+uGKK4oeNRlJW?G)L=*1wRolAkFpce!qD<&y9Vqc~vYa_E{s1eP;H3Kfku~ zY~dGpKQ9a;y?@@>c;|I>T77$}?N}#?Q8XvL+aQUZ3NPv{=@-3y88{}*db=KayU@u6 zdEWc}-+V+Mo)t9^oK2(w=WEdZHy`oeOii@%7&wddq4OGhVcn9%ic*`i?5C`nn4g5@ z6wNxv7h?W;;+Z$WV>LR5oksSZwO^Cp+W5F4yz^aW4u}$@k&#_3gXW%zgt%fCxqGtq zwH-hldk$i7728%zgq{x^dp#EV9Yj{=E0S1k^@AZD;g-s?vLKs&LFJBEUF&!x4az4e zNlPMg<^H0OhW@^{p?@32y};#Mc}Ds(OHYll1<|_7!oE}94?DKceT3T2rG9j0 zFM)9+lBlZRi-&{*PM22{%0u-S8Hwwx3v(AK?`Z(u~-`^9{}jP0T5_{0WdfFeTm+Y$rvl%0Cr&FkjRXA~-I5t6o$03O46IwqcgLQ*K^X)R%`^8(sE9XN4rtAao*h_i7 zy2C#^^;AYjCuz2?0|PFAHSM@$TJ)n zgLg`n_VS33zb@7zO5b*6sG}q>OeIX>Uq{;FQMo8(0(-bSL{vq3C{w@f7U^AOcdJZ2 zl3L=kLAf_)$O^jJr8|(fnWEPQB92>dk8S5&*h8fdpYQli1n>u<*&W7m``~7oR4sB9 z10D0t`97Q{zgnFe$6hea)d<6_QJj8lM>`G2nm`MedxQADQ$ltLhj;^=Fy*%YpDE#N zVdMldRdsQ)v@>`9n-eV3({bM6s`nA@4&YQ=f{UeA!5vFBm0hf3PpN9!O&5HYl8&25 zYq>Cvy*h5`fQWMmf=zZNQAw6C2ox#!<<=woe*GDX&z@o|km~J^>b>)RBIUMTJ=*rZ zfsmjr4z5OSR_Dde4^o=Chd;B*ySZKe@*ELI&mMo@5n}c5kx}V^16>)LxM*M4HeX) zaa5wh_sg098w`1@;8V-1SlKTm>w^L7~g)Hc7wwF*I^F9x{j!GitP=6{5d%->8tT8I;RPSf|V zF%(W3T4&=h_2MuDvBz!%FoshWW(19#CFeWxb57Wgq!2EjeyJtgDj`B_zN>>Ddfpi8 z)CBeFe26eVdugpLvG$D*gLH&8eGWf@@myqg;8tpl=JnqVPwuWuJ%h;LZ0M@0G~~u zVMkZ$bHA-nOzi$4+!Uw$+9O4Te61(-j|t^(QZjs14DrA02KdXK9`XBeVs|K7f6v+| zN3ITf#3#G3X)fG+!Z??MMlSd=MQmbkNVwJYfI*`ptQ#cc*8C&i)=!4NVWV3GRtAkC z%G#B%+3am^KkA}mMxfl@8p@bNncy=Y$z%l9FAglBk^x;yoR6PbV2{Nf@?jSHsUKMn zI$SSG+<8`|x*jb$W>^#wf8;F*1yQ^&C|N;twv<#XCY-@z%hcjZ{$gPOpkYr{TW z*gTaeJ#Lsnq4oyJ&#~N1hTTKpIGG~LPRn%A!-B`*84Jl1)F5e(0gCJYimsESFK+~4 z;y$yyAiq1f&vpB3@kg>qN0qN8KE)&F{pL?*A2FhH55o`$kW%=j!a2#tb4t`AScJx! zhl$Dq&1hAMg=3s`%gQYAQ?zFCmu-$(K#P&4cI#@9IP4Z^5G8=`T=(=``t@^uE~#Xt z7liq~GXB$t$lrR$IZ05K-o3JA!%S?y2Oz(qFM*O;^(pJAX3kr{SDehK23|--%q*{c zWdXR&W1{Su?O`9Zg{BK5G0%N{taEADGb@atfcw}d6e-OZaf5mz93s?!fT+-sqH%#Y>^3!RZ_{MzZN)+N@^$q9?n2Qfc zn(dfcLsIhg_t~&2qMGWbBJ^Q6v1Vl0KgGQuklHkZKCdF+AUqk78@BZ5!`uOF$daK; z$K5`uqOFV;nbRtn$GyeBI3~T;%OfNYBVJ=pvO#Lt-$KF~?uR;Ell(&CRQWC$m}Zsv zQd<#jq$)4hPqs!gtiSYGz+rEuR1)HZ( zk`u(QpCowE1b?o+E=c*=^)O)?u8A6aB-g6u%E-TAJ;Aj9*?(ZERab!c4E>R%zCc;Q zA)t_xq&E<-KRtX{VGW9U{q$RiZ+BxC9r?{v@?Pfbu^u@RaFcOuYe__CRyhdiOL%S4 z$0SowOdJ0R76N)A@{JL(gENxH3Nb~+whB6VqV1kCj@a^vI9=Q%{F`}jAtiPvdi{Jr zbYT*m3%*Gb)K%gS7=E9Je46PcB2-P7U*Gu6`uHw@JKb=G{_DI%h)by$MRK1XQrKA& zG7iidI*<9IJ43g*m?tO?e`ggSNzu1L(S=x;W=H7R!QIOl?)NQG!8p*Vm(LhSNwK}K zqq2=nyG`~gI3_`bTv-Y_-T^1jQSrsXN?WOBfKn02__m}xV*E_;oC*E~@kBw|^xh6< z>4qRGlTkDkn53%>8v&<|5;a9N2FLZPzQgvCpv*i#QT;7@N>~;%fnF*l6Rs$Za`_yM zG@j=&!q#=-N+{>&4dKAIyDJC|7p!DQvOpX2h=(Z z1xtzMT>XD#ClZOM8ex4CYdipoPJ`-_yV;ALak9$?ebBxG8)_l-WXJ|R8)Nd?Rp;zr zzgo1KhwS{6*J6@i*cp*?Orz;fRN0fn$YyWyM_A>mBmZogi9--M-`!^L*`*T=0TR92MiO zN+TunSKk9sz>v=GyU|>oq`F4L!OAq6+1nvOE6P30JT@f@2cmu1y%OfUA13kAq>+n; zYcZ=$6P`}~9;cN#35;P59E~9Ryp-%`lsyJ40}J9woz04@TYa_=!hwoA$xs8*EOAWy zy~DuO&@|2fe_M~K>hk2626Gva=DDx!<@(Ewou8UYtIN}UuKO`Cp~}MUAM!UwX*ua` ztLa01GNbAiFj!qPtLXzLC48dXmCFA;_UWV<>;CBc3IzG(Ol#ru~wx}3b(6-ID{639DM7}P`q@P)Xg&4 zEGqf~k-msezO{JFBlQYKJvFc#jZb<{Q;h8U6H)wi0iQi@n2tCL&I0N=kC#Gyo;xqy zk`>=MRQA(N?%{N8F;m)+&K$Nl}DVz5U$*@@EaO2CpCmTcp8ZRLq~icoDgD z|C2PQ?CQ}c#QqHZfVB)WcQ2dBBO&WIu(ei}iDvno9kr@9DuuC*Wa6GN27G2-Kag$zr z&fI1ydt**uq=WNSU1#|U3G0RZp^LD?1-#r;?X$k;B>3<=oe^OT>h$ih=wr9v*;P27 z(AoQZGH&)dq&p{$iVz8}?Jf17gF-sPLco#w^;KEfI`PrbhsEqLy!PX51Dbnb(l_EC zw+*Gw6J1EMLPZ5f8LisbzQ5VkC0Nz4xcjCesxIUY*&y}F6W{W-Kd_Mmg^R~n?Fw84 zPA|dh{#e34IA~6%@xL263&_eu`{uBNaigMJ8zZ&ffEefU1AS;mLWa+J#?de{5`Lk= z=olAbG9a5YjVmvD(tn@>lekQ|o*kuA<_hpid~5mZfd)V;)Vk0@@459FlV$V7DZs>mZd!>@V%#Ap{8( zE}r%{$k+`~koW`SQny;r&t`uxT*G{ESEON$5Mz(ZC%N$)6HcPdMT56xx=sbCr_c+R zS8uCC1(OJTHv*0p>*ue2i8gI`Wc)12-XbXByIV2T(2l=EzEgW66a456gr=WMlKWZg zjQVH6(o*AlK)G%^_bb*!qv!n5c3;8Qo zB}36^g-1MPHize60(q2+$*?855+~pI(`wCdMW$ow^HM=>diIx3W$+Hsgk^ln+`SFy zuI2YG#F64(2mn}uh{t7D?aiuxTq{&TE8>b}fU&J>7seq{Aw|n?dlw#SDFuIAbz)LV zAi1vVF591!92;FqqcHxIk&QbM31E9JO*WMnS2xe@m(@ltioeSI{A6V2tCq@Dhu0^% zdc>5?=l&80WrG#cA9PRK!#Yp`K`=r{|43N>2dGJ1|M)`LcjW3{HV7vamC|Yz$knay zXZ~5Qry*)v> zN5m`kNzLK?lMD$r-8^21TLPR^bn&;|w^xT5RNmyn^=GOs9$D_=!t?s^?`#eJo1SH- zZfM8H9*#!+ezYeBjNK+j=Wm4f3@mo<&kLNdm7dwxv){)W?S#^V6a?A9w^DkK#!eir z4ZWteSCy_EJ?^9gO>!HF0mJ8R8`ewbUFIw2T_;w|iXDv?g>KcEu5JqZa)sx=JFg>L z-KWh|)-<0oo5aH}Rl`2p9)^zVA)o4fX%U^{mYYUb=ZH~Gh<{)!@;=ozL?ZY}eEeO2 z*C}y%AWx;KYj;XFa_$XwzL!)o;k518`S&b8Z*kWQQ#4JBI!!I@P!c*;Hwo#N2V^nB zEXmkr6tS|t!KWO)P8Y|xy$?UJop}Y)$uCcaR5%5M^Y*6J(6{P_4{VhQY{671V@aGKiSCO1 z!dKItXn@pibI#Gic%v?4R=F~*WOt+>kyuh#TJBQZMN+`C$R&wIH_@F*1GQXYSa>(l~kkYM&Fv(rkJ~*}G8qyh>L#1fv03C%UGXL{+MnN*~nzttc zg}A!Gw&#5v3JlZKf8~gOi100LnswliIN2}Ms=4{juZPN)QSgMJ; zePl+tcgJPpjC?J2@7ew2+0KLZgq6$Iv;93?Cfi=JOi1;V$2rhNxx}8csN7nW7u)l2 z9YoUR3f~TM7ckWCQlnjP;lRAuG79fh>hl^S2f6$v5x{|Zb4W3wMDZg0r@=|iT0(KK zWb|f1j3}pp&8ti7!7$r-KQbS=+NdBSlyoDP1$_>ZoUkh+^(#uikJ8!Qyg!CC<1Wed zdnfPT6=GtM!ls&wJa}bLcC6tIe-$K}$^2BBMRz3&NK#1&*m@QD*j4~Nb~@H{y*71F zT^*qsT`{lGYraY5B>QXefHdWJ-s@?rjB#z$f`U-`o+}*W7T)+Mm6zcGX)|gAJhj5J zxsiC&=A>3}0}PL#3UVe=&a3DA_%iD`c6wgzbfsA9p7`a*Dd=SBiz^i-ah9*v&P6{F zvxiZ_YN5*wi{Ld&#i9Ej0c=rt^O;rd>YM^rjEeU~8DYbN{nJ8mv&XAf*c{Zx-bEgd zRJg@GOSkz*E{spEs8IbkUoc?@c_kzVblHpAyBX^a7PTuWg1I687}W<9t{Pdv?pzAX z1RCTy-WEW-u}f&5$R_7l>8a6?b1w3u3*#0uWs~ql`MkB?vLEYuLSfr1iOLuaf(l33 zodsb`UO1-b2Ly_8a9<-*Zm4>-A|VmOw2WidNylK`pYYr7vSUS~t~8dCKS<9zgil95 z7$L$`uUd<%X1H!LXrSt1*ET+=|2QLxU)imYzRY-;W;kEIkqCATDPO!{^59y?<@{L` zuPkpL+ZmoUyj zw~Knh8-g4|D*0i#z^kfNCKHWC*`{K40FB=nye9Prh#~iVLs$)`BCunyh}!Un&;H_$M;{ix2WH?-gmkMOrL27K1-P_h86ZQ`{M^eT$a)1)I@T7=M-r2!l{yde!R4|TP}F_?p8X+8Gi6I@G=B32cKEsk(!q zX?Ps(I+#R|ERJMpSHLRA6q9*(0o<=2g>f-L^p>BQ0{ zIaQRmtlCHiMm^47_O-%oTnCoI-sfPO+c}Dlr(zHXE)zDFFlx zebbTnY|6fB(;?Mx4;U^jX%W58!`JuF2I#{lni{xDpG>x$Mfs$u%Qf)RnW#CE>_A@z z`S*z37U$7<=zV2}_|>zw0nqHcn(K`hO6SEsSm}$?73_XET=y>Cws#M;yFQC-J+BJn zm6x~0;N3PyY75JcRx&yF)i*yxF_5ka1E5t=?UQiQ=2wZ`@)&4J*6az6)%nV|4h)>o zVl2z`C5!Az1H}ZJVjeznRMVk6jeV?~&X;_bFhQO(K3Wu-7Ho@FvAN{*R{LlM?BKs2 zDKkghOU&4+z(qU_KNOwfx2gdGTYuGthMb z^rG}gIjw|S4)4JbH$cw!&WIk<e%YZD2! zt>{a%S&AKRZoF#NLQCea#M<6kbb@i)qY^U{{#LUJn%Sq@T+XKY3T^bY>-`?PBGrr< zIwuQ7y+|Io73)UuRkOX)jbQXC8^a{|0<6joZn>(ScXK=EQyVWddft9)r zI~8=q+01dVjdcVn(>VhC&U{knL_=KtsGS7L!XQp(2p#duZf0-VeLnT zn{1f0!qKQ|I*WR^ChV_N+qVygmkdXVqLgOWd7?GxS0-y$! z8SoS7qkTR|Kc(-8{MU|(BQco2ETOHTdHT5pp@geF1+rpZZg<1f@*AnQvTm!{(}XI! zZO9il#CxlxCd+?#qZg;SSR-|rpRn^Sh(8a)El#OV=kfb$lAE)m+Gyi5m;kJM838aE z$Jw12yq{;s-n)wsk4g*I7j+VCQNO`YL(@K_qhiAkB{rF(iV}YA0Ux}8=>oi zyGEN&u%oCbqg%dq3sFASuVc_Q`qY|Dj%T&G@17V<_e{=sfaE9dTlgmn%WSITGOtO8 z`X@e43LvT?)k^JoCFKZXk+Q{74lgDq4TtqUWaWP7V3yvlNSy22SXLmY=UA}xFKp+! z%uf7%M-CKEIQx1Zjx%~eVO=RYMZZE=NMV*Y{9^wVM`SqXqvRK@+8FX*W1A9T=-LV- zijZoDY5>A~>?q7ESh6o1&z7J{Btte(SZE0uOf62_6#{L&0-20CYGJLGPz-SqH%C-B z&C}~ZhpX{wiCd$7Lo2DTxZ{(qxM&^bfSDVOnI% zGLW4i%r^~f+av^L-@KU|<^n&p&{9Xd zc9jiM+E#7!g1EVEyH2O7C=%}I)*%;Dc!kFmE4N2&m+FC->uLlM33eyy-E;Dv2!BD5 zXqZegUvXoD?GHISH^ENb5W9r^ze!QNCn>dB@HS@^!hg3q|IL$I zfNVkke*TjtKh=_tU6H`+x@M5-YKg(*pQz5L;#w*UK5ed8Yb+fK7pyD6_pD4Gv2zwb zMMpqT{(wtmNAy9dEV(twpg{>*^2lKG_H)9eS^Y$FB%q0xD(CXr$M=DF|ELL$Rs6FA za5S;`k8ZVA7?lv31x9lff8bkDN^oJHv>(1Aa3ur7Qg7vHlYU(dJsbh@O2Tft8JjNI zZn^o!h;VF7fEr1?aa31g4BtRruE= zfi)5%HvQ(?(^J$(SiD?#{7bP}qfD3w@D0r{PLMtVWN1mjcqxc>jaAxjbthF7cUfU& z*o_2w!tY5g)S@ia`z{njlL*;e9gZOL$!`4%gTdQxKkTN`ug4&M-}kDRBOKr9D3}kb zLSd(lb#`#p?0vZ;cpt>@DVRNUC&czL@pntTsM4NYtJb(UgFOFqys>olH50qDrH4E9 z;+26=z9nKx6un@?9U*(bnIxUp^yd-^WhczV0wV+tt%Rx24jt4=)iBtFjEwOA91aWOd-dB#RFLg@mp0H#@#w1 z9bu7NeSZym8X(tmocN5bhepY&JO@~f-bQqYbza!&vzWA_k>xf|2r}C;{=S3CBE&Xw zmV;<(pCCq~iaBN{L2q@&9>#?#ErvCEcF9T(Tko0l<)!_zcP}+5olER@)MBYrufxCU4)zri9)b} zW2@SS!#I|hZxHb_63#ku3`b|i2NHv|=XI94l8BN+G`sTSZ857`J9a@kbEWL^6vWT@ zMB)*~jZ?|W2>MlVHYkogBcl!*MH1OHmFLqeY#)JN%_&B!^$xpPpVr0)=RpPsv(yUx2Jz1`G5)vVa!qAV=zZ)X{FIsr+P2T|vf z;xpOoCoqywpK8;YoxVTH*!m#oOm^{590{!3t8Ty5Sk7<}*nhOmCOh0- z#oq2j3RAJAleu%^tuJgB8_G-8xM$qmX|#k^$Vn>? zH=ur4O^nfVBkNEm2FJT%Q<C^x-=VRqXM z7z0meI=?c0(xSw1OjAVZw0fAgRD47b^7?+UyHlO!HA#Yo6R>(cPEoyZ)AYG_aHY&) z^0V!ljpLfmvvOwN78J-}y0z?L$+(O70xC=>Loo>+<5H!9vHNlFgNvQzAgJz|*{AS)WN+hktmtqDVOB;X-J5-9K<9h)%0h{u|)) z#Mucm)TRkDu;uOlxxkO)EpTapU!0&`1^`h0@4wIfvm5^37YF?Bp7?)W8!(@}Vzerl z=qMtJbfilWK|)nHU_fd>dKK{Ic>e!-Zmu_(OeQn?eP++MR@SU}*M7gF{e`(IP~)dy z@9z1P*Sp(pKD5d*#l%lLpH>L$R=jrH%k!anYH5l64w^LKt-l-yzYcGq}lNw(gtS1+j?(7R-}~MFE)9l#4+@5Yo51~9lOg)+A(%9^COLi zhm*qx$D-q6bU@6`BgMW${UF5$Me#5_6F)HUWg;K?c~8Wk?4CoRLCg)79z@k>Y`?LN4D zsGZM@PLS*3JN+)M8AOmeu^;nfx$u9Ym?ADI>#=(p4^+ zu%Kgorn_``#P^KuP*iSXC3ibR`d&+akI3-g>(O~+M3C+HpA9Obox6{6Q;I#KHMz%h zZ^m;@q}^DW5OTW!5BwZg5Yd7=gW>mVUAB*guT~;!s;=HnNKwR{j*mGSYn4EE=|z2G zU_C*q?A2oH;+FtysRX}s){{*KD+)YmNK^<&0TRYLk$L7MI{`OwxQ7Yd>}~Z`6X&Zr z{P)k;g%bs3pQ$#3%fIF|z&(SdV-@q(Nd;F!6PPz^xb4i(!bva)la>+_M@u@>TXUyO ztt(g$5usCoGH_uRE=N91bYd`{phn}`*Rz&()lDzU6VBbzp7#y)p2r?NH8->L{78z$ zEVn`F7b_@!&$uPt7%OjDd?Q#xKs+|EIun{ubTd`V<_KL$&0U0D& zXExK?!Fcs@=eKVtkg2L%2ViDob4@1Dx0zjBbQ%B>uW;7(0(=V^- zejO5}Gal@3!-Ob=72Sg8Y^I4X(!xWP$5uma73=fR-%cl;EvnT{XsHIZ)53j}ujfh6 z;LQm*o9Js8;-ju$@${y#8I`nS;dR`U>6fLP&`(G;8YUq5v}wq`Lq|le(<#y>)5yh4|>PH7Z58+98t?Y!7ac9!S-an zZp*#to^L*n=`m4y$)}_AUNM`4>(Z*;;q%eXdS17K0b$YN7n{RYCoX$cBA{#Y@w|(s zCY|-?YAePRuRgOCuolxvxqz?0ro1B+8c3T?%1oQ3pT9%&dj?F2BIWJ2CE~3nmtZIk zjzFAUmu~i;FAIND6{$d0FW-$1RZy2ZeCw_wT4sE(D<`S0jd{k95`K&xUs#tH^Kq#- zbBnzB7%Up_TqQhmu7Nw05#3L!T+hqT1cgHUd3=E0NyU#oYU3Px_3}&kM8e7+T0Rgu zhh0;>bfsi~-$ad~<;wIl1o8(ez9Al}GFg>)DPgc>a04*6@3>2KGi9J!4bVyMEcUK) zTC>XIhLl2iwZ=6$b%qAMTvaVNx#jtdQLl zUFL9(Y&~Rwn<%4Hp5NeMmTXhnXaV5g=IJ>D-*>aQ-jW(tP{PvWndg-tbP) z9JD0nOk~<�^&?-3O!G@7H0alD-tV`9`LLvK69NEKLT{R&w_(e8ulsuk2d)m`;5^*br_3>#1J_&5G>?C_Qu4m|6JXB7+E72~^@Zv8XAy){n<8ZLBolE7V*DhOiWX`gOW+pu?`piD`hFMEG0W6al z@LbJ%+~-yP~Hs=z8~F;NkYAX8_9x=6;1b4S-aMD zWWe_)TwR_=F2;Q#UJ1 zVgo6zv3Zkp44zZ(v{*~CUtU{ov4;tG8adTt2^cZkQnSmFoxL!pG>FJ)XG4VS$8Mw* zR_t{IZpkZ2%5w%q&R6>`rUj{2J9J!R)!EPmNvZ}1I|{>RYbmEDh?(^yuc}K=AVlW! zF!cab=y1E$ERH$Nx)}YaFnq6Tj~p)yoW&U4m??HR%Ktzz2R^D->oM&;_-b=k92a3| z4r?vabYe119fmygWzNjz|FV52e^bBBbm;)L#hP_*&LRe$I;2t-FhB8eY-~1jJ8Tyy z#r;iqaWdxnn#O-xFRz2hOCl8e&6tu4VWaHK9o+4WJ>5OLr0m^2(SKQRnTbD>Av!yh z{$>GFs^ZM%iLl^W0sx?iT!Q+2wrV^5DY7CcE~&s7;@$4)zmicS=UFrQUSXe(9B$6p zoyei{G;Q_@2C~@?oo3*;gy1YJH8;+oRjMdjfjKe`04JU+*fh{^(Zzd)KW1L8S3F_g z;d8ba9;!umC$}_DJ=y00D|!;kqJ$XmgEpHQskN&~E3mUY)bAC^+bdtD`EpW=1(1AK z2`=lueeWgl&)eL|EQK6LHeU+1gpIy6uqTz1Yx5xVuASMWt;MYX%ZtDg4Nh8QY6hEQ z$UO`hU=1XBNO%Ww8r8EkWuMY)TvL$rT%r|>p!v$ZljjfYlllM{@_o`bwJFm(cNL$6 zHF9jX&{!||aWZ*2K8PI=Z2ygnF#bXHkpCaGg#&jfMLk1H`TVn}wjLgT*R9Rwu6^oSHql0Y$yU=KHS|ROZVOib)vbEcS;c1_&P*$q zxr~pTo7`B{+)Lm>z(Xs!t&vJ-5Lp`USFSP&|Y5@gXDufC}PrMt|RMgOvsfg6dWkgd0sI84(fSxNq0sk0+ z-x?j%K z(qVA7v93y^ve~04~M?GS=Z_-)!u7f+yxEM(GX@j;;a+4SZ}eY_fao&B6hZ1{NZW6q3ch2rhHa z^i_sbs%)eqP6J(H7{W8*AL3+ zUQ?DivT~W+&X{JG3*M>@^!`+|v{3VV3*P6DKvFjiXrmXFSxSy+Z=ioWBI2TTaR6|l z1>gt{VC!zp_}dgWJ4Y)+J3Fgi=jVS6vg~6*5;=c`slC^9MUkRTaH0;;UcCVgZfKIR zmNaj+c)dr4mc@t4hs^Dd{+Un)=`0_P3(@*8c%v;Uc8pC;W=EA_k{ethy)L2)x-};&FvY&1h zLSdo*#GB#EqrJPglWSAgW4ovNnVub?TILV=v!=GNpW6>p>m~KCKWrP@ecp=0od`a^PsyS*Pz>BjmI0YO1&`nF=e6e>qgMZMuKnf5+#oObpb|B z+twq(;cC(&MDJe$aYvioyH`B*n8OwVgpHX1{%y&B^Dp;!nTj9A19waP`ku?AbIyma z@s*)jHmSF7GD?WZVVuBa7^XgW1!O_oD7Iyk$V_w2fGCG&A*5@*T=|TOl+-?fkF)W3 zO?5#!Wn63Tl{K-XQE#(i$SMzt8&vyK_cNL?#?SflS)w|*)5HMNGldKv`j-vtZv;(7 z=zWp7xzb)DD%o!fYN2yyh;l~D7)!RtG5bROqmW6h8?AN9^RIR@(@SI&-faV@U1Y(( zq_Q3GwhL0S*ZS|5&odfSj(-hyx6@LI0&VD)^xqBdIQ{Kc#4o?jG18TG zox2YRZUG0($X*M?mGMN*oU>oI*HVf4|3`gu0+#vWrD6y&l{6MzC!9JgQI0^p!x}9E ze5II28wlf2jxE?CrZ_8E;)9@|Kxhj+3swtCWr{;CnTUGuIgbv5(xZuA(coc{-eL)mzj7nt`a8*g;ZQ8Q#3EUdAWu) z;po8-Y5_jWo-m?`Z)RW?TqVS%^Ef~Pg4tc<5+z-Lwsa}s$+#v^p+=(vV?NNZ$HK6D zv{0a$o@OGak}t0VvRL6EO`(~1D3(aBPDbx;_X?uBL2 zHR?;w)0Sogv+xDb%8eyKC5uf@0DXK*4OJdG1B%SR5VPRKbeR=MY;GbJ^BE9q5u&B* zc8`Hq4s@)lMJkH8h*l|2WP>MD{rnjeZT?vcM=q)gUx0az1_pkgO@~x+Vgza|D2q=XMsHRq3uk1C`T~LEGN>Nf3$cjmXS2 z6bLX#nje4%t*p~gik@$116doh6Qoqj0Q+fVn}A`CUg%I?EC4!@A%mgRf~|^OBoa>FvCE3UJ44A1ZB71a?h@YoG?A>#h!JWw>CVdgBP|aO z8xkZrcvax5$;)yqh7+@CXLu{Rtr1IBd zg8j;k!j$mkh?);siFw9_a*57y%#c*2Q%$T{82H?YMIY&*W-&ek`bOGz^=S@f9yGBD z-LN4RSfRCpLbCNkIw+d+{@Sd)Cew*T;!y)oY3|v}W%=P@G^v@L3L%g2rKXR7SOp?b zai(En(eWc*Uf%P1Dp3`mGgz4%tpAhbDB;)7Ig^~ocVZLW!e>=%poR@Ntl(7ZqlsiX zA^Sk!>%~oA787}(R7Z}DL{ySEhliFGhZDm$yvF074^a!*vZw_PA(F`sSGXXl4mRq@ zB~Swq@=Bw|1M|ohgoh&+#C*@nng#UOm^3{yK$2~7B@rdsKId>NlXVfJ5Cm5J^6V16*4#Xaqa#Yy~v`R7*5a1-FQcU0L$M%_pkc z+@^q7BGc(tj5;8Opb3=9a$XO}*feTm7=!nx-BY0d%try?c-QuEKy&z((6iZQfacUY zfQHA%0~0d9N9}jPkqf!pgyWkM03n_#>wt4>0ML14SK#;zaBxysnD{hv43X%)W_Ur* zusm?8S$|M3PgEDOoJIX)j(2?|zOYpB^aWcrvdZS4T|j5UBw87!Ey)y2!5 zU3pmFccy#Y6iU=_Ju_?GdU^yDiBpOJl!1GX6k`?!Ut_x#aQRt+4eU@SHC1fRM?pOP z6E9#l_hCHl6au%>x+Lfiwt5RFr5J9!37GAWd}g+?^1+&zd9Zw9i7|Y9ff)^lVpi5K zpx_HwP1dbbworAh1^Fz=`8qK)psS?o)$Cy4#}o6REb|9nM!P?WxcR^f_CN(N8<~*M z_ZPr1>AI=I3of$d9>AICo6NglVSR1O2qn5kh~!Al55-Z1SmasfVg=JkqbjIX64k^| z!PX3RE+!dn1xJc0CRG{`PRUm#Zearj-n2A|6QhfZKeM8Pq|nI0^&jUuF%Le33Q+E2 zWg78Z1~O(x5hn!^A68%k0ZpRQhZitywq_-<54KhyWnvmxnFlg%3K;YSW9U2tiAaOc z*KcRQ2E=$7<>WJP?Q-Jy1zffovI1r3c(oYm5baN2z(y~D7XlAki;eLfCql^Dykr3V zXb7qVF5PV6pC_+juo$2BO@(HX!!5+|f2ukZ)*(4g43)8&O9zB)mH@(>c<0H@bY{cL z)*(^#vzlsIfo{Db!dlTPrE!>U6?{OV=gy)b@_eIC6w(r10@_q@+yfj|oTq{2&tLG4 zlxi6)zRmZ|0~(l`#r1!Jj}g}4Jlg|cbAtfPD;qZu=9q?bXq^N;%@dCUc+djYE+~Fm z9Q-$;%LY7nIHUhxNFHEzJ6zWIFJy-qfNU!XD_A@z_Bb?4^cCme%J@5YKFuPj;P|T8 zuhGximytjH>H!l@pp?L+nKQkG}+yBsO z#~uqISQMx0CRP$uW^*J|&6{g5#ln163mFjlj*ZZ_T_IB_R|gCFV3$BZrD<|0kOQK1%8_euMb|k+*hL>mg5(u@@Qg1{t@7J4g zAk?gF4s!7TmfH*CTo4)i)J=OdDrH3ZCZcXIyGMBO0F>${OEe$~_hUy+@cVwB?q)pB}DmDFa1Cl;ldp%g<^u7%H3|TV>!VA#XKoq9*v@a z!%aIZgucJtwLC(|)U24&#Db_EZA-#ZF})I8Z8QBAyc5@d(wPDr6pTt)7-f}Tcd))l zKxCmnil_VR9fS;&7+NV8%)GspP9YEzF_vQ99+g4~K~4iVFlrz&xMeJe3qX+{iRpE& z|Ci#?d|xAD1@IuxdIf-07H0KB2{d{+PSpvmR2gyUE*Ao;-k|I+iE3F^cqY?T`3c25 zIbLloMI8O{y^PO=0@db~+OoQGNu3(;+&9hD~D@sY60cVh_r1k{GH! zWq&yN+_}(8Gt;)s!F&@u&B3gW!Tnz>q12}ZX#y19N~Y9SA$UYU~JwkyLKobUNQ^STy(Hql%+Y_U=Ep1NOl9Kl%V~)TmpMah!kk>N6}` zUKu6J=AcW(Nvz_T0S5pUOQRq}Hj_t3|#oAkS1D8`ly)D0im|!sMG;5fY8K< z=$K(4Kssl)z@!$Sb3p4jQ}=xhAPDvMi-TQ<-^kJ22z}H9;J6_&*ZvAQivAl&P5m1X z{TrZ2{2O>1{!NLE1^~SPhl&9JJzP{VLHOT*E*0HhKy^^>?+DDl0jIa$z{df`-w_|4 z{ssd62Ci=bz-*2BN8Vompkwt86`3O`p#!rc%?qKsQhkQo+N&poj>QJG_Les6Z{Gm1 zoJs85uG$vrbXlC4RqWLOnyTEn0A%Ffr_xfe0WyVmX=cCJ%OxI1+rQYx zb3AkQzu2}Gx$5(PJ!M5cScvET z7ti%Dt3wO69^cO(x*XaQ}-_?)TqoJQ?HH7QdUDgQl=XLjo=J%#P z-UaJzt8<&(&!L3xmrI2B?JtD?&T#}`S&~ZtGL#g691!9^IgbBie_|BJ0GTnQ_G|RT z4GRKGQcbq9erXjUe-Vo*iVfCJ_}q2)vv0h|D%AEr8b173pPBS*`N$sWlkYNnfR`u< z2j^lDJpYWx#~!!D(VexgX>Y>1XD-E68*KMxbhG%)cDvH)pHyGL$VWBuD zZDQTWtJoH&ZIuA4M*1WsYJq2_*jF4{-`D##)Tfd{ce#^uy-47gzJS)Svq7B`BUi6hXP*%MgFy>B_2Hxq#^tSeM3P^hO*~-Z@7w-TTd*EN8r@?x3bYXDTt%?F;Ag?cHVJ~*V7^F z%`o0?`x=>eLfsSC3%#QqeZHf##!U3ri88jw8j`A(l0qGwPM0$q!BbzLb`f8x@MZUA zf)X}L+`;{~=?AvvwW$Epzk&h*{Yn-C5^v51hSnxdzc+s+m3$Ic<$f?Bg`VG2(`^dR z*5Qdpw&IbIwF+su`}bt9rh13-%n5DeNJ=Zy%ywLa`1yT!JAM3W$Jee*D`RX#b#uVE z1QQfd3?C)b)yadWV=fAp4~7Yf(JDI2k)*c-XNQo221(;Qv8HW;oq@wU?O@F`EQy{3 znQEhHJWm#!Xen~XfV=;wvDX7pWlh~|iQX-JomO3TA|)LYba$SUUPE)^?97I%6Wh2m zymg@Gox60YleO&P0PNH9%&-q;BlMym>oiH2L7^yH@8OQa`urO!eY9AIkmG71~k7_ z4;bIxaicy}CRw3Dczz(Y^Uay0S0C8xh;SWBJ6Zs1s+r#pMC3{DHT@$|1B^$J2vLl7i5h zWJAUEP}@rWLih+}e1u)%Slx9t^kBi;%=ilW-{Y7*!nWxN7(gtA{~1Roa|1^cV`XPY z3tKa%U&+B@Z7sKz;W}UbE}=2`dO|#b9mDp-lMwj+@$_^f`?`A%)BknPN zYPX_P`4z-w{Ki#eZ{-W+)zwc&Bz`aZUMOB)=@`FB@as79H8Ap|iW&CJ?aO1zR~-Ia z2vJKmXoWUPsFTO^`lS7Gef{oD7dZ<$)9~P2OFMSbxe(OYK%Je`>DX z%Bk!A3U0m2?aR31gY-xN%H4CVs_)x(AqCI}!9ek-3^&UDF^d|%)Acj;o2y|IMV9M$ z(Mg!p)MN!9p<1f%_*4|8XyvQlZ>Sg_*`r4TLGG(N+L$)mL%6PO1#}oQwy5FH^}OmE zj6HNss+-$D)E)Mu;lFlpQ4w$EUcSh+LHJF1jI^H{V4rrIQ}JYtXcx7karw6|AixLq z_9l4Kzc(8``lix+2;|V-B{2kV$<0gkP=AM}l-q6%*Q%?lt@HZ8i}t`_c4>MwSpWmB zImUrt*M?#%$ypFqK3=YLr+0GGlY#v*ybAd<{2-DH=@dU2U{@CVxeN_U=o{&`CxsKVR0N z()w`HG=q?|3qG#6bkDXznxR&X$Feu)hzYhBrdtfNGY(`W3R^L$wXC+Sqw2zi&fUed_}nPt%5j9{4;XdcVbCwPZ)n zK*~wsA`@^w(?@BRgtU!5Pc3xh!$xm(VKeH3ltsGGNiSj+I}mA;-8Ux9$)2+CVJ{l0 z0i)6^P~^3uY>AT6we z{5i}D@Z9^us#wNpSG`DBa9(k6tif%f>=En|2HfHF6+FB@(54UrI-vs+YE8bWOwD>I z*keQdsPe2gTahyc64_Gz9IUYiR6ebC1ru`Eq6pN*CceuX#rFTMte@ps^#v&mHPgcx?dEb5p* z(ma7kmklsDaSou!AupITezPU5PcGOr)1%zrNHJ3e2|(uboFw(y>vp-@Ahed}L)@^! z=?!JyQ2W#wfp<_Yp)7V?s4I*ddpxadiFJLNIzsk?IOz^7c(t?A^S;EHv;d|9eYGJ+ zDaV*u`F$2Pz84rqO%#2wYL8^JRzQFV{L*-Hj3=47#ytPnzYC?mMbE6}2hE5!%z+hm zcUov$@;Q3TR++AUA~3m(V-fn#SOd8A1m=dX8&9!)sQ$#M7e~4~+PJ(OncTN2LH4aH zosLM9Sh9Lt;bAu@y1R}z=a*y>WDjA~L34rb1M3;;dR)-<8FqtT2o~9jDaoeIB;E^e zejGmhTtWGm0KQ1s?g64=R~rO`6jJ-KU3@qHlVr4cymHk*+o~+wXWJe2y=Be3kIZ-q z7b|S>2*!Ez1%dNWq}p=N9RVz18j&uD3NH_D8(INsKg zqu3&D7fU3m3CGFf0uFHZgSd}OEcBGF>PER+5EQnoE6}zIo-yM3NCF5|pF3L@dpNa) zPm}H+6&Sy+jeB0exYPWMbUa2waz__rfjAL%5hR^&$X2gs| zz{(T({w^psu}0%ru!!()++k2RV%yWhohs%g6n$=M5&2glZWWI{Q&#i54NVqS1T=3+t{WCNOVpUmu@m?ev*yUMQkQE@3w;XA)FO#+N zNhc}pc5**%UX6Ot8GFhq`?AmyccrUsSCFfyr%*L$Tr^Pja%=_NUnWirBuDNi<8vDc zx`invQyf!_y{_Z`*CTMWN$3eqIH`JsB=}- z^1{Wjxzas&WN0^gwL0mmQ>)l34hDr#%U37Pyp>IV8VX7rmd?qwGqB(p>UP|*dhJh{ z&~~KY#=x}YTX&U?v8r~Cl=j-RmmuQ{Ed+Ro@v*(Iu)-gycF{3RSrqMeSAt=t#cca3 z`(I}wO!82r2NoDaVKNp-)`ogll;LEg%2*VdnAM*l=CS9&Tr><__ao@tX~u=(g1^|9 zKz*Taf+E#wv0JJ3I??Mv`^k_cpof7p2QMaWzmDz65%m#{r>4*0M-xpN^6{);6VG_~ zwrp9X64}0Wl^tmA%6EShM;q9nfgQbh`LHWbyNaFkJ#(npSv#jK*5YDRTPA$E+PYx7 zQk!8zoV8W>Z*GDHTkT@ftiZ599^3fusJJDKh>6Rc=oQhHR}5{$AK^S{Gm;HD?Ko;< zU1jPRdsR};1t477ex?!lFE+v^lpMZDv_TDzN6KJeOlm^-Ec%fmLU3yK)h>D4Y8KPb zs8<+@jo%P*9K?i+`;Q3}_PDe&dZeFrdzH|s;YHo)XE%LpT*&;^-|Fi7J<&2;f#qsg zw};+KPfh*nv}eNkcE^>%QYD8J^E{294+F*PQvlvde~sK!6q4g27>4TtFL$fj$I)C9 z;42ZklEUZWiD9n-%!L`=IXeSw0|O$XLkPkfuM}hUl8u?uX*&+mlSVR;%`b(kc}Aa3 z=FA~4KflK$Zxh2N_%Zn3^a7k-gH#D4^vAWT68E7Xf8Fur7_*6{meN71?&9oLA_Mv zxa{}g1BjzJREVFJ+?ln7OkUfJC78s7LxN|k5MgemsCTUCR*i3GG8mdPq}j&;0k@*A z5Uw=wn_-e^Zj?_#c~&iB>iWgUxdFB@+wc}6dCZz)bxclVH37Df6CR_@4N+%z2vzgV zPEU>NIfqmJ+fm#;5eIb8|XPI zcn`^&;1!D|A>|`M_BfN&jMmRDz=X*j?1si4m6g_3m|B$p>l;7keN&`z-#T+zAkaZ^ zkjB37E|{1%1HtovZCyA8;e9)oBiF%X>Z(p81`W(*g3x4C;qugaY37)WI95tKv6Xsl|1B0(#*Jf=;Ao7K)TcCu46CummQ#=ffwq+|tL5xq zRdl{coo&&UGmmR>P=baiekLbq&;gEz&{H12@=Q76khlDjSZw^vGJS#{2qPS2-?Mw6 zgn+z83(hXa>^kygkp^+j(5h-yx~KYTig-&=>Cwgb*i7>NvlC{lrq}AdX$s|^hobi34D2u$^soW68JynQwxWhpV0s}J%ajaBq z84#69EZt0rPMVHBnP3PtP%j4}pPq4-s|LuMOcWn9YPEr*dkq}0E;54*C3FK2%V3Yq zVIDj!f%I4hAt(CM&Gnx^oqjsQs`B?i;7f7TKo%sPx{F*I=-p@3+JZJ)YJ9SS`FUL6 zpAk)N8sR-BEq3)VEYg{8Dp!N#TR%kvsz!INfDM8Woe=%aOH(fn5jG2dZ&Am2W(wM# zvsn68=X7tkA!ZF!-s-24yT+jLlmSgnEsx>AAxf8$T7LQ5R^XO#fQ3+LstNa-wqhuy z-Dn}w&oKvN-M1TI5-Z1;czci-&}IMd5Sxo(|JJ3{ocV~5+Pdbcnn=~~cGW5AtWbD%spDqs*1W{M?XC2XI?HNS@wY zl<2Bp9H&;!lS{rBFng5rzaEE@#WvB|lb{GO#tLppHO3_+?SrW@SAb6}lnWt5pST<5 z_X0j-M*0($#AiD>C7(X8D>qyWrBy|J^|rAnBr3c+?(rC{AaXjfL==fVkceO8+7u9? zHRF$@iynXB;jdo8%KsRhdHf|zX3t=>o`&M4+&JhdVAne?z}1S1t=uTS1IOdrdy2_} zO*w^gtwa>2Ow5;23+0Ov&i5$fWd@Tym6Rf18K0g0?4%!q!0qZOF14xejJkT z9`qx84YR?T$-8izO8bBhMy+ywaTx++=VvSk0r}=kVRuVUks$Ak?zWJBuit;k zWf%HklP>r`+g*=tZKgXE690{}!3LERE4Vz7m2#afl$TeABq%K?8)U8IXCC@{ER;CK3K^16i%t;usd_OM^io1F zvDOS`*}X$$qF&m$zgfyHe~xQ8(|FQeQCej{8LV;F2y1cry51?*v_^EwG)L3ptmYe1 zQ&j)WcC*1W3T{N`^)SOQQD6~;p^c-+o``>i7VC9{Na^`5PBMD0VmDJFp;ank8r`e8 z7)0%@u{iOE_QR+e>~UasezPt|I2CbM8DLpbnQP+>ziMHw6fI=3r%#l6Mgk9?K)%xzW|IQ}jBM40Tfb9`mSLPjQWyM*6y(dT*8`4jbsvcHOLmou zXa*Y7{aEtJk+^%8tXh;`7RnF^9M1s*UB{+f@Qa~dc@XBfH?#0)`6YpEIw<(D-V$GE z^mO>CZiR+ln5Nh3_7th;;)_-3s_59|kvSiFrm2kv4o1X@hTKN;me?>(irq&Zh%YE^ zWzKlp*4|A9ZN5GOJWdIDQYN=C<0we{@lJFm40kRGqYz00cS0)Z&C)S3I}c$$F7|%~k22V-@6*|_ZpI~$ z1;(8`IJr#N0U2#A0_rI#({$#K>Z%?Hmr^T*B#c{~goL9-B~PT&PsT&{*nY~3jdW|? zt=+&_H-easF`d2{eF}^p=QTjS&(`zK7bR}3i|qKI57nYEwB!A(;1_XDn|)f(>+x-v z@zna3x50t1(&)@9DDnv84q>k;&ZSITYueFM&ZF%y5>KFk5yY~)S>mCN?-KYWavPMs zH%^VkO5jwFgXVZ|c7!puGBjkPB`|5d;!dy+R%7M}eBql3Da6{2mi6fmC$UNXbf!07 z$X8ghN>t_!&`m`f?@W@FCH|Cg>4D~nyJ(z?$h+-@Jw%W!fk zVH@I9X-YObQZ4&bGdR#|LoVb~mN<4x@_TXMF$;>#zBjgs&@`kKoM=8yoEk4Q*I*L!LZfxzpcOcdtN3dUxT6duoDQfUP zB|KJzV z)u1{kH(VsmqfU`PU_%Owk4n@-T9$w*_GUAy>5AL}+ys2Y50Oee>)THJR}45qs$ zXFW`0C-0lNCyUCgt7I~-35WV7C?|PflwoVc_PmpG_|XVi;z);=l9GqRdmgfKk=hs~ zcPf(RdpB3)aOzkWEdq*K*)Ow`3hsy{gcHwP?;|iqFG#E^1*d3Maf?Vy^M+sSTrmWO zb0|eWY1G6L&x~z}gd=Op5y*q69I61}=A%cWW_UHS5kJR!2w^8i)OrpX{1DQeP{br9>=?V*#HpV6j)8)2gpV=k)ky*kSe z5f&~p+2kuwiia6bzXoF3i1)6dUTVvlwN5Yx`)%jxR250$9rXstQYsh!xP0Z#sLgVn z1nPzgPGq9(iE7upEIsZFD1n;MB;yr_Muo1QZinvt^3I7%LT+E^*|`yV+NRJY#J|r0 ztS2#*8o*L?CEVZ3(SQB!U~Xb#^85L(pB+v$WaCyvusW}4#X6f~QMo6oKUc9Y7loWQ zRjfCZ4n^?RmSB5TW{lW637;ZELn|U-lG)-RDU_vrOV+Db024jZ+qxA`yfm$wXo>=A zmOS>BazeY>bB-dJWeB*$7-3c_pBGsGHr?wd0f33iFqU z5EMMnrPV^@TWB0(x~eMdYl5J!A|uv)W;@eU+>{#5(aap4bs0UE>P2i3ozC1*T z$st&&Ft!aEQ#42d{IT85|cxm8LK_LseI}^;xEs|c3!N#O6{svrDb@hpA zKmi$cxMH8b-SZ8t!}D!-ce_3*j6avh)A{Ox5_B6rEBNE~*g4<(ai;uqu6&oznHA@O)?#*G?Bkpkw|mVe zZ7HNV%o2l5w+#z^ATaTsN01ak8$G*ZCWffSAg(EEDi2JAtSf6m7fjx=nTN>PN?t%|pXcjz7&wcjij$^Ke-KF!2JDdB2H zGFq*3*u^Y6X*n1z#NoRcZFXVf&YB^$;|!}C@=VCSfzKm(2fh3B-1*#j-WlcNrb_>H z)dmxOadCeqORwEgfbt>;&ZS#}&dN}Ft=!<{wsop#u8B^zp~J4dd%qE?}yycD&2y4@cQHZl5%fn%KD zzJLp7dWhuem8!+4Rn%ic&t8MGB`th)xI~Bwx4Ia(s;|}E5t+t;-u>D*BBqglK5kWs zXyMP7D9!IB!qQ@-I~C~MQ6?U7@@U9miuTc=)+7i_2d5az=nBwN(NEUIc|z+fm*pvX zpL!0}SWR5?Q^mfWNYc~af%A0b9LIlUy*)v1?aHT)fn^==a+4il!5mx^izh7AheN_L z;aX|>rhpvAkSsQT4vU57sF8;mSU0R9MCY}cbtn~!;Zw1t$lAiB1j#BAC{&`HKxC|! z;@TOSp}ds)^@Es6Zbk*|+>V<>EEKNs!s_@*vjXceMKP)4+F{=Emm{3e*Y}IvAJysJ zlLUwufos>}B-M*Ijp99nt7Z0+;x_Bn4(nRaikZFJpeB0L-^wnQ4Lk8KK*RYy%O^vj zTq;%2bv^DOIonzcnpD0mGg~4DE=IcR?Ov2|wbk}6n?-p!nR!9zd6~7X=rSm3aS!iS z6!YgiT<{HV1O&|nQ){%#dIE`0oSiU&ZW%F3G{5~Z!CQEy_tye0?qq-qJ?THc=Ko!> z@VmIX!=vHQ{L8bK;Y5XptSGp8c=-9ghZ7_RnacB!++sHylFMQ z`70`se}CD~?YJ*@nyu zwnVMbm>>=_x^F~1l*mQAKbwTwkmv@!U*l8l)gMeNu3?p^hZnCJjy-U!f-pd}48ee) z(lM=pDs!XEAX7htH}F?u0|gqH3j`n#>}$kMZ2-wVX2J(KZmY03W7ulS?;LD+ap9~s zO{|RQ$2>Z<>vnb`R(w&qFWK=wQnDY#uhG}m*%>1ts5aoE`w_u`(yxqpi)%L|ir_<( zh~-bPlao9(ay@1la1@9(m(25JppS-;Dr1KF@km_vHaFmib9b{Jbu0e)33cA@-=6BW zmdv>UJVgR5PXLs^{Nt&Cz5Q=Xd*qIpkVNkRK7u#80xrYv+A5p zKd}o^zYa+*#Dmb*wSI7N@nLEDw$jLcOjK}LZ9G6{hRu0O`=g26Yh^9_-3U9;F{N%p zaOBSaL@Fmj^#+&(yPJ-jlTJez4I``2HcypP+9-{pF|MjWWsv^f#fEjw{dFUdlyB-< z8i5-`P0)p4P{36}+xcc`dh|F4F_+^x{;KF3LJv+A)oam_af3v%&+`Ah%>;RjYi3oED84w_(s665Sh zF)l;M)qJc5cnQVMhlfyjp!_W(r+DRal}uO-xKJ{=7;iAiCo~76VGzDWTJ%HA9YZM| zrW)uUt^2gT7x?l|sU0^q3Jmn|aYsGhIJ{wS{R*LCk9lk&T?$E54j~3z;@}-}zZIOm zj)}FH&2A*K(^r zRsLMU^p8pbz^uPj{t>)rnWpKCkJ diff --git a/yfaq/tables/macro_with_urls.xlsx b/yfaq/tables/macro_with_urls.xlsx deleted file mode 100644 index a3f40a6804471d521edccf15be5a0baaf9253f7c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 17613 zcmZ|11AHaTx;-4*6Kj%*&53Q>wry)-+vbE5+qN;W?M%#X&pYSdbIyGCpZv0`_o`>D zs(z}wI`vdl%SnQQp#lK`K>_}Ffz&>&OlSfF0U?3|0eu1>nu4}APR2G)x=QYL#*W&w zZq`e(w~C*-f>wAYapS*B#CB;!$H3_<*b6N6h|@k6scIg zym-r0Mv`W%m{^9IwNw3!MO1^3akpN}*SoAce2q3vEu5S6fCOI!sU3N=U|xmjj!efx zuaKZvgY_>9(D?EIjB70M*)r|uE3Hth1qB9y4a7IiymrYgg=}ni7JP023RMe z3oj~>)T_=Nfx?s>4k`Q89FNVC6GSOX)8JwYVmslBp%^gQU3n!|dIf&;J($ir<%q4R z`I}n;PvN5pf|b^Qh&AkInIW>z@bEw2W>44}d-#3kp*`H7qvN*vA#6yVAl7f z=*#LbeaY#@UeYxeBl<4~9G=-aZYOQ+`%zk|Ti#!0@F zR+8^;46|RYY&30;TBy;iX=A#Ms=sk;%0Mz{#+;Yc%wIi!XBj>)A-@);dA^0cEj;>G3= z^QvhEmS}~Qm3(J|p&ug%(sNi|@CTNBQ>>JGu40}Jp_zit7IA1=)bS-Hln#``tMn1< z`fO7>pNGY>C)(h~*s(%~c<63H>=z$SRO=Qwv!;FQMweKMQdhd@Z%%eji2mC@>$712 zM1b2?*$)T^^N)Xid&bes*x1RD?w^F=w~L~(v>jJPYJ)GQe#jk_+<+W>#}uZ!oKQ=gBUixUgi59ho3wT|`nifqKLr}kwYnun0jO}bSsbgK(D`i})A zL*-m!qva+0&rdhR+w1pV8Ci08e_X1vX1v(SmLI-}54+qouYC^gdTI4p*7kAxsOEXS zaO1^TT{t`)`@Gi1xwMy}`gsF!>3#F=;6!m=<>DfkN7U@5dAkp&+F>v_SgI7kNT&L%0=DI3q*nN-JCUBeAhl-y6nZNZ+j*C zwjm!OeI$#BFF%%2-0vG5)OX8wZg$>RZMxi_yXNTD>_!s&whdUv-fsF{&JSJ&Tw?1z z)$x-qHrRcecVBi(cyW30ecUm7_ zCYfqFe7Y~aH|q4a`-ji}hLb9AVR{e4P7^75Zj#NY^HvI4jLQDm-&}~7n*qhv#=o@R z6rEV~4d-@FiEGpUkh2iQs8g}`m|K=#0_gzaFZQkwq!fjNhaUFz*lHrQjNu(sDrfUU zoUf>(`jr;?v6(TgVy`)Mda)FKU<+_DYFB25fDG)ed`4=YwmIC9ABC_Cq7)I2E3Bc+ zE2FUh?SnI?CQYH3o zyN{k7fu)Kql?=G162>BH1(S!x$`B}am?NctN5Ap0f+g)JF$KUx0jWtgs7MIE845-x`Ph&cuuHGPk4S}B50L~khxGs!D1i0L73}!- z0Vs%iNgPyM<`-B1V}agoWO!6TK%@*dDhxBT6f|Xg88u%z%aoZ|!vQRD>8ubw!HXt6B6wou^cv8; zg%{4&Ob!=Bx#4 z0>#Rxty)#b*y5v=&Y|*R_HrrH3NZ97gTWO1LFkH5vyrYMf@KM&*bAi0kdVXW53Ww^ zm8thYK^61j-^TWfWU$3XD}zGi8SLf!rqiMS5L;!s2*ngvvEWOqoM!nHDo0rObUL~O z;myPoh)WIWphl^(m|HoixUh?mMUx=1n7^x;S*4;B!rtKoFo$H##MXB&#S?2+jsxGE zyy02!S*8$+<9YJOUes@Hud8p*eD`M~r!YeU`^PH;-r1W-h3;pO!AhsJbmFrMqqx7l zIkR8?b2)+7`3#(Y<=HO8)iiKu?R&_coZ55%6uo;fI5KMC6mxuG*jXg;v5K2yyi)_? z|D2u0J+b(u4S(#t&stt~Bo_@U%olcLPN&)2=iHzv3TO%R6JqftOh>==XDiW^xqL&} zcqb{?fcl^Vgv-g{Du;4&@DpJ1RTu`1As}*XodjZSEWnAhI$Rt%XwaXD$48q3PqVE* z2`)If4kkO=D1CMq-f4LDi&XgxB!MwNES_@+kgjs&45)ve{#0nF0mLk$@GkdtJ*$Q& z6X)wUTnF1qETn>kTnfHpg=FGmMK^@lC1nfI*hM%GzW|;pbTATeqIGS>{+d`;Hb&L#=Pl*v{xd5=lCdm@za3D00tNWr2vF?zE}-FYbVnl1aSC5W zaNq)Gzhr`Qw=_V_*yoW8siyFAb89?+W7E>yiI{#RZifbh&SbWch^>kNYP4Q<0X2JP z08oKy1E>VF$AP;KOESZL5&5;6Ou#KT4V*~51@Ob*063qC#!ggy|C~+E1}E{Sbkat! z<;AxM|Ti%G;p*LD{wkaVz# zib<967^sQ9@|!`=I*205*{NuiMk3Dz2Sj5gTeVKwK-a3|cd|eTmSf|=QO7v7tf1`C zOfV1XeV>tr1eHYAzH0z;CjtwOg#2{GPyG#;bO}vGGS+#VjLne#%4q(Op1!5ZL?d9F ziM)jY)8hL~PdAgSDgq7vB4M~5S1AZLx)c2^(kvMo|00E-9v26QG8X_)5|f$W>uy^4 z`3-ptwD1Lc%wHUTiiXeRvkQH%lV5kKK6dJ!`!a|T3koC=2;{KbR}jzyu5Jy#ahqj5 zp)H{0ToFCJcvD5#*kuUpLF8tx7;qFi`0nn#=V3Eo##NjMxFH3;=z?pERIMCLfb5da zwi|VN zjvqsEr8XN|YK{F#FZ2GT9w^GQYPSXzKsB&<=mAizsR2}-9XD!{7!vr@)>0neL339T z*y(0r7JSJ8L;pHuY&U=V6{l$s=8MPefmjwW+?D-Ew&=i1l)cprCWC%beijs3j zuL|OKZPJ1z*I846cAXxINWL?^e&1`>EZ$a-y!~AReZX^K@VV#@RK86^ZAwGw5f^HV+2P@! z>)S4uD3Gaz0W~?pzBXoKR5s@mM_22PtmNs0gUq6gLK|6u#=L~ud1=xm*c;b_KNG^`d)9dI4XShucjv|2+VkM2v;YZ zs6WTuRpA?Qs{N9q7uG)_;-{bKH*n;0{}fi=0leFR42~TQ0-vd}1gO-52&x$y3^PFg zT&CO2R>(iNfG@$rZ59!1+>Mptw<77C-T9b>KZEN7fF*shz0y1nVt8-(6&E~xzOUh} z1bom+&Eg*k%TLm>p7TQiS*v}< zxDYZqV?ptCqCjaKXtcXxcF$T>iMXl2!)HczSdic54!;N?#y5$nM}gAr`T;WOjD-wR zYT9ymR0%~gov}E79Xp~KboK^n-`%#r)F4Ux6J+oEzd6V?<3;@T2|`h=pr@tA7k(lMW7feBBu_02FJO9Pd>qG)oL6ddYyCx z02AzyiC?EJ`Ze=b*2eL_IoR=)Tr=){2BqdpqaaxTpjEdLcj`9~H9xwQ2>_lMDqqKc z12r?Fod5vc13oKBligO0y8eTm%F$t?TFq?LQAKC3UB719=CGn-2w(%{$wFp_lKsQsx2pe3-Mz8(M0v(}?kL&t%O2)d`ippJkK9uQbff=wQP0PwX( z!N&}~0Td7R0*q^Z(`6lc{-NKZwdko^>8nvQgZ=Bk>8AM)a(9fHJb)fNpzuvv{~r_Q z!G8ggl7E1^{C@$T#Q$aC`!7IL1OS+;Q8y?6fMkFMqR=1UD_!CrV2R)Sj|J=>V3x=C z4{*Md@{h$VzW2X??tcOA9ss~tjru$r0H_2H%x*LDN^Mu)arZ z8Ld|P*}#J1s|Bz<6VJfotYV}_cgdVk!BNFRhkY3_iHR%+xM|&>4s=jCc%WCOdU

      iPt9zYngL428*qZ$wz%yue#kfs zxx1!XNscM8m0tak)1`Ix&im}s2zviC*EF;+@cxjpaJT=vOYh%oyTl-%Ri4+Xq=& zpUk%_^OX+v*NZM+JKv|VmvUbJzO4}8VZIA!Mt3cq zkJ^_9vzu$P*CT_7<;{)P+vDB!jDpA0$UWWdJukP9JG-9q-DkVBnXZpVk&eE*#>>SJ zSX*8mI9+A3ZX>uoAgLig$So5%Fd!4dT%cS$P!gbD406EJQU2I|F^0LoxiP3o!1g%E zg=4}(v5c2r0_xpgSIU|APuioPW)H8+izmS->SLg0kF14aB`}crIk+nGNw)+GevHVb*y27?d{VjXjP;U6ev?jMM#VjYTqH451)bKj7+OsuW1 zt#=a2+|`YJ32QrP3A0qb&BsdND*%X@!6H1rX9!rin-M_St@@my6lDp{n|+)PsM^yW zpzIe+!gGYnHMZYpV~ur~L}%U3D+Tw&hUMkRK`$jK=AS+lphcF8)8#& zDCX=R(`7$7W83J5$R{yVVtKOx5``7uB^7ODLg+Tw;ez6FuS*V2ATB>_Jn^C{8|W)(cn zTD;kJ?o%ZSyWM)G-SwGCj}{J=aPK_l*(2O|aX2_<^T7ERTppH~CD!iDLk&A)<^wwc z$nqVFWgO2(=7VlCoi<#H%T;02mfFGKwlH(~IZ0!yK5qH87%j^`1%TFTFS#FW>zrE?&RI;tL}v z<`)m~2Ar>~%9Qb$T*Kw>pxjI_`lDSYZcbYiaAr|u6`P}T2rj7@T>1oq7!PI5_ujG> zDz=`P8;!uJ@or_Ic9IfC9Acb9?|0s_kJnKn9L&%?Z2K4*dq6$l+X;N2o}}NCSz*Nc zX-62@VGc=DNl1Jeolcc89l=#wpl}vlDfeOVqK6VRjNifeZ>JyGnAIc$oc;q82E_py#+>XG$~7mj zku5H%NIBba73Ay7^nU*I!Q`l|MQv875c`8ASK1XT9V05_jP9Ns?4T(mhYN&wKPZ*dHPS=gl7*3zjSys zoKIOGWM<&6OSp5Yg|26xSRl-&`>M`glBE*m>ILTql3PFc>bP#p z#_*KYhoBMs3%n$Go+0268Q;3I{c3RLrOw>lUkTP_Pg=&l)_`F{_V@@)jZ{_i1$iN2 z*>x zeLeI<@%%we*DS`X?Zi`0$CWH%&^LD|iy>QnyuT2nnyB9jZ3yU1Fg#VXUVr`i@S+Z% z1)ZsXbgH2mJ8NB_%*T`L-T5}G2E)4?&IK*`X!^cJS(_P@VKAhY)=$&5e$f;kTY{lO zTvq?;G=p5>^pQV6G$PHFtbfeB+V_0@Lhbfu7)74(SFG?POmcFf9FRZ_`AC(0+;4gJO>*|f%b&RW;+CbFo4cbk!OWsYbSwxhE9wJ#vR2lV#FdC`0{89ezUQ!)jxYVCb70B_03 zO?FrNfF_gKZVlC}t*xo`Wa37BWHr4uxtYv|0oNE~MX+r{u@Ps>4=EcjQ#kQeKR~#H ztLhMb9B&`-?BDZencOObcde4+2r0OeF@ug)BWf3a9(9Z(C3pT5aTFALy$YGOIgqZg zayehkiEe@l6MbJ3DVo7sp0Bm{nlyBl*2>G1d91KLoG?u*AnA;UBP!XmEtg`TneD#p z#WrG$B|^7hof`a<9neEqWx~1vl~P1+r$m+QM^ZmXjqot~Ag9MxweW_LjXh-P#?{aT z6n#XoK9aIIkIuZ$@CYdZ7Jcg3usj(q-^x413)X3Ux`Clm<#zk!jfDhDjbz_iyILz- z1)E|?_7XGNEiw7kfygyN$0!-ySZ5@IzpVJM+U+v9hw=Hm)Drhro63u(tKR@`aE`6; z!iCrHbCgypW)bFRNQjfe2qAelbjP?yi z!YpAdV)~q+H04~}yQou${+-bNaW%%xN>j7$a&}k{yOkbwrYkZ=KtfxJ>4EA8KxNaa zH&D^k-u6I{P^b)&vKFv{dZ|X^+u}xh38vBh-@?K@46&YJTzZrI(T84`rM759%rP%v zb(%Acavh-}b12$hsD8~ld>Z<^g%~9Ifs>ra8WmLCdc*f5iUqVhSUy4=lr$pv{zA- znD<7@2Cv+^Y_X4ieC$1VdKR%Vt^n;$@uIddB;_-RWa$8{BijIq4Dy0;L$eK0U1I*G zsV>fhx?A~CO4ONxSFx;auF-4JI1v-Mr(Wldj z7MQ=zlShbm2@~$Y0#`dLJRVA%i1J}N&{pfS6|#*O6hCHRV|#&NRE5z7D-XVm*6{HW zfL|MJj&UV2RGa0U`gNi7x9FNy?^2Fv!5mp~cBcflC0?SnY?bQx#RHQ_ITWJpN9)6_ z$1&9Z*m#ca`{YNMe08F;qlLrWk->SF^v$kyrPBe43{zT{Jv8JNMQ6_e`|_GtjQBBx z;@ez++rWC7nl3xEU7GD+G5+G$A~ND>Q?ZYN+uh^G{S_3BIPgWXc6SgZ+nR4cNI^9m z?V@{mD&mo5v5J)gZL897={7qo2g@3{91OT}S1Vs*5sY$a@&o3fh_qy0I{XL!;K{MMB`jHZNc@-yMzMrkua>?f$DJmQ^V!2a4B|Y|Gt!W` zs2S#LL6F)ouRz<#c|?ioA@Lzprgye3_ONLQo+YHbX0!&p+Ri%tm`|H3Z{FKlYPWSf zU8y$gK)=~Y(R7$6dk7VnwQmt4i8M_;vo<~RvyMK z>z|=S5UI@MiS_)Vj#ZX<16d9te#e>;{W@7QpKzAsW-GIM`)1gKM%PnX(U*xDzb9E` zvw~bnG4)BE(peqlAlruD?RDZzUwq_YGB&3Hzgv(@Jjo%+$P-q73NM(_mAhryZEB?NOn%U#*@qa-E6X6&3?y8sKEp=ie$tJ6}+fVL$9Hv*t{f%wp>(iSvl<) z*^nC#+wz^%12d@ESzE^~=AxocHuQMZHMN1Z->ruYu-8`Mn_c{|r6uZj+OpO}yGYg2^(rM_@6+9U3AyW>V~se)C4VV;uT zo0jzL*&lbMzglK00?AHJY_(sUKq~N7!V%ReuV_}AS&Q@PbU!TD6 z7~=D-XOa<1$;Qn2v@I*qSp%`qW^uu4uA$1=oEhYG`bSjaHX&@BFRkBwUO>f&t*EO| z2_bG2yQHSqbxb*_%^R3VRxOt7JNbHJR997neexk@}mhXyLlNt zLR6E77VY!-n!X$3P?~I0rL)aI!8(1oQ!G_FEc-GsfjF2!1^H^qTv(Y)<+jaOfQe1m z$9c30e9oy5_KG&ys`lwj1VfdCH08+Wb1m!&Vowph9sV-SiJ~HqYuPfUrdM>D<8KqS z4R1b@%b+nPwbr6ZK2Xb>&$sRUkB+?3d_O=e|+u?1lJ>$RlyX5*WFyUOb5M* ziyDClG%&j{LZe~1^K!Od3mJa>4scwA zp0e1L7qSui+~wE!BBK|^=`*|l7{Lg;p1mst1mra;a262;myzN{O2jz>%gR~Fo~oNE z!Yz4)CugHmQ}Ks%M~r9>3C)ME*VfMO+f_>9VgAX@hWa{H>Sk0a;#+8x$8^iM0t4R| zB+bQ9qV6HH2-19rszlQgzgUK| z#r6rKEOK`zb3z#PR3cL241c5L8<>fUVJ82Y22r8F*i9ersNvw90ftZw^?D?v@`AHm zIY82AEdQupqXitY7JD@a$mtseb8u1pEA3K z%V6LbrAt9IuWW8BV9UtgT;O}MG3UFMd@z~qXaUmxm_4%2`>o&?ONXdfJCG>QWxvoM z>#JeE)}`d^`LLjx+NP=MaOKc;eM);CDY$LL?R&Wv5DR-AO@?} zveOI|6LM3KsB}-*_YwjaI}a!YEr=z__5(a(@AQt!NG%SZxV3F@(^lYDCi1*oEn6Nm z%H|m6Y+FkzzPegOm??<(x+0kj;IuG_pWj}U=qRC|CRfaph`;JHxR><5ody#}H&WYu zK@p&f=HHTNh)GB|1XE@x2cK9d6F`VOb2G^61>9tYdJ`6e7dzP{D(UNr^;bhFl@UL@ ztj!Au3hqyP+(*j^9M3Eeg`$tdVi(yr`2?s;dBdqA$6vX4tCleHI3hDni$kOi^hfI` zNpH)HzCHWzdBymcQ7R0J6pZ=CpOH$ zvUp~)b?RVlZmBQdQody&tu9Qahkrl>BxTi(Keg6&MZ5H|3BVz9vzPJ7tUlvtsW*aB zCFLj~w=Q|>y!Ku?0N7}XXN{7TL6Eb>-gwI?nC?}9?8SchC1{SMUEd>mzHR9nE? z$=18`nD$OExpFkUY4~$*>wPQ}ghgx12u#bTe2!tv>3odZMiln4bdO<8+_R44yQqCk z(A`H?;^n8Cgt>gsox6o;CK||%tr(^D(uh-o6}&gBPywnO!EX8z>s|u3p`-7i%hbe` zV^0<{kNrL73Tz?;v}7UfVgFEo7F{V_GiMpS4yL zR%uZNtKHN?S{#3@cgi%b5uDS{QT8~g`UF)M)-~H~)|*7YjR?FQry0caEuzr2u@>49 z@UBo{zKswlyxhl#M;?^#Wr)SKN`y_Lc{UY+sJ=H8#qVl8j;g|*26X2&>9B^96LyuV zX6!axPnU14uq>Ug<e+ItH7RkCW!J`EoUF1m7f z^qa!5V$?~IUC7bqBRNdxQ*HyD;VcQFG8i@{>xs%9bMc!MQ4-^EC;m!oX^c2$QQuG4 z|BBO{D2@TbxP=Od)=ezU)&va}veRv*C=2EH;XNs6nZqZ7rjE={Rw+@*8|d|iN9Rc zsH+<&FZ9}qzRAiCnqFQ|O=GI3fY2#qg%^%Etx!uZes(#{Jx`5mad9HO9{u_A!Tgl> zdP<=Wt$5QNQIvQIlhxAuz)PRX#i>r(HIO;_y(~D1RLBuARSm+Yb0YfbjNPir9th{} zmU0Q`ciM4rCyNRmNard>Ll0QKii-`@YhJD0z?irE7!FaLK52b&bR6^QAU|j8xaSMw zx7LMrywQegP-)w7_se;OoKj|=*K>P(>SsJOn{zi<5mp+UxcP;ifZQPLG(_1I32RI` zddj%8+(%;Z)zQB(?roO1tKm5Z6o+qv()7ltGFtMT>#|aw9?Xu=MOOp|ZL|a=te4;O z_ra>qoPaMh8xujS?Pyw^?>dT1@}|)DkqfA+{*^z9~r<}%$Rugn3o3zBbSCZG0 z6L+)pvR1AAI4X>QFrfrj!S<#}K^~c{RGsRTaDTLTgG_A778)kAaFIJ?1v^S+`eM!@ zJLn)ft-P^y_|bt_a~j5SJ!;j3QYf#^`yBUFNp!Q+|EdLRgC_j+#QWc|O3<8|@MS>E zSrZHh2>wsZ+0n@z5Oe+~NU5}Hu||*NeW?o7LAK#6ZWeKl1OgjW4^|u0Iof!J7D-GL z)#TE}L-bU;fkIyIQ*AOip4sBIccwqxJvr-cEIs+q#5q}5YE>zf@$2(Y-vrqt7mOlo zwa9^2Vm2@8XT}(!;iZJc;n1GP%p9aPI`N(Ig!$gh6&dVW=0$V=!d8~+tc3h~LNUSk z3zvs5^wFy?mKFR{l&d&}Urcg`Uu|8``G&K}gjLk5qX}omwuC~FHDvH*L6nY_fN=8A zB0pt95U4P}m>XBX>Muj6|Lis!p&X0n#2!cU#x8 zgO6?E;XVD>Fv;$HGX3^NfxnJzMoMC9vsQWyXXQ4>YtRIwRV)5u=>xcOkYG;xQs;OA3#a&rd<8%h$$mpd-A%;Eo)ZV zfvhZdo##`PU*hj6Hb9n=*?GrhD|SY$mutm7Z75-f$J?AKcg;)F;LL#Hs~S$y-LR^c z>-g$)=*%zgoH@tk^aWpB8lt6a3S2|{_ceg|ETU8m*#Dq_^Jfpl?|BC^V{79-pZ`od zoU2R6tO{Xv{-P4;Y>NKGIZ>5f$+BD+blzCLUjKb4jJu`;%d;YF#KuwZ92pu~9tnfk z1{X=LG^sgJw@waB_(XT>PBi}7q;{e)0;qwVIQ#mSkMASi;YkA|gP^F8*l0rIzE+ib zC@~MB8A@X%=ePHwB0x+G!c2y-sjt*{uQ{tMzt0RUMXSfw=KV-? zBH^d6I&}JiI|-fD*=BESI@zUjr8{`%(P1-{_G=9I=R=QzDfH>Rri|&JA}CtQSbN*o z9|tPe*dK!^J_U2fZa8ROhW@T8SCtxb>s6{(7a*53r<=pO>*LSAA zULQY!HqqU__dzm~qO5-zI`SLR%issX3jZY!_eF{dl?|j2_@|;gxSM5o8uSvO^5Ht# zG>}yHX~GMdHX;#&{5;TF)DDbYjN{^Vui2yxsU)jue4xp;LH;fRJrCo^MK+AJZM*=f z;-@hiAxeu2rcf3HaRJoPi)#i#h+5A?mDg5L?;euR6izYu2*n~Pa7S`!VK&p4JB(i` zpz^97O)hCq>`V;01f$Eu$f3risG-Z7uQ{^GadEy5GR(!X)`Uw*;L8N*+BYj99mmo~ zdjQAH3OQ;@QJq{E90?6pU)Gpw3Bw2vk?u*4w?waP@7e_J&VOf;{(|?ChbtIvP(PI< z53N%fYXxuLJu+&yStOM8qvCR!o{>z<#q`T)mG*HLgY=}uV59)6&t|0Qm9-mln#7J1 ztWMC&XO;~-F7bQlz2}$Cm(I)12ya(qnjfpy81RdWhdY_N?G9r2@`DHqiE$Z>wi76c z2+!4NbPoAXQrRMQ>fz;E0{*`&iJPBO%Z})KDMIZXp!2BJLr{vedd0gnMmTw86zF+2 zf0>x_@fkJ@eKTmw%Yi?%x=|)~=8uZ(Y3;>U-H=ID1X@Zwa5FLANSn2q$dH4FGKKUl zQKu6U9MlsD7{3JnrmjZICB)bZOkuc(32%>W*;;w$@xy$U1>2U)I*Z_VXANzq9X3?K znnL2Z{b>>eYFiX0+u z7a45z1%dwP9DNy04tgr`*@`e%V4d;0EJ;_T=UA25*jX=Gr1?yohUOlet1J67_6PIb z8Cq*s9z_%^^MI$T^avxy;G#(E=kI!ONSMa#D~-)^$RV_eBJ-E9n79t=xflVp!%70w zo|~D+64B`1RUbnJe z*L;!B=-mc2)}3xHy;?Tt#Jd6w0LIB@N_iwgwXXgZClZymDl7P-YYNS&3?S%8Q$>!HXBHx-Y)F{Bsy_%MhCiO zNGI0x{#OUTZK0tT2nhtlY7PWM^zYgHe{GZbv!m$Wn`QplPqd%4YO~7r&pb28CR43r zb%O95h$o1Lyk5;uZy*ia4Y9_qj~|YW!>^`xeB@7*$LyFN z@PrSXolLa`UYf6>2aRuIWT;|Gv0aB+MbNO5Od#Ow+koa-FB-PtU^Om0b2M?h+|EsP zalT;P#2!0OGP`o>>q<4MxMZ2rN)Ji{?rqI?>dM`4`#$CKqA9S7@(BpsPe@lUk6V^B z_lPe>;3toFU;X-~rfTN`Y=>b)SfLm%2YRXYl(#Iw;qV}S);Z`s zj0?SXj(9c4`3DIq?qc%*a5s3V0&a$7Y`P@koy>85hbq)nHXWN~2)O!f!^^qdpoISH zK7u{#eFr_wC#*U%sp+9pq7hEx3Z6$ldIUHA5v`R`CeZDHR=iI#Usj@0B;vhkzuW~A zzh+9%%$RCNGQc+wonq-09+8Oi3(h@TqwQGZhF+EKg2x->@k7u^tAi*1VpM{TyA38r zlqQQIhS1MIl1#$>w11%9NhzsZ=M~|qo|7M$A{ieMeXN2_3@HTuisL^5To-)@N*^s7 zw5Aj`atJT3b@Cl}NKaj5<~fA^8>p>U#5ITb>=fSH=nN>npZ3?qLR zX?hZIF6>)@iyN8){faiQ{L+=^CGq$O2o6^{spD9|WiG+vI#A~+@ zYhEGBlNNlNlR-+Nr{@{A9>9T;~W^ScVih}};}nDLDFVwMiu z%VtA%#$PF3cx0qjz2Ty6_5GyA48OcNXH-B`dD^e${ARY4T}FSG#-us8XSV6O4ND9}(RLOhYWBRvi%5@oAh(`aTqq?YM>ig<$Z(Y< z8fTVjNisf`xxc5`Z8#kYG02Idl(LyvTrx#cF~v3@iMGYeLOdb&8PCMHv=u(~Oc?uh zja@#Jm=!+3-+K$$&z5-hUN~N;#4yKYF*vcpOE^9uc)yot{CRDpc4T~4g(;-_GfMAi zI5Ee$X|JKo+}UyIEDKeoSnn)J88uaU>ip8RC2GZt@+tlnQ z|D=r%sE+;Tb=h1IPZq_qxc`u7*?-@Xcq&Yc<56$DsW|DemP&{6xnuVVyfKq}hIEY5^km}6 zoje@1je>?fLnKEu&+x?=XPRP|q!uMnqKkQ-53YTo#bStokBvUxH$pL-RWn{6C5py} zGT$Nei^dl+U;j>;od}zXB&EqfWvrX=UqNO;5ydSyT=tr+c@^@lzff~HGfhznu2)2g zU0KD;InNk(M?9?xP)=XdBX~|i&qO?BRC`z(-@G&#OLPdy8Kh3`WGy$>;&I5)X<;*0(;_>8GJGNng8x2x~*~Dr#=MGDF z+3Gj4T4gae{q}Wl>dNHpnWq99b|EJmxC~|zs*bOtQQ4m^!mc@(qYHs-17=HBd)l@= zDgyV#Pm~adeUO_Xr|vMtBdCmP;&Rss`7p*gIl)P$c0iT)rtAYQaW~fYldPZN#i^{^ z8}NS*eRWz(=3D_zMFK3jL;6pr>f71<@oA6DDLs<#17P1dx3dD_trEM)cR#f&p(1oO z9Mf4fw#I#|{Nx`);tR1LRJE;4j?UhUjm;|!ET;td*HuOX)TUT$=Ty6mB%Uj4Ss#X2 z@eWC~8~h{perFQdVam6_U$DBVN!X~>1yRv63v61*^OXi^9-OV2*WBJV z0*H8~en}#5f~fL4;}7z=h-o?9E=`Y~W+UdXzQo=XHY4<4SCYRKzS=t79$AjsxMEjq z&E<*lTTWljOzRv3$V%2Mj`lKwk7=lb^>ktH;45|2B{3ow9huGelYVAm{%mgPnA|}b zh+krq6)wVV0J)lnSr0EJ-}(3$3=fpIW#|~Ic&U^Ds}2`TEEDAgCjN|SZ#WFXvq*(@ zjIm=N!9`yUz1w<7<#UB6`<&cyYb{4h6B~2V)6D7xgX3EO6@AKO9qwH4Md=t~&^ZR) zKBqbV{B2C6g+@tqYKq_YX(|MgHsXm|cGK=~D0@rSR^12iUI1VaRM7wTTN(f@_0Nx= z|L^4gcxS`k0)M|+;13-L$j?6#(E9)JqJh7OfA7HmH!&MvRGx zJ%G;txo`b%mA{we{#ykD<9}8DXOZsTL*gOA!EjImI;qQfw|5i`}yqy4` z@c&!p__xB};l_U}0MY$X_}}2;-_*aORR5-eG5o3iUooq{1^yld{aaw40fzy^ AjQ{`u diff --git a/yfaq/tables/micro_no_urls.xlsx b/yfaq/tables/micro_no_urls.xlsx deleted file mode 100644 index aa724ba6d92422d56e9cfc039e9bc12989f53cc1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 9455 zcmZ{K1yo#1)-~?#4#5c;oIr55;2NC9-QC?axI?hu?v~*0&^QElcYgBT%w!(_eBG;V zty^7ZuX}e@*V%PW$w`4jV1R&tz`Pbd5Hj*_bl zz+Q{N#nPfIVa%$V38DAIJ?#BlG3+6e40>SCGXY0_6*Nq!6xk$s7`T5!77%RlTO@N= zfr|OVgQsj+1ZCQyk$H$oEA4y?vKo}EtL0Lz?n%wgV-z4ce`?YV8WIRrJ#cHr3WVy6 zNF~JjE=jWl?_1)hL3#s90FWd$PuXQ-5RNgU!6vbS^4H91m0DBC#6x5!`XorB$`1I9 zf4_tqsv8SH*3#>FpN!CjM}hw9=i(l5f`{1J^unwz08CpE6ukp2b$HcBYn3)bnia3Q zIATv^R*9lkb!rzJu4JcA*{f=AXp)*FQdx$c08a?dfk+%ppV{WrBcaSA;HBrrc-kRL zd`ZpM)Esn-2vZ26xC%_X?pKBhGS>vJzzsp>h&8~?hnSaPXN8gRlLfjfeI&QKYgt^EY!4Fx|A~jl)IWV5i+wBCz7(#s_=)_5GGHk2j|^>v*-Ne@!p&Ur64zN4iw*YfzOFjIUy zC%Zn~1XZzEc4J7R!;t`}1-mmAAtl)G(nOFN=tt(P4r}npJW0hd?g8>oMuZ(TPj_FL zXnJJ?@3nTZVEmgDXKOoieQRs;-}Cd|1ex_Pp$MNm!ByR8IH5_>#M;vYegR&B2h`R} zTS%BRm_FU0!pacBJ()KjW!Y*LCk=K{SWDgvPcS4vN)1Dq*vX>I7qI_YoG72xW+l%scrNkH z6lz*EMc*7VzpRY^us7so07+&F*8_3eoPUht{g$)1yIn}SkfT{F<`=rS!ov4<@B4vF z;aqy0V;jW%5}6|{2t!=BA$`1zmteNDH~XqJv)mcuUN(bs>;=h-9Zcu@8~bGc>2;6KK!OAGF8)hV;(JVbw^drYf#+S&s-;h5Hzpe zcYJaw;h5#(5Gpokz;!QH-S!ve>H%fD!tPq?|Q@6z@ zpPlpM8@x)8m7Rg<`$6WV#~#4r6a$xd%O(e$O#EcmOprf+RQzt;fy%7 zXwF?2J$V#GKS{;Zuc$sTJsq1m?{6#^*5G?_S5TQ99I<+lIhRiV%v;!EzRYU5w|Bns zo>nDZnR#$qo=bZNYU`lA5d7`V<@xOBRN0Q#AwNn>+vrLR-*Vsbs`Z38b*$9w=5`uc z;PEcTvF3!qJFn;1CDfy+U3$|4N3UTo>sytCRbSke)8VGc)6&(*dPNfP7W2l?SyI)u zvd##lpvP`*hjBH%qwSGB!dtexFhyd?@N$n}_eHu3=OvW}H@@9y zI|8@E2rFVhn?Z9Ce_P7vx;tnU{D4VAL+WyGm@?fs;h~e z+G+pAOc+9ih3daLiu}7HfXAL@* zuG_t=_6C?B^^Q5PJbeYC|9L_Lr#uS1Ub%^z2;VA|fC2Q(rU)a3DOcZNRIq9VGhu}9 zMzT22wpamOR<-2AIPdQ>KQPUPF}ZdoZn4@o!GQpqNgxahrbBSlM$(yxX0n(Jie}xr z4R>c?;_)*vB^sw>lwjs-Aq7q`z6PLz)26cYZyM>!L5+tAG$GRQ=$_S$jo7Z^b=4@L ziAMYkMDO3cGm6-rtNR0`8ByA+<7);L;!o;5&@h^f3g zqZ9=?cqNg^1VRd{FWVguBPKPF&9g=mm?o)bgp6H)duc)uZZNLK+@A+DkRz&e?|#Ze zS@n;KW-`f=e6>&{iID)KlxiG8+qST2PZgL_sOD5zww`!xofU0tK;5SL-O4Th+Ippp zm_n}m5rKm+=*p#4OgI9z840UTe~A3GuXdMBg|6D%&pR`y7UzMD`EeyMjyVT>;S+5X zD4?kXP8BGbo(nfyGh+@e1C0Mu8F|D!zcEK^2d>=<^aH*g^PzPBD!xfwkTXS|JIH;P z9}}($-W|HA;ONBJy>oLt;VhpXIV_CNCfJ&T zE%y~jgi9KEHb@k$&(usL@)!7SaWuEDeH5LsRJ7Ef0kP!Spi$;NQ&*AE=Wwq-p@8;@ zbnb!m?Px>3f)x2|zF%_)+!V_7VN&*2n;47xLD5E&o}^|$vlrti&HfL3rs)%loF>Z z0p`y9%bl5`LTN3NK&#ER&MGQx`EI7#?B%>!wS${ibor%xl@`C~sOO?R>b|1T4Uagj z-6G1fj@#+vfYFn{vfV;wg*06DsNB@~X>JH2RdHFxbE^HLe)62nFl#$uZsw|+`-*B! z!wD8LatGg1t7fY!wJJxC^@}SR-!mt!CwNek4kZY>dX0Mj72WU^o%W_1UdPk(GbK}^ zH(!#z4k4e@sHF=^SMVB$S(78)MLWFSBm^_A6;_PVzSIb z{9w;e(H^|RvFl)zZNry!`Nr~A3DM=6o+Y$ZX_>B*olseSCgLi$K{Dexoyl+zqtz5oTY^ zlZ4fAvpnt$+Kg|eSRaMvRP;~0g1`WM8PnaDT=|O4ho*)D2x@$585r%9@4|Pmk6?eb zUvmxD&>?M4Fy5?t835d1Zis9IUoiGluc<7s<9xKj4Q+7xB+Dfw(FezqWsL_2)MjWL z#THAw*gcqFgbd;~@c&7=9_l=r$Sdi^ucZIpzPw672R(fYfc@XqUoyut4k+8rj}mm^ z88)&a1y4$vgW~@#IRvi@8V8uOY=}HEN^*U)>?Z;fnRIc&(dXSaWu5mE+f8AVvKkm# zz@OGEy}%Pod~kOq2d7_&YhwH%7Bengw!9Z13r|G6KB3>Qi9iIk01_`digqF>De?k} zGk`a`=n@7OGsMDSI($>WkYAlf39DIBuPb2VpxGpZS)?Fn|CjV-qr{ewb1lwgfo@;+ z-tv)3ATY4YfQu`F)!xmVE_B+Gp32UpJgXs%%b;GRpi|EkS1YcKY_Bv<>o|w5g#Gjz zD6wx2;x0$$m%y5`_xh}sOO`$KoyOd!^H7L*CZWA|v%bf8TXn+3*EM&1GQo(C+gf45 zZ0H%<7aV|}iM>=UwuMedKPimN%#V9iVV#B(sdx=%dk^c38)M8a=1b8`ttIFQL-O!m z5Si~l|4BRK8D(YutHSIi{txZ;CVF-NLq!KWQ!8Wp-|8|^T~l$h5zULQqdU<#Xg-Wk z5LEGV6A~BZyZ9;^ZikM0t8%L+y%`2_jXTD`JKaylah$crb)rs zowi%W4(zk$7%6$ajGK18FT@#_q?YGyDM{7aJ8i1v?pch__TTD4*QPYGZf1K~3;X(- z)h^!8Wf}IEbE-=y|AKl}`rOwn&!e-?w)5?Mbi5ZIce$PXO|D>l9oGqk?PU0(#$&~= z_+@W~(b`5%7VLPh4&p3Pc=g8(%GCZ6Fq2sP@!P}sFX@D2hlrQ)f#6OL5^ZRoG1$2x zi74$mX>GtE^$RB;ESQ#-CDx$|smrzl7r>NcfvEmdRKxt}EeTfc z1pr&ZCdHI3FpwnYG~4m4vk6uN`U_?uQZPr5jdgC#$>2H?UNfe2yQ@p`iLqO?-p8Mr zKPJ`ViIfBxWG*=Wmu~#mwJme``;+QsXwJ-_&t(y#Wo#Uy&=|}M?>+?6 z;J71`O|sOrFOp1DBqSEo!{M9kXoH0}u{|}NCrvv?RzKFZ4rZqt;|Lw(Y63aN3%ez zpD&WjJI4rrzwHSZFR6D-`^Gl6cF2s4LqIWtZkb=k54149b!-vhK2 zQ3$v%!jcL|06yO=B;i3Bcw75p5O$$C;`2DUazJ{JV)AhzJF!UE5MCS~!n-3r2BQ_u zd!0~CKdIpzV?T4wTeUEa)0CKyrq(rpJ91jocL-lNYs*RMOY#fr&KFpJTo5IyrnvWi z2=dwbp}bQPJC3t+WIz*!!d_+Z&|^(L`hi-Gx42ckM~0(`FO`heiCv~x@p5K_^IMd< zv$U|A;Xshj5B&bvyfl~d7AwPn`l36@IwFuBtWJORpBr*2RW51DIXKL!U|<7%?ABZ# z?~+R|h0m*8KAZh6A8vFn3K7FOBt$%c6p2al!=Jjr_BxkJ{0DA~xtjKPo-h(_gZyPTxD}B^um{@B-1VJ+zuZ!qZ?hw80`|(7X=;S? zH#4d~oyn?Guh48gN;3cz?wQ*=QT4$@>1~6&#VsepFRnI*NH z2iFY4VYFGR@gqjZ48ZHIs@RqqK1n|~q1uBmJEcJg*0I`ZLdcLZJNF>xNT(&~`dvHD zMZ8)Olmpg=LMw(>-!sqt)OHpCX`$i7VW!YKl@q3 zjJePF(yXeJAT=SF(fFqoUKhD+cVv}NqDUQnR_)&4BA%Z86UA*5so}<1t6E;&pAmty%FStu5$*t88X| zNf!*cD2PwfRyp*e1sM0jQ)O+h4uNO#1h7SXKKtdHg&Kwu5Nz-YtQnC9!(){*>VD18 z0*ZTeBzx!aT3~+LlmDGUOHzQWtY*SS1s4tqI-K6*vUR98 z-Z?ty3XmDSY2Y5sFSaO?PP-uP>lvXM<$+U#uN2+(NXX>FAZCsx>z|8H=nv_-P0vDU zVU*Y?ji2sbU6jSEW}P+l&2MHu%ZSgtekU#zckFZ%iZysjYW`hd>^%@apVTP3|IykB zi@!gUN<>AyGV0yL(3)@vs)j7lXE3EbB@p}^%n0;!C=wOc2UEazcwJ^dNN^zuWF=P2 zIV^RxEQzEsQhud6Zxmqx2Wvzq<^9vo7DxT1LgzFe7rB+m=G34LOHaQr1Vev}H6?dA zsznA^QQ=aFqC}H2R21r@5OtD8NwC%+#><+f4I(@vH_!3gx=}9A{qZMK1%VpQ32Di- z)oPg~{Kd;GlZEl`k1wbr!gF1>FePjn3^HLNfR6OtD7#Kqt+IphNF~Ce(6+DCb zr?SJj7gef!jruF#{~h`NEvQWZmVm#nf9dHXb(v_OFi!ggt!R5g6gu}vd1@K^LVn;; zed%&-QD5k%szO}%?I%`*Aac4%=BlY1R zbzJ0`XBS@Hw}dyiyeo1Av%4K0eu&yrXJD`%!`Kv zIUx||E1XqrnZ|R~VOi;QdPp&5EuI$NOM(N108{yn11Z5MY({&FEx>rRL;F;x_sXr! zYAoeq2z36YOTifS;967GxK|MzGij)`g{@*+jMjW7`BFRj-kYXfa1vw&6;=VW)Hu{@(7B&ya&qagooNu}&SCUA43>cEm`g|*W#B#a zPdQZh{?Z-3R<~!2Hn-=kt@WDtV7@FKH;406D)4p0^nj1+Lnpj12Wg+jvp#ot-rY*E zXz$;ydOcpw>9jL}Cn9;A&BU)}eR4g!GWPa(nFm?Law+P8W~D@1Chgnx>C;UU0KpBr zkVhburp4d{%LkoTl!tUN4@-fad#Aj!j5!V>-FXoIfT@K{_CbCcWGQk3&L-M^cD>tV z)QVDy!#FO$Xk9;d6N!nJdEht`&eA$gkWvwS$V&LV*)dB9JCcMT#^CYUhj&ob?g=W7 z&0?Ni6vQ+R(YZ+9M3WG9HV zW>OR2v-N(Mish&Zla?fs4b-u1R6^N{VTy7Cjhz&>*OaE+Ki1zB?yWqjGW{X~C(=i` zB{SRe;&6sBK0mM9OaT^3`3Xxlk3XtP=%oKf-pWSohaO5Dkq zbg*1&uj7Nvs9A4>Acxm#gz>4R3u}txh6B8I-~%!H3L%fgHSE^?L;FMfNqe}bvod`J z&=MPQc6MhYU8mJfoJhVGX(k~yjoEqxEdlAiGKJAD_f9%f)J8q5bWPCr!koPEKDlI< zshcLm)($p@PCXc{;7hker^Wy`pR58C@9Kq-F+aaSU7x>xOHLNzj>Wk$wWB~}L|1b+ zp6ZHhvLeV_!nTW%=}O9^#YmbQB8)M#ccD6?uu!kAsNe7jq`$fv1CKCsHz2q-uJ zuEqLBIn-c=1kvdecpL&d^=xdv>V73bI``G|J;^96&(bw{)+QzeXjWlA!9vAY5<{It zr}m%}#ks5s7EwS}N-6EshO>AS48GwEaQLu6j`e`DfXr@bFMHwJK3>q%%jwo;d9ueS z5i*wF(#0@o`Rrw#SXVEw*k)ABa@oRmS@S_Yt$Q6DpflcBe7d0DPIw9)!khXz0S4_% zp_H!UZX3nH%Cr~o{dwVo8LHoGn2XNVX)#wzRri8%xVycvJCu&Qam%7MgS;kp|5j-M zU*_#8Z~uy~|6~A-daH~Zh}g*SAtU&j0i$@s^P2_U)Ghf()vI$Se|7X^f5KG%N)G*< zNBff^`YVeTIaUSN&4dEAwp<9)kXDOCI$0YIqgBA$net^yKP`Yf%+nqGBQ+=I%G2Yj zt@1@Ol~W;#m@!2{D~PBH*C!3K^(DeNZru+#Gn`yfXjoz6)1~{u=--w?dv?i&LL$+E z5+1cfil9yCrwD%;c_PS_Fa>!S{}P=$P~!(*HKOSX5r^rN z%3$cGn^8xGR@0Y5<@iUxi^*NMSUNFS6RUt}AY5BT(jK^^hpt9tuSt;{G!gxNTAb!! zq`#^$T_Z^s6>9#cU-g15D0DyPF9@l(Yj(%wmv9QzLJENTL$@42FoyF-Bw85h%Fa{J zy zsPZK!DQ+hn1t*=l5C&Fyo>jIor<6ewWnFYxu2L`kjiV*&lFQSI9~tl1g%lDun5uvy zQ7^xf_!o!Ex$(h+Oyn$%hnVyHMx-vhGU})NM{9@6UGqUJXT0xgQ#s-S=Hn+52ovSfhX&^0 z)FO(@x8L3dA%f(r8Q8}to+zckt0M%F%SL)YNZe!C8uWwl&eCG;VQ=V5@-S7xZZ_}G zdYuw}zW>^GX(`7*9}~Ub)yUxihwq&S6Lr928RnQrslppI7i`QudKwaKqE`|d z8x!!p8w-YJ2*0EIylS)4m${~6t?u=DasU(z1N{F!$MHH+e|>y>e^>wGRL5I@w}%h@ zHU|Om@r`&L{r@_O@Ye8cj{c8f=Ih_^|IXOI#d({{{)5y0I`v+0{%2eS}y>n0g`)0oG z>Z9EkEXxxotb3Rd`p-PVY3EDej+v#=gL+>HI18#_V8bNIrpUt~0vfZI!Iz4nSh@>U zfKN|eGUbt!=}RWSP_s6=g;-=YXc;%Fl{~$(+P&v!DzdkeN@=&r~# zLaZ_gnw58c-~Ba6@4yI*C5VBk`|OOuu@*GgB-YRYnz?O~8wy!?h#W+p1!+_{jAij3 zS8&7h;*62C^?PYk5W4Xw(0}zU9S|pae%Y8=oYOM~*HHvR??g)*UH8>qr^}RL!>cKY zJP?^vqNr1y-iLtyzBi!kU41YzMNJZ=EX_cGCxqunB!*_dVtekHSne74)_Z3<XIQ zlHdTqJ5Z`?Z*1wn#Q6JM9^Wm~%Z$K(<|(rClx8gkn_JjQQm{(N#@j`1jb9&?|0Ce^ zEG(8EA<7&k+U|JIbmVC4Q`BLU!Yu&;eJLIW)W~?qc-P3Qxg9d?JLnKH7#7peg0gWB{rFx z(~x0?s#qekHKNh!M6j$4w>J?fDcJbdOpq4jPv)WyXZXxAMa4Pk3HT=?!cLm!`yeKo zL5$#mQddi+zesVhu?HI1*Z_a`&;KFFqL&#(`0NF~`cA_cO@b!QfhI_6`5Gdyu0hID z+^o_3*ZOARBJXCq}o9+p&j+USxG;28N3BT8M_P3}_p> z9ThSff1TQTYe>DhcE0+sWojKgw~fU7YF3l##F{^lMSg32(^4U>oDh+hO#|#589Zvu zC$}yhw|FtiJlr(2VeIWDc&TSzwmj6kr)e`O$DOq>Wk$1NLT(->5|2;M!@A7+gvp=Y zg;-V7H!>A(X>~%Egd6H`PIvMWGtM9MzMM{a&Q+KyU_SL-N39s=rj8Sxw&uQl!pN=+ z$fk07-PE?DZ*ZyxLZ-+pC3#Vg#GHiKr1L?YsG5$u%&(StS5mebWOouA4O}{?5M*T? zQHEM|)-c4(pRNxb*q)MRUou6QuSD7|%uYmwbf0^rc%bo6QZh@27CLT+3{cmtju&X8n0 zoEa;LObS-jUMPh-G6|KkMvGfIY1$efH%=iaM?oO~sZvWG>BmLaqqZOm>`(mu zF3|IB`O;y_{~}ezmWxKokvJsH`|r0I#L$J6*jJ+i8k_`SsOt_|L#0-=wb9Da=3Mn`;c$GS%*uJr@9N3&lf$CfO6~hbdZ2avWZOBRm z2^@JmY#EY>`E-G}o*;B;j;tUD55^xwc>+`jEvt!r@@7AAjo2$Pa823f5yC&8YBaTD znMB$BVhpfmH@3sju!L3*pfl~q9{Uhr5W|CI9TT)5%r+P((3m>KHIB&ONB^h--AA-d zyV4AAXS=Tr7a+ z7pTxDio;vfj_{BQegj5uF6uoQh~x9dlXV63(au?oO|kHw=0uwsQFp0qI~W6;NsaC5 zraiR9pope(n-1j42DVvA4WuTWs<`kpDgBf-F5tsGp!!-EK@e3Q#q`m)(tTI9V^#tC ztLQy?JkoGvONQhaHpRmyl4il65+6xW$@C)TnN9eox9(Tb6xb(xePIuc@-1!g=Ffl^ zJ;4;%Ry0rvUcpwoaB~tqq6VnM0}fQOl(t34AD0(N=*x`i4Co2HWh3j0XeGVDir~>F zr9TZs-9BIqpSKc`pqaDk`JvVbN7g?r$i_63rX)^36c|=bjxHKm%wwiwRj)}=Jwz3F zv3hTzBUY~osAm72F+S9fQhK4bw(1Q|L+N*sEJh^mW6)fHM(??|&aV5FAN!?GZ4q|6 zRr%+8Pz48G1eU(%9g_R_7rUd-es^JGF~QNAo8|JL;o>V%I67dF>8tlW?C&EXJ6zn_AaO2DpdHQE*vI<~Dd7&fW_Oc|jahSq+Qe%Sk9ZvW!pT2YpJ8^bhUpy1Pv5pmF5HhrnJ7jkvuby1il_xt-wc%&Ivj%65V@MA|FwG6F#o0b(^L{ybi87^q^I{zOz~|HEogIZYE{Y8OwW0umgh_iW! zG~GLSN!#0Q)zs1(WuDTq`mV48mD#EGgJ47%o;A(L%!y9z9_#Ju@dn^|!w(d>4OL9LUGWIgQ!Q2Z642TE2WE#357C=FyTDo2~B!Vz4;1;x`cK zA3Ady{kA+scMmLCPCX|&n8`#WoTl)h^&ToM?k|;&?(4Yl?Y5%pIeG)`dsmD|-YM3a z@+LZIXLY>XYVEYlbC&9jQw@XexYLm^j1S>xNoz)JmW}tr ztFAQBE7(6JPXLYug&1hTLJ5+D$bUx@*^OjjM8?6Ik#p`WI?9EUh+dyNzhl= ze1dX~O@)xBhH&cj^N|vb?RFjO_Ug}Z_vVir;a<5;Q~Lz*;s^*%=7BR$1iTzE^PF87 zdm6UJY`eCCFr`}-i})V*Y`a}%I;{j2XUifO%{BeOtzqW!(~`!Py`SY#p1%3g zoIVG{5{V!w<`oU_`JXH;%Y5fIxj@LVh{TS?pMbx_h>CW((X^DyG?IHV|Um)B3r>X zjKj2BDogBmU+oAZTbu!j3JD4H;mH&k(;))2SsJG=OQqf%p3Ja9hVfhY|0G=>bpcHT zM0yE`^xtbokPdg$H?TBz_$&FB#`KC`mg(U~2|n`*A6t`rM@pKD67W7H6t5cwXE}G( z2zhLr6#x}U+xQCHAhfxI!_u3>R8LoFR=BDMvL_|<8Y zuv#Say92k5TFgROL<)lse@R_8iSG!x)Zttg>J8)^te&U@EeCZQa&t$rIk*Gq!)B}) zsO()UvK!O64I5MnyY$^~wd32#4oc&-Pjl(NbDS4}5&PvL?sIl&1=W_*8n9WdSoJb= znev=3KqKOrh4nwo`JLkJ)C&{e);{n_haf)hYKIH6qi5<|aT@m}^;5Ol6+55wQJ7c& zPkUA2oJW(Wc#Y=zkLyjFVlA!~O3}=1#2E-f^YPvgSswoA>rfYzRRu5rKo9Z%((YiU zZ*Od*=xA?lZR+q_+9#=NDsDHSdGmGlB)J4HgcAyaDZcmf(_l#uN=YsEVvQE8Gt}gb zN9cWhJZVUTgs+dkf_*IO@bZ%1JH9&m9+}lVB{;X&ey`YxebEvtDbJUA*TJVnoOw-Z zb?Kg(T(i5^u3F)d&GhO}R3El6t&x2<*UwfwFwmlQMLVBu)C=TN7gzoT{i-B8&?5gy z_mF+Bh&Cp{n~$f$Uj8mmu%Vv&jKXdzVoBq<@>jyD594@U6BjFXf_Eozw&*+c=Pk;# z!SCQ^arl$>#|v5+gk;Bv*9k!o&QId)XtEd_+)+f74qbG%5KsoiKOrrdS60P0p^K@@ zcY_uoqy&T#=p1~HkJ(!Gps*)CrR`D{>j~90>p*{?nwt}+ah3kg@iEF8s4uJ&?&Er` zID*{*C*HrX!9jF-1&l^_ ztgp+*IwC`$OYW9D390&(`nopizWflQPXhCc&O^!9X2iq2MVq?2rSfT0x)hnF zw!NLT$+vI1P+)9tj#V4~=pEvP$EsOmox?RH2s4Oxu7Z+-ncU8;I3aqY56ppJd~ZsmB*=jIkb+-& z312sMfbx%LH7zh)S;4a9k>lm;oZ~PUEQ{|ygwWu4Ad^k8)^{wC{H#n&Dq(=fH`~(z zk7#CpX<0a0U8r}-DWuPS;Z%=cASPR4uLd3~Ch{b4#T^SFH~8m=w9*7gxO@ZlxjB;6 z`?(DdoqGixjw5ZTJXh?5)HxMqS3s$$T2s|R7=7gR*<@GMo>qCVpn!*mSEvlHM+lW! zTjQ8-(;g;+A}cEEV!r>z=xHat6-BfwfYI3^5a;iQnQ*d*;am0k+OJ zmRo@w4xQN`cPoV1>UUZmIpT&ONA5_W_)r>BUX$d4gt#S7kNR5LGXc&FH}TnpB%%#$?V%}CSg z8zG#yEE_t7uUvHGBn%|@h4mH+Z9XoF64g*V20R7(?)*^R`yMxmvv*=h6OO`BZTZw| zLq7h2T8_7*O}$r|vzafAjLw-ux>t(C8(NM#; z2Z?$jKrdETfO_ASoJzH8x^gZKiz+zy&;W-G_s55n(re+%YFAl{-^YhLy{lrx2u^Vk zuVsp)Wckt0J>UmjE6a3=^P}y}x5mT{6O1iLg__|oS*a!YoJv-qlIjYv6-4~3bR1z{ zbW^*XQlva_$Ml%TvU8~FOb}xz=882a2%Td#QH$=)<{jeoDHFWk_EwT6cy|+Y?=t%*w}SZ~ z@g<5A-tGgP?t?dm1rs~oko(8++6o1sXR$(-(i!6lx7~8H)Y*dxn>$_&A*qhx$Nik8 z(Z>po#_tx&u#lH&liVqunLr1O9suUoqb}|r$B#$IhZqEn&rcsN2&tk=T5f)3HXk_J z^Xb1%lzX|HEODB#G)6UP-BSX0IS{su56W3+YK057GiyFy$f#4V(d;}+F)k}Svb1-O z@Rs2_j&&zL;*_kmBidzm0i~tZ7=iuL0X9P+tgQ<2+xhiKN7puM(BZr$^u z*Q+_r&Lpb{d1ebK(nvm1a(vn-!oZ%)vyenMm#+9ah{-gL`t#c*EXyXWpm;ahwLnA^ zGG6n9i2-U&wQ21{2Fh(>#~r5}TNLtzwt3eQ=6H zYON3Ooxt_jkO8sclgrgJ3|z-h4L%-L<xWsWm&1U@u9GI}+x6S-`2mge2%kS@ zb%^Zh@I{cA(u4#65dRWW4vuahG4*>oFH~B#SYbx-I#Y#hr&@CoH;Xty0e=@%2U!!; zG2C#B8A(nS)#%*GOZHH+hDKfIU1c&pn$hgKbF4qvH9qBLEIoeL$TMD0Vp%SgenmXc zJ4QAB310DCmFTW#Viq3;F-r{D;Cw>jU}*P!Mm9<-llWF?!c5Qlk_=uA+nl*yK?}!4 zWChu^!uM98^WQe8Ztz( z;7SKd0Q_9cNc0S75*4;5bK|midMw7FA;lz6Rami?aMU$2Bod}b1y$<2(S(JZY>{D< zk1u_#P6jK*F6q9ma%)p9X~CUVUjE?-MgbTbN*?f3ON?-$!lmNhlFZ6cQK*wc)k&5l zz}teEu4|jOi119@y(aJL$GN=@CtpYv1Zuf{N=a<2*GRA6FI{JwEl!p_zoCu^&v)O$ zerMNUlnxg$?#$Saw(oM&j?YbPRmTsr(vC6{QD3OY@Iiiuke+B<2}p7?{q#c}IeEx) zM_%`9^NOW*AScI7$H_!FY5XnC8u3&KYS2{GSj+ zs)plCmz?UQIzBq>Ix~w~$4+tCy}_qvhM39gf)~*L6x2A6qDoaDmx}`aUv8J*g4)d3 z%J{GIzx4Epx^&F4Fiyu6ooGj6G&;{%MOrz>VnNVJL+NVWw}G(F)y23TWvN5f4nilW zaB%V{*yPp(C~_r9O^Ld-a*!g2x*IoN;x9~U#u_33_1xrH7gyds_k??g^)MfVz6gsA zCp7%hs!$Il=S4O{YbfUlcrE-IRL~>tiz_R(oQ7tuz5KXAyQYL11_ypAY`xWhNt0x~ z)NrkjKQi)(0&WH04%HA!5_QS1YoLq6#JODsxb&eYEC`JNVtzRv^#%^lh`ziW_lhW> zQh3O+*K})gg5nT^n*)buF(zY}5q%%FwgJi>-1`#=a$*q9S9t5Xa*fyOxtB>5wL~3ZUs}gqgzcG(|$z= z%;b@_R`$wWl?%MLel+j==>u1MOix2Um*n$ujp@}2)$>#EGlrw}#Z%{W%(liZ&gAnK zI(+HI@CgCb{2^Dk%svOARBodmi-=@xQ0H^>U|7_eBNhI<@}>3+{ddj#5G2TqDr^E4 zY4NDHVDo(!a&j4PUFncOmv9DMMl0i**lQ?h<>g1}J~`BPgQa_XZSJoa?e4ETJDar$ zA$-}N+#N5^sUS8HGXg(uj-2tn9i_`oX3KVZJ={yO>Kxv$dp}>#>vk|hBq4cT%qFa7 ze|EdLG4=6$TL7$Mxqj<~VWUJ_B^}uJ9neb`0N{pS$s>?T(P40b7l17&%0syV!&Bkr z-z)E}Von02x{eZ_Ftw4%KFH4iR-(4xZDSnfHhav*ttllrP2&SiHVyK&k(hZ|hEB8K zt!&~2DHYL2tc7VUPFX`aki-QshEFd(yoavwNK|=l`Qp`0K}_QqlZR9!nvAe7ml|e0 ziL=GRP6L};ac^?QcxY>4&?yxCU5pxbREi$1wCUnw7BvArd;f>&IL_*DDG4H(AYHpA zC6t3$=4f}YxG7-=O)0v=Q-gis{;IQTb1e~gkpapb>CxusmCbGI!0nlDtkR@}Pq_p_ z;RbaRN%C+y<*}BCc3nfmw(Et$nU!T{lgunsV$PGogbvfE&3w`Ilb2-P0y`d z*-|C89N*~#JrQ%P5q=WCh1+?2>Uion>xl4jQD&%Iw!%i7o7>yU&~399Ba-h&noW#L zXR#SWOGJ9CN@cRodyvW!wN(!<-4OJ<0+Kg9rhMOL?x6{_vxm#2R}Voe)anuM(ir05 zlTl#iUB5Ch<>xo79|$mL&CN#Kv%FNMb`pq+>~877Q(couQ3T8{fu%eN;wdbxWXb~L9Nm9L|-`TFSiqebsAK`-XW&!f21c@(SDw_`jBOdCyck3K2 z=nyMH#e$T0)I_0_y@9ufN(i{ zHG@im^d9RO2NKa(UZorIY|YFHFl@s9g2jq)Bu2VP&K<$2iu2i(tfI!*sikz&TP|YJ zu=qx^%cIAQa%@MGg=F?C2RVyHhj_s+Z|6JP6)B$MM95hFD_5hW6?511U%LC3OKiu# zSgl&xt!h5Wr}u0^80$_pm7FgcbP%3Hgz~1zCc>g!D3sE7KJ216TATM9m%T22ut4>n z3wPDsIWOUEt?pSgjqq?V^?=s(Fl}AZVU*Y88Qdu?W!8=yjl(8QY{2AW2*yLck=@J6t?;MWP}zNZQU{&eQF6^GY|z?Zo$F|IITa7YQTYm1X-4>5-8T6xj7dJi-4s<_zcpwbFsf-F6u(q8et(q2WX zBOC9YuVK}?81i{n7}(X%(?|`h+o`YdU>o*=y0GNPS(WH(S(OQ5{ne=J{W9I^!~bK- z5{h-@tdM8PzI3&LO>1$AdXsQja143)L2j#33YfHSqYO=Ti?X=CH8Z%GwVol&-PtL8 z{`DxYtzrZDNRn9q#7?E2TI=Tl| z-T-?7y@R;Gu8g_fCI)FrJP_l@Bc1P(>20UmuK#0xDypePzWeJfrQfpJg`L~EhNERJ37M4o5!_CM-@Jz|| z4k@h&fBra1(iTjijVB^4dd1aHz);C8<9LrBeEu@YbOKJ zII4lY>$bNI?-Lc6#%D`0R|L*o@+ONw{0i=0-TfJm8rs85{=o~iqJ&!Rs%%sO%4Z)} z)wYYJ<|X_~PS0zUh!A(K{T$Hvox%)5a@wX(2OCbTlfe`n(3qVxfeyW?kP_ML{yoI^Zd_!a0&ec`D8}j5VqOAHNUqP4gSeo@<#T2!MsgRPZJKq8>t3_fHX^*Gb69A>%-Fg>uujT3zl}(apVooQ9 z+eoR1Z}E_dh#e=CNnU0(Q@$sgXIR!ts)~UZiX!_s(KmU1bk?DQ8IADP*N&Lxnkrd4MZ0!QH z<;{R+%MpyJPxSRAHxjGWrE85`ws?;&naM75Se!7I$rnh61#fkppcE zqk@JxBO60GdmCE^CPN#0;p6DPz?oSG&Md>XS0*1oNO83(0`24FuuoZ>AZ{doNdbf6eQho)eSS_@0*NDN%(!Z`oEDC)y7~?3=L0 zZBilPP;%%Tp_PQo4<7D1O!C@0eO74`(_7xs@M#k?G#yA}m5&qrP6U@WTX4)f9j}l# z#Q)?}r=@t>1;i-|1nBrrPW5eV|Dv>8=7=rbKycPHGI=4 zHLiwVxOrbI2gGM%!RcyRSRI_aSQ?s^>N$=`@-8Zj`sht@xlZV|8z?-MRx;lVapUci zYSsjXZhem>vciH_$pOZSf{<4zQbHhC>P$L@ZklmelTSQ8owMi_fh5Ked{V0i9*@(@74qw}81Br@_ zGQ&l=4PcgYaq1Ao~7-pgva;EhmAh^WEJj|PpWhP-R~3w+5l?G zJ9!xqZDvsVGBF|G^Dq$t!x-^EFS~BLH;}cVYoqQBiq!%G$AI|1Bj-RZ^{rcZ!qoV#c%mTfJ|96bkpE!R;5B-hP0qS}noc|h2 z^e4)n4!OTksuBJd<$v6Be;WVkSo+(T66wFYnf^rh(?{|*LMF&P2>KKMpU31+gg^IV z{zh=X{tMxMcW3@I{c{=rx2X&6UyuLCqW({SKV{ Date: Thu, 17 Oct 2024 12:49:58 -0400 Subject: [PATCH 4/4] Added matrix images with alphabetic objectives --- yfaq/mbc_matrix_with_ids.svg | 2 +- yfaq/mbc_matrix_without_ids.svg | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/yfaq/mbc_matrix_with_ids.svg b/yfaq/mbc_matrix_with_ids.svg index 42dd8de..ab83324 100644 --- a/yfaq/mbc_matrix_with_ids.svg +++ b/yfaq/mbc_matrix_with_ids.svg @@ -1,2 +1,2 @@ -E1560: Archive Collected DataB0028: CryptocurrencyF0015: Hijack Execution FlowE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureE1560.m01: EncodingE1560.m04: Encoding - Custom AlgorithmE1560.m03: Encoding - Standard AlgorithmE1560.m02: EncryptionE1560.m06: Encryption - Custom AlgorithmE1560.m05: Encryption - Standard AlgorithmB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingE1056.m01: Mouse EventsF0002.001: Application HookF0002.002: PollingE1113.m01: WinAPICollectionE1020: Automated ExfiltrationE1020.m01:Exfiltrate via File Hosting ServiceExfiltrationE1105: Ingress Tool TransferB0026: Malicious Network DriverB0020: Send EmailB0021: Send Poisoned Text MessageE1195: Supply Chain CompromiseE1195.m01: Abuse Enterprise CertificatesE1195.m02: Exploit Private APIsLateral MovementF0015: Hijack Execution FlowF0016: Install CertificateF0010: Kernel Modules and ExtensionsF0011: Modify Existing ServiceE1055: Process InjectionF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0010.001: Device DriverE1055.004: Asynchronous Procedure CallE1055.001: Dynamic-link Library InjectionE1055.011: Extra Window Memory InjectionE1055.m01:Hook Injection via SetWindowsHooksExE1055.m02: Injectionand Persistence via Registry ModificationE1055.m03: Injection using ShimsE1055.m05: Injection via Windows FibersE1055.m04: Patch Process Command LineE1055.002: Portable Executable InjectionE1055.012: Process HollowingE1055.003: Thread Execution HijackingPrivilege EscalationB0028: CryptocurrencyF0015: Hijack Execution FlowE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingE1056.m01: Mouse EventsF0002.001: Application HookF0002.002: PollingE1113.m01: WinAPICredential AccessB0036: Capture EvasionB0025: Conditional ExecutionB0001: Debugger DetectionB0002: Debugger EvasionB0003: Dynamic Analysis EvasionB0004: Emulator DetectionB0005: Emulator EvasionB0008: Executable Code VirtualizationF0015: Hijack Execution FlowB0006: Memory Dump EvasionB0007: Sandbox DetectionF0001: Software PackingB0009: Virtual Machine DetectionB0036.002: Encrypted PayloadsB0036.001: Memory-only PayloadB0036.003: Multiple Stages of LoadersB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckB0001.034: Anti-debugging InstructionsB0001.001: API Hook DetectionB0001.038: Check ProcessesB0001.002: CheckRemoteDebuggerPresentB0001.003: CloseHandleB0001.004: Debugger ArtifactsB0001.005: Hardware BreakpointsB0001.006: InterruptionB0001.008: IsDebuggerPresentB0001.009: Memory BreakpointsB0001.010: Memory Write WatchingB0001.011: Monitoring ThreadB0001.012: NtQueryInformationProcessB0001.013: NtQueryObjectB0001.014: NtSetInformationThreadB0001.015: NtYieldExecution/SwitchToThreadB0001.016: OutputDebugStringB0001.017:Page Exception Breakpoint DetectionB0001.018: Parent ProcessB0001.019: Process Environment BlockB0001.035:Process Environment Block BeingDebuggedB0001.037:Process Environment Block IsDebuggedB0001.036:Process Environment Block NtGlobalFlagB0001.020: Process JobsB0001.021: ProcessHeapB0001.022: RtlAdjustPrivilegeB0001.023: SeDebugPrivilegeB0001.024: SetHandleInformationB0001.025: Software BreakpointsB0001.026: Stack CanaryB0001.027: TIB AwareB0001.028: Timing/Delay CheckB0001.032: Timing/Delay Check GetTickCountB0001.033:Timing/Delay Check QueryPerformanceCounterB0001.029: TLS CallbacksB0001.030: UnhandledExceptionFilterB0001.031: WudfIsAnyDebuggerPresentB0002.001: Block InterruptsB0002.002: Break Point ClearingB0002.003: Byte StealingB0002.004: Change SizeOfImageB0002.005: Code Integrity CheckB0002.006: Exception MisdirectionB0002.007: Get Base IndirectlyB0002.008: Guard PagesB0002.009: Hook InterruptB0002.010: Import ObfuscationB0002.011: InliningB0002.012: Loop EscapesB0002.013: Malloc UseB0002.014: Modify PE HeaderB0002.015: NanomitesB0002.016: Obfuscate Library UseB0002.017: Parallel ThreadsB0002.018: Pipeline MisdirectionB0002.019: Pre-DebugB0002.020: Relocate API CodeB0002.021: Return ObfuscationB0002.022: RtlAdjustPrivilegeB0002.023: Section MisalignmentB0002.024: Self-DebuggingB0002.025: Self-UnmappingB0002.026: Static LinkingB0002.027: Stolen API CodeB0002.028: TamperingB0002.029: Thread TimeoutB0002.030: Use InterruptsB0003.001: Alternative ntdll.dllB0003.012: API HammeringB0003.011: Code Integrity CheckB0003.002: Data FloodB0003.003: Delayed ExecutionB0003.004: Demo ModeB0003.005: Drop CodeB0003.006: Encode FileB0003.007: Hook File SystemB0003.008: Hook InterruptB0003.009: IllusionB0003.010: RestartB0004.003:Check Emulator-related Registry KeysB0004.001:Check for Emulator-related FilesB0004.002: Check for WINE VersionB0004.004: Failed Network ConnectionsB0005.001: Different Opcode SetsB0005.004: Extra Loops/Time LocksB0005.002:Undocumented/Unimplemented OpcodesB0005.003: Unusual/Undocumented API CallsB0008.001: Multiple VMsF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingB0006.001: Code Encryption in MemoryB0006.002: Erase the PE headerB0006.008: Feed MisinformationB0006.009: Flow Opcode ObstructionB0006.006: Guard PagesB0006.003: Hide virtual memoryB0006.010: Hook memory mapping APIsB0006.007: On-the-Fly APIsB0006.011: Patch MmGetPhysicalMemoryRangesB0006.004: SizeOfImageB0006.005: TamperingB0007.001: Check Clipboard DataB0007.002: Check FilesB0007.003: Human User CheckB0007.004: Injected DLL TestingB0007.005: Product Key/ID TestingB0007.006: Screen Resolution TestingB0007.007: Self CheckB0007.010: Test API RoutinesB0007.008: Timing/Date CheckB0007.009: Timing/Uptime CheckF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003: Standard Compression of CodeF0001.004: Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectB0009.001:Check File and Directory ArtifactsB0009.002: Check Memory ArtifactsB0009.003: Check Named System ObjectsB0009.004: Check ProcessesB0009.005: Check Registry KeysB0009.006: Check Running ServicesB0009.007: Check SoftwareB0009.008: Check Virtual DevicesB0009.009: Check WindowsB0009.022: Check Windows - Title barsB0009.021: Check Windows - Unique windowsB0009.020: Check Windows - Window sizeB0009.010: Guest Process TestingB0009.011: HTML5 Performance Object CheckB0009.012: Human User CheckB0009.029: Instruction TestingB0009.034: Instruction Testing - CPUIDB0009.035: Instruction Testing - INB0009.036: Instruction Testing - RDTSCB0009.031:Instruction Testing - SGDT/SLDT (no pill)B0009.030:Instruction Testing - SIDT (red pill)B0009.032: Instruction Testing - SMSWB0009.033: Instruction Testing - STRB0009.037: Instruction Testing - VMCPUIDB0009.038: Instruction Testing - VPCEXTB0009.013: Modern Specs CheckB0009.015: Modern Specs Check - Drive sizeB0009.019:Modern Specs Check - Keyboard layoutB0009.017: Modern Specs Check - PrinterB0009.018:Modern Specs Check - Processor countB0009.014:Modern Specs Check - Total physical memoryB0009.016: Modern Specs Check - USB driveB0009.023: Unique Hardware/Firmware CheckB0009.024:Unique Hardware/Firmware Check - BIOSB0009.027: UniqueHardware/Firmware Check - CPU LocationB0009.026:Unique Hardware/Firmware Check - CPU NameB0009.025: Unique Hardware/FirmwareCheck - I/O Communication PortB0009.028: UniqueHardware/Firmware Check - MAC AddressAnti-Behavioral AnalysisB0030: C2 CommunicationB0031: Domain Name GenerationE1105: Ingress Tool TransferB0030.011: AuthenticateB0030.005: Check for PayloadB0030.012: Directory ListingB0030.013: Execute FileB0030.014: Execute Shell CommandB0030.015: File searchB0030.004:Implant to Controller File TransferB0030.002: Receive DataB0030.008: Request CommandB0030.010: Request Email Address ListB0030.009: Request Email TemplateB0030.001: Send DataB0030.007: Send HeartbeatB0030.006: Send System InformationB0030.003: Server to Client File TransferB0030.016: Start Interactive ShellCommand and ControlF0013: BootkitF0009: Component FirmwareF0005: Hidden Files and DirectoriesE1564: Hide ArtifactsF0015: Hijack Execution FlowE1105: Ingress Tool TransferB0047:Install Insecure or Malicious ConfigurationF0010: Kernel Modules and ExtensionsB0026: Malicious Network DriverF0011: Modify Existing ServiceE1112: Modify RegistryF0012: Registry Run Keys / Startup FolderB0022: Remote AccessB0035: Shutdown EventF0009.001: Router FirmwareF0005.003: AttributeF0005.001: ExtensionF0005.002: LocationF0005.004: TimestampE1564.m02:Direct Kernel Object ManipulationE1564.m05: Hidden Kernel ModulesE1564.m03: Hidden ProcessesE1564.m04: Hidden ServicesE1564.m01: Hidden Userspace LibrariesF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0010.001: Device DriverB0022.001: Reverse ShellPersistenceB0027: Alternative Installation LocationF0013: BootkitB0037: Bypass Data Execution PreventionF0009: Component FirmwareB0025: Conditional ExecutionB0040: Covert LocationF0004: Disable or Evade Security ToolsF0005: Hidden Files and DirectoriesE1564: Hide ArtifactsF0015: Hijack Execution FlowF0006: Indicator BlockingB0047:Install Insecure or Malicious ConfigurationE1112: Modify RegistryE1027: Obfuscated Files or InformationB0029: Polymorphic CodeE1055: Process InjectionE1014: RootkitF0007: Self DeletionF0001: Software PackingB0027.001: Fileless MalwareB0027.002: Registry InstallB0037.001: ROP ChainsF0009.001: Router FirmwareB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckB0040.001: Hide Data in RegistryB0040.002: SteganographyF0004.004: AMSI BypassF0004.007: Bypass Windows File ProtectionF0004.009: Disable Code IntegrityF0004.001: Disable Kernel Patch ProtectionF0004.002:Disable System File Overwrite ProtectionF0004.006: Force Lazy WritingF0004.008: Heavens GateF0004.005: Modify PolicyF0004.003: Unhook APIsF0005.003: AttributeF0005.001: ExtensionF0005.002: LocationF0005.004: TimestampE1564.m02:Direct Kernel Object ManipulationE1564.m05: Hidden Kernel ModulesE1564.m03: Hidden ProcessesE1564.m04: Hidden ServicesE1564.m01: Hidden Userspace LibrariesF0015.006: Abuse Windows Function CallsF0015.001: Export Address Table HookingF0015.003: Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0006.001: Remove SMS Warning MessagesE1027.m01: EncodingE1027.m03: Encoding - Custom AlgorithmE1027.m02: Encoding - Standard AlgorithmE1027.m04: EncryptionE1027.m08: Encryption - Custom AlgorithmE1027.m05: Encryption - Standard AlgorithmE1027.m06: Encryption of CodeE1027.m07: Encryption of DataB0029.002: Call IndirectionsB0029.003: Code ReorderingB0029.001: Packer StubE1055.004: Asynchronous Procedure CallE1055.001: Dynamic-link Library InjectionE1055.011: Extra Window Memory InjectionE1055.m01:Hook Injection via SetWindowsHooksExE1055.m02: Injectionand Persistence via Registry ModificationE1055.m03: Injection using ShimsE1055.m05: Injection via Windows FibersE1055.m04: Patch Process Command LineE1055.002: Portable Executable InjectionE1055.012: Process HollowingE1055.003: Thread Execution HijackingE1014.m12: Application RootkitE1014.m13: BootloaderE1014.m14: Hardware/Firmware RootkitE1014.m15: Hypervisor/Virtualized RootkitE1014.m16: Kernel Mode RootkitE1014.m17: Memory RootkitF0007.001: COMSPEC Environment VariableF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003: Standard Compression of CodeF0001.004: Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectDefense EvasionC0033: ConsoleC0034: Environment VariableC0036: RegistryC0035: WallpaperC0034.001: Set VariableC0036.004: Create Registry KeyC0036.002: Delete Registry KeyC0036.007: Delete Registry ValueC0036.003: Open Registry KeyC0036.005: Query Registry KeyC0036.006: Query Registry ValueC0036.001: Set Registry ValueOperating System Micro-objectiveC0040: Allocate Thread Local StorageC0043: Check MutexC0042: Create MutexC0017: Create ProcessC0038: Create ThreadC0064: Enumerate ThreadsC0065: Open ProcessC0066: Open ThreadC0054: Resume ThreadC0072: Set Thread ContextC0041: Set Thread Local Storage ValueC0055: Suspend ThreadC0018: Terminate ProcessC0039: Terminate ThreadC0070: Unmap Section ViewC0071: Write Process MemoryC0017.001: Create Process via ShellcodeC0017.002: Create Process via WMIC0017.003: Create Suspended ProcessProcess Micro-objectiveC0037: Install DriverC0023: Load DriverC0057: Simulate HardwareC0037.001: MinifilterC0023.001: MinifilterC0057.001: Ctrl-Alt-DelC0057.002: Mouse ClickHardware Micro-objectiveC0068: Crypto AlgorithmC0069: Crypto ConstantC0059: Crypto LibraryC0029: Cryptographic HashC0031: Decrypt DataC0027: Encrypt DataC0028: Encryption KeyC0021: Generate Pseudo-random SequenceC0061: Hashed Message Authentication CodeC0059.001: API CallC0059.002: Static Public LibraryC0029.001: MD5C0029.002: SHA1C0029.004: SHA224C0029.003: SHA256C0029.006: SnefruC0029.005: TigerC0031.005: 3DESC0031.001: AESC0031.002: Block CipherC0031.003: BlowfishC0031.004: CamelliaC0031.006: HC-128C0031.007: HC-256C0031.008: RC4C0031.009: RC6C0031.010: RSAC0031.011: SkipjackC0031.012: SosemanukC0031.013: Stream CipherC0031.014: TwofishC0027.004: 3DESC0027.001: AESC0027.014: Block CipherC0027.002: BlowfishC0027.003: CamelliaC0027.006: HC-128C0027.007: HC-256C0027.009: RC4C0027.010: RC6C0027.011: RSAC0027.013: SkipjackC0027.008: SosemanukC0027.012: Stream CipherC0027.005: TwofishC0028.001: Import Public KeyC0028.002: RC4 KSAC0021.001: GetTickCountC0021.002: randC0021.004: RC4 PRGAC0021.003: Use APICryptography Micro-objectiveC0019: Check StringC0032: ChecksumC0024: Compress DataC0060: Compression LibraryC0053: Decode DataC0025: Decompress DataC0026: Encode DataC0058: ModuloC0030: Non-Cryptographic HashC0020: Use ConstantC0032.005: AdlerC0032.003: BSDC0032.001: CRC32C0032.002: LuhnC0024.002: IEncodingFilterFactoryC0024.001: QuickLZC0053.001: Base64C0053.002: XORC0025.003: aPLibC0025.002: IEncodingFilterFactoryC0025.001: QuickLZC0026.001: Base64C0026.002: XORC0030.004: dhashC0030.006: djb2C0030.003: Fast-HashC0030.005: FNVC0030.001: MurmurHashC0030.002: pHashData Micro-objectiveC0015: Alter File ExtensionC0045: Copy FileC0046: Create DirectoryC0016: Create FileC0048: Delete DirectoryC0047: Delete FileC0049: Get File AttributesC0063: Move FileC0051: Read FileC0056: Read Virtual DiskC0050: Set File AttributesC0052: Writes FileC0015.001: Append ExtensionC0016.001: Create Office DocumentC0016.002: Create Ransomware FileFile System Micro-objectiveC0011: DNS CommunicationC0004: FTP CommunicationC0002: HTTP CommunicationC0014: ICMP CommunicationC0003: Interprocess CommunicationC0012: SMTP CommunicationC0001: Socket CommunicationC0005: WinINetC0011.003: DDNS Domain ConnectC0011.001: ResolveC0011.005: Resolve Free Hosting DomainC0011.004: Resolve TLDC0011.002: Server ConnectC0004.001: Send FileC0004.002: WinINetC0002.002: ClientC0002.009: Connect to ServerC0002.012: Create RequestC0002.006: Download URLC0002.011: Extract BodyC0002.017: Get ResponseC0002.010: IWebBrowserC0002.004: Open URLC0002.014: Read HeaderC0002.015: Receive RequestC0002.005: Send DataC0002.003: Send RequestC0002.016: Send ResponseC0002.001: ServerC0002.013: Set HeaderC0002.018: Start ServerC0002.008: WinHTTPC0002.007: WinINetC0014.002: Echo RequestC0014.001: Generate TrafficC0003.002: Connect PipeC0003.001: Create PipeC0003.003: Read PipeC0003.004: Write PipeC0012.002: RequestC0012.001: Server ConnectC0001.004: Connect SocketC0001.003: Create SocketC0001.011: Create TCP SocketC0001.010: Create UDP SocketC0001.012: Get Socket StatusC0001.009: Initialize Winsock LibraryC0001.006: Receive DataC0001.016: Receive TCP DataC0001.017: Receive UDP DataC0001.007: Send DataC0001.014: Send TCP DataC0001.015: Send UDP DataC0001.001: Set Socket ConfigC0001.005: Start TCP ServerC0001.008: TCP ClientC0001.002: TCP ServerC0001.013: UDP ClientC0005.001: InternetConnectC0005.002: InternetOpenC0005.003: InternetOpenURLC0005.004: InternetReadFileC0005.005: InternetWriteFileCommunication Micro-objectiveC0007: Allocate MemoryC0008: Change Memory ProtectionC0044: Free MemoryC0006: Heap SprayC0010: Overflow BufferC0009: Stack PivotC0008.002: Executable HeapC0008.001: Executable StackMemory Micro-objectiveB0010: Call Graph Generation EvasionB0045: Data Flow Analysis EvasionB0012: Disassembler EvasionB0032: Executable Code ObfuscationB0034: Executable Code OptimizationB0008: Executable Code VirtualizationE1027: Obfuscated Files or InformationF0001: Software PackingB0010.002: InvokeNTDLL System Calls via Encoded TableB0010.003: Shadow Process CommunicationB0010.001: Two-layer Function ReturnB0045.003: Arbitrary Memory CorruptionB0045.001: Control DependenceB0045.002: Implicit FlowsB0012.001: Argument ObfuscationB0012.002: Conditional MisdirectionB0012.006:Desynchronizing Opaque PredicatesB0012.007: Fake FunctionB0012.003: Value Dependent JumpsB0012.005: VBA StompingB0032.001: API HashingB0032.020: Argument ObfuscationB0032.002: Code InsertionB0032.008: Data Value ObfuscationB0032.003: Dead Code InsertionB0032.009: Entry Point ObfuscationB0032.004: Fake Code InsertionB0032.010: Guard PagesB0032.011:Import Address Table ObfuscationB0032.012: Import CompressionB0032.013: Instruction OverlapB0032.014: Interleaving CodeB0032.005: Jump InsertionB0032.007: Junk Code InsertionB0032.019: Opaque PredicateB0032.017: Stack StringsB0032.016:Structured Exception Handling (SEH)B0032.018: Symbol ObfuscationB0032.006: Thunk Code InsertionB0032.021: Variable RecompositionB0034.001: Jump/Call Absolute AddressB0034.002: MinificationB0008.001: Multiple VMsE1027.m01: EncodingE1027.m03: Encoding - Custom AlgorithmE1027.m02: Encoding - Standard AlgorithmE1027.m04: EncryptionE1027.m08: Encryption - Custom AlgorithmE1027.m05: Encryption - Standard AlgorithmE1027.m06: Encryption of CodeE1027.m07: Encryption of DataF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003: Standard Compression of CodeF0001.004: Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectAnti-Static AnalysisB0013: Analysis Tool DiscoveryE1010: Application Window DiscoveryB0046: Code DiscoveryE1083: File and Directory DiscoveryB0043: ReferencesB0038: Self DiscoveryB0014: SMTP Connection DiscoveryE1082: System Information DiscoveryB0013.008: Known File LocationB0013.009: Known WindowB0013.010: Known Windows Class NameB0013.001: Process detectionB0013.002: Process detection - DebuggersB0013.004:Process detection - PCAP UtilitiesB0013.006:Process detection - PE UtilitiesB0013.005:Process detection - Process UtilitiesB0013.007: Process detection - SandboxesB0013.003: Processdetection - SysInternals Suite ToolsE1010.m01: Window TextB0046.001: Enumerate PE SectionsB0046.002:Inspect Section Memory PermissionsB0046.003: Parse PE HeaderE1083.m02: Filter by ExtensionE1083.m01: Log FileB0038.002: Check Magic StringB0038.003: Check Section LengthB0038.001: Use HashquineE1082.m02: Enumerate Environment VariablesE1082.m01: Generate Windows ExceptionDiscoveryE1510: Clipboard ModificationF0009: Component FirmwareB0016: Compromise Data IntegrityE1485: Data DestructionE1486: Data Encrypted for ImpactB0033: Denial of ServiceB0017: Destroy HardwareF0014: Disk WipeE1190: Exploit KitE1203: Exploitation for Client ExecutionE1643: Generate Traffic from VictimB0019: Manipulate Network TrafficB0042: Modify HardwareB0022: Remote AccessB0018: Resource HijackingB0039: SpammingF0009.001: Router FirmwareE1485.m03: Delete Application/SoftwareE1485.m04: Delete Shadow CopiesE1485.m02: Empty Recycle BinE1486.001: Ransom NoteE1203.m03:File Transfer Protocol (FTP) ServersE1203.m02: Java-based Web ServersE1203.m04:Red Hat JBoss Enterprise ProductsE1203.m01: Remote Desktop ProtocolsE1203.m05: SysinternalsE1203.m06: Windows UtilitiesE1643.m02: Advertisement Replacement FraudE1643.m01: Click HijackingB0042.001: CDROMB0042.002: MouseB0042.003: PrinterB0022.001: Reverse ShellB0018.002: CryptojackingB0018.001: Password CrackingImpactE1059: Command and Scripting InterpreterB0025: Conditional ExecutionB0044: Execution DependencyE1203: Exploitation for Client ExecutionB0023: Install Additional ProgramB0024: Prevent Concurrent ExecutionB0011: Remote CommandsB0020: Send EmailB0021: Send Poisoned Text MessageE1569: System ServicesE1204: User ExecutionB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckE1203.m03:File Transfer Protocol (FTP) ServersE1203.m02: Java-based Web ServersE1203.m04:Red Hat JBoss Enterprise ProductsE1203.m01: Remote Desktop ProtocolsE1203.m05: SysinternalsE1203.m06: Windows UtilitiesB0011.001: Delete FileB0011.002: Download FileB0011.003: ExecuteB0011.004: ShutdownB0011.005: SleepB0011.006: UninstallB0011.007: Upload FileE1569.m01: MSDTCExecution \ No newline at end of file +B0036: Capture EvasionB0025: Conditional ExecutionB0001: Debugger DetectionB0002: Debugger EvasionB0003: Dynamic Analysis EvasionB0004: Emulator DetectionB0005: Emulator EvasionB0008: Executable Code VirtualizationF0015: Hijack Execution FlowB0006: Memory Dump EvasionB0007: Sandbox DetectionF0001: Software PackingB0009: Virtual Machine DetectionB0036.002: Encrypted PayloadsB0036.001: Memory-only PayloadB0036.003: Multiple Stages of LoadersB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckB0001.034: Anti-debugging InstructionsB0001.001: API Hook DetectionB0001.038: Check ProcessesB0001.002: CheckRemoteDebuggerPresentB0001.003: CloseHandleB0001.004: Debugger ArtifactsB0001.005: Hardware BreakpointsB0001.006: InterruptionB0001.008: IsDebuggerPresentB0001.009: Memory BreakpointsB0001.010: Memory Write WatchingB0001.011: Monitoring ThreadB0001.012: NtQueryInformationProcessB0001.013: NtQueryObjectB0001.014: NtSetInformationThreadB0001.015:NtYieldExecution/SwitchToThreadB0001.016: OutputDebugStringB0001.017:Page Exception Breakpoint DetectionB0001.018: Parent ProcessB0001.019: Process Environment BlockB0001.035: ProcessEnvironment Block BeingDebuggedB0001.037:Process Environment Block IsDebuggedB0001.036:Process Environment Block NtGlobalFlagB0001.020: Process JobsB0001.021: ProcessHeapB0001.022: RtlAdjustPrivilegeB0001.023: SeDebugPrivilegeB0001.024: SetHandleInformationB0001.025: Software BreakpointsB0001.026: Stack CanaryB0001.027: TIB AwareB0001.028: Timing/Delay CheckB0001.032:Timing/Delay Check GetTickCountB0001.033: Timing/DelayCheck QueryPerformanceCounterB0001.029: TLS CallbacksB0001.030: UnhandledExceptionFilterB0001.031: WudfIsAnyDebuggerPresentB0002.001: Block InterruptsB0002.002: Break Point ClearingB0002.003: Byte StealingB0002.004: Change SizeOfImageB0002.005: Code Integrity CheckB0002.006: Exception MisdirectionB0002.007: Get Base IndirectlyB0002.008: Guard PagesB0002.009: Hook InterruptB0002.010: Import ObfuscationB0002.011: InliningB0002.012: Loop EscapesB0002.013: Malloc UseB0002.014: Modify PE HeaderB0002.015: NanomitesB0002.016: Obfuscate Library UseB0002.017: Parallel ThreadsB0002.018: Pipeline MisdirectionB0002.019: Pre-DebugB0002.020: Relocate API CodeB0002.021: Return ObfuscationB0002.022: RtlAdjustPrivilegeB0002.023: Section MisalignmentB0002.024: Self-DebuggingB0002.025: Self-UnmappingB0002.026: Static LinkingB0002.027: Stolen API CodeB0002.028: TamperingB0002.029: Thread TimeoutB0002.030: Use InterruptsB0003.001: Alternative ntdll.dllB0003.012: API HammeringB0003.011: Code Integrity CheckB0003.002: Data FloodB0003.003: Delayed ExecutionB0003.004: Demo ModeB0003.005: Drop CodeB0003.006: Encode FileB0003.007: Hook File SystemB0003.008: Hook InterruptB0003.009: IllusionB0003.010: RestartB0004.003:Check Emulator-related Registry KeysB0004.001:Check for Emulator-related FilesB0004.002: Check for WINE VersionB0004.004: Failed Network ConnectionsB0005.001: Different Opcode SetsB0005.004: Extra Loops/Time LocksB0005.002:Undocumented/Unimplemented OpcodesB0005.003:Unusual/Undocumented API CallsB0008.001: Multiple VMsF0015.006:Abuse Windows Function CallsF0015.001:Export Address Table HookingF0015.003:Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingB0006.001: Code Encryption in MemoryB0006.002: Erase the PE headerB0006.008: Feed MisinformationB0006.009: Flow Opcode ObstructionB0006.006: Guard PagesB0006.003: Hide virtual memoryB0006.010: Hook memory mapping APIsB0006.007: On-the-Fly APIsB0006.011:Patch MmGetPhysicalMemoryRangesB0006.004: SizeOfImageB0006.005: TamperingB0007.001: Check Clipboard DataB0007.002: Check FilesB0007.003: Human User CheckB0007.004: Injected DLL TestingB0007.005: Product Key/ID TestingB0007.006: Screen Resolution TestingB0007.007: Self CheckB0007.010: Test API RoutinesB0007.008: Timing/Date CheckB0007.009: Timing/Uptime CheckF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003:Standard Compression of CodeF0001.004:Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectB0009.001:Check File and Directory ArtifactsB0009.002: Check Memory ArtifactsB0009.003: Check Named System ObjectsB0009.004: Check ProcessesB0009.005: Check Registry KeysB0009.006: Check Running ServicesB0009.007: Check SoftwareB0009.008: Check Virtual DevicesB0009.009: Check WindowsB0009.022: Check Windows - Title barsB0009.021:Check Windows - Unique windowsB0009.020: Check Windows - Window sizeB0009.010: Guest Process TestingB0009.011:HTML5 Performance Object CheckB0009.012: Human User CheckB0009.029: Instruction TestingB0009.034: Instruction Testing - CPUIDB0009.035: Instruction Testing - INB0009.036: Instruction Testing - RDTSCB0009.031: InstructionTesting - SGDT/SLDT (no pill)B0009.030:Instruction Testing - SIDT (red pill)B0009.032: Instruction Testing - SMSWB0009.033: Instruction Testing - STRB0009.037:Instruction Testing - VMCPUIDB0009.038:Instruction Testing - VPCEXTB0009.013: Modern Specs CheckB0009.015:Modern Specs Check - Drive sizeB0009.019:Modern Specs Check - Keyboard layoutB0009.017:Modern Specs Check - PrinterB0009.018:Modern Specs Check - Processor countB0009.014: ModernSpecs Check - Total physical memoryB0009.016:Modern Specs Check - USB driveB0009.023:Unique Hardware/Firmware CheckB0009.024:Unique Hardware/Firmware Check - BIOSB0009.027: UniqueHardware/Firmware Check - CPU LocationB0009.026: UniqueHardware/Firmware Check - CPU NameB0009.025: Unique Hardware/FirmwareCheck - I/O Communication PortB0009.028: UniqueHardware/Firmware Check - MAC AddressAnti-Behavioral AnalysisB0010: Call Graph Generation EvasionB0045: Data Flow Analysis EvasionB0012: Disassembler EvasionB0032: Executable Code ObfuscationB0034: Executable Code OptimizationB0008: Executable Code VirtualizationE1027: Obfuscated Files or InformationF0001: Software PackingB0010.002: InvokeNTDLL System Calls via Encoded TableB0010.003:Shadow Process CommunicationB0010.001: Two-layer Function ReturnB0045.003: Arbitrary Memory CorruptionB0045.001: Control DependenceB0045.002: Implicit FlowsB0012.001: Argument ObfuscationB0012.002: Conditional MisdirectionB0012.006:Desynchronizing Opaque PredicatesB0012.007: Fake FunctionB0012.003: Value Dependent JumpsB0012.005: VBA StompingB0032.001: API HashingB0032.020: Argument ObfuscationB0032.002: Code InsertionB0032.008: Data Value ObfuscationB0032.003: Dead Code InsertionB0032.009: Entry Point ObfuscationB0032.004: Fake Code InsertionB0032.010: Guard PagesB0032.011:Import Address Table ObfuscationB0032.012: Import CompressionB0032.013: Instruction OverlapB0032.014: Interleaving CodeB0032.005: Jump InsertionB0032.007: Junk Code InsertionB0032.019: Opaque PredicateB0032.017: Stack StringsB0032.016:Structured Exception Handling (SEH)B0032.018: Symbol ObfuscationB0032.006: Thunk Code InsertionB0032.021: Variable RecompositionB0034.001: Jump/Call Absolute AddressB0034.002: MinificationB0008.001: Multiple VMsE1027.m01: EncodingE1027.m03: Encoding - Custom AlgorithmE1027.m02:Encoding - Standard AlgorithmE1027.m04: EncryptionE1027.m08:Encryption - Custom AlgorithmE1027.m05:Encryption - Standard AlgorithmE1027.m06: Encryption of CodeE1027.m07: Encryption of DataF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003:Standard Compression of CodeF0001.004:Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectAnti-Static AnalysisE1560: Archive Collected DataB0028: CryptocurrencyF0015: Hijack Execution FlowE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureE1560.m01: EncodingE1560.m04: Encoding - Custom AlgorithmE1560.m03:Encoding - Standard AlgorithmE1560.m02: EncryptionE1560.m06:Encryption - Custom AlgorithmE1560.m05:Encryption - Standard AlgorithmB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0015.006:Abuse Windows Function CallsF0015.001:Export Address Table HookingF0015.003:Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingE1056.m01: Mouse EventsF0002.001: Application HookF0002.002: PollingE1113.m01: WinAPICollectionB0030: C2 CommunicationB0031: Domain Name GenerationE1105: Ingress Tool TransferB0030.011: AuthenticateB0030.005: Check for PayloadB0030.012: Directory ListingB0030.013: Execute FileB0030.014: Execute Shell CommandB0030.015: File searchB0030.004:Implant to Controller File TransferB0030.002: Receive DataB0030.008: Request CommandB0030.010: Request Email Address ListB0030.009: Request Email TemplateB0030.001: Send DataB0030.007: Send HeartbeatB0030.006: Send System InformationB0030.003:Server to Client File TransferB0030.016: Start Interactive ShellCommand and ControlC0011: DNS CommunicationC0004: FTP CommunicationC0002: HTTP CommunicationC0014: ICMP CommunicationC0003: Interprocess CommunicationC0012: SMTP CommunicationC0001: Socket CommunicationC0005: WinINetC0011.003: DDNS Domain ConnectC0011.001: ResolveC0011.005: Resolve Free Hosting DomainC0011.004: Resolve TLDC0011.002: Server ConnectC0004.001: Send FileC0004.002: WinINetC0002.002: ClientC0002.009: Connect to ServerC0002.012: Create RequestC0002.006: Download URLC0002.011: Extract BodyC0002.017: Get ResponseC0002.010: IWebBrowserC0002.004: Open URLC0002.014: Read HeaderC0002.015: Receive RequestC0002.005: Send DataC0002.003: Send RequestC0002.016: Send ResponseC0002.001: ServerC0002.013: Set HeaderC0002.018: Start ServerC0002.008: WinHTTPC0002.007: WinINetC0014.002: Echo RequestC0014.001: Generate TrafficC0003.002: Connect PipeC0003.001: Create PipeC0003.003: Read PipeC0003.004: Write PipeC0012.002: RequestC0012.001: Server ConnectC0001.004: Connect SocketC0001.003: Create SocketC0001.011: Create TCP SocketC0001.010: Create UDP SocketC0001.012: Get Socket StatusC0001.009: Initialize Winsock LibraryC0001.006: Receive DataC0001.016: Receive TCP DataC0001.017: Receive UDP DataC0001.007: Send DataC0001.014: Send TCP DataC0001.015: Send UDP DataC0001.001: Set Socket ConfigC0001.005: Start TCP ServerC0001.008: TCP ClientC0001.002: TCP ServerC0001.013: UDP ClientC0005.001: InternetConnectC0005.002: InternetOpenC0005.003: InternetOpenURLC0005.004: InternetReadFileC0005.005: InternetWriteFileCommunication Micro-objectiveB0028: CryptocurrencyF0015: Hijack Execution FlowE1056: Input CaptureF0002: KeyloggingE1113: Screen CaptureB0028.001: BitcoinB0028.002: EthereumB0028.003: ZcashF0015.006:Abuse Windows Function CallsF0015.001:Export Address Table HookingF0015.003:Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingE1056.m01: Mouse EventsF0002.001: Application HookF0002.002: PollingE1113.m01: WinAPICredential AccessC0068: Crypto AlgorithmC0069: Crypto ConstantC0059: Crypto LibraryC0029: Cryptographic HashC0031: Decrypt DataC0027: Encrypt DataC0028: Encryption KeyC0021: Generate Pseudo-random SequenceC0061: Hashed Message Authentication CodeC0059.001: API CallC0059.002: Static Public LibraryC0029.001: MD5C0029.002: SHA1C0029.004: SHA224C0029.003: SHA256C0029.006: SnefruC0029.005: TigerC0031.005: 3DESC0031.001: AESC0031.002: Block CipherC0031.003: BlowfishC0031.004: CamelliaC0031.006: HC-128C0031.007: HC-256C0031.008: RC4C0031.009: RC6C0031.010: RSAC0031.011: SkipjackC0031.012: SosemanukC0031.013: Stream CipherC0031.014: TwofishC0027.004: 3DESC0027.001: AESC0027.014: Block CipherC0027.002: BlowfishC0027.003: CamelliaC0027.006: HC-128C0027.007: HC-256C0027.009: RC4C0027.010: RC6C0027.011: RSAC0027.013: SkipjackC0027.008: SosemanukC0027.012: Stream CipherC0027.005: TwofishC0028.001: Import Public KeyC0028.002: RC4 KSAC0021.001: GetTickCountC0021.002: randC0021.004: RC4 PRGAC0021.003: Use APICryptography Micro-objectiveC0019: Check StringC0032: ChecksumC0024: Compress DataC0060: Compression LibraryC0053: Decode DataC0025: Decompress DataC0026: Encode DataC0058: ModuloC0030: Non-Cryptographic HashC0020: Use ConstantC0032.005: AdlerC0032.003: BSDC0032.001: CRC32C0032.002: LuhnC0024.002: IEncodingFilterFactoryC0024.001: QuickLZC0053.001: Base64C0053.002: XORC0025.003: aPLibC0025.002: IEncodingFilterFactoryC0025.001: QuickLZC0026.001: Base64C0026.002: XORC0030.004: dhashC0030.006: djb2C0030.003: Fast-HashC0030.005: FNVC0030.001: MurmurHashC0030.002: pHashData Micro-objectiveB0027: Alternative Installation LocationF0013: BootkitB0037: Bypass Data Execution PreventionF0009: Component FirmwareB0025: Conditional ExecutionB0040: Covert LocationF0004: Disable or Evade Security ToolsF0005: Hidden Files and DirectoriesE1564: Hide ArtifactsF0015: Hijack Execution FlowF0006: Indicator BlockingB0047: InstallInsecure or Malicious ConfigurationE1112: Modify RegistryE1027: Obfuscated Files or InformationB0029: Polymorphic CodeE1055: Process InjectionE1014: RootkitF0007: Self DeletionF0001: Software PackingB0027.001: Fileless MalwareB0027.002: Registry InstallB0037.001: ROP ChainsF0009.001: Router FirmwareB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckB0040.001: Hide Data in RegistryB0040.002: SteganographyF0004.004: AMSI BypassF0004.007:Bypass Windows File ProtectionF0004.009: Disable Code IntegrityF0004.001:Disable Kernel Patch ProtectionF0004.002: DisableSystem File Overwrite ProtectionF0004.006: Force Lazy WritingF0004.008: Heavens GateF0004.005: Modify PolicyF0004.003: Unhook APIsF0005.003: AttributeF0005.001: ExtensionF0005.002: LocationF0005.004: TimestampE1564.m02:Direct Kernel Object ManipulationE1564.m05: Hidden Kernel ModulesE1564.m03: Hidden ProcessesE1564.m04: Hidden ServicesE1564.m01: Hidden Userspace LibrariesF0015.006:Abuse Windows Function CallsF0015.001:Export Address Table HookingF0015.003:Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0006.001: Remove SMS Warning MessagesE1027.m01: EncodingE1027.m03: Encoding - Custom AlgorithmE1027.m02:Encoding - Standard AlgorithmE1027.m04: EncryptionE1027.m08:Encryption - Custom AlgorithmE1027.m05:Encryption - Standard AlgorithmE1027.m06: Encryption of CodeE1027.m07: Encryption of DataB0029.002: Call IndirectionsB0029.003: Code ReorderingB0029.001: Packer StubE1055.004: Asynchronous Procedure CallE1055.001:Dynamic-link Library InjectionE1055.011:Extra Window Memory InjectionE1055.m01:Hook Injection via SetWindowsHooksExE1055.m02: Injection andPersistence via Registry ModificationE1055.m03: Injection using ShimsE1055.m05:Injection via Windows FibersE1055.m04: Patch Process Command LineE1055.002:Portable Executable InjectionE1055.012: Process HollowingE1055.003: Thread Execution HijackingE1014.m12: Application RootkitE1014.m13: BootloaderE1014.m14: Hardware/Firmware RootkitE1014.m15:Hypervisor/Virtualized RootkitE1014.m16: Kernel Mode RootkitE1014.m17: Memory RootkitF0007.001:COMSPEC Environment VariableF0001.012: ArmadilloF0001.013: ASPackF0001.009: ConfuserF0001.005: Custom CompressionF0001.006: Custom Compression of CodeF0001.007: Custom Compression of DataF0001.001: Nested PackingF0001.002: Standard CompressionF0001.003:Standard Compression of CodeF0001.004:Standard Compression of DataF0001.011: ThemidaF0001.008: UPXF0001.010: VMProtectDefense EvasionB0013: Analysis Tool DiscoveryE1010: Application Window DiscoveryB0046: Code DiscoveryE1083: File and Directory DiscoveryB0043: ReferencesB0038: Self DiscoveryB0014: SMTP Connection DiscoveryE1082: System Information DiscoveryB0013.008: Known File LocationB0013.009: Known WindowB0013.010: Known Windows Class NameB0013.001: Process detectionB0013.002:Process detection - DebuggersB0013.004:Process detection - PCAP UtilitiesB0013.006:Process detection - PE UtilitiesB0013.005:Process detection - Process UtilitiesB0013.007:Process detection - SandboxesB0013.003: Processdetection - SysInternals Suite ToolsE1010.m01: Window TextB0046.001: Enumerate PE SectionsB0046.002:Inspect Section Memory PermissionsB0046.003: Parse PE HeaderE1083.m02: Filter by ExtensionE1083.m01: Log FileB0038.002: Check Magic StringB0038.003: Check Section LengthB0038.001: Use HashquineE1082.m02:Enumerate Environment VariablesE1082.m01: Generate Windows ExceptionDiscoveryE1059: Command and Scripting InterpreterB0025: Conditional ExecutionB0044: Execution DependencyE1203: Exploitation for Client ExecutionB0023: Install Additional ProgramB0024: Prevent Concurrent ExecutionB0011: Remote CommandsB0020: Send EmailB0021: Send Poisoned Text MessageE1569: System ServicesE1204: User ExecutionB0025.008: Deposited KeysB0025.002: Environmental KeysB0025.003: GetVolumeInformationB0025.004: Host Fingerprint CheckB0025.007: Runs as ServiceB0025.005: Secure TriggersB0025.001: Suicide ExitB0025.006: Token CheckE1203.m03:File Transfer Protocol (FTP) ServersE1203.m02: Java-based Web ServersE1203.m04:Red Hat JBoss Enterprise ProductsE1203.m01: Remote Desktop ProtocolsE1203.m05: SysinternalsE1203.m06: Windows UtilitiesB0011.001: Delete FileB0011.002: Download FileB0011.003: ExecuteB0011.004: ShutdownB0011.005: SleepB0011.006: UninstallB0011.007: Upload FileE1569.m01: MSDTCExecutionE1020: Automated ExfiltrationE1020.m01:Exfiltrate via File Hosting ServiceExfiltrationC0015: Alter File ExtensionC0045: Copy FileC0046: Create DirectoryC0016: Create FileC0048: Delete DirectoryC0047: Delete FileC0049: Get File AttributesC0063: Move FileC0051: Read FileC0056: Read Virtual DiskC0050: Set File AttributesC0052: Writes FileC0015.001: Append ExtensionC0016.001: Create Office DocumentC0016.002: Create Ransomware FileFile System Micro-objectiveC0037: Install DriverC0023: Load DriverC0057: Simulate HardwareC0037.001: MinifilterC0023.001: MinifilterC0057.001: Ctrl-Alt-DelC0057.002: Mouse ClickHardware Micro-objectiveE1510: Clipboard ModificationF0009: Component FirmwareB0016: Compromise Data IntegrityE1485: Data DestructionE1486: Data Encrypted for ImpactB0033: Denial of ServiceB0017: Destroy HardwareF0014: Disk WipeE1190: Exploit KitE1203: Exploitation for Client ExecutionE1643: Generate Traffic from VictimB0019: Manipulate Network TrafficB0042: Modify HardwareB0022: Remote AccessB0018: Resource HijackingB0039: SpammingF0009.001: Router FirmwareE1485.m03: Delete Application/SoftwareE1485.m04: Delete Shadow CopiesE1485.m02: Empty Recycle BinE1486.001: Ransom NoteE1203.m03:File Transfer Protocol (FTP) ServersE1203.m02: Java-based Web ServersE1203.m04:Red Hat JBoss Enterprise ProductsE1203.m01: Remote Desktop ProtocolsE1203.m05: SysinternalsE1203.m06: Windows UtilitiesE1643.m02:Advertisement Replacement FraudE1643.m01: Click HijackingB0042.001: CDROMB0042.002: MouseB0042.003: PrinterB0022.001: Reverse ShellB0018.002: CryptojackingB0018.001: Password CrackingImpactE1105: Ingress Tool TransferB0026: Malicious Network DriverB0020: Send EmailB0021: Send Poisoned Text MessageE1195: Supply Chain CompromiseE1195.m01:Abuse Enterprise CertificatesE1195.m02: Exploit Private APIsLateral MovementC0007: Allocate MemoryC0008: Change Memory ProtectionC0044: Free MemoryC0006: Heap SprayC0010: Overflow BufferC0009: Stack PivotC0008.002: Executable HeapC0008.001: Executable StackMemory Micro-objectiveC0033: ConsoleC0034: Environment VariableC0036: RegistryC0035: WallpaperC0034.001: Set VariableC0036.004: Create Registry KeyC0036.002: Delete Registry KeyC0036.007: Delete Registry ValueC0036.003: Open Registry KeyC0036.005: Query Registry KeyC0036.006: Query Registry ValueC0036.001: Set Registry ValueOperating System Micro-objectiveF0013: BootkitF0009: Component FirmwareF0005: Hidden Files and DirectoriesE1564: Hide ArtifactsF0015: Hijack Execution FlowE1105: Ingress Tool TransferB0047: InstallInsecure or Malicious ConfigurationF0010: Kernel Modules and ExtensionsB0026: Malicious Network DriverF0011: Modify Existing ServiceE1112: Modify RegistryF0012: Registry Run Keys / Startup FolderB0022: Remote AccessB0035: Shutdown EventF0009.001: Router FirmwareF0005.003: AttributeF0005.001: ExtensionF0005.002: LocationF0005.004: TimestampE1564.m02:Direct Kernel Object ManipulationE1564.m05: Hidden Kernel ModulesE1564.m03: Hidden ProcessesE1564.m04: Hidden ServicesE1564.m01: Hidden Userspace LibrariesF0015.006:Abuse Windows Function CallsF0015.001:Export Address Table HookingF0015.003:Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0010.001: Device DriverB0022.001: Reverse ShellPersistenceF0015: Hijack Execution FlowF0016: Install CertificateF0010: Kernel Modules and ExtensionsF0011: Modify Existing ServiceE1055: Process InjectionF0015.006:Abuse Windows Function CallsF0015.001:Export Address Table HookingF0015.003:Import Address Table HookingF0015.002: Inline PatchingF0015.007: Procedure HookingF0015.004: ShadowSystem Service Dispatch Table HookingF0015.005:System Service Dispatch Table HookingF0010.001: Device DriverE1055.004: Asynchronous Procedure CallE1055.001:Dynamic-link Library InjectionE1055.011:Extra Window Memory InjectionE1055.m01:Hook Injection via SetWindowsHooksExE1055.m02: Injection andPersistence via Registry ModificationE1055.m03: Injection using ShimsE1055.m05:Injection via Windows FibersE1055.m04: Patch Process Command LineE1055.002:Portable Executable InjectionE1055.012: Process HollowingE1055.003: Thread Execution HijackingPrivilege EscalationC0040: Allocate Thread Local StorageC0043: Check MutexC0042: Create MutexC0017: Create ProcessC0038: Create ThreadC0064: Enumerate ThreadsC0065: Open ProcessC0066: Open ThreadC0054: Resume ThreadC0072: Set Thread ContextC0041: Set Thread Local Storage ValueC0055: Suspend ThreadC0018: Terminate ProcessC0039: Terminate ThreadC0070: Unmap Section ViewC0071: Write Process MemoryC0017.001:Create Process via ShellcodeC0017.002: Create Process via WMIC0017.003: Create Suspended ProcessProcess Micro-objective \ No newline at end of file diff --git a/yfaq/mbc_matrix_without_ids.svg b/yfaq/mbc_matrix_without_ids.svg index 1bad610..9d6f8b9 100644 --- a/yfaq/mbc_matrix_without_ids.svg +++ b/yfaq/mbc_matrix_without_ids.svg @@ -1,2 +1,2 @@ -Archive Collected DataCryptocurrencyHijack Execution FlowInput CaptureKeyloggingScreen CaptureEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmBitcoinEthereumZcashAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingMouse EventsApplication HookPollingWinAPICollectionAutomated ExfiltrationExfiltratevia File Hosting ServiceExfiltrationIngress Tool TransferMalicious Network DriverSend EmailSend Poisoned Text MessageSupply Chain CompromiseAbuse Enterprise CertificatesExploit Private APIsLateral MovementHijack Execution FlowInstall CertificateKernel Modules and ExtensionsModify Existing ServiceProcess InjectionAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingDevice DriverAsynchronous Procedure CallDynamic-link Library InjectionExtra Window Memory InjectionHookInjection via SetWindowsHooksExInjection and Persistencevia Registry ModificationInjection using ShimsInjection via Windows FibersPatch Process Command LinePortable Executable InjectionProcess HollowingThread Execution HijackingPrivilege EscalationCryptocurrencyHijack Execution FlowInput CaptureKeyloggingScreen CaptureBitcoinEthereumZcashAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingMouse EventsApplication HookPollingWinAPICredential AccessCapture EvasionConditional ExecutionDebugger DetectionDebugger EvasionDynamic Analysis EvasionEmulator DetectionEmulator EvasionExecutable Code VirtualizationHijack Execution FlowMemory Dump EvasionSandbox DetectionSoftware PackingVirtual Machine DetectionEncrypted PayloadsMemory-only PayloadMultiple Stages of LoadersDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckAnti-debugging InstructionsAPI Hook DetectionCheck ProcessesCheckRemoteDebuggerPresentCloseHandleDebugger ArtifactsHardware BreakpointsInterruptionIsDebuggerPresentMemory BreakpointsMemory Write WatchingMonitoring ThreadNtQueryInformationProcessNtQueryObjectNtSetInformationThreadNtYieldExecution/SwitchToThreadOutputDebugStringPageException Breakpoint DetectionParent ProcessProcess Environment BlockProcessEnvironment Block BeingDebuggedProcessEnvironment Block IsDebuggedProcessEnvironment Block NtGlobalFlagProcess JobsProcessHeapRtlAdjustPrivilegeSeDebugPrivilegeSetHandleInformationSoftware BreakpointsStack CanaryTIB AwareTiming/Delay CheckTiming/Delay Check GetTickCountTiming/DelayCheck QueryPerformanceCounterTLS CallbacksUnhandledExceptionFilterWudfIsAnyDebuggerPresentBlock InterruptsBreak Point ClearingByte StealingChange SizeOfImageCode Integrity CheckException MisdirectionGet Base IndirectlyGuard PagesHook InterruptImport ObfuscationInliningLoop EscapesMalloc UseModify PE HeaderNanomitesObfuscate Library UseParallel ThreadsPipeline MisdirectionPre-DebugRelocate API CodeReturn ObfuscationRtlAdjustPrivilegeSection MisalignmentSelf-DebuggingSelf-UnmappingStatic LinkingStolen API CodeTamperingThread TimeoutUse InterruptsAlternative ntdll.dllAPI HammeringCode Integrity CheckData FloodDelayed ExecutionDemo ModeDrop CodeEncode FileHook File SystemHook InterruptIllusionRestartCheckEmulator-related Registry KeysCheck for Emulator-related FilesCheck for WINE VersionFailed Network ConnectionsDifferent Opcode SetsExtra Loops/Time LocksUndocumented/Unimplemented OpcodesUnusual/Undocumented API CallsMultiple VMsAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingCode Encryption in MemoryErase the PE headerFeed MisinformationFlow Opcode ObstructionGuard PagesHide virtual memoryHook memory mapping APIsOn-the-Fly APIsPatch MmGetPhysicalMemoryRangesSizeOfImageTamperingCheck Clipboard DataCheck FilesHuman User CheckInjected DLL TestingProduct Key/ID TestingScreen Resolution TestingSelf CheckTest API RoutinesTiming/Date CheckTiming/Uptime CheckArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectCheck File and Directory ArtifactsCheck Memory ArtifactsCheck Named System ObjectsCheck ProcessesCheck Registry KeysCheck Running ServicesCheck SoftwareCheck Virtual DevicesCheck WindowsCheck Windows - Title barsCheck Windows - Unique windowsCheck Windows - Window sizeGuest Process TestingHTML5 Performance Object CheckHuman User CheckInstruction TestingInstruction Testing - CPUIDInstruction Testing - INInstruction Testing - RDTSCInstructionTesting - SGDT/SLDT (no pill)InstructionTesting - SIDT (red pill)Instruction Testing - SMSWInstruction Testing - STRInstruction Testing - VMCPUIDInstruction Testing - VPCEXTModern Specs CheckModern Specs Check - Drive sizeModernSpecs Check - Keyboard layoutModern Specs Check - PrinterModernSpecs Check - Processor countModern SpecsCheck - Total physical memoryModern Specs Check - USB driveUnique Hardware/Firmware CheckUniqueHardware/Firmware Check - BIOSUnique Hardware/FirmwareCheck - CPU LocationUniqueHardware/Firmware Check - CPU NameUnique Hardware/FirmwareCheck - I/O Communication PortUnique Hardware/FirmwareCheck - MAC AddressAnti-Behavioral AnalysisC2 CommunicationDomain Name GenerationIngress Tool TransferAuthenticateCheck for PayloadDirectory ListingExecute FileExecute Shell CommandFile searchImplantto Controller File TransferReceive DataRequest CommandRequest Email Address ListRequest Email TemplateSend DataSend HeartbeatSend System InformationServer to Client File TransferStart Interactive ShellCommand and ControlBootkitComponent FirmwareHidden Files and DirectoriesHide ArtifactsHijack Execution FlowIngress Tool TransferInstallInsecure or Malicious ConfigurationKernel Modules and ExtensionsMalicious Network DriverModify Existing ServiceModify RegistryRegistry Run Keys / Startup FolderRemote AccessShutdown EventRouter FirmwareAttributeExtensionLocationTimestampDirect Kernel Object ManipulationHidden Kernel ModulesHidden ProcessesHidden ServicesHidden Userspace LibrariesAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingDevice DriverReverse ShellPersistenceAlternative Installation LocationBootkitBypass Data Execution PreventionComponent FirmwareConditional ExecutionCovert LocationDisable or Evade Security ToolsHidden Files and DirectoriesHide ArtifactsHijack Execution FlowIndicator BlockingInstallInsecure or Malicious ConfigurationModify RegistryObfuscated Files or InformationPolymorphic CodeProcess InjectionRootkitSelf DeletionSoftware PackingFileless MalwareRegistry InstallROP ChainsRouter FirmwareDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckHide Data in RegistrySteganographyAMSI BypassBypass Windows File ProtectionDisable Code IntegrityDisable Kernel Patch ProtectionDisableSystem File Overwrite ProtectionForce Lazy WritingHeavens GateModify PolicyUnhook APIsAttributeExtensionLocationTimestampDirect Kernel Object ManipulationHidden Kernel ModulesHidden ProcessesHidden ServicesHidden Userspace LibrariesAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadow SystemService Dispatch Table HookingSystemService Dispatch Table HookingRemove SMS Warning MessagesEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmEncryption of CodeEncryption of DataCall IndirectionsCode ReorderingPacker StubAsynchronous Procedure CallDynamic-link Library InjectionExtra Window Memory InjectionHookInjection via SetWindowsHooksExInjection and Persistencevia Registry ModificationInjection using ShimsInjection via Windows FibersPatch Process Command LinePortable Executable InjectionProcess HollowingThread Execution HijackingApplication RootkitBootloaderHardware/Firmware RootkitHypervisor/Virtualized RootkitKernel Mode RootkitMemory RootkitCOMSPEC Environment VariableArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectDefense EvasionConsoleEnvironment VariableRegistryWallpaperSet VariableCreate Registry KeyDelete Registry KeyDelete Registry ValueOpen Registry KeyQuery Registry KeyQuery Registry ValueSet Registry ValueOperating System Micro-objectiveAllocate Thread Local StorageCheck MutexCreate MutexCreate ProcessCreate ThreadEnumerate ThreadsOpen ProcessOpen ThreadResume ThreadSet Thread ContextSet Thread Local Storage ValueSuspend ThreadTerminate ProcessTerminate ThreadUnmap Section ViewWrite Process MemoryCreate Process via ShellcodeCreate Process via WMICreate Suspended ProcessProcess Micro-objectiveInstall DriverLoad DriverSimulate HardwareMinifilterMinifilterCtrl-Alt-DelMouse ClickHardware Micro-objectiveCrypto AlgorithmCrypto ConstantCrypto LibraryCryptographic HashDecrypt DataEncrypt DataEncryption KeyGenerate Pseudo-random SequenceHashed Message Authentication CodeAPI CallStatic Public LibraryMD5SHA1SHA224SHA256SnefruTiger3DESAESBlock CipherBlowfishCamelliaHC-128HC-256RC4RC6RSASkipjackSosemanukStream CipherTwofish3DESAESBlock CipherBlowfishCamelliaHC-128HC-256RC4RC6RSASkipjackSosemanukStream CipherTwofishImport Public KeyRC4 KSAGetTickCountrandRC4 PRGAUse APICryptography Micro-objectiveCheck StringChecksumCompress DataCompression LibraryDecode DataDecompress DataEncode DataModuloNon-Cryptographic HashUse ConstantAdlerBSDCRC32LuhnIEncodingFilterFactoryQuickLZBase64XORaPLibIEncodingFilterFactoryQuickLZBase64XORdhashdjb2Fast-HashFNVMurmurHashpHashData Micro-objectiveAlter File ExtensionCopy FileCreate DirectoryCreate FileDelete DirectoryDelete FileGet File AttributesMove FileRead FileRead Virtual DiskSet File AttributesWrites FileAppend ExtensionCreate Office DocumentCreate Ransomware FileFile System Micro-objectiveDNS CommunicationFTP CommunicationHTTP CommunicationICMP CommunicationInterprocess CommunicationSMTP CommunicationSocket CommunicationWinINetDDNS Domain ConnectResolveResolve Free Hosting DomainResolve TLDServer ConnectSend FileWinINetClientConnect to ServerCreate RequestDownload URLExtract BodyGet ResponseIWebBrowserOpen URLRead HeaderReceive RequestSend DataSend RequestSend ResponseServerSet HeaderStart ServerWinHTTPWinINetEcho RequestGenerate TrafficConnect PipeCreate PipeRead PipeWrite PipeRequestServer ConnectConnect SocketCreate SocketCreate TCP SocketCreate UDP SocketGet Socket StatusInitialize Winsock LibraryReceive DataReceive TCP DataReceive UDP DataSend DataSend TCP DataSend UDP DataSet Socket ConfigStart TCP ServerTCP ClientTCP ServerUDP ClientInternetConnectInternetOpenInternetOpenURLInternetReadFileInternetWriteFileCommunication Micro-objectiveAllocate MemoryChange Memory ProtectionFree MemoryHeap SprayOverflow BufferStack PivotExecutable HeapExecutable StackMemory Micro-objectiveCall Graph Generation EvasionData Flow Analysis EvasionDisassembler EvasionExecutable Code ObfuscationExecutable Code OptimizationExecutable Code VirtualizationObfuscated Files or InformationSoftware PackingInvoke NTDLLSystem Calls via Encoded TableShadow Process CommunicationTwo-layer Function ReturnArbitrary Memory CorruptionControl DependenceImplicit FlowsArgument ObfuscationConditional MisdirectionDesynchronizing Opaque PredicatesFake FunctionValue Dependent JumpsVBA StompingAPI HashingArgument ObfuscationCode InsertionData Value ObfuscationDead Code InsertionEntry Point ObfuscationFake Code InsertionGuard PagesImport Address Table ObfuscationImport CompressionInstruction OverlapInterleaving CodeJump InsertionJunk Code InsertionOpaque PredicateStack StringsStructuredException Handling (SEH)Symbol ObfuscationThunk Code InsertionVariable RecompositionJump/Call Absolute AddressMinificationMultiple VMsEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmEncryption of CodeEncryption of DataArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectAnti-Static AnalysisAnalysis Tool DiscoveryApplication Window DiscoveryCode DiscoveryFile and Directory DiscoveryReferencesSelf DiscoverySMTP Connection DiscoverySystem Information DiscoveryKnown File LocationKnown WindowKnown Windows Class NameProcess detectionProcess detection - DebuggersProcess detection - PCAP UtilitiesProcess detection - PE UtilitiesProcessdetection - Process UtilitiesProcess detection - SandboxesProcess detection- SysInternals Suite ToolsWindow TextEnumerate PE SectionsInspect Section Memory PermissionsParse PE HeaderFilter by ExtensionLog FileCheck Magic StringCheck Section LengthUse HashquineEnumerate Environment VariablesGenerate Windows ExceptionDiscoveryClipboard ModificationComponent FirmwareCompromise Data IntegrityData DestructionData Encrypted for ImpactDenial of ServiceDestroy HardwareDisk WipeExploit KitExploitation for Client ExecutionGenerate Traffic from VictimManipulate Network TrafficModify HardwareRemote AccessResource HijackingSpammingRouter FirmwareDelete Application/SoftwareDelete Shadow CopiesEmpty Recycle BinRansom NoteFileTransfer Protocol (FTP) ServersJava-based Web ServersRed Hat JBoss Enterprise ProductsRemote Desktop ProtocolsSysinternalsWindows UtilitiesAdvertisement Replacement FraudClick HijackingCDROMMousePrinterReverse ShellCryptojackingPassword CrackingImpactCommand and Scripting InterpreterConditional ExecutionExecution DependencyExploitation for Client ExecutionInstall Additional ProgramPrevent Concurrent ExecutionRemote CommandsSend EmailSend Poisoned Text MessageSystem ServicesUser ExecutionDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckFileTransfer Protocol (FTP) ServersJava-based Web ServersRed Hat JBoss Enterprise ProductsRemote Desktop ProtocolsSysinternalsWindows UtilitiesDelete FileDownload FileExecuteShutdownSleepUninstallUpload FileMSDTCExecution \ No newline at end of file +Capture EvasionConditional ExecutionDebugger DetectionDebugger EvasionDynamic Analysis EvasionEmulator DetectionEmulator EvasionExecutable Code VirtualizationHijack Execution FlowMemory Dump EvasionSandbox DetectionSoftware PackingVirtual Machine DetectionEncrypted PayloadsMemory-only PayloadMultiple Stages of LoadersDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckAnti-debugging InstructionsAPI Hook DetectionCheck ProcessesCheckRemoteDebuggerPresentCloseHandleDebugger ArtifactsHardware BreakpointsInterruptionIsDebuggerPresentMemory BreakpointsMemory Write WatchingMonitoring ThreadNtQueryInformationProcessNtQueryObjectNtSetInformationThreadNtYieldExecution/SwitchToThreadOutputDebugStringPage Exception Breakpoint DetectionParent ProcessProcess Environment BlockProcessEnvironment Block BeingDebuggedProcess Environment Block IsDebuggedProcess Environment Block NtGlobalFlagProcess JobsProcessHeapRtlAdjustPrivilegeSeDebugPrivilegeSetHandleInformationSoftware BreakpointsStack CanaryTIB AwareTiming/Delay CheckTiming/Delay Check GetTickCountTiming/DelayCheck QueryPerformanceCounterTLS CallbacksUnhandledExceptionFilterWudfIsAnyDebuggerPresentBlock InterruptsBreak Point ClearingByte StealingChange SizeOfImageCode Integrity CheckException MisdirectionGet Base IndirectlyGuard PagesHook InterruptImport ObfuscationInliningLoop EscapesMalloc UseModify PE HeaderNanomitesObfuscate Library UseParallel ThreadsPipeline MisdirectionPre-DebugRelocate API CodeReturn ObfuscationRtlAdjustPrivilegeSection MisalignmentSelf-DebuggingSelf-UnmappingStatic LinkingStolen API CodeTamperingThread TimeoutUse InterruptsAlternative ntdll.dllAPI HammeringCode Integrity CheckData FloodDelayed ExecutionDemo ModeDrop CodeEncode FileHook File SystemHook InterruptIllusionRestartCheck Emulator-related Registry KeysCheck for Emulator-related FilesCheck for WINE VersionFailed Network ConnectionsDifferent Opcode SetsExtra Loops/Time LocksUndocumented/Unimplemented OpcodesUnusual/Undocumented API CallsMultiple VMsAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadowSystem Service Dispatch Table HookingSystem Service Dispatch Table HookingCode Encryption in MemoryErase the PE headerFeed MisinformationFlow Opcode ObstructionGuard PagesHide virtual memoryHook memory mapping APIsOn-the-Fly APIsPatch MmGetPhysicalMemoryRangesSizeOfImageTamperingCheck Clipboard DataCheck FilesHuman User CheckInjected DLL TestingProduct Key/ID TestingScreen Resolution TestingSelf CheckTest API RoutinesTiming/Date CheckTiming/Uptime CheckArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectCheck File and Directory ArtifactsCheck Memory ArtifactsCheck Named System ObjectsCheck ProcessesCheck Registry KeysCheck Running ServicesCheck SoftwareCheck Virtual DevicesCheck WindowsCheck Windows - Title barsCheck Windows - Unique windowsCheck Windows - Window sizeGuest Process TestingHTML5 Performance Object CheckHuman User CheckInstruction TestingInstruction Testing - CPUIDInstruction Testing - INInstruction Testing - RDTSCInstructionTesting - SGDT/SLDT (no pill)Instruction Testing - SIDT (red pill)Instruction Testing - SMSWInstruction Testing - STRInstruction Testing - VMCPUIDInstruction Testing - VPCEXTModern Specs CheckModern Specs Check - Drive sizeModern Specs Check - Keyboard layoutModern Specs Check - PrinterModern Specs Check - Processor countModernSpecs Check - Total physical memoryModern Specs Check - USB driveUnique Hardware/Firmware CheckUnique Hardware/Firmware Check - BIOSUniqueHardware/Firmware Check - CPU LocationUniqueHardware/Firmware Check - CPU NameUnique Hardware/FirmwareCheck - I/O Communication PortUniqueHardware/Firmware Check - MAC AddressAnti-Behavioral AnalysisCall Graph Generation EvasionData Flow Analysis EvasionDisassembler EvasionExecutable Code ObfuscationExecutable Code OptimizationExecutable Code VirtualizationObfuscated Files or InformationSoftware PackingInvokeNTDLL System Calls via Encoded TableShadow Process CommunicationTwo-layer Function ReturnArbitrary Memory CorruptionControl DependenceImplicit FlowsArgument ObfuscationConditional MisdirectionDesynchronizing Opaque PredicatesFake FunctionValue Dependent JumpsVBA StompingAPI HashingArgument ObfuscationCode InsertionData Value ObfuscationDead Code InsertionEntry Point ObfuscationFake Code InsertionGuard PagesImport Address Table ObfuscationImport CompressionInstruction OverlapInterleaving CodeJump InsertionJunk Code InsertionOpaque PredicateStack StringsStructured Exception Handling (SEH)Symbol ObfuscationThunk Code InsertionVariable RecompositionJump/Call Absolute AddressMinificationMultiple VMsEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmEncryption of CodeEncryption of DataArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectAnti-Static AnalysisArchive Collected DataCryptocurrencyHijack Execution FlowInput CaptureKeyloggingScreen CaptureEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmBitcoinEthereumZcashAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadowSystem Service Dispatch Table HookingSystem Service Dispatch Table HookingMouse EventsApplication HookPollingWinAPICollectionC2 CommunicationDomain Name GenerationIngress Tool TransferAuthenticateCheck for PayloadDirectory ListingExecute FileExecute Shell CommandFile searchImplant to Controller File TransferReceive DataRequest CommandRequest Email Address ListRequest Email TemplateSend DataSend HeartbeatSend System InformationServer to Client File TransferStart Interactive ShellCommand and ControlDNS CommunicationFTP CommunicationHTTP CommunicationICMP CommunicationInterprocess CommunicationSMTP CommunicationSocket CommunicationWinINetDDNS Domain ConnectResolveResolve Free Hosting DomainResolve TLDServer ConnectSend FileWinINetClientConnect to ServerCreate RequestDownload URLExtract BodyGet ResponseIWebBrowserOpen URLRead HeaderReceive RequestSend DataSend RequestSend ResponseServerSet HeaderStart ServerWinHTTPWinINetEcho RequestGenerate TrafficConnect PipeCreate PipeRead PipeWrite PipeRequestServer ConnectConnect SocketCreate SocketCreate TCP SocketCreate UDP SocketGet Socket StatusInitialize Winsock LibraryReceive DataReceive TCP DataReceive UDP DataSend DataSend TCP DataSend UDP DataSet Socket ConfigStart TCP ServerTCP ClientTCP ServerUDP ClientInternetConnectInternetOpenInternetOpenURLInternetReadFileInternetWriteFileCommunication Micro-objectiveCryptocurrencyHijack Execution FlowInput CaptureKeyloggingScreen CaptureBitcoinEthereumZcashAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadowSystem Service Dispatch Table HookingSystem Service Dispatch Table HookingMouse EventsApplication HookPollingWinAPICredential AccessCrypto AlgorithmCrypto ConstantCrypto LibraryCryptographic HashDecrypt DataEncrypt DataEncryption KeyGenerate Pseudo-random SequenceHashed Message Authentication CodeAPI CallStatic Public LibraryMD5SHA1SHA224SHA256SnefruTiger3DESAESBlock CipherBlowfishCamelliaHC-128HC-256RC4RC6RSASkipjackSosemanukStream CipherTwofish3DESAESBlock CipherBlowfishCamelliaHC-128HC-256RC4RC6RSASkipjackSosemanukStream CipherTwofishImport Public KeyRC4 KSAGetTickCountrandRC4 PRGAUse APICryptography Micro-objectiveCheck StringChecksumCompress DataCompression LibraryDecode DataDecompress DataEncode DataModuloNon-Cryptographic HashUse ConstantAdlerBSDCRC32LuhnIEncodingFilterFactoryQuickLZBase64XORaPLibIEncodingFilterFactoryQuickLZBase64XORdhashdjb2Fast-HashFNVMurmurHashpHashData Micro-objectiveAlternative Installation LocationBootkitBypass Data Execution PreventionComponent FirmwareConditional ExecutionCovert LocationDisable or Evade Security ToolsHidden Files and DirectoriesHide ArtifactsHijack Execution FlowIndicator BlockingInstallInsecure or Malicious ConfigurationModify RegistryObfuscated Files or InformationPolymorphic CodeProcess InjectionRootkitSelf DeletionSoftware PackingFileless MalwareRegistry InstallROP ChainsRouter FirmwareDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckHide Data in RegistrySteganographyAMSI BypassBypass Windows File ProtectionDisable Code IntegrityDisable Kernel Patch ProtectionDisableSystem File Overwrite ProtectionForce Lazy WritingHeavens GateModify PolicyUnhook APIsAttributeExtensionLocationTimestampDirect Kernel Object ManipulationHidden Kernel ModulesHidden ProcessesHidden ServicesHidden Userspace LibrariesAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadowSystem Service Dispatch Table HookingSystem Service Dispatch Table HookingRemove SMS Warning MessagesEncodingEncoding - Custom AlgorithmEncoding - Standard AlgorithmEncryptionEncryption - Custom AlgorithmEncryption - Standard AlgorithmEncryption of CodeEncryption of DataCall IndirectionsCode ReorderingPacker StubAsynchronous Procedure CallDynamic-link Library InjectionExtra Window Memory InjectionHook Injection via SetWindowsHooksExInjection andPersistence via Registry ModificationInjection using ShimsInjection via Windows FibersPatch Process Command LinePortable Executable InjectionProcess HollowingThread Execution HijackingApplication RootkitBootloaderHardware/Firmware RootkitHypervisor/Virtualized RootkitKernel Mode RootkitMemory RootkitCOMSPEC Environment VariableArmadilloASPackConfuserCustom CompressionCustom Compression of CodeCustom Compression of DataNested PackingStandard CompressionStandard Compression of CodeStandard Compression of DataThemidaUPXVMProtectDefense EvasionAnalysis Tool DiscoveryApplication Window DiscoveryCode DiscoveryFile and Directory DiscoveryReferencesSelf DiscoverySMTP Connection DiscoverySystem Information DiscoveryKnown File LocationKnown WindowKnown Windows Class NameProcess detectionProcess detection - DebuggersProcess detection - PCAP UtilitiesProcess detection - PE UtilitiesProcess detection - Process UtilitiesProcess detection - SandboxesProcessdetection - SysInternals Suite ToolsWindow TextEnumerate PE SectionsInspect Section Memory PermissionsParse PE HeaderFilter by ExtensionLog FileCheck Magic StringCheck Section LengthUse HashquineEnumerate Environment VariablesGenerate Windows ExceptionDiscoveryCommand and Scripting InterpreterConditional ExecutionExecution DependencyExploitation for Client ExecutionInstall Additional ProgramPrevent Concurrent ExecutionRemote CommandsSend EmailSend Poisoned Text MessageSystem ServicesUser ExecutionDeposited KeysEnvironmental KeysGetVolumeInformationHost Fingerprint CheckRuns as ServiceSecure TriggersSuicide ExitToken CheckFile Transfer Protocol (FTP) ServersJava-based Web ServersRed Hat JBoss Enterprise ProductsRemote Desktop ProtocolsSysinternalsWindows UtilitiesDelete FileDownload FileExecuteShutdownSleepUninstallUpload FileMSDTCExecutionAutomated ExfiltrationExfiltrate via File Hosting ServiceExfiltrationAlter File ExtensionCopy FileCreate DirectoryCreate FileDelete DirectoryDelete FileGet File AttributesMove FileRead FileRead Virtual DiskSet File AttributesWrites FileAppend ExtensionCreate Office DocumentCreate Ransomware FileFile System Micro-objectiveInstall DriverLoad DriverSimulate HardwareMinifilterMinifilterCtrl-Alt-DelMouse ClickHardware Micro-objectiveClipboard ModificationComponent FirmwareCompromise Data IntegrityData DestructionData Encrypted for ImpactDenial of ServiceDestroy HardwareDisk WipeExploit KitExploitation for Client ExecutionGenerate Traffic from VictimManipulate Network TrafficModify HardwareRemote AccessResource HijackingSpammingRouter FirmwareDelete Application/SoftwareDelete Shadow CopiesEmpty Recycle BinRansom NoteFile Transfer Protocol (FTP) ServersJava-based Web ServersRed Hat JBoss Enterprise ProductsRemote Desktop ProtocolsSysinternalsWindows UtilitiesAdvertisement Replacement FraudClick HijackingCDROMMousePrinterReverse ShellCryptojackingPassword CrackingImpactIngress Tool TransferMalicious Network DriverSend EmailSend Poisoned Text MessageSupply Chain CompromiseAbuse Enterprise CertificatesExploit Private APIsLateral MovementAllocate MemoryChange Memory ProtectionFree MemoryHeap SprayOverflow BufferStack PivotExecutable HeapExecutable StackMemory Micro-objectiveConsoleEnvironment VariableRegistryWallpaperSet VariableCreate Registry KeyDelete Registry KeyDelete Registry ValueOpen Registry KeyQuery Registry KeyQuery Registry ValueSet Registry ValueOperating System Micro-objectiveBootkitComponent FirmwareHidden Files and DirectoriesHide ArtifactsHijack Execution FlowIngress Tool TransferInstallInsecure or Malicious ConfigurationKernel Modules and ExtensionsMalicious Network DriverModify Existing ServiceModify RegistryRegistry Run Keys / Startup FolderRemote AccessShutdown EventRouter FirmwareAttributeExtensionLocationTimestampDirect Kernel Object ManipulationHidden Kernel ModulesHidden ProcessesHidden ServicesHidden Userspace LibrariesAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadowSystem Service Dispatch Table HookingSystem Service Dispatch Table HookingDevice DriverReverse ShellPersistenceHijack Execution FlowInstall CertificateKernel Modules and ExtensionsModify Existing ServiceProcess InjectionAbuse Windows Function CallsExport Address Table HookingImport Address Table HookingInline PatchingProcedure HookingShadowSystem Service Dispatch Table HookingSystem Service Dispatch Table HookingDevice DriverAsynchronous Procedure CallDynamic-link Library InjectionExtra Window Memory InjectionHook Injection via SetWindowsHooksExInjection andPersistence via Registry ModificationInjection using ShimsInjection via Windows FibersPatch Process Command LinePortable Executable InjectionProcess HollowingThread Execution HijackingPrivilege EscalationAllocate Thread Local StorageCheck MutexCreate MutexCreate ProcessCreate ThreadEnumerate ThreadsOpen ProcessOpen ThreadResume ThreadSet Thread ContextSet Thread Local Storage ValueSuspend ThreadTerminate ProcessTerminate ThreadUnmap Section ViewWrite Process MemoryCreate Process via ShellcodeCreate Process via WMICreate Suspended ProcessProcess Micro-objective \ No newline at end of file