From 57f173010a91653a0b8c8d64c554acbda778ae6e Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Tue, 1 Feb 2022 16:03:04 -0600 Subject: [PATCH 01/16] AWS Find Inactive Users --- playbooks/aws_find_inactive_users.json | 505 +++++++++++++++++++++++++ playbooks/aws_find_inactive_users.png | Bin 0 -> 609375 bytes playbooks/aws_find_inactive_users.py | 235 ++++++++++++ playbooks/aws_find_inactive_users.yml | 20 + 4 files changed, 760 insertions(+) create mode 100644 playbooks/aws_find_inactive_users.json create mode 100644 playbooks/aws_find_inactive_users.png create mode 100644 playbooks/aws_find_inactive_users.py create mode 100644 playbooks/aws_find_inactive_users.yml diff --git a/playbooks/aws_find_inactive_users.json b/playbooks/aws_find_inactive_users.json new file mode 100644 index 0000000000..9d92624dc5 --- /dev/null +++ b/playbooks/aws_find_inactive_users.json @@ -0,0 +1,505 @@ +{ + "blockly": false, + "blockly_xml": "", + "category": "Cloud", + "coa": { + "data": { + "description": "Find AWS accounts that have not been used for a long time (90 days by default). For each unused account, gather additional group and policy information and create an artifact to enable further automation or manual action.", + "edges": [ + { + "id": "port_0_to_port_2", + "sourceNode": "0", + "sourcePort": "0_out", + "targetNode": "2", + "targetPort": "2_in" + }, + { + "id": "port_0_to_port_3", + "sourceNode": "0", + "sourcePort": "0_out", + "targetNode": "3", + "targetPort": "3_in" + }, + { + "id": "port_2_to_port_4", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "4", + "targetPort": "4_in" + }, + { + "id": "port_3_to_port_4", + "sourceNode": "3", + "sourcePort": "3_out", + "targetNode": "4", + "targetPort": "4_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_4_to_port_5", + "sourceNode": "4", + "sourcePort": "4_out", + "targetNode": "5", + "targetPort": "5_in" + }, + { + "id": "port_5_to_port_6", + "sourceNode": "5", + "sourcePort": "5_out", + "targetNode": "6", + "targetPort": "6_in" + }, + { + "id": "port_6_to_port_8", + "sourceNode": "6", + "sourcePort": "6_out", + "targetNode": "8", + "targetPort": "8_in" + }, + { + "id": "port_8_to_port_1", + "sourceNode": "8", + "sourcePort": "8_out", + "targetNode": "1", + "targetPort": "1_in" + } + ], + "nodes": { + "0": { + "data": { + "advanced": { + "join": [] + }, + "functionName": "on_start", + "id": "0", + "type": "start" + }, + "errors": {}, + "id": "0", + "type": "start", + "x": 190, + "y": 0 + }, + "1": { + "data": { + "advanced": { + "join": [] + }, + "functionId": 1, + "functionName": "on_finish", + "id": "1", + "type": "end" + }, + "errors": {}, + "id": "1", + "type": "end", + "userCode": "\n # This function is called after all actions are completed.\n # summary of all the action and/or all details of actions\n # can be collected here.\n\n # summary_json = phantom.get_summary()\n # if 'result' in summary_json:\n # for action_result in summary_json['result']:\n # if 'action_run_id' in action_result:\n # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False)\n # phantom.debug(action_results)\n\n", + "x": 190, + "y": 1007 + }, + "2": { + "data": { + "action": "list users", + "actionType": "investigate", + "advanced": { + "customName": "list all accounts", + "customNameId": 0, + "description": "List all AWS IAM accounts, which will include the PasswordLastUsed field for us to filter on.", + "join": [], + "note": "List all AWS IAM accounts, which will include the PasswordLastUsed field for us to filter on." + }, + "connector": "AWS IAM", + "connectorConfigs": [ + "aws_iam" + ], + "connectorId": 20, + "connectorVersion": "v1", + "functionId": 1, + "functionName": "list_all_accounts", + "id": "2", + "requiredParameters": [], + "tab": "byAction", + "type": "action" + }, + "errors": {}, + "id": "2", + "type": "action", + "x": 0, + "y": 148 + }, + "3": { + "data": { + "advanced": { + "customName": "calculate start time", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "datetime_modify", + "repoName": "community" + }, + "functionId": 1, + "functionName": "calculate_start_time", + "id": "3", + "selectMore": false, + "type": "utility", + "utilities": { + "datetime_modify": { + "description": "Change a timestamp by adding or subtracting minutes, hours, or days.", + "fields": [ + { + "dataTypes": [ + "" + ], + "description": "The datetime to modify, which should be provided in a string format determined by input_format_string", + "inputType": "item", + "label": "input_datetime", + "name": "input_datetime", + "placeholder": "2020-06-27T14:53:08.219016Z", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The format string to use for the input according to the Python's datetime.strptime() formatting rules. If none is provided the default will be '%Y-%m-%dT%H:%M:%S.%fZ'. In addition to strptime() formats, the special format \"epoch\" can be used to accept unix epoch timestamps.", + "inputType": "item", + "label": "input_format_string", + "name": "input_format_string", + "placeholder": "%Y-%m-%dT%H:%M:%S.%fZ", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "" + ], + "description": "Choose a unit to modify the date by, which must be either seconds, minutes, hours, or days. If none is provided the default will be 'minutes'", + "inputType": "item", + "label": "modification_unit", + "name": "modification_unit", + "placeholder": "minutes", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The number of seconds, minutes, hours, or days to add or subtract. Use a negative number such as -1.5 to subtract time. Defaults to zero.", + "inputType": "item", + "label": "amount_to_modify", + "name": "amount_to_modify", + "placeholder": "0", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The format string to use for the output according to the Python's datetime.strftime() formatting rules. If none is provided the default will be '%Y-%m-%dT%H:%M:%S.%fZ'.", + "inputType": "item", + "label": "output_format_string", + "name": "output_format_string", + "placeholder": "%Y-%m-%dT%H:%M:%S.%fZ", + "renderType": "datapath", + "required": false + } + ], + "label": "datetime_modify", + "name": "datetime_modify" + } + }, + "utilityType": "custom_function", + "values": { + "datetime_modify": { + "amount_to_modify": "-90", + "input_datetime": null, + "input_format_string": null, + "modification_unit": "days", + "output_format_string": "%Y-%m-%dT%H:%M:%SZ" + } + } + }, + "errors": {}, + "id": "3", + "type": "utility", + "x": 340, + "y": 162.5 + }, + "4": { + "data": { + "advanced": { + "customName": "filter inactive accounts", + "customNameId": 0, + "description": "Compare the PasswordLastUsed field to the calculated start time to find unused accounts. Ignore accounts with no value for PasswordLastUsed. This will ignore all accounts with no passwords, such as accounts that only use API access keys.", + "join": [], + "note": "Compare the PasswordLastUsed field to the calculated start time to find unused accounts. Ignore accounts with no value for PasswordLastUsed. This will ignore all accounts with no passwords, such as accounts that only use API access keys." + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": "<", + "param": "list_all_accounts:action_result.data.*.PasswordLastUsed", + "value": "calculate_start_time:custom_function_result.data.datetime_string" + }, + { + "conditionIndex": 0, + "op": "!=", + "param": "list_all_accounts:action_result.data.*.PasswordLastUsed", + "value": "" + } + ], + "conditionIndex": 0, + "logic": "and" + } + ], + "functionId": 1, + "functionName": "filter_inactive_accounts", + "id": "4", + "type": "filter" + }, + "errors": {}, + "id": "4", + "type": "filter", + "x": 230, + "y": 325 + }, + "5": { + "data": { + "action": "get user", + "actionType": "investigate", + "advanced": { + "customName": "get unused account information", + "customNameId": 0, + "description": "Use the \"get user\" action to gather more information about the unused accounts, including group membership and policy assignments.", + "join": [], + "note": "Use the \"get user\" action to gather more information about the unused accounts, including group membership and policy assignments." + }, + "connector": "AWS IAM", + "connectorConfigs": [ + "aws_iam" + ], + "connectorId": 20, + "connectorVersion": "v1", + "functionId": 1, + "functionName": "get_unused_account_information", + "id": "5", + "parameters": { + "username": "filtered-data:filter_inactive_accounts:condition_1:list_all_accounts:action_result.data.*.UserName" + }, + "requiredParameters": [ + "username" + ], + "tab": "byAction", + "type": "action" + }, + "errors": {}, + "id": "5", + "type": "action", + "x": 170, + "y": 505 + }, + "6": { + "data": { + "advanced": { + "customName": "save to artifacts", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "artifact_create", + "repoName": "community" + }, + "functionId": 2, + "functionName": "save_to_artifacts", + "id": "6", + "selectMore": false, + "type": "utility", + "utilities": { + "artifact_create": { + "description": "Create a new artifact with the specified attributes.", + "fields": [ + { + "dataTypes": [ + "phantom container id" + ], + "description": "Container which the artifact will be added to.", + "inputType": "item", + "label": "container", + "name": "container", + "placeholder": "container:id", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The name of the new artifact, which is optional and defaults to \"artifact\".", + "inputType": "item", + "label": "name", + "name": "name", + "placeholder": "artifact", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The label of the new artifact, which is optional and defaults to \"events\"", + "inputType": "item", + "label": "label", + "name": "label", + "placeholder": "events", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "" + ], + "description": "The severity of the new artifact, which is optional and defaults to \"Medium\". Typically this is either \"High\", \"Medium\", or \"Low\".", + "inputType": "item", + "label": "severity", + "name": "severity", + "placeholder": "Medium", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The name of the CEF field to populate in the artifact, such as \"destinationAddress\" or \"sourceDnsDomain\". Required only if cef_value is provided.", + "inputType": "item", + "label": "cef_field", + "name": "cef_field", + "placeholder": "destinationAddress", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "The value of the CEF field to populate in the artifact, such as the IP address, domain name, or file hash. Required only if cef_field is provided.", + "inputType": "item", + "label": "cef_value", + "name": "cef_value", + "placeholder": "192.0.2.192", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "The CEF data type of the data in cef_value. For example, this could be \"ip\", \"hash\", or \"domain\". Optional.", + "inputType": "item", + "label": "cef_data_type", + "name": "cef_data_type", + "placeholder": "ip", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "A comma-separated list of tags to apply to the created artifact, which is optional.", + "inputType": "item", + "label": "tags", + "name": "tags", + "placeholder": "tag1, tag2, tag3", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Either \"true\" or \"false\", depending on whether or not the new artifact should trigger the execution of any playbooks that are set to active on the label of the container the artifact will be added to. Optional and defaults to \"false\".", + "inputType": "item", + "label": "run_automation", + "name": "run_automation", + "placeholder": "false", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Optional parameter to modify any extra attributes of the artifact. Input_json will be merged with other inputs. In the event of a conflict, input_json will take precedence.", + "inputType": "item", + "label": "input_json", + "name": "input_json", + "placeholder": "{\"source_data_identifier\": \"1234\", \"data\": \"5678\"}", + "renderType": "datapath", + "required": false + } + ], + "label": "artifact_create", + "name": "artifact_create" + } + }, + "utilityType": "custom_function", + "values": { + "artifact_create": { + "cef_data_type": "aws iam user name", + "cef_field": "awsUserName", + "cef_value": "get_unused_account_information:action_result.parameter.username", + "container": "container:id", + "input_json": null, + "label": "user", + "name": "Unused AWS Account", + "run_automation": "false", + "severity": null, + "tags": null + } + } + }, + "errors": {}, + "id": "6", + "type": "utility", + "x": 170, + "y": 697 + }, + "8": { + "data": { + "advanced": { + "join": [] + }, + "functionId": 1, + "functionName": "playbook_aws_disable_user_accounts_1", + "id": "8", + "inputs": { + "aws_username": { + "datapaths": [ + "get_unused_account_information:action_result.parameter.username" + ], + "deduplicate": false + } + }, + "playbookName": "aws_disable_user_accounts", + "playbookRepo": 1, + "playbookRepoName": "community", + "playbookType": "data", + "synchronous": false, + "type": "playbook" + }, + "errors": {}, + "id": "8", + "type": "playbook", + "x": 170, + "y": 845 + } + }, + "notes": "This playbook uses the following Apps:\n - AWS IAM (list users, get user) [asset name = aws_iam] - gather information about AWS IAM user accounts\n\nDeployment Notes:\n - this playbook is meant to run on a Timer, such as once per week\n - to adjust the lookback period away from the default, change the number of days to a different negative number in the \"calculate_start_time\" block\n - note that this playbook will ignore accounts where the password has never been used. These could be unused human accounts or they could be API accounts where the access keys are actively used." + }, + "input_spec": null, + "output_spec": null, + "playbook_type": "automation", + "python_version": "3", + "schema": "5.0.3", + "version": "5.0.1.66250" + }, + "create_time": "2021-11-01T20:36:59.131793+00:00", + "draft_mode": false, + "labels": [ + "aws find inactive users" + ], + "tags": [] +} \ No newline at end of file diff --git a/playbooks/aws_find_inactive_users.png b/playbooks/aws_find_inactive_users.png new file mode 100644 index 0000000000000000000000000000000000000000..9b33cb96ffdbcd5e8397e6079840bcebfa841823 GIT binary patch literal 609375 zcmcG0WmsHG)-FMUB|y;N1b3Iw1$TF8++7;ChKAeZ z%$aZIet+(qIk%r@v#a;sRn@g>t#`d^Rc%64m1Uo!5uw4s!9ACklTw3&!-T-Wq3WSL zgHIKSqzuI=38mL5`8??x?2O-KLmGkb?G4L2`^-~)IWeo2 zliT#=qov#J`tAFX-o@LcC*Ske20kJch`ztMxMyEiGt-hF6F@_xqpgXXh9%0M_cYMeFeObJyKdvrLrLNQu4_|GpfE@~!1 zKUy+>nUTXl2ylxh+O|A);2EA?IYi*?3(*TsfuoqX_Ht*1`(>j#!ic{iLAEH1)u0fF z%>d^igN2OV>Gi6!4=akEIW?>MjKan5k~7#QkL$|zZdUTn%Lj}#y}?7VVHYCt zt~KKX7{3Kn_~7d>8iZiYT_Gg!Hchm6b?A4?Gh0|S?oUlm!%~ZbKhy3MGA4gwPIt^c(xVxErh1=HA^WYHl3{1p8p~K zG4dLpZ=E>xX3n$IVBB>RWXBhw?Nr?LCWn+3p}d9%>BaQSZv|^*-$j3~?&-_&qpx0i zYRn~VAM3&@@(YDk`MD?=6Vn^H>CO=I&66JLPit*q;>;_4cCGMlW-8loqmii(7b6yr z6U?Zwk9|ot;9uBHSUxq+c^)pe%7yy%vnU1jldjRma^JTv=)XXsBz1-+o^L!0$HyG( zMUHyKipcRD?*1LdU@V5a0#ej>nN!Ro_?K2stoJH_d#_b-il*q1-QRoo$9JL_zvf7O zDeu%hbZjJq6%{z5IwNGy3l@EOXztl=B7wa6WR*x z49D+%%r1mdDQT7(lJbOaff%y7@@ljSbJC&OzR1xWnj#d$d7ZVTBN!@(l>00@KrOX7 zy>LHkpQ|&gbSL3rtTS0yLlZpO3%aj2oP3XRn^?wDAw460!0iGr7)IJg^aNcnlIH_K zdA6m{&o5-pi!;S-Ll90jB+2?j?@p>kroL&^f$ClBfuoVWlw;?V7f;ufV}_y?9J-{L zG49ZUwS@|eHc;a88}gCi_H0A9crIf3k4wZ7w?+2xTboFz508#SPu~-qk$omFS>@I8 zp5{0BQigCXB2p#s{VRc$QyoP7vn_&fUACexO*xV>JC(``I=nc2Fr0~)klfQ!X}r0bd=xeU_UkQ-HMhIZ|Sl9yvlhZY<;zs{kI0I6;=e7~{{Ui~hXd=|<0X zcr*ei16dfUksKO}`#~HS3pt zLzf$6DdwE>^lec)u~5a9r<` zo(`>&yzZNMd8^FDtfriaU5s;8kEcz+&0h@^MCDs#fkgwOq=f?$czeTBCDS&eO~to* zQCa3?J!2_3T3K3!uBt~_2DKv6%if*TP_zb?Pj4m6BQh;IAO!=a?j{FAYTQT8|Bf-Z~PTNu4Ea z%@49AUg>D-NWJf6o_?SDbEoE`&KI4n_oX#LX0xVUYvk-8PSY4gyS!I%mv1zFxmFOhzLMt1>T zwsI6?1H5jq(!2<*3Ciqw8Ko9w7S$r8FNBmnm9EvaV-RED*p%F8;MU*~*2w3+eE#7& z{NiRhe`-6sETe3pcByt?WSDKh)_?hV%?m-_rU38mj1}@NQP4y1Lj&CM=d8~NPk>K< zA#EXpF}wuk?0rzpj??dwAUdqSCxzIH!V<;HJdkJsPHKy$~pd`_@)XxvNgCQfSeR3obOzExDeAr4P4geTW$H++6mx!AO0Kdat!N*WWVAPD|5U@LfyRJ^C+F_&99~0BE)%O`3N5U1eP@ zmy7AHL3a6frT2^do?BOzK92V`8U0$$=RVg^bj(w}oJv7q6=sNE>03~k{; z@4cIIIjxVN+-17Er5nY|;IyTY>G#o~xg);Z-pOFYMFi;ah!XNVdcQGn29x z8>*i@+@JH5&^t5=@#t~8t-oqKJOWxgfh#2Z9Cdns-y8vjlCP5DH6V!%XbkDAvq-t| z&15z2`{@?Z4kH+bY>`2vBMq;_NPYRPe?1Vq&kG53kwEo?MIE80+VW;fN^p#@G722x z6CyYySm_Du5P3rU&$7%DdN_pN*Wuydf-K+=|M846?ELtNh8>S}{x~DVet|=VeZz(w zZr|bmd>Rw-9pTS1svhhfoVdEAygclzZsK5S3UK^n>x40hrvtlyYA5&J5e^QY=J9wU zuSR_gYk$TtIU3!^+LdPAP&$K|vwp@X<^_O-kk;)nVU+DL*+m z*$J?*xw^Wtx^l7FI+(L@@bmMtv2(It zx>UrBXBZ1D#~8IGHv5=V9MJgQa*{f_^XW`%OQ3NGZRk@xbR`X}-SMxK6irtUQFCzG zE!ewJUkv{v=&0Azb!(8{eAsIlJYVZ`$;X#ppthNoRib;8PARCbb-+(Y*E6__KfEh7 zXC_?LVE{Y#G@ysQgGtQGHMTJ;NNMnANjL%DoH=x#xt8z@EYH|ifrRqi{?J! ztmN*qD`H#tIj^9af%KH;spAR6uX@}E5OdATmAB9cM1#@_38`*j67QGjy@Gp!A_fPK z^%)M4;=d|xCbxbFBHi7~;57BBUqbGZd~8&#iy|6_0D??;Wn`j!M5>kQ`O0&_th9k~ zLV+45=eXTT{}ovg)QGm}ewfs^YwxtW@J_^Trb4oezp|tA2r?pd?;aSarkX2v8j6;N zvZVAHI3KZDuDXxR!WxOm;=|~2ao^SkFCKaQlML;5!6Y;gG3aL;zg{> zbb8sV4-1DB>4Nl}&lp(rUk8l>Yu)Vs>(TxpFJA{KxJ)3wM+H3|Y_P4M&tf_|%SA!+ z0QzjqoK1rQGOh2PxeXai&(&m7(KTPWOMC|7Ka)O5s&_t61pkom#M@7~Tn>TSwBPS` z@C>A+Fcsc;^$lr_wS+<)(Tg+4HFq%4%b&e#?t)l-r9K@#2td15tctK<{E>~@B2`@W z0fc~v{fWgkaU4XPJ8L@R_Nt~f))Ex~>Sg^r!&4%|mlHUnExLjBH_b2>JqQsClCYl; zwf3kr8n59SP@pzJw1rnhcD3tu?RvMgi6edT((vclh1ak1nLw|d6+=ffD{Vz;vRHPY zT-ac4=a!qD#+&@E`^@Zt7Xe4AaZ~YH8Y`Xm?np?C_aFqgbF9y)8gJIqg52wkbospD z#1h#OLok0HNuL1-`uI~gt87u-mb6cK3SJ45v!h{m$8_Ef&zBLFBrr=Ec9kCtCTF*v zXHB2!PO?foP!q}g_gekC1=VI$igUK*GV-ZMr7rk{7%TCBjkpe&$V@cQJXd~6ZqeRR zapN}TMWMmB+C)mYLVLh(bw=q)zMfhfS@&bnX_s--wRx_#D2fXx2-kX(lH#&h4`&7v z;;(05DA18cV9J365Kz><=pK&JQGGqptvA+C7npV?ZJiAmJ*rDHX z5RG(pg3L$_s^S)ruHn%yhP)Pu$u=A;IXIp7@^fd$%az(W^0f>6Z_W813LYv3Q*dcF zyjcVoJotu6Qm~vKElz}tDJ7Hdc64}qy!EE$AF&JGnj$-IGN)j_%Km6v)s3{XTk+mM zk$qfW;~IeGqyDP_sAEB&ezo7=G%TH=cgY?W3RSPKkJXK4yHP$i-02=>`0+}Qi9Ii$ z^Ky@t*}GksBiJ0}?9=BF6Htzh=;>Aat)1>LxWf<0-y7*kTXKynIROnCqmsd`zl6#el!QOZezVO(vS%o z+6IUa?qy1(FpChMt1zpW=@t#jz))tuRs!m{#ju+=Zy_ez!Ic)RR`z z_f-%FH3quN5f=LBh4#De83{#kg{^&4#JcR^N_Hs16QvwLQLQMK+!i3dQFCwT0sQb0OZc+WFh-r9Kl;-heg*$8g7tVx8Ux1d-n;(h3Lg%;(S39Mu?oMuxum^?##=xp6wk zl?d39A8Mu_!5a?RMt6=38SQK}=3e4ij@neZeyVJ-94cXieYFIhEF8Z2c>juZt{QJ>gPYBd~AblyMG zl%Wwvw^9=qCjr!JYTU0X4uLbM`Lw_wWiD8~hwGBZb1g!}_z&$KF?YHF0EnxgK3TMPMUGEz%$L?yLw`-sf#h&Z*{s?d8|*8KUWM-y`Jsjj9w( zQqEiXkqvsV6`WoYm|>S7@-CdM%dsE#h8SOg^k>2Pmk=6f^>~xtl;m2Qy!DYT{Vmv~ zTKcHaAU5*fe6zp~kunolyCgi35?0jS;X}QpQq+a;wuwB&&4BB5W__2o0%LESi6}w0 zIod>;ktkg*hsZZ)KVQS~p&hlF%A%3!Y9N?sawWY<_*pM1OcGI`mj@g=s#*gv8V02s zc=)f!fCg_fe_1I_>p{g`qtd;{YHE&dTkD1()2UI@*zq_o7o}#LyR1adYc07>yOZ*6 z2~pRr8U|6IlC64w7ka_JfT5SKfnp6jOoP6|W6fy76g#=cW#=%nZ(wkOER$XsydAi0 zpMp7BFQ$F;JkMqXD^u2_3K{;q?o>Fr=DmK$COXK0z|-O3ppOwlXC>d8%VMvWFSS;| zXhQi-*FDTNr)1EH$G#2AmmR>3iJU)Qk1u5OHft8_f9H z=i5>i#*y!T!F-We8{*$&y_<vgzWdn@oru+Zcl3Dy+Vc$+Ld#G3e>@2`+u*B6_f z4WUa-GfOv#!h`EQfSrJS132>QoZQ{L4`&7o0C?wtHItv@lb=MI=8dP9lp)VLmNNuY_hJMN^prhk1CeX7_f=rBQgmW7r8>&N!Q0x4lc%N%T-&)7jl=uZFnD%p)MJ5Cve9O=gtvXq~D z+IhFN-=(#WNJf++gV)*&(YrLhd_nQ^Vbao?0udG=mN~7$78~jsmkskVpE&V63RbR` zl&TAaHXuN}dE>{5=w_L_y8s>@fmy!;M}{`3_}pSw*H$)Qvad2Y$?xWX=8!0Cv;{Fd z@o!23eAj#ARjh`*p#hZP37xYe8G1BHz*2h*c#T1C zt^+;^J48Ce2i9{*HCI?@X2?>39M@ap<4pEk_Jc%t%^%K*Sjjte^aWj{F8E#1oiD{+ zkqaT$P|!mUwCi%Y>lH|faW1H|svGixC_X)hMUi-S1oA$c5`9ecs;)}LE=3cYA@Ht; zi6elNo4WS#^pNt-)|+b(SDdq|&fN0W3rK#&_}>;gs656Fz~{41en*H>zX7ZRbqps( zowUAx1Ht~6QURQvY@U`%=u{K?BKpj_$$o6cpZRpk-}pgQgI2*zpiOH|5<`F4UR-C zZ=Uti7ri31GORGj@%!wFd9o}YLiqGg{3XdjyrVOH zxVffaiL3m}6vY=R2bcNa6QE%Ed-yX}@D`cCqx2ugyfxKje8v-)845g zI0JY$i9^QiQZ%89EC~bIT8Foj;@Yn-W%B1x@7jOHObVlDAm5tbEX-9@prahn&Oi6^ zV=lGTH#GWNXP82N_}UmYRJf@b;|UJ0=_v8j?!wYdbq^<+KQa^km^~} z;ps{59M|;A>aX#1^u03T!lem5p=>%IubnPX#WqtRE?zv$C{$laenE8VLFU&R2U0Inhq!pn<2FoXf(6Z`Z_M&v$82>Ifiu zzo!nV&=q8dczY6Psd4unT>E(y>#s}rFtNW(=@r$CrgN9RiPcj5&TL$fo-)0zOD*R> zYCF`}?Vw$}8KU^M2g#k)SJ$moJaKr7_L4MsR1}BJ1f|aQWk>X#5B#$~J^N4-M?gcCwR{VEm} zT7|b0aCZ`-Xde;9({Q1W9(bx8Wa7>Bl&8*$8>0~cS^^2|U~i3D;K9C0u>{JNFMkr& z<Fx>-kjODPX~2=Vfqv$ws${A<)}5@NL1%bE97NO;1QN7ii?;*1PkY z60+r}Z`etGkxd5RYPpTddLz-AjT|3;EJzR5c%axZ^o2Lq6U09O!a?PGz{v2XkKu2> z{htRe8jA2!d$nTht;b`?%M8_+W=&?a5_!;`W=+4`JdK~A|M#@imr+q%k9{+$ljg!^NpUxd zOH9O71MuDkhXFgded4~GnU&rZ`dW^hp!WUpfx!ycYYiS~n4-%c9KLNI7%1^jUiJc< z;aI~yMB00MF*`l`fs3Q9ts+PP3?Otx%e2>)|(Dtzvs0|WQJ}$ ze=lTFelXL#*@|!XSxa&U_}RCL)L^6=Uo~S;a8dQ{^)j zUOmCz_Fi-M=1+3u9X?0z8OucYz~Rf!Jg9%(*CWf}^D6DkJuND9I}Kt0nm8FIr9I|Q zr#N?AyC21!wDsXFQDIeK$B-n+D97f>_1q#OpYQEX^0e>s_U0{vf4GCWDkf&TtcQY2 z3g0}rvQ?$Fsmns)T7UyBJ(Gw9^!x+D7U`tbE?T27!DN258q{D+V-j&@RDYyI4?sfqx5_X&{geG zasuz0JO!$2cRMGHowx$qp>`txlI0e(jx-bz+{hm2x;LFFNbjvzo{?|~H)d7Jie5^K z)V;xXGUeCgN4SVmrMpHcC@ElBPXo*&STtsHHX33idT;rKeNyQuv^PgGVPrFS3b!PS zmx&(jczraQb()6vlE3gP+Px#qw}c|U2cf1tNlZ8tQokbM`DDVAUHL=P!S{fcsSS-r zFvVex4+<2AnecB}!n%zRTXb2>b+0APaY>20nkS-Oa)ci+Z)9?mIscYB@dfOz%6}}i zV~Alu{pN9Aj(I4faUn;2-A!r>UP>(B^F59+53i+dg&+M*&U_$MFEag~CJ)&4@F^+f z)_@(G%r^Z=d>$MKvPh|h=eTTngdO=X?xk}#>VwTEi^j0-POFn31gUDN{TpTNj$tDk z+oAI)hpmDc(QoT8Q)9g58v`;Ll6%03<$V@SW13d5doy1Z2JM&|2XI!fNj$v7`1Pk# z|8K<6>O-Nru!CaZ3@OVs2;#bwbWsB{`O>HxCa5f5#}yl}e=t-h#XUiRVumL8QvSAJ zn2A@8E*Gv$F{KzSY&8l`j6|&mH`y-adE@lRwqJ(x^M!XIt$BI7Bs+PAPOacxTb>em zIHDoluu{bLoaQ;s&=+)sK)nxLoFCe$1uoUa1JF-Hn0@ENm?#|NToy$1m1})FbIgsb zu6-3eei+YXV#V_=5XMd@rFP++sQpV1LSQOv17XrW`IWe|IS9q__^_5}MKXD@$wbY&pLvlT&@V9|VFZwTePgSDAX>!(LD*t1c}lR!e~PyM8%Q2o zFfv5NjQDPZm`>fWQTiQQq8*$T%X}_urI1CX^7mp)Yx4^^ zbg1WrTxdsAv~bB&*EOe!e9t(7h91+kU3n&E+zj)=vHfxA*UdL1^eY6Yq>c2;U&b_k zWp}rZZ5~s4n1|7(N*YH{P(zD(>QtFny{dW1q`ZVtI=q(3H@f4YV43kX) zzRU)-E=KW)J%>RE&RxF48TGdeVxe=m&)kV_B3#>_`g}N2s=RoI2W=haoGgu7#8IFK zL_&`#rvEx2X)5)7j6>^9kFBV77XFX$_*X;sl-~uaK@& z6CH5AO^;S1$`x}Dhmo^pKmzb^wGH9#k=j&FC!?P-!4L;YWEZl#>I9U<7|eqgpvk@* zp^j;zV}^rfruFupev+KHi`vz@dOO@!!goLe6IwZnr$&;-hHi7QhnHR&Qgv)uD$NN6 zr3pftJFa_&1o&e)+kgi2=OC-dQ0O8RJgy<%QtdTdtio>M?o7`v8SSMfekPEF(ECp& z{2x2#e-WZl2Fg#cPti}2^&0Pf@#8jeqv`#tzGB#7`RmZxFh(rM5fbwsdk>6Sa2}Q8 zN)i34X=R@6sOxZb27L_bbhp>_U>0`Qcr6?cx|N=DMps?+n1m!OP;@vunQ{^Yk7Vo>PG~NILnBhVs4w%uT}Tl#?Xsk-&$4wa?Ovy3_NY4=p{@Xq#NzKeS@t-SsRxHjSux zV{1x#pD!6Wkd%z>+}!mFu|toHjmD61$(C@QDm3WO)E(6_#f-3Q&4$;4b;aAju>jPQ z>UssWog*ukiB+$aZAusS)BBn)M|7!KJSOi3Qp$ro(RfYcEViGC))LIeh2E;yGv191 zX^yo3bH?qHglqE%S!yxPmpgq%`X8B?FyY^V5m+-O@Ffk)j3py=Hc?P}W+0+jlTXGV z5hTIk?Q2*f_=NK<^&>WvJ@@@N+M*TpGhhL6!=TZY9^3Eqa|9|VZ9{0)iqSC*#6JIT83{IH7`ZBsXa z#=z>=6+Sx+MRv=y*7`Odd}PIkN?n>{G*Yd0h^0Ey*Io9RvbCXrWqjMA*`}5ony$MV zKAhX_Em+3EFz|s_8A(ekdt`qPRqdBKDb;z@$#?X>7$E;!wF4esnI1g`Qa0eHvUL=C zAR?{st@?X*mlbhCm{k1lX|lwA>je{h%xDX2W0h~Tel0obfMz+_r*Tb1GMpa47$7ya z7Uq6RnTVns*t@C=%%PvLj1&M5WuKWM7|IU>>&O*&^QF}8^Bg?AtrYN=;)SgZl#Uyb zuM)MTyGVIfP}hhOSfc7-w|qegBi73x^9@DW!YAhqeiv#Kw?x${AIm(_L6 z4@41*rqk~6x>%L0#yL=@&h-Q0Kw&cK-kMs(hQKq|UeaBXQlAAyRR@0h@BPYS3zwl{ z_SsY$*JQT2&I+D*5svj#--)Wnt}+;l2ozrzD9G*rRa=B`kzrC@v67|0hPWP1b)dGB z`ijY?e_8F^WMt%1phr<@aI0{iTfBg+@t*HMNC3HB+zm7k@e;jiacKF;W$YM#SZ*lE2K z&cu{>=(Oti6Au1OA^uYW3p1;phXW-BfX6x6?Yj0oYH>QBvW%$PoOsiVfP3VN0ZIEu zF*ds(j!Qf&3CDTZO2Sfa$|q!uizVc|DUr{c`0J8;g*AE_f)le9i1Xyl6~6S~&>y08rS(5+C9`Msx8E0G!uG$+&1C;=M+%R2G;es}ABQ@@ zHF-;G?3(3JrWS>IsX&uw&nlIcI=rxU@ZqNVMsTr#pLn0@lq;xHz@U-Lt%1S&$J@eC zTmnrF@22jp-d{t+rd?mED`wa|nYGFj$~nWT5D-#zcdV>*9XZ}=S_WS%k~sm*9BwBg zFZ8Q~cI|xtrPJ><(HzgHbNON07+($WmBy9K*YriE3F-xGqP}@%d2C%=?zHQ}x=Z{z z$0};O;@ZgegXu}fi@~=KxoZ535YXJ|ITqX@F?j>!IcDO?vwzVWU#R$ZA1FjkTbn+G z&o;g*jNmAWruVO<@S3sVyCNc^*FBq|--?H_kdb}IfDiGo@Mm>}o;DjT;GR(I<>Ru@ zOcY{hXlRZusMMGU%_=YBC5JacmdI`xVi`YG!;y<$rM+Tk?Jni8ogNJd#)y`>t5r48@eU|@ZJej za)g7ouSx4^;6)Qgly2M?bpekn!m&k|I8c=XK{;3;L98G{@NaZ^MhiYoz&W;5zlEWz ztLyELsUod`(M;R^aKZ^HV$#2)*s#@K67NH}LeOgXsg8(q!js z4(JEn6gpGi_=VL*203QJdjuZ)ZCP#RYGQt9{&@3^Q8P!U z+7kRVs(OFAzcP2=Be=1i(*zRk?ZH)^I+V;4SMy65cFJ|g?N`&w)~>OhrQ8RVB;YY= z^*7c#nr;=pH+9IL7I5CHi&NO!o2q5et?l2ND*6asaIXZUc`F^hx0)%>{KM#rVD9mNbGuxgRV z?%$hq9JgkzIqpl<{2YBqHc^f#iWKQX?k~y+{}v?Egb&gEETWi5jta#I8Ly@$IPSlq zFAF=R^dX%g(_fmIA~jyQA{2b~-LwSaFvPJOTT_i0V~hu3GpN-eBRh*9)aF*1P8?mP znUL}UvhuR5)Y4e9ev6B3T<`)dH+wf&FINbool1Cb69XM^(i03@+l!BSAaA}nrwG&K zN&um@{i5j!fkzQx=7Kx7H#awGO&-n`%gs$BJ~JQ2GbNEN#&~U*EuF_4aLy z#spCfV3v`X7ohs&-tv8&k+0$e0#cq*3T>6faf?x#*KGNRbpWVu%Wlphzwe}nlujvy zCnAr}W^M!H#Y=9xXhBtqL&E^cj{Y76iraQJR=Eq&vN z(pT$#eJl8oNSW>3_BUP}UqGcjGF zs}(7-M_+#zIgRupV( zD&TAA(PlqWS@f6Z#4;ST*t#{=NegZhDw}DpOZF0LpDF_)HyiGM?Qh)QJ{b7P_L&Jb zu1u(iY66b>!q}P$kZBZQI}J%aqLE=MYbYo)ZB!$o52>l8L5@@Bed!~K0$381W`bgS}L zTZBW|p^*6@+?m0ik87v|c(=dYx#qmAIge{m(8D$_(61A(XD6vI*LU2p=F9A`hel1|O<9760TQky^EN|ALrM^8k7_fFiZGKGiEDdM{OY}Z zU&KckBbJM3e^V(Jc#qi=aQ`C6%}b14F+FxcBYm>SKwW^>@>LNZ;Hx_m!2m%~d>~DL z^K0LGQ^`)$6|CpJSD0_w8~ut?{YcGFP4MoxW7F?!Bte0-UYm#y!2FF#D}G^NA$EbP zA!J177#yc9zR*4eR%QFi{!aiu}4eW%}5=UnW~~I_`cRBfF7o)f`7(Yaf>f#`+d; z0{3i~|JK?YNEEHzhe6M;aQG8JWo6xdJx8-BJ|s|(d_vl6I5i2Tg<{gwk1ELT_@(i< z{Vb#;dFEj&1xPpxZn}zkn}PAypp6X?qvgQI!pr*9wtqn3aIzkVGWc*zm~`i5=f4K6 zYF{#!-f6iSyyRKiD=Lc>!4z$jwE#5k((W#c79!7Pi>1P{4*rp?Di^o)9v6G>_c==r zB|Wd3qj|)UIP)IYfbuj~f3>NSgF8=X1vGA4M^l4E4g~4qW&}ySKm8QnAuSxt{)Cr~ zoJ6Itv+tk{Oh{~<$fL|`F3D-Xv=Yc*)*|(e#mSeIc(^h^55lgV4gqhmoN($({MYpuA&PEb-8_50WFtgQyq^sZ0a(%x5oN zl)_xPcUr&v=9{7Zsa(w_nM!%2#V{?l1RATm#TZil1UlxS3;*MpbYo{(N5EW}t(M@7 zSQ&)gR^s7oL{KHLQmgO1dD^bjaiPYW=`uq$96II6h7llb7(ScBdb^*5#dL9!)6S>? zj3MD3Xt@HK*Lze(8}ct>_?EoXr%S3pw6l-8vYqZ2>7{b?&im8;G%W7eAyK>*@w~K7 z5;l)y)-D&DE`7g`L0F($Tl&*_R${K&Y8yOhIef`u-0W}Yt(oo#cGp^lVQ(C|DdAM{ zdv#^Ol7@xjxQt%=9@2y^$&C=Y`&Gm%Dw*(J0dhVw9LPNJ`oXNDMs$NBZ&CDeZMz?Q zVGc6Uq{f&-7(Ppu_xzn@g!|zXXrnMcBlc>E_z(l`*k13|u`|u_@VxD}Yi}a+wZQuk z;j7|QS8)9a!_7p-Ju`6BU!h-DFfrhM`TnwYv+v>79DcP^K5m0}x%Zwd+3uq%+t6%LV z#yNWi)A&>Q?+OX54mwxh_hCTC9aTauGsWrpvJ?)6^V-FrJ!d*{%&yg#QBe{)ilkQk z=L~pV1RI<37jHCkfA~-^4Gs{*_1P}eNKe}?GVk-*j`zqUG$*4i6>0rgqXy6Oc&x_{ zdE`T!)#}UTe(dStMU0FLan06u+kUG~;p?dZqn`+jB#U{S92nN}s{ z7o7!{*;o5chtDBx6rX&*FLn;!=s14!d!xqC(mG{U4H)m4CY^T@4O}%iT_6M5F0O4c z%T{MGs!5xKT4yAi$AwmF+32wCJ4ckv*GiM+vv7_tURppIcl?(7@=q z&PCJXn=`EA&`I^p@(v6foUs(`WhpK1+sim#|EGO0y2`ASrSGvzKMUmniGX0E3WlPH3iFH-6hhgLBf z_^>T{+PSXMi&iq_@NGJo*MhPIGF6u2d8NK6jPJ$D8>;B3xk98x1l&{n}S)c9BdUMEXfJ*HW`kJ-^0jZ$>`JIr`clZ?Dr@%R{3RyGl=P3adfUiLSHOR*kUG;=(N9J@vHNZ zP^*jxSm;9dVH)vlYxsp=Z+9)P&3xZ>1`r%XWAFl!5d0+sO_3s{ciEOt{lHK|gPL#o zPC=CAYU#G8Kn3~V0`5m1^Z&Az_Z1mFh{U~u#Qwr$GgD)>aE`5k!%8PyleM3D~MB z9A!z1Y}XRo(vxaNO-C!A3K^vNuA}W2K<7yZ_awZP?D65{A9+*;R4}3OG&-bqKt#wg%0ES zGDC(%$=P{@3?^BDeo6e#iF$!w1UM@r2Gvr{+SLoBMx)ACqm6Z?+y!d-m^{4`-leg9 z3L*(3@xWJ1(`7F0HUrxM_d4eDI?r>oF*&pweIm{Y&uWUyOG-0Yb!6Wp?|S*K%~k4P zQYV%PSr23Ij#A;0KqNMG_3D$WY^Pyc)g1JOei2@9JZZVnooFTwf{wy=j-K(F%d+R_ z`+?YvuxA`U_T#YiwqJGgxA@-_iXmOdlGq2FAB;(|HeY8IOpawQC)^`I2C7Cx==P^? z5b&}ruG&_PJ22xKz>Nw=V6Wm^U#qI4=G#&NWyTSj7 zwZl+yHK&9M`rcwgE!i`6%^nN;M$DQz7h2wJ}G za+!TB8QU($M1V1~Z$0Fmlln|rrOf-FvIO(=-6N?h{R^dGOYV89C=te%+r=YSrkW94 z$ULa^`UGdAEr=|(cF98_uvg*kbZqKqGmqFdmZ`K(kBHa$<>6+w{rU!EzYNrYjNcp2 zf;@t%`}V|%!tOJQ(8=}s7^;a+pC$yoJCMMDn%wKymyf0twrk{dzcp-&-k>Tic8Okv z9_G-P|JU{}qswtCXs~RCV$4I1JkEtt0p=!*FNI+EgoZ)a?=MC3Am{G%NzpI<-wg2o zN@Kt7MRodBnZYdtsr0YxA1Z2&X3N8fnaYSt&~y}y{dOi2+t_ZYwvZDy`N=B>mrwXj zvQx93!+Cf0&q}&-yM;4Odn1Z9*4qQmj2D>?OI-8%0jQ_4kuOSu9!(#naK1e}nJzSu#e-r*DL>WQ)>B%cxrS(E2m5;e_#)Ogkfuzus; zdQWSllLNWfZ!pDYGdKXuHMM}4Rc@#lie4?!DzE1nZHhuKL=%8suQjHBj6x@QW&81ZQjKFBXMZ{u4Qkh@ zirjg{r!H-wSQNOHuni7?B;n8fV+5?n{Nbj5Tzki$-7hDeRD>J8*5%zNJ+c`NxYr`{ zR?|4NqCF=UmSQB(jAe@2p{3)s-F`}5$Mfg^0th%};Cl!;xx^1wj|tmMdxz_Ct5ly0=BA^8Q>F@7r0aF^ z)B3aeU|mo1SuZkk#k0k_Zu?MjIkga<{~yxcD;&-+-1=7%f+&fIsDmU#kLZL6iI51Q z_ZGd5-Wei@-ia=15Jc}riQY?ehUj&aVHjrSd$afd`>uVs_x_)m102ltKKHYJYpwe= z`TS6Lf5@|%6a!AJ%a{?5hZeuq8w?*=cthxr@cagPH_>k;TOt_IKWx z!&fOqW4Um%}vv1hP0}!C-NG@rEhWF z3Tm{5iv;!r<*QF;sme508u6ZZ{WY<9zb2-$mmeRI|_vPIh%K=62{`23-|0NL0wa32P@oU)pLh4G5n<+O^9JPk)jvkKpEY}5$ z4qBY1tt1D;lm0n7BP-BTwa~41jJ~m&w4QJD4mOxO@oK_;d1c+;(C49Blvg#+om$!m ze#$Lck^F~icuaBg{m=q=LDkA;duT6Yx@9i*o1juCR6sM5EPEXTrOhb)^mCE9z zxsa7=B@s726g_uWn)9i<_~DJpM(H>0H@<_!o%I@vj;9v{G$sw&@tBaqn0P*N{l?e$ z*z4UVbQkmH|LzQK9~TP`oBK`O83slC3A14yh153?RhjcrrF}!bvT~U}pGpihdPuOT zjyh$;1jEU+>@f*)`&ts;al-OBe<{eG@%?UOP zH*I>FQBmY)JS{tvW&L3Qd)f3X?NXsLcT>}%clD=rpEQ_HNExJl#(GI>FI~R@qB;9< zxUxlY@5Z6w;-d`IzRRek@fc1tT9mDxeVNMR2g$skIMOOnd%C;Q*0Q36l@M2|ocZtt zx8ypeh=5(B05WPwOX@>jfk!W0u_6a1$o!L!o!!jO_!H{hA@0h%F|z5xcIdIM!&i9Qb&1PtmS=O_K_G#o_zngIPc>@u8R}Qf zfB(T0bl?7Pzp_QSRI`lT*sn_AZ3zy9ML~Pspk{YhBtibQzK3sP7&&n$sLI|NKL5}{ z-TwPwo64Ha7918P2{IE2xVhzh{5@==ykRBbsbWgfBfFP;t;YmalqT&X-vnMeHl1s~ za9k481@8Bvt|1+>F&)EnQ-#j!y%X)CkQE+b+nI=7nzpl@$Fcpwvwj>^BfU!Lr|oep zY5~Lmm5Jkj$fsa$q7s4)X8{yv$F29&SJw_!5tz2+3cz=G_Bt%ZPwc}|s`USELhIbo zD1$32w-%Z^3~Os{FHNWn_F+6}K-%S=KkVVvG9nf4vHosGroy|Y!NrAG)6NkESZOo& z-{yRutY>z#Dw5CYLxJ4Caj4^R^PmY$>b2!3Y{ISU!f>RbBoB)qutznE1JLtG#iO(H z(z1%AFiq`LHGjL-G`0x+@Y@>Sj;N(J9e*a% zP`^~!He2XOpdbPc39h&7tjEd!5w0s6hkdbRGvUWW@mbbbLX5I98d3!pnRu7e8w5)l zTgB}XT7}J8{a!+vHME?44@-rgXovLFr0#`*qFa#t74hS67yE^J&6FJ(yh;_E4m(d~ zIVL$Fr`S^lGWoU{fQHd}KfX#oHU6pp^s%K%GS&?4+;veFE8TSKJ9P8oPGxb6b=r`| z4({*9#3_Vkd{KJINMqe7*Urs)PL0ocQT#p{RwRpC%TZEg#jx4Heicz8M0pSn4<8ChTxEpeKa zubfg}x7YHTDsvo{?`d9C{i8IDg)!gvC2S;KO_7pA=VupoB4;eY(^4tU+ehKEU9Ya4 zL%y(q%jJoh@obr4NohuU`=@_b26;-$BdzL(z_ao z0KX!Vy8c-Ufg4q{{v~Y_JkUJyb-p;5KN?*_t@!3p?_VRP?7d+>$Ke!mVz`^LJoNw` zR8*SaX8odLYL!`U|D?s*tm9T*6zj1t%P+TqPbGT7Ua|Fu3*YHR(i<-64_?l(0p)Ux zT8>i}$*EQ-9^H3nPr%6h^2)tA>Uh|g^(P!4{w2U}v+sNeHdi}$ah=KE%>O&m^uNr> ze?MNP-`fE!Ax2+&+J^nBGg^SM!i-Ew{I(_Gs)mX|i#f}U)wLO-%s;8E}tYOR-;*cZHl@6d=hJsHkU7Q~% zTER&^_*@iMn;dlbt7s6>0U=fV-#QWTk3%Edtn_O#ju#C79uhTq;04aNWY1|v*gY8X zM=dw#JGb{Nc`Q0q`~0zOt2+9pjuRp|`S?->(5M-}?e^UN)@IiLX~wooZ{2cZQOWU%U+M4Uy124#9u^L1hV*()8&aVc&_e;u8I$%XVG-I zf#IooQ?=s|`_*C?WblF1-Q0l9QkQd8j(3acLF4e>H~xKX`(JLD_Jrd0W2E2R#wDAd zZ$+P;%=D)?=w}vz2`V{1&kniRknwl2h+AE`3<76kKwQ1!vYunx`9lsb zl&@Z`0>THk;(NLc#^_384g_^!0c|<&4KTCLT|WrdR~M`Ln7Ikj;K#u1{R5i2eY6_b zfDCho1zWCxZt@PsDBt(qI<9 z-6uD%GxJAIWHl z3n8N&tS0rDldTGP1gU__*H}S|Ky0%|o<+u%K^BUs3V?RV`zYzxEsbQ}naPzQL}8!% zquu6Pb)iPdrZuP+zOk8tR-=5n+|A=~DEVlXq^L8?Fdxgsq)8aNu)~4|7^ab8gHBI& z6B{uqQfgepe{g|qbK6xzNymR%>h2_@TtWnR{9fjc7>64Xt|z|V?Ek5obCf#EGFtxf zf;?Rj zvGW$R?YK4E*MJ79#xxuT3b>@vu0;(sNTT>`0w$wTE=&&e|m%5PaMgt;s3;wgw*mdG9rHR%5%>%DSJmn7=hnb7`O1kE+EM2Vl z9)))~YLgq}Nc-nI>w3JHUC6rhSDD3PQ7{e^4ugolb}cgnr$+)2DaFD2Bg2OKfm9n`>yGJfyt7wobRO32;yV{U+0 z6j|0`{--Ct9Cu-qRU=^U++K)A8gPlgoW~Me6Ht0 z&Xyfs3Dck{XO~=&$3YjiEkBn9Ty&O0tCd1fg0=0b#nH(VXGQXU_A1e(vk4$KX-$gq z!cPHGnI@Q-k<(wK7aaZq^0qXZDP^%j-=R{RTBg`)^8Jl><%LFtrIRH_k4KgjM0T>} zxhfmZ@q$!Rp=)ojHY?6(akX+anv(o5VxgZ}>gluMZ(@GVzOmh-w>x(Vx^1U5c$Wq< zW>BTGRiVd~(O{p#B)RSx-e7?K6={Z$P@aRNICZtvt7m%|J&d8J{YLrMih3*U#{~ee z9$bI7WfQOilDJJSh2Q$!d!y1$(;_h2{@5lSAoFm@ZQc`+TmiyKjMXbqUwBHLya6oB zz!t@Zaw~7*yN_51i6|1B*Do^TNq}(6=7XlqR9GC4vydBF_E1YoQ0uVx zwgQ8#J6#9i6jZFZlj`hd2Vpo2qzNMmb1&YU3wPki@vHt1QfByj`v=~6g9I3jK`Bc0 z90E)&mH3EK`pcuRlXZ^%U`nZtfN!a8=nVh19OvHM{{Z$4{4K+pO{U#MfO!&ibIBnp zc4Dm?iF=XuoZ=3n&(8PLGJQxgaC_1Jz_JTBc9@}v`&Fq<{RwxPqQ4nTiHu9+DSwy9 z-m;YCdz!@Qa?+D(exjW2b8)~by5jWOytXn;N}Oc>lhncAcHb$`>Y*KC0d(_mWhz+w zg+8Ey3m`etll2bzsB?!f-AhYcqWyBSJ6h_p>KY{C(b1_ru>!(m1H_+OuNjaS;j>+P zwUmcxhwHK6l%dMT$uz;VZzq#O?Yw~hH+(noJEVQ>)>^>d*0Zr$R1@7%8^Te_Z#_zI zG|Bc)DcZ)f4i{vN@JHpJGu})+Xmz0 z-bT|uB~BcNe>q&2rf2wLXKW|BGZxVR58$Z28Z~x<(mqp!W6`rPU>7*EGol6BxK7dZ zH)5#gsGSKXU4v@g97-J;s%&KgoB%SE|Mog+!#1q^<~R%-N5LfVl}V2pa?x&U4`-B^ z-o(D>f?j)jA*7&5N6RWxIf=>n#z!|27w!U|HWaSbK?u$hslTB)H*fe_4%BErg)Psq z3SYQBUx^C(!vFzrN8(X&7PII(b~DNG)tfW^uYNDK9rCm*S59}#c8vocZ{L@AjlDK5 zuaXn83&Z-I6(r_6TlQU8AuK$ehhkb|MScAbeNmmnpag0E>!b61hA~YojNq8q>w{k* zUf0K z$DW-I`OHmLUZ7vaKlCyA+O`Fsrhc$)oRf?c^z*j&n} zA!=p^(QVPFcQoRb`?IHLwE4GMu|4MnZyLHe>UvxAn)7<45U}PwTi>5$i+aX9pd~hj zdYmm#w|H=mERVSF%}v-$NqFq-^d_<^s~xVqYQsM)SniFX7nh{~ziedPKKhMlQF#2$8Yb(8hA9!s^-5PG%Z!Bs)v2SW=VQ_h-wP8O&#sUl2S?*vHr@C;#bQGUG{T= zKx`Kj+|wL1V{Jr_Zje(df>VN_z+w}i`?l!u!8F?}9j9Q+ywlaq={jNK?=n^aRfukO zIsGo*zv~d2gw`w@@`%nVCcp^*^33_na?pSVSd9Kl&@7S7rY&R~Or zu%P+8&nTuUcZb5)`@$)Si;SFB^}A0rHQ&IT4!P)rJwsbdKV1nq4o|Kt{#!(^{*7>Ab>ZTmzawsxt)ZbLW+*)18iQ{96k7 zrNV`(b@Xa+8Qh?~OI|4xlO=+-;GfLT;@BbFztepk2#!2PO4Gfv;GlA zK0WDQxzMV*RjJFGQ#uDdxX}eDQL_%gKG8`9ZF^`CZ*5rpDX?)SL-KrDUDGR|#K3Jr zPE8l_HM7jXUofaFJdk#elAvYk3P@`9D7y--;YewoE&K^kNdG8+b%&g=+e-qp6iCr! zCjbf2rlgd72t42vfxD3}QqI~-ojNu_)^#Zf!_x2?|HHT4MO8GI+6RS>1XQNXZFrAkEasXr4)AT0eXN!Mm8Kkm zwdq{Fg<)O%mj*a7-eOuijKeR3d7o{$TX^R8+q4GHAgx!H=GDPuL`Xy>u~{bL{QG^K5!?i#uMFloVg&uj z!;8osrh|P5I?n#>UxASH;Bd2pO?QKj+V?Bo%!zMjXK2Q?zk!eamBoU9vsL*w4&omz z*z-61%UVakZqrU)Bx)z-$bD}*{$6+3;i-hxkX=16Jp)P%Tj~v5m7EB^q3o6lY)W9O zUa;!+1^l~YThMHU>tR7mO+>~aUI_L1M_Tv+v=Mu=EwvGhIycGoId5(HUB>j&lvp(C zkwD%X5O|_ck+zCjR7niR;gF0SZr)0_Gv66+xcI&7&vf?+Vdv6C!f_A}6K^}8S#$}{ z=1RR{KBi+wM`m{ z$}7m<@t{U|Z=f1oZViQC*8O(=$K9z8?BibzKoD*qp-^!Huouo=S6BcWMxbdW0OWJvDrZ-rJKK5yL4I!w|tcMu5z$|)-hTw6Iq5T$bBDe zojHHCQvw={cn%p#bd1x2qjeYLa74ZnNw~pc#6^7JR07o4NT<9)2z(MYxtAfTAai~I z<;YY<{z1<0WwPaCFGeaYPogyMp{?-d!@lp@`ehWP16LubF&k7XZ$KR({!!aDa}#>+ zfLQt)^AQj;EtYCQE)<>vh9&-0#h!?t-Arppi$FHW%1C7*5f*$%h~mu2%#MW5|5G`r(>Bl8T9azFz`Qql<+MbclENEcBoZ12PRNC zD?I~o`q~n7paS(toD%M-Q`#~UMIlFov}X-*k3|n=>dI`Xu$yT1nTD4q7d>6Km96T5 z#GTC_^v9-JGD#}8~^-7!5o=DDJj4r`5O`6({%Gx9eYi^ASJt3Dl2|9;Ni#<15? z1CEccVISZy9*%d<5G@(@D>m>kpHuK z?=2JOB}KrfQVK8c9lZsb8GQ1^`R1CwB~* z-AZl@Z=VJe!?*;60#q`X9*lofiS_<_(xF8Dd9waEqpjki@vz=_ z2!IL&9OSoQ2d$WkMIYG-7Vo!mvtK{^4i}fV1Dc1bv2XpJsh1EO9-}i zVFmO8>L@yHOs~Dq|Fy-g4cU>A;n*s$b}_B4G879vP5d$<&GFBUyI(KGbaRA){qtoI zCBA9bOn1J+FsDM!U6=gsfdeC=I9asRsY3X5edSneZ%lZAz|fY?$`|Z^-iz&{e*H&+ z{=XR$`VSV{fn}wlMQ7M<&0FOt@@SN(#ZQ;3&n`b7!?N?Ogtnijv;u)CXKKs~79ccn zmxa0G!9R18IIF{NW*j!O0fjTG?qI>|g|@-<6J8L>GH?zH;#^!sq|#8&c1K`V`f0SJ z@s?lxPvfVR7zy5j!<#m!LL#5GW%L+Q>ZG{x{jvw#rCm}3DzY}8Gqf~;OBJ4BC=<2j zH-rSVOn2XEMFh1w>ejqjY3FVvLkAg2x=MY)roCyux%{I|tT;OtO{++Ky%?>cc>n5} z^uqykT}kxH)J^!%#9#wL?JT9Xarsn2EAh|PA~o(Z>;{OVAiMe9{og=(eS2t95h54O z`xU9%#$K$ak)TW}x^88I$2w&mOmsp{xtRfIn>5FkD5Y4hlc%W?*EYpj>|lVoqg*cYZ<>h70@lPQS zZEU_jNPVcckav55O)eto@3fP(vnM5A=jY!Fva(JqSBQhGth9sBTjZ_2Mgs;gPwX<2 z?^#w&;Dduo|0fhOP#LtKISB+; z=`Z22e&4}NA)xymIU_{1fX$uPIF|Vg*LC!EqNqmRdhbHBp4Hp_E`KWtmBp6zdEp}y zh|qr^j{aeK-r0-url=+wPp2!M0mmPkKpW zA_`!1MY!!t$Hhqj83LCz;cc@Hn9a(44X%7qsjc$`864hVMrVc|0aB$h2y17bixUss z7FM8)d_sg#-_M0Em~-CA#nnC*83&UDW97I7cMviqVoU)zJ_m~*Fg(fU{qbB(Qs&Q( z6;?ITsHJ-g{ylincCXKNUYJf84FAM9zdMj+uCOUd_mt+!5|FfTR#HMSOXVTzd7c{2 zyniGuxB~v}@Yxf&vLJ86m@##egFrsrfEix5B70B7@SjtCEQ*b#{8OTyQL0hFW3sa` zkSKYJ>txyQH$DD~cGqo+tLy72uwp7HzZeidokk(ugRozJQS{-t23$w~W3HJGO;i)v zmDs$B1tf02nzjvGc-@Xpc%Sr)HNbPOG5|w74zy050U;SU$gGPLoj-QC*btH*C{F|t z+ewT&53vI6kn}SU^+N$XRGZ|!*lH2^O`e(K4dMBA2>0_0{s&ox8~CGgU$%bx83?}h z6XpA~(XWauf9m2FMgjWena|m43E&FLQaDTVw)lL%Drj1Y7wr*rb7cd5o&9#P+JgH} zxwZ;FdOh~(^!UKi*HQn}F}knxkdUBFJosIPxB2q1@$;$e{#xTWK!_wQ%KN@reU{)I z97=Ap-m5e*1L}xtuNf27TYp5_4wB9cr39`0l9TnAcEv2z(Y~N$_o9}8hIReUbHZUU z8YM0?VZ2f=U+&yA)pXUQ)#1lv-MbfmAaEGuR1qiU{K<~mxneMBe(2U;eFnpJxA@6o z6$o#PdjQa&(r9|G*@h{*g%K!u-1qqF1MsKc3jRu?_XB80EdBYk!|iQqkcVW8S8&fEtd|K}eeRRnLxL5Pv)N4qx| zIVZAmJzFaNCr#a%LzgGu_MW}gY(w>2-2Mbc*Q#82Dd+wRQJS2C6u8mCi&1QVCmXFc z*MiS|?~O7hD=MsV90-F_3Ya=79MJo`JOY;vaG|vN8&@OS1Q_SvJ{OBIS2Oy-S^vv8TnHRUg2m_0(c$9Bfp@XpKqVb zFm+HEQ5pO;adbn7n0&mmn^LYXcb40M zS9QC^)|{aO^N#R3PC(r4# zH)+aY=-xEvcjK+$G$nUly?Qo3qrtz$1OOmmi$yY1(1zs}3R;f3>7a00*2I{;3-gY} zJAQWK(NPkS!J$IB>}LsbDuX6^L_{}{UYi98MolFOz4nYv(yYtP4DUD`jlL%X1>CDZ zZVgElfxWI=@BuSO2M>*FyaG9h;TO10)+c4|w*7E9Vw+}xsJd*DwKFtyKl%!mABs83 zU67W0gskL3rvZu8!`nM!F?hd3NYMOJ?edFq0wS-Vv|O3u9KwU@nGsg~ML}3vKbtbR zbMph2#M2iy@E4E)>s;K`>i&Y>NowDzLVWrHO*z{_Q%xd16B6beKgs^CSDBP6K9(Fw z84;0t#eq^4X{gl@^S3+U{>X|AX? zy~<$nOrp#2W!j@-l^$ACRZ2u6q~Bf7eUHVElCr9t26IAp`jCDxl$ycNRW~~@MoIq- zc5#Jq93)91M#BQ&--Cldl_Mh~qogdUfYsH*-CfpI6K!p6f=99C6Gtm;ieIh4ktzmu zT9rkLsr-?9v?S=3rlxz!LST$ob_6Ydg-YyB2TE;p(Poej9LG1S1gas`fE4sI$Ik=?sXvWh$#^PN1QzCcj&J%{E9hLviR z*r(Ibx_sSWW@P-Cy6#EM{Lq$Qd+j%CTUhZ*Z@SJ^~`eQheABt z%$5&Ui5TNtb8@}Z1iTOfO0uFQc#JBunPL|@$bh)@aiB+C@_eGxYwc$F%;FXJjcVh7 z7MDF&Uz63w4^<(@B`@d9)MQ@0+FV^htDQbqU5c?^OyHZ3mP(5P`SPl<%u*jL`b{wE z#meh-l^kL-9aRMaa3lb{-xQQH0e?w$f2NYQM@*ZBTTcV>Im7DaBI-hTpNi2OT$IcA zHCA9Kg;!7{|9l^tPfEn^FJ|;aC4O?c2yhqyzbs7K zfu8{hxZw9OD8zzwi*Se(2?g^_q0_A|@5OEaFeIXsEhLa`MpAb6Q2bjBV%ws9#da1; z_&G6Lbl@-PVP734qaZ}D?0-8${@?uZ(tq%kY$w*=@lWZ~tBs3$EtJ_kx>S7m(wtXq zX07|=&-miteW@}LQ4XInl#>Ue=kIuSN&dbQ@JO4GHi^$r!o{qf0Pzz3;yI}^)4oL= z^x-%NZ8?|}4uqHF?u>@w#XAePno%;}2Dae`sNi&a@n+*iAx0f?_0`! zGoZffoi-;`etTK0==S7!$)D6~C`YNI;gX7euU5jyGyNtCjh*GHq-P}C0bza)&=$)|S0z#;v}#ZCGo}GCCqqszG|eG9-Y(*x7x{7p zMO*;tMQnGEL;EfqBo1JK!5bdeNOjdP@M42Qp==20uJX=ZhtA37?H;#KRBX9@PzaJtV@C|o*rbc4k zf`-@DY%IT1-Sv9x%JTe}wq&Y+#>NVIaj-J7l;>esot;M2fr#PZ%LQ+d-?>vjFKid# z%GLYYWL=Y6`(xFo9^@JrF`o!zYm2u#VQcBc9%v*T*BDQDa_8KyfUHsN&xyl5vl^=d zxjp6-Njxy_o!MN|$BEsyty?|EnBT{G zMHcUWmyuOBgTA|rEF7YYZXkJ1LwW_0hUcq4ocvRMO@0RReivvx{|Gsj!pm)8$uHb! z+8qv7-}=Cov+`KVVl9K;`(qz7pT%=$R^z)o##OQh&lw3c%CwRL%o=Gp*mORAq*B_T z?mgY){=)G{^-&~vce3e>f!#x(mvds(rrqt|Z8ggxGTu!SvKiGn-QzW=?N@cJ{)}zB0$!y~g)_rgYF)3i zohcLGXUcLLSa*<7Ic|NQC7rR|9yQFXJP})SQq#N~CXHIXbI|7FZ@LGfMn;C>iQqfZ zAC|GczNKN$vsmLx3*{JLaad!M3ppb*lT4$aAbp@LY`)TXI9XTb^xTvuaW|18Mjc42 zS!nrHM*k9D-D-l3P3*`2dizLJ)5Y?vC|aZF1D(3_2Rl(=KN32x(HG3>p9nc&cg8^` z9#cgl2iqUJ+wo_5$z%WEshIh{?e3O%vs|COy~ddLsc_Kktf}sqEAFtLe?A(e}9uq zH>q=^(dc&|8wUc?dx(&Ij~Zk@-?rxO>-K(1=vx*{O=%?(A+>dJaMe^opMx(=W^=YZ zQn)p8NZI$1LZ0mM?#<1Ox!}}8<$KDf-MZS^heYaH0h7RcT++^3hTE$Thlnt=!#RB` zH|c2?eWm$T_h)srA5Dwy5h_g`<7`ZXtl%nQ>{oMtZ+hnV+l$u!O&fo|Wk?<0|6a5F zfAi+Jo|{U09E4}o*6i-COZ8*y(YT5hiwgu;{_@BOdH-%SPoGGHZmPd8YC?-53Rn*0 zcJz~YGi@-)SFKQ4Nrz))M6lfqy>s&T^ju2WZnnamzE&wF7B!@p%=K;{@oB0YTI9>x zrNdoyX34Fx)PXl;DZHGt#H5KLKEvOv2v#j{bM|Ir=*M1+fv;|b*XrGp2Vr9gwRp|z zyGZHu7XSKRgp%(ia_`&KF0QTJFrPo|vbvl7JI&kIs#vAPpNnOzKm_}yb`xd#`gQkC zaSq)Bu*a||s(}EB>tuX6ycW|Q+9i)VisL6l2P{IPoiCD@n>h97DWB&ah6WkUW$_(-Pk567Ufu9n5O0cq zrgEs6R7w%W+`*?;tZneCKIh7CUHfI5bQS@|ozqCCi}YGw1_xaC)a3M!J2=&gCSQ@= zkn!c}H>mvf`LuWaf(6Ri1%ZteSt?}=0@s{J#Ee5Qx{LDeXQ$vOIwixj@&v60BY)}* z{-Lw&F?q>(y3ZS)q%?f8cM3R^K4TO9_$KGV3rsZH{J|=RvXbz`} zD|d*n_hsk{|NPKZyd{|I-E{lR`*K_+&0=Lr(KGj#`;g^w6`>HP+VqjeD~}!Ig#0uN z3XKQCUibfO+3{MOsN>&8_Z_)b1!LET@k)r&2ybSH5{PfdTTmI$4{nkZWD>H(5`JKh zd2Y-uFJr6v>u%xt*K$_Xdv2G#7JAi?$H^wvFuN->!71?pv;#*lBK<3zkJvE31%(h; z9nC*`fN+{dmo|}3UEe*kQce!N|AGpN?0uTldL}*1v)7w#F6tg0%6Q|@^ANMzKZsj~ zF9NZ*0VV|t=(8aX#%_PEIHU3)f3joTPlT4oLxKl$!Ii?iuW)R4(Z!binNy~XdJ&J?H%)Ce4UjB$MJ*vG(sND3(202f)xhw#mUcZRo~wOOypGT9TYO54rw zpo15gq(S-e9WT2T*^3jZ}Y%XSPUkk`7 z#UwosH>lU-CPvZ4ZwBrs#Y(kXn6um`>cfZLoN)M~FsM()KM%`uq2}fVb2y;pcSac8 za!IlWPkR!c_$%?2=;@aAF&^6dxBIK&KqhGR^B~qKy9wo`8F5YQJk2lJ>*JMgT<+%~-Oijy7lmraDmd~$ zX?ADv(URy7<=4%AS1(F?m}`MUjI;Zr$E_fRR_*5Z;Z;Toq-KaW+D z_IDpr49>(X?H6HCF#W}dXfNAZns8f~Rn&f86M{YmwX|e#-rg9axVyLY3tonYVLCjU zZH1Wiev4H_e-?MfF6pj$Yo?fjCJRx|y^HIxA`|r(Vy4SXT=Bt{lYYCO_vd1`|MDijUXQb_}n%p2~Vrb=ISBv>}rdV($r{1;l08$!YX_W>@v@)cGU~bMjmcL zguF%`$~Qpla_hcFVEG9k1G zFT?Od&qoB$uAiZHlWQD<510?Izfb{ z0VACOk-ImUHQri34c;B{M9qY+w>Ph+0SR6;&UPawORLMJBLKIQ5<{<^DrMh9t~{{+ z9&h2LnG02LiW?0GYS@`PH}hBO{auwW-ycc%yu023t_-yB@7Wxi;fq4P3Sl+MwX$Lu z#q+i;2>b;?YYm$G@5sD2T@?e`54@ABuS;L}UQ|m%1j5m0YBW1bP1N4c*Vp?A#8!`@ z=+YlE$e-g>ECAQy2G8X0=_KA)32OEl$zby(4xUpHx#h_FneD|4^891jVXUZ#je&az zLd2J;?6Pg^`L#ohNp9L;>^X9cfURpM7Y4$3n==@akpslJo5lNuWpTQ++z$$z>$`8? z*ycz&Mk6_F&_{KQC0OY?Gh)2*s~n*~Y@$bnsr5C}o?7$6KO^cN@Q^x-eA&JuY26#X zhXhg^WT_i`1O1CqkKMVnlB)~f%kzcb5BJyU&c%rkVfbI{9B!`b~5!eBB0EULy;=FE$@cZHT ziL*jf-i)`RYEe=N2?a@oTP7sDi3-B(AX@dc7=il>*#tIx;x5U*sd;bW-=XS$T{LyJ#=%%V9X?eQ9oV%4lF>V3 z0|LL4(k7D^Ii?=Jm6uz7+R>Kdj$lQ<^!W|r4%U@{E?ut6+HfHB?{u%F+rVi$=Er&D zV;HBax`{P_rDv+q0u5ED4xkq@ZhSXRUd~38H`GSs^fo76ZX-aM(AF)egS9&|4~cnw z%B4(0^!;N&+lbmLwtG3{C$e|j)}9fp)k8w1}nQMYOQ_~P^TOMkpyb$a_Vh^e1x zThx%*Sa4C3>-MhFy?6%Z#wg$%kuEhTEUkKGR9xKWT$u)hw z(CD04rBFcVxFRGs)?2k^Gch`G(uUHTfE=(6S*y>LSs_;ZqvYH+j!iuR5*9Ux#u72; zbJ1k+Apv82CXN~O(PQ8wb|u@kM#F2$ z->*Nmb;x|`2*losTd)T9N_;nKx8yG&rew_ZyE>)Mn4knl6@E`?FCwbH%Sf|&`Kh+~ zd~YI!S3g>g4a4;cCwrT05}-35T-QyV0WGFv@nU^#O(vBOJ@9i*Pv!<#(J~ctXsOZ= zBh4|z5<0xA&cRu>)+sdF=U8%(Q}}&XQK{X29KQFFNK)`%5n?m_V`8k%IE;e103f8_ zdOMt%`cR@HTqnUr5j5Q47CBPBp-gf&Yi_g;HV_*0n&1C77Rmp^TmS5pzl8+Ow=s)# zcJlKM26%HZYu)nSF1Qs_c&68aDL+`4;LCQ)US&aPI|W(9ifWl8JtvElwoqZwxiI^% zLo>@yc}H);J#Q?=U+Y4@WD)(;sgkukcW6+NzSmiXBv5{7esRn0eKt=MGoHrGy8j=b zi!s2{BR>vW)sYH7{IQNrbH*Ev{o3{J8}7N@M-wXlVF?|Fn@eZ*Ucz(ABQTZUyNDzY zYx>PQbF=w<+l>7Jc)F%nrcb8 zN+g<%w=dB%*^$j3fWKOl(I8yS>2v=?EK$-a=hTJb@>jJEcd z`}OtE=2=mg=@!B5TGUi52yFjMbHGY7*I`ivNmj%0_8M6;b_>Ej)IsLHZwV#>-Xo7G z{*d;bkeEEda6pf84usLJFeq&Bo*+496Bb{!Jh%Px1E^bT{4&Ac@;;Dxxas#;J|<5! z{}8c6OtdsT-<}~#Xq}U2QpWc#;iE9KKGC`%EI_Kw?v4Z<=oL;mOJWK>+$C1cn<09S zV7Jo)v0_F_zwf#B(siqE7Ef`+!4u+#^z`pn#9j6rj-}`X{2H_6 z3AR1N7G!=60jAA_TKn6RGr^iCMHB*8%Z>kc7XTME}YTazAaxIazXkl%ox20xJ|2m*JL*?;g0@Q@xRQKdp5j`MVF8 zXd;zy`CS-)&i7Jrvb|i~>rnJ#x>d@rcZvz`t{ZP)*F5u|(aBTsZzU&^TK2!6S1ZmB ziv>*`4O!WoU76KRAsTgLukZi)p(Hd8t@}}y1AFl2l=Hp!lAx0`{<4V`ft9S|xGvE; z=tPGzft}j!!gLO7Se=w4r22_r2Qie31NFB=r?>g2{p$Au!iu1XjU~PGhV^F#8AllmdIect>FdoA)uJI19RWEK3?Sy zc}y^Ga$K|Ll{s z@!r?sAlD*(YAxt-AV%M{y)pOgF`o2o$=Ocl1I-0MU@+N)!?B{>p%chm*d*|%W!rd` z!&RcLgdm^CgeJIm%x_^DYR^vmcKcxgds)#lxh_o4J#-R z=Eiz{xOYrW^s&nO%#zWfImn)kpjk--uRNHD{6Xs-`dlasiy6p~d1JG(GH)Y9Z1nz{ z!gbVWwzwUE&cu-e9>$IwRs4mKnw95Dmc|CU9VNmExSovxS`*+8{Rth!eFe^`6Vs3-%k-J1q! z6zPyqKvKE~L_nn!kQPLwL>RhZ2&F?5q(cx8DW$u+Lpo;YA%_@Z24?2H{h#Mu>-l!x z_dMqtAAq&ES+noG_jO&r{VNw^@&bIN?*6QB3v2~?#u~xMc({%()=uqB{_}LB!8^e5 zkaMM7YrpNU$&Xa&XF{Y#c@UvbG3wR8hiu};@8Vt_{O!l9En3+JJR!N6nVCXUruBv; z2fCuPyo~rVRW9c-Tj^Uy>&LwCFA}w=eXWdF^|FOmc=zU~5oN8t5`I zP^JwaiPFloOXn&rYGc^R)3bRFx9}Pp<>2nxB-_Osk({>}#EZOt9i0o}&9?)fuuW?U z5jI*T6@ZOn{JDLt;88eMdVn*v(P$p(z3T)Yde(MNw?_r0xwZFl_k-U+is*o@+YkRI zDL(eT$}*a{dOaL{E@#nKzj4GFwLVIp+@4%NAbxI;dYUm;rf@)i?=u%}pR&~6RY#{j zpIabK6(U2j=+PLUFHUmI(||i)`d;(bN9NFW9=96a{FYr;6=G@3F)m~%5@7i&rTVjp zalX&(s_GC;`mr%Gm?Z2GVxMpf8b!$`>izulBio1UNa#==&Q>!Il!|EZjTxhu$Xyf3 zyp+6!2I4<>N0djJ$IAG~OR5HKN7FmE(8cRWomHG;zxPDrXD52MOX~aYFz!wE`DP11 z6gO^lvrEQ!jt4ybt<>IOrjh5Z)rl$n$-wjMSR*=WiaazP?$hmFk z(|Py0nx84^2-hxegMySL6^Mue^30;C$}y2mVAaKq8_}H?cyhaUaK$@B^W#a1pwZNx zloRsnk81W1`)mO2_OkTb#n*lSXMxfvk8DsSiOcOBj$Pex*gR(Y!l%dKMi4RgFVHpJ zf;zL=dVwe7Bg+)eEDpWW=et5v4oDBgOB4M1A=C*)Il zta0D}$WGJIY@z*)Tbh?kp3hj6IBaU$OwfdEs#XYzc>hb(bX~m z$J6}kvQ(k8vgxo<$r2d%ED;we-_h~vmthh2r`Q*k3Gl=0l}tq?rJhR_`6IDC7$qfQ zsUAS;t8)qpQKZT7%03OGc|imISm9FQa9NRU_~R)Z{VflAfmN1hEZ{UStjk(q%|3{Q z!!;%>zS+bgSlI3o9e3wf+mA&-WjT62MuIRT3$kOw+U@TrINSFX{mzuUQjcLG>)s6| z*>{nV)e){2wC^QlPmc$`&Y95Luq50+?wE7{bHiy!?+hCJkUWZ*MoQsIyKcpNpkI(UfbLM?lDj(h!mzyK61iAuFXa%<)~TYzMOei!pv-i6cX z1t|ptyO@m{t3^beRg`>|u-DDy_H9YoCgZkhLUR5xXs-LfUFWKCn{|gvV1Ys~0X(IZ z!$w3yy-8?cdQnyXU#fX$NvH%NoRf`BXzV-^#nko|MZWmk%_eTn4A??3L53OnLjqsN z8o#!8@_W4nEOG8`;+mA%r7HjDdbu(&P~AFiYDexe2@8ayeEX*r0=%E6PhoR*m8kLL zHs+W;V^MgHzMO`qc>GJP0W#$~A%RBS%|8H~@FWio(8W{gT$YMts(}G|IR0!PqC~&( z<>k>z`h9DSkE46O|47Am*$DT3gF)imFn&DRERq^~5tYTkuY9|e?YM6X#%=Mpkcipx zOaa;z!0o~qXt(*~_cspqfBFQ(J8i?~sZt|P#Q zQz_3taW+A42TmQpU792;nzAV!f}6WS-B!VAQBLlR!gLVZ!q14AV2S>|xw9;)kVCBI zz#17c*ZTu2d$V8ql-M$~=mqgm_F_05np7MPnn_iK91OQAyu?*_)HyQ^ah%kmF*nQw}##`_Fr+}y8tMJN6_R^ z$gd|M>rhByHu15==^1{Mob~z>vsQnq*9{%*RGD5!f1~A3M!B{>0vP-gsvTXI`o*=; zn)1wfdLfg~@8>Gi3!kTO`(8DB2_`3?IBdWntvZ(16IZ4x5Tu}a5oPVWO8MN=_(zmx zY@pyUd9Newov{<}9y1R%rt@#EiNM6+SG}H3qA2?V5t+-PzJKmE$5_gJ4P>pj3N{YFB~reej)Z3FDIqqC_uQ%47umNIqOE@#f3 zB9B%gVYD6ZeLIldX_K?-OlS2d)j?p!fSX^`T{Rs7YV_If$kFad>U7@aZjRr-j7nV| z#tKMew?=jO#Z1z}!G_`d0T&07H`j=tz^dmUxqBL!DN*m41r(ozV5@-3qr!);O653U za?h=R+C2UNYh0OTG7*%T}~W; zEUmMiWRE|3yxa`zcQ^&jMuBLik<@H#w-g@R1JC`75?Ol_1;F+AH87FAmO){Zui8(< zdl4pOtVo44{)}@17Kq6I)`|b0*GRs}KDX~ro+aF# zqsFKO*w;;#vLrOBMt>>3jq^1&9ANBN26OQ}5v$xZFg^~-KT$8%Vj zKLnUnFK1twDe%@?LLENf-PhiG9$;Tn(`&g3zBuuucRVbi{; z0B@m!*CaV_u8!9v0rze`O#^q_txR#-he4zr)c zXtKLFfI7hEtQ3Apr-ZWOi|%f0@T3jC9kF2XYhq<~<51~dI6TuU; zbS;`UXgJwCzdF7gEd18Os)pRvZxD~m$yk0p{h5L@jzcNXR{lYXgJU$nYl6+aCQ67pv#VJmq|TO@;UCHw6UT@}J~GObm&LH9k(pAHRt4 zch!q?GUv6``I=DmL)X6f#e+xVC|Kq^6@g;z@_hkY*vXWHVs1vicEKN}$KwZuoXa4dyr9K3d*CY4)P~l+ zh&`(0X?587BF3e(nRL??CXl6y?E#EOWhKi3_s6r-_KzOP2CsRORjyUkiPCKwFL=|p}2@U z53-1mM>DYir(dtp!-;Vy%8(+_15aR*lwE#Fv17K-V9l}_f!YTg}bdYW)D!SyY83MyQ6$Jx3lq);nu z{^(^O7kQj=}&8(4%Mg7D!9RQ`;X{PKMu&R=Hb_o!h^{;8<(}vy-@lWLTT#hS5Vtn5HrJ&id zyFr&8(fu`HT&lT?tORrrO{02HNS7=GbIw@ngj4+x8Ryk(OpLZs1@`Bgk+Xit+O>ux zk=9783jJLuHLC_75zH*zd)f9_UH+Y$iQC@ht)XwinI$VgO#YjosA9hoLe^~;2ZRV>pxSl&ubl_gyPrQ=B{$Cr=KIOdjOOVIhF{)RP?k&j^J~6+qDZtI{gyR8;fGs z2u=sA`fIEzB|NUt&lbg68rnWqapDHw1QRMD_}A)z2^v+9YB}R-L3`i*nd(a}V>tA? zvcKObmnMH&`LY1#oqI)Kw)@D|dUl}>T=k8YM&m*G$ICYad z5tNu-Xuc{~np+4-KHwcYV{*8y1Tl5 z{&TRQs^s!=3l?1CM*4PC<^k!)X2l**bi>-!+8K$_|2F5$Mct7!AgSZG05i(r2+?kH ztE8*vqyafc~|q}dhaB4@nr z-xmGxJs;}qE(B`jue03QmRM@Y%^`opmX0I5DUH^`u#YOo^B6AabZS9AI}8^&)jsjl z`%SV@bc1HuZ5HJhrUp*Qs;K;uXtg%;O)X#9z3TSX5PL*t4p%gB$w9^{Nlc1$zG3~$8(glKE=|{WE#E^joqKa6z}AIi$df<1h62H_p@c^H7oas zQJ`1cGyjK?u>aOZ_b3np5)Dv8b)1M&*Y`5?I|8E9e3D33ds&FvNG0$~War;lQ0d}p zB(N0vNQ7bg^|JCHSd?aE^@B1M+=yxQRnXskZnU$Y8uE%0f_`StRAzI}D!E`&`oo*Z z?~#d2)^=fRUjEN)ABAEy#5g)xaS5udf!=_eI%|v?7Bz4HK+j>&tJC35f4{j3&O2e6 z%CTEx*|BKkk;_sA@UhgR~E+zx>WZvzAjz@Cx1* zvAU*GHum9q+>0N6VD$2EJtJo?{_mSDpktj{WiD6udtaGv=#^))x;J%^?&vgKQ2`PYXN&|d@9I~0r$ zdqQn$p;Q|9;}bvwF&z?uHt=v=F6ck7$SeuHAO5HlWXeu5k_#I5Oz@}60~M{dgDW|n zFtL4@c|UWjqg}$h?SsIp5`Fbbm&F=p=fxJ&O~8yRN7Ft71{Q|0%ja zUaL~_hyt^29^OsW+ygSh5a5B{R>aJbjK&{+SUCw#b++}2<-Q9T>iNu;fm@Y8y#>56 z$~1FB!45wQsTjEk3>l@aY+NWbiMxEAnq4O=t&ktfW7zSTgz?peEeg)1Yi8#CE2^o4 zXL*W474vhQd5`QZnoYu;g__wi#hJy)#-xy`ipzGN_icCX{tN+vs4x6TxZUnV1QGKlW(s9dR$4SZu6OwqgTdpc ziei$L}!jtKtqoYIqOBw<1G;&{P({ui!D)ZfyG`?~JO!VK-w%#C@I zFTBrW3EV9+08bT4EH7KgRG;9A(!^)BY@x=#b|rQU7_}$r{A=G!23!cO;otIjn{8h2 zY=d`Z@1-9%N_tM|TsB$01zaQbIa(fM>|JskUu``YS^J62ew^7FaQTAkf{b7I!36X_ zqj;lGX3XKwmj#aV_0SmjSb+BuSVK)sO~9sT#NS-;%Hi+t?>WG6wf|&qZ!}yYBcsd9 z*lxB`n~EQrGE7UWMNoDLkSemSum3Y_c6CNdkm6khdF?Jr6>(Xatz=T7H@L6JHGfJk z?oQkP{CVj6PRQq*QC_>v1m|z%mK4*&weCo6^v!JfQV+ssuHyAO-`=LBee*EZnM5Y@beVlgSu}qIi08)d_sacH?Ixkb z?9laFu|=+#&ZZNFY>z?Es^|(&O{iA)DJqJRx^2h9$9|S6XJYs zkG)p4()y;~(#NnN@Qhq|v98S56G5GAAr&{~T%&f;`0MgV*r-%LE7y(>kijmE-Hx`f zDA_iSY&N-cQ4r~;&X_r1i| zAaL-aOm+E){!vD&fK~W+r0!eB)`PVbvPJ1O`A@H>RrVxJwO*uPm(I~wpJnSB6i^5& zCeCk<|AneJyZM!kf%Q?eGJjZP(eo6uV{HH)N-sqF5SZIk3N#WENREdSe2s%(A@~RU zDjvc3x->2HOwqr8zsTqk%Bca|?BYbqPwjG@mg@C5S;RL5gD8Ld%Ib!vNU)6Y0SL6e zbCL35pVGwxc6WxR3bm%2aM+nvd!t7k4Rn#zb+EWmh;d+koN5Z z$#Q=V>Oi)W+f|(`Z43g&x*HEVe*Mq_gT@A==LwKjRlZ65{>*uxtAXKEk(iS$&Md-m zN{y?-CC_YjJeWdgki?<@_2Yxxl5)?wZNB-;t_%6D(xYt$)~gF^7BJfwg`q2mDfXawsy++pU5Y0a068chegLy zgmn}XoN=EXPqA{??iLXoJYe(sqO49=Wcq^c?xHe*YcY{K#Q7X9X!M>_ZAnK~OeMhi zO?mn(!|=rU26>t0P?Wn3`)uJ(ZNig8KdQI<&L7n5YsAtWLI-;ZY92n~*jAm@k8Cjs z|2e%EfB1wQG1tavH&y5briSOKjH1-5h{_V)z!kX~44?GhQUcm8%(1(U)Pj|20Q7R0`TmyE~w@;ygUAI%H zv9L2>As`rUC)*6PtwbHvPK2`Zb|W-hjUfjYig}H836~h0pNagnCv3uiX1aUdW=nQsX0vKg%&MT zy&JW2PrfI}_TeHp(`c!#tXh0;dEFeVwZ@)bGcz$gHLbRt+lST=aa3I&%aP0_8FhE_ z$S%Ju`oFM00Ot_=0n97*WG1tvbBtk&a^YOE-a*8mRbh;|4=Gy~#PFH@O)^sTM0 zm3{`WIdD5A!eA~zRSy>#RLL`0S5t4I!>>ZERDjE-*$VrIJ8nPLVi`sE{G9TECtz3? z$KXnC{Wy|_)7trT=oIL6W101ds_~b8TNCbsdUu;zTC1xGKmGB?{I-V1Tw>g}M+UQc z9a?VyTvk31Jl;jkKlmnOseS9tefrT{F}<)iDJFNgjiD`m2FdnoK1c`}#TPVCPlxn5 zAJMvtKAO0Eq|D2)l9+!8n#ng$rAhntwe>OI^K|9ZH!&_yMKu|{8?Be$vHqFwN+b+s z+Li|H*Ip!?|F2XKrq#a##T+Y{U$eRepKK)~Z}m^BII=3cOuYq2_j}Z1`_EH-##2Un z7(8aNN0gP(rc$LRZr0a7(Da`E)s|no0MYq$<_E99iooW&GPz={YNcAfVKFMX(Zs`G zVSns^$vo5r8g~souq`tW#floeYOy&CIQaQyBuDxbxbaY;W8S<$Zgc&gI1%BJb(us_ z=kHfPO`_LuVm2oph4s!W++jahNE^oj2LM#VE(77FoX6(9ESWM@EmA5DwnMg>54#}4 z+V`)5__LP&*by=J$;!%5V5eu-iNX)JhL_SA79R1+4$%9aGvykK^#zga6zgQ_Hp`La z)^I}D^fWABo@T)jejxaOwNczfH*vgCnU5 zIFy?9gE}WdI~%)NmmiQMt@9M!bsFxM(w*ozSeoA4tT#5V@V!nNt)0ozq0! zM=o_B%I_m}pL`rXA93HK-Uc(yrLo1?fxC~bR%1{TpQ#*m=mQkYeS{|39@v<9{@rUR zcNp70S?9{U-HaduKrb_Cmd$1AnN-bKNy zqEv#vO!qkq%?2;x_kR6lRKgAG?m8$JvFXze#k$80?B)LPDU|nmPvJ_dOONLb z8OtF(ImXM0O>UJX-kT{OZo=9E4UU2b)5T$Zk+^1hY%pUFab6k4R;)>&eKvE8!#NOx zw4~Cc6VPwc@W7kMXuT`)y2%h630*im7Mn&;(e*|KDD@TVmYoubF@YGTXvG1CD4hD3OV1-(9#~ppDOS z*_fm*e8Wf{%A2;g;-!RCHHRzBG&Gk=9;`NbAT0UN?yog8Z&c1mW=F(L*blc(8~ zG@iC+##CtIO3Qd7)3yL$L(8~R^*-*f_4j(D6Gd_>5MJE?NSX;ndYKVFT>h=+hF<;J^V@f$o4Y3~ z(joC({C}LX`G=+HVf<%|vl#{IsTioenWmcH#CfsiJKKmv$FT?w{>bKud<6usLfq>f z93hmg2JGT5I5>q(GTf9x*67$x7em8I9jQod-0faBdrlJm38i2<3s+)ks#X>)ReUgk zt6!)dNC{`?qNQsHpt)8!o;?qoXj39xaLQ+dT&-!+b8zSmGT+Wp7^gNDwW`b7zQH!H zj-}!G0Nz2G$&I@qaUefeVA4SI5>$qIUon{<^oBr*CpAAo5+5 zqCbC4?ipnppxLUNKKith=M0)Fioy$ccaS#wRT)h6aK5* z>{o6H+X!q;jZ_E!;w=l=&Sj#!SN_(p@e?N!vY_GZ(a9^81zN;kt#FUDMXx>i!1iE{ z+=4jmZwKMRV=^0kiF2{8It1Rmbegxu9vavQ^B(|VFSE8VN9x9zT=Wta7Dt>SFMUP0qL{le#l(cw0%RAa0_0>?!N-LBh@hjt>RWM@hh zUsLH~{P{p4c}<1qI!cm-WyvEb7Dyx-{}gqxdtAWnxUs+^>D>R``Kg+@9Ch6yeVw0N z?!C~C9Y0FK0hi2SWuir={kt~1D@mWzeLf6tC}OMc#!lYhO)jswc&p1B@4+%vwJaT# zWl-_@C~?+`H4?YTS6k?;H8C`4n!FEbXr6s+&ch&_30HDXAo>tAVR>V}lrdXe&S|6M zcNN8P@@#t&6X5AP^|-0Ywq5#|^`c%JcdV5x)H%6*cIyh{clwUaS^Cy}?Vo;618%P9 zR&1}76@{`y#E629VO)>@o&mQ%_j9b?F51S0$3_AV;^ic_y6i(|qoIuZ6ouO9Us`|P z&wuhZhe&ZY=puyinKdOSSJo|znnU*K^#!8%MO$az;IaddeqrE4cpoGUFl7h+V`({E zipWE-VSoJM9DPZ`2nkfKTv_fppB0VPTtFeaK;0w|DF@CXd972BI|c^_*Z7~atfi0n z|KVL45atHO5`HL**-TPyT+-C7tp5S9dqEd{fio=&X&D)5^_&# zyLN?*B)hBq+KeSbggk;emouNbC( zhEQiwln(|4HjHG{MK!%HGkMfXneb?_7N;_wJXjBb@hTZ$XxSun*8p#!Y}q5$a@|nuBuK`W^=$B~Ooq{H7`P3aK|%=!KRjBh z=hTt*4OHI(p3+Z-06nQiI`38eItxGG$C2ym6eWOJuc+yQ)ALQUv+HE8tK-yEikx>{L%T6ifxvOs$Yg}Ct2Ws zi2C}^{^4F5KM{%s%CfKqn4)14<_1uDlOSY7dS9irIis;9f`BO_`Vh$xjO5-(dskK zBsU7;aM4k?7_1XR`Zpt65~gHOy7qctjO_#6#pcPKNoqtnYc|=vE^&fAIq^V}lv2al z(p4iMu(n^4T;i)01lrJAA1sLUJny(IU%M9&LwVuRAf$p$k8Rg#bUOb|bnA{fxEmT< zN{ajOb+|o2T7%pN3@C1ybMM>?(p( z+hi~vt5hvc){`G;DNQH`E{B>6asZ}5>kL$axYUX1cg}Znd6sdz`knYlGL{7h_Vos2e?k=+kWA{Ay#F&`O z;=xhR%*@1m;h$Mx5^Cq-{-igiFsQ`ao=FMsoi2iUs7ZOMhpUXH&sO5`yCueK0B zi;RHEatE*qE8f)Yu8)~qR!xKD;a1glRAzqy{Up=v#xm4bnlGb_L?~bu?=VeX5BP|x z{uNP(!Q~Z~<({Nt;S-<;z3>OLes?#wM>BwzG_pv$7UZj5Snw3V&k5{*k-)7AuH6X$ z+dsx}ww8=j zz$w|!;*Z`D#=h^Nk%2uSUiFQ)BgVM#aQX{AY3I^3hu^9UYA|xQBP6BHs}$bJ7dEfc zU-3UjiZpPAOOTgJIZh>GH#Q>vFSW9y#Ovf}`_YU~T;PBg)!}T!Ore)=eCKEo^Y;V! zz7K$cPt%}<=DKZd+m|`O=~1owvgGBG9iB^6Njg9exft>+ZFurarBywt%3~rZ;J1CD zpZdd{$!tt)YqCJ|TruqCRmq3QkrNjfxE-V6TW?|J9Xx)DnMHWO)UFjGJ+9a<0F!FW z1F`{=7GJl8tOu@QTrJ%wabT~{iTISj3DV8wNTBG8Lxs|Q&}EVR0zk|j^`z-COg^XX zlg+$*&2q2XKjM;u(1m0I4|{N|D^Hnw|Dshhkt2@tKCSJ}Sk8ttp?Z_<;o{%(jS6n6 z?Vq@iP&W8U%eQ)r`fs5S?5#VFP*VDKfTPftKU(s1$x7#%Ggn;isy=Gq)aS9tbhdfw zf@8Oh`*2#KzW>#PLi8vCaK^|$#xA?S;s=nVYtSZ^nBOf%Qa7_bj{Km%^*1Z!wbjO( z%B0PqeV=F9C$`$>U44q;?G&#;HcNo>mF3OrHr`CZ=ynUuH<`sulyR!j9SiT^$~d4d-Ue&yw@_ zf_nv#?+JZRcWknd`5iAy>K?p~hr)(b`zsZ-GFvSQA`nZ04!4br9@aZ#F;v0%GxJUK z7=0==YPAG++ls9TsnGA0zkIp{7=klU&!gP(W%n8@aq8&H9!n(c#&-(4-&6%#Bg_Hm zmM)p$XJ$!KiCi!3O=3gNY%Q1EUW(!cJ^JJfn(S+nu6cGZ>-PN6q+!DS?FsZ-&P`p1 z4ems4WOcd&cz9{ZR;h0B*Atl_p-BVJNwlMlhX9L5(m~~TJheMVH``Sp$D=>U9c`#jEuciYG#F}4GB(v|w*gWsK`?FpM#l%`U zUM*{!Ar1?Gq_cECdGPP0z1B-xgX!6%X}aZmT_>6^UVJVompTK4^XUY^GZ}vv0rU|&RPbgu{=6D zBPms34>M)R&6doPA)#hc0n!d4vD)T<`)mkvefbg~1ZHSa9+5ut4?h<^WbT{y;&1>+Qj6t%@TN(>5T*8(LU zzt#+f%np2pvBTxsNA0K%Cc|zq(>fPwKS41f_G86h>K{!sgi`Q_&9P~V`=g7CK3GonzEAA+`_Hpcf0p6ZD z>d(wJ&cl`B_%-6$1g`Fku=OEMaHp}DtmrB|&|y(`he46H*MRW%Y+y6kQU3W&P$+P` zB+p9jszAbNwTyW*%dwIa^3myzEjX1RoRliYEmGt7k1F#9^x4<@j6#0Bf0TNATdBV} zU9x0oXs9sfH8}jJO+Ji&OK>%r;ZSRY$6sJ>HuPoIz|(Kw_j}iOvaiY8#{6FFT_nX} z4jcnmU)mAQohM|~*Vj@BET!##}&(N&X+vQB3Innx*e_c%}IF6f74U` zM)cPfTbfZ3l~b?TI|UmS+o^Y;F{fwF!9j|XV|5w^<~7sXT~vc#H4}HaG;8N@>TYPP z(pvO$-E-*>th?1;BY|USep)tqeivlD5qBHaPm@y*s!D@+;GMo#FB7MV{Y;Oo`sPC>J^ER9Ln? z~eM; z{_fjDhxCj6;G@5TciaWg4A4jlMiE->6-{wZjzLRH1)trAYX=^`}tg?e}jg`Fi)GE1~ci>)m9+`7hx zfg~jj6_$XN_Tu3m`Ya%lk~N|C$m@a;BDqwoaBsV4K-PlTaC z*BA1C>7kruto@hbwxcvl1yn!C|7S?(|I(?CztHkM$=7K3Q{~*S65gE zzCjSevQ_rflh`0#>I{Y@q<))jA{uNCq)Fa%egl0q-t|Ve{rad6+gtV9yw)7|z5kH_ zV}~ zB-ai8R+N?T4y=qpYeXSB()|r}ad5t&NnNKODT942Ghd%N;c8GHsIvm~|6dlsD~kuS zy=`UvaWa(oOiPytFgE4gRrXy6yz0Xgj8u9>*+?>p5fRaA+$n-0@O-&|aIF@0oCS z^V+OO_#}NqYL~iGzOG+?*hh&yr)nYPf0*8uQ#InuU4|(>=wq!m7 zH;o}mn457utT4=X0_5_ZmN}){qU~tEO{CW^dTUaXL&pk71r_sZ5FLYDUwuM>nZV7M zx@e4frui;A!dDZGMc}YNF-?ia)WR;7zkAWy z!FUST?Fi@zJ2buRthvqUM|S*IuH*YwH@!TSsn?o!D@%jdb-;U!uj}_;PvB-Mhkg2@ zfBR7HCg)k+`cp5`_<>0=@u3^vZ*OLbsMHIoo1Avj0pZB+?SF#bGj{hcJI%S3)v>;` z=wo(CjX9hjRWp3QmxA&-2maniX6dgCUC_?g(Mn!f{4A{-rmS7y{cn-m21`XOQbFFK z7(0DimqOfCvhxy;c5HdC%8781e9#8 z5>wl*?DSQw#79328+tYhy;(#i;wC{E3%fTciY+Iewv#>4Fl>AuU+_9#5%ebBr;rug z@@KqyAC0@524yQB+KOsH?zM*pzV@a-Yi5g%g2b?lxJ#OpOp3qK0ZJP1>)7^9Eqx1U zfN<^!b8Zs$OcdK?IWwh7f&mXh2b9nQ-3GYa<2$Ix3@gkIZcb^(K(J?JH5j`SEFH91 z9AqY(vHJ)MMSZfm0k#Z1`Q)sJvfLJE(mITBx$~nphqTRaDc!0 za@Rw7r`l;Ionr&FEs8Cy)B-PVu$F-^#W>HHovJJK&KmUzNJfnK|Mv6#Uo}DY7Qu-R zWZZwY+P&eh!gH;w7YSTd2G6|+W;^qpzyXgHV$AQ-xb+P=I38db9C^h$&4U69aSq8) z%r7rzr3+N?`9Onwf;YZ5pDFC-JUj9El(>EG`i`EmoCjyD$)i=uy|(KkEuU?f$fgW% z*70|mApW4^aL(m9s$1(1$a9g;a?_O8?&N%RX+&)!6K+Ue0!}Zub|h;BaGf3OAKZrO zrYhDe_G#UJjk-}3H(2^=v@3yK*DFd4z}jcmbh|5hkOdxKt)3#TI#H`p9}?E=T)5#N ziJ4F%MV})J^ibtZjOWooV+lq%2)l~}V@GLrGPf0#yxO~Z8KYQPF^iSh_rV1t3(&kr z?p%=FeeCHvXBP9=eOJx4qxK7@cIo!*7RMh!%bREP{c^XK9%L>Tj= z+u`G)Vw&IdO#~&aPphO}R+i68Bf@rGHX7G|JXt!*ICc2Ea7Q$MSfA6w&*0mzhiP^F>%{nAPFs6(o3~cNU=A(KL#9ax zWVwpt`new@F3r@ueojXsay~V+ZhWe){k8Yj1cdqwybYW2#}+wloTk*&w&jqpW;%XG zpzHR(5LRE};O5gjh(JWe%mJ?o3{I?!@BqnRsv#G8)BTW}euV6mf7>kdbhduGnIPEN z|DqbC92pBKC{+MHfW0Vc(|=E4v9?qYg4%Ca#tcJHm3!MgHj2B-sGj~)+_y!XTdhY&$LOD^2*&zakI4ijetX+_HX`$N4%%#HuX|_%yF3x1Chpq|p0_wtAj)Jsr6D zL5ksQz+IlwoGO3kSvV|WI3Zj_1Yq{3Q-c;#6PUc>mr@b~H+go=+s?s7GVQ3*-S#$& z@oBcI)#9rKK{)5#4PcdsrNOGA*F~|_yCdlmua{0z8Uzp zyH>b;93SSe{mkd$Ty6EWf>KC!@fi(dBZAtkxcLMJojuw}#XHd%$6eIpyjj{+yIoXq z4xCmV;H$Q|RPWk$$3(hg9PrL71_JM`?Zy>2N3Xu&oRc{FHyk?m zTlfDW zp7BHFy%rKub_AekzZ}<= zR#<*qcDfvWUj2H%PQk;vxqi36@IB%6pGwDMg&6PF!zyOnS0<$d5nn4aN$0l=g_#wY z-z^J_OD~JR$t0pY1QH|Vy=8LiT&9bh6{P!{DrbM6VVvYP zb3qjr&sb4B1ULy%RMsu@cv&HLs103IGZl6+wY{Z9@I2^pC3S3v)@RxI*eCefXKK8~ z`K0Yu2BU!GNGptZTu;<*P|N+^rNLP|MGlaen@lW%qQE#|j7D2%D5J;O&{5?IJF4Pa z<&_OYsCD!IVePx)no75J6;V_KY$K>ZbQnZLKn3X#5f!D11*C*13?Ma9LMItSMWtCN z(ov)hy+a@bML_A&f`kCl0)$Y~ApP#l=(*>d`+fHw{q8^f5O;R=yV|?f^Q?F69OWy$ ztcYHKvV|G}FDPUUl(IW;1KQ(ju^f1=|5NR-OV5~b?62T7d-e<+f8K!0ZAzj!xp?+l^Svjepx#x=~_GD9X z@LCi!&He@W{rnQi1!xgwvHD?XR&76wJqOFJD{rkn=`HmEOAv;xz9;k6>+~Ny{10-~ zZ#H~aP>>TQd$O`QkM|H{)*JenpiDXXigk9U4l|?nZ2%{#w64uwG_O93_qA>@p;ZV8&w-`}1J_=5;&G4lAG4CSubzPHKBa!;(8|L4es3oU>;1fZaL&IS7W9x0QGN zFmF+SpHTe>cb~|KXjGpY9E@6QX^0#QE^jDq&^qbPBzYzcNfZ{~s0UjJ6_R}?a;h@} zmr4nUX-w`lNrNTnVR>yMq2yDTm*m@ym4Ym6212VCic0HLOTA>;@--MzSVk*X#PAHq zQ>23kA#RHQd7A$(?r-?pk$L2WzDJt-!+m=ZuEDMD$mOfd;RT=VjhqnPg1Z#)k;=ByO-dn)Y?=IL?}o$ANJo$l|@vIJ8gZ+#k(w`BMj} z%Acqits~m#b$aw8HYIjDt-XJyKlN&`qJp*q6vMj}r^Y!MT#FI;RQsG&5-9ObS)aK# zUOA%X=!TuQUo@f*Q*fQRxHwx;;#%~q!6tumII@+@o#7F#~(s^zwrlxxa5_5jrC z3C*z|uo?)kheAm7_6#io^VVX*ZC+U%q7OW}%cmJh0kVNTAghwM#npwftKgB*r+B9V zgSfP|<4fXHEYANvSMh<+f0`-&a~avZN0`kh50hBF2O)8vYFN1TI`8+leHDb5Sl=?FVllKa9+>?%;A{`tv65tcHq+tI=aPx_ z%lPs77%dB+PeJHz!lv+?eH&zD9<*PKO+g~^DdQdLH-lOgpvmK`@d@2QZ!;r8&!;Pz zFJrTJZlsj#mEQ3mR^fkJp^3Q0`chJ^RpXpX1AB;SV`LtEuIDY9L(5DD3e5&_<}*Q# zIFtHH5-{r$?Qo@e-r`CSsYfU?^LH6G{$Y=AcLl!Y_-1lr!;^RG0<)fIrMdA(AG59F zXH!1U-dphWdrhsV9d=h}H+Zmw+haVbw>V4A#g~oG_=~Q!Yg8MFasm#2hAsq1G_A~8 z%neK1j&0APe)j7((PkFm>cglwT}oZXa&{pG7TWT;kR9rX=x8C=Ovf|O}VT?!#^s$Ksty)rcNn`OjFa1%;TG3ybOb*_Aj>l8GU{$_Y5?O8#m(()fG3@72(mW1H$dW8N5Mp_diD(&=-XA?s+> z;8=`$t7)F6Xj9@)d;VU1#$5SZEG2lMLGeU5i)4e8_;Y16o@r5Uoszn3mvHKC#JJV+ z=DrmWy>NltI(vfpaeHTRrz3DKilesEZ1yNqgC%aUn2uUYExhBB=mMd8V^EOhSPg;s$CI7AxJ`FoCP|K# znwhdj&BLON%Eu+VU?Tl$+t+hC1yUL?!%=J z;YXjPa-L@Ku67*SEYK;p`d9W%MADSS!ls}!LX#GnLxO>+-e&JN0luga75iFw(j8TL zC;dOqFo2lXyey#1z7I2B=d8g-&@a%&@~h!ccHTk&uZ7p7>MKr#rd)S=18f*|N`n5o znCf@f9#;(}2k!IgPrjMjcZcE%XQf@o%}xd>KhBt5#*cLGXKE9h)bj1$ueER>eR^~L zCn71G{f`#h@ioC+XzE@_?lIudz1RBnk-cL>95ZTxu=@lj z7oog~r!VNkKIUFjf9UKKioDl;ZLZ&@YU_RO*7tHh;z|FUP>34+Z>JLdQ=221-5dd9 z#8M}5O)LqQQxkpnxs-a>i+rI)%Jgjo_yFBf(xv%Xl1u^U$|`xJZAxy-Yvd6GxULs|+TRs>>*N%GCZV90ILaQ5YEhHIEltVg# zyM3}F~4Ci^@kA7E2tDW#gAxFinm()@PXVvB(GqRtytt4>1+1{ zkT=pZvzl1*(itksz@E;|%Wv4LE|gDfx#apRf^F+gboC7b!ce`(zP#J<1w zfAO%-#QypaFlSP0XyCQ54(D}1&N>^1dCpG)#KMYN4xQ`cmHkdL=8K53eF?}sSJ)XL z%TqIsuh+O)FTbvhk2m_xKxW**YZB>6ZH#h7kVv6npdS4q(vvgVv|pr!W>Nknf!K0w(KMua15>&$?8l(ebK;S99 z778C6)7`K8^WqxM>XLibsS3B`{v&?k?~wB^X;gFg4jrC3!j}2AmpiwGXl@uOw>p8O zXTD|e2EaOvn`84`^m#J()pqfnwd*&&=h0Bu!Tf-MGI3GRj`{V5;!oVb=wVMwoyGQR zYBHNZxN5I2FTvIDUj?ChZR>_Cf6;D75=QDRN$yV%!gDu#zm=ygN-5Kgw2Bc zbILVEv+J!LRC>`K1g2APxs)fxaN*4toR|8n#eO)GQs7x56rnmYa+xTuoI{gbp0Kes zx2Qp<8*uSu-ZFojapR5^VJCV1)Ks~>aphEO>YQm%Wk!fAF#+}2>dP|ri7qEN2-;xV zhq0h0|ExW={B2L*jUc3oF6Ck-GB9F3$Sd4%f|5vWsztc)3%!hnxQlMb=P{RETI~3o zQI;?h!wj*<-Mw%OTuM7LmDBiW-7y<<1Qw7O$t>9MXYC!{s0DZg^h;Hy+}Jg@EgD6`xPkpdWFV2abgF3 z?#z5}T)0o|b{;rVnj{${@BV(>;@aY+NcfW@L3l5NS<{y_p*j~PmOQpBJh$vM#+Z3p zc2b(SY)eb>i0sHj6~q;5ES}@#Dv_Ru!0kz)sm()~#JDf9L-Fb)D@&RC(3G>82sg z-vc~Myi4JaC?9EL3=27c8Gl(WKaV`qlby}atFG*k*v5gbr>Ny*h$#wu zZ4nIgErN%zKe`9%bgbuJ_Y&L<|MhJK*iEB}Sb=TYfgzxro}3CT`jA&sv~8TyEl3{E zRXvgL)N}-Vo{QIznYBZpsc7=!anP2-G zzMRwKlKgmaO*i|H+kgM*ur9OzmM+{8MQDXSTjs|18utc{gUr=4!shnGA~?IM5!}zz zjR?#u=@3}YOAa0R5r$|$yb-hS<6X$K7c%^VUv$pj=azQp^OTr);c&5u1+-?($5%;egCda~xR#jbv=T%Erc35eLvssDX>#6i zd0cr$t!1Y{(JazJTig$xeO%3`+Zl=Tf7?i{OaX!xpGQzrf|wl!?Caf}v%Ik;71T++ zjnKYSu*YCFb>9aGN8<caZ)F;+mj%)=$r>c|sXpl_^bCqW%lWWBg;vpDWXP&$C{Ve(g$tw)@_K66;eL8s z+v>gCBANjce{1%!Tm*OEJh!?N0j~C-mM6QXy$QbTZPMLeJb1sPhXYPoX{Pq9`_Eeb zNZ|T64{kmqyq&2``Jxg4tTjz1d_kZ0{Km%Jb4cK=nn%}C_5th*mXvZ5R@-^F3tQoF zFigZ?8O)-CBr5ktrBbHhNye_O}@-AMlB;<6=y``k{%w(d;e zLvqG{ZC~)x1@c$#$FfX(Zd1c*kP>Xz_ncm0{tW|8P8MT7{7vJIfzo(2cmR0NzO%#8 z^i}P{mbKK~!QjS;8=q#oOB%myTXn|`4IO(61wanl@}jn;nxX?q98>EZG{Xj)oWYpG z0;&ndxKNLXcSk(!8smqRp;scRt5qK#i?FjlPsh2!PbPyAW02#RuG1)(+<;er7o&yW?w(WBQM+bUtBx9U%qZ=mD9+x<918x$_aJ9m%R4 zR_}KfrNivIzjC{~nJdQ$QxyWB}<9vTog7~?EcCm(m+Jyy?* zsy^)X`}z8T&)%1`V-|KY)6c;PMgU8{Cmd%x45 z%vox*@@j* zvVTJ2r7Tbc zMKcJ^q2j@DPazSF<2PKT9lMUtYegY^o;4|1*waO>uR<^uaw~;6Q*lpTP9rI=xboU{ zN{)l_JZJ}t4Ldc`@s&%f3Stf{J*vrToSbR@9L6KmAeD5g7o^7TYe*0GVxRye)s zb3(3m26^T?KQ6pyW960FBhJ+yF%j%cE`^7l3=nurs?KOi=)_2 zyI{NfU{GcpW0rZJD|1He=fnK%Pg?~!No>IsJz$$Pdv#8niX0-^4@lYUL#(Lfl~h^N zQ<6(zg3$9*vW^)oQ_q!Q0I(pgO~;AlB>n062lxdcNS@?&3H|o7vGSj3#P!34j96yP6AQ5;D9v(On$r4IUb#(`Ta*B}rg!GX|#Kgy(^;$>69dv@8 zQ6G3^`8^L(=$zAq!dk@--$p#366p`D4xaH!>{AuR*~oe6@AfU?#G5VV&0QEQX5Rwd zYIyFkw{flM#C@)=QsKWu^B)QXWmLcujFCH~_}hh9d~>KiPjY8mS&;Y(Sj&RNRq~Xn zWn*`&A>O$Fz`bRjx(U(Bi`93%QI{e~QkB!I@Kq6XW-;m4-Oy`G3Yt4J+ub@MDRD=5 zw|$=(a5P6SHHkI8{3J8Slxt@|{R~en?~Q!cuCTzf8y4;_o!c2i9QAj%{l8ob(dvU^97DpRW?o&JL>J$K@Z-U=b8#S71&NZ56}%g=}SBV{xE1tSDZ z|Jv(JzL#oFXqo!)hrnp?^%j;l8&`kZ5BVD&w<}cncl*VQoDt38V^2Hw(n37lys4J$ z`EjNkcF-Gcnb&|GGuo|QCvPG(NOfBED9gFYLZ0pkffyf7qO>PeA3Hf=DqmXFndNz{ zg<1~T!jioV4VYmDr5PVbd#bPX)wp)Z)PdYh!5o^`i|&$|)S((ggLR51PHlRQ zG=E&LM#$COQNgp=^DR(N#j8<*&6Z(e+j1gae1R2SdUsnJHj|T>6vKASJHm0harYRc zP!wc~I@BjNspC_UA%#<$ZQG2d%XoF)xP~!Xk>1kcO}4>cP}zxRai%Wl*A7}vN@DC0 z+pQdh6vLm_{=aYVz-C2Z?fbOy$x-Pj*G5^0(U5C#wgYz$Dbk2d-5mX3*uAzo6D3tE zbo?L{u^Vljxr>=}D@-bvbQBwdtbd6BM@Y_qX0Gy%M6v<@CQV!J=uUb>+KrdMho&?I zr{Whc-)r*3xc6b)zZ8Aw7RcR7V{u|%4QVD`;FeXQnG(ZGr8hGX)|K4mI9_xX@3*ME z|AVz%1Cke6UGH2|pxW7Y;xDWeg$4G~2FKVw?ga@94p*)4g<@AaCYZInTzyzRjsu5= z6?t})T&_|tpjT+?4c%iI#rDI*$jirOK;4fZGr?=6s*0IDL;8%7QOUQ(g+w4fO}?fS z<@AiTbe^08QQ=jn0I#+jE(;qhHTD$OZ8b5{06#hzcFCoBZaJ=cCI2QY>uLm-6PA-y z!}CHHsb)Ip!4c*5ED6g6buXiAo|bcQl5sx=%vICp?ff5rqJoL`KqJk9`RgtG>iEfC zeyPVSfpvV{kQ6L^x5B-nR=~Kn_x0-KGO;c5=o!|A$YvvazVv2_v+Jlju|<#UUuw4G zNk2x#3pmo|NN zN?lyJPYs&)(jEP9>ojnt%$iJJ{2D=*asS3>2k;q{iE9J0i~8QNt@f!a-iF$ zSl!;f#m^Z1c@OtedP8lQUd*@^-VtYBDYpHnk* z`nSI%^dq)6LJOJ>hZg+uiHQIKjAHgg320{J{hH^)ueUgdcYgTIP3*Z*9IYfvs^&|q zrihvvK;)`;67KPCpStX-fb)9(*P;-G z7(ov16cVp4p`Ca|7pG$wdNns_H>mxOjoPEWO0yCa-=m&7D1hRmPPkV};;|?&WI- z!qnkzcS@2DUqa3{ZDM%4yd1kosx&z>H$c5!EVBwS9xVLI8$gVJ3 zHUzj{l1s=HI+}#=Pix5;e1dSB)LmH|HKT&k)zGoqzWCnOd)mM>O(&7` z4|#ax6vuRv>(FOEx-ulmaphA`v%2*OJVK+;xp>nR+h) z7N_~izWJ>jOo3*d{d}Xery#XG$!7Rro9{y#wIXflF;MYxpph$aYCaE zeOA+>2=?}!4fo?w-p9_kll!)Ik0Z|MwGktyvo9?{r55foFOBWLefC7nb%41J$_B@A zgRM@FMlaosm3#DLZkqL`5z@9!i*)!yf30&fvM>%#EW z(p8rAfWBYs_LuiqPk0b!-TO;QbjTNc*we7<@0al0TMO%FrSHZ45ju`R*C*7F+i$DL zE!O@zlL-nLc;eNuikBQs2z;!!D2d{Heq(*<{E8>OqzK#=h~xT~SUt+0zJUF#wpc~$ zh}rh0QK>%kw|TH<(Ws%<_48~rY1A~p!}Hzc5e&F}G%IW=_H>Oe`U!)!D9l_xRkZg% zN0|RDR5$nY5mS!5-zMNcG%WZnp@FH)#%RHI3fF0oRQQfj^K$O!(`;8ydn>ZP>XWM>Dla7z zV1BfeFjKh}6zx^EXR;mQ7Nod(wA~(L;o|h0=0uh7ySw6d*a>y7_1T5(_!{LqJfO}0 z4AveDz=^PJyM1@QJX6aZsfS=)7IGLj;$9<*-~r3>JgncfNA9dbC#MoLVq*OzI7yn- z&2sns{~W%Np^iK5CuJd&Z;X2wPKGi~H~s1ff|K(Aq@-pueNVw5zfyQdj~!B0ZpyLf zIDiTlZ(lEk<#u=L@A!mu_RJ|E9=fYMu+&|BP(^$ODO;8)Y?QB?E1rH4-#9LYQuj>h zwUEoLcmZ}u-p*8S?Iz57X}q&L5aaO2q48dY`g}p2?^@MuL_r#{h<=}&>p6h2pvj7)#} z6Jb7l>s|n2%zAm}1mAR?0XeDy(35adQ?3b}9zhSvo*`$KJ!tKWJ=Qb+s6CR_X=7U~ zl2ZG69WgXt_T}*NjbksGs>_qNF&snO6_7KW=Y7gsYTwnTWFA(F-jPs_VhqW*sX8xcq&w=y{<1;K+WOKL2h)vZr=2dDF1tVToB`mBX69n5aN-&rGkWuUYtkLo@$8?k43B!PTFCEcsu4M_1O8~-B4IBqcWymDad+2WA*DMaH(*Sts1OX|#1f3fiEWEQG3i{(q;(P<-(KO+{mOTu4 zXVCmd5`vaDA0Rh{)=L67b4%)C+DlQln{FGhiI)3A^-mh7DOA0^}c+If-!0=x? z;xPsk<#m4@GJ!W*@XL8iP7NjS3N@(+p!9Pjt7^F z_QzkXET_iWiX|Krc0S^?X?k3Cc(L}ppM_Wi6S8<)obcap>d8sLQI{#Q-57N=L2~R! z@XrAD$AGSCxy$?csZ;amoikayZqo{Fq?cu^x7wrcW@u+9AUicN%Wg;@UT%K<<54|4 zd*5y zzjsGb)WdZL-zs{3sEics8Kvba@yS1fdLBl|{6BUazF zsFCWV3@dG%yA!A%y?^};x83)(^x$S<$mjNGJok}( z`A&^B0Ygc$_^OEe^z!#v0N^#Kg)sb&fqmAII<0q(c$9<-atICskH3BQDNJ*$K5xF_ z3T0)azKj>E>i;h_)3>X>yXAi$Z%y`TO#Oj0(f^1XeR9=*zks3i2If&2CW~hgdQl?c z+im*x0WBp+*`(MeKgp(&!-}QdTRDXfehzC5*WDVcF{3<*Asn>$`dBbGuTs=|_0B1e zIekHnOYXJriS@lx{8Vw?ccY?w2RSa0X7~$r#r-E++FqSFG6_z&_?0Gi%EU|RbNPzQ zsxojshw$Ol_ZV`b%(f4_xC`28iac0RUiLR{en9XCPt5e6etIslqoD_Q9WqM&2iNM^Nyz7O9ct16A5Po!Y zu_i8Lw#!sqB<~r9USbb9>;c;(z+TQLgPgA&MRKilB!j<_Gnb5FPC6<1x$R zb#a#iRF*Jc2y$w*fHHakbx!oG0}5AUuZsg#p;x~?=4+0cj`f9vfa4aA)9tLAh*J>^ zLRFOabdQQKSE~bFPDtX#{$eMt-M>`t_@yK&5)`bV8^&d4w8L-w5{f*Hq0aE{OI+4^rLutLvSPzct8Gm;a3w*8E67aQNpG%`yzrf6dZlBg&WhH6 z{vz1xRboBCcO&g#3-*RVO|Ka44r`@R<~{BG9~^3H#aB>ua=df|BqQ_;SzMSJFt@Jf zGQ(OH3q56TC^Z!m?;^r*DLX8Ke2!GQnp9|2nk%*?&nWvShQM$%MqjbotGQu=g z6amZ&3UX^9PK67NTLFDHabMMZAQzNepOeM+VJ~un22Y0}PXj@9nCO6gi7_}}(ucG< ztNlGU5>f^@kd?spQdQ-J)ER{ORR9uyXb$F7Wg+t_Sx+bDmi0nNkP^^{Fmna2M?_#R zCcIkt3_qP|TV*qUuJUk87t+Dk7|>v-a2Vud;BLcvzTDD=PtaAR5#sT8-Sy^xvb|99 z;ajk+MJZ9-NFP8>y)(b-_KLqeR+)H`2|vvh(g(&pWPEYmTzwJQwEIIcZ3(61oRCsf z8`>*g67{K41N}Q2wfk1sqs?rC!#~SfE)1n%+9rx4CS_q z&J*@jqQkFQbOhjox()xVl{GCl%Yp@3B5@rbMbmPdVw}I{%M||-e+}^RtIj8FPz1md zqg~WyC%?|eJQZiLmRp5YS#;AEX(E)6e4Hsvkc2hyR)~qof$kM(dt1z-yAw{`j7)>#ZyW4&tC73UQnZ0q<6ALD0iOLi3qmNaB4&)_8^EMX{ z9Z&;R*RZXs312!ANeqW_URkgmm~YE5E7OGUnIufO-qgRv-Jzi;`h$naT&$=aKZKFRF+w(e2V9 z9?qQb9nt$JhlLhHJnG?ap;)NdV<>O%&M|e}MQ40lmnafP2T7aC(BKk{y zHVWMrI=yhX;j?t`#_Ou`@-LnsLdSwmDfk(|Dyh11dM+%oqqpNc;QoC27eQ6g`egf zl)xzIC6-13duH-Eh`7pW)8Z-*zEc$BdAq$PI-KYOsgHKm@)09%IS@2s3fE(x)4&18B96%|du2-%k;Jgka zrK)dZFCx^34#VuaFk9-^s)!B~(0k}@oire(f7XUKl$hCxGq!ca>5xB`c*gqV0l7hS z(h6hhE3oSxrhryA*VwU%Q$1|o(XSICO5|SGFl0GKxy!}0G1dnN^MNkh5E~%q*ksdm zpwYogF7AvB<&2L=^AJ~XWMDo#lagls5#~P9SpIcN7drNWBF>qB&ahhrIOz=C-q5*^ z>v%En-d=H`c+4x6Nhs!)SsZdA9fJwsoxi|||F|^yM?oW*)VxQC zJ$;FZTr%RQ@U%_?k@|pw{r3-j{lAB0pL>xz|4I8viMV{Mu3*8^MAEeHGdM< zc+9V}KJm1?AN(Bvo9_b{m-5Jt(^5ZEDL4PRefx&;d+Sp|0<67tiOs;hoAPgduaE5- zfTylLycquD;s;s>-UvQmn-4Ddox&zHH{L-4^Gk@t51+r`N5V(=5T#E>w-L8gr%L5; zQ<3dK{O4tubPA*eC8O>64?X_SFDK)g_dH_PCK^Pa;j2Hkg2IGLIrmy~9z%75k zdY!-#bLKzemKsMkALVViKPVF3x_iWY1lor@-IHwn?fJ0J0a3yIDx`kuxXW$1aG9M9 z*otbCkAR@)#oNPtCBI%Je)EkZWtG6)d(`MZB#iGDmk0yTO`KBI{z$aFUCLK6jYIo7 z|IG^=0r(8O&ClS+aXr9Q4qTkvex8eq@+q3rpVSf`QCtFQjud@P!@aY4X|tgyq%YeRoOg zyV05e#IJeE@qeI;|2>TH{jT4!FMucx3^x#E2=B_=C_N%n_d#IbJr^*b(DSC>jw##Dw zfI(SHQ~(6sBRt60@}8E%vEQEZ$oz`?&)gT-iMDTNK;`5{@9Z7PJokXJm9y@W%WwGO z%WN_QXe%g9zAE%B75gEHgwO8Qc#y@T`$*PX?>$l$2^hHaIsbj%v?Xc-&>2}5X~037 zAG+&b7vDMu82nZp`P>V)y#ah%oM89r+sqOEa+rTF=SR%qo1tJ!|9Hlug)B>Hh93l0 z?(*Q;_tQuBt^z%vLb3&*pNhc(z_zG7dF8aMK$INNdKF0c5dF7FhVN4X;M@1+Wi7yj zjvp382`qezC=&*qNQup8e)0?8=H+?A;op#ms1v|9<-4>s{%_;|Ki%QK{R{T^kr`yn zA6Q??nyprmU9SYTwOp7970>&k|1FM00l@P=jxYZ3vkUzO-2dD&xt!FsN$wp`(%~(V zHLLpTKyc}M!~8CbrK7-C2tC99l=V67*JuXtO2ZFH&qK=R8uMLDHjw2_W|v%K=D~}1 zqP_|H-aMe!NHdR3Kc&~tfL=kx>*aC&&F{GBDDBlWZg@c8l8Zw!U(H=Ey<^{EaL#^! z%VYDeN24_z?J!owwZYAl0$q^VN5os~^BBCSPpJJOPp8;v7*be$}RJ!5}*r3?I z!n8ZJXDrPNwP3=nlTX*0xy`dTven$c)YK$`OLD6Vtwt9sA5t1@@EvB^BbaMP5*?hlP^a`+(J-aQ|fP+l2NF@+A>M`si7EI@5&seB00($FE!Lvq;Teg@{Gmn*L2&-({WPg)}<+R~*UtR&GA@SJsn}f?L0~MAa{l ziR-N#0MIzi3yR?r1ROg6FJ^E7LSX{h1*_fY6?dWZX7~6B%@Zu7S~Ck1L4nUFYv^raC>D}&97VzUY^S_3!Ee6qFz za0ZpYZ~*7pL#08K4a!CC^k-p$`1*RVFdQ=W3~9#l1}^vN6`zK#RC+c11ziS25FPe9 zfn<#VFoV+C<>Ehu8tFoUXyq4~tmD1nDw$p7PXV;@9KC!2H6k<||0lpLWOd!D>YE6N z!^Dz9PfuHW{uyI0uE1Dv1%0t%wG=He91wV?kfuN_UK+jQJSUC5EQ$=#E{SSoXj6dK z2}g6ezao*|Ywz!J-=wnjOS&Y;826=>>?wkUts@4Ts(1tO>?Mqe`ugbbC5kwMG4)9< zLu(^^ZfT942AbzJvDgpml!oV)Jh#o-Ijz{3#taP&QKMbP(k;y|*31P~==z?2+nvU% z_gT1B(-^-kLLb+?+}`*5E9ZmW>j*co0DO>3k8Jv%sSAz_qSqb7MA$Cu!z|=_&h77G z{{TWdWGkmPqd`}fvV80w`o#d(989|rytEbyS!9wM4FUP29Z|DCE}BzeNE^ZC|5tLmc7qh3W7s{%k1jKBgQ&;wkSaId&;=2*yb zy&T@Vy}ksUX$apRQgU(vzV;5lsDgO;PUf*;H#I6JOSA37Sz75b2@r7^N!IAC8sZdx z#P*uu+o*~St^-%)G=uXHz?{#v^XaO}jvQ4+=-Le~dVGrgwU+2W_tmr?fS*=6!=eM| z-TLfG1MCn(vl#dQpIEUh_!L|cb>*eCF+hD34pM_VX`EIEbZkms)5bY&!@KIOjD~lz ztf2T6gyfKk#i18^mhs+pqgchbU4H+K3s03DVt!v_I3Br|%E_S~@<@u~E8puov6 z?C{skHLAAfi?%$AS(42}dcWUg5*P%Ea_GK+FHg)Ur>$HFs3z^>61>PrwSg?9pjbEo? z?VS3$PKJrOkWY-l^Mm!FjBBXS1&5VxZ~!>BB4GVQkY$MF<=&v4O3H+Y=)?s|1gHZX zXM?M2lhJxL=M5PPSy@Fr25zxLJm1H=-IH$reXCLdngV-Gs#l)gPh}lD>{@1r`M8$~ z(hO?ws8jNPmwYFQ=&whZpxsFKSr22KU zDbb6a0g&xeOZQI5J%xz#3CFs>p?v_|6%g8&cduOl+ZwAHvV0G+bfwDu;Ve^=Q~ z4ZHuSGDvtr5C*7#x5uJ%p(ZI^HWhw+B-z^B)20NF4svc^szPwnNZjyU{6&nCAjh!R z3XsSa&9v@_9n6)zUni`Zc{fnBno8M8q=sQgBl^-LufLT7jPe*V`+dEPJ08x%;|%+F zxpa}s(~oxC=c-RsbXqO0A-pBN&*i$e7pQc^R*H72LQ_dToL}AF3AnA#2E6gae2%Ux zySj2gp)b@_{1LznH$4xa%FV1hXaoS|M@UxzczR3MuGUU^gYQNh(F01CJ*<3|DF+AltoqP5^rk#I0hk0u3O@CK)a1M#rFrik4YHWCB2E_-iFi z&;Ap|^ccwQDWBkfQ^@es`e%H@u@)-VO^fU7Fe~;&0FMmlvimxwE%%q;rdPRVY`^sD zLIE{vm)8&b0FS~|$sDo!Old__T_P$m;Ya5uw4to+48y{Wpurf%iY1X8E`~VeS#%Z& zf{(o$4P!!2BNqK>J<=!a|IH*L2up;?#IZ zD)CompZ(a@4xoKzT90mm9X-{pQwo6uSUUt_)dZ(huXs$*ZkCDfY*!V z#>BL4IRADGPG6c=&m{D&5Ks4#-O&||j7(n7h zPcU1&AzemRTv1K-V#NmkuQWRnt?mXu^m>!H?}tOAIMt-MOc*v`TU^Ezs!l5rQ&+Pm zxOm+xa{YvQVXeuGvQi$2t@S5&Fyzg=v0q&uw9CaTl?rQw;9At_rDw*eUgwvXr5hcYJ zqt6}qr?uX1sA^a`wYrL~b>P0!0eQ5p8n3eUM9GQI35TlIxber_O`apBQzAB zvVZsSn@I~2wWxNl_VJZvCbp&W`YcyvqKJfQ(OEbw)kou3GVy38@bk}p=SloqrswNT z#?DU?ja{j-amDOEqNFgfqVn>D)QzDDd-5MNCFkPEp~c^J@<03h`2>I+FE(Iq?-88R z5-R!{J*HePHh$Yh;q7>8o&S1->{=3JwB~D*zg%A}u+^7n{n4kwtqB@ZHBY^=#xyJQ zEQZ~hd_OPPnsw7^WCr&BN=e_O2fu1E2c~}jj{oZ`T@7}2Rgn|yy$Jn!>~=@#WW0GU zSPLTY7EIJWGyGmV{%;%nl^_C;Hs-^i5N=tv^{J1yW5<#J`p|Nb&*ZgH*Ty-|B{0bz zA1=+;5fkqj6HXxD@qM}g(H=g|d5r_>1J+u2wX$ZRvtW==bbJ;rpKR0g3y*as1`t*y zWpDJ~bHW#`gXzH`{8UiWvB->oA8WM@&d<-s7dP=+OsoD$pV{(1c>F(UxUX+mK-O-S zdrSs_K}LVXo7VT%`S*3$_44|R#)7aNg1-rIFa-nt@clP*-;|#=zHy{wF4EC6dP%c3 z*4fy_29;9pFYII3O`A+L)A)rtJo65$^g-(3zQ1F6FCGjY=}Og-#ss###^>LlFYBVr zPF*?bP4p;QPKJ5%%J%C7y}MIf`*6?(4;0&+ZjyzIk4w36sd1w54|i=a=@3597AjA} z-ik!(QD;)w;#;!JF7w?jL}g&#%O!IwL8g=8`?{ zIICR0&3Vp!3_Z2E)zT1T+?&7nrphif<%qZ!7$p9y(+O}>n6N8xtm{go{QAasZO35S z6SGJq;YNeMQ)I8j*9h4q5^cDa;}7}yOSB0LR^II8;@hZwrn67ZX9>PD?w3{LRAb7@ zc{dt-XEQBz+@xq{#`vjsv&TeSkH?jEKVwiM;E>i)(&H^E^jdgN}j$Fgte(L^%b&{t(24$0T5*ZxMG3{CK$C zKT%FQRH&!wf(oL7x|iCQzUqw|VR83%(2Th7Gnu}@XSwjGoisy4Afixt@lfqP@2v+6 zA5Yp=q@=@bC3tx>{@B5|Pe}l_Q#i#lJ$^cPG7S0W+=>>Kq-9{8&IRp5^W_TC|SbRm@FH zg~CUwpE##7P41%Sv2DJwU3LeU+qv}8T?H&i$%Jt?DLyn-jr0HB#(y>>@a&IcG!ab? zxi4J(9G6OldF5IMa-W&zm*;DvO(Bf=m(5=6%(N2BV4@Oy5kFR{u^P!DTLpI>YJOjN z0N+L8vZnpq{2QePUR-5`>JaATisF7eF{%5(Hgx$D&IG~}j6+)jef?Pn1!kd|+Jkgz z{*Bl_p9MGXwAsDs(B!SwA?Oks9H+!6FWKPI;mT*>(Q&pzOsp4?-pH+zGr6--Q1#qd zg@Qt}sg~IQ(RH_atHtSLm6g$C<%Gih_^vIX$zNab?!D6WW(=D1HeBl?`ARotL79D< zZ@(49296qoiZ4|K3(*t;M{V%(eaJRj`h5;B=tuoFu{O9MJ*Zi^Q6fnab);`-NF*hN zP1Pu)I%a1`2&KfTX)o-me1^*m9{XU%b^L6qxUrCLfrHX?7$Zdz&LZ<`C8EMn5|f44 zdmZQtCAJ;tR;NF+G)~T@^|CcqY)7a6$%+5P1OKqxH_!&nka*W@o&LIqVM|h4T!U;# z>uGbst$clBV_`Ok*h|rzaVN&pei^0b1SumGE&cs52zHk!#fwEQmFUoP$>tI6^T%$0 zDbJE#)k9}~vi}^Xz+~E%={~%!bJMkLjx%@>2v67e1*;}Ha|!|GG*(HmI{uq{e-oi1 z9=331s*1LHa!`9Js+uo?J4&U;V>0Wd6&{TI}35v zczLdX8{T;qMYZOkbtwgI!>7T~|N2Tm3j_1}QE<0-kaTwoYFFQe>6+vIP^LLrNO*_Q zKdlKqm^CRQ{?FoF`}%(LE{VAoS+}*9;1{Hij-Gt4m{o?JTK!3>yu;emQz`fc`+i;;k>CVr)C;$8Ag`Zk2$#V$&{WBeAqW( z-fP0O;__lWqH`?ltc{(l+g3p5@+d zomM+PGg6Wg6Rp2}4CR)c_+F96L}6xT4l{c=Oh4^iKoOO5x(%iMV9@R1ER${&+rbeCvb9WsTj2 z!;#=b>dV4Pj(`J*at9jt6jI5NV;d^{I`vHfrDjDN;~uU-pXGMPy>o_w7V^1w`=595 zri8u8DekF1GR4Z`h$&Wmw5u{fL)yKIWGB1R2_h$3W`=!`ZDyz<>&|SOp&$`LRitfp zO;%Y&ve*B?Bjp$+7$GNGhV19nEi@Az8w-QAb>_OTVtG>#>u=cYQvKeV2Xs{K%*F(+ zb+}WRAiLIkp8Vh$rDNcDLmz%89Kc7;e7?KQ5d}N4onR+PpFiLH{WBF)Y-1*fUJ^ce z()!jd0rV|(x+Y({3|um~>Zs&h|ICH(NOP|)( z?#QTD501p|-owuRPSNwv+s^M=pUjTPz-qq^7meM6$c?R=D(9OxCiy7Cu}q3)m5y=q z^YeA6iIsT1V+*LlF4?yRDU1{?p_WTOq#$;mz$Db)3v^vd+o)}~BRng8M;9)%0AONY zz#W^>;dSgt77~eku5rsA`~mO_7%6=|+C!ZGyrDHspiZ8N+oc{xMt|cNE|hFAu`yz5 z&a-yYjqEo-J!;Ra-oLZf_HCBSf)QbG4|?F-OENgiPcD$ak+q05uaN~Nf_0A5I1@#p zX0{%;*(M?3%kEtDP2F!<4Z?NQ_}LDyqu0$x{<9-Ku%jtA8^i5(!)+zLm39m>@JTkXrndp@0haiuSchHr@+L>@y zgmeQx-w-N5rB+q;oZzLx2UK2O-jZ+Cb_2DNmuvqlyhu3jxAE<9TTn5O{*+e?KXhr# zO>n|bl|AAFXVVx|xVDk$Tb5w8k#IlIwfVm$yC_q#f$s;bj2`ZRDtFWsfy+a5Eui5} zc$cB)fkuzWW>r@U^+dcnFTL}?fr)c+aj`_!Tg`C8B+Xcv zrW^Qu!hQI$!a;5loH`Sa8!YX7CZ{l`^niMG>eXX9wXd@P@t!gko`nWkfw3lkXXhxs zAM|JXH}ua^`jn15z@s~5(jKB6x;v@kSpBr0Y)G=3dd}MlqZ)|Bso9D4(-&iQurOv^ z#s-ipnhWOaJ-nenPb%h5lo_ksH~~cyD3Yg-iYax^8WR5dmhLN^0{%sl@rhY}%yVv_mSJFv z!^lU;JGS}kFOuXO0RBsc*8Y9vJ{PK=$plCR$Z_b{CV?Z>%Ni?n&_|{L+tAurVyE*3Yr=M=g`5f)HwAsq4|J{Ygc_a?PQ-dMB{F!>Jm?oCpb z;b}+7I4hej!+_TBYGF3k);IZJi)X7{urOR6l%gr+j6U&~UhkTkPI8G`lc@T$C{q2W zemEbja*THV6l}UQO}o$g&N3)lIi5SYos(dF6DW(VFpX|S1h*tmeq^BhO5yA>4BIH0 zUqYZSyzkho?!G|r0@EiY(WtIc7Q3j@XL`8>xp7OWS^9=k9DcG^YiG2LhZ(nwFIyXp zMb?{1x3w=m_cOPO0bFnkqC!06T5Vy)*5$*lqvkdaKvH!$R+;5d4+cF&{Oh*KHYip9 z76wgTibmBz)$5ANZ?9_G5>V;0(tlEHLm-p*x!{a@3 z4wXl8^YW(F;-TU*sbq1&$(;lvkFOKPg$PqV_!h|E2VXk>!|^=0zgfQ-DhpE9(@Dlt za9h*alD^1oMC5)$@@^pJUDy5%frNmWXNnip9UWh6l~loExF?@`piR+eYh|o(^SoOTOcYm{Enw5gWi8~a**NOco|I1W=qiXWC=lnz z3=O?HV}^L_7`V!0e?!`7sR?-IKwMrVa4+x*xNG<>6vD6$laKhf1Xg$z>IB2lczjuZ ze?MbH7q~rX`n^T1`d*ohujw`nBPUOud{bR5Q?&dywgCYe7S*uYl$OiC^7?U5Hea}K zMCXBPGf&_2O!tq~_M4?#T@r8I*4cbRcbT`^l>Zf(t_#fS3e+VVpMFq4=Oa$LC_VSV z0dW_fF8v%s6LW0iTuZ4rYt4}(M<$2j`33WgmxVjD!=HMeFNQsqBlKVL`%2_!ot(7J zxG?SiGBzS{yj;t_(pjq4z$i19TjrF5vG?PFuK{HmLrj=`rLVuQy2`|0wij#0CW7MLBS_eiuQ%adG{V{ZIhbV z3>!%i|23q9M$O9{mJEpQQ)^@i{>pPA;D z`J)zGHeTP2G}-LFLu8%(+gMcr2B3f@peKM|(D4d*5yKFH*))nnGxv7N>*uqmBRhn-mquP5 z;3sbTkCHbpQY~6Dim_^@=6zsl-Wj!XG}z8z2EuV-@RG&{aIo2=1dBtH|f2M z$ZTQ#i-t!tsnH~VnnE=1=T~ao$iwo}bWKznuk^ZzmRRm!-H}*c3(SGocZF`F#mD8e}Mo4WX-ZF<$Qc_-sB}wNVMzVe#;SS79hj-eyRWb*>lWM-vk`h}f z>9dkND9MjkocnZO3WD756F`G{II|3)%oq&=0E)*)VfY^JF^i22VTEJHP|5|L=0*~|`;SU)OTnUR8W zS+3R?%nvXHTI`k|c?5IP!os4uQ4YApe0xQIh#C{)ZZhN#(Gqa0!i)RYekS?;JJN5C z0TJ^?d{{a>P|_9zr|b0Kly<~@*LI@%^Vu7fhO3VPDkd&B$#)oNp4_KA)G|LKlk321 z=y^|FEl*nNf~MU}hMdEjLWkvg;!B^DHSYi`)y76#?CFAv1vggyI{clvyDpX4=0pmA zGl|fJCY(9Ai@CBT0xSF65y9Iym`VGxZsD}q*~Dkdj=KP4b(g{7*)?U_NRWG8GH87b zzRyqUwsG$$N1U2RW?i)U(rw z<1=YKsfA-gK3Q^afI!be3TUV~K=Pw;~x8 zCHc>}$Mo+YE;#MU0_t7k?62rLZI{f%s8eb0_^?oiwwNDBY=zDP>iFq%#W3?n%*+Pe zP@y%fD?$%gNGG(M?&sR;&Mvdv-Fq?q9%E6P>9h)jLQY{JxV7l@MyimOO;ZG~H&j(M z1n)d{+|cj?#CpIopsk_dzWli8i2!Ma-?IP$mur?==d#nB4do*xB_&JlOr@T?bZOqc zQdEQ2D`pgiN--K(d&Ps7C_^SW*O-V`t*CSzS!(6y^S@$LINmj89nV4n-<4Xxre)A$>p#5s?HqTIS78JgJe`|z4CJoGLxLi*CX}6ab9>HfQvK=1 zGbcx^NT;TTg%nWORAA93x?FE^VO|ez9EW-D(1;bOvRDznGZWms=!fNkWH!qI|@qKlY{FDT2 zH4L}p!;IwoLmAG&#YOisgAea~NU^%5b`(s`IexHlyXbE^lup0Lyx#8uR{?^}CMR?Y zL!`pvidR=}u4!I)1@2HhVZsd9?*w2!E#t8Ie@-t(=?5o+5Ry}O&UU7+;`kL=KZ>02 z(jIps&&rN@lQFfh_(>DN6bnWQ1!ZHld?+C?^;`zkdlyDzHVrG~RFM7Mti5j`r|R(| z?<(dFKbbydTJ2JuY6Q3mT&b+6n<}ihS%~|fCBdFt>eqH?7*1mdg#FITU`-p7I(nQDw2; znk_dsclkoB_#%>aFMtj0F_4{VYKJ;)ao5EqUP#M-(P_`#y_zmAX%>Z^!Q|tcTwf7a zoSR@TMkAIXE!eVzK;)IB`1xf>_`F|#s$8U|zgM-y%hso)nj4DH^KbDpY)fI25TlMs z#Ffq;f0ZWjawL{K6Ly}7QV!ScR@u7EFF%iQd5>WWnrh9P0u?D%9@9Zk9kH3RaRc&^ zqg1R6r>(tXpC>}1b1sg2iJ=Ad^z{ky@?t9n;yTQ%eXTzg7}qp(L0Ss`AgZ~`g75RD zrb#^NUnYD^3lUb-FG(1Mw2YRSfPb;QLD2X5G@X&Jn?9zg8fx|EQHWmF)FxE~o2?KG~Cg2CAy{@6D@w$LrPu<{{A0yQoaa@heHH ztdX9(#LdgDqtT{nwFPLJ%ff=O%b?;(F|quT^s!Bb(H^47@QZ3?nsO{x&G*(qA#{IM ze4x@Li{Y3B1dYK2NgclIVCb%|U4F&OE7ozm#N@4yju|aM&n)*GHEiOkwx4M5$olgY zgV9D+S-diVfQA)+Of9l%ig-v2t-t(1#WsZM<>fW6SYjag|zfWu{n%q+m zbk^_VYSWC=2tjqP{I$>zsg(<+xAREHe^?@u*n#=*9To4ScQ+F`*VT8R;pU^tG!CeD zLg3Z}ZGTmN2#3On!oY#No#gjl0$mQeu60PaZ9>fNvQPbB{y&0;=n5k`R7YTzU-O11 zfUbStT}t3sXQX6WIxU60)BgaD?}0@|+1pFq?L3W_s~^6$s*+H#XZ3zVLR{Ho6`<2Gz(weHliRY;I4!u+*!O9X!^ngAbIXHin%yy+(g4N=~3e_D0u?HR0t`m`y zB>t^G4_c)GL+=tu5v`|n$}Y!AKvxI4i>DSrK}*MCQ2meKGLVid9F3*FVUzf763WAv z7(L97_z9NMAprOnYaXL_VGy13yX(#hkdOg{Gy%k&n;E z;v?HeVal$3a86ZIu=-oa&wD^GE3tBaB!=yK^`v7Q9(jD0|AjXHGA#I zd;7KP@neTB%+f*u025q4OB`Ao4V7K0QXSuTD>Jfbx5Qp<|hI&*ylEFduV1Pv1HgM!VDa>IFv9;r8YiJtv;#pm;)$;V}&xeOgZ zuqECnw!mH_OAHV}f@=~IN6rwDrLpA=K&eA5Q0kKhn&~pn^jBW>(*i&6++u`Q?am*C za7L*-iXkJK^}C^hq*XZWx@qDXQsmacpylS^1LxhIKg2B&BjXGlx4fuq$&Th%-R~i;*ZfgkQ#D!yTbZ!E1`MX~G|tC)Wkf$sWK1PzN}52SXV+ z*P1a6gLF!I9v-RXLj?Xoet4B_%_G=KZ&+4lef^uHBS-k+3eDZTuA-9jKIa-vTe6WI z;LlkK&IDNE(H~y*rrs5yzDw$%_|70t(P=k^ybg z+Pz0{cTzJW6x5m0Q*qC`@-MTKp#CjFxEx*BIiDI!IKD??>fr%h*2U5zEF`o2azAW! z%njgbuGTPxP}$JdtKUD9f^+*vblLNS$3`j$0ec#$yeaNsIj=}e zUVo5|XLK_vFt<-DUVktPvGnZ$iobiT54-vLS^%oJ=S7dEOPd09eteuW)k^rKY&qlMx`@R zB=K_3mLWZbUQ4jEZ&Eb~I62Y%0z|bFZ@ZOE{P{k^IQ_X{yrU3>mp9pK*I+No!FX^> zuf)KW{mVQd%odAaxPyu~xtYc`FItlihE|&rRGz?VHel|PFEp-Hl89Ha5`yjRi!Uu| zZLMeebqLEbg7lQ1dI4qK2R4K1=@Ex+_Cgld;bgqs)aDGdXu)3eD15ZoeW|vyrxIjF zR1{oSv+U7)0m`>34~a<4rcJ{mzxx@uLD4xueC0|M>Yb~Rum@X#w{ILg;|e`^qE%MF zj2P>#`GF{@TSh_mCh5&7WDD{=ypor2V&S2sOP-QXj{p%5K~Fb-apF)}`5a9rkLg2swYovka+$8LAi8QV1B zTqR1HVbM70X7+~#Oo9kd-(*w;qaoeQxMD$yJ;zUFKkcB5`{I%#T)P2BT{$WM&O^@qSoJigN3 zuc8ch@S4ccSy|()FTd6m`hH^VX9e*8%6Nk0InXAk&ds96y|L1DRIgri@4Vnee0K<; zV)G!LmSl|7SAcKY?SyB~?dtB_%y*F;8G937zOq$`*z~HUd?eQCE+J_|Z+Y#|u0YZa z90?wng2>_~*v3ER4f0H^XtLZll+W~xowPjYn=JRwDf!yk`|HLSAD<8zMVj1qTjNyD zg0UL)oQxZinqLAg9=5?2=1Z7Q*6k>Cc+q~4M99lXbU`g!q~hwsqdudnODAs;DA=m&&(R67+1b3na=@bXUEmx=-~WmvKgmB}bp<7aC98L)3@ z$x-QWcUjx*f)#6B0btAnTanZ$UBc4lemu%jZY2*&y>`#x9xkN<)~T#a^XT-eHDCXr zwYX`&mjoq_IZV!GM)VUkyD?)QyjT|c-_uKrtCOto;dGEJBde$D9p zO+9e=;Yg)c*UPMR5|oS{aPJ(ZBCp+MzxeIpfvKJ*zS7*(CWpdm^-j69j#R0RUykXcB~CEY(*`}!Ne`_}gvDbdwu zw?lLZB>l*xNn?qz6bfZk_~fhA;z-MrF0u<^sR<)Ki&4Oq=$-Vr=8uN^&?q>9OJHB$ zTSF=ZLp9WaH!7mBfZ{Zgv0}7*oCNCMP<$GsbGrtFBpZpLd+i>tv9b4)EFAo&6R`eC zl5g|#ElfuaT{gKGZMBYeh)pJU`uMI>$CfQ5x)jLC*-i?EU(_|MJw1mMgyiR4W|qT2 zam%^%5$VYLy892OCs@h4+YC6YpuodaM+t)@O*pAUGXq z7IKa*2nd%E~lrCNg@v^)7qgbI{%%c`OCY3 zX(Gv*5JW~N1p?IR)ceX5D^w$^%k>XbBss}g%S*fb=xT3c76LKON7`DGXr3KFX0S zh7(w8ow){ck(TN8oA)a^^DO;xK_M=_1wqCNW(r!le@U>LYg7mv&MH|}AYW0n3PGT9 zMQ0#*-L0v@L4DE$D1@7DED`@{DN9ejy zSx~eV0M8Rz?BTPAutx0RxgNLP&O|}tKTEXMVqmug9<8fHf=a6(^jJBTqnDJ{I-T=?DJIMjK#VJ#njgh;@c%huu|FM<*vp4A;d2t zVRr8AmI2rxW!hB&^NwAl0e*O;>IO9(>3x>q9PoTF1GaJG`E+tus$QyQXTy_)sZP-f zy5vgg7Dj&#gD|HOGb0s5g_C{tZ$Yn5pf3UPno+F z#Pa6UEdPnT&@QC=XJea%!SQrw=tv+KTtKbXZCkJ;6W9IjDHB09R1E--b^I1rg{?s! zqIX*D^(C;Q_ilufdn9BBHz+PQyD{~`J_$eNe|R4#;e;=I68~p7DzH??XflXBwnGXS zJ?yO@gz}OCDlxU%wsy>Rz|KYwge-Y&H0GKy4G|xcHU@sruRBE7>YCTS;IBrG0GF5- zi%p$Vo#%MO!Ok9l{%%mFScGt!IO(TOIri{;&|Q-y#CQjvBG8!3xStxc^Am8{eEH-v z<+!^3G;A43kgc*NTmysCE`I&PZv_tL_s7w2tC4Le#5$pyIvNos?q3*4#jPOK-9UBg z$)Tu9g+X~j3?A=kHju#|@_>rYu&bNXo-fo1tfkk%_ThaTuK&Opip1YPw63_)z%Vsv z<`RoQI89x;HjNURP21FJX4y_cKJB{_&<&N1CCo$6ka}90V9EeE0wk3mDx9{7&sOPz zIXapHrS0QBFaV9Gr-Q(BQv2-IQ`v`)Z5boy&)YjYSCIMqXE{pT`fO_pxC-j#@69dq z7makv5>ry8eGBvQV?h#c@=dhP%GOTWR8z_sD=Vwsu`w|y>H7?RQ=<;=+I2WUuQZ*) zXB2R@fm4GwuQC}vE^9N8Yv{kpPy1G$T3t!O&-m98uF7J%;NP@3FV$__4R3P5*1M`=GvI_UBXf;iXG_UiVXl+OpohecM3t z=&SD<&zmIBHaIdu*GgAb@sbNu!j+V3>gwt@%Ev6`BRL(%N_y4;0>xaRQ!S%BT$Ix6 zu}iTH>UlTd^s29JrAZ6GtG+(rl)y@Y26S9-pH6VuE5AAw@II=iXBJE(6ca14p9qtI z{?Uo!P~0l2``+KTxCB%3#i92KyQyh?|Bm#zeWbEei?|s;;O!bP`!bI!(%Nk%I zibz8vY<2cn(5j+^s1I%3vX(E~m0Sov))psLo?SK>C9e;mMH^+8rch#&(J9NRG{{TVms zb>xHx+}B}=uQltyleftp_PC=8cJhW^rtL4srVF}Sdu;;V?a5cnOPaZ5GdI7u7{yVy zEDvHD<2XWF`7FsUEqVdr1FMeHEn8Y#eC{~@#(jLARz~CI_wTrYLerI_i~)SNqbG-J z+@R^&-mZ~3lTw3NAfn~hgB%53Mpkgi=7~FJ(n?cvFNp#F-U9_P6VJL8<1D_W3t@xGNn@m^ z!hF!)3p4kM`A1g-{ct&69$r-sntI#^lcej@ONgSkT?K{g)|m-IFk&E z=tnUlC%$y1$WF;(HVXnLGx=kW5Fp2PF_YvS?s8#6|73%3!;gJJ*-It6eq42*;xcZf zk_-3p9Pg4RCMQ$BNVoLqDvBxAt*ZNVI8eu>*OM??ae*6x{Hx`Czk?kQP>qByb;tm& z{u`l`rWkvVf~=_h3ot@>q_=nUD9>zhQ)*P30*-d4E9~5D@;bH`vrMDhiK+e^A@glx zVsc7CQGG9Pm1P!-R0BVdfk0Nst#2GiZT!Sel7J%25%96{66>pxb}8waU|cF$(e>%5 z$8uu&975^=Rbl^;eOJPPZ_#hgD)rAkp%RI4=gUc*i*m4$6sWAIfYW1KW^y@PY^Jw{ zw0NOIs$SuATU_CD_o$LcKa`A1JSgV2DMTDfPD9Jsp!y7E7w2Q9+Tze=H494t{mUpI zOXm+tIR%dI{$?z5EWl+2I+E2hbL2a^MzU*Q_B1+k@qx>edvsX;>)DESkl0k{J9j3X zX#>otydv}ciQr}O=>uSH0>DeM<5n6u+CUvX`;CVATjw|NyldxVCc9OwKl7b_Q(0-8 z3R^d+1{J~lp|C(r{|9Ft{YWk}ID?8DT)Ji`S#+B-xc^3Gw$LKgxPJcp=2sy|6GES3 ziwd8@P(gxmMlIobOFA+Dj$T$ojR$0xRaTC4K*=O{Yh}S^1yF2mAyneH$Kx}L^SJk~ z>$PZ~K0T!Cxp8v=&2HK|tB81BS#RG#w!D3Kj_B9C!L7h57j9j+#r$_x_?-rMqu+4# zK|saKv(Nx^PK~p+VtGbb`?R$*KEKP( zl$I{6e<$dFDod4)QyuS z^%#WrNVsC%RRy0-2)3rS8~9Pg{OS>BI*dwzR22#3{rvv%R4wTk5 zh@je&U*yi0T@=#ohVonCIq^Pv>St_4XC;1Un~)GH+Me7_qY|Gy>Wcr&9CMj>bbdn-$m!tN(=aGJMpZyp&c3|9l&}`C*zrKBJ@-%W&%q1QP;@;ljo?{NE(WyC<3KflJ zXJ=3K&exw$r}-36-qtPJXpkeUE?m>qZTqHC*Pe^}-)-I=(tH4is#v=Gu`lSj$vAX} zjqqdsi4z`!2Eb7?>;-r3z{GCKYsKeZhj+l7Rfm*?ea34$;|%lG%WA3kW5cXdnIZmZI}?+(|3?!f;ElKl*t zmLxhO>0KPZpzD9Ny`Iwbt zJR^Q-hCs(74F@dOFHR_I_Fqca#zah}1^^SG39+@avtIiGAt)jFK!<7bG3nVtZ2xWy z&xE^=Gk&UKdJx1);1WC!SuIllDA(6HMDLFKu{u_uS0x-j?cQd=!JC4>O`(=2x24l$ zyZj!T`?q}7x8U8n^CTzd)Fwc9ouL8fVC!^;nTqb);$l4nt=^>#82LDK;t@=hkl`KiiQ0-BNMJu2DNZOp)Pm5oYFtALZ02tEIt=yjKp!de`INj z2PFg3#Ya3Y`?29Hy|`kndT!ca2M@yos%f<5_kfQZ>YtrU*wDkiqJFwvAZhd9(F}G^ zVpLUlI{eP1lYfN_Eda(Y>|u3i8#z^y`T@Ce_Ta`>dS^3HWMyUFQf&aBz&o2_^YmnA zvb5qgVX&0;&h}PNd^jg1Wm(Wz4Eo=|bm3X(A5WaOIow~zKV5tOba%?K!30y=TK;8d zP_SID&Pheues7mf)8Ms~FGcCJ?@L0!^LHsU&3Uk1OCUn=&gJnnnoh@h+|ppqA?C#T zg##U8D6of=-bzDC&kjlB<-Nq(wlAyU%HE6^@td`47jE*VY6Qestav8H)}<&P*k8$s z*S*$s`S-E}5`bT2?cBayKWXz@I&_GoecAN+l) zFcwk~*5PL(d0u_yaKt+q@W=Yx9oND5e?AXHOFgps_nMS;f>p9~zuL}wj4}z>@anME@pN@Rnz`S$!qBHO&d@4_OZvMqzzhC*6Zi}LeD)XC{1If1#0jG8N zFk`0a$)%|-?Aaegsuy&sGfTA+%}m*jIxN-DvrOp>98n-cm6Pnh`e9{#-FvRxZ{q%k z*SER(_;dpG`}+Do^7UlT1FHSjtHb;Uu*8ST%J6}AR9)CmnfI~mF_>-VVUQvjuJvAe zGP^L@`P@u+mf!gK>hEPKy#Ol?W3;}s9sj>&>;(sL@D&^_rSvmuX4nwjHqdip6J0-Wt4=NIGKDJ$@?RiA^Qq z1!Wo-lo$`p=H9NSfy4k*n@5+^N?AvC>(K0z=X*F#f*^e#LJm=QOv0E-w0lx%G|n(J zcVae;`LXzK#!LtE9Vl(DTN8h8>@Ru)t76YZHzS}!Gt%YD9>#sm2*AXPP}R=gn)UA* zD)`e*PJsJ6D7UKj>adA`x$MWRRvFC(Q=JIR(S_${2Yq%`g-|=h@_T!#|FolQ-WcNr z9@O$~;V(^^hw&%`Uj{Rt@ZvRq^JtRPG`f**l7D&WU{wbX0SXR1;oNSaYZ@RUu;p;| zU!eQv|;nc#g+14nxgl=wH_#ax=cSUYA>*;=X(#R!De#6LWGn%q%q z)eQ$&yWwh&k~<(w&U-6*zKb8N*DC?yCZQ?ovwxAZ2$1Nb`t$9M`IREwWrk|~8+7y) zu&?74IGuBigo2REb=L~GO?!|L3Q8Ab<#nz)oWEzAWC>O(8f77*6<^pcqwb%VpD&g{ zf%iw+w8gcw2=gs-2Q8y9EpN4xo>q<>j}g;Qu4wE*OK2_QK9oojSW_H8e3gF`toczZ`yXIl?T5-S^Nx2{s8wvVH zrwp@GL_y6Hs8X)WOXle>qV9`RUXTpEKj%Y-(sH=K=br)^XRa z9RJ!|ac=!;T+d9^V9DT0{@jtwXX+i?)}P1&)`aqma&K?(nCUnphw^@Tanm6oNHR?v zK+tk$$IDQ>=49-GwHZxGjrd~u>wyWYa~Frw3eu4kw{Ng5!nQCJ~T8xa!k&&f#;ve9(8O!f`ZT ze&qPLLf%DTI=f*fu7MaMTanCEn_8i=JgA+4E!GTMNIDhZW8#3f!*&Euw``Eh_b$J> zID<{#wtQM@{h=7dJ^Ro8wRn+ypci`me{^F1-|o6n%@21;;a?!s1uDSnhO9s9x-u=S ziA`H$*TP%-Ag;*`7c3^|T_p@-KuO&))ulUtU~bgRQ0!c8PRfasvRmHc2pk- z1Pu-JMA0t=7mNd7LWx3&yr11P|Gl+0T6C?v@Nasqe(~HWqofk_E+^_wwf=W97`q-v^NCCFqx}b zd=`>ab>o9hO@k~m+}iRzW`(e$hveJx^;fx^E|X7Fw4Nuuoh4~;}D*P ziiG!b6n8{b4cdQsQL+glwZ_LTWwH%(Z43zA2>*iD1t z-t9O4fjbD~06u=>-u_pt_M5N3`7~#M-)$I!u;YK-4D$)N2>eNBHW`g?A-azjye_!& z+C+wOOwzCva8D_@U5fI7m6$h$O-DXiH+>j4SdnaHRB;52)$Y5YQH$X^<@HVZ6j3|HdO`yUJO`=(<_4y6B(O zQaE-e=AzwAoeN*SsoLh+x!JC?=jkHq${&|+3)iy zVMFf&(>?Hjt|QgpG;)T*%Ad~7of@w3%VeG5`QS_OP#Qj*mIbWegf(5P2aTB{|04WR z`tT#cyL-1Af)m9GEWoM+!@uYue*z>mG@fF@t3*Ksnu!_yL+AHdmpRaFWX2oys=y?tFX4{}no4f-$ez3wQfUWke zPYY;7bE>b>3x!UO{Ap1sH*R>>_lB-Vc-yhf&wTy%?RK{1x0lmzH%<6ug@tX% z>%2zg-y`YJMb{`!0lMr%O23J(9!HKuoAvsxA)&CTcGOVfxIXxS4n0D6AC^N|~rG5ynB zbP9Ya;={pXI>of3xl@nN)qc`vouke4HZ5>jujC zaqFY@_V#zrku?#iS_z7?g-)1eW2TfRcCXWS1UsR-Ai+enud{*SJ(0TIifMwd--4pV z&B)3`fs|EVC4P6NG^3*jzr8*-H!`?9{B-s5c~Z1O*W~fj0R^U~!r8;uMd^sH#nFU_ z>&~DZXR-R8Zh#A#Eh7z1WvaED`}i`|nGgwPCQ3=UjK8P8u<8e>WdLc(13f#6O7fuj z8GJ}3003A_daYcnTwSmG2axG)Jb;n@)AK^dEQ8}AtGOc$;K;iMU773Pta|f6`+amUM8LukxJhofMAymVoB@Ga};c z3?}^CwU$9nB>`3Xgdz%PBYcN}`eLqB>mLn2Mcd5C&ephOE^%(8#4l`5JWef9?c>^- zn!6JH#dId$QiSfw!7LC?LW@30g0`R#cfdwkWLU8#Mb;@~24fGHj&Kh&I>h24ClD)1 zmz}=N{AlPXA*`v@q-ty;pmN!k((kBG^o}T0Nj$4%1#hL$MaO2rum8EfJhrbzx8jqe zB#{o&eu3Qio~#nUUb$ZE)i!8Ak;Q`4V6FxCX6W!Rw@Kv^H!MwP(>m4Tb@?7{ng|v# zt5?`psqo04Sw@@2SML6qFEy=JTCOl?DfRs)el|SYAWFKqH8$X;CyD?2NR?Zr#M9+8 zd)-sln-k`8Yo6U>H|{udj{{UjGV1jncth{fq`MUbCJvx^IA4L*iBuBiL4>%ygGW8L zTChcrg-mcy4<|SGktnsWL%Gtgox4M*rq1{BNYayYIrao7Hvz*fD{Av-s~n4VLOko6 z;-28oF2B6lJ$?(6y1CZ7L3!&*5Ohe)jSUgL2~6{{;OiZ~9WRkWU`TPB`$x}oN}17a z0Y04{m_|Gi<&ujaA0HCZbO1dPb!V@|XdS-vh zrO4LJr5U|YpC~wE@bs3#rhl~rZf_=A2`nhumG>?CS8MT1z%41IlFNGVgQ82OxL!ag885wu{tPDe)UZ}QTxv3M5H6*dS@*6~4rq&aJ_+de z`Kg#q8Uzy`1JT(C$zD6+EYgA=m@q>R=+CpgSY%OXHhF~KIc5L+lJ^(7O2;2fLXS2u z*@@sfUzlcH69X9C2M-=_^J)gcXD@D_lH>uWaush;z!olHY{wqGFV=Bt}r-#VJI{j2HV{7ulDmvt{nut5w0 zJnEO`B-=l(4^vST26XEfmCq)^xU?|fsKmy4EQt|?8vRIkPU=<7k;gEY;F~IGfZo7& zkpZZB1>jr*klAZ_-AfwhL&L%e(Qp$#`!Z6sben<=Z+8morle#|j+hxq`NI;lpU~zSyo1tyZx~7WD zFp5Lw+rSy1LH^|x-2C|IHuL5 z2=MUG53Q!54hYettM&_He;nw>#Kpyci#KFslXK1DkJSM0MxV*(44WW}c#Ma}`^kkS zIgWNhD<|Qn;Hl%Llv6tPL*{+c(pFt)S1s&N{)iVkmjh@HeAUKSY@}A<5YyGBM6J?@ z>lbp;cU-|L=Ev(fPmiEZ4{dEG0S9J^;#t#WVAO$AFp3ur#(cbe#c&QIU8|Ip-YSFk zoH)hmD^k4aab;gR%lavrYG2x4GcGFXy+&iN_tsbGy_rgQ=1fg7GM_^45o!U`j=UYc z2Q0dY*M8shi4zZ;z6-O#4V9FNon2kWj?~#KMTCpCDFlWb3--Pr1w7X^kAXAiNo!Wc zFD^2XpDsm^<^+HsggI12^VX< zDR`ehj!Uk-?(s|gFS2BaXJx`&Oy}gEe2Woi9Pu2rRGR&>lkum${u%FIIUh^6obhqU zSn-Eb!AR)ffqY#ryYVwa_@60&9|^VY0P*xpv1WuZhxjE=0d=Q>OZ?>Aio9p`Yag$3 z)!A;q_}5C&cXax15ly7=bG)uqd)4#e!)wnIK~Yh+=-cegvqCFl4{ciC?&`pG`KmPl zY%}EnGTcICW2ScDTL1{4s!V@jVF9dO0#A1=Dg0;1|BsYjBr6C7l3@Bagktl%MDWJo z0VkuM%JtJ2{vCp{F<-pA>n07mT~pIdT_@L=x*{<0n(bDFhLb}?;RtoiJHoC8yi|P73#fux}^eH(Nzp z2Bt*sBGXFvmb!Xt{eN-+5QtnE2uveW;YmN8x&OI9Q!QF>$p$-F>{YVWZ_%A{db^}S zpZ>W0&dAzkht*c-GxW+jC`?a}i7X-_we0PzqDo3WU)paktGjsZ+Hy?L)-(F~(wnMY zvZvQUu_`tU#x|)57&WRVE7c|fYnn^OPnpDS36u?pWEzc6*)=~4IP-GzPjT|(Xt+rK z_r?W-x&fq!cIS71+W%;Pk0YSg1iZq3hg$n{cf>!R1mhcC8iX`nX1v&~OP6>3ng6kh zZYHRTatHv5fh2h49M-eKK>encht?@Bcp6L^eFmPs0acPVq8U;Nyd}a({rZ1DO0+(v-H#++Nkl9BHqAQ7$cq8zp%AV8GU$I(Se+^X9cwz*PJHT z)T9E_BNbF+{NmLW{jv3l3ZB6cx%YRD%Ov`g!L?hNTSqSKUW0=u>TtKud>Jw+=>cx& zti#$on>F5zqOz@KFVHZ&DE$ljp~?gl*38dL_cuEFLIY$TRTj*isDrhMuY%Lc+lVf^ z^_zG8wS-R2*>lzjc!wSQS;n)K_3;kmWc>@>e1!tVPYs|UWD^JyRQmGyeN@i|tY&JU zO75|q9@$z7>t}FjhjsLS;ES8(_gk0InbFi5@Lh*a1WrF4E!JvWwc_zCqU_bLnC2fv z7_nbO4H$mr_>@e2cMN_}0{;h7@=sZK;Yi4o=5bj6HdCquJkW`fvlt0rg$7xHbfqBz z41Q&u{>SO5D!@(=lkJ&S$4wLjh*rs^U$BqNZbH%ILihIn_;En^@-OR@Wj?r`lKiNO zneRtdCQ|eTXpQ0)5s7OGdr$xGr*x4e1=!_BgRtXUpE;~KG^c`(RXjitQ(ITUfQFE- z^CRg$j6{D5ko(8mh5dG@CD#OwHX+IG~Gc$v=(M3r7N=CgBe1cO~dtwamIY&Bv1y zgSEVSF9}){N%x{@hJ7`nq}K3VTz2F8A4DO4Ys-H;V)1`26l?Hm!41x+_}%NOh$^JW z=z}jXVi9m@MnGqjACW4$j|iJtAU+i02|bmZoMQGR+s=nkG)_Acs#j{0k$9H}YiR-*nMFK?b_gv}4us!Ye@ zCr(V7dOj_1q?-L-z<{)O_m8JP-Z!l*`ya}@o3?a4zES6b zFr`OsUU0cNI%x@3XZ_Cb!g~8noie*pQ;PG-9XucE&jKEGjlX%+7YNt^63x-S9k#zc z3AqaKIM15B-V$j-p=Z&yoS&duFV3H}gpQkddlwy-U5xylhW_=OD%Y_c&f=v{HMgtN z)@W+ac0}gi>fy?F)Z!x8MI~s+i0SV9ZsAjRP)qHdE+idIu(scfJ+;2h)%W7d!AZb1 zY3ARKU>NLrLPc=FVr8QBshX$$Vd<&9jjJR( z)`5@6z7f+8iQt24ae5vhBH^gE`_)!(=W%R8f$z+rC zXCK(i)x}l5Y5QNd3?)v?+OL}c^cS`Q&~Ff-W45h+r`88&2J$rzF^5eaYkN^xU_=06FC6sfvO-i3g@L>d*a$WeRFJ?I|% z*W9l0bEULFz+y8z?f%^XCfXkd3@m^p`?ltr1L9@xxi8+2SjsF1i~*(F^5i%`^m78T z!^qOcVPgInhnNcyq2J?uJh4OEJRFi;*XYIf{kPV9&JWEqh!mS5R1BlB)M2t7QGkH39x<<@AQ- zxt@1OMbcgSn02zbr^Rf{3Z*nH2K*#Xp|0!A)C*5}_{{fTn(q3LIfm0Xd*TEna=uny z+Ksr~`b*kr&A`U1yGo3a{7W2oQNl>R@A5eQxxY8Pir~u0y7>&`rZuNo%j|4qs@IH{ zx8hSMB^HM)M*rO$@o#&`c1r&i)D~*hC6zaLXYlQ1g;x)WtimhFOjOg!yGv#-2^2TI z$N6d(A%&fl66^>*3MI3>R+YI7%J6v^2bg9 z&b~!Ns>l$U*Rql_Lr8NBUiGH<Z3>O+Z*>w&^Xcf$a)jzD`@77Ekcf2IB zs#;9QJFT+f`T=FBf)d4-8YN5hU^%y7S z<#wD_R+HKHh~I)K=An6XWC;B&YAJ1L19I@6#w;fhHBs=zjRzMm>X4FXfA&{DCUHuD zTvhcV!eC2Mc+}tJ6rSZsSC=HG;Be67A9gLl@90rsCG;t;d56M+&W~ z8#woEp*B+4MRt}HD-LP+qn@GR#VP!XP(1iaP5bqZSSqI)BL*B5= zssDBHi8r2W_)1Z3c_(!2GPck`p*-)btg>vcm*QB$fX$V#D)!<4rcI8)QcU*x=V-iU5%m)1dKG|{ zD}e1-SzFr`db@xHe1Q$L?Zvj=vHlZ&Z>H99#rQQguXXfg)OG^IH>ly; zsjgz5xO+41bNusdVs-p{pTD)gKElC$slZM0FH8I>udpj+rg5^5Do~D-Xn1~Tu%V$B zIVtB8h)jjry}e6Tyak2>mfvLSlm#)^oqG>T!NrLZiQ5z&c*xd&cczc3T|V z&{tn)8!5)``<>!Yc$Bz3!<^9h00!T*0y_pYb4@<=wACY-B|glNqr1_&s|DY;dVP!o zDP!|*BnxP;TEL8GgK!JAmwt`Qn5P9>Lh}0Izp-Nsi)ZHN>(1=H^#L zB-OS^HlN9AHaZsu&*$1_wZrDU={t}~<6$9Hv$!PcO}5Z<2j~z zh8MK~6DzI2mzO3-Po?**5hXDyzN;1GW{RaQ>0(D;;HC}^{S&f3de8q$iT?Sg3o|$a za%K6}-Pw<2p*iX|WTTSk4WbH?g=W5T=veM;+~I)8qU)xw~Gk*UXipf zVWG;l+jf0zu6tCWYm~7#Y(2|iqOW%9jJtBj1lE$XF9=|zoo7ii`r71z12 zezH^al1f>@G;_!^X%h1205;zu4+!^%3(5x7y-#f)@-qhER#IR8!q7Vsj3K`Q)2}D~ zOB$ZimAP+S)_wo=O^`KwB@9ms=4ln}?(Qzij=iYhNGJ52_&uIW?k?3oE&;PKX}Z%n5ZcA zOq#Nm{dvdbX};2yWvw~qV%10JOjb)Lt-BNcr*f=MihOzG?f`7ZOIgM{*NHndYB;RH zzKHxk?h8|yacM&PSH^m#5+oqh2)ubn?Xe_88W|oQ{^>q^4iK!z(j3joZbRUBdw7Q@ zzP$w+JyYEHe_=rsk10mOEBa`gVH|D-c`2O|J&7M#7QGv!&G}%V#!s;BAu~EzUG<8u zhq$7AYmynqk-7#d1vOtO1kHP6lXxuTmx^=;hlkhr5hK`7pK33><4;D`RX|R=ZG>(r zG3R>)IA|goys>XHHy-B7zD&{d%DOd3eW!%}NZzkRl~q`Rur;Ui6$W}O9dun#-J`9} zL($6_y+JHL9V%LWaHl!tn9}`x;=jC&%(utAHnC5Wgxu@~L@M)D9Nb&P*62&!54ubN zw-C4ej6OP_q?r5eU0T#=aRPIOw*p`?=-Yk?<8<-*+Re8QX_isHSB#{(W=qU;;nh`ztolsE z*z@;mFP(eWVky%qOy7Fae~*vno7N8bI5zfr?Z%DRtQWqNV*(c$W@Pzu$cAl$_F+Sc zDQ<-W)tMVA>s9Ycw@M^m+pkb|3iNmd5| zQSu!)Ww$5EM%9_~`$;HS3wyh#@zr~-R<^d9_y$aTyq1-n?bW=}d|j*)jza!jhN_n% zo?nz>j%*dVTnp0Koy+fb?8h2uD5+gB-Dvt1jG;CQ<#gflTlZU_9dJ!PV%Wql4h@SJ zg_6M(Dg3r1SZ64$gLuE^kO>_<58f!Q(4!h+e~=9oWX}F+a$iiHl-unKiw^qv#DA^% z1?kptC%VR2}n_7O#mF6S=bl z_!=5s(N)O6=rpSyHb|EmET5BF|ri+Pu;T|*_7Z4iyMYlYP#$#m1 zVU<-}(@%*Lmhr9pIR6`E_+u;K%F@%mZR^|fF)AIRrCw<_ockpeuKjQhi~QoBC1-hMq|TT4}UX??Ell+J`r+UBM_78Nwu`3i$*IPQyEAXpU62vniV7 z;_v9v-Q*E6?OJ4iTB_3N4?W76g5t5V%eO1x2S2VeIaZBg(c$`hg^R zzX3D7U7+3AXy<9{kd1>BBWNMTP9#A!aU%8 zIA^7`DfM-V8iQ<`2Mn>>^@=kVT%usS$(x*Nl8L=vy4OJ}109Jn96jkxxCknlPP2hTo6t)*8L=TuLx^ zBM^xd9c?GTW6w}~_meJA6Qm$h5=g-9lct2Ra=&cIKOU*(9Zv%WvCqt_(=Q-|ZQ={? z{Dtd1DN6hEDQVaR%gx*#zs=%%@EC=!Q9-_&&D(N zia`u_CJ?zog5)miRgf6S(N~J{NxS-vgwiGj5jkOY=3{ukYgN_jv=FD=UT)Sk)udUd z)gddot#)(2adW!3>&V;^Rep6QEwOLd1}-c=QCXP;LH5izA@`I zdDrRt9#BlLn#Z~0o7I)k^+o##L$9zqkLR(MIsid9s|T0@WQxb`Cjc$|d>vBs%+f(F z98f$HcX(0<_t30kn9;2l0PT~XUHY|*$bA~$S~T%RXVt98&$aR*d>c)e`homMBPzmM z4C64D!nGQtuVX7^UcE{BBm2A0HawO-w+h*xc363nAm`@hR@7%RR&AS->Naz*k;0R> zt}HNLntoSVY_6r;ZW?BpSb_wk^ood7fsL51tiVQ<8ce{DijdOG-d@dtCJO7%Hh?FB zd^cu;qE7xfJjW793-6zlH$QF2Kk^Gk3g?}BHljZ(y2hO%x~ib3r?+Y{)#OuOge=n< zEz!-v*)eRl(dJv+y7-$9|HEB)A$VEtdm{y$__k|!!Mm8dE|N~~mENx1=B`*}8!TMp z9JF>m^*Qs(MCxQ}q%maK>FZpMX2?F&1SYA$aR1$DMv?ZxTnyc*Ne=pzgQ!a~Bgy4! zysa>2e-3wnLpxqeCv(!L1y?k7KN`j~_7M$U@(k50>ozm^aBYF)efW-luF=~0!JNl?i495lS9NzaAa_j8O33r`)5VXi@UORf9l=b6uWU2Q-S2@bA{?$i& z*oyfi8FFC(0jSn;cNphLksM*yKJiDgC|K`Ds7S#$GLBI82Dz*Z0J+Qm9F%z04;| zc8aYkGP*}8-IaW<5u_0`=302&B&SUkb2#tlx~HzHHj<4P-@7htU+nO}UBD?by^qRV zizgw3DS^2`lW_NZIBmB?5( zpPHj*ckqhpuAm@Waq((|!SK33+&AA*U5k3N$%KWj+x+3ZUSETl+a=E2oae(IBH;0y z(1Y6p7Y&g1aO`|2kFpy|MdTnBWQaXreXROBBc%l@8#-%M`S@>843NHQH{{J=f!%&+ zJblD{N#>);Xp|BZ`i+=>iUrUsl|qQ8nHdj-GN`xH?2%ar#~GSGW56Ira%}zXj~lgsSz;_+?v|yYn`zC zhk5yjh4^JZj5^OsUBa#`eC2w0&U)77QF1$04=>8?`b4G=5XA<}76s_m*48Q5!9rE3PjM== zDS=j$OEhanbykj2En{tC>aAino=cX7ebcwEe%i!!ru$3Urgz@{Y2sCR?ATm*%uS)g z>89lb;m{nX#kghoCb;d#Ei&HZ!M}YBnOA`x#+0N40EV$RK)nrB;P*k_hQvXDYq1Jr zA3%CMcsUm#Wa#s?P5I^$Mf7FtKH)|iCQVy?1qi}C$pR|Y?Xw+v1!xk$L_4(IR12xt zoea#>5;ni?M-IN7R+Vi4x>uyj?PeH(k-5{0Y7j*?EHy|(dN@Jwx`qrXTqA6pYW9zZ zL~{&O;EM-UhgHFLMQT}%jRx^+kKNU8Rt07?-_otI^9ge$gSg@vJh;7jZKmH_&6%%k z*1$^!Bw}=Qs+R_hs-8t@7HXeCUr&IU_r-hEcMsK%H8rYu*6gl&78B`HjQ5GJ!Nzh+ zLS7;;bQboFu@k-oV?lP`;JOLl^c_l>$wtmk zz5k9}Ze+wQ(@WtqGQKG?0?+EDSW1&A-s2S-85i zX=PEkS-(UjmRG$0W3!-ZJ=%Q~6~hN;dp$n;{KAYO4ugW3?g_j=F^og2lw&8Xs4#JP zQ=eidHUm02P?J*v=*2AuKC0pZVzdRhxmWEGjx@@|H77MjO&=mhM>#^Sayl$IB?kt+ zGHZDi7T1$;e?n(0lq)$bn+go?U{9+M)YL`4!`lP!xX*`Y3~t=qEZ`Pz)X&Y=D2MZK zaOd8Qd#Z`g5QAW69vV<=2p2Tz8q|2c^vM(woguepy%X!O1PL{Ct6i+>Q56uY&>(r` zrGBi}dLHMy*^*_l6+e~h5LysGb$&?ZI=yCNEt^!mtL|OM#6%jLYS)v`cFIzpV!+ag zsq{ulS^rvJULocA_0^Ut3J$|}vP=dP?+se7?_Oaf8sZp0UgC<0=eM6=pb=is7=Pds zjn&llkx!F-lb?Q{;8n4)+8A88Yn_b;9^`!I?b808v^>!jtUNksQ@)1Nz~jvw7hkn} zyP6r#l%v@*Vh&wh37iRCocL_Lz5NZX%T4-T>%8Tb19Ua}gn2u{fD-jw6rDE2CvL6e zM(U(Ag~1(CkzG~eq9jY-r8Kvon9z)+^~Dss==3_aX0_>Xkv$!Oy+o4*TYG4V9v-)k zH)ui^+t-=xC>pjdrYZ}RO5qhb>U2Pjl+*1n55HIGy*5V^!9iXC-3oz3QZ&q-vYP~M zDdSQ)s`0>o$mkH?mxHJ0^g8I8stv>!fg$fSDj!u8cEwQLJPYjhJ|RM*9z(~Ldd}F? zOuJ4haj-OOeYlQ(kkki~<<)m5egvP7&c`b3W(-X;5>dEwo=+LJjNq<2cVrz5zF%HIIvK>;FGkEBd`xI}?c0&&1$I|D*` zEGPBxF3bVf?l8HxzVJ|OM5hVf-rMC8H60GDnZeP4ap7U(%&RrBMPXpxgjj%itM`O+ z>}ep~`p#lg<2N}6(``#aDj#j#FA1rYpNN;iG^G%p)O~;Cqv6vS9xMV82EMl{qu)qN z7%IEGqF)E;=46m7GO15t^=9qa7nHF+R>am34D@@oTE#boVoB$GBz7&;)M4r9um-)V zw2xX@ss!~Qx+-4I5Eo-({RL^<2=Xb+i+%t;6}$L|=)PTe1{9@9Q(mjaNQ~&RU7@Zo zl)_Vb3iSqVg$hao zT-Abh4V+-ZEF%RtIA9SOAAr+~h6uEWh2Kl0moymFfO1Z_cMB3{J+b@r@{VqUPK`=v zL>CM_kl}wlCp5c8{Kz{0;^z6#2%@She&)TYtWJyFYTCt5Rq-^}t~oeqOFGrYsfGw? zzGJ*)-;svUzkiQq=F+Mb`O=96^U6Zh$92o-C4?}fmP0biGh5aAUG@XI01b&KF2fOz zn3K%NDL63+6NDm5Q<5C&48vF@EhFE~sC^mLvr`jG+{K+Z=$UL{J#)kTx$}za{F0ar&$% zYJ9~8D66%~w9R7!X*S~1IL)*1W(kH&d8v-Uz9uh;IKGDpA1>zzjRfV_Q)Ps zMXGxB#+05Q<}`)}571j@#IsIh5*TJ4a)CIn&`nZ)s;Haq$Y1_4wrijW^+{>wkDOF> z%8-RW#s7yYFi5b=M8j_3Lhj65V`4XK#QPn1*X77zRndbJ#D z99EA}SlDYuJ5lhy#Rfqxf}DSSrcd!Krji|vb9xN4#e$m};ea?5l(H3**#FTb>W`T0 zBoy7LN0MjzD9+twO=*F{K@Eg4h3YDXpx(pY>VgAExkQe*_SEa$XPwhI<#zeS708L0 zo9mp&k_*$9H*MavC-H+kv)2{FZ1|zZp`>iG6qNIxV2qH#H^xB&hG|Ig&68&s?b(=h zryKLHE%{$X`=|??21CD#Of_cJXBjYxp)SZXj*127XYi?^2b}o?fZ^2m_>#5XhPW zzD}2O8%MoqjtDn6D&D0WR^ao!#iBEr_lsL#N7wzQ8M4{<3vv1`Z8vMY)C=*JG@fIa z>@FP?vR?0|*B7y1SsI^EOfRdl(Y*nl$*uW;~(vQ3ptp$)kr_;P|=?9P>+Ep*$jiROSj%Vd9Ib?6& zQ1p9DFq%gcx-NTXa=i*vEYsEUGQhkiqu3qQkk8xRm+0lERS|s@F6o)AJJPFxx_8Pp zGB}OTonf$RRW_D9fsj7_Fxb2#D&K6J+> zRn8OMLe6OuH!E#u%_>r>*wEnnyd#{^6T+VVQShlJGyo(sFt?>62HsKKk{KZWb{Si* zLGZhl;+Ho$ODXOouR{J9YM!u17-(kWrD6(%f^c)?cEt(Hn<|^gGxXT_WuKMT-(G*E zTu|P87`Kd^9x4tbzHp&^Z(TVX>TOdiJ@S#*lO%7}h5UH%r-0M>Y6Ja@^&HWZ>#LjH z)8R}WzCAkuD7x#E-B(u6Y5FBPuxhHhzb=SNS>Aj&TM}z4;D&vryz3^q;O*=@EOK!& z0mLh%^Q~0&m{s9Vtzgj7+;F}E}626ys)Ujk@lH>R> zh`FP^{k2fbX9@#`+lJ*I*;6`Db`K~aU|1JN0t6@R_GwWmW!^t8^|AAA6d=7?%yN?_NSaoGko@*VW3BIG+jOX&}nud2#Czmn#fe{ zOOPDq`KKB$S34Qyc~T^~Y$vqg=(jb7{S*2Wx5CTW z^eN1q1^Cr*NZv5hbZ=q_xqY>JM>>?j=flT2jX`s5efRH|G+ioh??HV-xYt*%qkGl4;0OJ1sce zlGwKuNRd*3)d2kUn2NTSJOEM6+X|oH@!~Dwf%BHSF9l% zPIy6pT^JIZLms|xK)0r*TnwfOHoyn=hfW`*c0{-7TvP3_@rOa19DHkx=OOn6PJZ6u zEO__kEuRHxI%k8H1q4iLO1#Y^Y#e$q=ba;G@@D}!uBT(XY7uhH-_KZeyG?J?MJLD< zYEed2ct%dq+S;;{7NPt3ggHG#vRl=bFs^DHE&2Mptk!Kxaw6} ze^G-@i`Y2pz(ViC9q??XSL%Pot28Jzr64viabGx-a{>SDR5YQLmqdldggrLAOPN)1r5FJEeuUj+>CZ&TPZ8 z7fw_f9r)W3f{*tF0vbXe#1tq{2jNNqU-LX!#(iX(r}d_mz*cSy;ojh%cFyTe6GE)l zua$GQg9PhryloIp`OzG|eZA7e#0U{Hnr4PH%@t-dR@NNG39Qx029T7Gq8D{|>FIbb z{rl95)`X>WFXdGJ=iip@!B~Evx?)*Dk^-60>lI}IeYR4qwawNKdFk~p#pyp@$dk3- z9)J$=bxZyqGLoj`sseT+%67f5s>7SwB3v$lPaPEN-d!@k!j4f|=1ulDRxN*c<=#r! zl?ZKqEmDW2vj{&c|L9=3vkI0Zub5)jl4RJ%6!{dcE%3Ir6~w!n*n~5Qu}BxyJz^2o z;7X8N`=-sCckc{SY|N74HPvSo^~SAcRDuIgQ+KIq+sXK|-vM@jvkpBvc^Si5J3CYk zF3!Ni(uQqCM^IG=oahctT83NAF;(2w65RngC^;X`dZ+rs)k4$#X*ahnu-6qw^UPw; zx)yx%+obRceg0P8bmQjnj&W<7AXnd3v#_!0)3+86vRLLT8yl{Z9JRAN+sio-tGI?x z^veKAaEySN9@()Zx-a0?`U2+*JX;fjg{zry4C&rTUf)Y;cCUMC8pw%h0u@7gEEzZ=4BXy`J*MB@ z#N##>Ab2#HVTjX{E7XxKY+U$6lZcq8s7v&MEQerArY^~rTo6=<6+P&H#%aS3N9=|{ z22Z_it2IR-w9JjbFU|o!3bC`Ww=Yd~9_-lrAX#|8x}R}0pEv)$jao63pKKvb#SXfh z6?oaCM`}l**S}6YM(~WA?~>4=`U3PDxG9>mBzUCue0EaII!fwcwt(dOHHgv;w;P5c z6P{U0Xm-#KKygP0jxEH9di98~@D2>Am@q7~$`_I5_B29WSwNG|c6&zu<1Tz{uxtLs z8Jgj_(%P?%>9{Bu4+2A-#QcGw29OzHDt$cbJA=TPW|Z5 zGQ9}g>J!%={7Yr}1uMYj;ji2ex^et}EiHcQW`Z2EttH^rg!(DqTtEfr4MrnYjaSkYH zTzo8`!^p#F02?mGZ$&_3L1JaNAc1!P|A|aF(jT`%>((1cl=V8Q_1Z+ZQp zhRf2Tx98#Bx{qC5PR;``OGVGlL!*(h`3ueckL=7ob#r@@W-@ITYA}GzGoeY;o?6el zm<&vws;=p<%F8gHOs?vYPZT>kL30rwB*rPbQ$v9y9Rf?Y!`-KR5z1Xebx%+WdMT# z$gpCEQ4#G_$Xyxjg}SBmn2KIOJ;JasNd4Y*mqn4rpTRI!T~QDY1E0I;xEiSJvgCAm zSex15^Qe`oZWWa)((4uZ9vS5nx_spsv0EV zG(1W4vPMCM-_RrAj$UaG{L+zHwWwa9H*cywuL~Z`lXk|l>)AZ1{86dPCFt3y%eVgJ+&)~n zLOTFGpRPf2?q96ykHSkL$MFCuoN*wPiU-G4C5S$)tVEYa{M+wW3kIVd7bJBYogE`) zsxMu>;vXGeK~DFCbqGteDRGgqXfdK@>}n6ZC*7pv@%qj8#O_a`X61PK+HK3g$>}>Q zi)c_}Uoscbj1-_nl)JcCn|O~~B`m{@KN|uN1BKV+)u4sSp}t5kkh~rZjE^+QeIsbi z6g&swbNTSuA=$7G3>+Pgd3U7!jBAQ=EUuZFJ^toRb&SY<`{_Z>1GG#Tau!kjbF)2W3uSXq1Xb@?UniTw)L4J$3sQVoos08o~{^ z4bo$S*6Pn>ON7~CHL&j^d^K=i!tj|GF>p2=1)7DDPIn9&beaz1O6Alm_F2BS(BNnR zR+r)d*MI^zW>T@&hD#rRaseD+w{iP$dB=^a27!ozwY2|O2bPp-c48)YJP4hl^zs87aa%lsi6r5u1RaK$r8Kzm|W;r zdFBpa^aVMTvhiSy*X6q9Y$Eivn#_i7DLg38iHsU9h>QX#rZe(Fb}6S$8;$p#u0=TCZhy@3M!>3gsKwypp9NL?HV1gpbkfs_B6PhvT6 zZ7lNeRZ{Clf~v%J2n076cJK>KLAtx&#nnblfssP{?2XIzitOL8S4Mv#Q_9{a!!oxr z&-X!bP6JhKZEXu*6*&gD22@hr1k=60$^#mCJOcsLbO$&{B*L@eNxWY1)J~Why96i( zx9>8|3Ze>aI}Ll)S>`Q*OGB6%Ln{3J`F-n+9hlGjDNgSfmDSa-xzxt=qh?Yt*52MS z-ICEd8wzUduo89nmqU~(j-$TTfH1;y%Bhdk_6cnLEtP#_-OgeiS_tlxH-(#|k;1$E54Odi2O*PtZk#^(M_6l|A((~h+`YenOP|_W zw@1O$$%Ec00 z?d~^R@hXP$0HmBV_OjacmA|tRg^kHk^*rr#4iPSK*{9?A^7AQFzN;$3yDT#7kR|Rf zw@G7f%*U;6wSY7KOnlxm0CuQ9H(D*gQNR1hV;}@F?`k{V@L4H(f9^;M3O8KE^*`{> zwPPNYU&J3Ri8AvDS;SvwgB}iL%zq@}EN^WDzbK`%zl*MVI8*ZFRDl%PM zhJ``;HcTE#D#Z)PZ5(_-!a68i1jJ}kvSjA7~^^BV!MLq!z_7>X#>J!%1vo|{{+ z=#csH_V$SP7uMn>zO$^cey6P)5Z6csc@0>&D?h#6y#kB8r`_>9_eEV*-i(CgY^=&I z9=i$U1U*CniSlcB3><$Oe^{FFQ1~2hgW{;{YbBtabqD8m;=oRZROg3$^HYI7)+!oP zGK`7%QZHL$D5y!YGPGpidKniO7-;I=j^XF#*4L3VOJHV5O!4|A87iJ* z+4{LFDk{H~oHQ8Sdi`s?oJ(Z&6M@P%6Y219#@a8Ju~?HNw*B6`aS+ay#-CcnC297x zn?ztsfu9@i;vRC9JvyOC=T`lCHDNY=M>4PVLJ)I0!Qo5b?b9IcZK-|C*E_Q}f%;sI z+3>1W1c1|u?O}Cj9Dw3#Sa)RaxPtN?r}sdJ>B05_Hy0O2pKyf&4xrcGxw%u`77YJE z?e$_CV5d3zLjJAQ&8PraOfk(~hPHoe1^aOl57i092+^%9o9#8H1TH1Ytnq!5n@Nrf zayq$Blj@vb#yqD9KaaQ*+I~@85&LkR81+>m0M5-@ZZY$)b7pB zKEF^v>ZhEr25Fb9VaQ?L94B&xzokyNaSav3%dpPiVl;R%X|n6__~nP$P;<}IzgiT> z2{`b@)?W=5|0M&N0{~cMzsu8(``?-mUs!PfM6OB_w@A;IXc95z#@M0U3yKpqB z3T=D)918)JBZvqnC?O3ZAOaE+(%m^qDk&`>%t1v2q)WQHq-BUP=rzmu(p{?(N7Cy9l4C<3EPu+e)FZH*%Jk=tT5}aS@Os|7;nJHUk_11}I*(ZX0_ldj z{-IY_2{Jv3<;{YuFq9-W;9}daAKBHIC@4#ip`O(yL^_J#*~9HA7JLMIbC0;N>iK5Se&(Xt1{7h z?Dm)!Gc5M@1c1GCaonf;>0e!K1TOYk$*bRSNDxnFZWPf4U$b}N{yG2u!d3qJ*L%SW zHz;xL3}`{i_T32ADDIo8k)=;5SV!!wHm(zAQ^ZP~%`4CNTN25ObAywdl{TIQCy1Q( z6_)mZK^lG|qjU+6mzXHeQU|=an3s)NS`h6kW`8ZlJu6J*Gf_Bq8uNnl3vHBL!YNku z_>8>8bCkz`K>gkG*Uy=xQ-XEp8nF098UL#a^M^j_e+L``;jKE0m4BPbAIFr^0mOqz zm9BL7n8>5+D$)JP-ku|*+!p!){qxMhyRf#u67v+E=65NB7JLqxr1+Ve%B=h9Eyi%A zow;(0q}O3#b%A3SdbZUSG(2a|ULB>jyU`LQ<{r-bW??Xni!RwCGSgYkGooKH6RN2t z`cvBd4}tvm&Bf6EeBvJ_)c+och~ejZDSeLGsUOm&a6uyopK)ikSxR(}e38XAp>;6E z&saB<+tr4%Veb`F<2`+iGfL&3hD{6mhgnQbX9k7x#4g^VrpMMeMT0J{>$p4D$w&_a zy3sFAVD5lRSoOx&yq21!4cWW$u;;3dF~Gu7aPh%yZ3 zlUI8x}R;+*67J3tpPQ0DfzW$TS|uQcWx{lu6-=7 ze|w9wB`hI@G`!s{0#RKJ?c!|0_2t)WqZ5nXq{K-;XnUdeoufy^>L{ zzPqCU+oostiFTRCRX_5pg3trpi+pLTT! zTRx!azQ-veeob*^?X-IUXRe8P;5jn67o4Ija@SDrFSy3jP);cpe@F_KC2X4n{qn## zFM`!Im%jcxLrQ#(PK)T0-Epx0T|d76s$ePBeKBEWZ^2u2r*+uv&IkwBZE(XCJI4*B zA4RfXG!q`)F0FX&}PdEF24s&o(Zpej6pidrEdY7 zQC6@0@#ViQ{hue4NH0Vkrrb~tb}JY_=TYWM)!e9hMys{?wj%vZeaM+09iA!0SL}i$ zjdvB*GZSGez0ro1)`;t5{!&oFx!A98xn|UbO#yD#!9{Y=$frXu zc0&@l{)&4}WN;EG?ga7C&+7EBF-_QC>uQDt4ci7>;U z(7Q({La9&W5vy}w^CFHPC05@TA~#%$rDIO=t3qMbT(_^>v8AHx$*I8}k%Z6N;apXL z?LhJ`B<{tL*lOJ1WfyraCTiU|?S%r8BXW~QH|aeP9kk;F_w(ms%rj=ouwKa6NrCRk zho|0I33Hl0w72iq_;%uhjxMJVtuf00T&Z2<7XY4xIDD4hwgMy`;v3aKm8MOu#Ap4k zeZa3N<-V4Rj7N7rh-3Q^Cn?Ww~%!dr&R(xKOa-K%qFLZoaqYm!@9B%A7nK zv&gztCCYJ_d&n6y@|Bx#P-H#tmtb1D;G1I86|MnRP@h(3eZ25`%4;djK8Q~Bl%z5^AAT_#n+z+BrZM#4&~%Yv@KqFKsq7q z8I<2K<+vWpIqq!OcG-|k@YeL$h>$!C2GeHz)8E-2sPw_HTJh2IO1tXa)#0Aa#>2y- zt>aO0beyT_?bG{iB4R89l8nmMzgT*-z~-kV21^}rDDNwQ)tAgsVY>mz@5;7sw~C6fvm$36kW8Y_`niJs-N5eHk2~{$3$;;LgDln}(dXbW=y&(srx$HyG*{J>y-qMd+_b#U7dZci8I+0ci(gr?Q z;}P`oybIMIyS%o(eydfhTRFYVDG7~n2v>=}J~5a2x06Hlt$T4*dIA(xy?UYdKw(@) zXY$XVk~$BJTgd1B|C+;J8~7u1ctA9MUptoikC?>wIr-nasF1LTylfsJI@3;K64GcB z&$WOao`0`ZYB;|~1*1wFNsLRCj`pNM_azD$!|GRZr`aADo~Us^#NzQ+S~d7S%;FN? z*rknMD^E3eUan)#Ka}1)Q8)rzjcUsTnx6}&K)e+A^QHAsk{JvZT(U*|MquC(w*32? z1Pi5T6Bh4c-Le=qEVsl+c!cE6RjMrCH6G=3K4Il)eCk4CLw!0t%ObZssW!w)U2uu# ztyR}`+RM|li8USS6YAY{>Kk9>PoY=?Pw_i)xZk%laVTWLjKNpPe&X`sJcYp z@7QL+3J)0p!}rJ+EAopc=^vKwhxzj(?)-cmX;iNOPv%Sg+cLRUC|aG?UMlI$o;bac z#p+YO4kZp1T^|EDA2f)heR>d=d5r2NZ_+LMh{%ES%)QDmr;6oSV|t8%U0Jmz1;+)g zlX4^@#h~1&XVvg0_&B!+_&-CKZrACbLh-+gcVmXAO}E1T2>TsF;IDD#%lLy5oRk@o zN5k$TL2c}1McIvZq;&tS&U!Un} z4Mi}cZWRa{Yt$OxeT(mgD{qzeWChBR$=L)okCrNBLN_-IY5yYyxdp`WqMKdEj~MSJ zalAVefBx~WB8vqa5%A6x7KJ-}b{Xw&6{?F1Z0VC-RwCajjNE>qpq{ZlbJBN49A&Au z!fkQ6rGs*naW&q-xb{*PHOPfrwA=D+;GZ>DiNCGR(%NJon7`~!iL>(~8~?d@Dnvek zyeZn1Cr3EOf2#j23uPev{Um;#LU%R|>r8kh;c5zOD=hb%aExZx&F(>+z&1Naj-@c> z2a$#R89DMoUL|)Sc}icAnnCz!Tei2=o*`#8HYgmV@(zqE_ZC9G#r3<9I?>&4jYAh9-(T#4_3qG7%kX;=F?h*h>a)f z9%5F(tS{IE$JR9SrX5(gwL&i&XY1=ezgRXrILJg!!=snBG;5ER%gqoaJ+@Hs04ECa zbpoTD*;r!~5{&qw1!tatVERKF%gjkVMRZw->oq1LW$RJSq#iDd3e|IHB4aV~jrH}VRqtE(fRUrvHrvM<@r)Y-5GGi1^68=kYgg9H3S94kg}yow&ri(E0Szo=J(nVqyBH~i0!0Mm*VhVrn((Z-?!a2Ptc2i}2Z zYioIFkzYg=b3Ogu*4X!1c{_=X2%jv{mn=e5^KzS2X~2BE(YHoRO}VCOch>+!i%V}K zr}lG$*C&9?C;;zq12stVEg|Sz-abA=Fc8cPacoR(M*x()euq0;=>s)^$&moMwOfQ( zA;*NgvFZXPf*4TjZ5d02d8a)GaT{LSr2(ab>cw;&?vW|sM99}1fO-`jAo-p&wLf*C z;W1(XJaFE3B*O;*Zs&hs7$xDtTO0YPF-;R1Rz`f#pWsDG8t%&Hh)k6m%y+y^i;e5m z0K1Z->~Kx{F3kk4j<;gU+0?Q&L=s}J3m=<`@co!955_{W1O!?iIo6W8ey~NGkv6oA zlbfsr<>q>v3~lb`g%zg;AI^EAz>@-8gOA5r1lEzK0@oL0p1k87l9d|nw&(IMQ2-(h_w^NQOvL+*j|Q8Y$C1z^QoF}s6!2OJC&z3V!80n}d2BIIoC z%mz1r_kRbo2tiyYUPOvi05NNVPQl!h?57PRp*Br!;WODY?Qnx?Z+94lz?tn)oXpU! z9L!B6@#AaS&5E|IdPIN9^XJ=#C_A^t3h7SM>n}ul>Njpefa6Ox^(G>e{#HjA{>q0M zoe1GOZ!E2C@~~I-53jz|>N#2CIKwSQa_Y6OU`G^dh~-NdZ^JZuzsav@CGlcn#F@!W96=%dM3$_MZ`~27Z!UF6)8GzD zqMLh~UG)pW7RG3}NRG)>s1~Gp6F!lYhG^N`s7pgIP2}pRH$rFzBx3+xWtjFX7L;*= zfm|9ZY<7<{Z88G#cO^hR>K*M4d)~!HUWI1GGN7tvIq4=I62Ur|;9D5ryZ~enxDv7m zehK`iCEbC;_?b3S4yS_T=Dz()pLgGjOW*N!4v@8Ni*jygI+m3C&6z^VvdsHvSOoL@ z_JF?oUg_NjgqK+9-ERQk2YAJmfze)2(aLI?6rI0y=-CHXHOhnrvp{XsYh4Zy|tyIp_ za2s(0DpXjg^ybOd)_Yb9*y`2Hd~(fVmX-i z3@GS*>Ymcy?H-A1E{p`{bAKHRYUd>nf|g+U?Y#KF5qC5wk*#xz;-0|KJ#K;iw1 zWy_+6pu%2<#W&?dHCnHxy%pP3-$XeK5Ru}UgVkWMdpj;tL!0u;5KM8eWHRBKf<{yC zc#F9U=<0ZXY5tjZL_QJ2HI6z-+QXlfeJYhN%2KITcp3%JBx}(|uO1c?tNDl7^iFOQ zONDO(FpMOmCi$cv;AQ-EH=SK1&>e0!J)r=fqnnmEKCAZfyp+x)w7=ToOW1&zZ8g=0@p}!JAFu%Ac;MhL zf2F_^7MdA`l>fRnUZ;sjIw8Bb?i54=ecEoXj+h4;bp4)^R<18oOsOp?{NMokX3RG{ z#yIsdl7zp0jU7pxtu657(L6vo$vl^-@cVQMZiG4j9EOEXmu(Qf_LB{Ur?4b$jiUiM z%Der>Z#0~|b~h^fh>ANbX<=m!i^XQw3h&+Pb1EAV2e`BSRrhj3QyQEJO@Y*pRixY8 ze}?$zO;-|XLZcU_6T0cJSz&K(LpR6I5cG!XY$b!-)LZ!Q*TknW+$YXH%V> zs}GBbDA>W&&2e{rL2krYnYviRy7Nxpy+3l`*B2QNT(0%wK#&r@;nRUI)XN>_k00EGY5dxBL56`s8ob}BN{8F}f?EsR` z1HBo+b9jf78scM|gcaE|zaplyOFY`>4o=O_F!n!nvXc;*r`3W>?|uKNU@D{20JP*} z6|x9>TaaxR0-bAA!_A~8yoz>AwUr$?aOd}&y%U>$OPLY7+|v*?c!`ya2vtI4Hgk;3 zoOL(NM-STQj}6TY^=d)Y#ng>Q3B<+ltx&p;FFxE6U6Jammn|7LS{=aD9>eb8eWZk8i%d(qSJ^mr-*@pn6fOTKjK$; z3nphrIms{b4m*GP#0^yk{sEdOlY8)zDSJdF^)ik#z zzB`YbM)){d{zu2?N6RA1%lSPU_fgBr#y&;y%VmBfRgZ?O-A&(kDSmlcpuwY~SdT+L zpENQavEb-KWbQGfq(rVlreB%;)Dc%b{XtnT{+SsA9M_UPWt1fgg+hPSdj2E(^8H~9 z8z_{3dKFO~l`j6zhyIqkYLyAM%67a-Rq4(gz;w(in3|MtP}dS?>tQt=$=}Uh82Zv~ ztCw7L)>LCn&uOQBg0`VfODH_5u96gFv%6|$d9XbxjfTS{*`g=y)^++X#gN&x(UEP+ zA#a}L6t&1n!H0q9P$%l!&m$(405Tr&r1y^E!nq*_vZ-lIY*C+nrNDj{A>}>;@s-f+ zkhn#Rc|H4iv&{POZr#$pJm_pVdCT5_%OWeQwaTop z9_Olo6WqIche%q=-=dswiaM?0nHf|VToC--uJLQdL%Wir*3h+9QdZ^)jl4iBqZznx`Dy@KwJ z1?gUSVcEuWC$R^f?K>rnOnxux>)WoE(b=Me8J*5lzu?5b(b`Qo6`NSK;pa*Nma(Vp zkDtGueiH;pTqp~{Bf_8ld}5|)J;7q`=T7{L0spT6y}v-!&M`2j$v;?{cS&nDFj}*) z`7Py)7vl@7CNd9=OSWm(1`7+RBIS)MvFv*RA)e9K59B`@?EI<-( z&R`{E=GXn~@7}4ccQx)|5>A16ZG3_)agdoyN9j^(|DB*H>W%l8Y%h@egjeMkj+s{# z&2N9;X-tfJ^u zC#%d~t%UN4moOuhR!60F(o>14kd?|$v%eGBpU?R}Vu`TGglAc2L)4j@UCvcYXT11A z+OuR|{BiuX*o~L8Eg#M1d3uj`+wq|5Fr)<+F1%Qf^G?PJ!$A z1Yzjim%akoqsIWXK}^PnyP6aD){>5*my^j`1~Lt-4CdWQI^BZok18srdPWq{d`V?H z$0x-m7vD$kM(ZCgC|mXNnpV$gyu4yRH_S#rN-{?KI332Gp$M~la! zMUEJ=Mi6*I>?%L8ThjkIk^eZQS84o{qYqQW<+LhYCzgj3Smdvypv@>mX~Vc~vS{&K z*2&h@ZH!Czl@@=w(wo8uDxpS>pYUPVzP};`NAEbs<>rEDOd1rW)zQ+Fw7|5tuHUig zyj%BjpD613qwDI+Ec<=zdj=PR30V|N!N`l4DwtR^bNvq2TrZrzZ|?c2B6i}b{~?8Zuzsm!9^@EG6f z?C(wC>=I9YjJ!?|6C)FDqcfiwo7GlyyeCa0Z!&Z-!{?UWL6H?PB;V zv9vdB9JI+$-Hfzk6+&p6N1O4MaNu+W#hUy(v>1@jiW>&Ij_$$}_ z+k+)VuEVcAth@I!UK~hQK=Va(oI@9Q3MVGtxG8m# zsU>D-df1QvyDfWr|G6SM?WwEYkITcWPQVzVE?P+(C4>Ax2Ay7`nt6YpP5g1X{5g2Q zbkC}lMHZ*JyA$*8mZstlOoFe-Ni&UnYyd)tF?#J$>mUtsb(SAKvXUMYn4)~Er!mzT7W?CIdifuDXiAu)AaaP z8btf!c9s!3i2>-^pjE|#PuPk%)y(?(Dc``?pkPa#(p{npTzQ2vSN>4P8p>dfb_IQt zzg6h~*tJPKXDQ-bzixVd`^F2zcYTogpkUBf0ZUp;wYo3VmVGA|6kQpO-zO@+i&--c zNfCyX_1X14jzSd08+F9G{X^+n4OhtUsw#$G3#gw8Xtztl;YG{S>Ae z<@%|{p>YtN)fcsj%tjZ<9vbla6<=eR-{5D6dy5+OCtW~2avYZ>H15tC&*FD*GnT%A zfJ}=ao)Nbi$jbPz_oOSpS_Pp_{n_iFVan2b+vX|rG}yKmmCX!4wvC-g!|KfFeZ(gE z7jP1-maxP(j0b1Pz&$9UR7mg-;zHbm9c5-zm*sb3tHUQbC@aGa`jWoSAApwy!9 zow4#QCz363NMGcZLH)#Am!$#D4rsx|VjQ4}O0vXZG37hncHmlIw)aQFEnq;N0#WD^ zwm5ObG;dIYO->`TiM06bdHrci=nT@Iw7T<>SSwETTFthmWuHkXB``EaB5RpR|U(79YctP3Ro1?_}m3_38#ZWU~UP;CSE%EJ!QpajYi;=B)@7$B)ChM(*D#+Cz~$c z_@!;os>`w^xY4r3j4OBx`wbis0H=}GD>DL}8XdUkl-a<(YlH!JXX)X8`S<_f=&4*G zu10U&qQXC{)&D&7fBAhi@_H0Z!nc@=_1)qW^Jyj?y16qCv){{P5-(h@mYrgo23U34 zimqpJks`K`lG^W^UoKGfXh9T!raWYlge;EzfM8pPcY1HpYA9Xu@gNG>l7xNOH|Eeqb zpBewhMz0gS7P^!qg?X3*4e2$~o*LTg89YmluWw{snn?S8c?G0kc|=UiMzL>tKhg_K z{GPe5x_bCw+VR?J--6LGa(}QeqB<@_u zucfj*3(9t+Gm1aI5UCInw#+1C%7rYxpi&FI;+$xS`*|_~TF;$5+tDLD$38{(nW|n9 zO_3tXc{=98JDF26y{O`lF>_EGQswGCgORYMt{3?gz5t^kczMP&Y3Of(iG*zhrbfChw zwbBIgg1WU2)>FIUI-T1Xs3+TbYWlgGxaW5{mmseyt)!WZC>GoYx-3cFczYkpLAx5PM3f*S|-?Y}>@AZ=z)7>1H6Isqt zj_&}9foWzP5O>J>vULz@;b$c;Iowhk1XzHEvW6}9gLgCZw~FH#@n0E0jMT`}ur z8?i8J-Qc~Kb_6I{R}!@zpR2ZRgy9*XhorlwYaB4CXJ8{@Gq-E0xpt!D$Z6`9R^tJT zcYj$JK5~OF^J*(i^w{ZPGawz4X~#W&-gy4glnzUSHyGttUOz$u|M;AgLV9oqK5lrk ze{iT$>!lKK%1f?6XvO%YL(MIbp!Pr;5QL`Ip|UGoJuFKn^@}162np&?CXBx+Hh@cp z(cUB!mp!YJ;D7wMn57-^qBv*bIC3<_%#NX{n*Xvb#Q>s(+=}9rx~8@Ar|Z~wuVn4( z$pEP2$|(}TN#5XsY_uXA-w9{kcbckE#RGcH?dFB>EG^7Aty@0Zo z&)~V&8d+~HhzD)bdStz139mq}KFR8H;2Iv8IW)c4c?R>~GsdIno;i*n@)+v%2?2>; z*Kn%C7;kqMj)>OK9SlUTm|UW}9Mh9@YgHBxvcW@Na%aJ{Y)Rl>`^B{SiJ}b%B-yLf>r4AMNhLBzQt-wuoTVa=%a%tMWGM#C>HC z`>v1=Hv>2A6&7D~k=k{=5IDCASFX5RpA=$$b${jRHTsj|XCuZxK6rkXzBuBq8-@{t z+u#0-v;2B(f3RdgL;z+j$h-!@gn8>CSN(j|cDrl&hjigs-A3=U)Vx&0*ygMLyMOrK zId%cNqRB*Z)IK}`ud6q-#R&YWU;LfAOH}(?njk7+sW;#~n|059)5~V~S{WMEju-4Q zP!7PIw=>}}_bwDKbIJhNt&uNJmBnOB$Pj#xauWdY{cN9GU$0zhRy`Ob3#ns7VSgTnB>Vu3q1x#@-d>gKC^o(cXXbzkeW#;PO-gSFaGDo_Eu zA?@nFiYhRvPW~HY8^IptWEEUSR+%cLQZlL~_dP=YP@dL|NR{AXwcRe^AF1j*)Lm&n z^O$gJ=c$2xjDy>kkl}_rVpa^iTn0xO!pA2nZE~Ol2JO|d-OsT*#+aSE1<-q{@YqYq ze^WV&diB0tB=x$;^F}5EdN;L|zF0Q{dNAx^C`1rNzDN_>wxAUiFc^y_@CidJO53=W z?$h5o3}_Gros9?P$(L3KvU0ffJ+@XPcSY(Bw%o1ppXP9-oT3D;Aqx8Fx_&r7z>k&@ zBD5Fbu4BAjpZ!TJpFFwEQn+fyCY8Z!pdI>L{caRNT&YG`f$V;7l5sbCIo?D`2(T7P z`wi2f%H{Y14$H-jJs!8s;~`8IhP!P*J44ryfw zj$1Angr-KH?Alu4k%gf&fV1zJ!TYI7;Gg3_#y{Sb`ZMB~pKllH*&mNu@KZGo(Sf%dZnotTu@x66!Gc7bv-q91 z1JAv0rcUpN&P&uJ)Bc-j=odUDRLE4TRF(8H)0@6zexfL+@SPF0T6yz~!J3}Hxctre zv-xi&%|m_4(;2Jy460pOMAyRIKM3pQl0)=6LB;1EgFyBi`+Ap6>CVar2?J35L3^*?xbYl)Lgc_!}eETYm=~Kn!Cqg71_E58nd}j7>-JEFnQk-x{ZXm-= zFIc(LoJ8H?U>7*D2(+7L7Z!u)c@+Bkb-ORUuo4ss53&*(EjDDfbA)x!&mOijSAhGm zVjU_Z0ufz5Rua9l<3Tm`_QCTrXU-)`oCQ()Rb`-{xM}B)T-J+VS61L}#Oh{|avqYj7u|95fpuFe36+SvT`(y+7l5yhDj9%{@S@YEL?E;Kg`Ph3;(pc|*46Glo7YB~ zJf~Ld+%9%l(O35qzGghX35@LG%aZoF!=A?NBF4jX>JCR<;~EtSbOuEyYrF|l2=BZ1 zT-WC+ZNi@-(g=pP91mU0=hbn;>Kz|Xk}tlbcZ>-4Lo@g8ZOzm#kwXqMgM7b`14=3R zaBsd-Z~Yn%C@>U$U-MUKPPM~k+{aS3TZJ1m!7`$#6j|%!DPe1F5CVTq50lyUDLd)8J1J37jQ`F@t1O_`}4+ZS>5(< zn8nIwpXSJD79a>N`6!|b4f3WLg*4jcG~kz$8mRVXcNrsjjB7>Mbdk8*Bz#$wM2W9z z%4z9#ET8ndQ8X@@XmP#ho~@wJ!#=X9I;u~k)HB+vkn<26n|^&iAueQ=Tfe)mQ!KJ= z7bnHL)u^(pmWIT*1NE_2)>d+!95=VuD%>ti_`;YxM3|5NM0?)wCl^2yi)WcJTS-aD zbqUash@8*B68k7rF65$@U5P>Y9f$D{q5|P-SmIH8fJ60(7X>5ZEqlvJX0wCW8GX^3 zW$pM08$WZ34#3E4wuBg zTcfd?_LwTEz+y+tCYM3L1vueolFVE60r5`ljCawR(`1!mjiYPYrJk$b)z@F?{b}mo zx!8Z>sNHuV1OAB!qi65G;$0rz{|;;e(gZc{=nO0L8~cN6KYKnp50?u~|Jp|VIP+>j)(mBppb z21(DYx|LXGy1^|~w=*gSnk7yS?id_A7N+R;T zZ?r$EnHQ9oR{M3nBHP!r>kc{Ti!9wI$N6}}mOc@_$;1V;+u++Eo$sZZU=MA~BZ1bG z(8x5AJkNeCVf)yz7V8*+S+I#97kJRXMEIHwkituL5FZVX%}LsqTF7`l$TcUQsi_ox z@fEty{O$IXL{khMGP}FfZ5l0b`*o$eHT)2 zaOxPGdjIuS@1cP|CpDHNXZ);BB4*AYfyve=LBQ^Du+;|3E!NTMolEqZrjk(?Da_Yh zg)W;`Jt?TxTM$HD7+vWo7^NLS8H|jhX2r#_qOcd?bZ|NO!(8{%e2H|mQ7Qubrs3JA zdSZ@+RTlqMj`AUuG&!ft-?)QH#<=uRa)rL)*q1RQ_^cnpG6;~O@3)X&g^*6iY~yn+lXf>_~0G^QP9`kK5^cr z)C`%K+NBaEzBe7onB>0kq}(Hm8awCQcEtrbcUWDysR~*oU4ic@4-)&}QCxAGt-}u& zXy3Hiy2A$Xyk);f?uGQ3jedoo$$j#rg~n!MdrC_Y4VwU3Y` zf37QrLp%BM%tWnI+T}Y>`i-;l^4R#Be0CiTo911p_;gk!fnEm`K?QA~rIY+(O&WgJ zIz@@zBZFXFy|dht#ARBMy$@*3i;DFKyaB>wI2lqP1^=IXKS5w$$3AC}bq#bG7!d$l{Dv%gA@;s<#=m`_nvl`Oa=cI5mBB7jWy6 zbBg0yHd(^Bn}i3})}^49O1Ned>So&~9t`l&{RMUY`?24sFW7r0Jbsrl00YQUQQIkj zj5}&~X$BF`ybo%2cBYoT1j6kChb3zp=luO1 zuD(O_7~Ee5HrAx(4kl&|(HgBT!695yHxaZJHmjc@O@K76FzgRW;;IDH2^LRw>-`K( zk5eS>5ra&xvHGoBxVO#&E%ELC$4MF-jWP&fSHu=~(g-KLKwl@z_2Gi;e&METPEQx; zKd#NI8=;{S5O7W<~n~K_>WH`2!gU7`>uuOJZr}s2N;bT!sn?m2dYjg`nyS`k50(Un%cf? zzwG0e>Vf6o?&gjG0e-qbIXMohOTAp1=f|-6?66FdQ0uZcd{>|}FV6%B$Z7Yauhwyn93XwScLRd`3 z?>6oF?k5NzIC|gr=NyLa=g_2F#!;YK;!SMHmOg!`qB-|uq^K+gFojGg7g%QycJWAf zJLom@7sF&dAYKzyX`-0NJk90-H)_J1y-b$#eReR|4S?I!6Ds9>p z-{Tv>@uu~)&VZ|t2II65o7&HHxzXwn_#kSxx6s1dW>3T{6tiB@iWw`5Gj^;KaxMl$ zCi@#U!YuP1pU0p$=E2!iZg0Y}uy98WWyteQcf<%D3MVA7G8Pt<7?-~B(KVlKAAj2* z_*Uj+?-@}GtlXaxk9z_e-!RmJAgHm%Y{ird`E3%G4z(jh_uiTD+W9&ZgrQXA@F%#S z*t9bjsEi016djC!j97#O^q^{6S{{RcXy$GBDm{TebOn0>8s80$%vhM$PH$hI0DMT` zDcEBO&DS<3Q`1V&2&+!b0FG!h)1E6dTqR6b_Pyc_t92saZT#*v5pX>o?RJE|J}4-U z^+}8r9;qa@{x4-T6r>i7g6!&M4^pjrR#RPn!p3%?hht9ymVmX$=GpPMakbh0DomjEZc6m`?FlW(c z7ZyvtUYDMJTR$_LAz-s(|HvT}Zz}1wm%qwaO#dYp^46wzW3|PrH-BXi1aLwhM;pXf zR}OpEhI;%?odR4bPsY)0_2ubKO%u=X395t-t1ao>?{5p`daA{58CG@=sHckZw1qPY zi2LCvv(?9~8h& z@C$`DE~YWa?;n|ifY0uN&k5mCa`9L%oj{ShehgOZ!MAMPO?8U;CGk(4_u4gS>Fr*p z4Y`2`@&BICe|H9q*2fCWfQxM%c@8w#7_<8dkPuHb zcVv>@@wN`n$zOSt4G*8+&zvTSUkPzp(nI4rvhd#DLj zpGr#}^&&$IxzsrN8ig4; z!HRba5ZSf)PgrZKEM|P>aNC`|rm@_{(RDU`DX}snI~^0QD~Fkf734U~PE^a@b#uA^ zb&$qvwm*Pr%t6kaIYXVQ^W~wkz(p*=mDoO-4YeX4@R6CBc^l-L+e=Nw$fE#_ne^;V zO|6(nz0Lz9Xc4G4j^Ng4QxgfmFWDo3)#V7W-Vf-5crBMLeJyzI^20Lk@m>15*TmRv zae#-r#HpnWDFoovajWt!`@pjKt{?NjQDpl9R^8MY%p?-{TuWS#{W-IP<47p{a6b*& z+Tn#BkY7^e;M4lTlH&$WAsjjfa6Un)e`CH}1j-d>5&e`B5Ar>ghqF)uvNx;=_4Sj> z!KNg#Wgf(E8s(llmw`w3@)XH1)x)Bov5I~uiaES}xu=7M=LU)TBORkvxOESmq3e*U zwG|oe>`4%Ww*SShw>mc>uDslbA}=)_rpbQ}8mP(yhTksofv%t(d1phsi~GOlyYim#VPWeaA{?awTWa;-14D5nfLSc-+llDd=z}eEGB!mj27; zl;?{XXE<_eEAAwDW*H&;ide3nl-tAUU24a_5lk`cxKu=@Tjk?ZV{+`8Sn)oZoTLc> zfE*A~vJ*z5s6Jzc$KFdbj$z(D#OU>hH&(Cq;IR-!t(Pn43& zXu3Q{@+n;xprXSckf-u>Tj<(msW*OgQCF``0DWN2$PL^pDGjlu#A@bCI{fFxZUKhpyw!zPTTfnP{eNL^<4a(rIh7;c;kL59FnE)p`d}4L1 zN22{p8F1u9a(4mB2o5-&s0rGkn{#OuedzTA%f2lO@7>ds)mQF z`pY~9ixOx?$*JYP76d}~cgK0Pi}Qm0NjL(g%TFIT?@op=Rt;5>k&p#$~tdNrplZD7-fzBDvp10>3gdj5C zXzV=6f&z;di5sV;S2Ux!fTa;2Zv#yRg0{Dk5C>bWFkW^vAJSE=515yy_4lAn0LVcg z9@n|jwNi32oU7!x2~AxAWe{lY5jFiM7?x^m;;J9?ZU&T7>)wrTL{KTMR>#+O)L2Bx zBKuA_4Hl^pfDd)CTbCvnIQTqFJbx~*$YUZaP^b0#*co!hcbEC zrMgd&w*m-#3|>YIe*26I#zpya>;ZUCs{>~xVBq-pioT^}Z%o95>vAV(e=+?OMYlgH ziHoir1#!?~W(c3NIm~q-RJfB5KY!(VY1&hXZ$Wdhe`3z{Vsqh&`Fa_Ip>;Wa-bNjG zu$G(87$4lY39z=^^H0ZsWD9gL&#AsAh_GZM$;G(eF5hUtd=b05yW0f;Y3$zA5O>gw zn@u^M``e($)+8(7P2|4SLJK7v%&y?xOPtYKWmI|$y0#kvr`V=LhXLG4+?3fRiN1i1 z&s4nY%3YZhv^PXPh5}$7;qRDd%a5;de`J0+ktGG6H<4u<3*g*m{N>^gMCB_c1^ijavkgHUUT{WRLmHjJg?3sBS-K zVzFbPZ~tN?#9Vq}0emS7nX}pQ$><73RnHfQj~MnG;DiOoC3THymdY12E`xp(7QRW?E5Z!s=EM!9Qou-<*^=jQ*g11xt-hM)uf=^L6g-lnWk+tx<`XGKDo|8 z-=NVb@FdB5q2_Ci-L508xN9r&;v1v;>?Vct2e*p)A@JGf2fa%oKxu}!mxx=x&i`@c zh8mn2DhkHVND~T590o^5EJ~&>sp61x#CUL`yK#4huWVy_so4yQQguNkj)|04g{9`L z#QSvBr@4%kEjPG=Frz<%5_m1AZiZlH{;Z|hxFfV0zD8WM_d)e;{@&ntWD&MIeJtZR z_r_{71fFMx5HOoueTUVTCEWY%^bs=P_QeT`7peRDk(^7kB;0QUz|lXQN)Y#{*_f#m zD<8Fkct#(t%1gS;AM9*J&d!>#c`WI2Ew#|#^o0i{b%Mdc8!wm9D}_xaWQqMu=upj7 zScNn!w~l$22Qpw^PJ4Ip^zQ9!idl|~Y#D)zsX^#{xJuHko{nnBg>+3a9P&w<7?BFl zI&Bhq|8YM$M2M3Eja=J`BVK&S{4=debU#K#RU11E0)?w{a^!lGX)$K9t!7;ZiCUqd zZ4RxkX>Yo(UvOQeVp9wDD^I%jPBleT*SdRE(3lpKSF5GmvBECQ^q0LK9UZl;amJ$G z0@kub{1agq%v!|w5}oK4x~+0(bdvMR5Dp=Yl!4G-Nk~Io7J!P11bS*N43YU%47j?r zL*K1%IMLMxtyAUzJpRWYYJH19t--BU*_(KN5Ton+f>&3{ITpqbohR-7}%`2cgKQl@QeVrN^R&#DG zL40iXu1u9OM=_*&o3jqP9-DA5>P|U_T?w>$`vTj(XPyJJckL`Lx{bt21E+=tsTIG? zCS9(POlGyU7@BXjtIeCHY$TMCvR4x&tvYqqHo9TFnGLozMxwc%M*31h@zy0qr-v*1 z3AwCJQN+uL=S1-O?!X6g@y4tBZAWh}r|r|St$^Z- ziighVXU8A$(WR4f`gq&01s@Ng#u7FFJ1vF88*W(w@dC+n)+;{wwzD*E-6G}w)~7k= z*&H*c$M*Iruo12=FItj;Qv_L)pp_o;<5$#C?$XD0r&0^x5dZBonO z9;*}??^sj49m`ko99s8{{4+%T^J$Z z#que5Fue5okDP(AhDNIEK|wjMj-mm2snqmcrz0**d)y}SWG%(Qw(B^W(OFZA;4$te z-X{hx2@-nFS>ujak3!L%>qcAvcz~{QNte>l9)QG4JDQI-iXTq;BG5f`a66zOB|blF znZv5x;q7u5?rqxM&-(V($^|mza%Wy;qrBy2hCP|UJ(y<9dbI1+>C@u_r>3*o^Q#aN z$Z@H5;7>15I+$Lgq}9yaImeqwagp6@P_nP|j>rBU`qW7(NF~`v?27)ay0t7MG; zr~*g{hG;B-;Qy-2rc>O~tXHYv(QewEl?jheE>^%6zb6+;favkxT|@pK89;biH$5D9 ziF-i{Tz`m!{a|O6BU$4fdo>M~55;VG8~9*HDC?yAN0G0Qh7qi)J4xfC2%p8U=SIny z)T%eo><;aPf>^dLFi@XGX|pYgPO%+B_SYv2Cez2VVv9|U0SxPY%WxSA*e2R>bBuXa zVur;>BAqSW*W0I_A3IBRRRjO_U~Q5dGwRj<8Ass^wy&(7F4kxDe zy!`Gg8+Jo_BQ{&68S zT5@B5eQZ7polge_;)j>q=s?J~Q2*VZ0=`%pAi(H-dT4F;UlS{&0CKR}&7TZ$Qp0&F z>-rHMrrb?&2dVR0$+)qB%qyM6){3maCBQp9pnrP5FSS_N(sdwi^e;K5`&LjOw>(v= z($A~!L|sg?iyp8^EV3s_Mo9fqTi!asgQew%QZl@I3&Kc(l?aqL05ea5-(Bfje)@=JM(<2$sqq!7^Q zRrwql_uNZ#b8*kYp_=b_&1Pn%>R6QK!f2n~2)Lf*e#$8E7e+@p=P9+>Q0|`RkC<+U zIQuscso(pG07u|?dA}IWe}If^X7fJcO%GTJlzRYM^48%tH_9KdCGq-hL)9CGkvz7U zk)rXAn65@aCUbhh_y5u>wJl^!+P}siJNsNSNE6iu47Aenrlf0?uRyCyJ$kZ$fU} z(%jr%*)2%ASvGr<+jd1!m+!js_JOO6>-vxYon!SOJ>9N$zK&bf$rsz6?BXW`vCJ-F(KkUX%2RaTuMrun5YO zYBMxp8@{A_zEvVs%~khsMFin{;q+GkOVXY6=;j~7?o8hh2gi4jO(HQ*@71w(pQzp> z;^F!x{eJ*WF^n0&Zk2GZ0(o(HLtMD>3L#UxSK2Bq@2Ma>D8M56CSRdH&nTk|3&aTx zkp^NDR`8u17u8n-APPg$t|v*gVZ*JLm8Q5@_=4UIvGh##GN5Hwv}~zD4qG4;WGkOT zX)8r)S96~eLH6qkK3U5T zK9bl|D_Qm}N;Kizp-pA84DJwT!vOfm5CGuY%;2H0pIM`{Tnu+ZzPyN)iUY%F^74!!@4Cu$o}eB!@;}U zca6IK1m4X@GR(9OE88C(uzL(5$Kury2h5bBe?mn6pgg%*-J+6Ti_`qd$52VM_$Dkv z?z?vrXVw*iXwp=uz=CN5Jl7)eV=Rv|9-I0Gkrk;B4YMWPb;?D#(J|h+SoA8Dipoms zu5_8vc*msW?(;lG5C*Vxxw%A?;$U?$Je*EATsy=#YVmESI^cl@<80_IuY}qwS9g21 zgEy@8MDqNsrUc$0swDQh&$Z6X`*2~5Y9AF{Hx>soWnku;nniK0j?sK4TlPM&<*u9? zKy6Z#pE;hRQ|KQ;Ygnn7eJ(+LEyAJoMv zs$F}orT+=;y-3CSr2(lWUkcZ{wn482pH0ktrT6_%UX(AWMn--V3+k^j)v|kP)9n2_ zq1;)hlx9Sws9DRp=h_vsFFw9p4x-6cKEedVxS;dXfxLn8R>7LhUEw1vO8<_!0y1(C z!!NGhhMbcuOE_`63U4Px>JqdOat87C#wZKtfvo#prAh4~|E2_V0ccRIqT%y(3y2qN z)_cBd9DpT{zJ%A1R4mo@T42LCVPuVG1R_Fs$5VD=FTPApZag;;(p-cCyPkulAie9t zrFZv)Njp@sKY$FDulZOhXd8C~S`A1A*1i`8G+t{o5LJlwdGrUvr6YVz5}aJmCT?)H z7bzcTk^{gH20A0TTrMM&9m9E@W*VLA7l87 zCWU2gGpa8MRu?KPbVd^MDi`G1`srri_%kkPkVu4UMmY4%poV|u*Q_!aZGeKlAs$xtGZ;A<`{V z`PZh!=8wAr>;)j7f%Hi_^Pl#hv6h!^ca}ay^=Vc} zO?_*3eh}kmN)`%p@WvM1WxHjFJB=p5Quq|SC(FdcJQ69BCnTEpb z4X0u?T?1<;ANrn?UYcx)U-z)}JceE3;YKBI-lcPqAht}DZix#$W470Y?GpB;(!pDO z+kVt<3+nHyJU?UX0I4E{7Encq2AthgR)%vmE9cIRIaB@FD=OE^;&*02%G?}y#?VoFU&t4&9Jm}CaaFNGgUMr9TP#! z?IXs2Qq(YR%eeXJLfTW;ucipUAKq0R66oP7ve}>r!(Bx_mJaa5IqNm<-)`yhqOQ-n z{MIFO@tm@{+D5;*Q!Ol@*b^sZ!~ua)2Kqs-#s6^rP>ZNqTXHjW>#FVEv-@g=G6|4} ze2Es2W8S%s9bsu3^WA4_eUV6I6Du(lf`|2c89T8KU#(sp&TJ8C3HhW(g&Kh1B{Rfwh^4vAd9^8O+3qPea~fqDMsuCZzp@q5vn29GmSwY~C; zLSCNKj;DKxtK(5J(*S6kdGn-5VTqV=E#M%jFxx(%R=|2|VU8c0a~S7fGt4dNB4Ur4ypS+lama6 zY4#kw{v$N-Jyr4gthDPK;`Oq~zIBb;#)m;T0U}3=`M;6C7rwIuiSpXiOOJGR+bnm_ z;_`lupL>)cVX4KMTZqSN&={d{b;ki%7gH4KZ#L z-3dNBb?R4s<9>>(@MW{9ATW;iLesL20IjYt4r(JZ6mcS<|cBtlFKtHET|t1sLx6_T54yQn8=-y{aUxvFvr zAY5a6SCD zrA#t%vW2a|4^u@5JWp(MzPJt)IMy#F$1>X}hwtw0Mj6~myu};pIjm6TJvx}>B}VNa z$Yd!gO-PKodZbicTT8vE*E5Kwj|1aPn|}G#ONy9HuJ2v9#AjE*Cf!k&(f(ksQ<~pk%a>y-TAKn#>Wu~M(vE|)W$hHKDYRy zpfd)1L7~rx{^&Q_Hux*&+(mp-(kfdBy@VkTAHYGbf1Zx`K%_O{RnbYKiGAf1Q}ev| zYV+u>SMktAT%d0U3W9DGUN&pBP`@0LT%l|N0kEMEYWj~`?&QyM%G7EY-VcYZT6a1U zCVR54!`KP-H^<09os_hmDMz~Knw}}1@F%^=JrH@mPUwBO&aXrKBf2M8c3LT~;tTC| z+}pG+YPh?CgoNx*6nuJhKMOBUaC$zc0+t5+7pi8G|Fj-L55d8n*h!Tpd%Gl6g)^qUezX5Rt;&}0rIrBn zw&^-K+eCWTgxb=u+W09y+yj=x+rO@}*qYDc zJny9R)Xv<+$w&XV->theX9kp<97;4}_J21`Q+RnabJ zAS>)V36y=+f8>9I&;~cPXKE(?PgSV?a?pAnAuR5VS=pc=(&WFBdT)D2h-=Z`y=ZN1 z?UrVGp2eA_cr2;`z)E}1EWL{4c@ahTv}{--FA<%3EZw-eje}c^{se6Kxop^-#Ppu2 zIQ`U;h_G|{OL9YBio{P9T0ZsfKEPss&s00?(uULG*b6bE@#g2#{cKy^%e+!|rTQ=$WEO7J^-ke&)c1^ewMn7d9 zhQeKm*RMgG)*1J|Jx{hQU{vI9W!DLL6HQM}5jXY3dB@+Xbj7K5L}g)N z&CaZ?Jz#BOTjTZ^C6}QpieME@sQuJ?7*l-S{bC!OTFg)0hvk1F<~uBV4)e7LXL_Uf z*9MD%N1hg3Plow_lh8v17Z(?R7Ri&gd_HwnwKi4Dd5iM9yCak!75HzWZL5Cch!=rBOJZ2tx8|I(Q||Op7_KXn z!#0YpOs60+%2>7IeskvS^uA~9lUD2E1FR+bL|b(={492MlH{-ln|fe)ZTSnwVoYRq zrHA!7*9((PRNo*)gRz%I@jp(e&FMv4FY#AC3O%#^`Lj(p6;?DO0iu~{41V7c8S5lGKTpRIkH~`(XrQ^Ow8eY@pudKuc#ctfi z8n4)+#=p&F_&v(^UpfmABhu0F%hVKc3A#<5d{VHVTs;o%bygd{xJbF$hb zp`VEvO@=5660X-hN|Ln{HoOm2pMHcDT>TX600arHhvYJrhIlI=boe;!LCed6bD7%n z8`cA>c^`7i3khC^dz7-jJS^iotu~sEJ6}1MpVN-;`A)oYL!kn(GDK%tZt{O?V~R*2 z3z@v^r?&5H29FOmLxGL7*Zqsn^%NLHO?1aUO2+pKHyALmk5)CM8^11W@6q<;r>cM6 zE|uSl*eMVVHK z@x43S9}ShUkXw8{&p5tFcf#A6JXx{`tr?nq&&(bMD^BH#0l#%Jr~CK)z#b@lw-SpU z{Ic#&38`H|?Onxlsm-+zZkvUcec7s2dQHCfei1^kUk=E`ZniHgq&2L#S|C|yiT2h? zg9bd_S0VyK@Gj?bhDR79$J|QOlSgF}kCoNQF@7g}-s+C~Q>JC{z`Cq9bUyew?h9#+ z_e2=ds#G`Zf|~em1ru8Ye-gVH{hiTx$?YZhP@m?z-%R;0JD)8=D7#gA(_eS#P){-8 zU6j@g>bDz8J&byk^&wwbSy?c5^j>9}h3*|MhRKg_c5esq%K%_-2I^U#c>!5+3I?qL zNe<#!2+h`z$JwOnR=xS^!y}i?B<_zYU7Mcn1$+RQf|XM&RoLo_r20y_a0@1F+67oA z+zF2_+K^*Y7U)+N3U7#0I9~hQYI}$`S%+ucDpNA$lKp6XCSlg|&3(#8 zGoh${nF+>hrjb~CKuHh1^gT|JV;s@25M8{!9K+g8_b}-Up~astC^$_T+2aIu=xSAU z(8~Y|z}a(3If=C01zAGk7#Vhb>fJm~QnL$FK@Q(=2)G%)sfZp+1W=U(w3_FPa)I;c zYEQ?|CF8!UWuX#aK1VqGF23Zq55ujIU!hQ7=1zLNBlKWI)+&zTB)A{U{XGz^v1}`AGP4 z<6T(Eex>-VEREdq1$CQFP_yCHN(QCW|I^@tg#r=IEmfqgY;QyR4{&@``*IA4M6xXV zb-dR?KZ;dhvG1^MS6No&3o4()0osO&Aft;5-eWTjCn72C{-wxU%K(E$vIgJ-B$LNW z*s!d3O0*UqvmNuiZ}ew5~hq`f33gg{yh%Y zFCCwjrlOov(M+hLV<}W(eiXRe_gy2l0=~20nCJf?e^wZ+YIAw^VRAnFH>1tpK2&}{ zR`MuY!z(zu;no}Sk1FkVze)E*#s!%*>**o+9DkBgJl(#OlkBR*( zgA%SyF(xG$C9**B?$$W;)(*0&;j`}=j>|AyiY<6;f89*oE-Ex+Alvw3Apl6-yh`+Q z&&TfrO+GXkLH3(ufof!csTxBMs*%+-!p{I-1)HJwep}Xmd=60J$$?q3@d;Ju{A@C4 zn55M6SdEliF?u~(iIyudD$2snjShY?akC7dN%q~3(by_COSGG*?buKu1poa0c;~DcRHFGM$FKsK3!OzR8R(Wcc zOzLTt>dw8YwTW$A>c23n-9|weP}@n*|3V5cZucKL1xp*qtoQkC8_)l_tA2b0G_ML# zohFVApw7H`B^XwNNLWwkHtRw0Hl>6|3AM@vzQ-{Q5DWK3+^%Tm zLJ3Ew#r}Hh?Ym!xLAGPN(F(mTWX`F0E7b_~_%vUGYV*K7f)_h}bQRl1T9ag0qkVjB zH$G6jhI?)j5;&{+X|ZW#m@>Y>n>j5)o6_k?J*q43yQqTPSS`@s zsP~z<66S3Jf)5F9dekCkuuBh)YE-a@ahi`O(k%>-R~tEvw2~X~{USu$ zcb_Ks;4z6M^i0Y2TzEh$fVmHGfpVk%J|a>0Sj#?wIFaN{_=s9&JJl`>+`q>UpAM;e zvbqHjQ4~7`sOcW38q)i8+-lfZN3pKQB8DVmjku_&IG0=}ajX}27<-#pvtfGoGS$Q4 zlk2Z|H6wpqI8=02wnN5wb1kd*?@byVl_RK#)jo#wab<>acSN_G zeV-^}0yj*b(>L->5IxWuNl7kNuRS`b<=DQ;e)Zn5$v7z#&3F7r+g~+PIyG}_+aD9)tL0Y zg2jawz(R3j{Qox+8aHUuS*B!E^sRIuGPtod#0zDo8Gq2e8zP(E zW%g9wu{~*K&yF>pUXlf`smp8PvGPUli zh_PAP-$JF|{qk$CU1zof)e0}YnH8m$<&mmktogpxc4vtVD3!tfJyG;sf^7fh4@7US zCj$T<@>S%yo*A;Pt}4c>1H%sEVGJ6iMC(KgJ&d&{K2UC(W`M`*?VV(h2&ZS);BtW# zt&J9s{b1_6JlKtR0gk=eo}T@joHwjB3Ute1IbtY3YXOY3z1sV{4zP!kkg7Wq6B8eG z9>k3_7wEOjP1iq!vk-E9w}~%F92@c&%S-?!A#^+JP#Mt_kcb0g_>^=FauaX=aRn|2UI8TM3bK41&UQZm;5X z#R*dK+EsB)>MtAu7Vnp|Gikx98-EcI4taOtb@=!!n@>G_@g$-%ZLV2V+HHpQPOqjr z)4pZRf=mq#QuyLAvY?@(qj%J}981>fkm>C#&+Mj`x;}5+gb^Ec$I^phnp=JSi;KNv zV)Jut3Yj1*KSXUO`T5{{XTg&Qq9n+feXtoJplR40!>FL1ida65gUOYad!FQl-kuNR z?5{j(k}60&w-8~QJFpE>Im@d6#0jj^1F;G^@s|Aq;tvJA%oZ_oS0S!NKBclOpS`(8 z4DYiOpotE72z~$vW{OC%kRf2W_&5zO41xjN%5!M;dSjd8lG8*?pXmevv#DB8@5wMe zhs2~CplqU<>-(i@?RhSmMp6+6l4;7Tk&!lS{cjCSB{B(iN$2i>PS%s8;*dR)hla|D zCiogjw44ET8XF%734)>ymvasH$xHHX_iAdXUMuKRslDqHV&ogqhX{!$Kmuhr%*vFz z@xq@vN7B`73EL#&X%F9X+7CO^O=$y&VZt}+$+s9AXTVn(-T>(S{F`!e!C+-;4s9RQ zKX8=*Oj6}n*i&0)l7^ll#$P!6VQNos6p)yh&RYY?9wgLi z3~uJ>;lZ*VZD-t>MjIby`YteT=n34dqc|-OMIXEeG4xZNE z2c@Wt<$In26uE?3)T*2~PB$|Bnd zoJX;Y{?wmpNaSX+A9k+q^$5b5Ep&H)k#P$RY8aBErs96s)*uDO{w2dccgbe*=#BeA zl{IOxV~uK&aluo^W$VJgiAwu63C7SfX(9O1LBP@hdLd$Zoh6_vA$ZZ5yjxAY&p^rT z3Q+5tTi9!sn%HyHT(?~zw*Z5ZSbVP1B6pLKAS*s{(bqXn&qR$+J2_*{7qFBFRx2K3 zf34~~z&pCD_QZMW^N`%D`7bq_3l*(dE#Ps=mz_f%nhA0lwr|e8Iv&vy;SB6)^#^#K zq$+P#N%0g+F^5EGByx3ZT;NoV+^g)5O?Tnz4Gl092hgiCk2TcrMR4F8#j*V8d6Ifw zP$UdI5#gpY)6dgf`^*gyu@ms_z))rh&hjQiX(%7V6|tLQatgJ?z-7P1Xm}tMB$zCS zd=G>sawmJ3Iwz+fLd~KriF;BVaTqz+cU$f!vq7I5@!8(TeQstJ+~kWJxdUp4hPfQ? zbFW5Vd5d(c%P(o?67Kw5RyP(TA6%II=O9ow>Qz=Lz+i$lXd#~fnN4h`#{arjTRVRG zL!-7Jw3MWzPlU^%D!YshZ&c=3dcT=0Y3sA^qU*pGBxLMM>qj8duL+5H%mK1owdRDS z&|_z@tIZ!ziw$r^LEo%bwIt{VR%^qr33*;pt@$5=hAc3K;v0XUmMHrMy5 zWaN|2ySCUvA`71)ZePno(_9iX>T+fkVB#XtC_QQ2ZOH;g=x7`Mjd)skGpNo)I6wyC z{JQaM28g|?VC|vEOVjnPul7gcB3vg$$skjp7uJECWVhMUYNEs`)DD_s*)^KM^ z`z-({N3VizGo({VG?T>60P8+*L3Ud?(p5dxvcRhy>Np<$u1Xfj^L#Zy(=D+e?^%pq zB;l?dkt9vL%y$`SX)Uc=2XdZ?#z{vtwE&C{i$_MOD9ba+_1#(7G_hyvnd;-1IGA{E ztGTpTxMio#ue~->%?T#_wCa^j%xa?cIsf`MD;V!ii14`tW91|Kqk;Uz0o!j4XpHYG z)ymv*)e0Y-^D$Q4xS3wd8Ze;!Rdp&$@=DKalSP$$$Djux-Y=` z(+6U!uPZy;D_P1t-!`HCrH>c=@V~G+?0l%kwZrxkjP$ji;dM%D_$Y6 zNd}Nw&O3?lP&`|{keON5xWlZJp%Iu$b`o2*} z#&9TAZ#5G}PI7-zci3i^iQ}QZaz$)zZFpp9PRd)Mh7`iz8>42W=_k@e#>&F(8)kXQWKb4MO^ovclnRV!M|=@XdU30@~WA|KuXt}ek)T&n|x=X ziXgff%~Ev$yDJ{w@`CoW?KD&!AWR8c6ml9E+{w3d zLIOi8L}#9A7R0q)6M)1xkfw^hK|JqTj!@z?>I~V~(2C^9u_YvqgAqGEf3AppHJ}aT zpsU_Q2e~SYnUg;FRwIaUBU)K;EN)vg%`lXT-|l1YYm-P(x`CHylo4`$Ojr`n6{}v` z01hG1%?l{sKgRU0`vz?XfX(IA0Br}{+V1rXl?pM`o+x#-3G5FivGDP&H7@;g9se~| z@Tao&Zja<%PT2P}UcHXm>>J}I-Vv$xJcY(je^_fJEojy_9&MBEeV`?iSu@p(k&nZ2Ep&leZE14blw7`Jay4P1=4ogq1>>NeLI^(N}1RYK;-P)HTgeA%fx_SBJySSW1u0gabgkQ zDI)ai_HGDF)MlfyCskLXv7#UnKk30Rk*$+qf+`nXyM4>796NOco>V{!CW@&KaWuz^ zsLqv@z)050&SwKu`5s#B_1=G^J1Cwp z>uSi>TO>)QPHT!oxcjBb@2g2~kch^BnxF7_V$c1HdmaE)A!{pQvwz=>d+;kYlY}6N zN|9RUAraQzgr^zARSuFu;efzE@%3k{?PoOcZ)yJPQM#AVq4eY)*I*-;s3M2ft}`e= zW!}47{3QJggS&xGo-)ZN0-q?k4sHl7A?|GDtgCxys;3g;wMX9^=mK?oPWNB{?B3p~ zrm0mAk!a@~;B_+I@~;`RbvyT-eVADX=^x8cc%4U<>OVnHkU5|8jCUl;kfmxbiTsU& z_3)g>RZi;EXDM8t6Hx|hpx!ukKE$QNmqFT|qVb~RldJ()-mL5G*1s>j3b?Y`{<$73 zJObKN`-vOyvVe{FcLlAUc7Yf+sH8f-Hmruv%bPj6i1`XW6>i?7OdLEklrnK4fiusz zU0}P9xIy!re{G(hPmKjGD;?g!5#pTMU#*?RERvU35Z)8?Fy;SR--a!a){wNXoYGEi8P?aQTyXq- zJOKhsL|QsVfV{<@DD>>gsr5>~w<%r6Upcnl<{AWrnh@oE6MdzkI%nk~9ppUx`u!|> z=QE>aJv19Z0550VFd*VSsB$X`s;1nbcpg5@i%-)c!;&$Xzk=jO6?@CZe>RUuP+jc! zHB;zvL z26EE%FrXvUvlPq`&*de_+8>wrP;%o-Q!se$=ANQPrQYC-l6IB>VM6| z_t!)a-F1y)aBu|hB3YNcBtEo1{(Nmnt;AhZU-I)cjYXv&8%Mp-A}Yb*s5&&Va#;KG zlc#74m%5q)9oa%hdq=4I(z-tYlw>5(9>v};PCx_z6aiJ~I05QUY0?JRlNur`$_kV% z6)T7*@4TIE^c8L^(V<3T9XzZTYA<`TOJLGs&zh*!+vJXugl}?OC@NvRz-w241ZX?| z&l@P{T4yZ37-#{Tl4eu_5V$r$Q1&!$pk(Lp9OgsA4Hmn?cVtK|#O~kbktFW5(r`AV zs=?=@1)0%o%w!gM)&^VL97{avJ_X?d8=9bJH^e@t&(j$;WTYIpnu3C{cjbfM92rKc z)&+z&B{V&)CK(( z5G?O|mo_N?XQ4&38k8+Dq^8Ar<9{;m488w`G|huHXoV0W-Yyyj_v*rJ~_JpJty?ghv7 zgHmRccnC&7j)KL7&J#3%ug8*PBU&$Loiq%QcTu@ zO4M&O(+)oYMHxO6FE%7;>3+a85T!RuNH_6R=-7Cp>nhlm95q6Ni8xU}m8)>dO#8_c zHd`Q6R)b?6`6ba6{R>4-U;n1tfXkuNG_^un8z|_OY~TZ{J=4y1eX5-Z>+Fi-r3Ar~ zU^uOKyu6TwBlS$sQB<@=)If0}PSA*$Zv3?qG3`vZ=5(G4^Vl{)>LL-zN``Vj^VJ_> z#`b<#+P8}u`r)<|VyBx82aQ%8H^>41zb0~i*y~_T9oX(Ni%}O}`BI|qfGCRj~{Dg<6P<1!V^2|>z{ z8MpR19q_3yp1v!xm;HK55)rztPdK605-GbbEqeMY`}w3`X7HVkt>#3;KA&1tH}y8Z zWiV2s1+VPOStdbHQC-oMir$b!w2CpB*t_&GqnQqFjhWam%Ey1NW-;94megclq#ZBr z_xCF#D?~5U=Y42%Ljc9vYZmHQ8r5?5ScTihu+h8kBE$Dn94}P597zhued>fVhnG$3 zOE5m90d)vpT&iQS$BxDYBUTCY8_u74k2ISVHPb17JRMxwV`|!Y-mT7m>sszD2oYni zsXCUDR`Y9V8YcZbxgyQ@1wQ2pV*2^cCvDr!N%#9`l3KNi`{RhSb#Z-5W=p_iu-xEe zUBQuh2NJ4jq8+IvG+HDs1OCe~1F(?C{Ffg5)U1~-tGpJ5488fi*cKa{p7?psp+Mv3 zd*dUK01lm2MXUS^w@0{^;{&_R$@%|qJ3|2C1>&vqZI`9PI>$trwdRm(zhgX<{j(`9 zR{){f1Mv|2VobCaPgJ}Su{Jr0ymUup5>wf z!?Tb0^k~0v28D>=SFW&l{jL6(5LC2^ z{oBgkwx2>j9d}lHpm1+0wC_zsdRM#@oPI0S!j|~u6(e@j-dFF~J4`M1`(c54LDimd zbICkJoV+XZ;@bx?jO^+>#Y&+f&`|1M_!`CV%-()8;pLwacriRvO0X#F&(-iRu8>eO znJv&AWtipJBLk2(Ga#%bV)wroFjTUue(TzVWS?)5uT;& zeLFx!`Frr&5Bqu&OC~_vpiG?Oe!(j*6Fc>3wG-P|-p`4rh-8+0017;cZ{+936>5Sz z1(K~l&l7)VWtsfJl>jmUuZzmc6d84)Dq3(-E346Yu#qbrD3;0g1AX-K`!0?j;ETAy z$+8ckFL!@iw9x0Q4`1rCHn6!kR+H_WwpEo5G3P0nrP<32{r!TH(!mrSBUcJEWV8|li zX**{;b(q1_`}P%$SHF95;;$077pwnI#YE!uTB!&cs%f%rHCTZ~t3^&;EE%etNos+_ zi<%l%BJ95gAEoLiq>jUCKEaWwAl(en9K`3mkCp^!Vp4F&E8c8*Vq=UlBgQ2!;;Ika&3Yaf1{Bf$L-Rbz zzgy(RBZD;?x)e(O8v`!h9De0})Rn)d01*KVhTHDbk;eo|=xqi8T~z-c2f{f}j9Kui zd_f3J=xnAzW|4fsjc{hI`Yv&vJWT)D>}b8%C)BDdn_~{;XNauyN>cCDQIuI*Z<4lM zw&3H3-j(97!ji-dqa>?GWYr;PYd8oq?&S7cDI?2VME<%wX!${vNsxezzV9(z%q=Q` zd+cQF5mxUyEtPNqlbY2H|6=Y<;pyBLPt|ZPcHYk;91ULC+D9A_JQFjE;BuRV$SPJN z(YdXePpNSO!?ln+P&(3kFD7SwM%ryW<@*rA=_>WUIsAorA@-5-kgCinYDP=K71+GdG~%4o=F z@R@OvPE{-R_RA~gGDKNnAf2sSVqn8p;x#>?~z}5#5Qy1lkQ=+ePUXjZtq0BFZ2xXEuVOL?Kd@tBEt|21p8v zZws^WpHYzs(yw(&-%s{WMaEL_Ma=y8&i*>EuClBbKr%%*{@2v^YUUsL+}~7e%?`eA zN3*a^RSa$c-SmN3?_z~-z-{Mc8j0VK2SNjghTXAbDw@TarmK4(4YwHUlxn(KfN?Rj zx;bq4a0ND?>=&>7QvqL7d_bb?_tdyad^G?qhu^BXT~<6Y2$R4l5!Fsn$J8xh+S%90 z!TW(a80#5izYDR(XJzeNrd50&@o_^~J~F2}+5tRig|;z&!Jr@7vZ1Y?t1(JM3YqZS6a8w{ zUuJgQ(N-k7pwJ2>YqeC??}ZVus?fF5^?XmpYp*Z;_(OEN^!Dt*>vtF=mk@scyGJg| zw1M6Jxci#;ooJ4nwC3jK_(ow2j7yh){<%#`ToOK?bXsG!{`u0ywTlOCm#(!Uwkjtg zK6HJa64QE6@SweJppKA&?ecDOe5RY4kuyasPm@3}V+z)=(RPJe2+S$;w0*c8%2>qM z#HT2oncdC)mRhr|T&JJ@mSduJLpBU4YEsPGANRDWu41D?R4TZ0daBnVV@kNXBzqWo z)uU$$Rr~N_kgtU>P=uC-#DnYBW|GX zsbf8*mpJ9WRb|^~IjFwlxXiU0(b#i&-IjbINKX8ANy64U`MK+>?~v|V?C0f}%F{FZ zSy&LX^gnoKuwJ0;AAGLfpTQui^ns%57+Woy|5Er-kB9$NSRI7WAW2T6H?JNm&?z~>7Y|jGPmb5 zXE9QfFLl@N@81nk&9rEH0=YJrDPCO^dyS6i?b+ayPgsaTmwx=Y3j-mG*Ln0$$@^Qn zFtA!X*Tev;&}Lj*r0E{0_3JeYOTYHZ0Ik95beNFb_~pgFXYjl5<6c{O7xLNEL;T(I zLG!uLF%pAmQ=JWD?1_FBvt}&`ipfk}?ZNPEG?`gLxh=+Mu_%l)f{=ken?f83%GVi1 z<0U;)cY4|K%Wl4ImkS+O{x~%EeG`h_qT@xqj6Lb&C+AGLUx)B;Y4a`j%HMMhMoF@Z ze(7$e`_E1J_q9vcUeda`Tcyd0I(jB?aK2ENdH?>s|4Jg}FDso6q&ttoo$r?y|M?~0 z@!>rkQWlO({Pe?ND)a8bvHJ$o<~ld;<(fYaWH+c~7i53w<4mF5&dBExEs`LJP8BWV zgHiFG8J#FCT|f@|&Kc2}?`HE1%9c`@9kl&rbwHg=&3^=}(46p2VD- z>$NQ1J_aqH-uT-VDe#`xR==;{F?cUtVMCoTrtpHg(D;2+#a+C}B)SYM<=brRE-7KU zs@B_0At{Qg2ITdRc{cGZh=k8|2(L8$tzs_U0rOLO87=o;%k|gOXXGCuM*^DtiHs`I zad5nhhjNKZRud3@nTp%DUiVDByT0~6zu?D<@ehS4BnPSY%!1lHK#S82;pmX-<2O3* ziH=F-I7Sx?MR}KI4u|ihNX}3{rT01Y;EDC|SrL6-aD;aUPt58Y3N|rb_x?A@VPdm6 zB5bFtSSO{$CGut(v}2{$zCvg-T|6F5xD!myGG>uWM4>k>u1OTA`}oyTg%ROAz%Itd z_t3Z$S?4aiM109n5$Qs-FH?e{+Y8^Yz1Ru=e9#~guQN^^5*Yg|>qshkP(e>GDTl`r z`R`8yjSK-_a3FTo;J=1WLWc3WRohSZNhcl8L3_27F!BcSf;kC6Lzq&6lA54i;S#k? zFuB@OgD#neEJM?%r=YT@#5Wf#>U%YeSo%!@1pe1j5N^zumbb!2#P2n>e0dF3O zBNmD?EitsS8X*BA?RJe!=0j5xg+ZuPwIopy{T&SiG~|R@X0?#N1y$(rHK3+3v#+84 zuWgD!`cqAZC8;P9CTdpNsqTA`{j$=k_bw&W;)riu{$&#WWtl`tt_efBdOe?4;OUk= zX{np28-LIDX8g(w|YI)Pj!CYHG@ALMRo5g|$~Y8c)5S zJi*2p5bF!Mb6rz2=4DZaH_BOnyo9g(ZeB=wA@oc9*eO+Sn|mJP>o0173i{6MMbzj1 zXA;G|jn9@shM7jpm9XvzLvCOm+|fRalcrKYABIVBogex@Ks7CN|@oOcr< zO{BTbbC(GiPxuT8b(3F80BuK0ZsY$l;=g8ZR}leeRyx6N_qxQVu_6&l30 zw>(^+lps)+r(Q{+k#8tVEqPQMRHLM!@o_kpWI&M|0Ua@+7Byq6@aY`HYU6pkc&n9@ z3jJQ*$9arul{4JNvoPa&l<)Q+J`LkFsOmuY#P7=ACgNgaIHJ3CcDl0Jt#S2T{vjq2 zu=>ltymJi`CGDFPx2}U6W=9K?dxMxc(8V~E-1Zxew~~$1r_0(3N6vWmWp$}a=5H)y0#!A*1y>P zuwudJslby;&Ux0u6*GBpN)hS6UPU&h+bS#!y(k79YH2kM*s4s|PH~tf;<(M~*m$@L zdrpapdq2^Oar9JVvU8Z$;rtj0X*96efi5RKPX7{b_|v5vMAYUOVfM?-f0>$#d4xZRSGn~8CFl*md9Co04kzxdZ_hD%t%jIAOy(}{ zH;UTosmx+Nq{^hJ$!0XrD(yHAx*?p-;N$O|5E8=nVA|p~t2-JPdP0J~zpZ7xAXZNF z(qPh~t5|~Qm;u4fN_zPSJ?i8VT4B)a-6y+NcQJ$^fzRHq<>9}&L*8^>?6F0TZDB@I zVAz_L@n?Lk9}2AJ3Q!SKS8kGm#O3cgt@?wIp`joFuN`!zm6qmaFQ}q$y+iKTce(-L z5yWszNBbY2|M?@cC~sv!rP4x@I9yGq`bml#p_MduM718QcsDUEm@nK#Ri&|)Q8rLi z+%mk6cP%VWptjlEV67>;tAt1P0!n_JaiN5+Q2E+7%ZVRjbykVk3MLv_mu?^ z_N;8ck!tpK1$h^61@h4Ps+-4}JMAqN5tc?8zKUH*f1ml|HZatH@(#$J^_cvhp26WY zY(HKPmM^T%$ZDp2seApy!&HSND8CG=o(w3BEmhKA{e{0ZE?lvo-v{sEysP+x+&oXp zg59flz1X0Q_Z@!$M!UOj_7HBB5(8LZaBFb-z~7S^I6fGeWm9W2d&tit&n(pjI_kPEewf{__Tf#07?Qbjb8mr z1-aFsM4+6`e$}N;u+UCOpt5^EG&m|sPoLxC=^-Jgb=#AkoI4WM_(+1DlY{LGfZ`@Q zb76skNFmT5I@=l57G@Qc>oAJ_l(I6e49I6Gu?)~btKEw?5Ws>B{9RtnmNHRUKC-C#(U9q1-YDJ!NVp#0mSWwZ#}K{}3MX3#ow!p=>~zWbsREi1XmH3Cna!j7)Y|Kmf6<<0eBIRBQL5bpyAu4gZ=Jv#-uGP~t9di+k@s?07H)B!%sYryoF+fywkw#(uuaX#>5CMoMr!Z+Q41g zTH)Vt)X){!T$K-g+V@q$+%wAX4R;M04svQ%0G^lBp5svnO))G(0FQtZf&~dnKxxW~%e;nXRqZ zOToOm>{!P`LD|&evtg}8_gorZ)$0sww4w}|4_=TFxlHP z20p5#pPOO$z7EB%jFdz|_GLBUekzKEysVs*%ufS8%5TlunNUu5Jm)_$N}|X^_ScRA zM@Pr+wa;tMZF|l?aWOMDHyi?aP3JN!?h&;$v2QOk?p#H`n+$^?Qxk7AMlc`A<5dg? z@RO6L$P0{n7ZtI!x3z^;$SEj13=LHRFQI^y5xWGIh!?&@mNk}L{zHvN4cvk%ag3Ni z_U`5;LGNmIqNUBfbJ-X^K-=fdDJx$&Mq2Q2P$gVvW+Z%uMN@98^{Az>=k?hY_!cqThvL2E+AmfY3xkKR*^*4Cbn zHLZPnhv)mc<8{y zn0;3%V2WwKnpf)^Fa3gtl6wT6@)MKOq9M5r9&H^h9-eNaXwM!HXa**hYXPO`&x7Nd{T2tXO?>h1MO67aR(2{Klr=s*_>yG|maM1g5s2ow@28M=B`w zQm)qZluE?e?bfj$v0+72bE>ETk&-2_2_ZwW*d}l-`6MJZ@QIvU`=ajLJx7J8?gRCG zz7H@pl5XuQk?LAu{oB2$r&n)w8tyb4jFX&?<1?CnJUgiN_}7guJ7CY(YX^Z@hW{8-T4l)lN@20<9Y zNlf(r@%0s8RcGDTf+!#&B_T)%(j`bpmy~ojNGJ`0bX`)V1qlJ^2I+34ySqc+64DKq z`<*+^%sVsx`Nn4+pUcG|e&?LM*Is+=b&fDmd}X{BG^1=^y;?nB8U`5!M;6r3gQWau z+&7I$w1g(bpti?m#`>DnnY-^@QwQ3D#>RYKGu<^_#U{RZsZW%~#{A~E{!I-wYO~x( zcx}fT_7CY{V-1;tMw`4^RdiD4dR3Z`tzMNbCpjf|c!$>o zN>Nd%t&=fjVFdvJ?;3i>+ETwa&|zSnAs~DwwW%pRmnpd373opf0UGi8DAq?KeWEhu z*q8b_ftmx7)91|v&2nh40?68P1+;i^+>_JI!vLN2TjUQ=`cA@F*8&9e?QMH8cre|~ ze>&br=~G8v=Iv&n_XHuX2>dpX`xWZF7|eKl1icu1r$s^Yr40}RK8OxStn8hP)TX&u1H2)L1Z~ApMYuNV+`3> z$j(~B8o}8fw;JyceG`#|k`wZ#Hcg_sCZx$tliY7_Ys)40wnux!jYi37#EcUGbpF1` zwR_ER@i^)rjzv-znQhy*Fjw_bdzBQ;3tqj!2Y+(=3VQ&FP%Gwp&qr7hEu*YSre?b@ z@Cvn+?cDgPor#4$Yk3)$ft4{`yRs9V3;TvoCjtgQ!@$GyDGB{bqQ!!jgK2D=7F|HM zp2s~TI{0v~^;`X$umP|GKs-W?8EgIRqeHNn)=>!#DJh($QS+w~gr@h_uox8|nN^BP zFGyYrf9z>As5U_g`SL}CBdVc~qQo{$P%3yFsKk`C&dDrnEvqzJYDhqObwZ?9@oB#? zYz`fv@d$44*sI(e#t^HnNiEr2M!>@}r5pfmxHFJ6)JNpo)FeV1d=9Wh?I|3CDi-S4 zSRI~h#8bY~-|GjM$sG+d^fTc*Gg*u$tg<){c+Hv&ga@tAWYnico!O$;GRV1CGWG+#;9c} z^fi{Yp^(r}YLUz`JliCY&{f z``mmSp8tk`{T-&6o*F?*{OwzIx=>N9snMqx4)Mih=JC5RiZ6m-AB}98h_3hR*=*nd9(;PULMzfW`^VISw z&YY349EB-DP(YTw>Zthf!z3u^K$o+UqpFydN-l^DgL>XxT!h<%o&6~t7mb8PZtVpc zDRA@be*YAwVBEw0!Sl5D1Sp&^)w)IpDzJOLyCYjf4GtE7>#@^{xht1E3=?SqSSwR@uZ6jDuLWFu&>Ao`DP9*g+JE@L(MV9C7lRz5j();G zQhc-?`f@;WY*GN_(P0NTF#VzOFewr$mFyzDLd-}SPQ>mFpWBOoc)1g0D zf7AHnwXu5S$8Sm5a*q3lz1&lg(ps$CF3=h9rsH=l^M(|GPN{UNLs<_qeW=>z7-=nfF zq;}x_>>%qUO5gA)GLkNd)L>v-JTz2tO2$O>P*kgpaZ%$z8$rYCnqDD*y|Y9%29EeV zpR;bmu%VlqCdo@JqrqSyZ zIuT0aL1AHrhm>mU2Z!RG4MRQgFqBBj&$MZ{7c|5k7JZEGds>nQAzhIgIcaI4RhHNn zTSj&Pc82@ug-}#pB;+}9Z%9qNpeJuABOTg{PddRtX2+Xjg}A}DU%f;_Miz+jjvF+1 zSSi_21R0{$YsT7O|(BMxPCL_`0}r~VH$f`;m2gMHrf9^Xz>)ph;m3smzTk%Rmx{U{~& zZ#pt}KEt3VmM+mS(UHdK#;7y}-znNdg%|RMzB`KzXktU^SOcTuWT}7+F^nP`!@JZl zxc))?$kp}0%QJM5Cocny<~bUF2xV5+H?_u#sSn`x69V}Zparv(Xw|^bs&|QKXW^c8 zoZz2gAZv`o64DhHm!;b}`B}+!cyn|4N6(!N|FT2#)-!%yOW4`Yd=Ge)2rA4PTES*6y_IvMy1XiJ> z(lJK6qQSXwjNhZ8JVM7gmOi24N@*D(?CHtO>9XKJPMvoJ`v9dTCtCTJqt_U+CRG zACxm*XIFnJTSwx{=`N9*sKfNxA?ZWulDGzg9Bd`570wQW5mcP2C&mvvtE~BSR9zFy zzvOklm@XNa9pJ!z_}BGu!$(4cxsNTizZCgnrT+TqU$1-79LhSAoh2nTtjBxMSh2o; z(CWl~j_Lgt+kFKS|H}s&CDk@W%`XxmOBN?Yc=k3`sPY^7n^YmfD|eF}{gS%EHNB-J zOU;Q1jcsWydu0vfADC1`1ax^iz0a@+N<<;@?}AUx{Y;pdnOoZ~JZxXBG;8W}KYHZT z-QAs2U*G$JQ{(Iz{zdpR=I}y@VayVde&dGqg`vvXGhwK$i<#n}AKIG;IGBgQr&CNWZ4z zent3^ebT-ijnK5XsKjVyHQQh3{LZt=``94%`J@0cR4C^e&fR}Ip`dVBQAiM$?&_+= zNlQ=PXeTMk+!*N}V?H%yVr0zL(D(GKw4SknR(k5-kQNGBX@(*Hxv3E^K7!+KAb->R zZ*Tskw*$Vvz5>OwAPX6ySEc4M*Act-eR15y-ci_lSNly;5isnTaZ$O4Q=qMy8ot2E6XGfc!w8w(Sj?qxoH8KoB4qhSbwAb zz{>sazrlQThfjkBgVLuAgO7+xm@=3)aPveqBbY*%HeQAhSoX|%NE^H`n@m_`hiCk_ z|3YEFVUS$4cPPG+YjX=0qgOOZ!M+$&q9_SvHF2hMWYU9p6B z($ANRwl@5lzCNm99yDz97@0Y0$zty?oTWU1z$zx7t)JvM9!e6{-LMdJi>f5RADXV% zGCS@dSJCrqD1`JySS&AF+O7ERg!FnDjpJX!zv{?jCpyKavC@Vzr+_I|MyrU=b|aH4 z@jRdI+`02O1V0+T++jl}2IXwow6ojyhMN(b@FoNYR@7gX*eFs#C)0sHtAqZYJ2x z-?p;{xGY@sqB%`?a_fUHPUJFry>4EW2dBNnd8Vu z`vTxa^%o3tb{&bMQ&YKblsbF|4SZ;SJg7p0jf@PNfjb_CU35T>?8}tN1!%4G0d+_~WNj#bmEQYkY^}cL!ugUblF33~Z#TF}v6VYEEA86-15_>5=HD|+dVh5g@-|I0fzG=rF;kT|R9zQ?|k zRTSZxv|qyLKfs)c8NBu5R5|I#H;UVc*|`;zUoR?YRf0ncy4^QROX(T%!sT_I+)5B8 ztb?eu=||4a&#&QJS|05Vn%mIWCJ&#HB{RJzjsN*mFEUNhw-=+!gBN4a&IZb5g0E_m#iZ|Jus<)Vo|K#R&4K znCq*LcoC{^zM+o@h0JSHu*<7ZCIsYt&|v3uGzRKYwDP24EebuEe$@C!Z3|q3G&D!f zrGV7QI5}V}8vI!WmtYr#vZkWRG-Cn_fpU&`KIcM?>)Kjg?P{}#sMA=*iPgqn%{gs? z7ORzD6kW)iV^sSzA$Pu`IAj~ZCQ*c@Y4AYY;a@{F9EJVzIJ<-vAIjTsv`k6-B&Eql zE2aGw#Blxm1Mj$@@rQ6&0$nan+|KO&Vu~`H7x^m%TFSrpzjAjJAI7$`ix`=O3}zVaaEeBu7KCRmRMv#&3GbJOBGInZW!O>cMD z`wc>LMUeWw@ThEFb>wS|TpVv@)@v3N`OgnCw{hY3Nt(I|sjz=?iK9VhS z4iMYWIHhT@o0P~$fB?{l0kZOYhwJm#)Bfk{huB0s_8gcG*i}^yx9LrXKv9=hg4(n9 zvr1;O>&;~BEo7yS8nIbs<%oLD+nKoLT0>M zbdV7HN+bBt)zWi{-0|3H=@#K&5Pr|t>)OptgOSo#Jt%d&>M}AIuS`xxMsYBW6?g-^ zoW2i0d!G(ud_}rxcDgg?`{WYbIYk>C6BA_9eEn{#$ds`=gVAcY2`-3F7)xix|F->s z>7bTrVs3G8qlD2}d^~Y2fPNf5>krL1bS6{M(tImzre0tqX$l`7V+LtT#DSs4p_=tC zGBq_~^wAAkjd`U(-90@UbFX%XO_M!sROO75Im~hO?Alg2JSN`|f8_MuoFe%NeiX^A z&wH?A?)jAdet9`knkJEpjTa06=0_%&^;GG62tK$u$I|cvx7+lp)p{sRT(#%I z)>OuH`)n-($Q$2gX1#dv!feX^r>VNVFsM0Gbbyp;p`dz*=wI@Ow|CGtP#9&8j;cmS zLjgiEX`)XqEI}Q4b3DeasMl~(kVnGpB_<~)_ucAF$)8&Zyr2yE_A#}F!`}a-4MYB2 ziR+<+h1sCKGjCu3?|((MMQ!9q09l!g6q35V;UmaUnn5#e;j9+JH*h8Yn&WkQIa_M1 zR$L)2ftLR1-Urdj;56ejdPa9_aq(lN3O_4nT)?GdbO+sZ__{)58H2vSIqe)S!Y+ee zrmy|B{Ku=VuCGE8tK)u><%2>(kPwQ&0^{bX;bGimQ42;LQBmYjQXS#_{e4jZ7Nf8z z5Xc6}=qsKjS7p&2t)EmRLnHzM0{H2z2b%Vf=Nu>IMDiT)$U~SDj=Wxi} zO8D@}be2MbL{USf|HbiB{fDUq1))jqHf(e7Z#UzgsQX`s^Itugb6qEmuT>C&-R*0F zdxg#wESHe z8>3Ixr)=o;?W+q*RweCtCnWEe_HNtzv>OSwTxOy>lO>^fc?_KY2T$bW(8WKq!)0KM)~{+`j}{0mqNx87bzQBd+`z2dsWNhWx#)z_-9=QMO>zT zlVAd0oO|c;jD5^lSyVXzzfr(-+3P+fw8WYZ7ex?H8JELqAwkg9-2S;(78nd`E6B*Jvr_y0YYxHs;iQBp zoG>m2-p#m97Y{!g8G!m?u->=Y)N~Vt2Vf*;ZWT7DBl@#f7SpYH#P3D|51R%|$R7$;08bUP)_k3rqtc#*J~08^CYvl^^y zjk@sG;{JGUi>&Ti^5@UbAH>1btSLz3kvS#rjSQvB$*v5Pr`6gkrM8ZU&)GN3C-B9) zyR2wCjc&b<>(kytaDePfn;g+Ou`4p?B!8z|kLY4XWJ}X0Y}=7+&JE zvVB;aiphz`45UoCZyr9y4Y(%v+Cxfo-{A>jYdT+3uHDZ{KuL%jgy-cKW)LPp^pzHv zo;vSXA8kfbN5#hjAWAlhwj_?!L}a=a@}S&ms?JD#a(Aliz5KKN$BznV-)TG}F`1s8 z_9p_S(6RhGb-Vg*d#6pY2kLk#13a+}4I3m~p0m|Tll3FmjypU!Fzer*Ql_RAg)~0tilR3~XB#inGp+p? zIQp5J?N#^vc>9=aL2hQxEoKHrMwPlppsdBd4c7lX5^p@p{~>6>?!ZQC?Vv@ol~!9J z;&nh1xa`HVcsqE=sNp45)X=DkSGCl&&&TE^Uz&Zn`yIz_A}9 z?Mp8xm=vZ;K908Tx&$m}a!N}h-(iwSY;0^CV2j3AeG*!G*46m7!|A&Qy9-`DtI+is z)vH&phEhcQM%zGvDh<29N{NXfNR_p<(uFR}&dTyt+Kw=tJt7aMslMr_4X!O6W00^&F+Cnl#l)z~Xg&ZuMRPsw-n@G=*ore$z#3c-j#NvkPF-643%hTtY zHx5eGyb}gNdTe6CE%SVPi8|o+{HF+62%JY4 z`6HRPQkzhNLDR8m4@XaZ&f1}DFuBQ2fA-xy(if(Qjx>6XtI@=%&rW%+{qb(G@hT*s z!?r9eCvSG!&8kfj6BE;$E((hjvrLb&o!$IszVSeGe^$pf6O=(rwRbMTeas_MDgzN# zmnShQKr4~KPq=r;wYf!tl8{7{B(!&2hQX3i)Ohh?ZwX5ga@iL4gRUGlRt>boFA|F zO0L#?`6u(qwrV3&kN7p4?9DiVHy@<==U&_%)zB4$8lZE>#?7{tbnulO^y< z;mZlgk!C1z;f>#v%m6X_4YFLq8eUP5L-n_03>eJ1YL-2Ac(^>@-s5bEfuZ!g(i-y9 zKW`h+fx3qY z2_vY2Ucv>tJNKB>DG082cfBMP`1c>rx$g=by+K9c0!~m70X zHf*%Lbrgv(qF2G~zgU8Kb<$`5)q4;Qf3&Fh8~H-?@Z>h`<2zo>XY{2LY8~^BwtYm* zZkF|<$?|KJ479`^5Y_Z1(+LQCGUrrrFlzZhfGih^sjB1NO1q%}T@-jg`YCybu^tn~ z)QZY7%iP5&DJBZo@xO^w(==+HUtjcbB~ss;TQK!Fk|#~P8CD2G6+^`Wr3-5{tR zmik6bUH|P=h#6L(_7~d<&g=6P?zkGL-t1_}4@!@r_q!dS)0kgW8&9K<^qfi}Bn6al zL7}11b#%iW$!{oO;MQqhIfdT-1??u!j(fF-{d~}f_vGrM4R9Y+C@aKOyL4kL*{#3k zsE>O=O3+ADp%=0NF_6etFG$nlbH*mD?5Rq=-ZnitU)MIg3}&qt*3jpX+<9SJzfS{7 zl)j_kVAkO;JZ1Q=iW;tY=j?k5?vM<~CODB5XxAtkuIoM{Z`=r#Tk2)MatYnFKWf){yqwgp8gR_MrG-K)u;9KbroWFMpbF)l8xmX>PAknSpL_k)CC0V zI_B0Z?V(2tv3l~T_Z})%=NoUJ!wfuE@oSfZdhm~X+3i!|tFZ~`vzBPA-pK-hr9y|jWk)mT zhZ~DNFsrcyaMr(x_)XnmtN^Rno8Zh11FVqhq(+gJ7@^*g!O;>b`C!d@QaW7%1P(g_ zWe?y*Mw%dyX&wEn;)&7G!IbY}C<*hE_xqVz0Pmg zXYuQUp%9a7-KyxA{4N@yKOh#7@b?A6>4kKqB2`D~BYrUAZiJ;Vm+6GEvy}eU0 zDD;TOhsHo(icgR=6)>%}N7V!0u9%4Jw8>z_xgqCj$};H{;sg#i*;jyWJv69xtPm8O z?K9KU8G>(0JUl%GNcmk9v0Iw1FG!B|H^-D~_*26&2`(Uq#~P}NiWEgg^vr}8ryC>h zEiA(nt*pMPR+X1Wfw2Xq$(0pP#u?j%5i$K8c^>2Te8HySLmvYos5uJ)2C)70weBu0^g(hZI~A70mXy!S0O$VJ^Hu-1N3FZ` zFW(9w6%GhEydigVa*BM@>JXk#jN%RW3#|MF(OY-7lIATc8R_DUAGjk?9BCZBbrl@_ zv)as#c}L*3kyXWM^gr&Q^Yr8-{$@q_QPL?#qmyE-7IcA|t*c-0u>nLBUOuYI>i|vp z!AJw}<_7$F*Lb?rkr5x?Iuo>i6ikx^#F+?Az=`9&+DZ?mu|-HXG@Y$AJmf==e zFM-AiIP8`l@`8V)=;~Nu3%A?Ut+drue$YSWwVpro$?Fztwf$oJduPB$>d`OyA=QIS zWbU*tfm>NjtYJFjKj%1)^pOd6(3cBS=R2sRR8eqh^*y*JksqeFZH~`gxwr=N^F@>Q z*hdI0M5-v$Gc&hfz8pdgMgin~&XBu-jxJKnFUC2rg+K(+>W$HAu%k5B^d;37^uE$;m7c=a`y4jlfLs8HiTcNbu* zr>l+S3nLSV5300@NbolgOxSY;1Sx zs_DK}Oz4V%TU=G6DyphRyuVt>EjaH?%D243R5|M=yfsKdvdg-DU6y>UsuXT&Q+xi} zZ6%Z&Eb84WqTWP4jXO#@8XfIbQr!vEU+%#0aB-ovTZL5Tri+2J$r&*OriUY6lj*>@ zELH%t<7KbnKjzC)oUsv;#%v{a4aUVp)W1{I{yyK9^2DrOd5no+8$wb4c`=Tt5%yG!HDe^qxIekLA#3keRyWajO2joki>45huO z3WZrfT9U%0(~VeZ9hrrUVAe*>@9%r{Ejl$3Pig@UDqS%#_N5jvAt z>r~lf2Aawa-v<}{o$Ki8yPdz%u6`3iv5e>+6qsP3Kc=Rp-<+7>R&Ifev}9YH+(y7^W@VKTK_xj%YpJf{@^;XPasMBXLK(>xytE7ME4gRCbLM`2kMvZwUH7xal@p=dQJ%Xep768k03=Xv-o znG2Xa(WXL!!CpETD}f37(}McwVbqKH6B{mhrEfx}-;1FBx##b8_yieKGf%%hVLH_q zoB{uA-W?0J^c@vns`^_J#)0$BtoTYtG7Z|w<)u$t6rcj4&`W`E}@znV{bfq_7DX85b%IBXs*UCW!3{NSW|@<9B4gB7N~`adGS| zP{9W-FE8Ui1BZL^DZvarm&u>i`oF%YM^HO^=@fXeI-!sADP^<^<}kfPpwS{|H_N_% zzH;da;+Kx|ku=rv+m7T zG9ece^izC>bpyS6ibFmR;D*g7lEv5O7Tss6rZgWNX*71ths0{?zs-op#q}`S0&H4$ z=Qi#Ax2flAatY5hblkxTp6#!g12pcq^2W}?LYo&M09PrbeK+xJg9uPIW{W8zLEMe9 z$y}l8g&qbSGn1pEqt887J^LkQhet+o0l&I^+w+TAX}OSP_f)yvibR(Nf&otEgROB_ zjTnauGMono{^WBi4j{PGW~F#S$X4Qog!eO;gz%gd(7bKc;JOL@tGitfay?u5PZOWI zS5ll1T8mrRc}H7C+(3vAb|^t=stZGPyZQG9z#*!wL6Te*$mkbY$cO`c~@E7KXaJ2pB-|8x9r!j(u@x zm-xm>5VLz={4U!gYJj|V@OY{?DhF4d65=f=G=BZ~dR9PBMUvwK2J#12zRQ3%?e7(d z7vB%mKs$N1G4MO##bGroKb&9BaV(nOyc#4(6#%N!bQPcjqzpiFqU!Wkr@{KAZDF$g ziE4#bXMWqBhtiG4;|*gEUp}`ZI=OiMID|OZ;9Q7%&V@?gc=S`V#f5#HempC|ljASB zR*o>ec%#NQ-rI&I@{3AJWN4SfemtuGb66UsIpM$QXtBH_OdSrp0z&Cx5YHO#E-FCzCz@Y0z$y7pr+ zfr0+VlQPtnS_d+H&fGAg|BSb;C=OnX(Op^Y^Dch8lq4B-mN>IVHgnk(O91gYDczqB?VLJm|2Ac>zbU6KKdq|qOjPJ}^tS)^MLbSC&Qw4>2%O?KJcZiN!g z9m|6Gtda-|jJW$OB4n!7{5Y7u?SVhrGb!r`Gl2DnG9f6xHb)|2bFABm6#d#9{H%|O z*gPI%lCg8VeE8Ga`pEd4?1YBsXBj>cs^pFT+7ll*kQqvvUhtBdr*C9kPiL3_!<3yY zHYg`vE19dhk2S{WV&#%p%~2m|1Yfn4VD*|Bt=yYO(b1}2=_K9b> z(DgIkpXDQTaf!O>fC~ZMbd{unTwEaS-a}t@EU|ZY=gTxT!6j^)nX5*-_QhaH@d1sZ zqdDht^AVcmV0_KFvzaYGl|JX)sb*`gX2{R`OaVc~C!9&P{W9>GtwU+t8)>xj+Ix4l zCK%{`B|JPL%0rDIWv|&q8a*t5u=sf4Yj(vw0{q1eGf~4wa?d=GK^4^5GR#ov{cSvr zG63@dc;u&G$rc1UkOlr>)A5E7Agwt^{y~!8*2O1D60~fRoMqW45g$X*e-mB}r61rA z@Szy%N`|SHnfeAX3n|lZKkqne-DzJK+!g zk~jU77rCp<2ivM%Of%G$Z0?IMg95|skTe{=)BA)Old9ScR+*JiY)n9x8-S|sLze7( z>4IoYdKA}JLrn^`inu3OL?xndt+F*mFo=rc-$Z={TK7FiKgVO4OweMN;4IirpJt#REpFTG; zr`p+Fg(QA0oXt-P*K$u)o9zQ`vd_tT2g3%yQ8i4(ab2l!bS(FRxiQeQ&?KEyWgfP@ zXb(vRnk#ID9`44yE`XBnMl?OVGfc54ib$1vDJe3)Qstk27gAsY1sEH%k3?dGBz;_9 zA(283?~uz6x@a#o3CS(wOFb@Cn3(RbqjCyP;X*^lZ2?3L>ofo2W#>m-Vjg?d&UXv# z`V_^M9b9?21?XBNXn*&Y`tzIpdQnKbh<}-%F;ckebm}}v^XR7Y&9|pmk|RdgZdrFy zyDhX;iGP8iitn_C;h}+-pIQ_ zS8n-?$+P(q<+qYEY}$v-8s(-Vjh#H-p!C1k!AS(ccp~O~?-wlXMEkLdnQhqeu7~OR z6S%1+Gb7{i=H_-rZLQm~ty@X0^^E%Sv9b3BwJlhG50ZaB4Q>QTG)J)@*Nsp5@)DCo z{hsR%Um~5zXV->xDV$!pxc?#&x`n=jnbxSJp#cRxx}f{W6`W%L`_VaSd~B1S7_s$qRjx|5;?kMQM)k@8{nMu^OHH;5 zUek@9w4ShIx9QRfDW$A_2Penjapr{F#zuWT|NrJ{?jY;QZin}Uc;A#LWhl+i5;J6S zo|F+9ySm@izR@A0{zJO^F2Aow>K*l{h^cVgxJh!IA9&BYpI>uI<^`I#xrmIj_8f}R zGg61N+ia%f_hW9>JJqlvcVI|ve1Zzx=9(_bi62tsm| z(PcUeifKx7sfN-b1b2Cu7ECwrav%38D8Q(X_JQ=i;QN9=*#&~|K*K^1SuLam|L8hY zCwqe#6m%8I;i)DT2lx%K!IlAo1z|qHIa1$Fv|nB$gLnwd9$q*@I|>4vM@UjoQTZ_k zL4p>-3>=06j)Id7o^NcJd%;?phlh8~+uY$9$6MS%G<}UV=XBQ7Oj8@n}8$q-OKUo=(nwY<;GGJM|5};}oE{ShxMw z2*$37g@F#_XfywhvFl6@ny+fMyA4&oFJ1(Vy`EULC3(8w=y^xtJ(yrt*q?nn06Zqn zgq2Eia|40O1+VrhNDCpXrxR{aOo4j{kQsyebN( zqd_C*c&0%>(j`Uv<|Txui;xmn8=Rxv$~Vo)x^PuNMUQJ%iHOiemeRx`iU6}=ufYY) z98Oj~D7j$`eHRU^>?1k^@osgMy?GcOFnq;pmtR~G=bYT^*#A{ z*%AgWkk2d1_2J|%Eu#Lt3jKSv7=a)UNjem%IjWRLjPQeP)V1#pb{Hx+h0p#ub*@@b$w!9dTP`E$lu(Xpbz z9SaffeM@ME0%^$D?gt7m5b}|D z`g@+k7Daw73jdMuxVux9kVW}CQ%}qoZ)|*&!R@i`fh(&K{;j!>O9r=>msc`k?rjT6 zfvXvm1;3zQXId|&Jj}%?U@mZgeuM|4JYKhvI_l}o_%Ujdo7ti^7Ss4#8ejBFCkc(t zRN<$bul4+`%-UGVkzZuvU;+k@T?;@DFONsrSU~uL02}LH&t(T_xoRPn2CI!^|!oA}}4q*HYsa-RfIERIE2_VSGs>s>!Un+^nCy8F<=&G07URoN+|%M?6p9 zB7{GoB&({ezLvCZ{%LBr9A?rqvg~09)2#Eo9zX#rXK57o&iptPvsAsnxb!R$>1yR<dj&q!xYS2AUQu_Ud*V&b%xgV9 zQ2_16;|;u)BQ7Af^cU=bjCd_xU()e0_7tQaU&e+E!U* z5*oOPTgMy-op(80oJ0Den%4E{EO((Pv6>CLmDaHyV}T%n4hlFg(0@K>zXNfDD)D|R z+-<3FEUzjS$GxW_*};~J;hSS{g{fPJN?K`h9_jIo$+1MbY?vpt| z0*cfN{xXfgiRiqg3Vk14*%=rSDQUuF*!|feu*nr%TMjbF_SAZ3kElfNT}CFw^b^?a z*#IA+`zTvRg0q*PO_s^xP{P{$%Z3QOQA$HzzH&4aOaxS3=tW0iIRk@&a~$CO(SHwN zMFjQ+SYtb2Ml>+C9*p8d8vTBYE?biDu$i7`pwF)HNq#kHVPUEn=zc$pIa$KJI3%ei z?5h?YlJxT12xe_kpFCm*)>&puI-zdcfwamN+6?=*cGE7Nqc1R@rzs>CU1I&5RugTi zJzI}zA-Jk2Yq;999G#w)xO&tZ4B0n`$rFSx_c&}5sfc%0PEHclE}9BuE^YJC7&OE~ zgw{nXJugp3;GXpoWysv8pnH(~0_R@Y?*1;5&ZE`y?wR%CvHG^372GkU0SmqkV)}Q3 zesc-Xq!^qYe(vaaOu%2)ace@UpXc!X-PH*t_milSxAg8kJ{XlKv5=-k*85Tl3ZJBw zoVC#d%$tv!Bn|aHlZjEG9@jr>C3~K4jMa0?og{|)%Us8ULXwlyrn+Q#!KpJJuDKU9 z?auRB^1CeV3KNz+F@4)#a&*mfCWczUnFXd{b{UDRqMWQ(6bCx@wI-A*nso}U?&XkR z*paS2baGB){c?hhc))3f+q?|=Cw$C}2AZaUu7-)x(<<(ytA&T)03s|XfK!iY=1EAk z>pqpc&BwV=PxybH#&i%^NP^YGbGkgI3=Vw1 zddhmXt8|Qs*^kOpw1NLQm?kqyyZmASNIZ=0ku6zhXn=8&ofCsp5*c8PG=-7rxomkI z*~T!FrtA2gS-EtP%K?f_a}*v+Ot+xZUzpxp@iMZs1+=vg=1Ak*;SB-Ii=Kco$}I}= zFU?amc?s?en`HN6-@sg)qE83T!`KF$K9(eBkSlQ?wvzp*$j!Qm?7IZokdru7H zbD=lLOulcPKJkt?_5+_+59dPoRb2pUqYK@yntIG;?afcr@1>?Lqj4j&A=wWI zuR{t7=OpzWuQpw{33%=;NgfGV;cquusoC(&w1i*Bg^^jmX4DVQlwm#3%*?~O-Z!+c zJ)OgrF|<{!SzRNcOxTL7jgBaIHRXb=`EBIBzz`0{JA;Z*YN!$4C@+Rn#c8Hq3q+`0-@_0GawzOFht8 zo?Hgh0lz6TCocy?Nct^8dF(m?qcl~0VBlo?9@xk@nbCXJsXzyG)Vp(|J%@UZSyG!Y zc?onYMBxpF+E1isrk>H5k+GY6I0`gd@_n7oU1yoEbM(i!M_UO$KYcYwF$sUXuAMjIIU8Q_t;N^c@^t za~3Z};dfY$Y)xT%7ApdLCq>-58{sBuQ^#)kIXUYTlSlPu^+Zfe-b=Y_y3m2Gt%}7! zMmQlLH$u^*44xiv0S0Pb=y_`U@aT|~j1%i!$EP3u7#1%Cj=2!%Jz$IEQ=)eLWU5V_ zf*F(PCAOs{q}Vx5*qX@QPrF{hyWA8@rzF0hef=HgA!Tv8x9ifEUJzaktI zJqnY6XA=16Ga*umijXD{hkAYiIbs1m<7(Bm{aEfjx!aF{(b?IrC2wyMo+Y!{`P#(I z64|7}VNL&!vaf)Ox_j4Eq!DQmP)a3*0YQ;&P*PGF>5}doL_legZs{&TKx!1}PU-IM zhMBv^Pmlh;bIx7&uH|yguog4y-`@L;=Y8Jit&>#4)taKOJMf`T$r>BuNqs860`vM# z=LTKG5aITPyP@iV=pGXTnFA_0Uv4Ypp+$iF%j?w;o+`j@lJ0;QMb%uMPfd2?YMC<6 z;oz=0rwIJZGF;>h`i(&roWYabHTjj(W!)dXW+t#%=;;uY^M5*{sOBI*Lxx2}IrX7F zA4hq3H%}Y1_eJhDjw&^8Iag{>y~O0Vt;f91ic~QAFS$qp=lZV+9V}F@I&nI3I74Ge z$?rwu0(r+^DKH564q#cc-n*8*#Dl$zb4^jhzSS4L(KY3kP_NQ6U;wUwcL>^hKxEE( zGHSoH=>DDNV0ha!5$vLthQ=F~gJJ6zX{*0Ty?*d#&jK1j6Ud3KlG1lEcrJ0ujJuU? zAW2#y*~TK(i>^2pamb|?7txg9{Az^Z{UebNL8}w?SyIs?Py|My`o1+|4^dlNTlq{+ z7~5*4kc9V#~=ZW2$O zAF_G~Usb4N({Hq?cAnA}AtT*IEZtbtzm}WJc(8I8nzka)=hKrft&@#Q!G*P20v{M^ z^Mzx?_NLV3+;683CVg`HX^J)QKuuLCi_$Omjk54o+p_qMFT57Z)gkwpI8YlyyK!vN zP0kh~*Zsf&DrtFO(-DqaUSu8;LT>X*Hsy6I9Z+oy3k{`%!>SyeC=Hkm9Rt<%AX-ap ztS?FYXu2Dln?G5YO#2zTyVop9OTDXkc`F&Pf#fHuN6=swg~4h3TIVY(x13&iS{H7t ztWd-0o>soPzzOgmg6*_f&PwGkqv>j`tZ)C;0(iu_!Q9gJ@}*Ae%MlrUoe@+z`zeUjjryGv+R7h5hRqw|Tt2X`9L7A>-L|Lwoxm2aZ5qkJF)Hk>KeGCmf>^ z3a7bd!JZ4_sH)urmkakO5BH58c>-N+kD0HxdEDFM6#GUZAbGzX+?GobKxl@vcm zK Nddlj-K25{XoY%uz<|x2hM?$W*Fs-Un-!KdZYzk1zFq2nN083h+Z-ksMOlT= z3E@{m_u?0{IC|7CYPDAdlI4&7{^(!YoOt@{o#*S54@HCbf8NbboJR!fu8EL>vVNdt zfWy!9;}w`gu)&Q#y>0bGS8cwz&ZhpSuYvyzcw*JNeo7M_29>+^ecP(E(F+GuJxMet zVw*dQi7971*!vAU(#VffbU)HN?lLg!iL2Rm)>w2T2H_G=6cl|7x!yhO)H7!#pv$l< z934(bkU$4&a5{K%6#IMR>--X*FC_JLc1mAB2iMr4J5$W_Nr~<~O!+YA>ST zSvy8@q`m~*M>oVXl!>awP)Qf=>NbH~Z|mqH(RV6w-*lezOxfbc*xETqcnY}~2V^IV z?n{FT7@oY;_#;^T2RdT6@^9u>VGE6fpjviti)bNeoK)9KTzdK}|NR|g!x9@pfX1_` zIv&0Zr6Qj6y=*W+hyd^L%GH~-`ZRi+#OSzmxy~Ptf^MY!cq?6!(o;);vPec!l2?V2 zXQuCdTe*}3C{4)ED$QP+-Z~y16jo3$!)gz$Q|u}nPjDmkg|5326A_VCc}mnH zp-${`Nc~Bmz!@xTRF>Rtl+AvN+ho9XSuU#mcynC72X+z&y7OID!e9|M3-j}MWaI_U z6N}C*E2qSe3W4g5hXihGh%#q7Zv`dITLR^o%#kRWMl8f6hLWSg1mChTeP)VsylWUR zedYo;7*J4r7?={y(OZ`S=g>c41-|?EoPosxCo?nC@20Mmu^oNeJ&rbq=+4fRWs7e9 zV*ut|e$dNGx@hZs(d3k}?xxUkqXIG>`=-$SqLFb9cd6VL{=m3z&N*PR4G6ePT%!Qk zF$w0vZNYYHD}6t==hyxL?N9Jc$1=Ewo<6hH*m;9DAi+wg9Cb6zvHdZWlluzLCV^Ybxw=`a7f>);x3w>(g!6SyxCIcxwW(4|-xi;L6M%f)6LgZgz zoME`DeVY|kKU$u`F=wm^ZZGUjA+ZV@(s|P%w@Ks1$S<84FDi)T3ujXP)@!JbkZXI< zD;^-rK+}E{CdM|%Qe0YczIN>uBF1B z;tK+Rx|IM}qa-)>|qvI)U9}?es?neKcu^9nb-6RlCPi zsLqkCAmb1`f@tlXMOMB9z8W-*t)f%Q^kC4YzVpb(`(!0 zU(e&%z2<_H6&2HVzF3@StWe##BMaf%KKT?fw10s^L@ZxV`Dl+lFFvwSTDy9~e(Y@A zNjnt*Z6IBmr<2L*sCLN8chhQXkxdZjc<9`;B>oNDOH3Say52VFHPa$D?&}9s9>?n7 z5fiJ!qp2DkKl+Zw+({kFVqI9cPV!NpQa50k_fA6*iwkf6uZ3w5AMeoCltNj$+#3Oz zZYBhjihZ}TX7}U*{L5TQQPi2@%&G_{%es;~!w2+AiIfSCf{3t|KMiVTTX{B#^2iX+ zDXet9&{;w`6?BG++b?wwbPW_)QdA!&3)e!sVs!fgN%9+=3N;@2t$#>f^y~>ClLXLl zZQonWXDLev!msg^V_Yr$`e$$>Pab|R44oS0si- zSJ?g77@z2?^!V8!tbYws{~^AyzH!a@(y>-s(M}b3omtCt|6)J*Ba5v5UP;Qi#S&hP zFf!io%DCO$H^&Nf)s9uxlX!vzH638Y+MOKd;^YY!5R0y!@$uJpABu_>AhH?e4pB*!N;j`o50fkJwB#_l5v^d#lW|$FX*yIm>@9v`nZRj#Tcuc4 zHnA880#H&t(s15t@#hzjWv!1rw!XBas5||EQaZWRFTDak-LLFsy` z&aM3iG0m`t_K!EG_QP%|6>6xM$0o~dkmrKOmxb69~@A6uPTj z*<&`}cF3tG_A3V~az@%FS4KXgIXF(dC-JAi=q(AZ_Aw>}`X4LsvjXOO736tcREAKT z%i?YKJD;tG{YlUIJ2)5wVcyMkI}gOgN9%=nZ1?WTrm!cp9IQ-*#6Hy>lUrIOa8Iin z?HU$A(2;Uw@nTFgcknoG-43}U7*`o*yUl;i4^lJDfy%2IP`7rboX^$0Q7%Fl8s6(*xhaL--QIFSB<#jQ)o!nB5A)a;qUl7w^_fMWu-{ z3Ih2A0i|+xZFk(mO#}Dm?XG(KqLgG=?}p4f-7O!Ju0XUa66@i{g}0pMaW7Y(FAir! zL7A0q>J|4FH^;4n<7SVu%i}woUK{(7A3o5YIbU9Kb;a|)AVvrZ=-;}pDz~uP*~;hg z-njN*LSRr3i5HYp3;R<2Dz>%QY&>3o4XXZrs$=TN&r z%sj=Wqx)f6n1Tzl7&&sA8Xi}H0ZuJ5=?UDFYZ%xnj^N*{&sn)H8~-q>h5V5R%Yk+8 zM}bM`Hnq+TcfwhmdAi-l9F(;PN-6357EeLMr`Po-dlvMmhz;)jmC$jk)CI$FQd7+e zxP;}nR(ne+#hnrg%9lvy%2g=PWSgFDWY=XQ$f4#Vqh)6g(APJ3llyA$_w1qQd(U0Y zI7x2aRQvRp_4u;>x8DM%MiTITcN-lu4=s zN}R`?$V+{Kq|ckIrf9*bo}ZszU5ueq0?t_XF3}Ejx9LS>DZ<<3PG8hy(MMGl%^k0{ z6Z>UdPLnOZQrC_yE^IuhRk|_I7=Hjfuwv|%*H&U2F_~V%@w#<=W@d)~sln)RJW(@D z$W9N&*H#2`#_@r356V^vf3s`|!5&f7P?btgc8S;b+ZLghz1^`NnDmLtuOUQB{dP@h zz91J+G;cfE%X-0;K)f! z&?g2r|7FByfYdnb)L=n-qfwR^H%{p#tZQ-@I3wfw0c*LqY9C0bj^cTs;s?5r=dSQBQ z*Q$$-KkGlJSrsnd$OXgj?0wmQ$-Mv-U8vx-76)N*>RfZjrgO*VBw_l$qO7kzsMtZM zrO>O5@SA*`4F4jS{=++)l!^A!lI=<2`tw~fvcGbPDjH1Nr_!6%{ zRJuM5v^d8LY>Mmb)2DbzSim$T@A~6qHiwW0xQ-mkY+R+^h|jfZ=)$J;rNAuN>?p3! zT1+V>wuD~32U2PRrP%H)6@k7fk405O6U#ZD{wQQiLT7gSOpXk}%0I1~CPsjnaV^+h zf3|Oj0N7nm)SG7iicEcyfs$!;R- zR-=0)x_A2?)!Gg?D~LBE|V=0 z&3eT@yJUW4`_ZJid5j@Dn0stpY^l0P1W_$0`KYIi#C7);uNUndz?nO6u1RB_bXxC9(^gY{dRLPF{uul$JSvXn-KpiU zT7aO@ux7vquk4QEPRz?urbNOO)-KD8@hg*qM>m#H0hiCf|L@&<2zIaTI`JyF3V;6- z@&CDdnPB&huU7}LR((uOr5(MK(jpt%U@(N@`UA0~iL=@}dzY^{38X;?`<~#eswy>| z_HLL{-#L}Xg9=Dp2Faw0sNhsfFe5}ZeIOg>ksloBG^Bq+DZ_ab3uO1czC#D8Fcp%{ zA~_PvWQr*!CZ=c?68SNg)bBTTbC}zn*(`bHK<#FG6|ysFuys}+Go8z;!I0;HR(h0H9gl1xo9aOdk7J;O z;AJ9h*912QqvFZdLG4%9*1O+{J?pJNF{muiP#k?AEgF?=^Bj?J~=ifVxg>@V7JG_vM7%4&q@t|{^Dn%%Yi5^|0i{W>0?-L+oWpyJe zDj6s1g97tUIOOk}`SUd@?;UbJ$x+x!!upzJ`0QX5w~@I2>kM_ z|IrJCyaNXc9v(YuZOU2yJ*jdi;*0HoF_3=@h|RW4kY25K#|S$5R`4L6^YngGd2y#p z+?>88-cvI6y=Of3OTlT=F}Tw>mzir(DDG|fQ|l6|PB|P^7R*G#E8C%@XMc|G*AAq) zdiXr!XH@aWm|~Kle4{>)50y_X%e)^6J&L?vbuPW4TjRvyCU){rYAjX_o*85ERMu8- z=14QwY#`_hGDqp-n)YfLmk*(Q7R9VGXUT8yy*R;iXbqBB-GzCnSz#(yIc1lwbc3a3 zWH(}E;)`M_GY?OEGv6_>O3ufNhvF6!KH}S8_|bVID}Sosy2tEkcEDnkHFEOlS1=ZG zhaQ-S%V!k!XgIGMnVx~6o}>>J)8u~r(U?3ar`dZsYE`c(|JTN2L3}ov1Cybgdq2Dw z*luO*cn31bRi2IUX~uY{Y;jbDy_e&W%=k{YOc?*r4BCr%390%>!_RJq+7jiuLoJ*9 zFbd>kd(siPc8l$4#en&qeCskeO?T>j%M$6rKty^$QT4V=>{r2H=z z11-jX9zr1o!jftrh;^Vdm{Gl1)G;1rnVRx&82y6nM0#a9e|cyyQ<}bh>JD@(15fZQ zvNEnO)suH^Je%|w^h6~Z*PW4D)2rl)I8QrbWM*aAq(sl+rb6?hSyq6AQm@qZLIlpG zy2-jK%W4+I`4{4I>(Mg`7R~w(%Xaq`QR`ABUOCWy)l}tUS z^FZAw`TkMK!yz^mrF7zBg8pYFL4)r|wZ73E6svPYCEq@L($vyoPp6dK_0jYEp-TeU z3q&!-WG{^BxXW|XQGfVlZspCcguc6?lyh4>(X6DD6?1T&&rB+WX6*|B#Cp)LZJO4Q zdrlz{<@f372O4)F@4A#uPdU#R7rU-4b;msmCkS`YIjJ-Rb}>WGYqaL(8P0uE0N476 ze%kKsq{ta|DWO&DV`B?R#n%LdX54Qg_<#1vB@8^4DT4r+Uv#qH?7CF(uk9iTo~VHp z|K>_&ZwP$ev0czzYIfiGyRHbL#s3BvJ4o)~+99a>ETQsAJ*NI05ODV8v{22nBd~PO z__&PutfeK+oh(;A{3t~I24!k$WJq!7X)d_5y5kAkl4MNWuF-WxI|K=3W!a}sW>XZ_ zyA=}*VZAAfxw?WOTjVypfWO&3pa`V1JTJR6&WtXLv0)l3i1q^R$cPB$X61a+a zg{>xzO3%svWhmEE$(wW>Eaf(M`TYPQQY;+s^p#G9J<+1sCsjs#s(3jpEB&I2tjf44 zki=}}D{pRBW(=l}{ab90;c4hV!Ki%_c0TpHA(NhXVUqN;MuCb?r`D_>=dIXRi(aok zN8k5Y_O*!e=Rd0Q{>DF^oqSsymwb@a-iVU#X+*ZnqU(KwDT^}Kt!ELsX>Zik^@okL zc?OaiJ}bUre!!Fwo}NqyB2OFU0~3!s?>3D_Z_mkR3%rP;z*`ERu!$PhPVpiHogJm3 zf`4su9N1B_QYER`F+m*p5E$ml&Qu|qn@E@CcLQDOpKcS( zXGkD#L9Z$8?=b1VUKdDw^~O}oH$3jwD^!@B;}DW0Ni)~DqRh?Ie=83>_C8NkqBGvK z+tIO4UorVzcJ`#B+&eJwfz#j#Qb*q+A`%_SQ_b|1!t!|uOIwLRw03l)m(J5G*xHs( zbZvTFo+#n~7I z@7D&qAR95KG6J;zwY$IGeiZ#Gnkv}QEI!DS`+eBbJNSW^u?DI-H*^23BJhxhWPN)J zgP&KtN&@N-(hzHeq~k!piv3wV85Na0M^@c}Q`)t-IL^aGGJr=fJ**i1Jp6oGVE9Y0 zUQ)hlF##OmH(mvz!g$s}QsxO?Z_8id!Iz~cP8_d60QlTcEW;Su7e`CZy~cP}d>fHv zO6N3x0OavLjG-QAN%Y`y5%Ekv60-MJ;-P=L#C9he{u1-j@%^{I=7-lKk5zFiE#%LU z{+WH05S8Tp@-S{V1l#qs&>X#f@!N+NmK?bm1-_M+mLSHpo{Rn2qTz$&-F)-BcwT3X z#J?$uT7O%ALg1_K|8H|Ayu+|u7&=v+6?$qJmSk`ViGwqW?vkpLBM~JsG^m!6fazZO zP-;{ksGb+-nzm{j?T?#_Kvieqml&p}%gkoSTm0l&<=U34b-q?#7U}dG&aof%ad*U| z=nAEH?2%cHo+TW;jH-mf>K(d<5JYuoXlMtGD<;YW?Z$R?4*}mL@k5@nf`cIykJvy~ zPX@pM87|)0f=j# z!6XOSpQl;hdgB*M8~<$n_J35?{)FLzggZhT#UC`zOVya= zjl2Vq$MB`Xujiky?^W8yBU&LLBZu159rKR)Lk3yK2>Yk)pz3&y3lo(i9L!|h!&DF{gWu!7vt|%b66Y$4Wj1lJNBT59(uKZ^b`O8{R%aik#<3sY)0KU!D2~cMy>7=X}7`Dr<8%$gl9EsPpWH$W?mZmi%dY; zXIZEZOr+=gJ**;~zjX&tA3z{V!GCq~L;yR&g>`-Q&w79Qe?8H!fg%WS5aigy+2`0_ z`gqZ8AfxN?gc~$g__iP{^G zaE2Zf`^vvUsej%IQDfc0zp$rqq+Tx{oS?+-yOlP(x64%bB%MF%G?-Q5$)a-8o>!di z{R0#J!~TBHPJ-2I!e5~xP&3DFefM0+x))+h0w)$Ui^O;4 zJv(1=VN|KzVxGJw)W^vANuDZW!$;=xxC5w4545uV+`5K%D8E;urj*ru=mqY595WWd0>!_B-I}M%BWE8+|fgw$)o@eTjKE2DCu8XUcLm`3Yay&lYf}&2q1?o!5A*VI7G~$AEPP8KZoiNI5qRZX$R&`X)Pj14h{1IW06E3X@#!PQglUQ25n!_Z4|Jc0|2Vex3S%U4^d_ zLXsQB_^NODnej}kZq222bY#@=MM&@<^y^DZkH+KB>3^;gO<(e|}m%iswq@oOeCi0$vfvRD4PYaJx7?ROAu# zOBhAt9doA}!o)ZjLp@t@WQf&c|#Y{5C{*@{t3tIvjBvSe|QrJOw1u~0S>FMeR zCs%|n*_EwgtQ?OhRpZ)lJld|f4yxNqarXgyUSC^+{{WazvY+u88Myee9I#ltUfMx4`G1foX z{omeXhwy66jIOBFW+s*odk6-n)^*#yMbRfZ@hW#i{G~tNNWzR7|DnvSPWLVI{b>-* z!!VofhcD{N9foR6{ZX#UrV1*pb)X)SC|fR8H|e~Ue%w79scCg>L8$|S=hZRe?b7(@ zyH|bT@!m6k$frcgzQq0K)_Nh+YAR}jf0b^3JJcOtZ|x_WZN0q|=`?&?pPnY^@mSp@>mZxYjC<4% zsv)1N-@SJnm5CE=r>!#lLJ<{)Cac2D!$N$$J0N?^7w$@4g(X8_8GzdZK6T~`R-_=#Fczz?eAJHAorhCes_ zwGg-sg7|~%^nXnGuN3X4%eZxSCxtq>xf#=?RoEmpbi5^}?nypVR947e9c zh}pj`pHHYz3DzZ1dVcTMXgu5Q{mQNkWOy_VVsoKUw7A+$9Aq{ORH4?Ui;K4ik1qD{ zEXR*(tYFm!yQ)quX99jB^W$PkdV7EBOW^r~>+216xy4u=ah-&Q+p zEiA;`MwZk*m6c`E{oDqmVeC=(dgZDdxDcTYC7>}+PZ{%{V~G#K*RX+qnaba93&1=T zsM9M>v1JLoxaQ}$F@3KV-|g=ed~$d=Anu8twn0;oBvHHa;n`)v{c-E@)h*%UwWEAqI@#Nj!^d@@ zHF&pMGp0Px_A9tTNV8=!$lKcVrRWlM_nTs-WOR$PwqcdA8WpBR3G;hJ{40h!$w~;o z_>vT*@*HV{aA)p$*U3_%HdYn)RIpVBUOmQ}uj9*SO3KSsNI%D1^}?=r8sgFia1r#0 z5*xCcXT0UR*sKrZ1P3l^MkmmpggBGWF4&Ok_v%Tbrox1^F#keRt&z4)^IkZ{ziizg zCTe;wVy~QXkSDWnAob+20q$n|sZ-k{R7b0Uc-*WTk3Iw6BjXzL~8!S+P%8xbV=TtcI+*>*nbH>^Ye@*G0z z$b$)vbhK}t4~{9=>15-i#Klc=R61@tfEw*BG7*Co`84}wDc6n0U4s)7`6UnAH3ue! zCtc@vP?G3>OXbN_!LL2PqZg(qBEr`b7hak&f{V2<-rDk3;d7qK z7YmRktX$#=ELq+{8myPdB95`?-z1v9&BDdgudD|q9OkV>mugR`v-kSjH_d7zyRK2| zB&$cs4Gre>c=|eg;HJG39sAt0-4K2hp}0iQ{o-+&jz)F!g$)|-)z9FjN!E^acy*Cl za} zf0|hVR39K@bvs3*lIu>vlc#7V@_lK7IxkK+#l-7Z_B*{HjNA$+fvyR{w8y=z>@H6=hHrx0=Kp4@FNg7{M0ozb1dyLZN< zTF`1~tTpxdErYVs6TfC}UaNG4yKn8Cm6an!o|F>5-3HJtQf-$aOcy7##2O0Zz5)t%oVvL8u_;$si zB|4EGNMa9T#LS1bGn#{#D&MyHS`la#{Kd*P3GO4Yn54CrQ#U1DA4e`fCl58mKVxqD z_!k91fF7)%hrr-JM=f4?O?@9fSOn^S_FCFs34}}8@PFVl9P9Ib@W6HJ{9j+&&Y+hF zov|ttfeQ4tNVJ6BSt&d%-c>K4J6QG`4GE#}B2F%f|2pXgCb_@NO7tsm^8cli;6v3WxqLwg)3GdaW+=1MWGo0JQ9B^k9 z=RBRd_z~@5D{U#MyarJ`LrP+?qf>qN;pv*y<7wx2POd*r23NwBzbM`pXgR~BFguKg zG#zPQv&s&FST&wIZHzpl^15KO{{AyaC_~Fc|HLW$oQ4)P~6^eB3e1Czu@sLPad zFJ=$eq+QzH>$v95?p}I=g=-JA|)alALjY&=wiK z1YVZmJTzO~!n<%%^ATR@@m1*IKQ5Q1J3lh&9q8dJrWjb5Yj)VKdn4YbGL&%-OkU3V z@PQDNtgbJDB6Gg|QeSrxG+-WLH4#fm#V%7$frFB{HuTDeap{TU8nKZP72$aXm2`A% zhq&yAo(NAjK&Ft-DYcs9Q7$xB2@D9Jp`&JIVE70co_ZsoP6lgc|KbVSXNGotm3XIZSs6(EVVNN z%6RDwX|z0E8&CMz&&XK4BM6lV8!hnoU8o#kpAs0NgWkQ%0A$I280d>i{Ibt**8oP$ zwB>$O8;_1xop7#NpeDXuhoG^B32dtfv#F`PD*Lj1i|u)NdRp2_oipifm0wVFZ@>f* zr_GG^V68e)o?7Y8;(FqK%{Fw#cIwHC(TU^hluyAlGJ?j}L*lHNMwt#33k5Fq)}+4P z116md_6=9SRkpq1?TyTllH#iNQQsgh%hn4WVg738`K^M2SMkTqnxHWJKIk}%swXwB zYy?Wk7cP?n#MC3S_F6l5#bX>di^#q=4#haG7L3w!>&Bfj)z!TWAK`qM!Wp_bjhML` z&u5f3u^8TkI(L@}+POF~?KLjvj92}Ft9eZXv?P|wCGi}z2j>o!w>4F-3%VaY&>pLZ zNE4)^i>C{vl9ut+6?TfT5`W)YRgdT@e}TUvt!ZwK4Mf|6=kyKk$LRNnS>W7crE}VP zIvyd7pknJyHIep>>yKlD%iO$z8#T!EK$DC`miYef1$SI4rC>`{L;~NHRVMKD#*YM72701*Z~b)IGg#nve&Z2;TbzGh&lsTa z0KhcgA9cK?36-agRP}*04ac>r5<6uY3MLNif+pF>yq}q))3;3GvwT`V`)Jp-%*>h` zH0^IvUrPXK3-RdlUOmYfM^T^|32xb75(a37i>8_TQ=R^p2uvS@Ug-M2&KIUS$~V>n zyvEm9j;T;U?_CKQUak_Scpw6;c%KXD`FMZ3Hv3D~bNn-lLUvkOAFs1nP2s1i;`Wmt zl%!V>OBcgAp!c1~GE?nPhxMR1K2l7#KwUVB>3+`l#IbpLxm2J-rhMQoy|T?2(D}`Z zt@ko7xiJ}COD7c(uhPNDQkeXprVJ|;#t~t246v3hlPf=p#X$(c!c^o5l2QL&*t3Xc zhvhq!yKj;rBBZgfu!u=bY7_|1Cmt?lnklQPH5wqvy58ROV0p*Bk;beV7!>t+qtk_6nTS(|bIYz{#b)e|Q0W!AT<8 zanVN}ab9k%kmzG>Jl|g3Zj8r&T^A&h=j9#D_;(NnUi%=~!%KLYY?zmzYg8mX<#w)` zmX=oHT-%nbYxc^gqDd0=g56ANpgvo9<9Ipwi7>_ESNCp0rlTRc!oVxCRQC^1^wu3; zC)|{Vm=)rSQ1Lj#KDL~qJ$fbxXh*UXT$a)Cl-r{NL)I(P^6UaMG|7PB`ZSl3aRO#G zaI<>39>Z1BN=noeA7AkK4hm#br_(=vIK1+sbTe?W6+!2@L4i zFH#UCvWH(_&1${Zb!J=W(@RTfsz2`*F`vxK^tc6tKKcPM0tsfTOhT5MW7LU5WV-rkF*14U^vf71nY*1A4!i0!`z2|Togd@8>Zn3W zj2;~Mh$E8&DWqiT{6`mir!(18_w$xA098aABTh}um2}Rx#bHFZ)ln(NgqL*sgUmrJU6*dW?ceVcry<=qDe2v=$-NzShl+zvq@uvQ+O$>mu_Ft) z%`+}8epX_1q#p~ie{*(dHq@S3D=oi*_+D+DLkJ~%>T0J%VRad89mS47bI!meFh%xg%=$Sl~`Bfd#;y0$A%8T*ggAD-0@_hkgkyWDV6 zdM*5BI~$NP76file-xh)vkJ`=z(F0}Cj9}w?FSn$Pud+5INT;J#foC6PMhCuA4^ZH zJ7oHt-TnD3x3lkS08h7=@E*=4Kk*8l%MyXeCCQ zX3vV(B1vG6oVxlb=XOZtL4!EdVAfa#Fh1TYT|b{PnOn%U5-jG%_5GO~b7B&cko2$m zc!VT>tr~=eH7qmCw+LTyV^2F%n2?f@(P&}Joz$3^k$J(`r0}NK$?j*~G1;81*{$vs zFyE?k(XKLCU_vRzdEuaSJZm3mAyDL&?z@hjZZr9jS*+UgcxejfUZZFuoIXoN&-X5>*qXiy&v)2z*C1gg~ z;@Tu7Bwr}6Lb^|dp{XiZkN^r2R3q$sd7k^-I2d0J3Z7GivFTR@L_3ZHU``5Bz0ly5 zD$2kl@}%g-q2Kd_k2E<-m9IIm&+%#BN5$!BhU{zyWn_Meo0G3sbm|^MRhej-k9#X= zFG`th#EbFiILLICqqaPWw7bcExtrTg`cD58x8GoT=`a%Fx<>L>L3lCIw6(%Jq z-0=wb2u7oltE&Sa{R@Q;Cw+2s6)zmlsuWA^fPV_402r2s^#o#hY zBDa0>W)p&M1W%%CkT{Rl{bBd)_qQbStOuf4tl6d$RRr56q`RA=`*_wEV>ybM*h2+z z?Hx~C_wFINJeAihXB=mN`pJ5Oy%V@_-8YbT%i!*=*DSZ7G)xy$w{ehEtg_#~M}ZK_ zz`d3=*tS0~PgnQklJ>{$xwzccv%p}7iJ4~>!O?gk2*J-KCxcuzGf4-HtppySzha!2 z%1JT_FqN+!<{Qsty%ZVh>H6XBMbX9N@w#a`VnIDQxx>4_>V0evf!$HC^#+SNS}-?u?Kq`OCO!k($)%r|ErN=)7z^$M7z(d*SZJbR*<+Ue<3b`NkJN6a@b4`AnoV-g7Ot4^|&g#-!-6zS94fv^J0qTr= zcX-_faa?O7P*T$QmUG~@9T#>8c%s6lA;I{La2<&JZYB0zZV$2np%Y%q;EnC_lgoxD zmSBI&6eZ^zQ|a_;@4SLJ&tEp2l;TzoH+jug3ny)x1Q(C-hP!A-h8fsgCjFR8N#Chv z^LU6pyqvS&a9EBY*GVY8hCDiY`7qs_V#v#s^gSGGKHZZ1@P^}dw*(#ebO};y(N`!# z$Syg=McE68-}L21^LcKAv`?jl36?p*!xC^AcEb z>KJ}K3UHU_L8_119mR0))D4HJo>I8)G^dKb&CGgTch0@wj9VgZ5lo=n4Pb=2cVS^f zVVlrpL^|IrdHh182Kt)F(-MLw9t;ufQhsku#~Ky&Pah8)ZHJaqS^}ov=cZj#tEYDl zkGfxPI4V?HSqgab3q{niCf?noslLPK*V&7_y#APUf5kv=kSRm@^;zT75%giI4VnWk zxANU;HYq9I8^t)5tP-`+H#z5<*(7eHT3y#6tu~!-Qaf|hv!%IVb$$NmpdZ%;?lY{P zk`BZR`JE(qD;^*s9z$@nQw50(yOJM$zkh=+ul{%n!))DpJaMiwFguAb*5*2qm@!EI z!{)GxG`_!4U)gRW2fY+#1I2>2#2Z0}Hw(x1DwyYo4+Rx7rLg!GQs2Jq?|~I8Te66H zc9$d!m#^Ez(H<0XErZ71O~ALTrdsXOyIV_lAb8hfce2P6jL2*_AzFohN$**3iffv?xg5i>z2DCK0=qyd)|V z1T>pQ(fXKaV((MkM4lvUY`G56iLs4l^bK^3{v(hof_bF=gM*XqZX9oZ_bcsx>aifA ztGhQL(?QOKH|zJa?@%AW1{C}*s-(Ab1SN&5%nn)!xe;D^wy(*p?iruV%sJ}aic+H1 zA(eZ2op;9zyfJ=h<2h})dyIn_|EPzZg?$sY+dE9ir%>7xx&hJPOILo zxmXNEDs1OceCinpnal7wssMP{0XjYv2#ei>^7K++u`QVQOlIpg9Tha0-rP%tbwqZX zX~}He2G0aX>wjQDTXNHwvQmxDoY8jZqkKkhh%hy{EuYraiod1isd^rew#X~BBsuS> zmmKGTszYi=zVu2OCmtL)XEv2S7wsJHSW}HNM}X}H++DpLIPAwklumg_G-zk%mz^sS z4~;h;_v*^kMl4BWm+c-`?0Qb!+yiocegQd1vl)c&RIUc&RRxbSoUjXECvRezOS|pVe}_ zt#@0-0(R-6sHEspXV4;>Aup)eJg(7vKc+m*`6gsWd$}hi`$voubwy0Y5OWNce7syl ze7VD_9XW@SPedHwmh!pHo++~tMv$d;mtt*2L;eFL&_p(0VEDn zcCm)-`g`>c&UGb4vub`DPnQsoQ1Q$D@^t(p0Ah|k$WQXEtk!N9zB|v&X@8_;#*77FR#`Yia*MyCY;-#rjzb!XnDrDI21`|Ek6eRI|tli9I12L;On{NX4?JRN^7@MCo!EJ|aQhZM4 z(3E@$n>tnyyE{G@@^pbcCt{xhjP)nXjv2?`G^02i8tzpvX$>uen;ot_ci{Ae-w?PF zBuc0adWR_WOw|-tdTv~+>G9S~g_T)Netugv@7zS0ObL7VW zO=xAM)IgDA=G=TJ4_ltLpmDvGz?VVXPrUYysVJOS=%_Inv?QQt6Q-ot8eC))0)Dg{ zw(~++yZ^A?vZTmm^-GjOky_U4SDV%w@aeifzI2CuT^HGBGv@)(WTSp7nKpa8`48;m z9tCixc?$I3@2}65?{KeW?4k;UDnmngw3THP0OFlS399Mi6_%!bKBu)mE-pOQJVv7c z=FWEaAjYnATKxQIRaQ3PF+oam5&VwCI^*tLDk`}*7?bxishyOH1cs+u$EO}nB_hZj z*H&EC)_zP^^byGmh_?7nKhykd{%pIh?7jS=)Jn0J$azK^qz{A2tFvW|3=-@bZB@UD zK2sO?%5}a64B&0)a6!BYGu?~Ktt~XEtueg%*=jP-nS$F(=3Ni! z>7M1uJNlLJ&(i^{PGy)sATYDWlK`ca`7puzho>K+l4SXdHFLT8*Io#BS5Dm_8;nSh9m*d}<{73mHn&RuR#>Bw zX@NeR5$pT3>Ag}*cVGCWi7Du;9D|F_zy;RiQ=xWtj^w)|>51QGze}2STU1bxmmcqz z8YB~hri2jHwDkiTziYvScdxFTsF~twAkHiEinkXG&A|lp_v$xsUV)z>gR!dxT z`W7D?$m4UOZWx7XlIFUfQ*Z(kZyy?m zvza3HKk|n?6sgI)MdSajI4IJP((7o08(wV_=w!E}XLWrMV4{;VB3yq09G3)d-c%T8 z%4S*a-gk;^0|{?mxFYVzzscI(l~~G!$ucDAO!0E#6}tB3!>})_wyA7@(*9;YRsd}}$i5`)8n`N-xOVqA5%}ojuF1naR!;XH*W2!IX;xS*b55)9R}UZ?`fWF) zVLdMj(jc&lcxdi97^Q_R@5$d`z{g&H>4sa1Gm&8#y%RaiHLXD%*cRh?M4)XWESejn zg>?xC-g1B#+-yMB;ymS<^4MzP!H)#`iJb@My);u0vSIDvAe}@$Ve>%uiss^axN7Y7 zI~$W#{j=rixMRqg@O7X~EM}1G9v^1VJhuG{d%2$bDri8>ht8d_H@u(?-Ig9%_7g;01XVk(OPL+|;^1tK_ocU(9woXeDwT5GJqQa9 z#utEO?Cu^;3+4E|`l;nDaa5?7i1sYwcqkRjao~ zgoR~C^DXDAsg8RwW3|qsWI_xx_af{zgE8Z`AVz>H@o@95*wFEk&b*p-?H2dbbVuW? zIc3M*67{a$u~C`p*B7>Kc5~ zagXm(bU1|(r;tx_!oq_!vFt9kPa(j?stSnpBwzh!7LTF{w%(1r_zU>|pa4L(133<` ziM7`_#eLziDh@H^P7D*1D;XfA2Uh#%LV*?MI^U zobSmMFQ;{$hVGgc#}7W%U?jxFsinAY3o7hAIS1VVt>T2kIbodlLo7agbO&m`k^@UEW&HoP~zII?%F zm)w)REbc_;+)FR)Mbs@&B?h+N3}YVDo~I z=!ZG~Bz}?=Uj*KF(GpocC3CWZ{s%Q|9p+sWL)Tv_G8~XnILF*-t3lwy6ni9XscR(t zV`LCRmunb6jQJk$f1($G4Y7>(m?j7T+*G8g{ZBb$WMr&JwsA9&(+;gFltMMbJ)9oV zl>D(`aNDGrPL!rKubXq@Z`K!I|AZ8Opm7Qmwohz+el z4p0fuzl(3=J=wIXA3xq!%vTleh*cCn4@Hrx&6}sz0FSQQZdu=qKX#&OjnqwEWh*sR zf89?@Rpi5Ln9`}xKV;AffN*FDIr<2VIwZG67;-VD)Rqg&Z{EFB+Qgt9BKDPtkec?G zyAnyBef(%{uUceoJQ&ElH!=BDBPk?+ilb5S{2WY??(?QzJx(F`P-i^}OxDjZXZ81Q z05qNF>CcG*eBg1uZ)p29JM90}`nimf&SSdcE;Pszc@%!sQl=ug)&9!bH5jlbyPc_N zF}pw7=Jn8mp0o2~s9ov|JtiQ@?O}fqC51&adNiG;l~%ueBySWDSUbd!O-s)B+|4xi zQY}Bxof~R^e7x^tZmS2>Hof=$Z{%atK@Z`54GuccMRI03EvDz!cpWj(eZ0%}R@(`{ zzd?*~=8DRltrBopjrG!_?e1S~zrN`=Tw6<|YstmsLqyLZ;{NH!JK_(9&3kfyu>CPv zR)dAA2efu&G+8y+e`70%$7PJ7*U3DU|8Pf6RUD4qc@53h%9OY4d_m57D(4!&=2#kM zufZSV6V`eVcOb&zSrrRA;J~FMM;Ps+UgUw; zT$;fgZxt`f_k4(aWV~6T1I%zJ=w9kuk(h0CvqV+&&#UuZwsH0qDt$_t)um%qeBL_i zH_d){8fvU!s-UPCCc1ZW#*|gQwTtg3ik=QJti3PK)K@8k)~?d<5zyxscx@ z$}QJxbOOn5r!M<}wqT}sAF!Lh`&1^=-_|FG=~&h7+o?Wn7<>}@-8abW^$dlm@b51X zr(!V){k_hHsWBqp-l;YlDTq~iwcYym&6^^DQtO>L-aI)zZnpKsR zGmT@!dW5^Wx-5Gp!hVytx&ZSIxqq|6^FO=F|9%a)tE6=Pe6NBprW6VF1f#ANC*Z~= zk?7`xjILfEcA6evYfNlc3z|%3VZ>NfE6<5}b18;yyBIRufi>Jo? zGFOcXm=0H*X6*RER73*F#J5u3sZ+(H%Z2rs#AaiRB`ka#b55-(lrjJH#|)#$8By1- z{MAbPh;qhR#&gXGLhOeR53Q@`&*m*V<8zXV{3O)3eh(3dYR3$<%dEcfwb}q&dR@SCTrUEtV$1?D@iE8j+aD@EkCB zd+6(1M%-Ley4|VwHW8JbFIO*C2TctP^7+TUL|Xxp9aEMhdK$Bs>8b8Lb>FBT&%#N@ zJVEBz^;J-XfuXFQmoE<`JFhg6nc7=X>FV$I=#EWeWY^=%2l;r|?9&hPDT6NYvrp+C ze~W#M&zbPWKH2zCWbY*T9)uSq^^RJ6!BQeaGa!kKm}VH_ePt7-=68B}%g)Hc8#;dT z-2dXyU3kmnv6yzXADiesxa19&<92VRo%)RvX)1jcdVER$!XN9S#VB%McuWkV``e67 zsgOcIURwV|^^-6MoG*Y5?wf>!{9hsd*S8Du4<0Gll!*CY*H6|*xWfRCYqo5j3CCnJ;)>j_u5ixb!?$3LdsBZ@l z!Okt^!Bi~NZ}^4^o9Fl(kN(cte-Rjgp%XrAV_*nBeM7p7ii?x~C=0&IUy0dLw8oYiCozjfzeW0&UVb8gK_s}9me}=Ozw=?-BjC^c|{6@_z z@P+T*f982K*TF|~KxBY!efsU6-cSz&03afs8Y4DVCP(vH5((?Q zY5A?*HGk;NpkFVnk_UvV&O6fKT;6<3!yy{n&wc7rGzvCKnN7|=$3zb{sz&dL8Igg{ z`i8^#r}kwPHAwF;npykjM3%o+n+CrF-L(TjHnc%wm@_$qTV_a{XPulj60v7kBK^>e zEhT_SD>QqpLIC{(My7Z^K|*lZ07QPnOvnd3W2!z}kB3nhELlXj9%r*BQmZ@Z1a$v? zy0&6eN1jFH&VLX%QP&L?Em-Rm@ps_GBA5X62jQaxgLo_1G4D4BDzXM3qp?w=1xZ|zwFlvliYcX?G-e>6e z493P>2k8#;yTpWqNAmL5h)Iam{roPci8#H9Uikq`GUS+9SyTGbMTwJc*Vr}v5sfbGS-*v*rx#|J zR2p+|>F$8vseUED3Q5&Z;{Z;UfY7ZnTBNnqZH7s>f?{9*<17_mV3YwQ?tpvp5OnM{ zpFAlFjS3IX0#gbU9zM)q2@8`fvyOZ7=#}+&*^=w<3shi1J%68HpV{~Bl+@B$@Ipqbz*?7RlyHPOcV!v|Q1uN-%-4aaQKfI02TwoTed6y~8ecK@=Q+UVA(32)#^*?vTptIp+sRqh7NmYd4uy}ixH_GWQa3<-4glJcwb z6~;ntn*-6wymlYuxi2H;n>>aAA1>GT_IX;zg~&k82Ya-Edo7m@Tn8~+ofbcZlVfjQ z*pR{-ow&EA6OHc|BinuH4lTMJE!Pa#y3}3^7)J6?ZJVf!EjDa#}pwVcema-gQJpfawC7NaYAr>)F@R<5*jfXqpmEnDm@l&)OHB9th+{{37aIV_7 zLQPv_QL(3goxCN7xwAtqG`G*s6K{!9+$P7CD|nXa>9@dOpJpgHWiWCv>Hmuof(>O- zweam-^Y$kyd*?W66*NxGXI^&p%OgGcT(XW0M6hbZ^9rDV@O!#8Npv*4K1gi9nf)n> zd=Cg`r)8)8=NI@ZMVr1p03H(sK;gej=Dss0C4O+CoG3X$l7msNuhwv)V^3VGWn z9yu(9@h?+fR_?1(3MWi*K2Uv{TJf&pr+_F>c~t z8kW=GPK$6|xE44;E$L5s75%r4RRvuB9+GH(xpVxvw{$~Z7>JhAw$!RbiIsNz=+as! z%2Q?KO=wOfE(|VCCS#}vrfMh+K3&qc8|J{e--p7$R|^lEy{P&UK!-&+Gt>aPmj&5^ zpzvH+v3lVnG&jrnXcSZf2FZV~0Y25aSfor=Ghe!ouZrOP-sUsJv1h$Bg-(|B7vhBfYpvHKvgnk;I8jAIg}f1e zrwxNA<|+83e{DRl->~4XE-q#H{1w_E1iPS=^?O+ZQDj}IZ!{*?3>m?06W3Gg zmv~69@O(Y}Add>k@hlokC8{CGhCmWezw@YY|y z=l8c*mo6uLF-kU&3ubo<`8L-PZV=eGx=&y2tewfN|Jlwcabr%66n3%!Y$OTq@!PC{n!!(G`BT0ED8q`8c5N-!*tY&)-dEnDv^i$ zTptIw?rUSaQ2wYIH_MNkp9R`Pk3hC@ql1rng-@Q~b&qPLzf^fvmP?QH(@ZD2^#@3h z09-g^hLHY0hD*N>U|S3-?V`6;`Xv&;PeA2X-R;pbO|(xz4#!$KPw!T^6fbXI#9$(c z>@>ZP#sU^)e#=<$cPbnScH8}1zsC{%{!jmjr)>)8pk-Df!arokTAGpi{+)hdgd?fJ zQpsS??(c=+>~Sl1y)T$WL1L6Ndjuh3bHiF;j7gXTQh?mh7h7-N77r`)ALo0yZG`fc z=pSK#t6igQor~KEbm9y9-NwVEZkU^ad1dU`AX;)W``q-t=K^^>&M{OMaV~?~k^nH9 z4Au%f*-U6f>O{S#U+a0`y*FO*53)Hlm{~r-6VDCPMm~R4P~5ld=TwDxlH~k31{RsLbOEaJ8JcmuBCzB#TNV+CyRns+L%p&IgRGcqJ;!HJV6{cE%Gy z&rm)nDCltEGi0#U_x9z|SuirQmSr{t4Gi=k|0Wc4zAz*$Y5 zOMJ}WN3&O!6kiPfzVq>=QClPHRnViqFz5>u;tT!$>DjLzG=7KzMMYM1tMt&cZ^Eig zOc&|bz8{B;WIRR#z7qunP`_dHIX?Phi%N$`SYix&IYE~svhm|v9dOC!M69kD@u|7H z*V;qHg{Snrt{HePU^Hs{mKd%dXJ0`_lg|Jnhk3l0T@BHiUhl#X{0DrIC{BgHC8cV~ zucz{7L4R*Z8fmQ6(2L1+o}3BVD$BF`N@YWU&dzZbC{_y?@qLbzb-wIn-kmf**Z2;d zyAFzn%VVYFG3S(`dj@n7gP$QBI8!?&SwK6GkOI@FHdpREYCcDV)Yy#MuN9p7`rqT0 zO4S(Y(WziwS*q21O%qm^be#6XW7Eu(A>Y1a;S$$?8Chc5kcgKz7X0Xo?ilb5H^all z{!{I=gT>{K#18m3!2Yanjb%}bDf~^B>OtwS+-GFn;)oi?t?@3~&B<%V%(slC?%0Ie8;UyF$>}#{g zEMnh%#$$(OeWWt`-7;V!ti>mlC-CPkeY!eKW|VqA7SuTr*C&;!#(eg2Ri9Upo6K-~ zW(dfkEKr0toiq*%#&Wq^#QL53QUQ?nq}JYofRBa4AvyC5-_?x>NPlg#LqV8TO(h(Mi4hn4_EVCq+GPpa_#@}7 zzFxp$*shZo{n6$QcP5nfa%(2d8p)NZ&(pftQI)j;#3qa1c?~Ja_DEcT$<~kzDQ^}^ zA@bo>lBT}CZ9y0C`f;L|wlJr{|4dG189)PSAV+*PwBG?D4&?)~gdV!^*F&I1L1C{& zYjkh@dI&P83L^GOz#4UZ{Xfr*uC0G~FFoh)1Ci@qF@GKeYI=NFHQ`z@ zr}m>Xq4%9GKxvucWjH;~x{?_G27Q?9r_OK!;#mD#W(dhj6)2?=D7PtaVVv$wn>VZvJl^WwJ+E>Fwxl=DPpGq)weN;5 zx&&fVw%^%G$uyr0J3odrWQfMezp!&7%~vw<1oEJu_nPb zN{<G%IYopX?qcQmFe@?-l zSV{yU^%WVagI~(gKpa$3z4XvD%^V9o1yF{13nrj`)#zjb90nau-^wMQhJ>-A=Bc>tTorQtd0dfZ;rAa#EnW<8FuhmBuUHTuds74w zqOEsd-)S}+ULVf~m4Z63i84^B^X|8w0#ifHs01E7|JW;DfvRj?XrZu%QTkVne}#B7 zWpFkgP+#u(Wx<2LjtUY-^pQu;C24MfIv`E912Jo_l37-l7pluw+Lg;mN_mVPJN!)Fd3A=ATaQG^H0FILXStoXp zUVgOa1$Yt>SN7;_QGu5)gbe3@E;C6`;=FPE6mmiLBIBaG*z01Edl_V;Qu?liW8df= zp{V^Ns?R(gYpo)Go4s4E^g)4iR(!!MB+Kcu9Y5-pUwf*}*MbPPNvo|J$IJ8w@Jw<0 z^t+Z6hc+-QgkAYe+QBLqj1{5URVUh__6Gpsivg)vnu2S(mx$4_Xok=kCWr%GU_Xi* ze;JAq55-{Rn^Vha9U{oVP-}eg=w;{&I&@mJn^+m>4{5G#iB~74P0voZ%oa~7`V~Vq zx%)-94|+Vdzbv`?SDSviGi-Gwz`@qmV0|zXJ{h+f|& z&czkGejk7@pC#@dtIEpJm-bz_MTeQt4$T|bU4c+V{QXx%{B_gq9?r;;4OQti~<-oA$2WPH3i zS$#NebakzGkI-r!a^9&s<7u^f5Z9J&UoHy6^GpB@D@FDvcLvf*^#M;%^J3eY_cbU&Sf~ zlj+q_$Pz)iTlTt!HI;ftAmS~fYEDm&Qev3%)j&j}uI<81OCE%M|G~{5RhpLunp*>z zS9tA5zHolsoM?Cpq*d|_o5AQ5sEpw$DfoQTW(=?Y!X{qKqVk10VhOQdd4)_ANHb*Y zWVopP@v+P@#UW7b&GOH8*pIIFB2Hf$#_P0x#D~q#?els0cTB%|I?uEw>U})a9^+0r z8vpLpqa8MyRbt`DwLhCi$Sf=@SDxHV06TfUe$DGR2|+|ck~huhp_0lI)OvdVanZ{6 zHA8t(=}oXp*MdkxLidmDQVNxl?q~U!X6pr&@&F5)eEYcvv9#{9J;S{4sJ7OQVx+%_rarNtWwojK5jS9yJ`}UUoh2`E`y_|8MAa7qw3V;{7Z#}6} z6mqFVu$JG*_TE{OruG$()LJRK2b#TJfY3J^^lq$Fuj%8Kx7y@oe>hKrphSI%<7jK` z{27#g?Zed_QeP(ARwvo7Zy4e^zLU$=?0Cj>)jdVIm&HZh?e8fv@i@4#N zY2mkI(w?#8AUAng$H&4-8Iv)GEQjg|ME7^E4B?wjVD`z~kH&Nsm_9UU(pGl&{g`=_ zChTw--e_u}<~&RYI|yKa`#cCjm=Gx*#O)78@RSVTxF5x1fp%`S`L&T&->Zp}yEql5 zp9DAp8#PG;F!8A9w%(PN8a46+x!;$ln2p((j;`|#H(UaoYn_R3{cPa!uAs0kPq0AH z=+Z5cF7JJkC+~K_jCK)f&Tp|xFD4dkQuO&@?XjG_AqQY(&N>p}+lh3c_8`6`*r`{O z@4^1my1$nKOAEXovff4O@birTHB>MtC?VRvem4Ms7cScRoBk&nyv!nx*u9qAlKhv3 z#vO7swi^_iR}<+cB#{#nLNz>Q0eY2ukazrGu$cYE7-a3M7`$Q489=Bjsua}6Fjfw@ zC1oaV8^pl9g($M!yPr-<%h;1XkHJOH~-HQb|dMjAuI_q zK&jr%t;r^xaxyV-RL!AEGl=^;+5fAmKYjHg>Ty*+gr}Mrv~u()t|Ml> zOcMKs+_E@jqw;{1=_=rL62K04D8s!on@EG3n02w=2;Gb1DRJa4tLC^9gb;yKiN0at zoy^hmy7;GvvO*1bFr`s2WGc z#ej?T-|heN_WfB|3QHaSEIYvuZliAF=o{V$X{UTBp0`Kz+b-0r?JuAU{nM+GpK&PAEU8-roS*>Z$;>f==7HnWMhlOgckTU zdU<-js|oV~17L}qCMN|)vT`+gI9T2-gbhIT8Kvv^)-}#YTm&7v^NxmaEu0&)Hr!o{ zo?h{t%ojo3ibdL`$&T^HFHgyMO$yvLgf&xGYAl~Knps#VI_)&W6Ap=v)=Lb!6WFDv z4;mV3e9jcqmp^UK`s4eDi-@0^<8~*o#o3<8S+DokSUO?Py6fS9QG5*8>7PDAM&=6S zxdnSRs*kO9LB?}9{7E_PLwbF7^JSOw<1G{R)2DNNv2{@qP0>_758&vqf`W%(T1rRj zBGN*qGm!O-34N1+>MI40tMgn(wcby*D)mv0ZI3CS=bk6Hg`yGbe zG6iwHKy&R;Ru67^UGsKxiLaf_xa06L`x{3i`*s-^6xo_W#@`smpBQa{DXO|Lj(n(k zsFFp?*+SD4R=t>V$JX3eWPkV7NRGUzy2t8(abtdj*Q_+dbtnoNcD8vHs^)%fj9Wu>JDKD@fRHjw#BJ9&~0Qxf^n2(xvg$%mk6x7w-qTe3}A zrbYVgf+F2USLV{k)!Iwd8UYa(goK1z%zM4U^=q3iNB^~;dpoRB>vSozrtbW3OBLQ;fgOGz`(Cmn(#$sNh9Vl_;y;T`utL+3u zeukcVW>4OGMRnz~6D5E)Oo+bW9{gsJR&kzw4&n-?JlgYxr{}l z^j%LD*IHEv4>rH@?>il?a(!1dOpFn%&L74d=Z}jx+@+uO_50|xU(jEuOumA7!@u(U z73`3*jf%!uKXS2e*EM<@_C19zlA8ZXAcf!?2@enLdHN3+$SW{$c9Z%KL7VejPO#Ik zx07(?kUN!)EEyTQ%jD&QrZHk{MfDl*c%6_iXPQW(y8K6Lk8UiqHl4g~s`Nj5PPm6F z_@g~-0OBy>s5m@rxwXDz`zpNX(c82pzih*n^MP`xZERD9$K3gg)-!V|We8tTGLQY8 z3ueWHL7Q?YbJujOJrQ15gX03)tWUAaA~pefy91~=PskNq{}+U$m5^yn(m&|+jLsVj zgR@FGPVRlKE6Og)gLfEl1~F*+9_BL$CF*0Vi(l|5sh?$xc4ZFOeARFByoN&XgwX&y)Q6qr4U8OmE`L4h$fn=7D9`A(}pzG%gs`j4^rOLKh*W36WD1>dpJp$ zi6n0~%(agZrE`X*i4Gzv?L}oKzc49fij!8?Im{=J@!39jZ#@=w>S*4z*syYS7$jnG z95F$Nw|676mwQvf!~|TH+C@%Z3B}pmUx%7nUZAhYqGe@X{ltCcd>H&|sQISqE*>8* zBkZxAg(prSFL(dGzDa$%UZ#I%_~1yT>D9(k8MM);C}2`kOnAbK*AhhlNUMDX$To=@ zr$uu!4TB~DEO>RbOMy)H*de^C6LrZl+yG7pd46z6u7R*0NjbzLX~6#mA3nJ$$rk2Nsp9)O0_6?Br>|HaFUAAQ0j#ysSC;A1@Z z(v#sHqFJUM$#*p|*&96LP7O(kL8~wEEpmo$QYv!fzc$*p@!fP|t-D?`044Q)<16C* z1`fj&AKWJ{mQL;*tZy>)ww_&gpK9Wd%2R<5s{vp>F)Gez@iInKA6zQqULe9?YAiqd zbG6m9!w(96JBxbn#->_C84g3H zI8;~Ma-fg5$YiNn1O3nNU;UoX;MO5-uK1#hhECF~m@pTAZko&Tnr`A6c# z6C*H0>1bm-TTJ!%4HZ6o?+a&m%kk@t`yn@;OEix0S#@a&Ino%gr9g2-GyShw;U5nh ze_?RfJ|Ag_QwuJhDq4(V=)9y*7rn(dWS6UAfvppUg#{-T*mS_uTb(bTRvyWpj=K5o zDvUiZa#8Sdz%#~7|D^k7mc8p*BQ=EwXwC8R$m8>!k*rR;BFeVXngb6drfcw~yLTS} zat`{-p2Z{{yD3*iDEb*EwjYzn87ZaJb9a?7x!a zKq~OQltb_9UoF)KzrfEioJmX+-knZK^%&T!Dn%sjgBPrYxNfuZmSK(g(CBxhycJU}US=QTDV!=ES9`g?O(6FJFEHpLzB?dDtCE2xNDQ8fs^pXFaC z>QBn;N8i?p_ug4IqH5^vtjPrrw+ufv_m{UvPS0K~W7?-RJPy?i6i^27DqbImLp=O1 z)EgII!8PVvLf^-2un!6hni6;}V(D)OC1Jj|nGT+sb7O?Jp5rA8Zlt_eGGRNkkVMr(+#08mk)Tl5*w8M`SwAA@8-N{^@dIbwPaPd< zT7b;=&=qPS{n+Xd zq|Gh6%^DN^7;|-X)~sPG@lH?9b3bqnyj8t(?POjqS}niNAa|d#t}e&P6v?_?Z+z#_ zsP-9c=ch4(O8PlusCln@%R)F#pT9m-w!>)Tnn{J+7`NE5L&wqN10?_6{{6r z7BIfJ1wxz)SG*n6Ha{_>RpoOGH43I5jI`2_P9p}LlPEgR{Hbv@FPKrBC&c5VCG?JR z2_1yXo^VI)r2lSwN z1btuFBr`R1-kF!8sqM6{+9x*_4)uJH%%SVB5@H`T4p3w`O7y|T^WN%W-{=@4REAq= zmOcqG^qI?ayZDwJ%R!EQ?!s2xy4{dZI9k5)ZYAK*^-1lfclF)N#VaXF(Bm%rLS#Qw zDeo;K^4b^O5WHMPxB?80W(&8!bS7koU3W! z@z@rrHZS;z%0N+Uw4H~8wEtaWJs?0~G6atwD*bekdC*o1qHf*R5KSd2tAnoWg7CXC zX$7(D@B9%#!kO8tJ#JzJ76a>hY9*bUWNs$U`a008G?-{dqmI8Uh zLwz4{JDAdU)nHVP_c*_5^`UI=;Yhr?k>B0#C=8+3!G=BTkT97y_v_o%n{G1$gdYxi zZ@Sy6YK1K|RQPT;pLNJAUwru@ppdVU_GS}#o$Mj}{3srj>M*0LK&;JMV-Lsd>W9)a ztpRL0r@7fj{kU$BMl9W236kaYu#MaSK@E`kEV8a)!Llcnk=7%j1in6k);!AZ1RhW6 zntZ5pSxvTCj}QW5H>c}t6pefkVXF{m-kEnGRQqh|pnYCnryK?#HXTw^^D122Je3p) zz)Y+US>^Fw{W$MWO>pET3$#%4JxLPd{I)c~OG;pb`_)q2hGf4!lpW?S-89h) z>L(J&tZN2^vhSG+`)u1UF@O0HVi1TRA1gN%uIG3A>ONJoW=pz@VDZmy+Q~aRfNB}k zFJHb0JJcC>G0f27HNoKMaPZdAvtoo}Zx$XiMnf{BLT*%2cCHNIiI)rqZzQnll(B`) zIy~dY-env`cDkESRxHSY{>}~11L0S`C2lxs|4(hDU!ayLf=k8|N>;6W!+P9()5|YV zl=kUHzqp3;zNI3XR|9A9O1SNukJ8yUQcq+`DjVr+`g^t{%5JYFXz z%GL4NFq5uLH&io;iK)azMTWi28z9{*WW4x>wkw0POcvC58Wo7}BFAJR-$9t-iNbX8 ziZm~x_|9y5ep2tsyu9pfRShk=Nha$gf6P(8J-ee}f>u$NxUI-}+qeNDnXg&v5e`pxAzKbxG$C!fGVNQvoG4)KAP}$yU`@4=18n~x+ih~ZIPR8XF zMzz#iV{hF-Pm1F^#U&IteTk*STyn?S&l#< zF+7_lRP5tyJW(;e7G>Q2BTGOhwCv#pUH!f%{Ak>A6$mH|ZzV2PO{lD2!4#7Ml#Dk9 z8~|EJ4gph3+AUaF=?~L=#u1MlM17Hh>MCfGGADCe@XZc4R4)W6BklwO+2w#g;vlt1 z+z7`5szrf7QTw}VT zq8|K{$?*a3c>V7&nO^_zA}T-)6_nsQQU3l#GY^N^7C+7?PqFcj{FItFp zdo~!q(4m=crbyD*!ui4@hX{7C?{nO70(!Vhd21kHTfvoM^q2RjZI!CSd%W7uDtf#B z;VNXLTDax@A;WBCJ+~;FQ=xf>Rvj`>!W@OP=CR^`f`1v~Q_o`;l!Nvds1Q!TNH;_8 zBeP+5n=wQiANK$xgwe&eOB#VRHSuQ+0s2m#o=Q_$^PZ(QiBW^{`scpU-rJg zi?0{sAj0cpaO0=4(zzTmw zt8Ym9Ge*3wXeNf)$RN7M@`k64?DN9z>(@9pSWSE$U7m?+%`@*|dr+5TL27DvVCH2<`ShW|zpS>eg1hAW z5}xv3l*Mo!u;g1U%_!C8Rq9m*W8*T_GoG$g95^YPzLNf>pkK*V#xBTcjZSS|T;D|b zl=qM40PIDi8#O0X3U5x8*Jf;Bw#TnKp>$+r?XroaeyGTLw<>dsc2v58ESGA>Q($esH8B^B@4n#}vV9GcM1yH7!^^-UNDz-|)meW1etV`UmYV z$slLGNt$z5F3SaB6I&|nlcHezLN=s;%Q4#?BUGHb0t=?eyCfcewi8=XM^g6kNuEM#yB3{IzPIpvpGCSf zKwf!tjDMTg$Y1qGrsO@j+9Dy6v$N!uyvi*4QZo}gW@Ho}Ef0?ZGlo{T4gVaAtD>q+?iXyI{7+i&Ec^Hm zIvjDoFRrC|%w>5Um1&noP_$7O?CoaHS|R;*sO{-af~rw7ouVc){zsnZCG?koaOsb0 zePyuWu7Z{(kNUf!*KH&hB1I}5LL6z#k3%1!D)8KOP3Pig2yoZ{BP?NRW-^@5eo9F( zQII#YNaU4fMezV~&U-sAq3-?DaS>EbWpkm@UNis=kL>VUI0RxuH;4C8NnsxxLfveqn0NhhGPu9IyAhnJ= zq9OM!FYLyk1H)H8Yw}Ydc9NN!a9?>Cl=)-<5vrNhWfC z2Wm=sOv%r#yA|Rf(#B7-`+4tEg>hC23Q02lD6M`Yc<*r7ce0lv8fVo7u5NzlpW?)gV=_htq^BhUW+ zJ}9R`b-%jSo?zETXXp7x8`sT)CfH8IMTE|E2<9rB$#RVo4NuGwveYXTZz{Q2o^u(@ z7r%s#o!B=x|b!|nveS)%DK;JXbzF+_N+&f zcI#qL>wePze5Q+Uh)t;3UL+0K}q}3SbTKa>Cu+}C9Ofuw~Q&zfe^b*t_jA_CvvpZOR)GAT8KJ%X9 zY|du^6hh6q|4p1W$9SYKGRBkv-fVB_H>8ae=(o9nsI`_Q3#kO6+d(*IuIuyuw%ojW{?R57`6BIW znH#gVgwgu$;;#&%Z@IVVwML+gH;L*IH*<_V%tf69-Hg!_9x3yfUf;35XmvcF zx?kL}gTpQP>FCtgxaU&|CX}-W>-PBKNe~x#H5np}5z%@t`p$*96WGZ*6-l`kuZ9G4fdi~sQ z-)Z4H#<4H_cEjqj?VE_KDS(A&eSV{7wAzpCecS47&MDLy#tBVV%QmOfa`7j^Jls)q zD=Pv>c$$ROIpR<*(eT7rC)0n%ZTt~1jbGiJm$RJFL5#noIy=vBWtS?9clH_o?AK)k z<0|qJ^4^ znz&z}t@k7iE6bd7ZGJQX$`mjlk%JmEUUG63HGX83_5(1qh2YHP5~O)9`3a*y$3}m1 zWpXXt{36qJ#(QgZnLI74B6G(f!>!QYyJPT%Boa)@)TpzMDcqlHuptGxzvR+EP8(-3 zqMHMZ$Vi@|r>B2)DvPFL-h(FZIeWXZBG4R1Ary7{8gnubOlHqk?O1re3wtWwlO7bbilBmVj zN`dRK>;8q0_}u1_ul43ZS_`uE+qixMmbREmRj-L+{NV*RQy?PyS)jmgDc_500o|@M zvUuM=tT4S@a@Ht?Q@Cw{7IM~=CW_3X6PX0poeYBsgI;jm>G-HdKsigwug{T=J+`7Z zDECW~ZBUuc&w5v`OG0?&tO~E3+Po}( zDm|~ryX7;G~xUfUEr@mEWXxt^`XP5nmg8KmjK zR%5?QM9}9L%E9Qe;+2UO2H_PnhL%%GGm5%a;X2Ad#5}v6tliX1Ve-a4F)PT(snyOz zn6FdZdm(ndsi8%PP|VfYVYHkRVH|fd{rqTWu0_+SS*;ww>$*9?wH9{i9O+6t#f)(w zf;gUb$lrnLE$@$To6UR-!dcyprhHy6kl=elDS9~2p4AhzH1980s#m9d_QvZ-d#SXj zM)zA*Ku)@-ObuX;A><4I{~||htbG1y28?#2cZ3&wn0P& zvc}SEy!ZX;_}_Jn^tNzwfE3$;QI1M1MS(msP~%7U(bSW&AS2d`)$Ay;%Gx1!sv~$DSuQ}j&(xS1ggKWE3gv=gjf16Fl5`0 zj%sX5an&gJ8vG3NR&@ItQ0KyEj`6?_jG>Y*qIAXfl+OotCuHG%rluQ@VyONf+TH>x z>aA}ZRzxWgPy`W>R7yZe>5}f276Ae2E&(Y~Ksp4Zq`O-}P(YCGZWy|2VBplRSNE$u zqZ7=Ds7#bcdA8`xW~TH{6App67lF097F?(mL%)WXtOFoGGQ07+-fK) zx_-%K(+g?49F>*>jJN8krG{@nq;1zkr&axlfG&o^W_7t>SPE34?lR2WR~#uFcM<0b zQD-HWxf+QLLe0=n?4ilY2lxTpo5EGq*;~z|iy+ z;|b?U{O16L&g&cTF#?(o`iDmEfdkk#hE;=P;Gq|QpA@!36lpO>-dvK!q4U!6J5(r4 zB@(sr2|R0eUbwc{W1U{=$p@!?viVtZ!Yx(^r&{gnS8~!}2LB%X5d_G<$j#3t+4JD> zi_xcd#NYCP63`XpXbk{@RKCJvUx~&{*dc=ZOG1%rbp60OS3lyNooZM^!zI7R2EZ|y zddBlgG}Z&I#m%pA9j`&RSNSuD{!#V13kv`0o>wbkD?m#pL-Hr^$G#P8d*TcVo(Hd* zUs#)v17ZnMA-_*puUbmLy(B@8j%O?%jD!b_s2|U4CR%p34tly@K%PUN0c5@mn)Ry! z5LYK~|C#iBrJ*?Jt$U)EPF-9_IiLa=XWr0!726RS?p*rGWym0hZPzm{zawr(t}Z>^ z?%8r`cQRgs3duul1AakSLQEVm{J=ZiW=^q9#P}dmDvmoF^zDFx_x*-$UuV;xXS(z1 z@or{WDMj1z6~>`$(wh3x9Ma}TSGcxe=tXopW_rargvz-$KRD+ShWS#H^}3!FhLl;A z+6|EsPG&?yARCR9>0RQIlF1yyBgvZ%asyk9rgFy?--az^VW7gJQE~8U?ao<=-((v(Vc3jsxNTOIwqE?>?wRw6XE)FDkqyYl$csP*>CON`OaK|!3G8JbX z$sM|{+<|lRTJc}La4On%HHv)qR#en`g9h-Dg#Gl9MsQ4wKm@(kjrFv?3VOv1Y(P%p zGvOOS*IE9_3LqCDL^b8(1TF5ixb|c;T)L+3{5;BOGMZuak&OC^vvm(W!>9zX^kVoO zkEAYD5QFv`H6W~NRGR{Vd~_OE?K@9$RmvPX%T`DrhS8xX)a=pR z8wejmhB*kS=AXoJIT`dW7Q0E}RGmQ#$jv799s0v+S(rwm>GQx(`{08+61Mlg-{0jj z@z1VKrERHBwQ-qysL1Zu9E!4K|9CM}JU+ZQcB@Q7)&QgpWuFQDJe`hr7bd3P%Qh`{2!pg78y7cpanPZ$zKBRAS3Ut&mnL7i4yao)6>@^2J{z!D7R$rjM2_ zfo{UYzzY`#JWNcj8Z+5Dg)LB3@3F%vf=aXX;2o4}kGhW6&{~~6_6hV3df)7M=_$~; z*=v;%Z!~Ey)zA+(Hyv@`J;*y5$K7`($qgHf^eD#@GJL>a;f#N%Ocq{@k7U($%2bpohyls?& z7wAcE??JR)#I3c(6mG_NiPHJJ0?j5x4(n^y3dM4hs9`Vfx_2duciuj}`|@O7t0`5r zcqt?5P_?Ya2=`UrvXYp}CZWk#@S>3&cWG&1M~&bXqS$g*WC?sm0+)WnA*cDqG51kK zQ5(P~f#Wnq@@E4QRp!H|DyB1A!2V__xjCGcMp?{tuW1dS3d!%U21BbPW z4Yx|Z*SDdirmZZ62EAg}fwAMg46=g6BJi|^Cj@PET&x_SDR2UoDJDBej4T2Q{_#XrjD5P~A9lAv*+i=)C-Y_HFrcr!Z zcVcez)hA6=mQ_A;h@Oh`d*jj4&w!%YfwCz^?Vs4E^X9b_2!n(A19Qu4+&gX!e-)g5 z{m6~E?$I&s-Dxt^b44_pR6!f3>&wwcH$LTSrme3fKV$cTd75i(TXUblDJa*{q_Ao_2Rb9ONy&sZ0gL zq(r+mHO@sy_?TNFj7C|hSEEIi zUK_~2az77UU}m}si%j>{sW2d;0f$rDG=QLta@kYiQb@G;6~sV z8Y2x#q}#SlsIY_UWd=NSbg@#5la{Kgcfoa0KJUvJNl8hcRX*|Y&uJQ3VIC!@)zJEy zv!wuO-wOG*Pc|f5F47p1=YOv~AqlrSwQzn@ql@VHHCn}dj$`o2sH~d7kGsd$I(haV zAfQoLCtJ$;yA-x-#2+5g^{pt^Af@&LzzF~(PzwyU5bC@Je|%vNq$QsB37`(RJzvcf z!9r_R<56NZE>&r}8gGJLj5esqTH7`HQ=dQ{>liczMl1~K$0h`k z@yPbl9!D zA2vH8DD7rgkfZs=^GvLzRf}v4QDCU*vl)5uDHdauG>VUYYBj$GJ7^o^aj-j{u

Yx{nfoi8V2#dLFPN+l;P4?Az=!H> zdEgE1;>sQ`Mq>D)UmmhM=}XpZ3-mo|^fwUi@69AHFKcq0$m=q@!ooaFw_w$cpd2Hol*liS!0e8Jm4rHRheuH$eqq-`Co7RMg*|h8F ztgoM6(oY@XbnAsK>Y6W9waj2{vSwu{J);u*uZo%XrVGA)2em0I*5+pPP{6Pz%$NoW zQ0n(%g#C{~$6hbdhS76!eqy(U#BYMpFC;?l*Ux6RQr1D?N+jB($t2{g8Lr&GaaR!1 zKF@8?LHzjIIQdL;xs@Q^X{3n=za8akyx-&BPZ+%ChxZcfYBIYb!@_VA85kH0j@<=! zW0?xzv-57GaGnU#lK7AQTFCpP+w&+rwBx}!*#ohk>zDHIC12Z1cxb)6RVHOgADdFI z&)VJQYHq@89@@zW?=HfI-!F>WYV$qoukSqjk>B$TAW%yvzY&z~5SN0)sOU*8vF5$2 zCQbxK)O#eu9$29TT_y1k;rn8a8{2WRGFeY9Ilo>ijM;C5vzzdxRIE+!Yn`C=jL2K{ zheeG2)qtGz*8FTcD2T)bQ04r%s~L40%O4wkx`^=+hBf|Vi5y3Gg*xeH<0N~Iv`m=- zvdd;buIYdrKzqoxHxHM-Gp$LK`Ea{bg(>v)y^lxGIZHuiir?1~JpOX45*bG1`UPJy zmMQ&tcw6`F-GsRodg0Ej!NP@Fw<|sA@)XeJ?jX=~#;h;nwzHI5(`7gm zCd0Chj_mMZ*q3b|`Rqn}h44rR#S%_F4Hg0@l9Ta~QNK;@wa2y4u(10_(X1v(pohis^j+-EX(spSF(*hMkIs3RwcY7MQLHbHu)fGsob@S@L)hpdKoEdg%;#O+Rou z#Z}zXY1Ll?;mCXl)u=E5^JbB=1jZ#qcR=WJ5!R zPA)K)C6>KvZXiEfg70$lUMiN83YRwSN#GVNu!V{wb~$?4RK)T1Uo zj&T8(tUlzg+XSjZk%oP^Cf@!zmfnS8j_c?E$GTl(Cuy@Xv7{rI8R=}%Vd_ooz4v{ER z_d5RUgH+g`pGW{0G~ih=#mr%*1cdGVtqes+50h`K5B0+EIYL( zw^Tjl4Sp?AtV zhihM-fXi>4xoj%Ng$imq;-rfa52Y>AP*H0hNnUxHWPGROQC6VZVjRhK|NINJT);== z7&2W4GmNtf&L}yt{dDb1zAF90=iD41`$rD$73BppqwxSKJ&R&=9fEz#*IAg2@Lp`d zfQ-k%^T5=ybw@Fdb3avHSt;W~rvtd?oSDI;(JUrMKTLSQz2NY{WJN!v(^ex@V81{@ zd4b_=tj>`q%J$I~Jw(xACG!rUq{lV%n=4jZmXXh0+4Ww&M2!pTJWIKSX2=h4+Afb6 zVpAV|5|xva_CXH7te%deZW5&mefli&D{ zq%LrdlYSLG!u)cnP;(TLiuHlob@Lm|evVQ3MOOfq0bKaSgzqm7>wo5F+^k}&& zkDsZR8GP0E7h3x9p2x2nx_QyXuK?2}md!-bpC(b3{t^YrkE3O5ilX)Njq&r8J^ zY(sPbtwYLka2se>*Jb^gBA42>*Ky3VCkvRYpH?YB=#}AhfVbBj-UC9h`<36=czCp; zx;vCL@6)AVeCrH*zk~m{v--7p&`Hrk_xr*}9HgWK?#`L{qFhd5_{2@HRo&<-4{vmQ znR$GcsU!oK13$=(=+6U;FN3!|kL6w>OQ@kx0UW_7wBO((S8q;$L0of9fjr&@Z-}5q z@9@qdtAXfKzel8t^q-DO#uIKw^UAKdTO}H_*P%OZL<~3TN<>8~&^*vS*Qd@P&?&~F zP|QD|g-O+%Kms_`h+{!$=22Hyry!4R>$W7IoUJKXv*l(JuDzpI)^;DorS+Je=WGYeb1)>x_B_8GdVlha|!DUmtOHL~nR6U&in}rVg?R zLV`>htCV@uB8YS}N}L|UoZf|5BUcv`htRhN@L+!LPE_s9ux=zQ&5VNWPfJ@*&4`Az zi%m9R?O~LZba}I+>dv4r^Szo3OmDTk;Ks9?x$#)t>vs0^R_{Pt2SR= zWk*e38Me2D4#+ep%LV%mxLSyzT6EUXBY{!M7o;17aG3?eEU#D9RxwV4_w~0xrp9Ch z@c(iFQ@mjLPPqj^V19K*rTEqDh?(|SwiXr~uFTCXv}YJ2u5mLhO-=C!XgKMMvhac| z@COgU)?8`9t@3^V_Xk#^fy}23{k#x3`L1;zYUF>MD8zmYHosCuCgG9YEqNJ5%tb!5 zE$%A+^~Y!-a}RobvQC|})U}N|6Ge!$0vK5(#Taib^~Oj9$-r)ay*s}9;ySN&G~Nr{ zQ~IGn`>gC80?AOsA#lH+p3t|w-`bqF0Lh!4n4}>3Nrh&k7S1L*epg{SxuG1MPx9v3 z-5Z`@Hc>WFNFjlr$zpOfM}vcwCx(NaJ!)zoq~)O1TV3RfS)9JKT>s=9CS1>BK7kKz z?jrGzo#-hT_^LOXT3eEPXw!>a>aQga2NMGHgVGu$%fE#PEV)dvs5U+_AWxB>6*$Y_ z!WpEV-)gk~2VtHf+61_;Ipu~1b!aUpw-NL31iWmI&AfR?LoWpGqDi`X+L7Z9@1378 zZ=g(o^ILYP((9fPUSc}JEqWERz<rSMkM^nfAq72Gm_)y(EBBOpxd`Q*c3{)yz-Sl`Ih2NY&Btp8!4} zNU`!;87Zk7RVR}oY+N;;FyPq`s=)O_@Tgsb@CM6b0!sGB#@f$FqB8t`YrSA7FE3}Z znzQaswYG9QsoJw8p+gK0C@QMjUMbyzw_X4pbaV*(gn?K#P@~i6-*t_k*|b0^E~TeO zL2S4(qHJX~t%-HxT|g?R7EG0FPT;#|JtjWnokY_I&Zy!YZd#uM_C7nT*T z+8L_dP_X&@Dw#U1ZUl#44l3NW{#EZqY9zA#&yTveHC>PG*D-NP9_OACs=Te0 zuO``6&Uvu>S%~<-gSU?N?=MsfAE+}jGA>Mf_4vlR8z^|9-qFswnx4>tjnA0Lan!=fb82x=AzMbFO)I>U>XkUej>F{Ty{RB_J>P-yF-{wMba zCJfw8WAkD<)U6UuB;P_7WJYtfd!u{2^o)-TUIPA_6j3z6;%;lz&(jDILUYpJG;1;p z1k0t2xjILP8vf4pCW^;FWyaL*+v(!|(`(cYLoxuZs6Q4CX4OHZPt)g!trlc-&wGa| z=--^yg&of7!dy1PfOi|vlC}0`7lz#8cjd^wW{HA$nQmxp01zj=0>nw9fU!g=OP$K( z#ze%8GYW})H(+pG-n=_cKAlU?B}5-`U^7>$vV{0ur3;i!qt{!O?@oQr34E7%2s*_( zNo7im$-{CnHHsd14W4_PHy@CXw%RQ!tT%!`Fz{3VWm(RDl(`NEiv>;8c;zlx(U`1? zQ0If*rFzIUN%WCxDr)bP&RRV`mNOT)eCW_Z#jJA$vp{QWLtatLm0@z>uZ5#alQQIJ z{M}OR9V$QYiucpyA+PUv_?~!W z9#2$=7#{g>DmjHSK9GdASG`L5?I8C`-rh#uXKg#3pLA(kI zY(CV=)lZ}dtf0Zt|!Uemw!t^^VqXk?_I=ke%DX@=o* zv~w5KYW?sjHUFoSZaEvu@~}D=rIy#!0hq^H3GDehimlGHJ-J!|P|iW$8z;`54bHQg z(aTHEl!k^?AUyG|S{YV~Cg-Crrh4q*I-m=ipH++h*;PkpCEE%nohLM(aL{CLGf654 zZt>P5*Q54cs_;53)L1VBi?ELNh)66lIlbBg8=Cw_r3Q3+;`V~jxhq4FMsTq0n&+{t zCgBXuLj?8xT+XsQqEqrSPk66{fMIbU%_-RV73=aof}?kdq1XV>ax?$4=)YYudCp?b|I{eXG^l20_W#7VR22gyuFD_GVWQ-X?) zU+D(^Y2HFz7Dd=A$+2E)ba|0O z;JxW{LDZa7f`^C48TEMceY_MZ*7q!Qv8f+5HK(j&WYcm6F4b zoT4W>tlFj-?r$0zJ0(H5RCo|6EP{!x4KEw=imn2Gy`?@w(d)`(b1ix0P(DmE56u>g z<7n8??yUBDoJk~e=h`zMcCRr-Il%lNZkS{G6YM>@3MX7|O|?=&-)j{b3+#foN`*ww zV54nW@09oVl$XdXp-SUViKFiTe zKu*UQ?cN(fpu}p3UU@Gh@*&d$v; zxVhfYsIdRRkLG#qJbp>*#hd+@Q?yv(wmr0FIG8Hn%LsR~NEVLVFQ0dfBn?4nggS$O z;iG;YtVXlVN`0=OFj+`PHEnTu;cb(VqDXN4@oE5F)oOhX|B2IDd9> z)#;rhzq_FQs=d%UcZfBMIqOkWc|Az;IdPX{dUcH3io1KByTn=@usA2b>*&8+w4QYnR87NBX90 zsWnpk#3`&^N+$>37q8fdE$r(Z-hfVcNUK+HI!qzL^5^YvdEhDIF|4wwNy(Y95AI6m ze&ZCU|Nh<-#eSdg1K6h(%mfWXi-v33*H(#1HtHb{G(IX6Iz$PJJUWx1H=?Fw+OB-$ zP8uAlNJ0=T){+}LPEac7-njhs!hE8_!qv*>$_Xdp^xVRrcKdk)5N(3G7|j1WC>mg> z^W#jOI#s$}x*Lgx&(L~4blKefFue`(1-e)_l}1*G~4lP`aml8 z{BS>?Imsho;sghAYJ9B8uE}pGI%$BCgwDm4T`Bk2Em%0fYGKnr2&l*K^py8m5$?~j z-LEs`4+l^5KwO`grQay|R>pLf5gu_Ikr3-bT~ft!O`OlzByhF6BxlaDI_DsKvp7C?)uBG{{OW3S(70Gig7Oa1$-fVr8_mjfLHvbPD|9?er};Ko#8;||Lf&!bY+fdQ09e|Z0XnV+r#{U~ zD&Ar`I{n3WF*=7Y2Mw9lEwqyAN5|HHVe$h`>O-3a23YPDYsiEaoy%#)?SI$+USeI~ z7uH@bT=$$aRTWXZ+WN)Vq^}Zb$ECSelGQW=+d=gmHL|R5hWKZJA136>^zUBe8VN4} z0%VRNGjYJ5AUNzYD7A(A5NF})aGGi{wT;sP>qE|cUge6N@aP3^ z8+?P=4Cc#tpndmB*7(h39v4gM*9O6vD-GF9e(g((dF>pWCrHDCP%VL&n|_C?0WhmiK}S;1akD=c2v~1Q9X1wz&Vh?24*#`Srs~m26qca(1{iJcI&ozX%=L z#8z(|u2l|vu%I|%!-k$2%Cj`X->+_UWS4?!P@JwLl#9}o4+(s+WaNo)ZW+Cg;<0*t zBx>$~tj{a2A5fVHz+0n+vx#f(m8Ye4<5Ne?t6u8usV$GB%RKuAT zV#6^Rs_pf&t&{Ns;;7|^gD-y?1w><|X;xihHny)4S7J8miGQq9ZN72X5_H_p2d3L@ zkFJ8GbkHXK#8>PJ^NGJc`S&dYeHQnqJJEIf6Ijh!@D88o2wHg=I&9Y>LP>53;-YpF zYiuDW$ByHz6e$p**-fIs95hFXTtiLEs!6g{D*csm5BS1f<)ML_J%ZnIT9T6u2xK-G z^_QR*S1n0Fo%e{q6_%_S?5;Tcl91fY`FwR{$;Yy%r`va?aC@nfjw*bVgyVG(@3zQyUWgcOE75|_^^jO3JAP= z+mkIZCOkuavc$Wi=6pyx6wIO%1su6sT3IPB;FR(|eTs-qxQXE9?cJS3B@gPY+iytL z#eidbjNKn$u7uZMkgCJhF<4rFw$vJyO%A%3ammg9al5?F;qdTTHRP`*7Gi7o?<Q8oMVkrhuBr}aluRxnwW zSaZUirG`ZD=kEUL0zBd2=IFy{nb6Aj7V^mkIgdt}kcGmC7&@&Js1_yaIQd^CAzOV! z^)66`Z$eyZU*`NYHW869VAX%xqFiQ5o+VL}Hf(2SES;@3Dh2phJ9`!i5!f|OP+_-8 zU1N*&E>{=x)>8tiIBUS$&&YpvU*YLP?8ED~F5lm`{qhRuo*ffBlW)h17w19jY3BuP z#8uJL97H~eOxXJ)v*#~dtEP_+D`eKjxOOtW>{cB^&Efq-5xWtCtvS&wrtzSFR?+kI z|4js}D>^Kw9!ys&AyU_YXr!ybQ1|%ha`Cd?%kXK}zU8wTFH&6^zM40b3l`e5lQxqd z8tK4^SwB$S{_*4D_DH;&T58|I7FR%(8>I6p*#N zI(o2)KhJIl@;CG8jBE}B*_vA(riJz17+r2x4sDkHZ`R@Z{=S`PG^|87T0t;#yTM4uC;gr97m|{5WxF_UGKq19o0S$ZSZJncHD4AXTv)P`9SA(=e zwY@B_I|J+BOt=0I{O7HOLy<>CkiV+h#NXi7VG8Zt_L+4s242{8m>%mU+~B*t;G3ve zno3v79(rq4wUon=ZkM}?O-N{RCs8?HU;3`(!8ntc_;9K+?Ezq7myC>TyuKv+|E(t> z$&8p$(M7=-wGX0?#k6f`L6UJ7MO3 z3qN2Pb>xxPR`MA#3GS2DWOZbqO~nZeys#)#IWpHj(ag6qyPN$iKdLWFW1eMojm+Ed zB(5R)QkjXL*qP4#=hr+A@RhVVfe(pG@3hrpOJb)W5$<#J0O|$nglPtm5pucHk*W;& zA1k3d;x<21H}m>S5^X?-7-zs?rES8?R?}o~TT5rzMhFCu1Z4F1swRLoET(uZA~@r` z$!Ns~96HULMO62=L+L);H=GrJa(k;nPbGitdiTsint8gdMN{i_nwd+zgO7&t_Vh+K7zp^86-c_>;zn28okBkQwK3)qFOj#CpK$PnR z+7l&G34p=3u;`b|j$%#+oW&Kd4;b`fxFx+Yh!RFCPvWnmNq4eYOg-_1f&2~PKfdix zR|Ee&Zxh^fc_dpkHPAB4fTk*O$ty%NdP3J)ua8{oHoujfW(hC%Q>qsP*2KR(P>kij z3EeWj7!8G!_r7e4rIDle5!y2i=s;&xm-as4=AW*Py3<1iVrdq+FNE%5_dNco$?-l0 zX3h1nhP}jT?c|rK<*f|`HZ|oP<^?$5hGP+m*9K?XG@*|W6eMd6nq6cE3xZr$RYnP) z0?r@Ge?ItMYr~dBxQ7fQp`6XV?2C=9joSTyo|K-E0c50EK4ywq^A%6)V$zIItJD-R zQA?Ac!ZMYz`C(9QQ82tvbbm)*^;1F58)1XW$_HcOt+%4&fYJC6_ryyo_J|_w7HSz7 zq#v}FxbhU~ZP44>pVJd$NfG#61)ik+gXr9N;i+{@h0eeHJ+CYrX8sx;;H`yUC0n|+ zNPLPyDPs{q%{PtjXh$L4a`w%oeb?Pp#A;t?+sQt~&8Dj;`Uux<@}k6k#rc}(uH>az zyI7-{{i3w@o|;PKO2x40Xg0>M$x1@z%IB&to!L8SIC<0tY644_i&3+Y`20P|JQ-0C zZz8Y9MIOC$u{w6yiXK1OjMj3=9XEwJ&vV4B*;Q|Sx?ZD&u%=aFY#6??G~V7cBH?oh z0h##Czh9n;y@_{y)1pn@TGbdOCLy^7H@2u3PCww`F%f&;@S`ItR4!d^rAKOXihvWA5g=a>r+WOk2tC8-7qvNye9# zLDp#AtYtQtTV&g=Fuf%=#@v=}s+U5<)tU7;5$wAHN^`ovDI?LKCD@v4LTCb(99&2*XrT zI66^{>~gh?-hJ3Y3$b*1hqNq)J-FX@!X?P1ic)DzxObDA8qzykjZ96^+#jnnvW`T3@jV?$OKLw9%mJ(-=$L-u697O$)&vX~mnxkwEYzOKU*#t{a8 zmytn@$6i$TM8`$SNQT_x>G8a5$r^nbeXyonVy%movDqNq3Ze6%qpTVSUqe9L^DL@S zA!X&#O^nXIAD}O+D~5W~e%05L6UAFHmJ{2AT5KFDfPx5fS2gvy?jM zCMGM*W@O`f#uTQM?>BWZ41Z&PbB8FcWb=k%?i1+A{q%~lVX zvPpay>RA~w9Eyt zV#2h0ULN1=rw!5gC5qcg<1Cr9#`jGwXj_sBJ=XP z5<|g{aV~G3q`aVNrIS+?K>BX_WN7FL5+V!+M0mfnKv@WOXnN=zlwHdwYM9>Rm#N6T z&$`dkwY0Dhl&!`hE^igG8F1`BL@x*#9>M)8S`K7Coy=-!jsElP5poF8kr6$0F0Q72 zt@GslkS}q(R+ePBsHi`rj7xwp+KH}@VxkD8JB zR>0$x59%G`);B#6kYJJ_AKQAnn8LPMBncf8I&Z_`Ybs_!B(+b#yru9x*Gb>fTyS*kktj4exj-K0sO-~A0(|gKuVe~oz5Rsw! zt1oVDOSktyJw)A)(+zGKNC~#6iko*Y1~rFo(H9^y9qvr;)a8ac5$58q(z!U2!5pzR z#?5P&yy9{n?L{@!Xb!j^XJ>PSN$1ho^58jQo!c-Iw;YedrU63kmrXP zbXMNtUK=eG1_w@+olR@GZ7_G`82X}&-uit{911~_>C1aTYHNw$pk|yy4``^0ZF@B7 zmow+9^L+QmZ4oV4Sg2}L@`g_k@v>%iNV(KkfguBDykcL4Y&w5*Oscw;NU(SHtK>Lt z^kE%qSYqH|9p6-?$DV9;x;k3+S|T#ElGMR^({b|hbYgUT4F-8Y@DVx`pUMFPFTk`r zk1rAx8tso|)}R(1W;j}o1(@}?ET$047k#9~R8%61ii{&t<5V81l@>pfqFTi7Z43w! zr;nu2Y48hgYm;(V-bmH0fBQj2!&b-xbl`utIznkHEPWU6ia=^ha^ad_g2aX$HLu_K z-DMWz772^Cl4@oFx)le~%?)8J|*wv;2XGMlwrR$%$l(kPXWWwpZc z{Yt8uwRBfT42|_G!NkB3>XS8JrP*o-GPiaU8Bh-oOSo&OMmB9+5;W)7fyFqEF9twr z0;YEOYm|P(#_V}*etpDYcOSn`|Ip}F!~44v9Yn*SHQSW5Tewpljq85rUiTOg73q2) z?2u!>dYC9;(~9%3J@GS)n_7$~^#gPdH>|nc&|B3-3V(8qK6G5D+EgRdRjS2#aw`CP zWliz(k+WUs8rlvKUM$lAIbQtH%gD=(=$JceZ9}0o97}9nWTP4ymJ_v?XN$9|r0ZdG zOKnSDDrChhxwz>LgPF9hu3wkDVkjm{VDqv;jzo${N1v1qo=d>6isQP44tDsNr>i?^ zEahD1szpX6h`u@}h$kKYJWT6p-Nq8!?f0dd9T#R6o*x&s(1Iva@63->(npbPeSI{7 zo9QfI5z4+S4* zSca~w(U-JTJ0HSstYve|VI|o{es|Sdn-C3=VtUDzLNE_QhH-3dk_aTpZFIM%S7l4u zu8iqq^;aeYtmky>er%R#CHI)B%*+hH-GTWW4;1Jbi5&P6XUZyR-%Ys|6_A_L7x6%2 zRHNBUY24J~^GWWAsM2-n+h)+uQUJ;F4y&*2bB%%^KU;H6$U$duDjCA3gv! zqb9w$FA5DGR*KaMw%Ht3cESdqi8VKJ9%d~t*tInlSwx5Bey50YRJ9%46r+;9TlXeB zJG!{$Fke4;d3Z4ab-Sn9D2aLu&&<%{byk6$r>zzN(FyyK5;tbIi`KKbK7HGj9=iuF zbd+>dJ7oelF?8uKY}6axM*s}DI`@qc)EshfWwVNdADlVKE>zmQ=nZxVk6n*m@=bhE0pKniPjh6_ur%x)6AUoYKQ7;<(0&JZku76&LbFVVo*oZ%25T+e?LnL2f7Wk1@X(i*Nx4ERwN^*(%ZaHLFk zj3AQ5B%{Q0uaBj=r^UxH-_Ba)z=anBJLOKmpXhrQi=kttnBc;fU3F@0H8J) zMBahJ#fyiBy79_dNT=H*=&+ z${q&{5kt%-pI^CHcGH(jd?!Egtq_0P2FxZCx2|9YJax_3VT!MdXa4BjJ20wLT2#97 zzUkGoYiGjs^(rzHsZ{3zuKpDW%(#J%#-=X-i|6#s{#Ig`^OOHSEMB$^3D#>xMN1nr zh^s~3og&#QB?;qz^3-fbeW|t#TOJ=bWE-s>y2Du}(H6xm$!)zlD5s#1L3_IgK{|YeR~-;y*`XCP$oOo$vOa&fQ(H^33!&wbaB*V2T&%fAyet1bTha@epG3pl z#uyL9J9o9G=O2H9a-D!lW)2R_d+CSq z?=f3P&DEaTlXy2lOZCZ1YZ#L&%EgRX&mF~+6DPfH41*~tlU^yew2r-&>Ri&%4j!opr@~?6lp0Vn8{$W$0tffKXeS^?;RG8wI{k?>caf#2h z`o_g6{IwNsh~VpPO_Z%{BF8#~rpTRJy}AU_sYOzq7<*{ycoAQG0-^zwCngl-cjY-d?5l2tZS2YiXtggI-<_0CBQa?6XD9Of z^v`vju1U(bh|y{8H5v;osd6HOS^s7%;=u>@-?taKFvEXslsdrJmGSmA$@kJF-TIf} zNp@4KT~;Pg-rgUWEifhO%@4NM`=S>K8rMCJ^0|ca#;ar0_*}Of`uhArDk?-R>rieH zPQJF%2rPjnTwdxo>p13;lHZymme+Om8wb|517Y^0NO(EjuKs9zjIhBpQ9H-N=#Y-- znwrov7QdTXAKYKKA6Lgyo=G%#$hw=v5TbDMt>2b#W>|PL5UyUm%3w9;O;~>o=SFBF zk=6_ZqjFlGr$$=SUb|dpsG*^_tE-^5QyS?v@u&deq2aFoFL685m0Ce!FY*fEnIXNd z+gD+mEOJdeGnEGl6()~elk59*jOR@|#$UIAUYy{3 zolL!-5NbST%cSf0+!D<#-Xbc7>7Y|sR9ictT;0*pF{!drjU9s^(BI#=z^+|$u-qu3 z$k;55R;=lyBS9b>sy;#tk?!EZtua+$Jb&hyJfO7%)%Fhw{}yEe+&fRq13x*fI`|jf z;c_fG+K#OxfN9%t?({HjHYEnIrHqzYcrdY=S#Ec`UASW6H*e^8JG3Gu@c#O^iyzIg zh#_n4Q@yiT?0eM8hdKfXeiBSZZ=4NtYIVwlOBCFagDr zaGU;7r7Fu$j%AZ^uLj;0C>`V{sEX#wjclmO_&9@-r6R5N=(kiTnUdNY=1$aXR^!U+F_6nF#4xvBJ?4zbSjf*U&%kxlk6jb)Y8R`adN8{yyTssM=aL50FD^x4M4! z|F1(a5ipK^FZA{ceG*x8%425dtlnSCkUd`p@I|8OjfBAwS{R?0F2q030yqdfin&Yw zdh7`j85tR3Mtzroe7on9ybebjg8s*O94@bnGCd^sCXRuB)d@38arL*8$3oJzazp3DgQCLk=S4zq8fAmvbk=$2&u8E^kl;R)}b04C*76{$y-2!ZI(xeAH-Fz zisy7!K^IZktRZX!S~ru2`^oI;(fqlI6_ z6L!g(bPup_^{wQJN$A11K2m+DL=YCnEgrC0Jjww*gG6mYCz$K_+oezUxjc5lsk!#n zt~6Wm>loMhcyfH8QU|A`p#ph&;XN2AcsqEkN`C(Ph<;pc@XrpqCH16J_K8KEefhNi z8V9s~aeu`uqS*t3YwDvZxKd`b0iWhik$R2;Aah^*g$Vq;wgI4b!@M_596j5r-r9qe zIkn#8cNG!d{@9Q>T(mlKTQxuZA<$=uTN&?NW)qMObeuxD#WDC?(NtW4ZPk)nwD8_; zY-wftm8=+qM-4Ee+F!Ws!Vos;y9Ec!MRLQ8mEBz{7cwnZ%k|4w#Y?w*wJKz7mj@<4 zrj$DXKGU+Ve>#|#K*wI95B>e*=l<)BXjn;|e=epr_!_M0ClAptp7-1+x^ZHCWSG6eU=4ZHIN0Zh zPs4M(vEqMh&2i6Z8RcMSTDn|nE21VVw5<)6bNJ6eV)Fj?mNfNQ?9@Ze!qg6;E-bE; z4T!BuT!5Io=odUQypUHK;m>&ZT(3~L-aXalc4ZFzi@HS+5KN-?Ew!Wc$7L_Ygh1P0Tb@F4p1K;Z3l3$FIeoC@`vFH<2ohjI(*m9{aj=Q&D6 z=iRR4)GOt>$PW$eR;(u8x>z_kvqFGJKtc0g?(iIsJOD}JYrzKH_s#Fc1EX}4@auea zpg-jC2jS9|q1OsgVpAZd{iv|i1>l%wa(h?eYm+^Ha)?>kPNC4Q$MMzbr?-^uk3`x- z;kfF(*TAos-18yOTwR$IfeTf>I21Qtg!;D_5zy}Tbpk;9+BjKA;6cD$n}3)4k^UUeg+;Nil(=W2Bm7D ze`2}t$sI`GI}R^J3j7P;zAEa!SKL@X@wjZAc=*$=kj zv_f#ht0+fDM{}4R=NEg;#MFj0okM;{x520&G!}b$`QrQj^cpij{7$fQT+Xc#c3;pd z!wYK^#7(VpzfWu_oF%_+mK8$Jkn_^L#SzkM1M~n9W(70)xO1M@;`ImdcY8isgXP7! zTx=L*9syK6lB->OuH(tAE=f@M5z&V!CMFdnJq2)Bw|$Jo(DYTf^Wom%-ILWyvlf5C z?CMukzrg>0X_Z8KW^V$tx<|PK*^RpId3>QD70wC`Vp(B*v?edIedBA;EH!PgfLg~X zYps8Jc)lUJTHp|Ob1&2U1}e{0A`?J4FUw}C)E2<-o5jID2Cnd|X#rI{{@AdE3w61S zxXA}Tfm>a#4eMgne|{7KJcQ$&zsYGA{XOw#;;_lvKqx=^=SHS`qwtUuk0xJ9wY2Dc zFaXJ74=EuRok(|Gwu>gS}JDWcE<)|^6Fu<`LSj4c2 z|0cozECLgm64(Pu^-T-918bW=VY|%(1Z7X_rvZkX6&gxQi400FvWrX&Zy9L-01&v9 zK?7j2+g#t__?-m3`VY*8ZjULo_3C08uyal$xSU7Uzw$qkAcBjdQkfI{m!)}xDD)vC z80FRjF;P*`JKaCRTU!fU>JJlsekcD&pATrjgSqB%>HA-R`ad;=8$g0XUP~Gal(^v* zPBG4kl|+G&8w>C5b=zB4W{nH$WqngM9PN702Y_28@w_4~pR4<^!_L+AALmcVy9;cH z{>j}ugn#Xf2;HL+$4`FgIpJNwT{GY5Zqw2Z>$ZfqT2An$wrE!TwtXVNue-j|RQNN~ zd$9`MSfC&n_FpyX=656ii)U1B<~u>4j~ycn9}Pz@wGc(~<3pjjwaS!YZi0;s3UFQt zzg$RDD9~Vu9}NGbpf9#bm;X7i9SkpKMDSD}OMvVqCx!)NUE9#iETqb5w+YB`QtEu3 zJ}t-Z%TNT%$avB7KP*G@bQ$IU?K1v1TaEnS|IqfHQB7^z`|vp`qM~94M8HBvK~X@Y zA4CK}q&FcVAW}n>8X_nlB1Nk7-bz*f{W)` zSW?nuFyf@>19pA=J^*CxnQvcYV#0?)KILnI`X1Z0Azfo|;ztV-C2W-0QGaa5F0L+w z3+&p(<6!G|jQKTw`)|7_DVddZ?*TFN=G9ZJ5n|ARXTN)$j})JFt;KCudv+J}r`~rW zfWlK(#qf^V;T4$Km`66dE?N2f+NpgjzwK0_#4JSj=EM1U_U6MJ3ZXXgO%iR5&)60L zWA~t`#bXY|uhDfe6&=%;0p@`0sOi6bVpp08z-i1Z{P%wS`+%*s}E2_la}q%|FKK zt_GOhh7XmT8^||I2RP_1&{k1Vk(!>~sG_T-#aUl3qoSd~es*fA<#AnVfoI2Hw(|ci^vU-?l|(E0 zW4L#PbK(;C?#T-Jt5pBDy-%X#MBfD{_Q(XoxjI`C*#7B7lHZ;x$A|Hb~0o-c$w z_9BO3oW-`JM=9D_Q{NR9X3_ugM!hz^CMH2bid;j^nt1c;=7UfmrdY#a>@a^k4W$AR zgM1ycr&B>8;JbF1g8b*d?XKS}!YmJX+P_nOTeX`-u?<~f-Y)-TU2(FV$dYFxT5f_7Aod3dHZ!?*wx6hB*0z2y#(TLX0qFb4sAiQjC!6 zd-dy{h>w8{l0bfnVcwPaZp`xMCnuCCYf*juD$V~`i%XQXaIpSuEjnMEm&MZ0|5}S( zIJ12z0d8vQ+g7u6nNk#cVFqF<%#5af2ud?A7}R^Or4MN`zM_t3*6vPk_GuT>ef#!p zQC*(ShWAz1RW@Pk?@u7t>aaG4aHrR?#QIZVwI2K58c+K|f}7RpTECCKSJu{$U+6~{ zKj+!1JQ@{WD7(8G3)sLT>0&O> z{nuB2y|w)ZNbghY(v}tl)rESM;Px!@;d!sR zwx%`pPGh~?jsL3{z92LIZ2DxC{s#dSb6Nbx`0XiJ&xwiGfO7R{%WU!+%;vr`i^Fx5 zmE@Mt6}}_KW}d^~pJ4`%Km2uU+3&CC`In?am3jhjup7Xq3S);E8sth!tRkjb;{X?- z_dDM2J7#l*53ppQ!cYD}(2~gg>-WuhK8e+*$x6nfMUhvj{pXZW0dM^30@q{eoA70>)jRFPPC;Jp)0vpZfT% z7un>8cc$XIpIx72nZy5M!y`x(vD;XwthCss+22<@c2d$YyEtr6aO7Uo_X3p%q@=<% z$@|+h60(kZ!S^jPqG&*=QQ&O=v)JW%T(E@O1rd!?2!OV(nU5?>kv-(S6CP0r@7J#}@iLK8h!4#m7~GmTsq z={W7Gp28Z0qs2&-TmU!Rd!SGyZ^$gnBqqzz$GFtEZmBJYY97zo3bUEau;(6N*)Yg0 z`Wj}Pp4(TVO@XEFom%?p$4>TB$gSoc^i!~LfZh^g=gY0;saFpD>A{04_ceQxrp`*I z*s7(z@T8LefTYkEmIp0`4VH+Ia8FY4gn3F?M!!}^gMV}p^uxP=tAcO+-ln{8%gy%$ zY#@2NwP%JRL;hVYLb7M2ea^Q&H#L0^(0>ZuF~ksEl(}#_%`K#-zl?Y20e=93WDSNd zaT~gV(-aB}8y|vy2^8vN9VRp7_h3W!C!z^tWp&n=p1d%QUpyvO+tQI-fO|T9H0rRk}gs zWiRbql5HQMiw=bg^)va?`cB|!(2!?&UT*NQmhtTFRhQ4Ou~x-vEx9Pa-} zt_T7Y&{}19bw*B35urK`2Xp)vyK$?UtM3=P@fGA)**g(L4L8hPbt{9B{ea#G zeSQNoY3$;aIo#8Oy%X2ypBsLeZ6-k?N(ib!(&u{zIX62qi&M7j$WMF~dJ(qKKj9xc zPt9sE)b|w7RsN&wWiumfv~H^Do|i+sNwv$Gf$k|D_e;Fx{wN^X4r1heraOp9@Q@3bb`x z?Or%Kes}g2#}$%z3yF3Ln-4VQ4F9??j6V|Ky3p9`e z;+Jty=rC>pB1MXi-Qgu>NAO_1T*Lu`Qoncf4j{!=we=3uJ@fAw1cb)}QN$w{@fJV| z)UzUr0(ujX`;KclUkrQZx-}#v$vBs-(_-Vku^(1B^SQRU-7@Tq6nue7;bWLCmP(3z zAmUrTABu+BcjY*!OlDs2f&uDd?xzkD9#BaA45A+R_?N@By=UV?3kvv6mBoW5=1k7D zYCu>55=4y1<+!aIwsUN2Mr|Luz6}g;1&WbEDREmi&6S^Mw9!U|wKc5=Jf0ZU7&p93 z8UquB@CUTSe#SmrAZAwjo2Oo7-&Zcrffl<3zJkl=9x);a?1M>fNbEZMzLp@?dj!k* zRMz-4Wxfn+JDRMABcfaMd`}wr-o2OB!T>ZZ%E8;NY=G}B*PM3{bru}NyZF_R=UFMmnUkh0c~`w z<_FJIj$KXQ<<3Pl+m$g`Xr&)op9l-p=~(cB6p!AKm9)IFl1w-P2#lI7+7WgLx&u+M zbY00l_}cvq6!QQGji*Lsoj+|YmVjTGT?tX-v8$r|pF#jFM5_hVS{x*@g|{i5>13Nl zK=^6da`7J?4(MK3P({;(hK4^!cW0qdC8fo!O)WQYuVExNOmoOoloBMB3A;kYJV2Ew_m;?6^?&&$| z=&VOwX@tZ8gv6(WqXa#Srdt9jXtU&$Vl}D1+BNWkulkxSSjg1Qv7WErml5__LpvdftOiv8{lM4(_P6$aIFD zV_>jCFPzVHw7*^B75F}e^3Q+c+?W4wNsMQbNbhAMi0Q8Q83ID2<2GYIH3&Nn$WHHY z^KC;ZWOKBCtQ%&o;jZP9Wx)=wYrxDJav)*`a5U2cdRAyG&rPwE0WClSDn2Q9F-#fs zxZrEu>j_X=#x#ORkOx8J1o`Qz{IXw}Ojd3aGO#5RpCr4DRd!XaKEMF@w1*x>yJGA0 zr_jglUFn%5kbu7lL);yeO$8g?0cdH>$0N?rRhKc#5DO*1Lt8Ozy+T+q1vFUnLgHgu*$F>oSlgaS>kwm7x& z=l3lEb9|2zP#c$az*A!xvzjgD!2h%=9tWxGm$qjNhgetQX2u_1mQ4g*Ru+OqIx7H?IX1!jN z^pBaDxiO&HMLrf19&732hCidA0bdmrzx9pAeGI46k|aL>K%%b4i1!aX;{Onw8W4#a z({Bp63l;1{F^2&l#qmk5h{xZ_(&G8~o2)uo!Jz&}VIV}3@(n}kXFx6zVm{J!3L<;Eh8Ug9<>b71~VyuY2ElfRhyRQ=;Ezm0eZw5T$_WvUJg^f1v3< zwV(%Jhv`;n{yz>S;3KaI-tuQ4T&PcGPf4y&nD}s5SW`|r1h_#6uGWG7S=)2%;`w9F&sM*Q z>(T;R(oq~x0XHzG+=h7BdA&k!$H+Il;y_pT z27r)mj`ZlR1h`az>V2Ij3g30+22GEy_HuHze@-CB2-{7qcaKO{myT@eb(}^#a-YCP zAgew(kin#^sd~DI%KwNY*b&7(|NVoGt3 zIn=|{^Cl`PDvi35WK)WZdmSWp_DTiVE8S;}ME8uuuGoxJfoudfg!k% z{u$u^_n!GK4TuS}tfi+^KMh+tCW&83iOb+r#edT(b(Z7pF0+r6{V*uUZCE*>4l3rp z%7%mK0)=$ze1J&|FJC=Ku^(&?;zLmS5YwwdEay$)1@xxdw?Ehe;7CuRT=)2e+aFfD zkMqq!E(Q!&C)c^(0X2=k^TP6C8%{v{V~*mo$3{C~%Px(FafcTmF9xRgO;uuzEdb^| z?1<(|t*##V#zMi@m8-aOxES}T&Mz4EEouh@AzfIIHMXg@^7MEt<(B6XTYTU>ig8y> z6ytg4sXachnDxWA3#JNO6wz+;@3#AkPD&<_0VcmfMt!*XpW4{ZdR>A9<&zH02)jKC zn?$KSRiM1X_UI!25}xFN9Vq@#+DqrGoAj49)Tq7H;~NGy*vb^fzNKmo#f7LfylBiG zzh-zjxuHnO{2AXYytzu4-*QmRS!tWmc;98Ha)f?}>>TM}<{6RMw+v=LVDTng75)O+T+yW`r zO#y+m&6~e%M8WnP_3cjq^?u#tPsbgWo!6%2)s4e$IBGgZT-8~>-|j~LCg1w}p^GO> zfxUWPBYO4tA8>3iC3oBR#cI!wdAtKxIu7xK>`C%p(vyS(>Ltq$`KW!`Yb!cR-ph>?J>YTu6)Apu^FXFpYMY()`4h3!#R1Mr31QhC`%@m#(Er`AswhB$e7!>MSj zKE5VIM@3Kha>NDY<>ftUzbEF6liIiWkzDKL==0*;qjN2wpc~XpsWjj)`A&Nh`6aU* zBE=~D@L#*O{*aLjFkc$|!kqu7f*qQqpc5}Ox&57TO*1kXteFgs(tJD;c!_zWM20={ z?NWdy@NswV`J2Y~+0)?s0N4M?(PNc2D2;B*g(!JoRtP^fD>32^GN!MRiD~fnpwL&o z;^AWqc>e|=jBA!w%dy~yRIW}EPc_*eYF^nx&TxGftK%~#LDjAoSB(3ZLZy>v5;k)j z=3Z*DkU$~VSjoR%qPaOs&gD>AbBN0(cd{d^UHuS)2{OuuamXJ8JASt>hbC?f4h>F@ zYZv-kmNtO%M%Wvf9AolZJLr@9Q}Ydoc;I5`TjRD-?)T!{FmkyoN<8O{=6f>3iRrQW zd>P8!Sk*wHTt)D>CSD8&FuesxRzwzm-D{Ck&6=G%FK+zOwRvZ#QT&E=t}XAHu-^nO|AQG=_4Z$GK*-Zsc>;z95aK8zQJ4}bcg^u*IsLKeCzy_+M=qHWAE|D;LqwuaV~$ zz7{ro|7?t5fgt5X7DV7xkH8^Uu_ryOJxSGnyU4y9?J|(?N}(G33&jnZw+Ne-GZ#Hc zFOuIteHhj?l{SJI8+7&&&HBl?63e}3+8@=D*3PLhUY6KSzh^q++|+-(unYZ)gx+dE zO@%{Ytrv$%p-44uDce$6$N^$@cJ>s}!9ToCGmwd6p8CYyjT_`B^OTa3KCL+PCwIVP z8eT_`&EBapmZEKZ>>V7mal?XbEGH6{Awy*vaZclMr7AcO{Cb1}pOXGX=Ek35rSz74 z;XTwUwOb&=+yz(S9zTD$$C22R_)Zw@Ng**zr}^`HwW&td-)ieoF!ny$b5P5-^+W`3 zMDd>eFxs&ni$e+I96!ELn)dihl=h(QuibwBQ(Y&v;Sud2nJk2tgw?6D1%!IE$?Mk? ze%IXbrZ+c2yg5(Ynw7BcxwuWuRs?Z1i>#`#FRl9V#4n%QwV#}*D=6PRR2_fY_VZL2 z|5}TD?u%6ZW#{hOhMp(R6UAo9-}lotg=y*=+-Ez2L#WnH0-##Jthb>T)fRy!Obh9t z<27zIf#Zv=;gv+H_4^PI#0DE9;@sERo1nv*fC?8*y0FfoqkM_x+`9YafQs48%@^Bf zFPdu$*ujs1>I>(%4TnO7gT;Di4{s4RP!GIp-H2n3Ir<%xjQ%@?a;WGfzH1V8#d@OY zEO2$@wy9cs-8P*_uqs%@Li4~MQNvCsAlXC-PyaebpD%Fira-rrEWPypoG-?29z?W` z2mdk@tw!>tTzv>DPFht!L(UDnpn3B%|E(N^8L;+u}VZR7bEJ769L z;jh+QE?eVZ5KezbMWhM7CIlEr9_Fd$={LS4k6losly~;?M2$$jB54v`{d*MogdUo0 zunbO?Izn%he8rUHbZEmp>-i}B*Hincg`)_(m0Bi|hT!iN4GqkMqk?C<)6^l#7U{d{$TB4*|CQ#pH- zkS0EGW!s@zSoe=L+0pF#%0S`YKAE-^yJxk$HV|-3(ePkAHAeT`6EM=7OjTB09! z$mxS1J)Ryqow6Cq-}-I+BbkBjXoxdSmOreO`T2WP+=!(Ge0B45s+n7U32~{FWVP-y zFdHaEUY%%c%}kHE+z5`~8n$U%;*JXH3S*wwXZ_OOM&i_S5zcY zNBh(JMqyYnThK<9%ctFmHg}Vg%Wu04^$tD8d{ttLWXbQc{(OSoY=T;1EAhf@C&>j} zkSMw1htS-7kK!W|>%4X5d)yt6M4NWunWlFPGujo^X4hoI1@p=Xwwc-4H@WF}A9GqR zEj5(HHvn6od$p;Iisl@>&vOfl(8hSD+W-Gn1^`**U$U7PqZ*Ft-=too{dg+k60aWb zf}G0PAk!r@ZDEdR zlg3x1sV`Cbgx2}86duw)>xAf;bPvU^Ilfn}RS$%2!5Rr@G@wp~ms32EMRCMkwKJiHLTP#4JgUBaTx^g2;$q)54*0b<^GY zKQR<+Ry(Gqr8N{l=L$PorXnB)bE-lb$c^w*4e>^Ev{@?9Qiw$V02OGq z5cXaGraJp52P?q&*beh-*a>rC2)nLXV?C(mg`;7{(V4&(j&4j zyt)T4*;L=kTik;L z=i5|AXlSPTbY0+)Yq{uh#p6tOCa=mTH;RB9KZ$@OadrwRz;NQ#odvB0CqdCa_#A!e z&xAkF+wPH+O~64SqH@{g+9V?0R8unobghMa8y-$^EEh-hDuye$WB6Oe9omuu#h=dk z&EEq;X3@vz#oVeMKD7y1^AU6=d7P7Nf;a%7_2zGap(=IrKCSJ?4Wo)?ejHiii0U_Q zgJDN`;z{f2r;Z715>+y*R~rz|hu}J07gf_A3T$TjcRxf#Y%HMCi{amVIa<1v$PN4m zR09}ylj7b2LP+tuC8b68r93uhX|JJGo+BWq zZc$p?Qjw~dWv}f?GE2v7Sg1t}PMEQm(>eepd#S<#^%osU*yaWn2>+)m}w=bLEI zXob;=UIoX09d+;kIotJF2@v-T(m_O9SG_t%M|rWsg`Hi{<*h-KRWL}M>>~QyHwV}X zo_#$p3-7t(d639gZjjRhcglEihjyeuIcjt{w5zyY=R4%sGIDd#szX(Pny3p5l{9*g z-lZQYagZpnk(oU?xQ#N)n~9g`J{eA)V1Wp>A=l94Ylte$+mhJK1h~Q2U!W_nvdB;& z`b8R`EHN}{GJ;K&R#fWv9QGiBH>`4{T-F@9jY77_aVYi;;^3r-Xmn`hGA_S{3yDL@ zPJ!h1MoF)?%R@AN)H1y0BI9NP8BDr1a(IiKKN|tzb#QPP9Aji;oLc3GyKl-xfti+v z%NyuDNe8Jwy<&$WeepuwfA-O@R~Ju#K^!DW` z?@jy<$ed#X=@H!{N*vmD`Tk4wGSDe!E1b@%o;E`1(Nf5;k9jRh`kOr zIjNJqW4O8=8{A8KV5`lMU0!+4X7Gc;Ya-sT6Mb~J#4&JcKRZD9E?&78z#l=sq(DVP zAt2BT6UCa4_gt!J^h0J7DIrQW#A_QgR%KG|>&YxSW}11Axd2JPAQ{>^{fyzp)7SYh z1?NjlV$a^$+b`b4c?#AZ!ga(;K+Fu`&u$3_wI<2&%?2KkcS~W7Y7W?Qu{h zIXw?z&+%`6W5VJU1#5ABbXH-dq%st4d}XmNccZa7xlK z)7Cx`B&-1iH4BG+LNjTqaw-NpBS{+W%4>qzN%6$SZQJp~r>7EqSi%|{Ru~^7jh)Ge zwoh`K9t3IQ2IHg$wJKhwt$iRzY~V0XWIwh~y}tBnSh&BFKRMja6Trqw(SmxsHMdDa z#SSk)l2bkt=Y>mKSVPsk2$>SfUXbY!ue{rrqn!-Bx4DfrL7sE6qGVNbJOr9NbHB^I>u zzk6Us&qKjsw3Qdqc<1Jeyor!9q)dsBgZ6xnzk(Mr`TV+OM|nz-0?ZZ$CMT!}4%JK_ zXA!?Tbyi~n%q6(Wa^2?pr@t9)*oH2|SS8|qxnuKl3r3@q>ke8uZ%yfI>wp$v9IL^%kHU|V6_iB zz4JE`zlG%{kcE&oA;6C{TS}Dafu6KmJEq*pI+DEm-k+mg*wFFueoqP`KyJp9$+z#N zbuhgD;Z_m$oeX?!zli}k;{XxsQ1k#yB&eUBRDBo*I_kA?>;8UxHTT1>>gPbsI`ErI z5%Q{>kC)mu638};#6Rot>M9$@w1&Bsw0|%g ztM&SpHjH&=nL9xA;f6oFs`c^HZ8bx~WKq(W(+z@@a{t9Qz$RZb11E&-+T>pWt49V< z^1zm`CrrC~FX>KcDMKuL9ry#a{0S`_q!JZBdeP)nTH+%rQP=M4sy9Q=QpK}=m$#_1 zh-Pk;Q!)NIUGOHi-oOzY+NJfYPTYF9E|Nz~Obqwd>BY%McBNSn^C>P~+xJ1AM8dUn zEHXb#TX0w-y6lr3V&-_MVLyJDn(oYubtl^W?e<5edz}!6^LNaG9$U+#_QZisgXHls z%R&Qg19CBs$RtX_LXcJ|lPN5L+|HEC@ATtI>)=Y&8t?Wr1ut0lr)F`I%&Wp2fvLKV zmRLr|SdX(lfaHPTHN=@zJ~K&JGdVxwus*9?{=JS)zOEI13)j=2C`61NhINPmb0d`2 zgK8ZvxAQj*zXsvu(agJ55+d;JFit66T<=*&l<|e9;9U8FJ3itUzG&SBvVKEp3%aj& z{M?_J78j)>@Z>w&Jut!J5wP1nwN1Y@UF|NzPgx^gKIliYdB)1>n8v^;mDJaZ7p&Pz z3;-8HfIX9cY1uOB&N@ReuWk=y8+VIaamhyD^ty7QC>$$N`h0De04eq6k9Q6ptMiE# z!dF$Bbi{QAMsguSJxO`m+oKO#d0V|1Wybe)RL6-72NkaD`ONClM^BP|y7uEc zlHzMihgAe>w0Pv$7Rg(*QB&3GO!}%Ei-Gc;6wG2Ca@39PFE z<3n7pwbl98TI_y&F^DqkN6_(#hSdT#pMe4_h#wD@m-`gf?>!(W1|Xl7qRLX!`A(Cb z3Wd+^#ppB3LZx<>W+lve?ngST%AE2_AYtCa>v;a7zy9S%TS0P0* zn&>sW>N@5edBf0q@D{V*IkC%-t#LX^p=4C7Qsx-aRZIh+f6XM`E)TU_g!^g$b4dCH z$fIJW^A$nw;PbA_kcnsQF(Sy0=gOioOagQ|af*1D%#<3HRZdC-^B%8Q5dS7gacROX16a+mjU#1Ryqn>XPTkgg9Us36$GAY_uH z_xe_I2$wxGC$vZbjmuZl9nLFui^O6&O9c-;1$-&UvHVhtp{VO^akB>~2abo#vx~_0 z3FL+48#e0T0=b~xB~Uak_3;ZqX!01X?Swz1YmL{Cyya(s3>KX)pKPakEAM-asB3VS8zn{bTqY1>Nk( ze6@6_?9|Zpp|nPoV715>STJl9_fAK1JOQbb74DxMnGkqnO8E5Wjn=RPWR&8&TEoiV zYPaA7WNWH5?Qk@W9?xTuugSs1BOD;2ZM*gqkLR96#FfN*p3Cz@EQimq zSR7_O2Y#Yrizlz_A7+;y9-$r5$CfE!=cxM(Q)9mgNIPlx2p^LnD->$KFGoy{O!-K|TOpcR-z&c2sT0YUu=#!W-wixg}tHx~X?Ae^p8pv7nZRSj|0my~%%C%l2hxPB&b z4<+8ie*S0>YJvh&u?-^%yY89%fBD}-+CaWE84nJPq_%V!gUshn3oh@_~Cgh)*DAC|@z|tEZ!MVphYY~a66z#0A1Dv}_0@Q_HW$;!f<4IpR;3dn<^c!kWwT=q(UR*8F)?T{g%VQ& z1rHO&64vrki;Igf%OX(Mb`(kq?(kl>)Z*dR)3I~wnvKO)Xx^zQ>7KNyd~mc)q%(;s zyyl}&&qtC3pVmddhiK@@d`VP+-hG zE4=e6=oR?D?nhF-(XM)EuCYDHBa@sPe=koMtBWiHJk5NtU!@2H8z7pjDd5JiduPJkb%CpRtk zAOQiq+S4Ticre%Iz*gpV@222yZPM- zPSvfL#k1>Vl4WVLzYwW#LYhY0al`?W4H0`5dF3=CXe6;+B5VhIB#*N_xOJ) zPRKDYqXQ>>Y+Iu0x$>ah!rCfjUQ7m%+V-741my9U((=}-8Cbm6gj`Oc;W#3gc=o7Y z|CZ*VBV_=8Q?K~)@k-g2!Zoh%1JNM$jMPa9bl#s=Yy9Cs#L^ZePjZb;I}T&dZH08g z7t2-y9w&<{2F>U~%e5&;CM7mB(+Kq`eF=iX%!gT;T7iZw@iMxC(D|=x=82?HBRI6M zG?xVo65#!8r$JQ!X6Gtt9m7Kk5_IO%B1GDe4yqC7Fe`VgzvOp7WzW1K;Rbur`tUI? zI!gO(&p)fOfy`l8G=y&jq07NnvmSgw+)aybV?)&R8*4czho@RtN7^s1gf7Y7CVmw{ z-|{5XupiEU{^iX{Onx9tji%I*X)#!@(y`ffB{!@$TeFhc`1>c1f@Fuv4CJ;xJma9W z&oR2*G`^pf`c#vU1cfg)wZM~VP=Ca(6j9>B+nuf$GH0R~F`l&LocSt(6C82o^7TAq z?a^zn9$RO@iMM z-aoUv>H)kUIPX^Oa|AAOjK3|l^~L#ruLaWOaqb08>lktVr5ULE1UrRGwo|>$ZgblfKFjdkE#+k(ibNkUg$cP zif+B2`(sok$m5v6BFO43xVX6s+D7|EDdBc#L$SGxC5Ow=+>D?KFzOJuK9^MTH4qpH z?Gg)yOYoaVECD`983OP;RAEm}dzM0*g11xIANSpr;KhqT`7i&W{J-q-KY+`-;>mE` z%p6$biZ*nF-rpMI6dKTrQ@_cMN2(JN>N!e|n8n!0+6KMhIl#o{oR1gTjpF?Rm_6|n-#h3OQ)rutBYfuO3Y@=G0od7ftD zxOU&3e(f$-QFUM>;5$b}fg*=Vo*L)aa9$qo_7J+S$&Zg$>1`5edU>rq`VyESiZUAt zyZA#@Ni1>rb*^0Fy~K+{U?c$p$lpROaBFdP?ZO3Hr5#NPQm=~0q=`lA4>cJI9@yQ0MH)mllRZ9vpm*d2Qz%s#f`HhU6U)I z@bsc3%fhx4SU^aD1Y_V0!+Wg>Nn1kqhDu7BKvGtif2Q$9FKrrw9pQO0vNBt@1RB^* zeaD|({PDpETEV_j^BF5J`Id6jLIxA$G^AGfecJT&){Agm>4UW4V^@3_vu9`fIb5-e z0^ln)`Qvlk4VFQEwAvGx5B_ht47$#;Q&gDi7;0DEs6$BCxXM)(@)|3JQ}ut z5WS?{7kyrkQMuf)Z<$6ZDn(=+1%S@PmJTC{=RKvrwb|Aj;_U#x^bpCn&TyPdBGAki z(~<1Nk_yR60gWwkzM?c`e4?gqOK&ziKpSs-cfj@bD=rf0Ut_^^e3DDPu5)!iOKN;K z;GV-13B~VyWZEIIDHvLPl2Jx73nyXB;AfuMQ;LWzyF^rK#WQ!>Y^3 z>?+EfTesjF+wbq|f2{FK!)rsKXSK|Yi|-a!^Lcbj>cVA9?rIw{F+X57W$g;R|2FB+ zOK`5&?eim&`(cUD#a4WETZDF`wsx=f2>Hmz1tzrXHYS3or9QHuj%IWxkCZt}$GKpJ z3}D$ulCLcK6>P?CIw_-IV>r|@)@8cpgC-JHsh^Er=*6xkDG_V%50|hbqWWj>5^Xog ztDZ3Bwy(Zd3tG1;P-Z-`6`| zG19Z*czBoP%~aJ1aff+(y>Rw+yX{xh9CaIQ?d>hS+1)@VX%_u3nlE9>qXCq^MnBAp z_WR6yE%;vC>eEMJfp;3#G72;!V9FZpuHA3eT0eZ($VLIB`d$!PVFC$#YDX;$P0Pa9 z&@(ZH;8)-mMVl*Facj8CRjgh##c){H-}uXth@p<;7}`hZYFAOMxF2g7K}iOQYn%1L z8+L5$gr@<1*^(Ni#l|rc zHL|~VRIh!&WK~u3e3|

B1UaoO4wZ(K7r{4t}Ek%a_-yu3|F|*cf>;tL&95IE8fL z?HY*_u|e>nnRiyJ6u&M9k;Am%d#RO}#qBv4tw{-+Y#SaAOLTDxb7IS)I*w}ZK{F}WDD<`AXGJ$mq^zo&m&KY6=Y&`M+xlPU0A{!w>4ez#rW;TnW!l9 zN?P}I;!2oM%^3A0LV_%WDMrAP3%WD5JsYWkYgQs979$?|v*J*5W{dBNMKMi7Q+9!o@gK(tQ)7Ja?N&@8E&Q&a zP;a9rYId5HAmV$N<6%tDL}Rj%%+RUWNfPCNS0zmmSx@A#H-ZOFJdga#mvk*zokdbI z34XI8c4NQmDdL*GIao(7*9-XC<>2(X`=zEmr>j;y?vn4RY`VwE4(MTu*iYM-t$z*? zfHR+kCtvU-IoC{7eQ0;Bx_FXfrPmlT87AM5&lk+@tm`?WEaf&LL7$fA8_kNNMoVq4 zgaG$d)s#&KugX}c0lN5lx=ORx&k%BE?OXByUB$h8Ta5FW!(W}LoSDNkTbNPWlpWBI zcv=t!dw+}TTWt+zl5sH{lFJHXX_L*M<0=+{-Q8r1B*(MDTajPsn(( zI!ec$BF4%v9!6z7Oo9hI$V@b?X9}8y;sd&>ZoSK(536m8@g))WR~lJ};wJpYwt~GX zSKK2BgbtV*Z%J8zp#f4X)~`K;5C~h0sH@O-BCJB2BWl)Vsx!llPZ7mxQLpvMZa(M zK*&(KDv!{+WLt01K<=68ck=AxL12>HP0~GKpj0h#)Z+R>m4uy^^1XYGDU4#r-+Jymy7fBZ$!q#9P+sh-+;M1W6z=E(+cif zQ%E}2{WdmY7OqX4vLzlM*p=Qgx^i!$V_<7%Cok3{p}j*Y z)_iEBo5vN)bjU|QcUBW#O+=9b;bRZi%*hx?GiZ%0RJCedt*)-d@WGehjvY%7Qaq9u zkbuKtXBr0IK8}rRc|W_tF{`__F1LHo$WHjybmNOTqdl~sbVsfh|WoR(5)R~ z!7P>~R6d0UZ3tnY#q6%@$oc#0h@rCvVn5^kGjz{GXVKl=SK8s9E$!^2VNEU19yzRx z%%l!-s4~P}%Uj>rC}$y^y70`>@+)lYOiw9hbo@RJ!+yH2{gFG7QaCUh zr3Eq=Cj-@HRKtXfIEU_;Ksv!NH%rmLmKh_z@zvV2V5EPeA37i5A?dvx#LE(6j zx>O}az4v_XV-h|ax!gaTl=b5%o>WvnwAAh%#z}b;ahjRWvv6Xj$m4E}>*mhy;=xZL za#iDGiQj2SkDUGyvKkFak0ZR$LTBv*L2m1sXjWD1&0z35?v&qI2yOKHesmk=c(H4% z27%D5re$^E+rP5k)Z*OTk9_-l$FUo5=K2~=clGL%Ajq^GuQBNyVEmlxzOw%Yw!Xpz z{XI>-B&*IJMfX*YN*@x6^`lsv$&sRPRL9n z4HR-0VO~9>{IyC}!hMtLMaeUGhWM*(CmY>9b$4mkc-gt^8+0SN7(N%ZeU8?4!E+;b z9a~R4P`$1&VuGC?(NAI17pOl?1da5m*+b27%3@h?)u|I;5nI1}7AZCqf*d8O5Xo3y zrIyU@4k3v#!I-fv7`BDH)fL#}6~Wum2**3}h}D^QYxc0fkyHAH8`4?U%TA-A(Jd?v zJ~sM^6?fq#koBzi2r8i&?8t&SiKYFanEMIKN~matxiu=tShJr!TXX0YtvKh3+f1dg zB=M~H%rxt^#Ad%qFO^>VaCtoLL zm&AtwS9de`KQkp}N>5(h7~X@jc2m{A_T`@Y5F^UD;(~?KF{knRlEyqa_uzs<77sjp zSln4f5gffh`rE^|WMgKzk_Mq!0=D^OEZu!hjh1a}exBQ^dM&B8b7tG^(%un5rreoQ^ zU_*VmM&#QmL{w3cJJkI_60+OoM|<5j)X+@5+K-L?t}7Tn@)k?;#zNu$qwFo69)J5h>{gL6GilrqUoKDJk8f88Fy>&s6Ywz4!C~ z{(Zf8IXB$)Jg3ijpK~@r;;Ec2+8QCf0X-~+gw(pgThz%zlxC zxjNfGwJu#MoApHoZtZxbHo>mruIve;hKMZ@biT+DB%bYy@8{$d0;joQ6~ZI(&%{Gn zA#h4Y_NHu1j#)t{5S$}_qfy8B_?eR=(T`+WB}OC&aP%26hZ0=gcq?mdt^k*?aJ?s+ z{IM=a;myJ<17G4RYEjC4BrjqV zfTb|*Q@l)VbgHyBZ%X|VhS;(B7X5Z%jq1zw#cffl=$jQ?E8%_PeQ&h2M%?P|-#!>w zF&Pz2_6TIYB>AH|k|G_PgXi73lU~VVB6+F-5<}WS$M?xI=FCFLs4{3nJjK5kc+9-P zdlA@4-m0Q%8=k>6*Tq~e0TmC8Ku#(8GzKcl2g{p&Y7bfBOxofW1lic=Ty|l&qDnTX zJO_bWmM(ifv%Z!dV#wZfLHXAB5ra_FWHVXBAQV>mH#Y8#treie#@>R(TS&M@MG@sk zC3F__(>DxU-W6RPs7T^1?tKe}&EJk5vPrb00Nr`565(HXXS_%&RQLBm7=^NKkyA!RS zKbK0#E&@=uzPUN0MBc=dFsiTQu;8--C)fFuAMIfa6hK6I7jz31{>kQ-#m@mjr+9bj*A3uc+&(Bj^)G{tzq9*?&Z`Bt z5n|^Dc*7bx=$LJnNaB?k*yS7bB=SVBr(I(-ZC~iGs!1NW{CS3R(f25elB#E-lG9<- zN!Zy1@uDYU)MM|VAZ@;DWBaTns$F@e9aw{i&tDhAYNkWVTPZC)RO;X>@Yx{LOcx!0 z!p;syrR(C0*y46cFrj6tw!txfAtJ%+RjyoES!BVWX>pU$WKZ*jg+L1)J0lY@-3z%l zQ51Mb9Az?hc6Tne`H&q{kdjtI@gqm90+r|9h6y?yf@{>P)L}UFLx{}?(aNhmV&>-_ zt6y{H06Ne{E+MxQhFc-Yzx zI3n3#pSbp?>>pB7_Crczc9QJXcUSl+C@E7uE=a)E>JSE-TY_*oRaMmx6as=uV_;re zi68v<@%}ypwV&Vi;luO8adOuOo$);CzP2o_pFY)m)=E_Br|1!s2yl?pEUXGkBIh{U zD?IH*U@FzUIGT>7;*t}1;A%X3c>2+{EPIZ1b=V4Oz{TT{j8vVxC?sY0H z=PJ)tO6^D64lKiaJX$h6}U|!LmHKjJQ|#_tXof=qh4O`5!{41w5faS zG1_d-(C#;oA3d6V%Fga4Vlk%nWGmJespIS#hksN*-PCorl#+}nf1Vs9c1GXaJ63Vs zx_|@JFMi(sL#uZ`LBG=0KJ)7pT5v1rAG-fsqwwQb?$Qe-Lq%A`Y0IB+m~8rRvOY|q z3}0a`yk-7cNs7l^^yS3tSZYJ&+?@!>jZZkeY9+!Rav~qY1tY`0W0J)5q6#;t>3Bh8`yX4@Z#dMs=0mfO8skr`GkX zYo=CZR7xp0J$|(Fp;zA78D}Eq_~@v62qj@bX_bsFaI)aZ5INg77fi?USAH&JbvPrid#jixP#q8l&%_Xe=~Uux{IET!Vjca${1hb`P!a z1pJPfREQVIr=<^D^Y2Fhm*A;{rZ?T+Cw#Zy0jf&+oPcVM4dc%%OL_#Zh4Fc${xeC1 z<%q4b~jo z-}l8uM)Q7zqHv*uf~r`7e9z`@Y!-SP_{02Ahw_P$U}|2~W`BNeertq3;ogr`i?T_wB+3Shm*apJ=!jpxhxa0Abt1c zJDdxRSir774?memkYobLkWFClCz*`U-rZ{7oXW4O@C46zo`L^*;UUDOxB{j)qad%>=2E?sTpsKvzVZX>yylZnXlPP6oon}k|bcgRtz6Xvap zV@iW7UnJ-Cw|3KFC#nr$%BTZx#^KqE^82M_M%Exq^Td9O{zMC?Lg9 z?@;PvMrd zI#-W)bm0D#Cn<^=ba$L}z_AEd;vy7HhA!U!wHSsX3XrZc`rIFQHqThJtKN%UUv#X> zJk6PaE5iA2!kHeNo#`!O)TSbLsWPrVk_QswlD>x85NcL!F!oolCpm>!*yp`ax z%42&>-(!ta<^>KvGD&B1>6l-I=F#fPX)xg0$$vk7>AUC)`JB&qzqrTv6)$KAwnKg9 z@SXJM$E+4V9q?hcV+VX+TGRwOl2+OPa;jjw04yq`r%*exZ4H9l#NT8mM;befTe>fk z&#)&RY0Nec`JE?sL%GZbTJD{KcYAC%d(cgwkgbu7dOGehhWTBNTZq=fjRvIS6KK?C zeqC%O3Q1D0<!#_e=%XLYVw7>zeTdoSu#&=FcJ6!@#rj zsBYx>HA?$ArBJfq1lDgS{-yDR{LeCg2>*(MJ%$PX(|nwMKgPP(s=ZMf-XIh+B)vn~ zwzdglu-5U&=?Wbs?|gTGzn0%-{+%ANsY#ur>@I2?{x(7o(U)%Erg>y{aH(czcehQ} zeZ6@mBHz`!`ap?hpBJn0*+#rsj^*AXgw~T9gre+$1KUBVs}tA81aVF&kK)=K$16>p zn+rh`=~zVkqErH6O10ZSR~M@+p2(ltO>iuFg_u7({D-N~2Y%0U=|qWxeRs*wy!-z# zW8tz9TCWlGseG!Wx>foJco*{Z>JvQ;bS3Z9SPfcZOB3sF$CMR_&UHAQ5510kfHYv|=le5ESp_6x}SztW_ zbU@!%)zAnRJSv6;gAqJs+Y7c_mMtCE2W#~ffL^euiK1A$)}imj)iYuCWq{cI;&Z|L zfrvY4GE<@?wW3t4a-t6xJ#Qa8&G>R+p-O}S-6IRwXipA%Ov#c*;1$mMwnV?g;US12 zyu2>_@vA@mtXgmlv}v^G7ioKRiUF}-jjb}@ExZ6UxfG9gz`5LZdJ~+FX6|7jD{CH> zuX=Qnq3q(N_ioU29lYTU61TL3u*gfo;6Ra)A8wF`QTpIkZh7n$cC~ZW?dL|4W-mRO z*lyx#K}^8O9EP!(HN$0(8q*C7=hXUrSm)Fskg)bBCda{+MOM6{lo`kJ8F-}*j3JBT zg0*@w^X&sMg79Mvb?VFoAij{-{@TBe_VZB&y57T4O~HV5tjmXP0>!-+jNM`U%Om@{ zZT~QEK_&F4er73G^D6;a?fd88;P&HAXXpoH9?)af4!eow|IlTa&{pwnhlA}IcghV2 z&N{MneZ631M3DG%-1^#vQ#LlHkRD-pH zA83SsfZSvcib%-ot}tbn2ReOWcG>0YAqUXi9sAaEKOd zaW9{+y^*VKu9kDsGaML6(aITfixZ#hFN_GZ2B)P7`)4%uTqq7*1!3p*IT4!6R^XZW z>%SuMV-@-1YK^>}gOHkMsZ-{G`Hx&84&fL3*VM{MID>wXrwz7EH04<7yu&inJ_~!$ zuuyGyKqa=xpPWanR@Bb*`mL@!;>o)sQbnWf!tK6>jdKWKUYOA+A zy6Lox3vCRv!-Js?wjjZ1_iS>A4kNN}!_Y7Y3A7D?>H4w8~7H!8O29C%1J^6sUzae{YKX-I>3q3SJM-o=*)+ z2LXxc_kcvwg-*qj(_5(|=U&R-n%}LTH?Zw+uOI&OYOch%V0!)0{HqLR%6iHo2h>Y> z^O03_YIR-RLtG}Fn~ZD=ot=B@x>Sv>6Bgt~e6K0i%=PDoqH}bUIx=ths37}G9uXkd z`qF&$jz(f79k%}#UFk&E0K5pX`UoYH9oYwTBd2Z0WKI(|J9UOJK9+Q$3+1Pb1`PJ> zR4fSqz___{%(?d(L9BBT0gR`V@aAMkt+>p#39py=@sgSg9(9c!51@9(?y@q31E zTme#e(Khi)oXXFhdBm=KWpge?XYCf!^J8~P+{@d=x0M-@a8vFe-X`A~5VGC~4hdm( zP~nAgx9$RD%EQeznwut!W)c1oSER3g{RZKDX|e_GZn{%vAHNYu&0*-fruRb{sR^LZq;ye}y^) z>L{z6JD7&!oKEf{G9o2O)X0t^2L;I{@slN1Mm|8Bu0Eb4`omS|rUQbaPSsv>u0&be z$VjEhVJ)(!hn1L&Ov(2s&||Tt$W?M~e%=5!CtYd1CF(->x#zozv9AH|$ct3}>#sjl z_xEf3{)x10w5{QT=#QthGs@FJp-4OS!@` z>6{T{3!NZ$K*#W_t<4n8eS!4Ff7l}-7xXJZ>|*zm6fv-AT=v5dqgVeo(PuO zj`_|U8V*jo8hyZKjt>EI6woQ7*o3^yjkt0ygQZOoRdsd6t>{O{&IXHnHM?TxrtFxT zWMj+cI$Z)qqvWg&yDei9=H{{WeU`%1+N5y^fX01)_r!SRUImeMMAhd%*MH^$$%FQP z`Wz%=dM5r1syr;{nm<0`De!=8k;KB7f#VJX*O1#be1-;kZFn$;obBBLBlcB%$Rx``>mm|Il(2z=cFH#0S)2 zYN}nTRx)GBh!~U3c>peu(Z2&^=Yecqps|g65q?ylXt2>de7L4=i3u!ZI;JBdWr|*r z!`dlx3_nF|4X6Mk_LeQO#J#F64r`67-lg#ltAJTx>>=*y$2e+nm7VK)f7Q(Oai@c- z%u2^4jwtOu3EaC+iAOnR+|o%p6pl|0j6B-i&(@Fma~aMsIz-?N=fTA2KS#>Va#QRL zS+-$OeDPkj{`6-nzV{eH^iVX1DL^>F`a zgT&#xuk8BUO;t4}Ijq``I|@tO1w9~^c3y`i?i}5rdxCW?K>=&y*FU$pd1G){YDC3x z86J%~GZI7FC0{x~MIp(zU7&(05=5)lUKp-w#f=zC2bvBUU+Rb#GEgROUadnCAtcgJkbZJrb7nmAPwLU#fd6#|`HPiS;C9*Q`&M!q6z8 z)=_Hy%!xI*iFDBts>%u9izx~PVGE$@Ynv_e;nBJS-jUbmeU@tz9bWLz$y(iTBJzB! zZ0lxGo%_WeYj#9qqErNA40pzJmYP^nbkEC})A6&gQvUzv=?k7IVnMCQ)A))~iq3BU zvauDrD=`vuTYj-+`I)QJ1VN9c7u$aXJs?qscf@WL*tZ$LEg1z2jvB^Df8Y1mucv4| zKr5G?PBhhu4N5CDgnMsvS0y{-Fdw7F!$g?-d@Iruau&XE+k?h?T-qb3ZfIG?ltFg< z@cCaOQ#Ge13ktOT?S{Xc4j@Yj<&4U$-Tu&^4;)uo@w{U=RnJ+E`+wT}j>TIR%Uk)lnMezl91g(2aSz;f=1GWegw-N0z4S>6hI~6HHCByI+`_EbhdDoi z_O4KUL}(h0EpAoSZdl|`TsDPcBsXPTl_BobAqWspX>ux^xeh|{go|bl}lwWZoRek@PIxuZPrrNR3x{VgMMk{ zedIq?)mMetckp85mD*se8bs5=&CTsg@7N8dr{-?8N**0%R@xLAaa*h9H8pts^PizXgmFtweQNvX>B#`_ z4Yv(|+nUh;H@={I0HuTrUA-|W3_{o$f5=`J8jB8aznkF4{$t%a!=biBvA}?UwheqZ zmSkrC(QG^6>}IN@FNfX0GWJ_BDkg1-hY7ph=DvJdLkgRvJKN8)Cm`G2AD6GM_+L)B z@9Ea_SH^vZb;pe+u3D;q8tbiBd^{kiT=fz^mi{7B#W~ z&{W@H$^ar?;y;UZ@nRM{28;GIFLGY)l(0Z=U7bGCdtZ5OtE1QN4h`dbNG@{)4|Gin zLLcn$PR^)N`yNUF@Jn}9O0x3O;%WpLqeEls%^?Mpi1o*tH3TV|36cuRz+WQyR({}6 z{pywegy*9OO8i-;y<(fESI{xsU|Kq`@1cX)bv`d%s0Y+J63cB=;pgNT=U0`B# zeYoQ9+1&%bqvPtTafvMcViYScFTHZU3_!0j6)?9!PVI^~@uGhK5`2V*(y8Xon(}fp z_KttFUb7>a;w}J0wzc^l)XC>FW11cufF=dxr>qb_PS=D2X3^%R86<-IoNN&QK-JWp zV}3OGU=;#ccMMsM9Y<{{w{&+~z_DXq71wdsoNAYE3ZVPQosaL0v?F5`!Oue<^7RvU7+Cc|CG6{1n;Dq_*O@8M0gcAGH(n~eDq86PQG zD)_h+|Mk$TOwWd=MKs~wry;0`<*~=0y+Uoz<-Ou*@XfW#W@;b;VI zuv>^S9dVQ^nPPr3_O8fg?5w%YcYv?mXq}^6t)*3}5T43rIKAoQj)-me$7PGB1aHNz z6-)7H6)@YJwjY>oOmh}o-Ky-$?e_#?Ntg!!;x7+AxE;X>JG)Zm=E~RI<_d*Th&L12 z>$MF7BXm9R?M1>iNPwT%n@l*1R2F;@tNc2bMcei>`iZA7ead<04IWpOgHpj32jr)- zs=eUT;uulZTf)29f<=yd>+e{eIXS5^sS14HzxbL^*FQ+HbOB^DT0l0V<_icP4fGpO zH!4i3>{nwMn3ytM*YB{Akelv6eNw~~H<6h)-LpOBU5V=Jju~xFz&IuW*MxNlw5Lnaa5&#(d&>XUx3wG=qN;X=hQ8Cctj>`gjC|L4@GT~5jFgB z=L#(s<(Jp2Ae()aU=^GBLml93vEHk6A-`qxlAM59i{p}t^K9t28{@kA6S=LaxP~9K z|5rebS}XUi$d}uek^sNEuN_?z)kD%;S5P!#lCx8n;dJYgZ(LsdL-5S~Y-?45)SB=~h0Aqx`o2^#O~`)qvc&aTLK_Vo!uJ82{89>KM1fm4n( zuNnLz?-@Y2=S6PG6lS;A-I+@jD`tKcs5?8ebq6nY>jEYk*}J@pMLtCMF@n~;tL}~k zL4Y>o4Bjk^cX?ip!=r}c9S@xAW)NXzCZ6XFxZ}q!(?2{=z$=ye@I9iawNGL0j*rP+`=Z8SgToDu?9bYRMxi zwN?DX&bPU8pH7|ckT$;v)I^;c&D~<4HdHu5-Q?cp4ZsVOH z8oO@kdPN>UqG?%p06v>1_{oD8T)~&JpzFI?SP(+d4(8A85Vr&7Pk%ESFWjztF1U6c z3p6-ye#q8h>~wppZfTicGj$E#9z)pK_GwD@?M>h4BHMU=7g57}2=@H+j)=Hih0qH% zogyotL!9>@y>=G|I|1%^KiQ++e+jDr4xsZ+vwMF996o7nxyKhIkw<5;816Qi6D^Ed zsG6nS-~($Z`Cqx|IJEZ00(G#}&`}JqzqXnQMBh6_ND;S;L(9GA<(yJitP^&&GGYa_ zg1gO7)WszLHGIGIYo9e5NgS_S21FL%w-KMRK$*keD5kIz^4zEGc^8nN#L3q6Mkk=ucod0oZr;(M?taj>yJp>Hc(yfNRMuNh&{7;LUjPgt*FqC!_Mtc^;~|&4d3k)HckE*S3g4NQ-6LHam&DpJ4@vqx@LtMQ!%4BF5!nZGX$(>Hlo!y)r)>tnm#8nvDd@HWAN6)+Vr%KpB`E1=$QleG0eb3k`L3++}su z1^MNwhrm?lGUT`P^=IF=YhQ!I#wfv`$$N%*nqjHy-iAXp2Hq)RDbRyCFy`r#cT|}f zN8$u7SX zM5wwf3G-iGnlG6ZxJbRsZGd<~CI^K+hLXB`ZHHl}SNxZc)n*?;|8mXqgsqjIp^EikR{PIC8bT!rV()2(+f$Uwgi{3_F0hO9jlB+zDTjd#NK<@ zR(MCu8Wlt1rTV1i`ugIt5aBg;NHiq;>-AjsL?>kU==q(fc0?ay>%~Z4pCWkNF)z3O z6x%R!u1@v{x%XTRVx_LB85R?>m=wD^DKupLqGLIatKSyJ>nJbTZja~ zp)Tg`&hG3GAu)b*?`#%O0{*@f#}R(gJ#?qv$B-8^IrlZ84vBaca>>xTOKrzW_qf(a zQNVuIeKTFa%=PlObX0G8U))6kduq(5fgcF4`PQ?PuOnDZdGbBROdIx-dcG;${R)xY zWae#Nl&3LpcV{B%{JCnd@+_JAUI2T3u4R-Tsm8iW-WSLT%G4F(p0 zI(1kj*THgA;2mljnwbV`b^*&GC}Zmc&)Y4+#6;%)J8JjwAS=A$U?L2C$!<_m4^z2FReh#ax+}uajk4OnxQQ@TD64@;*WKM|ly` z9J74EVOC~W*7dLFu@v$3F+CZ3J{7shDc7igpf$y{kgwBa=5S^%%g=2caf7pEn-}mm z62dNR4VNmFcPziIst@J7ZGwIHNi|gSzPRIK%7zT1cRH;6A3#((`3=K6jfUloNHX-} z{gZ{|M(Ap9F4x?-KX|EI&9fYObi-z0J!G8%BvwP2-4?NR5->2%m56-b()xW1Ce!C+& zbXNDTjKteo+QPT)>iGraHQepLdzD*P!bqZ6P0Kl`+CFy#6rMN2zY zxi{%EVL>|W(&egLx0OH>z)5$G0^FRkz=Uo*L579@_g&lf%3&2O=2FBJmGi-ij z@`N6G^1`@pHwPu2n`YABW`5eqM?OINyNLbmGZh$spL)ML;N>*z@+aP=^ z$jGc&bNT=Kic}08KlWHSwq2#|FnIG=SE@6m`4eb?u`YJ;x{bI)N7qPw0e{m=*fnJW zMJ5v*?4oz?Hwz_6N})3wpZ1DwW;WI|Rd3hLoY3keS1MTVH#S-A_{U+}Iei z>8gcua2P8Up*Gw6`1Zb?W@F*4F~!_tQ) zG4kElON(5(-aejm=@Ou1?^Uk9clMZYzsVpFPES9O17|)*Lgh(FO62`iDx~LHprtBp za}VRqNNNx7MShFt12?Xvgj&a{+46=SCFnH=6`NX#zj`Is=TZMNlNe=5@IpCcB)RJ`p)VHZx`HnA2NCxnj?Sm_Sj;AdpbX-=SpcV@ni%^;Of7;cO z2@IOCv7Fn5y$8vOn4tYvOIug>3CN%hZwni@B0WIW|LSM!#14>nnI;wXC7x)!>J=&dYww1v z;V)lYK2ZqX_6v~Ek$QYiPhR(MZCW_LR8z!ziwCP))L0~+W*~{g=hZ6%tHFYm;ZjM^ zxe#B#Se=`n-5Cv97!};X9#ge5jUJ6SY8=R$c8~K#{LL2JX>3w$D{*^R<$pUD!7g!q4O9xD2n^PcEVx(}N3vqEr-sCTmeGOdo4 z;tf}py8E(NJt*@N0)a5lwu%CpR|0yFpPygqi!wDeEdnVD`c97}ct7YrRois0(1^$& zZ-2&>Rj5_YeBqpAp+2%?_gjV*^ne5tlYav-w2=TK)tf3lv(wNm{O~gIDA&bv81%I? zJ^2^T~6oFQCp`DB60 z3Y)IVQ4Zud&jkF15_(pp;p6*y*W;G27Zn!5+{IA`!&x~1T|KR*YuTjBXGtET!^RuruB zy|RLoTzwGPyrluq9ZVxL3h94#gSD$PhIoIxxT|H~mf60+SruLIE9l2?v0n>`8gmN@ zc=Lu>QdLze(vlyEvtw8)os#fhSh?rl!OqODV?!1+_0s~3*{b|V-|3rmrkLue_1Jt~ z8K>AECnf^cv*D$hGDj;C84~E^m7;citg}xK>!Fv6xnELdw_E*tI~wybJpH>)5&H6d zz^pt_v5g`bh?UuNNGs0aA9R(tRv(qWMGGPM4zI6>zMH<5`l}dAOHGK zP;ci|Zkz4s(dtsTudNi#ai~t=DpwS#D+Js(hKPJx%1a zqSg52y{@^N=zCsBU$TT;BR8=gBQ5L4DZDXXOg$5*?)UDE9iHo$3m+pQLAQB$SnIJL z>e&R!VqBcJF#Zs$vLGQes*Q9sH5BP!o)|VIbveWH!@^K>KwuzOZK&uY;FK)2qih63O&M(HSwJ|D@HO&+^heLSiU4JbZbE^TB(GA zwpzJ8W6+OSPggVZ(Jm5h$1tj%xXW+3i{Jn^CQ9WHs-h^k(Z{iP|7@Emo13e~Er&5v zme_g;mDiiQV`&-u(E?_2WWU$?}5SA4p9T`+zm+dumFQgr%%S-2=6G zLVePURfH~+@4ox9(Ej~WNw8NY${}yYcZ!-kiLV$xLi+pr+ZZfmjoOy;cqq0axh%(n zfiss-ShU)+^UW(i1PgLRvfSzlD};uA{ra`Qa;?tIMjQ2VWx_)!e)-dPAQuImimGZP zp_ZdoT6(@{VE8fh{vg^gWfB#CGj4Q9J1Op%&W@k{6To2>Vb-20rU1lS*17$buLVFhnOGI;tc6_$Zcyo@?*bJn+%6LD3r}XJT-wZ>4 zXal*(Fk(!nlhBP?FL)%=ZR1|x<&K$&Aj~`h8qlkh8|To zKj#$u)4LCr)ppbumWg+Cs?(NKPzpuK1AQg)1T{1BGM?K#k+sTCAC(QNZ>dpCL|Yc~ zZR!&ToM7M`)AZHEqjC1lRZEoDi2YuR+|IiTaFU}RCPH{_eokM4-%v_3;YpCBY4ATk z^Q7Kt7V$jt@(sv~m~W(OW0^aC3T$bu3nr(Xzx&II<_U}ZI>F?+qOqkc1GGe%z<9|O zunH%BMj>T)5sZbGicJPajTxm6CND(g@+`^eDQrHybp6wd7%WRr_7^4Tk!w`R8_cmY z5uxnPy`8+{b-TVka{Ey(|3H%!o1zimtMd0!$sUp_F(+FY#6fe7;Mgm&W4(5)F@8|H zg{C{zy%IS*cqCN!O-14DZIre+edtlwTYk#o!Ths6Ls#HIe49*_Tix&0H7v)}LYv7D z^iGZK5Gp-AJsn=O$E!_)Jz8Za8EL`TmaE>*=AfsP_B73b4Qu{Cwg#W;Lqjd_29uM` zVByA3VkL8mKL=xo4L$(qkNek!_r}0@j3ODMXHRbbW^fG%Ky3S*eHZWY3*8xSk2v1NwhQFkHpwcAuJMV`F<_^f(0E%~V#{QQ|&K zzNo5-L<&j?a{zOG1(6>U**bStV%VoNg7(bab-)tFNPPn|x=~r*X+JW@(yXCA0}UP> z5!E&~SEPbZgm!dvn1dwPxqtsuih|WM;=9a_kLV>9WMZgOE5DJnzar$TBFMYOh}8wN z!`izkr>{^XMMORC;uZ+vg*%pY+p3B|1DV&3>P;Edde)w;g?6+O@C&GN;`esM5|}?D zics0CV{cl)HS|?eq|G`rHd#BEde*3srRC0TQT-x7xWeR9^ITXRKVDxE;zLnC>Cf6^0HYm^A zRHQw*$Yt!5yZBY&2nKu--+dV>_Tkk4fS`3X>`wtg!uZ&<-%m|wM}+d}SVl!No7$*f z4_;ognIcE=%>dgAT2TZ^*8)Ejgc4nm!V?|BUc^t|eQ$q8%m~dW+h|7FWaBwLaWH_+ z2^v4ZKK}QK#D7->R|$zoN2&51XHQpR)gkTjLqM+rC0M`sJ%|J@KG(2$1YPJ6vsMj- zymH=9+QhE83mg_f?zWZ!gXGlN?E9IS3D03;V{bO#PYmy3{#PgePrW1La{<6zc%Sy= z@y&I9$rh&q4(c4|m1}&?417v~xjfZedxq>OpViDh4RINH>3cja;MKhQRKc$+$5}U_ zFpHBSl_pj7x)FiAZSU$0U#0S!JxgTu=xh0?;gjVwrWULub*A}^_Dhm$h?Z|gWm?Nt zrh2Z=@{;zF+Ll55DAV=>2nd2mp)%kmeHGaL18?~Q4D9ZSfbrf;(bKEMY{1{~zrBxz zWn}+mP2lJ~NCKSgUClsvdY;<%O*{-{$i!8y03}ju7zA}Nv8F`ZNG8n@5bs~ltaW0FC z;Bq!~AQ(vVl~sY zS;U7}VYlI(mKJ2>bInb2pSiIX8Mw1!B|Vte(Zb%vcjJHLE`Es4V;9eW3B+uNa^4Y- zQr(9igv~mX3dJYjs{%>>8FK1c8Vw(UfPwHSTny_akZuLlYGckr#%Q|>zx8vMHj8+wNUhfYPX zm6&GOKlM21dlZwHm_1firh6alQhgm7I)}?|x8uhLKl;CjI2iHb;VY>iM`GD_m$rjy zK-FISy^&gup=*GlMfmnq?CN$Pu6nKNDdJt#eK}qrwn`xnMO4b!6w#kVYMm@_jSnQXs-Hoik z#cO2uA&`RM&TY;Oyh*y|MTBs>N)(~+Uam0cGk$n9bx$y7d9T(TZqwv6#C8O_y(??U zC3(@C^`x`B0RPPRW~A6?uj>!$W~y%2@Hl79m5SJnHJJxuE^3CKu>SG&eD|QWv9Lku zDAEO1n@@ltFCR5KCCS{c%V?+CFfy?#^R=dym}wp)nr(JhepGk<=S|$W865Ii>XXUv zwH$G3z1V=f5)s8At@VXSE6K33Iv~}Lv3vZo+H;Jr#4oN3A`QRQiKFM7*f<%h{0vo%sDs7Za0WlLOr z$b780e|Ki?(iFJBEh-UjbES6^t87G=v}(FXea-57z+{nn|2Eo_c7i_$3f_lTkphg& z(xmN3Xw~wRX}U_RX+A|)@j}Hh$3)e3`n97Bl;=~9>ZNZS#5!7yMiMuodqQ~b8>Vw+ zz9q}!;B5@ZQ_(l+k9!a&PM>zkhWE2jilM?6Lt|3?zyi)lLDAustdZ$<5IURa%$+pe zk)VfO{Pp^z?f&-=$4E{4*)xSVV|L}+a5xvga?knrGafWOiR$R4-uLGj|LqXJp1Z*y zROIo|KZ@&J^~Vx)o`55|#1Doi7KG!gsOR4X!|~G7G3?Lr)-&@KURd3mKQ|;AVJb;V z&neBv%Qv7|wj_N$j!&uM?Z`z=6HzMD$Q2>e{8H9cBJUTy)S2(c%J4we>74=IF>g^o z(OIY5*C%O#-(=8p69WKMZMKJ4iODDA-9s@bm6ereKJ9PWY|RB?q}VIn0sTMA&bDR0 zzW<+(K9r%yEi_PBg!d%qwFS_!RoO^shyZ1x@`+Kp(3|6p6_yd0h-w#8IyBR2a;wJs zJgPON{C%S&cTj3Vb58w4-SKMNvb8mfh_dx`1oenT_PTSe#R&!tzfWP1~Y`WIu3N4|MyajA8)Fy zej#`TvR*`8)P(&8Ue6AKZ90dXPbnAjKHymx`{gEEzvLCd?nMhvBXzlQ?!$XDi-Hnt zK@u?ErmWqtpmI^KtWu+Y(8;iK1ZEvrXC!-nJ*x1-MH`<9GvH(rUXPW=B z)bckXtvm+x7)cFB(kyAtPyThW3p)4z+5M z4rLvWa0Rl6fJOP(z-VDAlB*GiNx~0xtzbgS3Ik0gdJC(mSW97dH9OS+;7WRn?L_%K zmICzA)e`<^W8)8PAY_LzHpXA%fpP~Mb@ML<1%$^s+Sw@@KFx36F=e+|9>{%SyV3_n zm#y{DcRBt0d;Gkl5seR_E6{%5&K-h$aT>IOxK@6zvT}|NCsO%` z*25W4G;j#ZevK0ZhUIm@I9}+zE6lneT}CurOo!t`eL9qJ_w*2c(`xSIMVzX7ZqtvX zW&?fCg}v^GjDl)GYBGYu2 zShI&sP0K|0TI9P(>eY)yE~P@IOi-TT9AZ6x1-e*j_)YfWHruXbj1=GGP(gv7U=GV^ zZPS;ftjpZa5P7d1-&iIt4c`lZPR54RC*RZ$-DUpS-{?Q?R=XM~b*N_E?fGA$jDGOt z?}8V6xc~&htgD^2GCA1;IM){RL3Op?FoIec4`4ymI#aEMxm)l|IAcn!G}yhf(#)bo zviBynY= znnvT((r_&3$+`|u-z=P*)DM>qFaf}LUf;=yC&Oa@=wqv|6;9`JQ)Xs1dI)&6{c7k& zVUHEDzht?-ySo6uhI;}a-30&!A1OqG^8xC(V(ivOsB?+2}2kx%c%Pj{vG0ib26JD7vY!mRX>1d&V;P0(4_&2oXj$xZIE6!yGR z_$#@BmaU8z+J#or8xM|zOqS@@(gUxgDmm4Nry37U@@rjuY0Wh^X9|Xs`<|blFVQkA z3TyYUbH1mMEjRQ6jBMP{HG6hj<5if4Tsk~vZLC<`*(K%Bf4R7L3GRG-(wQDXbY^YS zXiK!Qgz2efCusK=K8XF?IesyVu|ihe_vkStUB00e#W0~Q_}k8j>Y@do`t)lnwsh_D zvYaA}F8wYO+isH@BUPiA;Unwa!HH3~ZA=YBA_=0{A_)(vo3L3;ku0WqP2rQ44xy~o z4ndNMWz2?_qro^&Ay)-NU14c7j}fI}tNsh~C8l)D#=D{$Zar31YJj~qmc>sx>WvD8 zQiM^38*(w+->5VkGWC&hOXrujKXd3Q!nP_ICAJ0a2jzBjX(g1v(i9O@O)z4;T=Ckx z$SAtazz6!P&ETWc^yVIH!FwHyoHvj;x}3&Tj!*N(N3t^4y~Sp!Z?T}R-+N=jn#a+K zO`|Et`HJg~NgM9#PZ_)D){tCuYY6yz6*Prd&Iil@L?tAboEfu!D+BBwp!?A$BJ4Ji zIY{Wm@q@>7`o#g_SODFe0H)ZMXCEyC{J#Wbw6*n-wflXt(LE;xH0Dqdk(?!rnwkDS zWqv`LF|ez^?ur)}mA*R}9>22hxEC*(r0LvkI!owr2e1Y>|qVDEkBzQUxhL~d7sdD+S$HSPhIG(#cEOZq?C>D;`4ZT_96I%V?-uBgR+%&c9Ts{69*_)pOg3B+t2~ol zzVv`+bz>TymFlFL`E!)~8A<7Ju!13_Z$aO&nDI^A)~Orgt7UN+0tvhK&vcOGH0-5_ zU6O=G=D5QSomAB|{r?|rZy6Wm*2N7gf}kiUf{3IDQUW3>-6Gu`!>9-dNOz8ih=_Dc z4Ba6}*B}T8DBUU23>`zx%)9X%IgjVo`+lAe?}u}K4mub6+N;<4ueH9ahbTAQDb4rt z^5jeI2cTo(lb#FT(-Mc1-9}`We1{P*#Qp{R)gV0n6ysipcsLLCwei%@RVju*ON!8E zm3iX_j`uxyMTnk& zr7KSUQ&tzglH(wyw9Hn=`uREE;>GnB_pyfqi5em6_o+~lo(r1G{)cRz1LeW!@5D&< z%iB#mcxUiK6jDeIl0%eTVPi*-+3o^JO2Tw4ur47wogK9V46S2M{m2#9WkM2kn@0y9 znElRdrL}X^O0s7T`UR{8Y!1M$86}VP2#ICA__IH_3;wqIS&qz2 zovr(@jDd>$O+tY2zbB}vph!yl&`qFv^)7^*N8Km6NaDIqsTmd%TAq$`if;js26p0s z90}S`juA9P^j#zRnS;qZ0(-onWA6czPQ_R{pI{z>b^#oFadEqg?A(#KcY9K#*#V_M zlf?eIa|oDp-#q0r#;9Ztq}(ha5scVQSiR*Yzf21zoR>k%sq&Wmsiax1E%}p1Q+;)S zNnALfZTuw=EhioS$gBR#r7gaNfMxIy-B8Y`2J1zH zfcIc01Y{^>HsBFZ@<&aM@!UmW21iX~Sltht8+t?ZPTy-Y0mJVJn#rK!92=TOQTI@i zcGChjz^k|%U<|!~SyB#cAmPgQgk7u+$sb1`GO<4p|0~2ll(zn%gVVBSLDcTgq5eyR zRdNZMC`lSdw{r!YOB^nG&HVF6GU-x~ojH;7X@a&SYn-+u8usF{6qxBw6MZz|{m9q( zYhj8*|Ix|^X4|x(A4B?4J_{)+;=r91)d{ElgVW^XQGLFQcQy}Jb}tt7zZ)C)Qv0<0O*rTU z`cQDD=BKwVI&;*Q=zYr7BAWU4C`u zpNmQzjamqa3XuG-@g!En%?am*q{FJmp~yk~QeEN;y2OY2%J;uI_Q~PYTD^TbDtYHd z$d$6ED>eCkls76aPKDwH*fdZ|;;BqXe=%0axmNMQ?*$tUea=npFHK7$dVPlEV~{?L zjGUaR9M@X3U}278e4enc?9P|1f~#Kl!TM$&N84J|4RyQl=E=RrnQY3Z+m?b zju@8rJ?ZfqW|4s1b*wu3zb_%2#61N2*d`{B4NE^`+@A{nIF|bH7lI`32@Wy@)|R?r zQY$ElBc4?j@rBQB22gRd=;+)jV}3(*%UGarm@7b%LhfT+^ z>iuD;_+{E#lPe@c>MJVD$@&WMA@{eV<^v_l z^=qm=@fYP<=wu3?vQy{~xI>(z{hjwx^V#9$OJFG>H@ZV|-9GC$rSilVoN`H9s{KEq zM}OU(v^rQJnEbf+KW2ISa;XHV;4utQUsDDPBzTB?!vuYwykp|}z^gDtDj?qtVH;6Y z>r7*Q*uy%9xUEm)! zIzAUo#3R_pcioE?{KEzRCAH79Pl&-ZvUs-z<-G;$XRLYK54%<3roVi@6Qq`FExw}1 zYQN&m`X*~DI;P2jY)4cczqKmCDO0dWL$Y~@S95T{oJb7oapl=@4tL>bb0U#Z)340* z533zA0q%pD*T4PeN5A`%Dud{th>SL|_Y4t)k4kYvFw`R9)6%nd!&J7>?++r0s7>ar zas0MkQw*0D30>*(>rT&zX9<{BZ?Sn0NR})`H&46#@py=0ur1&v7AE6Ap||Ry!1_y% ziktFhf1%pHUxAJc{If9iZC>S-&iIB&h7QJ|S($bY#ZBJEGxGQLXh^PnX~;fvqs#C? z;0XVUS2R($lhCTN%d|5YwaK*h$5C!E*oQNWKe<;_77!>SJgWWo1%VSMC%|6oo#pOZ zTz^Pu{4Gia;4yA=i#EZd=>oA5G;zLK5C$$e-*h5hGDW&Q8q(7;$#48|UB5gn6&j>@ zyC7{kut^m0pd@FS_j>c${+df$WsXVzpnGBfqlR~NALCj6rQ5%mgPW{1pt*6p_x$%# znFhEj=#CIkuz>xX^+;-yR(PHzRrx23!-U8=x zI^)I3e8swL22*tSk2D-L)4NEn@S;W82$Fb9S$+k35*wsIdwZeyXubqK!T!jB^)XS` z^q(gp=2GpC%QgR^*%SSTi@m10uMr)aF2yA!t=Sp{ZsVNP|23@#RWwxg$hEMeh>#kTzdRzCKsT2N{_RKl!@C{Hb%)Y`jF*aMAGr zna7DZXI7vR)D-!T3o!q>RrhPRTsBCvGBdaAIVvhDik|JME-Wvs7eoK}jlUm2#|{Km z$QZ?ImVb18K^EHdF9x-f}S20jCM| z5&tQ5bPnJlY9?|WKZ*ZuAL9mIx?=ndP)JEoNXpC8(9Clk`+%AM&m|MTyp>lm;ioeP z_cf-`8Dkj6lws1o0}wN~e{);>4qXWb+BE^2;>56}lo`La4Mkli)a8{MeNGi|Oss z<_P0#^%lqIOmAFt3h&_Yltooeu%LFk>FvLN!%sp#k$nhO3aF~6#PqKH;J+cjf6Fr2 zv{#RPuHRq%H$pGoN3g!uj;!z zRYw2zsmn72V%TzCs$)8+UI%Bpo4@tu=VAUOyStJ{vfDi{Fz3n-_U{&%^&#^|dj6Sw z{(H(o&s^A2>atCx)5-5l6OSN`x4J!+?$U2c)2`aIsa!e3Y;%^I-#L!2ky8^KEN#~? zI_R9ebmzoPi8DXFiD1`gdmQ2Z`il$An z5#heQtSiXiL>Rqg@3G4(2)vNhlk|{(-PZ9(Ve)8xhj(CC6{BEVX{n}8$>R3Qk*?og z)<0Z(WRaEDyHlCV^E>mvwZYwr#_+M{Ldn+h(Y0%pP9Eu{OlcHs8nRCkx~NIEls*Mk z{$z~j_(!TpG?nn5r~UG$y1BovtM#RE%(0Lryc|~f(;(!ZEHXiO0j0D~lE(c0??Y8- zjhS@BI5Q^qE7@B^@)TyxS-$FKsV2{njIoGe@1rx1hmG zRz}y_S;aH^OlHy^KW~Cg2Jn;&PWPV-Bf;ys=@zwAFa*)G^dCV~$yQ?g`Gh}E5Qh=G z==rvY`sbC82j28`Kb&m5FywHr#V`8QV#{_^MZc^`vN}tb-TRer;LQjA3 z=gSw>{v><5nuih0@e!(N_d5hUGjP$DN>cycUIZ-ek0|1#>7RhmxYB>?DN})|(NTS{ z=sXM5A_x1Y=za?AA2gg72qoa@GjcX`kR&%BR?{NsnOj5lk?Y>`S)}qN6S5|m;Bs_E zoUWE9V##aQT=-n}TO!Zym(e{NE7i~}Ft~2spBnAC{GG(*)cA97s|EOct!E1r#%e$9>(7HS5ndK#q^71;v3TqR4B$p7G!)16P(}0lV3~+cx!|I#FXgqhRoB z>8l*SF|L%*()C78PnC3~*vmSp#pnW_iEwhLJC{0-?ahd$vW^%-^$+GbSUoE$~HJ@>Jc&}v_d(~w4vL6B3l z?f>BPB8j>i^9AsS_Zri=5f54V)#nY8WM^XpW5t5o`-PoXDExx>Rrw9mWc?Dt?J~Rw z_hH!d*e9)pYE+D_uCCMTdqHiqnBC^g%IxLs2j(K$Y)vK73H^=(48z_8kHO5Ve&rA(wU4yW4%W-OM|PiY3R6_ktDZq0D&P~UFV zG!?^Et?Xwl`)a>!9d5GgU=JKE8S~tUcbe%Ru_WwsamN^{8mL?xu07mfOI}(Ilq9ll zW9Mn>lA@&sM9ITe?O}*LFJx2lMaoWnXy+fvOdr)ea9W>>!qS6b&%s-I)m>d!1;(n< zrqsb7+H~zc@T{2L+Q0ad;6C_Ez#gHUX8sW{+*$W%=KmpK`FJ;PTTj-$AdMjE7@Fu{ zxva5dQ1}kPa_L?CMEfA$vxLqCyv(AF7&a~W>FGZH^Y)zxM8O2XTO_UL=a#$hEqC@M zY}Ew1J=p);C#li_w&|HUitT#JsuF9Ak*=~JipzFdx&u?X`Pb_D*dj0|rcbrIuq_*dF$pf-0D66zOF$isr3~1s;OV4wlk_47jWAWs#jY z6|ITaf(4nUY#eFIu_s+-`m`jZnuBOL?MhC-QsJH{FUP8!+SVo;7)3-xvZFvVv=j!j z1G^vbHO8)r%I4EW6{CRj0ZHiW#q7)th=5be%&@{qbs9fh^hB4XsP)LQo%q;;SJPvs z(Fm-^ayp4xoE7UuH=5O&gZxojq(!>Rr~VJaLF8Mj%L{k2n-9t`!{!Ao)h;`f+gs;3 z`|o8-IR0=j1TO*uf987pu|@xv&h;WWGF|IC%b)$q{t9WNE*JjinA%^yC5k#b2t3L# zl-_;*UBZyZDvc{-Ie739`_l`;n;sR$J?f`*yoz4hHr_wk$4_M637f2!EPC2SFL6VP zuwN-bP$$3q@OD;y)|m+8$pty%4kEm@?H8X#-JiLkoq=!mrFNPm#&)Upd6~w048~>i z2?D*-6Z^D)3caz#O=z_KeclQ#g3RTfc@e`MPzS4iexOtmj4ijBI=$bG$$^Inm#w8_ zXUlr7d9OE0=2bm0#ZQ*R%N*vu;i6ILpTP9fIg^n*`Wy1MM`+vN5iOg+&s78Y81^d&S&m z(~NlI;)?aA*e7F^4o#lb0oI*}oDXWo2DjJ@?y6Ogi^0?~;FoXemRo;Izc5@0cR=y2 zXZy4+&psMa7MSlvtu+vbwQ*L-qeQ-)NXc0>MUuF1`#l-xpN~HOLxU+DWi47|OnxE2 zKVm0Jhnr6278ib=CFq@bprgbAqF^`2-oZgC;=>=X@IN0Us!2Hb65T`X-)?3yHLaSP zJy`Sju3`T(x^J4IERPG+S<<)(91=9du(zUU1P3I#8+GgSVS-yo-)SWn#_s6|%RFs% zDtfNcyda{(17nvo7Ie>@VE_X2*bR=eu0OL;vkEa>!p=*HMDk3y_Y4M&^6qD*6k9nV z8kyhiw7F~ycc(SgVgis(V|NDz;cj#KIu&LSg|rnHUF^INnC*fMf9PR1Z?3Ds1Mk-X z&9rdNnVD0x%oPR#9p{JlnuNEeDzl#QsCCjt>EG77N=Yd((vzVO)>a(LHXoFyR~&o7 z-D*PNgt!kJGq;Z{281_wY+e{Sn8o+(rrdZ%9a|XjN zQY$O@?U#m3$lCx&+OSv7(IO!5Z=FOW_wW@^*PYKkk^wUFXWqMbyQo6ec|BoEniIYlr^cc&_Bb;7q+7~%d zYJU-kQ!!fjbk=iKPiR)CUfn1Dj@CqkqSJQYL`0Y(KTB%)R!Q1Mo6Dy7NVeB*p&@Z- z)oQIkud!8|LB%fR1c3z-y9c(B>)nu#zA!wo+x4IVRf&9Ss7Wb;UVz-T94+rm+C~nv zo#z>Ss$O-FAretI)$|I*V>NseyAH>iQu&Wv5pc}CmjQqEMqqfvsNaX2LPNcy?dgTW z_0jJp0Vl9~a~?n#7ao%&sD==RxdjL{t=KO^wh47csFU)XorxA#~!Y zxp~C$NNG#yvR+E-&~b$OOX}hH>2x``&p@Q*LPDU_XqF+S@rb~OHH+6}|BLO(8Rr^X zNuGy(P6;JqSe*|X!GLeLQ_GFNUX9_N3+ya4qx1aq`r=02sU6?p-hsZBv`cH!im6vc;Co+^bay@I+{Z?G*ya+P5>y;MzF2cqq*387iP)WOy#%rKgqnTd zBjX*1O>Ng3p~TcyR_0Mh>ed5!fAsVjDqt9>w%~l5?tBMJA0)EdqS&M0=)<{J)Da2R!E01Ezke?tj$(FMq;StDChlZigul&a#+z_L~N4P>C1n&bCB* zS>c6$-vKM&>aF4aE6*OkAFlMS74%%h&Nix*Z!UpcquIYCU@@5bF9QrR*lzXG zOnaz zdS=jPrPz-ISERRkb3ozwtOy%kKX&$YAez}-APrS-e|@s6b`ovuUR`J+(^CL zO)QcwA45NZ#V90=HNARJ@dUNBc5P%%ipE7dJ10lNp`M2(TF|9v)P0kfWTnk4@$+U8 zKaCD*MPRixuWanH4uga*QG}jVjpPGU9+}rWoeiiCp`GfRy2YQ1S}9E26^s)^?C5Z< zbR?btsPe`XEw+rMm?oq0-uQQC-{e-2;k6KbC-nA%7>M-vN_3ak*HBcQ-%zU3$wmKf!>S z^hLf!%Uh{yYPNbF1l&qbLUc@&n3om87tZGs?y%K4OpXU4>uabB$XAxPBC8F`cQ&_? zK91h4T!zlHGmZ`w9HXs%s8z*-J@JDFBWn#>B2a6{%c#aa?g1aRQswL5A&!UcljH3> zBG5J0Nmm=Gw^x$J+^f5vcC4nHJKKD|5Bd1z0Y{1y?Uns1n|##HQedFs zP}bOz9%8++HKig;Mzg?0ZhzmEeO$_-+fymWbLvFI`e;83YVUwKpRkOLE!h=PPJ68) za&|{WpFBIcaG)_z$x&Kuv$mrr6BU;23Ql1VdGsm+K5hb=NXe89lg81Y?D0^f_!w*H zjRDEr*ZZ{-1^(W}@GAdgPo=g4=Dxm}O67>#15=f^VlyLgm**@!Yn357Iq)jv|!o;-ezm-SXB$M9}xjZWw`$5H&#NsE<#i|ygTZt4%Eb0Y!`Uj&9Uuo936|~lC#4Jx!w{adcU{9t zA53%Jvlw5B-BI!J@kv5JUoCGPHkMk9)K`rQF$I4Q%H?<8wO(FTI|V(RH?i_)pnXi2 zW>93$e|@Ui?7>04e~|G0puh(PH`W2nJ&2yb=zN;Yfu0>io}+~~+ABaMh3NJE=(kyR zy<%jtKvK-P&un*8@_9S89z6n<7=DU+tBe<(Nsp#nuqt0a-6cYG z)sunbHSoHcl%4fqHs?f$L=JC(g_i>2RTg=9wp|09M6^X77+UsEc@y_VVWW;C%Ny+i ztDkq*r)Ki2W?!|EEU@*`&5DG~^^Nth@B5IiuJ6DOA(%Osr=g280*wj-zJ~;n$kLkf zE+X-Low`-y8#3F~nw^-|Z5;F~LQp!0;55Zj@|mTEN14u1T@vp_xL|HCQ!XNrDX083 zsaf&SBHb@A1A7AV1-^Hxs-|EKO({V_H`uiD?_8nx#yofw7vR%zGhDJmm~w7j)CRZ- zBYgNjGJYgSP>Ks$;t^*oZ+tS!rb7G6yujR`i^YNB^HiLC^|h6c_IsuEy*FCkNcx1g zc6=xAnxr`2{Q~>^z3J9^?&CHz2Hzmxe~?UVVh8OYX07JIWoTv#`ShIOeVaqb2~Bwo z1J1{yB%?EP{+ch}verb24Na4aYD0{>w-qUtzpt%TJkZ;``U3Ol0(nOWZFoPyw_(3-#?!Php#1dD;$E zVGox^ET}xTx^5dbWhIOF(#DnubR0Ir4o#eSR_u7^Cng3siA6S~M_s`Vj1Z>@j}BfM zico}pRaPCxa_p^o;wr;Qe#ed`T{A1HcK!pZs_f7&+94L(lsuqdL1DNsk(>+b(FsH; z&`wGvBUc)SUp3GEs1nd|0guejg;6yYR6}%UD*;xDVczQU8>o09Uu{6oMI19l@%5ls zZ1Btn;$WIo4+*2tl>fSIl_>pOCQ5RTvLT=RM}NH%G3r+_@Y z?&L=WAEWaclmCY@+(n-f18SDdG{4#5(LELR^#g~C2VQhIU$fbeRHMDvegUJ_b=6e# zTZ&biebbCqm$`UG*ForZq3hR?qK6;Fm-Upt!vs2K*<(`+$^;fEiSChnQeo^Dp1&&& zqJV&Xee%;jQxDb*I0-WOI2JR=9v2Y4z+~ID7mzOsrKR8SGTzD82PWxD0XZ&O8wJAHQ~YZEY&pmG z7Tzd32rp%0&c_b&^(VcpDI&B0QKVpz7`fm)avB!xLo%(@J&O{(hXJn97qCuLsC=ogr;3aVuzd;V3_0<5+<1wUs2pfc+- zRq*elYuq*?*}MCOEJhA$8S*Sjyu8n71g=(T>5w!h0fJ@ zqFoo}=Wn$>=26F4=Qc^;G=Y1RcHOznoRH!nfd1ZiP|N4hpG#=b+#}$3ZVP!}Vm`Ts zQG!~(?JU>K@74m2{y7R&)|wiRWZ#(v;)u<&0}h+H@ST((;bb)JR2@FeQI^(a?V}eZ zO(tq*hSNhPzkK73vV%}L48@1K=2G(*ux#HD3pZzU8h^M&o$zf@+KSTbcuMogrbI-a z;5JOFY{D^?YClFoLT$CPcEJz?&{+wuR66`YtYG*fRuGk`H}htTH96@Jo(d844lYH^p??yX))C`}i}J^;Hxe{V*;*-B{>u(gdG*TV&qk*jo`K zLX-dj?`Ha7*i2+IRr_mS6v#?(&X` z1{~v|R8VM$znYSp_9abmHHAoM>(=s)#z73F8Kcqg`QCzxSy?{RpyAD+98%%K&r=%* z6Id?GJ|*EU*lNY9+O6uKH*!Y&7c!B_&;y}mei3X!-@?4ixsLyYhnBz=253#mYj z0keHbH*0l}ZAaVRPFlR@B^LB)>Pg=T;Jr9pG>G{GuizlzAuRh=Ng!A57P#+0DgtGA zIgi{?DJ&qT9-d3NcQCi9Qf*=*!Ah+|jc_zUQKg07pcMZ_~cmt6UqH`$Eh&{cuWs zOMiM_-LriZlq8fMPe4DPPEUoBS3-BYdNX0|qayGi{T;7(FknsMJfL`t_#lVlUdHZ8rTg`CH78BSo>MJp_j`^?_lfeij zbVdfraiRlz2Z&!{)H~QpCqQ0HMp1D6rSf`r8jK9BKPAMm*IzarUXVb-e>mw&+p56h zAyVwoqrfBU>FGHy{!U;g-}$S=%mZnIkpom2XM~U&DD5%Li>!%1A=?_5+WQ(H;uOK4GCG&y@ws>o`!-3-`Y zcbTX-HXH0yONM8V&JiT7p!4E2*{3t zpr~VnJzSq6GBTu$+p9(Qi>;JOT;<{S6ga95i#n4^`!y@(k>r$pqo>gw{7Cr<(O3kg z6G65eI`knx*pO#-)H9aKW;!J4`(5+?&vATCFH7ON@9TCoC*Wf{+&Y*tMB}~l%Sc+Y z7!fSj)F2-Dm(X^_gQ{KNsSxiYqwVI#S@3BEt+i6gV0zbf#+{&_2Z1uY?Ein4{MN<0 zLG4nkKG3Tj$Tx?IEr~rr^~mLm!X%nlkO8*WmJ_Kk;kIKj1SuQYxZ?AN0RCqR1y{H3 zMnM)_>+p_AV#hF3m{M52|0Df7>wYXf()Z~mnLX;ylf)>LTP~iyHct!K2^5m{KxtF> zJgvvQYWPwxG9O_uJUm>_cG;DKoux~B&~D~=2>wgd zfvcN@*#7M7lbSa>L^wgomTdfP0vHE66NNbRnVy^TZN1ECa8pSHE&ueOU(YfmB~X~P zcr5AbK~Y;laAc&%+?ADSw*md@OmWWQPqh$Y^?TeVuZSBxZv4ms-bLc@ZGPdFc(v`| zV7uUS+Vb>d<8Tw?3ek@=H^UJufJOL^Fdm9a%$zyFhUrx1e3)Fq_OK5f!VMeIBlQN$ zR$nG+_I3BB!<6J9cb0~(n~!_8sVg3LLjS4GP7ZRD-i-2UxxybGk>swNl1fix4Ym#! zo;;n+?Uxrd>_xEOd}bfn_WtRl`1R-56k4?QxcjDpp@VU|AoL)(X{gEbs9uVMVndxK z+&I-8K`uJQqi*U73kS!&MZvONK9|LXi~#gnlM_dcx*|q|$=6A86}deCjRIw8q7v-V zdUKnKlmbZ$#cp%wct6L)VSia_Rn^GTOB7oZ6?PfVCQ8S6jZ4;pV22V0E)L&fX)UXk zHJ9}mi!mY|?$zstE;cPBd%IIXMlUa~fpjI;ZI9tQEiKen5M>!!#t`QuE(|E&PbXBZ z-U~!t!$d(nbu{yJ$tw3gCS77`)l%GhvxLB6Ca+C*z&v$4(MTxe!TLQ_>MaZax7 zu#K;6tfwn%fO~yF&4YnFwYm%(;J8e~LV=(Tn0zbS>H2*|!vza+!R_#8qvc$^3QtDb zN@AJ7a9+03gHFufF(na|e+7#qh~xO^{t^!vLIB)(7fkf~JopK(w*+r#onF7?UlZ*a zyiUw3I{US1Kz&8>W04WtbS)g+U6eBb#a7wd+iTOL{10rEmngvF?0novW6@lFe1%-W z{aXuZF0Ov#JmhZC)v>Ib+oynzII}+?VwJE|hV@L+aNUm3n!(`Hyw)uoeD2x%F`7E# z;ek^@r7Xr{5z$J0i|Vi7lF60`Tf)A1|!D~tLpVvhto_>ud=6~@?6;ME1(IU zZ15eqdxpA4guxc1)LUMir%YZ5BKOV@2Usd@AJF6=HedCg{4V> zyTt!D33NIOoM!4BJ{ETNy8%3ID4yw@j6y~-HPvCX~8NI~D-!;AlUxtlnl`AF^P{gXfqfT#^4n_i3w;X4SVbE8eY(Sm|CeMB-Hs>SY=A{Sxe<}cV zvns2r--I8GlHY80|IQO6t)mk&!^L@)T|vP)yVD z`5KBT#r{e9cVx(^rnCvl-*i-&J>e=>Rnf%{tHVP_oa0tD9en@j_M`f1x6OLJlDf() z$LNs*R>6=eM@GTe>S{s0!?lK)_YFj0HEuht!zJcM4X@4vWMh;y)bi?EDn3;r8W97K z%1zU#%6jhU?FDL@Gx@S|vQG{_;8<(U%OBqpo`>Z zNPmC#KYbOtV2vNxPd<_*#U0rUozWRR6|-PIjYV{I~Cz#jwmof1yBt z=J4u0((N@|*MI+L(eF4FE-tFt%FHgq+{7P5K{^d2y5AAW$JoB5a$n&uc`rv@-7S@W?=|3OpnO|GTG+D?z6?2*2fYBa%~Mk>iy^7sI7QFPfh1jPv?D z@{w$Yr=%3(5@DqH0zcnHbn&PQWjy-g@0GA9B(XeIo0T=Yk5c)P*Yh*>4vw;hQwh(% zzWeV}KL|dN(Jj$N-9Y2tzLMm`SKMa2ka7O=>-?#We99YyVTE4oOp5<6DEr`OQ86(u zb&Wo0MN7-a=d%Jt>u|xMTq7$vyE@~q_J4?C{9{N@7 z84|G)7TCfxCU*M<1@)-ycU&~P4)gJtBvsI*B;ruI_1BV=UkHB0XMSe@6UnI9$UF|n z3=kE?yGn_Y*3vQ&HR&k+??*|-y$RBrHsT{HvZmuLiM75GZi5={&^5H}J=)b7AU~E5 z4&zvai?(p#J#N=<2Ke*|H#OJe)BQp#uTOZkcAHNI*M>h)cH?+GKWkrHCJRPB{_n%c zgOaoYLk#CBM`#W9PtxHGF@R1(rYfi9FX?LE^?(13pStvBJ;s|QdbtC3 zLRj02RPmY*B*TGE?J7*kbS_)IHu~k%lQa7QBr3;(v!)4hn|cGOT<5XS!KS^l6M;8!fEj|h}Bh1d&s ziq9q2PsaN3Dn=$Eu3scOej}?RI1^IF>Ze%!$}!&*!BGWxbn*0n@V_4j8v3tbfk;3W zcAZ0&`LHYQ?=nJWCvQga=c()z6B)Zy!Y}U|(>sQ}<$usA^2YnGN-j7*-8L{FYF1zV zb3f3JNaWj1z(7NBLsmw)GxZip!cy zcS8OAj<*OtKLW7Ud`M;b*A4#t(fWvOYpB`1*}!itH*fy(UqwR?IC-Ul7~c6Q`G$)dUO+Zo-CR>^J)QoyI6MP19NE~Nd-$AW z`{X+_*?yi2Lwlm~-Ht9tKes;i``3U9N9?3;9n0shmS+W*H77eQGjs3<Dp?c+@P-rQfb?(3R?42_Jk3Fe(a8tS+f1MNu z9z=Y2<~{@<(ElGgWfpNjlaZ>vYWDc^cLcb~iD_vv!z05uymsk-(4&8gOK|XsN7$F; zhbnxpP4{?hJq03iTR)lfwOqkIC)lSX{mZ94y5)r~KKtb7$N zX6J8f=OkC_6A9Tr7U!N{S_~x?)@F;3k3UnAVv8aGhD_SfPy!Wq!Q@Y9-@nLu0ZOOX z3AOrGcFyrI>`JbbcGAbn4b)tG{7LK@-=!^LxwYeWOO*lQ{VtK>^szSlsoQ?&iEunw zIbUfV7av=+y!uU6)=+Fc|z`i=fR zJbxjG%H?_7dPxt2c%ZM3r30}>{|Gkl;^VWy{$Wdk&VCPJI7fIXm0; zM(>UIi0j@Mhwbem_q_=!Us~a3(NwTQn`C$_1~}N#ks4&KZk1^OlmZH4Mtv?ew|}pH ze@fU{AYo*|FVubNV8NPgXnlO8I+17h|DVpLotRrK4(P}*%0Yb|6psN`Cu$D5o7erm zq4+&E#w3o03Ey)J;RFpUoGwQ%kY8FUH@&jXrLO`+1&UPAh7QV^fd0-xOx} z^_jUQ=LbyI6^}KagX?6#fi!!63|&qY159=`nBor&>H24;XJ=&{zACr0wK??(M+ATb z=QdyCEA(~|C@4j|M-YXi1u3$Bn@Gh&yZoxSemM=G)49h-4W5vf<<9pGs~(bh*Szr- z_(p3W0BXx;j`PM|caB=gF5PMP{j;94d4-0mvJ_<6_uY#K2nD&V&F%&aRA>e(>*7+u zrBIJKE$L|Sly=bUX=c>Q%E}TyXZs(-=Wkm}X9Em{Uo2h`UJ~}(P0Ewl&n5Kpv{@hT z{gjsA(?{GTYW$xoe|`jO(z1y~*}4F|8n)PgY-$0wvquU5brdFX91X9C?xyb?h#aa2 z?>|i`?0B$-r@K=sZH^rO1}8B2EzyoO`L}=*k6>0*r+NsJU@#7{ldv3zYx7oV;>X~) zU~zCPmQQKszi0Zj`-!05oNc~!s~U#sTmddfv)}mxtI={5gMBoukWEV17eWBzmyu|o zSt#3kuQ_Yda_-ps`0XRRS--87U4J}j3JJJF+_acZG5VMn>%LO=*p`BmejdKg`0(eA z-5LZg9dRkyocnJrG(ozkj!s255zFS+>6)|qNGAKk_2!oKW@<|QvgMJowoT5%exA9O z`=OVfT8>_)j*o9~5dXtl{v9rREnT8pf_s?1TcfzRuM~YV>oo46#xB8r4zmjWPYtuC z46LkgwEZ8(Kd@Z-+|m-U`0i>;2dDJV6+ioDKD)(LY=2HTiKqKL4 zNlgpj5zE-wscFVvVmc1Qe#@`llAbFJ!U@WK+r1XvXzX}q5$rIT0WgLN*W$6uCUce- z4-F>krs4LVM;&b$ngs#BRrV5O0`6yy`)@pVy0(jD6X%LRcV1v?*O#C<+SN0 zYtJmX=lo{(++38DjEo=Y<;z!lOs&kr@>eVkMS3VBA|fuT%}1rD&%Q=~v0St~s*(-$ zu~08l9~D0BAmvb;BOujL#oM{Y+A5=L8dNRe2q>p*$&SiQQ_H$=YohWnLAOI!T1}AI zPTxW1wc!r(y;mO)p0(d9Z(VL`JU!q;SgaHq9tCQieN%IUWws>y9+J}?W7P(kdb2Y| zSfpejN+9OV8&-#K(*9z?edzwOT(akm@!bG&%!HNENa=Et1TH%7Ufip-yVc*@OznC{) zIXgg@@BcJu*R9&%Q<)8aJ<=yE7;R&~x#Y1FxZ(OJ!w~j%fY6P$Dy7RAIx~n9)uVlY|u{K(O4>Ey9o;wnsG7-%@^!<#3!xrGH-pG3NS?izm-a6Il0;NFQV)HP_>p>Ke;c z6)7VVQW_uz?#kd{auA{*zB-JD=EUs#s2bF+&T42j2z^-7$;!zgq^6&@VkBKEii|Wi zwX(x}3(*>o%q|AFL4*E7VY4vQj{iI*OVz4SMP#Eec8?xaIk?_JWV+Gi+Xa3%_Tb0i zL2bMJa8oh`@s&7IAJ=%_o#(_BYcfzs&qb@}nzlUxr75 zW6k%Nv|8P7S~w+@*Xo>FPm-g5pupG#(d9zj0nyR zlKIF@jUZP6_*iro{sZ(Vdi@4~3Bs#`Si3jKQ%d%HXsM}}i;UVz*DRahzQnZo9(;YZ zx6t|VRjCz>m-Yyeu#2EpXuv(}1bH^NrqcAa{!(Xw|M0MveyBlz=9qqU`$8oFkEW|8 z@wT3W(>Jf{Y0UId#ipCa3oEkQ3RJnqk2%;_S$p&SyPCZ0^#K^>yyd;0ron5A0GQ`^ z?vG!mpLuT+x&Z)9&etPY7X;kWuw+{AfS0l5xs;-pHb`s8r!*VEZ%AbQ9IZQD`ND1o znIIc_r#uH8Sv>j+a%KNa3qnh0d8`T7`Nj5 z{v7$VoWr(qOG}Fbz08756-dut3%3DH8ynG93Is~?DM9zHUW3)VO@wLR5J=d*`Y{AbLQ) zPA^Zw5u}1Z6TS=Is<2hS5tQP>RqYxWKTIkE{qoIK4`mb zzkBc=Sy+psZSw^{=4abYEavt#u^^yIOb$#`Dqs-V3DoKX;A?X0n7j$aDf*vi;*e(Vmd#7rek4M0OPcWi59( zO+25F@kX0$wSjgKGx=%coF%L#=yr|4g;8~k6VN}mBeEWUJ3^Gmn_nrQ(;mPR!#X3M zYJi0i5pQ&30P`Gy_~fQ8pole8^yy zuaVhl84T6aGe0*l*vsHhM{;s8Bq4O?4V zi>;ckI)51L8o%bIrK+*}Uox@1E`ks>Gs}L< zV(+vg4S*g1ToeEb)+{V6_tLvYN9jRxag%2{kD0meYU~S?oIj)riCQ*smUHSs*9QTt zzv)mFPj&3N2_UN61vg0X(*a3=0Ur`(@L!lwT4Id>U{;P4qiX{`jQ*;RYEhW{2X1h3 z&t0?!>42njS{xh=gY-TXflgB}eJ_B6yL;0P zt!=NGy3|O2gX^mI4I*D4p!e4YSF9m}8-q0Gfc%tmJd5I9q#KYVl@b@wCqH8o!@4Ql zdOunJ+bY5dAGuQu1P1%z5*A^wySJ&*H6R&;+RGGj7na?lr3L6Y_4GHh1OBI%?YxE3 zU1OMEd(bvIgbcD;Ll|bsbYhY8s@DsbMbW~t0ws{D?|9cQ30QHOk&_>ti=cZBoJ$$v zgoTnfBr6&XaA4irtECS%G6s?K_h1+A?hVG1`l8VoR~1MNCoBmOWcKvgTe8-{+JqdI zu8q5sQg&?y3rkDqR*er`2Hz*C*k$JA1P!hR4Ju-dLr{#bz+AMq@ z1~ap>NzoqeyIq}~^C|kOwWy)jTLwU%HegAdk2eE%GaSKalnm*btvpO}fhBL)ochCv zhSO2cG1p>Rv){dqFNSo&M$7*{%Dy@*%B_3*h#)8mA_~%2AT1$Cg9=DXi8M-gcMKsG z-I7B|3P?ADNOv~^(k-1c^X*aLyuLp;=l%Ye>lzTBXUAG=uf5j2?v-QNlO&p4Vq%~^N7uNAN{hP0)o@Hp21eF8?shq4zC*CrSpG9#2q`fB+?%hE@hvH28 zE6d7N@SQ}2qo)tA@#~Nff2?t$xA{d&A-<~&fsjgeMaROKN?JRrI5 zwLn{p=&{RwWCo6JYpA>2?o*Js!6o#fxe)*dZ$DdD=h%P@@rDM+A4p#qXvs`bK{gWa z!I9BI17neIWKpwsr@sc`PamwmE_50aj zGXw^v2JdLQ?XdQvo_Hw4xiqB5$E%l?m3iJb(>4=YxAY@erF}9!)#+h;&6g+cifJn)J8w9#^e`J%v|3WZpOcMGabF zxmtDzToIl6cjg4Yo^lsBMv4LnCod7!uKMpdPm)P27>w}pqI+Z%@yEo((S9p!%YPn+ z(oH~JCr%L5El>qR4Wf)ajP=%>S>wYSzt+?p6ctdUPQT1O`7xJ8C^sjI6; z6MrKRIR{r!R-S_I@SF2iH3Z%gT9t+vk5#J0LMDo`4iaAMqjL=nCzX`YxSVCV@{im0 z7aIEuq^mVbl5b<6k!?}{Z=Te$0eujK{29zuDl>w-xgug=VUZexD0kRMe(Ln`HDBuE zjxkK{s;j>={fR6HKLxq5ox*oGh7}SLBIY2ZqdWr;MLU*NsGuvvVOoKyEGhdc*5=NZ z=%Ys!ps__#oL%Y3`K+S=fIyWnP|!;_Z-9{^a<4iEm*%y3P3kapdvYWyGIFY9HrD3i z@*)Rj@wf-J5boX^ii~HOA+W>g=^t6y(DVBTjt(DGBhl-8h{*1DB}+ynZvQNYJ!Aw) ziB-Cq!(+qshgqYWf3>S)9iHk4Y*mj}n$Q%ubkB|SRm-mwEqpKjtlL_8PxbzS!)PfkU_8)EY&tA{)G_9t zQ5`LNBM$RWujRuHt^5F3R6P~L5=^`C3L4V%hdv0}&;aNh)bi!IKM#hZO>}3&4hanx zH!x6&6wxXEavAwLpDw#{b{#cwkus&kDGDKt4?|Pl9uV>)8W7eni3%t^RHA1+@ z@3V1#yh~X|Kz~^D4GJjz}LH;GYr#Fq4clfE{4L$G5#|kh-J4 zpY9Tf6crV597y^7bK>zbRu;$ujc1Xuid5;Lxr6(_>pWex+leCn><_rPxphF%IH_kj zK9xj>oOBG{wQb13^8NL)F$U)S^$lSbLF6Oh+2${p$ulHueP;84Hc?Kh-FTaJlHvC+ z`A4#eCPR5fuder-jj!!Dg|1Hw6?CPV4D+Vb(&<#!yjvff^bZ#^;a-n_1J^)oH0N^t z#j*J|nqwGbD`J2V&$CkFq&r!XE-#z0DagvJqG6!LVlA1N1{H3zOYbNA8@C=007$IT zP{-W3_Z$O_WV4@80(W_F?5}T~oi`kxYe1ek%$?D!FtM=6F&@en1>vBit`6xVua$h4ksFHnTPO(ibrh z-tXThMA9qezWNLa!2;-yfb+mdhc%ZYk?XD8T-;OdsADBc z%@QB|408~I?NN*CL_b++&~Dw+eiCt!h7PyIIUUkj*HOp4UQgWD;PTm|-4;EZ=$GA7S>OuTV`OwZbyA9ppJ$aWG^GY0 zlUt*v2lb$#ettO8*Eg9rNzT{2hR?Q^jpZ@(MBD{jH&t=Kci>MAiwZu`nb+(%KQ%S= z1Yn$|2(RLlTFt(yz|#k=J%iKesP?xgqK;F#%^qv;do*@INX45e+35FHal`=J1TYqm zs<1Yb4p{zOkr~xzG_}ePG$7?!Uh7b6q9)v6p>I5KkID?HOmNvnRZ_~r$zbSk3Mjt@ z4*&NbKWJ$AQFZwA>gCTXw+pfxyQLZ48Ww@l9U^X1=hUS*Pn@8gF(;0NT~Kv>2a2pF zOl&&W+-AV4+mIw0?9)A3VwA$ORue3C#+kP&n_u1(OB3YQ@^pR6i?!b|vy%WJ6yO3b zWr|!>&dGa8iH}w*R4Xf^5c4jch;$t3ob@t5q3XA?g$gsU3c>R)arXgD-_ere5e=LJu@sT_MpK#lW%U%@~xB za5K^PTe(BmK#%rP9*RmNNgV83X%f+KHs#M_lZED~O#JBEa_zCPtE`-abvS+k;&O@k zcKMik)h)-gv48%b;}uqO`^=97Na`vtz*a)2A7LCM(V+pgGZuiX9O@31W^lyI5i3Md zb2#T!>j$@7I$Ircc@z2a!_Cd|rEKx(;z>W&re~j?-{?+;8iOg<2@$H_)vEJhmJ+)E zIeYBw#1L|yDKVzfVuyFpg zsqk~PhNeK0 zN|_t?70y!BIXI~m@oXNde=M{O&Al_nZ!#3F)9B449J8>!Jgjs0<;|-m9IiP^2V{j^ zq91IlPi1|N=`kj}-{8!qOrkK+RxZPwhJq4}qMA*pg{!2bB#IKp$ED17pwMyDL3vm> z6F23JYp|PHdn`lf5TN}r95#3PnW<$$c_r~rDE^S}IhTd*{*EjrBV{YB7IrXBhWdr`wmu!PiE z(^cPf*mk>#Db`e`QdD3hxC>{O6LczhQa8UA%)J^SIZVILIbxH9JmX2ktr?7KQ9m<_<))~yzk&^V8tfzpKNAtLp=Ac|m zr3zi&oOTp1OaKm0^!cZ{7f(JEe|QThNcvtSxVopqCEA);UapGRtiK~0&#Sk;1}YYs zW9&v_<_+xGU5CF_w(XD_R;N?UfcHEx;xt7b4 zOo4-CYl|ffW7~PjX(Y6?Ft&CmUu?)b|;sNDO zc&h7Sqwy9VIJ?udU^5yv>)LYzgXN%wWpcnHTzMKYHqWvhJlX&tf@%R89J$<;+nzf* zn{%CFAsVslYJe>dMq;xifT;FrZ=liGdp|XGaisjqgWY*y(BO@S9a8DMgUqv|Hn$A1 zLDWO6c1FT=AG$@D-#(jqhVV-GExbT&UaV5I6|pNJZg-8*(Gg9Il*RAgSC{Jh&?)wy zKYe%^>ux_<)Lk*OD;}7vXDli3KP0Bi&Xpjytmh)L_>wa+vQr%Sro~Ga(o)i69r-sv z!220wdi{q&*I=jV$mSQVFr;?v1tMb7AiAvLkz80iq8Zi%K=3V&QhHgi6)vmp!m}op zvoUrN%@H5=z7sNqy{5S|6JP1F(K^G!iZaerz})CPjLDgyQY}3@tJ72s3=43+_{9Yd>$>| zae+TXhYmCWP*@5eZ2mb`1H<;v9Fek;`^U;Pdh=i%qAj9%#VwhZZc2jt^hQ9M!oz*>o z%C&+sN?XHx;xXEUSo=^~DNh6-3tDf2BI&z*n63>*u$zwDrQn0#3QM05M7q1XSNYzf z5B2e~Mu+#C4NxxjXXEnAD~A)(e_*oGZD;lu>=;YZ1h^NL+u&~XsDtzr2uwa+LpxKz zP^qH~$7kCE>*fBez*=v9JxoOa9rbcrH9`-ug;DVytZFt2qj~@ylF?i30Z$P z251~Nt^_H5*^V+p_?1Z7cZ{jxu?N48gUHDR(<_w^jN}E!!Af7$mpfRUJ$MdteKbPi z`~lO+PS~L}%E{bGA>VMz5YQ)y*xwKPX*N*EBN7JgN>@qq+bTuy zYUWbd_DW~S@EqwT5>(}pZa9kw3s0Ag9b{SC9iZ7HOG6nU$YBkJEe^A9^wdyG!;!5q z=IR~5pN9Fdyj()JJ=SEfetbNx{6{s#Ssl+uo|a#Nuxo}#8LWIi@5@Q^y-3R-Aa|U* zu{YG84OrpTOZL+5{0VNlYqJTPlru2c*URCNm4m&Dm(HES{~+ zZg-Pt1U1hb%yg8?;r^E>W9RMi4egm0PmO3p6EN$(+w8Xf(EH*9jHF1GtAdb}ibhaW zGLB*#l;bQsh3&rxyQil|%;H`Ba>@;qVZhBQ87sCB^m1Sv<%1q}*Au*Nx0mS6*IwIO z-^x}q863Uk&qoFL852LYWMcF3^35+UTNrH^aQw>=@a}xg`9uFZg&c;r+yrp2rc^s1 zweP3DZ#gE~UJ^v6(z{nr>RoNDg>vrR2^oV|YPcR?LgEhbQyixzQ$o+ptU9KOsE=}8 zb)pvi)X6zVv6^4$JpU2J?a1nZ_KkoogN6<5oFa_qp7+mQ?dE%(UhBW zC{M+}aYvVe+jb>HA>)}>tn$bnr`1e@$KFP(BRX92f-VS@J_46vR`k|W!1)5)?g`&t zre$XKXQ@dMvpH?Q%UxgLrjIfm+6+>)?+mBcks|anFl9HTGKcDHgoQohoGouxY8olM z_kfL3jf~9Hgm3v2Z9CGJstAGT&#)mHcZgoTv6mYON;{yuPJYo2Gxkq7u(Ht*v~&EO z)`L3DC{D_Rrb&MQwLgzYx37_6d1^j!sjS;Fgvi&+a&MOQ?1A64O=KsWZ?M$r0Yg3Y z93*`{@(EymQHh#XeApw!x4q`y{H@}k1)dgx?W1{kzyCR8UTb-%AlJST!`%@qV$m4l zR>}4lax@nzPyY%y(!Xr4w0=Lp{q;)X&a}oDkpr6}`sE@Tmi7~HXL=pS3BI0mZs~(N zlMIc{G^W|ZES#z5L)WfHJ6Do( z_G9g>f-La!sfGHiHXI^SQu8g&4*R3k`Xj#gxA`JHe|g)krcM}ZD#4A;6On$ajdzD9 zf>|qhkoxS|vw-_3BdHaOPnzvM8(RZ7*^-iyYCdfb8L3R=)b~X+bF~AzXtw$oyS$$J zJ79>EcU|+=IF~L7=1Q=ZpF!c$ zMzuF%pk$PKVMvKhJPfAjJUaS62p**a$dWaZ=M0j;&o$R3lrv&HzBzow7}Lhw8}o&cpBN=5IqTKv7;|M^Wo@r-|p ze7aA&k=2XzPoF}dV^$*LR+Zy>)(6hH*7M<0TVY|Efy?z~kVUG!%@hLVg|T(`uy*gl z0lki?+I1o#ysf>dxw*G0((bnZod2W@AO=$v% zGkn4EX=0K=TZ_G3uadp}f@4lYUjFuIog`zl6cg+)H=5l}U325d#`XbRRz-2uy5FMc zV98+?!?Y0ZQ!(Jrm|u7F^tPY~KEK~Duh-v_opmgka1ajv3iRwlf zSLRmA?DP(Ax7}<0!;G$y!7Df&9bHQ|s(EJ=;|LfVyusJuxTc6nEx1#mhrWndsGlPsn;6hg&TF*V_?;3;;KB|GR|F|V zuQo}ERFi(!Wn!iBU8^vYXNQ|ON^9LvrKV~^T3>UdC+-OK8*;8z)#;6`1~1_TQeJyuh>hJr(%uIxAC2lcmS*H;J>eAKRp1EkZNYUl z&v2fsBRQ)xF&nc2t|a>U&ovmb$36@8Wou;XPD;fOuMCvPJ!f=7WBSpwasgp zby2$ zHB}!JX@SqAs3TOe#%EGd zau)tA#io4`dlV{CK+>M*Xzd6sY}`G(`D5b4+HA_`ETIqf289>8-pDr3dy5w^&#&2p ze3MocIGKF?-8+sl+Rop28KyQ&vk145EAp*WglbHiB!v5}xUVb%2OeN$w-#d&=DJ}d(q?j&RW>7+>4tL=$P$kBNuPm^QCK#?8vB91a_*c53jrxI)t7){-eJ?lEr zk6q{G((K5g#^iH**^g}B8CqCv4=v=Ia#03di|;X7TB-W@`Zc!2^esifStVUs-@j)` z%b-9WKJ@i&`+O+0;BN@=mrG%PzD{VUdht?iqyEt065HTsh=oj!L`9P2 zRp*^D%Q2T7%<2Q$8VbHkI5tg6=A4QM$M0 zH00D6K<_Hns1=GIB<}Fuu08^OABV$FO1b6})m4Rnl{Hwg$e4Kt-w1HVekm@gdbt*2 z-$DzB9>N*3`&D&Om+FQPf$}(rg3U(>ht&`PtDdbYqmlAylSyoac)4*}JljkxHE5f| z*7R@(M7ju&Pw~X}O%i_KxpSwBt)h_!jzG9(s?$rFe7MZSY6;w;pvnlCIZg`CCwhQp`}544yl$G%S3wv74|t3N1`Q?aZt zUrE{8ss;_w4Zk~tbbr%PeGtmMJFViccL*oWR0kUyZTBhX&SW(wbf4wgWOW2ZHdAy- zT4p}PoNXf!RU}U7Bm6O_-KQS?BSZt+hUW_R;4fqWOMk^c-mEU|w=`ukd31@@{ zm4EAc8HS;k1s}SfYri(@;q6|3jlbd%u%dclEF4UrA212Wig9=j^R4)(=|+ahhs;1H zUP9;t+Y@cCLp3hmE(~Vt-PT9!-*i?@Ws-9!E9*`Q+%6uSjIWoz-J@xBM_vhqJ>`&gwp-6Qtj!wzQu~QtDuShU-N7zuP3tO` ziz~BMoy_abFBb89m@bpPMY*N~#%{!fmxNvKJV?7ZJxn~!L`;I4=geWCdC@cWEymO$v;~tn#19)K0!FQHNwNzi# zJ#w4)0XnIK)`~M?UCrK~W|~5gUuCmQSk7&yzhw77EEMaJynrhS>+?TI3qYp#X4J0k zV0ypgI|rLHELsVw_4f7dwtrymZDHjm;v0p24|T8(qFQnC*?2@X4wf!n0@!a`rzndT zinNZrbwbvJ+#i)OBTJZlVi|RctoNGH0N8J$opw51uLfNE`%dIS=B&D7 zwJKl!bFWGv?jaU<*_c|{da5;r?}~(XEbtIslxm)crjmA0N_5>FsTu(;l3~CczbLt} zvzT4fPy*#0vwRP%@Ljsq%CEB9OIGd8(~7DlG*$->?d-x+na<7MD=|<7SC=KG*WXKHx4D#I+8O#|mtr;0o1;_9|;c9N52w-;Y8dSWdFhJg2U zxNfW3l!BFUNld6uOZ9Q&0E5NwflPVj=i$6g(}wi^jnub`7+)lZW16?B*%clO^{X*m zC&Y8Po>8SX392_fx%xb7+qxO~zJdh~-VJf$B~r?uiHL&@sS$rgOt|ZMAOhhWGUo-6 z@2siRXOrU~Ty;YF4H}|&o6y}=p|XMqto=8!)^F_OSDaI+GjBj_csvk&aY!NY@TT=? zew^hC&CdEyVW7~9oE2>`1&Vkf9`hXAZp0x))uJ{utatFje#U2nVi*JdRubidJ6E=G zO<6k=xrFT-Aex#2uI0`pnIsn^^3D2CyDJ4!pWLC|Ff#XlF=3pmqx-yVE}2yTUn!b9{`|u**qS9T0o_n%ylga&T?*uU#%(mxdU| zJ0GZUC=Izx2!%H!OEN|2@R!2bIVW$WL^V6@tOQ%N9YpUs^X0WHvtnR4Ft&GCoGE@2?glcvdTCWzadOS31`Ue7r5ZAJ5*b_fkJ|Ka23)_ME*- zU2U;Yf>o)%_ghLFLCCOLOYvvPYchcrc!Dp>s!Ucz*7mDy``<6tVYuraZ*-jy`nzSc zEW*OHglGA#W&v>!`K0S!c-c(F>NNrH>HCn5%;cMjFx78E`@&PA+G&sBmU}&Ell(Zt zgM)X>U~tq}LkM`z=*TEYSuFB6&@2ttTG1baC7Z+m>q%jYIaN$>|KMm?@XDn+)CF;B$72 zqyM(waS6mF%^DS9jygR|tX}8fp2MoZ7Bt`QS7qo9D4VIR%~pKf{vuCKv-kF9n=AtZwvdoe5TWH# zJm_OiWibz_)ST6pFOxs;2zJDOq5lM`afa^hUABGOL+_@qU%#?&87>cN4(F{sS5-CU z{N#ue-+YyiQCPUA_2=s5~6w0VY{R=$z$D&aD+BbC}p-?zk zah$Gw06z#vuE%m~Z;Mh#>RIlEDmDYsHZ#UD7vTz##SNQxFo-~u+=SyqIUVW{V;$Cct>)6>GK7TN~jduE%82#Q@SB5cwbXQlSH7~9NzS!bv z+MZXU8*)bI*zN2IBOba4lSDUYpx;^IwXFC&do}af?tu)K8dKMOMk+D460SLZqdxky z^mKx2BQDDY426&wmC;_KnU)!W&(AU56`7j&ZWkr!C;^(~1#Q^gv|(BX->$9+)g#2h zKq(;7Rk4ne;+($92@nTDYCUBYqq%zR& zdsA|j<5ljdHa0Xo->x@f`wF(vdBToUS9bEz4UIWzpp^^P-w)5`MSKh{6 zB;gn8KL^++m2dj``p!h`!d**ND|;;}4N z7F(a%3>Hfo&ZQC}8FOJ?KhWT3UB` z=ynuGgeT(bBhRkR&KH`4@Yc%*Sv~&(sMVCk9=LcwcZ)AGss}<7?Hq>j-Rn?cm0>G$h-pxT@dtd*aP-BkW9EE zQ=e*Rp`sE6y6!#d@#Xc1hg_ReDHVUxXXNM8Q%mWwV8ScZ$P)NcwEmH>1jNrk8T!D*L;P*&VE!^8O|&!IHy{Ni zAav?Yzz|qhSC^UsY3H@8y|}^7&fb_HEMY6k*D z({=hjDbWm8l)Bf;N%NBxa|(#rHb|k~aTS%PK6A6|I1BWjfxExlqpvkE-3=%ma+L8m zg;E&-=9@9<(NXmxJBsB~(9%azE&w?b^#WpZ6CJU&Dy2NA9tzsH~zgot6?Clyx0RUNanv3UvGi zM}@nb90wF�m)u71hxxSd`Xb0TrpjB1wsPYQnEYRL3CE|2L)jXHYx~kMhTAWL83a z30(ln1DbLWYgV>As6y2%?DoJ}xolg|z{KP{ zQ=jQxHHocJf3iH=+c*gARVynB+8<**J-1t1TUo4TTFy($dL01NJF3MQ`XP15%R3;- zjAG9zbaI-`Oqwn4Qg$e4g%)jXD7+Na>4)j_7{d zoQ3z6as2i;#YiwJ?7pTKQ}C4Uhr803jmz0<8Kb~K4=gNX&!Zob0L5USGst5xF|n53 zD0Y(&y;z4K)jo&Uaj>?EN5d?4;yjS?!56k!QI47^!0fFie@nhW%IiM0w7@Z#Rf*T65!Q}LR+!`*Ml4wGKEP6 zeF)0z7ei*-$iD9!C|Ha%PObsglVEug*ww5;Z#yfuV(u1A3;;W+nR)tabiX)EGzS?@ z4&_fp3xKm0V6Drx%c)d4V9i*2xWq3YR7aBhUl!~5#|{CvD%iOg0enjZ%6K=}!v^n4 zuMAH_$xsP?3?a&$e*TM`#*G^UAj=Y=`e48R6u4hMYHLvP^Gh2VEq;vqeD}cDqQm2z z2LhDNuaBSIX^ej(#k%8s}-$LsY6c?+14WE z6RzTa4ruhBR^Ral_|h&JHvFG*<9;3tP}=P)?I{nWl!)t*qYdr7|Kj7ybDwLQ{K+Ls zrpQ$l25=b=UWM8ua7)pD3cYpfE3n&)T8W7-jGq6C)&A>@3Hp_bhZ(m12Hp0=9s=7K zS1#;k%+#IV!%VjqYrd{GxT-SDu-i|k5!TgoZg^|-Y0g+b6>Q(k&h0F{Bk3>ArCg5N)>`zREDS3j7YImAwdgg=flAdRq$z(@tZsUfG#2uNBkm z-GhUXF4duTe@gLj2=(`_RZS64{@^b;faclV4)6IB)nn%RCa_>DZ(zV*3Qld&Qp*8^`WZTnPyM+~uF zCs~6aSYpnBwCGc6aFW#G63S(pXlc7#qvgpddFCiU2dpW`=oW{t%121VS}oMC4O}9= z3BrfPuunc5j|K})(NZ9{nWo@hu-LFK>yONlOp;e?9ZB=JhNZ&RJx-juw$V`5OUBH8j7k@Gs{$ zFYaZup5MpBb2!$3f5E?4O2ySo1}-cp_eb|X7DWC+y=cc6wcRO?|N8Y2z%Masi8>Eb zJ45MDJ|q4XC^srJ9DdB(Ke9!Uoj%2AqHhj*@q(~+F-e|u@ZbG%>qzi^gYstX{a-;u zJu4s>O`-Sx_qCAH?;|)d?2@t0)xgyXDY8HNa(H5m6hnZ$#IyzqY`T0#Y{bRSYi}H&TmUD>bcXq^!isGP8EXs}cJhq=V-ztzWl0o0vU`v@*lElFdmB?pjuZ?7kW4-K zkDVhzrPwTH?w+!9!$&uXVd}Jr!L3bealo(nnjum2E^pRVZK~`VJsnrnf~6ZEYWUdUg#CW+`Rp z;~Yue-!J_0o3>iji*b#Ds18VsTfZR8mq4Ux;`ZNSKaT<@t7~kZ(knbz zBn}{>K!%s9{k-0uL|G}9wz(!{bLRMuf17?>f!o&(es@Tw(|sdfai?Pbui))Zz{_v` z{c;0TKXF}6+v7&_e;(z*paP9j103RaU~%SM(N=|0`GC6DdGwnxS?uIL^P7U!jl<}q z=McRHSN82x^inD-49@TBarRJ1zKesfU28g$9(OiSDJy-8vFv2Hin}QFQ)OkUP=(&$ zm2y^x>O^oJ4-VeAb?a6H4}JY9XXKIc{pGHDneqn|yW&Hj)f0zejjx)J2e$>0=6EPn z+Ak-84aG^zdavwczaRB>IXUXuJ9kiTx2fiXD()Zbv)DZF`)76{AP6OQ1;+Uao$lY6 z4as$bVSB(QG(mm3(DUPIb^)qK{?@7`@)NvVFgU6h0Z>u|(vi}o8*Me`adCD5>pCm` zoA0M&;s2Jsdqn71htjXr3vK*FF%Q+QFX6rc4FedfS&jrYKo=;S!8zTXlO^aL4F)Y; zdQyJ5vuvyrmvm`Hp4vG~%x(v)?SHwa|AiK;;MRdmTG~rOLvUVR!CeM{wRqx|V`EB$ z3Ui;)#`)Pp_3r^6eG8TXE~AFwBC4U2epifBsZ?=xk)oqxX?KCs_CHr%qaHze73}o} z@7jQ69gk{auL8#fs>4-3z2P?*TV#TDr{n)ffYi9p~e zWhviP!G;E(Pm$9!Cj2#l*xf~kPm;*|Y^sA2wkM!xEHcD0_tZ|N;G!r;S9^zCoCy0J zwzX4P&FZSO^P|F(@38+VG(p#%u>8ozk)Goplrpd6Jp(zgMTak|$o%qyQLlc7diA~B z(=I8L=>nj8Tu)!Wc)^uy!Y+t<9E* zm^ktiTJ*o61F`1r2567-57AiQyXn*7hkxYp;}<=P5Y+h%;`y!S7Xbpb{W9AdQ1^Lk z9RB|1-bknEj2D-cr4I1xRN3xdSyz|WM9s|nzh(}e*5dc?ZE0{5AbyB^m(N9LdO2Xd z%JrsOFwY2um{145yyySw2WWO-huHIg_BGt|WLM5yCnpYR0~oaC_3)Qh3|MWBtkvHm z{_~q=5cZF~WNyS?SUV!i)PP;#KlqWmP)xEeg-fR}UtGqzmYSZ0=byrs|90;@dTAL~ z4gbA+f|s5hZ{Ep90&F2M_T~NlY%8o?=>ckVIQ7(vt09SDpudq%N(ktqp=gKAWV=oIUF~bXY1E`$AS$)>zrs&!;hN4O_lc!b?a< zR)5pXoS2xHpchsuK`#9cWNo!ftFqe(9dZ4gsiQ& zvp~wW2gIbK4^ScN`mO2`GLV+H1-}?hV<=I7uw&J|^|Ho(l(%NlbU3Ejj`YiG^@H1>+ASyu`Lf=8@u5o5C2f?{L8nmGn!e8D3f$ftjW z#O=Wszs3J$1gKE<@n8N*FTYl2>dA$!cGI3y!SBabk&vM)nRkqra?3h47ygU1TBePj+mK=(8aIwQ54P0RB4?yZkJb7Z0FxkM9l~<=l;AC5y zjRm(RKlkJ1;-Xa}TV~-2I&8h)OGs(s3NrPdtz8~suav1T-Q$CGOujBOB_TZ6Stc~I zvwH}knE%wWh&@{xm<>{qw)X+1#0R^~@@8PaHzUB7oZYqyn2Geko~;5OTaXo)2UwUZ z%?J4)KeEj}S)C=X4U)M@??$hvYYc?GS8rF#X4-Tlzh+S}VCrnvu^UK9MpY+dSy5GN zzEWRoZaSMaE0b8aV=!j!noIMo>lXqCf!zU7ZMoMrJ?@X;=gZ7!Z1+hfCvD9fq#u^K zefmcudHiW*_OK^i+{csF2?4|l1!u5m3ZV&WFY7(XAFaH-PDmpa)c(OC{{8o zteY1QUqwMKv>f}35h%i6KE40H6t*C#N0bG!{N=N^hi-~_s8piXwp#f$A8-4IIsL4R zFNbSX5)TNcuM@60-rIJp6EcpnH?pQ6oY26E{3HnJ^)Dy@w_a7!Z1L_wM5;7I-tW16 zDc(90tAA&n6RbRE+hA~~zExMLP}jNA6oi;08z+be8=2Qjhf65FNY2^9V1)kMfP#d zW@NiGs-Lj)fLS>Wq%ps=>W^M8@L3d+Cs6V7`Kia?IZZFiI`;V(K#tQ~xb`hdOpQ0@ zAr+K!W@W5jX+bF9tf(gQGzhKvEssz-DC2I8})SlpnW>?YR`taAL^^-k_KVVcS6bFx0PKHk^w zvA-YP7Ak2Z1sPXi88tb*L`6A`>9gU^&v3XWA2HhTvnDC&tc z;e0KA;uq9E+6D*slFLu?GSZNQPxK;FSah8`{o0u%{EAt9yo(<*)7|@-(8k-_2dQP% zd^@`0WrwR@B+Gc|5)O*rVtv27Su|P#7E4Y@UR(8XzyRa8iX?VBhKk zsGxAkO*ofy|KcRtl$HtLC)Us>0sw|fc>lfNHQ4*%;o&4OMg^1nThcvNQ?aq?^9$?B zLpoPUGR`6kLiAp~Sm-%NgR?hHw>3Q;A3q^M%C*AW!(>VJGN0+erCrRVcJRU6lHFE0aJsve`BQ*zFldEWU2Z%d%4?7)I1j)Z8KukSg73(hswmi=2`>j+=@ zd)sQMZn7{MyMqt2Q07!2ID>8)atJekMbXJoc&;i>FNbT7PR{;#>Nf2R0gEG?K}#YU91R)Y|40p%$}DQ!#jD@}{YsG^h)nd|6%hDs##a z?_5w-!a<$T8-PPHL(}{4E#3DG2~?x}Am;-Ds_|pLdPU-Qci zmt$>sxJ3QKbqn1QyNUrbkh{Ixrlg}=u!4f#ZNSbRxdH_rryWABkEM*Jb?+E7 z`>uBTjSW0UqV#VGaldrI5m@`-On1ix5$v9wXP(^%xQQ~azadtu#`RSZvW~kD895b_ zwf%%_Y3O0?#2YepfUaX^v^BD>xXYm)?xn$mHb&ASi$k-!L*Z=vfko)OcwK#MrOSbi z{d0d+SqqtXHi?2t>8KS8!4Cf2@c#&R+(0=;nyff{5I^#ncHIvC0X~2>KhZHg!*TxV z)vMPzlrqDeCz<8C`CY9dde|xOcFc##U7o4KR@aKRWYyxcvlShkN7KGB9Gp_B^ItwM z35ZFVP|9E&d67>*AQvfbn9KBEe|Pj_Ri%KEL4>@#!tfYnVe>Giqp*(bhi}#6P-;uVN#o(Ad8mia=D#FZ;od52sUo zSnv-59$+=_(G!nLQ3F1K)zHQmJmq43*_`pIs{GCSHa2Z`0aals@Nwcap2L7*l_kf0 zjJ@VjqscyT1uyqAF#9qtxdQI(e~lFU92^d~B5@079pBI>Q9-fBxtvq7JCp(C0y;V$ zL&6kp!xA4jJy>7zf3mTsSDSWc{W}NbCK&`mXIc>=f1M=w*Hucaab@8ADc7$*Z(|Se zK@P0NH}iM{>%sDnb?5x1#QHxg8F0lN0PfS$GQz7psza8{5@K3PCS=nfW1Y+y#*jng z)M^H~ZwX&79mw@371f6?jOOwm$<@g+|NCE`09t8?ho<~-WF`m|DEmY?d>l^rudy^@ zhlGWR=_p99bHC4fp$V*9@a57rdNBT z3Hz^yocyDv9H@koyqkV}DM~}N8>baLb#rf1KUI^XyK^UY%J!wzVtTTHtld(eth@{r zVw;ikN7EupN3V(1Vvqddw(YyIF=%8=4&nc{C}LnyWSxzVI~m*tELr>(tfxi^x^6su zE>CY$U~|*KVSb?E*}>+{j;LLcVg`HXDWv{?YARJ8P=>~lgJ|yG(xVMn3n9-2IPab! zO_vqo$`c+oHPa<#HHTK`bjr*x8HZ0yOsI0+X*-UE{P~V!QTw?B{lLqyb0M@mdj2>& z&;-*(=Aly}Kqd46;o;N;He0gKpNHh73=VfQR8&-OI=Mz)KYGNU68@)EFhx<~)u|`8 z{@(d^%Q`X*B-tfV8_Y z>g~3;=FTU}qJZX0cMlJ=w9Jg~!$XgEbcV%+up$v>UcO5z!omNvfXC}e3Cf8fspmG1 zCM|FdoOybGMLar9z(g;EgocU>=_mv_H7?EEx`j#`-bhSLjNrW|a_lnv)2rQI0jZ#t zs5>V71D!iS`@RjW)0!TDlE2@mwY0ByTu7ls;`?y8=;|A?(}s97m!In_u#e(68vAhT z_^%1T1`^;9oHj-ijQ73)5MR7)yRU5b#tF?7Q%EAkNKRJJBR&58tSS&nZ-@TfYUl-c z6VbU@^FIdk_wIwfg#ddYtNbjmhP(?l|G`I8(W&g>CESllP155&UH@d2(PcrSO8z@O z5u>7kDUYSftlzcl&ZWt&k=q?QJ}!RR&P|rP1wm56kn^-e>$tD7b$`Vh-J?+nrtZ<^ z#^a;&j}Z#^od=zR#ZA;IfS+sVqzmd>LD5oYp$pr;$6Zmwy$M!aBvM~3;UNOK&Oa7P zQ&0NQhI^TPrE1ZvDI0dU`U<}6A%lyOK}u>MZnKX$EU)}Ag5x#1_YR%sqmHbCLgq9P z?j>9?J*ToTlSCP;aISi+BQAjBjXn7hKhK%VDDaap2}8g0R0d%)CQ>Ip%*1LaRnfIV zD)wMPO^QR0`apxMT_I3wr;4HcH?RMF1YnSEEO{E``r(0r6B1-WlmF8Y1TLTy@-i!a8EB(&UdQiO-bug__1pgN ziqjm)`6~^8EoW%Rk%pdDtpA4bYEeo(wMzwW;iBA6h|Zsjbb{7wUNLv+faTZLWyXqBbI@h-@!elLc^foe<9B$peVUV^EnYQA6PmsdX-vjv zKJq30%>2S!gCWU-2mgyCVBP*ns`5!GZz_=@h5~Dm&ZDo70QB*$|9%dkP>hVWYP)9R z`Pcn467u{Z_e#&`BgLDFto;b?|&N@ z(>UO8xiHV9od4kalEQPy@(|{&rbpNW49YKG9g;lqM%&mKu?o*GC=d!+d1RZUsbDP72)QSwcg&k%hQWCSe(*ojPQWb(Km!C+*r8PQs2a<8yQWZTa z1gC000HNARDt10S<*k&-0uBydA&T;Ks!+dc!23ZtLBJQ9AK*PW*=zbQHFdvu0nom{ z^gFK@80VkU_SD_^R;CPi=*!);$L6^&C(jt z2Xs%Okx_bL8!a>E7Yp+XpNNZREREzmDlPwZelhpT8T1hvV4-5*!WpMnD0g#ru*x9G zgTo{>oZCJdim0s2Uxt#MrdWT-k-!W(z%%nNe)3v($8C9^zB#)3jkG}Z+A|WtVE{uV zuz@E_l1xYF#rl;>r9AXNaBZD45u~hiyRgfoTKqK9Cjb^~@CI*NqsWxZ9YSqy>-mNX16JyeqXx|ebi6&*=r-+^Q`Oq!h&_>*~0&6vCm|phHIv;AMjC}$d(WNDeD zsiPI&v9N-qNbVv)kIz8`<-|Ww95>PLyC2h{X_MrHRt=g0OoXTRYU&B~j?R58+m_!; z6V0Fs;#OP#v%Ho#%1eU~#DmC-Qm)nL*w&GY1>loaQ$zr3_2%6^{9+AxoRcIGBV zPXUBds_^wvaL~D6VspTIq`!aHHAybu!L?g$o0-HP8?*KEDVnI&ZBOiq+g?#?m&vE# zvHYIjjrZ(%P^+3V`Hq~@#NhKvSNADTK<+5qNqx@W4vl*A)^I{RPaF=QKEO2;=RQ-5 zEgu=Q>B^i}(~2g4#D~FX;Tq!=d37Ecr`J#JPChX9^O$iT6+!RS*4)^fZj1&63$Kt6 zWv4-1(h#Uz=4JAJ9R@rZ^ICVLbBG&26Exrg$BNAg`1|`EQayZuR8){s9Y-5+iMy5e^J11e& zcUnge(9T!lVFm5a`2YrWo(QxBY7Ip5&eokcI^-cc3dQQLZ;PzNU`_cJ5I5_3HtfgC zZO6{Bl_oVYRI;$^0oBOJ2-}G>3!As!IDR`&^#}Me0b~AA^DJW~u%z{%5K#b9 zUkA%<#jq(rLx=~r8azbNGrK4*v`IOsveEl*Q}TMtQXK7(4=j|E4lPk4T-bRICj z%+EhCw_QtT1{ml?eB2uw8?*iwaZ>#q`tHla;e!y`+KhUmN$XnsgSiBKvz=8#wIsQf z8_TI?zJ2qbYGes62+`&;)bLj->~!Sw#gUg|u)~`w9c;T1%OB+hq`P4euD3Ff!hQsKj6KpheWJppYqdrNwUv&krRAk}V|gTc zG))ZdnhOZF1iBhVKWftQ5RK>Uo>_&KdxCxEn@gVb5g`PM+uGBe*X#%}gcW#!Q zv2!{ae5acCJ@+)@)6Z^4rhgDRiLB0FD<@@?`1-x+hTFOe{zN zzT-kufO015z!eI$dp4IH>k3bjr&1L_9yScKhMxXz;W8~B>*E)d0uPa>bk7;CGP>&3 z?#P>FZ1o^0v@^7HB3IWZ{DEhm3!puoy^1V@*Rn^G&l(FVF}^UVaQ_5nZLTcjpx|;y z89}ask{l@W)lmaZ!gxT*5R@|OkX;GhL=HwCZ+qTUaE^U!pms7YJ(Ox7-#S35sM`ZU1}za0D|8vQ)C zcC}o&ne4{0hD<-GnMg(4^Fw<|r3jrD1#C$RT_hlVHA2lMphh9xffdk`BCAQm4QU|%exkED(S7x^9f;I}gba0@u6b#j8;$gb{cU2{H-u$R3$yJRThK zuqlA-!xb$T{OxnojIzxmtd9(aC10t@{NyJSb?^xDDmd0U^4N~P<28{jF>6b#aZ|9j zFG%AgCnboDX#tIk2SDEJWcUu9mgH@IW-`Ww;HgwBtEnCy3S zKL%(bXn*6MAgDo{pL|vn%k(=-wP>Gvk}98K-Tz_1kdMI~;xmtZ&V!=t;0^9Z$qV-Z z8~zEocJ#cOG5tyIYUHL}U6P!P0R(sqZO zk8wCan1$CR1?Q%1R(_RD5mIM$dwD85Xa49%(EoUk5tr)3v_OYo(+ja7^kVdQ-k#<) ze2P;HJ2(-yl=Yfr+csLleN|C!8ID`mkVi3*i|pmxDf3@tUVq({MIa)KY779HFAhRIVFS5ZUAP!_Zp{2v> zF+rqDC(#kiL0nSlKqYcxAr%>cLtidKm2?@gfy(C00-Ml-t2 zf6@I^`Qqr!k5)}zh;KP+uVWa`+lua)EV>Pb6;=s-05;vQ3CLMEH|{7d>(slMq6X(ELYK?2SK>9F36l8IgmvOmibG zEe43)_$61v_W_{VwNXDkX+M5Ci)AT2K>#O@!Jw;pEc<2E|7hj@UqJyLaO-dW(Bm8c zsOZd_ai2mXFIt`D36CJ#uK}`vcOC;3=GmuRFsU5qELl0%E`ePTKH6MD!5sx&FHXc( zr29JXEh#5&&^hAEKe8wD-NG2prC z&Q4|x6k|SI#7lAS^{VTZ?vfTe&vUm4vykc-6)CBRtY}t!dyWsT-dh!`nduNLmo=0- ztN`~{++YEq2~fOvap{eVz-B=-dZR0ljzc4)`A#}r`GJ)13G7Rohl3pfK&mJX+*H5v zG}D?V#oF*&q-dO=yWImcAQPKnG3cV~_}Sl?r=Yvm&cFq@zA1RubGz zKw9+l^i4bBPYiGZiLpu`$p=>ye)Z_EetKh~l1D!GKuh8$1sU;e)y-K&X!Tc4`1jVF z*_MnXp4f|tdo3IIn6RYv@PX6|MD6U#&6yd@0{w>iz@3y~TSHI7S zsiko>06+vgB22O;sc)sbe}yDI!^TXXpil^*Cc62U{aFz24PH);$;UmJbP^wI>@M-9 zI(Op>KT!iiRIv|bj2am#(fg~0TrA1n#c2jyTie?TpZcZS6OQ`p0Oz*T2Sf+!C68L( zH9>qcExVG$ih(wp>E1^2@F~w6TY^q1e%n5_MNN)|8JzT&hwXM&CpJDusRiF@0yN!IzKeM&|2 zY#UwX2Er>oumpJ=l(%`LvbX&l52rZwAs1cn)@wGV*AZa!LH!@6r5MCTzRdE z-;`+E?7~9}S=Tb{&aCagu>X^N%V@JSi@xFEH=?*P zL~8^y#eF*^2dwK*i|Y_J&@2+=gSxyo2g7Bgaaw=}@Zp@}=|65?zn9J_y03BG4{tHQ z-cr&TA%d!uPNx(Udm$hOaGZ@ekR6o@>ebz8?eCzvZEv&I->2Hv6hdu_die3_9FKSUSjQvyq0vDxz6=kckorn_z>u^( zKMRx`KR`zgobCu6`=^inAKy!XKLL#0l8`6MQEX)2(QYl)1-3l2)A$SJOA*hXA1BC@ zu3HcDHx)!ww4^I$p>S=<}MD(f$O@-`YpdSC$)8uwW7j^lwx(dy?n zbVQu2yP;)1U8{!bIyxDTI^+ZDB)l+_ z6@JkAvoT*hH3iA;Tlk}seYS;46iT0XTXaK@?F+&;%uT%8Z&but%$30pWairUUh95Q z>4sNlD+t*8%A~6#TG>FGXft4D4YibFep{PKZL!fVn4 z5YczZC}JQ`ZbJb)%_-X2^lIT7NYfg#wwPn?Oh8q1qamLES0^c5MeH*WRw_E5qaxvx zWZ<}Gc78Vd0iqu3v?Io0hOUFZsusWhc)Y0js|%>rDpu~oo7J31z&g{bd&*4UxYx#mRZw90nnB>=)HL7+YwHJhO=4X=-i|i(2{g9 zysOiV4}Q)xv&ANNT&1Q16`5?4xI1?u`Ic$A5?9`9#L5KwelVs*#qJCShR)Gxb+@Y@ zxm{?F5Et6WOzkLUN#0FtPY~=fDCgU>HAxmk9MF_lsR2U0vgtF9~YKcnuXX zWg{Q-faCzk-Yn)XpsrMmZ}?O#CLm60mR#Jz!{?Lv?9Mo>=`2sLh*Z`W6sVrDx4D4M zOt+XnpG%Ee_dn|kXj^*IS|w#hiS`awe0Ed>9r|Mwd>gx8AV!>IO&uyvBQXiaptS8y zz{%w#dK3;hqv$nLiX5x2I)47xr77Lkg&#Mct=$yAsCS76-$)9JFi-YUnH()QET_by zmX;z?!^9OrMZc2>9jtwt`5wf5DQtd9d4x&8w_*xpcWU1CU%MU&+B`PupMUy)39SE2 z6sEY3=p4tIcO@~ICkaX19<@G**nUOcMyOQ)GaxFUsd)0;Z~A|r*>p_&7MDX~GWv@c|VOcS=z!qQfP-w*y`4V0p+tdK-z&hwqo8Gw*l zY{VtH)h)eIRsiJyEi6uGEuEGD9jMu!j3*jNZAJGHGRq0YnN(RU_P)SoCK%MN&n5Jl z5`RmbAg15aSx!AR^B-yP2XK9(2~NI8?S)sTqjikJ_3if|>#ptuc_JFePfu6ID%y&g z>mY^7wJG=mzOE=aI-k$Qu(FiS^}LG73-E6O(+jDop*@6ylCy5%eM5OqCsSo#Q4!DL z!oq8y^7kNoc6}6vcdx>3)9JRp<@P`RAH`<(Y7V(EuKPEjb3oqW2Xq0XbpOw6&%uu= zR8)cLto*_S9NYVs5{pLWN^MNSObP8!gYQgAx}5@e&~GaLn4DW}L~D=`Y09pm1`Xbmj*SyY}h4>0_bd9}8RY z;s*_v-gi~c>CK{?-VLs1B#L|h>*u+vfNiVJZA|JNvi+PsuxOYI>Z}g5_FlbGkYDJL z&T*%B?GDn{VI$L1Uw43U`DC3}8Ct*8g27t5AO?J4-L@oA2da;Edvrcz56r2ExqnKcUsxE0KpPLrMRP7JKxNU-mW9Ya+b_Lm!0yM&{W zg9;#Bqp9ho9S|6*sxp51E<7OM!-s1v@!rdL7C(R@UAPb>PM5dBCFow&jCc1Ce!I2h zBClh2?c1ATun!s=Z#OfBkFJ*WcL&XHKD->cCWjUj9nF4I}XUTzsuDr zFxq(Lv>5`t1f{Dm9BfN_+4J+BwAp1=tD?%uxL_rL<#ieh^UxdWweaxSQ>I@gSB%DPYMFsaJ8}97y$AImwM9Rqw-nW_#v$@JMP0Ad!Z@>{y3lD>L1?Fz zrxmg95m90hZp_bLS#W&UFheC#SYarC;`A30x8-i%FP{u0Cqd-iUx7!m(89(G^N~+I z?Evj5%3~A9byi~I#k*0RZurvF5$VT>k(NRRvyT&Gq};R;M&h_#f)!n@eZ88UxxeF{;5eco-B`F_F!^XYa?3EKl zT^3&F8theN{o+-y5H5KaDANp5+f}N4pT6kwZFE#mx6;86G=waftv-r~)R@_5W4V(3 zD(cBftq1Oy4H>mXQve8W9gkleSz(WQh6C=8ua|{N$mUmeT|Ln07tGT3$y{-q-W86i zZ#|bt_BxaWTQ<8S%s^+IKbk4;1TA$O@9#d? zUO@}KSi8Ix_VQ(TFLwVlb#|^O{rbt~rXuHA7CJ~|p9~>GAD=>eXr@nlv z+!+|>v~G-dT@4yF(Kv>6j)hRTj^UKZ$S@fh8H$*N9t`(M4DwPt{R1x$ZOT!MXAWr} zJa^-y%RRd-pH?;|rP(EOn}RM(Mpi8ksrcSC9UQJvsqea?qGB}lXaQfe#{UX7{DD1e zQ;>|Lz!gLu-ig1)%J2=W^Vv31>QXt5nI&PXDG31q?HV3QaCeFxu<1z`dWvIlUuCma zboUTL1bJRp3@fLZd6q2DmLIQBV4J7;+^HMZf)|hKQ8Bhgd(#}j0u*0S#sip)SJ>9$ zFxEoOF4YFG30Gj$$amVd9<#(DwExzb%&h*h_c81MdJF`0{Qla}+2cnuFr#m^;a)p- zLO6fl(b|d>7|`*Zl{5=5P5?FL-ZFi6={S>bZP6U2z%V;hW@R0JDR6HSQ7qF96{82g zTI0r3+;me&^vzlPv(Uw!W?JWVg71I;@PxJBJoA0+A2B}=3(gV&U8b1KWUnd}nD3gn z(BcQpq3^Q#zTaP(&*W%XD~)k*j$R)t$65Sx9D$tcm4fYW3gFHQxOT&x6RuR1!Q#F3 zinX+t^YGDbLnSXPM-)~?);aSk=e`cQfF_oKt82Qp z_nKr{sYOp?_srQHoLcr7+M7{T`ok&X{tr9i`9V2%apT(wx-0RwPAn&K$c9ic>lpCJ zLqM}gWFW2Qec&X?d17WDdU|?#7I^VQ1##Ej!|b3S;N})3_SXhpzOdDN;!9QJROw09QOc@w4bh z$J(4F_-vR21$8>%Q@5pcQ%J#40)(nOW(Rbzqng^=TuZUQ?g6_z(UsCV^6bAIp^N$n(RqC{?)ngxvr5hmK4$`i-9#XwPL2YfZ+0NHD z>vw|gW|WMaTw7(437HvE(B}2Z81g8}YHh;Ri5QXC1{Kz9UI#QaHFkaz$WFog`(PpFABodIOq0GV`@ao zV~u=uS1Uj5re*M$bVk0F3EIMD^K}XyTXUoB@c_k3d~c6BJU*4eKvK+QHCABC)KjQFq)y}}7Ew7?=dBoZKI2H;ljPh$Y-h@>1@i!FU zE?^^7#hHOYUU=~ObQv{k<)qSs&AE;U;pJ<|^WVIQz~ZAzAK#@1oyCaRh%`mBfov^I zaY5X3AbZ%`ds^`M*Or!WG7pb>H+djkFigN{m4%;vIxKY|I(KWOl;EF2KTH71vHM>g{K37CRb6NA4FjBL+&h-Ogb4oo`Fv4@xd%qw63DXF>+$F?&%Yp3Z z)0DiL!fwkCES$C$)E4s(7++A$>124Ju+K!d6c-TP_jK=#m4h%>c3(eeE(gH9v z&KCJvFQvd+9i8TroKzZ5UKkT@f+WIcVGL=3M5I)K(%n!pU8r+MSp?VuEnHrmHUvk- zta1I1WA<>a$dY`Xn-7javk0ZMV$XJ@r*$x8dkUh6J`}X|Bu- z;k}>tAuXhT4wWpRoUUBcRfq$Y-fV;v(`b7KE&&l_V{nC~yCMf$GWk0Db=F;JL!X0% zp|dl6bx` z3#P-`-)c_=U*S;)H$GH(i>`S{jEEh)!!~iCk&L=NJR=F0;H%*s9M)RLHtAEjb0l+Xdy0W_~F-zRkqW)LoNI@NIE0yDE7R@t#E*RHV& zQoP~h>1nq63^eG0gEeGm>;|ZqZxgZ}y!dyL!{B{;BGAPX$snyRCLk{_A48oFmpy)Z z0aX-|@yZ?15kBHP=aC(=vB9eg_swheWdDB|-7N!CU?7k?Azn5UA<4-0a#$!7r0~fw zobKL+Qq?6kcmr;w0?{IZs%4_Xpb_E?HQm(?ac5o#Jj;Mlf705LoU>4Ya{J1{o&~V=DuwfUYO_e^G=k~Yb!tJ4*%^taBo!S9LhctCx3Kkj-YZN8EV zyBb}F)NcFu>_lQv+<&-T|Lb<}I|pcIbPp3Bf#SP@8}=lNV%M9{jgR?6y86{QA78nh z#0c)*;j~N9uds9KmH%{&SxAPRonr=u*JosAX1+WmKB$B>+kYqh{Od`qO1GW(>trZB zKncP>1)im|?tfC{wldl>_3;_A>%u+DvGP2d1K-pQBt12uYlLh#+i_r6CGnc;@D0j0 z5$`8%J^<3K5j!1%#bEQ8NK-?yjvOFV64`rtdN693i`zpw8@$upGf;hf4oLeOsYL*=?l!loBr3pHgoy7{aBG0D8i+9 zfc#gmK+x+jN>RM}gYJfp7f@S5DjF-+(>sWkq=@G}tNohIO>T$n?7vKY1I+I=8HVNh z^_Jar$_v!gIoNo#AY!IPj*bh>mV#s7jsw{|fILdeXJ==o5w@G+$JY!Nr7W> z28W=qRC!nQl9u=z^$x47|7CC_?~(u<7k03F zno{`Y0N2`dn8aMU0avgVQHe&nlB>S`?DZpdIyQ5l6}{th=ju5UNy$3O7Jgmb^g_6a z29PuY{8QE?W!bCmVEo;57cVk_kp4a&Wv4EUb1p8CF-$&rg!ndr8)UIVCwB0C7t18}6gVf_B|mDkJKSbJE)Dh~;D&cVa&C^n6W z{0dJr``$uonjLak6ToCDbsvl9r}XJn_V6lA%(1NS@$a~~YxU*#?%ktTjNuF~-f)5{ zXUYBMcMedu>24=}d3V^VAiMM;G&Dvf@nM?b{&sJPoa)Qa(4LA)cZ3lege$uBXtcVK zQF<()r}`J(;~Rv4XMX;Ct)=~~%~E1V0x9T0IF{}-|FpfGQ{LrbWgW9$F>hj$PZn2M!^xY0e_;*pFSs#6Y*z}9j zV8w(3x#q)8i79}(BeeW~DSKqpp*MYo3*}Z+Qi_O(c$jm{|mVTdb>+a70Tno;IomT0?e)l;71MO3}wGhu=;`Jf9>%nD`y%adY{OWfOa3@$l zGqd(H`riYwcGLWyMw0NoJ3!+C|8?2Dlj@K{#$T?J?%;tYvW6>zL1VK>p!Clpso_09 z;e+noJnVpKR02`ujVo)$uPjN)qu_A`e}i1f!97|>_P*1PeXv~JvhDEzb;Hq5i zBk)sP;K>B|k7Idqw`dO;oD>hjCx!8O9kvAjoUhVf0{=PiHbjVKS_lqTdkzi%rg;HV zf}ETG$^!G^-%|DG`#BK*KfP>u=*t)m++OA9v&$606M`6VMFHFJy@~_*Gei9XnDP<& zpPSi@e2shyb!klPdrh--ARRe5^Q@U!u{lco)8d^hMFqnf=^yG}Ubsk;ittDEe8>r}bh+ELpPRlc1{ML@W>#iqf9x}{$cTtsy4%3) z@zN!mLGblOYHAKK&ua^TYI=I?%*_eG%z%eWle0HSJDUxYC45UD4+;v-7nqVZRc;A>q@;sA&x%~6R^m3{N@{aFUw7fdmA@id0(1$h-0v%(RU=%mN)9E)`XEQ+GM0`N8v=hJ zUZmsU$>~PMsDwwsq=KxMgDQ>g`)_muiVN)n&Pxf;ZV6Pco4)wLUkH$>gvQ?-K!a{^ zw75lfOg@z4p~3xFyKF~eEJhL(mHC1k5rwLnpL!@%hJ_SHngoFHc0 zw%PM)A>>=;25o{91PRajjCQ#B66^@I@vF-?0%41=+2WTxjVCo8FoVZ&));yS zVnuT$$+!xZD9e)x#Eyy`OG=8+q;)(H!-L0}kTnHJGZxB$Ujt+$NqYvnQVj|y_*-{U zUoCH90fWF7n?*?#IEj9Lmk^=8U42^ipxOvT!=+Q;-yA8a5(?hE%H#Nt762d(9eo`e z&|PiR&jv!))T~W>1$%kqhR-PNNsLOH!U|3tcr&6n>G%N*iW?g#>2bcjr{!2PCfNBd;q>2L)cFU4aak77s{ku*9&LsD%l0KmbpEnY3fbaAA z`eF5W`l)0|lVe!y7)Rc(T}?wl!m%>Uah2e8Oh{M!%RstPxN4+w=8$w{4Qy=$6B+rh zq>^{uf)9IvbW*wU`-eRR#SV#Ku?E~B59c=pdcn?yig^7LC^#e$`#rB{`1jclxq|#V z?uRU1$$!_(q4$)3_v#_{oPXEMziWnYH~9B#`Zp)|H=p@E`TARG_HT^*H%9({5F?)y zq`(pc@|dru=RG<{&aCdW@VbAnpGqm};rTLN5{>3FG#_NzVlYW(uil~ueLX#~&xHEa zh4Rm|t_xj9SN2brwDp(U>Ra}uhxpza(9&{RSTpt!8s;l1DpCo&#{!hZRN6i!YE5WL zG;4ZgYFlMn6K===VwyZgfZMJBe9N&8+#d~rv+$JfcD+&Qy(Br;e$~)2n1LdBy14bS`JqqsSLqH}XV3OxZJHYKE_syb1X~2gp0UGx`p`OVC2j7VfbYnGO zAsIk&t>g4%zoXw5J;fP7+F`2Nino!T3;>0j)mF`G8LO(N1G*o=9t(z$?C37Y8C{8w z*X=B83D?hWK%|=h&+HN4nNuD{-#x#LH0h8HkwR}zBCCuZ@2qPBne2qn9pQY6NuSyQ zr@FQD={lgc;!X!GGk|!X^vIw8?~f!Aex!U|>l3;$_VteE|M(Gm@FTU0j|)iaP<3kWeIkr-CycBql| zb+7GJzN`8-p5f$uE;3&imX%1#)30b@n0-X-_U7UHROT%E2w&ELfdO^RQbXvOZKW{( z$1g*I`p%jFsxhH^17N7vnVEGZ{Hv>l*;t2j!Pl}reWh{$;J=}usF(&io9nMGQvxtT ztO4BlLjeRyGXy5FAIPc@ubLx~GQk_7>@Vll{I-Ga$UPx7+-lSi1&;u5t*#`gHHqd2 zXyzsX&74L9Jfj@u^AXKB)v0{axC&1vSTYK?CN;p;qy(^o@$JjJD3*7$-{ln z!&}b(J7^jl^0e|Zz)X{W6*J9)FV?T`t8IJInpGRwXw(bdw~j=SJsBMI(e1DK}M@w&y7&*-KFh>0RW0{u2)~Kub|heF)J*|i6dY-8`1e<*8x_52zPv-kS*)0MibhIsv4M1y>2L`9}x@vw7B!ENr3c?64q4DW;4Tx$= zJ_}j&rA^?;Rj~{CZ;=5ary~_+IG)?5UTpUiF^IOs|$bb5+#h)~&p`SWjsgK2Dd_UR}Kkt2C4) zfy6oU^*o_wlc!e}!)^F|OZt}gt~s05(*n0R&>YEXJJz%isG+9D#?Q}>aVj+bK3zj6 z;txX5NXgEy)9ZOn!2tris--yVcQo`%iUfd}QA9(IYFWWSR!srS_rRa)6(P4*K&*Bc z3$X(NWp=up5Do&a>jHp@`VqGc4Zcb3t>(dM1I(r~q*SN__Kzb>Y!7V-gHn3w~DrQd)=sC4ojHziWLc5KChg+Wg=+mZrJk51Y@wr&&*6 zL|{C2>p4p~?;%nGV&0ngV zJAw~m%5M`g{{6#9%E5)EdL$4@r{W*QBLq#UBbKAKBbz;Fq8~)8agp@)LU|A*fNOIOYD4#{6x9 z{Rvaoy($rUm<`0A>-K(4pq&r#CcdMPi+@JKdif4zKXX0h_TW~{t}pDR0o>(?F+M%x z(b*rMxd3QDu}|%sx_8Jz^?OA4u;Ah4Q@^q(5`f}bg~y31+R2HGx6E-z18Xh^Zf(>m zBWL0YBuE#Xr>1_s?;3$ZCZSh)7_#0-IFEL>n9ZLa0xJJ`d?cj_J#(6caYIn25#`=G z+x?M$D95Sj=w`EFf0WP7Dh5kBE zFweG=Qu%=u+?!{H-WT4d6-QMS-a4!DyMHYQ`1d^4p2Nh2NC@8A--a^Yo>iFrq zF@UoJTB+|^Sy^#9e);^_0+|&CdLlR=3}A@M!k*^f`wKtulb7 z8i_k1p`U&wD5jhwzAdmI;p_eUG);VVWE3F2jM+ohC`Wbd&p4n5B4x<-MAAV=FQH%2 zm2(smPT=kYJ|ore`|#n;r#SM=4*=%&NvsTh2UrgGiyj|hO&ZNG>!o;6(gj*u?7y}}rYXiM zC@WvVZz!bREjmxkNN9*O-H|Z=$A(DB4<}141{Bm;pzP1M;gX{+7Ic;wU3;GASUJWS zs1cq}0XRM@@baa@w!xq0;M^o(J<;(nDubRj>!rBEnZ>Fn7e;;bVm$&U&hn&81C_pW z)ExZx=)oo}F21g)@6PUMAY@3tmmBaT5{kY+lmKSo`MO3YZVT%!I z#SFxD^xwV5fu*nHCMea~)0%G|a$bBSzcriAVfJ+(mUxGL*vo>Xf1qVvweFg}csp6h z^epQkLEpXvMfw*2=zhr*39avff#}YNQg#%uYqH%~R zQ4`maW-{Obe_fgh{fNP;K|)Zl5OOvxBg5Jc52)jx+?<`9NcO4k+y@ar>q&|P?8Ki} z$bWo@i-}2ka3Z%&RZVUy3c%LV4Nsxk@oeiR?edgQ`!#} z#lqTDt?M0skw5p1;9Bw7vlo#9r}|E}w(Rq~q#Zsh^~tGXeg3Y_EWGJWsP@3unEhmO zbWd^%w-g>$hpRqK%R3BI!bipTW;BW&zTJionFP#{S6*Y1R@cx#Cte1d-)-AK@rXAd z8LDX8kxX$fCj$$jASb6SA3|GjIHAj-ct5%1AG3aXgJadn!%%L|^>7C?(HeF5haj;U8^Of1Z>7uFfBS>#hY;lrU8D(W?Yl4ODBFD<#ktOW^@E{`2{T z?TnIiRhafFZ0ZP1`&}O6JvF22;J(|-W{hq?Rp>&$clO3Jz&#)QN(~m*3JF0d`QG4S~+8ZIloB@tz#uJ)QQG z`2P7l-yZ9Pxy5f?S;Z@teH!t1CN-EE6LgwE#v(|(kLJES?BM^?i$3W9$<|oyGlR2T zU;?Xs4?YBa*sRL1Okmet^NZrvw;Z+!a^tz+g>kSPDaTQ?kwyD*Ym(bUWQKX4;+}Bc0$+1HL4TgnnCpAeQ{kA)T1yS|Y!C zr|-fx$t?|)BB5iKl`wglD?YF=k z{*Hn)!L4ON;(cRlunVx-COxg|zcnPVFVIm?a{$r3fgLSissuDqPj`t?0D}Ppea1 z)eZHotEs8=mMdb-6OP#DhU?^xYcYO7*z}fD4OLXQD2hu74LXffc|Ow~to9L+7oOHk z_L_jF-Rs8#Ih*xci{gdJU9OCEQj_EEW)s%-GQvma|MAfO>$*6X{v#Bb93{hyVQ;Qn z-9nVIAy^R8s-o}w2lt-7RAtRL-j_bXvZIDTN0oT10sGJCt=xZ(6a{0K3n~ zP(fo41F_&tFqJk+`oW3(-A&aoL zj5X0y_!_~9oanNZs~khVH{=o|3=El$p?q>Xa^}y)y1W%Az?JxRj&01gW898H#8o?e zr`$aa3m+*|ti0wgsC~CmkMJ=6dU8JW)Zn|y3Dn04FSBo2AKjh294`GzQ16xmmme}> zo7Dl(mYMf>5$E$BcdBL+==ONc%fRR42*L$WpXjTIoyUu`2t)QLs2`%t;ky6i&Q$1Y< zlo(#G?W-#WO<{D9X-NJ3<7bq@wQ_XYsO@XnICS#+EAl!&uuJXc&>RcLSt;l$|*;y^cMzlVhy}|WSq7~%;oV%j+%nvKtu(DYK-qzxLZ;u(q*Y%O*UCb zZ`6H(UR8X(a%-XIQ-9)ipB?T4iId`W4n36cYH? zTUUg;ZGD`{F&DRV>@ghSGN)t-$@2c|2yxRjPBQN2174V0++wlzV&U~?!XQvqCDvD$5A zY5mDr8sTe@`db>S&U;#3t^r-K^Q~+dZ{HWxSZdTCEULmHfZ|6KLAzp>G^$~je+ZX6 zUSMM~TDrfr0r-b)1-@A8JyZ=!0m$WUIW@OGC!?Mz?UQTyjrk4!%Y3pTU>jc5!kBEq5_bX&ahamJsXxAZbAj^`sSGFIm|PF^&d?@ZJS_dNOxe=tuYS2on#ks!z+ zC~~XCnmQ*sJIsU~@QHMcJO+w}Il}}eTvD%nW?9(x+$w6`@*t#0yx{1NdjxkL{Kt{< z&uQ=oo8YRGOI#jW9Ej5TDk3-zG`8K5NVKrW3(b`Yh?$JUqS;b=8C_?1xg%Q8OhEHy z-_x2D*g(DdNd0%~6%xHKcNF18sbzb%$ptZIQNEf9?qnDg*RI<3EIxCtJ#;?C z{Ev_P=kyZ9NdHR7um2%%_ddgX2&J_Jl4?uB zb1PFD@m_{hT0~U}Ru)dx|NpS}-f>MO-5>C-4HXduF(A!CuPRcc1(7a-^iDve35bC7 z5>XK$2#NyIr3um^MLI-5Kv8XYJGjrz5 znKR$ha2|)|dXX_;f!m8$optQ89_``P8HbVMoOlv1*hf~$&WXCnuw71r9S8YpGdz z@wqhMiSyg-=*eBZve|p1ju}y$-Lo*zltJFgq3k>+B>Umg!s#9>aaUQ~dnu01RJXO} zEmL2Wbw~WA(AAolm4(W5!aGvr*$ax2$xnC$jZ3-)8F*6&g{g^j8Ga37UYL6AGQX%} z@Oa_isMf39uqe%%4O4pt|9P&#*-&V2S5rO>vvp(4-17`cRmStz2t!UYL`{c5nPr2i zD|q%ym8;$v$Er%z`5gu?>eIC{o*ImXb3z5oga+TbD@L|R=!HvJXWh}3C;E3PH`O$o zSWnH;3`hK>tZY}lQ7CS>wR?xuV!^VK=i<%UCAt<9Zl&GCrzJA;Swe4O7$XcxK^ ziLtA+p-NU>ej#8V0|^wBIn2~ld04_+D0cIOf~TW153b}5*ko2nPP9G_@~r<0LVAk# z5By5~4z;X9PY&DVvXBtf$XIWIZ*x_F+tH3KiX{m+agaG?gG$1tH zCVQ)wv9mq0$Tr~SzXW$rG(w_;P{f6$agu%Kje!eRP$>^k(vK6I zej>$Cekq@{7PkyR^4ejZ%QVZC@pxL5=tQZxIwE|dPG;rXWm=}VC|>dY7f^Uj)~Suv z#>dYb@;{yL${Ad0D|mK@u??0)7<4lpesnZbjj-Mz{4Lj{RO4d!!MuQFO#KSxOYFmi zJ%wLSthG||#srLXS#4(lTB!M+@#ia=%ny(-H6^8o0UJLO>^(9BO4-ptY{Jgf+$_0| zbf*TH7CGj_ru00EHOx<7`TY~WkgHOu`dNc+z9D^0A`VSOQPQf})>;dcBU?^v3e?a?lg5N{p;2k?|`l4iU?Axid9OUbv0+W$X6`ckmvpX)r zUkxb${@H&q@C`M-HR0lAYJtkR1NTT+zN;tJkoi%9ov(uR+R(%3NVk5$(h%(K9gPMONdp6?jp%Fw(=T!M@fFVR+cLZ^zbP)jn^B+;K81 z*j^ao#G0r2;yu#MGSbb7hU1i6U&YsIEJSVBQIxbGp1G;ee8U3y0RMjLf#!qzKoY^Z z-n{OCIhyCOxeobyw;mK+<2SDM0ZDbF4Uzgdk*)D(oKTdUu*q`$)Oo*++x|w0Ox^=C zkyFRskXR1B%u@Q! zO8?Wg=&=iIV$X9Uwg~g-*Qai6;wHrBj-!l7C0UjMuuj|(NmJH0m88@@D?ALun$L`P zhXt<}*~$pJg2Hwq6QDYn$Z(N8#P0Pe8P}NNr5;7uWK!Y0>9fqY(B%%7NK)qDjn-F! zE9+!d>SqyUGdG#MW(;3nlb>8dZ$8QrXS>F&d5Qel7MjzI^qxQ$PQKk7s2bziHE?gG z^_Ak4iB41xoJ~S{?mUzC;9Knq_sTD*o7rh0VO646_L<%;arI+Y;o%l z-1I^^4e7BBRT~^P$4YtX{TY4sU(}}~9e<+07mvreugR6KLp$9KmH|d5vek>~L zy;RL|d4GS`JFdNR=a;?_R509T9Eq(mS51&N-cxB;IA&Nff8XY2>N2bc883UEq}JOz zn69>2zYm@{x;hJ=7)E1HRQiJh79IUq@_kUic`;@Yw=l?EP2h+-?AD%2Zt6Q{b!Y-4 zBFac`Tl6-L1$j_P(f-`C=$gt;W+0VcM~3T6Mq|K%3{anEWkDPZGjttMGMy6AHZjS8 zfUL|hk&<_^YI0k)HdBJfUuP!uG%1BKo@!)=&r?fK(ozc7Y{=*6IP;u!9ar(5n21pr zPF}qOw(n0+(xzrLkKrZq4|K->dYE72mu!gnz_kKoLp)Ld&fI58<}SMIXtb-8cKMLOueN!oGq&}%d1|-w=CqrU51eQVYs`#zzM5RodPFw@>T=gqY>p`}58paq zw2EauaKWPuz8aj|R2WQpwZLzw61s)&&Rin~TpWWH1}wshC*H@H@uZP&BTh}Df9}^< zD%||D`LH>xyYuD>3SU(k3j$wr2!^Y(%uR6Tis3|`%lDom=AhK>gYT|bX1Epwc@~Bb zKX`vdC;L|$$KSN0Kfdng4SaG4pHsV?@WS0uG)vmqyyQD{yJ$m4N5=sY0;i^>VP~D6 ze_O@WU&I$C+5#mlXR4C|=NJd$qWV|XYEMm*SFQ-F>i68ZPbv8oqaN!TpQ3KYC^9Mi z$w-%sI1%0i_Pb9n>8TtLKw9Z!lJw2vCrB~kLwkwI-ZmA|-@e`tZ+3{7u+HcJ|s&zWrD91%?@@ws|+v)7lFOK|0}vN8!!QDkmn$gL#`Xzyy^a8*6RF$!{w@cy&FSn z)WFK8UX3TkCPjxXk*PDGCsl0|vb&eI@XVje^JGsh?Z+ei0-_zg(qvhdeCPvz04v>8 z-Ru-vD#i+F^`m+*L6N9|j8zP)y>+wFd0TWfM6eH^V@X_`JTP=(h7xhZD@ zpqrmpo37H!>f2&@v7v{UumonTHQaXHaqH3us(GV46E*k}WPAJDX={hC9>*vdJVReU zTz~dV2UIvx2ZfFlXar4SyI_vs@EzUPCt+Rfmn=^8rm%VPCcRx7sytk{jR;cc!3{UH z!%AoH%(tF{T3k)O2*_uUu+_>ApGjDJ2I`KETze&SXRhaJ354N96G$wY(d$zE_PpmM z^3%*jA#af4#hry3FoUM_a=P@^$1~wv16D>e0d-e}KzV_5htkD|VsO3M4FG(wK0M$1 zl1$SJ6NZxss~z&2LC15Rfhtq8&2r}6SiPL!ytkj5nj+IbC^*%;$xC@CAumyv?!b`qA@QZ>iLbl#;3 zc8UBJiQ>#L&qi5ZYO0@Vx=1^e?*y>ZRjTBVg~7?4(SUzZx7Ou1XW6mIGDN5^ZkMgH z5&L2CC+nih1E07QB9EM8?&7$6Vz21w8ous(`av9E1E+O!u4x_kJ%sV3+~rzM&&cM<8rAj0elLynq4h7Z)d{g~HB+mn zY$s!FZIU)+ry51vTDELjACWM`&30Iga8(cKGyK6IlJKR?aWrs`k>(n-4<$adX43nB zl@=*%?>YLSqY4>;$F4&Ox^a3r`Oh*}v(7TgZxL?jn{z9mJ6i-dlX|?K7CXC&o6kQA zKs^co2?HHm)(DEn4mX-(QcpgemigQ}%-X)>L%q6InN+5-7K`AIihvNo6;0b&&+7RA zc1|HW_?K+`FP&begt9#>yX9T9qBvbr%2d?#w9aWxX$7Ye(!{K%Nm=w$NsKm0XXi;g zQ(6qkNaMZUQV|2i_Bs-G?8XW64y<#AF)t!t;I~x#B{gsSw zRxzsDj$3;(3wtO`Y5AUClUewNt}G%E6nl`BMHkG~=N_#HA7^VteZ+e|FJs&!yVb?m z_*WSoA`9AtPv7NwR0!HBifs;WWtdZ?%yX zE~)+rw_zmX!W*iFZs>yeCkH>5+!{XN14)*>U?SK~E^jqqWAk5Ym&ZopLe$sDs}4w- zC13P1bG+J#^R?CLrYQcp{F<6t$6;JM2flT2<^TX~-Cfw1FRRx0 zj6JURrr)!_I8&}#fovorQdjkCl4evrG;)*Rv2buO^})AMqzxAyCuDxCLb5Wn*$71{ zn5HINuHUrLxa01jG-mHyZ~&wpZ`Cct-`iZ3Z=LV2U$2Lpsr1A_rs8D^9Q!-2(_<9K z?sIHHE#khZ+$VG(0xw{WN?T9Tfp<3pxaX8m2kvf}iZi!R#~_n%$6&p~3E>WcwNKS_ zXiJ(;qH@N9naflC#lE`B7^wLLHmsH7Zlbkx`p- z)Gkje+{UOfTa$)$OyN~E5kA;pI5fd$s`r_1i5{Xz60}EzP$a#74NE^G457fL)eG6&gn9fygU+8c6tzt8^vN20wQj1Kb&nKS4}CS1vDZq6ij{=50WC|-7f3to4OlGO!W%0 zzV=DAb}1zH3c+D7#N3q1Hagi4C$W$%$P();+*x51Z?B8<> zvq9NH=2W!s;ppz0Esh2aNa3cj>#MJtQ=D;&lNNgYIb~V*BHyT(ay-b^zG|v_N!3u- z+rNMxZ|3Y!`?e7k2c}Q}Orf=m5N5olC349=QJHhW$>phTc41Ok)&*5#4F2?MU98V$ zMa{<^Z{2#YWy3q@ukXW##HTAN@l>*wugg^S>t)1!Z-xgprKOxkuxD5Gx-kY5^qkUa zKzv{ioo}pYup)l%7qauGfd& z9^DH$=IOH9EFMhg$>nW{KPmT8W-kXm0*1OW#FFS#Q}ZTfI=Q&CUQzq?EcSz}pff zu9DZK9CPANLJ>YPhQ8%xSx!36sy$<=TMfa>YHRQo6LWU+wWQCpE>QyL%|7~3erJE@ z0s#$IC^2g4;qFQg$g@FeYWM^-J1uwOa_(7aURm?wP{yytF;ypXD<=r`9ORT6n{Yzo z5fpstK07rnoUoqKyw%Z2;#sSiSG?S*nNPAW+pLC5T=2*9o70)Q4YNO}9`raQBVdtr z7C)74-5NTu8u`Y3q3%?`ez{RS;dXd)42p@f1s;%vKd?Hf6hex5xZ&SU#$vKT9)#t9 z(YG-WF=*Ff22ut-ZRiOtFEo0(^3RL=Uza|dp!ihdrGPlaojOUs^BHRYg)8NjRNz{9$Pu8RY2ux`{r_u~>E z)ag-+>gCizNKVWn#H^62TD>A&#;p6wy8rVz#4OP;?}Dex(-Z|37p(>Qs44*%TG@II zpNf%IGvxqz9_FOgn(*8T$(O5y1>CBn~y z(JYN}YcV1kapF)GX+ylhE;d6#(X_od;>zq{IFFn@JrOAH%t>B;R;rbt;0ucee6mQb zN%mVHnN@b}J#F-JPSrJdcMkmA*0*4&fRVF+jg2z=_l?;cq|mLK1~6Ec0Y3upFX&1m z+*X2niTb(n?cix0Ql%d6kHw(*J`+kfQR=;`EiYKNYq5K;SCp^taK zdPEMw&*&Y2oS6x$%3W!gofd|(ti(W-^rcF4<=rR*<_q|^@>|&KH9fVWfV70NtPcAF zh!2YLS$y4vY>)|Y*)W4tcx$RoEhiZb(?5Eme0oH9h%sO*mRTwH&Y~~+sQK+pW`z49 zX+EZQIGLd4Qsak-M3E71EH+~=*FWaKH}dBaV@zrndWlY(TvsONIPp;TCF1BSbk(aH zi5n@q4FYh<4qP+NTkSHVXf&>obM8>`#U;-G83A(lm4~5hRWl{usvRPTE$$xUE0G_$ z1K!?DC66=@*7c68OI>c1&?l?wnx;D;=McrNbi~fj6QfGy8TEC{EG%K9djoY~8`T_N zl2*gmbhN5(dY!r?_}cU>mBkJIqnRrN9+#)Zo|J{(g-~;qHO-+|Ylb2gNVAHa&=`}8zG>J;5ln69Do+UMj1LX0FRbjzG_;D! z^=u+nJA5PqN$qCtzS!38RJ{zXZCQHGrLCDX!r;>)Bc&cPqD&YlT`YLxJdA%R-gz*D zl8GBxIcJNcZ2aBwq1dELEKxuu@)fX?s zoQyx27e!hyh-XU+g|mc=VN_Io<1d~O>X<_y+WVryA(+$U8Ox{3_1?xcAa3$~Y6^pV z0!P{N=DIqn`jgUpu{v*!zyI(V{E*iKG@~ZP$W~_INRz1E3+B%e9LeJ5ETulpjii$T z5>w@k)N~p$1+z8Z?nl7I=1s|7pH37(1P@JBlg%vKufPno+5DN9fMeR#Q8;NX*m5S1(!$XaH;SAbUwvPvickC}qZk$aO#?q1U-Xx2FRFt;q@@kHO2wzXHuxio0MRhO9xlwD=Bjuif&=$*`& z2!W_(@XbvK3LRF)(XhFrEv%LGd5=Q$uF)M2K|Hvomt9_yb+1ECD;g=xrHp%_$?B2p zy}rmSAQN%koP+$8>HD-CgG`+MG{vpF3DKE=aZvH+*jMrFwznwRB4i0XhBQB-4k6L_ zc@e}5IO7;UMJQ1P^TP0c2Prp2h8T@m|%oZg`M4UvpAY%(WK~=e)o0ntq(6h3&VY< zXQfHMJ&xixcxdL|cx#$Z|H7raawZ46uB-{aWcfTM?0;9?#Ynn6U4bmmTt$CU?(T2D z@7lBf$S)sWo@^sD#XMMru2ly0KSa~AOCQ6F$zEKu_+ms2dC(FoGJETcxh*<8(Q@*h zw`IrpEIOlSSmp6S-;%}stiy>~QW{xWR^yno_RD+(F6u$E9Y^c63P~$G_NZ^6&$f`L(TBIc$`Pq_?zppF>C-gE zt(2l$)%D%NJR9TpSZdf;VHe;(HnFTDe0L-W8%CO@n%&D zDq!C_K4X?Lm0=sqJKRWK@lp-iXS1H?D==?TS`#Q5t|vo4B-?omu+(>|wlY#xi#l-a1o2BJ z^WH5siU&KJFQaPP>y$fg)%yIEP5(*2ldHSvh$3jk3>x)k)9lVER*Ul~G&J*ldKK@( zzP!~=g{w8T**TF$#Qg$po zQnEK-qi&SA1c#~iQ$g2KZV$V|jRX+Sh*0e7sL}LiYQ3y1EQjL7oDM=@Tkv3KI3fD1 z=i(4Xk{v$=JpEELqs(MH(h^uFIVXZ*3pCauN~PeWt#1x7F!K&!aHhNp zRzC*UUWIXj0XM751Rh6jjTLg{9FiSdLOr;uaaYb^zsj2P}o2>ZD6v!_}yD+jW} zG3<5s(N#_?IE&7Ir4jS4@~dm8`NGe2sfviuP@tjjhv7SD+{rgR626l0y{J2+$P|eyri)#dQKlIxX3% zueg9E96z1!*aRBi(`D8aoZ|w~h%`L>$*!xZ4URvEStC z6*BH(7OI?I(ChUD3_R)pt1Or;6kt$WYt?qPyTZT!gDL@He*2PPjo;=A7LBcUPfS4Z zGO#OH6<%UKCHImOoWDwMluGjKGzHoF*J@l9y_S7P*lYy6l%g_1_dj^EIg%Wtmt1p7 zn)q=a%fI$IZ;!E1I~kCj2~_jU_DEGAXA8vgNCRpAQ9sY|kJlp= znOIP9BnT8%6rImrCMWyMnE=7ydjJRqB*~+AhsFlXEIOWl8eLn3ozRe3N@#2E?(bm{ zv28inDVfPYgZID%)dlYhU0t|P;5irmW|_(}ICGI?FU4A7#ktcW`c>2`2AWb1uHFPJ z5|!n3Bq#&`j}Kb?7ugRM>7n6srTK?twB(&P=jLE!W5d$L6yTQ8jP~s(obP>AVE06U zTyU-Ualw&C^dw(j-?~EU&$XbSmh#YzgduVpSQs?SVk+O*wVLF2?P&s25QBKZy;Fze zeD_P^%0Jf)mACS+&BqZIX{0>UKvn683T?}xT;YaNYIpwvv)xzJ{6Tp z#3Ip*C64{t0y$#mfP}tHVW^gtF*xt_?(E81IBCkMJKHv2JrzD#p>Tgd?xe;RJ1LZ& zPz{#Y*%M$(OlvRNdFie215F3zpEFYwQfkQ3rnAK7JDRi3u2g`GO?Pj#Kq3 z?^p?)Y=?hQZS=fPM{Mlv?fL$?cM4#KOWtoy*m3gY*7tDWZIPPAkA8j8PUE<61)S%L z#&s5PJ>oS|30*R0CI_QOw8CLhn+XMk8gljKI9qx>gY~%_@ys_2aW^a;{8{vf=Y>g^6XSH zL}=dZgvM;rx#RH(-<%u=fr+ZZ(#+5sofx^rZHhijnbw#6U{vwLyVo^;dD9=v88}JN zYQih4cbtP?o(L2;sIu029cf4Ze1j!))>H4`C5#Lk*_d zgSHR4V>jZ?fJQGauB+|zu3w)hKVDh(I86P9adVRab$ik9vSEd(TpZ+nu$j!I_(|+duXxqCK zj9(G=D~~%5UTcw$oA2Hoe0d0E5f$A|_; zK$f?D$8|Ow3Ndd$D5&f4PuN#IqLnk%U1-P-!ld$DNtJhb`snq|jND{pcLi@%9oNX1 z3rA5fuzTUp>Hkzc7@>haA*3Q7n}^=q&CECDwiHd!`DT`b>#UqKz%B}3!YHQX6y@|K zVdvPXgAZGuiLJ>g5?K>k6fAK9g~lw$8X75dH9QM9pN^HO>Rs zz;YdPPo8g?1bRLsDJkiV#rv)6A|8uFOu#)tKf!tZL757AH|BJ8BCtl=R;f5ckoHw7 zOEELcr+vO^Is}Jrs+$4c2~EF>E{1*L};}a(tzknq`)3$ zeLXZ?{L#t`yt5i%2Bu+psqhJ}f>Zb;F=pDuFz35pR3S%hVzk!2Mob@DK?DKO;i zVb-sf77}wFV8MGVvFWFkKcgVh2!Kt4j+ueyzuV05G~vr}nA0*@pr1-3t+)!kV{a3%to*Zyni2)dbC*}0+Ogjs>d9f zg57{uebh1qlW9_VW5#!&GnKHf5|L6YdwELhJ5F66aqs7W{@n+l{;)%BL*mnlntLJZ zz?QULQl`SER}F0Yz}9r3^FTA(p=WCZee@5T zG*t)*>$A48vK$J~^2W#UqMSkXB7d*03iwno)T6K(~1kwk%6U!ce#!<>4GHbQF@o_V`Q4cQdSH1RvJ! zjt~sxX*(yKeZA`AwbS8cb{FW>fN@4ULTU1Y;u+%%_f>Z`&Xn?EoKg}!FC+xxGC;=%hC`4(@++|p>9VMpUANk#YTc~mN%C?rk=uFXUxdl?Z z@04ufYh|qt+(e|I6b574Q40Ji-nxOn4QAC^GR5c*eiZI>In@sJZwy6f_3MoovJxjE zE|XT2>2wb?t3J=}eZ6tY!L}h^So*g#pGHm|2FQUYH+6p)2B#MGX@`&wNMfh-8u)>! znS1Fza102z{G?1pNXFddY1Q5{y}4C2PhN@@_AO^jxSUGaEW29G>!PKZwZ2l72-s=B z->4=X(9+%N?Q&{W<4=>*7avny4h(RkSgMU%#iVjw9o~yc71C-x*pha$gTwd<5;#M- zv+13qm=-B+T1>)pI(oWahJjlaAO4O0r5X&d3grdl>ffr$dKH-~K%k7!NK?P3$<_42 znUr$vERT>Mt_k(t&lSi%H|i(8GooSu@KO4%#s!8P&5D_ZS~Y~7wbjt5CBXQ6l0@*^irUSG!9UsA*a4R+#vBFsm|}N?ZfdRRV+fEl9#+w)Oi^0xzd}j2qZ*}Cdyy=DU#EIqW#>&cuw^#0AmT!xW2#<2m=QV!z0AQGBv)bIq6x8JMgZa$aQhIS1T2R-nt#6 zk7)0%$?2N+f$72G`B=V2YM1u?Wy`5Y^ExV`#)8Ut7_wzza+Xhz;W}-|U{qb<4>~w8 zsa`m3jjXe@zDJE07dj#`Rc{*`17wi^Z%U@z)|-9&Il*v{_kiD&IJE|KH3&A zOfM#}MGF||d!})Jkv?@teSxQE4qYV0!X}}efD}7-d)mV5>-)Fe$9d2ED`MeF0UR3> zGiQFt5;<9bxBLO4>@R*R=ZRYbrm1qPn{V9bCV{cgq47?LSll;P|_2HjA z`41pU;5^U^TQy*I2Yw(QZCn5$8ca`P<@yx~`S}_r?zUkWnOsAc#TP8N9>Ms!-L(0v z&z$=A?{xED=*4sXL_6}40vS23BlLd)On@s;K~lXbI{{2>>$`@BJL^Ijrox*n=c1cO1F3q$Z!+s| zV_rW8{g-k4V2?t8TR{hjY3|!RKuzI+_ZsdhJKVef2qV{WDsAJI&QIGxFz+TQ5Z2v4ZhgWJ=Bs>G=<$x$89Bb6{MPZU0+(yffXA(gS0yp**sEVx zRG=S#^;-?#_JTi}Y1>6<_9Z>*t{r{9o26 za2ikr{TJ-dI~@As){li0&AbN9BzPp)?2PJO3S3;Av8)euqtAQ0Jv;Q>dLjQhnvW>(+AUnlneDb+ zzx%SVzAE3bgN#A%IygVqexlZVT^Z!7k32~9#n1KV1paF?b~J!!dF>J5_qIp#6g11? z9{p-Z%-rJnAIqmKYI|;^uCr3_B%pq!*>8b86j^3WoU!}CFM%u+8FY!;{`8Ja&~VLS zCenIzJSekk2qTkY5JZw8ipH4y%2qo*x4$?EbiZd#M|m3?zd?~X4N@u~jon}R^W*8W z4L^sYKRmlF+wv;ZPwo8fU*6DGLE+(2XI7>kw?5GVRAgFUY~FD%c_(pDz^qUpq3YZ7 zP?@10tOnD{|5r(H#LkH_Im4*%ZRY>@5{&MUM=00M9L=(aOEZaO^2^0@UuI_x6xlQ% zEb^UvK0onow9c|Ie8Ex^4)5zO6`_Q2-6&_;R_XsUhrDzLj9z*REqVUOttZpKphX7G z#VPL8^T2a-FJyc*4BuE-O4yI6TCSvj3Ms8{UaEOxJ@@KcmyRYd22;@?Gk2cwU#I5@ z6pVUvPDF59D7ylC9(0N|Yja1=&pLJ1Z8G;w8E)-1W~f~BCI`Q)&zhZ=-`K-%eGjpp z^sgcQ^9Z-c@i7sQb;vz--}VajhCG>0#<6t;>_{Trg97GTU)lyM%Us{{sI4y!GqZW$ zFzb8kFvU}HU2n%ne&L+|cPg%2`~meuNznxF2DjP}x2f>Kr_hye72n2nG{Xkhowm(N zJ23Xoh4R8HQ1x?*sjS3uC0N+cPel*~Iy{o3y z!Q$&RFZ|5>Rz{9dkxkIz;-dVjJPf^f`|CRr1!M(Y9WcjQ3&ukxrH+E&xPICLK|F{A z$sU48BvP$oC%Rq{FO(IAsNoShoR0p=h~yROxF7lheM?+ET|M0On$>b~NIFp&IBfm^ zv5YiLb>l8*W2CbwM_eOWfF@=5cTXpj+3C)E`MbCbrMC0-LLP^*B9qsov(v1My+&4} zmC-Y7nxh+-$j_qOjXbRl=6An%vQ^d=J-2!0a z$WP=pK{`vB{8TJY&I@bd%T9 z7q_NmXEw;bK?dkW5D-J`uS(W8J?6vP?^`l<{U!*)Sq_f1l_krYauC`S-zF$?0x+5p zIt@>yghwcf^ZaCrFyyaMVxrfzpMOD@IvDgF=j^0~i;A?PJeO13y8HDUTkzP3pv%FB zL3r0i;K;$`1Hm1SKLX|WPxx-pv)md=q}bp-Dyll*mqZC2Ywzr&KQ16aI(aWq%JU&` z*$}NXswW~4rxokyF{ze?n1h&9mG*BBmci#phA;>x3r+KlKZ3?YyHe`-5C}^~8jbaJ zrCvyTUCTkFx*6;dLcTQJ2LgHB_fQ|eI18q*^wQ5;*r4Up?o$oosm+wAF*Hs~F|>kS z6?45K{nO}PVTsJ~-=n(4SkNB{9WgZ=(o5yGH2!dJOu|LW*)Cp7P$9r_by9G2G?@KB z&eEo8*;0*Yx4tm1?^=6s9dKG?OGL#aD?2@^$&@kFE;SM{V}b(ynt?K@Vono#lu@q$ z0Bpzxi5GV|>|g1bN#WQT{10515)!8u4yjB8aR%^FWo~0VW*VPbH12EM z3sLn2)`O_*Ty7!0tC7*;3l)P{#f~JJQ=Tq=#8jm$`AuXXDAYNW!Q;yJFkVt+dnLQ<``lcga-fm|_*T2HrkuCrob<85px7|;h1 zPCBaQz?XfV-#J$!Al(Y4Bk$&;bKvI80-v+r5r`@<6{%)q_llV7da7#2%`Ai9l1QOk zBW2UB^w*Uy&yUJsY|M(24Q{hVQNpG`Rd4`B7k1J`Kl<(~AA;cHIe=L4*!^08{D75N zF9!mlh9uEZj_YpskpWm?5P7%R!o!3rvPm?i)<@Qe`%Q|FkCZI+X}xU<+)Y&*EvWf$ zW8eK+hiZicAP#XW%o86J%?hsv`M7B1_N9ja@D#*wRi;W)5bmfPs5u9^W25UBWX6oL zMw*sSn~3WJql-VV_fUco`RH6sVH}H&E>B-%r>2%=om4e_Qo58zxi-K@3D=^S0K5e7 zW=mgF#;GL2MeFOQZ?9r~OUqOS2El}a$i)l*SEDMlvD#zb~e0`L3oN~L)c6`7t2Lgj``tAB*g>< z+^o(z87mhs5peALckkX!i6{CJC+cQM&jrk8p0x4Ki#J#xX2WLnN*`Q~qT3RpVt|2+ zp26iPc22Gf7&Jo=Ym@-oLGb_g=!tSEN-V?T{7TuQ#(tuaWJKIiGnl%I|I@O|!Fm_W z57pV-);7JcUo5v``8uOg=qG727^85c=bJK>TY7mm=3}X6@cFZx{N^WKsV5pQyr~@= z@v$#k>k!vBi!Q!BSh6sBrq^Fu8b3|eH3N33=F!)gY{Ei=MYb>yO8u0A(SN9)URyl@ zNt2o_F!EKZ2j(>uzWB{KMA9@4@xHeG1_6hdPX-o>TJF~)m1SAny1w3{P-K01^f&@>^!BWPtG^aiRtv`Hq9hnp*UT471pgSu4uIVwmZEV|6vLo1FcDIO z?2nk^i8%t#nBo~3!SBI%{6cCJI}@mUwDc^z_1Rxxf6Bh$(0~Pq_8QUp>Q8Nmk7E4{ zdd&8D44L!={RKoj5dK571MA)->=(|_u1<{{pJ``&6zp(}*?M&L=M#c{_?gT)QTPTo z*i@Q9Y9jaEh}s%rzjvE`w-Vn^F8Wmo{Hp@}H-91vKZ@&EL{8oxa{1RsEvojuQja~+ z;@khZZrn=qreOat!rV&(xSNyBw8aKu3GfoJt#)>zYIn2r^7zDjl2rS3qi1r zTAI;#aiU2*7ck+o1bn+c$lt{9>j?fj_@A2pCV)ATBLX_qeoV~EAd1V(HCxGJJ89Gd zY8IO-MRf@m-T1;c-y+LTn!0yKF-%x#we^-tnYz^b*0#S-V~DRL+d9;SFZ^#E=%;A? zMA;7D6iVsS%X&%&41*#me}n(FtKFYPNth;okeu7D|ZKi+QX#+7y+10KK`0 z;}gSvcoq??%t>iZ_>;&xo}ei68aNLeomvCf?YGaqZPzIW+}z8oJI2^JodQPu zPnP|KBK+altyS330Gww)PO6^(H6HH~>`B5q>pHqxSezX4o?`v~q;pxfYnO~%5y)+6nOj? zz$)$~&OX_RYEb!LdX1Ym2jD=by0}!^9c9%zQ_Q0UzPWjdYh%H)$p@t z&tCgq4*4G`UV)Cdh@PMLC2&DQ?Um|2^^ZgTd5*KZH?QEr=;dt<45nWUJWYwVKlmMh z_*nApYkS&gTgqiia-jcc+xz?dw{m~JaOX*X;tSS$`I0=9@?L9)4F}ZC7sQMZS2vG;(NQ$Hy0lJcaY<3%`Wcd zcy_LQ1(GjUxM!s|DyBE|fCnOj>WQc1ooO}2EgL8lFtR2OfV_}#ap7dix zcK1L#TrUSX|4xRNK@`~Q_LSrWN)J9hc$X4*Su2$su3oHo=D!Zbjuo_!*BKN3V4M3w zKnn?Xp4>}IaZQF@4@WhAnuV-8R18}^c34U3f zU--@u1C&|wT`NlaZ%WA7cCb3RjfY4-Mi*EDHbV3|`|rQ~O1|%##5o4wqWvmi+myuz zHb{dfe;^Hi=b-OTTO6Y3GQX!@{rT&Oqu}L_qAULX?%#J|!JWPIg+Dku3^*f`r?+zd ztGPtZ9T274?DC?i6FEYb?sm%!$3TFw@~&a2gSVY#my{;)aX7A^5(E-fEiuxy*2u8?K%OZ71a#=?QrrB z4u0W9p_KEjh`+ZRsDGUCYAP8KuvtD@A0u5F<(Q6m!>a(L00{y6*)ESjf>1aNYzjHO*oF;_E@EN=(k^^wYFFFT3#X zCY1(5zygf-2X=Pc|G9iG1BUlM^79)#Fc`w`ybFkDn&Y?_51 z^&c%o9bI3Nz2={y{hg9$ftpM{d+6EUDfH`X?hlIv#6Oo-d}^Eca_0eEKP7biWAPqQ zp;&ohb-V>bNE4?gDFW?fG9G~Lh7iQ=8RbHBe8-)QP zd~6rAl;79XjnD1?GNx6A1mphBPpNPkTm zeSvW4kHnR7JAFFo0PbrwUTtpwNe>zdJuK)LckMurkni+}P1%p1`uOzn!>VrygLk2E zG6uj8Z?xD|) zzB~RYaWF4pE)*^9d`?*4YZoJSL#VGRDoO7(KRWt`T_Z+tAa=GDWG<+$N zm;K9|?3I+~XbE$e4P>O2?btiLK358}@soxKKdX2b5xM z`j$ zr;N~ByTcn%?#@Rwwmnm7_HrV(SI_`R096qQ3s1_(0CHcfP8v*VL$@w zS*>z+HfI;MXJzme+Pa+^(R_1Ei6-6R{Vto$Z0!sVF0SP6tLyVbWsO8h>+cMQBCc27 z^7WB}X4Yhnj(^gL6nAC|dGx4_*cAX{CPgPmL2UEgKqapzn1C5qjy~~v3H_Ql(+1V= zd*lVce0-pPxA-rqp+BaBoU|e{A6yN$#e)S5OwM{Dv(m%A7L1{g?g6OTN`7Y}c+kd1&b(x?wC~feY2s)p8 zu9byzn=krQKn6~zbB(li`t74`A7(WSxHS`=)G3EcvIcsS`GYGhE{fXR&QR~~pkrmo z!xcL8-cnUp@4{X?o|=}LuHJv%XTOV!OJQ%>=ND$t*A)>eH7^)t5_VG^X7rSk%9~3O z(seD1PpBvw_slnfcz+Q|IZNI_LSle*cZZXSwg|zSj5qx&qHgU6bLcA-ip@-Yj^a z03&X$OdMr#y@$GHI95&LwqINTOiQl@v)1vHIqQ+tP|BQjJl%OWt+ay>MJmavI3~}Q z)aOje$pDN?g;5wgX8EKU&LEyhyKZN+Z#pUhfusnhCFfUpGMH(26UoKe<86p*HnT(5 z;Agf`=$zmPG%*RA)iqb^I+@0jjfFKgH?Ou>+9+SW>Scsc`*`_M{&u=k7jiZ}Aayhs zhPxBUoH$Y~{Gd3mtUA4-H^(+CFS`?V1B|cem!TqRdBeu{HWnPip`HU}c(!Rz6bnv= zNv2?JX#{Y!Bi_7m(_0_&^tM~=wFRd>iCtu zQ%0Ej0~1Rw1+|B{A1{E{)L8RiD32$g*XLnI;a6mXUfXTQMdIlYX0dB^P;R_O9Md8v zDQ_He5s@m5pTJz~Xu$zksRD2vbQur!%J*QUTf@p z`68HF>m{Ze{M;MC@v`YPEt?*isxmW%qAp09dboTS6nXq2MUi|zIe=X^lW5zqPfVaw zv|9E(*UZw=6MLgg-l+;UjE@-;qJL1btIg;BPW07$cX5I0?#(Cf*Wvfq1Y}L7#?m^O zB7+WFvwa;}@VdD##=R{GZ`wh(BwDKn-rxY-ri{R(RJ022h$dh~OCpV_i7a9kXV-1= z)4@nu-cM7}=?NlB&iUFT%jZ03HYxeC?7C+pH6_oTt@X+PVE^E2OtY0ps>b)#gPb+q zq=g}wvncYCq)Z$XWfSbiC|%_e(-1NV8FO(6Py7g1<@enn-S5Ozg2U+I;gtGv?D`HDxCJ8hZp& zB-`zAP*7+`1b(Yto?wjXzEC|XKqEqsDY&6nh87SP*qJUOQ`Tas*E{n@6QqXX zm`KX-#YXt}Kz(9K>0yy$IJ_Bc&Bl23vhqaH$9@c$qn)@GrAOTX7(?nd_T&d8wwR#n zi#s8eddimCheZezVR~$35EI+o{=MaKgYzVXiX1n}ja@Rg4G%bWA(tjUx zjj0IKXt1>*Tj=UkYcy6<4qN{=UkMCPl6~yJWwtd*x9ch^{?`**=fP< zBbJ<^0tzw}D84&$e#@>-W28l-)3ITkP7eus_5u)5gUXGG>Zgn=$PV~8GQv^~-0jbk!0cN2YTw8^nL`0@K*Imb&T9=h*jbYvJOk*-bML8rpL5CnEwtf+L1 zSQkn&|7B|pSatKe#r8?j-~sus;55( zQDv9vh95~4h?!A6?8BAdJY24SW48p8lj^A38sCU|iW0*taVAwD6=<;MakB1uW$D@% z@4kDEbDm@vnQAW^4YkK~%vM^S6B1HSU=va5jVkFagbis&3!CLxilw^{HWpIU>y@V~ z;cJ-YNIrykNtO1CgYdiT{^W(h5|y;hH{*lz+G)zzJ~*=HnQC|n;76^ zBAz&>!bP!Po;l~ogl7`Pf{ydYt@=RMefl-H)LQOO5IbyN-C<1TJFXJloqC~##!I(# zab%88e&fKmaM1=cK46GeJ0XM|izc={rkFnJ&VIY)F?k7C3o`Lcu9eU#kc@Rd(-ylg zn}zEg5OQJGIYe8OKz;_aH+Sl@?Svn_FTH+WFa($rS*k@${ke&1amLMKX={-{Cwqf$ ztsCK>JMm~Ev*w`))(smaA3q;{x$274hLh7}%Dl2_N3mZPU9fN>t2F$F?QkIft*X z*PyTLj2Bj9FJgx72#(4v+7O?~Zs!?RDy^MpZ{Mbe?3_KX7}#xHB+ zU^3xsUv@gm(A84urCRXeGg2;=rr-O|%bj3cX2g}vJRTF1A1 z6sUbtTD6~u+;*vOz-|W*r18JJQ){5>MbZnUL^H}`cHX47r^E>VWt8jRZm%nd)x@T` zWV}gC9f?tn3sNbk(sTq4!1~H{h0S7^=-(T$*Lsm2-Uy03dO_vhNPA;*Sb7s^(-Pk= zp?&((h6OPS>cJhxdE0URn`TEw5_xKVhTyw<(M#7}9PG2~ zIX?rfaOA9`u4(CI}*E1rw6a&Do@=~HG5)Hw&Y+#>lVnhfZm?`a{~ge7Ot zTW zyOI})B#&OukbQGMatnk=M`+T3VKlZV68L)w|M;me5X?b-nAamblW!!ck$&q+ZFwO_ zpU#(S@sc-NUG*i`Z}QC~a;dRKi!SUfB7@Nb9QvhCOyOY4V|SSiBpqX$Q@)=VU{j~G z)VSUB_L}eMs#&`m`-yu;${u!+JL3^8AIuW_CbWFAl_NrpYFwI2BJ%sN=#!)uIl5K- zIq8aBP)LEw{oafa^_H(lJtOz^D-<)MLZ9`QXHyQg9n5Yy^oMX)Zj2(sMRcZJh~*^D zP+_xT=-xA=X(_vH9CMLPI`vR%Nd(W_LPxw`m<|-7fgS$8Sx4@q+p?O#uB3~YYs)c6JlrqrBhUkV*8v6v%idnO?-d_2F0W*=qh`1|^S z?-KBP`1mhhS@+trB;@7J*)uqZ$4s0_RjM_+hxhek!kO z@hBrnXMC%}u(Ao5=lF!yta2)1zzYPP%o_w*dEQq)d-<9-Y4_rgP8VA8848NH&7*y5 z>s^lx3nDDa_mFTb&9?qk>F?Q>uL|Ii# zk<=9?vqD?ueFCQBp}D>YsaO%aLC2ANmdT#Z6DoGA3hC>aT0)XDh_%~&Q?;&3wx{Z1 zZEASA)Z&Fuhg>$yn*=CF-27;b;$c=v4oqjF z*idL_D2{4RoFq#`@jfCQBhMSVkG2o1Dq$8XQ)q0RAFa%M!BA9ocOuMphUse zkPw}wV5a>yO-xdBb;xnD_BX)j%uA12!y`j4sLZTqEsuUZU^n(b-aa0zy~PZA$(9>r z69*c%eg8kDl@W(F-ABmJb<5pq8K`)eE=?G=XN4*(1u*l~tAq!eOtgxUS;fx+S6zqz zr`wLYqzlHcvOe07c$aWhGHeKj1v-8nKtHHMN`%1t`k9olJU2a8>oSm`pzG+PJ zw-o>UB*%G_#y1HudU}gPP18ss{;9I+g@j@skM~}r8n%UV7gUa;8h5_TR{%lKHtdWR zPG^`#+(3neg-zAJ{q(s!va~`o*TuWod_);|&dwmwC@q?PVTL^aVfQl$YfyQSR8MPy9KlPVhrD05 z=lz|I`QxW100kiiG^^$(Azcz^QJTRI<^ow7#B3^=$6aAubd6Iy=X)V`y-N0dl`w3I z(m1>NV7Z@nhqvDGCcw^OGe3z?vZzuaJt zz*46?Y&_hZrPadZ=`pk!TP^+M%|oZ=zw8}43GwO0p;V_O#rBB-e5dT}P=2B==gg8w zJ$MUX$ex@9DZ>3>ACCO~_@1{ojPXf`x4eEz*~$wSc!UNu$=^DCR`IXm&n0>q?<3|5 z@_!(%b}?~)5RGl=y^b#n(}ZdlOv`zE%j|-rq;h_&$fFp_p+I4KGx^$ML~UJIM`rHO zJnDh~#{xI^#qjlU?s-9W%!3CH-ucH0>OOc#kKJ!0PX_b?KMVWf^E3Ga7ylKc$Bq1P z{PfRs1r8nyZD~E$kT|xu2UxCRO#7Sw``9S1Z^T#U#j+p(r8`G2zyM zHwgTQlaLE8wd!t0e9dy5ai(@|Oa*$hhAqsD`Y?_emw3f8ZKa-d!cVQ?vcnuMIL^;c zxNHe{U?SGTUoRoZBX}VT+~cD8%^*uK3-5NcwC;n|#y2A`4l?t^irMtXnwWG!y4(rJ za6$h5;q+;$5e60Z(T%G;K@ebX&{tab5!Z3*-yO5}uYfgXcvYXSVN zLhZfETPUq_(9!B{Tt|cYTvli(gtLKrSN`C!qerKvbc}Qq%BH5?dMglR+VvW$Aw~d@ zXrdL*ns`QBZgsL_p}0e13g518vJtnXdV8*J|H7d3S(Kqu?$D-YIbyYU)^1~7H{A+^ zB~|$Oh?`-Mt_6ChSq>ejp%Lo9wk0jdw;wS9$yfRPW==m(@_#X+CJdhM4{xWN2YMaH zu}Rp4x5aF|y^d)!H+r6AShaCOmi$hlHzVU>vQ^sklhCIFWu4^{ZfK9y#g`13`-wK? z| zRyveas@$L^?i~Pr3zYd*w2)R%*`1GGcI#JkR6yLOvT=H#eVr*xpyj-bOVi3kW4ok0 zqFrG(#kc;z2@bZE5W~T}zkAwE9D5uOZ!=XEzAQ#AcB9{2T7AWGL-}gxn&Cojsj-bh z>50)(9q|F{_>>&PM1a_%_LwWO-XsC$b7XA5d!(K$Y35-x(%4hCloTxqdp+42)tPgc zSx6H&%ulXF2PJrsvhI(4FiSCQk1IV0%Oc5+*7kJb*9TrXuMj@W8- zwT`pm=p|1|QQYss_rTG;B)xT7@((`Zuh(V1c%)yREMY(00=zGcsc0#)!0V=d$8Q4V zzt#z99kM}&&8=N}15xwWfAF$W-wjL6+U0)c+6-i8+1vlLgz~$0?@apJqA9j4PTKY= z>tg@NJj8O^_h`IudYp{CHtXE*fB_zep?c*l^P=G*GXV*^$(J71FzP^wBC~XV^gTkf z?Z;=E&z(o|XxFW4v|dMDyq`BzY#vsP>uyzD07*$u6pEq`@H=AC88T7~FUCJS%EH3? zk!Cv`h7N2{rN-R3y9QDpyWy>G8f9EJ#EZqLi9u`-{*fxkx86lPW{5}JaejlZ1~Sge zbcHaiHj2Me)}mL5TPrJE7qQ-lG9hk*oavA1+$cyGx`y5V)7Ub(vwIv5ZDZO))FgFg zQ|WI~5pui8XfDSVCIo-4)!U1}G4hclP!_*V1IVFs2TSse-vgmvt;mPPJ-VVZ2(vKG z?qoB1dk;rqjY@*cwt2q2R+8NAXc6;w1FURJTxZzkQwWkTx^jV2b6R>6o@rE5Ibbu> z6$Q#iH^7*8%YICItUyt~E~K71-L}}1E;$!S|Ij?96LOO&G{vgQvEj-g{<%f4l3Ab5 ztYcLY8wqdRDN_^yH;7KT3zAE46w#I^(#yUv4b&wb1Ep3l79c84kUwM03KV4`0oy31 z9mJPn{)4Vqi#+n<{!6c32MVj;fAWJGaY@|0em?>rl`pjj@hmic?p|+9ets|%l`b*DFx^|7bxlYsOysZ z*2a(x4Al#kFl<7$A&5nwhV^zucFULZivD!x3@Sgp_P82VmxM_Oi?yz8HjpywFo>3N z%3BOE0&7dM$0Q0Z516gX?(nsdHXk-8oUa2Q^?FJg$EES+D#z=@Hm1wV#;Go}2<^TO4I%wqpGRBrzPRHXqL4 zP$@038jU?+O}^Jlwd*QyBIzTfzo!%G)PQVmwlkmq2iZJ(nzEwM+Z{XbHI8quX+r#% zrlLLf21tD(FW7b%xtM2AhDVsj(tgPntSJ$H(RId~l;z$w^F{rg$${+bt#Z@$Q*fX( z*CoM7>NS3xFy#1UFN}p7aa)EP6EIeho(jVf6audCRXHt0?pBjYt=gg;0aabbRkwJZ-zn; z9zEpYfg&(}?^9@a_@oG10LztbrwW}z=h0`lAv>GNixVfWf^qk#OnbkBCk5s3T0V*a zW6n7YXUk3iM-Svcl|XayHfsWD0G!wLB2imcP0uY5)1~By@zZvJ{0qQF*z~)D8eO`t zBrG%%UwUhRghY5V;P6gBKYH#bCJIfDpLi(SRxdaQ8RG`pv=gBiyLu<*-etH=+naDd z$jNN&d?P-a+O0?pHWaNqLWg1Q`w;_RH5^{?mF(~5ZPy+W?Q@}-{HuhiHJzs{78Dm) z)1PNuIrUD_v8_XjfKajA9q0wyY7Qw)smlqpMBGDVeo=we_qJsq)Dc3a#}dD zvf2dDJ4DLgxZP!){c_50s*1J4A&fvdh)LtnaP6+For>H^w$6gT>mk zhzvQTp2ycJ1JQ=Op7y!A-E({PWb)+=rSyxHh@Nr{rX zM@=;Ah~xG<;U1b*A2-0JQaV4NQIqTrlG0OP=tacL%ws%8=qegP+KQsor$9ldvP9}d zmrl;6_9%kvUM8EF>x|761IVUT)2IX)*XEG(iYY&0GW!wmMGAtvJ5$DI;KZ?G=QYx9 z^%Er>-R^vwn5YMHc%^#FJjQm9EM_hb+jq8r86;0csgB~D;)8HtL05qOnB2lpyPm3r zVy!D@IcEnZ7`PuB-1^w_jz3iJe%G`LCcsIvO3kG^5vbv6rfd8!hwNGST?Bt4bIg)Wq`W6ugm_gkRJkO zA^{G*u62uq@$atF*=tmFd^7oigXH||<1MMqYfXIj|1 zNtJnNu&e6TTPJ}xBF#?T0Vjt3 zoNUz}Tr8ota^m}meIgE--72e-O&F2$>BrPsif>QE_dn9SkiCx>#bPd#*SN}-Ip7B#S8_m3EO@3$ZV??p4$fo{eq*QKehO+j7?R?S}7}d)g)vVM7NjAD2 zg|FU66zCKYJka^mN<4uOR#Tj&)O{KK|h zqN)SYf{>cIxmIS4sG5>;@N8_uE0==}p;}&~SkXMj^;380KryGfu)CHX01(9J)=$Lg zyiM>NTS`nqEVmDU>cp>3*>9VuD-S$j?Kh7Cf0hEDTmZU2yXT|vA9TTcCK}*Cc;)L< zzSZQlD~eN<=7uimu@lsm4h_2PlbT^WbB2#EMl7r_;J!3+VilW@1(1dt;(5yU5&%Hx?~eYOewn{y{%e7T zk@Lz0qO{tEtAPb7FBO|#D`_A~tR2Wf5~s0tTC>@0tH7K;n$8JIg`yi%UDmTey6Xn$ z1k96&D9~&ONX#hH@c}-N5{jRG7MAF~QPH;jxHK<_P3*=hi?+p0W#v#%R>g{D-`N^e z?#|WMp``mO@&WT!3Bbxe*Vi|PBr85@bDaQA4kTxB`*QBueJkgO>lUk^H%W_Ds`5>f zQl$ap5_IeF#_3s{F?BlJ#j%TSbqk}C)4s>0Es`%*+G;)IHw9?|V57Yk0 zef@)(!6YFrmUuJcbUtEiYV|Dkbv_(Eyp_XHt-X5bQa3L zb<1wLEfXbiLQ}BDyvWsmd4r+GWsMVaq{Mpp4rr26R{R)_^gTh=$^5WWUBNbcNK+i? z;jPjbJa`7HLoDt-7@Qq&3?QMKX`W{XmthM5j@W!8&D)6B)OD$QP10E7=F5M_UzgoJt`pwnr*Pm;|K1`i*r*DEHhzsS) zl`_K$tk{trx7$)z#5Fn9w&ZREx~S#fB_AR9Ko}FbasyXg#9x(5n#*Q_E1|_3 zdXgv6t@7)W%D5!Nh-6vQ^OY#C>4c5c{t8e9jt>F@L#xk9YYkc89$j*3hVhhtHA9G8%R`b7s_xR?^Vcpom$oOg z^_Ki!F%evQ`+Zb_+|A4n2>*lXi>8z#O%n_Qf94gQP;k(ZJ#|TcQhncX(7jZ=Gw39F zcV?N@GwJdPlJ0sSlaXzppBei3^Q66n{lRUuL{VMq%7RMkAV0sb=pxfrfD4%%&x=oe zI)1g%YIMhEwY!zu$se(m%G7=b9#ZF%sv197sTOA|hI`an+Yi&aGqE`{A)$)x*1NgX zweFL`A%P%OPx=Qso@$|okT`-iJn9UbB;?5gQEr?RbX=!<@AA$TrqAx%=bJUEjIvvk z!ULu5RYpuRZf>>CZ^QXCZa{)~GT@OfX}IqtJ?nANx*3#&0NO5v9OfRMAO%V+@Q<%} z#0>ILi4ykO7O0BbC`*>z5Qa6@MEt;pbcDo@5(oMWSOSrD=jGjv}!W0zvrkXS#4dv4pwJh2C zTI$X(UHfqH z*ERn`=CK5$&44%CV@Eq*hYFT%Z~4mK|2PcgXnEJ_ip7Y9R(qo{RVaX=ke`+% z6q+tb+VA9zuecNNDm_(;mxuU4rqIQfif#drA?zlb?&_{AC^N4tUc9NKR2;+6wbhge zLE5Gh!mCjFYT8R1Hz;-JY#uZ}loLQ!y4P{E+h(niw-+-IRl|-$xpwV+I+R$djd=a~ z^%-}dZkQ0IcYu*i9%@v3!?9EYF+$Za?uU?biY*DxtVdTHwateXU{A+BtS9km=bWX(boRr5_Ns;pGn4dM z4AHRUpt^M}{t;$F*dgt+5;E6Nhgi@Td=J;hDC(uFT1AVK+}(R;8F4mG8yAFJdTEH& z3A9Y1p((MpUpxVRS}+!9a8su%5n||ahjfBQx|&LS<$Anh#nX?cDXv-#KQMvoHpttf zaM$wd3JSBBbpScy zEs|WSdRjnw%!T3k;f0|VkX8N?OQAtn=cDfdqgS+_A!n^+kS%C~0tX0!8z27<@8dsz zG!X@28f|q$g7t@+{k{h5z>pfl-amwSb;`gr822#dB#{-1(o`Z?@=)Fe!0bA>rbOjI zfHFA0WfF3rJ&!5jtE+mft6PM z<)+%X^oUR~HP(?6kGl|CuOqt4(7TAzEU5ewFhy5O+Zvjy$uAD2m<27WXR1@(#RR9< zuZZu751Q-CZt?9&pG#L$RgJU|>p!~wn9mPlcy_8Kq9jXI*5%PDTAqyjJ%l{JO6QLQ z!e$&cqt%iIOQ QoB00Udqc+hZ&XprX4CjhY|hp1uJVYa(qA-kZh4Tmf_ z^i5J0`;$=*3oZHt0H%-5JEeUu9=l!ZPDlm5)vy;S&^}et?6YOZseSSY6?RLRqyI+l z`fsk_kxO9FKZcq@e(uHx1dvcTfYkr~A1Ub+T_FNMH3-MCo>k*UN0(p#k%=;GUy1iCmRj^@0afy5fk^MLWPos#uxU zkGncuxgtcHN3cCuq^PLa8UyusO4|dFWe7R4M|X(|m&}|yAz;_0A^y#}KDIw(Wujq5 zR11iyet^Z{MRVIS1Au@8NRPB|e)otzj=*!9a+quJiAd)Aj*V6Qc=*mu-7Q1qBM=aP zP)uUFqavHk8piM!0d!FlB5KN(o{m7vF>h&cjYW6u5--qFHo$|V+B z>!nqW3y~-I1gI8Z-YRch%lNzVmr{+9F7c>b)Y(2ijg0g=jR_EhzlZ4hwsyX~rEaN1 zLHH%zx~v$c-FKMw($s?;d5*0Wo~th0XiS!>iY^Pg4D^8vbp;qi<6@pV+&B6f_`3 z0X-1_%6~)S^RC~WN6+_1DI^;Q;Q2s{8rp?mE&I~tv(D~->>S0XQQd9R*9@{>tNE5X zH#IfGd1Cx%)yTM>&eg5Z)bG&jK2To1dDltO$xzy-4Pl6spKga<rNl8UDf~cz1 zlaySygYDm$EZ(AU+&(n~bdLpYtLNOin=aaTmXMXGtvo6XcX0jG;MDx~T7hW|aG8W` zcL3w=Lne%c*kZbH#4;$`Vc+IU*Lla+J`ZOoIwkU9vR*jc^js03YEp82WkE z3Y1GuZP(Fwb~I+OAtS2cYjc>}N=m`D6I{x91{G7Ik$i0^Piqm{K-oYnkq>!!N2>xD z*%2^Id7-=VHg%EgOods>H9~1+`;{5;aFLoyjcy(wp|lnFq9J44P_tz4)N7kGQ)`b&n-oyoG;7}V9J(yuB#HaqJX+S(K_I$3y2*U z!EnC@rq5~;z1Q?LtplMQs!F$lH_JD>4!7K2ieox_()^O0Q3^xbTPcjs-W#X<0BW3} zEmdlXiT|v5#vp^C`nmv(-u>9)Yim`a17c_@f01&7ZmwJw5_V zH|MiG7=>Mr$yT9UVi<)a7u_v99pF{gSa>nwbdp(Q=FSK&FLo+{QXD;O?qa9(2pVHL z7x=BuI%ldN(K2|nqz43Be0)o;A7HQ;>>U3}V4{2K#=by#N7Tv|3l6zGx4Js}4xYKt zklB8D2I4V%vTRp{28PT-NoPowjlPWqIyrqmE{s23Y8JDi^%S?#hthDxbkMi->`id6 zP-lAeQczYyn@QxUfq^&a?p+C!z98Ose!=mt=z<(0vAOk!e00<9mm+wyinEN^xc-Xr zI-gM3Ep9dQba%;T)=EzQFm+CJ8F z+kh5O=bvPdTvu^*BoVK+(G43|9I|R&x7YJn+Cazx-cZ?UZ`fL0*lPrKvt|gwrB*YH zSeho*g@vWVs-e#6D>i`OK$3uC>j^$$%xEkexokC=OTEN2YT}lUA=Z_Jl(B-p3tO>~ z`Tlov;P1E?$^9!HF3lPiD6w)O;LEr0`$d zANA1x6ka8+-B3`c*jfd2A%(V@OaY?=fT1|d;)J&|xXO$Z&?qgwuBd<=&yYgsI$3q| zUekOjx@fJP_Jp|xUtTW0X073(06GHt3*=7wz50?2Mod17lZ5F3mSM)^@&$u+Dm0ki z@xn#Pg*^A^T%!~+v#PDWfwh0(E&o$M``8PZ9z(VirUyY`%+W$+RA3LjXq})?ykf7( z>=8)o;3y%mC*s%y%xuTw{_yUvdQa8?7t!Ym-)*I2_SRpj#Lw_y`-xd7 zpKn*p7Nq}*7On|At&k@_jwO5CEq;9WMM><@pS=KHy{d4yJmyV(xaH==11?A1O(Oep z^iwkNLC}g*&GQe5f@jJmtIMU^mL&yL0Ws3Arh2bxV=h?Z#z`XkQz<+WJAkdeXz8ZP zGPO+jlxJ8C-TaHKR)GhMEwL4+LlDI+3cC=Z2zOjD%N-)rTTi%pAJ`~YI*svx2+!2e zV|<)gpnP#mwa=@|d{Lcun;Y=vWSobfy!C;q#AIjWGJ){{dF`E-?ImtRXXXDR2~rt- zRx7|QDqvLL>UV;j2T}dn&+tgd0NB$8hGWCk(nHJJ9}<#~$f9=mcz!qr5H}MHcXTbW za>7h6R{o7)=hMEIT34cccFkuh*?Wk3!?DWvs62uVyg>9?T~$E-i4HpG)zP7apUgTu zsq%L2g|G66E0Ng&Rb6FPJ$lx)TbvTc&o6?S8dGx^SCB>%d}$PsqPylA|02%|6@;I) zGNSpi9yp(sjE(Pz7Zv5nT|%mDBEc;MC|_6u@PmJuJ(I2U0><(-%#S_ij`s*>i)=4W^Mv@J=k`-&tEBK`tX!Z}f;S*#E zhiDdh^AWKXEgD_WE8#p^>Mv@fujh#+D30hh!|tli!76Rg9_gGghV-}B_N#!rlM-ns zir>WorcPj4S$w=@Jb2JDV(VUs1tatN;t;`l_|M8}g?C*)^XRp;w2+TgOre zOXHm?9rMSGmYDX%5EJetCj(tYyjsav) zVIL#HQzPfpl>uYynpYCCb4w+6FGj&aGPA4#Q7~A(rpWF@QZnRAy~0Z!LtMF;8#KgL zSib9qg@LM-Bl(?ywk+kwHJZe{=j?z$S&sFWs_u-ttOa86x3QwuJGWWgX6_q0@nxKK zNEqh!BtC3Fd{Rvv4{YUmZrE0CS)|v&;-my|+k9Gy#AnelXy)2^n}`M89C0@sc_ot^ z1>!1|2p&{xbdQ-y&r&RL)NpaQ!r$-U=QmEZ5GQ`s!^}=Gx3SJWl5BH<1AyL(ILgGt z#o}L~Ex+M!(7VY4bzOM0pjIPG$Hc=S;qS-D!I=>42SAW^#{>^nff{|?{?c_4A$H5A^}W#(TgnUtVs09(F&MBe@K z6?XQz;rng|)o~K8{pJ|cR>XqpA^D6+fnaDM3$(u^GFdU`Ch+>S4$VFUu5+rKr;5`n zNd(F3v{>!@lPHCecs{d^$1-sm>8dJ#xRmExc?TfURjvsx?l8D+Hl@0}RB5@rMR5-6 zu|2Z2$DgbpYB&$b`z?8xdh?0umlM^?bm41t0-QndbqhqVwYmur7cdNJJfuE9g6E{h zhfRr2y?K)TabROLYS|VLM#lv`kS}|wALLU=(74b0?u_C6c6E`4I1sx#{N&aPSHW>1 z?se_kCp-f!e|j$3co;sa*Xy&TIVJ@H;eH8OJ@Aqw@?K=mAoY;CjTYHOh5U-N8^}`4`%E;9exuH`2E5p_C(T4K=w|a ztf2=Mt8At38>vPfsCH9r*LyY4liq;=GEWZ4Oa{$;D}t}R=)nVt*m3^?$j7`>qd{wR zBcIV%c1}-GOo=K)k=by5$HTUx{76mZ(^|vGovnb*WMp;uL~R`oM#nA8~&$HwAO^+I;ftuQ&c-K8FCniv9`D{0SVo z#w-Z%CKWfx1RG=O&)VPro0$^Ce0mIj@Kdk-w7UOsslsBQrZ345PfPz;g6CI(Rle9e z!1a4H91N$_l10k^;s(sk%1kinQwso{DsSx?^5b*0NPh}Nw@Nr2f<3i zn7Z!A>>_F}5zH`V|@Hc=*&0KldsH6cN5X&+^mn{X6s5M(t6W#VPpx-N%p`mvpvn@p7V_ROK&HXFG|+~XgXK?uMZ5Dn$4KbQX5GaZnF zF*1Mr_wD}vL?bt5=S6By%oETtgkE}9^8(Ll78D=GtmbiIl=|b$_iTU{W&I!b&eQz< z+<#vPJmDo!IEJX)7Nhq25o|hAGIPGV#s_~0!7s}rH_cEEYC;2Z7pC$&)`jR_Br2}1 z#RU}FHj6@Bd%o9W&Sp~z_jCEX0@?oI#{Lw%#^pR|-k&=%rUeikI;T$khk$(lanBKO zW8~ln%*lYStT>lb!p@Z5cxk+>xl*mHY0wAhi~hiTnQ|eyCW@B#PdIb_m*@UHYjrj_ z6Nr-8-0alYkK26+q(tZ9y#5D%e{LEmC2-3=k7OTWRDY*_zd7=}klQ&oe`$%?cb^v} zIakt;x#3cn|N2KWux}l#y?=U(U%xx+4jwc;=zOQw&!^i2cww{+kK~WuOFzH(G ze)$>wzn)+$2xM9j;WIz85WmaAk4H48KqIs-Z~tq_qrjOV3+*1D0D68EHp-75Zi4$C zqh|c;H{IZA5S3x8&;RSifBeE2XdBF?$B>VkJReiYCzKmnhsQZTC+p>#rb9ha53|{xkJ2mj;$KaW?(UpHkLdl>NyVo-Hi; znaIQ_gLE-ZpT&%e3)A-c!g)hUr_d(@g%vU|1Gnnl3|*9!yY@W>P_P(F%Ghx4(R6ECvMEF_xj>=YB^U zfxSsfd~o>4@7qX|1>`TuF1@wGiy4P3dqf9+^z}~uL`RD}xe{g_a$o}8BP!z}LuvB# z4of;tvrS08&bF@(3a+@>c@E5>|DR&}>5yIb88Ex2aRq# zk#!bPl_gr|SCc++zVbsFcghR#{3T67O5pnYKdu)4E=_<&4`kcp7&P1TP_&3`4y!Y8 zf_ifd)lfY}%Ohpbn;*TX)-^aeIa?Y6VkbX0AG2F|*96duCb%~$55Jr#l6z~9p`M!E ztu}Z55XTJCW2BQ(86}lp))h(=kD_<8qbLP`uAgHrMuutho?#_QXtbfas$s-_68;QisFfOIM z;fm_RxCeHH#n|OweZr7UEx%4gZHocYv|TS+0{d_lg|`L7kgQ2i?*v^NS}@Q{5g@ZG zX+>yx{}!~nx*tLlB3ah!XrW&+$CSRk%7|`>t5}Qg&qQesiRMmu_UEP;zx4_gmed2a zU4B4U3#nK;(FDLV@!Rw>XdR3Gobh5+Etd_KTcA}LUx_6ue8?u7OH4bTAHFsnV%`G@ z2d&&9K;x6(jfJ6@q1y>Np2aq(8+o|~&0kTMnMLPe6s!<#ZtLaelZ}(`-vOad*lJ?Q}?SChKW&4p{7NC$*gc_+;V8fJE^ zf_;_tp>!VyXy#k#4x;`^T(ody9xajjU^tP0kHzkn!TW3G>eXkCln8-BV6~CbIZ!ld zSaFEj@6;<6$en0ltB`V9(g6g=SR42f(U#KZD?L5i&FTX4>bJF{_uG8+5@v>=)<~kL zxh>w%ZoO}c(r#|Gte{;*pvIyjpr?Vta5bdt9H4*y0X_2f9#TG$DL!FQRGm%HQp5u) z`xgTl8f=RnlWo;YMz}Ja-Z6gH4S-Av)Y!4xoWB3EW`AGhs~pgWhd4hr9uc+K?o*@> z0f3yzezQI`-U~Jf($m|YKVQEo#7~oS6`$7%AitE_yvsVMOGLkQs$q|)W799Y8C!Y= zM!)W|{qJZR=E@)nmgWTioAZpk1`~s~6WFA$yFdmtlp`;V_ij*nB90Yxwzgh_25aXo z!Yqn-ni~qT3dH%T=~+W>+>V*mGOUv3m}B3Y$%jSRg!@)H^cdacuuL^Ks`nunkv1y%$>P*1Sa z%zfL_Ux*+hts}E;TMZFI6d#q?UZyz#Y{*G)D3~W&ivDEd|6Z}P!F?1PHo!a9gjxoEa6WGdzB>Jb`1Px5Fg_1%AsTZ~;2HpoAfwXzv#F7SnzCCC z1-i(%B=UTaY12B2tOm(1tIN_tDg_w@MYjVM!D#6^sK;9kH8_p(Q6D}n5=%U=ogHXX zd*!OBn|SLmCkSPCE?+KmXf_L#a^kl?m`Pk)<;`y$u2^g5&yy$jmP&c-JnyZlxo=_k z_}VVdR^UV;n4O=z{@;pz*B&GAqOPe0W_v+dy@M|KhhE_Wrncvu0`zzHVb^Xb_?`O! zpIZ01$pc5D`MS-|f`iP-z`)=#vaV&_{V4nWk8*9cg{+a1a_AbSvucEy^;fzO0J{NnP3Qz?5cCf_-;>@cf|B_g2y+}HB>)npU8)&?4chgr zWJ|5kH%p&vUE7xKSFz|V*9F)rZUw*NwsRADcOSk%8i!O%&tJJa@uY9gXk-cl)mB;1 zyHesOslC3Vl|7t9z%BOZ)RIYxMMj|JX%0iDF7&k+ROE$A!Yrf$9=6B8R-fV%rbPoz zi3V@4+X%PbJ|z~;n_u01DI3wBXUIh$%YeRk%Zp84DB8zf&v}6 zB-SgLd=G|!9%)}-T5q<-snv5W7}H^(&wWJsrZYEy9?BZ^ojZ3<-a1ns3i^rG>vvJ; z*wf`_pb(287Mt4oVbus-pdQ>Q>LH)2^B>g%_n!M_aG(T|p_y^#?%^|%9ORuMoo@jG zS2v5UD=NkgWj5Bh;@=DrisH{~1H9~~OM?6V+EjkPG`ZHO z3LJPlj3J-H2+t1$S3_3IF?Rwbwb}zi(5_9paYXRybQ^+}ggWG%8r$7o29=$43W+U# z*NjB5b6)hqX=-1rvX-wScNadWR}PXV1H7uA-Q624Ew%-Nr%`ur?DE7>f+pEOX}bUE zKY>FhPWRlZ3khF4VfX1!)S}B%P|VeRZ=BHCRa+@8=X;p`HSLyu>tKoHWUNhXX;!HR z$BYej_Wo1d>q(#~rmA9AZFmDkm8XCvBnZ9YnV-SoubO5|1?Y8wbFQV-M{$U9eKp;O z!!RR0O2bT>g9t6Q;aVagb=D9+Q^}J8YOWv$P3aiw5$L2C2*||gv)d`J9!^CLmN-yq zw9`J+IgCJ$0NbhDsYqx7s_C9#94jaW0_S%*m7`AuE@!7ER;lJkaihh~t3OhjIl-#q5&B>wp`+ zhf-EQ!ou=Txs+%0p6?HC>tw1cEY=PY1L=GZp9#&>;7WIC0_P#bZHwPsqJD0tp2_b~ zPugwmzS1DTHDlgyMEc6eeA#sJJnFl=l&miZypZy8vc);78R0;P_lGdh%BWV z`)H9wmMGcNVoCOWoybyzQj%R%M3zFvIz=eE$i9T^%h<;lGxNRQ;+#&->GS(u*YEmW z*YCPMe>g|u{hsG}?&p5)^>yD5gCJ^<`mwj5@8LM(i2om#Yep6Z&2|G7QP^Jlol-Zw zI4|hvL^dSaC8s7AeV6ZjZl4nF+)*CVr4YjtZA-skvEY_rJJ_sAAX&e%QuPWx$SSMC z4~+wM(QSI32l~sFr;m0uZsDJ<#`~?CDq=BZfl<#htxy}3E1KWnKg$cPY5Ve`;%r$U zqjRgG{doHxknq#Zh6y3yzaM44zh8tt@ixYvMd11UZBvZbTdsMLS%vfzzoEBEzB|E9 zk9b3CA64%87Y%#@Y9Y8zkJ`3}0N=5rUO&9`@Zkcl?wwwtLgBNml9o90u51h3Q8W7> zghm=^di))nLoeEN=^+Ya;iPQiG#e7C6LXVujO|jG&N0Er=n|k!W|r2S_Ku zuSplLH~Ml79*5#kZ~FeTC3H=L?p$t?a(XW0^SXotVT)?H3pv*NJ7!Dv6kqR-Q?`|Y z)>Ln;$TxL0yjOsdscHjhH#LG9r~GL(HD1>wW$Q*HY#HGs02k}%xd?@0+Oln8yDgEqh($;mmxK2=SH#hS} z(fF|l@I{GB@z$x z%vb33C6Ei3N@`rro$(1q?KznH5E|5kYsu6?^1SKus_SBI3UUwX+e{_x77jQ;O~Z`w zci$IL3aUxV&PFkbQqAXM^rf~7V!yRdY{X#<^993+Z8*}&`RXqizlxjS^$(JsTWRAYp7%T-Wr8do>)Bx2Zy^w6ha5#PHjg$ z(-sa%W=^-!H;!&^!mN>u^hU}EMc80*-f@~7#(o;p$FEOMBH$TAgY&q9LDML;yB?(MdwsM$|uPEyK?U=KW4IG;)%CK zKqz$@ZO+Jp9?_hfYD;t1aQx;$WfzLrBNOWk)c%^0$@A;HS8i#zjrR9UFP#8ORq@$9tDf$3j z$Axj6zGDQ>Acf1>o0cCADY35&nQ0&BPVb@8(6f9uW9g9GM>j8|UnrR-IaJhQ6cfd; z=wNI6-R$kHmLmpK$!+xOwbX#skC8ewS6%1hqaag@!Cv=uz?p1bkTY_v`f9<5cOH<~ zAW6Klk4j{fM?q*+{ww^GxhoxZlYSI#@ZabG;|$Rn=_0o>@@+YD9BISpbqnS*}mm>cM`?k zSicK81Rg197&z^_caV#QR2FG}-Z(}$ujV105#zYljyd!~-&PuGvJ~xthIRubnC>)+ zUNduWs7>6ezIv5F$VhW5NYXBg+EZ(HXnY**gkIGsA4nr=J9aH`WG|CGr3 zO-G-DEqBU3;>;@QT;K<*vNd&Qx`DhW1+7CN3!8lT=!hPOrY2Q(u^l%Gt&yB26rtVw zxO(i8HPUEV1s%=uBO{1?8f7x!~PD-ZUBAJ4kAr}_@_b1#I-qTGsAlovd^Wp9bt3OX5IobvLI|!Jz6Vmecc>2+4~~2V82VX z)d^hKbJ)xb6mID41cgu_aet@C0SlqJ0H*Op0(CPNX+Gg(1Eu|Fb1YRmEuU|36o-j! zYu~$O?M3FTGiiUm)LkW3SFQ~~Zv5CvziFY2IpDC!?i18%wY1Ig3He7ih-MN{-L;)r zEqxEKCHOwPrX1Kbd&`;IR*E?0n4<-4_r3;a#(daxTEAT@e_q#V5A~~QqgRA^?m=5S zI|f6I{Uc|}?waqbMUUdHe@3g1vF&Fxr&+W1)eh)hV%B8L_K%xIkPAZg(5xr3zirzU zS663aT0J`8!=xO^!s#+PnQl&AP=6jO~dcv{=pz)^(SJMI5}p>loi+PbifsE@Jo7Obv@dz<1fjE zO-Ga9p*yoWS#IyXc6MZ`tJ@&zk_?twLlu+vKHD}RxSqmYs-AJ z5jo*KwsgOZmM%Q@HD*oq@@+SN-$^C&V@=4FH18)iZCYRq8c83^YW;hU+d9W*2|nZc zU6(V*I5Gt3Ie4NXbel4Wa?eKYS?oyBFfq{bq(I{bhMYeff^F`3QkyX3k?sP#o4zO@ zDuT~9?3DQyf|>X2cIhIS>s*6EgzoP{B0YUKs};jV4Nnn|r`4pubVJbfeQHmaQ`ueVq>Dzq`N2M;WL#f6Mnq&DSjpLFiumskTptTi%Vk zPq;lJd@GC_GY1KOKZaT|nwzMko*k|hzkzJCfgNSOxkhX@r-&lz@zwi{deDMTDHVKgZ|2}$<#+1=Hl5;xK6C&x|{89D2*A*dX}8bpZ2=>WEcDT z(<5BkvzM_$FC+XfUOaPK<`JAal+#8DsbAHVOaL4O)6L_S$ZBe>L8%Ee^(p=Cnsk}- z>*0+eoq{{+5`*aO$}~fE2V=ZNQKv6j>dL9IYSLvkvAOTJqI4Pauf5N`quVlgf;#Am zvnS7Xci`P?t|;r0rPp>X^rMQ|yBsxjj_91A$}{o!K-ZqKvX&ehqxmj{Cm$=;Rn2rA zPs-buF&0=UU4Fjq{Mt_YuNMuj_Rr@W9D0|tz)8E+cng>g{eyBwC;sNWAKLeksUqv%C0vB27H-4}&Ct2I zxrx_CQvA@HP$JTK_!Z5if`S5rh5KO!&=rDagn1v+mb>O{uVqA|v zJFz4A{l`Ez-tg>)`0{29aY)(MZltkf)>AP)nWrXfWakBubIXWn=lN}`{6F(uz5RnqP0nH zyI}5MoG|(OqvH4=X_j#^rNCh53ww`vPS~|Tu>*(n7E{}=&P}$O;p43 zw0AV4h7K@7)sX}>%~0xm4Ye|vO91W_=Fk5|tYPGdvb}(vYpwBBjXzUj=j`lUWP~Q< zI1?5Knj_IPcdC#APEuuA9Dfg9BY0-0If=`J;$>DNegn6$l*6|MTwEz~nM z$D))ZCqGu=@N(1wJ)HX~zyiyhZ&Mk*QfD{tktv}hIWI2{$_pZT`kZTaqnxbSQ0_YI z_XV`y`9LtGv|=_oOw8s?yVu}>Gp3EN142inMBLk(g^AeS9>dYr0*PB)@1*on3HPm3 zofz3zL)v!2PmZ3tIjh-_vuaMvh-{yIDtxp(-OI;r{K4ML%B6 zB+T#z#l0@VRMF7Tu0M~-B&-zvZKc!MC6td>YDL8#iP;$0a2C@fA{cCMHi#CqH=?9w z3tWUtNALrxrLsK~6?#tg{(1P~iISsKGF)Rf_}LYG^ORp9 z*D)gYvw>?r=~Ir0f0L@1-`k*oIq{p&7xY;I4@Va}%w4)*!|QL(hq-HR^ON+2?)$IF znYxs#_uXpq%@4CzRdk#}*vFi=k++UTGrK9Z5%3+5`7@zJ9v{Q!)!P=ZN%1|xi4GZ4 z{v5-@yZM;L4LWB@vsbnH@#{F;3Q^6&y>ZX(P$0=p3+-KKB}CSAlyT{Y&hi zCHJ&JsY~bdxT4^+vGDX;RN+DP+?uh$crNnU`Fch-UeaP^$Smf55m7^by4teMEPGZz zgcxT}siKQJPOkRX-|dbkxTnRMGktE8UpPF}cGAjj!+ zRF8{hhKu->`mv&}k_IzhK0&OZ>OLjKvG#=wu((f0ba~Ye#5{Dc@krChxH(p6cSa^3 z`PSQX#IB1xPS|{z=W{u3ei|K=Y}T58&~?nTsjMRFsZ(29Djm4*0gSU@HSWiwQKxRp zm~MJZzo7h7R9aEY;2g`|T*J}I#XPFwfvuemNk+Ap{?|L7W%LdPSVg-pG=(vax-1+| zGoOwMYjO}Vs=6P9!%!*e-d_{WM{Pf#cIqz*Om)=x9KQGOakIz|OCqqA%Jy+Yw0yxPMhY$TVy#re^!af(u#!i`uJJFa z;s@$i62VA%jKe*JjK|ZXL!YX~_dW_>KkgHiXTQI1=bUq=zPggmJmsogKi;_`1fTAw zy^Hl!@vYZZZ}v_*6jYs(=;kvw(@_sZPOffu*X);Lf^nAmaxq+Iq4!{u|MLPfoqZvE zuZ?t=!}keHiu1ivpLEuf+X0u|Ygrb|+x5HL={QL2j3so)=cZrh=#ATVzGX+LtY%#B zj$I>m4c(OllNeqn!7RNx%d~hMq3vkdFKEH&2(i$;PS{Sp-aoC%4EbIXowxOw8odz3 z80c*74|}4Y{muE|=ly1#k6+f9Bp4NP*?r$w8UF+w6*nR)RVrHyrKm{!;l*@3PIQ;| zB9$0pv8nGQsqUM5g|=V~DYzZ(1t^Yk5Uju)NU(hcM&ulAM)6@G$?b|kN>0lba+L(> zUkzjvX#Dx+%Ay;ggGWBre)ODPq4BWbxi61(9}ZhRoD!1Gw6@F`WlC1`_GBEbw=dr3(SJnh zvU8S|YU|7PUA=LUDnqj-)U_u3LC`AYOO3YalGc|w1_oL3v&%$jSI&z$Q8G4t_CxT{ z-j4SYx*mqTz_B{9Qv&qppmR-F-c7qVE%1!rYV!Z6PO~Gxe{Jwb8WU<{Blc{22+a<5 zbDihBcdzL%OGa(DSbG_tr$!Mk$DUnmH+?(IC5~x!iQxtVllyjhcwHuyz*-HvPos$fEc8(Cwf{Peo*~>gbsH(ir5## ziCa9J-uf^rWw)_XkBCZ?C;EEMno=1Zr;#sEIdO@T)sy0+e35?1(u*AiL;WHTN5hr^ zJSVe;USAQR!~K~Uqw#I;8H|T|E#~$(yJd*gl70*DU*ohvM|0juy?otGPs+MEqppxr zS^ad1lOaO9MY{GK23^^vr?4_#=f5g1zYDwjFF>V zV3p-lecCURVWk>Zzn!Hf4Ep*$NQ%`8FO!v8TSX(Yj`=y&PJLYf@aCFm6Jql4VZmKT z262|%al+S1>-1Uh74rcWI{HU!C9aiLrdxK`-L~i&7Fb?byNh~K%*M*R z4kzd`wesvHuTy#R2#qzp*i0P^J%#_^R&t5))$2M>3b=RlL21s1GPAP>q6m4NS)#7J z5nYu}Lg?EGb8|k>5zM;@M`7sR7^eTY>z$p#-NL&~7%iN;8{9N*bJuegZpawMiNDs( zJ6;)WqopHVYn5$OnC?9K2FzFgDoAzm*xK8(L~5%Oc+f<7QPK^e8uQ~SwHUY$qWd0C z%;rZ2lr}@BR7Nv1vlg=j%D{dhF{#CxH1{2yi~T5Xeiq$_y0dRXqjXgW6cT2u#oSPh z>jBA$_v}DNzOXbGb z7`Ui0rTgu&yRNg_ZOm>^<*4A6SrZF4qX5ut^kpR#MfV<^;MIq{A0hSN%17CLhyyO z_+Z{0X}!)MbWL83$X<9=Raf)m|RFi*?p!_*qp{bB? z!9h%iokCG{l*Dw+RJMXAMOL$?sIH#XEAUY@gW2A)k2mTR!B=|bLN0h_H1;-s>Zagx zu|evTMkG_rO=d0h$ZPZ_i-I1%tsP$FD=ns8BDL@f;NUb5b^j)MVM6tRJPp zBYwvAwXxsa^rtimkA+*Nb+=9f> zmfe?g2DMpq99r-XZ?=23>jV`rKHg!tf|gIi$4rah;+c(KUqiQBU;1h^y7Npe`lawG z2;P>{kZrb_$$eSODakK$-aww-b=Bh^QSl|Od>ka09eyptlJ|XJ$yfO76v_Fo9_)&9 zyMylN^;)RO9`K#6me>_s73IP_5d(rwDW`0ktfj54u&2QyLZ*fRsPVfY=2yfOtkIx?meP84CC-@GS>7S7;`V%)y( zwTf!5Boo}wkyfQUb4o^gF^dBjpQeKGS*IIyMGJN~+A>a;TYAJYY04xRyIeV{GH-g% z7!Y}n#zeSduR6_lbdfv25sS5kLd7exue-==SGkb~H>%)Y#NG(C(N&xm2byL7osms1wf zs0Un!g{Vi;ZZ%bNz?C|xR+^ykdxOxN{naj3I%t%LS!?FRjGA&kOGc1sQz}EoK;#pR zOa9<3yVDomxCju9}O`wty!A_QI#$&^4P6acSaWra1Wx}i{_M( zAX5tD2fK!A{uo&L*M9_Et~jpWb$pP^>hv>mOU8g#RG9D-^o#S`km&!$&febeT?EGg zLw6_FuSsR)ox5Y3rH3zG8jGdg4eTvSWU666?42>Dz)sO;%|wp&EWX{X8OL`wTUv;= z7i3)y@vGPcat87;NAoAoTWlF=N~@8ef`uC$9W8A2<&Be_H9dP{8a-&ZasfjwWyv8; zgR(#lgljjV=RGEd+&vca@Hsp>wsj>fxj^EM%iOsiWV(ig(6g^5o-w+mTd3YG>W?9h z4osEXk2iC|{U;ouA@mFAnc7p`FN`SeIyih~VS&p@ZEbBG^~!ioi0$=r>*rAxu)6Yw zECO20hSg6WLQ~MHa7eU#*%wh_hs5n#FgRO#?Yb^NL#bv>rQW_$IXy*mb zS~2pm9Z|QM!f!kqKsl&qn!O45vU?_I?NH7u$l-#w$A7CieUBvZ`=f5{t_6GS$atPj z@-*k8_2V||uSr#{!cJ4)kx)^?K=l>~?N#vmvq%%~DSI(u=9Q<*Lj|;11YLR~-rkT8 z)Eci_D2gAaMw-G!I-_3{GEk&X$BdU_%Q+=)gHF*dC@)8;rO((t z3TC&+J*anl$)(-2kbMR%p|C10n}S4H_m7D##buM=jHk3tS4aGMVt+c!?t$l|;&(vAx+=AoQ*U?u;<)k6l``#9~RgZ}F>y=y2^y>B8A^ zG#%)sYkHcQmLn9lmjw_0LdOm#XP3{RI?8GLLWGO#tw1Mjl;Vn^6mE=HH_ zOc4LRNR!!E>R5IcOEnswFPU=n84-yh-fG3}K`hR%V=ij9L9Mw!M6khx$0s#4HGi%H z(?uxWX%zWT=`LN|xZQ0fLf8BBwMiA@Hi4q5v#CkA@ zb^h6RHv50#gjH`yz#FZa8hvL$f5`12Bbg?w0EvrgFFH{PR%!6xsV2Lc8fmSm4Qs4k z91%(3oWV_eP1}O%a#i!VFrzR{&#K2cH`>A!JsmmV<$}+VP>d2kmZrz-6C*m*YzbcS zEhi~x6R{35+Dy{quo^E6F%-iPeg`jQeuN%>Vx$IH2&4;+ZaIgDZ-IRvzE4JtsjrgqKfj>@Z}>ES-J{8x zztRgpv_S<9j*^QJ+c77-cL!Gjak5pzlC$N)&gBXjZJf<>mf)z^?HJ?9R!!bW-s^jH z4?(XJ>6=;}h*lm;2^QmQ$bWi>r0>rpmeW zXD`28{GR{T7>(qD;7rkX;qZkM;|@5m+FpQMSK17Kz(5p!c)Wc5oW-VyBPe!WR8@oo z>d@tMZf!HTBB#4MgulWpxZp%_oNTCXbzn7i9BxP`3XGEIy#b`k3Cb${`?Cc>%utccj`J1Blg$mMs<0zPn~(Ec-Qj?Z=igT#in{B74OH>3iJ? zHZAAl+)k5rl|x%uB=*7zNc?vv4v%-_p&}*S&I}F@`(-OA)S}H*9)_8wkx$P12f4kz zQWfRUz6}Zb)AZ$dGO!=_GC~hDwD&yV5-Rta9WXpe$~j0!6e{TUk*sOYr36Jq$*m>1 zjggu@3&`2A>bg4}AC2MH4$BdHKNc3T9#XQ#=iv}Ejyf2f|2130CJ2A&4$cA?H3%BZ z(@=9Jvf5z%=`D|LkXT$>z8bU-r~o!*Id^+&WQ&6ZgH!}3+XV$VWhs%<9#rF2LWODZ z2i;`8PC)B!%T4Z@44m*5(qRWAK)Dul*pqLh3PUG8QSNBlI$Hymdp@-ycPkF4dH`}ph zEd#P|@1qiie&XmK87^i}4+-gNNADrxA^aTd^{d?a&;Ok^f-H6bu*%KcKQ&J!?U+%v z&-|VRH@l@ox8xtZ&yEt*dt=d6XxTo=^ReQEA(B!ld`e4-0fTwZ!c{%$!37#3-VOg` zBAQT$0z)u?I{e@}mWwhGnghnT(J6J)GR-aUs*5A@M z3^_@zF^A!XSKWTH{&Yo@Y$5F@4CH}8-OtxD@%}7_K5_2Nc4MBRLYf#*Am$h(kEjUy zUpk6PIq<6teSQ%jfhkh)x(G3A4nkp6R{Vl7uJW=1-K(0W9nx~5zSUvQAc?48*p@IpQ>KD%&H6h$)~%t}bn&J>(_ zzFCGj8@YUuUT?zFvem?<2>YhDsNX1>7WgH3qWRj8W8o9J1>8(!SB?E=n;25N<+#{@ zR{?3xhe~O|_{wp*9fhV$qE-%l@35cph{{VHd2KAU6GRpf6 z)9sx`tGX41O3|9VJU{MWQ7!Ot!3wfWgCARYaH97=t*0c5aa6BgWHfg%KAQ)3X>Hfn zJub*Plco^wV_C~PiupjpdfnoWFAgXP`|-_;((_j?&o*D%6Asuk=8n_Xt0RRml*O%8 zgs3?7;C8zv-IEkI)k-E~1KeUPnY!_QSk$Fqvw)P(HoRThnNa=b|!qxGs-~ zEC6$FNxmf2h!eF#q82v8t?B_A0N-}%%{$UlNhfQ^;mX00?0+tcjNTc2KsP0>1&=$1Lq`pDZc*nYn8G*=bZ-P;$zt`CJcayKZx|V@` zCTQUx-55}bhkaZ>!_W>4k8=%fQBhGKc)|c#5}F%7R^G9jyH3eeUA`7~rgqEH9WMj|3wv69U~=eJDsj&)4IXDCHS&C- zRY5Q{@nI2V$D5YBFy2L07*G5a$M44Dey|M=RC0TfDaBN0`KR{nPdAv(zOU-Q+F_m&UTSYly)Lk{bmKpPDGm%P zCY=10N6&h|`*h+4w-3xPETrk{+#>J&aX!Z9dSDbqVyzS8n$h4-? z7S*5V{u77)_~Oj)rRmJ;>rGR=9rDeU?qoTC>vx}Z3GxoY5OM!k6H?zk6J$>qHHz7; zM^4g!Wc=G33fR8Jwo`yq(=qf}V&A<$S#~42-?Hyb*cXPz-fQA*#b!;>?EO{I?N~Y3y z@|E-R$rh>1Qx=~%8;p@Tu=#a)!rXzQ@`-!%N zLX-SW2H5v-9eCigMDx&Umi*gtO?(797WIwe$&UkStP7mdIObxsT6-giv2K-=PHFI0 zg0#M%N2yWx_O13~ow@~QS|JR$e$!@N2={RZh5U{Jo7CYU{XLOYD{K@36xZN0lK7S2 ze|TJljVn?AqIM|&0+7ekT*gYepFdJ6k8T#o?qq39(T<6J)UX|1JDLMac;t{?zsiCA zdzsuSJTQIn4-(6=pf(r2Jf)3L9r_GpzzQx&@7zFVQeh6(M-n`Lo1o zY5Vuf9{mWkahzgj|6}zsbifX3%?HCz|GII;SK!-h9rOT64BcoQ$M&;&_XeR02WbJr zw!htaWb7G4#PTS1X$7K@wqN91h}z}_0h^$Ud@Nf(H!xvTS}g zm;eC2yWZ;JKmL$Z9?nSUNukqfmEfv62*~hpcYz%KIzoIe>5&P@YUk>ykN-7=l{vARwGf=Q2{;g?%|1Rbwk|+&oEP@$3dJ!YV7F^O zz;1B>cH5>_cg_UEag6Vg!mbwXoab7Ly2`bReRJ*TL`Xjho^W z2C9g_k4-^hyI|`Vz)IoN^@Wb07Q@8qM-tDuG+`6f1+Patgb`Sy4!QxNM7{G(m;fZ4 ziGZ;h(;|`qA<<1>Z?Nkj@et%wMMds&p`XR>WK7f98SOkglt0x}FxO-GMV{wI zg?Y~GyL9u8h5T6-L?i|Evc7j|o zj3k+@;*DU=?g8(9i>WfaA)PSxi4@uR&!o4!LVn;mB>CK=TA~~Lm_Z-ud^^W+=t&GeY%uUTCnhzA!6KIV@OC8=@C8Csdv_1)~X( z^UoKDLmk^d)N!6jmvJ%K2&@ZXd}0jW{vcba79CW)78vm+xJCME0RG*Or1-eY;!Jc@0`p1rLecdiwk za7^%=t&V4p4?F8Yx*j%G+UP6m)J4D&^VG(mGZpeX?z&!T2C=mvORtr}zn~$wmTQy& zRZq$tRYjZF7A%{hGD~BWh+HjBWxuBU4~Wm_hQNk%)RDvuyMTiCVw`8$kpJh&$u28a z89PMwK)#VZP|E&l{}r=mDFR+_hqDi~E$-)#REyM%B3tM=39u+d9zS+}mz214gAW6H z5nN*4+vi+;dd#miG$J?81u5LJ_P4`CN)nre0pJbox3bL{fXn<58Fa0521|>e@5frZ zJ_6ABUi+W8c4l%?2NZ)NZygon!>@${CxQF`Jaa5gKv#&5pfEdoRlVP?;hvt{#n!xl zV}eV-=Cm30)!|)?Y#d2^POfuIi$88yh;rl}8e%Y&>b+{5k0><&Zr}HR9?oD_aF$3gsi%S@ z5f%)lQ`f5*Nh}}B4@?57d<1W&UY^F9ClXWtlH_tH#jOB@N9*OxV=J1Z7J;hgaBzN} zWM!Og5*ds!jahB4dDwzWl@QN$F6(M+EasJ&A0&%e)l{Lr51cI^jef)>ak_sRY%3Ps zvd{`R0G5}r)XRcpvr2CS8eT0biI=-9mU|MK^x96}M#jZ$1Hw+vIqBRr=>=!!Z^qjFjKS zzoJ-*!AV6+rp~Pj5E@@Zj75Sg;svx_#OP$5nVXsMvcL@Z)OK{}X1TR)L$+}s@`e4wFdbn4e#`eQjtapBTTeto|eaax(N7j9p;P+^bn?{o~^A*UQe8xoX=VyNGH`vA) z<#kKX2_qTW;t^B)>ZktxL<=$qxQi~GPRn+&9WZPfd%?ODGkImP>%%X=g9r1z$|K51 z#t-52hMnQ7_V;J5y9WgP7j7O`Yrav*4iVeIG z{z!s*`Ku8qYYJtvCFO6b{TRSw7;&qc>N}VIDT9I6D1Scr?M5adVcTQOV=E~d;Z5+; zi7T&G@h!Is_$#b@jaH=Qc@J|%@bvA3(?gx4+yysoX5^WBJsD|a|R-s>C ziaiEmL_4D^YDtndD8WGXje)Ct=%2ST1io7PRdy8rkMDXw2h&!!y>sR#vi&eo!ja&M zN$!_>$X{g6!9Z%Qhr?xmCp$jCL+ttMjxCpL8cV`=myU=CtgPd&F`jFJpI227Z-y+r zb~BKqs@A{ycbQO`1(Q(TEj8@CW}PBQe8a z5h{;+uq1cY&%)fnC(;ccN>3k`O2o zH#L_PA@tuNy&an(g>T$6Hf2}+@Z|XNb7zO_H0Cu`Y z-f?9`4QF9T|H@DN^s4b5k8OL;`1A%!NM{DH)txk2hPu3;pobMf9=^bIp7HypU-$GM z{F508oKRtx!?Y|QhJh3G@tl^fzY<->2JRHG^`U(fXjc8m=F-xa#%@`=5pYp+W7;E@ z*L_#!`)^BVJQ{B$Dbk)=0=dRcu7)3)nJz+q?zZ4hZ`H`5p zDNy@03q9JJ6W{1-C;992mX7SocWEIM^A>M=wVVWt1hc<>T0skZhR13Er;W=(N zimk0{*?A@_=w@TRt=^Bd4X-WmW%LE8WjfAOe{g6#b%8SWLo%!k^V3%R5bthq5J@+m zu2_N%$Wh$zY0IjLW$p(%?w+KY?LG4a3YO{CUMmY=u+g9C@sxt=lMd>Th&VppG{X-; z6#Sj;g%O-)dPS6kgO5IWIFzOjtjNUEv8dhE>&fT;xt3qGLLy>)rab3ZI=L{_32nrh zfo%S&X+uCd`aN_3E;31w!o_yuF#QU}03eO_oVv+^gn0AE#{B8+ow%nfdKni7eU~Qj zlRo=(VB}98Ghojp;DR!jDQ0{Gw)?<{O2Uu5{O1&86gDZw92SuzJsx0=9AOu7aYF*F z0=#MVABrldqQJ{(SF-spwc|BD(W^86C-s*X_J2EcWH2qU=93qhq-^2R#^tSn8)hW2 zYPb=@9SRW){;MlEM#=O)cZ*ua#_Fv3m4Q~R{ed|w)Rqv`xP0!n2F6=n# zq1>LNbm-sZ*^zqL3WKy`IFYmVU%BSz`EYlDydN6pS}q4(AFdLsQ;P#w3B>WFGqYrQ zx>)A$UHTJ!ReO`)Qd4qjtse3C&Z)-t^qRN4Jq8V3h4oSgDiam+4j4gPV9V}7TIl&u zBhW~;D)OQ=sC;_Z3LqWrJ92a9%8+_zsGe;1>a1lyZqd3MLVO3T{THq4;o839M1#ar1PyOVh504!= zjy^;^{vZ4}QY>_KXR(b&5?Jr-kkG<4k0ib+yH9VU5j6-bOSA2$bmq9Y zrqu!!7D*(%Pps^swSGik6}vYTl*-x{aPBLVB|{wHt4&`;fdAB)7dMZ#Vw=OAFjln# zsxNXy(%P|~df6JF4hj83-%Q9p?dAq#h!f`X=^h@3xdH+@IAJ2 z3=OvNvO?Cx%Jr#r(c{rKZAVO~QDH)s(vN8C2~op4XJW)m&kT+Z-jA4`smE=Rl9HOV zmNF8T5HG6K6zM&18YO=@!_W*u%wZ;K310Ue9Vn@4PB%E!oW(C?Fe_$bSY|ddHpT!L z3QpL6Lj-Wuni-G!v$@dCr8%D%=8WQ(F0|UFw%NH9%XU;V-{Z&cvsY`cJF#PzYQOh< zZSt?K97zn*lVeCaMN&U5xNv2&wS9kOCCR_Cs@hsDsS|c0$Nbe`9X9c77>WR4 z{TCFn_lRss6ua9tvoFu@P0mRN`5i2;W@cyA)$QnZa39!D({?6C+l`njwBxZx#y2_i zg4I0q4!in6&?PP+%DiKDw7at%@WZ(0>@4q~B5{NlLefUEZ>%0B)tEr$pj7rt=QvvM z_>UNNi0!liTxcfS_t6_EKz|-yx>VWZ-Q>>^h8uY?u%Wk9)*xoTz+t2eu~C79eH!A# z@%14=EM-L2K!`=?u%KVwzJtdEk=m$wV|-o#j<++YDW1YLWgyI_QX? zU%>628>O;Vq5EDyoz>%WO`oZf!IYQlIMhrN+|&dFNb?U&a*tW<+vj{05gg?}E>es{7}Uv8F*b?wH_3&)af z=gJZR2J5%9pFKpY{VuRc_1-HwK9<73b4|#> z9en$drc@RQoDi<~M|EfH znBfXHyXJO92pjf80Ip1sZh=RYPfyM=18VBN6bVUV_4Zl$4?idSGXi5qA9@|SV6|sZ zzuAOV;l96@ifqzO=xn*2B}Z?c7oTbs$$z^rtsf1Ui900m3zhzaCuM)EA9HA~UZq=| zfAO0~Jgm2@D8vCT2fgVzP&drC+TKYmQZ;ndY&F`lEodQ*1fUc(pLO zi(gM>a=7&}&T5HsmhuZksVA-nt9s)&J^H^}KU>r3fT~66q8A&Ik<^TGyArY$)?vY+_fh=My?y=Ddo1 z89}#2?i91W&W5tT)$Vl%N?Vs3d<^Zb-zk13ATZ)hnkh!K)`oj2AxF#9b701>-+pW< z&t+&^YNl8!go2eq`4#jzkOQd#C+FAX92$v}Lyj_A0lHY+>L<(Q5m z#L?5@ku2woc#`$fqj5DmCC-o}leT}j(B#jg?0V@bv<|G(b?fzm2#xKs~>9MiO=Djg~W~KUgzv?sO)9Wv6arim$ zr0ZoNn$V484PQnpmUrFJ_c!rE8{QwxC@1+Jky-cJ9NVNChVSF3c9jnC`8<2oxZoRP zf%QMY89RG_$a$&Uc|;a6ENhX%cv*g>r^3>iHz=&3W;7y{&(GKR}!IUQYl9cFaC@tM+!%ki__ z>G5Pc;JF#6Yaq2-F3A$nIkC_LSkkV`w=VX)ogG1W;fQTQUdK!uSvm~IT90)@nG$cV z(n_LxWgS0%;}2W>*FfmehhX(G*}YWzx9~*lewvq2ju)PakTQb@+#5A@1dT;{UCCyEMODNE@fa3-U`~IPifE z01(h3uG*IG-?lRI_4`OMq(@)W<*CIoqmvX1NAmvei)p#sP|clmy`bHXC)$y(-JKL= zP{K&%*HE9C><&RQO1!fW`hP?gQP_)sdJV1RVCd0%K$b_g&+GrqhluT?>8~P1LD$1K z>%^fN-Y1mOxj0e8TEJZyF1A-O+7+bKTPg6vgl@HG9+WH`zBkc@#_&o`eY&=8oJWf| z&lKc6JJJ}El7Qrc|C?WsKRs{<Dr+B?d-{G@8|jhmvw9=7Rc?7UK1((Zv;7i5PBrM zwk$tblRBI;)>*(0-Jg1a>7p)nq(!X`Oa6MGXA!_BhRb-_8wI#4)C4znD=jCa{xM09 zC)+^F=sZ0<{n)Z-l4tW!BqOKj*2dSm9MDf+WF>F%Z?ymGYtE*@TAWE|Dt}DW^!c@7FWN^%%~sb=84WzWHGvbz^aiEsJHD>NfLcg4sEO7! z7zpGr=%TpYY0gOcpZRAmGNd)$L}FRgJODy7w3zK$RaAt~%3}{b__~ExxBwa^$g8$m zQvLeLQ6zgeO?V@+ELkofd8xNs>URI@5o$R5ZAY3YN^<1;&}7|s4vFd&z>fM@@fRB8 zKUd??h(Ld%3hiGm6Y?CK3bilW!dHi-kX7u0H8-)fcmMasEPst35^ZP~3tw*TdNcu6 zV>6eW@o&+F+sh#D##NcHUxxYL$s+l{|E28z^6dYz0SKf2WrP3UumOe3#eurFER4s8 zymQNdcTa`NKHpRF{9E>?e3X)R84&$k;viPxa&Mby!EFp}Fx%PN+=r`gbKw36#N5BL ze&csviG50u+{8UwrqKJ|ujveF6l-rAcXG&T9J{Fzx9>v3!(t5vF`?bnmY?L0<#b$i zxTuWQoxY%a5wqd4U6Y#fMX6choI^~~IOX_K7Eh*VEghL@OW?C*YpRM_Ww5IfEB>Pm z->;f@^LCX%^x03&|EhR@vc81H;alZ+8mpJPube$C^9=K+hw$cqeQ`A7_DQPS1_#l9 z{p(L(`{4hu_ugSmW=-7ivo@3>HVjI$gHi%3qS7sh9kI|!qzEF?YiL;(0W|_vQ0X9| z(tA%3L^=UMIz)O;s0kq?`Ob~R6=m1w`QG=R@4NO7yujqX&p9)5=FI$N&P+1+;vFxe zn~Nvw!PRSc=7fTeZoh~R^KhFqGBWBShRSvIC$#DF8YRTs*5^S_4b=Dyy&bBFgd_5| z$jHdZR$fzl5%!XOYM@{4gqE%@M-Uv{shv1i{vxN|pnrCvMsn-ctwoQctzU_@RN}# zjeJTu=YoA+lNjBvulmd{F<(R!mfEE6h?WW+qvPJk)Xl|-a328kDaTAYQmNe+$vK^VlXC5S z;(aQpODHhvO#YFe4ktB-0<{swE}7QJT^a`nYKYzohPuOKkEb+DbD7Vjy!`B^?pD?c zk4RjNqwYGWo$&6}6%??*EOUz%I=}s`JXS3LkA~<`TDlPFwr^f`1~p3lH6Te->*PFD zGmWYE7TMhT7*>3 z-!kWfU=L%lo~)`I$?QBT+TQ-cg2MNNo$gzAKG(XQ`#R_53Oyw1(e8Ve4`FpzbNtyG zZ1>c0QMps+CC`f?hJ}pFG0ms@X?w$AIYrfXJWh*Ez*m)H=0_AVRTk*?0zSE~I6WK3 zdnzt3>3E1`fI*-OZZ@J;31OAg&*9COkZO(#n~cgIMf9mqH#%6EVF$^)CT|bJxA1=$ zDaSa+b%wnqAj>eFcT3;{Q^zCG@nQLQpB*4-CeeuLle;vnt<@vZ6LDgMTiCMT51FqN z!FQnvm1FYH+&(upxhwKGXxEgIl-li)7=2&gP{(e{JO8eMYkMqW%KOj$!9o*(z7k2D z4)=OIW;>5Ge4hs)wAL-M7AME;tN-pZ_jQr!fb~{9s7TOFL0*=HLpVa@A|BZ~rV@#M zbk8uBI(u|osi$C*UHl9&+KwJp-6mEJqx zK6S&y;5?GXAb~5r`Z7c@bnqWqtPG)M4o^>SMybC~OG`_suOJ^E$2lj`onUY=XM2T~ z`F>r^62g2-n!y2Dka!z9NFu|d+&#KLYshGXi5iov=AW*G()miVSVW4^FyvX65txa zaM{RhbN8r*H&biYWK>{2V1;gA2lF5JcwEL&yKTt@?`IFI|~ zft@h8qSfTRTMAdrAJ-0+rc%uCRSqs4XBdp*2>U+|eK{imPefJ@uMK3ooq>*f5(e*8 z8G;=jON{PSv5&7_&I4I=&WqFFlN2Y2xsxZ=5G^_ICdA355M6a;A%myN(+bUyz%&uZ>^5@ zdqUlA-(t@Ruh88|@$q*+t2xKOIJe&wJ$CRPwM{>Gr!iZn=UgADHu8jlt!?VTkPKH! z(MK<~MZib?(47Qp3h~pG%Fl`xIT`b<=n=k=E=DVzY}gkt8RfPXc)W4|PpNTJ?@Y{y zp+@D0gP&0Fqdz=V@@SM{*iKh@`=3h8<=X*=AH({_^i-b#^khi(-M24xAgW<`*9PJ6 zic$@L3AM%Lizr1A0Z@}wDtYd!PdgdaX7qe71z;$Bw8kNZ;cl9qm3Sn6rV2)Fx^f#s zg}|F6C+tHQD%wN5ALH@6%~(I?NNg0M9|QbDnW+W8aZ2UUS-oKDu9~+<_>_v$i}&C= z?@!TPp2O$LIW5D>uxhlbD}-1Fv{Z9^N3_ROi4Iv|%8xuQiaw75ukJ$%_Vn~<(@P%J ztpAh*9Qn}eT+X}TYyM-AmU}<{(je}Fay%=jHR@d$ahz#%P_=ldr9OaLA&_T^P+%wA zp6`%nE^=)vsCg>K_d52qTu+Yk#O3BPj|V%vaYJw4N}?^X2cKqSWLQ%t2OtK7ypR(x z@fRX-8W|Yu1n#s`V4R07W8OS;=WPoM?*PTzS^(ai8L5u^zYEI+2M2SMg1R=l9f^58 z;!kim;G2fuAgMYqB~9jAh?e-F4+9)1b;VBCXAtMY!-4a8JH1aO{wkILup-9kKAm2b zqgjm_1t=SfE}iVWr!@h;<>5qxbb+K?1U#<9!< zb$vJDu0w&P)CIy)E>k@wcUf&}yPQRdZbyDNMJ^90aYQQ}NEmqoT>kyE&Mz*z2z>D^ zwDig2hz}f3NoH6Gc1xwv->9}w%#=D?);rmZwCbzAfJa4#Gw3C8EjjX3U-qm_;3NaU zWIs~%!i^c&z@|jN&f@$}xwQU%OuWR<$C;;{vF<5T+^;fEc}PW4qagkg=yMsYOFqqZ zz%O!DjkmTl&Fru`e_&eZ)WM;m3rc@TofollU%+mTAx>WDlb!qR0Y9k2Nc20S#JSlb zXpSv^a+mDW9RKnGl|<`$SMTnI`&8c{GQRFUl+*(aCxVN<>i(NV|4uU4nXchujjzLD?DQ-Q!Exkr4dwv* z%dE6vePOtZN_UVQr31iO6Yt6Zl33SO_h>O8DOnCUe@>+-H{tAb%+>C;;Ta#gAsLQt zf1s43KztjKBcHq?W709_@bxXyszxsX7{)I563(t2wH;s_;J-?ek;14tH4|%B2Iez6 zoh?pbs7v+$*#B^lAFK4oBW@kzb0oHWcKYtFRLhx4j@4`_b- zApsH!sZ#=}G>$2itV_(8&iqTY?SywuehYA%#@)?U*Ba6gB-NN}5hhp>7nPEX7x3;8|~I8der^u~BCSFEk0vz|gCkN~FN zJ3Z6__f5{=v24$u>9Z}t>sX58$b{B{jO6^(Pl)(=b;MKdV^#<;Q&h@6c$9LV%9bkz zvAF=hijsWb?YBUZiR+H;PP_7I%$YGB0(;@DkG9W0_dtY{5#b-@gdaD8IKbel*B>@h zV0&vlQp(eWdsVa*D6kuSMLiVJPgqhQ>_)UGyrN=EA2F&CiK9lj-3GvY-q5IftI-*p znmJa4ucI@6oT`%lD*tZQ@R&Bx5WOl^t7z~_3`54Nu?%zUcw3ShmHuXWYF8i0vjHfT zsS+}3ZdwO5k^a#d?>YdQdeGF7vmRHaqo}(emNDsXN=9A1f^$5sNta#J;uO{dEQ=WJ zkPIobE@hmwb<65@gsb2=#B65IU2k4_d zejhUV7WZ*f|1y|j)YV*P)HU9{*{R zXkB1UYpgz|pTN5N{P*FiTVQp#*PaJ&FGiH0n9&HI-0o$cRDM)wuki(KLd>!5?k$h{ z9MdK!-@LXdNuL8GHNy+I`F<4`{B4C92u!LSlsL5*6qnWl0WB}Dk%sS=#tP8!9`zgu zL+_NQv`@LZbW(^N9GZ!4f`LJSkhl)`DhlUZSvbf^ z@OOaWC)RzK@4gBQ;WO+ZM{Ir+LKg~~!d3Dp7E5yt4f@yW`htBU@O{|O8VDgxlic|)-^zYIaH%Ov(aavG5&GNVvfQ$gQ5eRa@9d~pRTI`(Z!~H=pai-F6cv1a7CKs#`D>w2gkEiG z?aQjZ!g*j?$#&M-nfzgb^Ol$~^Ym3Mgf^GcR+9bu8`UktrOdHggaGe>FjtB57cbhc zcbFMI?mYhGm}yRh@RKJ`x^f0;?0u54*f9DzjV8IuYf48^-6xOOPMX&O2a?f#TZE(zE@X890EuJ@ zKqTlVC>*YlI`RfyL9!0Yx~-4PVxV*A1B|G}6p`Vk69~w+C(7PRu5(lvb`ZFMZI%dB zOL_uRGv{RHOQ58rq_+82%gfELBlc{K6BX?$=0;}*sE(pVP<4cTCe`(*jhV-1M<@H9 zSCeD#kAQFcM4wdu5^mUK9t6uu!^2bYv6rcGLGB)pVv3(Aq3Qzfx}2wCU3a-EeWA*_ zCkn%(5OxU{3#LkJL3$hPjC*1bk)}SmYwm_dbIL`KK_bFwU=W=zVtmi?=|Vz?L#}^o z8K@Tbu$B^iF+_f&zaVOurk)sWo0R0i<&fvEqouW$kIxKT^o6igI^sqNfJhC4o;P*^ z_~OGGg&`v>`h68wW4yfkMO_Kvh648t_k8>@vGFDk8bU)dL42N*FcnEoINKMK*rUWj;o}0`u?s8Do)?s7Iph=Lda1Y+@dN zm|uqLG}7&bpl9Upl*$6~HzhUNbQza_$+{LESTHsjrMbr=Clr>jf~gUS9wktl5L|XG z+#Z&emOc~$^UPaAW-3jqAZxqgd<$F3iH6je_;7JyVlFXu|KTV3a_ z9H9d>9Zq@vw@Po-M(6YHX+XOx0yvM-G>o{CH6k*l;xwPBdlqE!t!9H&!`e!wh8+4a zv4?zICEz|&F1cCMZZp5G@TL*0+ya9A=+aLAd|pLZSm$wse1cTF9ZD*sslH&uK_DiA zI@HYNA^~5sZU!0dfoOOWaWq9J?EFz^G<^B^DB+T0l z4k#yn3^}S6cX}^20b$h)@)iB!7g95Y;ZU9>&s?bp4@Es&dvsI%OF%^Gu8#?yg=gT3 zU-L7egwa1&dNZgZTeHfb{jY)A7=5)}805`SFx&vP?a^w`f#`c_OKFtMLONb!4d(3$ z{2i~J&FXv^9Mf%~m0M^edm$m@tcaL+hXr@!W7VmWn&twbYn^J5XjC3hC|xG`H(aqd ztpNTBG-`?^&{w?t^^O5VetaDocu%{sv zTA{cH%|NzM%p&-Dn8vM+tDbT!w&Gp)EY$>OJL&L4h_mH~Dl1 ztf;wXw~|ZxHqd&v;n4k3^N(R)ao5e8Hyhj@RUSAE5Y{^h2?;f}&(uEt{^Z`h@|q1G z|IvqyTV~W9V7X&do4}e>%?g)nkYa?E529XrSOrQutL838qSZU%Q`CAOagy)w9bJlmu-h%Q$ z6Qgq#e6+XYiFu`H~``i_unR85rw~w<@TOJ(qf8cRQw85 z<`NW(x6oi#Ov!vEBi#Gh=g(0m`dhKH-HwpL(xZ9EynHH}x&W zU!{n!58j>N;tB#0;COKq;IaDLR_|~%>GXUmbyw%RH?h>H(|Z%E-8K$fZK!mEl0Z$c zckK=g-@uAozGroCVMuADJq9Egl9T_6)Oa5AW{mwN|F#D%(VqmNtcuH{tT$5&M@NUo zyIZJ{7gMse&<8~undO-!b0uwDn!SYWH%EL`(DR+#zT4AkerfY4AA%qp8>g#Z&$;V& zfY}{jJs$dV{Ze2DXKZxtd!|`jHPLe-AS?SO4xNIwVRm8W+g27>cNHh+r#B#`Sv47c z@+DYi>DnK>!CF1wQ&jsU9AsHt-@XWbi8#6fHwk0-Nh*3IH>~4euVz3y^LHlNYoeBjkBrO7ncBr{T;D`W@(yQA3+vM|e{wRu4a)lEl`wF*3!d{Xx*4_BU~De# zc6qjfDkY2pxy}SIpofrx3$Mp~XMhX0!HdOkz~2vi`aJLe41bea zyzCi4g&+VSBh%&NLAhXce@)0bc>Z{IV(16Q5=NeOFF|nJRcY>6b8G7@xXZG({gNqc zf>KVeU*cq?oMr+?)ugnkWjTN1658{iX&5&iH(rz&271yB<9I+w+m<#z9?j7;H^Y}h z4wastEfDfi4GQISxLVv%BGm{>E2WYIKnH$>)v^s9+3d@TN7R%n}UILwrJ^{;h|I?9o zaX@8VFurcl@+s1vwj6P|B@+^=lqKrbmRN>!|D!{UjGi7;pPg`3x=m_b{;BUp`{5ff z+{u+jT3^+PvK>$ohYx4|+}sn0ho{Nfsw#f&B)6H*0^#S?A2Iv;i$PjOhxKIdy+k@m zBZWCfr$No6(-PfvS(D#^?dtwX#8U^ zl2C`52JSkOuEZf47Z>SFUm&$S0!jV?di1RecXNvz?ay3J;Vd1Udqs$5K z0B}XBgG^NTzdqzpyk{EqPw259lsRZ5~urVIWTXq_4Gx7Fkn zPq9FROJJERz5b@OTu5PWud(yg2yT-*qNHTb3miLaBAuXLITMb}7Ld@NPcJyP{CW93 zx&NnobT5U+D>RW@2M?A;UyRSXgtj|~g|<&9v8N{hekUf+sWoqEIsLXoQ?1=222^p^ z7vAk(g{byCblyE!{$6d@SWR`0nRKz`Wv=LNW$Q;P6Pvu3V`LC44M z*Ryn}g^xTxfbA(PxTAPczF&f)0Ed!tIQ6rffkKIzUox7oTmAVJw!8nCls|tt+k<{e zOIzQs^L3Wd3wOQTS+m)0Oj|)->aR;i{7(lvYK3Zm07nwmMR91eE<$@fOmQCd$w>N_ zcMFvxAYGT`%W4l*7zTkhc7|-rQl&7FJw!oH=wfwP=Vy0fe~se&xT%4|jT?uZ%#h2G zV+m~w1)*0PUC(17xzo^<5T2A}DdCyE`s2s-cbbrBh4UAL&RRxrXeQkOd%oPS@{i@V z?ULzwjsccgk&M3f3Iq2vn!w+rziWYZ9lzS2|L7)!9P^y3M~K0CYtsqL_)u&(XWBjN zFBhe}3mnXw*WEE#TxvArgxMR8onKC_ZUz>n319RHLbx2g_e4h<;?kTXNa)%tCFr$e z0ZUFN77=}*3mhRqor`nw6oAMn6)C{_d0OD5ns36@pa*0NY)e#fP=KuY$@@GWN#DDT+j*@F*T3on?q<>ljRqeyiW zxC-mdPd^z49ev!DGFSduUFLyJg{Fv&u>j)@d%-5Ze@1v&3t*4Q5n(HUQDyjC&dx-Q4UHaS z^sHcl>K&s)Hlx1=s+*O7VxpOjoo4Z?6pU1`;rq$3&K%H9*3&c$1#qe&C0XQ2o|NP{UV2TF^;e zAtkN3d{RQ<9Z+G-7qr*#0S@dZTFS4BD?LmEqu3i68Gl`)@(IY2kxst&wU6YFf~mF+ zGG%~O$mJWr&xMz_6M5h#;C#!1QqRW6XE4)Qker&zA4u%vqL7jtoW6N-O9XQXgQdYW zA#~62;X7Z6>e&E>j}_e6v#cdjNaO&pvJY-L$U`AS{!s9k+lWmUGn_F*DJuFb+696v zd1&QtWukwa`yvy;@Q*=EEZp9ibD`ZNFrlIV3HF`(e015ZaXq=viqVe~Ld;fRLj6f@ z1IRl7sh6$%cE@*FaaiEt51PdDBnWf}Z(3WtEIA5)#M=LM{_B98s2w@t!z#;i1tgU* zXJ z`=LWEL$iZj8qLnhbOb>UCj1cpTkSo5s%uODay_LmI?^C(GXNumd(zz$|M$+Ui@~qcfIY<$sH^qj* zuCxrm#?)Tx2%X9C9~P?YJhXrqeg!L}k<<4-zy}BcwgiDB*q_ve8@8J_gX^F@V=bA7 znqJQ3ywT~gK6tikrM^cPIU=_%5cAy9d1;ILYO`M}rz?Uan-r|Jz z!hP=b)w{<**_3Lkg{-!9g^J$*^e_dw^PU8b4|z^RaCg_z$!~O`G>(Vohg{?4)6vg8 zTy7nx3J)edu&}TYXT?WM`!D*w=qZ&e)&fBQ0HQCXA1g6+OxGp|S^dAN08oaNR8sne zqCYGkrqVD&CrKbzm|AF}3o?G)ARxQFUGIp8+v~KIln#OWo@$T3B^$>~oLHA2By)x; zdltdzMx~5N-bRGT9^wP>Nm~LvL({EK6z&6ZAk$&ReR#O9D-`$fQ1cj1!V)qLD1ii6 zi3p3Wy(Kb7R%&ns!&W+Gjl_Wz!cU#~*_qbj?fN~}0*C=gge?KZuf~Ppj$6GK&`I>8JpaeAI`~JBKC4gx63uOm=qe{=P2;(E41FLLTI{H#SSjUU$zN%d+(Vq5?GN%_9%?2RkCVGit&Iz zagUTyi=YKC@5W?zLKb#oO-(pP>9jH4i9mJK(#mfAEVq;m&&n~s<+XqQJQ*c#3a-U} zxR>>G;aa?VO0K4Hb{|BkYj=&Xyu=K$z137n{q|x7Q1QX6PbKlomncw?VQnQw>#ds- z>e1nQ7B&Jr;5t9J?F}sqx*5Mg74hL@GFk|P)=X-*qZV?Vza}dSmCtWqc;<`}{MOal z{O7aoPREOK6#{lLx67Z#wJ zfLgrrm>wBkcX96=ybk=Qx?vfRPI1flct0>FCpZoTO5?Y0G-u@^=#pZhUg2y-=x3=)bkOwGGJ z(m?dG+dw(US_>KK6&R49?ltn}=DQ;Q#Aqnb+HOka`087eyAIrOmn&ZY+RGL|_pgNp z2+CVQI{IpnM;8_f4U}E#&;43xVBn8Tvxl&@FPvJ>ph^Qu%A=K^7l;X`E3i)DQ4Dl1 z0xGs<8Xj8y@%ODCKOWc82Ekuq``C8f#*hS$c|szYuH{Uu(tG|qWR(BiObqoaX0B-F z7k3CtCV;aCI8!dJDU+p}g~Pa1{rQI;^pMBe3>;<1wPb!u3Cd=E)z>&_ z&J>5keM?50wqBt=0mseGpGplp4ukIl!QKIIJ;l$mVA60eh-`|vzRSaQycnHx|NS$K z1Czd%)a#^K2Lk71o*l#!S4-jYk5`|+?Rn>Tk=*_p}?JYfvD zOh#>v|4q$>1lI`EEP{0gY>yxtXXM{C9Bz9H1$PJeKDM)i>L1(Q9Yb)IeEyt+Xi^_( zp+sBS`{63Q=iReL-ZVQmkYtB-K#2jil-R6T`Xm%%S=0VC5Hjz!6Q1im2mgEvdwQOh zJ_J?rV7#a;IEAnW_X&Ex3m)hX=lY*@!)nz4i2_Z*q7^`HyO0cRn&rTaUV<{xT`B)X zT>*OzNQHMY`m=KR&PnJOxa@VKbda95x0?KAS^bSIq&y4^=PLmZCl)O%Ki~%uvLDLs zT-G_TU)AX{!q+uApHpMoB22|^m_liEe|JQUc+O-EfmE}N<3 z`F=&LiD_}0724do^iM&}B*Z#`J4J4_x%9H@UxMsi00oi=uWquMs6}iA95dgz&udxW zxzPU`iy|o#i|g_2tXcDGNhkm+xk(gpYO!~;v@%%V%0CCUEK71pT$Tk!X5_)Gd~IUywOZgkq>f87EJQ@B&_e_xD+{Xp%}ODyhK=I8e2JwDDg{`~>2E#s{k(sm z^WsPUTPCOK3Ov8dK7Khzv8qs%gd05w9Wx>V60Ev>m1gUc^Yi(M?Kzu4Slb~X>l=pg zx4%d)h1)$(0xcxGowt~kE4XCxg%az4x9L4lBQIp47QP-N)e%Q$s4&D@a0N58Ps4^e z`RP+nUqZqLO9FPAr5*ZcAl_$0x@7RH7LzJyA@@;N>fOf4{T{ZAhMY)JzxS zQK0)zB%13__mat`9XgOH3{N1pT0D74_J`}3wICPmZJ_D~fzK7g1QxfdWQ zAh$MQe4hMO|8@JZ(SOfeJ!*#J$0ZBqw<`Sb^JUAT4SRVXE^D{uc`9I9RH9k@3T?b5ec+)cE23FKfJ) z(Q}^aFlV}7l5fkEv=dV2)zo~UKGYf2zDmp;dU+leZ!GMWO~738rcXS8x0bgbJox&* zH=%f&&zeTFf^g4>ke_{?D>_tcbWaT>5P*-E*6K(E;w-n6FT zQkdd8B^Od@SAVtcO3KuGHl^~p4&G)pwqL4}9qvFg4waUzUDWeFKml86DTgi#SMJ_F zUQwCklaxQ(ojJfb%=nm9beO>4E_!j$u8nM-FwdYcug#(v1OkVU+jtt*JxkESo6<=; z268EhZKeN(UK0dzII>YVdhu}H4yoy5@0YJa{@_*NDDX(;_>d%5A`%U#lf`I63-%A- z$z%0aB_w($ZY>j}h2m%l>nqQl>r&ND!72Tc9ub|;6a_TM$sr^?j)|B}Vh{<8)W{EM+={cP*-!#KwhQ$3@zzD=&zfbsQ7?DN z`u*(=U}1QpoPlLbob+=B9D3H5)g7{Beeh7(|1g>K`g zi~GY1+8-j%FD|=39&MhTLDKvrrH;OkBPC%cZD%_ObRpX@IkVYfrTLz5C59R^-WnFJ zpSwlEoox1B(P0koqdwr##zml>3$n12|Bw|}jvuE^UAMH9a2qqX+7d>xVv^B(oo+od zMGkUi^QO!Z=0-*zZl2yQ(MU@2CAl*LY{#}QN6o*?21q0QF9xyX6O~;JZ?ELo zG5iR#Gvi2RH2R@A!OurjGtmb}p)l3E5<8hqB<~VAjQ5E2ufq@jOXQSyohNRd551S4 zR|p?Ef@Tuvhr5E%)M`DN<)Qf+(tQ26FoEV_=>#flZk0gH?`cZ>xdY%g?Yj8OX~;sG zllpzJt3!kV;0NE<<-4I3o?gqZU@JXef}SGOgpS|c#K#v3)&@wZr{G6#CW1qm0`Yw*-LlT;zyq#*URI<16DgYD0<B(ge2xnwEDnYAv3IRrxiG^;CBNynsES&r- zMqM;qMy9ctp5Yo0&Yi{fi@U{=A%GWM`O~apcN9w2@n1LgqYQ)WvVg+(UTnpWj7p1o zKU@tLe7Shs@p^v#+?Sl2x~cw}&~h5(Fa7Wo_>su_)vVAuh(dzf(y?i1voR1!>?&8{ zJhZj3v9ahZ9#$^M3|3#ww7p7IFR?;Rez<3CZ5WmIK0!At4gJ|9ElscQ$-Ucp!l|Hy zBy=MP>6X$A?ypa1k@wP0_^x;OXhR`h&PJmXps++vP7X-YOhx}T`f-L2g1^(-bv(v! z;N17_>+56HJDEh;9InLB7K+RQ3_Iex984$ZemyGnB9yz`eDfPvx$Sj{LjzRC^a>V$ zz#S>u9nF*`qh`XYCwhdTKKDKXVT{H7=2_UPLq<%0>iF|e@u3|5?KN>(6c0Vs8Nq{& zIgXSLa3^3!rhZmW4ev)TL7hsdXlm)eLXJNuAR(NJXWN&GU)PGx>QxCg z`~p&yPd8+F*juI?!X-RO8T zXv9X^X>h-Uy{CswZVfB0CkNBg*9KQoMCDrR?7Jzjf+qFFBE@pD10C(nAo@@}PcJcT z8E_c^5`_U#kx+w1Q8>{!d?aRSWzS^Pyg43J){$W5AaqbR60YHnP1(+VhyxU)L zrysKrgrJNxvCtHdMgj10ft3Fx2!Wn>&t1&vhMF0B=vu6pA$0!oAmOm1mj+bDf!_4B zqC>+N$E#?KLG*0dBkS4mx?=|E3w?~iO|YHTBmI6L$DnwVu42n8%O-Vpdd~@c9F4;} zIHm3aljD`c+;60G_Lm^*-Q*Y+%8mYz*}GW9!@ACGBcJYfl^lq0sFK6yktyPb0n8nC zn_iU(P%rt~LcQcZsJN=&TeWiqpg4y#Wu1{h8g#kl)_EnUrpM~kh$|H+b(Ldwzo`@U zEfD=a*qg_ho+e}K7l80gEXzGCR0O6!LGI@2YPqz8CO$Gd-6&doVdSrS`V|K>+i%Rf z{|am+X5p+w(=o*D*fe_XJS;8^O*JaU&8HN!KFI)&KfO=uRV@PWx zMk;;_<(4vAAq^sttexc22MW+aWt^`_+ypmj&hMFW$A@bUhHKt4KXVlRPUNQl71vLq zbZXQoD10#&qY0(l2doe9Up($SJ2vuO9aK6hwefW<&=|LG-xiBERgoAO8PR7GG8exw z@@`hnw%3{$J$$aGQdG1BXE^odeq^uzQAI^Te}2VwGlJW!WPD;Glsx~t`%T&N7tTBS z*pL`H&dC!Ikjj5yR4RL-xgtzlT-*Wr&Wjv@3Q*!IAwL_<^Z+3SRgh)B>N^eJ)cOhR zMrcPu^{ymlsNL3%pl{~V3RjPD{uP~SFJAIj(}>{Q_t`9LTFKTF_;pQ%nJf4}0j-*D zSR1*;@6FXYazA}|mKiDhO88Y!IWvrJKr*X3#C4#iD#tE- zq_he}mD+nS3)U90oFx?r-#F?#-HaugNb#1pE%K z!c?vBJ8WNYv)xi83<MJXn`U3Z?O~{i6QOGBj|SlPBv?BQ^<~d`#QKuw zYj!Z!v-%p=Sl=GD0A0`tWT)R2nqo;7f`L|Y-llx}c$r^XuPWE#F0di87LB+_&~#i# z)>V~d27aR?rz#+1*O7N~3#Kv(^fbfQ-#h~QCqu7TRk;>D`yhsOT8i%iv)i?@Px>b= zFZm?m2H=sd<6y{w`jYp^Y*K!`3~xMdrbYG$HM{A(=Oa(V+}Y5WOroh z(@&~PIl{@4v5JnIcx4xzW^|Us#{1eFo=dVwF&G&(XqD@L5O_}$NM~HB$Noh@7Qepx zpTVsgrb&V0tca21X`n&8R*gyi$O%swsF~R9h}CpHyEG`1qE#IbP(W2boW+hGpMYeP zGyjhWW+9&(t2XbjfwtO9%kjoJXY%gr+jFA18 z-)wp}`o{JV5FRS+4owO+AL_X=Ufi;h3Ha3UN+eT;m`7r=mu}z4B=tTqv{zLP57wW= zAV03;mVchoo=eJ znHzP~u72_yVm|7~WLa!%U!@0iWVR=xsgw`FeA(=pL^X2{^yYx)?y=0J;_KAc&Z6g| zg(_0d%=gB^K3HURJjw(?WrE;AQ{uxwIJP%6yX#}{C))(?CVuqo(L7T9t%Qppp;w@pxLYev*A4b z@}Fk|X^#$L8P@!!)qwD$Ju-hfXg7%PY?y}6l<8Es)-sZI3X zl~%owd)0@5=ZINmPrOdoGdEz;$$kZtFr=OWYO?ovUR$DB{WDR`k`vrYdSYqfRiJ}4DJK55j3 zXtBh)`HRF$XrrtF2o`_2l@+LYxd(7&&*{9MH0cHrNNYK&mbrprAew2W`1?-So&+<8 zO|l9-M&YL`3&f{6Ny3p7?rVAc`eSWEH=&nR-O2EYz`f*yyYql#l?tr_M$2Tk3j z6z3jspHfv-O;My8da0qw9FOAd07j@B4JpEkmYFfO@yOJ-(VAmzM!LtPi~(BDp)A50%|JR%MYz*hnK~S?MrUEESLaoQ|h9_zN6L{uy>zVs{qR|VLcpC4QbxImEi1iGS7%$B3#F| zS-H{8;~Y(ZBu$j7p(PrVkVuDuvw)(;U>o2M#QgMJ``Ge@5Jc2L6z~jQIgbK6(+nu_J-Ui{UEYS3dE2GvU&wNYGt* zwl@}kpNmf>ut5~;kBE(cY^NG-v+y*QrdYalkYFJ9b=qo+WVo3M)XI}%V=U%>6O7t^ zh;tpkt%8_s2$)^|joA(1Ryl_}9N(*$wLqui956u%LJDpF7(cmm4oGj{16FUe!v6qs zi+e+S$4?KnUfq#&j2VkFK2@c3+qV3Tm`?Ie4e`z`6he;7R)yq9r#a*{c6wkG;#sQpHDs zuDXNUIth^GnSF53T!z#lV`e|GH>iZ`aOc%D_Y9sqk|O+~;?M{C&kju;8-ftzIH2(& zmE7gW8lD(6>G!_^`2GF3?)#!i7b~G_#kE3!?u@~fz`vwr39A?A@2LaGnPJ?(Iy}~# z21f25*T;T(sP^>=6z80fdwcwm;XB#|{$(q@lbK1l0_(CBOfQ~kwGE1lI&KxP)$5`G zZm8(kFU)a_o@hw5uu|CDKbn8V<|uUlgPgl1ri+yqcY;p~uOb}GhYu3Ohv8sWslYQa z&HD6D-phYHN5NEE64Jjp+A4r``yV(SU$S!`=^l6TlwU(vleeQhr!}m5@o})*PVk;? zlFp;I765GxOw>(FGBNCB zp93>3F|H&UZnnk=eJMjd<%rMu5P0c zbI|u4F*ZL{`xujD=T$f%)wfP3?NC4VhcX9H)>(x+j;j2moxj^};vzsB{pr;Y77Zyt z&qnCX8k?~DNgaFUuj}18h%T(FHzd~Y`=Ea~(I3~5F1z;tH;v#tlsfy_3AVM#$zO;k z)}w2`)Q$c@L+W9IHg6NtP&;=_8P4fgtF(@Qqh7FjfU^np+uS-^Y?Y9jK0gCj+d7qKaR}Z~yMtXaKU7v^Sb{E=nqcjk$7_ zdDeGd`MO9M9^T;yrj%9d{`Iay53VvZMKwRF3@C;KRu(f%aWh1%9OElC?vty3gQH8y z*5nRv_`2B%ZSL1?T+>C@+30z+gErlFno+T#h80iuKbp^_8wH5_->3|7N+K`#a<+h| z;l;;neu^`GNBC7fp1?hmzFnbT(c$>IEBItI zUK0Ij&{ar(19y8)W;51q{*5z%LXnWL(#t!f=-SQP8pPHU9?3q(eTu;E1?|n3;FKlk zskyRJ$CsRPtj&8p?~e$aE6atu{&4ji`9_xisq@VuVa%f+A_0gMAuJ~m*9JF)>%FNY2aH}LlrUY{5{}X zf1>JU*Iuo{sBjp~yes7+7(B_6hHqyBxN6ox@M8xM&&0H}@guh^ITrEJz9~bME}MpK zeg*%Rn$8|lGD&y{9;Kw+;?f9y`#H#(~d^eI<-b_Dh6; z6GeFCqdW8`%FIfFl(0Y$8zWZ+>-6!@^boO-iF)@>lP^jcd-VkeR|6M#YbF|OFis&) z#u~crm`y`e5e*h+JHsdu^p>k9Q%WWo3>8K=QvQ-N(#l9;-#~NG6cMF>45*+^aZK%^ zb-bQ|pxab`;%G|@KCc=RZ@UqIyLJOaomu{}?DP{HTc5-BpAzEeR}oS!h?jx8ydN^U zMif%5KA;DGtuP^*Frp%~ven3;vKm9<20}?_uk%$z7O}Y zDR?t{HSV%?THtxYjNO!5fe5#BFwC9%X28~d748SJFi}J@z8-e(1nzRTLZ4wtccH>+A@tEWpGKkc5Y4*nBk8x*55QqNVYV`-#W(J#I+jIgk=ET zVAlHI9{{krrXsFP&AJ|TU0N}*JTT!9oLy*#en=1Z!+w$4+lc2d`sSN%BNcFChk~+q z+6kO4X1~kRGyN4WiW^1q9XXIdBa6LQ;8CC6Ioi@Ir zs+}KQ9~FWAxK1ZVyN`q1ufp^C-L*v6HSOOua}ma`-`#vZGUBalSK|EniUAn;T5IO- z)|Y1c0xnR&Kl!-#BQ{ru+~0;>hD1!{P~~J` zze>(&vTfgpI`t)t$8#m}k4Gr$YE0Et9;n<9X`9T{uBpPU+co4#HFf#C z_m%Aw9H}@&dTl;%INX}}AmWFkoTa~6cd8Ni2xjjYDZBov?)MN%5T}{&VDGu0ApZQ> zEjh`SB9?YeZQ>ud{&~G4i$+pY-0(DfM~$WT)Ce{KKEG+~1h+!FKK~>Ra;|&1UJ%;W)>|~lFq!m~7gAfw* zQ_h#42xK@1A#E81iO;OWQ5-S2RJ~(U3*#lMCFEVk@9=kTjpL?{907wKox5t;AfepZM%pow#M%>i=Qyy@Q(Ey0-Cij$Kr27?fr&6ayjx zQUZDqJ0e{$K~Rw{AT5-LiY*jDDS{M1=|y@AL_t762+~52^b%?y1QL>b`=+QzdCv2G zGrxJ~H}m-iGeB~ez4qE`uXU|!t(_SI_0Z6tUOOq-KWe4U9^nC2EQ_lh|EU%pbKx)! zBPKH(PJ>^5Di8B5eRt+-E+eyj0&DT~JVw_9xfd)q++H>O%1G5D6tIGHTbL+(M_-G1 zRyV9Jbh@)l)@8#-YQ(tJg-l@YX{ND`K4}Eyj0SSLG{)5@tyI--qVq#x-%812@?V0o zZxmAtaWUtJ)QH1Lz9qd%Ym~39AYyZ~&+brpsplYPQp%sKoP&HZJ*jyshg@ukT`PUB z)QMaZo>V~v7v7pK&_^CUuhm+OyVXkQin%PK$iB?EZ^3zbf0tvD3*^k)hNW49*I2LD z(e1;+7P09cw)L5fr`w$c%EK{)OKi)6G|?n>aq8~RUN$m@LmyRrmb0Dm^4Sa(&y+6Z zZNX+>vxasR#Wf5LI_;QX!(0YH1=>iQMktpDvh^B9k)8YSv>_05dIoU2bvf}>i(%hS$j6*SxJAM1{TZ17T>yD8 zKc`{7%WB6K;O1eh8=Ux#OM7A17RIai^Drm%m|ex=S;1P-wk{&;>>5$k_~cC~b3Wrw zB3;r&3V#X4Sy`73Uwrz11S79+`*gAzA>Cxyp036_RkPhC)Sj~M50Z?bqM3G9M#QlG zLm+aYX^puttOsM-AsY9u@K=8TkPd#@Y_YRP3<_)muHRefeiv5Vwom84ql=b#g>Hi% zH;(3(alJmg<#0mTNocslU8!>cEgJHv-@p6U-Y^Qa5SD$)Sb1@p&A{-RUZww9W$U&teTdnhE3eZz-tuU zJZSr1(RKZ%@85q>NCNL}Bf)!d0ZqHL3JBSb`-aP+E&n#b>p~UU@3Hc!vvJhitJ0A1W+GcniK(vz!Gi^3IfST3%xOI42*2~#>vS_W1#xH^Uf&YsDk7b1E;TUi2UVw#2xFD82@HV6vFj@ChPsZ*uU*RX42h`ZMl^Z zjyWPreZW*<&Z-$q;i@`gT$%Z_l89Buj^22%f*D-cm>zOIR8~5PS>!hW(sXK1I}7a# zm{h6BXZNucp39k>h@tA~5+Zv~+rY#1Je}{N5kevXa1UPTBNljSlejFHO2257pV;ypL-w&bXn`)Dmn2K+6vhg&q(`sv> zToNP#w+{fw6yP;d{>4tFV-w?kycBw+%>U5K8 z#P%?gYiw)*{Wjzm?A^tN2>b6sQ8;zs+ z44dm>#cqBMgcf)L3NP<}Sa%yrt`E^wCBwc_Q`$`|=alJw7AW!5_|ni~F91``^Fc?& zjvqg6;L<^C)JoLbj;B*CyGr}mDrQZo``UWz)Gm7U$*}bp@|7%u;-^x>iR@SY&)uQyV*B_MfHPWi#6UdXDFzck3m1%gT9%F;#z(v{k95!P zC3w?jD`c?21d=HsP|O9L8?OXCnr)(U;jAN19dz3weoA=tpGN!)X z=Pd3rZMXx&Vn`G1w9-A^vX?JQnm4C+y2uXnZ4h5e3$f~YTH1W6pIpu*)YWwT( z0RW=sjTRh0+76l4P*$~L(6|n&%8Obq3`&YU8&-nHSUc^+IbW6Q379Ps8*d^wADP(C zrjq(fqvc&Ro8{NIp(ZETPulFm0vi0_t+$IVj89=)?adB4OP>(8pn55TyeWbi#*UMk zG{nM6vkItf(_dFzgs&Mp(3LUDdbG6#<sI*&J9vy@6rcQ7HqX#kdX{y zZaAzXVN~^MnhJ*>jwL5PTTXipkM1vUVds&a-rsOMJWrcC>WE^T8t2$ht|i~~X-}tG z*sMb`li5NVd1~lQVgYkMLxFWV66A87B_%47otRJdq0T;YzE*@U=xf_I)x$%&9H?d~ zJ1){wUv3T(>7=M-$u0l3gZ;c?T{;Zr^KitX!}EO)sTOe4PA(5-g#-C!^_my}F z==gOm?AUs?S0nxIZ=X~-@fq5X2Qws`L!E_5gMTPKZ5eAvuTUoA>2xhck*i@Bc8p2iml zFoq`5<-ImTTV3g)Xt{Aynu|sCx%&n8SY=UirIDJ|_=a5%oj@*#ghf%FI!t#cU%uC7 z*COF+RYq`H-*&(=m}@dj%F5uHmmWXJH4jLu>jD5Xs;0p99&1=;3cX}O`9f5nzZ2{$ zt1c4@7F|XS;333^$NcJ;-O|>VTF!i4H7b=Q?j?UsbI7r=yUw8Ax6+C_gY9aF*L-7J zd4>CPI6L`po|IkFjf?2P3V*maIVo?KW|E#?!#)le(!pwWI4SS!V7qlqutD$Vm&R@V zC!`!p`HV_cmF3d*ax*9Qgz=d+Bpk}joAl){Xm8CKI40TdVDst@CAOFn>NK(mHal55 zklP*bmGk)Yz?b@Zt}|chsprC`PuzW@nmVimLv2>(9iKdXZ)VRakAoJ$>7>!SCu^BU zQ{OR0CUy^?tY!M&FMC=F-?o-5OYbiPY4zYdY%xASkAj7$4o@o}UP$NFQQ`HY$zU(p z21jnT=^fJB)G6PQVd)_=I%`_S+Ht5(hCl6QYL&k3NJrYRp^WOQi zskr_CzUP9NWjn5uB7|hs_?p9U{k{e+Gz1u#Cjlhh+lr?_7m;m|$4|ZOx&C@~nlWU5 zyNnLZW~mWk;)y|9mCW!~6<5mh8Y+*ZMFO`ssMJ!nVp1jFm?I|(`%2wb@dx@p&nura zuI=pala(p4wTq(mpf;#6SUwF}J3j(IyrmH_P3zJjK zff~bcBV3)EN1_Uuy*`D^=)U1|D0vxw5nW`$@d-nLCtCS~eglISf{zsoBvj_HGgq%~v>{iE!S&>Y`9p;jnQZ47SVL$u@TcWQ(_2 z$`8CS$dQ%B-|mQT_<%+FX3DWk5gyTUwxj9JLsrT0(+2nM+z8FBu^`Oi9LKeOF z2L34x^Yx^0j&p|$iG>ENgDr~GRRYcjk#vd{7yg|-@IS`$NXTtvt^EZ|N&w!gmc+Jf zD~@6ho6F{MPDKYNiAYDkVRb0;Ke4HjgD2$<22EmjB27@dxY>43i|)Az|6yw0DAX05Lv(x*#T; z;qQFr!y^PG#lWijlaCc6u?3HN?ZjLGcqUcT{V&^!<=Ori)%P+aYG`(6dAzBGeN_|c zEPn4!<2&qSoF8>B%8T#|Ij7v^`8id(q&NC=(zW_7@B)|JI`)ejx-sUEDDQoigiOmv zE?`30;}{pjR8yZZmr>X(no;w%V(shh_)d^9J!{sQ9UF1svd`>h#zYvqwb5xbfA`E= zDggO4W(`~jw{14}7R;0&PHm1DDPVTRdwDyJ`f?kNmk7iQzu5UpZ&-*>2a)D^qWWLT?d%D zB$mY$7Ual#InXX~e(e?HI z29J=wA>K5jN{{ib(ttZDeF0KKc(&_!q=55*t9Yxf5~=CxJ+;>U?&$k0ODA&dcxILb z+Zr3n7zI%r7YGW60eK^A=5t?{kFvmUPP26|h`X|8_!MZ1i)N`kZrw8g(ERbC`5Sk_ zAIyNrcIvO+^#pObWW+YHKt*<+d|#8*lvY6_`H4kSu0%Vl ze^$}*2ecgefp``}ndI$4bLp&DQH5YfkGmHJtZ8*%j@F7)oUGSE%>)OE8J@~5NOmW& zMkvz(G+c7>&6f>Co=JRHX7IU!J70AOu24E|w_F1m>2w10bPbcrf})``Z&$_K0v~sl zhq5(}63&)k&7eBt;*-nn2s(mY7hH?#@hV~A9?#ErihH<5pZDRqb>-z+_{Du z3k-fecNe2Fem7^vC3+s}Duz z%O&Mc(I*3qoV!V#fIb%DFW@@uBh@Q_4E5*H=_fesEfwOV3s^Ub8x%cU|MKEnBg}Kg z`vQi5uW??eC(C)lc3;Po%M_?T9Q5t!@^aB|p7h{+YYT+|T@Q%3T_ApaWiu7f*&pdG znCwM8!(Q7b16nHFxk>=RGQ42+E#WO0?B!ep*})uR>53EiitOuQbKIDAT7k?45D;?% zUO|1)-YR9;uBMcmmCbQvjZ6q`a`Mb-|0N&!gUq>wp~%qJZlR(2-S;Hmmb7vG@QsCC zW^q_U@m+&Cq4Vl z`Ip#)(jwAjpK*-35c0YzEzySP$16BSyaVz(pM<;Sc8+r3@pMYyF>{kEA=$HJhJ2tu zhFNjWpz2jftu?^w$^!m8iZ(5Ac(ID<#L*lOW<*Fi-;mGpwDfAR$jis+B=@+jqoWv) zgbXR&Wdq}Q@JTVTfK>^iS~chClLC*4uWsw*CK**@N<0RvsD5}*GQx2nzo!mzVa^Sr zh4jYKCJYI3p}xmvlG*YIdFnt~jWvox8NrB=>V9^=^Zhc;$AGSI0HhjxEH0ZP-wKJO z`+=F!U7uC;uQPKL%#32B-QuZc@9q9n#LyPmy5ASpJX1MJT3wMnk~R#$smM^OhZI8y zHIyXCY6D&v#G46ayfO+%(8asD@Vb6fEw+8chd%Ah&_xL~C0*G$L+%UVQRbhS^tEeq zuaDO%^&vQ4v`?9)g^|V^q^K{RpBvoP%2v>Go#C>gO5nYLhZ0R5$)~j&JeEo9?>jLA z&pUuRfBQ>uz&3oNesQ^9aXwA<=1jomy~7yF^Dre!#RS~BW1{mVK`OP|ql(@N>tZ0L zRnJ_NbHC}K45;4$?2!O5r-p>d7XrGt?8dNQOO{QFMSYyc_*jwm8*;qJy6e?!Fkgq) zd}0@!Lv07W4K9hzV(Pi@Ufmprb1miWv(B_7VhVQo&Q!ac8)26T{ z|A_RY8z0-2#fj-QwCYd_xC3LF8-fWr#_xP}vCr3cjOe>3CVCe*Y0Dm)5*P6z6YzJv zdfg&*^ZUX&3I$Ywt-#C?7=&ca<%IYUTf!JKJyxxYM$|*r2(M89o@~zE$E|JQSE}*N zu)pqP;lJMF=<@JpI)T}-2VTecBNA%U^8*(IW0N(fJ2=@g@-_{9@rfoe7M&lTSb?UH zv|Mw7VO6M{kSl|X`rEq7rOjUi#ZQo@uW*qd+q#ICL?RT~6!@`&h$a!;%#VMr;zJ^@ zUgrN4&R$Qvx@F7$^9QAol%B1CVI&lLZf%bu8{toPwiUCHsB#YV})AetnN(EeclG6A5MPBmVP@L?UD##J*i@}X3o^<;X0;M#uG zgTvL%bttD)4T7fY@3GD>c#_#J9s-C0gIXBhM5;sg7iFQr=kQh2bYhjrj63z|Dfg${ zuv!FI#&L-z*&_&c*N{Vlc$lgUgJM`fO;_t2wv@@Z$+)hx`7UDSMOJa8Bs-R9r=vM# zFH7GtiD|A4-2q{ECSDc(iMm~PmvNFac$R@(b=0Yy&(gJ)$4SnWRt`MO%WUj9SAIYf zXlQ#gNV=lP1}zIdzJ;-6?HaG0svq_(C+4$00*nX0m1s0$aQ96Imll$1)S2jnZJB-q zXdaC3CSa*V(=veDA~wcNEjEtohgfYe-uUkdxTwB^fH9ODoRIwis3L-$L->eAPS0|S z8T?&bW(VLXCJnJMjNKW~6=ce~lIWTXfO|B zI!TCaaQR+$pVs6GOVVtEeP;ygHu=+z)5i$$x+^mdMIkz``Nc(e+$?{#Wu)KenQ%-sZ_JM;22}) z)Y}661#NZ=zHz!FE*8Q_lnK+9aCD7i51&2CQDjNWc3zY`YP z(+zSL!|8_2$J$h{bv)#;c$zhfuSILVtq55`9Ce`ui(y!yU&Kt*uaNR@w~i+ZwF~%C zDv(pY)7Lv(8zyA)S^&T#;-9R&iNqY??35ufUF|dQ%TH93LcXJ1OU$U7+eUyluhw8J z<~;s$v5zfSEyN3&t@3MK+Paw6q*Dz`Jf4KuH^*kop)7519C!E*4FxJumIWLA1_|u+Z}u zvY<$VXn+E|GI3zX^x{H1cxcCuzIq$#KGrk|& z3Z^NvD{g_yuHXeOvXPa#_)8zH>U-eXp6i3cF@_eI0PIna0ZE9gt{AfTQmc4z7jXk+ zj{**c%8MJ#ddCiQw{!^tc?(}J zKJ5EbszK&_1(Wck$}5&Bd%vM|wvf@jgC|SAJ?Ow_0u-9*UjkBH<=67zAG7<@`bqZ$ z@7S^~!)w90a)g-Y6{n>*f0n@ev5oz}D#S=fmtNd5CBVPYcG6(D_pQ~yJ$qt`dlWQ) z>MAf}op}ZWT8r~|F!9T` z*KtCXZd=^i4#){j1=s`cgSMlPlmOZ~f*=2g9M-*1D66hYkGj z!0(31trrSzOTQo&r{E)L$&~Q7)ZVC@ zY0hisQo9S95^inq@@~`&`=96M`$K`ELC#Xro@COzTD^Y;(doD6FI!BNF22q3hi?_q zKxTQfa`fE46#jE5*LMY7tq#Vd^(O62YbzV|Wp|zd6rmKW+Nj3t*OOW$ zYwI_amG8>F5G1whl-J;CZ`{qwpwseS{U5c&sO~ZB{CH*{c5k2GD-_ZK_)J(a!_a9B z9F^Qq990=SVT~5MQT~FzFI7Y{@k(2yY&!M{!1i2PvW*SRwDGU=q`EPc*pf%@0ez(k z`k_WxILd_)=AuHM9cPodU{K*X{x$+VxA8Y9b)yiM%wUCLVl62b%aTvMyBW)iF^F)rgyeoT~aVik2aL_|u0)vKq1{<_y~;u^}S5kY6CjuWv% znmr;{;pIxH0axKrNj&e>Y1!dv{;+83Y=mBnT@Ez~M&<|;C#mP1ypP*YAaYDZjLQ_o zs73;|;*)_5lrX#~yynB8;Rjs*vY3GSlVWfHPHx}$&0krz3zWZOC@;>4nf4}hzE<8^ zI2*5-1QECVUX@>3$?U6Y5jkFJ7uA=h|ACnjJ9cBaW45gqACFC6-LlBBEQosmJm#yO{!=98Gk&=<~{dxAY`8Y2NAe>=;$vx4!jb?u9#EGMBFX)!)s}Ig%jASSMp#` zI|LdF0spPb8KQgv)|gi;@Psz!*`eD-`bpEw68||x+=*4d0Fn)0MX9o+OuiH!zOiJMs3QeP#~(vK>>DU&C84F}D}l zcfB)cALj;rq}K$jS4obRUXuyBAe=aCJZ|WS4zVLnuDbkO9Q7=cTzm=Qoz^gtzqLns z51Di??b~UX%tY$F{BTUemt*kMvl^C0NOk+N%fV!YH2A}^BM&560$~!ybUh!kqt65g z01X1=N0Aad>Nx$dEcp4&lgZL{E{Wi^H^=3-<6_Kfi9wo-KVri%s68eNJq4Zt%ZiAv zd!IgmR_{vstJ1TjhrR4g;^d03Bul`)UVYR^t);yj7o!}XZeBbA#Bn(sd3FhXpYz{aXosp> z5iJeq56Ef+`BpGY=WQIIOvmM2kFB%~*QrKSY-}(C1k^VJHcCl-fP^2`Mbuq35g{4U zPSkLHmpfJ=5Ijp!9yMtpuB98P#bg>#=zB6ti=d=St@g64{ z^EkG*N!{p~u=r4!5H!Pvq}Y%m3?}3S_BuQm*n@Ii%>sVEiMzmwnc3JN96UEM*N~HE z)YBB>^DheZqihZeX{NX0Hnt{k7hT~>f@NH%CrQHT$Kt>#bP@jNGwC(N$mPtmSaVCi zK7}+#Rl;e_%n$_NHeKGQdm*&1_|o#AxewW;sv<{$B@ic39~uBD8u9agt6;C()DP;S zaF0c;I^S@M?UrtT-1yGbB|#@Iv-@j{78hG2R=}fha-cRM((n#C=0=6T66Mb<*;e0) zvsKBA%o`KE+Q`*r-95*QYu<26TIivVdnY6L$dYEKA$tIP&;u8*>1qihQzxHLHo`r5 zh})m&92(KgXn%9Fiz{Wj~xd~=z|Ai>7P}FsUxaNZ-0$dMVb)}@- z?G>yn*h4K!-b#eva5iWGIoJ;M0-(+A-gC$ECdh#aCk(iv%yfm3xHqRNJ|tV@_qA0( ztxL8$#|SDPg~x^0seQ}%^j0hq?tDz znTTkKNXGXnp-yBF1E6;_(e+Cnmx|MSQ;=G!N_C`~4WqxPMHbv3V(B<^rd@u2tSTv$ ztmK01NdzqKeqrZOJ8N%3Et*$D9-UFqt7IN5Z2B21e73&DVb0DZma6K!h|4NtQw^?k zP-8-K-b}g5ovp^xnc9nJy8ip+pjN?NAX}!NbaiCL{@{I<9HHn}3g!E12oqp(OD&u8 z9oqi_xm-?5zWjeJiwIW*F2<=IvxO7jHr~1f934fe;9o%*b--FkE{~W;C5~PIUo(DT zw^XycZ_bGVC%891_qIjn?>-cFbC-K5{^XW!yd~f!7Fk+SH&ELWU4%Y6_wh;{{R#id z6oaN3Mftd*Utj0D>$p?26&T7#jMZd;1)om_JhyfIlP$j_jMLNKgDPjkM=#TKb2%^0 zlgGMs^oxKhps8`PVG&TJ?6>#-<(Kdk;6b{#t6wb$zZxQjCd#>1{X#=~rtB758&wLj z5)%$4Rr79RI_`a(UxguXend!|e2X5{599d$=$%k$=FASx#m>L!pq>W9vo7`UFQ_OG z)91z%G26k(Z(?%mfWLFBjnW3P8yk(`|K*Zz4k7qOv>!a^{>72I^Ddu49+d83$SJTF z=j@v+xNMK;oHcOmd_UBRocmaTXRR65JjJ>xwGns2hGz;H@XJ--E(gDG--5i^`H~W7 z)Cw=bpte8W{Y!8Mh?)B@2Jv>4s@!U34b2}snI5m8rKOdC%s6t)yty%HIen2Av!oo~ z{{bxp(RXc&PH;JxxVh@LpT8b-NHo(%&m&B9*C~4si(ZR`vbc25_YbLLgUTR@FZCH2 z=JbTfA4l@@O;)cf012?K!7>YDnJbtzcU@KO^0VXqe&?Dy9)J)53ORuyt{iy0;iSF; z$N4b%Jy91!G{2OA0?DJjqd7)OE@?uC!Rf5p%;_$!JeRL-D^hIZMXgtOto_S&ty#;q zFB!Jy%$jl1fD~1qlhOOHFSqe$GA(@{h#27VJd48lQ6UucPcOG?F-Hy+FrEu~F>{Ih z0;PPkxTo}+TC=rJ*l_;j&68~AXtLn!VD=^JwEW?PqYr)&$v3@Tmkwm3z|n$OnCI~G zz;vwpd+FZmB0Jx8dC3%m!YQp+17DN{xJJ=^ErNr=Iw>aggATR9DzS|{y@haZl+*C2 z(BK@u_?K1sj|Dsf&;bIQTl(buOy~zf(NWr;^-DIYZ9bt-={{uj)oqp5q-|e_-BTL^ z^RkkQxR6D5N7VFZBmAY5ih9726Uk!5Mj%)GqPRc5$}_Tf- zvkied3oJSAZ*TK|Cji|wvNLC#J|4~+xspLBEuj02(~0<~!CbUZ035|HKp%UVa_dV( zTyXoHE^3MeGdGT`{;#%uZaewE)Bm&jll@<;rmrb~jPde{W4aETdI6>i#@n{~LjOlEkq8l`cXV|N&+iXz*Pv=*kCkd#OUVy(lnSvA-QqMP zhQCP)qqRnMbw4L<4G9U6XsNq04oIGx`$A}y+PP*r_4|2_nLQ4+$d%8{&5cXaTEz4J zvn@)02(}zkkLPKN3(^N#kUP#_U2;L1ub65l$BLOwc}Xx3Aek;T)rj#h^m0_JJSL|l zJN@;f)p#-faYb@=oRMuYg%6V>;!m93eD`U||3Eog0kqj?ck31Ryb%%AgIpN$r$N|K zMrC-fsKLiiQeW>b1DV)E`F2hq(=f-eFJQ<@^i~D))J9*xdU>g)ShUf#)B97h`$C-{ zE`@|e-tZKX_B;VMTHw^#@kn4WEo9|?Q`)-; z%q^1(o4N@im|u#1;*wj;ilTK(}~SBU;?2p}wNQeD)9xh_K27V*&U z9uc&rMBvq+G~8*FnjR=`SaO%z)9y6lrOfZ*@P5j&^uG@4{a45*D9G8fuxQMolv%I+ zA8o&+%)p}7*IxTMnD!=6#vZB0$g~@7&Zf2J8TOQOUHBgzt$7kcjVBGiE}oxq479?t zO#72~bt!=~pVF^+Qzm9PG9uGNT7LlU-h8{9)#z~v|~vacLv zzQvONQLt_e(5UjoY)a<8qJV{*$LT+g|Kjz`>CN@6+|t(9&j%lq+pqF+^Oh2o$5mBU zV!4rf)()`yn`^j&k6AvYl8MDZr2^i5@tPllButNt=!h>Ru|;K>dv16=7_F|$@{k1w zquLs%tBBJ7@P?`i_Al-}>En-`f|2gE9uE!9Z=hX@xptZIlBgF4Z$q+_`F zB}n0>K;pnMETuthes*>q05X!^zB>As$Zk$O6+sqN;QH-H{~B9Cx0eQAB#eKRl9<1( zz5~!}PJ&haudQ$(sZ2s{Y{0W6SZ4oJ*>D#qp>C8weK9`=pP+7T7grV<|A!d_>a=Qm zYsZoj`a!-w=drj$|8iNuJa92^V{NpG$Q{?eA#j{No&mTP<(oZD*j}?8C;8Gp92`oo z^%ArD95{Ii$_<*eu`7rwg9 zl$dk@f?q60ECvpN27ucjst441;0#EPdu$i4snyP)kAtXB3H);ffRHxvPcKsjMlCg;fN%d&I^+)<5;r0qpH)+iiU0%aaZ{fJT2=a4*8N|Mfa_rw$nJclXo_ttK*UrfxXZ?*t}V73nA9760aTtr1n!0EhIzAGIIkRFF{7xQd5@-LbqU$kbRMP8ub znlO+T2#thV5xgxr(2p8?y$FMF-*y8G`RCE+pX!JkaS;sv-t`$Dw~?aqSBIP>XiFO= zW0}>@+wwBBYQCdHFhI@^-&sWBuK^@JXKnnbl#}N9mqE@?il$l$3$a@99Bx!xYcGK$ zF6U?NuBE?-!mCA{e*)@XLPAe%rl4>RXa4i7<3Zzt;~d_Ry=dP0{{A4CXZb#X9fxG` z{htTG1V)UziI^E9k5(B0X-Yax4Fw*zJ)66Xkf#R9nyuNh5uNC91prNXx=fjh?zq!C z3(EeFy280*9OqO3R2P3b-rTFC8C!0*OadCI$SfCln4J@yZV z(O~kD*)E*E~ zZe_Kx+!Ixq@!|9ng$oP}MRvqn%hm#Ko-U6&}OMkeQ$iJmIq6FvS%>vVx_; zrk-=DkgK582JZ?hS+6)8qF$}bN?q>CTXUf#kODY#3I4Vr7rFWRWsFU7Q9uy3_ zvD0>ICHDBc@}SIyu7ir~)DCjSE#zc*ExCLa8U}LJy8u7OP}s>$w?^FK4E!AD6sFTL zD;#q(?{y&T9_!^Jp<71xzpJSHoTR|7Ra}_6ZL?iT%peF+-w`Q8R>I@GV!62xz?QAQx9bR(<&p zOw~vAj4uk6*qbYu70E!?>aQhSF-EH2C{vdPnS4dULjET`~0pNI>=9`i7zVLP_$GA~V9c7Uu-#jcPn&_FFT9e>xp* z^yNWZlgXnoSN@yN_2*xXfUg1;t<-@9??@YpXUHA(((`}+;GaR>Q62bp@)^Vb3R2yI z!17EUYrcgtn1@#Y$s$Ji{rHk$hv-q@>7DEviCJ*5+}MQn{E|kW9``>H!xnihGMRa$ zQ+IeiWakTu7ab|m7dfGj`k3>K_5HF*vW!uIl&Zl2&>^b>h^WLqOkf_Z{ zXCs_X|9xWX-iXtRW>bGEuH!cfxN#HabW<~>EidKZ8`cJR8=u@6n1qTW} zRTWz}fg!veT&K&2e7>aHtneC)>%gR`q+km^sz^u0{Os@e4I5vUr&%ULC z-n$CCVEk6CA%6cQSXuoB95#d~j^SSDkX~&9u1nmIT()GICj1f@*DlYMORDJ)Z(l79 z?h?Y0vu0r_q=2a^^}0K;*-hh& zv$+|Ga4@I6c$5Yb0TbA^)I- zLx}fZ7JC8gRM@Em=IPL>;=uWDxM_lQYia9n;g{yDb3=6pW8^SC`h6mo9)MdFI7?j$wX)Y-Qv5$W>bHsgZDN0$*xx4h|NkcTf6c6l##Up{ z^h;9C4*Pj}>uO)iyUt31lNBBG8&!0pLNhpz^1d(W*rQxH`MR&qbxdE}%-o#s{mTPk z27=-*L*!~kr@P0WzndAmhLM@N|MF$gwVS<{Fx;F1@@w;_qbTB%k}U#f;cviMvHg~% zu4BUR4YWsJDxN5N^HZ}75zk=MJv-rpEoE4`T?6>Z-;)TVG816b;U9m{%2(in3?1;j zAAhJ`L!IapEq4~UFj)@Jm}C}y^4fjUnn>_W_K}`ZSiNu}tR81KbksD z)0>f&g=>se9k!wnRUf4h+|FAjXXX>uPV=5_T3vxny*%Se*=>2*PKCuX5Mnsj-E1nN z<%i*7RD>5^HGfYVs*Wbp8bdxvR`NR?9RjOGF<#B2ZQn<8yyB?Z^Y&OZ(YEdn<+q*# z#*V6M%#@9YsxqP`vgyb=1xE9(q{x-STj`wW#zoH0P~Q7DC)isiN{c$rVO2`Mux;JV&R_i@~R#lFiyIjUY;ZJ1Y%O_4R^c{I^E=ojD7Fx+D3E&b^f4MxoXkC6e7 zIgCdp7-5LIvFry<&TnuroPuCN-iE^ZQW+ynZZzXI)CAnjhAOUIp7w#|VNaxu*a<2(Q|whw)*dzl7sH4FYEM+e!K1il)Am-cxD= zmroE?#VF7Lk#E2Lx!{a_)d$YWXjocdWn0rR@_HwC)(vnfUin$ikpu8kc`urR?{K#YL&5i z@+{g19F4hl!(niCCs(N|qr3Q^pEaXfNjh3JUr*Wd@*zCIR^2haBQ%G)`}GN4M={<+ zlNL%u5V5MAVi0{QqqH*D>vFZ;KA=KR8}vz&6A_9lDovk|><`@GlCoiy!} zNVDuRI+`3)qn_ghiS926M;{KYw|ta{%|rzwN3r*+#*sSE!H@CFwSfBV7z%cUq~f7H zllWp{_bEji$DEDbN?eH_3UU}0;3z`{!%Ty2@YZ5~epy8M8#&$1xU=B6u@esC#WO>7 zYS&BzALQ91){)6sDwtn1$H`9)lXRwX6bzoAAHplZm)9Ye_+UVDe~e5-~*4nEW?w5d@$tF zOjC0WYe1_GDh1e@w4+mkn9RoQ<-V!A^pXshnAj@!NDs>#0REE2U_38B4( ze;olXz9tCHeFu@)=!QU9 zQ#76A#$1(RHP~GyYBPPCtuATNy3ShwF=$!pd|Qf#SZ3zjg5VUecvxSbF-%r;9(9oa{BxG(@!?8)xFl!d=>)ZLUjq2jK21Kr;e%+nU>%$mh524x2gkV6`;@wk|Yr%rYrj1jt> zXCD3?^2G*#$z1RwAB0=)eQTfXC3rz1)ex2(dFn)6a|;-Q(E}*ty^ummT6FZ?dP7P+N}Gn=TnSEd#%q zN?0E{=#7}6b2xtSu79%%+ilQAru1K-JrG0Y$yNH=)Qmr>W_kvqcW#L3_Yn9GkTYnxHCS zk%u$x?kv$Hy`0S!q>Ito%nTxO*xTIHR0uawl?Q#Nx3910r8oiqSbrXy^Oj3s&GaaR zMNpPGs=iFX+{N{)sk`du$DBWQ`!3bsZe-0V5Jl^OzqsxLgI3}0}Zj;)g1E+V+FtDxYapaV1-TfyM z#~*L7c>;pg2v)rQ4_F*^P-pJ9R6`WwomoIa*Q6>u-~%hUqHVrOLVZ zc|;CEb7!aqa*RCWag^v`_+Y6fG{182svESnv}L0JcssaoKNV#6h4K;OW`^nr(79s| zN_vWWhHUP0Zk}n?FKUnW1Mh)TV1~}4ajQt)XkVAmsfs+OLOI!Hw5os_xG$M+rr9+4 zI@@K6lgq-q3@aFv!x(vx6nQg^j%RX5^9iK zJSO14Mej4z24J1z>#yMl{fihq#qUnf3^U6)+*v(_?@)38?QCL}W9fT#$X@Q~4OjL{ z?0|qNqzdvy){c>;bOr}N*gkX)&*^Ey4l^GZ1Rn%Z?eo(qyR~lLE_1POB8HJ;ARs#y zOyzEYv{W!-Ih9}m%=LB3!yY~WpHNmRlwVvW@*s0gLg=}(<^j63k`;3{ zWJj9{(!=ghn$~N~_P1YLwpw_BKP1^7R*{vqXCcGt5Ys!s%pW1aXTWrXL3kV`VsG7J z3yQ(=vt?Jo>lX<)gLyjgPA99k2cVm&U;JP<-cp!T5VqNu$cgsG#lQ;yfQd@BmnW{h;vRvszPeT^~B<92*q zjlbh?XR)8mkS7HC?|H;&qH;_^f{WkG;^8Vz{&laM!dAS%&g~p`jZ}kq)mB50t$H9&v)UjS%qP`XxuyY5FvVn>J$k;88Fq0|5V@ z!=%0l6lzZOPYt&~w#DnZg|aw)I1Gtw#bYo4%>yO@u^bqL5L}FDz(#nh-Fa1R7(7#0(-?wh0_=87QT3|@^+P%a-9Wv7as%%zyxlND$6B_*UKSJ zA&0!uu{4;IMt>OI%NKS71rA##0jMrxC46wL zBk+>1=WkhK#QwZ>-li)lGL_H+5d5%!LT{>pz3Mw;9jzh}7>}b-)QF=RNs&}&CLV#` z>pyuNxX87yIuR@pp{)J4XB+BmSm%{btcF#oqhPqW#UH{mr8NuPoZ%(A)o3aRPwe zR6YxEV&Nk45`jTMYsqACM~P?fvi)lLi3uVl1PTQpIFdvJbtweL(}|~p$te%<*WRV4 zb8p+Wjb4;(-D8sN!mxvIHX_m~1Mwg+F>$O)W^@YBAp*m~IE|`=sgF`}Gq)urf8$r} z41j4RKWNDssapzt%gGr!Zjz%&R0WXL2mUH70CY_Dy(Y)l0K%0SM1_c$B%7(10(hOGB>1z93mNqpc(ujN-&MEZ6a~51B)w2C;1BZYBeJrvcjpTI;k{ z(IPkF@y}pAY)KFrwwq)}Kw9B!_y6Z+|*#SuuwoE`;*fYYDKo!)U%d?Z;|sZk_Mz zc|pW>0Me1ze&3n>jy{ry@($1*x|~Jr-48E+XmuUoDCYaN?jm557+;U>;M7FrbQU-P zbR(pUgz7GEI1+O2eiWBQId;>UOYcm7K-*T|u*jMVSxa4elm`Ah-+vIk{|`@NpcRvA zt%4?$ietIx6<9I&?3xP{gTJZ+L7}UU%iTNsIyj&0SFdgb2obqB@NaIDvvP1}pTB&EAu9R6YJqrxXmnY4wUqjiCh+5_NaZ3HEDv z==oduk0E$y6$+oZST(>n9A1rKKjyL+smj!`Y>cMDzwE!7{WAa0v{z%2B7&32VOcqn z`kNWBpdKY=BS63GAf$3oz!`8v4TGHl{Y)|qGh-<3iJ3Wxti!ZXz3yOCNpRHTJ@9gq z4Qw|pMH`)*jX_z+gSQUzTwMe!0dCb!52t;?(mNRd>Q+ALaGeDPB6d(62cblg*u;mr z-E;6;-DqBq(v0>7+UGu{D=SPIupN*6NdB;%#D`8%p|G5L;IL~k-oiovgPs;oQAD2K zD>(G^c-*rn^^<8VSDyx3b&LGdF&mYUFVHhEJ71Xl(JegP#eYW>ZkXr3aevyhejd^q z=mQKb-`AgQ&q>1#wjS-fTQc+vW_Wx5(Vme!F1pG_r*_^w0NO&(X!G5~HtxK=^RF!& z%>TpQdj~bObq(W+T~urcN>xx)gh&lY3CI;xno4hpN|WBCmxzkqD@{c}I*JO?dk;ZS zklqPBBAo!Cg+M}*Z%4taSDxp-znR}R^ZoJ8h?AV0bM{_quf6(OTb-Q=f?8~C%TiHQ z_3JI@tR%3dY%z|Sv@x|2@(F8--J8>mwl1PLtvKQzI8Ge?8r@J;K*@PVQO@P^n(d%R z4Z_2Y#QE6!cyjAxz!?kdumb}DRC0%or(L-;xx2^X;D9%gpB^V5+KPJm^ulnc`=dB$ zJ~V*_GO!fZ({xd=+4XGPx25pKbUZyn%z-0M;QCBK>FF`iNBo`_WM?!2_hY zfiDPKRAC(0|8b4p#M>^|!l(T(TN-E$74~w~0Ini_cJesniAn7={;P9)EHjC3RW_~k zG?4_E6nn{H&`r)gLs7oYmrb+?Cn*qRZ9snM7I&d%cdU1~3x%0m8@CesQINBZWt;5D z=9QFB;+NiI18e;Uc3jp;50Avi-vvIa&?skY%(AoQZFh$yYdqpw6b>zMgT#Ir|DdDO z-{;O*SSDQa6ppJosq`|)?CSKV)+Nn9SXp^Ro*BmY6LXsO$|gxSQ6#tvfQRU6eW(9b z!!0rN3|7`n$8v6=SRaVIvY`Hv50CDilT9PszTdSlT9w9vNjG!e>Kd!gJ)iIf1M~fN#o)L+nmsGqSmIz3a(M?6y;T#ootJ)B(pE0F)lc1)sjt>!k8AJjD#Wr;X$m|1#wS1GkB zYH;y=+ogs)BIx9CJT-kF)w^`dx`y>jZs|{zjhlQ$=~b9VSrXQ(FwcQ;K79~dYoGIL z5#oh!&^5- zP2^8A`GMrSYBzm+jz`02f5}7;dr10jvRpwRP-fNbb_>MF_u4|Ceb#eFu1?=+JG=?^osg z!9o>C6u#RC*>YpsM#oqxRu61W5crNUxu^*>HF$ZvWjc9?78$hYsLqb zSAUtxI>B@upCz%`J!(r-!*^*+4}S7zshFH>u-q~6?-Eb+DtK{1g=yv*G;E;uqTu+G z(e+pV;;!<&?Ypw#XHQ+_dmO%bXmY-q=B`1*NQZ{|&vzR>>AQL8FK_-qp7alL{PZ;!PCd1Drr#T|IbkE?tZW-TvZVHf03Fzqs2(Fo zdB_5R?@UR7DibjqH%a{&lXubqrHxiKe*Vrad>?^`vE7|7dp6c{nAb_|v~&9!sl6pl zuGcmEycoY?TND9swqSf`t$CnaCBPZ<+|5VIztH2_ynKyzu5+|Qaf9ENX7r=ag-*P!n%)nps)HmV*EtP0;52)8hrQZ})5zTnUtgL4@31^V-t3ZJLDf>r@2742b76Do z1W@wTLVS$?w$Op$zWivzCw*lOyHNt6l@l6?jB#^obat!cUz-`o#d`zJ(#xVDvc{Yb zvVc&$+r2#-_sjJ>N0&Wx?)=%@Xl>7!M8*8P(i^UhoF|>ip!sHNoQ3x+pt6>7)^#2D z*Y#PtzD{M0F>4EBW{c+d_fbmdqezvRt#KM&di#eD@vQ4775rnAD>q$S#G@sIxPUBW zZanARU#=(4CA){K)K#*t$dj+HI8V0O?7@Z<@bgse6adn8sm4sLmB4QWli*`Ltgv3; z_X|ChbMCHZmtDdjMo&GUr=*TE~~s+ zc1d-Rt!&WR;jvM!wXN(<1gRDOC@-(WNZMcF-}RMtu+tKc92i=gm_7v5$$~!EmA7nX z#x)+lf4`s8gm$Ct0hwvLVRrxV#bZ3H?69Sa5~4C~u!a5-*UF*lU~;bzmx?;qZcs0U zXL;V zFXRw)$!rk|il=t|Ry-943aDbhpApC@$^uy$J-=pYfRZYZ83oeo%6{A!O87d&g_Job zDA)nhtKmT}mmqdxbkb#}1t3>n2acbDD8|3&(>e*cDmxPE0_s2|*QzcXDIhm+;F)SM zdfeNhMe!mMlLH(u)AU;0z4Sz}(zk@yr5#BiN$dLAktN_;lnk6SMSXJu5MD>OCBeV_ zKm?P)Yb2{dK%VctwAWKgxxp>8PQa)u~n{!#{^beeJ8jbpN=)#w<7j&DM_UXKg zOiTxY9S4&q5x`hnsk@klza@ast1M|R@7-D7VN;KPuAxLZvic75!uSL-j* zMx4wm`=$($(&2(e`=YwT54@Qbfl9H3H3<+OXJ=&{7(mhyyT&=i>WYtMG z+y$H@6ZEoWkYKj-I5RJgdBA7Vhd9$B#zBRf;`@T6csEw7@GBf!x1tbHu3V@=8)}dIBgD{+}lN6+3+Mjkl=Ns9!^^1)Hd^D$+nI z>NiJZ#*cKr&;DmKazQ~P=<^61!eOoCTnLfo+dl9aaxxeG@iWM=dys)xSBXGo&$V$h z^5br(tGU#270Aar8~I;z{fJd>K&h@xIEl**IA*VnUN{xUQpAu4N^{T6F>S5!@2f*C z?sLB$c@`r?AlzPND&0+SI)1LNLsscU#!RXf?o9L zpwYEr#FO6&7M(f7#;-f4=*4Zhg1d0G0M4rkJgmuP6*rMTQD<)|?)0{X2Q6&qlaMNM zfR!o?cr1hcv4#2H>QWaZQU=A{h0fjZk#fbRHKRr00rXtU3(^9y)cuR5SshnI>H?~jtocehXWjttzp-fVcR&EtBcrHK;m)8()mQXz22 zVbSm>x32TKU*{EZM^Ybj?56Og$lwMqB!jwL1gPmR+r-0_``q&py)GKfYuK6gE!EQc z?l)3IUvYPsY@e8|VzV1%TJ4D)5c`T)UO5Bm{X?jjtdICM+Ey93aukDC)&W68u zSLfpME7Q>(?r&12Q|o>pAzl)qS*ip-+^b?)W2AIu zG478}yI{KeoxIAqF4FfY-n{V&i4PV6vWQ7T12w1OM`mLioO#T(Z_kWgTN`cP6ztDH zdU3Ca$YXM1vHOCV+v>8zPc^`cv$u2`b|W-aBz;!hBs>=HASGOFvHRGFcp?aS=^7e( z$v#ZuyEQ@z9P53?#UXQnC5Q{w!u6?&o`2r|Ew_325@qL}u}{+=|GdusM*RHi!)>3{ z=tAeeEG8yoORbM3QLw54yNJ!r8o1E%)y?l?3tjs;?B z+)pieSvtNW{o@wQ^^;F`7k~C=czLkoF~;AMjabnyb%tgH!eb{=)k{8qYa#J|?2~^t zcE>(*BwrWR0huKrv{F#|(ps}!0e-kfWdKh}s!<&BI43ARMm>=S8cBRA)ahIn$9-~( zb4cs-cepUro60ieeJbx=DZJh^E>R|HXd$=L|4NJ3fFLB+pxvDpGMOYJRpqSdErq#G zm~KTt;2<5pM=!j6nrOjH!XVS6)=%ZVrVLh}wiIH^Lb9{NuX2E#^)U(QjTI-%R=CfK z^>UTn>bqxc)L3=uhuH#ZCzici+j)!yz5I5TNTtH|sK-jzaP*MpJDQMGk-?S((Xz!8 zP&uhzm9Py|NME|v#&>XH-OlMU0A`aXZlZg`C+(jyU zN??^zGKBG&##F*6en{E**}8BaSSgV@^329%oyBbU#&6?J(0vgwMa4BEDpv*ASal4R z7dFyd?<(E|O1jtTP)2Yx9=05TW-FWSEps;MwRNGcHqmY`6V#EXh=;*8c#K^QY#Lqa z-LS9pFNUrF**7xi;0OS(4!f9c4dlL~JXP{$v>I{Al zlAMSrVW_rISk@P^(>YkHZL74`x_9UO# z$nVv>%U9iJ-m`LX@vdz;Y=KBqlR#1%`lzU$xf~eTX%OnOP~fOe93Y2Rjwqw!dhK@n z0_rcYtkJ{MGGH|<8k;;^1HX5}EinEN;i{^o1{QUf8?WhEF{WP|Y zgN8#=JeK_st7Aoph6V!_yPUPty7SDhD&`LM1eF6g3 zdbHn(0N4oI)_!**dL4gQ4lK4ucB|vikx^2j&-ji?CfY31$P%6q#I@4G#l*(OR+LCt zOhgJuyU+6$VE1ik`~AEM+%{mfEvl=>zmMm8gzkj7bxn1n<3fEq8Q1g_!LiYmaO&6K z$6U+4>feS(lXQ?L3{fru#N0T_RAOc2W2XNZ_@Jj-BADC=`t(kI}tHqzuM(B&P*b&nTnH)eJD?5Uie0lxQ z;F}r1Z-CEB8vEVFJH89}4A_qxf$w>|Z-n;A;o{ovarO=LBv!;o6(nm?ZJq7^czQg#oDsqf{z(lKxvzC7?6UI($u#y0Raf1>*&#l0 zwHtTUT=xz%3ju=WU@V+i+s|_Vh1J2n2Yv$Q`>;Ky>?ap*1M;!$&8`1_J_zq|d*aNr zJ-(7DgwN&xmLiPLiPoJSYyUEbdO6_Qsi3q(!UYN9a}y%W%v@| zCN!`qI^r8^%{BbeGNg2iP(=u9YF+$!@_#?JhBb*h0Gb^FGhS;{GzO67NQk3BLWH`y)0cF5$mAYFL3FL+1LU*0!^+H(=#xyWH5{PSa?<0^S|7r{oI# z<>i|J-NWRp6W3h_>r?v~l7B{yEa(v*o_&hHN%uScfYkHyA4;C1^hf+yrpORdZI zn~%YKI9NA0vTsWNCS*5-<(=B2w#V?@ZQZmyf;qpnUtU^=J*6fuU#+E-4#LeiAolTx zQWMv!?>1Zo2LJ#Ea`Q{s?*Q4)0%~F!=sWrwS=b!uvUx?rwPBCQiZ573{k45`i5BZ6 zw%S?Qw0A1!`>Is|n&L`K`0XtBpBKot7>t0cm0a&#dQAi1MpfeRZy4MeaJWnL6|HE( zZjW7~7y0v;%|c^_vO$@O-h5;mqT};+p$aEcWwaK0WdYCjRQC9l;aF$g$Z?9 z?u2tF{f|O zl0nE93DcC}TjMA<0{}Qe5|QiBt}zGj>scVjGgOuqH~CQsee6K$`3eF~fWO_|@ST7D zhVXB%_}+O8X>7hOwDtg2!1X2bH%`EvsSF?^Y+}l8rrE9Lp`{(4qAFTKanK4KG^t}& zie+FQ6Q}jQMNfxY$5+RLS0|`t1cJdJmhza^g%w=*GSwYk$wfn3RBa3UCQ$~R{ zoRewY=w+Sml~@~2silj{BCw@|!RB^NG)0G2P1}R_S>dPHFzwtw9t&1w=2Kt5kDW_} zc@j5sU5cPNtg;-ucu(%)j_dM=uN5gI2P$Mn>t8s&K4qm=^nYys2F=SdwDyl!G!Dke1KI%RivE;LKE8pAvfZV3d zTlfFtzds*ulBcwX?Nq@N(mks~!pEym8>jRCv!3hZ28=(LrV8qI&H4EE@7zJq*W zXiqJII|s|my;vn+w2d&uTFN|IvC82c^$JX|Qx=M+srd$WOUX={*Pv(JmR49yG3j0z zpB{_aotoUvFflO!CurZ&@hOw0)I0g$-m@_p4v=B3$yzIWcc(h1qT{?}70en*J!d14 z_#&$$&5YQ$xS1l?hxv~*u#lqr!y7BhSTW_d?Lxm;@lI8)w z0sIU6a?)FOlByLVynkSZlVK}G=KRY`8{t(Spi$&v!8S@-j@yi1xao8ctp4_;trUFm zkoJ4MoOgNd6e4v8=W`j)rSa^@Ihzu%6{h*lUi_r^7BWI$2WOXNcsSDTT-(;Hyc8p$P+dh1KR!Sv}=^7WKlGt9PqYUeuD zbV1~rkDsQ?WO=!pABQB?maZ_O!ty9%u;J(akY?veohhXOnBvlmz_aL{ypg3|+m^c8+S>Y| zzC3;`WE|~Xy-yG2kp>p@WJ8o#NNTF3hm2Uled^iSjCYKUFr^E*cIJ%+v@@r>1R^4| z-dc7fYlp578~(z7CSo(rkL6@%5670+5{u>UT{txo9-`4}C8Ms9$9=6C(ZM8^YH4bo zqUWTa>-N4BI@t8>-05sAd+UhUr08*iWJ zQ7J^N`BoZ59g<`AXh2ri5|eDoY)VRutJ6U=g*i1zDqnD&jK_rwkm0Aw7Gm`p8)}~Q z+M@IzWZN0(2w~?)K_WUoj@_%-x7fPhgj+_&Xr_cH=&h3cq0gPsWd22Pef|Txvg?x_ zDJd8Y=#Fd9UDq^%HPoLSDt2k9YcC4qT*w5$m#cM^`$EgS1>5S{>-{096DismLO6zP z6!mcuM3R8z!#VF}^dI)kV)EZj6h01^$5x8_o*!G~mz}hZC_p&p=zHp7sLhFWZgYHV z#WqTgRp*OhXQx1cH%HNmC!ZIj$hokh?~OTsNYU*n8vO#ULpX{O;WY`*AN53{xHK6vK-L`F;w$LCl3M!?`rSN_Z zXKsa|zN-5x_I;>P+wu)p8E;mpK!jOunRkgGpT{GI!O|V9ERECjze2b~frgbM%6_Jr zP*KEzVH|Vu!T1|hEhO1U2WRut5-Ngj%!*%eM%^^rioYCp(w2+GIqRqUW>@b5E}1MGqs7taKebBG7yM`cc^_wVKbL&*SO>h(T4-5^CrIX2Eg1 zXUM%>b}BEJVN?^&s0)f#H+nh5JW>xcGe>Eq>2sd)P9L`sIFh#->!}nu5@pMJI`EiS zd)+8R_cWK6gjVF7nry6i|2fijidH-=sQ0m3zr9@lR{8!tzPkW3 zxW>@3of0zR-mX2g;O|BB@@Yx!mY>uRS@-cEcske>d*EP1 zgIIrGD^?a?qp5ab!Ku^RY%3R%$^~7lLU07Xl31k`BZxRF#{V`P(d9nnfXYlbT&UV= z1V-?c5|*QXJep;T6gKuK=&my_P zc;s}nerx6jDkSOM(Oc9Q#m@+Dp?;^UCe3KQg$E~7^uuJMwNkW|9p{=uuzi0u|85ruFgbGEtP{2&6cAJc4~l zXYd%*_6?JQ-)aY>u*mebp#*+cm7kLo{VyHRXnUj~B$`}A@_1${9c)>(a5@oHS7?8h zuWG2#&HLF%D~2V2ag4(%wWiR%vAWRS7L#

3Eyh3)b;3Uw|}5*-SQM|<=Qh!2}( z7$bXjk}`sY$1`RQU6?Psb)mFumCW@AD%^ER&wSEbW?_mk+qU1sDBrAo&MheMZCzO1 zbsL(6K-eY!@LJCh*=AF0Jni)-<>8QtxGV1t9KMc=xqBOWMO_^;-LZFjd*Jq-JS%<{ zBm3BNY?g7NwDgRFQ959C0mp9yX{UJ`9_;i_cc5Go6g)IDxjMhJq39|a4<-4l-tt3x1`WrKU} z7(Q?r9VvP@^2N>IKW}%80gPYHRchOAT_w#Fv?+&Jp>2P zN^2tYi3zr=N~O4?)awAv*og>EU0o?KHe8PCN*i>4Vf4Oy+KrRB>yuguXmP zX7*<(DnJpCcGta;B@)OFg?|n|8}0AJd)yj+E^g=8M$X-F6w8*H&g2p5pU(0ZE6Y|2 zLBW>}=Qrui4f>8yjK@^$MK1IXdsN28qx%QU47);i_XRl|pwBO5OG6)Pl^V--o65qS zR}Z=Prd0dYZQ0SsdTOeY|IQXPbgJK_lJ`DUo-EkMP<2V-)t9=XEFWwt1g_*mY7Zi5Y#ktHz_Vl?F8K;fOQM~Qqsm(i4<>!B2B7l(`oFgX?f^#mYi&GL3WRUsD(0LNGaGIfE zvy{-~w^$rw)usJsXqLoa#`{z%$}FR*Vd%sGUo%fjvVoA`iI#a=9FcTC9u2+r=ZzCp z+vI8cIVw*4SYOb6iDLY!7#X!SG9gDb9Xhp()H`hhI3^&$@BFd&LbFOU_Lmg~FUh2^ zByS!%@j`9fl!{0d_gSgji7C3}NM^aelO%L)-%Rc4G%~&|*;9_tS zq$h||tS?2OlMVgCuwglmT8RNahUr!LR&&53ak zyWG0-ZAxr0Z|fW!t1J>H=Nn_(=bL$gBSx;t({4gx&1|>nTKx^6)!#0O!Spv$C zeYq(UWYYb6kw%il9qp_vOXSvqlS36cAAP!Ml+)om+INzAXAGWb!C!eMr>h*ADW{*d+zXfg!NO(=)G*uPc?;gct_zQ-NLcJoZ_- ztG1=rgqF8&y^}DSgj?8lvuPwNx~X2YOcR%dfBqG9!*caWINK@0+wtVdWom3~079m> z#5F@pWf?)(HhFeJYtiAwRKNMEaFi={(r?$xn$$48GEBB8&rRkyNO3q`bU7Md*roHj z>e7{2=C7qdzOqL<3<4ej{^%Sp?-bB&e1IV7bwJtM{!n%-Re^+|(6u1t5u6|CsSsa5 zI*;^y>YO{R68eHOHK#U!*d6OOfAsn-q}ZiHi)c!xK>%b2M!X) z(Ld8)T#Hthyb=zz>9OuJ`GPi+)NDq?BorUNcR}_P*i+>P{}dmOyPE;I3WU3tY*hBS zgLB~+mc|YsANm^cgl$6=;-~OR-S6hDJ`*Z}d0+2NXF1^DE~bsmnf0Pn5#>tVE*>d_ zKOEjw)I5y=8~gJNW6@KG1JC(}FIHW;9Q%~fos;=F-_*reCBKuqd+y;bU5m_Q1P}cE z<@vNnR+Ag77OJp+iPyM`TO=p)+3{s5k#b@^&+}1_0|&x&jIlT{5q~}tU);BM9&$hd z!y;Q*_s?|&TC)@=An3emik=4^vCvxA9-!1UkUR!iC$4p+nr@;^?kYSvj(u$`GT~^! zXVIGc%o>5#@ImBio1rBUyB8RZy3e%vpHhA{hjvqOxlb*bUl^HoJynB8XS6;Z79EcZ z4Lw;o!@9M0d?mO%i=$nAe$I`feo_b#;bil)VfzdHn4upwpi!Be;df$ z+qU)XUxbZBraR8(8BrFYtEE?Bxz2wGy+!+DI|aEyfVNpS#mbCkG-qHl<$b6tEHGH2 zJgqV2LT%C5;$km6{z;q;^#sjxI#ABvM2?m+62B#C(iBnu@{CAX^xL{ll}xanr9Ko7 z$GUj7)YrPcRBZvK5LunYPJ$0Vbk3c6e?+P6U0t*!c7hNgzsa}#2={ng52dM_ z=O;>8C$67txBdLU7S4KZTC$Eqx&7dR{LLiAzftq!lRfX#@pzYBLN`*h^ZOjg`%`*W$pdegOk2L59QDdjhJ=aR1U1*W;s<(^LsMPqI1=8o2ZsmX`{Q^fldT*js8dN-J3VMZiXf8kH?QX@LR#&A1Gkhxqp%A-bLmO zHs3vC-#>OxAjbwYE-YGGaiVt<)Q=L2?oO?!Pe=}9gPLmev+Q+Vt)6#!tKz-rbfzAX zo6J9KCk)K5<<-PE?d{UEiq{w2i72LeQ=Ugyful!{7Wda8d^#2^-+emXfC_^FdEA{n z0?80h{vtX~8w!TirDmXoh%KX^dEOX5c6lBV@xB1P6bu_F8bb)zVfGd(MvBYGLHL1< zc~Uw2ineyxYC^-aVt9j>kny|vWydf**YeG(!z5pfhXA6$7L^Lm(eBBoJZ`UT?5t}S z?`YU_Rav>ASWcdHRx9~)zw5qG%Z}P$CtRn^{P>XiI^V!Tkp z;x!Il@K}B|4q`;Tk5!quR{KH?>mrkL>)DU8*2|~o_Lh&0Og{&zO1o9Z0IlecAnAE~ zBdAj+X1;q&kLKdyOaX}Tb@9-j29HPYOP`Ehb{FiN_S$p8N_PyI*0!t)s+fGuV3(aY1 zefw+x7<~hNyb5%dRFiJObrRbD2e`1GHF+H~Ka(W;F5U~{$d=jI)>q~R3tcQ~dZ+L~ z(PsrNh=*9kPEU_}F{I^M4(hx6l;eDlNT#Qx%F{&Dq_m3fN~)Ed1F16ZR$og1rwx)U z&WZN!JX&lEMCbg+kf!l$u|xjxwC8W@hGSf@1unO!GWfonw;I(;aOc=<%=5@G6p_%d zIn@++FP{2RGQ#TXRZ?p485as@vc%Vzy$rzX*ilmEu?BL-D^v!2lqO?vR*b4S>zQNt+2(cSCqGY2;exBGfP(CHw5`r1l zGAA|PNLQEFpujd1G)vX&Ox0t{GzuRI4%MJ}XPcOqxCvlUp24NEgQ|KtOH3IaDc5q$ zREtQ-vhcCgu=kX7V7QhNmZWaz>zj!|X^(c3Koi`T;uaPb9x-XX`85f_GVkl^zlrPp zi|Q!Zv4D-%e$DEm@2mfh4tzi}8ERi%56Zk%Xv+5)%Qmi5b1$Reviq0WCNu%Qp2d2e zEy&Q~H_&Hy{PXY;=Gw^)t2aqWT}PBWJeVajEi^2ed;fdDS}%XP6TD9Tf1Cjv;;NkXMhs&1puIvfg5z4avXpYvOxnoPpdHG$ zd|su#EV}V7fZP{Nyl^vW+kL9|t2>YAuiNhg1d26a?i=ro*Xgt{Pt!wu$84kjb(mU4Sr>EJ5PewzSvi{zEZxd zKsp3(J{$GNulLb8;tgF8E68b#gNy1t37`qleWw5*HL&$1j)(n=WWIOr5CB}QU3bU& z{QtZN9z5)p`eYr;Kgsbgd~(g$;E&qdf zx|_l9m-WE(&-4pE@sCgCMfalaQ^R3i zuh_d$p$j3qvPat;;%cS}MtA5zd`?~NDp=C z+^077=`zxxx&#J!--U}7`4_0NSO8R>#!Ej|+-(j-%7(~_~_f;_S#!b6OQclJK z;C60iy5PQ@;neuk`u;Sj9~1ou2k4m!?B22t@fWcDvHlM>jFr7$s5!g{%QoPD-^QzS zM9oOhZ^dtOlQh4Sa%8UMX}bKL#<_k@zGP)eeiXC0S5f0iGwhg5Cq2q|Lm7-?Nr0OB zukV75W&@;0DLt&B97*}{GZO5Uu~$DP{Nwsg?rYB&Y7Q>i0fVql^i`buB%99wZxhqY zFDy$sHiF1yhWAc#>8H;2X`POP(emh8ReH*wNAFXaU)`}|6SHi8n&T1sip{PkR}X|; zuZDY@zf+0j?a0Z#>rC^7eg;{n>2-g-qzjGcySH6YxQ-Oe=RWsAu8@d`2*-gUa~#3T zT$?)Ye-2*SUJxnFu(MDFP*dH7hn4cb5ae&99{(ILpbTD)8jCep$mB z7c)SWwlf?-d)G<$Z<4(%ySZRHg|7ScLZ=oPY}(R7MJ@U-W8P=dmh0fcb%};;T54ta zDezIL9B;}#_wi_RuN01OK;iHF-7ejyZl&<}G-om}2p$5PB75JU{l86)mp-{GN{+|Y zCihetTnI_bkht;tKIA^SwGSxNR>X>XyXMIiVvf@};WfuOnD!O*{CS8gv|_d5sm+ui z@3@`LS(3{$0EWP_wy?19Vi2TgQFvu8G0s`?fQWglL!`8XOYQ&x7(Ag1kitKJ(k*)D z8bX$0k_?ZIjTO{N)@&KM-&nI-G-Ct#CPYE>P0*WU zcnY{cF6kUv#2l{Y{z7NA=`)=BemE9>9{lgA`Mv?7EiTun+IM{#*}$|^?~ENP++Z56 zyTLRv9s*XuYZFk8jGy>ClU6^{nSDtkyhe&=iPqyz*O;1))AEn3Q2MiOB}%(3wfPX# z_}{UphMgEf&b@5UXv4bT1X^EzI({PqF7sY5;n7OU%*wWH*`{?z+=l}H5_am;Azjlv z?=$RO$vcfl_#meVP?O2_V1i>)!~jY#G^c6CLOV1x>}p0G>FWDA9aT%Tj#0PL1=pE7 zGX*Yb`ZuyO{&?d5#1tHOmu)iPc$7FkWY+s+Sv}7(0=PAzhTnt~E32v5bm#FSv{#oC zN=cKr`AKjbqmgxgu~u=6Te4mmuCaF{DWPZ5)Yq&^b~zKU2hrveIWxI!YN0ue(hA2! zt+|UNCC!YkJ7f*Bk+He%IeSn;f@g#qyCY9bGv&eK<7pb|GCVppIZ&C4-^s^B4i1}x972hgr1sYjx$U7!sGRrMV8gGP?wf(4D(!)W< zi{n(5l5)YJ;;WCBrr)|u>(AGwWYk32p{6mitxsn9)t=@wUeJgXwXn8@f*|2xw&1+d zQfa+xlL%?zsy}c?1U-$CAx7uC(MSwxo%-_N&8^Buqv&mxY*GP2k~TeeVH#G(mN9Lf z(PtYXxz2&G$H6?i4kh;zmzrQ0mA4YlW-8W!jA9E8kFqURqqe*Ylsx6{Ppk!w`~ZiQ z5NY8Vhi;T-fo+P}qdjHa_S0{0GiYQ0-7d^Y4I-613Zd#lVVnj;?FG}#Uq6YN2)hcK7SHEzwzqd zxcSfWP4IxdK{Jfizj$-G>LJp^r`Y32t%%T=lMe>Q`HEDRcH}u%qRru~=jDA6x(=IL z+_qD2!=tqrg!iE5Rk$g0Dc*sk_dE{4{kXtZ0AIH72u>ZT*K-_Fec;^fG)llw)q5x$ zFLYjET{wb-SW=?4l~Ou!W?k4E)L7~66;5w!ou;$Z3t9nD2fau&nj-h6N)9*=ZO-e9 zlzu?XDO+tX-Q}Bit{Ln3IQaP$Jn~DyWt)XMi0rNsAB=6{XV7b&Kzg?HSic22o{_4R zB-6b3MPcZV{^;Y)!@T3j>gL|z?1Av@J<)nlhp#2VmWwar>v;4sO{PAM;24lfir|89jKP)=t&!gNv#zi%!KG3M{oZlY;w>tg*_o55R@mX8-6PTGrnb^@Y>d1f*98F{~D-mkm5z z*t=p7ncOfEYmx$B&KB$&T+OS52zoO-s+}VURv)3Fsb!&aYd&6%gJCokjdJ%)JFAC4KGg-AOg#@FIoBzc-{*y7lB`r`3tOknO5<>?&3xL>3qAcGdSb`=nsf!(Etzuy-#>KOdg(iElvMj zu5JI-9_j*Du`CQN7bHX7nzKqsg}hOVF?8~&3quco4DtNj@WA$InfDUyHK|Z3?mSY= zXQlvgr6E#`n6c1ceblXA_4UOv2uhdg|MhIWl-&S>UYI{^F^- z?~ETW(It#W8a&%B&bqJg`Z1{GFoAI{`I&h$vP;Ib_7*3aJ3TA~A(#P26-SCCuI=WV z%ml2d@~G#w2p#Ht$~goTHPt;tadV%V;{#q1-Hfp}FyQWTo$9i98FraMA}lU-)Pqi{ z!!IqSkx0l0yA^k$w&Rx ztGlwr{wjdySac-6)k|c+>KOGSq$_9C1CaV~w>eYEv8h;L67_&b!KF)=T8Xt*CM!hP zc=40yqrz@a4ZDfEQCFD1Oas~Q+V)!fDeTi6^JYZGu+T!|N9gdMJo>muIe8>Od2F&z zCegqSts%QItkIPG=cocf2`Cq;P^M=`Ma&|}tS$uyK9{|bewt=`w>h2C;zJGwe7&JV zrzSos9n*VFei})X&n3ou=#Cs5=(XRXEL1 zN^UUh*;rs!rdfmjb$Obux@GB^Emov2m1i8AGRgI~b>>Fyph)5B)ZfBU z^HG;m^-+p~#f9OAkI_zTjhb8&e|d$pdu%34(RK~RQusnu4`Q(fgLcv@9XTp*a4Ss05))?$AMjZZ4G%d0COImmI~S+ zY+|24x7|?(@$pDS#YfRysHkZB3iNQM0#hh3mm)Xo;#j&n^xU@F+M#VS4ISL=7KT$v zD+^{g#9kdVZ-$SMkMDJJRThLtM5^vwf+&zwfI(Yp;n0>+^cXQwD`mK)x~lH}Hbz4B z9WyGiR=M?+f)r{O?$lOoKN9nzL$LH6=C>#AQ!R}d$C?fhmWeU#fd|Boy;_D2M4tv3 zL;3jIIqVk5Od(DRmhj|g$(99Njlu8qP{u)Ha14S%US`sW`qVkhVy-cepCW( z2e0UE#@{w9_tUdLK*SL40?yuF5_5BFfA#h~Z#_9t%;P%FMkOxKXtFYJh_-wm6Bely zuGPy=S_;9yy}MHv40W`;qzPND`wm}gqw`3chnB|X-StP~u2M)N=nJxDQD3f* zGHZI#lV>?mT!KF;2>5Mso#mo0i* zmC4h99vuNK&qP)&8GvfP+BS6=!D+(9csDV!@$1aPP~PCC!P4^I{2%SnU|gVKU=F zcXziV+2+B>ix72D;w$K|h*PyuCEfP(w&dYgixIvO3AK8s6S+uz?1-OzR@}D~M|%oA zRhnGK%)F?>R=O1F<2bl&tY-5L(Ux9fOvK!XN|8nL{+ym~y9-J44vqGn@$=9DHv0kQ z=Q_x=39xZOL-~|L_H9xQtS%* zU>5>Ryh{OWcA6P*Bgn!YQk>)bmHB03CY))Ru@+?K`5dna1`7Uxe&4G$2N2_9k2iJi z$SlFXP!>Fcw5Ar>#zec2x<~c~6rJ=Rn?NeH-}ljBdRnwF>TlPK9OrQLzrZ5K0iw_D zW7E)jcLG`=ggl z0sn3EfWhTyG((T9K5xu5@25bFhv3q=c)=N16?^<3`m<>u9`&+L2B?v@seN{L-E;+% zm6by}tU50zJlfmfk)oDolzlhC&}AjmveWLy=Kheta%7aaQY2c@c3NF*aSty!?M}|u zXOF9EEo7)^24re7DP)K%^iYXwTb<07isDw|(U`yNJ|9rZ?Gz*K<2o5KK$8pK^36Nr z5epLAZKJI)=|*pWN1!-jY))dD2^)_DkvDc)#-WqgLcIr(Y8SGi0+3&?qtx?CZAu!8 ztsCx6wqJ+4uehh2c6WClb-C+TU9Sw0=C5YgC<_!YpgupOJ~PLPlx(p3;_uYiF%}8leb}e$k;77WnhA zSkO4*$&-=T68uwTNYQ0{os(e)24P4hhemvb zn6_Ca;~Hhg&J`isy^B++F?XQyLyckrQ1j5)0C&P|)l8dD1En zPuhbT;i-WGW_mUnHocM3)k5+}Wk2*k^`4*HvEP*^ITOHEc@|!at#jP{dGu6c5Q7`? ze=+HgvKTE}I*M-9ypi2xg&sXPq>TFOWwM#sRgchl?-YnoGGur0ts98D+UUDxs&C0x z-@4)9DKBTyM~`X+LTtimuQ3Ctldnk_0S#?!G4IpK%KjHuFTAv6O^g6ZsjG}tmMXdk zmB6;+5Bv5Go#0jf>=)qwRQfoJu;9h{hlZaC;8K^LA*ABqHk)$7iPNfG+kX4vXAOR# zKWPY|Kl8E{1F{~Ea~+dssp21}(YfTsubqo+>aaRL7NW5KBul22TxVoE*_tMu9HO;I zcDBj836eg6l3?)C*QLMtrMq{9f$-9YdBk3#p;-gevi%y|ZRRLF*)-*devo`*LA?@<=PG?ryP>C4(JxD`Rn1S~W}4 zQg5sZLK?E$sIx#61ln|EUf103kuk?PT)r7|`Q6;Wdoco4`i?{y%oQRUb4){2lWxpAZ0I)=ai9pmQ9KCL|G(- zpd*qr-O(j~YY8L5%g3jb@qX%^w{U;ym5(5M`aP~gB`F@=alX%3u*WF?7$z&N+u*@N zA|A0;OM25id8VTQ6L1Rt=%UV%@KtjSzYSI7fY`^ za79(6=%06;@rs~!k7ds^IT!cG%6OW9+!-^y2;^M1C`gJ)MWE&36fAC32o9aq_ug_K zFEu`1E=Y1_s~CS1jGW7kT+JFSB?Ws}Bc*MMP0Y>Npg4&SrILT;H9N5%S}f4KPa7dz zvS*W0PCgok(2Y}>Tk+$_ninrEJ6-VS-NtEps{ga4JMNxUmx?aEaSHIi{HeCLgzDXs z3^M3i(^Aq%>6@@y&frna;J0SkS7Cs@CLY2^X{6Wn%RZV8JM{~v znfC0+F@&(kQ&79XZ__(To}Sl!Xh63G_Y00Aq!PnKt(%*r_Yo>A#)3GqKP}%#8Z+@J zjf{^+=8W!8*3LWUEs>&~CSG=JGKk4PJ6S8ltRZT`SOa0Ji3oD8YwudVZ>naSE*lM! zB3RK~dCK93WZH_I`Mq~eDv$8%P+x;Olj{gU+rGkQvH{b*1$Cnh26rV}L_kiyOgYFA zr{{^&(=B84>6zy+9Rwr*QV+HIpQiB(FeScg#n}RpzzGGipE%(Z(I-B9B;$eRpdMi$ z&U{u!3=ns)`^^{89SeIhobiQLFLOa@o}uHMADjSuJpT33giyUi+ebzA)BmZweDKy4_zVUotZs*X7)V$*?ZrhU#>mwfcI3&UY=ug5b)fY zN?ilpfz^@+p(w+4L#&rSpRSE@)O<*ca>B&z$lbt3Q#Hs{SW<6jN(eM`8gvz}Pa@mR zU5^|d;+gCLa5cOXS&TT@;d(DOa5zX~zHA4x?3sX0k)iDwnO!~>O8aY!Woi*3ewlP{ z15lRBP=G*tsiqbZxv(E|iwcPnbeTijCl)WLC6q31=Q6rcEMfMpjE~3SaPX+U+r)D& zBS5@1m4TuzRuE05P3hVOpb$q@FCMs#)Zk-t{Jr_{Z_pqz1N*XrAxNqPV&M-eKrt*! z>To5-F2?f)dwZQ<8q=x6d3oM1pW%7m28iNOH+z?pu|kNJ-NihJ%iKQHTI#0b6jPA@hYf{JypL*av zc`{JQ!Xq-st}-UK?wfk}=g+mVw*c6@Nm;MOoFVFRDOPU6!gO8X$F4sCNMxGHmD^ib3wR3^1m~2!-Wx%w}c7kqw)UjZP zvkjx$1s(Z$0Tz`pGD5WR%+x4I`=WLA(W8&?RQ$ac+;%PPxW$b|RuW(n3@``BEl-I`O-_W0^qtoa zBm-VQboOTFfcfwdLw2%eowE)!pWT<;L!*+-|nm!}^K7~vqep?K0<;37K9%#=@qjv$rd{Lqe&^+Hv%f0rNq-L}+uLOPu%@n$j&kojY0z+N3+KAqn$2Ldtquqh- zi@x;v>d8M;u{JT6oXiIu=3OX*M18 z;_7Xa%!Cj%v_0CMsG7RM#vasud?+4h*KLo*CtLitw#$MrXAt5nEs2;4*}JGp9XRU( zZ2o$}1Hj+a4Zrwosqv8nzRUNVR@seb&O@2^&K(s__N6Pnab&O95Q_pM)P3`V zFG3k&VCS9Tz>aQnd=%g=L>CWBjb33m*@1s*+}-5zmD5XC4G@$X-5p0VkXvsiDi0DN zT}H|+rJ2m6OJ50TL2+0C<2L<9I-3I&#^G|ju44Zgup)FFAnN$4!aFYPd``906syuZ z39pTyN6qf<#iV9EbeRrs1pykI3-hq;qNBZMy3&o0C!l5&Q2t$6X(yPn_GY<%Do)tL zcgC&8A6zpY)_uGI1)c(L$b*&pcT&an;xSSHxH1Rl{|->lN9_68Q{IS1Vl-qU7?jue zTa1_cj!Pac;ojeyZ!Ndrj?php=P&}nYDjNj4FQYjXTV0*r`xWB3OBrlfk8x-l`}5P zg9CrJsm+R96Gbc6^v0FlhKw+!G{L0+nVK*V^^(<0vQf~?p0HrD`hwN6<-WCO{bnto zLzE*}X)B=@*mcc-rNJe2#34P(W4wnAz)8suE<}eI0(e^@XE5sHQDKYX714t!H3fTx z759pKj$WB6c$K~)tiUdytkV$BHeBpV{mONItAJj+c10@d(q+-Eo15&+MHe-Sb}LL? zl@y8|{U~H{@NieQ_4QIl=7$V5fqS)+NCVrmTuVG{CIyuQuIW6UeE_5eQN2T-5-mQy zvZ^eaIWqp<+mO-RP3nkox^eHT?MWaaQ4?d_yPMq`pMG0FQJ#=)KFY5e0Q|X+vz6~E ze+s|tDe7cfNpM+CI{^Sa5LFw#cvuzOc;iZB0GeHePH-TM3jpT|j!~{zsPtMhM{5Y8 zCM?ue-YO@T*WeSbgn5Fn^0W!W3JKL&b#ye35;#DlY14iX-51*5(O5MJ;=Hn#Ilu4g zWxbh*n=>G)xf?5V%E=BKhRN2?C3ws9hNeeJ^W((g#;ZXz9*8CxLh$hWPx3AB$%s2m z0#&6`VF$;V4Q!gRvg^;iDY5+*F6HMyLwlp-NyrVbt)3liWgYl{v zjvE@fC;ft?G7#wQk4>;?W)KUgPkn)5jW-DHj|bU-O=~#*812^edRF!Jk|Dr*mss9W zBGec;LC|amZ;p1-0eaGdRyeOkB_Z_bq^In4*V?IDatOv@on&{YHS!7+&r0w>-Ju7n)!q= zU!Wq}NE@j*KOxd~K!@wn7tNn0cRT`uW`?ug?f=P#B<~p@ZvrRyGCepz4F#SOJDJMv zvJNq44}uVrG>xlPpuuieZ3?cBjk59tf^lzu%}0K!V-z5CNfnipQxXgm`)Mz(cWBp= z?d3pI3%RoD>bdx2g}YxK#o3*+b#r}t{-sM^VhPi6msG(MJ?i5vw>SV&!_tHIdh7(b z@k^LYlfy0toy9*WtEe#jACwF2jasa3gLj0iPo}XbQeZ6h%C)}U(D@D{jw7o+UGaSo zh3lzo4=ou3BikK6XJSnt(wBf7uQoqE0tjQPf;*80xgRDFZcKmwg;9X``HQ51VeW8! zNvX8Jo0aZ^XuZlLbd$EQe_|L<9ci=U$(a_eMda}+G)7odgmJDn57KNEW3(} zar$q~{CdW(S0`SAA)XlK*t>syh@9@=jq*C*_q)g-(J#l_kL^(G)5sB%x{+%HPU;gK z3#f;I<>4}^zWUzW5doZ|r%aHm?VW*gRUE&=|0hD>E1-~a(>wkXNhWVkgB8GxHl3p| zZpBBAuYjZB5p(q#W6e<;&?u$2N|*jHLKa$S0Clq*9QmpBhoKmoV>|&rV{FKu04k(B z`0j2Cp~zM4F0C?92;=@oT7PIF{56o-n_(T<1M5O;2j0joZqcvCzXbjBl@CaTgYF-a zs@@EJIWGt3NJpE%5&FN2`bc#*mqI(p5G z)ZGxWLAGKWXN-7P)Q-rH#?T8Y%u^+D;o#2*Jo#_IXE-lu}EKMzaFEqf$`$@Wei6*O9xh_n(= zu(DRuBLaV)nRULQuecPSNnwr&(Ry$QB>Lgo2B?Tnp2R?+&9oI1{F7*vpb=Rd-9aX} zmw{shp zix+{jHbL-uDiq%Fb3IUc)eq!U!Ts(s`QYpU>j}YAIkt6uqJAw{T4{P9!ik9yb|z+a z5Xav!cX4i{L+ULz37IxoH+VL~e5%Up?c0x|c3OwvNLJtZ;X&0K^w48Mo`Nk>nf62g zB@1T5$p8l}Adeg%H|p379iusCY&U#qZ6a=71zM72E9@VFwy;RGn`wY~d3w^}PV8E8 z>C=FsvuRU+&PDBN`I7{8Zlwjw>pxCE*UsPK*?x(_u^!^tPKY7;`@F+#=l54W69JiX zu7gA@vzuxFAE_~}D+EM!CYF>`G{&`6W_r$3d(YG$l;Ln5p0_Qgxjy(}5U`ke7YOKd z9fFXZ{dASc@37hI{FD3s;tLp~;Il8ne^<^BFKEXP+8ZSF z(CfTmqYU%Zjc3~{UcY?*5DpG!{A4X1N)u3cRAZE$2=Z_+#}72 z?xmUdQ9`Tys%0f_4En%T?Zy3vRsKXg1B~BX;9)%X}SFV9<3U9pb_KSpX=)kWc=<| z;-^5K437mJ?HgW_28Vj(T_%gDJ@h7Dj+mNhMc+-)$@Avs;_~jzH1l3rdHSRxdetU< z0qu}x4zUyhHhwm^+8ak8+Z`4k$SgbB7k;3rci)mU{;m@&Y^(E-CTC+9nyh2}PVC1z zekSc(P-Ql0@f3LPF1Dr_vg?x;X|7(sUKi7TUi&i?PRes`l}zwIIWhR-G_Ia?Ai|N^ zNI}6f>NCk#QXCtVerL{S%sbeDr~;?qH?`{U%^L^{&hthgMbO3Us&&AsQ(hK;#9py307`f#tR(Oa7+~SqNe{(3RRPynjDD zJiNeny<^&-d~6NM$Ty8~s#hg#GP}N_%#7g>=f7$R;zdikXUct2jP7ZQ2i(zA{Vtw_ zY@Gi}7Z+(pRdyTn)c?5?s;sR6Tx8!cG{juDk<8R<%e;{~*-SU3dG_47h>L_JuiK*6 zA(g69O)Z`1$l8(`u@4eLNDoj8-_qjX?4K)(AvwU68z8K*CqMzUHvU5h?F8-Yl(Y*U|ss@D&V9GuyuJrp$#u6 z_aP2XFSTk%d8n;U4p#8)AKLJO6gz45K*`JX)6oao93zIW$x=A?S1|@wk@u;wx!rL2m8&qPyM~=^Nm1k8YWK|I;V_Yjyr5KfxHdo75ctdCE~Z{a0JO ze+=mNp-+0`3l;57=#8y=F_ikl3QkVuGxS_*n zM+Di{E^O1e-DK5%+k6yCT@=FeMZF~b^Ns!{Uccg^&YYqo{Wc4%skEX5Cl;W&!BJ92 zmscsC(g#UyXUzMSYlFEb3y$05D(E0wjP-We6ViN$)ciEtb#>9Io>> z?%uNRqNg$4rnhppny?cCHr;g(<}e_kl2R_nx|7Q~S7AWP4lvfh!tGTXzk;$K=71E#}=X|ZvlfKJCeNC3y$v!lI>3lL@w2czoiVzMS@sM4^x_tb`V z$UQ%2KH6|5SKwWAlL_$C0krxlap^eUI-e_Ccoql={03n}3mTY7h4&qUC}oh>Jt zkEy=q%^7@Cy3vLFwx{R5x@@0}Qi{&^SnG4ZL40!8dLqKd?NJ~4`UXY{nm=ni>+8>8 zkL`q9$a)|}Mbdg6xcBdmJZ?{4k=)vrX6RcLkal9}^DL1b=Fi$gUo26mX|t`^>EjD4 z=TYz)$z_x?)$=0i$H=I}+i8(c^fh6uBl7OWuc>HW@6-z5JBLIa77+e&QaJ~V@=iz3 z5WF{^E+Atc(2Ky#uU8BV7JcvD9EKc0gYJxtYuj3$8wBm0_QmE-*)ydW7f81F`D(eG zdg{aJh_+$Ngi}%yOg)(}96bScv#}@hOC?w6Pbv3?#Jz z)C`*eJl@v!nkwt2V;jiv1-fW%9^%JX&^(+UqJJ26@o_$n5kB2$5yqT;MyAW5xYt1g0#ML;Q@trW^76u)9H;4+B~0RyOa50bd^1kB3=Atbo3(+!$*-(YBo2 zE?sF*^Xf!Lx{(5{i?IgD_)yeClbi{Q#TgE;h+XdFW%k)HNrYUu$G$y!*47>@6V`sz z_^NXR+cegYZmo6#B)5{&M{^ZRoVeSmPe7tTQ115K3fCafFo#~g^Gh^Pr1@#Zc|&h; zQ?t}Eyt6298s=1`e}*Qom-RCy@UHR>f8fd6ARO?JRMI8Bduq?W@5-qpVH%3z=mRqq z%pV%&;A|j|z$qifRacmG?WkRdKXY46y5T}Vkdj9uD3)`UQHxKvbHOY>e*ZR)yV;^f)q?FAbA^*d@>i| z5D*kg`Y_}$N=I(>-i4}3-)VRtc3TtX-r2d4oGy33(S&3nu*07o<~bXVZflI&wX_`5 z9AmuZMG9&qDovo7e6FnK^>RV3dfnSPF8?HFhTMk|nx2bM@`;T-ZK?$lJ>1lMt_Ivf z*%m<`uN5amJTmgSMV0>&?X|ga@25{UtIN*HDB({> zEAic8E}qC2O-i#$07*(uMq23G?|fLShC~KIf7Thr7%ZrGGr&M)7|7#953A04@|(Np zFZsO&=SC%N^x`G9C%})G^Zr`>qrp=2laY!QGF43-BbSTcw`W!h`|_>d=UBp_EkM(j zDWzm#CG=el{F2zoSf>%w9FRU%Rbs|eRKVV$o0OTAx1eSiEY^9YnwKZE&T@V^`8CyA zM#?m_C}2+@AofK4ysb!=dyn-S`|E%vk%rSR!{;lXNIKhuDa{s9T~>#`p6vHw=&CU- zC`^A54+E)K3E&?{x!B*%vqq8VXaVU$Q*@iW&iA5qOuFVPy~hX~#UN`|>XR8~D32Li z4<67U1_?z!uVYV+gWVdf8@6n^;#jcqa?g@#NeM{z`*$P365ItXr4U93RtoU zwzDs$qcA)JSd_{+Rh>soCd(Qoc56d95h$*r;-^Q@{qpAR+mjuMrg?uF;tvBbffEzV zZsfpSPADPRwdUye`_@hB-@5o?vtuTnK^g=$P`N$7yrxAVxSeZ5d|GaLi4r`&aSGFc z@r>2Ye7a>_K^zqU5D?5MT4hZM%sp5db@#T3>8P|1=kRpL8QV3hKE!MHSWAwo#dxdA z)f%_DpZvCeP*%q)5V~VV^O;O4m%aeTe5$GcJ%u|Pt$^d~YqMydz~g=mpNjN@*E51U zmUDOn2eW5U?dI%_HkSRPRQG`vc!qcG-Lei%-GrhFMrQf6DBv9@u8D&z(4QV&m28lS zzRAX|;PTahE=qIrW01*;e(Jr6PSYXtFxNXbfEzs`Dyr0QCL&@vJUqNGA!s*9iK7-0 zE2G&3mXNC2Y1_FmI=)F&=#fNn%K+%&yHYV>;_7X~! z!B}~w!!w_|PR`(PAlz@8177hrec3qmzkl##8LZnZth?Z)^_2z23t%i27ZV}Mvh~=v z8N@4iHpaP62{(Dmj-3?f6s%3iW#z(IjC+aM$4|FG8Tu=O2tFv$gOnffm)`tv0CPmD z>Fg*fHt&Dwh&XV{;WdW>^IK_^x6&=#U&bwJ#=`5E9&9ho7Z$hRm#Yr7gb6Qu=vnMP zk=16YWK z_DOgyg-9!C8kAM-i!rco&y4+KJJRU>?960I#(dDsauc>D=QcjF$K8`$RD}&x^FSp% zVW3!=?D8>Qw8pX1YIbM%8c7oZq=2b7L&9SHoPps26?z)(g2&rN*X0uCu++lB!qMaW zl&f3(Ub({<)W>ia7PDEeoc%@~l;ha-Oh@`x1&v=dHQpe9^kCplRD*-JdRMs6{ctBz zj{s3m$2Lu1MUFJnwNt?0bcF130dwxr)KsR()Hd-azc)qck%drMx`~CM^|EyGP+2;* zJ)e&Kz4Qt#i@c2^28P-L<2fB(yyy!mO^B^zAm)Q3Q!Q-^Py}7HXgf#h1h|zB^9t+$0=0_3R&4aScBRL&t34T2RRK5 z3BKI|=ozf6{^Xo9X-u6`KD@2^y&pBeh*IhWyR3TgQ*G$cw3}^N8QlX_{Zq=MR+7I^e`DjLg>D+O z$A77HENFet&!ikMHRa=gSo2l_$SbMo!Mf(5@F>e@DyhC>5y(wK4-V&tL(R z+Dz*XCVnAtnU^;-2zTeqJ9zzHZ@zZtN^1hakC&hSEyH9NK^PmjLiYp(gx~0lCD9Ny z7QVR?dCfCx#Ip9qBXj;I+Rt7pZ^|D&_a%Bdm$($XmsHY4?7G#KmDpYG6VshWOv83e zDIyljn4g34(9X+xYem2)={$K+_JFE*%$9bu>t%;HpsINLwl{eET5#lV?xa1u+p#XP z=D9M;KCb%?P_f1FDObZ4lLGr4Eeq}rgTc=&I~V7pZ;7;99VU`U9-Tot+W!UZivTTh z6olSdpMO6{`z~Y_OH!DB@s@24{mKq}GP1HCofq>nOuH=|2AQ9~eEG6IH=8k+MChU+ zjgeLcscEn#{oY37tylpB*=8L3BX`{OgLmGQ9^8uT#yd4m18&qsa#@dahlJZV3%A5^QXvT$k0 zis{a=M7Nt^k5U@d25INrgK8bU793_9C+Zya#mU86A7h`r^8F0#wnu^7Z_I_3DNj9^icU-gJM0bH@`dZwnH}t65ER`R3R6DK-_So0*=n!%a(R*xF|44w|w4u{D;xpf%&di}1BxIUd^w z>X=>m%CAW2m(JJjX=DYuL>AC#g{?13R?r}`0xfHo>XzlQIt&cLpO=-DjYK4cIG!44&&YB`7yxknaLT_k(Ka$nj!V#_JmP_Bolz+5DcKiUyvs zi3w+Su}n2}xDBYbda|;rN-4`&%bc(MZtiXH-bG}eyErHOt-*7AitVCYbN}&v2?u#= z&n{VHU)niTUs}L>nTfE09YbQ}cAgiS@z#m{?NZ!QX3QxbA}E={CA(wrv)F0|z9Zqw z9M<1Bp1P(*3}9UQGM4Yk)O36)Go6=7nGvXj-Nsl@Jrh9Lz0GD$X)(BC-vWp4Ef#q_ zBasFwCC@A1SVv=wEgJ1S8$RU*E`}mcEH8yr!LFAL!gLkv9gI(XCE`pIn-SO-q(#=C z#rv$*6Ub(ggJNF|49B`m8t{WBsWzm&f#F#L<|0aN)7u~-jQtS5%{6G zCRE{^nEu$j!m~H9tLoozRsGe-Y*D?yr66mW8Hr8SA8N5KaQ;Ygb@cQ5hLUU1+!-Ho z58nDfx^#00afZc-=qajQ&E`Zr$LB=6dT}Q6>42p5O)U44z*xV8ed*bR3QVP9v@?!X z!pr*d2u;B|_}RAG40|6Ola&(ZW~eC~S6~i#%1nB}9(%{C-ZX43nRO}blW64S z*JFn>Bx$yCz|WrH(^DiBjW7y`SPDGX`Fv(+5L3?_^g8m#z1rOZ{Swc%Y9~c2TYrlK z)wIDx`#(RM(qiYyT9*Am+1fK>i#|g+hF_f9qG?dV&PnjujLWMBT(iC~ZsdZ#McL{n zk%O2%s_+UrwBz~Ervn#lb9qt8($6#169=6TCzN2H_bOGvj^1nF^MRSO9E}ANm#0%} z_E`-3VpNQi4|PTH#c?=8cC&Ev3Gm4$T~7FjxX_)WvCC0`eazKM>Ce95Q-||9r2K#i zvh>to2c_0Zq)lk+W%k3%2$&99N+N*El?rB6WAGo2l{6Y}5AVJ zk`hXY?cDIBlBC>+Lhv3=`E#gxsng4u*`)@zyUxyKOCLP4u;noRm|i9i-2Z!W$1!;8 zK0f^)VxLak_;~ageo;bgULkssH5BU2aDP{_XSVjWIt!Owumb&@KAQemaLtkp~oN-*47QyogNBd;En9-yT9kdc&|}(y_DdO&_8{P8*Ql;;cjLG)pFLxAEZg#{g=o8Jjr;erZH7U(p~USMrrr6A zI$iusqPv?C>_OfD8;!Y2KVH+7J1LCUuUC+_t_nChqSdLRgO&&7HVXHst`3Tyo1DAlSsrKMDn9sh49$cG0Bs%7bkvG)x=2V$x3)UbX|~ zLz0|dbjr43cz1*pZKq)1;LtT_g9|+_Vf~Fx`9|-%K`Lv7{h!>F`y@&<8@BXG_=NU4 zl@pBHfp5iqL@)}05J&d;P<6|A!Aim$f`P`l8VJGT*}E9qD{V95nPAKIZ-DAel#2-8 znUpHS#C~H6&yLFG#w#dxMf$*0P+Iu$?FPB&*5{&+rz;~~=QqwHEGsb8`9LeqB@p6n z%{XN@*VLI@m|Ko2pHJuNN^4%uurW`c3*9*n$eP01&Nr-mN?v9#f7cGD`@UIU1s{{Y)z`r{1|FsT4fYbDJfrg36Nc7iI>74-qs%0d@#&;(I zE=P@>{-I^FBz^ek(HP`nCt+D*u*`eJ#*->6%q4$z_L~kYNTg-&{3IeO9+tz)$9J%} zq$H-Jx!LM4aKEl%P=0>ajo{AqIW?E4m-8dym1>dUWTe-AcP7zRRqmBEaA$d{h!l~* z^(1DOvU0+cIQR_C8G*})_L0)i3)^X_hLCxb_CC^ITfOp2fsFSPO$+A;f-W8(Tu zb6l+uO&Hx=512k`g`1%ib4XC%;x=(U9fz&3Md0qsg%S+s6~n9ghh4A*chF>AIc9EJ zxA7A4ymwiuI#SbAr@q|O^0<#)+xC&gd^=C>D1;#!TqoneQj^V{6vvs1E5%wTQs2L}143Qw?TE?#iQkSlL-?)6 z<6%j2(a}pb;B%GnJ_)60vn*u4#L~6J)KZL{flt`T%>Ciwn~LZ?%`+0jX3(Gobkn!V zO%Je(PkRqR0XLC-I{@Y~e!m9e)R$o!I$(dd2Bs1QP?l>EZDp9`tBu^x<{aJ(Vq!h1 zHGbfFbZ|Le`Xt$tIlcQCzWr#^jKql8HKeA)nZ1qn^|CnoR`+x6aZS`!utg{E z4dKMR4=-X@S+;T);)0EJ#}4U0j3p~Vq|$KA3>F1ik> zgPyS61mQ*0ZT(&A*JpKF`Jt|Dg(oBB(_6Nl>>c=OQ-J({F8+KH{jPvHuT-ZYDll6+ z+)H1zep?leRh2d%*$Z~#-dR02Avh~se#S-PY<8ai`K#zWMzEMZ8J!D7oHz;h&;FF8 z&yRxij8ol+1cEO@Ju&(g*$)7pSh^u~Xr@yE z?uV61k@`3Zkd~B7RZSx^myXGr#w>~AAka1wuB4TwQ*ZJ)D65yV@C@p_jl{#YN4cc~ z^-;HNa$j)4Z*JS64A%3j2VwfSP|s_r`Z(5rTVYBQVGPllT?1mAS-0&g>h0(hj=5z= zxhrXn;zA+7qQA(&wfgOjQL$?mP1(Qszyh@!Qe6@7?NK4te7M1h7ZYKxIJD#K`_qu# zusHj><2OVtxn>QEZhuKw#rpPd=2}Mq96N#YbuuvV>Ao(H42PmuPFUkNAe zi+eh-h0Qs;v<7B=@eA0hn){@!J%iyR+48mT5ub5A;ugbjB`)pi-6J&jG<~k6UAOm0 zVQ86gLOk)@d$*Vy&pgFBTeH*mJY#mYypacACXO{mF;hJOcj*JVHM2_)nV! zOgfJB_KUDutioYN18*3$%31w4Fu!*U{3gr|9&9s`^9p{^H>m;8d1adpj`d)?8-FRr zEnSD90>j|urnDW%?gN_r>rdH%y+rc#^4&^ng)0|LEi!1=anhQO-2`37yRoa9sJgX~ zXWcm_4&T~(a7nq-EGS5fK~j=anR%Bx*h2_AXmm1h{qd2cxRy?LA8&TK=ZT304cFsh zW1q9j1t~UR)S_l%zGHKOAvbwo_`TzAgMs7IIXXI8$8sVr!Npa|9c)bS_ZLhDRA3gC z`M9{Ynno(5zrX(;DR-urx%<7{1xAxZ0(rv$Yg@DoBZXt#AC+BNSpWGO@DkucHGoLo ztcv6aBjfdnFj=LxVh3h6_@@s#SuCq~C=0+wHCwwES@+*6kTgc1-oY8RbN5PGd(wTn z_{9v_eznuR)u1+s6i^A>tS#M*Oq=Z00w1|l=%%Z92j6~zY8sM8aSoE@Q#<8Gm zaH}nXiwk$ZCbYxQ`kQRjqJ#Cf_KzJ*lTs=Bb#h3ReqXI~UyK7J_}fxSgHFO?sE_QZ z{Q#y>EN;#pes?&z3pQhS#?LNzt~qzI&L7@dVwwQZJnzzZRb-!O%#nUEPHfp!pI8dcr#Q>KYgD?I(ZW z8M8i@a+EBQX; zHq_OeCA$sdfJDAKH|CK=`J1$8S!!LIR&I8&15UIFjG=bC`|C$8O$D9KM@=T(=!!bAm_G6NssGXI_dt0&28hoF`TMm8$?`q64 zXvC61fajiWCBP1Q?!jMt^@sPAV>0?|4|(%-ZFxBe;GR;fGTm=xUFr2;r&5?+eENt;WGEWJcpbfVHQxu4V; z$fX?b92W<0J5MU_{rfc>G;&*=TwPtGUNsCps(J3$>x1Z->aTI_tBS#g-xGZsTvX&6 zquz3(({XVqtODZOfXXd^oT`_?=)+3t?^peuf&0uO*6rt zE2M04OKCXaH~`|USPU=r7~nEGO^Ev~76FvQtO%wBBMRq4KiB^+A%0cTxdMXs06I%$ z?WxX!z79s0RqmNGDK&ngE0VBqkA1A?+W=(Qi$@d2h zm?~4}T(3HTdKi-G>BBVl%=VRo1i=vV?jln2<2An79lSSB_z8p~N^ve4Nj*ixi*JE^ z%FMD>>1g!dnD=2;s4n7I2{tvE5=aQH!r13Vk)9}jKnponrS3r@IRv#2RV2WvW1Q0R#;2uUr1rqHZ1$-on)67hX}I}e* zO(DGn{LwfIV+JTrJE#5{hi^@6pb;T$`m|EaYk6w_GR$@kdI8Y?di3-~fVbwItlAET zA2_1v8lPRt>0{6o1KJNxotQsl?TN}>$3!`26YxWt5P9#sR+BfZC2mA@Z!6H-DEE6a zcr#?-DyBEnoYM9nSDU@w4n1b=$yul{)FtxH+_q2RsPv8)TMC3RD4g&p6&e###DPfYwUMBSTBph8vLw*KZ7*n!o zpG4$!Te8n+nQ80O74vr6Htf~7D8#{0pA z4%#+$+D%u6*0IeCJw$1K;1550D}uove)Ggp zeO{DV;qAI~oG7Mz)Nrz7UVQFED~TVKETGfKItNz7d5qdJSV=hwUk>3y{bZKMC&F48 zQ*^q;KK%u}>(t8C9Y7n(^tb+o><8@!YCm2_ z-DroN0#FOn{cu@d z>T^a0{X_>A*4WgT-`dg8=f3F#nmUh$;v;^aJNdg{;1Seuj_c80i2!kR=R3P3v2o_t ze&YCS*Lx9j&i6JG8AfJH&5p9kUuI5#IH1qIRXAbB-Sl2pZ!Q-vtOWe*E|`Q;gWgl~(ZG6`tQXpwv_|{``-!6*mT2 zhxuapaIIVSq=9H@9{->Ypw!s+T{1GST}|)#R=H+Ja4RBO%PNbI%aR5Jk4Qe)89L# z{UFR^G>hYpI#PQS%vgu9*`f7Ei$4N?`$eCph`EZJZPp4#z^a4nb88($9aaSGOcukY zjCwUb5R5-~yRLGz=Ab2YcJoUV1wX6!BO<|$t+Mj{&@kU# z6C78t-4Uh9c&5GsZe*qU=Rqx<2D)DJgNHnN`JqX^jeQ|+XJ6?Atw%CGe>OTZvKL{K zOeeN5ysR*z={5Gwb; zM0}i6fPn8g=38C7H5Z_m);qZwifGQ!e{7GeG2-E1(>PB3+F)JY{a|IGI-42j$zS+= zLHF+yG#|;}#TuQN3E|wf^yQ0IP%3FEtRmwTVJ7H-uI{;PlGNnGi5TZUH=79URd`GD zwaL1-6WXgZYN;t5#*U5$tgNSfctu46qbETx|eRw7q3d`lE}Cb~S`0Xnz)YXdz1AcqH6VcAS1z6FT6Y=vzR)|L>b;=! z%RSk7?d>z&i>8A@3{su#7Zti8r*wu~L^6`(X<8=h5*1{y{Xu#{LA zc_}3FMXJ0hvWffqw-4`hypBOpOGUa{v^U9O2w5t9sNpdmIkCN9?-rg&+d|gU-+#10 zR~?Dqbe&8{iy<%Mr@q{YSpd3>9ZPyWmg9s?F6R~AJMkSHdk&-_ki;J}~eI>=u*eHt**CQL5xw77qrqH&5T*PZr5;Le6&b>kYrAP0Jgu zi!4~AqEa8${BoZ}V4qa-MEAcJ1_wSndLfJunI`j>E&T5TzXC3di2RVDeQWK@8$g@7 zTf#R=6T`c(`HQJmL53;ZOrIt06{I@Yrf$Hei1^XzccC_8SD4mtd_*y8N9g&qvzsy?FBIe2A(CcnD6`l4+2 z9g52L`(Q&#z@oI>Gd8;}K}Q=fPCRQPr4_zn7-k};J}HJH^HUE~XQYH2xlqh`Ka z3S=SkJ z7&zXF459+0wXE-D77|2T*sxL}30PCzU{A1`Om_HVYk_C)>ydK-Z1#lg;Pbqh>oR_$ z47Nk-2fCUY^k`kz-(3DN^zA|S_X^AoCYdl+(heG?=Me!F-4U=lv~&n#5s{IRvD+PC zMar|cq`caHA5lmeB=FJEF|xqlfZ0FrlA2P>v@fpRv$GS)p2MSr zpj|%vc*G9wIh15ktAxjKe-y!HPvFsaKh2W49whz-1%|!&K#!uKy(c%X2|ewb z-(Ap~vHg2|DWHSoaLkczo{JMU+g zGZzVo1ry9ZVUb93VI~?|8Ig#c!-PNYQGaU=;=0Rd15Jt z8HJA&7w^5DFt;#m5mhMgHn^-zhgIt6FMk zZOl8@Jkv9!FXlt@89W*S10;fGZeExGR*bJtd-z z8CUVH#-ZRW8uqR&^c?~ETwMpJL_JOen$j8!*SE^*o1G~#094huSeNA66xI^Gt7pbx=N@fII&C5&QALne@O z!q3l-S3p2@ym(|p2e7ut0q#$-OAXn<2>rmn+ivH<2r)Lf(z(0{#D9&bYWLA*b4|zX zSE*Fr5UB70Obq~UdKR`g`8;iZ2e};De9?8=eX<2@EqG*(UhqHQE5>E@*hW0*xS=Ph z^FqMEWzy`kU?(4+*7+CnZqX$B(MA)HO5)2>mA$$zY)7vJa2mkvnIGnseo{f8PIuhd ztvfoZLNjR%D3`%^)&q{e*T5{jYw&MZac;nB4S{gyG3!JR5lgxHY&j4xt()8rv0=fF z_{%aM)&^yXqBLFgc5d;7DSJ;+pF|%y>C9|x{F!49vG$dNB&`35IXyfO}yKL>H%<`lHJ4np~%)UBiYoGS% zyt~RYs~K1e;_{FL6e^~nZul#mUiwa>akg^>B^WE z$OThoj#;5khL?jB0@%BAxcieYhKMY>5brt>7Gr@O9i(y+94`zS_l4D*7E)(OhWt+M zMo=Vn;Z=lX06a;u$qw>L@T`Vnt9inPIruwS;S5=tEo%(-Ua?P!*Bj&h5{k{Yg#m<- zyQ(MYfq-2AP1DCNb8M?}4QsZF$<`k8dZ@c%eMWp+RSZDVvj;f!0l&4nHSHQevtKId zx7C}bfi)I#NOv_D`_QJubz&GxEfqN4bL0uQ_q+YqBrc^ClIpQ?J$b(;@p>|N^UYx# zD+0C37DnImhH^dRM$Lf0bYfmPW=l&1_D)>L1+FN-X@!P_zu2gw2^3{BpS7pk{oYlM zYrEc9z4qvjey69;B#rfwZy?X#EKAh~*&JNm0IhRaZwFi4+;02~u;-QhegOZXCtvaw`Se8-^V7tB9H+#`Z8H)lKRUYtZ3eE4 zJ!;ObX9gwcwpG!We!8(1l3j2A<`SvWc~!`j-QPUcZJXMojuuWtDYunNg2p{oCW)TB zXZPh3mT3w)`aar_3lgFG7#VDT%Ie`mHW90-&r=TL=0EbCW^6GU0*lzuCb0x?2FV-8 zEQ}M{vn&ycxmOq}+<}wzCB$9Dg*Kzj4M^I3t2F6;2`%KZY6XVC5Xc<>7n*79TAJ$a z6B`+0ff6Oml_WHn*dyEJCc-A51)G6RXfK&0T)~4=WG>%pbRK*Q_@3c*6=oUw6nPUGV%lK}%4O2DPV8CXE$ znN2eU;7KjyvrY`ima`S@oPXRQ_0T;9WG-lkiddtqSJrg&f@ajJmKB2FNfP)9CEz@Z zYfZ&L$bX8X&4dMW!&U9emBFI``QQEUQ{p0&@S=dFzo>EG(H)$a{s18OLy0hkv+rEX z6<82#h<`zi2Tqrv)4PA?j*Ftq22!x*W5K|YMff(Nr-Fq3PRVXg_|}43=q@N*PBv|L z)-HAX)LHI5-|ZDw@USzYs96M14XtYzT*($q$9~{5!CFSZM;91jGZ1gK34x_(OY`p8 z?0xH2cY`ttV-saL5&JwwSVb%zsjoW_)T*ih9YPT^Ah>qW zNWFLU`u%P~HqUXpR`NZMcYlv4;uR9QyYNFv$-t#19(gL8S%`cW{^zFpz#Tofrb>bQ zuy!yi)4B`fjbh^ioTy~vn5p5pW~W}e9#kGnD8)|sI_{;={|)UqZUK@*@P61&{-O|s z3;6jq{(UOJJ1=hB)6wAs2|G_II?OK*4t&1}u8pIF+}Ke{_u7s9QwRA0yB^9%l8L&> zP(!k%4ixX0g>a*x+7A%^{a(cS6Fjh^rDYdL=Wz&#Z@%A#hf)f;jnbcm5Gq6az`*sl zJs_x^GBqTc}OZMzBCJGhOCbBPO-}ik) zmh7^x6S6a78QYARdCyCxbo1QL^L#$<@BQcf!zYbvuIoIH{XCBEaa>f2{t|EKmoSY@ z?Ck8&+%yrSzL1xa%z?DhZ$A(8$t*iRl6?}mWZ z5jxDPbI$%G`^6JCPc0%q64Ii-`75Z)+(}9`H#hglkGCtS3ih4)P9|v#TkQVN&-@>T zYyQh+>n0Bdwp}tlEOat2Wj$hJwYNj4kkcJm6a(Q2_e7aM-FveN?I0Q0El*3t^{8Vo zUpBS~Yqx##76?90&?o4w%Gxw^2p1N5M73mp%C#14!O~E&M|yoI9jMem<+o)r4haWC zz(xj71aDN~`I83Epur#?T^f0Q%4b*s(7kGAb#|)w{=r=-ZkKD}lw4SyN}v*()YhogPCvlLz8BeztGxt!pvHqE+w=b9-|81!HUTRGdyIXv<_3Q(fhzt-AS%7y zdO70D+2mEh(k-WxYbB!atUe@peDe)~`B|C{>%+gf>PW!Zvvq37dKQIiJ^0J3NC z%caa7023=6fG|RlZjK8$H#_Gk+y8EkB&a2z9zTg*P0bhUfE}^bg{F-x|0G&O5&5}y3t&4z>n6$N{cI;&u2mRRNSHBgvAe{>N%y^)Cm z^B4&u*7oCx<~A+go8%EYaLeB(lR}!l{^!R)4x?hvw!+mFy90kh*-g`Rb0bH8fXl_a zh`Hlk#_Bh_)PVLfJ z`_1Bp9T3aR3+ED(yokTH6I6ZmKW}Fd+74`=1hvzJ7f|iTUqa#=Q|)_TGI|da4E;#w z3C?-A3jq4&iia)#bK>iND-6T@B}G|!AC0STd$@>ik}nZM*b}9OEmnv3Y^Y&Bsr0{$ zF#eYdauddhj4d5NuMx_NvxLkw*rqqdA#*T_AfmpvpX*Q#ZjT!?n9LD z<^Fb6)TX2Sy_ctn#`Xiu_ii1YX;pHiIh3cNdj&gOm8 zhP`t-uGIY?u(w+ia``nJYvn5v@2!qf-cX2sN=1X#CRg%gOX$4&Pq{bz3p|%;xO$Xtt27 zdd~-Jc;<4s$}|$(##|?{u$-o@nLbo!F)4`P$(Q{v_EQAyrz?AY)n!-40=nH0yPUq^ z3LB(c`0GW*610%F#tu^Xqc}*r;l+P$hY4&4N6w^9Yu^QJr~OpGhMvV`>-L%eLGIHU zIh-}xDMwDL<%lFm#)^z!Fldf$U?<#q9Bn;V#Iigz^KAvg7=<=+GJl$-9|}?p2%o|T zxm9Ya(<#vr?Ck73K+eMLZPBbT>R?9&!Jx%!ombsdncefRqT?2?8?$B>ex3sT+bjOA#s)87TbLgNUUFtu;bmO znZc|3E|*+s&#+WHiVT!klr z^blF_tPa;d?=2Z5<9$t!Xsn@U#ie4bfX@pIZX2f?h|uu6&&$sX0DW9p-*QAOboflV z-iK<3*&<&*I(MJ9k~k;*K*Pkl*XK|bfPtT=pc^HP{E{$;7iuCPC!vY1O=p z?Ss$QeY|?LgMHtbdiJ6x*k;M*%g%k}-s7dD1q|EPZ3`T8*Eqa9Z@r$FeF^ZN*NjEA z-o4NZ^+Bi{bnKb5f8E2IlBEBcB0g~+POE;NJ{BJ1aF@L7(6|sebbNdeOH`n0)5)3{&+J8m;Ok5sGh{Am0j zq>_?zhY4hGN4z_i3+0V9nwMQ2b=(%Ms>?iK9Pz`rS{=RT5`$;X_Bp_PEImz%1=$h&LF#nG$%b~Z@G~3*T{sUa!;{pOCku1d^OH1ieYPB6?I-@ zLHizLl3ysZ7c+QdqNM^_v$vuwZX_>1egvu322*wH$^p3KBm<3)a%t}~I*AHN@U(f8 z?L5M~*cU~@IS4R2(j;}k$Qwv@z7$E21wNMT*>>6)@j!$iImxoG>-+JfNqYrE6m;i; zp|KW@OBBi7c(yaV4;p1P?S@ChNJw%-9j>6N{-80byF@^ckjlBZuvqRxVt;yUvE=$7QL^Yr+AsTJ;>c}ZjqQh(#;U(P9EealPIQtO=+D^}x|`J+-#8$7 z)yb-@$c^qII9a#n=w1}D_%8L#JWqA>Op5uDZcC!6ZdX=+;Ah$x<-PG*W*SPuaY~UP zmI_Ad-kid`V=6o>uua=Kc)S4w{*$2kB%vgSbMkZ5?5O3@5pC6Y`{$Ml6AI%R#(+V| zmal0KC)o4^&&>^sbAkB}TD?B7a_PMKwACf6nQ8psd^RA?MS2wX>5GFBk6M|HBCt0R z2MmL9TSc|D3-~no#!8nj9c?x>cHBsj&I>RpnuY6GsH=vRW6UW^7n} zMYVo#hUsfGi|oD@#|#61sW}7_)bUj^O`PRCPkDo7wrkBf;Ahb7w!{W=B@fts7onRK z=MC6n$m+qB3FPaw9`6-RJ34|vmT`H`ZhU>W1Q#_RIw=#T)_|Iy=m?L_&!5tpP8OSF zJG_&)fP+7pd1=q9*6Jl=j_c;LDzEtwYlrLD=kDS0c1iz6P0%@hd|hy$fbPim&kYz% zDDZU=`O#w5(%J+TW8^ez`5(fBXBA~d zNFsP!BDpOm22FRZLVB6o=1IBq$(vMLU%roe=Ps^^=MRI*p()=zS z$E8q4yZRq{1>cyvG!>pN1U@i{XzAVMQa^<(81d=#5xtXzRe~LY?b~PWVcFQy!g51w zGF%tyzi=Ww#@g2QGR|eEer!N$UrMY*<_N6w2o}5i?Z9I@TJY z-Z{6~m;@y7#lF|t_<6sbRK2dDt>??7ojgJ)aZqyjNc#z_saTKGwxIH{QuvDjX&V2X zWw{8gOBl!T7rhGykUt2sW)+@|W>xrXynQMML96%k2+_g8{s3&>IL)xa9PuD*uFFPD ztJ%BlAgaC~nnM+V!$jK@T*-?Y1A+!^bRgoGTnkNIWZYhF^`n?!g-;cpn-$1+b-GC( zs@$w1HNGXB$^AI$TmURpl}hL^H8{TnxwFVC9uJoXOP6bR5`41iwKqI5${M&FY=kj5 z<8&DqW*-fESEpEieKQp!BXKtGXz{6|WSS0XPbT-p>-?KHZ`Lh!_wLK;!fi(vOsn(_ z3oqa8p8P`BmQcvw?Ffp? zV-=_I*Tzr(wG1$1LJh>gi7nb{tC0H)7Z3w8TSsXAI+v{ZMMsTJd?Y5a)UqP^mTjsGGXKLjnM zQC@8|q|JB@EyX5E^XLZj)al#-gxOt2awh1-Q8L;AtL;8p=SX;}0fnKxv-LPSG_fb~ zes(&RY}5C$s~XOo@47Mkb`3G4j@W@Elziacn13E%Vx7zoBkZ1qq9Yyln>T1Jkw`?JGC0v}`@WozDmvvebI{JdFoDtU6)*t7WCS*bwd#Bt{vcB>k zzqhKJ)0sOpx!o5|{YeJ%|LR=y3I)z}%L}iWR?Vd;bZ*sWc>vz|xJDROGba8*n`Bt# z!Yr1jIo|hRe4G|H_dR33{Z3QpbxA!E>)98tozIo|92D){jgywH9yoaLDv#m@{G{ez zR{!+B>4$gmCSW_i&a; z&l@h4|F>7*R_t|C8Bn*`eKw_vEwwE(NII(!Jvn4Uzbx!te)+D3|f#Nv)r10}`n)at&A-)-Mckl&HcvECe4hD+fJmUQcaa?hE3I0@Ox zVkNqr3~W2|?IvkKR24WDJ@2%U;Qki;N;e?yym{x@e=fyk^!SkxMDU}oB5KI?dx>7O zHK7<-p5vp-2Be>fIvST?u`Fp_3Q6GiRljddr670{*d(x}(VBi;xx2I=Lg}QuR0C?}wCU=2 z{3EZf0>Rq%_S$+vm>z3rY~1tyv?gmmnsw#RVL`>ky%M?$*q%YAQyW&oe)$ZkE=WL4 z+d9wu+|-d|uqlVhgOk)4=r<({pGwKs2l1JcT`!w-3PIctliLDf+tT;7%w2ls6I<8G z(yymLzoda6#lY$o6{Eyw1RnJEveCu$8{#>_hoD`ulhH*ntSpKzq&O=vu(Y9}!Cv|F zf7p&X6bdQZbsk*h5hLK4dbnT4>p#{4FEt!4$j~za3(J}8y&j$WLpChgTwy;RSEU*+-~laT26)8K zY}Q8BpKJU#PdLN_{HCF97qw#zQXs#_{%e!VKlfy449sg5R!a;dI9;v+OCKt5jd?x$ zehacxm^4I{kC6haEhUC*;12Vn*B#dv>~BIbOy2855SMnlhM`sdIVfzB15%qem$Rx` zTLO5&Ch)us|5~?Ims9(}N-vnmgUW~t6O`lZt821eciCE*8r!=YpX^ynRRI?QV8M8H z`pLD|tnfo>9FhX9P@^;8PXR~45_a0u|6{6CiXYr7Fcz1)>M)H?0RzI5-*aOfKcf;K zhfy*nABln2leq){IvV%i+Ninb*P>j6Kmx@4$&C!UpOP+R3@z?9%81%j`r1 zh73#r8DwFAC!^n*=Krzn$3+2LrLY4@9fgI3y5L|u`Q=Tg zUteEeik*&md#07jgAY*UP<9)%rH1PH^~$(r9WJS0q4xx3sg#eB0wP8GN@9H%uaw!A zlY8+#o5@HdGPlDo*02(sj!QtwIjTQad>dfE!xKQ!;;{_}{!y&{{s5f>z~MXeP3sNQ zB=1f026SX3`(cM4uaA<&dRV)%%^64}Qj=-+BmgxvX@I2$p#L=?`HTDOe{nGa`56Sg zSP$>&4r?LPk%Ts&D*A7W>#yeW=n1)}r$_hen-hv%?Lp#QAOl{SW!m-d+o4*($l_+m zt9qv!toN#GS&sk|T^gn1S-mRiIoP1UsA2wkmAJV(MtB6%)U*$z@Wpu;w{6{8(we9q zJy_Ibv}sFJGWZ^T($R6FH}g@2LMIP66#2H0Y|N^-HvyRryo`HJ717^h4LEXSL|cqt z%|Jj5ewE(|WQQgP2+h=BvQwh%C1Y^Bd zksu3=V+l4TU`nsuNnN zNE`wKF9K+TWLmx`E9HWe$kvE)tm8u`P%luxcOEj2YJ^gM)A(w5U{x6Ea17-eEO|S> zLG5Xb|C?`UhhDnKh5JIj?`~ixqF31-u4kromKA1VA z-jQ=4UZKl+Y?iLVv*xjP5w@=T6)mGmlDH^=^@?4Z^Y(7bJjY zV`%vfzPMf=DRc?LkNFUZ`w)7dkWKKA_LQWl`z{v66Kw+#+>b(STl|-$dwZjK&iS0> zEiXuklZ~p6v=v&mB6G=csRfNM7zOfyRJ5lSt3K67d&4T3@QD3}lKb(P*U4ch>!WQw zg7ceu^Jn(qeQw04B&mI{zPs!;B2KgG_GxV+qU4d+Z`R#vmNpAHRPsIeFhHr@pj(7D!t{wqf4Y8cIylN=+6 zdBU+G1GP-x&#FSzf-gCo^D*~9u}wNY2OG}(JhzDR_E*U^P;gih z^|{6Z|5;m*N9@+q&|}+CCg|;X*GFy0%Tq1m#dub$L$d`Q*(vtIF6_A#j~(lv{p+Qc zHx$b~l(6n_v9y<7AngxQ%KpOx(ke$ACdA|3lMkyeG%$o`ROYnr(bP7n0XfBKZw|-3 zb(!ZxwFK^IY$tHQY4)v}5trCKz7{{);$_V7KU4{}!hd@&GK_gdE zAO$J|bl>Y3o>@s_*YUz!EfqX(TlO^DWQU>7G>BN$9)L34*3YD=w7a}riJnj&3VYA1 zdCPw6<;#~T#=~_f4%Jx^QTwq=j6BBW?BxE7Dk=su&2~LD@_0{?rCfg8nTo@~8Kydz zA`6_v!U@O#7MZBtX%I#jmAlgimVic`H%t2RLH7OApo)9>LJn!(smH~7Y39>aqOFOK zWMyZ;2~fQQnOPJAsGN0`nHPh9mde zumbQ2$&VLBy42cwK)I{e?33jlG>?sXQV}S}>LG)DTa9xE%F4YJUh3G5nhBUXPuOHz zDyR#CdT_0=$z(HBIIiZ$S_7-zkF%`6Ts(yAwrRsl`s~HCAx|t)2cq~Nb9r!{(x`v9 zYTA!sR+xVT(JA>Wbo}j?x9b6&s*h08i2iV%LLx4B@Yjh)=bXPk1Zw(>l9b%~3vEJ77Q9NW3Z;-Uz zuMoFc`aZ4@-_!RTWTh2U#rgM=l&nUDwvZHMX}4#50?7q++xXyrJX7f$2EnbR#cAqA z0vEu+X-{0%`WWk#3b?YyMF@kzkvXh2LtzDE5h@5*T`a?;Q3zoiY~=R*(wg0rc-mQ=iOej0-o*KnMib4#Ox+gsVU@>2>7bHh-3JPvL$_Le#%5L+427x-bQ3ac?p;*Dp?dWpUhz2k>m7_I%>~HC81J4L5Z?D07?r z+$to8eBK75XT~wxVH%6`Q?A1lIr~XO5!We9dNd*kS;uyA)@rC`2O=NK5f0+jQ~U7p zoU*&up6vfU4W$kOc{``EhKf)rRz>o=V;U3j===@oe?f&~OE8 z;qq9g(7Ihp^=_Hjjn^)6QiZ&XasZi3wiph`R2~=1yTJd14AO%P20;!tS~L@cM^K;D zd-sQsCT8DGVt^*u_rKkR*?mN7Dn8Je6^QPK<~{#MR1NDmPwCCIDjf`6y5!GHs-0=i zu~f`id}AjlIEAS@PpKe{-YX?y?2NuKg06x-U4tMNcXxN%`|^&RiY56N2g@|^5I~Q9 zzKda|kj`WoPaarD3F-k0Qf?@##a+xvZI%|e2KcIwmPNJmR4VU2@=C@Kjp&#PDi_WDHFpbmK72r;&ZX` zyCiygq^oI2o+3574b=f}vnJKV{t+=MMFXy)<$FOrC3=HgkNLZV$@K}`9|}k0&r{UR zmgI7l-m7z+m00{-;Vu(Qsw|nQ?xlRTm}^1A+{u1T7jW?Gro_$ESpfLtENu$mGlPfx zGBJ8=7onny(y4;pe?z=)@qxVWY1sdfWI#);NA)2}7(z93a&T~PpC3Ahw`14^P6h@Kb0jfex3%U&-&OfX7jE&6gx>T&($ESys-8mIf9%nhG;4oJ-yQnh$J1bHdC>2jbs&{Da=qsV?Rq~yFukO50Yr$PuB~eA* z4IGu)nu@+^49Bqh?Bocta00q`Z*dZ57F;9O1!gz>GmMt1IkKR7fhu__M6LA2K$cSo zo=FwY-^NW%Jq&;ZQs*rhB!z;k>N@)HO*gLhh1zzWas%Ak@4b@vx&rQY!Rhw;y-=SA z`4$?W`syi70;}0XLsOs;tyo0j`n*t#To~gM^1x)D9U7^un+hEEwfBH-VYc8KowW(8 zK;GXJTl191QpO;wmu*WilK5$18e9S0dD@Kv*5_DmWkuLP1{_J#*xwdkQ zZ8Z;iN3vsSV0ywWE0*(=fUgN4LCOq*lI-&woiytl{aU;H07^(dzrH$`?s4%Kz(Ec( z!_`FZ+EpjAzlsh+oy!DM3*0>64k|;%Xz*X@`(QWzIUuX{h2HcZk=ib;kUdN!e^Xlx zMCgGB=nC66xoPcsRy@6wzDvP2(g4fzQZgJ>7GD}dCdUy^jA;8_fi}|&;y-OzpzrUX zU=7!((r%~=$jgKkms=G*HATQ9L84szdiIU&t5j^DKpJRPH27Xm<_2Oi!=lqDdjF6% zr99g`&|I?Mbga@@a2VTk7iyt+3ni$pz7pD~6#R=|Qq>UoWmSw;$J#aU0vVnB_ICcs zuS=-E9PyL_xsFgu3F;}g8Pxo4*k$moL!Xt_ ztEi!oi}*H@<8U3lpEen%iw!y_$V^9Qlhucq;00n&1h3C3e22P~HBmdn)QoVT3Cy-} znyWfA1L{GcIC7)tPYGCawaZt=N~;D$Z<7_PjjjEpv9_{RJ0))%#nkIOoqrNG?vh9k zAlixQ*+P0Q3D%1ZKbo`bZ!|Ra5-NS=y zsT=4?;z@W$)<j7pEEyZAt_u)xeKosNP2(b0nZMDCCn)t7Y&(_#Wu&N^I?6!xmV{S(d%Y zW%m(37Gz&C?e=YsS?H;{d12v4_YMV@dn$=LtsIBl0VdwV5u0n5(T)*<0dHBcD7w?fbu zM;p4_Jorhu261FcJ{hTer@aj(WY)c3axvWJ;fIqzSergZPOdMItra>$f`t3TfJo2-*7$lpug?+d)9}zYX015<_-zpXHtV2TCK^NHG_d9O1;a6lBFq zrQp$<7X3RaJcdcN+9&cw&z`-NA|hg)GPN*M?<}c$+YID3gRU(BCpp7Asl_#d!Ah7= z)<1R4C!B!3aKwRFub5iCgmTuhZ^s2|*~cYo zIw&u;B%AL5c>)VfwUNVz<{GO;c8v{NtzC55q$i7~ z07s$-G0LAa4ZYZadSqJ&sw@+Bj&f^M{O@wL{0Zg_r3E7 z(zr8hm)*+*kZZksXK#^5ZzqYLtO@3iZm7#CtbWf!U%`gbxKm)L3!RXlsEj_}4tF)t zY36JEMHxJLaXP_3lD#HGLd>KmkH=}jQ3cl0lVW+VJ)UQsXUkG!| zw3j~(-WwK+h}O(~c;CMAYJ6#ugkwp7SlgwO%q0;qwcPLFKArhu-Hw<%J>P+sjusN*a8b&e;n{rKDEVyf+L|HT}O!cW%&w5%Ln7#i+zYtX4>-$`hM7wR* z;q7gd3HMaxx1;TYAhdg~;pY|}9=>~_0=dwml8U&jq5;6VB7@Bymq;m`6JCV-ptFIN zczguGB~VDFCCDd}vsOFp)`{s){ysf2f>WkiVE?;7oK9_B*kIPN9HXHvF!Ddq{7Br3r_34zF|(3WJlsL?3FbNoT;PKTFcixN%CH~$J(mxieqGR>5K6%? z(}f>{Twio&8Jwm{W2Jp0hbN|T5J=gh)(G3aEAM6~XbMqtu>`d|+}>Y;AE%58>V9@z zg0y0PkCM*)qjw~;ZWUmK$>Zt(w%RR{B~mc^#`DDxcWw6`w#VMlLv3pq|8p$nj@oc7ThhHnX2-mkPLlGF!m%kYOo4qQAjrX zXAltfTD+U7f0c~`f!oK2o$HV4Qgt*SX;FVp zA$xHKNDv$07nUCsp&3NlgZK$-tqXLC7-w!N>4B6rY(`h zj%m~IRX4-_=8-lGrN5(I_QgDo?ewy%(_vaRWcOlqU`boja`}i!AI`7=WzyGMxEWxl zLOyctB5Kc*8Qeh;^7wu8{HfZj4an96)vFH6@pJdsrs=m9;RlmXO3Sd==-E%xX}_xR zx#4AYuK<_^XP=8xkv{FmvkrE(+IQ$}A^GuY?$w%3^V=WtAj1@tw-qQgJ3-%2q#Wn6 z_rg*{Hab0KqWzwV8;m?TOM5>RGtVMclJFtDWO-@!%_GW^Z?c;mBBo z`Z5&dPrWNc-(vIlA#C1zODWnq%KWqIit9XT&*o8wuv!`}>CDISDvg8lxYlw6n%)z} z!&QS?idS*hCXEg0?YsAcJUxqqJRg*M>gmz!>qa=LeS2@5R4D006vJF^Wfq%m6-I~e zcGgbUH(mS@jS#a{7#dwH{|gFFd|k2_u$#O zrrOO1&&Y5{KY8+`Z;Wl(ZV`=H7Mf_!K2Ggt-r#O31U&)dm3}`KTh|J$7Kkir5tbWO%Y8dH%(}u|_LV zol6zC%GdNX6;&W`2{b$)$eHn2>_zmkmc~61@W5S6MHZr2XA~@-715l_GOUUkfWNKt za(-=uPj##h;X6$Fc8isj-=J=LVW9`=)Y$jW;VD2XSp#kxUX+)Y#~bShUv=ENb>98+ z=gnW8(m9weX}`O{+URF)hXqx3A;)93o}|lc(|#!nlU>51U3fI8kZ8U-1apkE+=DzL z4rdsMAVWp=Y<}=#RS<(o8mx;v3_oj^W%>F8mvSR$;AmC?Jr5_7BB~N?SZ(<7u)T`S zWc@l&GSNn_6w^D2Q9x+?Q1i189G|nZgAPN8y3ioz>@(YMSCDVm5r|pLgKWfzLb0ib^tdC>Q$(!E zS)Lfier6gk$^M&!aqWeGl8H&XZq*!@;*qpeRP?bCiU(?HWa?=J#i-8+v9Ltp?B1}r^s+Z}@#bxyJ*iB?m0ZR;L=7eBVKGejP_&NLoh)nBaF%JTBaijaaNc#0F`Bmc%(blMK+7 zhX@5<>X{j=zNn4q3vAED)|qvTj00rI1oDhpI!Hu)Lbpriv7tyR^-y*$Z+AxFlqv22 z&&y56`Af>o^TYU1wV7=m=BQ!EuW8dKL*{A>o_d5htMx_w3#MUxwIdFW{7P5)gw~Yz=jaK+LrzUGXdYV3&em3IB4fZEw3i)gO z(@eV_P3-8~wAni3Bl|B08Mtdu-=DDUnjW{ExaVxW+074)FLR5)IpM~p5ELs@UBbC~ zNkowC*s0jIvUVHp$$@s!s4jV(i1QS@Lvv5#FpOyRS4;5hxaYUo82WMHA7lE(N$@e$ zLC`eW1@#JjN`~8B3LQ6%Lp^z001-6?5cOv#C9*RqV!`qlE1DKG!h~=`l!@~dxqo!p9wf}i?`ehj13+auP5M2V$ zp+RFS>jFcl_YCe#3ZTMX1pvehZTZDDa9_G(8 zPF{!IPPnI`^f5N?NZY`%VVBLq?y-cKxI0JZ+>yOz{>MkOQ*m)Te7tcxl%Yn)tk|rN zEk&H*n4T!Z05`{jXCh33Z60tvAsZlOYNj%xC371xs*@L;I^gl7j;7Ebm6u z*nIp{OR}c&9fD7?!+mi2Q0Rlb;zi~*kdJQh;kdPA%8d>|e_aA~W>YUv_i~?vDgOTzy<)5GpUQea) zhMbsxy$u(!K^`3mJwJKVSKkZj`Rs|L;>C3yf}y7<)!9&uQy&?f2xnHu!3`C(cXvoH8$72iJ1?Cch;dsixXiB%oYJofogIVnmZajhkYpAtalI~6b#~fnwrt#PD?TthJ)OV%QP*T&x{A}$ zOsp6@H|C~o&m4jQv)pQTt6Ce1)VO`liSFDvL5H(%Lqxy#V=6c{=EELAe#QpQ`lmHD z1SkWc%kqn#8Bj``j&q0t@za`ldfm)IN}UxE-T_8p;NUf6V?;(nYJiJpNA~dKd}#Sb z#Y$DG?5@bUvY^_!cf~Gf^;Sr8S%8Eb_6zNa@|Bjwa_OxfX_eI`k!qlj#iAOOGguB< zT0dx=*8X9?(syeKCYCy}RCvzts$Ta*Z#y;;+QO6M2f!x9HKI7JjAF)|xJ!*5;gRTy4mH#sNqDz=?K-A)hiRUI} z2ZtI@=RFD0(Hur~Sk3&B;vyszkpUd7ZO#t%Qr)H@9*^Nb@s_40mZ93f(2Tn}xZV<& z%iC2~CN-MV&gkul{I_kWC7>HvdRW2pO`Zb+VD;W4#fbtBeIFS{^_8)feQ_Y0Z%>IOi;|Jz{zM$y%%N*Aw_AEM4blXwb`29TznfDKK|`7 z63E$NVZEJ(6Q{N0ykD=PyvD65e6+-gm7I>5h(%);Ms*(f73E}uH=g!{xg~aGxh)h@ zFmHG=K<2}mZNMEp{H?kK+vE5K`HTZ}BJSaJ?oy9j@DVF1_YN%ic`^m3tRB*Msf;9H z8ej_i`J*`s2IZ3B@095Xe)Cq1?&US&0|n6@{NMzB0j05+Ww+lfiBI3M?5jZtN^7yu zBSg{+0j!&_TT)V8v*hjW7#h=~e2rl!g7^bRAGv#UsOa*>%CG zWu+It=g|rr2wP7Xh9&az&hMI_cf3|-ls12nee9f8bMga?W^uIbft4vUi1*2Etrj%4WKTmlfUGadVmIJjj#ZaE)xvL z&p@26XWdp|P#2`S{Q=<0f*bjaFslTF=9mp#Xmh*VYgJ#^cQ15N>DzYzik{xuyIhW< zwHmJDAqIWj_f9qlRNVT`)r+EU5+d0s0ve#=!_;Em@Z=>e6w=V$7sf23`>tz~AEXs1 z1AO^{Wo>7ENwg%=VgECETXymJGpNI?vmC%SaMBad*v#ZzNF*KW_69UNtq21LH<^qJ z-4}v?TERHP!99W+VrONoBc(?(W-XOc$d-^%c_)ss-)9i)aCs3RIx=sb(Bjatn;58M zzx~t?J#oS<;v4d?dc8GqhpfN|#`)Mh75P9-{H&n~NWI%a>E{L3EYxat4+~7bRojU} z>u0_+NCCUmX&Eg#LIGa-R1m2$otEAkl{=k}$rnvf%@+c3QY@&(Iyv?EwG6n0F5?YK z0|brVvIJadpiKKXnk+^lmPsX9yAF%&CKF{4JM1oZ^`_l7-hUHuhm-C3UhKt-9w_hp z_;~JuJ{yXE#xMt>@T7)g&z!Esl$6NQkCwiJ!;*y-rLOjcKFH;_eZ9oi6Q-uVVHB@} zEPXAMsTV2s(-9ZC>?Ya|nk`{4`((;*6nI%62JpOT2%WI}o8?6BSEj$(Zp z=lTPMG$`qzGDsv}(9Em1w8DS+pSgEgx9}TM)>QWV-+F@nO|40CnJz#1E=|Ygzcizgv=dF3tCjXtJ2Ap0{0O9T zE<7$uPfs^w>;C`{@w+jVIsjS~F0ch{((%nz?!l)wu3u>h6@i+mcOC4Pu4{{%p}q)P zE|M9@`7w+YNoohR7VYZcT+Cwoa0cBKpNJw^FGv427U|!d|Ghw=7E$E$X?52wSHWIG zt#2`}?>w$d1*$t4%-?dJlH*1G>?o7x>Ar~t_5;R9v3?|;3|xswmC``By^df*)_-=^?r$piBqPq zqTGfd3>n+Hl6@>212%#lz0lB95*sc4ad#A^3B%T!n2&J6Ibs;#sE+Fw(MtB)T5L1co{$3xe?>;``Q#m>77bi zSib(i;gf45o3)btm|}?1h|kN#q&+8m;?b1SDPWE=J_u{-=Q* z`1&Se{RjY;+o1m_xzH~FVy`kxTRRkx`VQsJAlUfCN@1Q!D6uu`$(vvgb%tF7JL&OO>Cf7kXusON&7JvhTyi; z=zTKFq+_owu2(TNiDnYW9fpiFVOU?lpdQdMQocsBi6cNHvpxC-DuCK?Ig8O;!q}|v-Fz|g)|Hx_x|CB>wdWT!ECu-Um z+nuYctF3(}&-!XwDM+sNeOquovXh?v#Ql@oGxETO;upf^{~25n53WkQJ4U_eB-BuJ zUMimY|K9}5cn9fd4{*-;s$z+$dSCme0#phk`gwaGc`tz#?a#usE2O@p*`fxxd^_sOCbJtEtu-ZGC&g*YEl!#($JF|dwLi{rWPyQXy}GK zlIrUC?7vI3ryIyab)A(e5I_!_ME7LEx9kOC3}A%+DEdv8pf)S(jGk4aGy@96p`k?$ zd)ITKoUWM}kHcbjU4MVt$Z50H;!aocxrzO9$E5xbm_E0aWB@|Qm*O*(rOW}B6~$~P zIG0_C0-g8sp{hHm^GI*#?x~wCwuYKF%_PiLG1)FrK*WR#=>+~z{1x%jp`{t4CsfD< z0oZFFMX|j*3eocYyH0zCkz!L<_+Q`}{|A7Qu}lm9+&L`(+SSn=65p48vfagq1BlXO zUiYqbvJ{nBe94u3Mgz=F>Z7FV*FG?=c>VfyiXE;u1sGV+9^c(cd;q-;?&b|}%b*u$ z*D-^-O~~_fs)CDx9owkGAaem`wf=s#;d-dB)Dx(;kj=Cej7Yf5(KVB7v5LhG+X^;# zC`IWX0UKdFkTH#5o?MlvhHF4I6PwjL0YlcV2dtYQ{CggM|P|ogVAsVEPd64x5^XpL? zVL?FI&M`u0q9Zo}K3<#a?)swmnhpQ2@#WV3P63E%0LF&)7HvveukLF;`CFs9%U4LK z#jmSVpFQ9>9>|`#LMqtPb+Hbx2FSZ77sn8pR zrrJQRZ$iT`NVct19<90GZ*>e4gwS{Cn2dm*a`ATv6!n3C#4(WU>YwEX_t8;7*pUedc0RSK7_jEFB!Ulxc=|M(8AZBoaHFCL#Qs%c;G< z3||M?0G$^hwM`pR=a=k+EkO&!ZRS~JPSgjmHGy%9e5yzI#Weq+O%hf^PaS5NWUXlO zS9U(I!wa-c)&>fBsg(V*dDxy240zUM6H9%kzzpak4_#pWCb`b4xP09|;(vx6By*h3 z3jd7O8}v7A-t1V4)fDS8NuJnn^38ANlmiWB!&KZ_y>anJ2v{K+OTPi|SR>316pamT znAfStIzV@5IPH?CF68lKn@7MLK7{(d&fh}yi)_#@a!{ihZ9c~;C!+w$iDHdK64y1; z`WJ0N(!t#7>XJt3bm}3)9F|a=q$yTfWHe--zMX9rsi^Zjw6H65US2yrK&a^ELMHQBTX1Tgr{)g+Alh#}{k>`V zhYSeE5XkTozb~Oaw056=;~DmvAVF?xYk_3?kQG2})U7afXsF1=izOt*SnMwgvi|Gf zlS8K@WCW!=T(Fq%X|-lpV(T7J(F^UF z`G|@3)JQ{q1te$uF9s`5(CaEK$A4fe6)3&~UI`j#Ukxb|5Z;F_n~ns#~Itwgw_&mCMec`BZPT zY{ur>z+HK~b92^=Z{W><;aSdsyLaKw!0gE%#u^FFiVPYx@e;2xYn;Bz$A)VHJ)4v~&o*mTWi(Wp)Z}J?Mca9NMC}@z=a))tG;}2|7^~mve>qB7)7<|T7}hEV{ea2Cll{;r z)rIQ0=?F1VAGJ~OxZYk+F7ow63+&a@wq9xVjzQmx1f9`@rJsHA+N@ys%yDLmp5U8G z!IeLU%Gv>T0IaqkBV(SGGZ2k26eH9i3zaO(j6r%9yc`Z{pH@x>gjt;tn-DKt0NV5s zsetxSJy{bZm1Xd`y-_Q}V-LaRo`9dOL8QhPVcl`AN1?3_O0B&@ylK}yfi_m7w+SZ_ zZF?pO$BgUU8y*g)^1vvuUy-|5a}L?YwA6dN`Irj6V$8k zK{qZlPSQeNz~jQ1R~or94Wp9st*lvF7zg3E2Sre?DdSkCLokpbZYmcC1BR{fg`Y$8 zI1_`1pbWpmDSxU#lJy3LVjze{m_uKExg5ZGc>?~wm=0TD`MM`ABWgf8_KN8&049K5 zTGP+9sfRM<{8-^zcBK)|Y3XHiC3ZZ3kO~>wxa*^#(Wv(m`$5SkRVL92l=FQ5|26A% zWqbh`#F}txaNGeA2P)3DKzIGM!SQ#1U;)))zT7qioY8L*6Tr;Ya_KB*Z{trD(nUpg zz|`wP`1RF6*!55q)e@wy?2>+gb@X^GSbaalnUuBWVe8r)l*a5|M?Ma)RG1$O$!*A~ zl=Y1>Tp1Fa(dzIH6v|$Da~*fNClF{MKPQ-riW$hzi!66v ze6kG~{z@fro0j2`XPts#W|+-BulrtGd@o*^)C#Z^eeK%v5 zkYy}k#xTtI-s4H<{LVR_&+mDj^Z939yx;G8yYB0{?rXpMy*CV$BtL!oM*6&_p3KX} zME&%;%ay(@Ff44C8Sm-=50;A%_{@;^+P^kK-?PX)0&j};5tjD;RD9x3YlwmY=A`^{C4=NQH9F=L_cRYz(}yM%nrT@gRk8MVVPiiecdC_!i6Y4QsEA!#YH zknhWKtk3(*YD_a6Pv+h#H4~a;3O5wQxe^rTZ-v`-32`=On0ENxoxjy>>&(um&P|Xk zV(RvLR|sbOkAK>2(Jw!vmecE)1Fe^Zx-lR&#>w)~8!M^}skOJ&HKq*>jCTj2h*YzK zD>qHP`7lIt&$qNyn;yf44sjLS+_(SWF*)$lW5!XDigas;@>ihUR>;#SD)z|5up5kG z-YV^VvisfN__^)4KakWsDwD`|;1I{-eFqL%D1Zlp@3p*D|M-9R;otd@J9^+C(fq?Z z-d`Pagn^1;#9oDPzrWKPnAz`U26})Wqa363o`g<%G0dRzC_FudH-vZ-b zJNmbweox}}KK!`_JT?Lr7o#BWJ?L;y90XwBclGH%Lu?ODf8|+(K0vwS;&j^m^W1ysi*jzQZ0vg0sCGRk#7nJj1cW2GDz8ep=k zb@&>0{_n!~*W%~SfhkI#9Hicx;;|q=fT!Q*y!bD1?%$YC*a*P6NVwlMsl6@zC)EEd z8_CfPIyxcHM*0PeefvZA$@|kEdim!N>wjFA9I!>trhH~eta|zDn>Zl=oVDS{!hZ$7 z_Ne)vmvohkVpj8R_P>_i6b_c)W>L15^?MC}6Da59y2kHZ4%%Ck#VfFTuUvjy`fp)T z3J^>a6*E!yYdIXlWQ?m+Z#|>%H@9uCneX9aSp1ip7xos+K?H=IopJ$sWABUq1i?S? ztn?jNd%=KhqVO+Vwy*(g&!Bem+HWTEH%H)T2iw)F)?2r$@ae?QznS*moVoHvz$=wfgiE_vAVYda}Tn&gRYZH-WI% zOs)<(G?^#zh#K9w-o(r3EOAhHsHnzmMl9Q9w(FdP@3m@&_7=6b%_*`-Opemjhk&4>>9(YMRZ*~T z*R%6ku;#1XLf@SZ6BM^SurD_jt4$l6vW;93&&ET6I^{uDr+`w1WJ7~@k5r48R<>Ng zyEo)_28%u}T?D^A1{nKv{>M3{`nR8S-_bW9 zgt?Fhsl5RHl3ng(8d2J;YBR)Z84GP!6&xaRo+|uSi+y=NR6nLV^o1f{wIE*WGz8a|d%Mc=(a5I6@mr8*sbrjfDcG9~yl3VR)(QY*NIu+aB@k9{-&b zjN%7Qlmt*bUr^4wAr9#`NX9awkAV6amB(>=XKsK9O~xs#knxlkkHNbPzmo|05rkdr z!Ui!kHQmap3u(NmlPO0!@WWTkfuMyA4UBled!MquHChOwF};l3i2;`s4)R0R+mtg^ zRKnjWw%dSQ(tDs_pIwYFG|P2bxDC`kY4zV)^t6&FgS50%I~hkQu=oX6M|x$>qEb#f)pVduDMPouxn>f zLlH0rS$5D8uAQl(-2G0mjc%i6_)dmoBv#fe*jPx+2pOvK=9^sr7ZT{k+Qbc|0y*Tf z+mZ7$1jW3YT6{pwCF`eMTbGKMv_2a1A4b0N^dX&2G|06GHN+*O$p*J?gnk;+`dX`0Xs2svPicH z$N4<)8uq2Lzz^gr*u;2?Q6y}FaRr$OAbm(=%gKO&pvZ6d(LEArW|1bh*1@$?BSnVX z`7YM&=Fs|^$Y)C@92}ZDM-LLyT__7%U%}+NWOEMd|300Llg~Dn#)I*_RtXib2Pqc& zD^^jF)@$5zk=BPrvUAP5guc(H&dUiCIZ00{Dl^O)I%E5YfpTu!w5rJ4ktVb3x+kpH zkF@MN4a>ZN3E5Uab#QHM2JXLn<4il`IiB6?up=S3EYA`FlmGU?3DYCAtrCI)n-#wy z&}{3k-;Vp_)C$Z!LX3vO`M4v2326?ebAvI8TycG^b4}tE`^EoPe}J`Wbg1m|?8?e2vxPE1scP@GE+PEUTV4>A zycA$b(##J`if4@Eta;>Wg@-6$&@<=>a-Sa%=`PjVy3y|AOO; ziJ_ZkQYsklB_-A&v!`WR{K>oN#8`BZ$eH*8S!z*lI#mW+lHr-%9lF9+Mc@yFog=e& ze#_hxcunYwOq&aFJ0{@RQd4Kvjss@D=gWbw=9#`S34Y&7%z5@paGc|N@7cNZOscJE zD<>jTEaSChoX)`m@(KkQX+V z!FHc<{AX@*TVQrMQBmcMtnXV{-~#H{T=`4N^05>kc5RFd(Cmr>0oY^DPGL1eiCd%8 z^8QHezFqyQNi6_NM}Yi*DmR*g5`B%j6N$gr8HW+D33Z~{TND0@BBo8&0C*V~|LElQ zTQGy*?oxBI`VwG&2@rG1YZdTQzreO9{Tu>Jll{hx{eMAV3rh#W*-XxlAMLve3s)Q% zh0E@k1~s`)j$B~F;I8xrKd4y5Z?nZYASf!_zVw^3>@n@VY5a#5u2G<0*8Y(?gWc(K zk+pUU+D~)45+PRwc-bIE4}J)xp5za92fqolheL-c_vF((J?MY2Ny)uA4*E@xPY~a= z283CFiAEO4Ut`-HG~*O_Iq(ByPU)Mi|3j?;f;s)UwEs=Y{MYq0X@P#-?z*j6?MfvP zYG9%fqKC3~HTtkV@bbj)b?}2}9s4b|90RiSIj)oc%jExUeG)35-#507WBla(l#2k` zm1Zf`#G~EmL>PjX4--HYlZSqTQhOVIj4b{J2Orpj;h$I)hZ0$9(`s)|*cHZaUj-9Y zMsXz4?GCC&KBt5^fi8IVsvE6sY|A~Af?tW`)iO%##!h5C{#2mLZo`iaF z_WOaFlhK#d8G$Y3dFbokxH15!?yF+?)n?SP2aXEypPXgsJ4FxA6WeeB3CMj0MVO!WskR8Q#{ z3Ez$P{DyVGss8aN2T$+LW{?uR^#K#%H@Vd%dzc0McUH`KlXKDx~KfO&U-Y_dr#SDw^0)oqJJ@h`rZZ>$iVbA&7Fcejjmp@e-N9HWTVi<5I}DY-@D_3~tcuXl-~sZm zm4w(Xg*CMtuvCeS$uD+fSTnM=anPx>k4wc|l;3&Fe4-S@V+Ox3)!E}S9HjtWO=1PV z>?r>MIR6em*FexFv8$y{X_q_SqxHzc@nxE7^umEh^@;yA}UF^gr*~@3)75SyuKajp84e)Ic@>Q1R#O zo{CdmU}u}R$SO&l!{@kPAeR#(AJFP&VyZ%ZjcU*K&5aVj`dH;e+b>{nB#QIRri|~ek0WXd`@vBf=14~QGd+sn;CFH`SaQSVKD}1=PgSC5TMH8 zn(!V1WP!oUY(B46{zuIH9|lSRjr?wG7NClkN3~Ps_QTihiV^3K+l2g10XL6|H*7`G zy_&_=6;sH0(QX+6>@ePYE+=?!Z*h(&Ein-xcTuQ4@kQy!THDQgcfok_x~Em1rU#R;T| zuRSvz@Xx5$SD(1gvI`a(nmVu(s>Umu6>);?uX=Ce%`f&`uaIG#Yd^}q5Qv!Mc30yCuiDSksPaQ*yquh*Lkk@T65<{}phA#EFX3G2vCM7COz|D)Oa zHr<@lP*mmOaHiIzRh*B^ocqt4@m03&6~^cq^9CJh-`V%}V|50oA|r0TnBpjR6y)YI zoA5(JxKCUSeI256boC39+tu&ySt$bexyk66@Cr~|B`xH)Gxjc+p_qgI*r`7V=TFh~ zHysYElCwz)#P=y(f*5SzvuI@RQ-H zRU4+`-7?x*ekZ|cUXVzjqI#2~hfK2{EETmLuUenyVKR2EH}L>9ttku5_wSblL_@sv zMK}A_>myUI(WWbia8vUqbZ5@#WFweL)j1Vr&QZT4CpW&juZyE*KYa;Z?!eajB&9Q6 z0FOoJ(XmOM?DZ(oy*SIBe;VhO2k3mt!5bVN!(xehc619Jz{>{9A9x%6DM029+I14RmG*+DZU5_Pr$7>eP1}o=Wwj`I`s)@k?%)pa zV@gl>xq7aHlE_RQDSQ`HW8RPQ>E=b8Be8Np4}%*ODn&Pxi;Qa)#622(hPJ<7P|Y;Y z7R;^hMnFBX4Y|+rM)60lHf+7R7L#J$z=HK$&kbrmdiMBr4tjZiCGJVn6EqD0Pt;jhi zpt@v<@8{m*^b+a-s2X-IV?uuciH`AyEy(-Rs@gstj}tlSI-i@Z63rW(xyjg`aVPCY z2k#(qM@TBz|K~S(otU%27gVFdKr-qOoO71_SfOQz;dsfX!VZzu=4?wMA!I|vMHlOi~wS5 zC^nqI`u`YYno4+mMt%B(=5;Mzy*#ehETUnNnljB%cCt?B`bhhYi+9As)7;#?U4xuu zlhijXzrC4U;jral(^qZqj|pQ$Z^@onngbT6k|jnR5*m7q`*wl*CqJ2y;Vk#$RDVOt zL7D7B<#n}+U7gf~`YQWD&SiwG^gWO=kb68c_kjG4$V$ntqy7-bF*rc=f%bvlVKD#0 zq4euS+kM-laiIAumJGP*w!HpN5$tYlS3J6mKR@menUC(i`h6w5<6&(bxMEDHu^v~8 z5DFyi*9KRtxhHs(`m_(pQKF5DjT~d(%k$eb4?Jb zo8Y_vr9&!~r}}RQ1gav3t2MA&&ovGbgBcEtLHjbtGKYe3jv53Ze(p~B%Qq@eZ z8@1QIK7))FLqEFQ`uu28LQsPQP#Qh1d3Nn|r736=w}%)!wJU5HnQ=X9+6DSrI*{Hh z_RKH+4sEVJ9YCzoR9_E~Bg>2vCO!EeBGE^=lzngEAF_e$l5*$nU$F$0=E~{P5$qzT zI#bMa3-x({eX+vGdL<&Wr$i_AkwYPL3(rW)Fn`ji%S@r6zeB=^j!nj1w%IgA?o4Zx zl&52^{)!0Cy}YRHjY+G`&6yPQ!Rr~0HLlr1TZRaq*R0o^IV=z zY4;col$4zwS+jln84$i^ezwH>&^W+EITdMCD{T9F`Yu|wMupR4-wR_K_H4ofae>9~ zmHUgCHHLg|{+Xzp)E$?vY~1%c3izS;r6WG2o`!*>d-;hxy|Ra{yGx@$wD!X<8NlCi zlUk%}KR=0pDb~*koVS&l-vI?#j`BjzL4oCge!RZqAkm$ky$)ZLXyqr=Z?i)pYQvW< ztk=Pwi_R9K-mR*RPxqm^G_*ejqWkP-d~FDcdZB+@3dgO1sw* zB`5%@&P1{ycLaB~#!HB(tJ{%tSJ`#C<-)k% zP7ugy=U%Ex5;Bw75@y3lH2BGhsnGxodhS5=e_<5~>klFg=`Zcu^x)$+!M{_r=m~bw z-M7UG7Z5#ZT(%yLSLM2p0_R}JFik5o@7wWaA%hay5Y0erejCIPaWw6zQRQYNb z6x-7HPV99%gI8zQ;s=o(1;+LIG^hBjV+Bg60%m(~jj6b$kQlwHu!&H*ikEL#8FKZI z0o$Z4_V2WWs_NQ`I?_ymDtM^2r9( z7}~7JX1MX}z-Ni9CxmjpJ|kJZSd`{r9O>uhoebsP9~z>$I@y(V4=Q3cYSsJ8@`u;* zbp@l1QU1W?aA~$|YH8e13j?JHhUgaYD*NRO)(NVv#Ee^A^LRf7eQi+U8hzB~+k?%y z?37VBT^zE&<$MjX(o{R`#%7p1sPP-49GTtX)`_(Cy}`>SP@M^(pBtDk+&bH6q|`a_ zCDtq)s3QaL7SnZe*w;lwrV$#`w$Ac+d0@_`jMe5MDiyh;MEyMOI*)TonPsak#?Zxb zK*4w{qhz+m=F*td+!ky#7c#wOVCJPa*gBSqq&w+6No$g6-OVYVk}D0xx8xVsUo1wh z=nfElB_LTROQ?Lh=8B+%RwlEyk{N`VDZ8*rhm_ECtypWGTh%?ZlzUB4B({90^u0S0 zlZ1smn$GKYZ4liTJ*L-@fc$W`Jw-NUMArGS2=ZO7=zComog!g^0ct;2{nipxr^r(C z`ewQPaOG&!+!i{ZEZ!J($%5Tyv=8rz#0}Dk?+aXCTwfd-+VUZV#NHgAK@gY1-8v*x zA6-70)KTOSKx~OkBu71zEUNuq*fC2%QR$Yc!`cW!jR$;AN4^uDS~=pY<2i@MJNCw~ zNxC!8`aDe#;UArOGu)QvgFDlr$Yg3AQqO+HGTcfe%1^#s(yBsgw)jCUr{asZ?h{so z^)np1va*W8;<6?b4Wn^tQqlZaAY|35F8=h%kx}_2pd7Y@Frjev%yki0Js+*%;c`+p6B$-PT1J$p}*jHI$u);1@=OmWU z*YtHdFaOiiBcqH}_M^N4MYe1nvU9}ELy#pp490tLphO|w)aBm5noCMm2fV8P+jiW& zeDC}X(_}Hr26GrtvDD&GHdVh(b*V#a^NQ6XcLG8#^u(Z#qp zY<6DZ>2=nV14oCx%?462NqNqly88C%mM^R-`F$Zy#Yl6+L(>jv$}M1&8O$;|-3HMl z%M8P!0HdGuI4$<~E)?h{`TSssG@Pvi%HP$Aq$K06GK zKK2`Tq{7%7li+I9ytczd3IoKP&kdf9Lz*y8rxT7aaOFDcgQDk?0+sd=HWd1``?r{w z!s5eFnXx1Q6FVqw%?_F$Y?6H4rA{xyu@1!W}slLV|{M4J_AxoPtCX zC5b_~+G)Nusil3V9(BEN6d$qB#w>Z2kPxmm(dlkGw*LZ#$BK9zFX!(Jk|JtD?=W&Q2 zWV#Uz?lOGt0e2YLC^U8fszL7!bfJk&a%G_=&7zB&^G37HtU-!DC(CN@9NMg^=|Zen z1Spi&-1L>btaWv&`NYY2ci9!Al>75^G4LSLdZQB3I>!l!IVc^Mm(Q0v<3vuvV6P=T z2GBgc=uVlELNz1qc2VgupD>xStiooNd7)g*9pfLK5(Z^W8%@i##P;4t1e}L zuquT6G;9JUFND}g#Bre;*GX8`yhO%B{_xKJGm@Q2QdPbPtIYl^@Aew&Gh{vcB=6lO zy6zfvrRy@ian@_Nd!V( znhUKVSe7^!E1^{gsY0aUS?)))2hooR5iCsb84na3Ld`>^#kdYuS+<@6$8I>hRyt)Y zg}!)GRY>2#Qo4H}4r_zZGwoNw3eQ4Ric@#KJ!OBN+%qf8|9HY!XNG~x zqg$b}<1B9{8<)hPdL@Zu>)=zT0RWoL>(bgRqIG>^aqH=81ziYX#Un{%J>*@QEzxvI zZOBucSZzSV$bTubAl2h6hGjxcQ<|9g%6pL(T4IWLIhDzj?5^8P3_5$ zWWd-wOLONo)luIMML+1Sz^i(f1;8O!(!m$%=jUA93yp3~sBmT)T*K4Oab93%yvKb)cr`S8>$h!n)m!UZgWB3u2?j?E*dn!&x(Hz~H63@GI05Klc_sfnUf zW|j8LI*Qan`jx&Rerzb{jA4b{lREaog@eQ+`YAP=W_}Ehkh!M_%rf@0wrN`){(@)& z3b6`gWtl{B$Ibck8W)`WJzKon>w!(?#Bk;Rg-4YmpPHCpI(F04i^SY(we(??3)5W4 zl<1#~(D96f~8`fs?bvi zK!DJ&q^s)%YmF)Ns0gGy(geJ1l+tOwAN=sG8O=Ivj*{+mx>T~;sRk%FWW5nSl{=`) z-aGpG`fOL~W7o1Ddd*eiFi54_)0v7ppK(>#c>%ZjM7#NsVPr9O78YcHa)(hg0`*6f zL)>Y}{zOJ!>Hx4NihgxZ$%oTc+`#AxOs_D64!Mi!dx9EitxD|emxuG_77S7h(khO7 z#8nldi%cEq52fcORlEp;i)H+^MBewdHL6y{O64sVccKBZ1iHB4?KzqjKJj&q?Vx>wMB2p_`sv=-|> z=nhpAWwW0g%%;$kK;6HOKI7ALTra2eOLV*9@K-iT+!?GV-6O{eH;efw<&JlE3+{et zgF<42Oe~%nC#`DAY^piJCpFB|DKuwwK6d6A_UCf)=@nK|6llm-r|zsTN?CLT(YGc_ zn7yES73Ug5R`M6wRJ(S9PrPU?h!bwZ2RaN_sirr!x4lUZ=_szBS79bJefBUR){mfB zj@{a-6t=lz@VSHFXPS-N*;KMM-0uQ0to2G}&H&dpxUb_?AxUdPdHwxY8(69v;((+O zJ^T2wWXO>#q5hC}N1=~`bxg2Cbzg{mSMP-E=A$g;uv>gFJUWe%o%o=lD};=Vs;_Uv zx4OCWk(-UyJjT`Ud7$exOw-YNU*Apx$*(1Ki~6mlA5wgDL{+!Q*rCO++*(k9O7`^0 zpN{>tNxpa@eU=8-8v0gfgkgp4TOU5%f>LDF4kV(rzk2MQJEB@Sc z@)561$cF6B!g=A-L1U^TBV|^y8Kr@)m&^U{_519g{U!=`05QA zF>>vYfDFEreAe+LR-|+*oGvdt1ug{Xe3aKR;BvxZ!#p&>GD%{o+I+Eo=IH77&fO1d zDm>Y@46_^vBW0Q@L8_PphjJ$z+%r{zp6%cyDFCkmw;OsZDO8Vr;VvZ8!v7R=-VOy5 z2%@HsbP{tE!M$xJyTwinqyCjIkmIxnFP~2qvfnKHs8YxiJ4;_6837Dm2A2NrOpvBJ z($BZtn)k5{}(pVcuOHx7qWqH!GcvY=8e$(3HXK?zR)Csx&kP_jJ0Lq(1v#Za18A7Q`yv zz;p}UP~VPmM*QSstUrr>`BM<45=roRFgiZBDRBa?^(GjpM+lM4cCL6~lmf47Cai%F zT;s@1!F02YESlW6(S$F^owMc1!KK1e(iXb=Wz8CdQWik4DE6gn!MM_eX7-V}<>nE* z7WUcTnxJg+de2Yg}ED#+vI+ysobxupj|O< z%rE8ngmiY~O!0O3W%@%SO7 zT8#G$;;WMbt@V4Kc0(u8?vJOR(6X_fG)3RRpE#d#)qQkko-WBQMEOKxGbK}^6FLd^ z#a_zUTI{-{&PsXjRGB8lxs^PKp7`P{-F*HG5d1^Rn??9$P1G7sLRD*|)s}B^U%Ts?pHoLaF&KbBDLQ5}!>`afepm*QD&S`srJ; zu@s95O#OEEWkUwwLQccnyt8IsS+?&diXI9Sw$Wcf4KF#L3NnSj2qlRghLrHOEkB@r z?|ddyQ7ulYN$7Eas~OHOr>n%!9K9QHv~U94gK98&YxSoBo|@>eoS$wM3rY4Ht9yMr z&8_g~dV={>-CEwT`%GILAHoE!1)*l-jjBp=br z$Z9;E-5DvZFAvQ7Nxa|L3O*Fvw!8>Tw_jdlH*fV`Oh8C!CZPkjsIZZ5*oG3^O^T3L zE=?^LbbUOYr4eU+gAgn3a1QA>_`QIRhOj(bHBQqZepKr5OHa9w>|~fmW8M0bK~2LT zQapu0rA7Uq*)NN5Td8n5#Z6zyNeW1JtrMcjf@WkUCy3#$Y;jEPO!Azco#vdk8$JB? zvY$|0b$|iFR`DAQKfGKYi$dL}n7HUEi=}%zv3TALwi)eCTs+|@9yNW893;pjoAwsx z8MOH-c`V^V>jzcIxBZ8?6YqBjoF~x*ry?h;sP;VkO{dB1EaWAt5b$14kG|ImKz;I^Ya=ns3c&wo1S@Wm^fB{q!SjwZ&T+eWbOJCzh$rM@I7YCr#PR zS4#;;XFRoYBeXNDwcL1(svM)Gp%L5#rZua~KSr>zBTHIY?Jv~gyTc}gv0+7ISsSzRUCqV5Id0`j{Q?&tG=t7DUsgg^e_k^x zKr-Y*LfSv6pHJ~pGc@&!M%WhPE~n1V^dHp|$Y?u*Maz5dRGfV=sYcjhcHqPJqTG|j zZx>rGxq%vjqO1mKzTSlwRbvIJDtFqGJ^dvz?G554edg`CTiwE^^Llx*6CcuA9rKc0 zd%U$23oL7I+d&OJhXlK4+S!m4=($TA;D%eM!mt&$5~K(-qIK5CIgH1H{@QzIk}>A_ z#|sPYV?XN$zs!CtYrl1aGD!k{Jypl$Jli}-SvX-hv2gt73lG(w9iix z+@4upER^?mlHK_JQle+_hY@FTAl>^rbzWDXe(wTFowE3H5xe-~Px^n_wGS~h7hRsv zlYSmADj0Sc)mxP`7eLJ(v`qmVJ9GXQu#}O_X_X z1GtLDYuxmjM6<$7%?p+%mYUCGpxwv1yvIrSIQ2Z;!iV*E0kaa$+2qf;Q?v@>&Xet> z7IRmj?qsWdWGIFF9Q9dNPGFjvvA3l^kp2KN!*XKLX4>a<_x?ao;Mls-v-44PWzx|) zp<`K|^w%y!QQ6w>8lHQ&J9&*G=#$XgIcCEo7M+5R_O#X*{8)4=QyesmY@3&oV^MMC~`I+wWAhIa6lU${ejBPH|}VhZ90t>L>-~F-Uh^vhS+$)n3s%+6YyaxB#}I zx>XvWV?8qwCwnYLYb((09td##q3U8SPtb`u+|uUEfgnlug-3`2gRKgQN@$i%@5R-I zXG#j|X_QN;{#MWr3FCaH0kjlO{R9BGa6aIk?PmtB4eU~BM_@pgv zZA%Nt?;N!?ru&`UdJPC^Y|pX&7pmjLdcT>e9mj?$3g-qT9DU57s`I2T(=0e_Lojt$ z-f7x*`W#pNksCW4&jKC*XEgNKQ`kh+1qI9nKjfjqju*S-9x9(5$uJ9sjS*wIcJm8V z*D)b@`uxL$r~30;W#LxN)I1X?qd+VN8AgcwY9h>6GL0-y{4%VPMnv~ za{?(J?<$?U5pVgO7u^ukHXH+)4t~=l|a6V|! zk~R#O{uQvw%^g#~$JkYVtFX2sFHDct6;|bv#Ip?C2yMx0nTWavqb$v_LdDXuiwOL5 zay>rYXN;L`B1~O(W(A*k-++wqAL5K!?HEDwIw=# zLBVHyMqL~qVPMww#!J$vUgnly{l<-5CczH7te$sQqF1J|80i?UD(G->#rIJNT~nC2 zlL{0m{2*dPc2*uy3V=l?PpQ=Bg>x$N7B}q zg=H8$yJWrSIU$K!%C`Ll50EicXLYr+>}`1NU7h~utuYEE&>lk+Nk&p-ie4`4mE=h|5+|Nq-VM^u?%9-bn~v zSCbn-_K`G6hkXzqw~wk^l#C}z2^WVlUl1+qglmj_WO*aCq;F8p;Y=^-(}r2a3U^8+ z3>AaB9#61YymOxTv|dVQ+CQ0Py1ul|PK+@r9%bC3>7ddj7kUNoBUJ!vV)?9#lN`FwCSSd#QRD5>> zoX2G4=rCbRi^lBfH!CkD*~~QmV-2`Zp$RDEbyB z+&|0o;EwO93tPBPTTlBzxSLqPJpl~JE+WBTZ*?R{=OQM{0(Gal?f3xWc_sW5~pnH4j(SS)Rw}OGOGu zc$NpcJY4Ci^h4bgmmh zo7*QPh_)0OIO>fi>hu;qG9+@Od$KQCg2)N9fb{edTst``KP5>xUsqUTNuCK+XeOlR zo%|gGLRi*^#cFcKGM5xW+MM*OhJq=_y(R^iuZm0`t{C@+k6oX}uW%yKvICGoDb-->fC zecmd^|B@}ZY0vbl*$gwGr?T6yr9bHhhz;=jgnn>Y##zDyA*Kn(_&sH8zOV- z_2|OAr*v$kvf>&D>>+}zr2Vt<>Qx#@Y$-U;p!c7RS2{!> zL>Tc7H9#@rIZoAXw-zG}Dd+{ts42U~9p+?4@F4byJ}MOA`|e)hR`0jT;Sd?5@#s9u zmXG5yWH)%w^4LLHzlND}IWZx?Y<>dU`H9_3;~zOkj3BkDSoRSk|D6wGm-UK_T|W?> z9%btuke=?Lv@@|%lT}MQN%2YX7asaQzV54pF5yyG&-805&)0-J96@i!#p{)1OH;S3I3dfZ)w?Ens&|ZBX z1`8Ln2N{JhvO-eY=XX~SgD;0~N*9i!vdlK3X$qB)heTJ5B5<(!Z!#@T!~dN6I5D%! zc_@j#AN}rnWgN-`CY8r4T5Y&b)Y`$k#zNZnBcx}G{ZF9YyY!~&_BjuLOyi)IcLLQE zwQk6G?or3t2YNfM>oeNGmJTHWA9ho_w9cocF+WR-F67*_`c%kF%9ZRp#BD<@3N$&0 zpCOc17{{k4p(MherDHqc4N1q+5bUa9?eWD)qc5oHKyI^m8LPv^p_*hn+Gm#?7ZOn8 z4va_PM~Lu7*#ho&Qs?Xo0hP>vP@{U&vKv^NCP~`59r?J+E)i_AefR5iV4mZo)iEgh zfP12l4Y+)WZ1nW`b`Gj1>s$44F!SgcnH!DznvJhT=A;L!#t-r*t*Q6TD5QiL<=i>v zCMi{L$1muXdO?@Jum73YG5MW7!pB)X(-JNgMJ!ePGU}Zs+&{PH5^oqam@@R;u zIXRS)obO$*N=3xw{!nG=6h}uqrKXQ=Ue>56zQWSxS#*VhN`|91+uve6T^Ot$v+r`y z(~J=c;76+&T%J6i5+Od$Y6m!*kBptJfasTwO;amcF>GJtc{T5(BN!#xsj9l#kn2~c z&gqy@UvplPANe8q_|+Cm5yfdy#P_`F9g-vnP>}K}3c8u-=1A+doVi^b1qgHXw0`!lmmr0bl*AmM&vmo{zQ;R#3(TWq-HwX`scL!;z7t5?* z_EeW?4Cf3^i^Br1OK!X95T=^GW;9#AZg=Gub}!fuTVGUdHfLxzA|4EC=0ndi7&6AIm!Qst8Dz**WX!St`Ty!^8Q~rFMMT}X-kQd_n+DJ z`bz~Jo@sIng3EfY(~j^>z~bRl>v_p0qdq+zSAY#BAb05dJgRhzMj|BP>ebm|O=1%1 zqlg>Ao zD5dSKV6=wp=mO>|yZEr?*<|S%)xqi&qZ19?A7H>FNB;qw$L^D!+?ru)c`0_wkWm88 zwZGpX!~Ch8Wz#q6#jAdoZbz5p4X!N-Edjs0icsCP3wM@^CX+p>2}&}X<#ii9;L5Nk z?sf%ht#+N7@!Lg5tA&1^w7{=RE)!X;HylZUA?K#&HaD+5^n(@E@*WG@*_<)UaEY|K zSUxBH)wswC%2|Qm1gR}87jS}=n4MpdK~}?kfjHp%WcS~wzgy({1Tju7 zVsQ4*M^>)3S8xP3Qc7`&%^6fztynu;#`mJMMh-+f-m1p|^M>c_fFi0E#6k{KE6jj1 z23X2efyFFt)M0Ep()WJI%1j4QMGUr;-MJgr3=YGK)WvBxXMVqMMg5 zEe=&gQ!laKkDVj7c{BBu%#50iocjT85)MAWoKHpJn+z+Q*+_P*duz&gv8cAMaB=C1A)uwt5DRKgl-0)$^!x)Gq^rLl5R7Q!2^p+zqyry?syzlXTJ4u8@lsP$LRK#~ z4wb_w;Tsh$?=OwUnH67U&s{a{3~%`&e;kw+Cey+as>oCj zgdCRQ7wB4`be2MbzoIPGeStZt_>GS;i&$Ns%o8e){CmacsOhO>HwR2@{3M2bZftDz zj=7)Oby5ytoQ7Ht5@}Tj;=~G#l;f^u2BC-q%&EAmqL=rnbhX&OCu@)AQ8_LFbt^-B zR+gY|5OEiNy~b_$Yux%6_0`#cpJ-#xW7mzlkPm_gs|&(B6V3=->zvIb7boRtULN#p z@sIXcBcD;nu~6Yjx+@ru{?1~y6=)IFv}pCBnzU1m`j2+A`$90>G{4=k^mpsqp$X!{ z=X|o0@wg@UQkbI&{Oxxi+?iHzb#mnAKs6+$UjZI3lt{fy%8&C+AS5cWdXO&D| z9GG|n@dnl+Z4eI&)uI-d@2kl#l3AWO^IkTf8|&V9E5|A9@6sPQ3e4koJLioiwT8(v$f8V zKKXEAa^NTQ3}kRQA07&#eecj zj(5H*Us&f{+`cIn4T7=ve`03$yFX@bf|-MZThA`HcBlcrXR9@z+^pIJh`wIJi1Mj% zI5wUCZ1K$xPfp!6cS2=3Kn*HL(?oIJuDoy-Libb4Lm-l#H_YAzV29R!&t_OM#P$_ zF<-iIqBkj?xkEB zE79SIVs)A1uLYSQ8&6uFfm1X&TRq7_BUL`VRWU_lDM_$q>Y?|_CPdApIu%*;=xNzg z+4W#71{zz__~@5ea_}jc#_SAspwul&?Eb)!q_yLf>6!@ZlCk-t_vt=3on+o(cPl>`1(j%i8$C2ef3X%<01fMs zSI^TAI;x&5GB#M~yE(1rigEC3bKRW`JzZ+6?K`m&wGt}g)=0OJV_jPQX8kH&cIWn@ zBrcHZwAXrEc+dNfnd>&Q_@q;M6%1^bKT6p+n=Vh#Fv*OWiu$yj0p3EinkYyg2$dy; z5oqJzx-Z3n`^%b6oIenBN$u@5gR{*4ueC1$hq`lE!W(WQi=L2n{01IwI@XB3oqF*kxY^V_$}u`Ja)V_y2p}-~abK|Lc0YF4raB znRCA9UeCGDecvC&K0U{RD*6tNlIOj7Ddpt=(~TIJA4Z2=S`bxR@l98YFm1a|oWECY z-|MVPXnxKfh_c1S&ZhN9$HMMr2 z1}UIvoc*#GXGc5Nz|uE%5aW1uf3iP14n3~mHn+ipRo~RF`e~6V+6vLG?yS5D?jE`Z zx?AV^@tG;o1V?ZmS_;0>IK>$+s=5EE8Y}l1VNTKKtSl}VE2zR+q{*IHR}djxYz-hq zdl3^3mS(KvPI%t`2EYdyBpxdoY2f1;)3kjEqLmQcM3|7<;^+%$Wm?Dnr|)VzMRi}fWoJ))6aqyP(gqoC&X~Mhykyr; zDqJAd?crc|WTL!N_ zjRz>8*q*#gOeHPXHhU}8gF%pcLW9uuGTA47A2tgTW?_Bw;4;Cs@ufNRP zcMp*tK21$rlQI>fgfbht4u-t2P&sf)6+WRsOD9} zl9km9M;F#3K7{Vgq9>}Jv8})_q54M&k|vr)nK5!8FD{;qJOH2|iM$^oN)_9$G5BU#h5wjx3tgImaW7bP0)~EMvpHm&x16+7bR{> zF_dCos-p0hV+7#~#@Coa+M1(0dJ2%`a(`6(xxFWFY{Sp#Cu#>_?$xQOT7tx4mzJD4 z-Lvx_FHQ>Pz?nholl-Iq8~sn}#8ol&dM;N9_wTV;%Q>_)8tvaqGaqI)kZFoO zuT)_5-MBUT#oo7j`{b{Jq8n)slshP}xiTkOMa=OJqOS+Qv*QG8q>VoZa>t6B9)Lg? zC@XAPMtP>8(EM;W9Pc{(KGYJv$2P?5Jto7HRROg79DWb#*UJ#1?td`wW zAt;$;C#4NrdFmv#sSjfU9yz?Pb~Im^DftAVOl9&`vtj%J>QXZ-)?O+T^X&Pjy;CjM z2=VC4`njP;5BgA}*Tn0dsbV_8_~>S*4>0Ohdsz)pcSakM=_7D!6>d@T&epnjaqL@t zK>MCuUMZ$~I(P>-+>{_xfUwJBmJS9qPyAI?JMJ5aQwkUx%%dJrRy3q_oY zl5-~2u$Yq~VYEK+S^<~00?RH4i^pcA^eOcqhC$z_ ztkYLm$iy3+CImdmQW@l*^|i0Tof>Uq!RhtK65OJX)QT4({lPr9f-750?8w`_-1MGg z(tD@jM<%_1@@oB|lRg)>6!)p5|CoI{y_yb=gnsU5fKx({@(>nc8^WhNj8FOHynJA? z?t?|`4;tDmHLjZzH^_FY@)V`8vj8royLancjv$Idq2ccZ$S3xCa`P=i>T(zWV+5zs^qovuNJiPCPsUTup=I-z+<{ z`b`MC+r2j>3*)`2mP6djsUJ^fJTWXxo%4(8Qbm|W!9m=%ZI+3o#l~VB0LhQE@0t(! z?9e;FeiBc-7nOin8vi~@PiEwEF27<8uX0uVL#@nnV_RpRedxc|ie3E)pS@FnVOB(DHNQ?vT*8 zvUNp|D+?)3R)E}2M#ej}<+3_^q4VKRyay5BL=eaYl`t^cbK!H*xUp{9Z0cxR( z6z0Pe3Cc`gG{QkcjbiO%gz=69Orc61q1z*bnWxb?KYC?jzqo$R`&^sy=_f)E=Pg0K z@iT>Ljf#cWUmWxEz1VsKI-!p{8zPObWDkK@Hl^?F8_bVmz<^}Vw~2u`@`*KDh^Z*d zVSxYE1ijL$p0k#TaX}3f{d9ql%+wvmT-2SzYllHVdF951cZHsd3rwmaB#^^U_fw>* z56=uCv5^BZN5!``<1wQkd8(nWXi3R-cQ7N%;c$@A)w4&5L8GcU)dVDBJj;)!lUwcr zjzF~0Efnp8tmLt!>7~w`@%QR%el08JD?d57IL*CS7amaQz>|8DDYQ75FuVGIq6A%? zJl>YkJ@z6kKoa9Re=~Z^;Z6mpvX5!FNmNQ?t4M&f5yz9NgrZzdX|nX-w$Cn!pLoE< zRLsqne}WQ@`%4zKzw14Pt-v47Mtu7JYRZ+#@bc^=%;x7GQ$2aXvl(ALowiOE3|eg$ zDDrJh#d zfvpWzpSZhocHsaK@~HC6!TS%Oy9Ow)9$J^~{Zbn$APq_}zKOHAW961O#gR~P{S*-J zeBr^=C-iy1sBmO;;L)aiK~FIG@!*nehogbI7j$zbHzTFG%y!yzU`AtOz`fXBN%z4- z&j*x55$0#r7eBs_-)LEYp>_}!Ey0+W7g z_^4B}(#g)M{h`^`&4NXPysj#~p`_;?4FgSl%Q&Nv-O=++w>_|{8yc^hS$fK)Cfk$c z?w~_gqE~N#m~0lZBip-AKB0UHF=xLlTjah%>&0`*D5UM?_=(J6_C0ZG*UO_Xg;kla zsRR;_)rr8xhChi3`_!=n@#C{3;`tvj`}iCys5pHrC_Tp$A0HS<{1lY4@64%Pu*18b z*W_;Ndg$oAmsM0vK*8?8bh$_duwTMHz-@h;;5Wr)PdpKUH zjpZ3|S=K2^G%0hol?p`9${8Azv}*IG!Pd4|tAJp!#EQi#gSyR1W}z*W$L&uXEgOby zRedP4AApT^eA!QuPd7imLD|~Co8;iGgUzM zcx-iS=pH>9rjpx-X?HWQ@v(l2C>w|^i`7VpF09@ZzUbcCa z|6&lAMw8OW^2241u>DC_!lX=iVIkBjFe>R`YYI#^|BRIDG9lNA5WP_38Sllhp8$7K z55#F*4&^t}gOx2**cbE*W)-cH6BjF^FC4+tSM&J02vM^}DX$QM2%MRFH&5l8s8D7e z_(O-R^#KnOs}QAYs%UE6>xj^mt)R`V+$gkipFqFshxr(n9tXT%6$i%p!s?r(2)>im zo0MrUGHy>fxLBKunB}V1_BZ(#Fk=(x84Ohp^MzFT z;>rp_eym}5VQVT_YM)2rTOH>!u~af4`)+m6L-Lfhz7mo<^hHY4<&mjb6G82bSyY?0 zD(%Mf>^OgV0>-7tYIAJlrx=A{w_( z8=6-bl-Ha7tx5O8Q$xyZhRpqxYvxUF6@~~p3B_>)q>$GIx1jk6>GE@ZTb(8k98RHo zwp5t}55TF5W>r3udzs2Nz9W-FH?vYxu~D-nPH&DvGhK$CK5N~)uO?M;lu3cc>o<_* zh5EL69Q|!2!zlOB$WPia5|iN8V2xZ@_wLw{4>E*q$}m z5rFTd@A$fK0FLXE{iOB|V?EFPl+Kexi=;G%u#8>ZJBBNQoR64@b+Eu8HgteZuc3JyN~nczEUYJ5^2X4N<;<22rw z-75i)!~b}O49o+`4M8X_0{{h#z(yE%0zgSaWb&yU(7yx`&>e!!yyHKklm8cppMR!` zC?jPgoT`o9@_moHu{B>mRJMtZZj7DW@7;a_s_+&yF8YXxFJJ~^h*|I3oSWq~{u2riYwRWsU(|b@^QNFt`Im%3sN?D~{ z9ltKh4w-3rIL4zKb(mB@`!Wfu<)L@UQT52+_=A6l3G50<_>4!A0wWp3FHDd;W z$n%ch?$h|k8;|azO_=mdkl+GkkJ>}t;qef|<*lXW0D|B=Sq8mTINv}k5=BS?tkg4} z>+f}|+AJGh=D6Pd8hCK1a7~C)*=_acyYzI40=v1Yu&10iwyx?xWv9R!rC9f-O0tq& z9yCK7et~EuSOQ{6CKZ_PU~2tmnlS9UcQFC$OZ6a?8W#R6ajJaE%vt$LJfiBOPST+z zZNyge{C8x3WMixi!kdHN#qPpz;M&u;XPi}|^${A^+mfpayAHBxbWW z$T(1KE8P&s4A92+0Z+o-i-alL74$o+qa3yfv6WF}Tdz&Ko6+Q|mfm*V&s%g`P9)$s zFdGdY=G)F%B-+jhRMovW9-+99*ZHZ|OGat6Yvfw=v&R5BxP4{z>kmc>?qFP$PI(BR7;a8Eh$v#n5PJf;_I^UCa()6q%MwE+_6Yq?^q=Hmg`dN z;BDu}hNf<)^+hfDsMitz8Wsf@k(tZ0jBBRW5OHis*Qzg;5(p5L8A>ncGd9S2q9V&s zb4g?iPbxmn^A+dp;R5O|hu%6#Urj5Y*3Ye!FGD-&gu{$(o8JY8oT18KDP|WmX_G7R zw8nLCeInW2WN+9~?zB1ZVh0jj550-rYp8&bPaYO&bAqgMfJ8TdXRiBF z`Q#mdUw2VkU$rkF5EAnCoxggAF0~!H%7;P~7oqP`tnUU+up+#?yoUUE;QO3_HTRrb zGJFc|k-4Orw88`+f4;>Gh*o(s%?Q*X03qq4mTfpw*hbf3&X{3iReJ(@M^rG45Dy^5`0=(BExzIH2OE3 z;lCxsHve-(=}f-Ra^AkjK}Y7k=Q@Ri5sGsg@18+Dfohl~0F~8@FZ1ZKinXsSanl~% zeLof1u@_)Y174I%<@;xxm_!I!xUBuznpg9Al3(_;(#GiSi8tgUnVk&Y;t`?&3%y|+ z{jDo4mFn7lo#}>z&z&!hU-8GLXfpSbWR#0lD-e(5_Xes_;hA(u+e{3^!K|fRz@zi* z4svfaH)s*~c&+O<&gS1K_WNzA?O3qeULNo1o8pt@t_v^cv5+#8CFi-qk*4|Owq!XR zVTS7m&ZKun%b*W59#ZG_10JI8vr2LT?d3`B07&^7C1!0i3qQvWvfk6(O096&iyRHH zrS+jb;Nw?N1-?75$vMIxG~fr%=J+oU^DpA|-?hw!4kS&SvERl34q`mbNZBNlgCz9N z^5C5M7DS&02$J==@=Q$BTgvmO`2dUAd*}>U1A^qXq$Y|z1kNh4ZtSYG$M~x)Ff&Bv zjt($<19;mFR}cTc8T~IWm5>BJ4oSlc&;j4iNdke#xme5F_W))dhijAG^Ac`udmH0l zk1)ea9}+O7?z4Gd?H(&BNg}_Tj=whmS(ceRfxr6SSNZP+&-*YiOuAn?>DcZ2I!*w0 z&S|J7!Ah2YrE3AmXA=ZSqx%N(;5cx2o&D^Qzj$5eQ=!sA^X{8_TumFNipT6Tt7d(K zTB1E(k#1}zU;AfM@7i4jz~V7SP?2VUaVoK_UsY*@xdP;ovvamyRLNi=7mFLkrbD&GICJnV6sxcTZ#Q8c8cO~7~~ zU@TdEoDTph52|Qt{YIQlqk|P+z9#Sw9nxny!t>^8=JDeyPbwaAu6Jxq_(NCwl0@*7 z?q)c*VEo!8wH}RJ&Y`6y9yygPw$lJmYV1~M7#A0o~Hbe^A+1Ulug2G&7L zNA1v0C0a#Jm6qk2>5ci;GdcZD@{EMx-)(*VQc3#jHlu~Q)#!uSAb=lSoi({~nf{6) z;1ROqzIiaHc;W?ULcb(e>p<6|7L0HSEPO#oOrj6We37mFui^glFGt{jQdQ~YGm>;l ze2xNq{jD?JzdSS7vNpkxxHF3PIq*8?4l(}cLH|;yNip#8&}j#zZGiiuoM2(M1G=`Q ztnM?Is<{97WPBFx$M2O`?zRME^L%~p*yxA7pg-JIv@?pWLyP4vQ0;#)4F85{71;*> zAU${gJyH6Q30gpfdp}zUaMKs}{up2si*4J-1k6QqA3E#6Xf6ESl?fQf$ZhhC2#Gb2 z%xH>ZV;f`Wf9Ro~sN{o5a{FPRV>%eJ#{>vU=_a9-u30J;;1M6us3#@?lN#u@Jt6q( zH$ZanJ+|9`@qf1LZJh(D-L+RhQu>};(pMx`9p|73|_#32*%{3<<>Pca%-&DNM zs>e=t;j+({kT)@n#I=-vT+Hzlfc<{_cf1qE)0JnI&tqHUW~G5%QN3pNZ4=ZHJPOIp z=y;icImufq*T%mm;^+ZuliaO;!HOQm2+$I5Ct-_;2S&moV>TpoZUlk;p2N#R*)r-of@Kq=a%eezsUo})wfn)TqpQjrj^H*Gahn8`5iQzlq7#>#vVojz`F+byT zu#*Vj;`S!}8!_Mc^uI3o|MnSwc;^FUL*k`SD)cuEPXx*qRH)MqHfQ7qJ7+WDo2PE_ zFH5t}x}40dztl=DYV+1mZ)n^xDu27cig~)K2~zG!Z?gzWSG8P(02h66?~emj3$-oN zSEZFajsGnsr zya4O=d~_R}l?@C^nX%{&RbDaMot>oJEyK(dI=(BgzMC@;BWGKcrr*3=OOrjY7_W$m z%AU>ducu0yuIssijql41gBxErxkw0Vo?}&fCFu3Jm@7%^?(O9Rd*0ZY+Ql)`Xdu5%RBZ-cmz;V3ZAp>4|D#NtsbTo41siO{t<5fs7mqcZ8 z9+8O5{$l$ZQk)J-u7K!3%Fkpay_HUzvl~f#kd_lvqki<77GqY@gW=O@N*P&6e_oEq z^H{Gt6)dT@de~-154n`x=BFr6H~R|QYL9%4m3|%^GlP|;f7}#ZCLA5)Y5utCcIS9L=`h~ zY%11R^m(vx_1@_<+Pk-oXN7N3I`W%%IxX}+DpYMG`e>lkb#pz->iT8sQF*FO_yT?RF}xP(jLQ+{xwQ+0jemFvO^Xl96j! zAW|th8FcfpC-hPcHiVQ5cU?Z2 zqG9PneXW-!?Ns)0Anmi&hi0DL-;?|G+e;jEI1P2i7GW7pEg@f@2Pc-Lp=t_0>f0rh zIRcOXqTZB{0V~;1`prf&j}Nue#p;^YNFu{~f1{Day%{gl=pIk5sW>$4U`B%b2I|!l z<6X@O5y=y*sx;N2AZ|s(VaJa1vVBbeNPVT>L|KY~lHMsRmG(N#6zOVq#nRRk#O2W1 z`nuDKX}rnbP&w!_n;!rS9k)fjsj)bGGV}W~OL5k>eKG>h#A)s!|A9d9ISkv-U`%5n( zk=6W*&+?o~jNQj?&(>K71_qv8o0UsXf_Vnks$Yf!u@Epf?Lb0r zG%@Gy-c|VVN+w2NBoU2w{cgUpQHj#)#M+zcY3YBun_pYq1uDj&^=RB#sYAi$!+`L{fd!SU^&bQwyhTuHtHg4KV3 Pf7jG+T*|t5$LIe5&|wb* literal 0 HcmV?d00001 diff --git a/playbooks/aws_find_inactive_users.py b/playbooks/aws_find_inactive_users.py new file mode 100644 index 0000000000..13f277f0a9 --- /dev/null +++ b/playbooks/aws_find_inactive_users.py @@ -0,0 +1,235 @@ +""" +Find AWS accounts that have not been used for a long time (90 days by default). For each unused account, gather additional group and policy information and create an artifact to enable further automation or manual action. +""" + + +import phantom.rules as phantom +import json +from datetime import datetime, timedelta + + +def on_start(container): + phantom.debug('on_start() called') + + # call 'list_all_accounts' block + list_all_accounts(container=container) + # call 'calculate_start_time' block + calculate_start_time(container=container) + + return + +def list_all_accounts(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("list_all_accounts() called") + + # phantom.debug('Action: {0} {1}'.format(action['name'], ('SUCCEEDED' if success else 'FAILED'))) + + ################################################################################ + # List all AWS IAM accounts, which will include the PasswordLastUsed field for + # us to filter on. + ################################################################################ + + parameters = [] + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.act("list users", parameters=parameters, name="list_all_accounts", assets=["aws_iam"], callback=join_filter_inactive_accounts) + + return + + +def calculate_start_time(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("calculate_start_time() called") + + parameters = [] + + parameters.append({ + "input_datetime": None, + "input_format_string": None, + "modification_unit": "days", + "amount_to_modify": -90, + "output_format_string": "%Y-%m-%dT%H:%M:%SZ", + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/datetime_modify", parameters=parameters, name="calculate_start_time", callback=join_filter_inactive_accounts) + + return + + +def join_filter_inactive_accounts(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("join_filter_inactive_accounts() called") + + if phantom.completed(action_names=["list_all_accounts"], custom_function_names=["calculate_start_time"]): + # call connected block "filter_inactive_accounts" + filter_inactive_accounts(container=container, handle=handle) + + return + + +def filter_inactive_accounts(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("filter_inactive_accounts() called") + + ################################################################################ + # Compare the PasswordLastUsed field to the calculated start time to find unused + # accounts. Ignore accounts with no value for PasswordLastUsed. This will ignore + # all accounts with no passwords, such as accounts that only use API access keys. + ################################################################################ + + # collect filtered artifact ids and results for 'if' condition 1 + matched_artifacts_1, matched_results_1 = phantom.condition( + container=container, + logical_operator="and", + conditions=[ + ["list_all_accounts:action_result.data.*.PasswordLastUsed", "<", "calculate_start_time:custom_function_result.data.datetime_string"], + ["list_all_accounts:action_result.data.*.PasswordLastUsed", "!=", ""] + ], + name="filter_inactive_accounts:condition_1") + + # call connected blocks if filtered artifacts or results + if matched_artifacts_1 or matched_results_1: + get_unused_account_information(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1) + + return + + +def get_unused_account_information(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("get_unused_account_information() called") + + # phantom.debug('Action: {0} {1}'.format(action['name'], ('SUCCEEDED' if success else 'FAILED'))) + + ################################################################################ + # Use the "get user" action to gather more information about the unused accounts, + # including group membership and policy assignments. + ################################################################################ + + filtered_result_0_data_filter_inactive_accounts = phantom.collect2(container=container, datapath=["filtered-data:filter_inactive_accounts:condition_1:list_all_accounts:action_result.data.*.UserName"]) + + parameters = [] + + # build parameters list for 'get_unused_account_information' call + for filtered_result_0_item_filter_inactive_accounts in filtered_result_0_data_filter_inactive_accounts: + if filtered_result_0_item_filter_inactive_accounts[0] is not None: + parameters.append({ + "username": filtered_result_0_item_filter_inactive_accounts[0], + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.act("get user", parameters=parameters, name="get_unused_account_information", assets=["aws_iam"], callback=save_to_artifacts) + + return + + +def save_to_artifacts(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("save_to_artifacts() called") + + id_value = container.get("id", None) + get_unused_account_information_result_data = phantom.collect2(container=container, datapath=["get_unused_account_information:action_result.parameter.username","get_unused_account_information:action_result.parameter.context.artifact_id"], action_results=results) + + parameters = [] + + # build parameters list for 'save_to_artifacts' call + for get_unused_account_information_result_item in get_unused_account_information_result_data: + parameters.append({ + "container": id_value, + "name": "Unused AWS Account", + "label": "user", + "severity": None, + "cef_field": "awsUserName", + "cef_value": get_unused_account_information_result_item[0], + "cef_data_type": "aws iam user name", + "tags": None, + "run_automation": "false", + "input_json": None, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/artifact_create", parameters=parameters, name="save_to_artifacts", callback=playbook_aws_disable_user_accounts_1) + + return + + +def playbook_aws_disable_user_accounts_1(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("playbook_aws_disable_user_accounts_1() called") + + get_unused_account_information_result_data = phantom.collect2(container=container, datapath=["get_unused_account_information:action_result.parameter.username"], action_results=results) + + get_unused_account_information_parameter_username = [item[0] for item in get_unused_account_information_result_data] + + inputs = { + "aws_username": get_unused_account_information_parameter_username, + } + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + # call playbook "community/aws_disable_user_accounts", returns the playbook_run_id + playbook_run_id = phantom.playbook("community/aws_disable_user_accounts", container=container, inputs=inputs) + + return + + +def on_finish(container, summary): + phantom.debug("on_finish() called") + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # This function is called after all actions are completed. + # summary of all the action and/or all details of actions + # can be collected here. + + # summary_json = phantom.get_summary() + # if 'result' in summary_json: + # for action_result in summary_json['result']: + # if 'action_run_id' in action_result: + # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False) + # phantom.debug(action_results) + + ################################################################################ + ## Custom Code End + ################################################################################ + + return \ No newline at end of file diff --git a/playbooks/aws_find_inactive_users.yml b/playbooks/aws_find_inactive_users.yml new file mode 100644 index 0000000000..48a91dec45 --- /dev/null +++ b/playbooks/aws_find_inactive_users.yml @@ -0,0 +1,20 @@ +name: AWS Find Inactive Users +id: fc0edc76-ff2b-48b0-5f6f-63da6423fd63 +version: 1 +date: '2021-11-01' +author: Philip Royer, Splunk +type: Investigation +description: "Find AWS accounts that have not been used for a long time (90 days by default). For each unused account, gather additional group and policy information and create an artifact to enable further automation or manual action." +playbook: aws_find_inactive_users +how_to_implement: "This playbook is meant to run on a Timer, such as once per week. To adjust the lookback period away from the default, change the number of days to a different negative number in the 'calculate_start_time' block. Note that this playbook will ignore accounts where the password has never been used. These could be unused human accounts or they could be API accounts where the access keys are actively used." +references: +- https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-finding-and-disabling-inactive-users-on-aws.html +app_list: +- "AWS IAM" +- "Phantom" +tags: + platform_tags: + - Investigation + playbook_fields: [] + product: + - Splunk SOAR \ No newline at end of file From 91cce1c6294aab589e9dc6ce1dd30d55995897c8 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 12:12:28 -0600 Subject: [PATCH 02/16] Updated --- playbooks/aws_find_inactive_users.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/playbooks/aws_find_inactive_users.yml b/playbooks/aws_find_inactive_users.yml index 48a91dec45..9bccb975a1 100644 --- a/playbooks/aws_find_inactive_users.yml +++ b/playbooks/aws_find_inactive_users.yml @@ -15,6 +15,7 @@ app_list: tags: platform_tags: - Investigation + - Cloud playbook_fields: [] product: - Splunk SOAR \ No newline at end of file From 2871175a1e5f79ec698009fdac5a17e331bb05c0 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 12:13:00 -0600 Subject: [PATCH 03/16] AWS Disable User Accounts --- playbooks/aws_disable_user_accounts.json | 337 +++++++++++++++++++++++ playbooks/aws_disable_user_accounts.png | Bin 0 -> 577987 bytes playbooks/aws_disable_user_accounts.py | 183 ++++++++++++ playbooks/aws_disable_user_accounts.yml | 21 ++ 4 files changed, 541 insertions(+) create mode 100644 playbooks/aws_disable_user_accounts.json create mode 100644 playbooks/aws_disable_user_accounts.png create mode 100644 playbooks/aws_disable_user_accounts.py create mode 100644 playbooks/aws_disable_user_accounts.yml diff --git a/playbooks/aws_disable_user_accounts.json b/playbooks/aws_disable_user_accounts.json new file mode 100644 index 0000000000..fecc5e822e --- /dev/null +++ b/playbooks/aws_disable_user_accounts.json @@ -0,0 +1,337 @@ +{ + "blockly": false, + "blockly_xml": "", + "category": "Cloud", + "coa": { + "data": { + "description": "Disable a list of AWS IAM user accounts. After checking the list of accounts against an allowlist and confirming with an analyst, each account is disabled. The change can be reversed with the \"enable user\" action.", + "edges": [ + { + "id": "port_0_to_port_2", + "sourceNode": "0", + "sourcePort": "0_out", + "targetNode": "2", + "targetPort": "2_in" + }, + { + "conditions": [ + { + "index": 1 + } + ], + "id": "port_2_to_port_3", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "3", + "targetPort": "3_in" + }, + { + "id": "port_3_to_port_4", + "sourceNode": "3", + "sourcePort": "3_out", + "targetNode": "4", + "targetPort": "4_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_4_to_port_5", + "sourceNode": "4", + "sourcePort": "4_out", + "targetNode": "5", + "targetPort": "5_in" + }, + { + "id": "port_5_to_port_1", + "sourceNode": "5", + "sourcePort": "5_out", + "targetNode": "1", + "targetPort": "1_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_2_to_port_9", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "9", + "targetPort": "9_in" + } + ], + "hash": "5f38423da066d88fdb15072fc93346ea05c4fafe", + "nodes": { + "0": { + "data": { + "advanced": { + "join": [] + }, + "functionName": "on_start", + "id": "0", + "type": "start" + }, + "errors": {}, + "id": "0", + "type": "start", + "x": 150, + "y": 0 + }, + "1": { + "data": { + "advanced": { + "join": [] + }, + "functionId": 1, + "functionName": "on_finish", + "id": "1", + "type": "end" + }, + "errors": {}, + "id": "1", + "type": "end", + "userCode": "\n # This function is called after all actions are completed.\n # summary of all the action and/or all details of actions\n # can be collected here.\n\n # summary_json = phantom.get_summary()\n # if 'result' in summary_json:\n # for action_result in summary_json['result']:\n # if 'action_run_id' in action_result:\n # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False)\n # phantom.debug(action_results)\n\n", + "x": 20, + "y": 836 + }, + "2": { + "data": { + "advanced": { + "join": [] + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": "in", + "param": "playbook_input:aws_username", + "value": "custom_list:aws_inactive_user_allowlist" + } + ], + "conditionIndex": 0, + "customName": "user in allowlist", + "logic": "and" + }, + { + "comparisons": [ + { + "conditionIndex": 1, + "op": "not in", + "param": "playbook_input:aws_username", + "value": "custom_list:aws_inactive_user_allowlist" + } + ], + "conditionIndex": 1, + "customName": "user not in allowlist", + "logic": "and" + } + ], + "functionId": 1, + "functionName": "filter_1", + "id": "2", + "type": "filter" + }, + "errors": {}, + "id": "2", + "type": "filter", + "x": 190, + "y": 148 + }, + "3": { + "data": { + "advanced": { + "customName": "aws_disable_user_check", + "customNameId": 0, + "join": [] + }, + "approver": "proyer", + "functionId": 1, + "functionName": "aws_disable_user_check", + "id": "3", + "message": "The following AWS user(s) were found to be inactive:\n\n```\n{0}\n```", + "parameters": [ + "filtered-data:filter_1:condition_2:playbook_input:aws_username" + ], + "responseTime": 30, + "responses": [ + { + "responseOptions": [ + "Yes", + "No" + ], + "responsePrompt": "Should those user account(s) be disabled?", + "responseType": "yes/no" + } + ], + "type": "prompt" + }, + "errors": {}, + "id": "3", + "type": "prompt", + "x": 80, + "y": 328 + }, + "4": { + "data": { + "advanced": { + "join": [] + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": "==", + "param": "aws_disable_user_check:action_result.summary.responses.0", + "value": "Yes" + } + ], + "conditionIndex": 0, + "display": "If", + "logic": "and", + "type": "if" + } + ], + "functionId": 1, + "functionName": "decision_1", + "id": "4", + "type": "decision" + }, + "errors": {}, + "id": "4", + "type": "decision", + "x": 80, + "y": 508 + }, + "5": { + "data": { + "action": "disable user", + "actionType": "contain", + "advanced": { + "join": [] + }, + "connector": "AWS IAM", + "connectorConfigs": [ + "aws_iam" + ], + "connectorId": 46, + "connectorVersion": "v1", + "functionId": 1, + "functionName": "disable_user_1", + "id": "5", + "parameters": { + "disable_access_keys": true, + "username": "filtered-data:filter_1:condition_2:playbook_input:aws_username" + }, + "requiredParameters": [ + "username" + ], + "type": "action" + }, + "errors": {}, + "id": "5", + "type": "action", + "x": 0, + "y": 688 + }, + "9": { + "data": { + "advanced": { + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "indicator_tag", + "repoName": "community" + }, + "functionId": 4, + "functionName": "indicator_tag_4", + "id": "9", + "selectMore": false, + "type": "utility", + "utilities": { + "indicator_tag": { + "description": "Tag an existing indicator record. Tags can be overwritten or appended.", + "fields": [ + { + "dataTypes": [ + "*" + ], + "description": "Specifies the indicator which the tag will be added to. Supports a string indicator value or an indicator id.", + "inputType": "item", + "label": "indicator", + "name": "indicator", + "placeholder": "my_indicator", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "Comma separated list of tags. Tags should only contain characters Aa-Zz, 0-9, '-', and '_'.", + "inputType": "item", + "label": "tags", + "name": "tags", + "placeholder": "tag1,tag2,...,tagk", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Optional input. Either \"true\" or \"false\" with default as \"false\". If set to \"true\", existing tags on the indicator record will be replaced by the provided input. If set to \"false\", the new tags will be appended to the existing indicator tags.", + "inputType": "item", + "label": "overwrite", + "name": "overwrite", + "placeholder": "false", + "renderType": "datapath", + "required": false + } + ], + "label": "indicator_tag", + "name": "indicator_tag" + } + }, + "utilityType": "custom_function", + "values": { + "indicator_tag": { + "indicator": "filtered-data:filter_1:condition_1:playbook_input:aws_username", + "overwrite": null, + "tags": "aws_inactive_user_allowlist" + } + } + }, + "errors": {}, + "id": "9", + "type": "utility", + "x": 260, + "y": 344 + } + }, + "notes": "This playbook uses the following Apps:\n - AWS IAM (disable user) [asset name = aws_iam] - disable AWS user accounts\n\nDeployment Notes:\n - works with the community playbook \"aws_find_inactive_users\" using the usernames discovered by that playbook\n - change the prompt block from admin to the correct analyst user or role\n - create a custom list called aws_inactive_user_allowlist. Any user names in that list will be ignored by this playbook." + }, + "input_spec": [ + { + "contains": [], + "description": "One or more AWS account usernames to disable", + "name": "aws_username" + } + ], + "output_spec": null, + "playbook_type": "data", + "python_version": "3", + "schema": "5.0.3", + "version": "5.0.1.66250" + }, + "create_time": "2021-11-01T20:24:56.751674+00:00", + "draft_mode": false, + "labels": [ + "*" + ], + "tags": [] +} \ No newline at end of file diff --git a/playbooks/aws_disable_user_accounts.png b/playbooks/aws_disable_user_accounts.png new file mode 100644 index 0000000000000000000000000000000000000000..14d1760f5f85a0bcc0b41cfcc22cf5651408c63d GIT binary patch literal 577987 zcmb@uWmsHIx&?|`LLd+zK^k{W2=4CgP9Q+A#7`DBxL)KVJXQ685>ZI=Rp)faBx((>o!@U%4iPH;M|LZX;=~bUcb1gn+*GC#q?!X z`UT==_jtk`D~Kb<$n@$FBImDA{g4zmvdL>N4;Hv4Tjfy({7q57k`#8cTo4XDoTnr< z>a%Vy^6p>QQFKhH*}Z3Et^t?tLfk}#Mjiv$uk7yU#O}R(z}VB99AumJp`w}{87IE+ z+rDxi{2j-F5pCXA@$;&r36-u5-_yUfk`HXqOC}+xDCg+5qZU?;<1#l41 zHB|cep;t9WlL8Q{c)DXI0vfc-1o@lPiG~Cl+@X&Z5P=8xaaDjSSEv(;5axEcB{j&SyfSSyf85ciFkD*^OlfkC|`Ui zg6KyKBkt76g2)iQOwP~u_uA%>{O?q(SsB%zZ->W)Qnzq3mowndN?Gp*9^pe!*SY)~ zM5wlMpPz=j+Au|RdKvbU@_nP}5rt(Kr_o`0DIJpvU%ixObY^Yeuj~N2+GP|Ib_s`A zR~Er0G!{inApj$ztn_qusKwSvAJwPz&TtW?)d2er1lif@&R5Z>R7Xn@OOOO}DjbME z@g~Ac`$;Pli(JgF(rfJK-~EKhaNv8!S}OfjUebNJjS|xxp2XaI{uLij;cfP-eD}GPaZ9G?P(5@!1LM2VOt{}Bzm{?C9flb5 zV@CyzD$nveaDs(iA6bBYnu?;X!LJdDNHlQhs4_qq;;V#_ZzyZuSokKr1;g=pL)iGy zs>RGxLsQ_n7Kv`xR>{X|uzow%I+QqBJf!dkzq`)f*5wQ1L(Y4i^I0{uExqU<`+&VW zyL>m{V!S(9KwSeo)<5&uX!KhL?Jlu`xk_SI_QPwHpKwHgzisj1*hWF8)h2a8hyti{VB%JDK1bp6k~>?M+7c>{3!tL9IZF5}2@<7Uj6L$m;@H<+Gsg911g-&${&H#R-Wow*T-qSpWUn&r< z1qEwFGrtp9J2%{l_}L)}G~~$pQ&%D@vQa9nK0^?p3xP8g=9fmcd0lS7lZayO zf0OxK-EYenQyYsj(AJn>_Sp+RNqeMJIHAC^Rh$MCVAsVYdb&RVLU>M&CMvp%hWJ*Z z6dTlycOpJ3&4%OOO%W>18ymDqp(-9aB#KXl*Dw1~pc=18!bkW8C2e$#G^*pX#wcfU zU-Dy>=XqI@g~3OZt#HMmnELOBI_wy_*&Z#*Se zD_g6`P5C(6uwGDNMI@tSbS5LmsLWRz`o*ULzN@2)Y&mnxIJ6TOSc9U3Df8vUmzQ5e zyMn$fJXazV{Am1K4<&)zn9112BGts1@MQ#XguA4NB%UNFVm`w2D`rG%gjz%akrojt zhvwV2`H0{8n2cFW0mghc2{g4pc`t}VF$BN<|J=dItK$t2hyyiJv8HFAT9JUg>J< zitF?TA*z*CevRK=;6kzRi@X0#w zLi51&K#)i(!%M8Nl4k$P2nX$ucALorp9a#Ea;UV;Na_1;3f9L1>HP4I@{ zYTMF7U2s<4>nPPI^Qd-y1AgT6sdTN@UBehdr`F^aL-%IS@D?tQmGckRUoUQ^3#N8* zDl#e->zC^XM@Lu(?E+UY>t6Etw|@5S%~&Pf7Mg*EK%3!K{IdNJ;eAn>khf96FT8l? z9e#W|zZ}O3voR_G5@UQqt98#zWxY@rCSz}oRh1SRqx zD$f!D;oLausfnLOVX$J^MX`OA4%H@gV4a|O$5qWzO*=qqWv(vwo}8D)Q{o&m9a*WP zWb5MV2@yL;Uhg?G4ZXSdP@r~#wujA`w)0_PRY~u1Xie0&UXI>Ccft^&wbTwQb zLMh?|wsOzK4e_XMozQ}BuVub{bER!nd?9BT@5R?cFOf8nT%3@cq?>X}!_04MmTYxj zcv91sp~NMZkjrHj{Z5tL_2ao>NMfbAs71b#xz6@QXe4fd5kc{Z+bPl3!}{v_{(AkSY5_?qkj;Si;pg*&H{lli^r1{Q zJ~V=AY&9zZvq7_jYw zW{QhVN|LAN%Jka6U7jbm)>9v*?l=?ev|HAOCD(cfQ$)F@?CNIqt8O0ff5oTh<jcB7TKIv$MMNDHV_1h#rR-v27G z-I$+O>Ph82bJ`rGRdP}!6~cAi?w|9k2_CH)EDMc+u#!E_)r9QE^(H-j459w&6K&k;3)Pt`LY}C)lcCf6!CW(|);>?iOrc za9{qoGyvMZvhs0yw9OdMayj?8et3oz3t04_bH6@}SsxD`35wc_V$9GMDDvLFIhWS@ zIFq+Rd%t`me_2}5e25h&#L4gG`M8mh`Q? zIpb|Nu#()ibP@RgKEL~MrF5I`P3B#AyL(@Cqc&8)_Ym~(@UAUY$o^G_v6z!1+_g0= z+_^K{>x9*t4*}aFTx22J>AZd&zCV*eYkt=V%2<3C4rvPr9X_+f+akc(-%=Nw%6^_6 zm>gwvjxGEg`tRL0$Xkw%eJ$bPir)A|ojyLcMLax^u94t1BMT3z4;!d4i@S5pX15&# z=#|inAR2{k18yZEjjn`A{JE~1paeSkp+T;q=pY#D2s6``F;`H4V}Pa6;E>=6;gDe| zc-SEbPxP;}Bs?7);$PPh;NXHS;gJ6Ej3Vs(^ofQYPkH`6BgTG#Lxp|AfgSFd2>*N< z>pm0lpJ}vR*gZHAH8B|(*jdfg(aa3!^vTXy&I6Yob^+a9TE__v4xjqzfR|CFg22k3 zwN%%3)>e?`HMO&4`S8)s#Eiw=*8Zs+IDU6tSkl(a`2(4|tqstL*Ij_(uP1n6>8H!A z6l8xr;%qHIp{<}yCT8boM#jPNo`sD<5QB`2jNkF2Ij^d??aVOjZ~uJS5dx|`W( zi(A^l`V3Zw;CnWncl>{4`2XDcpDO>(s^MhjC}w91%jqomKfV5s%>RD#|DEx#I(7c1 z&Uf#)+5WxGf4lXMto*D`ZU48v_`9S3x(e%QK@5J@e~p?TMjeqP05*`smf}k4urq9$ zJ$;azVSniUKEu+;eLmzh#`17*!f-O;BI@q&hiT}k`WkUiB`posJ;kP);KOI+&!Q`H zgek(wFxC<10#2n!R6400UiF#%hGtS0{_;f$>L}z6#Q1<~{_#z;1UmLB(SDSVltgp9 zpeDXFFjE?o=c@H?zqNQjS8PH?>t0ax0xYl~aHY4D_64i`PL_dJ0~|BU;WL56#cnDi z6WX8NK{9Mw<MF8kOwM~Dx;+PfkM*$e#A!fH4j;obi0 z=Zh>OTGqZ7vi%>DS8-O%fsQ4DPKW5oPUShxUa_WkT9LRdd`yp$tTf(QX8 zJ|nC|hM02^*~Z2B0l`3x?x%G;B#vIjFKalHLKwPb594fPSUN_Y+)1E6Oo^ zi&3|flx1W{g{*9k;~h^CjPM#H;qX20(1>JQewdBD=a&5%@3s&+#N$xs+MvV=xiYz5 z>_R;CxG^g;ZwWTW6>0snHfwAb0JRYcja6~=BH`G!vADEVGuv`Pd!*EV{@)MrUnOJ~ zqLW>-?ngy!lf&i=u>;ZzeTbcOOaIb}K>lZlAPxVOPXbZPR{scMjBmKE2IQE+i@CYE z3cwaEE0fpKVNC*u$sw_M90;ALF0eu~3)zTn(ly#BsD6 zC@zwg93xHvO4ks*-CN9~cVv;k-YphRPKamL*R$Go@tebK!jTI}rf<<61?a$kW*(E- zQ(+53e5t&`4&k4MG)C-cNPSMbm6a>FmMqd=3(|a2GDcHB*ZDTWykex1mfFx#uo#T) zZ$PUlWkkKU)L15|y?7(9Utt2BC{|RRFVdHQzM+>XQourjILPFIv?q%;FIM5o@GcUx zSHdsFa+aBT)^p@`2)FV_h~2hJAZOE|`yhUI-5=ck=GxPLDi{bBO2kD z294MJZais}*HL00p8vP2_8*g?M-i^mx5_u*{Aty$_ERV;Lr6o9Tq+c?00iYA5zwN! z{3+gkSuBPu(z*++Y}C&F?BINvUs-zrb)~jZ8&}*O>V=-JzIwRCJ}K^<#lT=*X|d=# zysfN`WsQ?5(ayHH07jNrEaqjr<~w%*FJasOf$k;$!<7pH3)~gG$`tq5NK;}_B?@Z% zG;A>KAt(dsCzP!>r?O~8HS2sVc(omy*yaxnuW~68_C3J?t<=g>fsyhEHvv!?+(pIK z-Q~TuRzHDq@vAVm;{~FORQ`nGAY4)B`ph<+*2Q^VHySss&epKaqvvq6w_L#w;|a~B zKwjpe300Yd;%g%b=-xY`1WA%xF~rgUqmh*y3KeH?$ID+F=9AfimpBRimjaulRMEoL zE?u#8GyEA-U%%q-61{b@ZvFgrnN+W9V2%Sc@Px`=jeqj}0X+VDvGzYL)>EwL%fA-u z2P9p*`vpM--Q(I-;EF?DW26GNk!oz%=iRdE6AwkBau349S6L;_D<(D)dSiV%uNF-i ze8W}Rdn_cNA2Lf`=GGVf@*GtE&NJ?tUn-9UKNbjg&gK`ZE_-J1S)%cy9v28(Seq5n zP0M?^?ol6}JF0JfsfCcvRp*1{*?)^DDbmRudp#?0$B}ap8?jsPx-M3gEVZ%LnU zUU5iHuD0W?H7t116>D*{;`U3;L+pWX4f#pYrWO3` zq)@qoTM1fPW|wyw$POsWfn45A7#9Ymkw@S&rsWq1_9yuHVs3(dbG3>xywqlCCAp>5 zq7z$YBEnPK`LyrCJga3pLCWG^*^oO;aa!u_c)?d?`_-T6o z!cC)FqPmSyvcB{% zt|<1h)o3NoiTrlEI9NmdJVUmC+CY;bPx0Cayv;(lPp;3%W^TX(a(Tg+fuz3)=A18 zlnZpADH~D8-n@-qe!We@{W)fCOuOak=qOzSLYvJm#7^@jv8Q5&*Z?*keke&AntU!AzTspezt8AyM-|h?E`Xt~V8(Dt( zL1%_>U=vdZ6(F!}*eULi^Qy6`s%#xp^`qNtM1a}<`%-O=9dp)Cq36y&eM<^h-JT(z zm2FExUKJkTTE^v9jwy!m2hSM-1d1Gb$;ozB}@>A)fc~G-DhFb{`r$jJ^7=o22<00oAb z#}h*Dj~LJ+5zw}$t%nH2KUuxjk5zr?#mj6KmzMjZ_!}pkGOdMS|9Qs1M=FD42iTnUNQ#s*IC8J3 z`)aqODXXs|^^W!BD@BZ+TY+wG{BrAFe9UJ^^{edF4}CjT*a#$*%l&#Nls4<^E)-mPaE;{xVddNEjH8xT5a$)_7q%yYp#H{7O`Ya4}k0 zDU4t1Z&i3|biP(-kO_Y3v_QHdTkOpmGdjywC)#DidC-GDb}kn_H_Ybbdqw6^1ThM? zU{F6aGGy7SR&|5(BSBil66%jo8gjZ?+X>CIU-xdScmI0jk#dn_9X_zDXv#sHrCqu~ zl5!WDmA|6(i~bm2975V@@@HBJ8$$$mB&gKSf_}hLvx#|-PLZG+Gz$F~3mW2p{x+Ac z#sCN0#GToeU4ER@KJnd?S^iGnR0~6cvTY0$ksyhy{Tjns>X|BzBN`DXi`tGWoZrLS znD&UWC;^a3k3sVM`%D;K5zFry>1vSY;o-$HXpFbdsU@3Q&ze2I=dPq$NfUbBPeM!i zt;W3+-rlyU{-Zwk8DJ%B=R4yi7n3G$L$-ekP5f^KorpQL{DA>Wb}t0CKQX{h+)`Kt z7Y5M3NlAzQ0_b(LCxBK;Ph9$_PXdUfRPoj10E8SoEQ+7&cA}3k_m$_y^7CA^u?cBq zfCHSgfW`trSC?#ARH+N_a3_F30m*0kR@AWrxzuWg z+uhKlFh|Up^h3u7)Gp4}yL?+)q03N*l!zn8xAStdipI{7_Pfb54zKN&wtq*k4@Wv- z^v<}(y}S?hYZUpf$nd{xQpZbixK8NH^AFW{e=T7+|7m0>dZ&j?!7?DZWs#rgW!U6~ zgP|Xw{s!p+83AO+76FQUEs&fdfSuik2Z>o|Y5Gz^P`(Ac+=S?RaXiO_M{^cONb`IiHvmM;%eEGxKUmZo zDE5@iSF05aX_cKw!kGGG5o=q27`xP*{88(SbFQ{k(bZ;wjE`_yW-@+iqT$ANuFb*n z-Q%&brZ(hQVh<%V`W^o{XwOSkGd&Ogri;*UHX}sKNSWp9bSUn9-%Lbr{2ns2oTpyf zS=i4BHNdw$9`|+uLDTT~GK#2KKHLRyr$&V>s?S~Tk}M!reE|KD9d9d^p7C3({5%PY z@nx%F9aekhiW=Cf0{QowtvPN$YGOCB4ydxlwti?Ouz2R zae*%HP=D7#RD}1XMpPHpE77+aXSrFfkN%p6kek1l z3Wb0dRW9ofOuXWhLP4d}<0A&2t85T~>1AbPMspEvC5YS$`&(S0_2-+`{-w|Rnms$a z+`Ho@Uf+1pKw~0fVhxaVe3I_l%Bpt#iqOWZ-KDu4S#bh4 zXlW{@#9$gD{SlJ@TY&$&udsI~j@|b-Hw`9SAeOO3g*>?ehgS0pdhzWPDG3h>`&y%X zxz?n`J(mpEqqY>-`zabdo5j!F0-$XDgM;3Y0!M;c;>T2HhAKceUmZuA{o!!|d?NIF zF^g4B&R5y4piAJW zC_^$9?f@DgQjVv}XveiDBRPt+AyGI}`?wTqExfH&(Uq;rsTDhC`sha7bzfX|hUY}0 zTMK$F@GlA?EPC!3Zt5etrz6*y7VO>?zS`WHb`#VS!hS3ml%+2F3H{z~@oqmX`57Z# zgN}S@ROVsZsmbG~*O(YgCixvk4SDzaNYFCl?my)eNyxyUM#abGJq&7yDG>7FmhwhV z2xN}O3Bq#U1%H})(9btZCjFDo|qlVOH`oboGJI^Xm4tFct3?{j04;4zG`|cdU78+U6FEb#0r2Ont-e z)=fYO<|3{^^~SMYSnEUEca^Sc|`NDL_!uK4&Lb|DI z#LTSX%d)7NCZIfkdhE|EJ936zdCO7wMH?=vn0Jxos4J zSe3c98VpVvBMeBKx~=BqH(Jq_JT{z+#7OYJMPSa9spdV?3z*p_L%^HzHtT3EkKc!%R#sT>iM&H*>6J%J&MYh;zE%z4C7@*Z^8tiy#6p`#awA(t^JhMxcnM$@(jpIe)A z;B9O;R}x0LTHJH5P+3TcG^bvf2CfQic48s~p*3WXKk^kR!*Tx81>hxwho)3R9~yEl zq=f!sT~hcC<_@nse$|2L%)8e}o{`*2C}}5e#tTx9wQ4RHEo2{xbtWo3%MXF&D;0}% zC>PAkNxU_$Nv%{a$#yH*+TS(kYjcjqA88#gatmmvw4w6A!r|z6)E20B zwE^QGH2-o7Ow0@;S{S=}nV55RovtsvIc|84F<+BBZ8v7b@GX8q(JYpp^_x0x*~;@Q z)`192CR&|Y0!%P^Mp@BaKbW7$nwoj~th#V^cG0zGaJY5jFS%!Rl>`Ah1g+s1l!A8+ z2n%@qPwqJO7JZks1&IOuj<^(gAst>ZMm zyDx9iejOLIyD=S-{%t^%^^p!&;D4@^g_k%q1^vfP{flTAR3ait^CFQc|3H#uY#tnQ zYGX>f`wE-{)Y<7%q~HrOy9^ou)x1Ec8d!n`O$Q>#u$62*sft-^H!#t@$iPR$RZIV9 zkG%Elkyhz>&moUe>+_%uowa6kgVt0*>63Mb`XsitvEI~7Au!~ptKC_nd3{y0XlKjh z%>3+E5iBrZIB-`uxWr-Yy*z~7%?&hu3oKyn^vSufS+ciu3%^B^`?zEU@gKJeb*au? zZ7}M)ETGzY!B6)qm)gLp;wvc6IenMM?LprhC}Fg6d$OU;7(@Shc4td4T%7p~`L2q3 zXW4-@0Qy?=3pQGtP_`Y7-#;g!@;Q?3%~Ip;RS(KPq4NI}AMJ>d$&|}bQ5Aqt?K%Fg zQk^^awD;S^@4FkAdN0gs$}EnSLr01xz^#rEFZ^hEj;T3iKezEitIbNaD&b5!^^?!v zRB!a{cK+tL6c}Spe$6_86`E4;o@qe$4aymXa~8xLjFA z>NJ*bOU%sGPIsD?<$4SG7gk@==>?+N#bJc)h`p_`O*8)f1|P=8_5@9_w1gQ0d~sVp zS8KAOa9y}@zYvG|vn>u9GE?H*H=o$&n2|f-|#9o%r#_PuBKCYdT(0v8mR^KT8}UICL}o=#7G%gYJ`*neZa&UjCbJ%3lmFX@&HB)sX8&bI#GFa7OSQdppL19HZ>t!ivhV2t0F) zL03vZ^O2eqa4DDe6C?PC!{r!!_>0@xQ<25gh2tlYVe^#<#vfsWnGa~rM2=18LPy^w zuDS=8)ch9gs2O%}Dhu9LBwb{ddTs&dS`N4LuU@{Dg7}JieYHVA!2U!Dk9&vZyCNjR zpjI{WHJ_O=_i_r9=kV}TbAzE7>$|*8-g}^aF_y{7oYf+qYhufs5p|yGoN3|V{5V}i z%JSuO3&^bE<;2c+C25Hn5s$WpEHkZdOplXFyt%tVFcaaCt>&F#$j>OtrAD`k<+iss&CanOF1(#T!vue&n&@5Be%S2^qz z;chU^qE4cSayF_xrL(}IFGj|oJiX*)`OeP=2G9D(Y$PEp%(g3gbW@{P*&>Kg*^00w z-lN5NIjaB~867O1I5<7@>x#u~^hC$DeJYnxQw^8d983c9`BeZmxOA!JSNsvf!m_^|bP=kbN@rI(@p>F4p z)Dciwz1gp`>g}y&-H4)n4tbZ~pj^wzYE9Gmo|m#2j7^y1Q*s{{ZmG*yCa=z|VdnUx z>~^>cBo)Zywcb~~^nz(uSnETluO8ufm_sq1!T9^)4cQA&p{K*BVz)_!@C{{vu+ojouYHWG13<0!l$h zyE?J|1Y7%rioo%p6rFRi*VP);T1ir@b}Ecs3fhqIkjn^bahW8AIT)PF^m zvS-C>?PF_p+(Wjuz_faU(~B^N`^DF{eK5bVZ#c~5Gx%7hA25bzObE{_*2&JAY_FD6*?fH#B4rp0%WvAr(OFm7Lzs8El^ zwMxn^CEp+~6au_p__J|_?7cjze3uVv`psG!0seiT`fAqirHdrIz@2&n?H|VyNBQ<{ z46X^UiBN(ZF+&@tL&OhU*@PLY8qk+!nIr=NS zXm{RdqIdhm!%Agp}!RhzzT-vfP`?1w7OB{&xXc>h8bW3O-6@GKO?H=kae#V$?`+t2$9T^ zwVv}4d>(yalL#{EyK;dBb!!%{8&#J6Ax<_UcMlYwbYHBQD|(et!Z&m4I{2j9y8>ue zP72CmG7MXvp+(M;s(E{>d8qIoJG&2(8pZW4!;?n$=lJW}Zq8L_Qu)9V5Yn+HBJ+Q8 z4F7+<5N>It+YHaVuQ%7Mx>KSgxn^{ehDhoKoL7$({l#z87OaC@%feUN4Ng>vVIl3I ze~?6%Bg1BQ(ERALum`@YH}nf!OsZQB`cW-2s=-r5#m;-b&t6*=8br^)mS_7;iN|Hb zho12ESj=Y`5h*VQ-B$vji*@I$>#LNf6b_TEAUP&(8Wy*A7s6G5XJ}vI2^)XT>%46< z_l#(Mc4dvyOE-%7Q`nb1rFLsOYuu{)!DroSr@hfzCvffYrylm}%YAQiXP&;pH3YnChN{gr!w?xvQxlD0Yn)}hu0luvXg}W=Q6v8Ji8>WL;WR0tem1hMyv9G{x4w-yE*K-pg?LYJQpX3<-J%AFhlhoLPvb zu6`9~Ds-!+vgT0YUE#Txpjv;w#qaCVK0cw%Cp2pK{L6q~PA>2w#iL9UMsRL3PHy-? zA3x1e+wtEkSQhKyCcWq*d$Ru~njObMD{btoj#xW}(cq<%W+9{w8$YAeuP*qV!I9q#yfvmf9HT8YNO=8QfmkEdCs+5ld6B@4!&c!)jDYpYT#-O_NKl( z@Sgsv*IQwU0t@e~gs%z-cm5I4+1?LH(i;-|Zu9T}s}f_6B($S?C%^w*s(mI#ciw^( z?eQu!1P<1v(&*3IS5s64R&zC*E7DxrZIYn{{Jsh+vTIs94i@E5?NRWKIl?|$W2XBx*H~3-PP+c0_eedb! zz|0)OI2MQc^OTPDReH0B{$~KGbx;GHpncNVQo_g^sgo=rO~z%A7jftY<#@Ym3CK{;_NqS24zRGXRR(8r?;=TJaf zOe}0~Vw?JP#>C?6qm$aVGh>n(@@u8o4=`B!?|rEjc7%|Jl{fV!{S2JrLIF^d>*8!F zG+|@kzvRg0ya)4|lXXlUhSM!xTIo<}?7KUKTAJHq&@IP=%d9)B$Ba(aD?Y+h$FsxW zfoRri=$sa!inl&782P|Kue3`#Hv@ME35s9fp@Z(hq!KJhvp18(wOOj83^|@gn?^52 z{RI|CCyhA54j`LoJ>cGFb4(;NVs(?lc=R3}A-N6YPKdeM-mt|KQbdxl?k&~i`ha!y z%4Q&SZZ(y=o?ziy*u9#i032DG=1IG6UbROfWqtmevO2}{Q5YtEd-C=r-~E|=Ok?H< zU8C(HUyQEHIQww5y^!#QJZhMHZY?CnxnbLFuMsMJ){*h(x1 zF?4RbBRtyneRA@uTz%486EWkwC1sZOxz6g?&L371!pZ|r56x$%erRk9u!-opauA%? z*T4Ns>d}-1iaN5c*DK=uJk8|5t>oMDpqT!>y|0yF*?)xb`L>h$5%3+$T0D|%Wt+#^ z{NQu;LxYf@Yti)Q)}M^0!Hqt4R$LBVr8*fe7Y+33ZneU3kAjH?2_Pwy`s}60bcJ&l za``_N7}A@TH@LK)Nz(};I33?rmnOfh?c$1DZSV3Ge-EqXkQVlk zkLc~!8~YNS!Hk=t_vJ>35H~QpYBDF4ZKxkby81aWIcDuM9KOOs4pEf$s}yuSFIB!P z-}B>2&_=!(=g42XbKYYAuznWPp&xYM&uJjB^){vj_fE>hA)>OXXMYfBOR!EEnBum3 z(EM4skd&tRk-}FKQXcV{(7nc^dAaLDCF=n@-N!Rw$T2VG<;(Jyheg!$;doUKjp~f6 zVb>f?^rastcWM%iiBFzeTihUXl)3&OnJJyB9-O%%s>EmRySx7YCz57N55R%3*)o}-QoG`Ug$s*kFWGKW7B0q+J*J+ z?b;#qD<35ao--edI;8-Hio73kMwau{3{}F%RSB?IpHOsV4=rryVqw9pS6n2q4u3IcfZ0A4Onf1~=X{f@#evzJJe^ON9u376p=Z;U)-tx(chjCha;xc>4(<=PuE#q1FNy^9eQ@4lZ4KCTDo z@YR(i)B|o@(<_Sa;4J5pUv=#uw~7U7y>IV24~*9|oHVMl)lJem-jxH!Ru>z3xU!d~ zTqTxzZCxRIA6X8;Vms-Hzr7dsVF8El$64zFuSP&_Hpz!G-QX&&?&HD49=egsib}QZQo!dj0h*Z7MuD*UDs!{r7}a`nABraP z-K2?QgA9e)Y?(opB!P=()gUR;kG!t}Vef-nLkrr4lZ2NHV~m&c*S@VQSfpc59_J_w zJJAzv3%)L~WG$)CB8$cH=A6-bWdUCW7{Zk|5NFdAn^DwIRZ}tJ1%*d{**>Z+suGMR z>h81V$?}>FWY#u8MQx~Lo1U&4WPa_E_hoi=>)>%H*A7^~>6$P#F2l{LP*6KMqMAM; zEo%+7vW$sXAo{pdZZJ_@&|{{ZcKrwoS};}WX^$BJZLp({1PuGOJ{k}fgDw(~_cPRs z#oH5V>%Rg}GEFy3-H@PwSO05c6tNeA_w9Mi>8Yb75Ewr{KOfi*hxZ@tj_de9p*#si z;xS#X3AS{JKSDz?yuCX6cu+h?k`>niz`oxh?}X_&uju^+O<7`KkgidAcSMxXUtQpn z3ej*rV&yx~qO~~^C@L(BW*_BOyFCXV#TOgYE9NU@una3G9JT%^$=I7vO0FxFE#=q@ zIF>E|bm4Fc=?H89boj1b3JFkM!2(IS=nQaJQ)@aJjkwzu88mjcmk>BV?G$`~exsoG zdTZGH#*N@aS)9Vxp*ayU>3R=Np*@YN_~r?h(OXO(x~O`> zpnW7vRF`U>j4e-lCi!SP>-oXUc*i@p$JFJk!srzve@5*br39ekB?LFuSHZ1_f%zNr z0?}4zP|e4w_={=-EV>Y@#*6h98-?c5NKy-s0}C#sx#xHJjgI2Tfz4WfoWrAiT4ruV z2}rI0wqH5^N1Ob;(9R{uZ0pAx6<);u<-e_VpnoOd)9j4^Mg9K$TfCOC zJRzfMIN5I8sKNT6x*y-33UL8@|Ckkl3*LXX)Ll@~*ek&Fwk=VD zgmFhS-5RHz?+MwPfPNjNwegvN?e}PT9OJq_k6t{3(Pdh&(+Ac|taRZFyzo2m8g7p! z+_+%en$J!Nq{w$(b|EWM1dW0Itd=iWZJ@KE8=DhV7LuV#CDD%~2^lZcx(KJE1*?`> zGInUj7q1AIUpFiT0J(sGQo8`Jnj5)3PK}hBI~oINY_39U)|=VTPn2-ecr7nnqIzH%oXBKNlE!` zP_t3*upwDgQnFwHfd4nDFM~jOze@eid}ucJEhlIzE+GvfWNz}Gd1zr_!WAkzgY-~) zBb5vJnj^8*DZYy6i?a-1#yYApUMCd3gAxxG9cDvnI_EQtY=kr;-@!sP%yIyz&rhu> z>%{lAy2+KbSDO=ZLJVC|07Ltv9y{jvU{cS9%wuDs!Dg&D+kUX?4RZ$QMA;mWa zy^m>c{@Kho)Nwp{_ug3hO3?A5Xy;cyz&lS88Cr{}w^gT=9us7(C7p);*!50DkA;hI z)6M!5A3ff&#YA5D!&0-`AUJ+$ALI6U{O~c)Z14`=8HlqJ#f11hXI_Bs!_LJDKUqn^ zsPoI7Q%zl6hN-Ekcb?~;cpe)zHfK$v;xjasd0TONCf zPPbF+`m-hc$$V$Z4el0!G~eREOQ2oeoJHMBM2p=qaxi@v9vWD`ZfGVDd3!X2HC*Gm-D*nK(q^%3)CB`s-@X&svA21JIS>UaY|%AD#MZWKk?+FL ztx|Y%wr@4nX(UF;d;i;A2+rJii&(PTd#S5h>*;|7My&x^?>V3SgM%xbKp2hwhervy zQY6zlv};e8Kei7h75PM0S3ZGLFmz887g#SU8Y?n+V+rk+@BLAxUH}Vi$Jzwzjogi zlCFr^A^2MO50d}6!l@#w+IzD4b6G3xO3T`pR+f{Rj0c;F$H1-9T|sfeX;y{r2ZH1ToTU)!B1z9z-}DdmG( zm$DST@! zr@L=_L<8aY=n>rT=_oVrQ1GYAJv@420MuonZlEk{wcQXI>T~x&*M0Ev6N+AQ%MZ~e zO^rdI!Y3Q6@3yxL^i@5~oQnm>3*53-f*dz(X)6m63a^1a-f_E~2(GOsDX8JHkc^2y z49|;wYT69vSpAbw#?2x2k!XKJ)TY+MBilg1vd10*qwm3_KHB*TAj8AG3m7nc;>c@h z(f7POBriyHEcRLtW86HfS;<+4g3EeAeeukCi)#o`{HGy;wHKB;P0mSSk3_AY47a=c zcS&FGSMOF57%T2SpC2R$@N{>Z5OLZ>AGDvF-JE4WnfTnmHfpWbLRUPETk*at7B)aX z5);U@o*jMt-sxBu)}BB5S=w&91lIW~?8S`bH~tF+@-a%jx5?s;P$4G`ndEm{)0BxQdjH9LF00biW48T!r{$~<$1zO;mlrS4?vLuQ`nSzk+XII# zj7t(tpDX!}U;-{WR_bS*)Ehr?o#k?easQ&~YecDFql<)HvXf@+d z65v~392TAyy+T8Sbd`YHm_lEPob8GmdIvYvTCzKHGyKWwGI26|)xdoSV0K4r7h)2? zao;pjCdhiNRk06NfCz~Jy;YR#9Xvj$mFJu9z8{FXz`L+o8vzEm9qB=}NwfxH5yiCi z3V?uSo$_{*jjW}+PZ>|hC?zvTvplu*Q68FA z?Q-X;Q`M+BZ8L{mhrP{{^#~YtCb~!yHS)FBF_;bh4mlW{$9HTy?(!FDbgWd)+wR9NGEOD)FCuW|}CNu6HHzy+1i!!}6A9 zX+Bha!)ENKuBj=@n+9a&uTFWr{Q1Vk#pSe5NRYzUeV5z=+_*ylZ9}O`NEZMNC;{7K z1aHTqcu(3#tBy+ynq7anwcm~E-bGdGE3wbdm>FFit3&KSRbnp>I|8_t-No`1TeZN= zP#>Q(&j4ru^+iF( zLthP;&OCZ3%r1EItK{Q=ZGCOg(1p=$?4q}uD&J(jcmNs1O+3>nL*?CiHtDNHhlhcr z>eC>4bfXIuO0$LAAoPW-M6Z)@qv(B>DddFWl8SG9{|{+j85M=ww<+DBfRwa?(t?2G z5CQ@cB8`AZOLq=K2}&c~-QCh4N_Y1l-7_>y?);y9ch9?f&VG2F{RSM)FlU&#e^>pk z`|OTlUl`BZ-wb0#ydE&H|+WwdT6FtA= z_YPdzak%JN7K$*aocwEYKeZiWB5)Yv-SRIX#=8rsMx$A{z)5#PQJaJfU zQQsR&FVrkFW4E_oZ1?pwY$IisGKiJ-YQg|{QCLR9l3}CuF{blrC^yGXm4V@;QN>gt zoHT*LG@$-tq2^y1>pPbhn34`G&LFdPk8)m&z9b=E~lm z4Oc&QFynX(Kd^`!M&1H8VXK%Aj$1xOKVZb6RHqV_y%GQk}=45DlGkyfw`gyt1?Eoy1`u{(8IDKZryLE{fJ0_eInX?zZ+| zG61=#ACiQ<`>q(-bVVbtIs_dDLTtM&f{-=^(5yE1T@wg5!kz7*0dAtgv)=%nV`?ln zqcF_xrpwkWfm7_ieEH#jcHcF3#Kv`goS55bgipq>^X^|@q5iY)+Bn^R}^=&JhX+$ud< z$NPvk`ohN;2PrqRLPX=c$&zdMQ;Tq&t5UJiE}-{>wh%>4*vP2Q!M zF$C&nm}N|)AwFJus{-8%=N!SDeC>L3A>^ny;=@{A*1J~IFHM15aJ=`Kt9*PjdG=yQ z0)%}ugsbXTA1kEwlRbZE6kFAZ9XG3(NnR`Pj3!0+5C4>QT5apUuTn~l;5N^4krb+8$JUvdYI)v%vI^zPrh8(*!b`Cmq*~OFvx;c@64h zO?|DxJ8LvM%(?^G9M&5YRdt_&Z_5fTuMVc&R_sdK&0gb^(oufjwVBM}Ln8rb4sR4p zW4WlysJhD}6rViFIq)*m4RsIkBzSCq7)j>2R#`GB^1nUfzpe!#E7v?1op&+3*xtD~ zt2TZUl+J7b{Y|Ag(z&>=vcAw>7S80LHQ&~Fb+W855KCV<7Mpx$x-kU=TnrVujZT92 zja!{Oc?&J^F>lLELe@J9K_+fCRK8KEI*W|lziK@4;+MeAqWV{6@87eT!B-Z$jGfvK z%?e-spDM!tsQ~}KB?B!|Tv(1zc@}ioj7FidLAlxNCTO9GuJZW`{|cuK7+77EeytU8 z$kGRb2T+%sHxj@Wbo56_1iD!)Xv0|Fbr(iuC7G8i^hfd?jWMqd1_|a=a1wJl5ccv_Lb7 zTY8hJR_Nc_;j=y1&|=#p;c~b6`&WRuP*=1bv+J2%d2JhNNXo@;hcQm)^Xz(D_6smakGBgEyM=_NqVf z;`rYrK7>)j*)qUgA81?mG9+l67Hi_~D^pbaV^6tZ&O{7TBI;1k{P4c5qGWvD8)kp^ z@HJ87OPcf4VIrJx`|QGx4u!lXGX zr`Xo=Ts>@HdPR84FgA~3W8;WhqgvuhEjTZ!L*3De3AkUr!*O`GhJo#B3 z1%zW!xi9VC!?Gzxjt+%GA2Ho^z59C2mE{uhE=y33zw4^-eW^g#m3|vMr(?GpewG@J z52};j@#zrdJww;+;=^if$&wZQr`eaVea`PC@?DEPJzXZ z05`3%rp7d9aW<4wGpC9Gw=@5;>g@)Xu_s_;-4M1%# zTJ`<efHwEH@9s&v|I?p1!*jn2j2{s>93f-Tw|3gjYX{M-S+Vt-v*31Hh=G%a~T%Iur=qdp2Dv#={@p`ta5j^m39=al*Nj?dU3Ox zt}V?g+q3lQQv@@iRxSHoGdBV~`)kp1;i!0~vvB$T9Tc=XY@_VMEY^os(|l{C$klcc zcJ8(i|6YT#r>*>b&PTxyIYzH}BAfY=%IV+-8=*VE{=tzYnb53WRNL-lbL!Uyw^4lh znih&O=diPK!`qkcr^NGfkc18HPL{Ri2%Vy4P03=#D3N2TMMiJY(O)t4y8@%vJNWC) zh0I!lO~x$uI&yvJRc-Lx=5Le*oIJ4+KkkRcbsdiX41y|Ze`rkCdHBm|pQ8?V@QKLV znrR95Ypr0z%G6P8tA(oTZ5B1w3kn%oc+^wh;t;#BCt+!QESOz&@^~#M+Nj|TLDsSu zOxz}y&+P6O?G6&sGv#T!bsfPRXyDYg`vBI29n7@dqXd%Vj9gDZa6zZT$rpYt>pXNi%|jZ zW23~D)PJa8HzK)qB-6Ru5V{#^D~xHX3J$?t;l`|{1$H71hq)e!l&EKN(srY9h>Yts z$df72TGbz_a&dr|HF5$aR{o7vRn8mG)wJ@*X&E4F=Q~Qj%7C9k2~)7s1wR8vE&u$F zg8Z^CAHIh8JF6OcLdX{{23ku-)jr6ucYM~A2{p4`)^aU-a*6YZD5*e zPatrY7JzOuo^6WsUcX)qIo8a2Er)_o1XA9gG#a$IS-rB+dV(u)O~+jbNTR-mPl%0! zRKM7)@0XsL)=)@;=XG-HXjY$cM#HPZcujx`u*SGYz^q;`xJ+g*3x!OH?c*n)XRx`x~ z+M=)KhS6g{l@>9v5#@m_w#6L!Z&cpRCn;pB43>v`*W4GH!+WRK4Z3)+bRDDc>({FI z2Ol6EUr=7a3gqSJ-e^ht|!m*tsmt7TBj?*~UF* zY!w^ozeI7PkuY#b*I}tWi%U9jy>jIeila~?c@{?I8G(a<7`yMbJ-f7A-t%;;TH$B$ z%y_a`nR_zB@|)*aO!6<9oJP;tZe{O_p|i4QO#(BGuEt$YcfBbEz5zeQgzx(WQ3tOO zbfu=uA`^qwhYgj5L)!i%`pFS&nls2!vx1-Z87B(^up-N6?$cq3$b!hiaOfq9Q&?Xh zfp3~t<9n9qrtSU8otowBjbnq`G3O#!`*ixJuDV(VR*Qw;+d~ zWG$cm-q;F31BNi;oV5FWdeW>0JbCccd)xwtv(~*5Rfbf@%@a0mgMBFRkG0r&o(TC|yqV3|@iGyU&%+PEzrV;VY9sjdqVi zcKd~@WLgmv8a3MU?K=ce>JQl6Nn8(R66l16AQnOE#Sw&v_eaN!M%DKkxajV*^SdEs z8Qz>C}-+Q-=AqZmb|M1 zYJ#~R%n>?hre6pCFO%@e{YYip50lj|g}(I^@16nk^xIWgD9u_$xj#tXVQK^h_6vOj z>Jay@Qs8arfiasYpsmt07xobXlSmBK|!meQN3B$z+?y z6F(O9c;i)RFpU6fx-;DTX6>dRqM6Q7%_p=(sA{Fzn(PJ*3S1wzK6@emYi%ayl$mH5 z8sH`&eQC4iAwcKP)eFPfI>j6_SooUs_N2xpYB+JyP7!KGPmH>5qIGl+B}TDi-2Onc z5+6FUm>!sx*gsiyP7Cnad6BS*cBMgR8eg;%A1#g?1S*dX>O_M+P6p~JDWW^9&PzOn zl>fjQzvvqr&(x~vi+3+R@NHch0Auy({c&cC98oTKOR3IU_FA;LqYs z7ea;Tf!P=q@k$(<6P6w^172;tIjo7Go~!6Z7h|ABF70Frjh{hCM|5K#P3#miza)zE zu<-c$U~akXu|q{NW;73PkyT#11oO@Ow1_yF=_fR5T79%w54?v7n0FZSbur>pZkj9y z8_s9{ScC-BJ;z0JX0ZUAvLvw%a99Y*6Y6TmOLGE^&N?qOFj}ddMpln;8+AJ`n4Ijn zfI!@uy1IIU)o6-sAmV&*I4|HKCTmo6J&injgU&xpgD*`hF*ICl_^? z`;WUoS!n_K>%7vW!WnqVvWpRm3YX-t+fsqmrUB=FE{cz96EUjm`e)=srkLhgH=Mcc zwj2I0&b`Yeldl=sH3AgiH)+>FUCn)Pn^hMZZTCE0`%BO!;^^dg`XJcY>E3%^)Vk4n zJjLulfb%A`eYeGH`7a?0Z0gx`IpA@t%QXA_LTfjlu&J-&f-_-{moZNeCI>x)>7xS3 zx|N09MSRKbq+r1Lr>2R@HfjlsBRGvg2yk(L=WUxG`)*;JHCjRc*D&tCuS-F_l|GH7 zy>x>embRJHer!|C3Ah;MNa-z=xqdOrtLmBs}4ynPVn&N}i5>bCaLO2?L=iXjMuYI7h5pHgWehZmkSO zERKR{B?xIS`^~uD>K_S60n|@yT1;*PP5r-gN6)TQLqeZL2cyyDw8 z2E$S?T8A!69Xw<#TXJz16D=5$LZYiHD=XI}tXafR(oO++&czj&Eyypr@^k2u#>o-= zZV5TPnvaJg-lr?Nfrwf(x0hhhY)N=j;60C70vLIAORyr}hY+dMSHT=4m#1n_^fd^f ze7|vvTKW^~u9x z7?4vhU449(#as{0ZS zfWN%=2t(R7H_W{&idP_`SH`AOi%K+I#$+Abque`4?w>udB=_RP$jfmV_iLg1Yo5uG z48G%?ZHq~d5KyCW_8>Tm?Sm=Iti0lceKF_8v~BaC-btDY0dNRGFQOmcd?rhN`*q>T zIw&o`GKm-kCr@5qSw&ZDqQz+t0^pCB=VR{HMvJI){xB=*dl#d>lm6_o$XCCyyrftM z)W^6|-TKbw7GA7x)tpo^GgDWnf;!zT-SL#B&eOEAx!+N-869#8-UPovwoW3VsIFL6 zFQ4D94ck;gdlDTSH~4F-P58aX5shSDS`$ZD^06 zfBSdCF@P@&5~yjvSd&a!s+pRL+9|zQ`0=d4aa9zex`teI{Z&S_y;(b}2{6IL?rvu) z^#zbo9b-(a&}dXKaFEG+$P9InMX|aMJebONTP{u=v5~p7qZf5ZixNvfr*>aiwLwsD zEBMW+uSivoea$`KVjU8o47)i!euMOaP4=MfIMb#5Thi`O82b1e(0Q&jY$;R|&O`{k zp9IOJl-+^Jxt@C%u6tvIO4vc+ZXwJ4Hv}|7OsRN((u|dgOCw1f7KMpmEcZVucz}PZ zk=NcHMM^KEqgQLn#~3@MK>Ot?^@0rsZ1OmKgtThtUQcH}!8@@DLOK|>I2f89D)8L_ z_R=iY*f^ZKuJud>2tL>4s@ybwNnpmFSz7uDE?(jO-I|N^+8lPXYSTqqxqxb0YGzZ~ zF+xS^8Ahrv_!ISqJo>NdBil)cF`RaFJ5F*iaZN&X@so6f2N|1j6 z?d*Y3Ob|VV)w2@Mb7}*xdE9Q6Z90rHMV)@w1I+G*D+#RX`#QTiQ(>{YQHpYPKF{pcjEH z*#-&{WQsX@7|B<*)pnt_XaT8}*HF5S8_qj#tWFx~;Qajn-F7l*4iHO)vHxYaJ=IM{ zcVV&lIwI`!ZSKxc>1B)Yynm8|$))u#85l9Ln;b+NB`GQZR7pYY?*9wDV9L?BG+!mV z*QJR*rj=U7=eTbiNHbUxbKahfVB(^Ul`@=QkovV-yVU+3)$%zXVTXEGKF>8Tc1rqY zkYAG{YZE;d)nu*ZIWW??g9$jL=w>dexYOBx)#lCtSZ%&^8$O4mP{GNy`~1s!Hw<{< z_8(4dHg28K@(ZoF>0gfTl-|z zL=oxtwy!07+%1#%cE84ubDf8KH<2r2v!`{gOctbI5xQ2~b#*ppIB;`T+YDDLJiEu+ zy{=+@3SAfw(KyN7WhymeH<8d)(Ug9ZXO`+DRAgf&UVkflSYkhS%!X5WBswZjgBDoP z;TdhMO5I}`pK0Ji&G}SX%j3m)t5%1kBcL(m{G{F9(2e;w$lxn{yuc-JT zU;^q|GOOW4G>+ohWr{hc;E_BY`t>!+@_Qsozl^o6rA6;FQ-|*7a?G~b{?`^eZ1g|M z@rTk4j%-P9FOZ7SI!1z4K1=tj9m`twQbNM66Wu4J^}ElnK}qiml@v#T$Hw3ke@MsV zH5Gk--%tX_j&Lq2I^Zu!?&9pqNO5K{$o@F+F)U7Di0i5+lF?rAYk%n zvPayV3mw`3k{@y?y;W3HoXfd(>Wsd|#506_&;QUCSBHS$;;$~}>EH8hduO8%{x{12 zsM^x7O6h+#wn{P(da|1^L7Yr$*qoV%;+6IOjt*JlXdOQjf*jHS;7FO>@IGHgx; z7-IP9Z+|QqpL~*w!NaO&D`0<{$o+X#a(`lDIo&*!la=$fb7(CPg6NpN8TTe%oz#R1 zPegMNTd>NU-p-YO$di%y$@mo>RI4N5Rq7|Eq z5hbvign)gVv=K@6EGXmZLrd1fB4N*#ij`J-f*wSJ?7a5_Q~ik?=}K9bSMwV(|I0!A=B+d0vkwJY)JX3yvZ@8dDDu$$F)<-t7`8lC zevp>zb5?4~fB#$OOl&4euP`GKduzYt-~G6E1id+3{>$*H^t0y-)<#%Z2pgk{fa$u0 zLB_rk)sBGr$KBsX8D+jsHQF02G{`I13c=`VRXhINCd9qFdGq|@aix3JHP#&RDY9%G z-5G$T`B@?VZN0YEQj^EZOZWP)y}%SYyvYw#`DN*R)Z9)9QH{G}QwfXYeZ{&!H|x5^ zCyEcywJ-7t;9XN4pUl~S=;z-YEowO^DL4EX!T$bl(=hE(D5) zhaY6Ls*ObSemumjJxFnK+vseIZu=WEqF*-TLzlDYgvny!=n8&&Mqf`_%vU|rMazmx z2qBP^lFzYTgqFx_!~NN=~Zz0D^!Y-^^OD}$$7`8F1F8`)j0Nrz}>!2P2d)2@ua zu-&i6kA8=0P3;qU#Jf<1Mq7)}<#Sw+ISpBavx}wA_GvcT0~s%zvN`357#Clu0aKpf z_4#+}CTFhb1SO?ORy3f$C@E_yydS;r>Cz{duAZ`zpnhSVt(0NeDe$x2`E$la7QY}V zVwP8eJWE4#?JgGjC`B2X8jV^>Z3^E@mddX-CaV(>iAY_#We!2no`J*FZk^}CD+DFhYMQ0AYXWRZ6f z!6`GGBX;eAKxVk8D0ZlsJ_Ta1=xKkh5Y#Nl$IBWQ(XrYgyEtOB33wp?@T@l4Q<{76 z>lZ=<0C@gnLW(q)qZQc;*s6K;099P?psprV){~LUVZa`**^8bT-Ea|M$5o|yfe-xh zN^z4V8!PSY!~^~?FrMFM6$x=$h}0+R)5b(2a)QsRKR=DINM zlp8JPY@*kBv%xbz!LH>mpsZ|MAqQ1*^Wi^9qqVB|MAYFIyg<1NM!Y zzkGe*=k0?=-qL%h)-j8PAc!>lztQ4iYiw_C2X}TP-~<_jy|+`NRl~+h2KygrPT*#U zIpZHM)F^J&(lP!RFlexRakAD-Qe)CFP&({lOw1uW`^Re_nqI3gymT#arRk8Ay!hLa zkw2vCHqQ*)O^4S)RarnH5nS}4R3kBS;WrD--WZC$&_rJjx*Br29Ztq*j)A0``}hFDNH#J*O3PT~EX&QBAe@JhzW2PirqVRXg6*FJGJ{F_oQs<+@C0)MjMeHy`$8%KwAyiknpkIeU7<5r_E9vG<6%Ex{pj-XvyUZ%G% z;4Xzc6Zg0S7pYWSbWV^e?(>s)OqkrQc~l|p_j9G}Js3AZG`2l$51~$0j{S`lj!w+2 z9%K?8(4dj~pf7GX^v=%C2TSF`{%NnY#v>0d9ilaWKTlVCSnw&BLjc`oR)bFk^qs)e z@i~e6n7gH(&tk%4iUjgK#jYFq4u$UkKo~X1@(_oBf=T-^qq>bXLaexUTG6I}y%HLz zw`%j5sNnm5di4IcV|ynE+Yk?RpOo-Ep)TOwS&FAcye#Me%3W(rimu|^)>+WKEQ3JU zDlk&*IJ~#ZeWqhKg@#cfQ6R2pRUEdb^45nHYw%CCNpDU2?~CV>#RFgat1U=2T@QS} z5iJmy^H_eyUvL`FUxCl&hc%;^P6*M!%^sw^?>Fo1305rw?FoA-+C}mZgY}=gnPd^f ze9A|eo03Nlg9%vget-VfUK6+v{yoN!#YhoCtRA88(7hiLa7^GQT>d*E*u~FuR!q3f zS`Q0hkLw%5>#DMbc(??aYa_9^^+|VAi^VF@%)|%68N3j(QfsYXV5$=u=zlBgxpO%r z6tbD@UYct96H0qm1_HIIh}+QSeTpBb!o!C!MSo;orrP0^VM3+LdHn?jD1)|s6OrC5 z#wzy3fDmBxr`t2>iVA{T$V=1cG$m>Hi*up5_{O*vuN&TYUOdU7puwv+#%8wI2*#KC zp%J83%bcdBLy3sKnH`Uyf%ist{elDO&z?S&{TiA4NvJ_q+W!WZk`*T) z26|CQ0-sCtT+5f+`%fVgrcF0bk2u4avx~X;O-Gousn~U_e6wFf$we8nqwOvDu&xt^ zYMCVcl3crdyB=pu{$3-`ks{YuH>sI_{oE;g;k*2oEe^spR59jVZ5fS&e$B`{JHwKW zwfM~TnZXO!{dOUf?sf}b+rLIs3`y0vj}@cj*l=rd*?qj(pAu@U-$dj=JK~dI)b$sj zJby9)`a4bEbJAGwRVW^p*Q4NAs^@#Z0u0q8Z4J7)J!Qs`bc6E@I464BjZA|Xh_V4mdR1K+|1QTd!?5U@-+`CS@uxkkwNGL zAwO#tOFCuYtVuo=cY&xUQ+3~?eeYI20>|w2zTzSp>Ob`s+Bv<5M)+U9D+NVwE3>n^ zpwz<_hYt_11Ht$dnr1pz<6squb1{dh2N>0y03&o-xkzAz;11CXVduWMxQfXXn_i8f zP!b0adr$Y1h~sFfx+XMt-Z-S`a43fkB49}aCF3NM|WIKL{S8Dh^d(43hD8~@V&jQt>`=#kk@%t z&_*C(F9#urd*i`0!~NH+)_r3>s3tilZM&=`uxqNo{+#Q2_zw0kP2`%QI zL=+85Nw!x!?O)2n4fDQj{BqL|cJH?7>+k0nO?(2Y}e&{Z!c3qSrcNX*WI z$`_R-p!Ei}*u02`It=$4KhiZc#b2*m?1Q|~n(_<<65aGLd+-^<-^Ppg?G3ym*>aDw z8kpD}7`WeCb$;lE{$n6wyU$iCaEOH-&k*@4-Qlh9_t)2$Si7pNgK3MYHZ@v{`8LxW z+FlUmAl{MP-U8Dud2&^Lp7yQPSogDgVgq$;>IIk(*vYuLSd498&fVGlz*AHVlVrH` zH~UfH#L`QdZ1im7SS-5aO5OSNaNde$WAY39YVWb*V$Q`j5dNc=n)RAAlWuw0Rm zXHZ}8$4ev8~3+v1PUpi4fZ^OP|q(P;Ls6P^6A{R!8pTJC7k0c^^p#L!Vqu`s!_9wxPq2Aa={=&$q-?GdAkmQ_sx9sCp~bb{D@nyx@6~ zJkGNvWDcwCUyJReh#4whO+>w4KNPmn$>nn{{YU`R`z`V1^w+(+R{dv1N7r`WjJS<9 zF2*Q9^eq^a>f~SXvBg20QsK%>c(S`ku8-Yrx%oFi>So^y5wN-TuP3Hb>H!vy9-e?P zf??>T^FYud^_XOBwbpy#x9S>N>c>0R^l9Sr+R5+tb{n5UR|TJ{`)be@ksyS(Sj;T~ zp$~m{OYNSe>C-d!Dw5D*Nk+d0|12PQ#bbsy!sep^{E-X5L4VVN${C<+<8kA?Z?8h~ zVeqpz6e&3?rHqdTOa7+oV?9ugHZ`M_yOGI>nM#m#^@(Qn|FnZ+;Exh) zD$`*dXXYFHu{;>W{*exBiUZG5P%6& zS{00DP=9#Wibe8{OUj>kgYZ^gQ5k=iuWA!7BsuUs#paYF0NPa>G-!uTKgS)nS$apD z85Cn^XZv@H{Q4w2KiW{`E%5#kXYLviRvC@3k-!`t#tS#h&_<1PWo>IB;V_F#Q|*F z)6Fc#yijXK@#4jc3)FKeqs?5{Q%+8y2rL1b4c9VFxw%v+WPDBlA1)kYHqm+&IB{v@ zSYARe!`zq?CdBdd{*o2eXG**2$W6DBZ2OKIyt+M{wdvJNQk@s!Kv-{ij%u@ zDmr?}YA%V5AuW~)5+b5tZr#drYr7WRN}b@Ihikek!-*SH-3kP4wyQ1GQ_DkZ-@mKe zA>WxNw8mg3QN;2*&z)BJ+6($3ia%?N-*`-1{KZXh!?zqOgQBW25ioUcWaOv5uTYqj$D0SXICtJW0RL}O5ZhawZ5q3$MPl@^;oj;srLY3R48 z2&m^OH16?j{=&Py&%PZVxpS5`>z=4`Y9xl(Gz0Y(IaWyiKa~K?>DqhzA`ch!!gjvt za5jeg?V9`~^P@4fm>kx9A+Agk z8gRl$c;IqN#Q+1dj-%|nK0)cV$|q3NS9KTHajvQ%4D4LdY{S75e9pT(Uv1XM@5m=_Vmrih@rgxDkfxo)f6QIu!WZR^X59jQXrvR647PRZSVsFq0cN>DM0{v z^n3-TWJ6&Jv_Fyk3CGQ8?Tlkb%>_V@b!$aQyr(2b3k=XW=cNll;>6R~p3J{-x|ARy zj`qJC@T5s~q0YV^gZX;3Jb}GK9dhN_r_DTP2fp!ny|l6t($%#=MA#Ll*{7-L=ij(D z{XW4#EjsMS2ez{~Mpxb&^4Pk7Wg#Cl@P$i-Xz#Ong*D6~0NM6HoXzqWHo8*){HRf> zDxuiQZod7SanXb3kq2WK`RM`d_IR*E$m??Hd>blw!nU-sEMJ+zM~2U~+uM_w$(SYW zZglNCg;=aLvw?|ANK_oP-yRTM`65%R7J@t_**xKIMY~ z{Ha4WRH4Qp1>&;BxW2yWot#XGrqmqZ6}AJ&p$^v3Yh7$jxEtMYH>*@&2I(U6dPG++ zNWoN$->+9=v)?fbz!AN%TsHQSa>`@_DTn#P8IcmtrDLbk{@m zV1q4~k^xT0T}TzgoP1n_g$lL!Ropyd_GGl=jmm+3A-%oL_X&KQccw)Ysi?Bp=b*Nq5s<53{ogtW>=~ivw_RzMN~)As3uJ?$4SSuP5AFn3 zNzG-PDWIB?D!nXNB@+_|R}Ta(aEl~3%2c>qjg1-ci89mEv9K{EgcF4c>=})%^mSpZfqN_UMC0fg_n1HMxVpcO* zk#|K>5y-{yEm!LO3+K1xYlDLX;iOFX`T6-tRtuOdm^4vO;#am)LA3Rb^78B(h~@H; z3vPv2Dnf^OhQoTddG6PUMf2B@ruE$U5f$W2lCrJ0U;<4|O-FZev_vnuK#|0JifblR zh9%x9XE2{5ezylX5Vdq)rwQ2*bX?K7U+d!;wj&g$f4>sJauYWHQ$V$FGJ8T~=OK@1 zikW-R>1s{3Np%KK4iUi;06(rh_y!v9#zAxI&Dyq=)-XueWd(^3JS0$&m* zSG@Yqba}KJp?G!nK6B3HIyd7D^;-?@A;Yf=u}qTW3K3)$goM=aL|s13Ui}v~ZnT~VO5m8MXnV>4G)2NdMc8A9!t7jP$vmY}z@~^uvb_UCw8o{fy0BZO*el7-OfoyN`tJf8AYZ%dO2m%VZ9hj?cb_x~=>uHNVgZ z*xZ!!`8M(HAdQ21crr~dcl;{OYR zqebx=uo1J}wn@=)c*dOL!WE|47To!0tL$clk)&9XE-iX|*&hi$g-<9zeVF zh?!0Htz1XLm*04XhK9l74K!C9rxtjH@$>a=l|Zi`(9B|A9~Ltpko0Op2rqK1Vp{U% zcOfN?8yR?Za)J)m6q8>_2TojRd{Md?ym1toRm6f$JE|n#+^J!Cnyg0uL23664tk@* z6B{#!kfS0`9?S#M$i7Bqj9ASLcpHknRgeB`m24CjUST3EBQT7!qlgWz1iaR$H8g!^ z=Rl5yVEn-8zZ;&1{!pr^P^yu=i5-r5V#o72CfnZ5-q)6xApW6BX z@ONkaBZHY;lM^I_H;``@m#9vJXUhk{-Xn~oHA5=LJ5jyb`nLkC`#SvH)CLe9jlW+! zK~8={*ZYCR<44W(y37GNX8$F5@a78I%i7tI&Vj>SB<|oa&r6MmC*!3<9HR10by&N2 z7Zv_!ABqHti5+(D5aLfhCESR&!n-T=<=`mH(>-1|$xz*XAGH0ChJzu1yMKG=M2Huv zjRp3I4g0o({I6X+{7cx`n)Kcs$WzUIjx}!1VM499VW=nX#7dK^% znaq{sB9OZl_auI9djJ~#0_+^#JR4X)4~Aaa>v-akbcgzGMS`Pa;ILy4uAJ-3$-{+x z4J)k9o(~|d(_^xrAG_C!M!TJk|4>2C5jCS9xCQ;`s1bhup9K%9?%<%9!$_$o}l;J zd@^74gq5BR7W#AIgLiE(DPo(>(yQe0R74QSLAe(sbT+6BV1a_DiHoOH!*v7Oc!IYs&klMC?DdHZ=mMKgJS=LVwzpl)nm}GrLvECpQ?0gi;`tSp;ad0I+~s z{$*T>PIO9pcQNS2BWXoze*GHW*9D6VelCTK4+xYAQd(Q;!-eiBOQK!6+!y(m!o=`8 zZcohp)nl=YnrtT?=(n>bC@L%W%Xhk*Y;;BVhMRv)zq7Ei`c7N0B5Ud=B~=9B^eiNR zj~lo2I(FWv z!VW8)%UbSJ*yt-tRa(W6d$VDR<`cCLR(mXboJ2ib?;rZCeq~%;H+gzC6IoWkO`Jc5o#I&{)7HC+()OM*Z|eZ{-<`{OA&+nG1O{Co3XxM{*RH4XGxm(o#S6$;(- z2ph6JTm{{-(cf>B>0>rzEDyBsL5xSV9(5`pYc(?VeS0u35a@YzcC}D*l9^}+tB+z&u&<4K`SRuFe9;R^Qv0EQ41<692}&G(3uwq7OK>bt@wDsP!Ni4VEc6cU!RU0M`FKY2 z3cqj8^J&DJ@G6XWD!XqAtKq4(s$8gGVJqX8+~ye^ zi#x3P1vhleWw|x1Qu)se&Hpx`5VX`o+)zzOq&6j!6Lp;?{Zd@&ho@i+d1d>35OxrL z6)01yCbzKr>z-sY25W|t9&eywLGcZy0Oke04G&S1hTo+2Ju`SzUx1C3m6Ci5UNI2T zdVYS0yuc(GWzRqV@lEKAQGB~Wkgp0tKWK~Q^1C^}qIn6WZ%uEswjv4JM+!HN^FlS{ zb_hv}J|!5b{j&WHVnRiAL8`uzH9H=5Elp%ggwP*VHvJC64PcR?J`m>2`JLAG^L4*X zKft2S<~E}K=TBlb1g{ERx|kn(qWiv;~a%}F-4Y*t$K-Q za^A<#xV(?seOkCU{a?oYHH5#BB|Lfgit!kyIP2IpQ}%9N+Qq32cX{P!Yp_x-#M;r6 zEwKgEN!9sQ-SS=nXEEpllSnjtOGWC0sgxklIM5$!jH$BzMqe~0sH0TBuIa0Sr>*E2 zHNF@BuZs~tf}HZ^Sgnb{dzDg#DFmbRrz(eA&RK$Tbh=UwT%Vb`fttR+4SVoDPBh5~*nC8BP4c z5ww&&C#hmfq%oYFX|~fw(^I$NXFt71WUqM95pxdjYj((BFlgdv_Zf6@QI?#BTc;{% z&rdVp?|QtXTdzLx4+-lrgN2woHDcAFYTaYePtOHeU*_ubALHOlyp|Y_rT#XYAN1Ao zH{54oN|JVSTRVQvb^EDT81`7pAOC9f4|)Pr*TXygMnOE13JBoRs1!kjzzM7+DqF|| zcEwTNIadg16>X400sCry9tnQuVkzob2I=%^lAmlVvSu+RU*7K{cK=rw00ExcBUxXG z>DQlr-@|q*-I zXoFuzZ$9~XQnFutD*d^1b|5I&G;Ro??fw5h{yQ9V_ zP_j`~HwgX0pweNGr!?GAAWCQGGku6onYcqQ$h+p0o<2l)+Z^$eH zHO8JZvK|-b^iYNuXoWLS@`YR?NdY8(0Jj9yTRx{0klHBfl6lYm-YF6C4sBY4wO8yesr#kZg~dQLE^zOR?BB5@@7jm*vF$)mR+^|o7w~p*ugoy zTPXtqAQ9x=l*f_Xjr4x2veBxlkh9eUHvo@=x-kVPq}H4-GN56KhO;+R&dr@n(GdPH z92P+-j5KMGzA&$h?tpTRWK&q?@ zXy4ln3duAhpRMp)C2lih)lF(AdzizR-Mco? z3R7^lAMHASv6fw)wuf`D?oma47Rw5KC3TEAadnV^kJm)ghSUi1IHf|P$!PZ``mGeW z{vM4qP&c+2B$c_b!8$A_Z+@-p0=1QBi`xBm6aZp*_dxrpA`CUDEa3Cl(KgO}a z?>1Q2mBF`wDussmDd$HFbEoG}O@yf=&XT$g#| zL#$d8a@usCcOXTo!!cL5iEekayiOC415%`>6#L@k2;`vi_B9D4C~GItbQ+ZQO;H)Q zq(g1dn`?*pB2%gyj^K>Uo#9QrHyi0OaxIK8p>8tF15o6VjcTLF9v6qKrdH9Lkiwse zvDjkTF#)ZoYU&zuJo{cV-E&HD=uCMuc(J@{>BH9}>l^Ht)BQPX(?}jJ zy`?A17jyEbt(%b9Amc%K8jK7fwsEfLe~T+EtHtWSgxIEx^b!|6*jQ zUBUDoE2V{tLCHh#q+^Q=c{`z=GL`JfzzUi55qEb5|IviWBj0S~Cb)7{^Dsg+^52g9 zgSe=_s(9JIoAVDsZ(43Xhy7T%nWG$y<>@>Zpnnki1Zc8B3wnHoYcgwqG`7arJm&d$ zLQ2W5+y8FlK@b`y;vRA%$v&rmZ9KXp$BiFw)vbH(($jw_XLoR^pZ>5vXkm`4q25rx zr^Rva{9MIWFZ2JG_Nq3z4)Uel_RpoH)wSlq%%KlerrDR>u9K1+Bq}7l;|!k+;hM^SANdS4aw9cx z!NDYe?%~*1ugmIqzjcg%8FN~2*946iyq(8nc=Wt5r$*3Po;a*DIP+D;KGh%;r=Now z{Mt+OKa-P zUnZaJo1iVOl=>k@w-unMD!+>l$$nj=&u3s6`std3Yj{>E`wUF`lBwHS0akC~vmYux zxCHePQj1R)-~Dwgt^GiY_nq#x^V+~~YgbQ6+)eH+J<3sXtNoz>ixvuuW$2QAYr+1L zp!|oPj!X=XNK|Ej>6sq(!0ntMA`mEUG>*Fucs{)#UZ6>p$<5iEuYXm|0wz=C9Ld{* zZtFhDL5XyxFT0y;^IeJ)uc1QbrFsFVF_{9JT4>*t0I{qN6}0~Pt#bfz>SfGI#`))* znTnjh8;5rfs>VP@ec|&;<^tB_4~&{~$|?62&%3)yU>P&C#rG(u$AG$)N56mjARiWp zTGAMsGrYdq(xuB_1!_41;yf*&PMuS2CC*C=&B@T(gnwwa41x?aj&}l;oAV_p1WJ@P z@ovK1%a$=2W-`lJjOe0$TzC6lb+_v**o9KoRIZ6-19Q&xnc*$T(FGI6ate<3VL8l_ z&AgBOTdTMW(upK=^#78%yNIK7t(Kdw$sJ?L1dL28h#@RK%Gt+{`LC1ZI)%n_VA9Se zpKmO<4qdQsbozHQPjemXSLK}41X6bQlAbUtQqENS+evaq(O!J9Ve8HZd-gSy)Tmo3-tjDg>$X_5773n-eo`U zX>*qukhJHxdG4+Wm6VvtAF^oOV?c?USeIlLl(+^$nBSap`Quwz$J_++SU>nw+2wQ} zQFGUWAM!{EQ1IASp)zgZ)01FZrn_(sAO6 zQNq{M*`G%w;gE?8hMG^E>BDYN8u->7at(>+8LcWnlPrAhl?BiA7V=ETNh>hrRv~WSdl2bw-*#W z%^)o-6pdZ`Ujec+Tf5u&`ApC+AV)4W2_s!J^#)=^t!Qw-9%r>lJhA_;C#iB_@csK*gEf|~+Uy!yNa z@fcv#(wsXS0MgAn`X6I8a2T4;aJ%2gsHLec$+_K8wyGBhpgJOilF^G&Px#5iaxZ#u{dfa-l5yCG<&u!{P zDpKwCF%n2Ar$n+)Pj#c6^l|O(ZZrKh4z6WKj5fr9<{3+ya=2HP7)hU{vsHNU+Qjan`h1fW?f993?M0lx zB9C7me<~hW!jTA|KL?$F`uD?>9wRT4!wncwEf+VJxDEyTDFx<@KUkLcKn`B9+T2n+ zBLn^$p58oYzS%H)${o{{qGY>l@8Gi9%nf+^Yc8m$ii)kfrEKdSm%!myO+RneaH)^A znsW+MN(xU)O8M;miMR(g(6D+q$#WhyK3*TqHjtl9l}0aiyTb-lZAvQ*D@neeOyB8t z9V<_>_Vb8(X=LQ}&=J+(MOkaykmh~wLc^_>R%d429JWN@!uer**guTW!m)78&@F(| z$NIVsI!eO^KLdEsXh40L^>ZJ*JJgBq3ax=GM(aXSQ25-^Q7#vNA zfq&x9doxTL=vHL(S%YWlA205T{em$j$3ArN$#u}^HXg$ZiuVj6!$!> z6#K^bl``hs&gq-?0i9fy4gR3n)s6{cEdv|ClK*6%4SxF9jC#2&i0)~pm431uwnNGZ z9i?7DIxznzs=5u#(qz3sv_K+Bxogfi)ethn==dZ0$t%x;G8U6HM%2rX2B@f4$55 zg4ul^<^(-#U@Gl{A&tnKvnh#TU+AmaPOrXncJ0gLiZYuD($)AXo3azB8s?llmg$}5 zaekJScZbxGguDboen)yF&mx5jPQtC}P9aPKJC-dW}RcU~5&NkIE4sO;E@(OIY@qUh- zkv6XVOi!-yD~NWEC={Exoj_i4;C8N!!?Hh6aP3qNP;b=Yh#r<%nh40O+6s={T6mxN z3@=Gr%H}8=m>+A+*m67glZ(3$dyt&yzO{eC(Yv{xU_c(v3aNLXd{)_POFoYo``A;{ zrMvuSd9p;d^H2(7dOmos`Q(ugv$J#AzZYLDTAszonM*SqZ(Z+CT!FZN|hhrtwkq)N(|Ljg7-Eh01zP8q}qf8_Bw#L8&6Sg)BKp6EWJZU%hn# z?CRk}?Phz2vtuXZ{k%HFK384udnaC16q7oMPV0!@SC;2yG^hU-H{1|1F;36_WZGLh zXj~+Cf95E96;U6U?7HV4{V9sLMtaZM4q%Y>^~^Ev4qI_V6SB}@`~Sz@cZM~c1^w5X{WrIg6sBjM(P=cbb4`8|!o zvbjA30T|YxZN3U8iZPKne~Ti&9KY((iOVT2)C`Y#*U8q@jvKF+(pxgoY`G1smlZg! z2+k;ndDM8#r5e}X?`Y7*pqok#QZ$Ojv#r=`?@b%t7?UYB7vMvwTg;9Jdl;W~w(3tf zhcJ8W4kvjU&0Ydl#CtppSjBs|uvBV7%XHbm=2B$voX8^$B#m_i#FClIp@<5`x4M3^TPGsA(p`xeScB zc8fYL0WjjzV*ZbFn$bqsc57%JBQkxdll;*mKjTX4fSTE>uKT!KGZQ%(mZ=)auY+I( z=1uZ!r3AgSF-_aCLR!61t7$?2biJ=6UMTozZJgZXhV3*Qyuej8tl|qOzGHmlRv^r> zU5aDt_Ebf#Q3l0V{EuV3F?gMPjmzvTn{Ii~a+_|SUeud%T@O+QL++3l(?lMFs6e&6iUiB>G74bU z?0rukzE(EGE|fpjKJpnV3o2n}eP=N-5vHr>In%BUZ2p%A_dg$-g-zhx@w&y(qjqg9DuDA8U9I03#-OSPqsm;8obY_otQ|^M~K8g9o?Z z@?Co;gh|-1PW%uX7M^ko0W(J759-wG^70X4W5ID}O0rWb=U>7i?DITQj=Qafgrr8U zO!pM?R6Nlj-=zczxi>clAK|&_!gAUR&w{xeWuzbbhwtvQcTnI4HTliE#ysgO)^K#8 zgTCD2>rc#eaJYw_vzM+8Z_dshK?~u9s`s+h2G(HpbBcTxvv==c@Gd>J$tq?z!0ti# z0`;We72m=oMqEJVbTa*8)eOA>sLO>l57t{Hx}w_q?Vbpsk$ONY>b~VG$xB z^B#`Tt6g@I5pRfz2jUy#Hn=S`@ZJ7`Df?^N>64l6R1&RWf^)#?E_VE>6ICa5d)%t| zpl9I&dloaD4fu%SYJ+@ke24%!^korB}OH?vX<_s@z z?v7bG*Fjn6h8iTwKUYqg&mT!@rzCMjr8@~9KK%O!Q6Fxp4=HDb2GinoidLPX?-@9n z%Z#5g`IR}|KlxSpJaChWEtCNHy0n)_(xAJZ^_qq2=Pdx9wks|3C2^jZc3Z)!{ai2jlK4G{>)oXp4DY~j+o*< zI=4+G?S$lr-E+)Qf428;hp|o$9MnE>>P){>KWO75`RgofbEpAWt<8=;kHKnZ(FZZ; z%N=ia`Fdo|$#kZ9EI-noN3%&lNb@d$&uwqNXQ1lUDO7 zO0IY9_DdK{%yd=jW}DYYH`>AIZ2xV`Kl@M^10pBawlsrL4az$Kq`t{Ee<_Pz+5vt- ziLtcGxwlC!`?gC=e(>n!ke(YI@#2`fQG68h8|S)No>pbHMeRHUro^4jW6rP!sik$c zMpSkoq0aAy&_EIBQ;REOG8*}|<8P%pqFu*A*(<6Dx+_Vep-F22+r(a*UoI!pBh4e1 z@Sn%c+Ldw~<> zE1MN+Q}syq+Spdk+hGjOE&LI4ODv)m3VbBd`3TkrjTxj zt>!A)pmf3^|76nB)hp-ay6RaX6D$*a-EZMzaD)4vlasjcbyX4epvX%4H#jlDm5g6` zK!k_1&vpFm!v`KTzP+|bt9m}Q6?0%E=RPgPx0XEGT&@bor=);hsN-4Wkg-?qXTY7u zCUdSaM11v5&|G)SU$M9(uUuaO5BRlCldX~|gPbdfW1JL^AgVypURLX;TV!6VOujti0b9J*)Vr1usoLiO_r>Aa*Ln*%&+X!>f$W*U zSG}bQ&xm=0>)$F|F)$Fnprqv9_2NYvLK6AwUTGYX(ys_i zFp%~x8v3F&kI`OYw-r#a&az6>=_s*+opYaa+b^QJ@A8GM!OXnQTs7Z#nux!wqqU|x zD$E%FxAHojXGC`1u{Lj#M&>9Z|qi!gl54M}OxsV5X0ji?nE^Ep1Vqpp@%fdV$Jx2Pd z2^TZWcocX?%+a2yAsGT#dhSYNA~0`5LZ|gxS&0UCS!P(k3uhbJiQaR1>Wpb_CA*M- zphs`7(L3jrldOqXKNaJ`vmmu{Mdr^KG;v!8d1uQP66lKaa&uyaz|6t%+)_^7v4?aL zp6;X%jsyRMyn(JML}d4&gRU_Z^eYwQJYPe>FoMxm6>4XDEGxGAbS1Cwu z_&{=9C}RuH@%u`86u_Jo`;M)@vB7?(!Z#_y=F=OaMr{9XYF&?n?Y0L*%>2m3U7DU`YhvzSwxGDxI6 zlb-Y$=~bd%B|mbwX!WxQ>vdxA@@u3OqsqJN7XK z|NCT;s{LX-4l-AG;hpa`9nZ8%dZ4W<9xGwW)JtDk$?X6m8wN-p2p7hChc9uRph~5o)oZ7kWlSOsSZm@jaO768_mZn=4Z$>48+u~-QL6_ zifPv&m3CdnM~4Nkt*DTn0B>gU6ggl2YMBo>!LuDjB%OwIvTk&lxM=;38fZ$EYIUX% zCUmuRbk=lNSKs#H6l#dxG+Gk%d3*4MssLg&BI>{FKwFw4DWlJr& zOGd3aijX_6Q+q~274qh_BI)Vd^n6u#*{Q=#$q5}4vhxk0o~@mRY39ujTk$#K*}iJj z{e=7o1#p*_r%&B{CtW4e0u0d(U$W3DkV?M3bFP8YB|N@%!c7 z@sQl^X>F2ZZs=!e^|&>z#iW4KA6bW<82FrxS`rO94JCq))lRkR+_$va=`hJVKSeE) zc7nbeR)5(2RiD-TD_>DO*)o+sJ=>u+3bAl>uRFj(j-PqXX(GJd3}+~8Y6Z?=CIHDj6&ppP>`3{)Uq})wbDouw9pwK68))7=+ZF z`LDG;hwJ9ry3bRm>g`7Ris}zZN$oH+BKLtK{Az!LK>7Uw*$G{F9z*BJxfzvZ-M-ti zqYFsJAF<}*5a`Osh-yIPk018mK!s5`-72cleRibl>jeQ zcw0*B!9U}P?(FAq?I%;DNCR&|DJ>Z{P|FGbz&{lHe~CN2>0Xz4btsW-WWl={?o^R2Al zXQYh`-dIe)@V7(Yvx)3C-OBN1yhOC-eDJSp;J&*ckG$=L(eLX^;FZzuD+Bs{1v2`5W!yJ(X_v&(oF9jT znCB{9G+cv(vQPJ(rZQd&-k~xABj9nE3V5Y2>p0Ezh;&fj*jW6Dl!V$;3?WYGGUXG| zB#xeI*k_>^b)A&?oLLcTR?MnpfA#CTGI{!4HK*|l0yL+15Xd3niq)Wz1C zMs1>W6+9Oe(|92o9bG&JDFK}qkfvV}nZcSkqpI64KH~*W)5^Dl4owqOh5U*ZXad&) zP2d1}wA!@n%t0g$2epnO=|0hU!Q!irdd}BI-N%V9v3u`tnacM33FrRdtZbod&a~LX zWXJG~Wu1nONy1XqrqXd!#`3ccR<^boBdoiPuaZTVvS*#WE6%JCYhRz#& z0B_n^DJ_qWBei<05?Mk4tk*}5l>>S|+ zseb(a-Xo<1!`QiYF}m0ubaPg4IL1m|vm1F9>?chTy6uG!X)bVy6k)h0WEzop_}vZR z=Nhs%%P0wbPMohp?d}-2em5~yE%0i#pBO*jU>ZbWG1=F}_`vhlW;W$7xetN^sI>XC z#nlmbi9m*5v|IBt44qgobmZ%GZJEXh;~l*5yi5;Xx$WXzFglX{6g$3hp)-ZW#AiN> z!Lko}RXf1w4yMcwFJ6=JXV1Prg1`Lk*?KSn0-Pr@4h}#Xu+5(gCjI$?obipCK?g1ND&U)htzUVymGxb%|oduTw8UER@V@l*SOW%1_$v4YAGOf6OTtnO{hC7BVzS=czpTHr^87(xhYT?*1H(~5ej+V#Dcn74n z8)-AM%712}d?QTFeK32(&IdBT{3m3+`u_cr#RGnbyyO)9n(Gp4%jqJTF0Updj>mG^ zEPE+j2OcQTJ7`tL-`&#TBuz!~SWNw85dWX8mQQgUTuB8i#|~C3$G4^a!-X zFrit@Wn4bUJC0YsmWN`a`r6SY92YUR+f{H6a^_+O7!FKjeGr?~c8RhqxTxj7gFoP` zoVSJ8?RmL77?zL%i*Jc}yg6`k!%NElU{ZSvEc@`Kbe6RIl}Ev#74!10cG9Phey?E3 z9OS1`q^t+a9GeW4Vg!=TBSG=8wQ1Ca2OjY!Fv*_2_$Rh%P11a43I91JlZtl$3d6JY zGKINnTUhnr_ckNUF|NWvmMIGu;)-Y`i)|ms3+M`I`I4iIgDG4G((d_VR<+D65SyiP zdq}{3DcU<&E50!o`cGb$aR>H0*qXhTQLJMhQc5_PTGqZWwBq&>+$|6vlwCKOWKKGM zWHB7l2h69DiP^FBt86P<0O@bqJ!oU$kWHJ{%_iw}uU@po6xt(EBspn`^IumH@i!29 z`M}0pmMBu`S-1_3hYAd!LJO>SFFfF%GhQbsRcTk3p*sxibQ94|&vy;5lrG+K4Ui9G zb_K7nGt`>jndkabeq)f_I}==k_EY$047NK1&VT7s&Nx>6(YHix%{fRk;ac#f%1IPDo!P@N}YJiFZ8104*W@D89#^-`-BGxahp;3{o} z3rtnK1}QnTuTqp*lZVNH*87zwYv>d`%1evSPN=rgzrtPmFvZ<;LXt;UNr_LzCYPvJ z*!NCvX$!e=;bp-bY+a8YTwG2E<(Zzs8vrG)4p3#im}J&2F<_q`7Qdk}-4H(Ck+_UT z!@CMPk4n2djWh7ddhiPSyHm-D#m&g#n*>1JG|!#tcPuoL+3j}3gNE-#NHkx8l2RpKOMh4|7{!p_2EG{h^K3y7SroG4i6*Jh9Gy=Gu^q`A8Ix2 zz|$!DoecuIY%aZ#O1JUU@$MYGf|YEmshp9V155vfj0@&>n}d_2h}AQTPevRBDNcOM z&mwCpz0XGQN74xrnVuMI4{7}QcmRopEmFnLP^A)t-?_Wb%f(`t5U&58_Y<&b*+f0l znHd4e1z7EE!YtzDc5|iw&T+hD1$kr#ew0n>uGGXReSN`LxzbcxRm|qilRNv9F+9ue2>XzOZMH`Dv4C1N3 zSwwsGC{uS4TJhH<#o(;v2}>7XGT1iI=ecoGR>Gi?@eR&A0U)43I=)_9xxFo6aE2rCXa-J~w+6D4 zNQE7&6%CcwyZzxwQ!Oec&D=XQb1&$&ZguXi+w5FL0Y*ke!oDuz&V%&XT8oZhB~C5P zCVWlXwQeSPSR{I3faOnk=ld4DWJb*jXMx21T$-%#@qJM;?`7#C>0F|i)fF0?CK$GP zNP$}XEWkLvXX5l3l$1d#f>)g&vod+f=6&)#_@;Y}lZs9FHTlJ`<87{c4MGx)R%SN>;Jj}oV|F>o+ z+yX-5d(lYZ(pP#!Tn2KK^l><`SZ*uV?ByLN<%hq*PN@ejZqYW#qNiSUGG0Ne55fcV zC)SfpIJ`jni&s&TFxOYH$PVkFeBDbYTm{mK`Gc1kgg&*ZZV4SV)3-st*u%O}bT>V7 zeWIS`N-Ivmx~X*0q!aoCFVnaL+Hgp0u|xJ0S*oLyORQcj!=lUNn6w0!dSDPh5vH$R z?fx^XHwxF6o00XvzMA0f?p}i67~pRS`d7QFW)lU31l`#WAYxvGei# z0-o}epyCoXPE)_tRBDDxrY`fPscU8d^KPo5)Jy35r zOY%49Bu`WkMxnUR@2M40b%sI8;sWFlQNFi=I7@|=J(qmE43IKgR?Eyy4wQoXg>*ZQ zjNUd$%0Tx|?B7Grixo|>GiXn`T4&f!eO%vuU#$IcD;rTeyh~3x^baB%(jKT18k6jm zue*B!bEXSzEJ>x1-9M9*H){n7d{~w)KG&{{D;Ckf6;IeINaze(o7N*uz)Fwbsx#zo zo*aBhm=rxshJZ~ZF`EE5l!H(LN4U#bFeY!x_&zSQ`U9=o@IEdGT=0VaqevKrez&G1 zWW$DXN?J<@0us}$nMl7w9PmO%1e|wLh!b7WH>IbMsEGEk=z0e|cJ!3~<_;7ypZq(Z z_-UsWctXXWNd6;{Seb23Ns40qXhI24q2|&Kr4r9MT*JW?ib;uaqsw{@uhGub!OF~k zdI7G=azFk3tE@R^jIirJwWmATxj?fOjtnEkZ~l-gbG*&EwCoA$Ke*p1I&vxy12OM+bwzll|iMvy8`RRDev zOQwjhwjP!zO@eoEJO%0|sTT2Nimph?IS9^=?eQtS7UH>Ph@%}hr(rX}o6j^2LUzcspzXbsNL z#x&~WAX~28@JmWOz*V}s3GNoa3^Pxar;PhUgDGAgd~jRS9gfEmN^X+a-n}HGoPD&{qOt(e#EfK4!0SNb%ND4 z2ETDGr#*|!Y>(Ke{wS>{ zoz~8_{(w)kOF|b=ZV5eE>AnYyxwK5VJ%$i@s8LKMVa2)VM|h9p8qyhm6j&%o%;}Zq zK+QzoM(EOLpE0Nq=4au&`zgjw1AN>9LnK(Tp6I&9us$7 zLLfkgs{_y1gTFRSwIpln{S0*R*Kk-V6lFtm5oYroXmc~rh_KBz^l9Z5B(m%E!E2J? zINT!PruC8D>xWYCaX|oYdz#j5=G>+7s6cYa3AYpquKXV{qSSyDloGPqu z8`Z?|#;iS0eEZ{86lwUu6K+mH-8Hp)rXvD8yc=jb`8Pzw%aoErFTHIHcu9zbs74%N z3*VQLc-e$XqNL05=bc6mu}46&Y)z=B1I?ZRjo&h$@f)b;B4YCU^TD&j%WLa!~$&IpLF#+4F66lr(>jbd{2yZ~{y;hmi;#5R$9f?M_Wf`9E~ z=$IP{ILv55Ezt+itptTBV`Z)};c70*^STqBG(m>}x?pTjB#N9EHxJ4JQm+jlYB^TMOQQx3Z8R zTM6FzC}Dc@UWT|!bOKfiA4N4$nxEa_!F6hO(8LrQ7!%QhTzJ@Dtn`b}Ty2e4yOc&P~W=8;xL(ADW zxyauLpZsmg*waw20fJ!SX{yf)BIAj9kLI}ErC?=axw>Xfp~>kcQcAdkCZ44qj1r+M-`{^!9vFoC zan}>}LEI(WAo?odBJ@&CZLv|n4X(H9gW9bN`xUNb##;h&Hc#R=4=HK9bf^1iu%mvf zY5JJ1*%*X=($CB#{q{bLIJTs7<1B`AQb-Zgv|&-N$YuAy{6+bPz2f<*Knt6Ym#}V- z#Fd3VKQy_dbKNZGBoDQA`?r_&e|>NZgPY9hQwlSRz>Cz8nBz}pbtL%9MZAl|>eI)b zcuxBN*MLkrM&=?6?Db*8cMS#uC->i2!Au}yKJ_K}luK&xukf{tvSWX7``TLhTLE|8 z6)^7h9}Bqqt4Ewi7W^U1!+rfSP zP`B(QLgJ)}D3&BKmhXKVofT*%4*tvTzhhYKhlued25aZps6n)Gt6%=puw{;X25F8y zCirS8gDJ8QSE6aPg!w|IkcrTY@J47s)*ELwasH`Of_Zj}Ci0~-5f_kw-#xKiySRwW zVu_r#VV`UdstK<<9Q@xYvhjJZ#+kJMnCq8WTms>;1ANM#f%ULmief8R8Ju*aiia7l^6vD6_Snv}KK`Z3!+6YjZ00qK$g>xA2_q!9rS2+r!}C;1PErNi7l|qgWA> zkN$Pm2S~$6?t4V0Mi~e23TZ`%+5%?z8!~~{O-ErIjhnKqjEa-j3XhYvPbLk%CCyE! zcJ%sTQBM70|Kn6&+2%LE;_^IJW(fK(ZZuG?RI60hd}L*`n+tW){h1tHpL}xdu5ps! zK=@EieVj&-ku){9(nXk=6#d`K`0J8+P*GFQzBi{>3w$sBljamp3gz`~@B^wZO)61i z&M(N_ljh5j87lqOd)TRV%A?qGt*6pl111wq#?WSCN5;$X7zxrE7WMS6dUH{LE18J( zOLA=o*CIVuh};!Z`MvBNxdr{{9b&GX9V2Y`aZHO~W3~6u0ebDQYh&NbVf*gfVh#Lk zdZi&*u+qJZTk4_sqMI~~LwYbN?t7;Uakz%Nf6^)A$PzngdYA?Eb&IgC5uG;Qp@HpM zI^h5XQW`zxYuTMAt-?7tBu9q(T1;F=d!B`Ja0=@D6*eHXNOo`pb{Gz>{6|U-L<21A z7^RNB9j@{YHw=v&4X*-!bqeQX}HI>}{_UUNvuw+3s~gwJr}p$AECrA=b+dQL4P zR8ti7JT&`B=@#MdVRh1e8kWXRR{yTb%nV@CRi<~jd45;JND+3Lbe+454P}2cZ@9Z1CoUA)q|}2~g)BWv zKZ<^4I++KnF`LrW-B)yKdLW!`Tw%R|MYx$mvMPxhxD&8R-`nqf1_xmHh9BGSonP7N z&>d;fsB34$UD1!43K=1bVKL-9;+rxa`qgQ7lryh$$0$Bt;oY3e$j9sUQ%duHP8*S2 zC9P=0yBOzM4i8AfP7J+-o$o&P5xa90jmjFU_?HD2@`5nm`bTBszu^-5<;Tj#2lz(j zx=9<>a_31=vWD>Vgbw_?QU8kZ+5qgl*okc?DBa=gO3pLoBb9Y^CQcH3dyC#@!8Dc5yOsw0U$iwWUND!_hzi2sXf@JsN)Z-6hR68-6o3rchi zaMYTOe$3qzBURHpQqZhlH~1Y8B<}j8g8ATFYV9!XF5t29gDJ-qB(2C7vTjV6WKn!1 zjtex{wo_ecZX<7Z`5IKwi#WO2g@uKK7vIM$6NuOLy^q<0R54ZNzu3Vr0CQPgrbp zrWz}%Q{XKA|6=~Vd>kH}c^}V`59jq2Xn63=t!( zb>iZCNw&e2X!q~EC!G@7Y`n>e@Dld`I zhjQF(!_=7-M{s!SQI%t(Z@Z5y{_K%zO60Hi(E}o92lZxNW|WN< zggasEJJ@_PLc^!L>C-&Y8)+o^tYQ^**+G?vs%7FK3D-ebC)jkM9S*;|AGM)spI!7Lv)rTeP$|6 zDsT!fjjqFrwx(*~+($M^*duv=wX0xJIp$@|9J2u%35d*>Lh zU^ji>2@ct2QKoKU{{6@*Gh*6)=a$U;r-On#61JG>UOW1qEi(?4(|sEF&F!OAcA4lt zz@~QG6{4%PEV`X&1Sg!j-uHH*Z;>M2azC~c4fs8)JM39Up<8)I8HGGdZ6BF!#77Oz zoiv)O%cTd6eD+gHN0UJlY&NV4|9|izJF=uD1I87amy$t;mkP53G%g`%}yX6kMx@OH!N=R@w za?q=#Hx|sd4EJYU5E3TQY4iuT=cQ{c1IoCab_0amR;QGKeE+wX=(oFOaWw#BB2<dAa%m47a2hlcZyr9Vk#su_!sLFdXPhAETfb~_aKc4 zZHLU7p1GH}TkIDv^P)Wy^=y$fvC3-iZFqSJ*NatE_r_gR{3Cs;TB8d)nlPvBl#DjQ{8IX zrdB&=^2F61SK~5y@^-b(&v9CxxYJGMmOQpq@8NCQuuHjDF(n*pM?TIer1wQ_xZ|hi zc6D&jM|_2YjKl1^-UT35d`L_F()4Ej?Ncr`iN;=PxIsslOd{C6mSe~Hp;{K8n9bvQ zYTApryzF&V(77*IlQmTN6gy*~j#Q(h+~^&GrZrFGlV6CZH=kN>bCc-(uH^&305(7B z*^rV5LFUn>)S>0sQTMw;Ga!@)`TjXy^Zf<1Gj11q#*OOKxPQ)$@H4O%jOnEq&c^Hi z2TtruDLqXSiiHYJy8%HhiicLBp}7|tY3@}JCGfTQ2zf3-{n)gC=gAI-2uyj znP;;QV3An(s&;0!vImldu)8OUaQ(z*ff3Skf08!Go6ksz%;480DXv?gFV@(k!S=SW zxOu_GIo}m8Xh(e3FFS+;ahivFbB7#D2{w0cpm?nyj+HIZxXo-{&aTstu(tu)*ddi7 zliDsKy5CmHqy610mxe|Ce{P!&WZ?w`9%f7cgO9eTnlimI_Gh(0d*1da81ZI&vM^<~bY- z^s;a4nX5;+9IhmEQG*=G=a+fj52c{S8>jdek5Ya&6A z(b?CmnlHmt?IS)Ey6Anum`V1hbq!dm9y<`_NXgm{rQ%yq2YljMh>i_e%s^+3#p@{0 z9T4sf)rA;%8k$QThc*T;C7lLVO7!DQgI0&>M<|x25CuMJOht7h$e!U( z;`hvE<5Z`=yo%Pkh?T}DJh*O9eEu$-pWEkH(!AjNT$9toc;&s5z4T(wfzL z>Jjz!Jaz4DC!g*4t~`6D1avSXbCszb<$ML(yIkFfc|(%k8YWg--Zf@+giPj?ywckt zX@3adT-gQLpwtYqqVo4-D@nYE+>GbpV%5@41xS=sQ|Mu2{@a&?+H+{Z&GUN7XV8j! z(jBsIBPkKBwfTS(+lr(m*d<G!A0aERyuC`z4Z3`%b}g|+mG>y7iIi??#Wizhr6 z?Dm`GAM+({cZI6c9U*aq4##M1VaP$qQ$dRM#_;)my+DX&JMSLRht!#lA@H?K4zzE0 zF`xE63EPP&CbN#fc|tw z6c<4KP7FjrKe78Nt`&f%OC5;X)0oz_uPfKvl;|wgXiCV+4pXL4w95z&Bsnh)th0L= zAxe?vJf0pSD$)BUSficT8U{Vyl7BVGSQajpxwrax;{2)R@m~aWZwSRi?y_=L?K35Y zLY9>&%~p3d#$LRX&_H|w^-{AxA}r_Q-gsKoID*1&Rl$z7+Wo47#b<=p$5y*&77}~)m{;C6o9rdO z#mBh&)MV|?!29aVm(o$g?YQE^w%p=3K0A=gO{Qc$Y<5b@dO^Ls zEo4I@$Qlc0udP+pcW{`QU82WKbY{-=^G(ZKc?)y?1K9*cQ$OPOcKi^y;6=G{Ve$^= z&2=T2{WU%Srfmg^7UyC7Lq_wz&BIbNwG_NfShL)AH&*ICTn?&#o!-nl4H2`h@mRl( z^60R?9+MaAuRbFHFQLBgEnLhXR8;n33m4vXkRU64#zQ;i0Z#E!ZRf7W5dyO;;RGVPzIdEwU&vstO0Enj1$vc!Rnf3%<>t~ ze&Jj%JeVh+4?&D6vVk#cSVo4$*ZD7tWbD!HBBT)e=BzMd1U$EBgSaFQI<8=i-~I`k z@?8_}z&hQ}S9=2}S$$tcmN`p1;s>Lo9A({O1TvlZ3w~B-=+9+)v9%JH{Yx{me<4LS z5)L{OyOS9V!N7UtJ7}`PZFy@D^hBmgAPeS-m0K8lys~)FfP!30O&1yCZ$*43&%V{L zi$L1Awde7(#%kB~u=stMZ1eNg9x{PpE>8VD$dKD>5So?F&>b#h5hOQ6uRL@UVML05 zeoWt3LdG1voqf@SSu(E%2L#0E1+vE7S6ah#qy+!2|6U~X__m}&=p)9daPsTo+>((l zhb@VAA6fP$a~(GIwlIWQ=Mq_MA-%diw6OVN{oPN}JFmMfTc5F;|D4Q&h-aTx9@}>> zzKBasNA99rDE%$Tpw*)Eqr`vdE}J;2)`9p~@JavVQj>&i53nIdeiTp^8dnu)Mg zQo8JqtoLa7?zx~vYoOH|9*m&2d{>t> z*L+d8ICUA(2HeylwPcc^TC5XbtBE^)yomhyfmS~hx6NTRL0dIx} z5m|ZDEgq&%Js-Qci%2FHcrnvy*#P6#?9qa)>Pn3NaK-P_1X`6ZR6+kD2cVrI4#6<) z-}U7KCHVCTp>!4{{Ob};nBFKrg*8!zMP3a5|s3sk@nrqv`+W(GM zIR$9-Xwk}DABJK3eiQMA!>^t7Ojuuj%Thr5R3CW3{clIKP}>XwFOr6Se}(HZ~Zfc+Q$1YwWeEwg^m8qZOa-|??3_G$Yp2eJ zcvEw)l~ui)a+)3Q)vuO{=9~A)lEqr5tQnW%yWox*6<;5IP&R3L{0=oQ_0zl$Rl>BP zGSb|0I-a|S$Gd8D$2mDa? zt_#75MK?I5I0)-u$I7F9dg@*V94s1>7~XQR!AA^!Szkh~b5z=lQ*FUHJ8i(t}#y2**gRyQ{(yG)CqTc0?j{!+Ips!hwv$kMP2{l{WSwmxSBD3!vFJR3 z7Ldjat?X||WakpiQNpb;e9acR5f}Hg$s2zx`(096lg@?`L)73m^r z67pH!6jHX5cE(84WKfh&ZHQRe@l9%vY=z#6pfBe14n7vE)qQtB1QWOi*FF@lnOfB0 zX;*4>l0&X~c|r_03!jk*)0)N84tvAJYOCL?%hz@j!g};-O4V_KHq^AHf&0+0Uc1<6 zvTr@kQ!ZKDw8=#)S+j3H_Z!3P0^*O*MvH@0ooxGkA;Sa+ZV;Cqjx&Ye zhKgl#a?82o{g%mjse91v{#lp9>{?Tr_#5r4`;943EN@G~rB=*S?u53IbR}uyH?5*%;8BLXLYRYQKn(MBY8Xo@=(eN&Azm%?iRkaAK z`dO6uK1&mX2a`>)q1IW2LbzMk7(}5Z*ZJLztvMgNY71Q9BHZmwOOM9cj4N4JWg#S=HAhd3%|-+EJ0b(c_e z_CVl>^hJM>Ohq%%?uG&NYtjhqMEehKYN?+LQ7@ujdcs|P;=@&-S&{0yQ+&t{R1_bc zd3H5bvSn0jGp@7TU$tG6<5A*$+P1!^8xgBb>hmLR@>(4gK5luKw*DZ+aBbleH3Clj z_39Y&cK%-u%WWVNwqIU;DPRQk%hjsAXMkWdt0m<4uoIZ`KJUsO$IbRQ02KraS_33Z z+c)B}mHyt&Wqrx){B-r7q!hcM?TJHrx@DC{b3U2(mpUa$Zpy=x$(Vo zEIMsHj3~cj+kNJ9rj&Eb`Ds-CEbS0lOGju{X&j&6;-XIoNiX*(&v|}*swk1Ljozkv z?6kaB(Du!SgeL(5Xh^5fKh6H=9w+~?eFM3}1?TXPDb4L5y)nbQEyQ2VQeUsG`_|I} zj(ppp)~yW*C{9uH7zkaY8WPq(mLPYZ?UpTD?r?u<-r{I7ana_n;sVxHN<~(tR z0xJ4ca?z}+??IFEzI%id$(p6vdqpdhL$e5VP4Oo`UG2-;FUrR~u({zLVe?2x>m@VM zRgIqw6OD1VP4!cKa-tGC^0If$=4BJ}nv1qdjz;+raB7OvoVX3X==Y{_sM>}-qEn%n zN|!BaZr(1=kGTCb&3(3%9Qi&!qWP{o=$;*9!mYJys8zV2@!YE9Y}dA&cYK11qL{r) zFTQqHyhjMQXg1W^j5^uXrmOW}Jzha%aEw%^5d?Tvk|WOUu(g>AL5rqs2Y9=5IyX6?;5Sez|w9nuO77vZ|Ky zb1h}-cWe+_pCh+XeSpxKZB;aoZ!7%^mz|Jei0=k^++2v1lkMZ&>LSFN;Pl*6UZ;R~+^%D987 zS)j;jG9l%98KyB$yg*^AX(i4eMzJ-@!Rl)G)5Z`nug#%Z`Q>E70lqme!riirp7g7! zf4#rkg5z#uBVxw$BL?A^*}3@IUo9~$dqXa~($i}x6cZmAEMaF3SJ70EdMULzD>4e= z2Y*f(i)m1Sbo~7nxbbb{)wulk!^$t`d5ulX%)PG)&wl7WfLD>m+#{%X#;1}Mk~JI3 z{}8Qsv;(i3{B3DIB&gOpihifn8Ir-@JZ@_$fl>4wT0SVT%SUphR0T*oLv7!>S{`e;Eu;@1R(Qe}sLrXqPY2fi*3VGHhKNA0G6}>lHti-Ui zR>Us7mrQ6iOfY{S3TshUD|VX%DNw_k!NVSuTzQt2cskgf}XRxg`h0 zk@Q}L$tvHh*9W>_tlJ)3T#@m0e|kO@na7~~627P6Ai_%U ze<6VzVw1nAV-_pp^@U$cYV|Sm>zR94mI5w;YV#M&#`VnEzHMgVhe5<8r-yZ7`jIZf zPB}RWWdG?{MY#Jsd=GUXiM1#etHdy7+oue}xP32r|M_>|OgVXG*zB8|M8+0axjCVZ zHD~wRW)^&i$OjU%{2%t-GpxyM3lyHQj0FJ^0j27oqEZzhR6!X)q^b1Yq?dr9W5}Qa ziWCby0xAMhr1uu2N(l%^hlC=b_YxqGd^<{<5ogZvd!Bor`{(>idEZ^uUVHU21)ckP z+R{v5r*p&a-Nttymvl0CPVwhj?SQ511>z_F;cuA+GVcWVcRT-fh%cqVFndjH0=6f6 zA`jkX=XKd}4}RU%11^GP!L6T*UG!N6Ab@6|$|$B!vK{X6KI|)sghW|P0vS|cS|dLP zf}>}_Fw%bo!!GUzm>HkIw-aejlmJwo*0lKnl_}GHH{Jh;?1}#o+5ZvQ{fGZYWcUA% z$nO7tN@Q=`t6=w13DJ$wyxO>8xA-|J_TuXiZmoBR+y?UQ{-FaYKR!K2d;k9Z0r&CX z?Z$5ZEaOsGg7j&?x3unPJ8v_%@!tTy8xUv+-jOGJlwSZACpz?GgoBAu0ymyXda77? z*`H^>7dnn95#61$7Gs^oxi=q*Ig+2I!{j;VC9vG@QC;Cb=qq{01 z^O2l&sjpv1zuHxRm=Pbs@$0ka+utqx=qe=lO?voGA1buLoMy_Q6zMbZ59vx$s6gM& ziqr2ZrnhjuT;;O~Ll4_y_4~{|E^HjM>zj8h9C~ha5VbX{I_Y)Tb6chrX}k7;QVW1G z@INwj>6gEOE!qlPE8b4Mb4~;@K{KnC{EqHB0f$AFAJqABp++@K=60`gzZSJWY^6Kc z%$-gnMfzZg#9;jX5u`t$of4375T+cq6v-)p>;Vtbtor`#mz}%hV_ojJH|QA|OqqRL zZ$9Eai123fzT4_ALkfE&I?}wSl8<*Y-R0}QR!_Gcm1-Ee(GG2?$2JeVO zQ95;^2k|@GRPVXWMXdtgIn=u3$wM^xIV`I`xZ?k5o|hwF8n^x@Vkfrom2a2K0TQj` zvh=4>Ym?sG!m;+sa9(6pw25Bh;Lgf|OVlLWOK_qDduCb%@6`sR&|jmiK9 zZs0AECR@!x**ZUurB&tPd|>s;^jwK1Cl0?!3!qxUp{b~t_^uV_!|H-F^DPa!3!Tg; zcJ|YX;in8(j*ZinO+i4MszO6bvEy=U2y1JeGH4wU#;p}}Hgy;YI(hl)W(=o5klL)B`d zvzBn3z{oCBbQ#Kir*fn+io@OZ_(1y^pR0R39SV8-*P}>Qxp`Ad7Hnha%`Bb$hRt%5 zV$kM**}c4MaQ?TDVy4{AvX?KCq;Zpq@r2x*+Ww?>SM2z-5982r5v*hR_CmpE7fF*5 zKjr!?b*C$KDqC;g)ZiMzxT~6D7*I^1j9+bE%tRVlyKv9pF8mU%n{1+SOL;@KLoHUs zhu2snmzpsfSz%bsZdv%)_Fi;p?{if~&fe0rwjV=}$Nq6Q{ZJWbTLXI2RNrh+&C)qI zRTxy;a=aErI_@bH+ml))WPjZ*eQt(Y(zc75?YcRlb2VDHn4jG!<51Z!_SL81C5vSx z8;O0?Wy6GA+t*%K;9)4HQ^NkWb}8Ng=;UXZytp+Frz}wy+`?Rs95DVlVFCrO3wMs{ zxB-V#%wTJ*e!I#!H#5tsF?4Cxxgo@4T_Zc?Vo>|MdO*sfl{_}OK6iaBge0wNaD@29 zDZ?JFUh2^po|*mI0n+1PKz-rEe%$^;2DhhFeIwV*2R@sC1_cZ&(kX{N#!WWKW5c^uk9-0W0Fj zzJxJa#Wg6v0#GrJ&19fA&!no>hHH~hsxvIbK5~goid95RSgYgYkko16u0OJLw){)w z5dbkqUPSvcxU~VhER{HK?WIsxWm^numAaKrH%}<6t+tKq7J8m7WB~jO?as>3@#uW( z;zZ%JsnX+I@@(GjmJ&?Mj-jl1uNe{hZ+{;9;)S7&R3}p5#3q+4RGs42)k*e=4g_zwOqiLnDROI3?o|{Nn`1w?j|LTYc5mwydyXRol< zf>T$2R}2O}&CmsE>U}z$?Cwk+?)<^_K7|nF`kNEFHKD=4k);S+3j7wEIr+Z}=Uivd z%7`aBU!1sV--cJ?&OSNk&Mlnui$^z~*p%TD+g=kHy){#AaCcDiLmy9Ui!|)aW z`(9Hg`dYVNJr?L)3mNJnyE%_U)J?S;mS`qqD5e_S))|S|*IICiwoDkm;u|J(?YzU? zkI@BlHwvmc?fb5dTxt92*1Y6!k4OKBvpu1C?c`jn=cY!%X~k#WbF9bqFBI&>r_GQ_ zZ07X1{22q5!0^du>iuh@SCXo6(LyG+aotKP)w`IOX{#Ticgb==&kG4pJ^S;5CqUch zwC>M^sx6*7^4gvG>Im-2ReqUQs3339?z&c5^!d$5Wip8X)nj!+(npH<1U1f4ccBRM zdDqrd%a}e#=jT2*@0=dbC|)nsiH7P{fmWI{IhJS@O`+NLP7{oNra)7i)Z}G*Wiyz8 za|W!cR=NJzH#%y;dxWTF3R6CcgbS4dEN+yXo7x~#PcOqj2gw=3C*7>?)TaqgvqX<= zc`pss8g25r^4Aoc5q=Dbc`KVG`cy@9>Z|_>Fc+bjRr^=MMxla}MK5)mkgZGS7Uuf= z3|HWMRss^NXe760Ir$?aYAUUqYDt$RM(Gin0k8rh@uFX0 zrZ5xVVWh8#h1E5?FDS3e-f%ukCv$NY*ER<-(FSYsr#--06IYGGp}&cs>CCFI6E>m-UDVlDgN9ngiQz#6jshS zl#L}CX(~uM{=}YY33zdTw|#{EU5E>s8s@R2N*awBdMVE#w65~$#Ep|aNU2p{$0Y_V zOj)lja++;`ikbMtpcJW`Zmrmc>97MF@BV8-uAm$?3AkKmO2;qHyx15>Vn8PNnb?fP zFaV;(7SOFEN!xfHWXg~kz2sRJGI@QRmtR}j6Ky1@hlC(++Il0`Osud2&?pCL%FLwdJ~vAvfxYB89 z6===pJg+&3Mi?#jI4+rMUGiL%Z;=$2Sh?4w{!*)_*l{!!L+3eL%B5$X_s@F9P8H}H zIr_HY^^Wy-sb}RVj>8CzY)7_@Y#dW_mCN-SBMPw}q|gRT)idSL?&^hIXj z4ToN+mWs3HPJcKsm1k=%cz`5DsNkx!$F4cVH*%Ftl+JfEU55REpL#ZrEl7uK)+u5R zZ*)SfmO%;ISUMFC!jwF#Vi>l6BZ0e;pT8`v!Qc~Q2YT#W_t%w$k=4`nlWkYF#eFrh zdOG<*jPLumpC}vGtEui!Dqm9WIiK{Yc#)cPn0>7#Lq4s?7UdCympSlRhI`}<3AKhx zFzGCZ`3Ia|f|WiXm6Q`kG7~J}@o`=pnMUrPdy-DU*}bQ&0m9oOFSRB5l8VP=h6<$C zbS5!+3TxQhJIaMiDIAIU$b|U|tr2IMdM#DLQxsxc+_w1cPK7}gF?tk;{%39Q1PUC( zrbRyG>7%~`OY&j4pzq)E={?9wijH_7<@sJPdXfZ}BAKtPA~B+-eNtN=u>Pl2#rO`< z9C{FjDwo`xz8`l8pqNxLY@-Is{Pa>>+A-EcW%zgdZ5>K-p3avIh6K}i%}7bkqK8LlXX6m{) z{A(T!`A_SMf+SMr))1Pr;fFp7|9o9`n&uCZ-9TrPYQKM4dS*{7@l}EE{SYrDwJqWV z;WE1e35S1XuUa-vZPFvCqKc`b!joEphEgDgFGAUz8XgU$;SC~7Il6l|(zoUygA* zSC*g4heEyIa_O)8A+D7R7+aZd?%g{zOEhqIS5}R;a<3$5j2W@cqGoI5)`#gyA`&Cd z9#>hain}Qp`S%7OVhLd({_Bdg)Yg489gSZ73$Aez3pz4Le?iQ8!B8(aesE2%H4OWj z87-&HzkzHbPAVaVU*BCuW*;F!i>3n{XHLhlm6bHjwXCm|RGn1)fVk|951Io=QO>#K zt^RX?9z zIoxQasubz_ycr?uK3z2S8N-JejK;$+_HUKN3Fo~F`W~6KDe({Hl!wIH57T9YP*pR+he#m)8Z?MkB%u(yuW+*keaHuO7_6}5QMXPCl?l3+LAp# z)q;@J$1k*SX^ikwi%hT8`MzU;_>xJ*xe%sUJd}fGAFueuz=(N71-R0&SfWF~i|5Uifai7|72cje)aHkF9ds*LjG&5y9IvZz%yE#1|?_R3_YvJ0@SRtCg+ zGJ>|i&~+MDmWC zr|n$re1;|JQqS!8IDbPNJ=`}H{bg0X;&TU#yn1FYvn~a;SDj-jd(~R2Ww=~S_h^BC zW0I?~w8nqBw`&wjCFMb?dk$9)pXbm56gRMZez2!rSk-gD$j^*qif1}e&0Pyrc7UU+ za$K8ngfPT`r3iLLGUX-_OSOEj6@qusw~@<7Y(3 zJ6*y0SQ(MQr}7V^NR_9bcOu_bW{~E(DwX3%wSQ=&{al)Z@h%`A(GO}3Qx$PtWN82qQ5t9W3Q-q4AC+`jDtYyxS{!RE5mRt# z&dp(fkxz1TZ$07FsZH{gjfiu*a?9Iu`Sk9Pz;Zj|aR#n(=v_yRkr}$A7sr}CvA!nG zdNQLjebw;wVbP3hM{xeD3>h5!)~KEbB#RL7*~a+?B>5Pag?n$GArlkCu+Rt%^jW8i?OwKiA!Dp&mr0{eX7jJ*3>LY{3|&Inrei|J?rZ|>_i zG!)bQzuj9h5BFIBm=yvwqvV9X{O14|b;H3LEKxr)t7|%OW4))n*?!Yy-F?J2M29gJ zHnHzwLC$KkS7n#sYT_GWJyYo!iH#yluDKCkXxZ%R`9W$3q`{A9vo-#JWQo9SnY5aP zDC84x+*oEZC95U8swVn}W7*1yiztQ3H#6MCBR+*QYZ?}nh@3h$ye;4r08MqsXi5eO zs&qNqaVx=y-Ba(;15%+Nics$|R08#Ywq*=a369OOHLtIERr<(tTqrF}9%Z?_p5WN0 zm2P9B$MSO-JcsW+Kv@2|4ZN4ifRgp?ffjs!Utj*dt7U6g9(XqR>{1|A&p(g+W=I@p z@h`)*u(Wm#Ru~sfZa)5^1TMC=5SWrDe3}_e#0)xgpcc6u;c;6boVnmx)^~VRmUy zS~Eh-Z7H+4^=FBl*{s_tAI;{j%!{}yY{J}5zvax5SP zKNQ&BNqD~CL^=>&u`5Zx{IV^)8jxXd8j9Kh1Lj?p-t(1?9~MIFQv{{p*t)72?51J% zj1yv|(y@};=tXG=)9m^X!ha4mv!&2eS;s@wQnb9=p4LXx(NN&00U;$W z5Fe_k9I`B%tE^q@G9p5TUX8kOtuzNW&?0){9>nyyJutdEOf`fX&-h4NmVIio&c&Z= zki%&)?m^Dw`TSRBn5Ei}5Jwo$tZt`P68mFJ)cc;d{W`o^SU3$3Kv086;!NUr0gEVLv+a~@%&|F zUDdtc>pnlo5!*UN8=y!@C1)u?bfM%(YG+e%ipH_6X@oIq-)(am$|Y?TDB~CE<~Fno zM^aJ+?WNq_|2ouyTFwIccu~-X8)?vTXde^Ys?8qX3pI2nGVvXN(e$Gx9+3LVS7+vP zXyG>18M5@#-Oo4y(g_Nola@Q|ldw%*aa_Is^}f>S$FLw6>&QFfZEWxSCVHFTOx zc=PMnm0fO=S$w=3{L&_|m*q_VWtDVNPRN#-_FAMl=j6b0LSt16sRb2$mW6l*GbAsZe zf%i&-Vio=NT`WYbdY&q50Rdwn;@3l@BR<^3jTw`g3viagIH>PJtQjIsIoO5rdjLdKm0HBt z=Pwwgkyge~><(KS1<$?fxWRRjhq81v!up-Ih7ORnC8J?cC#R8>R1$$>h$(L4mYFE= z*#oW3`E04Q`qhzaz&@8T1+QxpfjhC1X;I1{lln1#{_Y5i37b=lCa@@UxKzN_>v1 zb;OfAcc-)Kxl^vZyt+%Oc)V(;+}7dkjSy!_bHsm|;TtKJmL$Ur*1x>%`~^h*0EtcD zAV8 zO5dh~^O+0|iv3$zP`{%J*Y|{=tM(~Yn$Hs_^afdyWV)g%dwx0`ylpdqv@!X8B(&6xs zALDq-nf9(i5{o*sIbFt)VNY`TsR(Ro25??lPU_3sRbs{u0+Z+{tx8S$^v@A(Ef9tGZ@95Z9tY+Mr z6+**hFyA16f3kPrz~EbMPDeslIej`Qf?qvRN^ED3+MV-!8UJNFIUu3;p&0wNkS7dg zvlUbqyZ$}R?)_Z=){Gf?&{cMc)n&E4Hya^7Y5y;=`qy3mt6*{Xe-$i1Q0)IISnL$^$92gOJo`9Gxh_UB zCMrMnKIE5aKGpfLq#WX89V!n35rWzb7}_)=bo0jtWlcJpqUtYiy!Ot3TiJso#cK^I zg_)#Z3BGXL>~m-PzSS9%tzs9GzWf;l9R?;`a|}I=$l#xEY(W9X{bek|575X0kW;N6 zNf*QE|HoLv$5a$b%Fc6bC=;a2-MDFv05L$PCi(^kjk`?4BFX>OcC5H#NrbI#%)6EcJQ#&37!e#vnhp|L&3J;{QE#d}>LaGfcc-K#;0cEtro4GqflQ(gbf;UFU; zZ@_GOGqX!vJ`L!TDUY|tCy#(kX3@P#D-R7oNDy%AuMzLu4JmEN*s8&W(u8=xt{1V0 zD}wY!3y%>2HwVimrlDs2YkV55&3`pJ@T})7og<)3b zWXp@z7;+R!-coHRh3h2l-A=c6roXLKiEySpReT^@6eNEOTNi)`14UY+BNi>uG0TD~ zeuhP+vdfvedGtgkUVU;1T->tPRQ@}Yl@t&~;(R}^A;V({Crc~Fqf}f7uUq}t-cB#< z&>c!ncwL>=X;ofJQ0N-=Ki-93?fl)zyC*vys3(xK5c}Svn(6vs;HY24o5EZ`xQA&@ zAWWH@BkF`q&MLZNJ`Vis{-tW5T!H9Ou=3wB>(lO3qPkzKz2Nb*AJcCKxyg)@<+Ax&ecgfOxp!8lZ{n?O1)!knBsmO) z|9E9ByjRy7#D8_ZGhh+6bB+@}-gJ*i?3}QcY*tauFvv#y8jX@ij;W%eskwlDguZYp zf$<^wmPg&C*~>G>p0!a8ze#WH%Eh4}sRU`PYquV^E?F3uF3q16 zw)_&(MI{zhXDw$Jyj#uG2~;Bpu)?IRG3B^|cBmdX)gM`xKokr4PRyuZ_!<}Yt_kEd z*O}*0+G*b)i~4uqb+(c#C!q&OBTjkxvp$jG2VjsV(S_Pw{3CBiWiaJ|oOlH!?0zfc ziVbLsDs-*lS`5JP<{V)!7jpLWYnw!Jru|vWg_*#uQ6CT3ppaBT95*HCaCw!VO z+%5kN8YIIvE(Pl`B1boZ9VG2B%jT@{VF6xqm+hUxb@ZNr!dNMho;b8A>r$>M2<+(a zG+45j^7GKWrg%Pmiep!@;+;<*8~m12te`Mr0Hnqan|jwz>jlO_rpQU&IU!DTLNyk2 z0qeaWnlM!T1#}+vi4iH9c`)U?Fx9=LZY4`N##tHZ)QwE(ybi*>paK1Ilv~pYg#H4D zZY8QOsr1NKO}Rn)OfOzw&^`AhH11Vx6$^{k{aeGsj&T>m<*|F7&KvnH&I+rIp>@v~ zKSU42>oz~@=BaZj)vUp}UmOiBN#w0_d9A6IVQu@Quv;{%=eR=65h7PWHm>s#8rL5^ zU^6|2ZhnZikW4f!0l{zA*Wv=&IeX-FL2#Oi`*of1Hy~8csNr0jmAYNHrMO|EDNG{j zPJ{T=mA1TABbfnp8ucshikZ|8-ww8r4?Hou9~=NOqDAE{ z8)=ZkEPuCojQ;&-PJs!g$wA`}bS}sUE-N#c>5ct8nm;e-OM!x9nRrS9X2lvgx(P4k z=oZPS1$6Zd(PJBgeU;?+W9s-}ck@N>waSmKRgH-@qAIr|FW6dSm%M+A1sMc3%Tnjk z1}nV@GfcQyL9U4&VC^1xjhO0u_l4~=#n7)}5vT!!#~WoP?X{UsGI<;iqeRW*wB6?` z2e#M`nJ5|=jVHg~_pU~fhNW}vJ-M!ncF~=V+3Wy5-au2BMN+i|C=AleCEO^|0g8O2 z&=*88BU82fiR0LCkkSkYkxuWEN9Z=II(u!qU`4ftgP@0Krb@RJh>HU`?5tConjp7a zQ*_A4F8@v~4%;bY@13KW@2K1tUM% z0|z+?lE+rOUXsh`fSU1Z-1))i)XnQtZv9wd0G8)5K?J_Bye7XG&=Q@3{rp&*Tlo1& z);rkVUQzFy@UgK=V=OLN#S@~Nv{$Ca@tT3 zJXI=LfXVK*8xT+h0nQgz2Pjk=LFg+|tRs&wjt z)h!68TXQ|P^)Bz&_GGE75H353ogwpP02yt>2wEElJRyItK#&mNfbcT2ii>=i$h z%JaSPj%-TRJVEp|2Wj#pt~Xdke$LQ9&capGIr=RwjvT90o+U{^4T{%);2f~Ziq{R? z{9#hc6WbK|%dBtX0aFtTj=sG8G}}q=Hm6_fm7T*fkaN4=Uuix4bM63g;&@W_SxUf0 zC_fnXu9??P#lD#A({&3jiQnPW{reLCdgq2bFci743c&lZz_9DJt2-ZaP6Du+Wp$JPx!jRpa9&d)HXGah zV4WX;w}X$#?fVvQu|2*zIk|i9KG}$WI-i|8+kg1yBJ2+TTSm;zbNvb-X*RM6)#=mn zc2?Q=ezKYKLLd!A_@Th!Ex8`SL7D)*@9mxchQUwB^)16>Pj3JJ@-7&5l%;R?j^{td z09cj4`q_kb{6U%aJ23c&f%D23c{?Ha_34jv;B9f!V{ChNynW*en2v$ORs}r8zK4oc3}KVaR4i~u|jd19e;dpf}@F*akNxnG2@rfvma@1K$_Rlb~~jK z=YooCGj;|>UWr2I2S{l7g)}2n`SMmbCB*7`zOjSi0y=wYQ+yxgSNkJ?FrRTRp#+Ce z*su+^faPqz20Rf(E9|oMr8>0m}gf8|2sJKPf5rpq>T%~xI@h06sDvGm?Yw0)(oX+3`Iy8 zKjtF}8}l0p@iIMEm*ZfdS~wbxyl$-*{~x&+1sH(fkgG!{zNU0N7uXB7m-I^y9|epQ zE*X4O+qEga^0n_iCT}~)z+JO(1629Es}Mzg{m+5}2p$B76T%fwf%3oAGIma@cu@qa zTBwuE`Z%Ijkj~YAr%~BAKl#EA@ctVnD1q=0#Kn_S6tJBpXM`Wn%-I1AX|4S{;<%e8 zt(Etw#5<7=3qb$4F=4QIvx@)ED(>-P!2v^i&rmXP0r+<_{qI6aPYyCdkRj*#}LnOa8{+s=(@Eno8wD1))Pnc=r zX1Pw<++b&tC8nJjvQKCx6|A7mg8b8Ae=@KDz6 z`nKG(n_Rjn(97DBNF*~MfpNoP%j>G*3i`C->yqVN5pu-a!N?5@lcc6Xon!Vjeu8z% z@SN9O+DykFb?3DS8@1?ObZxfWR3I`Y0Sk$Mbj%?IEt~nu`l0?em9}UUcI_CwT6g{vg<9@iu_U&q-Dt@`+Hu!MX<5jG#x>LoA^d- zyYT27GA8TJ`eNJTtCC5|sus=k%Hj?d%jkrJ@}7>tmV4P7xa?cl{!h*=)+^{2CBsi} z%jlD*d>O})zKb;0{gN|>pH)(2&w@6EHCeQ972AFu6~a(>5K@*Zq5#^@gFow;UREZ_ z$YT{WxAz@CoZrex@GigA$2nxZ8};)!!F6~}WU8cBzkcgH;?kK^XgVL<66!(kZJD97 zfxCALt7Ld@Ph6;>7uhR z5sRh0L@uSsW8!nAE2lk1EiKlHKv9b7*RloFM(4&7HY}Q7a$ZV;2LBSeWQxxfy|3A- zuPI`qK;PeP0Y8a*pSTHE6G;hZbXL-ccI{_9T5-*=_GF<*qM}K6m_M;R8A?MHUUd~N zxUZTy`U5khEHM7J3g*<}q<3^Y{*yX*&~c2_nEMjAO~0raXF26a_Xj2hA&;Nk%V@q= zAR45lUs7~*nlC)3u0Ocf&_>Lw|ENCCE%T~qsTuX6+5E@^*~sh%?^ID!1Xhea;M26Rjgv~fE2Vi%LScfH;qO2EnJ;km$k z)2gWVvOc5$Lo)+`wF0B}GFh0}{>< zh%{?Wg&V+gTywJ0O!`?LW5zq#Hc!u;QsSWZvMp_O_6@AnTKLuanv!f+wjA z=dyy1uCFbH>t(`P|WViwxIH z#hR}ddIcSD$(KjKfw59It2GS^(aJDn1F>mu3svHIjwxb~u0ca{tfap3DxVpZms0bj zieazobr?o_`vX_>oLyXNv&|dTLWqmG#ue37smoh#($?@ZZUZicN;Yw!4rwK+gdzTC zuJ|{Akz}>2h}Y&$=a5oXyj!ndmD?@FrYCm2Ypu;kmRfY+798f040ULOJTCmW zjQ(BSA1asw+pkeNc! ztYsc6Z`-^4Z*xFt+ZyGKvJ?1RnPPQ^z3tcWx#HBGDkZMy-nN{Vc}4c|5B<&nN=cnC zH!UP1VlyxKu3V>@Av+IkQI^yJDTuA|RL)b!@&w@x2B?WKWoNeFYS=Wbkp5yeI4o6G zGBFUjasyKwbP}IiM#mzYO9W^~>a?w()Z~1bzH7^e1Q_)7JH!N4gd+-)Z#R1lpKx)NaYN3M5W^P12-zBX}A@@(I&4f$+2l2Vjdf*sRy+mhC*v3i;*qzqWg zCCs%8yB^cU@(ljY{z?I#%lXS_sR$uf6WbIeYTqnrfBj~`ff0*=w*=wa{a*yFtU%;0 z(u$N(K1IzKrw1}3*0D+>VcoxqNb65{Ub8hsYE$oN{AEK^nY1+j`khPr-ZMW)pnXvl zG~!B+t7ybur^JJfuChG3&UzXy8b4>G{ZslW5RYXiZFcZA#vcsQawjvf#E?fGFgG?Q zG(|`-m1Ou~K|2(ZZHfFwE)a=ZD|;z!9`(bA*D`*IkK8G+3tabMbB$#5XLGI2w9WW> zt?j$T7%6_5|1uq@QvksFET3&#tExBwI&ob&VL{QFzAa94KQIEAnPU14xbvL}K*CSa zNIlP2@Ne4JP9XmdUjBb>GE^ za}*tW=dj)0wWvG%#Qw6VCmQ>fTQ90|QMN=x{j2>)^G$79V-g_s!toj+Oo5lSS1OEhO%W zF;|(st}&c9D416-#ZXoDC$-zp=Rl9aq{Mv6)`S2&yZ%f# zzf;39eo|3dv}9VaUQ)L_A^00_GTe3IzT$`vg2>sKVWdT9=={lTRvZJ{s{7MYgMuj9 zV0JFUCtsmm91#TG6`4XzhxmuZL@e{mANS%QjNk}tIJJzd@`DYQw7@+<8 z-@kREbU6ahl|J`dV^j*5mH7pnhO6D1i2JIi+1%3lvie~y10Vyt->6`w=kU+%tS<>j z!mAz_inr+_x$7vk?Ex+cw`xxv26lI2r@M1rQV&xziiB;Qbb8Rh$OmFuc)104#Nq$jl6W8Ey2@sn%@rTnUq*k!+K-oYzNIdMjeMuc97 zzr6)ITF7bY9fVr1j^a$*ao9f~%ct`v=8aM#zfJ!FTyEICPlqV;ZomKW&Mtp;Pi+AE z_+ckD=fPhWX5CPdi7GL-vQ*wtr5E9f*Q&Xs1gCA>uq$2e#tTyZ@60I9R|;1D8^YRv z`<@~Dt*E$kFt`<>f0f3jyk>RWhpayn2^=>T+!^`w4|5Pd5@6H>Jaih5LY==1YaSz5 z`fpB;cOU7}hjl!;v-iIoKV{%!pl2w_YBY^v$UYViz90Mb-OfaV+&2{?90+%%xXWe3 zSzGv|%gkPLWtqc^S$u04y!T-y;{59XbU(byXvC+6lvdck>nADtr{BR5JpNW%--i{@ zJJ??Z;wj+!cw`qaJ_N|nc-*Zq^H{Ive?+f(*RW>PgV(*U4@-~lhe0i1Q=J))kAqwzUSjUHej!*e|5=wk^^pJ^ULU+iTcrogAX~0MoLi^PcMlWt~5L!@o4dK#by6~ zkhFxtFd#?-c$6~MYYsb1B;-Vxr@#C;BKhks27vC|6=x|?AV)zDW24;6?XIQY?tqWQ zkw^)TI}!_zNVl9KPzx&=)xeCy&DY}fURJ7HqX zr9bUd)7eXW3*EbE8YF`2F1wOM2vr;(^flFo$mBR_YfM}aIX6BXXq!%y!Cjp|5X=$$5AwujFF}}?`x@Wb=5*sOnz&DMEt$b1&HVX031; zT~Ei?7`P3@6g>jXvD1eef4Qi2gQ6h(H>5iRIN_nAvJ{HzNtU2wdW3h7Xder@ZUm{W zw!diUq8q+!&O@HndyW2L1cQ$Is{Ca-2*w?TJL6EclBk_yq5S^??Bu4ux_>n@6$Q*ryNf?TGQKSTjFPi&fUmyK|!9Z(I&v8k~0kqeNRf_NB-|wdt zGk{K_sD>*=ZV&?BHO1qD|0Xy1yxwz0HTH@F9V zl=$(e{rf!M4(Wp;=suLoC=&os_E zQ`sw&$_Xm2d{0;Y5#L#etv$pb%f}Jbo+i+mwuY? zuXoDI&L@ZkQoZ3~%i_f~^WW<`d~^oPSlO*%THxzqKb{BQ-`zRG_V*-352{>%4S+c{ zl<3S*^t{?r0Q*>IdG*9Van$WlwEuKS$9O$EBQOg1 zc0MKcLB+Sn%q_177;SuAQc|))`-$$qE59zF?Rf@E9yMj14S)kRN;Xlxl8L}eBje8L z7}K^l3R^kelo6Tbj7J+7T044L1qf#HJ7~p^_~wISI=luY!p8T1ebna+=ztAvqqi*h zn}U5--?)y=E#LtCULuu$J_Q{td^A!u|FHD0K%gBpzg?4m{cs-8ZLK$16fxmO8epMW z<+>E}0eL?jV2?nFh5R`&(PbCjpN5`J@9#W%Ho$ zwqT}CX3j!k0sn=o0>wNGY*6EBGNoYp2R*W3cT610Ei|y|xMW|}+R?#=gg_M_U7ZEv zPe-jMI6Izm&}tpaeY4hM-JV#p<}}hq?c(ZIg9}2wPAY)#+EzcRS34t5s8*Orcfp^+ zAPN2LmA}1+RPP--mjIt5EiW%urOO&KanbT;!*mCdL zSPUB)|3Y{jF6g0BlBE#Wex@bDYm4Rj$rw#6&jXikxqVVpZ4m!a=B3J+A)SwrPw&_n ze?UQ*A+S$qhx25oWt4rGe6o`uZB1{lfI}xvsI#{goprD?zuYNDI77mQ1+sJ_tvpD9 zo-4dO2XflrytOU5RWfT0%!z83b+A0Y z3CH`7wd0n03n&2%#3(J2)vF7axEL#u)DZLGRUC#TJzuhbj{B1v?N z#-(`eDjtCjv9+Zhuy)C*v%Wa3G;KQDt~5om(|GaoYPW4hS)0Ms>};?`s#aaVC^y*& z+zmy++YJ=U9~3zZ6l-VSw$|-@OV8T@;ow<8D{13MYS*f7S zdRE8^x>6;|DMz3;fZCGmVwBCu;(Ke}e{_u_HGkzR1prKxnRg!5WeDu+3H;tG2(nM` zz2ppNIcL_H7PSRRvb9(v7xCz3?V`ILX*yG)_MR7Eu~xlbOzqam&@=pShtI0O0uNl# z$mm&7U;|%vNrW=;>SM~wb!KlazZlDvrJ}W$A|I#dr*j$4UbO&+okx$RO$dnhzyFO}|y*Oe(nER}BmAuJX1GQncepz1S0$s3#I92Wde0{97UdNSs^+EFu= zx`H_kfYW&K%x1G;&N6y0a9Ca*B+oxBn+|21LUwEndi5sGA|ES`SWJ{O1#MctBb%t7 zc14%#yqW!&zk+^sMmF3o1D^{ls)ichDr+6$1U%r7iqGSV_aE;f`930CRWiwCU}-+Y zCp^_C61}L1F|570Fx+JQesEu?^47)RGy9FdcyLv;mOfepB4v~V_`U+a+n*TkH3~dW zsLb}4Cfn305Re74J$G-fr14ivbcdp#2jxd$vg!^A)^U5O4;r81A33a_b~m=J`1bf5 zFoly{XGU07g|paEosmRPEZbHhQ>evypUo#r-9gml<}JMo4y%fv=8~LpygTc|flpzj z`JnM7kj`WsJ~%w+r1rM3+xGJR6_?*{On_t1<9#D5t+<6>9M?a(mN72WxmSkch9(VP zu#28YdIs?7=@{rm!NDrTN^gE@gUI^`*J}JG^>X=Q@P&K9nV!JYr{))bJ_K0TIraB2 zZbxABDFNYvV*@}4h^1!8jsVLmI_GP`scDS&Z!%3uF6%r2++~ZGA1+fZGmMb|}Th&JlRsG6L*B zg=G^G9Y4LjlB(?l+&2{n1}n3-ZMyi}4csw4Upg)OmHQVOqrtz$w3~f2erfG7C8s;D>pK`m=b3b%0;teH*kx$uslVOMR{x* zsmD6GyvW(w+0CVkBg>E1f=oB4@8xL-0rCsHJY-*A(|zHbAl+I(BbBah>v__<_g~T- zL=ZRE0UddME2?}f7wxE80t3+_%U1va8N#C{z(3*}E)#va;xsEGf5bC%&txIvL%6157%A(3$<8n6b% zjiH%ikf|xj@=!>a#0Xa5H&zS^7;BWX5>I@ z!$zCiYV=7~A@_beaJI{YT;PHB+8a^|zGUCT2roCui6tirK zd-1ODd?<`^L$G#(2XDl$O#ml3aDpxd94Gs8`4^k4{&LVrBL+z=ZWzXdYJ?H`GpekW zvA(Ko<%C)cMm~1@&{^o4`g4HKFG_n2T8`8z1I0-+^X*U~ zSNN)jjWu?kcfK9w2vU*%q1ES>wS^Hgz`h$?vvN|oLGG-!X6HjeK}(0NN~df@eL`9O zds5b!o)+NpVo`+WaEqq-ZQaJBgKuH&rkNPVkt?YGkG=N{Xe!&nhG(##qN1Xp)Ul$1 zq9TMI97jQ_7f)aT)C$&W>AlN$xU+5DvSaQ z=dv`XQO-qI6&$iOaL7`-zP8%5IyjvN|8gooO<;5{K!@BVj|WZirCr-cveCfD)xlNXIvW-WQkak*sEIp)SxNIcc?wGn4O;%|(1} z_J#R#Uo35JD*Hq))F(CK*<=fN6Y4d?n@7-G&*u&-y;sv6x6gf;^4Zv0)E}41y%8SK z5@M<(oU3e*ksRCUmh)k%*qB&%69@L>OQ|w|SkMIRw36dD<H4w-_BX+qs$aE+Xi7X$avY;o!*Gr`+9N)B6#{ZdHY{c+vi=tLyeB; z_^F3l`VqWiyI2yJ6ubWbp6)umAa1Y$+~-exeC|s*QczJaI!-MsZh1nw(9scH%DIzI}3+&+b!PQ-~cyF^75 z{~GVbhvZBRX3VAy9$pM#M8Qwkl%D_j7^c^!z;^cT`YR7V59c`0Z+J^whDWcY_(0Xo zouo@Br3{4wtJEG6y-4@-NqJbAn*vea5^|{^-XMAme_qcUo&AWDK6W5Bz^69cp5U4> zIH&7^8I|DeaofHkP+?NKMjW^ig zrlr6f%r|iE;M#d^7s?|zP~s#Q@)SXyD}YDFoFsu+BH7Bol>TH03!1Zr1b2Gok9M*U zfZbRM@&?D11gMLHq`vG2Y|g7~o_x-;ve&FtQJd*OnSL@}^%62~jQ_Kc6w#yKG6DM3Jn6($~@@3@Vm3KV#NKcgS#~ zJfSm*B@27k!RYZ z6>7jk1nQ$<+WL&blyo{D@HcV)8H4`CfY+vAzaD>I-dX_XD{KCN3N}0e9?_7_ddvsu zsxw}fd}8!&$4^j?QSJ)Ji5jb2FG<~ZY7DtA&aJ!;WDy3o*76H`Qo7QqzF&!qp$lg9 zF{5`GOFHQz707@wbbeC$>sFWjB?H3_-E)YwwrOY;_ml6FQSOeY+t`mE&L2Ue(Z=*L zDXnXVrm~uYRV%UV;b?y0W4gM!MNmo>)0--%M4EN28mOLNXHh1|aZ*^$464~(2$qGj zu|Qy)&shIVuz%%i0cS@a{ns_Hzv%tALOO{h8ZO<=J&%?U z-(EHI95BO)pVxQ`SJo@XOlRJFF^`Dl7uJulFE54O^Gj@&^L&4@F}$eY%DskkIs7(n zW+C!bP9`5z{XxoPHZ*@eytB!J58C6q5~!EJlbXHQ)1G?VT=~Bza}EKP%AeiH-P`C^ zpcMtpJOAP&$VhAf0zKx`D!OwD3EHXYz5G4;2gf-SU2m1vG?NJbCj%rR2bEX>vh4B^ zmYWoTgVU9t>jrHh2Z37U^$B|mgXsiQ3E(R8P@1QEA)B`!}AhvmMiFCaOGy;RHeU4=~kP_&v zt|e_E&*Y5GR@4QcX74CX-L496QOnDoz=l)*>}X*2Fw>qLGIum&k0z%F;h_GA5mv9i zYtcmZGX)z91Bx8h*`37^)SnAew}9CF=5k)=+Naaf(v-%IN{wJ1zrX1N5jm5Bl(E|M zuSWX4_`pwaE%P|A4@hej8LsvFX3>76X?|W2x}gV-AS0&W_(~R@)=ho@P&iSNvxo-f znWE`Ua@xZf50CyjLC@E-`sC&pCI0HvFX}xvYiw!+w4J1&fkd;34(Fpa$$MVAE(kUK zlYwRUgrTLSrRP+cl#K5@rfE7Qf-h#KK(6wr;J%PPJ_rmrc@W|`e!**E1uHQI1~who z1(tA-V!)GE{?T556n_NC;Relf+}_UDet?haPwjZX6h0Pk!o9)3=3Xf@JJQ_WP4+bM zC_VX+9Z19O?!i`K;6$j^d|L@6HGen`(>#B@-vE^2bv>FO8JWVFdVINSiR%#qgMIRI zYgr9(3Nk&M+`RCKej?k)7JUW>so3@+4f+Cxy%mJz zOgG$J0ukpYmpKgMp!2N>3n|~tu%uq!uJG@ST0EjY9pK2?%$(Gl%I z3wqS%0IYBu@#cla?U9RVAKVDZrlz?8230Cw_89aH9I`|11%y5a%&_&T78Hd90s=qu)}&onGy|NAo;2 z2kj{{Suosl-SHyMgP$Xa9A637^Y(PMC8xdHwZC{=-`w0!z3-C}<=${un28g?nUbX~ zSG$@eJx0Ty__MGOAO_!Ok!EQ{G5~9Xq{<*|K{`f+^&4k4 zQPnJ6o%Y~@DQz@cEmDd3688XRqo`)7Jg0P%{p`Kpt>Eb1jmiqij zN}yTDp3Vv)n^Qw?NylE$bNRTHze*qudkr8r^14L91kgml$SjT7Mx_}qa&Yd_g4y}^ zz9JPfaZFpl%p(iT1g0DM3Ys?lwj%$~oPSH~MPYETY|Xec2A`h=hxT`O-h1LTg#f?X zh6n7%N}&(F0{uDZ-pAVCdjmxf0Q|J4rhK1TX@_oeN<#vm1uHr%G1zjyRKKaT=4?iaP2 z8?JqZOUnD}6nREUY6<~2t!?-fyu+1MNW@y?IK`a5&|F(fh1jF9C-%&)$pRXgl9P^$ z2v?uUHzR$NX5-2Zd*^ z+L{su5*5OngtRJ3vFGQPSe77mor$@eYYGLHV)6HI@IG|FJ{0A0c*24o>z409bY~xc zeQZq;<<@NhW1lZu*vE!E^IoLPS5v|{Z~+4p1bkMXk~dDn_5OK9BSA;?3TH*|fyrql zE+^a-mH~w?&7AEMjN4*oXJ=kWi)`@T8ZL)w)Nk$S>7kv!?LevwYf)Z2oomGCNT69N zuIegf+ZJ=S_(0w(kznCxVTEmHYW;I*+YSy(i0!N8i>B`RI`}+YR^S;yswn{1@`rcW z*Oo%-{g7LOu{}=K8lM0i*-@4^eiC2g2ZLO8^ylLP$DKJb;{mb32ZAG#Jvlv6J z?dHQu6Z@cZxhdG=y?E3I_*St0!`T2>>-%>enu4PAi`A$-n5!Po!NewqA$|?xD6&rN z6MuOkE$*3;!!^TP$CfvAvMzRitnLTS$*jgGkA2*yVS#?|qJq%--OGASz49 z?EM|}W3cNGzn`rZz$E>bf899o{1?DSzOxEE)=^V?fscn_J{pjb z>bp)qdnEaFdQhfc9>@M&g@~ju+KN>GE+vH1UV@WiO=*E5eQ>ty$}TC7kMBoVCxlRH zv}8Cyt+Rd!+_X7DVr7hS;q}~zOKy~%$Pl1NGi=XIH{IDmM-eQ`?gvpGhj<-IRRIyy zYiZ=3IEV3rR&377|4Slz*r^wKV1nC-Y4E;9G|2a+Tykg_Efl2&+9sDmtog!e%N?6Vus}7Op6Fp zsHw|c#gdwtO{}~SqVXoMk3~jp#%T*W4#bji&osOY z)ds7zD&sH{Tbx|lm4W*Eg5S+;%=p8{K6FlsCgoN z7%8<|MoeiY;Q~ska8d<*rSWaE2x@vJf07~Q_jwBgTauzEWO{R)bB~hIFIKHOPZVWLFVEXu&C#Nt+!m<`}1hx z5?q{L885o1vVKDYQ7<}{!-X0GWv!XK;;>CGw22?T)#7xNfs5#*amMcbcv@3t=JCjO zJs-$J0{WbE;o9iuq()#d%n+s`)iHW%)@0wtR>l1sZ=%;G)Y(s~tFB1_ zR(`UEb4@PCCAc7ye|1*AP{EU(9PuwpzQw>-Q~^+dct*FVj3>~)@`sPbYE}cT#4;wE z7~m(~89qs%v>0iqzA9S3%20iZxT5k~uF6msNYh+>()OP=RdfQm!y4g!?OX&ZHA=8h`67ywk8Wr~m(TNEx#RY_>4nVLHUrE>7 z|IC2+EC>D=x;NCU?VD=yX@x&e%#3~IQB|9ZHM5p+EKf&mNmrt;8Tl3Yc9N4h1Xltn^()GywC3qMpJbVP1vOzu@T!ZA~30L z2m``dC|{t4{)-#>m(zAQ1c>cSj0|ScVrD-Bp95mg`tg8{H0}8ape;^{D48hkVdya~ zm{N#*QVNCAJUzq@4ZqE16?NjpZB#)PBIv+Yz<0~{8u0IHW`TSGqH{~ucelR$Co!H= zfEp2l#M_U4dO#TqC%YTA~utHhld(OiZc{M3A^wu3oDHt^DCu_gnW%>OSF;)D+r zn^^DvlIrF$bWmrn@4RcI3c|!?zBr;XRz^5}rb^aRPt79nZqs}Nkxseg(Oce=B`M)o zr*3QX0f3ooO?jbfv)(b z0>6cG^R_)n+*ttNnMbQYE*d%(;$?2|8rfZaM9An}Ub%Z7POQ3tqq}g5**F~0tMSn% z?+sKeRYQ7CKZ)+7O&g+*?!%?#dma`5ogObO7Fv?N^Z>cYqsf#~etNE1;K><8%QmiG zxECCVH_tBesGuvV8*cyuxS>+__xbH!X(-Q2#(DIbOzR0!C+X=?UF}+X6Bjd9ABXq~ zq}2AwZ3OEXewwP<3Y^r8RfY?;~ikq zS)jT7o0ie4!=B%P%+i1H#!y^NqxVwA%u{8r+E$ko{~3G8(Ga~T`Z4wC zGW$@4<~qO&dTdK-P?~?rLA(1v)_D zksWv5+M}JIy(s>#Ss)9Ktq%gYm9crH>-ASD1M0XqMJJ8~@xh>2#2f*M!G&HU8-$#R z*eSQuj0_uEr>B2)7t#@Q{N7(2$Fhf4^?Us(&>6PUis{xl|@m1FXGjpYue?F5k!oY z3MvFBFpu4x3-L^L6b#@34V|=AwMB{h)Wvk;+!d#*$kB61RfdHZVUED?kT#l$$t@Y$ zHx~nDN_?$&i59L=eMM;s$RUOzktoIx}bll+5QHI5((*>8NnHKg>FChkK zgf~f!NlLRcF#Tcw+p@z=DI|+&iRuBY5EEIV+bMUh4or~P+|~zrKK+`jv5}Y#mX4oI zqx!^6l?qw;Zw=Tai=C1EHB}2$X;;&1E~Im_9t^Z#{mIX`GgF;avO@;%K)Qc9*Vg^r zWLd*6c^WHDi#*-MIK{8FLp(p_>j-!JLv;H$#8&=n=AAfrro#{+R!H8GaLUzgCY(U& zZ8C?ur{RCFsE^q)GeppFO?{cQ9W;0SCuB?8)FQ)rZuD}7=P?+a1$q?G?`*0AWLr~> zM6|7o#nEc&wg52{Lh)(>Y5zre>x!B#Rhz3SfIxm81*=Z$<2X5x~^ z8CCaBP93}GUQUx;1qW?f%V=8F3Qe?_+&x(0cwksIpF zYW5b?gDuwQZ=JNbnPGscYy1jR3}T=}^sCx2g~ruB(0t*9 zuqrvz=~QO!?6Nl)G8?0UQ=r76z0{wKr9uGzv9ma$WIT+WwPwx(X)11tg&YcNztNRd`DWzc2{?GvR!2K;? z>&D={su|1b4o_q~Kk{qfKz#L`fMv$Ng&bA}2M|nZnea1eMFa@%Mz02<5jrP{Ds zBH=>TyIc@pIn^YGJIH@GucamL@ut!nt;nTKvhOS2lM>E4%(ac(u(k+^z7y~=BgG~5 zJ;@?#7Qlk68*XaM%@RDtZLH$sVTkCy#FB(}3=19Of{U#Pr>iON9s|4#7%I^s?Y(i+ z0%}U@SNlziCQVZk*mw8ctv$yrZl3GKyL{Z+Hs$+l@1Kq-;V{Om;aq-E(w~C6W%xyE z+q!a{z%&)MJQFPDs`T$fS$O!wU8%DkTeOb7F&4hw)2wK&^kzE0-5Sh%u~b)yD{eSB zGLOAMx|>n^xnP7fNHY}$s_+qPHLzuVejM0t(f4~VHZXn%xwB;{;t$mYYJSbA+_jwl0H_`;P03(4xST&-Po(gHK70nBt^$gy~l#K zkfv)R$ao0v-kbpR?HFoWJHp&{wy%Z3iO$IW@)#mzJ7{v&Y{*cgEkn=+}SBzA&D7( zJZS{tQfi>;EDcqx2$FEk68s1}G zhDg%8U2+8ehBYGkMM;g%7e9aIP7ghD4>r(;}NYQo|z< zH#v3e1VameYRLM6Z*5#~F5CXaJ=V7E9Tx8s<;o0xCHKGm{!%ZS${N5hgZPbVG zj4T|ucPX3`HBz40{TU!b9b*AXY%t}`L9c~@QCkpBFH_!ZCBfc_-XZ&;8s%$dIf2os zo9S>kPyr$r_3{x$g?@!|K)U#O(-1z`LlVRXwP#sYNqM`v8^q&GSy@VKFS4ABnEmly ztdc}6VErTfH}7c(8|-J};0Umf+3&&VrG^`!mN`MJEhu1wJDob-#l09WDR=`Q=Rxda zO?8$>;x#p^!h_#2THb->>1AZJp;H0;ap+6>gK^!$>;9OI zZO&PpF1pbZ=Pz0{2S<~%@#x8~m?OtbL<}ZIqXAAf3=BE}@alGTyPc8OY5>SkkD)O! zkXacTanw!t;_)Y)b@T*DgzH{qTlNxX0?VrdOeqiJ>$-)Vzh?@S78)X5hnjJ_nYD%0C>i%L zD|DxD`F4BxkWvV=7gxe~pJuy##`(X&$OKSGESfP%tcu6yr=-*^bO;BYfxVoUs;g{x zg6Ds__J2hkK|6qtf5Nh?gzMvn!7+;SI|&1I{VqjnS_;eQJ#O_b- ze^;STZD?g%CNJlVtyR9iW@tTKs%Tz>)p?S_k=K=z5vI$L4uB-a|6$yRrVIch&b*!Z ztV}8I4jva^gJh6Y=izbOxGn&Lgn-&Ye-K)2=g@ej_URaygWo4rEXX+ZR+C_5&TzQ%D5#` z-X%s|)uQg%deHy>0su=@R8`HI6Ld1JRn*WwY9ZHS8O;*rb_7smKZ7L~f|hjJgIJfY zg9)c2yIjT9)r-BxQjH4^d9y+TNOwSj)g+#}+xZnzW^QNn7;AJ0V1>FZ!QUq8$+yPEE3?XpMBR=F`%dnAN*oqq5#SmjWh z`&9Yto|G zjRM2A@K$HSBzW?C&+GY8Md|7CqzBP3bb`M@MgEKmgDCmZm+{N^o^wEVlILL%q5fkEqOM>WvW z+qqDveWxTdg)1`tZDoW$qlmKx{SZ{%5}NuqYxhF=q~IW3&++lClS>e-jg9LYym~;Y zy&`~LIK*A0mXZw3>d@iW!s6zP)ZWb+kl-)aGY{fxe4@OVAW zi-*Yc0_r=r?mdZX4dRN%`@l*p#_^E%(eO303uw4zB8}s7j8fH!-WyHEoix2p=_28z zkng7Mz@Qwg1H);`;g!H?kaxZbJjgY!r^bIe661yk@W~R8zH1k=bPK2&3w0+d7svst zxECO^6CmuJ&$g4GBRTF3{#i&*JstjN*Iwkj%^1Si)trdRNVm|c+(6guAdikdOw^dz z0>^?S1oLGat&WiT`g)~FgN9^!Td$TF9cnX+lf=!>N+0j=Bu?kpv{fFg(olV}4r7Wd z;)6t>0ly4dk3e!qDhT0gy&W9JHL%{7>|$ox8>%4hiD;{C@b_20PiNjc8M-Upng0xc zNPRw_^E?BrQjE#^^8NhR|Hwanf;&(MZmr|o0rDHb=Y0;M{}>>@3}oj-Zbvl^Dw+=snVQ*4bp^EV@}dV&!+1u1Hg%42set9+3~uhTsb z`#{$#eAarcSwn9CwZW4s*l%PY^heIFwOD4SdPbFGVHNPb_-%Lg*Q-Js$Yb~v3mU+>MikS^{C+poM>Xvqyk*&X^I!5 zE~5$sfbP`HK{@vknSSaq?6{24t>=;}=?Px1HbOtjP&2)_?Tk5;I#(=>Q zBtd=CO${DH@^CHbDm>*PrT*p-8s{O3-euYU^<~H?Zh~pBX9}tg!S0AN=x8l%sM6ph z0R&8g)aApYBUoWCCHqbLP_Mt$BDcZ1LD6J>&v$ov!le z$4td1k#_}^)t>yu?1jlKjUV4hNpmepO-X`-Q#BfWIMJL)@6hj`DihQm4xMrS_@~yZ z8M9b`(1x-BETjIVVWWQ?H$_3_j>bMrESF=mdu(2ww@Xu2h_JP6VASzi&G*WDix zVRAl~#Uw&kJ-?2JgohPV6^^D;IIBSIm_lPth5+SS-n3KOjL_jsiFDG4aMxhAQ9^(5 zsRUCw&@oO|b-#HVJT{t#u&^ly1uW3YSrd6ne31jqa4DdBPgWVvgP-A4pvEUaf9zz0 zhKR1l^htAmM!XYV6s1Cwu`*~y*)*t5VJk<-{#b~H)y|7N4G_iKyeR>wiWf-E!8Ckd zr5hNjXI`5e8>w!i7Xxk+z0b;_+oTomH+8K^@*-Sc#tFsmz}96n?Cq=@#J@WXx^;~7 zsH1H~C1|K-m9{*n14F=YnBhTr-)1yLFis+`$HT~w3R_)MW|Tgx9-ZPa=lA4$qYT<_ zSWd5CNqKxF^>+??72AsBg2`@pM$4c>tzBN#J_K=tYd1SDb8v~JWO2jG{wfjnl`H3n z^T@$DL0tOv_xDx`^+yxwxGz`zQstKA!yq{U4tuBh*rio0V#(JKiWFL9pI)lrB|ReW zqX?kwji@$U6Zg}6yamjZaCvhWHv#L%Z~(zX7hD*<&BLURfYeCokL#n_!+jtWG(DU# zmNrvEol4ThRzAAPUeji>1&qQyIW`DX>LdW%T)^#yYR5+^B_lzrY9P^=(y7GUE|tEy z=?rI-sf}X1P#S+LT|QaZ5MmX7fS&I_T8?NzAVHo#BK{_$vxk$G>5O!1jdW=8uZjp` zliNzx4|`Gt;KL3?Tc5*u2u#G#quk?r=>u5ou6k9n>h?>?*6xx%P&tcggx>6eQCC-| zR3W?9OKC9896&>Kc#HZ-xlsRI%h+>zdW5?BYsC8fA@b|YHwHeCd9CCqCh};epvKY_ zhtuJDR-7v4`$;W}9_HWjCkhZ|_;U?`?8TaZA&ey-)XiAJ1K7Xv6e#1D_mUlQ?6%PH zg9$cf{pJ26lIV`?J!`T3k4HSA^0_w7RxtCX11aXt&k4OvPv6fpfQK-2ACLD3h!?jC z8I%};=xAdQ77E};ZdIL7*0oZ6ilddqt5Qf;j$;tRDWOHAx(tMJc9wWf4%gOr)0i^a z*gc%oMS3BKZaM%RY<0qD`zF>vVnjK!o?d#Q<&9ySRxh&s>@=U>z_GP0o-i^fpuvly zZPk)jH2+y?&^i6&aB}R4w4l3^u9pqwQc9t`5_UH{lgC7_0Twa1lfrYjPV%S4l;d#U z`mFqQXfetNhx^vsFN~G)h}hzUoMdA!qvf3Rl4PxLrOY(&8Ms#>U3S;X8$n z0TS8O0Z&zfJ)&FQ=cm3kQi7Ug-7@MneIYKc)x9#KsvL_QCBg7sV5T!g#CFtb3DJ>r zLFqtIf{W5-P)r7bBtQHVzx21HN1N!#8Mf5J0N~qZ&hgi;){v^s9Eb^=JxT40Y4E=K z%KFm22H-5&j;8>uV3icq_3VH*>uu+mV9M)6aiL_r^vPsezew=`*l)g{BLAcU=m)=| zx7$ElPk3{Wus)FctrKAM+w%edgNh#WY&ZH@o#)eP*qYxAAK(5>IevNqTXT0q3GNt4 z*#0X6BK8AEUByAhNEo%QKb&037x)7_g#5%^!XR zvKm~=v)AZW@B8h3^PwW^cKpiO9^!d^JOlU|W+B~XH6Ui6*dfm^<>&?)&}YN26aidN zqPX*QgIJ`o`z6nbvEho;ydGf_6B7rUk zWIPPG`c*jk9eO8ma*vF*1%TzPk$CN-gqTlGuG zB_Y89-fl+>VmHa?S6&F_v}I;mTY#p6#G*cAKLCBFS~xp{vNk-JZMlZB3m0$luTJ~n zB%lUD)N8=ubn{j4vN40pqp?MJSrXqi>y)%$lqAR12bPVF$$u#i*HpQ!N0(J%W z7mkbL7z0)PD?^akDQ6!0K$&aQ4~1^Jhi!E_^MFZ)v`|4ZSnM${%un9L83bkK*b%P= z5P)f8siC*r4;?%YJEhZ>G46WCp4AOZQ`wtc4po)XNY3L-5vd&$t34^2hltQg)2BC? zsfgJIDtjF0TM-UZo0L`v>FM<#LoZ9w0;kV1D}%&H`x1-Q(~7C@IM%+LF6TCP${31M zWGfb}hz=Ig^|(q5kUXQrai_e`s^4uCS9ft0OEBs3Ubjwcu>u&66cMqHQKJtbG$3Cm zW=*E)p~tfMU#pNo4KXwGmvgKywZAJP0N*vyY>UqjjDeV(u_XTt|D(AbcC7jhGIYPG z)lwHwv%{OjSn%`Uwn}${!vh+PA708e?}Y%AQ`>XCt3j}RYzIiZY@CieWL^VY)FVAU z(2hq?I0CAAWVaJ5;Z61xxOQ~}0?4GAa4DDaPzLqj9u{E`|DeEW=;=O)un8Xo`iS;P zGM}+YR-oIWqqDO%JY*xCoZba4E;Uk7xmGh!%|15L0FS6^)KyiCl~Qx)R=|fyxO};K z(_x3)h0BHZCbyiOD`QbS;4MZ(LY+rPrI(p>cW2xhX)1AEuIFYmV*U&4 z^)3mhR4e|PE9U1G^7(6TDby~dVe`Pfsd940H2|J74r4J}2QX)l^85D`8~+K-upwMA z=GQ0N@#HcNO3j7#po%YFRc-RbFRymrezBwG+UrLzUYnf@bG&}i|JBQ6*6yagCzHPT zo9%gA<3Ih|vD&92j+^%+n1|_9oLBZYPCIq!h2ztW@#kejw;5~n5Ss{2^p%*#WSOjt!sm2^2dphD(pKX#OcN-HWJ&hY`h;DJCT=TI?3;?Ifb^aVxehN1^kEaJ=g?s3g>hMWmpgK<87uEOouoUsU+mTp8T-|>%q%2!%w~pKibbMC zA9+WHcWi0 zPyg*n{AC5HMj)Ah$CNS`EvgxaF_5_?lR3=znO#b1d6AacU0RSe*l#J0NS%+~4cV>z{jx?uT9q zLhsXZnrO-gEpPMP${B!5v3&EU(IN5(qQ!=S7DiCR)j<}evsKC?oGAi1l*+b z&rf|iD(Eb$YxxRQK2`6^x#%|3Zs`;uC_lsBLv5WZ!A{Z29&gvmv^XCzjHd)m1-o*t z(?8;wcPHeeZ|q|UVyBR+`H*dkd)>= zdF*t%$xIP&a=ZZp=EmeP+$#RRiuoJ317%J!6Z`E5Xqv&fj?SF5+{o6ZcrIs373>T{yTrZf}|y-&27e7KH1RhIYx%*M`x?szhMmw<8X z0=2cZ>UhXsNWRZGomoF&29j2|wQ@yMzc+Lar9N9;4`dp>s##FS&l1NzMQ5}@vgn++ zAst;^znNjw`rIeC85SGjP?s-%WKZ9rRt8I|ZveHbjERZXRuFd=U9qxC^2*trE`?=L zrX+|QyFR@peyi6SYuactq13ACQ0cPS&lfMFP=Wyn^jc@rc&5C%`lhu~D&qFCJu49Q zvi8`m$B@kHCVWeyV2nzj_pOaTPzHZ#1^9oSp8~|aG`fbls80joME7Oqyt}-~LqXu( zXuQ3DIR|73wyrHpSoqN^aBt7{L8`^iUU5Yh*x9NV(Gokpxt?c_fuGw;edxu5d3wGI z{MgHpWj;`&66PCHFdR5WS&Zh!|A>$Nv3|hOy})bL|5Idq@xH_Z;ozst+9%dV{cRU~ zB*79entQKq@_{z2Q&{L^Hv>@y(#2%*HjfVcp=4>^0_*)+-owq1Jp!0K9QoQm&`Q9O za9RuOOJ#c@yk5;L*e`Fv1#>5S@OXEBuL>r|MYxN5Rq++6Z@coz0J$WoT6^x?xP^yj ze*?^1a(-p<3RcAJ*9$!%n^nP@GR7SFe|jcffRvM#Gf)`M+B!KHyYV@ei*&_UBSe{!=;yj3m0OZr+S0O zUi176_YLcQTL*V!?M<)bZm9zBzd|vbM{W-E@R={=;Mx495^;2YL?B{7QVZ%zEZO2s z#(CZfQIK7f#A(2_nTvHiAaO3wzvJJ1klK(s-jK^B>Q?YYztXHdJoE_?-o1Sa$5%X( z?x|0olw#x_H(KL(Q_ge5n*NDjLv%7VWld&*-Qrf^UJ+-Ss@qSu3VN21tCEj%x7rPq zS)rH#Z-XRd<8BaHj>ZML#50>G-`MpPj9tb{ z?Hl`9D(6=|7==lDah*GVT@&v4U-3GMCnNEEJ)ikHwlMV0D5M?5LyhAA>4)5FMP3B|&I131nEq^WIMsi7fsZ{9hVFZ^ z+#=&2U}AR2(qsdkpSA|a8O7Xx>z9SaJL-ySN7Uz;bODYWf6Hya-5iTD9jYPa@|NoZXUnyy@Ff_VEG?AxgWUxxL%} zN^Vgwa*^0u?|fr%zd1nkle>}B;J@{$4;y3{iAW52Q7MkYb2joq;(2z)qZD}9sR;q% zv7_6$xYDx^fkf^J?}VDzP0&hzx^EU4c#=lx{zyML2o+b zHkbF3*S@*}_V%Q5J8lEP&{b@9PtQ+T83^F8kkV|X*`iqN1zH+aZJ%+0XHkFy<<%Fi zIy%1L!(0>L>d(Su_Of+;IdeJP^2Iz>_+PZ$iq*iIKrW5b;i{c7aI^(qTJk2HqGWH5 zf1yl$strCozfMAIQEo5z_|Ds0H8XpefI;)llKe53eHNxeX6TO#EgmUhKs&QW!rDc3 zwQw|kU7C=PP*&$3y2RE>Xz{3Ns`(HIgacT%brIszp&!d859h!45MJNWlmT~>GZ3NO zkt>9RMoe|?sk++x*|ZI1nb;BUcRp`vbjACREK?ieMQQen$E+2 zZ*IQO$C{sMPqW*FW!pMXES{k*e;m5x+}{+B?#{8vv+rJ&mE}}8bcs^oD=-||5mV!$ zV`s7P+^)|S8(Y=I?DXvFFLBa;7e&z2B(zaCx@2RsZSKyK5<13LA$nJ_gQF8A-4Bba zxZNmq&Dyd^lINa2owc=n)Cr?OgxVhgImHP&lgE{I^?4{~fOuBVnvULWos~VaE&b13 z-HDf?-PMiji@GpJth2~~h zWtZ{FET=3D^l=rGg+;J*!+319A<^4{T;V%ldNyZry@e{h>5s|$NR2E6IkMO#Inxw% zBJOd_skks(c1l;0mR;PL$z`!O@VZ6;@H?H;f<|fa+UaL{M&Hkj=D5e{*#(boZ1Jtk}Phey}bkr?WGq-2*-VFb`ePzb-(O$um^ zj-(ymK*wj~Zx*(m3gHK#Vht4|v!}kJ>$&ZDy989_xx4%)TP*bUZjZci5qy4nf#O%> zRHc)%Wx^O?fBfY>Tl()k`ALcb#rI7fX{59^cBP0_FUMVI^(aGSNo|ATIpC>g^JGy3;?z?)`j@&#H7;T+(Pw2&S|9Y6Rx8G#9 zTW1}vi4(0UOi-|={(<;(D$R=jnwa(Ww(O&nxnc*CD#GF04wP&1aRP>CIO{%!MX|O% zilyCYLhgUc`BeyqVD2xBQ~a1tfLS|-XJr&CiiBEHM?u7nPe|3aGd&HRXb5IzTW2M1 z5Odp^qkN#dR7~-WV)_mM|CV(M!$!@yH|KAeF}@Ie&{?%pFFJPD!Qla~9&tY#Lm%jw zWmqm(Jz;=)BKrtAoU;eOP-Ij-_EyMoqc1n@Z)T(c%Gdf8d2P|^t2Su5Llt|P!#NZz zy7Yh}puIs;dslm)Lss(+YD|~I1-s*BWR@0fk~H+#tm?z#2#KIvT~Ths&g_myo?8Zj z#00jo1xzn7s|Bvqwf06Sl6{^f=dgo0xl%mr}Jd#|m%WR=xXMR@laKxeHIHFeh{5#pYmGD$j@1Hf0K z1sPcfa|$k)9d5REI$WRXYSlWd)0Um;9Yn!A>)1#SY24nybth(jn*#TM60T49A2_)F zgWj}i@k;DOhiB{WDoB$!niKXMC$ng-HYSf9!e5_1z=)H$|$QuN4^n}ah zVhq9-dE(u>C_-|7IaTM8d}5YKVO~i%>sW^G+gn-7vC5;Yd0TuN0&$cvkbRX{PEH{YyYo-RG1a2EqPKq?8@^C z!UCgfJFzFXiRztPGaL*=bVql+#q#0=b;lhm*;1Pr5%Q}iN zFWm}Dh@=m``u9eXMr;eg5pga`D5f=eb%^!|cpNNfb9YJtx-T&y6rcZf#zIf}<+G2; zgpQ>mt~~;$tg{sV?9T5^VyA<=yT(p7Ew@$I3n$RAsItVBPHDNLOySbDa-dEH=}C-5Ci~S@X`5@31yD^2T`1Z>vpON}-n_ z8XMM1X~anAsytpk+{}L^nI#|E6{9wt88OjOA%ZGeuO}l(M^0z@eW>#nDx@-7rycVz zQTR^^N@;AA^qOrnVS2gF*!a}nbaO&0>0NaHfO$ymbz6D_f z$$rdcguRzwKh^b@agW&jcI@nu9na@F&^)2Zio*uIr9Mmgdf(sO%8vEE8U;o!MeUrT zo27qUaV|G_YC@ND*{wxJF4r`8oJMBVLlPy7obiG zDP&M_W(G-<@7srVcbd$6CQoDskk{xU*}h$Q^g2t8P4?Y}H6|9je(LyrThOyc^EkRcVt^(RkehwOAYyTi zXJ3F=$NyQ>_hEpw+|6-1Wr{)eK04_TqXg3Yt!PeGmwASTH;aT@0g;%{aMw^o1lm^@ z%Sc)fh9AA|KPd5B3T)RqJB1tY?LG(M!9Pyxe2>WmBZD~7J;G~GpB|8`EhNqn?~^%` zGf^C ze!A*UFtTV)58^(a=?W!xnVUBhxlDM_qp@S;jf%{8ISq-l29%t!J#WwC_e|%Nt^Za2 zFg{t9QUVcj_=G7X@A+c#%5*O~%JhddOyj8rBt5$Cs1$?Um8z(y_@PRJ`uJ^5PFP{r zY2Fk5UnF4`M)8D%J9Ay8ogmp3@q_zR*7NbN6<9-}Wk;1=5t`gq3aK1Ts=jQQV40G{~-_je-=Te)%YQ_y3M+Lizh=irqi zpUM@UwRuG2`AUZ8qG=Wio36B=+g`c)sC0o1`UuI@Yq zG^E_h^IY&ecioz#rTdND%=6tSVHn9a)gDUQhfW-;QN3-%xeweAUY5=pP4{iUaz@k< z^8?bz^?G`f;|0NsqnH2VAbub0f1eCI1v1fcKe%9wwA2)0kXKd(OLWfUgDNP^567x@ zy&oA#!ldQ3ebDt9mG47vB8aQn(oBdpIa6IuSWynE0iQAazhC!=f^|eiitgeXcf)|Z z9VhU!@0ttQicqC&FoBZ_~oqfE(;UH>xqPZ7bbKm~?eD73WS)Y-q*Pa+< zuU$19w7ubOQ#qfkO7;sXed_9EkNtFk;^k>bV1-Ad+crp@Oo&mn(jy@9**-73JU}mDdMLs0&M~ zIPMVFxOJmSlqTJL7Mkd+?Q3m1pP%8jU3Oph_~okA-;wBFWNAg-t0?^f7Yyy%{xOpWe&uhOfCksE5V+Qr zyNn+%{%jO@+UoC-oUu7t;)xY1xj}7hjwVxj$a9}0k0}oq&?4!Un zeO$%zW5#J(fv4loSwC2O=_edmJl3?8o2L5fTeI-onB=E(|9$UVg8x6EUAp4`2`%5! z|0lG+^8Np&X+iQ$fatmZ;4@HyqV1VXNxN4ehLDe7&Y%pR5sHx+>UlX=J2St?HN>fk zC9Ku8Kxa9+D%7EHf&fa@UbOd2jEeIiaa9l5&YVKp(L$}b4_?D1?IChY!l^8aJ+J)@e;y0BqK2OElx3P=+i3n)zm z5|C;y2#7T4B1#Pe2rVEmsK}rc8z6+H2uLS}(2IhA2%(6yBm|INLXZ}EzH=jS7{+Cq$jOpn% zs=LldV`;lE!Xohuu2cc-V%!JlAo6(3o5((5tG-IpsMe-^mm-$3OAiCP=?sb2AyC$O$Nl-rr1L$N)ag-`+EmsEHBvt6xwEB_~88 z^3|-#{(Z*n)Xr4j<_Owm;<+gmn63U9yS7x5i>wg7g z#mtcSel%kah*73)AKCx>GsHB~Q>{7}C1v9#ZdS)hwIr93yRE`Hk9`}HKs2U%uj4Zr z``<~l#_k83(`pP^larI70j#dB-tV0$(VEt#pU=s`!BO&&pb!22lA0PQx-51hKSZJ0 z)zlu#u}#^y=++?;E%l`|vMrC@%)IY4S}PJzPev+Ms53U@(#@aDwlo%!s#6KAtr=J& z>Km^S02|aXh0yx93eU zkvtb6;%TdZ+{-@PH}FS$SRm*}iJ`)B=G zWtxG;fa@>-;SCzf$5r)Vw&jyH$hMqTu^sfuPoFe%T(MlWETV$7EQX1ts1r6_X0s_K zvvN;rG4?f+^Y*B{0HEE~w^i9nDt(EI>a`waNuYL_0gU$g6^w@L2tZ~ZtM=YDgLuq$ ztpP~{;mRDK>TYJ!B$a9}aoy7S7A0j87%DdMa5=#u(`V~838)UvYdz*p`X>lf;cw1< zHA(g@0LlkB_o4tr^nBBttpGgdYO{FPtDaMoBL7(0ldRgUMC9#HvsKboKuiXjK+)zl zv}7K*d-h>#0z^lJl#%LH`xN)=hRZ&@7-d2h;mTA-5xC%(-wtz3(;Q0JGFozE))2R2 z90M@~fLot`fz%_}Y_f7kQV#u<>iUD3g|=c^H(3Tj92pEfRsZZDyx8&v>My!sgx_ zw$#Gw?zj;|kQ^G1w!}4QRz+hc|$Le1~q?yBg1Uw1W)yjcSfjzkKxf?Qo>1PaLMvQ^0I&w9~Ga9JXPuki8@_I5^|-oo#yQ(u^^~xx%8NJz&Mz zQ=Qze8Eb_y*_)E~im*E&oap~N&jpi zFGTEAczm2{&+<5_Sd+=PbYI<;Ps9|54r3cORQXh~jbXZF5ZE15b2&eG`EJ9WF|?NO z$hhG!Xy@EbqJsj0Vdq+RqVc(znVK^lFKRJ2qc^pYs+NfFW@}e*3upzn@&zKD=VWxJ zxK$vlx0+Ynnflbb?t!{WB0>E^yH|8UEs#%f^#BBKl#O~-nk6*y>C_yVFgZ@gEU?1Z z?1xsEx2O|V5~^D{@NV7b9ipc?+iHhJ4;Wu_lE~%P?1`?7AR1hVYE3>RowN|HZBs7a zpn9OTVUMMIR2D}w#4P$fYM2!^dL*Yta(gO|X3J^9%YbE3C8{xfEQrW!L;K`LChKB0 zk;?S~(k;RMy0cx%Mv_=^&m{ok(F7Ray~#|t(K`oX^2`+$Dz@3)Mzn8j-3&;yljB-j z=lSJa1%A26pm&&~Q2P)z2V5Ku&!Yeh)Sb^hnB8u9x$}+po%|cwSumGK;d~D5?lTlm z-;Cf}M^EFCA#t}hY};d{ky7QEOvnm+Fnf%~tAkOmY&0{V1U7+MpZnF#yBFYPIb6YV zGsye)5^19&P2)B8UA?xkuZ?r#MfDwNQ~ntDxu=DawBkdu6$HnbooWR(&7>NF(WY9@ zo-o7lsV*NPZ)zU+=aNn2rBWv7wpKXBbdzRnOzGyS>_XyjZL&Y!gCcSYONWis*hj8vREW!XDFuX6aE6uWN z${Vy0={{6WaDJ4N4!-m`9F~^*^>^sL9DAH$BDuMo;2@umHzN-p)EpTrV8ri+S4r6- z2}}En6Gg_B>~F154U|s!vyqw1v`(R27A%X=ZiA+k$LYmWqnXtP20!zA8HO+czsYg*MO2 zZvC;#-`A=ev){yDw?f(N*AkBJUv<%qf%E`^``61ZMN@x!*T4Osv<-Y*UO<;w!FoHu zTNLjl!I%f5Z{ORyabETZNrYDqz;)Nq?E|y!aR8KIY!G@}V0BY}2k&Md*qHx=O@+!9 zrJep(&iEZbID@*9R@SUuG9}0qLH!3#v)n81JOCdz$0ZC4F2gd?;0@(YiR)G~4TnKo zq4A@@jFmNgzFp$~`GX^rzjW~i%W{8}c)??()AX2}%C|27lWzFI(f?`EpC zcY>f(=YrPPh?+Zoa~K;2<4)MV@Z(N{H>4f=?WSz4=_3&SZ35z2F*;>_rWJuczI%YE zIev2T-CR>@Mpjl76u^86B=Ca2ndfKaVt)%kwzDn6t-Qw_g#gNan1r90&q0|VAgfLl z4k{+7Mb|jn3nP5olU+&)ad8MEEx}K{7Vc+3vVp8e_Q6K8+4iRdpk?llJO33Ej>L04 zwjZ|*05RveF2>t%09%cPw`5tNj%1(69z&xp=f2GvnnL3~czfYxu10Um3nubv+GbE4 ztWgI5USW{#egfdILk!QXE0_g~t;K0XUP?wg$Jj{2Y(Z=Kb=nYoa6H}~M-Sw`rh;FB z1ed~C$)EZNzjUrAS4&YLFuXV1St(~POv0AU8~!G~obXHCJ@UI8nf=$IG0jfo2-T=o zS;|xMsaurc@f0d@@=2w{W8Wv{2lN#O#xo}iIWr^V)bg8-KfSo9jftg&G$in=P%+j-I;Gm7dNiUP88$W zA0L^Z+JWHnEGMmX3{J7AZ4DX?t)7%3lwh?{?hY6%iO)dpFFZUyxpR<=|FEIY+{~;5 z=&rtAD9Uyg7ZDM;8;8jT7ZT8K)xXtt6fr*LdUW`toUsb61&HSw3 zUFNf8+d-lY6p#*(w)BJe+$&UZ{AEmR`rWgQy~79qP3@My&JU7*05qlW>zsaLPHVId zm-SNc`4%D>=8wr0Q8(v?$BsEmQX=e8qB8|D#&fk8Ew=e&Lg1L+@l!Tud#DywDts()JY$CkA3<00#7_*R71k($m(OzT0V^I&)*PYB2-2djsQ_6p-aIr11)Z&j&{RvjU>Q zrKna+dZ&cDQzGHP1shdrj#@IT>(h;7Eqv?a-EFifYocCrZ}1KBrKp=}V`{iG0J9yf zmBMprWaDh`t(H4bH91BNo98R!lE3Nvwm{Jp+amsa;J`n|F&%Vp#QPZpm-nsb90L03 z_*?Huq4v9?A`XaJ6ra!?0=W2zHTzsZ!1IAfLL>no-YVB?DCWfh#-blphWDrwQ^#4r7gUycxcFVdS~@p;dmeqU2rfZ}UBZ4N@vG-U6Z1%SBz-qw$=AfVkjX*c{Y5ExL2CZY&Q+Ia8h&)1(t8w-)+53?@O z1xXVx7M5cq%2lBt_)ed`$EMLx8eh6!Mo|_=njxlEE~`(lYTPrck7B$RY5xfgX?Q$& z@}$)rfk2SG9y*#XZ3n*m3hY3VA)HF=?KR8s^iW7iOEZJ`Q<2s_jmn~I&yNd5xsDPd zZ7EahjtI_R9$ z_K6sAek4@x%R7=Y-za%Fcyw4Ns#OZ9Xe0@id26CYLLD~t+++6>+svuWJw|n%fIu~s zrLi11ca2<~cl5()n+k#k;5kig=$6)B&^R0{)RvNR%TC?qTNc<2vO)T6VN3)uLd^;l zH%7N??2QtPxG4>uLeXpFoUA@|~!`{}!sS(jhJW(VV zXKiYQ6IM?Y=2eIwv$`QFP$w=7Ie~p51c2mm@wF@f0-nsIG+v#PqAu8@4uOp<)4DLJ z5Mu zr@2kbwVB{^lSwa%FJtQcWGOKh@Mt&}91b9JK#py}>)yNWW%G)#Sa8pfBt^}*ypZC^A^@I^Jj|M=A(uG>f`OMvpWs(XmoC`RB>aUB?02RUx1L zU7);lkzTqma4>b$>ll8hYK=48#jE~~lZ*J|{ncmfBT;L?#u{WEByF|gUb^D!y*gm( z?}#({-*_Afilou)Vyl8S? zZEi)8z11_28QK8stn>&x_L2V#^R)6Wv5Ws2^ZMO3UxuV@h)&;%mF>-VIfD#8TZhF!{Xi zxD)fUAky3!*b6^&OmxZ8U?9T=E z=K}k4f&IC_{#;-;{yf3{KYfA)!Gg87W>A%TRmh4deyJHnMZan5(9C>gu!a3`J+0(W zZ8fhp2YO)-SB9 z0w+(rXoa$|kxwD(Rsvb17tpOakuXv0r?sdK0B1fRW-(p>!eYyZ)^&k9=Zla4%$Z~M zy*%))oRP*Pdz5(OSSZ)hO|{In%Pe>uBOs9w0K&S*WO4)Pw+HQ2+@*6lCoXHRA7Qz< ztN!4i9_HNRxlCVYN&?WLQ5B?H3c9o>q*~ihRDcQ+3ZSl8o4Om#+`Q1qgN%DGU?jI= zBUQHG*4*xq(}a-(*l=f!PhnP+92pG-Dk>wUZ(5;TOFi|T!EC2Wr6%&q2~gN?%%SE? z9&ve2%?0yqAQ&|IGWXjqDba?~qoPM8J;b-_kk{>J}~H&-E@*x_-O0tJ2V zaqsg0f&X&UIZ+rG6x%I}A4Rd|UGeR^O;kX}*K)_#O3V~+^&x8c z;hX@ZQ?{pMywo1ILLEh$A&c(S4mZZZ#6eyKz6*#ii45Ejvp8$R@#b_y8_)t7A{IRM z$5i5~wH7Ux0?vDL%gV;zdf%K$WyxpQ!Ao@T`3GR_kt~h9-fWmI#1li_b;aB5Rj|M)5@dArd7IM3;j3I^|o? za2X4ra5_jxIa&54la_5jvIk9rG^0H5xerYDi+}1p{|pDWWJZ|>^Xan-8Z-nJ=>SFo zO!mn;_7YG?GN`l|COsa2u{U_2#|~f_KX|bR#I%`5W<@C4Za!D0iR6c~ESg&R)}=se zrkp;v78uZaRraqluF-6-%2Sqdf>4T2K(7bIz`$V3_&BQ%N%Q90BaoO>uu&%e*E`^w zmQ7$$!QpBlC4{+(==nSsx^0fLjly_N@zNH7n0$yJ!(1fAfr>Hqq0#AV&ylu#7siQ? z0feTMi;JG!^}eNFOe=66`uh5;&FQtiAa5AjHv;(-IreyTKSDIaU`?lH16q{f$qP!= z-QAk5GgbUmQ|>5~1X<6Bja6zoW->{q@EFKu$za#k(SCxuB?b|C6+3B(?+Pb1h9DGM z!hR`g+JgpM;Vb0c|J$5v1q8WI?QLmKDhGJ$hpV#CvU9VpH_L=v4J3Aex>#^_tbG@# z67Y!&q$o`oRV_s*D^#zFPx7;=p6chwB-k#c!rkUKB{K~#4VJBBHP`5J@ z33RLY;Ya`whn)Q~wXXP_k&PIT)oc6;uY)9-=maMf+0jE}r&IXW;8zpuz!554i;L91 zm``y#fzqG4ZYM@8>|AW_*}2?|JJ_5Fr9hGEaXqTs@T$q-I6O3YiaAY&n5e<;80yGkGO;s! zK51!_4+sX+E+Vtmz^%vGZ=&6?mKsQ*wmPF(2^sXL=!3INEdbcl+YI#LKp?R|#%k_k zG)kkvWYD0fv@Xv2rDLkdf{dcX&VzynLpgdJa?@#_*Hy%=4-uncBN(saKh;ceW1iHv zL>!9Lw)OHS4CluemiLDB7mLm;zKEDcH?&+D`T$49AJEUIK>te-Z6b1yn^}7jhHWT_ zv#B#4)ffUv3fE^fZWgtUQEnz7PnlOJHyd{*47WBmvbSMcu3(2QIf`496vk|RvftQM z4fC>h(21QcpNh?OqaDmYLvG>aSKN8AGgOZ8434Anjhkgr;$pclt>G9rZc>adHBtc? z4sXc!^e0RptQ!%CrpFf&$nHc(1M9{?c^lENi4TPdDz&h*-jR|1utGu=2m#=f$Ayk7 zirqkzPnzZ3EH}$5s@DL zv;zFtylYtK+vC3epwtJTLl>iHS<_XW_+C?gS$hVwLENg=68^OfmtBEDN?e{ZkwoUp zesur|;n59&^&&s?)L)Yzto8gZrnO%K{J6HfRsGxJmhD{wpfFm2f=l_TPW%PKt~AYk z&<5jAQ4O|V+YmDf4B|sOxf<%;*bPK%6%+Vkb${ro8#N)U^^p+MLv8@6qv!x!EVJ#* zHb+8<{b-L7|9_0*_g=FLk}ZBEpU}2EDxCm6W^MQR2TJ@Ns_&yJdltuh&G#PmS5sa= z5+=W^Gd<)zDBY>ZV}5QmRd8GlynTF@%=M3P{N8JXl0X~O-Bt6KnTZl0Ex}pD8o7ED z9%=yRh;a5dTdlqI{Wf0)QZvS9UNHUcVE}jwtR`@^Y?~t_qSQB;EAfxn{8zV`V*{ue zP0)rHQxVR~J@Wy=C*rp_kFWF-sE+~(z&T{7y9ui^Ccb9?sH_1n*!|N?4I2R-@D@Y_ zA2a!cY43hH@cWt}l=*+k=tHlGc?H4pR2k}W&o)EK;nQM{tEZ5XDsT=I@o4xNrmdLo z`>Wq8exn3RE_ku~tzCYM5)8bhRa$oQDihQ})m|c-`)Zc)`|m#M+Yl?MgEl-MqKL~1 zHM^i9a-)X*tB2M*0xWKQnWmCV9h4Of`}VNEe)ze-{#;;xF0elr*q;mR&jt3EwLed= z|4*M_Io2`gWR$t1*w71x&a63rIS9V3t*v7-sreZ%=G_KLe6&~@`I*vBdPV};)G^JW zK~jo}JZ5HQKyKhxu1F9o4-Bz!sM#eL15;Gw#JeA)Q%42|HyaxAe4w($IiG8;B$LTy zuX)9S*K)MA@l=Uow$(E*`F5#KSy6cz_NKLuLxRhDeXMU@FcIU-&yU6C*0fY7q5KIc zFU9v%v=mr8DtnBUVC{KOaRh0U`QECsAS`&orwiO|!DW_E5SE&Yme8j)_7dbka2x@V z&Tb0*x7;i%)pFRP+|1M{)wYejErDun0lE?Y;6o45*h4MF-7%w zs<@?M!!r8^C%G`mJO^^m%ooOdCSdl?E|^)Si7$xB(G)2SW~5WS1Vmvd&;c-;U9^!v z-s{&58b9M9_P!vjH`tbPNh3RNBni6JpS_szt{_anEK(~BK6Lk@g+w%b=WRp`xaqIE zx(Q)LxwHoBeVAxY*%H)V8gAJ!+-#-+uIVGt)0NL9N5FY_04~=`58cPC$;0t07^YK# zUb|TqV&8Z@C5hkc0pL$bN5^H|L+L?=w@>B5SiVX# zFduH=-MtYfL(}NaZGDTlX70$w#Y^_8YL~;~U-e#?4rDNgk0y49!tDBZFuGHmpuYyhFFzNOmzs-!J~ z?X2lIqI0By8?$L!S<;|C;qYTkR)2yfI{7dVlDWTs^7g_}2*Vh_RMZx50R|vfX zM~~2ETZ)0$X6BS_PPvAash(p{p+SAVDRpBOj`=T7sq zS9L8Z9p@L$kP86V|IySX8YWNDlVY83hM=c{u)v{<_;9$+#|xg3XbE&fu$4dSwOy0j zymuYQ$+<<@b=YWNvyF!#R8gTN4?*P)sl}Y(0uuy3CmA4BZpNJ?+}x^d3UusyYHUqX zv8`*3p5$|5R7#|B_1!%v6H!@}RWWI8deB##ej_ne@*Y9}&RG29r`Sz4?!&(;N)T1D!+MmPx!(oR^E_NmlQ!0froN}2v>T)0BvZt}o+oGJ zeLU1afv)nN%ea~x>>*8qC!iP-RT5~t?9APNUHB->RQHOgBut|xHL0L*&wjr9Ah_PO zQKmQXO<~NiyD8cZJ8?j}moPE=wjeCZCN-RZ!Qc3J2mp&+ddb?}483Cm!Q#;X>u59gKH=G+(EoiwXP-Y7>lvny9UJ?wqGtkwYp zj?r*(V+&$OT4h^7g3XRJpEe>uKKJ$!#yj6to}gLk=iJjFI^oe0wccK)sJJK8S5Xt9wNUKyvu^tWYTLvlFR zZTCE~yjN)=%Gt~e=KFyYvkMN}5KGTAM|noWY{4QaK4s0V47o6VND^jEdWnrU>?J%V zoc8uAwxnF@8Z5e;fR=#fig+YknY0^&fB6`U^1-gFNKvXJG9-%ixOQFN?P|=V5jFtH zsfY{|kz+Ku+O$%CgTpFbfVF3Ppq>Jf<0fL{K~(FI;Z$`LHjE;LM8uoxC-(vesCY4# zi36HkgG1UM0tng@;iTpkL``aIArS~N(K87~8zzUFKeX(cPCwTITSg7McR`!cHU(G7 z&9lZEsiBKu(U@%sYC$1E&zj#brWP0L8VjG3Yd)4Fc51MCkK6|dA}v`?%KfdGi7&L` z>gFdVa__$`DD0kg;)k7*c zWncIPhAvj0GuA%BYuJTm9EAZrD`=PhSnp3j5D1u7x3AFlx6{DK`s!u8+sKAejp}G` zsh-jUUz;?tL70)k%LBFLVSTagCuSH!YZgdzCHJ1~vTq1NboN0@r5Aj`M!KFF_XFu8Mt9!GmwJC9c;?*0Jg?;^8 zT|L0k_}Ui!K`U5Xj>*o359g01<_JhFX=#8-#nN1D=Ff82GY}=}@$KY7lc%^qwjihcFOW5ns{oc^z)-92Mq{bhu zC$Sk=Y%`lU^EIsi{x&zKo?nIZDYWjQMc|(;gYU8=$NrGn3bEdESODDcz zwjuy06u&slOx%2k1*2Nt!M3_;MWzoZDzc%JQaE=-Hgw;)5w@#I7wYIy#7 z3!pEIlT5;xhn?r(E%#d3Rs*S-0ZK?DQu@|(yk<>bcZZ+d1c)|@vkm@-moSa;cVh^E z(0xVKGt9DR0_%VUw>;!ymj7cypccxYD{S`)-RTEBZO;Xg`N}KK?M&DCQ9=Dz5MHi) zR%Y2L1a5-2JoVOMW_K|0+sssEUryK3n0?7q4gN7uUg;W?UeI_qg~^({1i22;J5sDx zu^Qfi+okO~uC?U57+>#m>wez`oJbW47koNc{Z=Z#O^y4XMB0%IpjacP4q8_ zHkz3Kpf5{8MM_g57MP6}1v4mnqlL@ruPg1h>v;1v!-ZB9FB-_3E9@T>Bvn|xp;1Jq+@ zTs+?NkJ&KD2^}MRx3z0B*y=+B)!6REo}(cx_<4SaA_IhyB^dOVXBwFc*eeaN(WnYx z{`sPB6NgXVs0Eam$S;|mzS>42{bz0Y<*r%+Qzbl4QeC#R5+CTHlRzu;Lif!ImlK%o zmY1b~b~wT-@8)GlA~J6+-#+&*KUf0yN=QszCR6`-169-(?zp;o>D+E{5(xg?F`-dB zl1I?X{O5g^Ss1&kDq!-ZK%boxHa5@?9KeEx8=3Z$0={Fs&((MJYPwl413exxid-aYH5qD34Z|<^Doz`@jy~TY zAse;sA8Xp*O}PBNx-ig@$W~g-^4j~}8_W*2<0p2m`m{Hh6+y}qm7A#xFzG6fswTP3 zPb;~0cq4Cm8f^HnDr7Mz&@0)5^vGq$cqjoD;|Qledsokj+?_3%mMGT`8c`f>ZiB3I zbUNK9L4Go^vtx2Y38hfy?qX3<9p2>Bv*WVt_wL;*i4F1)=UwQ{E`g5}rjMZbq^C+p zBWVhk=~J*DYuO)4`+yY!EWTCtc^Ct%aQj)(>bL`<>b15!r%p??xkni`qyx!Or01vL zccanutfjbU57$N;WuA!RQact0pgKPb!|lFbzI@T5qbDBumYTM^JN_T6xIcJW$&3S) zQq;DD8he)A?*n=eQ=@~%9$K!H@u>XI&UkHTN|TTb@lKioeMS%Sw2D?pk2-S9A!(kt z_D3i8b}+e5s`D|O@gNvPj1rD@)z|BOTPy1_yhSaqv+jQ1EHZlP(`Y=rP+@{jPtP%w z7pCQOC3h-%&MW!?xF;N=rh4g~EN#|`FsZ$I@K;aa<@dyJ0cSD$G|W7%omT><`Cm?J zt^T^rp;7+?MPUTxb#8C2JYA-i4cjWYGTMzWYcnynyb( zpQKwhJdBwBpfj=&hm(-X#;(4F{M*V90G+^I++-HvR=N%RcGLBw)fw{^Jl^JV3wA99 zHR$-nN0_m!YO6(t?)f=RsBVjlT+fYniL;}xk@j-y1{$SXJf&Tghh z=Ur4SzS&^sVt>%0fV1I8pZ4i;kIpQ*XNDQxm@(UCf zU2i`0|9ho^u-WcP+Btk0E7%0|UwK@2I2OUndzgRVZi!4YOy+} z8g$pa_{(IAQ!+a@CVA6={GuGw@yGo}b!o@Ws*kV)7iE|-7N>GJCHJ(katnc2+GGHP z7FN+3AU4C%gFearMIjZdySPo`ENfLC;bag*Bt=xt6vpIWWp*#H^&lu-zSj|ElKZQC zkHV^Ug^4_+aB34ktF5M}<5A9ryZQOWMXaB`mZvAkksfrNSh3_gD$kJBNe zaYCjjoe4C~YsQ24!V>_<8Vl+5Z|^jpnXFax^uHcN@V20UW_swEN;FpGCXHQ(45{TC zfAtz7{!bnar-VQtuK(=831)#V0akAS3D#BepG7mSbSUPr?`UHUi-_2G=gh`=uy6EJ z2Shc3i(XypXu*;<$aoXw)-GiQ`){@w>LxH-8qyb@8NlT^Zd5H#n25vhJSHk zu8JzgqJK^`nyr*&y65d=Grvf-y8?HF4_Y8TvfK<%Kn@H6OXDN3s#6D^_y80-PW(gV zjQBQ)jFP}xw-o?Xop7IC0hv=JU0dhrT1GEHo1KT$UeNkXCs{wcwm^6GcJ6bjnF2s6 zjEue%Y}-y^S3`ezZbx#baOI1omY7zoFF_W5NyRqSR!3}eA%E%l%M~asmzq#`VnKqT ziqOntoH%xnYUmuDwT5QtLZk4_&dq%gV5M8K&Y;I{NlQuYI$JTe@Gu*zTlDFe{+~RU zidbwIeZz&W^4@Ebuv!jKEgc&+Rc6#e&pZl&u$0Ct9^wEGR+~FXC^sXP1W#h%!tx(I zd*p41C5@BrYWg;h%`T|-5w5K18cZg2<;FfYVq7rr7KxKx6%d^$ z)b90C&=wID7}Y9#vcqe}o%q6^kgV*bWL*gja^%t6tI610p+{}SHd3&lGvj6y#(A}B z+U5K1(M^DrJ`Z@1PpN77g&^cNACG~^AfOG$_9BhTA5Cc$%^y7f9Apr!`Nh8l3S_4q1ANn2ecWg0e<=fv zgZBrG^DuCIDMK5t@m{Nwm1)RmG>W>GF_)fq+`xl?$MTIo5O=q9ZA>=WlP^Xn(P0pW zN-QRHke@w^#>5%C7meRH_XlBHUtP5(@nBMCr1G-qnF06lMIHugOk=?KbnW?5M*V#) z=JtbB<1*pq%PnY>?wZ(%xXP1d!gMEL>tsd1@ua#o;nK0XL023|?+BPOkM|_bp8YO2 zHJfiBv@tJruOs3U^$oLYF^vZ;L*GI4AWVMpMNvWkD?8^B<)~S33$d9!0WPL2RS^WV z!Xz6*ixWg44n%D{=~Wu3B?WdN|7B`9kgu`|eE=~)g!=)6aLL3J3n0lyX^3}tBxhu~ zWM)Ftw*&q)7H<&v&VM(<)^LE~+aL6&Z)N}U^tW%Hk443eS=<>Lieu%}E=$+XGvuz~ z^hDQbq`6%mL+ln(dNp0LAyxSUH7fi#CkK$(3O^j$W8Yb#^3bp+UL{(b<;cC}ZgH^? z9`%Y6ALBe@EsBGgv)I!jQCC-s9D|T%pP}^PG;-#Qg&>Z} z7KpT$Pv(!CE)l%L0|ARk`nwzq=k3KU)PFDZqSK0xO^D4@se`HaU^*)6&3JEOzfoU* zi>q5?gc6uaYyaG;4M?pAI|KC`#D%yqWt-S_C<#(9o&pOVazPHwG8v+>-_{_njpw+Z zIKzv<)zjb)b^;fs0lIVjJ?$zC2u9cmGw?>^OkRgL|C!I(EpMazQh4On-cheFMwcJ; z5hUtSCo0wlrn?rQuMU8KjKb}T$f)}xECDx357!5Az+uX@!&})$!{nDv_=e!wLv{(}vxkp^buJ1k$ zqCO&JUG9#IjBNg6r=aTHkK(pt^9{}IoLLBpLH#=oKw4?mtYhfIkefXg7TBqKf=;q@ z$#^}?%y&Q4l8Z7wlV5uV?&IsLruDSvOBuV4fl+)I41I;MaO@Ok8{s4Xn$hTB?#V>wpn*n^_m)aj$OwaEeP-A36jxb-x ze@ldn?rX#P=JZAFGjW`79L@{g96$(md~B>k#^%c8aXNn4oB!C~{Y0fPzp}M~0<77)S#8*DoWrD(|e2y$7Jvz!Zi2}GD>%28zebG`hUtZ+EQ{;gwi z6%(2=dWgnNX%UIxg!;l5uoZ)R(Xc;9SbAhfk%+7&8ezB)_sSF}?iS^&{3QxF947ao zJ}Ck4#om2{xBWqF)z#heU=wI1vXD9`;1u(AM~fUp?e6>|Row@TTYu?(S!y+4+7CJV zCo$nz;Y}jz7ik6KffhJcV|UlRWMkscm-G`NqK4B4|F~k(s5Ya#HmT`b^1{-=+q+=n z#Az?5Y;#k!eqtS8lkt2fuXs z(J2x?aJZEOsDHb_GXm3Q7XbJtcp!1lO1!OG?b=Y5a!D^if2{e4=-11+_5LG@iu`BK zf$j;-(|$x2r~`15j5Dmt%=^qG0GUbjI3HR0rW*${oQARh7S~iA*r&Ag$(ZwN_w6g~ zoS$%f6rPg$0|wLt&(-MBVp2gdS>WPe!(+YjqHtN$J1UA&*IZoqiqQNO#C@3ern>r) zwA8I*lU>r^8JAV}ZlxF@a0NUwaEQ8WV!;MIEZ;M)p6IBa zzWOX8;;IR2^2!FS9NZOeii9eM%Xm;PeH|U|2rxK(DW@d=W^U2Vj!5!ukS?22rZ@aG zM}}zJ0UYkgF}Y8Rf`eO_L;F8$=LGJz&E7Y5GGR7u&^gOjNl#W9!dfunW>r?k&7mf| z^&k6|u7TcbH*JaJ-GV~lSgf$|KR^h61Vpl0g%)!dy|utt=^S{?OdVMQIyWD%yI}0q zPi@nD1+x}evc^?m?}mM)CT?zSscf{I|Iv@-KY_^#3>7adxs3bwOM*$HI%MCc{1=p} zl+QXbY0M3tNnDVOSPo1Dt`sK%5T!fuk7X3eZXW=w_UD6?-P0n8nZWFCH6mE2}G@c z*{7s+VA*&vd%$Ddo+6m|5rk5Be+Hw&nUJ3O6mqX7sPGtdPKotD=Y#hxXjEhQGnZ#m zzY=&h+puH8ii9F1eL(zYJJFBJK`Nf$ z3ADOj0P5EuBH`lq+qzu;?egrOCW14e)=w z;72&S7y;n_ECWIWXc6=_fQIJn;HU z_XP*ADVF5%>fXM-(uoO2X{fZJ%ZNdwd#gWW#xXH4JLr2pDlCo7|8RXJ0byX=l$U(W zB{bs_unyOsp)20JT_{KCiZ^3%aS?1rO}DLIHq1YI^ytXZqmNX3tf1-W{k^U0yRe-= z1u&4z2(QXAY(>-uE>t+z+`7UeL9W?_Ul-v>3a?n<#K)Ra>kj`7>(`e6pmLpi%hD7X zgP8dWqxysY*}H3^zyX?1wjE_oR3I8yT=ln6rXF~By2Gm?kneeRc6Q;l9SWHG`uZaZ z3Q=~cNl+`jS5a9jy>z9K0ILg?kVaFvsLOCY5lVZb=C^EGu@TgnK%EmWo*%0N+5;vI z0g)r`KrA5_mnA|_ADUcBBcR2o<^$aS9UPGYI>X?8EBkd%5CBMYyVS~|_MQUkSZ%x_ z3o{M*C0LH5vodCx#`t^lS6IdS1+*f?C1fsdcovW>V%E?V!4-{C@&!}W9Q6y>DEkUL z7iR7H>z)Y1JUhH;cYz$q{bNu}P=+?Ji1mRV*rJpupxfh3`-sa6qoY4qVJjT*J6DiR zF{i+1a0C5#w)x^IsdTnxLl?tSf^&Xq^ZcFp+Y~<4DWuxYSEak1$?4%M)=($#cn)Qk zh8EvCcP0#~n0^)Vbo^r%ga7mz0VFh#L%&g%X~5$kGq%_?kLb5@AoqgLv^q}cZ2*-3 z8pVCVq=Y-Zrp+#pO4{eC<~+oN#sDvBBV#XlJ`1j+xo_0?Z70hwYpnrHTU^f9G5Q_b z-v~_XWNHEYebrR5g`A>+oqIXo)e({)O_jj573jL+z<@wgDMQxb_ve}`chSDBxlJnE!#=AjMO$djtAwU(p=I6~%y12NUnfd(S zW9Y9b#>JjrdP<5x{W@MFFq_Mv!6yI0wmORJpG$o=luHgbe7^UqUnnI&?xYtaYrJCa z5e*@C+GCsj#!KGHi=JESt8eR}gKoI;kip8J(qiivH4eJ+tZNyQLaq0}G7R~~V`ttK zPx!lsF+E#=2F+gDUMh2s0cy3yHu+6{EBBb^OSAVD81pz>6b6%w9*ZtmNH0C7I91Uz z`OReWc~L%~0`xs|UQb(e17qTg;^tb0AHR5Un#+lfVxvQ(-vl0l01GdU4}t%Eg57lj zv}0r8%YbE@=tCh{H?xl)TG6B9&;booQ)}Ac6(_+cW<(cnqUBN-dQ_}f78yOpMcfK> zIw)D(HZeSk6Zcd{&z1QIwomVS@SwBCYoRa0vLSwK=wnHC(WKIJov-4KEE^Js(U&pf z&5E<+K24x^v7GS#h8w&)eQ(jJmB+ai>;H=5QZBTIXt`Ky`TD!M3&3!ZpGY;qOml-B zQWZ?0+W1h?(NPBAyLWqb-ejP-M)?&OVHrpo1!~c_*PuB_8@kp%(7Jo1Xk3_ms3uaD z)3cikuJzR8vlpYi1jnX`dvU3w_;x8PI0FMScm>G5>HP1V>c?(2V5e#*rS6{gYNoYw zEcPN5_1DjLY@qNMjnO>Q=JPT~Z$~e-9ywwsCr3lqZuOdqRy4wnjO;VsRy;e{to?LB zy!cD_C}*iEEH*7!16*nds}=5HLJs|qHqZu{4Pj%fg%ESp*pxiSix z3LV%~w)KgQdi7SHc5O^A$m^|)mXq04US9rT$awNYsINW}?LOmV*(r+jaGx$w^uQWS zQAnPO1;d<1dY*=QSGUX;Pl_Tpr_W64=%maA@iUA|1sCVVg+F+H+lHQQn%A*&J@LmI zZm@)=+i#Fw9WTA|`0#bWA42K{WJjNS%e{#Ns^aaI@*}ra42^}0H^_oR7JRw9aeUm# z3`ks^CIkRHUKvUc{iCyEGr98wyn z`Xyu$L|HXvT>9gU9@IFeZPHB1?C(1!G>aZ`g2ok0+;v`V93LdBVQ)BccV**H-UaIy zjTw2(_d<)h`*@ld-Bd3=1@v434@I2HcU*q77!WX{LD7s$EaRY3eP@N|JPZ3x{>3}n z?nckGMkfmG1pCA2?KR#~K)&6$i_PwDw^`;O|7|T2fP-0*JFs~x^8lf84a|)@{Bpca z!K$8Zc|KmXswzH@9yQzye3g^=8cKKk?5SM!T91M=S8K_^=HJRmL}{4xciREXOc+Am zKPqSYrs`({2GrB-_?965y91~Oh#7rKG_accTnnHYp#}CzKflVd7Y2)@w!)(Zo--p3 zq>IfJ)6-!-S)m~5(XLTT#|WW2;d@!IR`uTV=baC3$`}%H<}Q*jc!<7EHx_-E8`I}c za4fxkL0L>x^DUn3HiqModa^yDqlz$vJw~%MFUzt9d3KgD<>;=9ir*I4>vP!!lhjUD z#zdJzt2=UTVf3}Jt0m;+EQ$*_lWQH*CtKx>8G0>sjat~nQvR9JepYU=iAJ^J(S(w7 zFFcKl0^WGBK*zfjtP)tvt7t4L5s@29>-(|_7zTi49W?S3fAvQ+JOO~Z`+N#HB{|v> zBHvHOy*`?!mY)FR6*#HLrL1RJs;l>H26%jw0Iv zx{gV}8ZH}xtXizh|Hs)^hc*4Z{VR$HC|H1kgh7{zfJmAMNGJl*A|)-|OjN`mq=gY8 zos-Tn6s1!-M>h-@+la;Q48@OrpYQW|uIu-Y*F3x#=Y5|$Uw51fN6gIEST};>KuRP+ zvcj*Z){NFodD+rhjJkKyHf|-pm~|g1W!b0Wo#77?SXzNDI7v+Glq`M%LXSXWbs5E! z&#sW@frR#zxY~6mDjA;bW0ihXCN+yFO{^w;dI_OEQvZT{{@{cQWy@6uD;8yJ_R82T zkH95C=}(04cfajIKYXRTOe`}qO%lNKBPB(~{9HgMQc|8o7~1oiJplKaq2{!%31IJT zJenHj)|w&7Iv{`DsH;)7U8r$BgK06?UDayjZZLdHCI_@fEzycX#XA{uvyqkBb0OHQ z|LD{VhRoRx*yeO0yha41tsZ*BH_WtXKCnWu$lB4#?FXNK22yesI{6(<^M@7plm7T7> zE{5b?lv?fu&_9Qta~8T=KfO09duDjvQtF7hO{j~4_0zm`!`gfG{*~URy** zh?jyW_Fwp!25$mM7IJFQn4H#1)ym?}gv^cjpv{g_kV+u)ontT=_c2&??|f$t03t|R z5bw;&Emu2tty0{`b|b9UBk{E_N!WW1@=~0L)n%FuJxIRxTYm#ano0Y*g;`*krz59* zt?xdQYXnS{t~kF4hUzIeRAEhjEzTek!6r4XlXQ5%EAEYSa=oK^Jv8SL3Ys+$Pj@{uB+aj zq;$x^WS+$FDRioueUg@q@n9V}l^e(_R*c!9Ip|u-^RacdGA_{gQj4?8%Hv%@ZcwVt zu+^HysZraSS#!PCme*LqxOaLETrIDhQ{HLmR4y0{`Q-w&lcO;(OKlmXu1{>(MLKp9 zq>dEu-5Y25c7O@AR=OHwf8IJ^x=qQ%)FvuS5+cuWOt5YH)(Z7I^ynmX&VcvKNvH*_ zR*#*vrbjX%GXz(-bZkR7n%JMPDTRi1YUc)J73pQ4ByOl4~e0%{Gy5y;7|$(iH5*J%9PuN}E%| zpsx+2h7|NEoV$&!d%lOy-mW$K6q}{lV?ZBDcMEdZ*{j>ppy@C(xF;uaDL}F~?^If- zK{V*~ve5%M(OAWDQ*iw`U?7j_TRW^bB6=@tdJ3fY5s?orO|2S(tCh$)GZK-;uo3L4 zm{|xqjDgzJXR^l>c7v35@WS}b#%Ac73t|u6aHSpHjT<$G zy9*duO2{3cy`Sn%?*i{f$QdjI>4pE-^3eKnXIfHgYwIhJ&d$I0Ku<^82kvBKk4Q1q z7L2-ndsv#K$sd{!N4u{s*uQ@kDMhkIIC=J!J1dpFK|7*p?Y7cBaomiDDB1`W!STn7 zJe|A*0s^PEeLn;a4;$g8Dw;#=7OY1#afV6r5L#%U3~%MT}20C7+9d7Gf%sN8f7ua zyF%he;NPlkDXn9OUT0|Vq%n3#c(7@-aA<^L~sm*#n(0>3<;Q(%{GEfU!^;GJac6M=B~dn5a$|Us0(nUY8@IdPt>r> z^I8QkeJoMPG{LVkElVBV12*I)_EGe7!=baLHc3NI zTXEW*)c@J&#;xP;e%Klpd>XtDIqDi1RhyC*%?AG|C(|ugBGwzniO~Dun{|D6QRT0* z`ujlJBrH25uV2NN6gpccvz7=@v%}6~k=MbX)&v9X-r^kF!X96e=3v4)F@?mX2U#h9 z+9KNf^2fd_t|QK_%gA6Zn~wnac*_g=?;%FW&fB;{N+_*J;)yYzG+d#QrvPE*7amZQ8xf>$eUTFGhaZuxrqbMis8N}^s{mOW*e9CwUnvU@iPPU&mL;2#0!UJ4uDc3V)G zzzrXzls#qZfgSto+|-jP!|%Os9h6w=3qgP@ao<42@!F`Yvc5BjaycY@D*+BF=_vo7 zwbXw(?mt6~2Ov7u@^IU&B&`RKxU7gJ)t|p9$3+3cNki)8S{8c0V4sbBQ_A~^O(z)1 z-}aFXL?u_>TmJ&pmATLH@#C`r0Rfjk z`zwIJyepn#4;fJZ-}*BCN1WH* z1NLMy3|9&I`BwD>fL!sO@`HbEyi^W2C%6$;2-yeWQ&~>*XQRg5nlk6&;%n6Mw4Vs{ z|0*ww_gym+_5cHqPu1*HoM(gKIS9Ux!+(C${|tV~yQKpuTGaa>mzZC$4Uvpv_Hyg| z0fq1J)!hFUKr7BZ+$x7&;ozhjV~PIk8AS>jWxt2(Jpu4MVy^)74+#0c{yo6k0HsIv z3@=Rn+?%fyAl^)wYhmD@M;l0cLSn`6>Y#tpXOdmjs-Sa1X*Fc{!A_%r?@4e3Cr{k^ zx#2&5>pxcH3*nv_Ud{6r===*bKzQSa={N{^4 z&!at*e6qjX&dpwinN4%Z*6PzGQ7z%{?>VqOw+32Y66Z-qGLL>V0`L5)Ve$80_+LL1 zl80nMU9vlWNzED%uLP3JkH0#qE}vEFswOQM;s#cJMB%+QAE4kU;@X-bt!{}mb+3V^ zvU?a4e1mgp>M|1-7uVPN`a3cHYCByuCZGi}VQ>D8zoq0)S=@a^KY*GE-xRkv{|i|Q z0wh`L%W8e|&x!e}F!ETALU7CaV{OFs38SXz7G+oDw@DMXe&MQ5a|D)ta24lK!9l=O z90>61n@cQ$y9MF@`v&qsZnv#xuw!>4RJY4sEIUwfzH@g3o+P`;k;wIpK4%U?DUt+WkSf#`;;p(|R z(NEov^}eL<@fEAJH^u;&j~Ckx=RYi*N6<^J-`R+Qc{z74g$@8^%&UL_U;M}hWITF% zkRAWGlERZyv1!7EyY&wjz$?=&JWczv{$Y@|@CE>AH%G6m)C6}GB?M|Rm9GC-O01~xG^+XX z<;w+G#Fk7k#}R-^v8R37NzCrj{68e|=aJ9e1lv+sbe{Q@ubCt#T$qMG9{uy_J7jBg zv5|par>PpErKPozk$`{m`OKCpsJHi;BW*jh6w9Db$sTiA?#ug331ghv|gdS4`ca5iJ104&xF3<~lKCXOY1vq{aS_SGG+ zM}K9y814cR95SZ?WZQdF(B;gL=hcX;|6R6!^TJaAcq1cr|NB<~#jb++*)YDCZ`pfk z1=61q^{NDpQKl7)iI1m4d6U=$tcJfwr7S59M){BdyPA?JLiP8E$j6i}i=_gUtKx=Q z#D&!+@v9J`SLu>ByNZJklsNY0S!V2;B{jbs1A%I$7u_wWB=PbQ$#^{IbR+4sNo zxydO4@#6g=l%)x><9Ar#_y|LvTW;eRDyG&aE-qqtG^-&s=%RRd#nJ5S%gxOT?pW&+ zN7!-}0zfM6v8ClXa7AO^;t2o*v%mQCe>c_6-T{mdwCKY9Yk=w`prkB4{Nv%j7=b)U zK%yza^4NxnL?1 z3>Escq1eXA)<-5*(p4zD(r2Z{c+9_p)V(zaavAa1uC$wVBd4~6%Ff5W!JcAfqcbFJ zi8EqhMTS{3t1r3rSXk`_uVcVix=#!1GmMdGX=yd)q-9hVo#!QoO(G7Wc5eiUWXgq4 z&%e!|5>^QYx56)!E+?Uw5BkUBC!c~Y)$8C0uSi@jykNlQx#($RX2u2Xg1<34^7%~c zNh$5I{$co;p{F%rU$@eqPc1|iPc^9e-0$lf1_LA7UZP|+)ZDux1$Dn-sOZBDqZkzl zu5Hq|$R?qR#UHa$FzUe)oN(dTYzh0pV5zky?u0czfHDiL&jqnc5=q$QeHSd(ND~_+ zC$4@lSWH@3h2CI=L9Y17CJ6%PZVQuAFld-4s`EaUVWr2St*xE!GjUtH%poE?JlsQg zSp=q6;k@+NAh_t5Wdo9gKZhU?{oQSjZQ#Z}oxQV{f^_X`9y7&3j%R!RuYbP9?g0%a zk}0Q;{Ce`{JFxIXLVc0@uU}OY^}TZ#p9Po2_W7>)AMFXmenwo4dP?RdWX{29nYy}{pN8- ztuP()vteC5l0iDU)XY`je%CmFJW>Vp^_B9m48-`=eXVO^2X=lgvZCXj|2ynwLHQfp4 zFbdJYQ{rDL^Il5S(C?=>0kjy$$#>`e?_=P2Cf5w~L2$o%lkb_IkIN;~f`xUFZ^T~< zzs}N^`liFE?B{cD7E_GDr5_A)2;!D*e1c4keFp)DR2716Tt^srTcrd-#hTPrWzAdW zdvADR-m9xhD70uL%ugc>3A#a`4x5*n_|CRzV6$95I=Z<=j>k;zQ_Ue zy%hIFfc00nOf`D4d+|Vsn^DQh$@Qbx>Jz-x86o% znJf(?nCg0z^Ke@=HVq2;`T6x^Z+eXG-EQKnZK24vn5b1=TTM%7N>zp?yQ8NaOprAx z>S=VE1(n+)RBJV%DINw4mHSA(Z1Orf=PY6)&9E6k=CikEpi{#Y=&A1Bkqb>&_I?S8 z(2%@g15R)?OMcskr+ZgMbZsCDi)y)ScQ%Y?1=fR@nr2BcsyQ&7&&kPo36-R3GF)z$ z+_fP)g$U=A7YM^U~m{&&^F1EdB6S*YoVq(_VCQITQEVc<_mAu4h zyzQc(+V)xa>@fYDA(HM!9{rxUpHwn^>OE+PatOr36Hzr!bCn*@-G~W0NO@P;RpR+%I3%^iv7eIN4Cd; zD+zIN=hWG}n-7{Yx$g<8bT7Sp@%n;gj0jG8(|(R5HBjLs^RQLI^R;%`*WvlpJ%hz5 zo&xF}0n*u|1v^9&&`20Xm$|hHSe~&9fZlsZ&r-RWwVT87^PwQI5EGPX2W{uW!tC z)(vq<0;QIQirY#K4*fE%-nf0*Ye_SQnI8OlB_?9ntr{tM@u{5bsdmy6IPHF-D5W0h&XGfJ(+|g$`;v58dMeT;Hg2vf|zDV=ol}xzo?jQSDNDhvct8fdXkvf%6O|m_Ot_vt-tpt6x@o z_&C>9K`!h<<96yEp=28;X}l=B%XUZ30-~IGp3L%#FMqN$$8~TD{xdhf>5P&x%;Td1 zS;RL-S&d${Q?VF1iFza4-c*vlNCle$r-aX9*iyA%xy(Yi5eXqpbQpBpg?nHog9hy` zGBva|g!r??kGrlKX&G>BFBX*a%h+rk+C;+;n0#zCov!=Q)DJx*Y3XNQCahub) zr&{b9Q+~>bR1naPi22H}p{m;UUOrW3tWZ+Mne}R66m6SqZ#FU{nioCoJzfxyIom-v zA~E~X#cVKtihnYvWah)v?ZYgMIZ3vcnxdn%FWIjpnf1@rv6cjfdSK>b0OjIdre|dW zI%F#5o!%wGUuyIx>wPN+&pec^In7RfNbWKa`ruau-(-HPTp_UHx;H}T=$~r9mziw) z*zhrj@M)r!=aXzt8L_2%{D6Cm!x3}Ex^|JT4l{pf5r*Sq@M{Zp9``)ehz)7+5z5e# zS+T745<7MYqjvl0Z1qvnNQJ!8{rjQ)GFV@K6WsD}Pi91w%Y4_hR#}|2W7%OAvBu6e z6?8=qp#hr!S&i@#C9%M*d4g)@vr{QZu0d5A^F7Lv)&N|hb?c4kzbQgC@JwBe_VmdeGM&{2l9`-v21~yy znoku#y{*z`r{BW6!_8gq0r6L=drd%U@|wva0e9y)-^osIW48BSzn-nz$L@&K5B>1r zNwKn^edk_C=jKeD zVBA%g3sBjOm2=wb1bUASwbTCH+RBtfJ2v|lmu&{V4F#IVLxmQ4?LNBzKa`7tl;DH) z^CGmk?og`Kn5wZuo^=e?p9hLG3@0OiX&da4(45gxUI>KBNvVHP<~WFl-o+pE1ut-f z;|Jxxao9`n%!ez1r}yu0SUB13Svy|8{M&8%0)&@dGYIn+eSPc692SqhALa{jeu@1^ z2ve2ihKku>C7v>@YxzP%fva3Uj0?g%2B!B;Q>0)smh2(ume_VSy&Aug-D=6V0_llPQv&09n};_x!rCSW zQH(kjldB$IKTaguA!W>l|L{5`f!7&t)H--$-D7W3dnG80xQM@6z$YT2#HHfXHIm(w z7Uz+_KHonaOL{a?m;a>W@v!E-#2fxthq29>n0I(|n@9BOS{8$#Z7~A_gOa^{o_4Ml zEO*F$o2MYVwr_(v44(^W(@)}*kZ7=G7qNXlIWx1ZA9-Lu-!Tw2hS1sko7qqWW@BQ` z+A(|Qp%6Y`Htx3_+WzfRl?nhf!t_zO{9hLRD_E748Wm;TK$!J0dR{mZV4l12nc>N>MmrAGuY;Vm}4(% z3E2#m^*Od7I3O%%>`}aeIUxbe5?`~01O+21mQPLO-64zcXCT6Sda&zQ%K^BgVQpXn zM{VNP-NtL~=?#)A$mQyNljDg@A8bg(3Jo^TafGxIDfZk^1onnH4$OA5!j$ z<)1q3*V^OzKz8rOYtqq>7dRS$V9WPY8@ul6KVLO!z^)PJ34hz8kTYcZ%_OGoBVj+n zua0vkcxZ~*jC`V(5f$xryT2uPKTA`vz;=pnB6W|Q$H)l|z_l;vmw9I593w}Txf6VB zrQ&>ijUVa@oAB$oG~CK35x1j7=TrBqN?`&P2O_ef)b`@ZYz{`2_-jYyc~{(ZpR^y& zrAfR(msJx(gBQ2%le2|SaVgxnbHVi%B{m^J=EmCETJvUjxJlXi_`7vwwg)M$qljxS zwj8!|&b3T+(@!N=W@l&@q&h5hYbiK5glbRS9yN5fre7o(4^@x(of2kAB%QSq=ktbR zW3rN+v!q+5^7Hdstj>y;G+)!;;^b^#h|(7Taq^PCP#XM0P)O*58!*i&y3D zk}Y*ZXXCY>mO2_72#=)EqR_4aIl>1lbz*2T``?!O(vGE;>T()2q})QCmR6+t)*XiG z4r_;y2=pQc;Uu4J#mA37y$MM$vAcIY(k z-#;5HyBT0TT;38};`0({j4GfpV8zHXM{Wt+qDYSZMZ<`ca_VO^cu&<4Ur4tPkY4AH zh|vq@Pd~R>@fwxpdQE8a%tmXT&G6iMhaoL3ZJ^cT2y1a$gO3AOofl^(u8kUo-9LC8aO;sL z+0S>K!v8}1i@bm}xm5Y7c2vL-Q=lJ`7GLI7>>i9H>=*w+lsq0l6vj5bx|igKj$~KA7g324X}u!Y*NyR5 z=*bPsqnApb;pYeN+}+nMyUfUOn;h`WzM1;`C#^Va!K(jEm;CinL)HwM+X)VhZ+?9A z@lM!>1bS_R^fX>TxA<$Cvc`VqaIG)a4DBv4p8OgLrdy!Vswp@FTf(cr zwdR7(%B+@65bz0-jYv9_%1xE;197Y}*fel8*ic2CCpZa=z;*zhdJOd5j2r%?f(kU- zAueA{HA|}#bmC6FNsG^M8YW-|wGOOHD#nOe@iizkghog6vWVG+-$If&sEX{k>kcj2 zVe=fOETbhBY!ZmT3$h+MIDX<@-D71w4w!A}g^4MxshBKSIB?|d+^%(rUYnihIm-s) zj=OMYYkkh9$NN#AuufrL5}Z$DetMs@rxTO2ZCGgNX)SjYf!=hLUiNA+X3_rjAvUK< zI*cx@>C9w37=^$)T)}?UA3JZPd3>Y9>HqJb0&8GVW8!*Rb2sktf#F)_Guz)~>o=JW z{fgaaINS;$12wfri|V>bqbQVTyk)Ru_^y<;o zoJ@v1RBWFS66hsY+NlXu8MIPoseOz^bXb9Uv339bbG^@t9Dy_Y9?V*IECyO(4UKL= z>)gM;N@=Ml^CMZ|xW$jsyb~uF8($q}NiHq@HXo_A|N2?5`||-#|0>&LEaZU7S^pi^ z{>Y`h3>#V`rMq_zmA8e49-BDB{*D??C0PIVx2&HA)+;zEtR?ZcgAaZrrw5#T`ZkN8 z!fJ?HP)tr&vK&BBn*5kzvs}kOWF&4o|5>3;U2c!>C{PttGqpOq-}fh7f2|$yB*(3& zScjWC3txc0M?VrIx@$l8?*H#*;^>Y8!tD=s5IbSR52p5o?Z-UyG|tqoC{6}3hB8zv z#6a4!-oUe{=d`2AV5ugm~m z3D)PYxvLd+94U^09TOFBbb~(FvC_u0+1pj&@#DvS{`xvPe8JMIg}`{^e4To7bB`~W zL$CphIj;0?7}+A(O(r-tAKf{p2l^jfQ8%V8OhA0^_FV13LBJ_|s>|Qql3XnLX*BJ# znm?U7P)11B;OdINF=<^bj(7{atyzTirsC#gXWMyhbMwlMrL}#Qv;1mEYPgzq>i1cwprO^s$ zzW`rkoJ2ox>XH}E=6%F!FI9*#Fh$*2&eabs@hs6`2!YKr-|KxV8gcT>o5~@ndwb*V zBXSe`4!X%#uyb{jnIGLkiH)~;wfy=Q5l__oT>=8Ip&Mb>1AYXbetSn_BX^0v(|2>J9e{ z&S|sQjO*FPzjBDrJEhptxc%5#)AqzX=i?bv%h?IfYZ6CEa1Nie!x#oVcSzovq)puN>N&Pn42XejNX`g-ndEzVQj_~@D=J6`f_n|r^U2UuP0)NXE7}fyL3S@Cd{Z^D8 zAyA-ja(X#5N4FCbc@C5(r7p>YhU&4!A|s&uP;r|}ReRX`zkHY0DSm(3!eYSHm1w)^ z+SK!!bloiJcA!bHw9Y(1Q~Y6lef<%JJMSiWIXSh#bg?AYdz4%N>Qub#@hbOS*Y$1e z(t2)2n#A-;(jHLZ$EeSg;rD?VN@6w^5ze=>{L*)bbmw(OUYUEr2^R7AH>;6OJW2Mjgm8LBjPuXZXk_=rKN0hHT7{1^&m5?aiJD?{VzYgfMJRd z#*N?sg!tgegidBd+d?k1;{eY_T(N0WWN2hh{eaCy*|fk$ggC9Kr-#QkBu_X(9FxLW ze4WKVuk8Ct=&hqf?f0F1L*Ry)%Jl8n$hKGmuxB7(f7Lkz99w-hBL{Vn2+^~N83PtHofM--$rB}6m zLqeAW)MoOckFJW-I5R`%kv%_>RwO+;E{P2SV)SDr1dTi6E?Quivy8*45zepNcjQ%$ zv4>v51IDCkWK@KTEW&y_Viba?iDWheARFTIORki)D-pE+w`XOTz6OM1tCx z2R$bobt-PVHL4&w*Q(~?rBTr3{;h>*oHFFnau>R4E+`9O5O@81#}>zXIf|1+sjv4? zgeryfK7HpIoH7N;Hq#Sfce@D)0BTxeY|u432rO33#4!Im`dE} z!NCCIryMdUoa{G*LV!UB1@r*40Ei+DX>|H89t`E92Ze?VG!;6d-oVcV5t(xox>)Ge41G z-X|(ixTs2v^bg>pb)3g4P#bD_Vd^{!pRg#f;l#>Ad`sXS9Nv5NOpmNz#TI_0qZZPv zKfYEgCqqlKS)0{=#<(En+1}jNzC%Z{W8R5~Wl^8}Hm?F96On@>t5mU&sG)dp#_ff^d)5RM76O^OCQKDMe+F$Di~y7{lJFa)Am{GmWeiDUvzxH7tQyEkMt&Voivge!%G}WQq$R>bG3cV z#@0GBm%?EIEozpUIl^^$Wv1^=FfnN5ykOR8{HZtkA6b{*UMMlHO*LfJVjdscIUNQc zaCg^b+o6Y+-I-I3Wv_cwK>4vL&`h6v>P)ZiSVbS-JGA(^F7s<0D>$>`6OIE13=%qT zk0GHc^Ns`A0uu!~GHK2W2*te1VkIYy3wVCW(mH^mcd(~-`E3@bptgbaYd)u-Q;cIg zqNdibUTE9BXtNN#)kmX}K;~>V1a79V(yrXx2GhKq%6T+iYec+e!rCT9CGNaMH=kG) z(}O2o!cWx0eS}}*lo#F}B3QlH!UUieMY~y};C5y#36!P_<#zceA1NfDCAh> zFdLc&C;ikf;PovZR@2~NdSwr$2!RcFqsmA{;xYx?HH3LX%T-l%g(e~Wk*$S=3CSZv z=7Dmyy6$%7b>E}Ryg@504ClFeB9kZA=wEjGWI=D7U}VgA{7r@LW4N^*KQ`mr#sx{_ zhJ5~=g!>Dr9*dvKi_b}W<+^;xo3kI#OE9u7S6M9ZeaH;mtlc)FMnPp}uAE>1XUlV- zhss#w0&HHW1y$J1aLAef_I+4m)Nsk@`Dz_`W^f7!qRb>d!-H~Cx>4gm>iL5I;>8YN%kgGVOC>Lrh4_;B=)AdH zm@BFkV#jzBK*uMcBj!H{?zO4gwOGLmVoS`+QTsLp>IraaYjE9Jb!BG7W#fYK=e{{@ zeTSO)Pbk&(Afb2_mbX@4Gw3nH7oBtZ(w-0ujwDd_w>_S1sEqDqEwCe;0ZA=_|`^P+mW^K~EYfxb;&5e&s)60YGXt zY26!SHvcb(+0I%c2!W$?)qehEj+11ALsfw4xw@0W+4cQ>FOY))kt@)@ze*1%5Y(j$ z!#jxZw{S9Cd=*R&+S%Bo9^}WKJy+i<+`RVS@15?tBoA%?{V2L}T5}i}_Q_0sVR2m= z8XA+YH;%JLeri-0?YVajc=q3|JpiJWZ!~c`?Ym|2G9KL;v5&3~IfT_RY>Bc%sM8w+ z5P3se_I1P8Llg5sMJF_?1&YhVmpWN|)c-6+agDt5m>`DTSJ?}^eaFMUBh4L~_IH#q zn!Cpr;_5xe`Y%-bB+qewAITVn(DGQHU1rKpFTF$DG>79iChl*JH*Mzo5Ihh~uL=^8 z9r6w97Hu(50RW)x8*n}Z#+X;-6ttc`%lBl-j*pi&WIf=}=3E-7K^*DD-xLX3DM`m; zo0!R9;2^9D>#@05AdDAcS$<_V4LOseTXIQ!n@EK=`KElX22Pu6-KLCgto@AG$L!D} z5gJu8Xjp*UVuw6DAIOpxy(ElSiy4wNi#5Qe9<7<`Gd>W5)+G|OgevfS!?*YPs*z(y zzq8)IX<<)>oK;k%{QvP90dHO82diePf>f`_2R91ZNFhvWbI1OTIQPlKG4vwl720&B zHl`{?5zp7;mKnG#_T8IurqBjcry|!zH}atWggR<&$Mm#S^yn$ObDa|v$kaAE*P)M)qO7VTbA}z($p*#)t%}E;ZcEERjM6F zXjBw8mFp@zy8c`kw_;M^?X{T%NJF3fL{_Cf<4rjbyvX06jfx>c~F-)8N_{v?R>B-_H{q1 zw>E5^Ablpb8qz%rD_yhPv?TVj(Si)s=)tA{=yV52_Y!)GQa6KGqko{=WsFwM&*h!_ zNI|NxD^)pm>{#;)KEOKPWd%ae!Y6g6UNkqfX0GMi3Vhgc@dJbAj{iQ1kBXS^E;{vt)l`6GvYNlSyS_365Hz1Gg5^Yz5-C2pX7BYgL5 zDdp%CISuBUHksCI&&+SCG33I{J_J;{zwBrAB{_848>6DotugCUQyK_L?LG(NQj zYSKO$<_zU4d@`cPD2T7kKDUCpR&$qu(gP>+fKG&Ho*-u3$5VieHil(>20i=N*_e0r zgKr-L@Ej{wGuJS*?VbxTKwM`=AQoou{_{c;mli=pRbvag&LN^x4)AV)qI? z=aY2%@KlztOvLR#<~i(f)vL-q1bjg}{jISttHx7{1+AAW&aM~=S<>T~7#SO{u~vkO z4=B#39pPJS!n6m)&IV)$&T^GwCAj3d%3#`49=gJ)e&&74RK=f zrsIcyUgv*&Qp=Dlq#}0jby@nMJrXUg#J;dWP2aRWXF8^@uif&sl71utyEGUL-_Nq4 zs-hCPJWPKS(=`L&A*xFGj11l%Rr-<&Il5Xt1dJA_g*jMCzfIGaQ<{9UCtI7Jv)1Z@ zy2d_Irkyjs$w%j`f`W6ivLMmuO)TV#8oXa_A1QJM6#Gn~5Tp)5>AiHG6$H+}vq1)c zuT}s8W|ef=U%3g!67_>DLo!+0^csRuEjH!>V~V1$U;?gy;Q z2v_Q+#v^?OdCJz_HZ@m0r^chY%ZnB(kX89M3u2o~IAltC`W=+kM?X;4#w#QwMq-*R z7hoSIWAfYhJlrmMcEX#YHde-2~k z(^sJ*w7w9(V%ruPkPj8OBZEo`o_aMV-av{J61(1>kvd0zyVPrzGinY)nlT;qjJ#*k?b{vl3H8e7Ug?I)D6_4C*LpP~fH$+lMaSm-O-a7HJ!K z$^8+2zcx_KaD^zXoDBub-dsTm3CR>KRLw0)Xm_5NRnJ|Zy4D?Z13#`|YUJyGq{z;d zXP%&-#%B>_HfQ%qj6Nf@tfQH~#(_)|g$oP?C#T0$f zxcodbpIvsF2W5~fBFJ!gP-S(o z)DD>-pC%)e;EnYga_)VCp5_c>7QIxVUfU+MUFq7}T=yB+t&=ikr+=51s)c}+w@y#~ zRAYPhe^Ldkw;m^gJxON0kJG>#>W!7w{WlP?{@Ck?Y6MNO?ikUJmZ{+ulOY$dw_MU5 zPU2rQ7H%1;pqn_ofn?Co44wvan+RrUEneUMyp9A%i9gZieQ=J^HwnN8|~#C zJh4xP)<-*d!=xyXSeGoRi4-l9#nRQD?Cgid59Yi1X`Qk-2-U_1=EP9X30JpP>rxzA z-I-$E_3b0gQ?Ja&4%mGd9c}}Y&iG!aN`0>wh=qaZwo-D&#$vEI(6|D=_D&cPn)OQG z3ie}4&44{q-OkZD=`}qvAqf$5`{%Jf0~ynneAO`9$)`QhHv*tu;m8x!6{=PSfn#iNx&pJ7UU@FnaCH@l zhNM;tGmt5ASmQN6Nn)*Ee^QKUQ>|5&q+9N4sLXrqomiLPrr6c8=fk)>IAnaRRnUoD z{jvgbf~YTFe!Awn?)VW5#XS3{y1Fz7fp z^(z9nKZ#@Au6r98#5 zv8NqJh)JpmHIv;@hFuy_h8OQnLkNKqcJ%lK%7EwPAunkhL4Ln|Mz1AaTHY2;pxYid z+w2UMU3cg6^6{xkXW>XrNqK`S62lGSOeO_O+}9^+F-GEA;?WzENw^e^EKQFJJGiv2 zExUJAJS_W2W;Mw?p*ajB344tlEl;OkoJG~rY5=v$a_4UR#`}I)d6_Ta03CLf0FrhM zpmZy-1cH)wZD@Zd)Q--4q)&yJ@9q?5%VPu=1BIP-UzfA$@hYMsN;4CofTH34+$y0= z=9PJiuBI>cEp5|cB-&)0{$=9f%A-}fCg{vt?LCEn|CrY(f@ z!u`^CYKX^36%6Z`&giz>pJp=pj5wV?e??W2Ah1aQhh9E!fkQRNr_`*0N~WkY=5bcV zD0r{IB~sQJ%bC00i`4FmtK67!O`~7B6Ix)&5?6u!9P>?b1s3EynLapKLofTI>9ofa zVfThBc39};Aty8sIdi*y2_)2W1IkDS(lFc4Pghg4ej43Q70Fv{9xHo;SuP%uSv|2i z6=jIIWUI#>SyoQ{l4d&#%JWeDf-1Cxim36707{e#%N@NmdY8I;^@Ks%xoc^}Sl4f+ z8v~7xPmHps8Px)Tj^qUz+>m#gp49sF0?WFfyL0YO*gXq`vaIH^gk`(Msnkf*`05R6 zwl8>>CA#ov7-IZl6}M_MpQ*=yw$rkj2k5UFh~8P z9RW8i$Yk)eD!0mLLm8Bb2V*LwZ^Gg^km&Xr?;ykBBV!OHriEvl3$V8E3KZNBckf;z zAE?zhP4-Xp95EVK-@~>}KOXWjinc#~z$zb=#UN8MpedlshnbHUE;Z`PNt%k2aLnN% zc%YTV8=ZR%Y+612i4yw}8e zIbH3cQ%SRy;BC9vIl6Sl%~_hwqwgr2xV@Tpy27y3Xkc$+!g6kF#?=x_hlMS*=`1Z+ zh&y`~_u=_o@sbpZCD&o^gk~?tND20O`t3YTXX$NBR*>V;{M1(YP?fj;`m*E8y2FCm zKHV76@miK_ZF~L|S)y;ALu6O}G_SrT-8BA-HU>`8t@mC(Q zc{;r{sN4SF^x~eHYM5c(qC9IdX}Q9$_V|Qw@4LQ|)e%p2vMW9(<~cS9LtOYepVQ0- z5$F9ZY!|WQ3()|VI_Tzbp?PP4whk+IR>vIg$f>25iRBg#I%&}o1H*b_=((8Fs6JrYSY!fhXfytmnGTQlB!z(!1`28yhpy)n)r&w^!$H**n*UI~@kn~P!Y z`5>H)=>~02Kj1S)X8kz}#$RuQ9YQRe7X_h`{QRr^y?Ww9D9i#JF@grI5bU0da_-X^ zYk6)9Hm>!cjmXWeHWp?#^zqRqDRNeUvT%R3(FM#P4>8MD;@zldJv5t`e?Bcb0@|1QJP7AzcWo0tn zKz|@f)pRo6+6-9k#;ng65Wql{OM;krYjVrK3S@a-{irW*#ZcE9EbC!NCpEgKUEPxs|8!o4kI#*Y$gk65sarbhS+<_fe`~n@i%dVR z8{E8Ls3N@yCs!Q2w;fK_uh^GjGbl!GW>ElX+r@Wph7F|cy}REgth-vWLB@IAo#rPz zHkndox#d~J8Pvkm-w(2FkhY+9Q~6D>9}6B#DiWLL-Ax*A77X|h>8?D2-0KYy)%W>+ zA)15{@5ydk7!gxdp_Iut@{`Tjr0=8Ypc(?lGPeuS;9UZ4Pw0u`%W8?B& zmUPe!n7O%D5~CC7=4VlLMRZ6(_^x=X)d_7;uVO!LgQDZfaCQGH@iUJoND+SF1WF>i zw@H4i*AMDxpL8g_)3T2JNw=*+^ArFPM>nDRLU^U=my&`LGtX>E6qqYS3B|QwKrf5d zbVa~KU!i^2kT;5u?=+|CL0a@{#1>`cL4uXNZ;~N1slN8j#8+72BG4Qptgc8Pbib1* zlQzQV#X8H=Y=a>mp?IHZiRjClM~72su+^k(_U5po;(_Z=O4{70wpB%KFXT0rc6_^7 zcPQLEK?w5L8zm$E8eyf0am8xinEbLj;ncfCceSq)M0YaluL8aTFX1eAtWzeOZ!}+e zg)|8Ic~)Pj(xeCThOtM2cD8=KG`@+^I(9~I*^|Zenk^-9sdx69g8F2%c>>P!E+`?1 zOz6$+T1rBdDw)AW2V;RA`ek!fh2_uqkSq02Wi$1^&W@v%ys$}GJ@&is9Gr{XUE1@U zoJucV9p=24=W>^wo63JjT;(()`w3Al`1EQo9u~I=&Vs zrg-YqsZZCdHKHpMmVIXQagEL5=5J^wbM@hRvKVjRewi!};Z9c^0_`z*8S0bYjvs(- z=Ye2k&f|`1op(N80t9Pu>cYna321aQr?dyFS!6f8r`#q8NTb?hwy&4;(Q&_dyy zvO*DLTtQXlVs~bw?Jzy2Kgjkn4Txd%*?gW<=2{{X3(}!_rOw{z+%3IXT3U9fCgGW; zh??9Ev@avbD8U-9Jj{1XylinF`#wC%z(=Dtz*`RGV7hl3037N$!4O#HoJwQ;^#VgiAi| z)N%ZlyKkSKm4~?xdtf+=Z1poD)c6_cLyUi>s6O8J{rZ&x{mx*sHp=tEznS>G`@JYX zompXT?)(A|?jkzjx~+QZdDG}Z&~1`hwLxXQdW9c9s$F%OABV@p)0>Y%)|W~e8KMj= zZFT)->8+6pD1UXM5h|1-$QCzqp}2dsPJAlCF}ww1i;NOacXc2Vy**W?-eR4HV;JtI zsjxbVn&vs+n9VqkIi7RvHy!n0&aSC zi`L(O?;WEzYz9tC%-sjUj4bG)HQ+L@f=jh+S)AV$+737BXzc3Gc=}|u;c8OZOspV% zKm~HhM5Ff04^E^K=!A6K+y&23w%|N74-k8E4bCVinD&lkmyAS$h$p9HOn*fNc|*AB zE~9{+iI8SL(GBp)L_}k=9k2OE4+z;(i$rhw8I`$ZQ zQsTl-zr9e-;(2)Z38j!#zfYgW&+04h{oAwq!%ZXqpjwN=fPz$aT0|}0dyD$GoS(m> z(>x!zT|ga_Q$OixA#Jgg;olln$&tEWimadrCaw$At16Od@n@?nzpLIp2wE|SKCAQ& zU;LOBZt>G}EcgXnKTkyjjoN1mkUr|DWzHylUf|fo#h1|NS2&5a&Iwp)f|lFhyYW0} zu@0eS&9#Bh$#kE6rohP^uv=$!ZOAS$Tad|q4zypJ>_Q5udLo-Ep*JnTLoY}Yd$ORa zu%a&H5fuheYvVcpgou0#t$Gw{8X%<+aynRY@}tu7?eb>VYCvI z!ngu4@s;aqS!5){qbk#H{s2+8*qWCX0fmX1(>E_Pl4t;MUfXio=NRVM2~mJy8v@BJ z-ULX-0dVTwNi550YB}3Lh%viFGWe|oLW}fS-!#SPvJ3YVWydHn?`p(Pu zo_o3O`?{{r`??<*(eTeOOm|lRD6Gd!PLYb{de_;$LJ~>u%CX%SQCmkhr`tq!FQ%Nu zAu(XFijVl`O>c2Qe(#O_{UZkhdERPwSi~LK5U8u8BVW@G=i#1e700M^1-1{qYJe9X zDP?gXGR_A!ZdN=;cGIB8#Ob}5);w#0shq+y3F5PvhdXSeM?Y=%^l5d=%XrO9BXY~I z$0`zBz$O08fvoN*|l@^3m-{1UWP_ZPHpy@)q21<+p=2D&1wfSf(G=#ri}X#>iW%u0Wle?j@%oY z3ef{QGqFk_QRF+mxZ?Y z=WSEmH2@;~QJHz65fMAuy?(JKD&z4WN2<%S;mym0Oh~Io|IiE5T^#JR?%yN7R0m0h zPp+xUz=lW99dwL%OZ4iezJ-DJO>AqDj36MJhZ%Mhd&N#30)oJR^A|^jFmJD8Q;Q zt#S=Oic2;kL6#Hi&WB$R|CP55|WuW{;noP|1 zI0|2A|LL%NEM|mj{yZgAn9Yl_ycyhw*#f5Tf>%MOGw*?2GS%0NX&P33An>9nl)n;v z?wlAusy5N}@j&^j2qRPJ!ggi7;AI6C5K=VQTu5;bP}}b0l-`**HQe)tx3VTh*p+1N zaRaDFJG(Wf6;J&3wc4c4wni1z&Le~0&KsDJ*axgOH-T%zG|e)QYcN@oO0c6QufvhA zy{0YSnuB|Z<&0nNzG`9kR{BFQ|LU&1)jx`*Eso#!W*EY>E?ix^M+r2%L(f-T^>HPk zZ}y1plYsVm*DOo_0N`O#x=Ub6Nw#UO9s;W)Ji@D0yfF?Bp}rlGMDo4LWluu>D&{wof{Yw0M%zF2yCqzjMb09 z6x9`@B-$M}%yO~HH0Vv^toWv^*0N>nCS?F&%V#K(a05jcWcAQDt0@>7rpWV4X44}E zs@B)(G2kj_a}ixMy7-b!-*1@5Pvq+y(ndkDUlpU;Eb+z}<2K@*Q>r?+Iu%6c9y$W)f8*|1)?1znX1?J3oqv z;+(?MG^@5M%Vg&>ymoq@&t3?mVGAAQ>0V&=wH+O^T4vvN2UkM50+WE~Y^pLSVDB#n zWEO{&c$_6{V3JMt_u8b6!}6+C2yw9QNoE=DeEhgc3WefvySM00b^yXc3GqAr@5a)R z6UH+8WLkZFJ9CpyxPANc%-61DAQ6m9`%QwE;0t`YIXp&M-^3!aDO3}IQafH%uX~L% zE7Ji@z)vwYy3~|emZtB3!J;Pq^1Dx>R$-IsIC%U;Ikv;X9<}%w678_l4pW)?734vt%rq9C>cBHH@BxtMu z0zjjRN#};sM=N>i;~NdBy__U7EEFynupyUp%h5!p>BcX0-yx@4Tf{CZ309Lfb98`Fl$d65OCPLY`{f8ne#6C{{{Z%m&ftbrO0~vT7uzy~Q!r0amA0 z7}yf^XGVkL+3ML%hXx)(=8cD6y3S$hb!bIe>M4ey$7>hj@K zo|#{rid)(N&f)C5yHf_LvUAdwCVdGW_ks!BUg-xXA%O?Nn~8_8iuNjY%8X_Ur)(5; zN4YMyi=J%y{3yO_#EH?B7mS1stn;|X=`@nA<0hZDn);qbB{qmxAk1wtv92?Yp|7~} z6sc}Yx7L`JRy--}oH^G!3;8U6t+36`=gdgMCD}}pfANTzuJqpFunTwHoSIzpf1J_OS5|m69Wv?edHe#m4;7mz-0ZR;Pd?YOUJ=6`OFc~&rz!ge$(sro)SNUB1*x-M4qq-I3Jo|LBK=dv4g%ngra7FO97 zs0GJfdOmm8kHRV6t*k$HDc=o_G5%=+x;bJmH8O@Mml|JAPW>wSDE>svdJB#`vbP!9 zP5teGex$-c?OgC3nI-r5aVrJj0K{7NYlr%5ul>CI71;~-K;Xbt^j|J^DL!4OU?!sS zeyGqoTKATb&D>WReE0<;3jvD2!A-x+8Qc6EvWoX!{ZTdKcGECh+{&%lW6x`?eGAEbpwvRaTJ;V<1HnofL{~vp4 z5XbIIz?@tDQ-7apsMyKqt%x8&S9L?~?wm_w^HPh7SE(^-v1(uJkvdsNRpnN0IrSCX z#W&cWL1Isdm0ENnlfgPmb1qDyf9jCG9&YA8w*}AD1x0D#u8FXn>f%tp;<$Ih^nMjI z?Ij!3U{;V>{lKd(c}H&5&jPsqZ{6^>$pRIER;4w~cAmb^S+m^LZ1AXYnE8ja-VF<9 zu>bhte{AIzZqAFUqY1IGlEbYcyC9zpK||%!IBfFtI%M@CC7}?Oa4_-3i~TIV{TDeO z9fPF(v@So)pO^&=FF3!TJFD^g$JO$~2X6}xW~^X!GlyIzU?v`PV??Oc!5$ntI@IP5ta&wrgt9x=z3lyS^!6V+ z`mYag!U)#zM(jFqK3+Jz5~Af8{-=jEp<08`l-Q^Rm!xF~0te#S^&Z;JJ)0MLev2LM zfEG(EeI)d+M*Oxjm_1n^U!?;ugST*l?eS+n2B`46od!4ll6}}!?a@NDn4rN3)XOMT|usVkp?a|6?#Au=O`g*!f`G2%JLP`kNoN z^1;1RAuY73RCo2xewf<(!&{awOe8)Ww0hg<;~eb;6Zv24wSRo%pdiw_YhrZ1rEEGt z?n2lsn6@xoaA%S2V9@5b?(elvKMofD@l+g{K)Jk`-`aK)k*WWs@u0X6dpal0?sQ$h zYL#^on7e=VJ(h5U$bdB-uUX?YuR`WyLbq75H@V(i_;=TnfZDStaW85yj~vv!|LD=y zmNFHJVana=S1bVXN$D24Ywa5M($CE85*Lqb_w>}$JC_E~&Hd0&L^L^(wIM28kX-Vl zxtV<|K9t%J65g=BEZ~VPfrtBXPU0z&=0#Ci+0)d<^mGp$vtPK%efs*M%({z3Ie1`y z%^5cE1+3$EymQb|#(Hf_If`Hml^_*zKvv-m)?F~BQ{Dp&Fj=w3&(|n!HBA;ZrA~}6 z=ahK5j)$oPHG)pO>vos|d`G{I1T_TttL+M)eIiEKvhoI|HGq$wun8Uv74osC!L4*6 zy1Xy{PVShJ6xOL&aqT7w0(jy!s*+scrC)pMcFiiTFHiQ0;>)hFy@d2!N6EHlB{TX0r;uxN`sGkzm3BS2|kGWzBzK_ zXU&SVz)i=O5b6=Pt}(sX>*>TFe%*Nipr-}~Vzxh&9Cq3l1u~=};K3AJPn(J0ka!e5 zB>cY+B_mLyFF4^?-0|o^0Q*9`x10yRS@bO;N34o_Qp+e4Grr_hq@{>ENK$Fx`>KTCW zmnVXV*r418g(`Zf#JP+1x7ZVJ8=BinmAahv&qIH1!>{}Pf?DF}L@M`kyc#VA7h_-( z)a*%-+{YrH0C<&Z`cp*4$L0*qU2lnjM7|q_bs~g%Lyj+pU1JnrRjNPJ0PB|+c$f1P@@a&S5HF#s)`Y&k`z#a2#Lu|{`@+A4k*Ea&M8wD zmuLA78#hvTTCX4=)jn^T_k%QITbo%g{lT~+mno|d=8#aoS3$!~mN~G~umX&ux>&63H)HsE7YsdtZgU7X3!I&LpxA=Z zft}ZVY2QnNAdYRu$r?T-Dy`!4A?79acErb$ZXQ{n!NisR%wcv;6^zV@9@D1;ZsX<< zyoa!*BxzT&qFK`9=iF{4FkIP2sEyw2+Bg^j1ec`6M6B|AuIf%!1fON9a&$N-cfhX8 zdbMS}ju{0HkTL1)uyD%NhF;)Yn|5CxbJAy(Y3;8ZwmV=;Q7q#Sq*`y{6lgCw=glU= z8ci{4lC!LLxKP82BP$jO`KO%T)i)id5FTwX_;JAF99c2lTA)g=)MFunTIQB6DG zBnfs#JQlZ|gPNQwWaSl-#-ux z)^BLyREd#IBL80wNWxn!4P|Tp#q2_re z^GrL_;~c=NwgGROX!*73(7+O}vU-(o8>0adg5R(sa#5Op@f6T`PA%iX;XPA9qxdoQ zOvzWcuHB(`O;q0u=Ej`0&J4!|0o(TCh^N^6++<&0-)AzR{848O*37hKc*FJV-yM<(g_=Mgp+G|&(+n!+D5-e-j&Q&BVGgHz zWa=Nc@*q2Q3sZpeEcnzqdQzb+b9Y*Wb+N3%YWlHw*a_5CV5|!5L%JSyjc!|>qgg@M zDYstYi<7EkTAw$6c(xTmG=;d&Rj9#Maml$Ll&)jsiBSgg^PioNV?aK#HGx<$(Ra=PA7!Gi3gyi7V(1Wi)dg2Cm)7Vw?ZC1!qRXe&2&&Y=P2DZ@RD;%I8~|hnxWl9iJ3gi7;fO z5-I%OmtST21(gsckUFZPDy^A-cr(lZ1Q?%&islgs#Qx>5dn~-C4FmFhT2WY z$xJrOpj>aa&xDBFI(Z^v$K+rX<@_O$gP=VF7-!H~GGu?!$S3=RhJwtjv117^q^cUQ z3ef49@8I?vS+e3b<`E^J8tKA)7`alitz9+JYlYREv>3+^3|bUjhpph4KZ+l?mBv={ zq)a$<8}cBJl<6iF(~?ge^?mrmFVEgHpmZlrOTNFc?TcKc3Lu$D6#MQgUuVk(4y}DA zRFV6@35qOqDux@7R$9tkiaHdb>>?baq@?udwM@tX%|Ti|G|9rCmPt>hAr`Z2&_8z| zK9dkH6vMjImI|{8Ib4jZWU33%sbC?IdE-fO({nDY?!%lpzLoV#;`q(nfe}<^yNYGK z$=e0ob5teM?9H5u6`>y1Dtl876emHPJ@IubH9H8Wx1qY3?6vG8sr#-Iz!n?1-@3e5 zt;2LJZ29Wa#+R99S+h~a&khn=uX)B{j4E5>J`a67{R3J3k9>^VNJJ{c)4W*%X$Wq5 zEz%Cttr^!6gMrKt6S75_iIZYk$hLpVmijTd&G7v5~S2aT_& z{m^@AvGpYfHE~$EN(ef2P3P~xc~qF literal 0 HcmV?d00001 diff --git a/playbooks/aws_disable_user_accounts.py b/playbooks/aws_disable_user_accounts.py new file mode 100644 index 0000000000..201b4a0c54 --- /dev/null +++ b/playbooks/aws_disable_user_accounts.py @@ -0,0 +1,183 @@ +""" +Disable a list of AWS IAM user accounts. After checking the list of accounts against an allowlist and confirming with an analyst, each account is disabled. The change can be reversed with the "enable user" action. +""" + + +import phantom.rules as phantom +import json +from datetime import datetime, timedelta + + +def on_start(container): + phantom.debug('on_start() called') + + # call 'filter_1' block + filter_1(container=container) + + return + +def filter_1(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("filter_1() called") + + # collect filtered artifact ids and results for 'if' condition 1 + matched_artifacts_1, matched_results_1 = phantom.condition( + container=container, + conditions=[ + ["playbook_input:aws_username", "in", "custom_list:aws_inactive_user_allowlist"] + ], + name="filter_1:condition_1") + + # call connected blocks if filtered artifacts or results + if matched_artifacts_1 or matched_results_1: + indicator_tag_4(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1) + + # collect filtered artifact ids and results for 'if' condition 2 + matched_artifacts_2, matched_results_2 = phantom.condition( + container=container, + conditions=[ + ["playbook_input:aws_username", "not in", "custom_list:aws_inactive_user_allowlist"] + ], + name="filter_1:condition_2") + + # call connected blocks if filtered artifacts or results + if matched_artifacts_2 or matched_results_2: + aws_disable_user_check(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_2, filtered_results=matched_results_2) + + return + + +def aws_disable_user_check(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("aws_disable_user_check() called") + + # set user and message variables for phantom.prompt call + + user = "proyer" + message = """The following AWS user(s) were found to be inactive:\n\n```\n{0}\n```""" + + # parameter list for template variable replacement + parameters = [ + "filtered-data:filter_1:condition_2:playbook_input:aws_username" + ] + + # responses + response_types = [ + { + "prompt": "Should those user account(s) be disabled?", + "options": { + "type": "list", + "choices": [ + "Yes", + "No" + ], + }, + } + ] + + phantom.prompt2(container=container, user=user, message=message, respond_in_mins=30, name="aws_disable_user_check", parameters=parameters, response_types=response_types, callback=decision_1) + + return + + +def decision_1(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("decision_1() called") + + # check for 'if' condition 1 + found_match_1 = phantom.decision( + container=container, + conditions=[ + ["aws_disable_user_check:action_result.summary.responses.0", "==", "Yes"] + ]) + + # call connected blocks if condition 1 matched + if found_match_1: + disable_user_1(action=action, success=success, container=container, results=results, handle=handle) + return + + return + + +def disable_user_1(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("disable_user_1() called") + + # phantom.debug('Action: {0} {1}'.format(action['name'], ('SUCCEEDED' if success else 'FAILED'))) + + filtered_input_0_aws_username = phantom.collect2(container=container, datapath=["filtered-data:filter_1:condition_2:playbook_input:aws_username"]) + + parameters = [] + + # build parameters list for 'disable_user_1' call + for filtered_input_0_aws_username_item in filtered_input_0_aws_username: + if filtered_input_0_aws_username_item[0] is not None: + parameters.append({ + "username": filtered_input_0_aws_username_item[0], + "disable_access_keys": True, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.act("disable user", parameters=parameters, name="disable_user_1", assets=["aws_iam"]) + + return + + +def indicator_tag_4(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("indicator_tag_4() called") + + filtered_input_0_aws_username = phantom.collect2(container=container, datapath=["filtered-data:filter_1:condition_1:playbook_input:aws_username"]) + + parameters = [] + + # build parameters list for 'indicator_tag_4' call + for filtered_input_0_aws_username_item in filtered_input_0_aws_username: + parameters.append({ + "indicator": filtered_input_0_aws_username_item[0], + "tags": "aws_inactive_user_allowlist", + "overwrite": None, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/indicator_tag", parameters=parameters, name="indicator_tag_4") + + return + + +def on_finish(container, summary): + phantom.debug("on_finish() called") + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # This function is called after all actions are completed. + # summary of all the action and/or all details of actions + # can be collected here. + + # summary_json = phantom.get_summary() + # if 'result' in summary_json: + # for action_result in summary_json['result']: + # if 'action_run_id' in action_result: + # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False) + # phantom.debug(action_results) + + ################################################################################ + ## Custom Code End + ################################################################################ + + return \ No newline at end of file diff --git a/playbooks/aws_disable_user_accounts.yml b/playbooks/aws_disable_user_accounts.yml new file mode 100644 index 0000000000..0df08ea690 --- /dev/null +++ b/playbooks/aws_disable_user_accounts.yml @@ -0,0 +1,21 @@ +name: AWS Disable User Accounts +id: fc0edc75-ff2b-48c0-5f6f-63da6423fd63 +version: 1 +date: '2021-11-01' +author: Philip Royer, Splunk +type: Input +description: "Disable a list of AWS IAM user accounts. After checking the list of accounts against an allowlist and confirming with an analyst, each account is disabled. The change can be reversed with the `enable user` action." +playbook: aws_disable_user_accounts +how_to_implement: "This playbook works with the community playbook aws_find_inactive_users using the usernames discovered by that playbook. Change the prompt block from admin to the correct analyst user or role. You should create a custom list called aws_inactive_user_allowlist. Any user names in that list will be ignored by this playbook." +references: +- https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-finding-and-disabling-inactive-users-on-aws.html +app_list: +- "AWS IAM" +tags: + platform_tags: + - Investigation + - Cloud + playbook_fields: + - aws_username + product: + - Splunk SOAR \ No newline at end of file From fd0def1d7de3a597decc0814e4a283c327471b91 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 12:44:35 -0600 Subject: [PATCH 04/16] TruSTAR Enrich Indicators --- playbooks/trustar_enrich_indicators.json | 328 +++++++++++++++++++++++ playbooks/trustar_enrich_indicators.png | Bin 0 -> 589743 bytes playbooks/trustar_enrich_indicators.py | 210 +++++++++++++++ playbooks/trustar_enrich_indicators.yml | 22 ++ 4 files changed, 560 insertions(+) create mode 100644 playbooks/trustar_enrich_indicators.json create mode 100644 playbooks/trustar_enrich_indicators.png create mode 100644 playbooks/trustar_enrich_indicators.py create mode 100644 playbooks/trustar_enrich_indicators.yml diff --git a/playbooks/trustar_enrich_indicators.json b/playbooks/trustar_enrich_indicators.json new file mode 100644 index 0000000000..06a41bb7e0 --- /dev/null +++ b/playbooks/trustar_enrich_indicators.json @@ -0,0 +1,328 @@ +{ + "blockly": false, + "blockly_xml": "", + "category": "Use Cases", + "coa": { + "data": { + "description": "Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as \"threat_intel_investigate\".", + "edges": [ + { + "id": "port_0_to_port_2", + "sourceNode": "0", + "sourcePort": "0_out", + "targetNode": "2", + "targetPort": "2_in" + }, + { + "id": "port_2_to_port_5", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "5", + "targetPort": "5_in" + }, + { + "id": "port_3_to_port_1", + "sourceNode": "3", + "sourcePort": "3_out", + "targetNode": "1", + "targetPort": "1_in" + }, + { + "id": "port_5_to_port_1", + "sourceNode": "5", + "sourcePort": "5_out", + "targetNode": "1", + "targetPort": "1_in" + }, + { + "id": "port_2_to_port_6", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "6", + "targetPort": "6_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_6_to_port_3", + "sourceNode": "6", + "sourcePort": "6_out", + "targetNode": "3", + "targetPort": "3_in" + } + ], + "hash": "429eb175623d7202cbfce355d56512786b3bc52f", + "nodes": { + "0": { + "data": { + "advanced": { + "join": [] + }, + "functionName": "on_start", + "id": "0", + "type": "start" + }, + "errors": {}, + "id": "0", + "type": "start", + "x": 190, + "y": 0 + }, + "1": { + "data": { + "advanced": { + "join": [] + }, + "functionId": 1, + "functionName": "on_finish", + "id": "1", + "type": "end" + }, + "errors": {}, + "id": "1", + "type": "end", + "userCode": "\n # This function is called after all actions are completed.\n # summary of all the action and/or all details of actions\n # can be collected here.\n\n # summary_json = phantom.get_summary()\n # if 'result' in summary_json:\n # for action_result in summary_json['result']:\n # if 'action_run_id' in action_result:\n # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False)\n # phantom.debug(action_results)\n\n", + "x": 190, + "y": 684 + }, + "2": { + "data": { + "action": "indicator reputation", + "actionType": "investigate", + "advanced": { + "customName": "indicator reputation", + "customNameId": 0, + "description": "Query the Indicator API in TruSTAR to find threat intelligence scores and attributes about each of the indicators passed into the playbook.", + "join": [], + "note": "Query the Indicator API in TruSTAR to find threat intelligence scores and attributes about each of the indicators passed into the playbook." + }, + "connector": "TruSTAR", + "connectorConfigs": [ + "trustar" + ], + "connectorId": "536ae6e0-72b2-4ae1-9520-810acaddd2d1", + "connectorVersion": "v1", + "functionId": 1, + "functionName": "indicator_reputation", + "id": "2", + "parameters": { + "indicator_value": "playbook_input:indicators" + }, + "requiredParameters": [ + "indicator_value" + ], + "type": "action" + }, + "errors": {}, + "id": "2", + "type": "action", + "x": 170, + "y": 148 + }, + "3": { + "data": { + "advanced": { + "customName": "tag indicator with priority score", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "indicator_tag", + "repoName": "community" + }, + "functionId": 1, + "functionName": "tag_indicator_with_priority_score", + "id": "3", + "selectMore": false, + "type": "utility", + "utilities": { + "indicator_tag": { + "description": "Tag an existing indicator record. Tags can be overwritten or appended.", + "fields": [ + { + "dataTypes": [ + "*" + ], + "description": "Specifies the indicator which the tag will be added to. Supports a string indicator value or an indicator id.", + "inputType": "item", + "label": "indicator", + "name": "indicator", + "placeholder": "my_indicator", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "Comma separated list of tags. Tags should only contain characters Aa-Zz, 0-9, '-', and '_'.", + "inputType": "item", + "label": "tags", + "name": "tags", + "placeholder": "tag1,tag2,...,tagk", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Optional input. Either \"true\" or \"false\" with default as \"false\". If set to \"true\", existing tags on the indicator record will be replaced by the provided input. If set to \"false\", the new tags will be appended to the existing indicator tags.", + "inputType": "item", + "label": "overwrite", + "name": "overwrite", + "placeholder": "false", + "renderType": "datapath", + "required": false + } + ], + "label": "indicator_tag", + "name": "indicator_tag" + } + }, + "utilityType": "custom_function", + "values": { + "indicator_tag": { + "indicator": "filtered-data:indicator_found:condition_1:indicator_reputation:action_result.parameter.indicator_value", + "overwrite": null, + "tags": "filtered-data:indicator_found:condition_1:indicator_reputation:action_result.data.*.priorityScore" + } + } + }, + "errors": {}, + "id": "3", + "type": "utility", + "x": 0, + "y": 513 + }, + "5": { + "data": { + "advanced": { + "customName": "format note", + "customNameId": 0, + "description": "Combine the TruSTAR results into a note to pass up to the parent playbook. Build a markdown table of results with links to TruSTAR queries and select fields from the reputation information for each indicator.", + "join": [], + "note": "Combine the TruSTAR results into a note to pass up to the parent playbook. Build a markdown table of results with links to TruSTAR queries and select fields from the reputation information for each indicator." + }, + "functionId": 1, + "functionName": "format_note", + "id": "5", + "inputParameters": [ + "indicator_reputation:action_result.parameter.indicator_value", + "indicator_reputation:action_result.data.*.observable.type", + "indicator_reputation:action_result.data.*.priorityScore", + "indicator_reputation:action_result.data.*.submissionTags", + "indicator_reputation:action_result.data.*.attributes", + "indicator_reputation:action_result.data.*.safelisted", + "indicator_reputation:action_result.data.*.scoreContexts.*.sourceName", + "", + "" + ], + "outputVariables": [ + "note_content" + ], + "type": "code" + }, + "errors": {}, + "id": "5", + "type": "code", + "userCode": "\n import urllib.parse\n \n note = \"\"\"\n| Indicator | Type | Priority Score | Submission Tags | Attributes | Safe Listed? | Sources |\n| :--- | :--- | :--- | :--- | :--- | :--- | :--- |\n \"\"\"\n \n for item in indicator_reputation_result_data:\n if item[1]: \n # for the first column, use the indicator as the text and the trustar query as the href\n trustar_link = 'https://station.trustar.co/browse/search?q={}'.format(urllib.parse.quote(item[0]))\n indicator_markdown = '[{}]({})'.format(item[0], trustar_link)\n indicator_type = item[1]\n priority = item[2]\n submission_tags = json.dumps(item[3]).replace('[', '').replace(']', '')\n attributes = json.dumps(item[4]).replace('{', '').replace('}', '').replace('[', '').replace(']', '')\n safe_listed = item[5]\n sources = item[6]\n note += \"|{}|{}|{}|{}|{}|{}|{}|\\n\".format(indicator_markdown, indicator_type, priority, submission_tags, attributes, safe_listed, sources)\n else:\n note += \"|{}|Not found in TruSTAR||||||\\n\".format(item[0])\n\n format_note__note_content = note\n \n", + "x": 340, + "y": 506 + }, + "6": { + "data": { + "advanced": { + "customName": "indicator_found", + "customNameId": 0, + "description": "Filter for indicators that were found in TruSTAR.", + "join": [], + "note": "Filter for indicators that were found in TruSTAR." + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": ">", + "param": "indicator_reputation:action_result.summary.indicators_found", + "value": "0" + } + ], + "conditionIndex": 0, + "customName": "indicator found", + "logic": "and" + } + ], + "functionId": 1, + "functionName": "indicator_found", + "id": "6", + "type": "filter" + }, + "errors": {}, + "id": "6", + "type": "filter", + "x": 60, + "y": 326 + } + }, + "notes": "This playbook uses the following Apps:\n - TruSTAR (indicator reputation) [asset name = trustar] - query TruSTAR for threat intelligence\n\nDeployment Notes:\n - To use this playbook as a sub-playbook of \"threat_intel_investigate\", copy it to the local git repository and make sure it has the tags \"investigate\" and \"threat_intel\"\n- To use this playbook as a sub-playbook of \"risk_notable_enrich\", copy it to local and make sure it has the tags \"investigate\" and \"risk_notable\"\n - To control the types of indicators processed by this playbook, change the data types of the \"indicators\" input\n" + }, + "input_spec": [ + { + "contains": [ + "user name", + "ip", + "domain", + "url", + "host name", + "vault id", + "hash", + "md5", + "sha1", + "sha256", + "file path" + ], + "description": "Indicators to enrich with TruSTAR", + "name": "indicators" + } + ], + "output_spec": [ + { + "contains": [], + "datapaths": [ + "TruSTAR Indicator Enrichment" + ], + "deduplicate": false, + "description": "The title of the note summarizing reputation data gathered in this playbook", + "metadata": {}, + "name": "note_title" + }, + { + "contains": [], + "datapaths": [ + "format_note:custom_function:note_content" + ], + "deduplicate": false, + "description": "The content of the note summarizing reputation data gathered in this playbook", + "metadata": {}, + "name": "note_content" + } + ], + "playbook_type": "data", + "python_version": "3", + "schema": "5.0.4", + "version": "5.1.0.70187" + }, + "create_time": "2021-11-24T21:10:50.604011+00:00", + "draft_mode": false, + "labels": [ + "*" + ], + "tags": [ + "investigate", + "threat_intel" + ] +} \ No newline at end of file diff --git a/playbooks/trustar_enrich_indicators.png b/playbooks/trustar_enrich_indicators.png new file mode 100644 index 0000000000000000000000000000000000000000..dac35bbb91e054adf344963047f707d00a520350 GIT binary patch literal 589743 zcmcG02UJttwl2L$vjIx)pj43}y@`NSksd;mUJ`l_h%^x?f`Ed6AVma1Pk;!aD7{H1 zbm@c+p_do*{O6u`?-*~K^Lt+y$==y}ueG!0T64~CesgZ3bhK0`uFze9PgP-)6 z-@q+v2dFCVgxo&KnBJT^S*lq&?`@krnZo^;|FhGY@UtvVct4w;mEJ9LDJ6_ z51b_%UI^;6Js>45!|AZN@bQB%vaFuJN=rp&&Ryt}hqHy_;Begd>71pgL*hn;<69ul zC5ZR@79|EY@XFeeFJe@c5RFMSlcdd^?mKLDSODV+ue zZCo9m7iF1ujZ!pd$lMN2UJO>Z3~}#^#CH}cla_pvE>|?$eR}7fqef^oAeE7}1SM1|NbMdSeOKPYt{D2tH@r87w#OB^Xw*J6iJThQ#!3r6aT4U!BVUY8isJnG zfFFAII=70`YUn!67V%HaW@t-v?)!nFbK z@o0JD&3Iyt^~spYtrT01>suiV^LW=>2ONp)awuM_&fX_|`&^FYI_~$rucaYRuJJ@1 z$0?a~4^YgLzowz;Y9o$g6(G3x5$D{1vMYhoPn|ICQUFKcZ_g_+wacAuSIG_~=~a)^_|ydV#fGr` z*ki*G&1t>qj#qd8uFOYydgY~&bb-Y@Npe0SpBQHq{Ay7YlOVBGEdOpv7ERMo$H1|^ zxhc0}OuNhUoVj>b%n&jxVHQz>e<&+kq4@DFt&?ZGG7ggMX+DW`4vJE-MBjfP2qZEHt|4Jeo&u(MGolmojL?b~kpEJuV_DY)ze& zgAhKooE(+<@bbPZ%?8nkt4PKRvaNzchCtGKrs;6;8J9!qQ`xD|V75NeMFK-boDh{; z+HIT~>~F8#C6ywHB*~uvt#W+jx*nyG&HjUGqs7yT$&Jg6)Q#PZxh#BCAy9RV^NngA zhoSD(I~m`&so!*{qE!P_Th&t3(sSU}jOEm0i41BzEb8sK^N)8xJNI^Mc5b*cD`#41 zlYad6H0EFr-`aL4KjzMjbCmbWA$pQn;5T?Qc-K(|a}z^}$&HPTjfq9}JYbCK zkxsvxekN(>xq<%r>2|-Vy{QS8rW)Y!xSCVeWOiN7zzXG_jz3Y|%lfxw>T+sGmEgk8 zKE{I10qWJBq2ghezPh3l)3|KAlGYz-IfmJW1wJ~P*=BHAutmWUVd80YoXR7JL@Yb|0)f>8`~v z#P~k)dqn*xAO;oV|C%DEF6L=WKD{A5v#7zndwKYYt$Y>&&zLOC?CP0q@4ddSA>zDU zdTf~zS$FR?=(;1D@E!3nJNNGSx;vdBO(N5t;SQfxfcGc5zB_*y6RFU&&F`v>q^F=_ z5V&O~d)lyN-u=XbcK6}#`^E7t!FLBHMkWu9+xUi!KU6NmtW6?J7LB1WY1=WI@1<8@ z2}Z>*Nf1V=^WAq#>e4SpE=5dE9%y@~T#NzQ8!bz(l6EsqHw_}@<5B=~9%mRIf)&GL zybZjct=o> z{KB4xb}*0n-A7C60-vMfqDOO43)#G@tLVFKlgp@kFNB(c!#p2$zoZ9=h{poT0O{jr zZ@S);v8$_y#RkfDfb?2EQ-9KmJD%T|Gn=WOJcC7Mwcd);jkAqIN&}?{Glnt@>z2*l zn0eHtel_z&_(y*g_nY3cJbaBg8qObD`c#rxG6A20clP!Oc7j8vDPY&6Lh8aGEtxaS zi*h3uFE0={)6cV?|w7I#IE3LGc&S~bdu*-fyY zOIW;Ipq#sd+tF4}U4&JV%U^kqB7;!7p>P57dYk@!fChk^pX-h-q$|`Y#mLWj*T{42 zU0GqvR8&P=VvA@?sIS@SmqP?;Ea}r5L3An%DMC>HiMfYy-;AU36K|;{CVF$%X;G@1 zB?n4U)#4V=jJa7n@Ya)6d%#t(n^5>M1$mHu1u`_r0z6v|hd|wN24|ATVt-X}oXw z*|n-v{U(RW9sh(IZ!3hC96&l7UnT_HURLW)@XtOTRyUhhUUKOPNMz1L-bW%?iY?4p zYlI57N(XgP1zpmtBy5h~Qob)N(#T7t6Y}aFWb%6*7>V~pLr;YIc4PAiVQ%6M{leML znV+ja;RCw)j2}QkK*_Tv@|4@rcG7pE_>O|OWSmX1|70A)}7-pc-%uGw-?a2C%qb6RjFe zmEgX~SI~C8yX8^Mm4jCuuc*`s)O#RH+rS~8Gj)$-nBXoD<{;r#<9URkX65xR7BMm| z-zyNIjB) zZ5dr`C(PCHmnU!BsNrUUX@Tk>?x*dAE^{c9_V*8xyB_ns+}a*m%yKt87u&|3S48%f z^@?U3$V|I7E;VJD2L?$DZj4X4{@An{;Ji@pX8a@-3#6#DV}FvlyC}anr{RyoPDVh&pMbwH;q8R9n-1xlbG1EjlGk~1MTBH2n*!%@$zZe z(bKMcsk892GvWFVa;`TUER;OlaSolharQiMZl%l|S-x285odY1m?8PRA-E|uVD|YT zo(`21#w~puuOVoZVNn4zI;et~*Lm*mM%(INt2txTzy>8%B{)fKequKT77l1;p9(?ntMW$orSn~sU#t`wt+6!9ayr^(* zMbZFl)bYy3NX=GL6Xz~=p9F^hmkx&zyN8Q?%i_}ibN>-84-WpX<9IkYkq$Tn|F}jA zyS;qHW8ar;esA#;B5;VY->zfdz8~@ax|(X|BmQ6eq}JGTI0{dd)YP!sr_bDNY(O6N zV9!=0q!@dE)K%5k0|$qO^YV?WrpvK~?SIrk&&bnAQ$z9@*hRq78f;}F;OpXg*$*QUzd0~$*>t|>aZw*-ECMz1w;gd*krG; zu&_wGTiZ(NK790#=GbpCZ1$d>u9AX+K0ZDIKKBK{?skIrBqSsRg@gr#h54~p@O$`y zJS~0sK_2YCJNc`hhc+J1+#Os!9l#)#%YH4bz+Rp*Y;2b|`seHS@3irC_^&&GJpM5( z>;MHX&j{WV5EA@n-`J+omq#Ua9DHq@jUGC z?n+=6Y)ens|C0JY8vpCb|K9M|J&phCp28wRBL8~Ne>wG!rqY6!WB(Uf{1)`DqgYAH zUXd33=d8(I(Ff;*VJDKo;i0x3c8gtRmoI{H><7>9Eq0%<;K>I^n>RQ(@;GV_74&>@ z*Ct7y18pD|7n?v^uKQy*uH%heEiVyWD~*5&aKZLWZwlc3BcY3yH5dizyHce@=~%#=q@gw+t6)HB_(sQQh$X5mp$+_e4je9wxjrN)R%D!a(b{I(d2&h2N2SxoIw zW4rJit&c(FPntg!>&Ik*Sjkmi_=orR%|GYbl+pa2rrI!hghEjCL}Z{30uh7vGZ|m| z{&bcHNvIQ0pbZ?#<>jCgv_whk3J)+`^jOj5Sv3*qGKYfWb(PX@cG?`cFNkTs>ue!c z=^vRyW&b?sYbhRHe2lkJOvg=iTNPzDkb|gH!QrS9Q>fN@)gM&cIUqCs5r!jGPI~Ik zi{Lb?cROXGi_kO(@-|>zEf0bb(SGagE?jSdNSohc(?}wJb~d?_2qQSUZw~##RTW}F z&C+IGm`RRSyj)DnSMb8!Za^K=H)6eMmZ~9J6ZzFjJ>%CWwsBU(8(SG&zUBZ;GSk@U z6vnBGO3(>mM`tm-9>zOXYR#t@-H}0_1rSEJ|9LO~_t;ckHnoLfc$Hu4^9fpHIis>W ze3SPiQXY|`!`+o&@53P^)(;zwT4B*q7WIt|S?JUg;cT=nbMk+O*DpPFHcG}z-8ZT^2kIvP#w|ws| zlOQXwm!WTCXaL6bWLE4AM*%;WX>R=1Y+qUVty)3P0~52-+Ii|!#J1`C9wWZT3eBer zEkt+3jou-9QmFa+m~y+;B{dQ#t;hQ$Oz)3Jmb78i@plbqWAc5n>NXch2ZY5xQ`$eP ztr=(pdZaZIV~Qn%8C!NSL0aM;^uxCMyTe2|=bUcHncd38NHFpiziRDsLQph^f9V@e zLIb2#mFZuc;zr;9)4?My2Y*mu`Fo|Ln|~AnHR;Qi7nAOZAQ&SnUE)~N&5W5=f9`NB zGq#j-IS5U)M4=*B5S*=_tk6Fx4ND+=UC8Fz)hh$CV##%UULXZ``j18lxgGm|F7E*sLh^ixKAfRD*HN`5swZbB@cu^RhC*KgFfZL zWV?|%!NT#(omC?!t0#{!UIO3DzZ51~xdZu`O=~tAi%5^e_#>D10 z5i};YCmts;yu6xCuI&**B|caOsX7g<%^*H9}Q1V`hEd6a)> zus>7azBsMgmMFb)X{bY>cVuZdurhBPAN2^#Gru@j(=fAcrCiVTLH!tV_&D8k;-xv6Gf}M2L4i5PB{bPc zL90;CeIxZM)XsZsz-;iO?6!}S7tADP4ZgZGJ}x`pcRF9srt!0*iNSJdnB#S^;S;2( zxSa0yfLn#x)%fsjX{aA8?A_;M)%Hq)qrzRCSAS-W_WJhw&ZrL|QIK)t5DBJmE?k%SS{FV`D&MIBPcg~p55OdeBg7mC(ENhLg z?xu=rr?TA-a?4Lk5dTx?6N0*lUE67yWQD(-6dhg-3sT+MFsvNtC{5vl;Hew;qd5c- zvvKr%I(I8;fKI?<|Rs><+|TYWeX36N#-0}U0nAn;umgu#(aBQopQ^L^%WZ9{Cb0Vw8 zjd|vvG01!o@5JAj1U=+YU0I4`gh3U{c(AK|qHv;^^~4|mekVZPXX!X6v|3be@QCI| zK$U;mR};T}{_R}9gkVOZ zIHki`6n87{F&&@^$2WGM<=|{hCXK(weaPU`EQTYUd669V+%=PYPH|(!OV}z)FTrXI ziB)c^5-VUj+0n^DSd|^`)*6X8AZ!&|M@Lhtsfc45VKk=g@A_~QU`=7R#J z5khn1E- zu9d_w>6vj&QaJ2KmD3me?~NFt*HYshz)yT_n;kxDZK4$#i0}hQ+cbO#c+6@V{3d(S z;W=_*lm(+1qq{mhgLkIJ?z7{xch+WaW^&jsENVk=Wsb`M?fSzuh>0Jk`#oRf!u^+J%nV zfNaMwVq7Wh!PZ98iP{6mQY@n^IdjwMECbizQJ^`q*@2}81n#xW`x<;_&y|sFh4m{~ zA-It0V5KihK2iW1mttXyJ3NA?YZL$MoRtv8Th!e$(5wX&NGaU3csbSbxWz3r{N$B{ zDR85k#))u)-*E0RFc?{16fi8NUkO+t{eMT5E28eTHgxY)sJnij+@v7T+i4MQ=j2I^O7#fvCDr!l~%ogoq>2 z!RgU%;uF!C%$$7)+S3eugGf~{P{H60rhtzO*en615-^}KkA!(^?O)?(gJP&|_dS|w zED=07;wmn#*WrmkIFr-Mp$yRV^$NQ=?btw5^p6A0)Jq?p$V?Xf+lRB^g;$g?ZvLEp zB0Ij&2#BooYNcU`YhJjgSmo-+Q{kdJS9N7U4mPIGI^rD!qEtQTvgK|$p3hI!$_ zlIkk~m407hP8I7I34OY5bzvQ<1jd ze5YpmKQ!^rpB?Jgd!wdkifbuJLk3f<~i|YORCmmhdXF zGYTG{zyFh}XV5elNhb2d`R-zmU_Pe$sBEud2=B$I{@9&|f5=5b(54L^@d;ZTe>j?dTyHL_{_NQ?lXjtKVa908IVP^(0uL1QnIOb zZTMYUXZWJ*w@rcm@~i$n^jgD9+9uf-yvyB`h6QKYUbSTt&C!>-L`(oL zI)1GajY#1rUWUw8SSi zOJG_mIHi^V=~;pj(72hhfH*<)jiAQ8?3stt?>U@IXo{E^WO)1Rp6uw*cx|PKsi3M@ zF5znzJr~UJ5$+%B`#K3$-_v_vB>iHmJY_PL3&ee35C~>bc(fC6{Id8AfSxryZe*J3*~QXhY<3?1<;mIxmU}mbhlNX02q9Vh!_^ z!(rLgP2yN4qN~T@VzWi;wJbHq~gf9U2(29vS)7IiFb^ea4&AGvN%Jzp}BLFOJw zfFSzDi+{|D$8;P%<3qBKa9^kG7_bOr5QA^eod_8P#;y*OWy{x;c&mA(OdkLf0}wwX zPEm;-<*vw{99aSsFdcjqw$b7tzWt6SWW>AOsQ6&!z$NS4{aNUssCS~f67c$B92VYe z{^VanvK!Q7W&8Da?lr+R#BMV+S%lAeh;<2hfsB0STFYQ#cG(K&k$G)h=uPLz57#ek z)t?x?kko5f4}YJTknC4pV)?~y4{x+@Ed+ZUP8(vSPikPS|VW=ci*Y zh||uB)1vkopb651O<5Iie0Mj#vXK3D6`fO5VwE0o%)3uRh2FnPM84isCsye&aBjea znkOnt`kCbqDpUB0C0t_??C-I-!k*s*;qA5BJ4u9XZ_mOpwVThsvb%*1z+ zF2WnC(K&gs)~$GQJ~h1Z1!zOubUNHfxo)=Z`W*{dXQ;qMPW+Cakx;&c2!GmT!DMw4 zTfuRa;VI1HgKVE|FJW89+pBj^xYtkHTeN7_P~1uD`(+N0_-PYEF^p}!rf};0^k1MB zH|&31&3{p@4h)loCr-@X#)GY744<vb_*x ziC$yb3E^Xbpx%uss1kiJOf*m7pi&sw^ZCKb2fl{8O(T77?OTdJ-4H$cr)~gji!*jKJ$x1SiY-Ex(nkE z7Fe%P#L%OWC%ir@ulHWD1m}_;kPJr1ABq-;88qMh%eIHC;%&sSub+f_F=f&P58|NqV#2gxM#py0K73( z{=~z>IDHd6U16Iw!F`k{gjC0zpnZX|jU^BuXnHuFvBulrLrD)Em!Tz~w$wCTHkAcf zSUBKC8;uRS>z z?MEfM&MlvH-^|3%Br0L?wS@3Fw8$tEk(cE*kK?tLGHah|N*CUq8n?Mx4quZ#A%xV# z)_&fb1EIXUCj(9+JW=_m_TqNx#pKfaq#M^y-x+Pblc_R|$JV6MJ#9kck?NSUwz zAE9;^ud6Dlg3M42bL^*4MqzfymteZLc ze1 z1$`KAsGjTOav!LqZY^cRdgW37$I2s5Oh~fhbM=+&Z&|HH$XiZ?6$UCQCXUrS596#_ z?`wESV*tPUS&+)D&y?AT8B+m}>bLN#_RjqQ0A#(^VQQ%q`H~!NrJjF`E`?g_8;6=c z7cG*YZ)ov|c1QQ@J6HxGLCDE(OuM3*)&QBkm}H3iM}b4wp&)qBOIx zx>}DXS2&qh1p%MU@y}?sdiSjc!qpNSCWXW-zFW#VJVksS=GvG;^XD+XR{S^(FZY-G z$Zt8N^ps?$HPDp3l#1ZA1R>^@lsSE3A)^uX7x%dadw$N^d{*%NoT2$wHu*2n{ae1J zR0S)Y%_mw!zp{1mEZp&AJNcpl%f(Nkcz9;@W#jU5*#0NgpQIOAQIvXju*hgij|X3M=m4{%b{SQIZ@+7B4XK>{Dtq z$NyWSe=bi!wzvF4iHL%Z1D}}k?fKcU+NLZdCqG$KO!P4XQukJUfzC`uT?r?oho#iz zL~N|wCfeC~j0Zhjk|J7Y*!e1n*JhHz%DBXa0c`#;Ybm7Psm-n5qwiY3h((wP zhVd>%9g!O3soWjWy}lxyI$OLp{I8r2-A~p=VahPDnIOQ#pkuKrI@e|>(7|{=wFq!p zUIg6Ab~c00^HbEwiE_0ePu5+0VcaFkD1CZnVX)exoVG|-l_rn!l-Lmd{YUu zgFTj;&}z>I3HeMF%5!~BOFJDg&|q{;GgyANG3J2|6w(iB509ZHoT%V58vh)FfCY>v z)>mdyZI2gU?5mhFtdF&LtMrR$WF#Y?P~~?WaP7sRv?2!sTbENNCF2L^Kueai+Rp(a zbwgf-iMn;cHOW~q6xJ#Wb%Iq_f^G6klPU!Y_tzEioz_miH=|@v>zIpkLP=V&elLpO>Y-v74U*irc|5$;hj?W-gnQn7EI=5+m=3wZ5*h;9J~yUOc$ zB`O)c2r6cQvy+2qJ10vkte_eQ42q0cySuxE?RpseFjXVgC;RISp7I}!z9izR1j-Y= zmQ+7x@{aIieo&5IXJ4LAD8>iTH>i_UPVNrUORkev^LC!D&Cg%1oVzx^S;@>urt&MD zP4KHO#r=*8ZGRm8HDgJs$wzea+Uk3XC)It3h)2Z;B+SYuah@+h-a*%P63|WC($&BI zM4o-`Am*n~uy=Z88JC#$g9LOD&ui)`HPotBzs5-qBh7U;k^13Dt^<>elJXOwbbXFo zhd15x9TUFWUuRK{>yi`POKrSxZt-%$Bgi|X(cQ;crU?o4ue|(+k)>+mcJv1)QJa$w zlE9KaMvruDTJ9-}Jyce50k1C_$6pX()utS)Ha-MRCENjaVz&P**V>2TAV_lM2#Yv~lRf5xItA&HWAu z-G{l1_rpvtyF{?-2&ClJ*PErLrsml7X7t0s%#fFDxb8C{_zN?kl-^#J6E5TM_9Ej7 z>z3E=cTyvcB}~Z3AN*vHSPqM}>HD$dG?ky_h5vZ}eM4+0P7#S$R9cvN+-^Y zRl@hMX`CYtBjQU_Aa8inH%;N3V~m&=(>64|; z$$Y~8in3ASiJnW6!5n>!)TD|pk3uc?bXQU&Pq0loz3Q~7c{;lWdL!{XOOp;JejlEZ zQ{|LD0@VPo$->R#6l)J&5Mdc^^GYEk(NXjjFB@1z78qPX6ES2juJo2*hF z=YnAL`s4#2{Ja_*$k^hlaBf|q4|fi?q^#3wRUIk3A0C^P4p3^O9XI*pjue=zabX`* zp__-_ON1HNVi`px;|`3M?x5jtPh9_EK;h92ztTH7bH}H|V5!Zwi@&%7ZUeD7roYD< zd{ms-8_-S}(2~+mrAssI##(jj#Wl)U<#$y22%fHYAAFM3!WZC2s&ODj0E3#df~A9s zyZrW2;rAXdtv!xMdIW)r=q`WnM-LJ#dX1+X@v`$fxY`E_xGxX}9&&hx$S$VWm_~hp zFN*mDU<5vA#Gpe@$54SI^RoQI(T668e7M+KuUCte>PT|3PQW|aCw&zNt<7!~bV9($ zT?aaYcl+H}n)IcXN^4zVdD~w7L$CUe68zzDeZ!GwWVzWlF*ZwBIQzXe!3^Dris-Jr zvnRXO9h2Dgbm1oPQAM7mnfN>O&}pAFmW4m%`IRmCkBONV4P|seklxV))l6B4>5qxU znq!yY-~{6e+iTvQv#aohOo9?pv`BW_4)i@J3vx2!yBo+?8B*`-ZU9 z#I*Xei`kQAZ^S8+IMhCQgy~$|_%MGQacb5~M7l#v`i~^&nqP=_=&2ZR-vwRFO%;OK zM^&5A+|*8({$V3#VPjcn;dfnD`}$f?J&*jx7YzSM?-iFT2aAgx(4q%50~N@E09&k-%e-S)x5+)BTgZsPV63d`z9E)J`$>0vx}pqz-+V0= zi;%14AbipkVQ8VGtPPI3;vZW)2kCk3yKWoS3}m&D4F0GBtMDV8>JrbhpH)U~-ytO9 zh64AUQo7dMH`=TC#Q{1Zd4yBNY{iwgF>PM1T%cAlhw?4Ht`dmS`^^tih&KtfIzz_{ z-7YSL#jTo9nNNA%i87unC(eQF^eW>3ImVKYAwdC29dyejg6aj(oCDOyCb6RKm_i8V z8c|joQNLkz?_$rH?+=W)oQQJhsgLqm_20}BJ(vxfTfk>NeEwG5W~|!nll1ZECtc4(wN+Rp;q1>~N)hZI#TU%J_p6L2IG-ur7srBrb6A zYs|-L%)ycOG^&as)Fe~vB)p+^^NrIYDEp1`Epc1jMXmO#q{yG1SIy(6@*rN?mQP_w z*Bd>k9`oZzPuxDcvg-$QR&|TM9Dbi1Sr_@Ducb%KrGErt-0%K&>T43J@!Cd<(u(@HD^Uj7qwX6DRh3InKHbAveys-^3-!RXS5Z zZ{3nUy=*k6HHzg7xKI0xgnv2n{A*aZL!(tf*FUloZwUwLyWDUQr>HT6QAA;QI5VB- zV`ddkpCAGs0h^bziU|h>=*6?@!cBZuHWSKC=W^Z~99cOfRziohXs^L6R=nWeq3u^b zbymCdbG^P@rEPE(L&n+e-|XVPzn|naD@(b9u1XUeJo2d3t}C6XCp_%L5*~v|rq$EO z)e?$u>*AW;395wRE=_vL!=Hq@86-UN6iWS_m){{fu3&|gafPDt1m)M zY*q)C4h$*xV{q_J-Z#9v$KB?)l(FP31FtdOs6`7HBZDCMdiKkH9~pdBdUK{5jZN7MdW;Zje%_gCdI$a5)_0m&HP;kc;ks(TiwaG=yj zpe3E44(LY$QJMA1JlU7|DG|6OeOqwP!^3fWf?(TZjwN_PU}Z+jcxeLlN#b+?it-~w zQr8Vfdjh=QOfBaYO9ez1PQI>yJfuGG=qXM(d)=jyb`f0EQnU>jC{*LS3rw_r!Cu-xQHRr=({}gIo z!?sDEX?8MNfeG+_@1sk^b>o(_Z>gzk<552{^W3D`Dtux)ZMv=8rc;tys~4XtW$xmX zXhqi5I^RS*da?qKKDqv`;KZJ>G2D7MgVC2c?ooU&b1;rZ+@NSP3c+b1+VNx ziqY6>H!roL_U2E*a3@*B-ZK5TWvKv#>=f@A(6qqjgNzEC5cenj1qMrsPtS|%CJ&zi zHhcOP`@GB2oHBcWxp08iXkz-=!}{pS$P~*rZK|Zc&9r zaJwWounO#GJp#R3paI$&JjJHWHy_`X_{FdPKcl1n;kmKy<0PfwIWGQuzq;Il;%S9l zZ?gH>@yH1+4&o9|qOKkuw#ssSdKBYsc|Hz0$>jsUiei$ho=ogEG%w`zPAj}bipj>N z8i$7;T^yRHwAFG}INEB0?N|wprem2PzvBseY;E}lYFi-01#B#D1{Ntz=Z(f&ci5U} zpiOtDKVGHA}@P>Qt17WUGu`oyg97l~@D4?o40v(U_Ez7w1K zd!-Gd<^-2EGqe8GePtSny!vz6T-IwJOND`zS;CGCu@S%cw0m@sIr6;NbK1#;-k*sl zKX3)!51DDJ6XU+&#T0TG=-37OXJOfuoL#=!n566TVEl+n#sE7b`_F%IgQg5p-Gz|~ z#SN6|O|2s)Z;6f|+S6PD@E{cT?Z(JKUX)29B{M8y@8yd%lVqZq0Wr66PlxSr%+9Bk z_7@wvB)nBt<|(mG2-j!a5YrooVRsKVvHG4Es}paVVIhe?W%tDJWk^WOHM+%KvDecE z%QuE?*RwJ6wVVsHIrxVQMhdq`I5J@e=FXpt#4SM`zdFA=z6L2pqhnYDALmVCDy>LMKmm=nCBr4n6i-uV(5}2 z_*x6eW?;(Gdf${i`g{B7nJ;fk7B_T^WW?JAdq2qs1{*z4IA>|R{mTM{$O!5@I6-aG z(E7|eXC6XTlMpP`f}Kt4YC)65++ocCL4nQ+C;CE|p0B$#D<-f8pk%*9RLbGEY@_s0 z95e|Nb4nESk*U;pwpQ;^sy58Vqa6>py|}Tm2{T3V+uU8{6OB&O-Oq8wtc;x?&r|Cw zh8s<12B4E&>hljGDC2v{;AK=KT*$PVO47~G$ow5U%Tcb4$DzN+6&ru=l-a4?grRYW zeWEG4ZWEfRS-=sVJ%#RUIwgcqN2`67b5Mz&PTPt7JK@bqTmvaLgCMiyrV^-mWZE^9 z&$Qb0VoX}<(mr}C{bDp|GtY|9e$!_M?Yq6mQuZ^tlrqA<~alE7t2{K z*m6!(Z@!O12!Lq4=YUO_vBLbR_R5bwp2^2H;;1|qfXzxo zRk?ESxEJ&67PFGrqo$%Ezm&ieSG%*lh1$q_P039VcS`s$yV0mn`}w+cRuDFr#6r&z zJhB4-wlpBG?KPU)#EJ6nz)Wo2I@x6eS-%zDt8RQDb9hEIQ8F!X7ML=9pZ+pr+7J5+ zXmXFkz=;>9y%z~dyoMW5mOcTmH;5VT+66+&Z=&hE1IQ&eg7KtapyWFjZh6i|viVOz z87#s1r=vz9zpy&@waceLz6N#sC!i<`T+l}P{_;I{6e3pj1Ug>%WFuqyZ5Oa=&;|`rhrngk;6+HU z-FAO-8ag9C_jQ40Ol;1?MscROx~sT_YBmB%{bIxh?q% z@Nx>D@!d2r7Zf*oStF6=^7)1QcAv7Fiz z`Yut&x|T|aZYChoX1-XO!G9gZ?^$Bw@O%nd921b}PqCBf^R3;zX{OoQelrME?6EhC zk9>dhp$ky+aJZ_dqUDFB(>_E-Yg9?s)`@)RiQvWiFc{5Gc!z7I$m@>Ea6$3_$|W68 zU2#-BHTDtLLBlMg_#Mdy8q{ju(Vv-X3|wldEWSE|v-07%DXEt!(UJl(MPY@EZD( zBv~TE^9e;&UFlayM!#FyOz9uJe#O{HEP@FY`mG57)C~fjdHH!O*wi z!L@Y*>oHi(K4~)&!fJNu2qB-k)PC3fg||<&+PlxzDtbF^By!(a?k$)HOWvHPVg=H= zjx<2y)*^6xX=bX9O#x}V1c8ZHeNC84*bAbgPpf*a<+TeW;Q049VK6bWKC2S$+iv;! z&3x0P20@3T58uN+ONb0tz$ile>n6@vf+aOUE=p;5eHvS31**#|a{WaJ&E;gTN)L2<*fb)LIMetIc`v}AN&MpE?GC(4w( z?YB_kyDrU=JCNcS<`PGU^?F`Z9>!y=8CRt3V)>~sdKkKWvpstw-wc1ZF5qDJ>IIHO z;NGmT|DHW0CV_}-+v#JycIH&MzS1HM3O>`*6i#N-^FiEtvFm-g#Vnq2nN==XIv_2U z$;*po7@Tk!lJ>DG&6i$_Y+ruz$!2RNRJ37Q(;u^%i;3Bwg?pig+gG$32mktC03G^; zIW;xLw!K06X8nHaQ^QtX+i_K~JY(wM5%bq?i#qBJ+0@w?dvG<=Xn(b(fm_SkGW9AUoz8e$BcgiBz#iDgddg!wqkpbz_ zubfwFqCjjYrU4@Ttd64@<*d`~H&ne}=_d0|zG5lw(fkwA)3r+JKFbbE3xiqEyMpak zE83ldb%zs?v0iGBnAHIxA;!KKmJMiUI1Zy4F1VEN^=ECqEmLlGx!T^jeNU3BncZp9 zP?Jtn)`Mw2GdNuLGkAVwX+uTpAOYi8ix^$7b5n}qf=>xwUQImOuPeW~QSY9sa=99@ z`9(q}nGSLs!Lq?w7KRUF$#?g_iZMpN7ED}pa9r~X{_u+Mw<~(HuORaqIY+?g2TZaU z$W4)5UbtPwY2$h06R4-c=J$lIwv&lWacaqc`G1$kWeiWDoal0A9lgas+}>&1{V@C)U*OqT&tl-r`sn{d z^}a%`Fnx(e=3jH(WzGo8tb}Nle@UBXVwQXtA97fM7px!U<5l5?UUsfGK60aX zJc&YQ1|OOLa&}awh{JzxC;UkQ_%Tf_gwmRSQn}Z9jEvuyMYYJkWATV0WJ?0(35vYL zYH%jTO>^gMD>)_ftt~jtCAZKxtftlQ$5vBCI!^jqCPRW_Qk; z@3f##H|iE3b8nUY4Yju~++T+l-I#(#17+MRO^9q;~=Jh)WH?eUrWUw%B!E{7y(Ss(yOMIt$ulPytOglWy4e#(IRjAK2jP+9A1D1xw77~|L2G?y`G-% zfytc9Aw4jXEqGAetDTtqxvlNGsK0#}J}HSYMZv$kMbE7>yXjwBH?yUs|ONBh9~Xt)xmY1B=$vNT)r*VY)TFIh`=le4S=LZ(E zaf#8QEw3Q>Q^H}qeQlMr+aiC-SvJ|}){wWZ2pE&%VAua$z>R&O&b4Iv!=rzTDy)@% z6b^;%&eb@$Jqtb_Jj7k_%k*+I$emB>Z&qnQVXS@l=IKc#?2&nS_3h=!YC`4)?l&FY z0-?EeGPbxV9L4ErXa3!ijziISZ*OlrxVdr#-jWz4vMKLfvqJfX>I9AfOc~UiL&gWC z5NE{fMMD&XES>T;gvWWhl(PPR0h9nD|F4YP|N2)}H03N)ICxVCDx@8w?S(z49{@^S zrn~%l{r>YCgdTeRp+NuPQ|1Ox%SNg*o=|_57vb)Z2N=HT=X4TzTkXV0AVGQ%w})N9W}16;CHpn@?w4bWLV|IZ7IiuQHsxbOvVRi3Lx|8|6j>PLqFu44JTBSVqM~Zs)unC*13Pk-b>!t$ilKA~b2X z@G!|@n~vslb7{a2b>}5!QNv8y!n@cAP=LTpJ(Q{hmqmo2((1aFW z!qpYnmASc;R0r1^&B!*^`8}QKs^Gpm_~IMhadfG_bY7<@rP3nuqJ@>-?8JMN!V3Q&rz3QJxpLs89X>uAdTdYZjXro~x5 z*C>?*(^fV9dU>H5u(OGI`r><(#e-gVVvN3y+|xGHR7J0z2Kxg>M7?bZ6DVIt0X(_m-+3#E%*B}^0cFxZ@v3S-2QHn2ynbh{V-Iz3)@AdXY#c#MBwcZ3ZzapPqpt+}p=biRDgiaulr_$`WP>;7 zI^1k~ViTd59_V-L&PYSUX3i1)d_@5xkatYWaR*hk$6AM>YcazQgIX@Q())JHy86rQ z&$a$-P4(3*3zi4UYy(Lm2~406JxIv86cTqj(i{pcT>p;`S?PW)6SAi%ci6D*m9S88 zq!fHUoOlqOcE#Nb8o&o5C4d#nIlu%z{;(L2!ot4hJlpQ?7}_%s@+Ni`f+=AQH%&oE3*)?|Q9}2-fUqudxC8$So^3bUuKPu*cF!eIA>fM&yQJ~|D zR&fSz1RqJwA)Y)1`^PuqZ9TASU*xbzyZm?wL)kYjQc#yOFo10{(Z@?i3 z?0;;zuHPFDFb%AMIG&2sFW!<_lLzQ)nnxnUx&=FYDVgS~cNDrqvJ@tCW2A}4xp2*G zM)?<|164?Kd!w@*X=JKoZd&3ygV!*s_^9@#k^$4G><$)-VsomJ>uAD5y?ha;I(v*< zsdv+AKYcUkC#Ov50yzq-{ratpX8el9TPoyGsp-Jqht(wyw<`;N+27hw!T2z3K#f*N z7q^f5KX-Xe{1QNRBW3J|B5S38w*5p~5C;D&HC0KSnG5%awPFT{m9V|iG{F_daMPqR zi?3g-MMzZvO0#Nnx)FKK?IhC{tc8hG; z0Cqpj%Jds?s7KL$73cf%bp*P0>h<@BxQ%yrk2B`|u#sg-Sy;{7VVbR(&lk5PmNTYy zYp=_-oUV?iD4LeF%2mSNRLSP>r`wy$!H05aoA$BBX-16Rw1*{N`x_x5n&%=X~d2U0rI|SV@i`7tKp?yOpWfLpW$TU_HiT zAdrq?HbO(RWi{LUPb?H z71^>0mn1Ie0pyL5W#EU9qvn-^W0D?_Z{o`zqk$YeV{0*E^nk)s6biOJo0S+TZHkN+ zftc60Y|Itk`b39xwqTp}*E_ghn32SHQ5IR{(ZmZsNc%0avsh7-eCCD_Rboxe)j9I- zr*#~2pR=sD&nca8j{-FpJ*{(H;eEjFZZ!fKpIn7+hG2DE>jM*nCq@J7n}T-7$}}-P z`=T-DG_MO*9=h)$lSI<&r}EFMo9r`OrjOm+G=okX^+&!&$0=EuVeVtRXxa&@RSNc) zzk#m>lgukyi`vpkmhw+s=bKCnU5xK7Ot@=YWcy;n^g-nlN|G*`__>ie&k%t%e|%0ykbAq156S#mWm#OWVWCk zYp?N7eEmfQ8O7PS+qu9yk^GFs&=;gzD%iP^4P9tzF?hQfd3gXn3Wh~)i6watqeH3h zKAJT!c@94L+x19Wy^-;IJr^OI?9_fJwbt#W*?xN%sa*r)bQ?I#1bX)BIbm5Vf(x^= zJJWV5&;lK>B?sivx^Xu@&2BBty~({bZoACSRYe-XeI3?xrthXGQK>YGPfJZ5w;KQ3 zrDcctvgh%+-k zjV38}zgcV1Rd@K|tiwa!y*D(cgcoj&=Y~}y{Tx~Cz?~UKSQD2+ZzN1~wG^q)(y{&q zdF65iul_AA=^h~9qoB_@ce&6_y7OE>OY7p%bDs6v-o3W^e5fk&xtIOt!_uxw43Yr zoB!paAB72(kCNw|?TZn-u?IGw&zCwJq_MIZI=BH)TY~;W6h!d202J~fsTKFCU>1l3 z%wPR*n@FFGQueWIYPXG5(m_P$cUXgzrNHyiYli>WRO4CozQiX_TuG4{&SoSHRUO{&KwMFe42F}yS#V$;$STSG~0Nx9$Q3!eeEB2As2*%NRrSefJ)Mz{*o18i+yA{*de%P8DR}S6mrg;QC zco7&lM`F_AmRCB4T9Eqa4p{Ks9B%s z8zvE+7(pv<3`&AinNF_bV0Fh`x(|S^HbG6E2g{jn zWjy~rx$85khUCuZnK!X&%gX~`EI{ZhAm`2(woT_B(chfZAlNE9+Xc>QKHW^762r27 z{}+b{Vlwg_c!ntW{IMx&aQ80Dl_JZ@57H?fCfNF}5j zuP~X&0nz)1F{8MEBekFp3iCghvHYlVR?fHuNA|;$mN85Wek}lFYFv*6MQ!~z*%1|` zxzE@KuQNT30oynw-h}fNtQXg@&JA3r3Qp{95)Qk-2Mc=b*09#Cq?~cp?1J?_Kpl;& z^m`uvCht?h!=NvlaeFiHBn^(h`~Ob=rJJ&+UnKst343-A-UUzyd?|xlesOzN3(89l z^U#c1n0eiKfO(qpVCbReWPW?v$O`v_8`j2EwA{wv8d^vdg)IAU5=Fx*=zJaxI*7Jf zw;kFOwzY4plo)1XHEP}$NPv0Vt$Q`rth?f|JKV$J{pD<2tTIE!9dgJ`)c7nI-Hi-( zo+)1%sCfirvs&20s%(4u|DECTe*o=u;I^)!9-xb9Tf>0Hnkx=JD#!ZHHIfBQFhy`w z^#BKQ++_%IY^Yd+> z%P{p^E_`<}KPM&jUsiFIPmOV#%o&NMFvJy`|@F{{Wp=R0l{Xmo0I61i@c8e{g@m+c8_$m%~w{I6? z6?&Tvx%P%?7har=In0xn%PNYZx|G?QXFY4v=~<|@ARTe4)R|GR;1oW_rFrKCZrV7` zRqJs&z2aly1UID@ueX-OK`Va)lHCAs(0`XPY}tKGNUG;7_01ut{i+}JB_7W*DHEq6 zIr1$9V-+DYBdi;7e%)iZcYWgzcT``Ad{3!;^oB3H`@r-N%T63T&s=7|{s84pypOZK zK#lha?S+_$_(#=^VMd|&BiP}j8XlM>Y2?Be5O5R7uhF6}Q2fp%eu0P!54) z3rI=`205@)KeEtyU-%<_HCGeaPDZ5Vd5lEe zX+9z>zz0483bqj*<(^l7k1Wz5{Os<)5ik`i3|OjUGAhOf>_fxanzHksRAS#@1RT68 z9PQ^L+3QYsrxM%-2yh#U;M7SC739s`iGsL&cWle~^uopp^qAD7#Te?gn=0p|ZZ-B( zrYp1QHf=ag&1NKnvw;A)Y9uT#hF(K^vn?X*!wNFfd3rdZA#R4)qo*U5a}{Kb{jC8t zDgeowgX%&i-KBcrFJK|dWoCG>5>TLh9UHWRGT6%`T z1hrb`@y8lZ2fYlD+xlUvo`}a|t!MZ|{+nGJP47dm(x%-Zr$=Wi8OfWbSJS`i+Wr(9 zN;?y#*OKd(1eJnOPX3zFjAGxmVNlD=pgqSc8M+bQ9j!JORc!qTyyZZ8w}3#q5F2=! zx>=!o5$Hd(ka^R%`K_<~D3w?X*HPdRb{xCZD!ZNTy)j^9$qmSq)sj+Dc_1qXLS66# z?~u|<7`G892hhfsvGW;!myRIyFN2Q5ehtOQEZv8m%0SbWy~ElMDb5ZSjG!TwMS zyWmXWOmbIZ!+1CFSntu!N4n=0bcFqrWmDGEH%znHa^)KM3y-;M5X5XB@E*Yzlomw< z5&W`0JWbRJFtBXGjIlr8D6|n;OM&PjL~w;eMcI{Aw5UtS2DAa-+0QsRyew|o0{PW~+ODo{c&Gzeb9Ei5bsr=d%@7bfA?ZK3LVmfKOD(Jr2 z!yqwX#|oX35du!vYfqpc-`g@bu%RBan)^$Fi2`98rkC@qFL+tP@H#E?j$yUW-0MKx z37;JbF^3JXuT{EQphYI1(Jd)8`6l~2uU;kCF5d$>h5s&TNnWq7O`E>E1wA~ zLZnEVMLab2IuMfIGIM~M>u@OdQ@T#kAHH@~@$MtpEy>1O(k$7n*?R+7xB6WPz@`BqsU4@pa)il~FE2>1K4U`$Z;lb3&P`fckFH{zB2( zRSfd)PnnJF5oKW^(`l@3A95$ier@9>X;j~=dTcz^Gqlx6ORdmG)t1pl-09naY8q#| zjj&F;#cYj%+3b53D|sUOc46f?Y2~$rE3e@CoNuh?Y2*!Ik-T7jwTMWJ>kLngk?7a$ zvuvWcR%va<3bRBYNR~l`9GPCd(iZK7Kc99t6^l8Kd9<~vzB#B)n|zN}*0{;>5<1mQ z<8>jVZ@(yeuF*kz{kCbbF{A!%rxh&4aL`uE z8lnC6p5O>7s{5a@#bm?w6aKr>wlk8^q%EWohlJuaGQp_1UjqQ6*~Fcy2s7=flMdr+ zRJ=C#lj5V%a&iklEG`dKCDMIn@O-f`Bi}{gjn77KMS|i{%Z03Ul zr-jjn{_td>1tuA+dOSSo>SDtIZy13CVdstPUp{>Y{i&RHF|2U3m@u#>X?wD=U8ho9 z_ZWAv92~drvl>Qj2oQm+6-;C&M~9SkhwdUlU*h|JiwpsMrodRn&X`xwTbc8(cW#e*B;pE~K{SZ?p=eq`pv3i3zl<$10fT z+xYi5R;+|+K#g@SUmg(T-F{zfyEi|c76aF|9yG{Pp*TI43E$LL2r{XB0*BQ~G|MJo z+wQn8!YN~r*zF7pwVr2uy({7cN=tjQwy|UGm5`RsPRJ$hwDxMl@SrDFN&m35hoCTH zm}qdLI~E-G(s^6Ut;A>U;HOv!{uD!2O(+H-Qa3-(vkX>S(<#ep!i6u8{s>~xsjWIG zKj$+L^97861~udA;Q&(CJ-vnE3jZfp&R067Tq)1BQOL4I#V`vbmHh>{9gu+k*ZiBb z<#t*LB2rgXaI@R=o2~DQW0o{u_MRQ{8q?!zZn?ls32k0@zwPJTZWBH|V_joymg)mE zK218BoDoY!qiH9iRwHn|dHhPZ*S)=kiBnKwL7IcJG28^+2WdW=a&J&sx6tT6A!p~w z!C*%ZZ_wnx%ZbmM^R>Sg&08`Fz!ZGb%|j4(rN1i(|Kb4j4xcY#FqE2{{SJkNty%<5 z1c^&i?uEbZsm{qF4pG>X^iX*mfw7G;izfus7X&&R_2-E85?)Mk!OOtd*n?{0?esiu z+_n#_E}K|eY4b-|#OCNSd9P|~oo!9z&bH$*zR7{N55W*!%>`GsTeSew(qmnbLh{{1 z5}DuSF!bR=nAPy?tLuGoQSA3PUpZhE8TTV@Sxz@$Eg?E@_akm1)~=-%`mLvRb!otO zIhAqucb7)_?ZLAh-L7VvPr;YJy{Wc)C8#VDV$#g)N+1$$Y|~r}npblf6EY#(r zj=E~8dIiY*2bCjUmzCDYO*p<9n}og>r#PNi0fJjHikkC72?r<0QFXefbdDZVu5EJx z_TYd&E6(u*9&mj7J8;LRrG?u!U6(mQ;M&=V^HSrxp3-S~Kq)?XWj zUFX~c{HyN^5VTfR7J*L%O?fdIrcNvOXKFz|^RV^EvJqfjc1FZOY3u(5u=1*^fPt6f zPq+E{35$^CV4KPE%ok4ZwLsu=g$OA3mE_~BYckyy{(ZXmBi%*Laet}Ev>)~U=Iszs z7vm#nOH>~PlKhjBf98y$(RFI(c-D9>Xlw-Qwbx;Q@DFpViw3n!aY3231GE;_;Uliz z2ZDb%gA9SHuO^SS^J%liiOo)>|E3QsPqLj6Tn?+4)B?D9DdMN{1-2_FiYZ8sqGX_lHUw89K{ofr6fArhBZJSx$Q_ z&78n+@Ym1VzMqNEsYWUB{MV$(>^KDDXmuF(g%Nz1r9d({} z*MAChkIuaIwaQb4NQe|G=7kZ&XzU!tt>4|qb8WA_TbIa_4NmE1d?^7)DdEB0f$tBDZt0wpBPUs`-+M~muU%0=sa}CNjrSaUh z5dhV(P0km{8>}m9ZHqlWktsi&?VK~|(39^RroLrdK;L)L84>F6+vZK1ho+!KC4V53 zpibtZs1-h-oHZffL+lB&u0@mTc6s+ijF}9zrPJ$jC3j(#weF`$QXrp?neiZ*8aub$gSY~>{qov~s z9y_8_!9R!N9woUgw`lsKCG75e*)9q?-AP?KQC_* zX{Q0t?0jFAE7Ij#LPF8&O+laC@dqgn>TYb*>qWh=%eqeg{y1g^#H1I^r|ri!dJJhg zBiPAoifnnSXe*A|x?6tAPV7Ydwm8}%E&Awg>(vMP=EmEl_xKODd{rRZQUi;#MCRTS zeuP=xz(>n+urG|DAGCLr{SlO9SddHaG;n*X~{r|b zWbqT-nFZKgE^VqN3at52B5*W+m|avMu|Y>k zGAc9y#Zprer05E6Q%N0ZDd2Gfv`^l@7FM9B48Vg2G4Yys|Yll2LqI2D|b7Xb*X!cuvB$4IfD! z^G1d7pA11JUxz3XvO$cSJ#)AMI(L ziT*J@BG&@(&m?;C(yCi-bT8d`H!n1AV~cn!J^T~I8uW`{(WXz_wewDUEoLN$2z9(N|$k|q}yIrOMF8v zFTd$u%FsbR{yl7=fM$;hTqhK);>(Szeg-hwZK4sPmd2E{w0$1-z55n9&u9eW;h_P_ zf4$%DmnCb^AlD^c6}^6Nl9Na^QlXnEugT5bBOu5?_XXqqd_ei|=@D|XFYTyj9G7zq z@^Inzspxu~wWFifbl~if!<_ru<$R{U$=l;)X8sVoDSUzlq=tK~;8Y@+^?!WD8`9hn zG5tPY=PESh$Ifw`b;Q|)m4Smp=QlTZ%Cb)X+9$=|Wa~Xw{bS5aU3c;R7b<(xt=QWk zb+Ni-Kof%N#M4!@4Gx5JtB|3~@k>)|r-If2|9-hZrh+V2*`P{VN@4`d`R~+7vC6ewlC^672 z>kAeIRoTc%InBOO;4puFx;65uT`yRNRwo;EI9Em%+@)qUR6J7{I8quj?J1~0@l$~S z3p6bQc540E#z87E^$W?Dzy;_N22{z27UF7uf*m}X{D({_6`%qO(6>q~aS!~YWlum+# z*)l61+uSLmp3~(M%b1CbZ41~rD+Rea9U6S--w=D=XzW0Qb|62@zo!`aXJ2!&@!K^t z)on?i&%Vd*JJ!gz^l;Ov*KfkPaSGH3m@OaWX{@+p*D%Sg3ed#x)HwIERGtv+>>8Iv zrgA-HzmQdvUv~_|^pY|Kcb|%~J-|yV7=5%2RpFOT4G%!@&941s;20P(lWDkVVdllj z_sy$J81vW^ueF=J|HN(f+&BU^YUVdRQc{7+U2YAg^0-0eMjx6>WK>1Lz{uE5(4nY2 zLNwO+WLhr*5yuJi&b!Z_YR_$wezG^y5LKp1Ip2uq%#0kBv0G`oVzYoKmu-EZ4L#Yt z`Ae_fjeT!4oAextb?r~!i}RDU!cii?ltlM=Z#*mN*CCs)a~5J8e;C+#pK|y{cO0wk zdcfNCWk%u|24Um)?rQx|2bk+Us}NZ^S+Dz{-N@v1K-hj2AgJn9pu@g<3 z>P%vlahn{U1x_Ny=s4*Vom)R#{B1Pu1f|G&^3V`4&fugaX>=q@Ey5A^o^swZ#hyGCq>SFMJ;@tGm|CR=_yYsJUzD#9-r)r; zzdqIka~{RHx1m#;{P&-Iq;TbJfYH-nJ}`l9(drEDF`qu#oBt65-Wt3s`ROy0*8kTzqx52R-=<-QC6LI(N2utSK6lSgPl?wzRyvw&Gl7R?j#b^Xr9x z!ljF4YwB~YB;o9O>;>GRfHh$F3-bxhdB7&a1Z0$5StA&Q$dd^^zjYLP7LMyaZ5i<1 zmstr&Fg)>=DI3pHBgOblJ}>S%;vQrgx^~JFkdHqpfPJtW+{;ZOFQ5c+zImb<3JSO{ zwwBkoH2}>pS2<)QRnGC-72C#1@3#K4R+#;QZU@Se8;?3rsFWyok`{bL508<5^Z5UQ zF>uAOyc^G@To{miVe9HF)$T&YBw`o*y=MAl?ZtB`U@b&rU_QVAV?;#DWe1gu7^@C2 zryU4{OiUFn&R#0?iY>e^Tb~q2I8b%F#)w4@RM<(?f}gVhJc(0!#-T%ZVOA+c4c$F~ zjyX8JUl{pl_DiDBkqA%jK+}zl#ht zXOI%QA(+aFb@Y#tP>0?Og?dBs)8UFXmhwE#Kf|HKSB{gTFRT!W=r2qOJLrxJ#1e6OZ{Dh>`<0;vVY-fn?E>n8=})Ggc(rmFxBW+- zwc0x9M=dO%vqO(JWs5^BBKKhepp^b5hMOYna-3?-!|zAsukV10=iWCNI%lyv01m>W zyND{}O(jrfZ`t@-Cq)g9phhNVciRh%d$&nlYvQmbMe@b_S3M%xxX>j=>zc>rwT=}y zVs~wQq`6~*L)(Z>)?ElW(#o}kcOwXvWH%D1>Y-nWF>-3b?Ew)4{V~d>(JcwD=cH-NO*TyZ zV$1tp9PUGJM$g*tO!1w9gxS812OOm7*VsPFYlbm>3AKKa_FB!f0EsKTvJ&&Ur@-=~ z^-aln!{Ovw;gN`0U9PBw{Hcw4V1G^;#cDb|nE{^EBdwR7)w1oFi?UEfn%6LT@W$~9 zb$Q4A9GwjLvw;y6@rUnXHX6ORMJ;F3w9};B88f{na?}^Sfsn|(fEOgP=`!w?2gfQ7 zLq8oS@+Df>Y__FtCIW0yH$z^zXM6GK%aC%*))#7OYLYR;fnPLk%;PTC;|fVd5^R;Q6EFW=-`y(kGcRzN% z;3fNLxZJ2^w6^glcb0d5FY#L12P;Jt+^ih&>iW%<5Lkea)St;qPEu5x_;qu4itx2F>ccvT+;!aOH$Hb|Ok~FQkjpjlRCOAY!*^8V zJW4@lS-$%-3dJ_5bQN(Py*67Le-K22Mazh(G!`kR=V0tvRncFBvP32yEe?AWc-Ecf zKL5))sXcB$C`qjT1o_Tz;0xo>dNpX?55U@M^pIwT9EDc8SASWAz1%&Hz^;6y{)J-SVFdXBi z$}X2mxSFK<^vl_naJkn*1-Xny*Fuv{q8TJj1vV7?zsMDRNy0rD}XV-C|>%#Ctb@mqNib0 z)7`7OnsP>q zMvtE#MfIoBu0Efui;>0`X3d-)W7k_5 zVYpGMWp8a38OAUzzr*>yu-CNtSozMkE#mcKzZ`GBc=7VqOn?k|mUpgh;Nu<8{KWe5 z2XM=sS!BKA#4~euqQ44$hm~WErQ7eKvFx!*#YQF15=-9Xw*(?TW49hIY=n_Nuiz5& zwy3i&?Y;1U%;0!dt*l;gxvm^8ijL3f0%{?p@RP)11AYw@+nqaXPsr&wevXcgzHv2* zakY<>{1IEQHiQ zZzxyY8{^2(lGdta&=fm89_v@$qoLO^ch6@VrQL7zi)~Zjb!_!^HIg5*ez@HBl(5v8 zXKz1XPor97&*Fz)&#LlobQLfGq-J50n!em2)Uy!D2cX#8jmw&lwmE+Puy5b%EBQ7D zL4*0r>)$9W&{7%mlG6HgMqxO*BP7@H-dN~8p69uUsTFvYV{VX1`AXe7QMp0M8wS54 zEAdzkg%?7GrISXU4RPr1I#;t=pb-w)18V!;VPM)M^rqo?vD*5>qxYmt0u(MgD-EAs zrn-sGbeQMzkk5*kRA0;3%mQa;TmMQ)X_?%jq>ycJJ75V{s`?&@uoDv$H0A9|f2vaP zw7o9$UX)ZODfrFSem2u&Pl)knNI6C9HMVri*J%~KXn`%EA6mQHA2EJ|C~=U$i2403 zp+rHWTc?S~5^L|#H@2E~Z_1jej*hY@Mu}~23N(mbyRPiB6Tc*vS72daFl74Lk2`khpOgoJiHTsj0DGK`Fl!)Zfjpc#KIEeQ5Cv&bYNEC7KNiSw=`N3Sz)z=pU8Ur!zQ^}=y^{Z#Rs z8tqlYL|Aj`tLEcmzFt%f-@B>493Oen&$lZ0qFW{jJ3c>N-=(vPd;Fk~C7q%2Uide} zM{XHtRcpW4#}8`3j)8>_QtR@X4g-p~MCluO%7mE6?Xr7mh|tNoXQ)fJ<1RKaLDhzj z9-!hk0w>>wQX~rMdhPuDh>AolTY5nqosIw@p#I^WLlOImvy)2DD1i9-MdY0)bv=(q zeu(Gv_4H`GJ4iB<7qE6|bSN(QgYixCw`?=6_0*z?7b2C?P4 z4^?GF+o>3~1J@o?mu*r~u3pwUmr=$1;PTlj++e?pfgUz)|EV$x(7Tt;)Yct)Wf0Kp zeZ4R>40p**97`1*p&qa{{MTGPQ$~6JLBJz}-xVaf<$F{bWU?A(#9-UsG&(oxT;>GX z=z7;DQDg5`Ay#SNok(fc}dM6g8ZQ zMbhOyTZgRtEMmFGyIeD&JC@cnRmF4szF*RD)r9m8zqs*m?5W1fk zY7tSR4W8?E34Uf0@tlc(_aLwg_9M^zcJr23x|5d=YViK<6#VWgEi>Fcn(@NN)HM@q z*pe{eb-XB7QzW600cZLhXJM>37F~lKL?}*>AnX5f5(CC+ylADR3NP+*BG*wuoG`wf zc2Hs3`0ZGIqP2f=1(Fj+dH~bDICbkb9$X%|knbM!Ne{o2n3#HH`%lpLKf5jo)1fyv z$RD!!3k*LKn43$I)XiKZx${9g!_ulx!FSJ{1UI=|auroUOolY`!RJQcDBhEW+CLx{ zCT7FRek|B-jldE4Sv6C{oAz(?>CYNESHApwkk=5M8Z!ix+!a344sI?Mq*fqwON%DT z#s5fYmkvOs%dvSNZnH8kmmbm|5)SIIHxX4s*Fq=xBCb!g1fC9lu2l>*pkflXav+j& z;c0hb2ynPdP8@hTWGSth)P`FPyCT_nw#*wD)9ee)bggrErS6Bx;#`qg`I05Bg3D6* zjyd1gP?x=oN;%*?BW68JwuGdJ?k`gjRRFG!(}a%Gr)ZafOo@VX7JP5mmqu5%Nf|7IOs^}V8@LVIqQazyWCWumy_=@6xtfN_6*thnc8g+G5t zkB>+*dbIUB{JRJ)2)}bfzUsuNiTN#AOf6|Z!ILS!jnhHwo7v{C$_f)luqBz~*sD{w ze2xMVH0Sc>$%Xrq0pH)v$8GQaa6z5IH)t5A|EmjNomc0F6-xsxVos>y?0JF&k?hUT zQ|8`?Yv^^+ZYOW`vrWDH($&4nqvtQa^8-xVY@3a5E@c$(*|ke-EzuKkDtfI!zWU5M z3r+zJJg;1V+SRA+mS9H;g+?_HBT64c5;EO?m3^OI_6LjPyXWFeqQ@b!&AZ}tBJ|qn zvY#S7tz-nS7Y9>YpP8A`S#~yoVd`9f+pF7IxBWFJR}3==Jg7A~*b-vq+`3M>LTKMr zWI9dMRblTgT~*N87V3#*uSu(*=6LiZ6z}!rN7V1Wj+&7=&j7r_?3@l9;(i-}PE?#@ zA?nmi%n1K3;v5*8F4sx>^inS0|1HYSd3AYs`1(e2mNN9`uc+7%t~GTx6Vy7~oL1K2 zwy3xDk#D(ZU{S0CS+QAn^1YSh+g}febNQBA)YRBE!79LmDRr*jXjg`oFG?0Z_19yf z`bbHAd1M<8-9s_>e8?H2Qd6mBUH0`CdcmNTn4`nsoZ$ZTn_{N0&z_g?K@4@y)2RBf zQz;g`dMBE$>~|9s$cu`V&pn$WvC$6nc#k)-+6&D|Ib${cf}T1=lQk3-w#!{gh2jx7 zcIJ(!C+44Wv=Luci8?V=nv^WPbo3lvFGF$GKF2QnUFI>mf&3=qE8PXWQbI;gLouPJ zVvl-N_yXw2azk+$Lds9ieYl`6kp}Zn?(h&Q#(SK~?!CM3W#tD0opssry^TcIhOF+^ zBc4?Vd%j;+DQ~>{TFgA0rPB7jAmV-Yn>G@J;;IT}e@E1mxn(3Mt6_2{)c<{KB?F;g zQjLtUstTb|zM`pC!vT#~F{^X=Yrj1Zs`QgY#$`61>ATa%!sBP}27g`~010Q^!-!jc z4jmM;XnL|gT~hk3F`-0{8c=`iL zKr#_kGyaDcL1mHDD@pl($^D@0v6-k$jVfk?zTkx zv;Nd6Fqkek(Z=KP(o^-W3(v|->#O?I|C*pi8{dsRZpNLxwL;>7rl@yOO3&j}WclM2 zm6U4R4(-WbK{WmSu_IOG;`fBhg}j>5OjPkF>phOqO*-W1FR~?8nWL70f~!I^#RQ=@ zrBA+o{Tf^R>X`*=O;v$ko5$!a#-K&oK|fhza?4~X*_fj9RQbJxA~#~D^TR2vlKS8aj=Bt&vb?GUmR`c&Xt8lX zEpv_a{2oek3$bKH<#cEErn@nGnAfYgDpomW^@IBMcDNLI#rjZZ*tJfl)O z`i_v{m$%~SV)jbppT`vLtKKmOKBCzJ{7^nH-IIy}E~;TFbGzk;p1a{TSHGyy+Un`{ZW0eMXOsK~F4jWz|L zo3EXTOifFkXo3@DME*<#sgm}ocH}A58vk*7No!5Nnwsp*YH6^W80;+EzroyX_zHb< z`HMgw$$aLy#VI3(jpQ@9{_`|6^F-}{KeAQFcfIse(YqFBBhr(sNha0k0e&K6C@Bwg zeG(ZBKi60Wk0*i0ch|ZncYhS!hZF| zssd8sDma^oMteh6RyTtv8~lGY zmuWIrw4)f67;r#XZS@lDVVN5L>`vwN5%e+IBzkq3WQ?J)cH~{ij(GoK&tVu2Hq%<{ zcJgcc$hZJ;h!W5;&Nf3vK_QM(dw4Y=4m^S10Mx-q2nv`R!rTRR&}Mf_6qc?wy(Ai&UC9so1nA_4vjLR{&s1~$WDv4u%tlIaMujh|{Y*2tDSsv(2#*JF_T zJ5rr$GvFW9$>g5@razPP$9BUlzf_vM5Bc_kzM-{z`h^LxpORd0>bA77@hE~MEru5$ zG~|5g2IKq|BBy6t(upLHf-W;ggE{&slM$d^%2p_sPd4Ju$|(0r%GO4${L(MrX!anO zo<^KljKuQ-6P4fO^;=g(<=Dd}FRp$4a2av@(HO+!EaAZe8nuwIr7Vd@QsMU^eToRP zSpX1K6_1aZDi$4hIhf4~dNZ7r^67%dVN5^#(V0L`F8@ znWm;U+Yt%OUi!n`*U)e|{9M;IxKG#^82B77EWi?S85t{zU<#!ESgY-g4T;nO%$Gyv z55YD}PJ7Q%ke7?Fb4LVoJv3o{PY;g?!ein}U`+%Ksh%HATiI{n$ruJN7WB-}g+1jL&HwR|DinKaH zR`N+Er6`Kos8b|8gy>Hq;Rvnz=K>rF?Z@iQPY;;9Ql{c13dp($x5xx9_K<8bzijQ= z+U2ogBa|~E7HqU_Y%!lmh%^3N^k{VyJN(yHeb|{%q%i5gD&$awRByOkAJTrlZz2q5 z%<{FkvYzN^WKMr-h#gX(-fhHAARGPq%^Q>9*9U;neoC`DY$>Vj-q8Q3d@Vw<*h}?Ux!oom=0<*f-Q)l3^jDf zKfj*R*%wGqSnOe4vey%x&6X_%2jRNccGvyx7PkS;<LVE-2!8T0AOC9(p3CZ!h2+@k~ z|2XX-ndA0$+(J_F?U)wAoxGpoM%74GR*4M|gxE9}+I7F-GS|y*48p>hk(XQ$myFqIz+(Jd zH6%Ee0NP5^EiBm)`Y{|-?&HIX)gPCF3!o4;TaD^CFI(<2)2T@)iT~v-+ZwX~1PpYF zRq{il5q*$4NO%r)SmRPk!S&dh0PohY|0oB#Uo+K_@fWL1YXcm~-E9M>ReVbI0qvA= zlsDQ-^;-F~h>Yc5e^-x~X9mFFc4Nszzk_tB-ARsLM-i|ZX`*8~&mEdeQ%hh$fa~Dex)L&)5s~8#Z*w*+_O@ z!dH^V1^*6_*QpnXlNAzfhp}$;V$SX_SAHzfXbWv0cwFQQgdJF5oD&E36C>X;pX%iI z^!2G`3wxZDlLmGsF&$Z$^?^b6(KZ6|TcX8Ue|WP5T?UI50obm%ikk83=g*~;CkP$e zD$TVAjV837aeh5~YvW#L3rkCz-^Rrdu8GeO=fe!Yd3rou&+X4u8DDD|QJ!>Q5#Bb( zBYrqe!eK1YUu*9Q=zI%O6gYKRe$F{AYQ;!2GkvAQ6^f9uuxLE%?I7$i z?Uz(-I_5C;F?L=g3TyP#*v-3>Gx_nzu?N1TnimjD18 z+y(OA6dd=2S{IOSEmomFh94==l?K_%C2xzh$VATw5gQqFF+SE*v1k8WC!3G4A#*` z!FMXpK!(*%fWs893)zIew_6nh&WWc-w9Uob&Z#2TeZUrzmjPo7MWme%I6^iNZJ*7x zu3TdK>z%82e#(;&h6y#si0L&Vqdc4`SDhPenx8C`?}w<+W*nwgQ2Dd%G8@p2>}o;b zMEd<`Sf*pbBp_8)gdXkRI!4 z>etsxWLR#L4$D`Zs%<;kpX9mO5AFnCB}6gQsILsE(z=q2cm4UfFXIox?c<4C0~dqp zUQ9m8k88T`rEA0* z^%iPOX*2Q4qxc%sYYG_DH*Kg=h)`N zal{mguWkDx&XyW-+MYh=p9r~{>+e@}s5aQ@K3s&o$I#b?z}c>~XPFLX%FSmB;Kj4G zZKMN|YZZ4h*mgp!jX`zV@vDo5wW0_q@Slj|4jL&qUtX)(%mBbA=^S}1-wIb}c54g2 z0l&m2Z5E-wAT=gAu=V+v&1e|x{NmzWZ z=HGiBm5Cw{@t)k_ns%umXFp1J*7=+^#o+hrX^dUU{K3`X8ixH`tjBi03b)a=tWWZMpPAu(wTbXqv4JK^AG(Q1 z+cDHcx+l$^6nlb`a_J00X>(|gWbzM_7`t0c_hFFupSlqkDm5}V*rg8u>c4}+6#XjZ zu5Tvexk~c_lY2$RJwkA|wJI7=?;@?5qF!robH_KlC|N*|Q!9jJ+)YF-C*7JuUYE6S z`KBjlp(2hXXVU+_ymh>QQBIM!!-`PaZ?hG8jFHyu@xM!153MDdbs%IGoMUsV?}nIp>ltV07b04GFeI5IQj_@_r-F@l?MuQ8dT&! z>Hs~>(gHNQq^C)GGNKi_Cd;jM&h(FvaVh4&Eh;-j^XK>SksXK3f-5fG12@LvcGTUP~c#t zT7ItsH{?36|GLaZ@hu&G1b@k`854cX+Q*4-o39Nq&_tXcRbr13_njtx zJgUGS?DRFbovF~*|4_*)at915=?~|B*UXZw{vsTev6{o=&1Hu`(Uxi|rVkB3x9htK zq&9)SfZ#?%G;aM3sz&G$`lJ38>(1SU@?lTF&1jWE3H~y;*K3`tUg_~#^Jow5_RBqV zXNS5LuqZ#IlD}PFrgC@l8-;%ng{>o&VP&fG*IZ1!GY!lV_JD?0G3d+hKF-fl_dQ{q zrLlixl4hu2A0B6sP84H;VyRLaAaSIjigK68v2URXDb!(t>j}U%(cBF8dc4VKamd0@)<0xfv6d$#sslaU+U zm)dZ5({g4GL^q6{|B?Jy+L}^A@JJ+*lJ0G(60oN<-GEDf5S@L`>(^x8FKwmt-Te?4 z*J{kzPrg$iue~uq%+?Tafd*rKjWNg-@oN8+areYfsM}J{?J|g;;dU{a)v^!Z6jE=z z36lea-fND3JS#?&)kSN6?BJzv!oFYCYjBO`1$7D|!vgd=-Wq)Sa&xvcM3&beYow@F zTzTSzep$<>=clVNS08Tw%sl3UYfb2Ld$JUUbEPS!-|0npsmhdEA(F_V>tYa0HNsZTH95G`#*vYVWhrc1{NLGC#ELW&NDl+31LQ(`gCNW(ku(4DfVUaOo@1zH&K`r2y(aZvY1;2NZ&l#**} z8Rf<8*c(YJO>i8+c*wPMq%eXH&LNaVnGuamlZ2gkG(~v_1=e4&$ z#UE(`f?vgeHt_nxbcnab7$tnOvN^nk;$A#ok6^9J!xN4wPu9IX{1z|a>q-Gc2wo2g zihBsBB=u*-Hs8$@RU@w>QIXOuH!6be8ePCajE93#QRR0;9@G<*H#MdMp9Jo|39m$c z3F$iB?(<}hZ-8ss9b{GH;}wWUV9UJp|Hr!;Yx4~v0B?5<5 zkluzaI|s+OX`V5!Y0|AdPaJM;E^*wuF$8pPpkFLE^`Y@!GkHD;?jGL3$k96S=V_re zL1Ofdtg(vX**v00i|a|=?pUglD}a#oVN2|dO6M_?dOU{^S`dG19!0{dV$I;w+CyMU zf=?B4gj+`?=)2zULC?0DD|4FNp=CarEJPnk6B#P^;|F)paAwPo7L4iGP0Uw8=G7gL zScO_{Ax}3#59uORf_O5xr=;B0l40}r5ozD2>)w;LaCMOA7mXNvU-oOn&Wgy%VLve& z8v@*<4ZjIUNv#?hW6?~<5Ik~e_fV_JmViLcR0@6kZeNXzq&vze#!tPc4ER%iY#7Hh zK>T0mxjE~7UGKxjlQu(hm)T=C&>H5USPCKsbuI*}*ke4%pAe5%8h+Fsyu^DVld0bU zKp`O|;K(50IPcE85n(7q6b1v!aX&Y%jv|Q(DyDL*mZSM@AFV!lw7`h;N*!G4*aCAA z$Ub&R1al4KtR*Q1XH^Qh?hcFnUR$yg66U5|9m66W>p@1_9P1&J!BqIK0nYW8Z-}>O zP)OH#ZVDJ&)W%~qC&--|dZMd?@1^_d0EJQShmYpeUK&g`+z50`cml{|r& zyW$M~qSIuVAK*;k{WI!99^k@mk5`xj-x9~l zkl>i&lH)i8=WDR()GwDFA`Z!8_X7eppFr}Ew3Q!3R7*@qC@2na;59~0Oat^h@!Os7 zzvI6~=jS}jmno=V6%bE5qQ%76n_%BqEL_>o&DjHTl*7cR*Th}ZP%;mfa$yDpJk{a?%e>@!$O zvH`u^ZMm@?jcL{Fle?1T5^}|@Vcezkv25g8+-1tat3{iam}1G7sQn)9c#y``)tFUc z@5koH;DF%ID_n2vNl8Z#_lubfsy#^VF-qL*oa+4yyw`ebQ)7@|@&g4!M_y!j*59T# zh8#Un!Ca?x=|gOoxw5XiJO4kl7#Ifvu%KT>`vVE9R`YZb#cQ~C3<{aWJKYqRojL_X zLw>+^F@OTEVyR!~67{=&$IJoZ6}Ow>dCBoBb~(~meD8mEH2Vi!crA3Y)R5ogv}>+~ zs-{-;#e|jI@BU{IVr%z`yw(B)3#+Oyki?Q0Tt*x>n-j<)tG ztZ&ZtFO{1OOp00fBj#Gw=)?~!_`}uunJoMB@BHwR;PN&Zz3_}fZ+E0C;GAJ_A9YurX)esfH||9Z0Ah$%Q<W%NG4JH5umdli(1Fxm1Z^+Dj&%X zJ$Tdm@Ni@|{sk`^B$&nF+d50W%iPESymy_i1vkll+6U4#&1m^E*L)xsQ(qy#r4LxF31(#eCZ;lPA?AAFgUdSBBa#t>w!YFwIe0T_JXLJO?oPmR)+~T ziTufb3r;jFQ^4_y;prcr5J9!5K7D%RQkfo4e;9~(7Sylb{uQlXe^E#LGC+8>EZz_U z8m58~E5+tNP&hi<&htA>(*)%je#;EZkGUP2yKNOQJ%F^GgI66(LsUKXcP>wEAyTbH zQVYub_1hJpFI~({4V&AAyYe2^(T70Tev7QF=DYX`s-)pPX_Mv1IKpli9khAUM)d4* z;P@5&`v988=&fUpb%fa4cd;@*w0QG${o1QH-`>Rvr{QDj=;bAQpM(r1jg_t{_W9}; z>xR9gkb6r66Q%=O@V;DI&J@efu^H*)Nxu4p;C~rTkAdwDEYN$MP2zyzPt!VIQhiIy z|H>auHtaSX^75R4lO`yF(BB52zOXK@7!kDVg5@UN+U^Y=`(t)vrkK8f0km>b0tn#O zme=>b5J=jt`a~th#3aXp67rtR_34494D%@_gLF;bWDpwol^Sy$k^hwplD_wS()k^& z$d|)dAjugN6vRZe&X{G8swzl4?#r^igwf2TRvC9L`nAoIXJi8|R}AJ32YLl;HYoxI z&_0@$FSu4f226sB>J1oKshh(4Mc`qg-~G_^oQ=K#8#u%R_m-X>7BJv%T{dW>Y@oxh z$%R}Ca@=2+r{K7jz;mpA22Ogus8HW)OBx{tCfnIUU5fVL#9hjOE6&WepMu&fPDoL) zAW^Ze2KjZ>4Gr$>8}eI<$WpU5VSYZ>H`yPFMByP#T6UR z)k3LU>jLEH)6)0n-Lb)!c*dfW{{vQ`R`wEZ_lI-2c1M`?vC+vF*>qZ-uS*2)MXR6@ zykp6J^Wa@$20vKkU!gxgOKH3e=~%UgS3W{M%dJ0NrstCNyo$X@hd=E!$e8_oH5)j9t65@qo+osksh`XpM0+o3yvtKDgHSk=MB1{(Nie$Sfrmqvp~X3A#lb zW7ecH>6EpxU68#I_J#|Dm)b%{r!B%ZC_3czh(jh(NbhIQ4TMs>JBt=YU2Ox*5@-j) zZ)@`FxvbjR*9d_^vxazeA|L)Zdb+7Q9ms1a12H@67@aC3;xQdWYv})1W<%U!-Iv?G zg6hSpqD|Vrp^)X_Rv+GSsCHSSL@h$l?ewj+k4bhutM#)f7fX2mwDbhPXAxYj`MLe( zSTZZ1XCQ7x##xs|BV_yBw(6}~^UGOHX*UOApZ#l*Si8qM?S(%8Mq~xZv3JI^Y+qU) zDW70N?6pAwWHJa~I7+{(cqV5%VU*4+6i58O-%%8Yw@3Ka49*#BTsZ(CUp^Dr!6c)S zVE@YkI44q-;=Nf)LC~HD6<8S#C!Fpr(Qe=CD zPo5Ibe_z=0c1JRXx(^;F@-2YollFtJ+Yc%+gI1bmfA`)SLwT+I&^L`BZ){Rgrmfzm zPvl>YO)o^DcGh++Oh+hOSDFA&8IL3j5?5lEj-yohfr~Q`-_!eTJd+;oDu_HY5$G5s zqWC}~K38)E`*yAB4{;oSlQSrPD|K_aBE#xD_H;R+qRl}%&!xHT=Ax!nTWZ^|(qe|K zzE0)+1xRs@=Sqq6$BrR8Q;G3ai`K7`SkBgVtjJ-&GJH_3ueqk4gFH{`iG5Uz{Wz!Y z)1!B!yF3IrUl1b&TjxvX*~ZG8F-vBg-tDlf&y=%JLphMyo<3}w8ItyTwmk#5SJ`sJ zv;Wjm(L}t*nWff=Ob+?;9&f zg3L;amUeZ3SJce~KP`(NGu{U^<6u$2=>Yu}HFH5FXf8TC~8Ab+LtpcP<0Gj8XxB=t*x zQyP%0N*MsPhp6TuW84I4$w#gGtfs70nJT&gbPH|Z{Ge-x^k*|2OBpDT4xL=GyPb-B zzxHU{i@_S5HH-=kVz%C1n>WpTK-$G!ho?@hNE~+{1X_l4{Cz(s&rY7n3~aMMFWRu{ zM@~U+PL{?xHFT^F^abo4fK-tHBbhcP*avm#2Cr!T&3)TcjCUUj_4h@?=CTt*aez1>NAC< z8*JA$r9?wn7P{4EI7O#ZC7yS8-bI8+@*{_Dg+sY+%kxjbh<~@6ZdF-{w;Mi4073k4 z(T@Ve*?wR{AqvReB{ zNOJT;fRqp-+&yvdE!&|)*`PYLA9+6{MB@3QV4Qw7A)kDik0ol{S^^MJ!rWey0c!Ee z(VxYtAFQ{)JMbA5) z&}(r?B8SrZj(Q|pM5g1=USnf#k71q9-J9iWWv=;yFk)ceU11dC$kGD3f+v!3m`sr( z2BI;wydbFK4r0h&@-RSlNU$UIPg0mI?Pr&@T?iJdX-*|-e_Rz8bleU<_qQrFMuBdD zkoei=+kHTte+tq%2H=FHI`j2X*s|)5f*y|M>~ce*2qu5h-K^q{EPnC8mO&(jM@xtQ zP4wjD9ov~;qWu?R_03so>;2>+QW+5BfjvFh9NKM#tZ0;#p`$Z;0}`eaQPurFyndrW zK_{J-87Na}{lL4hvXUh-t1S|4g!&IcyAWj89St=>0SiSH*rG&jIUV;S7T2^>ni99? zHrglJwjFPTOcafjMlC&X);y)?dB*#i#hQ9LI8&ytJQnNZeV1!?3|ZT-z;PGnm1cF@ zMWxCwk6xH34}j@c24(#E7&f1UDg5fWYt(F##=ZcrTWoyrwqAG_D5ebAFY3{gfns~w zFQE-n=&|!_eMH%UNGv7pzZfN+IX^&NFc`!>q|axhbT*PUnG<=OTJJ%*FZJ#_k)0`o^j0s{wAA zzuUk51Rye=Hj78Nx0#M-dRRsto-PEEF6vBnh$1SGjKUWpZ-t z{bEkL7>CQh6NJCbuL(xJtx*5;uO|N2tgW-288k%qgNbGZIXce_;yRlGj&5y1Rw4J7 zw)6WL)G0&8x;ebf zQlcxVcT+wTejIGd$AI}M5+cl*zsbN}vDzYAKVOE&Z=XV&5EbIgbbM1O*wGR2f5z^M z`{y4qOq?9v9H94UOq37k)>a>~|Da`mS=C;&HoHx_jG-M1%bat{ZgBkTl&qCTH0GlFyCkZ zC-CxK&#j@F*)Dcq3fbEh=2Ywl#dH}ii(Nj?#-#E)y!NrI$-}pum`o81n*RN^>dAwnf25eg# z?tV$Tlq*sonhyt@GQpHrpZVaS`IOV3Our<<%l^A47<=-|-&a(Bs6HMi$tO~e1xo$? z+75G0I125_%;)(P#&qY+FU9p8``}598Recd+y@3+FE4oDmbionB5YR-#(=6#2BhZ} zRKzhp-tWEMl+?{^u_|9yV^s2exBfG1`8;+C#~+qKv@OC58f{gcX%7UiBAn8eHa z!}b)FS%hdS&40Qi<}tj2dcE(@kq1F3qa$#r{A3`&!=N~L) zj7;_qCPmfqD_e->SoIi12neMfiMH3g=_UC^8;3eXsp@0e>xz>!c>pI*^eElmDF@rV zZ(UNZiE-jpb9hV<*WQ<-HWMj#-F@?VWFeJdwM1hRKbk?49s6y4afh|h z{k=q(CVzH}W#2@cPnh5u;|32VF-J9rbNI&4R{DSR>S|zrIX|8%$j-N&pXhl^GIvb-2C? zi>Q>_ka)?yl9_WJU#I4_U2f!#MNq`6G_b^XM{ak&$Wy3aXp6lKT5b6=0#6??zC{gC ze1@vkKz_ERc)I$-e;8;Xgi^p1tuW(^j!iTKtlIi*K+;+_$iHHMcns6gh0sDgOC-DywJvq)-)J4ey+OI~WwA@=@M z1N%lFs7=j8Dc0-ubiypchoAky^3J}++l)90fE3Cw#cqJJay(|iLlEJ9LqbRJ<4@xb zY^zaW(m~IM6K7Zc1THfyAA)P&KT6HJuDl@9*Y*_1V8lBIC3b+mDL}9#0I589H|6{z zz-G6q$px=eZHf(#-Hkc}?}1+)(CQo@z&BN`1;k{W8B2?5UjTvG|Hm!BYrLZkpdLD{ zY9`teGpvJzJg?YlkzZS<`hrftQtR;j?C6L&5Om4{*t1OGVL`nX#S;^a@4tDJ;B@>J19Am9eSw7PqfoiENf@ z<>sxr=x4k0Ys2$&8R@?M6n5p2F`ixuy*jugc*CsynP95(W0*M*0@r>pJpQrAI7zo4 zjf%hsAzczY{2N3Y*adFXAgxHyYbM-2Qv;YVg8=>%6+X%r` zZO7GPEo0FHS7^7T6m zI-gQ%t>NUhdZXtiZ)<{Ncd{04nt{992Rj4jehz^mjn7=POJTZAd`sp>e^H^`&m*{M zp<}l&zfu(yhf&XY#kF!@eaaP)HmVnJ4px3=5Q@b}=WmIW@|D`Fr&A({=QP-}JK%35 z<9*zU6&u%S^Rn6*1>P-B)bhDzb@{HxlD9IMQs=_?y2;ioJaLq+5~DN|l=Bd!`Q1Db zT7X9PUfy%(8*tor0G=Za>r3M1Z3kBUQJ_x>ewz~r=}4z`d{8GhhxypxZ+xyklJL)` zJPI17u{17CGU#3o*I%#Y7{SZ2Iy>;m2qBs zeJP{RDCYIvqjYw+^(*sjHxk|cQkj^{d%E1@n#3kEFZk(zn{B~#^t&)USHanTy4za2 z;c14#rpCqJnnL@rFodl&N}&|~D8p2~t=Jswa1eTv$({&aCo2AU_)J#hA2UEGZJ@xv z^ddVBLFefWb8=Ku^stv22jrO2dw%Nr$VvHcQ6S_`2N@jn3Skv2(H)A9k6&s+o16LU z6MiN%igYQ^w$(iIXKoywtWlFa4R;&JWyTokl~RIz{V12Vyu7@kScYk@E**zSjf~mM zJwJFfoQ_S=KgX024r|tPq8H=J7({g%(G zjgC9-v`Xuha#7Z0kFwwqkNMF(N(_j4Yqmh=;-8Lr3_#HQNZj29HuwV)*?VX_I~d*N z_d;rbH|4u6jbIw0_Smh63D)Ni(asm%wy;iyNJy`Kxc~_af&tBmjHbC8A)C%?L4h({ zbWwFYs-_qf%j#(krf~6n+`9mBQ@rpqUigfX3j&_}hgrtO&m9X1wZiUVx_jo=sc|34 z0%3c!j8@5|+e2`ECzCtBe`}h&OB7HD1NL4hH20#Xy4}GeG>W7V5^R>!p~XQy z7)F6a(fcVsfyOAnUnv;GpObe=;vf{;Vx-bx?%zoIbMk1N^Fa5y?i;(C*KgB-<~0Hv zkY0Lo_@(XVjx3NFz<`duT2L}`_e$zRVCrhVVp0oS^i-!-LV0$ow9Rv80kLKNGGT~O zhDLvnVryJ;UF9h@w9s$v!0}@gl0t3w4lw#^Hz0gp6QB4#(yElSqBOs4SvlE}7Ij;U zu59BalfcCTJxzl&sL}1TL7TI8iM)qH!-e1=H=%vL|IUcq&*TU!3C1BmG&pN zxQxg|lk(yE!=l*RscQbZq6Wcg;Gvh_;nBGP!_SVKhECNT;vHom@^65Md)*3R)o%|} ztipqDz_G=e%IhjlX8pa>W%gaCT z5%I0>Z(zV1b#_i{ruZ&fzI6WY{xuJe_{8z>@cIe}8Jho6(DSD#K|S%8zB_w&tnPVU z#NR!23{AV$Ryu_oms;u_Lw{ImfA@qe`HjCuq2-&Bj_mInzey=te@v|IG=BKlT`cJ3 z&x6PH)%$o}-=cr~m+1_b6i~qHnvWi9xf-X5cwy-_9lBqr`N0vqej>d`x0`zKKJMl^ zthZURt{yq{;Wv>Rxh!vwUukju0u1o4wG#E>UiAJ`Kf}+06|=`%I|l*;osg)HmXCO8 zvyq7}tXt+Tz&njs`;;eX@TZr1V_;2vFA>(22*I!T0b$;4sR1xkl|zTmPhiq>><5{v zFmUtBQH8OM?{Fu4%qdr5S{9f#?nT@2HC9!;*FDQTw>{-6V3HI_I7kBXDDN0G0?Oy# zYQMj1_d2n2b$*-Vfp`!fn%#KKA7`HODPco_#oW<3O)(<4%;7J-b!9P{|7A4zUyxX~ z0%Z~rx^-(LS(l7kWTH>XXM^t=$QjM*YlZ@2M0Rxv|6on<4b@fr44bTYK^VRj!~$;k z%M}QN^8mj*x9Gy5UxC)ofrPIL8x|2gGH%C9wpobg1Otuk5%T%H9?Ief5}chtg`+lZ zZUCj7 zBONfstEjumlZxV&RU7)ekk%{CE3O@$)*T3hy;86^&pkdVn!2CA$C=Mq#_o?5w_xCR z55%8G^Gaf7PcS;d*p@*ytE^J^m^oi(#TT@zi@eT0l+30zT;Hu=@>9^|)Ci<(6=Jar z&kc}iui;O@7dWog8)VyIBMqXFEmbS+J`dvn|5Y*twwAe%$2XO)`0{ME3 zvIFt@Fu!!0dd^R$gxh>A$(2qr!JC3EhXq!t*sr(y#Ah$PO7z;Ad5saQaC*-gg{&KZ zNpvJR*4@|n$V6>-#Y6)T(w85%{=-URt^oTfg(FOcD5UT6UC->KBh+Is@i%vP=Ut!F zwm0>?Hs=#S(-R9Go3&#UlHH@3nP zDXAWlCZhga#JlV6VqQU=tumn@M)*wF7v^5#q8`$xiuiY7LrclEzt{~af(w3+FNz#l zuhD+vLbxi7Y)^7}rY+^OU z(PWJJ-S?675ZjtCuzL(6M2O}`eHdu!_daU#V26iqjB^E`jqv#5^Hwl(mwZ8SWKgq^ z9%Eo{ufF;+C9+gFon=|$8&q9zBz}i4n_s#UW3P`hH3s#Hh?OA8Q*7oZpoH>Y6mEYB zHuk5iXZhuSY1U(|>;8Vc#azzvOFM}=`>q59M)ya1w(uXmPou18KScU)PrDBuPIT0& zWaTXTT&NMYV=)R5NewxSYd7ehkJrmX=;C6` zl%P1jn+rr|;2QGK1-(BfX>4MIj@{*|Oe!fVF|UiwV;}X_>&FXun|sXbuVVJraJqN+ z4qzjUXUbR+<}07DHqQ^5o6Q@ZMXmnIgn96fG{2tYm=p!l5}Wf9E5ha-vytw0T=?6J z(2+k^vDHRK#!gU*SDj;Ro}G=YUa_oNtiM8HFa6am`iA{vn!pu)yy3f&$GHL8ohmy} zYQ(#9Y#@h)kg#YV#`*kC7?e1D zw-xv1Z#X}zst5I!-v_N@Xx8ofZGoNDy4ZcdNR{Wf5E$Lm2!v=5h7=9LV>pjVXg z5baCCe>kj2!WQr;D6KZrT)LyhYOa)E48_OKzXINn)C4%Dim`=|f8`wOBEcXDa{I06PtwL|Q)q^W^l)0+=hj&b~TWSt)Ce_WY8SGJ}&Al21QMTIM z;|^^Qujxy$->?X!Wc}U$d%Ws~!gLgy^hgX3T^p*C8=K!a!94rWR;tyK4E)TLjty2m z{Qz97JvFS|iv0z@fa5C+46^4tQ2bu_W*b0gV)sc`u-mIeVD3MYn_^01Pl5!MhFM3Y zrT1H2Kc0UUFzyBRhy57sh{dvNeHN^9UbAY@e%!b`W@Tzbvck1U;gSaLWX;`?wr&0oZncBP{Qoy2m0y#MG zHqYB?{3=$R7x**&;OUL4PDmBRI`rY{fZ3YQq&EQz3R$VhsnpLJ=B-A}y#6QLcnW|? zpUkami1Wdh z<`ess75Sf}LZ1Vu_DM2pWCzUSAYTe2YhzAO4UbM`4eVU+9fjWjS!sIIksy?N_z@5Y zRJd@DxT*qpwDQK4|0tXTRy`XU1|dNiv->Oo#_ZK9^xo^gggH^`{L&epYg`TTzcplE zXW3~m)NFT#mh0;ed6`ab4-gBoyePS<>czml6bytI|1qEY&fNE9zJ>Z80?`v1X(7Y7 zp3kFpwmf>vI@XvlRL9uVthsBZj}`faN>&&EwN;=yUyHG)i>6n}Vr_GTS7ef#|sn|v!tg6;8k=I6XtSN;2IO1U+Q6SV-C z#f)0-G;o!jHqwd`@O7!qN(o*jHr9-ep1)ClF0(7uL$kMqw9BQz9) zqNmfQ44ww}Z9}aL@q7GA&v;z3NfDM;7hB@{U@@*BPmfe8vEIP5M{JVqzSi~ms{DiW z3jZiHbo8k|(n~V-0}f=t*vomDcvc~yP?KU zvCLoju;VW*;7j!M!Vs+OhTMf_#JiyUh~P#{j|F~+IECiB(?jXg@{nSKc35HxwGZ4K zpL^#CNzjgFg?>I`=;_6or6bMCX7TMk@du!z>Q=B`@d>pl27-&&` zMWLfNIDj5sb&Nz6bM2Vcz&C&2L2gT!)l%)NTfJA{K0C$gT4dm4^EY?9Zs+v{#Dw`# zZlIPdB~L%YlZk;omu9ukFOSnsk$vrh%yZwW7ThNl7YCR>>X%68%YErj_(<_TImDSP zkgHyi;4MH+cMwdfCUFCDWh4_xSw%OPza^MF#<_f0WYOy{DmgBXx9p2Ha#MK=`^<`vhMOcu^r9l&1bd3%NVB9|FVU>_Q!xq&zP== zt?I)w@bssKwQ62-Nk%Tx({X$>qTi=W#_qEcBm3}NAj}t$_PFpestkyw$Qq?%NdAg7 zi=GstYf_V)A#b?bq0imB-^*e6T`9>?zsSIl+r>cTl?;;l@`DPw+k#3JbEvyss$2B6 zy!}Qfj{c5*6w+@igMnY(ma^aNF4^I=-FHRvt>z*nd1%SzPYIp1 z{+XRUbd)B9-foklQfm`&xw1R~+gu)Mr>@@9Y(j%!M{{L#rE4<>Da2gBqKfS1;+S8k z_b#B;`lWh{d{-TIopKg+MtzC1KPj;KA5EPcx~U??U%+TZtA2oWTLvy%g;wlB z=hj@IV|e|NKoIWu(-8rWM;pq+4G-e)Msj3E+76^y5-&Q`wWT!=2KBwM>uOkoe!I8F zJKg5mwdPu17%{hD7ZN+6MG4koIK@f}o}`gjbvAA0@6I4qCO>3-gLL}`tgwpygvWzp zm9_F-KRgdusTo(6xS!BMEv#rsercY$=KTYRlBGWV~ z+0OVH&3)0nf)FH^rNq4~Pn>Yy&K$912#Sana$=qp%9olvTsKwYyWBKd{_#HIQo9~a zVHNs*!vYJOeG%?2u@c?~mfn|?t1B`lgt(~x;*{&xbga)=ZVK1%J#86P9Ig6!s1pp6 zqf5E-#hGT;t{tDKl1s=yjJz{+AK{s+MD@YoX+NNs5%V&9?>h4mj7i zw^H;=n+r-e>IMH7V{a7}RoM2AN+{i>bO;Ivh;*l*C@tNfGz{I$(4e%GfV6aXw}jNt zozgip3=A`S`TqB}uf0$9_nyt1u4}F5e(qml{h6*b$r75dx7U+4DY&xN{t|#M_+u(P zd*gzCtsc(x!Ivgz+i-3DNhwz%{yd{vf<%5|97EQ?J9efm#nV@QLhgtBN4wGDw?MVP z_mjWMQ7dztjs`{@`vnRizE8K|t!R>YXLM+ls=hr}E?<^zJbcr)LZvNP*U8SwK2*;r z({r5)#-B3$N*b>i-XUNr9Z|U5Y)|Xk6VV$a>J|w(i&sa)_93im3riPv^jNnl%Nz+a zEqU*T{FnBJfjkf?%1WzEq_^HHA|@%!TdH|1gnadQI81?Er=MInHa9cYR$%ei-ID4{ zA@{WKc$b!+#cLjzQ*80uT5S4@=r1x5T1d_x^Cf3v0!!bfU%K5%B7}>d=v_QqC0mqk z_?8GX=jZP@3=A?BEN?(ilWzMizL;Ixj1>BT&K?m}2P+z5xW_0~Otep4Ful|VZ4+`$ zcfw`WW?9G;gp%?cT6mQeGsTkMY5~A`#rP2Q_N=#-Ko`!ZTp#&dnQ6(RPo35q%xMC? z$=}vJkqGaO_-A>>a;9$ENee}4-LjtmcNnW$pSB;vI&H>&id-V^QJW&P)r)|7apa;@1?p;ww*2XBPhZziQt95Y z=V}f?8_O*)PhQ=drba|y+xj1tUoN}$ehN{SxB=3ACxq7gN||pLd78L&24ji5J@771 zvRW40<|!`aCrm)iul5*W=-Uw7$SeEsIR>OZIYX~V;BGg_!5 zI>7BAEShF7#l&*Yyo4bb2hL>K{X{|3VYMyQ*zb(h2;VCt4#ly`h`X_uKglr z!;JU3IxJ=C?W$9WBGg!WY1?urg=gSU1Ek&)74#VQ+%+ks>MW5SdV&IMaBgLgp*>lo zm}6%~6({Q~S*20ySPb*%PW7zkX4us%g7I60L1l*)VRHB4)}I76(T`QVw@Q?)OPb~( zh-& zjm&8jP+nOojviEISiOAEVmrfO>uz@#(6bkeb#2hvYf=%n#`R4Kj1V?+(5P~AO<)Vj z@OAHb;w&W8{+3Ek^ki#v6?lC=FF0;=u@le;)(myOF#(@Fc0WGwH3n}&GsYTri_HMi zMuiF0IS~5{CM3>&^xL3b-@TqaYmT=2v7eig3X_!Jp_t2UT>XyoLe2K&>=H;*#Msv$ zRcL#-Uq7ffoNx-rVVdTy8)xuhy*UKkoUD9mRoUzL!jpwFvpt%glKje8-iv1(C!K6H zW$+Pt3rL9`pv2{l7aKJ1o?w#TSd~m{TX1;$-#E44msWNb5ELG}uGad^9zF;p*%B}M z?Y8Mgk7eBs94u{Y;>}v!7Q9!Ts_@P#5{y6?;2ZS)eRz{xE^z^i39Y;Boz+fCiDQVy zTeDMof#Q{{~a>DqCE7L&EJ5sCGkIB{gfnOg!BcW}yl4+v0Pt)ruVIiWj zJrby8VRHe+(D0`04yR&*I7x2UyW_zDKc%989X!YklcrQL_9O)MWxRAh1V)i3`H%>- z;*^#K(F>h4dgZmRB?kF!)@RM}Lh=vq|-&(TVS*%$hoC0elF}Pu)z%)xk4?yfhm3cC*3cqBo9r zx(x-fWo=919rAJ~bOYCCuLS#*SvqP9zq<@HmsXlHL58{A{P&egkmN905Y>6Fl;1`~ z&g(y3$nZRn{S-UltY4JqRncM7`d*%24~ViQX!l#lzD0#X3{eSBTT!jnm)`JwlY2|N z&1I)jGK?Jb9ns#$KP87+#$KN;{P;p^n&;D_-Th`~|ETm;c`^0Fh^T*8UHm2gkp&G` z47_RAYP9>vDkJvXX6(;UIw7xTjAi|Oigz7&TGc1f&GYvm6~nFn-DLsT@8SuGIpfKI z9g$EqNjo9cdoehkpd(wBq`STmakgrQ-G%xWq*|$dIW@)Z$_bFQ{+9ThS>`EfN_BJ3 zlX3>M(lQhKq1yZ{yujFDHSqR*iB4k$>s|B?&*`p+EmO#8I6RotWZGGdnPV~HQAlJV z2cnOG*${jAV$1p4cd1>P7ZwA^U%9dh=gRsS#Q9YYOM=t&A9OmLO%Zeo=kU=Cz7%@M zUmVeXDxnh6dUKNO2R`RI!I{AKw3Z0Cfv{Qg0(hsjuUyA0FtoQ2tj0sxoiAY zkU&n`XxacRfhD(>Q>yBOtBH8*(_N2rrxwc7L2@xGs3UE==Sd0tr^FuzAvBe>2TM1S zcFB;_0<}B^f7>LCFOv6eY+|?Baug8dFE@(S zRuDbk8n~YeK#M(V@wZSG@Q8HBLK~NKs)NzSD$jkR;K@m=zFz21VG|V%Q%ZdG?DeB} zF|;Ckd-1)qJGQ#_y6p&;%b>_h6HPr<|*SkCi8rC5~p?I6*{T4A1o4b{PX+uIMuSS^d{yWFNJGc#=+e~_8u z#jaF$4>xOEQ%<<>YV{QjaP;2gmCza{1#%(yRko@NE}X%8%gmSuRggwK+rAJQ>eG=! zkJ^4js2_oCa&=(B;HGS=2u6ZB9|X50xw&KLXZ=_VkKET}Gd%=X>yk%vcF$Jhb|waUqMM zw`-(B(~JHvBA0pHCAEV&$^1_+N2xU?OWIqkwQME*%C$1@mAFJb?ZY`zY`l18_DODi zwqSao@mak}eSZubI7;u5!r>{**Tg~S?;{7)G1sC9%wk5!4|40kc$*j`uH@kLz!2BmDgcIv5p~KJE8%L2A*@*aXkc%edLnf%PI4)NvLjKiKb8l5Ike_abD+bAyzaN&DY9&ZeiYH1;vJdJODjCcCvfJ+ z$2Tw{f|e-XXpZg#tEcq&?Qp01e=0X06RAyaPl1U${A#LvGqbrElZ-d7dvzL7<1B9_ zp-Stinx%NC5aW)YPLD@$J8VpYG+*p^$oSM?uO}-{{XAj`aP?$MepIRb!SVe9`%Qdw zXp4yJ&R?RxK?l80h2A-D;+P~hI^3rN!mEV-nm7n-Rl@Cji(Tq@lisHvpgME$J}u}kHE{D#%)jgz!q8(jzf7_^r}nrB0h zydI;z7mQ?a(zzm5)U@prd1?=V~j}~e%2n~Val!NYERjzNL8#`PE z)(6wY+6-my{qESaOuKF0$y;JzNuvP2ZyEi2l5@}f$y5%lvd{1zgRQ88XrHRH2`!Nd z4Tl_DIMY#6p`8w3QJD{ziBn3=mIbe37l1lDW=E=Wx(eG|EoJvFppq76p&%hSd)(lw zZ13}}0-$+o>;U{j2rHn9uNcRUjj@59$lal5;;v32T=&O|@zj|SxyYZmC|g4~q8 z#W6g1950)F9aHPyVSc!mk|twQk)Pl(i@pYmW@zmYj77nWBbhzy|E3_*gY7;3Pavce zP`E5f{!ALUb1yrtFWe$Ohak=rrwbcF+`61nKoTzDQ|D<(0K=_`6te5y6%jnUP!d-B zS*jxDag=>Xv%Jn;C-?g6F$7dAs2r4;V_p4MX>PpTSLkl!S}&*zAA5W~DU1jb(-);` zpo}d)S*>YR`cs<^C|1jkctgVPh`7z}Cj9;eC94I>_wk1)Db11ZlQGaJPhpvCJ}tFv z-S`AJ6=FnvnYcy2&!R409-C~7RYoZI7kk{qCodf31~1ZI^B`m#w1 zh9Uj(GFk5w4H%gqBh3l?t`Q_&k3Eu>@N*@{J^9h481A{q1BWbnDe z3xcGURjMW&q?;(jk80GrIgI=J{c>3tf3n_%vXE%U4AmpnXk}Gp#eZ|8OgcoW_u2?A z-G8RcJtHd_kEY`ZgpQ zw+9`P8&(2_4yojJiQq#bx~fN4(T*)&g@mqGy>13KU+Uf|rahsxzS>(2Fo6+Z{f!y_it6qlHK@MMzK3_Im{ zPTItvfKqr=!TK16dcz36py1fM zp&^kZM~H_$Dw9c|kqVt)ThF9aTbX)LD8QMez_7Vy=n1|D3>p4J3fc4x91dsl#)a!; z3pyf%_1nC@E}j`Yd*WTBU(X>S>GgWWO_PPb@@LKOpU!8e(^F8VPsMK!V6P+aY?RQ@ zH;7x=wBxAv>YUEnS1CmB8Y05Hfy7|x722y(k(v|YjX8=FlQ4!y^$ zWs%8T2ID+_eDfJ69jz>*$Qf_4d545)7h&W3eVIX&5aeq;WZ?;qpI+JTKyK26isn08 zTld3qL~82jL724YNrX4^R^zE|s@mfdZLC;e$$3F%(q?wv6-+b<1f=d&5neW4j`tE> z5Dl-1*^_Y~cs&VGaT9}Pl!Q!Dw8p}av8IlCZ`4Feh9^)QJCmitjaZwJW^X8plWiN z-T!~tng3aB{zKwC7Yh813+K%eJ88cp z?AV276t4Q;VY(!kK1kdw%K=hMm-!4c=d*JPPOsw?pT+B&wYFy?kdk%*P-5ulFSj9k zStJk{Hoh(sJgskLFPTKIAs?bS2sxN$?_Bxdx-;}%zJ zU{}f*m#xa3HeNH~T~+J-P|=OmY?FUqFG%VR?0LDBok%62(mP+h5hAl%<3pn=Q<*!P zBi)vbCs|(jbUjR4mD=STTqZkY8u;qda9rh2`(m+h6VNmzaP zyDD$g!_A&C80uR4UWKVsXZ?{FR;75R&QZ+~GO8oSBnwZk%sLANWa1Zt*1(uKEXLvU zZ=b@3V<8U?*?NVl1$w5PeE z+xA&HiGHFyg&tb%a2(Q3$@>)Gf`xXx_5#~n#w!y-T$DTQ8qvYj!olEQ_1@p&q_(r- zRTZO|{R9vBJ&siQL)?wA|4!W&^kY^-0PZ;nC^s)s#aY{3{_D3wrHFmW0N!Jw7Ilj# zSp{mo4vi?M{<0!s>-AYy{iZ-|;cz~-=E+MNP48$o&2ZnN1LRR$PE42kc-_^Ov^(e= zQDfCPX||SsDBfR>kzo4@x~12LXca&5_UcFpcR zcgF{Q<%cSOw>$@M1@)IGs0FYIt$hq9q-!`>ezpg$$|+PCzjJFkJPGKzN+ds*<2gG# z((|!pqH}IP7X5r&+RsyW}GsI6Pc7*UEkGww#5S3;>t|A3ow5=RHhC2Vf>yHVCylYJu4^P>HDwmk-dxn( zt6g2gpM?#D?hm})P~<-JK5%XOZSvGp`95Jb_U_MR8kp!dD2r2vn`2BUx5A1E#nrgn zBjjdVlK$=_BY4H?E75C1!?KN)4QEYjAYrb~3QEtaCS)vkLa*?QmWey)M<)P*1EMq6 z63tdZ6X8Vdczj-lO3bV#vl#3TGhMT{qGOVbz?WY zjtjAvq&%1b6?!T|>)lmlAr}OW8ohg#Mv*S$@C(R_7E2>}S7@QQ8ym^I<;kcK3cPlk ziX#?^u}|mX8j9Dc3tTAHl+6t^yN*O-kUIHFUle_tLJ-EVn+QzfA}5l=aM6J-`p3&J zYf!?)%FAekZN{zhOgRQO^erF8S-_aRql~_!Or05FJh3#1P4rDWX?`6_eBpNc$4e+e zpWvy=girsUA@;xg>5*q-mjz=RVG+>o{Xmlsx_!`mfh}AyXlrjseh_ohQaLxly`^~n z&UhN~jp`ih161-NYH{S{Dsa9n$RT>L4SpdZ z^sf46ffL)0xXyR+%>1^AAfe@{LX}$L3uHFm?aydy=T*gB>2w$lRk|h^O0n zbR8_%cGHHuqgjj+l4?o2M$|6d-A@qgL4cL6$M;o8?>}G|d`tImEaV3G`+W)GO^pB$ zz$vO;0dNfx2`ey$?Y*`f(LE$^qhM|A__%0btoJ&)1$?{VYYW-U@Zh`h#HB-) zDmt2U)(Bo}zbVN`CZmaaIh|m0e(5q~)MQ??!|v$0uOVKJY!IR|6#D}@qV>j8KMDH6 zE_hy+wQfwKVwAt95FyGUGY16LZt@;D2kz>>44c_&TT#L6@<`pqCa?T6XjJwa>fFR3 z_E=m#yZv?itkC9&xHYm5HQMGzoU^f>kA zMrBhPZ8o1k4+RZ(%`Oc6R35kN^we7|c^n@V7M(Y)%*GHOjbu0x1jA%c_mfUwsDMI+ z9R=()NXGHp=0^vwN|Ku+m2@>>S5Y7t3#vYP`ZlEGyivXq{kNG7bCSHjNtz>22QEY<*YzTf8hpY zP*M@FocfKBK&6DqVGgjbJ1UiV@t`+a=XcNVT` z??!(7;Lhvt>^Q0>9K0_ga~e!kb>4R2`$vPd*m@#2F@Xj7*-Bl!gE5%4gK;C0m)lb1 zr*N_3(8K72q7Y~y_xH9aV63ENY#1P5ln?s-BQ%n{0FY5@$RGoHy>31GC;-#pU}U`8 z^(&xN+nMM{stf(saa|JVCy<#UvnzbSn91PV6aK>SiIDYpKpMZJJt#MycEK4#v9NEH z@8<_|Qf^v+rWwe+dqSwb(p~6SR(yK!+}H|XY<5Etcew0 z)E$(sgV%Al%kgqQ9Q=Io@kddA?_)qg#=6eBB{f|6wFg0sFAyp>QZ{hDXa?^~G1dS? z3d-4=T#fwsK&Uxfz!wMJiE`vm+Uzv)J#dBj*F^@~Jx@HniOncq*`Jv+&JzNHg^Why zL7YCThCJGBAuVS6bKP2j0o2!n`7O=ze>4s(>$tJRxPM5gwinJjyh)2=*lh@Yoax2W z@WL5T@+R7FO$NpBD7oZdUL{2w&{3@D~oxOJd1%C#~bp!_IYR=C%x|xug~srBO+}X1~rz!kbSTZa+MGGy<0A^ zA<7M#=@@Lf7ToGRgCAY9fBCQEYX37n-iZeO0>pWX398~U05)6qBy%*KzHFoGR#XC@ zRyYics<SNGLkU=vCqx5$hx#r_&*dHr>+x6~8@-%cpn0)^>?*StUC7+iZr zpOs0>;Mn!dmg(h1f(HsSeZDis&Db287y#hAB=2fCgJ1S+{lT>!pVh=1F%s(?1{R^y z(Kq;_UF8%Y@lULmc-gff7rs}GhJoS51 zAw`HkT=HG^rI_5Mnunjq%dEP(VMR1v1KCyOcmx1Rjx1EpkOgkeQ*w{R{|bZ&Z1;Hu zi~brW0laQJZ5xTc;fB*#O6$Vj=bu+^ivUGu6970n&Q%&5vg5m|ngRe_Oc&-K_N{>e zH7VpR#)|!Y*>6z|dj%`iYk~9YyNVk(*CXku1|F|y7WA@^?^UV#wL4t@nqt5^cvK^W zi}iN*Grn4;g~Ms;%hMRv60|n=|W}2c{#M`(PO=jM$uU^)Fr}QyLH~@2{zUWtC}QC zokA&F6@8AUa$({$=dT6qj0yz<-95W@%7{n9(-fk-B3EfQ?w1JbP0WuOFO6$H^I|!1 zrWI8*T{j;$EMZ)CyDtwQjK(Wc-41u%tPF<%xF8k`{}NVlE>^J)>qz3%IWL`~fLDwH z^dUCgnB?jsVP6kaHrkJYiM#>f(-=@f>%WVd&o)ri=xY6h%(XpebPxOhWOMsDuka;R z>K&JrE5zcXXGomMFG8RfKUzM8zRT9gS32+kN}x8uWauBc4C~(6=*zjqvyTFk9GoZJ zLlcJFl#L#94Q8EcoU0Bz*u7c5wyJFvRaEh*@m4I+X<@!^lefCvSw8R=+e^={-S6Cs z3{zX)8K;f~b?*NqQULIlNgXTSTmC>6^Rg8KDmCf06-DN-MtR;8d5T`S&3iD9Ow1PvepUI1J z^vRAP{CJ&51#~WyPYquUj^uU(n5;*o#8UfUfxyEv=>05;t6jr8moD3Rb$ zgeVQzw&zStB?x1?O?Ek^KVqN>}#t-|ij67GA zJCWBkAJN(5oq7p;G3%WQzvnBJLKS`6vEj%3QGQBzaK%$1AHW-d8u$H)fn>xLVt#n? z!E4Q+!R;$<*;WHyO5EC^dr&noYxS&q{S1-oN%ip;%oOQQ);Ct&HpWhBWxCF->?UF- zIkKTYVQ5lF;jlZY(}3Qw(tvkKw;SRhW2@g=At8v3TfghH*y;bCasdR&(v#T#PBtSy zmLYlF;FG`Z@=_052EJ~9noDDtlB>+4%qHYiV%$=UNaB(aB>ZW-1_ea*(sjnSh9Y>Y zdHH=VJ#A}QN)uB5KwIsASiZGtHcYX1D(NRnFL66drLKOt2BNYqkk60W_EdDU++gkg zMVKI`Trxr3I|jT3cMhO)y7F+OFp>jXM)r{S)#mFjq@?FW3`p9UV$A_+ft;vgs(1TuDXRxu-@k; zqmiAnQb_t+%s1u;ez!DXvmk+4Ao8Sm?cwH-ZGhxZhY7zLMxOC36rshTQvm43Cy*Fe zd#$hz*Vjssp%D?|p$KBJw`YeI!^xf2cRW-3Krw)hSUj7XG3xw|fy=U|z+4w^O9gxN zY)lL$EJ#qhWa=O)NbGxAjV2>B-`!G8W$cxCx9Z6tQ?`}#uii`b+;=4ESzu^M;~JRe zAvTztd_#F|nH>-cgu3_^f0*;d77HSJdivu{U{R+}bQ28M)paTwLUEQ44tMG(4B?D^BLlPFiuYh;%ED zl1}xittZSWmeE~t6X~}EtcZhU`S+7f(~y8iS4;YbDY)&fK-&nYZcX&C_$$A<7b~Rq zG3L{+{^L)Ds*4bYf#$5$#+ZgNpQIQ^Li*`PVlz56e2M3jo)vlx7m*e#vmIaZY=$qX z5Fs~JoVswzZ`RW(O0$O_T}_JL?t1BX|4QziQ_sxR`m}mzHubyEdJYkXTMU#Lvf+ z#D(!T-?8DEuvFciEDPh-LW|xx|NCo^MSAZ`b!tA#vbE3E3kOB<9i8o?=|ZK@SD4Z+ zFX~pN=c&3zS2AgVvrcR(9n^NxXt^jcE3-OHxn^bQ5>OMOQJyBSU*5R-x64Y%Cr#F* z5lD}@%D}Q431-EtPd^*xL90}6uQ+yW+jt`Tn*Uzl=d4FdD56Qb*tk3`4ZXtRXpX8# zKD#bZupC!#(4fxCxr==X17n@9-HF5`JA~kHPNYJIINJendj{@sYM-pPqe4oGjyt!% zNf44gUZ_p!rJs{R`JyB!0*1=zCc~B*Ve6(&7}zwTN<&SU#Bmet)pe2vZI(IJ30ult zq~~(M6=X0jN9=~?No@j=MlA(n)(+l+wa;qWSB8a{YkN>snP^_P&xrdMj|1ICcCA~%U`bEm+wI5>n976#LfUl!S33M4GZ+}vo< z2o~wozRr5rJ61FKY;E2LeJ`Xs3ad9}sVqKTr(x*bm7+A(s^AZEW}X@+6nfuj%;^~- zpPQR4nY*uVGNh#C|#O68)Fkq&)9Ug^HP)lcBa^|uk_aGM$OYnxHB zzv(Fv$_WD(N1fZ*IgrH>JA}_mdeV}kJtQDjdP&eh7=8D-NoXpKsQuH(L@6Lop#(ep zhu-~z-LNHxK|>k0zM`SE$2Lv5F+{4d-flq3G1?uG{n>phDg`JgjC%IZ^x2v^baSv0 z?!>~b))UPqFVmU~`Cap(EoE!ynA~P@iRY)3Rfo>KZHm)+U~;+Rl@{h7Iw_CD^DXB) z#X6N`>;9Aw>3v=#=`HY`72n7;5^(oa;t?-g96_vTrT%7v03#3%R8C)on8;$z^8sm> z#fdIZw;2Hn1mE^r4J?avY6d?cI9mBck48o8)t%9Ewy4S@3zoO8RWxa=y^VwT(Y|pj zY9AUh=@p^`Z!ml#ZePhje+)e(wSI9av~zu2pDx0@!t5li|L&{*@h{-93W;8yzy~fs zICE+aiw$_UkCC(5<<>nRSrTiWU6O_X7$WLrDz)(>RBXc%YZY3koWA3z@dZ;D9t`>D z)|rxb27Dd`K+pHW1T41MwMd=CDw_&H{4FB&c7jK(C&g5L|K@Ijm5B)=ESZHd`r#n- zfA!}4&$0usKa6LX-#Pxnj|+fim#N3wHzk1RRK=U4HcOqtrd#1OKC6nw(Py1J77pg_ zt3PsOf)ClVlrf1W1{E0~Wv#_|27|FmW&Hmk>8MV+U^#oN9RWoUx~XBtav-+g zseYMhEB66-L!9mT7Ee!*%F&|}1FI2pHRH(FcdfA0O&37al1OUwPmW)2v!Y+FI&&fB zddClYzE3`9VKjNO7F}?(v!hnkP7e9XrjquXrW;Y5Nrnvr^bgzz<2k{=`T2(M$LWbL z%;x6uO2?%7cK$_#ag}KxDUO*@luEhRasR`^orWO&T;`j+I0ifKEbtxsP`?;jEUkc& zgr^7FcOsQXFbQmJ^;!i2N_q;*_!;i2jym8(%s!-SZ%f|HIH z(Fi)W88&`BF)7#A(sx{n!wdWj2-Nel!Hk*WRgkPN!P(dZx|dWh&A4Dqqol~te>166Nnd;toszfupE^#-=LOx8L z1Oz+?P0-3d!w}S~Z2GR>(UMYQoXRrIUF=9j24{GixvWT~a-26v)^GRfekOFkq%=~a zL&IHQ;nPa57(A7Pqi-@``uOcuBi<6tjPRnST?3d}CH+SZBo8g)g!t zpOcqJi&UK9XlXjzex(+bWc#)wX%e<(fPuB~F0uDBKP407O^)B43zhw&eKn1Q}G^b&3pqA_%QVV+etkDIzgKVzZ=%(puy^iKm!&w;+p z+N!^;1M=DG&sPGZ70p1l-|$?3K(WTQk}WRKkj91?c$bP1x#4SVPFClEjnFK&)pDo% zdRPR%pdv=!crLiXcS)$Z6o?R+J&;aB0V)J6w@^D_KNAUP`t!}&!=vWfx~s}^{;W>b ze77D^4}0^HDJ%x?pbWb4#9Js!g-%t2Nns~ybu9gd;Pl%8k~Jxk@iNQuG;$IW8O2!I z{HwBjz`XdO#Dq_jjU)6kQ^37M>}kDT75}$R8jB0L_ee~9CaJ@koLy~pytRu7Z%JFG zn!K39@)~y22KNm?;lL`|7`;KLx989pmAk-){)yn#Cqn$jDN39G@ zoNzBLj98$?KWiCPgMN4T>Hius67S!#^r@X*_5SZgfQaME#Q{ytAcDmtzKiUEsfTFi zacj3Z#ad%!OzvsMpXxEuZ)y}?DC(uoA4cQm<$?K^GTug+#q<%3Z*lU0)woTMPVIh1 z`p`)i0qW#Uc$gV&WWNQsyv8fMK?^-=w?Ax`;%%Sh!YI$}GF`}l^T`aoDd%%1TE6eP z#N+s^PWZKfd$&g##1uP`l=B_I7S}Jv^+_+2+8aBJY-SOByhE}H#GhA`P6)w|3 zG1u{+dNPXVD1C>Wdbn#JuaTp*=D4U ztaK7!OyxYmqvT%C=8iuYW@HX*+{mW%GHND6QkG~{%3%LoSNTV)P%%lNzh7@hm!kH` zmuuT(b+i8SKUo06#?TM91HH$z>h-|J?dCd_juR-@hR)fg$O6u&FlZcuW&mt|oEorr z@dgV44RlY4fas=Y72Ru(!Jkd)eFT_Z;($XyLr@`bHa5Alt{Cn$ICcKw_m9poLfU!{ zzBMP^0jW=1`fU*^nZoY{Y-iPk9NnhvBwqNp0k>g_SD)r#10f`!j`zSy$1G{*iz(2B z9tQYeblwUp`UAR)q&-xJFYF5cY2H0>E)xyx*3y57`R{cGz}Rtu{~I@*$$crYEwggb z>vTA0t<`{o0WGjVr{^wT+K#6{C0z-KLUVSzAUzku4}bAv3QCDaS9REA^%v}8RMq~l zyx__o;rXqha;3Lo-HWS5bGq-PF^t%*%)zx>dA1={eK6J)04yb7J;uSIvKM+z+hilw z-2Zw1Hi>V68pdKzp0$%YqS}Z*c8Z_xpP9JNXt^Ejk(A;x_bs{~=zsZx`C|OGAYJ(N zI2Q+T_jK_p4Gi;!*vGE?Bun#5G(#4~m@LaEj~+g&{43gm0e?c&eN=uhs|67p-Qhi@ zz@b%=_$KgCr&}tv)P+ASzA_9yHu|^iblJ8Q3&pdnE=30ackQ?L1uC(U*H5GA?i09u z=$+dE-;63KOn~V^5|7k>bFON%=VK_&f~7ebzarG?OE9wZ{AxZC$of~(@}RQ z_M)Pqn3lD1LHz4aVpOivc`POL>))*wOmT>t9>eDj5G_^qoObVTvVFvF)-beMq@$ILqg270NRxHCMr|^4 zxLUIQGuXyot&Bf34U$h4RA%;#mrI5THP_n8J-ljS2Odt_eqThd zL|P&9tYhAh`O~YHw|Ux7GIho_ZvkvHqv#pTS=G6Pibno3H<|kE1UVsZtw#hy2H^#f zu#QQFj*ijw#0P+4I{i{?ueaOWgcW=$X3$`d2Eh-O0Kc+xan+2mZJAwJ;ovcRz2>Uu zGTfE)CzZ1?Z-=)-7y=;3wC*S9JKq>akFqEnX?#WUaN*7|tsW<8=KA+=HUSiz%B1QC z+!=cEe}B1;E)QlBI&KlJs+3>L@%yzx5J-M9PN$n2X}7!S_np%CMB=xM4?qQk@lFZ% zc+3r&SjadrU~>vf7j_Q9eM-_ZE~D(kwNh>IBJJU@66}E;R}&UYiRlZ8-T;D{{?c2Y zg)G^~%7W)jPIha3KeFTf*DBNhKpr^%AP*8i7Le=layCyjRaDENB6nDLc4q|#)cPP; z=2oxcyHjm!bDqdv2Pj-RJsRUsvRjXblBOV=q@Dv5oH|7r`72i~QAR6wD{HF9)MbZ3 zbW9)N$Z&=zfdRqZOXjVC#QVz=WzUArDZ%@$g{FDof4Xw0GM8KBY`MV{#sh4?+{}pL z^cHpo@n%UG*hdHLd{NbHJq0dV=PDWfY!26gp7fPON8-hrmK5hYMQVX3`-@t~nMfe^ z*oO8$pBx6M7XVrBITHrtPHnI#dd=M*mMQDIwLb`ZPs-aa)Z}Xkc%B%xq|e2_$Bpj# zrzU@VPL=JvIWRSrfef^ly&z4~$|-5oXz%C_jmhyQq|74}?rEowD6 zKZ$*7S4=2wqV&Q&;@!vYj)#82ke9O#^fv?yj(qJ^Jer@!M7|Ii+`8VJ<=Oi*K9PZN z@7b1iR;mc3U1`@YVEOZst$CjzYIAvLT}ms1dC9m9+_ls7tO&o>hM3d_pKp_Q_SUa- zrlEz&1#g%{TX?AvR0$bTTfR)sD-x{DatUnP_;6omubiUY>VR!Qo7W?%IJ_!CpSkE1}EPPiFiESVAL8=z`S*%n4m8UKH~1Qyy6(5 z>WS?{*0Q-<&`X6aY67eR@fh?cZ?I!?ezE@#`Q30Slz98i>OI=M#QhQ9ZLS9yi+e(v%{mXVC4$fQ&90X|?j z@Jx1lR(C6V(V*2m=Y2di&_pvo;khib?p}UnOlG0~x$M)WV9(E4 zycPhs#FVO6LsFzuNk5vgi6D$ROe)qaocNyqfflemHtdggw69$$O%*hb_baD=cZm5b z{6K0wQ^IOwg1XCoQT6SL$#qA#GBwy^P(E6cNvgDiX<5MqyG{K|rwNvGWBZU=WL|pw zM+V8%RKA+}EUYPZy>3k8&KOv9KvjmN+0_ zvBS48G+>yi@S!GBz?uRa>IfDP@tceiQ@kcP6*R~n`z8-+l>Ia&je6J|oU{zhDfRO@ zd$K6#I!Qkm?cWps?5kFWe?bR zKjQ5`^8ly0Z%W)b6{+dzkJf@t+Up*!=jh~wgxdm+VN6ouI9)F@_!H;CBqIso| z#HUyb(&J8a_p=6|sbL&ULVyyJ>YgS&w_qbalN%vYhnP&IAPS{& zH{@M1fXYnw#l?E@z*gI_Mv+%@nD-z5?hON8U*+*J$AFszt8n~$Nq-+rzz|qo03?>Y z?)V9{vU~mK|Alt^@98DdEzFO)#ebiK;!$WEhE;Rk16|N$ZsC&tLBPTFdr8!c;E_kr zNIVM`U`T_w?Ts_Bw#^-X6`_2kt5)7Vlr9vjzv=$dGfv9q()#-YtL4#jRo^04#Oa3= zj<*XHBMQ4-%Cj90_trNj5Omy=;88NDOtZ`O^hF@Sd{u)vDiEXY%P^%~xmOj^y7#UK zr~}pr#iiJ%UPV{}zWh4CJNSI`MNajkuh=Y0{a;3M-|Lf&46K1)H&gL&;Hp3z(v=&E zw#Xc++R=50N1Pa=QkIQ^T48@G_HdGh8xZLhwY5gqMhmA-(ROu zfmnRpv?8^`%mKcV626z%2Nomq)pee*)oj7k`iU1?R_Fykmq^oS)O7a66p6Gbf za8EBJI5y54K0V!Evm7si}qNTQ4no)vs`#o7?e@c38XAmKy81+;Jemjt2ii3`1*DM&fz<8pDj|CP1;6bxO zpNwSJPp6in279@i!0pN+QOwg((Fi~@ZFb7^Vp=ZMiVPaL+qm972zypUv zX+>OQqcY(;qgkqQ;e`3+28|2)ZM7sMBmjcJ6{BFdxiyqApiWgbUI{X}+aj}yiv}9P z@>A34zivyxpi+DNG#MmP{}*dt9T(-+wS7d8E~TUfEK)+c!viQHNDQ4KUDC~n2&lA_ zQUlUMgLDi^N=kQkcMJnF-;L+U^FHtS-tST0@4x+nx$k@Lwb#1#TGw7{@0Jjn?$3`- zt~5-Wi#Tn+FyO7@XO}l9G)!sWc#@(~khI^{&MES7)^p_i`oaJr&(JA&CTwx8B~&Fz zv~G!Gc&T9_iAfx|f_Q_^r`xW8g3hf|X~;;<_aUu`Hx+gWBCH_i{^Qq;rvtGD)Db&= zPG69lz3J`8fr-c!U{_{!FZUp?TwAPb&)Mss&~IQA~f!7qiY;r6(g*LKau zOJaDgVSL6lJi{8?Txk0c)Eov<5^>oin3U26*wzQ-nA*3+Z*G7xCzE!F+!8D6LE`0^Ajq|(noD1jSB&L_NPyDyBdwiwq z@{M8goHXsjB#TxNf|$y}c5l#nXB%Ih-7$Dvba zn2zVMsw-K2STI`pT%YDkV@Lc(onH?~(VZegwSmIB_}ReOCpwQflp6VHgmNhi9sv%M zjT9>5!`73P#25gJF-x?`me1h`R9T1k6+H=&ZT`=@ZQvQR_!#L zLIZnj<$^p&PctEn#YUC${uUgqfB5|M_E?IyC+tZPhRtZj8<<8x^CgTMqV6)5ZL140OMpj6|NcbyAKPGFSI=c&ihZD7G&HzA+9N#M`^ zE?bk2b@=U4fQ|ghamF+V^^GUM*}eyps;M4?!k(M#5?j$)Sw62xm}h_+dKQn0&???# zuT{d1T2=>OMbmZfJi;2&fRfxMk@2mM3$$mhba1GFqO@Vu$-%1fgoiVj)nR52K zbU|U1&uHt`8V{m{!AswtExoCG>3L%OF)79`Sc&g8DG4LwSo3XWuuL*g;n`oK#iKuF z|Dq1LSsm=`;J^>O>zFjFb1ej$m_BXL4WO_UZ0gewsD~4l*$W(js*PKZ-*ZJwdZN8c zjbfnJvT+_H1K01==;z-$6SAYXb1UIZ)^p&Evf_WuTI$Itq#M+&AZv)s)i6J*A?_Q{ z3JRCd6Vtn=#Td@uyQYc%>V@%v+g_XG5E}rEDno2&&1cgoF8kH(QxX%$=$;6j# zZvU5K+kBlABwwAb9Dj|>W)ksjq4$mg(!1qKOuJ_v8*tcNd;JWWO90Rd0MMmk0=)S7 z@hYjnQqsqCQ!b;8J)TJGkq~~=!{{QDZ^2RwyN&wVTpw+#M6Q$WW>#k^++qLzBp(LJ zJ|%~)W(WkRy1IG^@33al>YYp4>H{Km3hnww8|Ox4wf6iL z8kd7CZ>t1KI2}H2Hf@)7ALxGXC-iBiEjJL9TEG&gL7v4!tNql)1RF9uGdbDpe*0wT ztn*E>wn;?Mo0VvgG0FWu?Qjs_=NOwWgsl{!1*}Vn2k1hbX?7EG#brNhWcr`BO&0Re zJO)uIInUk$>AA!hI3^rd2)?auo%Nnv;f-_s5*qUMsWOCC?@Lz_UZD*E9|`?2?meUq zm>w9Sr(^`{|5E;G#u$Lt)uNQ7AU1;A4+BST*32os4GvCIl0XJ?Y%f}#=i{Dl)j44R zzT(F~kjHC>#g2!4kPnJ90=9Uyj#PIa^{>hEZCxjq4Vz^xAsy!3Bo(eO^{NuF`LA<8 zg0b@Y1>k1`C5kjyIF+S_Izd&Jm#d6y-)xOgXnWnNmbh&zmuRURBC8nYR}?O1295Y2 zz#6nv8y>9ozffasmlZ%#(Pc%7+!N-dC zns1GJ#9txpDLGZxr`X?ygr)$iLSGy8C@al%!9~ZC?jDmApw3|E);#mMI{jai_|nhK zf^V=CpzGJ?+@ne!h-2tgIc3O`v-Mb!#8Px}>fsK`}#Z5YdC7n-LsLoYE*K#HX)me{H-nB$7Ol_6Zc! zRid?Yzr{JjU;ZJF$f%NHJ;%1J&N9|D7S!_I97rt=tSM_^FxA(v_s^HUi7qjHI$X?X zdG}@x943QbF4Y?5pbn*jX`R|091xn1e!SUHNu0Y4KP2p_>4^+m^ir!X8*o&Qwl>}e zKlMyCMBJn4ynOP(dtcK-->ZL4$Faz|qaMTbI*{sh`SpQumz+xfNQswd_eT^J$dT`( z&o{4c>+O3l0>nDh=&$byse-klfTXU^GVlHp?JaEI77$3G(s4nNXedd%J5fRoIKDKil|h=dR)}Z9IPu#s0v^)0vWAXphz40xox0 z$tkF#-~z-yi~}4z2BmjPmN2QlLDLy076cq)Y-Sam`&aKUZ#*ftrL!C=qibqz>IF&( z9|AYS5j=~#aZrgLlNz6-si0NR5piSgE5mg^Ng!YIt~;DN5$)<)CCUicLwn}qJ9qz5 zqLo*YG3u!S7Po7Tq8Rg+UdcTY3@z3Q8c&@66dWykIbvhg2 z4;W4cJ(Dn*9do|50bfu@YR`nZ>fW~vQ%ZyC+OU-&+OZL(#M(F!o$OSH^rh^u_oU6U z*mI|ZItC>i4X-=Z{`jN17Iui}ZhPrvV!qE)?7JHPvPng>l)RAO-@PGI@?2t3`c~6U zh$_wrXHyf4Jv^?^hr|1tKTUK3m`bO7ICR;Lhl~*(67uYCWwXXS$7*1Mk{}-bgtlqd z%ybf9d79L$U%ikq{Fdy?JKHIc=OF*A%x+3*XdplF>iw@&zp%LfSF6Hgc#^4TQYDIdiwbu{5w5I5DK#bYs1bzt!{Kizg&W%0`3y->cLg$bsX-V1|%|>~!(ie|6 z&nXF<)S0eTVwO3mCfbr`f8?oFJX4!wqr!r@j!DE$^EjSK!lFRl)&0NYzT_8a6sBS` z$Fhcs6Gg&JsjPy?m@GCac;3X-;_6q^F$@zG$fKU6E@dxWTIvl|jm1H~hBx4xd$N(Z4W#d+ z_FP6&&(Hk3qjK{v#y;7cMX%X7%yVQ+NgaF6j3TF_3F=YfUej;M?$pkimvhzh`$WUPuM9%g=10USZY zr!8RX@)Wm2Ng#|h}bCzG^|SpwEzeOFcQ;1`%g%5}Rr zXV-1jC`>NNEYlsFAL?d4bF#p*2Cnb(HFH~U9LR>uMR*5=Pf7iW z_m{4c+`$lXm`{e6+oZD<)Z9~`zvfaBYe&Fem2Lke;3*@fHKul{^}|#-h*i!*)Oy<2 zNQ>!usjm{@!GLQ1&N?jl5_5O{>-}2I4ufRLOF*fx$eE~-^h@u?@0Jt(0mo@&960d= z_9v5KLNZ9R5fUm;q!7d+H+iFfI>jQY`gzkQL9q|2tk(pAN~^rnTrs<558h}q2Sh_q zIC}T`TkIchfG>_44uWw`0BgP~mSt2!<}OA#E`m_Gil0A}C_>!YSt90>iru zaYdv_pW_N_1@ykqLGdJx)cv^){IbOjOfuNLfpaz7=K*|i<&OCHzi@9Z{TTj-w~|0o zb(ZImZIpnLKIxtr%uHWV9Z>mKIOe425l1tN^n%yvZOIEDG3N?WnHk#-b8sxB9Nq)f=eNDVIzhY=Jvy zLl)kbK$hqM*DBBc6b<+u#^q;EnS&QIDS8{oD=^|<3RNbq$}sju^O6& z7CO&XTk%-gNA&;uG=&hfflR@M2uk#=s5?C8wm&$J;^OFeAIvQ?8t zvFv$oyu0={a{eZA{Earxq%i9-;)^g+5YrNhkoKD-*pA{ZRD{286-l35E z=bNieONp*ed{0mH-DWW#C-A-r1xY03htJ-D}AbrybxI(!5}F>m@CYYBPy_s9vxJo z>f+y?)gW$JCT`Idv_C^qTo`mnt>ryO%9~ ztkRM8apE8KMm<*-zXYFY;M(n^ISYn(5IFO8)3|#|OeJ(wZZnE=gw7fpYkdOU=U(bo z?eKr_)`S~Ek>T+Ml-Fmb^ZKadJ;9m(Y28xqc7FRE&Z%&U%V($4WCZ1+H}Hf<_N*DC zeF$ZLEj#Cbn3-oT7{J+4DZs60+Z_ESWN!igqi3{q?VbpQ5Cp)3d$_(p(b<#gvWckyhm+m!ja(kxoL85Bm$Gf|ZV>HdIIknM5%U_t0KLJ78)5 z%p{ZX_j!!h10*FG;kR3tR0mY-0^P!S6$ zmTV21?<{hW4P6~$O*^vWW3v!2m)Vya-Uji9Awu<>Z5fd0p}LI&cFXQK@W{uo?nzoX zXMwdDd~{Cgp%vR0G9K}0XNL?#cfW^yGE5xe+k~VHF~rpkTWY;Kz4S)&hR^(6MmX!V z@3nyDmH4mk!#K2}^YM(62G_m_c$YOiM05~yPD+YocI<&4DE^jf^51>M@UOU^tj1yh zjwOfLdbH-vV#kL^0BO=XuQtCA`1`F{n81#Z%=yVZaeS6ARo!ZryFhRxazDW~q3~?}y^QFfWY;LrXi9woThk-DvF9L<}=c zn^&S?nOczS~wB8~Is>sJ#eS6V{Gu}O?tL-?rqD^ZpN3iCV|7qkB!umGT z@A(-2@JrNyxW#g!itjv{l#!L~1*-PVH%6VMzkBlGDLDOkI)QN$y}{?SN|AlhK2QVF z1E@4lzfeq73MJSEO<_`dPcA^1Q|LOA@9}%)QQ-}(QTQyj+5IbQ09^Qqr8o%xLfAWLx~>eH=j#en!Yxa zBR`M<+TWJ1&qprH=UAVpusVqj|G6F`IF;MS--bQJvLf6Sk8TnA;2pw}di88SB0gG- z$g~#L%b%rwIm?BYQSU80t?}H~c<$8n9-mUH9%REi+q3@k8Rzw<-r$XPD^v0J*^ppo7ZKi*v02fGKU)j9TK)ciEQ-?gVUj?3X*RHnsh0ip_COiB z{*rdpGu(~g%D!%O*6%Lk${WchJo2ob#{vKceS6?j`PQ(a;}S{=2;vo#GD&xJ9Vyx6 zqU|8jcp7%s96;O(65qKNRML*-$j!k(Lf`YD*bF>Qy<683HF-v(Go=j$C88aYl6y)FFJhI5W{Htl1cCqEWCV zYy($Yu3$v6a5io+7D(&$mN}2jfK-@KXzF?e(b@9=-L8-Qy8%iIW1Ek_4S_xR>k&sK zQsmadj$Soa*IS;eH4Q(wUjqVB7OdJ!hrYne(BTtF$aP5c7rgR9Ub_`U-0h)o%(WK~ zy{4QPcUIHsvaf7Bd|edg`h@aLbcTQ_fhkM;hcxIf1C)2_CFuXd?rZ|7s%3@^kk zi=UY1(YMtBD|6uN-$}YO!2JVGBb3DjE>`qk9V(Cmc7*#00IK~lKIPps;1(i5=SUJVtwJtD`5U^?vW60+<0%r~cMa@tR&1^|VWUNexLdmck|NY^vY zYY00hRH~Nby&BJu9XEHt|H8PxnD%L!)$GA!g!B72mjGPikL@luZ_{c}EQ*fLI(Uwd zgs$OQ^;Gd`9N+U^<2P2cCY5Y0=sb;ad{;|{4%&G9z-t**UH4dlAZL^9w zQ7FXAnzpH_QN>Gvw@Fq;RacD+|HPPCoTIDp**^E1VZc3^vAS88#-J;{qvAEjAQt{n|V(|JCq8n&9mF38U7qA;<;VFv|=&n0eO*U;75 zCIx45GxL7_EiXB@9OTG`eNghp9iEdE;%E6#iP;A^LwezmgTszsT%db~&Y1j@r)A|7 zl}9u6F65JnRu&m$fkXT@)%~3QUF|5A`6P_#l^%kTSS&=go5>4VP4U>xn7)Uf_wIQm zEmBIrVu@eheQVUa)Y<8kFq*MuZ5_2`3vE+{7mMBna9vaPs=MZ5oD9dCT;iV1PpXY&k@8Ss9AOO_x_wLqnZ8@gAp+9Vu3(e#J-wf`XIe@sRFpT5_a6dPSjP#N28 z8Z|d`>qK#0_-xvt`Mp*np#)IGx>>{2*~HXi+WWVGhZpZ|`x_kl&$QR=KWd1D@2AfM z0d>!-?Rvmw-swu91g-df3bDUFqB+KSA&$;EN$|S<=_>H9og9>rAhJ~>cVtz=v9de~ zm9t&h0u*4yxA+LvajzX(a?HLip_rGrk-Yg`R}5d)H^)B>hlkoP8G4RX;Q@D;s3`aF z)AiS`O8Tr;G98OOP4M!Ei6(xM-l;4*Rnxr*;V2lYu&&W0?=6TUUW}68)iPdZ{nH?f z5}R#NXP@om>43eEDfMjw-m=aXKR)%jXpOdwx5WThWJZ{=K9>t;!SuI-AGF`g*f%D76}D0E!VCHpa^D!^Yk~;y0yU{NbC5GwwR&J=349Is;tKGBaN3IMbUR zw9_O*PsHgpb8`k?e;=zdpBj=`ehoFtiMru+ItRsp26GC|7HLdl8Jy|O$P^qGd`UGp zx@@#Jf96TUEX41NI;`EEZ-KCh?#vkAcb_7*=*C227QVbZZ7;sI2z>Pth8|g~6zWsq z4M%zn!BA0KT9{KCBV_*WV;{!z(w@(iY(9XyEnG$p;)_^0=m5{q)hvdVe_V;S0bKoL1(`*JH z4sV3jml3(Tr&Hq89s1LQeGu||?^W-a4{$FHf-SVIm+|2HwcS>Xm#4Ov-(izW!dEI> z!v9lX!vRpg!UYlT3Olapamz$j8NhPCOlI3S>+ZMB#oqk%Wv$byQ4xU#$9~4gZQMO( z4qy*G3YPGy9j~J*pvtW9ATI;y=5QZ2o6@?JB;7CBFyvSe-92dA_7SRtdGmFDDx07h zoT~F?@);)@bKML$wqwn9J~I#1p^U+9_>43i8_k=~I#I;i&E&V}7{td^i+{&z)d1rn zoOF5=GJBJJz{c^R_empCoLU?~v&Dhuedqs;`2Q~7bKLU1i7$FQ?KcDD6A^}q?mnnE z{dRxmOH0ft_4YlW7+%?Um6wzPtsO6M{QZ`?0;oh5#?lByxR8PItm+@uYw>x?GEM(C_r@^_H? zy`15K=(?Xy)kFF#_+%q`K?D?GtJyL7G7Hmb`C;TQPwxsd{i+#UEH9e!m!weX;}nrM z&W9h0vyQu)>Ac|P@}YyCXqVDxk4!&|u-y<%AEcRdA8jA(k$e9NA_$STwh*zKeh4(x zo0{6@j@7W|`b1UGv*_$QXgDHaRlwn-7RJ`ha?(^hZuKNK@DX%ZQ^tF7`RG1;CtZBvTk><`v+J= z3Uw#O_$M5Yf2!m8U)VEWFrXbagS1G2kxL3-YD=M5s}k=|4LsB~BOfk!H`-a6`OU{Y zsXEHWAshnT)ukI7@SY}-v$(zt9khf&QESKF_v(M!PWPtF8$ zh6}D2b2hVKD>8+&*e02!Cfg4?Jets4r*ro~+#c(YvU64v zjdyPf0|aaC!!IvMKb*F9HilMsji<5cxwaIZV9?m1(xF+iQ%#n$TI8JtezV-u6CS)T z$DG|aH896>idj3R2awy%7pxjT?qd)fq}pr7HuINMJbH;>YoPfh6u#j?PN_U?^_o=`J1_foD@-T5{?>z?MA>D0R zw^?rxA=Cp|9iK=0%bwze`qaO}#o6T?33yL*E*B^HWb*j}=^3Gl#4iUc%2(h)k)M}n z*Fi9=Xza2lxn<)3BRxZSks< z2F!eZ>JF1{zd8?UwpaYQ_~b$bE*icI*8p9p6XU-5T^B;@lNiv$$u5qa+_{OfGc3UA z;m#VL_r`g#KksE$nc+og7#)pQk5szr9zDPw;Cp+^qbD~)-tI7{1@Y;<_NERoc%W&g z_hvbp_(J3jOoIXN5W7d_j0@7fNu>7M*a+^~#>O#e!|Be=eUB8-T2Qi2kGQw3|7`m# z?PzzjNw|c*El+1=h4l!`jWzA<^l4U+c1U~V;AFJ1`ea^}?9wNu)O={UKxxiW4AC7d z1a=4(BGMoGVlcnjh|!S@hg2T5te<0qVJQ~>hIyaZ*Ty3}{8$F%2KuS@^44ah$k(TsJA2(7ZJftCBGsQLT)^{?izT{R?8n= z66()|tu!ePo( zb^fN+rw#ke&|RZASL%=MdE@5W*^_y)aH);?I&d`;J+fpwyBuCEe4y~V#&QYc5i_ue zyo!G+f4+!(yY5Rnuk?B67=8SJdoyaEK9|!BuCpZ5-v1Hrl|}*P69G2A*@lH|vxy8U z2Jg_=5Wej0))($Qsa3$4Bu>FlNBBvusQD2KUf*#xkQY#}q=JPoP9=Lkbsi#cUOAkT zgLpCl3&@@$Ydhnas4R6+g{<(Z#;qdea+Y>j<>2QNsaUD!5{DrgGzpoP+IL{6JO&6X zpX1#qk=X9Zu6$b%U;YP!Ck*)z>7!vsJ9x^YXALvOi*u3qAle)4BiJsyY?a3Sw!3*EVgWZ@t{Dp%_a-R!OYXXKTCt zaOEV$qXbHS6Z;5V&Z@>ar??iyGwK$ZKkJsYoLH#m=WclEhecF1xgWZ^NZVCYp6nQx zQ$pujY&nb8V|wZu6#3lxA(A_Hiumk(z?RKM zBMI7tVE;(^OmTl;*w13V6uj5n)TA<7{VjGc%%4RU3M$HqdrUVUMqUjb8@45x4`bTE zjrIEkRcRGREDAMqJQT%VrSWD%SDEpZ@)oRCo2_Jh!(iw(w4M10g3 z57Z~CNqad~gGQwcYe={0iOyoBwyX!Jm=ZOHuqC($mv zS_t4)e?Qo|2LxNU$4L4Z&x0*RTjfJHGwwU-(-I40 zX=hyVBY}Y9w6`{!zxgP9Ju-d{2O{T_F%cty07TzStTEMkv4wAaJCmdiB~Sd1Rr_c? zlr9rLzFn?xKm8y$M`jdae&#N2=Q5rJ1l~yAxMk zJ5d7+wp?c!d6Z0hGw>w7W#QGTklJM; zu`p`5xyoH;yk>i-*LwGtOrJgCKo61IzYB(c_?nzYTNx8vl;_e|j+3ODSK87wkZ22c z^%h@cz?yB}t#Vf^*GSncz85pFAseFVn$N0gSu2p7(|N)-9s%0mGwU$L>f+dIVa%0RqVneGpzg$5&}TOG~R-8#JJp@9J^q1Ti2 zoWyi%Yxb&A6Wl`-P-+wK*lMLU2{L*kr_6%Yetm*$FpLqEn78q5ilgClVeOiAbCefP zt3ilXZG*QsXG`AYgAj`lvE0S0G`z9E$*#y~8x<;_R9<<<>`>Ks+NiLN-O_evAgE?* z1r3c59F^xsaH@G(25h#JW)sq!!5U28OCZv?pMO(@Xg{{Q&P$sOP^Ycel`%M^`JbZ;V_Bo+LeK;tdP2-@0*M zKYEG8E!DuA-fz?W1uS3Gj-0~y$P);hMsaI562FB>p-38#+=Fl?X3*TSd!cDEoV_g) zhOxfFho>S{r3O~-{OF_T$QFP3I8~?H76sSBiukUIYEW5-097}HjZ-Y`}+r#?xUKj_uO~wrBH9b@?3a2 zzuNd`AaNpK*SWJ@#CRsF?d=u+fVAPnJvm1HdY#>sTE{-BYf2A~Sf>pF_l&iOUQ@E{ zR0)QSaEygm?E4geB%VH(2sl!G0f+YySD%rI07t~<&a(TDIdbm!?wzdX#%q|!fe7)znyA$TG1fLTNkq-QAO<*Xr2FURCvYU(d zzi&BQ&GI`V)nQsk)YzMU1*E2?F?^1B|v9Kl1jyoy8l7$}p1Q?=5sm(Zq7ujg(Y zgBp&6bU`#^eeBi&_qRg!Sh?V&lu-pkS!{Q>D~3&@VIZ>7&^Y81u$om?SG*03Z%K&2 zK)}UZKc9Ra)Kezp7x1zg^--_1adwQ)? zY)L~Smk01vmum?&hCUxV(YMDNox%`FWzJ2n{Qv^;x%a@m?hJy^%#7+<{pF4IR}&jP z%Prd|+mqMiEI0|mup~iF|5Iyx$!bub2t|SK#0!TsW9X8P~E;gXWtQl<4D%gpb6WCttY?F~)jSjpCyA~R$L%Crok z2_*nP1m+$+=ouK4_`jf(KA;SGd}&9Q zLMbpz&VIhENJ-vT<4m^nkqOwFCEdgoVd!J-?Wh*Ct z;9jpF5cE;!;8kmc&`>_=vkBDzr;9s>OAzXdQ5*N4!HS1DVw*xczj<>!I#aEN*@!A| za*!BMFiL1F#1H7IBKMgK=rrgp+PkuIMRN=KnA;~{Wh-f3{WfbaXBlc4q;1p&H*oh_ z))px5XPxjv+pQ!H085E%`d`wjBjB<^8B4c4V-a|%6vZ}CyY`q=ktMd(d zuoE$(o&IdvRN7?v9CMx9y*Z=9qIaf{V*sHF>>reQ$OzY2tADagAnVKV+i>=_yt=0H z+UI6^Zy#C?b5Ip&YF>*sVW-A|atMApK3v9HfYw`RF6Q+(l;+l z0a0kN6483>q=mS}sp)GtXl>V>U1=!pnFQ@OrM|~u5lA&P@&kKD@N)@dlw(fYF4g@# z$m&j5pc4AflO|R0XEOx;iJ!hE=doiM9XIH^fAFrpnFfM_rZc;@CB{N&+8;6QM)h+x z%p)q46N%#wvXiajn;(VUJJJh|#8X+WX1|*sM@^`*!xCIKw&p*Ps6RaNW=mo!=OTb9U!gDBTOX(l|GR==biG8Yv*!6=>7mn0@Fx!MnA8<5H!?Xl9Ds00*T2 zES{4+Twyn<@nN~w)65yb+c*&eYURI}`5?mr@)x6iDR%s~AICfdpyPu}gYI|eumY%t z(@IF(>^4|YG_a%ZhU#;1vzGQ`A8%3V9;2_>^<4LZ?81K5?1=B|Q^YqgT7Gxtujh*Y3e?DPUlF`)p-ppa*m zp$M*aq6L99#fHdb<|H({LIr;;_aROqzrQc*4_k-yy+*e^`m z3z;daG%XBuio-xz=vheQP->W8IS}CQr6;>)T}LHJeqvXa=e27x%bRraf&uby^UYuL zPQ}JGi=9$r1O88mHvcfAdQm_!ODUEL=SIZv1jo8&W(j2x@rRPs_C126%j4OfJ`{{@ zEE&3fpeZ#Ebg}{vvq%y9Q~er;8bzN^*f|9P zg0Bf3;%DCQYx6d@=E2^i-3h6pT@532X}NXaXkOdnqfqkMe@I`Co6kzw)2|FC2D(FLz zS`Ee>GDMdYifVMKvYhTjN5sgiddOi!fn`TsKga&v5=Hmg$CI~t+`SJS^PA$R&)QHz zg-NV^==iN?288j=4;Ky&-nOq(E*AKm%Ipp5s)S3_>Pqc792{HFTg)yT@XI4ZUR_-~ z*%9?$3?lKq*$T~%Tui9qr%Y-Kq;D`n!OjfB-f}w#O86t@yw<+?@DAJG!udyH3=HQ`RPzQXi#Wy$ z8}hBi*pP&Cq4gPmIiZA#lc7~&QkL-hy98l?+?25nE_Nmb)h`*Lj2B$(zZ>Px>#MpZ zfcyRe-TmJ)+E%dm^-+XVH9DOR<>K`oq}?VOgu+a| zXMIwRRog~^6HJ-6S|OU6XBUVRDwB-23t`4W%%z^~ZO(&+un=J;?Yh6=2joIu{DD5% zs3h-JGjxzQ&xjR1G2D2eDwf0mc|3D52t#sAfJ3wB@`E}bp-J`LL&#l5XwNn0;uk;F zsK>*{*(umw{BUv)Zyidd{Zfk6N7Z5Cg&L|CKLkExL_Zqx7LReBL<4OG3e;LpF`eDGc&p@%%h!68r zFrewLVqNs(=Nt9PSfSjFaL@kAH6=rTtme$uq4vrq?+wDyR7dsc7h)pf;KJFJpb#mC z^m9m`Sai4`w!v>*BF6}hes6Di_~!HAODJASMwFPyN5c@T7}mRF4W}jIU2zQL7O&mC}#b(}eIYhw^>=v8cPf8*t8P>IX! zAExGe9p@9EBK3!112PXFcJ6z+3U$*f+YtXujTLUZ4N3+zJ}1bPQ>B%W2CA+ za6a%Q#zYV+WL&;bKzqFNjJdD<61Ru2Wt1ZZK_U}`Qm7(+*8iviKVI=exn9(d;^1r- zbgJtx18Im?R?^P2Hw`#j;qVBG3n@Li1#G_m8E?dT@t2=&7!F{)I@a*U?u6ENV40FH zQqDsWgH+)^zHXQVuycF;eEk3D){kHOk4m6<&DWSN{umH=qO`^p2Gez<^DOk6hM5_w)X(Vs+7 za*H25yu6S0b6@|*F8{-Fa*Kd-n0xyZJ%H*O*+;`h3;VEbnZ(co7jR7mz`5Ca?+(So0ILR-WXr(&ro^5EjV!tr%I4 zRIr%@ZL2|$=T{$xAFRY25=c4^vP%v4F%&~wtSeHeqoxsZ2@K-m;|RXv>Jj<;)YJp~ixubJa_oLQ^m9&0VaIoP)HA*2 zcvEuv0R}ei9{w)qjrN7-=qrN{5Q^I42ftxvczD2!OlN$!=Q}|1p1%VyF>0hm%!MJP z*8@ZlEC+&-Py9vJTNCt&)^R0SIj0Nv*DZsg@FPYG$?TM#GHc%*$?4}9seSSrMVN>& z`mT$9$LIpK@l~L8|Kcw{-Ke(*Mgq#Lv%03q=6m+#+_!KR(PaO-pN0qLVGo2j?>|oD zKj)-F#_%&EYNC?;OEM--?z{T5bBku(NUQvwC4K$@Oer6MOTQx#IY4QM-(X;1QrzU? zI2S$@MB{v;?EAakM*#6tFazQDErN>~`Kd>_ex$o*}}rm z3Q0K02Xg#>wbL;QK##xjH#*_uX4YqMp_?yfcDwC_9n^qw|B70HT-tX4c(PU6-1&{y zn{pN=lfW4^*UP(JV^%S9(E`Z4HOry%BbZNa0NzbEsr%^W4cL@WZ z%sc>rg`mXQQn`?c93{!TL{$puPwU%-=<4P1*%=z))xDB;lwJT@sAl9Ng_;}38oF49 z1q*?R^!@7e^L@SO)&wcZ>{ge)Hm+|d9?q_-lkwdjIQ-2SU~uxc3J-q3|Ihc_7Z<~k zV0TNgB9|3VUfMqy{1F25g5J$X(SBJLkA5h{^ISmIEp1z~7oGX(#`H0;P61`y(YPf4 z7`vb%(C@i^SDPQu`130GTmeJ+v;}jk80fURWH`Fe;pAfQv_XK3iwdimfBtnpR7gm-h{6?w0r?*4=R3a> z*Z0nMe!u^l3a~+mcQXHCU4A@tp;!M?V>#mm2}Iy%0EUz63yhiCy7=}FAgTg9qN((W zPZYl{+rqGV+Lx!*NL>{^-yIC(gc!|SHB3tc=yvIt1O5+H&MgDJXt@O)`Qgm`yik0z z0hcQ?qjx(C1BtaCCX9Lx@kJX&a3taHy4q{x{aA9p83CUpvdd4unAv{<^8fG`UwK0! zMilS<$GOn~2T@MHde-&27wCKAEG2P%4CvfjAs0YeNCJGspQ{?@r-goDy64IQtR#%h z-Zjg5l^&F?+Vv3fEk!95c%0AiLQF;H6LaoBT|D=bjd~9pU_EXT@Aiu3A=+-4G39<5 zI^E41DAD)Xv=09YEkFQ2Y4XrrFWn7rQDU{cmUM zK1p*MrQ0bJ-J47PQ%;UG$;gp2(Uvi*nfukyY99$`5L~IUaH(!}6Jl3B`Dx_Pwfipo z9TsI*HFTnz&3!F2VSgBjsHB-$bnJHBK0+GT`Q*9IpA}j9uenG-;m8l3M<=>>;C8xH2UASdCwtA6*m9_&;iX;= zyUEpNIGP_Niyjw8(ol--t{JM$?BA6;&{r5i>`$#d4KO<18Si{=usjW!5{%tk;$HLi zSw$jVi_lbq>|f1nPHpCuHi|(!S%#04KO&k-`g$!uf`5HlJ1e)+b-+S$a-26}lNULTkLvse> z$g#-1TO4U!;c+lJdMavB%XTU=_Wq=zzyLWWsXf!szB2^@(eG@*^(G9~?%Jv&tG^h0 z3duefW5}4%0&&Y^cXuNcTHw63WVUt}?z6Gg2HD8K(ycpva_YW2BWC4ZR)VyuwJ6!x zO49MUjqi0vF}CQV|8>l@JMCPWVnDwrb0^M#pCeYWtoHZP4i*c#x=?#VsL?5M)Kd3$ zKW8;G2w9m5p8{3G2SrZP3*RjrmJgTZqkxLnN3pW#Q(CxBf!}Ce#xNZ@8xfoa!~8{tsc_9Z&W9{{Jo{2`y2GQdE+PjEs{8m5{9L zO2|A$wsX!KMZ+rDD=Ay{9!J^45!vIAm3cUabDaIXPtyBcpU>y_>kp4toN?dRzMj{0 zU-#*;xS6e|^W8q)F+&%0CW+PKZUl7w~v z+%Q9$P+Bs8@zW#$y{um^^fzKd(I5CeIciIS6B z+zP%FIeBz0MthRgcnAPHit90}_HvzM=UI3*g*g!|)xdNAhZCk_9i%#SMmdIa^NY-k$6!BBdd`@pvkV{lUxxg6jDPK3g>(@Wm1 z3b_vu>?0pWQRe=ZCe+KE$}}IK=`%zV7bkNvX^raX#2~X29=jf`>Nm)3>TFQ@8XDU0aahBm^nO`8nxF z^Ct>&Pio?>E7Rutpf`unio%!^yrl&hd?9>eol|}wLkO(#eDsfu9b(8>B}2xP{(mxd zURG`iUNYJM(~OykSb!!E^^iU7IBd8iP@dZGJC&Q>I>Tr)x zT^Zt#0cLAW#Wdnsz8NxM#7vp?NZ(buS*SS)Y2A+|A~44F+{{Vr76japr4pi99m5#Y zO-jndf;eJb*Jfs%K3)fctuE6fR-VK@+(D}vpO=9y4=zIW5eO;9isWe8_nj_>QfFRL zO@>82uiWsXusG}}0TLu$KZ(1t*iyW=@{rn81xr#BfLdv$NF|FfWPVF<-Q@+dFWxS= zD`l9;7DqFm(JD-hBe*=k@rVG_;c@VKRsPFFnL0-WrM1yTf(tLA6wOYhIec%JF_k!k zS$Le_;e%g|ahy$l;XUmJCT7F@DeW3Lwxt@eIVu8z=_~15ICV-K2ri@<%rd(Zqk#7L z%TgQDOWS{%O2;08a8nf*mr5wR8#0EI@@hjj()N2#!cA%3uCWIg_O*LhG^?wTT9rs} z(f6}jXK^)?VP3h*b<<*}``^UeCF{W3Mw@B-<-ZOfXd&!d$s`lJM0>{c%zP<@ zv^a-pYlKk^F*;^~ZKDqt`f|Y%a^h^@2^`o^q9XOOuwOn~CJ8q14kVQUR(;~@3TK-U z;@gN5^hTxDOg3?qNA{%}$<*+)C9bslj`YbE?X$HAvz?$O@dfI3b;b3sPt%Q-RT@4a zNnPyB#+u4BJ{ggb4q?&G=ToH`D$>w>hti!=&>uPb7U3Fn3il+WU-9kvUnb)f8^3B8 z{ejo9;`Ng@b)l=74~K?^63BI0^WtuUG*0wNmgf>Mu({I-@?O1+DB-)j`FSj;(}?tz(d)nh84yNnS$n&r!47o!w%I-kafCua*$ieK8?nF%Je6 z8?JU2t!Yz3B=01QMA2&PVeq8;)eVb1J?ON4Gje4o^o>hRG$ZhsF|tdpWB5e&>hWox zvkWuVQQChg&>e&`JYIF}#QTg@#Y6L-a3bLZ9Bc)tnK*1dJVJ-}d|V4*TS-$_+)a|$#_;zjo9(-wqupZdx0^D>_z6{KP zDI}M}RI~9hj5uP@-O(El_UA$lxwBZPTanZ)p^Zv}ovArVa;98zEp{JW*Z|LbPwyD6 zfr$-Qtoiht+%E-tgif}ogY7>H| z!(khPgbPcl6M`+^k4m&kM>k1FKwm3&83Fn=AnM2@QD!2pwUMHT=(|Me(eEOSpq!?J zUv+q2qOk5*E@kx@^X)!cg%D9#u4OXE9gd(oLDJ|;a2Xa7W;6ulez5yMf~~bwbD(P$ z>26s=I*#f5q4Tx<1#6W_Ly>+Ib0`P*ujI1rxT7&hmWs}Z{+`9;eb~ySddz3>L0ozA`LmC5hH^BLl=f;g$vl;H#nLpi z9PH8T?hYe6-0!C&snPs3xwiBEZkR7tKq|eqzc;uTh7R7$IEC_V0}CrwY$Eb2#ozdo zo-3h?wW3ml7Q^d7%nwMIwnNDclxQA zYusgPly>ZhL2qAe>*g;1cq9U(^k_%+x*G zJ5MDXtv21ciuO4@T;pQ}&({PpRPW&lPd5}J4Z`pt$+ zWwU5N952LIIy&{%9Sr?Rqdd2*)DgG`em1SwVPyY54tWy?`XMB0B4Q0nzzljtkqd6DzHAWB!k2BlWH4~~3rzOpLluJu6PiD;DAm&G_laJlx9A{tUa%x}K z2}3l#3HXKDMdt!-@qq>ZaZWi>YwTM?;3d+r>|Zih`-R297{M{W1mAg9PVU8`MkOZBlMz*RDxSqmtntg=pEQwd|(r z4=EPOW`7;3ziIT-RMpD*%9lbLAfsLm#>LLR+pmAt3h~v;^KgqgaHZNxCiNw!@R=!% zdP{PtUD4A(E`=ZbIU5fy@jJ8Es8XrgRARWwNfEe9tA~r>bXw|%9Ik+hQjIj5uXFh! zqJEV5viaUkrrlwHC)}e7+P}I6HeiRqUEt$t9EsyR{BP4v{}R3w=8}@7CqU6dGH-9f zU4P;f(_&`=g%H9^iePjD3=BDTJ1m_r?3FH^m{{p?HeL}o_IN()ps3?K9ydO{Hh&L8 zwgNowD_;9pCblqi*SM+p1ka>dTu#ZYpTq#;CYXtp`JsA$oTN(Smi3&|DSI@FEov|R zB`5u=cdfkTjjKruN;x{eZ0+xw4#w1MUqSIcG6>+?F&Y}DH(=*8pB(Gq1*R7}(!O0L zdJgBc5_tMUkbGWCq@J+EAzxa{VG6K8yzV(LzM%QC{U8^x&2Qg-eG~Bu0f?VFzU#*C z;8v~F*0lR!^tVEEDV@R1C8X}@9~fZM&sC7rH46Uy_5YZlo6OU@zG>nPK8K?oWNwpt zTKiglSDdL>p@=@+mx4VMw6VOeQCoV{!geGBeMCL&j7SVlq9PBV(;c3er&@R20&xN7Q=?Q ze3|gPmII*rN{ZNYhL@aQ5w61GeFEn7lC(t{aWedqWNqZbov2*=#DA?-b)) z)d%VszRllkc-u2jKr2snzN8JJ+>rtQbsch=|EHnumtukjzOy@SMolX%GxM!rmwlhZoKPqR9yxc1DRu9OS*Iy7&*taxrj1u>Ql(@Jx%2--UiVWLwRd^4v*<{u6pfbo8my^cDYOyWEYiZk1#O#ZttfwGwk zfB>)7a>+l#7*LM+25(2kbbz;_@ zFXb%2<{zMz%iWyA`>oL1yc-wq`~Dl)_IY+u3!=ayCWU$ZPWVl-Mn41XYBzbKtis&>LZGVduPKS&k8*qQ z=*2KNy~ZN};nx^-cSeQnn3l+^E)@7+<|(}ZG-1?{HYr3K#ZOGjd&WCeSKL0`jE+bs z;@tR-yR*z-SRPV@LKUQullw4F5OfSZcR2>-V>vrr_I&T2NwWqM$zKK1jpaLf00z_z z&2H*B?=b+u-?)0<_swm}Is;*cRG99Pm$_18Jh>ItK*_CbM@^6a~;^|<8&I=I8=#HUh(+8%e0j}`;5r@%{~n0{ywK<(^C_1KLGD+g*YEY7+jo=EfWngHg=^f7RnlW8T1qS@3Jq6x>2XnJw zWzO(#dL~ZcWe)T*$2b{@A&aUHo-7X90{>4{$n2ZLnjk7AOR(NVo4#Z@g&_e-a44 z7xY4CKD;`|nooYY_jFcMsm<5=x{m`6Ky`IIz=fe^*^F$?^((F?v{++XgZOzW`EVEO4hUhMN|5HsCfgAs?uc(l+75c`BrO%iq$>Xi1|1;XK0R)Ks^gp^ZK3@XHe*g0(g+?Ja zi1QJDA6oO=TgNjhP_4>N9Jc99A90WYP!2$JyDq;leLdfPYizJMYkX;BHGsokiq<%mr>itqP;Q+? z?bk~=saIns4tgXLbU^eWZ;CGl|l2E2A4+7l1`w z`ojCWVF1%@rvab|?wBug9RDite4{?Y}Yi5^qdubv;m|>L&FYu`g zIPwxH6AzKgK$cSTW+!QNIr_6cfC31TsNfC>*sPl9k{apQRGoy!(N!|_+2XYBiDrm| z!Nd>p`wr~z!O6h1*OxG~rDy)MCi-g9rzF~Jl7?Lhb{UwAz|!u`IDd1MZ)>XneXqVj zB`Q`vKbjDY+Ys;Boz-ZQFIWMSC*U~#szl;7%jeUhHn_^0=d z(?Q7gJE4L_$J@Ql zfG3$uDUU!x6BZ1{F9Z}VF)iV z@gFX(HXFS57rlNrsG!FznIV-H{5~9qLv33o8q&~%&Ovx><6BxFg;)KQ5uO%e>-#~T z)i-Am1a<>yZ7)GFN4xk8A{>cRrqMAHG=-|~S0!vdcrL6sP&jelU(^VJ>A6;Rah|$B zjnsO}e$a00`&KZQ8p;9n>W&lPTn#~csje47$o=)wC#{4*{K2Q1@*AoD^3~l9lqn+N zLcanFk!$+>Min8Nk!7AbAAI#cf;_M<-}C#Tm1Y&scdXwbe!cuqwz!se@s2{OWqq?n z8(!N^e_yno6}S*IN*8jFEb&2c_3@rgnPLv1iE>Z#VZI_?pZE(lB_R$iF# zE79^H@|~wCZNM%pgVnmQ&Pl##1P#@A`(~fk@ z80j=98=u#qlI0;QD;D~#TR61lcznOY*?T*6vrcx-6FzloDt+1hO;F*pnbrEdzt+LM zVydop1`9M;iHH>*#9>MuVwsEcF@07Oalxlf%+&LZQsKi>%@Fph<{Rr6*il6qsu8am z=YU4beuq|37svM|t=BVn1O`|_j5Jd=6UU#Hz=C1x@d6iyDgR0{qMtB$v@iG%(BIrV<^iAH&J(=tZ?l=_&mf3jjF+dx= zIpqZ=>GLSKh;hXuYt&nU*m^;fk7pUU_yXQ;X(-VQ(bn+a2q1*ntEPK$Idc)zdC?G@ zEs{1r-kW2zf>v;wK>F0v-y_(rH#I2JcwWs_d1=sNyX@RMOUhyKy5~)Ca_S`)l4Mu7 zbN7K2a!CCV={jBntYh-axdy@@?t$aojOfN!gV8AGY$X2tzs6lSo@@7>9)MUvz6FW) zmyaL(mck{P?Ewu`ZW;Uj1TfFeA)Z&hdk{46Du{>_X(6LU|V4J)Xp z0r_PZ5$(30=1mC|16);acGG(_sbBp*JW`0-JqbDFuKx!p(F8J7gfSLZ{o!9|sR)ov z%`Pp~|E6wRwhDtTE7gK*jqzJPaO~_;i}M#=2l~HK{s>UyPed0Ul~qmXi`o33t%1QU z5C%V8anp&N@I$$Wij<)xs>`Z~)tcotB&F@1 zx3@e+%O~GIs)0w5mmrH6|5kQ#>W4*ck0p%)WAwU;-c;s69?isVW3!anN^ncSDM&mbWa^GLXq ztOLuMnQcrrlo)cc@~3Djtq>i-eK9Xb1&Ph7_tUA*c-`ouFV`}bEhOjx%LBY+kna;9 zo*PGy&FE3fjWRW7NB<_H`2|UxfuD?OFyuNkm}Gy6bh$_?6m;S|mhf(g3eB{MplU*J zlH;oIN#r4UjY22VM7m5hvGNn0h@fD==_cMEr>q2& zS2l3*XY_Ud=Ru*oqrhgW73`Kw3;?~z${ZU~$0-El@~>0s|07+ii6AYc^cM<#Q7L9= z+|I?#l~59xjyjmrTBqFdX6(^toN3j1XS%8DK&AjN{fBF;*VXF$SAuIou^zPEoaHD4 zu?2X7;FO((VKph;GAR-;Dyhd&w1()JF3-(+IW6DCd!_c7lbR* zWPptvUqr6Vo5K*4Ci?aDEF>vwc?d~0G9UU8fG>x_7n&M-Lo?U?Bs{d%$5@qibtK5k zWO~^dkiN+yXq5gjI%wT(Z*N~tg!mBZFVfOqq?vto0LdP>L^(9G!vdrN{6=YhKMczw z^|9jIU}YMHVQyitcH7agwDpf%H4;iZkf)`HJAxEPrRMKkt+DfBq~H&>B`%vF{bqv9 zp9F03$^Z)2`meJl(f>8^-+YVI4(%Wo{$RxbW!E%S(q?u28~ytH9s-A4mYok);! z{fG|^u90_EPWI#?Mr`Z&Oz8=d2~&bq^IUb6qtwKh5V_ossn-YX?4eJrk~}M};lBzz z_otMfRx7ki2#R+bd8_nLn$Mu$F0ZI5VJ8+jA%i{y>{Vaz6?8Ct%wzINXn;3isex}Y zW_@W*RJEiMPWAFwiSn6kuF!fS0bhAh$4XmYaTKYsY0ee|v&6vtfZH*Mh5Th*vo(Sx zY(N2wlr_G?@#7qo+NsVbXXr>$Mv~$E@f1zA=;E0hd+cp1nx^GEpwH#@bsH}X2?f$}y6>#aCCO3U7O!e~*55`;ha z%$udJ5V{NTKJUgon$!&S8xFMVJ?bAFJZMvP_PajUEkT`q!b$UbYs!TK&7Um&-zzLV z2&1a_Sz4Enf>PvG2Tp}FO0C=HPua^)1h5O*W(mt!Rex)r%a^q zo}|{LH4+cgw3NS~k7xN`_}ea|jn4Ji1xW>He;$K_-^T(SHEZbMo z?8wEAu>RI!ha6t%+qT^*nQx5>)!dA%^h-&{266^nXT{yz+*;~=a}~Be<&BCKNC$n z-e>CKdUO?BO5AoV%Gd^vAa#qjh31wWab6HF9X%^uyw>*4TAG4}F3Rbd#V7nINJUF7AI+kL~* zDecsqvUk~XeZ1`A17ZH07cMGc$GIZxYVw}J-P`O7Y*JzHQEB!Y<{CSN@;laUdD)Cu>4iP03*fM%gPS(q zBcb6J_{aH5U4iJcJeSdZR{(n5_fal-|Na=ZhQ{{Rk5W47^`Z(> zjalR3%F)!+Y^$$-?1}dAqk{%TIqNGwD7%+IS@iIua0SA!i|dhBK}|=SlY(G(x&I`D z&J6%@zJDj?E$ByySetg(`1|**%tTj?|0MDz>5{ivY{yovU^?Zy?i5{ooR>SG-|npM z{*EBqzc|-$yxk#2+(fb3VEVd#-%C|~5mf=tGOI5b|gyU zMX7@2tFP27XcSKkBOOq^dA)P-2Z7d(>=ONq=!PQ182!f8VLDVfHmp93{m$<)3CP9G zE!1qLwe)->NC?r8UcP%nX14%Y-LmK4e^+V1z(-r4Hb$5eWp=7a_L@X?7q$nxdn=0W ze_+!^DjHUo^_3q>aY`eZxf6`7V-)2ZeP((0?5`4SPJ&@XzDno{@_yIf4dedcj$PCH zs9!AVY*?tVa9}E9U7~GpR?v9GOPz%XF5Qu6flw#hkL(6%9z9Yb9$t|~r{L(OHEyGx ziPF{1bPPfQSk-gYE!s8s*sQ7gy_%~M|ee(&?Dge(H zd=H#62_c73kV$j}(A_mbK&<Es8e7$x* z-8)SmX-9^qCBaiouVs?rnTc7gsP+y0{m15|m;D7M;f3o@27sA>pFXQ^&~7^*uVCvX z;onTbrj!C!{eAdWz%Hbmc!kCO&aHTwytRqp7s!n)vPwqg(EX_Rl7s@sFSo59UULgG z^e&4BXOZQeZDn%HMDg+U=AIpz03%NlqH5DG`q#Y9P9W7jkFq`4jGTL^I++8dzPMIj z7b<%@(c>GNCLLt^Q$6~o_@dbefP%JF5!o-*EjO0+nZmAmd3&#^DNI4=#A9;HZ~PVP zX{~7xSOI1Ixftl#R6Ny;s6)_8eU|+N9UIr#8!LDu3{HYu$#Cv+Yat<=2DoWH4aIC= z#cn>4-k{h%KrtjS(r7XxEiqFy@wt*DAdIt%|)_Ze$Zu? z8c_ICBHIrCi%S2N+O-q60)&u!TXQwLun^b%_j1(4rtiFxzRf)nt9R~&{QGjxlGW9Y z_OoUc6>M0Z5;G%dLY4wf&o%!!RzAinYbsBK`BsQFO&>9yzHZp5tKk5Vw>5s1=ORee3I+z++3>;Q!X=+ z>8R8X|L`^cV*D9;4scGI3d9EjViEK&z&oI$<^S{^VMl>RULOqZ%6TG$m^~H4_QTcs z`mk)r&WJU7{7KrMiu*=`893iZDIuhFys%Jhx~QZw zs_)`6A;i5nStaQsmoNLz-RGW^Np*Avx;Zp`;I7UQbiDOB;jJ8U^5>W`@rHnzI27HR zIOsWZ_0p&}rW*Tl0&;MW9xh0~qoG99W>72qWRQFRxGFQrsw4hH9GSdzF(#m;W$~Q5 z=_=Ru<{(K^GMV(CH#^2FT$>Yk9XR#;?9!4OkSWxejUyKlt7kLluR>7V9d>kq2h~XkwCH6`l@8IF`orPEjx%Y&HSQsqh(A6_y{y`oa z;MODvM<5rFblS_h?O4^WPG5!s-D=wE^oim=>=dX#>Nj`I)~QhyZ8lRfvQ+saZWDS2 zylZ%wSVJxliZPjL zlL8)Nm6PihO%bkNkkv#z&($x3WR|ylGTGYY(7E*?pws z3DG;p{+5z@ESL%Go*HJ@^Ch86emi#l;Oh+o{#1hDDQD=E&}_rvleBk1LC1jL?BDDE zb6dY?lYRh5+WEqWMApO2nDIA$KWx&)t3UzuU&qD$FKacs3$*fwz_8g}!2{m0!Owf& zb2HTq2aFxZyv!r_v}t%_BO~RyM!M%Uw1nSxbZ8LgGXQ*m}7m# z<1FsqAFe7sFy(%vQ$u;`?OKHANw2^(eqQc}%{xOEns=tR+Ny)WZxTpj4f(aN1zT$< z*f#73CeGF2i9ABJrbGFZB@i8hYOmsjQo8(VYO^ysHMnbdn14`k|0J+z_i6R7^4L?; z(%xrPie`&-;>l!8xO=x=f6^)eEFhfQ1u`KDOWTK z^e+f{h25K-9Sa@KGqpq|3P=yz4Y`(%DB1=eTn|K}CCC^gLZ=j@Nbi!FHa4ftpy87D z(#ya@Ufc8cumKwGKHB{s27eEOhV%temc>Uua9;=*BhwZ|fAifllhL7I)8b;bp@&zt zV_kOqDXW|8VpiCCZ0E|*ODJkpr}glz!#T0SUInL)OzuD_xFH9oLlzU{H7)KN6?~3c z`r!PSXe(C_UBFLHKDJxJ6v~*g5QATZ=alXkl}7zVu2|-=ioNOn=CGBj<;4awZNW*< zDqq@inM>);?y|Nhi72(xHEJwTuAFEZ_Nw z!tzB6TF19j*(&VJMB7K^o~Qn_L`Rry#G4UK_Q+t5E=rsPeUxho$Z8Ay6SFb6Ty9HT z?VcZmn$rVDe#AkME9BpC#fF3U!G_1|`*pysS z95*z_blK+ZJuj~t(jUxb9uwLb-T@j&4o-6&Ot^H4$*M?u*=+y7xZs_9uQ`88pP73O zxV=y?cY8l+ZGI|;T-EN9yO9R803-LIX8It=8FJ^;eX%iCiHD<1=4fC-$KQaq=Aj>M zC;f%TbGgn*RIk3`cN|j&;aQ%?$`Q|%Cp@1j;-&p4oGdIGq$}6~d}(eK!IU^5NRM_s zbisvPN4Ob1@a3>Tf`D%W2M0%6bMsSPNNq;ssE4Vo%m8{&wkO`I!^J-S!TbqX6ywp0 zWqo~WLZ&)Rrp&oRaz@VMWGnho7-Z06qEX$s)e0i0DD+X0nYgz~?i2?@0p3irv~o{k z79Q%GY0mCk?*WHKXFP-3EfGwrN)a4B6vLrLPmQS+j#C$~3S3+*&C3rt;4sLyBvl3I znBBYlnUA!ltnRxbITM59m)&>5VNAg#QQOCdNiDY$ zXGbAiUsFWWO2>DvQAf|OWBeBv?e8-OQK60KTou(uES-RkMsu0vU}7=pb=2Sss1)JD zblBw~-kk4{L%Y|)#B{=kY@*_&vmBV$c}^MgpS6NX33}GwbN>1=(EE^ELo4~gR5ihS za4x67sqVtrt<+v4|Dxh{EyUpakDvRpgpkw=7o?Avr%d2yvM6-~ywvV0B8um%)@Xa< z%*^K|sQ+5tE0PeMAoK=ljSha$Rw8Xl;xWjU=u}M0j1t*^eoK>@o)Y>}RS@DPHqEAV)^z48zMq>it5G58)Ui;6TxAdq$g=WfX$k|sUbsZX!>x@rj` z7oY|BjLx3bOawiF4|s!~QM4f!Hi@vtejjQOM~dy2k)Q-vRqdXX*-Eu$q+BHe<{LOj z@zGl!gb+|@D2Y5d{Fg2wi9|sA4w4CGiG71Mcp1k@?SWdbkTmR=%Bfh~XU`DXgBf-o zDsjUpG$py*5Smg8E>2L`KlH`o=99`ym`ntGxf))Tn zmcDGuYQUgoXO}qXck0t`DSxSP#=}3u%*ECu?5d!T=5+Q8$ zs;GRY3gZf-x67jZ{ST9~>|g7xnjO+2m?UR9yfASd98NT77w;O9m$=_SdI%_AgNl$*inn+$s2gNfUHFN@G-s=N*}rbC%A!M;Htvn${t~hLBr>CCow7im z(aQ9vU|<;U$r2-Id+S=~Wv-dE;5^_to?c*06u^B(jI8yw8CWGO7MVD=G&ti8tmM}6 z{8oamVPNQciGqLK4Vs^ud&Nx{PB>o=4FY}&Q;8XxOlB37st`s8NmRk-CN*8$?f$3HK9z80X^S z;ESay4c$LpfZy`>bhMFv*hnitz9)W-erm8zv9o7N%H89{|HAajNP?B$+v%8$flxCb z0pg^>`_3XycQ*FUaTQEV^pVz&^(V%2eLAAIhq%&4+n*d8uNF*QV-*eV**zJWuUaF7 z5V_4a(fXW&Z5uI1x7Q*Jy{^omv20-PTXN6v?DXhkm_8swhvkP<2Jd+0b zRl*=XW`WyEo7dN)y9WlooET9wv3!dD>=3uIxNYt735qg&;?;M%Qpse!jFn3lZTmkvsK0B{by9*_tg635uh81_XOoCijN68IA6N1tU6s#vXjq5oz`SYr`%J zhc*k(g|4_Qe`Ia@$SQEO5&E)aZU6pBnGXYb@B{$ZiS|ulSGzUagtPQAR`@1snYeTa zO4q!;nrVCk`WBi}&%0s&tF~(0gI}VUrd_gS#P%-`COT&V$6S2sj)p!!5xRlQBYT%^qOggH;TOy*|1H-$si;N-?4u=@a$Meo!vSFrc)UX|9o z)V^)L-wZGF&Bf$k9FbzTcrYoq%frjx7HIg*TVEBJ&yxYy3XmT)T{7&S?cBO|QgbnJ zjy-hP%y0C9woThYZn5im@|uGmWqKPQS^h3_HEf)cEm&rgy?>zNLXlwtGf~`A*y_Ta z4k6^;ewn4TgdK$=Mo|6ng%W&-jli=j!%;$rb?Kmxoo&s_Vc{)({*<}WJU+TUR4)wS z=y)fhxG=&h3?19z0Y$O^)$o33KK=X^ve!5aiOkhx8MjiobO5=C2Q^RQ2Z%dO4LoK? zXX0UQccQxSNHp${Cw^cip5)J^Bm_mfo28k~UD64o8%3FjSjDeI+(vgu3M#|7Sh+W7 zbDw>^j`DcjynBlOS{OuB>kHFcKRM>47pdy?%wV4!@iSNWo8Iz#WSC{x(>+pKHaG;o zCpD*lt70R))2_eWZ^oXhhXNVr5hYn{Sy8_bos32l#e3rqcn*INuz5_=Bz~T;(5coV zi-YP_W24G|Ym~`@q|$0#{2)%e;K9oMnApU~mX_;lR+V-`(#i1qlrX#Dvg>-tm4K?% zt~N`v)AJ=Ide$~J*qwZb4!yKK?_OQy>gwus$kod$Z6_C>S>DWs=jR6*q*@9?fBiYHrj!o$}i4>Ym8v6=#)d34sro;Y+`xp0~sZo!fph z3?dh&Q-9+K0WfHHW=r{NYBBz;C2~|f3_X0;9D!rQ&Ty~iehVy=X~qP=$z++CwJKeo z$5jp^-6O{otE+u&3s{II5w#Y(IX;RFC(+-mWxUnJmAGbvmJbvf2~TV2xma1HEmRW{ zyGDEUx}H>9gpORE@m?$LyF7%mj*pFfwZGg}^&9Mop(Zk7{Tcw04SbF!J99}3rj;|mdOJC;A1 zheog-@;Ecki%47Hkddfbu0jrI)7#Z$T27?-G+GbY=2lPUtLkT5)=5+k+JWUmpIV*f z%X(j3Jz}7i0is|v@m8N7rg80P7#nWyH;Kg$dnYAwtorS=KJxpa?itS7nj>-)Clt~! z3jsONz%+Bp^H|$YDD=&Ee&~@1Qc18%l*vg-u9~+*h=&>~qL_)*Gu6h$_x&l26|||O z8gcR>0q+;-G1?~)#=t+{*s6JI#rjc3OiY}=T;*xjQayCKv2W&E&4>>!2OEq-#<;9! zs?v@Z8W}1~&`3~?$eAR>$8No>h^sI5x0<+*&Uq>b-z9ap3w*Oq`H@23x&YGZ_xahC zcLkK8xUsKxc_CB_gc>g6?C!#4;=tfGC9`ASWcOD;t&m4CSGP-Q7lOz_f^4*E)i8N; z*8ygc=A?M_llPCkB&z{rr)Sc*m1gLzRcMA0X@)xF&lJ{~OC<44(l zW7dyySUxv)Sg-Vfl;Qcx_H4}S(Q@4T@&U5zQdmxwS2w5#Si*CVbL=M^w?ID_2+N>- z;ttG7I6i-FW=YxeSezOc^tHwl(-Fcc-wgfA_nE&$>mWaW&~_|e)KpZDn~FS(d59e} zpVcz%Xi;veAH^N*8pZFktenhcBXtl7jwe?UUs4Aym?9Q+XSL|dAzplff>BRi?Dww7 zt(iMXoD`)GcI#!{&-&TGAZO9YoIkMo^3hQ1Wbe|`SEn=1xApL+#9~|g%Q0M zXg-8zO@MG2Cl6kf@D-ciGtD^`;M0fAF#`lezjDJe0jSC9_+14}hE94ZgcpC?e!_h2>WQgC?r2@4w=!=PM) zjEfrA9MJr{WI4qY#fbD1_c@+d$l6xYafME40g(ePMWLD5eWIz|>s;EfIB832Knzg) zTS}nKoF#`iX!{{@ucpG;`Qo-n*p;P9Ivf>^9$vSVBYjU%w09C?Vq)qV84nZ4AI3lsiQSrE=;USt+3D{olVmhGDt_Yawt4`dBMmS$5$-Ih>1jfA>omAZ z#|50&Atpb{A8M*7L@UhCt!&TaPY z`@B4_<_;yp-!!Lk*d_=eom}Q8`hxIT&nx*w>vD_BtCNErO7*Zot2#x>zV{b=eZ^eP zuS3kl+<~z+>g?DHK1iG3L%4Ke|v8)aI{L+<; zOqXvu(mDzo^ToWHh!W7plXd2{U9PLcjB@YoeNv3>{U3a zw@79^Sn#3kz~a6FPW^;@*6G;eR)~}S6i}!_v;>B}pb4FWx8jC9aTXvbmfP}n+bY4n zl@u%&C%x8U>WvZbBFf{@W&j};Y?Vh7J347MC&Y5Aj#wqQmJGYospl?JS6>2XRnjD} zPu~otJ4!^3PFb^Ot>W>mgql)gr2;#HUQIt342Go&QZD9vA*H^F(tTq_S3ea~9?TW} zVJY!ug#JdDw(FwMZV=n-&F46^bpzzv{QY0P&lvz;NGvF@zytYx!i>G!HH9UlYYvrL z+`ZVS(sZQB$DK&9Xn5`|Ob!mw){rxxEe#hknFG!ssIK}g%B+XR{>>QxUA0_~+4aY_ zZ2tFJ&ENaK$?VSp{tk(+FuE5s@+IJ51Mls_DZ1f9bCE$RS*fK5&ca__ec|3RA9cIw z&YkOl{F_+Dbk*|PHifmL`ll-=Kh}G$)z#Iz`p^kom_Zez!e%q>urY8Wz5-^OtWqKJE#dcej#<*rxd9-}^;jTbI+6p@C zIWj2onI-xQOjJTpU{YqA_c{7>k7bs2tFEKNUh+8|N9 zD1#6_Hxnv60rp(^h4dXl85KhP!5vwdND$X zopVP5jNMwE_-08|eJ{9ZbenGnh_bo%#^!L@?}R-lR3qi9s8v8FDchL~-`g2df3paJ;SdD)ra+?F1F>J=|< zFNMB&ZpCH)2?SbvVc)PZUWcseoYeVYxZdYsml`qph?k-G5AYeSJJMUdXnW8Sw&k*YVnAFp!pl`WpbKv*bJdY@A_4I>kV__0pgS#+C?(NQMSNKm zKvI&;slnHGV)<;VW=mz-Sa?hqPRVG5p%28TfRZKat`WwUgRwbS{VfSbe}4I<;f&Y^ z4o_ZRJU86NQ$|34j4LJ(EHlW{90^VKMK>Hqf>&OgGOT(5N{^?vCrl+@sti&1c1CWl zxlR!V>fJLLqUGPrD)W2UB`Qv}sJZo8`e-(gT%ob9^N-UB9a`3T&oxGPr-KTnmsiWF zdRBM>(c~a+0t|b^3-n_6HogDH%0%!03GsAUditk?oM)MnYlfCV0m4ATw^?!XPlGCT z|E#^WH2}4V<_j;oYL)MCSAC2VRG1|V<**;ZQ@XMb#(!nhB)Ab#G36p_R%BkKLJPJl z{Kdf_eFUQx?8#K7_`ifs!}ru-_(X}@smgeim_TI^sy!h`46{C#mF#5Mp79SNI&OSfL1{9@uDU2?@fu=?x$F$27H`0;cJ6?aj?ZVUrsdKQYfK{vT~$ z84%^xwe3L>5fKFe0qK$!knS=-K%`rwBu83WKoJC#?o>)rsgWE|Dd}zoC5D`lq5In- zDCh7z=X<~J$NTS|8wU2?Ywc^rUhCRT5bMSmKC)Xlg5x{+kPFTfvL{W!0q|MzI zQ#9miC}N1L*hx+t75=m zH_d5|dcJH;k>DzV&&DPuMmAD;OOJavgj6jzBorA<-WqyeBk2v_^9~IR3~aJW@v>K+ zpb!n_T0|YR`_UC1o|vWz0-Uekvg7-gWewHxxkl?{Jf@>2^6`xd9Ixf0j9Y;?HWmxj=ABJp9bX6v!*wCB;>8V?dVFW# zKxE=0xj36ZY|s8VqHsgap0f*+!>PQ9c=jO(Z3}j*02%4=ajlvvFqC|2(`k-RLXJ=AYSqz z%5^y(XMu$u_qsOMJUxr>Y7V(Qz{cw+fQ_yZc7Od@8c9CP9#Ktkr~i#dM>=@l6@!i5 zKV=$m?vLo`PHVz;%d_@~Seqnru=Wn8*D6v|?ivls(x{t2();RW{_=QOUHs*6j{zT4 zJGm{FW++^1gZnl$BhIy-oI{?_F_YyVax(-kZ-^&<9)E?4PO+O2Dta{SY1GqTN#8^r z6exvRuDf7BF_96?$GhYoPd@W_U(YR51ob`|?la_N3%Jx&q+pvV{$tp>t;SWoZ{RIw zzfPhTNFr74Rab)~QU>D)K2cZ9`i+D5QmZyYnh#!IGG(7OXn!pW#2p%ishCdXhk77s zVBA(_d7dvNYk(tNeg)%a%!h0Fz2$t}2Q1D%iciAn0JgJ;)CvD%SirPr2TO{b-NM)Q zJ_X;jK`2Y?S&z>eitgQXZP8tSQXqm_AkB77wwv!`wH_*x10~eCPCHd7tHdv`t*Jot z$2XK*3Nf5vL)%zQ)x1bUwbY)i&>CUpOzXsO#++%mfj(qmVh*J9eve?C(LOl*{??BMep zjvwdyt}S*QE!=bgk}9ren8dEbgwF+3frFYdmL;1EeH2wCiex*ru)0RLL@cEN6u@dj zz5J?n(QI3K(E%SPjo-aEE6HzEyw~ zb%kjX>(3xT>h@1ST9Ver(lXo=UiRjiQ}1PT zm?<^C_lW0Ut3);0viwJ*1pWfgh&=I>Vaek(J>cpUIW~tkxtlIrzu9yU;ax57g)Y?W z8}BOl%>`hVAZ$)8wVx<^0psP%W2zsg((j!#fWPgbnlg=9DE#$9O-RzHkiTTKzCG_M z_e|Hz=dENyF;L?ysx?i0CH<%ok;?SyY8jZySkxO}s=4=PA#A8>!(fTEU49-Oc6yo9 zm!-VuVGtaI*p_SVkDEf+FcXuPyf<#pbxvF;#S_BW3iz#p&Bg) zIByMnr96M7sYu3IGy1YNlFVLx%47T@^Cw7aK}BMPuuFdaQuokU#B@z5Tn-$@y?J?- zzh!Xnu}LUA5G}Ihn)Og=wl~q&E2Z<6=QEd!@1j@26HjBUAV$CjGvsbKMkFqsWVq}c;Bu)p^9H>f!f$)30FwkdBdB1}PC$Cy+c+FWKmL^nA(`9d$g$x3N& z)O>2OxQ0+`WVm!;>U1L~UWqw5^3#$_k>gzWy*}4Hv}Sv>J1S^HbsN5ue83^GH$W{k zF#jT-hzR{sVpoOAbxOq*S&og-Z6Ux{ouO6@Fb;t@Ise4>sHP7Oka+U ziegS5umE#5O2LLs$jF)Kp>7cuubQCu@0UUH30e&Ees?bir5<{gjRsN!ZRsb**C-p0 zNZC-6-sasvziuhnHaz_f3xAtfTV%}#I|ev>_ZnXu52Ftg#^XC715b`3T@-imr(&LVs zyE6?GCaCK5R<)!7tAc8Sngc(!M7OffapoS{;@-pNr)5BIDVO(J9Rbep7vGh>3uuY0 z%`e@(y;rml%hVz&2Cmb6k|G!n?i5x%XlCIW4<$PZwntmTNA}#;3ur65MOpR)x#zgD zi{X~9XK@q04v^Sq^rsW|Iq4`8=f{uF;G+fFABVpP@|7qVhdzrhAe4d|T~( z?d!LzlsC?@i6R>Me&Is!xtoGA>ar1pL1J{_laQptfS&rNF=JDG*cPL{03 z*~(=$92Xgo4+VW{Tj=^8T;H?*K4Sk?&GH&-rGzZX^6VD1*H14C8yoz* z=1r+HDdN)(MRt>!lGH~_g~@BRzsWs0xW6yeGKE#&kHJ7K;h>**vZ(u1Ba10&eKIqB z@g;9v^5#Emms~bW(ANy&kq;u_ifU*equo%{>@k>siQ+OSxo_6mgwkFg^n`ZecrLB= zr7fw1sH&z|(K3CgMZ3w4dRWdnH?%!p|=MzBrpzX34woKKqq6XtV#7 zgAY44^9wtBdlXBlHN>w4;G~380?v##4XKA?9SFn}&INN?x7Xgh3~ICKA3i>|rgt#5 z!vu+!dz>pdREbnQFo_mM-7(h)swwY;^Hm3E{}j>}y>OWJYr*-#qV|ud8b}0%*K&$> z5Uv29-dm|@=y{M5hg61N&9Y8j?P&yadfH$RSGgCqdBSPlDF}AHxc~0rX7NC*ypat&nF^9~&t#DafW~*TyAS zM2152)U_D032>&obl}j)QS@~AZEI+iVJ_Je3OOGh#fFRoCtrgLpwcMel@G?P%?3ia zPeT50o6`|@Dh%EKV{p!`p+d{%D>8c~AX!vR+U#7?fIvIhyV957P_ZMKUaWcrt)*=5 zPvx?RGZiXxQNG=`BuW$*`SP`Ok<#eZD^P1>M80n0Bq$Yav@cpws`Jpwnz`cW2TZJ_ z$xsy!8r}4|Y3qkGsDEXv7yM)50ghgpQvS;S;oP5Bza0!ranYk*;%XHRoUMU8eKy0L zZESR}s&XTbK5(-}9VhX-hlk0nJhVc+L0zmpVo9L!{FgT&A=pUuHV_weQtwU}HcNOR zbh~dF-(m;HPak8iV$x!=!0kJ(!9DqJFWq?q7HoAGn#;d+>G|r~ z#~Qo#tNCNr#S6~aFcnWvm#()N+p_OjQrz3gx`(>Ln$|Aj6SPdXc*i!CPV4k;uUVP6 zS%RBxVcf+O=`Qk0QZR?d@5E_}tPSGU(0NH=D>L&z4HW{s{tUuL7GSAzuk(kavYcb< z^9|!9E`C)nm+JQ0twfb2?4tb-!sCj~rZ2>x)ZpnixVdR51Z=`VL)nf!%5wu@W4X(} z4e{7RO<`c>)^%7K?RL-?2dFbFJ! zz^l8jk4)&rchA1Qfp2dLHV2xx9e;TmCLq0&GWOEo&m8}WTr|X3t_;Ep^ooeFHy&yN28ND+@?s=D>Ml+IEGTLo^>l@j`bH*E#mZ1X6FdPK`i+ zhWw0J#F%)wBEQY>LnR}xM!!8z0=J=fSlz|#9n{R8IPQY*!PR$2N>YA0UES5H`VLAb zL*HE$o|0ovkKqCE^yr{3rtk9SzXJSU5DW5_ zAt58b7Ku+G&|F*lOdKSS?O^&YLvn6z74_$I+8=CO14sHH6awF7+H~#PA$ce+_`dU2 z%ief_SNC3t=)o=?8kmXZ)m6uKs|cRdj0`zv6$!!G8}KwQor4ReJi`1;3;p>qU0q%2 z>=D0eK{+f*g|i2ix5>fb7e+e@R?0&Hg>0{Vl=U>WEq^aQc=&9 zvl{rk^EOHZgbVp%+c>4S*$d{|?w;>pw&19@Zk=rky?~D&uc~F_%J!r%CVy)MR5Orj z^=QQiqhu(O#;vif#8l|drwCZydY44w%}=>~tfPd?z=5{Y{p@@E>hS4$F4$8=Xbl_m zP3)~)|F0p3XmmXSyymIn;W+7DAI<0fT_4f#ah+?G;cQa|LfCZ9xA<7++wA;e-<$#G zq&Dz12jw#pZAKQqmY$CbfXxgv7Ux%s?vWpNyl;KnE;Z3FCE@A~oK`4G;ciqiu}3qy z286oHwWBCv#qXlFKD%};b_ib<7;LlO``tPCl|9TlbTP6kC|(Sh&Vsf z>C<~N(@Ilg7f}fxJ+r#5KEl}&v(cy&^4V*jb3UI|?Pk1azpv_VaQVQCqZlDbE%CAN zSJvUTDOV>15@LL6dr}sXQJ5Y8$c>tVz1s=#E@Mv0QEIu~x}ftKep=(#m+!-X8?xYn za<%{O*py8Rwm!>fE4zw8C0k2?Xo`SIW|RA7L(Y-bjfuO*jSm$g?kJe9QF4^vAk}9_W8vlbGbDt?MlCbqLlsV=*Op|*iLQalhxt6-m0%zLd$(sFSM!>e zgKk|V`m@J*M20&+y?puoGLByzKHdMzN9O`s^BKo76hOcx$0Lk^KZV7IN#^5zE)$*H-1O3sxc`cM;Xh{LF=X*ZC0Etlt}9$0G-!SNkfHHC z$Du<=MtFE6_X%PYdX0)K40N5`*rCTGv_F;JKr_3 zhctdlkr=P~FT0I@#odi?#aNM z2e|bxw1RKoR@NT29?xSU@oJ=KN63HQa(tLxtrsKju_yO(1^m$a4Ugt&H;NK`#cD{@ zOLa<|ixmsq{dSYa#Jc`qpQ8S~yoci$R1*fFE27C!m{_+vzh3fp$Ibn`-D8p*9$PED!Rf6)Ezk{6{0K43- zVlzI_x*POL`-xnkjg?hY59~>fV+mAqwWi#bA6Rmbpv?yf+G+Cm*!>#C1ylQxGU4-R z^Vvz9ZNO^KddO;U7%{v6XrX3J6m)X0r<#E6p>QiM8!-JcTZ(91zzkV32{DIRHSjA@HF1E>*rKkNCl!y)Y#ZdZwuHyk=|{LV~swp;pL6qlz8uL}qqex;TkRK6ePrA~g~7sO_PzjkFQff-FzffOy{UEO~8 z4wdZOH(+TvW3?9S#Fji;Q~eMjuMV-Xi6}@eughSlGA*oLkCekBZ3-si%_-`}WHDhz z?=V?R^>S}+0m{*CF3>XtPVt&QXE8KEL@O(29x)_pOEc5{vu|AT0cPhonQM`r)S+pN z!ch%acF2dqhDB=keu-!v)5t1@67Tqz9w$Ef(A(${T-|}zFIm%4KUxqUlenqJT_Bb7 zR;37Zsj%_hl1?Oiv3o(o_50flOtQowQa{w^E;3+S^El0G z!IfgsYF8Ozn9ip=V1=*5E!aQzt$3n!>IyosmW)d5FDWk^aI5K&x<8X7$5>vY7_I;4 ziw76vH5m%GFth>7d$+Pq=g{&hVqjoNu;V1!A8k247R+Qw8w>8fo)S}|nzwvR_0Cv4 z2XgCZHf{};o;kC!8*OG;nZkK?HcOPM`Bj5T8dkKkpg{kLT=gO1gol>@+U_m5G6lejyN$uAdpmm`%zVR}Wa zheMXM1sl9P3Ud$=%OJ+}3=hM#DNg2u< z@RRaV!CjIIijfD+XP@v)_0D61mQ9nr3chxNCpXr|o)%**+lE%xJ+{l8IcF6tG`i8w z+qvkVlPEnC4ie++?E9nH}q}fcZG$ zXlpcc`&Zh5Mh6VG1Yhj<`~P^7v^?|Z>{jWZlO+{LH6DlLNKN`Pw&EKvTBFy*zfb0C zYu%Gyn7H|1hIw7?=KR zLH8<1`JCynITR(hg_5i;TP6VZ@Xvh(G$OPM}?BYGgDirw%J9AELE-$FhXgFc8O|XJ{<$Po@eb`sr*U7BT1Y zZZG*#4cU@Q!&45?(_>p94?eKvbX66Ex`5+Wl}YkH4v9}Z=!r0l82Ki1GBCM>aWcc1 z`ansrYPBc(uT&PzG?;{HjSoBZ30?gC@x~eZGh0a?_;gH3u0I&AscO>p=(zf85~T|s z`8k%Q&r7Xrk{`m{<#erb9oJfWX0o){u>5qlO&qOT+xi!zyg2Y7x7JVpwYw?h)sc}b ze~YJtyC-fVw`{elFr=nd$5^IiQE2$K;_4H(L)ZV%#`t19(nTz*lUSMxF2dMiGuLkx z0pOd?zj5fX*0KTcU6A_KD)7(r*5O~vkc_60@ad9Ye2g1e%2M(OmxTIo4(=BD&RuR@ z!y#Qc6+N#v6G*{;b9?5J1iaI33P2xkq{ce?*o-ixLwe4Fw)}vKo%ZwVRu-G!y0^Of zHCgql&DZ_;&4gFH_{`asA}#UzpMxW#@r(a&#~}a&Fj*UVseSqD4g`k+{0xx#Wo759 zV@3MMQ@T72T@xxuKWjd$yLgb0#j59VJ>iY#t(kllayte!B%sUm`I?1_7w8^P%<4ylnWlsi+y(`BEb?Htl zSpVlX=USvrEN5yfSpSv_dKq(o6b3hW{L(pGG|?4~jhg8D zg91^7I#Yf}Ll&~Ni0s;E z9+eb!4==$ZoQ<{nu&(Js-7lq`FkT;CmCT7MH~*)sakOb6aqU%xNkfU!++zraWl|q(n+P%f+UTk;xl7kf{I112)KaOQ=)k2CIT zGUPmvx(Z9X$|a+9f>SpveQF-QqIy@Z`^TrH}~m?>@cOZYD1ta zs3?*jQj?K|r}=O=ZyFFx>P{wYtWVDbk)U1fE?F(v*}7*=Ej_VRqUBZcZX1425UlQO z=5YQaXNypFn(6vAB{LaLE*#fS zV*2lx_C0Z@U(b8bfD-nqua`$d=cMD$e{JT87$d%R*_s=IBtucW%Mn?Mh4J;PuAJQo zv70{tmF>~m#qoF^1=%eg3$Ms;xl>`;zVfuUPp}^T(2l!I5fNLhb6-MBlLL8W-828J zmG$5QEYeS^XDUl@i<~Vde~`W#xaxiJ;EwOE*X8+RD;Nm0D`j@c$nN;n;Zvj@m~iu5 zB5vBhxz*XKV6sjX%cA^$9K7H1`n4pzk+n)Y(By$$8OC)Z`Ku&vVp-pop9*8=9n$|! zFRdds>A9CPABapC(+Tnv&(CeG18tM%R!BF@+O$Tm=}{`DO1;<|_y($ZnW_t4Eaac6 zUNLCt5xDxUq{4}-m{0XWx#t9y%d3Ym&Yt~BHhNxi4*i5mpn6fl`_}R1P{a7cQ3B6K zj$a*$>%I{fJn`AW&LtqJbMYgGZ!cl0F3!AQI;pcq=t!f8#mbZYrj}(jML}6#zi=NuJj^;)y;ACK#|{*9&yld>0xE$h=;bhp*EqQU{uLt zXtOEhnc_p-<5!1IYWKlJu|KjsWdqatI-_y;b`xO8j%4<+oAftb1?p!(^z%%5PuXTk zKJ>W}nqAd&j`bA#BmR7Cw&4{VT^9} z*^nnfZ<=2vC%(3`Gc@=DzSahmXh|uvx{h^gq2VEK0m{)N8bzIAF<@9t>S~$%$}2>r z9q@c5YL3MXu}nFYo8S0b$0G*Z(g6r4Z(sZ#zQJ@by@895YyI#Uqo^Jf6wdVM9xS>$$eoNTvQU5oH}+ z-JqwpI5}c!2M1#>SR;!w1!NXA!pAr)o#^jC)R#!1$bydGjRke+V&vl8#R^r2^X-!P zp{1%6np$1Fm095j9>9$dm^}Yy4nC}y$be29dVE%PXp2(M19P1F%)mz%Ap9vF=;2!$ zX&}fm7urq=_(*cULMY9rF&^L79wCtl-!wVQ%;2TkW*Yk6tH0;R)oDPQuJ)zhUJIG1 zS)K`A?QN@5Isp7d85tS%c`KY`SVTlb-B1e|rUb~#)lwQSzl6sE3dtCJFU9FD9EcZ_ zL%mRHV|jXZBq}e-h;(XfX0(oFO6-LzARqZW`sw^1Ynm#L8T=oA`j2(JlpPMtFKb=Q zRvE_EXk9&=hY2Pth5hnBEcow@HHVe_(6O6T7jMCVZmwP;m_JH`-D|w|!sX(TwqFyI ztr=N}ZXL<7><9T#pEYmyDBFy*G?f`pYgHVda9UYXW*VCbYNJZKA2M&weNR_F;LC!B z?=P{HLe$%q&GZa&ts*{s!P<*MIEsvh&#$QQ81oiti}3ora&tmXTsfcc8uV(|>K)tR z`-}i0)O`_UCqnXcEKH61E~wu=zBFR{8_i{FXx!G9~9;qVk%xvf__fMR0#Q{YXa@DX`gpNRbFe{ zu+DW2orj?1h4m{;3Y_|lE_(Py8MyE)I*(~349yf$62&fi9}Me|g8ZxwaSJO|@L*QykXd?`;UIHYGixyGMu?@!(#{T9|D5}2lutZ2!`R%@q%P1@8ZtL%f1chzyu6X zZ$V$6P)#3#qdmP9Vu%AML_Q=#$3)w=`RL!#yNVV<#)fj|4Ql?{#)%l4e*HwDpDrYK z&!&cCjRtv6y@;(rVIgs-dq_;#to3m(O1@kg>s9~^2Ju@QOapyV3A%GmE1s`AYsdx& zo{#1Gm-P#EXNvoWY~_{b;ZRUgMt%Hfx3f~b@kqH%^1hdD}t?SKF8Hudl9cG}lJg4Q~;MtP`QDNY3m~2%_Ix|KdS$ zeL_#t273K&Ukg#=cSz2+SwNv;ICRg>&!8eiA*>R5r-NQ^Z<>0aR(o$ftA4OAA}|H_ z&aH+4Awi)O@WD&F4HIg%2IonuEqa*Z5)p;#>==qCN%@lO0yu>Dw)XCb&Eu@y7K3bU41}bR z?pR0?Oq(aqS<^?Ex9jIUY+Q^!gO3SL>+Y4ccUH{e5>jB~9f&D*<=g`4LwXG89p zhdA8M4PW!#;eqm)w_mfcv5JV}O~|loxX@9e_KodExlO|A1|c;HQ2h>R?PS(N$fPa#xm#iRtU+S;B>&k5M%u z8^3d*pqf$Wv=eFGBo1FJPL`RU8K#LkUO6N%_C-fWKmX4y*2|3_XXSdwT$!$0Cdb9^ z0gV`fzm;HPGWTtIXq~@LBO>mV|HjaFsd7y&(Z_{611$q}GNSn;l{35ec~jOHvas%qxn}ACTTwdedWJvZyYXTNzYJ z?trs3#>T_g;g~FM_I#OqD2;$M$9kN$V+7PCy-NIBsxF)ccn!Oimxx zN+X3jq6BTGVK@N1^!8OX%0-?eFRX|TSY8sutZ>v$;)8aPkFaRl{A7e19-5+Z2%Hb> zvmhGr9dNLNA)HsKsR^7r4@uwvi7F-qOFnZ*U_qdCNMHfInLE-Evv(n3K&shYyZ zKQyKk3~z7H75FH&XGVN(q!RDP6sJSbN2JWghU#2!y-oQV2nF1pz+(x1XKQ_VTpBxyCs* zSIFy9>7{X8hZmb6c$LB;=?Z%{E>3cQ0|9rONxGHpP?s=DT4Ovb9#km82DDk3wW=2d zNiA$2>bXFTnV-|YqsXkyNfe>EA+^bWp5LZpUQyL3g-XUDj=u`Y4!U*5!odQjL15TMjO(@Y%GSS5#v}3+} z`bc{~YAl@dehAGko@)y;)n{gwjgeR30m)mW4YkiA`F~dRH++P#h}G7ZIsj&Z8v3w# zR*dH}e|k|@6g(`75WX+42S0f)URzVoye8W5K*Fdxw{ifglXEPn7w03{no@dU$|UoV z3&P0*gg+Ko%9Z4Ww=v$7V`A^qTuc-EWKyJKa1L~3G`&W`+>FxG`(lUgNJ=4w42SX{ zJrF7nEP~MZ-Mfv~0hLt>f(aOXZNA;Tapzj0l`j5w{V4(~sq0ptNOE>#MOm2)-T`~p z3hyxdoc<}EwcWa20uo*M7{sVV1dulN(IqE^_WGQ=Z)Pi(_B9+Hn#qHnqewDd^0n_d zRjS}vLESyVaif)Z(*1TKUSimlALsAcrbPO*?eUa*CO8LDPP%-a*QoPA)$lgzs^=Oe zNd5pNW3kjQ-o=(gYDyZ_`N@IJ_$X9QLcFT`iW)eIjm1#yrdFU3Bwyo=8-gb!-jIW& zCGJ*0ARqPL$u_e;VO-G$nOl4OH9C09=KPU}QiefzYv7#?Hq62!i5B(6Fbgksd9DCM z7BMGYH{OSl%{WmQQil-3bmN%9qVc=QshJ4)DDbD<41jbZQKWW7r@})lBN3QY2h4Y( zM1T<>0)Ote5%_<3)w}At&a98$AMl*zpt_*fyx{q=E*p%>%BMaB5#Y1~OkHW&!=Unq z`9rLh_}fJ9&AhGQ72|Nri;hS$*`hJBeDO))6;}17`MId|vWpI^c)4hl8yHL8_ohw=diM}iya)38gv@hHqb?{ z*?8EH+9R{GA1++94NK~o4-_LpQ2fyBv8>x~RczH3T`_YD*3A9lK`qokNm}*5DzHkt zNT%}B=34}3vb>iA@R&M+x{k3!9h2&v#-CU}es%byrUk;P7j@;7M`^d-DiCqU!yi!{ zmyrJ>@o#yThT$tj)FAwHbLm&Z2Nt{&2DnMrvc4cMQWK9`7U(S42iZ2e@>H^18Xo0o#VG6T#{ENq*i7~%Xvw16gr3>+l%$L2F5ulfgL(&ze0NPtI+b=@A25bFJi78HVJImL zGE~ea^jc^CygJGu5@XILX&>AA9esA92eP&;i^uuz9L_#Em_CDPeRh>=dWx!V;~qVo z`V`ThPh9HyXSxIh0VBdI_JiRnuQCPUrv>}+OV`(9u zhp$w||K(W|YsX$sM`lM`;wp9TgdQscR4*1_8PQ!6K0P|3&6xWIR4aX-TOR4W*PBmCj$rSWl zPigCRUF%fqD{nN!_l3@?bct=tA+JNH@;WS7y<_2@%-wHiIc7`Xhwvsc_R1I`RwFL} zLd}5fNmqx@Ga7ZeA-23TPa1_89V`*7kYaEf$McbB<2;f3m4#hbUG=Ak-EKF33u_5j zJO|^G+J8c-b9}UPM6Ug%=y(erKAo)X>&*wFtr&Box^`k`9)0Y_oB_P5oJsG()Ad8y z8NYgSaSWR3g_6xg zk1}O-a6A>M=Id}oGA2KmIIj$O&l=_u2xbcm$p7MOY~F_CW=PIi_2ag$z* zYnu=a?}zMxrb=1o=Wvkc`h=H%j4HU864TBQBkki?hfk51JXhSqxZm*lKN09!5Cwpq z$v59yIJ1_T39H8GOpEoBGjcCb{hDfhD4)q(X=Pr_=wvVv#Z^=O=WVIOi*@TkIte3Y z?7fyQ?rrrrIU*Su<#K?XzBy6Irn__S@kND^%A}qiU@|QIH<-&5vpuS~3)JrKmJqt3-BPFs>7kkWlDa3l*ShufNU$YAJl9HM}oVox1-pm2` ze5YJttivmJk7g-yB(~4GHZb)m0U(g4!>tVy-}MIU{%k#C8QHfjjSn#cV0P5!C4ug+$<_l&Z(2jRlv1^d~j4*I#hZ^HGTBe>t5 z-fh5czh6Aj+ghF&-%)QNP~gml+)H{e2vUBAw1O(YZl)@Sm8w!}ISQeb!YIE(8Jeh( z(tj&}mB!Q*IT~w`oCIA{4CpdxW&XCC6&Sk-)$Q;*d3)C&9qZ+Ya<2tHxi=~RUll*a~c{4b@W3Ra8n$`6BCrGRlxTF#P!5|t8 zmpxGhH#^>+SBI9;hX=Pckx!wb(!J%TNY9_+k~QWJ#yieKMH#Stszm0K`TO5Swwoyx zJ8@5epqXXo<^4B|_a8O0_n6MTD(&7qTmLD6UzTkj+{%RWjMB9H=d!s#<k9PqD3OQtv2SKkpHF$%lsW%oVu_`O9keB_*X`%3sfJus)QrJwvA+ zN+{jrA8FH!G#e3^PK7*dQNyBJfwADYquHCJjno z?z!d2SXL#X65RKIHjbX2E|Rk{`{t*Fj|v)^k6FE0xg|_UrmgDqY1Qp1@|;F^x#PE7AKGU1#XqEh5h@Y) zw!D03^Lg+st4~`_qi}eN9qWoJUwk~1u3bW~a@AFGa{Gp=jJRxr}dyQ+Z@Ag6dgS?@hp~OetWG!Ag90o zJ@@Tlqj&F&LBC%^Uc;u}$jC@y=BJKPvI#bmoqOS{st7=M$W!C`X49E8udKAR8C+t- zq-#?e)tW5UQc(%1UW=~Up3g;(I&|RRJl1Iy>V_BhA>QLU#rN)9F)swSrSN#~dkmSz zB;|{VgG+si0DCmq)xn9@yT1skQ_HaLOcgF6I_6GD*;4gkv37BY1WhYixy~};mFgcj zBEvo_V0&Z#^*zG|L9Bmh#NT(gJbNkw*N)2%Cbk{-Y;%(9sRmzrFYCua6P;v_H3T{v zjWtqMLHA%5Fmko`_P&SquG&^sBvZbVWtHRO)PFswE}Z@l73R&{urgpOO_zUFpp#{5 zxb5^OPbHQooRy86E>8n^BZz)n!RpB%|9m=;Dl0XCzDQMo236KcEF-e2py5b&uu)lGsn%ggR*C2-O`K?24 zuhqTw%MnwbgE;#e-iN@eX2^$}D{b;KF@#&~;_e^S_q$`1qEBBGl*Dh#*s8zDamD=cq{D` zf#?%h@$0Q?t%$I>jPbfgD$jcbuY70x6k8xh82o?nABp<(}J)#Lom8Ead|pTo?*sqAR-F6PGO1M;tGhQn9m57OasW!$Mwc zKC4g&sd2~25z`QIg!nX#Qb<2QFX5iHNVWCT<&jQ$rT^rv+MV6sTmU&U>>BkwKm2v~ z#>I=9J%o0;T}Gtd$BEJ=%d@t+;-OYopR%?;?1~zU!rl+<2N{BFsQs>8V@pGwRDQn@!b5I-)Im85^^L7C98gCKujvtP_3a4~ zkzubeXQjYQ0$0-hvP^+lBX@l9I74F$z3SnNmV|4$2X5*$_U%GGSG{G@2)7LP5iRz~ zc1$Z#R&)nK4f_YCiS#isTWRMU5bbLhJm=qMO}%2PnE`}(Q#<$2ic^|?~ClCc0*ZSyPACqNq!}#)O4>HlGFg_~7qz<`yua6YzmzBQ1}-Vk8C)_@><4^ zzNpIR+;jVq7$0#3RU&%@tNA++ynKiYd7^X!gQs%3?y_}LF+4POH4Eoyg&1*1r#mA$lODUpFa>SI8^c@xr{shF^urKXeOzVAwJvB{c+sUr_B^r+tt zTro4&dbCjquTJuqq<}wZ;Lt6*$639~lVwW+M4-1}-2P6%o|=L(qOXBEy=K3GqPuIH zbHoOkbQ4+<`@O$K4`pRo`5@VACeATpt$;}dkc#$?4{pL)>@Id z^jh%89p!|AAMir5h$Y^;-CRm^2VOf%=FH1%I6NCwW=rJS`wjM>r#y-SIx0OpJS-Zx zPa$9(ijAin3hbt7y8bFNI>D=v%02OdoW}#08;(=pE_Bo*!kXV9vpBlEF)PJYCz{J! zRYxb@w2{&|(xz;zVNL)K+;W$v=dsL~%#Yz3J%v?D55Qqb)Jo|jI6Py$;n{F6ZfXa$ zYbjy+M+nUviBns^f|Skh64keT z-LG)l$(^oPD2QpK_7=6zXGjV3PSe}vVMHf5j5{ITm=rDdAbYrYx5jpV;vOg$2}q>> zc-6wS@l||(aMB*!XOQ($7_~3!RXjPDl@i^;1^XPhOxi0lt2~tg-9g%amm?LHsi>@+ z4(4sY;1N)(p=-+m-<{zDLE`LJPJ=2f1NSATETuz7!ubqvB$CYA?w)WYF5Sm&B_Oti zpwtqs|M4Ntnb1DmzwcjaHQxN_OxnpH_>V3y5}ms{MQ~SwbBLeK>O0-+FSwv-xXQ*# zi_w7q1I3uJ^tn47i*x4{rvb5#d931=&hkC0{3y$1r_G#OCLb89)e&O10*G=+9x-~l z`&IE7^JLYrXt6!Dyw&~@IbBB12>pRunxL9Q%e{U|IbG!TY;5O6a8~_U)lNEC`teKh z$frV%eVrHgNbXDt=;`QYeIuwjI33sf@StQpc}=Y7=X0WKA3Ho|deHS;US03uPri6J zzk4G--`n$ofpCieT%;p3mrm59`YmODlev6-1nvy37qQ4nV#QoQoj6n6u4A&xurjTr zulTlLTGp$t?%soxem=#S_9QDIQ~SHyae@TQ>eprIU|VU}GcQTg4G&h}2lN8tj;a;p zPa#%T5ec@tukXbP_aS+`mW8(z45Rt1`ky`mTiL7@couXsIM}lWIn@$j2jI@e&^O+@ zlkFeC_-^srj?VV>ederOWRKBzj_X-XfbZS{uBE$D(y!hT$)$6lO@<;J@kdt$9tNM7 zyx;`sV=Gi>bTrGp+26_-xzD)u=SL{gf8nOXJy`?&J7~Lfz5H2tV&b?$f$P_~!g<-K=K%ZiZq*q?X4U~lmT3w10(bxNxh77=_K>aQ9>C|SqcB8NC+#Blg=QHL8jIl zl%MmxtRU-1e2#ABm3%Dl`c&^c&m6L`SMa&(segHH_dVAs_h*n;p8T%Kg;n(stqeI9 z)`;xOmJT`Bc$$dFlIAFf7v_Gd>duT&x(nOav>dwYBgwX3u+?q6;NdMV0&d(J$)QWorD zfcqWZ`*(yEZ|wMC@n5hGHGVDDk1j{mxP#)kI##&nz!5prc!bgv zYJQ%_>%m_B+}w27?R{N9&1;rLrM|g5=AxkL5J6ltzoc$IZ;|Etxlh(><@9Ah9Fv>g)e${OXg*3;DoI8(Q8PPza-=AT zj0#G<`cYO^^RH9IdK|>bu4=N+3tI}d$(@+hrRj*adW@qA2}~bX40vfi>ZaV*GR!TE zr^>BqJooXl@wA(}uPCwkT^pgNKtXUr{kG!MW5z~gkY0>jW|(PdmF4LmcP9!8o%0!27I0yH)x26 zCdugL{w;5I={kkaAa0Xs@#Oj8JEK;vQ?fJ$_YA-GCZ)yvY2hVo*3A_V>w|=PH z1`hE~oMf;NY&!yZ`mbAl@l7c$UKfR?9tt5pO(wo45Lt9+pw67xhys36j04>PrOW8| zM3KA?j&pF+>2Fa+W5doXU&z3&Vah_a^0r3`Xy$#GUqN)ltaKRuSWSBJIk3oU&kcC( zV8@B#U5!d7+G=C);*FEo6JG87(p?{n!Xsr5Rlc^0%iJ!}pV9BcNTI@5flpC!7*}ZK0;p@pz8&>>8@lQE$x*yQ=$7F@EK!U~Egb zjUXc7je}o%?@=xIWsGbroX{NK!Tn}NXqBYS0!L&7nSkv&dw?7bc1_`OcIo9^fK`Fwx>cpT2# zIj`4q?`Ovo1#`A6Y1I4=!)WQYYGHl&lhls{nu6oH^nSKj7vM$J(T?Xeo!=mCE2pW@ zH}&?&048!jEpk{`lpM-Dy#vQX4`qH2`hECe z6I}c06m2$*?UxWNomPJ@`SS4zJU)P9+HKG!!!;%mJ%?;xc;%4s9xB2ihYNT7(5NkppvA7`a+l|68djEg z2YpwI?}yJ$=mPucDS_bV^ABHphfz@La?B-{oerSOs`N|+i1o-kP;pEX9FW&ofk&pU#irk-5IRb$M*!q`A}rvywM2Li3rFLExv) zaku*n$6{=-4l*+LWg@K$vxlYDYjXlS^-QkXyari=TejwP=U4G}GtH~C`vN~z@&@*w ze*RdD+_`tAr&#T3xC>g112s!{#!GIs=mdozb7G%ie!Q0wXe43=~{zF={u> z*0wqZDZ1{j<1{$=K>Cgn8fhdkrxJvVT7aG9^mf&^;>}4Ng;>_$QR7@mQ6>ko2ivVZ zDzb-P2zm{ht~!U~Jl^!#jUHq$2qd*;#J<_CUWVG$;X@pUE^%RfL&~r*s$5@qZJAZb z0bV8Cy67>b&;__9z_0L1?TN{hFlC35=liQo3J?ffl^F2biKViG)7^bz)(xDx6>7Ov zYiwEBV|Dp59_*bvn(?cSrOV=b2=PV<`;r8Pp2~`px_fKeaMu7vFbz{>MNsueYxGAF zpd&5Nx9t`G)`7p=3|wks?c#vP-c_UZb`-f#>uS?gj>P?x1JB+NPo|muwd*E`O!d(a zb}rprLCVXQ-~OK*iFfkecdpOUY!0qYb7xw3oeQ&T<8HdO4qLMKZr#}_ zQ$?mGF+YF+RF!u)&%9dT|!A z78`V&q|(#zm-uTwuf)eUb`llT=nsL~be})-;B(xB+PhxXQBXUXy1?+r-uCCCoO>$Mz zI$WjH`O*P`UK6iSK^H*F)1J}W?{V^^+AlGr-yuVbm;c^;cFof7e(2toA{Uo z6N&jxI?w9x*CHDHQa=>+m{Z}zZIF-vUpdwdRjC9*mc|WJp$G|^G12ms&u8N{k)jid zF7^$C=?Mzs@6U3Dk4`UI6D=;!hfM@Rf^B0&mdbQN3^4oFCQFt#Q5zFU^<|&^Z7_tK z4=n7q(jFGq-)D*h?x#z79x!yHMb!}vTx=mI#qWY)n4Ub#r7p}gR|uF!rY+rcx5*z) z?I7cNWnK(Caqhl^C><09!qO@>Pa6Fx?bek9g`4-YDm7apRfL#E+kfl@kR&1i){r!D z?1x{8-rr?uuy-w(9}l98&Vg}HD;G;5Y@q9zh^U7SAY*lQt@kWvfR3w!gA8^fy@|nK z=0E4C{Dbi?d^~nMbjNQe*f%V7v6YGIJEmJ<@|iN~0;D(U)P0aq`zNBApk66>fH$5(u1XtfaGUCR|fLaYBs9I$xUy zPm~;a404Bd=94f!>ZTQc)|16^a(pooI-LtvonBCzC;*`oy%jJykDTG5{@Pn-| zFauq>5~Uabf$z?*m9iv$`V9DWe}4KqMFhgeBkHvaMNeMYHo_l1-Q?VgPGh#1A)JtA z?6@heCk@0@#I5M& zu$A;!Nq*^n?H?4zg$_EVTQdIUrC;U^4qNvgClwd>?p&BB zHjdlcq8*`+&meY2Ue-x@;kH}}S>na|xNdIbMw%peu(7@VS8L)wKGKu$LKG{s&l#VU zskp(Nw~%*%fgkFr*_`j=;QX#~1q=zxklW0eC69N8M3v6v2pN1POn6rL-K;yH2=C>C zx=W)^VA|$toUg>>Pzk=U5J_EHt50(xq7#c3l#HZE<|GUqIKE0>!7|LM|Mo~IoMBwNnI0`Sv~lyLuk4Mj@{(S zQaRA9@!6l!aYjKSqnbOXS{17fzjuL2^eg%5#C!e3%VpA!hacxGP1@XuEV{&DC*?e7 zWKzCR*c#`Wme^6#`%b&Xu^%%1CDD0|6ij7}jIYQIR-kuHCd1?b!E9LRY-3{O{M_^r zc4Jy%zGUgsA{g@9-P!r17vj3gBy^Ysaoi2{VD9*mA;szO0376#^X29ZD=Vu$LW2(m zYZxx~+l~Hv7dM4>zP*~aNQ1?n?_qpO;x7$UN~AJS`$ogeq6eWz`W$yMzq2bmJmXc6b!UL&Y!1BvY1=f9R} zeY69bJ8S>Az33l>FX_brXB4pyX4>{aUYLp=E3L%Ji;uzYx8tjy`+!WhMaX;&X3CCX zDgtr&uSC^9$l-S~Yk5?A?;Dayu*_dY?YK63QW;P2!yCzR=POr;R@GHax=K%-pF0bN z!xq;*g1ur9^~<9I``PmO?eiPpNx2EbA0I_;x7dvfea}c(Ic9Q6nA8K-O!nFf8hno)`Iu%Jn?L74$#mX z=uft${wuBA%LFnfwI^tk2A2juUtTiqXnewti?KtR?N!AuWzb-{ zPt?PW#hX=4WHV>&v#guRXf+;uF1j~SYEsn5Ms_)8?D4?+2a8X64MRq+azmfIQ_Hpd zav{C->ij!Cp-ttgnkPZ(#`*PN9Cud*2r6{*j;IpEvfN~2%b$T31U@<0>rM}IbBhhB z!iwSY1{b~5ZSq1@RYW*eYQ;A*RB$8kCq5mn)j_T_A2y7!J(ab4_UYDR)gap`lSw7pie2X?MIH5KX zfy=D5Hi=JR9m1UbryV-Vr{y3Ji0j);aif-t<=?U(5m%i?>daspU9yv2RM^%G)gM;g z$E!Hoe_G4_;U6W)8u`F?U2TNh*gTd}b-+DR&(3q9WOyWh>3s=ouVNWt5Olz8*S_jw zi|L`I4f`$S{a+=CJmUq15Q!V)WileUYer{3=0rd4QKLsuJH0>mz&GYVc3b#F_{~&P z2R934_eXVv&R|(n{&6hR2#NJ|eM_H;jplJVG$D$`o?fWlYB#hC_F3f~4 zmJD}bObFxKdAhaL?ml9^$>!uuz6ci#43ej@D2_ z?$S)Kv?gAlOkCOr@oN#J?_W`E>(KC&@xCLUI$V1fgLty zIC<1I!hH%?&ZHR6qb`7QFZq!}@5m}G?Jt9|m>+hljL3M{^Q@nbwVrDQQ82 zpXlGy7F!ytY~8eR@OGxJGur^B}V=X|Fk@ReEe@el4S50*CNk| zTMpu-TFWX@b&;1e<9(Vg^ZT0L_JLRSk@v&T;qSX9bKc-R|GeOve%;|oW<6nFP-m%e z%uS4k;8``^(olxXS;v?KAwFKSn7G>sFR5nUJv{Dt3R(N;cE?5K+k)OhmqhMgRok#b za|U!|%7cC5xQU;MBKv39H>CHLxzZEInJo^-w_(ADyMe2!U!?Vhtt)ff*JJx{RcDRq zF{LLs#i#;&id-eZca$(602pEN>kw98=2v_eyJ<8*vAMUj=d+Jam+0N5%JHVQ%U?Zy zs_D&^o3KB|x?6e;5XqlXQQV7E}%t?o>DJ7zW07cBl36IQL&4#!Jo}R z%q{iW^}WBt!^emIl<~%r6f^G+p$6dtCy)knOj`jJ3|HghP zv|Yv2=lxiwq01YWc)DK=@SwR|G->z`1@m`K>Y~(>$nwe-|JhihxZO`ZHH?R=%d{Pr zH4!iTxXPv8akvRgkRrt^75ji)j65oH`V;Px6!Ccg$`#h0Mb9x+<=~l_LU-t z;cSiH`3zNWmx^ZC$Lx-gjKvrqFKs3)o-hcq!2V~AC& zC_cHlc@|0ud+=K?AC}w6a7txPkF2r3ro8*hPMM;jKb6EY7sa~)Ra2{7+?2dyva+&< zh7M|XWd-oP=1uq>Z(j9WHI|OQ64!9cF{CzM@|E@MOp>Hc65XDVBZGWznwWBC0VsZi zyR~xg7!*-zl?Ps-0LDPzr^XRze|(1ugCJRCkofN9MHM>@x1nCJ zzqK_-21B9u{I*r#jXkn1u8J9Y+~y62Ca|~)(jftpGxX2pRi!_imVl*DI}JST=nPX9 z9^5&5!y?{QZ5+g%@^qk^>dJ^C%Sh|qZgiCW)OY8`+4NQ{?GTEZ^Jls=D|@dWc$H|G ziS&MCtRNR(GAs!uNdwkpmLGbariY)RDMRh#zx~Q}6PKuQaCV-5=P(4KxSHkYP`~)y zdSZzir6X&)=?R=)so>9{<7XjYEW7xg&OJ5!58EVrL(3YJYClC;6`} z+f;zs`Wx-1!v9EZj7&ET8jV5WV5M=K_1xEtwHzBgrXu6^w#(XYU!3;XIz$5xvH8|! zV*nMpnI#c%S@v%_{g2e!&tD}8@OjV@Ay?J2O;oSVUhZi;bDdP`k_Z6-k(tI;q7c1k zv_#`0dnT4P&Rgn66v=nk2d;*2@?VkL3uB@3*;8ug8C3ixXh&5~x*V^r9$iLPDvsu zGO4x7szl`R2nc;^=nWD3DMfCw)zU#@Dh4ySwjQV#asdh^o9nBkAfG|wIp7k<8+OFy zq@!FPzj&F~cO6nYf`vXSHI{mpF^oK9earF%o3Wi- zVD8P|L1T%P{GRsidbcIxk|2NSBZ(9(A`V9vOG`!26J=!j{GQio!3v2_gNRE1y+Q_n z0-*rA(+zq8qBlRWe5%(S<1iv$IM05&xu{3&jSQAl^vt`X_y|H5BrQf3FaI$e4?6HH zO9mAOU8c(m0^vw;x7P1P$hYLNGM)BF_%%=!60u5lNx&%1dZLjCw;$2)|I~M1@aTN@ z6Lip|HU+zpTrZq1sTz|!el1I4AV?|ozVd_HiPLJI7vFbZIHPeTE+537G6r^ch0UV7 z+1fcc!1b3kyDbokbF|dqb#=!XGEhS9Xp)7IRfkh9h9C2al;ap3(!ZT0$eBAmqa7e8 zCE{?_kUTp!X~wD}P!*pPujH=KEGCCP0~ODo4BGCh+?$f|;5CE!hSZ{X zjO1s+BffH%*?zDbx%Fg!aP0}YWO2lnB|_A=yNYT#JWdL2cQ;-9J}M@Ly|4$ar%{Kk zW6IL5RJMwj!G?;Rx^$H7Mce@h*ZF$+j~>-AyqugIPz`?CK-v<1;D!$8N@Ucw5o6hk zvcv-gW`b+g%P0~zM2xdWt36VJN+dz@kLLB?RE*Q6R2CQ*{+hu&Ku5GV^LPr%@;QD%Mf|^zP|*Ro085 z#ZXd=0`}Ix5h5f7fZR3taOck$Kl2e!+lpVdWOzx;T-C6=rbaJNXzJ`*h6)WeWu(${ zON33UuJb4Z3^R|?C#C`-FjXNje0)54z~IagJN;(c{nGxd$uB~m%(qH#j;EPh&Ay&A zP^RF`K1mGN{>^JIzVr^#(RrbKk}Lk_OLm$DHlGl}K>cQS-w?B^_HcvZ6fyKVBr=)1 zVd3qNg%>nRZXc9JrofUQpcDnKOIZqb(pwBc^i1JyP&#Rpo>}MVIc?Q?dXXO0CPMks zk)xGGZXbXPJt#&afZMzA7ad-}dDY?Pp?{WE!E#TgV{<0M5=HNc zuZNKJ`z9_Qm4N-})qQ$Twa?GIzM@I3 zay8y5J(6g2;Fgkqn>e{7^;tSbb=r5S_+|J7;3K(M(6FYr#(sf7G`Xx67b7BTmxbaU z$X!c@=jEv|GdIRZFUr`l#Ea5%OI$ERCZBU;Cc3zBdsoBgS>p=_%Z1vF7lkgG&dT80 zqL&2zo(gj2+67ra`M2c1{F2B2xW8nSB=DBoVz)iaEG&r65?Cd28&rVm`?12N(^Ehf zFI>D5xim978=h=M4A(W z`Q?oJ7wOadX4qE45Vj_C^&lf_;{W6NIPQO>QF=8j(9*(6Fmy*GrDJCu)u}mmf?sN{ zHHRVbHFni@c6mMm>nT33=0sl}s+@bVy6L>k&}j1N+{{W+XF}(BN4?^>&0~(wnp@^_ z<-cx zrVEkfCQHK#>CkEMS0;uC2fFrzJ{ebLJmC7i$&p!UN@lgoSlMzIrRUU?w|1GkP-U6>a>UzGru4=S2qH84I z8eS;#+@c|N4OkbPtmG#&d{Gho2TAEEY^ zYW7{6kE+tu_#Q)Zi`brp>#Pv_ge~(NbW|t&X%fWMt&fuJu5YqtQha|nw1qHqZB zhsXKvi>Th8SBY3pkmNO4Q^M+oA`+{(d5_Xw7w-c>h4-E3&pUScZ{%YtOM%%`&wpJlgs2$Gg46i%HQ}GPiqq zmPg$QuUU+!{X>T}`<;M}^^uzK8uKr5QuNSvup+>;!PmOb1HFIKj|Sd~NUl);#%B ztPrwZ2-V4!Q{nu^93}ktnrHe`#gN(?UBil1f}U5?(-79oN}uwYb1InTckUJ!S4$5C zz!oa5C%e^y1 z7(*nSW$zwQV7MfpK+>e5f9>M=fir%#&Y>aZB4Z?O(|aqru~FvYuB%(B+a{Y<@thSU zEv<^7GV}kT4Lv3Afg)eB?jVH~QK`tb39}ThDQ@YRT*Bdy+Q5kG;rd=y-ZHx}i{|+S z29F~_z>mNFibE4ABKRx(Y5j|ht?V8}qrb1j782iaOeH-1`)l<5dzSC1`vL_Ss{xuO zTu6SK8_A5570s`nQ2m+iqH6gjxB{XM9h{teqrX8S$GOB)Tm%9vLu+cpXLaFveYx7~ zuU=90=vMu2<))S?DMJc(VTAbFr6v^0Z^hU5;F3wLBTUJoX=%+K0_|^Wb?Tzbba_+2 zg5owSb_X{)Scw&OaC6tug3mj1J#8kPx0^r2N!8&+&-_IxmX<<>Re~ZN3H!2ga3@|7 zlB2Z+_wVBF)K&k4{m*y$_#*m?1c;MI_wnnFRgb#i5x#o$Y7GgiF=bjLCMG_;YxXyh z{-Wl8D6@}GJkQDPPc^?ZYaw?Z^F_H{QjsRhG-I<5Iq7VvNDeCrzLz=(1jY5{T*_Fv zb@UXEb57_YCUn=^>$K5mj5D9NYAA+xs#W&%t!m}lMLNn#J}OZ?oIFJIArfI14vr3O zgtJJs#Lf%+(JPTuI{T@(xE0ildA_&}gC&A$xkD<`^dC(n|6;elZ<0ia>o%$NzN|>I zO--L7k}}BqNtB&nK_^=3`dw;GvQ)moJE?U1JsXs~sb+SnU#glN@ikSfmvoHTBKbDP zmFf$f+RfWZ!VNu&1Sh=ePka&^y4x;*rzAvtu1(GV6cAy_ZC8$N;6o5j9|HeStve(# zbi!n2aWM>w^@x7EN~@3eseTdk5TDvil&o9R|u^g$T6In<+DQ=(GiVZa`xV^-? zE#x=pcDA8a{9bnr=H~P@;uGmy;GSh$ZhEw523s*54Fbz zIiu5CfdaFp{ret;^2@x_#c+Bzmzs#J964NCeOt?oo9$Bw_|n|YtgKNd@N`Lu#%$-o zw%o)v6<8B>Nb{9vvhT8eA!Fo*&8N}*WuZot?KXVZpEx$R@$kSx9F@P`2&*AcVN799 z8AK*Lug4> zYowme=2D_0{)R)xj;nDs|5A}siE;ZCtx{`f`@To$y758k!*?e>*Lb+p7-7l^$G$pD zzz#b)_m@%T(3-gZ8hTMwHe9X6?$~y@!*)4{T8N^)u0xx44%T<)_73c4)+eisFb4v| zO1)$2i##3@LJYN^(#!$u`Dq1^g3l(|3!m;f{6gD^N$i_tyciikU&;4 zO2tlZ-lEVP4q0_~sUhFaQr_`Ow@+N$(@BNZ(C)em+3ZlKK&--5=Kej+dqvi3 zGQ(+(PUgr;>rvr}s%kAPw1`@Hoa%d)dB+vfWWM1$sdZ6CkNeM=nOS$WMZ&_IQ}?IY zx6Y-?tJ6|n;j=UB+X=K-ZX66#U3ueEWANC-do?>9^D1Y#y;=-<_X4jZK>?#ht4}#+Amw&o-c_ko_f@eS6d~rW!f02j0Y-`J8;)LfGwEyFm1OsRJre z4y}S^XV?(ew4#58I6eDp49%rUV4PjOr%0dg(w-?m;v-`-UwH;udJ?60Hs7$Fsc~(y zwcqA=O`tqK69iu3-ivjWd2i|ngMY`Yxhrh?$sX?`Qu5E~J4~qW&pX)E&VlJ&+5)&Z zUgLHV*3!AGslMyp${m7opBqd`H?~)}hb}GVVOcX-J?Rd-0D&NuI4|#ol z?+Il`?EWNMoqw@20I6V}Rxfj3$Qes0#W?2Ow^*~|?-)r2?oNtRe6x#qB9HsZll{3* z6ug*Y)aMVy2^HedRrr+#4RKL>mKK_e%Yr+*#Wc^_#Zcx4>xKDyZ7zP8*1L6mga?}+ zYM1~;?)=0bW+fj7Gm<|JSe%sv2lV?}e`A^c3 z$QS9VUGdj?JS?12oukVO*-{#dE~15)F;rb&dov7$z!HHyw0r3znF$oc3JWsFl%e#n z_-qJV+0}K|pJY(<&hkh_ufk{_KgZ62uMGB~1bN?)WrvUlhEaBz9pQO}Ho8?ImX1QI zFYCp$1l#2cxyH&=-+>IVuefC-{B}<#cDwvBnP>eH?=(k`jii>f-?YUm^?B%dCBCd~ zIHJx4XaSG2H|C!$+0QQV`s_Eu%wFRN+VENkszOG6j{_Mx)fP^<|d5Ti%HpTEVHa{WSZ>|+t#1A`66p;JM1a4 z^zmVp|N78&^t3iP9Q)3K9_|yXIITBs zqqVB>O}u{!n%gJy?FSufi=_s$uew`}npY!}eZqQoDKtNm&fl`3g9lu+vR>jv<@q`e z0`FZ# zNQq%_r#0vrxTR&>7IodxaggPScXmo#X^G#UpYawCJP0JA9^bty;PNtF&13O>U1LY! z`Pmrpc3y8SEg&T~HZ~{|okCqJ>XJRV$GoynKli5ic$XgLc{BtHY|nm<2MUXD(^HhIhWaewKz9A@>|KXu*Ky+|G-Jv~-%6ncTiXz3Xh5YuAU1HXOxZpi$>6K--prF*l z8fUynu6WCsdNnx~Izhh6a99Ghs7*2UVA@Nrah*tLdB*f5ED`nmzMMoBb*`UdWc?b& z!g^yg|CF5m>o?w}t`C*AVoPC-ZG$|6WtFy&u`XL#l1M|>J?4pdi}pEnaW$3*2%`gc zY5o3Kb|rFad-{Q32ui2n>Xf#sW;@#>!P~covX_woVWRf^{H2QH;%@go9>q?=izKgu zvWuX66=+t83cI3&TZe_hihGaX`$AMXV8xc2y0KAv0Gu(Z2ZQ`Lu~%r5@4O8_QnYTQ856mg=&&F8RQHhs1c#GK5XSA@9 zxmUUl4Q)!WZ5a8*V42K45a&xNHHlyTI>@v>zg)zfx+K*!Po4RGwhWfdVB*%1vG(s*l9L28q{>CN-U#Lh`FXzf zI>X312bL-jX~E-Si*DVP`Beaq(En*RL7@11fQB0@%k^NDxxI=_ z3nSBKA527)*3FowWI6HZhf`8{v11J^^5_46MCfRahyaB?dy z3jfb<|K)vnu3Z3)B%%qgiu_LYz@e&`%nsj(2Z*QJF?2D^lRGhEYGDUcTmAk0t;WD# zPT7@fc|LKvz|CCEmm`>4bF4JEV3pg&WRnee&YG?dGxkHmW<@|c<7@KOmcrGSUyn0! zg&`ndLD8wBLllx+3z4AW(EnrLOEM`Kcj||c<$r$r=c#!}5WGGTP{Pp29#Xk#mTQ^O zQa#~cz0QiN1d41Et*b-b&d>74EYjG(OiUs_DMru5zA|SbJZC*}O>Dj&6S_#II29D} z1q=mXyCwF~a2Z%~{t0i6zR?bML<;`KBNqDol_VW5I{BK-{wV11``bUGJ4Va^IniRl z8%|Yn6SI8-%Ov#-75XZWky=sbxGOYb3itAO`-V{?U+H_&kgS|1vdGn*91QXE@QKc7 zF+{X1E39Zre-2v$B~(d)t!f=+_tWIgcB|0CZa<2?_{-Bxx{rgF{5zMUvmXKag5))A z5U(mCXZW$*?Z3I3A0<6sgCfT;H`RFd&i4x?ap|UrmEfsDk?QK?lTH?jB;cqvnS&mx z`u^Vm5y(kTpn3QWw9C)<2U> z(o-L2-dWoA{jp;S%v}LTtv571vR97i{MW0@d%%R@@raUNd(K(uf0?E$qE#OMN?0eS zYR_xrrEUYhVX-l6Uxrn8Uzb)AFR#^g{9QLU!za>ko3qiOn0m6MoP-r?lyHT)-YZ8k z<}sj$zNaX@{S}V8e-E7DY)0$Izu6l1OmG0`G9EM~`OoEszy2R5F4U4FU&`&z_PD7g z^yE}ca|U~xe(8LhJ5m}mgLv&U6WgfC??i1WCs;0KospZXXWTxdGdDL+CdLsK;av*~ zUmTp_9H7g!#p@v$a-d+U2hFeV`JTb5+QbH;l6{1jlOc%2AR2=seEV_&I_qlII?4|J z1JP1|R*5~6DSwg7Ki>U|SUz3?_h$blS0RTMvJ%jLE~BZez$D0;9FIu@rNqO%pRW8^ z%SJUUA`F7XZg#RpX@z71H#=FN)zvjA2WmVpQ{}(TiMB&mu^^1P9vR$22Q|nXg*+w8 zaT6CfRbE2>z$!R!12z4>jwqSbf)8SqHon(0km~0jWlv1fUE$_?pY`bUSuGY%aL^TX z)p_&Bs!G;D+L>8-ky=G#OpcC|v1(WG2w5zJ*dNjJzfb#-9|uOXPh~Rz1YGw)A+6jzC&f4wU z+`OV*$uuwqqP$?Fd(Em^mR1tHRQA-VU49HE!w@Se4o#{Xw{?ws*%M(vSKwo(gSvW` z9&T~_$54nL-MKps=CF}eo}7n@c5hx!wLEpElYZG=cgdpXZqew64Q(s3?%v{P zP+!aFAdr^9=$Tv>P-s1RC4(1>+=p!%6-N`*IEgS1%$TjJebt%>U%x_a;+d@v63f1R zN8IiC5T~u?SZa5V2=w-xdJw5DPH5)1u z>BGcEgdCMvP+TAEW4q3?Q~FMRlK4}s?a*Bdy!58)JJSKGNQ-B2`1(!3KwM-No|uL@ z$Y-}^VJ?A->)S0dg;-sidmEglCj zSE|nz4Kd?Vjt&lrtrMaRw7aV(h=Z%Qcb}|M1Qvki#a%(r08bl8q9smOT|IA9F9{Ec zv0+5ItxcA5?@Plm- z$9+kD_S<4xcYUd&Cd&Ei`IIt>c3k~4hra_EPcU(qh8$3giFxe15WHsx5q3$o6nAr4 zBD?q$J)EV{%z--aAkmOF_8A|)tyMX7mEkz*UIH;1nI4Kcu{bpZ(5jk1qrwy`HZ6KH z_6|=Y$g_rgEIcs@;DH{D>U#b2#FDAFD`cnyLjRcQxeo;t zsfps9l=&|h{6Weua2XAJos&!%q8T9XbECG6VDYAR{F`$GW&&HY^W2$Ee%%RdeZBq7 z3+<(fGnQ`>rz9k>+=CWKF+%u#Jof!f9~RIYgwe(0B{%W?L9(kG4fp#M!Qd_>&#GO? zSG+en$xNR~@m{o}iF!J=Gs?KuRGNuEgxTD>TQUk&zOy7YtOVa`v%@USO0+m#Uj2F6 z`%iJlA2?x9`N!j{6#xyQzW+?<%CDH>zghEZi6jXbM#+@vPDRORkudbLdCjbQZ?=<0 z)HiD96v{L+d8@&G1GU9Vx_hq`LGfOEPX(d<$ZHcT&^yR9oe;m0{U&}XGY_WV<>f_K zc~7cnI~&46C3yaF`R?8C?$?~fZ$wL6m>E<`672j&K%9Z*V>QejiIGDi+jI2q>aHS4 z%}nFexcAykfUGyLtCP)ZF(GXHDHA2}aYFJqu@A?eg(L&Gem~;XRMa1@|5Hf1;b4T| z-DZlKuCQq5i%HWlQ8CpC6zM+K!$;}%71(l4S$W8v-J9BJVC~eqcNqlndHFqU!%#s? zTRQRT4Nw<&Lq(z}8{ND%<$W${&%)YzZDD!(aQn6eETNGn2kasU-kk3n654mfqA{SY zef=i((e{fW8ZefM`B96jkSf0>~j1;p~rS+Y4)O)*2{S>=vwd^4|-@crSarLWZ{Vv>S# z9ag~CQPiY7A&1WMpZ>!6(`>j_1L$!z=k1?M?EbIZ`(K8TJpFw%BX)x_LT%Q8Y`Ng% zTDYngd&47k3NF?rP_P1Qi7lL6IXXAbTO;1~&a1JR$9~GvC~%E4#%G^)2nIni(?S=5 zjKWy+_L4m1fz|g^Gf$7{14Arh6oShsmNKP1qhBDVYj*{4-XdxlGQPftclKdUj0{%D zehLvMq^;oWTv`QM5-G1-X(7xmFV`v=G7oHv;m1{u)$f?NXiT*7N6BFApgaqIcMsTs zdCU@;LXCfxqLST!Kv_6i-2Vp=zmTNFal$ELx>$}K()J=s^TsRn>v43$4#_YmE%lM5{N-28S_^6v}UvneTi9V@1Lys&bMqUZwF1_I_t8*d- z8g);@&?9=Qz_0p#aQpOCeWq{e1qfQhp3we0a&S06teo6$1xx>sGiY`oKWkq4|4&!8MJ)-@yf2^W5dAWI zy~M7cea)bQgxh-^1-0Q%p*Vk@$32LsKhD zyY~T17z%P3YAM%eUX5+upJITSLvID*HsafP0PV|WeUC4Guh}BqAupfzx_ERd1wYGe3ynM0EZH3B52uPuK!Lm^t?Q0@R>kC|;5+XrQ3_XBGL=HU zK@WmitH?Ei_XD_cb0U%>1QpjQ7*KTA2_Jc5kf@!Z0yKV1w+%iH6rS@-ZaSQxr3E7- zgRq}`4z`9NTcghKPN6nXp_~kV2m!)!F3bQ`%=yHl4A8s1;a0X5PwUQ|s`89MX%LKI z9Bt$p%c`ghSbi`Lf8loO0j@YCQwCVoY%amnC;sgP;)b)}JTyWYdfDG(+Q0o72LRo9 zwU&I2c#VXHzK7Cwm!li#<=#w{DS(d6ua@#XvF3%SaE}i&X{&yg*xa0y++04Nu9#Pb zmTZRa_p3&o!&G2%-~8Qf!d_siw?}Q5HuhefEtfca{3cW7GD;Aohe_jwnu3`!$<@NZ zo)E_k7rR06A$Yy^vc0#rngcy7jd35gZxFq|7D?=tI5s0R_whrH;b49e7?*MX9f$U% zKHaTFK=}s@`mfI1!ZTjO;-+&~QXRJOknR+@I8qTDATOh`+Lkq^xMr$=C*f%hY)E)a zBB#k8V?0TPIKL`;y21L7e$`K4c@E&+QABG#Of|3xl2pB>AOtDPdz_XcwD6Gf{YC!i zvp?c`5cn#8h_#uiWq35NV1JudjnW&%aEax(JNi?n8eO8xVf~}eRIi=R58m@D%1hDL z06`U?Z~GkTz%yC9@$Z5@k&^Yjt80tnEsx9(CvKsjkq3 z!o^kvF~eahr#!fcsibip!hJKGP97pNfd5hEspSE2(z|CVMESq$mNM`V`LpBQW|LZ$ z{QQjGAzC*=4NcFBsC%*AL8X0mYqNw_YWfrmjkww?_&GRQO~n>fW&H(}q5$f;w1H#W zW6toZoo)%S)i)!FCdqi3eK~HjUZ+mys4s-OOrR1*FdsoaGK%F}A)!|}lv2Tk zsN+_pL=u2eyUNE~li@un8FH{Xn~GVH?&0BiiK29Ila4;SuMZ#_pHkVU9@z)Vdw`0D zW|g4o{+G3&zvUX}s(Us@uCyay2Dh?|94CrHjh6*m)roPT9 zbmo6R<=TadtPgqMu{2jl@Hige2_aIw&^LL^8SoccpQaadT;|C$$tE?p$ntRZVCt#1 z_Hb(ThoTqL${ur4%q>Wq$+MAuKCpWBr!*a-)z?EDG>kpM^MqE5@!ag3ZZk|>bX%JO zo`>=4bTKiR;mhZGy;E75R}%WaowGk($u1m%5)F)g3+5gto@HDIJ@2o;2>QZrKKvYR z3#+%mq!;3q4X`Yyb<`PkeROm*VM{&>C^j<{|ARi?7ns|Or>UR4Sg0Ac4w3aRz}UG= z1PEqFjU~{`SAXciDs}W}+i++jqsfG@loNa3a6Mbn($XQe4mk5L0ynmtNsMFbKPMCa z5XX{^IRAAN8QJq^E&SI*0cS7Lg+SyYa%~qZgAyxsNN6ldyt}?kd(=48KsV0ORc9FU zo1uo{JktVaZieopUuoWt*yv_zIUMh5YS?G->0i()0#lSqi4}|61?&x}7>MsfXZv~= zRU%jNI#dHEiSClZK%H!&2R@*m{R1_6sHr$KpJ6~hJIP8hFK$*WuP&N-dqdNm9`165 zm#$B-ad~FuCe5?FklI84%_Si-ua+AVeujIC&iPX}!?q7sgN)QecI4?{UZ+(A@t7{$ zgqvJFXyEe2KxMaiBwnLaVb~t|Z^-Z$HXTOH8_W3zTZP&PZ@ef}&r;QVZstxx+WLDC z^D|e$1x4JZ;x7MDeBPBb%bQZ^?y?gbKA|L4?)?}v(W%&T#Q-` zjGUEJBR!;Qjci@^*cRa?Tef$JraiY(5Cl~$N#JF<8E1$+MnD8utq#X(EAN0k#0g;E>c4?E$+cJ+48UX)UqZc>V?OJ7PjARu~yzH!%t9(WCf{IBBfBTpxAx{6iq@~gRqv@5@g3~{Rr(0})i{|}XMXTe2VKokBjz%pZ zcrHMqfZ|ScN9bbP)5sdS8gp~E-986w4T~9y`sr)8A^$wT=pqyoX!&WTDXlG1*QbYZ zi<@3E+v@5f(W*8#qVd^}4x7(;+xC<@@EwAYvLA#+86Fs&zQ_;)huV36;xAS>e3rOj zHOFy%z=gKread|Q?)T|LxC|(ItQ0%9T(uq;S8C{!o}wdF2H40~nvsM7C-eEDh{pXPC8C;I*q?hrZ-~9_L zNml^GxO&nrhrXpTDQ&r*dfCJ<#K3MK-sWvy=7K~@(@*Qovqztt*|2X)yCp>~EL^A+ zevckzo6rRo-aEjnKR;@_7pgMZtZn0nO~D9P4x=osREKA%YZH(eQxD$iu>|>uNz0+P zpQ%AoJAL+t9cwhtyCO}lmU-)8qN|413st$Ck{^;`U>o%!hFLi!gwLwChUN>OjDMDN zD;LOqZeOmLC_Y*www~VZtUSN=saM~~`w%%cTsx>9v5i$>wh3!iWNv1pJQMZy9zEOf z>I<2nPx3r9F3u;utY#y5u=@CTG3_c$qI3(EvomBa(d+w_qRRY4F`fpae%6yWC$p|` zkbaDL>n@h(Y*+kz&~gFpMU?4r-Lc*h%T;M*gEJv;&-RzC-ox=a-^!+ zZDIbX?^r-rV1284cuqu2^BceZzVSl@?6Vwu3Oij}uBEq@ECU+pwZpwEwjQ1CRn;sS z;{Gv=nDc?eBcGDFGSfHXwTL9`p$}9;>UTbH%E@>51;ZKNZ=E;&6nyB*zZ{BhzssM} zRnM@tX$9##$fjCkMMJ7xBlh>ly;UDnf7_sF>4+CmJqU1c-|b0U6Yo9X=(~s%*;E60 z<5J5v=cTZC1bdk$H~V$$iye^vkF~dqi*j54hYb{vP)Y=(1*D}!8c9U~5dq0jxU9De6{@qc%J##_DDy1rM}`Vg_Rzdv-m z;=aq~RH4l$YA}a(N7iL+M2+JK5*HV@L14l>_=qi=6^zXQMVmBuOKqSU_}mrqD`x{v zh|WFGIqj0t4bR~naVj*QIqikN?!4Ckhx!Iw_+#Jtk4*ObLNabe>Y!Y9v4<);Gws)B zh~Eo`j<57=)|@LQnH%r)VOW7|;2)VWz*Xsznsz2)IN^m_dbaM3TR)0h1^D!zm)izmu)R(nqczmuyp=V5L2}h+bSX?R=6di=!Yf<&x zDRx*$Fw;>_218-_`9&>9FVO~^Tp&GgMjh{$f#n$;)$Y5d?#AP{J7R~_gwKt*9nF7` zJ6g&3j!Cj@tg&W9Cs+-&g06S#Pp~rQd|=7^DEsLL@Yu_Pb7iNh<9?~iDK`gCJ0pWW zN#hd>_^;^wh0^pUd5B>d>OG!129%=3Bsv8CV5s<=m?vknk z&Frz10haqKaJ(b+pYW!i_ZTr4w;5d%3!pk~TS!!|w(NW2m9|4vAP@hja199vc?31X{y*wf!cq8eyO&{tpQQQ@1 z6wTS36B=RL=on7TrCioOfe1P1I%VS` zVG)O#0WNI(QzS^M<6z}s?!8*3BAwfhnno^Z!SP(#+>dO!EhfK;bCFHkx7+^mQ8P)6S;aAUSYiiIv1*Wn*Q4$9)%peI|YQ3XDW zCcJTqbnYLG^%~9xUS5lg-ilRf~AhtiWJOs{I-J-?9O!>yk2x#zD z0`)%x;jha9tXhJ{0I#y|#RBxyiw6JB5%aS*KC6{A_Z0Ms-??|Gvpr_%i?$a&Yx|nh zAwUciOI=UxCD$|bDfSePKE#bnckOHAO#1TaGkeS<^vV9B_I*7W^kR`7qgMTVm*xZ| zbkBD_;nLpAp=o}xBg!352Gj39b~2)+Y(K}dq~JgJ_Kf9bxq94!OsXC2F0crK{G_+cd%O<-rbet3{6%5Q93=(E}`SB zOJHmBP7RH1L|a>%L*Q!su)bF*DA7|u40hoRC|_{0yTG_=h^GcbnwXRVvhC88 zRs8`c^Ow-8`h?r=W^Nx4o}1$`{FN4O3@}i<PLh0F$qw&X7?@m$C!J0O#E!7PsH4njbmala(0@|$Kj`k4Od{P1`*=Py zxZO(oHFHeUlMX^>YTcQ<$KTXDr>JS^ddQy|Nka2YP7EHASDt*Nz$Y?JIU~rWtar1R zwbrf!g`eS7^J3q?ynLY$AsH>{GOR8e*(y2Ee(|mL=4e#6rB$bGQ9JcB(UZ^fm7>AD z{DeYm_T7;Lj2Mx{0*d`AC=^EdQSx}{b`1tyXcD3xBYjZ6JJd#HRzNbSDFaJGt=+{G zzt^FmqG5!?0IxY5OW#OD_cf(O<}S0l&xI64v+TwmIial%haHA}(MAg&$L_cKZd*Y( ztEP^-a54#eHxcu=Fw9~AYIe9m1!uOom3J&+xo7zpa`jnr~xlwkk^v-us3}z8L z$~#hWccXq+Oj9qn`*;_!+@R^R5G1knMV0$*1OLWY6=*XWx zxw4Ziu- zJHFJYES5ipGn!YpXe!BSsD6K{g>MtJW1-qwOxMUYmGhpeJ*u}IsTtHzQuh7jt0t(9 zLB7#zjo#b`q*jfeDR=Bf?EQFWt6b)t0|Q;!xu>$j;&$D}$N!LX!H=8;UKZ+B-B?>U z&Z&y<-RP`w_>t(^HjywX83@_%e6rzw;^~8&m|tugn=jrPSMPtn^C?IwNhHsObO+{$ zxLmKAaoLSR8qCXTTcJ$m@l2b1eHk{H3d(>mzeWL*hIp7 z_w)NFghq$KB(l}e-I3*#O)$O7vR!+1I+RAZy`6&7DUn;Zsy&u_9VMA9EPMXkm8ENd zCSnUYqc=~H!#b(Jj);|Fx{CK7{=h%!XvqdtrAwfO+0A<``6}tSL(A8k8;=DoC(`&P z%(J+-S-uJ2rpCiIYhRzRCA*b%CW{D|qz(zj{YkMp>pv*Aw^t#)yZ7El2SRFRE>6P( z*D4<>Xet)Dd(J|a;3($MAb6{v&ULa<8|a;_ z&%q1jTfi}h_}O$ejYXmZ9?Dx^c7?+gwJ6o@ON7xu z5QJh)kKL;&tPd8sIpYgf-)GA1w5A3bTY9vY#r0cIGD44;guI?XLE@=nY$((hS+#>k zKo)%;qXLPF%e)lBu18)#5pXAs9>Lip88^XXribd`DB9y_ zv^Mo`TTOXv&Mp09E<+~h`;1AGZc5-1ZIV`Ix_evo63sECS&D>;-k4Fo=45^$wD!i& z-O9=cXfz(iY>LeX=GZgoQC`#xHixigr(DIind5^U53QFOwH#E}*c=by9Ss+{#U#(; zA3cyrrKXAUoj?bNt-MLkWk915!>K*;?71tbM z>t(y>8Ay*>GN@S+Dvpe6STos~>~cM3Twy)$xX^h&KvhMh9Z zcnFv7FtV&M!)Z$C$^0mWwWPIYLz1@uERK#D@K)Z^Hc+_T{Sh9raFH7u26zKXkTI`Ik zWSv=AIJ4dIGgEPXeY0B0wqairjHZvUDr(dL1Hn+i^-9T5^X->HC(3pnnO^f*NnA-Q z1v;p6?qEPGsf&sIIwubthR%nyUy_|LxL4te@!2#zR~!Qz5V-*~Y$rB!rv`eI^j$~e zq)Qmaq}8yS@;XD3b66QSFeqq#3{kJu2zEere2PP7oGfF|>e`hYwYk!aU$GH&Uf&!cR@Ho+oT@|Yu6tXNy}lIUc<=VDaDZ2(esX7<6$!BU|HPxFO3c8 zRBsWlE*YPgyy}vv9i5c2-j-LEDpxud3mZKR!nc)_4t2+F-MMqq&U0Ms@vz&lev*l9 zuxg>?Vsd5K^QH^ABDVG07pb;!hSrY{;oiQQ+kK1O$(&ZIqN=gox(nCyagL!A$fq*j zi(jQxZ3((}?ehMdYupYgZl4O4@bUec>{DadRaarRnIXaN?DQB2bu$U1zv?8fdcXPw z_0eIMD?5n2z1Ar+#0|+8=rFO32;s)%E{|d%%`}x+Z{Z{) zmi3&R><)KGVfv+5hCHUfoYnT}Ya1)F^|(U0lb@U|i4h#F6L#y@`bt2_6P@iU@u`J^ z+Vfy7GNwo3Q*YsTCB^HLKYi6VQ@dAohS#g_QD$1An$@ts#=I<3VAnR16p@92F&@n#!$mG#@C z6cq3;XhG`g**8}VO4np{h#TKij4F?0XSfz>)q{qJ{s3aWy$2x=3o}%)3Ywv9|AS7*kH$7osW7l^!CulF2eTjzD%Vwz+J-8s<4FXv`M`z0=P7wxJKO1YKJtNJL>9o6-+4Zo3lj+fg zA55}ut2uNuQ2v~H3Ct7EFU2Ly;&**zxjN@u84Yt?PTku-XnXZKWHmh9j|wPwSJ$2x zgn?&ej+IFG%nZrV+M+ENTZQ?s*k3PjYwe#X_w_2+Uv2j#dZXwjidnUHKNCUFtM)T8T`7`~ia%6QbW4vPRGqIL?a zsd@c6ZzL~5f&(FrZm7+)#%079h1W=pg(XT_e#$R3V2Ih$wkn7g4M%iwU zwg(m7&z?!AdKumWk^+iB+O>|uw!>tqW~~5UTL|;HO|GJ)HyRh|7O90%lf(01Lap-Q zMb$fZ6%_r2o#G-ey0GI|y~b_s;1^Q$i?;4y6PoQP4ZuK?NnBf=M*f~&Ap;x=wnrEj zzSw&FQvt<0RNRZ`#be1{Mw6klwF%e${+j>@=lXs9buU__?;cv z^6e4ijv`b7Z*uLO!|a3D^<3Yw3F5{*eK$PV=MDSh*(YI_N=V4n@$x<@D@X1o1{*03 zpR%{mHbjdx?&^cEY^D%zMb!SFxb}Inwec!N*2}azW_TaBryO%4!x8=_1FZ1N>WX4Y z*O;_C^7HO4FB_)n;T;)yez3Y?9vFcsFfr?>r6}&pKg4>vXYK~_XQ$33&keR;0mt(@c_A+<2!+n{a z^A7joF=EW5kW}uA8d@x|C6@aH@L;yodm}M3$G}&T-11u`ZFKZqG%2$gzYW^}9v4{C zTei)ub)(sY9S-@6uZo{9_C{EbRoq8#TAYmHN}0d*{Y%AyRh>6EwF-J?Dkt=$*)q-o zYns6b*g*mpyPbY1)?d8zOSVdL07aW?ZvXGU{~N3NosifsLEqZ&=U(N!8rq|re(9}z zAo+`$?4ALgnH9sCQd{eJ_Nm_MdWL)kS`QH3aT{#~qva;{_U_hULmQeL(VH8ooJzgE zuMmFUEy5uv%OLS`PuIjcCeKf+`8VAIzt*{KMrA679ST@FTj#tdI-V+b$tf`l@)4`Vzt9k$H}otAHR=DI=f zD!CqIV;7P%f0SJqm7VI*UR9MB;R{BcJB)sc)3L%}BTf%hRCGQ&i0%VuySjEbZ~8)o zCT*sOE@MMTqf6M^GofK~%cJ%hhX9YzGV_H`fLCzFEJ*fn8vexp-5s zsPUNk2nukKVWsc8h4PJcZq6Q~Oy2capiJz`lROZC?+H-VH&K~1hgC5YEV z{SmK@;PW%ZJ3@lJe86ud6{Dr1iYYDSQ?emS5xd-#Q12OV zM3PSLcdS-<=L^?3tR#4-Xv!mXa?Dn0{`{fFeLwkiMB1*+)DbJhX1~h5G1(54pXW}6 zq}+4Iq>*~H`q#WYL3@fJH5NOM5(lRmZ497aN7Z`Pb(BrOA@dTMV)6@keTI*HCyq{C&_-{+H;5*cN;K5-jw0mHN{hZ* z({~f%@4%r_R_qP7)ux;)d$>s3~Q@HABI;-D7RwzFb6Pr9P}h6On?TgP*&G=Y^KV(@3KC| zf;CQI2Rm_4Js-E8$ykW9%i3XOvip!We%*1F5kf$f?Es7oW+9;D9@;MCfNK%dujIM5 zPM6(n7_u4v+?J9lPki`m7C@5ls!vU*2i_56G5B!U%@F;~2$4Do7DmCIEID9}n%>(u zi6ExVe~aP#gNvl^QYVoGuCggJ6DUO~BvDx6u5z@OE;SZl+yufVKe1SROl@P4mFjOa zUgui82J=lfYD_bR+8jA3bBV6+cO0=ks{Hi)3-ZV{cy19^pUR6QYLDKv>4>v3{5jyb zyCOosD78qFx>-Jj=)v7Vpd43@%3$9;^~I<~H@zr5VX8d$uMbX53<)4Lg1U}al^VH; z&YuVW?L_RSRXxG|>(6FTquO*fW^2_R25a6DI%9WXs$~$2P{KHZvpa6rrmk3YnSd@m z)!(Cg8MB!U{(og(wTj5>{%+Up5AqwEYz-cg(-@2l?d9SN0Vn4}C`Ejs-kVe2Q$D*p z$aNilo{+0~sEa!MWEeCGY4UVkI4Uk=^j(@qG~b3rj8Dloc>>CIrcEpREj+Dt{Q*o& zC}B7bGPKi#OOnt<-lOOXO$dHnVj*l;!mjtlGDMJ}p<$bbxSG|1Xq>Z0N_D7MtVgFa zwh+QTRQSrwPwi8Z z#k-|7eV&|M@zKC?_zQ(Qp$p_J=R2pPZ1#`!*HB4yN7Ai!eXY;yw14IAVDStdSVaRu zqk_+i<1%7ipFmE&QNp?HM&n0TKt|-cgk{KjSNg_AO}ALT*K!9W7SV|C_Q@e#;Pmr3 z*+$WyNP`d!riCA~W_Gzf1hU5jFsxO-uT%rJ?p30MDD`iEg2|)}O6s)Zf$VvV*OKh( zB4=(ExYk#mpABWcOFbAp^bW7or$n^T!P+Qzs#olm6myq-14^x1%4S{>5M*>GgMXsV z+N*;?G^_WKFzF*<@>}#PG&}QbV2Z-ZkU^bGp`P2<3!06*FsJuxQw`%~F)JWk0|6Gl zb^VEhRbtl^(FM9~TdpsE*mHH*e8eHy1F{7MYddiym+7?E`StYs5|x z4mg?(IU2lvZ?WI$Q|_s10e_fmCoNpOpUffHvC6w*KX(qAp1Y{fXk{9gG;Fs!1q8t` zv|D{uq)KKwnr68K2BvtB@w*sEFym;N#OgAV%GhD_19ok`C0U%$TD$X{s~BPcC32$` z;$$g?z4Wq$(lL^EA&?Y{9Y?oULln<1C{r{q?86-0P#23~^=M!1F~9*A>phLr`1es9 z*^5cJ5fIw!Tvk<)sYkdevxQyBc8tDJ$?R|~_@zTJg;si|pP)|S%#RNRkClQiVV#Cd z@7kH3tjv0$y}g6>5Atm^Wigc>11~OX=#<~g@X~9=eDS~B2G%2-OdDD~Q%Hf;ZJiTw zwfXqz$u|V@bH%sNi|x4f(_ah{uF>;?Xzy};LnyV3&!=g`{GPnfzI+OrDTPEOvnD(0 ztf_t5Z5edbn;pttE=DNRQFmOu>OyyNeuj#&YFiu~`rU@`ho9{-=$`pzri- zDJR!A-wz+Obk$dxb=vLnK+OwUQtWV&KuLEg>3&P6z6$09R*~OlP>BQG zR*Yfoyn8s|cA(w)<>+E`?jl!S;kM%=ps45ax$3BL7P|`;>o2kOuOy&M5vhHx33p&G zZ4FjMG|XfBA@FC=0Y_#SZ+W+}gm7^x7H4AsXT?yw6c;0^16|ClrA%{ozFELYUZ(?R zfh^t{G{nA9*-gOaOEjL}`J4gA^KbL<*>eH1@lA$H*wtT~x}%P6D&J}Iq0uzbX3a`H zKURbC@gFYs{X*;7=#IjaRd|>}wS7j-NAz+b;SL^+DQs{^fmFs6*M|mAMBCYY{Qbb* z@x3aaaqcfgK@qT&n!z_X`A=k~<)=I=d;%70FkgJA=;%T>jHfR|R~1L+{9!hanT<3! zFQpEr3VDVRrk3dO3Lpawl(p5*c!>%(zK>JLFQ)+ah7_c}|D*%FWW|&Qyu$ohvIq#b6DX;fn)DdbwwkJUFP{s^ zp)howvL7`mvmE4ref}$1z~x&ScFa0A8^Zfp=Ck!Ahwf+VQfsF_V#Wl(hY6L+6?{(o zZLzt$$M9meaQZ_DGc}vgG=Gn*R2qoMXqU8vtEt4I241pe&zf)@B3hyQ`_V znet>b6E5;oD$S8kg0t-ku>amgK+%J#Iz8?b{0wkJ$jvI~;pB_OkO&Bclh10x?z|VO zYE4g^(Tg}N5|OVLU5>@7B!|d|d|oeCvDD=(e6~?Lp7unK?jxi?F$D9{5s5M$J6hPs zbd1PfcaX+)a>DKVh*W}fr?H7ysy6=bL%OJJ|q^(l5BmwfhTYMWM?FGSXhYm82{ z?&hrR^?k^s7?bhop*z{O?Ryj&A=RD~FVaafV)Wwqu&LGFw_~a2N7#O)0=boAYD24h z{u4cmP-Ozxj2bHaMECF22@sb8C64x+LmS_1Ix`d7%_#g zlc0bIov(*0!;P$Zz!@AJ$Q(>d{ zy^X$di~g=MPlT-_r~G)nR`CI9yvmN3+DsG_vzdS@f=}Z}h0Lu-u9uD{h=g0=#*Ulh zPo7@Z!p0tANTpjL?4|8<{Q)9)X`E)GZ<+7Frk~_2Y8G_256c19AVy1hH7q? z14kv_>|nfh^KMMRyImsl`N~xF*YDj?KVk%*(;^GuHW?;Hxn@(vWgIF2C;MzE$H!gy z5sd4rB*;SF7eb6ii-Q6(b{eKN6#Rr(2ZC(s9*rQ&x5YDDn_5I1CGYwl1IRS94EHWy zkzA}#?GN|>q)r^__(IC~rtlqDw>Z#h7&RS(t6g$XAWJv}U_G+`u7cO}#;vF?ntM3n3%J@`f{RoM>*K;!UJwe0F9G=hm^yj9& zn_qI>!P-h}+;$Ewo!7lajDOwgEh~noV%ZNL*jb6gI{Z+c{?~xSB5PFAQU<~A+Czh6 zgY2J`F=glV{VSCx-x!r5d^r}36cF{P&019=%vp=YUaUI_`s^mbTCu5q z-~L(q4v>S4>T;c0cCgR|)q6sRe`KEabD>z>tcHouNCq^5Kc4( z4^#Glmz!%8nkO;o)UQlLHjqz)rw5A7V&6cNy+CcK=k*RK)yqnAQEUuE=cP38YRk=f zVztZPy9OsoigJUDC;sM{p>y^t6*vbpFX3LRPaY|&$O1Sh^L(vUQ3Vgq+&QdlnW?#p ztZ~ouv$MfN?bRpm->U%{zJE|s)Q@#4^$GIsm2m}}06SanBhGlYJotMyS{3qFAA$$@ z_RMuXtOf2OuWS7Ek5|OUx(6-x#XFFw}ebXvOiG zoW=U#U9JS74is`qF+2~3uzl8+b;AxGU2f_Qlj?b~S%vb2O5C?y=-flmX+V35CCdyX zqGZo|zK9F6@L?W#35AUckaZ-aY97DN93r~$*1Be|sNw6+!<>25H6&pYY~Z8+L~5ZK z+Dp5l`VbeN?Y3cO;-1jdj#RNn9U(D~)rp)?XNf0*?r1g+`dBv5A#g~s+8}=U3);+N zcKYihD|)zQkAPWsRDyv-&m*Q2d!<3i+ujeuROpHJ@2Gh(WfPa9*0B!xFg+t&buotEvJ85GelEn|P{w^JBaP*%L$9a0PFY30u-ATgsZxO?b3Ivb z!rE(Ik5X~;;oMk-^(g;Qh^o(HU{y<9VS&3y3`_<#9{%8M+owNz(_u4;UJ9RLNJB_A zcsC;C2lsO{TZJr?+2F1cevPY1CKLjqqO3`_Q#UY+7_WP*tgO-O+c^NdK%}^D zu=hNG7go(UQ$n~vHF#;Cii&c3ma=e&j;sVds1qxDF*lD-g8BSsvDm5zMGaQ}7^|dH z0hYTzJp9~5Ds|^FZ~JifJc=W${6O zyi)%E>y>*$jtny0@Zkp9_c-Okwum;=LT>8&Jui}y^V#g&yjho3O`UF7)w1h+l7zLw zi+RwX+#d~Zwa7^-Uj;|^lpHBHkq&ujX~iYG^}QXb-!6(|+pv6$LGaW|ck6q) zyf@{QTt9zV@&*j^b@GQl^=zSXCwfm^)?sa=^qENp@$J^71`iF`J;;@P#eKaudx11B zHf*wRZ;0djiy2if8Fs(*I^L%VYX^r9j_Hv^Uf<-o=HGbj;HP3$+Z)9F;TZ9Ok$x53 z`NeD0)TA*+4i05eL4pW5qt7m~KeyA}rw*~fG~htI+M10VHm zY89~X+8r#2<_^lvs;9Za75Ot#ZM4QQ`(#zshY5MGo_{Az}2aH`B9=ekIDs(AS{iT@7j{abO7;9F@;8MH!STK#E} z+P@>R&P-RxcB@jIYE+P&T*?$U>VY5Q1;+2YlWCMFF%OuFX0gu_>8r^N?2sMl%T^b^ zGYDPHDVfrMc#phrbq$y5tQV3tHy`cLQ}sl=8q7D&$gZ<~-Lkdy=EM?7oUl_7Sh#yr z6<By^Q96q!%8Mot5n@zR)AYvIhUEapfUZl%XwOHAN9WA+KcKn_>G4%1!C5Zu+vH z=}Y)upWJ=PyOt&e)w;?}XU><(mCc7UVThPPd77L|y8+e6Sw0xNd1KPTy+B1gC?B$Y zMvFANu<-SX(iLQjua~pTcgV-Za76E6apW?c=xf{LXIK49Y7c)4-W zo{}{cVFo=7X1MJx|Awo7kLybp;=EJkC>GK%3lGQd=#I z?pYzdyZyIv9vW2XG5P{_=aO0$2|MDOPm^Zwf$a}OTo-fUBHvMbs6HzzJqy#J3+o~7Ap%IP~Uv($y%1d;_EcG^%y|C z(`}&zu>UtUBO@gjt?3F-YH7b_*=a7)919`Gd1$stGz-`*0~~Ip=Y+5ZxA3s z9bY^lG4b&^v`oQjZC4%pm&+TCb#S7ydPb$#GD~v}Y{-4z_$lRSA@^`>$X(3Qh43^! z{Oi7yNJ}JZ>Wu}@s+{9{UL(-_+=4e4a>piIvR1hfIoXx#Gw-&WB;5X%g7dM_My*x(O-AcF zNr0f$w$cq1#uBhU&wcU-WyeH~<7(}EZZ3O`et{FBNOaqGzhcrZ3=2h17 zM_+xa;v*nG3}kukF1c7Dhkb#-v`s?7)j;I#39^7*N3Y z@i-v7HqiMn*sXA!+{eYSOoH2qPWA64P-)=STWM>?;xM z%+(YH109N%6XtZ$e`_IhZ5Mec;+!X5t@=V&_{0vgXm_)-f1tbH2KrJ(U*3a&&D+qgy9cE`o9@C!K=Ie*Bwv zF)JGR#_Kg!CcWE@n(ulxB9*gU%lm$>!t@QpAl`3`dR(p5^q_1DL0pWEp3St~m= z72WkOi?wdJZ{z!O23h30y%ec7uUmh8f?aMfHf&%We5449y>(%=%Aoa0-)Z;4B1mPU zt}n1X2l1%(pBriBp%GB~c0ESWq7-A{cBCoY|IkLgrZ_T;P#x!Nt1wQf8tOMc0-I}N zcv;Fx0DSO-5}TDKHJPO;O~|P#os#YNKb~wi=B-VK3&X2BdWk4{y3=u(C!KKMo>J^kRdp7L4 ztvaY*AQ;yvHT=Zuq48lTBcoluP)RV~;pWc*(jR%(-Q9pnZDKFO{dI_kK&~oNSDcdJ zKjUW#JZsp)<4$a0{AuOzShVQGzhs1K<;#WZwP|bI@8Iivo@dNR)vQ_a7#J?pR?fPi zXY?bmuz1nfc4db%NNZT_A` zC2OibHEDz+IGdx-7wgNXXx9H#zVf$N&?bF@e>6B?9@8Q6lH(=?)#L9P-G=<{a-V$y z8slA|(BvF$;Kof3OYLCsa`s6r8K3>$pM1}KwT2&xya2Hq=7ald+sT?zO<@MEfsR*` z@?P|98-(qr zWrnNDzrTztgZ4^huESQ(U?n^Q6R;8t?-HDH)GOvZ0KHxFJ!}7qwN3E92b>hLGT3U{ zM#|Nnuw;Ev=8H=cE^p<~q$XyUEPEr&H${?fM3@E>{D|UXgo-wT%9W2`Znj*{H99Jq zam#Pf&XbSkZp_QaYJdG`l*!D`@5MkqVHMmsd^u{#j5(X$WN$rYiNsGtNTucv!(ybo z#*^Z*efEo|Bs*g1@V335p6II1L^U8Tv6pUnL`W;BwKD=pZn2P_1oC9!s4i%1#4 zDUgKw0b4*knaT6l<(vjwB8F$6#Yg|i#2Hcf$C`IJP42y|X`SeD&?xP*zqcJJUmv_3 z_LSD>@FWXhyB#&HdZs5INu{q}=5^GTnpKxSBOMweTm7NhvqVq6+lY8K8#Z_DPf-s8MzFaqHrPPm9AaQZOhzql8H^r2l zT*IX0sWjd>7f#ql3EOqGu>G4<@Bnb0^0_Y9j(+Z7rscT}tnD-RcGPeT<9!H)$l{ihc{AHqYy^$3YlfLM)rlcC@(tBDAAt)18ab z(~#`fNuybTMIp${beaX~XN^T>pg{RA1fF7y`h8}a#!nz&*K#y;PQRL!Bb#M;`_Yeh z4lSJ_$q@K$tlJV_x7AhZ;WE~F4H)FiA(WR}Pma8O6nx_ol3X5Kxv5p_vo#&R27~fm z=|K9wio7e(PP&<|ywZBJbENLz;%&2cB(@#<%8GFIgeK~%s{?{}VmX(X;D7pHzrLbA(RI_H${^{|OQ~1TG)|qRWMuw6Ps*CwO z(9^0BQ(HYr!_4OcM{RN$UfZ*R2Qq)WIXNV2r$tvDT;r~r|_px>azeH1?Ge`a0z zT|a(7pg=HvhD7aiqJj_VX>xc+`O-aC{zVVJ1#A{u{GjtxM{fiWaa?@q6c^x^F7OLu zxuPD{V%$R;@~JFzI5Lr)qu82+N`4sh1YniA*rd?~kLP!dBi&%m6OAIT`%RnO&OTRi z)~+y@UO*gZtM^-6K8M@V0{`OY9eEoz{2BKgBAqIDvQmiu^_;l>^AMLJMI2VMhvfPk zt<<*8vmzYJ!>M?TzAW{@zg5ecivmC?OP#xV3S*qb3jn84zw`@NzmWPLualB(b24QF zQr$5j%MsvXPWj2@DHKXj&}8|JT%o@dK5I~Z&%ZVLu-CeM57ky*Tcr?Cd_Lttxcbi) zldXXF#y~8FIU8DPoC6{A*vTI8d2Ty}k4}IqR;rS9C5tQ=T5Dzan+=(W72*BiFE5<>y^P@8(dYh$KwPpvM@#}`GQ>|7 zyRPOwUd+s=$PtuVZ!##9N1Si}(LVm22IV$&QM$#ocZ9DE!`cp-n8LNWUqIt{ALf1l zK|jt1aVa+iWEiVOF02nR+fRsfm?6ZugD$JOhY-vkHl|8ksl@HNH(gX1*#>*^f)Uz% z{mh$C<;U!F5nHT;ZSUr_Egu9#K*ihTe#24)9{6%@hbvszl8V1o(eIB}0#3l}`O`$= zpGM5mvvcfBKJqu@NhiOSDA_cGeZQW2J?k-nWdyW2=6hgEZI}>c@U1`OUV@C{!!mlg zr{BDLjQ1P-JPIyJ@kmHCl({{#xD~q?%Ua?KE9d9q+bC3fu-#zFU_M;tGM7cz*tL}3 zwQMfIP-BwPaPOgDp4+2uNw?$@IIIR^0SZkjf&>5c@#g$k6iS}SI#uHef)}VS5dDh{ z|EoLDtBv#a%^}4b^7~F^e0kR;p^g_k= zP_#Gq@v&OsTwm3*$UOuvSDC3^7wauiey+?++!K=#8KiXYhLob}^JLfict^5lz1&`` zKUmc2W_s~;B6ynbu9|xA^~}N4hiC&7UlPZt^=_exueB*hh6Fw*Gze zwBGJt)Z4;~zOv1!pff^P!jC@?86Vkh9$OPu@GVa-fv?m2sk9-ISLVwP+WM{ZjAUQN&v6qX>G+QQTK97!i-R z70AF6Xh}#Ga6<{yhV%9gHHi4l_Q&y#$nM?xO&U~SAy?=nT0rzKvi%axe_$&G1h0I} zQiSV%la~K>WULSbvofODXSJfao;wB^aWkg_`u<_c*OOvVN`F8@fOZwrjA^(f0(JPLDZK?K!lwfqW7EV`+wH*==VlC z!4UnZ>UwCVMu0TRJjPvIekkg7emhDuP~>44(MLHd)6C`2Do@ep<|?fR-kuXHRA76S zy`t0}m%hiV&UJ;(ViDmCJ|Xvesoq0m+p9sbGeO_be{z(M6Oia0)x*71QAM}7?9Hoe zB#~B*>;wgJkCT#Z*df!hj=?;ar<;s@1hO^CH?qQ0DbZk{dK)_&)rC3qX%^3;B ztXC{0LAEe+pu1uRH@`c`pUn-s`Q1ueO|#`ve!9A66creCGp+nvYq4}cR(2edl$<*L zh5=06NPGNWu=o%B(ki6~#6v>j#K=`m#*5Au-jb)~*Z92mHgmN^hWRzQuV&9lOVBhTJWFg({sQ^_XNnx;Z|`FH7o4dc8D`WAJX z^vJ+UkEO5We}uwLk($^e1A9MA=*p$q{4R4s;lx2xtF3Bkt!p%NtD-{&OyBHjlzGD^ zcgb|K;>{r!ZUi8ClHzW3lIazMab17P)Ub;@S$4DJ^4s<|;;*-}yA?c?$0mQm!Qil} zX})_L+15khBx}@3`S7aA!)mfXb2&q%eu~dzO=K5a(m!M+k{yl$C-e0?vVTd8^g-ZX z*j17}mpJ8 ztTKQ6e9-$9jA%j*p;4amyRjk#9NRh%>Az`vG@#1PU-jUFyKL!B(g~fGgaQ9-#q*kZ&{Ysl*6CG5GojkvZ z+5d)PX>7MSPSgrf;H$cc8`y4&dDAY2qCko)LS;T0Pj-^$)tROP{G=C@*DVX;eY=xI z%38^Gdr}32OK}Ke$nH3}DG|Fdp__s(EBaTeOpEDItZ?e#d5Xezl z#{p~de-Ztk6#feefBG|)D;6ehN7|1;O1PtEe5>_O`dP1il#}bEbzvG2%H72)szAg`7qO!3eC>gf&5+79y3S>9dYh>e5Hp{ipvKw+;+R2ttrsCx*Q`Pa?uzV{LN1jKjA%8RqgOQ zkA(MruV(WXmRqj1cmu3b;0({1Wy9OAI>w$?4l1WA`pvQe5>PLqVxXvaM`+q>Gk@A!2Jb22H@7wr$7 zB4BUMIXw_wYt7N(|MCuY%|-Z) z_~6kR9NC6$@7Kxx`Gi zBZpvn6x%oBp|`By9mNReRZhhF?QmB?Isp2b*#FZ%PxLp0{}?g1xpnRt^6#JitL$;& z@grx1W{7O)-KN;Azi1hWuA9|P5=akhNF=!3cTHJuX2$qG-M81BqUBm-B2sE3oIDBdBsk^RVxTjZ3i-H#krgW}lFL84A z_+=#Pyl|flhcu1DAx`tp`q%@P>?xq@5yWb|qSx&Ek}9hv?3zR=?va;=a=L6YA- zog3SUOh9|_!S6W!ja1S>*cQ~83ttZYZyf^c1!8bsp$$DAjrIDA4v`0Sd0@NjlO}_? z5F+)MxKg<%SZS;2C{Bg}Qz2Jk(VWI6gY_n3gB?|vP&fYpK>g@d=RumB|5a|{XMY=&cl@JhN zXauCByFoxe8i}DpkdC2K7^RW!5|Hj@==hy6cHPgH-RpXufA$*QGds?G?tYy+I9{Uf zM<}G;6Y;9X_laG<+`^MOI@6y%Lob@AThp z2>2|D-I+ASxg}+feZ_9zYfeA4XtO4PVe%imia{0&h246y_{Xz<>ZJ6A|FPWX3pB3# z+phAW(ut_Ck>r(RD^4MjwB(0{HUkbe1=a<5I!39K7#@eU-wnXrll`1*TfB%ZCyx_y zS)b*52~@0NHO*Fo;5w=ZvAKB)!+v|TB3a$!FAZ#qt$Sb!3U_e0`R zX_{TFJ{C+cnD{M`MU@!SA&eHvL{l8KLqdBYH^(Rq9{}wuil+y%NuW{Pz3r{^)vvOI z8bE1S<{p0#83X8YE0TG0@W-=%5bllw*!<5N^dIm45()tytS2~BcKAM(W`meUc&+ib zq1yD&hr*g95Ig|Vq^)EIJfOVyS}Zrb9yPUk{@IhI6bjcEatL#ZK6+p&Lt(avdnds{ zXIRwOwbhtmDu6)stfC*yx5wh;rr%KUxk(b*B8&}iD0%=?Tjg=y@8t;JVhSEeLAz0v z?Q}{k*J&h5Vs!f1m@_a9C*!fSvd`p!il<*WWH-JF!Q28V{n-i$IbDDCs zleKQCLHl}Qcb}jl<<NGAA_I?#FN&`-8lyqrD!9Wce3o}~I z1xMjzIk{E>RmP=!ZO}KIb14w|{+_kC+$4S-CR+-WGFqScc(?ELZP9$&d$9B5Yh1;+ z<~q02uCYv&2LDAnEl6Ir<1H@BnRmo|JXAjEpWx$&=E*wS44sGQzBM@5)}d+5$*Qix zd&dsgyrW5jxKYCT5&<{anN>e1HU$Ma>Y@(saX&D7!YZ1qVCC_u5nR3%NJ!Pc{F6F? zR%9B$EdE94d~qP}+C=8C&gd8Zj{yARe{g?x?>o9VmhQmz_w1x-WRYBF!vGT`Fq_Sr zs68AJ5!7`_=Yt@JUf&n7I*f-~gqzdJ-$4~I(&hna5c@b-oDw<~1!q)JC!wcWOXMUG3DRM&8VR@$PvMRaKTp7dTmlSm>v#^JIx9yxQe9;qVbrRfEy(oM;{T7sQ? zQd{}ldZq#O__g_6p=jqSN5xz5+XMt*Z?|bPTGG%(@4aC74aeA9Q|)J?E*@|69_Nyq2|yFFbE*# zM?*R+XY-Pgl7+EB4w0%O5SAgDjhC;Yr*reS>W>F7t1&wXxsBa=@DEZHwQ`=#v-#!R zzslkrJI!o}*B$iu-iG&G&0KnX{J3tNckJT|iDF4pCj8-un|M9uC9C%NGPXxgocE9QfG@F-tI7_h`Ml z4ID2T@=<;@z-7)d@>M|n@KC3nhpkNVU58H3o&h&6y}^PhMJU2h z5(d^6HgkfDV!c7EPC@bETpewp1EtTE(^&Wo=!%9*>X8iqOTIzoU zHh;cc;6Y{@>utkK|7H<>+DQ_muk^eL$LP04-tl`5s0SCb%P!e1l~3;Vk~7FKHT9uU$>_yP1|wr-K}S-O z++QQUa~!a?R5=&^kho&xjb5&+P|m+q9mNZSBbbk4d;H(3nB<9GFLLZBg3fD>R+pu> ztk8w5YtGY?BM8j2XqepiS`^Mz8x1ckzKZdeXU`0chcL7_YgN@+ql>`UJ3-MsJ*PF`}h0ZS2>n@1EM!r|tdVRu~o=I9Co z!moD^ga;kYt;d-D(1VmljP$nd22so9XvVuf4)lyfd&%K5@czlz05-jL@;% zFo}ZluPj-M5>BpOqalRI<@1-Z)h^vpR#DF57!fA?JqzIQ9*DhgjXnOLNyQ7WeEE=lX)ijnPtjl53!m z=-(d{(TxA>CW=$w)n~eeh+B8m$WM|v#M`BocnCWi?{LkW7bz$!a7TVyxihvTvMotO zuDIaC^isvdk!vB`6FF4iG@GT2p8?r|M&x$l%iwYmLEN|9{4O9cXnt)^RK7Fvq)`*Y zWEe7E_4$ZoVPD6(@91Qnc))7HLt}3*OoKN#ICIb}P6YKN{7cEloR_xx8HWy9g79hQ z{$;zBmqaz1IO)TKqtq@M(oJMp2~E`}F=%Q$@;t&thYgV7(a}dP;{<5I4{VLCrEUhv zTuwA4i$2L$DhmiyV643w7$cWG^UBqrG8~?sF77zDXK(oFGh?n_0w*Vh&rNCWB`!aC zD<5I))-GRdTgWF$&${p@FH*Hk_tX~G)}T-L$=)?kQ&a1{wvh_70-0k<9n-*wRa0Y zbBaBb*GxP(yy1blmHxT*kGg@bm_MgG2q33B5D)RM?0;dz8d1EmOGJz}KdPu3Td9N` zB|;a(ZjI~)C4!nPg=WrQXdkb3(mgx9M6!Ky??~F^X>kN4a==4rKT{gL?LQ_wNVsqR zc;C~}RD)NaVrJgCZrf$x==4C~w8rfjujcNk;(DE-|LUi0^%WQXihJ%lW~R&0Cs}oK z&e&8FP;d8($O$5?JvQ_)jyLl+PFHAyOId8yco}wUNa)Es##my%tA0eG+$7h-uTN}?sj%idc z+0;r6TAdYzw07grT(cQ>$T4sVh2Jix}r9!S8T zc>kR*Q??8#01J1rw46RAnB;4x*i$we-1jJU37i`=Av$cF^$|PRuL<&!*hMU9$_> zuFh7}+P+-ou-*C)`hZl-Yt zr(Ja(HoG*=TPWij!v8Ywl)v~jg&P(qe@?j1+dfr{wdHhNeaV2I!p$Kf40FpzG?kAv zjZf%wYe1{NP;LWxAzGl4g4k$0Am4|5pkj=Y_7;2IaB8dU5-nLZ_$W2$mA5pOz1`_`d9_tk?F56~cfkQc3PssV3zauaLTJmZ$ho&R)t*Lq}-^8fq%0IbHj ze`)7+Q~uG;>(UvftNr%)q6y;c!_|YLoKLUkY3QRs6Yu-$v<3W=mE<#Ie2gpC-2L@4 zY}EsaBWtGKhVWk>bNl`#;Ck@KtBIZ^Y5F#+sU8NPWZLoRs)jc7?PJC$JuvsgQ`qPB zcC65;kcO4o7hH8-7}iVH6im3TeSjWqvlNb9e;-8XbbS0kBS@B$R0F`mt@ZU3X5+QV z-)gtsmV5vauY!(P%Az+W>KzqBp;IlHX8xY%LZ?F-V??xu0BgC8b@9(24S5+hE%QJ+ z%5$S)bEPQCef!1(`A+2*s?+nxro~2xvMq~jXS_1#qJNgw&vMkh#+&+{#iHio*rx$2 zWTQMhBkX?MD|nzYQ41{xqU}gQvB4WO-hY(Wgo8fo(_)zTO4(^c|J#6g2+$LS=vl=K zkB|vByh-QS4ZV>!53%^rWHaZl+<{;}M|M+Vf6dd9zdO_Ez?+UPx_!9KaD=$VT{dB6 zUK8(toZFCsRLUDi3Dm9iR}U_YD1bT45})c*tVMh;vz6m9Jg?n#7x8vE+I8Tdzxs9+ zU0;&OueU87%n^A9X1|6^T$~Z(qr-xzBTu$Z?ct^c8qy>ME zYng$7aV;M(gk1j~*CMh{EC7Zl$f`*{c?vpOr5{vzO9N{&kBGZ}r+v8-zB0(L@XZze z<-m3hIRYWL2h8zcUvWyH#ipFOWdK&?6fR}Ow}uN3_j$|l0ICzD&hMH}A|59b=# z=|2=YZScR{ngtKhlzv|mRF9(l!FF(ss!>H=G?5F|1`UBTc1fo5<+?Z<=a_#=ppHrj zi1tttPpZ4qfxlf}>80C0&FyyTyto>_?$T9Fhs)2&M~_A#UNWDKuzQUtG z>`KaFOg7_PLL$)yFM!uZnhiOvX0h;@j&Y{Wh`3IL%28cPM&Ot!AdB-XlI{P+GyStYb{AAp9@F41NqNAhrGtF&q-Jj+Qc58^=205sx=N9lkAvQzD?1TYLw=9(zxfOmX;pudl-Kzun>CcVmp)m+gly#x=TMpKa{!yxN z;c_8)*L4c`$Y4M?nc4~&VIg@)JMjv~_qGE)d9%O-FAzTysp}}uA>(J-<=k#7WE*yh z5pC-+aO-ip)ohORNOxi#s2iR5qvg5`#O1HakZ+3e>i>DV!20zmEB=^VqgVoM;Q8^9 zc-?>f$nIH@9rXpp0mNw&{1Qvs=j(0xH)(|Q-lPd}Tw+Bnsc#dKFObe}NPUshmaBGq z&qcD=)NqfcEA0g4o8dcfqYYIORhl8`ZaEV<<0Y25>#ZAL(FoW4@L&9#}uz4P)x?-l*Kf349Ipty{IGs94? zTyg)eXFpai{{GLMGJzV81$uRXCdBZj z-AqBTxcply@u*p*dShluEc&_T#!+6Q)aZF&& zf&&)g3H(^$NPY%L**5FIIe!`LXVo|4@Um;U=PpeAMVLSfdj0jy^o~f_XR{^8)FU>u z=X{cftn<MLBc+VSjicO;^)6~PS z3ZBw-7lG^f-@nB5^3|>Rrs(YRj-33BK=}p1Q*%nO^WXi&E-H!;y%5cKy5118r~9vp zTZqvQXqS8Ay3wa(I;QDqBMa~7m~u@?1#9izccL@L&ii2a_JFs>OuhBcREUVcCBHyo zD14vEOlR@c0`EA++`_9C<9yl`%^b`7t2*svw@L?#jVcL`cd;CjOfKp`b;88&YbH(!CRqM~u@`g(-MSJa!W* z`g=JjW^*7o@o(jYG=H(^A9U2?kvEe~1Q480=th4<(G2UD0i*jWw{c$yb9JFB zF(*BeN$;G#`GXw^EOSy#=Hd!frBw}f!g(KjuRw|>P!0vGij}uwzZ=VRT#d%>0V7;8 ze8k{^7sb9r5h>=kXB76=roHBJYO)t+v%h%s(y5)fx2%r2vEr5yL}1v;u(R=vsJ30I z9Z>y(57B??vg{M^#H(+9A7uUym%@_-phCx)Vd+G>((MfEFy#Ss zC3-+my~Bw6G;`4Fwj!~(Ri?I-r&XnP+3RTmlR!}r@gXZ+Xd~jIMq1Z0PGdAA>l4ymN3n%oe)gsap{k@b`wut6ut45t2 z@r73NH-{^9d{&;Ej?}osvOln)urXOpov)krs#j0ZK|2V%Mh%0l-)l7UB`M#1ukxjg zl1;!RkhPgxkin+|gXFskv$n9~HSC$-=2phvR^)>F6efAICh?xT`u`C7>(4h=1zi(R z{`&Y|a{ia32qe{`#<`Es5;tLWx7Yg37K`B8pg=JezEbMlw8P4`7J$4h5=S1(*o-Oq zw>L~YSnqBTFR$$E^RYv%f)E*di}H_LUYBUHjllTWp67b)TOEvi@H!|n8O=Lc>T%7q zw99E7o}N)@AIGdz)GpTzO~vO{CVTmeQ4$)R5D0ZuWjg%6Kv{CFp3rzyR)DHn6nzUV zr04IQ@3PKFlfRyjPkAm8Gzvf=Q^y@TelLwbPds!fzGI!X4^&LOeOF}D-lI${$<5cg z&x-ekTKqA(GW*BJpDE^~f+zLDlrhSahGz*$S=wNoWenP|=*Z`(OEIrAvzMt$Y;2yZ zjzSz8jtzHr`{oj}$NtV^VZI=@+~4obV0_FCXweF#LPH?*k1W+YL@;L+5Ycj<_!n0`FPloc~+D zfBKNWnRvmy@HUWx@1q2FN`ms)f)`1pv2efkhY+vcuPwy#=DbPb=3VnfC#L!}jEjCD zuhLum`Zm#afXCp#$21wT#nCd2qkhQi*N5dWO%XaU94rjX3wRCZesxr8QW{^8GSh-< z=VPLgHAV0xn3JPGOgn%6PG@6ZglCPn%yqI!CH~#ZP0kRu6IArADn_si^S78i&_fdD zY&S%7t{sY?0)!Q=aisqjVa&Iiwccqy9Hwm0oq-}!UXjm6EoJDrq;KN2bq8tF5}6nj z%hk-6NtN9Rs~e+}8+aPvix2X8L~GQbM1&(^iRxsD=%Xgwaj`djV6Ug)TY-scnYFF$ z6MgY2Fn3}>wM6`DNlf*ZJx*V(pf5pL>#tJkfafcIrrLl{oPt>+uz$66R{KV2+csSq zoLtaV^9A?cp^~2*kUpkyoZYwQ*&P9049po=+fhg6`9A)~F(q9Gt`o0YTB;$hcj&q0 z>no2wT6AZ~Tb5^El@!Mh<$1F6zJ|JtR_o#Gx>dG`gRDAsR=EN;ROwP@{%kIqV$F#z zas=YUQ!heIQ@jax(ZCE3XAQ!@qLLTU=C@vPTbTF~iNZvSqmN6z91F&mq7$cSI!tbE z>o;f5j-7fm!^z?B*UE_N1_=*5cR8gFZw^UjIVwap4BH}BLULmvEsc9;^s%bY@P=s4 z%fEQ|_8R8QEe`G9fBui%nGpv^;u=?haW2PyX=jMSMacz@>}3^Pe`0~sw#;wZS5!v& zuItUa^N3gZ=NrGJfNnPtnM51lhDnw~EX$(8cq9%t>f@fU&`orfxEx6c*IfWgxm;j= zz-nV-60y76-cxOpJu9oy#dFWd)HXIXp9^};K-4NhSt7`sZAkxca7sFWmAi-hjKpE@ zBm9A&t66v9Ym?LZr_A;Tv2KNG&eT-1*xg-m6+&wx{X?_$RJKyhfMnv zlOroBwrsr?cD{^cnPHsMi#Hm3szgxtkM_*MM@A}>B3kocz|NE!8%ka|3=`bG>ad;l zf}For>9LBohfz%S7rsZIa829|Qi`)hN%3n~tV9m|Z_jYxv=*`^IV1-Rtrr*a#BR&3 zpB!lne=DpXmLmD3pkJi`v!cgjgFMfbUv$7}hRN8bf&Y?UX4I|lV|M1oh)m+mJ^~uU zUKTZqDLxhgXbMTA68lJ(K?({Lv1F7&(H%}rn-OpCw+AH!Y$Yxq&)$eFstz((FItl3 zmt@PA8k>f#j*Z^+8p3|R^NNwzl5dRI0LrSMN~J!#AzCZ0lt*HeubW`TR0NF7Q7u%w zsfo|UeaDDUozw@NOH_YZ!eKr&R!FS-wkwb~>JW=%c^y(er!10p^cJsirNt-|%~%K)wcz6t zPp$W7M_$M8x`()N(q0k%F~!B-c>Eg;FE6hn<|Psde~ z?@Y7dvb*9h# z>EZDp^ee1NCBFLG3jb}7|9bUR88H6+H+9O~_;FX-Ub=>zfv*QS#A}Q%7vJQ)qYkPN z`n(|m`TV9YD1hP%#i=XeM$ZtZ?2D+xNL2x^{m~Kjr@(wx_4b6mOEZFtcVrx0K9DyO z)1Y2O&-6VU{M?FaI|B7pYB3fB30$Qoc?tBNyZqO?_ENPi5 zeZp2trQHe34F>`j)=_(mY)r=bL&ht2m80n-LMHN*ZP`4Ib?qd%Fn`)P90nk5Q)Cw} z{Ouh6c=dn~_(4&tM?+Wt%PL~h3WV?vQ8QFSi*30Fx1-j&!#lomC4{A@JJK$9hffaQ z&B14^AJ>IdutQgNF}C)yVUdk#UwX1>iUdlQV|2&6QmWTWN=!pKf^H5z#SX=lk?dw0 z3hmh=nH!x{quUag7n!Iu5mjxllV}TS!=;NQKWlzZsXNmw*VEH;cfF=ctg^CFTX3Mi zza_ybD12^CPq|31WY1As4&&Y^T@btLyAJH~Ldb5@x80H%<@K{dRJGi64| zskF3A#FO5QFP)TepyG zwJkwcoKI&xk!gz;kNaF?DNZL&ZSzQ%WJ*w7NLci8N*g0Zy$<9V5bhUV2bPmv4T;gD z)kNO{WqdEmW@(bfIr`9iuMdv<$M|qas^=c?C3k%5AETl(Qhk-Xn~=;${;_XD{wspd z5^Sh`KnJK!wSf=Ooy+A}z+QOVI=#N|U-8jj`uJN`+zYXQ&$(R2e6N|Lv<`V3TG?}% z{63GR=;KcweXK}ccSRW}vR3vyW@BSZ7CLr0?3-KUi`dgGHCZ00I|h*($ITd1Fdq1& zf9WVq1F0EXb144v0kuiJNz9+>$p`XgOG4hU|?YKK)(0B zyb;*ds{$6z#b!ZgARfn54x>ZX@2_R-`CCjkw%D&m9x}e?WI#|*NJi3y>5ec6omkA^ z`vX0U0%|OMP2zlMkW~Wb;)R%BI{)oo>1Kw&MWN%@GEig71>9CQ0VpdEbkl%FsDpU5 zrywUK=7TU{HdT7Lex+(ayK-d?#c5^D$*b>46hQi`zZVzqp~eaX@4A*7PK)=Hl=K?N zT&0e`RIwUg8k4I{OY;1QQK*shgo5*9HOYE|CuZHDH@83`t;91v2XBTRmQGq|gFoKE zZgx;hSbFmZpJ%%yDIUi(U7A@8fT51_Lv~CU85hp#(Xn4mee`_}QH|`zt*Weg)pAYp zRf|8v?S;-Kp)FU*WqrXZJlf2&(mPk|{p5i$vlz#-{jEdi9tS@7jvIcpcW9rk8XJEu zj7yCQjIjD72DMu*ij%QwE7HxEu*|CPP~Q6XmT8=Lu&YaxF!qYW&2*;6C?>f?snst2 z1xgVJ@gX$5e(d;Cic-IVSM@?-VYyYMnhZs{t450@ZMd|HaK!xUGisRUzx`A6-%*1PB|sF#V<%UP8Ddi+iYle8 z3TW5aUsk-Kw|eZJdL5E4C3A=FhQ?rjrJdnfq$3+U`%~ew#upJVt~&-3J@-vaavO01 z7~Nj#jjgash<#C_(W59rH7+uVh#K7>NjONRBAFor3Lj@bWv!W@pP)<&wzqAqLP*3( zxfJe8MJ+tm8~;>MsMr2_;#7MbXyJ<8yAzx$0d@6wsd#RM#$Y16^8S9X5of92ch9eM zpq}hyptSU1oLq`nOU9d9*X2B+^s4ufTix>V@;)zj`6AsDxll-A`oE~VpD2)rf^X=% z?!O$_x$GTRlm&fC`}f%FU(`KF;s(k z0eK?f@Jz#yK8_u`8z~faC?u<@A4_afEZjF3-R}0S`IS}?22fGrGOG$C#t+}7IBGNA z1genzW>s0gJ#=J5MdoAGdX40f$UFAVnitc}?^9-G!t_68mBL=DsNv+%ELcQ;@ihNJjfy1dVN(zR<+L;3out%M(YdyG$*2kWSTUdy zpFuorrXu@y-utKdbFT#+g&~I@a&EZx`v_4$=!3R3Q`-B)P=AjZs!P|fqCvTwJ!_xd zGRsmWp;u(X+;rPFD@E=`F)P*GCr>NKF{4s{b9HgTd<$`!D zvrG)YwsX)zD*htB^zS3Vxa_qLfhkkU@EyDwS--X9c`=B4=>Y+o<;UfBZx7V(u_E&% zdSD3YZxjBu_Wx9fBmtoM*DiPJ{ztTZ!JW|^#e2VhfL3`nKOU;(7W8brAV*yOz2lsD zI;o@+t5r_s#VIJ~r!o$fRI#TlWG460F606{kFgGVu}rZR`tm4;pLlvC!S4%U;a z`(FF~XwJYM_PiszeS40}^&2N|m!_(!5s^gHM57=opvoK_bH?s{*Wby~KVG3Cp$c+) zdZgp{pX~APKi`6{xP|>y4lZu~mhcWtD zuETD9m69?5Vn_`7kn!}mr>wj@N)`pU6yjG)n`)9E1#)(e3ouSi`RbF!-k@XD~d^a7PFxDNj;@#);`2t5!_En#pvimH@DoSGvd9Ck2S~7hw$z#Q5F??gC;y6=hi0VBF zFbp-9S2Y4aWL)|Kw2-JX!PQHcPzKF}+}8Y?fc>)U;2c`#6fH5&JqHO5U?ahll$-w$ zp#PDYSsK|Sa=46hg<1s3{MRpwl=K7^Q9AI0j5!1SAYGFF>o=i|63~Zw-LwR;PuVl^ z-2i%EXiR8eE%$)by>vjjXS_zab%WY-DZv3Dl9Jo1=Et6=0A)05WY{~_%XzUUSvBmJ|BK(ih&0TV)HTQ@|1uI}g}W6S_Edh!2? zF?;YH2t-X#)~Fo@y_X4@?QK${pWA3omvDO-WII!oBV!e?nqJ_c>!-{rS?X`pPE)Tr zSeAI5l&5b%G`0LPyRj03y6WRgwa0pI#%K-o^A(a49_Bu6oT@2uc^r_bO!HRr9l0Ac z!`~)a=*q#ZZ*EcFToCg%F}DV7njszb_vWQiZ_k_^bgqZ=$~>l{3vLB-<%!HbJy{bwY$Poh3xXY{N{7Ddu@*Eq- z%22^jct@P(#g_-b-2G9M+T+)fzDEY%q*E~MsurcM$K!C5ukoEUqJfiwC#psl<1sh8 z9o)JVsuMIM8L3uPBOLTNo*Z7gkAS&SvFOFcbz|GE6g0KerYC$g2vn1zpCyN5Om@cD zl=k%x5U^&0Rneez1Rs&_0m0<&K)aZM&<9NuDPlpa^!*@Nu^U79Hfoiict(BicABKH zOCaCct?kIx+>uXxMtfQa%eBnJfo%BciBX|;f7%O(n5HJsOoH}K#LVV&Q|opoZ|tTn z$Z%h6gnU4*T-a0@R!a)^JjSMe7M_y!tiXdHFeWvU zuwW25AWc-9g(} zcAHQE+5sd_iJnp{V1uXsYs913pvSKCw}1jWp7~P8kq>G(1@8LDSI_S!YB(2sb3GzS zaPfLgJ4=4Hm>z$>y}kX)SfOs~%=?4wK*w+)5KPCh7(x36?(^YfR8^_2eOjiMBm0Co zZ?jTt$ZYzJQ^)U+@gm{_%BLS5@HTJ`4!8d$Tv9>;=g2huTn_y5wQqti2)dF*sj(eh zuAEk*Z>Q>s!`0WnsI%=1j@ZlkD2}o*XGYe_TbUV`qj9B&B~<#755D>x3GpPGUh$sp zZY<0>4&fECmIw8``o+E==CxwZXh^Hj?7xC0YDRlZsiIkUGNiS|{= z^U!F}uGu1;Uz_L*VW>0vO`hMRSocwzW*Yz^+FU0O<^xz%uLbj-mLoF}qcDxU%*^*3 zkh~DBI`4|Zfjsp`PA<-75T`7y{f$ZHqpjB25MjPYo@m)J*_n|E38ce?y8g~P-B%p; zCw*q;R88M^baeEEe}-MUvJ**^2N%5g*x2tn0rQKcrPsQ3-Z!=yiO#6qoHv5ECeB>o zAF*c=Sq(#vR|;ES?JUSNe|Eowzyu2l%D{3|Ip}Mx!`9-O*;dHqHM-tsIG_2?K5ZMf z^6YmBkJxx7T8+MaC7R1-F(p!6`l=;#h{Bc4;?r)9RB!F^Kx8Gvf*Kks=-pO@)1;RS4qGur)M$bK?YUVe+_7 z38CP1HqXEHjG;c4Q#b3;7qcfVU+RKKY2$Jxr<2GY%G6qVk*S219*rPlMoGFZ3hhn>rn zrKbI^4|cd+rWI7;G*9415eCIJ!!&CIdXh8lbK$QZn(MtxH_Buss$~!YyMRZYM?+0R z_`@*Iw6MjS1My_o-{~bBz0FZ7X~|H%Hhgm%&k790A2n+M``B`u23zqocCah9J07dA z4tNiqoy4q^3~CJAuRcDYO#fQc$!Ao2i-=w7^kC{X0k?HVH*V?%%b7# z^u_c)4*kMKO?P5Y%`(+m6A1$oeVRqo?oQ?NY|I-{Gtpza80@@nF?L<@pIc&rm`T*{ zAN6wp#r53&-brOimv7j6WpTwoMsL4lqf+0Mx7%R3P{G5N0F=4B?^6D7$+)#4M@01# zt;aF;eW^az+xsGh#>Rba+5kMJ4+AI&@j<#>cA~4x!iTWg3v~B#zM7brY$fA*E5apC zBAy|61K%q2-X6?b51D@Eb}yuxTjPfD`VhUo#$mD9KEFYM_RTH3Vl#^qkt49=`iV}j zz~bT}D1Ik)n3M*rdA&!>0`oV%Pe4l%|ip2mN8sLP4;MFYiym z>eeSGubaGE19i+*DiAu||L&PdqY1KScRySZ#B`S>*8PB|{z$uiD2D6{V4wV#Z1cgE z?LQ%if4b_=n&hp5uEG0-XC;rasQsBKB)zQh1bCYs`&Bp>Pj-tDM72!%GLTvYo~k=S z3mx`J^Q2M>aJ@or%MuJhOV*c_hq7MyO|aO$-ievtCe{aclFgUoA2X(3iAZK3D)tlC zEcTM*Yj*p%i`}B|ZsI@%KQ;>Hu zow4*c5Nwt6WOEFWs_RZIy35ARicxSS&*N%G#BH1zyBg$1Yo~yr-r+dKla->5&{(sY z7P~yhlo#&KaM@Fk&ZSKABghIZXC-t3=M$Y28-vNr`r=Vb(zsQ-S_x*{7CxZON;VNs z#}v98*;bsnqs=6q9jC7#3aV#TiaJBRy{`XmFm`z4lU2+e$=UaPpTLWyS@1#jZ-<7{F!=9F-Q6vUN$>{VwL~7EeaHUfrim8$QD;;7+;tz8$X3k7+X}* z^SO+o9o04DjZe)7H}`e4$j-DkUz_0xYO@kLK&G+;RatH}uh({dk5C&dpd(A=6Jo*U370_Rx_j;}C201i{>yxw=o=aW{5h zs+H=;gV(YJR}S`ubZ$9V&0-94y)bb7wl7mL(rc)6>SosbL=vC3#QQM+jZV#uu5zVy zCTS)AY?-
^x{Sw8{qVHpn!~WUQsU8dqfIF5)R#A=Vd@hUP4TBs!VMdvV(AB5F%If^0}hoV`RL9Z+ppUZk??tG-`FCvY^K=i ztEE=2a$T#KpRr2h@98Hk)9OkR+&XnyuS^5WlBK=bZbgFapQ;mDKGN^0N!`8;q|wB( zn}m+-;eRO0Hb2cR8=oTFo{Kg6dU3k3Y6OnRm7j^+`!@Z$?8*UrGZ5BlwpP{2Hs=R$ zs%04bOTX(Z4x||sFV4&eqHjpZ**pL>OvV45+r*GD18>_~)#eNU1Y~kNYt6xR?OXsM zl@4fS@j6-6xmx*)ofvnT8Qa$1(L=~z#!>1Ew(6hs|eyAvoN2Pm9OK^*F0%h|5lLDI%>r)7-0+3p+6ccY1uMSs#* zL62S!Bj*=%oqkAIG$;^lHQFs!jm$|hQ5PXOBd?0Ra1s(Y)Crf2cC_50;A*DT>#6w< z#o(2vyd!AnALp`zqUZUrmJb^UXUHDg27KDuYHd`OM@59KQj=JlXT|IeVn5>)oNJGt zj&XzG#_-R_k(G}q)SXptRt6BVeH|#1Jn}byA6}_my#+suCw5vXD0NkcPAlO>^!4W1 z_IC|;(<>KOoqWv?oKR{-#c=<4m)o0_Zxy}$38tPb z&2WQFZRO$z<336s^IU)$ee^pV%!XAoDh8`WGm9R{`nQAyPJ)Xc3=ClI-eAtmQ=IRZ z+_jPSgS2)YF8}M){t@zFf#g*D?biWD@uA1@x^$9Cev3Kb>0HVqx`eGFvA0da-E|2} zaoa=rp26;GAKTctl#rh>>Tr8)VGnI|b1yE9WRXb)uZ&WrsyHQo88FTkVM0&DU?lO!NI{Y&}7bcu-jhSjLPb>n@|(x4xD$@8@KyZG)cpe^-)X7Y3YEl%pUx~aXqPUJGDp2iarbb4 zJa4!B#(bh%f?Ddy3#a+zA)VkbFB#rhW8poce%zAD3DKLDGV{sBT zh5N79WikiB>Y$n6TYOPjTgZy-3W4}u)E#V7n!Y6)1q{#9ixLr=gzF-PuxYJa{J;1^tw9O3 zve$+J{*QaU2cXMjTm8NXa2BRC7qZzgvWg0cX zZMJ%NlWT29{4NQXDut^}0kCA*)g~k5f=f#)ZWnB9ZC@wSv%Ij;->IAq8l4U3m9fiZ z(p%x%TB};G1nLt3QKLYj$Ju5*f@sTRZwibTA2B=b7^u1pxz>3cOKLiZUTYg2ELJDi zp5372qXto(P<{7g-OunKmQ1KX#px`Hg?i-3#|k0IP*Fed+td6Gyz5vF%)t!=Qbh!! zk-1D5Q47<#5!{1IfML4k*jy;*GVCW4U!)1N{YWvH$9lMJ<{X*KAS%E_KA)Rs-3@7c zzL_RM98atl#4fp8ec$7Ul6;zBOz{^wz%br7h_|*e>A$5EA+cGtwc>jvW%$9{3K7z% zO3NV+J-40IcCPmlr`IB#0XH;J5Bgz^jbfnvdO)aIQq*gsstH{^w_9iCWN%_H@$6)8v~vIsVnBkfp;tylinSicXUFsY zg%i~LhVh|_4j?{h0dP=n%rcwdk9>4zu{1B%tb%IG>79)>yT|bo@8a=xM-lxa+NQnK z-?IR2@$H1rYSw%k5JTP*WxN1Iy#bDj@twoIq?(f@#ME>! z?|mOKSEa1seQxJ{)1Fd?BDpeLWT_lLcZ|Y#PV2EPYtgBfOoHi@$i;~*%5yap@~YMx zA*!;ThY$C_HI1OKHbR$$Gcl0-Y~Nz~)kv{nDa*&BFDRv=8AwZ}dl#IrlubKT94 z+SJG|(lb}jGkd?D$yT6X^-i|rSk7|m&dv}#xSy_)Y3W%$ zneuP4&ozwPbz4&CO;_~3VRc6SD)?IOi~A_c1Gy2aqm_u>1q+u>+A6AMn3!Xbg@*{? zD=9xV?tz!nx3Mrzk%jM{Azy`=(YLa#oV*V76OPKA^YiK&wMoisU3`e`4k=4r^>qOb z%sgMpAOXd?wUi z-DPZStcTS+Wc+lv(^U~{h5BIB20Vf8aXR1ZYcm6b5NHXR1Wcpa*kypt&7qTbE7vSu zdl?dOwC*NQ<2Dzaw+nFO2>!DJEl3qxvs>qwU27Tqgl;g3GM#kR$#w8MFXM(;Jx4#z=V12|xT22g?t+ZVrZ{xzYW z7{DI7zhSU@oQFO9e)hB5gEobLRB$67K`T$&kgx2p);Za6mzG59osalicRXvk?81&XKCA-VO-9)XI1Tc1>4+kL)&g7_WqEmUZ~PG*9o;}$mt~sZDYEpVjex~?FdF8P z^!fR!C#wCAQsH|bcip~sPNab3XaUl5K_7qNJJ)ml(nEJvRH54ApashqJS`O=^0c%j z^We0*U)m=-P@p##FwA`!Tbb(t2Ipdt8{@Z`O~(0Ybj|6CT3DVX&i;m{ov7}!{%ncV z{V}E1#MV;J|HM=FSN~l_yX?(!pkVf9F6w%Vs(oCFk zk@38GwPQ(Jw9%QlSN`%V!WjsKD-MWN!Ro`=j;gg#P`2{|`zL$^+M_f#gD+e-*X-Rv z_EsfV;22*%KhXQh*C#SSH62Y2+bu7DsT9~jQPu7OIqkfM{$)U|73Gh+|%dwDS4Um@5Q68E{u z2=!CGstM{brFxzdCFFu`#=XJx!2V#f8=KizjGEp4A7k$wPxb%)kEeu4TF3|`WeXwM zDauGzvXz;2ija9i(GZeNC?R_v+etFAPRU-UGLC&X$8j9TIp_O0&DZ<=@qYb&|8zUI z9LITH*Y&tx`~LV9#;x4}8_k96vJ!9ML!n#F=!J^(l?gah{gdQ*B6%%Gu3vKg2bX{y+T7aO6c2?#*zUDDHw>NI?~Y`meo>;fnp z%P2IH7f7^zs09*!B2F!|mvV+1lspS5ApEnVkk&n|ge%CP($;~BO65E!K2GE1<>k>+ zU}|9QLe6@XU#CsIex*Zc-eqyW&abxG-2A-Mh~N(p zdIS%Pt~YsD@0W5e7M0D`bb)|`5-8? zndufMOOlh5m8A-Nv<= z1eDV<%AkgfUrJ3t4dY4@ZttSLe~(IIQ6W|lt60bLZ8YE+Frk!WYTn-my>okza3 zC#JJk!^e;Z$=J3U9E~C(j-cqm@kA_Tv~wBRwyBIr9V8T5$Kc4jIO{3Ox#P%nv3cLf z+oEk5f`-Qnl3yH~SCQE3beBS0?@p!KV?M;`V$Wge^8 z@2fEt9F(wTr5Z@t=Trfu9Gt>Si@sO~LSyX@CbGO>soViQrVfY*zzB+ozp)CAv_9(o zqBsb5f*OW6V*(q1jzLrh)nw{WSx{&lDFxY%(4ZysCHJe{Yx(*4g_at=pwb}axXeu$ zMu;c$Tv=jSxu3Avb{M|VV(GE9+NMp75BYr-hmJuSa4>FCi^TjfGO^-a9S#@GrjhR3 zQB|O;L8wC#BDXf$P#qKgXgAOVbQvgkUJgbubJF}qhU3aNOTT1)tiChpy5QsG^D$N4 z^T$|1+AUC7G6j5?-xyaV%wak_Nh&H|rjw{`)YvT5VU4FAgU|{qSvOa) zGRjxil^K=HF*P1aLKvnCBpSQ zCSGrOM>Gh*(bmfl*N)ezr>_$caCJp876Qmgds6Q0t$|-8EFJMTR75=VPs1LVLXl6R z(SA#4L`nx5jcCLtU|WMEL|ga7`9SG!LDRXv*Rt})En&NS`@3hzwLF9v*CUFF;P2O* z;I%~PViiwazXx3pP}C|a{ho$W8%ftx7nw!BNHw9PiH_n$mL>32Q{=u?1s)He~Bs zc_4mVGyB%JRi*VI^)Qzvch)lNyxld{_rC4+osKiP(C|D9J3n4mwFsw>%Mi-8_CqBO zVtq*S2@67Y{pN@Zrbhw&!ODO%wXusu@v5>+P<_R%^cW0ATcQ(g4OLn{*RvOmC9eRLZYc-Ht?fS-v!UxR4?vy`cS&z^+_#6)rchez$Y7l7%VJ zug}Qj5!~MLDftx*xJhqLyjzhv0#g8-H;TNzx!aQghMG|3HTg z5-z`?EZi3pKshzg*_mM`Oa+d3Qj$VW1oWbhLkR|h!0ik2i{hbq$A+Mg{H*M)rzrLT#tq( zOv`%}9K2d-!DnM6Z0H7RM4M*{otdpn292~mu{>%by(Y(Yiix2+BbO8+zFf5Df|2Eg&2`U!Q(0`^ zUF50RLU>&}2jj7?>@z0*rXYkB1p{xC4LFLdCg8TwaR7_Y zK56D_3~lhCw~7e)d)163C#ax9!&8@P8Dry`q=E=)`shJIz*9}28J+8Bt}y^JJ>)Z8 zl=qELa{K~Cc@|IV^um8{zCD!lZ z6-1&7A5Dt=j6TeZ&1|=hgIKyU9j4rl@3?CescOEUaSMXH$$j>KS8)u@E~99;zKb5r z$=awLE^`fR$}I4v$%!Y6UI5pX4qwVoaErFy?XH4N+B0&>=Zv!d8wr@M@CZD zgS}*Y)@CI)IRRRK9uy2u57UiSS%H0d4BC)a6RmYEYF(3fW~f2$g9hujmDCV89N!kj zh4QsLzm+C>hT8o4F##S^Ah!Vyjk4p*T0SNZ=%GbL#BSfMvLJn`-!D)x+HDbys*y@Z zc`#quR6?Xy-G@k-)}O)41)CNj$|0W$EGXZeSl^DpI;>h|-qv1K#0JF`=S1;A*RulQ z&`uohI+5i2!MB`po7JYJ!#@pFOxg-uLxq7#eGV)`XeM+#Z(j~U>@iA1aVuKvz8*tG z;vG?zJ>qj*CqxG+0aNTJrt0PWTQN1K5uWGkTq%uB_~M|@8aN@qRkDB2#Ua4n6ELDiQnb)50G_N~nKe>s6)i*FMQbU^LGoo}%3Eq= zm@Mm7m7-&?N9lLMw^GWzPE&6-MM>5vlS46@@p-k4q}OS^9P$cm!L4A!DZ%?6H2!p@+T1QJZX zlTY65#QCl>C&w+QSgbN#@tCk^d^Y9gmgYE7jKP&0m_jsGpz)9zI*u)};`jPtC^$(s zrONk)@B_8zG?>~TfX{46N*+C;kl2eXs75$5HnibZxeS+SYtjIzW`On zFdg)mNL8{WSR|t4Us=MS$ge~bc+(g%pfP`H*{l(5GQ9~;AOuo8CdQQPd@bZt)W{nu zONvqSx>k7wpLMAEg znSm<`C{w%zH2?vQO%V}<&=7)AL+ga^o(olu;NUvK9WxJ){tV8?X879?KnS z8`TWjJmZU9R=_Wy7EC+ayzWth_|??ug&&TR;5UG|^HR${Ex!_)ZfK}RQ4Yt(J z1Y$~*$|;N&GZh&Elw1ha`w*T0LHqj~DHHx}`*7$6TSfbkuV7_0|#r*6xU2G)fO}2w6tp|G!1-5}X z7n6Yk)1^`C#iL*nhqSL0ZgB7_FOL+MElhet>NxYMc;}XcsOfR-3TqH=WPNyNMV;yi zVLE)gy?EctjWr4UYNyzT^mE5hx|eQ44fQVEf=*M_vvg{x(Vwad;vxMJ8LG^BgF=?- zsH%gh9LTbq{I54XPcc&l(1ikYTf{b~bwUd2EHWQMRT43&a~elgk|!Zx+8>-rAbu6k zntC3pD-%yI4k+%X>KE-Oo-j!L)ShW<9J=y{_DNmS7{4FkPe3E40fuDR9R*qqDdNF= z@DYc(0Lr%9rav7`IMnrZNFr6!!E^t=w{_ODaNH*Sl zq!RsNlf3HjZSn?HU$Y8aLjD*FRjB;x*Ebk_OnvH|9#l&s zibqUINx^=)qiQNE!8)FqOIE}3{QBT}hVqH44Q6I$Q=u%%5sGr-!C+N7%eK=2M`tgp zpLHC!NjcTXc{DHD?@iY?m^)f)tqJxV_5|OtYTm$J$!%?21`OiGDZS_FEH4*bu=Dwy zQ=c_aM6hl7LN84S@cykGEvI5NOtb-V4tWtfq!z6bHDr-@lh!B$x|k>_rB4j4^}X&{ z;8_J~;{p<*&%w6Y{;yF2Z8jhZeRo*U2p|xR!2g)#;yV^y%%?K3Z6)tdh1Pd}$s4jE zp;ytOvPYRx+ z+LJUUL;0FoKJ|jQoNsN@-1^MpV^%_2?a(RZ(yCPNd7n4ArJsE!){iPomA0itx2119 zMIUj|R96qRxckjl%82PJu|avHM9sZ^j%~Q!_bGCJ18Jj}TSW7y*PHmjs_+l}N3WNB z-Q#<=$u<~kjEemj-XRBHm9ZVmWa5cBgGh{acvYUMF6(B228ETDit?eT7f#xw<#|KT zEvwJ;V56IJtLQ+EQo!$xSElcX6;|Jwq?WRKtH+T+{Rh@>?7+@+$H}-{qc76$dI^pr zVY#HrWB=7x)bjRau;B-Kiv7-B3;A{V+5^t%*E5wX9dPsg5AcO&W2vX|42U>$_OzYZ zUjFUWp`L;lWqkiu!Ml1E)cNGgd}y1Si@qOOejC;;t_o%InJtgi^L%H@-&3+z`l-WZ z`2A~@EgQIH%U;C*pWLFkLnYy3cP#_^T{)!gl{DTP1J$>R`&%Xz8THa9&{c-G<^V_? z=?dJvArNtZe<}ovh*J)HF9vfPJt;RHkWx>a@K1B;NnO>IpDL&KU(e#CG&+@TE#sj& z#+KIo%I-A;y4>8N0pf@(B>riT$72@@aZYbn&u=Nq!|19` zr%)wLU)fE|Q_lV?)J;o@5OFB9s*4z58$;PhBUEz5LnK)+*nmK-0~jrp zgGA;x#Bu`H)jNKZ+VG+FZ1z(ZLk|nI{xQ%0FkV$<&|N^OC%J6@W9kQhPXQMFV57gE zTYpB;H6vBxfV#Aeld1{LYFV{NdR9QPdJp%Vc>6@K;j?+M0?lmxbkpkd`4Rt!BdlfN zi$3TY6hqBM4m+pX)>$=j;5vth%4U=3V75_pQ2u&z0MS|H>!3&kCE*l%2Sst~kxQEM z#zq@H28&QI@iRTYkZ1YWZD~w6kcg96&l~B_*TmLM4~$NOk)|tWPC%)BG%iT>z;zcC zAjO($Vb3xtp1>p_0?hnetoyaQ;VZA7W;HY@$$ueF7f2(b@6dDGoSC@W=~m>z@lsx} zo-*Og%(oixCSLEu7_r}3csPCC3O0rgE5 z>p~6;oP=(E3Ek9tx9_TCEr`wYi*GPv^Y_EeGPQ|xqSNeZWP?Wk#ox>*^+3q}xu5=0 z5B|{1?|&Xr=h+y%ihk_){{GMZ&=OF?l&b1(JuwOY?p`&?Y}LJBb&r4V;~Kb5xTCLT z3NqTxtZMexkwUBXQL}v zW0cjzlAr1-iqY~nA6R&-UerK7rEDdP;ZrEG)V_>OFcX4uCr=nOU?7B+arl{ef?!2O z0G~nyi{@3{^=Ll_llLOmUC(5{FxZ^T9GlKArvcP$T#T zK+XAi&wu0NQRRCIW`D~cC7E>`VAPYL4}5l7;C*z4h+V0Krov_M6!QE5N3*ab>YU*% zWAg}W^h6fv4IxO%X{AKeY$Sp6j8le%KQ3-vBg(9g52~yCY-=mhydvV>ai{VAaWR#K z4XNQ;uY4EdIGM(|)`d6OwIj22C>5xHc0!|bpYe_MuT3N2%w4i0-s_98<`7~{J#JuB z!#wY_cb6048w;ZJAwijB3$(ZCyfx)6t^ZCb00-UbhFs)BL{49O! zcb<96&{~RIN%#L&wg=O8@9iH&n`T&Gd$i;R_3&C1d3V2hTn}$~Q0;Sqxn|Vf#Iu*Vl*#`dva}+;n3=NP6mP z=t++5DDitbJeDif`X&#h;n1)MUZ4A)*B3nzox40|IJ_LcDIk?Ep43gXIU`}Yo;QZ= zwC2F2Kx(bPRx57P6QLr3SFy3~tj&q+*(ZFSnKvvud3qI`k6sO<-ZD45$q2jXe#&*^Pm`M40qLjw>Z{ZDnIcM z7O-jZ=uWpRG5%PNv_-Eed#tr0?!c3)=W*7-3WAH6_^=@Ok6oI!Ll! zoJ=~lserE4Jcmo?gjf!XDyXkQtt+kv;fX5AyDEAmmg_D3@XKx$q_yvzc7`tb`aW!7 zdwE1ntYt=>CQ3cSyUw93GJ^(RR$cZ&J2#L&ykMgCY$Z31zKK}NUyD?B&YPG?Rj^To zl0sSh@LG#G_T%Sj0=zfqj}3`OXK85?*}w+A`tei<6DFU@iN?pjRq3`Dhy#e~^Q4aGzRXsPpq~=c4#u`+DTu zFVSVJ0Z}H9m8NL_8-#y2$=Ig=89ZuUr0)8cj;*j6P*ywy&cC0>$18nKx%-X@qIZLP zskN*i>xeDlfP;M4iM&V+uZs;I4^CF~(X()z1jOf0ON$qoE9qu4=?Ifnq&5^;wKamr zO~-$hLW)wv^;tjj^YW@3!(m4wHZ{3q+p`k7W#@w)x)j$KfV#EQUBqTnO_^=mzJ{RD zLb=Px+H(zCT`FmDHP|4>2*Zaj-~_LvfZ1byqXR|a^7uCPBP4dqdud=6KWfg)tIYw? zXl9fM-(Os4u3+D+xe#L-Al8-EReq{5(Tg~dXV84G`=k823Ti8Q?TG(efe6km2DrG zmiMVyj7jIj4I=NU2L++VHO7lqnt8io0`VL!cdfm;y)a}V?<`Kl(Hgi;<}aO)MqK<@ zK<85HS>uwR>idjy*2+ZT28!Wi+ebXyr&e;E7omL0bA~+d7FGADq0oGwD!_>jo8NV{ zj%QFVKfX|a)6Ek0#Qv?--o?B7Wao=ai|A~f!gdqi(-NeoMAzqbC7f7IpRZmQN~nd%XA&*{Kdw@c<)+V|b9`xw}&; z{^mK6>DyP>d}gS@a(mKw2h-Z_*QUMfgZZ!{aJDJE2z@vU(v2k-Mmw%98{5BZK}Vo& z2$)y|<*uQT$RW_pN|}EDR9tdCZzXA$idfFe&7+xMDj+?9$eZZcM`A>h2Xy3}dM{)W z8r2sL|!@6NC(=^?Oe6h@H;abB)jvj9f36_#&B6XO89z;e1pfRTs zFjh@?gn~uoxyf3v&fbQyJOSp?{2KNH8nsf(fuN1Xpj%2kX)pNTW)nQ|EDHH(CuC#^ zD`|5a>{#N7z5(J_abg!HKs ztSKXxVJz&`Gqqe(fQ#Zql60d`c)+@iZI2R#AYxj(W~}tJSow@idSL4%b#E^oF zQW>UOZd#6lyAMV(n-gCwz3+LcFx|{D(Vx)IzXaohI}ezRoBA}2gQ4!(PWd3Fqc&W; zXU~;@Fvg1E0_9gg-mzJLFBJxd8zi!1#E&Wn87&LdK$ zWtZ+sd_tt{JI31yiuFD%YMcY(grv(2C-dHhtR;i=2l z4uy)bI)3&%fZ}W5IVW}ZKC0~4vzgbl1ogMG8h>WT1*tuP7B7_{=52H4f8U$>wV@FM zCYaKj&1Vnni}III(&6zjP;Pbn=4v&%c6}i8qf7Px+nqP|*TMKvNl}4JN-3!i@CkMWVJ~m4Mh27}gq|wL4lp)qF=~8c4Zs0EnAv`vuO|a?2QH7!~uz?cga1{*Jp(ozh)t~k(%rbeL2yVRD z%%G9}!lTp4oKJ*7yGlsy4W*yQDa8j63by*F@k<_?8p`o4Y=u&z#5+_(lc|>5BN{&F8*vqSuRgeCTAmdvgjd zJKk$y%9`S5$|e@1QOp~Z2BQsvmmXXU+auK>f5jZytA35O&iqs?s@rmv*ahFBhwu-`A0* zmm@Xvo9o(vXxgZ(f4KPI_CEc5f@0Y1n@`|6RRNm z+u$LntsiY1m8kfcT!8BdCwaM1_nC1Nc@ifRUSJ`J^*s+653^b5HkJSJomv2#7IXP|D@sXpD_z~qwKg)+(#SP0E znGz`vjlh6bE^5k6EvSDsE={ju*v~aCv;%J%Oi3#v3!^V{)K zdwW-YKL;eTdTgBk8u@=`f3*L*Nq9+E!c)rCmfGgTCz0PGooQH-CSP8UuR6@1D%U#u zle$3sja-~#H08sg#^Z)jTlII0jAuVjFp4*Xn5_ypR?Bf3YC>id&+sqnQ(a}a zuosih?0@0qQxvyA`HLe@B3}VH>81XZlX?$V;G4#)9@X-lq8#kKDIp{Dd=8P34G+l!^v@wSoVkO`PAYG0C9WKF!AO;{X$prAKobB`kl zZ)YmzQjuJB%vYwoNs!~=TdpUvYP_s&PJK-Dk^Jqv?dqrg$W67Bx@ZnlcpvoNhwaBH zd}{$tT%12zUjEN-{EmJ8p5oXNRd8|1xh&1Tng=Y_Zwobz){e}4HhQZ*wSKFFyU$>+ zyvy420eX4KPRF8w#Yd|y%<*i6iZ`dMjuAU7eQMRn`9<{>Vf#34x)xLx>N;58sl4mu z#o=~`u?p#34kAEKL-%^ZHDBVAu?C5Hjmv%gJ|9XOoF-Uc%<;S0&eyaD)GF>*hR9V4 z&te~KDjMfiI`f*l1b%QfFRV<{WAVQ?F#l!Xdtim|NKQXY*a^qNdZ~T~%a!Ntm1+#% z7`7Z8d{Ak_N#nyVn2F`0-v5L578{FFnUPf&T`ZfWSBOq_SYd}@xG4|M*feMFKpS zB%TIX!NnH)k6-vdz#066y7w1i&dS$1FZCfSm)5_^x=gjMOw1*JMDBSJJy#a9EVC}F zF7r%(oP(jO3h4@4c0A)=49hS?rDld`vXJ8nfh2SmZ$yHfL_-LZ`B~zk^z=~Xsf8~S z=JnTuyoi>5<5tycDGBYfp_+5uo>qazJV6_h4QYj^-9~afFqf_S!gG%W$`n9?#sj`Y z*{M>9iit9rP5syD*>|w2DpF$`R&gCby|5iAmIN__TSn@%luh%9Hjs zSmGLP&h(doMS+Iy;!inxkQ!Wk%9=}|n>%Q`-+f`*(Iq0Du#4qLQ6*%!>|#;}<;HNJ2@xSwc3yQe@ZZ14IJgPt>EMxvpf zLsk2~EnCEU+$w{-Gh#VCa^`~|r$Auo-4`I@Dnvgg&4UC6#5(l!dHtOMZj3DezFRwPjb;b!Rk1D6sP?y%3uo9)N}%> zot`&HusIwpp{b{=buxk%!cl(jqrvnu+U1f8f^nmNf1K1^rv}*z4S)h*MZ**f^V@dh z=A??|q+tXaNVzJ?ViIIATIN_ZZqJUd|J6y;#%qG(Dl;tMaTrAca$| zwE=6yjLt$N;Y*3g>#=-Ly5!&0IZ(G}JqFgFj=LX9*;Zf~>L7JN@2^Ty-`#sE~88`>q5_^15%Ewy<|lqpj~gbL&l7!mb#}zeR}*MSw^N zZGkrI+n=<5V>SJWVsH7t(Z1Md8o%N5)dh7YWv4YiJhtvA$8~)Bd8L38J@=u2B3vG6z|<0@R9>W zEpp=++hLfS`9SIX{VOleeMCTrr3bt8oF=O(D?hSI7aO=go{qdekbL$=eJYf^SE&Lr zr(=@l3nsqd@U8wrkr>#bS`bc3>(h99ZAwv!bH!a#;p|uOH#5|R9UoY?mStDQn1M^8 zj309T@s+AcR4RNd*N63OQF@k2-Kp@Yd*j2!9yyu7>|Ois`?H+xls#cw zDU)2B?UfX=wO;FI5^GKDXO>31c0D*dR#Sd(mRG2rF-joUzCbuzQG>D3=_h^K=|4^XR>R zcV03SS~P0?$Male1g4#J6_vcbs=tDPFr@B7+3oT9Cmd&V(H>`5%|CVg5yx7i2H$kq z18u`k%oopyzdl+mI@ud*kDzfJ3d_oaX<*}G#SJ4=`ZEK_N2DugXbIg8u}60jfVY^| z0lG6)>W|GO1ngD(R2F6%pV=g(X!MW|Dkx6(_xr|D%i6i<9fN;;$Ul4nU(ila#D38j zxETg^EZi;a(G7U7uF=N8x&o5jvrMH+&GS(vAB!yOLiXDKz3%J(Mvh>wZ9fo;TI_L7 z+Y60Yt55bq3EA}$hg^dhiWkdbwGHFlcBkIpiq9M2>^3o|?J6Z1g&_N4$QC2T?uou^ z_Ozlq^RJ0(UtG;MxOI=@V|dnzAdkzH&z9{xt_9EPG$@U%7}&{Dq2u{-dc-M-?Jc0Q z*ncSW?^*1iw#;k(7nibX0PVrY4|G!R*?nY*b-k=L`FghilAh}ya`=;w{Q19|{QLDE zsZ4%56x_3S?kg|<;W9D%e70fv@A;$g<;J^G#lG$xEivjJNUSld9X>p2Vo2)f>;qpb zvqh6PxL+&U+JBm3%4G0U`I_Ic$_gSnn6BoE*UPz)*>mGn&-vgIEHD4s&ouRdpRr{I z;N{~8uL+CV0;(*w)*`295)5_--t%?letBTw)PqBc(oR@ z`?~y;K2yoAFEQCS9|hVc*)PcEX?*l3y<08>(~Cy#yddyawFE@8$uY5b=1voi@y1Ch z1*S8C($^`o;JkkdpD_X@r9)gV{t8`-%6njhvG_-A;7=sCBlsTEiGzER&aSq{9F-c5 ziEX{eq~#qb{;wBweYnE+9$cI_c>o%D)O?v<_K=!mw%l^@Bsm_6y zKaA*0t*B(sAXt8Ly)=FrtJA@7o%ULxMLgqIldOZQo9OKO^%L1WXDZFv49 zAa7(ldH(WAxwxqji^JQ!_xJxj$^xHwaO_%o#=Xe8#~ZRU)l6PyYmOid4Vu0$tr?0zww_}@ThW7v%k!grfa{y@b542<4GPRsUCkG{TSTWy_p*$cKMb?MaJyl zbjV)|{J*bMU3VY90wsP(x7AK0HofkDvT<$ZUV#(BZuo-V+*cC@Whtx%%{coqbCmv$r|GG0`Mf@YL%hwY`|#ktmgWGkqe`zGo52a**_&8l?*yC?fFrP-;&oru1o4A z<4y+}z@G}sK8OLR@-D#mWD~?$x;V4P>#jU!fwa_Md6i#3Zh9?buzhTF4+iDlrt`-% zf)7$>CTPwjY@c52V*CXuyOn%@LJI2|r|7@-sqRuI%t{*4=aphzD zn=|5OS4(iFNB#qJ{tH8Aqjx^o=v;*P)BaGxO{x-ZT3-M)4BLDM`6z^wd4j%-R(wmP zgTIsY(Hju${_sBLa-E!z`=)%gd~p6&G}ory(lHB8q~yqF8)Z{>dr&;6k!1SwH#05( zEo=WT{`}edztKeP%EV7J*=?HgKMD;$ttoh)2sk}m?hTr^#~=wXAy^)=>p1RW1^=iN z%=vz~UDAztS&-7f?@vtaUCOszbFYlu6rd$|DKU!g^aK0x`C0;#xPXA#BClJXaXbx% zE~iNjOc?)2Y28(;F2!~OZ_x#(lD#aJ$J%+5Bli4-hb-#7V_Jblzi+bo`xEd=we8?9 z`+v@R?x$ZpZk@3EZw&qqyZ@ts!@&&ATN;lzhF5mV&kkn~<$bHV8qINFu>Oy`KP8bdMjaC&9=!?u50U;h><`+%j9SC{?N9W6uiP{HSN69{ zcR`pX{VhTrSc19NTn$}~qZSU=$s;U>vq$r2_8qz%b}Lc;j8;6;TsJL2Ox(zW?P} z%Z0i9V43(Ey8L{#-!?exdFC5fwrtEHSy}N|I}gJXe`gQ=``tgarOFnp_MXA zs_wb%wr27EvsyG#?fkAkrmrebEd`+JnkW7~+&^ADDpqZ7*EcXXOc|u%;$qj5su3!d zN&MHamoGY0wH+`~P05Ed`Fs%ic|z^O5}TJ5v+w zW}}*~*gRyh-KRjZ3pGyD70PXom{wBY);OImdpd_ zc(wL1A6)$WF}>gnYSqO|2Pt;~jDO{v+&%OP{W=XB=t%JP6Bhzx%x<%P^B+NVs-wGS zICSuj;C~-eswE%2ka1&55Y$n-=PG_8OzannliMDPKd^M+#D2h9c+e-(Y1bX=ll1bV zhs`Uy-eJaGy44nPel4J;+#JT4Z$O3aLbNsetLU8jpj>8cw%pKh2|l`zE2)()c_GCS z(E0E|!8p9xuuGcx>LNpl1E~0SI$Eti{^tNh#$l>2detMdJua*MmiH^kpW!&)n&Qdr zPw4NbKCH^8otXa4zGz0ior>T!?r&7F;LCU3O*om}5PrmsEBRM)&45W!6GZWUWt$rG zT*~{2LRSP=B_%}G;IZbtV0cd80ztPxV z8&b{SXZRJcyowz8=|W%4oc>p*ubOdxr!wHUulA&oI~<<%>yR=CAYS_F;GNdb`aJp! zdzG74_&I>Ju#;_C4;ndJu7f+~)!bDs#BT$79*}SQ!E!W<^IyQW2Sp@!7i9nFw%?I& zX6NGz=TBZylv)vb@gvjWTe(N~FZEj>-@{be><{gJV+tF!!0kA%crhwVy?$8(N-O*kQT&R{FHGnzCOVb16xLF9?drNOOY^X7L(ZnkITFBNp zj@{7Uw;)~X=a%==3>{3{$<6>TfiXHcDcp})e;0M;uKuzNdl&WVo4KcQF!uzA0nt*e0KEO?ml zgPUEs{C@utK#6`e-PmxHQ|x0mX4oF{mgrKBY1lGF7Y7==twk1{7n|ZvwHjGsRPtYswQBHl^6Vm+$70>b zN0O&~VOAZ9kk|tLShLzr;7yr7kLVWC5{}+IQ_YkZx;37kpH-{rBalP*DsGLt!Rj`=u~MebW|DK@VuV@zwBP!ozK>gzo|1<|BO)=plQ=>rNsQvpZWq2QmO@eZG)aEoeTGdW zX3VfY8GOW3ilWba-(~RI5`fl!H9!^SK71SkA3fnVI-=M{JNK2GjYglFMyAWPppofH zXbBWEW=?x~$~y`ak|&o!T(~zSQg-9r4(j6IlYqOHa^2X}o8K17 z7bf-ZJUhDVyIj2Gd*M2RfUEiOKzxdU^N;?qqRC#T%|Yh3nHXA zN|-&=ZLC^f9->VHrwEVsEGjVSl=0&|mmaLytH%Pt9+d|mtCimR&;$~)P%5A8PssRop*oKjlTdgO)XBW;G0Ae z)k_*y)?28%(^=F*l~cI#V|QA7%kWw~*q!$2Ldh33T`mUFU_-lT9V`Ao(w%DsyVHA< zTX0+^_a=8P1%vI+DUBiVDTy9Yx%lhD}F(` z$s0%K30CVx+^Yjuaq`nGSnlN-p~26J2uWz#o+r+7XJOXGR4yG4QnNsKpf6qUDkmlH9USBNq zu>K$rJ=Y*ADMJun6>Y8Zq(PPnf<_1nKxdN$^M-IJR%@(}xD;QCH-?tItDSKm*e!A1 zfL&@(1mi1BCG+?iyV)2a;4!)>+al?;ctyr2VA3C97|Cs zhz=TJr$)YedwA(sNqFIS>*4%od{8aF=CEfmIxsuR9^5O44hc9vI;25y$&oeG_8N7nH zqlgen9tz5I4QKLWi4NZNGTmg%8X-Z$+OHOUdfB>|;Yps)*~XvN)i+pjcB>~{Gq?KzwIw(#9ZqYyK5_2^n@(LIOHtYLHn^r(0RxG} zJ>pG^U}A~^IG(Lvu5J9-fM+KQiA=EGOH-J^au32c*8S4tA*+qqhpD_UvF;Y>jv=qd zkmrL)g6ktc)~J;|$Lo9&Ua8{~nnGPXERV0%Th@7hd@|i>hil8XKw%VfuHWRc<7+P- zw^=S;$bq)V988TM4vK_K%pZ+J4^sJqg`@sHz{=7H_C%jKjT8-Rg8L9h3NkEFs`V)C#eUQVEC5Y=@^f0$P(9hFGeAP?EZ%4OpdK>SR;W)ZFO(hkp9 z;n>(wOGk*i%q8m{Ygd+aA7T;h=9qLeY{SW{*Qi3&2He6#2XOZ=f6H-)0MbiUe7yZ-Xt{G|}8a za8$apE*P7=%!03~PydopN8MK6w^?BH{w&ouY2CXLy8N8#NN39p_Due8q~GM3Yc;7q z%s^-fMEu-tmml{@C)sV#&^SxyG<4-?Ii@@}}uilzdAQw76W6jn$k= zcThAGK4?El)t-3N#THpWQKD$F*t}472Yjq!Lfh+`Dd$G8^$8e~yydx1c+~BQd(ejO zWDlswIty>YvmcaY;G;%AV7c)qUx{HC2^8KR?QQ}``kSnv@z+8++$HeWs-Cyp8g-EX z9=Xoj+oB+FaQPs(xZsk|m)nM)?}#teTNa><+rk^+k#V7CHkL%&0}>?X1RAbgOP_A& z!;a8Zh#<;0Pk!@POfw{DW&3J;7Mz=u+6~f>5fh?LQ=r@1KeYnSXt*b;;SJWR16x4* z-7smx=!Or`T|fO6a6zCPZ}Q18TRb7J)^a3EtnceuoNMQU>#sc>ad1dtqm__n{=xD5 zK;>O-?3qt~Cv%{T_jtD!*o}-TXv8LriY!p}c&8ZAxTVT@y{Lw>u9VOX9jD^&{kAtZ z!>FVYCSA>(Hknj;((t@^!ttIOdrGpn+*$uQ;JdnQ#^|M%sE48kvK>5SdrEiB${)klq?^(+B zP$OZ?btBh9)DLY@t``R!HZ#87zM{gg$5bzJlh^7WS~@(8E!YZtMw)gljS>t}D#L2P zaNMyvhB_AqkH)Rn4|}6(?a{4k9zpq>sLDvjHN1Vc5RkUKY_=DO4U61b0rmR6i<~+; zXZYX;TlJwr68tY->{-r7c;*=s#%E;mTXsj^HucgX4#!<}*I`=9{3$*aSZnu!_WYVy1anoxI{N zZd+vfodNwn*4{F%>Armf77Gvo1p#Rgkp^kW5eib$AUTneM!F}GDy4J|L^>rUXVM{E z!ce+#|~<*V#Dw~^Z5vBsG$kr!~X;edP|#~C+KQ{4_I17BHgS&hAU7+VZQm=24;IPHe- zB0o#H(tg|RW0>tt(`}&33f2l~97Z-l&8MfY#NCKkrEnlF}&5iG6vcPs>2h88gF zF=0O+_)tsxC7q`=N4GK2YJ)r7LU&u5h9q`F1hpq9kL zdA1!J!&U=$;47yt+%*r^1Yfy6(pfuFWnB3*+JQ;uce$kl*T3*aGJ1slzI4BzWLODw zJj)W~Tj)5S+`O`|rpM)U;=0?Y##lp*!oltu3y}DV1x}}Pcvx?&JRqpp@c4DHVYT?e z&d`%0h$$;$z-EA{-Sz(=c>Qykm|i{NXmcVI2s6%|IZs+JEBGa^=w{l*wKi*NIPXAm zP-OqL(a>A~@)+nSsA}e^D%(wcd|2Qf$^Q`GHj%KT2nPT12=RPbkSEztz5pU8oosd^ zwu}G)#onGkiIah|2SOq>PDo~38K}Se`WFMV?@Z}*LzCv9-0G&CizRn}K*H2?<5Ci9?TDp51zuG8-v6 z-)@KXV_EU4#p_IjUFFi__FQ@SSN+NV{70D=Km|>{@F4i(q#lZTePFIe>*Dy8@#nn) z(k8iEXJ~WO%8Au<9U^n%wPgcXYvCLg2jbwDZ9uhb%(OD{hDAyYl2zyj0c!5eKp>ar zGPhx?uUten8vQM&*}%`=KOGS1X^3q;Iz=~PT<-k53y#gTx3hcp&4tw{dm0ofEdo#N z2IAYAM)gI7ZWf!Orntv90sY5_g#q&AOmGMa2%G6YzrL&>6(usWGU?%*otVvue2I09eg$iMb zj_GCOmmL&+tPce=k1uj-r(V<|z14wQb;+>aB64@CK~I6vFD624_5uL2!#(N%^xa$P zSmArBs1xrt<++N0JD||dmXU?l3Co`7oAyYP395RM!6GH`rF6lbrENnf>o;&BGXmFW z`JaQMadkjdy$L7av&q}wwsd8|e~wOUE-v#vcbK(1ofTD}-`EI<@aEkY50Hy4M-bTO0rMGv&Le3hw7Q z6K*Y!Sbo&=1b9+7a~s3~37FjouS-{7?A&6z;?ntNiQMt9W4pk{TCXQldQacWvd{tn z9|=_jk%-TH*p4*)xjFs$wkUduof>8Kk04Bbxo~lwtqn@3?r_?dPFLbq3kh0uEU))n zf1UOSfgblU*;<2VTS|iGtA|7I*~x0YxB&UpU!Laa6>wtNyNv%zBpof^WvE$;&_)>lCA44;%M$x-JU3x)~f>)EauWZQ%*)(GySzz{wv{@VE~8r z)HFKy!=#lpbwJWMYS*?04zxx!_RkT=$E?X^jbk!7jRYv8jZ1*0 zL6IA<9lud+Aw72C?oALIJenizR8ev2)j@~84+-N z%H(T4n3hV`H>P}GFC9cfi+lmctWs6D+u3DWQt|~Trlh8xinRPYT;Olt{_ynxTIQ483^BH*{PiuXz!dw{qK=7H~odTm*U z(CBz%P_8)LWYk&nP|b5fw;9(Z#%r~q?=_j)Hkh91f5;!_a9K{G{pQXdJs>&amfqN~ zdnVd6<)?{Z;sv`m8f{L;yBLYtYL7>kR&N?PZwM@w6X^^~T?qoMfY02g)yBrA-{UD6)7S(^~>s zuG+N-JcWtSyG6q(mJdP1JnQKo*rKBh^xqapVhi#zxYH#(DRtv9`7*a99WFJc9ACuQ=e;18(RrdSzOrxVsJG^#DJFv>_`>z|z5@ z&o7Dc>RF@2y9(8a0FPUum;1mkgakk64>1034Vag2&BCG+O{IJ-o4zISXU{2)KvUg~ z2Tx7;xn_NF+loHLbNKF1Wo|~e=>I-E>nDBVu0#0v0_hwibG?OpO&V{nd9QN59Xuhg zx^Vu+xKNjl&hYDDRU$hRg`1GcY~tGLl&LQ-$sQl&sY&Qwi+~tQe13l`614!q>KdME ztgHW&tI9bv*?^N{(`=y^*PG~TL_2i|_DbttYjAZ8VnPfBgFh@D)yZsK&wJAATh@&o z@okY!@{WfS7PY*;rc0OkVSRg-7D#p_qe^g3l290VU zy3X_V!ho1u#2wP=o^tU0TY1}%4W3S7b_WO`HzZ$eE`8kP+M!+!)8^7YZ~~FRo3w!O zf^mKj=tPrUVzJ$%{^p1K(T;C!QS#V!_;gNrHz*A|-G%?3 zU)1H&_2cdDbo$|FA^1J7n%Ifl@xn1Hs@IU{^fO5`_rljetMFBrfufOJLP&h6R0o!u zuf*0)*#FM?0$M9-Q{H(0-7zD~)~a9*3>#44IO*e!idF|DAI8Ma-790Q0f%c`1K49X zYQQC9|K*JmgZC<-LFIhx?cpff=O83gu$^M(kf_!<@?h}Ftht@p7kHN1_ez`7-H#PF zV;~8&@$&z)IX`CsAM3d|(fjqUK?nis=Mp2is2ktfid{))J@b#I@sZu)rJqkt!Lagm z%gc5ZrdE@A-6#-v{NKGAx-+U-b6`cj3mGj+B*vyBT&Hj~D0t+G8Z~%SfEPO2Lx}@t zxK~wM8Qfi}xV1ZUcFq#FB5~$1um}E4X}&#U{Y}1}-q;}0x$mv;7sCz{+=`JZIfi00 z2G;4!_zc&LYdEa^HnUnS&`&8WT_x>epp$x>=u)gB(R+PMEp&~?jLd!R1{lZ?}H=2*DcahHZn?m*l{A~<`ri7&_N}@&jWP6$)f=YgWd`in$p z@``VPl&?o;kt_81WQS8iynqD^`1v6Rf(`+UiV+VqhHvN& zUWd)+G&4V{R~QvN-PXmI7!81Nb9c%~f0pmUl|j~|^P)KDcdGRJN#^Jb3AL2o0qNyw z-_M%aBtTm9AZsJ(z6Y;Cg--Kf(@KRYYOOZa;zQ`p|LtJ#K^K(afq~pthRVj2&OQGk zmK%A!WYQ)KI(XJeq13msXYWc*>bB$P$Ht6!Z@@y`^aGTSaW-^TTU{cGdLb03UGmP5 z&~r`HIK(0`0SUzhTT1QGMsZ-asiTldkyxm$LSvZP0RL`6>{C({)cIXV!Ufp8m+c8` zhVOa@%}1a|ADwTPB!84FtXFExOe(c~FW2xnBOywE*1>$>r;(Xv0dRi&Fy8-^H~*8M z;Ot^Kfoh6dmD}>*Sie=7F$zirbc5MOQ&kKRC<$aDDdeclle9>`B#snv@YeJEABgY2 znJ}?)ugK@6FD}wim2TTye8%2+tMUHLw*aJNO$g_WKE_Woqp`Xa`NI6Wn|{t&wC~^S}0gFXKc2vr&m;#Ww3dAV;Uz{x)lxS_9;mmBdxeY`c z0Z#O`nnUE(dRA^lhl#0c-FBz87`YHQ13QI^-Lxj5jc8*U7MepbQtHwyC46+>NG z9IH&E3)tT;E;_<^?may?yE(V5g?I-jA>o^oS}Fn@&uFOjqq2Ta^8fNbe|je-e7u3^ zCwot17RsIJa&NNVH|)^iKJ|*gW2Q1#J+XJ}C-|iOVc?Io;%l6iq!zKyZ^XU}LmlFC z9)|fytgE$!;t1+Z12 z^}imrD-;@7Q>)pwApa3MX+IcxOx@`_z4p_dy(uGZBx2qNsj@L%t!?V-P`dFSUZlUR z9eB+J4DfFR&XW`DC4HT+H|o*bNjDtrA@KP2I#|*5(ah;28`}FIg`AOF;KD-$>f(q#S%C@KG+Q0i6@*PO~jQXoYoIZsvIZuR(axvb_zk6{uy7r%voX@_N{pY zN3Z0ear>^mscb+zvjs|;XF;s9@wca4){+*^~c2x{;`UdAM2&g2HT17SaXINv7q`cu6;D8j-Ee}M{r|6 zs0$2Gju3H7f>A$4Y~6?1?SWj|*1CnML(84zXp`vSJ{myc3ay)6p|WiaI7l87z(R?X z8{#7N%sMaw--jdT3>7Q3sRb^3F z%DA$;JeTJB1%W4*UR0{t&IiW5{q{zES&4*%gxUrR^5*HMYiaWXF=LhRSXPyU(T03n z-;f?x7!0c$qWkM4Ltx`+pgzyxyU`TAK?9Y7g{r1{Jl#mrayLaqI(3d$cQ+@(wz|D5 zEITQY{BFOy5r17S02tlCOJKdQ&fi%%R+Uz;DAss`{?~FT5`pF7))f+dW5PN~&)bGj z3>{qCs4>(W$E9D1CO%KxK!GbGU|x*17-OYbYQ#ZB4OTQ>RP2WCIGA$WmDqT`vm$!Q zf2Bw-;FYl;eN&l$)`m~}V6NjG(xsJCt44R+Z`9Kh?|RSs zN<&PT?ImmR_eZ@Dh!G$jKWP@h2$8*W0gVD3I}w#|N36P(1BAl;*1ZGjyv{fBtsO6NHaZ!tq>SBS zQGk8n{22NEnBr-}miwmPLGet;)>)5uW^ZXg5zq$5oq%QU_PO+P$ET#wQ1ic(HIgUZ zKae__IQ5oJi?!m*Y5{MeD~5mv12y`3P=&3MmR=X_4{YFPSG+3jgo;ZE*%^2<^_5!)*x$h~{W!}WNVQM0gvC=T5P zo?46!C9nN<)6ql+(#}cQahv`J@4^MeK&cw1myt8nV&s3#z6j!Oznw!sQcyjt<2rT5 zB65TSTDkY1kkWj;bCR3lUii0*_Hk#e|H19O&*gQsK;G^AQh5H(asRGPA<%2=rO!R8 zLKom}7kX&TQ)Q*bVV+#`4v~)M1~0OCl@?c<@&0Kwp4x((xr6>06JqD~VAn}aeDop7 zGH2qX;Cny9UY8jaCG^UM^z)iwk6wOFU{IqC<8~gO+Yi~-FE-`?tUizP-yIs8F4LY; z1#-m8E6a2Pgj+uVq=6(%phk7-i$&D0xcR3Aj7gLk;hlVC_cGOOXGIm>-L8&=2bRBC{V>BPkN&62JE6(*xVDF`0&IS$h!&|e9ZI7*hqO3LXkZd`fm zf)~oJNFt(K`A-+&e!ghxsl%m<8 zfAgd z(OV5xsJBVW8Ss2&8qg)5EZR{Q%}&-bKK+seHNyBszUQ#7{H-Jpd_Ar;piyqP^Z}71 z8$9qddaKXevGk-VGX_T_kB4c=%{5M}>7tdeilAKF7%oZ8NxzN=2?9yF+X-BJG=0tW zU+CJvwA1w-Dz~E1q`mdt#_v`B^GU-Ne7M27 z%;|?Z6J!ASw?b7Y@y+D)UEa4B=E~nG*l^ZlDGae2Y;Rk+-h)WVtq9g~5d+7b0XmUz zmv7%)wr8_vk4dHDkdV#HId+{dXL=wT#-K+26@@E&hEQSGrSnged<{BUvS_rHkskWG z=pkewp}I>rrpP`*Ak;Rh0sy6_SfX+Os?Z2m`+_IHLg`1HzdOLEP%0z-M1l219_c^cf{NI1LouPl?9Rq$HUH3Ul}=` z#_unPeF(*M$P)c#Xb&2hRu+TI^^(Nh3-g(Mw~BIdZUKr=LQVNy&1PH|f=kdUT&kwOB|Ds%wZws2?VX5e|J5C2&ywi{AeZ`jMMBTFe^&I_n`9cuz9B2>Zq+#P z^^m5qA3qtx`}+32ceOy67JE4saqiV#)=a_>uN8gyb!DiEvS; zW>Ah+DyaG9GkI_zUbp|g%+?=*S>m$*p?&GhOUDR@7>LCq$c%CfgyrHuG`Re_x$@CV zYy-TLBUg4;(-}Lju!7Yf8%m#Z%Yl6io;tWJyo%j6DcbSLIyXl*3-?(raQQ@00O9Uh zfQzpQ;d)DT?V8P7Jrc9in%UfIIC(19o^&&t&Ky)LM0ySgs|)UGcms{#YF4NE?+VFc zTjx4azHu;)61{*5?Rg4|^sdnx{`P?CSukEy{yGBWqW*hGJ_m;obju@wfvM(@U2h_1j z%{MHc&Q!@SFINUUG=1%te4asaQ~*#O=$<`KXJMnw1vwm3kB5(9C{zwHAHsZ_4P;_Y z1PsbzIM_1S0V7AIWi+z+Xad#75^Xr%(e(1{GGEhn>Wf7yzo6CKwTU^>N-Mzj?mE2| zeVJd57PMvh-@1ak6n7~3fo$GMJK*Kpbk8Z>a?uL}jbc9l)n|ashTglE@UKDSeD*-o zro-EN>q8XP)*{dTC?D{jevv8ydM7P=^_ON+{yvik=t+#<0*TlR z`SAWaSL(EVTCq5%Rv+60UArE(GbD=lW;H`c z#$e6&t0%mTw%1AH*%{x9vsB(QJFt$?*XBGe)z!W#o%7uZHL5uPkh}uhm#+hvkATr< zX;b$d&$%cGzGX_oE{5wmp55(D0tbxv?*XO*BD0dG-+6@b}=)psx4@-U|u^a!BBDG%3S z9c`f(Q6p5CYp(Ondd?ztG05A^D>#i2-Rn!x$*>SE$dDC~F^27To+(N4$XDFgM^l znx_0nx}|Vp`9RRBE9RhH{8$S|!~zu7&K+5uIJo&kf&L7bxGu{~{iOG=^6NRy>-VPb ztxdKN`CO#@<8EX=K7#`k8`TEry<@w#^2ZMRu~8a2cyKU;PYS=`rdewsO-00UpVqM` zVe#&-Wex+&Oq%bWP;FHwQ{M>~1{9Nx;sXnyhKDir$2^^vDqPT($T-=cvmHR2l5>N{ zRI5!T#IWJT<0G6uaqUHu0y3SZBh+q#T)JT5yFNgbV{)0$r|A_{#hL&BMrIXfSCW*k z1A-u2^TF@&(TJ4T_z(;Ed|8Qlo44rsSVt-Gm6-s+ty2aKFV)IYgD~Bl6SGrXkk5zb zKqHIq#g{70diNEpuRBC2pf6_v=t<5be7Bu5W@TzN`*618IG5HbE?KawJVF!sy18Ca zy@{tyJo%kdBSxKC!oxnd(7(8f2@6zWEIOXB8TL3MkM~r721QPH*|(Y&B9KD?m$#K_ zwNzAArayIY!C1v;RPFM*#hL?v0ZD#Xn0}~?k6V=Z$_1@MNyT5!wB^);8 zN;}Jkz<&JpfCN=UFRBWg=x21#$p-QM?iv@o7(M!KnQGSayoU_|*{o;s{Mf5?&B-FP zE)dar#@na?4Ei<;C{DFkR$8wB611PL_&AaZ;7E8qzj)_WRZ}~KUbINJ(a!5g;y2&U zT23X*cjA1D^Sj}Ie;@N^%An_8L!TEEGMx~Z{_3I~HIolr*4%%1Z~9xAtaVB?PNaK# zoAjSTUH_~R(9smd{o(@n?Is?n0g^A`t42d{r+Ye)YiZDvMjpqz`lf)00kFW(@DOLarQ>Xi=nXPFku`Q6LqT@CNm*qQQHHs7kqb; z?+d+B0Y2CA_+Tf>!}S9Wb-FqIZvL8$gF`&tDSV|wUX$7RRL8iCCZG0MrC5vo&94a$ zZRd7IpoyRfy1YhZ>V|_3DHkzH+QxnHm~hat^r4CYsYu75&A|3|S)g<{jD{OI#V<1q zxlH5Xcks8;m6WA(0AXKaP?kkq=Yv284*DsaG6=uutnv(t(aX1%?!OCw^R zbaar>KyL!XEe234z8mgU3;mgAH_Ot*1_XBgiLVmwjz88JtOhb@nZ)U$PNs{1cW=v z@qh?q39!DkM#GtwA^r#3eUFQrnue~HHH(WnhwBpeGq?|46`PIWf0*8ZB46~nr4gAd=gL!0sGPn0 zLfZZ9^IS6=YLj566ntk~k*K1Jfm*8;VP2O{8#+AFd5bE8Z)Lb75jqv1KiIj@WSRqL zicUcT#zZYYX9l_;j}eJLxM|j5x>~01@e%W>on+BVo8z9jQY#e(_!fG~{>A%DSWp4Z z57{qiC7WaOEsF_b@cBHoYKT)D&&kbg>C0=Te*2})m2NG5@Pcj(HU#N^#Yqw&OCpsE z_xt|1DF;Lak!HUvWb8+VS!{O~sm0n;k>2lUkE7WT7L>`$ds~2|fpQi*!w7%Dm+tmr zrrB>nLccxTQw)2;(bo7XK4`mI9x=>8UmcQOzP#Tp#T{$H3FNC1+GDRRN#W>E4Jxgc zcC;>8btN(HxVs3-O9eatGai|I{x}ws;%ogT6RO;W5}pIlL*Mv5$Nl{nSg}AfdD0LEPc( z^BOad+9y-0QS6k0f*d343%|>k*NUAGC`>*By9K46;B%K}J&RTsLqBtwU5Ji>HEusW zI%edfiulacR%WWv`BvW`cC#P_)lfZF1M!dRTbG!+Y!&xdeUpA^!p4|KyKs>SLDQ@+ zzi(Q$0EhFasi~Px8XoR{C%@@0c%p0sFqCuf@bH*US|T&lW3Y|1p-RX34CB-|^E%*J zGTebH2#jYDDh1TD*s){7wa>Q2m93XZI3UM)K^cI1Mbclc?W8Q`-aXvyneT;{5d#So zTFdz^E^hLnX7wCA& zqdAz**ne;s61eij+1enXqu)V*@J7E#7od3?cv;;9|t`% zKg@B=|Hy>J!Oy<9V&rjfi9PIY;Ny$)bhG-Nv(zujTs*v^+$9Y2-;JNl5R?QcydpY| zz9vJgn=7MMbIF+8{?c6S2F2$jen1E!f^M{-6fB=sz z9Z{=#LwJYWfA9pRjMsqEp=8Z85d}CzQxDsd%nz53L(Xq`g5L#TSG>I)cPmpiOnui_ zmqne&p`f5$;k)NpQrF~PODFD_R%}qIP^5UVU!SU@riaZ=dU#LI#H7Sz;%EZU(BC>{ z+d3GwOl${T>6f|?K$2`F+ zr0aAaLF!yb$N>vUY$ULqpj0mu{2NU47X%{Mu~ z(kiPB|1R~0H{ilXq*>43q1dNSGRqw$7g;{JZ5{e))4VNqB6OnAa-RI_x?cin$>lo% z|G1D4t}|4eMu=+oxPPl3PTq13m+TwZM4vC1KstPC8{ZwXc0$jyQgwplV=l24NikNh z$*c1O^dgQDp}T50u+10uUZ*%l%44Ots|SW)@NW5Iq3TVfAQODq*-e6G+u_Y6IpX1Y z-=57?XVV(c7ZMg0c6oP(N?bkO(Hnyv>yMkuGm8G%7wQ#WZ$7+ZV`KAum2WSqD7W$X z2;~}{pKup;1X&V4TTh=gQe9TNiT=4+zLVBMZycA*%Q zKB{R026e)E?Qr5Kq`@vYHKTLsgl#Hvc#z6sXVGk`Nle;zgqjn;l+_-uAmjf>gmxYr z;7=O!G{3$2LmWUZQKDV!x8eHZi9Hi+%Y`@K9Dlw#;cO)Qnd}qorLXIf38)9VV)w(T zbF&Iw7Q90iMGM>*SVpHwG&H%`OgCEg&!fjrmSDsdxWBEYil}bVN;pW)l}!` z0rr*=P)r@rm6%p*ojrf~p7*N+ZUfG+DB8SgVlZ(5IN{8e^tq^D$15PW4~p9LqX8#d z%ypq7O{~tpss{YC-UK*v6aK5M z`PXTRt_gx5tNEwter2f?thc(@cP}v?lqPBq*2s-u+ie z-t(MyHdeDNqMf|n4 z`pluy1|Uj^61RO3K`p2UZp}5|y#-(x$u&kU{kb6&Xp*p%f}DR0SyCH}KE6r=Rqhb< zEZL>gYP${t#%v{wBvu`e`wpnA-L1P{cb-P5O(6G2F|w-0AKm$#7=;WtESr5v#8-8B zb*jn8XL~iL+QfTKweEW;E%)&{orN`vD4^0RWZ$LNmGLs zKi%`9?<)|Q5`0twX-V4pHS0gp4%}9>;dmc;ZM%NIyqJ&MiRJW#FTd}>A5XZZJ>y9g z`ekyG+A<3oTh4LCcv-3UlV~9HIcIjkIn*HuRD+|4UNv;^w_zEr)f43v7>j3TFzk_P zPGU8tB*gKc_$@JiL2RW9mRLI#pvd6A+WuGrkUUiAvDWJ!`du@`*DjI_WCz9H0&-As ze^s{5V;;3eOOT~whH)W5L3S5e1RTbN!jKPJ;Y?)+Onvs`mvXaX@q*G)5z%&QxWn^z z!omqPH}KK8=7&lmcTJjp323~hH15|T+96P1-IhpN>m}Gsr0DGEOjK>vEzRVg-VbW~ ztA@pp>%1mBayJy|w$+{B^SJ|T@~h_3JB%5&;e`WI;Lg3Wj z%AS||y=?rrRSQaOyZDFs_zk{iuaaqFf&{AWga&JTJ~b24{2X1(_)T(*cjk2*INC!e zdn$+p!35C5EH`~%(hvcCXSDQ1Zw9zxH!MCqjgKlxl$QsHrWF9C{zio0aRKFSec3tOdJGs@ds(*1g?LOgfZ! ztJbexd%X#D%Er#YvzVeP3tSEe7VY5D4m(bqVMk(i=TNDK>#kL)w1%~g&kH$MthZBy z?QoNgDPc^628ez#~KC6%Lj_00sB3N-lBNG7+eHYQP*Y1L|eOg;YPo+I& zIeDk>=F)402ZAO`(F%E{{X{ic8AG4Rx8o(PeLNPmLHX6}VyD)iYyjld_(5=*=M1L5 zq&`-f+dc`_V-D}=RQD_FB{jnJIOY;zMvhH$l&#NA1JD%c{&qHraY14buj(?uj$W(k zV)p^aqYWe++x3RwzA@NP#^c+~Tj^Xp){X%ES&5y2%*`cY%xsW#u6f(*10(&Ex~v`3 zexTa^+PnoIV6=H!J9i?_a6i+)S&RSwPCrg|Qqs*|?%S?zd=|69gf-P0hOa$1H%j7M z`bh96dyMLa%M(-{gm0U9c~a$AD`AX9etFlEo67P-H4>p*4_f-7$OCd4he^sgK%$Q; z*3Lvjcv0@zcQ-d+*s#XhH_njhTA-k1ywy}>0Wgm)13Zu?_dBD6pW;Z2>6mUi*jasZYMJK(oyVAUG zfuu`kPiHbaZ;Em#sq68CVXf8EgVqVh!#d-`AjU=aS~+C1|6HtakLN2*taAnS9lC?d zb@mmXf4f8S?Q!1vML962nq4+DIC!_1oPeUFvrzi;=K+1DASe#GX8%H1-DX1O~KT zpLZ>}FzadgMBV%~*ihrq>)5Q;?O2<{^`dO#^<#%7x*Clh5a@ERjQDd(`MjE{dh1uy zoeGIHkCJL3tICih(u@Izud^< zbC<;15PRXWE}IYW+cuxLgKqy0V(#oD%S;8)s{I73Q_~wA8f^W|ap{Q+|C21gf7}HK z#QZlYG5EJYZ10r!TO~~k*wMSko!=@fG~U0EeR=tM5Z?JPYJTVCWLL_{40M-4SJEkk z9={BO2>g74b7WV!U!11&FnIqS_7y2yIWXXD<&kGyZ;d#{s|TYK`en_!QrxQ8dgc>& z1TrU1UdWd?eE~J%T;fjQ<#J5C9(v!!-+xb8TY;wPlRM^C6j z##w0P0?u$#@M9hEYvWGc8Pi)x>y*QYPI;M-i0$9=FKu~GxfUkPdJtoWH&ghYFlL zazlS4GtxG_Mog20oPITreS3$!1>VV?`#|S)xO_z1~WXgjhGQ+-?{iBx6|q&|7! zkxb7;nKrnqN=Go$&qaK6;`EP4rduZi&Y>l?9k?Xu$Mwf|9Aoe6y%~vnTkN#Z8NH#F zIHb~HNAoz~!mszAILQE3-}h}6A^6yzp8@vdkH-s2nr&rv@D<61OSj*=sZXlBU6Vjv z=jO@JCf0k&ht_!JlUKV)=9JD}@KICk3afnBy0tvn=?~U$e_p`=_>vvx7#XTa>6XxD zLgG!uHN$6lGSX9*`E<=Is0-I>wELr`q_ocm#UMikYtMssay@MiN7D-T#8$2^@v2P- zMLdFvz=9+nj-}D?y*FXp(3@#aUK}kp5Hz?B%P5k8jM0%utU9A-2h<(b0T;*M>CGYs zkD{*tdlQo#Eq(3&oy6OaTFw97=vwv+Wx^x+lLFP3Y@s5bBQ=1hoLjl$UXJX3IDyC9ORoSZE&O)7q!Rkx>lqA z(bonJHpMWSi%Ca4P69SZRWv&}ZWkVj;sqZ~`8^2v>&`rqNxv5JG8~9kSNFQp z7(cx#ndvQL8R$$?@sQx_J!LaTrQMo0pNhV}aL{Pt@RGx%IyK%wp-{62v`+Dbg`7sq zOV{%g`90Uhb6T>*tDM-@#;XN)pp9OykLn)0Zck7KSYq#r`=6fb)W2FSdc)cLwCLMP z>+5ohQpy@r<3y*=j}?SALw)T1CMR^SGCGAP7Wz({f1Q74Auesk^?Il>PcYN0==;uh zE+QdE=kj8cpig#SXutSbyDON$L*bEIM;+Kn{$~~)iA6fE6%;>*9NB8+rTY{{P;WU$ z&gY3Y9q&#EEN`?n?D830hk_7uZM>AGf@c;)>mzeOf^fI1Ppz#?{CM-&vjV)eVORf3 z0PFnTp#~|%o9Ux1RtN;jXe&Q=*8BUXL<@k!sprwm(l0Z;n3yaW3)8v-{QlfWa`hMm zbmaDCe0)4=Gl{w&U zwKgX?n_9vXa<*i9*&-oFW2O;P{}3GKfn(DeFSNgtf*Da{imZM|%_bLM%`0Z!T@wQh zbR*l6z|%X4W#dhq8H}sqIWHF=oNOK~rI6u$U{e4^1oXRVM@36v-WdBVJ?NDN!msgr zQ~o0ZY!h;rmoKlO7T$;S1Cul&*%S4YKjG&U9OOAk zfVO)xRew_QA@+1BVG4PxdXXYcWdVuqVYre)`H$;D96xnQk{P?G!W&1)lhWx=D#^{I zpD?aP`k1*`4g(6vZ8=m>rktFj*{MTD)EUciaCAGK#P4S?WJG$rB0#UHx^$48W=5PW z{CL!AI;50R<3Z`jbrHKY(i=;>QfT`L!VOlsok7Z{4b=Ks57!#X@-qFO?VkD?$Ds{w zr{nDdo~>nByyyo`R!E(mPBG(gZlctM;yzc9mJ?_&-mH_^i_3tTyMO_fr~A}>#^ELi2JgR z_g>SUEo}w{XS3vFPcXyS6P{fC<(7XLt+$G}1HUKbuRrGKOvNb3Rz(%qn{gy-1qpT z6=)G&yp7BxKvSeCL~dD3H+Nec`lqT)^h921q*R4+A^e&RbN%W#d5+#+osCwz!N;c# zGCtLsm8NvJjVY6wF)Lb*p$sxX&ne?%!39$E>`Zh{aiipXMt>a`EkM;Gj@3l;^puN+ zOI|e=8y`Ni3-sGN-W!j7pqG28lWzeWrw-;YI_^j!8Wqikbqv`^t;4{uPz2c)4E3E2_3T=Odh6?^-SS7r zq@&1d-=MoA6>ajTT)ql&(Wiyu;StPA17}i)Xz9A}U;Z8Jb0gtC>nx+k@Or;_^qr}o zfn{3o&gLxE>%T6Rdm3~zT(!XB$GeW?90>LZx*%9|%Q~s5kM(3_d8cU^A$nbZM z-F$xk}SEA-DA#^2`*IDdJ~QcXp;7e9i$TxPSC znw&F83vMm!2wbKQiUAyu@=zH0BjmM+f^C=noAZ79>C2zf3tH(=6%kK@9!Be*hQ%g5|4F zV7he?(VC=_s8V;VLs{C3 z$c^Q%gK`0^X;KSmTOT>UMXT-fDYo7=Ffb@y_R=Fgc>}XgPB)QEE;efEHN77Y-^Dln;Z|He zY`ECqB?IL*_x!uKpecN>mht-AK8lM77Rm_VUFn%(h?!vnFRyUe>RDtP)zlk<_p=z; zZo+TW+`|*Nj$FK7-i$XMSA9F=xGSLa(=MU0{;uGmm~(0cCE;uMSa0>Hbl^%yfEC2r zT>Hvw?^$&>WAHXobX-ooWZP2F+;i>Vk%& zapJ47-c{?wl8ef&n%Zj%MY-;a3taQGV|ikSTNEpu2cf9gQ8627c((EKmxcJ;JVR~M z=dOFL_3PI2D@S-21ngp8$}Pazs&`86X75&h2&Ri92{;?8eOcbM<*8aqJ{Iow1|cPY ztd@o%I5aka!K-*^-~UP@<*q3~QQB}Z$H=g!3C(<}vPjK#8ZiU2RLYgt=ZI<(=;C5rVNeK zF>O5P7KL_>K-I%(>6AZ&t^sGlY{0v4SK|>FaliWY6kgiF{UG38E_j?AyMU^-9n&(bv9*z}_50*vpj&T<4GZdK zesy-9*5t;p=quXM7b1tr$M$1nS)~==&}2=$O_&|))nww*D~{>!*L9y?P@1=^yC7%i z-Vk7b?BZpY!*ro~1|JZh1#hK1{1y4-+nqilL)F@k$r)DLT7Cc}`rVCV-MYOEfAIg< z4v*B#$=lq6RKn%!9-6$c0uLrN3hdoHMh_s+>QZ?Klpon9-8}{`y9*r_je~#eQQAV& z&1o%2m$_^QoE2-{}3$44Gf)oJ;EO}c*gyXn-M1Z zFbNs=>veA$lITx{3pov|8a}|X*-0s@sDK%`3ZXBscx91cZsTQMW|OX5CS~*CMsLAM z%9TpPiB8M8xt^^^G2OkV`ZKIj_lh$`sm~m?oKR?(r#sFOv%iQ4Ia(Wc;95v`&E+1! z^d1L>F+8!P%XhsSas)h2#%{%&9;(e;z2n;_6+biEOQ_c1HRZRAfbGl0+}>TgJt!XB7Huw)z9)E zwuh8>>*(oqG;B1n30n84+8IBV1*VjM99U*dSwiY{e6t4Zsv!T#722GxfS!+zTd?!M zfQ(^H66!9F_PV=5Sp0gv2+uFvb{yebSz+7h`b4sP04&KDhPK(;;Qs8bO-LM6x#8ah zxYan2EQKY^s(E{Rzr0DC;zcA3~qwPvQdJ!4EEpJcnE^g38>s@Tm!< z4W zS2e9>z;H%5#J7iTZT|e;b&%1<0Qz8Y@uPzkx74P9Ez;bes zsbo;xWT%-+s(eq(pnB2Z-ms_?oN6rU{Q?DCe{3pfi4M`TW*yx7d@Z&T#`wCq*hw71 zR7uyVOORGX>M?Urk~+foewQ28|H|5Hq_>F91R8wQ=TCl{8D_6y)QqgsF*l8}-Z6Q7 zAo`-3R4(8YFHsuKDtReB^NH0ghptiB2#yQOZzs-ABVwSI54R#mp43}ULu)5lSBA^V z?r`78yM7K$OLeKOdc^o*UE&N#KzE39i(;VUn?>1Ha+uq_53p_UP{@nndA7BDe9yJ7 z{V}d`m~Y?ixEy_FTa+md0li$qW{l6{A^So$pUZDM`4CrGS&3Br-|NV>G3E|k(HA{w zDu>}2H?gHMaeFN(>``pAS3E{5YR^D=XgRZ;>-~GU z*j1M4Q4A8R>r7tA&YE;Hl(>mLt0M zwF684<5wAVqq4Y#N}f2COve!+hw+$jWLZe}P2kGaZ)xI1sKLLEuMcN7*G@V%m{zo| zHz+0cq#H9{y0;2huNJ*}O#`trzY@D_zPh2OC%2nu>aFX<;63=f;=@}!AE}}DO?!~5 zAjL3la9{jvdglh_hK<(U#pP@oPA<`oqA~Mv*eustbam5 ziOgXIMtrT)XXSgBD_;jAtgAYuK>nXFL+%!c@qH4CdI$+G)+mbH={ZMe0F06pV`O0X z`vq4w>ix!ZA3ciQ$x7t}gI`x$(FUI=c562;7rBhE3~@Pdj6LbUl-#5O+GHCa7oTWH>Mv?o)L^IzVjZ0|YRHnB!n!WrPqJ6XmYr0JY%-3K?Cia%gkxv#5yxH`2gf?U*Spl+ zeSd!U@A138-$(y=ydS04xL()wyw>w7PD;81k|mPbi`OX0)_ly0P(A*)Ko6PW1kU4? zPU^fFJNUb2G2T;^&g*C}2s8v_xGNlppX;95am6gMRxFnL6*_EJuF2UBz?%!pl)|D4 zjG6X8%c%qvz-Ns)NoYRe?X(HD6B z&x#;uMX z51z6fx$x7IyY&=cRi*X``t$y_Et>iypEps*3aaO@l_A`T%Tc>hjiLD{& z%^@cQc6pZ$?M;e9E`Kiyppb&$KGl-GsZ{&6&Q%@KE{e-_7@-jfb$@$WAz#CJ#`{aPO`QDm?zU0fg&9C8^Tve`0LK+5{P6=X&uhKjSOZBYr# z+@6}6QNYEf%C{WI-(D1v1K8E~%e885?bqAtZ*ps}mtZvwpS$q9u97LgKL7($U+*jq zO6|tx^!Q6py(G?8+g((NhZB-tCD=C!vUwZ^xzb5~z;&_@whx?SR=d5u*mhN(1H7rC z{&xMrqUACOmMm8=x^XPdl$XWZVf+v!01(t}4WPrgf$0ia+J6HGoSa^ck%JvWQHS}L zwj~DpJH)mNR!-%7LyMrGN?oQ&Sr|zi-v&`8yK79+XZ$Bn+ z!7oUxd~T0oZ6SYoaLHEUqC^LuF`+{D=;!SbdxzBUYiJ3>b?HNB*r5jKoZ^Uj}n3XH;jhJz&X@W#Ia;)mxQF&i?Xcq zExm^WH--A#S_8kFjZNyS8~0zs@5-rA)UerP`6hfRk`vB&g#PRWiq!503m*Dg^bapX z4hV>7CEu>aufNVP^#PX=0^n)S8r?y0uBHI+K+fh?YmWJv$vy=hh+?zUX&Exe1EJUE z<}k|zw`MjVbM(~bA07z%p$9^Q1ibDCBTx4EPJJ4-Tk*~}$IL(Xi1ig}0%?lqukEd{ zMezf>wwtY-wk}B5eZMrGog{yYIXU-t!D1WLqy0L;qx`pp)|t=Y{c$a%3J zv#?v{b=`E_t!4|iA74H;l<#DPf44%S=hEj-Oa>|V#D($kB~1nX8W>Ncdv%Qn@%gK; ztLj5BVKAPtm!OGh$1+=GYaIu_v^*0iX-{2kEaekK!rahLyjHkx8JT0N;@;!dgLBUC zDH$U1W7R6Um=(J*%@MqvGCj{d!CC)GJITOCBeVh@o{>Y%@#4h`p6L!2!^V(g4`S8C zQvGvlh>9hC+k-L_SxLzk!yYqLe9?CKvA~w@n2QOdaSbAgL4n!HC8edl=?|?c$xCzn z9{j~+fr+kBy6=q(TJzo(CZ?BUMYNJRwKuEcYR=#)RXBcV{G8-c_GBFpZxYkEAL9J$ z*2x&bt=C){T2ipi^Su6LtvQ@`-9P*C0+LE78r*W5e=K$E3E(lbc#v=%&4y=>eP7md zonD+-TrqjRx9J{5_%;_Lo9Mp60|Z^}h;PKZ?UcD;d-~!$K#D&iBl{wUHe#f|i>o(n z^fID~>swFXXpm;X%pIM_RalokT=VNXnN4AXdU@x$a1Dno8mEg_j^l51EqwS|rkc0O zWGNA+(ImZTT}vwYOYE*=lLyi4n2lI(aogPvBPM})O>-I z>!m%JR2}muFz5HJw-22mmGtXfFdteUsY}TwaK8zJ z#{;amClh>#B1Rl(&S%We3@w*RpIgf5S$O;+SegbVL^M2_hxH~E^L2Y&?YusXI*un5 zaO3m6YY$ZNmE)ewQ;JA2z-nyO?DW!C)qqYTz&|*=PNwnHATjA+ZjQgAt$)ibq4|#@ z^Tk%}Csn$>RF^FUeyiI{7Rr$=4iwx6{1VvrhbLNdD}sycuQ==gr%xo z$!Tm670t$x;E)7bi&rkDp7pv03NP&{x%E1u6)t#JWJMMlB&BAQSa@4~G>wru;g7Ls z95`VSdFl-<|LwJT#D!_r%dxIK)Bd(AsS+WZ4QCE-&&wL5UFg~z7%l#}Q5ibm+07YH zCdmM;0rwo~35iD>keK%_3U(GqJDt0a;eWb-sFdVKIO62inwq&TFjYI<^w=J|bMKL3 z&Vk~7jHUbT#@m{}oAtegW?jr>tJ6c4n})b$9Nk(n${*#k zToSlgvNFo7ooTxpyCowjx$)^}BLS90;o#n=2g^>F`|~|+- z@Skf>I|0^S=Y1|e~lkQsQ@6carlQ?YOycEnPesJ+Z+m90p@&ielnTZcP zEWeibE7Worz3YAkR(t7lm--mrVva+>^ISCxT7fK)uCVaC7byxFh(Z?iZT#+YNG)7( zu>;8$3H%jSKzt|f5ifXG&&@2xfm}1A1Tm%dMZ8lUg^MWU>U?2Y-b(EgrrO@db z26&6hm53BD1naP@!5WzGu@gkb|2Si^G+t<<(<(l)D9>-$85s~Olqcjqw5?P91_2>Q z_jjWPdqGg8#0-uvL?caWleSpd6;RAPIW%GA&vzZ~9;#;daRmx?64%O~n4fQ3wh*^# zy+OZYDT=%5danB%Lu%Jb&%GLHSZysCYxWdvYVj*Pvxe+D4y%chZtI1_ z)N*W9#;mU}2i-Hq#xkv0^|&m`Zw zUT~g$m-Ok6KbJ(sM`%DA@n*V4`=06Q)+kOHDALOVW({6E6R29NH;9^b+Vr#s76ln4 z9T_E^+JT+wP%5-@mu!aqG}Z^VbZfvaa3r%U0?K1WO2_98gn#>TPO8zd%4Kk{J9HoJ zg6(-VqJYBnJVzL=z+C6tOH2jWMu3*+e0TeJ*>W_yy=&(8JwmSL%mKSc>OYmn5ie!P zHZ&PAn*CE44$pjB;vK%Yhwj3nk`&BW>+adN%Wut}-bjM+Mv!q%hB z1oB1~E;NQmz|Tf~{*__u`t*?HYr1M)jPnj_@JpeUYIsv~^OB92|( zj1FN!&IO3I)z5-RcP7au=s47wYVV%JVRPKJMo9U0%S_^7fC8srU)p zqoUj28L`eyYQSF6AKI%K0${Jon2f~#&0Yxtd&Or$F_+F>qZ(*1Yknn#wxN&Ktf__R zjo*NQ6zfKAX+2a{LSMzYE$$J%3xJcqaH+>;j2OCX2A;2Q(mVEJBTFp3NV(HF%vT%; z-M1`{hn|4dP=draFRA$-|L;+7Fk<6`cU=DX_T$HKA+U&Q#bV5-(in|=ypCI1vERKrRlQ3W&_D8gFHrO#Y_Y82aX!d9y5Pdu?@FH9 z%c+L`09igHJFCV{r zWX{bq5&LqHTKq<2NQ^>=2*=|e**s;$X`dj^jI2vd5X}1gSsdhRgh0MV)l&5{8B6XY z$?>VQGd_2Lca#>v3pj3BM`!IC5wIG$nm8Mh6yLm0T8e`m-5o^{7T)Q=0T5V!hyRy7 zBC`g{=Xmw4q?3Pr`>9u}LCknXXd;t{j2wn5(tyMKsVE{Za_Hr&(K>IO8gcBUOa;EQ zbXE3gz*+y+bJW_eF@;UBy6Iph-j89zR$a00%pDlcrXe5<{xaKPlQH#cedf^%5)=~L@9@ln6YgqI*qvQh%1=G4l9^NZMz)r*cXFvR zk=kZE;f&1=#M}Tv&?O3l-ZGQVj+M=Rwqqm}c>)lfVJAAC$CoJ~2;TUegJIjW=dl0_ z?aFyBGujm2GM_TwSe7CC$Yh`2K_O~i|8_3G6GuT$+}Q#3$Fu+W#Cf0s3g#;&9&fG@ zV3B-QY!PtBJmR(%&4MXEE|%F%C?5+RMAt&zFOBo42j%=F*r!oZX!&7&x*Rr|&vr(4 zYhba68yF|g@uRhdsBsaiF0JB4E@#sg1O5u082gD;z*Xj?J=C3E(`13DypZR53QNJE zbyY*pCjC60+4}}%;V$Z`Ut9q0Cy8cL`wUKi$A9+l@wY&N>x@Cs{EOh4T?P-*|C&L9 zJ=2qxaX0=_O5e6>uiReHK9S8iec2dksPx-n#k|;aDVTrYzJJH+hoi4uDo=S}GclH| z(N4Q|h^5=Qa}zF^pzleeNRF3KIEXa>>WPrmVO}s}j#pk>IX)?rk*nc*fRwA#^F2rA z2Y=YnWAflYpHldA|MBg|kMxXS4<>ka^(Rkx2fH0WSEMB_9B6llkZ895|> zmX#IU15*V2)R{A`3^1I>?lQ-`7hxXII&z?J?vXl(#=)g;{}cytXnC(F0=xfdOMi+3 zeUKt}eO&V{fzZ zwK60d0aoEg+Aq)n-Z&npJUe)oLxzR2Vt-x zIGsl9YSKLemq*a(P{nHlkHSe0*5TOY3c5!vjeS}$4gO#n{M{sgCF;^06eN==i9{;7@* zS11PT(w5hUY`m=iD{J2KRl9~oMdX?{?H#TqU#qz6sy#f>14>QPM$dDCb7*)M>(osf z?P+Q#7bwDg|6tE9*viGB#PAeT|;2S5Tf za#=@4)^dc5Kq%4W4YR`OsSoT@3l0YQllA_#%{9wGtw>D8$v3U65#Rt3qnS}U{5uQ{ zWx`u~cX?df=u-FvysB+4?QYodAP%0rszHt=28uEHk#huWUtWKR|9tO^+TKqG0|wbi zG@;DS-){3Sd@n=cbqR>ux`I(TGuf9LvS)d~!@V7&?4Zck(wU6(6Kn(w@k8UrSIi9} zEmCe{QoaMB6DAQ`BpWdLs+jMFJ?*@fZelpHgGrg|DUvf-@;Weyv-tqIq0EXq_ePz! z_A_Cq(jc)D_o`&%+L&LuC{;Z)cg&(kJ4s3$|EsL!78z9PGVvkkk1E!mt27J&A}Qb5 zHv9mbU`3UnsJghKl3UGuQ%7e~?pJQLxew~^@s>cw^d?{oBYGcH6Sq0FjOo+mm@hA; zo%cUF-+HuuawRd~3?J!29&n5x7d{EVfzGfuL7uyyw@|r8? z49hnv@R0UO+w3tidOYIb3UDM_*}l&b%kHAcgZ8cmks0ov4ln{^P4)gr!}bxUP*L|{ zUjButc#k*+gukbB4hthX2VN65{A9l*wo>2H^EARC?KM2CQ68jS4A^E$r*bXPF*A5E%S>P#b#q$A8Ye%jnZ33)pqmue4DxQ2Ev1uUm_2TK=8eH zt}{Wx6)B=w%RZ?WF_zN)-Chacx4;o6e}WbN<9w!HZ_R@-mEcO|VJGKd$Ll9Q`Op@L z*wc%7vSVk8G-O3;Df;R~8^c!0cRg5n-Oj`VgHk85+#lRo1Bds)$kr;}CmfoWJCJ!H z_fz{9^D@qIwAsn2k;v$vm@A6bp_N5e9A5wcqufJa6tb@LzQp_P@Oj`{b|XKtqc!Zz z`yOixV$kQ3K@pHg+?rn{ws)vFeL7$N&^kk%YSMa{xldL@GL`xeFwiS@q(`-g@+?fI zOycsp(YsuiFR={j<=ne%uy1=en^5mhU4)_q$2nloj{5WC4;d#q=Aem+kB{K;_VbbJ zxUazI$89uV7**loc#S;ettOr(ss_`m-OQ(WrZ2Cn=WFF^}do z{{Tjomu@=EUuM~#TzS8o9(8j`!+8l)k{_j5UoW~DnP_+m%(t+alyW|Jp<#IN>;xs% zkj1;mAb4K|m7XP89_4)AjeGDVr7G3Tx+lF=Z|d>fTe3T%XXq7a82GCq^sF8D_yG9- z_U@199+^F)T0jNX|A2pwb7`RYWpXFxY8F)qAMD^^+jb1u`blsNL)qTwuM#hjr5RAw zicw3VQa`B588C_Eq!B6%RL88BjCpX;d2HnA1zvEmUtvxR5R&SqnpYM1%!x*T$~Mlb z?Pn;36X`9wBJ$r7xC0vjY*82qxv-X@I1eM9*C$pyDel3-*8da5Swct@Fb+`s9ijZz z(4tT=L6I*z`aXBaTi% z)1Vi7APb)ly4M={M^BJdiK~fsVQlJI+RC>BCOAT9=Urrv15I)O-^J zb7MI<9WlAojsVp>1hhZs;evJ}~d0hng>-AnX_) z)APOQsayXc7NV^2VvmLRhPH39`8>*Lc*De~uDphN=<_3@{2*L>pB|I{rKut1>hBZm zJa)a7ND<@N&g6m^Q2CMf!DIBj`!~-KjKG3J>gQrmaRYjel0~>{9u$u_YMTw0er)7; zG?bg5;#$6UBTB&2DHrH1Y*qs9(>rh%n^0@|7u1?o5D)lDJF zqE&lUx4bMe6hsKBXoe?Je!$(Zm>{@Q1V?9HX$FUmGLfXDq-_g|5s(|V1&57#%(zEg z$2Q0aE_xCTIvquD!_4H^<&8DIOmI}{pedutl4}=b#m7xO4Ll8o6 z1L(Y?aQe4f zD^CK4@cs$*+y8P%WTN1Z+#eK_77FQGxAL7>dH!wBCe7$2$q0=+Yf_vc;$+DWjhiVT zNQe#h9Il%^X9+6S;(X{FUxA*OR2j?+YYobW?m(kA3r=T2(o<%0+lz?KUwks_gLEsnfwBSb2HvrLCKoQK^SfE%afN&}zjn*-a!}{;2pL|qiy?XVH@CFW)mxalOdY-ml z1F=vrOebU2Dh_Ph7Tn0R1p9CKczWw2q+t4=1(E#q?Wgz{#@qrm8WdJNYKoVv9mU&} z4)&g^-G8yQv5(-oTM#pCIpR+v3j4Kfe9=ah%JmoEc50 zBdmsBJTQRgFfoBJig0v|wxnyJ6ZpIRf3f*~ITKn6tLz zB!-Ij>GLK_EDH;|NS>^zjjJM2q7#@*0tw|;uz*$I9Lk#3%2 zB3+T;az=DuYfW0(m9^g85vL(Z z5Qbuy1}Os`hr#PuObKPaVPj`xM$U{?$%xbrW{KnY&Q=8QoTTeNeE1Nu;u(2m%wx+N zxJtV>tKpwOkbB2(abb>0XakYD#Y-+Umm-lCx%aQ1Ovx zXn$=5-1||0BE)X_-Tu+t`sV=!U4Rb9v-4>|vS~)j&6%bTatfKa$h3k`l;@#cx5r(( z@Ux=w!XcLOx(4<6K~=lI-o&535?H2f8E_ZT-{#rAqbG0L+gxL!gg4R%b&*t*OO1{vU2ne7J zklM02vsO`%@CQbwe+uDd>w7Z)(@xGK_b!_NOS&v7Ue3Ru|7drwyCK=lAnGwy&(?V} z^{-MnTw1COlO_RO3;Jxp;&hn@|F%Nbk$?X9Js3Kw+Ma(uD&QN2On!9X z7589|Z;QPtTk=>p>F$i8iq7!8uv=m@K4uv+kUWXea{N*0DXjYY zGsJEp6=$pUif)NH+QzFD=CD3XpBU{Lo)~E?=qczB_Wb}um+*f2)AM==A%)5tNq?kb ze!?wESP&s-y!yH_@*y5Q!)I&MTP>THZnZo=u=Xitm3e4KJrqM|+W&@wQ*=lJoItH`VDz55qc%BN3XdR-pK!n~m&z7LIK-oa2M0fL04rsm{A z`|!*MdE#$5ckhyO>4h{$Zj>dnp#$e9GJ00y7@R{*Fses4^h2*a!SCB;*^rxk=i_^x z>_4E>=ej81Apz7C%#*sx+tB!)k154NE=&xd)lh}k`{A==bF(A)HAD+M!|9D3_ce=d z>+LTI-h1y+12`c(&N2V)WON7z(on&3`PDicE z&X^ZWG0D;5^{gA$OY8l9G})hm)%X*?)B@TKQSTEp*5ZBXFVJ-BBLx1oj|J2I_3fuE z*jA(mb)lc?B#a&+V^t>#AML|=mP<@%b|Hfr5+9LM()!Dy23`njmp$Ir>qb>4FB=<6 zOCO}xa6T5;OadaO-+CnIGO)6;&p!W8hU#!XWs3B`@y)hrbKvBQh7-@0+S_pVUCD@c zT7wZr1aTS%cB{_nTl-V|C;|ach>D7+h#?3B+M4q9*wUG2V!pB`cnh-p7XzvfFy@(> zv+Jq0PhQU*>VO0v_OS=d?Mm)CISr@zC^azZd1~_ir5lr$m?Rxq zYpL>`|HtKUl#ZgWqWh4HG(}n)8cDr*rG6aL_yk`7xD5<`7587ZcLp5w1>`LCbHa| zl=w#JE&)gkpQG?($7%2RH@=fB>HpDxKb5xEd2s4VNAELe z=pKzjagQ!{*40t3L$I?zyd4n|QF|5Po9=v@U$CP+TiTZWdbf4F4pO;&F_{U1wC z`k6r|x}7LlW#+d^d8EhcJ`%JBUNBpEFkDAYavbjw9uFH@!@Jkdf6+m)NtSecZfPLR z=PTh~tpq=v+0P)MJQ>kW&v9LNUMDVwLS{Z`OrfF;8-JNxSTv%fuu-Bb$8FghIvUp2xRt&VxF_I@dGt&+SXN#Y=eEmMGKOM0Q+w94)}+AH_4rfUeq4( zx(IHa`)mh52>+!%rR`Pw@V7^e?ah5uCg6IYcLK$=3IsZr*n4qIlOC@3b516M!@t6Q z`!}9OUxFm8_nWoF^wwH@+0q3P!wcUc;d(Nd?#4wK=ZU-1_&6+ zg_7$a@_je?l%DVL>s$x<+p;^!u73#~bj*P6-{>PW=$E0Z^DIHpKpM``ZjE^rfCRr5Fx)^|mfi;>lqy%nlN&4s1bM574W#@i$QBMv7@J7)DZf#tLfjOZo*wT%L38}HTqIxguVq)-S+i7H2M zkw`4;zm>7PDRpW-;K^*ZRy8o{!G}E3A)t|`8sq7{F5HHoWT$x$;jf2L207oHS*0d@fx1mLU5ii?> zo<>fDTs5npA5`&d#|aLz?BO4jJp@<4NgdU_*!fQZ_Id+_xZjim*U1*RP_a}QS-;e3 zs#5W#T28d*W)usQ$>4Wu7u|Xj__Ou)V9%H*l^me;)+1C^Nvzqp;fPl*l)38-XGHu{ z8y!B|BuJHCKd%1mM}m}8Adq<_(#!(GdOR?fR)M5I?(@(mCUaZUYXR>B7|{Zc5_DXT zrGrH2E6k&OXQklEa4l9+K7lgJb?E)!g9&2r>pQs*C74xuS-51JP!IpP%2r=$L?CAmx+io2IsrW@kr9IPZl@c-!Dr zQNn7@5KavOyMQo$^&dbZ$f^D|7c?}#tV13LffO)kx+g%{>NrfosAs-MmPrG|+e4W> z*ny)Qb&l2T$%@j_$dSpUs=5XuVR6^%f-TohAiOOKO|RX!Lk?~7 z9IYiE2&0X)ko-5B==3G)Qc3VVcSRffi@=Cq)l!}4C&yz1N!{#Y;s?>|@te(t=^8n4 ztiXPrBVjwrklQ{gVc1f;h2%M%A2hbIKnSZbV^?m}hm7PCo2Wl9`QPk`3e+uhL5p>J z-rRail#`Rwct9!0ozzb4CKFX!_=`9w-I2iWUk>o|2UT#dzAui@5PFI zcN)uU;|}zq)d@C1D78Ss#i{x~5&NHS_!b*v4aM0{jNv`9xzJcwR~PfSzsLb|xQ}yk zpN1yN>xkVf&yS3KQmxS2n0{4r-|wK)9ID{zdvLyuEEn=$q@MjZQ52Zit8^0t(9mow z>BdCbojoW33S8Jxnu6g=jxgL3u3U46bk-zsyF;3;IZ~RoWWd{4#wQ5p-=`P+tlr;J zwPIG)7*3iLZ< zTY;M+r4pukS=j*QS#{@l&pFUYI(~tX$z=CI-q-XOX8>xjj`>3i{D09X5nw~TGw}B3 z3Cf>}@gs8yK}$5jf*_6fL2g?WzjM5O=P6t4>|IMx1pule2?)GQ;+<9SmnuVl2tZl2 zeDj?X$BIBKq~`wi?7!4dc@0Aa^QlGMJ>$!(x;i>7%Ql^(69)LS2_n(d#*xoT>i9sD zo^WM+o-WHjrz6A}^{f!cZGARst^k`m=vpx}&W z4{@@Qf2c5=lGh`mQS9I{=-lob3S~{RaU8P(JW~~Mo#pE6QJV{hHBcjt2Gq{J_DWKy zF`%){2J$6&YNOmh!Y&Am&5p86zu#R7IcabP>GpPj+~jMLbD)6WjHUf z(6mE5nxEq=letd0y(W4qB>65h$(=R1C+!}i^V|!Q>nT;1`)z_N;!%7S#jV*y8TYf^ zf@sFgVoHCuF&d}g+vSdPS80kW0ec)r%^r_BD2VDP6no?TXle(ua2I53AE`GKbd{rL z5Et~j!JNECL>Lznp&YtzEG4z2-sTpm!F!A5xtl6>mY@Iw)DIODcK6z^PB8Jf*Aw}- zY6S+rSMY5GRDv?#i0RD%iOjY}hC zJr-(TAJhyFkC^_6&Td_UGEnt5gHHScaleevVQJ5n9U4^Jrtb4-o?A=Zv@(3ne4Wk% zbtZc@&Ta3^fI;Ah{L(tb)gTEH8W^dVeLQHMr-f+iR4YD!0F?@7<*W)+kD-n1c!!r+ zGVJC}M42CPw;-}_15HA>!3I8w39BNIovTWaCi^Sv$t-gtsS?^0Adn9;&1?SF$|EtkL|HCP&_ z3%a7Z%oQy}&S(_zyRH;?8n$?o+`QFxW9j_dK!J~yLcHsNB$(`YQpZl!y%G9GG!&?EZn!Cw}^uHzk1B#cG-}|B;%HkqR^aMOFHdwF+@%l@dS}|em_~VA0jBzV!Y?`RFR$;9XPCi7RSix zTQcl=w(6YZF0abcqe+746d1|8rP{MV)suzc!W7lk{bo}WLnR0 zbn1QlMfB`JOFxStpyP71wBuzv*rmHB%ursm(~Z_A>AjeDlJCLN2amBTrzX&^VP|ez zm<9MDrQjan@{!;D(?tM8Yntrr&}dRs620V{SjGA@0gxEtaG;q>&wDGJCH{$8H?57( zFyI}8kq3&b1ud4%EI-z@+5|0N&2wN}uiRHF;h5)pa`d}UC1LgMqLsbFRVCymlG<~k zvA7h_O|0TPq_b5mi+<$*{ifkJJp7nd0AEeQXnQ&t;FN5- zTV+)ZI$ac5=lKD|7s7c+fT3vn{ujk?!jg)@bJs0S|Dv-#kRqr006kN|-mydIh zMCCBY&Mh=^fn!hm(#$0?vqOKr>zFoMb3{&%yAQ2to-g=ER*JOvB{k=S%fG5gLvAo5 zVe9ojpv~`q3xLf*P=5H%bMyYVTUWB*mjmc;5h-m|kt|3RXbsSEs0=`vm!N**Gary= z*0et<=MaN?GKRWUh1341Nym%1#s7Q{$|j^~2K&no%-e#IVE$<(#Z#T1+!8Yycc$yJ zA+CeJ(H=Zqh*%J)tmumq+!egI3*^=vG5rk0#9B3=(k?Lat#au6cwEIwkT=ON2+_(i zsfr%};tLB>+HLu6jBY672&feU!>r=DKytK-m8J&Jm&Sc}DqHjINXb)42ehf8Ys{Pd zLzAIr)>x>-04tc`n#0*Oxb=acZEsX6OV>!pOg?+|+d$Es2Z*~qLGTm1KATUU#uuJE z@g<=AGN`m{Lu00Vf@%O?Q*e7G!xFB|!bMnkn%jAzF)wAg2-L$pRP&IEP@R zvYTV}okIZqiUd|5(5_Q*ac0&7r26=#E(kh#W-jdTz-I^<411X+U$lwA%@(xtq?Syq z#92qzY0yGn{GzYh0Kx}APe)np5qf!QeEOm7u(LuT_5&X%x7IuG<(rE}ol@|MmwPuPzF0JFIb$ShHltCT)0*XrT$+_nUJF_W^aA>a zXU~qARXP|1yA0;IUs~g{kgjhuxt33fiL0v)J#bSc6$3P?%5(2o2=ZU5bxO;sh2Vl*Rlce)3;JR zl~x`i@dKwZ57pw%QTrA9E8MB&nqOQ>tDJ96N04+(hk*j5Q@9&^sp&a3{ zv$~p^tXM48g|6h;J=9nUg05^UPH0%i2x(OujNb!qqlz89gexAlp5%}U&D#57U|QRqZAs9GFqmjFmtHFe+o+{(e;Bq@Z5q&QO->)dt#?LVf6};Z92+&Z4JS6m$xP+b+=yt@kHnNG}?4)Na7YFe3numoDL$ z`+BlLrR@@PJeUtef}LnS1wrp&`!2C$MEq#6J~WGc5Dqk2UzRpSnP#0uRX45R9x4&D zx<|I=G}o!gS+ViRok+dkb>&lvOXgaS2E4(ycwKuE#}V(j8s19#cHypWi92;KKR+yW zK|>?kF%q5*euXRMsf)1OxP9xjJv~z}2O`WgCK^ZtBx^lhE@qA*2 zhZL-aJ3tjXO@(7+EELZ2x%cp~m8t{Nd)(B_>i|+(y&4c_)@|tWZ_=8RmVh~ z%UD61urB8f9CZ~fds^9Y!I+my_6XWQczATUI^NNJKUvpg{`=Xr_GmtB$dT1dsgf0^ zF-MFzE+_<$o>g{r9S^ARy_r!<3iG_2I~AC&$~>@kPw>g>UJjVb2jkrxIp%@rYc>@r z-J@!xN1V+Ud4m(yi+pN?cUx57)4Gh?1D-J|+lyWOPUZE-Ebs%9KBtMh z$&xvFn>g4%v_PDn{yUah7hg2zSRRcA?<>V11WmDhO>HO?2A0R)r zTT~0lJjU;d@nnAWz0n^c&s(v=%XbNYOEV1rmiJ3KV;(*Co+;bCu|VDdHOZv*Zq$Eu3t=IoKOnd~8d zv)L&C`_lXl91`zapQB-?!yI|KyX>m0=i(e=b=BaFeE7Lj*aqA#P1(ZoE`z{}%T06M zTL&DmH!lng>pfYWk|DCFr70O>^P#5pydssk587NhUJL+;&$A>I{>hcJfLnMCRXg<- znH~6oCzh*X!W=uB7|2+xbAIjQw;i6NPU%S?pD57eF7l1H!L(fj_Z|>t9WO5C65Y*N zO1V6BeJUc|_Ver1*#q!92lry%olI3u1^ED__O(7ieH!r^;PF`94@A zv;a_hHt+QAsB+&ps`KI_2x%9{6rsL2xZA1Cwz?%EnTE!k`W`jAI7*`E>du`8okZ%M zgq1V-^Zo?bGiwV-SnG>tQvQZt!C>VE8vN+$c9qZj19sD>;j(q3PtVS3rk>jDvbo-i zcQ6lThUyC41+9}-1_vAK=cBIAHK5$d<}Pw+bCazJ^nGmzKY(bd6gNLH4QTP!|B)Md z`V`b1)&zVmc?LL3zZD=*yq6*|{u6-M*nSAhe-V&TEe=gLi9h@yS!FwQX+s{y)tcMZ ztNJp%0;lCk$2~dFTLrPV+7AG8N5DWAZyBI zdY6?HzBui`Q zGKY4d%#Quq_THE~&O2rxLus#b)s^hFhl5g2Rgq`97X~J=lB;3S7w@s>1@bd2MN!`0 zrloS|apM^|p<7~+#>;VC`5Hl<6YQZ=n?lQ*Rn?STVrMX1as4&j0$gbW2i0DVSn_DpjMFPZmeHord<=l@4Y)5E=<~^MJ ztM=Bd337TAUCRN5Zf?N45=ZOP{0|xq@@qcrnZEgQb*ViF%fQs6i}y^uugtVJGi`(KY<;l9I_SQ9>HkJ3CZZOkeWtu}+(6P$1a|^)<%= zR_16v)!H!zzNQsBvE6oiFhm818Z5G)X^^Z6fqrFL{Jq}4291uxZUv1UXL-k5@{r`y z%+sfK!o<57h$AzC4JWzZ4cWyBwjZTQmXWV@=4@M!S)jLm;4`))yk4pQ+Qdn3Q)8?mAg%~%ADV?WG{RbYhY zj-KZ}oh-(@?)fSgO4M~FynA}nZ2U3!{aq$fI%+8{`b zP7f|SOLAcjAKNZkQ9@LPNlA*judapyWMA=WIrq~LwC}4|efBK?w{<7xqr@BY5_(T& zT+~B(#e_6480%!gz9dB^<7^g9%roNNyqZPCHL**K+=OEB7_0Fa^~(VU^?p~%*X6%z z3-O-V-7)eU7<=Q%CS`K0kN(>2gIP-ze0G}=__ICAG$|9)yd|#N9{Y<^>OpYLHH2s= z7<_wbt)Pm}`^b@7M`Z8ZRy&F5a;R9EZ@eeH8N}#H{a7BmRJmd}-7>J&TC)D8T<84e zsD+Z??7QQJIU=4W!ybbmPvg@isxm6?>US@K^u;sMHP^jM)r}+yNt$-g_ORB9nvB0k zHb3>d#rbRxGv5-COK*}Oh!2d+wTk&^#1PidcNO3oG$vseIl)0$xCyQXcU?3wdx5XVw0rXE|z=cg`!gjj%=jEG9V28+&bb zWcy2cxjS(!#n5XwTyD)l+INNRBO67FTA)EBF%MQ3>(Wu(w2?d4lXJ;d>c(^46}^0= zNECO{Hf%#8(yp*p+TecOLEH*@4Q)m2roft9o8g1sSH&iVJwAx5?U?XQrWA;sb<^g< zb&{DmACuuesT~O=N@O!}`a;#u@$!Ph!>=kA6R47`NcR9a7_zu#po7ETT??7PTw1OP z++K+Xd|+im(&v>kOZ0@yr$L zF4jVWTnSh`;Yw#7!EvMzcX062W=26*-Ky@2q$Iy3IJgF3Ef3(Z z7L-_|TBnNN>9~6UiG!iTygkEJqf+)^lHdyTHJ=ao#Rb%A6Zcc2J$`ic-^MwVy=)hL5H=5-HQXtXiDUh)Q|w^ zHoIma>|W(2$_BzbQOZVDBCc^7$`W!tF87G)l4H|NX(}WM$#7%oB1|PYx+k+v%>jAf z#I?DjSb8d|{nSUmgnFJRfQF9L2$iEhzD!w*lCV!!mN$CP8C*{4`TX-rEdbl5XJ!JO z4M?9w2gIbwiF77SpJ%95b!Y{jJ#&8NEMOC?@UE)~Lw^uL9_Bg2CkjIyPglI9B-2Q7 zjOd|J@ZL#pDTcAzLx6S#4z-H-TF$!NrEN2GLHoHNjdLVICUnXfOH5|>A~>8_Ohte) zN!)0Cg!u>mK(}zvoUF#>u*haMBdKe)&3roD^w3`n2 z8G^ff62x-x$=U*>Cl=zF7mfk#u#&4XMb8d-X7&z^^ZM=X-$Z-ZYD|Mfm@sH#kQIe?aXXz8Ja~q&h zQ4{9GqG=)4$j!^;AJ_eB8YRRv*oH+%5**u$Bu0t0@V1&Hi(RmB0CKlt#9OIH<-j|L z(ORP&y55GVKaT-s;yorZ5k=O?F6jW_5l2D|2jvi0uw9KKu&r+nUMrGKMc@p-GQF7PVlS=xw0)h*j92AN-ab z%5yXs$Gjp<aC`9?E&XM}4F5e0=vFF{5fU)USRI6!rYoAboT zLR1MdpP=GC9ZW*i67`6!y~0>(@Y(&m>^rt z-t@@gL^~=Ilfo0Gws(b_V3e+OX?+o1V-|1>>_oOqD-w}a%Ldw86!qlLlvqM|eDD-k ze{(IML0@J6Z|sPKfw8~02H?lXb23vi@86wQ6tq9W`7pjKW5B}CX0_b4m)AaKz4}uE z`L!n0%Blu>)ZwtL$`+2sq$Sa@j$5k*!?d!TXQ~&UrI~U# zGg+}@$0|)w*xZP+gW=L#KYoj$6IwzN)i1sCB6v(UK^-c!=lTlfzoEF#E%o$s8;aRr zsc1zPl(R1ACwn>y8ZN90`fMt~m2l>ppF?S?UFC8i(*?rmN{M}PYY~#m(PFqBc7<*J zw3JsUVqIc}a_#psq?y__vu=?D8m6{0*%!9<#Zh+MteW!7D%QCQ>CM$@@ui5ytw3T$ zUFVuad^%nsws40E9zYdpt$?5?0>a}n-6R4tQa#zDaT@C8(4d!|l$Gen_-Z{%32>5L z_%yLbsv*orxksvclXc%Vm}gnY=pBO{JJt*d{ZMBzojfS(P&a#L<#ad}jEgQ8!_G_; zKbqx(FRLJf2avO^Dv?A4)aNqrwfS^?XHoEtA;+)BS+vHomGyICfp{~i?k>|{HyK7K z8@+(WHp0&=(`PKQI4BO`7RGJy5Am11^USI#+7&x zrA6I_WV{AAG*GG%AADoAJ2oVHP@RBUG#9V+pwd(xqqX#^-RvhBLzxk-3P-R8;+1=1 z=6NNMCeIyDw*G5BM~ndZ&wLVr@00fB^aA)nn*M18^`1G$D1?%s$ju#l2!lN!!}a1L zynOQ?%?>r&ap<$Vb!RHc`ScYUur)GTQP@cmhxoh7?Bdev=CTG6%MFRxvC@di=a(qs zmYy-po%^A4c=IS0C9xnh>pDd%w-Kz9y^)uj8;eqeaLj?8`H>%VOqeileKw9A%wrgz zNZvoT9DFC7kuxIfF_*6m&NyG1K(Z7EiQdC2Nsa|MYU|nZw&i`gZ9So`E&ZZ6&3S_7 zL0tQpY_F*@lXaE*D4>>`Zz*&pX5Fn`U~3{y(QBlGM4v(z9mgSd`aEI%0VwTCz8K!{ zzCCVzvsf&wUdG;k%Ze~|96qr=c-~S$Geh*iTxZFxY9^Ms&fp(3(u7JfQ~=3%E@fZY zBe*{}X=K*^Oq3qZ!=Gx|N>YPL4!Wa&d_E5ke78T2!zkA%-{q0B@H`~vqGW5&3?9!XwZ z=ByOAOpCD1p#7Ji&Xi*YqE&|Z#Z2+K3&b?7R%$GOkS&@G$%s)iEG~7`vwK%;(YzLAn@fw@KJx4s0L51 zFzEM?ArEBjoj7kVA6jyEjvm$~m~zaV(kVj+D@~Md<1pWHOmjn-K68`f*yu$mFtK?b z=rp@)1OAq7BoN_9l$buOaEfZ9D$gc6XGZYir}C59qkI_(WvwL{UkCfN5T#lJnA3JV zPnn54H!xf@Nhn#6&OC`{@{K-vhE-0>wQM_>e7q_Z8)gL^R#^Y$Bb=k1;xt4)A+v4d ztyu?X&E20F(Hp?I%XZ%2!T`qCYuVQEWvw>GKy}#xO>X!%W_hFp;+89@QUjI1jagIUBZx<jaFK z;2VS=_Flk?IPkWQPwbkqDb8*3CrA^yPtfhjA;*YiJ9-L1rSxx8j*%!jD(c z(b12UFyGd}>~gtI$)uQ`JCTyXPeYyn$#R&iS>O*XV~->zs{zA_bh|2}Iy7Gh#Nk`y z^OJ)&b)`c%Gz1z`dQEr>N(%CPZSqRV8xmH)F@t{KjUT0CL$WM8hG6D3r^k7NU=s4L z5#0oQGpThR9Dz6&e-)?^^Rt(l9M?vV?TR_(aUgat)k$-m*j?I@e9VskR-~Spo;*Z` zD_Dp>gzN1G9wkngG99dTu+G(Oz89qDO_m{v7iv4i>IdE!TJVF}6kA~_S;2Icg`|OIsy#uZypfZWQ>Qf~h7;}XwZI7Ls>6ftGpLBplEHykOn0!! zv8Wjg1lPCT+K7xBToetomW$M+m8Hn zQP}sw&Dp{FpkY>7rrujUk?(K{6z_QTOLY$!`({ulK{w}ayOd}vvo%2`poLMPJYteI zFRY+m#*E(9kJW1pWC9LROm^*~QHTKHJ`k$P_PPJWz(kPBKue1SAzAv&EY4@W-+-}( zXgvER)knR0a|<}q;y4S>bAcD5NgZ^%WVfUJS2{3uIWE?%|=bWo!=eSDJo zO5!Z8thHb0Ia$4JH&hvC-ab&~-2YzT{DEy!g3U96kRf4t%3wV;)^5$!bDH56dbL|w zPCv1Vbxn!>kfG?^Ld3f5Ybm}dKmmSILBx~)RFgOBZ ztjOW-Ryd#_Iwf;15EUQRUZXh3D;0?tt$2O-_MXL>u@AK|nGYXmdR~G-^RbmkR0A zvBU!W%qpPughda3XNx}Cy#l@k#Az?v|CXKL7$-ZA>eC5p9cZ27E$AIB*tFST@>#`1 zL&sAZR#V-ykaZI;xHCXzR59ocm}3Ad#42pK${&HmgLIw`$lBgF&TK62@_jwa=|+hQ zlEfI2QG)#T=thq80_EbM9YpOWg|b7|<2*;9H-+xKxgn*Qc0JZ!vjb(JAYn9RAnR~j zl86CFsq$K+?MiswQMjMmpj>t2>V4tRzXVaG@2Ya; zM2E9eB0CmA({^^3Xpq+76-^VACSyB%yn7o15~udu0pn1|6zfq+99))kf~3fxtYu=9)N< zVApJwHPzh*EE3)~?UQQ%QcQmSZ_{m{da`;lngL5%{7%SE$*f?%uYmQl07rsZ=Nv4q zum7iPK4{jCqnl*ukczP0%xL4k7>Sw>kFXC^k!kW%!iTKfi=^ z8^wR`{{&!L7Zx=_-c%xulz_Vlc1q8o^`RC=P?q%z@jQgFzLkLv$lz7Qo2<9>#!-Yl$w2%7# zS?teJ^f9t*OG-X-7#z^;f3L?%vMmfz?IY`=0`Ouz2Vlf}nk4*-D7g0jE&P8n5WgW3 zd~Hss17FROEuHNZ&+sN`gF~DO*92rr7WI69P5u?weWMw4x%WI^ZpDyqLE%gT(;T@H9% zIE;gv13*sU?p~O6_77Jxr44&FgsDVhHWAyl5IW+;2UO{w*y#?o7MBg&W>cW2`4>_i zxvd3Yqv_6C;(BVbvn}H55#~q+fNT9uQ#?nQPv!%ucuzc@V)u{i{kebqYDj?Y>a#eh zLNY6F>08-nwcoSg2+FiB=l&+^Xh1_k$V5S=fGrxM$0-ZAYVk>6fko@EDiukdLWW3T zjIHh>d6F$g+)=H-v2$&n6-1PJ55|7NN-sNhg!Yw4$3BfjfAr9N+Xu1gOi2k3uKuh* zhMPF;ExWsoCUUS@k0K?m(|>P~`8J7Q#-|?I`frJRn(jNoJZkWS8R2+E^x_k#r$CvM zwdU77_HWePxg0nEIMXZNKS)i)y7kw&#PcFX%6Ukpm5?2Xf>ZwT8u)l+2yBjFjZK1=So|%O>2YUVmi&5CK#acY6Ij zlE26f$iqMJrQlh^gHC1ot%NKb}tRBi)q!&Hw9pfg8SJurS3C zvUra>Nx}xJ8NZFAS(kl=FNZI$k-s4I&0ax%nZBd;o<%foHiz$#Q#-Sf9J z9R}Bld#8|p>R$+{=m)GKC4J%8OL*5PA+N=AQ`q=H>3bc6E0a+)lJ3^2e^?nB;5Xur z@iG4W6TkS({!=8fyOVh&Bn#M>l{v3%HK_;rb+t%r(!O)1q#`HLSU~HWWe<;8JL2=1 z?PZA~q{97D^)8~C=N9YYjRiVPd<+JSMq{TXjq--)XTO?(w2nYMxMLm4d^-6?)BAli zb`i_S!;GZ#|v==&NC&|F-Ne~&8iW5 zDz+Th{mUV0>OHM{2U3wTq#KyK^hoSY!6Qk`KQ=?ocrFPwCzNe-MJsxO#$7iwW9If{BL4efJ%WZzk;eC}-+WifnzZdSi~E1u>c1e3RRE-V7awzx zJ!P&ib1d_Iu9}_$4BeuBT;b~juRG9MrQy}LIUj}6+-U7yfOt|qm>V+7D|{D7k>5ga zRxaD+lr^%j;CR)8Cp|qqO`t%9y_a6NYV~+wRiCtPr%DZyKC0@n)?@K!KVewAlvM#D zMfSHrqt{=E>~{pHQxRV*-%;%@?d;Gm>Bv)tNgbx#CAW-X1!Q?wjnA3>!hB=pl#)ot zDpS`ou5I6pt9sHUg8SE^4~5*4$X!0=l2Z_+cT?SuvA~ z?gSR5ZTuN%nk|ZZn;F7&0Ye-8^URe6gYL5S`x{4I#5imy^qiSg(funv1~Av-ogCM{ zX;;$^xFv7-{KLA7nkS{0LjfR5p0^kLzO%oG^?C7*OQP}8<)!Ht;6QJoFZC8QS^*o1 zecQk8E#Wm-H47p)D{V!Y?1ynMTJMZfFlf7>_It7S3P>NBf|1yhAKAg4!2(=KCGWx=-vj!W=KZm6Z*Y|5JM{M?pQ%{y=s>M5Bs$My7>rP^LO~u2e%zxt;7RWLZXC zO^xG(xY)&LFRIpbq{$841VOtiW(@=*-z^*8?1M@h;85Ps(D7YR zFn0otavFE2*!yoh{`Cca5`&3Ow@;zE;ADVFSLlAIaV^Kdfs;=+zEKsF$u#~(ya6j@ z!o-Db-83_!8kKebEpZh|Ey^XgH{RDlN6ifrrf)hOu5|kwncPdyyPBVfmoSS}^jQoS zxRZ%0V-DCVJHDLfNrvl|ycPC`phyK6a(>*!?(d!X-8}**?~~BGBfIN z0Xt#$XuD5GfMNr=`;p`3cn;7z9j;{3#h}-Z>rC+tWelMEz1PcKyGgO28`ka1k-qs~ z0VvqKqzQ=x?^*%dp1X`*_tU|YZFPJLT=~`;*LiK{-m`H#`pgJIBD$ezwHlhWF4z8PH_OjPnu z&uJXx3>%neA3b)7u>zJbuYbgl|A#y%lMM``+s@yrxhKtS`Ca(3oiyPzWd79h@YmWb zBF8Ig8In8k*xuc;lYFPxrFTNROFK90_W*#QGl*|v@5b4w0F?w5M~NNYJ>75CMv_Rh z$G{6Gzt}wnid1JRZQHo(vwsHm>&M&E4O)b_ZZ6o*XOi4l?p=F`1dNhKMwjUGE~_uG zvsT2HkQ!XMPp={J=4f=3N_0J?`0Wwmy@Z+#!n3m1A5bTO3B&fkGGnd@|FL^!u=|6h z@nZk2^v08pdz<(3H=sCCrLhQ!)$6GbvjnU^(Y8!%aErh1vkQsj-;ju#>8`sai|6t) zIWdFMAq9+nv9Fr<)4UBwH$Ykye00mjoUjG8SbaTx^AgaMGFbjs4iJ|EyHN4l4`|gy zDzQ0jPZRv(DKbZj&Xhp)by`tJ{oVwB4_J6rg*`Z)Nlp$$I#pWGc6}wDY6~j3ua+gTt;k zWR9E$+<3+NfF9`gyZidylj)HkM^+8?x0&XrzL{!MZ50^O42x8i$}3hft5#gD`2!x7 z2G%BvX2+K7ZYd&7590<)ZMbzP>DYH^zky^dC^w#u&zbE=xYFQX{%3K^!Mw= z+aCj@Grh}$G3kP`oJ|lZ(8hAUjo+N)yWe^$w|>?o*-r{u;w6{0y%8lBmDRM+iD^?x_xP6v^o#!% zbAT5p7D;9Xe|%74NX{J#xcHM8xZ;?)y_W=}b^#;&CPMz2w%rS0w>_PRhykgGJfwu% z8sZ0m#Dj71M@Urfyl_pnximr|7P!KAqjC%zGtW#SB^M;tUv3mRcASZOp3(0-CUz6H zHmo+k^lh-HYd)n<=>HW9=qEWkg4{yhJkE_*tXKN1nN~c+_`bz3^I=Z8I22*r0TOSo zL@euTl=^Q?ug-GgF%>Yy*VpyxlK7F9A1qk+C*N4)wSu~4wr$VZd3bDb#w(&l`{*WB z(nrJ9gVjO;SIm&Xw$I>4u{YkR{$U$PeFrxkAZ&4Gm)3uB;4MJ#P!s%T+dZl0%n5G2 zf-uDJ|CfTmgGTa4KpXlzo_^YHyAK56CT;v@iGBHP7RTaj2TO4C7M=5KcUa`hgUx7( z)(3IC)uo6>Ghd8T7{#@zxpZHbnqRTyeYeuVU_SaJ)MD(TiTPyqwK8avS-LyOg_%#> zkN3Q$ZJMi+BC*Acm|rxaf2A|4snPW&Kedtbiwzj2utyz}$^gxl7U2AUQ?`@<$?;&u zq`RjAOZk!*Z-meNm_J_M`=Q&UAEGmOWqP|8(7)mYp?`+%CrI2Lvond?8=Z~|R`2?> z1C!qx6oj6Tov*L;a_2l>YCQPCWI;)JkP{7T^XCI9lh^n}r3tI2e-zdl(Tkl_R3gJE zouk^jDb=V4&il|oIrN|4$OkHK$T0NgFNS0#8m(j-0;pNf2wNZ#DM9 z(0?31K?G{0OL>gmGF~&y#efNLVfXj zn1ts*)y$4{vV&OeC=pGAG46_C2Vmx;XszXr5&_4C;20_ z;c(hr(veC5Dq80Xg*om&k1|P0HcP-VN;^sNe-5&`9tyqDTdX3*=@Q?NF<@FiI?H9A zGc2v2^j)0};yNWU=WPZ`a{@2O(?p09%(GjYWg<~c^>OD|7HQWw(JDXyf&}tGsmebh zM9g9UL&o~~{!PyRLAzg10xAjjxp(%z_nHhSMxdgN+NQ~BJD+x>xrjLi$>nA83I}s@MoC}U0cxR;O36GP`~slAtB*SRvfS#LCh8% zNMk~|6+dw%w=fqrm%ACXyaojOK&ifvB=wN6^QO&V+}g{A$F7#GfygsImS!X}h#ZF0 zZ)=W9126J2@`VCh?jNN7`~}$J%mNrsu!l^fr>1bQK2+(VvrA8YTO@%2#W(!<`kuns z1m8I;bN%aFl9OtR?&AXEmt4b4ryRG(%usQq;nSaYPMUmVmfpSy`Q%y))ubcRmxiP0 zU~#z9J}NLg{tgExXH+$&)&w;5KJfahs0`k1G2N=OJ3rdJ&ydxQ=|zHT-`&wmzI*JDs|lfJd5010)?*pR09^jUzYGnsA35T zer0jLK(v+_V!+a5!uE-oxQ3*RC8gq^f+VlxX=~}m()Y-COf(cDN4yRR8ZobU&G8T#!x~iJZuK2LJ zKh9<@3l8Cy1Sj96s2%nu^$1*pth=M`AC$IAl248*x~KmB>MwTa0V-i6+wEJfX6~4o z@Su0qzxX)=W0RGNM#b%GYQ>7@^OQrdjm8HW*wLcK4&CJeV353i=27f;u>xM<8Ra7S zm%mY3*=W^e5oA2mULU=$SNWZWR>W3ulo7-|ip`7atn|ag*Mm;nVI5gNbh0ShOKfH7 z9b=m8+xFL7YB7e`-sW>tB*t=XJnfANNI5!u)@V<=e0vG(Q`GB&{NB>elQU^ucxmYD zjwB%c!z@X14@}n;+3sS;?q>k$ok?0@JNI+hn(p(|7zdzIG#FgM{!;T6zYp!gcU;%? zVkVQ_+7WDpZMX7VZ-G@jYg4ETXjizsF{s0;n8an$5l=taBO|FZt&DF4lZ7~35S#kO zj70fSMuT#Pml+DwHY>K*)}y5fy80u60w$;NhF;z3M)-uy%MpCStT7B(kMb4i=G0P2 zrww?{y1QS$8Iq@NB<0=3-KCu)_$`p^(L!POy+~V=BVc2=T1ftX`<0V+Nd*958V0Wf-e8PX@ zo|FVhU_UduAHIjuY9tSMO!7U3y`?{%CgTC)(SPt-L3OB;B(Zl~Z)e`Oh-H4a<`Yjt z7~h|ZWoMPoJjya6oXiXfrM@AjS05B><6m?Ajhz)KZII7uNr%t(V>)vd&nA2`X;?vY z5dl?95RHe%@e-NL@I*>tL~|;Y$v!y0yFQx-^Snx=ef7g`GgNT@*t&T za+wVp3o=nDhRn9B%GCAX@`-Vz`nUHd&YjtFxj!Z8gWhIKd#2IO(@A@<<*y@5+IxvK zC%H*W11Gct{?wm-Lq=)@0220D8&39lyUiTLM}Mm41#K2|Ks{dp>bX27F@(n~+}0r4 zBu^O0aduO(tJ3?hO;>unz5NH{kzeAk8UqLNATJ=f=B}09-*$T7+jpL>f%yj2cM@-a zT(q8^%8?-PPghFPPL`4AWj z4pO_w9mX%F*kEecqscoYWv4ocdUql`c&LK4IOF8NfP;(PCT|Z9giD^mxh)dzD5A8X zx=CN_4P)4=V-499>Bhcw7xCF-%gWr}@4v;UD6pq{-BtlYVs-uL*}bKo>X;5mc+|q_ zcM(&{mvjl3ZL_uCko^nVlZx*zG{Fi#H;GL@FjcE_3KAtbhd(i1|1A}_esj%hMQRq5 zi<|}ewQ%K}FT|IggZ6Bohl*h4k+g>-yZD+c69?3Hoe9^N==jVj^ljqGzrA9qV#KbD zP>a^7_OXMwGq@jA^Bcq0inLe42+tB_<6DA{9>FH+vhShtZ4=TVH=du}TiQ9~Q<7O} zXkxkN-Dl?ls2o@Z6$2>?e@Oh_G@y5eM3AS$(7NJ{H@+0-mqAv89Z`S32v09XMD8MXQvj2ksqLQoE}N&T#N-``&iH zlAPNG+xGrW` z7I3JPFV4m=m*F@Gjpe9-hMlfoCQ=G3W$h)AuD;oP-(tE$?IKq?=Ud$bj*%A%xLB{UjtHs;0MTKE%_*L8hOa<2BW z@U~G+ZY)?a&B98|cpK&MTgJ#f0AVk^uX{eVlOh0aF9%OklS1Nu04~x3tm_?`cH3L@ z;06~4tBCl#XVCunf&qA;>^rgxRdz1x_%+~|wiDK|P6PhjRso(~N|lMUtQ>{6ui5oj zdvm+VvBGwBX%7%Sms$m+O+dw*rby+W-%eusFvRC1>9DBfMh0$KhW=Zbov&FmOuR0E z!@e`E)y&r~Y-7-jG&%8!zUXn^N<1@)&3 zPGZ=?VDM4L=Tw#^D7ouW@a{c~jgz!DwX5aYnHhRcD}6kl zIHqcC-n@SE3R*1DtFe_574AD_5PzlpR_WX$|E;$R3UC3Nfgv%4QS`9eB0H&k17zo+ zQ=iF_NkFbCf%&ch8K7?_pXCAy-3Xm}hMmdd)Zw5_EE^cokFHI>4N|nDg}tq_E%9ZK zA;Icdv3Ww8fZ>+;UN7rVR_LM+vrHT9K^jiO((HJVhgQUsTEpo$Bw^z)lrD|`R)==a z9?Q9{$qcgmsoN73R;Zha2VFk5oK@E=s#+)3E8h`OA0l8GdU zwzM24)VW{0X8*kM)0^=12UI=NuABHp&{?!)!Q+6QchJquvE}>V>*?`W_sugVo~^lB zXNx`863%a7ik4$ov^DcywF=B7`U-08N3O%<(GV}=v>Lrz*kPHX)Rk*1^57VKyqtipXanu&f)u4#S zVx`kY<&T0NjMT^_nzVl8OxNjXBi_cqyK(1sb1Qz9UCAK|XZ&4j)B@b@9uu-|03Z635opTEQ1=w#mZWtdOHFsdXbwuKsBQ*TR zJ46-Vv%MMmW;)Wm2u>W7lTr&$s{%Ap^89qk(C=OV z?uRO)wBCRTNX|dTh6`e7jdLVf)q{60 zKt*~tZr{1(I?%d8_&HSPlw`IWE4qU|0HqxMsHuGDP4 zWbZ+AN`YHNY2|5id|2-l`SH|qCE`5L=i#9`{Q_df5Bf@j1?)zK1mqo?jX+y5d2iQD zi{8wct4bj0%AoWCi-iS+-O6NLW3-?(GsyNnMDhc%$-an{38ls}D#*SB)#oj5S`Xb- zQVJjPLItSTI+?L^_4Wcg<+HklgZNR{HtiTQ!p;~~_JPUZ!$BNeEnr>haPuF5m* zL4Wb*GVu}BEM*3p9&7v$i!OI`I5U_rE`K9iE?k1sZNP@D-x1{#a|@*mh9F(Y(}BeX zBDOA~d{@GO_wQw=-m7Xstr0!+lR_g4jL*6@;efU|D6QplUpgP3Ra1R87Y5o8DpWbT zy=p0~sWGG!`!3Z_s+&r~`V&w@0-MWJ+eS}2FySb}(#>!5o1ChbH?)hcjH|kD!Oqr09L})DhK;;ialyYQ!HPaQ)-GF6+P4U>h zhVl5fo&B}xr0N(@>BCC&o=^V5SX1mAlW$USCmwN`8m$w`(p9N;Nv$M<#rCxxUUoa} zc3+`Up4Fq?`pI)CDw=dGX`^fB>O@6Q>dAemhsc9ehLMof8MT(snwZ5D9}656iIZ3m8q4XAExH zNstj-SFS53vhZx)74wgug0V~0n5y+6;q3YCZ489hbzT(lQrcCkEbP39I$?XcaXqzR zEnNFVeNU(nbf+5&o}J*Yh*e^Himv===M4Gu+nt- zFp#+lz0$e4V|hpw0UyE%$n>zk2pP1#qO*bFn~4$VBNEllf!JDqwMd=>KkjpA>cJqXl01YAtJ`SsxZ5l_46jC%pD3%vNmuPUFc zDW;}N>X^1_Li*tOi?$(4VrN$SUdVr_^X)fTuPB#1e(8FL;1NZTtXdsIcm*^8X2|C2 zQ|Hwl;1wcGB%gjgg3Ys&>v*{78~-|}Ar!RKduiF;Zt7H<@%HV_E1bReylS#A)ns3; zz3~!NJmUbGSv-1{*pO>qGJ!1N?*gUa^gRwty3|Gi2CBPTgE z*D9k_9_#NwT^ZJd>9H<(=QEj=c^Jal!$I(<awHZ$t6#dcu z4NQ4S14qB)ymHzmxAv4Qzk(Mjk-EXIsq58Y8juD*)u>v(=#Fx!@Lp-Jn6gFfvs__b z>z;Z>LC=bU5Ch-?>Wl)`k>}lqieg1!p`BI`9`|9N3LP4o%&oXh{8Fu~M`IFo%Jz8p zTp~^Om{%6B3;S@+a83u~Bn%AV7)pD+RNTs=JRCKbsRHFWA@=>vL?UykBT{*(cEgy% zPB&Jd!+3eH95sn^>TK=Ff%PXE!nP0fwx0o=Rb;~+Yi24XT0W}iMCIu?rnTop+C&oZ zn7TN`(4#0JS5QU~WLcRUjz1|+T1vjqa&4ZJvt z=<+K>k1F7H&K}yLA%5@J*O@n1j2KHUdeG4Z^iHdlnm`{?uNIL7{@8XLsSU=1l!|v4 zl1}=}ry*&ItqGHU(@2O6v@dc*B(tHs?Y3(Zp{}KxzMZZ>wnkN*o>IA(`aAV(|4E>U zc0!nXgrA|Z$R6IkboC&xM$Y@0o%?p0gvIYEHON@UfxdL<;qe0o`$?aDGYxrvo7BLB z?1kw)1(Ggx;D+L<*G=9j?U0J7A{IS!{ZPkz67(tnaRLQ$Z6aTTco9HVTG@sWNM2ud$K0-xwSQTvC zP>NahopUc3phj1aZI~rT`)(fhOw~$sYhkpvO5upc9&KdelwH4WSO?m6c&x*nQisyM zur4Au_V=4@44aes2Hn8a(F{!3_ZREM^5{{K4>bC3=`+{eo{No@&%ti?+L~SPC^Jm+ z{!+DhVwBkj&(LR~spUqEK8U4^mud}p3ND7%C580+cTG$9>TP3U3;qdfntDgdg6gAMlZ82R?~6uYDjPx`?#N6K?Z?2gs9InH-frgjAFX@ zr=Bj5wGrUyi~6iUt&o?j&w&x>lBbK-yEShDSt~nEE7~L0#x88rb^Fc>@0QJ+jg}K1 zLqg=^i7VbY8d)zEhD@!{!xs6NzN@n_a@cVNUfPvUj0v7Q)%sT zre(hsdy}jpXJ+iyj-9lA3iR@_cUq#M0i~;1ov%5%vpSy(XRY~=9CBt6;;c5uO$nDz zU-@MqFyGqAcrN~d3D}(aj*mWm!sd1msbknFkq|$w0AP7hPBP1wpC-}SMcHeS79@?< z?|k}m#gBl_WGC4V6(1*k78yYGQtsxB&fuQX<#f;I{grKU7fPooCT;kr_$VT1(r`7) zy%tZVt_JF(w`$~@M!HbWV>L%K;z;qB<6XInpsw^;ZO5YmF6(Ek?djgnSYvZOR(?}% zK4t=P`E7c#UjpB@7VvG$oU7n?EplRJK*lqOiEjSZV7(s#<}oF%7+T*B>O{wSaIg!)#l=eS<4xGRp9S4}@Y zHly7ba)Gra2)0(bU3nd_W!IPglCaI|G&iL;?Y`}6Owvs|Wx98~a;nk$;m5EvEJ7#3 zcl|Rzz3xAA>to;QYDP-?o(;PSQ9Do1__OxKFNypq?PMpezUZG__w;Ubg%rX)V)8yA zNoZ;MbfC~cXmw=j3lNt*C*Adr_Vm@jTQRLA_!*nIS0FMH8*J8_`MPc-zvd9vB`zd_ z11e!`qF?4<7k?!`)Zs7#v(>7Y5_y&+-}uoS?6PU6X#q>iijbznldZWAI@XS!S1sn| z`OKykRO6~wk)P!YA4fSy=tdgVCWBtsCgR97}<9t6kYW4#&vj5Mr@_4?u+Pw zd$da++o^IiU@JFh(}AKhj4`98&yK z9Pp1)7Hzh!{r)lZ)d&~!NF}BY-^AcPbP5q&G2*EJe4F-$lA`yYmf8&7sWwJ9)UGZf zJFQD-c);Kk5yFoNpb|LN=}oocJ1X5c(@Q!XTpq_CyoT^ZWgo`%3TApTka-C8;Fo`< zMLhw@bqKwHe^u5=T?4uxZ-Y@p1OH)=gAZ-tZbNviu*L(yA?Ik#Kyg%?RP00YVd6*? zGElcrFf`|H^!bTH(j?dBH!6jN8{5ky=ltf1xy9`u&PV5#RMFVW5}pZFmq|hEaosZR za^Cw#mpB0uv@oNg$@*n47w3fEDbnuBQ>$YZH4lpW8^eGRw)^G4pt*+Nxfv^ zH-{LN`5Edn~zu`y!vk zVY5g(733kaY=sX#_teO6V1!bwXES{Ivjp4-C;c^VL+_Aw)xHJLFv6Hpd_mQID>FP1 zbUyABp0Wk?svb-5>9F}ga_W{cq>+_j_1PeH=mXFs<0<|}-1eFIXA}%q@a_YWBU}Jj zi9ov(ZYa|j`*4^s@E9UPr4sZ|uVg$m&t2Ce^U_hz%T3m|HX3|8L2F%xU zQll$fPGfOA(UHJ*>)EiwDii+{ZNKR=hSGT`grHZ5ARJ0-H)iMM)fpihwL!BKFfGKH z`0C+84PgV-EJj(?opNW`&l+1wx4}mEnSi_(t=%E|HDm9eL6>`=>xX0Co3OuOrWyu} z$WSL_+HxBxsO)9C)W#IPZSgC=gen)rmu?R0rI7zc>AwO{eq6_{KgAin{i0{68SNO8 z`og|)k?;PAl(9L(plVH!r7z37Q=~@=71Um21HFl^O{pIXZ*h+Vnr5Tbu{Ezy>UN9o zS^=f!r=oKl*`Y#`oIQB-;N&o+sA|WIM=mKn_IYE9ri7HKR(6Cc2q5;sjLbln&K{Vv z0{Xx}FE74KJEyl%Ka6rY_J{l6m`DpA93Axtx~`Yn9W`xZ)s-fiIhgzqcAFzn-26%nU* zawTu04OrnG#6{Qvm&8rQ_#_HfF_WL3s@EWmAW@M0Uy%f=Gyt6YLu=MzF1kSLm_4#0 zYZjsRE6XepRQe%Ky2n`U_08D}8%i;^0-)RNTRKg>aU%+_=^6J&)Od?Z(YP@XeCUjM zn^hp<6u%REuva5|!wKKHZivj$kR2#Tedg18O#=WVbujN`AX$k>P%lSC-G4oiph|SAZnBc zqDG)7O;~3pjn6Q(^&tpycc;%-*eM$V346567BpB}G==e-a0Wy}5(FJD3<`Ix6vc|% zs+#fG%yE8LalqnpNDOv0`x^CtJR8Gau;rzbfUCiWT#>`eIg>BP>i<95zB``k zKl=X@Aw(&eNmOLZ%!&xvd#|#$5Hc>QM1|}z= zz7^AStrEvVo`mALgpO;uHMIF`8;l%hT>Bqf6x|L=@v^`3!sT~zEQ9m;c2 zNn?D$Pds=JW7OXi8FG=|n^K76vWogf1?W}_8{US^aH)i@%l;h$9cwRu_gcl4L;4(P z1xRHmxI6qaO9<)2z6P{)BfBf_wHKi&q{^h8E#~`rU7F5R51es`}7;#dy zJ05OR9UETZJ^%HW5(Sh1L)~;-QosMNdgH0z{RX-N^gdKQ!+w7l+XCvQTYS82$EWI0 zu>alYC*cC>U=MD$Wc(ytk{>qYst&eOR5FXh7HX?WevKkuAFWr`9tPVwl5QlED z`=9}$aI|K&*7eC3tbHj-$>fs;;kK{1RZ;xbeDuNSuQ!=aRL5e1qdh^WdFi|V(K=Zjm7^B8iZ$r`7 z>dp^DOm-`oTp&pZwu@~tOHmeRD1%W@7_QpdE(=2GpFgv@3_@JC7p*|^=W|^w^OKvM zZ+R(y0eC&YhNe4vrzL=2!j;cLxn75P`;*ZjkkFD#f4kqgU>`Q?`789x?X^9nTo?9$ zq!Hrp9{hUisRI0ZIYBpZ88mciz3Pa&N@!s4vnk>c75h(Mi1z%bo67v7yGlN@*lVW` z|3^QhU3PCHnda&sh}by`rAg;Rot?|HT_gm}zz)Fn$iqMr&D2D{g}IKG~P$TTOPWg=h`QVo!m8SUaw1V=i%% ztQ4rZj#%1;bS(CPP^H%ze?9Z~1UYJ-4@p`nN<2+4SddAL^u5Lcvu<2X9Tr!3y3 z88U5dvaaQOiotPNO65T_kKd^}+y|5PY*FKsmvSmp@%bl&=(4pIc|s57FiYUJ-dUCa5;d9&NJZwi|FUY~6&- ze$inb)x}z0eHiDr7xSy0{_>`v$-g^Xg%So)9^w$Yd2G`J%!_^SlnW8cr?7g;$A&;_ zZ#Ti+%(Jt^($P;wMKpQZdg2swS%r4%Oc}h>#@r~XvSNLP%4VkGl7BQq_1=VJ^so-h%_?A;3dP-5ie*9Sc(ljGBw!#+S#m6+A{F}ZH*3;xMDX;}CRd^Wto<+Untw9+SZsbN86Z=8gJ! zj%ZQNX1#(UvFa1#;a-pq3=ZiOP*hPdDok5S!hh~cK@!}E1H$OTQSBd8j1bK8K~8}g z?IizZ$2DLG34HO3%Fg+G(wxq@s(jk!*wd5^F)(@i#IFMX+0J!W=$tnzEYO*`rU`E@ z5S4x5zV=!}bE3eoR2W6gQv1?YpMo~F53Sdk4FIN_3Oe%5ay}t_TBfSG6&3I$10cV zE%Nk0QjB;zzx?uHkwRMW?ed}i7}LigQ^7;!G&-7Mw~I2aL}TUSfsj6uN7=nVC`0Sq#d9X>S&!d?sJ7mmTl$F*r@I>)jbLSsy1{pYj}K@l-S!e~bw*yP z-K{FNA8tygI#QD35%uR=RZmyaH0OZr&qcRJ)BE1bIVRj0u@U6iY!@W4alA~)ZrFTz zAIxuUV9|k%?CvLe-$22)veoAxmg=MK?xwc(2Odz}Dkg(t-4J@&t2Dmc<#7AXDmIIL z#_8eoXLWc3ZQwl_oGGrWQ=3Br@hwX?AEXWJ0#qM>nEq&by^Ctw_bN%_|Erx@$OXu_ zXY-TOGc@esa5I+3qC`Y{eLR7LNkJ=|H1;r>P;?&hJ z{Y6=nRxoluD}5}G3sQ1mAX6CFSS5fySpqL^fwrc#XP!g$wbItOLWV#t?%cA#&Y;d) zeA0|J2L=etPe&6ABhYx%NT~?q&WQIrvioYVV(TGl$XA{LQz?}fj>{xw+BqjFsiH8( zpiF34BMI9==)2a3J=|M;YH7`-w$r{pX?;;_kCirX)iW)$H@It$+QON_AF63j_Ky`H zn{NmhuJyh4dw_uLR`Vn4uQnEGeL*~^@Kam*$?3(F!BmV&{NDMs!)r4`Yp!w!KjP+@ z5@6*=d0KU*cIwC%P~Fj;QcEjW2!DrU_y4Mad9EXd2oN_e#t`gtqly^CIdN z^TwC?(2efBclm}b&`J1xNAJZ&JjnnL4Qe&YHUW!;`FcuCn`6aJ(I(>0dUPI|nbRGu zPD$SBUq2W3-_a?PHQ#!^G6^~Z9q5v8sDrf$r0mAcklo`xjM@s`*nb?sc(j?~5o=Bw zxA_$(!X$Fgq&*}14J*h-!C$N7`lIW6lz=gn&Na#yczKiL}~?&g*3g)x41ha3!<JNh=CzMy@X0ubb;~LHbuvMtQi0prq<7rrXTQz|e5(7m!y7eW zpb#s8+)5)?@|OVPFljc~aP{4{tHC&rObh94RBr$C?$oc`2N(kBUU6aIF9Oy;1LEvK zM}A&#`A^#hF>SI9<{XDC^kl>23Oc8In>t6gPOJ5(XaMuCXyDW>T>cT*Nk6K#xHlL> zG63!wX=R56j3-=F`ws5e^A>X;RB7)oU04b&^H2=YTQbj7(ItLI8Uoe_SgOIQ3(fnu z1gc-UgfmbULmUx;kDL4}Oxb0@+^6;k9w~X$_@!gG9R5Rk72*mQGx8O>#<1~ z2ek)<{^R+E^V}WmSC5Wy^O!!o603OGdPO<;Gq~W)gmd>Mj(#RleUYXXnz>i8{`pG7c1}+=Nebev}EzV^}s*16#_rqffHji1psWoonK2vk43(V7fyny~sFM$Ui zo6O7`!Pl^OYbvj!w_0Twg8)mEhZ{eZ)N|X6Gg2N+cxxYnnWoL%DJA8{;ks@L%w@fY z3+t}v2Veoh+QUwU94%b)L3G;+xzg7W?o zBJF6F%}aOS+c{1aPi;jPG@m?f@`!~U&9cmr!}p9ICvzw3Cb`5Z$qDqa9=#;rTafe6 zyaCy|S3=oeYPFz9D)^-ui=5js1a|UWysow|&kj*gJh)IFX%q+_O(nqD@30qxP#Er8 zMjWpF%*NEP2vNcG-u!hjyXNuLgaD7^vGpl!o2aRSU|E+W#t1=JmI&Ns$*Oz$u;x35 zYiJSnmtPvls*iDZhBB`t4)?6D_&3;qyC+(n0mAO~=ujV?k(H=hT9~|&I4K(ParAN| zdHnk7_a6JpQz{E+A~Yn%sEQuLhh!N>xf^4kxUTQkD+>DEqS=h13Z0(w;#!>S_?N(B zh~l1A7OmHP%nEZ|-7i}nEy~=%YI)LxEhex@YEr48Yrl-fF!DY$b0&xKuv;=1leerx)HgSyj$p4Xa>ovkduhE~}qQMC<__SWnw5Z9S!lE70 zS%n0<<5eFZFP%K;@H(C=Q8zn!6V?fTVW9q*OLY~}PsA5{zkqQgdW1ug%42lkp=zht zpum$~<3e!uo&UCevGRYsj&2=ee}-?TG35w4esNps+3tziBAxE^0$GJC7i22bo=~Bm zLe5LMm%{Fp7j*u+{PJ14hE9El#c?t0xNeKd^WyUmLdk-fYLz%PL+9oI#6j>aNsOI2 zVIcCdciEF`!tMgz1g0m`jN1oHN#bqi*iBkYr>k_KS9M)u7~MxmRXdFJ^x}_>h+$#g zH{6qTo6=3;)4KLqmHUOkDOFWEJF8<1ZSHm-v)tAa-`lAan7(+SuIutNX_<38ThbI! zvQ}Ldsl=`W_R}X6d+cVMNEP&>WlldDys9bgw_P%gZeU_Sdwlr$_&F}!40n4gQw_4s zsZt~?23Fr!eXwX@I9Bdp?EyIA#w?3R%SyCgJb>wq6&nw6a&|tCZ8ZMS9U)z( zF_YOq@mKJR)}=_7NOmXxXaf@u*ioIJE;9@4D4)-mOZLIO;eL%Mu|!)0k<(F>MNTM~ zJ5>%TAW#d*!4P}?V9oPVvsqf~;#X_;*=zevZGuz+0s^ZML#!UchboQU7up5PbNJj5 zRl8)A(redBJldG_0@3mB*Q}hZI>CZjAPa5!?zWlGp#qb(zIbHFbD5|ad_9k2ynORM z`Vz{%ySop(XWy~6QNzkik_b1Nen7#SF|5WP*e_O$Qh`IH{omIes0lYV345gy!Wy=V zMl*HemOuQ;+ZPce1i-kyF2DMB9{(qisPVacfo`s3F;=|3LCqyl1&6LJ)HuaE{YyE$ z9BDqkVY3rO3qkcFB!xV$pA4U2hP!0Pk57--k!IS7Hf5hHuSz6UHg=WI#;T$xRVI{O z)}x?3);_stUCF~u(|yxpx8*G!xrJ*0n^UxaYuM3#JX6rEkM~D4%aAQ;GjZ|A(Y>eG zT5atiGJE~m(J3%!(`T5|`+;oklC-|ZBLs~IS<{8{3eze3-Dp;k{p-}Pv-fJ6hnn9_ z;C~5x{sHL04A6sdu$_8lN$(`e0{J2SM7VlC+olXsFv()b)dZ;hXt_gXDM^Jw8d@huZ>%?USI03P5_HWM9a4F+eZ0q{p=9->dbxZM>o+n(Xl02Jdk4|6;eup z2$ssdS8mG&lml~_Of%fUDMKT^hcnmInhQD~Sa7i)^EPh`<>EKl{KSL1XoMRKBpiPQ zl48jyecC7{p88~=p{>_eh2z;qb;>fh&*ALbC*8UCpSi?aasWS6Sw_<}RJ~0t(0-^+ zYO%;VuSyJup&3Aspx|3s7?KeKTbi1RCWC7EHs1I3uvS|Kkq?sm9X&_|pMDCfz7dPU zj~Kg+crC%9@llVCVTX+oEO(pU+G_ca(~nl20~Ev$8&7s!A_Wm745?74ocs0?ytx&N z^1XKOZhcPdalUiGK6=Y*uS09P!@DI$0| z_=e^MBL#Zh54;FB$gPoR%dq`uc9o8<9S`LErO~Oa&-xp?mGf@Sha>PC8K~DJSn3`q7%mrM7ME(VKO3b)MQ! z(L+Z~JZ|(crU$@bTv>v-7U40j<5#TcKM1=sJ(ZqsWq=0J#=WS0|GA!ab?IiC$*s97 z5kJ@gi6;>3$C~J`cmAsPn1X+|xc=Pyu6*0nf##};h;Z?*;*KZp1^H$@tmnmlTq-{c zAQLnIQGiZ-EuS5~mgNw3moCJ3cHd4=mVa`O)=;`leaK_(A)8CDDW|K>@N}bJsGw^PwR6v>t7FGtLrOBgDPfBsvfjlh z>xN&_$0!CU=L5@$&t>+bD~KwD`##JS!R~(H#m1#rM`EKKBZ73}oq@gFxXsYgsbFjMC}AY1flC;FjWNr<=W(!K(fMFR2g>EIlPmO< z8|MH__{_$)SP9p4k*MCSLbRY?I+7*-xELY0a&$FZj~SP!J^Y?Q)7!TWPEO>4lSpG{ z!|lZ`XZtnSYGvIEt{y?gIWi9_7>{w>e2o3qzy=#viy7y)m{>-A8QwD=^bUg71%?j8 zEOXTKVq+=n*1eg-uFAf!+8gpM;&WOJp&YmMX4Klb>R_f{5p=jLml3s(yMMfYY*BY$ zhO;ktydc*G>WDI$_;yF-~G<#}#S5Hl%fdM<{a!T{*MJ&-Pz;QfwdR_2mV)3^V>6$>Ja=2I}>URqGl1Dd^TUK|VG^I$F52b1P2vNS4G`vne4E4PC7d*(MiD4x|I z?b?GXXEVxJ^?#C#@Sy%hlR(*#T{J=%&jZVhCbHQgA&XVu1Bw{YUB^^ zE{3dxtygdxu3YA{mRTe~Qb8$)Hmv48e2DRjS-W##B~@><%j+m{K)37RChj57LnFW; zy8HU>R6!scN1L53F4H}{#nxk*>**sSv}72^O|9R=DeoK~A8+(3d2ra}gpccP;wBYC z6&k(Kt{b|QegPGD8t?0NK83z!fesb}8t_U?Ow3l^cJ*m=9DE+b;=rY6b<0ntT@HZ4 zh%-VbCnxjm2(&#s8RPv9^zdkZQ1Z_uKwR6^=*xfQ5aewDA}>L(#8#1J@0ZeKqG@ad zrkT3GeIvkiI5~!KJ_vA;F_ey~q9$hlohtfo-2Vmf3A`xQ&z`7Mpsll-suSz!A0%u> zq@C3od=Pe6PBjpB{V9`TZDr~}_mzserwvCt$>jR(*9K4S)Ad$Ua5^tOUob`V7Jqg! zanp)k7fJsZj-q_hPVV1Jol`raOPZBDj*|E{+v5%E-umU+59CPu^FBR#G41`flWo!X zQXn7$)VcE_mjtO9)N+D!jQXdI?Mee~S3v~wAxp+4jdY_Wivugvj?nb24%4K5b%eDIeIKct{B_b(d^5i(MCE}O zFhs3`qwY0`n=R4b*Buan*s^i9_{&7J$c*`vrZUzo<=Np~BI76uYD9S2j4jWx=pBZ76r zJWnPj0+z=r2HxA4nFaRu+p>+{9ptu`W^=#0*PE`C_39WMEEENy8F2*94Oh3SEUn$o z{9wQ5aNPFlMLc}asaExba5kFO_Wj;UDim?8XoP9n$);I*@_Fn-c+9oSzWLs_460Pj z&_sIP;2&&?ZMSJjQ+b5knm&CZ|Dbsh0$2zr@e=v#q4dhX6h@Ni7lhITq?RH-!62}R zPSdD?OUO-pP$-u&HI1qgCT2SYmkWF6@6POcc8Q+KO9ShJMnZf;8{;0lbe+d}M~-}EAuT>s&}uM1bhzFAB7!_j zMvUNObxcIey25nqVC=9XvyU>R9Xzjt#l+DI6^XKRR@|-RAN*Ln?qGR|y}=K&qp1on zi4aEKmYX|cRycQnjwM=SdH+u3{5;*~*Fc>dgiNHQP`dX`ydyMN4*B6xo=H4Jb+vll zB+%Au=e>6O?_2i?z)eG+bp5B7{>O6><)&-8(lMb=QYs#SCo{I7&y~TS4%CoF+gv!= zW_a}gvyUPs9mHIb`b4#0Qhje#lXw0?QIDsxsR43#bXClSS&U!qPlMDDQ`>X zI-r%7+9ELfeg(;I)jY{NRj(XNu4y(S+RGn4y(l@}{oJw=5~gU{>uUPG>&xeh$n_0k zrDg&UZ3jbOKOlNdG+w>zpE>!3YI|(^j5eoLVuluG;~&yy`z=4QQ2A1sH|JMG>$Ov zhoufjGW)iy_e^ zUG_?-=rGl4gX!#kH4pdWu`~`6QY{=-c<^iCTf$ggND>hD8&g1mvmsW?lmJvTj|8a|9(Qh-no7C0tkmL84%MA zAk-V+JU`qq<6erIts-1ek9(?I=@A{3ZjS}V6+R_o5QO3DzDt*?g~6)+yhZ(z92h0R zTS0?WY>?oNCNMT))U;zI38_?ii|Ef`FxpQVeF%-wC1ud@$`@|Yiejo7DXa8tEbXUj zNJqRor~2$BJ!`_8w7FU_$_&*0zs%rgwEAJ>G*<0k0)}G`*UR~9liN=jdX`^!L%3<- z)$YKf{EfRq=rPcFT=z+pnBJ1!0l%`_kW7~KK1zJ5+DMyLZjS0segBzCACsRIF zvGOXV$_DTFGlSmxrJG#?BTOU3)(SY^L$A1Hx{opI??&k=RPasXX{b&3M+?AX+~2k8 zro0>6tACTicu@R~XUvGeul0&Nn5EbPHVB+LfP26MS>_;<%BTPGOB_WYGY50*UrxsT zDaZviiPIUkQ8GY~#uZ80mwtcDZ%zeba*WI1owd+uWJ2vL-Uri5 zg&Nm7U!@jF6_MQ97Kq_YwC#_vY1}7UFJ{w3UYGS~EnMgxA5TY!LsQWpz=K+~8N14* zsg5yammKUQXf-})wQ}~_XjNZWbMfys9jqWvkELSlCg1!z;fJB68Pbp4*!WSo8VK=) zhVdU*Mgv6h#ri_i-&j@#u#A(|L`3|T5Xnyq)Bg`b+=!lEdmpxBmw`FR@k>>U{!rC@ z;pH3~`HofDeVm;R5({QaZ3^~RG1qsZ`w8Cft1J%}*S+6sxZCN})}Q@$tRQ;T*FoM% zjMA~6?{ziLF-~Yz`@2DP2P3;DH>rVUN|~#n4s~1We^xUA+n}mYs??b@w}=EBN;No7 z%z}YG+a?l9Zol&jUOZ>MhG@ni8rAKQq$qU3-sDv+)g5B_rJCG#{EjdVTq=x4`k8jb ztYga+)ouKSuIl#SZN1;FqT20R%?RM(ZZ^LQ*3sAR^*;QfoNlM(y>YC%F3fPr>*#@O z`I#CvprB-M*Zc3ruo;j__CPi+UuOOp6<%{M^8MA8D^vj74V=*_Xz7o%@F{v;7D{-6 zM%8fSXlwW7t48Uxa{7$c>Jrhac@?^ft)fwS_m-k}vEn28A0X3Ru7rFAxz!z2fIiB~ z?z!nOWi0t2;e4O((3 z)VGQA3_!&Mhxyq(Dz=(H($b}Kr}~UHnvMz|2KURK)d@HGYS7lW_we?IfqR-E={>u_ zfP`s5+}p&SynyFgjvc*U9v(v6dA`&;w&9v~A0D@sIu@o@A=paJaHm%lBTedQV+E1f z$EL>cuvDDs&c=p$Uji(;`SD5rH<-c(7L8G*RH|c!3AfWL>CWQR zRQoM;>d?zT>cZU5Qg2D_XX_({-U@lb2qx$5Iep{pFGi8j^q$nV(*EKu16K98ny!hL zmSg!Ej))r@MCF`|3m^768v64CsNG$^N-WOp6!&O3z9dR@*fOmMCz)XGrY`a)5Bj9A zF3iO3bwq|maTe8lLPa%OeD(YPqRZ#bZvb-_w0XMGgxy;n0cV^#>4ToA#W~Lnl^Wdp zZ4-}hfd7)H`%N!TYso(!tTMx8#dbuq|p@g`r$pp#8Wa95DOMzBey7zF_LTjIw zr2A?b?7ZP#DbB(h(|`;{Dq)5iuO(X(+0b)U6Nb?@^GKQbt;e}X<~LiaR?4@DP{A4> zV*RFY3Ex4CMSP5J`{4IO`0+c>O5l1swIYrr(6Y0$0eS6B&dr#|!tyo*_sdk~sZK|J z`&t6)7T-CZU;N8jem=lvm7B={@X<~>@vja`bCS9#>g^j5>AY7|U(g#xc1zn*V1H{Z z1R-1^`Td?mucNtFLf@)`8%PG&$pyH>i@NZYU$tLbS)pJ9kua%%d10_m2?tu;;aj7_ z{*LZ}0WDPmSmX%(Q_2+L{0ag1iv`A2akNs;6w;FliUcn+iWXr^|I=9j9+g9K7oQPh zP@|(;n+hjQd1>n6>~rGto@u=(iokw%^4a_=@R~u9rt#XDv$CEk4GPj0tnL071by~7 z7YL;Rr1@I=C>H6MHTn<|)P=4FeJjV2o7I|IYK&o`>gHZ?s8ThxGa1&4vT4w?r(%DK zfovTJjO~_Lwze=PV>ix{j$@Odk&gK8-{V6xSXQ7{Y%@aby0a|HJjLB}w_)FUznsn3 zOMQg2!1^WUgfH)FDtle!^x3eZa7 zm0L1==y?%@_ms@=!iFg$W8p_+KRV7`MXi=lvMTv zUo9!Wnw=fl%mi>j{M+1RmiU^rwOo}N_`rZchv}V7Yn^hg#op$TU|pXPyNw8&#)t=5 zojg?iPiAZ!(U|=D-)TnB-+fW}yp5VG+dMDYp3v(k2Ltc7E_-64_})3|E8>3zdCe+7 zM%vC2XDy&zhNxo>;mz9p_c5dXX*ePsBhYJbyrXeT@zF)Ke37>n8TUi;mCa~?P!%Ip zqr_yZhzIK<{qN4QKqKJNt8=)|N3%PsG<~U&IW0<{-qA*pM%6ts!ZbEg(yE&j0e3T- zJ+PK3=h74dirgimKg)7FXM8c9*^39^7(kTa;5MnseeWhe{aAi3UTj{*)xr5s0fLPY zbZ6(QMZsvPR;}k>U)r1zD6QX@p);bNkO(Ah^L?ag@;@#0ZZ*Jm(y^pBuhuy#>XUsU zC4+g=B2JZ-^XK^$clz-ge$b$SkKZtcXT)y&n<$OmDpxmb#t2KOOpsH@by1l zS|06V8RIK%1HkOCVEq(=U7Ibw+o3+alT18S9HT88)J*MeKdzC);y{#P^8=fE)r(@U z6Z%}Z_<6s(m|cQ8>F$giuIwK{9m*}U)ap!J{7YfCQTdX%gXObEo-R~oo_m;Ly7I3- z{rQq3;-%t?thiA%r!3iT_}7|+7->Y?mA{*rbE{9bxB)cwnWlY2*CW}}a_zb;w{4o_ z?DnefSnk})P3}U%DYxSn(_(E)$@FvFN`91r4?$ojp*8YGagJd90c)<5OL<9Kjt<}0 z(st-#1?P^j2!m7!?~V`ODnq|hQ%9(-_)wcA?^UWz>x8~Fw92p&?T;$1nuWZHMMZbB zle|KQT4)Hoj*RlJp6R8$9srxArOwsA4zrDdE9CCWt7kNg!ym}d&mMZ8?muH6Jd_85 z_EK{%8}%V4NI#1v`;g=u-@$aunlfxvOd%coLjKriLuN^*YJQeOb5;2f6^zufVbIh1 z1)YTYJy=C*h^|HoXQ+Q(Bjb0(_lVomv>Z+kPjX`UQc9e>Rcma5_9eH+$Xu-&vt>%i zbqA~>(hANJ23bl}p=3-yGu z(GRRW{uWlj{yVZ}i0{vx%-)LW*?ipE*=`2f?Z{(`ab%pJ>i?j1sf;OeawlulTJD`1 zchP+8U2b(h`4Qch18j3e{$$YN>DOolp658#%2q6c6q@yN_}0%P>TnGRGv~va zWZHHR$+<~Y%bo4Ctqan7D=ZlUQ!&ucCo~52I?$X8#DHsB%bqIqT8}{u(v{dXWbSWk4t%! zw^SG$qH2opob^1%RQXDl3!82R`ZDg$*?G570lfRp@+oEh^&9z%;JhDfDes@n<`yzQ zotI?yozj1ww+q<1$&14n>J@XgMgUtG#!VOdRbQ~d+4Q()v|9*LULADnL%hZr8q^W3 zA+UsTzXJVbp*y3ITw*Z~Az#V4(N}ox2%8OWR-dCi9JI}5vlXuJjlZwZ=tnW{OSEZa zx*M>(hzLiC z98%dD^>Tht6F51&#Rs=n4E(Vuy|(L}@lkvTG0Q8dwFsRnbaLX&4}quGm!OY5<9xSS zl-$W9aNMDu@`z4`U1tW{w={3MQF3Gtdk5OT&gQaZx_zG021vTCW`db?u&C#t$knt2 z$_nQTQhlUH=D75Av=edf{g*fujEpRp(i0 zzfu;h*o;u@I*WNt&jTToPcqy7y#at9MLCtiN6(Jifl7`Pj49-t5!OE=saJq-$A9x% zS20kF;-ryjS5B!gD$J=3-VfU^r!tZ9&n2RJD%lg!?K+G(tZYaJS=4uDFA489b4Jgz zPq7z`6K-M8$(GU7(n@jAj`k%VFeg0t$iUP&3)$@oxQK_>I??s=B0hd=SIx^3xknVv zM!?cF`4YppK2W=}6gfF&&#rtgig{V{vY1sx{-)@Yn~Ww=d8h*`{Er@Z(ocati=l%o znA$j_dyGw6?aP92*qe*{Un4*9+PG6x(fZtwpo-M2VdzWi6_%6@&Xi7a0izlV z7bb`55Y`>WRp({Xg0B!?jV?iBU(i9(f6%922v)Tl0v6T?B_cICAL_2r=C`?O?~Zo~ z5jr{fbg04!x;$1OzOy`Jbv$fU?1$z)+b!v^lVX55K8?HA@vLG^n?bOIcid-yt*$7p zD4y>Mn+e8!*pRJkVZ~#Bgqnrifu%WwWE3P3*cU_WLJs3JsI3hC$4I!gQ0CX|uNfi4 zuCELA&$C_rAVI)>%|2CAM&$+X4{%s(A?T;RBW*^eC zuKCxm$14Zuv-=b^)712jf{g{A@>)tP<`EW6B{m$+VGe6nTxCnfSlra?SFRb+E zOhX#W@tnJ7yF#h&SZLRC@23>8G-lzcuexe#Q&G0us}# z3!i#FIofy);K=02q_NC#+nY&c&j9~M!aJ`u)9@m@+l3((Q9_v3qjuM98(R-dELdxv zg0N?YwXFi3La#DX%`L8tF4$PIp9?t1Hwh(4NpEysslkDBz6kuHs&5A$dQD1CDKTCV zG)lOk_NkHVjGLCDxGA>_*V#gYA0Tko2RLzzGJ@-W-8$-uat2u+aS+2`)y9|*ir@#z#JAPyA zAIq(}N93#nz2+#eIHVM#hzBi?t$qO?rBA*;PVP8gM3s4!QFcH~%uK-EYX@hUjM6#_ zFDrNRP7Z?=`7h}yZ^W6g?fyf!Q9;OY#g<(s$iA~^0TCDLZBJi$oYWLkH)}^ z1s%t%J(I;EDx(EC9{Ot$O9B#jsDYCk&;A&Y+=yz2vt7ML`=6D^1iJGf!iL)}t)EF% z!~G^4#q?1ci!-JB1sfveHWsiX2|#!aDF4PCEZAIIsXhCs; zk92o?_JoUdqEk&)u*Yz?@kis%nJnKkgX4WeT%JE0p8i8qo3((9E4^CI3Ta)^D4*Oj zHuJ|4*R#*LZ2Hd+MV%o?sl$7wu+6Lg^L&dA->M-D_Y-a2L6_QW96{ffXf-QzsYp0z zM8x{BY6Ea9x6-54EO?uq(S(wi2mzN+AGZQHDc(WK&qpCrpwFmzC)HW2=|moDBrdan5l{{4{u1Yd70BM_Dgf zynnsHzsaBWLYj=`&3xp1*^NsKpo2o*MDEPo#jZ7H2EYmmM9OI#Fw~>AJBdqm4^{0w z&_B9~;IDyqbI-gcw>6D3iJSKkPonY`AKe@^Iyy8QxNxv5kuz{mZaEAFkRt6o$Tv>KFkNk^Z}`==qoFY zo0j}NDQXM8#w)@edhh4U3Tq@LmcqK}5iJDPxmPkc{LHH68#D2^AHfW+(ntrqyGmOc zm@*W5%x5(JRY%O+HL+sUkCD@t)JV}R49(Zcgu^YLgWOk5Op&wW2zz_N3dF@+)g7`X z^3d4NE+g5(-)#DEqxL5PkJ|<;fv?Kst<$PEOPk@Z@=AnxB=C)SrV=9lxl2^~p zq;Y`Ln-t(N+?&qkFx*??Wiy_y0g_0GN8Tbglc}(PWQuLUgI>qG9tFh7vnJ26_D?5! zr#-r0wP(^M|Hy4{jT+T2{xJf`#06as2ao6S_IBHG_R30f0IYa?`D_St*C3knwGFvg zUQsYdf~aOFe`pVJywb4?Kh%aoGRt6|;?-1GFMvXkZ+!8)&w=`1>XW_&)ZJQjj?+In zoY^ASLIi6=w;hHG!9?NXStQrY$vn2;mU5iQp|f>2tn;$7N7?uqiw`DwESt049!!sP z*XeMF_XvWB!QD@jjkG*E-kE^OS&x|`A<4YjHaVSb4eCkq6H7Z`|BI70vNVAlyLlEhYt zY780QL?l4BS2fcV_AK4IBKfA07giUF-&gf5`N6+LsGx#T;3kB{(UjT=D+Jn5KXqWjBh98}>`8@jL~4tJ1d=h` zj1A}ERX3qVk9cBpWT&0u_*+)O$@m;C!&g^t%scn1VwS9RJKMKNRSwpxI=0ZrMctk| zX?$80Q%JZ$JN^&a83w(-4X_O9bSs0^yLRVj#Uc-VcR+Q{Ij5l~?BoW2Cx7R@pi$9? z=e)DwgHFN+1FIH{ow1*)-OFIk83W8t3J4ajqas(#LF}^(@j8l@&)x7Zt>u02`HRc5 zsNyc)!?xp&IV}UK{I%nuYCJa>ef_lhHkH`urgY-x?RJip0hZnHL#=J6hN;^=jBeKb zm-45V29O6SxmEY|-l)Xf-dHM;K-hrx>*x}WRLA?<6lnqQRFK=63tSg41&lQl~ zgIcpi)LgmVW2_a=VFgJ_09Q2iu3O)O5ttDyo^B>{>gb*d5X}`)?+gVoEo|i| zYkAW;{EKh+(4T@-L9b&;fFMUY7fGlVZU)G>B~DpdQ^A6Qgpu!gG|uWF@|RF|WzVhh%N`X`i8bt2S|qMQu90 zhf-7?D{&!&Nxx`7WYDD%FRlj|>Rv-HJmxR!U7WtThJ#?Py{cGu*PYwbAW@<)R{ zZxUPZk)Qh6dkXbnqu>+!;MYC`-^{-Zim+3o$@H>UoIRooyP}thD8r184=;LwuJW>7 zuh40lew?&}j2jwWN7SlMmkZO+Md#z}XS-f`Jc<7X&g4{{>emwN8~?=mh%e=&2r|Mo z^lfbA=)C<&7L?NNA(cqAs4=%rh+sPqig1vth@`r>xVKI-!qP@=CHO{C0IZ~>bFdY= zcs#`GT^gtU_A`r<0IGRy0(OGBub=YaG_o;wS5~h2ML9#eM=ZCux1~ur<$ySw+zaQ8!%Jx3=^=$$xn zMar-XU;Gt2_}%@X`b-(}UbXZ87uD}Lz)Di+WFOF~K+rj_)*lx+EFJSJHOJ2@$y%R* zs4+-W2uAbqPT?%w-73BjlggAe4IEU#e!n_UYmZ_ZbT|}e{k|&1hhUdq>ARHxyUZZ~ z$yuc8u}pm$ek9=nQHD0NvA2J$(~Kp>EAIIO4iCOpnMwru3W zm}oqw%Yo2$GW#xkrB|WGGt?H;x!w4?+3~%7cY_*lHwjmA068-d2YHoel{f=Vg;? z8;HA`E(RH92B~PS^E|B1is8~+$k^_a;kbuXut@eXhg2UN?De;mVJEzW)da>w8&0GR z` z+a)@)){TDT+7a7y!?)%_apgv z_ON=(tR?M!+r+u^WXexER|OjNw8vuh7xobkqeBGcT8_SDNC~4pq@4c+k5w!9keHq% zmGDB;f92r3W;Yyyq8Vx8napM=Zn?BEFQl;#dZ_l!}p z8%xgs-(8T_4(p768P6Kqb8XRVWy$Irmfv`sKwTrtrb|b92(90R4&Z7X ztLrsOQc^@4eX(^B<5hFptAJFlL1I%z`uJa6jm*9IRI?(iR5smkv{H979CjBnSUO(i zx*H~YExa{~VRjSE58w}XcHuIsUM@8A&0$nx=B-_>c$3ZW12*>Myj7b8XH}CG$M3en zSg$R5{0yVo$GVS@%N}ubGfvK?e`5V^U=WH@@5z}RT>ZhaJv8&*S(=d=xaA|aEQ10ue*5Bo zJZXqY$jCw{8s+F(ryD#j4QCuVOWu%ETd_yIaR8a#W+RT0!ckn#u*n?w_?%;8M3?{He+NFCQau z+CoOux3)91Qu(bOsn_S0dw!E8p1riG>dd4!r99Sqa#&F0R~p<~*kx&dtcDq2Xd-QwG=dgJ`!Su}DjmespcRh5Hi1d>V#@N}> z1FYj5^&i*q-ZRQWg^|?J&$#|jJV0_h18G?yjmSpI_p^uIlDFhS8P1XmredBte1|C| zC26EAeimn*^(^xU-v0@AMjcf6r8?)`%vxiVmSX~Fp7J(e7U9rMCle$R)U{&V7BBr$ zEnl%j{`|EFnP(RS*@<;QV}?B6?);U|_$Ep6_N&~>d=fKqpG&4&Pxu7CTx)#%jP=m@zw?1Mc*cuoNo+z?1@hB4>DNDY zqoP_TWDI`};MmTXg?`S&n2Or(H+V>m;Vl1@@-@elDjPVv2U|{XTp3JA#J3 z+0`I$w(`+2J6}2H?ugt7y7|!-f>n$I;guYlEsz;|X{UBRM742f^wJF92OSgQn~wN=b1bu;r@sc9 zVNuXBF-=EJ3Gc2_1Tl3A-j?Hk9?f5{DlTIyqkY;7aU1ki#9KZ(efi5;gf?*ti~PdB z=16pSBx+OrPLltFrgGsTNI!>lL}xVDDE{|Rg%TtIW6C_g#nPEe$Va2n9&#dt@jZ>- zN?N@=#2(T@!2E`#cgcl`n=2>LOHIDrX3o*R6wj$?!iP^~S1h-8loVU`c3hwCCr0I{ zcOSA}3SqixXgL2oZg;Hi$5xKWINnroDvyh@1=6w4TGM7CxZM&om}$3o`;S+n^EcE6 zyuRK$WrQ85mSp=extzb2qbAsS(t%Euh_HL1v`_B*aY7m9F8Bb$@i9ckJyiR~AHVoR z;)J?4KSjWrz3LmdIvz7q$<#jg^l80s_Q$Vthte%$a)(6{6qx zgYMbZZvNNa6r152sj%`CXXd+elB>t@QZtbbg74ow!TF_JQK*cUap?zb^nZU_AtE#@ ztLc;i3q_*z=095udayyh7_7S+>wZ4afN@scJHtv)zeC4)1fl>nMFiRuW^cPH(;Q~K z^tFI&-yX3yViyl{I6)lNOuXn&6~^NHTun>gsW9<-=r{Izdf|(oGIkY$QW)-Vf9l4d zkK9hJ8V#=>=u_Ks)y*BS(?>%`7MTn3+~=ZpR2-v~;p;Ip<9coYoHSijfo*U~ z)aL7lO`X0}JXpA^wLlNIB=PA<{|`N+LY!zTv9WAVkLt}8bBRuE4xmaZ;b0yl6O;@% zXNznV{*d4wM+N1adl+>ZMA+OBlA%q%xN0!fMcy}gY;ZyB{^ja;@_{4RA z5{EGl3$1Q4Gf5mB8x8%N1w)j=`_@on(R5!?T^y*l5t;+~aq4OMu9dTiv@7@6o{C-OZLm;@z@O=(>yFl085fw#l6QtCPjk1=a0@;HyFY z^^HZZeqWBd4TSo^k@4$UBgjjkvGe5>P9TSoQ@+yK_}80GUkV8Ur4>ZjP1f*48Q&Bs zd!vlqgK;H$Et#rK_^ogbDzNTC2~@Qi^P7mL(T>oQ`@AB~?AH1vfp%3&hH*;SW#Ro6 zWmveRcJspI<7m*?^O%^zS3|B{e@sf^Gm^xi_U%*mR8*BxvmX26f#p`UoPb`u-%{a{ z6O`|>EMEcBFYWA=1nR0OQSetEu+S}RaF4$E4fcxPbHlHv&1&Gw3(cXq?yiQ8$5F6x zaD+HpUpa&7KcooCvMSgpjpb=$!pm8_E>m>>*AW%6r$VTtM1CES^>*(KoX879bgYEs zSsA{bOz(LoLZPlqyIE8stJ;Qjx`gUvBtFs;(#cwveQ++`UQvpIzIaOaP-YyIO0n&a zxf1_XAKeE<(D;uG8fPil9}z#9-jmT%TeheA6`*=GyhmJj?T@c2pIY-3>ArwKghK9l zkQTRxy!q<_;v&^0tf6~p`!;%wCX0L^z%x%e%`#sq8!|t zJjUU5RAAf@q)}kp1`PC$aZ6gLwuieS7vF^9&j#+6M2jweAU`yk*VfYa{|L&!+cBuHSi+l&BnXp0l5Faphsm{^VyQHWTX)-Oi?2arla zJ^s4b)?8&iDwW#j_yekDt*1|?^tnR+rvQ1#W5hn!`_;G11y~|!pV+UNHy#FCLQ^O} z9Pj~qku~z0Tq`q>_^UJxRtqmIIp}jbLccI5g9&%>=hs_RDFNF+H z;PNb<;O-!pVSM#U$;mFlU8=mC_v*Ac=~^8nGTiM1%chMSAZbElTg9hmer`Zd6!zm)-Y0=X=lj{^5i?Pi~nzedf+cmHW=^ zsF_!2x^zE(aQe$o@B>KQMY+w3RWrkE9|$e2{_ zTY_h#*VesF%L!9dQ+&KhJdRMZuT8zv8xXbnLcM12__Lq(Y3Pd%wy52m0a)BU-eGXP z(3G?oTst$Ks3);QFO^1?lc1C?LT`-mlj=P_w2rRBpw=IFueM;g!tC^?{e83a3uXGx z!miA7$_C#9>c%Hv_rnWc|4lR7%jfJm%(FFY5G=fNx9d=SE2vb+jN4EiXsGWsUR!M# zXra{9r>)pb5_1Q}eHADFGr51!Uw&P>cna9by1;E)+t0j-6DIGXL$4W@-xsA!;y2O) zVm_`%x-3wt1`neg`JU%`^NMcSymIS-T`fJENhOx8uc)YpR;k?CFLODl#FFv$upbLL zL3{Gisp~4MHKDpF(nzHtaQ_m}Ulgd*$*DGvMMt-+O|3$0zo$h|HN9X-qKN&%HYq^7 zL$fJ;5t=$C)UJ2)P~j8k_v0*$H3RIgO8QGa1PgKrGO%Lvq%^X091Z z$)z#9`L(~Lz3c({mq<|oY7Yqi4N70V!Xa$9;&HC!a+-V$DP3+3;~tn!^hjF-ddPd| zG4cw&$yT0E)344QN(@&rYKuNmS@rGPa{;rWGwH>Hox#zcEU$W}_%wT%^SG*-+?>2Q zE7N?xjyUo{v1OFfFo2bu^tRXvX^*T6gljk+g5jRFJ;gp~@w&7ykc(9A`XOPTgWN;N;b(>ipMNL8bi2^)Eyy8A3$wI~rFM39jErOcmcIDAO#}3hD=`u`xuNsg z6HoP&xPv3|_3@Nu6#6ma-Ad8vmP^k@M;B$vuUM%zo&jvi!m?%VP9(El3iSOG5zM{S z!sWPEhSnbDHL)2hZ)H@e!7zfxCCQN&gK$jKKg)5O&+7YGkqg|j!IfaTFKXXnkMUEKBs229!`#?9PszNs_k+4wBlmE zJ4==Z71HGu6*p#X`~0HJ+}^&iwqny@886jFc%ySj;egI33|%3pc#ap3DY9C|6!2W= znq1}+$ooIwtq-U+Iudzgr)52^d;&7nWX`HowUz!u8w1dNz5(`*(CYjb``6stb)Bm5 z)m8P>BQIk!b1HR%Ay~eA?#;N$<-+7>e>yiNCv>r;W=n~c&i@Rs*B}E)Xynz)%mVc^ z`P1QF95uoV0wQGCg3fNya_GIXQ4KKivX}NNI}(5Oh)~*{f(1orajCeDbcg(6vB%sc z77tr(0asO{n?_GcQo7%}q=ctBDdH^f&@$m6UIhg!vn052qt2YoSdanPRhc(k}v}hj$Ip_Slpy|&N>dyvrWZ}Q^VeEqkT}H|Hw#mifc{cV}1OB zVx8#LSv<`g2I1RZAO9w+z`x$7fI)dfYukxWNcbN>;;mWbmZXr(FJ@9tvokBp84;m` zfsRRdYisJd7K>uHcLvF`^>_0Y2lK`LM^Sh9hpoqwou>csiRQfw#;MoQq1O$|l}HVT zHEg?M-g2u~-$)DDU_ZJ0=9npQFu@w{)DwN-9ApA9DXl_aSS8+=yWV#0gHotzgo4o< zr6G{*9ea$=A{+n(;-Tb!!FDAkt~sU-Bj5?k9T$_meG!K*CP0rHY&fC>N0mY&i0E8C zoyTA8hVEo=-qJLSrgGjT5oqjDhGYkIbrDi=>a&@KRqb4dFirY9k6bhj^NiwLzj3qO zpx`E^4m0gf$fi@m){@@r03s;bvzDDYkU7~=a)C0OPmY+@FRzXvlUNWg=wTz{ zc|KGMndd!yrR~D^pgka{rZ5Gq*3PvwHaKvQeI&gBj4Eha6r&kZ!Gta5l3qaQB1i5A z1yBpd)S~qjqG*oMllVp;sx4;a<@Z$Y1QL-`Z0E>=1*xfp!W>rTsOn|vl$e(c;yRe* zu4?5VR9W7JLNvE_SaQ=tajenGIW2^`ZpKp(?l+Bo7#r91_^GuPT)t5c2@QXnu6;HZs1@WilzxaQVJt9P7#Bh(9?t&@@ zlatyDVykqW3pA7>=gKV_?=#Cut(ih7oYg?M4#{z+{!iRHi*(b-qJ0Gi>6d6NUVUh* zpq5~6pWu`!SWQI@ny?LH>dk1JB@R2od=B+^UIaRQE9># zhLgCBpC!OdUTCyJfVNgTveq{uF2S%Rp@7%&3GufTKMDA!9%$dFFnI5pE^^A!Z+;jg zr*#^1p{w%MXG!>wjJS|FnRX4>Rho-YBH-S@ zyewUCkm1knJ_iv3{=3)Tz*I91K6clJl*0I>Zz&DvDh*vzj?EJ_9CGeld*c}>eI`m) zS+;{<>)qTF&5lfK8u9s?wMrkf#)sy@nPe^>txZhfjg|{nD;R-CD1k8aa_Q@8nmg*i zPQx^68BbnMje%_pJ)jtlufyoLKa;;fS*5&m!HRMlsNORx{XW1koExWkQaS%vj(C({uiG{D`#A*wQ;SU~M_+@#M ztt_o&jUzrs>_Fi*#a+WcmZk7l4<*QfGYVcS5H0_=B&?sTfWg?CT-hU{sHmvcv}zW3 z@i$5nsA$v|nnJu5$=4POp#h^?LK7VYNv>NV{|g*tcoPa2byRJ6NzC!#0w>XDimU3r zSIn}^czhz5({9CV>3O(zRo6KQT$HXU3S$(ywV!;p03oMQZ)s|v zbC=4goR6zzAIQo(TG23=s&_XJ} z*8<+v9Js~4RsJANjy_JjTjcrI+iaUoU(}`3PuQt5^LDeyzf?GROE7>hQ7)X9<^ffN zixDGW;;kP8W3PbHUF*$J3EYxY?Us(5Yh;#0Qzht4#v-Wq8B_U*ODRFsa%{rj&Ic-OY-0v}*8sO9tP zUkF;sD8K!18{7xz+!66NOLp&H3qsNaA@yKUBWt7WK23v*4IC?24`y4*;6nyG-E9RJ zERm5jzBU(<6Q;Q(jd`0hSoc4%U3rG-4v%Z>v>g3}{p-9!$J1}cUrI~jY92e6z$+a< zaq(-?`&ZeOLD_dH*{&`{&5Px44=2A}B*YS6y>@)xUs5MTb$mmZh1VwY4tR~fNc`gj z%D#$ZQ#t7_Kp*y~+sqWhADg^6(VT*dTL8vfxghVdFGA+BXC=ZDFFO|jeUoXco=xw{p? z(=K=eSUIUv^Giz+{`6jrwC>-$;Z4QK$8mB@Kx2FDu~oic^1X)KWWLDax@`@?*DCi? z2WRINQ2cQ68I3sSv~qfg8@rZWQiAhx+0aJCm}d#lM{fj+uH6!XHl1-@*BN7rU{MV3 zlkwh-HA{M1r!mY;yaK`IhgeuFe_U76f{CM!P!&nbG_)2!{w`(dQWrq^fO<8anEI?V zCNKz;Al~dSz!*uF^HoksvF0d^Oh+nmwoE7wLOEj2D*XA&gFZ>*(HW;F~{pe75y0FxT*DLZHGCXqQZ!;xXS8Hzr zMV0U4#m$jREmGLy*{PF5WKQS&n#af;(4)I+XvZ7xIaW6tUPjo%=P8rOPA*1d!n)W+ zh<4#6YHx{2&R@klMRu5#)LO|wuUx=SNF7ho=)$maLR);fUFjgx08}2u7`yhwQ&~(H zCTi-tN-GI%@`4^s8HanI+g}h5u$8Vu+ahojhbsa-#%gw!-r;pMsPH&wQ-9L&-Tc-_ znf+82Pe<=sZ{cI{7BZ?%jsQ|%$#yc~lWm)VCa)hTSl@+x$_$C+>`7OW2gU6;s&6R? zO>v%?SUb7Bk&zowyg;WoVl-OLSKzo1RV(;ghTK7eoxh0>T2wSw9JOs+iV>2-Qx8*V zCI_dj42xnIv-ESs>{RZ`<>!d$1aU8W<9^n!iYK#0Uso!gNd@vCiMQ~kg+P`t$7*dg zAe>BQPN%1A#Hcn_F>@FdYUL}fH8+kU^(<~0foxvST@3Q$8qhP%qCt2Zd!khfRS$5? zm%G7ybrK@GT)w~|&y0}5f_|LMABZ%YUtSNGcSek{+jtHe{b-bhtT}-K4Y96*T-46- zR#0~v1FEZsOS2?SE*Be4$Y_;2ydTb$HEs&OeBHgD&3OTRvJkyo(XrHn7o#!-01+5b z%l1pZDQx>ufMc&Xx%#e*L+YI>NVPfuk;VG%8+6b*VPF#oS13q2g7AkOBI$wsvPHBh) zWuba4Io?k zuF~YdKd+7dX4JgC$*=x>qd ztPZ^v#c-fCvxmptM^8V$GAW=;uU|aCFmU&s@${A0OO64dPt6~=bW^-n^R4}Or&O5P z)<+q2tw~*1ah~%1kqG`aHq~yK*mjmAVW!vLiSb>&?qoiPbC!Wf3}_57jQNtXOU&_+ zYa=5dp8jZ_hpRD;U{Mt0wbb$`(}CJlR`ClcJl}Usje#s~9#4G^oqkE>JU>Q6G}&%| z0QS!hQLt#=9tjvYL)2%?+y+QQvu^#R(M)a02RSDvR)^vQaA?a|2prqQXb3@hC9iTq zE1X=Ba}5xEW<E8{s`YtUTATSFgxNv4wptG%cHXpB@VJ&VRU|x>pOpupDUctOErPT1+yp#6Gf@hOULV#EBPTO z8Rj>Ob4M=$B2n$}qwmNBrNk4n`OfB1EaaH!g zI%~XI-5KA5Dn~qY{P6k}4Zryzn5*N9liY_$^cs`z_`(2ZLiOc(okJ5OxK3-?O@`TDGR7{z zmS3?X>(UDuY`hR9MzItHhqtsZhsN?$!Yb`1oZTl;np@gzL`wsgqG7o`m)(FVQHDZS z71(pZY@SlAB{MpYIz~T8N*{zd*f(FDL@X|bMjN=v$pm%73U5+k>AkkU%bfOF$>^qc z#;mSwPblA$eSU2cibc&l_?({`mMG#J6&%;%4m9I7GKk>P9mEY8pleL^M^NCi`~WH* zt+Ks9bC7QDEljMCFvyYXnT%eRNFM5AhZSO`=al`lf?lBL7$!P$DD4=3nYXTl2W@A+ZhlJs7} zb>Hhp0OQ%95f=@0P9+tOH} z4xPtiKTuop;e^A%qwQH>akucyW32T8aiw~i(rL9DfxJ2oJjP$msXcpJ_6H;L@T02& zZCBV*)GA-{ zUGvp3GfE_%@!p}`BT5rME13nzvwa&KKQ(Y37TkQLuWh| zK3ohltvIQyC-dRDRFAGNd4zKRb<$JhaVqEN3a>x9=2+6}ZCK$O^dO1rQN&2STB5kL z$_?tZ_;Si_fWwi92RMCc88j883rw5GtmF4JViSCj?@R-qdO#K z)WVvxo#rwBA@gt{kd_4?ALY|W;g!^ijTpJb@#js=J!Au@=q-Hw zC7qZy=!Y#hH#^IQCWv5Bjv|L|A9Y=_42f`E*Jn?asl&a;^k)xGhROCfB5-+9bf7yy z0g{JWbbXP23ixYsfBMf3J_NvmUxEvDM%YWy7X-HSnpF9v=P51{PPT3LK1gF_XZ7p2jkAa?^o)MM;!Dp!vsO1ac z;tD-co}H}-Vuehx5U6)iNy%*xa{;XcYjz^9NqYN$8~W{SF94@(nagOYLPjCIPj9kK z;%b7DqvbiPiXINq*kGRO+AkGrB;`qAsSP|-Ng?Bnc$B`sJW^)YA8Yn71&68QOvlo_ z;b;Y}CQQ=CYKW(TBCGR=YX)emq)(HIPpf))2LzmC=M!hj56q)zRQiNjk3p@6M6OP- z+({?`$<3r@j# z{=v27_i$a}$d6nmO_e~q@uT6*EANDwepo(V7Fvbxl4fu+J~)@6W#Hn6y3L}bwX64? z$s66fs(Sb!O37*?fX zx+w5PY&nk4acIYs{ zu~Q5ZPb376A6s)aFC98d7}DkVl9|@-1<#`sg*Hadnd9oUbWMkOV=vQd$;u1VT{gFz zv1Q@@?nI*5l_$ALL4e9sv~!dRg@_EtPBGvVX#{+4kP4+8wsdh3Y)#;+7}uSO8r0${_dUP+5Q^gWaQ~)6sKI6Y zX8zdQ)vphsMW3FcWPOj22@B3y$1j6$!ZL`LVVFlWwqKi({er;Xe*}i{rlUMHjp(c| zG#@1^ZU+yGx}c zq|bUZ6X>vLBFHh2utJiNu-5%}Ok_-zavTO*iEsL9zeNTr5Z8$V=p=(~Wr8z{gz0Kf&}aEx*~7ai!S;w3M^UM#pcK=bVsFUqY;X8cM`hoh@w^Orc=a1}f>NIv7Qat^#6+kOikbr1j*!*b zXPK^@V`z$D(X}vHU(kGBTp_M^NTh>rAnQ0lBc7It2NxUZ6;0>5-x|(^U!HQ6R@TVX zr|m}~H4|tM-|ASBFHCpPqf~r@Xat_+8o155w6W&U7C$z;SMA|iSH@>K@Qly0|4xEE z9yt2crzR1bC-S@wK$Ru(LCf6t-&4rkT?A)8`3wm(#w0l}SF&K>^jOZ3wHZiI*?8yy zxb^D{Ub7GqphPN{tX_IF%nHjykfLkPRUgSTw`*jMZ_wKC9WILMXFEB(7DOIvCwnxp z(RX2t#`1Fh`93-+aJg6By4~qgBmH;ji&!GXVZGP^T?hpS8UZUAy&H;qwE~*{RLoxR zTY@@$A-OvZMR$){-KGZqgSX$;sSR|6v(Uv9lOg9lCNb+@K--w|a;pWsK~SLlo=dOs z7h2~LRqOCb23(OvPmPdSGA(Ftqn$L|xuSBf%z=K448Nl`YGh^QF&_DzrKF^+2`S_0lYv0e>+U|r{Psbjf-qe<`827JgSE>F zmdtusMZ|gOB(xkg{dk>Tz#n+Ua;+w2WBvn(Ed=$)*JN3njQ%KV@ikT`Rcz+22>Qxa zFDyKoc7s*UaPY;+d=b~-aje2eAF2lSvHq^lEZ0}#koDS%Su%VT^rz#uURSZGac;Uh zT_!(lL4<<3O*|Hy=B~KWdAcS@VCf{VAXrDlMzCt+lW^K@8|Fs(r5;Y}MKXU{r+XVk z%f=3&kcS&sWEE%S6uV8%u-Bqrv0pL=ZgGZ<40N%``uHl60m}RSiZ4hEVz~=)TEE@@ z_;E#&Xz4_+EIq^Ht*^P+$5v&@KY}hdQatoWRk$sP09$U%2Mw=-1qQl*aOl5o-$dbl zvgg)u;IdH>{Pv_eZ$Lj1M>;frhp5zw_(#G0(V+w$6!;rAN9w{w&*QW7%1NLEchZ*T8_b#k%Ug#}_( zjRXzKaRdTErkSNL*0nsU3}{&Q#Idy*J013bzryi{?3*SuZA+juZBL>#RY*R!#fljo zqKnvi&Nl;EQsfzt4+S9r7cWC@)2NM+}`cY-Mp*mzv&n1c_t+F1U*&W zV(o*w7qQ;MM+4~3bKO}%;?czWA>iZ>$;}SHxl^|c?t^At$NfboJ0Ev`CekGFf_ozU zuvi?4Gj4M^Z#~HY*H-lKy3#>1cn{x_KM6`=&ACUzWtYXb^LeaO9a?jY`DsK}U(z`@ zJ?u_0mGWMl6c8&Uk6%%v$;mSG*;YR_8Di5H$=-8p4TgQSTf<12sJnIUd^sd*r(Mr* zS5c&8rrYgOV{()Ow&6YXbcjZ^MNfL3>C({nfCkfaTRe3Xht`=lxyJNT7-Q)R#}DS(C9!zEMA_;AgEOh)@M36pCLoEKjtx~oq{S-u^d0e zpmG^>y_X&*_@@GJ=rHXWAmmO}8iLn;6WmuWsz5NX4`?DYIVrK z*(&4VBlJwy?dxBTyQ^c zR!&CDb8Ou<7I+CM%pqNqJv6Kdg4TeXy4N_%XKT2&C0>^}ST7FD`uw3Jwpo;)5!ldG zrAj}F0Z^VESX*6o_=zuE>R7uc~Ho!*ujTvNT*sbej+00x>ymGiQ2z*QxnV zI2?w)87)RWi6|i98O=HM{O~R)l}#2HqIF@1bk_1=`;k%-Uq^@@HUFcLE1%%666yh- z46-vc!iH;j4%(40D?=k(3z`bJ%)hV6QLM|+lQuiNIiD?+|zkxLv8{z{Xn zaOzP)&QR1Hdb8Gcy@wBr75S`96&Y!r9YdkZBd*_j)s-_V<}GveX!>*X)RAruDP8`D zbnTixROCev`ZdjAY z-nPkhx}+9~EMb4EFQo7+I8NJEJt$slayhs{xRIV66`3o_b3tW-#R$|b^bh1H&oeZ4 z0!ama;_W9uB1`s}5y1RDPKHO`ovE1fWq=ASMU|cT2~JxA;nS1J+@5YR;`VNR8%Im6 z$V8kLk0AxNTf#oj@Oag@$?`X1O)FK5m6XLYXJX!VQ?~UMx-ADt1qsP*W+fR%-PYt) z@0c%RJ;684)K};htaVMVO98xEbb>F40p_OBVbN!Qe&XGX$H4l=9NO<3kJ+6_HGN$5 zs9T@?-F)ZO<6xAEj~h`Yvcl2O`xE&g8w!m&(yi2RII_fH_ z2Zml|8;vW>(dqEKfpu}ALa_lu|<^${9_&-o!xbm+nAs+HX_*LO4A@Z4$x!)%`0 zaJcyV(0%=W5mQFwFy{_>W)!WngWWZUB1UXAiQu_I_y3 zr6Y@_@M^zJjRE_ju`~miVs7~y&3Q{1gl3P~q8BV+d3J{Zx}lzzyq+*cX^5Q_pnz}J zzpYDtG8%K)7qw1Jfj&z+9U_HMrN7~qoIct{CW*Bk6SHUei6jq?J6vjn;Sz)l+p+c^ z($}Mhac4kl^8U||ZB50iVdVWHHRe$As~N%0ZvZeG0=YgPe`mIta9_x=l66zGfUp$q zj8T`jR*I9+FGwm=xNLCLw>9W7F^f^OQ)9JJ}M64S9M`npy6VX|VaHbH1! zOU(JfTz^858=c`QR<}^Jd^ydn-BqlE1G9tvMz^zDxJgAUTnY+W3}Br`a|3nkSh` zs#Zmp?X2;gPjoB4I1e^_;_GZT(cPC-W7{7|-fz_V@IN}8EwCdJoF5|cX45*p(T&yp zk=v#sTt!H~Ds^^KWNRQbhiomH3Ya66TsC8sMlR6xX+=e%70^44>W%mtvZI5*iST@< z@ym@+2w8O~W?2O<{L-3)PMw;x z!7=v}PahL6g^LHBUPL@Ea8pVh8iG6n>}4spU_(Zwqe`p8l|-pO(`-QzA@(+r@hklF zXl1|s=xZ%~n5}du3;?Sv5fL}HxwHqYg-QUdO&XttT{n}eCTdM0x5X+qs>zUMwo*wZ zN$hyV^WCLS@fI}C7Rz408^|57q0yI3obO(6zB!gFoA}|ANdx7}HdnC$;(+PR4s^c` z+w4d+WEeg+0i=qE#TWq0qbef4vrLz5?`GC#$HNoCMA`PJ)? z025o;nrcocn0_+ZrPCdGyC9{Hf^s6+Hq`I=BRl(;TcI%DS0j&Zi?ywp+}O2P)i{l$YzOxI+@0eJ}x#J})nkNg*+CEgkz5*}Kf+8~o9U*FF z5mJ#C68Vhr^Nf|BVZH9VM;hV*10O~zjg^IICh4md9cmvEqF5-ef9tYz9xj>nxhm7~ z9-SOQFl?sDp4P_zm3PHNS$~LI6J&8BV`zkss_S!#Eo`(%!7Ev&9bG9G&JS)xtR!+K z-mz^z^iyRHg?K9wpg^+GnRJC%UB5ERfhxn9_QW!DAn5|_*N14GyK8!`QUED)*hYjS zG=LtVWZ^JnfmaC%9xo_pgD1joyCO62Oscsin+N}7;g!sI2C!T+fn;;}?v!@}k7M_| zUXW!2nKv%o_n8#`_I=c4@gl$;UQpj961f8g_L+*_?gZSGMgI=%q6!$8G|FK7#*aZ% z9rL~sCTINiO}&0vW^_<3o#Uj|+st0~A9d4Puvl`OTs3fL`iOUd#p z0EZl%3wkb+V7DA>!{zFD09)HKxm*kazB4_b5m;cWIX;gs-Pgp6>O9ODdOXBy13&oC zelXh{`Mf6YVGc$m=lnqG^bSCmsD*Pi1&pdx`A&E+1wfaU4OZ(9Mip9pGk@P-OugeR z!T`CuRQIrD8b+@uS|D<@w~6zm(n`YxX468_YB%>)_zg?@X#KI`TqnfW7uApfFFxKC z^SSh+o*H^NVvU2FC)PASPa$gGkdIN)?WVz6;59PYv(z|*!52q3?$bM-q+g1wE9LB+ zP)Kf4zw`lCfyBaL3qq7ma*D{mo8AO=mpd8ehDlPEbeCjD>(YwI6;Jlu>?zN*^OlG^ zTx`6?ZQ8jO#J!Vae#VAD5__TuLnn&q>L8Q7;Hf=`3r+o!1x=@vrLt@0P*Y%M7iM6O1j&>H+Nn z+zRB1g(oeo#TZU;UVP}lAY7Of#1KTPrz({;hGh$mm2OySbhsJYQc<~Y;iy}ISP zuZ!<_7Y?NO>pWh1hUeV<%t95~X4y+`-Y__t$w?G2tC zVTj&e+dnaFh?Aie?lo~!_LdL_yyh|cNcg+Z_BGZ{JErO>8kUDbtKLA&loKugvTBZ< zx^-6~6mr+v=OC{-7a$azpdiOV&wim`8cQcbD`!mNm_{wl)hSvF!;e(fFG?M<-PB%B z33{{$Fn>;H{q__ix9BInzgRVL0MVc!iGv`@i`O{+n7sa<5XB!P6G36m*MRL*hx@YH zXAAsv#>vgUk{@Po_^wmUeY}72C^Y~p+!%s2X zDZGq(T;n&4`t|-TSq2dDj(g7KBs|zb(C?euJ7q<%NdfP-R}Xsj6H0(IxN9&{gL99h*HazL&6v3s39PM> z8farFVpK4mQUWYZUDYp+t+A9T@9a~9c?BSW;TI$a?L|TX03k*t?!VBLm7z5`$9X)} z@d_Qp+mPk4<+z)$g7WLBZTA*|5@V~S#Fq?Eku8Pf{e!du$ZA8A9efbYnX3VBpd44* zLC<~x`6uF(vokt!orid*fC+Ud9Ea$t*?$7xHsyZ?YkJ-F_OjvSjzK9Q?D}Iwh zq7$Q$%V`9tiKPII{VC6ZDLWcvVvZh!Ad;a5r~hL<6aCkc09|2uj?>QEG!?x@DMc`2=+EyFiruVtSpTzPS3G@(mn~v;%k3Vd}`+&H~WkP&`g)Api!!Km+>W%BZ}#F4LYU_KF~Hhdp@UVt%Kls?=zXg+NU zfXt`ct@dC3=Z8efvn;Kg5~E+UEvz?R*31GVrnWf3Vou$|qdV86?B%ITN<|vFW*@GIXso%MvMh zNHNQpVfdx5i3tqQaC8>u-j=*ez#dBz2mkoXOutrB3-%at{O!5DGyf-SCANNK5kydi zw~s~D#j755=6HMcEw4hQ)vc7f54$#dk3J-1?}=dL0Cs((r{kZgQw;z^L}Y9Z3~|&0 zIte*sdywY$YXzNp0DDG@4HVn>ee$gIfGWQW6N ziWd8}g$M<+NglB>TUM!1s4gA#{s0AlmnRp~a?|e}>Tl;&g%7S&xZ6w}u#{gsNB8)# z^_hnvmYnG=;cI&QqeIhrk4sqBR`s}>%H!D^4WjG+&$Q!caBO8G{qxd}7E;yn8G1{} zVLWP?6aHa_xZ7j9Dt#Gg(1fQ3wP52Ff2vF=l4PIk3$78oCYxL*H=+e zTNTohSrWUw@@Qb{dxdq)gmn}H?xQHjpU0&Lrm_?<5)a5d-t*uPEvjWg3&Wv{>N_ly9>MuKH{`3H|;QLvs7mgFRI9eguN5W|olFX9qBc z|45$ug`x~I03(Fp-`rYSjGC*)bQ2N!-WZ~7d3VM}gYcEey)j?20(Mbh6tD2pVY0W* zAG?!K2J8Y^%dfL9n)ZIRF9Kc*0KwsI4{yn&n&nh?34bktAlQ~Se~P($++ZKtL>&Pu^v?gb#LHbJCaqlsbmFQ3cl>C|M z{e?OBfu(9bijdp?=1*wN9tWyx(x7SJKBDY#z(3zPHLZE%!J!{}m^gN9CHnFI@$kT1 zaQE=x-MdUm6a)m@4N=|vO@bhw>F1E4asUVl)}Ue5KQ}*%f0i`j6u2*s|MAX74v?^jWzR2> z#2W%k&3Z?^?+WT%YowQzquE=QcPlt%GgDTD18gse4j^xl9>@Rq$H4nXu#tqHVaZjU zm1@=|Ad{7bctxPl>M5qp+(LeD6P>nTp}{uZ2jJ={hLtBz7+`AuKEbJ3A^bLn*ZQg0 zI^l6T8i+GvHjZWlD4j@q`aQS_EWbsnwnOPeV+nyuG5CV!+>qq};|C!tXOq~XOpK2e8fBWDIk~L2J$w>AO zdGCW8KCddH6oRTF-e$28)(@#cPs}knDuzO?%I)sGbS&)>knkr8B@Y_t`9+3C`Xh4W z2c6T;_q{y;-Dbq7~Vkn|Do1A|m<{yyQH+j5c0a&fN_5yy`Gz+p&c3Lib^?TT7~9 zh>w}}x$vWKP58qiH@EL-lo`cXs(gqVWVn>NIvL`R&_q*iIm={Yqzr)`JBf|rXZW7m z<(4|IGALUFb6$S#C3fEZ!JCE`&V#+a0SoMy_~yZeE!r+Onkugf&LRjF%dd^N_jZw9 zId>Jy)|kBO$+K_tc&i>x1f~_lOev-im!MjB)^%quE1?WF`z}uPI!o37mRViy>#Q`0 zEj+qobiEJ+D1>5fH_LF&yPDAB(=YQLwDc#TcGEUZCpHDTw0hllhu|-oO((EIeh}QU z!9)klb<|*i_Pq!?K4<`b(<~)PM6<(!0JVfTf<{NzAd*W#b%72?_Dd!0_R@Mt)Gws z#cIXInuTbW{?;9Ih1KxvfDO`b%Q@E$S@6!$npY+d#@IYB6!g#%cNU*X0Bi21krYFkip}r|YUL(n z3sfOrIR%?QWgS54Mn@l0*WG$bdR-MZ^UaZV=eCWVt(~P2G>GZ0IqH`t+0zi@tV;_2 z7PkEMGiT-Cja}T-8Tpnpyq_yTx_csgG0zby);xzju@=&+OhGUPGIfr68Mzm1URXjT z?6UfN>N`tNIs>sOA>qKlY!f0 zX%Zny-hIU0fZlbyJ8y-s;~0^+EX_>qUM+x!UW4|zSIh3VAs zL?EBmuawr#dw{#=ciq(K#V24W-{Gf04#UGdRXV=DYk1L)kKMlLSBYBI{F#AqcmRZ? z+qx^17VPt3j83lEGhqJ-UdBF~A7=XDB!$iyZp*r2#A_@#w|6=qx1`=n5^HpNYKtbt z-5N@WN`2aHBQ|V+*70a*ufq{|%a(MZ?{YK?;j@@RZqsQ=cl6m;F&OIOFqTzyQXuyO z22zKnXQ|W5CBNyrL)#Z%Wc}{2f-&97fQ4!=`*K(;*_!NKN8C0f)&r9n`QY4=P1XGh z2I$+n0(5Ojm%*I_9g0UCmZ7k*1?PqSSs&s!SAj+^zmQ6ZrWaRTng!XAh(Ts6_W#lL z=3z0n(f>FR+9MUIri73dw9zs{2q8)PG7?JrqJ0@@qfmsXRLWMVL93P-8Y)uLzSo#` zP5ZRX{=45)dOlB&@Avv$pYI=C*IYBxd+z((=bZbjucP@~6W3!o8!_UMKR_8qihYy06*f7Jyqm9-SGjG zqUd7UNKNjRSiQV~8(r?DOr^jZr<{Vhfmq+@sx7)0NP=`!FRF9we3XXp#-}~gr0MoF zBeTgKU&h_XRK~H%+{Rntzv_hs2)>_AkVcMxr1(o;amgxBL(uH(8VqPorj7+q54HLV zuyUUXh&3^$cfO*v3xWa#ev#GJde)dh@@PO|aP)(82QL?3OrLxfc3%ZNtw0o%rV$#~ zkWsz2ba49#D5qdUN&&so3#Cq{rYlj5ZyU_3DGzq2#&F-|laKdZc56)V94S;8?)b3Z zD`~}*5-BrBRK`h+j4n9gj)$RUHg!OYH1E2Tr4D8Djf9+@o&YI&^H++6lTbF_!lb}s z2lUC)y5sa~B8LKhWv4s-ud>tsH!1G@=6H?};0vN=-}oLKY4bp8lDT4}!@qh=iWGT{ ze6z5$cC#v(p4{bQ?wr$PTV)OVmExbw$L4mSS5wMI1FP>MCtLZ#!_`Oi4wxB?^wEC~ zV7ZZg(`t6eYma_gzZG|&eE#~b=O?6+LX?CinQKt*6!HS{Ma{-4&a@Jo(pn}4(h?iV zbAojiMo=k3R)iQT53D{4DcR{^00eF{y=B5CW64*}q+SFC5!xi^V!h*g#-1CHr9M4Z zu}lwoGJao)0NdoGka;DI4>TNY)?5S^HnYKmvO8lqOF5+ZqN_x z$WdIdI2Seh;)|eSu5BCp@oF*C>m{OffkEg$YVTvYh?@+*R0S-P!R%l&-n5dfWM|DZxIDaB!#48rYsPi9Yzm#j()$d)oJIZY z@J0^ck!J^c4oGs6W5sLNvKbLCc;rh=$9kS&7e|^*NB{IB{Yq{2yDM_cm^U zEV=Ia8pd+#ou{A%D10F3w>!RDy)Fb=4!}su-ufBY*0A$Bs}&#k(uyAis+%Q;tgqd~ zHk5;Yl+x|7Z+44$_8A>wW_2jX%)94hAiD!wTfTi67Fc}_P)+w?`-Q)(!iOKk2yt?z zt5$;9B~Up(DD!jyuwIQ8L%GdaJOC#>%}=B7?WM1E;}2f#No(H$`ly1KP65DCB2_<8 z336C>1m?C6)W*A9Kq3d#-pZefKbU#(q83ie>PJ(M3+W?*SmNf6 zCI=2uHH~*!hyJ%K=6guu%42v+0ajT3&Ak;t9h}!dF{R!*R@oLB4#gZ8a#a~?&^Ows zl|C(E@w-qTKo#}lxh8D_BTq#m`d6m_V8&1`oL(r4%DIwxMSN8#f<-O$yE272ps3jJ zJ+lo+mIM?zblAgV3aXC26D6Z;(K8sk~2MLBs2gtYm(P6bk)PzK0i} zpvBjG4hst}ElkSdB4rhwNk$#M@3aGv3^fwT3JxsC|ASD_PP*aFi3JCAiATGz+$}*n z*cc!t-Ri+5S)iy~qTm*V) zSBe+g&tGjRdyvcojwA}m($F5>;;ZETx1j0kV*Dq^_6VfS_XHFA zK~UqY;5^#lI)+4g!!gvM44|fJ3P#MK_8?K9kX28%E$YA}FQUT$rA5A#{Uzj7QGyV# zVpeoBJA#cRRo*Wle}=1;hRoESvf8;t*=f(3xh?GDshAW5>js64D?JF~ox`2wda*ywfwSqM6)Z+6{>>ziOep-8i9zuoa}bCQS7SWk zoP6c%bcC%_Lc#JTs=mL9n4XcvsW*;!s6F**g><6##m6dMPK_g_bP(y}m#BfNwzzDa zmMaGPYtDFH-+~wtd3LDUOa+KNXmIkh*A{xzD8Z`D=Hb7 z4S$BN$|KZT4$uzOz%>DSMub<KPf-eT=<<1A6IiY3Vi)cp?ZH zK3yi5yl~i4?*Vn>$1u496;Ht?NAq&r4w>*wCVBO`S`8(}M8=eO*lN##!nsGsA0wl& zZmew2sShYx{#$^zdj1rt9L{u|qYGosy2{-ORxCex5p#9soj+xgKXh0dz6JzFn&nFr zk4VzC!2o6qaY|68v_%0mWwkQH2z|zFXTW-i8ZB^w8ab_xmN`O+9`M;_f<*mdjA&ui zf4Fz>OwbM-y>{!^SoOm=P}y|=RAS*NYiyJ%P~VC}i8p`p$&sW5`|)nktj)S8UvH8b z>sfKXukI*-Sbpo#o;M!b&fEZco%k`-Ms%o|b4jixIqM*+xo9jsZj3rj!U-f@b7-X8 zN<8lV=2o>*6-{`LG5;COpU)#CQ~6l~au`)GS<4_ncjy8@Bp@ba;~}y3ZM_WXj}ttp zAgKq^G0`9$(|&FlrF;p>7x!$rjkSb{yZPZ>CFG}7a%nArv>7qt z{v^t&xgX)08&i@|`I>dy&94p^<_~Lcd<~}!H-}x-fA#Q{I%v(q}D4P*D_UI0=JfF}p$?)Ns zj75wVldD}y-wS9>=?@o8+`CesS@o{)viu`C3lY!-dv0%MV+QB|W-tT?hQyA*R=@4e zsXx5&Ta>uo9I7wf;9c;XwygQ4NAgI^T1H&1Jr2O2?5;ilmW_}CYUkMDtmVpRqM>`s zw61J9eK5bf!K~unJcs@gue&Gje zNX6D=`xs~vrT|Pkr1y+_qCnsr&R)d!(wJKuk*Zk!E%Dm)?G%1ys|{8eGE@9rfzGn( z`}VM}=a{Y?`$RlN;`(crpp0RNkNd!*a1jx4PGQTrCoQ0{9#acq%kyz+Lich!coMLb ze!JDazwn@sF#jN)#%l%(>HrDD0Vf?9;RlA%s3yz$(hS%;)l=>6C;L{%sZ)nflS*Z^ z)Z&Wmy~vip)|je&ZA0 z^E(3o){bgIfrH5xg`}dnZUqH}v#w6X!KMM`9@C9h;7L85hOUlX#XeSFuD&uzu%E%L z*zM#APD&Rl?Ci}mTc*S^=oI+O#?9>1-;y185SsSsvapwmhD!809Iy7>sN%5vAl zQ}N2O3GOq$OqVbH06d9UFKoF9zyWr5SUQnA`YLh2`l~Fj4d*xl+x-KSf(8`;zH)t$ zvz&5F?gXEW2sOd~+b#hRSs;<;aUo#`LP7_8+obJ|^7rj`Bv|+AVWLdWuFw z{sWKh^knsSNF|D1IrYTQDdxyc_|Tgz!E~GA$%jN4B*m`v;#5pCre7)aEt6t3+50tB zS2&3P20A?(`xsotqX+XJ|3nOi%^{47z4bs0nrW3(GRq5kvLMUM3UoOW>16nZl%&_< zv+Jj4F|!yI^`9qnxdHSVho3MN0>Uqy8EKDX1Wf9)L@|^q=cbWSYgm!Q9{=ywyR%Rf z86*d50)|XiH9F}1RmW1)(xb_Q7_G(20kDAO)>MoEYyg*bM-+z&W9Fqxm(M^b&lbC8 z(`@Ub*5ckjf`}z!KDyqMF;TKv&H!CvSC(`6T`}TJ``EfzWT4Mnc@#<=OjqiBvCA+( zOl?#)zeB{58DX?>fE8g>te!BgBE9kOa1;lGTi^;~j)%iT@aEU_=GvMumW@W|q*GQf z;{o1PN|BCy(VGkT&$`VMf?uNn)Prz*mRY`22Q{Oapcl%|nmqg%H6`WdIJ0WyF~S(A zm?{AsLj*ILW9~9C`5wYs=vxVSE5psvFMf2>Ex}A z<0VC<=0DR~^_<;0cG zJ+hMkua)-Up48rflxvvevK+s$J8_Fsfu#E76PJxq)d>fPVI*{hNxgxXy30k-gZ5 z7?nmNS;!?Kb8KC2YH}xc^~`&U({eUUf3;wG_Dq~mSHX|3mxJLQxk~=TS-1?$tNVmy zFnzyGH8+Y`56dY1k>BZQ_IS1?+~6z=05hwKdNk+>4s?qSx47DPS4f73>}-HjT`eR( z1K2AKyQwr|{4ZTp@ys2H9(@SNjHb0nupC#dvH}@4S%SdqS0l`1qf40#(!@#J=FRH~ zJSQw{yh2-C4}*RpEsSE4i3#qOMy@)Ut}-HussK1FQSg_QkYhJG8L6vz;Cm7r>#r|# zm@J)GuxF24G3${yFxj|~*r~d@XK28(n?Nz~IU&fCP2~^Vh+r~j(c-aFz@g<0hhfxy9L$?g!MK{V6u9DA>Mh(m>;U0^V!N%h z!=LzR?3^)$`_&h^RMy;W8ELOoKp$dO49Nq;fq>ae?gHr6uqyj*a`{_q$?(*;d=kTf z;yo2J7C7cdEFw^xTJrhtqxv@6gy4A99H#oZ$?^eLFV7WWS+q$?cD4F`aFL+W{X2$Z zR7!q!j6?co(lPh&XlgLM@{Fpax$Bqw$`Kviu<&qP6pGF&MWe_hm#H3c;l#Pm(vRdG zV!`e3l=x}w)WfJPcLbIEN9-*H0BADY5MwhO13@y)5jkRZoEGs*^Y%v(RXnvdW?YG2 z9>#7YTFHrW@wT)zJX)emmM8v=@w=_xz0!mkQys|T|j8WDenBQS=r%!++MR~pJGWZuOf)qilp}s*`=x=xWW46<4sAEyB znODGh+ZqCRxM=K^D$yd=Gvem8jjZdz?^GDQGx0btr&iUOYeVHeypzs5Ls|yza$3i_ z*iG!cbdV{_|l3`3;aD~t69*N2t0W7YX?CiCPX@sR8 z^=`q5D^v5j$+Bj7Az%=S?_3``(13n*hBf{OwGQ}-@@aNnTEthK@XKH8CMl+pvmpO9 ziy6=$W;!#%-Dq_&*aKE3k`=6;I;(=g6nuzLF}<&^r!Gbte#L68b1cwE-9gc?;dSEG z9E^n+oTbDAbOIXC-*9UUvkTNJGncF2CA&Z7xfH4_*xU{QCuh2h?PV>^uXM{!1vP zM&k_Xfug2a%@2*Tco{r_rc)r6hT{m0b}1rAq!2F?DA=hRp63AL|s<#1OTuUXSP2N2#x+G@FxgZ*6N+c6Yxh7lVO;LWK$tu->Jm$TbjmvW{Ys`T{BJ4+41?02NQ8HP3$#eI(0G@yXVvs z^%vb8DqNBjwb6o9@2py5XetAW+EXPstG%`spp2*~fC1`8=HTNOL_Y$<>C1<~3#6t@ z;*W6AbDBu|j@NjcxT|*oKzgqnxl*05*@;3<`d0ozdS2lU@#*fgaPG4g3Z~bF9|sP@ ztRGqeC8I_XXZu^d?BD8a7w>axP-I?yU3D8m;&c#%adTF09h|c#D!`$u_y7PN`S$LW zy*PIAp-tE--WG;_h0dL<5>H2CF#hi6TN!MgNN`OVQ2NJ<2Q=jUr)7{?h0Fms>%bec{H!5*u@Ctd{#7~| z#TqgSXU#>)hk{Qjz}Ut-AEE+nhYB&m_A40-B#nnihd7&iUj0JZS;3l<-m{yjNF6*3 zE|x(F)(PpS8w~@0!go`5iX91XY<<7I+Fx>HY++wcoCEW=VbtxtP5B%ETwWfY;rsqo3+t=-}$M>wK$Xr&MlC zKI@U`0*9;a%p zm=x`0^?*E2!U6Z)d6%!{!tF$`bk)s7Fb4T}yvgx+9+)?a zCNp}AH<8vcAPAR89y&}sG9|gHHk{{nz?7Kxg%$v6GI1@_6+3aqIi%h&L31W=93c1{ z6!jZ^Cpgf)z85v|RXUtP9*8afdN`W(Ss*s_OR8qb<({%TL{h9_Apa4cQb1+Ih1;M> zZxjErz&6)T0Yl4rYR!KaO@aVu+;s%X-f46zB6&L$Lp3w?iRyT8B^uS17=znI77CN6 zGi`W0l00hYis5EFij-8JUiTf@_QLZEwLyQ`SdRrE*abEGY``e3OBA{UUWaBOW0>lRafaf^4 z8AJyXTkW_2vgrR*@zFluv+vILIQ|l9<$o>9zrO~B8Yy}TVUz9w|6zQpvwdfk1goAZ zE_4_EgGgM62$daG8>{FkZ8$s*_uaO+ACy3_9_U+&Xrd;*7`#;JyrvH!Rz?oU&kbsq z9vDc_Z+zJ*0AmcY6H7urQnjn$@M7jPI-`)mp=-P`kdlEkcpBxt)u|!?KnN1COp>2f z|Lx7Lg|c}cApiQ)TKG1IHPxLIo5HzPPN`rfcnla(ynRt6-o(%(UbK48ZE#^o@g~8T zQ?KA(M7*Y|02vn|p|x7!DEeGEWYvE8pt|-102BZKD_#Dh9|Un0^Py0|0SGQ6IT6_H z8k+}}i9+!o2VDVhN7tUe8KB3{A|AsJow8UjaaIQ~?W2=-t6zYkqul14@iKN@xo<~5 z(eX@Aixyv9MzqVWDP+o--QSa%C0I#JZ}-OwX40^HNpqje zE1OULf=UgXh(tc(-4e+7W`q?<;afLH!_tbzby-ul(r0W+h77D4({<9TwWX`QzsQtY z`i&T1@&IV<_!ksw7R0+#wNqUJC}nFCA#7XXc6lFH@1Y4@9%$-7i{DrY?)izBGG!SU zir$m7Zp^>AD5CsMnQx_x4hQZl1h_KR|tb zkf@wn22$`R)(pg~n}iw6C5QD@#>Q5qNM{DVMI4pp{a;|uO-Lw1In>LX@NDf!zH6KkVXVJj3012PAExBw*Fu=B>i zbCmkTnFiBJ9+Z3O`|%zatH66?t|y9%z^L|0Z?m9N@Zs*&J{FCXW72okoUYDwd11{O zhlR29%f`STYoxg21N7&9tkpd0!ED9*oSFN?$9(0D(JR0V_3xF2V3WtE1a!HbQM7hW zcVoqVyLBv&Mgt-Rk2>_`9RPf9;b;F@uBq%)yi0VtrTngj*i5GvLBWM2D;b9yEC(R1 zj}O?-hVN0#hUi)Ak3UHIUgL#8`V9RF#+8PvE7Fc{tzdN=zKODu{EqbH?oj5}oc$1~ z6AqQ>CqDx$thJSAiR-j*7x5p5nqIcs;{IeO7C%~iVG9){t9eYHPJRWjVZ?7eUa7PvtoB&T2K#D=IO`8l=NBz3|^0u;X&dXP$8 zLzB+KsqX?@%x;dt7%d;%ZHTX0@es;%l%|;B8&z5JsVDgJ?Da_#-)%y3?VE+#n}*~I z$NN>V+x`1fBEK8iqavOOxrtm>Yh5F9|6+WJ8@fO@m-o7Z}o%C(f);@J}74K7U~4Oz{t^)UME zEKVSCJftpdvKeS5ZDPn}=|@ra(>^9d+$O^W=6kpJx){Y^dZe&Cue6+*p-AD}w7W1; z6yQVdu2wqu*ftuq5bEX5E*uYHBXPm@{IA44H?m&@K9a8M$uMx8sj;8@3Ca>iJFqR; zXZHUNdv&nu^6GOT%>t$_M#J9&bZ(<34wJoQfwRJaT5o^c)DDBLCx7HrZ#at_?DBnY z`T2xM-n_qHSw~TyYS^$86cx`8OK~>ADPMK7hU5=U#1kCWsdTl##L16Ctv=nL7(AoC zu0o?2@xUvE!2lVdqnPa+3+uUSW@=~2EOhHjAJ5CjYJfEGc2Un3E20K)j#MeVF_q0a zx&YX{&V^cOY5B`r8dNi~+?+^l=!qODXO4McX%=%;VLV4urD3#Q$T6^v-x!7T{gy_Y ztdy5WM(%e?bBzOb3r?u|0Btye&kTabg7CGk9(;#6qgVk8ol8|f{oD)kLYe`@(7rgC zr?Zfb=mF_~s8>BA%lV{NLFoNen&Y1T4v4K}+qLd9H(7iC`axYQIQOAsF7}g>Oxq!l zC@Ki5I(485z@VT_{7!R4#e1B6vrF@8bw@-EYe_6Jk2?2RAgOsM(-Au+HsEz(dzrZJrFwiEfYwAhv=G!m)a2spm>S-7|e2zDaxv=0n2 z%QdlJFlK3Ks<@f!!Rmq+Tk1d<&RWi*P;rmN`{#=O6QrTW3>=lojBxJ}D=rvc$q7M~ zDz_H6TF?0saRS|%cTEcv_8>9EDU|=sB$PyS3eYwYEn!=uVL`PknRV$JOzTX>ZUG6mRC65!rv8F0z50=8B9J>QE@P`dz&||Uz@~8=!0;TUg!%V z3DhQl1C@-bd+zJJU9bw*7mF0P1cLZbnoHaD@Tgt|9g3-_&ix3^7)5(^Lz3&=Q5%JR zj7oTSl2HPt8gjsBE$r`_g-56C>zYGgl$>s=Z zu$)(=%W?GTBa$-Pe%H^XfM2I zJf;Tj`AOSamc%TTAJ=;w2qj%!k(xq*@*@%Lku={oemZxcyL_C;7oY(0f(1^904PKd zlSDmV@Z(0*L#GVdG?+NU3p>EVg^u^e;Kcog^|CECzDCXZb#3{TCo1kbRiVMzoaEJ| zR{F*y+iphi>FvM>x*1_6FHX7Yw&3*iYpE#i0aP!2yx}kcHQ9TQ@5#;Ts6Yn-M(T}u z?!IDL=NN|5Fh9lpDCV`|9jlELK9m4{b-r`hT-yc<007zZX>}{Tn{26i>t>+j&IO|MDHZa~Q4RVy<%_1WbC>yWss;RM;S-bQ!1oNE%j$OX`}hhEyiEj^K=M-3=bqQ4V8*?gtBJu))Q`NN?(j9eL=9yQ=>XuL z76Yq{d}VY&eiwxuaym4iT&Qc~Vjt)K^xc3r7xbM&as8lhKfYu134hQL_HNK%y2>-) zHwx`h`GdQTd}^qLG6xpxXk}cfa;7<|bkxk~nlo927-5!tP_*>@)9)p>z$y;kb3mM0 zExCT%yWG_;Hso^Jg-#uMo4-3RZ^py#sIS=wE@Q^f^7Tfu+?i>tWS8OF%ry-+E}phk z{B&4gd* zSaH`SfOgBSN1%1h8ima1bO1lq8lcn5Xk_}r0@i;NG%`2wKwfidIQGaH_&gPChb@ z6H8ZadlRzDjg^)uBU*IUB}&+oLMW*xL{E>Mx(%i`iLAEc9M>KZI!ymk1g3vpnmPE^ z+ttXsyJ_;9!}mf2rZU$5csekBo9GY((38)$=ouZe(1aYxk`5to)QaGwzlAOs` zrgu~%H9p+$#P$^wrh0^`WSR&-<1d=;@`)YXh$*zvYI$d^ZPDHcYLGKQ)iR-tIHvL9?|3OE)=wpt3m1` zGR_jLvUXb*fL(uk;gI%K&EQ$Rn^PeDBdUaGYicsI?a?sM%Fxiz0O<*jV8<&HK>+B@ zsOm9?qLBpWl$Wff=p(eT_`!5@q_&8~m_UgY=~1RtdG*s&OO&=wee~@f!8+Iu?_D1!E`Y(F=Cxg^MgZR)_hj zH4tE)f?2t>(|JWjYUJkc&)mt6R|HK#Ccc*=5T<|85s?8*i~P2T_`mY)`qitc+8^IV zB7E8Hc*nK%pD5;K?}PQq%eJQ+efs6?)r~twex_-h5(za(RZe+pxAEAWwhA0*ujR|I z<^9cmAJ2j~+A|UHQx|qN z3W-Jj^Bv1n+Dc@DojtKQxN12KwXn13+rZn{SM4jQaN}bE8(q&YrYxZUhwW<0+Fg^B zA7V)q^7#F1WFr16Pkf{GEJK0bk(+%~+ zK~?4ji(2Cd<;PU2iOfgKXf-tc8 zVso?q7HZ+i^a(?A!XW-Q&Uq~-y3-sJ2s&1&KFn3MBo&>c0hsmZg{GP$bXY=tZ1eP; zNs-L+cv)3K-fmL-d5tKwFnIL})|=94ySb!Uc1k$btZ$gISs2Y3>p!e@Al_j5r#}OQ z+N$ndUN)rWI3KWfld8Eb!J^O1)M#Q$N?m3XJFN&YG_#f|ec{ANO=lRBFB!FA)DcObI_gYWt=ObMLnr<`o%=@hTPhj3QE zM?jTV@~O<xOFd z%)WRdZ@AryX~!g$dh`&>8 zx1%|)*_oV$zX7K3kXwAK9r;!JBd>kWXMSl65i&z3vInK^t8`S*t|{^se1|z*@K`xn z=Tpl{(C>S_+wO1-^n1^SMVc;GF7*2bUJA%`#$`SFsv^4Ob`^<$^kMK82SP1|t|WWR zSERW}jrH*K?s8K5$wOmypITnuPC<=TUy6o{(AQZp0VH@idkJU)J@=I=Tc|1RQDS%H zIyUD_W0n!XVtJZCNOGM>e>)XR;1|O9yQ+?c?E3I{1ky4V@Q%%SEV4>zu$RO4FA1k^ z{8ql3K!p$LTIwzF^}^rR`zOA3I9Q#JSw%`ttk;VY06o}-c!A7kicisrX4#2kk%ZeB zHssUw1~zo-cbHXB=V}YU4u`i$R3Jfnv^vxNVqEnU)v;^ZBpS;^hX8Vs)&}=L1xhfz1Ms-&H;nDDBM@it?-V&Hn1{ zSSFPOMsjtyk>Z==BYEQjA+FlLNCzh5zmG@Y#pLehlvbZ!5yayLf_}U@hkzY z%Tkkz_#+Y{K>6N5J}ZD)r+Y?X20u}GcLMQB&zuN=`ZDKs>twB+?uY}e&_6DjYs5Rd zH9t5ub17gg)J6Ud^fw2-m6TJxin&vKds|bUuV=~0bO3!#k{1Ke*QB+ye-mkBEsZ@W z(r7)YJtXq#s=|${#SsR0o}F1c6hY&oyTG?BD~mjHjdFGlGIih(Sr+5zMq}DTtkorU z-&s|8U58!sKrz$Lq+|M*4wtl72GCAFuD)2i86(^aGgd#uY>V(NouC~AkV2{GUsU;7uy_GgKn+4YvAck% z&2{`;)YgeED{2lmq2ra3m%5dknP`E&zgzhbld4mW0TOYjwP03?oQZN(diDi?*8c$n zw>mE))R#)dNMEsIvp48kO6rS=+KT6h{Ws`PZKeK8Q6zDCI2#`-rG2+| zbPHFN*M+o9=c8Y3+=77|J=xRo_z>vR71bAc((wiy;SMg9D-hUr`GaFSR3MD)ucdc3 zLk+xpU+B$NLAJQQu101`=inHRigVZbcLC~K8pzkKEo*8P-zPGy6HQZc5A&yGrK=L90h+FBb?~4rY`DN}rC`l!`=G z)g^Q+ntC~pAp)$Qcz&W0H3g&cg!!0qlEsWqlj5V&A=GQwLv;l%u-Ha-Pxj)#lE7@U zl7~`80A&09?)OCy+{Lh=b6-WHyZaC&CrM4Cc&ax>MyS^Xgg-kE0zFrj>FnN=f6;17 z&L^rVVa-EB{Wt^g&$~jKlh1(tIi0<#^uh!@KK`6H&(L}Bxc}R)IF|VGHj=4QA#>q! zrBa{ZSRH(P>2w>W`z$z}YuMZdys!zOEQtZBRn*OXCw zuw&--=)M)Gj*}ddDA!qBN`#CE6YfXPyOZ{7W5| z=awL7J*{(TITUHr!^tH9fvTi8FAN5#Q}wz~Sx~0IZ0lbTcc8FVA;&3&8u&HQQU=f) ziLXC~XwkIRDx_s)@;H7VMzK@2oO!bt{0;I2&Rny;zS(l@aogxeA1G9(AAXE&b3_rC zZ%5!`nR%7VPElIqrFDwOlJ7oa)~yJo>1-I)-e7zDyC#mvcxL!dHFmrNDDt7$iWSS0 z1@u~8=>PtN*x_#UxmrIO{-}(1fhm?{V-eY!>j+kjB-booqisn!561}KcaIJcP(zo4xoCXt14@kBiC&?&<(ARoBCN_3P#69vQ8&y zYJ3M>vESpA{H9_uL?tVbU}o&U4q_>#-%Hl?UO~Y9F^@lkS?(F^5Pqy@bf4b$RD15sps+7a(+k;(S%3sh<#OP1p z_f#FN`#k}<0*aCz6Z)pGxUc0-Vv~gg`zL0d1Ur50wsX@b_I+ZU^D!(D?)@Ew{Y?Rc zDO8PIxUXyxtqpPgqxb55JbYIU-kxt{gp7M|*qbn4$XxO0T11o-EH^Z8x7jQA$q`V8>mu(bB6PZaaKNhYO$9SOpVyEWyyd4n>i{n z5S+n`?L%)?)AcvE$V+mL#%?R~kgtHtDN8TjeTq;mlF1}>Nm*F3CEKe+UsL0p*V&d; zSLY)&$Bi%GyEKTPfU}(VBpA*GTAT!Xbz6{L%kk7AS)Q9qeEGzDQ2D~z`v%R!V(lSN z24J@sZ%eL)Tmzvd%_YoqX9ECoIqBW^-UyoJrkKt(GGCO&v%!1vYl$T1_?S$`?CdPx z%+?C{apGSFPC$Anoon5Uk=Kbz!%vK`EHIo-%SUO^4mj%!>;T_LyG68jaOG@U4VCOx zYj_>qVDWRlCVEr&M|ZsD7G7bd-%JJ3rMKcpUse!_TErUS&Qsp1qH-N@7MKUkHw%pi1W&Vl4;U*(81YA&F8;)l7rk1D z0_P`SDhw2* zMR_MY{ry}-A<$^`x#GvP{>b*fuL1-wdk9_I^1Kz}UO-&2Q8e}|SMr~mtqnZFp6s@? z6|zcja9CX_!R=exyI|G1>|o+EF}{#ji3j=pZi~(TurDOcMasuODq;!omh2W{M?~bh zUX4Nd*GWGQ3jvhR$<6BX-%XwdKWgS&RrLoj900U{0oUS>BC_X%6!$`aNh8OM05S@7!M%K2ST+Ie^dVx~Yo| zoR6bHm2Svf!cx_Km`yrCK`8;nv`?RDYA=#epQ>5)$L_lXR1e&YbUA0q@)kA6(iajC zH0rk8KiHZIR^SZ|0lOs!4hG2poR8QLkQhjx$#HBCuwpR-{@?x9qms!4g;$Pej_MZ8 z4)gNS$C-cJgjNWYxxaApe~)UJU-xm4sDyJ|1}Wfq8>s=HL1UdBi2Pv+L~;<@Kw{C> z?+FL8Q^H~N3w|x2mg9@(yyg#bfI5WTJ8#GRh4p`Zv<)g833>kq0d)u^rYX>h_0 zS@C**y=oyZVH*(Nn6pi57epV?3Em(bOOsr}!6MsS=o97P&Ba#?j*{?jl%hl1)X0*3 z0lXgkXxrvRwEzDirY*$usiC=xC^Tn{z%rL!X<$KX)|~<-)E;DD;L*x(Dh)TA=aBVh zUl!mWhO?gD`#K7`6EwP}Mr`kC%GdStSQH9kD=MnS{>@2GD+r7n|tzM_7 zjYvix81?;ag;ep6V+hq;heQUTAOY^TetLV+6Z*lv@=)N5r5;Bc`)X<(=5U$z zFPR&X{t$ds+4ij^3kJlz3Dz7H^X}=wIY>MN4^A@|3SP3?3pcML2>jf9zbs2cHGA>cfPc{G zB__~6AGxrDQwR|4X7fI?XeAzp+1cWP_cdiAG>%E?YuxX-aO}%J z7$_ZMAQ5F$yTxTESA%7HtZ7^d!|eee95U3>*8E01ip9VaPK)4afKLH+Bz3C?$mEPtEc|FvjvjQ?`r6n26P_&+VuU4s0B zIzLM{{qB0Sy?%X`u_oDWkz4<3*}X>qaizJgip)z$kRdd^=HWwS-9N-^1&^*=)LE|$ zKGFg+FWy~@FE1S2KUfbiMkdq*e$d|W<-()Q0YL^XZazJq)_@o^3y6$cN%4-~BJ*u^ z@mQ>@_ur}we(!@DLPWbklw6=0f(qGX*ki~3xVXuU;L)ZfY~Pb09yL7y7A=#Rw=gbx zi9Yz}vV;DoU5JPQkB%>1QMhEk7tRB5)Vn46TZr7Gegwc(bgpjw&xg)0GkFx^Ht9x* z#brx@XKzW%aQs8-)kA9{uuB z<%M5A_b~)8iSAAO*Z+9pB4I$N2w?13c3H<1^*+dQY5l2#Ga2E+ag>XBIcSH$!~#b@ zj0Xd>hD>;yIEFcXmmB}N=J$qzOjpMN*zkA_weN}hi!MG6pwUV}m|yI!xQ6LF`N}Qd zy)I0@aekCB*U|!_+nROIpMl_xixr@K=C)|oAJF2QcD6|Dk6=24j|gT#lZZu zt&s*_vLDOw@PtxwWosy2D%XIa4yKkfK`MFQw-J&NNWO1q%3mp5xkK?MRsDKbGsyQI zjK<>kf6hWvl!=XoEV)cDGMJH(?jw6_T9mQbdu{|lY)hylk>8jYkVV#}klcC6BH2~> z#%&)g2)ofp5VbJM7S&{xxEqG%+9br_o`}WQ6|NoQX(kj+w5*BxeQ5!JFGZ;eIJQJ1 z2k(ql=q$1EYMJe2cCe!Xb^kjfv-XiAK2ZaJWX|S($H!zU5(LgX7U{22OY5F~5-x%2 zAmu*r2s9z+vOdTY5h9>Gk-6T+&0Qd=Zi$D!oY-&}4v%+!m+Vd>hfU{V zHV0zGG^aeL)z9J&Fx0h%K{>^E?BN|rX5bl>BiQgVizIhCHS-Y?*xAlsqO?SIp>;cHCJ{JWaWMwzH+XF~m z7I9BjqS;l<4f@Z*vNM+yGYvr=w6vIs%a@niiBX^Q4KT#7G6J()?s)~hdn!`_SAJ!B zHzI(+>DyfTxXn6q>|!*#K^|+Dd~IA91X_KX zJ!Uf48p7!&JDZPx^Vhdbv)+>EEAH}bBx&vc$Q6sVv%~wezhGb{ga_!3maygslA8KD zQD_)gre$5=0}0kg&Z9{-z$^C46(Kxc&2*aXBPOuRZ?1o50w3&>7UweR^wDX0WksK- z$WEXLQdcxud6}O*I{tyTV3%zvm3Pk#-!q5yHd(C$dAH_gx6jpw_&Py@%HPV(6C~|J z@fmLkh#;Q|L1Oq&GCw##VzU5)W8MLf0>ecNFea17}|^DIFz6Lgz1&>ZhT6#(D2 zvJ%)6XGUZOhislDz|Gda{HXoHT?y30?u!BOE_)pjv9iJ&r>WCa$B(4fCZ~NFycK?M zJ45!Sd_s!^P+01lgcB4AR3XC{Q+@oZ@ed`MeheYug1#mI!fq)9vexa-y`rg}TWFwk zgT&SOyvfuxAbf3*6t#Fw5_|hvOXJL$FYKTeV$fHKJ}py0c&-xlys%^}f^SEo!EWjS zKL$_Qrtm}aSK%FC-8v^Yru7vhNBnRw)v3!BMQX8g-(5cy(lm+}lCQ$I2PoinF>3Ow|q+u$=* znRv17x*U7Z+Ov)Bt0FQuPD2BXL*CmP$I2SvT_M@@sqv3QKkdMJ2Pz`uqFAae@tcp1{eJCp08yv$cwH*rxmZEWU#lB&GC)> zK%md|d|+TDP)@N;pMPK7mA@48wqG!NoD~Q`joBEJ ztZr*-kRYZQD_vqi+3i+zxAlIYTz>rhVz9mrFU;GfQ@VWVko* zO_SHhV;ben#~;l=KkVqU)KsadscXVaQrb^?jyRYR(e!Yy+;8*jLNQc# zr)~WdVD~pl4#<8+#yzL-9ycbOJ9>#`39{M_MlO^=U=hfnZ#uyB!OGhO%{8gS>5e94 z={;tio|HqOHa_49F(R6Tx+4s_`TdHS5+G^t>4cGka(AFdoRd|Y)Vu|{xdNxv-$rEN z@4V^nZG$rOA3$N0E)d1}!l;aaUQpDck+xXW0_c^IS2hdTAw3y;K8S;1+Gn!bLNVpeSp*3Iu;mov2(&%BJB zTMPO}Rg8^LMgv0LKiK`>j))a z@7wLp`xUN^A_tA3Dm|x{17PB&5*I_ zSiPG)Wd&=JT+LN!w1*Gi0cWTuhsiR+skkOtGhCD3==wqQrz#LXe-7b6h>~U))=hnBZ}}Y*pWFew5@#8^<)*#;BW{o!$o7PHGD@fv%VLfY^V*efzxMbdXpaLp zD;J|afU5T|1amPz#5XVC1o#JWM}6GHURYRI8mAO{M)f1SxM*h$)(Yon1v-;(UOph> z5!3*=3;%SPgM@+S@qq0Y!ED7qh#@n(>B`?a5Pnh6PO#!yG-{$d3-oeY2&oMejdg8Q zc5K^J1aET%T^%@|0of>xD-3G9maeYXFf(Tim;^M=&9I<*?4UD8$PjHQ_DI&^V0Tcb zhQ_lZzaOTJ`6$#xOWpzZh}ox4pFVRBk>7KRw=FNguYg>wriB6@in2hE84(A0lTZQu z5*FAdQS%Bkk3&u?3G&;Y<|@zE5f`7E|&e;rz0rWmj2aFZ%06-eKL&eU8Kg(*G zn~gk>S9?I^HZejbYmbI(QB*ak*PaASP?=#foGHg|(bEL55(ftdU!Qze!jB=mbGO<1 z5pKEyZYMKeBVXpf3jtaujJ?QJ0DL#s5kg`CcFt8(9_uA&o5=u=0;wd}{(Iq?Pz=W1 zqUtXgkH44Rpe0d%h`COJvm5Ez+9znmY#>Gg{rw^2~B z0FgBDN~?h6P_AMTiUJZ&Km-W^>D-+Ps34$72ug@SBi);VfT*N&O}caBVB7D!iNU?s z`|ndtmn=}8>OCPL(adg=(`Akq|)4SW!FEfnQ zUS98Y&}S<)V;g3C{r*dTVH$Vi-`q^8=hMte+1-P*Z`FtA&CRdF=M;F)y96HZT@kWY zJ_Me5;o^9xFR37@v;-51SNsQBOl{={?50fsEQs2ReHjYcgt%TbSBoA3sfPgTH$1)P z!g-w4H~zi!^|eH1=SRf}@!D)|?lTdB40RuLEHn@ppQ!SoreA z!aj!}()*ix_lS6ouA2d5;Xk?RgdyC9-1)0f)KXFL;qD>U#!@Ws?`}wfpf-PADKswgaF+*U9TeuCH!#YDKrn8Js1{mr zF@DMSUyvrgt^o6nO`beo@IMFfySi{g)%sgdcgY0z`;wT;X>kn}`g9k67UQyU0NPer zYjg+Pms>}9HgB)P4;LqK&m!Rr=3Q%s&NZvXX)vkAXzUyo3;g3UNBw;?@dIwe6O`Xy#fDSwzWWh9ye^S}ZP(_lHtYO;VHNV}V! za96~Fe8}@(aibuBPfYf|_1nN+A9PHi%_^R!@_Y#mS)V!C!03+38OpL??CE_Ux|N6j ztiTnSA?&T`&jwp5u_oi^HUI}u7LUf%d^1QM1pfAZnY^Pi|3maQmeqd_CTM4ig8VsN zca<7WF>il@k?s;)yIZOPDd#$_3^7}5M$n3EXP5x6rL|7gLh<022f&sW`Fu~Vuvvc1 zmhXTq#ayK`6^nLugjUM%yu8~yo8Qr^;<48GR(F1QH%aiyW`{A)+d7oD2@F53XMI2z za~ze$JCHdTKQi};5)_O$AtIr^Rhy8R6W$4-Ka^0?CWOgQeI6dx4m8fmKErOJFNuPh z0$dPay(H89(or>q9JVd2X?L0>DsSu0N=QoPH}EF#HLCUptbYD#0GVXB2XZ2WRaX>N z>;N)JSR5^r^hN`uM|42Z&*jsj9pm3V$f_Wb(65B)QrM&S879{mC8ti-0wHID?XdBj zY=4y;0F7ase<_`DhC~mZ{oPcf&(9OAB67<2UxAK!f zgy7DHxGNu#l9}5O2v+)bem5;82j5x130fRYn-3sj=Qe>dAp`|&|J|jE3;-_9J)qK1 z3Zn6kSEZ5pUv+(`TLQFp;E1oDM3kDoSz8LpuMv67I6nVbe7q1$(GW6is4|}(X*K`( z5jz5SE3SC*fI)tVSc11{Tc<$?tIX&lr3dGHy*S1mDQR)NCUnWb2;8>6!2>ACrlUKkmm_? zx;yRb?aVhfSB4i&NlkSvhOs`mj#F;0Br&^WoCZ@{akFQr`yTbAf1wTyy9nh_+C1`K zW?JTZ_WsBxmZ7*p?AjiU_=W;(`Dg-Rqgc~O@h6!JjIU?@>@ImJd`!!s_pQ$4z_qv9 z1+$S)094q~ToZ=2*v(3|h{ISKMrhs~#`MVPmo(q)hps%Y3jELTfj4=+k#T^s!y;zZ zoR!+O4P(`o1fVbqd%vT`C)Hd@krNE7-9m5W1O-M^Z{YYuhS-{f#K(H^uyB*$)YT&2W!FP*M z$~bm`O9LXsouQes6E&6nNDpfg;(aRqaO7VKF1?HwU0? zuGQZz*<4yn^jQD(P$zPA`=HMe&2zS7#VrIKfyKF17%dc#yio*V_4$AP>$k)*LKJ`U zt|zPyxiNZLML&#k@6RPTHVZz$%ya{=&AW?Hw@*}lir=cjmTxbNI1%-aNozmS>;(bf50qsR1;#p*F7!rrGJ0JzCRU z#D#Ghpn!Oj;M;wfn7UzxMZoD&kEA(wmBaOczY0IJ51L`*>i})MVE_AzFLs19WxwxZ z4|N(VHZPmPb9n_jX;nl9F)@bW5<1}D-yf_QyHOntz+_+j?!UKM zV!n7zZ{RwT1_dqCz|{W<%hC%qRuX|8@l<`u`V;z};t17X_{Pg=fp_V5EP z+idWhb!HFmts&CmEhI=s|H^0t4Da0lR^4Xv-euPA-W*hWJ@?KLyci-JcLIN3l54BC z7S;7}=9$@U{3uIal`r~AqS-#St!Pd}PohKe%L+#j-;5kZ*6G|S6e z7X6GOC!=^BWomfj@Y}d05ac%^(kLv}K02r#$+7}ZaUFXs*hG%UVe<#M0 zUbKG3n_YZIsZ96PR%D7y!Ayl)22lpEv0SMWt&EHzfVBN`WLk-f%}HkbQ@_jT>k)tg zwl)8eKyFBI!_Ry-*bo}PX#$uABLD*#F+Kj$vUC%g{1p$D$ss=*7QA^o(}e(6Siv20 z&GE4Jv#sWp=Q?%fBJq)gaHv5J-?JA0m!!0`rgykiDlGJWV2>kSm=2TYa`%X=@y3h1 z>&Db#Gs1d(o2#>V2kd&V@4WL@E$AjJ(g|~Zr{?c8)hg_2D62V1d0cxc^)DPZX1z)Y zTYTp?;! zez2Se#afhJ96dNbNKj+0^j0L*qz};t#9vdfp^WfU(8UDsYciKQSI6XiD|4{V7!gVM z!|75{Z$2Y~x765K^`_J}CXPY(=GeqckHp*8uPU1E$nti2Gw_AR$T6yM^f9XO>{41j z7@s_FLjF~=1e1yml&5xl|L`GVZaDQ>2*sa281b+xoBI}PXLjF5KuUesf9p#Q)X)G3Z6CPQ&n;; zL0Pyo#UxVAhuUcC%$ozFf&_wVDk9|bJzwzno3fEQil`G2BW)~ryPkJoHLHZTyWVit z;->l;gmTyn)LpY_Dd(~1RtOcg?9nMGV#5>7Tx%Qc^&4%6TR51lLoTQBJB(C z<0NBolEUaRVw)!klY2&z0&@9awpYE`>2}vG-YAOQbmouis%bGVPEyigKm`DDkN&i) z+}44gZmZU@ZzZW`4Z`S7r(S=}^GeO&DuhKr@JykzcDXJO>knRr)ZK!|3_+s9+E6Iq z<<4oSL6ul^7SBLgE?0fg_1|jVuk%WQfyH$sLWnY=sidT&j(2HBR4>{Z5PLq|1J!Fw z$o<2lAth1Q(O(pNdae>ddSdAG*JF=$NVwsafERxl2!Ej>kqYQq^fa6k1f^&P=rL%i zTeE4@*lB)ZwM#O&d;?(Ml@t)JpsX6fev@l_nOUHax^B!p?b2XQh9FaB z#xAQ13F;K!|E z2PGHVbpiu{eLv5={1xKJ@{_=>8{_ktf$3={F8QEH32|}!>=IUofqnV^+&h=(k|9ib za-QXS#!)`)EItIJcznrv6YTduwQyrpyI&P>Q`rPE4>)y8>QVC^#%ZQMP0Hp_J(5Z}t9d+X z_>fOC4$B7CEzuT1=EKIHku6sNs3%_0Cun8#`4Be#pn;n!2ZOPM!D~9R`XqZT^yG;O zmsg8bt)56{`+%w!t!d{!YsnyZ7D{Ad=};8l~iXG^e{ShWF59I!r$R6jV&Q z?(9J`JGtri7}DK>Nz=wOSG7>oh~{UbO&yG;k^aO!)(&bhhI)ceOPvzl3m56Zu~H{{ zyMe?ax2?ig`lsHb$hS`n>c0=*u>Ho5rVqf4KGAR7$|b|z(Dj|au_lsd*uJbfT<>Jj z4Pqk$`qW5uUVvzoLyWu+RRJ3QDxu-es^9swnA4DDsNkacj+E6pZ`!XjK}j=cC2&)D zOC@+snzP>O>LQ+HM#{F2lu}#KtwWN4c?qc_0@6dn+NA0*(rTQr1#$Y@egF@=B}U9@ zl*TYe5^^1F)vN5kmLKx)4(%D-l6>oxdKy`ikQH+RZ`j@f9Z8<7$G%Qdf4ZYKLk1wn zM031jG*m`amO+hBTA z5LkaGE(ZqY)TTpwI)(=ZHXA48B*lK);wreSPIX#$H8QH_&1uMN@$>4iFI#6CN@2#u zFLZR|XIL(Zp4a*2UxH+9FO?VvEXa#UU!cY-Zjt}l4ubsGyHGb7ntz%@;_c{$nfEDW zn|K5y_e)VPVtQtWoaKTqPPBsx^Jy5Z1_(Qaks;z6~0C%DM;kOZrF^hT98PcKvS7yC;=E&B;bw&Yh28!WEc;HecXO1 z3;fSJTp3+KLe_m%pWbCktbhW+e%J zHwN^9!=Eu<|X`meL~%Lz6z4=5t+P7^9LBs2bDX6~wlnQrc#&LO>B9p{Z(#xtwgYp!SvVf^{Iq z1RF&weHZNji&39flD2Mw&3C_@bq^TSOtZSJo_tH8J`Et?T%WLs`I{0EK#3C2?`D(q zJ@e(G^W=~lBf$;mkQS7}nxC}f%h8D^NouU4(a+Tov zO|||k4Sk+^9o&Vre|Hy-Kq{^)*tTW+bz)F$mB|(U&(|+-V+`F>U#gXHQ^6f!t|1es zWJi=-UNua#Ah^Q?(L7y7c!GTG3h@_s2Fe zN9kiGmg6R4i(0Mx!=%V!V@?&!(ZSc%yrLd+$%3drRKiQ25-xsKjkfU*)9GK%{vFfa=Rvl(K z_vgtgZi3FeT=_v41UV#LMteuBa@uv7%OM6}MkWb%?eFuiLIFX!951KX(Jx%q%&sGX zf=-t{l{ZpwxDi0f#_2Y@aUOdLljO=0GP}r7Xb_pJc_&w-YD|CCPS*QK$D}gSTFI~B zMXOZ@Lvs5X?F*%w86=rSU-u$C{cdDwWw{Npm*x${@-`6g{MT2#TU3C*j3dnJ3uxi% zfEGT+Z15{rBox--ndV-+VssDb$18slwl7Q(qE^dZH9wQ`yVUKeH|wJzTaLu@<0UJwd^)ZNQbFW})Qr@mt*Oo5tk#Kgyfq!Hs$92I7XZr$laOM)U0V^(h~C0rr|bdL1JF7pro|a$j|$b zAg741pBSln@Xj8Inp}-hb;FUJPnS6>4KYY!QjR$dJ8JHsuvNTfyeHpE@>YBD($^Wuzj;aema2>G`!sHObd!UhlQ zUGyq(=(|}6Us9V@c8HP|u4Ej9nhED)Oyif8?yprqm?+S^A?K*=IHXBl1otqkz0(P{ zcJ23!7zPAPGa?%lQ=vle=gf!-GdZYWE?4622X>w z$k%xMwZyi2Sqe^S!|@;5!|D2JLfjTsfV~N^YhQ~RhTqymuVn=QsGjanne+z@{}1Plm&>y$y*Kez84fotN8Il#biGt{s}-?ygOsU zfDcDd-lavxA;SmrXTSLi#7QXar9|_I?%@7KQGns4B@4Iz=q%_2Z<4K)b?@2z3uKhl zhQ0QGjS^m9zF#vM@?U*;k?<@Ff8S;^$433V^if-Ln_XtzKICq@%kgb+!ByALwlUn* zMr~s;6L1lht@rYj-riAGcaK#7tFxvebr9^U{K~))=iZT_p`o^kBUv_sm{yOAV81XW zJgH#uv$C=A-wODm+JeIwL`5#cQ5rGLD0E|=^RMicdWYUtwL{f+DI!rp`|?9Yw$+|6Ah1pP(M?BAkQZ5Iu4Zi4Kc? zxiAtidF`Raje;<=g~2SLbvq{?P_f#44(P929Kj zVPIH-9@m5Ype%gWz_S0*a3OSf8~IfU=+DhE2@{_d?XfC{p!UUjxW#IR&Hrm=*1Xhu zqm0nok5|o=K~RhJn*){Hm~WbH`mmX6a0$gUv8V~*Dag03TzM+PpIlpqHF8eyp%bO7 z_|}X(ii}imMMOl5=!|*^rH(lD3@T$Vb=8e*4h&RlTiaRXX=QfrP20Z2f_AwBMo1O_B^^;uVOrcUiPol!^9=i*`vR(vcjJDzxKweBvXD@X7w~G4WXve34^p zQAjb=9VqR(Bo_l|CRfpxc~ICyQRxMkQ>Mn`l#@QF3o-h!3wvLz((l;4;!V$(do=Fe zYV}}dsi_)-pr1Thav*4r)nYk_PX=tJtz#)*@ZWs=V*3{-2$=9!1zgX1$M>C3Tg!r* z>(qRV$2#!wCIW76;*)S4Fxk0ME6~%XHP>*P#tiHyJQsW7B9T^Ig@ToMH9`E4=T3n+ zKkM~43l~|`bHxw)N^%b?fz{!d#{*qQce_)%|%^Z6h^7F>}nVp|&7MJgX0DtWJF0mqtaf5wL1xsPPy2YnR zgQ31=CL5{okC8>kcz8S>Ltw^4_Zhu=B?w0`VuxYX` zCw?nxN=to|G4xK$s_{jt9zg8+jme5D=mbC%2xdNlmQw08!>e1?l5U2cuJGohFOwo( zTm~no2P>(pRD<=8Uu%J7N}Sbzecm2@Fgu%F9pG-soO7V{dhn0tTqP;y_$;D-msPyl z!iKnoVcDM}t(VP%zdjybgJhToi4FNpnSPN*c-`!^nH}OeHHX6yNpirljd*vs%h* zZGJ6ROU0WO>kErk6bu{=eV*d7;yDj@1|Bm|?CG()q+VXJ{g6@+yREuHBcqfxw^Rk- z5KyL-kirY}kIb!$q2nOHu_s75N-wv#tyszmBLSO&zD;{g9O1zvx>1qDD|TLe_D1Zlp3Gg#Go$>k)UrD$=qWPn6Hw?>+vYJH$Ed zQnTUz!}v*@=-Ug5z4QUEaK~R(8r6N-Y&u4rXCqb`>f7`sm>4D4tq z_tFZbvzsN+56jbyO)bE^y5ZuV88wj{$cL^PpBs;WE`c4^{#UsA#Mhmqyopvo(JqMf zcEdA17#BxJ!%)I?VM?>3jXSs`W!liQMd#l@Qhn}pNDOJ$SjItoT3iB6F7=ZG^*ckH z?xMfVNxev&;l#{6FRxBL@I4fB`3Ksdj0GoU((Ofe3M!U=6z!NIl{ApNn3Afy8m~_i zhv$x9C?)-*ATu1n8*qg=`cqwA7ac^pK?JLaLwRLou7cuU8(Crsp(Rmqyz|9lqNbU1 zH=U+8k=%R={P`@OT!ju$q=j9#DVOijhr*lw_7@`Ew5iAhHC9BAn;+L2s9#p$wsTUQiqiuyfaq2eX5=$_x=t_Nu}albWEVC>DxVL!(YF> zn(i0Z$o1je&g#ci=h!a0S8=_+dhmA5fxtsT(Wz4U`^rx!rRnKPj_RT-*EtM}PhBr< zpURnAdt%CIc&c?`=A|C{tipSwcZ)K4IyMZ)uTR$cGrbe<=2BBOV|&elx2OBoq-88- zv?VIE|87fSVxoC%b7S5}xv~W#mQz*2W}tc`Ih1V1IQ+%Nu(`i6=FE@MMqxwdenHWV zV+l<=VAju+1GTT)Kae!pAfD^Z(lOl3H^{*;Oi;hS`4x^++)N{;s?C8&y5@t)6pkPl zKtkKE+ly4wHX58&T)6&pGk%CrmHk>~Z4*9DW5(f1Xoy0??QHY_nv=`aS#rIlE}2qm zuhxJ@@kp=lvn(M-UyUi8u#81<4U9Y4w2-8p@33hYwSSA-WHgca1{bGsdX|VT>-Jj{ zW9A%k?wq9QRL+hLr5%>E>BwPsflFrs-l#wWq&Q}FpQkRX4%Od1mmQnI zG;VopR=fspH(XT)6CAQ8`txhz8uQCcJTB5-|k za&mI(=SNZI1F3qgerjk(CC0$o>y9EYF}U-=OurVvr99ZC#p`6UIwmn(#k|sfHdFh^ z6eqdq$Tc+zErm-k<$8h4VGb~L)GYGaT9i&ZwHf_iRXP#3MDYN zdqJsS&jZR)H`+@P>5H5j^iV(PtofCc`S8v+%ocKNC~-KcO|`tNWT0D}+Lo(=QX}W& z=f~tva!BTX33?i0MqzaN*)ew;15NDgC1C1DNDdKlZ)#%^` zKDwEJwdB*7s#F|VLS!(9K4dPQT%gXy=UuR!OeOHAF2 zGeDsx;QmwTto5R-`Z!F2XU;6xlY@|dJroV+xZFe}#T64`ig z$}C0~$5|a`**KiuEI29X?U{yqbx%Ceh1#FP`y?T>kwCR}tOjOFoM$${euUYwq=OoU z(%XsWof{ph2TxC!Ugc{Dr8>wY>{55`pS)>=C)kwno}|FE7FrNAGE$Zm>PEuDVUXK2 z?>-L?mb|>YQ|cNTBtK(omrwSZ)hYxD+fl#Vegm@8Ted#x3%HjP!)?4g#&5WMbV^bE0#`%1x9c;D9W|`=vP9K$s^v>@iOhQ z(XL>#2Q1f5G)&m7T?~botd}6Cf9^f@KEET`JxTk!360AC^+7fcl#uaNfnXYEZtJLB z3}nsQk~jZ=9+h|@QPG;}=Z=$2ER^xf4^hM3_uaR;7jaSD%_(y;@%|DH<2)ec&{iTf z3w;{0+?rsJnn;(dXb=0fX{rlR6Yr>?(xpHZpt3-%^5cPr%PXeek7rU{45&T z|Mr2K8CI))q<1NwigiO;72cG4(V#+P!&YG(QDYTC5=VowDu?n$Zn%=LdJDR`lJ^BBlZjU^!o)rte9YX z`0UR@wmX~CG1H}0)uN_ZGEV)&6bYo}#M*>&Ee^&-Glw{hWk;zfm0fg~qoYb%zg)fW zG}$!JZ1oO7G*!34e_Ap|<`3sHM7X(BL|!d<5#_63RU3BIZ(sJ?cX59(Z7dZM7Jiyl znGX?sn_--owN}X5Ntv7P9n-TC{`E_~K6 zYQ6ECE+k!tpD62nYZrcs1q_{;>~}|hf%*J*t~{;?**J@Xwu>IwU$VJKbXpsgy@b62 z8I|?el3=q8*4iKB+(CmCkSr z{vx|dM?rUpnGBuZB;h78z{`^a9hbj^P4O#?URLa53+F}idq zw(w9L;sb4M63bILv1`^LxnpSDAe`6k^}vj}UTBx`mx%we8Z+rim!GId4an%=6~ynl z?$Y`8v#`LTr}_UO7j*Cm$p~*xGi!X2@iqGD+ScM>sqJp=?mLQ@oJSw=P!7(`st_({ zO?FgWnJ#`>{QuJuMsQPj)EtS1w~yXg@aziW)~%NU=5(me8P z=(%Mkcm+&gW<-tWp4VlY}ytBOO5rj zUTp0DOZE+N8JTMmS6s#e=G`2&uKi-oJ{b*b8Jz^?CPQX-6g{^d^@e~>UhfZs9RVow z8|c8`;0wzncmmHA^}4mRv*qyDKUh*2f|Nz-R}GeE^(P;Yz`}xKS>7UZa_QhmlRx z0@mqy z)p|*4$$p0YZ)d5kSla)kjhi1}vFVISDZBhtWpd|E?V^h%??p12g+)9&%0~UAbn?tlJu`jYWO1_*`m&_8-I(8!PlgT?syPsP_BobSj zGG7Q`C{Dg!gGiwLArk)!x-3DP1n_r(xO_ZcwBSElUf#JBINI2Oj1hYupGi{=4oth* z+36wYpi}b2Fu_a&!N4EhW@mgy^m}Ot1B(D3uH71goHEu3f_7@zGByj4W=jgWUC<%((Y6Bf$?s7@C=?+j zLK1Pgjd&qw-&k3H;%^#nd3!YO`vUcLC|g|y+MjMB`+WN@leSC})9##GLKjV%cB^h0 zox0EiL)NUeWqiokrua&N)nAT059%340)DAZc*;Se7wv(6|A0*b3+&sobb+OX$)e$x z&WZLrXmO-h$5Kp@jC)v$gq{Z3eN3g3PrXf z%LLDeQD<^ox|@IB(bBqMoz+mGk#L4%fL2@;b^#byAbc}T4SqQdd>SMqnzlC}Qvu)( zu(k{r70COv)U}+ZzES3*?@VAKCMXM=ESV+0+!ylFE08F_>#k2k+NtN4guMxGyUC?S z+v^z9Zm!UcF}0o@*$?aC+mW=71K+IzU%hIbPs1@mK~sXcg~_sv`H$Q19E1`2?rJ_- ziAp(QyO>=+LyK46QcsV5)khY1SOr#l(b<^x zlmDRNzi-Qk0Bp+^JB=L9{6=MU*6fFCM<$Kt)g*6&Z~fORYSTlFF8%oI!i582s+KHZ zv%<&t_0FQ96&CG!q;4(k(FjDGwhAi^HP9#VW1(>Z!~OemtYtbP7w4`sW*!?O_{V1HLT4NFslY2m0eR@|T;rPScxYwZ7XIkc`B{ zRo5{ym%6L)C{@ny=`pgW6rr@=?&%1!C+xnu1#At3f2Uwi&6=z<>weid3zLL34ZZXP z&Xz@HW$G7eE+znwcm8@OSI}^fB#|V!r43_a;7TXtjnFbavf=P3*Snf9Co~PeYen`t3hy zbQr<2=d|b8kKRtvhr5iV`j>n==*YQspp@TSe*9qslN4^Vwuf01g z3Kjx(zVZHTW$ABs<-jtHS+!~vm3pR4a)LH2sCiT1O>1YtIrP-HOzuSpV1@~M32$xb zU?Otk&SexUlxyXV9@+OgDdR6S^K;54E%c73v#VvbE^hMVI@EGR>HX>(p~`x@zaq^5N!Ij;AahwrYaMZJUtJywUy z72K14oT=Fik(OT%g6qmDcYkfCk)kAWcFKFPri~8m8SO3xr~B{A-5-5rMr~h)Y^ELW zzduauF9)_nc`ReM@*$?B4pYfe!+?t`!y$x!Tx% z9Fd*dHlB1j{a-w`%ni>$0}3A0TbR3n2rvbZeYG7)yLT;0q_ClNW7s(VnzXFosj*Gz zX=#NP-c*ck(Iv^(sc)@khOAMXtgK$ME@MA3hH;^>v+Q&`z9fD8bU(tv-0HwLmE%ZJ z`C=yc{{W+P01=EUFgWb-P?i-ih<^`} zc5E}lkk4$;^^nYbrO=Kk9zxw&u9 zb8_O-j}X-Y8dN2~6Up(pFMg|(Q$fVn?nt7sTi81!kY*&ld8yM!xpvK#Cr=V{(*@Ix zi&VeOPgW8a_Y&_4eEeNI5Wg>Wj{;U!=3^-1ST-UFWgXzxKay3?{1))(8K_7l4J{0f zA>~2%WBznfqycmsPL|blbhNTHjL z+}pm!GC5gT$ebIRosY?=AYj@s5(oz2q=wx3ZJ)qb1g1c71x&#ea1iiqpCxF=Qx_(y zRF-CFYE1Zftrz743nAc~M_-h+Bt|`w?kwghNGuxCu!t9;!sL{rd_ocufM&t@ePpu& zVty^6_WvG1?65l=nfR_$S{;=S^iE-Pt0ZW~srq|a6&027JHsAsZiUt%PoLy}W$h^Q zcur3wV5qq1enFQ%4jnp_wAz4q-Q$fH6%-3Ue#Gu`G(mok)qn_M!o>eUS)8&ouwGw% z|BEHoyMYY;3YN8`U*clfg7s;420i0mX)_JK_m?w`k2U)G_JXQzq`P`2-dF#Jq^ zB|g7;!|(&zIpFFQJvidC5RXEM8%xu)B~2^;{R1`yY_9jF1)fXBiZTL_ZoQ(2I#LJQ zGU!~<)O0z2Ki_cq5h#rGRu07H^uI}MVA(Bcb@`{<~0ozqnXg5Ni1!S(* zq*t82SvoUYEQ}mQ5qQ|Arl-rOGoP7M2zU&pi888$OaZ_ir}y;STu>J-cbh#+7`gNx z?*rk^FNyGf?ss`9hY_pjd?5`_9UBC$YC^HT@L}4*=+;B&)sEa;=Ze7DmlK+A@6Xxe zi#W1*L*_bsRh3=Z*$AFynC@)ev_=G%%y(zI@QD*X@Ak6sA{?^|tTMrSx-=(niLL%6 z43)tWQQJt{d=#h(rRuw^3z$)0P6@1+XpnrJoXtbDRND6?RGyEyi(0JYvcr}<5pdMZ zOXqq2Ec~)oVO} z16YhRXug*+aZNQCUsksAQ)xp?qH_1;gpVHGV`*v0JNefB{!D2?$b^C=6Y4lp_rMkH zHcmirC&^dm$~X6ghiGbO=xUk~0S&HoeO9C}$cn$_X!=U4@Tlz8`CSLyOLm;V|Is0aCtE2ma|9o|@ zTHaP^i0UhCJx)DG3%GQxAoI~Vcc4}DNj-FG1X}RtzU!p*kWrBR) zA0&r2u@tEqCt`tLJ^VYbSk%mG*<7 z_!_aOgOP@)8rzWCiOkpf{_5?0nUub3KB&a^0baD5^mVWD6K*OffS$(0qYoy&k@22b z%BSz^S-;!jF2|XPha^^;$-!#+)O2Rfgh2t!Omq~9zxsl-t&NR*QB7PmT|)WB8n*c1 zp}xnjyjxh~GR4Hy2Sr~pY#PqSpgT~4__*|h&TjjQVa)3n^lB`#JF|1HTioV2GX)tAF{#57TDc2Dv$?bg=q?=Rma2-{{lw;x)DO%`hiB$W21s|x z$e6oDkKfjr;dn1rW`rk{k-BOXq~9kxsCiwJE(?zA_Dg+Q$Pbl2?-TD_c#=8PXYV*f zRg=&dpLO>OLO$Drs`TmVgqhRd z28O4!Lm3!MoK@^BjvVdKt&MTh_I7kiqc|Bpebl%V73YSDnDSC{PhE=#TF50$-EMj0 zyrP+GhQ=|;J&#RzUyl5ApCK}D)yOd}COd2j;s{BZDZQ|9j4S@36$XJSZDz``8ixf7 z#yzw`MF%+CF){IMX&Fp>8ztV%psG9Gzo`}_!Sa*(gF2bAgFm)ON?d$<=*+;Yr_{Hf z+Zr868csR0>x{16*vImd>+AX%;|bNHhW^zoqIT`~PW^FflI2rPE$NU|B2$MT%Bna) z{>7Fx0e1U2i2N9ftKkJCm_a-2^g>@WaQ_!{#$$ED5v_~7<@(L*PfKH@F}x#E(W<^7 zc;Xn2^J>hRZ;fV&ER)@iUj|72^j$Y6X3<1`DV-`y`vkUXqml`u>$ssl@fbW8pS80n z!AM*8YlB&FzuyFZjAiPcWE^qq1(}TNx75MLnWe@Hbq=Q2O`P|^=M*mYJ4Jo~q2Y?P zEUCTlVd%pfpc8B&pXupP8FHZ6_X4~S(AT$2Pg~?oO$RHQllgOZs_SC|xmAd{U)^Yb~WvcXk&`mGozCUyTi72@EbFGqq9zLxQ5~!~Hi0=})+Bx!2;V z@qIw>9x{c!#|RLjU3#9Oy^~0Jl*_feD`-Rk8cn*A?|pQQc{mZ5SCFzsn|@7MM07X( zE;Xhgm^hnBudkLU&>tUiVg1!45*f;bLL?WNtpF!+fMA~Z^Qy}(>#4aCgyFOkzKhN9 zXs&nQo0&_+F_kOg&h<;0h13&qv(%rcr--7sRX0`#yd>7lUa+ech40=53F7 zn1Y&fXM;1#wz$r^dJ}C~(mHLA@2Xcl(fWyz*v-$LVpscY_TB>``@NP6U-zXlBKWqZ zqs*)s4yt9R;fr7doq47wg3Eul?6#g!e{$8w+MV$jQm70+0CZf7e)PH#a8Aq$)A7XS zgR?b1YMKgqQ?*=fxGXdVdob?LJ{ME1Qg;(z4Q7aw9f@bKNcuE3Hy&FFX@EkZ-X9wqxR zt_0riC~1=?f(ACvF_ecEugo8YGvSEeGzD)I`YuL?lz8FE1!%Tq5y~lBb z>75gO_AUI$_@0FDZsBgKM!$UFtb^w^Z*9zDI#?rM4pRHqSn{ptzSta-M3*ZDYwbixCfO0OoC zyktKjyNQMY4|nc(b#=XC+5tHwVLt}FDu-=)1s`kcZs3TrHMUPqoh!bBEa-A{{~lx} zbN`X&&)KhdPvoQ~AJfoixSVvVpY7JOR?>l44Z;A&=^J`$In~qRku57jS8p9}82qKBp3BM9VL-N*YWlx?|WXFjG1!-31ntPlHy_q3XjAK@) z&|agzeK(inuKavC{oA~c&h!nD24=~puFX)y9vP^0&W_Bz5>w1V%3He)ZaK$*gv?c? zM8F^fzhwaGn0XXyHQd){{U?DV0mXU@L9y1FnIFwQk7E6G9>uzI8O8d@Jc{){9+HUz z697L}_J=ghZhd|!OaokG#gohCvh|Vjh8kvR>D(7DoafK#>-RM;&MIvDUQ+re^&=Jx zp{PfryVoH`>2ox96gOr@KK}HQk-OyF{L4HILyA8ARt%Gry#{96w-t?E*az#OLpvhQ z**Gs(^TW$iPSjune=*Z~6WSi6uq3s|PX6x6ZZOOp z6ERfE>scaOZKGQ8h5;n;A65Kl_wJsAQ)OAmQm_YLN4`}xEdNP_MPvOef}5CC^UZL{ zxv@sVr&9-4EgADZ4p{J4dIpBhk)>)tBv<+>KIC~d@>!%?;st{g!3FAG?QXv5N$l^9 z>3Jl&Bl7jf8v>t06HJk?&9*NHwrE;y?EuZr`;QMFpF)6&>ru$!98*~J4)AW3UTV41 z6b;k1x|(chjq`J^Bzh~gr-wj4pk2Njt)1yp8-Bz!RIfSi(>XZMm@X(ote1SuX}lk+ zv2C~H@jd$wwgkRrE;QJTJV{vw&TH(N(W8Gc#nOHk-Kv`~Uk_!xjK7WbgdnQHiUC;4 zJZtz%_!CVX(a{FkA?9SRxlfNQn%cSW@%B(%kzQ#2=qC}3AvK<@`+WZT`2D-p=5elv z_4W1Z9Db}v4&@3Gv2NfE!~Bk2m5~`csVj$8D#Oqx{Km%$G}1)v>ggNsnvBy_5ucn3 zt7VJFDdVgk|8hA82Oi&vOoS3|tv|4iGfx|*arFQG->1~>fStPF?fl$(D-7Mi$MWAQf@<1<&Pc zflyD-_Q1g1-r=9HL9E_b|Zgzq$A}`RqVNqv-|e!xhzt!@Y3khLUlmfpb$^&T5{&- z_v-I~o9EyA40&(iHNoG$_X&{Xww8z4jh8Gs3m$I<@;c5Y+y1taK3u8@8(*b zdbMcgPdALu+%PocK2%s_d`oJ>eECi>FawW49MA8V+6O5rONk4lO%v!tB6Ot;AIDc5 zsG;G*mKL0$(H+H-#g`f}f0TunLQoWZxaF5Zl!d21ZeHU2imXdl+vgCx^mv?qB2DBz z;KuKx{o+fstg*52xJhG3P%l4Yt&*bRXF-g8*uHjDUnI`(_HAuL$E6_QNFB$T>K%}q zeS)Q|6+U)MJ8o~!ym=ChBwst%m(!+q|CgMJMCOw2xy~*}i%_UT&=OzynO6OQ9oT4P zJN2igqx_LWDNe(>FYR6{-m(lAU(|dY(eGb1LaeAtLJ{UFuon>gQeiQ%S zo%W4maN5C_EVnM*HrZ+jtHhj1&|5k+n2?HuhZ@tTPRq6XuXB)05}^EKRP=1;q)zWQ zzUga#SqcyZOEunJ_jSLJxXAYVWOCotT_tAjORSCSpF0s#l@jdo2NL96$>U6X< zcOq34@82Q#01G0>=u%jOp0SmUb!}U@zh_ixs)(X^XGdK{ZTd~ew_F1#bM8BM@=m{@ zGqdYzcI{^G@h&cYB;sv3PxqT3tWb^p#x}Ia|Hp@)XMqCVf0kv^{{9FS#-kX&oHsqP zaeVTQcb9+7k@1{F0iq5C36}w4)b{3PZ8k~!`|{MgR7xH78+kNe+EL8zUH+!$=o=;j zH#|2p2HEWH#f|e4$xlpiw`@HzHUzqdD@>kk({3UYtd!0XonqSX(RYE z5Ftpf?6?N%ONGlZ+_wx2jLgi>%*O)$xrL?U{wGWN>_JY8&kswx79C(bR4<24b2nO9 zTc386H^{wME4As(nHx9l4i^?~eS0fs!+bc+4;eQan^3cKb!n^q$A`ti3=W0RMKZsb zNI7`3gqD>GP3}a=f>J`l;ryCGeOErFY^nbk8Q z>`y8xo@%gqS5q$v z6s6&ChF{2*`(?u<)&Oh*!XI5-UD3x@<<4_s36iKAsNB8#w=YEI1y%=qT*QKe|1JtG zr}*vsMKq4Nc{EF^G*EvmLK8F9QhVAjZnGE~n|chH=H3o<8{K)Dcu}hLn8;LZ;S!b>Pxe`>;}QI~-rfvd9~NZJn>VvRe9>gEV2yn62e3qqQmx1mw4j{yjvyHWCP72S6+=RjUVdisnfvvi<}F?tv}=L-d0{0PC6sxi2O($ z3N)!%QS86XjP)UfEl-keCrVYlC2 zKO@9#I>VeNL_572=;X%B@W|6rm{s1gWoa#jrlv8Wn*uD}8N9N0$Z2EhK5Z-TJ+!NF zsG0DXh$c7eW@SA`JRU7GDM!ax*wbTPU8FNVHrNNLeY1)SsGy0(|Dwr1z4MRTK@xBY zhi{-Q?dYNMswPO#A)Rk>VnvAYh}35Uhx(pwe4Z z6r@IaCnAfeR7F530aQe!M0!tDdW|4eN~8t|5D0`2(tal(=)U{<+4uTg-~D5+XR{>F zIcMg~nKN_GJ$h~@qrSm0VBA5f+|mk{BYz~9 zwdwxpSgl#KzdwN68emj1JF#K)P;5&DD(;(AYP6=Z8L}Th%&frSG8q~L^?f*krIN8U zV;A>34U>afvf-G%Sqjmj{Zz0xF!>5<`W(mPmqRcISb*W;bNT-Yq|IT`b|mBOgLWt_9UWK2U#Csoq*W-QMa;|+&T$mG6T%16$v&B5C>w`KknPHCK2birJ*#YD zVzD-}Fsc_;bJ0KGwYcNV_py56g5|OJyMkj4$y0yx@3LQg`_J<#X&dXbz1MPi6)F&6 z30CGf5|O>84Z6l4O7(VZ3Ljkku==8V)Y1ZUmN+-aCkH7UJNZ!K{2<_`4p#Lh^Y=kB zLkT6L6COlOxNaWx>C=`)q&Ags!qD{|if-u34Jg|*%I z+jV5~*X5w7eCv6gR-AVDX-i80NQIV;<`fhZoVT^r8Ymi18&^86P%s?d+??6crNsQR zb6|i}{@rm_*}`H7K%DZwSfVm%piAlql^X`dJG;Age%>1yc^!BxsF|X+gevDI(cFGi zTwL7i^770tcKyd;r5%~c$u|d(1|!h9qNf7EZX=8*y3_N$!4d|D!d}=h+nh3m=)z(j z2YiAvqpZpn{W4p|JhF;Z=5q<}S=P_!{2FbsGD{iOp--IHCA6v!>N1;LTmeaoFZ+1cj&TVS6{-ZT8kBlPFN-_* z6XV5;7ly?ZE0@O)fPg&S7!VkCMWHduI%d@kz z!xW_@SH2Il0W13KNQDyjwwheGB8-aGRUd9xNklv7-=`KjTr16#zXE7e8{S6@5Sh z!QvMS3d>ce%gMqj4z8LR813!|% zlZ9MFsA8XsbFXWs8D6>VM-z*7mf+WVM15{fr88L3g_J-;gK!caH54{ z;}Nv6%TDiw$@Yz8$d3$b!1%tVGog#|+e z$``AG;tni%;+ly7Ib6QbH%mgoeUroalBuR28GJ}u?qZdkU-rFA*($*s7UBT3+jbt# ztYC(rPteY@1uw`<<1XMwE&x44(}zGu9Y3d*vEG%E&VK-@)IHgZmq8CuPobu}wl&k= z_!O}&7U25HpKw!6ERnn303R)i1)|#CSF9*}z^!zsS*|ip4wca*+jDVKV{>!m4LJM~ z=2DE(XUpZ|FW`lXb?WP97#%9H`KOZ4_7U%>xM7DI2 zNSl_2p^4Jyoq!I_J9hv^l7r(;k0)K^&sI%1Z>PDlYu#fr&-V7&rzSAz zV)QkY5~l&W9DICE;tZ`6?Fx(cZ7z z-Kt(-QTpShHD-Mn(PNF8>n6+_POH-{N?uh zYT*-Un1kP{ofE0ON>j?I=ZB(Y0_o1V&a)8nrPf`If+8rE3I@=EdQ2J0%!gYjik1g@ zo$&W2oUfSpJ*rtg69L#09DFv#%OKC?Prh&Z=>s2So`0_KMb|8T=|OJuqfV&H&AMU) zbAoFK;f>OFf=jshOz;%4AcIoh=252yTuvydNUceSk|q`l;Y@O1O#^{YpYHg>fBVBfgflPS{j9sYcD1Em@i=XS5B4}Rk%A3& zI~>o|nCRT>nQcYre?@I5pM6qjF2b^h=i-C~1w(T&%8J?9yuxQMDsBU}sI-u|g^+8K8V7%gI-tcV3(dSbk zpOP_Tkz@?pNBw>uCvQ34yI8vk!%a8r-pFIgJkVT8&rb zuggC`MEkLnu>>wMlv>gmb&{|Ex|+qB#Bxy~GYsxZ0rY%|#{if4c1Z|+_;bPI*~d!a zSyo|N;lwdSd`mv=pNU$tAT2aks9VsB)me1f61gbT#UIsco{gap7aWw z&3q&6YXx=c>};{XnJX-mdv%l1bmEv&RnC=zqN8Z47W7dT2Ry8_Y__iyt+#1T4r`uO zBN>0srIf8tZs^5gG~Rtocw*qPn;7wc8WnIpdlz?6f&dOfz?}Y8mUd<59|h(PT~o7dZxgfPWa?J0udrML@d_d;w1Kale@W zxVcA}vlS~9*wL{#6XfvtZ7+0Z19rLupVb>|0+a29&~CC87j)j56$%ea&+;mVK3%^JD;j6pW?JTSkxDy@g`#v?VArC4A4n>}sAy77M1 zf{veT&2udy-~i1qJKF;be^~wSbFpIoJqsVobg95MHGJc-q32eK*E~+D9OJ?G_Rm>3 zI5^y74yXjzxMR`%0?5*_SD&-iRCGFg3wKR0Mh!P}5cE+7tL&2sCq7TDY%pi!(E47) zB?KFk5u;{5Zs6t>!9jr8g(=iBYcy>aSc}ltjTdlXz39^A8Iu<^jR;Ra3syuz3 zB-M?Bjqiwd*LHU|n76|lwTyj9qGYLS4zS}@(03=41FKAK*XHYDG(n8g8g(xE^<-S5 zJED#BelkTbiX9;Tyq%bdlWDJ++Oesea1TqAN;ea$q1Q+k@mfYu4 zMEAr1UvPLmH3&w5ZpZq}oq-oKmdIwJP)ZzHxy*aO8TcwD(}5__l9AE7HV9_AnR}nB zL9feKA8!@+{X)YS?gg_>Q=ag}e2rm3HJaIju1PniPkg4+f~xREz%8(aQ}YAoh_DAA z%H6&9&_BE$y2vb6LHrh$E;Om||+ zStP*^J44R9yQUEoTaghAdGzcG8)*-9ZtG zt*!Q*K3&@{teZ~!OeIB8$xQ9xz|*H56JHV8!?@Cha3jpnKJ4KeszY_HM>x2{DnGTf zT-HtlqTY?cUe>;~L2_XP#q7H}3;?iwf85$CYU7I&&`|BX_tfFW-8BsnGJJbk)Yu7y zZlp6k#k!dgnAc7rr4}DtHWB{l(~?8dJ)8M2DAZJ7XXPPLbGOb;pE+B5-xvd*6QbUX zW@Mb#6)U=|Xg-)ogYBP9;qA`Vcovp9Qe(>S>Z_M@uiL1={2#MkTAua@zo<){SJr2| z;FItVWhPDT{l{|Aa?-B8`j`>lKlRe&F;EOvD$4v^i5`YzfO*MD6y2k`iwXK{7L4)? zbpnFM*X0(B!1ol`Uzl`2FbSzmNBUWvoVXe;6+%WJ`*{fE(Luk6>rO0mVV- z8N5#i{`Y52TOW__0^F5}bV{O}r^R0*bP#Iuzq@jp9bjF9UWyr5ztz<__raGhk9R5u zH5Z(MxULI~h#uH5diCP2rESi>9nSK8M@mxC4tjZ0Uu9<>am7U1Y%O9reszHq_bD&C zmc5ezOx)~O=NY$c4med-m3*-Bvb#N$Pywiur_Xd4CZ-prVeLOYp4J-NCaQ;$5Ve0LO!vOI)Q_U7Qcoj3^y-hDy0w7!IHf@0Oi6V`@t;*#UBU-vy#u&?i zG+BfhjaA7T~#-}a{pDxB4IZT;N2SkLS7qh;4$?^fvEtzZ7 zjOf3O0EO&H?`AgV-L=_9**}3#qM_m;oXDsi>j5}Lwh+Q(l zHg2S_dV>)>YNBk_v}McZpD9fj4Q;L&LGLh^sbzL!{A3-P*Gr7TYIE1@v6s>0bqIgQsapkpBF$k#mYFWkK+J? zC97afSaI<^J4OYXwg?^U2km16Yk~;0egebcB(YOenR%Feex01hC$6C{U0nlxftYkq z6~a-5H|wkv7nyzZIU7PXnr`~T-1(Fq(3y2*!|~38+KG(R!0cgR=;AAZn##(v-GC=` zXvncg0~TD$SVD679%6p@_Dv45Ff$a2m}^T_lW$ffr_80|Iwsq2@oq&26PF!Hbu$p6 zHSp^OaP5tW(y+v{+#T-b07!b(K8nD?{?;29IjO$GEoIyDPM>QUgA z8}J!tpuPBqF)>D#0m`6q{3rfg?Kk*y&fNcoKd-xCR&JJUPF`OIRi3{%Mw;HK3as&Djnxd-d0<@$p?B{daB=N( zB?MEashu7;6|6Fr#9lF)$e2&%e+XJP6T*;iI-V=sU{1y7i%hZN;ac?5Qw%pkd9l2A zPmdxmh<603`4pvn#%1>k2@T`sA`@xH0bnC$(u9%JOUfyu(=1LgZb=oeu4w8kHW3hg z{2%mzaVtfU+%OIz>BCP>Zct5dX%(%??=&@Y+HYX)>gqGx(V9#fksO7;rHsh=s+EY+ zx<`rhQfEk_8a3WI2DadluzqOB;>gM4Ma{3ZMD-_@Oq+n`(IP@YJUf+}f%=fFd#}|e zyzGTd5*t9&Z^|-=k~8^nXVQ5gC@PO9vfM#G$3G-;Q z5V;<~q=1r6E4Uxyefo?Env^&w#~7635Az(?!h|vy;JTj9)&fWfyB(_qt$4$PckOx< z2SZ877JZiwtl@BCYATV-g8FaY0HM0eqBM1Y3oH0S@FE-{NW%Mps?d(efqvqPUsIXZ z42MhFm#b1@%%ZuzpfhKbc5WleK?8#2P)f3B8u2b5JPeT(oy2g^xUu|5O~0Nr5U-xe z+6tF-FXt5k2gDJ+9+n55gkZ%{&`T)~q#j_R3bkKx;8lm~$%SQ!# zroXjycaK-0q`|P@`1o23AXk~$E>NusvO~j+3KimB21t^f+2cK#RS_5M(_cuyIZjxo z*3{P4KARHB(7qu{X3wO9bgHG7m#<`olWrQ`Sw0b+zJ>hAJ!+*MCFMcnsCQ+)F4xv~ zIEvoA^7lUSn~5>lqTxBkbh$}65~2AG@hLUvLwNp_UevrGUK-?8eG{YE*H_1kBt5Y;REDu)%ubu*{cCDJrMK}2;R^pIl)^z_Nq zFwo{2OmkzUHMn;?%QxAxn-##pCHjF18&Hv71e!er%Um|u+*9og=R{?em)~OoX1fqM ztS|Xj164jG1xj$W?VSEDX>Wn9HxUHTxsZ0h5*sC z?Uj+(q-R z#hBN)!&gFUz{6~6YAQzSpJ47k6>M}L@@PbjB(U3n!6Zb!>>*gC8ajJ5tBeXwV5E&5O`6Uvz39-lszomn^5k4b8b*!P6${VWiG0MS86ZmS_b@ATdyl#n@9%z)|potrgHfQAtxbo z2{9i~LDGNrC4!A}#hpz~xE#3NTHu55HfIvPINMQc87Ifh@Hy7U7u7p92XpXhxU5*6 zWfm^;ZJbUf1gA0z2lvuxoRmM{YPC>+J4=@f@t&p_r}Y&e_a2s4-mzf=-F8oYb|0{| z<|xQF!@jnO7NA0%Huesdruo-cSIarI{G-^WjCRZBBUn#)C|vQnYQB3I7)icCRGjEj z@DPVYd{em&^zK`FeN*@a@X%zSJ(Z9KbaF~>WK`n~qJ3^OJ$0d(Rh72z-f2$!8n{i* zwO{wP0(91<-g?E99iW7yj53i{ek`Ulm$if8YQqTbzeKm;a4|Eh`|nx%}Ez;Lu zIxwq8pa4#3fQAXde3+kyXbDxxvuSl{9t_YUs2i>7&Y)u9L(lBpvGgd=7)vPH&P1jb z-lGB8ooSyLI0VllYs^+FmRr{qSBaEKlG!(cW>#q9t|(^1Syr-wf13#mD9>k!7}Gu4 zV3YDU%k-v!3ka5Qor#BsI%7XxTx)ZUPcdslANa~J3%FGDJD&2ny~#P{h#;)VVC zb}{yN0BD^Ir^StwEJtnq-)wxgnJ6hQO8-sl_Ltz}2tbfRft&UfH5MorVuheJO4Oe@ zb7mF>T-cD%(3&t|mBFjwUb@GRH#5&sY5u@xoqZrsc9`Xl#24y=>CdPzCy=*ruicvy zW4Jz{$ExJQK&D;m+d&X0`|Ma#B@ttub8k|fITyQF3iGi5=>nBh#L}eFP{=WUH}pXP z1~$%{=RVCIq#|iTyL;okhXO#dE3n|zMexBNL|E3$Ob~>YoIO0PceFN<@GhQ|bNf5D z8o;@}y|tWQYRd&@qbd?r{1ba{I?2iemRC@q_iFr7q32|l*=(9NKX)J25hpO%BmgbA z#fVe3Iw!91oOhRy$}aJW3JG%0N+eN=1^VLDv;S9UjvWA>2yhZ{F$9|<^kKF0i$0yTS1H4LHi0}TsNJKfg35=v6hHa>%k~xtKJqOWb!6= zFutFP2=p8Yx;`!jM}<4JYoRhn3MEiNd1n35D;X;>E)Y;QGCb$JmdSi4;Sb;xV^dQm z#AEr!yP-1SBdd-9-AlTkM2A&IlGv9S^` zOuT6Fbz8xuYl2&eWLl=&zlFCWWLc05SP^5X%dsu&!QymZ>5wp?$mud&%NbtIDC&h~ zW3Y@N9CHWA7ek~yn{%(IDFYz)^RdZ^Ltc%&lYmmq8yo75rm7YTY}&@FI=VO%z8s|v z^j*E`dG#6#32;#0^RGp#gs_WmKOZcFPg=C}wwe|(E8vWqrapBNw(|KO;ImL<;;zI; z$C^*(ejw=K5=G&QP{xOQOccCa&fLA_92f3+2?!7%LoG!7F5PtRA5l(C(4Y9i*8`!a zY0H*fSo~&-6^1gGIt9YIL$F%VCCH$)w)eNwLNVrE*0k>&%(58|$2dwTQ1|#iUk#_! zJ;0nZt4=XOzwz5*R!EZ~+(05W51BN(ro3&hK&U(mgvu8&r)(X|@{hi~_K6nCPSFyE zO3z)YPy!?uw~jbz2F*w4%wEjknfCZX8FE6 z;k0~cFbG1YdVTkYR??Y%a35SLHuUl1$9kCjT*k&WEqZ3LAZuvqIp8&QUidXyxg@oX zyLSV$RUvX_4zu*a(bMu^EmWjN-2RT!t&{8=!RYSkrv+0!%L?)T5ZxHD-oKz=VQjiP z`oYtV=Ix+v{HDz4Er1YuyI<1w=Hcq)XtXQn{|XHXcBo%7uD^M>kpO0e|I29&+N^HR z!jx5?*tJ}H#WJ7j3T#9WN>0Ms`?CJl`Tg+KplzYmW3?9~O1~&9TT(+kKq8?hqOz8j z`%Ro&-HZk4Ara$F{xHB|te+e=IVQe_al8<|%<}>&2p(3;j0?K(X-L&V&(TafzkdC? zg3Go{SJ_^^ERp~GwZG>*ei_3*#%BYH*3cdLl^$z;E=6e|~20v%m z**7*bb0Z`?G?V(H36%duus8;%^?oVpUi*Q+J%|Z`d376VW#+6 zCKf#fQ-X1NlvF?&;P;i3r=+MTw1LiX%gf74HArQJ^XMOmtJN9&=SiBz;xHl+1y@Cx z#9#pfU`$3C-7A(*dgp|HSvP3wur~87DOV;1~JNnz-MK5F}fn zN%vN=YhWy5Tfquj8%kKLA`!ROK2QgM1{PNnF|m(TE+gQcHr$bxRtJ!WI(4#nEBIgq zz_f(kE6cHFZT@p!KQ@Yg2@8#zKB8ds!=kG%flKFC^h3)vc|?e;QiEac^N4`B`seS( z(+}A>Kt1_MN*HMcUd+;%nETnQFu}Di|Ks6rBw`U#z$og<#C%#)m)q)MqE~FK?HfK` zs)w+Fs6t#;$KYbuCy*92pW04c);@Js)78h3__Yed->v2w7GJEq)-U~{0E?ra>(4QX z8G#crdaMtn+G%|zM>sX95ZGVs6XW57-)ytYkL31YOB9>caJ_sz_8u2*xVi0TU*fI= zXW|*5zLn!po<-NVA^65mPMhBtprrF)S#4ba4q#QelUSUGjsh!b}r>9Zj8Y>|0C>6Vvb3l((gGgLI#v-u&&AV5Y zr;Wv3u~jZCc`f0e!OHeo-{M;PqW?v%P zN&2kD58sa>hHpqpO5VDc1gVoHt>9EUK-~%2L29*?+;7L@Ujn>QWT}MW%~h={VQF2t z-}yD7oCxz(``^#0djn8t5EETT$7dgQqTSm2F@AN$+1}*xbdl>A6%HzQ<#5|=Rh}2i zoOA!2=kHWsiWO1wT<5a(&JV0!WuczRv1@CouDn`+5r6q@NhWaRSvgjZjyjB?Ygl3b zQnp8p9>J9K!mD4|?cVY8=QSo?e(Yr(4@uQ5dHeWp`N@L4_M?A)&;?bc=qHOMYe&OB zGu}z2>n~rv%&MRTENvq;N86{KZzdA@sIS4U2;;fpG5CIN^_EaDafDRnY-uUQzC^Wf zb1OgyHZFGpv|*J~Rtwb5{LOysz;3 z^Zx5S`T&q%%(ENB3Z#)I@!#6PG--W^I`|Y*h^-~!CKxZX2uFuTOY{|9vera+U>MXQ%SrST2J%MUE zbs+_o^Ek{ymVFyQD~+d}^==nj-d$ZG0L5V07Qa@M^3w+WT?P|pzyQ=bx(}_+{v{~c z#WY@vUE{n~uV*VM@dA(=@sV7moB0FEoV}cCag`s4P1}mX;+Q4=q=Ec-+tfzo_TA+LH30 zB3b>!l~q^R*#IN{ke~lNi^>ny6td7d)%&k~={FC6loYsi4t1ATXA<^+XhLQ z<*Fs6g?HQ^Sn40~{{$G9g_Q=M}-C zt!|Xd=3L!OIbanNGfBsVR`t%`j`O&@{5iq`>h9gUjUAPZZ~p|f!^?LN5c-jBMV()M zqxw!TM$H5Ge{Wn2n8G0mc+0jQ1M)9nVHtZ;6n~;YpKr43`zC0jQhM#EaYe@4k25nm zA>qRBN4L+f_^x4q_lWt3Q~q~0a#bTX9tAx4iQOsktNpma6%G)B7H3(mRn0`m{9uxN zmZ|yjvJu<<{nZwC?#h^(ih8 zhdKwU#lDHY+o7**|v%7c^vTi^&PvbD_l8AUO-&!xt%MproXA* z>I7Dl@0}}95M$`xp`Ww^tWw^;DmJVt$h!6N(jV?LM1wd|a5bxpF^KIa4X$wi@X9ML zJ4c;yLRsmc|4ol z7TU8?=c;}XjQQHpf`8j+>%bb=tR1gndf-3PjAa9Uo@Lv63hcw9JM?#Mymb1fP ziZ;PwsYe52kee4f`mdPmdRC_fbM1d{cEzp%BE@tp{iCC!yE=LdM)l=m6#R?3Ujkm9 z@bU5Sysdp6E8F=!7+N~9>t8vqCqUO-bXE*@cy*P>S-b$)Si$93^NPi5Zk`_ND&adT z%oP&0ttL5u18?}TjrI3p>EJC!W=3;sW#Yfn3k}f01wQ=Hcx@Jm-N zwPoL5<|9#$W^IqMlF^?O+-p+*`$HILy1=ZZ#jn-SMzAhLpTC!^X+Nv>6k!^HmKPXv zPZ#yi&IbIPCv_n_3d<$o?^ulcB_>WhYyRQd68*;m9=IA%MZFSkp9M{{h@8)o#o%Ji z)T8LpY8UO%Pc7P4nySkoy`rKhJaq6FnTEa8ShsIwqxk28*>oy6Et6QSh}4+xu8l+3 zRC$m1?wr|U^~SDQQI1W`mufz$!@*^=tv(`T#VkJu?Lg3zZ+8EyHT&UIMk8uRaEvQu zv^)zf(FlK40(BTsM5~6^f4p?*2dk_h;KYZ^?4_LJZpSXWljQZ<_1clm6_*U!3n!>_HFRQ@;En!1C;g_yF73SUfOR! z&y_z?KM8(r=<3j(p99#~C>aqQyE9OVp<$uZq|}cq*m5Tn{wb8bYy4u6*}~ z1em41u}t-o|7!@V3!Dw!6G~DjQ+z;s82NSYkCh)g6!Az5e)VQDFTVhLQ)A0OL{^rA zpr9b<3Cj`T#?Df&3}jULVr^HN)db~&ydhJNbV=0&{Up5czSly#b1D^Am$h%n^QZ@^ zxY+XJ+&$;K&nRBz z1_kBNY*Ys9G|GAGtMy(m9{hFiXHuleJ2)!rbiMZ66|O#XxGpb|{B&}OoZV<}@XsEU zUz!z0^#Q4!rvEa6%L%@aqq1k3ppmdZ^<{4--9d4BmRt87#5dp#@Ua(%N$;#Cl%JAP zU9oMskL*FA1s~tFt5*-o$jIcl!*Z1pvgxlt?5yBYyy4!Fk&)Kk-eCsP2=Ap;O9Hv1 zzY?zOSWzW)4ga%%bmyRSWR6As154MjnZ4F9{0Fm{Cls%kSkhK0Pp#=BM4FWre^z}G zSYV@+Mx3r`>%%Bwa`9UD*S#opj zOCzxncnR!MbO{`Ba)0g82YdWWid1mZ5_?pcg!}WTtKhp5T8hJ9NOD|cT*S!D;)J%` zCVX)lo$hYBlTK^&QDw95p&r9GEE!LiW-Q%rcxMGu?U^SF>UPFZ-lGp3a`_7gHrk%4 zsyoGK#CM)XULz$FmqtkG=E5B+JKrN@M28I?kOj;Qah%_&(PuelA#;tJwclY2<$62c zzqcXF%kGqDBzPZyZAvl~?@-)0lK_hb6q!vqJ3}`7*r|Ct#cGjJZZD4 zy)%oSWS8<@PgELcMY=%{DNF}bXM}O12OR^b-Z+@$`Dor!W_D;$JKOnQm`jJ$h7B9^ z6EA#Rw8+HWkCZ7&-hDh55Am6+WqLHkfDyWj&lpQP{bYLb`o@o4V%eaIKcSvdt^ zFI``H4(h~RA-HBor>#Q|oH@dnG`i8zx#%4%qWZ7|YNS>RZ`bSG_}8NEy^DV^(F{C9 zoP9R<$&<6i)nnVygxyU|mvfv(He=sPpmz=z4(A-X`@_m?5(nqQmay|dtkp}DUw>uh zjvmIAB}Sz3#OA}u9#XLeBH{Y4n6 z_)15nNxGM*@?ooHQviQcesBL=483!#Z~};5&mhcEe0$=3;@f?|BpgjHGp(0=uH~lh z_AxMCHZ^b0-KQI5WTw4MoGTSoIF(**1&jR=#6u_~=%)On&7Z93Q=w!2B$Cv1%z527 zhA(TAGW0A>x!atbI&#gJgJzkCiY7(SpycAkixM)b6-5Gwb*guUaTghmLlP1)mzPvZ ztJ+%*Zcz1QpSQCU06^$g0>eACqeI~Vt-95=KW=69llbFrqhdSt|CGI;>fK)9%e-7! za<@J8Wk-w{T0h-u_{4j>Z6|cnfF*=*-oU^_38*U1ut9x$0lG_jdzZ7~EngX*>mu?l z4?dc2nef!TYPfiiW%i4F0v;kTm#G@r^hmp>is)>f+rMQ0EWNZ{4(_?FvR{nX(S^1BvsZdY`UO9bTFCU{L4yXSby zQVaVjjDVc^1ZO$B@S;mitURgp%a+@@h_tCUxdb-~UX+ss3*7jWo zWnksvVSQ8@HIuOqBB!w@Y@4;Mtz<21wn}$vY&S_jsO>>yW9MMhq_7%k()H0iz4JZj zP(zZaMf&okWg*Q1w%B09UmzE%qV7xYUs>};)|y9Pods_C^4vStp4{+;>&ddEtiT_* z8Z%77N8zYfUrFio_?@BOLbnFkcN)mNu;_#^k3unA54}1TP*2~bJEDp8l4hzsBy2<5 zG^SDUYT>TSR6W))8GAx<;#LOIpud30XrOoJe$0Tqnm)|hMSgbx@Ip^7-_&b-yIPTk*TMewdaK*4AmGbZ<60sA0^$JXx#V4t9O!P6EV&=aF^)%S*`=?7~Q#+b(5IJ z=*f)9MY&d<(%(fhA=y_w>aF$$z%KsfZheTLJGdr4S2S+m>+l2iZS z+%BAF^co;e$^c8Vh^*ZLQ zOtTXEdGO%)Jk(k{8JNzm{8oE5yhcPK5i-KV2B$L=`-?8+-uM}1CydE_0mhEJghfS!`6_j zOtvC?yNdCbkAI5T3p~nt?(hB_hjR3e5DvX0w$DlAipdQ=Qc<&uPQaAyvnTlSW@j1+ zZQGohHzdbo(zVS2H0oaYBpx0(vW*TSDhqPj& z*x1;U_Ired5y*2@RS0BMRMa)2t2-8GQ`1zOEwX%+aa`W2%WcnD;O6h#8}UvI{^#h$ z#9zGpeXrHc%~8W60)`F~Y&?>+f`!n7#XMn;y(X#sT?bSUrhKm6x$=Oq=6Qd=Nbc6) z*%jCO#=HAhPx+mZJZJUGZ~gGf|BK_E^!WZr0PV?xopySk7tftLH+WB}cO7F2fy~|% z6%(Tcwk&SzC}~c3EmVpmMl8aEgcYcUeKmze?UTL_92a4 z`vx3Dh+G{1=zcfbbML-Z39Ylm&_J&PF!P+;>=vHy;k+LWvQjoKrKi7tbAIIVy64^l zL_TRdN4YH{Rcafzf5`gdlpj7zSX^WI`m=He+P!Y1&s__gQmW#|Vn^RvJ74P)c;hvD z?nr1VI@d%2Lev`X8u2|-{o=}%dqe(yG2l8U;lb+?zC2&`K{ntg`)vi-mH%NyEcrg1 zi@;_SS?-GIKgD=HZ(8@>^uWsztDpo2c!QUtd}j31PyHXJs=Xq_n1*c1*o^f9r)ig) znurtW$R|6?!g0xEM?QMu5+tMe_)ewrjB@{ZlVkm+7wX_*#>wx$_ZLAV<*MuJNAvQ< zO!Nj9#6ad2q;JzQ#*aYf`%)2+qn(PCKIX5q$L<9!Qu}WDiL4BLUn#iC-bVg0x-zx@ zBG0wEAlSVnU@2XNO!l-Kt402`=&VgIcr$W2q~7M86>=U$y>3=P+emqBym`0LC3Trf zf>ZHHAo#6YV;kQUyshRLGw{3WHy?1Ad3P&9{QiBAz9h!osos&FAc29X-N~>X_WL4l);+WZ6cz!BmlxgsU!o=6&0 zp6m!`%vf2|`a~_%>DjWg=G3|0#u)(Y(a64v-*@bE7JR^T~s@L*I(Ml)*$=XI=)#U$j)=# z0K_r-Uo>m!4*8L>+^#NplJC8j&aG^V=fHWtTzqKDX4WQI{^8PAk4-fdcbrK$yQJ)uOBTup;=v&D`8bX!Z_0xN8lgX`bVB$*O6Mnv5B#<2n>9H zYg+qkxLU}RN(^$Ai{@M5m6o}cwlANPCyYW>(7HorIcJ~ipolu3nGFURk4`*-np_umb#+}A11)t($S^BaxFIS8#D2ep6$0W< zh5Ry^ozfBG+hzqyD`=MRVPTakSI|>V2j3|vOe8BX$C<-@P*qV^>RE+7Pj`&pwT}WR z!n4}~P%FB3I00C*uQHq)PX8Z^vihozAVp2NoXfkke|9^{4fyu_}O&;6!Hxfc0dUQtnt)Mo9cff$qfU`2+|PI*9KEZ<{0 zBj*nG*<^+tw6Jy9oH^1ELoF0n<>adj9|`^AIbP1JL{~~$ie{$Vmsql}I0PbBaqAYf zhdF^-Bqf89Z#`1X`-_V3?>KPaKtz16&)4vUzc5YD4+b~KOy&$evat6hpRuM*HMC}@ zAG~F9?D*LD_%p<`!?7)aM^{Fy6)<@Y6#5_G#7r941>wl~R6Sl%2WN=N1qF)HtwILuBC9{tD z+5WGR>U3oJ{x}8u&F;n@v+L_G8kOAE{D?BdZV~%_TY;stpj$W5_I|CzFADtOg}Tkf z_q;JtnqI~w;~M6U(?&-rt(0eG#&1q^1ejoB;IsiuYk!eOe(1|>Ted7{dE2JHd{}9? z@)L(cS#m$bwqYe6`hN@mqYF#!h5Np3s|9gJ@@VOuEeXRWvDPBuRjgU)( zqi9nwTUC|T*4E*?uU8_Gvc~(cOC6!lUcU5vGmwfYDJi+*(;HrTfV+u3_nlRHaADdMa#^gclZO(km*5lbUcwTaE0rHo1tpOxd?2m{xegK z|HXQMgv4+mHkQ5d0@xoHy|Q>48SZdMbGe)*vwvpYP~&6QXR5P*GL;kXNHV08s7aw& z<(I|3?JS{A6Y9u>a>cRO*8#NG+*e|cYxetE1-*IuHmrZj6A=RytEi|z;Iv|7pGpJ^ zaO6=YI#II1!oo-I)bkeGjbEd*#-R5}OzSMUx$p7;KK45MsI4PBI9TbFe(`*(R*DbJ zP%`!9BF))8TIPb zpVkfz(P$b8NoOlP*UY*)xdRc!&ZD)%b&M%Yi3L5 zcV%EMwj+VR=P{zh{fkWTTnA1SH)h!3FICdr?I_bgel}0$-4`CE=bGHUU3p^2J-lsv zGU`fD#Wf4d4=d;Iu7e;(cENt>f3ls%>kBp!G2l-Aoca9z2cqUz6}RKHaj>l56Sv=Q zG{Y!cgmRdf7(eAht4AGj~BWTDpArQu)=R7j0FA!?rA3B$Ps;k`d*f zHryj z3m>XRYc`u!o_gK^Ey=&K*kdoCsiogCWK{iXamXEW9l zXGUcD%?97!|Ml(VD494#j!Bh!-|u@f3@*}x<(}+pH1MAMmaoOzFzrB=(}6F&fWQ!C zi-TOKrgx}jdM~bz99;OyM(FbEi3uB{q8q2wzn*2sMNwbr!wzjfe2`@k{guG=qlUA_ z`WIifOI=J{^~{ro`h8V&h{zJxmhdesqX#_539O*%4?BMq*m-_4rH7%vweCOv$NhEd zqq&KgI7KYaAmrQo;$ltxEK|q%>4+W!GuP1PqI?eeyQN_49~}C=Mc@qYq?(`dlZa0= z@E-m;5_K4k1rmR&Lu zZ8B1qiXeUn-28>SuyD~KiyX>xzDGoO7*5hg*6tyvHrEixfS2)dTCsT%l$~t2!X+Pe zpIu6bPNx$mY>{>61kB&H4%SZZAg4wp0DhZk?YFRb!WO<^gKbjw*LxE^_{Ra;>M3PX z-ZaDboetY6>TCGXli-YKU|F`_ zXGds4u-|}3YsY6i1pz?Zo)~~14U%~aqyn(}fKPnqLbOCOLbSUE*Y9SxVzQfF^ z&fw&L`-u9XbxSR$7#boJMWY2!$Zw_+D=g}_n0yJDw)O7r2Bq~^LL4nRv&^ntSE+zU z8%JQVVoxMVfM+zA-!q{JB+&EjCF|-98JWq`GKL>?-d+w=`?Ao<|Btq}j*Du29>?!R45SnkP*5O0?Fu&q2g!=a0FnEpT)IX*JtJ3&EzWum7nBTBbmh@*)o!Z39q z_Mz11x6W}V1?TC^hKXpF+od9>k;ND_^>{vx%3RH(|)6{ z8-azFm!BJ5fxX8!c*g?eXZhGm{wCbsa8zxu<=kL~%d&G#4#RS;&EUoOq`0r>YrK$@ z8?qA)l$+E{EH2j0IdjvR-X->oM6kGBN@bYP2TU%WX2-C7h$^V_0tjti_8?+u5;T14 z%~uQzWG`4g5Z!3xci{%;U@n-71DU!z@d9Ij1CBsOX{0<{TcBTFxi*5Vq3>a}rj8A& z_8FmPl)0v?R%$|Bp#Cn;F@P$^jM84SBFq*JhH+W=HqmYr@iXv4Rcn*3b+qI6@l zjFGG?EdI^dnX??c~*S$i;P-vw zL0bXG32~`t*++Bg&PA~n*A``vHG{#xo1K^G!`##fUtxyuT`_{lS*HL2; zY0Ms1D;lXK<6dKrKgb-wU}`=YV6qwsN06u^;dcA=-mWtE)W zu@|qZKVXDJvhPQ9$Vp^3UONB8S@A@vWr zaeUcbp!~fTvs2YEG&IKTE#a7#koxYrZp=&HTU;B;BaRg`zW?^ly1(omHSQYGTxV zmTRA#6dZi(cg*7KCvk<@geDB#T*R#j|2jE$w&kslS~HC*>?gfDc!1*4Kkp#h#3TTE z$W3bpydP*qmoIrpcJ=Du#f$0(;^X5DS;7rIfJEItYL+~PQDM#)VPQIoUkmBYVDDZG zEhh5K8VCL33hL;f1M}u=y4NbNzn?+*D^Q~ItY+&9PMV{ga7P54Z`s$Tuf`y#+bp7Y zNpF~~`lR=c&4t(e9Ov?P`U8K}4^BnIFhsI0#^aXWM;yO!{KD|S2M<@2@?9EfI?s~qXANqW6uT8q%yvI=Ff%YRlGPag94W$m6V3}ZsP3p)KZTsa zRcc+6Ow$r;+F@0ZJkfJW!G0P}Kv?bvi73)>Q@=K^{1L-UCqGcGYhUOD*6WB2BkN4EN79eILw)hsU7w-=l@gD(Q<%QC_7M;Jee zv*uvDq`Z0fwr$%&Y;2lXlvQF+&duG%vNVKb>Nc#(7g!Rsi@pOv9Q^~CB!847AZiBB z*K?Mx`=!o#DjqwP~JTE(~AHKDil(rBFme_jvW>}Y1q z!>(TYr7-bv-w&)V9h1izjvk-wp%=Y6Q6|-&z5Dq7ygWDD#K({$8P`8Qcg=bC?%hP$ zlJ~l4F6KHoK2$)By9Tv<3t0$M(Zrbxw+DfC&mzvdlY-r`Z(@Gi-yI`&Cw+r+n0L>!fYo(=P+Y zBG?k9t@vjSFo4tV%R61;{~}}dtClcGEs-;arnWDDn=t4+KgcA*iQeltHF#Jc>Q zLux)?S7W16hS_jaq&{lCwWhZKJ0EW35@$Jr#h?#F9Ah6SG`_PC9UVRKt++_4{|p>8 z+}4cQBT)GD1cEG(##b+#m^*_yaQ>(=OIX-a=Y!1?JQjinfjXCuhJ=I~%ue(!jjD!s zIMzt~S;e|4o&)){xWP-l)TeK6{pa%Oo3}wEzXd}DC4W@@Jihh^fQ9rz-TVMacGoZWN6GVGe(Qh9fG)9j7FN}aYhXD@ zVo%jWrKn@ac%ibtnCpHEr_e)3M=Je-$oHYn0c! zei%@6F8OojJ&Rr3LL;ikYRY`at|e~+mIpKwsoF*7`18NMj+})s&dmj5^8Q0(8hnSf$C1m}^i29j^29M z(BMN8pT?D;h9Ot|a%N6WsiivaQ|o85sj5x3_M|4qKL#gE-C??MW=e9+yGU*Wn>-jq zmai>$lJJ%=!&y)YeLo7y$jat^mQGH^75$$_=|t3}rhGJX{B`fN7~uMckTLOGaYQE`f$~GBn!Gy?pwh_Xa5uZ>;?MSGxGjM z!f7ZMO*}twZG1cX{nTUrTU^G)y~`A9x?Ude4HUUxrBKkx+NaXBDbi^E4%n7n!wyjj zdrQX~?{Dj&-JY*ftyy53{M6-@`}133MdOysv@V?3+3H=za?8y~mLS@Bzwz#&kZaw> z61UD;Sr_4Y3O>o2G?l(~_q-Jvo{E=FpTr6X_GwnIuvvm>YoX|;V+JRK-z-cP?;mbX zonhtS<@ND$SuQvqa<~jrGt;AxTFi}}El14@OP~b`Katswxzpnssr(5Pv-G3>(*8Y$bM3!fk z8yKbL`0VB~7MDQuIf~8?%wJ}-PEkNWi{_K#%V`XMibUeAP)ir~((&j^l(q9Z7T-a0 zk3~6E=I;2KT~wsiWYO}e)ozF@_AXTs&qkN!d2EGmbkJ?5b}lDE>vKI* zL9V-g202a55qpw^{CM~Ij4g>rLMDQYj7)ar6ME6wtuvvzIl%0nKI!cBkiz0O1XUyl zHaf`r)xMwT=zmwOB2lHXDb^0QYTD&9eh<8y@3`u!B-&UM zJ61LW9@!sm>rqiZGTO@5{lVM2q7Z{Yb901of`4;qvTA3~4DG>6diMKhi5u#Qo>00q zXu}e$uXsnnt}x5ci&yjI+0pAA^ZnIfJl6e{6h|?L!6}vyzCxCc4s!nxMi$G81Yssi@JhG5@ac zaB`e{E*>Q{pQSoq<*#bp7)KCMZ>Vs(d2tGvL36Lkps+hD*Mm=C(Ixbs8L=y`)C9+ zox1ZK_2wd1%!|g4A-NCwL!NAyAb}7z%tx!HB(;fhR&*eopcvQT;o;F+o|qD-l&HKu zTSUVLgI)A24G#Y7qNYLd&1I3`6iqI*x9ypYJWJel$kSYvyg)KtAu_7@b&Q*`O`FYHG3V2JC!`v!o$mN<4*;3`5|y zvOPLLDiecsLPphe?5+uS)$K-%w|LCcC+gdC_R9xf?9G$5w$AL|DIY5oDElO1RQ1k6 z`3tLMG?E1nc1P5Gv7q9 zi|;8H#}v554Lc5f931dRgf&L@4wU7+zg1+cpg3lE?q%_j!^dL6*!|n^k@ugU zNnN$D@O$=bPf`A-d_3CzuWCJ*r7D*%mq!QjUw6s4Xj}3Y+%Js1^e>|9k>tX@s!-P2 z%M?k+Cm&8n*zT%*@F%l6Y%okQhFY-L4?hYrf&{Y&F1x!UPW=g5^t8Q@TlR31eeu1# zyF<@F6AKnMdc=wLcHZ&@rGD28oThg`5(p)c>62)YB|FLT@@9R}iaK7eb{;NI;rE!r zP48@A?!;4ojtfx8G+N(~LTZ2+X*RXn3xAz{c@SfDt6;uL)?d*@Uq6b|LYi*u znPy@_LOFdGDAg3Lpp>0uu-)tGN`Yji=xk*oBOzG^IxtlODl2&@y;L#JrVE~atgA~w zZ`9neB2(S=Ln=e96^dohZxc*dUFZ7DF2K_L>; zT`zK&i=TVqDOy{5jN3sVV4eI=}Hp8kAhYMuM%1)r54V51nGhXk@S2}JT4@RHo@X&r9*>(j#>pV>e9v49< zu)cXa8o^~fV&QfA9%LiYcg_p=pcOfx&LxI5HhkU4=-}hAF?orCPi?CV5{=lsnzjf2 zOL$1~GD1(lAo+K`%UkA#e(wU!~@F8H`<1Q+l-tz6Bv~8Q-X?Xms54JM#O-t66 zvrTLmy`Zo#zD%Qb%s=$lBW=sn5)OjF5v%n0!eN zS$zCe@aS=aV=pI6|K$T}YMQf-kl_jbc9Zvq2pTVFB`z$+PZ6{KCsOi9L3?VhC zu2BWOulqyLM!q1rb50Ox*|*^$6d-gozZAZ*DJL&a4Z>c#ZOnK^!KV`4sF(C@6AR+$ zhP{|Z42NvOxmag$W6Ul)PPe6@1n%I);MR+~zc@3QSA)rPrT)DfFd)hiJc?+*IOpYfO8{OqUX1cfS` zBnev)qt<1{Eq!)JStjPOsfc|Mr<|3L&}Qvb7h#-y_j`be>Y`sf#l#sUvco4zgvrju zVKOo<`a5=$&$y_Kjn>fy)pKp^n33*XYH4V=GV9nekoS${PjcTgfZ~ayBSM5Y7oc9! z#O?VPx|z`Y4NFcBnw*}DI`G@MVn5SNOcGex2_(aCce&Dk;qtUQNcw2;>A1MKskFne~VT?^?tzsCjGzTs&KEJ6cDjpit&>>nH zD&UjEhYuf~a-yML#SohMWG=?}6pu*I=`JVi6Tspkx(6RL~`!?c%6(#{ut zvXeQaa^S%V6-o+%dq|`nS)S7y@1}}Li^Hu}=I067c8`EEP3V*)%y#tVk6QGc2epsdF20vT7w{iuiZZieX~I zse6P7VulpYf4?Uw02p;Bv(j37NDGllugg!9$c?k=Zk0*AT>Sjm?-s<{G@>yWEQ7T! z9Uc>^NQhcV`7cWnSYPB{(+4ACVG4Puy4JxhM(9-b57n!SpN6EBC#JG>lVs?xZT^3|l0;Zz zuGMPQ6N^aQUC2VZma~&Aq-4oH#mky|)zn%8KVDx6kmNQz*};p)gDsL39ou+?e{IUY zzB1+ktZFEvtfezVX2NvC-13f*U{!|K=ka5tKE>Q^n=B`6J+h9D1ynRs8hV9Pba)aF z2WvXFJ3)|RjRJptl?4l*>a|a0Ek*I*SvE+xeE#|b7cW0m$g`+7d$hDV1qB7^Y%0se zpQPI1RM9*t-yWw!1vX?NQxNXRP~TNaR7XTnX-6s* zr|`Obq)vEUd1V^^=D*c8^S3*ro`*}!&@?rtX~d=MvUHiA5c{FFIlnmNVg6C5ZElWJ z7kbW$6goYxemHc;!PX^75o!gBE}oHAqFr2LzWt{VROy$OzZhZay(GGh)q{rBcRGir zeLWPW+J&iMOB`~C7@*KcBir_*S11%ioosYhnt?jc0P$Pj)8G(bj;b0zYA;b9ytEagFT%~VYof=-G2Olc{YHJmT*mEP5o+kBW-F{g<3>$s3CH2q z7)(uMesQJB;%VJy`;t=a(oN^b=daBeX=4~10upEgkXlsSP+HexMcjEGtiy2WeFC?* zy?}UO>heV5dZkS{!xk2&XrbN?!ExKv_#K!HE>*DGArfCmOKWru3Y2FVwlm5qD?hRn zaXac@b+qkWug!bQz83lPH*@dz`j}2CA;pBO#rEA~H5ISU%^;O*4VfyQIIrkyUrc0u zP{(tx8^sqpn=z9s+wa@e$DDGW*P0ipqfNW`G=~~a9h&ZNR7F>G+*O{nEs=26KNM5Lj&{MVY- zWI^of*Ly|H9K2Y>ZYn~!@_pwfy@9g95m4sOP#GCFHw+CkC!WfvQaNI5*o-!1D;>9& zQSDt~86FODnEng+PFa3rlw#t8Il~}TV>6-7(&EL%^ta!75{)2PPPc8E5lToM$HbFT z+08LqHwN2CUC_o9I`1pyPO5ipPPI$^?tCRIgj(dIBBmuZD|d7*VZHUp9MsegbGZzO zc4(D|eRzqsZ{{YcFK)`?a^De;)E84n8HSw%@y@0nB0lWtuV=6~|N3x#7$_)wJC)0$p}963<9uT=>mlq{ zcfH3^Whyn0R{t?;RA8E(e7eJ4746yKx{u0_EsgQM!y`pb2GR3CLJVAuarc5rs(|}% z5J;#otZSziLPC%6B%~c<3nbKZ(@mNw8X+MsHY2Y$fTb`JEOk3?yXwD!rG4?1U?8np z0VS7LNQmaYVyWsl_PpIuXX()$zJ7k)F5hx`$w+_>0oc=O_M=R*I$z%o>a)Dk4C z-J>l_7-kl@Or$17N_j!-O|)Q)m^U1~;L(a%ey?%ZP#q2K!<6T9_DHQX+nu(VeSL}A z`x(T1Zvp?KxfI%$^iWdHHJu)~>{_{_m5P4+oaMto%@$9Z?=;eUo5Q6rVZD=-^PYWJ zsaFro(L!hIJknZTsJJEJt{~yzyr^L&FvBzc7yDY-Zu7O=7@zKyvfVvJNjZLSoWT>b z<;9@+Od~fnbYf@l32%{x#lP5GjCrQlRH!GH5n=uCp-l~k)owY+sooFS&OjBWKk`pci78da!cCedbj!AW6cMP}+ZHLDCZEhXHV6G6&t+mvoynNm*f4+*J{ ze(|EG^we>urXHFKNGRPfs_^zvM~5aP*iG3jjunXaeEocK$!uS^>J6vvY~5mQQRlAv zxwk8C?1nudG;!|-;hluTJnT$)7&}`ln}^@dUv64zF!rFF@w`GejKKK zMJ|sdzF*C~NAy>+m0H;iJ`kZgNQ1rCd19g1{t!Bqe0Vr30IGaGwMf>32#63M!zXCS}rx!m^LtCWIEu&yx8$uhr$4SCx-YbPJNg(HJ;LHD^ zc2+Zc5K9l}8~(pPQlFiwqJzOpdPq(T#S1j+2Z3aY$SJn@0nZ6@P+{ zm$qGc{7y7G`$g^Jd*VV*LX^5_220&mL$k_=2c=8m*f57OpD_|R^Ka_pk3VZKf{Gs) zvQoE)w;&|#K;6uzuO}__lwrUAeo!bnGVS2V(~TVwx3CQz`^%e89TOB1e34=0`yw{h zV`Qmwrt9$=51M<&-pj9kx>f}SFD};HMU)ahe*6cMg$HzKd`0!DL}8;qicUX27a~!7 z$!+M4PQUDqzIN`$Wfj!eONxm(W|s#E$xU95!VXIL`$V=y#m1iLa(0X&F?Jt;WV-RT z_v5cs-Zf216$$jeWAyn<4Cs^{fY5xa^3&Nh4rYstC>g1F$}ZX}x>fx9h>;QGVmfO; z97S%T8I$bQqFu3J{p_sOYYO^(+E)G5v^^zmi(A|42*787$(WkVp+b_NL-=bI^tGQQ z@-X?)tdPp}1RS0vgY}U~D?PtvXu%0c2R@aJ>$&z{@B|0Nv0=iL z{ql&YlVJlqQ7{B^k>E+kwd7%&5GdD2^%Su4W4i<$r_Z|-L@dqM^pwRq4`Q1p%W%!w ze7T*rnH}?s^H8CT^=wf(`9>HB-LvJP44r0y~`N`TiXBS13jo_H1r#eaWMPX<}|vx^$)Y zujR)J3%BecGT$5S=)#olxo+d}$6?}F@Bi`qE-Rn+mEj2AmLB_I_u}KHHXk2IjcTh; zW^{ZD8(%-#Z1o|^d*Li(Mv*PEv)WHB`{9O{$FMZGE7z|pE{!iY-4lBYrQjKUlURx+yUyG+WO>BHx(B*H;v=BV4)fx z$Fbr|*;P>b6SpwbT%qLc-CKfd*4mfb>2Rrp-FD>W8OQ>m-7rF#U6o@==Bm+1@{xZq!ykW!BC{(yA&5lrSD1uN4VhiVIUxnYot4=^N|T?c^>M~;U!d)Y zA)E@6`6j1ev>p2xIx}Bu5l-K&ncu@aCbH!vPtR2m?5%>4&Kb*6{o*jk5L?;$@Xlhn z;#Dektww~$hQ0{`HT}#ZK)9!>3ZS?%dOuqe9uONr?NA95CEkHr#xO}s%k+k(@U7Fg zAzv4A$X)p0{4U*g(J=YEp^#xX=o0!CpLYC;UYezYQk!|D&}G9}p$QLEVH_NDQ`^+U zEpBT{+kWrP|BgMxC|T?lz6tjB45byFk8n=tSbj6^Vb(4F(r)~C-m;s=mCn#%r-CnY z`CmV}1a92@QeY%cBiGz+1{alPrpX_>usE*IEZahJl;D|xGw){C9c}qH!XvJq8&cqR zM)xa;d9na^sxZchjhx$@0WvF366#<{>dJ zV%EXtR9&2AMnr5IFhukF$B9HS{4aE>a|U(}TTP`tqK~x&Ay_ZQpm-9;m5!^VTon>X zpl+`(n(1OU3b%A<5w2q~y>=}yrqA%It&5zTtX~3&qXD`D}Y_nYAte9 zK$u7)rw|S+2qR&l|G^HNT=H;-(b)?ZEL%K}PknNN$o-`^IWi5e9LMq$x*V79q;*1W z!)caBkN(%lvXNS1eR*f0o{C9sM5|+zW&)$&gR(tZji+@<4#2tCD=Re;iXf89-|v~i z7K+{AS-OqzgxeJ)3GRGil_tS=0Sr*99T{VI58O2OioQzNVY!5i!nfwgJ*VlK9xb?1 z6CMMQw=U$^+_1Z6_C{*;6SYW;K=_d+QH%IDPW*@8uH-%NpIPC{^VB5#w~jnUPF(4| zw*YN>JvFvax?0>qyG8hc*v;AP%`!$t-+h*1U$sMlQ>kmZOWIR2XzISB*&=9{*VoD*eY3L~y zo1-jN?*f|7j5u_*VM@Q2o_%Y3cok^3bWk-}3-+k|8xja>Q<4H79nH_EB-R_H#e+9A zl%Kbrq!P4*%?+sxNr<`ZF>2P96+iLyexBWUn zie({j-!OI+l5u{CjS_QY8adA^iKWSDdB`*b4%U;Xk&;Gkh+k%LN@(9S93z*yUj({i zi0@-wmXD?WL_KC;7*DCC_%`ZV@cin|3mX=Dv^aRCHM;~Ai*4B(!^PRi8N|DiXD3{7`gt4UOda&jz#K?v2 zOb^>i?Y{*>*GD@uz{=!9J>2YW@|qCUuSKNt`$$b1BIW-JDwvU4%{o27?F6{lkYi>z z-f#<@A>4ttr?!_?l?A9}qL|bDR`oR@J@F!DFc9Q+-~9SvYXNvs^jot{jMmuX&rul2 z#HcKQh+~og|9&qm6sWNvnRAlpzc+>847QK5a*E{9gJ)Mom-NVJlSWWke_uF#dRRF1 z*!SwriMlh(_gmiOjB32CtJ|8si+c6F{{>ypF^QNLLblh{t&VV#pg*Eu`v(M^HcdQp z2g~asz4X9Se2@e~xC_I_rSplgg46BjoaZpw|iCcAHy5NefyP;3i2bEP)bfvfRbeD6VsgEq1Ig=5 zyo!p7oJLO%2@Po{CdQOfi)iu$1Z=+$K`;A8DKR3*C_-yHj%(xbRsnHl)ct%3LZ*SF z1|r2Atd5YtM8W_+?l{ox!Urp#ShiXb42ACdx4?c+?pe8wWWPVC8u?t$_vy_qG8bk- ze0}!@p>tHBRO@+M&4Y%oZ)j1z+j*RM+L>)nL4I#nb2CS%2!{RS$vaCr+S`|Oiy z=FXc6mof_r`?lMU)>u63+SNEYO05wcRV0y+bC|Ht{oj&ffaS!K_F5A$=X(~E2s%FD zOC(A}iKJUr)?p|w-r*aevc)=;ot=G5WY>IB|o@?@Sbo(jLl;)UGPt16Q zzIgUI?7Ezi_h?)8rRniyRou~ytBX{^1nc+yXgwuCr2i`Rj37`MIalkQl71xtv66JK z3n_egXG9Vk-UJ6W`}yrVawJyP*4DN|B046f{DsWQS)_mc<+-0nNcP@65AdL=(6Aoo zou78%H8UHvM59G5Yr;D}He@-TZ~k;;75D!GEslN@R6vzotvA`vA^w3piemQ(Kk>I1 zk1Z|-sT}brIqL%^5&5fnzW;&|2B2RHx6^v}2^jf<>b}zY=QhdeF%HO^c^S)&%J~um`qcTBQ_x!VSU3UK@n;%2fis(yqTNn2?mn z=7Stx^# zY5ygo@h1Sfu7}BJ=sadxErDJETzJKC+1pcgX+NBWx+hcY)i6kN!m|e&cP(?S6qDj>a{tKtgI}i zCXQXJhM(jJU`t=5n~H?Xe<`+nAuYruBkAxYu>{!^Ntrr8S$3G@owP{F3l|=JtY3_7gmq60Usb;o;nyW>3gwKCkHX4`z)Wcb^;D%w@qZv%G zU-G5E9!;wUTljlbdpB`gZCHOn{F*t=fZ8qmWj1KB0Z8i?%S2A^xr?ENKDCBS2Ya&oL+fz$e#-m#3N{ts!ra1 zYdZYcY`frfo2OnUT=5N02uJ?^qZ_~k^b(EukPu90nG*RHng_7+7e}wP85ua?##xyA z@f?qPSJz|RcUvWN55nf`Y`| zh9`eFg?t(4-w>Lh%TGjxC(@#C|KoLQux}|<)S2xKq>YmHreQYy8W^KixG+)i`I*OV zD#&!DNyQw`9kdr;Z6&b)?V0*h4GoEng(QD5g^$p4O+mKpDDlJT(9iM1>w*2m8|0hz zbEbVP4R{@>VOD?mb;H$5Z;EC*8ndu8t9Zr$x@MEZg4fXXb5y&%fc_SK47SdMwRcm6 z8~VLAf`l93ucAZR?flWmg>T~!1RW*puIipA_D=i-6q{_^fH@eqz1l{^*9HN$Qq)Zz zqlvdIgtGw75PBiOLq1;cg7BC$z9)B7nYlD7ak-_*qD0kofvNLUxn5O}SQ`x;2p6#{j;4b5>F3rhltoqr@F z|A4X9b3SLsKOhCTp`|O={r7R9A>mzwoO$!v3F|Y#3-sPU6ui0!J&^LfF`Metd@b=`L+IJf4Dir#}^MC!#5^b&j=iT(~a-9 z-S~L#LDxLJPxf5IvFFIt$Y&iL9ZuAghR3{bau{Uo>)GM8tz}P`xeSmTjR8NENWu0r;^SIr529k&mEc2#WglNWDa6)9=_4m zaD80D?#O6O{iEq-3;QAFMw7WLy_DQoqf-OBTH70Zo7zwLR_q$m;0blEHkcQd%MYCs z^ic7Y+rYK;X!%=o>@dZvfHQ{wvYJ-ZC(D(eu4L%Zc zYAB9I%^gowP|dYYi&c@cbW9ns6Z2<__*_`yRf>04adwRhWhJNL46kRuL%o>GckUif7^#knz**aNGA@_SiIPh#eV;GiLG0B+ zx2<$PsJkD#gMg#6q!os|rji<}9 zx154WXDgffl6L@=^gCs2Okhnf zO|wO^>6~cLX#3%-i%AioA$vcFPg%d3x9=^V@k{g{K*kWZ(ZygD(YUH_&FyZNSfe9M z7By?JM#dWG;axYmdaN{@ObmENYEHIyMrdL33bi-Nx8a88cD2ykcbPZV++MIxi6b_V zKZnTuTXpU0t;yT{auxK+amif6{fG1UW)A^wmL`n-EzuD{DC5jnr=~0CBfTdW&y2S8jE@^hl5``qgwfIDmA!_ zYgpjgKGpgnxjSxk7Zmha3zRI?EvOBQLGmsaL5al~B2CY_@jemSJk%{x-#(ixGs zUKy)u!5kcx)VO%g2bF2XMCfWKsly4Jc=E#V$dS?8+_!7OL~V!bhBOi%I*&EcjGAi0 zZ0wp2bvk7^^BbWUaj3%F;eNqn6(3B&cwSg#is@p9u&PP}+7w#4Y15o80_JM#ly?%( z8>Ssqm0Eh1$2X#6mWqA8q~}tQdZwu$O}MPex_8)UT#@yNk*-TRmi1a(mt%v7NbVCmcMqTL{wyH zOD#=}MaXzx&T%$pKFl*DAe==huWs=%NSV98x#mdUbLYj;n7PdpA6#T|lPxaXp&BjT zt!A+Ra$rYAGZ5N^(Cv^(wSG3yZY!?plVM1SPc-FU`OaDx3e7WWVIOfCels}EM4E?o z9m<#%Rxibtxg5&AZ8$8ZNux+-%DQmIE2+BAS;d(%p`Jk?4zFyM9uwBRTKL?UOPtSC5%gcKS5%k6>RPynF>kVc>Ek4o1{kBp8 z&zBr)9TJ=6bumi`sdERW8}}^I=WfRF5kEJSD=IV>FZ%|GCR?>{?qy zENlvifvFh#p|)x3#+tc2C%c~U9g9!3P_c0IJa%L#^nItKQ=^F2aaj{85NP#7*@xfP z)xhrY|9k^DOKRzG3a>s+V7rx1ZTDrB0Y>gA;4RvUh|d4l8|7WV zL4&xE$3&G$Z%Zk6DeIetu-j|OyqoW)q;2bGbK7FBW}l{*5aFxDYov;LZdsu59LRwq zRfz-q^uk92q(Vnv^;^Qm*$Y~?fKg{MNgwEN(BUU9^I79Xi6;m2NWAH+P3$B0D>dma zP_ocHL+S)pjC2J~T+f@pPSQ#538;LpHeVB6nWfGic!2WNw`~L}UIX;UJDhp&S{ZZ6 z1Yy$lpoi6HysHc%z9Bgalde#)<~ab@Y(n=2&PGv32iiY0r;zk*vuML^(fhNcXX2Y#wBN>TxIhuFl{6JU`<`cw|8F+U(q z`VY5fV6@OyRVA(rCb=7ogGtpR)(8xQw|;st2+C`0x9K**YP&rF==E>g>?GWPx9I>! z3J;qe;LVC=_>i5J%=!C29gl=)Y!EA<+5hz^B77V6fmy-C{(*oq_`@d}9txa$kDuru zU^{l$4E!L(cYb=|!vUx}rc|LxSVr>OY?uQi$ct@d0m-d=ZY%IpU4*(eA4QtAR){3Skz$A) z;SSw8zTnlHK1K)#Dm5#8&+&`oe-b{%awF&5%Ez_4OLo>ec z36xqLn$r_jNsZeqYz^26q;W5{Em(AA(gT-aoi82wKomGXK?TAQZWD-o8r!6NjxaJb zXLs3CZVX4*6JFVjbf_MfP-j^g*%&C?;!_%7CM0Y{0DBeQAIJ(GlbnG?v~%&Q^dVwe zvK1(zqU+Bl1>{`=aF_^O%1#a-{{M@MAE*j>Mi4rK*1Y`V9tmOTJcecU+;4>+f)jeh zyXc;~x@Qe4B6vSsKw+iSQj1I&agJ;LQL8d4+~ zU`A?j%zlKCbV}jI$(YF#BqVzgaT-yy9bB1bBqe;PAaYX-2?Y^eUK6s~VA&Hu+l$Spa72&$TrqY;v54Q0A&IuOoho z+zRP{ooE%zyFwwVynwQIUnccP;QA>}6pi7*6G6>i2>-qVNhF{xm%O%n{7vSL0#xno zH}Cx%3xr|FH{rXs?$TLYouk`R#A}zN6SIboADlOmS7BgT4F^gR3R=S)>DT_@J^ZJG z5&So>iWbp&tSji?i~)Qd8os8qhOf1W5_k-`!$t$>IJzwi-*^_eaRhEO#8IDGn@Y(R zn5f65euI_4*gSxOM0rEFe!GbNKuMQw3sbGk2w}!!@aDIpVw8j%0Am^8h{I^Oa%Jeq zc7*nl_xAnX!+Hj2&+(e>0U~^NKt!;T`<^5LvlIvvb;$7>bC9s()0>0wn7*$7A2}{-^xJ04|G^)=O%kB`<8&6J@BWsO2Iv47XR-l*s=bopCEVETZD>r^q+z&Z3v?Q4Nxj=QZh4mV}GD4)! zfpaiQ3a_Wkn%2u!3-DuD?|I-C@DseTULdWPyeB?$|S_qXR`(bRLbhC37IfNzCG_%UAse`0ie~K=zOv=7#lOZVcOwE z*y?_cX<WLx&&4&Fy#4oRd5wEX8k3BLhsEpE_kqTLVit$fYL6<{EXlmBhE@y*Z) z9_@2NeZ%Tdk-V@<2Ju-p)^J^#3S&8&81=18I`R@sTK*l&$`1K&I4KA986B>!L2&Fw zZh?{AIipUmVUIHlMt)XdVu>GF3V?EZLzoE>vH!UEfvk{!J0SpoT|6Rqat+f4i2vDf zqw0#w+8>FzoNvs5s`h^;>>sHL9xhb{%IhX$3ST2Ex6`oy2>6!%iJ$aA1S+m*_cf?~ zzKm`yAY=47ZV)$DxBYO#ui=I{$)vsjd3c|!6UDRYagcbE7dSG1+v@x8F%7pppxMv{ zS5p#I;Z0l40uE5@#&1^U>BbKq8o#~w2^k3m{S-F?7h$>i`5s;+GDsHin#HJ|0Lh!3 zu+&(I?1S`p+Cx_LA~J6W z^AqvmMh65Elr|8!5|N7rLqNc6knial1reY8;er>j%^shkAp$gT06t}&a4(O9v}(@* z907kh;c4#);Okvdq7rd!NS-7Wtv@P=@Q+&qvi(L0Zy}k%Nig|X_dX3;8O)6ZQL@sE zV}2V|{6RrPnDHA(y${_3yd?PB53ZDmr^!P2&DI<-?{fZnLQC>-l84t|7}yO67>jog zCf=et0XW)nmWE*P!XIpiJUTy1jn@V*0=5+b+Tk#C;yXXRU{e9q<#7j<5yjkM2%i@|(6o(Q3xt23Iu-MGuntns~EzQkI@rOq{t>7M?+T)ew6VZd4Gt~reqxbpODtjxB<_ZW*J*3Wug)-@p@ z*I$y&lWlq6Le%THx~LEv4!Q7cG4jF6FFys~n$9H`%kf22?1K0DGc4P|Z#vvBocy?= zb1qLgr_7JTgX>aEVBdV1V6t7X!99-v747K3Io=aK81VMS%t^cR4LO`qT3Qs(e}{2N z&K?xn#c2gt!-PN4@nL58%UYG=J$= zkq5^ta)-bhdrYN)=m$X@B?`p@qqjwGkCwH^9=bi(ie_@WkQhRg>mpI+j?BazQA0(3n~f5vVB;k zR@`}nsyeRt$kgi%BIL73$cM_DpMr|(=%90eq=td*Iq)?LnG}<6XaZmJN~kH>IUN;p zUKbN#%2>!fgqeX5i`ig*rTL+Bnh|HEZr+s`!yP2Xz&z}LkpCN9~M zVY(kPR?|q9XpxlbRVm*zF=1&KQ@hB#p8& z@vs#ZfZ2!-KN&l&j*q3WcD3WIgPV9tv7Iv=@`fr%d?g8quRxGYzylvkGmk9}>%e)~ zCb2Eob}&pQ2=tiiLN!DYVT0(L6YH-s zUfz03zU#Qx)`r{|@bwSm^n9oV{Lk{sT97YlRzvL0<)%e*je&Y9v~`=Qd2xnY1C>i1 zvK_i1x2@+$78#V~378!2-)VgTvt)b8Y5ih7a9xh&lz49lG7>uxc;;jCIw5L5|t!BIG0>D@8GYr@x8ctB6`GIn$y$?BAkEC zjiZN?wGYmTc0uUS$QqMS7L)>!&B+Yg8KdEHv~%(b^CE0mY`U=McinhmE&f-4V_L9d!;f+Au@E&+zqQC)%9^bP zkwo;Cmkx{tjj9=l;SpEqQ**ikG# zG4s&5Iwhih(?p_$El#f6JhFHwR5~L1$UQ{H-GZVJ7u*!C!Y;vFxhDKlFif!6<9uz{I_1P>d zifh^yc)npHJT(i4^ou>&y}+U5NOjlJ)vX{830gQ*UD4c0_BFvF`e2cyCB#K(Ve5orvsolcCy5r*0f!433RGL7BD8M%>xp3fM0KM-$dY~X@m*;!7H z-E;0bnKxhY&h(!|%YHs|8WUi{)2%<6`1c^#*RdAnr$~ktL#&$03cM4V ztp?t(PYEX`Ad$}W2g~dV;sn6mfcgsjBW_RNhW>^dVuTxj13j=!y~7$P@cy}G5HEIS zSI_^}^>+oyR1_~Fs z-a?oOffxRXlpn|n9*dkuV8=)s5+iStkt0A62IGGWBLdV-5a=){zOCuEp1&Wc3PI!! zK(vwOA8$wmS{mXDK20Zzmpa=JX>%|-Ys(r`M6&(i;zu_p0Oj)nIMFx1dTrlwm1Kcg zTXKrw_ry{Uc;NWZmB1gyAtmQk>A*$_GvaOVB6=SWUV$5X>h19%T|7d$00*(;W=t#d ztX&Tu(o!V9^jl>A=;uU`*#xg9YmE?=6~VtFEOkLFgCRa4+!t0=LA_=6w-n+G%QmSY zE=1Vm{E^_azd^3?8ZPr-d#h2(JCBdf@&+QwtKaMo5yj#!E`IcM!lb_d^o*%7%4@sF zk22S78lW0AJNDaXM>!&yr)km%sn(L!0K2vF!TL3PD4qc9(=l}VA_$1gf`Oy?irh&k z=qF1EQ~bfti4a#Oga)v3jRzUm&_S*aaO7T0$EW#jy9D@pawD6Y^;~sEMe|z zQpc?aaO9VH!w^qX( zz&gzve|D+s(Rz20_US7QtH>Y^K%EFrJLejpcaQc_lOE9h87bEOfKd z3XkSSy&#k2-P(tlR(~SWpMB7=?V;~pRbjx!1TyIIPW9g^EoYHM=Thq@vg+AWaAT`7 z2k{2e^OE~VlqnNU^L16PzPa(H^hPt4gh}e|K-MBFRfoLKCyzye!&Xt)ZFaKHz4cOz zd$0nEH3o&d^9C>D$nrOx*qQ5kUCM()t0 zE|K*A(e~x>PFvR8$y}otZ}ql`Jhn)>dWT$2uc~ z5|d;dOxCdv#>|-gJ$IU+`u2T)pU?aL{=41oIpb_6%1>w3j1!(EF2 zG<%~ctd|pC$2r+9hxNpB%m~%T6 zGL{1N0~I6I?|zNH&HwNaeih7a8HwxTab`bQw+g&2jaMiX{;Dh)AtO~aj<#?8)>(W( zO9=8E5|vda(*?>aS~wcIlXzG&&HK9yX#-Ng-X6hA0{?;RE98H17XYz-t*!}AEDI!c zsXHQTW-`A7j%?h0?-VqxTR@=-R&*RYYSxW8k|9JMC~2lIE%{!-c^)i0Eab~wKJWbD z!Jr!mWkIu(f;?icvH;qom6FFZg$>Y49Fc=FneU&Gme!_!ZB#n7Lj+)N*HYcY>Q9LvrNc6d(ab!QN*a$AY6 z3m~2ygaQvcRgCyzn!ince)!GS-2$bi|Gwt{4yS+rGC+BiWDaG(mMIptMA50hSfalE zG5AlWLjc_kE`p+uFYcDZ7F=!+(E0z&PT~tHd`*|@#QPmJr^(>$)k@R=1y{tBO((?* zdit@0x^H7)t3c1F@5Mjjz|6wB$jt?Ve}3I|{M$Ol)V zmGybjwm1x#S!;jU2fUVyEql>ISj+Kh_O^X@WARPjfEN&I{{Lk=4W2C6&;nO1=?&(t zHEp*U+n!|W2xwTj%>^Hcm6F8{QO$8f7oY`x1|kld7hL*dv3#(8doWl6dKmIegx}I> zMbL5alfp|4aP3!bq39ozD(>V}U4X6GDG#I-%bQ$& zbthc-h!A}9atjZyeiN4RgKrMTok|NNLSWjT{4aW-k5=mf*pHio8OonDmqW<^ZT@+0 zz;*y;gvPVEK+8*@mJ(j)XYqddUc7bmn|}q~WVdcha4cuqtsBjCHLh5z;mftQ9i7pW zqQ1&=9Wld*z1HQN_AhA4mz45g^fge%Qo@*){W9gm7PMLC^%t4s57o_Ry*nn~C|Vh} zeUUzAyry5{%fBkbJMW&fwnr+bV)3Cu%#YbCL2s^JxTE>FxWJf{M!PRM(EmVd!Dymb z`DoaJt%jOiiU=1*sB zIX4y`!}WUyQJRy@su=aD)8reX6gRaNo#)rE!%jtu4}ehkvF(NU2K)=miH2#n@pI_@ zTg9&uxcw;!LRX!!XKJ;o^2h^?^}-p(31?xQ!U}#{?ss|JWKetby}B_$UU%=p z%lJFAj<<^J8a;A#!_y={7!URzWY8 zYtQuTs193hA?IpPfm!cp={=4;}NK?e2yIh6;tzT2>2U-4742lp5tS!oz@x+B8~40g9; z+fJ>wOt+9u_O?gVVE^MF3~z@>UTy-N4GbKUV18y4eovh+FZSKyZ{I`9Kweu;@5*UO zb)VCX*_(MeT=|>-C5PMj8TUf7O?8xAcdFuKt@5L&?%GF5w*+a-gB5fFIc{h9Q@m4K zCc;$%6k`}=u&=&=VJ04x3TMcvUW-#Nzg3HY6UM0m=r{`7g&Wa=j(ZK9fEz3`|G`Gv zszzMi*iBQD`@Ca?#__sZN27P-xo|moUFRg;AW~A+p_tP=Y!cppYdfX{K2bmr{NF3;@>6Ha2BDbQ) z1}uw^*5C(C+cq&cZ9XY!@YW10Kuze-?T5008g~6I zVT|T`rmYF2ViLFX~zfGeRCExTTo4(-#$)0h68Hetlo2GW`rj>jtHHJFEMK zrtf-O7-YRyt_H+Z(MzYB?g!Whgi&vvwXeF(eurjU zGKGVH5dop2_k4_9n7QYh2I^q7kB(DZx-JH=(4dU^dE1+SVol8Z43GY?{N6(m%3Fp( z3f#jl;yOvt5}VgPWPbKoH3G^4y3ZKay@1|s2be`118q2hH?*0@<-`{TL9 z<5*YBaeAg`DyAI=2aaB6!bo5Th@1Nt(`3Jb!8$V*(REf{pRL*j0?J?jD2ES` z1}@o`wztOnWxP_m0j0pE&z`e`QedXwg|X%|xjsQpzvLpxvns!XI9{Y;NzOVY?u`L0 z<1$Kisk6w;NLPZ9bT}z?&ZLQ&cdBI&CDF^B=#v5*i(AxAyUE39;s1fcP z#^t$gsA82{n|c~7FWp{UJ{ZyxM!XP_1MvSe+bJ{s4Yp?8pq10Ta?Upk|DE7o3hr|f zI!?BM%CY#bN|?f4tlfKs}Kov)dDFF9GWQ4m?SVq-fh8(i}XNdv-Bh!t?JFZ|MCJ@MVgj zXJ1VjkJT<`TqhIj1T&646%{|tK~!EzIep_(-bV8C8?2kMiG+X?6Wsm}r+`&Ju9%AW z#?9=H9HEVVlQkqp(OEB7u)F{5-e79p7d*~tc;8(wXLS;m-YCy4DRkR6Z6rQ`^DosN z*rB)`4r@6syZ$I0(d1(p9(9%czmJ0eLDY43O`mO}&PFv&aph6W~I(5iqIm6J`-}sg1=F(M9&Sqslc~IKa z>G}^HG4si+Tnx*_V!F@MOK4^=xn^Htfq6YB7jUS`e^>OJv)-sU@eM_}=u=SPkHaDH?Gz-ARiqYb4jLhKREg)yB}0zgr_pS-`ZA`--5?VJ+XFf zYyBjyS;L*`+u9we5c@?nA*+|R953yCyaE#-m0=vSGF_KJPz;zXq$GK;TEcD#5%R9O zGl#gviXDu8ZaNJ8PF5#KMxXO+qJ^v?WI~uks}4P@9>yK8rO4=e>^Dcz;)a?3%-RA3 z4l#S8Z_Kkf;oc2O3L@`pE4|OI0%5|vbSHF(Y3|#hVaw7=qB#YQ=zIG>(GSWP*u`q2 zECev2n6mrdjRhgS-MqdHOO@ZZSD=oiBduMVPS}zcQkPmtGvZYp*Qwuc=HM*2tE@}7 z4+7l{yQkGGoYq$PvuZvUQ`b`5aDJTk6U93*tF2M)#$J;FM#D@nY%kS+l+h+uUZjI) zL7!!_hNq*upIt>P6XEn|+P0s5#W<~^YLm%ALAuNqY>+^DiN3A}S#B-W zNGioNl;FrMEw|`mhh|P^S4hQ&aS|&o2F01HkNBP+*&w{cLb?P_xI`gWU>R03WD#Y@ zR?pA33Cn7!p>M{S_%M~U<|5L+Z-UHHroYC)O1A7Lc@eMz&8;56nT-lz=_PLLfBb_q z{j60{d%Q}rL$PcUuHr}-Cx>HsA@kk1P9R!FeVt_{A!vm8Lg0kTe)9NquRT*v>XNZv zR%4{n^vqaj^oo3)fy~>oJ6jciP*7_6eyF_9L1I;2*8$BV!l9pWdFwAu1}lQHf4Dp- zes}{_fp8p4CpFFfu?O2(aLUNZv=u%ou_(Rkz*o(iF_#zYTehI(I5F3F8QqLy83`}`;tHTBz2;Jv zKH8ZCS}+z5ym(~vZUV?2&HLndQtZm+4(HlH|As0MzbH4M!Cu>P2LwiCJlLPA*HVQ# z?sPe^%4yO~nZ9V1SV;|UQgJdoLy(k~n_)OG;}Ue9iKY`$7+-<=AslJCcjzWvaz>bT zVgjY=7Fu80c*rP7NufmH)}|+KMAS2lQ|@=FrsltIbs?<`311i_IYqsrmJ)bVSyy4XTvmBF zu7P`d-_j|j&uOt~_8G46N0J@Tc#XqdD>wL*=i@av0SOMHk@j`VJUJ9x*3o^i7Rk;8 zyUR(ROr8UieBhX5?;>CUhGxa>fJFeaC0f(=z8F*|R^{=LbsChs*mvDhGlulJBz`OT z6r@$X#j1Ay4cYaMV31e850cJG{+3;<1W)~XV!-JlPgVcD;JcL{)||5+8-9#SS*=t_ zKx>So9eRU+8-W5GFgJbtTUFZ#s4i+iYoe&geu6DFwprrEe1ZOKVQre?xf=T}`50gCl$ zxJ^C-(bx{LbasnMsrP4jIUzv3IL@;XXJM>PFaDwZg9L0=?x_KV23*@TIXeO-npZ*9QEx(VO1!)CVIA$cs5d%a zHDegUdDd|lWB(>}WBkxSFOW9l1Dw(8&VX*7?K?aDN&r?nI}+mRj{yQ2`@W6|gQ}Zi zm^qDwfRY`Tao5R{(6??V4{c3AQk}7AXMJn%t@Aj}nD{!O7E-`**6TufxyBVWr{z=R zQLlqFcJqQQ2B`~bsp*o!rRTy?wr?!tI2_gSN)a=Wvmmw(wl;Rf<}T*9a_cWsg~m5o z*qK3M1=$n!dCGFkW87!T)s}p-+AIOdZqn*DDwg?j-C??Z407ur%eQ+7*4Z?{Vibo6 z`o_`es_bZD1%=D$A9l;Jj*=e0>?rOoh-iivV@i7u8QpfTaSbhk3NW26o9MM@9;J}qpi|96N-{7_mu!Q=P!7+Y z(Y9=a`3_G9x=lMdYIT>|CYi`ub$;3b>dkBj87Q^XQ*WK7SF*G29ud}h_KH?MyrR^@ z6?7>WApx^5f@>wJC;i1pbREZG{XU^7k;^NsLFP0-RB(IV*ORu9R$Xl;znP#Ic2PTt zO;2!b{KWITsLjto?^WPP5q3sBpLZO?;29KsK4TorO9Eb4pXo@tb2yyaQCW@T#0!+G zgmV2Vc9ZD!Yi#Sr@*P_xoIXXDEWxQzFRch-DOl7jL)TVG>H3==MP0taKg!pPh%3FA1~En#}v z`=v}7k6_c}#7f23-7TyFOef7|sv;~X0X2BaKL$+3Zn3ZMAxTR-F~9a<0&;*fk=-fB zx*4t!s_bSXX><0NU*?_vYm%2%(ZWS0uY~&ilujio_T6hq_b{>m9v@ z!xQ{Y!5)lRVrczy8}UH59Z)Ij!k#UtX2a3}1;mTYB>*K#{2 z{7$1w>$Nwfo}_OOZcwL!{L@mj|Cqor)Jq%Jo2-V!g}$$C*9W(@GE)*VsI}{bM`kYX z;e>uDfuer<#9Jvc#X*}Q&7TiZXkBh*QJ{#w5&5It8gFm@%uTZ{)6cE7maO>okZ-`J zMS-+*$<3Dj);+zRqJ4717Xn552$aU^pgNIuw0_@+o3$X!hxm>%Hu$c_y?Ke4G85@e z5W_O<3cAT~Cog2uN1ZPS?^fnoYF)INA`4dxYt77fB+n%vuXzI_57|D!urk)yaCDtO z3Nbk@RPSy~ZN}ABTK9;`^4ieRrH^F&cIo;OODV+XpP8>ozMlR%K9KG0v@8kLSCw$P zdqdaq8jpVe9bKw zlO-XC70O#Dee->NvZ#VnD&h$eP!4KCfNQUZa7B;^!lw>&ZCw?Q; zYD5*IxU`2qhX+iC(%rr+lhA^D64`%uMInKG@(5L|}sy;&Ub^fOL`o zt3lcK%e0YFZxNU%Y4^tWw$ZC2N!S#|%$Ew|<);$7iZEC}B*<6snqgQBXN1V+u2o>% z{9BCVorvtX@v)d-_-txZq;)bz#b<(%;#S^g6u;z@EZsh8vZM05a6Zz|Yp=t4^53%1yI*%H|BH!9_ zb@a&%nQebFH?HmD4$7DXeI~_)5OFaQ^?3Tff!=_}W-@C(RG*;&(oFWpKQ_1|B?DY(IMyM&QW*Xn+JI6<$$h2tTGm)W__(esn-SiJQpC~OZtHn<1` z93*qg@Ll=-=C1EGxm%7C1QUG6+a_u@h=B7jbJc5qipW2P5>Xcxqb+~fLk3+?6_52E zGEcK!P|5r{ak0F+g}ZU`?)9tTsPb2Ylv~X$j^^Al10SwDH^W4K!+z5FF51dcH|7H@ zCJ~X-P5u!iim}ZzzQMxkPJW#jjiWW=(3!5o0(o957SE7os9_asGiyRmTXS*X+P<*8 zcpQ5S!#E_NLA1b5#Z7!u*K7_8k(G8E>9-v^49j0OB{%a3aqEmmTW0snJICdlYq%X& zwA)wpJq}k4d2rA7$92=L0=c~gSGq!3J5l@z$#)O@FMrNRgbQ0aq?<7o#x!W9zS+kV zPD5h2_u#kj7!T(P%!UlC{C3T3bP*{(2YLK$OU4L}#@!%5iHi^*lGN5g2@ZcVcsS}E zi{9N4*99lY>9u+#bXLeF`Dfe0bJaYlDc!72DWZf~I82*sQ^B&UCav^?1F6nd6&$KbaoLWme8-fDILfHm`Pvp6* z!w08ItVA56dN+drMsXbDF7U<-zW~ee{+3VN9GaY%bqwWjZrk(&!#l9Gr^B&#yP#eR z8#k-^d>zcBi(BODa_z$OMB}|*=a7z_i?89=C;U-e$a{j&W}#yAQeOV_Bh=JloMEB& z<0taU0VplO1M*x<$;;aa4jJAz;~riMrke>6w*C* z$1;P3b@e}ad7St6?Je~b^o`}b9j1mP#jXaTn96W#xY_Gmynefu<4~YKd7xhClq}!_ z!kds5kt51^rwf?niWLbMCRPY{K&oN4BBH=~@T?s$??8-)ir~EIj(YYF-J*`(ibu*m zS*wxS&1$GpSBMpjXX5=SY&OB2lNG~R;mqo3fh>}T%Xy}YMqmdTHonjn|6(oSt^U($ zH_uMFbb71A^B_u?6_-7eNe^J=gRjRn1l>Z*ao;hr8gBZkU^cTREr^< zQ<%;=BLdwVMU)i^gFWVN-~W#8dvu8#Jlcwo_x@dPg|dR2Sto`y@u>WJu%aVMNmGcK z;Cacvn6&3K7fNA3F%e#XJkUS5SdHGTuuYx2_f!<>tKmox4N0oCow>7G-1E)>j5Y5- zrh(&vBg%yrTD^&$w+6{&VbMD;-NJUd6U#dDdFe=g%H`LG08x;fk4&t2!Yc;d@(^T% zA0%H^;)PmA7j=1jx|R7}fDkjd=$>dFs;>nrsL8F?5;86J@2<@J;7e%AL=04Z)IpO7 zGxcL}i|E|xxP)89D4#PGS_Jp1q>4aNd!8*k<@n4x7}G=j4Y(8=2IXS*NW`A<2d#J? z<@!`J4lJhQ7uRx0#S*uQl}nzJzBb`}{e~Xd_WDZ^+K`N$xS(JWhC_vGigW&n-QTL= z8RJKEYGC#QsS_~LmF4)1g5ft40Vzmx_RS@11)thA1YvFgaEgk{F$C60bNg!a?Zsqb zkejCus=|%k(nPDQONx_`E$pWG$28$w1?UL+6eiU)U-?pt0rk0*+NVuQip*@u~e=&g&aS_41csrGy;* zIh{YLg%w-U0h(Q}UY+es0i1=spm16uJ5_wPAQ_y9wz7${BFK7haqT+q6x6*G_HeeC z`xCt-G>=}a1NBU)XnaAS|3Xdc`00}c6M9DKqvLYfa*hUmHlMYZm6;TbGMmW8v#A;N za|hm0w|pvPn8ut5yW7>zs#1wv4ZJg(3QO&!Q!rq0fdFYdu+I8ThlQB&Zs*K_#$31E ze1)~&M8mKen-EcIU#Hf+&@9%%zf+{DG^3j`GB!ocq_tpMGfB-EehRu?bs<8`fBvBh zNG(Hg#(_Jc&!7jo9nk2-y8B3yn~x!P#1|nT!9s&0tqR6Q$!n|bGA@xa5=2eS zFP?ViR${p?&IJdMkAX&RLX6}6Ve%cEI=R~`Q!>Q6n58N~AfE3KW%p1DT(dW)&3$!f>TO1#?2<41wncD}hOnP;|L7Tm6r ztuRU+Yut-#Pa~+ShtjW$_9dvho}3xtRPS0|O#jjvOPNyUfn30M^c~#Z@mBqIDRb zGdr{7-e3kE?$dAH6`7`=iIU9e-)uWTRtZ!1L*s&EH zy4sNVK?Ej?M^=mP>=J#NN(99Yrl1$;+TxRVdRZ}RQo(>6^;T( zVzqo;#zWF8P+_TZrcjC3^(*{MS-Xyt6m@1QNlfa+!9AQML%cwjQ|WV08@N+&mJq4F z>oPzW{dDw#5sOhUEWKEoN$}+Cgp5LjnU{O}{o&$lw2uNEbMv_>ql^fGZ;%EA3b}%Vxzi$r$*=)_`cH~GP=1%+(aF#HR_T+FF=f#(l zG5zN-PG;f`B8U%}!7lI$E&PkOh$we*3nqrA&mK4%>JCYK%>^+|Mc(EYo0`P62`$#X zN+sq?$tF*y_eQDNRqYL<{131Thp^jR|B0uZUqS8cF19K0Dqq9zls!D6BGcvFu28OB z>=;=?e_=z8FjD6{`Sti_1ryEty2RF}1jyY?Yb7(8=k3yAMen%bW@v(HI@U-?=dpcADc= z&Nj0m?6{BZNq$j2ATTbap<_dO($(NSP>)n+QCLU5hrCF+O}G;?s7Gw-_cY;d&m@|r zF71JoN^&gX_MGG2oDjxoEr&cY5RUrB(%XEiFyqrWez}DV6_W`fl1=Cr0vT9sg${B~ zN<}BEIJvv^4QFJGK|Rb46Y+$5T`U;6p*Wm@?*|z|aRHJULAm^9WJ1EKbls^&TTVye z0rOCGh|@e5=!~&KRa2)*2W<3T8^^63C;?6Wk(4G?U#emgw{+^GqAiC-zv*2F9o3uQ zwiSzgD@rFDe1;vo;n$J5B5}!~+|;I*Z>_Qy2S3q~3DYj!csc3Hm7<(al{?=)*6AH} zZ8nZQ8hau3{doM)^ut$=KJFNLSyYrm8aiF%6s+NNcjLzB^_xy8ZhFvjLm+*{(uZW( zb%!?wp#Me`61zms?D*Fgr$>YlxCFs}y{6AoA|=+K9Axps?Rx36kuuz_nSX2g>) zi^P>(8U@f*1m=wAcE1}7ti7LoIqfk;+2G3h_RQS+a;Pk3D9}9H@v_mzOI^Fgl7!_# zhUK&iT)OwBu3ZzVE@fzU8HK8#Bnx#`!+rIPWt6JR+@;QswKDEtFo7*rdf!5N73`*N zN2+MtQL)IFh)N&k68yEY|0z;4}qlTX>~^@$H)iqR`( zk7)tMhAn96^7Jj?25}DbbJhKK!D6yOZ=Pj}6Yt@yG_PSAH#?Jwb_JUJ!m)2fBk5sy zXZ+*5%*r3d$Gf&3cN#>E7y7$0zJA!8p~_R-zq|Jn`TrVn&`N&%Q%s=mlp$x)!;QR? zkp?#wc=}beRI=shRf{%AKxaj|#9L`*33tc11Dd^~ZyOPE(<>o$Ic;fUW22gmMcUoJ zf4}O>t0TU$VSmj+7|^_^K3-3XN!1e*5Rr8l+dJF7^FM`P%fT*C@mu;A&v<+ZPz6i# zyUSOr_sYKX*V?g)^`+7N6tmZ&*}DN*TyB@WQ=nEwA}2L_Yj&zwx^^f)bP1OU09VDn zAFN?Wo`us9od>5Wl#2?xAN=4Ep~cqT7g4&*(MF-_HNWGA_oiTD;sfr(TQt74bZCh~ zpUL`TH+Y99H*QtE-dI(@wZQ6YIG3t?m|1-6Ujx_0p{1;Ix>QB1lnN*}>RI0k_0bd+ zd!sQaA|zsT`M_4w(_F|c=u z4h@E|f)`z%?am3%W#GAZ*OX@q{>qPa20UMyilU{tlF%G-0TqJ}&Ua^SGLSzJASNJO zoet;XvPcO1$U)&-^NtJt6)?VR`v@tlpIvK5pXzS_NITHqdnU#7eQRFJ0ZQ1|E+2d; z^TY1zgA~JxSYCYY_bqqJ5P5)yKKby+fTdo3*~Dw3X7F%<)OfqJC$cf9haoU-yaTyM zO#ZlZfSn3fJd9f}_a1{~9Cg)jO5!6NJPd}HJ=}EUd_~|@MQ+IZZ{KV>&v@ukU+qTr zcy+27^N$1lwv=5{DSTTl;N_xSQwkBv?|7d-Ty5@IE96?;f^zDZo?t%eyjiw%MGd-a z#6(}lgwvH!SsSMNgcQ;)!yf`X_{e7>+3HyrYh~2U^gTw+btfzLfBF=grd9Q4%lcnK zr23!n@nu1ZVaxjg5k2XcZCoXI@#dk@CGmd+_$}3?wIl@Vp{8409cVf9_NdPJ;K}b> z5b~4`_jU&y{HbxxJ@Y>vl`v=qaN8?w=;5WtR=iOJ0!TUR5g)@cD+(qR*9r8t zGo49gqptyX8;}=NTl=WTb8@i3r6?BR{3S-nfXXgjn0*!^@r}nbqES9R+W81VexkP( zUzG3x{_(I1lEZ3Kj*&bD?Ew1-cWj%}Z2M5KT_2YvH@Lf!D=d0ni#Uh4qdTKckKO=0 z>mSenqzy$|$7_c^09_Wx^;zv!dNXc#+e^p1oa{iHPV3OxUY z*!&g)if1Z>W&+H}*~j1XC^ZwgHXMix=o(4SpRuH95>- zg9(ox4G?r)SC5Mgj&4L$N+}puU8j4+>hD+sY!;=>cdU3JRcO)j6$`F5r`~0fP&Qpl z6gGPp7V2t|v;=sL!EdNM4=E52&KR%ZUwAB#K7A)Q&ui;=TTD`RZD{d0#xr|SIPr51?ivLM~jcmC)U3P^^2Xs6}AN+5JViEieRf$=P=`=-8$wA(4R5* zUqvIp=j~OWYv47x_+38@(PwGnI9k-2dzl<-C9CTtPaSR3`)@l8tn~^XrSede@f3M7Tg9i*9P!D!HDK;&7j)hk^gn`XO-Tidl zQEZ4T7Y>23pJcBS{|S3@tQ8&zezt3B&-*-E88Gt58qwLlyZoOzSb>p8 zE~WEd{PJ)>0&vIlvP{&Ep$yIgD8!CLxy&tk)p0Py-;bPYe*!$*7w|x#NtVzbG(ezGztnes-$n zp(KBiU80|BxZ=0xckQit18{bKv!VG|q98+6!=dHRB za8Uwt6<&VcJ8&7pe`Fj!rVT(tctDD!gZ!hwz<35bCLP^0kM4h9;Iq(-l;wB-bi3LG z6R=3?we|dVrvchvvXO7Q=V8!bGi27S7rOBaHk|;)38u!6{?J+=U@t`I{ZE~EW?Z-& zz%~8DtGGGD)}#RDE4kE+nFk3d(5QhJC)VHhPlmss7@)qYrWt?c>4N}_uy0B{+(Yze z1cSu9-ofvOKP#3uZU7t*eR}DixbK1?80pf?ry)mrbJLT#@A{5{>FY(W=={7J z6M^3jUo(fdUnr3V_yKX|lNWEV2E;=QvK9M&-bx(yf|11z2L3!qKqY`q;fZSZpTyI0 z029tY^cJ5TKbIJ&tfdPG{Bz#M#l|@N)TvXhJu`QAqq@su-L}eQ652*rt6{4ZDSpok zD6u$pdYW#=KSbRd$rMMdoB2Z>)!p(~5C|jo9ro<{w~4&{$mB5Hynm!&QW}X>0}U9j z^(Pll+e6%jQQ5j{!c0bE-E?0q%p(zc`p{1^-oEu4_q1_wS}y#F#(v3ueLbQ1-WjC* z#SU!VwvB1M!)Nu9&SX(uoWTtjB5%KR_eh)~ncXCFm=}z(3Au#e#ZU31jDZh`x4GNW zi$QrMv;Xb2qoeH)nuUDNo9bkEgWZFtD8e|-)~eC+p7 z;A@VLakk6VMQQO(ZXsU|PG$NiU(%D)_uCyR8@IiZhO3RtxZ^(3j4OnZfo>Y%D4j&6 z+^riy8f}AdL+i=p40e5C+#_9iY|iCVxI<4!v58G?dq(KTL3`5=EO6^#PW+f>eQ82Z zKu^D?6?oa8^;SC;?*qWg4t`8H2O|-mJwRR9uP2cfKZf2G9;QhnIm!l4Q{EKWG3!3C zi_@nlp8f$CfREtYF?gmKvR_j!Y#_K;@&qo265B{1wS3B85A-NMA++rppwgb@#pA}| zG{lVs@n-LRtuObPOc<`_wFLRT<8>0)=R&mB;&l*&kkx&jrf2m$U$kpu0|6f6GP1|h z5&CeIRIp9zQ|EB%Qgu^|U<9h*TaVIq+T|VO*sptB+`*L(0@S;i2sO;#{8{@X6t`8(i`}U&BYeXwbRBF3EU+RS0W6 zpp-o6{RBt8a^m9S=-{RtpZcR}`Rl^Vo7~b2UzTum9k3FlhaE_E1f1?v(Grk)^h8cp zx&sa@3z^wW{)o)ECaAnE^eHWarTkG{QKFXQxcM5Bc^pR!UiyTPs_QB)QSFCQ1aXy} z?&>^UU=Rt#Rb)#{U)-xA*5f_x7SrR-nBqF$%|m*gWf2ux2u)WqkEOEy6vdq}i>`FsB5Qxn~3Sy@jD38c;Td-hs^-A1>4cU!A$y z>}Cz$VlguEU>*ukvnY4~-+(fSe;Ic+*CpinI3R2vy(60W7N1juvVY&?hE~kjIZ{U} z=L{b%tV5(##g=ebSFsWZX-Y>l(Fko%DS5hD#Zr$*q1^=3rsBtpjudr0(s#VP1$#_r z>w8PQ6+Dyu8IS^#D*cdqTrY*#2VMw${mu)v81|JuY^uB{*9F5eML%xwNpEv_(juYp z^-63mp_0_mHqk^*y-7Ty{88&GIffG3B0+5dCq=P^1p!yPu!VIQhMX(i1Jv8>wE^l= z#GVhj#Y;oVa)jf}=v%H(Qsc=dKI9Z{vD9n1a{9vvPLS%G_1O(HjRh=k1P>p$T9WLX z;X*@Lqu{0^-WS23!C=rSMeNdLZ-{L#`>C`}jI7mBmj_cR4`A;Evch>{`G7cpl|Bka zZJ6osW;&;W&H8b;P^zh!t`4^UxL<@jVlkM$*vu&o{?-&AR<4VP2WzcwIg2)hSU!*Z zgXPNu&xJgq;?pcrUyQsVp0&oMgg!ajve^uW0OXchbH!gTn~>gV7ialqfE|NpUFpkc zKIIIKw?Y(Gkc+a4FP^3N>H&I3zf{`3+Cr4QZIfHjveeqfX2(wu)Ol;qjG}8JTB7^E zl2flbC*S~sELFBdk{QhGb3nYu(HAuIpS_CIdq_~Wf4;N!0||VE;*QY$)ZR_uzcWZ2 z$@|p5xNH<`FG*fSo8xXQ9J8^`wCi=p)wym!bZ zv}zH(4h!^oYFJ=6uTSUY*+I&|!~LbFA>g3tunOBpwmHjEy9; zvECAMM`lh=gC)U}Z|jzrfwhXb`&|~9d+|P*`0m}a0_M0c@v-ywF;3#ZyCb(pi3DgA zPi_&aG5wq33-DX|N3fusfEWLVFR(@N>QnHc-kp4#{%d<6_WBt}7YX0&JVJXeeFyh9JcD}kLUsn^0cj;=#)V#^05UWFE9X9j~o zEEetjrEUL4d0=M-Y+U-_cTeH_n+uSkS0%cBwjC?vUogNpBh20NO;{4p2sC|x^}m>V zW02TzK0*EyLRi41#GyjRc&2Z-B0xyt;iS5G2zdn%V)?r1_0I_T2G$^G{a5~IQ0BW!gK=P-t~Lwa^=}X$1CYT?yztAVh2UC=4XDFyqKZ6y_X}cbAm81wZ_g^e zCO8IJwW1$Yc^m|O=(8F4#`e?VzYt6Y_yYvBb7DW+1Ocrz=jp{8YFJh|RChrhM@aD*o-~=ooq+;m zNt|ry;G^>A2l)gr5;@wenAbq5&lJ$c`P5arx$mw)ev;~&xuDeo2hTOI+Fd0>4l`L6uVd$XJFCBPl5>C@eL7nbo!2t7<2 zgH@77)A;%A%)bC;1r6Mm&il*?a!SuQ2hUL!+B^a25Tcgl9N;hO=Ldsyz_Y|{aT>g! zLk$+d$s)Ewx!51DzJwx2l;!slej?M7Phdh=OXV+kn!`^b28_heujk8<-*!G&{Qy{A z!oHrLM_%zCA_#K?0swq=2k=`dpyhe+mz@V-s2Jk%=6!Y@%7$n@PUB~#XO~t4WoC-I zOy>#XpG2QG2(TmsZEs)rW9&o&NHjclw3rL#ghP>|{bCAGhaf(dK)}`rOeiCrH2>Wk zIsh%a0rhdUJ^WQ0n1UDf>N|UQ><9+?_7IGHM6~PY9UZ`eyipV7FirhbG9Zl@DC3w} zhek(7UkY5yN6&l&Kuh1a1@QR0mrHr#{P+bh`GI;&=^U;OLj1JWTlDA7Wvfovv}IpZ z)5oYMlYHr>@!P5^(`8DRzia;qxOvkV1VJ)NvUQsO!5Fl2txa;~?cC2uF#VXOI{!MW zS%@8y%9PMu;!+tXBb_8i@ASKO<4!1>Q226uq`ehd%O2DI#=C5`* z#;5QsR@ygbUM4@0#H%*v)6YdaoIh{>xb{(+<#~ROlb@*#qQ8lNQx-ki%@Bm;` zLW@b|H53D(Od+tI%YBC)&zl}>P{)9iZ&&s9S`>#KpCyzPyyeDEpUfu|4I&hw;~xKm z{}6lqPa#_Hy?Jig>pF|`juoxXiI*?l_(7*@ceD6o{qkV&9NJjNVl#QnegH59{Ocz? zRQo$iT+o317g9nS%OGp<;a4Z`hatw+?)6TV7Ay9+?xgo8ixC9yAYQXTrSRE07cf5d zfNBMAUNG5U5x{TyBMY7t^#do{&21V7l+^NV9pAN}uXR^e)^CYauqdqLRUQ0FCIfIQ zMhI)Eg2^Bcfc3x{Q90i{#@l3I_2&TCjUOW&=1mXG)7AyAPHwHLMtevCwJmwq-u(|?as@Em zRX9GwgXuYBgP*G!n|I%|4+K+fG~d(t{^=Y{%Xu(qU}tY&{taG${Al!X zNcsp#2F*iM&3ypore*(!M@p8bi7<6T8VAktu^bVK*!G2l@VA4AHT#1L6d!QZ% zd$29vYz|qM!Fo(~BA)+be+HZve0=zoq#U8$4y||M^}aj43IKWFL#{tx5Uw}~%KuPBg<|{ypYMcNW${Ds<*)l8`0xWe zzt>;=1`vQO95M@Yr#7AYfhvP;NETrh{WbS-O$kJ%q=WzdLZ;U|)~h3@#YRQ7uIZn; zpcpCnC$o4-9~9~jeRx@s$9n4lh$?%ZjLmsk2JH~*)h7(j${6Q4%4t`FnLl+s92+b6oV3Ed|N|ApWg* z*)IBHXmHN~a5-YF=9N!|D+N4z)-AbK`ij<@)rw~I%)Q*kB$Mh90g+r?IOT?fwI6a% zOX1vwy0h}ZJj&qh>3frtX-aU*S>>e!Cw}iU`pXKw;|^SH38sxarNc8V`_2K>rZ--7 zn?vo6O_`r1M$x`v0^91izO+$iTJFHFR`J>;j_oBEyI{>`r0iKO)-2WY$M%TFSAb2n z_)xAB4?R;**`-Q!F4Tqg2R$w?+1|I9Io8!i9mAjZ@hR$TeEMsS&O!e3upC{{B*N}| zOXxp2+H;xJpSfVkssjM16FZy|evBUQ>#heHX8nRRj19IEukA8nFxr_@{GaAKnHT|^ z(p1aZ`LX}QW_t~uw>-}nn598YF<_(;`&JGQ7%j+`&AHV+*D5(+(V}zS?~ujl9Dinh zRDAq@Lh9314%9GK#H?BMC}%A%E%qBBSM34tt;}`|xQ@1Fz0Oeo zv&2XMle7B2hVl?m2qI4jBh&43tRHYx5NwT2RT}r*H&u<{(eJ0HubVYz&(GCER9m5@ zsw!z`XXjd{ZkKg^=u3WhtiJmWVOd?t3>hz_`dIH5N^Vd82)UHng`&J0V*fP& z9FN^Gk5LlMc(#%seW8FzWtU#D&hN%jz@2B^-CosIo>fKeBibJ)Kc+D4xV0*#9G8SZ zPUzm4KXJqbNaqATT(^oxgn%kQCMl^k^PFk}B2PwYqYW+&092f@{tD}CP(M0nkAL5{ z_mnfUb9Xow4Goy1>H^bGmQ0kBCwqc%p6I=?BPktDxbo$z+qG9Zh_YetC$GFHeyLNGL9ZzSV%C_^MmV8?>v&V(JSo0&EGl_} z+gA*V{D6?sa4(+_@Gehnw<>}5hz@dm^`@+^k6G6Kq@ubY}#Lw4HW=ogyJ~ z9CxUN+(a*7xPhF}A&R%VyM6}864_51etM8j?r9<$^fQTc>#)Zyq=YfF4{Crm@__Xb z@ev-7e&0WF%I5^m9+#q+vc41dmFzg~$3BJ*R0*>L5&zneb(F9sHz@0e8um<^;aLca z#XuOIJ6Ln@{{7HT5A?6k96u_nq(HcHol-UGX}TYok$!&{3<{yweT;)a86jfE{as&Cq7;BekFleZaV*cY%g zQqJP2zFMcU9K!0HY3fHsW^bE)!uaKbYwhgmomf4kihQMXkXXgv z+qzKfEitwQBzMb8I3+e%2|;Z%0a25|y7X=2Qt{rXjLBqe&+c&oFTIO*7o=Q|htj*$ zT`FVeERpt`+?Y)GYW^&V& z<5N0{Pw)h;k3RfpCM%zDp=Mx)9&ZN9tfCc9@Z&vSLC6ul@O4PgRrO>CKj#hCM3Np7 z&iYY0D%LypegUk5&WiQXj{tnEr&6x*&+(LaGBr4Gm>Wz0@tOP&GH*(3PzVutCSla@ z-b2C>*#mgQY$p7fY41z6b4Snf{W{;%D6t z7zkXR8iSXhDsl!{PPvNc6z-?DEr=p`-IWM5lkCn>ubEf`rQA-l1Uee4Wl=6i0L z;q`vK-tX&k{jTfRAFjKZ`=0xp=lXaq=N$aJVa9d79GGY;p~AQRkLoc~9z_-j;sFJ> z>#b2xGy|ewZPyFt9iUh%h-U7s?Ub02i+u@Hvt^cO>^mss5S+lka1J-C#!K-%wb2Rx z6Dst?M?yL{UG#s^!G6&r>#<6^Z}B>ksWFU?dv}?bC3_IkLC{UHURtiMy4*5!3!B&E zMp`!LiY6UAhjz2RpE^H}L6|ZtOjELmr9Z3@5;MB$k_DpUTAxCZ)i3$%u?mY7?Vq;^ z!>(tSOt!lYzs{QOUhL*B=ziqzZOruHL*th0DwCB3(F)2^ExvEOEpK;Dk$X9LRkQ-- zg}vid*q>;*Kc3H-;#}HP{Lvfm-bmn+i13>PhdWqMkDghc^CMbM3 zD5{qj_)w8pQXpL!NC6Yz2Uk~D9h}dKJ52U5+oe-%Io#ayaBWsUY!%as*DKPoVWp(s zd8@a=gwYOaiq+ei2@;*?QJLz#c>ZC~QS>KVnLYK%IW>|J?2&cx2s=`8rgWy%;Sa*;y2(|mwH)|I-c_|;w24uqgl_hef)g|6f`anO&&vApPPF= z8?3NUk$R`2uAphAD#>>`~1Mm zCeq$n)xPp>?rR6$QvS-dy|sc?nga$thFCmCK|OuBL$0{^7^^5Nm-!qo*i zOV+~iS`}97z+f+&i;?rYJZ=h~>lsb<82>C(EO#{%V zt@cGKH8!KS0Ew`it^J#;6AA~`L&cFpEJx+ppzMZwsShm)@#jLx#K&n&wXa@|U?XkU zoE|MU){+SWzBgnTZ;{Bb2e&5>@jF{t{X5}K^{bnD3 zbSe#OP&kd@O|&h%FweU67KJBCY7;kT1c5HV$*-W{X7K8FYVP1Xv~I_7*_yg;2joWH zuh$N&51GtYEH<qVO~4`Pjo3PUvbIj$-Ztk{KWLLM3O5Q3fI(VMh?)-szph| zhcm+suB2y1|C2iZmv(C!bw(@KvkTdBm0+dt-{zGh;gg#?X59F`Znx<2Qt+x>rwdMD zca@V#c@DV>_Y_8%MOzg%;S0PZ>*EwU?Bcfm{qYTP0!z(6^;MAj4b5zsfzAW;){xEX zhvu#(q0umad`xO0t^BD3WNRBw z3Jp?&B25gmT+`&fu4U>MrH_2ZCd#qvR0Ulu`qhdA>uIFz`z|!L9NE;h zv!+(H2VCvO7>(TqgU6daRw8VPLrd*BME?0FV5ev;(s!+@el2-DmoBig1YZKe-S&U2 z|7?RYU}bSnX~r}u2&7JAr8Q~j7L@A``1HQ+ZMBE!s28VKa0m!3Fed@ z6-AS@;}ksdO~#`B!>$cnx$EfY)rnY%cPjV<{L}Oc%21{LfV@=Ri1x+k)A=(yaYBWX2?|-CY7QIjn0uUqlal^<$o%>sGMu>9Kqf zUAeh&1TvllbRfm>EO)nw)8gU;_v&SN(iG!Z&`5K2A~`zoMHN?vo(oYF23El;J}UfQ zlJ|d6Wl$`Rk+AIVGO!80DX1&#p6#qT_4Ng|>V>F0u3n&yRsswW_d%if_ISy3yqW-G zOxocy%H7YwnMSEvLiNj`gu53}j4@GJD=Op(^lI|bS9a8Gm)7*pW5FrZRBY5l88zgZCN(PH8n(1t)cX}WRLLt%OrpC*G zjrKMVx6>L2Hr&3?2_Rzpp(mATsXs%|A&tE9)nk)KXczwAJfYO-)S~dh!utppS5T~t zyD4ztPhbDwX1I+qc8i0#C~79iANFVAhN9JH_yiBc_16R(MSHwsas17Y9qnLRP&{iM zT5ZnIt@=nFG`GF5(V#(pkmrnoSMiK(c9r1nRs2D_&+7kTyB#4Hx0snlGcrH70}pJi zbdE+AFgFMK^uTM2oepr2Ym~ts;Vhg6Iaw6~@=W(^_ey`fRO#D>DNr>CikIW>V}>so zdk*D+y~k0l}zO|y*?RjZEx)e> zB2E4v?iV^Kn)&vsI-A@DRV2-zB>aM2%rmM?BryX4E%CP6v<(2mzCz-AgFa5F(!3EP zRu-1;{%B%spCIT#k3qd}C|B`ksjyvLAXMTN3$hx17St!k%WwoME>}p;R&v;K&eF~w zRYEZQX4zHwBRpfKL|Ja53id(CCoQeo)x_Q1N4Ml(>Ovs-4Vpyif7jB4n-j7=TW{#l zq?YZ}hjKu|PN&5(4dzZHrED59D7#o$rMxr*w^8~;DYA$`T}0W4It!<}f-?c}ab$Ws z?df*{*G^{z_bgP0>7LCPgAglAf$CJLu*sr~z2M}Dn@fJ@w6-J3z4`Oa5r zf+lzEPSy2X+^8ESy`Te8SpYL0>tcUV{a<7)74#;cQNejM5*~(dP3~VzwBui(-Z$0& z*dakdjq8EkT%LCFh$%)?LBogqL`q*ISD+SRMn|KrWN`$zl+U`cM=YtE-#|?+k5#_q z8ebI1O1ijF-cMqrt4jG{@4oEFdMp25cI@&Yf|4|r&_^p$E2)AHOwXPDx)JJzM3uKb zu{3EMa*+yfx3W?pWoS{XG7Z}bd(pl3nGa3D$z$A=1X4XgqIBl_vwhR8CU7h1dRolq zGe`d$o_B0{IpQ6A;ii5SN4*}vcYD(9qM8i-KPSEaEv#0u2A1u!bsP;jW1yC-T_-PI zrqPdn@BTu3!iuq-UFy97*bFa>jkR=<{G?x2rl%i9e&#w;-L*T?l{9U1R>tkqW-$C~ z&+TGI^MHUmVVdQ~H+n9As`y0bnf47g@G1n9|JryBP581wmKmAskEMMe2DPpB@7POQ zaRJpXK{1e%;D&YmcA4AV%+hmw1(nfTsL9&8+LW-=z`cq-BI3|fZkg*s(AgZ#ganm; zB$IC!*qn>^zPNEBeUd*NzCQj1uRok{k3M2k%uWR-c2Kjqpn@l@z#9U!4;|JDnWBx7 z=>*SIJ%>#Ihi!4uy?2S^Ic#N}R9CB=q11Lyu;H1O{KpAqr^uM-=x3L>h*viw@ppVb z(V4I(m!NJ-iH&Z{IW?eBIRjZ6f<_(9HK<2a_;3}?jZXf@~HK=P=HQ@pcTDB)a+G;@zB1pEr%zwEjp zUt%I>&Yj!ug7boRor)CF+Y2^ZL<8(oGa59uP>mx`Q1+w2(KUuHZEr6Hf8VEdwdoJg zTAQ1aEU>wa)!~Iv23)W zO^K6E*C|5j?84G_Ekx;L)SbA_BFp27)6cYi8!ZP)z3*p+x88CI2&2tn1SCkb_;okb zX}Anbv>UGkZ7u${P-!cjE&vATU*Ak=-yDWIaHi>ZY;Raw-{@modU1!T=iAc|yf{R6l*(D_Q0;Hm* zR^sLm!si@#XG$plb()vG4|Uf`&hXF$4u!=| z_Q#J^oOnqiiObJgKR$3+BL^5%Snf)if>R_oU+mIVjquIE-angV+aQGulz+N*oG^_6 z&_xeq`E3oBXyHE3R`9`&6IY%>@)B~z=YZg?@6Qh;-_G}R6EY|k3Ol=Vqm!@Pn4vxq z#touxWCosezvDE-&rcVVZs;G*(9H=- zu37F7OT0q8i=OG-3A^Q{G-zH2RzueSou+cpc%@a7KM%A z4vaPlt|UgAT&WPIHohvU0oB#{5pkQQ=F}gq0Ca>0$ahd%#=*v&py4e{jRO*P5KCop z9(^7juDW?^oaaKL7lSpC zEl2uj2kdO|`MTq%+^wLI#uVlPTaJ@T0L*Jj%q-5&S3S2xNk(L&B&?I@-@**Y+Ho?= zE<033XkFP0ko|&PI!-gqRK?z}0hFyl%m%$~Vtl@XJNXlodZFGsC0+XMjQ%DU)0)CR z3(-1ymB1O}GYxO;hsHSs{Df|Sjrv4>rm2!2WJpy!-_3ox(8e|&*=se(T62{2SQD@Ik25r&S$XO>PC(0U8ouwKF1xvQ1Bmj)x>B#Tapciu+{y})uw;zk zwAs}4bACr$tPBUJeTp4h*u*7_{foD%i>mYhX*?ExqJ_)?sF(Tgc`nRbGR@ z{P5C6`7{_nmDkHR043f$+b6lsrKD6a))z5uD-f0dD<+ngmyI1)B^p`^-bMFTZdmG5 z@5-O;tLks6-sjf|?GF@^pp3T~w{-vMm92n)Bn z!Wyboy2l{<8v|RunQPUP@U?isy&v>j$8Q~5@27MFwmh+=ww?VSf@uVZJ~E^^Koy4b z!2gKeZ?|5{EXC}HKv%^4qLfVgrsZ%I2c+HS>}ul_3=Fr(@hkBh2ES4LEucxR#1`9Pd@OCk#9b2YYQb0U{VUI8idxY7!2fDP@qTYHd*rFAN^Q+ zP?pDzw3I9DHF}@%p(Lcz?a)%9vIMCeB7&U-^eedj~Z@uO4lu zdjF(r;7;ann^*|u`W&POhVR+@nA9gbzt`*3055qiXgAvQ4D>j;+HW0?+v0N{azA0| z5p>NM+}_A9RI#Yrx&hPfBF^h#NHaENv4ShWuKm;m6q{(Otv7Tt8-SNMYk>H*>Sxd0UAuQz#x!S` z40RSsdo4T0$-9ZMa4PO)WH}m;XNvvp2QRRZuH<&LwJIeS-!5^so?Be3O4CU(9&OES zEn7*80(FBQN5v)ZsdtcFPA&BwsCJB$gp&~1=^+5rlH97A}w8w^}%~7Y&_O zQxe(@XwXK<1I)UhrO}EuH`>JufLhS5D&jPyal8(Mnmt!|EuD5{$K1^$#1>1i*_tVB zvo*Hi_;O(9K=hi{&2SewJnqk$zSQqelG`zG>u%g~&k9I>Oa_7^k;Dy{^SCRiQGl z>C8b}1F=pEuZ8f@Q1j);91|@Pa=dE-u}6Zxy33|?FDE;_GG z&=`>+daLxmH6*4c;)cgw0L4F1Ai8yfHp6~O-C)0&?Jbo(<(@EBuz|0~xuR66z7UX8A z*0o?LUvfy#ml7417ITiYb*3~U(d1|?^7%MLujMS}gN+z?{J`AE$kG7T>vXyXQWtGL zfY$$xUt<){3Z0wf0Cy@0VQ1HkqYQx~lDAFrm&P%2Mg3pjzIusak#}7^2yw(-ee+EEWyt z{Ih9HZ5JBeMzFfhE`s(yJuk19BVbp*-SKx=nZ5pHp(OhwZl2*s&gvb{sG$Wi z*ic0S-{JQpGzjdR;a)#RV7C}-L2z_)2<%FQy2*BqSRQ&ys^1It)OehLW#1=+-p$Q$ zWmgomuLSH_(+*ncW_m^w&xLfUp%z@9^L=#;Fx3TOM2~DU@t4|l#fu|EQq*OxCmqTwKCUq+1 zyk34#qx&NU_WMV7nFk*~{=TA%@FVjH^><@N@w->D^zwcm{F%sm_;9p#nY+YDdve|h zz5^}ub#-;&_jvDwh?~~8FS_lVp-fjLin(+LYo}>nOw&((e$M#^UQ1 z@jtUm?#2hsAN3lG=0Sew)(Cj9g^r2G8~Vexf2%J^`CjubH8$zs$9GE}>P6*$aet@~ z>pXqL&=mn5KyN+5w?R#Mc_y}j#VsZ;#gxgV&pwWGkFpIEXnp8sMfX4deq}^#S<6gl zyh9?_%JP|dwr=Y^X_PnJL#COQG#!J<;=Hh4&IIXDVI5qwh)1U{;YqyF^I(N#c-pns zrRsdPv%?K0V#|ZMG49FF4-7PL1)Es}RpQ~Ed}wlhd-vS_0bSPZOH1Iib^puH_FkDO zUtPRHoJp&X8GCX>D{yRiX8%CqOnu2mrwm(VM9Xxm>K_5{=>Y=3in2e0RSJP=wM@?@ zH7lBZGr8u+$WA|Nec)qmG`t&q%)siH^qw&yZvN_&41I?1Qp!|eLNu$p)N> zFzyn7k?-E6O!gq4)GeBeTiHG&DKET!oETbIDBTqWtBnwe@seu@boO*<-Q>BEHJP+FpW#|OdpY5!pWC(gyqN|)<>Q9=0OX*ukODH zRO78ZN#5);8asWclLteXR=D?`vsRP<7td-TWrxp`2<|6`<8j(&D-gkB(L{*~(x6Ld zt!+XGL>3;jmv1zVgxVKn0>kAn&BU4{KMG%$E+Ar>K)y7eCt0)6*T3a!<@&^T@RyGs zHWMErQpl4igr2_|0>kVppW1jJVlNNIc5>tdCQ%9*vHI(yUf-04J=WEY4Q$r0V_eAHFvT~CbTNPbW9s~l8GNoZ zg6jmvw(#mzow-9ddcQEdk5;i||3MlWnOgnPar!J)5fCJ)!0lv1O}H4^O*&$Aaldc( z!j6ZCGS7Wy8bna=>D3<>Y9wDhM)7hfEJ#S%gtsiq0270-G4uX_f9gM-CMCZ9n` zO5MgL`}PEPeIc&2qMoFRiA9A(?(rIv>0Ve>qddFy+X&m4BKB`jU|m!Z9PGjMiTw?Q>8Mb5=M8M8o5Rv=)$tQtwaKx>9)c3J{MS5>t36m4UH? zQ=z=|2vv?zT<{S240Z|?u&kr9uAAjdw}mlS?26mi@f@T>4RtR7eI!>vej>66SMJHZ ztL2m@x^LxX;qNT7^$Vl*-Gv%LCSd`!mBQuGl1fkIxwR1sjdBTmuGt7>+dB5FCGp_8?jD&)@|Tkh-gMai<6AQP=LIYYhiZw&fPgyJe=(X z%@cC=#|>2FDR0UqZA0Lk10%;6aJ4bQ>XBJ?3Bb4D+Kwd#?#L+|Na@fK|>3@l6SN0)hANnRP@;Xxdw7>Fa+wO0KKPRO_MN`G`e;$z@11Nfsv=d6(vDP& zgt2-Zc3Q04{f7pC5U<&IFx)#I)cb6q^MNjzDli?aT8oBh4*+>uV`up z^(xv{yl*k$mC8rmY2lNS(tWba~7G&9e1G=w_>OFS!1 z6GzAN>Sh0Fz@9U2_!*kPc>|0avgxXX)N|@&Z>s=vCovRSvUU$sDKs(jYK`RUe*W8# zUjm|X%5%d!?swOJdFe590p&Ha#@e+%J&Axwl+xkAEp#A*hT&FRxtkyZCYF{q_-@fe zVb_k6D00MjR|(cGvB0>jW=t(5s9>Zx^+Q+EF=O9WOV844RGohV;oumUW>#!2 zYSFwiOgw&7-uh~^tPu;hVxPGb z4gdK9>E}rjJMk}~2^yHdS$WTcAFpdQ5XbYvVCqeMajcLkmJ88+**OC@%8iVJe+<<- zB;*pW?i?Iu6fG$10`Fv_{vw+V@XNgkTkC_j(4lq$NO$vx;p%Y(OwKv~T}Mt$PfyFX zCLR=t;2x@LX`U4X!WQYHH7_+TY4!b7b#-;aL<#Xd$6!oG?C@yG;&^xqF6uty1*n?Z z6_tL*dU;pdC$|@CUf`8WcX*aTfy_!S(1JCk3WeD9XvkMknFfYvLdu2#;)GS(`2U%3 zAZa=p?Cfi}mF>LGT?S%KR+H}O$W-pHa=kaQ>F9|@5>&vqm7b0t{J332z+YSFz8nCO zX^686w0XjVPGR%VtiN)2nsf>n)l8fxuRp7#{KJnEVPgf>9oZd=08##6U~l@_+>+J7 zBd)lFxw9yR!A+n_2K!!!GzF&Z%eKtzpcd!iv7Yg+H(t-|} zIQgWqg8|H|Z`nfqs2rSzORSTC8wx{|Py(A&%=p*KzA^oTb;RKjM%)?lZ zi{+ir{R+s0Yybukwmyq(I4@Ckgx=`Lg8Xkr*y5)XCr%76h#H`@QRE>5BQF4s_HuLQ zWKfLd77Ow%uZbdkNy$3e?{NFdochzwFTYk1dpJ&Cr}$4O`0T}ne=_5Z8n75QG^C_x zF+&s_SPUXQMDCBp2m-R&Q~1Q=22GyU7<>y5-nKb<5XJT(0dQ}uF0GhXoSrC};}PvR z=~&WB4|*GK4T;`1qa@yAWUXMFMC*zaCOxsS1pr7MHu^xuZRVW=d{uC?nzNw5CErM@ z+ub95ypvc^HeeY-d8sdvTocd9Cn8esbPB(q#mrvAIy)rSVeyy;{p2y#!~=6{``o!nC4Pf}SF;!>p&PXl{3+d%P3ZG@u0*fmd zxg|TR9FO)1UDpBlh0Z(OkAcoezlla0RzvsI_y^JqSd8gg+r-yCx~h25`GoEHFR!EE?#aj zC&+AD^m127XI>d&naT|bcRH_%I@8{^9t73rqd7YAts|>-QpQ*;n?DwPvTC@htNVHm zz^CC+)Iosf1*;i6Q0GxWhU*Jtg7T2q(*JO!-2x|B%T^gqx!tl;f1yu*DGIyusM$Q6r3zQ@T z2UPrFqNeq6PF&ipz-Z&{rS79Yj-lY;V*`&_VfJ@K*CRC^HbcPVFY^x^skU{q`JzC6 z+_rMhhQ#0754fZ1sR;lJNPIK^wcvGk-|1=paQ6%W7?#rcg&SR79y@2Wkc(bzg#v`e z{v9)kCNJiAC_};q$&`Iw^+q3RB2xUhQbhufNQNvFI425z_+z}4 zLZCdrj);4Elz4i;OUlCXt@TtA#+qB(1bD@D^}AN1^ElHu9`2l}s;W}2l9Rn0uWq?g zXAb2z+B`n3@M`B8GoY(h=JG@z%o8lnRUJ49Rz^0j#r6Z^MR+>1%9EI!-lRXS)LQ_& zE!H@u@bW*2z>^NXyVUIHkVhqgHxW{3BumjY=x(1Lkj!BXvMjvBhk+L!#{7^y20Yxv z(F=YIs=GMGtyW5U1>(BXA2^t|y@|FdoSOr#qm$mKtK~ef2D;hH8k49o%`~Huh+bg@ z*eG9hZSAj#vBe9v0`V{3WDtP1-$Bk=8^zQ8k@zo=a_qWUd0~ssT_}l^z5J{E{jX2g zADE^D2pNQ+1p$V=yhTc+c#5tlL*4Ys)vHr(H{SA~Wu+Ar>$!$Rb+a?ECSHrHtTVG% z^zbtK2@G<))t+cmZ>Tq0rQhY6&EQMQK4SI9Qr~3(qA?W3pS>3XMVsYk{ zVgP}CTTO4x9QpjKw9V;dNDr}h3n-Ai(o$SGzcATlDy`W#mL1Ar0JkmFI?(KN-xS}< zbuLn%#2V%xLUwyLjzgB4AX_-g+?^w526c?o5w;X!i!8C{n-)niXxlnflkNgyF%MN< zr;6CRDO~&S7bq@}H&9(q#X;_6Gqm;Q1M+ELe8fpgIRt*GPxlMJpDZYJheGk$rj(t< z=q7F=rA(b;vbFRXtGaJ;1>J<&)lo1=pEK_X40VnJ1 zoPdB`#PQkadTo7uJ73Z$z0u_OsmSJ{8`c(gii(QF9G7N|OXTrm-5!$wM~FJ-b8^VJ zkcDl_6q*|b)@4E&f^Ck*U?&N>t$RN_3ZW#Y1FftR|Ty{>#I-_;g=0Ms(9OF{7GQ!K-Z$;&*s3LAgbVq&#+Cb8c%c` zF4j_Tyt{-~p- z$oPBTd`x=mE)i;=|K9v^;Q6H(7MsAx?ULc|15e9k9M&uPl|E)#pKsFND-v1#*l1Kb zW+6vMQC~1jaal!&`N20eW%9M+jgkNl4E!{4M=tk2ErSwI6Od*V;dGuM7O#?iPR@bn z?vW*t4n zATwji$P!{)@qBb4*kfKo#&wE&!xKQVdex{>b&HSEPLKd32z)09{6(n#XkBw;#xSQc zrb|l^efyvYE;&u+h6rSQ-kr1i23$0^QvJWTk`jcVUWI+xVAsYK9S^{L zTb}NshMZuUvS3cH^M8~s@H@9OlM=xVP;=jMryj}J1g#xEpfYpyvA;LxBNL;jh5UT>u&`po?U ztT&#*+fe5|q@AXch z36}Xk>M2(ifGghA(G6Tnqb(oX;KxD05375XmjFL@+~&h@W7yC;2eB(XEW4-289MH- zc_RHnFDaCBKsT@XwU>dp>w|3*-`&itI}7#RqZd*BWv|wKXf_~G&$5^- z@S&RJJ3)!;$x^sgp6bo}bLC^_Ff^GtEODH#Rx1Q&=A24^D_uSga!(} zpBuIDvgNle~0#>-Y#na*@Z`l4m>nn6buMz!xzhYtN@mXxW=79U^cC5ed_qEwHdaos;(?ii9O0(5^G_?SvwGs+t@VfXBQ2fo}edpEYD({X1-iXJT&?C=^u$n1zh)6ic^o4W{y7H$GiW?&iliQ%h`$SOJBBxYljV#*-Kq{);AqK?RxJc4uS{NAay=|&mgG!Fu`ZLH-ra_#c=sx<~VuF8Y`NdN4&qSsTkD5v)9ox|&ui#0Cl6g<0meZMW$Z=133Zp1a<{ZW4^ zasOWv+2IKesUj@%4w*p}1iNcGY0hqT_VyS!qRopRYWN(JZZ zVK7XZ3A*T}IW02<$O$NWk3oiOGxOFN%JUQOXq)g4SE>?jp;LyEIydfYzXTz_Gr3Bi z=m8;Efv3qMTWz~6tfLiof;X9OX@Yza4*x+2_gt`{&gh{2w&t_(w z;ST&+0i7ZFI<~g9HHe^5m#7MYT+D%akrvL6%?oyZ0{Q+z`{y1Eq*uDT)w;@fE?rjk zAC&&1WOT=Yed7t(<-3LM7~2`k5cK_N`e+&AErILuci!HJIz#E{))*K%XdW}2O;|2E zij_@EBeqZN@1s~xY$fJQ_-y;)xo3d&y@<)WnNd0i^fY*=4d4C8hitb0J{SmxM9+S` zNpllSt{_MyY<(iOX2hGAFQ|tg%jeWjoK1U*o6VwIZDh0#^OF0xswf%9c)>jc-WG63 z^0Kk9vEx-yv@x?Kw+#Dl&C8cV@Ck=`a&vQwQJ}E#3RHDRMkoF5GJFfHl$-AwLhc>95s1n9S~F3T?7^vROP3+-oJUIHG2d8&|d>$wdL&Loon`2 zo33H+0Qa0;{Q0_$mVGWYqlql+76I3|te)^7303ZwEi7a>Yd}hKFsmTt2Z&Ludshz? z;U`Pp4OOs@EOTNpA=gDwZ!$Oz1kf#}!|%a*yUaQPG<0xqc+mSMG0^6suEG46?IRGf z8+DcaEWny*zpr(RdF1RIw2NCtO=mWxVLFKA(Z#YFCx5nqme6Z!oca&~D8#IBvcT87 zf}!^4fUeHI)H6t`%g<9FH9ruuB;V4gi&QOCA&nl{F|#73Ge@f_kbu`GpbuaA1FJVt z1DZX6v`9Oz!<;mw;wgtzY1a?CHF`$uc^Uy`E@h#X_6V=&g+1%DQeX;M439js>Eqfc z_v=+6T`gC%tRjFwIL%)ciaLhDEkC*S3&h(`JV#lFSU6>clGXUs&!6|bmk8=U;i9Gp zlR|8n+5SRZFA}KY4dZm5AJk~tW$kDUMXm?FyLe?8pp_MgbIdI-y-IG@4E_3eQQW92 z@hd3B{}?BrT8=)_Y7u$#g~2=~rr~os%c#!|5bV}ob$d{okkRmDaDp{}VQpe-IVb%wx(l3$Jm6G$@;s)l4rfs zi)D0_$s>>R&A*Z~Yy@}%JHo@i_vOZrWuj9acrFIkqhjLs{5}I3uw18&XXd;SdpR7#cu{Tn{uJF@P~{(5AI{ZTC7$U2+Bav=RcxLjiT$>bjumdjvc z5pUAm$W{&Ey&RxxO0d9pdmFp(o#QxcJYHNu8IhRw7Y~|nYi_Mh^Au{WX^rdaqIf!uzd`IigwA?hgh7lkE>@OXZ(-dRGz-w-$N@C_BCNs&CA ze6rfZ#P)d<8@gD?m!v9waW{1~r%ECC#v!(zt^C{cmF_}t{&!fz28!|(0;Ix}?^>hO zU43XEmJ(MZ78C^4jkWizc#bcL>nI}ZQ|_C_|E|^Yzm##g>!1M0=?NuR0JH+hXVt-r4#7bM~axy=qbQ z2cVh9lI8GEbj}I>$fhPw>p0MY$D4p`NSWj$4D;wVl^C|Tth#rsqH@r1qf4xQU+W|N z?+N^|1#D0rX6wECY(VdQyqkSV&okE%i)(8~OJKE`bM!TrH@uA@_Ltv)Fz@f;NemBMTIxOED%?FOdm?Y)SiOaD}=zt>73 zNo1Rc?ndm`vS!SCl*>;mlV3gBF@vdLmsTMKb%0$a4c@c14>?33Z&!T|Qi+Fqps(ww zg}-pgmlA=U%+ePMK2Q_D+m^Azf|y8tWHp9 z_ZN~5>ZN6f+0+0XUN;RHGVxqH1POY$|MjSKT+4XQkUb?lVzDy6p{Y`ncvErt;p6v1 zSq;fX8g8U7%k?6?EYlgxx#vS*A|jd=O_#%7h?JI-KZC>M9~~e2>nNy#kgsS(3da^; z2$tj!02gE?+GsY{7b@=Y`4HL?+xMy)`+`D=q@N3?$yHnA;N00a8jbXNKy_#`bjtT3@oKu1A5e)&>`;@$?3>o|U)JY5-4k@1xj47&kW+aDa+#++aMb6VYL)XRD+NzPi?v!%tF z6)Eh&Vul=Y=^~(vKDzprp8XhZ_$uP~3d=(^fca|x9_}jf`(!=Dg9Il_)=b@doUFVm zI3qFEkXIn2Kj(m29cFX&d2{iFTEm-XF+O=#tomSy+`IRx-;h49UTMcXu8)%u1d7qv zWVYtn|Iz}kd}&ny&;BxeXln4%$ z@<(*HSZ3r-W@uZyth!6Cy;7idu>(Nv;w)HXK?=1g19w~J z?OLS9rU)3)n}@I6nAFBqB~Xw+qtuP);Q~~6WQso|!VH-@o^c50>HZ8lLkXm$nH}nb z&rNS7jx=s7mPvCqf9c2(^FD3gK#Sc^ngnk240(?*yaCSD`ej62sd}Er_$&C}TU$vp zi-%TGXE8{ihvqs%|^>VaU$?!Qh_N93(^9|}vxiM^w19_1_l-9aA8jNZtvRO@I@`!c_!<}Uz| z@x9wdeS%E_n#05NqU-cmMWH!tchY`vjc{_o&2#13X9xo~V$+JZif5pk9||cj5b@I5EN7|NIdUKPhRp$hBAVhnqb`5lPaI~s=QNKagH$oc?#(@Wx59y zJ{AOe=r&y4#uYfbFMmc$W++&Qt>(Ub43B_ILH!w#EoE1K zfdZw4Mf!OAXMuX?&^LqIpKz6t;a$1TUv z66{Llw%~3=nEjf7D7|6=iEem~n|aY^(+72#yT=NDx7n=WRkumjw3|i`K<1Q^-gLGu zy9c)rYJzHOubO+_)Co2U3kyp|qN|eY0;Pt18-gC+2+?C0OyoFs1EF7tx>TUVO#! z`aNsg9QS#S4wa6`rgQZSL+bZ{`Yl{RybW`{q;&7hC3Ko%ggi}J}f(+ z*Yz1C_OO(+++h(-uJ72(&YmLku=*vXnzzdXkUcaiipK$8`%*huZ6wH^5EmOOXpnCe zezyNkI2^Q*p*p$~X5;IUKDuoCw$13djEu~$q~2zc@E&UsJ$W30kZroO6o$S3^?S=; zm$}Y6_j!vqT$g*u+Py0Y!3rY&tlZAHWJ?$c$@;^{NcP1}oQHcnrXFmZ8-GuZ!12UL zUZMQ!hrGx>gRqkx^8T`!&R{JKdZL$kx7FCMVbo1-r!1W3Y*v8#G}Q6cxsA0+5j0Q( z8>$bOrO&Frp|KlRy^x6_%YcM3%}0@-v<)>-d!q(WA>!?aResUQSM!4PUdy-Dis%Kx zkBG_~PI-U}vP#4ko&Wr1W=fEKblLWU!mghF200MHp8_WNFTI{4>pxrm9B?#CI-_$R z-ERw}>et0P8erMkaX9(tyEUvT*s1eN(48tK*o*xjlD8!`}F5&rp;inNX zTGqO&o;zl69TQv4J!h2s^X70J~YdM$WJkI0d+f*L?a1RkvnH5-}WER_2W3KPQVPe;gSHXmWwCLEi zz?VBc;BY{fA=nzZ&f3Hkcew~Z42H2KDTXl8p7sU&V*qLkn;O$TBIqpe=)p?E+x`AW zIL}0jsHzSLunZ&OtutA<3#&e6k8Rpivxlfe*Flz++i)c}&EIWmZVtD}u@T0^rL+jS@sETgHs6UyT5Mr;?h-1!C`OAj-uxUlq(fe%GG{;6>s>lE4YMJ5;y; z@{y3b_m!bosb0_e_+FS=#Oa8Hna6fpMe1{N(ijo?4FIo8h|-G|WX=x4ao^(lL%WZg-Ly+9GO>YBJ=*^gzDPCSg6-)Rxd%)b!T7$8tFbv^3!Y7 z01o;503_5u%;BTK`uhQRO`WYY>?^AL>e-9b$Sz?w zzl4!CJjvdk(ncp+S?56QcGm&j9=O2fqO4v$)a4w-pNhwhb($b6+RU6r-pKwaX%jKN z`;tpMXOdu33z}oVX+a=owp||f1-y;=r5X9rP&I4(&0a?FO_{XpSTBN!LW+9Kf|PXk z^Pr$8kfE#+=m3Rp5MiFfzk7HEPcmRn_niOQswLJh9j>Y23MeP|umSxXT6cSww?bmb z5lsbpRw`%Kx6rQ(DLUy|PY)vomUl>aHcE{jg4_TKLG&w_sd5BnjB|)h+1r`{qzQAvvpT6RYE6YV8=Tn+tdAGEgjzjLxoL%sX zRxwgmFTH6EX`#Wvf(m6yM@w8k={jdwf1q0ZSialPx~JJ+(^cp#6vjq_0v-B=P>|Yc zC1KszuC7f{kVRpW4m8=WW9J);U+9xNMed~tqVp$YL^U$HZ+7HOV-v+-8b3}@-L{Ug z>$L101K8c2%~EUY+|L&(LmoP@<%sW};_G?!+G}3H*o3d0LSdN>WjoWUE3r!Uf$viz zJ6-kP;q(E^z+N-a8XE=N8$sR25O1P)4WrMYxU#Ixead4I5Ws~5@h@>mdCmHEw;@B~)m&W^R+^mm9H z0#XyD4vQyK8?faZG_@k^@~fz4l0mh#GGk}=%Nr#>rH_C7#5jieqxj_a4^*BNwAjkV@kW`^AuOEl(H``y05k@`iA0eR7b+)hxiVZt zUr!%KryedHA7W16DcdNz9>{9#wt4{by4IC(4fxaWVI5Pz>kZlVGC5VXLYFp$W29|Q z1O)MhHM9&<+4Z=zWhwcFB>t7~r#Vv<% z%+E`2{gkgflP6rUJ>;1I7F5p-OnG^_26Zaxgp#ULLug>?!qhj7xX~r~Sr@QL%}hLR z-^Dsqf+6+#^<@WDXi$Ea9gp93BD|8(=DE@Y6E7V0r@i5k4i^r? zcBN-%O6sG|B8fQF!K(5ymq<&NJ>R?8`Dxeg7M9)CCqoN%4xv`w?^5S+`V%Wuw;6rO zqA@)f#mK*YBm6rHg-5#dW`2G??p2#os2oc>- zz!h|5-|4_Nw-jjnVC0)d&WV;{P!)9_a?Pbt#$mDW$#(ia@SiE5ErC87?J}3jwmY&r ze`F@GD-2u#ZSG^!<3COrmlcYdoNoi>G21Zr-3M2zMTrYR_{_k066q(E&}bfIZ2dz) zNa&irCaAYXM;|iw!ORYJjHMd7y6yz){8Ay5U@vi0)7NVn8>>GAN5t7VW2b_wBA}J*nwt?jw}irNTGDHy{eiMrL{}iq;&{oorb~8zErW%`jF(D z!Ad(;`FiAnhApmv;RE@R-B|V^}O4ZT(d|G&=f&e2!UKPClZR#n_l*^FAC(-ZD}rL#N%r8~G9dWnr1Qwm;jB zEJCqW66pIy>ZnV~Zs02G%Q702@X_h1uU@SOVSBe<3r6cWTxZB{03kLfdK zWnd@JBwqdFH*Z7<^UU$6iT2<96*{%e+lXaRLlEqYM8!LUfTJ!W)59Mxqm`{);+Hcm z45I4M3gy~NS9&GKV-8%v*sqSC%Dc%{OLIZ6>4VS|?Y#5HdKj=7vQS9wenM{JVHyLELNY>t?5*J}SsygM_aDKJ zk>A=X2m~g9_Hp`t9Q#BG^EtOD826Ha0TmNoX)Re+ptRGGb=3weS%45U$-;bcWTbNk z28>FRln(&oaB&;Oefo!RNnyDL25Wc(wC`a~z7Df!$ysp2dz1I!FrceWVeTDphE8M6 z+*dkb`V7te`}ez0`>;K##gBS3GBYm=KBg5|wuEQsw#o8hQAs7_K&6rIAei2p7YkK0 zK*x?H)f2|Nmx~ky>KNgJ1kYls7}wQ>CVC%w^zIV9i6(*OTv6gMH)!*m>dgR!EGtAQ zOs(RTLKQLwHimh!8BC07!8AI6h&@K#daaYTA1C`$_Wl{}^|`PBR-y()r#(*6qkeIl zm9^KHAAUTHF1hT;0x4FEKip1~AG!wB0q?#cDkdB~A+3BPBFKF@ADOKuuiB~i=JPX( zvxH{T@+{8@`Kdy?>3f`@7^NNc@lRD!FcuW2;^0f5UA+Zm&djUn^cNQ8(V3qU+yj;c zLnWfE`p^JnjVG?2SU(g?h%h!D3(6d zgo~ubg0lI`#&e4=7F+HP2u@B0NJVwN^O5I1=lwi2^{@?wA#7YWG@g}fQ1$Oij&7y+ zg?9n)`i_*Qcsef+I95*rIphx9aOR3^Ueg(LN3R?9>`vmi`)leU`>J!wIhAA9yq zkBV2vwh*YIz58Y5~ok0M}yA5TyoOSQUU+u4Q~W>Zn!rnsMOpF6x<^zfBj1 z+o3@5x0j??C>#;Dx8LoytYC%!;N(P6x~G`Qa&q{YgrxNJZy7LTm>pT^eI|&WmBg~k zycfF1%ck^>Fiz^rhGk`mwp0PzrE*$7=Y4v*3PPD7L?uT+S(N+03W?{v*?3Nw*N0tT z*4rqvHXy!aQmaAdW(*NdFR>H&4I=#Ru;qB60Ik@UBjd`MKHs0!z1>+ee%)Js z#YdxAe6mxw>z{uv{iFJ?vJL@;=F-?IQ0>KVS2*AuIIN4Org$2)HRlqZ?;8jMQ^niF zfOE6+f7Cp?z*B>LLi;3D1$zOY1G5@%NctLTAxHxeu)h-PhBQa)ubOQ&Nc*S1c4v)G zn6v?o8zKMF6AB!CM|=M(6!nP|05wWhYiLvIB|u?eiC1ErYpziMY!ng%kHrp#bnd>NcMJPscl<#o&uzEUx$58haj1i zylH`)RhgAzpOiuAs%n1gvP6XQdc~?$pGMU zr2=Lfq;FQwlUtclK6{|Iwr5ejcNdH| zAL&<9F{_aGhxDgq`+&Yj+P$hWS<-O8HTY8G>(}b4AmB2+!m8SDXeUuI^M*&ZS0Mb} zr%pYiCG^$M@bLHjl_0k&E$QEqk3=%qH`xwlrK`uE)sua8I{v)lWfNZdOYbF0)HAB^ zYKaOb4)y~w`T8t)GJ7{(CHA{B1m}w^pwf1Y*xxa3V}|f#u2dMPe-HUBLt^{5JC=FE z3oHP8hR4Z?8rqmf=(-FE?0~l<@#lUD;%YE9!2B}T+U)=1cOB~Yr1c7JkGE9MQ&_eU zJ7{?i=o?)5*m~JDkOpKU5Oj4w4Z)5vUV<77cT08cg`Dm}|G~4saz1QN(kgtI^z5X_ z)Dy^RYA4@z@H?q-xCy74%d_WJF2d|KYM8Sjx4|BLMB}h*hw-nued6_XDDPCjhUyX+ z#6m&^Ic9Z%4c(aH@7>v2!*uhZn8n4(U^LA>{UWVC88K)8iv1c)08PBSOJ!8hcC;=_ zp7GgtHVjxZ$(BgQU9eSR43^mSw-ft?e(VD%bS{(s-qRa}EEIcmw!hfF^mvT0j%f-A zgoAvXoSbkOHnBX6#3KNTJ{?``P{aO=yo4zuNjQ&Tl0F9jg#l$eCf9Pgfq);TJ*K@m zY$B|k=7G5PL%3fq{}JjUa%HiUbyJ3BlD+dn_A?CUM3RzHkjq2tO_kjON###~-48!w zOmOZI(aVCMWn!5d(a_L3ul$i2!<47L(`G3vMym)NSd}FFT`a%{~{;|;|I>vx$ETY{MDN2@NFYH`WNdJSmJ|z z+1V1|ijgE|p6ow|2DK+OtjQeb7%~%UG2+k2?y-&*O<>jOUgY+{UTA2&ke$A*!1S9S zla-*!MS3xxlglls7=Ak$<|g*hc>AVI7D{)TaE7Mt;wVS9GGYi;l@(Y&ec%I#=+kI( z^pe;(9d^Pk_W8N-QB8+$D96cHzA;-NRS|UgufJ7W7{C6gwxDAeQ@^N1DmKBe9iv=N zS~VRf@lcvcE)$$N;HH(AZDnt5|L=gMtvxoJbQm2gHAtw@V zV?X!MD4t(HT2Yqz2g)KLlUo(6HS7U_y&Yin}WON%t)2CLg6iiiti-X$&{ke z5%!{=2n?NK3jy2|a54u-oDpEd37&?OP{zmU73RFzO6)5AZRmmAQnc*?{Ut$vRcgf& zY`h|o&jVsm_&OkB04IS+w!rObbop1Wz$y~2cA>$1!I(+0(OR7yq;pa`o&a*Nw}Q{g zt8T`=hL4e-uoriXVLl#hrbhr#5*hN&9+S!v67K;X5l}kA@bC5QDT-LRF}k0$<*e57 zvxiP<+*Wkd%d%a|J~jI&_#)%7vgCU%19^cqeC1b&-LI7yp3atPPj~heT@O~uYkDe( z{-Ido7z}BQ@MW#&5J3X_@syDg$4 z7RSFXoG5*uiX!y4p99%&Y|%q8Zf@?t(4QCxaJk1IBNUF;fLZ~I0EoUmuyP#4T@6MH zTJwUA<@Te{J;%y|dp2-1DaBUY86Eer$+ClH<*k}P5ZxxL2{=Q4#37>ExOiHW5l?k0?@Grk_Sk5phcaqjsXRaZWf5$M z`n;cQJTq=R&3l0q5Ve+!z47%WM?7Z6>KOg|5n<;c&$2-9rtU}Ag{L8_x zK}*ntZvHvb43}~8jZdj993_p+ieS1S)w^mp`FIvtb>4*_w_h(0&Zm@n>?CIT%e&8> z+Ok59`10jn)Hf#=kpBe_LlmO7TtI9FhK%~pazQhYdcdj|d@b6bY;0FXaBljI?EI#4 z7-c4Yrtw4ygyo)`jhxQvY@MC4tzk9|K4#i*@`l9Z&NwaY`1*|7pN6DWX^|(-0v>Dm zU8s|mTYl+8t+Kr>_BP6jXi~*=^rg|ThH#`igYbJ&(O-F@q{~D+j(EWHjYziVW zD0(2vx+>MFOgj7r;-+!ogypygK5PUv&3ppRId3?-JExV@B8zQ&9+Lc^1<%ns!pkFD zY$XJAN*tvs5tX2zQ`*VNnR}Pyor^k(0-X0Zxz>2stV=USP!4}u_lB%dSZ186ipsOp z9L0|&bY2|e?#KHnwDFp215K@NO_43;-wUrULy1QZoUHnJYO?AiXlog%gsav*W1C*UF?`iA zTe`Mz1q#TYArFy#A7MY%x^nfeqE$?Qpj!TE3S0+iRw0moV*%iFJ#JqP>w1V=oeAb5 z_u}+#a_D`KqEu;ArJY3rnq@D;GWCIFVhA1-T++Kd27SX4e~41u9!%kDM5D#(a~Tel z@v952$02gXZR73#1}h!jU=viMnOeV@Dpq7zlPUZ|V!sGj${l`vDN4X~>6ql=05@>HMvC)MxrVB>_0{ z?4S?`H;5GF?N#w5AS81_L^OuR$BUkR2>T+F%U#TR3^cjvlkaVYebcr%lIO#jJQ^;%f~@={RJd~IRcnXmy1uD!bS01SIjv**u@jgaBD?BSKw ztX>cgzDupz3L1zi-{g7gl{Lo{V+^C-PD=th5`EqiEwobaLmtX5SpLL>G`Lg=kvqiB7u?XP2d9dAiJv%m(rbFm3KA}{*(IdI#c}d> z%@ZIw+vvB2^t(i=ClUNvVm7n+oo{;yJEB5BAacpeb277Mpoo z=A@op?j5sTiFcaMUN7d!quN%Ew+Au-_Q%)B|H!z(57H%wF_?tsfxOlyPrzkxsf%=`Hun z%UNuPO|p58wQ~+90)SRb%CM3DRJW^x@P|B7q?n<3^C$h$C|G3K^tqv|N9AMtYFYc0 zCdI!Ay22MHZcp}3Ia05%R4q>*8x+*YvBU44#k;Y5IE#O}uVX1Pj>bRZ$0`sqTAY{N zuJ*JB14>2xuCNkT+n*zcxFszL<1KexD360gce-j1J=?=GNjkF0npPD=4h6*kncc3L znkhVz78P{mO{*zPok+0{&`iYKLCLxo1Lc{a-X-%Z+rCZp*i5MDTMBUW30zo~15cH7 zQ1eFUr=wTnsROd%SA!BO&F6oem@R)q=KUef(@c&U`6Zt3LmUayR6N4QV=_5k6_M_B z=n9!Xs3FI=oG-w-sx`)zYI2XdsQjDtq9iv5Y5Uk?hnC1N?+O_mv}315DLqiWl1=-A z&nqs*sT8%ehu>};@g^lMjY>Oxxn%`7;~M&y5hkFv&C-)6AASE}RZv-K%j&OiADLUB z=veVn5&6W}jtz&s4okN~<+MJFchm!-B9;poH_?0c~^p>CZs{&bLbe7Xb8~ zK<6;LcgJUcrBW_JQ&G%$tht+S|HSG-UsJXWVOuf5WT%27I zW-}ko9%zeHTtK`Y^WJ6!%F>n+-d}dbUQyUa(M-4yL8#T%LGjpI1CUDK`)k!Ln+iag zShoMQW99aLA@Z|LE9i>&e{~OUOV$*Q5`=nHMr{s8SQmv&`$MH``5uc#{I&qV9-4m4 z#``uIH~;~h{-S~ae1QM6JL;L!Xk#OLv8E?^>BZD+-JzmvPMmDnHO-<1?V%9I5h1)= z=3eBCnl&H-9=yzr%Qg7;*xQnNkn%X|=_OW5L`Zuqn?*31iWG>v2EX{LZSg#{m2R52 z=yTt)EbhNZ?SOq%UZ96iF)QJ7pnd$m&x!*gjM;rWA*lh z7XBPK^zh@u5}j^LP&n`7Sx9z;*PY3C9633@4@Bz;36+n)V1T?uJLbG;*6hv;?xoil zD>eyWES5*dw}IdwOBlV_Xb_|5^Q@9n19bG)y1Q0tG7P9`-+)G#1=Rna+WYJ7KG3=X zsX73mw4QkV+0}M9P$>HhAyYKxYL4~I{nvmz1fyu9@Nk{{u>Idp;K{e61kbFh@CiNw z?xI#jpz8oYVbK^f1*l6-p3T}=OS>^G^+JE(8-SqRDJAM((_SEXs62x}b08bjUaqeR zHBVmaq)00&4lx>r0QuvDc~hig4@4L#>K1xbUIkc{kCdix+{R zvzcC?!c**D!0=q$T6@#k-zpr$vHdP)|iXtvFLzy0l()^PIFGX<|#lR6d_$jq3|lb zUuv*~w%%SoQNJ+Os)&Kz{4WoR!oK~n_kI&l^KGSbTf%?UouSTybrI3kLfTn~Sy+Gh z4-4Q3U>RQBJE@FtC;i4^l(=SHr}lEJdh8&O!(QOFg|BQ~1T`964{B|Y zVu)3-Ca1VbR`f-Nhqx8c2y0JIX&V8!WYEG46$EP{yAZUYJe1el&&YBm3uKotbf7+o1SkbiQ zTKAlCa0D_sRM|hEcMI)wJz<4tUMaUCYu9xvRUOgU?t&n3;@sVwdQVN1xpRN6niQ*7 zA_sU9!9nbe#WV7_8rIn;K!(IRv_Q%3iozuQ-J#j>lsA`-1FsYGzIXU8(AtQD6jB{k zrB8hHhTErEz=F57Cdvu-mSZC%OUL6+j#$Pm*G zI{IyxmH!d4{KE&)>jN-?j||x1O+o_bT*~63x_xV`mWPccSa0F(3|)v&MrG#>*27?N z4=cDHiiM)Jy>gvCjCcj?(_|~Lm*OUF%eGi7Z zw|#pum=Gh@Fng0aGrmwY9WN(29#3$VF=<4))wf)skMYd-uaIi71%77Nj@2tUTtb2t zWBD!iGYVDS)w;2JeZ0J4MUBqtFH~=Jt#NMC4308E=sM@#QbuqL>9e=~sGzX76wN=3 zrp&uoeScepz2!XC8phl$Agph4?$YdGxzB|7odx8wyr6iGUpt8Hi)32s%s`P^S-fX4 zEUw+p7>N3^pP4fbNQ}9Fo(&K%uddGYDJSx8G6V~tM7K0rbaM{pbKPL2Bk5(wF&D0# z*0G(ihDmawP(?S0Zg?i5^EKt{dY8xWao|>NW}LLypjNFH&%qIv!B}qB2OMjY?`s3~ zR-|@`9)wni;AQaDeUE$J%PTW}T|RN*glf5)<@NGn%j@)&IN- zgZf2P+x*vi;h`nVM1)bR992|9fTLs9wf#h_Tld^gYA4X643irF1+=qkT#C3h!>(Sv z+L3dGtD&`Z$3@-Lk%!a0)qctQZ~~;cEgflXU;RoV(It;U_{WVuSn0EAr>O@o&GcEf zrrX;BY1=az@H{~#3J4~SlkwT5CllF%-tZjbiYGAV0tJvX)fG7ZgR`C;yE;Bzfukn@ zc&zp+(sq=VsDPWV`?iu`SZZBlXF0Mo2-0PuC-hcsyJ%` zd21^&8xc+VCeo2~)ma18X4$fYm?|54lJ;{Hpf>%IeGhMb1!2)a2}nOovd^`rS-9ib z!`a^Ik6;#17kUpg+UK&3A}fb^N^K|Rs*hCGl?-0^mu2uhTc-WWsQ#q0s#1%z%C`)& zy4FD;O()tSJ^$#_V(1WY?h2X8MnN-e!wOm_g?Ei1PZU|3FDGcTjxSA&dj9kI>fr#4 z2~xYOif!B+kYS^8ESp*r%4v}<^H(b$G*1N3`?@v(+;#_>3}A!X7d$>^ywyl_Zxd+e z)yU|(9-1K=v9tTIXW&t)Pt>a>t<)5*X+x21a7@Fy0c4|#0@p?e^#sC``kwQzZHd3* z&UwhK!t7Q4l3Pgw0hiNeCpl;)ea(O|l`kl?Vp}dC zsYOSL8R3L77flV#vNrf)aiPtQ0kiYA1HbX&g;lZqT$?`K+Qw0}<8pF$oO86t zXY=80{2K6!JfN9J_?m#RrXd*%N9q%6Y%Bj=k>qYY8-d>%f&&3E!< z?CAqS8uLTrGbJWrV`_VjQHor=j|$rtbzEM)rD=B7XT~_wCxb^9EIvG7DE#RRuJ!xNxIi z^dicnr3aNFeV7+af$ux+O$Wg0ihJJn9pF46mnwi|)_B?a*D5v80ZIMUUA2FqL+eI_ z3m6G^$N4)zwCZ;raqk*1IBr>oomb(6=K)|9dz`96?oQiEQKHgzl~NO_wVQQJojLM# z(JWOuKfnQauKB}p_U80wY{ZcurKU`A%}9W!23 zoe8mMG2}7+#b$;?<9G%a#=XYMze*CW!#?&E_$>hb%{3zBu*9-T>F8Juu=MvxUZhds zj#Ld1AY|=5pEBTysf=|?7G$Qv5D|(|i=B(I$)>aV1-SZSL32D_?Y~YW@h`qL@$~d0 z)(IdRUkD`*D-4y}qj2y(2?>dcIy`d}hpXqFxe&!4;B}x$5PAD{h?IhcVe&m^39nD8 zYbNJR<#LjVgvDYl!WKUaE)>exlG9Px>Fa9@d}n`(Rx{9r+DHmb<0>nvF-M zF(r!ad*PIHS1z&wMA}TNo9Vu8{Y%CVm<&2%yo&ZqJ6)e}3N7Qh_t3h7j74M|IU8)0 ztinclxB}NIcM}_Atj?8vx$E=YWs@w%X_+}yCVJT>BkpI8C8sun=GoBGI&(Jqtn+|_ z0Hvx-0^060%GxdkFCv zn8y^DDv%$6m0$3{PtHS>6RWLLO9w3v%y0#sBeV>9cH~er&ecP%5(gNQV(+&Kf@y$+| zk(pa{d6suxV34G=w5&~Bk|*F37i_1y(*4zA=PK;O$aFt{))d#cJ%|}FE5Y1Ma@Ck& zuWnkkAR13?c+F1FAuH6kwuWRgX~(W6va-ZGTn0UHk&8n0$n*8cFZ)~{48@Dzct}Ht zojMf^PT#m>(Z*=(A4+uLlWoWhfnRhs0YM22 zp672c(_4Kmd7hGCRGOb?5E_GSw* zI|!Wko_}YINoSwg_80SL)Z~JL5d>IS&p_=~9iIyxZG8kNL)d3m%^EjGJr!~xZxa3f z%Mt7bqs~+PeNFiTNLy+EyVR4lt6&ueI=d?JF8%!L?rA_kP@d6;#oWJs+hHPjx~&1w zJa?*5aUOy2#frQ|1D`F+vamK`g(aVbg%vj9N1=(pE9Cb zW?^KqHb`s;ZIUi59XnC9ZG?DfA@slT6W)9>EGT+D=2?2Ay-{lPc z0Z^#^;7P6On&;3r5kb>d46U3+$&V%l6J^1wPp4|cE?2nVCz!W(V;#GwNl8ZmH);E$ zGYTf4U3PIs_U+;i@*BR#G>y3U(}bJwPWL_pp?eG4SPM#ABnml>nT0#F`LH*pp%AnE z2N!(`0asL!Y7nTfbg1@Y*A>k@{O2d!LH86a3WN1%$_1Y1|F;2W0p3b_H)e`E-2u74 zX-m7AZ9=Kk$uelq73yC1ZFrtI^%=`;TBGDD%Y z{8sU!L43c_%FrIbe(x3N$vI2A^S#)|62$x=DOj;^>+Xz*oEEZ1+8N7+*}-z3xW`pN zdcn-u5chfxeItICtm-fV@~p8+5cfC+oV60YV_+kij6WeS5p-dFNj74!%A;5@5RP@6IJoH zF|hgFMA@Zgl0O-HZnqPw;S-Z!rAT;>`{q}mD*R)*r1Ql+e%GAyzw6iP>uxgp4Ro;?JLFz?fvFbn9{6Uw^*`%w3p zvmFR=31j#Ix2@9e>wOv=sPbUl4&FFRms5k5BtJT2GOI)2>y-KLI&9eqk`n>Ojlgo?PrHA1d2iG1do@;Pkbc5vz!_ z?>(x}x{K*|0?z_@FgR(#G4P^{-RtAJAKvb{QU#pP@g#pW;DpKx=R|on@qjTeF>R0D z5VP{N0!vRL+4A1TLfv=;>eV!svr-$_o`E))2I;BKS*z2~3^CUbZ1>M?DF+HMU#mCK zQ?TYyjUVgy4=lzdI|E+cYqtbx@6#@d#MXTsXe4Yf4-Y)pXs4!9)HySOPPQ~ue{$5L z-ZEWh7?y?O38Cwwzm#>?EpT##c}r{&aVF_&zHPsoRd+^81p}{xogE^duFic-vp`#T zFZ#s~$G8tqbyRJ6Q2XtTU(1jg2*|)GhABREIk7gcAJa51QeIb3dgNmncm^=Azji3X zW=V@Pw{&!lm%9-n&zbRu$vKZVWN=_rQ*K0fmtTLc%#hBEv|iG?QzcCAQ1eo2Tk!Jm zrvt-58$0Onc2)@&X-cG%)wXDQ3WV>SQZSTw=&1xdK~A6EF&~6nQnl(Oy3}4m0wYda z?DXRHqB`^z2xa25YGH3SPsJf9x+_KhaT$ivkOC?Tx5~^sK=`V>$ z4-?wz7Lv>5eXN9yFUN|#=Pkb=@h5AilyM_oEA1v9lz8C^Ei_IjC}=oiLs>|@aiH;y z`1w`Xjo1qG8HQWc`xL8OoBpa-MI+IWAOeGeWr7ndD|ZHDzOCGunfm^H zJqk%5-EmudVW`&q^}{NCvoiqjlI6|3+#+UJ5;W!zSRO^R8CZTGN9xiB0X80J$!3nq zYt9)fY^}lPzJGrlDDvw~BC-uWCgE_?SrB7O+QkTbt$C{)OOh5cae`A&Q;% zNqzFy7I_Y72tK*zvd#kA>rey?wSE-p>&7Now_1^q6KKdkE4((m|7?N=Ohuw_^~0Zx z!DfXQOW%->luxKfB` z`(J_&gJA9kjgfjA`bg^}8iU*5r#Lb{$N!mUFxk6-QQ+xt_^qfs3ci|9x(Q?h=p28$ zGUaExOB)E^UL@KJ=wp-kTc^MQ!(jkEkc`h+R~y^~GQAQ9$7moUybJ;_^2qRCnYZ6t za6x~f!+#t{aH$$n@ICofa^twCOTFM;q6Py+R$W0n&?>>kkbo{Ty)5vMqB>}S$dDL3 zucQRK;DSF%B@@IuNk+eQhyU5!1J2EH-=8?Qtl z>EO#8(d+$fzL$Q0o32ewT5U4)Z33G^zF-)T^I({K7Rs(&yGC0>$n{aMmN$&|pH@Eu z5SuSx4v_;5+_OBWTMbhc8r=jZR{^U@bg=) zp8x&fw~)h=bO)m56PO}VWd;_B6_wpnb_X)!lQn8Fs63tVs60eL+8}BGWDZyxCbB#onxTx+JY>W_q1sEm2KPdk4b9l<=#Dp zYKs*Eja7~(Su%f@TdN^J(b&j4GSIgLjBkI|J$0x%>G!Bq>wp_bB}#%rBi6Uj+ACjh z?h=CUVC=^F%>uFm*s>y1i`9>e?fi1O9(#%|YISG)urt?qM|*)2Qv_@0sp7QL?URlm zqUk13oY|u{v15MWPvv)$J6Hkk*AniW*nAVx(|B?^pJnY<{_*nwYdR=OYUKa86ENvd zz)vd~39oEmc?Qtwq9+=wkFVaJ=&8M6@NQ`FS;6e1yRIv?KF)Mo3I{2w@RS>3c=~Go zy6${6gqfeLkpv}_e<6jv`x0l?SIAxmNXv_h3zhO8)5i%-U;F2?V(WLj$p>6&B|Ba#v*f*Q2CGZ_Rz|sf46VZE*>nTlK3?SkIBVd~xEq5>8Pv7cd*zz| zHe!FNSM!FJgWwQ&b40B5FTvflIRS_LfjJD=|LfxVg!!g`zZhols;{1tSbcf($KAwC zbN;Z7yEm^Bjud4kK6s}q?|d3Pn|O@Jtt~YEF<+~Z;GeYt%!eqDdB<+PdJnX;?u`U! zMPBs8+C~RI>I)=Hm3V$j(629=RijgF4Q?`9Z{OJ3$wc7$0Hi|R;=j2%9G?sXdz2AZ zt`BTG${DonAEd!msbmjH!4GN*@;6Ai= z4uPNl3I@lp;*$Dm$@};3{!ZWboZR@`b(1SN3`|p-%*J%)LC3loM!afRy`?X=1^Ja3 z=g$PZ+gQ?jpF=+uO>}Yw-PB3o<*EBlB5Sks&!##ETl0Q#M{s?(*CFG3@?i3dMYs>F zTbcpLz6_EqNvpH9N~^U!|JQ9^g7hsf?F-y@sX7B1yt~|EYs4^+9A5>O)63fFytY*~ zZer{IUKpB|8E7ZxJWyW^BLr_k>t$=p*^N~a2<@)t68YP=8bM_s4s(l;jW=&Yohm1; z+x>NG>rb^;8r;V1WSq*z$LGPd1lY~LtqyA*q~0yB_eO4GgG57lhNvf~Py1a5({=5% z3UcG#WuXCdCf$+$j{*E2IAHbaXTeX||8r$kWzTmCT&x_i>z|G3-RlPiaC_bau)L{I zCKG|G+3-A%AO$pwZDwT~cfR(@cNZA0^0)P(>#gt(kS?;2ZdlQ(t@#&(*hneqQm*xz z^z8&cE?@aMi+$5LWU_9G-Py7J=A~)yX5CQqzQ2~y`kFfm3D(4LRc_pvI>^ZEoi-g> zg|Djf!CZ+M9zMC@vhFE^A?Fm`sSRe{7`!YKmD<401>XY02a9^DvN5C^uQovAwJ{0- z!yPp6T4eRk2B4|ubG7&@vTTRqNxo~dK>Ye6#4&@LsjT1mUI)nFk9UPetPaZm{&N$2 zkq~|(f6v;lSDye6VyyKra<$2OFR+`8=MA4W;*tLk-OleEc1GNxKl=(ULxk0ulUU2H z)Zi++yQ5J4RdCn(d-9MHp=8i?Gy(eOA98vbq)A^Nf+gSfFn?v?4NxvN+eR z+FNh%X480G_u8si-xFYP+o8eo(VqRSqz}Eb_X?P*b6-Y#RzF@0&G8iRoae6Xuf1@} zlbzI~E$ZL|B#{|;w{CD#rb}FsqZ3{vDK$glAla$&t)bLR&EbyDPTEZ_PR?%E~k^k#Y>r2oEimg=mqW?NAJQ_Su?UN)P zXyN)!K@XgR6FuJu{(3cu1D9(^z8L7SQI>MuGNU!TsPV zLmsyO6*0_!?+;dOF;H6H59{`GIvOB*s$%Oz^Sx-Pul8z8bJoKd(?9NHe^x& z$P{CIq3MMphhhUu4j6#UHIE(P}Ec-b>YqV0aYp6 zyee|n+Wzvp4j$}U(pA`h42quz7?hv@iH)BA?f(LHB(m#N>AuxLsRiGa&w48=Gz%Uo znG1*hxnhG`GA*HW13^Im#jVaQCuEfTj-CarrQ5;jb4UYqmzN=z;(D^*YsB^3E~OIU zWSc5HVc=YCJDu4&jrAG%pV)3~gZ^Gz(Lg#5tL_7ir&(Km&!LklzC18m{oF7#>Su(d znqJ3LkJ81%{I*bSW|`wCW`v;~U#gY+{n}3-liynvoQzFrNu)xyImc)@XwIh=RA;bU+_Dv(4ym`S-^)OIY~)v3-60zXOTL( zrQCmJbQw%PxqEn{H)?%?eSJBg>%H6Ayb%%zLIRDZ+U={hwb~pEq_LhuQuEVaLL?gm9ie z_RklTPY?pThyF5$>*M&p;os_@e+B`XK+Zw>>i-Nt?!cC#398NMylS7uHE$OnXwB(i&J7g_73n<$*f>m_*91*!{+iZ0ryfx_KN zoq$jsKm7HF@5{M~AGr0^)e^r3Vz*!@S)&#%dNmOCNz6)7RX9jE2&2647Qs z;YYD8e9{!)BcRWAvBL~2TSfQo?}jH&fv(Hr^72A?@PR;ZHs=lc3MpmiwreHa8Rk}u z^B60rUC;-GU07rhufB*1K>cYDaa()HUCS|tVe5xnUK4rEO6xFPTW5(wb z+d{mujmiF5bJM+`jtQ%$zE4Y2b#lr#RZ4CP=@TafDVgAV6tvt3y~lWD9)-^IvlF%@ z^JGljwCPblEcHPgD#doSC17RkBV7~aSP`>tW|bjFe<>KH04B-}N))4R$k`{B3`rcf zc%@~^xKm&Obza<;VUb;1`|e=1xmyn2k^T>RVh)y;Ud|rpjhg)T?a}*inra#mU4=R= zMnEj)I2=}dkdwozwYSud#Hk;&(&xz~kOmzNMGvGL`Kx|YCd;fJ(?0EX+Z7oOL zX9vL1SM#r%SMC>&4SWa?2v+nt(^E*58F0q>69G@;)lPP-XPpDVf3ucW2E{D|RA;Q( z^Rr=bL*DcY6TBb(aVi+gc5Qtar=`FwpKq0C98+jjFg)-;d@`HSpL}_q{o?X-(Pax$ z)dFnpN2z7gnVoGxuj)f-NID5N>FI~ixB%L|4#2!y?HT5B(Gnzc&!1maht$elXO6Zh zkzdc+vapwGaEh5E!Ds!bgb+lOafV!p4|UI^n;yFcJnOJ^*M}qSuRj^L%8iSrYn3|H zn|58(F8>yCO}ATYBX-KtzxH1G-y+ zd$J8D5qjNE@se|Cmh8JrDKZ3q)Aszh zY3Wwo3heA1RQj+<8-bN9H%mrmm3W9`2K3&-b_5mKVxRQ2sd9wAS5a9+a|{;WQ@?1p z*-x1P6;4;!c#iU;-Lmfj3&+~x>gicZY=0e-$Yc|s)GkQLCa+trW&LU^Wrj{0R?0}w zXH5%$J#~^n&%J_FnkXZsdf_w4gpl~Vu%1kWj@(k4^F^d)BOmk zP}sIi7w8qj#l~T()CFB%)ztA>R}?su1Hv$KP+^A zFdIBrzI1+8;BvvxFD-3YOJs@p7HSOrQPUfnvy-=|F@oq#ye;QAzVG_RtTcZmv^W0! zj^!zhf1ldcDUp+~=?<5t31}tb9{QaBMcQ|Ite`_f%P&5h(oCTRF@OB$wx3%|)W((p zpzB0M&IS(*RD_-+fYtTfEm+B5V#xmXkv&7qdu6ZrC36Zf_z3J&kDkJ*`^(SEZ%`>! zP+%}*??$%OCMc1;n?{V?v0OiR!$x>=&??W^Dy4q~oY-AKynCnIE#YT8KIeE0&;y*7{iw zWY*+o+j0%;=f^Rwq`{xPZRN&=D5kMEAht5ejm_PFRT3ozJJJ*>Cf*s|wWYGmose1@ zc^3Wb$r|8rDh*m_fK8=<#$ptIh;)8LD>?Og*?9FB_FpBLR}P^Z0_ij@7~Zgz`OI*V zxO>TY9^r<^iXZBZBHf)dGZ-s9gg~U*$7p1`93hG2JTqe=f>CWlo3&vg^e$nl(IUcR zA5OenNPok9MFZ2Qv^4SVanemHi*t`*MVg0$^0boS{2@R3^ekOHScxAc@ooFT@4JYs zOFLX?0H=P?S5Am>+a>fRF(Kg?z{PLmw!;s!2_g$pHE; z4QF7Up82!9m)~%l1_IR;;wiP6i8(B#@SrJ#NU6t^;ry~>v2 zl6+Xt?Ia>4My^=>$n&$u3R- zHn)Srxkg7-%l8=HKu0LX?=2_rz8HICnH^+{4t{X==UJYD3**nhi z_@4f2jpVSU_8OWn-ZY*HfvqJAmz*j}?z}dMF}r`5l`w4}Vf#r#cfjN|hiLB`T2#_m z@Hm^$-#$$G?qlWy9E+H;A#+N2ZIpw4Ixl$q`s*vMwt0^ixyokU%4);iPNTmoOF}*Rb zhByKby$-bBEpumbfZIJ1vpCu49En@c9KcQ}jL})L&C#0~F1!pys(CQoFCLi{&Sv%` z^ffLKjNB@h=2$RO+#ZDuPSVAHKYeNNy(eIPu5cyb5-2~~HR0XkdsRKHWN5l4u2ILO08$RM!Oj67XxLk9&rj5K%f37PyDMfW)o+zC?0%fen< zyX=4L2Iqk59@nG-!qnHM6z{K%^t<5Xkd@0@V$3Btc6_$FvhA>;wK&hH1^B4etgTs+ zZRRIT-4>O7sOxb5FdKnU^!dZ#D+}({vV&Fws3FD_?T7PTvsdrsJ^r-6EQtvY@421q zbkU|ZR;Z|aW7=Gaq{H6qU+-i~k7W@*&T9Kzk& z-MHXrJrIUsS;)UtumQDpsQ&KE__Mi|IG+t^k%ga+do2(Y(NYfdmz)^TYntNK@wlBb z=%Agx{bcQGitNz|Y|>2GO@X=&L(?}TWOY$#VcjV;KZRtY5#_4wr^~A2sw=aIguZ;! z`*J~BJ9PR5#N#W>X}6S4kA0uk$XevWO=Kfs9aY|gDs$`ug{s)xLi?({&8fW{vx7+( z3D;jCso3!~u4Wjm_*QK6edLU~D0!3MM*6XuFmVm!Hu{`M`J)G#*B9r2?MxEmL5E2$sZ+&pT_k( znNuGv@kaSsvw;q>058l%Z~2bsoY3ZB&E`BCvkNb$RU^VKv{#EMWSU_|8Uv84z+qEg zFujJ6?@(fx-qJp~C%Soc?1Fc)!mP@W<_}2X<1g|#wLa=%1LbS z-V1r3;;bW^+zwiZWlYYMS8R0rBHVApn|b6V<%WSnTM@G?<<<*`eo4{a6p7ijgLMo& z7+JU2b!d>6@5Cf;`#>hT1Qv)^`@c3`lKO!@SjMsD%S}z1=cm)KPMGVa`Te)6SPw3* zxmO`{;kueOzP0?(<0fU7rBDLuBYLX;|#8(^0y1t%tyk{pFQ%w|UcRIN?sc)qC-(gYb(+9w-mv#=v64cXhhI zDJSTIQZ7J z{$*9r(xIGBqm4DFkbR|WHt~J)L1qP9$XWk~g_QexV8+$drL$Bi*ZG2NW$uTVRd3Ol zqA<8F%0UVHb8hF39rlY7!U}C^VIIWAKTJowM#^6X-Mj5r<jNvO1_5pm-{4YZ@l z&3RiQYVGnjKW~UA6fJ;t#iZ}<52l!iZ%)_qU<_&JPLnd;Gx8jr$L)Wd`A+yr|5x6V zt4$hpCoVF?siKnzYmQ@E;|fwt8ch+;1uWehgXk-c1pWonw{Y)6Rn}KR$1i~o{kvw7{`g>M8@-Mni@dO;VWmgeQF@%0*({1I-w z6}ym_7@?^864os{cNn$6eF8%FVsCya73hWB?{AWFa0r`??3>WaUv)7$=C>l%&F(AD zjvqA~8qp=>+`4uy#`mq$?mz*R>Lc;Tmss4|M3>s#+g&u}& z603bcQ>o_d1#>7)we0mc#3Si6ENz;d#ZBgVXoEhD zxgPVPukG?9Ghc4`LI^v3+{EGh)7Wls*!az2ukjN>7j!cO);yZVM(nY`C2D=|txOXd zj_qpF^Y&E_bBY%Y2n*xqy>X}Hd#qmm=6Hz0T?t;^n}me8IJ6HdgLHDmW&fm+(8@&?UO8% zB6oCFyv@(A)PaS~x6}NV4>mGVznS)wHYnC^`Mb^Qzd+TaT}j3BP~~9KQZ3W*@iC3e zwj@tPXA`}XoUChkHq4f&i#U-zo1~xM_ti(jM5QeTZaphSqh%j(5f?av?&-Qot3RCg zz=ZG{8ymmr_sSoXYCoQK^~r)}O_saaZ$}SXK^+hoGxn3`P1!A8-rn@_;rx-{gfHJ5 zgp3=mB{d%}IEBF|N4t$c|7jY6^8y6}vO722mDQyy*ppQ|?A9 zMR`?*PCgxZbmXCDT%j^9)+8~YKCW@j3fy?VP-eeMrb#t!Nk)TJYTa&`ISvpjl^xZmpKX z0%t@WvPb<##24$yUfcDvJ5?o0EzaAiZCJ5-cY{ls81YYq#1+IA34*Qk;hVs5ih-;S z`=Nkyo+isKP2{MSK{>NyZ^gDA9bn=1@bUV_HqN7}2@S`t@t5hSsU3o-x`qi}vojD_ zHSRFwQ_8^-x5pY+9r8UgPPj8(tYIabJSGdBM08SJBV6u}RU$I5>R{O7M?ulqo|iu~ zFsevI{H$cnOJAEim<#Bi?_*Bh|GopW`1_R6&}-awZ`447<$-QLi9pWLy%A>b@zxD? zsZao*Xk?#v7|T-n1HAQz57_x6=CazGT!O=~H=AlTdcUwF)(5v{-+!t3ecIx3-c_Ha z8r0H@afiu<2?)HJe!aN?`%5!mjL=`?`kPDfbxCmesF*vp?&s%ox2+}r{ub@=3mE&8IeGK(wWtC8xT zA@FtFQE&DVl6up!pxK}jeL&RtAmIc-T;a@5`JC}Y z2gt*aS-gyyKjOsKAJxwhe-pxTUxbE!=!XjcYS2v1z?9d?Ax;J zRS8`q4-b!gl-F>i{p62im4eUX4&F!>&YYWof8T!6wI*xUvH>HD9TKDjYfugo1Ci42 z*U=j&;apFUuz~ltCWvp$J%HF**IRB33T_(Xzmb0y@oWmHM@X9|Cp+e!9=el?EUk%G zhs`kKp%POwF9#B^gRN$L7d-d&L(Yb7Z*0BAq>u=b7nHvlPPueewpk4pSMh~oux&JH zIU@vt;N=j5Xgm_b{ww?o5=)c!xevAYN}GA=w}}8jI^nHx-NEk|9i4tF8HM(KO`8SI z%i+CsuQ@I(bbHrLs4_k^!luNrO4uq|@@u$JvUhigU>wukiAVr^5H=Z`mF1Pl@6@=9)hu%iz9wq5X}A~lzCZmBkKD& zQVqm-f_(obTrRi^h+}ZIdoNJ|i6E!jXZ#YfWFw$bTfYcB^H&Wsg_n4Y&Jm;tHBXrB z_1w_rb2eK)7RHEc@3R(4NrlVb9?lM+lL{6;NQf`4H)~Q`|4zrjAXd;QoWoqvDGXA7 ztX}u+u(?4e*ZSh+h=y1c_w2yj@=xF*QG*K>})C z>_)EVu%NsaunC=ZTuFua)o{%!I~~8KIr$sPF`^}6PmlB6w%s|M^W#762_<19u|0P9 z0><*#dJ{pM5rVB^M3H!HgEg*b6RckeitBBv_W}CrRkilj$EkYL8a0pYOugG|fiWrG zQ-NQ%g}fO41?XHAuuH}3$QhKN{RYxe2ap-qdoeZoJ~5Tfg$1;G-rMp94ZUPe=L2aB zyYjtMpJ-KOLF}1S0l)uMZwaOcIgk~bi#5`=xC%ycI;e`9yT!GUz~h>^AwAKlCcTUP zQM1bHYZ=)`mk!QCYL3=)Yr8z3>2d(?j~8c3bo{L1gon9BMDlg>x;)Fxe|l}rs`y>X z7Uf_7!I|%`EBJ2TEA$FVinU8YJ|?$Drs<@(&CjPiWlK&ornL(Ze31J*$$0%Q9sVo9 z$ISA7XX=cxSp1hg*3h`LmmTU4y(q$f1RU!osy`QtO0~gu#egqIYAv{vH&!8sLl)GTHU5 z9P6-j=4)l;MBc&RlzF~RgqewKO&udbIhZ6qQALfeNPuf9@HfB5-bNx(vSmORSYq!M z2+4Alg@NCNP0UI_Qxj1u>kR0|;s#HzZ&VJ`O_G!K^ka;2)^Fk_Vj3$swk7B1vkHdB z2%Db^j2|j~o#>vp;+M$_Hg{K6Nx*{^;+iIsnj)Xbi%(iHa}08;;3}N=N&zFejZ%wE zYN8lJ#&*lMdvTQ^JWG3|z9(s1yeOoeZe9pppxF#}hw$YDiSb(37lXjBs?+(C{vS`; z)_QVhdH+(~IcC=J?(*5jTBr}!#szF8nQ=Rkwh0MmZ9i&+oponPG=pq|Ywew`2Ci{S z3)59^m@os|N7P)WyUBh}S_qEiI8;n=z)|q$(hT&dN?g-TKCPfVdjQtY{d{7?H`(W5 zB#&qJ-bMoIP_||FQjLCZD^dP@^i$$N#Rg92Z0wuFtTLn;7~epW-&#N-4|{q4gYZte>vKH|1YiW37KOwvmCZYuPOt7KOMP#y;HkA52^Ky zdn7af`_CnC*jEQWZ*z}lp&yJgw=fbh&s2)SSk zdgeuZ!-rT5sSh>ub6_=v1s}E$*J{;c%_a*6M+gQD%xRCNJV1aizl(=TFvB2XJcynH zA8#Dw1^k#p1uy!-m0Lz-g}+ZeQSs5?jh6Ga?13FLoH9Q48B}5`hB7=(4~QNf|12Wz~YWv`$L>}t`jJdlSPi&byW`_{yQyYn9k6U(=6cqq>v}-u1EW7C`Yy(ef%79Siqb19i zRuQrM0NlERskO_&GA>YHaC_iB-5os~$4BqvOg8NMo;bV**?+%oQ9vb4Z+PfDHNSTt zk~vY;_2(|$R<~TipW~36RR8ziTx^37jB#-Z9bi`|Sr9vdq|){f-CFo;`C@gV;PD%7A59Og59PiOyU0ZopY6jsfX{-pRZc36Jyk~eE)EeS#p2ZYVKaW0UN zvYk+b#xi!Nh#^~@Nc~1WzQU*Su(^S)@w4wfxtrW=e$`&tw*6=sm>E6p9O%tQH{bo4 z`cC)(RFZt}$HN%{m$yNZTpW1HE<$({O9r8}U-pQ(Q{}hG142T|*NgHW;#eBeEG_g0 z8=UuVN{!pN4vJ|sriE=2s=(;=NOqX#_ni%9`O${>iorqcb42;5yoH59jpKIxL4W6- zq@_hwVEl-aTtZ%((i&s5G`1bR?sG>u&i*oT2rq7}FDr2cLK_6{*~j8O(pTko&4i)n z)EnZpcp&xn>T9!jQzY*d&ZOSRUW?uDBorqr6I6F%S5?V<+)ZG9fT*x)^ zqrty+I=K?ngvvxDISN$`a@H|^u^%pazd4K7_rPp!mCfnsn;Ku)b#6il#Y$GvP4eQTT&P^05LdDQ6N75R`eUin2iL$7@t zuNtSLqmv1k{q|g;=cBvq`r(ob%R@MVcoXi7LOf$Ua({SywMzELPoLgP(zLE?fZ^71vXUM4M4h_)PasmlZerVU(jpHvx>v<@i2yI# zC}kw1sX%~P%;W8bCl{Nedg4d4&hYUfSqfJDd~k@fkMMo@bl(*TpyJ*(4}qd8NQTVh zCQ%zS;FBHk9*x0(7l4@G!aK-zET*>w%XuxhHXK_+DY z@@j9-?X9$bZzrza-{A@aADi}kyEI2BlgyhK^Dig!1GkgV^#4vY6y2Cc#Fi@|=U_R8 zeQ4SHuSy{oi*kt!a|`r8$}PKXFI?e+)RBq}ZacQl)x2bKCHT(Grn;)?C6pB_86P;C zt+&2_j)z3swMe8^CPgGDD}+luu$V@|{z^(2Sx)4-=x~W(;@YwjagY5JiCOAsMXF}J z*#n8SifF>H&1G>0+OzwQk5zY_)RlI=5UcohBDJ{qG!n;!TAXjxmb$|67A%7@i-%d2|`3P>J<}C zkDG}&`ZGV~X;Sf*f5vH&#^Q7-x(OWN&TC7o_eqR&(?xa{!iTmg5phM8d9uP3x=P6J zysUMyMUMe?Ewu+8$3#QB=4`zTwrYPMc|J}ck$+rjrsQc+wkVv6$mKBxAG)c~ApjH$ zdRrYx9K#xkesn)_f|UJ&EG&ppxyT&|8TNl8Jzsn>p0aJ(H}kpNgRmmsEvdtGO$3&u6#;hS2DzQqgi%5UB0s+5UGo^!+HY=Yv8wsIDK@`E-z!QPNZ@X z-?7|t{;Wjorqc4)t#s|W8}x+t)?-gX0=U>eW_zTPMg%$ouJ`k8n$hc3W8uHKIV5Fm1 zx#y@*P5$i@5^pY%v4`vrmkw_ONGdLuF%Sij74eb0eQcmk68$ynP9Xc!?JB0A(M}-2 zvwvMT-QzE<>w}8-c=zKer}HaLQh63WF!J%m@6z=Dg};BoD7@O7A1DmgiKIDWA8{== zz6c}>IFDF`WUwjK6x7auEC>yBeo>#mJHP%>UUuA|-(wfAzmQ4e>yyHdNM!$KwFa_L zVh#xwXdV?mA+lp=3zDte`7>1z8Q;|csK?LD!A#kMWM4w$Z&S6!)?_3zhlRPOPsyzA zLq@uB`;n2jvWkkA(;WoqsgYLZ=@cX(jEKG=WKN4h`u|d1(gn!~7f*N>Pu51}P*oA_ z&K%fFgz1$!Q08@iHmNIc2dv1I|8tkiu6uWo;NO{ps$B0+Sa3aN`w%-3nzTD~G zcFMM~lLKr!$Lo9h`Yu4#=gQKXYgUMDo(Z!tYz(L;W0*7ygkvJ9k)^RG3|HDpQ$q9+ z6|^dQXPNw+NDvR?*n{+eyrSuu-D4>Isv)&YdM_6LO~m=?e;Q%eWV5hq4Vm)E$lZYs z^&ZVcF8QPYSe}pH193tt-xVzaXAbL}QE_q6K+qBSJsv8pto+Ei7k-R*TPC@BkmaA> zA-8b9dDBLbCC)x*u6Lz!4RPwiNY++e@riq+-qx&Df)Rp>tHZ$;wgFLo(%suAKQc3 zcAiQ`$xRKn4*uv(;e%z$2hhH8=gUa4IMaSYib_{L-9sh~nKL2Y9?`5@S1u7IHYn1B zH+^#g#M(kGRv-WxS;Cc@$)qW=Uq`TnsN^6{%;b@h=g!#j273E$gYQrHGs%yr?ffu?UT9FDEj^PpgvU!Zb?mJ)gQYKG++5$Qh@3KFYhBR;yx!ep<7Gk8Up5K6r z1x|dg_(hf53t1G__>RM~c6NyxBJ|+aBOpZ7sS2dHR9x(kDWw_yi~3!&I$sdM&FZ>N z$Mz{E+<10fKF0KE&T+6Z$fSusq6lX@uf;Rft?VliP9H@)5i2qN2*A*n3=n5yZx}scuI%!#EGjX@6`ye}*)m9VM%oR|X zoPnKxix{3Iwj$8Ik7|5%@$1*Api=@AAFVX!mv!n6*7Bw!A9s5f4@1wch>yfOl-q`q z*J54>%!O+Vq(&7&Py{8`$QCZ^*$Hw=3YD`H8bIE|)2DPV`sl`0$O5H)8mun!9&Rg`vUu0$`(E)}(iBPuUwPA^Oy-A_e$T8;4VaA`;d<(}?b`<1_p zksv09^rnI=oS$Ql^N;~q8wc7Z>yAMnC1a4xW1ZT7vJtpYm#m5IBH2Fv272F#gxa-T z5pFxCd%7!VXB}c6{Nz$3JQ1^)zt8Y+i}m*lJms}-MK%uWefbJ*^)e6sD_g`KK$u#* zR@xCG4q|HUm7RxP?7zCC8-@)2FBL$aAknRA^p?&PaLG^qlA);tLKReA(@DieP1@mC zOJuL%f9X9+?EdND@U>o*VRK9A^Ovy4w&+!EbZ4D|lQiGr(+}hKz5PWdb`uih#qjJC za>dq)Bp>5~sh^D0-A~m!nRvvzM~;&Jq-{d(hD|8{tWWu#DLJ_4a8&S-3=@v6545w| zB+gfh#hKJf-44kgnfsXPFdZ6R!mlwG!g|V{&V3aT&5!YXjZ-Xcz*f!U}bKIcdD zRe@h;@p(4y)9+Z>BMdTMGn&`qjau9+HXrMER9|PRBiw1(^GTfbN?_{tG_sAwl`U+kskiZiw>{Oha9@>zQwq~6$vNL|P|HL`6bU`-#vD)n4G1sE1x5^lvvK?ix z7!fsGKdjgAH7+UVDmYA;AIwBn_?LbBYvZFSs-@aR5@EK8E0vVu9Yu)In{ajGZPF&5 zGB7QtIb;hi-K6iJSmRC7Mb9~%Z`_G}{~_|uga2oFQRn3&3uBFj3|sGMwbMbYo_bqW z*tGqkLwe1`(xR|Y?RhWJKDG7&_3urC4?`{5tyKM3Z}c^SYrCgqaKq!^nk;&ZS2JGe zISSJdZFWAGRy_M&0VMKp^D5(=6~xjCv}#NRAvYRW-2PP5lKNA&D`%YE$Ls@KG%93z`r$~lJag|z|?=QB>8JP@Jc z_C-&wZ%cE5iFd!ufvQjC%|-SeYh%nrMP8iaGlbAU-qf8DCmE0opCc?^_lw*_fx7{ur*eL4KKGVNF4qZ^%g1{_k2t7ra|;L+_6(0(H**3Y~tgijRyVSxn&5i zaPPn28jno!*0f9{TD95>NMM!{BF70jQ4Il;yYNWfQGXWXE@Dk3 z$c6e=V>Lx`9aSml3*?}l2- zYPnY80!CrBVXPAR(RW)jC4VIci7fF!mY`g%RIjM<8YxPOj3uzT=1@4emEf6p!?38>u2-_%fn3s|_TvsMbTghtanYq8l*sBAMwDd})< z6AB?*Kf`heiyznBWab)^hc zbNLX?b||yS8wvF+MF)H~qd~+CoyR-HwP)Dy=)&iVX>~Wwdrs_?Iq^p5-hOWh3+Gy? z-x4{HYil?0jpxjkoZD3wzm}J8YEFu08&brkCSJyit+0!8neWX}hO&57e7A0%@Ra5K zukjODtdZ&dfx+){Vv`(GEDO_Rh6P{0etqGuE%1heYlNH;1DlU-nrF{8Nn(czw4ObC z#+oKf#7h|-!Asldzv3liZrXrGuVB6P5S9aIV1iwmH@a;)gXKa?nZyq@0SCnOeOO}O z+LP7I<3}l|!3Qf12jM5ndSzOv(hezhE=BAugDFc1;EPfup+OH*@l#|S5&?^8-$n3! zK9%OT*tzga&&$t^VejKly9N68iB7)y0%8O0aE>=atw z7WQgI;3rKr_&+xNgm_AvA0B-S?*QtcBF{bkfh3_h5*U3c83kAK#@aF{V4hv@i=Viv z&qpObY8Q2#uVjM7p7tZSTzn5;;~{u3^Ipc^FSx1rIR=9j*|aTH+vIMUMfJl4&CO*s zI1AGQ9-5}vVRX-Kyg%I=v|*BW3bgi$DA_bxxasjOw<%Pr zSQ(XxAJNo1j~=`LH!BLsA3JpF0MtVCvVW6z;{e3z3r*JFwbKwr^h;)2_J)^8R5(MX z8*dPjrkN&U>UTsL685e4MSV*(pwC$<%sV~hVdV}%P8ESE-tMfo2OD_DD)?E>OdVC& z2vO$t^XRt{d1YdaNIY^wvuAG@9iUuuQAOUu#Gd#YiEI=>h&>6?KT#_=aH@qhxDh?%-CjUhvIHxr{^8{64?mN`I2q% z#+ET%c4BtXjmd9CDqb5}Z>i_~fRk&xp9Nk`j(w$SX}2Tw4GbO+sdj8}M0>2Co%grl zQSY`#pxP^bLM#p8$%r%{Jo8lAB0ACk#eTRhB1_hnsuTqrYi?^wGYshI?Ym(l`z>e_ z26ZH}r$#R#E2=VoJF?96EqY8fA?h!E`qk@cJ?OHk&G{R95TY8VLQjsPk-5Jn@VDsY zIl~TiP2t89JC7eNCmI^2xqZwL#WbGYwf(Q=L5rcLI`GxZ8i`!8L&V%?tkoB@rqLG#b! zQL|}@d8UG+B70{S_OE=$RHo4x%Mfu>U*D0l`4d+uTB9EPU+=W2njPmK^|EQ>NPI(3y_~m@JMPt5QYtm& z(Jnklm|L1|#?WDYvn<6#EsQJ<)OB^bsyehZ$dVy2rhgu$ZC!%#`;8QXoVXlV6$YmFMrG&k0SiUPJp*{+00h}vA12%8MP z?DY?x;N*Zw%>MX(iG-*OrrI(ckCQz}n1X@8(MQ?wC%q-`{F z&;ea_OL)EnH6PZ6S@K@0AD7og+d12g?1ZWKm2IH< z;+TvsVM@HXr^o+XLF%_PqfXdq#^PzmX&b%)s{ph4`NnBC%*^-_ixi42BoCyxa?ou-~0D80^YEBQe=SuLY=HH{< zQe)<)?vI@OLi;T|rsi+s{5+o{CifGaGcZdq7MvnKQU zU+;8KVq$yQ9Y?jg3T@h0MzZxBU=6uk>Xbk6eR1^Db{#q$`<`#36LmVn+4sJc<3b&T z^XJDF-_`q5^$B3O-k@ue2|Th;t~_w^f%x99FEJvCFHJ6@(bwq;Gxq* zm>m6C$Xwo1u&|9nFa)^=)@PbwxGr5W?LRfe=sfeNOOjEl_I{8|!u*dUw3uTTJ)@1p z{78}%+ZJ})jBa6-)t^%hd!Npz$2*Q)_6!M?wdVlY%$yK@MjlZuv#2G*q~u;!J3F8< zpdbl7qFd7#N>9MdUPIX!>rhDne8frbI&3-p`=v&vb#R6IQZI%UZ&#B?NSF=8C1mAX1V{>7G+@`A*iBoIhU{6ro=(VRREzLaImx$*(s^VXON6f8`au5i%)hO?1`>%$<8v zh|e=}=ed&4u5EkM%t&yIaPE)EKiHLR-D+j&ycJu;CSpJOabxirj>Tn>c0$c>w{(7r zeeLD$+~dpd_L4`z`hP1Dk#u*Pj_*wjGT9v1mYR{S7ktWY|B!P(%gv?5fQ#a8Y=0=6 zHkyM6h26zRvg5kbKYYk^!_Iq$jbvAGs*E&`PmcO}FP<(v6NWM0H$RM9%Kbl~?l&S6 zNe5-mlBQoP1B|$l6(VQIG7)`N7c9HL7BQj5TGUQA_r|H-K=&<|-BlU$_im|PAQ}Ty z%{h}#xpsARjaJ(f<_&sCjSph>X5P!o9JE$89hGyQ;OVk)#xshskNrxCxQXl58TsEX ztVfu4v#`*2vxq!SN%?&|_vRV3j5}5edZ&KR{XXt6VHEgUbek8e=nk;+>gopXk|(;t zy6Mbd7Im;SB(j-e#(sY1SW4lb!#m*_AGCcK@Iy_HFNsMIhAi0_^Ol16A4}>C=3g#l z`)^6vd{&xkNxF%RZ0qXAfEWiH!GRe>M(Fi@wKL3Xc!U+)Kw5Ho%}c#G7;7Z*#Di@Y zCe26Ma{MQ$O*kT)^32(jnZq{+{bRhuvqy68bv2?EV!T?f=UCK);!5PC=8|&R$NJk9 z9``@mm}_eI*J@2bk<$N>dj5-fHwSk2NFgEA|9)j<_1{_w5*?{+>;C9dcXpjd=9R~- zrtKY8a*UD_Z$~@xu=Q4XM}%i8&E{{<3>l&tCl#HiZNkC`@@s3X+pDQf2r@E|2Wd?} zQg^KTH}cyDTfyj9Uv`IT%nf|uzRsQ8$JbE3qh*SITU4$bSM0z(pP78?^E0nBO#c^_ zVjk4&Z@^9pU?<7l+i`+9mwljf;$t$QpC|ACgdHhRYrpG1Jt5Od3|YKf^mbBduB-6M z``zXZG9-y1VpnKKc5g##@sEbMyy|(LrLW%Z_@zbXA69uMMP`~xrM6m2rNj;H3+-6A z9w=oSK4>jWmaab^er^XlM(6VLCnRMY{s`=tEvF!Ak4#6V$MEVqm0Ohi`U&xU6Nk*pOAo?KmH>bb0rlJ^i`& zP$ITNDQsQcVKe#)d5-9s#$tH_=38B+FnK3Qnd9)Wb#+7d!oliM z56q0^P1y0n)~C%g6g?N$rH7e#YCbp7pO`21KS7E%!X6D@%E(A*0bVeBbZaX$dmsum zmURQ!$RM%DWM*qg1Fwd|o7oVXHgM5YY=Eny)Z0R;=@J=`^Zz-w zc&-QgWJ^|?Me9474nhY9Eov$P#i{~P`_YX%@8z3eMT$X?INanoTCb*Gs2EE#gvuG> z>|?ny+*f~n1q|%Gq!5t`NEo~ocFPUyWjj*ZCA4M(xUmysIS5BQe?o? zV_X&DzvAlu5X{0zElw={A$0Tz=5pmwdZQF?(Su zulU!mrkxdfvyTogsvWt>O73g*LpTO>7-7)ZjQpA#I_BTgG(t65wM+oWV0+6S+y)jU z+%{1>HJs)C^l26Bfi0|OiaV0rnWqbqgSBjV|8ssZ(A{}@JvH)}!+`TFn-sFq03^4C zDVHkIbFE^8wd>4wW&d^yD$X4280-7&w=_FHYuVLo7)A${_Kn#THXjOxR*xQyr~;vC zuhS%a)$#yQogSvMP;vi7Sb22zCj4n@7Si4gZQEv=`};$(^{~0lR8~_6Y&Z@{U~nc~ zliQQ{ry?_XNbK~d`rZbc@-W4e&3+`nIB7iRuTiy@9s&aBCHefOTHO$qXHrSHu`>~~ z=$3r1)ynUFu$0r0{Lx~1xc_rn)%w!L|6DIN@PL(IKIKJTr;=%4qVm$?+o&db1Y8n8cvW2k31+UAlCBnjLCsyr0l6_`*|HEuS!elP-ie+FauB}xp9cESuJ#~LS_(fT~!1CjAXLMJJy22MfMke5&^N)TD zBktYR{)!|phe3c8a_qlcA-4=?M^JIqFl`kGu5+~UTH>q+MHJjv%yM%Kz7x%0DMCH? zD^Lzomn!V($?NPN53X~YK%1KlSCQ13&wBvkK*jA^3TE%Xo)x3gE38gMcQ6;9x)2uL z>}U}rK}-37IEFL_U~777T_SnJa%SL_!W1ql5+qBkWt`%#siF2809~Y?uN#@xi+=_I z@P9G~@nhF)=(|*lBZ7<0$m^AlEB0ZIBGaG}8A_r??e%G3br zJs4vjtP?udH!FHpihVz`EX}9J*g{cRX~x})4L>|fqsfy)=M;@I@g_&AT?S>)*+dq z1vFi>^?&(sP68{3*|}c!Ucs$T5P;owM@~m|nJemzhKnI7_@lQ%xUBo6;iC^;H$7}IQ& z;0PhiJI2Gk>hA7x#X_oPc{}DjuvMgexkTjp&p0!uf!658p-Z9TY;5gJU%r&y*l%3O zd*A|}BKCH3kLcH#%*{7KdvmyV(DC~i+FdzS$a{u^Er=i?suEH2vQIqB^)5;$BgU+H znoy0c#Co^%$CE8IO{Y zb!*4&vs_DkPoEx7v3vKp8@A}?J)@VbJG9?O`^JS+8e{n)XZ3mdX@YvKR(-_Bd4 zNHhx6)Ya8>jdpQm%*^NCu4+j(uG6oWeSL<@`P-~U)SU39pg~8Tz7c1Utehnwtbd*8 z*YyLf$ATny_F(;GDl9LLJDQJ-_xR3BDeUTNcGRd|*unfGsW7NdO2O3haQ%Z!J7KJB z%HVZuFn*fnU{8)I{Ou;qjtRz8i8b^uM4#xsi_0?}SujeK4dbb@S)}pD^;sR8#Pam0 zhbl4tHt6QBwETd=3uABpPFtA0`VA1pFFshe&@ekVe_5m;fh)k!&h+xRT=|w>buQ=J zNkI#eg5m`R4A7Z+_l4DSxVKgHKF#F4BNdiAjgKzvhS~Q<#piOBrAep;WR7`Xe}&U@ z9&I-*6h$>*O$$A**T)o!)?_7rJJz^SbpG@DakEW1p_nlVosPRnH3J%TbGKV*HAk8I z1I+|}JzdhaEhx_{-0RBXTa~%>LWE7(ELw-le4L?lHfV+g|GBFoO#b6Qf?nXLN75TnI)P0v0<+}U!$PW{_txntTX5BeINNo6d}`koy1^t;Z5 z_ywcFqJf~!&oNa#ty)Q7-MXfdw>g~1HoCX*L-Yx`Zp+yzWmXxdpz<-zb1mg4H;D?% z*~4)ov@qZL$b@;WoxP%s9D?aVX4Q;SSwUu8%2u&v)#JQ(1uG_Hws_9}W14*}*;gmf z`h`{DJc|xplSf+T?(~?Q6>gQ?;5ol{c01;vj?{dM&=)ahTm^p4aaP@DWV#xAdpNbq z@@ltiVpv#}2!1eaF4ip9EQ^=RtntZ@rf6%tT+U*C{4aZhLSEeIXY`w3s+UuOdG%DV z2QOrz@YYVD{K<2f!E+b*%nLTja5=yDCS*h+sS}Z;1canD{}YlXe>W}MJ6lnst}JJy ziv5yeS!H=MLOqeuVu#R`H)hIFYB8n0xPwW9$}uP6?&8KAPt@cHo9-y!cx`5YQ+vJf zh=g-mLXzyFY-s8|{aV_1UrZ(a?azb;+BO=Sg4k2G+-z4s4ZJsE(9e3zIE9;=&51ry z>bUU*2F-CjH0WJ3y2E_2nmOBgvT711cMcdIjSN)@DLTCh8BOilv>7^I__UM~eBc6T1h0;ZIC^`l8`r@MXTE;s; zN*uPxuVX1sli*>h3w2jRIC**64qoyTESYg;dbK%yIm@j4Y%foh$ed+bz}j+4rLU8* z0qLJGo)S8hmWiI5&*A0zSeCvvm(bGJVDApb`C_(u+-2D#IA+p=@5&7*Ke#t6$j_qS zB6mti>EW8OHqm{?3A~QUsK%O_bDpAoK`Q3-vPWw!2i`@QopQ#}Yv#@M&5cLAlL#{V zxKk?OGcxHQm3{QGafQ&vnSEeRLPvL!H+#*2%%;hUuxa)cB5j)2AljXgf#LDnxAnX; zhBcw|hSkAz%zTH%Zx#_y>pI4NEE9hm}hrE~Gj9QJFPL{!*Mc>&PHg|FNuFeU*w z1{T?pgshH^lR2-OUndVfE!FUkN)K;$Wa*xs6^%Ty%UjtgNO(*$*!NWf=zyqKji!2j zhIS+V@Hh0j{5Ni{w|N1bm9{@*vKl)Vg7MswhgHC_4hvqxnJLMIiboy@u>!&Bf1g1( z->V*)7j+C z`IrID*33IOLcjSheRmAnHjwA@Bpm~tM1^!7mE*4&b2QlheeorTa|>Oe#RSM~Q;AGz{-=!Zo-1?{Km{_wk^jNU97qcvUn(y#3T$=pzT1J*`ljvd)w2c|(inEDto6S+S&v&wYY z*rbas_sOf|>IZ2lu!+WFB43k?k~{mrB-&*le1T%AmY!D9xxKzwsy6FM;=Ie3^4MN|1J6F0c7u| zJt?d~f#mQez{uy=Jp!wt`*jR3lIER31tGa;WZKe~kbO6G$O<(wU~B~DsH;2?SWF9aOzM(SnU&ifY*m z)jR09=qEtU-%&|1SXcl44`=D0-c%s25QvL2gNJGPDq{H*z{Yq;{_ew7Z^_&t9gau1 z;mRF%^6v()%i>pREF{qse)#1Ms3yEM;vhF7KEN5@G+|W;#vf2`g1(iaUqG#el>zfX zgDf#@!cyUlDF*uH;(dN|wKK!jfHoVevmrEq{4Lct(3|TU#4}^ubvbB-uYF>H¯ zY@@(9zy(}A_oL+!)l`W7kzJ-#>{! z-XMo-1GWd1&C*C99pHx@{_HktXZ8^6=fj+yUS93Ky>ke3liN8FxTtD10as9)d(`~2 z%~VeKRq&tX0WA{k(>Tkm@frc^|Xc1XG88U~IDZ%_ht%Q!QfFzv>s7~WecuG-5 zWwOB6&9A~HUqP|eBY4lhm(=<;+fnsO``N=8^)Z8_|wrcsXF1Zo$A$%KP#P7H` znY&0FOyY=(fDx5m!9665EW%jhNhy0MdiXrDhQ+AX!hPFhM8X4DFoXqa3uYC}AXI>GI$FtVP+M#$OpO7@qlZ+gy;7u+{c-WSZ3?#bpGgC3b>EjH2)LV zu`qvC?qLdQosc*eW?6A+4mk@P67a;NkqZAnQBY+g(|@QkYC?0~1O(7A*VK|gvf2R# zRB3Dw#o~2MM~ps|g6ICLNj0$_)DtszD|L6Plw$zsCyZvvG#R3A@WQ+B>;{Ss4WB{| z7gimxBe-@0paqV_9;QMaH6dMJApVifcPTwDAkoG;3Jz3uV)zo`JI2IFQb>!C%vAXqrD+QNXlC8cCZ1*s=kDCL?d?w8RCXP(&ts`xM-oudys=j;=WyOQzPtd7S8Ny1dkR9y}RQ!i=OyO*4SWm{L<-eoJ9CQR! zhz?!aBdYO}H-ie{|EorxOlo3l>GuHjKW%z4UR zF+`|iftP6vdlACIKZ!urtClSriEsZeUL{0|MubhyYhj48QoR6KuNK2JAXlAf{#AhNaQX(PGz9q*EHdCRKrp zi063aJKz)Q1p8LV=bLnA#FQ5^{CP=BMuMxd{1BC@FQ$y)rWm+SZKte%t)84Q?3U%e2JuyFX=}Tt3wsZ3i7Z2yx||1y7#lY;l5i&Q8}f_9~^J> z*{*#F_PT?@D@^#oV&>p(=&dX-Gvs& zhxV=abk07jD_Ki%?xuz(r4h+3BMggD*^Z7BMWX2oqr~$rLrcxU!0Z|s;f9gFPaVvwfp3O3v?uw_j7Em#$oCeuA=>qu}k2 zE0CoW+Q}PKl5TKz!1lWPEe(m^jFrr-!r;s8?m%Qzn!3om{&J86~8yVM?QpYu+1rLvZR5{ z831K^u`-7C95H6vT{2V`2YdB>-wPoxi&NC-7dp1V;oFgj`W-EA0t>-3XEJy8I z+qwXXY@cj{Umkd|$^<`@8hjB4Yx?O7Pfr;VHOi7kkIQKf`?T(8rrM+TKhHYT!K9x2 zup^jy`rK-sNJ4vD&Z5PIjwx2vbaxW%lRK_L_N||G*q`Z{CTCjg=bl0XDOIu%KA(8_ zh(*AAa(`FcuD?fQf?G3uUj}2BfN!*4TeqGI)*E-wkg6_H6%TN{}Nv6&VC`!!#VE5 zsn$1~=w%_K0cw8=e|=8`p|s{y82RCQf5aJP-%w=<-mVKIJ43aG1g>XEN4gpU&rdqT z49mQ@dAMPzVJGAa-^b@1zGZ`L=oSRK*>&(5)_OrJjg% zw5=1qgpnc@l_g1W>bTHP8=Cr$`YWEQEsWyQ7sQ70l=u!k=X$lM`_i#{I&B7N)qF5(_zJeeat2MhsAPGb}FKr_0nsE#VY`pIw{Y%U)d&3&l0%AcsTQZ4(z zh)l5{@kqf-@>}qa46VOAPv#Ezs`;NNaV8;@JhAMd^&#J7ZNN1a#qJvWNj@zx_YV2V zt&U?7XRc${x#rv>8?9UG+YneHOTV4s!?ik+P+h4fh!tF2EhA;sQdLOGbCL)?yhB-5 zwDnT(ffEXW+Ta><-2M5u;jkGNT!DVPjwQ0szpcKZ8yU8Jrf2MLQTOA19I$BF=eyw@ z4|s>J_+`Kq{GNsmzwfh2>Ihb&zZ0;Y(w`CT&da-a&z?BLUSgyYPg%I!N^zrCACtvf z=eO0yM~*xRZ#rlJ`)b@LbQ{)=$qzXVyx4u~(jV9=apF3e8{UTY+1aPgOQ%SiSFH?8 z-==xyuS}}U`yPtpfn(b?#*N6>wq)!Q-1E8Ms_AErNI}Fti8D)H`!=DEw>`;3t#rWP+B9UXo8SF9A>9H2MuJsZ( z;8WK>Ipo}-tFk`}I2>U|h^gN9nDpss5HSFVSn{zNEl{y`Ttd|av_0Q)7e&F|Z6NG7HLYP4Kq(+3 z^2}rJ_$D4?=Fzif)uyI^ZXx6$$_6?<#Zil4u0q8W7BLiDUdHko1btl@+Z62=zw2^!FmfY+WKlvzjy00J3T-9u~{ zSM1ZraRbs~v^HCyx|quzP_x!?=db{fAF*YsA77KlW~KjqPBFNGXK})yRK61lzb?-W zlbIx0{$oJr&veUPp$l2~1+j4qJWCBlagEGR#RITd6;pZoz?4GF#$iSf$FJ$FK{WYB z>pB4Yz`YGur(OdWmdgw5S{IXPod~RQAn=_rU*b3QD%+Ntv8!kJh8Hdeo5Pi{nXWe# z49t5b63~HEvH{vvaSf-LN5MWMH>H2`4wea2BQE_JrjjpOz?+u(z0fUzm~WNe_V4{m zXPT#RiWbcf+eyfx@2w~zDnRl~tgQXSLL2&7K;=C4ZL83iCTQ^@(Be!7>C_7TO$CI9 z%YnagpW41~ip3zEf7FA%Jz8H%vp1s?*Wv*3NEJ@m&!mNZuz27##Y(4;s*(V^o|u~4 z#-f+Q+?-a!nZV}vW&tP+JtHXN&1FCY=fVc_DN0=a-2iZ^q+QMKoLjgFd^(uWqicoP zyF{4Hc*~6BE1U`RJ@oJ-Yt-l;$T|5}y8?43Onxh@4p@~-7@S6-D4NcLKOgVtRLTrO zxQWEzFY!AIMbVktSPGFFPS4-DfgPyZA!yok3HsKwhyM-bMG2buFiR*eP~*8TZ-rT4 zCyaoY0Y;B0f&eoXN8UOapH-y;A8iG(_yUPy};UX)ODMu(=-T;)Hc&GL) z%Ww!M+zk9%)chiQY9C5`{5OMvBI1kANKH-&HwtG3+0;TB<>&l2U&Bt*f=V! zz@S8hoY9OtTq~T)rU8*v%$*NIXnDc3@=OC1v&ECM=63lJL1W5~kmR0nO zQiHLqb!@b!q>`IYq34xi;pWo-vJ61YZt`Oi$HaDhi5N-m=I>@s2&WGaDmcEjndMkC zL!>m06*(*mL166;=K`ykJ{{J_Aiakz6l?@ZYLK{bk(ENO1BFO%RVAQgG(laLq3>y| zj0p^67?oT^02GgWz+7!R1jP^nj>%dw*8xHiV(Wc=Y3;OBw(qLIo+J*Wv4{ff=dn0= zg0UIiJ?M-cLIa=2^(9k0RHX}X2+$V(#yY3pa7&OdA$=Wf7SOSEJtI4B1PLo6L=Li8 zSydR&H3_TjHbv{>)Nln(1I+iuyOd`T-UL4PA;E5!c1oX^1c1tOz+=_x(JfOcH2jM| z;t@Ks<;t|K{XiWf2#c>{!jfexOsvllfSr%7gnuh+nf<}VW+;FbemM#RlDaK(KU)_n zZ9sd{5-)!I%73;3SV+j_vmxk4YXyptAXY|B^}PIhAka0f*-8R^Y5akI3+zV8V|n^B zCOh$-3NOsL{ORo@D9svycqy@%r57-tzopNNA~EZOS%m5y+7v?!U&e{;>p6bca5@WlhXn4>dDo)ODE6V2 zUxVlqtj#LPjm!;%3xIVh^s`orfP@w#YnD@a*w$9PpGssny>e*WUF)1-NFF^)I;s-w*M5prB6^L{OwStF zp;3vGfLfjo5P8*Mae;+mSs5(98jymdZvH)V10acQJfHPh63tZh&T%G;HEdUwX^?t& zWdY~a`b_-)y`c=#4naMQS{Mqc?Bl~n-~E3LS^630Pq_?b5_ZNPPmMjLqu}f*w_fSe z%TpQC&g{$MmiXr9{z1QDK{HM}D^bK@ll1A+c6sF*smT9HvXdGfALuQ1Tf4EwwpQGW z(c}zOvl_1(BL+|Nzxt?#gpsy;VNyC}_a^Y)7hCRdk-uGA|)~O+_+fQbpUg z)vm!tv|HzF-JC|zZ_W78JlYk0Tc@&8oajg--$?aP7OG-k&gA$zO4fD+gLms}g>0~M zcvIP%1dMzQijE-TGRV2gdB~@S86yiyX)L&bBB$*qT47lVo(trdE?Da1~@Oz}1^RkHntjxdWz zWIU+p0>#e!O#EU*)wWesS#OT z+S@9K|GHy{dUhgHDrdBM+yfM1`fUZHVIafcjSV*P=!NW}pJbXBs$o>%R$pQwxmcO^&`_h_V&hq7GH z9mPW4&9)GV>@&!HgG{)L?dumMJT;E=<6Y!9HfobYu{@R5Gwu@0>ET|Qfn-(H)Pdjxr=I(@d2?7WCZcPB@ zkEcCNiC&U9yAi-tz4w1OBuMe^yI}P5-eP7Z&aLrG93LPRq$+4}s@Y^MiZsM!(Z#FU z>Z%->ptm*RalVBUo$0mM%95RP)P|!#gn0Nq6Wa`3{58+0HqwGd zp6I;KO^UU@y`>iK^IDn6qwm2X@%#Sg4%wdz@j7Npr!*9(InWvt^{?~I;(tn!4DB++ z4jnc&zJ_gjcfGeX!<)XxCuUDG?H+bOigd4l@HMHzHpdGbpUQ4PiVuRN&Xeobq}(<7T9WvNX8d-U{#d$plfqwyNYy2SR29%V?L zR+T74Oi}3Q@gpwuSo;H~wyg(0(3#{h*QXs6@UW)$uDJPSF_NXVe}3hZ#0i0DLAY_} z+p+H<*d+tDypVcl5Z8pH-W_X+kF@|-wO(+lNPzZ4f>wt+Y3z+#?#KH(jSp^DkY2e= zgKuF$zy=O-S;SIHVg&px8`k&Ix z=+plZ-I#6nABCDP=2lM!9)zbjmhOP8uImp&pWv&vlb$>o8I(SDr8Wezj=p`aVhBRE z(GUh2qL~dt_sLALk}>y%`h-vzB{2um!#dBJeMlaZnB2LX*lyR2P@KyyhgzAIPwfxkTT~Fp zIY`-EixWFxUf+?a(mLk+mq1rye_cEtlChe-kTj@?461EJxfU1mWq@A}gTlr*aPlsb zGr4yK=DU0K`C;%BhVKdBY2zpIQhAcUiJ}6tz#NcPH&6sUI+G+yJd7n7W1~H#_9XpE z{iKJb$y6Sr(dX3HvNEsTj};Gzig$JTI!TWD-P2q0R1>?MwB^yr;8v}<4gN67Wx=mi zc?g(xLPIFC0l@U0P~%(`;q3D%DJf?oY0|lYJ3rqf%(@NZ@GaP(rLghiu;+5ZrLio@ zYe~W94pD4lM;NzHJ&GIgfJ8Ap{OkSzeX=6l=^bHy;)ElIU9-ffYiE-B@w+jvqRIxc zvrHPW5>@+#++6LL2NUA>Q{;Sxg?zK{OWqQE1ei~&>%K8J@DP5HcBc-*29zM~X(z#i zVx9?~ z6_>LHp4)R&nKIJS+%ApwN%&Y41f>1{nuGB?HT8nrw(F&U4XGRPd_R&?D<+l7LvzSP zJZGjeX4SF{_XE!8zn`>Z{5%q+y^@hs72s9itXNqPUCo*($0oo}uUY`9MUc18mRh7` zfs0FceKzL-w)Fl^bE^R@{p{1i@dipmV|7*U@p|z_M=UmIPbi;#i=nJcLoZw%)Vv{z zDdQeo@%_s?($@#X-wvJ_5MZivEI>vkq$LXKL#jyn2d3)w8FW#+=h9MC&z*Wuv6*9C z8NXCeup_s(cOMi#tsljLH@|eu)mC#)z2s10UyjUBV*kjb`TCK>cBy1#sCc>v!AkCj zLwt&Bpmf~H#!J7-L;|Wq!aL8SI_oSUsi>NBYZdU;V^C*ur%h-buZ&&Y*K-@mWsw}5 z*dH8?br~re(o-fg&aUa1ouHijDm7%!2@76KYMolXZyxL^ zZ+sS$bF?U@YxX1(20q)3Gl7!TF^?{MeZvQy{b?E&e+)k9O`i6s+51 zTk~Z99*OH+`to;AQ4@kMym)*&T2DTGs9&+CK-%m__)u04#od!cIdJ{wVSvKT$jbuQ zOVX*#8Xqd3=lG8953FiK31sR)$HXjJic$A0!(mt&f83e#_HDP^ciq>wOG>Uy+ZH@D zHfaKETJilS=IhF;gm_fwnvMs^=?KDT8k139?V4AY1sHGkN6cor!HGi=LF=9ae`2#k zHYkt&*e>hbU!*Nt*IVaMUMlMo)EFchNSz$vn!1^tow$3SUtpTMN1)|^?ytNi3-4@= z0{3W+HOjs(h(#5Wc82nx43*_!yBSUi78@av;Z~nQ&%3SZErFpw4kp`W52QJiAC^sY z3tuqFTF-KXE4oURgzw^t94-op%hrlR187l7pL`Gzg(*~j(qF@5CU7mK?`X#}7qnCe z3*2xI=bOl}DO%GjG<2mo z)dD+(K9=>2bB3{n!u>EfouMg>CH*8(KKvpIg%4O7!jy4r_dISYhxx_H zlMsDz{6T*C*P(v_D!gn+^@Hh6Vr4!T;%;nO^Vb4kQ==R_6ocwe2M=w>K zZ;_*;kb-=}U$gekN=_k39* zpdvRE#7+H?w2ZaS*_ZcuxmJs&MZiU-UF@kpFc4cc+vr*5C?e4tPOe*H^7CP>tWnGg zhPPtmG+X)1k3K9G?iW%xzK*$T9>G4vw;6SzX?#<}0X4Q(uDsotkU41g>Svx0W zhMmg|AtnrFc0SpH`w93j4|}$OX~w#>8WwdaOJ){BB)0$7`Sx#mx|CFi9?B#_6zju96PmtM`?Q{7;kp@8JGRV6hL=A^BqAE8v z?j_0Ty=1RXXZrqj&z-$i!RK>pT3u~^&^{#bdSK2FM0?^+_UN@)=R9_AEhImT2BSH3 zZ`_@fBFEcG)ro|I1iW-wcMti|NRLpLv)reCqoS@0-*`3*(2XU7$vE}6J1bAOWhDI^ z_GNiOZb?W6Idq{k*jJ$gu-pOK471kw=T8G zDW&OmG6)y*^?OWvNMA`Wtt)%RYTxY}>^P#!wY8!L-zD2cOQGKHxu0m7guQ2w6XRiD@?JDA>GG$KtJhX5ozI$C{zgvYAr;NQdSugb1hbsOr(DGaY^kPuAgY0JXO;7OSaQ?nyNuxE{_u8A-p=&U zt&~zm_OW-Xr2L$o(FJ@27zg5ydN7I{Ylg@orFucwUegCsmo$Ct8rJg!Ko6mJhM(bqe0@egz2_w+A-ZD zn=7yzUy_1{0u;#?Ikx_M*R6NByQXzw#rUrDkF*0OJjGe2q4p*%UXc)vQTKtKRXgT- z>P?&BciYYBei^1-aPAvsg`@Tfeom0t6?F`Wp~vc!9gwEjYG_1S9Cqk<4gMFy zm0UxXu=CCdy>c2baMc)CAPUTYKuycxJTbN{#p-Um#QBq}gt}xa7pBJ>Mux3_)_{-O zVX8{Mo8F+J{2|;vR@FN`QGHP1red(it&vuPAgr9@ht+Gjsd{!>+YARIoVHi#x!cJX zQOx>v1`U9Sip#$7C*rAoW6$W6Bf63Wo(tB-eJq>*kW}a(K2q0N zt_tGDQ_>}x7PleEy8?jDoiI2>)8L#QsrAVVBLsg?cr`DT( z?NzJiQdhebF_*9jpWRnc7cefCO|5p=A=u&l#A;7ZthQUA%`mrghtEL~W!WRGaz60F z0idH5CqimBOJkET6 z2&N7cx;sis^uKGXg_p<=x{0E5Wk>=&B2?qzu>(OE!UZ|B+=zds@K%v2rDg=lk*8j5? zf(X~bGtgo*Z+@F!B-}3{fwi)-syBY5+eFCPPqRI6ucvkIyRmebVBI1+W2ijoXf4o0 zKLmTUdtQ11+V`j;6+RzdP-nY5`Y-tfPEp(B#~pfSky%ox#Ubp(GE)1w+o5P_h8E%-<1#FGUD`XakF0_Cif12)opqlX*U{cEqZX|At!){AKkr zJo>GUF$~kbGI?5klko*kS9RG}%`(Oejr0Im%p`(I`LoSOA0R;ZBX6pVA4^B*w2%iC z#MHpyqlroZvEl%Mfkg(hl%{~vA;SGtmX#M#yTq?1`x>U!qg&F4j`|pM)R3Z{CbWU& zAs&={(<_ZkqtmZ&1$l|807kDoA@tj0JYXgmxf;(bEYC8X8G1R}s#(XFu0G?A!eMx@ z)%o0P1X~FZNPOG-Yd<;DX8IBABBb0#w73~A7Cat$9=j`NvHQZ6Hol_+p{Wu7X&2z^ zU}~AG9MSTsD$n4{$NibRX0r=eg8{6{YK!EqJRPr5wv(_2FS_~S?3gHQK1j9!mmzrJI(xR&g+G>_h1mE%ifosW+4$tiV5+kI8%qw$)wx$V*Nc2RAkK7O{c4nX z3%S8&YI^5o2Rb9T&M^qfe?x;M-3BFE74J9nxeM|Nd-uIhp(-kZZ*~W73N^gWU^Zm3 zjfp!79O0n3^ARRz!H{nnn@-v54(NpOjd7e<;U2(Ig=L&0oNX5B!)&j|tqsY?kL zqXcIK=gh%rC6Om!;L35s-{0riGY?nOEt8889_o07g7udVT3Nsg`q~mu-t^H28u(`9 z@s2M|rC<(?bNv#*Ji!foq+(ooxzCYCz)jV;_Q6>KV4~Jf zF30{GkLd(!`}l^~aTNu{uO3vKfTZK3IYd!b@LdIX!`w|iDCx00Y~Rjg1-J-%>fQVBiQ-K()=4@%+S(Jih;M63|D=eRFYD;t`dE2_La+92G#|w%aT4w0i!yHD2 zDa(&VhmnE>N}DOp0<_C2c1&WME64cxv+<)<$+8xsS(yg=fI8qVCcI8bl42qehk&u_ zufA!QKTTjWWAWt9@i4WRBs33v!6I~qzk0y6Bj+1dO&8rc|0F>RA40i6$6-yrW&ZDN zOv$~>oH+LRv!GOke;Gh*SKG;86b}sHDE4$Q^z}P`PO|6$_a9!;9F1=mEE^cTG`)Tb z+R@ZQ(+aJYKx-3SrvDADI}^Zm3I4`%%rN(X${8k7l#H=lo%(PPol(_P&PfkisggJrQlp(t2akP1T*!Uvq)%C zaZ>Fp4s=}6!pW_FAvJQ6DYx%j#+)7sROZ7iDZWR{S^y|XG(ogOpqr;IQ?i2V!T@k; zc6n2B? zqrd;^K?RA)`ce8NfC-ZQuz`e>Ou}Y40haquN&$u59TAbr>v{dFmj?E2nu+phEjOP4 z0`5Deq9u-#VayK!mG7BjvP^ET;0veXyWr-p@~JiHeOR&+kHLzsmy_DiMkePqHJxZX z_iy4lz>2Erm~fF9XR!}dZcO#38Z;7ZYHI^>;7-^IBzU*8CRG7S1tJl50adS!nlP@( zT&FE9bFZ%?Zu4+YZmyF5&uYyzBq*k#+CXj+1dzf5AyMly4>O6MWy!*-W>v!p4r7jy z>k?`mjUn2Sw~%+W27Z|)W=v=Jy|yVQmbfLp?ZZKVJu*~Tt>_a8sjq$ zVL1}Qr+Y$d^?w$`;g&ZjB_5%ND&luQZZ)0r`XJgc1&n< zFirRTK~1HBf!^=Y_{5f)ZLbgirk2QRJoOx9y>%@&;b0hn|&oXimEV(KdB7nXYS!7FjG_Nz| zG#&n13Y+L@f~vIa@;bUD<`n^3kkBTjqT=dnI4OGWm&|&G=>sF`xVwGlKtIH%+m=R0 zc(@dc$@R{Dd#cHa*;fw$+rkgOXu_sBspVuVd*Hoqk z_YOA)D$&gGv+VvUP>)Y{6=GHzzPt@JD@7fPx*@>$`rT^H20mNk!q1le)oS;`6jrU~ z;i--EqyA2_)gZcCX!Nzi)oPJ?<;xlBU|Q}26Y~P(9zDF#2;DV7jfAP~Y0p${2u$wL zJ5%O-;ezFwb$r(A^erkqYqbR2q0s7{+vJ6LnPs>Ztv_w>mn)ttb8BN}Op zA46Vx+g1&`jitPJv7AoAyKizI&SS`K!`7AJEeax+ImYmcNd%Es2UuZ#$P$xm>pa6& z9vmD~Nc%a~qVJ!B2Oo+`v7?Q1(?FF1B;90r?s(`9wNWh`u>n#!wtkSV8sdquw5cZ% z_YWYhwDaF@XPbVY6e*Ru*V=U*Q69f+Pxfxk#)w03*Au;sJFfX1OT#)+P!=7QXk>(wp3`vz-Ea;UnL zjUT&W!H%9;dMG#$4DAW$l{1aQru!GW2FtWcn^U^=o|QSD_<_d?RZ+>NwCAVc-C(Lr zeoIDeiwWl%&T!LYALto>J1pLAT8vl2|PQwcBLG^E}*dR&cvC zWlWs2*1cAMuXXOqm4NFbYR>hl#g4c0$6V`O_70hK^=G;L==c;l>C^o%;nV%(QSrf~ z_o|{SCHy-vQyTo5)%L#EA|**}FK&&w9;h6vrpZ2ZJ~MbU8=H+yDd!?d_pkq30PCKS z$`pg4Gz8+P!|EPUO;Y+djykn2R!80GXY?o%_LbRY-Df#iC_G4WOr&fu9x=V{S^cG0 zA?I<9P5a}lMuNgtN12mK0;`nG^JsQ)Mdutn;^8MDWPaXMEono0=Qqm{N`K5a- z%!X@MGv<*6K`(hDWkKjr+(~lW!mRMBlYaYr8${C~Ig^@@^?I;ol?AdQy=J~K^#(#I z*B07=2UV;DialB&8$dy$z+tWqv6s-NKb6zD64Pps}4+;q@;&e!a{_w%E zj4Eo*h4xeC?lyYr>0jKssR_N>_8=(*bdjTom=UkuoS`wAL({uM>M>__oX*Y79W6>q zbz?jk@q24v8rYd0J+!xivnb1SvjR8~9;<+Z*s~?+)5v`Bg z)uHI9o>Fvuyaa`ZraeZNi@Rq*sDJk)xuD3=amNQwLgQGb)VG>aS;WQLTJ0%H+xaBS z>y)RG6v=Lls9QW$M*VgtvA7Pe_lHeRaQ1ws)a^r}s`P|8&1OvYj_XIL2LIQ;cJJ!4 zxp#qT1k`oUefIRbX4qYIlf30z>=4|yRCw>p`q8i%IQKU|1!ws63WfQ z{>Xmt$;#%^>w`QJ-q8g)N#~8ghj}*W&yJ3uF}o4ZYmJvnXvdN%$68FwP9>}Up-K;~ z4WPb7{B7tODA(8R_KoGqSyuqp;RO4v98_aT(_R@=mwvB9C{R0 zfHXtIE;CTwlu!OQZhrkFRyY6s$0L604f6NX#02azz*`>n4xGVmp*^A|=lE?%IUePm z*-fixxe{5;VqqI)zt2^seave#?ipzf&`^-AT1cTdKDbCZoLYEuV4%=b;Sxq?ED8n7 z$qBF+22gd!%4(}exba~c{dEQ=v7UE;(^g2=l#WOtUeq3Zim%*Y?O_`cw|GTaAcvuK z4Fu7-3H9#Ua1p3(WLJ8!sl{sp{kAGWN|$$1a>0Fjpe%Y;$%L1@+E7c6!;x^brAK7@ zlzJy@iZJZEVurbQ#j0M~(sRB18b_%Vi04k~%DBh(g4Fi2M7E7P5zdWP*PToIuyEbo zdaSRWGZc=^y6-)Vxn=1ZfXROQ9#rx@%8|XO_`rSBCxQ z*)b1L}PCq7GjSIBED5tz~A&O0^LM7BAYcFI@+g)DZpBvU%y6^hPA(1S@#+#I9my> zVn}yoa}{@1yXt~M9?7DRs~D)#YyPU;K21OcNeDM@o|>9kE`2O4gfi5FRdu1&HW-Zr z;9Z(T8!bscD-TzlgCL>a!aRKa&s_^p@$#1stzh8@vFw?;kxU5`qoK=fo6)^E^>9|i zp_yX0SmIUJ{IG6%c8{y`tLA`OS*3()bCrAXo(khf_oZh9YFMDp!4Pq~OW|`-b>vqM zxbt8rC_d+W48`+CV2o~8DX1Nc1qM60zh*j%fFA0W7tvGirspz5a3gyca8p|>0zKri zpuBg|kIj6Z!~1r5jt)O5kejBG%>o2r#2K>QSr2uFd_MvW>boRnQSY_(;Owy#&R%ie z-ZFJm&FsE`#z?mu$2<#P&wg8bT6*Ir3HNh(#hzVpkRPTr`1oJx{#uA;>N=Q!+7drr zfd)>tx^GO~A5_OYSO-~6cCSEi`oy;^ zaV)2&zV}{oqv z*uS2JzJVM>h0f5rl*RHVb_SfC)eFq}E*& zavwn}4VhLgS;g%6o7B8K^NvdEyt~g0^LFZ)rVMW7V`?^MH@|rGYK?d}hOaC_0cxuo zEaZ_ed0IiY{bfcfXqze(z=`5yxH?c{%U3N>()VoCL{T%&KyWn+jT97Dq}h|W5;D|W z2{L=qC!KduqByU|Qj8zkjt9Nye#Y5lZ)aKG6zMHNVpp~Yl%WnqE%2CP|N1D7R;-;M zUy*Iw<>gmqDF3A4lS84+$R~bO41z2Ld?tkK|LYSe)gXhbQXzHq5SrhSyPW+ z21fb1<#aatM{qS-v_-SIi_1v|p$l7>qxjF`O@TDhYU!OdNzd5<&ZNu`S8`}hUscAjvi#1_;gI8Bo$VcMJj2J zc^&_!SQ}g+9N>a{QLRj{wQm8sNWWgoo+$Ih*v!gGxHF^M`?d5}W>s@DvpF%EL?3NO zp#>L}g=RBdqGyPi2T<35u_7Axq;&)ue3!jXo(46IIlvq?A3AiX?ZU+v<~jdG^IKhp zqxr?Q&=K3Z0My{c{^>Zq_?m0(roH^FLvF(W?Nl} z`lRCDcu{!3LS7(}smw8pOo5W!O<&miBDY_1GB?CwAPQ?Kt6C=fCpR=h_=VH6LQF!T z1SgZIaf^&zz0hgFss&-qqBPLDd}!BG5B!MPcJBKrM^6Rt*2FfW_-O{qY58JK5IL6E z(bB~OQcXig3SUD7DR;K3rv2h;KO5#S9g{`4YPL+?+bi`~MMk9Z9We zVgYcvnL^JVeXh(4@TP-eoDl`U&Q*AFo*(^a6-+vA`+VzZ#@Kw|Pdt`glO?9%Y=^8) zNz2S>q>5q?9)wK+WTR{KCo5#Ye0X3!#%6NUs$*;d+dlrya@)z9!=K)PwLN}sF3H;0 zw8<<&9CC_AhRogd2;?VxlTH^}HF9F9C*d{AS{G)_$44Z_QsS)1w6m6t0Yte04R^C# z6c)7?8dmffqdC_TT~BjJ{DX&(Ng_{?lithQd@H)HFqodbUCXp`=r?bv98sk|c<|uG zD3-oN_gidS!eWS-Mht&fl#)^=sYD6B9XdqzLOYw~;Wc>6dwh$hB$89`QHav-RnvSM z`HNeOTTI1!>}%7+Zrr$WwXw1Bgsk4}II)mnxTj{_>eZ`t>4{rv(+-alww3_^q$uEh zE*sp~X=??1+!YMDoiQF4pivD0q5)udd*9dFP0e#xABZ< zM#!&fYim0%M_^{OMgaXex3vf}Hy4v$Sx?z9IP8W*zYn0W@PY=OqOKEY!}vqg1)QSa zsD*_E*yldW8l=oGDJi*1rBd&A)m$8BB{QR0rqLgCv(FHg)J3h?FgX!^IRHzG+Sxtq zW0~#2W%-Wgf!sROUEc_}tmz$zT%YwOR2p%j3gtdN81e`9yyfIJk^!zux>NX%F6uuZ zq7}1TO^C@GmkT2dO!&-nhhfF?!ni_$BN;NGWOV%xS30ax58SvE+^2DkWwsN#-yK8| zqA!VOM;;qqqc*~x9k`c*Ub=A$c&z5>J2I#QJ3-&_E0EEws}f##&;|o4zeT;}2;X&1 zAY9qwQm@cOwF#`5X#*BOZ_F793z-Bu4EUQhk zjeEbv`qg4pI`6Xjy9frOq@a`FwO(E`St;7G2}D=?@MT-(@pbb)?9a0+Q~B5_>_rlU zG`?3(QjRO+>u8A|KM#*01u@Kh2bo)YCUx*HM^ySH+R2kE2Z>J#!gS;sA>YoSRmH>BD1fj!7$kK_qHkQ@A5;a#M(Kk z^d020ddM%!k$}1Nj>!kuSIF!ISp{wwj)P|WgAGhDokc<-- zR+)y73;$w3tnmAjLF^M?qpL;8nZA9mArn|%_5;~!l&9&j&t^F{b>&i=0QTXPR59e2 zYY^ap@s%|AhmZ=DIRLUnOFpe;Qmzv)zQppEUBRr(VIGVhb06lZBV=tl4vy(4n#oe& z8We7-_PvKnC^$9&IHJvKQPp{31pO6XUprZ^A?=iO@T<>s_OY!^TRNJh@ii0xZmAJ4 zA=J9U1jrBC!~X$B^J)P6wTBha&81}y6JE?&@R_-^iH}v5!HVUgbidv49bL8N@6E{c zRBYi}YlTberg3-H;e_=8=4K8d%yV=3cTH%(U=pYK@RNYq7RV%(RmK&PLT^Wp53Yi6 z0@tVVLNmdHw%{(pbT6(9WP)p<4l-bFUeXSBB;Q0pzwGI%U5^E@^S#X$A#>D1g1>75 z8s7f{;V%Z|MPf}|D+-MfIB0r^#5neEpxm18Xwu>MlmU^cGvg*g{TpM;P$L5?-A}F{ z3P}*DeSp%{QFw2U$($;tljl=5+_(&RP-eGu{8Nz1oPyV{7^s4K^CwNtqJ!?Kk-_jhzrEZB zQ~Y!+A!-wC>=E_8J*`%`MjZ_H(bhXy-Nja<6l)&4oCbn5WjUb_Ssd4D)^$*u&!Ym2`y+T)}d{`CKnJ#yhV(aIAhZC{=udTbG3TAQ3 zy@EwPtr?N7%ATVxyUv|>A_Jaw`#b3|X{wg>iAN)P-hIX}G!iI8!l@p;AcENa{ffZ) zn1w(DR>Ap!kxX)f6x8=i2vXPX-wx^}(V*N*y!J)DKl!G*qaT?C$FU$uX z56C#hWK3q9(xj?;gi5R2qeqKU=nq*lPK_B$xvHZf@m0SX(^DoY18J$Qr{Zo>2FT=!ae!0YZqeQrJhJqS zjdxouAqSH0MvcAWXj^T+%(cOls&p%Lp4Qw|)adnLs)(AQA^_xgW$no>UnlyWrJ`^5 zr&*oOX;ZjoXtBAhiC(w<3hmhDrmsT+XG1JiKLwX;qS1GnQo3jf`VlMR^-2s(B8Kdp zPJbaDkRr!@ZQ!&%Wn!IEdgRdv#e=ewR8(j4$BX6QW%&KwQ>mDnWMH47E7dtr;ov(& zuoG53rU!fw5!k9cL_Qv@7iRCcqTeWZ?_l~e_>R6p=eZuBPfs*x?D-ZX>yZDeXPB!b ziQXW4%r#X2du+>*KqrV8wkW$ezI71&k*~z)tX{nKPm@I&$@%MH8gJ`(MbE7sBDbxn zOBCTM$l*DXsVI6W@#L0ja2(&aCpqW0hx4agyU^*fOHz6z#B0Q*eEmKCooCp!XLQ9K zjyd$a`Ey-{?qC;F2IyiKuPcT~(%-kwI`q(%ak`XXcvwzVCN~C7>Wr&selYGV-1wL1 zpcKV++1^Oe)g>E41R>kb;(`cO3KnwR;rfg!V;R&=90FR5b4>q%-3(i7 zEas`a2&g zKZC?&_tJEE=Psc$H%63P$VU8hhK5q(7SP877{2317mZMD zIBFg)*>`laO~q#RbMiObW}y2W7KjKsS#GUqIjCfOK9`R%ZH?$r%kuDV^M3XU+&mt{ z*qN9iltp*KtOoOWL;1W&&k?KPVmF3}d+#3X$MTN2egRc_?4ewFWPqpuV3khcua!{q z3@S>X4|hOhHuZjOjn42Vl0_vQ!Gku8zY5jKj*9j((i#2uyn!mys-bQ4{)Rwrk_*Fr z&?7Qg13I~z)iM4J4!GuHHenSN045$(BwRzeeoUT zqn2ZM?~VF+_HgF*c=ir0xR@iL37hLtn)SH$4p%Ix(seoU|6uT0UWn8YlrSJOjhD*{ zA?Xssqbr0qOvur}pfM6RmX>SsEyeUFVg+cI7h|FeO&c5ad6Btp0u2v8dd>D9qI9E> z(`nV(tEW%^UqH-AOtB9Yp;biYJmaAf$ZiBe^O5?&QNz3io*kH%>j_3+JNQ{Js16sc zTsIgu_&x$D8UJ}lmlyi+jEATq81-0WKq?A^mmqVd2f0i`!zQFer+mZESdAN8Z$M}% zx2L>I&|vo<8|nEsU}rmt(K!BORC2b~)4ChkJb( zPsvqeYObbdlZE*Oa#`9z_u_O<^<7TwIp>nQ89JW%W!v#?U@Vq!g7s~9bTKG?yrL}SK> zr5lg6kbWZ@XfAzN$hezM-#uK8p%tc-8PQ|FbxM4*7zj@539Ku0B!T@BQvk+OMAJ}e zvzhRD&ZKl5B-=eXI%)efI3eaqnGWDpJa%q$N}g?c{e9Pu)+QdBuex6==|$?b5Oyd1 zSl~Mvwqhd6K>+rC;01@fGbV5i0*f&Z%?&2B)O|Ye->0`VtC<@@B?kaQ9g$aHHcaf0 zr-%UryV8}Em@QQ2F?28?d~XnAasCrNuu>jq882XZ4e9FhTZ3u$6@mdk09e{J?^Dml zX@MVc%j{iXZHQ9F3^&yHFHvV zkMw_jd{8gIxQvou+^nZ;N;jk4vy7BG*P7JVm(+V-kF>Hor(<(taUh0k86Q2f_hVk* z%W!hh+qHa1aQ6DqyK@@@6im1W4{3N4m47-64|@#xM5_lTWHsH!59_a~&q(R2Akkyp za!WdG{>3JPW#>QBUpbDIr%0v2>^9qUbTM+T3(dpu#Q z;62I>b4?p)dP)()3$VQlax)vKgLkV;UO_~5wheZ;kB_F;DC9Y+o;TQ4YZz%tZvmHB zV>V$Vrx(NM#ilEz58{lQn;S#0KX~%uOa^QbljU*Rm!bkF@!L3HKm4N?M;bY-N|)Kd z2^0Bs#(WXXR^niT)5PAx6$7F}HjhqGY7_@xMf}Bj)Ri}(jjsU9Qjh&L-_dN^Du_rl zY2;({;jdQZ4B~BGf5p&JFq{}hrE|Pnoxg0u8s$*}o!OKN|Q(aERkIv|-U*x`0l~K@V%C&9& z;`wrs1J@%w{1?&Ztp z=M$Rp9%wx>dj1BJ;w1E8%bCyrUuEwdPxbr8kC#x$Xh=eoWF(4^O+qM?m1Lw)cJ@40 z(XeL{Co6krk5eg;m5gH_<(LO2hvPVh!|y(b-rn!;_xJty<2+vO*Sg1bU)S@RFHx0} z1PvoW=uAu7Tw9GrQBH^FCIa*t6ZM&_VXtx1TnQMOXF_8pO11Qv+mV% z2@7}T7-p!mnN5z!8#z~=U!AP_sF2{oR!hesZJGAIrmj-Y(1@BGzmU>!5xm=%Na~ke z+vLT6_LtNL6S2Mit1bx_2`@K#UG*L zPTrgvPAz{>F}#2|-3VnWow-j&fme{e51*4Z8*R8@)LMTCDGOPx=*shnk+FMz_zRcw zms={=u6=jz35nv?P&GA8Decd=9*zilLQT#f_aTCe9M2}6caVB7_;1fYexC7y{$3Pe zbE4d6_RFN{DlpcVhUc*Kpz@7Mbae}ij$p*8FhSQ975=(;5Ik|{nDwb$OU6J?Hh&VS z=U8L^)0A1-{BF{_1P-61-r#@~Hst!~h`c*0FH6X~;p?pu^Bc?<!#4BJ{M<<|xu zx|fHThZ|Gy6;xGaJ$Ue7Qe8XmmcGpDh@s)q;KTl!m>KX*qfA0$_q!K4dDxivcwXme zLtan|d8uC~>y~2te21rzv$-D!jQ67?c>RbqSemvZW2K;7#0~!a?7v5T?e;4Q!sY_V zeWZFN4}x%Mg3^yn;|$30^;eoy{#xoreP0frHkld4opEj)eRxEsPLC_ zjIeBm@@oh6-pZB>`ma_pI+ll-hp&HS_lXppm8cS2!}SnK&v9M6*pabD(6xC0{BTOd zNX7LShp}&j_xOi|uR^Pp5i;0p)A}myo6z&9mmDyiCqksLTqlj?jh@oe{}@XoX)Ld4 z3H}@Byg17!IVw>6*9~&kV70?$@yV_`3}Exk{Zw@^1Tqxf6(PS5?yvVeP`Z0mm&ZN?uPn5 ziO!c6Tr^-3IeB_F9o{?o49)?g9x1mPkO+?K%Q)T0F7fCs$ND~c89th00@TE-C(m;p zLTU^Y-l1j^n0XvC)4IfF7lnqcf6Oq_VL;-VuW*59GKhg4JZhfJ%(MFi2RJlAZUCMp zIEjXHgSr@wkeP?e$|laQmNNk28s)wo`FNB&(CZtg&q=yUn=>qjkzr{96H42(b)Xt7 zXknDYmED6ky+c|iM!x8{rlQ_vB=!j zCNapzTyo*E`R@`wp5Dc3z`qoy<-%cdy_H)-xX7sqgGfIbAqWZzI$IMxoNG^7f|~^+ zSp#;6PVOX_*onO%3V-d64VG9~Bv(U;?~WF+8`dT)O)>Ud@WDxXHrIKt(0D1bO1Wu< zvPtTW5F4}hxlm#DPfui&$i|&g2*R_O_6K$w!G4Rfh}2bOv8rl_y{y@ox69hT954m$ z*n7K~BY8et`g|6wPKO2L?1bHvy-!%VmGz5J#-_NqI88n^XAIeNy}%o8 z=$aSIz7naIsL#=8r}~@Jh06wDU?mfA9se<~A`URHW9EJ`TLaS|b^VQ)N62>9M;Jg8 zUHr8`zwM^Ym6dx&k{$FBO)jl7tjP751;Ga^OXw>?#>Ee^X7ICOLuFbSp+Zi-ISfU` zFh`KE91D8)k+r?!SvAA-Y^rf5r9GST4P{SYU7hM~oOEB_TTtEOc@k_btpFQ9haV~d zO(#m02Os>0_}f_eXN;grMM6gw_idhAp<+OmBi?k}-=SadQ4OT)_Xk2pcbYbjt}p-q zLKaDz&@0{uWtl6rf;T0)VmpGao^CWwxk{yCIA40^%$Z5l^1x+p!uz9q+KmVSL*;N| ztwPfHFW&)EnVJ#z@js^W;wdndXW#j$Z%w5d=w#U&QHj5%@+fFhk5_5<*Hk_PgH>=W zHpp?K!W1A1Z&u+Z(=)ga%R`(oMS@|m<~I^1QApif2A)c*FwYvob z*wZsSU=l-1l%R(;CySOeSr_RS$+jnwLmhDJuT!6et^YYYeie)Wu(f1yH=?Brwz%nV zO#Y7-WY5?B)B?byzf5zQItnGA3`!%UJ(ng4DT*(@Va#5hX~HH!ndH}2Cm)mGp9wp7 z?Na{I^1DC zy8VjnZZUw$_4xai5|alv&y^hpJ11uPNu5yk|C(+G*N6Lh^$(w_vZHD^&>h zS*sC54mz&K3;x2gh^pdF)-H-mI8XB^?5F=>=6K(1ny<22L$)Ln5hrMPCS5IKvbeHi z`L(&jpVs=yODS4TW^@#0OHmBsr7#B4DB z{~0CjH6ZPfZl@0YodwSz?U4Rpp_4mJn@0`+qC-o<3~~LZ8twE9y3t^PRZFvV(r%@{ zPiQ@;kkJY(FF1kiko zIxU+5>5ganz>a);q3PhE?K`(0#AC9znjGJaK5gu6mJ-c#^K@Zvys*Qs&s2R?Hr2Uz zBB6In?_=PsTn~TJ!NzqdQmIM&Ec8ASMd4L@!rseb~;a03D>$C8tZI^ zo{iZ$InI60SvpQQUbEugKO*i}7ybzC9j@^5jce&6@2DCn^Jv>k_kKNKmbCR3U;>K_xYL)Uyx5-1bP+D@+n_$rVZPea7gMP+B8i#QA!K1s!q4436JVYeZvO8P# z`L8c#X4BafiDuwhN$f#Z(zP6vBqaCY%y){vNMZ|DeE3NQaDuV@M+yw~7rrtngi9^< z+lLkQXi#2ZjL=)dstFMPqprf_$CCh9Jiv>cBTH%sJ+`^daBls)v?-VplDhN+P!k4?S{WKVEZf>>yKoLR>h@XnG6tP4VSKh30dNlQY%{`?6Z*haLonj5rb>>#HiRu0u`Ny6ZV2>j|6XoN{OG-5|Bwg{p9`m!w(y@g zxICg{tYwElcaHi<3PjFLb8~Z*I9urlL;~$0=#t)9jqqcw3CwU6wShBiwvT1?hddrj z2DaqgKVTs)dkQ7zXstZ@@M(X&xGP>-?|s7?sK~p9@D{-3|Ix9){Gz_XK4nwZjtGiwCnLg z`M5Jc)BfEbmjt;z-D7u#q`qa-yZ(%d?@af=S~fhQ!c3^cPZZOAWd$aOA=abXDF1_) z9CV@!t zfjNF?R(bhSflLk`bu0eE z$3FV6KBZxbt@gzIh+7*SVHffye66y!4L&Jy%hnd&!*iH4xN@K@K&sn0h?@+V)Mp+N zM5OrCrnq|tj zNy$53^8vN=CbD=0Zci3NJxSENIZU3|J&}hgurodvJX6v)u5 zejS#>A|^_3{vhHrQ08M%5#%7<4&f>9FSYz;7DrSTsG2;T3X^o5jkJRe@kzSQVXRMJ z$|Uq+zQv41stFt`g}9=J&r7OnNhBl=I`XzzUf_myM#O3=*@JJbPmj6(1pQr(bU2#U7em9XU z0h+Q4bN^-|2w046@Y3eqeL@oB%lzU;c3)1~=sqN(>V8H-h!aVk`6s<{SOyw#h;e;pWPB=F>6t80!~qAXxnTL8 z|8`-cM}+{ow@y*p{!VS+LAJBaF#S_n88xTYt47E;zvr;5)h63s{yvce$xonPeKf@Q z{tZ0b`K`Dv)1t-d=O~5MB}Ix<1Y|)Z>sER(oR&q3r5y^>obwzxRS>?IS3Z22Gf*}) zA?x=NHqZ8lnGXx!jFe+TkO!P(K>XGKKVjyRywogMef^~8;;GShRD`!Mv99)r2?##s zpoi(T?<@y0S&n8pcNC9dL6qO@~L{ohh5 zKzdJzuiE6a14K?6K{so+gnAtx&voRidZe+>(2+}xXngztaiRUkdwsRh$boWOm!asi zLR7afB(S*o<7 z@0dUpPUu~?pRh&T)2ev6?&(sZQIIP6DnPQhj4OYO3wa;|_U|FW z!Gh)^F?}qF1Oi0+s>cUt_pD=M)?qk0Nqo!@oFG^yxGuCPOJ+0MZzvjJ3AW18e zq9LC=G6i5lkNn?1?6@9h>@#}a{pXhsrM?rEdJEoD>2Z@~exgfgS&s8}hL3+IM!pn` z)i7_hmu{_dd#mNvZ8ubQLt@yW8h(RDisj7Nv)?lE7YreIv!w35~7N}LGIn>_%#v905NyLYu0XCul1FD%GL(*X@76ZW{>&X4u?CF@_f0%6oUHP*)>&-EwZiV;X#3 z`fRr)ImE*WAyXT|t)H-;-)OaTan4cWcEIX*rGmQ;A^xY3P5+9_jRNZ~&0+5e8(>jQ z{!|H+R!lXzwftS<0;lm}-vl$?QeV8nQ);5C^U$SJVg*|(UMAu+BiIOyj69unE*3xd zR*nMG*-2mhiOA(WST|I4qrVLGHVB8eC`ofjSFMu5Jng_VB-l+AJKt}9hfT4iOE#L8 zC`E~e*9Wa%`qraaeRFDFHrxAcMsW^zopI-9?|?lEg-GNB{gP>x0)`quY74Wy^Rz#t7 zp7vZ%gX9+(KlneaA00-lZdx^7V(f;r z^t8%6<2gO}n9jL4l}d*(r%Hvd23$6s=D>|{`||oZJPs!KLuXdfDe^`_`7;kbeC5QN z7Cgsg994~WX{;sgf2}xbNRbD!Wz4MiQ-8K~z{)?JhTHW%e1c}Vlqnc>HaIFe`WE4C z5IuYB9p@91#r>C2xg`&VUdP-b$;kr$&r!ziH->>==|g*XR8ohDS$QM|yUj7HsH$Qt z;qTqmpc&~aG#GY?Xn}wrDK51-Bg-e5-OI+FW|7+2!117A)0M4d9MoCsLe7KadcbBK zn%A)AzluYM$x$xC^l+B#Nr(rZ7X%yqpT1nYD^i>PyoT`YYJr?jSW>MS9%C0g3b0~o zu($hrnXka6sQNNiY`Slt2h2Y2Z+!yD$NqSY_Kzf|fX?od3-%EBqT{%Ny zh}`Ho*Woc83$_xAa0Ilrs=+3)`UI4|;0OipZTKq!tNzzxlSduvUY#R>rT(E*Pd#R# zWvYTI#2QZ49hBiQ>z)<~ROrsuK@Qh>rzz4PSoo1=8-0LJ?gz?lJUDC-=T{ZsSC#BH zf%@Qw;Ns-0&%Cv80o^QaB<2I^T2#z4C&5f29&0_tKj5DPUwieyQZNb=DH9nrwI_d{PTx@=^nlXKn*ZHV)++sZ{&iF}b+b5P%7<0rgp8B>Pj|G}ZK)Q8lDDKc^FTrh^P@JIzpmFu55?bRBoQ z)XJOEtaG`B^1A%SDJyTu2ysT^5V9JHw^ng&m_;px#iHqnmu!+l0tRJXIj9y|?31OZ z3$W;7v*y=280-%-2fYHBs$9`rd5BqWKJk2t?F$p{Ebcm}W1DzYl^(iIsn=MKyst1Y zxBCb@q4Xi+?@Z0{UQ58!U=M#vu^H*@wQvp~_Zh98Z_pKj%p4zrGPAcw%WG8BmfH=b zLEQ?*Gwy^)$Y><#?ayH$a|;{@0tk!UYdJ!uK%^_b4LhO`_HDwk?z>G3t@A>lzHo+G zH(yLEpSaua@I!T?=TzeaYz9X@^5@_zg2KYH(AO7oe+*2IGfh)cjjIh+B&*j3ns>M% z3T#l@I-7^b(_=1ojH|kIt#&?L~n0 z?2?pgJs~|^uk&u@#ZK53%(`aOap@WLU4s+nzq0>WC9tdxKTsG79_`c@4rWn&wI4vZ z!j@&XSpB0Y3)NXo1dUCV!UHL{OD*Z@#}T*Dr|-`)B))EX_A zHq$X^(YaxPFi`jk_#V_pRIQCTQK{rp_Znx+EVTFtS{KhK2}8UK=GwJyATl*!xfX=^_v=EpfJ0|`$Xw+?t%tOtoo%6m2+{H_GY7J zNfyY|*?lNc|NTyu=#Npg2(Em=2iK9T3v7J z{+b2756?A3pl{H$C>aYHaWLJruhWmdC>R!{5@pVL=w z)`r*nJ$?}1w96dA9<^NPZo*!g#iGPsDUNz~kim}(2v%vrMXa4lK`~;vIBAl%%NTYq z)v2nqWMZnO>}%a>Bq&czX$Wt{k}opmb0;ShXhILzmFb~#bOoY-FMcY!0e+VoMqH9L zTsp|OzpBHpufl!d9cCK&-2A3YlDOJQ_Di?p0&I}n5Axb(?LzaC@B7HFnGkQSoCAui z_sU|dts(k*Yj+6c2}9=)0prK`F(KT`zN*zujp}s$m%4zTO?T&-H&NdIlH z(s-(DP4w)INe@`B+ETgZ2x55%e&yU_*~gQn%8`-=ir zmj@-rfhkor>a4AS^V^A6i_aY@BcLK>Kd}0!X+leU!ImR6UQxf|VbS6gN&v-nl11UJ z*xAXB)P(%!PT}i_^}1`v+FaYQYsCF`lUH)ESfWiPi@3GAL5AJId$k{fu)?K|69ScW z-8a_M71_ut0qlaF6F9MH4c(Ag;UGu^8uOR<+As;pd69e|<6i#*>Y~S3n45olnQ9ct zt2OlVQ9Isp%K~9oYVz~+l&6M|p}M-dXp(wTc(_Ryg~ydLcR9c?K3*BGPda(paL#@| zF%OtcGrq7lHHM!MLA@TLUS8|i-wa!0j3kQQmobk}4M$su0(1l~E-x_51D1$_&4?|#X{ngVr0 z0kh^uk#EB? zv|4$Hb8MCuJy{H+Md5Cw1*}@;WrVwdui25;c3%fp{^RuV|z&wcw|>6Fy9Ca zD2s1|#4MI#KRE%QBTXC*9{-~WfraJq^FM%z091mv$(WxxibtbS`QC+Ny*jL@oAu z>@D8(!96~9Z0dr&^M{eR_`}NDfOI}z5<0M{40Y&lNt;X*zZn;(7;EnH7gt+}CDzyaDx|14f8{O%SVJ!J*@BB#1S4 z)(18>MR7Z>T6@Yg4HLTXdx_|n6*SA+F#09!-w!GA(h4{()#&gWEbwW_8u+Bm=^L-B zpqcruw?&Ou#ji*>Rp`U%m?f^uEdS;-Y|{uw2(RX8ys8frdBB$W$acK;bxXmr}q(x zlAA{Ut9f=+Hyi4t`lX(>7#C{JRf>5Iy{qg|EVlB_j1!5@qc60+Wa|}k-Ft=BFvoW8 zZBK$nt(Z;rC2LJ%H0sB!y2=g1^kzR%DZ5J%bA)mtPyoN*$h+Sod6#7xA&8wG(yKG7 zYAKP>80Zm+g>tOFcO8yZ3OO+idGd>4mcu7(&d{uJgxiVT!b=KJ@x`lg`)v3Pi#6M1 z*QIK!O~)5FZtoEix%mjSKjP-y#q>mwcc|0ubQ=s zE4T4_hSK-?A?O>E1ExY(KJt&YCRvWdEt&?3{jn_`Wn-Uczdz~`Mu~s;QD`QD5|@FO z5EMs01_b>YZ*LEV#~N$MB+@N!S_+FMs&#~wwv*n%Ry^ZZARzLxi-O}T4CDXNEMOp#`yNs-Cup>@uJUj7}e{dcf?PqI)j zA_aAGUs?A>4_S044#}?b-$*E3oQz+;fztW{WnGQ-y5t>bdpDfqb9l^?JnAyr-7QZs4C-l2+e@O9k7~Vj|FNIMwaBSKgb%u1j~wrK@zJH7 zC=MPs07W980dn$;{<9I~VGWG05Y}crj+b-|kOdzBA5n(HD59wW%W_;KH648@&E&*z z`4*=|Oz?wS(3p}P9C6Z`Y^~K1*+m^K#@Hw%cc8} zc*Jink%rIu%aFDt%DMtmQ}OZYBah3IsK{8X8j7IC<8k;_T)FAYn-9hpl(C`hb~7zE zAs&bAA;6sdx*MRPRVkH$7up~QNoZn0!x@|MMGZM8gHz4A#bs76;p*!_3=H`()zem$ z2n+G2#^ltwQKpAIcyKM`wKLJVBgeL3kv`2O?{!ta0WPW7)GS*d=rErs3p`g}!Mttx zJO8(qcxdDO0N`^lVflGbKLJk7*|f)OmX}bJANN4#>@}17EGX z*LRcDEbKV_AF~1CkyE0F=EvzSJ10DFp~P4fSmihOT*OtB#2xf;c?H+{3BniCyo1z> zTSeI2y`MUUgm~k*fFpdx{PYHWF-(zY?O;|u%N3``L&s0|stp~zI>dUlHdoB&z?d-O z%<7Et2a;pdhp%ggA#pHV1r7yz%t{G-krWFF(p0$<$8QJUne32F=cO%+fx&gq?6 ze`7?!jKm#G%RyIIicB{a-T&$^ou6wE#YYO45e><&(gpbj8O^|UY3wn@g+Ub5eIFfq zRn}CYA3!a*;+bx9_goW~>hWq2eVupD2K(8Wv3KbWlw>}6{*ub;60>$*ykJ z!R}Lvj|SeAk`OS+T-&#w?plD-oO?Ihd@qk-)%#q-+AD_-9}d2QWg{u8L;f7Fca3l* zA_1EQkwzrsXEm&F3c6Odu3ctlMOC1$t3ki8G9-$4E zFIPoK5T&u8c+$`h2(i#%&=f+F)=?`I zO0U<_tTUe$2Ya(`0lR!Z>>Aog8jH;0n7^j?d)c3+O>8=pT~deZB6MTUpOS~5Y7iam9K+S+o>M(`BpCT>+sp=a`w9m9!YE^nQ9Slv=dg zIbcg~w5GIIpU9wg0D&*p&u8#}eW1fuHNNQ#3_cZx*NpJ2KT9Q)lU8gCQ>#Zk7{;(%SCo{;iv}Bn4 z%Ft@EZX%@vvhh%XOVU%uW>~DxYN~%ewQ{(uu&^4RZvMOWM?=dl3zWcG`=h(o0~f<( zEC}@ZhR;;@({-9r&e;A^6tb+%&{@13VL*@*ts&19dvVb64K0f6h+$eJZWf{}B!eUH9HQ*hWYuIkhi*yH>yE;*{x zTkRM(m(ueFn{Ipht?gNpx-Pfu?o7^U74&$sgt>5I!BWm|;;OqNHsp}@&>{E@>eqMS zSLoOz(q5c`ePTxHF%4~oS==@Dx!-?w%E`(CM&~^@#}y`n3AfD=#hgHv4bus0PC~TJeMFVTT4!;w zGU2p>dxaZ~E9~zX7C^YKh8sIxHLFKJxi>Nhj>P0R9{S5;^@&51L4FOyS6qt#ner{K z>X%UkT9Gj^W~(FhxsIPC0q9m7hg0R~--Q~=z%0+|19eW4`ZvBcNkj(ba<{h5+Z>2J zZ@s79RwT~mf4kNK>Rpx=EyFz%r|a4$sN3QlL@YG+Ju(i$W@VL6x@^X+Gu#A4RPgwf zD@*U^7v4M*Kx8JqA@Re0)0dx~k{-mvUy^A^!ukJ~rk@7wAnS$(c(Y}q0MKYL{8^Nq z^ejIq_~c9}05Ug!S}rj1T*zCR5M{8UjU)jDe!!{Rc{#m+-x0Lz@Omfy6KT;nS zyr!3_`4Rhm_86u&HO!47RcBB2yvPmjB!{_04j)v4Z8V4z?g=EtmaWYBXvPW{6_v+`VENKnPdgv|LX!yhSMxGsvtr2U20i!gyz7QsqlOx5!-W@H z-Aq?>^h6yJ?F#FD`t~g+E1!(&E0Gm@*|1_$?h-i>NWYLhQ0)qpBDRzin<{3%k#fIf z3D4)^`)mv|GAwXeVB(MVoMRi=bdDH{6L(j4PaZZcg?T$xY@$WTOhyZNLfb%3NfLp?!DzgpG4Nyq*TIXKTWY4E=}o0fR3^Ph)4r0au)<<~wbm5H4F>N8#)O z0;ss!oi`(^G{x3d)#%n9bDTc9>U}C91|fL$fx99xjie5AF&UBzHj*?1d(hPNe{Z5| z2apeKl*ZPN;1{gB@X2r<7Yn27{fSw4h*4$Ww72w=*sZ_&K7 zj*}qW=joR%|$u$;e5zbjbS&S{FDn#!~4K3q$j+ty1tK zg)6ib?L1>(sZ_&_6D#yf-U&VWbQ@|8FVP3#o20r_riyW{MqvzQq8yhEr za#~r9_4W0OC(04X6dJ)x{S-79dXLqcQ{ZbwMiU_NH}XYHj(fL0O;WOpb8Adi4)S#l zi$MZDy4-f)tXMf3N$mi|fFPF*;A6eSucE>`<_ary7^=els8qxGPMiakX0N;EVNZx; z8_;77WPm^Gz3qU}(%cZL1mW0XnE~T~W!u5aN^33=6ic&=Wr^<%^6i|pK0u}e^FywY z$t}*T%n@CwNL2(qgpiV{% z*Lrw#Q}AUvySgGE#nyce(6g1qVT|}*#y|jG5l=NWm`ipr)T$_u4llTH=yIsm@3AgmP%4ww|WccdM12Rtf%^l?iA_26VrrL5VqSy!fa> zt>?64C$jG+r;~Uu$(|P~PS;KHEu?%xj(v++n0iNzK=+j>d*CXSZL3S8=qAv83ki3< zZM2|E=8CGSFVgaFPh%tpawEUIgo(DLo?Eq+TAHkPa79-KO9MU}f`y}p>+-p?aj~GX zD4sPr=`i>-oYvK+p95+mBVT+w5+-|gw!bvO^ov(}dME-&fEogUg%m&XQQcw&R-!DX z=i{k@$JDuGf9y#8itOwwF$0eNZ@`*KOzL!O$(Dc10qb{-LyaHMsIZM3!QUygk65hD zfLX*KY)~f_26%$LDFppU2YyeP^U(~31qIcNswLE&~8ZjwtKVLQyB zqN1Y20vsorvW_6{CsNGVM^QDFf67@}2Sn!RVM$T?(av99=w+s~s}a>r@fb#-nfRZW z<^mXDMvoEL2UkyCPY2+(fOnBn9&+O&<@S~bxd$MCgMR2m>|b{1jop1&9^|?lG4F6a zNRIcuk-6!g;{awe0vk6o05f)(S(a%h(s-r!4yDT2>E!4}@agb1gIw+hpqObfq+Utf zo8a_WB5%BC%J~KoxL+GAq(G=FDds}INJwNvBq}N@M8;?dx_(^jP+48?H0 z0@Jv|HK&2viGaW2fE7@Q{5ARHAeD(d`WfY4O`Gch@=ai=@3iOxfyQjInLq}Ts6nQO zggDcG1StGc2iN1G4WJ(DTQ-6kmYY{N$o)QlzN#`%sM{tZxk5Dyc0#(#5alUWl_TT~ z_EjX#!VCng)s-Eou!l?@u#Wv)DLYwCTiibM@H6djV`=7;tIrRI78iG#02%S9Z1Nn5 zx_moH(cm^p%>Rlm1tG|ufQp73Z-FcV6~m$~w=1RD(jdx1J4?5D$oD+C!>J1%UDqlr z4Gp|MZ>3LHwE&X+Op4q z(D?q`VV~PU>Ngpl;W&IiXc+Q`nn0|Cv!xnB#ub&3agG2&7otE2!?REP_Eg*l&VY#N zg*HizZ0-CrhE;>7M69&o_1}Qh0YQJy3Gsr0KqCO_fIb1Dr~Zdt%Yw8i06#b_5}jjH zYi2GS$3{m4?5F<*^4Dj+8xo#vEPyX4sD+WVRb^)QYddd|4X}ZM6o0#(+^m|V7wg<< z77tisJZSTyLDGK1;G2%*-lMm-d}V~$!B=r#o6?#J2t&#sPX9B>P=^rzA7}X#7swI; zakH#rjHrN{KfM`$>D_}EZFNQyRC>YFG$iKyM{4c-8HRTGHT80*@CoIExOiKvV`bT_ z#5Y$-m*tsMGCw)8%>ZIvnd-Rn>q>JoeFGUu)F3B_l&V_i2s}Rj%#-pbnTu7g?)ys- z+hA3!TntSdJ|M{W(72u-q_p*1F{aKv-k4LeQs=&EmhVnKY%~K`kmnliih**@J1pP#}Xi)l{Tu~(NG8Y zfIi7{h;}!Nw~v;)1ne4Q_b>cmO>(6433=b%{{Rmh;dbC0{w$Jw^J1hbhi14B2m>qb z#~K?M0n<|JLXmr=QAOCPMt0kqZ9A0*7?{8kjGDe?KC^obNGYs;I3L)-2VMf~Qh34P z@b0w+9rt4eW1H};7uY;^nuCF-5eiicfnHE)2!XzWY8{;{0wfs?eYvyucO`dj;~OoIt>Nn6*Q#;E}B+yJsn6u9S#ge#?= zZN=4Z+IUT%hHY@||AF2?4>PA8 z{Gl?2eSjYBn;f1b+f5Ik*aJzap@W(PZjcY)d7ym28#b2BB(95ZGJ>ZoK?RhUgqJ&B zhs%l|*pS9qLDAtRw$rq!r>lpn+pM#OL!{>dq+N^tP01HQ>c6bgS%2HDCHB1!=2Oy~ zkNLpAyTedI>Z*(7S3cmX%<-SwvnrIy$e`m==gd{FG-UnXr3SmkmYF%#+f z5Xu3Y`b4V8u|s^|XbB(!J49vb#8x{)0_io5Mw1&kR{zwzM$Uj4QGb1-VY9@AuQW+- za~z%&*?y?pUVs?{N2o?HyIynPDyeoy^v6opt!pnEfekmB@oMi5eQbA(0@RX#eaP^o z+iYRLkv1)aYR^u`!@=GQ~eO$+W&fzoHgKvVIl5snYMZ}!U_h^ z7O$qXIe>qR?sGOtxk+RuY-Zxgt&;AAR+^{njN~4u+{3PPUHz|Iy-iuUyUax|2~Op` zd)fA{F6|*J0}rulew5m|`P|E!$SdmO_UI2>C8f^1PphQcp4P377Lju4MaTV&wyyPc zB$11S05jF@D*+73A+4jc`6Sckxp_`-FJ%06#7>uN{ce^+(KIO8jiEF zEJh1#->}30tc?8P%U{t;ll=b`w#rbL4z{C#I!oea6^#$zJ5G2uk;H?WRe4C88DM-F z`8D$PbJa9d9$I#8qDNDEh8nHd|DAjKjLq+p1!Js`S@Re5pvmnKnmGEkL~(OT6W_Kf z%j5pVy#SvuB~coGJDvANey<#d42eg5l@eCn=3jmnXn6yHr!`S*Ms#R$jN{c{&t*!3MMiI&;&Bx5_(_e&IWZp|IZpSXLXAk8| zm8Z1XZu=ng(pEYg*1}h>p-Wr%1Z5!DLC@21%n>2s+&B&x%%p)np22bEy%7AB5N{~3gDD}@k9=DYt@$XbTFYF9k$2D4y5k#>Q1;N%wO zY6GYoy((`0xZ1bdjDA*zsEnJ-26Uy)`#g`6K zU@-Mq2mPT=5{foNKlVLS!Q!r4@*fg|Uo+*Z3a@UB+d*7-{P;@LEAg%Y3*6!LMd&r8;Yu30?@fw{LFOyV3|9O|+ zaT1e)AseAnz#YQ4uQr+Hzh+{dBzTR?Uq9YtZVc5VGI6z?WZq_^atCRUN0IGxlR0hs z>E=EiKOupp1bT^3)lN_(7XQ);vSFWN8# zW)L6#7BcUx-ChR->Q~&Vu*VK(kfN>#Sj{rBun$_+aUKD}y!yjRt-9*oKP$0$CyDJD zy|w@O$-%|+Chx7ZXK%*(1)}X^bJ{IT>kv*1f37}|;Y;XjpX$s&YU{>605O{Y{ z*RCH`zu&f7tdTYV1JK&nzUMvs69XIpARarjUfWLnk`a49UwKGkE1U(w1t7m!^1tBS z_F(?>V!O}Vt5yhvEj`x|Eqj1|?h6ALwrvg-;wwjv-}j?%tIW;+ z|I>F~>*obnZ@btj?yVm9c>(0v&dm|DvjaY7_=+^5>E_Rcy$M)-vOMb8dcpF4dBw)d z{3c2KJV`|F564~y^hK=J+^L4-D;G*)fy63pHCx#U2ABk|{2J?{zCY9aUo`uFXpYFuBxAW}IuOLZV_5BO72RKJ>k#l-*r121yU#{d8T literal 0 HcmV?d00001 diff --git a/playbooks/trustar_enrich_indicators.py b/playbooks/trustar_enrich_indicators.py new file mode 100644 index 0000000000..8567500036 --- /dev/null +++ b/playbooks/trustar_enrich_indicators.py @@ -0,0 +1,210 @@ +""" +Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as "threat_intel_investigate". +""" + + +import phantom.rules as phantom +import json +from datetime import datetime, timedelta + + +def on_start(container): + phantom.debug('on_start() called') + + # call 'indicator_reputation' block + indicator_reputation(container=container) + + return + +def indicator_reputation(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("indicator_reputation() called") + + # phantom.debug('Action: {0} {1}'.format(action['name'], ('SUCCEEDED' if success else 'FAILED'))) + + ################################################################################ + # Query the Indicator API in TruSTAR to find threat intelligence scores and attributes + # about each of the indicators passed into the playbook. + ################################################################################ + + playbook_input_indicators = phantom.collect2(container=container, datapath=["playbook_input:indicators"]) + + parameters = [] + + # build parameters list for 'indicator_reputation' call + for playbook_input_indicators_item in playbook_input_indicators: + if playbook_input_indicators_item[0] is not None: + parameters.append({ + "indicator_value": playbook_input_indicators_item[0], + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.act("indicator reputation", parameters=parameters, name="indicator_reputation", assets=["trustar"], callback=indicator_reputation_callback) + + return + + +def indicator_reputation_callback(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("indicator_reputation_callback() called") + + + format_note(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=filtered_artifacts, filtered_results=filtered_results) + indicator_found(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=filtered_artifacts, filtered_results=filtered_results) + + + return + + +def tag_indicator_with_priority_score(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("tag_indicator_with_priority_score() called") + + filtered_result_0_data_indicator_found = phantom.collect2(container=container, datapath=["filtered-data:indicator_found:condition_1:indicator_reputation:action_result.data.*.priorityScore","filtered-data:indicator_found:condition_1:indicator_reputation:action_result.parameter.indicator_value"]) + + parameters = [] + + # build parameters list for 'tag_indicator_with_priority_score' call + for filtered_result_0_item_indicator_found in filtered_result_0_data_indicator_found: + parameters.append({ + "tags": filtered_result_0_item_indicator_found[0], + "indicator": filtered_result_0_item_indicator_found[1], + "overwrite": None, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/indicator_tag", parameters=parameters, name="tag_indicator_with_priority_score") + + return + + +def format_note(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("format_note() called") + + ################################################################################ + # Combine the TruSTAR results into a note to pass up to the parent playbook. Build + # a markdown table of results with links to TruSTAR queries and select fields + # from the reputation information for each indicator. + ################################################################################ + + indicator_reputation_result_data = phantom.collect2(container=container, datapath=["indicator_reputation:action_result.parameter.indicator_value","indicator_reputation:action_result.data.*.observable.type","indicator_reputation:action_result.data.*.priorityScore","indicator_reputation:action_result.data.*.submissionTags","indicator_reputation:action_result.data.*.attributes","indicator_reputation:action_result.data.*.safelisted","indicator_reputation:action_result.data.*.scoreContexts.*.sourceName"], action_results=results) + + indicator_reputation_parameter_indicator_value = [item[0] for item in indicator_reputation_result_data] + indicator_reputation_result_item_1 = [item[1] for item in indicator_reputation_result_data] + indicator_reputation_result_item_2 = [item[2] for item in indicator_reputation_result_data] + indicator_reputation_result_item_3 = [item[3] for item in indicator_reputation_result_data] + indicator_reputation_result_item_4 = [item[4] for item in indicator_reputation_result_data] + indicator_reputation_result_item_5 = [item[5] for item in indicator_reputation_result_data] + indicator_reputation_result_item_6 = [item[6] for item in indicator_reputation_result_data] + + input_parameter_0 = "" + input_parameter_1 = "" + + format_note__note_content = None + + ################################################################################ + ## Custom Code Start + ################################################################################ + + import urllib.parse + + note = """ +| Indicator | Type | Priority Score | Submission Tags | Attributes | Safe Listed? | Sources | +| :--- | :--- | :--- | :--- | :--- | :--- | :--- | + """ + + for item in indicator_reputation_result_data: + if item[1]: + # for the first column, use the indicator as the text and the trustar query as the href + trustar_link = 'https://station.trustar.co/browse/search?q={}'.format(urllib.parse.quote(item[0])) + indicator_markdown = '[{}]({})'.format(item[0], trustar_link) + indicator_type = item[1] + priority = item[2] + submission_tags = json.dumps(item[3]).replace('[', '').replace(']', '') + attributes = json.dumps(item[4]).replace('{', '').replace('}', '').replace('[', '').replace(']', '') + safe_listed = item[5] + sources = item[6] + note += "|{}|{}|{}|{}|{}|{}|{}|\n".format(indicator_markdown, indicator_type, priority, submission_tags, attributes, safe_listed, sources) + else: + note += "|{}|Not found in TruSTAR||||||\n".format(item[0]) + + format_note__note_content = note + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.save_run_data(key="format_note:note_content", value=json.dumps(format_note__note_content)) + + return + + +def indicator_found(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("indicator_found() called") + + ################################################################################ + # Filter for indicators that were found in TruSTAR. + ################################################################################ + + # collect filtered artifact ids and results for 'if' condition 1 + matched_artifacts_1, matched_results_1 = phantom.condition( + container=container, + conditions=[ + ["indicator_reputation:action_result.summary.indicators_found", ">", 0] + ], + name="indicator_found:condition_1") + + # call connected blocks if filtered artifacts or results + if matched_artifacts_1 or matched_results_1: + tag_indicator_with_priority_score(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1) + + return + + +def on_finish(container, summary): + phantom.debug("on_finish() called") + + format_note__note_content = json.loads(phantom.get_run_data(key="format_note:note_content")) + + output = { + "note_title": "TruSTAR Indicator Enrichment", + "note_content": format_note__note_content, + } + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # This function is called after all actions are completed. + # summary of all the action and/or all details of actions + # can be collected here. + + # summary_json = phantom.get_summary() + # if 'result' in summary_json: + # for action_result in summary_json['result']: + # if 'action_run_id' in action_result: + # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False) + # phantom.debug(action_results) + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.save_playbook_output_data(output=output) + + return \ No newline at end of file diff --git a/playbooks/trustar_enrich_indicators.yml b/playbooks/trustar_enrich_indicators.yml new file mode 100644 index 0000000000..1e86c63513 --- /dev/null +++ b/playbooks/trustar_enrich_indicators.yml @@ -0,0 +1,22 @@ +name: TruSTAR Enrich Indicators +id: fc5adc76-fd2b-48b0-5f6f-63da6423fd63 +version: 1 +date: '2021-11-24' +author: Philip Royer, Splunk +type: Input +description: "Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as \"threat_intel_investigate\"." +playbook: trustar_enrich_indicators +how_to_implement: "To use this playbook as a sub-playbook of \"threat_intel_investigate\", copy it to the local git repository and make sure it has the tags \"investigate\" and \"threat_intel\". To use this playbook as a sub-playbook of \"risk_notable_enrich\", copy it to local and make sure it has the tags \"investigate\" and \"risk_notable\"\n - To control the types of indicators processed by this playbook, change the data types of the \"indicators\" input\"" +references: +- https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html +app_list: +- "TruSTAR" +tags: + platform_tags: + - investigate + - threat_intel + - risk_notable + playbook_fields: + - indicators + product: + - Splunk SOAR \ No newline at end of file From c27358b6a933a700450a4a25dd43a5e7a4084f47 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 13:24:37 -0600 Subject: [PATCH 05/16] Threat Intel Investigate --- playbooks/threat_intel_investigate.json | 629 ++++++++++++++++++++++++ playbooks/threat_intel_investigate.png | Bin 0 -> 609569 bytes playbooks/threat_intel_investigate.py | 361 ++++++++++++++ playbooks/threat_intel_investigate.yml | 19 + 4 files changed, 1009 insertions(+) create mode 100644 playbooks/threat_intel_investigate.json create mode 100644 playbooks/threat_intel_investigate.png create mode 100644 playbooks/threat_intel_investigate.py create mode 100644 playbooks/threat_intel_investigate.yml diff --git a/playbooks/threat_intel_investigate.json b/playbooks/threat_intel_investigate.json new file mode 100644 index 0000000000..8fbd06b8fb --- /dev/null +++ b/playbooks/threat_intel_investigate.json @@ -0,0 +1,629 @@ +{ + "blockly": false, + "blockly_xml": "", + "category": "Use Cases", + "coa": { + "data": { + "description": "This parent playbook collects data and launches appropriate child playbooks to gather threat intelligence information about indicators. After the child playbooks have run, this playbook posts the notes to the container and prompts the analyst to add tags to each enriched indicator based on the intelligence provided.", + "edges": [ + { + "id": "port_0_to_port_2", + "sourceNode": "0", + "sourcePort": "0_out", + "targetNode": "2", + "targetPort": "2_in" + }, + { + "id": "port_2_to_port_3", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "3", + "targetPort": "3_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_3_to_port_4", + "sourceNode": "3", + "sourcePort": "3_out", + "targetNode": "4", + "targetPort": "4_in" + }, + { + "id": "port_4_to_port_5", + "sourceNode": "4", + "sourcePort": "4_out", + "targetNode": "5", + "targetPort": "5_in" + }, + { + "id": "port_5_to_port_6", + "sourceNode": "5", + "sourcePort": "5_out", + "targetNode": "6", + "targetPort": "6_in" + }, + { + "id": "port_6_to_port_8", + "sourceNode": "6", + "sourcePort": "6_out", + "targetNode": "8", + "targetPort": "8_in" + }, + { + "id": "port_8_to_port_9", + "sourceNode": "8", + "sourcePort": "8_out", + "targetNode": "9", + "targetPort": "9_in" + }, + { + "id": "port_9_to_port_11", + "sourceNode": "9", + "sourcePort": "9_out", + "targetNode": "11", + "targetPort": "11_in" + }, + { + "id": "port_11_to_port_1", + "sourceNode": "11", + "sourcePort": "11_out", + "targetNode": "1", + "targetPort": "1_in" + } + ], + "hash": "75eb82d5a8ba447e780d5fce7569bcacc368b579", + "nodes": { + "0": { + "data": { + "advanced": { + "join": [] + }, + "functionName": "on_start", + "id": "0", + "type": "start" + }, + "errors": {}, + "id": "0", + "type": "start", + "x": 19.999999999999986, + "y": -4.618527782440651e-14 + }, + "1": { + "data": { + "advanced": { + "join": [] + }, + "functionId": 1, + "functionName": "on_finish", + "id": "1", + "type": "end" + }, + "errors": {}, + "id": "1", + "type": "end", + "userCode": "\n # This function is called after all actions are completed.\n # summary of all the action and/or all details of actions\n # can be collected here.\n\n # summary_json = phantom.get_summary()\n # if 'result' in summary_json:\n # for action_result in summary_json['result']:\n # if 'action_run_id' in action_result:\n # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False)\n # phantom.debug(action_results)\n\n", + "x": 19.999999999999986, + "y": 1060 + }, + "11": { + "data": { + "advanced": { + "customName": "tag indicators", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "indicator_tag", + "repoName": "community" + }, + "functionId": 5, + "functionName": "tag_indicators", + "id": "11", + "selectMore": false, + "type": "utility", + "utilities": { + "indicator_tag": { + "description": "Tag an existing indicator record. Tags can be overwritten or appended.", + "fields": [ + { + "dataTypes": [ + "*" + ], + "description": "Specifies the indicator which the tag will be added to. Supports a string indicator value or an indicator id.", + "inputType": "item", + "label": "indicator", + "name": "indicator", + "placeholder": "my_indicator", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "Comma separated list of tags. Tags should only contain characters Aa-Zz, 0-9, '-', and '_'.", + "inputType": "item", + "label": "tags", + "name": "tags", + "placeholder": "tag1,tag2,...,tagk", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Optional input. Either \"true\" or \"false\" with default as \"false\". If set to \"true\", existing tags on the indicator record will be replaced by the provided input. If set to \"false\", the new tags will be appended to the existing indicator tags.", + "inputType": "item", + "label": "overwrite", + "name": "overwrite", + "placeholder": "false", + "renderType": "datapath", + "required": false + } + ], + "label": "indicator_tag", + "name": "indicator_tag" + } + }, + "utilityType": "custom_function", + "values": { + "indicator_tag": { + "indicator": "process_responses:custom_function_result.data", + "overwrite": null, + "tags": "process_responses:custom_function_result.data" + } + } + }, + "errors": {}, + "id": "11", + "type": "utility", + "userCode": " \n # overwrite the parameters, extracting the indicator and tag for each result from process_responses\n parameters = []\n for item in process_responses__result:\n parameters.append({\n \"indicator\": item[0][0]['item'],\n \"tags\": item[0][1]['item'],\n \"overwrite\": None\n })\n\n", + "x": -1.4210854715202004e-14, + "y": 960 + }, + "2": { + "data": { + "advanced": { + "customName": "list investigate playbooks", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "playbooks_list", + "repoName": "community" + }, + "functionId": 1, + "functionName": "list_investigate_playbooks", + "id": "2", + "selectMore": false, + "type": "utility", + "utilities": { + "playbooks_list": { + "description": "List all playbooks matching the provided name, category, and tags. If no filters are provided, list all playbooks.", + "fields": [ + { + "dataTypes": [], + "description": "Only return playbooks with the provided name.", + "inputType": "item", + "label": "name", + "name": "name", + "placeholder": "Playbook Name", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Only returns playbooks that match the provided category.", + "inputType": "item", + "label": "category", + "name": "category", + "placeholder": "Playbook Category", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Only return playbooks that contain ALL the provided tags. Multiple tags must be a comma-separated list.", + "inputType": "item", + "label": "tags", + "name": "tags", + "placeholder": "tag1,tag2,tag3", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Only return playbooks that exist in this repo.", + "inputType": "item", + "label": "repo", + "name": "repo", + "placeholder": "local", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [], + "description": "Only return playbooks that match the provided type. Accepts 'automation', 'input' or 'data.'", + "inputType": "item", + "label": "playbook_type", + "name": "playbook_type", + "placeholder": "automation", + "renderType": "datapath", + "required": false + } + ], + "label": "playbooks_list", + "name": "playbooks_list" + } + }, + "utilityType": "custom_function", + "values": { + "playbooks_list": { + "category": null, + "name": null, + "playbook_type": "input", + "repo": "local", + "tags": "investigate, threat_intel" + } + } + }, + "errors": {}, + "id": "2", + "type": "utility", + "x": 1.4210854715202004e-14, + "y": 99.99999999999997 + }, + "3": { + "data": { + "advanced": { + "join": [] + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": "!=", + "param": "list_investigate_playbooks:custom_function_result.data.*.name", + "value": "" + } + ], + "conditionIndex": 0, + "display": "If", + "logic": "and", + "type": "if" + } + ], + "functionId": 1, + "functionName": "decision_1", + "id": "3", + "type": "decision" + }, + "errors": {}, + "id": "3", + "type": "decision", + "x": 80, + "y": 220 + }, + "4": { + "data": { + "advanced": { + "customName": "collect all indicators", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "indicator_collect", + "repoName": "community" + }, + "functionId": 2, + "functionName": "collect_all_indicators", + "id": "4", + "selectMore": false, + "type": "utility", + "utilities": { + "indicator_collect": { + "description": "Collect all indicators in a container and separate them by data type. Additional output data paths are created for each data type. Artifact scope is ignored. ", + "fields": [ + { + "dataTypes": [ + "phantom container id" + ], + "description": "The current container", + "inputType": "item", + "label": "container", + "name": "container", + "placeholder": "container:id", + "renderType": "datapath", + "required": false + } + ], + "label": "indicator_collect", + "name": "indicator_collect" + } + }, + "utilityType": "custom_function", + "values": { + "indicator_collect": { + "container": "container:id" + } + } + }, + "errors": {}, + "id": "4", + "type": "utility", + "x": -1.4210854715202004e-14, + "y": 340 + }, + "5": { + "data": { + "advanced": { + "customName": "launch investigate playbooks", + "customNameId": 0, + "description": "Determine if any investigate playbooks are available with input types matching the indicators in the container, and synchronously launch any playbooks that are found. By default, this will look for local playbooks only, but it can be changed to use community playbooks.", + "join": [], + "note": "Determine if any investigate playbooks are available with input types matching the indicators in the container, and synchronously launch any playbooks that are found. By default, this will look for local playbooks only, but it can be changed to use community playbooks." + }, + "functionId": 1, + "functionName": "launch_investigate_playbooks", + "id": "5", + "inputParameters": [ + "list_investigate_playbooks:custom_function_result.data.*.full_name", + "list_investigate_playbooks:custom_function_result.data.*.input_spec", + "collect_all_indicators:custom_function_result.data.all_indicators.*.cef_value", + "collect_all_indicators:custom_function_result.data.all_indicators.*.data_types" + ], + "outputVariables": [ + "playbooks_launched" + ], + "type": "code" + }, + "errors": {}, + "id": "5", + "type": "code", + "userCode": "\n playbooks_launched = []\n \n # loop through each playbook with the matching tags\n for playbook in list_investigate_playbooks_data:\n playbook_name = playbook[0]\n input_spec = playbook[1]\n phantom.debug(playbook_name)\n inputs_to_provide = []\n # loop through each input parameter, matching only the \"indicators\" input\n for param in input_spec:\n if param['name'] == 'indicators':\n # loop through each accepted data type\n for accepted_data_type in param['contains']:\n # loop through each indicator in the container and add any indicators with matching data types to the \"inputs_to_provide\" list\n for indicator in collect_all_indicators_data_all_indicators:\n for indicator_type in indicator[1]:\n # if the types match and the indicator value is not already in the inputs_to_provide then add it now \n if indicator_type == accepted_data_type and indicator[0] not in inputs_to_provide:\n inputs_to_provide.append(indicator[0])\n # back in the playbook loop, call the playbook if there are any inputs\n if inputs_to_provide != []:\n playbook_run_name = playbook_name.split('/')[1].replace(' ','_').lower()\n playbook_input = {'indicators': inputs_to_provide}\n phantom.debug('launching playbook {} with input {}'.format(playbook_name, playbook_input))\n phantom.playbook(playbook=playbook_name, container=container, name=playbook_run_name, inputs=playbook_input, callback=add_notes)\n playbooks_launched.append(playbook_run_name)\n \n launch_investigate_playbooks__playbooks_launched = playbooks_launched\n\n", + "x": -1.4210854715202004e-14, + "y": 439.99999999999994 + }, + "6": { + "data": { + "advanced": { + "customName": "add notes", + "customNameId": 0, + "description": "Add notes to the container if any were generated by playbooks from the previous step.", + "join": [], + "note": "Add notes to the container if any were generated by playbooks from the previous step." + }, + "functionId": 2, + "functionName": "add_notes", + "id": "6", + "inputParameters": [ + "launch_investigate_playbooks:custom_function:playbooks_launched", + "" + ], + "outputVariables": [], + "type": "code" + }, + "errors": {}, + "id": "6", + "type": "code", + "userCode": " \n playbooks_launched = launch_investigate_playbooks__playbooks_launched\n \n # return early if any of the launched playbooks are not completed\n if not phantom.completed(playbook_names=launch_investigate_playbooks__playbooks_launched):\n return\n \n playbook_outputs = []\n for playbook_name in playbooks_launched:\n note_title = phantom.collect2(container=container, datapath=[\"{}:playbook_output:note_title\".format(playbook_name)])[0][0]\n note_content = phantom.collect2(container=container, datapath=[\"{}:playbook_output:note_content\".format(playbook_name)])[0][0]\n phantom.add_note(container=container, content=note_content, note_format=\"markdown\", note_type=\"general\", title=note_title)\n \n \n #phantom.add_note(container=container, content=note, note_format=\"markdown\", note_type=\"general\", title='trustar test note')\n\n", + "x": 0, + "y": 600 + }, + "8": { + "customCode": "def threat_intel_indicator_review(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):\n phantom.debug(\"threat_intel_indicator_review() called\")\n\n # set user and message variables for phantom.prompt call\n\n user = \"Administrator\"\n message = \"\"\"For each indicator below, please review the gathered information and mark the indicator for further action.\"\"\"\n \n # add the note from each of the launched playbooks\n playbooks_launched = json.loads(phantom.get_run_data(key=\"launch_investigate_playbooks:playbooks_launched\"))\n for playbook in playbooks_launched:\n message += '\\n\\n'\n message += phantom.collect2(container=container, datapath=[\"{}:playbook_output:note_title\".format(playbook)])[0][0] + '\\n'\n message += phantom.collect2(container=container, datapath=[\"{}:playbook_output:note_content\".format(playbook)])[0][0] + '\\n'\n\n # no parameters to add\n parameters = []\n \n # create two questions and responses for each indicator. the first chooses a tag from a preconfigured list, and the second accepts a freeform comma-separated list of tags\n response_types = []\n all_indicators = phantom.collect2(container=container, datapath=[\"collect_all_indicators:custom_function_result.data.all_indicators.*.cef_value\",\"collect_all_indicators:custom_function_result.data.all_indicators.*.data_types\"])\n\n \n for index, indicator in enumerate(all_indicators):\n response_types.append({\n \"prompt\": \"Choose a tag for the indicator [{0}]\".format(indicator[0]),\n \"options\": {\n \"type\": \"list\",\n \"choices\": [\n \"Tag to block\",\n \"Tag as safe\",\n \"Do nothing\"]}})\n response_types.append({\n \"prompt\": \"Add any other comma-separated freeform tags for the indicator [{}], or enter 'n' to not add more tags.\".format(indicator[0]),\n \"options\": {\n \"type\": \"message\"}})\n\n phantom.prompt2(container=container, user=user, message=message, respond_in_mins=30, name=\"threat_intel_indicator_review\", parameters=parameters, response_types=response_types, callback=process_responses)\n\n return", + "data": { + "advanced": { + "customName": "threat intel indicator review", + "customNameId": 0, + "join": [] + }, + "approver": "proyer", + "functionId": 1, + "functionName": "threat_intel_indicator_review", + "id": "8", + "message": "a", + "parameters": [], + "responseTime": 30, + "responses": [], + "type": "prompt" + }, + "errors": {}, + "id": "8", + "type": "prompt", + "x": 80, + "y": 740 + }, + "9": { + "data": { + "advanced": { + "customName": "process responses", + "customNameId": 0, + "join": [] + }, + "customFunction": { + "draftMode": false, + "name": "passthrough", + "repoName": "community" + }, + "functionId": 3, + "functionName": "process_responses", + "id": "9", + "selectMore": false, + "type": "utility", + "utilities": { + "passthrough": { + "description": "Return the inputs as outputs. This is useful for publishing pieces of data for other blocks in the playbook to use.", + "fields": [ + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_1", + "name": "input_1", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_2", + "name": "input_2", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_3", + "name": "input_3", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_4", + "name": "input_4", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_5", + "name": "input_5", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_6", + "name": "input_6", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_7", + "name": "input_7", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_8", + "name": "input_8", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_9", + "name": "input_9", + "placeholder": "", + "renderType": "datapath", + "required": false + }, + { + "dataTypes": [ + "*" + ], + "description": "", + "inputType": "list", + "label": "input_10", + "name": "input_10", + "placeholder": "", + "renderType": "datapath", + "required": false + } + ], + "label": "passthrough", + "name": "passthrough" + } + }, + "utilityType": "custom_function", + "values": { + "passthrough": { + "input_1": "threat_intel_indicator_review:action_result.summary.responses", + "input_10": null, + "input_2": "collect_all_indicators:custom_function_result.data.all_indicators.*.cef_value", + "input_3": null, + "input_4": null, + "input_5": null, + "input_6": null, + "input_7": null, + "input_8": null, + "input_9": null + } + } + }, + "errors": {}, + "id": "9", + "type": "utility", + "userCode": "\n responses = threat_intel_indicator_review_summary_responses[0]\n indicator_values = collect_all_indicators_data_all_indicators___cef_value\n\n # lookup table to turn prompt responses into tags to add. \"Do nothing\" is not included, so no tags will be added\n response_to_tag_map = {\n \"Tag to block\": \"marked_for_block\",\n \"Tag as safe\": \"safe\"\n }\n\n # overwrite the parameters list with a list of one indicator and one tag per parameter dictionary \n parameters = []\n for indicator_index, indicator_value in enumerate(indicator_values):\n preconfigured_response = responses[indicator_index * 2]\n freeform_response = responses[indicator_index * 2 + 1]\n \n # handle the preconfigured responses\n if preconfigured_response in response_to_tag_map:\n phantom.comment(comment=\"Tagging the indicator {} with the preconfigured tag {}\".format(indicator_value, response_to_tag_map[preconfigured_response]))\n parameters.append({\"input_1\": [indicator_value, response_to_tag_map[preconfigured_response]]})\n elif preconfigured_response != 'Do nothing':\n phantom.error('The response {} was chosen for the indicator {}, but that response is not in the set of allowed responses.'.format(preconfigured_response, indicator_value))\n \n # handle the freeform responses\n if freeform_response.lower() not in ['n', 'none', 'na', 'n/a']:\n freeform_tags = freeform_response.replace(' ','').split(',')\n for tag in freeform_tags:\n phantom.comment(comment=\"Tagging the indicator {} with the freeform tag {}\".format(indicator_value, tag))\n parameters.append({\"input_1\": [indicator_value, tag]})\n\n", + "x": -1.4210854715202004e-14, + "y": 860 + } + }, + "notes": "Deployment Notes:\n - The prompt is currently sent to the Administrator role, but should be changed to the appropriate user and role\n - The \"list_investigate_playbooks\" block fetches playbooks from the local repository with the tags \n\"investigate\" and \"threat_intel\" by default. The playbook \"trustar_enrich_indicators\" is meant to be used by this playbook, and others can be created to replace it or work alongside it. To add a new input playbook, copy it to the local repository and give it the necessary tags. Define a playbook input with the name \"indicators\" and the data type matching the types of indicators the playbook can process.\n - To add a new tag to the preconfigured list, add it to the \"choices\" array in the \"threat_intel_indicator_review\" prompt block, and add it to the \"response_to_tag_map\" in \"process_indicators\".\n\n" + }, + "input_spec": null, + "output_spec": null, + "playbook_type": "automation", + "python_version": "3", + "schema": "5.0.4", + "version": "5.1.0.70187" + }, + "create_time": "2021-11-30T16:26:33.845191+00:00", + "draft_mode": false, + "labels": [ + "events" + ], + "tags": [] +} \ No newline at end of file diff --git a/playbooks/threat_intel_investigate.png b/playbooks/threat_intel_investigate.png new file mode 100644 index 0000000000000000000000000000000000000000..cb5ec97a49214a6bedc8961d4d9c87fc8e9c7416 GIT binary patch literal 609569 zcmb@u2UJtt)-FsDq)1Z%r3DlzQbmgNCeoxRy#z$M5PFBui;5Jf0wTRgZwV#R1*9XL z(4`XyHI#&MgYS9IIrqO~+;QLEFJmNoXYak%%ARY^XFhYzwewC>U6G80jsyn>hfG=N z=}R0Oigg?u;u}PS*dq=MGN(8=H_UD2H4c}wOQ5m#{Fb6IVcv0bAUF)VsDd++_N()S#OrGcYCZ{2A+K#WoN zi7Gt0&RP3FB^kTsJxhM&#OyMZ!jbC=EeK8R7A$orOu78dto>@thavIXUS<2Ig{de zeU)M3!wbAaj)IQ7w|K)HKB+{GAL^AvxAtb&MQC7rVH;n#`x2XO!1Tzx%O#@1~65;QpN5dBE%ud?fJJQ?_s5BKYyK`nfT~%L%TNTqyXCLvmmx(fe5;!0R7fC;}+^!vx*;5z+MDRIS{-640%Xxtid z-zJx&!<2I0Dh<0h#A+yi0DKp9;Z+o`{lW*>ErvR3trj@doQZVYn`6E#zUk~j_gx!@ z|4k*U5czB1+o;>8%8%&i`|_XmMbX!MSWSPTwE$jnXGEP9ebU1dp2rzH`$8y=57$fG9H!F$QwfIT(S>Ji;syD0;QR6;&u#us|b2Q z#SxB1he?$(1gG~QcdY|b9wBi=!MpqtL{;)upWmh7ip9mj)j%Q6t1(f|z#c4q1rg3R&y?07tabe5%UOs)- zCr86f{X@kD`N|MQ&< zuNXCtEN!;x&xbXHvmwHn>_Z3ZLfTMCk%eXO-%D)A`74s>NBaikbrwb#H-iz zSsmz11ezOz$*>`_7}`6_iOCo8At)><%DQBTD)C=W2JcIPdt>^tl~+PB=l zT;|ZLcdZT~)r1;k%HibURN->%Vd2v^H0Y!(UfnPvOlEn-{mS0@ z^J_OcswjpiuV>!RsGs>p!J~XWkVQ2{X+;&#>(K**bRRv+$B*yge#L9f^vcA#31Ic; z!{g_I_Inj*v*d`zM|T}=zPTsBDKcg4(!bou*(=y4IPVr_o3jCYJk!@<|9MKVTFt7U zuOWh-jDmspj)~M+%dTnv3s>5Mrw1vk(|vrOjt%tz?cLM1(PJP*%YYu=xHKS^w9PSQKzcna4(U?7bl;iGVj;s2oY zP9NaRH_Rp=QpH=v-oyUJN?TQsMU2fy;gIYLfksR53hKii{bS$fMmKoaIIX~aA^OSs z-u4IjZd;!!i#zAuRma443U!8fnVc1!z=)%XwQl*-DKaGUm-);rJ&pNp@U9^Kj&gjw z2YaJBxvEK$pLhqSLdtMzQF3aEVH%o^M*?J-`sS=~uevKkLqs(>SHv<_;N@cvi$nFd zpDL{6tn)Rj3|3L^qHh&wNQigaziiFTiAS*=umk$;S>#!651?CO)+Tm+tG%b_t9-8+ zw;HxSHY;?3RH)u&HRSY(yOmHaux9I^i7cAob$(m-a)xJ7Wn9%{Sz!${;2RIfXnx$> z%v}1)l%<}(c(-CyGnEgN_FB{uoj{&aT=G0Wm5$%Nf0W7lgI@&Ri|5*c)OTCkF$8(> z`}8a4zZQON{;C~$S-|+&fgdP#-gYDTZltvY=R59Ge>N#C{%ZFmRLN;Ia&Wb8PV9P0 zykvoU+4fABtN5Bi|Flqsm~_AeUmh}#OVyM|$!O@?(Cfu-VHC~p(D`N0YoD8VEKRpK zitx43D$_vtjtsv!>=n3}oz{~azwdcZp?Xbq0KB#b9P>O^bxnfu9RQ)WqR#bhrzmO` zE{{?{eS@m~#iGh$I^AmBGyD_sd zjPNH%{cnr?&lWp-)8s_P9HEoOm8a)4-AQRiIZ)xzC!^X9_Z_(Aj=X#~k4EOJo6Bd- zpgFI*y3&W!i-7N7@Hgjg>^#$UOmrj0IS~y<7RdS<5kE(*Mx*m_a37c&)9Sx+F(2>) zy@(F_gkO4n>N+Bz=F+*Hr88@vFxTvvyhcvli?M{cQD?8d#qrgaRe9;CGut&P#QibF zs2E=HXOhre{mZ?$rAD5rB;>7nb|$F0LnGMbth*Sr1cz&Md=@)!T^?lDa8(CL-*Q|1 zF%?)HF<3b$^yOG`-l=u1Ez8u;Uvv~XJ?Hdu=k>^gOVxhH9Pwx%dA;8+m6ODb^8K@V&j_c2v$BiX9^cjDH~y{{po|_p_e1}a zb5e>prWt<@uam8hzkWsxgvD&caAoLAeg$uy9xCZsOyte8pUs^YgogX=syU4yQf54|^iu7AKFM^0<9nT@!Ccut8^QldAO`Xv_iD$u?%C7$VtN` ztwH{~Fb_FmUu@Lz-cn!LN=*&tA$Fe#=Nc{@4gq!#7yFjNrT_Q-Gh7ZF{NKm%aBw1Q zajyOA8g=aU>J^K9U$yybiys$`a~=EbCid->iTC%_6ziGzfA16Dz@EdA)sk0M#%{ID zT`VmfTx}fPaHrS4VGj^HDH*up;Ltp{dgCg;WZlK~KWVG2@20QzT+G}N#A{~Z_}Y@! z3*>aw4~~SF71M|41+sT=74wq3_xlPl?EckZzI)8SFLASzyr-|G$t>^aV#zGT zE6B@#Pl|+@nOVZc!bg4Z!o?5z^yVyFp**ZEfU-fJD+R@!j^4`6xf&Tsa>vvju z+5TrF2iJey7WM}DuFmj1;^pW2ci-5i5?4pXG;O^s?e(A9g0M2fjv*z;FCrlEyTSi) z>OVvN)l|pT(na18gl*|2^&hGKtMPxI{QoxmJ*L5b#uRw`Ncg|U{I660YAV5Zb?^Tr zi@yZ@`zTh@QX~?5|DH7|k|W{kCfJE&uzjkbjoo6^?CNzb9Q(oX*A}}^NIS4$Jchx+ zk-<@ZDy!{ll*G() z%$;Xz-o4{eWfVx2kX@)6%OoSK%pt4tkcF5yevS5qz;(cNXGS?Z)`k7_ zvpZ6BZDSC_#P4+9_Z;j&|!R&R|M515gKda&QKjsIIKF&VQJI% z-}bP^?B@CNWhvCKgKhz`z#Ohxp`tVXpmaley*d}JeTVVdL$MEQ$6IU98!VUd(unOy zZbj_1aqtXo=-cW@gquu*?(k}dLCcJ#f61!AN2LV}tj>OY847ufN5mY6^9LU?1SB6A zyt9qQ`cnAx7B=;7{?%6^XDq$=1tFjV+TvT)`75x2CY;rWp@$q(*-$q_78hmNKfI>` zx61M*9f`oLt}dRCq8WCC+G5EjfWFtCTg?Fs3iOjD8Pj<=Td7{ODOgfIaZw?RUV;|Z>3)#L^@&1B?8=M#$)7SRG|-rbXocv_%j(IMe-clZl&-?-{0GnimF z(4Xk*v|)9NN7a6;1cmaUm%K9^mOHajuZpqBN{rBmTE&<+Q_j3;|6KNU$HJ0kn8NJb zf>}Drt{igu?e?1@;FD%eAkXQtm?_7J_wXQp7DWl>mu8aiaHNZ6mQ-;ys8iL0r>5^{ z?TB74DK&I4&UKdp=rQsw*R!sFoJPgNePESigVy0Zd0b4hW8pXA_s`&8qhI!)c z+C||nT|$FNl(!NAoGD3x{@zR~RDUqDSgi(vdC?pJJms^x?$Q378ZxZ&XE!F-GjC{qwD2)|SAks~hoM>x4 zrppk$a2M(6P2PI>{n_-h=?@I&*ZjBrTTbAK2|)R(x?E@eUDD`d%ll99LnZZJC|9H3 z#anjrA)U4MgZ{*_ui9#+;9Wc9I`B2q`K>>RJes$MJe3h~6%f^s0yBHskDlT^!85SQ zS4we;=Og1;eKAR)i`A4q@UrE$uvK?s(luCYlSxE{e=0y@m2AYwu6s@Jlj(f|vNc#n z(Zg;%%&z}U&_s&;K_1QnQX7cWAy>S9Z4t*b@)le#4VXnLzv2pMiU9B>{JO38Pb~hCGM;{tU}-@ThrYWSX;^nP?(@-+dOI zfy_JsRK7<{-2~AiKRg>&1y+)-sd?(G5VHZ$`T#3yR8weMuXq6TrDJSMadx44ulR zU*vkVaif|^nZyRokyR~pAsaKqCQ6&m{oHX0F4ZeN(?Vtqo;h5ZSm@#(_d;IdPAy*- zkD9mxXKkO*_{{p){}D@q%d$Q z%VRJJ6bIIb4}|V^$Hy!`0IRNR{Pu9mf>Djn+>ad|WSTC2C;J1h^?P>Bu5^2g)J*iZ zZg0zFKFI_meSXjgt^@YUlf#T#=J57dzNLpR<-DpTgB4$x!H28qRVRL7Hm$|pLPte` zjilkz5Y)Ik>pK)HY$v=%z_T3W0%seo7ebtbrM{sZ;v3ahGL^^B%?(oTcYpb%JnM9E z|Jv~V;+pZzVTTO`!`XaN`iY~LR%fq3ORUrG@>Xh~feIPDJiwILuN|&Yv@7Dgsxs0y zxBc13n8xR)GR>jyjQ+@3VI9=)HKKJrxJaANZ>I+jkwLblb=BKI!kWMflEl+p@3w|- z*Nr`}%rkQo2}jO!v@Sggezu{n>tLA$a@$VblyPR3ys$>C|dA zQS4x#4XV**Ahf1{sO7NA@MlTq?48mb_h_R#g%=pFz z^=<}aLq{@YX|V<2{OIQV3|*hd-0SWN*tgP*C(2ecVrI#p!l!>~RwLFm-E?~AFoVD;MxPsM9qi?1Z`uJ!pOU) z`e>!ZQUd+ok=FhxgUKVtGMF02P}E-x=6aA|CZKH#Y6BQJ%5tE6LLt6KeCSk*agE#c zaNcG8$+)_gvd_xO6q9zSe4S4%7>40CMouJSvCYrps5g0Lz)B>+a;JT!jQOjl<(|7( zrDp}RZN zRJOu*$i*Tq{D=4niW=OkY*#$EvcJen-`*Jm9jhvL)RcCX#?l zvVU9sLt|#o#r`GZ67e1&?6YU@E(G~Kc+uHLV$QgJ$cv-eL%EqU&hsFVp6igaNL4qP zSAaG=Qg30Lw$royBu21~X>-Pq}mNh-yZU6kY+zlQW>P(k1PM06dZm)I;MmC zJW(BXT-}a7eKdm?-&@kO{BY~%DyJuK_*(}E&i?hCpJ7cDNr_Q|5Dy;)sJLC->xQRy zJHM8`nPA#UeUn{%Jn%xYj12IHvyOw8$cc670?o9#VZT9t3XeB4gRmxk6dGyJwSlOJ zc%sDAbI1_9!`sA&re<#$86Ovp@{WMomeO;R78k6*?{C+n$<#;hxa^@9$EnAudO&@- z+yy*oK$ZFMW5=ZV`p2n1gdjmPm&UQPCETA(b@Ym*gAn_0$sZ+;cIEHj+s4uQkN}UT*QQKfG}n zg)4P0ED!1UOWkh;%}nlz*xZv4m75e-2eJok(=2ZPT87eR7OK@(mguBZ0)Kpic$dVK zYU1xM5(T-a=CaSqC6bmHxdH|}X>ARNs$pd8hy!+>pO-6#`BOS?nr+e@xJ5!tL(-&^ zll@ru2uKm0g|24ja%vFzE|D>)8Moe0XN=8UQrgHP`&P4&Zl=E0M9Zf?EwYAa;*Ax} zEs~UJK~^zOh*qXN={kwGv)yy6u@M>PpGRcI*oZ7FK$e^0cSLrNpenFwrB*&$;#y04 z+z4|W&39av;uv_o8FEOfh;;FUKUX{go!e*>OlF&yH6X;@NYUyCpyLC*0owEM>H|8V zts@AF{KGkv)3hhcIiDro5iD}`utB!0y(TtZtgs{n! zmA&@^?~|&=c$6;}B6h161p?vl)cO+}68(zUiwv)!0tR_^Ej>7>Q_qq}Sg}~l!E*M} z<4_jS|9RJT64=zM8xaU8tLOModdva=CI3v46BOrhS#+6ilZup^6?;avK*1R2?MEcR zIqFenxIGM*fps8abPX=(XV{|U0L7&O3ah`;!iz0v!>`3uUmt?dhi#oQ)Cu7T6N}a+ZGrv zWvhrMdtkOF7{gdQ(NHHrmTojrmw{47j!@RyElCeQ+8U4MSA1f3Q-apY#d5qo)j-ZT zU^ugG?oA@aI!0JL{#8>ypbf1YMYagXs4osrgg2}Y5PEb>g$mb}@nj_X>6nn{=)5c} zc9uQIy20WDEt}?CJG4xY1*>NjIM=+3`X^-C&dt=vplojS#)`0ioyV*0V3j@N|W7yb(z%K&tk@M6jRhQKD+;Irc~pA70Ldj~ZK z?X;QF`SBEESnu*&zn&jRwMJ_3EwB7X09T_bTdifGd{(|;z?<)Q=+n*MWzw+Gu7+G1 z+WF^@yjBe5Hu*PDU~1>OK$5Ex{!c z2Im8-f?i(;4@$?!7gF`Tq*GWMom3+`l{S~O)^oJ5zAMZ$zEs4NL#e4q#YM-Pb5vV3 z@nX3ci-lFSUi!5W{I6_ik&rC4w4>Vnp?n)kn6kYJZ)A_r;U0nTMOpZf`_zd?^X|{z zmS6fo>Cqnsbb&Gtu98%tjzL0y`8*L^YzRi;Jx#6>GMCywe%GzJmGV8`oWn-iC=jIF z08>cQ1oVIGXpDy>lyr?1Sne6tboPLrlja$<4-F*R)?+fj`gi8%r^SGfVtaX|d9lf? z*CqWj|IDBl+^IaR>yA7^1gbC%ALOzvB+?3_9H~7eMC*#o#`pfv zy-`2JvO~G%J4t`B*`Ih)nU1R5#2yivK4=d&G84NvX*-(hV@nsj%ZzgKQ*+g;M-qV? zGo@;?Kb%uMs!vBeUI2+c6u9rDW_$1oW~kpPosLQ`>7_~J?pt;B^*Humgr8KGJ|e3q zNbEp-cppE|jaPE7q`%X><7m-w#>9nYv^=h;;SFHYlLZW{B|w!r_O`~0o_!T6&wl3c zI&CD{0@O`+#?aJR%4OiVdnA+Ho|uW-J*8=mukokNFvRC)ja-5+Hg0no8(AAE3clTb{J{+J(|xoDD0aW` zUZ&~8c1gTM7Rrm~MIXj0NdAuDGQS04CO!hsd=*bk68^bDY`w$EK=MTn#gzzJvUp<& z4v)3(VI?C z(-s`SSl-Ki04eWXnx?DDDNLuP)w3pxFRtJL>c2>ra$yD*7mv8F9e8)^(H<74kYH08 z8!-f^1G+g!=TNZqtrIp~G;d5p-i!Mp0 z8eWu1#YUPt{QK_nWFnhkp#k%@QwcZ!KKTEf(Fm&Lkde9M!5e10^6U$-w|_)6dVe02 zP6%a^JDI_o+HTm2>0} zE~N6hz{ADPB}_qeGUeJ*B<2(X3#pCkAx8EEp;$z0gA5BKUln9mCs)XwIN(RQ`$dYT`Y6yqV8HqPj znx-5n^BH?r^rl)hOO*tT{m$1qrY&?W-om{`{wWYs-D0H?Kwm(6-CphahrcbPMveJ2 z`JrTeKpyes+z51_M(+PvNLQk{y4WTMt0}^AKYv%IaDtSWMLf>Pq)s#6A+i@j9#m`( zF+Zh|t92^iqj)r!Ej2E+XEJ_k zv^n72P3@=O+|!1p8?9aNhtj6;K975j2(QFdB|lJ3gDcbvI|ED|7csAH2cw%3$1u1c zVp2f*a~bK?CAuJd=7q}{$h+RN3n?6gnabZv^D2hm&{SZi88X@2<@C={WlIOkmV6WA zTYn3SoGK_g(7(Z&c43_8>FvPXR(rtrXmcu_;F~P0Oz5P!Y1S<6=Xc=Yn8U5LUWaX| z(EU@UFj}_!_ysBT_Ld3RGz*Ycsz@k)lvurl3nLIfwN{Co-gGS!l zLw&UtPb7A(Kw?$TAITi@Vq_tpCRm)c@Ufz zoQDYfIh;37v@z-X)@|#N<{Q{id}?%rau&4OD(sEmEg7Z-H85Ffj*Y*0+LjHRby~Rm zV?J50s=}*C5M;cUA1;wVcWX#Gp$T;K{z{uGYOlGNJ2I_ljqRDv z7}r&=m@d!Ir+}b zj9kpj6&#mUGMCI}FQ7hYvs|WawaZ11f1&{ zO@@PEa#pdRnH}~f&!q(a^%=9f%87ToZckA@AcHhQjBIevr?D|uk4sF;1r<@im#vJc zPXvGC)MPW>8PNLD=P~_1VFxW=NDi5tKQj0aTMqA>s0!|A!3x@k905dvj*f9FkCDli zeCOriD8TIX$2H|F#Ot-?JCS3*-K}E8xpAz`qWeVG6@fz#H>-Z z2)nTk6Q+ADg2)B?P>nA)T{p@bJ9&mwKc-?5jzxBhxUR5dn;NbW4pU6%tr3khU~&U& z;=_^seWmQS+wctt*9bj~&#)Z8GV803kER*20-+-wH1T*(&O`O=rH)h zuSH*zzFp+XUR2bN5BwDC5mKJeeVG#Fh?wF;#i%Ex)T(pXcJTZYz4+UK{@Wv5FKAgf zXl7Q-z<7T}&KxYvEXXz$Z>P~&w3<33oobw|Gtb-hZc`08+R73CH4yC94?Hvrs#G%W z%rh-`me<&^x`qbn5wf9ZhZ>()ozrOygUi#*=DQpl1ns2G6mq4P5jKY}8?g zy%m&x>gBfxBw>idIlmg-de73he6#f$M_tM?4`=d7GHW|JQ+8k}M>^kEPYe+V{8n1; zhpI`ymT}=jrKX0=3A8z=-D>u>58!CEQ+bus^*uh?V1&P%z7JIt;D#*-2>9Rroz(gF zE&emeXE4S)*Ep@Xao0E9ZQXmh6;dhhCSpXlX*p+p$*XEohl!`BdE=ge++eW~XD`s`=yY zA6N}eP>4#VR(Y$yndBuK_*v6ICY&~H50A@Q>R!3jF5hsS&xNdpoXlnB<@+h-E7fR` zqWn!bV|)u_9nPHg1oS%!|?ZVq)G5zB4a7xB`a$2v!f6uU_ZdodH zT{SrcqH5)Fidu#zrSWjkjRbG$e$<73@VV{o#OBZ?Y+JRFK%!m$^j7<**4DPO|{T9MsO=5nqO@MqyR0|OrZV4cddZ#(lS%T&nquJB0(gP_%I zwf!DIS-isFtO@ku6(?(EK!soY7XELY2_X4hQDrUb9YnmT{^UUvn(SDTM>j-{-@xt7 zh3kaaaYZyi?C1$0Ql&?vvTpM^g(OxQ7Nrs<+7Wv~1dE*C0ctBj^c{V1q~T5N=U!z>b8eF~pYoyM+)OYrA=V;2(9 z4u87+zIu&LAO_yi@0U?CPSAZ0e5pJ7uR2e2BYqzSw2cA&7&w_NJtq3_<*`)AnkzeCQpK_*ny^e(t#aJhoT9DX3Ik6|Jy zNjXk<-iW9ku5s>Qiq@>3#g-nCp6xw5?X}lU6_5!%`beO@&vCL6^mc zS;zs2KbKD_?FMw~UgJ;IG;z$^;*$ImC5+_(dpZPYY&F{kcJW}xD6I~zXKHXY=`9va!>yx8z}?3wLW~TFS@r>tBmD! z)3b1c-ML#f#-e&A7h~)eOYf(A9fwHnybJUv@FV8Ny)u~0S>hVHAwIQ4*tdFza*j+u z*w9Eid#eL&(*!~gnojt0mbt8+?;-ICjBY#8qYn;y=t=+3lWK@UEj#G_I1|B8WY5S( z9B#G;%M-x(w(H)z=ijhpIf~a840;jZ1jz^oORf<$$c-VRW}DKfFWFKKeHDDLN;}7O zIdoVsHh;NgJcQGHZsXOw9pPvs?TpPygXE@RKX3jKx{};p9}h_QeAW%ig-$P0*NG+7 zG!vwb^TpFTHp-3jr9hht=By8>hUTqnZu|~>ohV6{dC&Gxsj(Wthb#+>1>N!n#K8o+ zK!)i}c}!s`={h^Os={lJIV+7|KGJ-l8_4mY6GBzBhmGBA%w{xAh8R(TjtFF7Xt z2KU@IUPb*+EQzQ_I*1n>lc*(q?%Q^{y;D40zy*!HFuh!JnW}qzB$aL*K&CDe5TN|{ zue?tyYb?F*!IR_?XbksBnF!r?-iMLFo3@!Vta9Eqj+VUkNDRh^Gz>unN5h~2G-0DT zGL6x(Wul%+^e6l4HSXVTP7JJ)ES-9nmfLOl!Y_n!Ge#=> z%QAz`gRyxcTm5;Vs+fv#eu$9Byc`j3+tSELvoF9S+$azU?MFsGw$ zfHZooN-@fr&MU?#`y7tz*74sTn(**Jua?Q)DF9K-fT1_GBAW1fvjcGH3zl7j$Fz7b#*zaU`B#@&T>x zn~o-4#tDzbPIYu0n@8!&>Mwi0bo!2??Vb`dmy`F)Y@}TnJo@{B+)~s0{zh3E`e~5J zajj7vP6~F$7QQZ$wh)|OO}6be3E%ZG@Uwa>-?y=u_c!)lr*(Ht7Bx6ow@7j3!aaX^ z7x^bER^bsX8ySsyIcy4 z;7Mcn-w zqnfRApN5yHIoBhyEa^0k(|gB^q9B|_r2Xw)aOqLl*E8dB>$L$ZijU9Dwuh^1e)3ji zys}^uwik$?p@~4})aN*#^_-=SAhIKe21(l88|v((Cb~9J>?N&QkW`c-5C_+$lc{3d!V4}LFT&sZS$-l{l{Wv#{W^kdxg^n?z1k9MxqMYb)N>4WlC zSk^#T)Tu+F?bHgNBdg80DZg+_aD9+l6LzS2Un51w&8fN;d6be=zxo1TBrldUyMEGr zyKE-xsC4FNjq6O*wx-&GdwvK)0Whm`0=WI!uV~^|l-XD9UEM{k-tIZv;%#rtcu-u6 zT?|@3?mG``PLq>$@ot;|U}^Codxi$K7%h&6o=ed91G@@3dceQ?q1a-1MFdi=Pz}d_ z$bWEbnt-Ks{xTE0x@_#3m%4}Rkymk*Qz6MyTyRuC0Sl7b_zPhzk3G}a4h?tcNPM`| zEfWTk+9FDR3LzRfiV1(IMpe=hMWV=LV+0)ShUATK-+WE&v%DO&%2?&sPG>taemm;p z4Vvvdo0z6z_0lX?PoQ9Z^ev>k@fvMJ)LA#YJ=i#fW=)?dEsYmC1V}D9oy~cs1d+~1>)eAOtN%ZO?f+m`CXmQ&Q%HZ{VxP5JZvq;Ls`}AG zX)`y+8h?4fU~4SdEI@O}rY9?NsTTZ`;V;dl{vALxR?V4**3`~Lyz-_qnV`|7nZMpT z)E~ULf`H7>MR?0~Ic1PhzR7m2f;y3ajY&!K*r~;i!`d~H9>*|!Ji=OFI$L!y-p{@YHn4fM(hY&#nCMropEZ(hPFh%Ht2ydk?1=|kO`{HU>^Ls_ za-RLDn8VL?Tq`T<8YZ(_86-9NNKH>?aWLL*b_a9Q?V+z%;Ij)U z-RNnq@4ZEvKjczO65;M@(gfCBqZhsKGa;cH9@H~q)dEojRAZv{=KSd!7P zG35*?@C-6FHPxcyJ@xes^(mTvK*61Ch(4da6VDs`;mJgoW|{1(^J=9}ak*o8&tzQbqxJ2eMy4m=k*1Y^+HC#O5!Csw&5#*do6O3uh$IRQTvKN0*;{yK`xWY)U) zCYoiB?X9^7wWzIUo}7;J4^<1SL4Imn8De^3z}qAmhF!R*n9puy-w<_LBhKRvbF9+7 zM^xUH9ltEzT5uc1lcrB|GD>W(^&00S**%|TM=2mGwqS`7^5wIoVH;R4(m4%*I0Ihh z;GRb+er97wNk1d>5brB>Z<5kp2(XsoBb_LTjY<6I zIEUW2^F;H_o1%^j{*BSE)mxK$;TN*QtWi->RX(UU22FnT+=ewu!j92QWfc*()5Y9} zr7O@qEkXFXdV?k}OAkD@CY9gV*;!(spepZPtEoEYcv5^GV1qUdpUJm~$B->uEv@^K zK8H@yK$wRz{g(Y4XPR5N-9*_>?`_;WEB>u{{YJ){9jh zfS!nz(3lV9C+<}(J=C8r((Ej|Nj>$Dct!?yanE&Mar|B$uSCGDD!%&Jb@^~aL!)== zbx#84{%EdpgoS3a8tyq|lY6T>*)KGQ1CfVyt8pm zxFUB-b!z+zsE)P_-@Kz{bI1ZYRj|2-y{We!HE>zYTy$}ZF%h#N9QB z9(Ob>FLmQtBuaK*f)Nua<2UxN338W9>q4sQ4N`?Px6@9cW{e%+(x@>bulZW8B8|;q z%TTuQ_Wl(NkI%2WDd075mH|v^&3#aaE_7$SG%ftVx3{uACULPn0x`({72?!HxB~Os zVVf3`aKJ`H%iIQ4Pge&`nIBsZBy_0KsLHp~(X!PFgCvWJc|zx3_#7j7@UP#9H4kUF z-yT7hd~qH#^vXZoZ5ytG5U-Q25q6m2up2K+M5BFD9$T074SR3TjlXu^D~CV_0C0oY ziv%roXEU@v7!&sT95uSd^pqcwsJF})aN3*p#r*qQs{M;&(}!a^V;i4Jf%XCBuxaaf zDV)|X`Bf0x;>i#q-OUhO`v5zk5=U$D|5A^mh?c?^Im@#C)2kp2y?=G z=JZg_8JFifm$mk@t;V0OIC*3Y?1p!0EtJ{grhsQ+S*tn#t{yU-rTo&t+$Mv25|kd- z-l>8PtEjL`?pxf%t_0>w?JegqFf(N8FR;|hc%&PGw2qjoDspZ-TNpe>2R4DeqpBZO zp(Y`wt^!cIBw&O)Om@V3n>X<%8(kWsrO6=z0v}^xPzy+H|U0I=QTBi3Zd^AmcXX zb~B9gf)}E(Sui$SQrkV_LyikBHaIJ=wmbq}SCpBbV-EOErTAmYI^)5P-jM|G zO?lQHPL_D3FfRMb>>G61ffwpz>*a&akc#TlxsRM*7 zFy;lWkVbe2n+JTRn0^_Bo>&Q^HHl^a;x(M^DNW9U%}fM^7`0ram|cE;A2YpE*Dl%e zfcL8UgUx;p62NZ`P~=Eop5697+v{rMvHma3`>W9Uf8h{8Bs6#YE@&+#J50+LsHId-41`;VF=A;y(un)jQ_xXMlnZ_qs{91G($uF*s`ASO!3wXPoC`bHgeKSttZ z*|%TsxwVX~D#VfB4q|)x^Kj2c+vO&b2y3eu^SXDj|ApYUAb#5*Pg%KPEP!k-M4uzBE zz@8yR{BH9Y$$XZ5+7-xziR-+#9scO}c#jjA-WQL}ugEMMc3Xb`g_fYKBaqd!H8%Q5%Izm8S z93TH^r|1=FIxVkqSy7p)vDGqcE+)l5TsAOs?6oud2f_wP^me^TJXN}YXBAG1a$urX z)%`8k!S3bm_*tU1>lB$Skr>&Hh(PYzc_7`M4n|_#W z&mY!On5pb4eD{%RYmJTJJk_6vN8p`q>74h3i}|yphdcA8Ma9LDM`i)#UXLk69&YxL z;bD|Ajh_S{XG8@odv1&5NNU^leR7>`|JHW1Gv>0g#I#vz=AS(VRwxtXmt{C`xt8*B zw%(ecEcyXNBnX?`Sbpaild#G-J>5S{ysmeo=e~5@#6DqsP(RDN&n|uX)mYkL#$o#B z6&LoZ#xw6SDNLCdF|Hk!@VI05zG(qj*~LUr8}YsVNoGc9DR4-tKAQTM3+zbISyL)O z++yOXbatg&BMP(~>Ga4g8JEJfuJg!jc6hPs!m!NM7~H8(J49i2pc91v%LEvJhsTaR z@h6AMj9yydPk)JnG*p)MAZJa0OUrQhN@;|yQH}+_>8lJMeFGQPKjnaHtv82iU!83fWbm4zf6-bj|M-X`JIb#B z&TC`WF68I4d4d+@svoXTZ;RU$&IfPPAhGBS+quB3_@CGBG+}@M(%obxn&;Imn=8pc zHd<4^%Fmv2(~+r@Pt@pI=JTydv!8ET0$JlDx>e#WNZZ|H#j8MACj7RGB(m8+2ELSUuC zo9ReFTLG9hI`i#-i<{0GCDKisY)df|>z2lS)hg(ra72Inb~vocTL;+0K3FAVN#b`v zKOc)I!x%<(q;2AFv zMxE&Fx=vhT1k2|bvd42>?MwWLh1hkoilz6|9JB-25Fk}zS7tAyn~-dn9pB`%(hV?( zxQt)i>jJ3m)c;>V^#6?c3nhYbI*splH62eU*7EC)IuKaR9}n)MwWMuD5bT+z^`>K) zjW>`HfBzSNY={NA<}1i#fjH+Gj5Zruk57h8v;+wg`E8j4;$>57qhg*c*{-0_0;}T4 zy88|;L#AukC&FY+cad{@CJZQbyb9hz#yi=XC0tb{|BJJ?jEXXR`$cI`L{Lg{00Wg2 zrCS74q@)`qq(Qod4wV)uX_1o7p+i&}hHeI=28L#sfywjuuJ`P-_gd$iz5e^lEcgVo z=DF|dm)AgIIuE}5wzEi}4{PUXb>56vdZEeQCA7yl{%#JnfmvFc6?4vglJK;x3%n3U z$mbtuv^y70J^b^2BWC?GL*SFjHwDVF~StS_RI7KYpMWFz*_I!s7uD6DfFUTwUSx z&E+P)!urq4m3F^5(GFr$tq$zi#eFc?0QS1uf8wo4sr#?W>T1t*%tVpeV0mfY9){vE z?Qb(<0xx(8M;~&WKM95Mpr|e;ZPt27{|)5fQpGbzX;qlHyVsxoj({`oF==+=?2Xm? z?I!(Y6%{jz^HhU%{nuG(=@yng_Pq%w01RzVp7GuQIa-lteD^B{2ZzeJ@OU%vY+O-W zxOMa9<=R#TYXXN~j#*Noj{BK4{VU^o+wx^FdgXNB*T>WShVc?`>pu~!#XK}0H3dN} z0+avpQV7x#`$2z?u%xHdEx&LRS~G2RLQQO2-8*6=!z|R?2vVBHu3}dkt@j!oPp9>? zi_zwsx57QwaaCrJA?*;)hWS=x%jr-BlGG^D{NyP zvI76}@J*Ek-aa_6_@{6N>|x(EXS)LV=H;5bMdzB7BQUxhc%EB0+>%c=md5*d7dsxY z^M&=0GS{*yCrR(*)H~BG{Oxu?t?LXc0u_+@U&_I(ty*OBjsc#qr_iT6U*XM?0cK&B zwTTwRX0ck6#mzb|exe_tzP614w77kN5aAXC}HyOr_tu3h|ab>~8eM%DI z?zs53|8!>XomQLgK40!Mv{JGn$Y#nOq6I6sqwgNA*8Di?Y$Ga!=0x4@a8kjAQ{FQ` zg)th zm1tIXnL(<>{Er`b?mZ|SV0)KW_y(K0S=)Er>lsUWs9NNPB6eYX6M(4GU2*0Cxc938 zJC3&qVy*CRegk2oc#E{?@eC0w;i)G%cBKBaaDbgZpRIwd{e(2nDu4rrQ!piCDYuhS zbuspTQ<1I>Tr%Ds&h@Zvk*JPD++D9|HW`;Pv#Ce@oEs5X)J`Ip8u)|XVvwN%e#-%+^L}>pYHR<_oP%-a5PtO< zwh2a?f3eBm=lVPMe;l|LtG(Efi2putB553MxA=*tBSc!P5`_B0zeWK(OH*ZpWmH_JuO`qHx z8IR1dxhdCvvNHjR>a_B>?Y4rhyVG8nWKvnPHAwrIY?(TUZ5B(DQ3NX>MF(2I>U}EA zX}W`U4#h5NyTo+*8@$^nk6e>b&6qLvRnT%p_qF}NOyusgK^p=y=i>N9m1A~5pn_%i zG{M=nvl&)M8gy0xtab^uW+lY~8@O7;H^pgSx*!_S$|EIkm{NiZ)PwL^e5KYd^$CKU zdikjfs4Y*J{cp`wbGG-YYug+bMu*fYUoM{a%2X+D&{CAZl>MP7t*nb22oB*1k*X}O zTAAT@Gkmv>Pz?=KvxfzQIxHTJ0lHM$hFW~Gb|}WF_3tNv$@3+%qXSoD=tUpclZdZ6 za{o7{FuSG0b6pq%X~Mi)bsO!`Y z-HcgWG~H3?qIR$ zZYQov-oGH@aEc&G?4e$*!OEEf%wZ+}adV=Xd#7d>w)5zPjZM*fADt9~ls<)oq?>0q ze_seF@ZwGDe*N(O-w`Cv#!6fG%=Fijb?!kY6h$k`lC$xAwG|#A#!9Wpgr+${r}q?* zI*Q9{XDkIqB={9d|Az#b@sN??@8us$fX%L5m%lvqQ7!Uyg$n`%Eo#{39K=#)^h^?nBZ_s>b zEj;qi83VhwMK}1>X|n#(+7mZNB?j%9t5WJ$pA`h#%hMVE2ZcTY>+mdM=bT;4nz9rmg^jVqOkU zgE!zr$_z5|C#EoBxXQ(4#h1GbEG?Rz9cD?G%(}Wxi*<`EX{E)aP@l^^)!Ge>&k04+ zWW2E|p{K~K_wE`oN3~VXDB%k7VuwxGFBG>tIJC_#LaJl7WSM^y8}*L~x4@L=EGy76 zGOH3nsh#XD)8|@q)KndfNS|`626GAbrEl~CW$D9-iW+0klf=VAknyoopJyw0ajL%H zO*!q^(qn3j^UART`DQ$+%J)*La5oUbi#8e%*M8Q>`~B+ zSb%2#Qgi2vNX&`ZZ=Z&crNzF8i`@je!q}CiBrVI=J4;TjvW*F|v4l7R(xv@696b$L z1;m;kNmh4{x{;H%NqiiVZeKuz<9h*Xz0`JrgI2ziYJn5FDx2!`+=5ovMWZcFJoyd{ zUCL4&K#2>=kO2sr8D!QWf9EIJcG9by`}EFGRADSP z3oT;FY=4-`-rYS*5jDT=3C!X_b;Z*gZ1RDP&QA0ZwXx*5J=7AgQki&Puhd>!^`RtC zn76R)2_ro%775W+Ko-)sy%)kMxUb5!p1_DT*VsJcgV#X>F_T=yH!>;9)!jajwQc`e`PT0X&#MyX8-1)9H$e)NU4niLu&UGD}jmaK;CSvhN z!>3!AAdR_^@SZ{*>(H1=)7Ebe6=~d1;-9&0;W?{Ni;1rX+slxA{&7WOaNH@m0d&baMq=iJW#WC$0?Y!mniS;eIn-f)pW_IYsu|?_uZ(4 zuwaf==yzdTtCmkVN%4G%cwar?97QnZ34UjqsTIJyzqreo6Q#Zr^U&se{5hfz^><<2 zAYi)*!*< zW~x8qo6<*>|6qkW{Y_S z)2Y^lUO6hEHSP}SG=|PthB@^oz=roiPE+%T&Nu!PyY~G~z|>DUS6`a9%t%PKAiTz; zm!ci};z}!z7so?aw`wN;VAsFtm1>>*b)g1 zc)2~2HN_1%OP|A~lVd39Zu(Ut?zm6!VAZu0jM@-QznhI53cv|eo0852T{>l-W$5-L z-JCs1@t5qGHIouR4qU}^F{N+$UbAzHZ*g;e>)SdcR1`e7C}UF7dufl4Y*r)wTxxIV z`e@mISh*!JR>>TsV%mqvvWQnwT?AcE=O}FMVE$&OcmrN)8pshB*bJb< zDoVS56@;}&T!D92-7ip7CqM57-lAQ-BjVn!&Xls2!rR&$ujx9mZ*wsuHIIxOVKveUel@JXOL8Qrn7vis*iL<&Yg`8^RNCXZOH z5moP13AVx~iefv6_>4B5za;p$NUns0Y`gQlnNtJ|r&jVR>oW>IRhne(IT*D08hooK zI`mAkdim!iN+~Qm1bI8)IGoxJRZ-Ih`Bj>0+FDzS0qi&AI*CLTbw5vr%_zB}4LqcQvfOq-y-UU_8V}5?21^ zp`zZ%KIS})Y`%=QQnAY2v8Rk4q3#!{#c(ZpQm zxFIo0n?E@MQ@$ssi((e27Wm_QLSxr0lq}}w?A}V^n}u3+?yNGAUVNrK=sbE1yIU(h z>vJrUg9R+9{1pPETRsT&s^JDIEF2J;yfOqVIvfh;<4%6QA4x6*)D#9cU;~7bEX#i_ z-YRZ1li#OrX6Q)dFlpsNq0qblfAC6@wiMitE9=6J$V;4L!)iYv(Lh6=3U{3bGwVt}*IqBBt5ZOC^&*{Op@eAr8etzzd zFV_&eeJynCVxgLmJ7}$JK@q1Qi|1LO7tCTUk>^&f_@03Vw?;z8bHwkh;6`&@a4!*SL_v9#fOJ>J~ zZcecV+emkQIIpS&pR%IzL)--;7ZdN%^@~g^;kEO!?|ZSQ+mV97{yh^bK_BtwXalYd z6r1*NFt|l2RUz4W?G1kOn~heoUs(efG<;4Va+VHw1>8`@> zHUD7wj-BDR&;ToB={s9gt}8J%aJF5n+LRV1XR_gHp^L<<~yFajvU)PlUC@)mr)Q3splzy#nKB&F7WHz39 z<94EtWS zTkF=&WT6W69L)UQt4yBmR;(L3iXS^XSbZHEH?jmH_+FwzyLEq(Gc4aiuL>vWY7H8Lz@;;q0%N#}xLpi*~4w^KTbg<^5(C>2sWgP-(y zgGWpPHuASt8aV6w{j=;9fT5EOMI%)#q+kI%T=gDrz%5(oSk&@Mk2=pjdVa%Tb zAyJ{N?#{V1aL7FsX|e;W{|YvLM*6&1HdSd{r+I_(aDPX;usBiJrZzSWy^vN>lwct4`YsR+eyc{o=~ba`dhD1R;zo$no9ukW2*6 zbF5pLwCd;0SQF#zYKCR##*Uzp6LSVL12@>sL67~vcVOrBzL)4EAB>LH*Ez=F?Dy_u zby%lY!a80k_+VfyVO`NPLQ(Fdc%r{&#KZ zkje)RC--57bY-fek#mkqY1tA3*DN-0;sUmVe|#nzJIgoA#RmOq_(i@&wtuT!)^uok z5pW^yDN2Dn5V_sYCHYhVd_IGDk}ZHUJf9*I5;jvqS!lZ!IV^;1VT+1z3mwbQToxpd zblu$O`+4f#5_|gsrr!7D8IcQ|irg*DO{c17L2w|f0x#{r95~I>k;mh|R{Vl2fC!Ef zQJ1c_+eo+#&IkUflYk9zT_s-h(r=bzhui^dNC9lRlNp)~aE^#bZOMTv7^Zu)+zWo# z9&-AjT)&kE+KTvi&e@{a94yLf>xgi8Wb1tz167S<8QusDHivz{TbNY4U#G(gK;}Dd zKtbQ>#aq@QXg3jX8P$l{>XgOB#s5CNQ`yZiXMKFW%#)$Vy;!@& zM#sVj{{f?SpeEx_m%ieMki)2_=iR)>;;Qy2+%7evyF`)uZ2 zv0i?md&zK!YrAXT%K&&xdiXLgE71C&lQr6F;}%|G=di{9%&=WeCEnHKFk-H9M{X%5 z7mc?!13&{W0B!NCmOIBkMjw3-66F9&@k&8)7OQ7@e#5zb%PEOK^pr0H#{PJl^PkW& z<=I~AK|s58=mJLR3*CTVuY;z!ffhuK`;E!`M>a8X=U*sKVL-a&`m6SNvppe^=9)yn zY&OgbYPP#~Xg4}6e>(6i3%%$p=Fvk^hhNmNKd@^(If=y{rY42r+&8{~Jzd$FcBe{8 zY#?_FLh(LxgMeqfgJFPb@3#C`Q=JUM4#a4KMAj!44#lEsYzm=(n!4lQkK+XQ;g_iB zyh!oI9J51@X?KRcU>3yuem`CK_QpD>y@RVde{72!1DXsY)OycTIvWn+Yj6f7LIIjA zj{b6-v;9vAJA08N3c-_0#Yt4Fu9mWgS(hC+6O|KML!p#z`ExShsBg^zyIbcV(|$+O z1`45nWH*rjuogl|cxik+5-w0Qvow}cH*`FP0X33B3U(;Orc*)CdL2V`If^W`oBi>d z{lhF|3ek1|x=sle?Ttkyplqn~c`ObRP?+>fD)2>*NQvfW$6SNG`D^DZlBhd)wZL1biU)}#q^JipQsZ~F@mfetL5~Mj@8HHU-gh- zP~E0rDWy<4coN(vDt;dvrEtF>8@UfPX`7iHyvDU*0QQfFMj9dd$Y$YvHzeHW)-Dpc zCM#h{T)e@cKPX;s=nf*aC*<{;mHl>8V36CPa?y5lOA7`T7P-jXDRl+(!nhL+Uhkhq z|G;6s%LH__?rGnSUS6o>;f!RHh*{e!_Swpm(QFPoM0(X^W7Uhuqa_Om7}>F_w2L`b zV`@~9Aj0|qBHGE-VBg7?Bu~g(_L;L_-_Kf2FPxM>IUnNA##7N<=uXd>{_4rl2i0Ca zDC|Y70*pAt4A(4$taqwiI=RaZ}O{ zCX{+lGrh^VfuBB&V+Y7vrTBH8<(_7Z2djacpu_UddS)Go^vOq|MC^aX8!EMV{z{3G ztsr?>`;c=3$-Mo~A=N9kKVqf`n7QtByf{SCXui%y9glAbNQ#l$D=V^XBq&Z(A&+Xh z$5@BrvmV>^Moc?|;;PZ8p||b9+0$lK83)rVsfH=cVC~{E6v>7=(WURnxoCoVyKHV4oVorDLe}ErsCB9Ph~&ljS!2=pCqrNM~bz z==Fmn7{B{AZKFrKysg6*!o14oZIMio$Mz#%wuUphv)=eF&2lEmoj%7`$9%vmthP87 zDd_K-1mMr-{FWe1R1#wX4ff4ttJ$RZv0Pc%{2LhJvD0j5Y%NUS@p*ngwuGzGqoYE@ zWBb0#-ksB7#WLdZAR%{l=*kW?*Z&fM{r_Hg(o@K5O_V>6RX{42S3L-kR^L7JgNG({ zX%e%~?rNmB5PeGv3kw^sps9`58ZfX@D`aBaq(Sfo2W*;1<*F7Kdfx(f2=UXf40TOePN=z8l-NOiz(E{ZqZ*8K8SA7+4lj2u64h~pYu0lNg zrT+E=L)=!(J@B01xDE>|MYkMd78k$Rrp}Wfn3pTRX5MDRWuetBIjNwm*Uz$vb`H-Z z1St5JRC;H>VTzD$)4mqbo#HrUw!OJ;*RGcrBmw?d;Zt9^0B6+xjKN^Md05$kNkw`p^L%M-3(7j|v4KV}zvB8%QF+h)Wf0;ojDO#$?_7U&~;Wt)z~~ z7hdo!;YnExKTpMdpC#COl^-ySK_tZ4a}=A2)~tEmoAap_l0n(HKyWs$$g6Z{^RmJA zBUNv9v%A;E_LGsfv6M62zU$OmNaa4CV8uRfx(XsP>tnskij(6sG%$ERr=Kh2OHQeK zqoQk%wRA@uad_Pp%+Rw*Su@~8Yd^%y-)$ib^6{0iRM}9w{1*V&pJ9g{&8t?+pYgFm zA-8~4=7cQ($qDIkPt|tN!x2n}WwVmA^t-Y;WAaW>=HJdt-s5Aa0=^Lp0+b_9gbQHr z3e2Be_)AM(fs0HeV@GB*wh9+Q)8=MvNqMq||A6O?^)@4lk}{Mnf}U4>HBllaW{nT& zTlC!nSKzTpw50gFw@=SztbgWY*nObd2X>r^;GdXxtEfEDK(15!jYHS66ez5xW`%Yw zSAMR%#HWFc>7oy7^gH7aDyV+f=47o!-2Q;}%fbt#ZfUrRZWt#%wq+)Zgq9&cUpYt}0 zeZ5VrLQhXbBaluO^E))hXYtqUG6u1TnCwSbInP$kgkGB86EI>{^bwqJd|yw}LAfbd z;I2(|TEYiNnMMHmI@$!N(ED&S3zwg+wM~xiV!7ww-Hd^zIrG~rrq^Sm_uXep?+RIV z81IXa6!%}j)P}{uz;(eV#0EcZ5?yn%TM80_AHEsuP$+-x^!vRUB+0J%_LKYsQ$mU3 z+qc2Zzqp;>9=+J_4DXENdHsw+^+(u~x-PH7!`$4g+~TWGJ9avyAmh2A_I~!U*xbi& z$b!O(VnLoyYk}B=aijkuId$qA6yMVx8eC=J*@rbbvr;Xjo<(p-%Dn+@OON%Rlr%3l z)=RbXS8MIh_g;}=yn_Mc5kaVelA#QXPn05xzozbZ7ycn+gfbmyV2x5A! zR?2Lub}Xm*nF}|@u>DNABB7&F?R?Jzckw>pMlgECuhw(sq2X+~jrzrIDd@&0FZ;Qh zL>$z|v{Ox!=jcsIyu#E}skV)lAkChHUD7ees@0QuM6I7bE1Gx(mmhKCP}UpH1I{Qz zXMFxlmU7Wq=e;1d{Y=GT{46~^y*6mB+xm?zSvTxV1<3JdG2XBgfhmN%LQ53ih&L&G zs%p2+G2ocHv;+Yc_+&SKZMZxg7O_74KKQ9E@EoDy;BepT4q%08ivkd;;Q1fZ^gL&g z(#Fv-XAuZF#&qZX!D6@d>6~7p7KcpVCG}Tv*LyS3v9ZbrGCn4&y}hI%f6i80z21$E zldO>c-C(qytF{oe-#7Lprc-^syFHfM*F|lsD!4E?ny|7nvsJ#;jYn}@>`#p|X~Nly zoyEm($0`Bw#NU?pj*lMs1O=kz8{W|eV^`4SA&_$HNpO>s!TPwkGsB3VT|S$oFl+8)TCj!|>IB zlfSALhgcAFBCM|TWt9T4xPIj4B@oVk7E9g4{F+9}iZ^zEhBAumDQRJtj?#S|CWfp3 z!LR-TO!uP^vi%7h8S6IS#O2=;Mg7L2->&(waMi1llEOJ`!5k#``WYGJNP0<*>oTk* zav{#t6Mokan8jBLwCTR*uf~vfPn8bO7M1q#h}YSFKaQWRpn zLi*X}i%5`*2>Kn74;glRbJH^lL+1N`V&vNF2&a-FPJjeG^vK|>?; zhiPG5!f)>=Rz9U^lud&~8m3h!i^Q92t8-V9AUAr-bGXQnD}Vr_^y-dzus^F7>^uVd zeseG}@cjoov-kUIde<9pzx$4qsvfxe6dRJOZ9O>@clat{rGbnNuLnQQFiJ4SUcZXd zRs7^{wYp4JNO7tv-hYd7-o!D(YpGO2|}@Sv$&9N ztcWj9fMbOJ+gX&l6mH&cPQDi1`>#7R9MfO~&D?QFZF{jaSX_ z=mUvIcL=!f>Ql_`Pb>zUSHs(Jiez;+87RJIJK5^ri9El3n{QofjjIJ13#9lGzFA3^ zd4>?8t3r#lzN_22@w`Yn4vC(Rsr-*QKc*=(82r#DJ#|6K{~X!g-VQc4hJ?shnl`cT zcysis+W14%lenR!ej;+)A^YJmi_1?lU6~_}o`Bq*Y#UjDugKSdeWJ=7^Eah;*9ui? zZLrsmrNCb$XO@4Ef}I*U-t=_)5$ISMu5YYnZRTFN+NgYMfi1kH*>zE=FD9Yj^<54g z1`!DfmgSX|6J=NG{rOhCRn70PFtQThNn(y5d56P29?6rBWp#ARe&R^RuYI2subC~; zrw*6e=po>hdI}%h{*aO5;IIIq=}kpH&`bVi2n>mnzD7q;_toGkr%|y_e>*}}Ot%G9 z8p1z5^~6j-tU^aGr#g%ZiV`a45%Irr76Ke{%_2wTZ3V!*j$9moc=N!#?%vw@JPAb$6x_Qme z(9qOi_u*3L8VT}9vB%cTv!n6dxLfL&#w(v|SFe&m46Aq_J{;0dCF-|^oe}j)^*H1I z^ULkOZ^CfNZ%X#0U?N=ypwLNs@57U5vu2JXG>IHQRQjhCh z+gCqQ{W#$6K#f?R>h^OJGGCJV`mVS9pj4-U=<>k*;mI8droV@rziCW1;$wq zb!uzF)l<+xmpHbLz>`-GAL`6A7{7j~f7h~5?{kKf1Oyj-Riz6@>2Fx4`4LR>;t_8$ zQxGT#Lc%0uLON2l-&^@iTD867^T`sCks{AHxuR5n1fL@-&$LA-*`Z@GPCJ?ztxB`E z4FKk_Z+}l^lhZ7jtgP%G&lP0b6)fr?L-J8pbpmO(oZNCTW}gCSW5fMuHU6lw(SR*A z9POWdH;#2<5%}`vbjmBmKBMJqC-$RX#Uq_=NkN`cI$!&VCBflv>vzNgOnY6oY;@OF zZpYG-R`GAoezViKhCwC23n%k@U0~&AH}r*coMY~8Vl+yZd^~o!O#XaBjg$M4nr-8s z94V<*U9KJC2gNUsLpNK($T%e2rfJB?$kz5-8`ieAgpTr@zRo{T-{eEAJuhZcno&;Yr(h21+WxYmZTo0mMFph%%a>uaG^ON1KR`&Y01R!%kJG6{G?Qfxk5n7+w1w;q@vyjx48^ z7Uc2h68(u&y}HL2p4SB;p*~!WYM&@fKECrpW^9^KjP9InH*Ti6QGEIyKLy;nfK0~t z{-mlFrGwba3c4`WnXO}ebiTGQ}A#D;Zx_1KGl*h6jXRDI# zY;kj!uGe%E-f}0?1do?ZjOLNx7l>Gp+M>iWYFL{qN2Nvk82pd=+(Qf2jR~*Y(sv3t z?sC2J_ov|eLroX43dkCKnvrfefW?Kc(ww39X5!Al@uHy&WMEpLOe|yuDY<&xi4;?M zV~;^(t&>dL{Q(j*X@9*YsC+KAPahr zzAwan`;LA4>;mXulr9)nkbv`cvj=oxiN- ztbR=hI4`Yv;R@XEV3M-gb?GW4Ez1{FM#`^Le(eH{IX8fUM8|s%d%05P25>!%?9V&{(6`w;SEp zM$*9x))pyG?X7ixak4KOMXUJ=-zx9A$^h3Y2>3b0)Do?`AadI}WIa)md`E*x_-d-` zHCxwRY6s2;Yz70=>U|(c?hpKA#6dAwGPBabgyqMAez?L6dzePnRjK@7hUX~=72Ns} zf?KrAP2-kMJ0;?!4RCGOY09p5^<%hjIRoM8uKN4n17J-%w<42XvK)A^7?CQ}6N%I)2Ax^bG2iuAvT=CV3h6 z4Qedq;Y$$uVAO7@lIg_zDLTSVerWiXfMKnOL7)RvOh_re1Di}ve#-gG=E1d{w`yL` zv}IXn6jCEe0(Ao+?$0%Y>MM1O~_|HsMaky6bfasXb>DsrmqAyA_NQwOG#)jjy`)=<&~|gq{!Hw z*5+Ulv{3GEH8v3+y?QGo5-P ztjjcIe>g+XP} z^M&9${(_?&1T7%8r1j;VVz;8`+NPX-4zFT{^F83^P~QB_HwI9C1?KL<>XZ4*b0@k~pa zR~Z7OHm{36dEZmxb?Byxq)1&@GK!(y5y_0gZK+IR@P<`pkr1>{K;3g z+cT@)Z%j zeLTkCb!fnA5dM&)B!qtML$ibpq>Du?SMI89ctHGn)*G zR#8$U;bVMj0=iVRFlT`JiIQL@XyEQpa?D5Vn-jZAHV)VwAB`WsK2`xk;GHbjj~dK$mQ_SDj8Ht?R=!5pf(%(%| zTp)!{N!K?uQ3hUM-ebHAp06%TxGr9ECg4&7?(*Ks<50cy_3#J-brG-2?DDFfntI~@ z&}Amt_y?|1oc8o3ct0>}7DOIQQHNY^y`vgA+aTCndh#4SBM=BTq5asCDwcwAAhc3U zojBhjB~?o#!L>WH#vQ*DX^83!poA;WFoHIJa>wv898vh}O~1*%U6mCO82B``WVG>z z67Anvmk-fMhK%Io57!@k%ZiLo%#{(4Gfx3J&!-dMk zuBk#B1=LWp5zmckOvpF-Ipnr{;85;#;z{fi?z`}Y`=QDjcAJ8c*0xP4T4Tc1dw)5{ zopa3sXYbp)U37iceo4EZKBxCJF@bwiEa<>4qgguOz>dk&&^dD@pz17>-L~3CZclo0 zC!+&D@osOSVMnLwhX8}O2Ks?ek)mZVv5)@KLySr+wmkKd*bp>n21qH4l$lqoX@x23 zKZ|AeEDC5fthy)icFc7wZz5z}IiJ+ekAB-f1~cjR6zJ&}dhKX^RU|mB!9uM_^tvzA z>gb2QQ>9@snBJe!wCh7N75nY2>gYr0k2DT!^(=<_bL8p5x%7n0+$sJCy{NE++8H*h zi~M;K08KQ;c{am7bdB$f5J37r^k2v`4NpC$^pmi)DEu~^@o;deFgp6gkI^ECh&vPE zRPel&d+Sn62vB84azy4g&b}==fSQ|q8Tf+;Ur(mAMFHib{K2kOb3X}ycf@qinajdFTt-&l6Q1=WRYhs`Z%cwAX{GKa|xaOd^fL_!0v3Y zwJQe9gWW0qdm{hm^I+~lvaVA8^#bqm*P?+V4g*Pui&j@y9eMB#dq&hY6GK>+G8RG# z^~?6=9=X9ZKDr(1aNYk%w;Ei99(!Bsis9buU;Ccbw04GA--}66ThUk$x3+uKYZSlN zHbN7|SL|XO@N!>8>ezz0JRwbw)+5_rf2e{n1(MX4^?RlG?^kdLW$AUs;*OnW5gw?; z?)-P_H?+0)kH{{QCjvP4ZujClQWqUbM8*@Ae$j*;XHGql)YAN#N`k!m!1IoBvRv<} z=VQuUMyR&#kz;oHZ{BwX6~0^rRg2Re3Nye6AdbUi3xN;tlcUQ@8{O@0?UC0Wvp~m% zSEJeLk+5B!0yu_PEc!=tbY3U7A&ypuM7G{+)zUgLxL|n`SJ@#4e+`6&kK55C|)yils9eX`X!TNNC_coa^#~TH!lS=hCizzFpP|h zCdpENzeeF9Ogs`c%Pnc;rF$jR~n}WXb^;p(F*S#NBFulP)=y6(2pF@X?A&KWC z`ot5Ltl&XNl)P32V+ZsE;RJOpQmF!~$qtHmo3O6i6-gQ|Vi1LXZ)SeqKEBT;FFLV# zj(reMU*7ak=Bb7^6|}cdW{I908413t1Z%An@_rlE#b~q8S@d*W{{zSz7zz>Om_TKR z`LQuz3uig$^}Ce?9^nx@q?q;I9uoWy8u*gb+s^AybljC#I=FYw&q^A7Ay+yfmmf;y zKYy=Xd5STb=Heu#(|4nY3hybsh`+Pw_vz(n^+Row-bY$rfqyOE@vdUB(zEDIR*n9bs)S=1(a^0}n zoN_bzz5*$i9(%C(UM9N~N!I<4mFZBAkCsky7BsYK`kV*!>xH&yWs}hkK0O({{A2I!G*N9~7VtblyN{_*jf`^G;)E}%XO4MrkTA-E{} zeD;}&qS%TCwE}rAo2>dRrrNT=u(SE39G(GJVmLXpn@AF%Tm2H42QsrGWSCN|RuwWh3-v}Un4KLplv<^s}_ri+>fbdt1bAqwysc9Q%eEpZUW7k;Ho!h zxT>Erwzm^SH9XLy0UN}k4h=@a#k>`7J(2QBs@+`M>_o@QcLH06DBJ=A*b=1ekq()P zp?SKOz?OtU3+#0@m~_W_v#Z&H*RAoh10c2WX8suMKkI;C3RyP%zjp!b?_bN4tma5# z6|#5JxBp>{Z)+M+j%>^06dAPoQid2T?>kjYSFU^ed)nZ5T^-cBJ!%#|bmkNuc6PRx z#dyZ@pZIA16YN*IpB%(IaIHXFeG1}kRUrO-S=h3TBK8qn-$~8+hrrT;vUI$q$&W90 z$=tMg9zOg;+5RHAihhnga`w&Hnn7c;!F4U&)}o@@v`p$7Iz3DgEqRKe)#Ca;>>8`P zoUljq4T)10S;zc!iPoh9`~BV})YHgk5__%prNG-&3~7vQo6c^c=H47bUo_QvCLk zg;df<1%dvWz%gDtOwE-%TU#GF%=mjOl9*rXX0Q=xum~~{`KxmDhi7TdD8#iKdX(Gk zlsA)<&|pAmr^quWvm|Pz{V53W`x-(!A~^Kiu2uX*ke59X5C3dd+P{4l5YZLoccYR0 ziCjfAe7n(zywF^6TGZi6e?+@ht{A1$Y~=$k5=yxunnTa2h_n7g4(d%Np7!`dML@7| z^b|wJzXwW%QgL!4fK)OMe%yIhQ1I>7$@{pZq}cTqHSDj!)DD_9zauJvbP*$pP9XBn z>3uMp&{S7jOY(_A3$^5a#w;q^#Cws$K{;^udg05ohp%~h0d;-d%lN@;R9>lRqxZ(> zLV8}2gXOZYRoe&7Z;Zo}kBuD#w$Ln9CZLmE>Wghn-7hY8tVD%B@BBt}7m_@x<&yP&er}z} zDL)ipSh5ILG|Z~mm~@X1U56%d2bb;q38kpJX(BzN$Au@cE+N)EQ}Vyj@Ka}ejQK0i z=IY28+o#(d*&i$!s&8k84#60!saEX6LN6ZT`1PnS{sMoI5_HmrbPC1UdEBn@Ga|sfX|4C@L)E9dp4^Vi>{TI^0XM zRzwp<0}cI5!x1bT@$N$Y`75oct{DcXdMOD7JoU1WN*@&GGpib>qBuu&>mYB9K*kWO zSX*t~ecR7n8NP8p*Kj^I|M?=QcrZJUjXSQ>&ZNxA;D))br1RNlYu%RnvdaVCDURa< zNziX^^9m|Zy?yX#s)K+tGdcm`GAtDs zI&2e(%tD4t@(89kA`kCdRR>FZ_`J8P6%5!c%%EMS>1y}fdMIeod=0*>Ztv!H{ru5u z^#4WLTLs1aM}1?syAx!Q5Zv7@KnNZZEVxT>UED1=0TNt;ySoRs;O?*lhs74_@87qb zwpX1#z1s_Bc4mk9p7YU@ABNd8KabZ66$`#3I(-3%8-npEk-}XNOpKsnwcJV#<$6S# zH5%n<2sHM~DzotIQ_NB9fr#xMQ;g2WPdVssQv|3VH{D5h`%9Pt+0oZAeeM+&xeW%g zy7y586(cG!nW{#=$1a44)!#XnCYqRSN& zrI8jM^MsytaF3Qh!OOcI=3m4zOW~ItSynV1uAch!h-D)xrU8pZAoM_@YMz!$)=7@T7{{=q$+yz}f#ZEira90r2CvX-NoZ_S|x9#a8+_W zmm@}=L>Sb-SJHya!fv;ELkQ*=92WuCt~J|NJ4y;t%(rHxX?c*27aZX*u#!`WS@nqI<0#Q5ob0=`jCuZn@Tq%)DSqkA4&6z+W{80ae)LP3 z?7fw?=gjU7tR#!EJXD=s8(M{fc&3wMJS4V`oRSc_kx#Pyvm}x>6hGhD&+Kip6fBu@ z;?h}}*VI;eC>)j&dMYpxH%m@j&6PRL{?sYvY_f0cO_15v%2ZuX-Fo|7!j)}L4oe-y`{o{{l&Kmx%vNdZuJY?f4OxLB z5WzF}VmFKflE5ONubGTp3TBB@O=tVHA`Mr0$?0g&3n4cjJD8X*`o0aWkdIBjfIHtT z{nedQJ%II&kx@1*TA-9aq5a#|Sy({~YQnV7{(ilDklj+@*{S!|>W^g2$o8G>98 zmf{Hdv;yMvrq?3@61|ua*_7Pz=zMOFyM+_`m+Vtch%=wQJp0tPZ^;Da902?p&Uxh6 zd)mC1OVrm0PT0l*5oKTt2P7Ai@uF<#;>~Xdq`Bg@zsJG#Id@$Ofds51BHdmt$Lm6R z0`7YuIOt=gQraBrOtmK)y|Y`5mc?E3tMz%HUSQX@3iQcZY0NWv^_TjJ6NHbareWRv z_~LUbn`+3V4nhcngnz;8BzBGuMM_U@{>A>a$y(k`Mdge4_TMHIijKq^8C9}hl(hvoG~c|Euq)bdeUpM7Jerhs0y5lXfa zt4d_&Yk~iRsk``A_O&wd)-4u)oH@cu1zRR3@sYL{qgs6~HPhO+5W$-nfm@C<^(!E9 zTz_KWuO06;4zxYifhZ+yJsDqzgliT zIGO@EvCMDNNnC`j8MeA0>$NfWo*_Qo$z}*t68kaFmbquR`Jm0Z2;fsvjt4qF^jya8 z#u!c(-x%~gCX;rILfo|-a<(u7G~;CIV8VIN=6frhz7I)#W_&lB5i3cv;n1HXTLI57 z_oonf%z`sLF3HXd7*$TuUmlq3QXJK2nylM-EsN%Y`CdIB z5{Z|AhY(T@sUTE=gQDzdLl0Tgst4%U<%fo32!hX;(H!^sK^{2!EYkg>RnzU>vNbZs zV%yB}{B8U#`hexZ=B@a@4lnLpBC)lr<}g?^}-#;iw14xi#A9_z{}zF zO~spqGW_Ws@#%6xr}cb|#1rfDRVUc?MJ>m;aG0>%GPUp;#*~+O1Rk;`AglDbM(+`zoIwD-nPbC;eYQu6Wfch)7eN}1 z=e_(M8;Fet*_1tmS1kD&l|Pu*Ze|ZT)rpXvpEBx_64x}&x)W}By5M-b9a6b{0?*gv z98S_yrQZBajwuc%u5j*N%RI70MTJrf+6ZcgWYWB2&c3{Pnq!%2eTkrZSxWGCtO?yl zEu714ZK3V|2YrsyWydK@|ZD#CI0B>_Zl5OMYTR|F+GUwkjiGZ$69ORL{2XE)y9 z>f46|lFlV3cXtao6Ip1W4u(;7LReT>5b1_8Gs~F`^i48;L2EK<*fmRO<2YMsScU#@hB@$D-Xt|R$!j@DQ2tw(4*x)i?lQSS$Py+9yB^3+dBkSXDZ zVrptSXP}dviHesixqn>EP3LWNtDB2q8vuoHFFo9;E;Wwb!z;UTY23>bMaD&knhr)Y z-`Zo;Ed;le0zG)ykU%=|gMa^mX9BCq`LhK4M8>o2vAEyx&yjwU#Z45yyk=`wheqy0 z3ZYN33FmbdO8XOA!-)luPS@J}@z3&@UF#v#)hO8hL!U{#sGKTBdh1JNj@RlQJHgHq z;Z3{45W@d>0(c=5iXX#CP+xGoaWE`B)+W!9j-i^HIw$dMr)!wwdcZFhVSOMpL zw**0lHcFEE%zdqE9QrMA_A5=vq($k}JbP3JTk;zpj_V17uA6Gq{j(>t#W7Ds-F|rb zu^(0Vs@@|tOx~oje>EA10A0QNd%H4U4uRJLPfUZ7y`d+}jf(8j8^}X(^ zV5T8`F<&ird`$YRU*wqrcv%7lF=L9r5otje%3-B#`u{UIbidHl2fj?_$>v3WTVEm9 zKXeC#xj{Fy(bt{tQ+YHzXfE`4Il&Io-cIgRjjJ(1J7;UH^ydgJQbrniQ`0{Q5c6#D zC`heb#81eun#?UM0^RlvRALo_Xb-1eW0A9VPp>g@)l{*6t7xLgY!6-hW3aVGSlNut z-Ck)t_R_RbI&NB^W78R~NcjAR@SB(nKiOEX61<^lP0xA2PfMb;Dx2BgWDJXN`cM}kLDQc~jS*Bg~x8b}3v+$l^6kBGxYr(8i6?C^+yu%4#aekv@8 zfI(Di{NPlL=yVqE|H&Y$_j^z8sTp&1icq&NTldxsh%lsSk0CfMXD`PoMZ4)- z_`dZV>5PR+h6u#c(}3Gd;fpa&USbtA<-=Z68!B;RHQq*n3=tekAv~>0ecD**nZ53( zPvD&K*uWPx$%(*C|5t!#N;YgJqsENl*we;UsZCk2=4soom=QGh8JT{>9 z#81cr8u?kFW49O*7)f!7sg%aHtxLlw-OZ`fgOI(^S?>CS?o0GQfMF0I?nx_{f6=U` zSBU>D8fam=yH_LvsQjD^-VSN98&6UtYr|07d%#he$0&0dXTc&R&4wB2Kb&7L*^l}H z$ST^bj+i(_qtc1NVKi@oE=~ofdQ*%gBYV-#l2>t!10`ZrPLs36!@NR=Wlak%x<5Q| zro*=s;i*=e*rVPSjmos{Fl;e5by8iz;XD|i=G4%5MP7(452=XI<~jyi?*;lxLto}w zZDmm)i!u=i$XCRHj1V{)1d~Tp=NT#cqa}6>(y+gSAEid<278iT`o+lMVT^eHK@R`7 z-qt&T{z`xys-r+A2p)!uKtqs)1^MxQA1dN3wFwXZ+{YvJYWbcE5$e+}U>?|ohyXKx zp`4D73Pf`AR!8d`ooBH^onR4`H7Jk%W;kWo1y>DGZwU>28S!cUB^#24wnO-NW3@=a z&7~wZ4jrQ>WI*R)(3yHbE)OwODAG3xE~?~O^GSo1{8l5|DqVE`ik&LD3)!Cd^afn^ z=PLL4%*k~g#|F}o%A{RI*`hDpX(Po4(M*pYW57ujL7 z*%f_Yr1lGgVy0b#O=h3-;@yWHVL37T%`U3B5{-~X2F?(`-theLc)oqHP5-VFn+0XT z3S&!{(NVC$2%(cn4UjMgFiALMrhHh79DpE?sUa>Z^c)vJ1_`6}=`9f(sah2}y>K5Y zA^E^^Y14IZ|H&Ar$mBu;C7qm}{u%;Z-MXG{h#w3xiEG%`d;8`G91vezcVZJw=sP^( zQgTIGE8Xbf2?AD6)~mi>)Q{jlSiW8_eI=!p1{RUg(L5}IUoH^+Ns3jo@=JbCG0W}v z8_07Wi>;|Cs`B5r>{S$K6#NmhYw!bx!c6Y6ey+PiBaN8^HhYa|0nBP|W%qF+y2){8 zWeja^Jf54eS?`d$Akbf)_PTHYssH->i?Kr78|33fM=lY!Hry8x%?HHnH~1|oaLuVU zSypX~8V$~^U&^(J0l-biX?iqbq!t9!4v?p0u+T8lcp^N-md$V40PW4QP+R3V^gjVG z=60($*hwS7|2_H~ye_BI13vNql=0GTy6JMqd?WC!kcl@%*!>EL&!OT;wKF_UKfT%7 zrc5b(>}c5z5L>3TZ?HZf^4qM8oA2EK$icamTmBBu)6)~OR%90*Cq4FSz|#wqDd^}Q z{%6EKwpjI9D?Le4wUTFkeln6og zfbb1@yua^Rc0JqzPHJG?SL?U(K>y7XvPB=m=}G+ArdQb78T>9b*3>}#ePLpZU4SDM z83`Q+$3*&yX-iR5Kj(aBht3ft2+ack3W_WRTW%^De2G`_PMyzxi$;5NKUoMc$j4Gf zC7OvU7N}(iP%(K?3A#kq+*V7b?iMS>3vcX+A`^sA9grSz{XEHB?|a6q9|7!=Wf?Bxj}`e#`;?eRPH{&1 z;(nVQevgc+=oVK!Ks*IVmL;mrMpmCFpymg>RnHj6p1I z{N+o+c8axV=hkC$ald{+rS3UQP~&)+$M?j#mwKyG#T09?=q5A=vJA8cnS4QC6eOnu zlX4zn$$eb@@H`(yI&z6eSfQW1YNbJ7_G`}GRr6)Po=E6PWpIs;p`dlHBoC8d|I}~2 zM3u-q9zoCPWp^l^Twm?!O|yj;C#8rR+Em}1V^{BELGKYVx7L;W1(4L~E|0x< z1)yk7d%8aNf{e5+bO|Ar~fzVA1W55 z`5w|J$}*Ct`A>*&5(P3+M>PCROCsVsQ|G-mS0W;k1FRBWco>JAnGqrPlnnu|@P_P7 zuhPg6a?ht0XZdji$FO1A51HMeUT zSZjAQUac+Q2PF7kjWCWss)IvsMj#d;f--d!m$dsNGRCFg#k^ah#-=aj3sPI6ohJ#a zL`YCUyxe$Pcs?Atn)8iLijbE3G4v}YLJ(-mF#2S@9T#Cn7;YU8D9?AI@rsw)namQY zjbIevM53EjB3r2zgE51#|3%?jJwnf7AJ6;48Ed$3K#&q#@ui}n(H$kiHrm;K+I6>r zf`aAmIrghf{SL9#<^PQ)4mYt76zuk6LFZEoB$tEh@sZPGIB2uuCeC^1t8`njie%47eZ?9O zg`PXpaQiV6uK?>(_ZivUeb~4)iSzKvZUXT7;Ny?04Yf^KHs4g(S| zAA1o`?f!2e2(Vt%r%^&F<)=LU@-~z?W;C5{0hYG1PX+?zf&MO^@@HE1;2)>A`{nn4 zW9VlZz%N91*UbCG(5+TcEow`7P>!XIY*kpKMuA)NdFFcth4?6qb} zz?bTNkB*5nBNAlyMSH!?_t}ex#{SuRUxZh0QQ(Nx;>RKos+7V*5tyyJ+#L#Gs5(4o za?gMt|INdnt2T4$dAbq?*Cu#QXK#Z&2e4m(7z=HXiqDBZG6(WElw!Fq=hKW3dPUaG z==fB7Pa0xqt~s(qS<4Q_vsjVq3wA5b&EQ$7f|NArTKq=m z90M0@OJf&MI1L-{KI-Xx{IXbO7?Kn4AUCR+adW(=2>$qApcBWKi=vUZzwwoo8^Z~I zjYsxnKZ{nDp(cBhTyA_K{y1gi3}qv%`kjiY&5fjy-wgww-GVYpw#2gnjgF=RkSf{q zPX`gPI50?_bY%Up+v#o0anLx4q4vlEpJCtqrHksNbwg|OLcCo7A1)OB(92E=Mq z9e&e1r#g)G*jz~n|9VGa|84^WBv*@cBK!b;)p}k2E=w9qf2n_3S>?MIaUC$NWV->P z)NGG0SB))CY)4!rd|^01$TXC%x&jWyH@qzyF|DgEYa{j%kAggKij^}#w?bzIB?Li~ zxk2^gM}&-zqk$E3@tLx0x*b20Z1jNa74&Qt)z{B&_8aS)Jr(59G)`RLf){TvG)hA^ zzFV`ezyJCm$iigdL4@O1*<*NbgtG%QD_Je>Xzbr~7`ff=N79~(1oF?-kigtd)|O@M zK{Tjbu2Zi}%+*wmBuGplUb&VG{>8UOG85-2s3)QqFP;XB9;3{O3N^bNT8WL2uDSVR zV|}cHsYm~0h%l5teD`ov%osW z=0`sVo-L)uz{6<$oftylo`om@O8|@=f0}V0fIZtkD5nL7M_|P$5Jn&=J=93cR|OgF z@wpn434B4>WOc%g7o?`&NZubZYhW|Q=`{E!8_OeL{H2g=t>@W$J3z32T8i?YEDq+y zDt_kJ=TH|k=%f6Gm3Oz-L$uA{Bt@3mGq|wH93wK4_|ipdY~`Y<0%;0$)ihusEjGlW zrL+B<$ctmM>^K?ql|d-F1KiTuTAP7Qg#bRwrI-O06AMAJtBa&`d?qzK9Z4u#ad-$b zOwez8I`%uQgY(DPc|XtxcJO;WgwYiJI|kR9rnVA-d`$!q}x60 z@yjYFGd&AeqzgX5!QjY|+xgAktL0nesb+~pmp$K8ts33ze%zqp_49iDzlMgr{M7ET zP<9L)tZ;CIa44wDXHTA{9Y{Zc@s(zu5B)#XXnzM3lbtsybm;dvWTr;J-u0BsQ-I>B#)M zK_+zu!m7&`(BoA}JZweYz*go@Py_(%7QJpwl4wh~@Abh%M>~G58vOdpw9fH_=+BId z{(&e$B3Hx6o`>C`%L*XJ{f5_@&vDZ0Kk>$-rm^_bFA;A4Cm}aFW4HyiY!T#Q%_zL` zvz+w@K-(2|<&yDBVfo7!2a<$W;`&s=T>f3Ut?Ttgv=qjSQbfT6HDKPXb~N(x{7DNU z$A>Q%BFm>%!oG=md48m268y|!Sbv}v6WtNN&pw0SiglRdD0{!z`i`)pIz zpoZc9bz~uKKWZKmy^C?aNU(R?*H#S{BWJ1ZAdC)~)wf>v@c@Kc|BbQZcRKXSS=0qI z14Mk&o0~@U!nH!*NjQv8XoWRDOhCv0H9gd_XLAk~)z(n}=gb0NV1&ofl;y$^FqyFT zCs#`FVPu`atS=Qn+2FLMVh__gu$aOLIDD}{uIVu6#$<9dK__PaC|kP2&_lWHgK(_L z#p1_U4a`u<)V?xn*CX>^C|wrDJ* z2#n4Yi~|Q5vc{12kM9>qM0dsm1oU{WvL{Vy?Cc44&|FOuvO+lq*3ThySsn>KLrm;Y zCZt7XH5^2?@9DCGNfx~;`EP&x0h98wMn^y~vUf6*a>RqUC|^y)u+g?%>Ay2~D@rsY$8o4bWM|EVCk76(FHBM2~-;l4=bl(G>+m*NRmXW4H`U(1>~> zMi@DBLOA6c<1M|#5QjeP=ZR5Qhw0*bbo{4Hd`~>zb$-O6LUrP0RmaQx_;q(}yqC?$ zKk|KxUV97?Vy~dxzmx3hn{>z%G$iic;i?2ghp9({>V6BUEco?l2NkPn98<8P zn=cJ!7E57G_c?Q*de6J;V2Xe}1F0M_u-nNJJ_Z`X7Jbz1YrmKE*&9|1 zyj3%s#uj}07U|9%-h+lo!B||bZJvjhmp5kMG#bxIl#DA^Qby z*9lXbIJqDBU!|WpTsyu%34jw$TLeqnuOwMG@0so6T@ktXU_YY-9xH+49KifEKZB0H?y(5{X{qeyXW}^Hqe6_@^xba?-_!> znYDC4hs=W@W(SlPWq&t${|HS#j6H@}(?1%f7otEMr5scD*yzjO!98~XZQfCKob(B< zTGeCY&?!tHjR__BuwgcT0NMLSWZ(~Lu({yxf=i%SH+#T@13v^KclQsgNhFeXEnF}u8lMnpc}qheuxhi(RV8Qlo9!}*D90@Q$EcKKb# zyqLHdw!hT}tq5?z^DH6+Q|L7|o37UNe@-ufwcz=4a}p6-x50?FC(Gr_76XyEJt*{< zF00YU1Ij^~9oWdc+qY==Ea1;0&jZSZO8m6q(kZIHlAk%qyLb3T98REEJM^42~ z^ml@Av7}SR zPCURc5TUxbFjI>GIMNxTpR>hXNe(7*sv)lc0Tiq7j9HYmMl_U_!7~ysLnE<<7q(RP z(UnQPMW^j|%iWj@P*8QKEQ?(mvA%|Sn1-t!V`fk;x-@r=n<~(lSCS%5#8!c6PU?5a z=Jm8-Xj_g9VGMojogojGvc1_bKuO8)gR4%k5V@~JEF4g%d#TELC);Q!`O!>+ZrBf5 ze^Wr3#ZGt|PiN&#S8*W*VU+Limm+OKLfO3!mj!UREiD~taVMKb@SPsot?QapEmwm-`DFEMy&wn#c{Qb z(OM+ut{4R;Z(|XSpD(spC2BL<7d=~+YWk864KoWTiPF3%B%9>mNteA;&A_gL0uF0q zRX7;H|AY@hJ~LMax)q*>VUp%KcKh2%OgT;br$rM%7V(!Qc1WWx3yw7%@bMG3^cu@L zJ`{!_yy_xj1xnB^V6`1=HNE`240%UBe=TPBonLG!sX7-)=0FbET@x|`@AinEaB2Nu zJ)@OKO%Lhtuqp`Xj5v5N%87dkS1WrNHy-~ZXXG_u;@bf3y)a6RvSOya3TXV>tGsXWgegyN7p(&!uk^F6^vh=Hl1)xK2i1B^4l#0p3j&_&HipfC1@Kl z>hMChoch(D{~8`1{_#{(X=!y;7Dy#;tvYs_;GaIM0r(ktFXbFav_+$q0-Uznu7}++ z0RWE?J;)T(ZWVISaeWmVERF?)yrI_VQYN-T^#AJAf?@(Qs}ZM*(f)eegC}tcroMxn zF$?klD+6}%6#Pp zf?T1~`q%s}#C}VY))8~I%dA+AqpK-sEXO`tZ{NuMXe!5p9wg9syljL%4J#~1<5Bi4v56j2! zF!rdCf!Ob?##)~geZcE={0zLGh<^uymv`_tlzh^6u?RymZJrK_BZ}X!g{R8lpRvh0 z;^+*2TiSoddnp=A+XiIZ3ZkuUB1;Ge<1oxwK9 z%BO7#q;tH|SgEA&pUta{j8Y2DQS}t~4Ts03Cs?K}P zhsA6@VsCuKZi<~1+@zl^lQo4Jlse|fDgJHraXoz7;%drWPVd$IESQEjTFus&!kGWG zz6}kY{FF$NtCn(ht=C`B-ZmA`YD<;((6XKz{djC*5Zg z)}AVxl^oVmS!%_#?gsRZru{Sbp9s@at=|DPHn|{0uW`0{;}Phv=v(48Bf2x<||7L5vgyuHI;)~Yzlu@d!Kz$s|6f6JwrqSX{HQo>Q9%J3U79-=wG&KBf@2Hfv zO&XB|^5c(0Kv`QqjkWnEcTpww1pP)=8X~k}Gd+D?vX5{;s)OoERB~ zlgohwe&a}S=Aus8!1%O}NLi1S3Tg^0c8~u|$4?FYA!#$CSI_czk6ibB6k+T~?C18l z*l0=RrkGAqRKiZpY9IUfFP+6-|M;%FIuWPeTH+Jpvjh};BT*;}Ijj)%D6N%N6OaUh z{n6H35vn-XD>%n}D1tkW_6Hu%yHP=YQ2c9%%(R4ok6N~v2_C8V6Vg^Jq&EZ=?|ZJq zI%O#?xXE=e;|o9ZL>s?gmQd)Ak;_^SXa@MH;k_@nc6ZI*Du-b#piR#Mw6oH|uY``( zMDali13LKvMm1^NOB6CPGPKLfOGt&xVQmC;bXi*)U7=BWXCSkoKKZ))Lo_jj!G?FO z1FVTZ*yXU^HVxEPl8IS!wY2?{h#2wmRfwkyo4PDQmCI2%S4qvpn;uKk?VdyeZgw(% zJbk!6{G~9I74V9EXU^$Z2N1u%Rnqw^Cvh^fvI?JPxT$*|s)y3#0K!+`uMSZM7+4)$ zx^RG#)Di;=G799jm}qF~q!vPIlf2%>4fd@m15+}_TUmU0GsTc^@7}!&7f!mk!<9M& z32t5OvrZTIc>WY}4)*y`&g~^Ap?dzN9m`D(M0tg}|jg+dhbo(;P$t!d=TC zB($V-r$RVEJP3U<(_S{bZYeR5?^+~A9OL=b>Twhn8}Z1z%tWrV(H#IA6G01F)#H>6!!+G*^OM8DGmTO8f6XKIiC$xPlv?(PHuYPVH?2=pQlJ?1NW zc?tPA@Rbc4_wJ1t^#j$Cyi2T}{Aq}=qhHH_64gVP<%&-DKPC_UqlXKNfP$W4{=>9t zeGRvQn|qR$$@aHZlJ%9Jqqs@0P<-xALx5iDvF}T5S9EBftrn8FxqyFy@Dj)`c&ME* z-j6OnER7t$XJ3=YTdHp#fm}BtfIEwh?3Y^bgPo|p=*dfOL+6l64u5KGo>Zw}PjiO% ztirI5i7=&2l@k<3D z!FpS2&GHhcjg_Z_99eUXicXQ7j&5bW-+I&A=Rc|T9)%ec`h68{glk4uaO+6?Y@6wo zj)(nN{5gr`qmFin$EHEbl|n!nHah+bn_A)-^G+x8^|~aX@9k7VnF>72Q(UVzwh{%d zbG71e3+P$Kb27z0w$m-;X!zx#`X++$lPOT`d0uwGrXwtX*c?TMr#Z!=NL=^6WfA^^ zKT+RDjI@Su40rDlTUV>Uj<0HXUZ&D#nVJ4tz|*=sTkp7OsK2@{vvO3S`x;_oHIa06 zq^KV1jf*>r*StWcS*#ocSYlJlfZ+)e^}u=(asAx@+S#&J5xMj%C6_+YHn+=<>SX>} z)iJk!vdk-W{JYif?)eTd#7}OcaV9&Kn-blPBzGl6ljLdU+O;fvb+DD{X4p{Z?C986 ziTV3-FE&7RBIXCf8ch)#pDE!cDMXpmd|X6_#FO*Bi8P`qXgmXI2$VEE7j$-WfD?K_ zDudA#;Vn|^5uZ9T;-}baQjfMyc5IWRxBLdQm@bUe1L0vv!Gz(ezu{_Y^?6>L`p3Ks zZH?(n^8KRvUFZS@1C3GxxPy+pjZ^eE#^)4F7CV5zj_KQyU7b6tX%qToHF?HV+GMvv`17ou&9n zD!Wz)VwpjhR*OH!TClN~n^AcQTQITD*CRZeKyLdF6<2%K8MjuFpx||r$C08}K8H0j zrZ+Z#+SUVv2Zlqi$fb{wdgbKgq`&D?zBNnFR3Lh9-C;dr>J`G??@)(yLU{7JGl&^F z=(jx(wOfM@{|qdQTQdb@1qJT{zvr*azN|Dm;!dOsSR`=97Hpg+GcpUExoR1feP&*W zKaX$5?gu>?3U*F2_gD&fJP8eK>)UXwwYi^S&@1>O0Oz30o=e35+T5{FmBsxj9p}O^eye4m7zK#yYB2uqko*wZs6eV>NnicE4T{Ew)*NvOwYPrGmU? zoU2u-H{Pq(3A@RC_W~bAd3RxjbK~G~wiadRzo|)D?+ZMb{HQ&BF^27C^6{1$r$D`% zwe5%GeJE<89FX35ffUaFq-2nj4-HuW@}V<;6>cjh;FaH7njXX|aG(J&_I#T^6=ts1 z>!B^qyFp^A7>HhX>)T1qQw>l&Cx1PRDDVF{IG2HMMF42Rg)$BU%Qs#{Th0I+!AE!` z`O6g#k_->~?ncAPnJH%TDIB5h!rxcPZk=@3o7n+)6KyJW&ka%TZ%F#I174qTDO{Fn zJn^TS5BvL3uhR>1&EJ}Jv1~P6=FVFB5-*u* zrY;g%F(W{CVf22AxnrR51(EySP%9?zgDJl9n<^WBpno}jmzrK#N7eSW2?1tN?jDQ+ za!7R>wvS4i%IQ0cVj!L^TR0VUI=!vTSI!1s@{w0LQlrwQVGUVqKFOAd&fzWJ_k0%p z5EXB}&N6p~t|IS{j7wW&BoTlzWF?Sb>|e%(43SjwLVEnY^uf=dT{$S1x4h_ij{KfN zsDYY&evFX1yDVPJsYvkrr&sCY{_3A%G*IH1Z>CafgdfWFDA!7=?dvWyHYC)c`yaT zA_|ktD;2e|Xa~4E506}svT79YjPB=sml{n%KcKc1VC(VN6ptY9IA6x^Wjd{^nVK9Z z;f#5X4dPGw;#cWPvKW6CXkR=fp-VY z=PV18X{?S}XFa{X0j8`(!{0IXj$6!G3NEmjB!ZT_nC@wLdCImbb?FT-VNyxlAHJ67 zR3$ZTzXB%W(tbGWZ-=ANrhxH|=meE@>Lg-_d8Ey<&ab8xY$Xn^V(WiCWYp1@RM0iD zt+M-$-dSr4reGNovnwv2YxcE(WW?LiIYzA0bXQe2fZV(SMfS!b_F;Yyfr=o1{pZX= z@3PsE$@noY()5h3&bf?HC{>BFBu@Fkp_Jht7IU-VfA=reSYW-)F#CJ`LWj9j+mgV$ z*|ha#Kgufh$w%NSP#CgM!C{sfo~h$n3I6Bz@tn|t^ez7At?cxfhvE!h7Z;v^KY#jO z5K*@-^7@_jATyskC-IQvACH!55wR5FgHxtO>3Yw6bC8}gc&_N)Pa-BI=j0*=TE`5Z zq61`>jMPigj=bXG-|=y*@ZE{qj8aW!UnLKHK928R@fR1-#H`$Jz6F;W*rWng-k1`P zP+seW3i8jTJ3T82C_zDyq6By4<-{Y-H)P*%F3bt_-#KLJKBnp1a{qmN0^o>i=5@F#5W`X zC2BLX>(;uPJS_7;-_5fdwA2&W4AF zKM9N1KqfKYckLS*8*W{2$(5Rt0z7u8p17VRahy7tnUu@CM1GqJatifn=EibM4|pXtz-jZ4UcRV%pP`CYEt<3!sODU@n1Xz=|h!K?&Lws|pZ_w%Zx; zrXSZT{|)~`JZ4%rXrq)I-lqX2^XoT#HWB=3L!Y75y*-b);l$}uS4NvO;IR4-Q=8!@ z|HHUbk#Gd1q~s*-`&gH(x;gdKT&AX~FYaqt#IN_eYFklu&m&q@I`Bo6AM5#^fn%z& zh5UD)OhgD578YvEqk3r(-IaQK0vDYPR>H1Hdlsi~`RJER8}V6S!doY0~YLKQkD)*&6SZMq2`MC{J6NO(&s~Ct+nVNttgEkJoiJawY3*wF}0|)m8RDN9-Yq> zwEM1hI|FL-GrBW3syEywh_hQCXxBS-gF~f)k_#)kBT{^;k#tSE}4or@F&f2MmA=3yP$I_hRVku)TJnQAdr271S zVwH;nY>FjW6?z)&gyx3=F&YuWlN8_1+Pqn( zo58Ky`fauwB*at4C6?@y;xVV3y_=R6D36lR)wjOl_di=CmMcu31>CzANEm0h)6n~ffl=(vNH(@0cDKf)Kl4Mt7<lt?t$u zwu&vUYSW7ozFiV|+~Ipt@)VrhjI3#0;uy87Z1m{2nV7m$R9;H+@oVoQuUBYFuGzo8 zIHTWpUT<}jPF3P))rk{^L1aGq#MW-h`)lUPD3HdIpLZV`TJ5i6YUaMKlvfY4lz)Cz zH{1PFz3Ph-((2$Swz7B^&AQN?+PwI8O8o9yv!gzarAGx70$v~-5)B+YniSms+s9lx zgloF#=5NJWx9sEsZaN>oAv7pZ`|&l#OTGx{n%(e!YHwzoD-KNmSSj_|^>{WLqVZ?m zi#S68u_!_<=X4vg0a6zr4%Pw3t>o1zY-ug{yL zL=yF$lfsf`m)A~4b5m4R9iyWh8xmH&nnF^;1F^3Uzh0Hmsu!l13|%W7n5J`=@+7nk zzRde#X$5uVk%L!c>rVb<@aN7^{+^tS7K1%<4%@{q1~_7W_2<|1n2#;wvy#tBkeKwp zf3X_5K#T@bCqTLB9>BwYbW>bRS=`hJ$NH-EBEBCLj3yy$T_hUx(h$`=ESu&p;OTkO zDDV48!mW?r{dVnQ3DnJ0Ev6r!4k74&ddJYpB>AVZzF)fTx^^A3LhMI+=)M3|iUn9Kmk#rMSsvTZA0uRBCZ(IW5Cm{y8$ZYg>&mwH0!^U-zN1T zj_g(iE}1Vc_Jya*^GK)7+Jab-wZE|&BKFs;cUAJ24FX(V9$fm+he*F^tXi!!S!ILe zZy%PrN&_@7p!Uf>{~K-J8P(+0t-Cj30TfiEND&bML5c{1)PSf+S2|LnARQ9vH6TS0 z5D@87f*>Hh6G$MDF1-^VgeaZRJ0t||tNWb$efNxe?%n5n_x{UZ4BnBfcg<%$^O?_F z>kV!sv~t=}q?o3q$2RJY*0s`I`ymp=&$8G4iId+uy2cR>$?gxVxlvD>`X!Azi_P;h zw!T_w%ohms^KLC~NiHP%Wy6uJrgkg+hHn{t3uaPVCuz&MMaE$2a5G+)!nqfe$ zw{qg^C7{K`BW}G2`sy}m2=>;0`>3x&oHXCIjI8X_;2c`hHeX4aW^*XwMy*t+|GaQ% z+xti3S*xZH8XqF%6(UitBoEneeezXYl)exq@_e7iL8`Q6E{=C#>UGNTe5y!P@$x$! zdeNhx8fPx-g$w5WXK*}lHKy-rx0)IJS6G4U zJhP0l8Ru; zN!kYPG@|F&J`Ei?IAGE-CHq10*7i2+^3d*_IW9V^uoUfc z-W|)ZiZq$ftnC-$iZX%LJ(5zJDE#n~t8;*QuR&n%@!)n`MxkpuOW^TyhfZ5Q(wNF{lCHO|ANQC z(ckK6cNk<>?u@&|75s46ij1R!?_RCmpQ>0c(SNqk<&%t?^O12h1cn~rM=kuX-uaJC zMsV&)a;FVLR-XqRn?NzV7}7}2=tx=7m!`(jv?Hc{{Pm)HaLN-MwBjmuMoA^7|(9#m`|nzRrd|mlttM&8bf2Os+8vHbqBAEUmiB+xPs8 z7|`T4DRhR0tA4+A*0E8v{2r_HbwZgU1Eb7byso7uene}TvWMtX+w(g*8PJ7dvB7^9 z>*;YEj4KmC+RUf+uijJBA`PmR3j`ZyVs>prKDc|z%9Pu-snt2v$ax&Hpyblgh0+Yb zm2rZ-Ct5Isy$0ZUx3QXNFOVae3&MZ;n)J%9`$_ND6Zbu!GbEx7)f#!7OVlBszEsqz z-e2M5%_)TetM9QY{^tJv1CQSJk+H-Di!z#(7|Jxu+8n4Z+diyLl?p}Ik&*9^^h1l| zx!_zo&i6UD`WYUWla($$n$y~YSUBFckI^BFK_%VyDAj${hj%edp~Aw1qeZ2P8B%K9 zg+Hfsod>dY`8w9G9Te6R6c8ddY}zN@ERmJ1x%1Kb7d%dULEwGmvkcok^OsLG2$QOi zulbKW(Nh5S-VyXNXpayw_2+`B`qg?bJn(ez^$5x2h&s*7ensAJxbw68f19`|oVe_>!u!5(h`&hpg7R8b%) z*04iUa*~)CH%-c=9-I5Fy5q0>aN-|EnAzUCXlpBp8^^50Y z6iDwJcN-Z--2)a-1a~OasQWPM%G>R#{L;Mjx-rVvwWl&$JiaZtxYyH^ed6i(v)2yn z4snE&j3Z=$W8K_qZw*&wfBHgKfXbBbPYSmQii$Sud~`f)EOyb=9U=Qb$$~48sxh?R zYU{zF73wQ`4={e+aETU++?v3WYp;)rmr}uIwn89HvC#XLHFTo&Pw3?~bSr*_vOgD3 znDT?4%pPse7J@1E5#b4E-CfgS*5m~xQ4I=P-b|c^$pdX2}5wFY!!IQ zMEMpM*OXbtITW*sN%k^bpZ3RUtU0RRYWg)}xRl^F8D=3(b}3~~zYImK7Yyy=EZ?BTjjk51Eza4mk}6eSjZw)<+p31J?v!G#a7Z(d2Yl7DjY}b~CFdEY5avmWBlFO<8+$nV{H*Xno#KiDfK(dQ1rgdCZeW(Ch$ z*^9A!_Y56YyD{}VnhZ(yGWV+)?w-e~2R0hcb;aU|p7q%|-JQ0jK zNEwp*T7)bX5ab9T<*tv=5PP5_!h7)-PG*dZJ=^;_(?J~E;=5P8ZfB#nLxd3XuMMF) z63*R-*|+5^c_qA|!lGn2x#IlQ=M?E!8FoF#p*J1-W`aZT{F5U}*_>fqg5;R0RDs9SD8~I5F6>5?D_Pza4(`={aI$5HzF}zU zY=wWddT~Tuq{M$+es@^cA`2$_zPiSU5a!8c>|p+Nwa*DwD$rM=6CE)_53HF zi?4+c#J~V}pCsd56ik@X7XZHQyIO6SJ}=OgvbXfg>{M9OqZ_BTWptz*S?kDa7g%h- zl^(ZC_c=!0@ZXue#=iIcWW)&!R2wy*(2oIG1gL8FLuJ%*t+AhOFzBu zck4oO+(VmXRcu@?Mlb+IY`gJzMQ)tGWt&86V{QLz?OF7UQ$<^K1#t^(jJ3}FXPL_{?8R(WIO!d%~%l5^7-BUY|vvw?@a{VcI=;75~YJ*%#8Sq=Yv%n7cH91~D) zir$$M&5O%(NSB;^ty~_kGDg=ov9((opzQB%=Zx)_%ELSx8yT|D5WOLdNdZ)8T908bzrG6D{kT`<_)e_n>3vnHgj= zoboL9SvmF^-@%ksk{J=HS?ff#X0#H+U5dWTD>*bWl{W5yTD4l6+>nvo)w^9&xaNtb ztQK$&uQlu|j6+W-%PZE&gmuQQ0YDxAE<5fxCa>DO+}2yUHnA*0KJ+@G;qQzaU+ed7 z0%~i$!%gXhSw2J17M)5*vX~`tW#C0ByQ$Rt^Kl4jH7o!1s#Yd6y3(enh|Gopd%oeQ z*4~YI{Wj!YR1(1Rbg>>A||iRJvrw|Gdp-A21yr&ie2bo{#>`fL^hG1ssy*FD~@Xtqq_UYlfYZ29f5vZ-L71zGbYODb$W>*Yf^nwLn zbv-d)xzQMN@JQd0b(L;=B2JN@pnO0koM<_2hv@CN+IhSfC#)T$)@M;Ek|#HT_2UB{ zG{su%^D{GU!@UMo*IuA)E0?tcNQ~oNGf}Q_{%gD3b%0VeX@g&J4fA->%@QO3II%Az zaj&inkU14v)BQGAAj2q8$;6)X0sU-{JB??#rpb^933ACdL(axW6y4Ad$n?Nd9;m91pM#b&s)^XU8AklT3w{*QGWMWAl(bVI_5Y&&xGwNY6E95UVw~&a=BMK8zR) zr58t%Su*!L2LZc|FO-3)89`V`1%D+Q&NY)nJ<&J!%? z#;sc@&$x!=c(48!8w+#zu+@Z;|4|m+*g%K79ToEd~2w6{PC{%vi z1MTtC&PX9uxV5lc`-Dp}?T0*Hw8c&ptvy;Y2B+nau2?!A6KzVWVZGPdBkSBa=OO&~ zg_*jJl$c%AtDl$KBR5}WK!oTb4ukQUEjqPIMYsfsg*(<$9wK#kcE1;X^pw`zs7q~w z^bPVO(kz@qevYP|F(Y+FR2va%MLGszUhON=Iyx`C@{2XW8wM6t8VvzWZV}MX3qfY&p%(Q*nxz+n4ggU$1IT z$nNx@0aYnC-+X27x8Q2_2P<0?`pimCe=u-5P%Nra_*_j?Thu9$@1^ox;{f`mHUBgE zN;a1t9QABIt}j88*rZ9xmTc}LRBpu)*!>OZyaRM@At$ALN#1Su#r3f>Pbb*1VFANm!S)x&7?))NdBF^_n`CdS;Zb4 zZ}tbf=dWm{I+WBI^!7_N=4!*&NQOo)z43oK8y*e^!arI@D7v;5`icJhHe0w2xs*=i z7Kav=i<(q(o_zk72f(Z{D;8xvKy6vU-j_2w`OS@kjQU?lVeHOs_)T z>nBm1RIjGV6Bc2AOa#8^B4Tx##U#EdWP2PRf&@a$eS1ba0w#v-wi4pBMRpjzw7qK< zO{hk!lf+w3*%cRA4P5r3go|y>Ch&_)C@nZkP?NULK`w>J-`i9*hBoX@KH)0@gK!`C z=|OXINdRP*)^A0O1;)fTs(horCAYN=*QP@d@P_7x3&RjSWBdG^SH$I!zC6ItY3wnX zk9?_<&FUB&_w9QukJaoN$`f_qT%gY?1u;b^oGPxg8g9+j&svqhnSUv@aO8hn#j<5E zJwmMeAv@M{JA$P_phY^tyNG<0c%$z#PhE`y$|A_0pE_oyb`~uf{j%5|KMlj^r{O1@ z$CCL=1ds*6`_%^*ljhl-2F520`nFI8D~M3(7P-c?LA}!yyWZZl%gAKnfmknxpM1}N zT(jNM=nT?ns+XCWef|eep+foUbei^)i+LYBku*VG@Kyp-H;*v~QZta88( zS-3v)SD>e&q@8g;r+A&e|4Gqg!V_fajWxeCpn5QsSM?lUQMEN;$Lf>6odO95kjaE) zr1mIFDTvZ>2#DD)ZkXck37({+?qf%N0cj}JF9x({VXt%4|15DqR4~hJEDjPUzdxC6qQO&x*K*wdF_p-Y z0l(?dNea5fR|DD|F2&}Mx@{DA43Cz!WPBlaKG!uYK~S8YhK^?~anzZG71z<)B$v|F z7!3s8r*NgbT?P3`2foV4r_pbAe4H(^7G*co(z0*HWN9=CavAH}nM%x{Ch?U>#loOn zgIz)<3#7cRldq{U9C|iz7G-Tr@H{WS*x&Dv03pR{OFa)9C=2N2UBtrTj1OZpyB<0) z^A&1CS-CF=xW3OK*U1Oj^?GsbpTuf_3o&`rStS*27v9tGwfuCnesbLFAa5^Q?F3(z zA$}G8F5^%-l!=&<@a=UxT!jV{=FRrra@zxRT1_7oN?H=<*igcchO#?O0H>3w+v+o; zo0S}YWhqTo0e$@396Ay@TCI+(YcwVt*VJz`%_0?W8=s|sjocopuOqeZs5ogV5_y5&@sXW@oSM>;$= zew$-OIh!87tD9e!cW#IAs^G;piWdUW@4oz!kFFM!)Zrkg{INZQtD})pCBz`{<_`V< z{o{R4OqWnAam;s(Ih9<0g|TZCa-*N!c~;(&zzZ}m9ZEx2?3F{zPm5m9Lr>w*v?zAX zN>Q+{_fgP`Ujh;7hD$HD_ABw%xEIjw?2o#O4Rp(Hf-Tm+;-n`1xAW<9ZfDdPjKl%f`W$Ide`?=!Rxy!AY{^H zL28uH_pM;AQgG#i%Ncb(gQ5!Ufko`KCd{?+pHhC`S z-93}7La^EM<(j8B@cpeP(i=l(bH&gnloNh!`CUExg@k*fM#|AZ({tRT<(CklBzKn9NMcu=AgX)dFVr1$zqHL;>2a(5lHk)J&9O2D3`05&gVh9t|-Ez z?fWFr3|1Lf|8TVC9ZmNq1=Ti6l_z`?+@kAnpM#1LYV@h;AY7XxGYqk7zTp#+k?G$h zjF4=dOlisDEz3sd)^D%3YAR`@1fpj2+J>UB8h;ck88wO!=Pg zt%t1O>X70Tj3k~lMK~(Q%m5o!r+2mX&GiGQ`}RKfyn`kv?8?i{DZmp0>z%jsOCF&Z ziP>=w#+BFZhq8CLw6J2=Z&2d8xC%cH9X`i1Ru~!XT+`P}20!CQ(`?~vdK2mKIVE3i zP{!bXJx^V=^P=I``v|XN_UEnwHL2p`eM#KxNE7D}I(!sD?&K+sYrK?L)41KnW3CwtFhD z=Dy6iuTDbC;Rz@GX7E*p`_*%+h^a)t7^7A*=I1)@SlI^6!1W#ISDJmbj0Q{!kNo|5 zrAdQQ^;*%K@}|(*pJ%)e=L9S^y_Zxoq38hQQH)E!(%HF}W}~RfizeUpG5hk;Gw+AU za-NY5jtv5F@- zNnnqc>cZ9Wj>sjxyKWty2cHo?jypp%oeTHC z%}SrX+rnukfm-_&Wp@;t$>sL zfQDWh=}|Kq&YsHhq8vEfUz5Sndu6lTmy__&i)CC-lH-u~>T!N0%edEhi4B^g<=pk} z>N7+sQ@hawo_^@4?99S$XMB>?TPA}==Z|}2n`NiRJBwk>-*{iIkNLg|fn1Xiwdzh5 za{*+SUiDjI!Ee5imP-6Z!M-zEYWtxpN9W zJ?$HIey`VNw%TY8lyth<9fnS~8xhuo4E2%;BENbp9!!Gn-6=fjg4C7dYwLz;!(X%f zb=Rc=kH;Q2j9vdDP)X}YZtC$3@_RP@%olkBxcr@JtL6(*@j$7)6g2KnFI?$p`Ps3t zJgkjdP)5#S$9CKzvd4GhiZ^)`G55)#G+{_f)~plhtqSdWrUFyawp7qIc<$T^QPxO? zKIo0xty-qXv(8l;f-lLwlx4!)s(phB3y(@bV-!<{0 zZCI<7G2gkx?3j;Wa~IV{yDkO@FVH#CX&n9P+$jK#s|?u5z9wb32uOI|PHPKkuo@1( z4J8XO9i9mnJKJde|ru4d@->7)|WnQU{FUx9o zee8n02%P5~|8cWlY}=`BVWoIyV>sIX6z~tOgo0nfyP>)F+ako2kD1nR%V8LoKXo45 zQ`Pph+gO{D$E~Rnl>b*Oouu#(pnUS>!JVy3Enjn_Q7iavG@4!ebl-09W}ShQH>+cg zVE?|_`ZOu{F+O~|I4@S4`DIr8t>fNh)nPCrRH6KSO6_iHhg8#uoJRbbyl}vISILtv z>D*6o0!a++fxSIGMWA_4O3DxUgZ6u`0!LU`94!~UKCcaZExxC5_x;TDZpWOfvI$1t zG$e9ge}4saH0$@?bsHwkH!)Zc#W4e$>W4ZTL~VBTeM}xFzYX1vOzc(5)6@H)`$^VN z&54wZrl$sEJa?f8b#ik?$^A;xI*tDB>YTDj4T;1Ef5LZ&1y z`VMJIxuY~DKw6MNmYmXty$Qdb!In&*4ybel6fOv2aNnk06c}et5YWy24%?54Q@Q5- z3cZCrlUjQ+BxpeSuA*>56n&5-dk<+AklU9gtv=nB&O6_8sPPvZ07{zz^1Scy-4K}QPtJ)jw&#Yw#k^jkuY zrdcpw-B)Xzpc?Y~D;T05Q13mhJ4^(uq606efO9Je<{p#ID&w>OB6*@mO2SYmnl<=zf=j`)^s+{$1k;^j85kDF$Vw;dO~|%&S!Q)pkq(^ioXc z>r=7cToII~d<55*nCEO%6n}SAvJkb;%@@c&WhEdg@_Mg@<&$5B^Cmta>B!!M0)D}* zHPkvF9Y@EW9FF%*24>6iwZ80Uyh91(d|J1yCCg$Yx3$PqpwBMqst=bNQ^QhGz6KfI zc=i~4(Oc?zLgd!AkJ2;fgUt`9>-{lQF3Ya&yOFdm#RrgpDBW$y{Hqvy(;fFcW)S(+ zkXiwb&5_l!ph3SIyRfY=DiKh5h+Ic35WOU8Xcpt(+C)oJBj9jt@{vONs4k?C=KgKZ~DIM>l@^<1@QThC*tz)t{aYg>>6krgl znEj~EJo($XYb<5``Ty=A{P!2~mq5k(j{4#vLklp~$t)2l-|J_Zc>L`Qos96|nM;Av zP>j%i20|HQA_lw_&#vS;a^mrC^<8uAhkaNG~^=500swIGjTZ zmd`}$k>`p>LgvR(rfFZWdO}4(qRHtM1y}d;P5=*MgqtYPmB?75+19rXfuUlGUl2aW zvs~#sSlnEJi*Z`^nSZinH|J?mzLT^>o@Zr5hQ+$(8ruT#sJgENqUlqO?6dsSe@f)m zY#B0!4n~Y~EScvhsJYeOw@rHU0Tlgmd#Bva54&^dBw`>qR}sHZa4TT`ydB&s>qwGm zIVq=7XLFiddw+owzH{d7fvug}qfEj(TFHMjyaT;?%TD~szj&u13%W~$>tndKyuQtP zZ`t02Ll@AiFL0Hf{h&NIZvx4${IB(2fVX<*;<@YnT<1Jv?+H0lEw6Zeb#xu$rSoOo zVt7HtSW2p>-y0jDK;8l;qTz)tn|>=F{nXTHiiG*t$hu`M6;Hw4GnJb5NBw!7hp#$A zCRN{Y>9#27PMF}YT{ul*{&9Lvp(V24GFjVZQyueq-n+h3 zl2)L|sV;cn!qpj#G_Hk<=aQisM56!V%`JpN(x7}@?=*+m196tH6?rE;gRJ zQ-u$6QBmy_Y?D&*_g*s<=t<$p*`v>oS8MDN79S~OQs-DR92qMMRm5;JzyBw_X8XyD zI8DjeJU#_u77Abw=@`Ym|4;#u7)ibR>ib3SomiDu2OGk~NvUx+ac`iTw!FgnKR5nA z#lZjR<9TYTb3137%wAoH4Ejc|0_HA+Rui&VBgD?I1}6`pz#jI-B}@E{ zD1#`OqKdL@Z#%iNM&D7N*5X*11C=;~-ZVTI3LyL{x&;L^xpWZQkKhPR|Nt@GU%*!)E>APgp&y_^Wy@S^!jiNEmB8`2AAs0?P&_ao(Cqyv*^z8n` z<0NkVq`k;kaCH6aT~D62yzlMELU$fvApS#@5y3L8bt0UUY#vWkO4A&1A<=Pk-QOdDv{QDiWxaeN)`oDhZojeY*~oZm(; zS3Dpm@(3?{awtgvSjp|`d;p;`zEu=Lgt(5|yzIoBuYBf z6^7;gVAS*$*)H-3yX6_KYJpjIEiWfr{$yfr(#+n|H?F*8k!I3Br&pSs*~!yVtC83@ z=aTRgaqYH(WJw-?PPE}dk*P*6&3lRM+Q5jYNDcG4?z5NvfZ$|jsO0~vSp$K3KA>pH zTMa)Xi+GA45t|j42dN`_K+Es-Bl|cmEvnox{rzhA1AnRPx#;7G8|kL`dLQQujhthn zJ6=4Z0-QGYq}L~1Bir6i`mEKdR;+rw%V4=XuM~G&iohEHm&L9&0Y*__-8`)X&na(} zDIca(UMDoKQOJaGQw@-j0fW&%c-z#EL*3P*8PDO#o4>GY-Fhr(C$m%^j;2te- z8ge2h21HXi%j@9B<4R;_U-MUd!}O&^?8avr zU;#2a0GNeVuvfgx4OR@e6lk6N_VJ587D&+i1v#goa zHOJkjE7l+?4E-bJMWK z7l|%e>nZPZdiS*C3GV&X!M$T32}TknfwY$0C2wWdC4X=e5@x^ z!T%bcAoe7E41dS?R;cWzxtKI!T z0n2r?a@X~yd@GObP$^NpYtK}<`kIX8T#?@q$Aze=mP0cIY zB3en#^-#!uVpHY(<4o}N2d91sTSJ#vB^{IH$fY*S2Li)*;hni8aN-FtNP@5HM|_}J z5x0*w^%!4g*}B!bgEb3i@LP4ryAoA({SKVkF)lVTVAJ(*Cl4fC?95oGFz*K>$GMg` zt&c#-QWz6ktNgzbxxZxtxnp$hyovvX@wqRU?-hkmNu$JW8M5LFVBTSCqm+JF*?_R9 ztmldZz_*v&RP-14*3n2@TuhY%ook+%3}z+V%dV9jBl;<8DEUFrVj}ayg@;C)7Vd`C ziDXbs(a)Pdxu?KcPbN`h*2+V_YB9;07}v^#L~fmduw3)_crYn1QKS|UwBW>mPR zik7+xl_o>&VWCi2-Klk0H}=p(yu}!0NJZ%;STBVf=6sCT4}k_9MUM;iGEl+#49VDO~u@A^U*JBOV=Y7imBt!McRKn;{QZG{sZA& z4F9&}a6TzLnv18|z_gIxkaYG^V9kDRXEsLK$hv;B^v`m8YSO7`$%=Eo@!F_``uSrs zxe0;d!W-LX#LwM;GS+%IdtZS{ZA9f>wAAE36EnRv2Hkrq`rgT3Y_#>Eb1m0UUPoKZ z$OpnlKCVJ)Uv+g>O`Nds8izM0o@7G#R5ZdCH*$dFU|XON^4(}S2o?~s|nrSBo>kLWz=Dse0bEcEw00yneemnS!2XoO>t+;j=D@9H9>}a09hAhll5jo0M zlq*1*y~ia!K{;Wb#VOImI!I3_2ARv?RF$~Hf&Qo(EkdyeN*RhVTg3Cy-&on zpLoc}!xR?+%?^~6-M8++eR zcvW?K&49PzMd5dW{Fjy5sP}LGbMe->9ZgY4>r!!LX!__{Bu#s;a)ljkMAHbOziz^R zV1U{k9v3ceHJZM)LoaRmp!!i|9my*-#37`-I-_OxbDz7RYp!#8KGCwnQp+>S?B!EW zRVo-=P2h}Nkwswv?KX^lT`wKcdZ@zDY}Sk{&S=+Pc*S$5BaoD%Bbd*MQI@gp`4~O! z`UU6%Ff*<$yFN!FQ*RMk4h@K>NmCij(`yl~7dZUz^6jU;ct4($u~-pr2mB=GcEm&V z{%cah|Bn8UX{;$N&~-=U6^F)GP)7Ntd5u0{AfJZp2CcBfbzDTC?# zk@jBl4Pq|K6RLxvth2r3TO0OGg)g7`EP1x;Qpon`D$ygqy3nYhdSurGEMmGp({2O@ zMXhfc!E@fjjQzfk80SC9X;7Zfk0&TN)I@A8kTfq2L-xNKB(HCcN1fxP*(v7isR=Q{ z+Pi1WUs0396sRIjovVw)OP(z9-gQ5s_C5~vEjVNUx6|-{9=oi6{Da!ONhk}My6m;v z*fpEKj2SoC_g@H8#1Qaz`Og1&E(?|~{_kf20FTpD%=~S^Xf7raHOkUkMpOE6EerC@ zT?6SR+J}>JO%E$JCy$zbj3DXb+td!ujmvSMeeTXc!&OH-2~#Z4LJ~+Fn4Z>0rDM#3@F`g_ zDZ=nXuMvBjoT2ay%?|`I-x`Jaf;$*|U0vQq3wQZGG;*})+G#R!JE)4ft$H_J;jS522Qxnxv2Xf3Qwxt_4~d;*Dw!T4G-97VoipMOr?(OIgCrjhmovS5AGB z`(X!2A{&V0)4$R2+k@-<6@9!m`O}ju{1OQJC}v#CUU_W^+a=E{6RC#h-SZHIKX7W7 zVeN8a=$h5^!Y0a(q-j`9<|ziAlo);YTMH%HBUPgd6dn2nNUva-=+0@dr`V+ib`5xt zSt;MUm{sPypnWY7&y22=;ERMoTd*b9@?D!A)BO9~{_SbfI-h199VWQ6jyoy6jkvS?TY>g{p~LGBlLd#HC|IZ488Z$?|@dx(>cH*TEUaTps6`7h9g z|9!q>{XjiBzWH?A4KDs_iNW#Cb*$7F^Sy=Dq`5;3T(nf)V>i=ShKi!(T4;RhFF8Yz z>U5xg|B!5~`^)o;o@axJrOPc7&n~S?O!fAuk1v~QE^?}0@yE(Y`@Y@^93n|#ZR%UFuUtnI@nnRO{mpZ zvl8%(|1vlrl2hX$fT+%Yictn6wkU(1h3DhCX`k@yoLvtOfv-|~^;taO@=?Y4dm|s7 z7QYlg6WBJEFfJ^?t^{M3~66)!miq2P?NaYtGlPp(HJ# z6d^4b<%PKyqzQ7n&P#!HvX#pS%#&!C4UZ0Q4E{QKp7ah!^)*b}vah(f1cH{-QjhFa zYIhPtsn4#?4_}VS@bvGs82w>$uh3W5p_84`ZQheWgb3=RScvSj=_++Ma->~zoJNHj zdSkVih$>1AR@D}jeNN6%C6&3N6Dw>Ki4wj z27tEzIbi?q_tAg+YoL;1ru%nbwl;u+e|gm>UI<094t~)}2?(#u)&6LBjTEfm{R83i z!(QbC+%H%3N8quXA`kUn1+08v;xoa1?JY-sBLlc)@pp!)8OyHwjgd3# zhmW28-$!B}qsvS8*s#yb!tPyhEP0vAM}3C2g>Gj(-?N$O|H)Fls1^qCIXDG;D5~4# z&vEZ~`D>|c!U3f!WpB9W?r!+&K2&GGej09H zHQLP|Gvf2Sa0J%OK{@HYxXc}gJNIom3xAr4(latA&eg^4H|%(ORqvAjqelk`I$`ni z1&RTHD2rGwQA<#3#10yTTlmNxDpZ@qHUy@+a=@U7Wiv*DTNbolX4v>xdy z?hWU5A{}j&{S zFj%lS)KUDtiW5UDV*{O>(gmB=ljT*oDswD*O)oJmFYxxI;)>00f9r!WN~NkBAQ=}^ zQ|E-voy=&KYk{1%D-si*L#BwxxKc#x{4kmS`?l2k3(mkzap&C3P6aH<) z*8TPcZ9`A_5q_41v|t}oW&MH-4wui~cju2A7qfSz3os*Vk2bvZSb0nxLk$L5*_M~b zAO9f&pWF5J>-~|`CRnrWPJUf!6ut4it!g(3AYPMG+&Oz5`EKz$Z!_dO11BU7A)fz_E_Rt;$+Rbb#S#WIl zrZVm=H5Y&XdgB^$1Vpp6U2lx1o1uiz>b{P;GavyLWkbB?=Z;Z;aNH|^yGD6DYpowK zd9L3-#U>*>h;1k%+z^7Er|0I@lEsHorwewkCyN`Zx$b_R_FEdBd|4TkoToD|$(9tk zAdJ3!CQ2KLc=w4l)#B&l`$Zzaa)y)>&THdQ1Hi)0(7xTEX*zW!+XvOxfb1iQt zD(eY|rA9V&UcF9NvEjw!0(}tqN77{WYdN-$(UXRgt}Ap+K2p|feEO4LU|_x`?3is~ zZ#LVEF5>=6|6ld~DyPnXN}Va702al3Je76r*gnFK&gH}9>d=H1zMav?`R4acq)Ar$ ziYO+Xj)IQdgjz90Lupqqct5=9shJzg+0?ynzpAwIUG#6M^}{PrM#AAneOh&nFuGAMA`ht$h{t02B%bATi$yCw0dw>c*x45Ky=(^ zRC%yvS{RBnnb@-1rXcm=;v{YiJrt930n=u$;2@itl2zJu)vrlL<~EZ+;YEyuO-cMh zO`#$N4_5@cSH|Kyc7&g0t_$HokLK$Pd6XIsA7vyeOmQ==NbN{5U=BhlcJ(b&CKejR zzT4q3S7ASXAt{|ybWg+A|BizBAEc09A)^>~Nimb~N-AXO_j)Q~uK$XLas=b6v)r(! zm0006n!VsLSr2AMF$Ir;Z}=`m!@H>wy3K-}=%&3ZmQ0LYcn8p29#_miVNLd1lbiozx-@vrM0zjlKJH=yKedg&%#{*5{k@_{me{z+6T zegc9`lH-UDjBA6(m3Uc0{tXXpfx(bz^IR^8S?|~8+LsK%ErAP-JiCVHz0*d`hO~QH zbM?x#w~d|sk2~(w*UIm;iovRKmWvi6)U5=P)O3~>`@71HtrJ5%dr9d2*KT!H- z+rxh!BKjwP;le)UrN>{mkoH?+mC0X3U3NCqpCGbn`R`l!n#B(}g|>*co;>0DYrk|8j9_ia!8JZ=uw$%eM;`0=XQR83Da&{Z1rlV8# z{Rf65Z+wm4{hW0)I9aD-=a3W;u`~0n0Jonv)c)pb0JD5F40q=QBT-He24_h>P5B^m7tFeY+&X+4*s$LjZ;El%&?q>qhh?m&2FOsRRAn z-U(`wJ@pNZF(YQ$|y zaV2}wm?BVYc#W4PrvWg;+@BP)JlUObCMNLNlMGKUP^4$pP8mA!dcU@EUc}{F2{~Va zj$BN_;sGH`C;w|%Ll$SWB8SHC$B3ax2gLZKsgqHAcMKP2`cnd1uVE``y!P7bcUXVz z$;2hsVY&s_==ZjegK%VM%QQ75@dnpzk5Gr~+Q}T$*rL>KAphK3_VzYD!+*IJ`m02+ zeE?VoQa5t%@cw?Ft0eua?mtO5uC0uI+cIpNX_`|0qLt-JV26umRP$^ z`zAHtC5aUoY;L4=98#O4Ib7~GR4xeeiy9dya8hU8YCQnvEs!(U=S_4cNt0?#FUFH0 z*?*Y%N&RFq<}wt2h+MDU8+)9|rTY5+Tl)Ofis)!e7m}r&oe5u;f%02R{n=1hI4n1u z{&_SP_Dl~FIDj3Ocq@yQkN(L>lJM@W2fb@;=%8!gMy^9{-h%!}jlvFEY&%wulTVY3 z?>htjZ*^B(+8wZ(;2|ghdJ? zG0b@xapNa;n3M1H9gqxMMz?I60lXATW zyuB?GV%j1u&|T`Z0)Stp8+T`j-k|+snU#V)pT!3%`S6(eM|o@^aI6zIJ*>KT=?fy|Bz7Dc_%& z`Si3I&1MgTm)Hj5shU3MWra_xu1@jS8MR(u{aELtkIpzc`U9c}-S!5^1Jh5#FIj^7 zF21U*hn#}LqUtiz3iBme&BemKgcOR-&hWvVfP0^8rIY?-tVTR6k35 z{Y0le*=yLUAP{(W zR5<6BbN`-m@0a(3&$CU!+OwyvncvK;O|$-Z-j;@{?(l0AFbI&F``_ob*r4L6JeDJy zm0UM|xCsZGTNyq+*-H%?&kDm?#W)e~c{VE6QS};E-I&KA1ww?g}c~8EmY)g!aFYxzJ!VFe)IH$$_wQ4Rm&MGqs$WFINMg=O!(+w9=x$Z z>o2vZyJJ7D2}P?{H9Wh4hrCy3px95h?pIOEwxl7@mZDszVr3mXPV)Q0+Dk}bDpk^QGc2pz0|Q@J_ank`yYj{dQ? zdS+Qc(}BZ%HuNjtoIW2(tJLu2Q!RuxF*~#LgJw)yoaZO+6?Be1nR)`Ml@5W))1F>s zpY8A}q{dj2o+6#`)T^*rT^pQmw)rwgnd_QeERBnnj{YBjKG=A=8kH2JPP1v8Cbg@!gO@P107~JhbqxdAMC0wX zw{TAvpGRKDgZvMQK0rp55PJ#-GhZ*zLHHf?ONf=wNJ}L^XfRHi3)$yDH81%fLhi0G zjuLa6@hof{_fmXqE00VQ4d1&KL$yBkp?%!aL1V0kMgLYefawJ+#wE`w-?;P8=i>aB z2hwcQe0N5^v;!-qAfh>`h-rt?RKf{=&x@HR-8enw0gCv)k+vSxSU4sueP%g zr8m^@Jo{pH^+QToNM&4JM4TAS9q3?&`rR%}HnmpmHE#_UAAGrOj~{IGylXdvc* zdQR>`Nnbyrfv#n)`aN{iT&#!t<7kpo9gr(dACwxh=Rqu70mRLw!UU=BWw@O`?_5z6 zwnX+krxvJKi9jMlQ}<<32cPmX*HDmRWc++qJ{wDm<*Bgm33W_Bc^vr2dOtaJ@DXY~88f?PV*r=N!hjqBlDPgE#K3@2>_ zr_u-)fYVr46GdiPym|CIyey^d{ya?^?<{gFBe`!RNh1GR!0Ti%UXwXt}qg_a9B3IZE0 zh$_Qqdrxb(a$$Q{ir7&$BUd~V&{N9SVy;>GF~DB;nU*OpR|2H|w#We^^jqEM4uewt zTzW+t)rWC5p2Tq<0)s0BL!2tA_ng{i*^Ik<65bipmL#0gc5~v$wo5-qZ?9@{dzcCD zZJD)bK|ai+AF^EzsT4dz(`Zd~F`I1R$-QB^bMnowt6~eCR!XgpM(+XMfcbyr4Wa>W z@T8ungW!iZh?n@13wrHRy3WypipQ_Fq&G+p{$`NgWZ|DHMrkLk744h&TofM_g)p>M z-d!Dlx34%*SSRP-E_%z3ejwQpyr~oix}lL-X5!$$&K+wT|5OyeKVx?swQJ_5F}l$A-@ues9G-W%w_yXO`2g=obI!~BV}!dbSuo-zF{ zCfznp@?OT1_LXWoQK@PLqyn zd_sylH9xAup-`RWhL-g-`4Sc`eIv%yFR`EH*qYrQS%}t!n0oCbfU8pORvh5y<$M@ zKG3IQJ4tU{F(g2j#2RHwr)8N<^j`(Ozt_u@q<~=+(h0)sA5jG+5K#TpbAAndFTtu~ zWNXTI=mw3NY|Z*ytm}JjCl|HG)d;upZSnx8U`{)14;>NQ&oRL{P}Zmw=Jv_ENsj8S z%%66Y^d=1bQY>=DuVF6u+72R#=t*DaRtrZ6&_$y_rx0_!<$faiPU6{l6A!a8x2=!{ z-3q1CD^mMjTh9gswYI8AS_h-qM=x4cK2Vx@#7{}#U3f`;Q|TSa(cXh?sC1I;uaUVX8e^`>?%gG;|keUbDSDa!#tFkS+Z#>p0U(V=zy9&{k zPMrw+d}iLJfY->bs7vCeKh2HZ_wJ7l0n<2TFPHviGL*8H9{{wkuI2-!v@DLqnw{$E z7bO!>u&AuZZ)QU1soIf0zkc0Fx?Ulq|%U}Rf0O<4y{~T(Y*T5 zS6)qd^}_Pek7diaQ1sY>(3T`HZt(EiHBd-e!f++ldo+J zAc#Cfj=ylhv8+Z+NF#L8Lb3<8q?>+zV%uG92*%A%uTnq5i{GAM8>56rsjnY9Z&5gL zNy3_ZuAiDjZz8xt&%)b4#hG^SbPB^#dF(c-NBi1Hym8mGHbc?;2fAkR4Ehs-;F<@KdpzC}R7)?)+U;gARbQ z%o}%=z~-}C@Q@WYu2;!Bqgp?87~mmqK^U@$gVKk^@V9T}coW6R!pZBUN_>)Hxn=na zWu_YTR6J+R-4_S<3+0coY9lVvS4C#?i63wjc;P$%=KeiS_;bzpbBFBb2W&fs5;chh zKN?ji$o*o%4`EeF__cjxbISK^ruWo=^IX`xSco{!cUBC!R+A~$u3A!nMB+t*p-P`u zanWq8*kB{8o-r%T!MMIK`;Y@sTpE~|SQ&LARQr>0s29XXNk{*c>s_bi@}sS&1ykKG zraQbT^w}&CJ|qZFRFl49n(f%d+2*VRe&R$oD$W!`xXFX^qI5?-?mEggGoZ%VHgENA zuc^~e&Eh_~2kHTgz_Zi{L^N~>1Z~XJjbpZhFizHXp1Bf7Q#o@jV{~@TDJKk(0G)pk zOFi&L$lsZdSJU*rLT4n3fXdf8Idjs_)z9GEQn*!LuBDN9r$0aNIp+`X>gV=%lLALB zGL_Aq+BtCe1NncmD|!I>3q2>{^s{(Heeo&wkgC-Kw}0ptM-%_*#+kR zqP}fpPa=^96GfIlnejlDiXz3IdGAUSWqt^=8YMgB~CbIN2CaUs% zTRv>xI@+IDKU~ww(lgjDx+d}Ll%F3tmHVbzO7(CO#zZw(?{;*UMeM72t~I=i48YgF z;ozQECqbYSQM93jff1VA)V_JW7R!d=ETv>oBZBd8S<7dcN`Bveck&0nazR+rXu@yq z)J<$AI}eYkt!S%ZKrh>z1>%^Piwt%>IA4Nx zI_+<}Z?DSj+COl5nE0_A#X=j2OicL$)xSan@Eaq<8ODX7Rk9-6FdO#p_ck2!_tN&7 zll+;uORe|Aw!PJfV`4{0j_+Pj*65h(X=-}bbz*N(P(a-Ii@NG+p~?01=uY_311vwW z4Ex1f|M)TTo>6ky4AUjlOeS?12xo3Y5;MB>xivZsdYiN7WUb|!-HP478*MzB`}@@e zeGk1Xq+4RAF!J5L<1-NbgnQ-w@dP|m5i()f^W|bK8xyt7Ya0`x$(%QDzKF_E4sbMs z6~Z2=dOnVBV!cty_M5zOnY{5^GM(sCSv5LYT=KyM^3PN!3RJ0>?rSnhUjcci`HSm)BR})=;zgxs92{<;fHNE25(_`p+~N=huS^T6ui$r35?trimJ#{POXj zO_al$kFpRfLsGlVM%YxdNp;hZ_VIGQphB+O%D|4MH=%qtsIYkTMC60_)8f;B1Ak9X z?FL0nbu7v>%R00qlQ}F5zItl?hNdbq3^=UJ=8hLPy6M@X9o!pL^k}Q$<63ImdD49r zYExKeXJET&Thn45kN3!s{MpAE1|j6&C7gllh3uLGXYzq&qJn$^_3(0trYSi!$Z$@V z7Y?a_ELl2RZED8}8RRUxXzsCFo$6lP~|jtT4g4|S3DST11lhPs@+2um#r z-`QlLi@?=(Rt}{uu+?pSE#MsPjVF3Ld%+rgS!3Qg8eZPcHF}7IN&{a^MbBZ(p^pK) zjR9PD-`HTT-KmoJ#ekF3Ee|&gye&R%n9?9*&6c67vjw)w2duuNKbsfR;V2A#t7sOX zkt1hFfR%=eW-_z;t%A)*LSscxjv5=#p-6lA!j5v9y27A^P)$P(=RmDkOOSWZ_JAL? zA?WcSIXHd5*noWT(Z2R$(O`>$V5d^=f>OHs6@JCRVw}`0^$^r*4FdilViujBeRQGp zvjH>hkXFIj-uyd@i;Es!4Wfoxg|I4Ez)V~C(DdHYsAW;R2xuF*r3IGl3Wtp~yd7vd z(0@x{C-V7>_MW3BXVlh=`}P3aToXt-0srZ=?bH_z@Uc%k}V$G* z^Vq-~!5c<|Ye8z=*=07B?6Ty466k4TrU;>RBp(SW4```5SOX%l9VX-(FS*6ah!9|^ zfuoofy`qEmIxlM~U9f4bf}@1Ep?7>h1quE|n?6*LU0Uu4_DL(M!r-!(nu>3&9&B^7 zN{U}qJ9f7hsc^9jj<}Ax5A||lOS1GptbJOTR(Ih^O? z(5mOoip>=%uL+-}{ybg4u*R3JMQxd;ZR`vQ_Bie@;=@)IU^N3n?ef<>Z7O>4oPyw7 z%lThQiptH03pdMNX|icx09pIaRaTw|TU!PzY)Yt`8M1Z2>-yD(JIPtI`|mZq%p<z<>NZulZBb zgoo`e+1epdA0 z0-1+}^qQ23x74xb0!4HzT|W*ya+4)^B#*j;ZA0b<-A6D-5Z_<1>0;PW!-aS97=RS2aD|4Hwo8D%g z9>FBYKI+dW0nD#oGzQ}`&KJE>;PTt1`1FL{;J}Iz0jhg<>GwVMK^l*w_@w*JZFj~z z=76xvVdc+-(7eYapZxAuE^6>)yVgIaM>H~=pEaW{wAvv-YRxkx9EWj6$!8*QF~T+q zb8}{#;d<4mksV||jc8$`Q|#@(9O(fBGO#mni!Z;EHhOkulP4^n_AM^PLOK0}P>XBb zqLSh%`pdm;H}=HF2F1Mb(5u&$ew}y6bU%~O@^hB&0<8#L4#ho>yqgvsRKD56h$tHG zpg37=nH7jBp)+A)F{+zU;Hk{+xQS1yXMNTbV{6LBX3s94$o4N>@TW8iG0nGiM{WsB zIyio`8Y1?@FE@zWCcea2yz z>yJ$X#cMDeuOmT=+lzF@kw&i~RE<``S5Q*W*{y!bcTG}!Nc!9{LBIZB!(2Ed zTLK+~7-U@X(kCe9V7?Xd|5ExHx(RP8%+pmkLJRxWSP~CIs>52ruYo zs?~Uw@=Y4_1Ld=3mcK3mN_K`jMiRgCVPpJiH9=!Rd+flD4Ie1S4)7SDaWK3)$6 zf2~uP%7v2iib#aL_;r?_FcQJRzzwYp(Zs=ZI8*bOS*{y4*DHC-&+-X*zF#X%6w7#TSake}1f4EDRp}1DCmjhM&+Hy{$P*olp)2j_8x@?$ zI+4z=-|ReLNTU$*0_TO0cQXvdAI|h%mM1|9?3&o^{!~~$Nz$iG2w%1YbZ?e5dz+Yd z-k9PztTHRS>c6+(VBN;vow-4B&{)>!%s z*IVHPBQZ+DtzkyA$y@}^ESiZSYm!w}#P3Yge8kS$mvi^m*FUjZ!rVq7MnEL2(dMKK z#SVZbu?v))Iez>`A$-|xkc?OD-|$Y(ly8ziD4s_?xMvL|o*y=*-aU7$D#O}1fZzxB zT*^;8)h}P9l{QkdEO2V3#7W@b2Fd{|b0sUa9Y6Z;DeTIPaxSladBGE=8D-%_ZfUVG zr=0TBz&d|${}YM)@`c~jMZjxbS?GCqk%|FW_Ow%}V)QXx47hk`&ENhywG7=CwKHZ9?vDcm z%Hqj(s~EE$yR-BCAi%?8U=f#3KKXT88wh|6sbfugLZ0zA9B)8oa4kcB(&H@(sf&fKP!q0!)z#Hp;?RrI)5*MtQ8!*ha9A(y z-L#Iy&8pQ@pDZ!;B!LzeU(C+oWZd3ndmUzjmywYXI>9OB`ywtmKD1zd$Wo}?N9RwH zB<*Mtrr!!kf_rhms_Bf+H10n9LvsFCGp;3bKI;1LvMg@b^%=6%rd+2IbW@pVw%@Kio>B zF($a$m8d;e!#37~zh7kwkFmP65U2m1E2@78T#WRpu&SV%jU!8Xl@D7bK@wbaKG~)F zRj|CD{WN8_*`N0f5nr~PlI9DXb#&|At-!5?oMvy-1a!@ApM|;U<6%&%$o%}1=GhX{ zDP(`Vb1EfxDd*Y0Pj>;3Fx|3e3v!v&zE?~BV()50 zA6r9%(8Mh#r7;NfaP+CK0*FHI{{jhHL9+Euw{*)E*nc2X?lxvvWU6$Dx82eh3zKx^ z_c0a)Xrw5b?Qaj=A6oqa#pPbDt|w(3h^$BmgA}bPY(rG+O+ZfG&S`-|TJZql{M1=n z>%P#4n5Is6IyLxO@{a`BnxP;a7NV?Fcm%%;2|1*_A_pn5K(8}^$LA*Py<0547C`EE z5;{zaFQnSSt6Xh&YD59q%8Rq~&CDL`el%3O2j1l#?l=<{eiZ0+;C3rz3^*-!skJ6p zr8$6r(qcoW!p)#Uuh7k4POM1_ZofUCB1`8_$)Wgif8Ez^+kgA%ml|EZAq}s%jqt~V zQ+xSKrVpO`gj3`g|Gpnd15T9B3=ch!G|j5{6V?4A64hHn%?w5}s}8MyNnf(mXq)|7 zx4g(kP6E>&}h%~Iyn_DF|=D7MJx36e8~4_tn$;~P?9+Z zz7RPcXjPibx!oQREL5t=r&MX_b#)ER!d%LxEBDWw4%LWIuC!$+U{p0z(amRG6bX2! z`bY!k?Ggk$@PHYCx_U=kESdzVMo^RK*2$-UhqjNy#hBd0LjyD#;-Srn9{*l3@g{r9 zj1WKgHf3kAr0$077|DXu>Y_K^J%!0#MYopBOGVx-duI=SYJKK0T2nO$bdlGVlB1)4 znx=L~NeYfj>FsFfm6!^8)xgJz4*Za}t#aFFK>x-Zs^D{I!li-)k~vgG`6#6*=suK! z94-PPPi^)t2=-I0|Hs0|4J^}g%3S%M(W2VhSswkTt7e2{Y2Jhp~45d5TA`O=g z`}e!r!Uty1!5Z6T{|I@VGcg#L)r!&4(fUy@z%Jt-J8kyliRH%Lj;JTrPLC%%Fcx>|7oUno*QG3J0)6OO+(SOWE0jN1{dGR6AC8n5Byggn!w>1fKF3+!8nt zJg8y%W#E9tP;{>fI47EE?AM#YOAa@X)b_9t_;tuMKxqq~T5VlU2#Wt}lRp%zdw*pT3Uo zIm&t0*)ofS}H%v zR=*4R4~3}hicxwc=e=_b`aI>Sm5RU-ua-|MuA}wfOog!a{sq1Z;Ew4Vx!PK11g#AU zMkVm`3-IkmYqTr;$kfj@FZCeS(-#QBOss3PHC%r@#;4QgnA5)wS|+t4WUdeHS9@aN@xyrk-NrJC(S z%t)Kjfq%$^?U(SrwPaE2`rI}n6|+d%g0N)^nKt<48W0FbL{k*_j!n=nfq<73x&D4e ztw%A|@HOvYVjYJZe!D;z-^?hnwRx?kmnT%{Z-k`9$~fLY*(E$vzFHIeAy*DCG9Y6K)osYjiiNgNnf@>HE%g*f|6ppQUCdJVc4TW5y$=ep~ zELvYQT6U>C>)u9!Jh!(JFZ^>!qtied0)NIbarGq3`o-w=S!3%Z#61U}*Fzyv%b|`W zXBTBTH#>G%@q8;xu2Uvk`u3bIa9N`95XM8(ppn9E$5_Z$AmXR5b9~bJH@H_S0eA$? z+X1zk{bwN2jrg#qY$6)^;C9VP6`6c*nR_D-*eBDhBrtb?*xAvD_vDfK)c}5q!a{UT z;+bE4$WwkH6mODzdtNjPH{z=Y8=AQr79mW%d7;9=X!6u( z?RnYm_2=m)iGNxH@X*ViHXX13Z!I}al8+s7#plJpgLDXKo~f*P$ptkugIzf+7InUjA%+h&kqAdRxcdG>|E~w z-kw8^$KUyNOFZT=;v&{c>cXwqT-prz`jykBFY8?ZQ%#hRREAj-=vCd9+k0qo7{hu4 zdZDUXP)A(8AIe3G@qHr1m$ejxlzXHqOBAK2|IluYm8Rt0^FwKo<*@jl66R{elC?V< z|2I6|Q%c0W=RVuBt2^zvMfDObWfkck4_4yFDy_pKH(g&?k5vXlM0l`daY~231nSkS zI!F3WzGBWo`JKW+^7wgI9YWagyJ#O@cLv;ttl3z}alRfX0iYNclcZiAKmW0g{es1r z{MNol<3#(26hUx_jb+}f?FtPo!I;a+>&VTjmr9BJAP4=g6q`C$q!1tVP)8hYS*;(oPi7_s;#f|W; zhJMk5T?c&_3AziuZQyL_pPzg)_ol{$)$$&%}Dbvb<3m)r!`02ACCfJ?g~` z>87sa*cY@tM*_B!`lkLNsiOx6UV^SWJ$C$P-yL?s;Hagj$;=0jIoRj9q)&4X5Lv4rEG+Ub(-Wwjrh9fL_*C!WDEsIGyVNuJsqq$Ht_e?eCD%4}DRAH= z@)Nn5`0UH+YR3_q(T9?5!^)k>Sq20=Lhfnu8tQ!u%#-hibLEWso#+pi7`r4HnG@{! zmlcUdJx!NlC)gf1FOz+8{H*t-To=v!TR|(@!jaOMk$lgbDmp4B>w%-(hoQaDp^hW%G_8znI$KN)dCCiNo zt-ls$wX_q=Pd-lRw`7*-b>~qV^;iv`J_*x&c&N?lmyUDJ-SHy?Q$4H?edn73D(|r> zLt=B`tr{h4lF(~!xsC$>KM%m$7qz)_5gdQ=>&jeg;u~63oW$UEBKQr`9Ioq;*3jT6iu6M9XAfOP{W^ z9&3hdh#GIrcY@=G1IL~K8%a{U5P3FdlCAL0^hb22z>RY2lsrxR&sN-uyS?M0YAIxMiG95AXki^>}Er&UXuHQuI)>o4^695W~o3rKgTnw&fK zL%;3^o0+kd!!E?;Mmbae0_~iGwvUsZiaISVEm19M#d3Us2wbmk>+y47SaFHnC~q-8rz?_>Ph2(f)^}RxQf?^IY&%wao9McN|13hn>WpLT+$Y> zAB0)=!3iyj04-;Qr!K_)2WkBKug>aWgB0r<6aK3_Z_0}7&ZfWF%&mNt>(LIG2t6WZ zROn>EAmaO`6p=?=nfsf#`w^RO5D4}&1NwQRNJfN~Bgy^aaQOi#uqW`{xs?6aoeWTz zWL${FBQo;UQ}vF$p6fEIHgl7*4YfuvR<(|}ot|xomn81WktF1NH}dfQbNOzltVH5T zAX-oem`%lYrNG}XV>Ukvol$l=q3FT-X=`h{5*#M5M;-7j19i5>w3uGxdDdiWzB(P91}H44|#l}aydkc^NpEv&~6(@R&q zb|K7rcZ5^sST@zaVQS1F-@C3@!>L@n{u-8OyCLYVH&Acz+-CyzX76VPahm;GCW|Qd zLARwZYX@h?OXyxAln6EHx!y>pkj%^>2~{?0*8l5-N+be=^1qRUJc(MWrIRC5rHc;M z4uf9-=!{N+M?2l3nPJ34J&Zi8W5ke`D0G7^#TxxoB?&&ib&uYtCQH!%DC6z{a_^h? z;r`Ki)P%2ZZ+5W|pzvVFGV)`IpRnftywE1~qhmqjsMZcW0tTzeav7jWR`Bukeaxm{ z-f%=j1Q)kG!|Sjx7r2zA@0n{yNNblT%vZ$4E>mQ*+4M${O@C5k8sRlp!k5#Ey_=QB zF*Z;p_Yb+)>6_ms;M)dMd`0d`ZI=|2Q}BIJ;zt}J$ZyTG-qiU7z`ke0^w%Sk^8k<& z4m2fIYsr#=`tFTW34_y8qf=bcJP98mLyy7hf zZL~L0CAR=MLx?x>FK>~j{G2Z#?4SF{1p~*{Pqz-62YIotH$2NA@29rrUK!=1`s>Ez$48E^ckmHGX_}xC=-SW1b%H$D z*TvdyRCudf4Nx?PtqM2qrqtgVGlxVq_UA=S0SI2`4L*`}_9t*H!jRTZslml=cG&&r zK9AY_etJ5;H5?W9&uUHVppD?QZ0hm1ANCR2gLnSj4cQ8TF#itm_3(42k9V z5@orSc`==HO}Bw5;K{w2hMrOU&&a~e&G&5v)ns%;f{w<_BAcIjqOB%lhmU*VODHKQ zn%dQJnySkbIK$AT&B6Yq`RB<4O8#B%`cL@qoUy?_w!n93|7d~V|No-}exjBWuU2g+ zT}^GHM)wG21#+J=jcV`e=m^Y^8Tz`l%GADBn+^>LGdtuEBKK~n-`&fP9!|cZ3?o=J z(QqKEb!l0)xIt-T&wWU`eJ$R-4#LdB66FDYGb+YbX%S-V1TOyVlhJMX13l!l#Jl(9A6vSdsw> z7lZAk-#bM?1ERvV(rbyQiQPYLrO$wM-skiQrzObA=|Y;@4!nH)AMoMIL5)|C`>=CE z>3c5zMkl@WJ7}QjwP#t6**2mDTImWHo8Ft54dIfS?g}4jK1VHD(Vqt| zB6N}8(9m!m?h?)#iV3(xQep_u*ga+XMq}ZcO2wm;F`cYOLLmi0N}Iah`@73dYGpnc z=N{+%&2SM#Pn&gI`HDvXi9n4&wSHMG324d((dJHVYdkS1Vbi4@#MWrSH3l0{5?Wzwd`CKuIEsN>$9(K48iS663 zRt!C&^S9iLPX`(zy?dNJx3*TdwtC?A!)e3C;3-F51M(|fbL(<4Uo5y4RY18d3q{k; z(b_G(_r&OQ3fpVgG<};$Q{L!k5sQ2?ighd&k#-uQw$3X*YBX&^#Po2CJY=di%zv0D_a3Hx`(?ypyZUY8sU>ic^58%KK_5_Us4WDq@M9nv*zt>XR6Lj1 zkA0V`97n}-w6Ez4Xs5JkX8+qu@hf7U`>O%mLR!oWlF$S#&%1%R7%zd}hey75ZfjSB z%ns?yjg_N{EhyWI%CJJsgKBt_<}JJ4(glHqn9mJuhtO+Rh$~bqt-`dN%k#}lOb!A~ zlE^fQINOZ|bjK#-7db(BInkM0HVcI#gWntS6ZltAKPOc96x|BvC;?Glx04HQUkQl*UWB{R^jUX+cLc%# zdd4UTeR|_Dx&TZlV;rDyRV6!0BQT@5DgO;i-<^w^BzZgwHw_}3QU+N$%Gh?~P{3@; zAgf$gc!p+V8eD!w*%Fmg_cjg6yVI)N&G|6ACe_Y4DUDv|{@fw~O%)jN@i(@zsw!ZbxeZb-b8>UbZtnJ7&K8 zD-&fo%Y!I!J72d2;Um4Fh7fD77Is6r6tCu}+6!e=q6CL)>lni!F`yq6*mI0B2t+W8 zDg>PSAEsvye0SS?30=qS+oW@r_BI4ak@Oyj$yQE!QIGkR-p4);B`IVvh6j94x-Aq` za(ikHR+AQYqGO0@J-kZW4-W3$YT&b7pWG-m+e6>>vG<&w4MN=SL9<*gmXDGDL-Tfj zkA(`-Yrso%WiNl1tQ5@0<7X5jd-$)H3G}W@M_78MSH}z0I2Mteb3gKwJGZu>zq00u7+xfT3HS z7P^n zBDPY2`kb_A!L=8?W7s(Ws{c3#pymjU>VaRz_lXb^dd62xE9A!YdB#-ZOri#PR#u#l zZfJO$@3MkHh;;aeioL8YlPdpkU$1#?H;_0yBb>8|eY|z7Xv`Fxv;elat~qQT@P@A< zpDR_6(NGIJC?M5Vm!q7#v{l1)3AE-jK0_C)qcwtynM*@(2#=Z!S6a&;1xK_t5CH=Z zzdm{!ep}R=BSDv4fF&`w&tjebC~G{~M)a!w_Iq%oGx-89-1o?T;`C54ABO5RC9*xK z?dzw?RpHWQZz7gz&Dzm=PgmrrNxk>AyIRk}=tOm?`e0qAQ8LZI?7)!06>%StD;`Y) z2KyY98&Rq6`LJPJb@NBK;Ljn*Sr_smpY(@I2zukB*)(v%Us6*kl2Nd zqr|Gcy}eHs4LSx@o|*%TI{#s4?znCV9?)sg>+GMd*vbZ)GGb;KmUc(uH5@!@D0+bn z#2_eA`Y#M7ob=o@8EJR&iNPLtaCu)a(x8p|_gy3Z*o2@PH1L$!4H%PCTQ|=#d48DP zxw_s13)l?_9kaDeUa>HUekC)}`KqL3&beZoi)Tz(xUn&y=X z#{+j9A%?zwdjWe~?nqf=mfJ?P;pY!JpWEbM^@0L9JU-@QJv~;2+g7EJUeh9LcgNTT zu%K%mrt&HYQrvYYc?x)UqPh5vqPL9=$BMX}`So`8z7lBwp|Zra7WnQ_zFs?%viI8T z1^uocJ?oV@e|q$T-SGu6EvgL1ZJbV^iGOWZomaMsV1MvFMwbaubokUt?ijH63y95w zG!utI`LLVOOZAbRA0hH-+O_CK13H!(%h31g)bwx~mzCk_{E?AdL!5=KWFj>+mRJ^z zq%TndTbf}iHd2N%x5i$IN&3PYyr;%cK46kV8lSa=CJ<&on7w63NcQ=UmQifl=)w7| zz)XzC3wT|;?^GlGZsWP81?aZ`Aati>VURqUKCn{y>-2NTr+MtS%uSR>*0S4P`<9N2 z|1ksde6rs#Hskh&g0-n$RX~vUzFJAJKZo7H#}Y0_V~;(q8m7fIgF^a=6_>i^x0&Kd zJhZJxpY02f*9=Wr}v`5R5i@gM`mA_7ihaAc)b4u>i|>krkIJcd%;oOps7>q zo=5x5l+fK4>?3euAAu#^OQG%^`~BXJ@p zP=|emh&cJwxXoR~)ui~;6PDoUQS-X)N_>6DbPP41I+t79P%b0NeQ5-WO38$P1{sLG z2EYg)=5kw}e#7?L7e{Sq?K|ae?Ca#4Vxdl`U?<-hC0l%3?`3+((?mmDAeatF=l;$t ziS;unTPtQSW9w#_0!~90){n%z_P&5PUiXX$19(M!8869S$18Gg0`2CvHM~!c^?p+u zP%kk;=jG-O=iiD=uT|iz6|n-wmW&7u{MopmT=Zdd?t;-q&`m}Rqk#Agr#{w|mC6qZ zRYcCu59yCK=mS#Glt(7_bK&U0swTA*bUC?oUx*Pv*aP0P-w8t$HloB9?o74P*xtN? zoLF~P+5N25pbDe{RY3CUxopn+*KxiFK)875;H2}H*USS$)`0%DQCtLba3n$0)rs}(myBRvRlWm;h zz4q*()*ofcEW%h!-r?^E=<_n*jQ_M zetm5`4Va%7oiF{;oE_0wJyU+o@t#wGUt`OG7^Z33%Wd{kbDmB%336ue(YMSu!Peve z=-$0#8I3QjXT1D?dK4GK0=K)j`;o;4n8l^X^w7Tq9fcp+Ym7l$t^<%)bQ$fB2d{73 zO4%R(mQGopi#lD@^9qU)hL%Zt>ZVQr{(#=q^Dj^M_z|%IFnyznm!7VdeZ`lOY<_Ky zN?lzdpwNV0>l*4hB6e7mQokw(7dj z&5Sr20AU`xty&tEu|cngi;zHS*U%c)W8+Vc4lz?G-*wk!wN!Nfx41SD=9Tek9;?yv z8%e^h9OL_|wl6uo4hg2_6KyZ}9!;Y7`4=^wAI^6sHWwW(9gzbWYV6A|oV7Psf>XMs zWn`K=I;`9f@6I*HHXO`-Ygh4MtHZ3?5@Q>rqIzPf#xHuuOHNv&c2nv&R(}M+tY=b= z>J|bh8@>gc_O>EH>QTZALy($!=vjVUJ;_CmKeWbu|ASxg_Y43^CZ4vOrl9Mkr>4iZ zAgK26OAFAs%f#_r3+9y)c}#E0JQ`JBV(AuLX7)|lBG{UWxK8}iO1`U?RiRp_(;6I_ zG?86xz11*E)rqL6p$D|!I zef%ipHkOKs{T3Np#|WgWESN6gbwW8j0?nHsXxhu*jn0v=dYNtSyT^OnDbeMZ@QyaMq*$01j{9yg>Z?9(P5}| z`KBTf=ju4;cMv0GQ_G+u>9~Z1nmFUZM`LRv0u!#@OZ`E1V(5okZ>-AIpMs@nSZ+<6 z)3vddnhTtFAqyLUb-e?o>^53ynms2m5dA8Fh7HPQ;C;}flShZBxz@U^s?9+PGByn++6Mb_6$9{V)=UII<`eySeOQ= zlus7c_EdU$so11m`0g{ftZ+EpB;TeTc>yCu;zcm;wb0NTllE;n>HAp(D=YWimeXsa zJ%Nyw9^UIRvEOU|Z)P-?Z*cYQgf1`Nq1?xgjrf%}n$U~AiKPP_w?_QSwykaECst3% zMc6*J?DYiS1(cS!Bu`Gz8eFRy@vuZgkKciRy|^D?!q$wJO-`rEty2KzO9hRy>T zQ#&vp=9O0sa~VTb0P2iwwNZh)=BFd=qdR)oXox;(!pWwEcE@s2sN(jpv)3kjqpH%}q@Q zffaUN|HO!mSkIt=phEr|oqUP2ST4>)C8W}#t4{49z&gw5>DHc-60VY?-X!j`Mb-4} zdrAS4^1a~;`Y{y1K@&Y(!aRKxRG5qRww?(Sbf!R1EmLx~L)Jqz_N=7HaQZ~TjEo7= zb?9EFZD5Yr>LSsC@B6*^Z%GRx!b1lEoF4YO2Mgke(tmz(RfYD194>&V4&4fO!a5=F+m5ho~E>An9UPvM`Nu zvQYKgH>tR{$YUH_dU@nFJjGw#OGHhXot335gTb z$#`Pd)*&>R>@GX1VIZbeXB6TI5>ozGLo>3*-C3CcoM*U0HB~gSr8M($X zd$70FL)tu7ZOSK1=kd+YuAM2C7aV{BHcMk5#X}E-TUYN}(*u$F(P?@&U$?`plp(sw ziiYolCpk3x26A_yxEM$hHMa6?0H^r)LfCe zUn31_U(VBPds>@{07^@k&=^G8);zw_k)|}}bzDgQXG`_V#&!njnNM^kzh5tu2(#03 z)T=PUFZ{IPpluVrHr=}ev{s~elb)F&)Eo){A)njLgn;7Wk-i6^@X!5Ps*C)SGPZke z@8?XbAdlikTe8baRixL6Qc}gBfPOmNB&R-78l7(br0x*TP8yxZE3h~^yrLhq{|@Ni zsd2W%#%a~?a_&2KE<+mTM+sL9TqiF<>iNfFF6>Ux@4=g7#5NN{NN?KxKI zueTcW0Ps({Udl4!F+Q8KC9Ku{10fyk za0M0!KdOg!wg83Zy|HgaN1f1iRI&@{jGDB0TKH09m8qx3{v%r#o??|$PU)^9+MlTLuO5G-pA_EwYr zxtP=RA)BDRF+`@uBJ*X;ld9g?c0ojNl7r_+uPD)Q%|Hs;!$3wk_f8!M;Ns3gmmMw&`hHOQ$7umPSmTe;YG800PlzktOeHr`C zBq960Z^^!neVH-lcTeY(b57?x&-eR#J^#$>qv6wiU-z|N@9VlBJ}m0Z*OeQ(Pzz#X zs(bhPSS8E9F{qC+gJ~W10i7H5@BQe_tu#4hkwdQYuNKVjw-@E|(hd}?KVY64x5X?^ zpcfI%buJSD`ZQv=y>>J74r-jfdaD&;Jk%8iMqE7m*3~do{nQ;*QccCe!qOFE++=`5 zi%w9ryPKwDSFQijyhAY|t|f$6+(8M98oEjZV|e|P`^!f4_dE?>l8ao0PRv`Q6;6Ic zD@g8iC%~Afl*B+hc?1$A!kDl-RXFSfJ`TG#rPci;JOP<9;`nEV?=W%)#rL(fD#OKM zYs-9Ykt=x9Uv%!4!@5*tR3onC^H9rY{U4F^KdFxYMM^xR2^lt0l^At0=lTPNSm5x; z-&2ylSEtUYW^w*vZD00qZS`v`^CYP{*hOy~f}$Zvdaq?RDKP0gmPrGe-l48HCfTK3 zTC4CVrK?)Y(9G?b^1|Ja1bWt(aoG682xJI9=*zjqB*IA=Q!l#nQl4A1qlnvPzaKY) zI}O_qgmo8*L+=V5@S`h-En#zhwKC%9&dQa0m>j)|&)#GsaO!SONu0bB?B?x*wV?LV z8N}FL+p4eNzOD_dV6wV){0vCWK2;Z4VV-k(XO35uo}||wFv|j!yDPD~f3Z5(GYk!z zBj3b8tjPW;p`Jw-1`3?6z6lJ>-m+N^!jlMn?S{jG)I`v!P1}Co|LiwbX9R&AzXkt5 zO4u!Ulmbws{1ihOh0@Z!>dkiPoyCvn=*KA>mqvPr+)sjDZw)8%_Bc_BloTatY8fzi z;jC=+zRH#1aN<`SWhKUurcyF@pUUti% ztT?uNl|p=NQV;XJo?A-Rk=uD9Ko~6pVz#v>A+*b_zEM$wxi|^vcNi~MwYY!~mB*Yp z-)LxP1@j#J!FH7)YOG3D!EHiod}C>~2;q@kRh9%DwuYY?-}=bvP$)=^pLR6z1BT?u z?8z>Rrr+=I`#dYQBV_DB4m>+n&D!70bKgS%)e`mWq)6@ z*&E1?DwagFw6?x%ObX&Vlk`3jF8dLpJOrV$W=R_yu!X;FdNg#GL}b{TyIhQq7;S)^ zMZ9bf+s-RvfWR6=KDP?u?)D#`_S;Y=ky|myLBNH&nwlqr%9hsOLL8AR<%^%=oJQg+ zMmv*2K&lqex~%L3Ono#alL2VJfbWyGJ4>Vekxs7kqfPMrFWD2m)HYzCt$9cSTt3PB zht%fcr8WjqEi~fNuScz!4)X&rA6W6d-}opi0)V`>f=lq@A2tE@4vMo1{4Z3yD}Fe_ z>_l%exqkDg_$*nYX6{AI5m#w)ZLC70vE!mj#s{9|r`=x*ZT-S-K& z0gjxL2G|901HOBmN08f#NVU*#g|z$}GRZ*QpoK*PCj$6dLctwcBU z**K>pY@w&|22Ynq9>C4}zQz*S?S!qoOMv%1_+#&&j|+H_wc-a)N+;inWRS7v2LlSo zDR}*+n+TX0Bw-0k5siS`68`I#{t#pdQT%`uaBaQ$h3w6}x2-CA=|(b|nICxBE11GD zNfmX|g;?uh$Cp(Y7VW#IWuLmc-`-#6K5#b(njy16C*9!Z@9p=#DL&#!a*jX-QjGN8XxBD5LzYO5##t#>fwP7Y)W$Be!d+*8(9g zQ$?{xVRH2FudPzofvq7xS!SEuddgCaQQ|0{x+SlM+z{H zqSDK!z#t^};WLV_o?iPcjKRMVcqi!cW4}j`4l<6K^ly;yj*V z?j2@pd0>tjYTM);FTN2f)#HYCl6(&2h8h~2`Ic1TetTp+PY1)Z?Mmjl-Pt{{IX`oe zOo|O1<-V6JH;L36YM#-z4pDeC`0nDU_<3UV4s`i2WTU%HNrGD9XVSrL@b*`J zQigu-1BEWZDF-5AbQz!U56+Rei}&DU4(8#XfzMB6B#PHEjQ48~?c<-`vjtu~-D9nN zgeL?eNFD!5c>d;IpPeg_APd=uP%XoVKAGgk`Fjva1xt;0s&;ftXPMM%tw0Kkj99nn zU)dRzP`(iv(8J#EqMrdRw^r>f3VxFfED_4?p$YU6!LfVEcZxYFax3+ADu9-E`a{c` z?GS(z{ufrL*=|d!_$cqYM9(q1ZpDdK$U!TUad(R1l>=r>rA}-QY;alwfQ8y;efWkz zN{3=aWPf=i5=`bB->(;)_~c1YHoV`XjBQ?B*{NhLK@QsP4)6F@x$OvK((aINiroKW znw006AIkg>FjC)4bn+9gyL~{!zAB~F;=P4Gc;n9pDZoLT1b|yk!-05Ch@?J|uMzq= z3*hamzyI=28v8za97c@JezbhWA${4<;k`0{vOi@|f_1?3LYH191>xYX!tm*KN7iu%9`?p5_z98QLZD0P1Q7REfw?yOj6|XuIh6X;sx$g9y|~Dt})e zpS{(uwPeh)dx7V%3Rkh98OOa))=eeN_?;B1&vvVw$PfWg_^ZTdka0tu6klf)x9dEs zcEWjg!moB~d@U}j12`={oI1sL->swyyF3vAosZ~Nq@9N0P%yFmK1eY+ZkV7PczzDE zw4DT)q3w>3U=cenQ^hBvWUF*0{5iPD3@{5C6%Nb*nMQHy_z!V(CcVAG2 zv(w0!l>wUBF`oO)%aEif9U#QMf1fOMyP)F5=%jG>FR zlKlS9=kuj|dMxy~@Pc~lChlg0-a}jZTB_~u7poXXcE4XVJ+tytPI;}Vv)8}A_q!9D zhP2mF`l@UPVh4O4%GNj~ztVb5Z}!ssZdg#nShHcJFfX zA)<3;pqkx)S8(WhZ1u`kRo&p_rO0s~Q8RRPEwAE8hpps@)bjW1h5#`J_7S&AHhvj8 zlL{*r{kTjk(}$McI5x$xGN4x<55Wxalu!sr!R1kz11!6!2Z+l}o}+U`j>= z_3Pin5d^mu6q}%Lg$AD~+{Mk!nQt!d$DCO1AepTIu{5ZBjqk!bF@Zkbb6~v0Ct=V% zXu#@R@n4Pz$GL0w+YFRi^&8EN`lS+TAx$X;cQO+nBB`;?4T1FdFuh5 zwk(oJjEgALou@_Dd|FjdWs`SrT|TTHR#E6gU*u+aFcTHOLcNpVkU+5s->IDSC4+t= z@Hq|NYcZ>pgR)HywjacI?E3`T5a9L<_N8}y44j{IZOsTG*(%pALazX)KlYaG)!V2& z?ypSS4Yt6SC8o!w2AyY_1@mUfH{rWqP~c^osgo-s!y_ZQyKC^>#?=pG9%+m-$b&k# zAN|1u{fapRVCcuW5`VKSF}qa@25^ca*4$o#YM`QnfXe3G`#<@yb@i>U zsZ2jc!9IoD&xy~TcGBoFk+39g6osz%k%Zsbo%{lfNBq0t@$5+wI8N93GsSwzQ~Hf2 z4#a8Pei*kCHG8)JNF?KNQWM*AxV2@ic2{-hK3+H#uqQmWqwIi^lchh?|G-8Kk2;Oh z+JLcf*ADJG*Yn1oTgF5gj#pbKLjklll>LVQCj?9A2Ukz+%eg0mqN@CB!k_Bym&bBK z=`lYsTBq3Rb@hALRRC~4GqRRr`q`{4mRMC)HFK~>0K7;OKU`(;vrXzhwZflz_p!;b zhh9*2N;i{XfBh$(TxRUOp@57U!xumZ+r?fN7^Ozu>$FTq7O`~sfV-R9D>PwTZ?=;+ zwKl4|(~LTJf7c7tRbMgXBz1WZS!Ykjm|Yzzt}b1WV4b6niG4#pvLXJA0w=tT+@FVQ zz3+$_+oYbjIKEr|*}8hCtew>0U|l0PQW=IW24Houo9R2{?;;X#!^kb2iCNgetZP+8 zi!-1J&7U;MmvF<=q{%+n^Z!JXwTp%ZuJg$RPFb08tDBqlw?Ns&La+p1XY11iAwzV? z@Rh&WokQAczW-zt8jBJ*dF=S?)3Qv4tFuQ$O3XR^9vM8+%`h3>mJ(;E^1!sk<}LQ# z2ANYZ0b?O|F<9PJIFFS^c)+0&GKyKwS>|{e3x|`D(Yr8>JZ~3N&)4EKYKMzcD@lu2 zkHtHW-w#o?n~pd&SUj^Cl3;pw!h=Ovb-q~ZsYFSj-S7zkNt~ZPW@t46wrB91?E1=X zO+?l85y#KtdwuO1wQa_NcV`OK0ui$ z#(c)^(4MJqT(Zm?=+vd~fg1D*5jMDgh@e6w{*iUM_z79|E{i1F(iX7)G&vX?tmDDOaH z?0%Z-7MT7*t3(qZHvF!!gifoezy0H5Cre8@d6wM4NH;jJ!Xq8iZ<{=Q2uQ8G4rIjk zCjjU}ly~Rbce1o4@!WEQmfh{D@l%*Y$m-V$FcX1G*Kv7MaAOu7#9DlRC(Mt3VLH|<9#$P|7stoZBb)GfP}b+8KjoQ3PS>&_3+u3T@=Y?D z((7;D2C5D8qkT@h+Cf!q7B=Tsar+TYFJS85&i>?)!Z@yf;zM{&62X zi#D3f1&gi1%YkDJgI%{y;zu7f|Gyu7geljy9v?%SZ0v3=A+nPd>;#l{h(nx6aLOfB=@?)O&QF0}7 zraI7X=9`yB^7k+4zS*!fog7JSYxpJs3j3M;NU;(7Zk^~;dMMl|_1IaE-@^43A+pv6 z+o6sCRC-N6t7ODZ-nrEhmi8nKiOxixMtHPZ3J(Qb9>d1(yaah69F5re1Z?Rtek3X6 zd`#suC+zG!^>>dQ@m?$nb3lJ`ymWT)3bbp*F(hGJQJVS><(nIi2bD3(obkiY*Z&J1 zJ<9lIthhMsN(Jg*i^*ci4fjPVazMQE+FwSyFN$%i_bMO#$3*v^vx)23rTP$EDcr43bo|Vb-K^-<^A?#W${ExxzHcT8KlxUFG2OU81ZyW*7 zu;Y1V5rGsCj!h=3?b#TwDa*BQedanksHG-;oa#69`K?#GB(GhxZly_`pFaei_kQ^?sy!=H*xl64VAH!Q z%Cd8pcbI>7NhYV)&JOCnuF5u0X89q4mIAYV4-SFol{5&2IDmQnGtrqL4h|D{Vo6pd zxXIkqo-B_Rur~gf;6$SpC)7R7E1ez^$sWE`AaC3gYOR;U>?H340_yxVE~VJq+a+hQ zbm&udTJkKt8!KkFC!d0rDOc(C20g^lR3-Qs*lIYgP`|>U6FSL#TxfljfEMH;-ChJb z9Sy16P5%7BJBW<2GpMYgh=lhd$i0dcRw9{lyADF;K0YYcf<8vyEIkY6;s({&v@a8Y z+I2q+i}Tf}zKW|kC;n-NzLXEG?ls6$Gji}JQq>0cM<#7j&{qVaTs`5t+5p>^nP5|P zkux*Pm<9uMOn>;pySv#X0@a*TQ?Dn}$JEz!#?k7|O{(xdi?3{T^h|DxI*?NcXm94{ z6m!X$QP8nbOMj4xJKwsdeEG`wEAlPws!a(Q=Y0u~$u*FvIDwDNc5#Ch6t~JUggYm3 zO2V>EUGqx9Bu9_QY7$ajq8z_#qWkzBmEonW#y1rwzxy+0lCWP*XuHMEKIz|_@J-Cd zo8(&JH=b+4$JoK#Nd{vSQ&md0&X|ys&`xYcZ}!4MhR!GwEwOMNS1^LA8cnzF$6YuE zuCP%!3bKUrpv9_17LRPV_5A)`S3{HX;x)QPho3(dG-g!3?wPL8dgPMb6iK7oM=kz1 z42$JBsH%FSKCMtpO%|M}0{sxzD#|GOe9QC%=t-@P1?_ECQiR7&hRTEZGD?(QDPNBb z@zRqpxw#DSyiLP5{PS2Nma2l!wO98iI)RGn9s|Ma15oN#P%U{^1 z0){x+Ro}Ct$Ty1*B*cENceHzE>Q(J@Gqq7N3A1%Trv4 zPe3WhtjY@vxIK4UM$~9UB%tUlTr4v+5aF!1CkTbM2cDQL*H~6D?Tap`>Z7W5^!J)H zknH8RDT3PClw3X&v!;DKX!x2$w|9+dP~!*WF>u-lToln<_m|G>%wT zHsn^{lThbYzi`jzsygM1ESs$BZ%#>Pu^-VIwapa6-g~VwB3<CkfA9i;&*eFD%Nj&M*2wk#nHN^AU;M6NiZJ=aP1!SbBCc{pf~5^D*@TTh|w5 zHA&CZ+a1lKFsCH3;=7QYVH2Rn>j53EA)@^_(@%_Ez!e`q-e;kIk{I1u(9Z#Z4&byr zBZ47aE?pFx{n;W?9*`YOeFN*%L~BfTYfO#0j%(*@d-nOY84~eiwV5*FMgM+p&juZLDgiQ zJZ@52MJRr;E@QWZ3z$Ey2e*S4!MPr*V=T)t_3o8(I9pRu;?nxg?T!Y5>jU_Y3aWGF zJb0#EIQ`XD>Wm%i^t3Kf`fI8k$uG~#zrlV!FXM=@Ly2$iJM>KVU03S~Y30EtBc{$hMg45P{%}kdopg7g8kI+^0Iykj8 z5jwHMfz``Y9<8kPINwyf<9qA9Qe9jp!i4A}jPxxF3mDTNd4~Y#!3CpZk5e!3EVlD7_{&rc8Ty+`pa@ZXN^L*Ae7@^3R<+$?$;7QyVm! zIuI_M`1LD)Fv#JLo)<2z=BI}=JWhVhD)N-gQ^JSW*g>bx3-dPcfm#W3S`=%h2IUS> zClRf?dCgWd#XT?R^O0J$Zi-C@)1antTNUR-e+~bPiAM`UMV$*l{z@NJUmGQ=)V;XI zmn7u{J#o7A=a!Bfn?4Wn*|D=edRP9~H`O$q2e3ws0j1CKYC2_>lju-?-IU6-L zKUw;4#eY7{L`vMVt5(ld$(g+*mq}ye!+YLdmy!A#SH@!$9DE$W1Vrb> z0sHCc2o}?d&3q0DYZL3QiXHti0%dC{@A}Tu=$}`ecaFQC8Z3}+Br(L08c68j=Y8t% zAO?@$@8HHz8Nm+s@$*Sy3r}tVFaiHhaszAH>>xHk`s=U%xQIU93*o@%no) zD4)$4k4nK*x)?!+__R)L>8)#`22-EB&%7@#o@c!^Yvrh|$11waX16Y@>@ZV0EmMLw zMc>`}-K@h1vDgJndw46EOXUG&;sIZTT#Nyq1FdOd<;{m#2Ber;?Xd#h>@x~{14++C zmOr)d5Tm2`?Ehpfu%^(5z$){^Q*OWf#{$8R3d-QSCMbSmSC1VfY+?rXx~z?;Lh_%S z^YcU^8IK7y?rAgJFNtTolbqsWR>0g=WsgMPVpNI@X{Gx9zMPvaz7q1 z0TvNQD}Fc5=mZ2&q`iyk$y8asm$a|VSi91h?x@|Zdr>Hv0_5nf1_##q5fAjO~#i7kDI4)5ax5rKCpKW%Q7`@eF%td(C{N)j1 zbl?M1(*HWYqlBRno>T72#>ob?>e`;M1?Q)m`g1V@l^K^UZ4qa?>7`t@%)j_kW|};d zks-yHFTGP&?ivRZ8SH9F$KP}6ln7q1xtzI7O&eAnH~eU&0=};=Bx%5Xq5cF3>-r1@ zX_Scl)i}AncXuSyy=6O;O+K9awTFZ(JacWe{J+H%X>k{!Gb&8v+cE&VXb5*{)Jx$gaKkBhZjCM^`(yuhQshDz>P9^cm(*4`4 zS1Cx>u22$uCs2s{Uma>wa01c;b7rrmRlH?nzW|OU%Qs##+FORexFOEnIy{r6iQXVO zcz}0vBV_^enyEyT{mvdgiF}gq6w4e@dT(x+HpA?7>9RF7I?1NksOM$0nC0`(UXz84 z%0jcK>v}_a)B2_wyMHk6azhZ*J!TF!yZ+?aGl>%zCo`tG#maq#D`SlTI~*yE=f4L> z(X!k)_ul-*2gwgc67Db3LlPj@t{omhp%-Ag>}TNvjK3eugE$E-P#tC-L!#AYzZSq9 z%AKA;+`DyD$=1P?lB;)XYtuctpE60pgk9fAAMrFj32Gjv9r~pHQT=) zG}T#q@$vJv2OVJ)@1Li!CGpHY7g4xV9k1sQRbIXleqD=QwAt->UmRACX)YB$c`)k1 zbNhB^R02e0Q&GQ?&6y%Pnr&e5qrlM76`FE&+xvAdzU&(k5Tid3wjc5r=M|uGlS+`&$aR(AbPF|{0_ud+5UwmVbOIO>EeHqzxk8mQ0#fj}ZixSgwF-PgN~ z_wr5h(~|C14d1C6y@M6MdGiV*Bjb9bGS&|-$1G<+so2%~_8tO0RRlxT$4u4I?>S#h zi6TWi=O92~coj>>HORomQ z?CJEJ*s)W?uL27*)E~AQ_5yV_Xw4!zju~A`e5<6DXXoHkWacDDjGmu$nr*Y@5fHXu zp35v15FxH^ZI3F6G1A)9kLae)2^+fP7(FZXD6!^c#vPkf+Q@4FE5q>NFN&-MFX?+r zxq|;9=>neWvK{?0I|~|djP20A`7$E(9=E$}PK8)hWxPn*9kV3z&Hfxw&FZZ{L{p-4 zfSuE3D`b=bQn5+9;*OlP(!e&H*a_`)jsP;70DEQa&;j4i9P zAngs(^T3+ffMxUt2EYDK2kGqni`OC(Ajw*(?RPDS33=LrE!yVTa%V%|tB0sPdalI} z?3rUsOoBKBT9GBR`t6uoWEJpPQ{lteI&|Ubjl?0LsAQzZ`vgeWwBnU&B~w3Q1u3S> z3Tf<9jzgZWflon9e);f!Z@LaxDXRU9+uh%p+k(P8nb5=Ir5}B<!`MX}j_d!ugMH-PJgpOjbihlCdr zqj;Mx!bWlRUsWWYi_a3DS7_@e$l_Zxznx4@Yz+UvuJpWV?PH52zm_zAUq*VOK|slI zhaxsT;nf7ZPqH8Cpp!ZOit$W@_ZeNrjadz+>(qS+dC?B!?cAG1qM5dKb}9mpL3S_) z$w2*nbD^@LVpDi)%zo$&1KYSf4D!qidUEFDm`K=-tL|;fr@hJB!Bs-{%@57owF00) zOvFT%NPnub!|&1*6MDhu!?)}8C}{JdMK2+ilEZbnj~@F;sIp?^AbSLg;r@t(eR_)P zMc`ys%4W%wbllu3_GkJ_PKL?>GpG`GM!@@bmDD4R_f6kCdGaLR1JiPF z^p$COcN3}NODydyFr?`N% zpa%+!*|$i(u9^FZX&a>hnY%Hj+xXlt219J|joX(DD z6hV|K;5k<-d+dH^j@an8aC)q!K5R^Sy#)3=e}C9*Y`PWEpGUujwI15cjYaRYgQ16v zFC+r-QhKuC#_zh~rYjP4j;bMw2htI`WGk{CO_?n4#6q$xHC3iO zoU2*0Vx(11Pj5X#Bc4-qbToO$9QWyk`}gSfuN@r^(zn&@dGC6=^|azJsbL9-exCXD zl*cHBqRun-Ib$BCoF!{sdPNlNN==Ne_d52=kV%l>Ez&X8*PQ<%Pim*Y%BZr=fy@n^ zZK?a@qQT7=s!KGXsd1a9!L_EMHn=_OuHGUh?k}5q`}Oiu_0&kn0_YgPy16IShz@V}__>YQ~V5FAFV=bLR09^@9&vsYKPR_)UC!T%Opn)LSUa zcA%DYuUB!XtL4GhU&e2@s7}44I8b&GFkYUzh%CKZy-^jD72e0TvM_wbZRhQI`Hp@+ z6T9zyk4kI)|`Zbf3bY*RPp0o6qKo6#W-<(+zHnHgqwF)eXyp%a=NwQ$^ zyqr%NYXjciKa*uJmJ`6`UbSiO6k+F$B_LQo$jsrI9%Hw*XbxB8;TO`n>s1{u-+%5q1am z&0?>H3>w*MJ!A$337a9Xp)|PChUh2$7gJJFrZRDR4rS|cIC4~QEt$9i-tb0mgBGB$ z*sXPqDA)I&D_u6GdQ@>r2V0{W(W^1lumWBCwU|oR64#I~l`hunqbPUz@(3>eo8<|R z6VFf{JI$cVz$D_h^g!^~E~E?}m*2$gg>irFl%Y2nieLSh+SJkUE?pHQG0^xVhPb@x zou9J)bM?Q>0K=6B(kDv7OyeSbeN9gp!=u=hAZ>Tyh-j*;6Y;QYN@^<#U^5t1J5pEC>D^>dxz&B-!Bz=>5$G{coh__T66EW^&RmnCk_R8Bqp-_ zBdLj;KX|3 zqqW`^GX8QdLh(VFO8f-@pWlSzq=I|`xK0C!T}DllLR&=fMo-v^Zs)<6&8n7?*S{tOg@eC<}2mh5NpIix`si`~rNdd&EU37I_S|37lw;>{3BO7$O2Z8^)w>}JH7u~4G9 ztgrK+1OVGEI5hdIWo8a&2;FH8J#Uawr7*j+xjev?gxPjg-IZO1=2z%#&vHNaf?j)Y z{UMwX+YtaX$Io<0_*tL?nUyGF{w1EtAirkmbuh7@IwHP4LFU>3f|KhzqqvBXNns_A zW0g?Q-)#`Qn1eI2u_}uDVbI+UNRMU26-4i*-kwHG-=%kkhos>)Rh2>j3^Mv@hGGY9 zo75m;Yq2kCP0L4)7>((rmUxTJY%n8r8j|gBx|POoBMDgB_G{cBhv#<~&ir_4aR5=K z&g!X?z{{1x7k@c$n)V zo^lt(gM2Kel}vn&RPgCu4fBMkP`}K(1VmC?bA7s$p3U>zx}N$3#JcLjTu=S8oJ}S2 z&AasRhtaI|9l%N9w-l|&e@Xu@wU8#4kVT9}GjLU}-rgHVik4+e?)}UWWL#EdD;)$D z0%m|4ikLnpLuXj*dT<=_4)2?!gMm#~)<+?*?jHJq(uW5Jn>e!tN5jEZ5`-FOoc)m za1VO$NkFs~55<2=B(W!Zerc`L!WSAoKFx&BQ71RX7xObii+E;({*cJb#nzt6JC6*i z-IK5D=YQm?u<2onFxc+;OG51DDZ)cvB~%iulPC80_Ah}wJaBL=V+$ba zefY)_>>U8`-zyKdSG&FXVd9Dl4kONVcj02kmOCH2B<=-pV1X5g%|>WFe-XR>#_TJI zOm5GHki|orp5~i0tFvyGIANQ<%vDSo*iKhWi;P!2ym#+jZ0YRnSuMNiX^5b;_}+Z` z6hFeFN&{4wT~hb4PuuxCwiG&GD7P`rcJ~=J(-m>-p1#X)GU}b%%AWVrB(UHue9Bww zZHw3Ms^!mJNMryLoqm1VhL3Hf(fWj*(7DE&Wt?ohCOPK<)YOo57CS>;uFsZzs^a1T zlAY=@Mn*%kc{$k*WW=kp*@kb=KUJ2^8qSJ2&Lp6cYp5}PX0W0kru;(Igxl7uTI_m3 z`|2eMQbQSw!hTt=YHKN~UyPZsiH~s)&gV(~686LIEIjjB=QKPdcyA;;Bt|=pyU2ih zQJ0^gF_`Hutnk=5^jErOc-=Zm+M$Lt!ZO1$@Hh;57MIRcb=}xJ3+{hJI6K*oj)9 z^?c&j&`sBhf(Jr3trM?UUlx2th~;A(`l%I<63TIaNcgETDfPca!WY1nc=V#kH+M1x zH35RbtXa=#G;Uy59J#`eckM&W$*8%YlgxILf#W+F;#JERw2E64>&YgUW?fn47PqP~ zaS)U0K_k4cJk;2p8yt-CD-=o@h zDmqv+@4_FHYR#zt9R|&A$(fmM!k|rPpgZ2he}5c@+4arQvd_b#F4yBwqmTG1=WXxa zCFnxBMZ_dPn5W$4ca`+rgvdAfb**%cb0$4xn!Cuvc>0iGXzei~Z>_yE4ez{gVQs`?>q0ytoft=QlyXb`%&05{7gC2bs(UOYUdy|6;4| z<>r1-|CoEFt?*W8kynbba+b6j_5$#U3l`PAs{Qp#pS{o0_V{KGj7XlIo_tT>tUTNkCU0NT6Nym@ml-yu^$QPF4ACw?pDvTM29$E1S0 zCr+IBh=6D;&gOshRfM~)D`FUy(2rz`qIWJ;ZSsX{`R*y-*w*d$3Bf)ty7TFiHdxO;q6oJr{~861=vMO ztoa-FT+PNf*R!doGx@f^$n;`vu1!9J zII0Y)M&x|APkE~>P~UetBd_nVW>)X(Kz1cLXs#izN^ivV`CyYOju0I-m*#T|rt3sG zLZ3zksyc_`Vq+f(wv4mjGfGJj@!PI$j?1AF6IVdy*=|IKNz#Bo$}J~8DLd(T-rnUj z=q<*-oVa-wunB=%ru_dRP3MlaDs{jb0}L3rT_-lCksyZDh1OM2+kRC;06=4}@oB&+ zEFh{HpQ8A*{u?!Z8qors1phZS~FzT0289XT*0$=`Rmh0>BgZ_SZI8kqV; zs7tG-WpY(j)i*j~OA}8Jyy6RY@NaZXQy>CaXlGa)b;}Rl!cJO~)PD&QyJXCdnan<+ zs!$)D!%kw#qIyjXpv>#CUmZG+*F3@2m~RnV9cEj9Q9rFfq5ycv6EsdEd3HDug>|ex ziwnvT>joGTdKpv6BcAo(T*hx%s{d!S73mF92KEhIS+fl4yl2WzIZ$d#+t+x%ZoTyA zNp_8Ho;qvaf~s^#Fp57WdSP|4Jls*fJ%7y0jVUYa_$KO@-wC4qyI&PLG_+7k-zyAc zr7tBO|KdQ$w$D05fZO8~!QQq%> z$I~YPJj5E%EP`XPl!s2^U(OxRelzdz1QH!ozvI?P>-ric?Hy2Gw|x%3d}Frkj7CTi zx>BGbUZLY+n2X0ZNlTNl$~|d8IbD)dKn37)mMwu)n=bui;+>*R_K)s&9oJ+&;*;G6tQsKHqA7Y1GhbYH$D4HWF!jk^}F!fi-*qFFJalgmXX)QdSUI3pZymg)6+T=t}0`2K^L*p|NO;%-#9~&^)>Tq^# zwmp42$DTz8S6Qr{e1*wi{#Y!wvv=Vb=r#%dP~*vP#ehB#KDxqME)%s9MU3t|8*ugV zMS$8;dG*q?&euD1qA!BIYWdPpgvq`uKFeKY6v_&iB$w60Kr)jGs-VQA# zZT<-dyW*F%HQD>}38vn7xOiDD5dQjG{EE%|%KUapd~|g1sN43}ud81buB-LNYEsUA z{)w>p2jJ$%kNK22nW760m}gY_CG;5wfk`k=_3yCB$6+4J4LH$PlfA2d>H&G& za|g!gFTgLqRqeu6*)JJ4!a}<(($S(yK~87UJGUxr+Qs0aqnaj*rJ|Z;bT0f^>-Hnn zT{`K@3owqbNvBO_9MmVw%{H~CrTtx=T&HbJlX>rG!6Vml`CT--yYj==IUHFdi$ebd z9{m6mGH0WEQE`47zI-1M{QA6)!yImgZk20SY(FlTUbDrbYG_l&vhFxJMcC^gq%oK+ zhu(x8t68Qw#Fl;l`f1OTClpNTM-2=)u9nwc4B&WD(V-b`a; z^-2%y$>ii%d$HPGKAuvRtyekB^2S;yc1x&#f%N0{99o`_`j(N`X+UCEZSU(#&Xk9d-rKuHK;XS#d1DWq0St%j zCZ)<&FwpnE7(F2m4J(9*OiAzg*`-o@)r+|!wk!1)TcR>sjMT0JfHB|r`%mA>#7@S)yD4FzHc7}~f z&M8N;O#|fWigdjL9xrG#{cK7-w`tl|IM42u9f#)h`mHz_(K}TaNXPE-G>v<|RjmB3 z4PK)`R)6=hzCmZEzCkwo#3ILR`Db?2=WpeI2b2VXcBi{_VmaevYu-zyNxGByf zu%M}ONcxQU{*C8)%fltgbgo}<#;dVcBsFNe?6TRi62YIdR4vSYMc)*<$>vevsP@#P zJ$%GQ4sj}9+dC0=zKA}*5BKisIF;gA!UOGV7i*%Kbns9rW zI*fL>#MSTn?BrY`uA<5rs?-VE_!s-N47{J@gXu8lP=s;#Nz0l7q)k@djD`K}tIZLd zf(G8IXpGu87u6&B8<%1466h~}c>7C>KCl2u*>#dAD<27~LzYBzX2do+PD-jgT90@-IK=^5SjhcWMUVA1LwP2a@acMOa1LExq`=YaNEuyK*EBhG z9`&vKb4IDe+Se}*f8d4#;CHk9b>1h?7c_x1>wJ$%QM4#A`eB#rQr07lqLe&;#rqv4 z8XA6QA7N9|Q19+~5qdZ*2QE{GSPz$gJ14g^SY*>kyL;;!*D}bse17OG1|n zIm6&;4G~s^a}D4ao(X4USqME`u?~=5Wr9?PS{`{NWbyee?%dP=T8UF@ht@j+-YZQDN6@KFcm9V5NyL%2hc@`QvprnM;PUp=}-F z3EP7s4Zd58z0?kQ>~pnuNTP5h_tys7d6(qk~6va6_2N5i?W^i#*T7fXZP zsc%2aSM3C`+#h;9JM(2xGIwWcXO9!zUPMGs;|_srRG)|ecq_q=0t2Jj8@Bt4>M+uk z!2+2RL?L^(tZCx{k`NT4k$;VGm@k|Jcgj|7L@d9nX zTe}01>4KRzz_goAoF71m%bM_0smE-;QL}aZJG+$S{JW562ylqXv0fI$+=Lz624G*u zf#^gJ--dQKC7W=7{>gdGVT}t_urP%Rh6^thU)J_K_Fil z!xJE^uh&sE-_0K1ntx69a~432*KwuQ-Q7~vAok*CJ=)LN1mg6z5Sh+g5}k`p@r^@q zy;hXoFN_0}DucAKU0&PA9oefdaX4@a=k*N;g!R~diuO*f5_N_77G<)WPl^*TTnpx; znjU*JH1OriORHgYZaL1Y`iwWB2gmyc?t2?9=N|G$jzLzRBvB?IB$48kIk6K;%rr3o zV4{w-GFA0)+4zoPi(Xxi_#P7cPX+6FLlXB^1e&rvk0jhaC^R4?lIchTl?d-Vq2Ggv zgyZ3W~e!6yhzbHLLr$nvWV@#9Abdx!8!zRY4+=Y_o z&WX1AY;xb$RCkkB9*;5P8T6BTG~S~yI#t6r!&Xo$b)NGUuTa=N)jz`P1Y>-5Xz67x z?Z52n3_d$_58S@+KgHKxr+CFG-JV~|(Ld26)F@(79-4BQ*v|A+dGNW$3lQ7hrJawP zBC@;eLpdV-DdMv2>-t*dg{k#VGE6m_^fRf%QlE75b`ud{l3_bJ4C!M^`8$)X@S10+ zM!CMA``&qyx;=E^BWF~3eQvZt+m;InNWxmJQr?Nb0k>PwyB_LwITjEQH7cDP{uj{f z0v_dQB6aBG{NID6qas&a!)dkm&ZM@YSkKHnocEEo$|aU;$dY4w;C@WWSU)+t<>i@Dz2r$*?GRE9O_LU zQyli?g}J|R1iz$BDy2qcWL3iy4FItynjdc9S{^?36ce)gHxLURPu%nj9M=C7Gpu(E zvDq9Fj>lv0KLGK zTLJMqO-2?otwtZ_)NVJwqBRqiB;Jyi_FAQz5EKPW za$zM%=(}_qyWZh_mC79NDn9q_b2j31^u@#ND-5YKkCtwh#|~4GpfX#J9qd_?)OE8pNcWu`GWuc2d4&YEuYmU~ID`vC!pz0UHyKIf4$~lhJ%~k$A*9b&yreN` zZ*T9e@$qq2YO{uu3^&X`A{Jhd8c!f|7{dPj2|$KfCtO%A8rc|p`WUTD|0TMKT?sb! z2B8*_5$2w=b@&qj|vxrsmBqnYxnUJu-{Ka|LbLlE^96SIhrWvf@A46P$pEm|t1hK0p{YhF|6p5@Pf4@Zb>;=u^R% z7JxmM;P*T{3s3s*JsWX#YlS+8o_0YzZz>#jaM6JlbPpnI)>P12`%)ib> zjaAw}FSfBfzTr(_&ZNu6Y$g+y|M^V){srfB|H;Wob|F~i+zv~m?xq0pJYq2rz)XOVQU{*>nHR+hoCJdsH6%wFXoVGq)0Z{9{!_B!`hO=5od~l|qpl6Qtk6K8 zzb%Az_03y;`tW5t&Oi}WVL6XrV-yP$s5y?rccz+6nDB0tIlh2WzV9Fgq;kQ| zO>g`@=>Cl|xkt}H19oX_oLXgxQBhGQAn}2`PwVSNXYdnsoQG@Rhu|HFV~e;rN7jWj zrm^C<4b6@c8NY`kba+#9*NU-4jn8~ok?Jp$sajL|x2)){9u{`={WOWe(r0ZBYnRDi zG+`}`&OD`%B{3jw*&~3N64FaY{dA=Nc4b*B#nmh(=bAYoV;B+&&T`+nHu$a5Vr$B_ z?uX88-|+tWaJ3*h8WaluNL3LfYz%*0vj$7zJU~;dXVa195R& zMgs+}!(Us#%eUJu$7M1vx8U9#^=yoU6bRbxchbrY!(%F4+7^o$m5S6Oq*oNINfg0b z+!>9n(~o4<7N=Zo6v^MV{j@n{XBd9FbT-dlVfa~q_XPFY&x-c{*YEx5ZijCZRc<-P zKBo7WN8BqbC|R->IY$R>Pc_pNG_LBdZ9RpAoOp)&ECXp}TqO=U0Z1k~)8 zD6c%k@AS5WaB&svJ8RGIA=Y4i0VZ<+>qR1y7MBiTna&|SF-H~ccx;yX)%Wz%Upv_u z|AXyz>7BwphO{Zu)l|o}|2ag?e(%4nK=5mz<+-5Zc>NcLc;l?2{UllUOg^oP0Qsa? zvE=*vfBu`C22b$-za2N|%vcSb(C|p-?qV@Z&~Ym*S(OK}9i0JHK8}?4MFl#dt+u;M z>DCk1CqiQnmbDYPc4Frf!2O5CVb(e0jyDX04Fkl?z0JEHq#mB=+-)*`&p)QvBli^^ z=e?v@m@>J!hYPJ6Prg6D?QUmTa{sHZ(o?+v6niJ75Fh*h7hE1NAPE!wgRe$*u*nNi5-=z8DaN!vifE@=T0R#Z)?R~XkeqE0)sYo^8+9G(3u-c2flXp7V}TlknOpv$j^dd}lC~6h^S2@t?WoE(t*>j6ah$4;=g!db z8gWVVX+OuEcvdrn*#}4TkZvr@u>tcom3MqOedc?mgnZVu_*)kWP9J2P`s!|18a1a@ zjeO1HxIF?i_zHWrF8+?#x7Xq$_5z}?|Bv|P@Q^F%86%@$r1{0OBbU-8MsLltnwjBx znUv;>QKvNc-M&PWoVIp-wfTr#XVg2&tdWLDhTYUjh8s6NNceg7oU(hg54KO-T?4O_ zy}~;S%ySL4m_`Sp#aciDW;qSZ&%vy2{+8i_-q>eWG=+;pz!3J~`;?!3~Ye)p#nSIPf0$T(weYg^K*`szP|3va%B$?_pK9fIpix8B-< zt#Eq8YpGAT)GoI$0H z4c)u%u3H9Omb!mC-9$^gaQTf`SFMx11{R0uZiV{cJq14THcWV@ZJ;_+^|&4_7NU3JWIghhI}(dTP7ZOq!z!F z2}>w-1X~ZJ%_E4<8>&9lsJeTR@?lI4WEy|eUi7s2?ZuFsuTMj{HW0BpnJfIp&@~et z5WtUOE`@h=^tQhD;(pI^U|U(|i~>Yxe*9|Bag#nO^`*54Y}qT>QT=&zwLbO7h}W~$ z&DD-8y$&t{-f|1kq~SZE#9(Aw3g3)JY^I4*7O7$ z^^%!KRubvY^37k8@Yg+(-OhyNI9_JsyP(sZ6m6pejgAWd3pZI$RPRnD$um{eo~@w= z1OBnCMs7A<(e7Zv%<6!UelmF&UOkTg{xEMSB52Jtwi_R!Kj1j#_O!BKSI11U`{Rw3FKPF$ZMTq(mF}UGDYX2o>=1 zq3DvpV(Du9wE#gVvq{*oOro{+6|D~fy|$PO;Jl4|dB3MY!k_iF)HS}k+UO^{qT1`D@xFGW%|TUv-ON(nbK^Ht9gVlC3dS1FVsohih7a1= zS*3-cs1oz?t7i|*YqR?E^IE?-bLys+SAJn<*@>`T$?|@QvNAGO>XTNgKTdO+_|Pxt zu+S}Xhp{-|s`M{_3V&(CO8}wQx;avzC%)O(8>arc@PVd?jo^0?u&yCslYBg*GcNDQ zShS~}Jw1fi%w13x>kGGJBwRkU1$Z+wBe3!lB8-x#%2ad_msn}@z$yYU{otqQ3>e(C{p=R$nwkZ&^ITja4x6B;77 zs|BIK3$XW*mwaT8b8*s|^L|_o;#w0uNToRKJ^fkqkFP~$MLV=p$Jl)1X~zLF_r9HU z^GM2M@mE#PMwJf|*#)kv9FKshcEL*ii+`!0)IVM8-!J~VJ^DZ1xN%mJ{ZfPvdqFo} zTbe2GOi7!YQ}YjXQ$g?yN9St)4k`6I>Kv#<%^nz-qf37nYD-?=ZWT2>uzUZ$?J(=X zMQx+m#;2m1Ie}e^9sCe(0n~J)ouw%ZJG~&rpL41mag4Y-RT+=7wi`5U&uMAB_bL9x zwr^F@P<)GEPAbQ<1nU5GIsF;;PO_eetK1P6{NBzgi8)WN^e2Q+0;!8)|M|a!^BmFp zGu&&;bm@O~seha9fA_U#Zwy}pvU2+Nor0Ijb|dM%#n7#(TU5fv593uw!6PA!mBjzq?d zjHuGhfv+COU{ay&Y72O@&Z_tA&dul$1@_5uwgcRF*4=xpPpgKa-<-NnMh{Rw+fehh z$`Kqf8H$~;AyH~hZ&VuwCI@RGfE7D`X>@kXnPF8+tNnM2`=_{OGZ7uE)%Ts1!UA#r zBUzsJ0r&$B{eIHScJ+S=^xro`P`#K;@<+(5Yp}FEc&eJ<%n0{!8Z5PH(Q>!?efoR~G<1 z+4ynt&aB9({>%|1Nm@|_qW`3de@wJm(w$kBY%AhaEj(Lr_sr$q_OoM(e@KKxoED^^d0g zuO#Ju(pgO2R*k%C19$kCZsXR3sPliI8axs5p*Ke4idK?w&5fLaBUT8fz%$VEhN0vR ztlk@~i*l-=^-3CwNUHjTYU&Xo6XS|(!|63%6(LjOo7>ylMl&bJ9CT2J)*4_iHPd5C z@%tp~cl2pis@hN-zeuAo9(3!>Qi<^KP{%FtmpiVO&r~s0x?}G3>vFL69^#1ACj{Ej zbf{uAjflz7CoOuOFlL4snN9=KQbPL47~QJIVr65--ZvY#fHt|Pp6H_>7puY=@Vl1O zuHD@?P2PAhS@$BLM_d|S)x%VHl!&mfjtfTsZRE3e*L_{g5R^2zxg&))6udw_@0hDR z%f!(x(Qz!4AcNQ8;TC<9Wv;mG`abmb%)#r3fJk)Z8bwvt*RG<4r=wFT{!7p24Lq}; zK(CXc2y7QIXILrD$Hxvt-ZV@5L`}^}sXIAqvzOk`lt{3l4y)Iuo4qsw)S05Ud2|h% z+=~J1qKj+yt?=$tK@xBH4ls|#g;@xKot$DYcS!PT){s)CoaTS27iRYp0rR4+yKPvE3yBtVAO^|;06r{z zyvIT{qb>eV6Y}yC*R_h+*d-ZS)>~bEMcUVsA3@WL-I_R@8WC@Zz{Ix_Sln)xmKXhz zaCHXV*R16# zJtbVmt>kum?@FVr!oRAX9?j}7#xk1tDzs&d;sxr*D9Y5i-8!;!^QjL(sAA>b{gpm& zP7{EYJ=^$GEwuWXoaX~I0sBQ%y^l92oWZyIBO>a?Mxkq06r*bgjkd4T_?u`ripszvfuU(f1+tmBKrrG7 zz**RsD$U^LaYj?lUoSwmgGrb^yyI#5$_c|xKw^OruMH)8!Gs0;j+g6{1#-R8P4T0Hr0r<@!>I@B|z9qhBpGX7WjhXb1z=qhFWq|M|cPvpmWl*HJaG`_N_>Qvw zA~m!Oy*Tf8#JSve#2#&Hl}a5HCcXZATPBH)9HwW<~?10nD72tfW$C`bg!*8OET29 zRYjyTOB($qRs-If3X=l$)b9O_=kbbE4zUM=palUqDJDx( z_V}IXbsrRfOcvR+u(t9WW&~)d|qy?LE$Wz*56eP$20nm`m;P|MELr(J! z>J3~Y8tGon(eiEvz_uNn;y{GsdGDmS?4UE$G5!2e=Tn6iQ($!~;iM4Mmo~w-Ap_L8 zoiuPTWkwlps(|WHvnY{HIxIjHDGkt~dWksbCTwKJZQNa-3G@sJ3<`p!2cY}Z>+#F5 zQ#%oYf5OwOm}F+=8b3IXi1A#*?aeX7_W1w_bgG>syU?7wy8n$rBVY;DNY1nU9WR*t zB*YjQ*;jJ1p9G7?0Q->vSCl~WSnMpR`@}_i2KZ>jY3CS|C@Lv+oX%Z_o{u^ui=4J+ zf(VjTHJ5Pk8qL})q83zh5uN-4fm}MnJXlnDph9s_c2x9xPH>N&Bfe;js)n$3&~jXE^f~x~@cKjm2M%@(Vac3*Zt2h@ zTrCGLY5?q}VN!c4crgaNggod-LaCKr>sZp0SF27skPht6+)T@<&jO3oY>l3KmrxdC z+{v-fwbRi%+0AQ~fHcFru&`TBs_ey7`c+m5?)T}e;J!k2rfwWtl5;IF!{I-Yhkf%~eVA$+pY^#+%!N9$hL^Pi=TLkH(-0R`l)OZeuRurJU z+4!pQjcb!aB+oje4UHbQg(*aC8oac1+aNm==x0{EsunPyb&*^$nDz%fy}Y7(^y*tV z%WNK~JDj3gj@@KHxV+Ik`Y%%7J94gEFE+}ISZ{GP)OvJ~9= zjt#dWW>KqWNV~_|;6;`g^i{#9`6k!LOvoPf`hR7v4c|l{HMe`^L5D8u5*=<26kS^> z<&-|^Pkcc-H)XtKUO7!+9G;>x)CLG$Yn6?)i=($h)V>sstm7q$U>7E0PmwNn&3jMh znd~hl0n(e$gVt=$Z2W1ap9cRfEV&4vrzG8fEp(K18A4xuwT=paA|BTV;e-Ts01jQP zEXSa*;?0nZY~#(qLvfp)O)P!r>8n>H4;|wH1hL3g#h1Jl@Cf+5nk{%m!SFWEsw zTy9}nc2FmsRkvFvo=c$KumZD4SP?e$@>?MsXDxK&AWglTUC}NNmI^NJ$ z`Kfw!rrD!xcMp%A=~|M$(R}#{p||U4W8J$I>G*xOaq`bDc6r8;Z0mL~fg%4CxyKBO z?XM}&g5EP_^*!O`t)g4|nV{3k=-!eEuwvT$Qij(YJC)?ohjpiN8D@`~(uIoo!_Cjg zK#W-9R+X2qgT{{tbu~&VIUDA&DLnnfoGQCD(mmwuq()b>_aR*3A2$`G^24syPmSYoSG`qu3~@vheDMEG(y zCBbt<-2VpA5~Na$>dg||WPJ<`v=d(C1kT72luUB5bk5bxoZ|qTR*&Gxvjo4Xb*wFW z3;~l)HJZt6wALpbG}#)0HNjeaxlAkbcf<+3W#wL&9YbKa(Q;$kaFt>lmbKK>`_LU$ zZ^wzp+TQe&3iXW=MLe&KCAcB>11Vl4c!)R~TJ+qR(f@3#0lhw_^BSH5Mbxg#QH>Dh zjXpyjmB!LGPAvL6b@j%|Uayo(HLo>EV2!iy;;@OG2+>SbsKOV?6v4OK{GLl6&u5;m z(lY?7o}v7}^&%ZKPy}kC!|6wYzYZimHFV{TWkfc`QL1{k~I}l z0$~7HkmsoWAaJVQNdeE~CV%^i5mn@Bgxuh(%GLfnFWy0_C<@Yo8D2yAraU{Fq@?qp ze8(5}g&(Z1xF;L7UyzKyy3!ygNY>PJ6~ZzNaet8?Xu!gBnyL`m9>FN}sA#Wn_ag@WAq$pd;C_ zHpQ2xLSTv;h5>&YwN*VBtFA0Iu_dq_H@>~R4!F6ruouJuNih)rmA(Sag>&EG zu+!S&LYhTVB(M{i&c@Wk4tVS=9xU}1>IvJ+%~$w3pHuBN6422tK)(ZHo3$i{Wc@$t zop7+O1K57pj$4&VfM~$cuUx@T3$RBc<7?I|n)>)#xa2iT!J)nL0dp>E z8D6~!+O1>l?c`{|Ka_`q`i=1k23WNGzz2t!x*ngkjI0KcPq*ygy|{Udkqy-jLoSJd z|6T{+OT|q()qcb@$znjXL@Ndd{&5>UF9O03KY{`_HJ_l}oqoy9A+aEtlw6Sr1$ab1(@8gbPFzBV9 za25zXsx^l|+1FAl-FD7#e9xU47D(N*SVN-=^7j0qE!o190r! znS_;jYgBfYh1aCe9v6MBimOdZ$ zQc}0fmjve0u|(SMXkO5$qk)(R4pH9@R9clxc)rcLZpF1Ulpv5hmXMOe%0uRQ0}`IVXY@#ib^B+}=FO7^G^F|Q2ih8&5S^wpmz zgtB`d2-liGkBCealCvS|gu;TmQ2LB;Qf#2YWje|?%I0Os7XkjkPyw;e=cXziv904= zuuannA+41uBafk17n_?ByR9UFjb{sz3p2>fIltwVwRAJ|DX_Cu-{@qKHVr$WO=zC= z-7G6$x{j#KQdbgrcE-~DO1*a|5G!!T3UnXk{oMm1rmZBpac9iGjhMDXx##W9QyVs! zp_TIiGmqG^c#(!YT?|V>vCmkOe6y(CszN?108TgU%6i(>SJC=`-tYXEbD1f?5mxvC zR4(&z1(#OPEgve6@O*73Rt4XmEu@(8 z`t-s?v+~06BeLusUZol0xG^~r8Z#S>1=q>xZbRd=*nwqo*I<=k1WyS zu%Vo0|9w0M@(%h%Lf6uv=`V&WesDyS;*^?|+?P21gq3f81SW_00C4boi=#WCUpK-0 zM%nlhdtdS|39pXAwR2Jlw-?}3rvT7(kKqpcN&Vq}W4Zjpcrc#s$X zL0o>J9L$ws?kE2z$uzT^V{03?4h>1yzs)+8pvt0DATwX;KSb`O-om_U(ps9QSa&6P zkgX2m_0B(b?_uAV(TxHIo-|LE&Hmy>|3NZ6brqg~eTq0e4PGP>d=jHW6W&qMkZ}58 zbln5z%|2fZRS4*&INHfZ(V-J&x{JZnzHI?#G?Obi;=8pWIqocOoJF)4A z>J00`k#aV2Od5;ls^||D-+w`B16A&|`@VM$^kca>rXQq+q;{o6G>G1T{V}-!qeNd2{Y^w?yJ=#UQiC^2NVFg z4MhY2w8_a(JGdiV%>ta3K}%m|ZSl~qi(YRBgowG!%=F!+Fq6XycCuB$VSGB8w8CkO zFKLg%An^y#{Q@D_RQptz@75ZS-cR0<-Bk7sifQ8e1mL)#3OOe$ya6NrRYyZXXg42% zrgq97Vj@jyw|#}z1CRj_dtv)f?SOB=B+EJPcqp6Ivg~BSc5Z9m^NPu4EEIXe~wIxb*gD$aUB|-qz=tN9}CB z>L?7RZ^{Zbn}V)}8`szPXP?x{Tb8*w?FND}Mydc)njW%6G42DqTg7sWx{ zY7DLW`f=y;+*VgC>$_(JGXZ~q<~wpr5q3rCkFhsvi4`~0wCIE=Y+tE1T+sUXbj7Na zgFfs^c|s9VTkLarfdpHtal*dcWpE4mtIc0<^#2FIVUGLK2}wKw+-wL6)W zav#henk2}^ty_D5yBG;U<~H!rc9)F{cv&HnRdU5x9`m1eRj2K4x-*cq!79)+Yaypt<-(oA@a&aW+eX)IxH*j~#f0D8nSo)UQ zOtVb$G7{?Obm~_pra7OA)6)p@#aQo!_P$jBN+2JfQ9tVQG4v2cIx*8tE{F8#8;Mx?!vq2@FP+f(}1Y^-kB?K@-_MtYWH-1EUQ5N5WkDE4zFh0B!*WRK&vX=nTrz zy)ngM%+($UY_MNvLw)GWCm{p>%Cjnrk;g&ez&;k9Me7-n!62bceQ3NJverjumHs_t zow)&e*e?JD!m|@rU~m@Gn*}>P*he|}e`yE{OA%)KKKtDbN`2@z!L|~(9|wOm)(7m% zRROl=MyL21eFxUAwQwPJ36H0nEWqiwCb-CV&yd#Ekv14~&3Ito7Qm!|>@5Tx(6Je5 zZ`s|?%nn+WH|8MhmImE7GXl1~qqnBa5CGHWS;hT1^;u=5VacjwCP;G=Z)4!UhOlPdu$;TVg zz#8}Ms`~Rni(IZ;?LU#vzq%T~_aQdhScJ8qvvzg7;=;XEu9z{w->p9OPK50C=DOZ~ zVHhYlne3UT_1rNeP_t&e+=;y7tS2`b=;2q zYtM+A;3GmD+`w#bsjPmUL)#dSWLgp9X;z4m7=#^vMmx-`04zEVA>MZfW&LA(+19f> zr)^x(Q&uS!gAy1IfW}BmeTcJVC02g<2;jR5TTjzCSprE6k=6r(gPV4HhHF9BLiWtY zjrAa^z=)ocSLau_iTESJU-ejp6C;nLx_9FgY;_JZmecqC{EjaJuw4+(<6lwg1E+t3 zwZd989H^Ek%Ng$UC`+pHw0z4_$CcQejAiX4)Ej$R?Aj3TbeGN4^%73^nCfG0{BMZG zKe{iUwyxYu*Ae%lY;=)Pdr<3pL#$W#cA?!3a!ZOb*V>ycUyIW3fjK#(^GoO6lCsC= zF#ESd>8?>k^Qs(evZwZ?+|HefVAqo!Kr1;s$l}RL7G>LzOqET@k$dsB;!%KQfDYF+ z<_o&H!0H*M!sVxy81rxuGY+on@5+<~-RvH9l>!8{5nG_6HY(SN*B8QC@-o3s_4(Ae(~v z)faDmR!FC|`c1RgE2LFv5H5@TzSKA*!NR5GA9y@v)mL1YVY|3!wnT~*jXC|Dxj~Ln z;!wq@zaab}kium-b#8|I@SYxoE=jDaZons7!w1oA!M`;g3^p&9H}AxXO%V1DUJwC9 z!a$Fs|BP39ZP{im`)7;&AKk`#VV_Ltqky^2h4)kRdi6UhD8EX~bNxa3+gnF+D_JMY zR<08yC-l)>WWdY~Lr{OkozM_b%|dL^0a0b2rz=H#}aX z>Fq?R3OJeHEf6B~i7eu+D!avKQO_$Hg;6+58H83qJe7|_*JZwQyrx&9_?N%=8#FphBs|^>j79MN*EyNM1 zLAT!9Cco~D7n=9Z_1}-n+VB0&Ea0N_x$(;ypu5KI-^2FvsPW3%MQBmcm3Z~#1c?8$ z2EmAhnw#8@j2F&-2lAjdH3J7Qu>Xk}a}x8ce|5^2)(d06Tp%vcKKZF%Zt=Xk60VBh{bOrIKo|x7kR4gy}5X?;WnptImx%Od*33Og04^v zYf_F}zH;^QMOO<~r9lw^fs{=`>%`oIhnI(khZkxY-aLxLwG81V^%qJ~6!`J(glL8G z4EsTshp*9>dZuY7fz%J}rdw_K-Yr@3M{(Wgu2k@;k!PET;V+xASMNA)ZAQn*ZY=QX z)q5;az`ISuxvO83ITD6wo#FrkI9{vdhXe2Ta`HAW{_+k#rIN$oCgk=a83 zc=aC3(8(a>1&sx_0-ovc)|!5Xd?5)IYcsR?owTubRO+kR|QIdw{& zmURgNx6*F7^&NC?+$6>_ebqKZnV#)08n|M(>_6|b*7xbtOS%KwYkJv1OB6!SXR02W zZ3LeNifnGVwNS=s_v;|}vJSH>|9TJe#00>clgg4Mu>+WI8vR|g4 zqUdQvY+5)w53lPZ9|3P>Xyh8TyRRf@cV7u-zD0dk>Hg|5zA(VB*?+MhEw8$Ij5kd9 z$GHj9W=jR78=ENo0#E}a%&*95YHE6Kh35sn8Kww@lH!a%2 z^_smfJtdl)hA#i7T|Y-e!(+le9G!co;j`e|3jEb#UxrQ=jaLVKTy)>96WJ3jE!z&O z32#!?V`9mCE+xk?PzVSvE3gctn{!zrMJ9*L&)*@wVzKo~lQyE`&ugGU$LH^2Q!9K?w!nI08un(H!bjZ%c;wag(OQ4p}L$_G(g=(=igl~R0H>KI9A6&XwD<0WL<&o+!~ZFZW5 z7t{6`5cmWjoxDR^9^su% zLykwMM{iS0NCxN0)2tbLk94Hii2nd%ZdnjrTSr>ZrjI@QSD?h7UCNuch;Z9pFSnYJ z{%}Xh{TR+=R9EXDO*D)1m|}f*oN}2bH|l69C?*h9fE53!g}=J$j5ybE%-ZmwgQr<3 zD`e$u z*qvdmK%QbL_6n*t^)P-rS=N$8%+h8`hFd~@EY{JkK#eORv4DGIqIkcYKqa`4vHZ4y zsGLHF$cI&bm1h1ywEaU3344dR_03sMbDT{5p(*ZDEoa&9q#dU4t08L>1DcF@K z4w-(Bc(v)Ae$Wfw)x90BtW=v$bSXK~dZx%l)@u9lnjA0{-y%n$a-#HlcV!f{Yr3qU5Vt{zp?d4qVIsUmUt$l1kbx5u;R*A}2cT!wwk2aT>-~jdw61g@d3tP) zd(GI{bkG7|(`!~UHg;Op1(D78#8X`7%Sv4n0CpidXnC`X7n0DHIA> zl7_9mUE7v1r;|}-`^-s3sdTG9(C;R^R{70nRD6 zFyWBIp;xqIhhsScmi-^Z9ASnfCF-;rfESBTb2@brS5^z-O5P11ODt~*=pbWx0MO=IwXo@%1a{IDp3&?(M!t`V?6xVK zAuli6G@r(t9u^jSp$gi4(ulDF^lu9N(#6Qej2$MCz@%{=ZRmrzqak`0 zc{EF@!qLnfyhT#5#zx&kXtK{MXtet&RgiPELTb9N>c|Du>SbmPr>mv`%N)ayva$qZ zv5B|P=Y;s+{plAf2`*#oe$oId0YK%b@xDkkKV-)B8Rr!ib}<~- z>MWf5bZkjxblm>Kigp&BBgQTrG`VX1T2BqX9W4=_IgFgj6PBXWkU%Dn%4EqnibXRq;qp^tTpmw|P@N7V0yNxb{2uJ*SD(${zx zHliGTRgu=KZ&s^W2Igxq{UU)B`o1M*!nMV{s`DC9Nzpip&g`QP$!#2%u8=M~vJMFdEHl7V zZWXGu2PpQ37SOAngpeJgs=P{WA7in;OBVs{-k%p3iofCkB9>4RS-IBuE#zPzK5Gsq z0FbN)S))Bzw1Zm*eGX*VdRURLr$QF??h3%7^jl+?6vx9dVyt?BLQL}xw)F~};IrFC zvSMe9YnsB?0%#`!DMb^msyN`DIUsnHDWfNdng_yMH^T|Cy z7>)aD(plRp9o+KzsTL33RFHRFlMxEwnOB8Jh>mU<`V9%f=_>Nq_B_n`s}&z=dCH`d z93o`WXi9SCU4;p1hYFevtW$+4z3!#U>sSTF@amqaM7w+5q|shi-_#}AX+SXYcZ4u&do>T?P_pg-VHCiS%r$4`c{Xm6N zyF4CXGOo5R@-sK_4Q4@ zO?YG=OBgwCQ@6j_r8R>&LX7X1m#MOXogWt9AK~IJe%OO0dBBbDc}R%-dNUixBPjxp z$MJrUivvp0NsouQ|YXJ|SGu&tc)78K|>A4rG+~Wm-8do``Hr zB-R+8KM=E4nRO!8C-oX83N|a(9IdSijvEb~YMe@xDf5rYS99a$%-c8o4QA0o4GcVV zIWaO)W&Ba|T(uL8CBnac?W-Ao%AIoGCFHjji-YUOpDdCZD;5AM|GvhxOuNn?j|GUv z$Z3Y9u~2D8Cs?a2R^JI<;~=ge1FKldY(^&b)W!`QCK(6n0>0P`0D+o!9$s}S#JL-?jL6T57-7iBK>hQnIC8Y7gonSaDuyK4`p~hk3 z!xPHHG)b3G?(0@oKrPnwm;~a=eT-<*HlG7S8va}0clGw=9H|9JyU;DG`-63=PaUH3 zB_3PsM^;exU6UU(BednNo|jL}FMho(A+P{3&9hoF*AJvl5APoAt|MAawCQeUFnk6j zF=$rE7l~ywgx}G>nU?NQd|tonVcW=_@&lRv*JdSPdeITV>TAI+>e-OW*JyL{ulU^y z7f6;*4tVc}J3&{j>$aG?lt500al_%|A5ioUlb0r6mkk4J&alCKdBAABLM5PUCh_=n z9{_Etzq0s_cU1AdF>Ps|NsVYFRxC z8$Si7fC?ENElf?YE528(S_s6YWGQ6Iwk*Eo1PERw#!vxKY9>2e!&GMZLc368kTF0M zzi_nkjLIJsC1&2)PbaOkR;~n;9%xBctu6#P4@s=jv)E5J$O7g1tu$)D+3>u6}9%+@Sj zr>x#6m!hCK@;Kz{s2Zbwx7Q2bPtVbr-x&vLO-`1A^Vbt^jAXMEPVVaTuq;EB9`en| zSv3(Eah_*O$+i4qM`6e1p5vj`Grd$I1&W+r?|zf+iKUZ9?DZvqmFc^$n-VsngJL1G z1(K+lwMy%e+sCtOl6Fy!Q!URVou@1;7j(0oD9=AA#Z?wCo)zg=XtcXuMNpTTBI~eU zuw9_jh?C_)5Q<5AgoaZ|)k(p*71`h*Rp!;jXq*57_`s(=2W9}##voAutTtos3n1YARV@1uGfO0ToWoF@2set~-A2q=o1BdQ-SVjf1gag|MtC=x^JzNYOyb8gs zMg#z}6>kR=af?eRG4HMIy0jV>dpRvkOm0?7%(zJsV>Jxn6PL@I~jx z$M4iH1g4EoPFju{~I>NF4 z@NHg(*%ZTGUR+X7n>(Z8ENk+$Uk9dZfq&9+1c#*K&D zD{C+d8<_bEyVaKLWeA&wXlN^|WaS%_*$Pe&#-rTvd2lm@fbC6|_r+8yO!V}c%z5Is zzm$~wxO+d99zWRK{cwqbs&99g3GR-h(H!^tBxp=hQrhFwU(M7mI6$*2>h2tCH%`+X zqzIwQkJNMzZr!Hdeo{gKrpH7I%$u1nxM2)e3&S@z8`Av}>|hmq{9b7O9*}NU2fO`M>HFQS<$@a!USOce7&+O4KxM9&Kqg1Nrdrbp!@|*o((3@M2E4tb&by2Q_O$NuOe=qU3q;F9G1LH{)m| zBQS-rZ%jbBR1*N6(_VNh+M_zlMgt6r9~3`O&~@qU;jb*XOI;^{q+^I@%RFj6+g73y zbU!7CW7>87M}WD-cvf>_gr`*hA4}RI4`1^iu*+1l-Mj(n_Eb7B~V%^_ZJjv4$(rfo* z65EqSk?Nz<#lFCvgW3%O?g(&C+;2`aJbL(kc`H%@EKRedoSH|r&j#-orU%!4zIQ4oyp|mq4u&!I-QrWEsgBYB^fZXxEdv?_CK`;WK-^PJ{z!#!6nCQ2Lx6*X{#u=Z5jiV@GG~;RYg% zg{0@?7$*nJN2-2mwOP7*+*Li)JD4GMVCV=Lh(1V-Cvw?e?x}L$Q1h5ulee>b=Sz~v zrwa>&wjA#F<{VCV_YlRtG#@lOq;9FjOmRAVN^N;6tbRd%P_blQeAq zXwv<{MSQp!41}o)F3usIVo~*K=eIw|zgFN34qy@^eNOR*T-KAFNc)%oTRBhZx)t&l z^0EPPP^WT_PsvHCr66l>*STxOn#9L(cAJq@#&rdW%@X|lw?lu&^WPV~8H#VNc3Le* z@O+U}OW8OX9<#5m3h#9b^n6jb()^?LpzZ3Z7o&e|ot7?n<)^SL(g3c;NLlL_ z{1`x>6ue6$Pv!rx9-Zw?K^xK^EW`eY36nPuL-5&Z@hB69zeCeWgmF^u!^zK)+z@Fs`}_M z{GGAfbOeIjrRx^I;LkdH=5862jbKQOu7H(~5>VF_SXr1q_8h9b-`3hH*@zm;O0vrI znG^^ZNM!?vW(+gU&i|B}UsblR-uZS9INrxyV_XU2Fd8-`}2xOlMX?ncs1&VPI)OP#=b3;)OWv|CEEVfyy%wN7dscNp* z_Qm;{_b-W;q%$isBUFm-=$Dkm+11bY%&XQWB3~W|f27W!mLDyYg5Bw7IOB2o^PF$; zoIQA~`7anD&mR2E?fX8iWegtUBmAbHpAKyR$#ukj>$@TCC2H|5dR6Tk*d+4yN3VMTBSgiMwT|7rSjz3IRX{IU1liL*I22#e@2YKK{g$!LsHjZN(9gxl!5(LjXhn9|_j&Nq&jZRK zQ^{u5jPm)lPF_y>6iHXToE>Vk)I1wWhwFwx54QIc>(kfM;^=f>fuSde(}nKesZMTD zyGme6l%>4)dtg04#l-F>5&qxL{kMh#e@lvpcr@&jh+GtP!`@y^elqF_7wzr*$WJ~y zgKTqb>5`Cdsw_RRFKkL~`3+sLpqzSl00x)jw|@M%Pj=wIRw&AM4dLbG)%R5gjp-@g z_mq!m&bI-za0&=+r8#A6XDl<;_V=ZH=%L6+PEi>J9$LP4pzWtDk^#01rt)a@*Zdk% z3`FFsyzyc0(BuZTh;eq;vsP zh-%A~j%8(?>8}&7jQp;lbhkQCFO*}@DZT_@JH%dWW>JM#zbdHq{9~(cH70Y1XJcdg zp%T01v?IH7{e$hbtzHER+^W76j_o+=h*Ae$TX&FYl3_6ZkQn=H#lqz;;XfDLKzwgF zT0j0j5K`SNIpY8@Zwq;*TDX>8Z)F{QvXmm21KNK1PwLLcsja=7Qo(^fcoETG_BJjy5Z}0Q!<+yt2BLlSpoxU#=_JG{ z2`J?7eO4&=r}q8tkRx96rr}NdNtz@N0S1Gh9p6%_F4ri>(r^y@N+Pe-QgDPA=S~Ydu3Os5F@Rb4l@0G-cGtsVxH`v+A7iZ8P_;7u-}$PGY@3a!tUSnX|8?{ z%AwwwCE+XO_>jH9LjUt5Y3ADhqwTHZqTIUo;UkI?3W|g@f`Wt~Af1YUNOyy@k|G^5 zBZ`7_hop3;G|ZrMcb7VobJ4 z_$eh)-w1elEJ*@_9AOq#JV<-?y8# z&nV2)Oq0vzsVn_3XVFPaoge4@9tEip>K&+1&ddNiMz-&cgXAjMcpQ(CaD*xg4l+7l z2;@rk0%ys(N#e~;Fh#-!B`11Al@%VV_kwPOc zOVx%$G`i}d-G9Q&a{>H6S5GtEBr6OjkMn*er`{N2`WCJrO>8hgtK*H~w8TC^H(R(t zp&2o)(nrvollGV^)I6oILY00%ru9iNFra0twR*ii3Ks$IOIWeceZ9I%&KfjMeKM-R@-bfJp7n5+uLyC**HGti4E?AG1 zs>Vb1NQ>pqKmHFv{mafIKE`zS`5@F9z>K`qR99+LPG2dyjcRdpB2gaPn94|&L1(E*I(WC-L0ysN-0Zkn?WiyY?xwKk8D2W5~~Q+AZ`EdFPkC*HpNr-dg;Gx3Lnt+T~bfZM>7An8lX{d!4PgZL_N93 zEY~~7^4&Zoow(p}G>zeKp$WD$XVc+#)80K@5BL-r&Z{N_bvp z9F=sc&r}D2bMbUAlgGRHOWF~+Mrlu8)R!uF8l|TJM?%f8KG< z)WLP3`SS<-jS9mi#JblxROJvx#jts4FYUf~IavT>fc3X6!%-{O=wtPrsA;XXxV~`? z-DUF?0&DHhV>^t48yi#is~oNOc{7>ZmLQ#42j4H*^;P|pXGXBxd_Y3~bH!lvh!@M!j#~o2%fYV>npdjHP z;{iRYggtYT4@B1yt#o%Fak2uz2tlRSE1gX>0Of0 z>IfFzio(y2$jHe393&(qP1McO0co=CX61X%E$atd(Rt_z1A;bd=OOmkM`|Kla| zG<;b_q-_80^upfZ@&+%eOcDD;08i~?AHK8kPQzf1?K;%+uaEAR9%Tgq07wVZvF>bV zeXG?ElCQ1ujg(D4uWT$c)DcZDA6`ao*dA0&ScQFj9v<9`_EWV^mbt7(`fYt&aiq$42gl^>G@Lp_EnTQi|OLOT2ro!YXfN}{=H`1=; zk5pK0i5ud8P-n)eSj63M8-w%@>+fq$j)u=q)V=daA{#Y#p$in zLkG_hJJVEr)w^P1VnvXnz17b`+K;kbo%i@R)|QyvJWfDiq4$naBl+boW%+Cj!M3YQxw*akH3Kj3@v~v~6kt+I>&uKs z@B$ndcELBMYS9Ckb>^IJxSn0J@V{PW-&0G160ea!iFeD|Ce>R?M&VXf_L=$_;YS{- z2h49&A7)?JMVsqloUD&$ovaH^Y&$L70gcK;?tz+!%b_n*^@0-hs)N6PJq=%gGo^@5 zouGY=m=smugS|^wD`rRGX$2r7o!nKb2;cE^Y5g2IV-QpMXTw`=} z%TuV*4Tby>Imoq$;(NU8Y7tdAsTCt%dQVv^#fY3%zU}l1Rp&QDkJij4)d9)sNV}PrYSW&o#)3EZR~raXK7V0rZILlI!Dd>(mIxeOgJdC zzj!LkN{gm)m&rs{j`BC9I9Kk`H58jNsxv~dEB8l`*|3`#{K8Am2^QkmY*+`2Ga0DErv=T_MhKZvoMm0nwz7 zp+F7><~MwB%N6+;(*-!Qh1U#CX0TSD6Ez!=*S9v_7%n6k+e#CDq~VzDNj!FU?phE? z6IF&=8jY)S2h`%Jc?gz1%CV&Ipv=K=v3y5l5FYf{90zGtCinbGwkXxub3>m_F;KAU zh|GR^wpq*?@fhfF_1b(vj1;$_M`EBWX@y|3_(dqnsb_u_;k!N>T?^O=#(6648Xipsgo`&${LWD5e|hm4 zCrz(aq;=oXWcpMCyd-M}Eu-M@sv@fK(PX4(EmCwh!bz^POC5JN09k5mPsn@`z-oPo z@2k*hFnY!Y0)DA1iX6hnolQyNxT<(+IJXy!dXnBVU15G7v;zupkHbS>W$P|ak@hA` z=5lM7HYL5s9Y|*}BAUl|P9(t?Ui|7S#u#KkFJMYQ+h=Dtk1S5aH!J_Eb=%PMKAUs+ixh|pIZ7?drXnh3^k`IXn*hb@S)8@8O;G{BZ8Ax=_H zE@BuXViw~cLIj4lJ!}!QMc3_i#|xPvbo{Yz(tDri&$DxIB;`nOOcV(j5yeyeA3O0c zFMUi?&DNyqr{b~)rs5brF$C8m1dL4dsJcGvT3lzAr{(lMv*d~_*^hCM3^L!3R6B7a z*_pEfMr{v=Pgt8c;957OYbl53 zVs%EfNc3bmO-7Y^b-+-Y zVJZO9;BFR}aBMjzW83*seL)Uz121R@ss}?i^Qt8*==nCXZ#S`{EA_Gu=jKV|(R@*8 zGMSpRX7rg3KGtbD&$iqv7EKd{4P=RA$E83Mxlb%kEUmbosU_;065#!2Xv$e2fK75Q zMO0)uy>ah6ulL_q0JmGKm`FWe&q$A#940S!LwulDTt_G&)bBP=AZJVPvdAiD2wouH z!`+zM08}bA;9_hc{4GACEBKon^}frY?>s%J^3(>Hm(0}3WB5QCDTKdFDx-cf%bN!B zHc~F~SQ^ZuAeihKk2c#7%p`goF{I6y)&93pf7`$qJA@w<2=H-BS!Ps7HT>} zNMd&9hbwDHhF0lQ<|c<9E;%>1Wge#-raSwkh-ESy9Uw`IjeDOQrKetr3xYT*&>N|F z@U{)^U&U|P%hk?l%P!SSN;qtnZ7N@{beazE{4^gNhW%cPJya(Qq(yzdwI-db?FImy zMQ9Y|`2O_Ef96llZtQ=&{h#j%dkP{9f=6C_GB=);^?`iE+ye#`&)Dl`N(w$rv-ZHY zP}}^+w#*C4ALYa@-I=}ao$Og-e+Duh+h=(_ zVYh(u$m}1t*8@Nof%AQ{nDAqjthca&UK5s!P*`%%9UcA$d67|Y12w}6w3ojqmM zKB?+-zc-{hGgBNW6Nj8fWdxWgr+uk~ytn{b)Gc467}0{+?Dn%x86R{sD8Wf-UjO-% ziBZ5=BTT zF&a!ir}Z%3_Wzey{LXb{54bR$8@Aos&O*a7rNoRb`-E4I!wrXXwP>A*5_;@;ca2*V zJ0Ji80FWL8=8dIESXc4af~~X#C>joy2+*~zE*puP%79~O|lgJBw7e6FXWInYs95rzzJsohD zP~qh=q)y;2(OV{u@v-k@(U$Xw&y!nPTd}pgtsV@A-L7H(A+pLFpk9{PqKEq-0I2Lw zKIf*~;|@rrCU|DoQvJHwKZQ<|h8if`ogUhMAEgci=xLCs9}vyrqDT(2Btc1%d!i4Y zo7XBJa~t_N(=7u}r57U;)g(inL0`#E9k`A2_V5zr`jVn85j5h3%JVrQL)A74nipnUN|s~>S)CxtX` z<B_RB6KMO5OVJx4!m1SjI8WKc@uz-fUsfDBJ+cs9tZvbZ{TPh-*G?=i05;a}lfx z-}5N?D0SOjI{Rh(x{A-E%^zh|Dy||7?`*=YYCfoHr z(Z?Rp7fb}_ry_&~=tqJ)47Z=_^3OZY7FAX*Ue?lcH>6Zq`*@SS^=rORzn`PyT8KkF z+z?=3>+0%y$HrE;o?QK@?#@O0{3=leL!7C5Xl(y&x(-b3VonX}^clB8NR>K!m%&pzJyDVZMiXU8u}`m4l0pXl#Dpt;{&y87y+xuws5 z(b`T|OGH3NVP1>j?b@mEacVS_@*=&+m!aS1h+n8u{cbA817%ROS{?$x@a6? zKN_hxDBo~$AN}H*8F=WF7SPcx8zm~Qp6=RrNEKLlWFHLAmYXDc(A5kS@w`I4geC4F z6(XzD+GmFOD^KLFtJn&_|IiV(3*`T@IbLU*^QDAx-dkb=@9Nd&*6=`a{WsD7??-qK zL{q=qKvCVh;^CkXU!a0w*F8i7-Fhc`M^B06SN4$gw0IUH2|F3n_SpM3=?69D`zSUr z&HxLlHA~fs0UKFf@+36%~q}N>gKME6m7~-tmLuRIocC0fW)s{c|CN607_Q>8+@tio6 zvGtm`0Vy_39*Mvk92}IgTS0mr7Q`uGt&SGzUcQVH^4&z^uGjc3bYzU&o4snNdFRzd z!o@4w56->Wpoc&khdPQ6ue#anzJ{gXy}So5h@ijfl=3q(diKgY)yY{L{Fvo88_yFvsMa?KQHoaUP>H9jQFEJ%4j<*eHM%?IA|7 z#Rh}uK#!`fh#Au}q-I-0B6s&PLfljdZL)pkNfuXfM}I`uxLsb$oMeo~#E7SpzpBwE z{KNx3VWhJscT$V}dVHzLug$J4wx3SqFnb(!w85zx|Cj!LP65ucNB|pa`uWJYzcm%u z&05~;f9<(Ae`raU2!l31x8$d`a~1h-kF1eu#pn{Sb*b@4NnC{!rz>=sWUE>z&Be2q zVeOXUgyo&F-mmPtuv}0DZV6op!I>W&LLg3QqlGLYnB!Aw=kIIJTIioThLjSPM}GYZ z1yz+8rW|$gt-Q(up#7NhB9T|gnu`2~`8~94uS&!(YBW_zd%(-u%0IFSOqXoOlTY$l zcQPzKfg)Q@!_%RsG730<`y&tVK)^(Og(O({w>lB5$U`nJY3(rsmxO81j-R7*s4=+{ z^~<9C<52%6a#gqlj=t|3vi*<#fNIW|qtaHCNJ&$vUGE$nOvzk~`8QDJ>wN7gb^ zG?$y6%!1mn$s{TwbT(>;QuX*^!z)ijp3Ysw;o3#^9F^w%cOIhjqEb;=_ zNH@Q#$qocUjebz(meazV!{a(Jy4PszGUsbI{z7MZ*xos7cB_nv#rdrco>586%+wqm z#lwX-qQn7RtS~Wu!v8qHv}e}N_Pug0kdDiAK3+m%05havNr+b}5rSCv{VyklYP*@F?9>V3#q`uXf@z@D;3$agn zRE&9ZbZKKFR9C<$#e63_R(uNz+AoY_D@JZ2DYmYfE|dfEfmdwPH$RI`T`{fpw1F(5 zwq7%R?wt8FV}lniN$}TGs^kH0Hr#D(nD4ib?G`FJR#caoS;*MWnE#jJR$-Mo-^|}# z-90N)Uuw3c_@>B95n$b~Y7|dmpiZSM_;?8jb?-!fsEG`h^4uXUr&&ih_D!al zi)o-)wQWweiQ24+9;RFI47xLR#j^0V!{5?wB5<5Q<@)60Al=KVFvU?qLLvotWkzli zeDGXW;Q`x$we;e5oh_v@^gWzWq)69Jx3@#IdABf8tRY($DE9|9i05H(}qE_h!d(z{~4A3$FS!}NVB*kIW$kImEV!e!ko{2>Cl(u+LK_9YX zZtB_4C`e(V$Q)M&?{f%#ksQZFh4?Jp>C$rPO6=T|!>4$V#&jL^9ZeUznTj@U?-HDDL*1oA6_Y)9{)W7LKLawAzi&%NC#_IK9l z{Qo>Su*1rqPAOsNrrpe&t&PaH3WP+DU-@kzehXIn6 zF`peyvuyq5&4K*M_~Kf4VWA=ta6=rolYz~h1*{C6_RQNL>*G^xX-W3iJz{_-#;-N_ z7a%qP!(Y+I_V^I!n+m;88S_6OxM7Nk_2FYwcY93)51;YdUwAE1=yEsK!qe`HOyNTz zxj{3P_sVnuw!03&A7v8Qr2%MaTZ1$Dvmwc1S3H+;1gq{3w{7iG`{wMGQHVvnZ;i;5 ze*t;9I;?T)^hB_UHFs0V>UPZg_u^HF4^p@yYQahsC^1 zbmqycyf_^TI?`JdL3q1f+YteHyF#s}_@-lb_`#vBuEJorb=D{ zXaJ79Pb1sz!6SBi;aOSExbZ^Vx3n{&FgM#q@xqg4p1=(*oZUE3giP4c zXjl%++=z+c$>oXMzu!GX8ebLweAzB;!<8s6+#YYi9=kOk*6uDRGQ9{FHVz@gTU$fO5hgfPLI*F72 z1!DD=HVwM&K|s8y{Veh3>+SF&f5EvkLV(Be{NGsbE3<(3eCN*$sF4mt)|mFDg}HH~ z-w2fjJ&#H|#(_m1yf@?8RlB{)y$xS|c%AA+jdt|=5p^9tZ2|5!(1%qR3()^w{x1wL zQJE%wMzg002R_I%X=({c1!Ef$mRI)wBTIs-0(n>Dc&DEL2FzrL-Fn4>_3l!C_)!uT z4idt4|032M2~m=HYDmB0Yvf8m#Ar(i=9YX%!G+^BWr**Z(sh|L+9{ zlRE#@xEWrpVZICOB0_h+wF}}An3;RVX{Bj=3XnYvTx2@#&$!#yV0YM7`{v5UuxP5Z4o7WxHqBzCaUi$oR0b_?93iyJ%vAx!VpPfG^suMjP+ zyeu_t|U45ZFI1d(!Zl#J^4sYuBZ|>>gto?`$xIP#WU=b&V1W|>D4+(&( zN2YZvoRXAT~=^5KY*QbxePw8T?fX0v!mMvn5`U zXFsQ2xu>S)|DF3^i|>U+=9kI}arO!W3{3{Gtc{3PjVK#hlY*0<>cf1>ccxGhbk(=* zN>@i-uVQ?XLZiRee;k34P*U~g+fd*C&a&H&^?HdhI$C+Th`KZjrqA=BAiY+INLW{3 zpkL+z@iR2}c7b2O{FcO2fE{vDQKFXJJjMcK!dpTaqTe5tlqj2Ix%O>8b0sYP1FAXp zdArjomf+LOXD{k-k&~8_>Dh*H{YC$Vpy7!D#+sUm`DbUIR|*3V15Ope-NwtAp6t6^ zyu7@|oh96s(kTmCO*YWk+W3g7+PKD$^^BzD}$ zDT?T?h1MqITY{B%#B+K7 zCqN26n}+h}mYQQ=qMo=$=8&(WL-^?wX+(y|mF)I}d;-)0jT*eHYGonYQ{%p#`b)#My)AQD{kuVvxO=pvv-0i28{uZpuMEv%(#ZXbA~cxL0O9Hr#t zsqz`0^m|1mr^@+3iMOW%p%Jq(Rm}blJLhBt9m^wF<#8J^+z^yt2&ef z!_B%9El0m-mh{a;iwn|0AGM{_rXAgiwnuXf_hun3XW!Z7Dp!UemOHM-be%c2T~A0V zmuZh08zp9xH->UFtpsDtNR!x=Cys$@%Qe_7ekd~m{sN<@MlkNb77*UH^6ghho>%%YqhKus^TDp6x<&Z zE*{l7d&b0&sd_+B9amdHo|vhljBt@$Ry9$CM>mlzOBAM(Qt6u1v>raed%>rAlV3u^PZA-}+4>4MdkDTQ~_#h0#3<-cV!z*YMy8ljlOa*OYi z#@ru8SB*@*HuuysT?sN7epw=hP)JI2x?IMhCt6GZHLYzu#ZdnSDUn1^xahhaij)vC zpB^>yy$x5cM+Al={OydZH9F!1-ZCr$B#t1pPFCC%;D!{nH)D@jiM6 zp>@>gN}bDoiBYmH$YZ)P8x^ z@W2LWrq!y<3aJ`+O-plc0vv9ae)44bvECGwBCF7SPB#EAo1eM@TDd`F?$6hma!}`= zC5lL`P(-frWI;vBvx}8oT_0~iWzo%k=4fBc=$zpaPWT8trGxMv#?gzpcZYyrn zgSGZTKYgv{aw{%7xn+w7JLqSSYwM$_@XKx;TQbRK6`%bf4f=NrKExnblf*_HLv4lu zZ8!t~R0)HVWiAUtzL`=nd=PFh$j4i12hu{wuYi`%jOPG#ej?2##DK0kN`*a7Tm`H# zrmIFi0htI(Yvqk^y6a8-naak?{r$d|a#UpB`B|BW`XeXtq@YjpPL75(w0ng=;HAEg&ig z9%|cX)@NIQ45a6v2=;9tEynXT*Gx%9SFB|Rnr#CQ?hE|vTgZ;woGTVUX zbA($PMsqeZ6kl5ze@r#CPBrp{=wvUMXD^YM>~Ox@DH;LGai`nd2UP|~#*8g>&@XK8 zYK&ONzrovA{Ug8#i}}h^QIhOGD4MRT;RU_1HqqG4f|0D@^ZNE)1?X1N>`k?!)xNBd zVv#Z%Wol0aq$ChP{-G`~&dH&98gbcIby$-)n}Q@cFOPNC&TUi$p}4z#;z3b-`~f#e zTD~La0i^OID03B3qFd7=RY48<={UqEw4O;T6r9}96XM94YXUra_#b??^Yiz0x? zIQRV#r_NKNmzB-fE&mbolxLOvqGt!Lu-2jE?nX(O^+*alr>J4$5hm(B%3pw^!br79 znFvq_-(oh4>W;Jit_%dMtQJiHEL1!-h zIOL^1V^0xGM77U9GPW<9q z?5w%D*kU#)(*Feshvkg@A7a@rF4ss4r9#bT<2E#IgI;Cq-rgkr{+Uya8q~{*(;-B- zYIgjl?DFdP-E4J{C4tW0B=CPp?~C5J^csL^T%T>)TDd70Ej)4J#+k2Uu^KE%9ST;x zs<*Gt=vvI$F34xisq1n4MI`m#0q7*&l1 zFhS*q5b5zn=zhJ9jOa)qFJ!%Ctz|TwX&r@6_dUxSI7qr6_1-X$%Sv!sL`c`ANQ9=i z$w#`|bPTmaGs%HRfUsX8a9Nf*m9OI6OdM(kfyp!3mlPXz2}e07!aX~yrb(MqbZS}I z5OJG5XwY~%oUrR#%v!a2QAvRBi1t3Z5pxQ$!n(A$Sio=v8Ns4y=m+2YhI>JC?{hS# zS(b%!K<-l*NHkbit?eb%u)l#^L4w8cH~=Nyz^O2zb410jOGZ;&d%-udd7N)YkfC}f zj(N7)u4|hD_vZMQm&NY$occiyYb!#1rzf*hDd|;Xc78O!EdczT?FO>#qmpRD=)w9e zt!XTT{iO@b%#CMQdhr4~PxrAh?REml7;---B}Y)unXaY#>@H+rpqX%xViU}`B<+zq zT>@hfMf=j^M&GAZy7#&z0gYj7DTHebsC(B5f;LUX> znY@xDL2#AfsL3@2Z8+9yr;w3+Up@*r)ad!wS0^t zcbwy0)IzLX00`8l1p8~hzZrKNTl?&L-0|^@JkI0N8Eoc_Z!Pip)BkccER9LbrpE+2 zuN>mg7JwQG(Ax7<{!qLqFH|BSY}=PEn0|`hfQ5pl;Qz^)!j4M_Dq~9P6g#F(eXrS> zFJ-*}eb+vSauE3fD7n{$p55W7r$OWxYJnTS}Mq!N7S^! z&n`8mLErR>^wrLIuwAg0 zrf&W6=kQpkb0380B&|+4CA)IAsfJP zJRN-|%dF;c(sHF*de1`3vS9JYvE=9}4Fij7ObfDxOFwj7NY@kr=5aB1pN@2`hnLmt z=JL5fw|w=Rqs>Nqv+d-V9(>Nsl;XA-UDUdpAvzT?4&_B#DfhF2Rn1_JB(>G7@X5i93(3ODN2@Ge*n6hlGT|>)@b@Q!hhNST z;ID!D)5miN_!s_zD-;D9^PLkzn6`DhL(S7(Y<3MZSneob$^osP?T`{6CRIU*to+Zi z6yYO~45Cf^pxLX)LS^csAJC*kbsI5q*KeVMIl(@mfFD2b2EZ0k8c7VXbg4^?qmmAi*bevE;0_4uKD z#c4xAJkn?5D7ZFFf%aI}~fr=&ih_#|#Ed}}mo1vKvc6e&(Qo-LA2n$7NX_}Kv+Tf3C)}9{nPW)_de7Z2#Uu=1L{MQwv~9Z)Zo#9v9T%M~aA`G88v$ z@Oa5A;-Ok{{9AXHme(Eq>icvn?K5K?morNnS~agzFOXjzmh<`3yD$WmBk8N1)Bn)P zKTFTG*ELF4v1Xil)$q_qk<=&OmJN!H-ne%>znrR0`+Z5lWo3wtE&`H?M6gM zG91&M6|=u#GmteL%Ej&NIlS&VHQSK+o_((ieR{n#=npBZ>zJ4~Fx9{4HJD>&CRvqa zl&K!sgd0vQ=jHA>4rMuHTiKKhYGtctPfljlXq8pA8D=Nu`lw-&(5y-~KPCtX@;t5P zw42oIY&Y&~k?M@yj0=q2vE0~!Z#dC!)$$?u8p}MJ_yB{TWoA~^GiFuVQ%v0X^afnU zAPbL^?UC1U!5A>tUKb`XvS@e=Ux+QqPVTx~JlgDPsLFN6OZrJqU zf}f3lnRBYBD(EDct=Wr^CFe=OZqtXlsZ)Nt@n%!MZFm>O7&^O8F!LNr zB*9`Jm5|ot1M9c!=KUEm5lpAY3nFvgFPGjz5u*BBs(18OBz1I1PE%(~+5&oue>S}~MXkY2?SeeQMpjVR2E zZ@`iez8aqHGY+!7X}(|BCG6JXAcFoV5T@*QxJ?9RF2Hzl z7kuX0j1PTGUfTZpx!-@A5Kvf9d{O@~j=R`_+SGcH$$htkAE`xKuXk~cn|#Q*lkyEq zn^b?&{v9StV6EC0xiKYT9B=$#2Iu?C;GApZ;U}JZ6agbP=55b`q<)1vGLqlGvH>tZM67!!N zT=5gua3o##c2*{*G@g|R=jGunx7niX?Ka&a)#T8ES9b9zrEd32o-!o#Lo(1|?2f~{ zBQ=Kdq+G`KOtUU}0}A(TY@Efk1hj;J9`7wlb_RigOJc6liKlF0FA)2aZVg%q zh{ZfW679>jx6b)Aaf6y<4mJ%e*ZR1N;$6)-IiWd1KxPv{6?2LGxUh+ePT7CTEfY9H zsoULk_~||Jq%Tc=~QxhcbE8cwhFK7}`#>(>nN_oKSrUIkVk0 zhv?fYS2G`cQ)`UmnaPXV;tbl(awIc)L07}WgCG5neYzaupxmKiQUgBUu`4_}R@Q=Y zuxKxh=$~-@a&@MqFwUhTV{X(zPEOO~k#0zYEbe0ORX=AyOO-ekUVh>*Ltd%xJbn1| z1(;^#vs#f(m$*xEI>#2+3`h%(r{8WB-&m9v_|h~yTK?OzU{Fw8~L#|;iGki zwut+op>q6ECrAMxNO&81&wK_?UH7i`yxbXOO2c{Teq08$wV$K;XogZ?&Lq zwuOO;N4me`;^k{(VQQ1Ty|i(0ai-PD$;x=g{prRXWGf`|-`?l9grWEM{S+%cx~*m! zk?6hhI6hwBv6!;Sm|Tw87)VGIn^5@v=Ay`5YUtwl@#iWGvyHE$J zjlQ6q)(jvT?Yn|tF6y=;2@f^4_5pIK&jj`5C4Ws)r4|^L0$npYJLLB+VPGL~r&$Um zezUtcAK##O4wI5jl=>0PuAEsSDnSC-yn(SM(h?26T4f1^rX6{2vK=4eCu$YhKfVyLWNB3=3>B zx;l~!)!Z8n_kCM(6p4!k_*HZyCDAG-+1(9sqF&ZsPnQ+xrR1=>yQiK6JMEdA zWHpO}1PCI##gsHP8A)`VKkL{w%)Nw!FTxFSh`(Nsq(p^cGS z@SCax%p?zOK=2$>#w}&lL2uWU)?PD)0U2P@da%*r8mqAg5#J&w{340~hWyN+Pt8;A z13W=cgRXlU^0t>uIMC3xmk)EsY!I@`*QV`1Q}J{jDK<(|kHZRNDBV2$$T;|4bS-XLcXby#{o4Xg+l93*lv#wE)3=73_1{SO1?I55{|-+oR_!J*DqZm6_ECd8>@C3#mj-x4O>> z50y1~=L8oO<&pJ`uaA>`U5E@)?8sefrI|sb#!k$Nsoi znk|^zru@+nyH9%~;dk(bgHG&RK&G*+fkZ!P!I7N0`ZV5;T4a(kWUUc*G^F=4 zKk*%q_jvWW{a{tGlHSDqxW|jbv^@%NvL9id#vAicAOIfnEhYyH>WEN=BI~GK)wcUq z@^%hv0je&`Yz z*>Z}>%AihJD)qm(9A|oC_35Re>q}L4x&#O^DK@xpeQt=+D)H$#rLA%3Xo|XsHtRik z+K8tu4=1Y|Ab@bD3XyW#M_uKC6D9@)fP??z$Jf_O4J1CU0e1ZZ18w&aa3Q&u#uA9JlRBS}{=u3u|FAAWF;EbPwnaa&e#fW(B z^#+po$U1zH@tYfr9w(XUv9zJ|vb}b9A0@(83!9o%hGb;{{)Y))=(s?S?lRaWkH?@a zhPd8IVBz`S0RTECUPCqv~#2suj};9 z0ciy3Qjl&b>FyQs~YW z+_Q#)^D#4v6bvb5Mj<-*FQ3}|rDc}9R5H2js|o$IceO+&07&}U}0YK93uJHl&fQTLR6Q}jeAjxHl?WOFk zBL2s@5vO4hv$ZF;%wH6a`;>%bV?f*5p%z!0+6!>07M~4~i4QhwDV@^Z;sKgI>ls1a zGx7Qd*s+$rXDW4d3CI#prD@mHGl$L%k5Y#i*) zJP_smgh1JW9%P(#7^hwCFRT9^Kc)BM=I4_!UB7|3?RfrN{3k&Bm!Rdt;--{C7rVV_Y{W1?S`XaFKF!o$$zFWM)Wy0fN z^iE0KauUt5^jDE4ZRVHw+S)!8nm0(|8zsnWcKXHa3gFnp@buA zwMnDV2To!>U(=iXw9v>prD%mTl0T#SfNcQA%0R1(2Icy!>h|RnXC0gJ8G~bPa-LyR z*|vEC|1nqQ;-*GZj@G5^*EA>Lc*!A@GhQ9vCLNc_oY}bpFm!-UUEeW$(yaR(Q^j7j z`mo0(%=b#x=R3Z09)Se1hgiCA6E!oCgR#pcjk49i7;PJN#vR5I%+A^>I#Xkek2Xh5 z1q+biK)Tq&#F)0NdEW24k6~{9_2N2Z9nLxt5m668y#B6ce_Ka5CMc*a1}`9NF3k_p zC>as)BJBTkbALMgC%iW(xcM)7m*`4UsvrHddA(eEU4aYrnmYc0_dA{qOA^?q9z zgB$cw{?hY|u5*w4on5CjpJ0M5vb&4q_)s{20QDW}tL^I7W|%0=?ixxZ{KHPjr)tqX zygs)&wmJ1)Hm6UdKCoAkA!=px_O@5dKXcgRE>ydd=qU#+p|r+ooUirhz+EqtZII~_ z6V!~v=M)X%VjjzS=Px=RkOkob3&0YhKMNz}bm)44|3X~5iEypZ4{wbn+DC~D2t+u} zmzTN(a@$QREJm3p9fyo7b%IMQdB?M{yf-)UR+eLwWI_vDiG;7*iA8)G8DSIpSIk>u z#lz*PIO}PieS8i8nui>-!!S4+r7yt*8K&{Wi<(n{*H~y2Bz*$#8K09LJL_SmXwotM{{kb$a z@uHSJY6YdGq1uY%|KkJ_rAiS6^Gf74ljj1YQIRXCh&k!#l0RvA)ISIysF&3>?Lwku z-hLh^@-&J={P#$u8ySBen*iSNPUA;2cPdx*@tGZY{Rz z8aukq8;24My$(vRJ7plNkDn9qi(6s%`;feCCg_S6^_}{dwbD9xBk$A9^EXEjT`wsu zL3MvR3~*`DdnyS0d{)PL^bqSnAzV8Im*P!RF*HkNSN*o_E(l znnk+Z*V0Ot43XdgmrEkcaG1z|vyIWh=W$~ol4uaGFzqEt_}H0hy1fS|MIwE-xfu1n zp&ZKYYd0v~6H@X!tsz7Z)q*-4`2YR821>bOZFaT4Y)8B=D*7j4?4ONuEU#Zzl_W2J%yWEb4b)kVs3z9PZrXYGT$;9Hf$HB&P)tUEh;xJ?cDAKmP} zrx@>Ez#%Ij;^UHw{jP@&frBv_LX38@wJT z=kr(WT#fLN2z6g z-Z>sz<~)bL)xA+7>U(jr&v_0V78({boVokmdMWT48RDF{84hA|F#)3@qCX)Xu4sB% zcI79nADc4079@xe>&0(3{wu_#N8-Jq9;!X+^}a2tWK)>5OcN-T?cpF!42`H0Q%~p# zd(W8N{Uh8<84etrXBptQ-<({V`P{g@@l^Ko_&J9-`gb@I{B`JDlv$eGmDr+J(S;+R zyn+;+tKPxSj$+&oW9+W`pFFUzZwtgan6fPWx;~h-k{)pD z=I!&^>gum=x}(7js=&0MIuU((xa#4-ls9;S;(o+E-t7s2YinswXM?h-T8WPN*caS& z5m3rJnC$Pnw*|+h^t~weDl-ngO+fI~?ABEnCMAW}jTDeFK5z$N9CVLr&{rAx?8}!g z4*L>BU%!9q>;D`=z_NUKgJNJS(#T0Yy|n#QHam@9OIv$oympp>jg74Ur~k+5g5GQR zOFmWBKTy8@$ar9NTVp=I{kgj1Xkc}@N92+J`|8@_i>A+uukmVVqzoEUvx$8suHHRe zWLG1Ox`l?q%JuisI(`Y?((?=yGWbqaFl8>^>eWOrR2a;?fZ(fw8Ob08sw54(^IBHx zbccoIq=Fwcgq^?NjzoRR1}%*gA=pD{n#AZ9N`hQ7gV%EpH5d2Nckwcme>t_NXGb|x zi}t{LSU=}#AYm{tFRT{r8wE%U@u6CzQ!vp7Bxv72qK10*xgu``p6FUNk1wf=awdD{ z3Z_n&ZS6i=@62fk3pTg+O)qhAoZ?Vdb=>KG}2 zlDBtFF;C?-JKH(ROLYj52RGwwmxEb3?&}LdLhwwoqea89BF)sdrx=7?7pI3p_sI~j z`5I_{eKL}n#?b$B0Yvc-+{~h;p~8>YZa^CmE)tr9maG4Uu4UJ8*2S{Z5}e#_d?&CB zRbf=Q#J(Z z+8Wkr7TgQhmcwFJsWr0+1>P%HR9@^ZMdQ@M6lbTZo_g-WBA1%G^Eyw#`AYI)G^jX# z3yz|Oj0$&bXFk9dOHY%`jzl?N8c@HB;7iKeI=*hQjSdZ{%`Z8{Fc0{y_g^J3M5*1| zt%K=-QKc9S%Lm(BzFZP>mtwHmc1n-+jDrI?4ietmU$^5Q0i~k+oTaU=<#4H9xsGHw z3Bh|g6fT1GLVI-``#K$vgclH&r%g{!gNZ|VZ_ZFXV9`$CvM>8`9j`%&)Fjq?Y@Zq5 ztLuo$FHDVQ2gHR*r}T1hkH_j_z}-Zgp2r)?R*inr+cq?x$5Cd2g z%?0K*lMVCuQ)KrYM>HK$)(SWja7dB^K_Q$Rl3Z!@r;q*&4TWT>z`~Hq*hiKKXY@A6 zup7HcKYWDwyy#v!9o6!*%H!A34iyn5JY~A^bRr7rrLvM?cbMpN#JwF&x6a0*tdri@ zrwJV2;d9#jgiG*MhD`?=D0n_|$fxnd)MMC+(aOf+-BfQ<(Si`ofO>Hj4DUS_Ch88S zO9sVEshhM+zkam`f7l#Dl&!yyErb_@$cYN1Ioa8CSU{K?)GYvMP9lWeP!xebIEAOU zp0y24Ox(?qRNpuWBbMqmiWJ_&eYs`qx4+*>*#o6D>jJ|Au2+B_Z3;Fe!Amy-c7ku9 z*wUfr_6fz|uvaA1Tin0?%mXoQidC}$boKfu){E-1JqzAa;yX2NGBwE;0zyw+A%=JA zyr>`7Gckk~y|^K5k%G_d!Z;4pjUFP9i4Ih|;dCijV@QA47a6!+v7#+$w+W`k8gy)* zwp<%3Zz}HLzxfl=?7*(!m~rgv{_jyaU7Y9}Y05#<8nYr&a9T-bSLnXL4%>Pjdu_un z%2IbwGpEm$nXJdkU{&Y-uv5=bFOqn&J~IJrW((CsHPy7!k%H2(+j7!cGQFy5mZw+h zu6&sf9QAY-0@+mzy<@~hlr6XCW9g(Y0%%y9-7fzpzHP&8R@U1L77d$%qhGsMq&a|IEkhaGjPg zWh~gFtB7Wem1cMBV3t&m0+`drnBtUq*WYCz1Njt;rA=|@tsY0s5h^eBT6uOFzHhyi z({aTb5MhOK_96bcV_P_Hml@Uq92Br#PRWV45!PM#pRaVYl)hbEU2RR=y$Kzyoq+Hd z!dmC*FjMbY#>ppeei>Hw{%iU2oD!!xP>15z#xY;K_!3Igv!o;#-BYlR0#+$~91$rv zFUzC-VaX_I2FU$=RKGTJ`b-#B^pq8FmfeMSw7-rp7e73&C^0WDnyGj~GR=GY%tb@w z2fP9OTRP=muW|kx)&VDRN)z>y7HPp--nC_FA+N|Ly3a}zJ74T!8d)x@AKZWBgk-CDj-b9)n7?T463wkmHvT= z(ySoS3l`#L#r)5J^VjbcUBKT9hQ=_;us>+m#6e`qig%(g)i#)&6Rw>HcTF+neJ=kd znY)FzT$pYjzQug*q27Fkx3su8qHyW_dXnKQb^zAStRDCUbr}uvpP#C$b5OEsG8YGq z-Q$xI9Q2Trs|52+KMgG;i5J<&Z9oT}G8)^enz4$oK^X8-p~iv{o?h=$_WxpX^S}IP zzqHb$FU+@-^f}FA6aDG@ZSu8;%TWbD<8?n(nce`NcJ&ortL4eCfpWv&heOo#CYrG* zm3(%oRz4}kH~q3!ufFsgc5;w4%ct=uj8tBUCPNrsVuOkbBH?}Qb*v%q2e&?Dh$WpZ{DHa3+avAV#9z!@utWpm+y6 zf{h{R>A5#qO`Pf3Ds&3|G?N^{On5JH|3|n)i*M&$c@hzpaqbC2?^t?(@Hzy2Y00UP zQ#fLRTEtDWC99dslFm7t7X*S7*Z4abEX$pvFe0fFHsJwDUH7+yN8iE zbd99HBlZNnsi473;)U=A`cE>-R*F9T)lnyfW0*WT?r7e}yBU{fM_URRJ}KU9(FYZr zhaGePigWLYsFFe(CveV1U>AqFH{k&tcnCT%>KQO)jEAWP(H|V`wJ5@rVdeAjABMa! z3`6-eml{=hyX#k79fv|0epoMx4Do$Ob`A7DeE-KM{_+=AXgyR|^7hCR`pB1NAh;`k ztqn=czTxP(E^47uZ2dRCYDr^VrXDAhXNZb;9vp#`Lhj-u~a*_WNeZ~Qh zTqjxbBu+n|-=%oejBCF!$2Lq_c>;BeckjqPbmWH8BOH$f(}|1X$pjMId^ooUS4tk^ zamGtXW2Hu_*Fo?=qinLvloc_rjn0c+Fq)KF_PbX84UpdoITm?JQQvbvFy=EHVu$z^W7*B@mcNgn;xh#KclQCp zM|Z-?_5Seb9{~sgGYuN3O;@|(M0qDq1J7ryh(_C%fJ>E*tdVTVM`p9lsXk9A@nhzh zz3bon!TvxzL@wK5B)`fW4}Z^^ou;~86 zG64D01dFY1{wHSp>(Tg$icqZ2;jB|a3$CvmrU^)Lte1$)u#oa-xW-ZndAv*ZUM1#- z4fQy#RKG4I<%J9B9Z$Pbl0&-PVDk`SUZ{6BYXhJUo)$9JhtZuXUU1!_SGn&UxK+$6%GHPLoOZ2#BkLD}TVGbp&XW5R>r4gLrE7di52X%BhiAM7F6i@ZmR202yVd2>K%-_t)_+Big$E|I=XZc2OP;R*mrFR84 zmh`L-s(Oesi3dNkZGqRYqkJ$iF#$K3tRaUyFDxuv`E&!KRL$CD1~fkIQyS1)vZCmq z@h*{01v`aV^;*k#W?9jEnI0jV4xL;a`_2JO?-`{7;*D}I%Sw65!{M4teRH6@AniokvMlxXD}muVP{Z zDmXSw3*xHhJ&J82N<f_F}^Wpi`O>0JDlu(Tq-ecbW9mu0!&LA+EorKvH$I?uVs z3T0_`@?_oyJ;2FsrII>5z;ilnONpG6U=k}A!OwSnpTx1lrO)r+__aoW4%f>F*S<-F z_x)+jfKN8!?!AdWtO-F%d3fWkdX~hkdMHf`rrH+EQC&ykFs(Uhxm>br=TNoeU3~w` zfeaI6y{8#LuzcLI8HyAR^Iop;x3I2Tn--Qi<>hnh))>%UXU)(`d5BmqvuzhyA>kUj zCs`~Of1`w6f4&k1@{wI9Cj}KKBbI*n@Rq~JK29ndOeF+j(4IC#O39n@#B(V7t0^{& zSDnSadGqP|ylA+n2(&5&A*;AsetELLBms|@{(8bSu{SGaDHmGA<@k?*yGs1YlmyL$sX!f4`qO8d$me!tkd0cd{L|K|}nJwe#hJ3-zowO3)a#mgP z1^AweJklf@)ZLrlO3PoBp(v0Tvh*(D`pEgiMjLE1bsjRc1*b-04R`m)?qwmFOTF}| zvE?&0HQ9||me0I;*@527wbV;qV-1vn{lK?f7H*UGm`GDw$JGn^Z_}^Wzl?=>L>w3p zNOUFz#Kud#yHR+Te~zrEQ82U7N$sfPyieh&xCg!Zol;^00+;*wTNWqx)*QQzjH$jv$$v^+QG9^3O9!+r7lSOFZ$0DFj^1$So}`dYpO}t%K92V7DrEG!6l=& z1zpscy8R{F8c=r(og}C<_=iXHiw;scg7q8fwe<1hgr%x02n|o?P*BjJu|AyK7D@X# zNJ+f5Jn$0A#wHaZ=tpRkA_{4rUxv6`_!ah)NWgS)+NagkV)M3}dg*CXgCLw$xL=4@ zsHSeluBQ52V^lmvp58@O=5`=O&9RaJ?Vj6 zD?Bm#OKq~;;=Yf5v2-h>P<9E@x7lmtoZlkAxNla*s6jmt={n1xntrt*jvXy@{2sXO zu%fE+Q@s*6TX;CAWLfO^LI*n!raq4=_|AOP&8eztuTr`k@|CsUHyBpq4RQy3W0Fh5 zK6MCo`27M}ZGWF!N0WxqV0_njuKxEaS|#q{{YgH@a>F85NoJwv0aC8>hf=4@F(&nd zKr}INAKe&K51LJ1)ar9RSSJ6z{MD1hvP}5y2!1JX#iYTbGK>3qp(R~c^C_cPrjik4 z=Fe?-g{@4R2o)xrQ3|^#ulM&;6&Vo7Q2G458JFw3{YL4Qj$+xUUM#qJ(tZ3&p~lv+ zRk+!8HYcqXaZgV_T=x4G*ucVY9rg03=-}HwwsfIzNB2o%K3>!6`FrCF-?B6x@7RHH z%(9zJ@*`U;!0~sK!Lj;g%c5Thwx^>mbCUcGZE5+zuT|U?ta179x}v z406-;=c9>l`frEl-;KxZIEQYo-@DYU>cCmBP&04nf2-D7<`-qgbChZ%s|3W2o9->6 zDicc)l|u)dUo2kTUvddh4YDekW!0{Ez|UeQD_+8)?$6b2IZ3aWW3(a0wTuSs3@f)a zHE7qK)-s8)Zz@E2NLwqXsreeS(l$N!y#0PMgZ+nsukZY_g!-L~U%=x6J(jMpswL+v zY=rr-Yx+79G}QU1D{IfZ{Ered(%iZFoVUha_iZSgkZi<${4gY^Bh#{RTm4)kI^)n6qyCaH3w7^6W`DhaH5@0@!V zFwgQnoV<|*dKb^1QgR*MO|V~nK%OdK>klLya#Pq`>{rM1nZm5u5xt-(C{%xrL?f|S zbbgj~S7-Nr!uHlsC`S~ab2b)S=bR%)NIcJWU7L%IHm6l=PLFn`IuW?40}$Esc!qW$ zvY*Ib_}`xM6SJ`YNo;Ua3AjMgW)t6864zdGaDUZcWd(QT6LUxe?+q4?$h+8TPn{b1 zet<8^r<;TB>rCUzTKy0d;uYQ!YRUgxRcjB`|}f6V^Bh4@$G{?g@kZ2)wT#J%z8bA=QL&rU(L6p zvv?OcnYVtBdtCpQ8i_=_B%Wq0X-lc{{Bakga9sth@P+U$>z}Y~%S_dBhPYAKnaJ7I zkYoDwUg9;i1tJM*9rcus`4shMYggKGuFurqX9QpK2UQn{o=T$v&EO1UFXVzC^{dn1y9&1r8doGh{;Bn6YGD{H2!hVhFEHRveGSPxWqM)nf+;MA1l~5~E;{pXlvs z?e-g3xevY}iB*J&rb~g(ux&c>$N!{Dj8s!(OCtGCq3f(`w`4Gep*h zQ{?w`0r^oe=X)nP@urdS(cH&;aXeB-P&87!z9Q$}rgW*l3SA7mx)LYuVc%3-tZ;tHc?N@U zY$|PnW{P_n1r0GPFh5nV%l{o0F4zAZHdYwrNLJG?Li!|tGv8QOpxcM^34OW=Zs=W! z?)XI(&|20fJx-@oyf;jWt>Z9ws;rtLjQN~=(*_RT=Di#*ou{guJDz?P0(uJ!ZZJlL zi?;Y)ksor4^TgjQT2u-6cd&I1Qf)YO4?H3F$Q^=1)GY#yFOx8fKKJ>Y{WvitseF=u zg|GiS=KqUsD}1lOyvslVh=8lhhw+^nond-VxxQw`c_n=3Q+I$Mh8DHB*yq$qpwM66 zpPs65znHUcWMN}=XyGlN9l3UQ=ha$SkeieTGbSTV5|41Y+PFrC-?igvn^4djFkQ?S zRz*=fSI9jkV)~7}!?Q->5@ls({BX6=k(1O#ACBj!kBe{3Tk?h5QZ3j+G1!IGI%3lr zYXlU0fP};U`m9I*Jli{IpKF~YzIkykn{mm0s3BV_`C4?#wC;7>^#%i|#9>mck1hk* zy%G)^HfyDxxstef-Gk1mhyTik&ItYAiC!IzU)flF^SEXuya^Ho>87!9XCJ(=hk0{p zok4%94SFNW{cdKr{hPmRL5osY3VSif75sgbgV7g(tL@MsH z-=p0?7FQtZ3tF_J5Br2z${@dx>gG3GAR%-SM8x>6g0kCp{xiY+*P}X!wGysFULY;* zR`$Hq=!%N6gT=oezNJ|*L_sLTk1%ld7~zs<&2~$T5Vs`dQcFf#pq%?DT7TK@L+ZjU z#U5eqnoiaGCFr2vMs6t%RlCoK{+rY}!&&{vu}XRy@|oJ)w_I5jW$I3th6k$BGrrWY zP8k*~G-E+ga9$W}%Vk_Q+hx3hbTS_0u)W@0@h$b1pYzBtYxzp&G}7D{mwL6-C;Z?z!Gl5{r(2ZkOn0E{ZvuJ-ZvNp1kZVk#a4UvEOH_L7b zySR@k8X13YeY6{0ZZ&UJ-tpv}B9&vEy9c%}xGVr@y=}q?co^-_w{X|b?H6DuNS*o* zRdQ3#Hk!*~2ZUJN*16p`c{yIK%KWX_8E{3^`UTeBru_Xse~10RX9ms@?`jkwI=}c# z8VO!*)Y*lyma@e6sdj$fQ?qI6($0@D00{lJ^TFpJ`DUr!|6P5!?u|5Ujq3>M*XiPN zQAyk(-F3uA%Oz#03X*hv(^an=w{i2M4DkY}>&qtE!p*{~O5xPvfzm5o%&xqV_quUx+U*F)yDr@n7+kSD&5!RuI z?EmpCG&h&6!rd{P{w41XOQqCYR(UIldYyV8MDbw)yQf>=Y4S+` z@V0>kv3~@PbO_%!PNP)&gFZ;K0-f$@y2#SIK~A5Rp$B$ban)VZ9OK>f1Z?JYskZEOPm=zh@zc{DUJ*V5-}Q7g{}xNVR{s9 zpfryVY;MTE`F)lCd7>ZxD;j}5F;5Y3hmW*`FVi%%ty1%mPls{2t*11!Yu##-9ZxaV z$o!UR7h7{J*JaWZw-QgIs9D)rgC>i$@{aJa^Nx5$OLp%Ow3u91Czr0X>OzUxyYqtI z#KvpqV2+YnOr7dSab|)ZZE75hq;G3`pehFVT!may0|A^57P*1KhFb0S^78?rh~{(3 z^{1-OYXvHEB>4V$Tz7II<6|-J^A&#gM5RH$^*}$^imJRWQv%%itCW9+t1ZU9y6vfZaMov8G_d* zMJ}7{J32bPfd`s#8Ii(7W;|QGF7_Es8ItN|*tjO+J;{)~d9kcO5dmB%3a4Uj|4-om z7o<=zB723{r6uz*szBikeA%mnp^SJsyvLg)o1ESanEh@y!#N8%Gw0;3VRKG2_f|{p z-`tMdEXd4MmJPafC?BqJ2N}_FWo;dvRmaP{6=yfgNsikP!B6d(jBEELIb{o1?QU5| z!S07Hu9>A1PvgZPgsIS_EPm5L94G=uoKw1n0aD6;f7En8bUFnv8PFoi>yXH^>-$@p zm`$)-zv}x|%09bjC0=n@FN)@`U7S~Nm{;xbcRe*`8jkMIxdr5B=$IY<8f?VI%F!De zua~;U!39s#IlaErcI*0e$Aa(RVvl9Uah)^=dO%U}IBv*b(Z+b!b?SN^Mdsvp)lZ5` zNd@Vg#-!B`Pas?j*{oVy!_BF4e=81bj?MPZEuMYmYf1?oX z1ul-m4%^RC=l9L1`uE-rUgtD03875yth8BWRVA-x^A1IZ=9ak{t~BjWD5x-6>i+=qej)71%=@K9qII)3)BTMX!8Ul|%4Opx9G*{sHg zs9Q-p?l47Mq0=bc$YWfjW&99to;-a7mB)_L}c z+H0vO+gF0k_n$o>6Ok>-MlZ zFLD)PAyJ8@pk0cmOJQ%=Wr2l~6%#ZO7BZ8Jw)h9f`~`vdGHngN75XO&JwRBf)XP`| zyQLE=`cm7`vUfr+2s2)#MWC-rJBfcemk+WvCFd)k*)6F#f9ccv6|(83L=5@@U?Y0# z7(YVwTfoO}VX*%5C;t_||Lsfb4E|`Kx5h=xbd?sYM;j}hQJcPx!v5jIxn^7G~cuvhEI;q z$H%QkJo_M(in|U&Q%ghyGyiL=|1yZ^Jk`MKhx*pa7;)zv5uS!bd~~Z8E1aH&*a`B{ zE8RM6I;QRIy3gu{5aDe@;=*6SK2K(7hj;;qkHs8m2tUupWFucqy(U17Op;V1J-e!K zY@u^->JuleD+m07U^7fntF3pi`TgvKj{^*5`m(9ZbQK5m7@+S?I6r7aM}n7ZJiYeM z>O>*h_wb!KHE#a1q5cKxD8R*$yiuM6Lt{ln==*G~ci)}+Tm%C~J1xUN@ zvt{W<2pr=CVybVj!0MZoB6?Vz7vwj^ zRCBunIfJb+hJwkDpVVf~za0K_jbz&*SM+0*hOP#%mvN5BN-AB|Pq)_}p+UVr+WmHx zy;T4wN<}|*;UC(ks3wu$(hTVD>&1+e&NHY8Ywunor0Y{hL4yjt|Iv9ON+k!(SBczt z?;j8Q$F{!`qcXJi+iQi-BMpdsbaA?<*&=ZoL(LCU`wZr<gMGwc+(AP%7jzlG}*py}!MW8pz@F(aeIme~Z2U zUKSwskilD@cU|E;UG0ZOeV7eV&@o)}ihZ1(Ho_9({6n_D3SJju%d1@LzrSxV7?PT8 zyA_RJ_j;L)*|q9EYXo7Y%H$0!aj?-Z#*b&eEOxgTt0%pH?3aLau=Gp=M)5er)x^@q(!>R zZqv|%RQa%s`QG|2xk(VVWIE-SaI)XtcoA_p%rF@~`V;iw_-CU*$2n}H=XLj^Wp;-< z)n)BveBCW=Qbw$;FtRs5MXy|TW*!958cCtw|5mpQhEV+YW&d;U{QPtNVhlLqC^i;x z819ix^~Yp`2WX!?ov+_#?D-_@&E{p(#V_{3%dpd#b#?&%Aap;RdCBavN+#-*2qXXQ z{!YFJC$yhd3PSfK0C$7Ms>!>m$|hEU6w|)ho4x3?x={~!fqYY1%}4>)t))Tq92&J5 z#iU350Tdg-i4mpoDmaODvY0(8EB1mW#19w1)dgmL(aQgrW z#9bYvQ^NKBI@6b7^LZo4Zd<2v;wYy+pJiK1JJfd6ta3fHvLi+3eNp!in+b{q9OJyh z-I(YPX8z@1c#qOCqMHfn8K0NS=s&*oVv@~apdiR_#o%=bAv>4xtnRaup|~xKT>gg7 z<_=z5YoQ*SjQldO&HH6Mu@UmQA<2aM-A5noXd7`slc$C8zc#{O$avCV-y3AJ zE!_ZZSv%eLd)Q6Bh0Jn>QhAAE*=*kp@)#34nWt(?TzoR1IWa?m4Y-;AXGCw4T^|9< zZz11rM+)M{C^ujnN4F5G43`>m-8Nm*npqDw9bWZyKxtebo0E9WvcnlJtk-X~jegpG z@_|Yrit;vB;)Hh*V!g_Fh#ncV9ei(abVv#U)yG3U_} znpnqgojHsdD|S{nX|)nZ^F#}nOq;h2BV7xi5g)|DS(o}u`&(x~6heFy<07en{m(x6 z7v{fyOf`?>{be&rWM2G(3ky#Zf$DTQwOZQ$k;|Y8lXNz zKY{#C-!3l<<-b!5((E8W;1lGnkrqgbXwDGkO^Of_1Y{289TJ>_;+D{x`cwAgJ;MV8 zx1!dQXuQ>fxkqSccq?4|Ro2=^{0vQ2l-1N05(pVk~w*GGs$+Sa1 z7R#S-{}lNx)c`DXo1l6u_m-yFo1@vz5Z5H*-8Rx0>fz%^b(*X55*-G%UUKv5NmQ_{ z@1m^kf;-tn5-^r5 znAzrk;H8pYy6Kz%&IWug*6DrYWF%r`{%1hbZ~o$Q7Rpd+^@5X(LBqbM<>9JAMRmbo z!RVWFz9EmK2E_u4@w&3bj;uVYmHLCKfVV=N5Db5xiS8Khl96|zyjRr50FbBueC%FyE7$CPsYOu0x_}B8;*w%y8_t3 z!Z?9{w2}t?C;(OFHT4kX!xwf_cxc9o2H?(+5t7A=ni?Lnvaz&=FQ?4b^vP86#^;+Y7L_tM&)= z`mZepzy*AMpH~ z@g?He)G_Ch;HJ0dUH2{AoF2X4d9a|RoKGxt2h1UT_%H4nptB4e2-bqlUUUEIOa5(} zP(8Ve{FY$=dnxzTIit=4wY;SeD5UX%RELQdlb3lB{ z=)`?g@f^7s+vgYg2AnQtb~@ZsIK#ZWJTwnwE6! z6<)xBHxrqFMX5hw7|}}Qn^B6^Im$MZ8hy`4T}@DfaM`yBME4^`Ll5`;(G?7-|>8X z$Auhvifd6;FFpYQs%FVWG;P;aE6#D6*XH$cb0yh3xR!?0F*y-+oR%fyyI?4r`l6#=bXrlVlo15z0CL~5psf7t9n@%64_2bt+ zNw%N$M?8#BvD8*2>=-&*j*_RjhxCgd2M=imBHN-! zev4V!fzzbDSNSCNyOaLyEuu)^7Cm*hr8iJl5`EUS%jejKR;(TslBspB*0ueZNZuTu z`^kLXU+msm3j__$PWe@}wVt64+w__`sY}I@HJ-<|N?jA>M&A;B8_yDx&wDXww`RZ6 zac%cC&v>>6{?BHvU(bL>56pO5VHG_dPhj`EAN942kFy@-B}s*t#1wcgJ1m)>;}7cf z`bP({=CPyJr%(OD;FU{GJOJL?M~oF)Z*LS1L@nYG>*-Mkpkk@92Sthkq>B;DyZq|<^se?hhB62_P+Cb(EL`^g2Se3XM&m0Wg2hS zOc1Zr`472gZS6cWP>io?6-q|Ft*GE^+6B$Rkuwg3v~R|P|61B>6JZlM`vh|`y?oiy z6V5wZ1lPIaxSGs9Uw5HhuL>OA(@5V#9G!=-nO|R4POg{0lzBjjvu$^qB8R)gjb=g-f#@E4=Tp&oEG55X|ub=NbCYe(eFsj#6@C?62shWbU>QtLkZIK)1@ zzHlU{pj+@4akHw$*h!`20L4}nT5tioVl?4K;a-{H3TI=HPDn_|yM{JOz&Q>99l3VR zh&f>$!5XQxcP4z~@u$P=id{3Qy7{qiCC>WchQ(fcXM~gHwa@wXGs`(YR<*cu?*4?;oN2~f zaM#tY#2LyS;NoY!Ije7AQ_vL`TkGCxIL+N!!O%ZRF4@BJZ%$>!Fd9gIRB`?ay#m^X zE#Zxpkr$ETIwyllI^SL9^(7=M_X#D=Q(r*Y({^IrxhFbzv1Zv}MpncN2i=cSJlHa~ z$oWSaHQP5w3&ojVw%Nn7C0$+hH|tf`Tqh3*hK7dVX|V6)xI2X)W`T`z^)&xs&;7!a zWq;8(qVqZQeQlXHox5$GI6BRuRGivuk2Z;`lg4k9>`fv_4UpzGo5pR)oJ*XP;2!sf z(BkPK0eUdna=Lmc@%iQ`JW0s{u5TdTJy%np5^~kNg%$ zgMAMA&{_Tz^4p=^{vfK4dmIXdkHoWEL|wr(t3{Gy(~SKu8|(VzB;4KCo8w3`SMU}2 z`R-kP;hGZYi;XSo{);SZO z8iPyAEUzu3;|fV-^Sr9e#5hGAx3;((Fts zPfYARn9NEcB)V^Ex{>SMu^`Rr>%=sS~WBukz^)f>RB-#rF@^{}Yz}!lih>34bLtXO54j5+fk7 zsyss;dPXYdEuO88!v(M`C(XJDhW5wDW zT#-WTY~Ib(-&*!w+U9U-R&wIk>e>#5F#5Z|LcrXo2@PD&w3Vjik7SmNBfHQHC&;7YNQZ&hu*RpsR}!rmWMV13iJ z$Onqt=J#xD_B5C3UszjniBImzVKr}dQ+6{k`ZA63@3<$}8--{xzFHeb#hEY!vGu&6 zk`U=16)8WEH_8*K!&7j#ZL5xJVjs=;(ExY5NkB&PgYwS< zZkzj8ccYun_ud=|wFweyTiFt=)Q(bej@FsCHpZvL;2!f%x_-G#TGOYyI_b1DEwsARm*80MwRT{e z6Nh)YO|;(9ybf8seA4sRk~Y&tC%9aRr4H77-fLHL&cC+J1@1&)hgPXAUS;IuC_h{F zI{(t+xCSn&^qN))x_(Ur#0Ne!C%+l>-+zqazBcY@I_KJ7vD?-9PFdhq@L%iKG9IRQ z6fkra9#$XLUGv6Pkpkitj!g*GnIVOhCWR@Hy0If)wZu{IqZhyBnt3Z z=O~{|c2At{aW>sDaqAY0u-W3OXO}IM#yHV3T@D06LmIAh$ZsBSfMB4T`~N!p1AX$O z3;FD&XbbNNqh`9kjt=XWFLSnb`u89bY?;{L(q|HGWj&vL&G3?pj7JfPrzoK7YOwt7 zQgqOz)bW&M1^X#c<~F4L}H*Ct)lnn0OH|Dtxrb^ba)1_s3$-OID}w)*9x z@%bp*A1*CYM>0y%l6)`aG#gw}E}&CsUAqlR(m7#{b98CKGm9Ak?Bc;I zkpjDi4ogSlo9mVRO;qvv`?@|O*V6O&v)heW!&8pCg*)CQTnqV z;*sWwX+ejTR6&^68|M#`a@Ps{8^D>7{os z=cMywR#K=a} z)RuDh!Btf=FPeGDtBlhw=5qXCCRKeioQ);N-z(h+ z_j%@o-d|3w2L)gN(!Rj!sZVVVpDdp41KJVya~|HQr@0?EUtg`sE|`Wd;(@ylf36#! zY`p{e=D=&mR}Zldzq}7+YNZ2EM)Hde2MgCWqhwQT-Jp+)ER5z;#~hbi`r+Tg%fE0) zn>==*%l2P-I_18HI@(pV0lx*brdL?8|c6mIs79#Gu3r=EH%jmHu78THrt93y$0<}j7Z(MOvIkyJct&LNPI}DR7 zzAv?A>{C^GSXYuw5NdD<0VvvZ+^B#}q_z7I;Ale+?o>S~w>q0ifanlC+*KnTTWf#l zJEw5iZkOHrAQ4_G8Gq@{Slh%x+{0?6Wy;gHOJ?QM_PT1qYVGrH(x&avA#aYwB(34`s)MXL8GkYEl`);mioMB>a))m!{>Rl%zrXGtvxB2oRsuq zq%+T48^`M5l;!>~Bs5g|WV^G}4PaygU0{@ezP6&G9^Zr~?ezij=FZg>d+_XS$ynlN;R)BbLGc_;gcKoBnEp!4gpMziEpbO#OR}yT zsw-^91L|}!2YXX}W0OT{5dSL!;E(L4jsa zY+b!KN3ccqTwO4f$guv*sB0~Bn?_R-@FR0`FVvEoh0dq|0M}~>DAf*Y`&5hhDa(bk z`TXZcwMUJuxgy5y-Erm!)*|nfE3MZ~CPrr)7v0L4){}=_fVI+A+7XD4-7)yFSEFDU zZv9-|$aBqIlB|i18bMitsd7`d5 z?=Dy}y{(f_FFx*dS~B|LxyKHk!(ck*DjT|<J77~+oX(HzqdM5~ErhMBnJavH`0850<>jvNJ58DG zw(>n%3}nhkZ8Q(j$#B2+!;gl;6A%QP2ChR-&U3 z2{m=@*uzG_#f3$c^*Fg{0VwLS%5}*5XD^DLuIxC?X;}%%L_!~ zO%0WP!@pQ(R$^nj4gl{_PT6m_h+05qX|Tv}SNVP9r#4O%Twu0jpv5F8H5wprqL-j- zaZVe?#9Dbhv|KLI^FDT$XT@#x3kOyx_)6@Rwm$dBPc4$qtl0#JN#DNfhf4-uvUs)5 z0p}~c=i}o)Vz23O37fDD4m`*6a1*U3DwDd+9~0;W{o~Ad2MUUd<4N)eb0y2}j*)-x z%5r?YWAI113HjD~j_IlPkcx zcrOd^@a^n@#$cW|rrNQG?w3Jjd860VDhoikU;b36APin9K;M16NatnA9haJTivsFl)72V(8UPuWHZLm~{be6tO1)z^DRD z3#r$Y_%B8&6@+qh$h67@^pX12A_1&rmA_K(@l6p&RV!Q6PTpq{QL>|R%o4qHkFw&K z0?40CD1$V$f1s~9-=~DUf>h4>o>MiaA0C*b zRQ&30ked2d0#8nkjwIxAdva9wuDPIT+ur9PMd}6GG|==y*A;VH7M((d!F#H$o?02m zzJ0?ehEph58XcueW}6;}>*+aDYVd3Re#XHxX75X|MP0kF&j`3KC`z(} z7Yb5kOWGGN)2vO$obo41Y=iKrmGp%6GT1h|6k^H9$mG@3^x_XnxB4?Ib1D(|vR zWlrI#I1Q4IaWK!BBFKB#L~)R())P+7Y-<>_V{?^eT1xx`B_$1KDs+vcU{~rtn8p~b zF>w`ka+b~+P_4Pwb+qOTpNGBEnwb;o2`4nJ-ZNe*&>5VoEnCrKWi{tkBIuo@s+*Oi z8u*se@c<5KuUQCE35o~0)bfGCAqoFgUj|@!Pu_qN=4{PcUg^Jik|O#_iLwX|XSQGo zx?<8GpL$%Y4$>8AwZ}thRo}-4DoEvij0k{O)>c&V{hv+~%~ZQg*N?+X&d-$Pa;+Y7 z$s-~Jw(#Lql~FL1<=UaVy_;Zm-~xi%LEb^``_vcS=|L?e&sFh?iB*+_Oq-}@+Lf>{ zSj7AzfWa<&9gaf_oW>hc&Bm6gcxkh~w`ujMwjNA@@jrN&`d@6N+nk7>^*y@2JGwou z7r=GydHp8LAVGM_lGwFH6qto;GA4{ApH32<6PC*H4(ajvm+dXrv&uRO{4d8hFFE!` z1cj!qV9~det&{_;vqHpflN{C+>*Cu2wh5h%bX^RmURt;*f_TnOB!`1%R=XulcQ91~ zk87u;vf(L0u-2X*y7Q695YqKbC6j)+9n#=f{&Yb6uqs)-MOfZS-eZ&`drCA97jskFDFyPEhBfJ%GhuVqxo@g5cmyyTs0Sz1f1hKK8Hr z&O!H{1zNSZbF|!Fa9Lc%!_#M&m$6O(9ga_D{88iRSuDxlb@E6tZW5M{Ql!(7d)(9B z#UDeuQh2qdyW;~B3(szftIyUeDdH5zag4)^WNjFDrG-D6ayGA^Vl}Nk17ia?>CKUW z;e_Ds_F*VnKCv8N=TaIfI=M1@-00Jos)gw9h7tDc$zThu6$s0j;863i@Y$i18Ij9T zRh>s8^>xTjk8r(Wf8LY>qLHnIbBsC59SG&L5~2~u?#{`2wTMR`285=NgaLPlM|p#w zDXZ6qAe{k?3Of{dDW?zn2ynx5@*X{tDErdP04xO5vCTl}=b`};E%b>?HttBXiJ$EP=Rav`a zNneccE*xSB@b$-3E78h$@^glXySYo>a()#PW$x+ZWS@ z?-}H;*I3vmx)IQq#s~=s$pSYO;jQ~GP9(Gl4-Z^!FoKRIIgA>r2;2Xz%G$uAWqQ11dE{jV5rpPc};(SU@0M0m56kR(>`#Y zCFZ|dh5HsPnIrn6Dun(^EpNBX1s9#(KJ$46e}2i$SHUW|aW-4d5v%n2+OYQ(RU zLghR;g7ZMu#bS>uy^o{pn_-yxiwsQ5)7@vBhnbg4kMFjdmbt&5%dlBp-JTA=dwdYx z9XFM=U1rl>o))@1SnQCcg7LNYdPsk;BVTmxwa7A>JsIALk}MzTxm7IDztb z#bq&{ekBpNEUf+orI1Mik$r#o8SE?PRrR0e5+-jOpj~}K6J3y}81Nx=?Oy{}s4&(&W z&(GB~l!2e**j7k9?iTR{`0O%Ue>64S@uYKE_JR%=_Me{EtGt(yOm#s>)V1b0Y_I)t z*J48S{uoczpI4yGcz9`|qDp7z+i-5&o}=B}vVhrxqLX0FOJByh+^%km_n~k0mRj)e zJ{P?$23DfVni2Un$kv9Pn*7KJ`tgH>xOHVUUphs?fHZk{!%MUG8?9eZ%XbzEv+Xpy zNk^uWlgO*eL!6~#qH)wvZJEEB$;=KWS2F|qT@(}O`**hK=O%=)b86?z*yz;(=$8Mf z+3dO2#u+#B9m~$tkX*uWw6JC$ieO9R2E&)8*ltUM5pQ=^uW4K5^}Re~;2VZVy?gi$ zUuy}zQtwa)lBMg2lV4n$$)?3`JGUUcPz*I3UF$B@SVhs-Jr*16TDXK z#tsN-73R8Us*OL~l(b8v zesVF&DyIg9N(^;JAzqHg4LlZ+^-}H@$EGWYi1_K(A10zaES&bR_cV;tI5?o`o~Fq1 zJVaDoM?-XoLR{EZe*Z2d{%O$D!|wa1udJh|*PcA_mQBYlEfW_ztogK~`6OeldZ=5c zxkvfqr}>TQ;pcng#CIakH?l3}S?8ix8g&+Smt{Zl9viF~L19UMiFmLY5SABT>j^Cc zS}jE#Mv5Abozj0Hy}nvL9e$x86a0d;?Vw>}4sT1Fun}ZJgw`2`&oSZ(zeL`eC+1H# z!n=y>KVJOkBrLIc3k=7DU9UohPef*Way{HPeFz-aIq2Ul@b~eoT0=L6J%`^wQNV0H z>6g0a641zN-(vQVybIa`{HB_xVyv9&*4*~Ni+}vkx_w|s?DA8r4DkuIs<2Ux@o$$i z?_;ae&v9glfI{m%Zr3FOzhUfFdcTnE!MM*P&xPwI{^$q#G8UcOF!aCIo4ky=LY^Wc zEpWGpr^2k874<=i{`Mp75>rF^IID&CKvAQr-PWc`;Uk;O?$q-!``XmS1j=oH;S9ow zLlrdYi}4@(^9t<)Ha1Bt<~=+hOAVD+DKX8)W~vl2k5!Ap6YQp#h6YW%TC;9KM$89~ zZq@yn%5fI9H(<9xOib*>MtV&HK@!qzuU;B;Dq1oQ;vm)O|N<9`9D~fyBdoks4vpGytT6f5Gs}+W{A2p8$ua-FU)Or#7B!e=MSg4ZySW z!B}Zf|4kczeS{eZIf^x53W3J*cB?w80tUbgVuCiz7h?gD*(H{5!bm$d0zn@4!a}GQ zrS-D;^`JD0n;j_6q?_BrL0inALmfg7j+LBD7ncPs5@5Qj*Ml%ReNJ(nrltDfqpJaV z%h6^0hle%|CooOh^H|ol*{{5x89yHNcbre-m1SG&52Nc-bgJnOHM;GPNiFmC??vsI zm$yao+#Qkh8xsiW_1T8weWc;OpOBib?M;`_d2tZGKPLsEq=C)1IRURznpUeju zZoL{rctLyj>AP&=$E4}~8~XuYt4A`FP@t<{u5YT(Gnh~R{Urt|wd!`DGO;Z|%kYr| z<+*e`8dm*$7ua!c#m>jVMEawMjBc;^`d0ShTJ&;o^hl-2obh>zb!3p%{it&UY~v>5iUjy` z)pAMSB=)`VgAvv(VDsYRh5Pav3=HMj&zBfJfDl#aC1CpFZ_nWc-kluMrGmV1Gb9mB zlhLqS%Ck2Yr@05F;*H@LhdO9}dH=b^dX1dJ{z^>!00<-`W@q2CKJr}fXGKNH-`ob% zj|bED%L=nmY;LZPQq#Bb0o|Hor+REzKP-rK`laj2ga_lBY6AjYyj+kiZ@utiy_9pm z9r;GjO+QuXbS$6b(ygTTJrv=B)R$hxjc(un^lj7Qvv1MhAytCN+v1Lk*KDDJP_7-H z&abvN?a%V%HeoKwuw*kO=@W?uGoc%wJ?xgZie#5!jVZrN>>? zaAJ1zW1LL69$Qqefa1h_t%PYf0~o68Rh4iL%wHK>@NAVXZ{v`Z)s9?C+KpS;hsVWnS>SM9|s(GX=_Z5aZkhQ$HqsxAk47) z`$?M|RNq52$?S67L|K?qKZuJ4U|b(ls8pUa6b0w%Tx!ruH`MN{4P0>&0$edVZk4yb znZjLSOkHB-QMOmFz29m}!t&}Uc#bAHJs5u9twe}N5-FAR{&4})rgFqC7)17Jh2UuT zrMtj|wj;x$gyf6Wov6gS^b_In71P*H!1_-R;2hb-A_&5!l&8n zfJ$aQ{UDSrl1|aHu*_!p_9z3QFi8^v#3a`S;yxzuxa=zeC85JX+u*&fJ;!K^8vu^yo=fTbC7C~?91>NW=o$F07eDa3 zJ>CsLPJ#XF-mf=_BEtTXi+LeXJt{?ePlQ4U9W1)zlK3N4wf^qNvZq5LbE;>V?-{8DhZQAsgxU>4~jBWYVRV3^z zpaMJA!KgS>9uB8aq>HQE)nB7X7U-esM!2)j0}-6yO+H=|Q!)L@#Br8;;~_8amEEeq;FbY_&ol z`~|@)c=&TEIc&N&REUy4oN&~dJR^Cmwt3M1UVtcI0k)RmrW-}2Lf3TWgqIy;op4c6 z{1UWJOd$G6P8wc`&WJgPHHx%S_8ZJa`F4t-#W4s)d1q>o8cIO;n&x15cB5=b9x?nf z<-i3D2Ou{e55EeYe_8l{z3)YY4rH$Tdwf7IZ`k+eK76EJ5A~q3EXjPC?5e7&n@Zh1 zy*6^7N1uoLO{MdnzTv0WI1+6aOc}-_lkC{F8r@F9hmck%>_=b-z*gCoJ3zHrUZJ0N z`-&Iqx6Z)dN0$2;D(YM5J4r@H#BYV4glS>pUQt&$(FnE_@5PC_$n2F@!DtZpHqWP2 z2@+H$L9vF{NV@5#jDN@f|p#x(VL=N&_ixQFQw?&8&l;n$L!)awZW$gqzX{x@Sp zLD z=8`iBDAULS!+58swB_X`e0_IKx2x6_fj(Oft{vX|?V-;gZ!8U#p?|K#zgG9RI~Ay( z_&|Q7)?wJbBPCotNP+W7=9}2cdvZIdHmZT)9~6rE4Y=1MEzs28{-|iQ@O3d~S0H#F ztU3{+!$=#L7tmirnyCI>@J+a8?y@`|ZUDQ*(&wPl>zX_q={(g418i77vigWIO=$UA z^B2egQo2rgqA)k+-~a+P1?G1@4jBym+OHghs)&DzOZZ$+1C%p7g}$0_lq{E=&3%X| zrY)WodR*d)mMHQJuYwr(d-c2}0NbCDhEwwUa{pHQ`1`NGMTorLrk76%PUBS!=5*TV z<@68e??n)cy(yW?o#@`L;w7AoQv@vFhiGwKeI3<0xXw(n{=}0$F&3IQT?xiSksu>> zp_dwQ#HJ=PmlXR*_0}{tcDMp|?$6bdY|CP@kk62o$Xw#wy-;_gOKwRdZ~r z^d&{}8|#Zor+_+>Qd%FxZ*qVEhF+XOSmRc}{An|LF_WQ`^0gUmfZ0hkOBM)^Uzj%8 zo*Q~8@%?}Pm7yTtGSvyneo*df6Gf1di+{^BF51@@mTv1fG`dypyM448sM z`so6#Yw6bMEW-z{3o3F31f74p%@mt8o*L%NlaNuszYNZdF~F~&@fU(tX&6DPL?~Tc zV~k^79^*4R#5P^t3YEmSLff%S>NJpu4)BW9Q6(;5V`g8F>NQih=_(0;t&5{WIurp) zc{)CLziUFmlO}99e=YjgulwzXkNE(a;NIHII*628#@;L6TjDWMW3BA+VWyX=Ug=Iu zol0f&uvz(C_Yyu2RV3VBhBSii>EYs;eC_|ILx6*Q4cNn-s7#RbD_>G+d=g=Q8)%iN zi&f*Kx20p5p+1tjx@puD(y_LkqAWykQ(%HiH`K|4&vAKwgAx!FOQ}@)ZM>@{Ie+PMflrF{uXHP157 zqC-RJB54WqCO#vTgZ<5=MF4$Gw(_5Gg*Gb(yndDy7HYWSa@-sdHv4TM>j5NOe zG}?SY;O(z_V;SFIAZR z^~hcT+=!2t=jG`0-@fAih;4@!3@CLE5yg5hopC{1lWvR-ki>w0fYl0>bj7Oge86PF zA2W#OvPlqgm>qKuICG|uqem!h7NMaQ(ED65N(C@lU6OIdWlVJ>;1Y*ME2h~^ zcE93_6g{e)N`&y_nZ8WTYcLRzx%hsBAc5Y^z(5Y5ob@ z0i4imO{d!irv4p-UIDR8tEW-HA3e-JH@)utKFM0Q4w1bV&~k4*bC-Tb86QV?K$%tM##_6n)!w;a;ex>OWqm|?SFGH>`(5cJW2W24U)7Qag;3V=u5 z|M=KL^Gm&czc_yq+4<=gJ(a)jngIey4~+qR(CzpRKeT}K?QuNY`$cWP?N9+gIc`@LPDqFx^`2DB*?^LAIq zz@N4=li3QQI18lGl0p+cbH?gF9~Fb13za2-E&rAuLZ1;JRei>`_}#RlJv~m>M`4ve z{X(yM0OE7A?Vg6rd&hulGaw$8{F;(77wGS>jxCvY`khJS9S}^`P)bUE+v<+j8r>th zXR+K%FH|Z9w-8TewaR2$O2Erm*QEs(1C|sBSHV}ZSpJt{<}iUlN0x*3h0ykI_Ep+W z(1m)lOGRIcn?yH&k1LXoZ}PY+a^wuqIsa%xQ8(Koc2}32e11h;V{cE*_G6(gDnd{q z0*dZAlA%2LZsrJijGlN6LT+817qA+tRfD?bIyP4lFYJNkAdVptOoIWxhtw5O|Lw`W zx}H?*jm9YEpHxie5kPBsxTJ6HmNzHSVe?K|qqDHEOaNdceEojAht1R6nAFr<=|!H-LB7w7= z=gOW9!~(jXD{2d|zeQQDup&efA&|WI8byUGmJJiD!E4oDkI;hG*MHKdxQ)xOt~#xY z`iaN}}h zyEcvd^KRq1L7AU!L3JMh3hJB6;rzv2bGXv>Iwbaza1AZZV$Bo5g8(H|bgp?<$n_qS zE!PYInBN|d$mz+dFR_0O`rU5)x*h{C#5dcvWhu%oV}U-VI}?(^TgyI37;Ssyg@u`| zqJ-3Xg^UlU*YX2HLt}ZMYGdSc_MHSp+HQL-!10d)A~{ccGBOVs`aZwQ=RdEP(}B*H zyKO$D9mFlQ-IrFPFSng)PGHDTJ;7C0M(0R!Djd7b{F$4-9UN)gw%(Y3OgD3Yxguvi zo@H}2rh*zXS{fQJtt++fTqz9=eY=i4p5Nf$NEbFGEhh2~0X53Dr?NjZg5pJY{6qw| z#WIltgm*`Wfc7rUYZLLoB$jO81gPnNCJp>v$l6Ym>nW&s1Eedw z+Ri_LS1x^n3f*fybheF7!9i!Cu|U}#oe?W!g7<3g>sRAk!6qO&2!{=gpk2%t(=Lur z?jzBsvShIwOJHP5RuC~FH#A_*_Tx$Cp?3^+SL|)YQc~GBYQrnfDk_qgYc?)7RuCsY zu-(s8EA)92A3QHMQVMl&T@rRxi}KCypX zKge`oZ+vAJC3J82G*@e0OuMyseJE#PK^ywg8n+qGb4%u~yPK@WZq}yhI&NMQYhN^j zSGVJB)7dIzl2d9h=v<#Zx&EkLz-2pj_UvN*)Q+v?e0X|00|FUkZT_%9G6*pE!A322 z-T_!I%JL(P)1-lN=5G0LuI(_sv~&{lsLge29Q|X6<(F$#xnewxJ&)+RgRyAa^s(Q*Hpu z_o;dh4p1TQ`BI>0z<*QCpC;#*GI|Ssx(}m}6J6z?FzYVd!XqJjisGqQU!*bd7t5Ix zN9e7rwh5T)P)7To^f6|-n@Fl)YzK4bzNHOKssMGfnaAbc%QT8dj~uS=2gCS1S&_LG zSGHRPe%G19Z-f3csGE@$y#x&Lu=8?i<*ImQXc7)I)^sFI4dmA$z>FZg}) zVUy1gm;Psc!bSGA718Y{_w47{vciGOcEQChM6Kc>?%BBY*mbqkoIlc_3FoXw_SJabO217Y5OhwQl?BQ2VDB(%wX5Geou-laF`J^V%q6HdVjgN zJ`heZWX#6L077XO<7}sW{5MEXXjF9G!34luTfFtdc~8A|5sP?&|2ZDUB&r$NZkUkG&i+s{Ek4pi`G z&MQBU4W`xxryu$K3FZ{eY?(Z6obm5XC)m{*JlnFjeK*rDFgADH=@LGoy5A4h&y9#@ zJnp2ZYz2@YO^rgXPPn=PBEn)O%d>8@=wwe+Lb74l*M4J#JR^~ zy$XH%4Yp7EYSW-|CPw&doH3JI)0`2p){G5}6_l0X%ZqA)l@#}~f=+B!v)nzfqpXc^ zAg0}Y@Xf|B} z!D2R2ptV=(piOHr+Yb!xIdm;Rc9!kmCUpG{2ajiF1 zkm9qPj!0hJsGuA*kmwJCAepV`2xRrwhk(v+6UhCLOX{EN)U@{$FhDBvdiU1zB;M5Q zY4ftKRRvo)lx3{XV>Jq`{Bqj`vVg40WsT8Ye?Q^-C1^3$r}R^L!JVf#!o9;cdaJm+ zZ4?fPbMKwYTJ3Ds%$E-)c?CrLaY( zHEm-PPR`jj#!?*@B|RIDz?(L9sD0BxsyZ8MvZngGt#m1GeOvENsA(OxUU6>^vOT=o zp`xZPe0&43U9-};1@PowJp7G$6J&Ut;?>S4fF>kemE}Es$^FnZUUL;4PWtunA9S9n zvs<_=hUWGnCw|j=>e|j5=w7QtNN+W79$@y+p;@s5gm}#KB3_ zO5N2g0S@0C_Nfrz&pX>LSv~Ien?O)aQQEImEYYYcVrO64DE)|3gQ%rpO}5ed5sQO! zk%zK{XSb6(31}}z?LE%9jn$O&z4>W#P2HYrF`oWUkLTqg0_dxYgFq$z&s)DoYhF2M zfTb;L;HF@LpS|3h6?6|{OoJSTZ+kcaP1KkwjIQ;ydgipaUIx8ky8{^Cmj}YgOPc$3^0kL%U9 zfn+xz_j}qs)#7Elpq^Xzdi+>SKUU!JKY+BDs}Ufyn3SKa;_`a0hAr56QnJZU$>J@RzRucjB0+0oQ~2KK zG@x|Xw&MVZI+c_qT#L+Oy0%{xI;(!PoK9`dU_?U<&Xs_O9}76>lO{G!AU}@%P-M%J ziYJh92v_0(DPm6`il6LQMwlE}5gZ!ZHm=@=CyN#s5ytRyU-2b9NkLlnWgOz4Tm=fy z>|qOfmDwaXfYd;{|MT(SjKcgmNfaMQ{73n88UT=R0gk2wzL(vmY7K(B6Fl~~GZ zdXC69Vn1#@K+J@K#mNB(9+vcT(@T%b$=yDWCoF7)4978KDdFQT5DjJnv)|Q1=o_6F zH66CQ^}ZNv+cc%Xo~d{?%U=~07jGAMKy)SGDf_vH^Te5%ne|C#46~StL&c zBR`QlTs8`O3pJbT>JkoSstl=98PAyA1Av-{*Qcj^L5BkJ+aJx$KlaAU09`EVZMv1@ z7!HMNy6GG3kk1|KZydzI3n9ziW!4G=LHKMH)riE&>zk+|q2tm;ZqN>GvLz1p_h*;v zy%3?LDS8bOHZ&wtR8iR!Cn04+4jxLa-9$P^OsTyZI7gyQ<>VlP)9%_PCJ#{NLD&Se z=aw%atT6tfAq|(sBqmJqvSnk=z4q+K9JJeX=C2@^s0B#1(zQ0>i+``o{j!lTFP!L{9c23DMRL;MW6?jcNr=7vXfNTrc~*H<7cI-d z|6|zcO3vjtSEXylTpOCuj;Q5+3XizHq$C9Dr6;kbOaEgfufk_fz;&7cF0|_^bb50{ z*Pnp6XPD;_oSXGj{Kjm3GbS?f)!i4r>62{NOG{?YCEmtDe2s+R=Qno@@Ml1sr67h| zJVSlDOfBTGHa76oAAx)EToB#@`&1lDQ_MY#D~iKmhmW212eSJXfDT5~eKMDRfVuQy z$5e&+xvhVi$lnVzIZuC8xMG>CR8V1oO6Fgw0yP#+G;c!mZSEBgxf$o#a;;h3NiCvL2fV)W00!FR=m_ zFhE;cK(cft0vA9AJf`Ug5}mKJ%I_se^VfdT@8Xno7PJ3lCvcq|Tv~F&z zJBDvPnw(%;7DNTjD@r2zV=R10`Af=Xivv z8uEzsy6kja7!J{!Y-SS)_gZyihOFirGvG3be3J)@it<&_Kv8MH>*)0v-qq3JN~m@( z=f)0|$1wA7Mq{Z>R%72}oqaXChNL@WN-|($A#^$NfX2pQ#)#&>M0rFERKv0GyMAS< z|8~)y3~a(Bw6kiD1yIy$|y*H(DP^rRvD;&{+~qR*B$YvzZ!ejENdXI z+f30Y`f>nYL)vO zN#6Cg9>&ID$QcUz(!PjFN&dV^J{~6}GEzbFz6?w4OeJ>RBdyiW(k;x zWVhYHQ!yF~H0PISdu&ZBDk>_0l0uqwSFn0>vH2h&*~vM59A!aHJjc0^{mIdIyZkNSZ8LY*^xfg zcIoXZ8`MZRg%OVc&?jNSKdd~RPD>zO+qyP@9rn!mXx2C_1FV+-09o`s?2T@Y%JP3t6OMj+A1MZtss!8$>v zm}WGF>@r+u=^C$K48G>{+UPI_Bm5aqs29*k0o4@VxgL?G*0``qOH0?1j{$Y=@ELXB zuzsoiDzw#}XwDT|zE(6%t#4{@U1j z*N@hP=c;Y35gXqVE$s6rvBB?aI5bshU~(|Q9^9){%C#nv?^oC)k8O{VGfLE2l9a1? zQFd=%`D*}TmjQrP8qmMY&%a%ua06~M+ZgLmqIxFz5&X-rTyF*P3+7xwWbV&F!NIeL zR-TvKhPzXxpT#_HFZLCIy!(84^)78s{G6Sgy~b!?OBxAY7R*t#G>Vy1BX@f`E~=hf(!L z45$i|g?VvCbD}*Ui4XtQL-mU-w9)0FDbf`CvR!iP_9$aVh_u2WI;& zT!{v~J+02e5|Xmcx-=hm5O8M#w!nC`>2K;pL)q^Xh+*L@rc_`~eA>9xBM$PStb5p= zG=LYL_~L9^c=w$*RM-1foAj?*8xe{f_$bU-Deo?|E^k{AOvi8pXEjLrv*$hPM0)?H z*jp7L85#J2!EcjjR{(neu4DnWK=k9^ES&$OvVHG2JS?9PoWJtAR9RYRA4m>ohf_Af zU1C*rK7AwlbwH|f9*WwEXT#*(dwV_JwlUr;yqI)tuh{E><2rlg+k}Ydwl*qSYWS{U zVa_T%uH^D!i}^ZNE1_`mcNw6Lm6n1Bc7x~xRc-Mxt!$&%2uwe*8k14)MX@iwtb&>r zsScXL=hqJCs?j*-1M`k1^kv1|EUqzDZx1{L&L@qGjTPWiCzm*==9NU69S`I3?MydU zeg&EMd(X*Vk6yF`}sQ`hSN>@3>Nb#RYB}07}}@MCsJHhZbabF zKcu)eCkWanCeFS#j9T7<%o1yKQ#Noiyz;|+kFZrqj(btcowfG6^7H44BSn0YOU?23 z89Kd4RMd;P$|>zM74rV@%Kt`E?6Ut!qY~~6s?qKcI?d5MpPgXzdDLQVC~>HufQyfN zzU|JbD%`XadZ?na?yrP-n`^C$Aqy4G><@ARyREmS9&bzaxnfCxQ3g`T7J0PzbR_V5 zWL~Fu4*NY5p9-^cM`niwUsm3yc|0o8)RUs^Kskl^G z8IDj~ac!n(NJ9g@;=!!N*n`pgIqmFi@f4Vw=X2$Oe8TBiMk?@M)RweLy>u*ETIu`Y za+iunBvzEea`2lpFhCzYPH&4NVCr9^Oiz9VDr=f51L@J?8GLPIuJlEoM$L6`_a#=M zsJGu8w#*q~vj%;TINntN^);E5&3Qz)Yv*fk%*RF(IXTq*In4D<16B3x>fPKDjJE*C z743;XMm2dYc~U?3Wr54=eMGsm+&9ap%4#PHeI-k&?a?6;g9%r)1NYS0cQpQa2``pdKTTmZlwvW2Q`RtX*Zqp1GwuA!C5XHkf4Mg6l zc6=05`DnkJr>%lGW3L31q1ZK42;6hFbFJwxKK$$j;3X>eIpUaQ<`XdPxzHqk-JC%q zeG2@ZfZJtk);QcjxYF&KQLXMnp?M0l47(xB`R+7`#ds)Xc8{0Ox9m6r8aR-?!Rff+ zBjSbu_%dTabC?3ha;-FYI*qop`wH$e?&_F8qwC1z`23a=HeF3_%Ycq(t zM^Gh5PQ={1?I{g;s)uOrGs3jKhGSz2up>vzL{{}uA_d>E{tr%Vmpvw8@p6!lk7ISg zaura#Y;t0P6c1dINyqw_MOV>w%(h-m#xMZJ#NpIpq+k zivPR`6&FjI(ibVl2ww*v!pI<%Ul0)pR-Am&hs}LX z9WX>|Jcyknyg4V0{&nD!ex>&S6%_zk0f1t7kT-F`y{yb#v$y4ZARV2~wN-|$uR>wq z?zX9gE&a^KR~0Rs*x>GCpC?$oS_>B#5Wm%-pu<ot~)4D?7le;{FL?~VGnGzQ$)0~t}Z(XgKwD3Ub=um~wnCaz{%<-(w!kqV@w>&#^Fr5Fk1 z6s?5A!_+;J{BbjZojz)@#Z@IzUR@mv=2*hRgKpi|DyqY?tm`mIMHzP;AFBI6j}35> zuT=jgkrHXCIPcvm@w94FrV3TacjSfW$A zt?ik8_;Bk^b@kKRzeFb(CnYm@c(45tr2RZX3E!1o4g1q& zmh;|b)^%p`;wfkiqZ--a804CJ69I7UPPp*@`_^+fTnY^p9Qed>=NM7>k+;e5u*aLD z*nRJQ(uGxK|0^#^CogqpxK2ykPLE1gys*8!POjI->tdjqMFXykAkg(x*P?+g!TuZ| z3LLkqBB{QCK@C4xY_5D+p@%|Du-NRV&kkm+^xb0!#lwY7{lh@m!D3To_@Q^~0PHhr zOo_}COQ~?Z*0LCaw-GvCJe~!)XIe4th;hDcP=eZEJGa5cMv5h?jn7KsrHI%l;<+K2 zDKK<1(JpjGG@G-oQbGz#`$JsLH8~vP%ASm%$l|w_5s(DHRe8-uL8`bJtFhT+uHxKv z@nBS07p$>ZDJU8k8_$>Sh-`1SWp3k}bKTV%23O#$TxTzbP2t4{9Jyj*VVN@dPO$7* zsU(J?GL#$)yf8cv{(zTF0R=+!K_*lg{#2fG1E!JLVm9kV1R;}_PMCLDx-N;SUr z92nQ9tQOAu>;-?G-r|I0p@m1o1K5mwSO}DW#82^W+dkgA+-zlsXFc%rKYtYT2N1%V zO*2!lk*$cZPyUY_yov8|-b$r{4P@W-{CG}Xv;(zV`e}!*Kb|p?qC~0373*-bZ ztTub}(E0D`ZHZO+Gw5a55&lY0z3wA`{d#|Y&Mn9s53O3L0P)j7{)|I|d?&T`PZ4(T z(V|Tst})YJCGbXrQP)>nJ>o)ASJ;qb9Q6K*BL4ILyX#B}%?U{l5}1C#BUMcq-ZVG4 zZ8_CiWm8)B7xyU%jlNdddE_<$xo7(!;?SQSZsAbpK_A)A%=dh6G*w8SjxB$l9F70N z3MqNdFCGJBUmY!dEXmW@I|!_`awt?p{j7t&Ndf!qtn%xczyKhCzCA za`7Uf!TFBTTro7EdH}qz>)BS}`Etj|VXL|(ecIB?U_Rb9cRI~Co5aa)wf%dAZ^A>} zy@J@{cgkYgfP&kJ!l&mGB;b~-ZXOWmbl%#9S_Sa$(PzfHYn);Ee3$(?MDS z%og~4EH$tG(g>dVzSS{-$`kuDIS%?)5eP6OzrDbvfvN#tIspyRU$=?AJ`sW`oWxC# z|5w?IDB?A^IN;Z47y0A%Vzt8cVCNb|)x+PlH;@C|YFd1apqE+YHA|GQCi-&;ZFg7i zzI=&`i5*N=3?rHRf24f{RFrGG_7(vZ1w=}^R7$!VgOKhH5dmpwX|WKH?nb)1Q@TUC zM;W?Cm?4Lm`5(^S`#a}+zvuhc|DCm5`Z~+CWS;lA>$uKJw9H18TtW}EuY>IzoBXBeX2+pLZZlwh3k>0VG>j{Ia!UNHrw!8ospg#(1^cc)`PPlI%(Md#{e@!gVJWx4xn)5H~BO{bvjE#_@%W=$yRW z+}yOPU6@fw2qsr1MDpttQJMz2n;i4iM2?!_XsOzonC8t`dlc8__pT=155);35Vz0I zi^}XcMv(9`e#d3;WGT|HGzstVgzs571r5TOhK=;R!a}xwy0S->mJf_2-3pbnG3$#B z)t19aZ^A~@*mp?9vD}OLwQT(sHgnxbx zcu6E52}Xd)Y#%&73FaW3h;lnhTz@t;@X(&)$;5@g1>3YPWfFg_PAeHfKr5HgRy;6W%yO(y z5dNse%0*d%d^%lk>P)z-5#Q6U6$^2}W1RVB!P-3MYx)`f6UssW!(3dUA}8OKLJje` zF1gJR*OkbLhAd8a?oGpgSW&xzRdNHWsa_NomLD9(+D~+hjg`xWl4K0)3jITmH@`pW ztaRTqun-4jZqCh~@c5_a7f*P@rO;119BySa3*Q6$b?krH9FnHI?0@2`QpVl-k0ZW) zsW{V%f1mQV{Jg)~Nzz`oa}^%ZfZUW*60+bOq`@Cd zkb4JAN!xmJj#v@WeWns zOMs&!5aBjG0(X>Zx#i2@{DuwHVzVXtaHB)1Ww`%q{uIxQAs$K zFOB@OXE#z`uLSKrTdABCNtM~(YIa98KZR4e2B0$@y?-_KEns|leKcLQNGH%?oB@X# z*XV~7$RSr=c>BFp#}v<1#o`>dcpqg(GRY~V#&a6VD#mlh`dqru-8Nvg5dTpLcY@zs zLi*cc0A@3{`b_ZW1>L$FzePxR=!yK!A^hEzdn!ZUkL63Q@2sV$I+`g={A+H+%Ih5w z^J@Xx5{bun$k0qtqZe9~ar_J}E>3>Y50neElierFAKjUp7{}uN^&}(A7q(boe{*k6 z6Us2YLGxroJw@5~+8?YCa&$j?U|2G-m&d!$&r5RaR2n z7~6YN+Wc(waR!%KJ>||!SzcNoHCy+D{%YEYZM@36(MJ&=b2pN5+qQ^FjAV7!?kjE5 zud)nsy4U&aIZW=yC^DQ*Dy`9di!pbFF2)mV;f#?%XWqsI4zcBuG~FUzGE4Hi?=Ky7 z=@9RYCE)()5F;)f;;MCf=07{Z{}Pg<>7B5n{&a{Ajsd&Wa(L>s!Ick3_=%f?ukSH^ zAU!UeZI2=2RVIKxG!r7a$nws{vJ@g+zH%`CrD}`}iFqKSS%+W#;qS zIzG=45i^!BJ5yg0s>Vf`z=V;d`vYZ9%ZD{EA}_pJ(ysLy!>x)6F1@8zz>!9FQTxynKgG+Z`ZYs|UPVWd zQZQ%*#`c6$F`r!oU*x>F1-|MwDY!E`Q(Ik@zy01(mprd~S9@Lmyix(6q2`yNa*gcj z@9y8^#{zrkNXddq#Z5S8K_5!~h?j!mOOCi*am2 z49bX#oJo1?D~E^@JU@Cj#qZzKtEFvn{|rSyKgLWc=p)RbU#azECSRTDyps+sy^-cZ zVC+7Zv+KaEY%lMz$Cf8(ADa9iyQ)tjb;d!AN0Ryx*`{h5f6#nVY1vef?nD!O1362B zY>iBO7O$GBKtb`fi9%afcVeiQF0YWyAHp?qS0u{oh`06RS2FgmWSl=)r~mV`zBB?{ zvG6n+wm-*4#xDuRTmA$USAW+u`5R~c1+pMtNZ$+g*F-i*Yf6g{mcfhSAts@IaF(2p zXD#R?3p)yAKbi%tGg{FRuUqj1_^}hciE;f7y;|Fo(FhiwiKG&qoA9I7+na+}zNt6;_ohpzd@&GMK42AF z)>&Fv)MYd_iVh#MJ8z(RzECJ@K2XgCAkgQ^s;Yu#(GNgCQlS!b$gZ)S9^3P8dJnYD znTNfB5YafX(#xf9hr?U%38k{-Xg#$Crmkhlh3EE1bB+hD0Ks^N9Khs>YM%BZXnNMZ z`Q2(Fvc=o>-9b_k<$Q(tH4c;J4-Th0_*y!(iU>F_U}DSpH=*1`_v^1{seOZ0M(0#4 z)Yy{m=stxt!wDq#&2a%Y)vG4*g)j0rXTh;8lwfNv`Vel&`^XFT;0Ux)zsvUgO0-JP znXB567g!IV3y?I07wejQl?~mUY5zh&NbJw++f2Y&+;*H~o9*s6lB#GsEAaE=M+;Ev zD~r9fqdMVq@?&7xkxJQ)lBW%a>7PUWf4oe2`~ckDYp9Zi zYQ^EzgumxvG?X$LZG>Xu;L8@AhPFSvK_;IrTeo zcC1ND76#;X9e$+joz~8^;*611;gmu)N+k9xzv_CcDRSSh~9c-$mw!;M!hnsG8e*>34=e+T10*cCs(y-=mjaKfl#f@a{}Lhh8#G=oUBZh9HOz=a;;1 z)F^}d-(Ks#WpxpvAos`%ld$}gOCT>1pm6LOet1|p$%W1S+t>S#59K)nux}tZqE=V; zS;wln1HOclNoo+wbMzPeN*G~Ut?=(=(@Zj>j7xaiaQspG90$jqrAnU<*sLFRp*t)$ zGt+*)gNi#*64QpdE|L?$U#@$XcI|1_Jv&bwFI@W)AK(N}LLau^fp9f)*0_~RwKZ+% zP{HwP_Setqm;D;xy!TTiQ%hTP{4zyOOg-25y^b3;>bF>&H*-wDxO0J>P)G1~#* zase&KEOImh@yWNS{7lOvKAH%3$mWe0&kD^l7J);L)c|y{`)!`~DnjHDQB1dhBDl_q zYGfTPc#mJXbW1aUksCfqgO;_P2ZzyZKHS_85_+?-R~Hnrj-n11KV(^YGoh>zR4DD= zzoOc$xjBpvxQ%(81X3yPyR&BQy>^6@{GW00saeiRN=;R(EQjwvweCWD!}9=s@VVeJ z^SNm30<4pAfAFsSF_M^BiQh)@UF<_cvhs8fq0km0(ZBP;BqA0L*4*vwLViPmxSRhf zT+!bq$GUNQORO&nS~-buymO5=n1f^@>Mj2>_5+?!uRBZ|IEfd&^hmutL_$4@F_(@p7KqJhKRb&oeH)W?)7bfNH%~T zyGZ+Eta^g{MvcV-{mu&2zGU%OmNp0_Rc22(qf_~-U&L)J|`YrpcE5E1A!aF&o*?946XOBdXl(x6vyB*7OB-3&CMl`jXCFr zjI<4Sr}bVf7GbaCaZmjQL*O{94Z~^SJN)6;2%B#B;Nm9N*jl_PL#(sk&dr+uLVa>r zL@*)@RWdj|=w&pP$-p2qRlk3@LH?O?DIbt-nUIJah#ykfqkHctg~vP}fK8dEx4V7; zaOf*~7un=jY}^#L{06T4CpQok141EkE2y{j&(Qc!o^M4qgQAJgHzcLG{^$wQU(r(j z8WxaZ)T%ZYJAm*(|6zT-XUcfHvv+}NSt$BEb zBZbz>DWCMfcM^b~HVdU$$86hX*&G2Nb;aCojc!M zYKlkKS>l&i_+K`=0d85hmf-ESznHj&9*wJVUQ?jtKgI5s+KG*~Mr?kM3MUkG+kY%0 zBa;NN-kZik<0n_W7Hd6SxheXyEBfgv*e8+`Nb9BcrR38w-CNw~lbn`axz0Al}{RUcKE4I znMq00$~om|-qgwdR0u#V3Q8Q&7iZOM0|I~B__2Pyp9B~sQ~YvC6WmR|tYoA{#oT|- zbv4Cm@I2e?sZKnw4|e#=Gv9uWm6LN{%eY4D8++IIKi!dk`s*DPdKE_BYx>R|@o6T+ zT|p6YRN-pD>i1t+NY0MkUH8D{f7;uPOfd_0spJinFkjKXC zP8#4*v}P%3KJ8DBN~?3XW3gv){uDz?`BZy#Os;;GmM>YL&WH5#s~`BBg&QkgbX>Xg@Pu-uSpi-RmEygFBn)yq@%_;@!9Vd%U6AYubp}GcL7*^;x}9 zBNxZ!c(OV_p(R(QC9gq_TEEUugn9QBSE(Mk?#@PR&&v!8Acz zvjoKI{&raBn)aZq0VJPMRX5ARBbcGru@sl9S3T?ZVnpbJ78YxNpzml_j3X3 z@ed&N6kWde7LxFMaxTldH;m@8RS!fdkz1KT#5JNjrdDa5WWLp}zpfwO+0@n18f*51 z%{tJ3JMoy`%3CNU-4U<&Qi6rj`*2jZ=u=f4)3o1eNLfTM^w{6zYCtQS$ZCKz3MkI_ zp(NX8X?`0KqOO-y&8@GkYfgOma!>iQ^hiurn_mAiQ zkQ7i|@%$WZH+9ME2to$)Yp3XLRHe4L(#_>+0XQKvSnyUqJehy^`Fw|a+8{6K87KGD{189+rre#GGNXofl4#+3pKJCc zcJE4f-6G~Zd3|$23L_FfU1|)aB=n*;!9uaBhG*@|&2@i2nDxIwyf&I%5#gs-DY)*w z#R8h-7B{uI)di*M?~11f!K$jN?6B-IIe1MQKyFt+Fz{ z_d8#)Jz1=d{x9wCukrlET(gX~Bqt}g72^8wzCZfGck}T6lzI%3&hNR9+GelvR)Pqe zC&~4@3~*dzeiuBcPCbc95akSisIri?&zakE$y5BBJ)v!Hm%Vm4s>Jr)Z{wV!kSBRx zpM3hrf=nm9)K=0Ey=UuN~7^SBzc*gB@H3W9T-s9o-L?4*79r_dA8~R zs>IwV2o}U;NZeRX0_55`M0+5e&3<#U_kub%a4WLJNhTLRN@(-q|Yvloj8m$`STagzd1>-75W)u4+Xs5hoNP6H8N5p!1Q z`b(5;dkeMml701Now%a)a;hBQ-8$Nmxf}hJoi27b!3}ZF72`Rwaunlbr!aBJj&a*V zLY5I&M7UrrLFS{Y*Mc8jN8sSyr7t(VOa|K|QM2N|HT`$j`G@;5WJ8nGI)%}UypI%R z{?;Y#>R{{x|vXFqT4!Fy;_}J zeejN$U=CHTnYHIU_r1~4A-f(R5BpT)%eh>}t6srer==2mrRbFfN!vTl@($J+9rv6c zt=@>3G7;{{xxH&n|#L@iqmc|&O>=E*>EL=zjk$C%fWfOAp% zcwO%Vt~&Yk$u-t4?}Id;j5+4NK4)b;UtN@K5=5E8XL;)gK*QC9@1*@V#~3EtO#Lfz zYiwu6fz&H&&*gaWu_`!bSo#J{(?4k2zs=$P-ya6l-~OzT?HGBl*Mb!(7k#(?kV8dZ)a1(K6a>)uIrlML=_VvF+D@9y(RmZ2H>oXyo zNl!s&6=>r3K0CCiw$pc24X+hYj07MuNq|R!AXxw!fZ^diDK23T-qqE*-)Rs7isYJm zAkmhzP;d351^M25HT%}G_dZYFE7j(ibRW~^s?WT9Ynac=UJLe!u_t`llv6dyA)w#@ zB>%IfAH2ueCtvdjvcQb`hg_vJJC&JTS_#6hV4cp=`bOB6$Ksbdc`vuhQZ@D8!Tx#1cSffdi0g(jnzPGTwWufl7W^(yZ*j#{k74 z1bJ8jFKvRw^%TB8fc9$6fULmlp%DIU<>w%e%f4iGPM}F%T>Wq5^KWbFfBj*E0hXl9 zIYH&>WT{k%Wq4}Z=tL}|Xa!93p?I(kT7jgh(^|IHtlt*@27-?-nPFEEgeJmC2k451M|llL&_PZy1L9k zWoPx-*&hV$W&v)1;A`P?q#ZW*UnC%nyxhU{2+TA-t|KEt=>$k(lIHZQJ0HYIZ7jk! z>rDM~NZDH>ybhU1>Z}*S1_lT3w++k>TosU=oyk>(q^bLEp+6ZIU=j zL-y>itiQQ9NOb+)6;ykhyxS2Bxh)J5`JcWg5enJMk$&?F0@IlYxJJwJaVXOd4ACyX z{GO@$s;e(jqwVP}ujAck=Ca{&22%XypAJtnT+GD5q8rgB0BH@`0~)i7HAuvx2m$aI zfVv!SL_$P*!+sk!|L+L+KYl`AitWSJO7pVc$yf#DNJjN2J&zqn*nA<~zFl(ROo>o6 zPmNUNMvL%j$eX?&D?Xg#z3P}7ubm{xx8O|Ko>u;1!H|zWko)^x0~L{)nedpfM6*0E z+cHjrVo*Xe?K?}U0Ki6=8H5fgyVKVOl`pL)Z-(A;9vvLaQl=7`?LzoG=H$n07nNOh zSF>Rlqy!k-7OFm-P_?rKL8~^onFhy>P2^@37KlXG-Nn@kCl*1d(k5XOkTp3e`<+@3(&nw64d& zrX~9d%i$`1$h$N6)@rnBW%o^kng^VX9-_7OO9~tYFBQL*49%1vuOy9vAKbjB69~KN zilh~Z<*Mc(_nS<&DPWJpaSj0G=szka0|%wsd-zvZhVf9~pfxT#IFpCHyZ>9`QscVL zQh51pj$R=9m!94t>CEAAmH(wfT+Q2E8*EK*i-fI{^(%Rx&-#2Xx;OlRGGD%OvO59% zo3`l`a&jQMXtW1MM$;yK1{4EJ#Nsq%|~B8B+XQ%%||;w?uWw=Fs=0PL3 zHWo@fOZI!pT$SB|_g>A+7FQf|@5X9%Mv2mMM~T1Nw*3-j9XJR8G(2mK8rLW+&cB5F zkk2Bfa>-ahz=z&V~{j&Y*gk08^}X6>mfzsHQ!&U#KSK z0Hk?kSYKNh|Yjg(kf)a6e`&;%5@#=)O|R;}Ir8bQkQh)r!oMwN^yi(;xQN2*71q5Rl&jp=QiFFMfS5+6|OMnY6rsN0Evka@YJs2Cr8K0~#6 zyx>s9urq~}Ki|qrzbEB?2(*(&BYb>*ZNPiS#bC`$XASu+)!7M`18HX^S2-V!I_gUs zAsi%9u+POe;G?)7Ak+gk89BfJVXn!HTuyosR3ROnYv=3@!px`@Ck<(IL8^_7g2~!o7c1GFqb+dLV$G*t|&EkS{6ABfH z)7x{me?7nxEr<@y3KLaOk=o;*VcQ-iq@<)Ys;F17x`|*`N}wkB{15=|8RjJ{RugpVnKI80T@P;vp*x+Vg`=HUG-<2x!kcNlkXVmjJ zrf!FM4i~2^+t`gFgHH9VUK#4>uW4-MeoHnevtf%uQK|Cl%hVM&uv~V3DzU3arI94l zBxl4cEM@?uFm3Ax?%DxGspm&>ZfsbXT4(d05O>cRnSpxwf?IkMR|;JHI7? z2((I%1*5GbOCEx8T&A3gahw992dB`m_`*U|N@wGq1O(87pDDZ5(AH6I4_{g44&I9W z2^hhvz<&tb#FRMgEF&LaIpLfG*fVww*2a7l_f~n_*vWQ9D!*qiIy{b+MJ+2c^Kq-s zT5PHL%*@OnSK1rKJSNv#X;adTB1Yex+~pL|LZgdWU$?=FEHAL>|i2)wnPMFV$dBjy&vw! zQ}_7!#ygTtEB+K5pxocqR($%rA-aD`CmkD7W-6sSv~WOHYzVbVcZ<6?pTStWU4@l3 zZnI}f21sm@X=l*I(2;1SyOv2FEH@UYR+xg9`Avwj+&Oa};ti8Xl!U(49grb6W(k)# z&u5QQluK=ME_VPgg$+hGDz52=T!83l8l8-SeatB?BMqf`3}T?i6_w(;5>$HM1%)_Q zHF+JNlqNoBWIk7EakvA)P7m3kpBwqIHLdOTDywq@VON=XSy+Z?YkEzIzh)Qm}d$cOSM#-OvyhykRME>FT@rnux_MOG zBQWD*-0Hnkq9b(B;#Kv|I#8MXDCl5$0YFd8y>$M~LevYUZGJ7(!Uy!aCQ(?v0*_i) z-+H;c%~((dRforto5z@1o;fKg>ERlCnX5$Uuy^trdE1-El#~~aBSh}sST%DKo`4n> zzT!c*To^Sgxv5X2)~)<8b0AO=dyUpd4eTv<`+^J1#^KUzPN1W6|DM_4kOH&GNI`dF z;WeY4?aP0Qc^l!aQg?z^-T7hgo{~%cy_BEwgZwmCYLez^2I0sPu6QCQIgzj@RdqM) z?DQNbBWgD%1Qic_yMLu&`Nr-Ieph@+RdHka#(`oXMFZE4SXhHn_qRuBR&vj2+wYLF zXa%4HCAZ0 zRiDU!P&+{&F&V#ue{odCHIRro4PP$bH+4E&b3R$}c&4vk35x?W@9~-{A~JED#^Aw}P6lA_>W~+X;V4$m~7I-rLq~qh_t1HvntDG(gX-{m9o9_(0&VHE` z_BO}-!|tI^WMLuYTv_2f z6$A|<757LK7K%G1jfhJtpmkhL<~%S(Twhj|mg2LfSfhcBYy;R60)M};Hf1`@2XFh; zC!^ufb^5JA=XLjm_TeUZdU>M=M5-JSma^eG^?^N9^s<5P>y^57J=}%(_F{)ZV)lhX@!(4wsPD z?jr(4j$ShzQZ=5rqRNynjY%*Mk1o*6>qAL3LQccserXhpp`oG9y)=;cYjgw62k*Js ziG&dmPgcWV5C%G4JXq&)%Jbf^)WZ;FKL*Izh;k*Ew(8ye0dSpk4xz=@E!2Yc2Coh< zh1x}{tw_InQhuwE-(;Lw$8^INnqUv{7BM5KOu4`888`+hoGlz2oIOmVpB-nKNuuv=s z23g#gLT0Y$U=*9{Jk{vK7|7z`m;Is@bO_AJpRta1NRSq}5`EZy;pHgoBsGk49;BMt z7X&yc&Rs-RFAuZ(*CW@5QrQcyH}chGsKzOf0J(pRta*zHT~&k@6qFTP=& zDve!G3YW&e=D)+7^EQ4+na@0sH@=#^y&VqkClNiOdT#~ z{no=ow>TtmLrH~{)Om38uUU2-p)zkg1pLL$WHzy?xH=lqi#hU5x=`e5c}RD*DJNDV z7~Nz_Uo3CBSKQiaV&b<(3YSbzRY~A}q{3TD=LTz0Pl1ts4gUj61;mt8%4(v2H=T~) z7|Z)nNuSiiD5CHwJMhEJntsNTXlSX6{3wHfx5Eu9;c*b@rAuDAr>>oCKY4w^Cwbv6 zA9+i^HU_)a(KZHbE!pOb}@OM2e%M zT~>U2{KMmgn-*ZUdRvJYGP(GyhdHR#Xp8uuYQJBI<%@&*D90Jq$kd}~^tFX; zUFrzVoYY{m9DG(Z)Nw($K2zk7=RmUQ5zO^{6;xl43$3H=LN*Eko0u$JH?6fx?DBft~-kHqP)D9Z>}$Ec4oVWmeH>=vV$Go^<9yu{9MiHPjXmH2<37rMe-*V5DMx!hFU>27U7Iu!eHgErfP*OwxU=JG z5#UGpie-!oo%L%rEBrF?yz7~GpVJU49S|J%1}z+Zdbr>)`irid!x^0A7j4tV-rbd%z&5(v8A<9A^BZ) z89>W0mZwTb!T%~ECZ6#2l#W04#Pqbog=BURBna_YE+P6~+|_`zd*!1nV;edw0pc7q z6V$_x?F(;C_nXg%DD^W;3C~bhhH8l|I3zx|oY78mya$U`H)obl=WTl4aPzguQw1E+ zFFR(aBrnjQYNh4nfELjV?3;vRf00SeaQr&9IyN*GFqVUbTZt^YE8GWHy3wa>El>Kz zZ%a}4G#Fm82X<<`uaq#Px9M&^Df|XHOI(MahFg=0rdiggaL#isHgjBHAZG{l+GR`} zSO_7@fn(2V=V9k6B{FWL_}1RK%blUQ^M)C;c69wPh>1$qEe+UhUr^|NW0nqR4gc^z zluOx4&)WvrC@g&pp6*2$sPB~<8X6Xz<@Sae3J&HfQ-yY*YRk1&{&l5g%rODoMiic3GYE1E_n+lG1TOu_R)%j`_A zBpXN2!HBEG+t5hn1Qf{-U6OQ;*L5S)LJs(EV8qOyXvUkKGoSY)#ySU}SNkV?W3$NkVyNve%Bnt|7jpZLEH?1YoSM40xU5J-eEtKg#qb;3m}&hl zH+Z=A!h#qtSIW_j-O}skgE$(O?L_t7CKr)jXKO(2P|GV4DzbK1E}85ikfu zyxEJnaym}O+R+hKy0-~^k;D3eO0WCQ7IrbejNR2DJ;v0xvALh^pOY$P6PJ&ZRNxoC z2y(^JNn)%G(0&-H@=ZarORzln{`d_&>)=^jorf!zMziBcgvK)G|rp z7fy_y=LgAYwK5~!%a*MO7OLbeue`Sc``{jzFS9)hX9{^cf~;J ztngZpM=qG+GG&ynw_F#bj%tFJuY`|v1obU|)a&Pnsc!0`le?D`)G8BoJ|{(PZ)+bN zX2&7zAlJtLb|h8p#r5z!zWU|e#ZaH5y3X2FT*@|bnoP~c#_zz;6M4+N@(7v$>Cf86 z#<_&Yx$8QGgk?2*Tz1tcwU@uVZoI=iO4=$gquftm;gLX5kk2hCFDy3w zy+YN%V5PMVNroq3uA5s#EZR-Y-DY~UV_PfsrKq*0`waoEPaE4777B#dXDY%!yVQc} zASNuM;&9i^ddm7=9U&GMrw3m}MkSHe4~_1kv#+NnM1feUc_@v@um>&SSZAa?Bo-iQ z@M10XqfhvWn7c;qa~m%gYV9R9?L=Z(u4v~=SscC;+1|{0x%xR$y`Z(?Qz$;K$B2=B zqaDS^Gf5hdtlVaPPP*whtHxy*irL?tZ)jS$iO5q*Oj$aXgwk0J_fUzKgo%Y_h8Ow2 z!KV?N6b}O=MCD|m!LU8C5WmIxtItW9Uxu4o7$SzM09PNN}#%T64R#E)OoEcdm2w8bQoeLh-)SR^CN#{nbTX zf9Z-B-Od2oiWP|m*Z3<$p{11<{YQ4Pqh_uWuY1H0Go}LdOQZ4mxC!$jR5ScYp!v_+m}yM#yv02hecye>|xs z+BG|jq7UBiK^9QbVV@TY=id0no}Cmiq&ZO9&VfCmDfS!eP?$`eBMhA$q9TYE%f};{Ql3i9J`}jB^EJK+cBHLP{6JZ> z&&`;04fgU2WI|7<$wKDhWMBZDye9|%7DcwS_t$9n)eQ>>XC4N}rZe4(iYyjb{xNSo zHCr#^{uGs}bbLkrQ1}D2u=?q@t2@*>!EF1^O8bZ(u@a`$g7fF)-0o-iK5EWh-E;QUZJ$H9#D_o%@A%)aN) zS*dy?GF5aQkk%PP$XcKVP{5gsWU`|B8GL`w=ird*T5ciahLQL1l!meP8kKH1OhT$& zmy)XPyr((9`wP5eD55p7sKOA7^3Jfa>sAt45r~7oA5~}&GQd-kyOG^!h6L>$#*tnkm0(FD< z!ClxgpT@BeTIk!Rn4|X;l?Xq-{QHBp^K-A@!&G6A#?o5>BaDvpyvfTlM(EMWw%8-~ zE>`zmbGUYWs0TKCnfx2NqSsWg>pCWpza({j3NA+?40GxtM19L-CTwGSR-PXbd|yH; z&JR_6M^bkUAdLt1$%UP~V+b%HnNe{$TU)^rwn)B0g=jUDg6~R}WZ<()s`)vJ!^y=!}o`C?Oi7qzW zKAv69TBx!wHGgaF0$WbEyS3-ldw2-n8CAWvJ8VilbiD(PcgWiR@x*$gD27BsGlR~Z z^bD$Zrrg0uvKiQa3f*EG(?u>Yi;!+!n+im#R?$axkZgJjE+(c@C{9i0gN;(u&7&*? zBP5$JemsOr)BVM0reT1M!xLmZ(hvO20nS}p65NSIY;mE^tt7F9>sm-3G-&}~Ex85a zGD9;iv~tpKzi00}Tr(pxz36-RPPI?UXOkrKWFj5aG?XZ&3ie~avbB%=gg+gYNp<>j{%zdELYmJ<(aJhD94yC-ZpWQ z9JY^hm6ug~Ae|rg;X5sOQK$!T!*1p1;M*%#wPxH5Yiwf0&sMpNDl~Qg4r3F37b){6 z4ig}J1yB`G=U#KQzR3qFubcSFCXU#xmbjN?1`U*jir;!V%I@8p(c?@7Vlh z^=96e`3D5=*QEwRJ$7wi5yL%n@cr3klnk!kmg4>Y67)5!Et)&?&Z}A6ph#`R6JhM4 zSMq-{ny*e({#N)1-)FoA7?-GQ}cKUBa-&o8h}2@%J$!v%L~ggXlG5fvb!igjL`g*jYP@~SQrAliUMZEq z0q^lnY3LEu!Gal*C1=G|BkrVIj*wPkzmq0NLi%LN>bGcSRi2sGWLrfmJ~gsc2L+=! zK3URjF?15gVSg13kFbCS>)~2RjU`yIy;AIR@9UM~$JRbq_0HrUU)B3Keu}HmZc}&A=<6|HQkQoG0%)tE(Y0m_ZI{Bt zDdm6utMbFh54c|MrZ&HuzZ}nI{kriAUnyNu85Bl#=yrvi1HPtXcc>;OW!=EQx%N7p zcd=pJ@?~k+R%KFUnR6z`$rb?H3sAD;E}5BFRwng)9>lH#7c3 z@f+at`h{nqlbS&?!N6(1=g7kzut$>oIlYM7-#`g>rPbtK7xq_YENw;@CF1l0NHR^JE} zT}Q2!yneXj2KMF+4FpdV|0jG+I$nz@lDl+Y>O5_utiw{UV10U}9j9GKkKW^MoAXon zt5)Z+#*5B;@IK78XnfSJ6yT@qroHZABCDVek?escdJ zZ?$c8Nhhy(gD0KDKDUr{+@fvpa>9+5; z9u3>BzP&*_)T*J=yS=$N2GxOn+G)FQ-us28iKgeIkjkOC|0166=dt`afX zCLu)>>xWTs!jt~#l7%}dVMi&-5jNS_me+9kcC@u_A$;33Y800Z`^h&Anfd)LuoIsf zeFo4^k67d6hLN7Bx;ldmzVr!rzYr{Xc~J4C3&FI_h2g=o z7lo$OJD;FO%``5hiHYRm>qA+g|3e8ajPvOh4O^gcmDJidk=*(1;h$3O`})p36nR@7 z(|ZQC8`wtf5q7BkAFi<3g+UvX@H$m&(5e_A{ihJOP-y*(dRaLbbvpicgvQ z{v(AbCQ|x5d9i-ZWX$#rE79@Y+$G+CFAlllQiB!*u;_sIxcw1dkMr8d|ES7WyhSCb z1o)F;=fs;+?S2Ks~)S^5S^A2*VsMd8|2CVJ`P0d#XsM{~G%;AvF`I z+W!SkF?Qn$So&5Im8Ug_=aQ~RPuQNo%F`L-F@4s>xPPz76)h*vJrNzXg^Mcz(uR}) zRAF}GgE~l{`?5HORLcqd`Df=57OWXrD*o$7xEo}S!R6~jQ%O%p#a2$DP~)&>U>a1j{2Pi&5+g- zb@#m?^hncC>ASj-@A}p0B3C3{q=!okhi&PsW{lw3)LS-+KAJlKO=W1Pg6MlJRFvQ8 ztoUDF6&nCzbZ;MD{~a851-nt{N5->gi=oYmfL_2Uaao-pw?cno(((wqqV2NjP<*n;$;*J}|T>r;y ztTfivD|PH~kvX!l4IKC}fN~Wc4vkh3eS|*4_$oL$IS!gMtk3Uc*VJhDri4Bw+w{L^ zc3A_Epg_E%y=^p?sap+P%@PS#9>k($8Cn|w(>i_4Llspwr(-JVF=u6QOjPBHX+_e- z+*gd-_M@a~^4N8lKAyUjGh<<2*sQrH$Iq@X~jK%e;Fe^jsl`tn6 zuf#p-I)libkZP*l$}mfUjfm%Q%=agbu&0QIBeKLH-|0l{KHQ=fW(o9lQ?x!Wn4)j(4MeZM}H)htb})NlFwG9g)_{T@N_+oV{Eco zuGVfjVX3C#Wa!w}_oTI?YDl)qWl?0r#O@v6+|)FmTc<#ZW*`OEDlnXi7b)>OB= z8L~n3W~ZcX4Gc{arl5PM$_4@JAFKB|+-mYOizA++U8D~BV>J#5Tm{wUvJxF&6=|mK8V+h9ztnGb%!sGjk69aelO7xp_ z9GXzbM!L!RT@C*Lv?raIoaImgXHAX3x@XY~WLzAXzHRZzE*+W$*4iZeidAGYBglDp zW)}T$&>^JNXNSvh6Ei%KnOdXCL+xEyPL|=ZMb8vKww{1JKp92cE zBg(esz)a>Q%a;oWh42u23U8`zLH0#e7>Hf*8$`pjswhM@m8X3nV5ex_0~@uB^v?yZ z(GPTK*sQ*Y=DDiU2c}}IQ80_SFc0U1M{IwYbxbC>**T~A6;{6`Kq;7JfN1RuG$eu= zPnP!^;ev_$Tl9|gny6k{WWmKxf6S_(`SAQy;^!&6RD5fFzV*nK#Ge8xw-sP zJ?l6=*`e9Q@p0-fu&alLwfx(9YMuIE5jRzxLo7p0&7%U*TA#CP&JYx#0-#`o703er zy66ufbhQI^uv*dUpNWk3S$`q2zM18UDJ=6_dUzoPMQE-yho=@nRZ%nkgD#^O{ga8s zSGKmX_&YO6hWtB_5RHtoxY3eENq#X`dJ{nEe3KP5Dr|NdXt919`OM&undCLrP0Eb{ zh+u4wP{P|i;>Uj#hSb=AFLEVB>$it{n4ask-nTv27Lpy*vNg9R-MA{zq3iY=ZN~#MlHJ9yV!R(fuO!f&hxMs6C{? z)0rmG`_lUppRuZ1$*WHnIOjU+`QM@0AnQ*v&nrU47L`W4&r_L7_BwO)k2XagO1ViD z|Ku1W9EA4>InKRkz4BHFy|>fK3hfP@`iVgzAr{NcXT0V;t|DjI#BM%Q+X9CzV*4>5 zW$a(_@KZ%PSlh+yIM(+MC5yTR`)t31TYymq%LD%+^;>1juYVNep$*AeTja~8QbUiA z-SyiXY8r6-16uK@zJJR+<@FHe?)9{+xH0nbWWF?VD6aYIJzoICupGTj>DLY%sNPPj z#C-ccUiWYbavJ4a2i!Hj^3Kce$2gUCy<*SuA_M;l`}aAe1N?%d-rCXq?(_ogkP2^R z^z&MNK?M>|Tl;ME?7UnbqR^?!IPq9MdUA$@Y@AQ02swrU!r}rs^S^W`^bzl+pMqQ> zSUbY*s6mxcjb6Y!5vwHT<%Gy8iJ2~uqUCmawnT5E#8=Mv2N%XjZa0nx?Sd{e>n_M zTGZtTycN(S50$psW$Ge2TJ?Au5Zul>z?83%* zH|ML@bo#i`FA~{x`bOZR7#UjhL00Si_=ldll$3&}E5EmsfAr{_Z-XArwPGX9tHG^s zz05y~R=p;%&t&Gczg1rO8iBe$&Ot3230u4{o~yBqw@nhou$P@iQG4~Zi!RSkKQL|G zwpps9lp9K7O-JqK<(NYJbmSpLE13U7*;fZdxovL?iYN$(fC$ndNGc%$5=tY|-AIdo zl9B_Wl!UbO(A_09s7QA=h}6(X4Gi_|IY-5FFZbTx_uoqm@7{aumCv(Q;?W^7$NJ8` zP4j1^xomd5q$b_O6YmGd)Vb!)n60;H3nyAZeSml_-MTF&l{T)QMwYD0Y3 z+XFWV?qhu;AcphLze$uxrdycyijpo5ux7(R3SRp|kD6ZxEB-5Oc~)cqUBDu98TV71 ztgBnTfOq$J_&Wd*+caQ}XjB&K<{yvpxIG>$(57ZyR{Otht*c^3_L}Q0lldEc{FRT6 zn{eYbzLGmd?%IhshKGe3DpZ?SY(ETG@Mey2%U3Tdn!yDY@%gwd0+D93p6Uvi{fc+(qhWg`D=RBVX9$G=iuQ6@T%e#Eve`|jMhmb$?DzC24|p^RzdZpP ztfF$z($py+0cK;d13*YJ*2%!SSEBp82KfAEu<6eNj#JcLn8v%c6~+Z9Us)i{ zIu(Ln?-TntOD^-IMb7=fTXH+p!pi$fVpgiBj zu_ju?033nAwnDq1x7+0oEb>cQEkR09Ypw2|iW|r=BN~WF9)ElI^xc^u#I~?!nA|bu zlt#Sk=H<r9XxrmsX^ZUpIYgg57Q= z8T$m3m5%S%uGn_fQ2`@%0(b9i%n)>fxx&N4?2&TrNZV-sb^FDkg2V@}PHOp%hluq; zPY!pi?N0(YWy7`tzCe~8W}Z~Ef<~FSRu$ubdARh=SMVd#09a zZW=J*{=0|ZQXM?;{X+q$0|h`RbpJWdnF@e{NnUkOLY8llaB3vpebi^}u^zI9T{lx$ zLc+)O`yphPwZi>~Pow;~-~ZgMB;nT}Cly-4$UEJdx_`k&c{|mm3N}#9CO;d0Khlwl zAWj!|WJKA;d!iSULnKWLDs(!bBjvv?ZcT{4M-FXPx3AEVe)2p73MZvx%*g5AP9Cil>Jlc~f z+pjyCHAN`_=Nf*}A`od5pf&s$IKb1* zm{!ooJ6pB{|CTMOM7!S0Halts+YQ)6!zCF~Y&Gx_*xX>g7VUanMf?A>N%B+%o-j>T z=o{YYhms{2HuBr4&Q-giI+IMBvSe-iF?UU)AM|N6##(h1YaxYA7(rb;F@Rhxqpxpp zZ@YoG^<@)9N`W*%$t;T$g+ef^1#7+CST_S}K5Qd^r{Rj<}8) z#IqX>m;d>f|0>CJC|ixDn56W`|8u<0Wy#Bzcunn;swJy8S(X>Q<1C6R2R`|K{n z<=ixo;C0_6XCey;Cx%bCEg+2Qj&?b_GRyK*V6Fp0ai+v02^_}7+D8%W%W(jn%Zw+u zZ8(9r*BT(_eezjgDhiOH7n6J_+(jpKw}XI9N0KBupVYgog>P=Q-)vYPt<}n}96Y+X z)|XDsq^5f;R@*+O<}Sv^$7iR9vL+PM8L=F{Qp zl8kVvExXmZs#=vd@lKK3cC?-Mozm^8#{j}hQ25>~V-tHN`Vnv}wU{m{f5;$I-pKFb zPW|!e2q6tgd7(QIULU*$k&I-~ApPLhV#*e27$hhiJcsl?2Vk{nHeXo|96J!la5Rl7 zyJ%fGZYE~THUURBy{6+MKZd!oq2v4m0tO1kA@`$a6Lnkpl+FGT%=UHsq{rxPhQuR0 zSLF}KoR{&ytbuSyohIy`1iz;VLfo;Y&jaBz)J2rc(6`Q#3u7Mpq2 zQy==S*C8XAjhDi2JIng~5HMUDciKG2NDOIg%u5#B(Isj)={q?{T@kWL?Nkb^JKPc5 z-?4UI@PBLH7s2oD54C{|W5?aHp&ZyIx4DIdt?c?{Ie?##kLP;IDMJfNR;vz0F}D3eOTE~~h`X~w z0NaGt>BcE?P%;(-_vS95!+5_1_0NQ8tq8Pz&&zWrSg7TY7IU3s>PM}X(US5(FjvjY z{x+r4?92T=TlT&5e2o(6NOs87|FSn%Y2TZ^glTd^!+GcRuPmgcV}I>iQ-dkLD{e>@609(v)XOZ3<3@dB_b*~0S z-}QyZYHY~9DS;GF{SH~St{EY~S$ALG)iRc}%!}?GoV+#UJ~P(a-%ogd`Y%@oc#y$m zq!@c+71mL$t)CU|LLW8h?T_Vb&ay+&03eIe%oD~3IszkyFHnko3-|=J&c>C87Th*F z)n?(ZQ8|$f#v+Nc#WDTU!?0UzA9@Vk7#ue~E6uu8OnnD=s1GNN=#{JG{O2>eAchG5 zU&Hw#;D2OK-++IFf4|{|O@uvzpfCeP`qw77_EYzTIewE*9B9;2To5XgNYncu)t4t0 zSeSEPuOSfgYef7eQ2rpL%$BTI<{ap{9`tRhS~G*p4)V>@eiIeSqs^Uv?d?_s3LQ2J zIzpFN3lXw=a0%Hc+b&)$AIL#Jqy?M(Pz>QkS~2DD?g}{vomq3hs`)7G)ZY9~uL$Udo^(SMegB>PW)c$z6JT%cP)@|K{R5_V7iYCj5kavWu;)t+T~#Y#}2hCK}X$x%)?&$=;M!30mOrKFfipj`YBB zvNdH(@Chr{fwPLG0CNRAn-{w29XoLatCy;bZzIwjPp&Q7u51JSsf?b3P9H|wmV0G`ylVB^S|?+qL&Dv zOJgdjWG@-L!-W~j0v6-7lO*v(JRRmV8vCAnL|iC&a63Am0sbI{cb2gmu{)6R^zdZ( zhkd7p08GGYMIGhTkO;bdSmA_4adABlcb;*qj^(jl+q7K=v4u?Z11a%93VN+T9yh)1 z&gx>v^+~oViGDONd^O@dYb%e%q>?7o+N#fmsS1uy-t63|s@c@GdzRB7apy}aSg;)yPa!GeFa7X z@le11y^8lJs-n{2w?gjUSLYvQ&QBP0nE-`q&h6(a_@D)M0=;RRdv*Yr3&bUd)1Fu- zoN!c6Y5e(h#iOlqE6eb=*i%=?O@Hs-A5wGrJ*r0_FuN4@2yY~9JYJVqKg&Zt1262k zCpyJn&+X;cIyXR7HvzgO+4#PMOh_qu-Pb7bG4Nw~O?$*Y(HA-o_{;dYX{5L6K<27mxm*Q~lXUxhaV_98Y?H&H8qB>X*D)w$Nq$9RMG{49NVWqJ*h;D9f z>DO*}_0Mhlx6h{%h6*?A54Pf`b*M_S*Rez21I1ABE*{&}uFEFD>b33Tp9ebFQw$tW zST?{F2VKHIMqWqYqgw=^yKN1E_RnSB`5{Ar?Y*D%2Or5*2GK2Ad_~wg%|BCU4;{6TAc&AN_OEhO3-!m!1uU^S)ca6)Y;Ps35Y_xi0eSV@^Nt^vO9;813CwgodPsZNYSaP!G)|<0zIdtv@nm z+88(3$l7>gU@6|1PfeUqS?TV|kG!)?U3h?`X+F~kgs=CP@EHK%>qQA4Z23dXqHpze zj*HqN`9b`geea&UC?GCBqv|p{EXRVygJGqulo+;bPfOh1OiO3V>}NI@iD$Rt)+j$Gfb$K@56#v z4Te@0!~rf9D~M=nt~I{TcrbP870n2Um31E=WznoXVWgbP6D1f2Rn`%0nAht~U*}V+ zH93iz@(bR+M|+Rj_5t9|to^~AQDg`IXo-^M-q}XAfG9JMoCeGl3!@hCo`2pwImxy> zm>5FD?;&%;rzd9eF7qL*n`68PQ%+`_@CI72e8wAv%2f z_@Snn*5{x>QPD&kJU4g$k}hW`oQ?=S39d%l9@as3KsVaS2oSpe4-I$q4hEp(vDAA9 zz6Wgzva+)yIhq*I?)zzK?zVz9aj8WwOHfcD5SPW(|FIKiEnt&~@r8;bkS$pCGR77b zT{?DCby%+O!Zmv=-gr~ogO{l$s6?>P$Q=x%EaB)r79AktSwv~P-S!mw5e>Cy9`GB} zaV=)AC-xP*h=J@83^=VArpf@N87@He9P?~F^ArQjaRsG<5k6}$W3kw%g}=AAH`$Qu ztoJo=?cc#?;Lt5 z9I?*cMB$h$3&ugD)EunQOk{Zex)GKot~Pcc6_vv~7sm5iwRrP$XF`$ga6jm)$M zeGeuwqs7RWdx3`Gi=ke?Pc)F-P94#yp5yZ%*^O9uccY7bDBw9{e2;I)j_=Zaj1_b@ zq7G%)azW6eJ&qiXDSX@flzF7LD;na;@~cTRbv^csn+DOx_c4&}1T?4bc^j3NZ@|OV zI$H;N3Ih#vUgN))p&L+{nEUxoc}q;|var{tF&VM0@ySNlU-2Z&J(%#|^zC|~HgMB^ z*O{m~O(fgETcBajWSjudi5kQi)KStAW3AjMLD+O4y-jPwS?%|vJ9gI?iO$De_|Vgx z3j5)2FT=AGOC1B5vlP`5L|&bmRmr=hsaOje(RoeTX&7 zkU*T9_I1^y11c(tDoVx_u#`NVa;q^mP$gMJQCA}03^>$3<55LEwB>RIpnhC(#}dL^ z&46_^9P>l>h%d`n%!r-URo=P^!?}T%h$0&o(VfCGfbsQA(oF*15o5I3J}TisE?1Z< zB$V-T7|9XpMY()R(5^0$@n8kzE{n2`J>L2?uESjGxF4LeE5TWP$iMgkEcw5|*X}9< zpeuut<*m%AnGLe9OxjfYm%y8$P_8yQ1`*m+PPcx3sj70bpdj1HEkg844xMx~+27d1 zuw|^AS@agpK4+akZg;k4M}AhC?ri=lYeNHqDOc5w4xb$ak!S5W9egM<)E*jW42*p( zmyHebF!n0OhZE&hX|2!N&5o-50Kw;S8P;`{7hFnLVS01!#fj5tR;|yPI>{TSDtIs` z+muAs7B6>DivbhjFJ%iNz5h_ZypI{Hd z;z<&yt1T+x7CkYLCfPbrA*1H2hW=zW7Mq;la^cfm#)O zk(&_<%j=dwbaI>@-J8Qwt6|S+^#w5zZGxC%i0G+;n3%(<0>P;e|=_fQW8FoBp-8hIDi#O zA79mft779h8x25`^u&@0E%v{@+*kMep;_uTl#Fk;YagMT(-C{`W?jE*-?Bq44cl#7 z-(@D*W(r45?weBuOG+Eo3rUT2@jkpL1Tx@f>~a(KOP|;e+yX=r=?TQH9jK{IWpiR6 z*Ve%U6MR2`YraCUpumAHUbnOcye^4_>2WD-ZP&xxFKp-XbMBBpYUpxf0*8`!CQe-9 zl2DWlF`sB(OUoq}7pz3DzY+60wdBk`0d;;6Q*!G%o&8C7|_iupQwb z^q%&6Ibf6M<=F%{$k}Ep&~ZF}g{7xgna`Y?oR6E265boCR>7GRstSB-cXP)n6ly~Y zIgWMhP!QxwxY10VmoX9$K2G?3Rp4`0wJ=4ok4p<`AhjXYU=RAlKFnWc+O{sQE)>?& z7=e_;Q{;Hz#=wg;Yn`9KXLJrdWgfn=e3EC7hE+rFqQg!4c7YngFq1`%u*0sJJCB#! zr|N>Z*A~OQd@WZG3aWNRRb`DgYXD>l^~c(ugWPxeEYYiH7o^hfwZ<+3s2%M&6&ebFmq1T=Z>=t0QGFw(l_y)u z{N)|h5V@;rMdYe2d5q=tOo~+d&}H6cd!oxeDs;gXSDA?=j4*Q~DTb(2*@Bvbs)vJk zcKp8BXr+}7v$0xxhr%rHmi6K#Z&WHVUKXqOw zZOgW7BT!l#AuN=fVv=>BHs&XUV`kkqEKdM!izs3oQsAy_k?+ynT>LBFXDn;iP_0@q zcO&9Hl*Hx=Pw~>ep^5$8X@}UB;gs=&?LvEQqk%uOGMRQs1`)JIWHS2EGmv@S@}`-O zHIj!~3nsWe{OyA?zC^JQCaQ?$87NmdCNHyXB~S3(J*drD;TbG8RE@0aYR9Iqoo^^x zUb+Pj-`x#Tc70}UnfD{#sj=E2D;7yDJ~JpjQdE2J?n+^Al=L5@#MGYb#yxkHHbl;F zlPtY{gl~(?m%kNeW&YpTZ5JI&%jYr;87xs>EG_~rSBc`se7*n(|4_lwu^ejy(;?qx zkp3Le<#j_Ms~Pe|OV#+>-RqXBlNR(*u&HM``?j;%gN)+&TRSSwsJk(2*kzC6VMV=B z@d3I+5TigWP);a2uM84gGO$;lzlx$HtZDZ(Mn$a+BsTG=JV9Ms6P+!itxPZl9R*#srhrOuy5_a0J;8b>iDyqAGY4Bw}GKT z^Hw2IZNwmO$$4B90a!5w1;De7^j}^A&}LvdvOiAo=X5x3UaxrV%&Msb%q#s9Rf5J~ zM~yt)+Vrq%`?3`nIobVF71enTYghIT99*Ouxu--J;&|N0)oD3x<#(#wI!5j9athoG zXu&1hWtm=-2F7pxq+i=!XLT5K=^(Wy*zMr2r+8UbZ0=A#VKbK%#5>F0?bvxk@cD<3 zL4!5(Z_swbMJ*8Vc?$!$0jj;whcY2?^DY=}2uK;?)`RYz!9-Hp$6@z-G)L^?jbP8@DCx;+K!p1%^qZZ)c6f^N`JyTlX z=OZ=DDc|Ccj}EE_pIchm?;MeL-8#D5gWqK*Hx!qXpCjnDqUjNYyJKz2+*cJW7(mdK zU{Il5Vt>C%xGqs4Q9qruD@VaFfXDNjx3I4VQ+HSYa^@SEj-dSUA|b!NI7=Z+&W61_ z%R$?2&Mw{7IN}pA%DaNxu?8J*!(+Aqciil{+ltn3c&!5T?-mX}J>2)tP`YHYMlH~d zPxpmZ!JCr1_Sbfo9R%QfJe9MsnuJNhVL%vo z=wQMr_93=u?NR!hH?+GTYr)X52C%O0pZlV_u|7%(Lzlwd z=CogL9D0ww*M6`4n!AfcNTq{jdvd3!8o%AX2Z(KS?EcSLq;u%H;16nPw*Tt}TU~8V zk`#glRNlO&?eEhr(g`|OJRy0+;6Qwbn=1U9D?$5a>ab3A8eTY#0<=KP%ubQY9K^=~ z8t#=g|Z~ajHA}q}{^T8}iX2T8aY#b97QE5e#4462sMhdFm6ZM2$PwJ8S z+jtAOMC%N!t(w{dWX3=3w1u=(2n&@|x#aEX!d1~PGIj?e=+6HNXN9T6P%$z5vp(~` zUmDaqy+@t6s0uKM3!AS)Kg z`YX#HdKbJY!5atD3$L-Z?cJ(V^!3Q=S?Y$o9!ji&TRea1VUBkLdd0OHT)Vn=U&wzg zVOqKR^^aqOQ-G7LZi-JiO`iOz7le<&Viv5MWPV4Yzt{QOYY~PrqT>Vc)ShQf@QE|^ z&xl~nE!%Y)uog-6(tX$)5?^#~Z1|R`(AScOF=WBeM|ZAGY*#f6o2H_6Gif$)9=h!bKR5{I_p^ zY{wMDD@%EB;gvVRsJIt&1_Q<@Lyj(1Bdo8~@1MdS4zw{4I5tDKJ zG-1849^dQDm7t9pvHZD2UTKq0+$&3>>-0~jKlz0`cDZ=F8;_3eG(q}a6?Oc`=0f(f zkN*--r$RE`rz<<_nxoG>Qb?|!7eE4(9`dZ%!TNVjVSjQvm-*OMV0E`j4C#E0k z*;mHnu?HAEiAjF;`~NMWRJG^{uiX~JX{F=h&1-AoQ$j-$W&+r@S-*E~@~yuCxldFg z@%+zM40`R#slT14(im8<#R{@jkAa}(#A>wZny8h!97M;he2h2gEUPoRs9m2Qq}P_- z{Hqs0Jju9pLN2F0?JF^6X-^pa=l^rn@*J8EP`9{OV*W)h{o_mF7>q|)+j(DRxvT}q zUD^~{CA(gV6UUq2JI-m0_66RrdlMbR1@Ho{n0I_uzPkv>dcxA7A+acz_1PSUN-L!% zp>1ACWjk;PiOf#pyDloX6Hvx zaV@RbmC-V0GvEJe7CeOSUU=lcHIVcLLZBQF7`_?9D^0S<+X+XHqgiV%Db2WPYjwGV z+}xqhY9IG0E(S5Y+JvMFF9)T>tVz%>siVJT>sDK?TAI@#U(S4p0Ns{a@}H|Qm{}Ui z0RWsvm*2N5$$#uzD#`*73fy@9A2Pi%o+Lh9p)pG_ub;8#6szCk%4LVguy~&#>8Fb1 zDm74x7i2?|9!RSM-gau2E{>L+2e|bFdVz@x2f(m}m;l`Ry72sa9oK>;a*TbG_MQx3 zJ?5TER~f}oRyaR;DA2>};89DMTQtnWegp}p z$@P`?*w|R(&bT40atiGKYU3{b#Fr^ci{iiPE`9DCRPtJtNip{lzb(t6*{yNN7m}ai z!wJ&Uh{~(YT2N&WnO{D5w&{iz`xf18?Dh3i4R;w;hDXP{rge51o*1kBzH4N^@(|%{ zdlZ`n%T3ZjVk6e;r@{BXSrKsKB>~F_N~tg!_hNc7G%_U|=n@$cReXm?9S%eULFbFV zuj##CuSZoZtQYag#ecF5{pp&Q=`FZ<)pRG;+Fba`gr-T$dwS4=;yQ!>?{j>w2y~qi z@>3z}nYzNcQuxV}y!H=wOZu=t<2nx0PK$V5pZ{9hLc6ee^%7%mFr#JX%sByjX$t9} z+d(E+o>(>2D>jvRF(T!(1Ar4nS;#vJ^lrciAchU?M^bxu(7%7|>7Kqju}7+S!5ZhI zH%gEV5WMsU75I1KK~G5A@2B#cMF>=I1Ri$mAE}{JOL7iPM89#mBsIM%UFrJcD3(YZ zoMry9i(&uGUW3<0eWu>W@p+8?cbIQ%v`R8ZFh=7INhCNwciIAtZ2}71_M+tF@76o0 zIoAS5jwV&1LeATaBaqokB=??wxI&`HjLLRvXxs+;1WCXc+Fl(SGO_^dE5P6a@Xbij zS*~T5oF7!Ea-L7tjO>wbh-*~jJ04PeY$Ak95H93k#(}zV@dEa#L}j5QiYb`z;B1LP zT<-7hZw(;f+!Fi&dKpJ^E|k?QaQ@-@|27$?y8}IkoC#)7%aDXSKsj{TT*;CqMMCy%2R#0~S0jyi=z7u($C*v%XuhxnWi3Z#D1zn6X2H zmA8~6VeO${B+ROVZJ?d3k+GXw0&|*+rje(6boG)zA1AD;K8T>7#DRrtNVZ6em%h3J zpECm8O)L8U9~?nrtJ$f}3ikjukbZ-zNbJm|Iv4%CpPZ(iKhHmI;V#-4r~b$Je?s}w zmq-;3$x9VQoxjR=OY2-^{Ekz-XXZYg$9pe@Nj}Rze-nE$+-Yn6aoCUQ8ATXT zt+3v-C}C&yDqwQ=xsJd*YWXmb z87zi26ek(D$=XW(R~*Du#!%sMNulK2N=Zz%GGkjpf2m-SwWo3DtGAv;`%-sR-fI85 zw5Or2G9OzpsSMRqQK4_5bPOPKX;+xfm}K?<(6VCC-`u!||DEv>5{D$520{)XOwkVT z&m2dE^+wI_HMh(_>S+@KNn|d7?K+|uL?MMxT_! zW8a*XcHH;b4vX_|o1^_m@D;ga3twwHpQM$*mHG92npk|$InAQyk zJp{1?ppuE`M~WXwu?w5BLnK<>-(_g~l+Aa0xv$_Hv%|@?1HREz^Cm2F?Ss%2vkzlO zH=knu)ac#xsMzH)C+69v&{Ou8;iS_v{(0=l+M$2$(5ZO;da4oz9?peke6gvAC5F9* z-d?IKPjiK<{nT$gW&Boi%?LAfn7VpS>j8g1&}_k6{!?;C8$PMU#l3Xud%HASN=rkz z8q2hcou7t_3}-=e`Vau};jrd$GMwnvr|g z!94edH76m;8v#*j&GYlb?c@hXje(6>)`U<0o-v@&(Ck9}~KUS|LSiH1t z2JNSAl-NqA37<5Nl+2>|_As{tes2q?rl&s5W%lhi-&`W1nZpDMlk<;7p8ezs<>lG9IANbO>kp^}Sz zZ%#d3=;f$TLr^V!hx?)b%mV@w{$8>thUAW2MTNXZQIn<;?RIkgKhlZPW^0E%r-ky(C;Opm9#~Bph2CB=eCAow4jETL-3!)gT|KbkJQ` zqe<%0<0 z35bf81bJSbOPRkaM(%y2#7h-X=KG&9KAywB<}IvlV07nXstd6OLy#kmCJ{D{mFsU8 zR9q5|j$A1bPaa6>PA&Io33ZsW*CxAtKg@9E9Xqk^p7v?U%7{x%Z0t>Io2?{1P6SRL z?~9Cq)bmJbeg@Hmu-K^e9}z?!hu-4QGj62JP(FDf?tpiKTzyx3aAEjYocxuD3Q8H} zi*~vRe?DEM@&v z_=e~l<_)uhsqbMYa(=1LP08bK`=U8Su?mUw(Jd>Bf!%T@+9|q%C!OYkaGQ%Vji-+1 zvk%YCw%_~$NpAtXD6it$@Rbz6Y~xtkR!Rd}ve=+rd>_%jU_6kmKS3y1hIaIVRJZS4 zW%I z(>$#xFRwo`iq9j)KPRgJ(>MUvQs2dEPP6m#(gnI=it6f&5fMbA zbx&r9sV~79Y>4h$|EUCuA9{GW->Z>cInxpFtkr^Ajyd$ES*R@z7loCwnl1Ymfibfq z%C!pja;Knfuj@$_>?!^frhjbnUq3**dgpD(`NCKa%g?kc@y)V3`mbmRNNt~oF2D_| zf~nI9WcBS{nc0b#8fo6q?60y^IJ|-8<|fZrQP6QkQ&{iqR+qqnT5q-rb9CLe$I;nu zw-DY<8k&-ID^Rpzw*v>KrA1S8f?ft_BE4E7R{zO&V%lweH={PDxRZ9yu$@Bp)Q;uK z)Kq1y89D{(qh=9|qXAOCi$}CuUYjz)LW~6$4t`}@l`o5;BexbH$tT52U|^;QqLsr+ z$(WF?iIEhe?cVkvoa(V2O~m2h1H-+wiRv=M`yFusrMCcLVCcx(ga6p|N% zZbdSdP50SUFN%$$tG@ILKvO3ne2J~zK+kbe-&p=Dt3FXw^9_%Phxip9D%v!L=l-w1 zC|s#T8*p$ZoS+vU1cwvyhd zxC{+33MOoMYi%_g{;pLdm8oqI~mf;9VqX2)qP-Kuer~vq}9^=QX=qy3NG&} zX#e0~D}kJBulxL=i1@C7pcxI?(fD8fDi*$>If(m$dNen7~h zKLvAhQLy+>zaIj~Y0Lmd-V*XmRgj>&t2HX{$xmzM;Ui23t#h`2`+U4qs@!TM@`s1J zxw+Jc!=Z1Fo@tK*d-*@Jmu9RpgV3*RUtKDVB48hjgp z^EJgk0y8KNoB5`%1Q9bHnHI6?y{o}YsucIj*>ay#Q4C~8z#*SIT@)O1pBHMXmC0uF zU@p43yeMGK9WSsyNW}CqQ^`0IE~GgJaahYe8mWA@*wv|C2@1=VW5X`Fs{F<}Dk|S# z6_{HVcMkIU*i@$TEQ90FT`ePKPz+6Y?wH0Me!N-FW}g{mGyR zsYZ>jt>)hcUq{3Sl#nxL_-SFQT5)vl_Fh|cbJ-K2SlXLhyTDPVp0`wrP)ic3i}B`i zF0y4-s@Ij+vk*BNY}D2ZlIwhGlm-j*D1Dc+Aty&HLn@;XIq`$&K<8I)*}a~XO}QVj zsJ2BFyl|@}Sl_tzQZLWYC#YBIpju&Pxa_fx+D)Uj>#GQ((mB%d>IdE?5_7*9@y}wnL)`?7hG*2-p8<;YWz8-Wvg}#YqnoS7p z$gLD_OtpTXi&Lx2YDS%j00(e^!hR4ZFvN2e>|?{iv$|?O_*ohqelU&aRcys2rMh|V zd3X~AMDd>Ko@uJzg>8U~yxr07a&eWCs8fv+w&wcAeUKChQ7TCJ+;2+ghQlGA^QZ}T zzTmS?vB8WuYc=69DHm(h0NN2S8zchG0drqFA`p|YtR<#h96Y?OUYK|xhCw7NX2D#U z9x$vW(`7FY_i~uc3cuEc{tf|ue}B>1&y3?4@-|u$>oKXFN%=6@!CYP1oU)TU%Brf3 zwdRuLaXf!zoj7g_3r{7&1l~Uso|?d6cD(6=r|N)@;8R_@w@Z<`LbGO{J8rompgtlt zzWkRAzP2VBr?TIee0On($#+`c-gK_?M0o5NgE+%B+TK<@K#}Gc209m&SNKWmwgt?|dgL z@;`61)Y$q4Kf_mrj7o_|^;W=rvE1+HqO0-@_^p-#Z14O-IrcA1E zy2iFi60$l^1_m&N`N=(q__orIi@=3jG+|ABl^`zzE|#WnoyK=GHzoN=7X%EGwC&Z! z?SagVPz`c0qA*{tP#;#a*=l#5Ue#b5UgZ4oo@(MVmz{w{z;AP{So>5#(2aNa`0K?I zdEvL4ZLO_F&|T}K>+N#0No(IYiV1neNfX z)V5bs^T$T_PH)5&ATvZGFLW%2j#so5Ko2(7hSnp#VuZdi@yi0kIV;0;b0$>*m+esZ zgDg1-xvrFSlh|B!1!@e8Bsr)&!~yp^1k>xFR_8!8@d||RO%+E!`xjAnsq@V11w^?u zZtb<|(cCp{*K<};`i}}mjPnh_ocn;CC7)T2;xU8jb=)p2)r1F;vbii|2}HRMoLJ(M zHl#Dn`A^78hruY69P-hF9O;Ai;srT!ktC-t)ydNb1d#)iy z1>QVXu@1;=YUU|Qg#=Ob+A*yB&!=GVcHM%XwFDe2^t_mOis&~NCn7`2{Vji(acdTL z+>sq1>Bj5u>l~+@sIu>C%n5NxwYSo0QVg7U(b~cwwGXXNm9CZ=O9>XB<{rffM9fRL z>n3P(9iuOfmc46_KFC7#6d;+Aq=QbSxHz_$UvE8J8Lxb-eB8T#X-6ycVWhvUcNu-s z=U$iy|6-Ln0y`$_fIj@US`}lLAV|+YW9fJcyEpfpM zW+z3lkL87KOWmUN_%z9Q^)j4YV>7USuwOdQp`PHVHt&b~2;&V%mj2;<3JwbwJKyBs zYV~NImYQKMvibv^(gk)>zb=;xNqt<~d%xa_(n5wwfhA!r6o0E~N^Ga&pEVM~`X=mg$aBtP^pxmR@ z8gI$vVlG+K#~%HYEh^QEfhislUSG@5e*dX=y8b|li`+;7#BZ5boUgSNH}vT7!DGbQ zf%HvQvjX=J%aq-B&)XtZT3@r*g{tJZ`(6p$&$U9+b{gbg|%5Ef?mhzO)`8%m2PMm_1B-2fVVLiwpN%ajNRv|I+1!#qT~271>l2{rx-q zdF9U_Ls9#BSY1IUxEJf0d?7w${mZS-$|MddxA+k3LE=lFTZOn()%S@vghBxd@&x@@ z!bXQ1BZqBN>J3Cf?O;xGlJjF-`a~7R0Mpd49elljwr=1^dbj)el?%;OL1{1G z0ka(88;df9+axby~VgSN=>E&&)5uZlhA)8qiZ z(INj;o3kU(3s*>4R>1g;d$`0gufl=TQY#nbUH(Y5L~+QEf~LjT_}yN+=z|thl95+5 zXm0kL{&5?a*4d7@H+fW=#%+Us*psfwGGc{y>$kM^!7gs4oRH_L=y{c;7ku8Z0cu&z zVB|4drHp2U6*>M7IQVd>2tjo@JTel{ z${6U$+ba^ou$JT!kNsJ+KXy-wk)wjYPhwQpx)b>kZkD2OoxJ0d#slM&ZZkBusJz~Q ze-C_7Veu1XsM12GO}B?3Z_mdP*w{A=Y*?t8o{Na!@vHo?tE)

J#U+ zDkn1nxf639_WM%RFAv!&Pd-Z+>F`;be1BbBv+0t@K$eB)vpyhCyK49hyUfQW04;mq z@Dji>lH<(t?%F)^N^vP;Pg$ByE9Qe1bc$fCNCfiL-nm}&4HN$SG4KGk3kuP_4 zb~ub%=}>WZn!p&-h3%46BE!0e1oAxSf0guDn776?#f;OGm6hR!**uoLiDQm%s1PwR z@#B{YAq$62qlg?(arQ-CApAR$o7nZgEPXOC z)@!HMc;&<0WSG!b=ge3S7VT0=y!j^V!JIN>`MT0n(N^s*$4f3BsR}?6rDfZE$aX8HDFRIee8uCA{pNKi!8(8>8bKxO2e~07~~SJeQi<{^rmyz z8M%H%#WK*uKq-pXzW}f2pgm7h1WxHD7mWqS<2#gJ?VFZp9?a9416^bzV@5T%NEC3f zXBXyLtP4JhVqsw!jXv%(USmk)&c;DI5}%vbUqmgCO=Hk<30-&k(7#pMX{&=r3}fl$ zro89LbiEHs&J6je-7qiX0DsIw#KQyT_2xh1_sr-#?^%vE0|kS>WkxH0s13TZ#(i+} z<5E@03%hyzsw7uOYwkn2yIX|o{v5glKk5_DRu_N$;5K+QO3dEyr6A7Uva#|vc}sk( zwdA)a-v-aQUg?n?nPQx1yvGF`S{85d5?)_QiX=qzSebXX5Hf)SzuS5sJ58H=8cV?L z_&Y>5v`g^hiw&Q0F1ineO<}-;Bf=w-i;fevb-)R!=c5Ybwg4ST7`H388#DSAZqU0C zix-rQl!_R>$?8xa9G%y&74W#reC!KmmZ7pON@tkjK-G;gYS|#f;es9GKd6e{!ftyKA$949Kg=sHuuj?^QR3l!HtwOzU z!?moAQ&MV^aJJ@I-^W_PSm(FFSRGL?>yNA?Sp2_dSLrY=!JE)z9+C}!EhAmnTU?U; z!RE@cVCd^md@R1mRG!rHtkkH7Gp6I=;l`!fuJL^CH^)7Qa6gaZ4FiVeZtAAy@9UAx zVRBE(k)zSaeEwBBTH)a)zh=&*JPoYZ7)xH3_`ef!p?bGYa! z-eOMdInZT5Aj0PTO;H zE@>p;`qw5K)Fqu8xgMaJLXTbC^BniPj|ALp-XV{AI~bPHhzqZ<7?O2|bX;(=4Spsh zk(ZfS8Yi93gt?-}G&kq9UEdYWsRrA3Fi0=Iw)L^0LCmJ-2bW65zNJd zQKhY^3EJ+G8jqx4EePFvnGE7GjZr0)mX3}HFc!HT*fibhqR(I6entk{WOqi}gKhIP zx&V^IDNWjE%cxnV@DQ8MoCGGt><7VD8$FxVm!tSc!z|S+tZD=5;EGKgJ3IE9Jrb1n zN6pUyBb|Ov((@de8>O#!@mQ1k*wry*t$}+Vi?Yp!-v-mWUFkV@7}%TkTqI?{tcB(o zSFG3GG`@3UrH;j=qm=b55EKg?EWQBEb7_r_U$Yx8*|KZO(kewz2voJ1XCyr3JuFd5 zjIv)I)EMQ^;azSIQFQ1&=d^x=H@Cwx`8<3zl^I%a&$^{qi^*NKW9q_?LOCuv(!IUp zmCUX4NS@=}rp>JxB-}YCr@ZC%%w>2id)m9k;HWXHY89Y>+dJ~-^0X>iGdVloJ5I&V z@!jepAED@0d$`}mR;_HKwLlsUoPy2mR4Fk2h%|*&Hz_q$l(N{YC;62~;PIC)k9bX2 z)E`UM$sWvQV^X>@TJl`HgDZ_j<^h6m1vWS-82!$X5S@mincu>8QV5>r`VV)tIM?wANI*$@nzZ zB*(;;@kzCB$@93i!nbt_Nd2*H5X9M>^QmrEIPBI;3WCez5h5j)Cusvoy1V)~AdtPf zoHT&V*lZSJXaxlv@{ABa@6FAJih}SLZAlC5N22rX(H7=yc4;8vU<1717LZq;4XQiT zdDgd0-8jE>#YA{2GM~qKSap}oe2ETf?Pc+7KpA8EG14ylhbdmS)0)#Er$*VmV|JJJ zI1cFp(Y;7yTvi`(>%?eHbBasFJ&x%wB0EclUGBHvMOp>e(eE4r{Y1}QS9EI%jEd&~ z!@@3-uQkS6h4QZ-YI)74yC{}pZu?vzp%J-=SAOS7qM*)vN20a4ZBC}g$?#o6(YLDu zB5#olPZC!6^@aW)W8WQ5b^rdKA`wxMGD3>%o9uN&Mj_eTsqDSUI1UMwO~~FWD?2;M z-g}emy^eJ_{9dPY*Z2PTeD2>rJq~i5_v?CH`*}UDk6F^N=tKnO6o9~S11v_LWBz7m=OEI*P>oP zPBltA?RFGcBhe!36?b=nMKf7%`^ap_m6mbnN~emrPQ#)64l8rean*iUYb45bcqj`4 zWtcd2cLw-LR^BT)8c{L_h4$Aulb(_;-bIp5!^4bt&mu1sr}hQD1+~99i1iYV_~22I zLs)a$E^Hcyv#=s<)KQCLUcmkfSs3AwUo|T4@bHrml2oH)CD6y>z0tz1=4jGAva?9^ zZg+q#8=hkN?f@uC>CwmVoxpVZ@(_8a$|Ula$`})ehO!%V-%h%jOUU>%PVzG}8v>S9 z)3Y$JUs6(m(h&&l1+E2Fvjw5I-FChL4w8G4BwXQCFa*`-vl2HsRn?2|#^MF?+bB`< zXG&N4$!PlCL0C1Esjs^3IyaONw}dt4zfJj9R}oCOeqlaSN$`35LvoI&G}^n*$;{D# zu^$MGhm%@nzrmCD&la`k_cLK%aNs?MG=5jAM0Oo1VX>yvJCHBU$Ec!hm0`OwEJiEq zsEqatd<3DL!$U-!kf+D;pdo0Q@j;z#cl`K?$lOq1O$Nbyrq+Xy4e_SCUq@2b+>s(y z65iN^odI*PGpMHXh?Pl~I;)PUxTb=h%Ictqb9+Bc6tq|}RxnYKR`W%ASJ;O@*UocD z^uD?Pp~KHSYhKqD7Z;Ol!gKP$@^vqkpfE>p^sKC`;ghvqYMM8rc;pVIgE+&uavy5InNdmVa9}F2?!(?!X9=qprNks5^BAZ)pKFggVg*-- zoM0Q@>#QeWyDf#`+TBYuvJfrvY801IPpVAo2K>`1U+M1n!Sfxx4{TBAkbt{91b6`t z^P|K4%}vCD_?Rp;H@6B)^)kEBSXq%!1z2u;^TqmoIc`PCX{*iGm*tg}^`+&wah`Br z{Pu$?gAjz(9ijgv@b+U44C#^f!sG3?8l0?s9O%P(bInjz$)oJqZlheaHPdb_L8fk3 zq6Njj`v_rS$bA8YFC!h&J(dbx9jzRG52t_}cIG#EWGM@zMNj0wc%_oNejZlbkB5nn z<=wwcPig!9aBWNtsJesi3RXg(83yVZ-A%d%z-((X>&n1ddH6^j2WLJlG`x;XDn0=N zrTb-Hw8gnOW&oe-vDNY`Zr!eKKk+e5NjphMBL*JGlTN z^ygFR8QE21I+7ST74D><&=+*fZFuQN|a?di`E_PlAb> zi3s5Neqq0d^7t<5V2zG~-@dnY#m;U!-)ic7M4IRHar!p1=KFEk<0m!9%-phO>+z22 z^_TXeo?%=N;v!`L;}x=PkLJbk-s=16K3v2ua&aMwa6=1H`=Vkh=`-%<1_pnS)KOE@V#)f zrK_%-LMm@}VYm?8-DhY!*7=tV{~O@(&7-_Kx>BEYJulSNQ2aWdkG0YFd40fx?e^%k z4{Jf%Vlax9l%z?5>gq=z0Gh7xKBk8pe&nO@He8P!y4E@2Faev+mvUv+0Lu^fkDOFI zIz~DkfPAd&0&KcsV*$Y{{t((eU&J+XiFm~~%s0hMXY4~*gt^C;a=R7(X#eTy*%^&0 zae-9KViQnUkvlH7n9wHp$fEiebllmZcE(mYVJ7V+~MM@#AVzN#dJ8bg>~t^lZ|s$eq^Rl z1ge>l?&~7gFiZ8J^?nOQiBy4pn=hC1q}B=xhsSvemi_(xu$+O37ov|Lu;dgOrMEsl zGubyR&<276w&PW5GuONxci6i-PzZCaa56H=h-Pbc@^~eE{=0%>t=o&a#}MGz0{y^E zDA-Wa={Pm9)~)^=Btb!wtzMiT-H3s`%nFDTLsFQPXP~k|%uqPW&*fl6WT-+fll&t* zV>uUfP!NZD@JI^T5SduQtW_rM>d<%0iwtMhU?3)z`d0(M@dTvDFD-HE<;`l%`Y;1x z7AK7c{m{`lPF#9N(2wgf{p4QRAts`zCIMckM@knzq0vI=Pw5b=2MwX1O5OY;qW$;E7!`XeR`fL{w|Qldst zVI#s_s~_~H4UbR`9334`yJO${$gQymg>R=I7J3@GQyJ(C2aZAL{j|_wsb5B@%bcaF z$V4TnO?I+J780s+p5P5HV%Q`%D9WOYUOz6bUKIm{-mAmd0}WHo&Z_=AT{Mo|Uea^3 zzv>4z>p0?@Jedfj7S(-SoYt6>m@iK&6G@bzKkc|Ym?y8Ps7vnrGk~;*L)agCq2rgp zciT#)DUaV@&mirX0DVwE$5@}PaGD+X{XI!}Al|cXApe>m2Y$A1 zg4BpI^t)D_8q4F71yh)RA-)etfqN1Y61#|7-Hvb?C>a|lxfO->)@dBKi;nq<;}*P3 z@#c@e&q0Ec{15XgQ0?XHTPw#Yex1zmxtG!nM$9Pnvr95!pVa6<>(dRZ=l1458a5qc zb_7kfgT_qelS&12y##bWW`Fjb_3LSmY zbloQo%UDc31BI0eTboX-GkJVhTn5dvg>^<1rtrhVL!NsvV*o6d2R0vUwEN%IXcw5m zqo=25Q^paw?h0W0@;Na0TY+oL>bF7d!zH=-9+3P;m5YR(6PZxg$2b3u^8YALxclND zMslkW%Uvy2hfBHD%9kL^Pb3cR9mg`19PZmoIA?i3?Em2#vKk-=x00ePc)h5kQ-mNZHi>Cz?ZUbVlZ9o|F={=MHvOb*7J81bcnWwF#Vsk3C6Z!=ZdEGrn*eNW9g?tN)>JoLiMu zUnpYXZpi9>hTKG%nYU&Z)-(z8m|qIJOh&VJttev-z3kV-L6<4u}Dr&Z_M*5!};6+w+e2J z;+7@oiL+@}b^La8kRs-D%|8z;4Gr2L(Mm4Kl>G!%DdN(PhgV(WgUs~y=x#6eSvOL9 zH`Z0}`}y8PWxjs~vjG^x{Y-8%TXGG6E$lIWmuGK=(8nt+EtOZ3qc$5+7exX`9~^gx zFz~OW>v>8rPj@w|dJ?(BtWmmMJi=sGO>EN%ZKIA~Q}MR~3eF9(mkBa$z4lWZF7DrO z(#f7t!VrY0aN*_h@~NFDJ@`t``Q9Yz$-_pc*}x;n5u4o6!K_9Q%ami?+ed2o)BH(4 zibKB*_dj1zJ#@zeU^JS#H$oC#oHcWp9iwQyelLsbFqijELIp1XQ#{Jc>usvnbw-J^ zNVf0$w2plqmPIArDkRigxGh!rxEtL9f1NPvqjsB9xGf* z*S!RC_?I{SI}gbC>=thW>+B#sQUxowWgL}QTv}p=iF#iO;?{W}YZ zV83f#DH)4aRM-7X z4)nk+&G_N>A)gY%HbUS{OmnxQBg4k(JY!*7>K((9S0UFyNu0zU4hYwUUYW+Jal4@28T?ja?tw#p+f!4JbgJ!PC&W?nh zUW#-Cd($|1f$OB_RI)~ih{S~RT3Z-c6307SkU`z$R>fE1<%MY5QvPYZmwgzNCSB}4 z#-B$>Nl8unbU++lq?1XKZ%olpti0ihc111#D8`mkT)O8ZYxUvV_bsr4wgGufP1A*u zq{@g^i>t`5$c&C7jmJX!x>D62d^?B7olH`bv^aZBM;I1EL|X}LgyG#ivQ6o7Nv&f} z`)xPw6_$cxsKiaj7ij@6P`iQ1wo zqo@~N5Vc1VcLmk|r%pe`ot`V{autF-Xl=7ws|sj!Ifwy0GcNm;Zm}}kg~j*EMLCbE zj*R~uR(~5^dVftqw`Zo^#?`CL8PICUTgPvs)}F%KUV89ekL*gexRk%gtMZrEJ1K>h zF>mlqUtgKaJq{_Ea2&|nrsB{w5kB6V@@hs0YisRJvg6U0`RO9FEIiI3`wc&sk#)5j z(hGd;dKzV{2qWOoPk%X*l?6&pAqpU{u>hUeZCTtn2s}335~igUv*>@&2pRTZEB&zXF16BXg|Ro=>_=D8P(7O(h zBehnm*?L8L04evad*ee^ zUp74tmMhI|ynb;3&;XL}pySG|Vsfij+u=T~7)Po;IhpE=X2XSfwh`x$z$7U63n2}q z;GztA=Lo{;d`P%;jazvQVy(R1y?b{ZcK^aWSXV6FEW=HyR%jR`uzR>wf0G`ab~_gU zCt11QH#d4}gSW9l7%a2~m2B-WKhx1qa>}`CW=2xQ-2is7&{gTJ7ttYv0^PkaQ=_C) z`&Yjz?>~coObkJhiJeesQ5ms=^fSE*pZEh(1j;n=T-rbWh`JjvzG&UYn~#I_-{m#@ z?5-ZW3SqZ!{mbHMY&HhUT@Sk{!XTREV%6cJ*cjx?seDPXa~LSayZPevSfr$#DrB;^ zlOaE2V?<9?!{ZmV_gZuNW$k#N**AJYoHkOAza%z>_vH|bj0Lr`3GIIosF&TZI#>+_ zZ4L)KX8JK`7%OzuPzC>&&GWCKadk-sVLEiS<3I$tyJoQvP%`lX1LX*HNx+)SHc`Ly zt-yNOs-dNU625F>d-yElunQ$23|S;L~dO@3G72ETn45ee~)+K^Hsx4a8j=tBA% zbj$A+>+RDSV1>hQ)1z!Ch2}3bwY2qgP*F@CUhv~hhRT&nhcTmsy6eyp^?#{?fgcEe zz`TMt@BAQEp(u$-l@0@o=EBYCo=4wYzQ=gA$g{LrDR1$%a516bl-RfqSZwjfOB*DT za&oMWw%@Ch6BD~n6sr2uCrK7khbl#7mTE*1>%ww zieSV(nwOZR$7cw~7f`*%sy!NCnnxQ7z(O~Y#MR1xpG33s|*tZlX#5}d2lWj>WwA4B@wyltZ_Q}5M0=rs?xz^cx zS15-|ZRqyLLc?25>cp}x7?k&z0IEfZj?`*ED%DB1l)TF+vG!J5>YQPk96N66v)H;< zbk{TMA|DD*d^3vl1WnvWb>vkl+b5-m)VK9Iv+v}@2ZfZY+5Xb}m>cmH0G0R}F;Khu z9l^Di_*)-SgRn1%+~E+%-`+-4uZ|r+95YKFvWACKQUgtvXCZ}Xua>WAOB|-iz>nPA9GN%Et=@?wcLpipvCzRXV_y_E|FBYRSX*CrqS!^L39yxf zIxS8}-okmMPi5xQlz$N-vzfx-u&!&iFJ36rb$4}4TlC7Jlpd83G1`jgu|NNMp@o+N z;e`<fy&AHwZhdr2?MYrKxszC(-w zOL=~&cOuDiE3Quj8PsqRc*gGz;#f2S&;!jFTO2Fj0afYxGKLfM!G22YQYSWUptxLv23U@Cw?&BNM>t=@oV9920Pe@OGvASX@19awtOV5Vo z#d$L7UGgMdav_O3D=}^2)ulb`V4W;}fSR=7M?I{TR!dK}D$n! z<6OvFo?x7&Ip7lB*hlK_)L1%MCw2aQqgh(HxJzJM#6U`e0bojI63yA4x(WdFMwVJZ z{U}jMw5c%gNvie!H*|R0ZCAuGwhGD4um8vjFW?Y%&OQ2Pg7~w-TBXMGJZ_^N6te@p5G3(m*_y4_l8s2f`2Qk zKn$ydCSX7trsU7RIw;wW#4{M#0WjvneB-LqXQ-j0gA5snO*GQ*Cds=%tooQ zHTc&slg#hNn-i}0sX$E*mNUIkO6!pRTF{I}Eq&;(7s$ney3&Jn2BE;)HO1fem_`?n z3flR4@}`H2Oj15MP)a!GGOtX)r49z*x{x!nEq3#Pp8jiA^Dz_tygYae?I`TCt9Ff}A z2#Xf(2^Q%kWp7>@)gL(vz`4L8q?SxNx{C;JfPP%Y<8mn*GU*!lhr2_RB1NyGTB$#Wkc-7y&duv z(nW>kYSgTW;46!Tbv3n$7kTgS1qRuX9U!Gvfx<#TXZfvQJbZs9yd?&Xl1gm3K9yTK ztM0g-;O*C~d*o!6UWHS|Td*6wt*gH<&sb7>-Zq4?@Tn_p z?Y=SP5Mk%>kSv^mwPM}H!vkSb=mwu~J!k^st9|quHyNaJMYi7v*{_b$pS#3xb^Fc6 zPD3+sONv6;;~o78J7;02Ofd(o{4S5(s>tnrpaF?06&znVa{`fH`XxXsaFJEsmi!mWjJ?Us?WM_bkNPJp2DH5N^xOpP+TCEBg3 zJxxB_dBOrnce=@v06#v^+H8QJnoJ}g zAr(Iz`N}0Rnb0S_xk{JHd^gt|&vHmFTpffa=g^(!ow7ZGeGM)dG%=gu7j$cR-KQnv zHzUv=CWuhjoeCHp>Hm+TCIm-)hJ&+C(!L>%(!el!b#E!n_5rTLRc(fSVpz^ovTL9= zaf#uFB4pBPCcx$`B}xy*u?v}I&NuXXbOwUVwLONvX)UKh6O`!h0_ZMW{jLXa5oyb$ zmD~aX5`>-H(UG?9ZmyP4?QQy%-Eo@$G@7&UZ99Nh(*241AA0ocS%NPGfBoflP(G=u5P&)5x7&_#_X|Xq^H}O3SPh;BJE^lVF~uBj{%#lTV~<{ z1cRh`SGoA=AUNqh8&@%gz4mt;1A)v{XS$DeYgwCkMk;M!s>lUT1D>0l*r+fb6X$$8;88r>oA= zeZ$6nx1)^){LriZ5anN3c3?s%feBe5t>%{2lz7FDuEn6y{mNlPif%jKeOT>YZPARt ze|8)AG@Eg`J)lX122`BB5x&MmFfv|inr+iaQ7+F5J{s?TF=ukZ6yfA#VjGyk z8uTbPF}8jkiCoFIZ&OE4{Q*mqtmSQwoOD_;g zwRS}h51hTs?(daXX%A0Odml&grNiy(n^8WaM-DL6XEQ9{s?)T}i@{)}Gwdaj_tHRU zImLgS*Zw`@S7?%3S#8{Lz*sJo#iyL7_`Kv9@yH!z#(%!V>idwkvzr(M?ZR)K@Oe&r zK>D`tL)NfSwNKW~#kJfI+!mLq03e=>8Y~E z9k%!Nm2TNe@Wy)=lorRZMdCuQ5a-Os+#qS+1;()B>}DnD`3>DF_Tr2-hvv3|^^Gn8;e8Y`qqhc!3C;GPhE9E1ASk8@E9~kzMn_ww58w!7d1G7 z2{@qj!o8Y@Y@4QqFE1)sqxmt##Ryslq|FRm9l$W(&m0bw7VH?zv7|!yu{TTzGv_&pGKmhCjMK6*Kj4n;?mX32 zsmWU$D=+Eo?QbZX&QHzG6G0AbaHfw#&D!@&0DBK~M0CD{(CL;=dh0WD(JJ& zzJD@Mu<*^a$6!?Ee6%j_-L`Mpwa@yvNwhxkYn-|?=gLQhuJID@tGbIFN)-l{C5%O? zeMZWms~%(-X@7H0d}-b#{%kiB_2}c5=4!X&AWapS)<*}huEoXH<4VIfI}A5Aag9s($u-ekO&9Xgt!m5|h1_=EBOSG)Dht zWGxW-aA`2lW4st}Ck=ru#-?LseeCsedCcS>GF!E21;avjVUeY^21rx!N5#EjofFwt7J1TeD z5F*nSw8CE@Eg$vqt6dWd&8O* z-HyK1h)%!PIX`0Oi+qW-H500mO17=)2?kgn$;ruOu~dS>WttCeyZ+x?6NYEO8bNCS zg6#$&^E-2yN-Jkaq%A-|J$p2u$A<19&;vxx?(X81&fU3W@n=70;{U#a#L7olhXK=N z#*dV1@a3`B^yO-baG&$2j=}gBC=Cyei=aW!DC926{Y)h z#x*-LcKHJK)lLUz;u!aVRt->!F>$CNfDOlvR28IDvi-Pzl7Yi3k#?^5&pkt<+>Up$ zKIL2(ajc4e#Ultt`c>6<1Q=BvH&yxa@-1H|f83nTvwf~Nxt^u!0SG%PKW6=8i>Oxz zU$ESfq8teItSxvMN*9oFmGPpt0T!Aoz(85`GG9rB{_NYSR3X&}McA? ztZ}(BKz&Gxf}gNcg?7iJaW#1n6Cuh_GHUC=VKJ_0UXFUaLc3Iym(D&M=7)hgtPm(Y zDl-uq+nfA>-++|3RbBQY0HhFRpW(t#zf0LqvyvivYr6=I?T@Of-JQjRtJBj}#RG0m zap0CzoJ`M~R4=|J*^EO^&9`_H$C_Z4hPb%~LMe8_%+8`=6WZD=5{AdLWW6dihXHe~ zLA=A&c6N3{;x(=y9e4M|1ve;DnYjS}q5YlxEwaWODO^NV9<|W`W{avcx z9t>w-sO~@S#{R$eAsJORoIZA=g71t&bjME$2m?R?vC{wFC?Ieml@xI2B(i!ay1A!h7$=17@$uU zvJ{R{eHoy7uh&_wpf6P>>g)!mYL-yvAcFIg%l=!;j((FDOgOn4303yPe);%}E2xds z#YJIFl}e|bLe*@|Qud>!y&IEXrn^nm^2|m+1fk_Vp32g<*cPR?q&$-5prLO_Jn{uS z!5DWXrhrb}7q2@lVr18llC(>VEX~d^s@Wvuh%D|Gxrub_W|qsA*}4!pH^3mF$Lw^( z33SDdxwvUsy2F$CcmLak`3m>AW2O# zI~1X~i_>g{4dD zN3#>CL!LbsCt+tts)|pgzKxe|_p8V8Ag;tz3N8ML^;ji#pNnLC63f z0-f?X7XZ?y<2n+XLQ2h*{?*YU{wWL;NLy~OzHzdt)H$#RvEj=yg=i%A<`V}Vg=2lB zd+4#se{-q7?Ab4;gI^$DP>lV(qrI&V!e8>&<6E!MLEH<+=hs@H9;$V>*-7)*?>@g4 z`5e?!5*P3mY_!DQO+kJzqMXfq{ov5xUr4}g>{VBK;c?VQL&*-9%15xgUw`-?>*FeI3Vx7ze%Ckz=XD zWLP_zMI_&IhtsgRZEdu)XX;5#2-h^jT^2d+Z0?(rdig@} z(DX5i$>b1mRS{(0@R$OqY&xzy#xe2T+GYS~f<=?}kjnry)<-&Y)YK15xV9sbP*Pji zbK9qg-!fxOY|)%KyQpkm4yrd3kP{OV>xav-#gXX&*F~jpHpuO0v~PL(ZD zg&oP<#47(8`LRxomSw-+knX#EEp(OITqofHplK1{+IXmzsz=eY4Gx%cNc8dTl(ich zICgwqJfycWhvQ%bh0?aIxZJuhVTg5@m{^^Yq_XEzM#ifIH6H@O?7OF_(re}HE~1;D zQ1T_Sk@qC!bW;O^>S`YBr}y|d6rWmLn3FKQupn{!f1@8czziLJ1)lE%hjVj`&P!m- zba=?Hh-3LyeK1?3OLRhqTJf`l57}L=97+7|Fiz z7L2ffY(j#ie0m_?Zb`XxD%T;UuN{qZ{$Ma-Lmsp{-{8PkF71r}G~=n(DlK~|0UVMOe|8ub`@>$FvqoesiS3? zz|`lPOSF|DZyj_r+LdLVmY`d3o*#6~SQz%Hj^EQEK=i)eCw+t zg3Zm=1A@CF9aKr%rWfa-fFxj{HzP@4BR5U2X;-SpID8erTq^DeSY*72i3DSGw{ntd zDNec>1J4#(9=o6OhpAde7B#lF(S2GHEO%(;J}$pqqlR~~`^Me$DtJb--0KIYV|01W zI@|C-HW>)J10>h~3uDTU4v%vRXhz)D-XVG*CnNR#?Zahy3I&Ca1=pp%8gAz8W9moz z0A{L6u$Os|b*hY1ZN8O4bDy$1HWzHRm0Z+`c_=;%CfMMgk5bt65kvAyMUPi2j}r== zFL%oFvtb+JxsQ8m)9h0qx$6_yU40{EeDsD4;4OPXgTD|*$ts|!?*vo(!Ta)0Q{tY= zAj|_nHecxuP=E4YRw1BGj(epvc$affOPaQ^&-=q1BUg%zYX@W&T8UPg^=^dg2i#ld ztv!*|b6aeFupJi6hKEejHJ5-sT5{8IahzEFB7kIs_dFJ?vpzIP6JiDI3I&B&3GDW* zta``YSN7MUESj>0*3w{7HK3EG(D88oP)ow(L~L>*ne04_n8U+5~HP?f*FI3si)bK-)3k?t?c^H5(X2RMBfLau*i(WeiWfyeFMfT9!^X%c?8X zZV|Vzt|n((|LDUa24HygDMPiN=kQJ}<=1&!dtnGGx608vTt#YYwrwT|{`eiJQ}aE( zqkz8{vd{u{n0m+EGstn-TKOVvR=530(0M1&2QK*7er5O$8on>Dp)$wEr9`oCX`WwX z%l~}ty@!S$oudJOn#8(ifpK&VZ$XnIYa#lH?>#jruV}x^u8Z%@$X`|@1Kp)H&b>S5 z@k`WyR_lbFurAD%A6)5nC`tIe>-wMa$H0t?|8YSTfne7;rNI@&hq5x?Qz$IB-U6=N;S&+R5qlu<--YqpaHSDVbe&`eo|)I1x~)s1Ppy zV!hC-lRjOvM8n&ruInmFKUfnx#-C!pB|r3WQ){R~|1qwzF3yQ>YdjBxIJC}?CvmFp zdr1v$?9r02B&6yx&B{bTwwV3v&xD$Zum{m1?RVK-p^vFGdl%QiJk zRdCymNxTEA;Edv@?_>HQVc}~a*OlF@le+cRIMSGbwlq#rR<^5MGtA0phvyBZ{-BpQ z8g3yBnq5FpYqj1nRHEMGG(OcDw`7GlhkiUvJHLZ3Vj?%Lf`3WS(WYK{&W)o8yy;b@ zmOuV*pf9)+x`_8ar(LYi<7feF3;_4^UBC6T;N;|c?o4PK`jVto(vGe;%qTMB{UE6y zJ0DiLPu>Gx+BkzLo79ujH?-B05Uy6r472Wg#h4r)FRXpoAq7flP@czcywX1>c#|`M znOZTxmd0?x_(C%rF)LpNp7J0}wx~q0;&J<~aLcWqP&`onZNXzWu?Xm@H70tH?F^Kt z`1G-5Ae=ew!#b+u2}^$cKThF~g7?qk|NO(<8a&uz?_U}|L)=58z}EjA!%*tEH;aN6 z;Ht{}1I!dk0b+^c`+)Z_EtXw`AZEhhxK>_4V~K~E^ugxV=5&dQX5vKa(_dsh3{sX`SOPf%8_nh>J zt!tfsOVP<)*7tRNKsMbBO~19Inv+M`e&c|Vo_T>a4$da4{lZFJhk`59|DN%5hIM1j zIlalmI>3TqKnh#)1N0aM^Nh}GCQqbuRqx@F*D@vuE7l;Av62vZgczpD)`SsfAUWLcOp!U#&A`rR-+?0i_KLUWrGF~Na z`hWg`hX+9|)3^62ARR0rl>6;UE|dYqiLVw}CioSo|EVAD^(0i$aZaFXlEJNa`Z|`M z(riTAWR7oSI2LO~GPTlTYrHpBWS)n!rPdoh`nK%SUi=dzeBTfKB$->+ZTAw?FTh^8 zJ_$Y-o))57hr_VpB zh2+@o=SED_5Sx?D155aUcp2Y{@ z@BWPVxbY5ods?8;`;6<~dQ88uXr%%Spa49s0R50F*ZU)9;>A^Vz)3qsTW>xDJR*Og z*%1PSc3y#^uli#Pi%c{Tme>?)AVBdqMwiAlO98S%wwK}r^Zeag+G(+!Pg_LlTP@uI z7|a{@?+-2939xV2DB|bvQ$Hm~EKnAN#?@}wYBq^K<@FC4x{HGzc-(nin#q;QV(<*} zf^zpa@8n40PMbg?}Y6l+>exR{h>oL8pM)U3xSWD_9t*ZqD~ zRM7fGz8UQtzC; z!ffgSVY>ynfgOE28co$@Ju*@ zEwMTeMkux$#YJffj{`3G*$&0}1$FIwvPl$$k$)B#l;^s1l?5o!`VV%kpC9#K6bNyV zuwAw~4|U-cV&&HVVqyb1?}hoa$r<)5a$WtsxM1&-MNy5@%(V6*_(%Te1F~qalN9#!HSy7Hn|3dAF#jX!C1Gh;H8pN_N*W z5U`Qm-*1fIBfUjo-hm_ANy4u0c@Yya=3?}FdFBQ5n6GdZlPT^$F4B)L-Nmm`MNb&^ z`k%Yp?GV`cPiOO|=N-BQm>BSL-vzDjXpeBTDk5S-^2Tr5U)M4AO~veJZNO#odJvU( zr@_5e3q9O5Jm90Jzqdr!TYS=9Zt@zhtFvC^tqul-r=~+JXmjtJcI&h~>B`_QGU<^L zi*PXLC?2My$T6H(d5H*TUgF$}_(O#JHeh6>(nS^;ahS zE33?2XOlWV7S|yABpPl6TvJEq-17C>L>Un6#80wl5J5PYTFxSkdqCe`AE6c;9!`f2 zdOD1#QKTyhGg04Zp!^N@05BG)-otEr|By6kd_WoC$Xy2t;O#1Od&fiNS3ff?@*hu4 zT*rBMp_Inq3xx@BMZA6HYZ7(FZ{~6u7eNmWo~2as$-bnhf7=iY!xU-v>WrvA$u!JN zTyg3>XJ%L9^E5O5+7*wj6|NrwIuVoEH`GmYj(|}H z*X6fPPe+1_qFMfYndH=q(hGE2)=!5)nL0TRSFHbkStwsLO5|LL#GVEu5}etG0NhTU zm;AO7v)#*EF0gigcBXD3dfrRMwqkGQ=bj2f1*-u;V3P_fk1Uw%(LLBvcKq%j+XPVY z6lt+7_%ss!fxO4IIe;~+xjm+Qx~n0q5fp^a**(HUoU`K{{BzwiHEnaDI0Rd~!_L`-yR@IAev1Cf-16Pp zTQWgF^y1;wZdGiWmzvX&dHypmyPtsG!(7L{1R&HbEKULUSy{OP<*(enU7bn}kB;U) z0K{1RIa+i9kPT-e3k!l#qZtjbVwZ*7{O(;AdOrcyWsmef0B3}Mfrr84%cS6YDQI2(|0>a+h8a-bSIG+FnjiTr@)r(;XHvuMzC+u^#N(>q!S8BV|kFMsn# zNrmKTo{wF`g7LZj0eEZyIQGI&NXJk?dr*dgf6oW7WJ&&L-Fq%2vs`1XJ)@yJ_zLgA z^1Ye&NpvO$+Ew2v9FY+Q=bSGA%aloHj?)IH%~ZcfeY;L!4#wCTBH4a_I`_+fl<~b( zjre~aJ-B|7<-i#hUZsPb5kWq@n*XO6`u!F^U+IbfSM)a2Z@zfV?&>GZs)5ICpZ7YN ztTaJ!;DgR52ak>+IWMuuTX!1rd|7PvgajB|@_ea{6(IRqeX&-L{#U9Mtg-yJrwhtEZ>eJupBg6^HW3dT}r&Y$3FV0SoQ8 zT<*YW=X*PT%~%Zkx2JbQd-}caA30A=9p&$Wh{f~0k@nj_*GPA@Q)lo`R4|xCl8WLc z4jmnQ?@)spgM#K8g`yv3JNBF{GpAFkH>9Ee0=t=)z`?EtHGmXpv7bf`L)K>R!8I9zK zZ&~=)vq+~!!NuUodPzkgdHFIX;@tgNq2my8np%9Ux;rWLJ&hF{e^!HkT3QuP!BdfC zf$Bi%GPYa48oxr^OK4>~RoEwyz%y_=aeBn!-U~Bv3fysz=qd@^>?c~4R%0mb`~KdH z%s5-!JM^}r;lZc6x*Q$zPa@4Q=1 z!uViedHG%V5#sF+u`PFW&~Ac)X>7qAfCQiDF#CM{ZyCAAgHi^;F!3|UKkwKN{Yh4K zvvh5=S^rjJJx2ivsjnr|>q?Z+on&2=Wws?%rb&)FuNZdfddrh~4zQq|vVKWZxS`9(@F95Cwh_Ix8EB(15b=P}1!A@xe} zapf;-l&*!thArZg_nJFA15~shd|R)7Q$GpS*zu}B4zn+;j2RTphye5=i{_o3-?@M1 z8VE#o%ca_J{xB?mJ9`8TkW!EjtnRR7=Iws?4SZR_O2wSxNk4JHbSx3%{Yv)b-#eTC zS>$kcWdXjnj@u33^s95s-exbtV+wtxH_X4Z+^I4qzh@?ztz^s&arE`K7h*YFp@jIU?yCpm_AwN3Z$a)HK?% zl$EJhsuf#Uga$zN9~>R++I5eP-qIQy6Nj>U0^1505yAoVqUF`b6h(u}Zso3C-CKv` z@-(`LT3whqFkVWuQp@8#ZS28rRcXXAzppI@df8Uz#oFRi6;4tlzA#y_xtTFomHIgK z(oF$XS5(VEN}g5X%=Co?4W9J>c*Z{s@DaF52R566&5{lWvD7RInvtm7sNf*Lr)$Kk z&^7mXDjJYF0bLElzpjPijWhLp#1W{d3Wb6GG}*D0>D`D$W?FOc|-`+O3F_ZF*g2CM0NBrL6q6u#jc{PenLo- z86cHa_7Q6)eW?|Dl2Bpj3{J{a64vZgLqXORJEz{ull3pZ2g^?x5!rG1{XUlqn3BL- zxUrnq_?<2P5y?A>i(B0 zJA+{XuEe;I)h;celwHL4Zt`9K;HbdwT4-W%m^oYfjpE55<7A@k&*Iz|u=0+1uk$y! z&3%1uj8ScGCl!9Hgh}7B<7}Mh&e!hGF$n`aZj4KjQCHPy*KJ0@uycKpsk8e|$&3Il z!lA&y9u$OG;@4nQ9pjdC7_gC)gx_0{2~9Bs<0pC%#mf`bP{)+KbCax{+c1eLJb#zA zn?^kn83F1hx`CyPIo3u-Z`h7LyPxasDHupM$o%W+=LGhrpU9b@c>r1v^2z0H6UHaJ75V9j^M>q#afH(WGT>+*RswyG75yvJGeF z6|nxgKAErEL?bWs!m`_7W0NtrSxJRe(kVuoDX=L}Xo6%LE_Tx89aY&-#ed@JZ=HG)jbM-je4zQN&~}GE_<*nk@cKxf#zfPo#&9}#3PcF?x8G~4=!g8 ziX$&%*}fSJP_5(YmUx;X_0{z&LvfJMSw^i}J2c99eu&HWix}wX`%CU(_e~5bj~DUf z1aN>tkg<|+KA+_i6l#Yj+ogtd!5o@IAgGAah9+=vAz)o7YpTPXsg3OECCe)8(06zo z^*4DepEzGT*#8#WopozjD`csQOH!Q+CXcnF=m?QXx*CZ@Z8oCVMb1^4$W59QlMnGP57#zpwr_|U~e1)exw@}hxYht54+tAf?@wTl?W z2NAO4wg+`-9LhX_vm^)+^bu@tg(As&Ay6Z~Nxcj6CZvbIrzZm$&pHW%0XY4kBIgoY z`{gDl;p#lA=kM3zcL?aWiQDo~avBOWoS+}ZwX-%sHxdf(EGn_nb=G(Z)`Ga5D*fOC zhRcj{Ro7PfwY3J0ml3{rM+1p9MaE;}9}b_;N2`CFT&t=Y@IUFe! z-!HMrUYKaV?{ew+49p-R&ZDMqm^FK(1bfxSIWX%yP&i+3S#u z$lmi*$O_r>khJaWEqlw(Izkyo_R2iOu~+sv9OwHys;jQ+?Ycg{+wVUK=k&wM&Z zq)NEDMy}aMJ*-*eVcm#GGs=BnlK#P^TTfJeWzX5qNk;R?b@slzZ}=OoAJ9ahUniI5On54FmM$nyA@AWM@MSVejL;27hW;`v#4f zFtc8-y@iR?b9D_Z3nR?t7M`ynMe?M3-qTZuCG=5>z_8{q~N7Rtt7tRqmw(G1L?=!3w z|M)=cUA?cIsxK1r1q_HcCO!HYA zd;b^xPRVJDn9U@yeE{A_Rt@3$)mmesz|=0UBN$HyHuY~8Is&~I<|~@}z-(Rr*6g&$ z$(eawk*O^42C%a(sOAeSvI}{S08{QZU10N9+udz40CW-3|TC z(h{!Z>@eo!M1HeKHDiHuP$oU}Y7BRL%pivZ{dl{wJmf9>We zcJ^wc5ec{nRY3Iq!8U%2qYAoY;F6#cs7aCYY%KwYOicpxFLeF56=|@iF?A{}mN{KG zW!Zy-WqGDM9_#!jI=)`f}8OyJr;q1Y=O|lzI77{%-u;T~?ibg;G8@hw6e)U^lSIL<0!yGoLoTc6Bg+$(GNgW!RB;i#2;o zV`yoltJBW!~CFV2z z1mBOY%bcd;IQB9_|JWeW3_$y~)^mgs7hZeDMjn`{8&OkB9yVuxV;3#wO0uLH?-O?^ zZTg-|6h1hcU%S@#efD>yQk>owcpe;JKMY;Uvz}d=1)c}@zJBiX*^M1OP#WZ)8(;xL zB`iM2iMdIT1LZOm6%~GNrKhyf5sg0<^h7VSZd5)T+V()bc^Ss)pL~Rs@U`U;%{-m} zk{p_AdBob~T>?UOwHAS^jyv&BU?a3W`IPVNhQCSsV39uBlso|hf7@?FLyYB$_4<_+ zU5Mec3g=AN(wLoD@sv>55pnd^Cz+l<1ORP>8-fD2(X@r%eJKxP_xS)v^O-HY(6EMGOlDH9d3eHW z;Jv$Z%uA@5vWuBnZ0a{Ijrmpn4=J}{B+_C~^Y&WnZu=Wmrw?PbN7w)G2Xf-1Gx^%z zO--Qh@-0eg{PRQnpMKBs!U*iVel{i5Ftn5T`-lI`X2j=?VvGc!pef2APaC{i8|)nP zVLK)QZ2n#T^em2l>lS*{k;u;$eWtBn>3ZB{7?wihkJRz6jQOuWdBGb5i|q4T*>8du zHof}(%7)CpO8GGuImEOfaI$OJmu^3ll1r14luB*^sS4?Ic8E-Gpe>us5rPVF5imxj z$ka>Lw&^16!FE;hq`vH7N&nfZ8WEcS>$hIFxJR?4^-f~7Q5%OY9 zBlKr9&`L&F1U|0?zyg$&nf$=g~n;kNuHt-3IgK zbR*9-f4iDLzIw{i0R{8H@AtHD_BFOTLPA0&ZLZKT{}?_>D{Qs6Y)uXFa4epV_J2=( z|9g~R>^9-ng21f_jEX_p2cG#N?v=>2OP{p)z*AN2Gl!~Q{lOgS*b%!(x-~EqTKf)X ziA|ns6bMf~eAs|K85rEecpK;ZWkf$c?ETi;@zhgqFf%%Jq4cEH_@)NUL zMMQ10|1SSQ#NZQ|)yt&IVC)Nc!RUXRNg0}U$%Spc6J;kS2B09fvx46m*(SHpHfTwo z>u`SDIR>Q%_(n(Eu|1_aONSqh0A%U?h|_xv=@L% zRXo^3Are|V+^c`6ACX7ka{G~!vs=^I?d1oXCVY)0=pp_@kMnhn6!dRU%yp8xkA(Wk zc9Z;|olmB?ndI;?I>{k2@SX!%2Y->Wq9KrB>`LXp&XA+N&u2%656OuiQhHpd&_jok z|ET>m#e?3?!hpT;ANu$EzaN|g6@Q$`zNUZz=@U;2(UM*dX*JOot`4d9YdXX4{&@H|g%Whh$)`{9 zO3mJ&tDOPMMIXM4trD*S3i#@n8_g&$xeX=xK+5!X(|cv+yjo1af^SAluh@whVe>yQ zawpz{*Ej^FDSh#0LF(sobmSj9MIw0HBFhpLR9EM@7=#F+6LEQ;!Fhb8bFMd2pKryo zq-61JwWz2!l9Bqq3bizNWNDhONlMj7zcb~xt_8Rv!oBOmk-$`-i?QzlJ5^ph`}-|` z7hipm^T)x6BR~rvJvQ{%ff6kH`s3K@DL~V!(5#EDXkzC_GC`^roluv)2|tMcHtz4g z+5#PAM9Il|eSTAh%CgMc-~|z};EgeHXhLzRb&Gdg;eP@*D1j82SEx%PhG4LW%N(ss z^C?w~{=)cO5v&Nx2ChLK9(5kx+d4XaK*~E^%;fdK3w(3>^2edjTj3k?(k*rWyyg9? zzQ&+zpvL%;*3C@Sa&m1_O(~AUdDOOYxN^l4)ehrQ+5lzb7Vq_PK$EjVYgy} z_5v;qrPz2S*zWy;Apg?_{?O1AP+(;IJS{dL>)I&#sqyX>uUc0~1F$NKo#d#TZxmMh zE8voH!0L3WQ&yRHeg1nxlKwMzcD2(8y91v+<#wVt2{ktl11oCc3fM0k&PeNZ8|+xg ziyMtHZ4Cwf$2EQqZ^6N}m{E2o+`@p>MxmqC?(EY_crt^3wc)bb;1uf|M#+qxee7-K zkkpT^CXMJCdIh86_gzJr1s_yX=l9&gX;~1OsAIKZ5E)TlVK z?q+jOuhdhsk66fhwV?rb+G;^p=jip35d*Y~MJ(ALUhbc#Wek?Ic}Dl-axG;L+5$D8 zaeTeblV(duEAQ?gCDzIV2saMKTzT(tDDxXf?vQ5e2)2#Y`k4+|3D%a3cw3A z@;x|u;4u!I$;itKlO#Od)bP&!Tjbi5ArrFFT0(BK;@hJ007?8 zH5e3@8?`<0R;>TCFI^b!!=mY(e6pTnn;V;eidpz+h3Mw*65=0*@TZ|J#{)7Hv|43E zdQD!*+edFwS`GYCjF?}~UQBm+c=6TD%LLBg0Xb&SpMCDbo#mMWW0*TZ0Ww2qOM%SZ zn`a|LIR#tF3h1H1M>!Xn&kMZ#6iXJhIB{sIR#$LtbzB;(4C0{rt))-dz$Z6py{tY+ zIM$uL5pz_`RLVU_N|AQl@W4%z?UnI(qxCjswE+907-0~UHt0;_y`UJ|GOhEXSr}|* z3pL_ud+WchN(yg(>jH0oFd!Y{{**f47`5)00+x@+y8*@d{7Z3m&en|_U0=M>69RhS z34XNpfA|X75a8)}Y75y86fEX50uCP!Woq8SysldHI7O16B~LT@l}U-s^^={Vg#ZqS zR!E>`erfTvT53^|LB-}mbGq6${ojZ3KVQ+G*q1Ky2S-2lCRd!cHCOBwGh&bVHsZoI z-AQf|V(V8*OpFhV0DtevnW6g`j90<2Qi@Lf5gi6y$G`Sd6P*JsmFhKRbslAw?5xn< zQ>w)eaQaife1sw#@@#F(!Ko=;G_FDLzxM^GUI!m*65971Jm^L(XzZJJ$(W9FeXjhj z-3EM{YagU&+ngJ+-n@2DJZEbE^#i8xccpZf>E;Jl{aEd6DC|NbXs%Y>cSI{I?KImVz4^ zhI=j?)W1*kI&r2;X-_D@ZO);5EnukR`H5-9<>vna!FIIcBZk@Iug)Igr|bQ}yL(IU z-(KuF+1z}|k>ck-j310c!n zF00abl6sDaF|T&;fr{xfY9f&67>U$BuzKbB$9-|*(@Xn4ngi28{8GMI#^j69!X^k? zyfHB8{3er_|mjd>hF?QTolqN+Z4h(v6Gzf<`&vmmd8h=8gHFo=8iY3qNg( ztAo_QW13_uNl6X8WbBD?5Sd(=Xb1?t8n~N7^F2x$^g@bct&pQEF=da=ZrC;k#1&TN zD&Q}yvQlqzX_1`QCExQrAp8F4Ev2fenv|;onA1TWAMl8>*1sU>rEMk3w%lE;?_I4W z^a@kL!TW~8x=~etcUVj2tB&MRtfk%T;)_O*8vJBzI4j$G8VytV(bP} zbz;s+esSq{0XP7`q;ujw0)#3M*SODK>%4gN5UrKT)$_EuH}$Me#=h*=6b)aSc~kh{ zkGEgi11ver92YjEx&uY0%;a4RiNAU6HZ!hn)#QgvOk2jDpX#g$pq z4bQ5HNB~=b=V*TqaM)T;`Sw^x&*zC}-;CgmKi**p9RG;b%)#x?R|L=2eOxr27BB*+ z)CZCUf`5G*Z_mp>P!u8rr4J1+W*~}>npWgS8oL8Nm4aB{j_hCkbVqoTK7u5`fVThY zb1wl2F|RuHMT2FH@Hk=TJKb3ttF=%FfNPe0P3=;p<9n1rgC1yaN&#Gza~7!Q%VB|V zxR~o&E^2kUrix*4anW4Ry5eF90PXlZhjt)cbi9U$c3%$mmZb!i+%z&azV}5i_?;NZ zJ=&Zwg9t4ld@c_}oMyiB4~Hb)2d=@?KmN#Hcm1cd2E7;WeB!ODle&A$dy#PQBxlp7 zSUg;MEh32QUjsjJ`ZDl0(`VfnXqEie-lmx2FomxZUc#TEI*kMaIa5KMd>=>0vCh+%|T-TQL~WQ7ODL?iBKLt1rSt~lwwOs8=FbpO~_@0SSO*aqU z!nis~kO^F>L!V6K`mZ?rEhsuARNe2v`?BP=ll;+X(QgcIc72Wb22u#%%uu@^h1iew z7G+L2Puq*vl$J`j?R|^t60m*hv`Oc+npw3v$8BzHU0``MYqUd|GyQJDb+U%Q?#&Xn z*2dMB5HZf&Tw#KecC(l}0*Uz?7d)LYX7h7#;g`eZ)^&pWJ{-5~PHH>Bf8l&YXoJfO zDH4T0tf}`SFf!4;Nj|py>*{`A6!_{IBbX=>tkI8G5P(GF)4CrRn(YT^^o{%eg5dgD zC0+$y^6uhxZD2?Ve;88ZKjqDXcm@xbigIlm0GJ!5IpIzSt}bD6WNWmH^=O6X0+&on z)J??@aD%h+^C7A2dlCSzXq~tf3$8b#*25s~37n($x2TD8fSYPh&HiloN4)Y|H(qgo zH>i*oD?8WLKAqiC{@Y{z5zOujThNhxR}c*DsX72ZO61lmYXqfo8Y@h}Q!@RQv~x>s zjZgL#bf%knm>bPacSm+G2d<9q_6QXIhWh{QO7~y;8s1!<6v@xz zA{Y}(zh3aB|LnIJ`Faxla0hdz0n5Lxi)nnxQ ztSi`$iw2YCc1sKP#ogMKPH`f8pO#YrAnI|t)Q_St1IuH?r)*=y3=vseJlUFNj{9vx z9eY#7g)oJmftt7-IP{P;Bfh^($Da=?agIKPE+soSz8Zi^16i~Gi0=MrTEy|(ToXsv zghhZ0u%zr(SL?KtrrPQHG0bhy#vagF`fh)uIrOnJ$VBjQ7_@p!1P^Uk9MVI*Mv5{} z^F1m~a8&Ha1NQ9qX7xdTA`Cc&=Hx*3V6fAQa4r_4hjVuCqi!Dypb(O5i*is)>bAES zEmGibLY7tqskuKa`gt{HYCt%)-5Pmdg-Sf=*oj#}^xU;F{yKCsnv41`v-3OO`Sle* zXNm)K=2R*W%T~!n6a0&bu}E(4EPOP%6Y(%&?RU1qFdPR|q?4GKd&}~o?43KWJ$9SZ zSGOmWwa{MBM3nb&uuQ9{$ZL(`>Q{&uW!$8&xJnc&YFuf z4sVJopLeci49ts6xVdAJ{PVSfBEf5Y8jd_LxBBa~O2KQrF6a7pklx{=UDv>C8N7d; zZ;1$qdGk6yqUQ_G0zH^Muc$YjunFb+`Xg-iuNx@`V^a0#i!kghW)_yWX&Q7*Msfl* z5D)#tXX}iY98=aeHxZIGuGel{h7n+}<4f~|(;vpxO;lZERUiUt!SEy1c02Ojn9t>Q zZ-2bRx+%yDu;@AarGwN6%?9j+S02as?rwQ_?8yVga{u>S@fn9g1UC@3`HZy8w4{DN zp3T(zgk0f%otMP4ypoG+e+V20#ZnszaJP-uPrkMJ5^@e@fI_-^rHXu?RNE~2GLMPn zOki!K5!I=vtVBiB7+wQ?y*3Q`Tt_>G;ogzVGasxQ^fI-toA!NJd`@QfF#pl7Lhm`U zjw2ZMR!aauRI6}zOA$Aa+i6h^ddg%qmHc9g(&vkTZ5Zh5@H8xs46zQCTHgfyO7+kP zc~_Hir|lye6w?Nh(0I3iK%BAF%L=zStpXBP6h0oVhsr>i6qjj2H2NeiCqu! zkKkMLSirUh`TxPT#vYN=6XYqS5w==gJy~NjZE_2WIa)~BR_3Mjuxu6fLR4bg5Xppc zZyMJV%E002)&v0x#oB1O7Qyk&kdu=Rl!D0z4{b~fh=9KL#T8`z!4NODd}TO1Yiyns z@<1D{a>~E1b z51NssR$E@Gb4{R)*1MCXkFK`bxT>sq^#wH~=4*eY(znvCwx(q$u$tp02*i2T&+=I1 z+(F^NFyz1z$rejQBa=z#jYr!Z9kA3#iCP5~R#pll#~;Lo>N)ES&@)r(r!7w0LmvK| zB}oKr9FDZARqpLGgI*h61VAYbjodGqpbVE=xz<;giY9_vnBNY!q?8|FgN#wkxDJV zte0~7PN($)wuwH2%&J2=8jh)@y8!mvrml&Q})ms@T;os z-@^z{>6yp6DmnY8JDz(^&Al2BrW#g6B0sXAq{6d9FT#`|J=0@~D8a7-_uWWdL^Q`d z@r1#ud;0mAmiNju`tohgZupkDh=Hkclb#GW708|9VjfnnLR@Q-%jPm)_!D@{>BV0@ zC>wZstbrgvImh;>{2TgnwVCCE#N1f5w)*4TrxYYhnooOdapFTbwU#Z}ooUvb;aR&{ zmdM)MD2*smEmwgDLcaUe;I$+rAN zz1}}fhywhL%6Uh3#Obdkdd90jm5no2%PpHaE~|>%Sap@T)LB#}Q))fHq8HjOF-P=# z5;IMoCk#Aj5D6a9W!|m37#9ev$+J=CCYQ^s$%$2OQ;Y?mrJ|ppC5fthmauk>Uc@xpKA@}r94oj$PR)nJ z%iNlyVpE1WU#Lb+a;jios-3b8gq;CSEWD8k*Pw!{KA++>anA&9U)556&ruv;JMHB+ zktOF@m))C(eZzF>EB(UC0?YdY$uGl-wBNTJArZap${*~ngG^b252nKC1c#_^dcnwt zaR3eKl<*i@-YhU=UpMyzZ&nV$FKCRqrdF`5!a5Cvk8IO?Lb!&+=&~gY6>v8T`2GfI z8T|#I5qs#j8t@w7EY-X0OFL#?N!HZE{m^e?DBC&0(Yn3Ec_H}3k>$0p>(VSV}u4iS9#9o>!ylUYm|w?zj-2Z=Fci~f35CqrEN5(KRIa*KCwH$ejg(%Z()eLrC}=pIRZ6zA zshMu0&qcwM!RGTYcIK;L5C)%HI>);G{4S)^c;&0YN1<&33$yt@) z6GjdoUh6xHbN!mX@m*a__Ma9b4_ntvzLjSm_kd+vWH^r3xj%TJ$I8NT+n}DNt-s&Q z+&ugxonela{VEW3MMFNmI8%bT=?K8&-fRpoZb?_Zdt`84C@jpp6CDb9wlNWG1S;Z_ zMNeou0DC2Bko0!1c-3Y}?svyRl_qUGPhb?hYh- z-R~2khE?;wALIwTJ_Md$=WSFYvrbmQ##W3QE{E*7cLaulJ(2>sJs0`X21+9c~B1!QL2 z5@_7}vm2XX+?x5hxxv|avH2*5csGm=!?QibhJZLCLVVhZ@VywDjFMTZa(`D`y418? zIsqC12|hbp%UfS%5`bO{^ZXJ^GSlDB-_#H1>(^ND=QoV# zheD?Y^POTHx_AV?e+toW%m6EoG7_=@cenipqF~wMjIs|}E&XnAW&_swgaSuKxgms^U+2&xaJmMam=f2Ry(@L*5ksWV-q zb75x(x(6=1Z$^$X(|^!2F+C_H`T4yL>QG=9g4*F>u1 zA*Vbs&;or1TA)K&7GDjqD`Xv7jdPX(S#;FVk3V5UuK_p<~+t` zX(+5N6v>O;kUF{D9)fY((wcW!Do-60)^g`KH>L;%n&1MD*z=E3QB#{teX)N_GBp(3 zlepKF+KvDV?iLO3Q|jKHAcLww>RTxO%4q)H29kUd1eZ7)Nie?qQU5p1)+7#X?#wHT?*NjFAr! zQ6ti*G5@Fhcw#8IO%Uq+T%?dHZC%}HgB_ny;ALmDUSUx&;j3!1_6F>iZ&=@-bg^qG$klK54OR&R~6TUlAD?5sCnFvrn@{Zn%qEy+S! z23I2>CuXKsdySUMuP1scM)N!8ou=fzHrE#us*IiEwFJ95a_&`Egj4m{#0scfFMoyw zqvb5V7dWq{&}qa-19ija@MsT5LH<9QMZd+T3e;EJcZ`!F9(!I76+Hg$N&JZvJk$hn zN0O-F#FIuL3m3Py*`I{u&SCE?ur>5hjFgJ*fa2^q(2BRpo>CR}YM|Voe+&ilaq6Df zjt4tY%7Ir_{C%eoU?y&|#KfkFh;xq_@oJqXl`)adZQiY$`s+)+WwR9_Mx2jQb^!&6DA~e$uGi$2-0(fjKT2GhYjKg2`_dxx)MJup+ z`t1`fftvDEDMOd>=g%Ms8QwTB(k&|qtM+*o1owFccyMM2L1?^FD>Zfgz*^|a873Ag zCIGBbRlbL5E^BnDP-Vo^$b{z{$N}_Ik|^Sc0^V!G`ghXOfc6|^ce+FT5g)YXzB_KHm1}|Ubxu{35y#EUYS>ME zmNXelyhZqE4Z777ULv~c)xH=sGUR>%j{zZvwFjOC2yl~mlVn@$Doj@7RdO47n)gZf7~ z1aK|fvl&-W{*W4GuU+Ited*NFC_Erehh3f^lVnD#kGxrfh!GbRT53REu3MX`G;=y+Pw>kZTiw_d4l6l;ER{$a)nRr(_7{g z7BNR`;jj;dbju-RUqFP}j+ZcCdDl`7Hhm=`@VSHy*Aj;Mo=z1c1( z1K%0(a{AgD%L{5P!j~4OUQ{l_<;C1Tot?T4`u!muR!buCdRM}b*rn!-!`M3^f#HFW zJ#D?!@EDu$V?=OEoxQ|WDf8Jx?&Q{Xp@uOL79Ku6ge$_ACKA%~c<%_Q7?Y?uCQzeb zRqC^IURBrGF6infvO>2Fi#5&tp(a;mP|D=wWMw?Ktb2=~{9G3&o#-v9>9)|ptBkir z+XF9%UbRecXSaZsQlFeQ-8uCb?0Ej&bos|uvadnaIP`|l#XH>b7T_j?NJDzVf87M- z4h`7Rf(JXXzN~yo(~;oRb#d|wWqONDc7IdS=fG%ZrGfO1RprpIdTK_*8fVqD7DHT7 zyUuG;Uq~XIB7BHorSH-+p-Yl9#Cj-Pt%P+g1}g#OlA2y*AZR8h4=Me6uNqQ8F)(^!}&^9ixRNut0eQ#vf{u?{B0Xjhjx$7 zt6l0y0KUG^<@MGXd2Q3I_ zFut!6AiVrtn0?$9lyELskTMMUd$@b6bOor;k5`loIPEH@8@)=dt8Se{38;uJ? zKxk4Tc;Ucb`w_OK;7P5bUy1(rO$=(1R5v_jPs&#)D4X5*0ZQV_Ij##d!CP>d&H}5aG zv9K5n>|LXC6Ead3pDH!sS#ty(3cj)&csP{jPuR)g?D;+QvPie~7{bb|Kgc`f>O@Fz zZAqSO`#*R+?bPvS%AxPK;tWXr(_-EfJT&V)$^y_A={UrGOWGCJYtVom+UX^+KLI7)f|fi^;@W!-wF)nbAG+Vu ztwNv3S?J!cNGb3*@p(UMB8UuW&{GT%+6~!Z<#H?TjR74S6{x8gliH`tx(zhya3=Ok z>JN+2Ix=*-eKB6a%^{5Q8jD=`{3cy7jM6mrzTitjS`THw4ryV&mUUZi;`v2rD5@pG zU7={5mxrgRs@$I4>idgb_K-|`M_3R9HV{INb9#SZu75{1^zsA}#ItnY{k=k86e&7r z%nl4(&xg9lEG*C2UJA)1sY6G-of7y*w(;jbgH-TXyl(+#_W~T%yBz>UWX|a=#`2pH zvmC7)(^K}vR@wk8T1+P~-&emi-j-p7iTrYG9k=LCl#-KkcL}~FHc;j23!CnlI70zo zIr^@jQTzEDdUg?i>`eQ;*0bW?#snDTPU~6j_v>d`bOt0b-R;76(+nO*ay8J_;Si1+ z+_o0weaPK1(bW!OOaFpdruD5So`A^y(P(j}#5{S2^XY)DF%Y?%L|cYb$T;Rt1p-O- zn(vY~X$rdBz|6zT+k8_#g31x{{M)w&=(aE|D$b1e&dY}7^GlVf>5On_RWz@C+TCcL zW`PvUmBVws$5!wi;7R;yXpic`*oy~>bmrL;4`gdLGhW+m_nWqisYoWrPa+fC?r7pR z166jo2V?~xA%isk)lTJR0oUh04Ej=rGJL=40>^}X3vY*B548VfwFd)}9OuV(9-H>? z!R|gJz$Az9mty-;kwHHVb-{A98v#MT{)QFkd}|cGtO<8)Z9SPYW+MmYbyY@t#V{l= z()0bnDnHYh$|ReYeZyyfkbBjW$w-Ud0miQQoi;~>x!-9Tbu+(8uUf{!RKar`e1zL& zdGo+X z;2@c~vd>08hxWawipkfE#v60J;d~Hs$J|V{bPLG{PAILj05ncO=j3#|`Yp^r>g3&G^KRq8JB*Z# zW}plu<$Hm0%trL7slH_5lPbmP2OI)4y~`6Iyd3=2C;X{NN12WV`Kwe!xQfnHR`Q6 zQ#hW*Wr@ztr?4jC(CuD^@dg+_r$|Y_mGkD!n{`R5Kv7XqyRnalb4LM9M1a^71uA6v zdah?nD}T$=V@TeHtYaIOrsWC4D6KLnid?&;jcmZGt%gCj`$#w}X|EFkx9`p@#X&z_d7Y6H0T(-cOhfCa15^tXlo73l^SFWoz~9w_>-&;y;&7PgPC z3WS&=xi+r-t|2u8aNIJyjQe%ia5@;9EjxKPkSa^7e#4rsU9?O+`oS}Ubf#s2+!wne zVoTLq*5;O$_VXkj?%ap5zSdM%iDgcAwH3^UjjZ;FQWx8q7zBg#o2{~Jqv7;W!b&Pt zlYQ8VmBGpL-fe>_8U4MHE+lF?)~KiV zDW>jdm_~2-N{xv)0lB+4B}en|_tW z!hy@My%&hUk_-JKb?CE1|3$z3L|h%Hu!>F+Kd3LuB%C+r1@*kESZ}7(d!`)nA9#k^ z29Zn!#6)0}r8G>^{wX=Wa$s(^T1CFSeigI#rRFPI|tAnmy>b?H)xN(z|0!%nT~Uw{1lR=Gx#?5C|4rHaZWwTR(kTYG#I6H4~qg#3JE-vb@Jb++E0`ox(quD zQ2%h5flCKQRX+^g(c8d5(OkUJ{3^@5B9o%=`%NyMV_+#oUFv|7>YlU|7^jeT{nB3n z4i<+vWD-cs;(X||r$+4NbHgi;h+l5H{^XA(IrO9eU_Cu9g$g||PHajP_ad1kYil3# zZ+Lg$Py8s#(U;*z1Z}bS0*@vakVfp6FJqBEmOnfkDo0bBw2#XGdWh2J^#fR788~r$ z460Cw+>+OdR@ZQ>c3Q7(JdYUxp0;x!^`g9di(C1!H#AM^vv6X5%8G)-t}@r~Jqu@R zHZ0hcQ(x(D9-z+MM2ce5&!mI{>)yl=p+8rVIvuaa0#?1|VJ&2Gf^a|kMEI?FH={t% zX}Ec>nySldPfO2uYjgC2(h$6FR1}6!*-Yf^m4+?L6`DRj@vNWWDzqBnD^u$l)Qj%F zV_*M03%KcQpz7(W5@7^k~?Cl8)l zYYGteI*mX5w(16z11obsPhV#L^vB=&W#Fq1wlokjNwxPkBN+6flVd{zgG(<1BECs& z?fFxh;$F27C_^uBH&Ewc24SZKheuH_J{<$(gQ&`W4;lPSSQ&0B?ltEm*G+-Lun6Po zmQe$lN{2}YaVW0{g_P~Rucxr&Oc73@1C>#u8kqXS)@T#P zU^OLSgHew)1yCBjFEj7N%+Aise@8|pohGeH_Br}$!VwHWi@fE{hHxk3X~y$fmR407N+W1SNE!J=|%C|#Pjs@Q`d*M zb{;Z1i=R{z7YAoYxL)_3{lI9*?rx%)c(A&Nh z-vBeu#AK*I3tFP)776BAnG}|qFLr)jia{G^gPERl3Kg^9g+9C$soC4<2g7==hcO{T zDcRXW1twJIE;6yR2h;5iIRZ93_OjjW(oYvxBcm`+JZDTX4N9B-PaCfnb0Ck5$hhNU zAJ|3?aF$fLdtd>1P__G(oLaY>O8thY=-y~l^@k7IiXz{yMe&#yo~98{9vmDr{`>|t zNTkzeMr`Lp*NM%Cs^vkH z#0Fb~dj^Yq|3nsEs;>Sk2b0GxY!1P^+PIYNN{K_UG){|8k4>4FytW(7)&i5A`|BQ7 z@x^1f{++f169M2e*Ix#SjqffXO&5OGmj3rEJA4l;_F^lTOS5DEc=!EcQM#EaN6QBu z8No)1t5zfXTB45E5?mT}enef}t@7~(y_Ed?_5zeTPbeuZ+e@!BE^_%)V}GE`O*WoI z+JnMEs)g}GSF*C_vMaLSv)i&V;>folU`cU!vd&ET6q**KE=Zig9txVrn@|YIs5CgX5n8BTEyL2{<)Jbq1ncfde)wxKmdw+i z(yt^!06HK_&_2y%`ZfIC6O*%ep4b0N>ecBJBr(s{?AOzbhyE)GfPpx~*6>K+A(xym z(E0zYUBo?{kQ7(WHqk|cqJjAp?-Pwog_Yz1qi<7$geRinL7|W~pL`UE!kFAS7UAb}$fxAl={w8xoWnEM`hSJfYr=i0e zFlKyQ%f75}7-oM$R`@KoQK&X;4M%RJE-=)5kv-eEI|YfZ2*cP5&lb04-{9e+uu z(=ZpNXARf6z_y)d*h||h8b-o$b5NC68v4G{GSHBR)}{tqGl`+w>&TE{RoB!+Oes)b zGVsE5x7ZDur-Mbw?p9H;8=pCK2UT^@ePtjQc}dI_{>Z}Ot!X$1@0=%5=82hh)jD)Y zXb^m_z;Q^^b zA<*tXHkDtbU|6J)lhWw;36E@^ZrxvV?02dYNw zN+JcHxb`5pHB-C#K+j1tEoxPA_*PK>+#6UM)q6X)E9_8mg5ztrL{eMWBV9E7Zsd*H z66mr3ZkNb-wy1rsHx!~6C#3N(*7k+T$X}IeUyVC_iO7x)`n9RH5}JpZtG5mVX0Fp? zc!ScU1wnOMIOz>6z5r*E{Pxf?3qUj^AqOZa zB9aV#XhM|-(1h23sHvq+*M9v8T&OKFRfKVUH3P#H&Y)^g4k{5+ty-gxC)m6CBetn; zRW7nN9me9f;?xK3_F2u}Da+2w%Ad=^q)iy%^I;u!d%Ct@Dzv*^9#2o+uGQ)H%S{w# zXCGgpraZ@jrlpu)*?eB&CSiLgb1(Ll(36JY3r)u2&@j1cDPEllMk(X3l+9rC6}08c zgG%S5NdXaR^V>#LEGLY44xPEIoByIRCMG7ev{X~tpNawO(Nt+%8ZK9p_M<_~#BiIu zVRK*9ka0IPP2b&7;BP_hZE6ivmTBqg>KcRX+Jgd+T8z4XCx0K{-vHbx8F;N(tCe)e8c;tXT^vhfY+v-Dyx)=vMeFuocuc4)!CqaC5Y(C^k*YcE6Y9QY~c5;lsabz{N_nmcgj}Mz zE|M4-rTn)#S^+n1TSrfvHldE=Iwe6mqot`Sw^mV-SGz-zZtBn;&8uhVG0Tvgck%dX zio~Ns&hr}mjiw3iifzKn9=Q;Wad*i44E5lL`_<}N?u0XCHb{;Q;^YnHhGZ%~WO;J$ z8e|M)ag0%dmf>8C2G7mA)0&Gz6bsqtmMi-cyhdHQZNJ^N@(1gFnGtHOZpWXk`M8;U zJ*a*05ofxrcxW01nKOdG!;P9#S9duBteA$j5dz|%M{^;4xXT#I?OfSnn`+tmmbzIZ^ z*S?~Nf`CB?h=dAC3MgHQfV9-;E+wU#iHay4(y5fd=omSa&Ve+-m~=CV5rb{N59a;c z58v4ISUFr5%)DUvwWsDd*#f` zqV>0$7#0q-eV1!=(%umGuFRb@O*1lfGww5R8XPU%jOb+(cng{$J}>JJ8(vn4#1VxR zMUkfnAnsr5AjDv9a0}vns@H4q3&{>(I(MWm)Mq-{>b0_-dabUtwe^EG^rvUki%7o% zJEz8tHraI^h@_E<*ZfkBIl!EGzvb!(<+<15m$0oIk<~mG{>i93p`Y zLn0-%p)J8{`0L=60%&QL@XS#o5YVA2w1&~FGy}6KXYmH^DK2hq!aTIV)%x^^0;m{o zi0A!>nL8bqZZ$Le25m*Vl9tdNYau^x@U3S*9>fWUw^DGewz|Zc1EnlS?CsBJN@OK2x5hmOZ-r zW8C(g)v^u_MYh@w5|$ue@8y82$-3@H5|L3y^cT7B4jmoOh#oj2-n}90xsgL(Wp3P; zz)Z1NOLe{Uo<1RlmQOhnH@a!Mzm4aJc&jeYf$zx|nX}R=xcc2}0~;uD=UcUu&_)QK za$J(%z5<{wTplrT*joZR4MtVGPVg_X3^#WX-VWw);IU|FC`P#2jL6Hq#a0p7@#jh6 zC!BjD(CaE!>H}u`1Q#4DZGHTSAV4Ei#nJDi(Ubo&MDFD2sN0hM zei96E5!0xu{3`>YmJ?%A@8Vvj1aMruL?&1ipCFS6EP6~0P@lq4EUF~&D9FnMj-2rt zW{_N%u}Wt1UfUP1UfZdioue!|Z%ml|>KunbXl7rsl>8Y??TU4YH z-LTG90cHn6h{oeU`O{h3{Up-%Gc2npwLD{L7a0=pWgP_PUS~!6(C#^{3_@eK;UoLIhEPL8j9#=o*&^r`a5HA9xb$yH?0w#yYrh`$hC>7SKDE1k z8z>gh4nEg+Y8zLmPwc(*VnsX7v=R!Fx%7?fY zX9ACzOzQ*@{?JNjj>6%ykBnN_Db^H^4;(tB&1KeBS~-V1P-r{Q?hxDf?3S&Z!e*7` z3zBif1yQokP9Ch&t!{Q7Y21k)JSV`u@Q5G1acm}W{XzPLpzYgmhKq5utj9`xe{m<} zE~iU2q=i3vwBbIX8L}k9x4z2M+4ULzAolDzqGYXZ#p^wGHJrVTxzE7F+c}CUOlGYi z8ywMH@W3!3c`}i0W6#+y4S@a_D;B4K+P0zhY&LNkj125TGT;M6594H=*1rH;Bt3qI z;^B(r@!Ng9fa;bk^2m>@44h}{Cl~fLsKS@!gU*n)gi)&b`(ZKxg%z+KCp;G6hE$^B z&}JOSR*G(YE#v7h7er(RUfJy#_tFS zScNdSZu4vos;gKuZ_)Ijo)iVo=O`yE3x#m?b zdCsH)>QjrWt5+BMyQPkviaevi5y{@U)c3$`X>F~{h_uUVzEGv*>7!-OI#$b6$i6u; zWEW~+XgIHUG&}$f=gN`L4~>fY0uMfc&SfA&yX@Y|pPc#{=By978U!JQlwJ}#r!7RG zL#J(V)9F&N)2&ke;!gS58^&{w&Fze1V%p_Cb-r)^`iYG_GWvOpRAhy}CWx8!BzqvU z&8d9ILuFt>uk`R4kj~rWSB&{LsF%pC9Q`6zQu^a zpV$yIw7qp>zx|m_x1GMFv!Z>tku51gBrL`zvLHZ{pUM3y`v|ihNxtoabwN;}bR`vN z?A3%LL_gS;6HZNBV0HowY1)8lDScpJoNf# zzWs#8K+Sed9)I4`JKR9P#DOm*X4192{%05ku_YHsHk6k?G|+Mz&Xm*SwS?%&PU&zH zrTFd`vgI6hb(BuWXw8K~5eY9Tb(lGywJznfN7WA|aU)%!z}~p7rDyPUk+0)fut~oG zvog!J+-*k^Ux-;4eUjh%K-J~V_8*WspJYS7wg0ful67lxEbgq7hndNHU5*go%WK~Pkhe-`E zdExO;ygF%n7ZqDG0oHb**(3WC(3+iXp*D;N3ObkiIW`uQkZ1VKSkT@?8so){k-m5h zJbiA(kI_3x#J%vUS3A=O6jmT;3(LHHQPSAz!XxTMhp!s!N_tRvy_HH6?mnYB57i*Q zKo=L6PJp`?h<*PN#Qj2D)4*cQ>|p0wZhny#_wa!5>OmtLP72sXut7L&n z7)e%s-J2A8n+D9^A9?(keSc)gEw?CNVPa&*+)%3n%ErkV^ER4oDEI{ie2>A!l}yQ2 zFn9}1L)E&F?&o)}m|CiLE~Cn0<3UBT@7j%B=L`A8Z4(E{_rdjzdFjBvasKjk3NNM% zkMp zgR={fA$KBsX^M&K75jUOTvR{!`DGz*+&wok)EGb_I-)s=x715%z|V(2Vc&JAj5ez< z{_GPz^tEE;FefSpX4Ed$Ju4R-qnTBR0y&806wqc>4DE@~nB{$Op>9{V88KMMg19}3 z^U8p^uB^G^$i(%38vm32=C{LiQ_Eu8xAR-GSu83zE3#Zb-^o%w{xJUN9J<_Rl>}HI z)z)q46b5UkmUvzCcQL83sz`RR?2hLGTK*-2xyUa4gPF8hb0w-0Lav5YwOm!C6n^$~ zS{JZ6&Kcf6{FPZrX(vfRuYpMkTi3F$REu(7FSF{E_azHcb5I=POyVDJ!LGNyhDn0^ zZ(xPApW1!KUbS_GzOxPml1+mvwMf4%^X0+ZQk|)W%}!!87}G<;N=Mn}OwFZlUQlA$ zLu(Tn`Q3g{?snhEj#*dm99C8_Doa)|Hn(=Ph(rAV!|%EOrC_rknfT#a>ZlpTVp}%b z$L9U5g)Te}bx$o@e8k2&TN}I@jg#pSjZD)A*Xz3uQTOykRAvNiqh$;Yfk)pDK3Ibe zv8zZojMp35eEA>^QpNS(R3PYmIejQe_2MjJ@#V9R(-~0rvn3@`qv4Ij`FjK#eAR`; zLEIN4qE~)@DHEmXM3Ni5YpU8&A#dvVOwDNTWd8ReBV5s%T)DiZiK$B7tp%+)tyv4@~oBziN?bJq&4FEsZ~U7ETq5lVEeN(J=MbW{*( z(X|to5iZ^uofm8c-mTSxya4w~`nyJHq)Sk^P%M%MZ1yqCNVQ$PzB}RUKI`x8%;`4K5f<^tyi$J1f^a!hMC;eSN~k`dd8?v-8~u z7gf-kp&gYP9y#qQU6Uze9c^+cYp!pIvhrfgOQE(`_kjiIlq5lYG z$)vA^SoU7{danszn5DhXmHLJYbWsq-1o2_KhguRv+q`O9g)`bM_R#_5`% z*^Tq2b5n0tjVU{3Xqx|6(UXSSO!|KCdARc#^6;FQiegwITjWr}Ax#3Th34wwH*$AZ!2#Z} zVW<{0AHKNoL33HcS0O3}TljrvzT(J5t}0JTU;-viDJS3UsO%rnM3Sx4SliwEnH3-i zHwV93#8tyxhcY0;1;`7InOE01%oAKZrkjZqL_I%fo-Zn>w6}`_X$nkD_9xii$gs$~ zq7*Z~rn8kCp%;Q`MT`#SszauI(4X1*82H@uTTPs4s=gmOTTIp&%*N{B86E2OK|qQ3 zbmXfqw8d#Sfgw&a9|TlLh-B)(*O;FE$;nh4`Xfdx7aK6XACD1E72gA@!vYHIYxuZ# zWfu#YWqmS<3$csfC4f2R)3M*aQ)b%#FjoV=lyo38YKiV4&uEQ}5lIuDmt-n;Wm*9m zjftwsX_E)&5u+SjFVZh7z@-~pL~__Gy2Sw=U0$j73Vi@mO*d)}zvit%(tI1}5NkEC zjTjzeY`-&U03v%yvdi>aUt+SqDUg-_*|Kiu&ikjMMjkr)*{_)<)q)p6w$+shkwpKIPyYCQp> zx$*ua zv7_~ZYHCFFgp{+xE|=3GLLhOEZ$!YdR~%QkCJ;a&UicqqQQNn?;o5kI=4%?C_-X2?zj5Ty(sr)TWm~jk(LGg z$;tjyez?*gAWIbGO37eR1J_@U-jMQDYYHL-IoHb4(mCn z7Gg4vouk6ZXFodVvtOgFuS=?kNGKC~A2NY~9DeL=AE&%_*<({V%l+Gv;dCCv6U!9- z@^eC?I?b0ZO0_<1?Q$}@FKn<}6n8d$<<*3#&x$ctnuyUj=eeH1e`F_HEQDr95Qn?0Jmne4w13xGe* zeBp7XQE^MW)Mos7wKf2Y3p8KYAdkubZpGzGWTS>5iq~6?z=jW?QI1xv3>qHFV!Y1F zft=n_!@-F%}}FAdC=rR|rOS5$Pk;|~(+k`H%M z?a_h->NYt+%ViXc}0jXEQf<%@_hrf>heLTi`JV5_Q#-Oih3#kmV$3 zAzXQ^+_TIUgdfV&dcUOMYyYD$U8_PLI6_Y;Ir&5C;M6$G{0p4z))NH z`FRC1^?TD>{r&x-<*eObj{oJKttI~yO#lKqDY^;L+&wX$d%IO5L#Vi7lb>ByghYqs z#?@#1JiMV4(4|VzVBIMkC4llPMFRMgcWj62LI!IJ;{o@$7H(&^ZH^o4%Q4c0(paH) z-oEIxXA;<1)|D3Lyf{9n2+0K3rh z5&#~bC}tx3<_O}=rtJ~r3lwCPttHWBVWe=h*C`D(IXW2gt@(2@H|vOb^tlcp46EUa#ehErTCc0gK4HDkN}nlPCBczA^%X^oKE^Q14*^ ztj0~BC->{bzMU5dwavM}&2xwS&J~}!7uCBfPvoiXQ6gy){oUKuHhj$uc_-~5*ewnu-xy+l&dA13~w zMpCFvmX4{5^oLWsY#IH_quqHEnIP}T2lROEv-S$uQ_Sk^r{c&GguGK1ks0$_Zi`Gr z9VHCHx|2RDcKd6b4ZRERWmdmhrJ>J_*=;a;E>1Oc&Zvkc#BHsrkF;Vc@&~`}ppAX+ z7LtOE985LX1bpMFdCWMyA6UxEG^a*iBs+WB^30i2EctzJZugOki+!M2bSC{ZL-f-l z0Oti~iv1@YU;xu&b%X2Pbq+-#Jy-&h$1jo)u~sldi`ClzyhvwNJ|cwOfm7jjLrg4gRT~D zeq-n`3`ub6$l-oBIcd1RzKfF;78coZg3;5jsTo1#3hXF`SgRx@%E=^L7^49zQH;Jw z`CbzIP%Jt5{4cEh7T}tz&;PGC{Nv*o3!Vm0=No)h@J_+)k%k@0F>h3svd{kJf@UPn z3K$-Wc-vx^8N4;HkHmi_pIgeoC#(zacBLKUlsk;iZ$JI_(ANJ+e4dqKOn-#bYD~^K zMZH}5a*!vRuIIGr>=XBsU8i3?fJ?|&vbFR8eGussQDjvPqfyTzU-3~L5%a@WZ+ShP zVytp~T*3~%2hM(bN%oGisE!R>w+8pQYT8`r`4i6Ec?TBVFF)MJUxSZ(^547nNYAEB z7p#%@&`1Db?VfJ|z$D3v0!o4E0s@QW$uh#Mi{hZDT3P(1jcmQLTYbATp~biuSqZKd z>8$IkkQXXB&?3FU{gwBhUq1ZhL5!P^9FplZdF9i`Jo6L&FD{LGqkOYIn0~P81$Mx1 z*6M-h-Y&rA7n~2w-Kay~I-Qk}?p49G5Q;3*}r%$fa<|hAwavHi``5MFmvu!)Q0Q-P;$VE+vTj zR$9r63sX{3Zq9KVns8#b=)gBCDr`0#<1a$zC#s!ir%8It;42M7!A;Qe^4Ybk0`~gs ze-qaGLX}i7bPOXE|UHM#4p~T&ZiZkMU z(Ho)u`%`dA`iqa8Jhm@$_I%(ce+JQq@{LJfPzQ{aYX(=n+1zu&mof8IDU;Kn@!Zk)cUIqmHqe!Q{~cF7kw zCOAlLMFo+vY)da=K`+lFT% z$InH6%e?x~+pET6;I(TFzY#(WXtY(*%h8*^(-U=o4$2C=lb1&d(JVOb~!4?#?(Ki$f)wefw@K8%x`tc5PI%A>n;ELFdzQo zFmV8OHWg0ei{9sPRLjy(OrF(YV@T=mzf`>$)Mb9Sx8by4unWvxfxQcF3W>kBJ9dC| z>TK}Q0LYWGi3~XHnp$-2_`_to~qgqUo? zwfiJjOBQ)`D!W*T>XoCYwP6_d&CziQ)J%2dUfv@z zvF-06K3Fc&IDIEonF)r`Qj6e0fxGg+j2}!>p#9IOc5DFGBvxW*00p$E)RlV<4N$ArM!L`5q5f|kjy>-6E|M-mp+0VFmHu5EKWiJ9(cK1qxOwiAEuSv$? z{!>jB-FS7rF^^tr{v46LOyK292?J8Yxh%Vr^)#LE{awb|=O`X*dn)R&Ht z*aUJ>3P)7;e=M<>OYIHqreMB)-#Gj!LsV9o1PdPvOeH8-UbgYJoP!b6_KBa8q2U3m zr|&@1_3326bHD7coeOAVyIto!-dQp35&#xy-ueL`D;4WI?pyIqR}+^*p7{(RW#r&fzD$>H?Ovz-KNtWw`m;{!Ge?ROc zphEO}!EpROvFD%8QVD*4Nu==f?QTmSKp!bN9C3%mK+6m(tSfw`I`jF4jq1H(28Rnf z|G$|PU_p_7d9gy|M0Dql>_-4GqI9K?(Vd!C?8d6d?iC#vMePbnww6+W@7$h0A;v4H zEY>=tDE?M7t5%j)=ZdeZYmENRm_jDN|5}GF_@URo_b#A40xI_ayNUtq>c!Di=J2B0 z`^zhIn_k39KsGDyAV4pC^{7s-Qu>gnAc@+_~6Y&D=hyX?Mqvm|9BC>eg6-X8eii;jfxMD^4 z2rvM}j@NmID>Z9#Os5hlo_7}eaOHx);i`-d)ZSN|TwA578+^CR@P4=|y~p zJY_{JxnMw4#cS^qU{&qoChpaLt`uMDn^jn7=!XkV%B;`0o))NZ_;t?0!f8W#K|x8W zLbUeKvwC6jU<5>0@Kz-^;mqrkfyFEck4-|g3-Vj?v59Ct^Q-fH(LmVWi`B0R&FEese3 zJ@FBx>(_k=0IE$tCQ7Th@o*jKGXX1?>sM^z124&yGg;Zu+$e&yUOT##B+In_2q;~`*uWe zFQZIs_q~d+W%#+}@K`u{lK_a{Uu;518BPR9kiUxB;r%*$*V*H)CR=En3)% zIvE^l`2f2C$~9of2FI9<%2Qk0D5Jy85dgZ0+O2nUD_20oD(yHz8h2Ff>+4k`9LPP{ zk!z`#Mbey|)ia1#+D(^6Wp0q#p4vvX2vLqC@_qVWp3dX5K;}W+n9+RguiN?ipf6lW zARwXQhyqYSi{uG=pvp$!MxeaYr$|M24@ovtP(BjRFk8Lcag~+BpLl?t=kJ3*?v>|- zBcSA?@@)V_%Fe!`aHYq;C~hR-<)}&X;G6e~nZ;XtRE|mZU3@*~4uZA|s%X?t9;Ath zp@n!WA&S=7in|;MD0m3Xz}%rq3a7>LC^u}obi#1~u`h1^VORoC1zMnXxnsh@$f}n{ z8e&N4_{lnO%ayk8lwB29H08AOf6oGlWow5nk0Z$Knd(%Fi?&kKaGzdy2rO1YANig6MSWMqs#@ zj5v0QgrE&`c@TVO17&m&d-tAQPdrG=h_$F;M_wlRIG_Iady=Vy1VP&=y7Qt8HP7N0 zG9v)+nB|>Wgvj}XYnS-Xms({a5r!(8mfqg*A1J0u=*QlZz2{YoLPzoDo#jisZi)$I z6OZq@0q`+gY#~}rSC@_5&{GrVF`gpjIBFsR%~~{Rl&9?Y%rwIN~ZNA*(=LeWT&~z2mufP zYVx;8WAr~dr|PB$Ukq=d{rV*5<1FrtWX%_yVYwW)CFxOcrZt>%Jd4 zJ+-q5Eu#=R_HX<#wCW@3=842qr*&K}&gyuuKLiMY?7~B4ZTR zs*Yq51XT;S4QM*z8VR?uq*7)$p*Y9(pe^*$5U>v@<*8nNF{02Onq;3<+fcM1oM4|w zMknC@$u8GKrR~w~-7?ky;EX)TzAZgYM@^;wjpGq6M}Z7zV@Mq9Yh@}WRaGNbp{plu z)6pFkk{_(sLiL~Fs(F1e<$m`?F{8*i>V~}-fWmqPo?l?VnXlDAEhuy0zXo~6-XBGV zVCD(Yb$Ou7pmE>1GfQe3cTxTN>p>xzaNV;o3g}9us5VHjO44Ydx=f=BXQiUz8@9NS zcw1fb{h^?U_$vl0faH-TICD1_lFZ@iigs!ue*FoNc@s6De>|j;}|8Q2ygvF$N%A>{^m2ILZ?|&5;+uN*Xcb=S;5;6 zg?2_WEWVcKMtXLoc^h8y`NrhAG)MW~QzEOX4!4FwCDe*@`BnGy!QhlA;XYd|rmi^WV|Z>grm(bBw^ili zBc-dD+VE7D7po1nMk}9=JiX}NH>v)~FFf0H9iK0Db#=~O2O5z(et0#T3adB??%fG* zFd1kadC9H-$fLB=*vhq>3xJ3ygDh}?22Q}lqYw%$byB&Z9=vKiRv*U6Z3(#+JI?o< zrT?zjy9gZD{Re-MA;yj)2e$vk#Nk-yv#L)pVAcIjnuK~`EmLn?cdlZ@FtQL1ucLn% zaBLL)V_c>{md$XgBP}X#cqi~+Kp^%`B38%bjWbbo*Yl;5Oh_S%-bd8%mA5}!)+jL% z^`iI4szck+38*z z7vveJrnhB2TJot*qh^6in8)d^Q=jt%l|TYta-t)C_OC)A^T@WgW#3?rw=L&$8d^uQ z3Tx#$7Ne3=Jq!?3o+||c5Q)S}iO^PzbvttL{XIfPv^73ereu0&G1_n17 zgx0ln>YluJ{dSaJhGW+pa|;ak%ITICzRbf@uFGEa`^cex2bs8kRH42E`#l0`GfcIb zeLo%TvbmmKFk7pNW|^M5a<6)bgB4(ygWF_{(@PuMr+e?JwDok`O0&KWdrfA3?K8uB zNhJ3JhChCn@yn6rV5Ur*kGGt61X)>T=0NAiqI2-+OK~u^kSKrBTWi=sTVSz5`>zEa z_lhy_hyUi&ED(F1F#Mw=S+thA>u^DYG@katW{T`i$g{49YM@%DK#CUvkZu6;fk-q+;_$tDeN$M84lom6{ic z6+kL0`S(|@hj(l)7`};*LB0>$u~XB6%F*8_V?^dUFwB*&*7#(kO{S#07q7`(dOuhn zJ=H4ZjG(BcOuZuh!BU0{6K=8-)ABmc{4j*WC=`O}|NN3K_&zK(!*pFf&jLSiinpffVRldQP3erF z?xDae16^I_KnAyuSKSsr!#9vX>%>!;vY`Q(vY~7%NL!1l)ZS6&W-cC|mWEH^aeET8 z4q&i;O>H1*x6M}sV?Ka!Ev?r=F#(k>WyN^Rn%h8ule;dAz?XGg?wRty6G0t&4ql{E za9(-1KC@GwJ`$PzFI$>AvZce5rryWe5+mc>GCd=(Q{7z6B1=O<;}xz1&~N43bwIF@ zDut>+ErKz%G2;KBEBxEOqS%fqxob2~TkjLmYqwi3$vA)NngdV&IxbrY!&p^mhr7U? zGb#Hn?z)&>mGi{tW@cruu^&@of{Vh(4AJP2^_`23%4lf8Xfn4ItT+ zHuPO19jj7p(DT7L4CJUpiy@)4KncSQBoDUq#ZahLs^7eh=Vq=|W>(fsd{Vp9tJc?? z{lmj~rD^~yjbyVHIIxeYMW`_#B3xe;SKV9e`5rjo_oU1Hj*;Qwlf~x_{-3xAG5#E< z|GM2McA(^QVxV*T55DFz!R0{)kJYkWKe#c_m#f=vwdqF;tTjLRM}++AlK#B9q0g8u z31~JogOk7akdN#*rJHe>+zniLWqQp$LIka}>w0P@LaZs#JhNH}=roORQ{3 zJo1(et`G1JIL?c$I;Z=K!1J!G0sHVoou=j~5<+dx@732@Q ze5Fyw@#)*e2Ktq;Vewb8bB~X=+Mg%->FiN4_?Q9(O&NyhoPH%;EtmlL@THAQqz zmv~A;e$WX>M2FW?fc5{9hF?2hLzffhUCkM#+*CAhB%21%{ zoX+8aiXC{hpraLx&-|{aj@yL6*LD(X8P+plXU@DFCJP#i25O>GroT2Ap$+8wmk;`i zdH#gbKSAS!|3#L^YW$$=)e7zGI*0cfT#2ldd^sJjbOr{45#-APL)R5^@2KPydDpt! zwFBl7tz<4CbaTOGS++h?_m-9(wTkdiWV6*C-;)06R8t-R?LZ05z&iD0+$UvTq6bG; z-FTcPN=Ilk3-FR5qrM>=N2Hj7kQQ|*n3|7Bk9tIr6x$dsPM4*u$Y|7Oc{@SvZr-h! z=l__4UzN@(iyOTe?I7hkgsy8$E}MK06j9|OCQ0`SrFe%!dzdU z>bpg%s8^pz|DO3VuNc(3b4x~=9W+iM*_?Q0D}`{ zACVFQvZ9B`H#tv`36PbY0)1==#5Q?Q5g6r0=$yo3R->3CEDg;6$tra!RfK$u*qCX{ zccx(n252dtY~cEYT3?SPLpLr08v*(!`k6yRmDG%kxRdxDA_3Tfs#$2nZY&dSqGw%{ zp>`9KXET(Q!M{N46bmDWnPfF}PCc*0mciqWpINf;(F*JgIP7IL2 zaYS(S8L1ysmY0{y$y!-qg#4_>TcZtfmhOt?SW2HtJ@k$;b+PPCm@@}-s9jX((1B;j zZ2=$3Xf}x5wjC-ayWoh3Dn2nD^`h7s1R5_UuF>WN2$e75A=*sZu7I8+DS8jh<`2jp z-pAG4GxoDqS`v^}B=Y)2!eek0L%{2QRWJhYYnRgvKylDc-3tjV)nCJI()Yg(3UN`8?vS2(A(SX!`YVgO&S}%Ua?~9%4G*$gJEOX zbCj1YoU(Mo^`=iJ(ynAxNQ+gveGaXVfIh|d4V2&0*oU%gHO#>h`Z087Y^3thTUPpqOHBt%9ndThlOdp5J@2L9SQk6hgtIE z*-Vmc0lPd+=>@&40@tMdI-?Z-4fBzw!lb=4x?i^42T~((u2kHH?-Glfyt2vwrS*=3 zzo@yEmZqGhYfQ!F&e}2&;WFijZld1SvrHW4TTLHs$iD;-zrM6)1bs*ic01cE-Ly8b z!d4AJFH`&UaLRd2h5=970-)a>NxhWvmC@)t{*y=%tz1+}ekdv>dQa$0j5jG^MHJY; zE)G*u)9hDw4}>yZLz=u#E_ z{rRIBm>!N3avfdx_IO>Eq3Zzu60<@HG6_EkGT}|wcu~Bp(JO5eh~E_iM1I4yt4~_i z#xG-p-e}HC+dmWqgh0IJyh+*?iLa!KiK9D0%wnEiqWa9H$ifHn_#p_Qi&BPFS`pA( zEYi&J@}oTT&EUC->dBKwAIeh)eLRu`c>)*f1J~)o{9E*>DlDh zk&=?W-Mgw^Yz#9S8XAgu({MWxn7r4PS5k7n-o!`(uiOfVS1AJm4dFUOK#q~xW(^Qu zbQZR`KaaX}zl~;5R%=;_E?6~0^UVTMAWeZUR9nerS9>1;AT7IDQttb05{cEvz-%Lf z=>qBwfIi}3>1~>O(bWn%fy?ZOQRDd{-Wy_e=?ay9>^uv)ktB4<$SzMTvvVaS>T1Ts z_A)`CIvN5Re)SD3I16JC2FsEl z($hnau%pb0w>g=`|AqpJARyo0xOSU(dq!x9<3HKg4V|0N2w_idsu=zJ8&pKB=m3Ud zVmxLJ|26etzBv`kPA2i?gZ(c2_dwH6*E_g9TG*C9_i!k3gb-kXacLGyLU?9pG94;c zuMohPR#H7x4PpB#YWVrikTMnANd7CTI+o1<>*CI;Poa|YBW{M>pT2F}C20&Y73npb zM?G#{qCST*`@=48W1DD|coAcCqb^*tDiqwTXWJHx+4Jp&jj+9Mag+1B$VK8!gZf63zq9Y;150%A@Y#=%1)qJk#?>8$oPm?K$1Y|orB-;mGLnIP+ zcXA|+xKr3(kc$L4jH(MV@K^!FCO6;G#J(X!3|k*Ge8E5sy$a49ng~m=0uKrub+P;! zn~O6pF+A|E9JWNSqtP;?HLAJ}Ls{c3OZEetAa|LGhze)cLT^~fc5W6x&iqm{NFp&? zAt_-_zEq!y0%)uX&;Bmpx%1&jAwb6uDV^N^2zU~#D8lo@>fOQoCs`_prnUBM zMa{5FtHKV2F@+6Et80LJWk0W+Y75Tzn!`W*(Xa)Q<+&GpzBmYMVe&Jw$ki3H^x5ud*W%9e4V1NK`wQ?RRFuL(VpsVqaSt!)*XYdLz=ku!^^xTtM0 zGSGa?Wdzshd~tNW^IGB*ctj2Iq3Gt%Uov6Z$?i_c~U&F zv59QO2p^oy-K5JAMRL`Zw5mzvjZQutLyLM1z8NFQee5-;q(UyV3(%K~VU;Ty=<77K zk`m0wgm}Yo($kfq3ZBCLOQ7Npjd-C^<^n(x3#PkQ37M#G#by99)!$X_g-7v{HIn$O zxKvFQ*a75)$BIzt*2A%QkihX`yCu13v1c|Vi`a`0ho~(ZTzFgi!8%KLCne`P#Zs-U z6oQxyE+D_+s*YH#NlK@^YSnBnIPN~Z?qbz#`|e$Q+RF@cZ%hquG{HFR)R|dxbMw;# zEV&U_p+!T~&Pe{?JsU*;g8P*I_D>-j;p6Y(kK3G6$?Kt28B1a9R5oh|S}jGb$7=@K zDMn`o!`n+0dONQ&zL0$WDY&6d2{hs4{^=~!Kho*{RTCStUVcQmc+e|c<};91Qnu^N zXbu1ZBq!XS*P@lST(84LWU`N%y`a|VT&A+s$&QlN!|QBM@CsSg^y~<|67HW)_Mw#= z?LPGr8@t%n*Ioyb%D2O|V7n&)@MB2Mh23i+qU@_l(Q^_!n9RWrM8z%0@mEHkNcRWYNoE96v$}Bxenpfy7b9sh<@@V82*NTSd z+3UlAJ+=YbvdhVL>m`@BnnQCzd1lCJ-xTquPDivgNYcb6M_>QM4ZS4VwG2V@f=o#r zWf{?gNsa|YLw-D+o10w$#Rd0Ekk={Sqxl0~fD&!p!U?1lfZq13_vSnazyQa{ylej^(4G9 zn+E7ue})J?bSA3OGfVu^UApjVmIw`z+6WzWj2=1 z+0JDRargZTPplzv!?Bj`PjhghA0&~Tj+fM1P?NFg4X04?u6j>wZKYdYBx*I zQc-%=n=;pZm;u$o-ak|ekHUaVr^AzD^tfg0k|xB8@#50r+b@gS_Y%|(zy!D-_kXl!V-=l6VI18VjlrOnj?vV3!i+=*O?9!)-LyUCgvCw zo03TQ#4GBRde1g0<&SjaLlF*hieqN)ImD+vwjZWA7H7bKbvjun`GGuFk(niD_;Dup z`+LvXFFZ~!B2u4gwZF!hCQ0@xFZ<%oGZUNfPF6nEfP-T3r1^Lkv(TI&ynS zSUK-x%c!3N9EBNuDa0pPV@NUbgQ_$rjlBBe5voAys+XDJn^c>=mG74W5!ZBaAg^jt z?keaY-xE36%i$j6Et)geQJxXGzx1{w3SzF3ofB=y4)@)A2;_--k^eBCD@V}G*5l%f z$J}>+0!nR{#z?1cG1NQWyRHt9ce3~yUCreBVLoVPogx{oQMyUD4~E;aUWj_^ zLm{{qW@M2W4Zbma{DYzJdC)$(#7ZX+ageM&`@A=qZ&2^7*yQGlL*$49_>N2RpDX_l zYyI;*wEb96ZGJB20?YLRp zkK+l5eD?=RCF?VM!1e`6mF)%#1~=)IdfpF^Rd1SlBA>PehAlX!OAumI47W%;=XMT& z8CD7U-xnE@?MU7Iag`XETrKVw#Ti8^)@eS02#h) z!%jm}J?Vd44SDu_!w*hix5wUY>>~ZFWQTU+6BZ0)tp_+l*i)E&vu9iTUA2kq@lNfD zE5scAy|-Fb3L-9Qkz@^*qD1L!q6`~Ky@C|47)6$l5^NCaj_YQY_yw~;1c>1&*%vEJ zcb_C;`{&9ldD-1>%N<5Jd|FXbq*(fN&-6dNen7Tt2 zllF8vt!DFmLzhuQq|V+Xk^r0I=aB)~oAJfXT|ZEO3#y8Hv;;&7Eq%6gC3V6}8^yrq zhh5%y|M|>+topB|8!u2C(X1}y^3J3Tm`hrTJt}##bW!Tm*QfR@q|dYfBd0M__@%r0 zVdNZrBbRxDHq`S!R=HaYIS-eze0?humCEA>EKAYX%cSL ze^yA+hku5#%Cx|;*c^UzFk}K;a@ElK=vNMIgij7c4_A5@qHotSf3>P;)v29#Y{n?8 z41;OPK-PdjSS(FKY1;!Gmx-y(LnWxtN{_@cqtISwurx}<*T%ytrp{*tQM$YV)@?yy z2v5z^`=!_IC5aTg^M#9P?ljEWdd>hrQXP-d0HRWF+s<$euU3-R8uScvD_)nir=-%w2u^nM+a)5{}< z@8ibi-;+hDB0E`B-o0#i7TGN^e<7b?n@Nih(~H>i_FQk3I8D!dw-On^5QpVDe7INz z{x(Tc6r1fnve)#_jQ)S6C;ll%Cw^6IQs&-{q}F*I<{P4Y8M99&Pq@z|&9BI;aw=pW z5jG1xwWv4YqP*EhXi2V|W1A2V4`02R5|Glg93vCX71HCN%QX(KAAYIZe(jd|;-Q6WEEg-0LcS-lAkuK@(2BjN`O>Efk z-P?17^E}7%zVG+neR1vkX4b5k-^7|V!#-F~TtMVDgO^&muU+;{=!3fO&Z+jH&Fj;N zI`2-dZ#sh!4g8J?>?iBAP4tzrd^mAAzDEzQ-#xu(0I4nm5NbC|#ZLv{+lc`Z!Uq>_ zD|tlohFJs`^Nf;iZOSf7UY^)5b_?rlqE0%B>?Y4u)Rx_noqV1;tO_f;0h8s3O9h;2vf{N~Js@jX(hWCf*R0&n%*%{gDN07$?X79v#Z)_tKehjE9rsKtLm~!LO zGnL&7YSlk_rLfv={Lv{>;Ne%&n2%2a=9D}U5WdhZvgvT>_o}h{ylDxCYsb zP5-j_i+YzD?Yz{zpfBu76d^=F=bbGaEUe8(9H|02I;l!=ixbAzd(#R?`(uf2>3K8G zZbQJ#Wm@-|c4*=~21l_QQ?)Vew){zo+9WSfEE{nt&MqM_j( zN)|@Dtc+at{7%cKMq4R??ErMu1cq|A(!_Y}m*ynR1rj!C1xQM^>%46|#-#ehU@5yV zEBk2Z`dg`tkyWyv>9|9p^ZJfSS(XcRLS|divV9GR~y`dqIa{D5J z7B%L#FOp+wt0Q^xQbHK#w~VD93JqBVW(IMvB^0F`*xz#fZWq0IDg<9Q*In?jLJ-(M2DvtMBG` z9ZR~LpPs7kqIq7ysihEHS++LKhgFbqyWJW6uyuyP~>+^6$ z`l)tverQJGSna9mZV4Rp7#TUv;&K~k`N?bByS;Dtc%$jGEAsG1lgFaE^OZb8FZ1Gg z`uLuyc}!v`cc=L_8V{t^xg;i%Cyj-otC=7JgS;&y>ZqtF<&^lKyheotDImNRw z7KR7HL5nA>?DkEr=qtpU%)j$+ZbJ6E;t-cxtI+Yhjtj0ckdAd85SZK=-`_k!QCabMl5uNo9_-uV=RvkCBrJRSSum1U+^KH2U0a&Ut(n@&<0 zd+w%QXR}xRm=apewb9z79^zlW(vfrl8(Lh3+h~&Q^BjK}zxuk%(KRKG^?AD(FxGR| zH6V?e8oHtDby-g`#;X$A2vHHU8rKPa2GlTQPMehxg|e{o@FHebgnmp(qAIS<*wpsIFzwnoSr73 z@0T7K9^Oj=f#4VOk|$ARYih7`180*pgkz>uvEiq3KaSF zD%LA%wdpLG-2^l$8|K^iCfwvIzcc0azP1+#E3tGirEIcOHY$30C`J3(G<(Q_B^APMJ0s3>mMa_?&9_O)a_ zPXB1z-CEwWX&bS5i+vPRhREB<>Yq>E=u|)p44bhhpe^Qv8P(O{CchA)U-s? zeh`A)-I1BvafLWgw>!m|%x=BO*F4T@eCtWG&8!ilQ>R{T!{9p3yq2)1+|vXO8hJ)6 za07?7m_ZF4DNFofV*IZ5kAZ$w=(lwWV%e~KhP&nz)^Du8fZl_ssMu~%FYqFZwS?mi zD(Jk^&gDn`wZkE}Zdx{pw{6R2e=9~qwo#5NA))9Bf#1uU?)Q%0jFBiC3zUS@p3DUwW#Xq%|WEII8~HUd*9~5zS6EM_$1dO2ef%Yd)f|;(4nGE`+dA2__ zFTb+BA*en1doHO5cel7BwtTqa5Ua7fcFjTBE8hA3q28DfTw2Tym98^HtO0qEml;Ks z!mvoQu3*%jOWyCCYgoaUuV1}boo1JJb0XiM<7hXPn`b!P}=5*`AKX?jlVC?O?8`HrTN#Mb~ z5@OE~>mOZE#97}7Ol4#ZCNr?Q%lhZe zqPVL!hm2Pm*}IjA$2kJmp9`933$9LrD*YEa7fd{)pd+49JQw8}$&Te%8;eIEo$z4B z2J2NXAl~Q-g2t#az8I=^5)$!-PRxK0Kd|yG7xL~8-8J0O4qP3dB?_yeM^$z|K{$z7 z20^povCg*N7gcVL;l--g1cq?G47u!BRp#Dm`{mta(Lqnr*XIkJm9|fwC>OXtSErd<*b--Q0 zWBwg$SHySx6DPpAfyE*EF0$HN_7wIMShj14tUgQLpC-t!O9RIOD?>;9Aj=&Z!WU~j zej^j@XI8T_hKV$Nz!ljeOYRINolq|JRj0ODN7qI+jy00C-)jcrQqX^7qNQOr5W@;0jbIZa|Ejq&GSHSk3eF7*(Z&=th z(IKn}wY&!bPGq7Bd!=7waH z902>;@&-%)c20GpU?M)v6M9SDkhimvaau>ksM)}~}(Roi)j|2m-lN5L#CrBhf63-yLTn&u7f-aY(s4|3Y0zz@law%<7| zj&b=wWLi19o%pKhnZUfpzPblg5HOGh%L^_G(aM&fQ6=vyoEN3q~YSxU|9E&u|{bvhw}Xa8|^wlPp=sY<$?6&kT9|)+nVtZNLr}*=zse7*^_{j zzx(c7vP}XAzhry|ck|`>v7xj7tVF2GUh?-L45*@CL-IyuVqhj;Y`sBV%Bf60OIc91 zHiH8K4JfnX70^sz_Bxn4GCiHt9zkef57tS!_~GV`Y4z3i=H3C;T%E?@{@17w8!a$^Acf0fc zT0s1$=k;LfH=_Mcz#BQ}b(1Oo4t{L+T-(DZL-9Z+PolS0dSrB(8jCf%2XNTSi_41| z(w3TtdJYt^g8ZJev4RHQ?=+ao7SE7fWfG>nd?N?&X9ss#iD@-7P|?E7JStu_SZIFL#u&M{qL z;F7zunaTEozuT+o=$@_zZ%t+zHZp^Tg9L^WZ1oRt(gpZKsQz|!>=QarbIy!*5C3=l z1fJ=7Ydz!_z}oa`d^h;62<=0&0{@v`{n0mrHe1t>+mpo`)xA|>at&D0iH}cY^;ke9 z7yx_IG|}Gg^>=m{bR`73sylaZC*XhfHD643ntbw*K4dapIVIUr$~KmbFQ%|gl3fF3*^!*}wnAceOh20CzmmHV3FZ*Kao?g%(Yz55)v_W_hu<4Uuy?84562Gp@Z zF=dg-)G6(XZ0z3%22pC4t!a5D%QGw8$U6CRFVy_6`Q1+MP^qXfUR@_Pnk7ohiV?%V zln*n$SNx86>)H;q>f=M|^G@+j9?eT60{KjF5b5(*psQB`QRynKjIZHGgj~zSoyrsG z&r{d?2J9i6gYlfK_Qt2IjeUHp7ZsPII9%&%W%42@$x!c=*({K+X>{HY2`FdEA7eY}99OlX2NDaP?A1ml*+ate1a zjxBlymws93zXL&onC=`xRWz?GzetB=wId@JmT2C4fuqaz!!g;tuq?*w0*p~ssvG0} z_gDY=+z>as*wEkxmvIyU0jso>iipWGlLQQ>b^N6Q5z7v`p5(&4pf?hqBi(BIBag>5 zQ$C-pC`-y3n5Nob8pB}gJKtX+NC z-cFv%ZuFHxCmt*k=WIo_4lFO!wJ^+oH;V0#JRE=Rw{jqWRAW7KkBWJbaIFG|W5+B{ z#ICU%x`eIY=<0;?5gFKKIHA{UnTbL0(8m?;Z_{C8+V9|@Gdg#jeuE{%Lv`>@XZv>z zPYoJLg+zjPv=ElrjF2tO&7x!XzQ`_o+4nA6*N3}FY5Z=rvJbvQe4JkgXFaH^d-egz zkQ^Jf+Z!SIv#PCo?n3V4A9oXlYa$mL$m%PbNmHzSkDVt^Lrrp1rpz53zXT}1lI@>W zwcL$w8Q-MY+9X4|&mHuKom%13UjoH14bjtw71W}S9Uk9H#-dc^K?KU_^R z&Gset1(3`;g)&keto;Wz^qfPO-}By@&=kd3zr;9}R4{&gBc1}mfGmR0d3tZzasvks zj?KNT_%Fn#H^Z)@hFP=0TlRJ@?7hK(vEAFJ3ye0<@1Ql`kFRbL1GhMI^8~4VN82(b z9Zrff#aoCL%Zd>gPnk_iwMVft#PL-Hl~cv;J#QDzT9K=Tx3ELCUP2v#&Xdd!u9UlG zU{71&FCsMoG|hQj6q5qZ?{aFEq6M_yekK_ze4dW)*s_pPd=J_6qE=FRNztLH>6?qe z9pAI1%oI7<_9mYuLZYV|sBCBJk_xi?xQGxl_fNt%bmrFlfe2x5g15Z+%MHCi``lP0 zsTmKd=>ueho(d2C2}#+mQmK2`&?6U@Wi+(j2ooJCm@%`C4^Ix7d&@l@!|z!2-eefDJ#mr|a??+4a_@ zXL@_aG`%+J)_W|wOO5F?U#gNC-3BC}n@+0wye@I$Pd6e*YR#pY-eLdd{aY>YHuU~T z4wYDeP}*dtkg@!^@1k$0oi~wBm4pVOpMFNDd8s8_;8&2m^Q#xYtj6fUp3g(^)J#zJ zaNE57j8Q=+Ao{hWZt88^^KEV&ui$HqQRwsaI$RbO1Z;{-oaS?pUDad*wGJxYcjoo` zeK=pz5-d)Ci1av#ILGjw3yrs6qyO1A0h_cI4y`S72%`9qY;fNnH-vkuBZZ~uNP0}% zCP8i`VS^TqM&7Hp;Uuh^=sZkn%FGRy(@0;3(>0YlN8+o_N$Ymmnct*gcR8p>1moyp zj5{TFUFe$9?^vv=zO}=qv`n8wkW4YR`54D6e+vA{#!qb>vVC?ACK-QA_ z@PrcR?W4IU>-u(VrT7n(VXR$qM=Y&7PRzBmwVnK;p9xcr2^MBpeRDtBB#%|3;6o;J9O=rfOg zby)q#y~^P6z0v$@O<($@%h|xQoX4dCpVdBOiI1oVfdy2$n_kNXVVWbH;SvREnUpC z%;w=1WRb?6SiL5t^GvOQoy6bF1LLc}l~1@QQq+Akrv#e-^m{BP1+bwU3Qi3(>8> z$vGhT=PI8z)Ae|fac3mG?pl$Fr0RPi-L#J1g}W1#l-H1z@&IVwvqg|@VJy$ZQyP|p zLilkAwf0eMK=ow43;xT_+>V!Vv{On!PYs>nMX+0gI}3iCeH&UB>S!I=yr#2Z0lc_C zR=69&(){7bHzpsYX8m3*i7T7m-2v?TJRe<~XwZ+KWbRWfHK05{C-^oqb0ZRe^AH3W z(TN55myzS;(;Z;T!%fYa+eC53L&qN8nT--u6#F>366KERR*+IM0=RFPDS7n;U(A&i zU+KOox3Dw{2&Z0h5;X)ZNHMjVBR=1H>-_oA8j=&%ylsn}ZYE}g-9wYK>c?EtrWwwf zwdyXI5oxJ1iKe%Zg@+74)-rPQ;qQer>={#8seDIhB5?+AhKb(z)&2BaaWR8hol|h3 zc7ud6Fl(KFfMCzM=l8GwS|^z9QFx|K!K-hs*+G5zGH$u>m+$u~3Y3@@-sGU`q4zgJ z@m~48e<3Z?%~4vtg-EN&BfYSp+kfg|%vVLlq9^du`3*lhy-40Sr!aX#v4@T91D2+; zag0+c!7u#BH6Nh7N5D%rc{UKvMLLdWTVBw3NJS>d-yP?9yG~8S$C$@DE~}iITRTw$ z#e1!z`p`L5oXk{)EuVEdrvl8CO-TjZ=a#t-_qX<9PO6-=KuUT;Y2GZRL&R?9dwcyO zW>9^b9B^-ArKhfu=e?5F9?fQ+5f2?l4Svv!-NBK082HFM&EsSJRXs2Thj6(u;MDe1 ze|6#`qXE|b@?LvS5xPz>0&R3yPQtLg4^p66-CET=D{?bK!$-TWMH7Q_081k|%`HH+|MKM+!Mytj;m znhj_#9Q;KKGC42xU9#(y~ z7JW+Uu4;{;k8q(6r98c=a5wyHDN@3#N?j}pOv^<*w`~`N6rOT-xO%eleHaAs04iYXjBu)y6jF^w3lh~tEqFm-Lj+uv`l7C-s@4QtkkY*H zGMQR{?CbJFFKKeF3BJ-CI-&72^?Vw4n(hBFr{Z#!yvv*+>XsUqzc}r5y(b!saeQQ+ z<=Ny>E|Fe^;j2;vbn*zOCz~fQGM2{4v6C+EubSPs$Ojtny0Y#HQ;<91Pz|hYZ)8*A zvN}~588yUvm#H_XPkpyqFw4ezD)QA5b13lRK}S z3&Dd0T>=}%*HH^^3npIJWwJegu5LS#cwbd{tFmPxWK(t8I`Sr&+Mp`F)3vt2&xw4A*cI9 z{4PBU;{__+i8hUT(3jm}llTE)X+)i>INdEZ?imS5ln4e`&UG5s1S`Qr`rew!gtQU6 znk+4(%7T%(*oEnaKD(;-q|?<)0wNHr46xWfnYYkLP)_YhS1n6>_`H+}oTSO=b~S0sn{5oRB=lCc<<{vJs1<%#M*+kF9sEYes_bfy$4hXRzw&Xx#zohnFK{ES zHbki+xGASvRXVvg+OlpJ<@$i7z{b)l+%FKj>mz#G4(Iq{^3mC1%jK1&j**vyh%rv) z*H2Z6dQg13L4E}Ttk922^`Uh*wACW+(*~8@t_)oKp@YKqXGcf{Q}}@wG%=l{pMYUj zRX$2|p*fheXrh+)3RDSY*HHi%I#3aNey}JQ8r-y0xmA*)L;vH0VguidE4^dVw&S{z z@{%uP3@9xsVQGR>{Yw*mnrK6BSQh3 zUej=&xlL*3eB_cj-z+MqbdMe^r))7%7!Ka{O9Ch^{3pTZf=QmnlEI>sAzK$265ACF0UC9a0)(6G?8rU^mT1Eb?df!VA1O?w4J8a zj5BRJCZQKk+MW>xRkhK~bo@=c5onvl9C%GDTOieq!NYg+$09q|(_JcimKT$^+swuQkl@KHQ=)cB9@LXPQmkXL6z7ZS2@`Z?&I z(feKRDLr8oX)t?dP&wn;&wBVhaVU=~tE+S`MBodDe3M?+BeN$nX`&TYbI+_M5Jcbe z9c$L6wfWH37G$>O%5O>EeOj>g9!-Nze^jsTdF;_G&Oxk)21#_%iT@Zy)rMgnG z6ua!I0}bbJNG~>TQ#`+W0;W5>@@br5?oQ6qtVS8v&koq6F&f1pjMT4&F}TqK$kq6| ze+FFNbIQpyh-q6FJOPRu`$sM4>&lb6yPrr?ON>-*=6@R6<$!dG3bn2UbUt*4+#j(SsJ&bJd>rc zw)WELz6-_7Dn123sBpwtVoRF&Z=`rX^KLj@Sln|xnf6lGL6*(jo+tFtS~? z0)FrM#_l(3sDE4JV{|>m_)jkvEm!b8wp--Z~r00 z*Y^;zQP{o~$?wpb$=SY{))60KObkQ3-Ryj7-~@)fQVsbgjqx`g-GQHjBNGV?AP$$;rLDyxKLpQ~PM z|L)QZkad#Rz1VdM>(-E>Rt8UMIZdmr_3_D0_R`lMZdtHcObCA-t^d(#U*-v|9pc0L z7i9R0b9S&422p}Z(z3ydi3M&Cg;exVGEv0q#XXXxcYq=vB>;;2@?|n*&WZ+cBOX`b z(32S~evM+cWCw?wOpd1`nHQwU1H?IFm`_bVCXs{x7#vHH7{S}Sia@BPqArl~@lq^!o4n5K+5-zR4GqAvEmn3&p^ z+5=aTofjTfjQ+~Q+A0Mq5LJLj$f@9Eqq(E1tUe@l(RmL?7XN3bQy&ZB@~m@8JY36M18E?0{p ze2lSYbvSYSBJ$;qT+S$Uyp(#)6PuZu>NPd?>|RV9V8gg6RCG-<3i##N@E_q}%{);h z&iuUMO=2HC`O3%B#WUz{qF4rqqSAd6&cFG1w+Qp7JFoNG znX~Xd+t<)i?0(%t%Z@|P;K8JDaMKr}9e|hV#(FZdv4uuY zi53v_ap!?n*SPATz~s|uEb*bifr$9q1>_S05Q!D0cAM$_4~T?=bK3)p<#^+DLAOGkEI6nn55oR>SEi#v!fKrb!?js7jw z!G!Dm_s{)h*36{{ALF7=e^216P(5rOnl3XX7vx74Uc2={auZ|-g~@naHh1OXX29<@>j@Gd(QU!=+fTgWzLE^ zXT|V1kvbdxV_d9h^x8O3X<7Zr4P` ziW_0Ct5z-58GJ+OB(ac1QPzgDo=1r$5hRB4gKi@~if4#j^h6lrxSYdCu;_^6oNzls5A>Mzl;se?GI7jyT%H~)n4cq9i0C$VjRRG_a{%x1mRzt?vO zOatc_vC>bH(%`1Y5fvyM5UN#2V=$cYS?RKSonIe`4K|1AwPfoCnuHY6WYH;%>$Lx1 zSStb(zkiNp8Q8nLXN``_^cxc(#lb{>9kh20TNdf(U>)*}GPhlCt2Z{~% z8H1%WjDDoGG#tE5Lj2RPhBo`7Zf90zwU3JYn?DBJ)=xl!9R=}5M<8g9mIG--qzwwG z_@QL7WELkpRyKfcrz5e&<{_JaZz1S06#z-W#T#9nEpo}U(KU@|3_wg} zu4iX5nSTx+IpIss`yp^gjH`aSc`A2mAQK!2jhA|zL^lc|-!SRvHoRqOG&Vr;NNeA1 zjnOZSY|zpL62B~Ewu(0VlCI$A^YiqyDs)E`^1rK*`%}8ovH`hJ`Pc;4J$+vR z@4eziy;(NBeJo-dW~~-Jd#D2{&0{iue~u5;_ty#o{dLn_OWGa7rest!O@}StSSnhY zY^0L}$4g}Lg_oc zUBO>ZLk0K7dSjQVWcJ2QR^I&i$5)6IRhD6>_!FXzqyO$83xHv6Pne5eL@8=E`-8lp z_)#g1H3m$7Du;{b2@EqFs^ofa9h@Cxb%XPtzo*LnP<>)aS2gNzWE@E@LUBKChbmHB z3Y&)3|NpLXiSQ8cHsdmt)Q+_1(qFsr1i7NxDr#-5vf}{$_YN3L_T_AUT4HPM(GRrN z5z}y3kJ#cyh{?+_V>smRb4$mOex9v{It(|q_?fppMx38`+Kv8sJ7)YzauDJCXt}Qb zyUmV1N{Ju|6sBoe%E&l6MJE(Qh!G~s?Km?5b{IRdpIiLHa~H6|1caqpOMc*|w1kPI z6*Wjt6lp~oKPdgje*6-n2a4Lnq~cB3d9Bg>mh39IVQDQD_esXze^jIOO{SCzAKIPO zs5M>G%}LP5JCZvRGa<`2OnGDd*zEDjyr4tBd)e2nukSXrUhu|CElH_-$3TQ&-8Xi< zg=9;B+QEs)>3?W?nhj!D+G2GvN6ycJpdSEq?}O8BMd^mXKi$MI%%6;{d#&JOZ&&uz zGUKJs{ZYL4E6t)-B)-XbQhJY;4#jYG@t)AdFexDl`D}MoWXcH1@)8@{*7dr-%n-{+ z+c}A1Q>cW94}oIXwr`zJLsGzvp$wAxX9ETgMZhiPbN$Zwvr+RqdI29k4!D1_=>iO} zefeROCs$huV<8q_-R3dw?wBr~@1x1=QQ^A#9XP#76Z|}pmk!q<_Dp%h*g-y*AC4wj zu1AZy~?-kCcITBRN2_PVGz*7EGa=83lYAb>4IRD`nR3 zq!Gu^Pt7&cHuF}QFC%_3?iFhWz&3+NORVDjtsH{xm93+ljMiXf3Vz;s(oe&m?tIGG zL+r979lh5ZLc13SC=Ye~t$&x60K+_m#L9o}Yc*_NXN#Y$|3pkNGJsS(di~pF{ns1$ zG{6u1YG~uUt(YnW#ry_sxI9F-+2cBh$@NFGLWAOl3ONgm0;lJV3u17iJ()AmMFc4| z1}#Y=+gU!@?gNBLiN)WJ*+^4|5hj`7_+S49NOExiBDRPRqA~f|)Sd~8Sa4A>;P2f* z|Kk8M~j`bU+AfDOzfap-6b{FMDL*w#iog8r+* zvcr^I;uuR}<9X5qQ=tU5ZLi@M1>ZcBmrKuQM`Qcx?jx_VeNE;{u?`d=3-*zk>~~-p z748i=+D`!XQ2hV8hf#@X{6=SlEUsN_xIFa^P>sVN-2Dk%F5gFOqlO%j-+kDTj&g!> zX8ngvGl)kWS(E!5hNYHTon!!|toWN!%F)9-B#Qoj4ju+PBnjyuqUUddEGLg~;}^bw zP;g(Aag0ovsL!9I)Ym{f)xLb+)OHj3X(f-1fbU!!j<4_h3yT529JcYvr_m0}Tbfx& z=CEylO>jR$iKaxumm2kDkkcY}lYQ&!c2rK+)*ut6hf?bN<)0$3^ToWz_5gHwz!74Zs*p-n3% zjz&1Qo5WS0hSeef_3QhNEWb{azzvp^{ufO8p9SpKFz+kp8VZfT*qX^_f2%x(41k)f zWlDYg#myT$_Yg}PgNH)1-E}A*F6Ir2@iqb@8)qQusho@mu*E?FV5F`}*vs53{=Y~K zxd*`IQIdpa=gh@Q-Ep93=3U;GR>PnLNFv*Tb&U^xw1%qRbJrT>)D zV?mhtqmU0~`_A`Fn^Vmf+4xb!vgB*;`J6ZwVN)5DKyDd{3kI9IJQG>oWC7m0^YEAGaUG76ianR*W5P@$&#*s zn)b`ZV}+at{afE^5~!Htc`U1ej8ptny# zWj`ZfI$jbmdT;{kELos5695l=;gJKvLxi~P zG$y+5l_P8k+cZFB)EeFWv{IS$>YutD%h&FQixNfVqodTTsvu@!(4%31& z3fEOK-g+95`bU3yO>+M~&IkLpJ=n(~rv*!(jkVQ9P)Yvvg?Y~yHKcKCD$^68?8i*P zd3Rap)9DwaKQt>U9SvNNjl$CS9VL77O>h#QJFYC93X6s)UNdZ6db%BPf%kWf)T61a zLKpOVu>CH2>{OI#l@-4=vUCwTe|Sa|p{Ly3Z;{?5D6?D5 zPf?q%8`S+=LQNX;girr{?!FLsYHplYG$kM{I5 zZ95JK$}9#gZ_Nc3_A|;2MlG&I2`(L4{E6x@oOIKjr#UrMEc`PHg=ek+@uz(50o z&fv3}k^fLP&W@i< zN<-Q*$1B8a*tbE6YXFt;b#+j?_OCYwZ)vJpmG@7~AT9WK) zHvZhMeWq?%4BM!-Dj+q3)i}!`+PasH8th0KHoX0%<~Feuk_&@|YAV)W&fR%^6GYTb zm4gUIaPP<@9@q)K#uC^6s5ftXgGjc)64jZZTSFY0cN1 zjg1UTOS8BhKXcQWpXeB?ODwV|hEmz;8|h$V0F^fSWxgf(HU*U1CgV@GO=5o58ma5w z6wG$eEOgEXMr)8Y2EodHCT%J^T&uU&mbiCo?-ppLSVIX!p&rz-UY#vHmz22(1=id9 z14lSxR|=9B`B;GcUzBx`9=iV8$xj2EjuoIWn~l7ZzkaCbUbt8yIJZxE4IKCP05^Ip zoNX${V_4kJnCjfSuHD7)@cgG%V`7xgp+r}vvE1BTtBVtHOBsMeR$&qC$^bUQ7A10g zWm{Kf4Rx)#{Gc)e#th|G&X!3|zp$=bHaT2yvv*7eLhNH{@7EZ|zJs_EQy|$f^&x0I zZxf)XrsGz;ILWEL>**6zkX)S-MKth!x`na<7MM4S5BdP;6K}%}D}KaN{!bw}ubi2I zI1l%qGzB^xCAGK>yH{?G&MPMt0f6C-J`Q@WcFo7q0d`|Kck%R#-kfLh;8IqNM~dr| zP95+t%J+-TixLCsDN~=$&D9TF%3%e3?Rkn#YfpQDnFl^P>8}B5DCL#yO4e&~!MtA> z0JxYc^t2$mM4w;&x;}31ppelZ?pP0$zZx5?KCR1)aJ4EwJ8kKo=)h)BOkJ=_*Br4E zQQ%NNRT|9=KY{Bpx3ahAE38T~pM93xKf!O!s9sNg|Fe&Ov65(r<(Tr;;%p*)0jhs0 zl1?{4{$&2RM;77ygfN@*5Za)-Ey0U?Q>K#PGCZYvP@zlIxT{dX4Otx&4>W8q?Ys-~BEU0h0AD<~LO_IgqHo>Wx*C|RYdRibP1k;; zgm`cgsRs>G#mSFJipvz#PyOv<3iHk(H9 zLp6is%{r6R&$BU%IwU~hQp2A{i54(QSMTn40Da4;oe`DS%>Sc&jr>%JQ#tu$pEYh! zE?(@kNhc5M@Eqn#X+eSVP{4&kjH|Z)tqV1$^0O`!dyn>d-%AnncrPqciV zNQuVIm$s6&RQNk}py!(x`Ajq2uG9lDhZcyKuhg?N)sb*{@lgLiir#-)`$UY+HYp`vhaBAkBJhnY7o+Rl-Bv153GY48%=b z)C@Ber5|a-({zUNfU?z14cSP8P)-S*fz!2tNC3^dMfnf)=AC-2oO|kBj{a0(Etm>l z6k}8U?mpAc;4(K)Kq|shQ~!0ALeD6Q=Kn7^K5n)Y(!*xPd{hOkJ=$Zm%$>4-q- zs48%r{HL4%L?9z}KZfCkLhnl;Y)x&lXbt&~+zpKIG*94O4M&|a`36qX7KxzF?(vvS z>N8+0_z;eBIk;B>3c=E*(5bSl(X^jOtqp~N4(tr(;sm_@&+PS|h%TT7`)|IzN-cfX zZF#6|cDm6Oeo0B>RI_3uJ!e8&n6Z)%KX$*CB}|(A_*H=d9{BOBWN*hUX{`WBXbPWy zGjN9q$m%TieS(MjC^V37*wm~la(@3}@RD&am}8L=8HWLBHv^c~3`v2-uKNl0`ZpZ7 z*`uGCmo)2p`oP8B_$`XTFV;|S2kkSf7nOQ(3$~5Oj&=#=HmoG*^-hy))%diD!AV5sdzv+ zd2c@YD=7afr{WC9EDp(hu5w|nEI0SYysgB%&9FjypHE9f3@fFBiMFA&E_dZvgo+J` zW+wtj?P$}l-5xh~X#$_`6OaGr%vng703qfvzCUW%Ck+nx;?^=3tC5KrEK`t(5Ie>( z+LRan^tHmp*7BUo|6}ai=UU zGb`sqOipu}<$T;0He)mUy>)lz^ZoR_e~<5f+gkQIT*v42ysmeWPfL#UL!w=cA1Oh0 zbxI7u$ef?W0QCrDnoE+TQOOl3;4!7*bEs-5qB+nXr-lWvPb9(8Pv_sNF8!Hmx1ZH3 zvYzi6sQ<)%LM~}UDsM!JGap@}3qPjc(wEV86XiYQplj=|Kc#jINadmICak|jG3^4N zNdJRw^v@X+A3v=Xn$Mly>T?;g3_ikt)YoR*_hGW~_R>u8lK?Y2SSD94kiC3iT|O5A z!`*?t062p;x1Z4WdD7D8TS?1hbFCg&40%g`+<(p4Lh>X~k-T-HKI&KH;0o}w&xK2O z5t#paHNDee$zz#xSokfsj`OLwYf63Mq;0l@TX!WSZk+U;xvWLx8wo$qvGF!KPE146lG?~KV_YQ75KvrqROyoF5Rh}KmiS#x6g zt#wNt;!LY338^DCB&tesa&q&+OgjJYwfc=9`XDJ*4BWmZS)08CG-aWbMQ}Krr@?v0 zs<~V45@h+~L=0EVF*SkPz@DYpM|O?Sf4y=OKN_8(%jGU!U>-EUoF#W8cmJK6j_ccO z4;fqE!$7OGc)Y$_j65m^;8qt{lmAf1K(#!z@#93VExUC8 znHsYN70E=ju&YX)PJ-}}IC~{lxZc#kg?b0!1+d^12=DSgIipN4`=INP0Ni4Gs!&2R zx=qz~koCGycdN=>x9vOyj-{hOV2(d@ek@=Pvx=`F469`3&7??oRgFz)^msYmxe2gQ z0U2n#`|mW%wz3_`9+9*ET2|@HZX}m9E|qsujk91_PAC4f@z=XT)@iL@h@Rc8w0c zzt0+pxE&cmLmLlVz=>P9^_dVlM%WXVeTC@RM$fjJLfNKcqIC;ZhgG)*#_@QUst(E% zD&SW`_~f+D_?_2WJ3Ajz+y{W29v6TE=Y=Sj|C{C#4S@r2_ni?-l6R4>yKk(++~<<( zntVB5=ZXIYLGXGj8m9Y+E$i_5NWaIk?ZWrhY`&+>>-r1>OKAP|)@+BRrH%q@!C2ch(?FC-(7FOZ!Nfqs^Cwpw(G!*S3ZmucLz1 z*CY5;Oo7J^dTo9_2oi8e1-MJmULd z_v!G*>^xW%jocPO)ULjA8tQpa9w_F}5p#asT&5gjG!CKE*RGE&tBHmZ)wYzSdG}wHOVzNutp1P z5tU1<8q=hR9-|k;yW`G6*}vocW_5F?zbIkRQ=*2zZPt&_bq1IGQ>kN5rCWS4h>anq zI;j$064z#5Dt}}JHXv(=XJb*fhdv5CNft2ed@l`{OKelb7G*OlLwub**7w8bBZ10* zmWh_61AA{$rwYD7VQv&LoO78pg8w?qQB`w(XPH-lYUFNN_#boh&$2BJXEznRRDYt| z^jCt+iR{Aq31aYl&J-n915%ekVrSNEp3AB7=(jn#$-aT)4UgnB*iwGQ%UgFM{GOQR z%qzeDXBGhR`iB6YnX0+e=uuZ>Bmb4sOLIo z%Z5WYob!X^+C4=kbL$hkMbCcB&DeGiSl{D!du^4aijq-Loc1y~J%N$Z9Cic%eaquj zEvoa;@v~itwnFbjkS9%eI>A3T;C*Su|8sbEsor1cDf9p; zcD0TG!=_XN{-~f^Vzc9YcOvTsnZMi?W;RB?5=Rb(S^S;C{(r)~7?C?m477M8X4w5N zuc&PoYFHc!=JyJN9Ul>g!=@m>gf*s*ou#ZS6-yjEs|hZMyYEjjQeqXE)_&T4dEok$ zPR9I~Gu?f=r~&xhBuL(2k(b;$uBYPMJ115>jqX&Utq06u$$snELt3 zc$Mkp(l$Np)>lwl>Ig4`|{u&Je+hzY>D zdL*tcEiU#0`8J@#=;#x$DQ0x%1|!>(%3G9xg&DZ@muErJPwbvAS2l(hlZg2qNYP5r zX5G-m2ThNvrq)L@>4AHih4oyse>5;jw)JLe;bd^todr)zFppc4SF=Dg&4^I34TSq> zOW5NHPe^WAh%2vGQn))Z=L&GyAv|s`{TE(CdfaQ6@YFMlBenPH-ZuitelOpwW={p4 zF;+g6XlHN#b}AfnC1exYK~rs89Pi=&g~6#s0AbtM;r}H(S=j5N)dLpsS&H`K1UG^b;5vzZoDGk)bK(`Q@JurZ+ zJyYB%!J4EG6{VWkCJPxZ$_^)biev1gmTiR}#&em0>e?I6L(}!H+MP;Eu#GY$z zYh4xdRd?@?I#;{}G$$mb+>b!Z-&zDCS4(p`Y(Z2L1-x17E24YBB0Jdpw5|&2iNJd8 zT7Wo{@Dk--x9}iRUB@s#ftL@VF?&%iSkod8J^^Y@3%gcQyC!@Ml zo*s+Ecw!8@Q+?|3hOVlQM(nXGwVO{D@1nn}gQ^?W4jf!e09reABUCmsqOIxs*3llM zcB1H>ak~8XzhMRjf=jr3$%R?4BWvM!#&Qo6dj+=$;=Uj#Lm$K$cnRDn)ELC?M?KUI&Y3D`jDw9Q=4ANLyhR?YG_ zF%kSkqw&WcX=`Kp=XOh|3`=BfiWe^C_NZGY_=n)z~&KgP_Z$`FmHo8=k?Dsi6BMhdeVV15=+$`F)KgdxZPFy}74|>R^=cw-wx{1uwY3RZY(W zbwz~Zne%@o*Sl|Hgd-y}Af3d?UY34tb;AYGQxaCE2Dv2}Y!_|z202Z}goxTlZgN3| zufQTy)+711zMG4?Plk%Lug(NP#xxU+q0@5pr&H+-bGWLl&;>~02=YFOgTEyIED=a1 z%8bLds+&)mwUwbQ)2aMGgIN_2w>+WEd11w`g)o;bb;8BrY`Th?gkGhROZ6I!Yw%?`)}V)d5FLPkYW1 zl^(JEQI!ryZm}=m@#RbQY`K`!hsXe$ufpOv+wq+^8mQ+up+<{xuCY)T!K4JuASFVj z#ZA*x76jjG4#_y6Ye<`Q6A1ioA-98+CcTiYSPbr_yoT@Hc<>DPf!MOFv-iYG+CSni<#6f$&E_m|0%b} zJbC|4+~-Gkf@|CoYT=LII!$>exQ4Av=M;BlB`jat`de0+T(h0sK4I3m#Z&3)CwNWU z&q9wAWo7p70KwoLLSn9jNXWlYxG5h2%kSZa$&ERg`XK(qdyfZSFZPNVg%B0GN0Yj1w7!q*AF~Q(Y3olG&2*jNvySjm; z7c6C-9BZG|-CASxp<-QIb!1(~{e4ISV3mt<=CHck@8rMql?PxHeHJp|Gc#~V96XPX zFp1t;5DE(uoQX4Yc?%#&itZ-5CwJ-`C>45=ELv=RWajL0R#kVmaIH|q@b93y?LmO7 z2@qldnbm41gr-jr`}E`cbJm@R6L_#TJ%g}M*4~I5JT9a8O69zZPi9>oC0LoIoyKO>7H-1(0* z`yc<{y^ogZHiP*i!+^K0EcdWmnS!(u)rakU#X}ucySHfQ8aH zp_9!z^;)uAU<%#$buEdg2#l{uoKx!(Q?$mt(oVT-xH;KwU<22cU05&G-1fb98yHq_ zil-X5>!*r4l+k|mS!KR$Lh}XR>(b57nOnpRG5i`Lg zCm|+b523xZM@wvkfhiK&5*}ajaM&gqq@zT-J8X-EF86eI>nIR=8kdWGtpb6dUq|@G+MsE`eb(51 z8itS}Xr`Me{GhJt>ey5&ovd56xR{$+Q==qto19tK?dHFu^)8757fIIdi=oYgo>G^5F$7J0LE+iAQ$5^>j zJ)%?@DfhuIF7Mc;?HyV$-LdUII*_JP|tNQ)TwaTS)&x?3qiFk<00D zrY74H>OA!sSB|-J$|^CfCon*x-CgnH7b-BGi2zsZdCHH{&{2mU=@F`;XbZ9dO8Jx9 zlDJ&w{6(wf_5DmI+ZM7?kG%|ac&D)DKMVvrI2SLs4Hu))O(V$4<8FnyHXu&`=f!Oe zBs|*P8cRdavvkyF&A7cKGfH5_`W5S|2xynKSAuk1C35R1@>T((h zki$PA8WeQBq?n4YX$K}sWaQYF5|;>LmCfI6Q+w5%u(qEe=Hm4o7pv+= zwC0pm-SE|4Y1+YIG%3#c7R|!6fz)XjITT?KA%Na&rBlLkBDW=E!eF!=V%P-=mil>5-<4;fbuthEGtbKroGQ}iMoXd`~h zZ}~U~82YC8c}n-TWlalp0l)765&ph0xc&3feJWPKa5eULnYq2XqXS@zo!rl%LRL<$ z^P4*V)IvnAIkZgH)8T&JNaMxUlTkz5-0B^?USsb=EWL0ZtMgV73%)x(cujwf7-7&( zqI>jQSzXZO7oZ(H(u09*uchY8X;oUFwGS&1YD>0I07nBEdgbxgukkW7BsASH?`8lA zGRIHfXa!7BdReBSrSGPV?(L*_*fwB!nq&q`r9Zn-x?BVD8zrlz^?kNC=R8#M9u1n< zcBJ^>?Y%PV2(Q*Q$v`3a%H!@zgvmJfNDA7-Q+(0H-)Up>z4fZvvv z%Kw*O>+e5(R6G*Uy8}`Fyj@^giYO%PL}%uqd{u6-b<;hr)qbz60C(QZ^|a^vhdLno zT$yZM1yE;gexJ2j7auI;u6OJ^V(EyjtvL`Hnt2jPskM@29L6diPfZ6e!9GP3;gV(&A}LSw?|M5?>#56vSt*{M z!hNP)e>MVJqSJSBW`|mb2${|Y0cAIV6t{Cz_0F6W)Y`}OU4iD$DY$CToq>c{bOh!P z=c?wsfAw7&zi_XVQy`DemnZ3GX^q{(x5^2cKj>2)uV*q_2VZE%f6A{An&)>X>Pfpz zzr6E2gwNM_+@v#Gc@lPk`xF3GS{k~W!AW1TBr z(a*-~JA}4bi4v-|%xRE|paj3+GW4$V-&|#1eGO4`b--J?(`n>rriUot0p=>C(j<>= z@(x+xF%a&xF8nPwzr*L^sr5?o2Y-sjD9dWUS+f^T1^Urx#uOsEd5UI z;#vO*z~j)DOHds)aEp|-qbDPUi+lk~7`=u9>FTb*L$=SzVf;%9c2oi`7_k*x0CB-B za5}nbMu-FTjNF3yTOpgE``amg0TRs2LAs14Wp0@~UR#Wcmp`QiOjvaT;zD3A|= zA}hvy%|cp*5|`56HDs-i>KQt&JB{2 zJOw0_%XR2+PwGeQ#OZIXe6N$$J;niv8I(L0RyqX?4^dH|F1sIZ&8X_ui*Am$xrj8C z1E^{a5t`V8CKzr9alXH?jt#(HkYC^VU;Ogd{fk0ZAj#SGTlW;UTV<@<3b)tyz`Goy zYaVvTmJdpxo@U`LnTIFIU|gtF1iaIVEI}s1^%tBODUx+RN{{f!OT|panGqs$5mgdB zUfsjCZF1rA$~^^K{f@qV{?@3TdQ;f|LXB;w2;EB3Z}T9ZzeWLdA*^iVm1V``u0-5MB09JcQRwin|? zzm3LLsA_&6&5}=DFHrIi`jrXgnE}Fi$)wi1r~u->a-(=ETxpRK#9@9;vTmywNb~!- z8MCiDkmi?{W3I8Pd}TWccfvCs$=N_{{%B5GQ_4FX09VZ`RpKW*2 zc?5D>(t=fNYYSgvGhf&sYb*tOniSB&dH;S&c`15WrZVfeZCvw~L%gp>519Jq7ohUv z7ohU5Jzn=D?&t#G#@*|Dl@<`GY24zHe|ur~ii@ z{&W0)-;4MD<55J-%5}GadZQUJ{RTIoBRMK!N^SXSPZInZ;_rp9PRQAsuO7f^?PbENcc|fd=_fGdYMhQQ^HFzXQigvNDlMfjBVbi%RTIu(GpX>sbI$UN9ox9Fk4@#o_ta_-|1h zP{vE=HR*-!jtOJ!yP0=hM5j35|MRwmbULw#|^DwD^FY4v~6E!=^s>p zE{<%a7RK@Um?tvOlr7oUcL@*w^Qr|RL)ET6t2cfAV(E58U#tjl`v|n;hz;V+0|qomH{MD~1;Oe|D_jpVt(5ZmOrvL(WpvTbdW;msw5;zs$~r*Dp3mx8 zPHFF#UrW~Ct-tTi+6Epx$f@w;`{$=0qH12d3f##DNI}WBzrN;{Y%c6yGBht4fn@0< zKZq~we8n!t2Isr@-~~|EGX**r>{=6q=S6gqjz+Fi#TK^3B*1v+yLG>+N|zyU8N8Cf zDcdsbC+39rbrrmV97hOH{}-3^cP8_aT|g5QCxT2i)OjlTxaxSw3_Lm6&|E;FS>*wf z5bK+Fk{%_)2Y^BS_W-HUeJ6FrrE94F58#d z4>k_PKcGp6&@`Dzb@_OXYH%m@0pnNRRr^2zHWq(0@>JtwTA+fJ*(C?Z-D|tvR(bKFD@U* zuvF{kR8#VE8Kz!Kyb}kKzQo%}@>g1O(M$l~zh8l*WP8iZEYbFMk-kHN*U0oLE>DiR za(a@O5YYj z8`{FFQ@230_SgnLom}zZc*B6>+eOlOawGlbcdWvclh5?q*0Iw$ogMfLw(#ip*Ft;; zmrB=VVdMT)YqlUbmcGsUcI~6=UA9=?x-)VUOB<94NUVFeY9o3vAD{)~tfE9xh?lmf zR*>!4dSRZU7ND9|-{_al(`@|ocSpD`wYeCeDYIrSaBdf3eRzQ)ingub_C1RZTgUHH zeI-qw+K5OvDsXgf)3Yn~$Jh&>rigfpW@itvC=H=r;artQlT$ECgeLqjp26u+%FDWa z9p_)(`n)&$-JP@jFRF94=7y!B#!fEnHg~8{b%lgnKbp z7+R44;!@|2i4e|F*O5{a7Uk@Kab5Z}RBx?eVdeEh*cfAa@+YA|GP=f9mx-*+`#Rv; zL0a8LJ28Hh40{7FE;ejg5|U=Mf=Z&c{U2_~GU)zU7Yb9$u&rK%OKgqMd#-%JHji88o|P5L9}tY^zW8ynoS z_?igX(|2ZTa?@=TSFw~EXX`#Rraw`=5LF;{!*PEdUo>cUs)D;79}@b zHm1UMLhhHsR9r>s*hVYp*6X-&;U8!SRNM>e9+9OKlFjkjHVKz}DN*)hPlYSDvr4H) zZj!>oyi8HfJ?=A!Oc!_Im|sqq#2i;7*HW9F!yTIo|r`0c15!Aa?L)g%lDy;EV;&bjr*X? zPpqw4c#ZS1_|-UXe8#qhNU9yp*S-);Szif<*F&vP97(WnbB~#sg02>efHHq+XmDm1 z7_zN9Qtr$xVK9|*a9BL76nMOw8~k?4>L-KFy}9fyRLcQe|wz z$NUJ;$KP`9ZD`A3?3|W_(&#E01ag^MOE@n9DZ>yBF;US{rC!ik?AJtFg!CX? z#-`ZL_T;H0%ahB%Qo|NeoVH1))5BF-ia>_3vC>|6@aktQ(ErFv)rlAz3wK)(f_HrX zGNO6&8|9;OF8=sx$8@{2^9Z+2O{gg!N`BPK`f|xZB96Kvz8Ebvx-N_o?N7ydeY-5z zQBXU1nA7tmsr&rR%+3a&ASR|2w{_g*J^>~@ey}}>TO#Dj&u7T0$*>8eVZR(Zf|RHqpVxMpHvlXT;rLKao&FmQa|TPdBGJvv%nOZ0=vcBHKK; z4XZXUAvbwcepT)&SxR+{gh#rn-Lw|C_uYpNFms~i389NUh61lzQRE9%9GoAKeT zEG<*~x4zX(D8ba9jNHA)GOtVDP+0)@AeDoBM=R*ss~@yl>|qhKvC^y|4%e+I54Xh} z5pM4C{_T{UZN7&APUE#EEF0QH~U_+Ep z9MSpF*8=3u)cO+J(t*LF_}*Oe)UG|Wmc2i8_Rze?A)gG~AHsy4Z^J^sUg;H}?e)*k zR}nDXLmaJ2tW!Rc>P+*a)Q^b7eU!N*6{CW>Sf%2GQ+zi{uP&wj- zkrhEBZ6AfvM0TZRks${2`c-KSw+F~)6r2%4^@0$Bz@ODFU#@0cH&@*W`>8y zXvR&YD*a?)68@mkxcXmWd9_U5uJ$S5Mcdp+Nmay%T`D-g@!$j+C6+ffcWSKz(`x=Y z)}#^2DdxrRE^hRYnLHz4oO9=HKB~TgO2S^rOPZ^p(5g47>_*1J`=y1_TtNla2)P?- z5De5GpJWoJpj3N>F*qdUjB70^jz?i9 z$hE4=-T+cQNeGk{mIWY|fqi(~u^v|@WN}2W}&u67bo4V9xPBbjg{TDfX<|kSk zXnsHVVbOrMa3C7eB$k#C^>J_!x_ZDyzL*fSiHC3Dy4uu7^gMS+vvBRDI}DCvbC z16rs@xBYW%F4Qs*4K)H9GB~V1r}%Z~sq@}n)(x8)rygNMAh&w254%Tf-%O?`ZQ{Jf z#4**Lv04)Kcd9+R;B-{Oz{x}Y){Os3KJoy$HzysU} zQn#>B!oI565$-o0Wk)-e-;nF_x|QsPi-T%Ovv=EZL*G^@qL1iPx*#q41$~n`UyqFg zd-$QsDq}4!bo9aP)AVif_0IJ!8=;gyRV<{e-m31QFT(RB$z5~gjbz4&HKuQ?=-HWzH=;+cC3`N z`u)WujKt`wOnBcWPMb5&NKVwnQ4!KFIVV#pW9DoyH)vEfb@__((x52QJ(Y^`@`BLf zza*m1D77jh%5O{yn_t$BPe=eem-6KLI`z4+4VbnxvCctm)E=y$(?B*y`8=J9dbi7s zEs}Y}Xyo&J)%To>p^eL)gV^@F4suMcln~OnGvm)?7i;T-U#Bk71k(^&KX!5GqlfmW zq#@mGLh~dg;o97CSt@CeyZx>;n9IYTFpRg8|BA<}qqqFqu>n^d!`2%=FUmSvU%Sx< zX==v@##%J_@QT@T`!O4N9-H&XOLAV8H6Ff^gf4O`FGAn5;dpG>+A-W>*>_K9#OqtW zKS$ZV_`&D*${v!qa)!QV5pdhdK)ac6h4Z)VwKV?xt0QxUp{xO(-RJ<%!N#;j+qu~X zH`K7}A0Hb#zY5%r{6g(4K`Gl4)q>Vo`Bi(3Bg*d~_iaiF35{6H>q;loQ&QoX5Ugqo zg-usgC_B-QwLfT!M@d(h6Wi*xH|7VhiWD>F*lYyJ4H^ ze#M)XFK5XFsWd~>E-o%j1CePj*do=6@n#MFT<|TA$LlJkg_{9XoM5Zngfr=&FYWR7 zD`1rrQL=x&Rem<-e%k(P0!+p~vy|&YmZ=D;3$nU$L4I@7qLlE#qR}AhrjkkFc1<>Fmffhp)wy%0tKEEmEqGT;4&(-m zkaJItA|Wfo_`_i9qQmxB#4U?axf?bC95||>9De|^p=0fb3_{s}(a6|`5d$YIOBC7k4FU7L>9~A$*;EKa4+}gFr0IuejkgdAHg0O z@VjI29UNq#Wl>)tXPB*s)JpLT@M|P{dR(*x`CF0}`bJlM%APDpx30K+dR5z<9CjhF zI%i_U!!a?y@<#lrx>BaBrBs}QrMP?Ht77|(`RZwpIEfL$*g$&uN23x`G|@;eyugcq zDMd~?(Y@}N0D(ZJVc$ui(NEj+lkx{fgBOD*;(W^T&SRgKcRPWSd~+#GU(v{e=_s+i zl*eyCiM!ZihHhYBy_}z)!1KWR5^kgJ%j;Zu%V)Zmj1@+Q91DwI%Ok92oU9OEIwU4* z!(&Ur>RRYV+syh@LQOU-f9n*>`ce>oVKMBMY~Cmcv1K=d`ipZ9E!gA)biqprdu~6D z{Khi=X{PqE9^~{SsLcj$=`>$=*&|`hZOOUCw=}2*UuzK#!W*YMOg3@Mj8o|k^B|8m zGu6 zVk&+oxt2uJu=+Jj&=ooNH`44!v0n6GCWY)*h`E3Q3}c3NrS^xP_I)wP5JcGMOr3do zEJRBQr^BohaeW^pv>uMzLo2dP6@kE1P&qYjlcBAhycP8JBFnJW5)@5o@)=(^H$&yK zzyODXl1DjY1f1p+84o?KUNsgiDt=U1aBrr=DyONVVWRq3tXM?maWSTlrB|}=+HOF{ z3iFIqnMZ>pUnXwfJ7eS`({36PJJ9INEGEb6$ZKT8S|OV^_9V~aY2g_SXWmPFT<_i4 zZVJ9OmfdUpY28l^;$diU7PwUV9;ep~L}!6@LxYiVM>PmG$ljpt+ybhdC0Qi*c|1=~ z1fM-wV6N~zUk?~fVhrkUK9V4sM(8<>yK`vX@04!BuB14OE=W$h1Xc$uCS_p=lY7KE()a)9%d8NRa%uSXQ55ic@kHp+@{~QJe-n1nySXD zHX4JOAka;a{b;#!>Z*ZOm7aU5r!p_F zQiuci`4U=-*d&$!RxRz7(9qMLY$bd!R)F>}Oscfix^dM%s+s{JjQ=#AHc)}|`nu|u z>{!kuT%OTDeI>U`%DU2Y!AGPL!eT0d05(=Y3I6X+mZ6~o?3Gc#k@snJ0kE0N24lt% z8^9=l`&N+oJWSo_s>R)sk?+slLH$@1v2S|7uSYx$5uS7YS-*qjj3YfKL=g#1_Pj`V z^@>QZuLDcsbmm5<4sVOBK=YC*@{Y*5(3_?%2d#feZgfGUCnAvyTFz5$l{V#fJT%NfU^c7P6JqmyHRO z{I#xiY0{`{X@#MmC2qVf@taXi72I?3hl7=h1ru&`PJ_D6EOIqhNymA(SjYl%(URk* z;OB7(Npsz^xpS%dUb#L}+oE|cHl5Qb{L(RY;~SCkC-2Q@u<1QDWC*p|^Yg%??+4$$d)3578)&2G^6DK7dlFXa=BR2~ITZ zbhmTV7=*(^I>&+Z6_}mQ8%7CbgT(j|=!r%6@;keX+4G{#p^S%$r^bzyb#`-yd2TuQwsCwV2;R3BLA09gv@ zem6&|DgG90D^#RY7ewR1ThcMFtyje)PgxiuQOZBk?zdD!?*lJkPX7Y>K zg41M?WPuvu{ILL3nbUCZ(Akk2DsMWDn7kB8BcKUK_K#qN->?PvQ)*O^{v4!q!|-*l zB$kiJse3b9r=RaQ&;w#MFV_@zJ?&eg#8NED*<(B{)Zy6*Aq|wbwV`B<>=w%%xQruo zk4qH7JM1H3y)6Da0g(RkDcAGpDC*mQPQi@Q^R;)L1i(Xwm$e{_aPDqz!d-^*x@j78 z)N@Srj3cxc6^#|n1#ju)%B^%%P6DLcD9rPGCUdnX?gI`vp;GxU%q#b<#|29<+PTR^ zcu3gNTvG0{-_Ymh5Fi1Dbtj=p#|K~+S?Jh}aHk8G zOw_O;x1anP!2F*m)k{$|HIS&*_4@`4M0a<0o53u8GfThW)fu4DnroUyV`sGI_}I_C z_-c8vh`vp2N2buSEH5l}5A(yMEmBf{JbT0I9-LiMyY${>V1A29B2Mxl>f%Ul5DTxO zomW+=OH2+F;9b;7zjf+3C!d8AiJ(4$lyfM-xIx~Q{) zQYE_rywRLu|K`K#WA*p2$iuv-cNYy(0w@Y5KX6_*-7yX4hU)LJIOSSVI(fZ16J6`3 zd~dHqEAvrF+wZ6Cz0|((iz*jfop#`{y-im$t#HT$+kaWTR$8sy0?^_?H$|@1)%k{d z)qbVE^iVL|Lj%*-iiu03t@Gj4T1_)xbMczx-fJ#fQ>2~p`6-Xk1H>sGShDxzid!oV zCQXrA>qAXPX(0|Fuzsjyx8;k1VbykfpoR+`e8Lne8UhRL^0zw4iY6V&dnrX<8?TRd79Aj>Km?wu`Gz&|)}Cq)N8Hee zX$Kzb{qSnwCUghh6+wQV`_mZUDs&mel>P)QAD&TD!;Y%S8LELKC3VOB$jtWeWZck2 zKQ$x-S-;w$#dageF_}+RR@Uv+$zt%+O}mIj7M1HQpbfQtsVyMabz9DkK6BaNDHUxA zZ9c9qC&%Tt?z2iluQlA5OL31gUxR@Yas}hi2ub++5FVHF^uBz#_VXh2as7vo$A{-3 zs`%sLf&NeHs)_<|B)JZNTxXltTK#BsK6)Ajs~+xq2tbX-N4g|WpuFQNB6bu6IuK!- z;(L`v{@$Z>i(5Cp#)%gTz$s@KM<#bC7)ik$AV_65!# z>O?H$4%rFqp#`$=V0K4M{1*{hBjvBtv}u!%P+iqml_KxOG>2}CsGn`))i~FZ($kW2 zSIfEe(0rEL@{ru`b^^8D{fFj7l4E%Ps3oe&92ZCW9Qo2 z?M2p=P+%~)Q${zI)}C1&ghx$8vH<_SqlBp7oVM6EE;eP zCLIGE?BMNGp!P+4xoUhk2JJJK;>?+zZ&uOKiMajNy_?T*x#N5qf~)C)-SQnXKrOzG zwiY|F&O@H8$Zt9g(l69(EOyd4y&zZs(BpaX1Rpxm=bRq;z$olZ%YJd_^%1Vjau;l~cTJr?>Z*J3Vdh5ayBx5Y3W_|g* zuJU%_WxD6(^(;!3glZ9BAz#o9*a1y7fhGS zdJ2Ws9PYmJ@qL!~ai6XimvyFtxJS$F6>q8`iyo)(?Rr4)UIrpmmgmW?Q~XthVc09Y zqke(1Hfq@M^rR%7gPfoe+W(W&! zDNa$t)3ZDVA?Zr|u#cjn^u$gw*-c5)v&KnpVx`Ox9a`;uMVe3ao@GA*k!@vKY4^G+ZP41{ne=cYY#0Wy7<~}d-u=D+uZ~XzK+>b zaUW&eS3_*)-=BIj9GY)UZ@K)hi{KPf(*W%Y8MHmNe!@$nxrTLXOT*V(WkKn-@Z&zO z@W24+)(Ge>6F0*gC~kIy`uy{oyVj)b-k!ab@dI!GZ4og&9T=6vMEqwKz+Zc>0Cgn( z(qrk!e_h9U_D78KxoDxSBz@Wm{8)$}`nrX~2e{_MP;>c`@aqh@VWwu!EmD3TT466` z~wE_WiN^e-4-b@X=oKMB3S0E!D8BtRgdefBVj~k048z zg>a9cZW9%r!9(*(pYQCV%HMT?eQ)z{_y+x#M*p?<%h8u|X;?AxQO?>%{%4OP8Q0ww zT839`hGp~(D-^z{6e;XjgFq}GH&o~A^Q`}B8zgtW@!*vHC?m3|*CJf{FN-G&(1&-A zeT}f^VVrMmx?%NuKTn_RY>|BE2j!3JKWhEddmlyItTakxH5`svQ`gKr>HO^W_Yv}H zhkkqo<%UU>O}(R%=+AzYXXk-n`Q6k_#Gl@RxMRSg14N**By@{XR+=scNE`tZi5 z;M3>@8?*XY?SWkB*?00sf9^0BxcuCMj(=?JHxtg7;n0GaytJ24T01$=bF^ZuEj8YY z8;(@cRKs32&)fB)8)g7jiEIrS-_^H&EHQHbaprj{b$*`r?+d{LOUFR7|A=sY??mm; zf?Tv_mQDaG4rppG8BUB2FT$d0J+a{K<-xUkIuICJ{N41Z+qHWt#{`lTMK1JFXxbg$61%2;r z9u=#wv4|U2d1Pr0YWVzMi3$u5ymm|Ww+II!cVyO4d7kdf_;m zXk#e_;lHz&Qq6$cJ)@^b0eAND{)gz@kAA)SZUF30mG@NjPs`hLcCXoG*EsFO%a__6 zSN{Ew4_U_mn|{O9-NX`{7VsdT%Vy~-aIJzG|MzRX(37bJw#R%7i}2Gx|9uh~VQM!v z6?5|PZg+JL0|Rsa?a1RV07n_EF4t`(`2Q&T?s%&E_y3!SkWogmY1yT0aU`P%*;^T9 z6C&#vg@#r3%FZ}AwrogvD#VX9pjC>jNRp{7!BVj~RTdWdTaLE6@;11r3@vCPz zMMq|;Qr*5k;~AyIWTPrIziZ7SEN=hFcmqik2Is16P|EVxsAKbPPY{Xs+IYik8O3nX z_l`##h?P4p(3nlB>jVdven=YgU*9BcR5AW6=Zg^NUw$umzMGE=c@Kz}iW^jIz$OX@x`@YBH z_*q$5CN0x}$**1hYtO+#L0$oCc>Wk)kF%7rM4?QSaHNiaTPlkec;I$HLO0^#j*|^!)2SAO&FK&&wA? zFZ$;}FA~HkSC6~}skELX(w~L{QtJ$CzlY!%N5Ws1ej5EB8}NU>O)NVG_Sc5(^^?zM zGZOILpBu!lbLVXWKJtaGgV>~25c?~aDIE_+3jE(+`;Y%k6b46uZF@>WZT`t#rN4Nk zV^1K0sUp0f*+xYND=7!O1WeKD+NZ;{ko+;EF)02_sj;m2fVk{%N!zRb9Gzx?r88+U z^A^X{{Y-kM+X|ABuW=Nc{%Gj=*Mj~OF+4?}ryu=VkqqbFB8xstU67!##YI1x&FB7Q z0U)8kAG5W$H~2T*hN}*iLOL1Hn*B>r1UodYuPRC)Qt{uHwZtvUM*XJ_q zCv*6d{1Wi3YhEGMynZZ&qLOwJ!k^`tC4__4-B=P66mD%CxTPWXz+SSSpT<9YN0~{z zHkine=<9RKM@E?Khc{G_3H;x4fFX&^K*0osg?TgZ2$y9O2=Kn9 zRGcXd`^VW1c@FX!>8GOp-2nG(O(Ctg6^kkts$AEfxrnA87qA*-mcYD~6R;Zm*!#r( zU+3LVr~UhX?4E_lAq_uwWxMsn`RqLT+QZ*>Y&Ko~^}vDW_Ea8J9U~($LRAHu`<3P1 zNhqF@P(4N5{Z8u&H5Z(g$J)#!^M$Et8 z17}6hLk3Qm|Hx?#8}*CGORcgwt%bY-*S9%$r`{On)Fb96O8mlOgNjLieX#sd zHhL2&Rql+eD^EF-!>zZ4Efo!cf&kRXskeAv@eODXSoBA(FC}A0U3TD^7J zQJTN1?`35SX{s}d6G!J)genR0?Ww;Q)K|VkRCsMhw0_5YHUD^97GJcY8NUUck|yEg zy}51;=;nX>)ZBnepVUrO2K0HZA(Zzy)!MiJ1hqAb8Ecq7THnyu>8q*4uC>t&qp0rq zW0*$H22}Z3k>jyh=iWFGbA$QYnz}Qw$QN(g5Fg5nW!FVbJPi8G*Ru3tHFfn%%wn?Q zoyME_;2Lm)o-4eIs~m`%Rb+iBxiZ?Bqt}f!GRam}ib9*SvUD`yiv4aET?HC^n=+nv zAO^)uiKkuE_0y&vXlxrBXd@qY?Jon*+qB1r;lL)QUIQBs*V9h+ZErE{X=pPio28*z zAAx3!m@M>%ghlY&`jFIE)RDWr{R+u1QF-fD;Kq@$82*AJBV&afIcekUO6)XyXPg!8 zXw4shj-PM8YCYS~cjQD$>(8E^4)@IIH}fpY`iA+@DpSa`qgu(W zqkVh0qh0@&gy_!Kt54PI>7SQO?z^b7Sr$nY>?{?IC9H8oX>b=^CMF;`b;iX-KlxVI z(}KlCE|AvaEiN7g$XC13h0gQGSljdS)CFu9ZIC$i&ASX=U+UwOb$hq!UBpfV$2qsqh0hwJ@)w=*G`@3Fuc!|)i3 zp28@k^bWMI%^wNp0xD2CR99)=liz>Wblpz39&xMjJJ5ie{3rUQ$_$HsS$A_>Co~uQ zy!s9PlJ16uzv$(hZXe2h3DQOAPge&^ZJAo!@@{n4Iup)0cU6}fPYH!{QR%O)lE8G< zHzlnNtiRL=OMAF(@Aram1|w@TKzJ>Wkic<5g}z7F!}d7*lzk zk{H%aN*Yq^`u>oaku~szyXryueutNuq&f9|61yVARS%~nRroDnj#tJ$~gFw@XED{27jMWj zC<8(AIge^YX&z#t@ZUXWF8)k@Lc}@sSw<~~&-;9cHiby=yOU>A0W9EosMJegdIbm) z$J{M{|Juy@-8}$&Xg>Z~R&^~w-GleotSlWj;J3&YE`C`3)-tpFgr0#xx?RnDQBaO9 zT>n@uD~9Drc4Y_8_mXBB(~SE4rNXQi8_{Wu?gnMSXa5thSge~fko$4bzk+M!4JIH3 zYOvbVA*2<3KWN9EJbS({s%dob7H&*1tr zfYBov@PLuJzFa6InyW#rQfdQafN@1Zc*~j8v1jjsk+i!zL)GHDZYHw5=dvz(0(=+) z!!I1I>5FhD@32=VnA~ZWvM~l~6{>-*8ORs8hBNg5e5-e!dJPfYsPZh_xBekMrzWHP zSq*B^0jg|07q0M%r4rbNTbK0&@2qD$B%z|Sx@wD7&#sI$rgDc>wwFyj zR<2p#=4atEh$8GuaC38YF8 zcNX4HGBwzqP@K8PiMcvU0DJdNp9E$-%*>;2u_u}*kTD^PihHrvDwhqa%g}hu2;^lm zBs{qdMm@9y2;~&490!L7aH}>%B%P4X0gg-g@FI)8{sE8m;j-aj4(-B4&g}`hpG^3KZ-GGVPsa{TR48OZ+&wxCB=Y>2R8ALc9yfL6T-U47M~OI8G(-Sg%oa4Q zT2E6`oxkJ;VnMgqBF$sP(zH_1+B(PStCtQIUZLd@3C1G)4I29&Z$A~P=mL_K`!f;1 zs^fK9Z8A|MuB3-5`A6i)G6n{cW!V9!q z!cQz!fYTR7tznQBr8%CK_l|=aXT^HE^5*-jbMD@rD{gYPTJE^hd_b6^*pQF4?oOTg zSQY2;^St`U@%7{Fl#wa%Txq}-1E0iap}B2mgW}AZ&y5>Fn(CUO4A(-#OD+1Y0kn(I zW=gJN8w@4;W~8VqTOrsYTj6y7hZ5@?4Rv*3L^o<&r1vXX6Kxq<0`%y_b~T0;1Zhks z^XCYPKYA)5;>eaeHC=w>*S$%o0s6&Z+WifKsmI%DaWgoRqtwUhOk6aYbL~GeU(vjI z9pXFkHa3`e6KRAu< zXYUZtjqF71ohq)9&Bi(ms4#_K(|=W8Pu3Oi$l;j@zyLSga+Oa`lIE zj|YwgXzkH}<%5&rw@4vG5_hbEMs9!4P3CGcpaN7pN;b}Gp`Y#hnaNc_eA`6k{kQTjuOf>VbFJog4E*M4^K6HWO+#=+tISXr6jQ) zRb(~9mnpji7!g}ig0Ir%cL0x}$p`-f#T4c5e|pH*eUt}9wrYB65fBtTI|lOPtsR@X z32qB~$jwX94DQQ8jLoAAJ3q4+pcK#vN&%f`4;7&p@7i|J^$>B79clVG^Yowy)#81X zuW!F3KPYfrk9n%!5%)E}*G1?hyOGqN)=tjf%fH6jT3)v1(Jk;>%!*(|9=yXhy^M>N zq-94x`|%_OSiuZW{*jgbr^uX9P4wKqn&!6Y^Hg7a^$XH;Cf@n^1tpm}hmNbfa3wcR zBh9sG5ALa{1vUixVLSNSwc1kLCnyimD~^Ci)rh7k$_sk;ZW1N+Mp!`spLThX+O;HQ zh0{YrLx2#~S4CNwIW6t%uxHvO>y?29JQPNR4@LYVi|~mGB=6w#BmYXWe~+}3UT+)!GM-M*9@hkK|99jKH$Hwaw^>ZNALA+;5dkD#q7-r4(X9Gt0~s9$1lD<$yg zqUgiS+hzO|;J^PUfNB8EQSl?i z=)bQflh{?JbsmzYm}=(8$jp2hsziG-zrs+HD^mIejZB#8uhhcf5AU@Cg8d!n(^+O* z!Ye%FvseL95?*U<3Z+2R@1c64`5dN6Jox9=I+N-rKR))C$x-zMI0YZHqzA}d&o_0g zBob!4aHFKAMv&s;tK>;}o7^|mEoaOkxiN&`)7I8_;}H=i;Mzsr(vbb_4z6PbDctuz zthrp0mny__>q|YB=1*aWbD+N;F&o+uFt`t|vB1Gd=H@3_c%L!w)4dhMTvW2OP8fRa-UpF(h^AfmJq6S0*bBhgR1Xf^S{56 z^RMl^>wmL_nwyK)<0H=FDL=a0{IIhQrWo|P{rGm|^+o%kZk6r18Kyt$FQ~R%!bA0a zCGRGCpV55-FD4uUn%BTIo#qu!iQxye;uyy_t#QKj`3CAFOybu7InJlSd)=wehV|j{ z^a~gRNeB{*A=vjhljyT8b(AcEg@EMcV)o(_>;^S2^4@D%6m}q-KYymV0dPps1G6O9 zczY)5UpZUsy2{nmh8%&iEftJtivV+Rbu#IzXCZj3w6~AEcehJK*_^gNE4?t?E=c>c z`6j>MeaZ*@1a*YJz>(TJfQHZ!V(4qiTjdxB@F~&^8I6o?*Eu*ilKba;eSNP^wO($V z1wG2eIm5CcOrXvs=876q!j+bm=CkO{KSr>&)R^jn?s-$i0%rFVY36^M*6@)TB%pEp z{$qBJTqfx7Iv$q0t&3D!uh?e?}coAn(iOt0!Raa{2avKSy zok~|=rOr|km6fD?E5bsac!?Jtq6t_%>1IjX6Q~-osbVug@2<5+7zZ=Z-hLh61K{8W zJ9KL1?{mdt`Bg2lVE=REPwL8X-2Hf@gTBH3wZpl(BuP(%o3C3!iOvjLnM`+#OzI zk15k^iodQ%ksTc=V8M05Ss&taYCUy3fvk&ho|T!HhMS0BjgGh<=8>5QyttDk zi@Tjuh>M~~xY|{D0h?!kbrzIkv|lX}{5Y@vp_E1x*yQYD1@hz5TSUap0ENHDpDfnp zgYB$xTgK?Vw?T0Bw^Z6z2VF@2kCpuSjouKDx+X(?>2kq~iG|4Ep<+i8KiF4-=Yxx- zq@ae<9&+(U+UZhtGwpwR^LA4TB4HyUP;~6A@0$Eg`6)2X;UrZ?@Jtf!zAXKNCnzqi zfWf#BDBdxw=LmTM^4)|d{=>^ie1^9%;+f}YhP?Et4^YT*(LP-4qL_L{sppAlD*!#h ztWNn`jlKm&+pB-}@(3$I?W~rJg}@8qKmlsh6KwHvko^g|)$U}6ZI6Y|P<`OJ^yDYq zsAZ2c)YhgYo$lb|5hxDwe9&3zJ&_32(1kW zwh75kH7)zH(ndXz`rWVr8;XZtDHY26Y4fLJ}JXc^Kvcyf*>4Xtrbt>LRTxbjhxj>2+CXgkRj_a2xB26)~z z9<8w9!NKfdoFgsaWdiT!qVFg4DKK{QNnQi|MM#?TKv@aUvq3$?SaN4~*TKG&oTL);fHK&%dF5XhEG`!r1TC zkpr~LZ)X;B2(A?AR$x(!4Ncc3<5i~!i7{7DGwA0}=85nr9fxYZcAYQFh}~UnIl<1Z zed5oN51$Nk132-Pt!W*;&=cYk;z@#VhFpf-Tm0OK&XumJa6K1S+2(eeyQq)VGXhNo z>R>!2E3w7CU|g)_A}i(axzC29QJs4j`c8@YCN}JGB^V^w@B8YNitx;+Lw#(#$APiS{7*0Vo3ntYl9+gh zUxp*Una<({V;@eD6d&NE9-v<#GV7U|d%2$()gXY~WOT>y(wcaEFnqY5=Vl&5~a zo=&laHEID+1%wjwmN#kHk`i-VkgypweH9;WO>YCB!(tM5eZs=SX-xyUQ40gSqb7i+ zHjtlxp7^_HakF5QP30I}CcDD)Pt`tpKn;wLw-<6O>w+zytO%kuWRnS&epBaFq}GoKOAcIyr)^njpYoJ z$a`%WRUfBZXO0Jp)suc8sj4QY}n4PJT5nHmg^_7|mcYeWDyw^R75>j9usRhgONGY7MW2Zqy zz_@`#cs1i?M1g`Kt$wG%&uDY8jsI-amVN zWCLKs!)~X@Xgf(5Pb=IuuKNZHNyMtbV|@8TC5t(P(VLoE2O++*%*h}+DdLo9Ip8k5 zn1^ik1}@T=(*kW*ZdTUK>b*Bw;_=(j?&zU?*7-Jk!1!Xw9t?jwdCbIt zQxMys<&a8h^|21X-&lY(vnjP`CNLBR0wE0O9S(p zt*i}Cej1I;4_zY0LwzQm#SVEoC$?`(eBXh17G{Te`yld$lSavevWgDJ$#V)9`{{I_ zQs)Jq{RrQXa9Y%w)7CPpRLkHy6D+oxF%wdg&q9nnSOD^-6CiJPkI8EV0}>s#0xbp1F%!3y$E^IP|*?44qj7 zF5Y_VRGvd8;nr=CcW074`^@8}1`wOM;F-zi+qs*zp5^M}Xf8@s+u%Lxk^r%{@%e45 z1v+J$hI9ez*J)zpAvMk` zvIoefCj1t-P20E=B}|&gg^k`5zNiB;bGc1TO(Xb9!_9Uctzb4yHx`F%VzuX80V)_U zGv$YUIK5hG)k*~NKq1~(GhnAIeCANK!sSTh!L5?ruSzwxvAG$Pm}>G280c4Fi?Q*C zCXEilE^;}Ls`wV$LEZq(?I@xsW>Dfg0y;yuCpTUIXsr|RXZ3ScW!mC~%BI;B-1KiX zb%ocWHe^DT&0=@ApAikIl(k)ucVu~rgOO!&Q=s0<%j=Rdtgwl%M9;$lOM2+upXl^7 z9=;;H`=uUrtG)v)!M;B+PYCeA>J#6-)iM~+!}3w&@h}N078De`i&fXqK-33|u_h^7 z(G&>T^j-iYMu}g$=UH*)jc~pb?azZy;PT1CH@H^m8-SzQW2YG~48;}M^!4^O1xxUB z^PH>VGv6_hJzU{_tq6eaNCMc7BI!}@M64+re)?e$X>t_RC%-v6elu6BDutpOndQ64 z}}veL5h3;j9Vynqh&+%|dv9#EiN zxOcvEe~P!E+~qDfV_pF=e!y%_%eAdvadRh*J~KBr0-XBn?CdYWNDj^3_{n%iPf4t)Dw-)gvaqaWz)O#zI-)MR@mC(vj#!{EA!ad=S2O6Zf*P#V+ybN zq^WtVcHbR~2rQy1hOk++Khn?pU!j6^7 z|77XmlLuzYrn_*)rW+7=Jt4K4f^(WQ^U9}YW$`6p@-F?zZyp}{|AkA-3t-Hj{iBXt zuZ82%QgkwjJ$jn4FY<7nk~FV9!H_EfD$?T+rH*ewCjKac>T!4dTQLo(oD#knX*U3AxXi67mBA1_F=*X^~LGARzBYi|zciPt^79y&hCmB5?9 z*B@HksfUXW^j!(RZ)^?S+7n&EOM3l!j)q6?jN3|KaGD38UNjkAfVZ&tlN5%@>S`BT zgp)8mc*12+DU^(U!7Co=edMSXLP;3RYz5BAq}dYg(P{s3JBV{n{BqmFuRJtAJP-k; z`^*L&=guzp;6yw&!Ux8=i5vv&w0t4-M-N>VT8_>t;A`CVXDEK5G~*)vE+*zQyRP~< zPEUOva8s+5495?Ri+?kC8@Rxu57$OrF)19t1Lvt25uSLWg!|T0J0T>r5}X@+V6wN{ zgWmPE_6i75G9FaD$#c4OaM_A+9lu*E>bY07NL-hHX{gjjhd_{(i+0W^%omk%buYtr z&6&r{RPEM2-x*c$QH$*J4&GjSw0sZedoP-29YJqzZ}V-o2;WAEDjMqms7E8c=uJ1n zwxTP~Kx=z}>5Iw9Nv+|`aNv~qAE!G9#$NFoz(9z3P9f?}cDnK1#ligU!o1E$bF?u- z0km~{Vtk~2*xUxQBv`OxxCQ?K#=7zhqM=bTIW={oF{lj4A3<~5l1XJQ(PSiO1fRY| zC#??wd|?k|7_cYMAvxTGYvleAdP$FK=m$cD$8ZUs;A4a6Bv-0jXIDV~aD|_6 zl8jO8x>^%*?(3j&@Drt{c3GQlE?Kzf`M11cnU6_kM;e%)QdgD|Y|rrKMtD}ol#7Z3 zxK6p(-pqb1=p8%G*MMB`AsSp6P4Nfw`SzYtcMdEpc4QLHCfKhwcf$=OKBw)H`$>Fy zO2K!1$Gw~B1vU38&2viq->V!k0MmuJcXgLu>`>Y9rZgLQ6SzB_=tnFAH>kQ-5|{11`nq zTslRa2J}(uYDZBH1v*Vs>CR#C#5%N$n^#LEBXY8i!?D)WMo4fVL)SoqldS6P?Gm*& z%jJBMB(n+7hG;&^ey)1IY!HATy?*DZ zQ##suIPxXv;5iNdieBiM99?TCh9~?80_Yx2`<5bIWXGWk)^nZtkK^FQD`OR=Fg=1N@*bDLvt#_b6kfa<(8&2RsbJbjOhPC&u$ zxV6xYAF}wdHx3I7O4J62f~`h3NE5G4Degthma<4UtMV67j z+bkx)t2+O(byCqJ&0K#@Y?<72YcyLu>2`dYf?>3wm=YQ_mjXZCksjw7lc8L`eF+m9 zY}yp!Ct3$952O>kvFU@G60HlV0nOFoyR&TCfPk1wyWn~?8g03)v%?!r<_3{?c?ZKS zh_sp;j&~k2)!r;OB1OZjv9*B|P#d^H0MxJTZkVvlp-;+(1z+C_JTH4NAof6`4qlOy zO1~4yRfCGCS}{@)~i{d~E-%C<0;V84jH3*;xOCcw9`C z+h+f}^$!sspN_c9PF)H0PNX9=iNNMdEiS0NHSk?r z0{M0okZ<>?5}HSE&loa~RS1r@>Dr>^(l47%x6-05m=li8?%W@=DW8)mTaVEFG~Wpb zS|^)QWKNH`9z(jBr>tCz@Y?&@$i&NAwdGTt`L)vM15xxq$!>!qfnbq)~VNLXQ$byQD@ zW?|R^{!DmyxQd>blG3}EMdf>XZe2$LXd;z~kY zbC}njx~4w+=BS7ByS&XY=bBNcouvuPbr6(n+Rs$-9IFY6WQhA=OH(qLaM7~#m#+Cm z@rW0gb+KY|CMm&O*t>1h1^_M^8c+6Oets2I-Sga(a$BAe_~sO8tyY>f@m)=NR6XB_ z&OEI3{ z8V>(lcS=NASA_cc=7g-CCvv;3tmF3JP+r6kaGetMT%j;#n=>=Ias0ROX-5 ze6VmV;Xhp5=>v$kWq;_=V>L8^^nwn@u#9V_*`q&!L-~i?+yOP)_YXpgEOOdyZS_5? zX9bpaH!Qe`LrT_66eKZLBOQ-7xF8}v=$v8)iQ$;`ob{G6roA{#M3(v^v}L-?3(xF= zTQ&Cwr(ZafL~Bkf-PkmRYXE1@Io)i$7!>&~?}6@FV3vI)w#Ho1!@ZgIVB8VyEr3?k zuZ|HN&>Emo6vdE4XBDfH@miynZpuSn+KiRY!6s&e9j2S|q@efNRXNGTx5z-dGBF#% znETOc!hRSmw_K!ByT}U)^4yE%x^OLLI?WxE@tnPgSlbfR1n49!$ad4G6?Mu6DbOo1 z=k2@xGCu!JK4@7J2~e83TrbzBrV7kIPZtrOUOYz;S6PMT=t`;RlwVmI)?ZsYTVn}* z%f!#$SK!)qdPq6{(h}w!Vu$?Be_$j21?|f=V56ejMO86yMzT}o8X54P>s7WbAu>ME00!=b({Z+b zv-3&)o;2%2GgKNcLr2w&wyhcwXHJ$qRZo2e$fgweUQTIA#|VYrnL2Y)+n`rzXS^Dt zNX{ZY!se}TRs$BYfywGsi+%lJmj_T-*@*8#O#z^>tc`T~@4(aV2vzUA?sl4-47vRk zTD18-Y01TE!)+8G`lJ62*u%Zw_YI}jNj6jJ+}u(Kwbh&{P2Ult<<3AhnxxqX>7Jgt zANPiI4z`*28edtEU$4+9hgW=L2Q_Ei3d;*8YsVr1d{^_Gi|%grm8#Nn0I1VE$u7H{<|fYSX*_pr!^M6*o%_NfX9;%o@& zc4>omn+C(PaB{%F2`DAQTX<{qkXM#xz-${sn+nXvmyIr5G^a*($hb%EGmcEppIJwP zSz9u(ME&SFotpT3|OGs!KtT zKS>pZ)inSpa4b}v?x|fKFR$9?9=nTxe(bpXASvgH#*?Kyd#W!6<}PG>aJ`8<`>A|2 zBhv{x{kmVcun(t8J|~OYXlZaJ_$|God4J3EA_Zq@w8`PHVu%(+Y6)qKd0=PRv6Pq6 z*{5;%)OY$oBw-$MTD$0IW(ug#@Wk+?uJF^3HYJ^{Di@cl!X)>yw1JPLyR@)|Koqss+=)Pmoo)aObV(cIzIk=4(w?cFN2}~ev_(GO-75u8)!86#0G#Pm zAeT`eVMyk%O|eG&g_p~mk1a98?*QSD!pY{6Q%_vf(=dyApZq1dhk-IYFt}?P`>{lQ z4QQhP{RoE!KwS2zX`emOIa4@hT5F~LQe$}RIsnCmbZJ(^KHY;^?nAMEqS(N(hDbDX zWFZG=aRA9p3uKhfqPsJtf9mgu>{i%E-M$1NLr;2j_xpAX$}sg}tO6H%sH#ny*DNep zpexpNmV%x^w_M0MS5kthG{*5OOHF>9L6BBX!!gsc@scb=I+8ZeK5mx+3C|;nQ(qac z3UHX~bIa=`@Jv~W8yG@Y=>zbdyWMMrK?}Ft>a22^n{?Z>>Fhq}`KwWIOgiKI=rHK` zz9B7*-k+Wta7okc>+1u<5_p(T0mLGFMG_Ysv@do~1|P>` zKft&X7yV&vrUi@yIEAxSfn;E{ty$N&zTMLy#ujM^mA+mU>ElR%QfJ!#;!m8K=;qxu z_UV(6i+;r{Bs}aNcG+Y5LaVI(o`cZW7TmHALX^DB;moUTWS@alcYR+ z1U**ae7V6icH`vcd>`za3t*eTwlq>IXaMbb(+1`pQvV&^7c&!%*8jvI4yXT`Xa5t} z`WL5c%u}LlRylg&Zx;!D`tB{c?cDoz;sZfoee?GAoqe$2kIxz5zz9z?;%3vEvvTA; zXMVtCW}^X0da<$LpHsgoPiVq$mz$L4$dgKZOivNxS$-uYfz-@ipm=XImVkamFNns;b51?PNkm&tcSIpV+qqD^@-SW zg#h`$DVN1A*)-D@bXlUUV{cOm@W7)d)FnWUf`pb;HsDl}Gw<$hZ;z5Zwo;y*9}al+ zuDWf68QhC;O7e0U#y|4toB!KOJd1-7b`b9&n)f6p-8bBi9^9JHf(5GFbIL}x zo0;Sq{a2YoE(XF1hyfn@FdPnSI`FW)D!j^#6a4*4H5i?)p9C*MCC54I?dQMT`qVG5LW~$bQrg-j;O~J|>*v=u$(*=vVIBT}imh2q! z=^%InoY&=*y9g7u)V-nm9E9wv&5caWK)vo1^_=QBvhb4&fCj1M2_EIK`w%`lE7hf_Mjv9U{MZUK`v8% zIn}Mn2QvN>yB|X+2C;!$efl+30#r?uAv*zy8KDs8`1T8!>8IFOQ+d<*{W6wBBzbi( zpavhd+z)397E11Nma2%`m=Lf)I@Ii{RB%41mp*lRY_RtZ8bxd0+w@ZA8Hg&fF4y}V z54|hpe;T7goIhT*7Z$1%0maPoI_3R{Gg|gWHI5#qzmOsmSa2o!lEa(Us7v)f4*pRr z#ATDV_UoaU8FDcYS=G^9cKr{~>W^rvGXUEl^|@}Qlj6%cfHH|yy`#(j5P~G-*Ck$5 zdSv;cO2~BKTk!@aIwrA(>In>b0eBRTuT;%2maQT-x(`^$Y<9%Uf{H(lY-#= zZQCr~HeCnx8&KQ9g7i{q0=a>E;~NXSm%RKpG9HqW-T@4vG6jVNfdvS}O_!~gvS%oX zXidNQ&V*0NJMU8;9uq=3L8+C%`u!~L{}nZQK?(tv19CC_ufGW2f<%mSPqSCK<5AT4 z?*)p!)aTzHOj74!jTYcuUJ@~w_NunniX5?xT*$5He@N#rrLbi41)GA*g2CE8d;;7S z^I=2-31Y5AX`WM5RI5c!IFHrvr}}(x8Uia?Pqb??L;>&Y{fX65#~3PX+VL^ir2Ah! z+M693-I`GNQBjFhU1(Lw2WVRZn#KCZO%wF(t zGPkySa&5%qlWwf(xRE8{h*`)xd}XrM0IEp%DB`Zj(WT61{~ zBVH5wFm!BFL0(&3BgKEsQ(v`bFt@R&D)I>W((wz&=pN2?N&>JO7l;VpYIwM>qQlui zRVNgTYfuEMKRL*@?vPP3VhP8+VH=%mtEs1l1s#MLLbpFW5ard#$j|6>cM7)B-BgnU zP^$6BvpSE&8H4MFrT=OOU^scAomW@&jUfp$mBHgr6Ys^b?ktw4rH=I*to+|n={10j zCp`RS|C1ExhoL-9c%7p6d@9oGY#-s49%O8OcoPQ`7pEuu_5Igm+~WR50D!qZ<~`hI zJllDV_Nr?@P9{-<_`dt@N`$qj9InO*z}i)NQIE;TtJ;#|v;gx*%5KeADjFIrj1M() z)ahi22w?V+2|C3xFT5owB%$@>Ay%Q(K&CL`*x7&IIQF(aT7yR$f6e6jZII+Y&HsUg z_u>S}>f9)^ClC(e47+OAEs;bxZV`>X;{!RN8XGg#;Hv`Kh?bVXzPt{OkDlnc`%iLI zN3uM&wgCpQqfizZ%1zFm3P+a!F6gI33%rKadZ)`rs)jY8&}v2mlbD(EU=l?;S<5vR za8Kk|{)8t_{sRT{X$?mwYMmqG%NqnOpFJ zLZRMqk3Kyz=3?mpH7;4;c`&HhaGwGTPQsvL#$CXz6f2;9^X7AFQ>YGT7E2#Wh8s{S z*P(&)(ZuYpT-9}-s+X6Ov*$57)=B?Vs;Wi=6z3&ifWI1LTXcN0QjK`0W^-@n_)$!~ zwLC4>!yN^-SFn`!e&wNiuw@9!U{H$3uS=w!NN zluGaZg%JBFhMrYw_uAtqz@rFZP{&?{h8lxM>4@Q%QnTxa1KuiVyfAu+-y0N$h3}0D znFCaXUWLZ(+bp(iQ7iyW`CyD!6uYD<+CW}7I(Uo^U0-H?AnfVWm3$okx5c@~1(BbzN)qvGV63N8wkFka-`(_Eu^ea5exTT#n7WCJ zHh9f|o)+{D2q0nS;tIPvT+?uLUHzixo)3NjWQT?jZ&yar6Kfe$0jyt%LxSL-Vf>&L z2mbpMSo21&hTmyg4_n_YNw36erhCuCS;@m8sduXL*}#qVF`rWuQvx$B1R9LRVP6)E zgKybf+=>YgPh0xDn|F8Q)vFWH0@lyVlq7gSYr*I2uKRG}j6|p;w3?EXGi>o9T;e6# zu;h&bb*mw>bW5b*7Mjvrq8Dqy+pvr4@Y6jkJKwS$^d2Z7UAY=ikp@%RsMt9QCJSuO&cxhBmH zdWUcMQ+4o6+4fd{vLL~Dg!4OQ1+yHu>$qKbYk@iLOr3&9ftoQr|rWa@fjh{Bv8skp>-YIaG(3KjM3P93^>$LPZ4W-w3_Z+=}2^;DlwF z>}=#ryT0{ZU+8ZJ-u8*y=X{4h#LpiAh9V0R#^S*r5O2UhjJd}A0pIA@wETa374F|E6X? z&*r}yt?w`_Z#+WsZl%BY{2|Ov-VI=>QciRVo>4(XdqJNoa@BwD3rM8JG7>a|c61(E zE%}lGadj;xp>s;in0X|2v*l)**^u+sL8_gDCq4X?x5+W`UZn`JMrr13h?viIL(s8V zx)bbZ_vzyjH(DZcR2>~R?)LSnAsjYQg){{}Igr@T1EW3lCJg6rN96==na5hHt&M?R z1K*E@7@`q96e0N=6wUh#uz5+d3K?(k<1NtvrL&hwaAi*DB9J zl#!N~uX)CJdpT5Ad)LVlPSfdr-<>j~*XPNQ&*#%;XBX?ylk4)6>9*r}|MLp*{am4x zhRfeqC~%m7?$Ai(H!<^)1xzSzjz+T@S%mND5t@JT_-y-~#PN_~^-b^(s@6VAZ+Dj{ zSa~wGW1pRP-}(N{;Fonjb_fy=4$^kK!}S4Z!7uUAVoWnlQz=@k&=N4EJN)AZqV(kj zgaoKhQ9P8E33HwK816HoX*wykL|eJkEr%MM#%2Sl_7EEnKRK)@85QyKhZigl@R|(K zs7`_9l6!XP($CVanHI1s^)f{V-~Ib5@5y768*QQ0WiFQ<-r3tNJ3)wNG#nB5f2kFA zBWv#iSel2xUB>}S+(4o!SY6Rm4>CY+;v~@dv*8XL9#4T=&9afKTQ*elJRNXJ`~am{ z$ZtecwKU+zJuclkgklZrir(W684*-MPftsm{;(*wt)&il;|_l9Z?EK7KpmLqTs{&53tAm@PUO(l1_9|03#upF znjoQx>+J122_?@6g3`|Ob``9!^8d!O^P7!2_*ERd7#IMzO^d9x*^fejVK@m21ONNh;^1BJ z9<6ri78K-7{;<34aF(3#x|P(~LpS8NRlec?wzh2-Pi|~thdsOEQSU?^D7sy6 zcYzAK&W8S5j^CU7|3jLU!S5!W3)@nuh1axsl(=Te+blfuEUtw9|rm7^`GAC z;)x&I`p)(Hwn7F)hz>o-{`Tv#-ZFUWed5j{%TYvlF^aV-N$xNbz$N&*Tksmo!MDwx z{P>^0`Tf@JP+<3VqMj@)g1d)1jrF^26V;{VJpA*&8C!@NZXn6LZm_f&P#$|@{L>5# zrA~>`dYkvg99moOP{wbJrGD8*Zxbw~vY$xf;dpd!Gkky#KN~OdFrqam8sNssnwy&P zmW%*qN~O9?Pax9v)#|FfF2nzDSG~9oNEYZC&lLf^qQ8-NF=FjR^I5{sVYiqLr@GR(o}F}xnJOksW;CMU8X@`sC-0qQe6`oM#EZF2A4kn`!O;VktUM27@C zY<`}@Lw>LQBjd$Ei_i^cKWl?6UF7mGGQ=6fJ`Af7HJ);R{lGwY1aIID71yWA*U>|_ z3q<-bo7X&o>N}V<+HsdH0mG0z@5k!1p!~FqKU#`?getF{h-mHM9T?ZRVHrg|B2Y!2 zF8gnvLe0DM$?jBSe7$M_-_@t&Z0Fp>UDkEQR1RnQ7Qs0BHl+v3nbb}ex2hp+2gWM^ zw@-!H_H^6pE&6o8$XhZ10R8n#;_wGvXvJF+pt5=3GF-dh8=Y?VQa;Jr? zQdPrAeSmDX;z4$QbhmlC`X4etFwQUCM2W~i<+`@39{1X^OSS8KF z5|{+M(z4iQNo1*Bmbc2b5wRVR1)Hd}kjtnZx1j1=CedH?M#fiI)QCD4?k+EWNRZ5) z??|$fAD4hBKM8#e6uRVBuzFOTWJ=jeT(iN|?9y3;=U+O4>odG@c4aq~6} zjF+z548eb7O@?0(HkgA8_Wy*uwLNu(1x?#R|JdUdxD^&K&`#QZn9R1(Xbf*kx3q-r zJ9oJ+)jZ~I-PB~ntT1Z?rMorlaAvz(7fbB~j1wc-Rc6#NnQ=Y|=$TZZb^CDcG zZPmU=BS)t+0(92NikLnOs{DM)QZsk=c7;QeMhm_);jC;jN?K?zlqTz|nb0YiTzbU@ zQj%wvoT5p^ypYxE{(o&n6CFb<$4JwqI9esH&6&FSh>WUItE>jgu{mjMXcI-GFjXgJG z&VZQfnBTP-8N(A_7e5e7Traq3!i=1T>$f(((6I453P=X; zg<{j=KO7G@RY_Tn&OnkKn%#iPQ(}Vit(s#oxXFj>=UM2xt z^X1G5Sd)0aPImU`my!9;7mag1AhIZ2Xt5WE@4y1-1Rj0jX>l1|5t`pT%Zmwm9KPQA zta6b6rnBTc^Xb(jvX~OqH1n#MniD27X`0Qtqh+aDm-TQ#fY0vZojK5E^3d#VB;am2 zd)4ip{LaQwaScm<6W}8^$)TpUTf3lJsKaq&Wc|&&^L^gx`(KtVcVsXtO*V0{1%c}r zpa*FOw={H59acrdy;1Adr8ta~79H5vcl>;mtlHo%)z|l*DxWtQ!`>qrC?4R$o{E*+ z%(kMZ(9FYLY;9S9Ve}o-_nfS4${xJzjAZLO%roJlH(-5=OW6Y*Fq5kLd6SQJcP|6D##ou`H^%bs9%wKj5D9p- z4)gqx+f+~C#KUw9y#uIl^ycEasSIGw`FX19S~@rLG0xL`$U@vS<~Q%))-9o2?|78K zi^=kAhTfTi9tC`H*wZHt0E%erkgu>9I&iSq12n?lOfgk#_;6PD$r{mgbMPJ#UQ)q;0X|DxZ=_i@ z+9DG)Sm|lMwR<2}Rh+mr6TUh!ukK0#*VLfhv2Tf}EExd<8uRQ+j^);IXnmXC82j;b zw$JyejsLzVm6Nr;a#_gsWmJqAwDE>Q@bw)xg)ci!*>Q{cSS$ORY9E;1|LGzi&S5b( zUq{~0$WgBmZRG4;wo{|=#%M&0J{gu5b2ynF6tsr8EB^Soy2Ux}R-{SqhYu%LGsrfd z&@1XMj-xZOvI=s~nU*bA619JR0;b?7Ay9V8zm(cr3qQbX@11Xgc|`{CzySVI;MIPD zFi;fVzJ5aqzW*s8 zN3!$g?Jgph3ExOl0Csd*knP= zxn?gMw^-9IE-|<-%Ft!1I4{;}q~sPgcMMa>A9;TOV!RnojC@eALB_5|@!d&DcVm^9 z8_dX4xnBW|+5aAVd52M*5^;8L02S{bzUh%=KC+Zx7?j%+sTrYUIdTn>XI>##;@SL2~9d8fY9t5GHJXxN-;$ zGDN$s)G}aR}`OFd7~LFOC5a#`b=BCHU<*2+bYz7@kr-6HL3jSN*Fjd0 zc@E@eLdEeN4~_r5@3H6YEDLwTk*`^dC3Y4sPYxOfk+KKN)|p1`YeToE214{bHioP~ zPZ=rupNIy)I)jMK8#Ad$;l2BI3ncA{*?!BH%7uZP{Pi0S^uKS+fknt8S}g2Oz*`wLh|LU^PO~>kD*}{p=H_q4Z}K;9e-WDh@JlW~Z_D@)==p_`NU})Yh?) zhDVs2mν`6Jc`46Qj|%pm-Z)0uv9q48Z@9WcB(*_Z$&{9iW6%n3J>@#A@~m1fl# zFCaEpVy~alDTIYjyh@_~Jw0@=Dls>iZ|%IRfBMqjcM*!3tvBhGrtu4Fge8`g$TTE4 zx;8BX{?xNAku<*li_|iIWd2ypEK%p?|7=zE5{`#w>&dEvD1Q);VEzK&e_!Trtr3|F+6S5sYG<0f;S)PCgqTsyPFCG9}w_V9& zzh<_{nSv{sVif_$|MlZ1*gFMMavYoH&w$A|%0b`RjUhhx9GsjcYt!~%6#9)XfQs@@ z<}5V}sDWC%cEc}vs@7I-I`HEvyW+Nr>j;*aXXDvTWCm=A6UNSLb&mr z-pOkQj{{dUwbDIw1}*J>AQFeas`UgG=l_xR~l)?HL~v&PT3R6E+p&NWu1`h#y&9^WjDsoFk@zZ*K}H*o_am!`+EKUo9@Qk_jO;_ z^|?OV`~4<~Tl^#KKz$6$L2xBuV_nq!+XH-mxW54o z22w$YD{2nEJmL4h{bwHEIfEaU5kK=E{NbmbffuTDzzpI|9v<)6O> z?BTXReX866Jvb87>HcpwJJkhlHgTwJ@yF2PbwSR*k5KIP%h;6csEBp@LhcbCVL-=vmaRYEi(BAUnhTmT>RV+pRE6>aq;iiP1d!pLEOx@297k>*(!_m*h zHs8M&umuXI5ePo7A13nap9D+;>K4RyhZy&l17$yWNu1W#04VkQBmDN$bx=%zc#4+) zxUteJuxEHaJO64kmuuxr_YmfAL{$T}O;U8UZCj-6IHVNo$7RcSWT+UKGX6yd*<=M_b0m@`bbL3OA;3z1oIgj0iEn(2DegZzr1Q| zFi?&B?R%I0?Nw7Dm&KEkLf`KxcN45g)4QhJzl>B)j`?q~R7^RF@7dtxilKA+bP;(p z>wfl^C(Kf*(@SMt!Wfyy-~Y`r|If$hE(Lc;7>uj^F`4hFGoE;L=vV&8O9J2(EWQSn z7%8fp*dM!rtW)Yz11=#PtPU=JbY!X&Ba z$DgM>qX5(`+?*2tpvT@mobACo$GI{?4J%Z6QmJ)}5TGZ~)Ym`L4&6D`2lE*n+`bb? zY`;p&ekw`IOO}OM(VkE>jt1`ISIk0GECsP{GrrkXLfe>%fk6?T7Q0C z>f@8ai&$FPPRD;6j9kgl3%d!baYE04I7N0rcFb{=s}ur zYjN*h3(ZUtHwb{)q$)htj&Ec4Fvf2*b2yhCV;DsmF`DSTou%`b=wvZpaX}fKdHIsP zb7P!l!wb0%#YCP_MU?9pi_Be{8_3PdKR@zxm^^K`bO@?Itq6?s1?U01z5{OFVR1f< z?At_io#AV08#?=TU+!OrXIuaX;-O99!Q=N$n*Zx!jrD*oaWQy>{s`Pxb~Xn8N{=RG zpbM+_y`lmXj@2CLb?Z<6uZ!+I{KiBtFB?X3Eqm^GNwWvLfW@~o63JFU4&z~x{i7Xa zIo1Dgx3HjKEC?Q32L;j3IJ$+;wP4PaX}K=!S5j^jR*u6CmgPRc4eBf@y12yT8CR%- zlAW?AqRP@kq04?S}j&HJht`~peGjj;|8rEjb|n^e9&@~w!a^Hkpo!z?JQ zLB_yW%c!VC49sI)W{++-uOGEoQRsBc5%y_dEeFuy+QFeFExRAgjSTIuD~|TxLhg1S zmr~HHgkXwRD`GrrMOG!|EgVM)8+R};u$Cdn(jRC0vOm>+L<6Ih6m9)A%l)mu_C3YP zACp%D;C^FGuWD?jnj8zEU*LXN=(0^UbAAoWsoY_vr>lbsBJm9XIk$$4C_8(57il7b zm6y0A{@&9P6e;@=AL~FjfA*Wae(a#b$G?Jb@T$+6x6@=N(i(^uUt$sn$j6?&9O^lD zysYyPBS{{{2=Fq7RezS-*7ltkE@gsIBi zi9-B8{Pmslf9+j|!i8ehrV{RbDMSQkS1X5JzT{m0wy-k48Ll+Eqzm_4Sbxs<+%ei{GWS8z)g-3K_rSrD?uDRDf zl@2tny33^hrtWyIXGla>&yzHs@hx|aRIfj+u6z1VZJ1|S(@X#JCFy%~hKJu0c2VwiKkkE3RYY=*u*|!4^4AcEKDDzXcCh*0kM24Zm`*~zi zG3knK(JDmWlFiJSvT4uaY_{WIJER;-DvI-OW{Gurp|}s7}_Ect82&ObHPkUYH`_K zJ-wU2f6R}VFCO0v&(DvMS|aDZ`P0A8ba_0$X?5#p$NW^gU!+CWO;Hpw-mz+OX344m zAwqK5wrC}T#||JSkh<*Z{Y8_pr+I|Q%oJCL)|>_=OBXQ~Oo z<+V{$42n>)ZYFW5qQl!4{^h7!G|sg*$Z|8jqe*lUTw+O_DO6+x2*CxhFQuuWyi&wj zxc)={9)~MMgt)$;_!7(WO}2e*kq!+)YD@>Z7PLn(k)UQAv^ZLA?IU9U=B-w{TAn!Z zMP8umut%nB`$Z0PMfMWxj+wh&N>Q=(brW4(_AC7;Tg#@~%jp`Y_pKXN*b7#S z?JzsDx`+oLWS3LxIM}*{1q`|8ukEgnKw%QOa&<|^jXJ0S*0?0q8%bu}`-S8FhdulC zQ$PlY7BvXRy1xZ6V8Shd8>pDBVEC)s|BjkCU;I=W`?r7H!QNcC+7-RhEjkZU7|RFi zk26O#By@uoh+ZX&h$WJSIr26$pg{;_yC1o8XTj1`r*6mk$xXkFu)hHT|5g{;Ar|bi~zW9NGm4!P#J7%ePlSfTRqe!{Ap zSd5M)0q3MoAXKlCyh;*QZ!NHXohE4>FcI?6SE0Ym=og8+Q8j&F4;q8%W9}<*nz>qT zuX0Wf@%43VIMM-Tz-RI|IBazV_1@}@dE30M^j)~9sQRg!)ZxN32IV4S3o2DaM5X4Z zq}&#tC)igu+V&Nj#gE)acTN*FaZ;0uUP~yH@XH5j>+=JBdBnM_7|mQe&K>ueQG7;e z>G`)WsHmLZB-(xsv%ZDfAobpjpDI;A&B+T%DQ-&P-p*cL)yFm=5nL(Ks}3m}@!xbS z0Fyn4MsJ(`rbRau2;9|Gi*g;_MXIT*bQ*hK(#fEst=(pfAK@)4OWWn1-a{th1e!VB zLW}q@!UE60DR>EmlptwukDAa-6KvoJz7WI~|6Mu1=@AWS4uJ#262@LHf3u@YqcGo%eIFA(9&TZB&}>d+TX(cjMy^@##_s8(Wi@1>1T8Xh|wbG1vdYCb147W@X{Fm0;L zqvKENx(|GPbjvH?H`OfKsqot$Muqz6)CMS?Rwqn=ZKtEr_4O3O_UB-9+r=^70-2d+ znz!|{QDEj~vDQiRP!W+V`I-q}vipMPU3ndP}^#UT*ZL5dGsV1%ay_&Mr0UR^b5naoy@}^(y@E&WjA={i%5S+J_;H1(5aSd-@gjK405{;b6e{wwv9IU*G$GZ=G-R zwj&rRLIqW_wYIj#fE#U3#T~)5^8~yxKg-Q6?~0L8EG{X@%*fCqLXQk=n%IFRfm~5} z#Mjk*N*656qPC)6b8Dwg8N85EtHQU0$G@_JYw_gU+4rL*?IKf9`Wy(G=O!|r+T129 z#L$WHZM4XUI0l?S>mW`?WWIFHygK(RLzLDBrj|TLXd8P(hiLmmQ6!Msa7>YMT}Y)} z0=x(tNEsU&K`UbF2atK;sa9m{`JH%Jx#5XPgUFs%+fs7@7;6ac6 zzq|}-0RRlEJJ?TIiI`abt2QmKVH*j7=rCeg&7zXm*62!o*aZ1A9Hh0oVL0yLR76oN zH2J{S1Q+?(EqKWM?sGC_sNsd=p=Uj>$u62`O48{AaJ*T#?2C=!uc^HK{m1p^O!M~Q}d(ZBI3^Du|-^jZX1pf zMZ1#Hy_-yAm`y`9NoAxg`1|gdC(3;BY4m_q{Hc}s_mdC$X8@uMf*)D4{p7vpTHtj~ zznz|ajj#0e^AATwBLW(bJ!keF=NPhP`hqYBP9R<{S~kGAU@Z^Im4UNn6TSP^Lc(fW8#mEtzP@;hBy9{pV;y@u`JW1CS# zhd0&Tn`qAb=V;DkX4icQr>S~}=f$Xoo2r5{OY}X+@{{TOzJh-k$K*ekUF0ADPpK|_ zzlM7#9Vh>Oc&zr)Y;0}4~+NPH{1U1yN{h}oO;u^x_%io zCaNf_znp7I9FHWciawpJ&q6rbVs6pwA_YBuLq*W;@PQLCW$gz17pLUsIb4qShXX1R zy(?C|XL`Y43k$v?zZ(Zx0wpCYodERvL~c1%ttB{xx+JB&*4YDIGu?ux9qp2k2gbLN z!!rALj<7+U5#zM@u{a#C>kH#HL1 z06-|j`Swmm==p_wxA%4uFfm^(x()oom`S-k{Mqd+wF*X_4g*IezlNBlw$&Kc#!}n2 ze}9LQ?VJOnjVQU1@^7O}rjGWh7R^F)1cZ+#0|J)k?N6HG5oz*tX6v&T%U?4wF^Sj> zAG;l(34wq`R-y zaG|8Q`1K4W*rBP za=1G}H*}M_iyYD{u^S-gjwl{e;q0+dI++c(Aq!qv3|D(84G(B8*46*Eag@p zP3jOWFLux4S=C#abvTW`Xg?xx`;!M&-gsnk3TkqgDLG|O|QH%22+@Sf=UCj%a7{*G)woW{>zE~wQ;Y%h3p}g3dwL5mV5>E z+x9@8^}wN)cy4KpwnPouk;j)!CyG;Ee{4PMxAn-#ZM2Mjv8udW_p<#kj}0m>=GBzK z>gNz)Wh*PIN9gUe`fwcjT2#h#oCtRXNJjpSFKp>oz&h8m5Muew zruu2swNg1%Zj$!0p>ubUSn;yghf8mwXjJwXPQFa3`&(5B(+)1%Z-tC__o-d%BusZ2 zPWC8r##ArX8EX4u;1Sn@rjL4@M|1=qY=b$qHa+V(+qmGQpb#i6ZuS(&dAu~E7o41# z!K%dy!^UoDmB>m-8FnRJs6XBdh55de-tIYDeZk+uky?tG0!ub)xl{F`Y5=D-JeQ=#v{d+-+eoM>B3UXFHN1qXUc&Mu!l)__n&#Ir;1wp$W@f;%d0 z`#MLvu=7Qy3|HE;!`!x`Nf%9nfS=T_J6-x}H<@bMwLhB307;Iv{_FxE$w5p1?Eb`u zAyCV0k8ym)8=I*J zMNUEBNh+60D?6mLbbFtUh(va@%V<_J(6=0!((}K`f zmwNO|?^l4t0rxYhm?C2vNeYF&TXAE&5B4Ix+WPaKl4eE$b-v%u8JBuG{toysWcxG9 z{2k=2S{@eUp#3(Qyg`nH5#7X_La315X_+i^$u`((dWFmcSM4!nEW( zW47_wg!w(&?WG~yp^)v;$LtsZ+A4CD&As>awDY4LGozHYNyQY$Q88iG%jQM}yDVo} z!4j-{$$y2Ky!{``)jtcoVlPk6lbFiu`_>teUD5Jh>o(e15RvNTdzlHP=K8{xu_;-Sr+{C@(zNWU?UXGuwR#|4dn zlNo=p(a5bNGAfEI&cx{npjf`)U;@ZsC@-Y-0meF^v-5IuC@U|OIv+Klu)Du$_ZPA~ zd+yL=bbjCYblT%2&Cmy^d(54%q7p4nc%u%fyBm_(-#onOWl7}v)mAJr`dZYL)lq>Z28o1ejA*fe*G|8!rsa4G1DSElTt9Lk^W>04N=XchKvtqt zv5_NryEjXNbFMctgyRs@?WTT-d4As3oxlxpC;uQt1iF@9S1 z2dT1kn>aLf0u59g@(e3X#@r|9x6v4i5W2#lg1x=!i1)}quIki+b5{@1uS?RRefD;G znIl1t3apZ4giv-$qzNBQS9?{34c(5S%$V{hYXea9<~BH$4IpEE4@-!}dgJWZg!ZQ93=ru)+e+zr@FZV0Bsy6Z)eK{+lEDSzvs_pPW5$aIy^? zOqnbSt6-bGcU!)_AP6$e&75BEYu?(sMl3#yi80$;Zp|VKGD1X#jDQeU>!Ddr_i@L{ zxgf0C^pLY`G?7g3uN*TvKJ6!K*gs=Bf7nhA(;gJY0(E{#oW7(E>J(PxECT;?!~6jp zZ(tARY-NgOK!y#86TeOhvmNnWk@eKyNkYFDsst4$vUzLqh8_JF$|2wjT?xqA@47$wV_QwKj3P=Y#o%=(a4It1AaAlFbC9J~R47`jOWT z%=M%%GDw!UrN(%yO}E}}W*43sR@j}#SkbJBzCMvDq?Ee2>D$BvHDI(5qUCf0Edj+# zkzA`oSt;=_OA%JX_y?@fHqEfq8VLIrQ%IyK2%8m6!_bgm%$mE z(5Wr@16%Yh&uqDS7o2uI;jfm9IFZA5u(l+5YhvIP zuE>4muB7{8naA)&TZDVhwY6}8a(Xu1oSdA=2*rqKKy?1N^cL5)0v)pwesNTOKJj3G zTm*y6f+K*erR6I-x*O~4qg_{w;5g$@yZw55iWAMirt7=2qR4Wgkj$ptIl`t|7GmaY zUG2D;BRz6oM+q`Qb6ndCI}xp6-hNn-!%FaJ`)W%Rw^_#2=YvgW&WM<`J%76(HJAhl z02$mf`py6{_RWT;90jq|(Jfm&_Zs&2 z*{^jUFAqKMxeT&5Q2FAh~bJ{uVHz=8@jvbVFbGs(96KYbtPSq zyu7VXXUgfENc!Atp)O%e_TFG3T%P~DH_pg2a|ahd1aMUXiCSzjdaz=)iiNubtVKY) zHL4zDBU-jc@jE&uo*q>mBQl$_yl@2JS!Eqy2bQ#a|7qHjB7=|gTCCIB92UToYB2x- z=I9+F1lgKbfe}NWqysz$QCK*sB$Umgu+$E%i*SE*J4?1vKp1nLn}NmbSgWDK%{bX% z8fNWCV;W3;#5f&;(ft9j)lb2kShc$sFKznZjVs!LeEFLc=A4^hbE9sU=#%+=&7s8f zFIO=63M2;Kl5ZLLumF)}#TGfi@!Z(<_V%*B zR(6w8n0W=`WdT7cB;Bm)=5WcaD`ob%Zn>{s8<0(a$VBOkQiL;+KB^9ftqVN@cdWZ& zlCy7J$_n-;!EOLP&FpXpEoL*QWRHR6#y5Z9E=eD;dG)`JF8E>@mCh-7`qv;za`x_$w z`RTzjl-)#;_qG$LGDAaksAaVOLD+L01bduO&3Wr!OJL80T$2?Sk%9}_4n7($n^$mM|amIopjrh|se{VT%IwXGhA}&%z@3?n6+C-V!j)7%ch_XL;q;W&h0C_^ha~wc_-8SO;;r-Vjyn@S2xVBy z!7B5NwO#|DFozKwcxQR)8*ZZ#*gVmxC(WFU?OR>dOKnmP2yXV$Wg;+BF*2JUxidzc zk!n$Nly%+`AVAa=t;pf=(I~?8Q%-Kd;Npwb$CdhTm#aV~#C+Y-1Dh}2x%uH?64lRoDU&xVXglm4GWQ!_?N2fat*+dQ z$`w99PbSqB1J#!j{*n8gD$I2C%qJa-lpm>m_NXA#Kiby{bmi7fyIx$Bk3DZZJigK> zc0$rABb4o8Lms~nUlgC#>lfHBRJ~Eu4wByA5eofHO=lNJ+{OaWs(~iurCSly=klV6 z!#Yfcf?J~SQas8R9hO!=MFh`YQ{&sXPja&RqWKDJsoIe2-hY_doiU#J7VYo5T-1Q8 zPAd*-K-=#oM1|jxFVdVP~HP{h78n zm{8B2wHzT)(Z0Ogg6ybw;r@a*;cej@ZZ$guEPw6jkcC<#1m+W18D?;+Yrbp!gZyZ| zujL(*!XDY}SsAK-Yr?+s^2P8V;qCG()l%fb^qfM`iDZ{S7N^busDazuTQ;`th|Rt9uKy18 zg+=-HC(kS@kLo?EJ)e5ghS?K!{t*p}20DEs*~4p7YAoGLBUj`L&cC6oen6rxw~0c0 zqO_y68D^QSKCLGvCjN=(GOmhu%cgkF9T{>)%E%8Vdbef2YUm$q=H>JQ{M#FD7oaYN z<+d>#!^oJGtwpp0k1*&J7fTVhgcYBZ+GJeCxnbtqQV^T*HdFmt8W*u)flb4sbBr9f z{VYNpKe^a|ehEW|7%E}%#}RLiOj2l9k`&6wZ=pzWDzOB485I_|YY%N}1cdwse)+-q zftFV7u%$N;4nft}^F0Vl=joS6CpjaeUtw@f60s}NF7uZpDGv$NZI7i2tgEg1&f-+B z#I!&@XkApIK*nvUJgNd+mp-~t7Xt_&; zz+ft3ILN=wP;!{d-ydW$ksiMZ{@+tuoRX4IdkFREx9UHom&)z<;76=wsUK zIxGSz2ctn{-Sjfqw^$OvcK^NJnjZf-GSLSs>t;P#Rd(J)0_D1EvRKS!l7yFyM2)#? z@eA;8;BstoI{&KV2hFd!cCT-GnCt_=>_kxq!}UsPn99PkDb;PZ&q9-`utuEJQWX@ILfN*pf(KTIHCtt+fUb1%4JqFsUuIA4V+cF+ zWfoVt(HZOdtFA81o2C)0!t{d}ThgXX@EO?CM4G`9?c#LrLd0aSKW@hdq@uM4N(I9^A2-$stK2~U3 zg{WUl+XYJ5nWpBWaoXC||E%*tLwn$3!HKV46u~yUXN=uiW$+_5g3n5jvZ@A|6~!^N zuLChCI1C;q_Tan=Z=?=_d>3t!|7K;QWswimR?4g78Cdw1>ej;ZZ|2*MyuIy;9c@0( z=w?)gq|)_(B&8@C=pZWVQp($m#E%bJ!Y;St3@KCG=`|OTCWmHoL*zr*ML)0|2mL$` zK|jww;FTk4zvdrz(So!L!-cC&z6WM=3zvZy-n}IZNgZKYD>iORuh%S)3bF2p($p=# zfik$@5Dtg}x}LLMu!Q(jI?j?;JNhV>+I6~p`)9d3U9tkl{p%7;C2<0=tMItkDFTmhpKf>8rg~GV2+Sg5OMy8TN zSxP2_#m8P%5N9T$%jjY_{<1ImtNyfp<*J2GZJ6twfQfK+i$Ov1XH`k;LRH8xWMvBi z96*Lk*nSIbY8O|EuK^!j={r)M{?aU$UrB%&*YK%oGcD&LuEsz*+351&zyqPpoZ%;U zbA5?wuuc%ujU{gf-9Dqf%co+drYPO=LuQwSiwP^E%cm#MEQEa?(0K_~uCO=m+&CN@ zItUTCM5nhL2=d6Vn@5xWElgVjQOkkZU>Rk`h4N~)p7!kqntIkwLwrb0t*3|M{RWhl zWGce4=Nc}Y*(>SsD+a6jd>PqrCIRB%mIR#p}-)e(c9Q|4ZU zluB7i^ER`)CDttOltvOLJ2U!~mc1E~t0X)IMtrD3G8WU`!_sik=d2&| z07p!dtB91@eDj<9f~c^BHZwq|qvm;2TnZnkQ)ymCpX<2B0$5y_!j*;B9>r9drX9|4 zWK-JBU+5GO`g61R_b&5)U`CfwYXJ68?fkxdmygTLGLXpCss3~EoE3U-`!0HgVb*YI zx!{;Zr@Jw6gr|A0*lq$dY0kUSUDMdnSf_4f`cUQEG`ho8oenfPq5s(yK@C$-Bi|>9 z;wx;<>a&+wIWo$Ox9^(nvP{K3Y2G+xYRYPmie$0Jvuq_`L2)gX!hvIz2dBa`g(95U)Pp27iI-n@|NjT7aDtwd?$XMImdSzgQR9) z_h*NnZQ&?hDR`(9WH($I3rLp4#p#nxbyh%LqBloJpf*e_m9t&af$d!UeRh}0!%h^~ zsNZI$(3@1DymyVT-9YW|5k}Oumn>A(N#`d&W=yobi&A7WAsKS&c0oAj&mPhr4s`98 z_X&T*^#4ohMvVDF>P9;FmDJ72MBz@R4??DWmE;Pz-uk2A(93{g$)P1ddS&SPl5A}! zYLg##_mi0!C8bs>pd_12ksud^3my_Vced^3^CHF@gMXUw_1sk+QsH}i8FB9EY}Prx z%yWjZw=9dy+7XdvDx^pet>+CV8an>kLE=N5r$ z+&2!P>S`_z-eJ|59jOfA*m1M!=I`&^)33HSF|P0+Q>p)~RqgPoFJyc2=-dEt*G%WV z(P6P8N2AHdjt+cM*}J|pH)eeLbg#qPJHh_G)vk7D42at{=ZW~GIE4^)hvmOYSEy-z z2`XI|g8a1a+6?a$rq9AjI+c^fYA3OlXQu0nG9dWx>g(EclEnGQ54CGJS2=#F*>PTY zk*IQ$NaRQJnhtU49zVpHtGE3}@g-BU`sJdhF^s2FMSpkExhlqTNddWH(tmfN=HwyW zX0qgK5+p8ZtOAX%YG~U&s39yx@#+rORUSs>O0e#r^+_q!hy8UZu3aFnx!y;qaW`zA z^CvGb&b0XPYTTDnVA|A8bAW{y1MuG5k`EEGU{m$X5GX&tOWK3)2}@{=Rl{aDerl*{ zFEVY;G{d^S?x`>oSAKG&sk68uCVDtb(!na(H+{AT3E_1c9U8*U*vSWnJukx!N*!WV ziX6QouUc;iRN+g?0o+L?$usPFZH_|VvfI**x}T1jjU0p4YD6fZ zyCX1)5iGo_af0}CUgHIx$SD8139lf!IE<)-uWZuM<`XRX#%Mc(YnWufmuDT5QOg|G zzKy&Oau(@;A}kAbWj=t$YDvM))%ecTMnridpad*j1+oR)C?;Jp-4-Sq%l}92ejI6F zYOnqg2)edG;fmfFt0nm7+D&Bmhhj5;ZiAwi0RfqBif@4c0`U0d?JzGRcu_h+CB1dR z@h@JiQILP8kz`&Vz5UGk@Q3s~YPO8WV1WBhaTkU4ZGnin%WWd$UJOlPBXVV>^pIoIfOs;6(HobnabBg}=_dM#!Y|@SP93uf&T?iGKW?C;de_ zyiziCNoWgfKZK@9_3c0d;Ak6ja7bL}Ba4ptK!X_Ar|;MN-NHJB$B1s;DXTUu1k&u2 zwChXoB}1PB&6qQilKKSctw?Wz6@i}58)q}$&nM#e?vFTQcd5Ff;V`-z;SWff>ggZU zIuZi5hT$&3LrmSswyXh)MgKW0SBt8>{pa!SdigZBrLiL>nNNq}UncB(@rYU)_5gi$ zb$(gHl98bGtAtfI*)Gwr(CPS!(TBE@FlRd5uG7iwdLHHX?d#k0-#fDiATM_bZdMdK zL=O8dDc}H>*RjypfvVD{k-c8Lh7^!87!sAcAqOGxJ0WySKi57(yji;SmYDwtez|%N z!Oq@JP|L(`;4uMrEAhen$iR74fy^>qoc+*qjy(0AWR(jJ+Q(vYVlciOgjXM7vlq4rLA*0o^%zi~FL zEp^^uEK1d4(go+yrPZT%*3#tnsZx9yU%Et__^8Roi)sj?;83V+qD-GHy6{f)A>X?% z^f@kizmfi!RiSTEIZrp|u1H(5;4L47j1`Wu9>|Hum6#)=w&`Rqw-3hf;DXZTZ@liJ zlIKk>7PzTQ*}!8|V)*0h-3A;cUJI^%9Oq(4(9YJ>mxaCLxC}YQ%*!rSY4V7HRg%e@ z#eSslMt_`a=+yQ_Q?sGsQY4Cd zc9vLjoCAu=A=fu_Cw@ox@L=JO@sqWDg;^7b|TveLr{i|&CID_lZ@IWnb&=kI9RI{f#5A)E27&y>a@aStYN&ewzl1Ejb-(l zH=hF#+8kmBacE&kR1}QG=ekZvu!?Rl(b)zl-$W3nNH6DL^B2211NPAJU@tFR4Lan}V3xR#{$$%&imy{PKC1zTyQ(PS8Vv`hhDP$0IKeTP5tVf#-OT04)ka#arK1F*Xvj`s?xyz4F^{+Bj+I2 z2ZySTiWPan>< zgsuN8CWnNU6p}R+f4Jeh9#A%|lk2^`+CE@!Z-i5g@UIh2>nMvmcl%o1XjKo}WN)VG zu$mJrib((xS7L#T2id^^g%7n7!{;5wR>KZ?Uc#*JRP>JlNDtA5Am3NParp>DJe9CMbLJ{6~gy7nz8l%@EXUF)O3E`8don@pC@M(`G{ zW=!Zs#H0sT9MK(nz=ke#T3^;}XiEq;P4LMt^^3El2;`7q+O?D!nMV^IC9yfWWd_E* zd7tw;C5ufAh#i%oQ(hvQ9)5u_2Y{VAjz-KnZoD4l>`CJ&Ax(uqHGndEih zD$y_KeInwv+ASmKf1i2}G4oZ}ez&Kgep0Yv1^a8p(6mg|`M2|4Exct33FuEtSMzod zW4XHY5Aiq-GDim!P@UA!8N`P}w6DoHlY0e*rjtX(HIBV@*G5MDir z%*fmBwX&z5@iy$Da{Iy5a0Bf<>CW^Yx?fUHfzOqv@kE zVTn$sY$#K1S;D?cHiI3R`IbeW&6D7yc=ocGg@dyeW~XEYb`#3VST8)7?{8I!`oy|V z;?OnFP`w%oI0!JcUI}Ek(1Y)@XmIqqYcrU8OYn0pH-tCh%ae$gZ6Gl0AcE3QTQ*b1 z8#lGCnJTyIHX?NDb5qE0=N_SxO>ACGZGN7>yMeuDC@2!Pd8~f(W6naTs_d@NlS1l8H>`sK*nOy`Ga-b19M-T3%SVT0EVr!=OkR3Y`<7f)F>#5x{lJ4=_OsQtb=eFn zz22kc#oYvyb`DRju2A31q{v&XK+ya(E9Ss16gd%p#jJQ_xGK}dxdMv}KPd==g`Lnh zGHYo>j&vgdoLI!^Y|$!={=Z)tzo;(rIx8qAHpI+XkthOX!FgoApwN!t4d7)*bL%GG zGr|@*iLGcqis5BJdFC0ZNe}!rrTn3cLjZbILrl-(+5PTrlsBZpezYxrCf{zj z4KyQcl!JmDkVf}g>~)w1Emac{Su&DMnLVnY?V)q3UAWG1Ze?Puwzu$3sVZstlSZ5B z#D~g$OixjI9xC}guvoJuR6B;MyLWj@g1Sm8jqflbg@f>V;q ztp~G%!0y3DkAFi5e(j>8=1foRr?vvSJ##vpimB3}yZve0dybNAroMU0DDlBUzmBlO zP^pRE=eI+%cbdTROewM*su{D{8b0yiH%{n*`X zEMbze`nrZvZyQGl=J1vaf=Is495aZDbkvM5dpnTlIXxHEn>*uUJ~aAt?ed^(1S3ZV z%?{Bpmu*l{dV|{hW*vORrXD26H|$RKT_5uxs>NY<8UpDU>PcEz8mc$@VhPJEmD3ya z!j$7J_p_IKtHfYRvr}0HhRsC<5Qur+dBe@@vZouT4!0=DL6jK6tbXY-rk3RXBWEvn z8K6gzHx?2<>Hr5qo{l-{PL$e)ymkPw!f)v80X}68#-aUdtn9`787Zv034sThdK+gt z6U3trHwLS&e4f*=5U=USf_}G*z|DIeSSS9Kj5oOa5YMMRQ*AmtEB$;nW$TNhs;?0n zv8v-WKEY@+&{XINbDPKxI?R2e&9E;kVIrILz|O|Z;R+2GKK-21HO1Izg-c-`%UfpGBH&*4jgsE4ReD|p>DtI zeIN}V;}9C!Um*Z3$m5@HuXLWdH>rheEft4}=iKYfg|{j?PtSo+m-2j5U#mlKE=4Wh zpy*~pW9|#|D4Pz(2r4k&isM#16fKk_rCfAZ!B{q0Glg>?AMaqh9N@x>4{|MBBvvFzybD~V8- zv6I)Em7JWO%EQucO?*(o?HdwqaX|%Elh_vD3DZs$6yQ&cnssyUnd-T^hkf(TrJO%@ zx{|8R7T&JBvfmoFV(CV}53zMapB@*S@11(WrO`%!i&yotGSwXl^F5<-EKaKWLF{0@ zfy#Y5QdWv@?3tAF(SdZ+CyXak{KA!U4ITR0S!$;{>q}$g!c|ARKW9fZX37Vo?Af+GwVaVISd?lEzfJ}S3(WeRk(J(uRl*Ek+e#{{s7Sf- zU%-@F4Tmu&(vmQg%~nRpdzE~H+ecVfKCLz#8=%ajPI+5s6s>Pd?T_%F#iShB)mpps~VRbdyxw<<2 z7F_&$lZ;i1?lxuIe0i(#xu-H&()FgM=16dFiH&T1c?#7p*MSm2r$pq@#F(%)kmNfv%^M$=nNuY`4qpC98hxZdB%63z)ZynNz=UY$vMtROdMr!VGH z5F_;jDi~dK{&*=JRpSyV7oi%sA)u4<#?So4^XGa0kGS`ar}}#Xz>9_z8b;Zrl-&?A zOHm08dnPM;Z|)_b$S5IXhq$=*=7zGl_6;F>UVD#wf9DFHsL$v7o3Gy=Ua#xk_xqgZ zJm)#jI?sTr>u(yNZd{)z1)qhDPFPwnJ%QA`Qnr;njedF`3kZ(&f&1J@;=h!Kt->|h#7jUFn zQM6Ao9l*PZ!~R9-ClxH)`hCqzRs0Ficfbnt+*C2?$k1ty)#LJ`+p(&(3KNbjS~*Z$ z7lCZ#i3MMdm8iXn6huE9kPVbcRO5%P@y474_LMw}sq$3RVg=vZZW}E_k21bQTC}b|xmK;rDG+4?#mvHW1Cn zGvSnSTU>lx4aDG%z+fHpz^z^Excu%c)1A74!9i_%%g$@}njQa6L=OIoAFn zk$nL|=!66VK{WTfXnNN=!Uy43luV4fn#>y4VC{emIoh&~YAUX(LFeAP@0LQFhO#U4WmKw0mlP}t zMehQHX-hUaa-g}0g)dzYgr;uHt}8UQUoh0z2HUbi8k90 z2$A(G6^@{{`%s$#%c`@}xM~)tRR%C1XY z2mPRZ4jv(c)G>h`m4$ZIC+Zuq{va0NFwo{60`%pR{&`{R`UZDjj`RgSL+OQEj1LcL z9Ng?KT&{|B^Q=jHl7L4SiXm75rH^~LF5LJZrBPg5$N)-(U0xLP1J5AFpl0Tpo{hL*o}#OV;L@R^C{48jt9xW&k;2Z(C0o_%m6<`4;WX42qw>CiXo5zL44iI=d4zNv;VUaong1PUWR?Qwg_4kQ>{qP->Z7n$_b6;M%I`!b@BOaBzcU`l{ zt>oS31H;1c*Octl@lQ(%6&Kl{J1qu$-adYKl}jn<6XtL*aOBlaBe3*U4;?fXU#^4u zr+YqUc<=Y!a*z8ecU~K@#Jq|IHG{!r1s**Tb!6O|e{lkZg0ux>>NVW2Sv~dIXY=OL zR5u$CjV0H~@`^=W@hs-+c_-9|YCZKeH}U3bT{Q+h8KCdMCDdWT2s++}sFy_bp8Az~ zYOTSK+LP7KIcCi`$+Kr?haJc=Mzx>+2wj+tU8_Iv?%lhLXS{Df!v%X>Nm_crF_vS=2s^era3|$T8eP*@?4p2JWyM0r3 z+smS9zIsZc^I&e@A5P8Gd{A44P3*@b!m&_3|?^ZpZ4Iw|ZD4hif z(UR1snaK$3h{j-Ie%{_K5f3wzp!EcI?CkQcnYKS@h0WjM>s5LQ;MTqk)*#;c{V%!R zcTZM57u7IU`)u{*6p=CW>KsK)_Q%9(iJ^_xJ{EmHqE$i3BV6@u|6o81BSV?U^#4&V z)ZZE}|7;ZeMf|Zd*WRb4aq~MYd2~y@mj5O$tY!Q!cygSr^eG zz+}`r;PaQr5Z79~5D*i>L_`U@uuA0NHCP)t@qjDtg5-EU-@Rh;?;~&WNnhaO%8FQ| z13$Q`lLh~^KNYBdlvD62;}PR1{+e9U%i3;R+mjTe*_<%>6n{ky)o~=w0teYR?a?rz z*apz>kZeQX+94%Z7l?m2cf7agb>h#F;ponsz>8$j4q7+N&CS=4VvCuxgF`e??>Xh} zV>@6bW+&+BO{}cflOXhP^~?&r#$I#xaMvg}or5$ObtZFdSz9tPV?)9CAsrv)}dFk|<8l&`hLvPaWIR zOg}K-EuDOLbF=Cd!E2LK9GXMrc%eU=5Pmf|(>c{8o9l$bN0}w`4uOV};M6iIFZ|Ol zVHdl!;4lg}Jj9VPd6f#l>wNp_@bmwXM4I;)4_r>dAD>qx{=Pi-JX5Dux1-2Dpwg!8 zC)=RNHb!rFgwue6qpOqLyoV;aqRQ6#`ua`)U5X-0gGsrgfSKidwT6UW%_Fpesw!=? z6C3FS0i)SBfLD#n%18dp>=R@J6hQV-oAfvilV4(ilInNu+8^lOCsITY;2>3~?7-ca zP7f1;q8im#oY$^JYBoKNyRWZB;_vTIPL;E=Viy8BF-bae%aJ#d#bWP$oSA2HYScG86#Y~a9Rpj+TtEr1}F!coF<;%10>q0l* zmY5{;IxH4x)C97@WX7r@q17>WBqy&44FfGw0SE>R#aEp_%ZBf6(-yJJ`HMD!F6B?c zK>?XT&>$JyU&#n7C5tq5L|UFcemv1n^Vk^7tmMqOdyY4(xVgX?S)IJRQ&QgyoS@!t zBJ2I42Ur4Iy#_2Z4B-jl!k5Svrp9a>fZTozzj-p(xI<|bTNI9! zb^dWKWZ+|{SLNo3#^t+W_;~s1;8>=Le4}OjLm}8p*Bv-3L*;{|3Cp1c%Z3P{ZNd2^ z5U2o99o5q~SLt4i%z1$Gu^u@x2ZBP0a#)y|S3XYKVsr0#QOOXOA3f7ZMtBK$0WJwI zAAf#S=HMo9x4(PW-)o-eJdBLg0QEgZ$*HKQ8U=C2HSiP%ieUIA&Bv91&*!l(J&O!J zPy|4t03?3p`(G-B?}daDsO!j~;4*(H$xotvxAHeGwvbN8EV)M{))x-F)*52`b<(P8 zalB`)W90iEyoWIp{B)J=gLM}iV-Y9&nLM6srNc|kVz&RzSnI3}?#f0z7oLJl44^mk2%wGR+H08Y{dl7wA(pps|$LSonC@?lLO#YmPrm1JrUJFTMp?-o@ZwMI*Dy~6M{3Pb@O9weBWzD!x^79aV`-S$|+_S67P8Q~$-lwg2l z#747sbDX6_?f`XQfJPW=rY`goRiwScC(xrbvWdAXciP``O~@#SrASa7cu>pPk>Q1+ z>LCjno-QRFqq;hqD4N07Oy%{I)-5hb1!yaYd&tJ>1XUpRx`**<^*E8LKnYf|PeCPJ9u^ z1_N>$ACQjafpE3I=sv$M*q<1ula>V-2z@$(4wdvwAJZ^O&l$>D8r2mwSIoZOB!zj_zRIOj_ojudQTVWq1Bhry?n5%9@ z)u_QeeJ)XsZL?woLFW~~X=@YE+A6C>&`~@ufV)Cdl4qmhRJXdwrJARBp=d5ij1B}# zr}^P{$46paoP%R8Bii$?C^tCTWW$*wBR^CGXZ>5J%@ZPv-7>qD=Ywl2cy$kt42JM* z4{!(&nFu52jlXF8qyT4hd=^F~mF9pDoH=NJTLWLiRJ6VL~w+DYPx4m*K4Oe(jATpf& zql%AB{rU0KrN@2o1eYG>J*4#gXep-lfS(JB?&eCbEqRZl%KX=9K)c)G1ywljP)ALD z!=Jn$7$~HYgcHItShy6#)>g&%jf4hd3wQJ+x5{5R(}=iy<#DUN^53}!OIF~ew6pB&a_Csiqn{Lb zXfwH@ZVEHk`oyk&t@pC%X7S=nAkYFLFxXu(?lG$F->)eOne$Y6R7* zaJ+&}vDGeLYa?~V_BgNAq^dbCK*p(q*`<3G!2MyXDRpeF68>5+r`kIZB@&_qF&vv{s;oX2A3C!7?03TTQDKwxNF=?};M zlb8?Sm4f0>BGkw;mb<#=TpAGmf=+Y%R{O;(c~utp>A^|ejsxwC>%gHCXR^7#QVI*7 z{4ooCoM)zK3AG;Qc?Ud0A9S)$+!aOGpfB26_uC~ZroRwl?A8=bc?xdCH(?JQfL^d@ z0s?jtMU)^-W%iFVD|{TniSl^$JDW)s^#=3Qo%-y@n)74%1M@AZs@MWBhCz{b8;?%& zMMWy@-0N(l>3Q0-*NC51qLT3d!PeObs2^LBv{=a88mzfMPSRO$u}k1;Pk_E@u~yJgp(~;wGv|0_ zk$DTHy(;l&`+Y=tRQjFbZ?`}A}RX-kGt zN(d%u?KoXaV=5gyoogBh%%e;@BiLHZ zi&fSrI3)nLI6l_5oiVX|!gLPvCY$miQxxz$q3G zo9yp)6v{KvS~Ki3!F(+%O9{mnpTDs_efpA8#wVlBJb5C@i%<0pqq8>+gW75u=&&px zcgp7T6L-+v<(}Ip^*w26ve-g_R2+L8sFbN{y@U-kOik4GjWs#d7^}yi-xyU=hxw_N zsqVAB=;1Th^l`PhP=QRpJIQ^pHW+C%jlv#ZHR-ZZ%6=B|(o^B`gddPSEeS|}N#%Mi z<(~+njtpHD5Hb!TWCRv7EJd*msogr=p0a|7F|eD&f(7GmH!xN1s})fPdzRp#HInsS7w-+53G&5A6Qe- zNUxD{b3OjDly-$ci{MiBbrPq+%N+%aD#bPYQN6(K#Oa^*t8r8*VO5Ig3OsL0j>{A6 z@Xg1->M{vxlfw5pb*bNM-UUPsj(dPY(7Gb>|KGE{jbj;(j_*Lw;Hu7Q^BvMY$BC~F z%VTUH@bB$ZcR|gErr2aDdQ|t}1=E7Wcy?9pN}VusWf$k@^IuYLtT?KAQ$o*z7((94 zH?KZ(dJ9KP%$#z}oSmxy1UDG5?(n+cvP*i=;_xZ`rkIdNR_kjxa#}el6KV|Noswp| zPn+I*5Ky5jLXm+e>~gmF8SLiJJr&+-A09cru<;>1!>A)+m>N_Qb}7br`zD;YY5w5g zd(Dd%azC*L4;;W^Z@qf__`m_t12`}AWcRU;sydon7#6~6PQpQBu@i?+#4r<=9J+ZT z`@YeohY$PNq7?2LA9sX3%WlIKD}0(pZ_1huxdk@Mr}SL^n&ZMnPR{1VQ%ZFLemCve zv*R{QqPG}3il#1f3_=^2uR7}LHB5%oPc?*ePdf>7j|d_y8|)jF?QJYm75kj-btKnL(HwEIWA8%JDB&;EdMwy&A&R>Z@_0Y`q1thKb%!C zm?+kL(0;QLnoMXp(m<&9u}R&axvh<&WD`C8Qe-Vage#DOO1JLAaZKN|DUqHyx^l5N zUxBXz30b;p*SikoGU`o_{a&=N;mgKJ%&=MISw36Ipuy@*)jz*Jh|OpEVY9AKQv;p* zSzz|#C82u;xFqB(!k{==*(-w#5$h@3IyG<2UlZF-juOFDYzBp@2lFYe^Q|F3(mYkC zbDuZ%RLKey%deypa=`T?q1CdLXShJlNU}nK*v@|ZhT-iU5_J*HBz$wS(KLstMPqvx zzI>;=cw~XsXywtUk8qw-+H&LD50FcG8p_n^E||e;XNC>5kMM^dE!{0MH$(Ym^SI6X zzupodrMp2(O3z2Gw0ONpBRPZYAe(&0;f&k|4KTjDP2t`s*z2Z=HgorYs)-2-Sf^!O zQ4%^JStqddb8%f#j!Z_7+~e3Ki>r!suTr}lEp56ZP|%}FameKr+tR^B5WBN^_|U?- z_cart(@VZkc_d^ACPqsxGGBMK4D6zq-pEO7+o?|hx`DUWKscPy=vaqFjvwF0-je5< zA8uG1e9zN=!X&HS9#v6;UBO})H-^2~BsuzNh&F~zixaZc4WmIdcRo*dG5f*Mq{UX)w9{OlWRq3BZ3Fa>N9uR|qNAvuFs z+f-kj2hld$q$lDP$v0c_96hTo*Tte#%bNJeF+|QdQkw(zNgS;spY8lEJNez2>|mv~ zrF-oe_YGRrb$1`+_mi)@6RG#%{Yueubz$U}q$Sn+zdh4cCl9LZz0G>CLk0ehuFpiV zA$m86dV{hZQ4tACbmwqPPImIN zdL}wTlQRO+p9QKhI!exa$=SG0a@7CY=xgvJTGoR!&yJoPtc7G5am+(GLN#EP4h>DIL2uv91nRY}0C^bB?vHWPDMHPZ!&>mNRNQqV&2qe17FBA1wfMvEhB6p$12k zh?4}(j|h=PR3w2OqCXjT_R9vV18QyNhI7^F4^KgrS-=YDrYT-R+|lDEGW)Fz4SK4p!C}4)HJNyjYLia8eff_ zfQ?qT&z@62DI{MZL)Zs~B$?rZ{wp0tbuc4ob2jEh)XOL?|~o30$$ zyS%jOE%5B+lvY76*3^?6Ia6H{MaCwNPpA#&-GO;~Qw+G}SC1VXnbv)@nq8yCXQy%M zQ^SA{gJK*)dI9Uq?I*uV;!nqS#;XP;b;YCnKFG)!(fec=$`pn5ahxJa_~>MDxL%Bg zo>W17QH5d%l(uK|w>@}pvyYAmlyoS;TiYhv^cqh8;yC+XG@T!=pmWoJcQKJC=GMn- ztC|VLK*v^PEjh`AB44?Di4-3B-7gJ^*q9nxnI3qciFg+^zp=_OI=XLPG0=m~UFFp~UxML*(0OPkxJl`p>y>?)^S5YHQvlJb7-v zF!ix|&LNnJ)5%;vAR=Njp8#I>ro=wZc=*jNgo7iQyD`$3SfKC>!ZE7)TiM+u`OHSo8JV-9`o2X>+krU%Ey*9nejVEBPFW1J` zRfMRpv(SWzCE@6j^YYG=_#8ZLZ5Tk!z6}*n!?C*2<>3|lzS(mnl=TD1pJs}Lqht$D zu30SBpJ~MQ;ZKyUi_Ao)L9v*(z*5 z<>^wB*gsLcgN0aI4bCcG^8^R4p26);s;x1xcCd1m+aS2NApke@uqw2G;lGvBa~L?D zR6UV>5jJ_!We@Y|I5j_>KkDp}T7iImt10@mqisLruf`ynkoPe@Jri={E*baZ58cSynbJiSZuC)4=;r9yO83JH|{b3Go-2ASZb6VP2QiSx2$!jIa|@-^vuTPc*_m z5FKO7Tj}?{&&%Fb>}Z=e&`@}$Jva+L(zeI2y!rfyM?^%#%y%t6PfzGtWPTpMjxsdx zB%|n4M%PkcAUf1@v#fR9UZCuKDf1fkT1vg|W+POLEs~``!(&*m5(-+dGl*!{?KJjGHakju@X4%w!|0 z{M(z!tWwSQ72~R9gGNvW@~s`QwjbUIt4@SQTTFVL&(zCgRVG=eGhmD^S-S!o?H)`~ zu{7%z=6BFocv*tXoqmlG5B2N~S6ZwOa}82F#@woaOhP`3iqp+G(a7-Jstv5{7sDUC z4^E8+0t8|qe2dH#R? zpp;0A>CS98@0Vr-%wkhFOD0&?%*GO7cf?Tu*;~?GY4aDHJSPGV#ZzAhXWp6gB7mFfyx{I( z+j(i63Xo549VKpPZU@|+AQf+%+`G1&F@BMp&neKi{!@w8?oh3OZZvp9j_upYgLvlw z5GULZ;|8O4153~{YYYdzy?;fDt0pvi44Z041^>s$Km~X+22LNCa%_80h zz}_idxRl)6ovcw7%p}F5dP8#WLj;2lz=_nuj}h3ybqsjwTn+l^zhVO*N<0OS$Y(lb z7V+(&sDV6Ni?vh@r`U%^?kl+A1|~0V;X?)h?d0pN{$I!DIqqob(p=u$VK;Bg!55c> z4}KKhH})Pj@Z17Cb%8;&n`L*we}3>k2_E`L^3r67$_TUpmqHGI+7Gs9R4CX59txc; zl*j|}tE{;zAoE|yE@uP$p{Qg@dI!7QU%}GFNDOTEVe-p|6M&kYl%utA5+f=SOe8`M z+xO634ncAsaH)qz*KvYm3klEPgSTP_=|HCP9+;?);r2oER5(8FdlGr@TAD@9e{m8~ zM!?r1Tho3sZUBz{c8>W0Uqa6Q90mQZz|e(&0@6+j?3;gw`ETLZ^)eGc$pw#&dpj&a z+z-cEPD|?D+CkFxg5DH?AF9Fx&f>-%lmPT7q7@CgqVMk0A0I-M0CNqIkm=nKyIK#y zVo68~o?O^L(l#(2fV`nq7tyb9u!e%C5QImiz~#{%SaI|2elrLj67h74k=*@m44`%F zy1_q>Y(I++I64{grwH88;+bF#&*{}hb`HhgCU`oCV`UAUZ+D0C5Cz~7kfUGhLnU=4 zm=iRP3})W> zHLx1Q!BNtCJ3#Dg@EJf=8ze*3EC}wRMGn){Lb0wKV`7cX&hT4n*0mkD$C(I5!w&C* zbuUs#+yROoUhD+Lt+to)3T%KMbvFKfjuMO8LJ_x6lF{kTY__l1Hix=U9<~Re*Ag3V z-$ewy2h9}-J^@~x(Dj*VAHD4E4DJIXpmT@~8^H?EQ%0;QeN+b&B7!a2~O^HE7IF8q9*~B^3MJo z18o-fzWUqNxzge^%jeuyIET)!ai0Pg6(UpX$@hFqTVPbuReTGhz$oO9SIAwGr0)YJ zi+FWXL6A(i?fpb&86+mny0*R9A(k>;D*Q~mbfhxhMzmY8=DKfc8mMd{Zk=HDBR*~1 zD|so6^_cRr=x6Hb_ebAzUB}t$iw2VP8gL6fxMCo38e>?EvXS4ku0bjNs{`X7uSRws zFty-uA{o~D2RFf4F>CJ+POuq{K1SvVEX`ZRE)doLBCsA=oC^?vb#xYpS%xnS_6ZF> ziA6}!Zl07-?+wtDvpz#flprm1`9YX)N*XPe&XWRW21={~|(h(y-}_mGe9+LcS}ao3g-W zc&s2?&gYWc=PPiWk3~k=S^};>$G_5@&#~5RFW+xFB8VX&^#pE*-Xf!g$I75Xk%oxK zM{{vUgJpV9kj`uwg?RLts!>MgF_0auNjO6_SmP=!iA3sY8~JYRUCNwXt~aE%%+VsW zC=xgRU_c7Ksdog(F$uQQna<+a<3I{$oddNKMRk^3zPTsbQnO?$Noo#I^ z%W%p&SW;g$HI1Q#P*=I}L3myXa0PGqy?FRwJ)=T{e8fMqiwiU?)YFqpWZ8A(-czse z12+riOOWy|M;Qc`o=DeIa9wTbrSdNhSn&Wkh+FGwp^_{lWsaJ(VPebe2U&y~BV*-+ z@wJcodZ6d51K#wdooJN7uAUwX%>sQVtu#_(CfczVK~IB{hk-`xZSd~n*G(Zwofm3w zEa>NFAhc$rL36VIm%V>d+W&XFf8&XjF{VL3PTNd(S`Myj`a0cv(Aw2}YqnxoN2j{w zQkI~DZG*ObaV?iJHzKXNZxmZx>}fHZ5_dIThU}{D1Ga^Uhpp)&xgrcUHax=GUs%^C zxBc?=9~D|+QAr_9hMo|1eWFx#t_q+Pa`t6)^q#Ce6YextiZt>juB5+?tCZ7`kSZhtp=&qx zLpFdTy5kjLe%@8oP0<^SgQtrvuY zm|nlkpk3C^PY$k*pmPD%Oc=N4w68=?WO3P;4C1c^TnL0JI$$xI-x{t>+LxK1EPFY7 z@_yws8ts$pAUWZq{4`K4Vh=OZSKs4euD=W?rG!*gL*&a_06YrvQYJi1Yu)^7@Rd>KY9x(pOm3LXi&H}_t&qqae%kJZ+6DTOx zc>P;$NG$#u|I?=ZDwvDt1t3fxJUG{UR}^~t1Kmpizs?pjLw_Oq59tYhI(zV-bIYzk zjYm97|r}0+GAm4&J^Cd<8Obk9JLgzp1#QbU?4PeyYE#MK;<2^i}w| z((m%jo!NkC8yT4{NjxeeH2anO=roYF>B*TgCJ(IY)P9uV{5uU&TZor=F0~d!YIjHfn>t+8dx;<`z5ig#yEb$ZJ z(^FD3ALi$u9!j@19XcmM%DZ7#pN{_8{%ZlEPXN%o-?+z^_YLI#1mJ9g1e6zpRNRsQ z{v-hajFw(%id2!nxy?j@v+fpKeFj-$9VLI3NSYGY)|U|>H394+r<1A4m{+ZwjNpl#Zst13n+#hqmC01 zb}?72Y;948QJtMY09j$n5c>n*+|RGz(lNk->TgH;dl9glzAp*m;0z*>_7j?(3cHesc%Fn9eue zfKwL^d4Y3!hj5EE@7vUW_zSJKXv@(Bc*$C5h8g7eIns7)ckd?J<={H#y6kSpP;CY= zX9y3c(`-vp@q$UMvPbp4FOP5ewSG~YEq;bC>7UWI!NUjJL3ZF%C=LkmY@ix`rdMa# zz1sK-EKk243cV2p($6-`h5{Aho^?a9ooP1c(AKrQ{-XIHcU19IQR{VcQ4!K{-U*-& zDM?5p2(?eXGUdEt+Ec`B3z{|RO?_}_d6(gn0sv!7 z0O;VSqwd~M;h}&l?CfA_h6 zK2&6hJ~_HT#bH2Z3SHMp#J9t48kTov8$O;G@FM2S;|3MrYez0v(vIdYi@ zke8o7=6Dq+`O*1cPNfq;B?kJ>jrHqGGy{WXkIJ+QrEw;!Ak-fsy!?QCp99wpk<+tH zTbE}$#D~LiF92?po}n1$j&!|^{)gFJ5M89e2Bu^2-!NlD4J*@D&Kuv-cW z3T*|?`iku5%L5hELCrc|z?gy+6agYdNpTC|yI630FJ~sW<^vYeLK5h^wGeLHp~Fv7`%mHMw#9oY z*-6tXn6{4iipn&vk=^GRRis@*$W<10$*NV-e@{}kb0_wc$6$RZSy2G zy{mHHhHpc|OuZ@O>Q~pbQo;T&*gI5ervN4u()0ZxhhGET$O0Um$nu*_`<=W|`Zxtx z_p=q~?2dQH<0jzT)DO`(kLB<4{zls_U#M{+a>z~iy9?%P&RE~e%mxzAC2P-A2Ep&w z?(4w|()HJpVh=SRYA#y^wBY^}BSv%mld-bGs**Pq)r&P;oM9K?Sg^SwlPIGnzyLq( zDYZYC5fIb}eUJMRTg-?W$BYiPasDSWx(V?2NO%-@G%EWxT7)qeZit29O}**(%JP%E zPSLkmQzI8EG>AD8N}^(>6p0)n>~0tpt_$=v_DmJnp4+-Uw78fC5;Vv?M*{p(Q&Y_* zjC0-j1V!Ha;Toy+s-~Y^ARDXXJ*Zghu=tR^rsO}k&@UXhxlO&tfgHsQZYN{X{=)G8 zq2w=@0o^j-t6w#`@c{&du=SAZe#DMvv^e&AaCsDm(X+9^+EbHDFDDxzrad($QZ(R> zWcH+^8XGi-9j!S~;d4pl61Ywg9RR4N(VMQ?xBH^=INv0e`o@;R zPmR07`H42#@A}_Ey1#A}zI|2&bBjLWen=j%_xB^5I1VpJjw6Y)8m0poV+>( zeR;KkFS9jm{&j=dRKDc>iSlCdqeJlGCH&~@xNNJ>xL6bm>m4k}(RSmoCKMYi`VPxS#CE9h+^mFQ;OaHrNKsxAh1;rk^vT23>F7JtqLbN;&y%je^Tw0NJ<$UawBs7~wHzV%OL`pY zw4g_`dd@nJA<6@^IeQBy4)Qf{Uj@197g2)a?qAY@lF0yz zLjTu-$zOq?Bvu81H&*1rYq2$!qW-#DcS|OYl3n+ChvT+#oB{==(-9dEA8nwHpfnuO zM{gNQ8YYs_g@Zx>6<`o}3_Dsayvke0M&Gn5vIGoINUw+oG$U8~^#6m)A{VWy-s(313+ zB50{4aHf^a1;Q7&a)fW=A?ACQJ!GJ36&b}~8?ePF)svtE)RP++k7G1t;V^~Z_DuGy zoE#4_bw}gp`udlyO^=NcM&^&jH+FZ2>&!n6tmHkXlkoU5GaRaEc2Ma*f z-W}b&dE1r+jmdadbsLCIvPc`XPfh#^KB3MMMfr}1ZP?0!UY2{;v;Efg3Tbf%D1DTt zGzTa~r$1%6V7>*bo+w%G=BaFLvTWdI*_dU(KH`fl7OMMj`6__KgkT~+S)a-7Rp1GizoZOQ0MdNaCA`p*$3@O1&y@FXrXpB}0^{$AIi6%ri7_7{T ztY^-^5Nm7Ppw9+3WMgIKhb7WoDhzU580<$MXqd>JEv51bvADSm#g_N+au!^C5PA9B z1JJm`Y_u^t4fI&vikUOrSm!PC;e`}Dn_qG2N5?;iIKf%G(9CT;{#wVl-}wiq4;Pn# z6ENQddX$tIlHB^UQzJ@V+-bmGX66xxh+4+75KSv-X@HIEM5p zTdj@ths@2Qnl?W3jz<3I!Nsz8JjVGpc+lQ^QBF?njhB*A>6zFP@AvJAZ3Aw9xIGR# zI69VFcIEhL9!&UyFaA!CUmg;^@p8d{+IC_a8njbB_@Br`ikOJnQtN3i_~56&9lP!O zhPX6T334l#et=3u6c`%TQE{|{DB{svU?rWe3xxIoVmS;;-|r7H;8yeoiV^d@<>*H< zh1dZu%m%VtLU`_|&Nu9mX|BgndOOA+X5|SrH3NYGGW^-(dGH*yBJ2Q*45_J8ISp$L z8|6lIBu0PbD~s@HPK-}4fd*y{?fwvwo{F7EU?vdmy(Meom~ZZjD`EYJ8NWy}Q^&5Z zq;?kK0aI6Kr2tl?@1xgH+)s61*|ro{xs!g=xezz^aGU4d5~gg_3h!&1*8ZTRfZ~AYr|z26i9PmF08JEjRp7_ z++4?}>FCiW1hV;ld)PROa5 zaHeNv^ctUPfV*t8vaupr6SFjRXbCGX z?p>4D|BwXG7$`^SaW+arCpYoVQBqn0F2U9JxP+L;VGiYs-;OarH)hR-CDoM`Q*0TI zlF^f}NQcY+X!94+FkcK%Pw>iW_0&TiOWVFWw9rzd&E?P z!*zzBoRci{3I%VG(PEzErK7zqZpFpr7Re4aHLQh{yNM=ZO%rmqoa*ok;&6pZ3hA?O zIJnY7UY_60FS!Ei6s}g5zvt6gTmO^-LDn9YIk8lP5vXEyE~(_TmQu$B=5v~T8eXYp zd3ou{1<%<57Lrz3p)JGV`3=|2b;q&@p~7<4(Ibm)&Uqy@oR#}>Ahs_)4Ir?ASR~|> zh+4mMQ|CbS-yldfSZ6j=I?rRkmHD?+82S`nZ($_&rCIx?BBuyfIduN}-_m7rLQ-&E zm4|td%{A*jmEHngetC-8U^N^2g=0UQOTS}|m23=kmB&lbtW)vUuYu6=Ot_uc2XhRp zwqf=)O$qgqi9>R7vT|X@k;=4;%@PKWlw3&hl+ZOT(5tw3qGo1u8j2Xsp8}!U>>nXW z6oMWUVb+K&kfLQ4naVqNFxbEc6nmr7mEg_0C_H{_6dAt$qA}Z2@3U=T|Ll=@r*9O~ z1hDA>SepJu<(rYnF8M{;NGN7C4I?2!bTWqQM1^=8ZO>|N55-j8fbYx*bV;ud%&4Im znUa#y9LO+2L@xB#ZXOi0q$z$+GAX@z;K9fnscRZ+D@8_H!8rhyu`UXI&=QD_z4PM zAy^7WR=oimJA}tP8<=?lAuuwlXU3dzLCS#eq;D8`G4k=M z`s(}Y0AePL-R%Lg&!9LL%VcfoF@$d9HQ2T4elk;|-lml>lT6lQ)h@)zN0?c8p322g zo4K~R+>SdE+c9ot734{_EFQhFazyc{<1gC{Zv7tq3n3ai|ePgza_Ve%z zro4kvkU$JZcNscLk8g6(4&=ssc?(`Yk4ou2RFSsWI61(qBKfnZA-0D&g>g~izrmFS`n^7LYb+m(>={D zzK+^EugP?gc5RL0P;6~MNYH+mNB64GprOYw4q+tAV@5XTMOVb|5!6TIThtUI@ zm{IH|V#ZqvK`_hP*gNlIdTJ>or@OD*vs{X|`xIu>56ise&Ou@pWXezLWhtN~Y;A4r zrl&WSXBJ1}@uwYor#<{23$dDOSv97KSfE(lUTL}bkU>O!J{0wGy<{`RYttFSfW7QA zYhY*nf~{w{FmqhB?U|{}ZkXBYAaQ>v>zwFQW?;!?ULyW~7z7Xlf&fV5$1H_X ztFb-|{b}8q`Gu?Zg-0l0%9+JiW(?Hh?B$fd@roL39DP)K>rsBuBPr?f(&XlNhv*+g zN!3r}m2}S=Dd@I9-Q}Qf7p&#Su5TJDE>hjo&ona1_sIRD7UlT$?lhH-_7 z-`r=BW3^O~6wdg!Ow9wzEcGe}`aT8Jh%L>|_77ZOz+1cLLk?=0p5gQ|Nqy+F9jWer z6vS3x#}Wj}d{gN(ms5o#N*IQ#g1_EYW9K+!YNRe7BGHhXC z68SARsNw&oG^#Mk0SPCL&`OY|m#ybC2eNUJ4T!bjJaF-_Hp_g1Q7%Ct2eQ>s71XM8 z@w33|>um7TiagmMxJxnbtR>Xr*KL68z}4Q8Trx@RdTSME*qVJh`gCCkOra_?m# z1o;IEttF{}lB?7mAR~O5lJmw~%98%g^%a_l0n=0&$4|z**sQ~vAf{6%OlYZAqWnkx z5U=IurDKc0?j=zZ$O(3z9-wnx?^*^`6S%m#^sqQr8pxm4bGOu3t(j>KF1}VYl?^`z z^ykT5cEQ=NCp90fpVk?&CmMw-6loQuB2*6ua zMG?0(T@U;UDf=T&%$e7X--+*~UaYCO;eysqnwZHXNE7>tUAn$j%DPVQOSIGu77>9A zVtKeiqTRm-Z=6nEx{X3RTHq3h4UfoEJSmcG#4g{IKOg!ZaUcE)F#aaTswS1o67>Ae zG8ec|B*|VUb$;r}-EFdsUG(rAALa@PhvN=sRaOIy?E(P^5dsTr+72vz)j%5>?{1WS!heV6fy2T z1Ej>?qD`IlEmKyaH~+kB4Hw{I_bqWQjEjq#k@^9oD)B6|9z$&euH=x8?1vT*mc6;< zFpbUe45k~jn;BQ^YY0KeRiFfRf~wD*%Skii;^do>*M<#EU!0U1F%)`{bk|LO$mXb7 zoHs5UU|CjUr|5zMzvyj|1W7NL`v_kVpD9LPM`sqae^M!X%@PzT148@C888p+Mg)3} zON(qSWRO4mCVld-jL4>yU6Z$r%=?#(RiGqeF!1kiD9et^(1YHlYF3(xp?Rw~*J)Ww zZnyk+?5^^sfeqALiU=#RMz5aEKBYC=FkGFX-Rozh(8-Oy3GFoqeThg6)6m&vo(y!}gw{k^dMDlznfO{dxnq z4aiE)%{@hV161sFr=w!TLjXS7E+C2X zTW!(_0zhXp7b?5`K%EKVc}~~gh8~s#8-JY@5JV{v0ywO3ez%I^6tB%2iy~vTXsqf!d&jim-0MX9{+cTuIZx67s((%AgI$rx`p&{@fNavl6rhilnl8pc z0p5pDqGxT5?cd)0|3(MjL3Mbx$-T{ni7RQ3Y-$VEnT2oT7#`%%Q*=(WxJVg-N%p2; zflI;&#m(9~1Ha^I7*WxEDy0K#CYsO0dC@#6_a0$`g#F0A*AMbB29v_x6RvlrO8D_9 zZI{-N1gSmI*G5`1OA_v}uyWixW-w6$fM31I6PCpu1Mg$=ebo#!>qpXBY}teJ#{Eo8 zKs!~=+P9Vah4~VKrt_vl4x3Gd)r?5~CCQU`)~)=6UF>bQVNS-#Ove} z6{cr9(NMA3aa}N%j#H5=e;Zi+&&pa92STp<1u39lx9bMoLJ*1Es+gG?nc`I2)d6m` zmv(YBRJwLyyZqVbg%^9!t#sg6m4tEh<(=go6kyA}(1v#^^ zd!4j2+p|p0OM$bnv=m1hrmiRQ@F=7YHyw7F=uW1f=tSgw5Vm;{R4A;bn3~x+hw`NK zk45pI^y{a54Q5UP8%MYd=f;LjmTKHr0Wc)x*-JbkdRfPH?K`|pvT3bEMZvVcxXE(< z;*p9-`dnfs8dJ)VDU)^inDnunUUBR?;8Mgj+t!~=DFBrAY!35A0W)tD6lec3Gqgv7`}fr64_)D>>b3IQ!7cROVuqm z1npNk#*00*jx`DjUYBB_fIv~l-3EO=ZEgR#p~B+9k$w(gjrL6t_6uw3`XN1?r`e`8 z}O>UGPFd7Kd*v<;{O05@SkM@;4n~))2o*u z>D3_6Hr`aUleSsk&UEJ<0{Jd$=o&+j)ugTyvo&a)d>sO%{%cnX@V&+;2DDV4j}Fj@ z^J(G4u@kffA=>&`^TL%;nOH@*Cd+H)suma<9;g>K#tj@W6l`~C0^bMbt6SQ5)Xk%4uBjOR^>ck z6aRN7(f5?htqd%P-rsUQ_$uo;pxaEXmW*bg)I6g);iD_68uQyc-tw2_-7llvw0M@wJKWl9JB+31D3c!krR0aQv%Bria?OiUI@;EH}G- zK-rmE$Y+iAeF;68l9b;9ii8q44~_x4@@*=9P-x*Z8_Oy_7~x!f(_+E zBF+ry+)WI)_duZe&j`1X%xlu7`i_)N9-I_7F!qSZd0d-m+8uBY;R$k4pck0`dpE30 zxmA9$3DG-&UvG8ga3z8>)HCV8+}H!o4OFXBb0ORhdWl~n)EznO&M?{$?R)}0`ID!{ zrG&HAee~wh)7)4=NOm~iVY(u^L;S}6u%Wvvyyl<^EyM-Vd=={dE|QO$8_g-V=@8_r zh2W|6kR`sPxXlU6F)pcO<^mzsbZ>m}Hc{;|90<-kP9nhd9G`5|+*l>J^7;cPD{Zlp zHgk!epZ{8UbE-G-({_lT^IDS&(R(J7aY_n@d*}dgYY-Ty_;R(-ztnHzQ<3jkD0a8W z9-~wxWhtDLy(Gb1y>DRPU;^C3pM|cW?*hYTIkz|qmd^plw70r;I!W}B@EgGvxh-w? z_HYa$nm-)a0D3%)=RvoVwLMU<8U|oYXp!~n{`~S9c%mGv%EAA;?B)&6mNKCs< zpq)NdcICkUo!W3e)vDo5eK8l0?u~1j$=59`Ltz-(bs+opp6r4J`EKgkenGG1Rd$K= zC^oSTzUn8*h4EdHbN~lfe}cxZg1B(hqxnNV`voYyzP6XA1@6}Vr#B7fGMdY>hK8}h zK-?FqD2VkM!LB6=~R(l_*NVW@pP5REtBX6;EJ2CXaEu z{#q&iPmkHSb;li)6b0g@bBG~_-KN5P?0gGifkM{a{!|OnYRXh+1U}K~dn~CiFZ4a| zt6!ZyZvY`@7eIS4SZ&_kt1dK5D#&i8-*e!MV*|)O-Z64gy=NUTaFI{JndMjKWc_dV zi%w)e3k84_)&=Wl<%ql?KumZb=adih>!{yIl=85*#~$2M84hAG)qD!^0syX$uRgx3 z>cc8KP2kYZ?({qq#z$+|6fYzw-`3XgsxS4hr~DA;6iI3L(4DEZPieu`XiIYH{g($8 z@1ZIZ=vDj;SRJ;Vc&U5MO>i4@7n?f+XXgH8dya)CC;`xc;`?j= zHZ0)vbjwz8fPnwY>aFp*KFM11e&L1q!V^$Dqv-og;$O~V?S=>7)^p=suQ>_;3wbx_ z0R@9J`Tk!3BXMTyFjOe?Z+_bA1OzKx75_@YgnN`ueZt2kCcjz3}ETi#Qf?@qMQ*Tw$W?MnOQs)#t+B@ARiZ zNjbfbPu=WSjPF03Vx$(ZC7~v7{F6|@Vf6x{IvG+qaW=Luk6+6_GIB^TbaZr>UD0FY z)eWkc#633w!pne*{i_$&=`h63QgCr-#lMy38?YL&ANMmkDZa#lNh=g9WB=v)JYEg% zO-YAKE1rIr<6$2#IhATd8Loe&!Yfy)?gN;(>nv}xzfaLC30l{Bv)hxu!887uysM?%b~6E=3ZM+B)Sh$_98(IrL<+PXeHM@y-1$|2;^y8`^?*8ab2~x6BPl zIf`w~IhPyz2Gqy1DHqq@>do8nA+@~J{RsrPiPwo(rzTIk+L(?&^bQ|qa{m0s;MHkR z;)Coi=U-fHrEgpR@L5T#@K?P?tZ1uFzu@q|Zk)cJA*{2u3;ldAr^h@UEKIK~wn8?h zE-zMyzGL`5)%7E~6dPN%!1bQu1>pEz+d@E|==c6o{RTKSx&d>@#XYyQBgZI62G7O? z)%1T)7%f|uzQ|vBy2!HkYub(Gxz!z?`*JglU93F^N~*?Zj5|Jhv3R#RqjqMSA~F2c z)D3PEWBP>mAZ4IJ@TnLat%$23zH(vaKFROZ)i%_=RTDn`km28D_5_xtG{w7^S6_VC z{77yNeCVTCh74jvjN+2_^IH`BgeLhqm?N{-)!@U7bbC&YSm`1`AM62)B>BPOQDr)@ z$D>*|Pd`YD->3al`%_<>3n;!PX!)@N?#Q98IHs{y;((-X7SaFkBvCehM9+;^pbCL7 zu)o@SgES1E$3omcUv6o|W|Pvqo+jlyrsV9{l9rfarBOgFJV^a>F}MHI=pepNt|+T& zj|63_DsnkyPTR)KQKzr@RV+xHiNC%2x-^IP%sZ@t1)e`w-=X`P6LAUE=NB}B1Ey2T z$dTEaCQr2<(QlcQ#)c3ENZ!8rC1OL_Pt8)Lb<~>ZEYt!qaB~ScrE_X_5H_iU@4AF& zIft2{SeoT#Z=0AJ9%hU75IEaMoCacU{urtOG4iQi16-ZHj>qYvQh=5<+NxS>_2;{+ zT@6#)=^K*KVcn0OB?FCE_o`HRxpWM|V2fV5pz0F`Hyi99=bk^;0k{c`@JG!>B5CE1 z6R;OcJIJsmplnu-FEyB~mP<$>-X<;<{wwn^3;zix;O}d5J1IU~n5$kxT)p^jajwzR zPr5{IH%tw9mH-;ktjkHyVV8}*5h2n`79C4w?dy}>z#duO-5H50KVVz<%MyIoXI@pn z`FVxO`6-2!^fU~jQ}B#bd5G_GpTKv%PtBN0a>i-E>bA(Yn+p%zmwNA5rMtyT1rOI@ ze$M165Mu$w^-Vz;uOHs_JXHF2Eh};2w74`oYYJMtEgH$%HuHMlrKseu=Nd(Ks%L)r zdt$@j2g9v(u~*(<-?Sc#y_TKRy5g)74$-+G@wz_yis$c4gFbFGe2QP8^vDvv?(s_Q z(EM``k2!1!yq2A>x>+mf9M>29YYS!IfFg2Tc!Q(y57JwRhtftRm1(@BH-pM^l2x&%%EF+LaR`kP9!D<2Cvx+yE$FgqHrFH2=+vyyvk5JI%dj7l(UH z6J@s0Mp~80LFc0fh->1fr`@pqe zYFIYEKE4ue(}KG(SZ{VxZ93wl-CXu90qnL3YI9!hn8HnD?Nfa950$k1_#n*wgV2_Da6sv!EwJy(|rm;DYV%fU4y+4a%6Ks4mw6%zZl&b zUC)crmg#YbE0wp57x%_b^$|WLgr{CK{%b(f#LRR#8sw(0lYohqDrLp2zIeg{p%jD^ zwRk!e9~ODd>^?y?BA!-=RJ5ph)A@<55@aF7bP%6Q?{)3Fx2{X*IY(Pd3!fJGMLl2Y z$Aj5&KbhGYa1bmZEDkl+=NFmt52VH2kKKzIN{9<-wLD46zC|(^uWlJMOEj-$NIM$g z4Pq!Vm;q7zxzILCUHh&|jhxOf0C#>GdL1rXY@r@|f3lK+A46*#lBTFO^u#-kw(|?j zmE6CuK+Dk_p->#l{`)VcHL*=$^JA9ZiI1*L|8|1BDO-UWR81bD}5Psnaqyjgs#f^H>#(YedHYlo%00!=H| ziAhh!z$7E&sc**IaMN^vPzcjX^^D9%&Nj4wEU;&$WeVsGeUCgS_)a_a3Daf&PcOa~ zE;~Xzyz@`>+6gfxuKFu`InTzhYSsDRJelptxo)3f&@*~7y^m9oTYv0MCYJ+wOKT=& zWUNpuAug-LIDmH4-cdn6_2SOO$^EAh?D&ajaQ;g2cbQy}r4@7TD7jXhKZS1b=)}@@ ziD=uq;*Q&_Cvs4XX9Y>NMr zQ+_VMnetu;GXVSV6O9LvaD-n9R5`rh3?DxWu8n7(-2Z;D{>d$m)L3O)^!Sm-R1?-R zoZqogAW775BYDXO23Z&|wDi{gK^da4b< z*eZVWsuqLasdcAl=1iH1L%D9oXdbnzb+Q7>J5jA7;4c*6o`cr^e&c0M>-QH`4Dc)( z!kUd~)l@;zCt}yz*NYEiegIy45g8lMz=_`H;McB44%B&ceNgj^i%WRLR;j3{NbjN* zYp~CL?g}W54v^P{VSi;m{9OzBkU-3I$uuVGi`PDg8e?ParKL|@{ND9VXYS5gDB&i? z-%950RB+F?3&N}Fj0_DuKE)xAw#3JP-_oTj|dV&OouI;#rW^->3F)%LEWJy=b` z82-+5_scN6xPcWCB5iUr=IHJGk3^ZUQPAmP9S8GJ2JZf|}7N}ECHU+6=N z{ma>xqijRjqjg)wE$y`!!)a|2qS-@M^AA^`MF7yQ=sVttrw;^ugix+g|3~z!lV_Am z2O<9+%`ge}JOqFiEoh4ARoz>|4&z;d3^n|v={6@d5zWK6{}WG7?Bb9uWOHnbM>C$P zZ0CL;K&gP9?%p@E*|;Js6LyL=mCoR?s*n3WBKXI=;xbchPL?pnqs{w1OX6HCV6^-2 zIZA`m=fYt3Xv>#Gl$$7h;-kkuQuKOA=Zc!3QpN?12mxp)!k#k)i~nbS0A5sCc?A#C zd>W0)4q@tLNmWioVE%9zp~0u3qGINYirOQyh*#?3pYL+g5A}X^dHauq57C6yOSLfR zn*PhVmRK&)Qp9F3(-|@t?oe+r?h}lQGu1%|i{+AhW(X}vz0_vVnYc3{+tc8m*cfw& z&t)*qhDqBPxehX~O2_|L+y{$x7utay+|Gr<`rC|){W03euP>|ZdSAsB3S^JM@%5oT zqxwkWR{Pp=aSfO5rw=+ygi!CA-u_(${dda((H2;R*)WM5BhNx3xO1H8-u*O!O#roe zGN*g5TZ69C=Z71|s{;fCS#vBc%cmj^VlyUM#(fQ1;VCUq%D$Z-@tN?CM({t$fN#&( z9X&@sey8Tlk*x@qGQO^=Q-p1sg)Y2niT%)_hRl++&FEk~V%!^7Gmt!iVz@hr=;yqP zt6&`!2j}yphw8JB3do z)M*s?8jzwIjePA)Jj}{nnA%|XZFBft>Kq-w0q1C_tE-EYxr-cbeE*l64*T9#G$+)Z0$O|6IIV&wN-eA$R0 zpOeLE)ox2MEBDb#F?#_Q{yVCYg&9f%SY&1Or$k|<6yyPo!L;?8Uu&D^1;ZkA*tV5B zX*jK=uwF;aCoL`Qf^4#LN#{#hvx{<*U)8IttDjo%hySE2%dMf87gPei)k%j*_1g!L z;0kuc{Yt?C>AF(c>a@n2Wm{z(bszJ~@7rgSVq-@Y)<}44h6>+&K3L=t=$TeD!BysK zvz|GN|MWsB4;x zl&#(>irJ+cuo^DEiAy%|;1!bQ{#5P29R2t&g@gF9ZZbMPanuFWS>T;5UupPxoYTWlAz7ngMgcf^}3*z)pET&S` zM&AbT9IB_3D)^$^lF<_HH44xX7aZgb%fogjuPMsNz>8BRdkdqyeOcXcnkI_hxp8Y3#Gtm27LYH;MLJs z$IMk?{9jHFrDVFkatQ^$4i6pu=64V$0{gF~fRt~hdwaX{O%r0gh# zSsMR!7-H2+4f1vLAgedtr(4&){v*==*tPr_@X}~y((cS14h@;+6`*q$Ol{&>2oyQr zdlat>$L}LsYT^UmCz!!(u3+!O&2S{mBc8F@EMSw=n!xryN_nZ*x1tM@u^ zaVsj!z$Uz45|a#q-PJ>fvAq4y(~}NPn}7I>etOY`4|6l%^!dB_2WRv8^1WFY3I!u2 z4Auu*DzP^yj1zE&SU3DE=mO`kI$83ihDXXdgyl=ql{sk*Q^F8!FP}q0^1zF}Su-fS z6>*5nJPQ`OX5F0+o)0es&*c}2f2P0p`l`)oei=8x_ojkS7&T!PRD9!xzS!JHG<{H` z$I4A0eq!4N-CWTvL0I4GiD<=!T5gaVREUX>J15Q?Of5U7giCTu(PmYak_zTQmsm)> zgcTV0B`5M@hT!>*alGrVBSfhD$FaQmNtR#K>%V~LYR4+feK`|95OU=eeg0rrw=Q-g zJQH@Yz|otnlf(V+Q&{w?tL;S~h+4e~b6Tdy1_V)g4<%W?QE!*nA9qixj8nVhiUp{S ztNshVSEff9-Xq}mLQ}lv0KynHQf>ae?p$Ba)2n}An1f8w1`6z0$7IQTa?ESwHoaD@ z(q}ar&*x`_=d(v->l`LuUq|?QkFbRX~p@iTw=qduaOswi;y z;33z8NdsriJ!COtZuuZh@}3WQxitfsqymOA&>FUQu_SFowYmi`ALr=*R-V=)>ZAjmEP9rUPHkOd(O!lt@3Y{0KMiyEqdn_^Tf5(gVH?VLB+SKx6?V2(GlHy#Z9ooap$h1edExo1NcO=kh)$a zy7`ShJI3`Wo}9gpINWBiQ>!O6m-pS9x2={A;ODd7I2ii4$n%&4c_=KT#1^+NYhjM7 zs0->^$4A^^o-Wo!JR?5soI*58ld=ueg=Mimhv|i&*T7+W9E3ITG4CzEK;*#6vCPoH zj>=VSD`_f%G&d20G`Sa8%_HAd(#{5^i9U35(v?|(8(JuZzf2uYco%859Zhz{v2 z^eM%$YH?Yh*TMDX9X5QZ~<~p9H2GWi1p+ z5jVtT37xA{)FNBgwe1doM?b5yD|+tk-{q7@HHR^-Gi`(G4}*bC(|(rIke-ue>}$2A zn87-EEvR_<$)pUnG`@ZxO19E!{A)t{_WyDWfR0&4$ti;gx*_hF_0p%vNrMTmjz5B> zE31LAK$`XS;Oujwk=E^D=>g~3dH7T4)Zz2N-94k9o`GE4pwMN%XD%?7n2TH(nZx2} z))bIT@?$|WV_-XQ&{|m3j$Cj|9`wu3#|^d@3?`gMotO?PKR|R2}zX2b<1DXv2R;d>n^(bq_pV!*meLgMbf!d1LcylO@Qcd6|N9U-Ep7)PHpl zz5%y`mAOt-E8O`T$^X?{fNB5V%!2l=M54Z!Us~EVhjj7d_lq(PrR`6{YUj!T zgy$9A1eo*0c(HN&tw~Gq_Yf!Of4o{P?D0!rkFOZFnJ12&zwAtdZJaBavSzvO(S#4X zoO8SIsM&(<*mCAQ6r$fFMZmk z=UFNUw?M%^K>&T3kLKoPqk%e>U9`-d0k2X_KgYc~ zCUJf3ATzY`AMd_2fH)%rWZY-|uz4Ps`J}4fnPrqk=@tmWSOgphY@y0&nwhDzIy8(% zgMXFAnoRWAGGAMeVV?mAxzNet%qBBRfl$1EgQe8sLA7*gLiYVw%)G_L>?=dpGY{dV z68LGAw4s3VF7r_4U;Y;TS+Wt77;6_7({&7h$TJ2L2rA$owjuQCbl_@P$Irp1vf zZHCU?+vaPRn-WDeGCuy$+l%r$YEZc@U&F+Ao0f-Fhr&q99iTspaShbKYekg}Gq@W$ z3O1%kddj}VCoh#i{Kl6ccJ=mxZDmff z-;(WDH9E8z6bt&kSLb|4GJ8?{RqL2h{nu?;Sp)yon^?Oc5kLx72(AcaB0&3~pzvr8 ziK&T87TC~mQSsbbotG$Hah}YtL;8IKvOo>Q#)?1w=s7@w7^itOvzFT)hYeTR*w`F# z7+Cp~ZcTbAZFTx=p$w32AKZGx=&z={iqL6mkZ_O!1x0@X2FU$Z zDNDZf`+Cj4)2#uD4RFOp5zHyo0Wb^JD~fr!S+Xm=TGzh0HV2ZPqD5*iU%H^+@%mi1 zh;p0N4Dv)KU1gS2!TOrF$#p=HDeClXx=MuSI=P@5oSK4-s#<>vxikCRUYa%)lV+KR~ zTi|S)F)?wL73=1`b{$wuQK<@XrSy}fC5^5W=@VJ9t%yFIE$M#p=5JTAj~ zVUAuyAS$S@xtD+-M0Hb#U0e)~2V*r%;8x%Q&ePp_Obp&cl*On*9o(sQ^?{4pu!9x4 zxq{SX(7lTJ_ztUFB(7K>8ylz<+S+ER{566$bNjq%*x{Y~E`(ib4Dk2Ij}PTQp`6Z@ z1n`@jD}NdoGfs&XgFg-P6?GDAzHLj(DaGP*%!q~g$}TbpGrZwBu8^;oh zKm+xjZwTVL5<$4$PVn}nAmk|#vTp99Hjfb|S2){-Vz$Ko{k>dhWdzv0>32usJFe-b~|tj~V+in?v;E@@nd zUX9G*!gXDNlbHBh&Ymy{tfqJfe=lrz_=LnSF*l1#V3BzAGH!e$@U+R#GQK_OoP}Lv zD1JeY*kfgIMuq4ErKvTOXaqdG#O;d(_eU!?8(a-gR^73rfnKc;7EqNQjuf7@8fPAzyr8 zdR{~9-}lgq3gOq2MYcbJ_7xy#MrgeJy|4;onkxPPsSh=I@#q`G=)Jzdj%`lw276DH zv~#ny@koeaggs=uBL)*Hw6qB=6QaX`Y?wGz`tXo$pl|jI+aULy&Y1YL{X-2Q*NY=S zc2`7OYHSJYcN)Ncn~%E0^WsE5eB5XInLlFwQ^e3L>8k72} zW7OhJT_(#V1As-|cY3c!gS}(X+-f!>0K^cd!r>JjQ?E2L-7Q|r&_LXuxM9}A24&zZ zm|61yUlv2uh~pjnk%r0qYN>itR7RMU7^SlhG!4T$*aasn;C?No0PdF=giib=GCe%3 z{%l&gfxDeYuZwZlL?Vc-2W|znK~s>Pc3zIj#H-1fXQL%wkqTl&jTm5RqaR(gRhSjGo*5RxrfBM z%wvut?i%YmY@rvG(BmkvLJ;tGO(s4OtW7s=M8zzY@X6M<6!m^H=3Efy@n@M`hvpxG zpL)iI%o{SHe$KG#vXsv~*~YE&*jF;A!y$=L=V3fe@^|410Cd|$^3$z?xa`U4@nXe` z81q90Vd7S%a^$+r-si9yJrXhJ?|SG5DFo9+Q%Xe_kiWmBA-*3^3)}kvJ6}i+5)aq? zM5s{qL9fCbe3r!(H&Am`JQ2O?z0N1Js49%*e|%Fb9;6~SSu$PUFVWB`-TXl|ux)UC z7pJ|FV!*|z?BGI^ACKL4c(bP>XNV0Y8ZpJuOF|Ns`DLLkdO|zg?+WY^0Dba>tX);zi z%nD-jJHYka{3rXejx~x2NyJlHY_nCvJf`}S+R|F!spPkvv5GV;T?aA}uWM5DxY%fF z=#_ZORi;z4#IgLvefpo!s12)HY;dQB@>&GM8?wjlR2JE04{N8yrw29Yy6Mf$6f@LQ z0qT5UreG8aP+JM{mg>t*WYJq#a0Neriy2P5B8?d=soDd)*L^2=muvm*rO%dQgwiN# zJko`(mz{d)RD6OpHy-VI>Y&2ZcrAeFnO*h}EFXInLgUV5F!J2~5gzt`#RAI?f4DW2T$TVE%$d#w zXk5my0cIfdvR%zt!GNa!Z_&8P0FCPop>Y#%^rD$h|No(Jai24Z9toCTR0Lh5B0y9S z?fRp@fN9o$d7;FBP%F5kL(F|~{4&tOM=$R)cOuhLftY{FN5ET^wN>W2xfbKS`m|rI z!faAHSBw`b9|s7Cl5Uu+D^JJ)iJ|)6)%a20<0z+@OKy4JjVQRFgT#sS7Dr~m_zuv)z>|Bg2U7}*FXY)k9PuDP-1D4zCVSUyUKU<{ zFhe{VmgHQ02lP>E)kH-Rmje(pO^cE*kg?7N+gr@V-~+H3+%?bo-=YU^R_#`a>6klY zxbPs=laVPYyL%NGx^Y@5rh(3R5x@2={MmxiK!ZmDF7Grm-eaB&<`sB?{a1P?>znf- z3eWud(ALSR`R*u&wcMJSM#>_(QpnoVV?#`w$D$;dg9k6np^|U)t?WPS#-%hc^;5XfSPIivDVsWRavlDK%p4yj$=*@=4dVa% z&j0@BeAtgqcAg5nO_$&s-AwvAFCrxtFD_w?&rz!<`AAiNpHB6P0Q%-8QL`{a@S8hS zz~rQ5wmLG=sNeU*R(tTl-H|6v*C65i9U6X7nGH9C)~1AeoO#Ut5?dcbzcK!<38J-I zI^P{)-~$)wO;hvZSOda=$Q^Yy%=`K8+w%6uBH)AI#`)DN7tw}^mw|Ca)IDej{57#c z0c{9zC@=Q;ZaA4>P?hA4q#rx%=b_9$YYjMF>5-~Xy)OGn?Q;&p<*N>Kdf^$+X_;W3CKs6I}sb~nB^6d@3b$kTdlP(0wT znda`&Bm?Sm`~hB-djQ1AbnD@W*Y@E(Wg4Fc@EBjc+N7GP5fu|RCl58nVn05ep=3+^ zfF@|(W0$G_nw0t0BiYss^n*BZv-@Fw;(H6rmRjR4Pj-SZ+{=^csaCtW#VSmL6An8L zHJ*V7Xb-|Dn67SwteNe0Wd6Fs9uaTaG>R8$E|WC)xY+b_@%b0N>|EYuI6EzCd5bGa zQ~j|KJ^}8e&z(1O^NSVfNzQnTKFk`>U`=+4A!pCqWx`+QdYp6bKW{K#dG6U1tKd!Z zcw6y7&zXWyA2NzD$I}U*&Z43k6xtk7F#zE)*ity<>Rr?2OrJ#s^n;#y*>Ha?>-~rJ zRPJP-QY4eq?eH*-!UBMbZq^nFwlzCNEQ>Kq$$(56v0di_B8* zbDI7EsrVNtuQ0;#h<`bsWpSYn?_Vtua-06aqPCOGAS1H)ZdK@QI;ZCibWTz$F8iBZ|#OU-Ddn7xO5uM?OKJ2k6OcAhuJ_0@7wovO1K3_wmZmGg< zB_$}fav2QetvGR3r{7V+KF``*iBZI7`*@V`jdibE?7}rn0_w8sH<{rIU%DS5HM9DI z!dr#lqt-OK4qSufWvG$aWBDuFRp%2fUJ4M>WM%omU%vhGCb$Z4Bgno} zCi}}b=*F^Wto|C91vSj6kS4Z%$Sf`fS53ZPeF{0*6G)(#f7;7=P=}zMrk^zyh??6| zBbzJfdUXw{Hc!4SGcPw+c_r<-L4^B6383Q)e0GJV(r-6(AX3q(qP0^AO1Kz(?gjh% zUH6FCDIc;$M-d-R5VWM679OyDXdg~WdcBecx;4o<5^U0w0pX|pTv|tgFB!O1VlU3K zHS8%SgV6}bf6tHd#efZY+C@|Tz%Mo~QhAjJdmkc?tfA7(XT**_|@lJ;u0?S$JrWZVNxbaZoQ&~N9^(%*Uq)!_mjf}4NZ(t6_U z3WGG@+x;gBJ4*Cwv5XOi!rRVHR%$D0JUNEJ;O@tkorPtqM|SZAJ75JEE;Y!aE;YH! zx(On68~TL8BhJ)IAJ9s#kIv0aT}kuDW4c}%6Zim$^1D>olD3fsLKA&%Qcw-8c=5tm7Q8OJbtIwxBQ6m#76-lmY|ivVjZx zuLaN6-QW;t;z+#hDIt^#rh2#$9Db}V8&hygr^!4&zrUC`0Md#|D`_xcjiQYz0{9#7 z9O}F1PX1AM6&NaF6(!bVA~0#xlgeEmDt*h;eaKi)ZA1#`a^a;^(j_P2=*VL%=;#jX za@2SZC=pyJuNqB5ZGbJ?>D^lQK>X}x_f1AbyJg;^{D7}&&HieWm%Q`vj;6{7g(?cvjclmLm&>g z9U5S)nKIiQmkad#xD6lvh89g?WV1o9_!HKvC$3;<9W-Y zJ@9UP?;v~>M2M!oJvx&5dNhafpZN8U*h5x zf8%kw`W-w{D0nqviq282_ zzVe1XVVKrzzKWuzFnhh#vBicQP?PoIE{Dwiv}Q|8ehrjuWYyVTr8v+w>OZQ7^w?m< z2XA~(`z$+2F|2hwY68Rod5Wh7M~v+7=~y40yfN=rt0*W%#$2OEKpR^DY|Sh-V{YPQ z2Kn>J78XvqKZ#+tYxLypcd z^#DMe(_C86py%tgg3b?W?jq;JzFxB8JkLUL8>Kyy8hYYXKLCeM-xX}%4#o0cC&Yro z--mIltg?&KiT2*@2-r|tz=pEkv&v&#Uoh&J{a+2z1yL(`nxJwLk3OF#9%C`FmGY;$^Z%fYko;ADp+_Ne;m#T>Q7QA{^Aij9W@ zbeqZ+VhC=(B8MyOmuA6a1>y$g0NYa5swTd#m^`f*N%0FQEA(5es6kN2E59r&Er;`@ zxnmgo>CIK6uij*-P&(ik7D_+=xAQDxoC-6B?gQ#(FNRyES`dQ4x;O1!+mg|EyU$Nm ziVg^&T8)(yX{##zBwPPHb>Gorh1=qxBsG;CAak&NyuxYAi-tW;YVt#R4~ju^cHiMP z?;4uhP<3%}fuzi? z2mPVWxq()8pwMcuM1iS268kW7_bVoylHSc}_Z-sh8ENW zO3?3kT?6e*0ToFbBp6l78*B$Hn1>Vm?ZbgP@+|+Ri4p^}8}*47QhiK1)l;KFY3lGc zpjf^!ej5O6KTC*l9mb2m-b(h z;kRV5rFZH?2WtBsuD6p|tc6*Ui~La_1CsUY?CRz3#Q=&aWe-r2Cj2D#)Ay3J8kfEH z?TvmvYQ><8nPMH+#7M8T<2TAj7S6}&7o{@~yYr^00Zrjb#Ab9(B&hB)xOw*Oh%XP8 zk*{I#CmkqEK$$4@wENI=b=M7jj6odTDreMV^w8tb`}G8enGO?!Cuea_ZjteWqsNi6 zlA-}E^l4-^%5~f<_cs0E#@(IGRtX6%M9S1uJ-Fh8=k{3{_<{oEBZrDWgnOe9jfmtf z?N^K`9$)lU(}Dy7KTI$@X~@DfQs)}N!Q7tqK4A`!l`9= zbs?-q>{4aLC%qNLLIyPvhdnX*o(_%)k6bFteU;f7P`9|9G74A2n?8L%*A$3&c%jn6 z224@$&AC6|e%|%z$xwyQBbeIB!4|Ff^uG6>(L%4u!$I)M7(qIg?XQGUJf+4^%FGak z)ZcL5CG{Y?Ah83aXGeQUY#sf(<$21xat1iTX-UB;#vF=Y--jZ`x&S>8X)A?>j~-5x2E}HSDzi_H8H`T3u(GdCf(G?3o&8iA-}B z3nfK8;@1>Ky{*O*6|#lYc4`EG9SZxqfWDQ*{J2@YYngzGek8Us0FTk&p&kTYsbS(e z(%wkLyn(Qe%f4HBP<5mbsyY4i3^ME(sb?L>dQ5kxWQwVLdvI(+or9(c@%lmn znu!d$OR#L{o!up8#-WGP}Fw(bhmUEL=A4gTj1V3eiqWr zzG!4XPuYv&2`=F^a)9{jO2aISvL#SGqx*bir9^+zl*h~JXqCdg>S$jUk+T)Sfae&l zEAVa=W@v)xpD9nciZ=|x^yJ_U7HD2g*wearLs;-zv=@x)Y}@+zH`m;SQ52?Y!ot&u z%;@ih{M$jWll`%7!{BckC#+r$_hrkD{sqwA)dQ{|{=a4!`=3 zHB~N>F8{oy3OZU*5;ofI9c(;xQgS^oGn5B>2;4BeOTishk}wyYF_JY{%K9$pD(@Ps zZY;@m7^4yIUl1S_bvVBabVHV!{F)%vYQM+nmDJqB-GPT2nw_V!3H+eVFOG*IH}mc8 z_29q*y~ic z-{biDzE~RQbDepM=C9|JfRdM8H;ZyV2UY=)6VAd_l#F(70Z4VZ~49W`|}R-wY& zO`Te)1fAB`#im~$BMcmDKmfIajCE7Z>G#8mNyIp1sf{`lXwGG!gsoVQa>k(k;}#?t zIgT+PR3DDSHJOGMN}Gl2>zY+Z7218`!Clcz03Djnidu&2pNX8Xn+!nm0;l^si$wQD z=zh>DzfSgVlPw=_gZuy#zhmtHr`4k)#>HC(-V)^HD;RUcvSwkP8rgQjje=<(JlOnN z6UxB`T)~5@Nwpjex*o8{{E`V()4-qh*Rjpqn?S8_GU|T!)H|#8qU<4oi+85_qhoK= zj}+$!0jB$O9?DcNO54d}^gtx4J(JECtfze;C&noOIh3T*b>4t-rQxmHwq1-4PQ<~H zi9#NOO-`+LDt4Jq4V+?0`G54UUSCs8>MuDW%b3hv4+3YyNC!^XOr~6>;R%Yn=^leS zX!7dlnu_uWu^3~g;MJt;z26s34_u5*e?#fdL*tu=27jYNs7hgiWG}! zqjD50ZZguju*?8%P3-}lPH?j}t~<*TimmiL40Fhb5Ci&;-9~c7Y$+W9yuch(prl9R zw#wL>U&|#$b()1w_IG!7ZUmRW&W~K)g9*5ubl?_TthuTLO@ZLkq)!!7nX0TApSKYg#g(Tz>0F77Y47eTZ4NZD+Zs!4=wcYJ9 zFMpi-c9*bCMZo3y>(RN{$*utm_7UXbB+j+wxY)I_HWFk+6Z?*(4+F#nwZ8*Ai`*UCw^@o zqosu|J%!3LuzN5<>H09!&zOtL(8Y`;6ma+l=UvAd)!Hzqm>Ha`r;e^CZBTzR!nJGA zw`{tN5j;cZq-Pi3rpH#wAG^=a2iF}Px}~@|JlqOgXm&vt8WFJAd}U8bP*DM5;1&TKhCbbAmKLwvY9z|xtA>?G)LHK!|lbU(?UwrSe~fvJS#-P*is zpy=9m&(9kRr%0k(=HpUv@q=Ze!p~&W1O6Y{zB;by?f?G*DoTh&D5;1jA)+E3ij*iw zHzTE_OJanGsH7kzEh5Nh38@WGL_oT8(#?ob8)LsSt{9j5y`R5+|L_>wJI;BXSDoi8 z4xL~@tJmJfp|?ay!aJSOH7HjPU1WsBq7dSfO&&QPb+u%%sA8;5?JQ{Zc6PEkK}Waw zM6053^l+&cIJbed>e|c8$*P_LoNsRy&aV z8O4rwb)nuX;LDMt7dQ4>@kjHc6@u-7^Vf$M-`Ma1=Lc=NvV zs8C9ku5|@az_YWGWNL^qoQD03X|yxHOt;UDzQ+RfRD!FGeWlUazV+$=25sH>_e-Cc zhgIhtmTRLwgPwItx{LL>lr8tIBEob< zDt4wka|fp;mP5R~J?s+@;+vr#7t8riMI)h|Bg=1S7nO8(P;uT29e7XMPd+=tJW$}j zObZ9jeT(6}26t9l(K1@epqNg=&a4_cJG^uxWF=D&j=QRMAD`#{$5?)s7GF;g(*Y~e zvE+URy?AseJpi_1vu-hzF|M#d3-MHX$miu*ruk@lB^nXLnY;a9!)V0Jg3gn$t=>E? z^QtIRu^T_hpUVX+U+W$ieZiS?5oUF&6|qx}3~rKns6UNw6=!NYS}^we1aP&u|}S-u1z6-cGPv=3hJgeQO_X4Qe%#?&VSgq>Q-J3_2TOD%=UJ!xl7z`zN>#UlQB& z-JrH=&)YT=+wh;B*F6c?{N5K~?x)eZt(X-~ICZG_vdNIoPKFZen7HD$Ea;q+Dez!M z3>?6#b?Wf3URgo_Je*|4;y={QF**Z4^A|o|?jj*>Egqu_q}hno+u9{|BQ=ja*XK3i zo>F(?1$f`xjXeP%h#_AwYjAeG6ay6P5iYEqB}W?=3VbY!Iv(h9U>jWCqen>YBQC}` zG#Fs;G1(n{VU;q5?dyBrmnwtLI?@ zVAQykwvEAmWYzdm0z|pxLNAzI8G9WARCOMX%`p{T8&^@RBca;nOLTjnkfmFc*;))v zbFXnIvzt7f6!el+=2VXx*yb7c4|NzLH5N~nFJK-U;Xr_F%rOa(m$$tKh7QgC(N!#eC>FMcAC72?sVgnL*H!U~mO?Hpj?e zI}v?(?BKakhPq8LQ}(q= z)Emw&hAnNOE?Wb%&$&;-qR4p&ICCHe`ZH(}Sh-ozJ~V>@Fq|hpaxG8COEi_u32dW78HL~3xnj@GiG6@= zjDsW!23pT$PX9?lBeLa5{>l{n9wQt$T$Ran``uj4Fd(5(`iq*O4%G8FZ*+u_wW$Q6 z_kQY9S0J2eby8F#Rf-y@i51Z1G%3m0P;sBN`Hi>~4+vQvh|!fskZ!hrxk;ozL(s0SX%9r$1nJBtd(jGHocB^hHFhBC%?hwbR*av-R5fk3Q^dP9Cd=ameIGtQb*7#Ffjmoux ztZ-gXEK>K;c6(#a#coPQq4P(D(cgQmT4?J)9@&dEtDc--(r|JO z#T_>hK39t&GdJv7z~>mHPsa5HUCUosZ8_G3C&cxSqcA0+qfwBiXNnL{jePiNe|1tc z0A%MuO!PYx6cwL%19|ymM!tQWI-#WRf%3y^7RujZh50AH&ENxRRUZx$`VbxhSy(&C zLb@(dKQ+Ss4-z)ODmr?Y&(rPMdI@fzPP92@_X%>}ffW$ZwmEE++>1?1)ZEMj# zb2tCZ15YM&65*zH{wWTn1Ou{=l5hO;o4-F)u^gkD_VF?mz>l0JA01-HSL6)t@zgCW zdo$j8a5vKtrmxq#{9{@4_^6D%pP+%ysSE?#%&KIt4PZtGwEoi_`ePtrkHBt#VwpXr(k#nV`(a$`PNU@Xg)6|m5I{u=%`it zvGGmC7kY0u&JB?BB?;h5?CX*eFIsT(s6R#9ZqJC1aw2ye-O}~Bj_mcWp&&F@yy=uT z&#|`#dj$Bg72d?p4;}G5wT8nlQ_0944wDdgO#1xUc?0f8H(}l>**>)-MP!eBX&RgsW9x-athAQ9E!;yWT&MlO!ry>%iyY)l+^L^!s7vAOwz z$G3<2*hf{(8!@pc5yYp0zIl&BLs5(afI(Mi_c%g zfBf-L@qKgv&0OhG7{ufjBX&D|#Iwt7i~MAohh?~`Dq|QgEf0m;Gj2(Y3OIY3jDLZ$ zR6qIX0W`_``vKrdj|k7*mKe#spfSU$z+a#ug*;shD z!R)cjS$q>KF|s|ksCC&tZv70F+|}2|>!T4`2GFPCESNX_>gS99GVwjGB9PIp9FVM} z<=B|yPom}>KGs@dcYlvezg=B(;+cj7gtFbjbX6*1uNQ!}vWl#(pBVkE299 z-qs_?5${w+!PKjQQc-f2=s(k}L4PjUR$hUXKr1aktHcDMLm@wB`cJ0b{lN!z0MN=( zh>qeXX(TR!TT`Bx6DIf%R(MSQ`C4+WwCT|q4OL4+j0XUm@H8n~I)Ry&3c>sp6`B41<(a>~qKc0ol-H;!4*Yy|6{v25vfn}9+&>y( z^3TGA(H!ZrI*WT>QgLa(MfD7c{&nob8DvSEJ`-5Gg51n*^J_dYe%sW?DW+ghfTYNO z2m&)dAMzIw?sKes$gel;e*qYp?<2Bft)b~+Sm~cXAJzeet=A;$U+76kY;$-TRvjaW z=|Pt3ifwrYh<%Cotu$#)`ZCwJWmVj;Ks7bj=)2?oLu}8tk9ZdG?a) zE}9OmEwJctl@{!+p^k=d%* zfW=&!RIeQSwT$4PRdm9|Hq!lf9_IQUNAR_IA5I24Fg@FU%I9^fV{N{&X_pY@So03us=JV}rBU#R+< zIu4Tn6F6ypRq)i_oRUSsEN!VieB(X$&s!x54-B4arE&^V6c>;V5q_66e0_aX!vvyc zoou6&%bJV=vD*RL$$GFO&P<}`)PSDXfH+Eaww!bUPZ~Z6v|**7@#jAb!G2--s01_% zy_r8RL52Q(?Ez|*Wad{-5A6-{*Xppm^%)?+&?>sM15)NZ_b%zg0d(pbkKe+%?@)ryOOgcay8m&%f5%T)>`z=*etT;jpcSJ^+wuK( zE}gXVkU-j2*=GV(BQ97P*xA|n)Vb5|5aT7C;)iWLFe`e2z5c!oUtm zJOm1#>3vcG*7Hcj9J=u<(lJ-V<|gFD%KpEwBYTe4#+fQro@jj3A^^97e2 za77yOJvn+(2iu{cWf=EM?KPwL%_&{Cg(4}qHz#GK7Xx$?X!^;8A!j6AI023{NFjBD0^n>RbKXk}$J0RZF3 zI2(A=iDd7wHGhZAk$~r9({Z@YVr~5c-zRl!qg|0u2;b>Y9UHjP8P zU8~s7eLgg_5s6<`ObsRLLEs)FW(cNs3sp1u|oC z4uE@ps8o8-{VFP|{!*$UU#4o6*UV_oT2-Y|pOGQL#T6?TaXAY0;srV?RDDt&@T4}H zOm};W(Y0R3w$k|e@CMAor2X@1kVB*Yz5atIF2q|~BNWPGYAAak9R;wo3ZP&eS}HfR zW-qe%_;?VkpV?))BR{R*zG>|;lRgcY+eDx7{2psb2%iG=Ye(4=B!3x(AIjJF8G*Xe zr(r%jdWesDmp>YW^JauF3T+M@ffp1gd)c*{r?#wkS6+(6VNRQtAB0HYgF5OOQOs^% zb6{;WGd}SAk-x|}zUB}w%;tZepf#Cp9sH{@OAP|W1#iz+)VoiRqAFQWpFWLoXbk)- zgPbIWxkr~@Qaxu|Hn+?Y6M1#@9sRc^Ww>pU6RNvu6hDk*{u<0bWQo?DB66Ee8kUOgDuk|b4EezM(+7aIG+C=7ikGHqBCL{HBveRto)+|RRqG=me zHijcQ>hP*wE{lCpHvnBGq9+?RLYOQI7ltc!yjH6|wU;O|E4likI?_vaDMi-6qhFzV zgT{+Z10s5_-5q^peQjmif2GO~5!u970}>7$ubi;Os=r)WaS(K#pHbG+v+m3XifWPIMehh2J=sT$KegDSo4{_+ zK6w6{*#ZYCp()8|ey8@|a_O4~tfMe%pbR)V*d~V|+kaY7U_?N0HE20XxCp;A&MYS- z<*)16cFRmyibRI9$>RwmdSxv&v;yT5q ztcbjjtnEa&E?7@PAuOkh-y7)s2J4b$^unECZ*j#GSD-ue+}a#m3cWGle;S zY(u_K zUlwnxnHgR!adS07TFW1)c6fN>J}8sW_tYZm&R$b{zLm2CZ`kvyjNX!95Z>s}l@`HO zv~`l*w*AVsc;f0p_u*-A^mp6w_zx{tXQ!H>N?sdSak_~(n+p9LxaDi5^@CU_^$4i( z)u*T`2{veP9a`nAZ`66i@4d8hbtd8E@hn&d`2}6qPj|ULBKXXi&m5CrffHvRnJ(GR z%2mZ~XSP!&ouz8^;;HS2-#$r)_kz@3$ z$nqJeu=NY73R#%ADX)6k`SF^=2s@J=L0o_)fir9#fNMcCKzb z&WcY0ntS=^v^Y54)?rrB>tWE$jM;<6EQE;ltK9N+j?xi~RqzVw7IOpTwFhS=?1(Wc zmrG^6?5A3Soh7-qXW^vdT|N3e65BDpO5Fh@mk<3Q~ zo%47qWZ~X&p9x9Qww@R#tcfkZl)@amL6I#ep{S{5g#t;ic#rtu%4>xiZ=g<-WkS(F zD*AS=x^4YbSxta~Y zDT!XqoOP;?_sD(c3g-g$jj8D}ew#xE>)q;VKWe$)dNRke#Ye3*0*S(b)}IHd?S`w| zx`bfv3)f5{4}LEa%}d&a>&m)FxF@K*1#3J46IEQ^=(K zlk=UH{!_J0 zhOy0aDbO|TgJOf6__lBUz+=j!#tJu{hBD`aD+2+{VZfj3HeWr6PFF0~wMleKRRSiB z-gI<4FnEQNT)&ez4jw4?Vw>P&>srTIX?S1MD|g|;B&>drTLJ0pvlA(j4yM)Hv_Zu` zHc`P2AIbS!;?H)Z>ltRPV`cCc@$uIbdG_T0TK}Hf*7Y9Z>ra9OV`^%0$19%Go|)L< zX^BV;ILh15(!2u`S)O7Kc2MvBORMbTrQ5k22u_ah4;SLi3gc+u8cV13TeH<|_o)OM z2s}aNAva(M2cvz&{vkxWBHvLo70D*sBn6#+@akB4LP!xMCoDkk2&XV3C=pPnDnFs_ zBGi3jSGg)`9v`I;@}JC0@M^oAl}E<$y~6j0T6x{Vd24FjMzaqaqmzHts+UK&2ml}` zSBZdkZRaYes?M&8>9uqcxYx}j}c?P};KpRi?zP9)9svdN)x-TLa= zhv5kBN3N|==6tlW$W0VY)5vv#>QeSst=*p0D{^sg*5P%)YNwH#N`I znysFT#OWHDqKs{78?p=$L6McArPQ1sp5m^muZvA~N2z;k%(ryOp^);~BZ*>9t?`}INA%mAK#rRdAKWW=c7ME?~3J#nh{xXk+%WOeCj zX>vQH`0(Zgp{=K>ML1b2SlHRp(gM4ijxq53e5D=KvR1)7q|p?(zvC|&dHA}O$l*Ra zu-pnRLBG(e{lyRaIQT8AH;G7&Mwffp2QWCudZ%(T5#hj@F&Q+KaejRRr>#}_AiE91{ZJF1-zJj{8Z1&ZhNs!esi{S#LBKvQ%^<;f z$a#)@d~0f|VZ{|0@$_lcO=zRE_9?M%-Wu-f4>4Q{d&E;GB>2Hi`?b&8Od?>OW2a-7)D{XA`^H zpitNUG_vbc&XdSJ_Nzas?orfox}jm=DC-4lO+m9Se^@WYX3ng5askxL#40f8t8VYu zf3X=kfz6!fx~CygYQCHAk}GZP@~Ng>XWDB^9C3Y=u647Wr4dfEz1wVy7>xVEDA8J! z{g+gqNJr=Y%hvoYCiGKkfbDsvWT+DoH3eO38^+YNH%lWf{iO#%itSLIXmxcN2CRbr zGDkk~m6h}iiL$E$veF|I-8gS{WD0f^?gQ7}F*k)fp@#2qKlKEDQncO;DI3H>R2WVz z03fqnUeTAm^a=_NWk?OkOr5aEm6ki;e>=s8=P(t!VwVO}yv@V+CA( zso?h&y^ZZVD=SfS)~KC1?m#H%!f4W^OP9X*6RFBL-~5XYl6?e2FKh&Wzc;%}?2c$< zLS8F;a3aqk=joo3-?OQIcmOW5ok||a;XcijO3!XH20J=(O~JY!;`UQV|Gf(JZvH>q zgFlS5le_-$R#%%lihJJSUqrNr!L+SF1@?4|9s z`i_G`>3{d6g8cHnF*!UZ2g6JRiW&j{N9RUbcz@u13Qu{!z0gYKPRD zbG69&eE=C+d@Y)NeDh>TL{7gRvMUwnrj=FkS0vg?(D|68X=hVY(-pjQLMBhiB#-mm zU0a4}{S^8&kf*7qk)6Ri-qaI?NaDF>Q&u}Y0Mp=co1D?Q>LiG5{ zpAH3KZ?=>S=uD+><`)Xk{{aBY>mpbN;h)-JZ#!J52H5FZwdO%|m$~YF5sh*WPi^hj z54pHH{f3*RFNME3xDWuv(*Xbtme(zOPFQCELUpNkskB3{wgNd4zv;!%C(~e4ddaNGn^Dl)K-W>F0%CtodpKj+a zio1UOhBrL5<6wO6Z?kx6V%z|7AAmopsMAJe{S$4JOCboOf*X} z-UsOW7K8nn>jk<-AUVg|$O+V9IRQK`)|9U|{s%E7e0;>F_J{?*nREcocvzOvaqS!4 z$GZfJvcWqSM9|zi$86Pajpl_=KnYm3{+-j{~3Rz*Ecp@>=C9VMT(e zhqi<@i-y?e1$>?^@NPt=rMQ?GF;K|(5(r`dz+L`}n*XAr{vfIE4FVQU!UX#Tg@4uu z!HW5&K0-|BPXOY42;sGI+5(6`ns!^NP)q|)+JmWq_TKv)Oh==Q2@%JBpha*ld_xTT zSK!ZwDFM1L^J(88L{|R(2ekWM9+pRJePo*RRr7n2 zB82;$fTIZ~S~60!$tP*$CH34!8R=zqpOQ>|taa-4|0K68Ab04Ka|6FFdl5Cq1$%2;jRb-$jq`{@c0GWt_ozZULa;IAJ)`sfg}lJf&PTEe&` zxWJutw_>5cZvEF!VVi)SC%r=iZ|x0*B?a8c-s$9UWgmr)858*9keTc5FF7XwnKEY# z_FwlWnI5SFp*BmuT;ZGKYFVu7KB?qT(<;`^_TKmrXL+IPg72ZN@j$(m7B)yD3`JAw z^on9v`+=1>#|;SF{^lXoJ{{8!dQ9QguMaTnZdoMc!MM1kF8+@o7@?^PIKfA{$#`xX zGdnh3CMPL!V|M8&w(~L1L{Ezs&F~%c9xAO!K+DDpdCm98LST&DC9xv}R-^A8__X`q zGtkBz_c8B-%D(IVT*(s(fE{b@yYAuwJ-)UWfKPFWz32 zZP)xvgMfICft5|FC&%}$R3*qqWOVSpS4%twZ&qA7GP$(->WAREftA*0|NY{>h>wEn zgrBTfmNd!pgk6?ntQ6YL`=aNOeDhHJvV-PaEASU~pI5;S?1hKpmuGv?l08yOREYv& z3|*rQ+Ko1|tb_lIZJU|)UH5Zwc8M-~8?eK30oXfZ4lS3L?_X^O#*XRV-S!(l{P&IK zQ{XuRTSux!_Rlnqz#-2=BX_S9xeNw2cJk}e|9IgKmbhK`^rnQkcELm19}^fQxQ_ZO z^LzjQ%|L`Po&YGe*ST-!>i$*-+F-!hk;bC`gNcq^AwPdtLY$LRzM!BW?d{v!H*7CQ z&CXh`+CSA*kdu2!L{f16+BKCIfq{kMwP$;lZ;=vX^kdk*?5)%Y(7RMJf$)8T?c+mm zvAXq5c#ye^b_LY|(ckv$C?1p;27*9VjlwLcd0OV5K}C(=icepZeO=6nW%i zv!&w|#KdA3t@6qWP2(5Px9)}#K@ID&g5mM0R7>o8ZIvGwkf?wK#jXZnF(M34y8h|D z>;5sk9>VaZ#>X4BrW7fJe3`vI-crx{O4Xlp1~mUtRd#?;o2fheQ%gC51f@Kw|f(EG{(s$w$61e+r&|XkV=%zjO z73Ao@Ei2Q81Rx0G0hz$9t{o4r(CicKC2%?vG`ERvY*)&jy#;ne*0O+m-*tb=Uw^Jo zIthj&!yUJF4TPu!zf*{9jdNY%xL)7fU^zTe&2|gpbzT+hWXOR;l^dL(+n=iT!~Y2J-4)8)V7KIT z;8@>*|5Ok_eLR~Y!B`$uvs3e*@95}|8d`%V8&vKvG;e46SSl#wz$vL^hw@Tb&Mux| zg!y<)6*A1cvd?l-=t(T6Y@M0oSqro%7NXNp2LEk1hCk1vI}8j~A6I zGf8CdJf-_r5oa4Bl ztK3So%M-g>v}16<_)ATizXA?_O6^bf-##ex*6E%#I``cLr2}tHw`z=RccO+k63Qs; zKC3}WwK8{B>oT6AhZtI!@f}GGpmynaduB??O&3%jD`=x1KGBGbe0+F_QFJ_H=KCGr z!9m^F>-KL3?%B{0{Ikth>jdihAXwGtg?;@IZO8byYdVWw|YD2scjmXEG+$az%GW-&j}f#l{Dh}Q|^ z&O^UtYsT`;N9Px8@Rk^vcIN@qyNhT6>QUJ^TvEP(m1lVgq?n}1 zZa087cNyFBgN`*!RRG!y5tx2Ovzn54ta)&la*mnoS#F;2Apb7N1C5smX8fepe%iFg0C^ z^=WLQn0BS#k>`&0{+QCOiGWzjtKX5FpsCDJaSu7aCZ;arWO+2JE0Xq37s$GwyX{`x zM1(6x!R5W&P?d(v1(@WG8MDNf1GWgs&a0ulWZNTDp_Z<%5S;}btfZ9TFJ6$z>s=?~ zxF~M?g%TJ+qlfxK$ET7UCuQa2o-5H>o@Hm3K`Co$(q+Qh5@TcEGj6EL%R-=9rrlYH z+Y2>+eQ72@hX-yEP|$%A+WO&k<@dcBr#F1OY-~ELvSm}}kr3|M+BiuDDRdkby~tgO zMR&WZYPd?cSV9Ib^9<197z27q)X)0dZPJXra*NA|n)qvHP~;KT&*%Q_OQR2w<|wI+ zRsGH{jpXX(E{ov>4*Zq2t|&KuwWWy4i55Sb!pv^{TmbQZaI{@8n-Y7MlrRto>h`|l zy^My8j!vTnN)$Vp%Vk2DL~rAisBU3glnV(!O7%hQldUCivy6y$8x#}Ot|wBX1_!JA z6JMV*S@iUtPzJHZN^_-c@6e8N*Qe|Hg`r->offojT_yljynuMnh`5=RR{-LMUw=Z! zHF*tf!w|-blehPUC)b->haqduBY-0r6vd|^jXA3Kq5*6%k?YX5f`UzNugFxKcyIM1 z?}_#e3eAI}Tex9}p}*RFqA5xcE&ia)&!?&d8W@paV_P`0i0QX1^H=1ac)3_gNr)Gw zrF-1wOit?DFqskBy!z>#KKXZtmb9qCBK7Ifdvz)w9P* zFk*4a+&-IQN!z!}{YqEEifr`~b$FKAG9#~gZrU{-!fc4&#=dbvdmAu{x`S+WzJ>x+ zMTLkKfih2O1|=HL}9Cw>@{Wfh1VE zfisfuyoAC8xY~_Omtc}@QlmNs>nedjt)sHZ%6Js@f*_3VRNjW$>8Cl`#= z$$ZPRow}cY{hV)Ee7MM@_?(kXuK!P+QlP>~j9Cv!v<+65KnyHF&ZJ^*>KU(I4>x(p`J~D<4$eos2+twF z@OHSM)BLh`9A4O#^fRWtFl~+(losr~mFxo*Ao4E4y;n)Unp)!ICc{xKH$CaoZ;;S1Uc_>@{V~I_u1UzDvc-YjgrpTfHxZ=kDL`8p&uLlNU5%> zzkmPUxmHj9TA^?*x_LS+6b6UibXgc?`#aic8qaZ-Hjhls#Hp$w`EcoX1(<&SoZ3?{ z7yaD%^ed_S>g%_fvNid1o@m!_yt?lwtlmVE5|u~B);T!bZdrnv@D@Z3#QDFD&LdE5 z{2)vl$oreoO=Qt^No=XsP^qeDr-u^%4t>y5ApiIAFN}JaY$PDTS*Egx;$mri=mO;} zOn%&rb%4q-(VE|rK;lI|Eyn1!ik@2go?3{!$FLnKdwuxYlYUUcq^Q|t333w#H}yOH zLF$IDf@5m)itRDZPi(Ek>b|PPJ%-f1Z1=f;eOyrL$8sVyWG&sSscxHeYGofaN9Dc< zE`G%Qajo*AdUMO+KZA4V&u&FJ*!UE#9oo$57pp&#LWYZH({Lg1&@ESVh5o^W`&p0M zH~9=EWKI+k!;-IiQ7V9tF1C$LUFte9hQl0*dlEpI@k6GsH~7+oV-mUaNFfidt9d$< zWEgnAWq!`os-aIMvY8ByX|ZL!SGWH7@TR#t>a^{iU8SC+hWR`0s+nxBM>P%%1r2b67#)1tL*i7Ul8`Z*X zw_}`sUu;tA!pd914~;8+H0>5%Qin^D>{PE=DU! zXE?B|jYAD9s^Hpzvd>#d__oucxfOQ+R?QI;mE~jykZ}4t^ttc^|=p%o*g~p-^v!x_q$UTIY<`&m2QRCgT9-}nq>k8ul^5K$n%cMXT+Z`_tQ-2*V zrt3KR&zW22$?`z@&tGh^)ao}4h*drMK%KPDk$Z15%@3f3(Ddo5;mKXjkb3 zBFUi-kZ`h@=-3$zMXB+F?(6fH@B_tNwx58yfbc=fOkPixCMQb_e{Ec)57d+T;Q-qE z`o4aBW@|M|OF8?X)+e`kQNza+^f$g~O6i@K(BtwUCFl$uLbB9Czqgg7Ip(_p9{b(w z5nPB*3>n$f#$s$Y=y}$4`~caEIKIX0jTddzt`E%e zQNjv@6-%Va|JM$sPy;;Xh}bHaNOW$+mzPHU^(}Nb0$>cB0sfvB4ECRouOzkb%Yrn6 zrY?*_$)f06;1EL+g`8j9Ege50pG1DSLiUclyy?>SYKNK5_bVOC;*t8=y`GgcD~Vu- zmX^zr!DBz<(Aea#vo$6E0O1uL74`1m8DUvd)3o`%4>Ibx`mBgDlvrO`mw49VfM&A2 zuG2Cb=Egh4xObr=y(6F4L`C%g95qq7fsF2JX^x^y@?IQx5)ax}J0Nqt-b3Cddu%K! zYiOh+dA)|poUe|3i9_epB~V??$VV*Ih%`n{AfYHxxAB+AMjs-Q+Xsh$bHi3D`Bc`j zC#S#`Db`ov_F)j@RIGp;@1nu@^K5MOl2l?WLmud`wp8i*H$TQJl~gWQyS<<_JyJ2SA<&y-dT)nk}e`3M?v{`R9t)G>^YM3kkc@| zzYK~*wp%4J0>mzz9BM2(AOrtZdXfda)o)hVY5Ld}Izo{PW{rgF3GZ;8M+Nhvt18pl zR5wANo!eUKs;YEFV_!ld`G+-4UL|k^?X-oOF7y{ElnKp7#Kmz&Tu>-P2b-~oh0{{x zF`NQ<)e^~(z?0HBQfIjz$n&`XkRj3Zn>r+zSy|BQ?kuZJdXmndkZV)NJ|jU00Lw%>%ae7Z)xskB9)-oA`X3wMaPcVNn*1IYZRZn`A{r zMJvq(rVib)W`}0lbccF-FV-=7SGcfm-AcWBUjo9H31<{?x`H{V)0=M`;E9Ss(VvC# zA3y`i;7+}_s;sKZkYr?Cx?{97xlBuORG;J8RooOKbPQlTff z;`RZ&zAgkzP_%=AD>*4Xp6gS97Ekj-rZvoCN@W$5RE^`U{Ec~pVC546&f5QsY5&^% z$<@cSS_-$01p?R3!6ign?i z=ffmP;3`#VgMHvaJ2{d$(QkuBgrto1B2{ryp~{d_L6&>zHYDfQJW5`Wt;6bkMdwWM z(Ta!W2f7<>lTYJuw%!rsJQY=;6Y-ACU6Ko#XX6bj1PT515Yeak2fvqCvr|L7aYdfq znjPC%Ou)6HNTF;ub=OMf8{3-3T?RzZR6jreirPTamGKK^fUN9_uL(HYm#;&|o{BFN z+V?X)l0IY1!Nv7zi=2kebeEi(fZsyXZeVvKls^Fr0-ryB_~^{8g3JG!m;}Rlaip}_!s!(4-RIzOVmP&2HHG5U{#07)!zQ)w>bV1 zQ|GFcNDYPPZ{O}BZcwj4@@ocMpM|JPK>QcWDQ)5O6=X9gc)L?NCy48;%}8GUAjEAR@>B$IU%kKZB6 zaLR*oe#3_PLr{I3lJVj7&00OzdXTAUcpZ?@I8B`^!#>Sr&L(T-d@{1N)xd+x(zwo? zc6t+}s*k^oPzbMevz;D5fkFy`RqlRlbdqeg3!DYjqbt0QcCUDAsEX(927Qk4rPA3?0|@-}Vzt^mK@N6&ZQZ$^{B7B*x5El~cs9Tq0>M zpvy@1f_4#rjoFbX19)cEaD}EN|CCnubCa`5pxZa2OH2iNl-yzTIXh+v>eYGvA*WOkJ3Nkv=k5|HN4odm z+sC#7SRfBvb_X-)7$v0kwVv@!XjkspThyS^%lb$+(xXK*N=bCHRWhoeRO#Yf^M)aOuX{wPo~MswwMju1C=^`0Pp`}rZIJcDhJ zSY)!9Uq?vkZ0jk>v!0`|7O(V_8r!N97gPf-lJ%>uTb7oY5AnzwqTg*STFC+!++#qU z)@)bx7yH?md~iw+hjAC|onkb5;-kTfSQ^zZ{1TCtvXasWEL;Nul~Q099|m9N#NW85 z51Ou2(s3mt9H$fnjlRG9lCTJ!J2ZeGTcr}R%*&12xhsK)H6H)^(xLz3WMC{vYbiDa zp&lbbs>1ptXsY*zLIL;|A&w09m~6kCjB35(Ml|{{P3ngwi!d z2}IMB(o~Q!o9TCxnV3Q0@5N^eh_FYoJ~LM`KGa); zr$^7b5?Pk{=63nTTiSu;%?tu|67B6C+L&^-tTJCx{#W|`RE99siA z%9)}wl%!pWF^3M41Fj_nUYosyS@b^$aF`|R3UE_~u0{TgQ}=^{Fx>jJ9)?T*gLrMH zfG!aS@!FgU2lx9)Z1O8_lapD@%Pqlq=x>7<2Rt>VqY{$-)+t3<>vu~{`lNX2t$_7= z8$r{(ad1uT3Ic#%JsLJ4eRL-T!BN4z7o+uEN@+A9=F1ePf;3!HQGJ}B+FLZHdvcRb zK}+g2t|v}?i{%8>y1_~}cz}TvTxk#FiGiUf22dYW9yGm9;~_m$2TqF-7j$S<@|s&1 zE>Zz@pL;DZn(L)p#08z%z1@>?I++5r#e%;@sOr7hq zGcFea5UD!4KzeY7N5TySY0KPbxQwA;$~VY&@8ts!;TAwkiR&P8Afpm(y)R%Y@do4^ zxVBJ`l20?cjY|OUb=iv~J3ISjw7xdW1a|$jHLFZWs~AFDi3hQcIoAi`3T@d`V)5kC(Lc(}zQ&-oB*ZC>e5|GELB{YP`f&ZMkPE@gy}IP#TFpc8QaRKXZ(_ zHFSJv7F9XLH1?>o#*a$WmtAFSy1D#zmx8x>h#&K1NP#^Sv7ia$&uQ@DPwMqna&f-YU-Fcgy9$4o1 z=w`LMs4hfLZ{gWFHZ~~*LDN@YC#@SE5s{Xabr+oTk&3r3B%*bF@jwD$>|nbaMw{+b z6LMx|VHDCqJzF#e*lsxHMN>P75zKC6MF5Bp{_dH$2QR_RU|CyRd+N^-9Tn98^zb+= z7arA96y}zfT&jHuxPG(v%GA)PP;q@24L6lz?{IrEwRG?qHdF;pz0s040Q2dzOa%#s zoaS5fhh~uu)T1(I)Y%5)2BEy0pI_s`z4&SRr#stV2Y50)*J6^I^?0jB?n`mR!j07j zrhji8rGEgw>Oc<|vo(3`<1&`xfXBz^Ds z`R#gpKlvfe8@C8eE6me?0#vWbKeJ!|B@?3IEf&YPfI&EXWI7;K3IgUT@x({WjA;MW zf101$w}7X2{*+!tuq-J$A~c4pJ|N`z*W*18buRNE`TWaS3vODo9ze&PFZo-D7+yI; z++v*;2m9K+zE=^=4DhH}T3T|gW#%n6@|@@7Y|P!+JgE@I1K(5z9bY887YE%Oy1F#5 z!GglVI`HjLgcoQ@jXnRt+glzAe8{bj+?==b?7GxC*i_=Ekf}c)BWgx*nRChB#Wc;# z@BGow&~Qe!s~+o)@N>J`?HgG6y7+j;{TYYEyOb~ig$OOWS55$;i39c-Xwh|iyU)V> zgA5==*6X^nUfzQ2A+$ z#2DWiv}F?rQV8OLu1O8u8{YVc=SP6h8NM{vTm&_saTa$qj%3`o`1C`Da@U1dpaj@h z$I@^)ob9SbyNSHst|}_%16m*O3s*~XVs;M|qtItBFYhYc2EU$kxr5~8qg z-+or6&1~)VftMv$cV1HADzERjd@4`B+~6-Nf|}L`R2pMz@!GdjVmVHT|C`Yq0e^PO z(hHe^#a=MW5mf#k()0#|O~qfAUG8;xON`MwbT{l3k=bdPPC`7gm^+#TuX7nh#-%HV zc0)@}U+Lt;oPwODJG-XKygNLh!T?U90TqfP2g$!+%|SJx_SP6P^C~rW3jnqvBVp<@ z&PZX*w2z@n*JcA}?$=lEL34;Q?qn3briE54Q#&fWQ%XT>>pX&-WD|2QUO*1`JF}d# zEg%~uY@2Ghr1SkPP@}v(xkEY*()UBb=HQOKeg4DYdGE7C29|Gl1l-Bf@D*$FgQv{MTONnkxxDo27{{YW)<>+^j2m^2baC9uwM*!gn);L zMpzu3_THL^Ua5_y|HL%ddbaec$=74h${u~ld7Tm)au5357A}SC1Oi(W3#$Jw0)zBE zarfe!UWfC<7{&+>`I3>17i7I4ls2V7fN?d7FNY1jANWg7bn*u4+g#$E$T`pjrBqaIE(CYuAezB?IsI%v?ENvMojHgPRBE9Rn!V=3au0%7kfC z-E_~0LG37;yh;1p`s&v@dg4EJj;1&}l)kuI`}z9%`nD1!P0foSuOaVYOU@OL*Asii z@Nt^_&I{`Bq$JzjV!XqjwSlB%)%N}BhP3AnpAX;NTD}uZW`3@8{6{LY?`=TWr0Hwl zmjA`N{-QDPCFud-^6f(g^v{9b+JdtVGwrDJV|1!9@S+h4O%3dX|=$Ja9_UsKla`Os>!5{AKkT~ zBA_5e5V24cR8*ASEQlaQ#U%712uMee9%58LK|n!7q^p1=K~4vk<}3_` zZCFh6Pr{QYJ9BK`Zc|WE5uQY2kDV~7(gw$lj`yB9^8Lq;UL9d8d-twzkUa%)z5iAjgj-5Ao>NkHeg-v&W6L+I{#L6ZrcIQR3%C_3W2F*kWcb3(3ZY;dU=LHR}lpN z`|8i`E`TIx3`krw=j#B^b`Qj$s4h@&_F)m%iQQVmtiWY_@VrJPFIAF z<|SPnHvP8`ISzv|Lt`6hSrtY1Aq)!_Vc0uJnJbJ{@pN)%c%-T?HwR$GtzLhQ^( z^&GMNG>ylP$X`k2Wot%hFGK+(U$Yf`cXiF+J!1C|*Kxo4tYb@?A@I`V$l@(;X_}m> zBcwXPF_@2MzqaN%GJKW;$?(0_1%%8N=Pp4bP=)l*xqCu>0RzoEq_9Ln5GSbz^2Go= zu@rz}E0>m3ZH_?mMtk@o)xW5DT#Qw!^XqXF16Sk37{2p!AL#p%7-){k)BS?c8>;`3 z+Hr@L_k&)##5+guhwFj5e#WwT17G{MFc~!@8$5-h1^qx02d1c~czD9{h>@{z`R91G z`J$PP8#j)g*VWY$sh%b2-8rCl^7kJ5uF)J>2~aEuufi8myolJY0TZp={xwgLxw-TQ zS#Hwj&eWDRo0`kw(pX-oO8v-uw%Y*UOB8gR4MHb7!6~&+`orf17}!r<@ROc3Ei2n~ zI3t5*e0Yj=fq>=+N*LBK0En%H1*~oe*OS3DU=Pi<`uU^d}990IRG)0PScCM&OFii`1;V{ zzzIz!X-5C{Cb>V}h6`5-hUulgJcnbGy>;srw?nZohy;XEkvqVESazzn;C}XlAd0-PiHb7F5_( zTs*ohYiubM?3wpmZ=u3gaJKI9gmfL4;0Y5K3!Vn;$=6q?9=C_XZ=DY4@3+va zzg^usF$UuLGn)wOlazQsFunacaHf|x8IP^;G>>WkolGt+Vxo((*$)17_K(`-Ge|2u z@=62p+aSqV13O*Umz4KLFlZcx>*|YW}Z?G9EQeXy5gWq$bZ`5)v8I zx@mnN>q^@_r*zZKt`nF(NTfHym>+k6omJ-pf~vw+Eo_emQg(n*>}3aoco|(Tye6=V z0yl})SPKeO+AhvL8$e=;>w<^)YPDID)!M!pR`}^pLRgqKDNA?Sf2NoL_THO$2KfA9 z05ml!x&Qd|97vwSz~laJ;Yp^UCy-#CzFq!6)l=gtk5j;`x}Rz);N7lImWyw(Ld zpRI*p+G5Jm#A!p^?74(XrwJ`#yBE>ljeb(fP4n8)f(9*r#KWYR$eNO!Gq^|fahRuiznjYNUT_3P$;&K<%Uj<^!RE>G$; zIj}F5v;XRQ#7|(gk#4El2Y}r^rL&C%II`Et?hX!_!22sA22@j_!ZKzk^mSK-2Tx29 z-rnAuJ40>NfqSn88ZcFH_4uVVLbr(qff%dG)}Lp?etn2+rB#BIrzX%1_$eVU^#!~C zImo61LS$8GF#)6LlVH2L`7IjozK*@BHI;RW9#m-Ue9X-lMf9;iuj(eiRfC2!!csMB(=} zZP8yu8ry-8aI8)km650HI&)eU{~_&N!;<3deFQ?Qr9z~CG4v|Xy@cJ1pU1(j0e7rg z;oSLp?Vwi~&;1P2SfrB^5-iH9s=l0^DJ_*Vpy>li*K?LtSD0!~x_dCDow1srcMfbK9UT{_UPoxd7 zEiZxdAdp%uQLtOA0n{{Yf2 zH!9pEC~tMw0%YhHKcao;D{VI`E3=}rvqwKB=_$S0D-y`KXM0qY+a=|`UEvkV21gj) zi??*^si_G_C_1opIvsfx7o(tAeG)!JcWWXwD_seNLUo+lZHS9V=KqwypK^k?GX1Ng zuEF(>DMwx2prEb={I=ivf@lGW1C;F-QmlJ;}A407*(+f*ES-eW5Fln%0 zxdXsQxK0yzOj8#u$ZC3<^X5SVD@P7?XUr(h~2$v0no{!FvFQbDVWE@u+ly>o64MoSu3L;;W)sNcX_tBSyJ ztw$n#az`i1uhm7tJ+*ti@yejuh}%09Tpg4&kgksCpP4l@{Qk;-ASpI!LsPJH^34Xe zSR9u$**Pf{vew|S1s7<;gB44$<=Hgjc6N63{KDl#LfsYZe6c|k+-2%%8{DPu+iSGM zUJ1v6fYDUAEf*`aD(;WfqZPv})m4C)C!BK?%#ECSA#7jS737-eFwnwtz0=AC?-x{g zC`QCqmjs{`(Sn#`U~)&N8*{QiH50B+)m2vWB5ZVM`X-U+*~vb&Y6w4Q8mR ziy@OdnKpaAOl`aMaXcbgGEDhgjJ4IEzGa^B7J_NMiD_k<E1RdO5j~1t}G9e!a=H zR$AOnC;TFix5dIPbt2t0kD$ccW9KQdVD^OgO%i+c?<730chJh#_JL$f5>XAAh{Noz zCIHztn>!4ufB3~kj+Gw|(kEAsV60G_!O~M_Vdxo2()EUgDhcvjY@dr z?LADyO`Yp*31XE6Ak`^BQt`3BtFKe9sd48sz{pzBZ?SD!TfNNSdYqwUae1!+Z1f)U zzN#oSQ~Kr}R^^hd=%{s79HKw91YrL`UqhaM1;lQto$W*W2lnyODcm>Q;;>!y$n+I= zLchtI=kZI01CSdS0WcAyI$yPFq-yg|LWEnnVte+7Ha%vi#nOgq^;Yb3slE&AI$7_P z=k~qO0v>dJU}$!B6Rag89abIj5e>_gPTFLt?>adM)+NJOd$y#zfkbt&%VxbxCj;!i zIoGMVCYIOerhUF!FEE!=Qr`Bi#XCr&*nO9PE0>)B)R=DWdIIT;!jZ(u!N!+_Fs6m6 zf%O@Ywx6pnTFvgF5f}?G#Px4PZz6+N)1|Z~%DWFJC@4(wF(v+-uDGLQH5zr}YX`qD zR}}-4sxD!QsomlLJG^qJxpj_M?g6C(D!iXHpLHM})Tu$w*wq%eCU2b_dc_BQV>;iP zGJ0T(CK7Uq9k(fA{=yxoKJ$~em^TGbdDBQA;a>3HaKszywhHF;G|v;+b!(dZLR`$!58bQUG7Vq*(~}JumU;Ll^U(@UF4` zo`|mS=SPAgoS%dpOZO-F_#VR%I_#wEUANKFqcdFrn9e#!AGbR4xn6Lj7Mv>pOXD3A zw3nIhTW@Weqt_Pf@%YgXw+qJvyI5%o+Jxrlz3x1!ldGQl`O6p0@{xn~y)6pjxB89x zbFo<6G?WM^$5&XMBl(M(TuW7Ve8*5K3%lOUT$YRDgI4LJjAldl224x_{D&^<;oXUJ zvGxP}H*P2+kKsqgey#z)*4yjq_l`qNJ0=ZKQ?vsUQfIT(LA{w`GLV0^=1580VZ z-0FQ@U_E4!P!l2DCq&=Wz79$soo=O0^~#f$3XJm2LzU#@J1VL8Kc4YIerOl4VI}Qp82KEvlj~m&vmTSl?MjoVU{RkVKMmXE#`a6Fp z+%93bqdlP55;VzrsE^gLK0rt7OVZATu(F5pzO79!MH2-i0uP!Ua19W)wM09F@upmp z7~4y@M{9Bfjry2qhmY8~VF6nyg^5f7uc*{v$g*l}DsBTXvej>`zG_0& z@Xsx?zB->7$-P~@DtpIWj`eN&>gWDICb6)w?cPQ+$KZ*@Vw0p90)O6}aSI7@lQ!ng zhY}8B{`gH_pEh!Li-do^O}Vlmap$8byrPcb-(LOjH{-v=yZ1CsNgkwee|}Q7a|3rb z%t}G&{whZOg%tABYo95^?syc1vwqt2fXokutYj|^#B-clBJY-JGLIBaQTh}W!G%(bGGzaeg!aow%Q-Ms=_GD5>=>Lxcye-QFMkw-U?Xq1A0Mo-uo6GN~Is&pb{F;Eh0((!( z^chghBB}#ONdPMwEC08o{qn<6Uck_%hC9T;H57}ImKEFzm{1D2^Qg@uK(PTkS+Mc~GA$NIZ%npkFC!k|EVM=7nN)YCtyy|l^@kw3sx zX^oBFL6L&y!Q{tL3mF(GCg{`P;?Z)mZZwxQAyR4I_^HBL&HBR=kYVpaW?kj zQghi^SXo4}Bp_^TqHMi_TayrpNl6}^-#=wN6&Q}!O6WLnhZ*gJoQ~+p)>KY{(FSGf z(s9?L@AmOsuIpn)kFqhrI;DG{&>Oy^C(t(|?FG>3=bdvn60CTp1|ZYv+R)CFCsx;k zz8n-xwy}608w4_ex76=2ZCy*A#JgxBX#agu!D@-Ir#*=2;Zj&s=fpDP=ta zRP9Gfnycrv_p^2{db)P0r|`4fx84Cu=-Ald>MZ~rSvMk8`g3R<-jIA*w`$bey2sx$ zxHvF-<9qQmU}#y8w& zoAqndd={yQZg&~G*GoA_rxh?W0NFDH{FDe;M*%lt7==yue%o; zm)+z8xiBc#)#~%K#uE7L#MmSykB~{?IGQ=(Aq@Yl>m!IkcGn;VsKCzq*4tsOX(+^N11Z+RjDi$B@g((A z!cDKQXY5NEn^G45=B?FBiJ~s;1J-Ekv+uM_ReYNdRsQ$#pnG|*z=kScpv)nq-@l@; zBkR!}ef5*(uFQ$3kY`SPDvTx>ZQOSuwh8rG+}*)s-OWpJX>J~*8*-m=EvHe^C- zX}1rEB23N=(#reOdvyi{9fMoCNFm!f@bl1Tt?hI!KUl4Jt+8U9U%q^~vw?7PFzEt) z(szzJC!xEk?-@z#$V^HOun5*kx6}#{%|br0NacUi_@%^*<3brPnla2$IU$q$;}hk~ zu~_M5rxT$XXm8$TNGDx0cely4IE%B|K|Myz>er>pGu0`r+#*FrlXk|~z=1E3)+VK> zOM9`Wf0{&ypMXMFr&U5Z{9|ImNA}K65(_*1G%4&nkXzI}FCGLGGo zUJN{Gt%oi0Q=DUu!o~ZfhVms$a^15!<+Lu*H0n<5}$^JpSQ))s959i~fB6 zp?#6snhPkr5A=AFI`cc10v>q5wNjM!UhFC1q_=P17B!}+KB1pCS?E{2$2C{WMb98< zgSdf{nF*AkTlnF>Fg09hjlI->A@=x!D|Z|U_;=>EKEh?{DGy@A7Zfi0O9x1Lxpl?& z_3C2OnLUED`2))89X;x<+!PeoD0QvfO5B!OPUDQ?wX-w{3MgaM=v4MLQ)e#w-nZQ1 zQW$I&(LIy;y(xl5vCb&bDiQam4l3tBDXPsU)ti9^y3)zz?N3VLtrn`VCpuq-cKmc2 zy;kUv@7Cjd9}zDd3;4A!K|N09Y=Vjf6m2E7JV`PX6KAGOkPw!J3pI$&Ji&W2IWxy_ z$u%Pz2(E1oH+?Kl-TMGbvaob~eNs|#r)Qw*x29pZH4iv)#cNiK^Pqcw3aSr3oZ+e#&T%MA|h7?{++I zl1pXp`B81W+q^=?YZFH>loy@Vc%iE`W=CeEoN~OUUarGO_8WrCFoH*2X|vL0&N!>$;?DwR1gbxP*$O7c={c}~l;T~(#b`CB(zaCgfP z##sX!TdLSJ790;a8wvSv->|$CEbY-eXX&6Qa)@dYBr3Y_EQ1u|AZ`KaX(>beCc{n~ z)tmM3v^*Y!ckaw&-R=pM;}zenxB74zW~B|AAP!u zi8reKm zE6=qha&7<@j>emp2IJ=Kr(JP`JUU0jj}XkgoE#3i=Bt$T$}blxiL7Ap=3*#MiJweK zD_GuZ?A}y{j?~%WHeIah2}(}gssbP+3YsAW3_=PvCw zm4`2@LsLHc%SO`y5cNt``JExNsD>K|LHW+fZDfwD97rDHvuC1@x!VzYv#Jr}1g@=! zZ`Sh}+Jsi9cDBuNw^`hLXUnlM+Oc*4J>r!l-Hp_~v4Wr5_txwIy$#qp?4+nEFIX{K zGrlsQ7G*XB6&5qdFsg*Rfc`P_mAF0Fp*iViXzTN(hy_P!)(GbxjV+h-X38TyXJ$fk zT$a7fs!msEfovaGtY)<}?4We_{2*Y+gJ+)9meYGRzow+A-m6VXQCfKO204r)3L>7x zoBw!=BV;YePrpM9%XE3VwR>25eh3!q?1lVN?3CgBJNcU;xu%g^Tkqbz8$twge8{ll zLY1{~@AI6I)*&oAu}N}-#Z~>MxYYb`0cNUtTiJUXC$`--99dPTC_+OBI5Q)XE zZ!hDMdEPf?C^K8!t`<4#L+U;uDakW(wnz25XP(o@8K<5Y>#qOj8GiwZ1*CI*n1J`j z``^=>t%$Rms6>$h?8xacnMjVoN?L2rq5S!4|48RuNN!HVVFOt_NM4X2vECmWO;N%X zjr%OqZ@A_!u(7edA4d$i;+cq()^K69`U>B&va$AH_ZeIno!Cqhx;>)|W;emV;!P?N z1e%ZhLRy>^q#U3q=gG^YJl}CTIkF2_X&>o@-~18B9zJ|%G|NCo=Yg0Jl#V26JS%p1 zsCa0h81aN-v{}$iKs$FH`oAFF>3i*`c1~-VpuPo;g;tDbnh8FVWbZ@sRSVm((|m~M z9K9hX*xf&V{J8nQpuQ|{>fTg-7d(f^1@Ar3E)+RqpG340h>eRY=0mirkVDvm=(m{eH$m{gaP{8S?tLD^=D5jFFyjs8m=povVX^Q($bbARhYMIB@6Sn# zpDXcV9~|o->*mB>Kn#t%_uZvTS+%nZV<>xuKP=T0LYd1km%G_vRQ4_m0VK&{;6`yldjo7iUDL# zZlE@CIP%zZl#~s(O<{314*}TQ(;qRBR>rQpb{ zt>FX$%rgwH07sF2_V?BA_6B$~RaMT~vW-_^R%ZAvS7X>@kU(&87Iwn7(sCntpug-b zievd$nTZEkfJ7}`dXWDf zbqDkzkbN+g;x@@of_`Miwq5&GiXM_79@LVB!BufP>!zQW8elFk zdHo79Djrh%xz7l76H$tqcX{;d41b~vwqX7OQrVVV3*dEU;sNjteF)a-=eEJkwY_hu4$Rk({bE zpybmyXKcnX8Qk`&NJPOm3qD?6uzmDk!uhZuek&|Cwy3{i!mru~GS8SybvM8@Wh=;b z=eyQ2<|byNlIlJO#UB&WikWkO^6Ued-y{ddCNov7BVgO3Y^$V0#DzT)kr$*Kk~*sQ zq7&K7uA{>`al# zi|?4xZ_jgNBnWdm5cin#oJN>j1ozo5Svx<7uw|@{b9cWJt8-1E%Ig9nNb9-Y-U5xQ zw-Qm$c5By(xa&jQ2u<#mm=};!Oib3T3f`zMp+?F4eiJS}AW2T%Qi4Dk$3L`&)-^Gg zy$N!A`P`eACXJs^`<}Zw#XBp&;vMShUhMHPp@T_^?dn0JM(i5bMHNMsTd8FZZJ*<| z37A7_jq*_We+FzIq+Tjde}LX5-?IsQB|_-{rDX_HSLmon&~P~rZjnWdeUR``GUNp1 zuZz!}Z&Li|d z#(5eIPKIMjIx)VH!zXkw=e1pAbdyuS`zwHMdtfbKD`=N~!rfq~cG zw%0!xlv(qFh~F&#(5j#D9B8s6en$1kb;zEJD>m@@+|zPHHxLNML4JX)PsgC2`l=5M zIfNNcsp9n@Q&W45R@@sG0KZo@idV=v76 zs(q4jGrN#iPHCVsz7u=hP#Hp{Dc`ND-l<^%_(CLwsAQ?Dt^9!V80kv@$EAM;Te2HBfc?8j1W_QGNK@-_W`5w@ zoNrl%%xQ#;jm@{OeRxpI;zV{s|WBIEfAuC8v@gBK~AmD%<2`;0S%6$ZO(OEZ9g63Z|q8z~#KUJkE&a@=*LM(_4 zae_}96{vi)`w$3!q%y)(DENRiL;N|`$s7=2!1w&261hZ6&EJMxTV}8Q;zJZ#H;;p$ zkU}DrLbj3CClcm8O5{H0&Hz{yR^6CSVJ($WaU=nJzA3(o3Kc7b z*3d;F*ZB`oaEtolhh?)!@U2W{Aw6nua(DauR-I}jz$aZzj)apnPhXFOJ7N9M&rR9Q zB+~#eIV22Ugr*AL?>0~7v;n!&41dI_E|J?U4AiDI^V$!}W(q~40fu=4{P>E0Qeh~d z!$lqlWhfy=h`fgDrv;y!yA~48y_U*(8&_WO7?cFq>v*g&X;Yl@j#L413mVwl_eJFVQXIb8!NQRo}apEz(Zl&^!p_VD46RDr>!zJ-nN zA~qYoG*sR--;&dHCQ-QcNy;{|_o232`>F0HVW1m3Dc|#CW3Raegm+|OGui-he zYI7L8|G_a~aR(TUjN@R=CA2cWj?IA@u8TbGpH`_!%D>&pJWqMj6bbwQOB6e0Iltn0 zWbEdLzP?^*CS3S2^^6cr(W&_~*EYQ0?^NLSzuW4H>LIJzz>OBWt_a$Urtyf$45qbo z|K*o|m)JCYKvp#!f1S{H54&oaygowzZ@ty#bdn0V7I6BKCGqtrNyT}hTB(WEG>5Ed zdE!+$cGVu5mM*ZlZfa0J^7nqSJY5fTGgrw;S?qm1N>b>J5js@6@gY;wZMdXo=cno^ z@2-&IYNmCE0eM$7N}M47T(}4HGW2KVQEF06*ZJCSsCqA@Hs$rV2#G1}*LATkXM3q- zAy(634+XTC5IDohKkEmRw0TRc1i4%CA4mh`+(EXQZz<+KU4UbM9Jmvd+K^T_olA7U z6zkM!mQO3(2V06^8kijv^hyN$P`1S`AhA1 zd;T4JRo{{``zIR#my}8T(q>JgA(hE3GdoI{#+Nt!nT`j8`lNKaW5|~p)t3S7;CSK);inF&CNqx zI4I2cRYNudSR%|7UO|}!^g}`SmV1S%$@O*EqHt_Sjo7$k_IUbjW3IwPgy{iaU=G80 z3c!wffTQE4rE`El4WfAbwI0-!|B#e`=rape z|HO3KYbWy7qdgS0F`Gal?af5s>)r`(i1Wh-6s&0oBu6zj2%`Bizl9E(6)-m$-SE)fH(u3(WtuO3UF**qv9QR7oH%B5cvg3px!T9fd;uyT9KscTau?2DndRv zwtNBGDrZCy#0fu%h-c3>Gx70$=}O55d&D8nx26fzOGpbsM=lmFGLr&1T}sRhl=6eb z)7YTg#qP`wR4!Bv7F$$d5j5DW5p?gfOJH`Bf+N3mKq#2C-fd=I#CLFtc1l1B(May)|OQ*aGG4}aJnhz za*fkg%=v6@^VAFGJl&MvA?vEcR0f-e+!#yln7i&d2no#4yfBEViqn)(3loiK(F;%b zN`UbGOQWmLQYBMuBR(V5kmZbk)Z*_ZY%P{@M3j0%qGjFgW;caG2xsZ~a{fpf z@Fje-Ek&i&oKa)3P>@iu71T`Qck8@qD zSs*%SeqI{bgfEvmvmSsOHls};l_e!wjsY)F6TG_ss;;1I|7jdK)!XJ%2N2`ICEuo= zFywoE(X^}bWj%UTN&mp< zg^tp)OTZ8PE>-3)Jv;p4D9FYKO@IFQt&9(&w3|yWvcA0B>{+fjfLe=38WoxeU3EB| z-1OKqZ9Q7qo0GOKon18v_O8Bb5G2d)z2j34qP5IOrJzb3pjs>vLFxnC>2=uFUNeIK zLfT++*1b%{gv`SZ{I~AbT^Vg~9(C)I$ryJU&CVf~#Y|vk3rtA>>>zo!+2iyA(9U%u ziFv+gnmtY?PQz~!yJ)`o@2s~oFxUs&in)R5^!r)*Bv_}_jQL#McOq(R%Ps&SEqNav zmxOjLxCYs&Lk3-6B!RA(hvWpNh2HaXeUE=$kr572kIkiuc*HvwYG!gu8e#fWhXeQoRoRTxJ`K+lM&(i5y<+wO(h-w?A9F9 z_>gmRneSb%WcH#?0a#|H#8vh^d$tzKdx`k#A`aXQ6|uImazqvK>qbxoU@vM(8b^oO z(H!eYbP;?`3T%S-dO?}t4~tQvlUXu*j7m}Jd$Dpq0n3fFwzqnTbH&9Bbuw>qr_nf^ zjN9;CRqjZ8xOo1zfvH3pldRNK#w4&WizyJ^g&py=_Jrv=XE@z{6%)ZWI?I9K!L!!S ziKZT(`2erlEG66n-U9N$<&2s8Qw za$4B7&KxQd&^7zxn<`39D(?V57#~3pBcks>&C7<~e1PQRuJI&!Z|LYFY)f5n;-F;@ zEXcXQbT-9KZfF+(C5L45XEwGKndMy=nXI`qn%|wW6^kwKt`~roBGVJ)v@O>kYBYk} zNlQHRMez<%SQK22ycG7;Ekb!`djxrz3c`;a*MPY5Tq$fA-()VagRsoE8w7S73(A6F? z(|4=+BKzH9+O4efX8@)`LQup)jY^j3FTs7fDrw=6z`1;&bqk0cLvNdICVS$Q{Fyv# z^J6@(xL~TFpq(f)CnUq^&O3v^=#h{Mcw)*H2iWbYx<1(TP|>uxgeD_#N;o-;!dbvFivvEFbn1n4-DhM zwzV%d!gUaB;NTE@IZ&J$Cszr2?IGey(qT!-iwCIjZ@Zw)S6Re#G?&YX@rj8}hgllj zRCBw|kc$aGeDM=|Waf&8F~mBqPS0$c_R8VW4}w4b3DR(Yl&johB2Uh%Z8r@7(J=36 zc4`@30PzizbXElx(iYs@Wyl3TF<*z9h25NR)VhqWD?*Hv;lenKZ`?TU)^ky>;(r0~ zbsDb~Y9Fvh$Xi9?=Y92Pxu#{MZDs0h8JKZnc?*Wq9jv$~&13&d$lWsFkb%JiG2#_j z{rQyLH`;}I90P7)ZsDNF_bePC(Wd94);|J!{VTv3K={(g%s)P6W3%_u0(=OrI-Q80 zwTMj$;Q%M8_DGLiT)1WR9)Mlw0x<>8|B(gg0zc5_%Skyw9QAO|1j+zs}*buf{TrbQkiBq#aof73ZV_m)|%$_YXW7omMP zUX@T%b291L-#2|^I3Q}ot>RX@tFWq1gKb&oSVxYpuJFoM;zNmPwyEW zeV`p&mtbIT#Ql(qi-AuyY_oOVlx1J@#OXc)qBl+^MT~f!bdaz;CKy|g(nB@%u+mBI ztvL_Y$Cf1y6n-J|z|jvaJK{tKxh$dz(tVnno5TweT@+2q8;CDFCP>%I44>Z|&<1B!5-c`6ZFM*%Aq^_;GZQ}bpxa7&t zX}6@)G13W#!xhzD7lQ>oI<+oxhIrkjgrpQdzPf=VfLaU)84T9$XDy5ko9&~4dpW9o zQjL;MT<*W-`nvTrG)4NO@e_CNdKDFZ)xU0n0}^~1AVR0EsYKM%+>AztJAb=fzAl7q zEdVHM=NJC*B%~0I85y+F7h+3@X$ z)ujhGwc<0Q3!qSSbtHy~%KpS^l}ZE{BfOcxH}X!|=93W6p_&*SCDXn9yuRL+ZF|I@ zaQ|TNnw=s{LR70Fan3?5`C_b47;Lh+M}q36)k;CuoCKz&{PN^>GT&t-06VkJHXdL3 z)KZV*PYa{ZdKEuz=RS_mPtH=Y@HbIY{fHCeyNvL6bD+TamUV4;qyUBo2bCTWku((U9n`aQiZ-286e!Fd{m7ewFW%uHyz#&dS^fT^U& z7XS46DfqfsqE{nDwEbXX5ka%Jl47MR8uy4q;xYSibywzm_5)`XZW1qa_w_a7Hd~60#l*zez%yB(P-v6QNw42hRtKgkJ;JFIXDJdR z?eOmO+`oeQrH+wsew&jD6ZE+@e;wN1lor?kEam5`S*X9@o?^7AxD#=A%17rwf z?v15v(p@4IS80(Kpwg8tizo-W#f?2?2=A?kDm55b^XQ-WBP$bY-x#4=5d{Ft7xDi zGud>&FH?R_inLH9r2ba4K0OtNGzpMS?6YxlGQi>R0jcDdr*^8VYi~}=(EOPBC0U1O zEhkq0(tREH!-D+WD)OdM&0WA$SDVY>)a;89S?uM1?{RHPz@F#g`;zU=ZKV_tw{B%H zc{wVP#l8Cb%UrBE4tnBz>8MYBaBVq?WzN{gk<`$@$S7Tc5655(@B4D)S-dih!t9)W zN;nlwTGgoq@DTV{mndC#Zz7>)#sURB8XGwbKv+3m$A=}V#%`Zw{~S|2vJzq1OsGFY zico?DbsFo4iQSUoCm7GaJ^#f^S4Vftr;HGgo34cJHiH>Dc+@FfJM|7#Tl52zJvb0M zkvo{Ish9){rmc?Fp-bq9`AgPXO8*vOlr4^U=?3ArpQ~pob3r6zmul=0%Z&8&okt;G zb?uG5tFv+Dg^%YE8*=#lZLfgB1Wf01=xl=y97^bh3Y5)wT-1#BTwew+ZfY{SX^Hzh z;%te_tPe1s(`Jt7>$?L|Bpt)dD-Ox-0Z!FQx{-F!R2w?aK(qf}F4(|teG6O}XJcWMQ2P;$jw(cQUtAcC$tnVu zwaJ?V7i89dL%AbPHP?#OF}RcR<+v>T;mlmp>Em^B+N49}c}1W!1Z#NzJl>X<*N<=N z1>ct)!NCG91=oTYMz1RWXsY7p2^35%58YXpOggEaMrlQgg|}qkXSnZgte=#;gyJ>N zc(jy36a^(8aN-(o=Fm#oDf~Y4wvgCBOT(avgU#0{t=_HZ?-MVCgu)TJ^P3Mf&9rW@oQ;4Uw|Ij+vh+ zoBL5`fcbx8IeW)FOs#;GD%7s-BD7BVRZ?519HbuQUG@e7|3(8Xt;Y=1Px5O*gpQAV z3FoddD^S>k?oh{MfgCufH{uXl7hUWXsLH%YHS*3)*3B)Nnp-n^(EDbR%lzQC zpL?7cV6Usl{JZ>kkq4|^W~Lhy9chk~u%9dT3TU)q5pHXcR1204pNMd53m4MCHIJTU zz}mrsXK7XcZ-A1TKd$@wRiBL`@`58|a6huN)Z>_1=wQRcG22rGM9G`)c5KjwU6+HxA0Z3+R%2mleSpj)ne{x+8ZPumaAy_Lc3rpk z6Ywu}IXFdtVE$$Ck>@HACeK2SNcd)^r+AwfuXaO=+kuUhq_h6+;S-eg#p~OoozJmq z1kdM%y_%}`ap9)8<2jRj-Sv7W!-$%S(uYu=^awO_XBUvf${Ps@3EWTt(m8@;?_d)u z9W2$T>G#Xl)I~gGLO>IH%J|!YAi-J_eE#8q3nEx3bbgzay2XO72;&){}f3Nj4^e3C-bb>b@uE1|gOB3P@v3!}0lJRQk!6>!~WoOEJd1QOXYU1=> zyIQ*C;F=!2N3g=217EO10jk#p`gg5aB5{2gq5Dncrl}X9J9E~dcPkidM4x%Cz5c(o z^8r62o)R*(uxs;i5COL_=?^jkyg($b67T4 zv}W%B(LHNA>bJ{?)*~RW$*ZsKCx<$7DkMmw)=j>(D3xRe(mADKupXOw6EYa778V}w z;o&huuqvO3(QglOc(q%R1l;Ax*#$PdQ_e}GbEc3F*HbC1U2Z5Ymh%EcU7R!R z*F|<}Wff(ZtF^kWGghGz6|SO@ofM7UenBai5S0rELgxt^Q(H5OfSka%*Ec4==GLAW2GV_C*%Qn&!UvawbPvA{bq}`PzQQDL1OMp zU6;Y=Z%G2n1ijr9BG(qBT$b)5CK3wWPc>{CybOVz^e+VE&$6Y}nq~OX4_!|{M`o;RHNfMQkrX`F$C_|rt)l+ajrF^HPvkUIRHg-#_{0? z$(>WaAj`02H^(kIdB1HFHM_)u@|d$72F%p48TMJl4P@B+YPqaXrgR-ZQgaz6xD(^2 zkiJ@xpnJX%a4O75*Neg}=sy#+O(oDclqk|3K6?0GNJx)jb?x`HB&_~L_5c{a@72!~ z$zLVm?5+pDEm{5C;xJC`6m_sTxqBD8Swrki1g&SoKM8xFaM#a?h zqub|$hfo#eLgA9g@~XMLeO(JRgPPG(|Yl10cf2F+-Oyae7vJ~O@)T#Vwviro`wzlXtrP3X^O=1n_@PP{kw#AJ zEx%)W1Q`(#aqPHrYQ`qZbUG$=9i1&>c4>5ds`4wuwEX-ETZ>{@w{F}#`t`DTd2ZQU zW6hS~M}?=mHNS#ed<<+%yK4qaqu?9CHv3ks(9i*i(?Y*XOJ*`{kHR}#G&{32Amk(q z_@S-O++pnq2f(@a?;`h-l9DE$KWY4YRo~h9(BY#M_36sK6wy;92Bbe-wr;M$#3f}? zG|%klURm6aSL~FCZJGE>tjL%0G{wUsk8{%#YbSSP+kQL$?755dz3wb7vbR}dDN8zD zvlZ}7%OL0>1#=p;7jz`MkIGi<-cRccnF6CRS%RMoPi9+eK76>sBdD{}V%yt;RG7Sq zGFj$7|D1)~-bqPQ8(oyW?VkCi7+j&UOvsXDK4I$a8)7gtWa{+(zT@DIhK7dCLiKSM zN3XAaboDRD!+>km9Vj+Ruq7)8`enYcbMaCrEFsJQ5}kP)^ElN*h}&be=; zZ$HE5%@n3n865ah)VGZrx*g|P{vdl2(<7jl#0=f@YtK^DgscnXv!ZQnZ4DQ5PLqCA zIQsF5x^|dMO^(WMrwrenK(#JdE^j;R)|9{q~48%`zRo>q%Ro9ZAo@!9h0!^IEI_tAEj# z0h%`TGKNxaTJ{rQqX>M9WeEiMJ&j&adKFzbnP0L=yxm-50jeHY4>Z^ z+YZjT?$yS+@o4AVFOndZHWzU^wnT_}%ec+^7hwvf zM2d>;So>9<)(OS310ge3?)>eBpE2muIu?tisP*KLy|M_rk;)4FAyZIu3^_7VR?}Qx zpG-_`s(raYIM9x8>Qjx|)7JR`R#Z()%kmmyJ^D&IPDkKqMWts@U64a~g!6CwnJmX< zFoe5uC&@JfWch%19(q+L3|r%%kWj|%-d=h>m9{U6XOljt>n#kQZBLoXM_V*^Ma(K? zf17MB9>~H)y>cUMapUhYczAR>@-2M7GiG;s)}6xWUo>Q)K9w}B_R6TsD6&msgu@G> zF&IHSVRF(pIVWX@hUF=9Q4e*x2iEamIbbxPWp*%y5fYxjPQ z0^JnFHqA*$s%ridi1q=oO8!PZ-E#h<$6;0*(Z1bSxPal*fCj|y)q2U(Jg;BeDc=aG^Sp(!s0 z#PIr&goCmRj}Km25R!8acQ__>>y(A{(87dLJ$hWigBd-(uE)Fymhh4G73PLsilX2n zY%IK#zd&~O`6Q%Ii_^DlE@h0K5#z%P5X(l9PKVIh=WjlzGH~OdekQ@|%=H&k(iA5j z1gCnNbH}Bb)^QX>M$1gP*CymgA|a!?-ar4K!82EKQL9n$w!0fo3`G}C2qrT{EwtFN z7FYCJfVG&J%WY!Mr>VBaxlg;vwE%AB?Et$w#W5H4%yYkeFFE(@S=f7jL*OEmlvTZE zaz?G!S$)^nh^YsOm_-`?LLg@e|GB9b0)ui)-40U_hs4;p*y0wqrvSjrV-fH67!FZ3 z&62drVAsJMHU642c5b}I`NU+4n2-NyXrAk9ZT`7AGa)5aT;mSS$OXZTT68|pyXPeF%(@}&|Uh2 z1aQ74nadhp@y+Ty*M;yhP))g{QqSHJB!w>Tg-4U+Rwtb>=sVbK4QDDrnY-?9>DiC2 z>n8SIxkfm@Q{|!j6pZhL6QY!VVze0+AHPlj+OzRveLAM8g5L$#-J(6F$66pV>zItT zK?K#hZh|t4Aj$~L0#N3SA6Xk7Vc!Q%Xppb69o||3@zjb=x2Q&E>vqS07b>nC) z6eW~-v=7YFJuGK$yNkzZAAwTWFbR$8B9Fvfxmbd9(1$nCm`vQ|QiovO2MRJxYWYKv z4>+>!yhxqcw=02vXhQqJ9|WL*H(n<2s|K7A$sbY@kCTTH^h1_HKw#QIX!*BJXN-LTO2zA3=7=cbvA>f59-JP{f~EZkntEl}=W^ z?fwzU&!2|z7G-2m=Na9}oXX#EK~g{Hz1r0VM(7<;pD%~qw=-mZK$z}Fi>h9JPWsB9 z=yMS-&OqgM{~z+cJF2PW+y9CcL9qdfQoJfCh@fyV2k9jw`OQId0F7VYTkE~`TkH4xZ#bNsnc1^v&)%P1=KlKY z0w;R!gEVoP5D2OR`ynCh0xXgqF%GTilP3)o2+K(9W@Goab|0-Q6XJfLsC#C}HO@&x z-&J}pAXP3%B$&`PDLa#uW>eDG=*$ZYu;cSRe)q@X7t+9?l|Px>FD#!*l}KXaMTV`x zO+Jaz3THoq5(y+(9Hw??S+m7x7GIN+%jMTLOMOm^Ii0)%XK^yKJIX;28?J@e-YD31 z&0cV(km@uuoOv?y5HgdEcp>^qGMB6){$}J{n~pS>EV|sy)_jD|Q7E9GkO$Yr$&K;O z$Ic;JT4bvvh(YJL&IG=|PgR9%M!QWu%{z=44>`WAJcx9zUGmUaJBu67Yp1W2lYTGo zmJ)hJL!loB8ZBOi1U1Y&QUO5yTN17ZbFo%d=)V3b{8Y8QL#$>Lzm+5j`|O;#yNXt{ z(#%`-#G66^xuD}}Rj$%Q87YYmil6gp`vqJoxr#U&AsT{+JR80T>1U)of!fxRI-2Ea z)RLUNe&-I0;}c^*d2qcvQ0tC$1=rt1-|-_7 zBi8qYWDS2j(%`T`^L>PaPvCP74i4s1g?Be*_sSIkvnAc8ISMS(`1fV1!5jGL^SG%3 z$?xnjDK`9lgqEIe$vaw7g^b(rWTVMFroD+3$L9BVA-b~(GjluwNWZn!FTMb&zF~4| z#w$Mlz9^z8rTi+xB!<%4%GJ8igSi|x_f!IZ=rzISjZL%p{pjejzS|e4snWPX#C%ZR z_r7!uQ7!i<-XcNn7woZ8JIS2AT0^6f4OwVYzoZ4ehrys~uHXJA_|JF?30y&6GTv{} z7kja+4)n_}i0PL-wJzHFAL?fPvJN0Vz)P6a3xJp_*=??V-z|Cl{`MybhVtOIkg%D_k%H~B zqLdu9TagAfsjq!ixx%il zM%<=JC}RGaKFsVX?hU3~X@pzj)h~u4m|k)Er_C=Ua*7+)(20dvrc?aof!qpA2z~+M z*KkixKm>}@DG=o`#0X>)i_&^W!r0#~`=Y4#^l6G$WtEcryi2=g8wsCxJ^bUhZ#J_y zK6$-^`dV7dv93fMQ(;g*nw%^vPjUo5JgOn zRL|YTx8l9)XZ;FWIl0_hSXlRfxT-Dg(;?Z}22Uu1-0laDPX{})4)ku5AO9rb3AE=O z-C~_zSz{%ASt=_)_a)EB|I3na1s_4-onercVTT4b=D_aDxlB?Px5i? z3fn8;6BHsdk|ujj9mNFl{$#YpsM$$rTR=$9wbqz*utv4Cw(z*2M$T2BmvbX4=U_(N z#0psVymb&A)8Y&atX#5h%C2rmjAf)Y5h#z{)F<*h-{-4mbw7>U!gQz2aUUb!IW@Jr z-0t~Uj#5=@{$j^JBKfh2%WwN((0cl(X&h5ZU15C_{ZGv zs&yvkvv@i#G&hBzL*@M~K0RhGuh`W0$~2e}6idYDT(@i+*+ONA}g<;?Mj<;@n0TMz#ywAQQo!6uA+ zd5I2M0Bph^u-sL0va-@lkQ`_0n0KnD2um~SdJz-T!*)mcd2~J+Pfg{old{b1>N1*b zm&iIYIm6Nw7=U*W1jT;kpU#%e$Wsi_-g1|(NTR6wxaZ7XqO=Y&8(z7>lhwY7#jE)K zeOLYLe<$nfKrr3Vxi=_A8WCwj{COTvAW#WZYwU#W*fR%s6y#ZbmFX-G2XAFf({5f~ zHPI*na_}Jg2Tadra{Ew2{f@it-6e_b&FSy+-UrXxY28~(VCSzrsBuJ+YRK(!9LNyF zP`kH`H4FMCIe%{avM_a&N+AeDHr?YPU;au3Rk@zw|BOtTFabW8-q;6&&{t3p98wT| z?AO_OWH3!mO?$@QFV2_=yG>@?vtLraKA*;(bLEtAp%CT}a&vE~!{t#P^5e&kg>Bt3 zEZgXruqzlrK?FivE~46C`jCJOA)t@(t$6J_oj>3d&?wAK?vM}HxTC)SHfs)X{_+qk z_JSu<GYXW!y z-e^84O~Z$`NZteT_Vx!UubQk-^eUI zr7`~)&ff0JvXFPVJy{d18LhW!o_Oau3|7*i4q!QjM1V9&sOS@5YOdb~Br=aUA03hP zA&^E*T~c)AH^>q$be{uAlZ^j&kg7{l^;Sw;S z;6YGI2b~fyPwYKf@pxdRo7gzi73%nmWmDR{@(f3vG|K|zxYrgECfM6J%TXV=_7hSk zF2^mf5ZXbEc3X&0fZDEi)FSol1Jb5Em~u3=+zY#IYIIXMh+YMje|+Jo7(zb9($ezI zt3fYxZ(OGht$50B+2o4=0IOo}8PcSI$2qW-DkjHw?)hcsD6HQ&IXQXve(`or$%!re zYkN`YRTaZ{QX#ua`hCD!}k76(;-3W$m&>T+9-bM`v=u4Edfo-^jDE#<{1J= zHwB+|3FdEDTJfBB^cWcl76u7!Eu>@wh$+4bm!La)u`ZRR#;(hDIJBe*<* zWq8LZX{MEjY#QvuyD%2AVE!fuoiS>6bNE_CkI#%hD}Rgf!dI5#JJo`u{p59i@OeI9 z#8wM0Iel&Ys8_vj)`$I$VPK+e0rcn2f3jph;DHz%iha8ESB2FsIOk(mab-4P+GGIr1vc^;)f$iBz=IuB!?{fQF=ZTq+`P%L6D!l?T6D=A%R5uL; zjO^_RTU*`BuUSe}R7gP)^RPtwO(S#!9A1NJQLAa&!9xe~SA|C`-PE|G=hZ4+v2=wJ z5)P?;y>=FV@+`bk4521x+e7)*&f*^0o-aF7YnrEy?|zyw zNqV69nz7K!D<8Gc?R(WqaQBI^`iR)O(b3TvpEbi^TKuN*RTwNaOIYt^c&YC~s*Gg% zW;!bUC00piJ7H#S?ns?jPJU)3k0H$T`;ZMFeSt$d2r@3dF^w*S-<@uVD!0C~`|7}4 zZvZjdoz90=oVW^a!A|&x%M%`EW@jtWPJzidR_1Ru)*%$qiBG=qP7PzXQ{1gqSun>YWp9 zC8fb>;_h`g$sFcu+J81Az0Rquj2E`EOzZw+mD8~OWw5iHB^qstzM@DcKVap={szZw z%2Fzg3S@3Yb|2GPM%eEY_1L_vZ*=#Du+C0SQNxSTUO7EICTZ?gST5CTzAHu!(`Bhq z3yocMrx;vktnwh}_VKeimgNihqaQM(oxQ#1c0R&Y3}2+`6`vfC+oGlQvdMQ4jw@L? zg{6Lslt4cYb$MstM;CyZrta|$E+@7$QV(9nN8UbO6ubxTR7{h@mY0Eno37ymhJ{&e zebXrC*UDKgGaDX1f2wc-&;zrsChIxcV0RY3f+uAGg#I{(Ugv|hkPNn87d2U$8hx4Ycn+;)a9E*{TiViFUMi(>ng z#4DeGzc?bt+0)COUov3PS0d&|MQQwP=U4o2#(5&^WcbZ0 ze6?ftxAMR#^qsgAJX?&Md~)o>poUY|?3j(~fK-0ssnFy9>uCibY7T`j4-ZKm6@j|9A`H#+8A@#HM7&+XX0_?cp(Zps71 z{I!*ka}8b@)PN?azT4F>_NY}PPC3z8VlYlRl&CW)F^?<55X@ALuhTwYo$$60puG1P z`k8c{P>hx8gmMdbs~ag?;ZvZd_a0F^(VGbJHzWI3&A(S~b5ZG01ZdZ$7f0Np`!D!{ zJ0}gsdnEjY^uW#B3Nxv#A)0;Ww1o9Ws<{pB3CbbT1d?%C?yNEH@ z;2XV&*;Q_&X!O5Y_Eze5Wb}-ZIRNUf9MyI&@BSF@i~X~16uhhNPU06sfHactuFpX2 z)1&M`f!8R5Z)X&#n;lq3V!`U=U^{w*K*C7@_N~G^18Lw2Qn%__QM%S&_0!|-V{Qf5 ztSYr5IL`Y6gc==Sk6TB=a$eysuwUQnG6R>`>l?{hD;=#gC*`n_UyH)Pkek*ehv6Kfsr^2sfxQhwu3Q6-trON|j~ z;jUb`@gvHeB_85b9om^Nlgw%2_GZjhA1*c z*lM-7SpMSYJ*jty4t7G$M}bTVs~UW3m>K)9{Bp%t!zYM-UZ3tAdQI8|M#{cX%BuX` zaoGJA11hk!?=Eb{DIW`;d#~nZ2z(-s7Y5%p#SDil#J@Jc?XDsd!?nz9pM_Pmy)HBy z^(_WPuz_1vxsh`k@l5UdE}VhSyM4&B(gns*4`iQt>*QJRItN{~mNVzrbjZ*z7}Tiw zH2}awU=*xSf4#OU?O^v{-T+*YnCV2!_8XWjWotjSF(v2Z`|X(o&{~?#EjIbdc7T|EL|`c#l>yyA7ANE;>WPu8m!F zKfbPJFrJ>b43-5y{%IkPY^fU5%=X-#Ri_zx@a*Jd9RG>PC%IULbFVCs#^?Es;<0~S zb_(?Y0Mq%RwZ9nj80o_;4qu2Cl{`DO8$vjc@2>Oc*VpJZj zyD74h(6DO0;rTIs8c~;>tYzE5fxM}+lP^HxFWJ=RIrH|Uag1k7RfmQxezXuJFQeh7L_dy0h_L(DjQd$r1+qL=A? z-w6dRy+mK3_0R#zeyra+2Uv^b_#2o|dp}Flv9ZsK0H|#QgrKKXA`;oeYBw_o2$WvE z>K?-xVL&f482%<`R9*!pu#9D{D(z~T$^q~|*KO@%7|n+@`q1rb?|O4GojR2tBx!FO z!((GLZ}FwE5qq9L@VA`&g9nVj(zrX+e=36eE&j%beV`Z0tSxYa6Yt)&@@^UHkh|1*Z;IU44C{=}8mV{)WG^vcU=BS_xq<+PY|b5DnOXFje>Y9__)hbplc5 z0|OfkJAL1zrlwww&l2CNrE__MipoQ)W4mkUOPpn^w0A>gDih4SI?8~pRRmw;!WPfc z`kdJTCB3Zg=R;ojlE450?5L#Mzb+fg(%Z{A4uvu&Zt#!8y&MAwk$j?x;T1Z+ z+`JzUOqiL)XHVZ{K4Z-**RBabvDv^>Z{U3Q6vj8{b_CK5Rs%^R|5w08xUT?+a!%9E z^t={A9_^h_(WYEyvDg;g4WIQ1Ty+w40hNhI=#Y6uj|y(keyP_Sgl8ZIA+Uz$%jk@- z=w41=-_1Vmokc}v%$>p@Wytobz44r|sw7PguUvijn`<^0A;Ef>y!ey@&*x`0U&d~O zOm>cr5M)>hs5S4~|8*CLHopVH@;0*x+y8;D%^ZP57{=%IDE;`LnFx4bl@hvCRby$8 zJdg{TeQm#wSMWitHuXWqsHnpr33IM)ciL7uf@&EnK=p9I3bn2G$HKELV+Wwkf*62j z;YV;|3h*4rpwM{YzCmwlNU=$bO-omg(bhIm%oUO#D%Xeck`bI{q&tRm_@_~#?C|;umfuwW9uOwE|Q!p8EopTpyx{ckx;DMT!u`TQ{S|Zo^ z!+@1{D=HSAR98n|_XvyFa9Bvlv%qsMVlw(7oyo6YgkR5^|KP!_6lVabEnre+fDOz7 zrII`TVPj{{8?QDH*xd5+kK#ZT(69cE#y)rekAd@}?VvdsUb3Y|QAExd5IaRxxt5z_ z9xK`JYu*5yR#&a;!ylWPTfkrVO@j^?2|-d5AsC=;THh^;9*dQ3d#8e z_OkL9Je>C9+H+jz10gw^Gy8;nG>C%y2ZcgI^4yV-?Y7U-+VUTyZW)K#8x(Tw11uvF zaepJL78GgUfo!UpvJl%|kHhyl69c(jkRV3%S*pJq9a~>F*J57=x~=4kn+uZ4X@qbh zfXfp;0RSi-d-w_dtzU2I!4pMy%{xp<`T6G zn^C2<2`RIUh)Kj+CtbWv^!{h6EegAPxb{l&J`J)2Za`5+OzWptxtGG}UE<*|`9=KU z&xW$}Lu7UpY1h2rD0^86X_wZ4(eP#A_(^`i_$<`C0N17GnShYl3R%aapFfx1E$|G7 z0#D`KMg>!MUo|!syPPqZ93i8ocJ9vo;`Xk|i4f@GJ4Ri8lo1Mw7xvMOR;&LES zE_m@KJeb%K{!@JYmeg%_!Dm>tpoEacEdXICd@}s7DO>asitJ6S&}UAxh0yH&o|(-p z3*&Fhk~}|_uMcGJE_m-7>oiy+)j3B}ZL_U-$n+jWk(qYrsuYHy^u^hXC_`;9a9);b;${)vn{*tOu&G#tyZy*X@Me=_<3jP7{Y1nNL19P*z>E^T3 z&ym};P`XS^OcPa8*AoqhbvK#yACANZP*pW%vi3V~nyXW(Zve?b*rWy(Q1v-EiRcW0 zg%4-m?rMg@-ltsMtCE9QasPNsdj3FH8#Vi*_2IB~*{v~OfPf=pJl7&@_0-M=q1x_K z+AGjz!T8vi)3G9-#i;fg$m#Dv<+!>Oj)xRQ`CZiA*@K9JwZ@325$|px7|#|kBU#Or zH&z2QTj-7NQf`Ma1Z)Xmx>c?kn;(dZiV>GppmtgDITWXyN|P2#c4>ZBTUmK!r?mK` zKG~TQ>q<+z3H{jfk*gSy{ZCg82cE`af=I(glEtA6G^zv?^)Bv{Dlaz;F`ks#j4N@$ zj82?DM)5Pf6N>+i>?d-Ou$k}qn7MavUajOE!F?~_G=s$3u<(Pz7$>L5gM{YXvop-y zS|vU4{G}JfeG%IJ39q6`5}ucVYDinjoTeF;*@`Bc6)}ZUY$O>q@llWhG|WiiKl?uI z5h7lxdMj>!P)9;toX#WtLES@KH@AChg)5obD*(t!R_$7RxT-og5tH z>j&OPHWk~8ONi%nRG$RAJ!rHJE_J%3PORu=6+idWbFe1Xk1S!FB8$T_n@30;l zDz?Vi**Wj)*LcWC6Uxxk@nwcrEM@o7J*->;-@dRmjAu$Edfz(9iH4a$FsMj>ZCk^AL8Bok6M-y|gty>0U`Q*tHqLUJXF%`?Q{AW!!xV`Wc7;r#RJPPy96iEPOZoIk zamOQ!$U*rRe}?Kd)IvN-emn(_yyyUn=SYU!d_a00lh z(NCCDZXjV>@9Hgn;b6Ms>^ zDzzrrYR!^|5;gN`)I)^!sQh-kFf|`T@tu;_WZ{9=Du4ywv_%X)LYEI5zgC|-ka(ci zwbwC=e_;Yc5jilITvD`lhA^kpcA>htyA;Jjos*Z>dnWWpXTX*Z1YoPq?;cz#X?_=6vc?9vQuq~%~5VW0_`2) zvHo49bT;9#sX%u0fDqVCluyp^n;+hQ5pft;&I8BGuK@(m4DYzAVbJkn-&ZFf*4>V)Twi- z@Oms;!Y4Xk3mggio1N;JR0gOEGOcX*;imHEUG;x=#-rwvzrCthusVCOm(oMsR4Pz< zU~Vb5Z{?m^!Vo;>p(rmxJQw_e1#}eLeHlO};X?rcy&pds-2^uVATLl^V{h^-sLNBQ zpDpB@xRM87&v@|;{RXooBB&$9FX-{_ z(!?R*C8`KG-SG7kjLMwf2Z^?SYw2F`Nn*P>_7JsgBx}O+KyUVJfuq+9d7f~%Sl;Xt zicCa#%~0m4I@6QygXaf9;_juCbAR+t@SMkh{-z}A;PS)@n;>@Ba`7U}4$B%tDj)+e ztR2wZxWN_#P}|SGqK;K17?X-!dvNUe)bWReJ#3|G+ELl_uCvuI@NpqMwJ>dA7XP_n zaTu(^r_g|<_(G7HL7tztfN%F(rlWWmd0ccPNM?PDVfTxklx?#Whtljy{KJb~=lj8} z3KTqsGva-$Uo@rmB8JnyWX;Hn=)-@EqucV~A?PwA&Vp7-P9anu2!g=_I6ZoTpn3xo zNk5}qvE^I_xPk*hxUbha!~Flj1Cj|m7IaFr|K)Lt@zJA4chGbGr0q@McBE0pHj->? zG{*-jJH}?p!IV}DV9aRNSDiuvHCby|n*#CTocM2!A+cI9%ScP_GzE)q2BH0*v8u9Z)me?lhCy4^%TkycrE9qoPufE83t~`c^1d@=D_;At z)ojc>n%?q|Nf*}ib0>wRr#E~n5Td+~!{e`4^1h~_<3IBxEQ~hPLXN@5C&b`4&!eC% zGewl9M=#QLP_u>U{U|vCxb>fsgS5h@!9Ae6gYh@Kw%K@zc)>{l!N$-v>S6bW*h5;Jb??=Eo79g zF1VuO(4&BbmLugJ9FQWr^_|Iz*M2bPhd^+N;Zqxf@qZxVriYU8czlAJAV7}O8yalf zdYoSd2lMMH{aM;QfyyB@=&*#rN5cn5o89=tfZi@Y#wRQ)x`XTH*QSk~8SZ4A**td2 z#V@U`N4n0!wEJx%dN25}SY7c!SWUJDGfZWrH$O8m4+kM2)wix8@2s&_6nvRYafOT$c~)yf)wmc2Wx)VA=IcjAH&}2lt_8JrLL|%kJ$Tu+TLB3-)E0Jm$wgBg+z9CI;)9EFI2=+ zHltB9Q1Gf4yS89Fe`?$TPys+H!d3qosCiJ2!?E^OeqccMgW}yQYqspxYFP|mLzKuD zUaxqP^wu$6x#JN3L*3}uSg&3Y8zJX~SsPGWzSu{E+AJkdaoqrXw@RE}DlS&}48KVn z_RPf#=Y?<}6FyVl@9@QfN7=~4s${oAOtDkRIpA)&0xQ=4^$1u*Y<*LWPiRulVhk+5 z9!^;*3JRWM*N#4o2_rNv%sfo_2!+g?!QynZqP zkzVN1m~{cyOeVTE)(j#?C;MIArl8%mEEf@PtH0oq7e4{sK56L?oDSe9tetP+jRznC z*5Fw9S!6h`-wiFqvqNR32#X7cybuRoRWH=cD9#M0;u#HyvZ#@zxJ=1KdT%0;WHkt^HK!E z-d9z$7&{K@B+i~V{^bbu&Hbp3%1(1=O3fj1c79JI0*9pkw{p`%{D9wi44a8 zglou+HCvFb8 z9cxG@JQx)~p3Th1D_0*nVu%=eYWERFbv0D9%Kic1cNw2**k0qPY7tPvgidvpZZ{xF z$kI6YBEcuCAi%rAeHwjogyn7et=T}2X_?#CTyME!FjTePxwgTZ-+&wrIt^LV>I7s`oPhkGD;U~Lq9B;@?}9x6gH-mHwQur6Vw0eOI% z)A_>MTbMtg9d5a^1wDe*?`0ah$Iym7ybAI%iNf3H9nH%Rbp;+^RkX>$dal_apb7~l zU#1&}rLZ5oD-OT=yT&kNKD*UbpQCle2`N4M{2TVeXFTmcYc?eL0W%^+N6i=3z36|| zV>1*!(!M)qlJ=2kC=Z{A{Ct!406w!o<2TWpE57Y94Po_i*UWi;{L;f40`Rt$S}q-b zOW$mS5N}<<_r>sf&~GSs0pMcv+omhDq*ML`CGsA*Ka;ag7mqN zWYO(EmQz6qJQ%%aEPj^G`dUF6RkVMN(H}k=nh#Vo$Juqlw8-WEtO^1r#%g*KSU%)X zH(-IKR_FvU{xE_<_kjnFACCp@|J5q;NP%J}kfr9w{_xq#c3>6AxUPOlOT7;zLftez z*hRO>IK$-dubut$q*4xivdL7ij8=5Bax2t_!7J5guoewB6m%gK8P_ekiw?DykG;*;fG$k5Y@~K+VAE}G`zwN0S;0&Ud^I}7;1iwj%TV%KMWw>GXIno=R<#DVenVwV z8heg6q`$Hm!&U6?E>k>FTd>j%Xwl+E-9pd;hA2OeFWD84}Ac}!LRUu-VQcP z%PA#v>*n_rnW>UM?GTFi=koH}|3WEZP-qB<3e3$@g77dz&x5_YI-ahdOM%~`sw)25 z_zS9LnOOENCwD^I#Bo9!X{L1Y)mb?a`pZ_SwQ3dlle6@0+Q!M*$+V%*=V)9F zJ&(ir7Ye#f|4PpH84gOPOoo=nlxyLK{Hy@80DbSQYiDseAq2JLBKURUcvz`ZQ`+RMLp7ZmT>AQ&cBzUq&QlQRnj?-QGfgCYN+cVKbU7^Gj*8KTEg zcFFmdoo}t&n?A%Oy3R#cH8dQ>8jAiG76%0uXQ50Fc4lAU1B>IxQ1OP|5Fb6HEzU(0 zE)gfZd^AkF>xP4 z_c1;C{?rS!;Pq`pxEIAkJfZT+!e#J-W#2G+K%0wFmcw^OE4?=?y5ftp9k_zz343`$ zLmoR-GSQACkLL^w^M~Gu!f5%jZ-n+UC~@0fPAWs=8hpA-(T~f^y#uT+{VA4V6+^?; zEtM7Jm-}eP`7MQwfbn*m30Sr#;m!Pnk;Z1oVU-`7hUm;nkGLy-t}qQ2J5hqq84lk) ze@a1tu+E!ame-nNd^VFu3r{yKq+BH>|6nr9pp!H*&?Oc`aGpRwpN7}$*-P;G-#nqH zwTegS{p8gSvunCrl(^k2Pq#^DN*m54=<=5=Y2qu!zkFR9*Z{$%7y96<;d8bCg6-vT zpttx%NjaZiC3buW^S+;M+v`6y;Vm2SY8k{uB)IR-!u{C2-El! zAf?x>FZ7%%Jhlu>jcgxB9&ayJq9L<(2nCiY3Y993jMeAN&XyHx!u}DjTN5C} z1H!naDwj&BXl&TQFrV5o-PAWa_z+JSK6*e(j!H;){PNg2?f&p}-U8zM(Hz9-*HX7J zSDHddNjRWIXmHB2JvROPl1s$ob5V#hX_~Vt)k?P$_J ziJ0};2-Ik?ZEiJ502ze^#hK${pnT@G8*gK9veREgrdu2dU+n8!stunfxpq}4b$F08 z6+u8iyxm(J*7aX6y<|M`NIHRhaAEEJ`qS4c z_;8JK;mJ|TVixE`?C?dMQtYL$Y4JZiG_A659vR(b;=hn>hNJ|0Acm7KE&nAz zzDpM?91}Xfp-+CisHCrN=#lE~%s{S6R6O8oE^cRK=}gcH4`EoWA`Hg9hki}%;U5(dQEd!2d z-!L2bxLPA*h{BwJ6(`jp#9oz*`^OCww>*roq>Nr~Y+~;jIqg`nZ@RnniSt)|Q9~aP z(8um{_H2Wp3~t-25>=!hFHub9W$%R;dH78Eo4IdpB!K;2Gm#UbU z9zwZ|)<|3Kp#l=_5tNWTa3eMiN@T|>%x@gT%Hg_BZSp;Qt8luVtX$8EYk#~kJZj^% zeHis?2SVi&!r9tX&( zq&73C>iif~b;c}k%zs(TW8a=C%Lek;13?};zRs6p6&dEddc)*ieV4*#`I}?iI;1UR zGNn7co2WZ%d&>o#PHkO9)_E?tb#r;wZlaOsp3m628x>@kzQ^1a41SmVwHcfIiY{3v zU_~R5dDwt+#!@(CUyB1#*y2n6iSR=wr!VD!^OrVm@_(*tENb}zbE>&#{dT|vflpJk z9`6^`s<5aucqfS5$GE93kt1oRIqpEz9Z8&;p*aBcBJM|NAz06#u72k~1g18Hh8=FAv>f|*UEG)r_UMlPjrGCp7*f+PD2)KQ{oTJ&-e6JhXg4R1)zhp&4 z*-6g%`((?Qn$MY~vdB(;?bw^0tt&DX8O~%Il2whjIe|x!$xVjC8OiZ)aC3WCBS8tn zj&-=L_aAK1Vm+kTTogh47ch06Yn!Y-F*wh2ILd-)Q(Xcy@Q1`RCvQ(htrJviG!T1M zd4+r)XJ0Htl}JN#@8D=Q5HmYkjTF$bDwB28Psh%M=wt}bWJ%3+Rd)%bvzK*L@ZcH+ z@F4P10GSM`gL^yZamGovutRp**+s5cdY00t04L6PJ~rXN#V3T;LM)& z$2QCEpWzrc6w))D8GC?8CK~HOJdI|=MW?$|`Dtgdmwg3aFFCD$;llKna_m15H+&J{ zXOp)fiAMaT+K7Nl0#^~L5eW-Vn%!L5)z73jTgI;8KXfRy(I2oo;zHBwvZ&UF3CaYn z?-A-WDIgdhQ`fC;+GhbOHbg~1S?xg7MO!8F%*f2Qs9=;v$FKu;60ph_HFB~4zOz_` z!-}%9LJKC)w{&5Nk#^{oNEZ$~Gzc z>h7D;Qy#S4)-gyo%XwUJU7!T|$cV(X+X!bT`XcJP>`lqb7$|Q^bu?|qyImiVQfrSy zD28-`T`=t>$8A)A%}|)<__2xj@-iCH1afES?ah%=eY-?VK8_V~vwI0i9iDD=iTxrr z6QGB}V4_fMTfzD8NPdChbG^Q0ruKMY%4K0A;%Whd!Mavg8J}TdI&WSERxaaHU7Yf0 zvBg{M;UY4Zsnz_6#~P(l>200+sk}Sz33Ff}gyr+yP?x8hUlDB-J&z&R-hWC+;=|bO)8hoO%dIeSu$C-{ex(QkL5`Y3x#YKF)fd3JQA7K8%*jb!MX2Id7+O=Zn^t-cSoJByKb`nA2WD)gx!Ju z)oD7s6jukL6;ZX=MVrI27;VX|7Rs*$Z z_pQDiu!LULs1=MeDsGSO4R&F1Sr9^d_`&FoyeqNuU^~2BR&);($7aodZ$JI)*><=x|(9%tS{TAE&%!zDULKefm=p zu{%?&MLl;*SU;M{rskzlDeL(+5B6zsr?#X-y#@6Q{-h88H<#l@&Q%pIZkOS7&4PG! z>5(rtsiZbN4SjU(aBADuQK!+h`CNF*hS9e;+_f*#e~#41`2v9n+3^DK905Y3K=62} zMlTXs!NSA5CZeDwg!1|2F=OR|qah13K835+51};hB5PmhPe;$@vcyD57Mx;{-3bCF zl}@MA%Q0L@+AFSL%?k?~5U@4I0T!i==gfP0K=hSM3=i1^z4v+FJXvtG!nyA3SV}5B z@~x{WlXPZAhgj?!=|PQUOXF?=Wr~V;4$@wKYr6mV*C!=l^18m(^Q5t6=n239oBp-q zpto|02W4|3VRUb z<2A6O~_Ut2o7GO-r?J`mEEmxAt6C=Bud8~ z^O`j6h{>0-(QI20c@TZ+gu1$V);PL6MzZC<#dkx1&V{XCmLfhl4g$VYIQJelOljQH1@+8P z^IrX7$NDX}8`)C_tYjN5sY-7skm#yrmh5iRM_I3`R z@>%4yG(ZTK$0`p_nG_`q3Il2k?xn}qOY8w;KUjaYfjjW}8$!5+e@6MwMNrQ1dUS2i z?H$R`{rpPA@z|y&E$F1VvW;>7Dza*z_-S;7|5;IsQ?Ld{n-09!p|_(TD(HNfgAXYV zen5ruYJ5NA7rc=jAYi&RYzNRr>+8Osld3DF87|(?(@QGUkFL2Y`+e0n z?f83ag|_;bS1pJ6b=1K>?$Liyt19L)n# z;J5FVUJLFVjG2T1%AXbmT15qaunvjGW#-{J6z2g(hdS~0mv^7&0N6&%?=D0G;Z@*Q zd|%&jz{&_6$?d_r0bq)&S`NS@8DIyDz|Hk{qZIOHZclzGo+W#LK{(~ zB#?Wbw58$O2XiDrM?R|)eu>WCjs(QYQ;YV1kl_CW0>TU={1y!0-aj1hZZtXzX04L= zW+^)J`R)u`fh!>t2u}mb>FEJ9%3K)-5UYA?y2OniTLr3c)R)?o)cSte^!_uMT0lL z%uCBatoSPuN2e2=(_n506J>dL89|E7JR5uj)8-fI?h(Y;ryh7rWV&hUqgh}wYJb!A z;cK>S^Ed5ExeeVavbS5AeOiPEeE{urH`3_~)@nA0o&>#aeNYZZoeNuoUON?sPyY0? zoHaW>NQBDU4m961AicU?^l$Gu1;5hpBc7 zGS%*`#0=>7exzi|+W$Mqym{1AppBa|TVNfNCB)@9cYu8ovZcms%YW)H;0Wk&^3V@? z1i0U$3fe-7D!M<(w2YoyGTyy5LoAUo%)hG|AO4;%V!zb{RiNqKq5S85!46;348p3h8djsJRQ&2;$A2cR zhaVGtVs;V746ANZvYd{_TIo}2n@ICvVTl6b=+@(GFF1%&x_MXuQ(~D#+WlxP&8WME zB`=ci66*lWGk`VR8M_gV`J^Eqb;LDsjY2bf_?)oMG2WfQZ|WY66k^%bwe=#2bfl>M5mHI+kI+J4JjUm&1AUEM)JTW3hc;7!c06B<96#Ud)wB2)u8eB>9t8L(UH zr5tx(@C{*|@qPSWcB=UL_}PlX{w=l@*<-_{1l{J;6JYOb|G*b2KN$g}=Q z;cW1mU}7$Rc4O8YfRyHL&%CWe*vlY^R(I>-IQTEPh5QUEAfuxD;bq@g&;c!W4c{$&}s2d}?g1}7cu zY)c43wJZ?W%LWWx8ZrzJwol`+#TSvq*hgVKY67~9ef6(({9ta@-hOb+B)5~1@e#Y$ zU4h~b60)HLqvESRM~CkT>N*<`v82HA6c-nlq|w&kQ6*GcidLe7m1SS!mr3_{W%;$g z!B?H5{&p0~0JT^*W#rm}A`Hpb>J;nm9&SlZ#KylHN7OAsf8hWsF2wnPDh$oRE+bhk z#kReNDa_uUezz!JGoq5kxK@#S<$7x+`(I%+hCZ>KsH^A5UF?-;*Zjc;_Vs#H z+-yTdtap7ddEm^+33CFt!mIuW*#tl5$(|(?p&p_?Q3=A<)4t~U>}YyzvvB?T{6myh zGr_*WYAk5fJvI$xWtdctHN8y8Xs^FsheIKT@}`HII&X8&_x6pB3i)SKvq!!49A4=) z6NUn*TOC`S9Iv;5lBvGxp~1J@=VVWzn43i`&7@nO9q{Uz7yick(eQf3`HH{54gq(~ zWhBfI3eC{~24`=Pt$4ja3M>Xdc#qGCh6+#{S8Q#yChY5YoHq~$;%W^;)>L)IXY)2c zI|iHqWFj_TxG*fi?dk}{LSwNAY_R(vC;}Vz1J1ViSGya4SUB8VEQ-^gg*R49B0p zl+wE2@Nm?cNgQ?IdEJIS7BeHM(2%UL9GNys-5CaN&sd!MLQPux-Q5$JUYrhRv~OWr zGN!JN@yTB_8vuvC?`iXb zf}LD4(SEnwt(21C4YF%-gE;r$oB33%?=52F+$LX78T$>gZ@&@O^bb zy~;W^CbrKNGuK>V3=}bfx{Vt6A~l){Q$@j(@vyRbm8B3Qil7 zkm#M6X~Pg+$~daIlRm$Ay*1Iaq6F>ei1r>Oe|@mv(3XNv6L37&j%&R|0U~lVZL{2L z=*{7V*dull;+D-jxk zm2}^P$-gz#bOu1P$R=BG)hUShZ}fN3v&;QD_?B}}8$o(yVTgDf@%A-h?O7rN5@F8I zuZ4JWNf6Wrj(GcbCeo)A)T&;QB2j~?q24E&HhZkelDl47bY;*|whtF|FI)9ZI-h`-~m-3co0a{2${dR%nh z84JXM-7z^4b%3TzDXd$waTVFP)cV12I_e%T#!h@ol8{}@mVNiHGxb%xmP)i4TbPN~ zP4yp^Ff?tPG(T!Jkkk=QB9Uy7>W5XHSD%H{0pC}!OrVuWp*X7NYZSFI@b(;Mbg)I^o z9T$&!-lE*PD6nRd#kG0W*nEAE-s>+eqq!KfS_r_d^A1Xy6o z-Ipox;Yyuy6~lHQE9L(Wd+!+*Rknl+pAj=6jtGb(9aI!VP((nY0Z>pdktIuzjO5VW zq5=v6DiS0sA_@&nP7Sn*&;pVrhnCpnoau1aM%f}V&Yb()^XGfM^JC6>aQEIT)T&kM zt+%S$K5p%!7s-&9M&ZaazQP3^_JxWg%V%a`{o(!6x)b0!qf{U&yk^|h^3)oDYqb

@H+3U@?@ zod1I7D!K>K9sHM2Y17LUAX3E9Z8=iJXW`;YfOhy~tCR|575BOQp;Q3eF_AW_fNU;A z6RNhoo4C94w$4dV2P=^*ybK8!*9=_);MC|St<*w!5ttS@UPk`bjr!Fj`n+cMFHKjS zp;!@B6d|rwb0T~WGtbO&HI{6E=9K(qwF7xW2GVIL<#@pNHDA&30 zOsfd{)d}=~3D;w*kLy5*DTn9XASgiAd1SK(MX3-Z!jpJW1ut)M0l67-07kulO8R9y zrYMA1gSPCF<(YH_)v$K(TA}8EoF4L zq|O->M=5c&p#CI$e%3Yb1@aN1Cp!$!ps)YR$-&R2#5H_iCjimzB%f7;0gwK$B{L8@ z1t9C4QSkO{gwLnCUcHPbT+=MT@;VyJYEEjFIW0k{!=B86XnkqT0y)Rflp*Qc=Gwhe zjqprV_unze9PI_kY66-i@RK+vrGj;j?|OErqtFs*-@j%Y`d&k;bsH#S<>;X)tHGBm zf^hpY#HjSkUyM{S`} z83Z=LNF52!IRsVaa%CgiDfz&I#PxK&NZFbar=;w<4IfNRR<${6d1cF7WN-K1$;&@l~uzA`$@ zEE1~GZXOBm)_(f8dz+=&f_=}!l;>R5Rv3&Qd3-lIrBo^{^G1Cyzp<$8=>itJu!>%gfSpb0A#dY3if#1Q#vo4 zKa-m0WS!ddsE1^EL9^kI$hZo%uQ(G3mUoa~k=@js23-9$cb9gy<&?vhqg!OkEY+q? zfatEplR2;Uqg}Muiu!Sy%Kxn{czi`=J=Wcj{nUMWmS8)@{INcKXYjA1BC=W!A9){Q z8>o$gVKXPEYJq$$TyUzcekvVX?^YaRawgI)tJ^0(hU$0%UG;$Ws9 zv&*OYL7*n^eXB$MPo64EADsgy^_C6)N%0f+fS_bGBbnd6zWF);@{QQmIkKCvOTUf! zq6knEZZ^d%`B45$S1`*5I`n42U)bZmsv~tbfz*p>Hkk{j>nAHG`47s@cay&;2>Kpu z2oIu@NqjFDy7?I?*>h`5vH@iOMCv*w-DiLoYw1Y9i)-f*;0}jlzKf&hzjKHL3SQD| z1cmOa!MNmr2f7>IcOzT*0yL`z$eDyRlem}OcQuq~W9P>Y>}y=(US~tj)S8`x*S?W? zb%RTkzV-m}=b2ddd4j$$Kh;@56_sEALyLD`&p-%|g2&)F`kN9U{}l49L)LwULh+4k z;;9g;z@23nHKG533K0ab))MZ&NV|Vs7{w$=z10nFHCkh(K%;^G(9nv$|9>|9FW6L^ z!cH^kw_ zxHXFdk6Ws=B8tv~D}_MBZLdHc!(D}8&XSHr07lt<$BlT*F-CKBE{Px6dl$$$LY?H( z-9R77>+RrHrM4$mbxn+UKPWQx`>hU_%U9bY&X#zT7*BtYDnHh=7A#3`a9Qd^Tn8KR z(64zX=zQqa4X#r#1=xkPym9Mz8S^pirO(IIK$B6ZZjIaOvQ#^!1#X@NvCWK`*Fha~ zZ_tzfemu(z9`f73knXnQHpLcK-Zvj((nBCS%!xEd?Vsf{UZ$Hx43LS#w^Hdz^AzKm0Aq+M z=BTVS#K_;juFuC8Elta_>3$KOxBDNbK|c!W?f@z^^R=(1zp2Ox?yOON-h{7YGrCkb zW^k?BhsQUq*C0f9yzhgQPgj?Gh;H+#wch=X9RHmGSMkC|u$e%1FR{ppLO1dqTwfF- zdg3-WeHh<0y-cpJ|MgN62vf@v>p=RipQXWcf;sEHtTn`Jefo4b+iJc}hg0{g$yyYq zi|eI!t_^`!le#*%8GAAaR2rg5PaLM#Ct5jF0LM8vrf%YsGTdI0+6923g+9LL?N6;@s?m4^nt(8`&-2k%!*$cf-35pjw{i zf+O_sv%88f0Eh2eQQvIE5@j{2I<1;L>}En|GV?Rq}3Vrd7_abA1u z@nsRPGwaeG`i5J*91NnVUj*xNea^px(dyq&0l2%D8SKD#6_^b7K<5v%WmHD>5Jrek z?$d$)%G#Cz*4n=lHphT<<3Wis?7FuMv}xt|e7LpKZH@CkFS3ECxeLQ{(>1aPj`mz@ zHV_w=CL+Z+vQ`Xi<>wnWZ3hS$_7lbAo9hTKSTH`t>K}ab0Yj-vdxeS=fjoI=Tosqd z=|k~x#G&zVwj!s|&9Y9nI5uq9;HuihSb~2P3QT}%Vv0haKy{pDF7Dg@B zi^Cba^w>tgb&D6Vg%AI~;@&f?$*pM{78@!eC{h#w-3Ta16Cp|q7DPor#e_}}6qG6; zARt7xZcu3oQlte%MG3w4pa@9sy+nHNp@o!hU239Ry#1d0INs-d_m6#C#H*|_Yu2op zbIy^l@Ja0ucR0k z`^qeMx@eaZH8|M@Uud2;YK~AS5>(&aVt#pU&s>WCD;8IHXlK8-_8_qdnHtyp86)

~P)i_CKRlKb_l2Ig4iiK(KZbfbIiSEZ3S31t`=CcfL*WM8uq1l>d*M zEnjcMZ$+vE;MBHrd|7>EKP-sxu1UIwQ+W7SA>Z{Ng%(xm3`|yo$bET2$HSzKJe7#YNehi(5g@TzoS*LOTO46FYY+2Xfq48 zzEYT^%BedoRRC@n#2(w@IR_T%E$aV{1a*4;uOU{=wEy2AR(a3;-K3m9y8$~fuhpMZ z@CaG5U65CnK(+L(!Npj6Ge+Y;FP-YAmXNGVH>l5~&*aKlL-9XC^k7vyye>j7T={Nn3;!FeeZfu@>b-O|(al*&8h#aV?vW{o&46+FWv@>6Q zlHc6Xli9muYn@DjrZx2{bF-5qi&`LH@_>ns~HcWvdyH; zC3|*bXCIy&=T2}8qAcT4562g!0wa$Umf-BOdu_-{n zyEx#DYMh>U_h$e+-O#+^sFwT$Di8k~4E;A@5%R&3%N78I6FAkIb8r2TQ-A;D} zjD6Du3cY1nl!IOFt32%@=gfC7^KDzQ$`RUk@gwm~h`sBJYgJS=FI(v$kBsQ22zg=b zsHww2fIh8ReqesNvZNeu8{9(Ti46r?fO9w6xZ4#}-I?3iH|_&&%n)CRx7kmL)@@3a z0@Ne%QyM6#-F0KN1=y61CZ=xet0eD8{fSh;v_KRw*GyK{=-kkk&@=7p;{CxFL^|@xGQJARDZe=LwODWvjy@1&gDoBWfJ%& z97a7(ngqy=Ol!B>Re}IK%Q}@mZ)VbRn7(WNN9+DAR3COM-ijW7jNS?kk!nimbf+mz zCqbPM6ivQXe4_VtpgJ!=vQUXho?swWOj=5IFD^|pPrKnUUY*u?ZdF5BmW78WM!Tg< zBSD#$-;VT;J{p-rF09gaB>lcHklBDgc<#5UbVeW73q>R!(Z4qe zL{ocaQbTZp`%c)swnlh)dVX9gq(aU5Vi{;9H#R{2$?m z|2xD-{d!K+z4H+2!(lQ+%wQK~Hjobs0eE4Bwg$^ZjPU2WgSFN;QA^jGdjAtd*?;F{ zIm0ABWvj7eeyAF2fu=YQduHLtRt`6+BiiloDmaSzI;2dc1}4W26)1$p2aBw35fBp=u1@P^})T zX>Anysa<}Hf7Pjb=v+e{9~}tP%)32yIQF56;@rel=d^85PAFv+i_%E2hB9U{;F)ups<89?o=+w9SMy7=1CRAhOufBLm?89HX@mydjFw8#HE zIbrv?XxHY)*J>h8Z0g|u=0Xi*Z^PN3+HmOU>zrA10NB4bRa%?30cs1>$W)3weN=tH ze&+kv5Zw<)8^%a+P}tyAvZb@uFyAA7XzD#uiy$)h8XlJV-%0}gi$&=W-%D`!STyZr zjbKkl6BiTsf0ZTE#GN3fSQRhefj4QqAp=x|g@^Uf)6AcYo^TLc7<*!Om>Clc2o^vK8vDe061w?Di<^Q2?avAJp3oR{wwI=O(Z~ zZVEHg2Wc%s!uRp?7}|CxVMKjBaXviniUrhLK)?cI4*bH{nad*cI~#^RZtFadzzddj zs#%u)AzcXKbyQb`o|jG=`E*dW8)rq30j?~MV6Zi0`LsNtKSdjM`Xqykn`vNZ!sUv7 z%(NhQH(XLYVa;QaP-4#3g6n+XUnC?!*B?9IQv2Nm&}<*2VbE?TbyT}1&6@Ez1EP)+ z`<1>>ZKl<~3>+FKF;I`5C}%ivZr!GXO1q{s2enH~6fW<)DnFyWQ{GWo>5>vF>!ppC zTTFWWu~RC_V#=G8&wMgy*>Gm};I4-PTvz?NS_dMoQxNRAjnY!xjW4S1Xw}MBdtF2n z*dPj~=L@AY6{PUOw9kKQn8Y$rO^o=^G026xkx)%*?vDZg`IpUD5QQ+}(IL~kh1;)y zuAh`m&i&P9-F^%F!vO`7tj7JK{Xp6Az21QRMy>Fl2I=Ab!t?Z%Uv~wHLrClIT~p%w z9iSb;i3tXQ`TNf|(Ify`(nSz_*Jgci9DSy%0l|k2g$oGmzsEu;8V5Azs$SD9^zwV4 z14I5E95l7?JAv6RApzRCp?~Zh{pA~g;R#nt-m#|PH(wPEZ6v7paP8EyOi_N#$JmKY zOOpaARBRwGpUcvqk#GG*&--9}S-Gwo{K@K;I0IVgHBvM#^S%Ai2=IfR!$A61TA-iX zdC4F;3DD}8l$Ac*%4Q6xRGV3P`UGyBgENna1Ns43Sy|nDSQwb1OCVUycOfPriQbRj zTzCe9*46E`DWGYN^n9>hDp_9cSTjbsTM5$9aEGxbE(Mo6S^dnV%z(DZ4}h~-N)t!f z7}h_y3Y6W`9r4z5Q*F&FKtEX569ws$q@)Th;ilWS);Nu$#XJf(5*m%%_tx8oKuCOZ))_E9%o^x8rr~fe!>Op}Jq;ORg+S+8j38cw=!_!DQM2)ue>WrY*fAG>( zLi;N?`fC-;VJanHl##c0Nwc`%R*(U936lOk|7RS3Ja^Q=z+Hto?Q~>$^!fE~?o-(8 zc^?DxdszhnYpmT7Jb~#twSD}W-i1? zPM6m1{-S%QQdH;@k}a#E<3)j!ScPlE6KCn?0A**7IjWF&OgNhAn`E%lbuvT6-|Agg zw%uUd-O)-EBIi9SL_=Zl_3_1m>BD^Uue{-W_?)q@xm@7(e- z-KEY5eeBBoP+7nm2v3SIxo|^y2w`)IyHX?pDS%2E+WnjiGeg7>mDjA|c{#Xj(ZR~eZj%LL8H(6Bgiwpp zKY-n*Qq7K(cDDN`-fo|?mUi<%IeSgm3w>|J)q{@^g)BpsxrqaywXIqjcM=+A77ho3 zX?hP}r4^t)dxoH=GeT7eRVqAv*}@kg8hLLIHeV$nBRKg2#qdsfzz~&WZaU|7TYH5V z7ma7sK}1eIZWtZHi-^2}1j-xDK$6LRWds}8L zwkI0^o(4&1oUv%bkP90L--LIUm;c5s>CnbgwBw4HrPgQe{aYhj!x+{RGw#gYh@a!l zXwhzNC=W@gaBb2xp?5hU8JV*`Bb?Z@w>Wrb;wC{$?=ni`g4GLs z5Ir$1d$GE*E2+WByZWkFbW3z^w29^2`U|@)lJpleUeZYVSA+qo)Z)Bya@?e*PDR|6 zm_@q+04vSl38L$u-4~;G*P-Xi%L0W|#e9L>!sJ!WiZ?g}v;=crfXUQaVJFm)^X+-| zNNar4U}P*@yz`CJic@#)!asM-M_)f?Gii98km{JAu{ZN}{YUNG*DHW;VWCzG89&DP z4rjV^xcSq7Mf1Rb1(Ggd8|ADEogJ5-T3kj3NyRSOX4!1gmFY6e1 zzuf@E#Bsz&Bf{CSwK`|va?IJ1n#R~Net*TifUvbTXdykdQcSK4Po*qr7r3ZJxKy0C zop8l#COX!atS8>s&a_eYOtd%yxx%8p&rs?}g*&`{;+heHx@90fU|Pi#&h=d z=ef~hxi_yd46|dy0;}@l$^%8N2lc;nD_)y5NJfa14fSh9j=EkI)o_D zjUNkoa&s$Ixx98y@G(on@J+x>g3iYu$Nv#bs5=I=WUE|`h}2LTwI0kj>-2ZUt)p-Wh0r z9vR9vS9N!ne$}-VJ}#npM~_P}0s(t2%&m>^7`-Ni<-HVVX^hzP)~h<+Md^L&V+4CB zuT0t)!qWi0L z&w7&wvLMRhJ~NO5HDnL?!Kd2ngkjO$^Pic%H=6Aen0-}jXsGM^UNg%NLnf5f zFR-juvI}#7`Zy9tcHP_w*=%~REyDhItSn*$wmM%Qo6-`^Xi9)id*=La3w||FJ$fL^ z3}%j0qLvF`o-9O;=Sk0W*^58Qb9ZveEU-|*=?y+%HglWn%AQq$-OzKl?bI*{ztt#w z0V}?3L@Vp^spxmWj8o>>GfB6g=sNhP3nP2*9hg=fh28*Ws6h3htiUz4>|TifP|iMW zJ+WEWaWQAOj0Jty1lc7Wjc;$?1M9wHPa1rt(!YW4xL9U{#LIi3eQFX zEb3A9mlXf(NEx#D2C6 z-V<&GUwO^ex7_b1+Pcyu5K@|zlrO9YpSe%&*Ta)sa^itN6PP&5u!bv7<`$`>4p?6$ zDkncb%9Gf58$BuzjS84~rZf)u6>79^9j1*3ZNO+&^Vh>dI1oSFEkkqqdN~FdC2{2& zz7Xh5{eI!WzzRwoqC+BM%NXHz?p^cT=@wIN`27|0J;6pjRo+a$Gj zgT)}eTEW>bAnt6tk{x0|XA1gdFwea#2{gbmeHI8_N}xjIaFo62KD(Kd4i0Y$3KZ1k$nlT-V%w-AQ# zEOn)rg(}c9*J4sJj;HoWOIoy4%@LJ3(Tauk&C-JofIDC}3iN;3RS) zzOufhoPUY@wffwCiTmrTcZ{IyX8%c9>Tx~0`h;C_HKojTVl;cU-*|Xb?#2x#%3|X2 zX%drbJnRxTw4YAQi5NG>H7hudyS7sI2aBVkHco0h>i3t+)E~AF(cgvA587Eq27qN-KS!brIXf2oHj7%=>h8zMQT8Qs*P_ytwy|x=M);I8avao6`AKJ%+%7g4OoCSS!r}mq4);@)Dej4^FO%>n61w z7Ag@joSnNn^de_gysQvsUf^-)CQ=E9MER*l-KAcd8(4+Txc!txKUC@RKq=z_s4G2w z`HGiP3iztGG_UR-aZyTCXl-NO@Y8kFF@Sl;F??2E6B+^a|F8hfC_DFP`3s|80)nbSumd)KEB9s-z^quc$Cm7rP5X(#}+ufP=#rC!h;CfLEf ze@u{7fL>WQ6PmJr>TVL`4>#$ein&j>rD4A469{Xg)0ko z?KEXJxX_wEgs`nB7b=#DBKz z9MhWVq%S~lF%k~$!go#3x6HbOKotspkfS3rXnMtH-6mauXw0tH2godLGs|tJ;a0hi zCkmFL+B1rd&@QbFj`suWG+*j(|qwQ@x}NyUJ>qX^EDBo0a}b zq=h-6d*CPoSxqnv0N>T1a`Q=zB{g&?+V2=b% zzz3e%+d=*K2KA&Yz`vjXtUb0X>i-*lyxk|FF*1vVt9*|@vM*LIFV7lynS_la*Ll2z z7_XnJpzv#^`llvuhpI+=P$+bv@icSY0sVSlea_(#UH-mbuqtmIsdXnMK_hF(`z*%q z-f3uaYA0IkK$|$bW^7_0n;*?&+b^*jSPfo%@5ZJ6uv2@y1O@~ASgDRUt#uE8fR6lrC=|-s*R1cXo+z87ohjCqyDjyi^`brj>XY$=M5qdB7>F?82?y$EWh8!`*KbYPd=3o%eIp+F7mbWS8yHKQ zFViN7E;ZG=57{Z<29COSWw$wpM5w(L$qTPR;hbgqXs`faq zd7l0vZ~=Mw$sQbzw3MZF9`3+epVm@m{58zBW%sFQc3>HM?y9p{+;SYwus$3NEbhJW z7)`hRc6{rEfjlQ1z0yIq4W5E_g>U(}5zr)fd=LV|v>Li?WXZbe(OxSntCViX&eD0u zt^=9fj^WyQnfyaFk(^HCsj0A7YAjmzprA(B^X8TIge+y*C`0azJ6w9_O+G!^Is4@S zOG%%AYV!8KK-W$l3(Z}#Wzr`dTqpr_4!rEz5A%Nnv{#w$z~q|#Tjl~SIBn{?Z3Ht{ z@Bb;Z-lWe@4$YlKoleS?o~S#`;upfZ*r%Q0g3u>UqehX6p|FcDq1@?`4J;(* zbF$l8)R{(DTAnrkIcw?X(3D3o#5w%Fw?X^YBaD&(=v;x6v~V=~gR_|m@%b{I+8edp z%M71tNrn`PJgC@Y3>=EKi#eQkMEI(>YZS+QxTH+)w3IYsTR)+Os~&?oB&A`}7X77s z-B;7b*Ao@y!TOvys-3xQgeCY{6U(pP{Fk`rf=$keJ%t{^yab8gDHi|IHA;ba5UN3+ zGaRwUYu~*~UEj6OgeKo+7a>Su6WvHDCRvZt6m4~pqfzi4Zann^bB5E%6`$6S;yI){=SIfmzU!apP2dN;+jYn2 zDL^zOQRfXE5%MPF6?zsDojy4g+N;UStj-$hc19S3$XIqrO>U>PRDbvMJ(WzC_Cb`d z5XL3<>Oj9K&}TNA4Vfl{qw(t>yng)aLZB(Wuj58I5B6sbOUEDQ0uWoBL{;6TYDTL~Xm6Y@kpHJm_INniLog z*-VI&neC>!`|i~-nRE{HXWRDw<*6KRkR}r>X279^TJ6@(bF{L?_ZD{=w;DJ-R&d0N zI=0^!jt7S|)3Vdx^uy~$pc(@gVh&L%AlIv48Dm_-hW5tyEacs7S7q@Yp3F9}%xFfY zTrUsE9@bbY<#8g(WYx|`Wtrsn4T@K1szn@=gqE^s?UWsx7miHkvmLKRKMQ(8ok%WT zoQ>1U&(H61=ncmg3g5!#CWfaiJmXg>1uS~Ju9GP$kX4&v*`9irlw_aUk0T z`|4R2h*D<#h0=(w(*V$q`%vAUW`>+a`q(7#{YzU)aQ!E6lV&< zYRGuvJ3Q*Dr>CdyUefwkq-#(T-`Eaa#%Isc2x&z!6dn{@v+9oGOQr*dYII2*Me1E@Afkon~q5Mn{ zrgByLrW=s^7QWL8KdYjDtrSR^Mw@}Vq6{qQPJ%=4!0ex7Je#&g)rLdoe>ubY4MdFW zaMi&t3P(AP=yPcbYD~4ftO1bH1}!mv=lLNg5jn!s2Yn7+xVN2)4W3Nmxd$7RoJNBN zs{2p#9aqf6Q*z#@<@lpD*3WB^hFkeh+*nz7#mTc5l(82{i$-?@AG_YOurO2X|0zhz zK(mKL+OXsw<0ta0L>U<6d=CT`a1 zwLXFe(0=eJVOO1oYr`}7XXM1ZDZjzV$rP&lYH9i{&9ohFHQY2XpAA=BdYN|kz<6hg zmW{-P@%~yCg?;wJHQs}jot4e*R4-RMjRf{=LUmhu zJek=k(;1~$P0pQm$KCU}0;*c~CY5WB@?EUSD7MFN1HXx$50~U$A{RQfTx7{j@Ab?k zHJBXFS#M6BuW3w^rLI<@%=lEPr2cZD{tt|N!U?4$qr@zwtaRr#uDoc^ zG-n|9-@#?>$nE)$6H@ ze1wk^+3)em12v4JW$DyWUycUJ?1f?6=TfPJrWTnapl}zu8eBUK+n_o9;gnWOax$pw zCub<@2^1GRK%>@&ZGbN*%v1fg{W>iWd$K_)9op&M1ave6H`wVM};y9z97$e!a z3XY_XZF=|WxLFYC18EFVXo#2@;LsU7Zl1UsFT9m8!9X*A`oTY>eb*5dsl!Q7Kuh2f z`UMDkxO)&S!T|dY6iMM90;~zs{q-ON;aCK^oU<^LsSORh=*A779=A7+!yPF9uTHY5;8xyQHfp#N)3W>h@WI|$9d?!H z%5oACL>sudUVoqvq;301^t*^&bf=p#u1h#pOL1L z?@mYRG)D;p!EMY+;xd)UZxZB_fWL{)OqyXB+TK^7(r&icD>0d(x3TYj;FtrmUP6X~pt|*44jphbq>4Fp+h5C#O#jUXy)f1E6 za?B8gVIa01#x+C_h5r=V)dh76TIP2FUprbTpI+{uHE^rBOG#_@&H?VT$~bl z(+~n5-{7_Pt?}3g@)x<&q3x<9afOq&Xb%LVoMr>m(w~ zsZ_%zCnI0M;J6W$+*fVmVv?C~G#YL{lsGF6B8Hh{CMso6JNx!!NUmV{l$qnp(VPc0 znzXqwveb{f*x-)2POzKu;qTZZV|Uk0PfYk|MA^G%ks(V;(z>hdUCXq`juAd`aEvj| zZK*uU&<=>xSWDqf{<8;RJCBQWDzY+=QDmZD_MjPj+OemCSqQV-8yfbIr{O;3?@df1 z-l>DfEIV3SIBvC3KYELmXY#C+wwl3U?;JOHn3KmGZ*%Kj0Vi@JFHz1+kpbqXAogCp zj)4qf^*|1cL(R?H_nPWPwlwZO8F=XDxR#3*zk&n4;vsZYwYS<1F(w!% z9JLJT224`_sJlO-BLcpCB?x(HIOBBy&g@v3i{{PKXVqv?t?s)oiK-Mr9K9j?l)4%Bty+dvBB!< z6fPMz&8LMe33{CKoK^mBfB+s;N7kwb$tottZ5VAAj@RurzcROAUaYC=RuHEU92lD% zCz_t}y!otmPq6laV0uc#kIQ^)^WTIJs;c+x?n2du&xC?2&wBa?a4e}E$Nh7~GCt<( z2IhZ{`pY`o9Zh;`39`-l^7meVV$1Mw5L_0H#wgY+x}}m${Hy&Si>`a`T;Woo9CYHa zJ~?;gkh|u3V$cWjvAW33d9JQOQGJD=g3QR_&rwt8MIEzGp^`EEw7p91IxvQ(@2=LT zv_`ppstCgNHF6qu`Cj|9j*%d8n%b>Snec2-+a4Dbk_i+So?PSf$vUsP>Yqi`g$Dm- zB0{IkZhRXAqcJHh1qcFnKK-ZqSuprWaU7-AH=;QVq>8HVOj2e#4wiMq^*blTlZe_f1CNY1HNH@Ag>*+YQ3oK0w>rgE^*5e1F#9}LU6VM0( z)zp>d#Q&rk0t4{%u`E32P@{NnF^QzOzLdBNjS2S=uz)xa1b;J%yp#kC4wx)A-AsCN z1lpZsR$pqj7am0>>NbPjDc$O=^+7#8NvEEC-*GkF3z$V|Yf|=Hdn5OrcAqT%e-YQ~s{H zX*c=3>~+-7Uhv%@qe%^v;yP4#do(0Zdg8gi`@uZP0g!9WL$zJesvLxLwuXrYrXs2k zB!tP3(wC>E=Ui7L_=KG@;F}kl;-)ay~Ealf;o!Z5(;`c}+(jJ*P z>B)`W=R~DM>90K8+TZWfs9v4<24-^3rsC50!iOcCxMP>C*Fj4>FFto}EDoWSWXLl= zEdIFywb)SH$4(`sYUAA9BIe&S<@##f;1*s*EPUCfdjSGA+)7j)=QTk(Xe##r^FpD9 zM0Dbf4l@Y^MorSPg1Tf;5l&}wgPZ9D;3;{#dfo#_>&<53?!kz{qCbdl-}O+d@EU& z3;yU_@kAtG6P(mTvp`)Mx2BpHMiBYv(T=ceU{Kzd%Y64 zM6?z~m>Xg}h!t9c*;hBWqlf{VWg;lR)@I&1+W~n;5^S6`ku7`-mXk!h?VAgJssx2=jE>}``2nHcxm`L`${^WuAK$Bq$Yh)j?6vNb2P2Y5!rxr4#M8l)29_vuS!Z z-p=KLzKueOON0xj$!2bSgf?SuNu9`X9QriiFd*wR1E+;t&)g7y46x6UiTdoAm5Gu; zp-fJNXw2gHCpL;zv1U|Yk313WUxJw`5I^h3^{o5Lem6U}QN*6>7-{>n`NQ31*Ok$$ ztMEQXc)sLpIH#0Z)gvd~`Ajawdw0JM?682p#GQ&8y zIL>?CxtIjt6yS_Xjp%y*Qgl((djD+z=(ye=)RHivl{?i;gpP!8PnRFVNf);t7fQ9@ zE`_`{It$FDOTZZVdxwwd8YiO+AdJB|<)7U|XbgTH_1rK4fg?5Br0#dS;f&fqj5+K3 z#6RlZDa#YrP7U@37`d4_lYy!57$B&FTZJ^Dc0(qG-EzME%*4lBhw(l#CY)lOr8eI9Q~Ugf(hkytQA zwC=2384yZcw=zjx#V)T{Q6ok0Fy|{oJ^b8T%T92B3=vV)D)r^&R^grX3{`ZCg#>K$ zZPz&Du0bYtan)%sIh{L&_rfhU&qfSea`FenR>day`T5q3xHEUZ!)*l(DjpuAtm)(r>;waZieg& zRlIjhV9v7|k7<23D|td4>OzU)j`ct~Pf9$>{j*T}LqeU}M&~QKbQL`I%FoAfjZhPz zcvGGM{|4fl79XBGWy`E?N6BlXW$ny+&hje*n%#fTy~!mnNGc3-m}Gw5k>yf7cGJd2 zBdW%5bwu;+MF^|_NLJh@pNQ(a)G?u0Rq}gh;u%pn6Ho4f%=g>{LFODAg&P;DP{|VZ zAAnjjmCfrzn~?-dH+A6kc)Cx@#|-Q z^uH0HlvI|Rj&yh1x0=8ck!u|A5|t(4)9#=ByhZayrEe<9UpFn!O}k?n6FRmZ`G zeylIO=A=;?*oa`^bqsXl=XV!tU8^p@6FA*of}|}Sy1gv|h0qmUz{j~WTzm{jT=XL_O3M4#t>__y-?^Nl;UL(!db(bcJ~VqF9HE4{(3;1NU4)DnaL)P! z_{ckxWn@;*fCQaK|1fdNKJ_Vkn}Ac7q)iWr zK|bv?8y6Q4UJqM`tG|vdZR`80&BLI=GbG8n^|ZS@)BuYRe&Z1Y-N{00uIOJNxqy;< zuv-3B!)q=;Oyo_ln-9ymS^o-%Ha`DB84DBtDVAesKg{Peyo&UWE z!ra*;Mw8ckw1jO$RS7<+Ong3@5D@F@&#RDoH*zeNBLRg|3>MW3CgU}{?m(oG$3P|< z?m(6Lp97I>U<$(TPd%qE4>w46=S3>4`LHtkhz0nt28c^Q2$LLc(Y zEZntU;wl&luZnZy^t#kP-binh$4d|}h7(Hl{b}PP3KCQC4aKpu^b!1i;lT@;qSsR( z6vBVJiT+~fq6r9El1B_3gAsiftfCTbHqkZ9!7>qo-fZiD2wzJ;hLLzr=*>UVy^;Ar zGvR)IbZMxAoHd(I$}#_|2~h081ALYFlOvRqcnshJa3|~3{|sX*1|8*ApL$3ifpG9K z+zFROdI*U&_q#R0`$GF)K@@{+P&!q0ecIQ8=fAaDp}AEC`cQmse>*E&AQX_FdpjCyzeOr8%&;Ak@I=8?Ql%8trS}F1RkN zXA@HQyBwp!@CX?#1<_CosS^EAck-kaLGN-w2bDb*~J!mjT*H;FM z-E!d;=9aJupA^;-{VwsFSVLEi41j#1FE#{WJ0R?-#!RzO^5Nh}YWrzmUE)Xc_cz zgVfpoB0=(9eT+%pr*bt*4^61?O6YBO?%etGann3;{;3}wQKu9Q0pR}G$Km@;T2Diq zz~`8=YQ8Qx4@IzUmmVjyMt%b%(gryC9C%21FS8YW=cVw8xN>h)cKE)0*0gxVpW!YQQavPjdONi6r>q> zH@}G#!HevB<|0{4ZNpnAYH;bznGHSmTR-)xaCK3DyCJ zDF0bMpUlkOO%^YPpp~tp6P+d{+v0GhtRrJk?MLmyE!zda>UepqgZS;B^#s&SK~>q- le@mdg1fe=T_V`j+^5h>sI1+WXe;xSmyt4Y4#8XCp|9{j=kIn!9 literal 0 HcmV?d00001 diff --git a/playbooks/threat_intel_investigate.py b/playbooks/threat_intel_investigate.py new file mode 100644 index 0000000000..7c4a68c141 --- /dev/null +++ b/playbooks/threat_intel_investigate.py @@ -0,0 +1,361 @@ +""" +This parent playbook collects data and launches appropriate child playbooks to gather threat intelligence information about indicators. After the child playbooks have run, this playbook posts the notes to the container and prompts the analyst to add tags to each enriched indicator based on the intelligence provided. +""" + + +import phantom.rules as phantom +import json +from datetime import datetime, timedelta + + +def on_start(container): + phantom.debug('on_start() called') + + # call 'list_investigate_playbooks' block + list_investigate_playbooks(container=container) + + return + +def list_investigate_playbooks(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("list_investigate_playbooks() called") + + parameters = [] + + parameters.append({ + "name": None, + "repo": "local", + "tags": "investigate, threat_intel", + "category": None, + "playbook_type": "input", + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/playbooks_list", parameters=parameters, name="list_investigate_playbooks", callback=decision_1) + + return + + +def decision_1(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("decision_1() called") + + # check for 'if' condition 1 + found_match_1 = phantom.decision( + container=container, + conditions=[ + ["list_investigate_playbooks:custom_function_result.data.*.name", "!=", ""] + ]) + + # call connected blocks if condition 1 matched + if found_match_1: + collect_all_indicators(action=action, success=success, container=container, results=results, handle=handle) + return + + return + + +def collect_all_indicators(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("collect_all_indicators() called") + + id_value = container.get("id", None) + + parameters = [] + + parameters.append({ + "container": id_value, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/indicator_collect", parameters=parameters, name="collect_all_indicators", callback=launch_investigate_playbooks) + + return + + +def launch_investigate_playbooks(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("launch_investigate_playbooks() called") + + ################################################################################ + # Determine if any investigate playbooks are available with input types matching + # the indicators in the container, and synchronously launch any playbooks that + # are found. By default, this will look for local playbooks only, but it can be + # changed to use community playbooks. + ################################################################################ + + list_investigate_playbooks_data = phantom.collect2(container=container, datapath=["list_investigate_playbooks:custom_function_result.data.*.full_name","list_investigate_playbooks:custom_function_result.data.*.input_spec"]) + collect_all_indicators_data_all_indicators = phantom.collect2(container=container, datapath=["collect_all_indicators:custom_function_result.data.all_indicators.*.cef_value","collect_all_indicators:custom_function_result.data.all_indicators.*.data_types"]) + + list_investigate_playbooks_data___full_name = [item[0] for item in list_investigate_playbooks_data] + list_investigate_playbooks_data___input_spec = [item[1] for item in list_investigate_playbooks_data] + collect_all_indicators_data_all_indicators___cef_value = [item[0] for item in collect_all_indicators_data_all_indicators] + collect_all_indicators_data_all_indicators___data_types = [item[1] for item in collect_all_indicators_data_all_indicators] + + launch_investigate_playbooks__playbooks_launched = None + + ################################################################################ + ## Custom Code Start + ################################################################################ + + playbooks_launched = [] + + # loop through each playbook with the matching tags + for playbook in list_investigate_playbooks_data: + playbook_name = playbook[0] + input_spec = playbook[1] + phantom.debug(playbook_name) + inputs_to_provide = [] + # loop through each input parameter, matching only the "indicators" input + for param in input_spec: + if param['name'] == 'indicators': + # loop through each accepted data type + for accepted_data_type in param['contains']: + # loop through each indicator in the container and add any indicators with matching data types to the "inputs_to_provide" list + for indicator in collect_all_indicators_data_all_indicators: + for indicator_type in indicator[1]: + # if the types match and the indicator value is not already in the inputs_to_provide then add it now + if indicator_type == accepted_data_type and indicator[0] not in inputs_to_provide: + inputs_to_provide.append(indicator[0]) + # back in the playbook loop, call the playbook if there are any inputs + if inputs_to_provide != []: + playbook_run_name = playbook_name.split('/')[1].replace(' ','_').lower() + playbook_input = {'indicators': inputs_to_provide} + phantom.debug('launching playbook {} with input {}'.format(playbook_name, playbook_input)) + phantom.playbook(playbook=playbook_name, container=container, name=playbook_run_name, inputs=playbook_input, callback=add_notes) + playbooks_launched.append(playbook_run_name) + + launch_investigate_playbooks__playbooks_launched = playbooks_launched + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.save_run_data(key="launch_investigate_playbooks:playbooks_launched", value=json.dumps(launch_investigate_playbooks__playbooks_launched)) + + add_notes(container=container) + + return + + +def add_notes(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("add_notes() called") + + ################################################################################ + # Add notes to the container if any were generated by playbooks from the previous + # step. + ################################################################################ + + launch_investigate_playbooks__playbooks_launched = json.loads(phantom.get_run_data(key="launch_investigate_playbooks:playbooks_launched")) + + input_parameter_0 = "" + + ################################################################################ + ## Custom Code Start + ################################################################################ + + playbooks_launched = launch_investigate_playbooks__playbooks_launched + + # return early if any of the launched playbooks are not completed + if not phantom.completed(playbook_names=launch_investigate_playbooks__playbooks_launched): + return + + playbook_outputs = [] + for playbook_name in playbooks_launched: + note_title = phantom.collect2(container=container, datapath=["{}:playbook_output:note_title".format(playbook_name)])[0][0] + note_content = phantom.collect2(container=container, datapath=["{}:playbook_output:note_content".format(playbook_name)])[0][0] + phantom.add_note(container=container, content=note_content, note_format="markdown", note_type="general", title=note_title) + + + #phantom.add_note(container=container, content=note, note_format="markdown", note_type="general", title='trustar test note') + + ################################################################################ + ## Custom Code End + ################################################################################ + + threat_intel_indicator_review(container=container) + + return + + +def threat_intel_indicator_review(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("threat_intel_indicator_review() called") + + # set user and message variables for phantom.prompt call + + user = "Administrator" + message = """For each indicator below, please review the gathered information and mark the indicator for further action.""" + + # add the note from each of the launched playbooks + playbooks_launched = json.loads(phantom.get_run_data(key="launch_investigate_playbooks:playbooks_launched")) + for playbook in playbooks_launched: + message += '\n\n' + message += phantom.collect2(container=container, datapath=["{}:playbook_output:note_title".format(playbook)])[0][0] + '\n' + message += phantom.collect2(container=container, datapath=["{}:playbook_output:note_content".format(playbook)])[0][0] + '\n' + + # no parameters to add + parameters = [] + + # create two questions and responses for each indicator. the first chooses a tag from a preconfigured list, and the second accepts a freeform comma-separated list of tags + response_types = [] + all_indicators = phantom.collect2(container=container, datapath=["collect_all_indicators:custom_function_result.data.all_indicators.*.cef_value","collect_all_indicators:custom_function_result.data.all_indicators.*.data_types"]) + + + for index, indicator in enumerate(all_indicators): + response_types.append({ + "prompt": "Choose a tag for the indicator [{0}]".format(indicator[0]), + "options": { + "type": "list", + "choices": [ + "Tag to block", + "Tag as safe", + "Do nothing"]}}) + response_types.append({ + "prompt": "Add any other comma-separated freeform tags for the indicator [{}], or enter 'n' to not add more tags.".format(indicator[0]), + "options": { + "type": "message"}}) + + phantom.prompt2(container=container, user=user, message=message, respond_in_mins=30, name="threat_intel_indicator_review", parameters=parameters, response_types=response_types, callback=process_responses) + + return + +def process_responses(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("process_responses() called") + + threat_intel_indicator_review_result_data = phantom.collect2(container=container, datapath=["threat_intel_indicator_review:action_result.summary.responses","threat_intel_indicator_review:action_result.parameter.context.artifact_id"], action_results=results) + collect_all_indicators_data_all_indicators = phantom.collect2(container=container, datapath=["collect_all_indicators:custom_function_result.data.all_indicators.*.cef_value"]) + + threat_intel_indicator_review_summary_responses = [item[0] for item in threat_intel_indicator_review_result_data] + collect_all_indicators_data_all_indicators___cef_value = [item[0] for item in collect_all_indicators_data_all_indicators] + + parameters = [] + + parameters.append({ + "input_1": threat_intel_indicator_review_summary_responses, + "input_2": collect_all_indicators_data_all_indicators___cef_value, + "input_3": None, + "input_4": None, + "input_5": None, + "input_6": None, + "input_7": None, + "input_8": None, + "input_9": None, + "input_10": None, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + responses = threat_intel_indicator_review_summary_responses[0] + indicator_values = collect_all_indicators_data_all_indicators___cef_value + + # lookup table to turn prompt responses into tags to add. "Do nothing" is not included, so no tags will be added + response_to_tag_map = { + "Tag to block": "marked_for_block", + "Tag as safe": "safe" + } + + # overwrite the parameters list with a list of one indicator and one tag per parameter dictionary + parameters = [] + for indicator_index, indicator_value in enumerate(indicator_values): + preconfigured_response = responses[indicator_index * 2] + freeform_response = responses[indicator_index * 2 + 1] + + # handle the preconfigured responses + if preconfigured_response in response_to_tag_map: + phantom.comment(comment="Tagging the indicator {} with the preconfigured tag {}".format(indicator_value, response_to_tag_map[preconfigured_response])) + parameters.append({"input_1": [indicator_value, response_to_tag_map[preconfigured_response]]}) + elif preconfigured_response != 'Do nothing': + phantom.error('The response {} was chosen for the indicator {}, but that response is not in the set of allowed responses.'.format(preconfigured_response, indicator_value)) + + # handle the freeform responses + if freeform_response.lower() not in ['n', 'none', 'na', 'n/a']: + freeform_tags = freeform_response.replace(' ','').split(',') + for tag in freeform_tags: + phantom.comment(comment="Tagging the indicator {} with the freeform tag {}".format(indicator_value, tag)) + parameters.append({"input_1": [indicator_value, tag]}) + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/passthrough", parameters=parameters, name="process_responses", callback=tag_indicators) + + return + + +def tag_indicators(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("tag_indicators() called") + + process_responses__result = phantom.collect2(container=container, datapath=["process_responses:custom_function_result.data"]) + + parameters = [] + + # build parameters list for 'tag_indicators' call + for process_responses__result_item in process_responses__result: + parameters.append({ + "tags": process_responses__result_item[0], + "indicator": process_responses__result_item[0], + "overwrite": None, + }) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # overwrite the parameters, extracting the indicator and tag for each result from process_responses + parameters = [] + for item in process_responses__result: + parameters.append({ + "indicator": item[0][0]['item'], + "tags": item[0][1]['item'], + "overwrite": None + }) + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.custom_function(custom_function="community/indicator_tag", parameters=parameters, name="tag_indicators") + + return + + +def on_finish(container, summary): + phantom.debug("on_finish() called") + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # This function is called after all actions are completed. + # summary of all the action and/or all details of actions + # can be collected here. + + # summary_json = phantom.get_summary() + # if 'result' in summary_json: + # for action_result in summary_json['result']: + # if 'action_run_id' in action_result: + # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False) + # phantom.debug(action_results) + + ################################################################################ + ## Custom Code End + ################################################################################ + + return \ No newline at end of file diff --git a/playbooks/threat_intel_investigate.yml b/playbooks/threat_intel_investigate.yml new file mode 100644 index 0000000000..afe3e17ec6 --- /dev/null +++ b/playbooks/threat_intel_investigate.yml @@ -0,0 +1,19 @@ +name: Threat Intel Investigate +id: fc5adc76-fd2b-48b0-5f6f-63bc3493fd46 +version: 1 +date: '2021-11-30' +author: Philip Royer, Splunk +type: Investigation +description: "This parent playbook collects data and launches appropriate child playbooks to gather threat intelligence information about indicators. After the child playbooks have run, this playbook posts the notes to the container and prompts the analyst to add tags to each enriched indicator based on the intelligence provided." +playbook: threat_intel_investigate +how_to_implement: "The prompt is currently sent to the Administrator role, but should be changed to the appropriate user and role. The \"list_investigate_playbooks\" block fetches playbooks from the local repository with the tags \"investigate\" and \"threat_intel\" by default. The playbook \"trustar_enrich_indicators\" is meant to be used by this playbook, and others can be created to replace it or work alongside it. To add a new input playbook, copy it to the local repository and give it the necessary tags. Define a playbook input with the name \"indicators\" and the data type matching the types of indicators the playbook can process. To add a new tag to the preconfigured list, add it to the \"choices\" array in the \"threat_intel_indicator_review\" prompt block, and add it to the \"response_to_tag_map\" in \"process_indicators\"." +references: +- https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html +app_list: [] +tags: + platform_tags: + - investigate + - threat_intel + playbook_fields: [] + product: + - Splunk SOAR \ No newline at end of file From ec6f1e4dd9959dae92c8f35d686911ea32ba8459 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 15:32:59 -0600 Subject: [PATCH 06/16] Start Investigation --- playbooks/start_investigation.json | 350 +++++++++++++++++++++++++++++ playbooks/start_investigation.png | Bin 0 -> 53055 bytes playbooks/start_investigation.py | 229 +++++++++++++++++++ playbooks/start_investigation.yml | 16 ++ 4 files changed, 595 insertions(+) create mode 100644 playbooks/start_investigation.json create mode 100644 playbooks/start_investigation.png create mode 100644 playbooks/start_investigation.py create mode 100644 playbooks/start_investigation.yml diff --git a/playbooks/start_investigation.json b/playbooks/start_investigation.json new file mode 100644 index 0000000000..3ca8f38960 --- /dev/null +++ b/playbooks/start_investigation.json @@ -0,0 +1,350 @@ +{ + "blockly": false, + "blockly_xml": "", + "category": "Use Cases", + "coa": { + "data": { + "description": "This is a playbook that is designed to be recommended within a workbook. If used in this manner, the playbook will assign the user that launched the playbook as the owner of the event, move the event status to \"Open\", and complete the workbook task where this playbook appears. If there is a task after the one where the playbook appears (within the same phase), it will set the next task to \"In Progress.\"", + "edges": [ + { + "id": "port_0_to_port_2", + "sourceNode": "0", + "sourcePort": "0_out", + "targetNode": "2", + "targetPort": "2_in" + }, + { + "id": "port_2_to_port_4", + "sourceNode": "2", + "sourcePort": "2_out", + "targetNode": "4", + "targetPort": "4_in" + }, + { + "id": "port_6_to_port_7", + "sourceNode": "6", + "sourcePort": "6_out", + "targetNode": "7", + "targetPort": "7_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_7_to_port_8", + "sourceNode": "7", + "sourcePort": "7_out", + "targetNode": "8", + "targetPort": "8_in" + }, + { + "id": "port_8_to_port_9", + "sourceNode": "8", + "sourcePort": "8_out", + "targetNode": "9", + "targetPort": "9_in" + }, + { + "conditions": [ + { + "index": 1 + } + ], + "id": "port_7_to_port_9", + "sourceNode": "7", + "sourcePort": "7_out", + "targetNode": "9", + "targetPort": "9_in" + }, + { + "id": "port_9_to_port_1", + "sourceNode": "9", + "sourcePort": "9_out", + "targetNode": "1", + "targetPort": "1_in" + }, + { + "conditions": [ + { + "index": 0 + } + ], + "id": "port_4_to_port_6", + "sourceNode": "4", + "sourcePort": "4_out", + "targetNode": "6", + "targetPort": "6_in" + } + ], + "hash": "486d29f43a4378a9e142395cf537970427d36ce8", + "nodes": { + "0": { + "data": { + "advanced": { + "join": [] + }, + "functionName": "on_start", + "id": "0", + "type": "start" + }, + "errors": {}, + "id": "0", + "type": "start", + "x": 100, + "y": 59.999999999999915 + }, + "1": { + "data": { + "advanced": { + "join": [] + }, + "functionId": 1, + "functionName": "on_finish", + "id": "1", + "type": "end" + }, + "errors": {}, + "id": "1", + "type": "end", + "userCode": "\n # This function is called after all actions are completed.\n # summary of all the action and/or all details of actions\n # can be collected here.\n\n # summary_json = phantom.get_summary()\n # if 'result' in summary_json:\n # for action_result in summary_json['result']:\n # if 'action_run_id' in action_result:\n # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False)\n # phantom.debug(action_results)\n\n", + "x": 80, + "y": 1060 + }, + "2": { + "data": { + "advanced": { + "customName": "get effective user", + "customNameId": 0, + "description": "Find the user and user type that launched this playbook.", + "join": [], + "note": "Find the user and user type that launched this playbook." + }, + "functionId": 1, + "functionName": "get_effective_user", + "id": "2", + "inputParameters": [], + "outputVariables": [ + "user_id", + "user_type" + ], + "type": "code" + }, + "errors": {}, + "id": "2", + "type": "code", + "userCode": "\n effective_user_id = phantom.get_effective_user()\n url = phantom.build_phantom_rest_url('ph_user', effective_user_id)\n response_json = phantom.requests.get(url, verify=False).json()\n \n get_effective_user__user_type = response_json['type']\n get_effective_user__user_id = effective_user_id\n \n\n", + "x": 80, + "y": 180 + }, + "4": { + "data": { + "advanced": { + "customName": "user decision", + "customNameId": 0, + "join": [] + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": "!=", + "param": "get_effective_user:custom_function:user_type", + "value": "automation" + } + ], + "conditionIndex": 0, + "customName": "normal user", + "display": "If", + "logic": "and", + "type": "if" + } + ], + "functionId": 1, + "functionName": "user_decision", + "id": "4", + "type": "decision" + }, + "errors": {}, + "id": "4", + "type": "decision", + "x": 160, + "y": 320 + }, + "6": { + "data": { + "advanced": { + "customName": "set owner", + "customNameId": 0, + "description": "Sets the owner of the container as the user that launched this playbook", + "join": [], + "note": "Sets the owner of the container as the user that launched this playbook" + }, + "functionId": 2, + "functionName": "set_owner", + "id": "6", + "inputParameters": [ + "get_effective_user:custom_function:user_id" + ], + "outputVariables": [], + "type": "code" + }, + "errors": {}, + "id": "6", + "type": "code", + "userCode": "\n phantom.set_owner(container=container, user=get_effective_user__user_id)\n\n", + "x": 80, + "y": 500 + }, + "7": { + "data": { + "advanced": { + "customName": "status decision", + "customNameId": 0, + "description": "Determine if the status of the container should be changed.", + "join": [], + "note": "Determine if the status of the container should be changed." + }, + "conditions": [ + { + "comparisons": [ + { + "conditionIndex": 0, + "op": "==", + "param": "container:status", + "value": "new" + } + ], + "conditionIndex": 0, + "customName": "set status", + "display": "If", + "logic": "and", + "type": "if" + }, + { + "comparisons": [ + { + "conditionIndex": 1, + "op": "==", + "param": "", + "value": "" + } + ], + "conditionIndex": 1, + "customName": "move on", + "display": "Else", + "logic": "and", + "type": "else" + } + ], + "functionId": 3, + "functionName": "status_decision", + "id": "7", + "type": "decision" + }, + "errors": {}, + "id": "7", + "type": "decision", + "x": 160, + "y": 640 + }, + "8": { + "data": { + "advanced": { + "join": [], + "refreshNotableData": true + }, + "functionId": 1, + "functionName": "set_status_1", + "id": "8", + "selectMore": false, + "tab": "apis", + "type": "utility", + "utilities": { + "set_status": { + "description": "", + "fields": [ + { + "choices": "notableStatus", + "description": "", + "label": "status", + "name": "status", + "placeholder": "Select status", + "renderType": "dropdown", + "required": true + }, + { + "hidden": true, + "name": "container", + "required": false + }, + { + "hidden": true, + "name": "trace", + "required": false + } + ], + "label": "set status", + "name": "set_status", + "refreshNotableData": true + } + }, + "utilityType": "api", + "values": { + "set_status": { + "_internal": [ + "container", + "trace" + ], + "status": "open" + } + } + }, + "errors": {}, + "id": "8", + "type": "utility", + "x": 0, + "y": 800 + }, + "9": { + "data": { + "advanced": { + "customName": "update workbook tasks", + "customNameId": 0, + "description": "Custom code to determine which task this playbook occurs in, complete that task, and set the status of the next task in the workbook (within the same phase) to \"In Progress\".", + "join": [], + "note": "Custom code to determine which task this playbook occurs in, complete that task, and set the status of the next task in the workbook (within the same phase) to \"In Progress\"." + }, + "functionId": 3, + "functionName": "update_workbook_tasks", + "id": "9", + "inputParameters": [], + "outputVariables": [], + "type": "code" + }, + "errors": {}, + "id": "9", + "type": "code", + "userCode": "\n # Get current repo and playbook name\n current_scm = phantom.get_playbook_info()[0]['repo_name']\n current_playbook = phantom.get_playbook_info()[0]['name']\n task_order = None\n \n # Iterate through tasks on the current container\n for task in phantom.get_tasks(container=container):\n playbooks = task.get('data').get('suggestions').get('playbooks')\n if playbooks:\n for playbook in playbooks:\n # Check if the current container tasks contain a reference to this playbook.\n # If so, this is the task phase you want to mark as current\n if playbook['playbook'] == current_playbook and playbook['scm'] == current_scm:\n task_order = task['data']['order']\n status = task['data']['status']\n url = phantom.build_phantom_rest_url('workflow_task') + '/{}'.format(task['data']['id'])\n # If status is not started (statud id 0), move to in progress (status id 2) before moving to complete (status id 1)\n if status == 0:\n data = {'status': 2}\n phantom.requests.post(url, data=json.dumps(data), verify=False)\n data = {'status': 1} \n phantom.set_phase(container=container, phase=task['data']['phase']) \n phantom.requests.post(url, data=json.dumps(data), verify=False)\n \n # Iterate through the other tasks on the current container if a task was updated as indicated by the presence of \"task_order\" \n if task_order:\n for task in phantom.get_tasks(container=container):\n # If another task matches the updated task's order + 1, then update it as well\n if task['data']['order'] == task_order + 1:\n data = {'status': 2}\n url = phantom.build_phantom_rest_url('workflow_task') + '/{}'.format(task['data']['id'])\n phantom.requests.post(url, data=json.dumps(data), verify=False)\n\n\n", + "x": 60, + "y": 920 + } + }, + "notes": "" + }, + "input_spec": null, + "output_spec": null, + "playbook_type": "automation", + "python_version": "3", + "schema": "5.0.3", + "version": "5.0.1.66250" + }, + "create_time": "2021-10-07T16:24:36.298613+00:00", + "draft_mode": false, + "labels": [ + "*" + ], + "tags": [] +} \ No newline at end of file diff --git a/playbooks/start_investigation.png b/playbooks/start_investigation.png new file mode 100644 index 0000000000000000000000000000000000000000..e244853acbc4d874e76d44e7ef50d1fc56b3a022 GIT binary patch literal 53055 zcmd421yodT|1S!|00T%1Cc?GAXK<7tA>GrxsQPX z4T0f+J7d3IjbdQnPgu*ys4B?Fz*U_cEv)U#F);3j#V6uw#I;cdE}r+x+zotopLv%F zg&j@ieWx!!_Zeff>fMJhn7jECY;9~(Qg*g#)~x9j{8l}ZM+J8T*9gjBcY2zi62>23 zMU~WT)*p1&iNqbJ9Z%I9biYY<*}y;${e01!TtbGSn{`9MEKul{7Nl|HpU6xP@u+Or1{$2I-h;> z$^D#~xC*#B{o|ULTt9vCkdOexIzN+m1fMEMSQ&)eB-R|OGjrc*(4v|K!?SVRZwB?504QW?Zr zf;;ducp4^*lhVZEL}UQfZc=ih5{ICSG3uf3rX{Y0!eO{EH(B2kE#JKtjcta@bCbB0 z7(a;NE%eUy2f?z@SM-PqgCAt_=HibM{E(KCVSelK-8`4Z8)HxU%XgY3zE@8bxCsYC zB1~+P@XDu+g{h5TIZcYwkZO`isP<=pEt6_INnGUf&CjSUMb9hPs`z(A9}t^|JcS5t%nfFwq({U-Cl}cidbUZ zm3Aes#qy(>2&Iz?_!7;dca7i`TS!D$%X^b;Zn-4NX+S_ZkaJpU;t;fKTWR=3CDS4h5vwab!ciSeW) zDI3TXFba}zkSpx@9*+5A4bRC=j~(a!&IYL z#$4t|ekjP~6GPr6GN&{ry6v^CzAZ2JF)N-yKPIR8L8)G;!morGHvFK+vL=rxAK~Aj zcs=`?<~8Z>;4%MLR_L7MoUnawUZy=UK2*br^&6`{t9bm~ zc)j=?)>DnEKLS@|=GBHC9X#Sv#kJB&!HZB*%!&UV`MuWa-AC4sL?25(Dr)9ys^stY zJ#sY_O-)yrdMI@dEq^X9??Yru6wn96>*3B@$^!EuioA-4`C6+fgGrT!h@`k%`K+$~E2B(@YFM7KIk6Rv8==Y!HO71~<2wY4D0(d*`j^9puf6LU|i{ z&mJ)y@f_Li(d=bhBOy$}$-|k)S;u)7QXBF%q=Rskke-_KRnk4kyY+i%_vl|Ky_$VB zL?c8)oSd6nqJ;l&MTssoR!KrBF=;SqlIKebPZw{ed-4Q-Xcui4_QH<^A$DT|W`eiP zoZ%ZaNj012B*5OY=$Mw-9!@wG&J5t$EBmzJn!ErAWC*q^QN<+^O8P!%1vTkiW-_E?~03 z>vZF2E3Do$?B;*)(xx#>`&N_A;DORSU$s}cARyQ64Y}y zJ~8CpO1gT3!hqt0{j0bvSsyiiD9&>SLO<~-s|G87muoQ7P>hmHtP>n|94`H-&r|&SL70+)Tw7wqc!aip$?4ne&@iRE z)LKC?`$-gbo!qB+qdd#yCf@n7r)6h_Z}n5#ug^EnZ&q?ly4QSu`?$w_#(iXevOT&z zfi^^}a_zU;?c7@Zb;F5jb=$>|G~@u20T8~s6v_sw4D{>%Hnzx-=ka0bt%dhd+%oDB4NOlPcQk#_4fkl)GZFe z1VSI0<%rwzO^-%;sic_CeK&QsO7~|wX9>~QPRn+nd$Lc+2VPI{kFr~B*eh5qOI~*^ zL;Wb+`&z7prW5|)@$u->%5s%J(>7*6vmlTlugquq~}mOZnvI3 z#oM{7THSa5if6ak!K6S!>?15E+LiwI3 zzR%lt?=QWde&2T6?D0$?3r4jXMni(~!&gJf4}A;eUiv{1`e&|4DHhRInp-^(#E)>g zkg~=p^ICvesn3g=%&>{3H;*#*DQK?x?LCA6ysKrdqhO(=gux1~VHlX9))-K5g$aJC z!7l~|R%{3cF8E6Zeq}Qu|2)Oq&&2xY8X9u(qO`hHwx1 zvewXX)lqsVYU*guX=3L1*qqbT-sxfphPbCFxU@HSHGzBD+c~(1dP*?-c|#OjU)<(m zfd6^L)mDN*M@bbfhr{9G&Sn;(YO?qK4hR29Fj%>|I*D>|d3bnm zdhl^NI$Lt_h=_=Aar1KV@^XMTI9$9OTunSV99(W)PV&z@vgR(P&el$@){YMFi+N2R zJG!|_Ffd#!^sk@GeVTh(|9d3|m%qmX2jseV!o|bM&GoOj!BFvwyP~Srp5}JCvex#1 zJYWq;9v%T<@jnCpZ;$@Hqt!(b7vVxd$6Xf*DDDL5fQ{|G5hYEr~DA^)IGL;-Aw!U&p{eU?|8+Yj|R=P2l-b{22NDiy38SXJ0mY*hMQw9%R#XhmSL7EKe>(D5T~)(Y zJRYTdM9|K_$*!5ecqix?3A`g9oqWMLE;Y5TYh1)-)A3|{T(|p;%Ysjl_`#cGF?Cg* zf-?0a5(EY&lmr21h91p-edI&}g9lKRa)m>yWB?}0m-nskSX!y z-~tMGiT)VB#+83Y!q)OqOK~q>9mFRYF0`j+4f%6c#0mtuKhQOd_2*SgTWr|cpdcZI z%q8*M0D)F4)`I@L8dw32YnvMK^5!2(M%RJ^yYcN`5~fiP6H-^9B-4Dk`}>B0jp?=5 zef|=?5F=<}H2dx2%e}wnL>Q|~yps5PP_4j52m5|ip3A+fQNc_8^O(`xB|`%m;SKdE ztz3KxCtHegfjx?>dZpIC!UYt}3H|e|nzNOLxJ-`|&JQ=vM@To9v@7eg$)he8 zLBIttz1Q-*VyG|AnGepXB}5$m_nZRYoHj=9@BKM-qYXI9k1m<{zeiC5M@gZ|BfVsc z9@wqhj;hGt-I9adF38#Zr8^~{`-Hd#(O#UQJehGoGFanKM%I$ zr69*9$l+hglvmKibs>byN4Kx6mCBXkT#^QAM{y_jn%0Q5?R+lPrO3eEGa;fR1h~|0 zUFuK;A|T&Zet!FIW=V-E4rStf-I3{fVIv~4AWz8p`g)n=CY`ml16i8oT{tbEtfM8c5R>_ZIivom74E(4dxhi$ z>C#Yf^tsSu4V{<*AZfZReTNLH{F$wZzHL{7N(i>j?+xp7S09lN2bbrV$sUMk!F(!-!QXY z3+(I>62@##dVH5&xXEWUsq5JH^~=Nb4nM5LCxqLg z;+qGqD|s3Gas`HU%E}U_YYxqR(^xGX_EnQ)HJTe(2j_$1mHWt!gpTG6)I;Sr0_qNj zKb5j%ey63Sm6rL@8)oY0+6D6 zQq12EHm9bpY$E-B%rBr;Zwg@d)#huCj*ThNrF73N&viV*fE=x7gtrvoz>jHwr z%eO>CX14TP941l?)O$Ys5Xm`fB2Hu6ajaILJl{KiNNngch^*dUd6sPG+iTg$eUw3W z9>A2lO7y(DK_W-r@i>osIDi&!MWU+w6*x9Wqsab=!}%MLBg=H%Yc;HAU%Dxl(T6`I zCL)!3iluh!+>2fg(H%XN61OrEnh-`RiyV^kI?uhh@8?==kke~=&ttU|>C+W&QGNPL zO5*1Y#WVx&w&obWEX#DynY<-AKD5WC(T-$w0lNha8?Xdu;2REqOo{}2GQ@1?u2FRe zfV&YNd7zK!JqD`|$W>0FeOFVFe21$dzpz5w(vSgbzs@6G*SM|LsR6?zBqojQN#xQk z({T8G*0msB%S8Q1^EUI100TxpUOqPMBHlJuw$Kh2f(%Ltm4L(eq1J^i{n(K-ei%Gj z2FUphn}gfP{fj445AH7#Jjb!{7_D*1sXr+;-_A##4;tPUn%tE+TvqWnD~hC- za(KgMFy;1h%nx0Ml=S)aoY(J2W2C}1Q2|}-LO&uj`N~Ka-RVW^HFvdlx~SNsI}sn^ zBhE8;E4mJ1Af8xfPxJED&dN*;0apV%@72v8K|qAwBory#=i)vVX!+hN`IxOAP(ZNAEDR|PRa&g_lZOS#cmNHi=XKZjdsl<*9sQL!} zchjDUO2XzC^HI}-9eDqG>9H>Jb~hKm2!JU@wDxO`*7fblzW;!SRY0?XICc1?J3PZ9 z89pt)ZF%YR%K)0`5f#C{bS~2w0P0BTJ6}Qx_$mYs%STD6VyPoP?1VS2QwZJpX_zKx zoU*klfLM5PPO=9)cOHqx|Ht=|Ona;ee!5FHbaQfZc#p^q_XhX)xVr$1&M*70Zqvan zJ$#Z>_SfsMKvM9cFG(M1W=nb`_3>}cOiZ_-BFd?bFzvtuCDo{$FWvw{>IUk!kB*Ca z8439XJ_vW|*|Edbq2+L*FHBifYW#UC5CH=?=%(E#-@G!MAvnaY5`BM8(Z~4>5EEL= zkeTw?hb)(n%1jP`APNioOK=Mp1N2xER)26K2qn%Z9(g4nfTN&YAkxb7c&Pg>J984Mmy+tO-z5s&*30~I__^bp#_N={b!oarTIrte z+S+r3iOJh5tTgPW#}w^>SqxldjKt8pEZ-+59X6&)#+D0L#mOPduq~G=*MZ>{b<9)T z0&AalIbN~49zmt1EgjWQ$UECbT)Ja{z1c{IH}$PoP2CPp*SAwE^s=&U}lDh;3uZ0+A8|NyHBx+ZyVy$ zhIlZCOdH}&l9p%#;1H4e(`aN~CvQXb`{nz`f=Js6YPfZ!3`yki9-4o9aRDrM_q>)159rdW_WSmPR(qu!SJ}`@esO8cXtNLADxt_t z&bFd1O(}p&)|dlbVRK1=I2-dFNJ_#j(XON?^%vqy~c9=k{LZ0%!rG<`Ii~MQeMFGzsvxk-GA$X|L3tJ z+y}yE*)8~-!>FFy=eZgg1m?+!h?;OwYw4}^Bzp2j95&=FEtSg7VQ{N8AXUdZ8Y z)m}#;YTP~<8yIu_z_*@tW1*urr^5sH8&gwL$rcK&mkOE97%(APfY60DM6AJxedwh3 z4&n0B(hGfK{V}6neh}A?aDrV`kA{yjOeY8Kf7RD>|JJ1vy1HE0GH-$f`By?9@Er2X zdwqBCv?>P*Jt2da9N$)KfIUONjf&GIyVoi~;#cK7Et> zr!Ak&t3YN*b9dU}H&LN?y>;LB1g(4g4!09!r!ImyaUfY+pC|<68u>6$_I5pDoqGv2 zIC~uWf^8v$tKMUsqJS!@z^a*rG z@v%gDZ}4aoAR0x3KF7xPtrp}{Q2bGy_E4=>lSjn<$pNS0$zlgMifYOb&jKL8wPYI03TZ zxCuEO#7~WjSayV!Tcj|K+7?Tkz|JI=2-uq{m-g>R^XGNVC0R}9r7eioR599>B%2y&cLO#r4^NL$TE_5Fx`QX0bHcf+|V%0b3zU%xj z@ue9e01`}+4}({d#xX3R$m z0hJ}e0T9r{>O=IvBP^fF;M%^cyIexZJ9j_J3S1aQB$&2gdqI1F+Bi6+{^)LRG03X3 zzdD_|o8c~K+!&Zi6yvbL(`X*ESQLL@!p-2ijqHPcF`D_Jy3Kej z;v2UzP)m^O!cLhYCtaykttj+K#iz=Rgw3AwBHf{p5tcD(8uK3?hvwRH&g=#ay$(NE zOr={)r5vEr^K~u^u{gzx^%Tz(iR7Ec=*H_g8La&|wDwQE<>f>1`u6trvS+CL7W$cT zHz(?}`2(Y<1=KD=79L!If~>pB!e_&+m5`jp;<$~WzP`ssVjh)W*IMv_nQpWN1TYGZ zMdm_Xhy7N1H-+5%&kh4x`+L}5jk~*aCiSYRsXc}qbxEDXJWTOSdgHdR%=5 z>#@e8X6TojjI44%iJua)T0nD3@0@#~g+nF#7p=qwYHHq@6S{o_P(J$=4NlZ2; zToJAKw8p!6#C*h)TU+npm`Z-4-*xn{{WMCh&~os?7_hQiu&@jj| zy1#$WW&KAe-Q&Jms=gXA8`bmQEs`^wFO5Vtm5b45IE%xES0)RoN=~P!RuaeM@0b{? zaMGyVBvB4x%F!-bYydd|%c55qf_rzYZ5$FRY=_$D>3wzF*GJ8t9tkzT{Vgp>J zPMzDDGs4E-WH&TO)1CLn@l^Cpl@{xiK1laIN_H6A4b$sY`9b|XBX!&r>v0n+=GeL4 zTmLpc1ANvHO?Rfm*BY=F8WF<*%^oUIL9-1LE}G->>K0M)EmRImm4-vs#!~Zr%;xHT z;kyahV?+{^?#1Z0Ehz(3ZaS#)@-GHgs8AkqUNxUY7pE$4d!8Y5uvbh%H(RCbm@g{xHW>xiI`qTOf1~IRvcEIB^zN*BKlkZT@R@_| zrL(f%3Ji<@$#5F|+o7xPrTuK|KN##6qEn2#cHi1?2UyDm>wai544rc`tPJ*XO-s6< z;%6p+uk^#8S2y%ZpMKD;gH-zni>?)^?|RdIWUj8eTYr&TZ3AvR&V@lU1R_swWbM5| zUGOfrD%F0MyS`3&N&waHX|agwB9Vv@)Br4z-*L&0TbP6k2jV581|%MbUU83|Bj`e+ zCUYgc{7_3*dRMnVumoffF$KX3*cd$6u#S~j-KsTmy{UM6`!Ozi}C z2p#VG&r>9}<;L8a6FN9Gn)J3UbexaofxyhbaeF$WQ0gS#={#JWhP(`i#<=VEr@xR4 za0#D_AFc%WD{LHYB3sv`>iDoD8sa9o&qYN}KdCc>QA!+89iC7%*d?f>_+^dn&+0Rb zP5K=eCX3jfr)@IOs3qk&(TN=op~Y_%H`J1JYL|!vtIcCR^v@s{ewJXkiAVN}04)~(fowl9AFxHpWE8n;BM0Sc8ZD}Os zL}!?f#5nsEbz4HH6aYU;Jf~plaOzuEG=Ht&2yB$vs16aV?m}uF=D0el?o<@}%SpO* zCof2Iay9Ih)t|SrY#-4$w&yJP>a}--wsUQu^oi2BoAQiuPHabENg!9gSY%rb+epaZFytG{$46(sgj(PDAa`RIakfv%Y3Ees?*=-x!0H6M#DX1;B2`@yvz;n!=RQ_JH=MVgwQ{%!Ak(@<7Y(k1 z1kuS5hfuQlK@Z^+T9?ju$)x72*2{S%kGUg+@I0ZvTe!u}|7S)3UnG^$iHL5)35BKE zO@F`f6Yqwpvwr<~Ean?r=->0jU3Xg5RV0~i$-j#3;6#tsY@UTXZ;Y$7RYa=mS`Q_% z2&4$kLgSR`_o-KerK*;!+E|caXa>61`S?9e>R=H1Dn32Yi`?i(D7y*^`h5`&)9y7anV@7 z?_ip)N>q239e?KPdrU2?SCeU+y{`BmdTyjORh?a0X{GC#cLI2k3jam{k>akN6dG^+S0 z>B`K>qvIuKoW%I#`Jis~eg1$`2Eng~&RK4D?i;I9eP!oa?VjuNH-hpK7xJ6VZ7c_5 zrs_7%kt8`x1^3`@0H}7Vq^a1yKh2-hlGpz&B6aRmp8l4~`Qga@ZqYU0=^)e2ZI1Ij z)59Od0k#WKV(#~bj`7ML7Hd$QZMB4&eJiDZJ;HpuK|OuH)vfPQkiNfb>XOLz*(pI< zrf=5C?tVr`Z+|4;*j`lk>S|Rtwyn2={^FEd!<#K@ORJk`WYy++6OQZN59m&5`+0ae&&Sfur-SOsd1XiOgCZ? z^Eb1*cqfTM3$-%>c5g8!yYX2(4A=N6Hg$H-%qUoqsekwY)w5O<6@)tcb{JE@B)V9` zm;B&>P-#`pqnB#($KYT)&vB$&a08A=F_Q!#2sKoEPu}r*IS=(*qu1GzkMl$B^>Se^ zKiums-d-)Z?`?n_fohhe}6h5FFQ0qC{p;F>W$`r%6n5)3@4+@b| z?5ZPt-jXv9w(@kVv|MC++cJiyW{ZmRqptd)Tw+Ee{isUT!>AoRdgO`eC-?ZPTZ#NS zm$pi?k*ngI`->ivv@sMY z;tTNmR>DPd>tA*GZYS?M?|dg9OD1X61fghAC3{Q!>qbb<(EhI|KUw}4;#DQ9 zGpru+v`2%XpO?s|8V>i)UwcfBScN!m)>N(5S7i6UUA6Ad7L~TBT#_?#>rMkl3b?PMG+9_q}}Dl)86cD;&F;d_+Y!o^y*7j32!6I(2?Wr-z{?9 zI`@X?em06>IawMWiY?rd{w1R0?QKfWU(Jbg-%|bWqzc+61e_n+>y~daan~KJ38H%P ziw?6ysEVi}BWQ#M4ekuOJ@?g~^q6#u5|J-jOx}B3!6JVnz2v)oz=^uo@0gZOIpopv zyIhj_6GE?OQRO}+M!TYX^fkuC@5Y!UhR%9!a|u&@c54L{poa~i^hUOQSnZl3>Gu)u#HP?XLDW8X2(n})owd(I<2kyjAL;Zli#i584r{PQLYiJ`3@k z&RIuaJ7xp1LfR_rBT(L}JXQ@G%Q5L*j5fvT%RA=D8FlmWip*Emys?PV1`E6<$Vs<5 zUh!C=4X&(-@~;!!wq3R2KG{8_Y6IxqY*1${BG4QX2J!iR-oQAM}cZ)HJ5b`jCSkr(x%zP=mGfAE|UjAVExD_P|JA1vrg3NKkyRCEDpdw?Om zZUW>LZm|IWlgZn@NZfOAbUpc#$(wr)5_w!H$-#fJRjpJ&7aKnDw}f3}tD>oZXZW8l z=%hGu@vw|5Xt_V9EvfgNX{_D&Cj}!<6YEZIt&4>P3BH?F)wt!RZbD4Iy-HZ_&u)*t z8Eo3#x5wO-PEnptaS;u5L3W4j9cWh)1cEH7IAejJyRoVGY*UZBdAt8~nW((ThQWp} zGDj8Wx!Ti^4Q}x!iLLC+iw!=-kom=89K(MO<*!DU?8=F(m3)y6T?eTm49qc*%p9A% zJHV9>5k1*ZRuXe>1>6*t*`<-&Cv2-5`xD97QCxQ7C`}9jF^DsTqdTwJA9SoOJ)Q7r zooo?!r|C9&5mCl6@)m>JLF+&O|J=ox7YSPuz^IJQC9`WK8p>&1^V^gga8FjsF#dN9I?z$Ubeii2I*@fro%4+!d5=dz$b`)%xP+ zu_9ox=~9r}-?{dB?Xo%rQwyZ?i9UL5AJMpL-Q6?3f8JN9j~X8Xv9#4nWje?lA{y_3 zpkA;N->p3*5XTmUsf6s0^s{!&O~(VWRbm*JKV$EBvtuRER=ZjMo1z=ZmL|C6H($Zz z;=MM=k4^En>I3q=J_{jp7aRhd6u9UHN_qP7vc)I521u5RjPsu+8AKyBh@SSyEJ#m>WZmMTWHT)5$2{%4@+hOUy5pt=Fn zk}!t?FX|w)L578OeIpTmckh5u%H$ok?tFrULq7F;Df3&=k%-Wp=WotE`eO(dCCAkS z->g$w6%r5-n5&K$FHaS#;#{S`)}z9g#|ZlUr$xn9JABREdsVdOH9Z6`V?#?_-JbDZ zwxJhC>J&H2+Q+mQ_p!{Wcj0hD{GlGYmV=NNK$2H?*XI;?1J3Fjk{(xfr3xXn3JlB# z(FaDT`lFS69_v2cnBw&&bk4G`p6u^>#>H={zRt?;@4^Ql&CSg*N7|a2_ZH&Pk`2Uo zVn10mHnxiM0r|-QqP<^%CvdmX<)1Rv!v>JkyX~_0CQa>n)s%lCySGE>h-H^;zM100 z!s~tJiy%t{uztUQ1uv)(S}C+4ZQa$@V5_4$4GfLBNRez zHGw+MQ3kCLYRIW*S3`b#*Q3F~!S@HZLB8G$37F*P@<0|8EvaA8(A0U4QopBS_q?+# zy2M>C#sl4auoW4I0$leQ3rV>-o!6KmV5nVTo9*3j0^k)>XF&5y&6xb30#7C^x(k_Q zZ(%|(39cr*er-hMM0^o#*Z)KZeBI2&quj zoJWsEl-|i4Dkg{*mxFA#F%ZRxZJaD`m?uYOli$}Dk76>=x7(3ED>Q-yimzX-U+61% zB{n3J8fK=SSvBe7O8Y6X2(7!gXy41)dCM3Lo}LM2g}{EZPEW==e0w#kBm(mA54jIC z-*f`A0RM@aIps(n2SRBTl#W)+38ixlSCxb$j2>H2@PXDUyQjrWzuW;#2PidY;Sj&D9~clL zQ1tk3Uh;plG4rB#DyK01oe^+K5`U_bpD96g5_Oja7*uhp%$EOo=`83heepghxf!Dx zTS?!U89#Yaymv#)-M4CQjE3gJljBN%No)+ zV@LBHMjMr#pg(Asqfxc~vREsJ@R{!FQo`FA^(#k7 zp?$FxHSjF3L?CVk>vHy_TMrRFGaMXZvkN(2_I3wnw@Wbp-2~bg5afvhR`P629Rl&c z=z55~jfCEXlN1jrJ4!$! zy+68K$c!h?3uV7(OC9CbAOP6N&UbPB{uBKwLD_|5X^fyPye*QXt%~ac_ZrEA9xryg zn5L!nE*UO)r+!*&@I6$_+Po-Z(E;J|9DSK`QO24StX!mB@a`}OK1$$7HTx3chO)Py z1zl6XIaHNA$|ZyN<3CJxe*HR8+m$T~gqIdwN16Nsj`2rFIJ%|InpNx6(~0a}4P&B| zz(FcwZcsQ{)~T{VeM!Hkd%LO@gBtllPX?8G0?vV44@Uwv0UhsHX9=pDOXA=fs}|fi z?XpHc_~Ru$P@hG}ybRl1NiHtB6YZbgndakOJpVc&;eoyVkj!JPA_M!rt5k`t-3u1h z6I~()M!h;=fwv)e#V?EV@+keh1Y(dDu@_2=*j+SVt3Hh~{gGZvQ+?d-xbdcZ9>h;d zWa||}bpFtDx?Su9V|`a2#``G)7Tbz1Ssbzq_7txT&%OkFgWkPOA^{Cpuh3>RJODiq zFW+;p&#f6kgRcY9PtS-b(uCODoc<6<^hHHv`%avB{mzPCypZGMNh`M7k*_-)QGX)k z7zs=ZIF*vK*O3S9Ccj|>po|5~M^%|_?p4SnKIp%oXe()W z+cf^{Ug#Y9SC`lJ)~zVH%H@ZKetwMKZJmauKCO17RW}!~HHksoFAA!5R5s58bN)E9 zs^rvutLQJ?zUgwJx z(sdlISEzKHk`kZN_WBa4{oun+Ul`lWaqMFnh&v3R-FLLP*pLPSt75;?qY5?t65-{{ zqIhTe+1m1&u#B3+$p=>h5eq;UItkk_gTBM+7q7G=3Ri_Fx%Ev?u0by_UI{XAs&s7X z-T(=v3KWN!LxnB3?s;N7VS@Ar^9_bgu&+E|U;9Gd>cKo&qODauR_{7_-1d}jGy*OH zWiQi3vL)M?pShtGGQDx(pVNS;78`r6cXK){a7cQh@M_aUJmA4Ga7CB+f*ce5v{ql_ zY26<(0i9mAA+`wyWmtb)x2jmEhxSts=o$zp#`-A-pkPmB6ay3OWaEE2SY$x0RbEV$ z04h$}>aOa+ru1hka8IC?TlNS-uoZYN*h>1JtsqMNuf0!SiP4kLr$j3bX=;QUzUhWF zyOX~Zd%7mrv`@)!+^GUR05Q}X6EZhe-cyfHoL&HSN2q6Qs!-(IQv@7RiM?k9MOFEB zbT2Gvc7hHbO6XFlC1x@M$(BsxLS|8mV$VdB7PAVJ3^e1A)5Jh9SD|*qE1cK<5Fls` zoV46hNde}`KmyjFWB+>_1X6#xoWSi$aGU>Y<` z7YV3k0;Y!ieHqa9Y$TQsygc_n)q@ANQ3TzD{RW2dpe5db6cAIslw)uc54zlN7 zfGKLI2Mljq@?rAA749(#0m7EBU+-nBYBO!M&Z%4Omr+z@?otox;r9?A>cx8=k8I51CU5;N5yqeBhm7cHqp zwcETSpRD7=x0hyr#lAM{!0^(-k&} zLzV%(`&~@ApyK2(-rQB`aqjcF1)WdKljTB1(&r(EhSH}qikxvD6p`C&)wAZZPEpLD zV=b0^+H0*%BnBT7c_AwO*|Z$!qh^URU|J5BT71ykhW$&gBQohCI(Nq32_(tGy+B~o zrXNFwse)ZbJFsVIE5VGKG0c&tKUVKiikY{=b*(b?{=<*=OqbmssW(9ECsFZc_B|6? zm|LOf8<#?^aGTw)4tGE(kNT-BTgQp0jM8T7r?0hgsK@QCr#x{LPG{N}tLV^kZ$KZ; zT-i+u2#k?URn36msD0r*%0U8TXF7e9Y0@%EM#Qb1Htie}L8M|=#N;Le0-^3w{r;;O zj7VsRww40g|G5@z5zUql!M5nL^O`tHeUWy%F}NpXcGEiWJc%<5_&Ix%-W_(9dqf5^G3+MNZ zD=cHeY3?g+3sozCa1&)u`WKAymlo3&y*Wx++CSg5d~NC&70=EPh`4A|4|zrb`^|hY zYPF=y9_5Z=H3~ldWUX$lM<2Qg1|8iQw41r%!*H|m*7w^WF)E1%Gt)(c&hCBu-K`w+ z^eH>lr2G@_^oi3hZ`ZOVu^#hPCV}4hRp0*odz|U3VV`*+Pk?SbG1iFyRnXuE9i6CN zdx8y#DBa-GeigTgdxE){MG|g=YrwZh|I@KQU4zhhS~nI>JabO~>eeIWZkB`#q)*(+ zjHuTrs04ZdhvKbB=c-$9UNiw3Sjk1+`~=|;OO@LUD_R_N(@D=$49x6i#thm8I=nnq z$_&(!WW0`#Y@p7k=&(mSCpT?7|B|zrj=DycEgOtAbCLA)pr;K zAiAWjiQsNedrR2e?F-m$N!a}}L>@jAEG8`>o*`#L{ZA{-LNcQ0V%BuOXp!*(p#SCV zN+z)PoYA&TX_@IqmVpu^_vPRw#{Y>B=5vsOPkp3&F<7qYyuR-A6y<~C20BO^$?U#y zVX8jus#$5-87Ai!PbDppLj>0;o0|tq1kBmCJtF_$x}d=#ItRBN)8Og~H;PUOsGnJW zdvIkX-9i~O$B~eNejHMK3ldmp;1H-Xr60AXqTyIX)Ymbs4EIw80?sE}owNC%dk?Wk z=!534$%vYnGbmU<{6hmVBJMb#H|picUFF%OH=G|S5to*r$-r+%T!c}6XlxhI&DYp5 zJvlPSG%6F7zF&V>$sCn>D_1_BHwxhntRe=_eZrSKa_G2;RTC%pD{Y^ha-ykWu z3ts}PtC}%I+$JG`h|xo!&iCQD7u_pW`DZ-$jmw~tz z`wl%OJ@Ay{cq@|pbh-@DZ-H{jAl&6a$b|;4P7EgG7#&{ZISy1XS~B_}{@8!y$xgUB z8pxB(WS|CpkSxRqh@LmYlgeA5C+D&k5zYoNx_DJ9CHyW)>wO?kr1WC9Na%u=rj1lp zqn(@aR#@Unu^>UfjbWMOs6wBT=H4)3`I4q>X_@n$Y&?{RBhh4@qDdn~4e;tV0J#}t zRAHpBV#MKh{Oh2#YEXd_LY*5Vv^_FpujEM|BVjTjghuvdiAH=%KVmBi}MPtYka zsw6!-AtT#MhHIZLl^%?&*~!8^pzZHM`ifEe_<0{c^5Y(qi*2mz!3A=sTxWgriXEc? z^cJ+nCpct&r_HX#U>t+dV_KEVlZy|cktObv*SDg0M~0Ns8FvryFIOP@cw2j84T5j)feyaRFH0M9 z`vVi^>&Yq^f|`O3<7Qe)8InIHu6kvFJPp}!XhI_S@GaiXi$qP(#NSce+^i)a0}<60 z0Q_H8v8TGs>0oR2M7NylMG~SI@i}~Ptx!||c`{`- zRhO2o9xVRN&D1-h{mwOa^j8F#QS^9#$=AS)+#9c7A_lPs3zlm?8WId<6ibv$H$8LH zDSfOtmnEWPP?g-6P7(oyLD^Mx)YQBU8{INJp(L$O5&HV6EX}79$L;a?a$GNIr2Gp& z5aXU7w7=rmaHyrb6$+m1tqwh)mDvB=WsEkh`rBo^)H7*g!xTm{UUBVU(edcm9rf6V zt0=rdN4bAV^(^*w&ni1edFuczsHzXjrGpp|SUJ)2Jl3c>{&t`l@~6XiNSmw@1XFSV z!-i7_e}qRX1x1JE&s6eXlV9 zb3=R)&2t-WT!HAB`rv{^ou3-seluD%Fr)4^BWRTTlX>_F@NH;LVJ^$%zj(k?;Dz14 z%xfY%fl2yl&1UoRPwoS87tr%A1Nds-;$NV7f4;jKtx?yku#^X%UOk!#MY2MCjV=-{ z;m867R$K6eBAcLntv_h&w|i7@nft-O)W@!tjws}iL6NkUHFhSKD}{wqadkSkT@AfR zgnT#s|8th)|C?OUfAMYqFH=}SPhXnEr&Vf2dfyBLnN5rCH}?4Y^`0jC_#YUdpldyl z?*F+pxeafZ-XOu?v$*o}M|47xq3M+vi^Kidrt(lV@;mG_j53xFW17@$&9{!3AM|cv zy+=MeAK+~(AE5OaHR~Dl_^^!3|FGOlQRdg?48GWI z{}~xINf$l6<8t*x#O%z6zOAoFvty|QY4EM_zd(^Tp79qfw4{weQFy*g}#PN!D)st7Xro@lns#b;Zk z0M_V`55lLz5I?8Y@*sp6?Zr|~*}ew9`B6FZ?45XP7&}QT2atb<3TAoJ7{o{n`Rrh} z=>eVBK`~dWl$7_|HE$o6aaUVum)>Pj;2qa(2#de^?%HBa-1T^b$6U}pN2lLE)U z@*Z!NJ8R5o>$Ga$(daAG0miPRWk1t#=cdk25mjy*pFg#1Jh7}pwFqn^yu^lXD+0fb zT<_|&c$8^&B8^HMEJj3DFCLeDxxQf(u()~4T9D&+oSpv?%VA@mJj1FH%Gt=w$dc&r zh=O-}AkJ()5zRGr_N%zH@>akh*0Q#^suAj_PVIjX_tsHSeSh09;DCdOG#Io<2!hg` zBGMqzrBc!{bYmeQ-7Ou`-AFgmJ#=>r9nT*8{^Gvh_5S%j?^?51Yt9_@IcLXbf8x5X z!=2d-8Ns~XQ&&G<(0w&P82G^WQ*qv(Q{%v?C)gfWu{B4z6wxdgE;EzNp%$lAtfF4KRVG$L$gL;o6&qct7!DoV!M+k>ixj!B=X^A0)k%^>p!q*Y zw92~@w4dA2|MTVZ;&h9&ew!}`Z6?LVaF>27K|Q6(Mf`*BbGkf8MQkRh@B{Qf;v~9AvkB>;qJ!Op%zV|zG2xVESk;NszBzX zGtFjKRgf;;-2BaPhIq0res(=9*T4D<4OUlYy!42c4|`o=>e7v8HM!WO=W4gw;`w93 z?N+>uIQoaXNMQQEqE4?ch&_+kP@0@2$9UFBLvV6_LMTS>l~|{Yyavn1$y$RP$z zSB-YCx2;g``rR9eMrNmWIZP2{S1NQGFu0J%cCd4C^!^|(;|>y=)Rvq9nU|el8=bvc zCz^@y>UBjp2vV?Qspq!>$Kj7Q$mKcUMBwhqyc^ZLmSbS4joRMQ6^OD*9B>nG!;Z5H zWMLQhATYBf=X}LGF6lB##1;_NQSLTb*C5lYuU7xRWg zE{tLluN~d1`8sl`QPJiu6hir@#>_4;jhK+ob`pfoqt_P>(<2BidaK^PNOE4eR*x%D zHm2({M7i{7$>X?#;gutq3AaiK_3hSvm|TRpbVP@rkz~PF6QX_GcT#XyXw7lZPZyEM6^*s-i}Ub_Kw$akr#D*B?c6P! zuLFeTprF1T_wm)e##gAdPMu$Nw3cQp$K!K0_>MMTkn|YXT*SLfHv3fdhOd9cEMEIK zO{S@1lu^RBF`ctHEmLBF-uu<|Y+r9;J8nkT<+3l{yK(dIvCIBT$`Uk8mrV|i;bfM4 z+WjsW{QBJ!@3q8Z|fb#M|mr=$!w)jKpYW+`D5rd{qy^)_1M5a@pJ>7qn znUghfba(yYI(R$-wSHS>XH5Kr3rztb zihu5_c$jF?^(?EgY0-)ZBa#}E2mG3n)=|#KrtdPLXl_uefLa_Zlyp-l+E)e!Gyhqi^-YCoF%?{iE;ju0O@*ml z73@cKW&CY7WwfAB@GNm=D)(;qlaxq!{^`U%DH6%=DJ%zqYFLpv5B*<|#Q!%J{J&4k zN~&MsLGr8ASf1N7(?3wtnlcq=3m}^@zdUMv1*nU;e=8dQ$q&mWfq2g3UhI(R)k3T6 zYMJ|KQDpVAV&Kr)V?8IdbU0VwLsmV=9bqt~#u^UnTErI_8sUb2*C5*y8Z<5IsL063 ztg*~YCmCbDfht$y6A<{Sx+rRb1mB+oN9nHKiqkbKfm%cbznSoV#6Wg+Z^%Pc*GFNV zp1Q!V2S8d9FI;Hz24D%{h%6|IL*{`;vd~cQ(90EXb=)+g9H3SDte3OFpsQ*|EQnG{ zdLDBC}Ytc%{cMBnHtH(4t6pGHrW-8A42PD{^|!vxF(HN9!#mN z7_vK)RKaPtDp_=|LRR@e^zj8rUrH!TPDch(G*LNg8E*g?&I*t{C!#bE~ z2hp&PaAVH={}Pt@8IX}OOH&zA5~DB0nm~H=1ZL4x-MHplA~_DamCceSXewRB){KbfUd7_?ER+>k<_%S z6u{r9|6r%aS$7FwAcSm0;sq1qy_*ixS~ww}h?3gKe+i{M4kAJ&d*wh^izYa1Y_rwe z&Mel|_4ojYEqJI6O4=qc z2tl~tM^J2Sjw_ld2)%O*H#!Z*0~`{%r0e=jgFK3y#>V~M|x z%A^HmYBmQns|vs9)VgJ+5UQ$6e}>qg`}(!;T61-<7vt`I+@U!|W^i6m2|$QQDg{4} zM3>`3=&uB)53}l9jZPoJ-HlSF?2c<~0B(1&m_(cM*6n-j-t|rg#FfX9^${Z@)BBgF zGaMVde0&C)dMUp&5Hb9xLy0|Aj4bs-o0Ef^ng?~GFrqH-SfEx`s7)YWOveVZMY3(UjhlCujVgLX^^BA_WJI!}wP){Z} z?i)M3Uy}|t0BauwwI0|7cdXF*VYJ5*0sccf5QcK(@wPealShuau5#sd zVP?48)!9In?H@|C>fl*GX+A+hA(SF(a!Ed#z>U{4N!r$=Z`JT|aB;+r&(G&!tw>4V zu8ftz4P@eG6Ym`?o_eQSzH?Dyp?f*;P<`WY$ZleyV7TVsHh`AwD*cU}IhXR)531-8 z|Aw&@)jI&8m()LjZih|F+4kit@PblCTpSzc3Fo}pvp-@o8poo%4iebw6xU-CQ{w%M zE7NO;(V1D&YQNvr2(+^6bJ5F?b10Al>M#&{3Tb5cvv}Bvm^wb$Tj&no19zK|SIm9DTQ1EG?gE~ZMJC8#xihTYrhm266Q|o?~yW6%K z=H=1{b&6;XWT2#pM4MpVs#X=SD<4=~kxD(bsMd9sDD}wSsC%xQci!Q5uB!ijyKd$> zFb*~nZL|9Gw)FMYWltac9``JY(!S+(wJvkz30rXNAmHM+FL*e!rmLLs9T73AbSTLS z4VuRaDl(pBY1}%4g~nP4GpRj!cV5pj#8Me3jZ}r|T?`4igBqNTcbdX{`I$HCq{%5N_DIFFts zQf1|$`e-&97n&pNHoaV+67QTr*??{Grhz((3(aBXM1-J0LUpVDzAUV6b4rqS%v532 z{NW-+{qX{vFh-x**}nIEti1MTJKJ6RVn7pe7+tGQAB{YkLbQMc0*DpLQM_s` zDaxE_l73$#+*XOjnr9ZWd?Spwk@DmW@k z`?Nn-^Oe8>F~|Z-Ord`E;$U%jiKVl2RBP=gp*qs;t^rJ`{7itrAgzuVVb>#m!~;N;B6sPI20=Vf9HD z9?agy-UPBf%fb144%=Z1LRKFd#ZI>!>YgNCG`GdEKt9K1w3fE_2%Q99)O%9|M@C#t z^S`6z4RqPA5=)m)e41D{`{DG`tvH@y} zJgKuCTdww8`|W}|G?<%-F_Q0wU|i-bdiW6MM| z2Z>7Zwc2^^ij`;CT|F+NwL8Z`s)CBO;{kvS4v1RbDe;+U@@NJI267FI?3F?Vvm&Ph zs&&k4Ms@;Oxyi|*_xP>+$L+g3F4f!-8#6Jd3jy){2=_)NB$J5k+FMAFhArSSsaud? zFMeN6Xp6A8Pw1+$nPH=;$nD&|*tNrm#h3qq90fV-_vs3+z_wp}0s?n@iGRcGc>A)? z@A`tIp2=YbmOpNpePAG#5xDI#)~y$Koj>Jx@NC)dHQnS!H2ZTHm^X)!Y13{mHJp=hoA2<{>P)9JQ7`7uPK+lzNN~q+D#)!>WKbn zyrqX2bN%L<;$ONLtkF;7-{lOVt@t%p@6^#RS2(N#bEI9c2ym_%pQSxs)Pj)gYuT<*y#iFd4J9EHnE$;$E>AK{vfB?%*`R^0qP&4>UzLj8yKsY z_P@UxbgF4OO53g+m*77zisI{;o61f5^zbV4|orn3FPfG4FN#OMjGTJklDo0 zZ=O1FoL!iUmvIumUeT_6s!-L@raDu&AAdvrFwLtH&8wPceNd8b^lM`@cc*G~r-`m7 zA|t_7#{FO;49Ep1#Tctw*)W`B^K3x*#4^d=8}BCYfM;9)m~%Y}Tf&M{+t%|n*z z_OsHBk?7MwIRW*$!=!?(7?jZCyNQvj^6oef5!fNR)I`O{rc*-*tU2Y-w?p577vHdVTk zC$@pZbdrLkBS+;-PGjwpyPqh++_ergi}a0U$}D&tnubSRMXuIdUwpLO3F=Rgh^``c zcRYUY$n^~Di9jgnV(OX0gR>P29TnE;#A;)*&dyGmoiQ?t9d#Brx$`8EC%sm# zN{iGbtL)AOE{gr06_Y80RR=LfX;=C^3$W>lNs4tXtMb9hsu?nCtFA?XdZeD6dx=LQ z?0>Q!`t9qx1DGpn5k?knvJWZG?}VHYRA%aSAi|aPW0zO#6h^!GczItYQUJzm_CJn+ zsp7YJBsmoyE#CY$dMIU=+^26e$bD!8a^JV_p`8Wc(5Qkd@P?D~fs3mypoYD^#TN(b z>h%Nh;yeg7DQ0LR%Vr2-OOD5!n_fuuQf|Lv3W z|3P@TGy4Bdc(6(MQJ1CZG!Z&Fn>SdDmAFy%;|8Fw0$@SN>JS=Oxwig#V5s1bJ zLC4CY`lX)ICH=nqn#R)k-kXe;*Q^h@UymVmM~;Y--PMWy%sDuiOcaW#)R(nBNS>iD zvV0AnZsh|TE)c@J!3vwN*BSO~B#_?v7x|oI6E22<6A-5~8pF=P(Gur?Q}!(^z_b2e zLw)_lOQ6#1^;h8&bbD^E3nPcA2QbRdE|nhyY4L8JT^e#j&(?TDl8uMvm5rAos?fEV zleyB<$9>5T$Vn2iJN(Y{SEa-GJ{ac-#vy(2VbHNB3cBUvd3O{a>4Kg+ZqfFz0>LbfZA;Pz!8vle1cBi3^H7GF zDI{GU=Du8Z9ceMWz67@@GnP;)M*w{fz(oNiHDqB@X#~Qqwt@ZeEXICQIzXoN6fW#Fz4+Sk66zAEvXm0L`2HiB74)3+tBtRA+p^u)mKP_j6X%16fGCcCKh499) zEMC;d254~~&qWl?nUxEhYJ+I{b0>!Mwfk4rq)hrhRSMilmeEH`fJmy=&@Ug<9Cb>+ zz+5Qcb0r|VGDzLH@`Q)$#!L{Q{UoMmW)2vt z&(3CLP2B8WobU-w6~Be?3JLfHkb?WZ|B}}7C*#urtLxoo>S#Uz)$NQDAsU3w4?pH# zEyr4hqkD|a6zkTz=MGu-YjM#LBclL7$1x*X|Kcf+c2*3=Npc>;;aThDY3x;9ZIMaE zYKvVzNtf|MvQFKiMW=WJ;Es18(_%>47*OxP-hTYb-}mC;nc~%i(hNvyCF`33D5W%* zf)VVHVPVQiv|0o_Wh1H9_Ogdp$kI>cJvr(*XyB+EkK<*7D(Z2bEt?^!Wv6=GropGm z{CRz(S-{*O+OgbQ1m2nm*5QRVufSoF=9hiEb{SAtH&||i->d9m{W z15i|PmURU_Fr1(q zbHSPdu%vGxCpD?bM6ty6YN2mOW+Q!7%qDD+iL9|?wVPlAEXuMwR?_O4n%|tMf(&k8 z`uIo@v850OAkbSw2w?hYv`+u1e-(gy<17Xe27!zoY6yW+RhA^c_k&gdOag336{tuK z3-VVM&{;YrA^&LOq5>On%L2t0sqt`w&P1z@i~&5m8%xyyp2PDIlD&ldb@vSr)%ySU zl7F{@|JEQv6=Xq5D7UbT(1dfGq=6pg)UF5Czl?t5=HY?8%tb>dYI@3No=b`l1!8xY z-ElmVgk_FLYpA4G#-DzB}A5&QBEG|jSX1e;Nmx8+E-XNnd#%11bp0GP`BNV zWICnBMf*#Gp!&$4{au(8*kaQADvyI$&;(q7TGm0@5>Kxdvbtc>Wupb9Vfa&wWJgGH zhfw_oyREPEZh_BI!gsQ&l`K_(ln?tM2Ol4IV>v_*m*vxx%_ab+-#f%aG5sD*)~A0fX$)$>krXzkQaK_ z8J3b-Q$zg*sel!o$g%NxK%riFedCdSOQ&-17HDhb*>(;lADCHI(znISf!#3 zB&b_i61Nc(9ijSH7fvq>jIDGJr#`3`%u*Hi+@0h*AAkk^1U$zP%o{qFk#=q-E>ieR zL9j&ho}cq>*Tu$4$5f@!v4)(nan{g?y#S5jQs*$OthKezrkO>=$aEZRhv-K*RE-)a z+MfI`LF$(tI;{bd*W4;wS=CKU49$Z+0{iA$w0^POQ5_fY0lP%Dm0zzX8by2I;?JW*8r}ez(Bd2YF`YaA zfW_2X`SRhaP5=%TsHKq6XS6c++|9TU+v^=*kKW#pUxVt43w!rZchug2Ys)RWft>a0 zqMu7kHx-5kLDbgaO;ZAsFM#cFD+SHPV0bs`g3Drx=4`@e%aB*MsQyCn9}NCjcd z<9A3}RHxz3H&92$g4)6tA#4?jwU9h1_&;h#-VIrK( zcEo!0^(ob?x2KLUmtN~0?FKlz<7n&Ldj-gao$N|w+3N6Gi@WN+F%xUJ2k_SRCAUh2 z8yrx#O7nH=ReUjs>Bxpk-)!q?IdF3Av2o34`k>+doAHVJ(CavE?gW2jq##S~;Z$sV zLoe`NkFa+6?9V5^Kct@ZX_)=FWQ=ZCzFSoEn>DkfTYC}cI{up~1gtG9_PT}kUr_yj ztV9CT5lKwI{Yy+x0-3WL_6|SZE^lUaICVueJ{W`lfc2)F-QLXfvYaC0kAmH&-v8jThH1Be((*}voaiWwu}eC}(Nl`c!!fSk9DwhMMt`#WR! zL)!6gKUY^%fJkum2a3GIL2IxUF7#zX8Nj+H9YkCWE=Iw3K7AcMw4sRTiDhmMgB zAsp8#&->RGeS|*%tMuXV8^BBQ+!C2ae|*ycK?2|?k{=3q9F6!x)1ROGJ&Y7(w~u2$ zM;;~yhiPvP&mw7$9(q#3fPz(kVRt|3PHEjU>V zbDbIEFBifCnAxj}5Jn^yLPNnp@$axXg1$P2hmj(iQ2kuxC-!$7G{HEOCoFyg9m|Q1 zc(klbmyu}iOV>8cM)1i+9xno~T`S3BSv?52*p3YEloUo6VmJ{W3C1J>$)5?;A6T&9 z3@-wmB{~Zs)B7i%gyO!ig1Q6wba#D%F>xKT=Qs%RQnWy7Aw+`QjbA6EWRzg) z2I=(y+~^CMUjQ%ZMfv#*oW%UFf6V~4s4FMeru;3S@!1J7fP6u~ zN~;biI0l(1jL!19O}sTWF#)-jn5yvn4ez_mp++Qvqvmd`SX|xLd6MY@dkMAH*k@eb zJ9pMebZw%Uw9nqKsvCxVo4vvQQi3;50N^G)Xe=;qz8H(719;BKsy;`HfEW-aWt9k6 z-_gsP8K;O5&Cy^K>{VWa$C056LS%9hrSN+ zsY+IsS;fjQ3jSpK?QGuKI!Ve&tbc$i-QMI=B9 zRgzLGULJ<8r8ezs50&V7+oB)*IBSAA*ezGMFKUbxj8RHUkOsBmGLqf3B&v?iAk?_6}6dzSBRT@I8KDo4#O zY7VsW(T~*B)mHs&Hn$2x#6bff=xhrrKtsKTOvFRj0)=S&bIeWmXtXMxOu~V zYgL8n5as{Y_BboM?shY?aECiFmz8Xra<{?3iigYtFMOe+fE*yyOWNuN*VH$Z_u_kp zpP{3#5#d|X3)W6GYY|^uqd=UiERATl(whgH7TLBxsMlnrI;x zxPKCiyx4x3R=8+$)mm9Bq)f9UV9oc!1OlaNS96cwzJCBH_K>3!PBW1PF4SYZ zv^B`_+F;!8eeQ)NvACRhyMdhL+Ne)e2XUGX*sF&l+SqX9QUmzhm6uNe5aIq?jR@O5 z?YW1|#vxE&tOZAR zgwRmNsDpL@_rju!F4*}Ccz+4`5pn7j&y%2hBq2kILhl~!zsb#qgg4}mom0$r5B?L$ z)Ik@et>`k(_xGp<`N2Y4Ilb-KRIYkM{+NdMk#k^y5{tmpmc$lJ3)n%x2x$|lAl3Qj z#RH^X&1jXxfI{Fi8Ak}!r~Y4Jwflp8fdKT+E_?@rxCNa|fg4B~5VuVy^nObaiSL8) z`ko*EwyYQDg#i+X*t>yK_5vI2ZHK=s{+k4He!UfcJ5IS}yme-)w&(|~ zTVzqeYtkl+X%`EofZ~d{~`ul1ND=G@}N~=3-zQZc0jkJWT z_fAi`@GL!WKZe5$m%D3rJebd?fKKzW@PlDy9T7zRFD`>eVLV>1j<{o;)9HJh%Ao~jo09+&j-t^gfaB&z!#$cUd?iac%Y|0=-9#MbMl_c(CvV7}ZKUbDF0zxzo$(sL{SB*sNS z^}zpVY#j0C5dpzt4j!iN+JVW9hnb~^&&BPf)7swmr!p~QWN28Y7}yQMM; z+FzUGa!Zl*JmYN5XtB%qzDu8N!ju+KMjLBugokTqWE+Hm=Jf>SJr0v@*gZ56s@dF% z+l}1cohdVuWpJ$$QML=K`|j|F2$w=!D_6GVGbq=uQhkbq8~D(0?RP5Xp5iKyc`5ku zz0|hT#k{Yt0FHj<p4QdB;l_oI6cF zLwS-V4h}vmduWD%iUU2-oT6GMZ;(*Ig`$Fnp-CxHxKK`14`jn*&%Dos8(`qhxblw@>J`F&#jd3F2CbmHdUD-4aLn@6BHBj%I*A!OI<}#QBF}&acJN}HL5>DDEB+Xo&MU} z9GskQlntIJtB`TXx4wXSdUir9HVaplmhkH@h!hemX@28e@Ke3Ja$6fLPh1<2{QC9q zd}f+fJicXGvEn2dYjr&*FRY`murN%>6>>$+{b}h{jgw17@U#JO*b08|;9ch>Z}RFv zLkVi=s<&|VxWd`tTDhW%O1ka#DTz+m294jDUSMx(QIUt>@U4K(vR zN}0K`qFw_bE|d_J{2R-C9x38PAv5}(IG(1r!`FgWVOIxz*fG^wlv*VjmV`?SpJhtab55BEnJ!gcQo3%sH zsHngU#jXONV%h`gMFX%{c!gp=Ez^XfxTaiQ2?8hxxt0TYVXYkt00eM{?wP#vcO z+?&~){^^8%40~I&G>+()wx}2eF7$=h_lk-y-lAr=vTuX`MMKIisQc~np9BBOhpq*% zUcB+~@tK%rbuJeIg=7!lJL}^+@Y+zRe!cS9F9f&>k5T#C@>*5AWGQhe(Jsa`b>Iqb zn&Wd6$vqZUCY@UO<@4AQncAEj={-*O(_DdgI%Sd#c$jc5-0oYb9t7{K`+B!63N31i zc`GvNjQW_3)WO20Ori$o5OHA0pnAQ-FBo;<%1?AzYtiJK+v9}Mb7P=l<9ZgDCI!Ev zhC)I-i=IxO>=77nsIhVel_+vTAqgld30VAkLnvt3wC^spc!`q~?O?yTajhg#0;?-u zez^4z{an?N=j0^ss2C<`> z?#y4O%bqs>Z5aH`3`Zf(R5a~sV8(^AdNnq76tzB)CPuF`e0v*>a#kJp zp4u#|>a`DUQ&fhMwHcA(j0>gr+Rc0|70VtF((0e|Wy+m!v|d$sL&;@st0#9z%R0(r z#4J4~T>NdRD_QCANY1p`7_y6iwXD8f5TvXLc|#YF?tgH{M+lD>^NWPU8?!*O)6R>Y zthbems!y-yU9!&%p5cP~T>S!ulMWk`iwV<~4@PZQKljFWE80BTlMM?k>#H7v`zp%Q zXoR3*ia5R;7;bhcl;bgu39ILmFT93AUx^KoEfh-n^vY!DjOyqU1VTa2nB!Y9Y&tnr zHnVu3hpjx4+=cZ9ddIN2D}7I>g2`}ZDb~Ww<~PM>&y50o&#h-y1Q}g;e)o|RO>##z zTDV|-5Eib549JlMx~#98ldFMwj|)M2Z@d;wCX#tu8N96ndU(EJKD6~KbZcZ7J|rU% znV)7JSR;&HOp#FmpWa$Nps_i|vQ*TU!ben1AQbFd8q?kut{OeO7)y*-DVz(aSKQfP zNgJ|8mpiBoRV&SIw<>s z$a21po&EzCk(RG&3>)enp$*({*vg3LG?C(Q|EQ{A`e@i}N{Y;UD~z8%u<>OjDYs=) z0=^XKRN@C4)-3lGou}9K3@yhS;tVO@6bJr@-0PaeX5%Gb8|y#Hm`kMyZTMCC(ESMt>I_d=b3xL51x?R z{n?%hQJU`jouCdg-pPT5EBW;mCiWI_w_$><${mA;q;3Hx}46HQ1*09yzjPi)T`QK{~GYR-4byd|yjiNl%>y~M z7VEw$_Z7iT-s87Yu~s#>YsB*jtbWdCl6sk=93+EsRPE<8S5e>UPo691&xo$k1*Ul& z&n%btTV%*3Rc*N#Sh{Yuv2@kAGE!PDQ!wxfgmYeO@4VfcW?^^UE-sn>r1^38v4hfb zG+h@3Vfv?@dlg2B+>R)Sx;<7CW~-3K;s`kGDpQlqrWEf=$V()mdIlm2|ca&2*M!Lyjox)YtF81LhaXQ57GuA^+Q z#a-^>A~JLrgWW)g-=BUe@vC-uMp?0wXA;>=MQVw=nV$F&&%(7!cLMeKh)HW_8!B--{t$C)!uFv zIK0ne+b4v}jpKJ_%_aZy%A-oLGOSTgZ_&EvRdB|9CaKBF_ge?`sh{WDzTrP@Nv(+U z>rD-|6nv8MRMlJ|#7t0qs?D9%@6~rWC{KHOUIAN)m}&jC_nebCfV#{9^OrzdQ)BZF z$6~9)NRE>8mU7t_{nG>V)Km$a)0gz-9-B`(dCv)@2sXNL@Yu#T95&O2RWH5nv8an= zEl6~l+Awp+XE(dKBy{9KTnthJIx{RnY1=8FrupZ^_vbAilM~PIxsaPz9b5ZK$p=SD zq&-n8Z`^ykznxLC5`IiC%jDf9w#}CiC!RZ8Dn-;R#ClZ68Cb!Ta58!sQY>rC4fe+8 zoT&WUhMPyD;l~SY@~LCZ5MEnD)F<(O7;50W?F6&j^lbCtHjW{&i0AxZp#+qxzH))F zm2z=9^nM@_Vx4#tOV3ZM@mBxz^Jj5>e$JT26!91+>r5fM#($RUMcfQ+-pYghE2!gC z4+Wtj2J}k;aNxb`u-|zlLYrIfco76j&cy|~Q7RgD?5kvxY}QP8 zPg-5Ag{p_PO#R~uD=(nob=3{+&{;m{sxON3W|fH?cM2}|Mb8_P9MiCk)`Rrt&?8JW zvq=r^ad+D0Prx_u1ruGV2VGBqN} zDlaClo)7;Tm*HUa%QQLVHOa{xEs%Il1{{hQu#Lw+d+o%Nv}Hc=U2OI36A?dPSkCmp zH2u*3Amv+o>dV5{@}ry1DK?%nlu1UwUlAy0b}goC$SHo{*7o>&Rf{Sb9c7Xdq zm*H0>q+5f6_6h_>Tqa#jmVb9|ZG6vyjUx3qLa3u$QemN@4$bJT-3uEnRNw;PBb_mJ zNH+k%6MQt=)DmIgY~91)`dNmD09$}~f1+}*|VH|kDriQ_|J z)(h^)cf!=ZtD|+YeV%KfI&nhn*~G8ihcRp#-UaaqWs)A6a(MVabzB_zmpMl=E_SU! z0aP=zlyh3nfX`psROA3oDA+pgs5k>1J%yfwFA zoq-mhY>yX9`%>VvWu&Glnn=YgdoPbi#*J;$a`Pv8dNk9^qebCcp`h_ng15|&u_xnc zx8v1z-iN0TGg+~OHf>My^?bk-V8?pc%K!fT%J|jAxP+_xNob4Pbk%Sx1TEiA78C)s zx$@oP7ZOz9vp?<0-a>RFwaSS-YKVwmT`unUZN{qxlZLR+-+#7(zxxrgjC&uU`BS(4 z1*1;Ad5&q{Nuag4`44Fd9-J$y>Sq1SyG*W7OPt?DNAF!nPBPUVVk`4`I@@A-k)t#Y+{zvRODiG?3`qp z1}wxmn-9+Xl9X1cHhIm}QYw}*M+4whigl>)Q-+;#KWQg?ARxB-16<1T8PM@3MNIT- za*dIoZi8ta1$ID68NtD6e*ZF6!kuo*K>7{AwW9GdFu5 zA}o9inys?@;KnS8;H6@tWqKq5e5(cJ*E4#boYF(fFoSb6$Bg0k;pbtAhy60&FeB8&R3dJ;?jM_~V;MjEU09(gUkpJ`k!ImYYN#G<) zi8+*;(0WCOkL8K)@ao~kGcQYUW6VY^{}mzs=+2j)ai?{hQgWbKPnVhZY`H9v{L1R< zvUS=dF?()yuf0j{vBx$4O9L*xlkt{$dzzC<@6NP>YSp_oUc$4OQ8>Tl6WwDciR7Yf zvKTC1LNKyqo`YG6T<16LVb$SXxiw!DoF)=~(kE^BnU?6R2)m*X!;cl;w> z4BWw@la`2NQrExhJ(u<#3f^TCl|E9I!tb94sq@%2z7HZ>Tg;hWz{rj31m|wglaIbbA z7H`d!u0Zb6ZT2hnCnz-%fgYry^SrL6vP8R|gopNxz@B^p@DRXD6i_c_hIL|p&;P-F z9#`Ov!DjMLs0NZ!o&~qP*-XI2k)fMc68IkbKHyGZ%Gj=canvlSO?>cs?LOn%87f0) zH$hI41ll*3sUG#m_g>SdVj6Stb>SD37)TfnMoi?RsR-V|xM}G*2I}EhU@6;i%z0}( zZjs8)BM;HnudqaypFjP30u+i0J%91*$JTHd0Ur}(&@@BXh9M}){u3gSpxyU9{+e(n z?-~7lIaMut%q@6vq)z-LM!Zw2{!{)X8jVU54rSHRs4}KfPK55Y`!_iO1mQ!rGea1Mp**q^V@9OV*0hw~SYM+3O=`QLY z@-ZMt7io|6r?=IV^v{q+rt+?F08l!`XDEe=&hoo&jqvsm#Gcd=lmd~6%EVza%?Ut3fb+u>3w~Cg2%Tj+#c>NmdOiVcH63N zCwUzP)?W|XUS0U*E7;nyYrD>!hDAqHE%fo6%kb_sV;&YoDF7_uPnx8odX|E|a?9H% zm2G_>3GLEypM~UjB&Sm&Z9(@U!(VO4J2By<62-=YxA$dbdk)t=^)0!X5Ze)-8g!}P z_Puf-az5UcoUUF8Vs-5c9X~^qUKBPOU&K}J&$}#SF)-}&1}p@{#l5U`KC)6K8~8ge zKn;)SnLzOY)iUMV^lwj#imLh87tR(0ZKKj@4#~+SPD4Wt`r;M{sXUfir^5g{CjQ); z$$7^Mf8X$WuH_n^T`vn=dNxtjQzR6F0qaD7-SyZ$FX3MD?o3OvN2~IQ4Wv z@69JoDibyu)X3v8Y{{0dgPpiFHi7Zp^Wo>~C35HtC@8`xk}pNx#zn+ESW1S_fW5N$ z741NSzco9h9uq>AF==s($@ebK)pdNjfvQ-q9a^$Mop2}drU<66q!FOX&o_= zXvKh;a~bc3wOF0|sHP9rC1X6*_*m(Lbv(8ta6&1Ud@z8mg#prvL9tF~WHSd^4`bY< zUa#XQrzy_$hef-_xyEzvvT76`o1QtHyFQ(`cFU9zt>vY`#UqK_4Z3$}v-(Cfd10?;B8 zpT}Oo0=?qDdVmc+2`uo1J{y{6GZPa~h;(jJI_zuu&b-h`INJvG7`+CD8dI7--`M}HvhGuW6 z4d{+jn(UsuRjJkNNpIx*fwcP^VbzUw`I*75&C)rS8{a-;rxK}C8`C3bT7vMJTI(Vt z)6|~@;81M_j8lrAL)032+iSxEqU#M>6O?$oF}*dd0Lr-1FvdU zf&{;lH{Je168ufQ^SxeQ69=6l_}dr)8#`VS)$UDn)j(xkT|epON=Zr{nN*Gmk1wdM zC`743&eBP^Yb<`R8?7CbvV7Mu#gAt_k*fOGJ$>)MgyDUcm+odvZ19jDYl!n?Dt0Hi zM3?HYp{}evIhiZIQ+B7^ z;&KTJr>I`u1KY|PrhNNyC+Qd9G`f#^EX7F+8}MNz7TJ?W7;?!#fd z#x-&m>9U%u-(oHBIQ_OX(qBx0Ja^)34MYGw?8rEzfD9y0PwOYNe z{bO5zb@4Kt<*T>Fq5oP>-S0G0I#}tJsYIhNp2(e=*$w3^zpG#pIp@wdU@jQRfNc4bJ1UN zR6_Uq_43Nv_)(G4*`N^frPQ6RiCV0+SnT{aN~QwO#`l@s%GaL7z)XGClIe)GEO?hc zlUi^6%#LT>KI&i@SiM>qVAIu>e{|%=vT$PFDvq_B$c|}pZ&KLh!z8$f%L4jkXxm30#Ck>4lLOVgHb=_+T%kI;Bf1$lE zz2tv<=wy@aHb%NCj)kJ+7v#CW(k8kG@H-rhjGxn;>dg(0=MQp>PQT=WyXMqG_0DvwqHF)WxmYPl^uxC4&j!YeJUS zud}|nKXun_y<8Z`UxObkD>@;_&+JxK(htvjuRSedFVL*>-6K~KlUT=o{L5n7bW7Sl zV<+z(U5Ll=f^hKG&^@Nz-%vnWE2&Q{mVh-OM*nQ8vkW-+)kP==QV5OcH_ni|dRoNW z7xS-B+^YL>yxdDryU*$C_ajYciX&d|bmsP9x5w3%N^qaRIeV^V@h7;;aXs)~R|@nT zD;%2}yl4Fc1mF5e3(zR2OpX_q)%hEF2_a6yi&WhXvaTf@5)f66t2F*aFL5e8M)pR= z*D5TU=o!jl)fUrm5WJjmy?%AK^@gsdB$nz` zAntpsqG7myKIb9$3OLF8HREO#@!mZ=`uet^iQ6@Mm%EY~@sfkhIA5(7S`~nIJAdZL zH){BzCV%SA_wP`y7VFAe7>5~>8N{9E=Tn11?x3hn#@CuGC2_Rt=6bK@k+wwjQnFCq zW??1@9o1t6jpEPFG?Q>K_}hH~bAgJu3hxBcL@MVYzbqpS@-2ay;3JB0(G?1hj7iR8 zxgD*;WxrCEfuIBegUXDR8A^&L3&EaFT~`cU4~LJlvu#2}26p)8=02kIyT3P3Md5!%l; zmPqJj4xO7?BC^vdw`22X6llIipdYgwUq>J9ummUbN`KGBx8H(4ZbA4D(haKWx=W?a zw>8*}&ita8yd>o`qo0NyQ|QN3wtw?;IUzMMH8l`$y;=zQTGXv-R8RE{&Zjyu?{el; zS;_teT5V^g-*-gDm-VjM%K4(dSEze=w6ds;pCv#{;@xquoy`MvQ>=R`+d+!Dc`lNN z6S^U7qX`%Hw}fhdTk@KjnROP*vaCFCYjgaA>4UM5Uy=OHs-~8bw07n*)e+iF6%82_>bwOB(5J z4teOVyAFQ+-S>Ux&O7tIbMMTZd!7A{?(IHnul?+2t@Vj#wN1$<=R13e5tX5q%Zom8 zE$-^H^pS=>oxsce28kBGw{VQv7z>3fBs`0Yys?vXC_n08>?0m1Nq&>r(_FK=76oB8 zVG=#Hw*A?wA zk8&MXer3Wk_~Bg{s%>GBJ0u6%>T{7|(lgd4)M~wc#CX5A(9y2A(?`e2uqL~2x?e8WyxWGfwx&9fl!nxT zTd+q*M|VE3d7j7e+=+jP-!U}jslKl;<627w z&WsNtXe@6Mt<`1beQp#}`;?gJ+6e*s&QzG(i}I^W!l*s!=8*UD8F}VPZNS}97IZe* z^C^y7sAEA%J9KxH$ll044yV=YA(k22mCyXwFCTVOG@JQy<9-x87?gWCOq*sIXz0wk zmRd@AkR9XMNmJ#bc+|rsFM0^z2qE4Di;e*5W$gwr9s4Y6Mt9vEOB1uUM~Pwgtt)O~ zEgCA}A5D1Zmz!(mCfuAT)gWr95C?z_G??M`8p2ms>fT1xx(8TvEKr7U@kr{Ko^Xx3 z7W?zjoQB?fADmwM0V54FSvGu5HNId*lTq{EEFB=M=^>a z3w9GvC$LEWEWkZICjh)>@l{Ih4=RnXB97XGExcunR5)B8E=+m?Z!OI&2TU~^Iq>^< zy?k3|dp-JjRRl6M0Vs5MssS&uu%GyCg@exXEJgdAuI)-2m!Iw#-!+>V&aMG4zV16sQ-88VwEKM5fMl;SR{h1sID55>9x02pLT@IMP zA(Qf>aNTdTHLaUwHJG|=Zev}+(~m~!F*?^ zd{uviHXRqTXFLM|9rS8a;8AW6N|3dIfst~;wX{P!fIZadjt=&nk7|!+i2yp954z9A zT%G##mDVJ0V$V@0yyvVhJw{eGq229H?S9JDFomPKAQuvCmB7NfW3#J;CGb^29Di2l z3;@}R5i8{*Iy$cm~AfJ?Bgi z<>ghZ6$o)f1UkVXlnQa`l#g{8at?#u=f3mTG z$beOGaavfb!xzkkVYbTDX%>nYaB!&$61o6#iS(_O7R`%B6rh(NIQNg7=0BR=+x3li z*&2So6o#_XRe7>4e60RrcZ2F&WWgYb@;oQN$pH_F*s*!AfgthLqQiGXW1R#gOEN}B z->9De?Z*!l6^*Xq)sJ#k`_q#&-UWLU=)_b4>EVQ!`8OL=}s$VRyXV20m zGI*=?0o$~#i;9B84*}Ll1eQfG4We3P{{f5#2B?|;SI;gGwEse|CyBju>2vC7(w`#w z4>E=u;>uXFXYZ0^;ocFfs5c=i@_$o;abk}A@?!R8=;_v5crd% zO_y1Ee6W9^|Ft#8uYztiUgC|0i=p4TSvxA)8uKIQxy-!ycxMbpy4-ogYY%UXeyK~H z=GJCa1(P3723c6beplLOdmCf?Ktrkxag=zoFwoJI0aqn?OZW@1x1KKSsCD=zj;Ynuk1nTL`Y zJni8IX4td)s9|Og?rvkF(ba?R{g`Iui)W&Un(VijsFpXQ&ZXiWhXh{KUOgkhIm3>=k53{T|Nd8euIU+)G!f8%Zo>Kw+jw)KI~Fg| zSQpFlEe41EX25F#LC(v#h=MvqphC0xBI)fTEOZIFMexH&C>{k31~@^RTIT>b)BG)P zml^=Jtfw>0`K4mb)>fv*Q}%rHlm{2n%t;v{pAz|?{NOXHoWLCZM;P?qI3Lppi-}=5 zbnQ7vAOoah{#8y&#RISa>To2Z^f(u}3A=x-vEGV+kfMQ{B5n_GC$ zglYpQr>vf(6j&8L(*g|R!n4PKD0oB#aA(|+MXPIGNJ63)nNTgXkAd(8Br-h#w9(Qb zD@8oNlE-w+Rl+U)HKUt8zyP5xvv-qo^y?HFwvt4>3iv<1CKdwOuh6Rb+>n%C_tr#N zo$NU>1NB$~szHwxPyqa|U7IvR2xn=Wq`lXvrvxA_>lEhiV{y@-3_y5A^q3e_FTYn% z;>2xlCjj+N|N1pa08~rz^!y3Nf{>}pZ5?U!a%O~C)o^R;z5QX{LD(Y_bTnC%MwgB@eQdB{#hVW5!@!dm}N0M|QC+?mjbb4Xn-O`XWdx7!g%@LsV z)U5Rzc>aybblb<%9^AxU*LYq7zmFEYw##v18gkG2Y0;`@I?>TIJk$%<{aS#HQ+tCB z@G?K&EmerU>Cu@bM;48;5we}0w)ejQ(kB_XLG3uv^hzWO2c>CEW1^^<`Xq!} zNW!(tW&d!O9uK^qI?#Ei=9*3!L}-8L-tNYPoSbLzJgdYHIkHm#|M76V{1-zK1{Cmj zq}E7b65wNUNGyXLd}An>>P78sReNdqB0>G*w+pyIXJCBpt9ITqh^Hzg8%cv(c;6zR zOL0Xbu(rmAtWG}_z(S+Amb-d)^FiZIwsGQx4!EjdckkX+fkNT;I4SuZ*jXqkDdp`; zN(M&@;AyNQw%6c#2y|8RLB4oEIf{$E_)&!}u}jmI}o-3cVZv~@SJE$yT{{raQoxo1Uj zn|A$T*`GX7UE0^xmGCBf#|0>f+b)&#j@aCb ztCpRW^z6EDJ$kG+1Xz$Ty7QTmj~`!@fl!^2OYaT_B;Gg=)oX9h2JG3ZyoNdyv2w`U zBUBhE`%vnM!?y+DXU@Kw?O`FoZRieU@5KuS+u zW>+BaF^%%u@CTB)HD61z;S5sk;L&|CC^iaS&mNF%rx}v?2#!S^nvytJ&66BV= z1N|TMVZAH(BDTgpTq=-`s$h6rq+mfHWVg3Rp&`y?MOj%{DiwY%NK%3BJvu1Q!L^?? zN`^+JV+9-i%@gw_LP%`@e9)hCpay&gfWfk;zNA31B`vffPX2~LS zG^AZ|;TJyhaVcHsK}c}b#c;w>$uQrAeXDrRS1UYZRsjOki6PaJibr_p{$RUuGzxx) zV&a3tLx%^y0f0i-eK2zQI?(0m)7w8i9k*c8$UOvbOZSU;gg(q;XB0o`--FkW42_I* zs%dN2bldx1=hzY=5Dc4a=x3~0+XZK_{cWA)=}$dU0q6E!!=cEimxh>(j2Yu%hxtlT z+7BlK?3C{Bi%Ts<+jsSB>0EzV-)?y|vp;}YDFu6>?Khb&)Ii~EzBB(rOMdndJ6Pq!px z|I*k4pQ>_%L&%jx-l8on<9%tXa@fpB7v~U;{s=)14ShF3ir^c^eoe#pIcn^|w4$Qo z;N+xP0~6;1RajA$Z5G)1Ao<*|7WZLtS#j~L9m~ia^*HT`G{eB%lNNe7t7SA7XaQ~!6PuJ?6idgNI2y@_V&8tXLYqTG)#W% zZxr=>E*g)5xjM^c;pl z65Z%px2oz~)^4FkW`5pA49uKY7p1NL@Iz2YLqv-TSs1Y7Eo=5@w4tj^JjQ(}fx*F% zVKo57R2)8E*4+B7$ggFpk(iN_lSt}zm>%-#oC*}zxp%s@ZprrBNuF&_yCjX_XL|?+ zU1Cp_Uyd@!DY|*wR#3|5VJFdTIOo{Fl3NLz*b*Dpgw} z^s-y`w^yM{VNBaRT6RRn)Kzid&UvKYkg(AB(tClu?1ASmzN=1pz-hqFh{jP8>Z_8u z@px6zk5O(9e!{PP{R6tx|KgkHQTtkaaBHb@l}#40E2+Jbez@+Vv&59jmZK48-zxiA zAljRXztsc!BUl13OP^jJHpr76aGu2RZ03u%>r^ZDxLs$0_BgrPuh&f-H)@ptJ(ILnrU7{tQz4vgDML^(xY zweEmJyxny0yfvYI`*imy^f>$>OZK1{P{rD>N3%QR3WqD;QGJVIVdF1)qNteK_(Cb; z`3}}>p+V;q`@pN#)OQg{k~c8>PH|;zLQvICZY1ULxuR`ybYP;If)uI=fQA5+qjL4h z3V6?a9!~BAr7xU^EkH>4WRNKAH{;bgCN3?^a(Ap>GJbT~zNs>5A2DGm)R7i=Y}+ID z^mM=1PxuJN&%d@9q4ecLnCNbSb8&Cm(fKN*aFQ~wsx`Y%C+Q&Vy|A8yM}A&eZM&Ll zPG^%KmT?GB*lC#lq?^e0KU3i3$;Zhp^6wSmqtxN_8*o~#t~uLLpkedaB`v6yPCPl? z(>Rn@ETtW(Dtq5)dW9639xDMVe};Um7M;{ww!olQOJul}Xfen8OPkPiGWhxlF_y3jwOIUQP9|nb!Tcqyhg+@D# z`Oo;Y08XrN+)Xy`hM^4|W6CIu^uBW6uk8{BXldmAdF}0uow*h$)zB(y_saqSz1B|X zrR1>ll)YL4^B7gK+pf&7YLMx<%n?;rQ6n`wr>xG197U%a$&eY3k!HV(GT@ODRa2_@ z2-P_iwHDqBn!rIt-v`udUgj{)M~*^FOZh=>m699=PEJ*J#smfgneF2zPgb>F^9iaW zhFhO@EeBi-sux%IO=YVo&!_6(SyuBsh1rT&5;r+V;nUF2I|gQd|4v}q=BN@zGqoDf zMjQSs1UDqZeFhZJdM{?6CPjTU#4((jd(@j4!xBoyk8q}W3`4|iV|TK2@Tjnu(QHl4>bd(L7o z5$TDEX4X{nBklb88*_e!?XEM`{=LbFirz?KW|{uP-i%r@cMF8Wu-+A8aAYI^BfyN= zRAZuPvqv1|OT?G=+9kUh6YFNdvglaG{y-Wg9fI*eIcywu^x_6vezQWg34^0!^kh`U%h%I ztETH(L%6xU=SK_uLbbjw>~oNjU=al`o8r{gS;$dzIap)bi=+~e=oQ%$N%ELW|91TK zrExE;ht`*Xt8>zsHjq{XNvh=~T}GPjV54au1?@KL4GvZ4c(h_t2JgZSMs$)H2b^Qd z=9>I|(TD_{xZ2K;6}3XzVLzYObercOFYVe=qiZ2Ur zKktv@v6#H$4C>QnZjV;^E|mJa&y11MJnZS|`BIw1xB4>99gMMsMm?)rwfxEm0*}QN z)i^#YiA=0cqMcH+v0E-u=P9%9i&2}Vf+2oAf>c5;6*L2bmVWMLY{y-UQ*s5KY@1_V z7OTNmRNI7~ahLg#TOC7xLDKjqS;O3&ZHMpW*N!{0WT^GRcorHkSI$~y@F71FFkKI~ zkKTDa3FvY_a${zk@l9od_!1JzU?_1hQM_^ddwf{XE+I1ZZcR6V^z1ObUf9bJ$oZFdvDD1Heo%oQ20Uw!Z^sf-4XW^G&; z#(hz|ZxlCjy15BeNqQ<{lv+p0Tpvw9reld!3G zJl;({WQoeRT*>F=Lni#B!}O2Fqc(cRKV5*bfh;SX9CaCifla?l6D+EADqaGb9$vl2 zk;Z>Srmk+c%0$M}pV1rAb_h(MvozD0v>x|mPl|f$ zK0B8y)n>Z4ZI=C}E>nzPyqOV1O|_kcdi2HlzROuC^=_=+{(7@u5Q*OjZM8g$8f(;1 zpQh%7zhC|oHtqrLJL5{*#>o(VE%~NBzc}_6$JM6_MyIGdUBX8N)I$|cJ4bi}U7PAP zF1WecRZ7E65xCAD6NDwd$H>a~Bl--1 zJ;Sw$7iZVDh4|*%Do0LBLLxi#E-jI8+T~2!85fe?*6JYUV4uVIpeTpnW4b?Sknjvd zSy`E^G>1rf?ut}OhkbL7mLf4@zaVON)BT|<|JH=A)cT0!XLUT9jg9b`owKUN8k0jW z*NyY0#eB%6;w4srTC_dYnfO_WV6o|u#p)J|R5Qt({yo-8Exs8@-CV|pT^nS2FeRH< zw$almo3hTNnwl+j-Z?RPU!Bblldor_*)XcBb^oxxqPk0HWX`qIOk}(f+rQhg*|2$f zRM#5`SUA6l*!-o5`(3kYKR-jRoIpLa8vJ_bhRcU1n9yTWaRFuH=% zC`8^Z5jmc#&73%R9()rvGH(>m$??#tF!dImp>^!MWgzxv?NE~OueF28y}o{pCvU@( zg38b*l=3EKylClN&jURAQLVQqP?3w6UvNngO4&pJcmt-SkLbYS43(0a9XU1r zmyhRm?;mIl=P{UC*UR~JBA4I5V}nFdEhieeuP3vpH-Kc4vY>yC>v|pU2?g`&gNf2@ zoNG|7-V>y~n`U<9IM*m!iY^HM|LkX@BZn*})`p7!9sazRM%3(_g&?6W2cNQm4hb4~ zhGPTTX>oWYWeZd!PqEf-Q?ar65^_N0ak}_~Z|BbfnGv8RQ;&0V8Fk6nHJ&jsMNbsj zD8pKkni^$iR@*hpul2wPz;z%k;;)n>$bJ3Fv#V3}XaI2{ferQ*O>t6nD!?u%&p)|@)jUFkpQMT zF`4DTZK8iID*JSj5+mPNX7)r64i1h^Izn=NvZ&F~p4QKJK!C4$Go2La5#{H%=EXt} zl_7Eu#Yovg!ZG$!>y?KaS0M$iwG z6$iYCs;{X|AypWA$dzS1Ga4XAnBB_%Af3E4C^x7^#l^&YsPRc-(R@+NOADkTpH|GWmdz2?PJ4c6>6Y>q_?R9<{zGV%5u z4>er2R7J{yZ#jGu-Hh3c3=H?hI0G1(81Fw68vkk<4j4l^C-m|0@vPKTSiFp7QW${* zs1?BO=-AoW8MQ4N^TA>C^|db79tJUP3*T$%GhQReW`@O zDF5sBt{-kXs5enwJIdM?OwNt;JdoQiJ|;IGEofjJI+Jb@I~Uy!1wNcM#fn?!#DqQK zoWxs+kmr(gchTSJ>nk1@8W_ZfPKhGr|B<{x4_obmZ-5}UAOhy7%ZWQQCZ8pe#V)ce zXD)y50<fF5=;{7hQY#S_f>=x@6(n>D;}?&&OBk&W7Yc zjg!ID`pg^)V)xjyrM$4PD6^YE)NoO>}(+ewAQ(kZ7y<{Msm(Q*spe z0dKbY3or}x%M_L`Vj;k`J!_Ne4W~8~@Wu=x|7Mm^w`Nb+K=VI&rld+Y- zjgIqCP>@*@nXaGje=(2=hJ$F* zyNg71zn9Fh{24|N$bOn>w!**uKJECSF0RKlYVAZqQROO|sfQ`Swnz#J4#S-zK^g zNi@N+sR#G?hVz!(Pxp)b^MB-g17e1MSeSo(cd-)s`ix7sG$te7weDw{&H0*D7M6pZf0{>QRbH98A8O;4=GP)kr4DEJTO6~ar`h2ez)hCa+Y zj{-44{ha$_b-gdmWMwN>?_eUs#8Xjkn;LN2`2Hj;y$1wA{o4=i4$-dtYO?16ND@K| z{L(_Hs0e7Z4&ShgkD%*vQ5LO`o#)}km;nd5HMq-7q+d;fu}RjP=>GjXvfsadAXR#A zVDS6flS~z7b&RN}s2BaMilnQo+khG`@oz$U*g3KEa-H;xxvK|3H-1kDa=9!><*{AH zp|pH6N#;@ZX}LRrV_>nMrkqsNk@6*&@Jtb1m*;tWq|+#g-$&;)7|BCnR=U&K*+UlTQ2mAoN#46qU$R;w_*If z!JW&EQL0vQwr^gZwLn~ymw)()Ux>cGX+>d{d>iKb_C)$w%(rhD@uAkB`%^qXwpgzV zxj?-A!+5C!#tX_piSf}h8tXqWUKCifHxnr|B&GQZvK%|xe}8U4vZ?Z(SK`h8vaH>i zrx6&uKXwCY-$EfRBy9N_6Pk~THHr@iulg%o%7^|~Bmm&eYBw#OUdb{J(ZDN`q$@z* z_Fyb{D$$q7*;r6lR;M}rg{nE@uumyM|TlP{>t!857)C#8YT0VOCz>E5W`zfN($ zF!|@ay}Id}H+OveFt1oz>}{ry1!TY><1~pogH}f{8}hg-M)E+j!Gaiwh$2l|e3`GW z(6d8p*wP_SDp$II>)2{(xwTg>R7!Jd;B)z@g2Fv0SOOsY98qre!w5hr?9ABMJH70? z`WAT!=2!*-z|UhhhXD^z4T@BW_o@Vm5=RLvByL`z-I==J)R!Ab95EWxJ4T!_@m%zX zk2MPiIjsfAKVV|=vACK_+FuBJnq(kLf&3M8V3!otGgd7i#rl+>Sec!l&mX7tTEjx9 z6&MS_xQ-lop5|g`-jGX4{Tbe>C@_|BUXmR%(El}RaJpYfJudF0%`A#y@}>NEsXHdX zwUxH2dHq}tHzaX!af#W6Z(q+-fjzli^iZV?WlaqOb-H`VEjRwQ0)b(5p z?A8t6jwE@MC+NiSYPRmUJL6rP9*}IwgoyxGf&JmhV1GY-@6NSCAocESVNf`j*>AG2 zPp^>)tHLbr4E6N#Z%H}Y1M^x9C!8$;_3UtqpSnnoL+4y{XlS@UcfcaUza49BA~S5` zyX`oDw_=>L!5;04f&)H)Yhyt(xw^W2mP66i^rB=N$Qfu(eKzQ3ztoc(B^pL#78eHt zl&>%V@>(Vc|Ii5LKE1hyMu~_xsdn- z;5sT)5G%TDINQQcmJfshW=4Q9lU$w^c$18Cvb`_Pjw(6`Kiic~oy#joJd{k0r&D=7?i?gX)Y|xXiVzT`Ws2Es zZEx;$%O=XgFkak7P0RCn{V{}2j|#cM5irM9{xe6wkpRQw4W2>@ZMVG;b(`aOzlp1h z{UQ?{0zTwO>3I*VJM(@S4%GHr)(MBzYVRjiXZAFKeH^Yo)k}Kd8uJiHBZgqRoozA< zd@AC;r_6w8NWiSEyWDK7?+xV7Cu&1pn}P|34bkE>U-uQ_AmWiwFaCRl?V zaz666eABQ#x|5vqBbb`w&BT!aOG`_BgSnwafj8o179IHCyn$-s=MQc6oxOw3==>Dm z6MWHK&Dp*4&fGOLKQE87#qTr);L*fvuvL!fO18m_6e#{9R@6y-ezSol>w79Hj}i?p z^?fmdF%eaMfR}a)D%VTKAy1TdRIKw>ViSq;#Up0zZi3_I{+*D-;|cM zvgYPV(nlvJ(yLtq%$>Xo&W}9+N4+wDkxWE;b=dKM$4bw`+3oSMD7?GudtRPWGj7U* z7+op(7L7eE3wN;5>*dl&vBlKQwUIK&l+^_=Js@UEjvTS#idffGL06hr2yEw zC(#iwnA}K^kYLD2CtQ2?VGD#15Q1KPU<&FNDrz!};`QlRATVs}o^0HfeUTMu@EytQ zk(_jdRAhdlO+|I`Ik1$f%F6l>OF6863F1hR^uF2mvA6cKX}hk=j;vj$;>dsp%-t*P z6G~fK+dwO@R9!%p2V}_-OO5KNh?En1MyxwO!%l1yc zWqhCYe89soVN|Mgy>8neMn}dybX_qSOY?A(Bh@s&_WAPCIw9e_L6TdSmyfXIX#HGv zeqHKU`LN%M14>LZ3UFHH1U^dwsVRm5%en)@hb$~HrM4$AT5j~4qZL7iK|&T4CpY7a zdOT)QtvLDT)@GELc5X|y&H*kS(5#i04?kr<2XCR#GtKs(SAcCt5?os3KcV2==~KQX ztZeq;P~Y;yhmvh?*Cov|i%ea$yy%^otL?A&TScGf9C0r=jyG(__K=?2)p66jFQTsO znbp-FDP((NUEAEuXq?cf>$*Bse`D@%$tN_2`9x(8w`V0svwyYi6@2l;;aFWwjls22a_FPh82wgz| zuU+Rz_8sXtCM{Hks5LC2X;QPy-0{N^U;k54^XK${eQepS<%X#3>D!)R)Qd7Et0Au~S>O-PoRgjpkr5k@N`7-t+FjgU-4bFd3j0X~FMNM?EfLL~mU+|g2$ zqTV^z=cL}t`**UjHRZbsr(%mMP922`Fpk@`l4q*6%r$+X>?OEQLWQ);OM#^>jnHA1 zItIGayGg%2@#v%G6Hb0oJ{k(626*2XS=nZ|?YIto^o(28ug(V0UP2tusoA$kY zjgok!*hisI$F|(U$%mW-y^}2R_B&ybz_O+J488iJ1<}#CpcUj|>&i)n#&#TtBc9d~ zMc`E67z|3^LkdO!grbFLgE1o*ZSEr{05^~m0O{`Dk&99Hz3G#oT14BlV%LV@TQ1$4 zR_74y?;@!oJ|SB{379k#@BoY9on>b&XcrGLVTiS4-W(_)roth;nO#v``xOuZO6#I zAC#;&2-BuEY`j&1Z#Ae74|qRSY0$o;Ed7?{$R9$RxBa7x`j+brRpv54ww)9jbvJDb zJ8nkT>`4szaBUJ<4e6J8ki3(uuLJ4-h(oz4x>dRe7x#dk$RTgS#c9+yq~S7OyKLIn zqDdEI`+vl=2QU;!+phbt-fh;SmmyHgk+auLQD97TVFc@O%^=@CTG9~}EVBZS$Di;y ze_StDW6&$38*Ji8$U&R`9D_;#iaR9z=>BKm{Z}2hs4Q8tXJ8we>oN9Exx|o%Y^LT% zy_L&9?C|8gJR#^56g9ex^?oMS55T6r5V1ysBq-OLc#z@%<>CwdI|n*?`^RD=GeDlL(YxCk%cTaVt|Wg z`_B{BBk3XCl{pRMWB?p0b^ z|MRY@!TRF}je`Ae(@Fpmm|bF^NA}ON0|uxOfx)Bor#=S?nhBs4)ULsyKhM7X5$FSN z8<(U1efJ9B-T(UrVpWm#SzV*g$i9pMeVNO41BrtmkNVr7Z#Yus2>|GHMqW{6bC6DzHR{rz@qC{DCI+6RYRD1lRhyOkd z>bRhw79(o`XoPtG?P(yiMp72sI_DwSo{{K4vzbHKQ-_U^n z6G*{;nSkv`S^NzIUJwXB5-?l;27(a?g#Y~fB`sr>Vp908v<(#S=ZUP6OrDh9$NvH0 C0$LmZ literal 0 HcmV?d00001 diff --git a/playbooks/start_investigation.py b/playbooks/start_investigation.py new file mode 100644 index 0000000000..17771f6843 --- /dev/null +++ b/playbooks/start_investigation.py @@ -0,0 +1,229 @@ +""" +This is a playbook that is designed to be recommended within a workbook. If used in this manner, the playbook will assign the user that launched the playbook as the owner of the event, move the event status to "Open", and complete the workbook task where this playbook appears. If there is a task after the one where the playbook appears (within the same phase), it will set the next task to "In Progress." +""" + + +import phantom.rules as phantom +import json +from datetime import datetime, timedelta + + +def on_start(container): + phantom.debug('on_start() called') + + # call 'get_effective_user' block + get_effective_user(container=container) + + return + +def get_effective_user(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("get_effective_user() called") + + ################################################################################ + # Find the user and user type that launched this playbook. + ################################################################################ + + get_effective_user__user_id = None + get_effective_user__user_type = None + + ################################################################################ + ## Custom Code Start + ################################################################################ + + effective_user_id = phantom.get_effective_user() + url = phantom.build_phantom_rest_url('ph_user', effective_user_id) + response_json = phantom.requests.get(url, verify=False).json() + + get_effective_user__user_type = response_json['type'] + get_effective_user__user_id = effective_user_id + + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.save_run_data(key="get_effective_user:user_id", value=json.dumps(get_effective_user__user_id)) + phantom.save_run_data(key="get_effective_user:user_type", value=json.dumps(get_effective_user__user_type)) + + user_decision(container=container) + + return + + +def user_decision(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("user_decision() called") + + # check for 'if' condition 1 + found_match_1 = phantom.decision( + container=container, + conditions=[ + ["get_effective_user:custom_function:user_type", "!=", "automation"] + ]) + + # call connected blocks if condition 1 matched + if found_match_1: + set_owner(action=action, success=success, container=container, results=results, handle=handle) + return + + return + + +def set_owner(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("set_owner() called") + + ################################################################################ + # Sets the owner of the container as the user that launched this playbook + ################################################################################ + + get_effective_user__user_id = json.loads(phantom.get_run_data(key="get_effective_user:user_id")) + + ################################################################################ + ## Custom Code Start + ################################################################################ + + phantom.set_owner(container=container, user=get_effective_user__user_id) + + ################################################################################ + ## Custom Code End + ################################################################################ + + status_decision(container=container) + + return + + +def status_decision(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("status_decision() called") + + ################################################################################ + # Determine if the status of the container should be changed. + ################################################################################ + + status_value = container.get("status", None) + + # check for 'if' condition 1 + found_match_1 = phantom.decision( + container=container, + conditions=[ + [status_value, "==", "new"] + ]) + + # call connected blocks if condition 1 matched + if found_match_1: + set_status_1(action=action, success=success, container=container, results=results, handle=handle) + return + + # check for 'else' condition 2 + join_update_workbook_tasks(action=action, success=success, container=container, results=results, handle=handle) + + return + + +def set_status_1(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("set_status_1() called") + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Write your custom code here... + + ################################################################################ + ## Custom Code End + ################################################################################ + + phantom.set_status(container=container, status="open") + + container = phantom.get_container(container.get('id', None)) + + join_update_workbook_tasks(container=container) + + return + + +def join_update_workbook_tasks(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("join_update_workbook_tasks() called") + + # call connected block "update_workbook_tasks" + update_workbook_tasks(container=container, handle=handle) + + return + + +def update_workbook_tasks(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs): + phantom.debug("update_workbook_tasks() called") + + ################################################################################ + # Custom code to determine which task this playbook occurs in, complete that task, + # and set the status of the next task in the workbook (within the same phase) + # to "In Progress". + ################################################################################ + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # Get current repo and playbook name + current_scm = phantom.get_playbook_info()[0]['repo_name'] + current_playbook = phantom.get_playbook_info()[0]['name'] + task_order = None + + # Iterate through tasks on the current container + for task in phantom.get_tasks(container=container): + playbooks = task.get('data').get('suggestions').get('playbooks') + if playbooks: + for playbook in playbooks: + # Check if the current container tasks contain a reference to this playbook. + # If so, this is the task phase you want to mark as current + if playbook['playbook'] == current_playbook and playbook['scm'] == current_scm: + task_order = task['data']['order'] + status = task['data']['status'] + url = phantom.build_phantom_rest_url('workflow_task') + '/{}'.format(task['data']['id']) + # If status is not started (statud id 0), move to in progress (status id 2) before moving to complete (status id 1) + if status == 0: + data = {'status': 2} + phantom.requests.post(url, data=json.dumps(data), verify=False) + data = {'status': 1} + phantom.set_phase(container=container, phase=task['data']['phase']) + phantom.requests.post(url, data=json.dumps(data), verify=False) + + # Iterate through the other tasks on the current container if a task was updated as indicated by the presence of "task_order" + if task_order: + for task in phantom.get_tasks(container=container): + # If another task matches the updated task's order + 1, then update it as well + if task['data']['order'] == task_order + 1: + data = {'status': 2} + url = phantom.build_phantom_rest_url('workflow_task') + '/{}'.format(task['data']['id']) + phantom.requests.post(url, data=json.dumps(data), verify=False) + + + ################################################################################ + ## Custom Code End + ################################################################################ + + return + + +def on_finish(container, summary): + phantom.debug("on_finish() called") + + ################################################################################ + ## Custom Code Start + ################################################################################ + + # This function is called after all actions are completed. + # summary of all the action and/or all details of actions + # can be collected here. + + # summary_json = phantom.get_summary() + # if 'result' in summary_json: + # for action_result in summary_json['result']: + # if 'action_run_id' in action_result: + # action_results = phantom.get_action_results(action_run_id=action_result['action_run_id'], result_data=False, flatten=False) + # phantom.debug(action_results) + + ################################################################################ + ## Custom Code End + ################################################################################ + + return \ No newline at end of file diff --git a/playbooks/start_investigation.yml b/playbooks/start_investigation.yml new file mode 100644 index 0000000000..d6f4890ba2 --- /dev/null +++ b/playbooks/start_investigation.yml @@ -0,0 +1,16 @@ +name: Start Investigation +id: fc5adc76-f3ab-4cb0-5f6f-63bc3493fd46 +version: 1 +date: '2021-10-07' +author: Kelby Shelton, Splunk +type: Investigation +description: Handle cases in Splunk SOAR with consistency that only automation can provide. This playbook ensures that cases are being assigned to analysts, and follow on work gets started. +playbook: start_investigation +how_to_implement: "This is a playbook that is designed to be recommended within a workbook. If used in this manner, the playbook will assign the user that launched the playbook as the owner of the event, move the event status to \"Open\", and complete the workbook task where this playbook appears. If there is a task after the one where the playbook appears (within the same phase), it will set the next task to \"In Progress.\"" +references: [] +app_list: [] +tags: + platform_tags: [] + playbook_fields: [] + product: + - Splunk SOAR \ No newline at end of file From b51d59e9ae81d8cd768b42c79ebc8c1fc035430c Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 16:10:41 -0600 Subject: [PATCH 07/16] Updated formatting --- docs/_pages/detections.md | 4 ++-- docs/_pages/playbooks.md | 5 +++++ ...022-01-20-powershell_remove_windows_defender_directory.md | 2 +- docs/_stories/credential_dumping.md | 2 +- docs/_stories/windows_defense_evasion_tactics.md | 2 +- docs/_stories/windows_persistence_techniques.md | 2 +- docs/index.markdown | 2 +- playbooks/trustar_enrich_indicators.yml | 2 +- 8 files changed, 13 insertions(+), 8 deletions(-) diff --git a/docs/_pages/detections.md b/docs/_pages/detections.md index ed41eae6f1..1eb6bb1f37 100644 --- a/docs/_pages/detections.md +++ b/docs/_pages/detections.md @@ -61,8 +61,8 @@ sidebar: | [Attempt To Delete Services](/endpoint/attempt_to_delete_services/) | [Service Stop](/tags/#service-stop), [Create or Modify System Process](/tags/#create-or-modify-system-process), [Windows Service](/tags/#windows-service) | TTP | | [Attempt To Disable Services](/endpoint/attempt_to_disable_services/) | [Service Stop](/tags/#service-stop) | TTP | | [Attempt To Stop Security Service](/endpoint/attempt_to_stop_security_service/) | [Disable or Modify Tools](/tags/#disable-or-modify-tools), [Impair Defenses](/tags/#impair-defenses) | TTP | -| [Attempted Credential Dump From Registry via Reg exe](/endpoint/attempted_credential_dump_from_registry_via_reg_exe/) | [OS Credential Dumping](/tags/#os-credential-dumping), [Security Account Manager](/tags/#security-account-manager) | TTP | | [Attempted Credential Dump From Registry via Reg exe](/endpoint/attempted_credential_dump_from_registry_via_reg_exe/) | [Security Account Manager](/tags/#security-account-manager), [OS Credential Dumping](/tags/#os-credential-dumping) | TTP | +| [Attempted Credential Dump From Registry via Reg exe](/endpoint/attempted_credential_dump_from_registry_via_reg_exe/) | [OS Credential Dumping](/tags/#os-credential-dumping), [Security Account Manager](/tags/#security-account-manager) | TTP | | [Auto Admin Logon Registry Entry](/endpoint/auto_admin_logon_registry_entry/) | [Credentials in Registry](/tags/#credentials-in-registry), [Unsecured Credentials](/tags/#unsecured-credentials) | TTP | | [BCDEdit Failure Recovery Modification](/endpoint/bcdedit_failure_recovery_modification/) | [Inhibit System Recovery](/tags/#inhibit-system-recovery) | TTP | | [BCDEdit Failure Recovery Modification](/endpoint/bcdedit_failure_recovery_modification/) | [Inhibit System Recovery](/tags/#inhibit-system-recovery) | TTP | @@ -357,8 +357,8 @@ sidebar: | [Gsuite Suspicious Shared File Name](/cloud/gsuite_suspicious_shared_file_name/) | [Spearphishing Attachment](/tags/#spearphishing-attachment), [Phishing](/tags/#phishing) | Anomaly | | [Gsuite suspicious calendar invite](/cloud/gsuite_suspicious_calendar_invite/) | [Phishing](/tags/#phishing) | Hunting | | [Hide User Account From Sign-In Screen](/endpoint/hide_user_account_from_sign-in_screen/) | [Disable or Modify Tools](/tags/#disable-or-modify-tools), [Impair Defenses](/tags/#impair-defenses) | TTP | -| [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification), [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification) | TTP | | [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification), [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification) | TTP | +| [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification), [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification) | TTP | | [High File Deletion Frequency](/endpoint/high_file_deletion_frequency/) | [Data Destruction](/tags/#data-destruction) | Anomaly | | [High File Deletion Frequency](/endpoint/high_file_deletion_frequency/) | [Data Destruction](/tags/#data-destruction) | Anomaly | | [High Frequency Copy Of Files In Network Share](/endpoint/high_frequency_copy_of_files_in_network_share/) | [Transfer Data to Cloud Account](/tags/#transfer-data-to-cloud-account) | Anomaly | diff --git a/docs/_pages/playbooks.md b/docs/_pages/playbooks.md index eb535f5e60..14de045a7a 100644 --- a/docs/_pages/playbooks.md +++ b/docs/_pages/playbooks.md @@ -10,6 +10,8 @@ sidebar: | Name | Detections | Type | | --------| ---------- | ----------- | +| [AWS Disable User Accounts](/playbooks/aws_disable_user_accounts/)| None | Input | +| [AWS Find Inactive Users](/playbooks/aws_find_inactive_users/)| None | Investigation | | [Active Directory Reset password](/playbooks/active_directory_reset_password/)| None | Response | | [Block Indicators](/playbooks/block_indicators/)| None | Response | | [Crowdstrike Malware Triage](/playbooks/crowdstrike_malware_triage/)| None | Response | @@ -36,3 +38,6 @@ sidebar: | [Risk Notable Protect Assets and Users](/playbooks/risk_notable_protect_assets_and_users/)| None | Response | | [Risk Notable Review Indicators](/playbooks/risk_notable_review_indicators/)| None | Response | | [Risk Notable Verdict](/playbooks/risk_notable_verdict/)| None | Response | +| [Start Investigation](/playbooks/start_investigation/)| None | Investigation | +| [Threat Intel Investigate](/playbooks/threat_intel_investigate/)| None | Investigation | +| [TruSTAR Enrich Indicators](/playbooks/trustar_enrich_indicators/)| None | Input | diff --git a/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md b/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md index 4a9c14f23f..9fdbbf6356 100644 --- a/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md +++ b/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md @@ -44,7 +44,7 @@ This analytic will identify a suspicious PowerShell command used to delete the W #### Search ``` -`powershell` EventCode=4104 Message = "* rmdir *" OR Message = "*\\Microsoft\\Windows Defender*" +`powershell` EventCode=4104 Message = "* rmdir *" AND Message = "*\\Microsoft\\Windows Defender*" | stats count min(_time) as firstTime max(_time) as lastTime by EventCode Message ComputerName User | `security_content_ctime(firstTime)` | `security_content_ctime(lastTime)` diff --git a/docs/_stories/credential_dumping.md b/docs/_stories/credential_dumping.md index a3f454b5e4..99b0828fa0 100644 --- a/docs/_stories/credential_dumping.md +++ b/docs/_stories/credential_dumping.md @@ -35,8 +35,8 @@ The detection searches in this Analytic Story monitor access to the Local Securi | Name | Technique | Type | | ----------- | ----------- |--------------| | [Access LSASS Memory for Dump Creation](/endpoint/access_lsass_memory_for_dump_creation/) | [LSASS Memory](/tags/#lsass-memory), [OS Credential Dumping](/tags/#os-credential-dumping) | TTP | -| [Attempted Credential Dump From Registry via Reg exe](/endpoint/attempted_credential_dump_from_registry_via_reg_exe/) | [OS Credential Dumping](/tags/#os-credential-dumping), [Security Account Manager](/tags/#security-account-manager) | TTP | | [Attempted Credential Dump From Registry via Reg exe](/endpoint/attempted_credential_dump_from_registry_via_reg_exe/) | [Security Account Manager](/tags/#security-account-manager), [OS Credential Dumping](/tags/#os-credential-dumping) | TTP | +| [Attempted Credential Dump From Registry via Reg exe](/endpoint/attempted_credential_dump_from_registry_via_reg_exe/) | [OS Credential Dumping](/tags/#os-credential-dumping), [Security Account Manager](/tags/#security-account-manager) | TTP | | [Create Remote Thread into LSASS](/endpoint/create_remote_thread_into_lsass/) | [LSASS Memory](/tags/#lsass-memory), [OS Credential Dumping](/tags/#os-credential-dumping) | TTP | | [Creation of Shadow Copy](/endpoint/creation_of_shadow_copy/) | [NTDS](/tags/#ntds), [OS Credential Dumping](/tags/#os-credential-dumping) | TTP | | [Creation of Shadow Copy with wmic and powershell](/endpoint/creation_of_shadow_copy_with_wmic_and_powershell/) | [NTDS](/tags/#ntds), [OS Credential Dumping](/tags/#os-credential-dumping) | TTP | diff --git a/docs/_stories/windows_defense_evasion_tactics.md b/docs/_stories/windows_defense_evasion_tactics.md index 670239b265..001a481dac 100644 --- a/docs/_stories/windows_defense_evasion_tactics.md +++ b/docs/_stories/windows_defense_evasion_tactics.md @@ -51,8 +51,8 @@ Defense evasion is a tactic--identified in the MITRE ATT&CK framework--that adve | [Excessive number of service control start as disabled](/endpoint/excessive_number_of_service_control_start_as_disabled/) | [Disable or Modify Tools](/tags/#disable-or-modify-tools), [Impair Defenses](/tags/#impair-defenses) | Anomaly | | [Firewall Allowed Program Enable](/endpoint/firewall_allowed_program_enable/) | [Disable or Modify System Firewall](/tags/#disable-or-modify-system-firewall), [Impair Defenses](/tags/#impair-defenses) | Anomaly | | [FodHelper UAC Bypass](/endpoint/fodhelper_uac_bypass/) | [Modify Registry](/tags/#modify-registry), [Bypass User Account Control](/tags/#bypass-user-account-control), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | TTP | -| [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification), [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification) | TTP | | [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification), [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification) | TTP | +| [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification), [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification) | TTP | | [NET Profiler UAC bypass](/endpoint/net_profiler_uac_bypass/) | [Bypass User Account Control](/tags/#bypass-user-account-control), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | TTP | | [Powershell Windows Defender Exclusion Commands](/endpoint/powershell_windows_defender_exclusion_commands/) | [Disable or Modify Tools](/tags/#disable-or-modify-tools), [Impair Defenses](/tags/#impair-defenses) | TTP | | [SLUI RunAs Elevated](/endpoint/slui_runas_elevated/) | [Bypass User Account Control](/tags/#bypass-user-account-control), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | TTP | diff --git a/docs/_stories/windows_persistence_techniques.md b/docs/_stories/windows_persistence_techniques.md index b40b5b83ea..6643cec58e 100644 --- a/docs/_stories/windows_persistence_techniques.md +++ b/docs/_stories/windows_persistence_techniques.md @@ -36,8 +36,8 @@ Maintaining persistence is one of the first steps taken by attackers after the i | [Change Default File Association](/endpoint/change_default_file_association/) | [Change Default File Association](/tags/#change-default-file-association), [Event Triggered Execution](/tags/#event-triggered-execution) | TTP | | [Detect Path Interception By Creation Of program exe](/endpoint/detect_path_interception_by_creation_of_program_exe/) | [Path Interception by Unquoted Path](/tags/#path-interception-by-unquoted-path), [Hijack Execution Flow](/tags/#hijack-execution-flow) | TTP | | [ETW Registry Disabled](/endpoint/etw_registry_disabled/) | [Indicator Blocking](/tags/#indicator-blocking), [Trusted Developer Utilities Proxy Execution](/tags/#trusted-developer-utilities-proxy-execution), [Impair Defenses](/tags/#impair-defenses) | TTP | -| [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification), [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification) | TTP | | [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification), [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification) | TTP | +| [Hiding Files And Directories With Attrib exe](/endpoint/hiding_files_and_directories_with_attrib_exe/) | [File and Directory Permissions Modification](/tags/#file-and-directory-permissions-modification), [Windows File and Directory Permissions Modification](/tags/#windows-file-and-directory-permissions-modification) | TTP | | [Logon Script Event Trigger Execution](/endpoint/logon_script_event_trigger_execution/) | [Boot or Logon Initialization Scripts](/tags/#boot-or-logon-initialization-scripts), [Logon Script (Windows)](/tags/#logon-script-(windows)) | TTP | | [Monitor Registry Keys for Print Monitors](/endpoint/monitor_registry_keys_for_print_monitors/) | [Port Monitors](/tags/#port-monitors), [Boot or Logon Autostart Execution](/tags/#boot-or-logon-autostart-execution) | TTP | | [Print Processor Registry Autostart](/endpoint/print_processor_registry_autostart/) | [Print Processors](/tags/#print-processors), [Boot or Logon Autostart Execution](/tags/#boot-or-logon-autostart-execution) | TTP | diff --git a/docs/index.markdown b/docs/index.markdown index 3e11bdf01e..7622fc4a3a 100644 --- a/docs/index.markdown +++ b/docs/index.markdown @@ -28,7 +28,7 @@ feature_row: - image_path: /static/feature_playbooks.png alt: "100% free" title: "Playbooks" - excerpt: "See all **26** sets of steps 🐾 to automatically response to a threat." + excerpt: "See all **31** sets of steps 🐾 to automatically response to a threat." url: "/playbooks" btn_class: "btn--primary" btn_label: "Explore" diff --git a/playbooks/trustar_enrich_indicators.yml b/playbooks/trustar_enrich_indicators.yml index 1e86c63513..02c29cf4f5 100644 --- a/playbooks/trustar_enrich_indicators.yml +++ b/playbooks/trustar_enrich_indicators.yml @@ -6,7 +6,7 @@ author: Philip Royer, Splunk type: Input description: "Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as \"threat_intel_investigate\"." playbook: trustar_enrich_indicators -how_to_implement: "To use this playbook as a sub-playbook of \"threat_intel_investigate\", copy it to the local git repository and make sure it has the tags \"investigate\" and \"threat_intel\". To use this playbook as a sub-playbook of \"risk_notable_enrich\", copy it to local and make sure it has the tags \"investigate\" and \"risk_notable\"\n - To control the types of indicators processed by this playbook, change the data types of the \"indicators\" input\"" +how_to_implement: "To use this playbook as a sub-playbook of \"threat_intel_investigate\", copy it to the local git repository and make sure it has the tags \"investigate\" and \"threat_intel\". To use this playbook as a sub-playbook of \"risk_notable_enrich\", copy it to local and make sure it has the tags \"investigate\" and \"risk_notable\" To control the types of indicators processed by this playbook, change the data types of the \"indicators\" input\"" references: - https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html app_list: From 17fe1d3f19cd156ace8c02c88c685920a8cb4aba Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Wed, 2 Feb 2022 16:12:37 -0600 Subject: [PATCH 08/16] Updated docs --- docs/_playbooks/aws_disable_user_accounts.md | 45 ++++++++++++++++++++ docs/_playbooks/aws_find_inactive_users.md | 45 ++++++++++++++++++++ docs/_playbooks/start_investigation.md | 40 +++++++++++++++++ docs/_playbooks/threat_intel_investigate.md | 43 +++++++++++++++++++ docs/_playbooks/trustar_enrich_indicators.md | 45 ++++++++++++++++++++ 5 files changed, 218 insertions(+) create mode 100644 docs/_playbooks/aws_disable_user_accounts.md create mode 100644 docs/_playbooks/aws_find_inactive_users.md create mode 100644 docs/_playbooks/start_investigation.md create mode 100644 docs/_playbooks/threat_intel_investigate.md create mode 100644 docs/_playbooks/trustar_enrich_indicators.md diff --git a/docs/_playbooks/aws_disable_user_accounts.md b/docs/_playbooks/aws_disable_user_accounts.md new file mode 100644 index 0000000000..bb6a07e94d --- /dev/null +++ b/docs/_playbooks/aws_disable_user_accounts.md @@ -0,0 +1,45 @@ +--- +title: "AWS Disable User Accounts" +last_modified_at: 2021-11-01 +toc: true +toc_label: "" +tags: + - Input + - Splunk SOAR + - AWS IAM +--- + +[Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} + +#### Description + +Disable a list of AWS IAM user accounts. After checking the list of accounts against an allowlist and confirming with an analyst, each account is disabled. The change can be reversed with the `enable user` action. + +- **Type**: Input +- **Product**: Splunk SOAR +- **Apps**: [AWS IAM](https://splunkbase.splunk.com/apps/#/search/AWS IAM/product/soar) +- **Last Updated**: 2021-11-01 +- **Author**: Philip Royer, Splunk +- **ID**: fc0edc75-ff2b-48c0-5f6f-63da6423fd63 + +#### Associated Detections + + +#### How To Implement +This playbook works with the community playbook aws_find_inactive_users using the usernames discovered by that playbook. Change the prompt block from admin to the correct analyst user or role. You should create a custom list called aws_inactive_user_allowlist. Any user names in that list will be ignored by this playbook. + +#### Playbooks +![](https://raw.githubusercontent.com/splunk/security_content/develop/playbooks/aws_disable_user_accounts.png) + +#### Required field +* aws_username + + +#### Reference + +* [https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-finding-and-disabling-inactive-users-on-aws.html](https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-finding-and-disabling-inactive-users-on-aws.html) + + + + +[*source*](https://github.com/splunk/security_content/tree/develop/playbooks/aws_disable_user_accounts.yml) \| *version*: **1** \ No newline at end of file diff --git a/docs/_playbooks/aws_find_inactive_users.md b/docs/_playbooks/aws_find_inactive_users.md new file mode 100644 index 0000000000..13ecf6926d --- /dev/null +++ b/docs/_playbooks/aws_find_inactive_users.md @@ -0,0 +1,45 @@ +--- +title: "AWS Find Inactive Users" +last_modified_at: 2021-11-01 +toc: true +toc_label: "" +tags: + - Investigation + - Splunk SOAR + - AWS IAM + - Phantom +--- + +[Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} + +#### Description + +Find AWS accounts that have not been used for a long time (90 days by default). For each unused account, gather additional group and policy information and create an artifact to enable further automation or manual action. + +- **Type**: Investigation +- **Product**: Splunk SOAR +- **Apps**: [AWS IAM](https://splunkbase.splunk.com/apps/#/search/AWS IAM/product/soar), [Phantom](https://splunkbase.splunk.com/apps/#/search/Phantom/product/soar) +- **Last Updated**: 2021-11-01 +- **Author**: Philip Royer, Splunk +- **ID**: fc0edc76-ff2b-48b0-5f6f-63da6423fd63 + +#### Associated Detections + + +#### How To Implement +This playbook is meant to run on a Timer, such as once per week. To adjust the lookback period away from the default, change the number of days to a different negative number in the 'calculate_start_time' block. Note that this playbook will ignore accounts where the password has never been used. These could be unused human accounts or they could be API accounts where the access keys are actively used. + +#### Playbooks +![](https://raw.githubusercontent.com/splunk/security_content/develop/playbooks/aws_find_inactive_users.png) + +#### Required field + + +#### Reference + +* [https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-finding-and-disabling-inactive-users-on-aws.html](https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-finding-and-disabling-inactive-users-on-aws.html) + + + + +[*source*](https://github.com/splunk/security_content/tree/develop/playbooks/aws_find_inactive_users.yml) \| *version*: **1** \ No newline at end of file diff --git a/docs/_playbooks/start_investigation.md b/docs/_playbooks/start_investigation.md new file mode 100644 index 0000000000..7be4450648 --- /dev/null +++ b/docs/_playbooks/start_investigation.md @@ -0,0 +1,40 @@ +--- +title: "Start Investigation" +last_modified_at: 2021-10-07 +toc: true +toc_label: "" +tags: + - Investigation + - Splunk SOAR +--- + +[Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} + +#### Description + +Handle cases in Splunk SOAR with consistency that only automation can provide. This playbook ensures that cases are being assigned to analysts, and follow on work gets started. + +- **Type**: Investigation +- **Product**: Splunk SOAR +- **Apps**: +- **Last Updated**: 2021-10-07 +- **Author**: Kelby Shelton, Splunk +- **ID**: fc5adc76-f3ab-4cb0-5f6f-63bc3493fd46 + +#### Associated Detections + + +#### How To Implement +This is a playbook that is designed to be recommended within a workbook. If used in this manner, the playbook will assign the user that launched the playbook as the owner of the event, move the event status to "Open", and complete the workbook task where this playbook appears. If there is a task after the one where the playbook appears (within the same phase), it will set the next task to "In Progress." + +#### Playbooks +![](https://raw.githubusercontent.com/splunk/security_content/develop/playbooks/start_investigation.png) + +#### Required field + + +#### Reference + + + +[*source*](https://github.com/splunk/security_content/tree/develop/playbooks/start_investigation.yml) \| *version*: **1** \ No newline at end of file diff --git a/docs/_playbooks/threat_intel_investigate.md b/docs/_playbooks/threat_intel_investigate.md new file mode 100644 index 0000000000..583d9fb9eb --- /dev/null +++ b/docs/_playbooks/threat_intel_investigate.md @@ -0,0 +1,43 @@ +--- +title: "Threat Intel Investigate" +last_modified_at: 2021-11-30 +toc: true +toc_label: "" +tags: + - Investigation + - Splunk SOAR +--- + +[Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} + +#### Description + +This parent playbook collects data and launches appropriate child playbooks to gather threat intelligence information about indicators. After the child playbooks have run, this playbook posts the notes to the container and prompts the analyst to add tags to each enriched indicator based on the intelligence provided. + +- **Type**: Investigation +- **Product**: Splunk SOAR +- **Apps**: +- **Last Updated**: 2021-11-30 +- **Author**: Philip Royer, Splunk +- **ID**: fc5adc76-fd2b-48b0-5f6f-63bc3493fd46 + +#### Associated Detections + + +#### How To Implement +The prompt is currently sent to the Administrator role, but should be changed to the appropriate user and role. The "list_investigate_playbooks" block fetches playbooks from the local repository with the tags "investigate" and "threat_intel" by default. The playbook "trustar_enrich_indicators" is meant to be used by this playbook, and others can be created to replace it or work alongside it. To add a new input playbook, copy it to the local repository and give it the necessary tags. Define a playbook input with the name "indicators" and the data type matching the types of indicators the playbook can process. To add a new tag to the preconfigured list, add it to the "choices" array in the "threat_intel_indicator_review" prompt block, and add it to the "response_to_tag_map" in "process_indicators". + +#### Playbooks +![](https://raw.githubusercontent.com/splunk/security_content/develop/playbooks/threat_intel_investigate.png) + +#### Required field + + +#### Reference + +* [https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html](https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html) + + + + +[*source*](https://github.com/splunk/security_content/tree/develop/playbooks/threat_intel_investigate.yml) \| *version*: **1** \ No newline at end of file diff --git a/docs/_playbooks/trustar_enrich_indicators.md b/docs/_playbooks/trustar_enrich_indicators.md new file mode 100644 index 0000000000..aac5b9ca17 --- /dev/null +++ b/docs/_playbooks/trustar_enrich_indicators.md @@ -0,0 +1,45 @@ +--- +title: "TruSTAR Enrich Indicators" +last_modified_at: 2021-11-24 +toc: true +toc_label: "" +tags: + - Input + - Splunk SOAR + - TruSTAR +--- + +[Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} + +#### Description + +Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as "threat_intel_investigate". + +- **Type**: Input +- **Product**: Splunk SOAR +- **Apps**: [TruSTAR](https://splunkbase.splunk.com/apps/#/search/TruSTAR/product/soar) +- **Last Updated**: 2021-11-24 +- **Author**: Philip Royer, Splunk +- **ID**: fc5adc76-fd2b-48b0-5f6f-63da6423fd63 + +#### Associated Detections + + +#### How To Implement +To use this playbook as a sub-playbook of "threat_intel_investigate", copy it to the local git repository and make sure it has the tags "investigate" and "threat_intel". To use this playbook as a sub-playbook of "risk_notable_enrich", copy it to local and make sure it has the tags "investigate" and "risk_notable" To control the types of indicators processed by this playbook, change the data types of the "indicators" input" + +#### Playbooks +![](https://raw.githubusercontent.com/splunk/security_content/develop/playbooks/trustar_enrich_indicators.png) + +#### Required field +* indicators + + +#### Reference + +* [https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html](https://www.splunk.com/en_us/blog/security/TruSTAR-Enrich-Indicators-soar-in-seconds.html) + + + + +[*source*](https://github.com/splunk/security_content/tree/develop/playbooks/trustar_enrich_indicators.yml) \| *version*: **1** \ No newline at end of file From 4501e30374b00cddae0143b03fde3447d1d75d0b Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Thu, 3 Feb 2022 10:56:06 -0600 Subject: [PATCH 09/16] Fixed underlying playbook ymls --- playbooks/aws_disable_user_accounts.yml | 4 ++-- playbooks/trustar_enrich_indicators.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/playbooks/aws_disable_user_accounts.yml b/playbooks/aws_disable_user_accounts.yml index 0df08ea690..e249e1345f 100644 --- a/playbooks/aws_disable_user_accounts.yml +++ b/playbooks/aws_disable_user_accounts.yml @@ -3,7 +3,7 @@ id: fc0edc75-ff2b-48c0-5f6f-63da6423fd63 version: 1 date: '2021-11-01' author: Philip Royer, Splunk -type: Input +type: Response description: "Disable a list of AWS IAM user accounts. After checking the list of accounts against an allowlist and confirming with an analyst, each account is disabled. The change can be reversed with the `enable user` action." playbook: aws_disable_user_accounts how_to_implement: "This playbook works with the community playbook aws_find_inactive_users using the usernames discovered by that playbook. Change the prompt block from admin to the correct analyst user or role. You should create a custom list called aws_inactive_user_allowlist. Any user names in that list will be ignored by this playbook." @@ -13,7 +13,7 @@ app_list: - "AWS IAM" tags: platform_tags: - - Investigation + - Response - Cloud playbook_fields: - aws_username diff --git a/playbooks/trustar_enrich_indicators.yml b/playbooks/trustar_enrich_indicators.yml index 02c29cf4f5..9fbb284330 100644 --- a/playbooks/trustar_enrich_indicators.yml +++ b/playbooks/trustar_enrich_indicators.yml @@ -3,7 +3,7 @@ id: fc5adc76-fd2b-48b0-5f6f-63da6423fd63 version: 1 date: '2021-11-24' author: Philip Royer, Splunk -type: Input +type: Investigation description: "Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as \"threat_intel_investigate\"." playbook: trustar_enrich_indicators how_to_implement: "To use this playbook as a sub-playbook of \"threat_intel_investigate\", copy it to the local git repository and make sure it has the tags \"investigate\" and \"threat_intel\". To use this playbook as a sub-playbook of \"risk_notable_enrich\", copy it to local and make sure it has the tags \"investigate\" and \"risk_notable\" To control the types of indicators processed by this playbook, change the data types of the \"indicators\" input\"" From 2657b68a23a6ee987714d83244638f0b100a0208 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Thu, 3 Feb 2022 11:09:14 -0600 Subject: [PATCH 10/16] Updated ymls & j2 templates for changes --- bin/jinja2_templates/doc_index.j2 | 2 +- bin/jinja2_templates/doc_playbooks.j2 | 3 +++ playbooks/activedirectory_reset_password.yml | 3 +-- playbooks/aws_disable_user_accounts.yml | 1 - playbooks/aws_find_inactive_users.yml | 1 - playbooks/block_indicators.yml | 3 +-- playbooks/crowdstrike_malware_triage.yml | 3 +-- playbooks/delete_detected_files.yml | 3 +-- playbooks/email_notification_for_malware.yml | 3 +-- playbooks/internal_host_splunk_investigate_log4j.yml | 3 +-- playbooks/internal_host_ssh_investigate.yml | 3 +-- playbooks/internal_host_ssh_log4j_investigate.yml | 3 +-- playbooks/internal_host_ssh_log4j_respond.yml | 3 +-- playbooks/internal_host_winrm_investigate.yml | 3 +-- playbooks/internal_host_winrm_log4j_investigate.yml | 3 +-- playbooks/internal_host_winrm_log4j_respond.yml | 5 ++--- playbooks/log4j_investigate.yml | 3 +-- playbooks/log4j_respond.yml | 3 +-- playbooks/malware_hunt_and_contain.yml | 3 +-- playbooks/ransomware_investigate_and_contain.yml | 1 - playbooks/threat_intel_investigate.yml | 1 - playbooks/trustar_enrich_indicators.yml | 1 - 22 files changed, 20 insertions(+), 37 deletions(-) diff --git a/bin/jinja2_templates/doc_index.j2 b/bin/jinja2_templates/doc_index.j2 index 68c229da49..b2b43484e9 100644 --- a/bin/jinja2_templates/doc_index.j2 +++ b/bin/jinja2_templates/doc_index.j2 @@ -28,7 +28,7 @@ feature_row: - image_path: /static/feature_playbooks.png alt: "100% free" title: "Playbooks" - excerpt: "See all **{{ playbook_count }}** sets of steps 🐾 to automatically response to a threat." + excerpt: "See all **{{ playbook_count }}** automated investigation and response playbooks." url: "/playbooks" btn_class: "btn--primary" btn_label: "Explore" diff --git a/bin/jinja2_templates/doc_playbooks.j2 b/bin/jinja2_templates/doc_playbooks.j2 index c3c51f6958..f8e310aacd 100644 --- a/bin/jinja2_templates/doc_playbooks.j2 +++ b/bin/jinja2_templates/doc_playbooks.j2 @@ -11,6 +11,9 @@ tags: {%- for app in playbook.app_list %} - {{ app }} {%- endfor %} +{%- for tag in playbook.tags.platform_tags %} + - {{ tag }} +{%- endfor %} --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/playbooks/activedirectory_reset_password.yml b/playbooks/activedirectory_reset_password.yml index 103fee5823..93bf24ddb3 100644 --- a/playbooks/activedirectory_reset_password.yml +++ b/playbooks/activedirectory_reset_password.yml @@ -11,8 +11,7 @@ references: [] app_list: - "LDAP" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: - compromisedUserName product: diff --git a/playbooks/aws_disable_user_accounts.yml b/playbooks/aws_disable_user_accounts.yml index e249e1345f..c09f103fed 100644 --- a/playbooks/aws_disable_user_accounts.yml +++ b/playbooks/aws_disable_user_accounts.yml @@ -13,7 +13,6 @@ app_list: - "AWS IAM" tags: platform_tags: - - Response - Cloud playbook_fields: - aws_username diff --git a/playbooks/aws_find_inactive_users.yml b/playbooks/aws_find_inactive_users.yml index 9bccb975a1..7e0fabfdc3 100644 --- a/playbooks/aws_find_inactive_users.yml +++ b/playbooks/aws_find_inactive_users.yml @@ -14,7 +14,6 @@ app_list: - "Phantom" tags: platform_tags: - - Investigation - Cloud playbook_fields: [] product: diff --git a/playbooks/block_indicators.yml b/playbooks/block_indicators.yml index 9caf9a527c..b1686ff23d 100644 --- a/playbooks/block_indicators.yml +++ b/playbooks/block_indicators.yml @@ -13,8 +13,7 @@ app_list: - "CarbonBlack Response" - "OpenDNS Umbrella" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: - destinationDnsDomain - destinationAddress diff --git a/playbooks/crowdstrike_malware_triage.yml b/playbooks/crowdstrike_malware_triage.yml index d24da6eed5..292b830119 100644 --- a/playbooks/crowdstrike_malware_triage.yml +++ b/playbooks/crowdstrike_malware_triage.yml @@ -11,8 +11,7 @@ references: [] app_list: - "Crowdstrike OAuth" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: - filePath - destinationAddress diff --git a/playbooks/delete_detected_files.yml b/playbooks/delete_detected_files.yml index db95e2d059..3e41aae6f5 100644 --- a/playbooks/delete_detected_files.yml +++ b/playbooks/delete_detected_files.yml @@ -15,8 +15,7 @@ tags: - Active Directory Lateral Movement detections: - Executable File Written in Administrative SMB Share - platform_tags: - - Response + platform_tags: [] playbook_fields: - filePath - destinationAddress diff --git a/playbooks/email_notification_for_malware.yml b/playbooks/email_notification_for_malware.yml index a6c5b70531..6afbc2d9f8 100644 --- a/playbooks/email_notification_for_malware.yml +++ b/playbooks/email_notification_for_malware.yml @@ -14,8 +14,7 @@ app_list: - "CarbonBlack Response" - "SMTP" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: - fileHash - vaultId diff --git a/playbooks/internal_host_splunk_investigate_log4j.yml b/playbooks/internal_host_splunk_investigate_log4j.yml index 2ca6f06546..59c4fec939 100644 --- a/playbooks/internal_host_splunk_investigate_log4j.yml +++ b/playbooks/internal_host_splunk_investigate_log4j.yml @@ -14,8 +14,7 @@ app_list: tags: analytic_story: - Log4Shell CVE-2021-44228 - platform_tags: - - Response + platform_tags: [] playbook_fields: - hostName - destinationAddress diff --git a/playbooks/internal_host_ssh_investigate.yml b/playbooks/internal_host_ssh_investigate.yml index e29776f7a3..0604c74c52 100644 --- a/playbooks/internal_host_ssh_investigate.yml +++ b/playbooks/internal_host_ssh_investigate.yml @@ -11,8 +11,7 @@ references: ["https://github.com/Neo23x0/Fenrir/blob/master/fenrir.sh"] app_list: - "SSH" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: [] product: - Splunk SOAR diff --git a/playbooks/internal_host_ssh_log4j_investigate.yml b/playbooks/internal_host_ssh_log4j_investigate.yml index cc5c6c3669..8d63eb9780 100644 --- a/playbooks/internal_host_ssh_log4j_investigate.yml +++ b/playbooks/internal_host_ssh_log4j_investigate.yml @@ -11,8 +11,7 @@ references: ["https://github.com/Neo23x0/Fenrir/blob/master/fenrir.sh"] app_list: - "SSH" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: [] product: - Splunk SOAR diff --git a/playbooks/internal_host_ssh_log4j_respond.yml b/playbooks/internal_host_ssh_log4j_respond.yml index bc5a2ee28e..e42634649b 100644 --- a/playbooks/internal_host_ssh_log4j_respond.yml +++ b/playbooks/internal_host_ssh_log4j_respond.yml @@ -11,8 +11,7 @@ references: ["https://github.com/Neo23x0/Fenrir/blob/master/fenrir.sh"] app_list: - "SSH" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: [] product: - Splunk SOAR diff --git a/playbooks/internal_host_winrm_investigate.yml b/playbooks/internal_host_winrm_investigate.yml index 55d778ae2c..8db5966975 100644 --- a/playbooks/internal_host_winrm_investigate.yml +++ b/playbooks/internal_host_winrm_investigate.yml @@ -11,8 +11,7 @@ references: [] app_list: - "Windows Remote Management" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: [] product: - Splunk SOAR diff --git a/playbooks/internal_host_winrm_log4j_investigate.yml b/playbooks/internal_host_winrm_log4j_investigate.yml index 7c126b6e90..d90fc2c6f8 100644 --- a/playbooks/internal_host_winrm_log4j_investigate.yml +++ b/playbooks/internal_host_winrm_log4j_investigate.yml @@ -11,8 +11,7 @@ references: ["https://twitter.com/CyberRaiju/status/1469505677580124160"] app_list: - "Windows Remote Management" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: [] product: - Splunk SOAR diff --git a/playbooks/internal_host_winrm_log4j_respond.yml b/playbooks/internal_host_winrm_log4j_respond.yml index b5f3982f9a..1987ff3685 100644 --- a/playbooks/internal_host_winrm_log4j_respond.yml +++ b/playbooks/internal_host_winrm_log4j_respond.yml @@ -3,7 +3,7 @@ id: 32fd9db5-5201-4b2f-b2c2-9299c7b3495d version: 1 date: '2021-12-14' author: Kelby Shelton, Splunk -type: Investigation +type: Response description: Published in response to CVE-2021-44228, this playbook accepts a list of hosts and filenames to remediate on the endpoint. If filenames are provided, the endpoints will be searched and then the user can approve deletion. Then the user is prompted to quarantine the endpoint. playbook: internal_host_winrm_log4j_respond how_to_implement: The winrm asset requires Administrator access to gather certain files. @@ -11,8 +11,7 @@ references: [] app_list: - "Windows Remote Management" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: [] product: - Splunk SOAR diff --git a/playbooks/log4j_investigate.yml b/playbooks/log4j_investigate.yml index 85d6586a42..ba1525dfd8 100644 --- a/playbooks/log4j_investigate.yml +++ b/playbooks/log4j_investigate.yml @@ -16,8 +16,7 @@ references: app_list: [] tags: platform_tags: - - Response - - log4j + - Log4J analytic_story: - Log4Shell CVE-2021-44228 detections: diff --git a/playbooks/log4j_respond.yml b/playbooks/log4j_respond.yml index f7021b753c..ddbb3e6c45 100644 --- a/playbooks/log4j_respond.yml +++ b/playbooks/log4j_respond.yml @@ -16,8 +16,7 @@ references: app_list: [] tags: platform_tags: - - Response - - log4j + - Log4J analytic_story: - Log4Shell CVE-2021-44228 detections: diff --git a/playbooks/malware_hunt_and_contain.yml b/playbooks/malware_hunt_and_contain.yml index fda6970320..9d60cffa84 100644 --- a/playbooks/malware_hunt_and_contain.yml +++ b/playbooks/malware_hunt_and_contain.yml @@ -14,8 +14,7 @@ app_list: - "CarbonBlack Response" - "VirusTotal" tags: - platform_tags: - - Response + platform_tags: [] playbook_fields: - fileHash product: diff --git a/playbooks/ransomware_investigate_and_contain.yml b/playbooks/ransomware_investigate_and_contain.yml index daea66234a..49aaebbb68 100644 --- a/playbooks/ransomware_investigate_and_contain.yml +++ b/playbooks/ransomware_investigate_and_contain.yml @@ -22,7 +22,6 @@ tags: - Conti Common Exec parameter platform_tags: - Ransomware - - Response playbook_fields: - ComputerName - Username diff --git a/playbooks/threat_intel_investigate.yml b/playbooks/threat_intel_investigate.yml index afe3e17ec6..65a3095b34 100644 --- a/playbooks/threat_intel_investigate.yml +++ b/playbooks/threat_intel_investigate.yml @@ -12,7 +12,6 @@ references: app_list: [] tags: platform_tags: - - investigate - threat_intel playbook_fields: [] product: diff --git a/playbooks/trustar_enrich_indicators.yml b/playbooks/trustar_enrich_indicators.yml index 9fbb284330..62e2d30c7e 100644 --- a/playbooks/trustar_enrich_indicators.yml +++ b/playbooks/trustar_enrich_indicators.yml @@ -13,7 +13,6 @@ app_list: - "TruSTAR" tags: platform_tags: - - investigate - threat_intel - risk_notable playbook_fields: From 001d505066e39ed2a8cfff5166ec10774f257201 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Thu, 3 Feb 2022 11:18:44 -0600 Subject: [PATCH 11/16] Another DocGen --- docs/_pages/playbooks.md | 8 ++++---- docs/_playbooks/aws_disable_user_accounts.md | 5 +++-- docs/_playbooks/aws_find_inactive_users.md | 1 + docs/_playbooks/internal_host_winrm_response.md | 4 ++-- docs/_playbooks/log4j_investigate.md | 5 +++-- docs/_playbooks/log4j_respond.md | 1 + docs/_playbooks/ransomware_investigate_and_contain.md | 1 + docs/_playbooks/risk_notable_block_indicators.md | 1 + docs/_playbooks/risk_notable_enrich.md | 1 + docs/_playbooks/risk_notable_import_data.md | 1 + docs/_playbooks/risk_notable_investigate.md | 1 + docs/_playbooks/risk_notable_merge_events.md | 1 + docs/_playbooks/risk_notable_mitigate.md | 1 + docs/_playbooks/risk_notable_preprocess.md | 1 + docs/_playbooks/risk_notable_protect_assets_and_users.md | 1 + docs/_playbooks/risk_notable_review_indicators.md | 1 + docs/_playbooks/risk_notable_verdict.md | 1 + docs/_playbooks/threat_intel_investigate.md | 1 + docs/_playbooks/trustar_enrich_indicators.md | 6 ++++-- docs/index.markdown | 2 +- playbooks/log4j_investigate.yml | 2 +- 21 files changed, 32 insertions(+), 14 deletions(-) diff --git a/docs/_pages/playbooks.md b/docs/_pages/playbooks.md index 14de045a7a..892ea13122 100644 --- a/docs/_pages/playbooks.md +++ b/docs/_pages/playbooks.md @@ -10,7 +10,7 @@ sidebar: | Name | Detections | Type | | --------| ---------- | ----------- | -| [AWS Disable User Accounts](/playbooks/aws_disable_user_accounts/)| None | Input | +| [AWS Disable User Accounts](/playbooks/aws_disable_user_accounts/)| None | Response | | [AWS Find Inactive Users](/playbooks/aws_find_inactive_users/)| None | Investigation | | [Active Directory Reset password](/playbooks/active_directory_reset_password/)| None | Response | | [Block Indicators](/playbooks/block_indicators/)| None | Response | @@ -22,8 +22,8 @@ sidebar: | [Internal Host SSH Log4j Response](/playbooks/internal_host_ssh_log4j_response/)| None | Response | | [Internal Host WinRM Investigate](/playbooks/internal_host_winrm_investigate/)| None | Investigation | | [Internal Host WinRM Log4j Investigate](/playbooks/internal_host_winrm_log4j_investigate/)| None | Investigation | -| [Internal Host WinRM Response](/playbooks/internal_host_winrm_response/)| None | Investigation | -| [Log4j Investigate](/playbooks/log4j_investigate/)|[Curl Download and Bash Execution](/endpoint/curl_download_and_bash_execution/)[Wget Download and Bash Execution](/endpoint/wget_download_and_bash_execution/)[Linux Java Spawning Shell](/endpoint/linux_java_spawning_shell/)[Java Class File download by Java User Agent](/endpoint/java_class_file_download_by_java_user_agent/)[Outbound Network Connection from Java Using Default Ports](/endpoint/outbound_network_connection_from_java_using_default_ports/)[Log4Shell JNDI Payload Injection Attempt](/web/log4shell_jndi_payload_injection_attempt/)[Log4Shell JNDI Payload Injection with Outbound Connection](/web/log4shell_jndi_payload_injection_with_outbound_connection/)[Detect Outbound LDAP Traffic](/network/detect_outbound_ldap_traffic/)| Investigate | +| [Internal Host WinRM Response](/playbooks/internal_host_winrm_response/)| None | Response | +| [Log4j Investigate](/playbooks/log4j_investigate/)|[Curl Download and Bash Execution](/endpoint/curl_download_and_bash_execution/)[Wget Download and Bash Execution](/endpoint/wget_download_and_bash_execution/)[Linux Java Spawning Shell](/endpoint/linux_java_spawning_shell/)[Java Class File download by Java User Agent](/endpoint/java_class_file_download_by_java_user_agent/)[Outbound Network Connection from Java Using Default Ports](/endpoint/outbound_network_connection_from_java_using_default_ports/)[Log4Shell JNDI Payload Injection Attempt](/web/log4shell_jndi_payload_injection_attempt/)[Log4Shell JNDI Payload Injection with Outbound Connection](/web/log4shell_jndi_payload_injection_with_outbound_connection/)[Detect Outbound LDAP Traffic](/network/detect_outbound_ldap_traffic/)| Investigation | | [Log4j Respond](/playbooks/log4j_respond/)|[Curl Download and Bash Execution](/endpoint/curl_download_and_bash_execution/)[Wget Download and Bash Execution](/endpoint/wget_download_and_bash_execution/)[Linux Java Spawning Shell](/endpoint/linux_java_spawning_shell/)[Java Class File download by Java User Agent](/endpoint/java_class_file_download_by_java_user_agent/)[Outbound Network Connection from Java Using Default Ports](/endpoint/outbound_network_connection_from_java_using_default_ports/)[Log4Shell JNDI Payload Injection Attempt](/web/log4shell_jndi_payload_injection_attempt/)[Log4Shell JNDI Payload Injection with Outbound Connection](/web/log4shell_jndi_payload_injection_with_outbound_connection/)[Detect Outbound LDAP Traffic](/network/detect_outbound_ldap_traffic/)| Response | | [Log4j Splunk Investigation](/playbooks/log4j_splunk_investigation/)| None | Investigation | | [Malware Hunt and Contain](/playbooks/malware_hunt_and_contain/)| None | Response | @@ -40,4 +40,4 @@ sidebar: | [Risk Notable Verdict](/playbooks/risk_notable_verdict/)| None | Response | | [Start Investigation](/playbooks/start_investigation/)| None | Investigation | | [Threat Intel Investigate](/playbooks/threat_intel_investigate/)| None | Investigation | -| [TruSTAR Enrich Indicators](/playbooks/trustar_enrich_indicators/)| None | Input | +| [TruSTAR Enrich Indicators](/playbooks/trustar_enrich_indicators/)| None | Investigation | diff --git a/docs/_playbooks/aws_disable_user_accounts.md b/docs/_playbooks/aws_disable_user_accounts.md index bb6a07e94d..0116fd599d 100644 --- a/docs/_playbooks/aws_disable_user_accounts.md +++ b/docs/_playbooks/aws_disable_user_accounts.md @@ -4,9 +4,10 @@ last_modified_at: 2021-11-01 toc: true toc_label: "" tags: - - Input + - Response - Splunk SOAR - AWS IAM + - Cloud --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} @@ -15,7 +16,7 @@ tags: Disable a list of AWS IAM user accounts. After checking the list of accounts against an allowlist and confirming with an analyst, each account is disabled. The change can be reversed with the `enable user` action. -- **Type**: Input +- **Type**: Response - **Product**: Splunk SOAR - **Apps**: [AWS IAM](https://splunkbase.splunk.com/apps/#/search/AWS IAM/product/soar) - **Last Updated**: 2021-11-01 diff --git a/docs/_playbooks/aws_find_inactive_users.md b/docs/_playbooks/aws_find_inactive_users.md index 13ecf6926d..2b87dec545 100644 --- a/docs/_playbooks/aws_find_inactive_users.md +++ b/docs/_playbooks/aws_find_inactive_users.md @@ -8,6 +8,7 @@ tags: - Splunk SOAR - AWS IAM - Phantom + - Cloud --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/internal_host_winrm_response.md b/docs/_playbooks/internal_host_winrm_response.md index e0ae315068..cc6f261e37 100644 --- a/docs/_playbooks/internal_host_winrm_response.md +++ b/docs/_playbooks/internal_host_winrm_response.md @@ -4,7 +4,7 @@ last_modified_at: 2021-12-14 toc: true toc_label: "" tags: - - Investigation + - Response - Splunk SOAR - Windows Remote Management --- @@ -15,7 +15,7 @@ tags: Published in response to CVE-2021-44228, this playbook accepts a list of hosts and filenames to remediate on the endpoint. If filenames are provided, the endpoints will be searched and then the user can approve deletion. Then the user is prompted to quarantine the endpoint. -- **Type**: Investigation +- **Type**: Response - **Product**: Splunk SOAR - **Apps**: [Windows Remote Management](https://splunkbase.splunk.com/apps/#/search/Windows Remote Management/product/soar) - **Last Updated**: 2021-12-14 diff --git a/docs/_playbooks/log4j_investigate.md b/docs/_playbooks/log4j_investigate.md index 33a0c299ff..0fcd192d27 100644 --- a/docs/_playbooks/log4j_investigate.md +++ b/docs/_playbooks/log4j_investigate.md @@ -4,8 +4,9 @@ last_modified_at: 2021-12-14 toc: true toc_label: "" tags: - - Investigate + - Investigation - Splunk SOAR + - Log4J --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} @@ -14,7 +15,7 @@ tags: Published in response to CVE-2021-44228, this playbook and its sub-playbooks can be used to investigate and respond to attacks against hosts running vulnerable Java applications which use log4j. Between the parent playbook and seven sub-playbooks, each potentially compromised host found in Splunk Enteprise can be investigated and the risk can be mitigated using SSH for unix systems and WinRM for Windows systems. -- **Type**: Investigate +- **Type**: Investigation - **Product**: Splunk SOAR - **Apps**: - **Last Updated**: 2021-12-14 diff --git a/docs/_playbooks/log4j_respond.md b/docs/_playbooks/log4j_respond.md index e0d3abe546..759c26a471 100644 --- a/docs/_playbooks/log4j_respond.md +++ b/docs/_playbooks/log4j_respond.md @@ -6,6 +6,7 @@ toc_label: "" tags: - Response - Splunk SOAR + - Log4J --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/ransomware_investigate_and_contain.md b/docs/_playbooks/ransomware_investigate_and_contain.md index 8abf8e815a..c8551c0618 100644 --- a/docs/_playbooks/ransomware_investigate_and_contain.md +++ b/docs/_playbooks/ransomware_investigate_and_contain.md @@ -11,6 +11,7 @@ tags: - Palo Alto Networks Firewall - WildFire - Cylance + - Ransomware --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_block_indicators.md b/docs/_playbooks/risk_notable_block_indicators.md index c7f9d98dad..3b75e9b955 100644 --- a/docs/_playbooks/risk_notable_block_indicators.md +++ b/docs/_playbooks/risk_notable_block_indicators.md @@ -7,6 +7,7 @@ tags: - Response - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_enrich.md b/docs/_playbooks/risk_notable_enrich.md index 2fba096826..fba05b8ab2 100644 --- a/docs/_playbooks/risk_notable_enrich.md +++ b/docs/_playbooks/risk_notable_enrich.md @@ -7,6 +7,7 @@ tags: - Investigation - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_import_data.md b/docs/_playbooks/risk_notable_import_data.md index 3fc22126b8..a05f5ef449 100644 --- a/docs/_playbooks/risk_notable_import_data.md +++ b/docs/_playbooks/risk_notable_import_data.md @@ -7,6 +7,7 @@ tags: - Investigation - Splunk SOAR - Splunk + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_investigate.md b/docs/_playbooks/risk_notable_investigate.md index 2214f57c80..2ccd662d03 100644 --- a/docs/_playbooks/risk_notable_investigate.md +++ b/docs/_playbooks/risk_notable_investigate.md @@ -7,6 +7,7 @@ tags: - Investigation - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_merge_events.md b/docs/_playbooks/risk_notable_merge_events.md index bd9e41ec0d..19e4abac0b 100644 --- a/docs/_playbooks/risk_notable_merge_events.md +++ b/docs/_playbooks/risk_notable_merge_events.md @@ -7,6 +7,7 @@ tags: - Investigation - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_mitigate.md b/docs/_playbooks/risk_notable_mitigate.md index 454009f5de..a502c418d4 100644 --- a/docs/_playbooks/risk_notable_mitigate.md +++ b/docs/_playbooks/risk_notable_mitigate.md @@ -10,6 +10,7 @@ tags: - o - n - e + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_preprocess.md b/docs/_playbooks/risk_notable_preprocess.md index c03661f7f2..dee8ffe476 100644 --- a/docs/_playbooks/risk_notable_preprocess.md +++ b/docs/_playbooks/risk_notable_preprocess.md @@ -7,6 +7,7 @@ tags: - Investigation - Splunk SOAR - Splunk + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_protect_assets_and_users.md b/docs/_playbooks/risk_notable_protect_assets_and_users.md index ebb421de69..1cb23f13ed 100644 --- a/docs/_playbooks/risk_notable_protect_assets_and_users.md +++ b/docs/_playbooks/risk_notable_protect_assets_and_users.md @@ -7,6 +7,7 @@ tags: - Response - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_review_indicators.md b/docs/_playbooks/risk_notable_review_indicators.md index 05d1ca7376..dfae32bd39 100644 --- a/docs/_playbooks/risk_notable_review_indicators.md +++ b/docs/_playbooks/risk_notable_review_indicators.md @@ -7,6 +7,7 @@ tags: - Response - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/risk_notable_verdict.md b/docs/_playbooks/risk_notable_verdict.md index b2a5261272..82185a47e2 100644 --- a/docs/_playbooks/risk_notable_verdict.md +++ b/docs/_playbooks/risk_notable_verdict.md @@ -7,6 +7,7 @@ tags: - Response - Splunk SOAR - None + - Risk Notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/threat_intel_investigate.md b/docs/_playbooks/threat_intel_investigate.md index 583d9fb9eb..f5b99eb9ec 100644 --- a/docs/_playbooks/threat_intel_investigate.md +++ b/docs/_playbooks/threat_intel_investigate.md @@ -6,6 +6,7 @@ toc_label: "" tags: - Investigation - Splunk SOAR + - threat_intel --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} diff --git a/docs/_playbooks/trustar_enrich_indicators.md b/docs/_playbooks/trustar_enrich_indicators.md index aac5b9ca17..08c9847a7c 100644 --- a/docs/_playbooks/trustar_enrich_indicators.md +++ b/docs/_playbooks/trustar_enrich_indicators.md @@ -4,9 +4,11 @@ last_modified_at: 2021-11-24 toc: true toc_label: "" tags: - - Input + - Investigation - Splunk SOAR - TruSTAR + - threat_intel + - risk_notable --- [Try in Splunk SOAR](https://www.splunk.com/en_us/software/splunk-security-orchestration-and-automation.html){: .btn .btn--success} @@ -15,7 +17,7 @@ tags: Use TruSTAR to gather threat information about indicators in a SOAR event. Tag the indicators with the normalized priority score from TruSTAR and summarize the findings in an analyst note. This playbook is meant to be used as a child playbook executed by a parent playbook such as "threat_intel_investigate". -- **Type**: Input +- **Type**: Investigation - **Product**: Splunk SOAR - **Apps**: [TruSTAR](https://splunkbase.splunk.com/apps/#/search/TruSTAR/product/soar) - **Last Updated**: 2021-11-24 diff --git a/docs/index.markdown b/docs/index.markdown index 7622fc4a3a..00832b4738 100644 --- a/docs/index.markdown +++ b/docs/index.markdown @@ -28,7 +28,7 @@ feature_row: - image_path: /static/feature_playbooks.png alt: "100% free" title: "Playbooks" - excerpt: "See all **31** sets of steps 🐾 to automatically response to a threat." + excerpt: "See all **31** automated investigation and response playbooks." url: "/playbooks" btn_class: "btn--primary" btn_label: "Explore" diff --git a/playbooks/log4j_investigate.yml b/playbooks/log4j_investigate.yml index ba1525dfd8..01d648e0a4 100644 --- a/playbooks/log4j_investigate.yml +++ b/playbooks/log4j_investigate.yml @@ -3,7 +3,7 @@ id: e609d729-0076-421a-b8f7-9e545d000381 version: 2 date: '2021-12-14' author: Philip Royer, Splunk -type: Investigate +type: Investigation description: Published in response to CVE-2021-44228, this playbook and its sub-playbooks can be used to investigate and respond to attacks against hosts running vulnerable Java applications which use log4j. Between the parent playbook and seven sub-playbooks, each potentially compromised host found in Splunk Enteprise can be investigated and the risk can be mitigated using SSH for unix systems and WinRM for Windows systems. playbook: log4j_investigate how_to_implement: > From 8dee7d8030f0e5568f9103c7b1882269887e7e09 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Fri, 4 Feb 2022 09:25:04 -0600 Subject: [PATCH 12/16] Docs Update --- docs/_pages/adversary_tactics.md | 2 +- docs/_pages/detections.md | 3 +- docs/_pages/stories.md | 2 +- docs/_playbooks/delete_detected_files.md | 1 - docs/_playbooks/log4j_investigate.md | 9 -- docs/_playbooks/log4j_respond.md | 9 -- .../ransomware_investigate_and_contain.md | 1 - ...12-detect_new_login_attempts_to_routers.md | 2 +- ...9-15-no_windows_updates_in_a_time_frame.md | 2 +- ...9-email_attachments_with_lots_of_spaces.md | 2 +- ...s_scanning_for_vulnerable_jboss_servers.md | 2 +- ...cious_requests_to_exploit_jboss_servers.md | 2 +- ...-23-monitor_web_traffic_for_brand_abuse.md | 2 +- ...018-01-05-monitor_email_for_brand_abuse.md | 2 +- ...6-01-detect_large_outbound_icmp_packets.md | 2 +- ...-10-23-wmi_permanent_event_subscription.md | 2 +- ...-10-23-wmi_temporary_event_subscription.md | 2 +- .../2018-12-03-remote_wmi_command_attempt.md | 4 +- .../_posts/2018-12-03-usn_journal_deletion.md | 2 +- .../2018-12-14-file_with_samsam_extension.md | 2 +- .../2018-12-14-samsam_test_file_write.md | 2 +- ..._servers_executing_suspicious_processes.md | 2 +- ...5-08-unusually_long_command_line_-_mltk.md | 2 +- .../2019-12-10-creation_of_shadow_copy.md | 2 +- ...-01-22-dns_query_length_outliers_-_mltk.md | 2 +- ...20-02-07-macos_-_re-opened_applications.md | 2 +- .../2020-02-21-dump_lsass_via_comsvcs_dll.md | 4 +- ...20-03-16-child_processes_of_spoolsv_exe.md | 2 +- .../2020-03-16-detect_rare_executables.md | 4 +- .../2020-03-16-process_execution_via_wmi.md | 2 +- .../2020-03-16-script_execution_via_wmi.md | 2 +- ...0-first_time_seen_child_process_of_zoom.md | 2 +- ...interception_by_creation_of_program_exe.md | 2 +- ...2020-07-06-short_lived_windows_accounts.md | 2 +- .../2020-07-06-windows_event_log_cleared.md | 4 +- ...20-07-07-remote_desktop_network_traffic.md | 2 +- ...20-07-08-detect_new_local_admin_account.md | 2 +- ...-07-21-attempt_to_stop_security_service.md | 4 +- ...-detect_excessive_user_account_lockouts.md | 2 +- .../2020-07-21-detect_outbound_smb_traffic.md | 2 +- ...1-detect_outlook_exe_writing_a_zip_file.md | 2 +- ...f_cmd_exe_to_launch_script_interpreters.md | 2 +- ...-21-detection_of_tools_built_by_nirsoft.md | 2 +- ...ritten_outside_of_the_outlook_directory.md | 2 +- ...first_time_seen_running_windows_service.md | 2 +- ...g_files_and_directories_with_attrib_exe.md | 2 +- ...shell_process_-_execution_policy_bypass.md | 4 +- ...th_invalid_credentials_from_the_same_ip.md | 2 +- .../2020-07-21-okta_failed_sso_attempts.md | 2 +- ...1-okta_user_logins_from_multiple_cities.md | 2 +- ...7-21-overwriting_accessibility_binaries.md | 2 +- ...7-21-prohibited_network_traffic_allowed.md | 2 +- .../2020-07-21-protocol_or_port_mismatch.md | 2 +- ...emote_desktop_process_running_on_system.md | 2 +- ...21-sc_exe_manipulating_windows_services.md | 2 +- ...-suspicious_email_attachment_extensions.md | 4 +- .../2020-07-22-suspicious_reg_exe_process.md | 2 +- docs/_posts/2020-07-22-tor_traffic.md | 2 +- .../2020-07-22-unload_sysmon_filter_driver.md | 2 +- ...ct_windows_dns_sigred_via_splunk_stream.md | 2 +- ...ance_modified_by_previously_unseen_user.md | 2 +- ..._or_delete_windows_shares_using_net_exe.md | 4 +- ...tivity_related_to_pass_the_hash_attacks.md | 2 +- ...oasting_spn_request_with_rc4_encryption.md | 2 +- ...ect_software_download_to_network_device.md | 2 +- .../2020-11-06-ryuk_test_files_detected.md | 2 +- ...cution_policy_to_unrestricted_or_bypass.md | 2 +- ...indows_security_account_manager_stopped.md | 2 +- ...2020-11-09-common_ransomware_extensions.md | 2 +- .../2020-11-09-common_ransomware_notes.md | 4 +- .../2020-11-09-deleting_shadow_copies.md | 2 +- ...xcessive_account_lockouts_from_endpoint.md | 2 +- ..._system_network_configuration_discovery.md | 4 +- ...cution_of_file_with_multiple_extensions.md | 2 +- ...installation_with_suspicious_parameters.md | 2 +- ...pulating_windows_services_registry_keys.md | 2 +- ...gistry_keys_for_creating_shim_databases.md | 2 +- ...020-11-30-rundll_loading_dll_by_ordinal.md | 109 ---------------- ...2-07-schtasks_used_for_forcing_a_reboot.md | 2 +- .../2020-12-08-shim_database_file_creation.md | 2 +- ...12-08-single_letter_process_on_endpoint.md | 2 +- ...processes_run_from_unexpected_locations.md | 2 +- .../2020-12-08-unusually_long_command_line.md | 2 +- ...heduled_task_deleted_or_created_via_cmd.md | 2 +- ...1-bcdedit_failure_recovery_modification.md | 2 +- ...ng_keys_with_encrypt_policy_without_mfa.md | 2 +- ..._with_kms_keys_performing_encryption_s3.md | 2 +- ...ontrol_list_created_with_all_open_ports.md | 2 +- ...aws_network_access_control_list_deleted.md | 2 +- ...cious_microsoft_workflow_compiler_usage.md | 4 +- .../2021-01-12-suspicious_msbuild_path.md | 2 +- .../2021-01-12-suspicious_msbuild_rename.md | 2 +- .../2021-01-12-suspicious_msbuild_spawn.md | 2 +- ...21-01-12-suspicious_mshta_child_process.md | 2 +- ..._connecting_to_dynamic_domain_providers.md | 2 +- ...ell_process_with_obfuscation_techniques.md | 4 +- ...20-detect_rundll32_inline_hta_execution.md | 4 +- .../2021-01-20-suspicious_mshta_spawn.md | 4 +- ...021-01-22-wbadmin_delete_system_backups.md | 2 +- ...021-01-25-nltest_domain_trust_discovery.md | 2 +- ...l_access_by_provider_user_and_principal.md | 2 +- ...01-26-aws_saml_update_identity_provider.md | 2 +- ...-26-certutil_exe_certificate_extraction.md | 2 +- ...ect_regsvr32_application_control_bypass.md | 4 +- .../_posts/2021-01-28-ntdsutil_export_ntds.md | 2 +- ...cious_regsvr32_register_suspicious_path.md | 4 +- ...32_application_control_bypass_-_advpack.md | 4 +- ...2_application_control_bypass_-_setupapi.md | 4 +- ...2_application_control_bypass_-_syssetup.md | 4 +- .../2021-02-04-suspicious_rundll32_rename.md | 122 ------------------ .../2021-02-04-suspicious_rundll32_startw.md | 4 +- ...9-suspicious_rundll32_dllregisterserver.md | 4 +- ...11-detect_html_help_spawn_child_process.md | 2 +- ...-02-12-detect_regasm_spawning_a_process.md | 2 +- ...02-12-detect_regsvcs_spawning_a_process.md | 2 +- ...e_policy_version_to_allow_all_resources.md | 2 +- ...2-22-suspicious_curl_network_connection.md | 2 +- .../2021-02-22-suspicious_plistbuddy_usage.md | 2 +- ...uspicious_sqlite3_lsquarantine_behavior.md | 2 +- .../2021-03-01-any_powershell_downloadfile.md | 4 +- ...021-03-01-any_powershell_downloadstring.md | 4 +- .../_posts/2021-03-01-fodhelper_uac_bypass.md | 2 +- .../2021-03-01-ryuk_wake_on_lan_command.md | 2 +- ...us_scheduled_task_from_public_directory.md | 2 +- .../2021-03-02-aws_setdefaultpolicyversion.md | 2 +- ...ed_messaging_service_spawning_a_process.md | 2 +- ...-02-windows_disableantispyware_registry.md | 2 +- ...2021-03-03-nishang_powershelltcponeline.md | 4 +- docs/_posts/2021-03-03-w3wp_spawning_shell.md | 4 +- .../2021-03-12-resize_shadowstorage_volume.md | 2 +- .../2021-03-17-clop_common_exec_parameter.md | 2 +- ...3-17-clop_ransomware_known_service_name.md | 2 +- ...nload_with_urlcache_and_split_arguments.md | 2 +- ...load_with_verifyctl_and_split_arguments.md | 2 +- ...021-03-23-certutil_with_decode_argument.md | 2 +- ...021-03-29-powershell_start-bitstransfer.md | 4 +- ...03-31-aws_iam_successful_group_deletion.md | 2 +- ...021-03-31-disabling_firewall_with_netsh.md | 2 +- .../2021-03-31-dsquery_domain_discovery.md | 2 +- ...-aws_iam_assume_role_policy_brute_force.md | 2 +- .../2021-04-01-aws_iam_delete_policy.md | 2 +- ...21-04-01-aws_iam_failure_group_deletion.md | 2 +- ...icious_powershell_executed_as_a_service.md | 2 +- ...heduled_task_created_within_public_path.md | 2 +- .../2021-04-12-excel_spawning_powershell.md | 4 +- ...4-12-excel_spawning_windows_script_host.md | 2 +- ...t_scheduled_task_created_to_spawn_shell.md | 2 +- .../2021-04-12-winword_spawning_powershell.md | 4 +- ...12-winword_spawning_windows_script_host.md | 2 +- ...1-04-13-aws_excessive_security_scanning.md | 2 +- ...fice_application_spawn_rundll32_process.md | 4 +- ...-15-dns_exfiltration_using_nslookup_app.md | 2 +- ..._no_command_line_arguments_with_network.md | 2 +- ...hedule_task_with_http_command_arguments.md | 2 +- ...dule_task_with_rundll32_command_trigger.md | 2 +- ...ocess_spawned_cmd_or_powershell_process.md | 4 +- .../2021-04-22-anomalous_usage_of_7zip.md | 2 +- ...e_product_spawning_rundll32_with_no_dll.md | 4 +- .../_posts/2021-04-22-winword_spawning_cmd.md | 4 +- ...04-26-office_product_spawning_bitsadmin.md | 4 +- ...-04-26-office_product_spawning_certutil.md | 2 +- ...021-04-26-office_product_spawning_mshta.md | 4 +- docs/_posts/2021-04-29-icacls_deny_command.md | 2 +- .../2021-05-04-deleting_of_net_users.md | 4 +- .../2021-05-04-disabling_net_user_account.md | 4 +- ...4-excessive_attempt_to_disable_services.md | 2 +- ...21-05-04-excessive_service_stop_attempt.md | 4 +- .../2021-05-04-excessive_usage_of_taskkill.md | 2 +- .../_posts/2021-05-04-icacls_grant_command.md | 2 +- ...odify_acl_permission_to_files_or_folder.md | 2 +- ...21-05-04-process_kill_base_on_file_path.md | 4 +- ...2021-05-05-suspicious_process_file_path.md | 2 +- ...merate_users_local_group_using_telegram.md | 2 +- .../2021-05-06-excessive_usage_of_net_app.md | 4 +- ...s_or_script_creation_in_suspicious_path.md | 2 +- ...2021-05-07-excessive_usage_of_cacls_app.md | 2 +- .../2021-05-07-schtasks_run_task_on_demand.md | 2 +- docs/_posts/2021-05-13-slui_runas_elevated.md | 2 +- .../2021-05-13-slui_spawning_a_process.md | 2 +- .../2021-05-18-services_escalate_exe.md | 2 +- .../2021-05-20-cmd_echo_pipe_-_escalation.md | 4 +- .../2021-05-21-winrm_spawning_a_process.md | 2 +- ...6-secretdumps_offline_ntds_dumping_tool.md | 2 +- ...27-detect_sharphound_file_modifications.md | 2 +- .../2021-05-27-detect_sharphound_usage.md | 2 +- ...etect_azurehound_command-line_arguments.md | 2 +- ...01-detect_azurehound_file_modifications.md | 2 +- ...etect_sharphound_command-line_arguments.md | 2 +- .../2021-06-02-conti_common_exec_parameter.md | 2 +- .../2021-06-02-revil_common_exec_parameter.md | 2 +- ...rocesses_created_in_windows_temp_folder.md | 2 +- ...-04-known_services_killed_by_ransomware.md | 2 +- ...-excessive_number_of_taskhost_processes.md | 2 +- ...ear_unallocated_sector_using_cipher_app.md | 2 +- .../2021-06-10-disable_logs_using_wevtutil.md | 2 +- ...rmission_modification_using_takeown_app.md | 2 +- ...ent_automatic_repair_mode_using_bcdedit.md | 2 +- ...7-suspicious_event_log_service_behavior.md | 2 +- ...ecute_javascript_with_jscript_com_clsid.md | 2 +- ...ursive_delete_of_directory_in_batch_cmd.md | 4 +- ...w_file_and_printing_sharing_in_firewall.md | 2 +- ...-23-allow_network_discovery_in_firewall.md | 2 +- ...er_of_service_control_start_as_disabled.md | 2 +- docs/_posts/2021-07-01-sdclt_uac_bypass.md | 2 +- .../2021-07-01-silentcleanup_uac_bypass.md | 2 +- .../2021-07-01-spoolsv_spawning_rundll32.md | 4 +- docs/_posts/2021-07-01-wsreset_uac_bypass.md | 2 +- ...05-msmpeng_application_dll_side_loading.md | 2 +- ...-powershell_disable_security_monitoring.md | 4 +- .../2021-07-12-net_profiler_uac_bypass.md | 2 +- ...tance_created_by_previously_unseen_user.md | 2 +- docs/_posts/2021-07-19-aws_createaccesskey.md | 2 +- .../2021-07-19-aws_createloginprofile.md | 2 +- .../2021-07-19-aws_updateloginprofile.md | 2 +- .../2021-07-19-detect_new_open_s3_buckets.md | 2 +- ...detect_new_open_s3_buckets_over_aws_cli.md | 2 +- ...a_spawning_rundll32_or_regsvr32_process.md | 4 +- ...-07-19-office_product_spawn_cmd_process.md | 4 +- ...7-26-suspicious_icedid_rundll32_cmdline.md | 4 +- ...21-07-26-suspicious_rundll32_plugininit.md | 4 +- .../2021-07-27-chcp_command_execution.md | 2 +- ...gsvr32_with_known_silent_switch_cmdline.md | 4 +- ...fice_application_spawn_regsvr32_process.md | 4 +- .../2021-08-09-uninstall_app_using_msiexec.md | 2 +- docs/_posts/2021-08-11-fsutil_zeroing_file.md | 2 +- ...8-17-7zip_commandline_to_smb_share_path.md | 2 +- ...ws_ecr_container_scanning_findings_high.md | 2 +- ...ning_findings_low_informational_unknown.md | 2 +- ..._ecr_container_scanning_findings_medium.md | 2 +- docs/_posts/2021-08-18-esentutl_sam_copy.md | 2 +- ...container_upload_outside_business_hours.md | 2 +- ...9-aws_ecr_container_upload_unknown_user.md | 2 +- ...ols_passing_authentication_in_cleartext.md | 2 +- ...1-08-20-github_commit_changes_in_master.md | 2 +- ...2021-08-23-getlocaluser_with_powershell.md | 2 +- ...twmiobject_user_account_with_powershell.md | 2 +- ...4-domain_account_discovery_with_dsquery.md | 2 +- ...4-domain_account_discovery_with_net_app.md | 4 +- ...8-24-domain_account_discovery_with_wmic.md | 2 +- ...1-08-24-get-domaintrust_with_powershell.md | 2 +- .../2021-08-24-get_aduser_with_powershell.md | 2 +- ...21-08-24-get_domainuser_with_powershell.md | 2 +- ...24-getwmiobject_ds_user_with_powershell.md | 2 +- ...1-08-25-domain_group_discovery_with_net.md | 2 +- ...-08-25-domain_group_discovery_with_wmic.md | 2 +- ...08-25-elevated_group_discovery_with_net.md | 2 +- ...8-25-elevated_group_discovery_with_wmic.md | 2 +- .../2021-08-25-getadgroup_with_powershell.md | 2 +- ...21-08-25-getdomaingroup_with_powershell.md | 2 +- ...-25-getnettcpconnection_with_powershell.md | 2 +- ...5-getwmiobject_ds_group_with_powershell.md | 2 +- ...ultdomainpasswordpolicy_with_powershell.md | 2 +- ...resultantpasswordpolicy_with_powershell.md | 2 +- ...-08-26-get_domainpolicy_with_powershell.md | 2 +- ...8-26-password_policy_discovery_with_net.md | 2 +- ...reating_lnk_file_in_suspicious_location.md | 2 +- ...8-27-exchange_powershell_abuse_via_ssrf.md | 2 +- ...domain_controller_discovery_with_nltest.md | 2 +- ...-08-30-remote_system_discovery_with_net.md | 2 +- ...petitpotam_network_share_access_request.md | 2 +- ...itpotam_suspicious_kerberos_tgt_request.md | 2 +- ...31-remote_system_discovery_with_dsquery.md | 2 +- ...1-09-01-circle_ci_disable_security_step.md | 2 +- ...1-domain_controller_discovery_with_wmic.md | 2 +- ...-01-domain_group_discovery_with_dsquery.md | 2 +- .../2021-09-01-github_commit_in_develop.md | 2 +- .../2021-09-01-github_dependabot_alert.md | 2 +- ...1-github_pull_request_from_unknown_user.md | 4 +- ...09-01-remote_system_discovery_with_wmic.md | 2 +- ...21-09-02-circle_ci_disable_security_job.md | 2 +- ...1-09-02-get-foresttrust_with_powershell.md | 2 +- ...1-09-06-auto_admin_logon_registry_entry.md | 2 +- ...cdedit_command_back_to_normal_mode_boot.md | 2 +- ...change_to_safe_mode_with_network_config.md | 2 +- ...021-09-07-getadcomputer_with_powershell.md | 2 +- ...09-07-getdomaincomputer_with_powershell.md | 2 +- ...-07-getdomaincontroller_with_powershell.md | 2 +- ...etwmiobject_ds_computer_with_powershell.md | 2 +- ...-system_information_discovery_detection.md | 2 +- ...l_loading_from_world_writable_directory.md | 2 +- ...eate_local_admin_accounts_using_net_exe.md | 2 +- .../2021-09-08-office_spawning_control.md | 2 +- ...2021-09-08-rundll32_control_rundll_hunt.md | 4 +- ...control_rundll_world_writable_directory.md | 4 +- ...2021-09-09-extraction_of_registry_hives.md | 2 +- ...0-network_connection_discovery_with_arp.md | 2 +- ...0-network_connection_discovery_with_net.md | 2 +- ...twork_connection_discovery_with_netstat.md | 2 +- ...1-09-13-getcurrent_user_with_powershell.md | 2 +- ...-13-jscript_execution_using_cscript_app.md | 2 +- ...-09-13-system_user_discovery_with_query.md | 2 +- ...09-13-system_user_discovery_with_whoami.md | 2 +- ...user_discovery_with_env_vars_powershell.md | 2 +- ...21-09-13-xsl_script_execution_with_wmic.md | 4 +- ...-cmdline_tool_not_executed_in_cmd_shell.md | 2 +- ...021-09-14-get_wmiobject_group_discovery.md | 2 +- .../2021-09-14-net_localgroup_discovery.md | 2 +- ...-14-powershell_get_localgroup_discovery.md | 2 +- .../_posts/2021-09-14-wmic_group_discovery.md | 2 +- ...1-09-15-check_elevated_cmd_using_whoami.md | 2 +- ...me_process_accessing_chrome_default_dir.md | 2 +- ...efox_process_access_firefox_profile_dir.md | 2 +- ...21-09-16-account_discovery_with_net_app.md | 4 +- ...t_to_add_certificate_to_untrusted_store.md | 2 +- ...edential_dump_from_registry_via_reg_exe.md | 4 +- .../_posts/2021-09-16-bits_job_persistence.md | 4 +- .../2021-09-16-bitsadmin_download_file.md | 4 +- ...of_shadow_copy_with_wmic_and_powershell.md | 4 +- ...mping_via_copy_command_from_shadow_copy.md | 4 +- ...tial_dumping_via_symlink_to_shadow_copy.md | 4 +- .../2021-09-16-detect_html_help_renamed.md | 2 +- ...16-detect_html_help_url_in_command_line.md | 2 +- ...ml_help_using_infotech_storage_handlers.md | 2 +- ...09-16-detect_mshta_inline_hta_execution.md | 4 +- .../_posts/2021-09-16-detect_mshta_renamed.md | 4 +- ...-09-16-detect_mshta_url_in_command_line.md | 4 +- ...9-16-detect_psexec_with_accepteula_flag.md | 2 +- .../_posts/2021-09-16-detect_renamed_7-zip.md | 2 +- .../2021-09-16-detect_renamed_psexec.md | 2 +- .../2021-09-16-detect_renamed_rclone.md | 2 +- .../2021-09-16-detect_renamed_winrar.md | 2 +- .../2021-09-16-dump_lsass_via_procdump.md | 2 +- ...-09-16-local_account_discovery_with_net.md | 4 +- ...09-16-local_account_discovery_with_wmic.md | 4 +- ...2021-09-16-office_product_spawning_wmic.md | 4 +- .../2021-09-16-processes_launching_netsh.md | 2 +- ...t_regasm_with_no_command_line_arguments.md | 2 +- ..._regsvcs_with_no_command_line_arguments.md | 4 +- ...ument_spawned_child_process_to_download.md | 2 +- ...cious_dllhost_no_command_line_arguments.md | 2 +- ...ious_gpupdate_no_command_line_arguments.md | 2 +- ...ious_microsoft_workflow_compiler_rename.md | 4 +- ...ious_rundll32_no_command_line_arguments.md | 4 +- ...hprotocolhost_no_command_line_arguments.md | 2 +- ...mcos_rat_file_creation_in_remcos_folder.md | 2 +- ...1-09-27-change_default_file_association.md | 2 +- ...27-logon_script_event_trigger_execution.md | 2 +- ...-27-screensaver_event_trigger_execution.md | 2 +- ...9-28-print_processor_registry_autostart.md | 2 +- .../2021-09-29-verclsid_clsid_execution.md | 2 +- ...01-vbscript_execution_using_wscript_app.md | 2 +- ...ld_suspicious_spawned_by_script_process.md | 2 +- ...32_silent_and_install_param_dll_loading.md | 4 +- ...5-malicious_inprocserver32_modification.md | 2 +- ...1-10-05-process_writing_dynamicwrapperx.md | 2 +- .../2021-10-05-rundll32_shimcache_flush.md | 4 +- .../2021-10-05-suspicious_copy_on_system32.md | 2 +- .../2021-10-05-winhlp32_spawning_a_process.md | 2 +- ...021-10-06-sdelete_application_execution.md | 2 +- ...ipt_or_cscript_suspicious_child_process.md | 2 +- .../2021-10-11-suspicious_wevtutil_usage.md | 2 +- ..._no_command_line_arguments_with_network.md | 2 +- ..._no_command_line_arguments_with_network.md | 4 +- ...lhost_with_no_command_line_with_network.md | 2 +- ...iceprincipalnames_discovery_with_setspn.md | 4 +- .../2021-10-18-disable_schedule_task.md | 2 +- ...indows_curl_download_to_suspicious_path.md | 2 +- ...-wmic_noninteractive_app_uninstallation.md | 2 +- docs/_posts/2021-11-03-windows_adfind_exe.md | 2 +- .../2021-11-04-attacker_tools_on_endpoint.md | 2 +- ...ndows_curl_upload_to_remote_destination.md | 2 +- ...ows_service_creation_on_remote_endpoint.md | 2 +- ...s_service_initiation_on_remote_endpoint.md | 2 +- ...ocess_instantiation_via_winrm_and_winrs.md | 2 +- ...sk_creation_on_remote_endpoint_using_at.md | 2 +- ...uled_task_initiation_on_remote_endpoint.md | 2 +- ...chtasks_scheduling_job_on_remote_system.md | 2 +- .../2021-11-11-wmic_xsl_execution_via_url.md | 4 +- ...2-aws_iam_accessdenied_discovery_events.md | 2 +- ...21-11-12-csc_net_on_the_fly_compilation.md | 2 +- ...1-11-12-firewall_allowed_program_enable.md | 2 +- ...twork_discovery_using_route_windows_app.md | 2 +- ...12-remote_process_instantiation_via_wmi.md | 4 +- ...21-11-12-runas_execution_in_commandline.md | 4 +- ...s_installutil_remote_network_connection.md | 2 +- ...12-windows_installutil_uninstall_option.md | 2 +- ...stallutil_uninstall_option_with_network.md | 2 +- ...windows_installutil_url_in_command_line.md | 2 +- ...s_instantiation_via_dcom_and_powershell.md | 4 +- ...ss_instantiation_via_wmi_and_powershell.md | 4 +- .../2021-11-15-windows_diskcryptor_usage.md | 2 +- ..._instantiation_via_winrm_and_powershell.md | 4 +- ...2021-11-17-windows_dism_remove_defender.md | 2 +- ...ile_written_in_administrative_smb_share.md | 2 +- ...info_gathering_using_dxdiag_application.md | 2 +- ...22-possible_browser_pass_view_parameter.md | 2 +- ...services_lolbas_execution_process_spawn.md | 2 +- ...-svchost_lolbas_execution_process_spawn.md | 2 +- ...ce_created_with_suspicious_service_path.md | 2 +- ...dows_service_created_within_public_path.md | 2 +- ...wmiprsve_lolbas_execution_process_spawn.md | 2 +- ...provhost_lolbas_execution_process_spawn.md | 2 +- ...1-23-mmc_lolbas_execution_process_spawn.md | 2 +- ...5-add_or_set_windows_defender_exclusion.md | 2 +- ...-11-29-detect_rclone_command-line_usage.md | 4 +- ...sible_lateral_movement_powershell_spawn.md | 2 +- ...windows_raccine_scheduled_task_deletion.md | 2 +- ...-12-10-curl_download_and_bash_execution.md | 2 +- ...-12-11-wget_download_and_bash_execution.md | 2 +- .../2021-12-13-linux_java_spawning_shell.md | 2 +- ...load_injection_with_outbound_connection.md | 2 +- ...onnection_from_java_using_default_ports.md | 2 +- ...2021-12-13-windows_java_spawning_shells.md | 4 +- ..._add_files_in_known_crontab_directories.md | 2 +- ...-17-linux_at_allow_config_file_creation.md | 2 +- ...21-12-17-linux_at_application_execution.md | 2 +- ...1-12-17-linux_edit_cron_table_parameter.md | 2 +- ..._append_command_to_at_allow_config_file.md | 2 +- ..._cronjob_entry_on_existing_cronjob_file.md | 2 +- ...ssible_cronjob_modification_with_editor.md | 2 +- ...ux_file_creation_in_init_boot_directory.md | 2 +- ...inux_file_creation_in_profile_directory.md | 2 +- ...e_append_command_to_profile_config_file.md | 2 +- ...rvice_file_created_in_systemd_directory.md | 2 +- .../2021-12-20-linux_service_restarted.md | 2 +- ...-12-20-linux_service_started_or_enabled.md | 2 +- .../2021-12-21-linux_add_user_account.md | 2 +- ...1-12-21-linux_change_file_owner_to_root.md | 2 +- ...21-linux_nopasswd_entry_in_sudoers_file.md | 2 +- ...-12-21-linux_setuid_using_chmod_utility.md | 4 +- ...12-21-linux_setuid_using_setcap_utility.md | 2 +- ...21-12-21-linux_visudo_utility_execution.md | 2 +- ...file_created_in_kernel_driver_directory.md | 2 +- ...sert_kernel_module_using_insmod_utility.md | 2 +- ...ll_kernel_module_using_modprobe_utility.md | 2 +- ...2-22-linux_preload_hijack_library_calls.md | 2 +- ...ux_common_process_for_elevation_control.md | 2 +- ...1-12-23-linux_sudoers_tmp_file_creation.md | 2 +- .../2022-01-04-linux_sudo_or_su_execution.md | 2 +- ...022-01-05-linux_doas_conf_file_creation.md | 2 +- .../2022-01-05-linux_doas_tool_execution.md | 2 +- ...nux_possible_access_to_credential_files.md | 2 +- ...0-linux_possible_access_to_sudoers_file.md | 2 +- ...ess_or_modification_of_sshd_config_file.md | 2 +- ...11-linux_possible_ssh_key_file_creation.md | 2 +- ..._connect_to_internet_with_hidden_window.md | 4 +- ...tentially_malicious_code_on_commandline.md | 2 +- ...-cmd_carry_out_string_command_parameter.md | 4 +- ...lateral_movement_commandline_parameters.md | 2 +- ...us_powershell_process_-_encoded_command.md | 4 +- ...dows_dotnet_binary_in_non_standard_path.md | 2 +- ...indows_installutil_in_non_standard_path.md | 2 +- .../2022-01-20-ping_sleep_batch_command.md | 2 +- .../2022-01-21-windows_nirsoft_advancedrun.md | 2 +- .../2022-01-24-windows_nirsoft_utilities.md | 2 +- ...01-28-linux_pkexec_privilege_escalation.md | 119 +++++++++++++++++ docs/_stories/linux_privilege_escalation.md | 1 + .../masquerading_-_rename_system_utilities.md | 1 - docs/_stories/suspicious_rundll32_activity.md | 1 - docs/_stories/unusual_processes.md | 1 - docs/index.markdown | 4 +- 451 files changed, 647 insertions(+), 782 deletions(-) delete mode 100644 docs/_posts/2020-11-30-rundll_loading_dll_by_ordinal.md delete mode 100644 docs/_posts/2021-02-04-suspicious_rundll32_rename.md create mode 100644 docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md diff --git a/docs/_pages/adversary_tactics.md b/docs/_pages/adversary_tactics.md index 229a2b585a..6a9d33dae5 100644 --- a/docs/_pages/adversary_tactics.md +++ b/docs/_pages/adversary_tactics.md @@ -29,7 +29,7 @@ sidebar: | [HAFNIUM Group](/stories/hafnium_group/) | [Server Software Component](/tags/#server-software-component), [Web Shell](/tags/#web-shell) | [Persistence](/tags/#persistence) | | [Ingress Tool Transfer](/stories/ingress_tool_transfer/) | [Ingress Tool Transfer](/tags/#ingress-tool-transfer) | [Command And Control](/tags/#command-and-control) | | [Linux Persistence Techniques](/stories/linux_persistence_techniques/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | [Privilege Escalation](/tags/#privilege-escalation) | -| [Linux Privilege Escalation](/stories/linux_privilege_escalation/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | [Privilege Escalation](/tags/#privilege-escalation) | +| [Linux Privilege Escalation](/stories/linux_privilege_escalation/) | [Exploitation for Privilege Escalation](/tags/#exploitation-for-privilege-escalation) | [Privilege Escalation](/tags/#privilege-escalation) | | [Log4Shell CVE-2021-44228](/stories/log4shell_cve-2021-44228/) | [Exploit Public-Facing Application](/tags/#exploit-public-facing-application) | [Initial Access](/tags/#initial-access) | | [Malicious PowerShell](/stories/malicious_powershell/) | [Gather Victim Host Information](/tags/#gather-victim-host-information) | [Reconnaissance](/tags/#reconnaissance) | | [Masquerading - Rename System Utilities](/stories/masquerading_-_rename_system_utilities/) | [Masquerading](/tags/#masquerading), [Rename System Utilities](/tags/#rename-system-utilities), [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [InstallUtil](/tags/#installutil) | [Defense Evasion](/tags/#defense-evasion) | diff --git a/docs/_pages/detections.md b/docs/_pages/detections.md index c7d1d45d2e..e8a6284a70 100644 --- a/docs/_pages/detections.md +++ b/docs/_pages/detections.md @@ -413,6 +413,7 @@ sidebar: | [Linux Sudo OR Su Execution](/endpoint/linux_sudo_or_su_execution/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | Hunting | | [Linux Sudoers Tmp File Creation](/endpoint/linux_sudoers_tmp_file_creation/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | Anomaly | | [Linux Visudo Utility Execution](/endpoint/linux_visudo_utility_execution/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | Anomaly | +| [Linux pkexec Privilege Escalation](/endpoint/linux_pkexec_privilege_escalation/) | [Exploitation for Privilege Escalation](/tags/#exploitation-for-privilege-escalation) | TTP | | [Loading Of Dynwrapx Module](/endpoint/loading_of_dynwrapx_module/) | [Process Injection](/tags/#process-injection), [Dynamic-link Library Injection](/tags/#dynamic-link-library-injection) | TTP | | [Local Account Discovery With Wmic](/endpoint/local_account_discovery_with_wmic/) | [Account Discovery](/tags/#account-discovery), [Local Account](/tags/#local-account) | Hunting | | [Local Account Discovery with Net](/endpoint/local_account_discovery_with_net/) | [Account Discovery](/tags/#account-discovery), [Local Account](/tags/#local-account) | Hunting | @@ -573,7 +574,6 @@ sidebar: | [Resize Shadowstorage Volume](/endpoint/resize_shadowstorage_volume/) | [Service Stop](/tags/#service-stop) | TTP | | [Revil Common Exec Parameter](/endpoint/revil_common_exec_parameter/) | [User Execution](/tags/#user-execution) | TTP | | [Revil Registry Entry](/endpoint/revil_registry_entry/) | [Modify Registry](/tags/#modify-registry) | TTP | -| [RunDLL Loading DLL By Ordinal](/endpoint/rundll_loading_dll_by_ordinal/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Runas Execution in CommandLine](/endpoint/runas_execution_in_commandline/) | [Access Token Manipulation](/tags/#access-token-manipulation), [Token Impersonation/Theft](/tags/#token-impersonation/theft) | Hunting | | [Rundll32 Control RunDLL Hunt](/endpoint/rundll32_control_rundll_hunt/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | Hunting | | [Rundll32 Control RunDLL World Writable Directory](/endpoint/rundll32_control_rundll_world_writable_directory/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | @@ -652,7 +652,6 @@ sidebar: | [Suspicious Reg exe Process](/endpoint/suspicious_reg_exe_process/) | [Modify Registry](/tags/#modify-registry) | TTP | | [Suspicious Regsvr32 Register Suspicious Path](/endpoint/suspicious_regsvr32_register_suspicious_path/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Regsvr32](/tags/#regsvr32) | TTP | | [Suspicious Rundll32 PluginInit](/endpoint/suspicious_rundll32_plugininit/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | -| [Suspicious Rundll32 Rename](/endpoint/suspicious_rundll32_rename/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Masquerading](/tags/#masquerading), [Rundll32](/tags/#rundll32), [Rename System Utilities](/tags/#rename-system-utilities) | Hunting | | [Suspicious Rundll32 StartW](/endpoint/suspicious_rundll32_startw/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Suspicious Rundll32 dllregisterserver](/endpoint/suspicious_rundll32_dllregisterserver/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Suspicious Rundll32 no Command Line Arguments](/endpoint/suspicious_rundll32_no_command_line_arguments/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | diff --git a/docs/_pages/stories.md b/docs/_pages/stories.md index ef3cc4d3ec..6cb21c61dd 100644 --- a/docs/_pages/stories.md +++ b/docs/_pages/stories.md @@ -58,7 +58,7 @@ sidebar: | [Kubernetes Scanning Activity](kubernetes_scanning_activity) | [Cloud Service Discovery](/tags/#cloud-service-discovery) | [Discovery](/tags/#discovery) | | [Kubernetes Sensitive Object Access Activity]() | None | None | | [Linux Persistence Techniques](linux_persistence_techniques) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | [Privilege Escalation](/tags/#privilege-escalation) | -| [Linux Privilege Escalation](linux_privilege_escalation) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | [Privilege Escalation](/tags/#privilege-escalation) | +| [Linux Privilege Escalation](linux_privilege_escalation) | [Exploitation for Privilege Escalation](/tags/#exploitation-for-privilege-escalation) | [Privilege Escalation](/tags/#privilege-escalation) | | [Log4Shell CVE-2021-44228](log4shell_cve-2021-44228) | [Exploit Public-Facing Application](/tags/#exploit-public-facing-application) | [Initial Access](/tags/#initial-access) | | [Malicious PowerShell](malicious_powershell) | [Gather Victim Host Information](/tags/#gather-victim-host-information) | [Reconnaissance](/tags/#reconnaissance) | | [Masquerading - Rename System Utilities](masquerading_-_rename_system_utilities) | [Masquerading](/tags/#masquerading), [Rename System Utilities](/tags/#rename-system-utilities), [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [InstallUtil](/tags/#installutil) | [Defense Evasion](/tags/#defense-evasion) | diff --git a/docs/_playbooks/delete_detected_files.md b/docs/_playbooks/delete_detected_files.md index 030af20a60..a8e87a9108 100644 --- a/docs/_playbooks/delete_detected_files.md +++ b/docs/_playbooks/delete_detected_files.md @@ -774,7 +774,6 @@ This playbook acts upon events where a file has been determined to be malicious - #### How To Implement diff --git a/docs/_playbooks/log4j_investigate.md b/docs/_playbooks/log4j_investigate.md index 0fcd192d27..78edf26f80 100644 --- a/docs/_playbooks/log4j_investigate.md +++ b/docs/_playbooks/log4j_investigate.md @@ -1471,8 +1471,6 @@ Published in response to CVE-2021-44228, this playbook and its sub-playbooks can - - @@ -3386,8 +3384,6 @@ Published in response to CVE-2021-44228, this playbook and its sub-playbooks can - - @@ -4937,7 +4933,6 @@ Published in response to CVE-2021-44228, this playbook and its sub-playbooks can - * [Log4Shell JNDI Payload Injection Attempt](/web/log4shell_jndi_payload_injection_attempt/) @@ -5690,7 +5685,6 @@ Published in response to CVE-2021-44228, this playbook and its sub-playbooks can - * [Log4Shell JNDI Payload Injection with Outbound Connection](/web/log4shell_jndi_payload_injection_with_outbound_connection/) @@ -6187,8 +6181,6 @@ Published in response to CVE-2021-44228, this playbook and its sub-playbooks can - - @@ -6789,7 +6781,6 @@ Published in response to CVE-2021-44228, this playbook and its sub-playbooks can - #### How To Implement diff --git a/docs/_playbooks/log4j_respond.md b/docs/_playbooks/log4j_respond.md index 759c26a471..f8c67f79b8 100644 --- a/docs/_playbooks/log4j_respond.md +++ b/docs/_playbooks/log4j_respond.md @@ -1471,8 +1471,6 @@ Published in response to CVE-2021-44228, this playbook is meant to be launched a - - @@ -3386,8 +3384,6 @@ Published in response to CVE-2021-44228, this playbook is meant to be launched a - - @@ -4937,7 +4933,6 @@ Published in response to CVE-2021-44228, this playbook is meant to be launched a - * [Log4Shell JNDI Payload Injection Attempt](/web/log4shell_jndi_payload_injection_attempt/) @@ -5690,7 +5685,6 @@ Published in response to CVE-2021-44228, this playbook is meant to be launched a - * [Log4Shell JNDI Payload Injection with Outbound Connection](/web/log4shell_jndi_payload_injection_with_outbound_connection/) @@ -6187,8 +6181,6 @@ Published in response to CVE-2021-44228, this playbook is meant to be launched a - - @@ -6789,7 +6781,6 @@ Published in response to CVE-2021-44228, this playbook is meant to be launched a - #### How To Implement diff --git a/docs/_playbooks/ransomware_investigate_and_contain.md b/docs/_playbooks/ransomware_investigate_and_contain.md index c8551c0618..fa7b2d2847 100644 --- a/docs/_playbooks/ransomware_investigate_and_contain.md +++ b/docs/_playbooks/ransomware_investigate_and_contain.md @@ -779,7 +779,6 @@ This playbook investigates and contains ransomware detected on endpoints. - #### How To Implement diff --git a/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md b/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md index 867f97014a..45a30d6c5e 100644 --- a/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md +++ b/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md @@ -45,8 +45,8 @@ The search queries the authentication logs for assets that are categorized as ro #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_new_login_attempts_to_routers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md b/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md index 4e07cfd05b..134e7703af 100644 --- a/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md +++ b/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md @@ -48,8 +48,8 @@ This search looks for Windows endpoints that have not generated an event indicat #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `no_windows_updates_in_a_time_frame_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md b/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md index fdd00b3fba..1342316602 100644 --- a/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md +++ b/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md @@ -46,8 +46,8 @@ Attackers often use spaces as a means to obfuscate an attachment's file exte #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `email_attachments_with_lots_of_spaces_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md b/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md index 234e37608b..30e50155fa 100644 --- a/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md +++ b/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md @@ -52,8 +52,8 @@ This search looks for specific GET or HEAD requests to web servers that are indi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_attackers_scanning_for_vulnerable_jboss_servers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md b/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md index b20a46610e..630f27a109 100644 --- a/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md +++ b/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md @@ -45,8 +45,8 @@ This search is used to detect malicious HTTP requests crafted to exploit jmx-con #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_malicious_requests_to_exploit_jboss_servers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md b/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md index 4f05ebdfd7..8eb143eec5 100644 --- a/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md +++ b/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md @@ -44,8 +44,8 @@ This search looks for Web requests to faux domains similar to the one that you w #### Macros The SPL above uses the following Macros: * [brand_abuse_web](https://github.com/splunk/security_content/blob/develop/macros/brand_abuse_web.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `monitor_web_traffic_for_brand_abuse_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md b/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md index d339ae9964..0978932cd5 100644 --- a/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md +++ b/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md @@ -48,8 +48,8 @@ This search looks for emails claiming to be sent from a domain similar to one th #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `monitor_email_for_brand_abuse_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md b/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md index d4da8870de..3e4597b536 100644 --- a/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md +++ b/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md @@ -53,8 +53,8 @@ This search looks for outbound ICMP packets with a packet size larger than 1,000 #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_large_outbound_icmp_packets_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md b/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md index 19d4057454..9036fdc4ca 100644 --- a/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md +++ b/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md @@ -54,8 +54,8 @@ This search looks for the creation of WMI permanent event subscriptions. #### Macros The SPL above uses the following Macros: -* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) Note that `wmi_permanent_event_subscription_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md b/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md index 87adcb75de..c03fdffb58 100644 --- a/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md +++ b/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md @@ -53,8 +53,8 @@ This search looks for the creation of WMI temporary event subscriptions. #### Macros The SPL above uses the following Macros: -* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) Note that `wmi_temporary_event_subscription_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-03-remote_wmi_command_attempt.md b/docs/_posts/2018-12-03-remote_wmi_command_attempt.md index 1aa0a18bd1..2711c3f886 100644 --- a/docs/_posts/2018-12-03-remote_wmi_command_attempt.md +++ b/docs/_posts/2018-12-03-remote_wmi_command_attempt.md @@ -50,9 +50,9 @@ The following analytic identifies usage of `wmic.exe` spawning a local or remote #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `remote_wmi_command_attempt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-03-usn_journal_deletion.md b/docs/_posts/2018-12-03-usn_journal_deletion.md index 829667578b..b065c05f18 100644 --- a/docs/_posts/2018-12-03-usn_journal_deletion.md +++ b/docs/_posts/2018-12-03-usn_journal_deletion.md @@ -51,8 +51,8 @@ The fsutil.exe application is a legitimate Windows utility used to perform tasks #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `usn_journal_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-14-file_with_samsam_extension.md b/docs/_posts/2018-12-14-file_with_samsam_extension.md index 2a876bf05c..05d51efb4c 100644 --- a/docs/_posts/2018-12-14-file_with_samsam_extension.md +++ b/docs/_posts/2018-12-14-file_with_samsam_extension.md @@ -43,8 +43,8 @@ The search looks for file writes with extensions consistent with a SamSam ransom #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `file_with_samsam_extension_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-14-samsam_test_file_write.md b/docs/_posts/2018-12-14-samsam_test_file_write.md index 69b63fdb65..f053d44c0e 100644 --- a/docs/_posts/2018-12-14-samsam_test_file_write.md +++ b/docs/_posts/2018-12-14-samsam_test_file_write.md @@ -50,8 +50,8 @@ The search looks for a file named "test.txt" written to the windows syst #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `samsam_test_file_write_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md b/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md index bb38800e84..64615ba5a4 100644 --- a/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md +++ b/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md @@ -52,8 +52,8 @@ This search looks for suspicious processes on all systems labeled as web servers #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `web_servers_executing_suspicious_processes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md b/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md index dc08d49223..e86241d63b 100644 --- a/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md +++ b/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md @@ -48,8 +48,8 @@ Command lines that are extremely long may be indicative of malicious activity on #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `unusually_long_command_line_-_mltk_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-12-10-creation_of_shadow_copy.md b/docs/_posts/2019-12-10-creation_of_shadow_copy.md index b9329febf9..a57c715b18 100644 --- a/docs/_posts/2019-12-10-creation_of_shadow_copy.md +++ b/docs/_posts/2019-12-10-creation_of_shadow_copy.md @@ -54,8 +54,8 @@ Monitor for signs that Vssadmin or Wmic has been used to create a shadow copy. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `creation_of_shadow_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md b/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md index f26b7a1c45..522bb56ee4 100644 --- a/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md +++ b/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md @@ -63,8 +63,8 @@ This search allows you to identify DNS requests that are unusually large for the #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `dns_query_length_outliers_-_mltk_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-02-07-macos_-_re-opened_applications.md b/docs/_posts/2020-02-07-macos_-_re-opened_applications.md index 6da38f2d96..bd76cad872 100644 --- a/docs/_posts/2020-02-07-macos_-_re-opened_applications.md +++ b/docs/_posts/2020-02-07-macos_-_re-opened_applications.md @@ -43,8 +43,8 @@ This search looks for processes referencing the plist files that determine which #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `macos_-_re-opened_applications_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md b/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md index a0be6cc28a..5e5272d2a1 100644 --- a/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md +++ b/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md @@ -54,9 +54,9 @@ Detect the usage of comsvcs.dll for dumping the lsass process. #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `dump_lsass_via_comsvcs_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md b/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md index 518ce60f00..d9cee3116f 100644 --- a/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md +++ b/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md @@ -53,8 +53,8 @@ This search looks for child processes of spoolsv.exe. This activity is associate #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `child_processes_of_spoolsv_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-detect_rare_executables.md b/docs/_posts/2020-03-16-detect_rare_executables.md index 2a8b3abe7c..bf99f3d01c 100644 --- a/docs/_posts/2020-03-16-detect_rare_executables.md +++ b/docs/_posts/2020-03-16-detect_rare_executables.md @@ -50,9 +50,9 @@ This search will return a table of rare processes, the names of the systems runn #### Macros The SPL above uses the following Macros: -* [filter_rare_process_allow_list](https://github.com/splunk/security_content/blob/develop/macros/filter_rare_process_allow_list.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [filter_rare_process_allow_list](https://github.com/splunk/security_content/blob/develop/macros/filter_rare_process_allow_list.yml) Note that `detect_rare_executables_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-process_execution_via_wmi.md b/docs/_posts/2020-03-16-process_execution_via_wmi.md index 9496fd07bd..7af419bebf 100644 --- a/docs/_posts/2020-03-16-process_execution_via_wmi.md +++ b/docs/_posts/2020-03-16-process_execution_via_wmi.md @@ -50,8 +50,8 @@ The following analytic identifies `WmiPrvSE.exe` spawning a process. This typica #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `process_execution_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-script_execution_via_wmi.md b/docs/_posts/2020-03-16-script_execution_via_wmi.md index 298fbb1753..a218eaf7c4 100644 --- a/docs/_posts/2020-03-16-script_execution_via_wmi.md +++ b/docs/_posts/2020-03-16-script_execution_via_wmi.md @@ -50,8 +50,8 @@ This search looks for scripts launched via WMI. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `script_execution_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md b/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md index 2b2c35869d..d96b377bf2 100644 --- a/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md +++ b/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md @@ -54,9 +54,9 @@ This search looks for child processes spawned by zoom.exe or zoom.us that has no #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [previously_seen_zoom_child_processes_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_zoom_child_processes_window.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `first_time_seen_child_process_of_zoom_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md b/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md index 8a917ffe3e..f91f4ffbdd 100644 --- a/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md +++ b/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md @@ -65,8 +65,8 @@ The detection Detect Path Interception By Creation Of program exe is detecting t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_path_interception_by_creation_of_program_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-06-short_lived_windows_accounts.md b/docs/_posts/2020-07-06-short_lived_windows_accounts.md index 4aed66bffe..d7890e8875 100644 --- a/docs/_posts/2020-07-06-short_lived_windows_accounts.md +++ b/docs/_posts/2020-07-06-short_lived_windows_accounts.md @@ -57,8 +57,8 @@ This search detects accounts that were created and deleted in a short time perio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `short_lived_windows_accounts_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-06-windows_event_log_cleared.md b/docs/_posts/2020-07-06-windows_event_log_cleared.md index 6b4e3816b4..ba93c3217a 100644 --- a/docs/_posts/2020-07-06-windows_event_log_cleared.md +++ b/docs/_posts/2020-07-06-windows_event_log_cleared.md @@ -52,9 +52,9 @@ The following analytic utilizes Windows Security Event ID 1102 or System log eve #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_event_log_cleared_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-07-remote_desktop_network_traffic.md b/docs/_posts/2020-07-07-remote_desktop_network_traffic.md index 8aad85046a..fba39f651e 100644 --- a/docs/_posts/2020-07-07-remote_desktop_network_traffic.md +++ b/docs/_posts/2020-07-07-remote_desktop_network_traffic.md @@ -56,8 +56,8 @@ This search looks for network traffic on TCP/3389, the default port used by remo #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_desktop_network_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-08-detect_new_local_admin_account.md b/docs/_posts/2020-07-08-detect_new_local_admin_account.md index 6738568aaf..b86d96734e 100644 --- a/docs/_posts/2020-07-08-detect_new_local_admin_account.md +++ b/docs/_posts/2020-07-08-detect_new_local_admin_account.md @@ -54,8 +54,8 @@ This search looks for newly created accounts that have been elevated to local ad #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_new_local_admin_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-attempt_to_stop_security_service.md b/docs/_posts/2020-07-21-attempt_to_stop_security_service.md index d440d82b46..d402c4f1de 100644 --- a/docs/_posts/2020-07-21-attempt_to_stop_security_service.md +++ b/docs/_posts/2020-07-21-attempt_to_stop_security_service.md @@ -56,9 +56,9 @@ This search looks for attempts to stop security-related services on the endpoint #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `attempt_to_stop_security_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md b/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md index a7b95cad3c..ded151b76e 100644 --- a/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md +++ b/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md @@ -62,8 +62,8 @@ This search detects user accounts that have been locked out a relatively high nu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_excessive_user_account_lockouts_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md b/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md index 1a67653342..fad3ba22f2 100644 --- a/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md +++ b/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md @@ -56,8 +56,8 @@ This search looks for outbound SMB connections made by hosts within your network #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_outbound_smb_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md b/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md index d4d162ee5c..83dfd0fc3b 100644 --- a/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md +++ b/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md @@ -66,8 +66,8 @@ This search looks for execution of process `outlook.exe` where the process is wr #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_outlook_exe_writing_a_zip_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md b/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md index 157b56b014..124b35489e 100644 --- a/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md +++ b/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md @@ -54,8 +54,8 @@ This search looks for the execution of the cscript.exe or wscript.exe processes, #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_use_of_cmd_exe_to_launch_script_interpreters_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md b/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md index 2d2f485cf8..692adf19cd 100644 --- a/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md +++ b/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md @@ -53,8 +53,8 @@ This search looks for specific command-line arguments that may indicate the exec #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detection_of_tools_built_by_nirsoft_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md b/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md index a672c04359..e3c9fe324a 100644 --- a/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md +++ b/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md @@ -56,8 +56,8 @@ The search looks at the change-analysis data model and detects email files creat #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `email_files_written_outside_of_the_outlook_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md b/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md index 4c3da77b2a..cff9613794 100644 --- a/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md +++ b/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md @@ -56,8 +56,8 @@ This search looks for the first and last time a Windows service is seen running #### Macros The SPL above uses the following Macros: -* [previously_seen_windows_services_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_windows_services_window.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [previously_seen_windows_services_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_windows_services_window.yml) Note that `first_time_seen_running_windows_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md b/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md index bcd70dc24d..23df537e8e 100644 --- a/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md +++ b/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md @@ -54,8 +54,8 @@ Attackers leverage an existing Windows binary, attrib.exe, to mark specific as h #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `hiding_files_and_directories_with_attrib_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md b/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md index 9c6332f9c0..dd52674079 100644 --- a/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md +++ b/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md @@ -54,9 +54,9 @@ This search looks for PowerShell processes started with parameters used to bypas #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `malicious_powershell_process_-_execution_policy_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-multiple_okta_users_with_invalid_credentials_from_the_same_ip.md b/docs/_posts/2020-07-21-multiple_okta_users_with_invalid_credentials_from_the_same_ip.md index 414e2691c0..9cdbfd7cea 100644 --- a/docs/_posts/2020-07-21-multiple_okta_users_with_invalid_credentials_from_the_same_ip.md +++ b/docs/_posts/2020-07-21-multiple_okta_users_with_invalid_credentials_from_the_same_ip.md @@ -62,8 +62,8 @@ This search detects Okta login failures due to bad credentials for multiple user #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [okta](https://github.com/splunk/security_content/blob/develop/macros/okta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `multiple_okta_users_with_invalid_credentials_from_the_same_ip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-okta_failed_sso_attempts.md b/docs/_posts/2020-07-21-okta_failed_sso_attempts.md index 43e9065f06..4a68126027 100644 --- a/docs/_posts/2020-07-21-okta_failed_sso_attempts.md +++ b/docs/_posts/2020-07-21-okta_failed_sso_attempts.md @@ -60,8 +60,8 @@ Detect failed Okta SSO events #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [okta](https://github.com/splunk/security_content/blob/develop/macros/okta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `okta_failed_sso_attempts_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-okta_user_logins_from_multiple_cities.md b/docs/_posts/2020-07-21-okta_user_logins_from_multiple_cities.md index f7531a3385..d76b90acaf 100644 --- a/docs/_posts/2020-07-21-okta_user_logins_from_multiple_cities.md +++ b/docs/_posts/2020-07-21-okta_user_logins_from_multiple_cities.md @@ -61,8 +61,8 @@ This search detects logins from the same user from different cities in a 24 hour #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [okta](https://github.com/splunk/security_content/blob/develop/macros/okta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `okta_user_logins_from_multiple_cities_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md b/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md index f30ef06414..b83a16a9e1 100644 --- a/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md +++ b/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md @@ -56,8 +56,8 @@ Microsoft Windows contains accessibility features that can be launched with a ke #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `overwriting_accessibility_binaries_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md b/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md index cf4ffb1f22..63e7d6ee79 100644 --- a/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md +++ b/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md @@ -54,8 +54,8 @@ This search looks for network traffic defined by port and transport layer protoc #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `prohibited_network_traffic_allowed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-protocol_or_port_mismatch.md b/docs/_posts/2020-07-21-protocol_or_port_mismatch.md index 959c7450e1..ee72ce5b6c 100644 --- a/docs/_posts/2020-07-21-protocol_or_port_mismatch.md +++ b/docs/_posts/2020-07-21-protocol_or_port_mismatch.md @@ -56,8 +56,8 @@ This search looks for network traffic on common ports where a higher layer proto #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `protocol_or_port_mismatch_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md b/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md index f8b0758ffe..ccd93b4db1 100644 --- a/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md +++ b/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md @@ -56,8 +56,8 @@ This search looks for the remote desktop process mstsc.exe running on systems up #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_desktop_process_running_on_system_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md b/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md index af7f4c678d..a54fb51100 100644 --- a/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md +++ b/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md @@ -56,8 +56,8 @@ This search looks for arguments to sc.exe indicating the creation or modificatio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `sc_exe_manipulating_windows_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md b/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md index 41d47eec72..f110972f9f 100644 --- a/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md +++ b/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md @@ -57,9 +57,9 @@ This search looks for emails that have attachments with suspicious file extensio #### Macros The SPL above uses the following Macros: -* [suspicious_email_attachments](https://github.com/splunk/security_content/blob/develop/macros/suspicious_email_attachments.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [suspicious_email_attachments](https://github.com/splunk/security_content/blob/develop/macros/suspicious_email_attachments.yml) Note that `suspicious_email_attachment_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-suspicious_reg_exe_process.md b/docs/_posts/2020-07-22-suspicious_reg_exe_process.md index e1d878bde6..8fb5749084 100644 --- a/docs/_posts/2020-07-22-suspicious_reg_exe_process.md +++ b/docs/_posts/2020-07-22-suspicious_reg_exe_process.md @@ -58,8 +58,8 @@ This search looks for reg.exe being launched from a command prompt not started b #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_reg_exe_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-tor_traffic.md b/docs/_posts/2020-07-22-tor_traffic.md index fde28335a5..a22c98ffff 100644 --- a/docs/_posts/2020-07-22-tor_traffic.md +++ b/docs/_posts/2020-07-22-tor_traffic.md @@ -56,8 +56,8 @@ This search looks for network traffic identified as The Onion Router (TOR), a be #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `tor_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md b/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md index bf8e020066..c08b088437 100644 --- a/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md +++ b/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md @@ -55,8 +55,8 @@ Attackers often disable security tools to avoid detection. This search looks for #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `unload_sysmon_filter_driver_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md b/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md index 9ca3673fcc..199ace2b85 100644 --- a/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md +++ b/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md @@ -56,8 +56,8 @@ This search detects SIGRed via Splunk Stream. #### Macros The SPL above uses the following Macros: -* [stream_dns](https://github.com/splunk/security_content/blob/develop/macros/stream_dns.yml) * [stream_tcp](https://github.com/splunk/security_content/blob/develop/macros/stream_tcp.yml) +* [stream_dns](https://github.com/splunk/security_content/blob/develop/macros/stream_dns.yml) Note that `detect_windows_dns_sigred_via_splunk_stream_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md b/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md index ac7e63f4a1..f67ec9d79e 100644 --- a/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md +++ b/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md @@ -66,8 +66,8 @@ This search looks for cloud instances being modified by users who have not previ #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `cloud_instance_modified_by_previously_unseen_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md b/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md index a6d08ea3f2..80476d702e 100644 --- a/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md +++ b/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md @@ -55,9 +55,9 @@ This search looks for the creation or deletion of hidden shares using net.exe. #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `create_or_delete_windows_shares_using_net_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md b/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md index 7453e7282e..cab3e1de0b 100644 --- a/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md +++ b/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md @@ -55,8 +55,8 @@ This search looks for specific authentication events from the Windows Security E #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_activity_related_to_pass_the_hash_attacks_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md b/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md index a797777947..927835f1da 100644 --- a/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md +++ b/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md @@ -52,8 +52,8 @@ This search detects a potential kerberoasting attack via service principal name #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `kerberoasting_spn_request_with_rc4_encryption_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_software_download_to_network_device.md b/docs/_posts/2020-10-28-detect_software_download_to_network_device.md index 8f5e118015..4391c11cbe 100644 --- a/docs/_posts/2020-10-28-detect_software_download_to_network_device.md +++ b/docs/_posts/2020-10-28-detect_software_download_to_network_device.md @@ -58,8 +58,8 @@ Adversaries may abuse netbooting to load an unauthorized network device operatin #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_software_download_to_network_device_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-06-ryuk_test_files_detected.md b/docs/_posts/2020-11-06-ryuk_test_files_detected.md index cf3782464b..2351d756f9 100644 --- a/docs/_posts/2020-11-06-ryuk_test_files_detected.md +++ b/docs/_posts/2020-11-06-ryuk_test_files_detected.md @@ -49,8 +49,8 @@ The search looks for files that contain the key word *Ryuk* under any folder in #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `ryuk_test_files_detected_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md b/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md index 2657bf5f90..d164edfcc1 100644 --- a/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md +++ b/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md @@ -54,8 +54,8 @@ Monitor for changes of the ExecutionPolicy in the registry to the values "un #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `set_default_powershell_execution_policy_to_unrestricted_or_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md b/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md index f3ad707faa..135d0ff2f1 100644 --- a/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md +++ b/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md @@ -49,8 +49,8 @@ The search looks for a Windows Security Account Manager (SAM) was stopped via co #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_security_account_manager_stopped_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-common_ransomware_extensions.md b/docs/_posts/2020-11-09-common_ransomware_extensions.md index 2475a86dc5..f37adcf073 100644 --- a/docs/_posts/2020-11-09-common_ransomware_extensions.md +++ b/docs/_posts/2020-11-09-common_ransomware_extensions.md @@ -53,8 +53,8 @@ The search looks for file modifications with extensions commonly used by Ransomw #### Macros The SPL above uses the following Macros: * [ransomware_extensions](https://github.com/splunk/security_content/blob/develop/macros/ransomware_extensions.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `common_ransomware_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-common_ransomware_notes.md b/docs/_posts/2020-11-09-common_ransomware_notes.md index 3cb530adc6..7b27a062c3 100644 --- a/docs/_posts/2020-11-09-common_ransomware_notes.md +++ b/docs/_posts/2020-11-09-common_ransomware_notes.md @@ -51,9 +51,9 @@ The search looks for files created with names matching those typically used in r #### Macros The SPL above uses the following Macros: -* [ransomware_notes](https://github.com/splunk/security_content/blob/develop/macros/ransomware_notes.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [ransomware_notes](https://github.com/splunk/security_content/blob/develop/macros/ransomware_notes.yml) Note that `common_ransomware_notes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-deleting_shadow_copies.md b/docs/_posts/2020-11-09-deleting_shadow_copies.md index f4526a1c69..b827e97043 100644 --- a/docs/_posts/2020-11-09-deleting_shadow_copies.md +++ b/docs/_posts/2020-11-09-deleting_shadow_copies.md @@ -50,8 +50,8 @@ The vssadmin.exe utility is used to interact with the Volume Shadow Copy Service #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `deleting_shadow_copies_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md b/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md index f6cdcea037..e972aff99c 100644 --- a/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md +++ b/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md @@ -62,8 +62,8 @@ This search identifies endpoints that have caused a relatively high number of ac #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_excessive_account_lockouts_from_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md b/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md index f0df13e071..d571cac08a 100644 --- a/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md +++ b/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md @@ -54,9 +54,9 @@ This search looks for fast execution of processes used for system network config #### Macros The SPL above uses the following Macros: -* [system_network_configuration_discovery_tools](https://github.com/splunk/security_content/blob/develop/macros/system_network_configuration_discovery_tools.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [system_network_configuration_discovery_tools](https://github.com/splunk/security_content/blob/develop/macros/system_network_configuration_discovery_tools.yml) Note that `detect_processes_used_for_system_network_configuration_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md b/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md index 3600b15dd1..439aa67cbf 100644 --- a/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md +++ b/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md @@ -54,8 +54,8 @@ This search looks for processes launched from files that have double extensions #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `execution_of_file_with_multiple_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md b/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md index bd9de3e6b8..9d5325b0ab 100644 --- a/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md +++ b/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md @@ -56,8 +56,8 @@ This search detects the process execution and arguments required to silently cre #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `shim_database_installation_with_suspicious_parameters_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md b/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md index 67facd573d..f918645982 100644 --- a/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md +++ b/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md @@ -58,8 +58,8 @@ The search looks for reg.exe modifying registry keys that define Windows service #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `reg_exe_manipulating_windows_services_registry_keys_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md b/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md index ff24cc057e..0a07e59059 100644 --- a/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md +++ b/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md @@ -55,8 +55,8 @@ This search looks for registry activity associated with application compatibilit #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `registry_keys_for_creating_shim_databases_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-30-rundll_loading_dll_by_ordinal.md b/docs/_posts/2020-11-30-rundll_loading_dll_by_ordinal.md deleted file mode 100644 index fc40d2250b..0000000000 --- a/docs/_posts/2020-11-30-rundll_loading_dll_by_ordinal.md +++ /dev/null @@ -1,109 +0,0 @@ ---- -title: "RunDLL Loading DLL By Ordinal" -excerpt: "Signed Binary Proxy Execution, Rundll32" -categories: - - Endpoint -last_modified_at: 2020-11-30 -toc: true -toc_label: "" -tags: - - Signed Binary Proxy Execution - - Defense Evasion - - Rundll32 - - Defense Evasion - - Splunk Enterprise - - Splunk Enterprise Security - - Splunk Cloud - - Endpoint ---- - - - -[Try in Splunk Security Cloud](https://www.splunk.com/en_us/cyber-security.html){: .btn .btn--success} - -#### Description - -This search looks for executing scripts with rundll32. Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly, may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. - -- **Type**: [TTP](https://github.com/splunk/security_content/wiki/Detection-Analytic-Types) -- **Product**: Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud -- **Datamodel**: [Endpoint](https://docs.splunk.com/Documentation/CIM/latest/User/Endpoint) -- **Last Updated**: 2020-11-30 -- **Author**: David Dorsey, Splunk -- **ID**: 6c135f8d-5e60-454e-80b7-c56eed739833 - - -#### [ATT&CK](https://attack.mitre.org/) - -| ID | Technique | Tactic | -| -------------- | ---------------- |-------------------- | -| [T1218](https://attack.mitre.org/techniques/T1218/) | Signed Binary Proxy Execution | Defense Evasion | - -| [T1218.011](https://attack.mitre.org/techniques/T1218/011/) | Rundll32 | Defense Evasion | - -#### Search - -``` - -| tstats `security_content_summariesonly` values(Processes.process) as process min(_time) as firstTime max(_time) as lastTime from datamodel=Endpoint.Processes where `process_rundll32` by Processes.process_name Processes.parent_process_name Processes.original_file_name Processes.process Processes.dest Processes.user -| `drop_dm_object_name(Processes)` -| `security_content_ctime(firstTime)` -| `security_content_ctime(lastTime)` -| `rundll_loading_dll_by_ordinal_filter` -``` - -#### Macros -The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) - -Note that `rundll_loading_dll_by_ordinal_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. - -#### Required field -* _time -* Processes.dest -* Processes.user -* Processes.parent_process_name -* Processes.parent_process -* Processes.original_file_name -* Processes.process_name -* Processes.process -* Processes.process_id -* Processes.parent_process_path -* Processes.process_path -* Processes.parent_process_id - - -#### How To Implement -To successfully implement this search you need to be ingesting information on process that include the name of the process responsible for the changes from your endpoints into the `Endpoint` datamodel in the `Processes` node. In addition, confirm the latest CIM App 4.20 or higher is installed and the latest TA for the endpoint product. - -#### Known False Positives -While not common, loading a DLL under %AppData% and calling a function by ordinal is possible by a legitimate process - -#### Kill Chain Phase -* Installation - - - -#### RBA - -| Risk Score | Impact | Confidence | Message | -| ----------- | ----------- |--------------|--------------| -| 70.0 | 70 | 100 | A rundll32 process $process_name$ with ordinal parameter like this process commandline $process$ in host $dest$ | - - - - -#### Reference - - -#### Test Dataset -Replay any dataset to Splunk Enterprise by using our [`replay.py`](https://github.com/splunk/attack_data#using-replaypy) tool or the [UI](https://github.com/splunk/attack_data#using-ui). -Alternatively you can replay a dataset into a [Splunk Attack Range](https://github.com/splunk/attack_range#replay-dumps-into-attack-range-splunk-server) - -* [https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1218.011/atomic_red_team/windows-sysmon.log](https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1218.011/atomic_red_team/windows-sysmon.log) - - - -[*source*](https://github.com/splunk/security_content/tree/develop/detections/endpoint/rundll_loading_dll_by_ordinal.yml) \| *version*: **5** \ No newline at end of file diff --git a/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md b/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md index 4ea2fd9f70..1ad60a9fd8 100644 --- a/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md +++ b/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md @@ -58,8 +58,8 @@ This search looks for flags passed to schtasks.exe on the command-line that indi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `schtasks_used_for_forcing_a_reboot_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-shim_database_file_creation.md b/docs/_posts/2020-12-08-shim_database_file_creation.md index 9cb77436c2..b370f5651a 100644 --- a/docs/_posts/2020-12-08-shim_database_file_creation.md +++ b/docs/_posts/2020-12-08-shim_database_file_creation.md @@ -55,8 +55,8 @@ This search looks for shim database files being written to default directories. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `shim_database_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md b/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md index 3ed544d810..1d719413ca 100644 --- a/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md +++ b/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md @@ -57,8 +57,8 @@ This search looks for process names that consist only of a single letter. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `single_letter_process_on_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md b/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md index f082ac7ae8..9e93a6af79 100644 --- a/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md +++ b/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md @@ -58,8 +58,8 @@ During triage, review the parallel processes - what process moved the native Win #### Macros The SPL above uses the following Macros: * [is_windows_system_file](https://github.com/splunk/security_content/blob/develop/macros/is_windows_system_file.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `system_processes_run_from_unexpected_locations_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-unusually_long_command_line.md b/docs/_posts/2020-12-08-unusually_long_command_line.md index e10ce8f2f4..d0147c8da9 100644 --- a/docs/_posts/2020-12-08-unusually_long_command_line.md +++ b/docs/_posts/2020-12-08-unusually_long_command_line.md @@ -47,8 +47,8 @@ Command lines that are extremely long may be indicative of malicious activity on #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `unusually_long_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md b/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md index a27f4656cd..374f59d94f 100644 --- a/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md +++ b/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md @@ -58,8 +58,8 @@ This search looks for flags passed to schtasks.exe on the command-line that indi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `scheduled_task_deleted_or_created_via_cmd_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md b/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md index ed3f2af60d..e8eae5df9b 100644 --- a/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md +++ b/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md @@ -50,8 +50,8 @@ This search looks for flags passed to bcdedit.exe modifications to the built-in #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `bcdedit_failure_recovery_modification_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md b/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md index b44cc439fd..e6a6c7a038 100644 --- a/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md +++ b/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md @@ -56,8 +56,8 @@ This search provides detection of KMS keys where action kms:Encrypt is accessibl #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_detect_users_creating_keys_with_encrypt_policy_without_mfa_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md b/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md index 3fb4142bd9..8454f69e07 100644 --- a/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md +++ b/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md @@ -50,8 +50,8 @@ This search provides detection of users with KMS keys performing encryption spec #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_detect_users_with_kms_keys_performing_encryption_s3_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md b/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md index 08ed898c0d..4237df15e1 100644 --- a/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md +++ b/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md @@ -57,8 +57,8 @@ The search looks for AWS CloudTrail events to detect if any network ACLs were cr #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_network_access_control_list_created_with_all_open_ports_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md b/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md index 3b76728ac7..14ee9b2b1c 100644 --- a/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md +++ b/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md @@ -54,8 +54,8 @@ Enforcing network-access controls is one of the defensive mechanisms used by clo #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_network_access_control_list_deleted_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md b/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md index 9cff0748ad..42ffabd213 100644 --- a/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md +++ b/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md @@ -50,9 +50,9 @@ The following analytic identifies microsoft.workflow.compiler.exe usage. microso #### Macros The SPL above uses the following Macros: -* [process_microsoftworkflowcompiler](https://github.com/splunk/security_content/blob/develop/macros/process_microsoftworkflowcompiler.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_microsoftworkflowcompiler](https://github.com/splunk/security_content/blob/develop/macros/process_microsoftworkflowcompiler.yml) Note that `suspicious_microsoft_workflow_compiler_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_msbuild_path.md b/docs/_posts/2021-01-12-suspicious_msbuild_path.md index d80ce55062..4fe3c6f325 100644 --- a/docs/_posts/2021-01-12-suspicious_msbuild_path.md +++ b/docs/_posts/2021-01-12-suspicious_msbuild_path.md @@ -63,8 +63,8 @@ The following analytic identifies msbuild.exe executing from a non-standard path #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_msbuild_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_msbuild_rename.md b/docs/_posts/2021-01-12-suspicious_msbuild_rename.md index 8385989040..96e04cbb2f 100644 --- a/docs/_posts/2021-01-12-suspicious_msbuild_rename.md +++ b/docs/_posts/2021-01-12-suspicious_msbuild_rename.md @@ -63,8 +63,8 @@ The following analytic identifies renamed instances of msbuild.exe executing. Ms #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_msbuild_rename_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md b/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md index 97e3352761..783c6be761 100644 --- a/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md +++ b/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md @@ -55,8 +55,8 @@ The following analytic identifies wmiprvse.exe spawning msbuild.exe. This behavi #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_msbuild_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_mshta_child_process.md b/docs/_posts/2021-01-12-suspicious_mshta_child_process.md index 7ee6e8ee00..0dee3d917a 100644 --- a/docs/_posts/2021-01-12-suspicious_mshta_child_process.md +++ b/docs/_posts/2021-01-12-suspicious_mshta_child_process.md @@ -54,8 +54,8 @@ The following analytic identifies child processes spawning from "mshta.exe& #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_mshta_child_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md b/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md index 92e1219b1d..d792892e5f 100644 --- a/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md +++ b/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md @@ -51,8 +51,8 @@ Malicious actors often abuse legitimate Dynamic DNS services to host malicious p #### Macros The SPL above uses the following Macros: * [dynamic_dns_providers](https://github.com/splunk/security_content/blob/develop/macros/dynamic_dns_providers.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_hosts_connecting_to_dynamic_domain_providers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md b/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md index cf26597d0f..641c534fb8 100644 --- a/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md +++ b/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md @@ -56,9 +56,9 @@ This search looks for PowerShell processes launched with arguments that have cha #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `malicious_powershell_process_with_obfuscation_techniques_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md b/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md index 599cf9fd29..b752d2c46a 100644 --- a/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md +++ b/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md @@ -54,9 +54,9 @@ The following analytic identifies "rundll32.exe" execution with inline p #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_inline_hta_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-20-suspicious_mshta_spawn.md b/docs/_posts/2021-01-20-suspicious_mshta_spawn.md index 80bd26e56c..a793577eb9 100644 --- a/docs/_posts/2021-01-20-suspicious_mshta_spawn.md +++ b/docs/_posts/2021-01-20-suspicious_mshta_spawn.md @@ -54,9 +54,9 @@ The following analytic identifies wmiprvse.exe spawning mshta.exe. This behavior #### Macros The SPL above uses the following Macros: -* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) Note that `suspicious_mshta_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md b/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md index 5cdd4df6b9..16ca9e12a5 100644 --- a/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md +++ b/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md @@ -50,8 +50,8 @@ This search looks for flags passed to wbadmin.exe (Windows Backup Administrator #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wbadmin_delete_system_backups_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md b/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md index dfc4b51beb..cf530df0cb 100644 --- a/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md +++ b/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md @@ -50,8 +50,8 @@ This search looks for the execution of `nltest.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `nltest_domain_trust_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md b/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md index d593083511..7342d61b19 100644 --- a/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md +++ b/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md @@ -52,8 +52,8 @@ This search provides specific SAML access from specific Service Provider, user a #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_saml_access_by_provider_user_and_principal_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md b/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md index 10f1bba1a2..4c4d4ab5eb 100644 --- a/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md +++ b/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md @@ -52,8 +52,8 @@ This search provides detection of updates to SAML provider in AWS. Updates to SA #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_saml_update_identity_provider_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md b/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md index 1de9b24b58..d8e2eb5c1a 100644 --- a/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md +++ b/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md @@ -40,8 +40,8 @@ This search looks for arguments to certutil.exe indicating the manipulation or e #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_exe_certificate_extraction_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md b/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md index 2bb9f1078f..149555c249 100644 --- a/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md +++ b/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md @@ -55,9 +55,9 @@ Upon investigating, look for network connections to remote destinations (interna #### Macros The SPL above uses the following Macros: -* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) Note that `detect_regsvr32_application_control_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-28-ntdsutil_export_ntds.md b/docs/_posts/2021-01-28-ntdsutil_export_ntds.md index 818c5b9538..7cb3c85c97 100644 --- a/docs/_posts/2021-01-28-ntdsutil_export_ntds.md +++ b/docs/_posts/2021-01-28-ntdsutil_export_ntds.md @@ -56,8 +56,8 @@ This technique uses "Install from Media" (IFM), which will extract a cop #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `ntdsutil_export_ntds_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md b/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md index e8f27e3d78..8e831ac2a0 100644 --- a/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md +++ b/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md @@ -54,9 +54,9 @@ Adversaries may abuse Regsvr32.exe to proxy execution of malicious code by using #### Macros The SPL above uses the following Macros: -* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) Note that `suspicious_regsvr32_register_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md index 63bdaeb27b..53d47e5941 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe loading advpack.dll and ieadvpack #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_application_control_bypass_-_advpack_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md index 551faeaa90..33c451c239 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe loading setupapi.dll and iesetupa #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_application_control_bypass_-_setupapi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md index 3210b16d24..19ef049cb3 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe loading syssetup.dll by calling t #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_application_control_bypass_-_syssetup_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-suspicious_rundll32_rename.md b/docs/_posts/2021-02-04-suspicious_rundll32_rename.md deleted file mode 100644 index dbc01c5cb1..0000000000 --- a/docs/_posts/2021-02-04-suspicious_rundll32_rename.md +++ /dev/null @@ -1,122 +0,0 @@ ---- -title: "Suspicious Rundll32 Rename" -excerpt: "Signed Binary Proxy Execution, Masquerading, Rundll32, Rename System Utilities" -categories: - - Endpoint -last_modified_at: 2021-02-04 -toc: true -toc_label: "" -tags: - - Signed Binary Proxy Execution - - Defense Evasion - - Masquerading - - Defense Evasion - - Rundll32 - - Defense Evasion - - Rename System Utilities - - Defense Evasion - - Splunk Enterprise - - Splunk Enterprise Security - - Splunk Cloud - - Endpoint ---- - - - -[Try in Splunk Security Cloud](https://www.splunk.com/en_us/cyber-security.html){: .btn .btn--success} - -#### Description - -The following analytic identifies renamed instances of rundll32.exe executing. rundll32.exe is natively found in C:\Windows\system32 and C:\Windows\syswow64. During investigation, validate it is the legitimate rundll32.exe executing and what script content it is loading. This query relies on the original filename or internal name from the PE meta data. Expand the query as needed by looking for specific command line arguments outlined in other analytics. - -- **Type**: [Hunting](https://github.com/splunk/security_content/wiki/Detection-Analytic-Types) -- **Product**: Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud -- **Datamodel**: [Endpoint](https://docs.splunk.com/Documentation/CIM/latest/User/Endpoint) -- **Last Updated**: 2021-02-04 -- **Author**: Michael Haag, Splunk -- **ID**: 7360137f-abad-473e-8189-acbdaa34d114 - - -#### [ATT&CK](https://attack.mitre.org/) - -| ID | Technique | Tactic | -| -------------- | ---------------- |-------------------- | -| [T1218](https://attack.mitre.org/techniques/T1218/) | Signed Binary Proxy Execution | Defense Evasion | - -| [T1036](https://attack.mitre.org/techniques/T1036/) | Masquerading | Defense Evasion | - -| [T1218.011](https://attack.mitre.org/techniques/T1218/011/) | Rundll32 | Defense Evasion | - -| [T1036.003](https://attack.mitre.org/techniques/T1036/003/) | Rename System Utilities | Defense Evasion | - -#### Search - -``` - -| tstats `security_content_summariesonly` count min(_time) as firstTime max(_time) as lastTime from datamodel=Endpoint.Processes where `process_rundll32` by Processes.dest Processes.user Processes.parent_process_name Processes.process_name Processes.process Processes.process_id Processes.parent_process_id Processes.original_file_name -| `drop_dm_object_name(Processes)` -| `security_content_ctime(firstTime)` -| `security_content_ctime(lastTime)` -| `suspicious_rundll32_rename_filter` -``` - -#### Macros -The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) - -Note that `suspicious_rundll32_rename_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. - -#### Required field -* _time -* Processes.dest -* Processes.user -* Processes.parent_process_name -* Processes.parent_process -* Processes.original_file_name -* Processes.process_name -* Processes.process -* Processes.process_id -* Processes.parent_process_path -* Processes.process_path -* Processes.parent_process_id - - -#### How To Implement -To successfully implement this search you need to be ingesting information on process that include the name of the process responsible for the changes from your endpoints into the `Endpoint` datamodel in the `Processes` node. In addition, confirm the latest CIM App 4.20 or higher is installed and the latest TA for the endpoint product. - -#### Known False Positives -Although unlikely, some legitimate applications may use a moved copy of rundll32, triggering a false positive. - -#### Kill Chain Phase -* Actions on Objectives - - - -#### RBA - -| Risk Score | Impact | Confidence | Message | -| ----------- | ----------- |--------------|--------------| -| 63.0 | 70 | 90 | Suspicious renamed rundll32.exe binary ran on $dest$ by $user$ | - - - - -#### Reference - -* [https://attack.mitre.org/techniques/T1218/011/](https://attack.mitre.org/techniques/T1218/011/) -* [https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1218.011/T1218.011.md](https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1218.011/T1218.011.md) -* [https://lolbas-project.github.io/lolbas/Binaries/Rundll32](https://lolbas-project.github.io/lolbas/Binaries/Rundll32) - - - -#### Test Dataset -Replay any dataset to Splunk Enterprise by using our [`replay.py`](https://github.com/splunk/attack_data#using-replaypy) tool or the [UI](https://github.com/splunk/attack_data#using-ui). -Alternatively you can replay a dataset into a [Splunk Attack Range](https://github.com/splunk/attack_range#replay-dumps-into-attack-range-splunk-server) - -* [https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1218.011/atomic_red_team/windows-sysmon.log](https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1218.011/atomic_red_team/windows-sysmon.log) - - - -[*source*](https://github.com/splunk/security_content/tree/develop/detections/endpoint/suspicious_rundll32_rename.yml) \| *version*: **3** \ No newline at end of file diff --git a/docs/_posts/2021-02-04-suspicious_rundll32_startw.md b/docs/_posts/2021-02-04-suspicious_rundll32_startw.md index 1de93e1a54..8b0c6d3ad9 100644 --- a/docs/_posts/2021-02-04-suspicious_rundll32_startw.md +++ b/docs/_posts/2021-02-04-suspicious_rundll32_startw.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe executing a DLL function name, St #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_startw_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md b/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md index 549a698978..6128640c39 100644 --- a/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md +++ b/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe using dllregisterserver on the co #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_dllregisterserver_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md b/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md index 789f5db52b..8c6ba6eddb 100644 --- a/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md +++ b/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md @@ -54,8 +54,8 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_spawn_child_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md b/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md index d0f916d569..f61960f475 100644 --- a/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md +++ b/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md @@ -54,8 +54,8 @@ The following analytic identifies regasm.exe spawning a process. This particular #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_regasm_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md b/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md index be153ef052..96ed434ee1 100644 --- a/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md +++ b/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md @@ -54,8 +54,8 @@ The following analytic identifies regsvcs.exe spawning a process. This particula #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_regsvcs_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md b/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md index 07770aad57..78440dde0c 100644 --- a/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md +++ b/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md @@ -63,8 +63,8 @@ This search looks for AWS CloudTrail events where a user created a policy versio #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_create_policy_version_to_allow_all_resources_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-suspicious_curl_network_connection.md b/docs/_posts/2021-02-22-suspicious_curl_network_connection.md index 5428e35ec1..cb31c2d663 100644 --- a/docs/_posts/2021-02-22-suspicious_curl_network_connection.md +++ b/docs/_posts/2021-02-22-suspicious_curl_network_connection.md @@ -52,8 +52,8 @@ The following analytic identifies the use of a curl contacting suspicious remote #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_curl_network_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md b/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md index 765ccdd1f7..9aeec4d031 100644 --- a/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md +++ b/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md @@ -65,8 +65,8 @@ Upon triage, capture the property list file being written to disk and review for #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_plistbuddy_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md b/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md index 121d82b08f..683664f1aa 100644 --- a/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md +++ b/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md @@ -52,8 +52,8 @@ The following analytic identifies the use of a SQLite3 querying the MacOS prefer #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_sqlite3_lsquarantine_behavior_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-any_powershell_downloadfile.md b/docs/_posts/2021-03-01-any_powershell_downloadfile.md index 0bef56449e..887e9f3479 100644 --- a/docs/_posts/2021-03-01-any_powershell_downloadfile.md +++ b/docs/_posts/2021-03-01-any_powershell_downloadfile.md @@ -55,9 +55,9 @@ The following analytic identifies the use of PowerShell downloading a file using #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `any_powershell_downloadfile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-any_powershell_downloadstring.md b/docs/_posts/2021-03-01-any_powershell_downloadstring.md index da0ec36b57..b58b2015c1 100644 --- a/docs/_posts/2021-03-01-any_powershell_downloadstring.md +++ b/docs/_posts/2021-03-01-any_powershell_downloadstring.md @@ -54,9 +54,9 @@ The following analytic identifies the use of PowerShell downloading a file using #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `any_powershell_downloadstring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-fodhelper_uac_bypass.md b/docs/_posts/2021-03-01-fodhelper_uac_bypass.md index d7df781863..61f88dc86f 100644 --- a/docs/_posts/2021-03-01-fodhelper_uac_bypass.md +++ b/docs/_posts/2021-03-01-fodhelper_uac_bypass.md @@ -64,8 +64,8 @@ Upon triage, fodhelper.exe will have a child process and read access will occur #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `fodhelper_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md b/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md index c6913d9176..0519d0ee2d 100644 --- a/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md +++ b/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md @@ -54,8 +54,8 @@ This Splunk query identifies the use of Wake-on-LAN utilized by Ryuk ransomware. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `ryuk_wake_on_lan_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md b/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md index 6baad1e3ba..422870cfc7 100644 --- a/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md +++ b/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md @@ -58,8 +58,8 @@ The following detection identifies Scheduled Tasks registering (creating a new t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_scheduled_task_from_public_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md b/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md index 68da1286d8..65479dc66e 100644 --- a/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md +++ b/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md @@ -59,8 +59,8 @@ This search looks for AWS CloudTrail events where a user has set a default polic #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_setdefaultpolicyversion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md b/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md index 451e3eae36..c1da9a722c 100644 --- a/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md +++ b/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md @@ -51,8 +51,8 @@ This detection identifies Microsoft Exchange Server's Unified Messaging serv #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `unified_messaging_service_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-02-windows_disableantispyware_registry.md b/docs/_posts/2021-03-02-windows_disableantispyware_registry.md index 4014bd1a7b..e27ddd565f 100644 --- a/docs/_posts/2021-03-02-windows_disableantispyware_registry.md +++ b/docs/_posts/2021-03-02-windows_disableantispyware_registry.md @@ -54,8 +54,8 @@ The search looks for the Registry Key DisableAntiSpyware set to disable. This is #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_disableantispyware_registry_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-03-nishang_powershelltcponeline.md b/docs/_posts/2021-03-03-nishang_powershelltcponeline.md index 7cbe194dbe..bc0cd01551 100644 --- a/docs/_posts/2021-03-03-nishang_powershelltcponeline.md +++ b/docs/_posts/2021-03-03-nishang_powershelltcponeline.md @@ -54,9 +54,9 @@ This query detects the Nishang Invoke-PowerShellTCPOneLine utility that spawns a #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `nishang_powershelltcponeline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-03-w3wp_spawning_shell.md b/docs/_posts/2021-03-03-w3wp_spawning_shell.md index fa685a3fd8..d45478d5ea 100644 --- a/docs/_posts/2021-03-03-w3wp_spawning_shell.md +++ b/docs/_posts/2021-03-03-w3wp_spawning_shell.md @@ -57,10 +57,10 @@ This query identifies a shell, PowerShell.exe or Cmd.exe, spawning from W3WP.exe #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `w3wp_spawning_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-12-resize_shadowstorage_volume.md b/docs/_posts/2021-03-12-resize_shadowstorage_volume.md index ddd6915e59..d33046e631 100644 --- a/docs/_posts/2021-03-12-resize_shadowstorage_volume.md +++ b/docs/_posts/2021-03-12-resize_shadowstorage_volume.md @@ -50,8 +50,8 @@ The following analytics identifies the resizing of shadowstorage by ransomware m #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `resize_shadowstorage_volume_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-17-clop_common_exec_parameter.md b/docs/_posts/2021-03-17-clop_common_exec_parameter.md index 068515d48f..464d1a05de 100644 --- a/docs/_posts/2021-03-17-clop_common_exec_parameter.md +++ b/docs/_posts/2021-03-17-clop_common_exec_parameter.md @@ -50,8 +50,8 @@ The following analytics are designed to identifies some CLOP ransomware variant #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `clop_common_exec_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md b/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md index 11d3adae0e..a544f841d7 100644 --- a/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md +++ b/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md @@ -50,8 +50,8 @@ This detection is to identify the common service name created by the CLOP ransom #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `clop_ransomware_known_service_name_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md b/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md index 4b12acee93..fd32005d74 100644 --- a/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md +++ b/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md @@ -50,9 +50,9 @@ Certutil.exe may download a file from a remote destination using `-urlcache`. Th #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_download_with_urlcache_and_split_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md b/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md index 38b1593a2d..4831b4b1b7 100644 --- a/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md +++ b/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md @@ -50,9 +50,9 @@ Certutil.exe may download a file from a remote destination using `-VerifyCtl`. T #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_download_with_verifyctl_and_split_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_with_decode_argument.md b/docs/_posts/2021-03-23-certutil_with_decode_argument.md index ee8d588e56..b1515c1a7f 100644 --- a/docs/_posts/2021-03-23-certutil_with_decode_argument.md +++ b/docs/_posts/2021-03-23-certutil_with_decode_argument.md @@ -50,9 +50,9 @@ CertUtil.exe may be used to `encode` and `decode` a file, including PE and scrip #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_with_decode_argument_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-29-powershell_start-bitstransfer.md b/docs/_posts/2021-03-29-powershell_start-bitstransfer.md index afa0789b5e..389fc3d450 100644 --- a/docs/_posts/2021-03-29-powershell_start-bitstransfer.md +++ b/docs/_posts/2021-03-29-powershell_start-bitstransfer.md @@ -51,9 +51,9 @@ Start-BitsTransfer is the PowerShell "version" of BitsAdmin.exe. Similar #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `powershell_start-bitstransfer_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md b/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md index 9ac197ab0f..9e334bb056 100644 --- a/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md +++ b/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md @@ -57,8 +57,8 @@ The following query uses IAM events to track the success of a group being delete #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_iam_successful_group_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md b/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md index ba70766735..287c1408bc 100644 --- a/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md +++ b/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md @@ -55,8 +55,8 @@ This search is to identifies suspicious firewall disabling using netsh applicati #### Macros The SPL above uses the following Macros: * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `disabling_firewall_with_netsh_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-dsquery_domain_discovery.md b/docs/_posts/2021-03-31-dsquery_domain_discovery.md index 8f061790c4..913c984dbb 100644 --- a/docs/_posts/2021-03-31-dsquery_domain_discovery.md +++ b/docs/_posts/2021-03-31-dsquery_domain_discovery.md @@ -55,8 +55,8 @@ In addition to trust discovery, review parallel processes for additional behavio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `dsquery_domain_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md b/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md index 1ff8f647af..08b0383944 100644 --- a/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md +++ b/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md @@ -54,8 +54,8 @@ The following detection identifies any malformed policy document exceptions with #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_iam_assume_role_policy_brute_force_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-01-aws_iam_delete_policy.md b/docs/_posts/2021-04-01-aws_iam_delete_policy.md index 969d7f2d51..16cedcea92 100644 --- a/docs/_posts/2021-04-01-aws_iam_delete_policy.md +++ b/docs/_posts/2021-04-01-aws_iam_delete_policy.md @@ -49,8 +49,8 @@ The following detection identifes when a policy is deleted on AWS. This does not #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_iam_delete_policy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md b/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md index 6cbe48ecc4..2761e4400a 100644 --- a/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md +++ b/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md @@ -49,8 +49,8 @@ This detection identifies failure attempts to delete groups. We want to identify #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_iam_failure_group_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md b/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md index 3b2227864e..814e2838ae 100644 --- a/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md +++ b/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md @@ -62,8 +62,8 @@ This detection is to identify the abuse the Windows SC.exe to execute malicious #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `malicious_powershell_executed_as_a_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md b/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md index 0532aa09d4..a788c2310f 100644 --- a/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md +++ b/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md @@ -62,8 +62,8 @@ Upon triage, identify the task scheduled source. Was it schtasks.exe or was it v #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `winevent_scheduled_task_created_within_public_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-excel_spawning_powershell.md b/docs/_posts/2021-04-12-excel_spawning_powershell.md index c55a5c0d0e..9f2a854748 100644 --- a/docs/_posts/2021-04-12-excel_spawning_powershell.md +++ b/docs/_posts/2021-04-12-excel_spawning_powershell.md @@ -54,9 +54,9 @@ The following detection identifies Microsoft Excel spawning PowerShell. Typicall #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `excel_spawning_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md b/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md index 13653d9f0b..eba64cb82c 100644 --- a/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md +++ b/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md @@ -54,8 +54,8 @@ The following detection identifies Microsoft Excel spawning Windows Script Host #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excel_spawning_windows_script_host_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md b/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md index d60433d5b9..bc7d42a910 100644 --- a/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md +++ b/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md @@ -62,8 +62,8 @@ Upon triage, identify the task scheduled source. Was it schtasks.exe or via Task #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `winevent_scheduled_task_created_to_spawn_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winword_spawning_powershell.md b/docs/_posts/2021-04-12-winword_spawning_powershell.md index b6ef8edc95..20d4bbfd84 100644 --- a/docs/_posts/2021-04-12-winword_spawning_powershell.md +++ b/docs/_posts/2021-04-12-winword_spawning_powershell.md @@ -54,9 +54,9 @@ The following detection identifies Microsoft Word spawning PowerShell. Typically #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `winword_spawning_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md b/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md index 9181dcd42b..2a014efeaa 100644 --- a/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md +++ b/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md @@ -54,8 +54,8 @@ The following detection identifies Microsoft Winword.exe spawning Windows Script #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `winword_spawning_windows_script_host_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-13-aws_excessive_security_scanning.md b/docs/_posts/2021-04-13-aws_excessive_security_scanning.md index 2beebb149d..6151d147c5 100644 --- a/docs/_posts/2021-04-13-aws_excessive_security_scanning.md +++ b/docs/_posts/2021-04-13-aws_excessive_security_scanning.md @@ -50,8 +50,8 @@ This search looks for AWS CloudTrail events and analyse the amount of eventNames #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_excessive_security_scanning_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md b/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md index c2167d1813..ce9e2452f7 100644 --- a/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md +++ b/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md @@ -54,9 +54,9 @@ this detection was designed to identifies suspicious spawned process of known MS #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `office_application_spawn_rundll32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md b/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md index 9e7b9b623b..782d7c1420 100644 --- a/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md +++ b/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md @@ -50,8 +50,8 @@ this search is to detect potential DNS exfiltration using nslookup application. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `dns_exfiltration_using_nslookup_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md index ac0fbde7e2..1181ca4594 100644 --- a/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md @@ -57,8 +57,8 @@ The following analytic identifies gpupdate.exe with no command line arguments an #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `gpupdate_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md b/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md index d3624676df..8733273052 100644 --- a/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md +++ b/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md @@ -53,8 +53,8 @@ The following query utilizes Windows Security EventCode 4698, `A scheduled task #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `schedule_task_with_http_command_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md b/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md index 2b828c2e12..e81409f17a 100644 --- a/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md +++ b/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md @@ -53,8 +53,8 @@ The following query utilizes Windows Security EventCode 4698, `A scheduled task #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `schedule_task_with_rundll32_command_trigger_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md b/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md index 3e3d8ebe9b..3884e662bf 100644 --- a/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md +++ b/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md @@ -50,10 +50,10 @@ This search is designed to detect suspicious cmd and powershell process spawned #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `wermgr_process_spawned_cmd_or_powershell_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md b/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md index f6d33e60fe..4db93816d9 100644 --- a/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md +++ b/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md @@ -54,8 +54,8 @@ The following detection identifies a 7z.exe spawned from `Rundll32.exe` or `Dllh #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `anomalous_usage_of_7zip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md b/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md index d720b81c21..855753924d 100644 --- a/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md +++ b/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by IcedID malwar #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `office_product_spawning_rundll32_with_no_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-winword_spawning_cmd.md b/docs/_posts/2021-04-22-winword_spawning_cmd.md index 0bfed594a6..1a832fe905 100644 --- a/docs/_posts/2021-04-22-winword_spawning_cmd.md +++ b/docs/_posts/2021-04-22-winword_spawning_cmd.md @@ -54,9 +54,9 @@ The following detection identifies Microsoft Word spawning `cmd.exe`. Typically, #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `winword_spawning_cmd_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md b/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md index 69aa2dd0bf..199751ef2a 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md +++ b/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `office_product_spawning_bitsadmin_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_certutil.md b/docs/_posts/2021-04-26-office_product_spawning_certutil.md index e404554b4a..13e98e6382 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_certutil.md +++ b/docs/_posts/2021-04-26-office_product_spawning_certutil.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `office_product_spawning_certutil_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_mshta.md b/docs/_posts/2021-04-26-office_product_spawning_mshta.md index 873b0559c4..85de955168 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_mshta.md +++ b/docs/_posts/2021-04-26-office_product_spawning_mshta.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) Note that `office_product_spawning_mshta_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-29-icacls_deny_command.md b/docs/_posts/2021-04-29-icacls_deny_command.md index f92c477b81..08169f6226 100644 --- a/docs/_posts/2021-04-29-icacls_deny_command.md +++ b/docs/_posts/2021-04-29-icacls_deny_command.md @@ -50,8 +50,8 @@ This analytic identifies a potential adversary that changes the security permiss #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `icacls_deny_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-deleting_of_net_users.md b/docs/_posts/2021-05-04-deleting_of_net_users.md index 15c6e1e188..3e6c825297 100644 --- a/docs/_posts/2021-05-04-deleting_of_net_users.md +++ b/docs/_posts/2021-05-04-deleting_of_net_users.md @@ -50,9 +50,9 @@ This analytic will detect a suspicious net.exe/net1.exe command-line to delete a #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `deleting_of_net_users_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-disabling_net_user_account.md b/docs/_posts/2021-05-04-disabling_net_user_account.md index cfe00516cb..6af1adbbd3 100644 --- a/docs/_posts/2021-05-04-disabling_net_user_account.md +++ b/docs/_posts/2021-05-04-disabling_net_user_account.md @@ -50,9 +50,9 @@ This analytic will identify a suspicious command-line that disables a user accou #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `disabling_net_user_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md b/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md index 6ab8e32c4b..34f350b7e5 100644 --- a/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md +++ b/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md @@ -51,8 +51,8 @@ This analytic will identify suspicious series of command-line to disable several #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excessive_attempt_to_disable_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_service_stop_attempt.md b/docs/_posts/2021-05-04-excessive_service_stop_attempt.md index 391dc6135f..932219c7e8 100644 --- a/docs/_posts/2021-05-04-excessive_service_stop_attempt.md +++ b/docs/_posts/2021-05-04-excessive_service_stop_attempt.md @@ -51,9 +51,9 @@ This analytic identifies suspicious series of attempt to kill multiple services #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `excessive_service_stop_attempt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md b/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md index 1120002bde..0bab33876b 100644 --- a/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md +++ b/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md @@ -55,8 +55,8 @@ This analytic identifies excessive usage of `taskkill.exe` application. This app #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excessive_usage_of_taskkill_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-icacls_grant_command.md b/docs/_posts/2021-05-04-icacls_grant_command.md index 24e6cc3b06..9a50e89ba1 100644 --- a/docs/_posts/2021-05-04-icacls_grant_command.md +++ b/docs/_posts/2021-05-04-icacls_grant_command.md @@ -50,8 +50,8 @@ This analytic identifies potential adversaries that modify the security permissi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `icacls_grant_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md b/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md index 3f19c603e7..8e3ea5c595 100644 --- a/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md +++ b/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md @@ -50,8 +50,8 @@ This analytic identifies suspicious modification of ACL permission to a files or #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `modify_acl_permission_to_files_or_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-process_kill_base_on_file_path.md b/docs/_posts/2021-05-04-process_kill_base_on_file_path.md index 2c2a2afd71..617f980aaa 100644 --- a/docs/_posts/2021-05-04-process_kill_base_on_file_path.md +++ b/docs/_posts/2021-05-04-process_kill_base_on_file_path.md @@ -54,9 +54,9 @@ The following analytic identifies the use of `wmic.exe` using `delete` to remove #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `process_kill_base_on_file_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-05-suspicious_process_file_path.md b/docs/_posts/2021-05-05-suspicious_process_file_path.md index c8cb5796e9..531c76a878 100644 --- a/docs/_posts/2021-05-05-suspicious_process_file_path.md +++ b/docs/_posts/2021-05-05-suspicious_process_file_path.md @@ -51,8 +51,8 @@ The following analytic will detect a suspicious process running in a file path w #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_process_file_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md b/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md index 5b09f57178..26075e0b5f 100644 --- a/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md +++ b/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md @@ -49,8 +49,8 @@ This analytic will detect a suspicious Telegram process enumerating all network #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `enumerate_users_local_group_using_telegram_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-excessive_usage_of_net_app.md b/docs/_posts/2021-05-06-excessive_usage_of_net_app.md index fbf47a5ac1..8c366d5704 100644 --- a/docs/_posts/2021-05-06-excessive_usage_of_net_app.md +++ b/docs/_posts/2021-05-06-excessive_usage_of_net_app.md @@ -51,9 +51,9 @@ This analytic identifies excessive usage of `net.exe` or `net1.exe` within a buc #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `excessive_usage_of_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md b/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md index f23306920e..70428770a2 100644 --- a/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md +++ b/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md @@ -50,8 +50,8 @@ This analytic will identify suspicious executable or scripts (known file extensi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `executables_or_script_creation_in_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md b/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md index d71383e033..852d8d5b0e 100644 --- a/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md +++ b/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md @@ -51,8 +51,8 @@ The following analytic identifies excessive usage of `cacls.exe`, `xcacls.exe` o #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excessive_usage_of_cacls_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md b/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md index f6f4ba32f4..30cf8e8a5a 100644 --- a/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md +++ b/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md @@ -52,8 +52,8 @@ This analytic identifies an on demand run of a Windows Schedule Task through she #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `schtasks_run_task_on_demand_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-13-slui_runas_elevated.md b/docs/_posts/2021-05-13-slui_runas_elevated.md index c151552c3e..96a835b9b7 100644 --- a/docs/_posts/2021-05-13-slui_runas_elevated.md +++ b/docs/_posts/2021-05-13-slui_runas_elevated.md @@ -56,8 +56,8 @@ The following analytic identifies the Microsoft Software Licensing User Interfac #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `slui_runas_elevated_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-13-slui_spawning_a_process.md b/docs/_posts/2021-05-13-slui_spawning_a_process.md index c16c88fc6e..88a7e07545 100644 --- a/docs/_posts/2021-05-13-slui_spawning_a_process.md +++ b/docs/_posts/2021-05-13-slui_spawning_a_process.md @@ -56,8 +56,8 @@ The following analytic identifies the Microsoft Software Licensing User Interfac #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `slui_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-18-services_escalate_exe.md b/docs/_posts/2021-05-18-services_escalate_exe.md index 031388332c..d79e112b01 100644 --- a/docs/_posts/2021-05-18-services_escalate_exe.md +++ b/docs/_posts/2021-05-18-services_escalate_exe.md @@ -51,8 +51,8 @@ The following analytic identifies the use of `svc-exe` with Cobalt Strike. The b #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `services_escalate_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md b/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md index 0e1a42f719..f2a8ec4706 100644 --- a/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md +++ b/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md @@ -64,9 +64,9 @@ This analytic identifies a common behavior by Cobalt Strike and other frameworks #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `cmd_echo_pipe_-_escalation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-21-winrm_spawning_a_process.md b/docs/_posts/2021-05-21-winrm_spawning_a_process.md index 0af7335660..c41164db4c 100644 --- a/docs/_posts/2021-05-21-winrm_spawning_a_process.md +++ b/docs/_posts/2021-05-21-winrm_spawning_a_process.md @@ -53,8 +53,8 @@ The following analytic identifies suspicious processes spawning from WinRM (wsmp #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `winrm_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md b/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md index ee6712b0e1..ccc86ea837 100644 --- a/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md +++ b/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md @@ -54,8 +54,8 @@ This analytic detects a potential usage of secretsdump.py tool for dumping crede #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `secretdumps_offline_ntds_dumping_tool_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md b/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md index a44b78ad45..1430d2ca8b 100644 --- a/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md +++ b/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md @@ -74,8 +74,8 @@ SharpHound is used as a reconnaissance collector, ingestor, for BloodHound. Shar #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_sharphound_file_modifications_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-27-detect_sharphound_usage.md b/docs/_posts/2021-05-27-detect_sharphound_usage.md index 37366fb272..615a6cb68d 100644 --- a/docs/_posts/2021-05-27-detect_sharphound_usage.md +++ b/docs/_posts/2021-05-27-detect_sharphound_usage.md @@ -74,8 +74,8 @@ The following analytic identifies SharpHound binary usage by using the original #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_sharphound_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md b/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md index d16c9052ee..5e3b8176aa 100644 --- a/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md +++ b/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md @@ -74,8 +74,8 @@ The following analytic identifies the common command-line argument used by Azure #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_azurehound_command-line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md b/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md index 47ad9e085a..2ebcbf7db7 100644 --- a/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md +++ b/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md @@ -74,8 +74,8 @@ The following analytic is similar to SharpHound file modifications, but this ins #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_azurehound_file_modifications_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md b/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md index 84c5558fbd..43c9452514 100644 --- a/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md +++ b/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md @@ -74,8 +74,8 @@ The following analytic identifies common command-line arguments used by SharpHou #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_sharphound_command-line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-02-conti_common_exec_parameter.md b/docs/_posts/2021-06-02-conti_common_exec_parameter.md index 0683acef7c..ea0201dcbf 100644 --- a/docs/_posts/2021-06-02-conti_common_exec_parameter.md +++ b/docs/_posts/2021-06-02-conti_common_exec_parameter.md @@ -50,8 +50,8 @@ This search detects the suspicious commandline argument of revil ransomware to e #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `conti_common_exec_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-02-revil_common_exec_parameter.md b/docs/_posts/2021-06-02-revil_common_exec_parameter.md index 25d2f075b5..3fcdcd36e3 100644 --- a/docs/_posts/2021-06-02-revil_common_exec_parameter.md +++ b/docs/_posts/2021-06-02-revil_common_exec_parameter.md @@ -50,8 +50,8 @@ This analytic identifies suspicious commandline parameter that are commonly used #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `revil_common_exec_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md b/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md index 262c831734..6d2b2ae4db 100644 --- a/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md +++ b/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md @@ -51,8 +51,8 @@ This analytic will identify suspicious series of process executions. We have ob #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excessive_number_of_distinct_processes_created_in_windows_temp_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md b/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md index 2cf00401e7..f05b025892 100644 --- a/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md +++ b/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md @@ -49,8 +49,8 @@ This search detects a suspicioous termination of known services killed by ransom #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `known_services_killed_by_ransomware_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md b/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md index 428fd6cbe2..b972432f9a 100644 --- a/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md +++ b/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md @@ -55,8 +55,8 @@ This detection targets behaviors observed in post exploit kits like Meterpreter #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excessive_number_of_taskhost_processes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md b/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md index 8b6b343038..89f6f974af 100644 --- a/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md +++ b/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md @@ -54,8 +54,8 @@ this search is to detect execution of `cipher.exe` to clear the unallocated sect #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `clear_unallocated_sector_using_cipher_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md b/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md index 7315fd5660..ee11cba6c3 100644 --- a/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md +++ b/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md @@ -54,8 +54,8 @@ This search is to detect execution of wevtutil.exe to disable logs. This techniq #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `disable_logs_using_wevtutil_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md b/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md index 24588a5bff..f319a44043 100644 --- a/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md +++ b/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md @@ -50,8 +50,8 @@ This search is to detect a modification of file or directory permission using ta #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `permission_modification_using_takeown_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md b/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md index 951a24c8cc..5df07e51e3 100644 --- a/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md +++ b/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md @@ -50,8 +50,8 @@ This search is to detect a suspicious bcdedit.exe execution to ignore all failur #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `prevent_automatic_repair_mode_using_bcdedit_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md b/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md index 1da6ef9075..3872ba5d17 100644 --- a/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md +++ b/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md @@ -52,8 +52,8 @@ The following analytic utilizes Windows Event ID 1100 to identify when Windows e #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_event_log_service_behavior_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md b/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md index ec79c76bbb..332361f7a3 100644 --- a/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md +++ b/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md @@ -54,8 +54,8 @@ This analytic will identify suspicious process of cscript.exe where it tries to #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `execute_javascript_with_jscript_com_clsid_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md b/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md index 85c38d4790..c433912dc9 100644 --- a/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md +++ b/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md @@ -54,9 +54,9 @@ This search is to detect a suspicious commandline designed to delete files or di #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `recursive_delete_of_directory_in_batch_cmd_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md b/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md index 1ccca1addf..762df4ba39 100644 --- a/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md +++ b/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md @@ -55,8 +55,8 @@ This search is to detect a suspicious modification of firewall to allow file and #### Macros The SPL above uses the following Macros: * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `allow_file_and_printing_sharing_in_firewall_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md b/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md index 1aa2ee453b..d9f541dcea 100644 --- a/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md +++ b/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md @@ -55,8 +55,8 @@ This search is to detect a suspicious modification to the firewall to allow netw #### Macros The SPL above uses the following Macros: * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `allow_network_discovery_in_firewall_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md b/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md index 07edfc4636..59dc867252 100644 --- a/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md +++ b/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md @@ -55,8 +55,8 @@ This detection targets behaviors observed when threat actors have used sc.exe to #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `excessive_number_of_service_control_start_as_disabled_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-sdclt_uac_bypass.md b/docs/_posts/2021-07-01-sdclt_uac_bypass.md index 8fb0d9d929..ff7bee62dd 100644 --- a/docs/_posts/2021-07-01-sdclt_uac_bypass.md +++ b/docs/_posts/2021-07-01-sdclt_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect a suspicious sdclt.exe registry modification. This tech #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `sdclt_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md b/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md index f0de07ad76..bd03565926 100644 --- a/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md +++ b/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect a suspicious modification of registry that may related #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `silentcleanup_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md b/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md index 08354695b7..3072d6e847 100644 --- a/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md +++ b/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md @@ -57,9 +57,9 @@ The following analytic identifies a suspicious child process, `rundll32.exe`, wi #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `spoolsv_spawning_rundll32_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-wsreset_uac_bypass.md b/docs/_posts/2021-07-01-wsreset_uac_bypass.md index 59dad6cc32..0954637765 100644 --- a/docs/_posts/2021-07-01-wsreset_uac_bypass.md +++ b/docs/_posts/2021-07-01-wsreset_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect a suspicious modification of registry related to UAC by #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wsreset_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md b/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md index b2c91bef2c..fa62e0a6f4 100644 --- a/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md +++ b/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md @@ -58,8 +58,8 @@ This search is to detect a suspicious creation of msmpeng.exe or mpsvc.dll in no #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `msmpeng_application_dll_side_loading_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md b/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md index d9f6dac472..07662b72a4 100644 --- a/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md +++ b/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md @@ -54,9 +54,9 @@ This search is to identifies a modification in registry to disable the windows d #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `powershell_disable_security_monitoring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-12-net_profiler_uac_bypass.md b/docs/_posts/2021-07-12-net_profiler_uac_bypass.md index 1ea73760f4..57d4ee59dd 100644 --- a/docs/_posts/2021-07-12-net_profiler_uac_bypass.md +++ b/docs/_posts/2021-07-12-net_profiler_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect modification of registry to bypass UAC windows feature. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `net_profiler_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md b/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md index fc69d53d14..f1384ce737 100644 --- a/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md +++ b/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md @@ -66,8 +66,8 @@ This search looks for cloud compute instances created by users who have not crea #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `cloud_compute_instance_created_by_previously_unseen_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-aws_createaccesskey.md b/docs/_posts/2021-07-19-aws_createaccesskey.md index 56322df085..c7d99e717b 100644 --- a/docs/_posts/2021-07-19-aws_createaccesskey.md +++ b/docs/_posts/2021-07-19-aws_createaccesskey.md @@ -54,8 +54,8 @@ This search looks for AWS CloudTrail events where a user A who has already permi #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_createaccesskey_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-aws_createloginprofile.md b/docs/_posts/2021-07-19-aws_createloginprofile.md index ffaffec65e..ab77a96841 100644 --- a/docs/_posts/2021-07-19-aws_createloginprofile.md +++ b/docs/_posts/2021-07-19-aws_createloginprofile.md @@ -58,8 +58,8 @@ This search looks for AWS CloudTrail events where a user A(victim A) creates a l #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_createloginprofile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-aws_updateloginprofile.md b/docs/_posts/2021-07-19-aws_updateloginprofile.md index b6fe10a320..c87a207e18 100644 --- a/docs/_posts/2021-07-19-aws_updateloginprofile.md +++ b/docs/_posts/2021-07-19-aws_updateloginprofile.md @@ -54,8 +54,8 @@ This search looks for AWS CloudTrail events where a user A who has already permi #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_updateloginprofile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md b/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md index 259f638664..f7157aa117 100644 --- a/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md +++ b/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md @@ -58,8 +58,8 @@ This search looks for AWS CloudTrail events where a user has created an open/pub #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `detect_new_open_s3_buckets_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md b/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md index d73f7413b9..c86153f834 100644 --- a/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md +++ b/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md @@ -51,8 +51,8 @@ This search looks for AWS CloudTrail events where a user has created an open/pub #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `detect_new_open_s3_buckets_over_aws_cli_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md b/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md index a249382777..da4cd957d5 100644 --- a/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md +++ b/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md @@ -54,10 +54,10 @@ This search is to detect a suspicious mshta.exe process that spawn rundll32 or r #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `mshta_spawning_rundll32_or_regsvr32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md b/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md index 180aab45a3..8ce59b9e64 100644 --- a/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md +++ b/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md @@ -54,9 +54,9 @@ this search is to detect a suspicious office product process that spawn cmd chil #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `office_product_spawn_cmd_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md b/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md index 967e0c52d9..058084658d 100644 --- a/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md +++ b/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md @@ -54,9 +54,9 @@ This search is to detect a suspicious rundll32.exe commandline to execute dll fi #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_icedid_rundll32_cmdline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md b/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md index ba8b0c96f5..cad2449378 100644 --- a/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md +++ b/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md @@ -54,9 +54,9 @@ This search is to detect a suspicious rundll32.exe process with plugininit param #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_plugininit_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-27-chcp_command_execution.md b/docs/_posts/2021-07-27-chcp_command_execution.md index 28ba6c02a2..98697535cc 100644 --- a/docs/_posts/2021-07-27-chcp_command_execution.md +++ b/docs/_posts/2021-07-27-chcp_command_execution.md @@ -50,8 +50,8 @@ This search is to detect execution of chcp.exe application. this utility is used #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `chcp_command_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md b/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md index bbf9bfda37..23604353d7 100644 --- a/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md +++ b/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md @@ -56,9 +56,9 @@ The following analytic identifies Regsvr32.exe utilizing the silent switch to lo #### Macros The SPL above uses the following Macros: -* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) Note that `regsvr32_with_known_silent_switch_cmdline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md b/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md index a8e3fb49dd..0d4150a40c 100644 --- a/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md +++ b/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md @@ -54,9 +54,9 @@ this detection was designed to identifies suspicious spawned process of known MS #### Macros The SPL above uses the following Macros: -* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) Note that `office_application_spawn_regsvr32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md b/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md index 444d41b8e4..26651f2d9f 100644 --- a/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md +++ b/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md @@ -54,8 +54,8 @@ This search is to detect a suspicious un-installation of application using msiex #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `uninstall_app_using_msiexec_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-11-fsutil_zeroing_file.md b/docs/_posts/2021-08-11-fsutil_zeroing_file.md index 25e088dcb9..ecc4925f97 100644 --- a/docs/_posts/2021-08-11-fsutil_zeroing_file.md +++ b/docs/_posts/2021-08-11-fsutil_zeroing_file.md @@ -50,8 +50,8 @@ This search is to detect a suspicious fsutil process to zeroing a target file. T #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `fsutil_zeroing_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md b/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md index 1d56e4456c..a94f563f4e 100644 --- a/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md +++ b/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md @@ -54,8 +54,8 @@ This search is to detect a suspicious 7z process with commandline pointing to SM #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `7zip_commandline_to_smb_share_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md index 6684677548..a8bd8bd109 100644 --- a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md +++ b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md @@ -61,8 +61,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_ecr_container_scanning_findings_high_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md index e32655fa3f..c48c06d7e6 100644 --- a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md +++ b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md @@ -61,8 +61,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_ecr_container_scanning_findings_low_informational_unknown_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md index 7b2876790d..08afc70480 100644 --- a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md +++ b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md @@ -61,8 +61,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_ecr_container_scanning_findings_medium_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-18-esentutl_sam_copy.md b/docs/_posts/2021-08-18-esentutl_sam_copy.md index 975c44c91f..1b2072d85b 100644 --- a/docs/_posts/2021-08-18-esentutl_sam_copy.md +++ b/docs/_posts/2021-08-18-esentutl_sam_copy.md @@ -54,9 +54,9 @@ The following analytic identifies the process - `esentutl.exe` - being used to c #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_esentutl](https://github.com/splunk/security_content/blob/develop/macros/process_esentutl.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `esentutl_sam_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md b/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md index 0e3873a57f..266c49ea2b 100644 --- a/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md +++ b/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md @@ -57,8 +57,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_ecr_container_upload_outside_business_hours_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md b/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md index acf8bb8833..8d99d3ecbe 100644 --- a/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md +++ b/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md @@ -57,9 +57,9 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [aws_ecr_users](https://github.com/splunk/security_content/blob/develop/macros/aws_ecr_users.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_ecr_container_upload_unknown_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md b/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md index 029966014e..91187be05f 100644 --- a/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md +++ b/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md @@ -43,8 +43,8 @@ The following analytic identifies cleartext protocols at risk of leaking sensiti #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `protocols_passing_authentication_in_cleartext_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-20-github_commit_changes_in_master.md b/docs/_posts/2021-08-20-github_commit_changes_in_master.md index 4330d6cfa8..63f2b840f0 100644 --- a/docs/_posts/2021-08-20-github_commit_changes_in_master.md +++ b/docs/_posts/2021-08-20-github_commit_changes_in_master.md @@ -52,8 +52,8 @@ This search is to detect a pushed or commit to master or main branch. This is to #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [github](https://github.com/splunk/security_content/blob/develop/macros/github.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `github_commit_changes_in_master_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getlocaluser_with_powershell.md b/docs/_posts/2021-08-23-getlocaluser_with_powershell.md index 5e7208c6f5..1a67412e5c 100644 --- a/docs/_posts/2021-08-23-getlocaluser_with_powershell.md +++ b/docs/_posts/2021-08-23-getlocaluser_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getlocaluser_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md index 94bf6b1d7b..3a877844fd 100644 --- a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md +++ b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_user_account_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md b/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md index b9cf1ffca6..016b804637 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `dsquery.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_account_discovery_with_dsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md b/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md index 8b6f328536..736237cea8 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `domain_account_discovery_with_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md b/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md index eaae81fccb..b053722ad9 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_account_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md b/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md index dfb6588b6d..ec0c1f5bf4 100644 --- a/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md +++ b/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md @@ -50,8 +50,8 @@ This analytic identifies Get-DomainTrust from PowerView in order to gather domai #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get-domaintrust_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_aduser_with_powershell.md b/docs/_posts/2021-08-24-get_aduser_with_powershell.md index e9667b952b..22baa593e1 100644 --- a/docs/_posts/2021-08-24-get_aduser_with_powershell.md +++ b/docs/_posts/2021-08-24-get_aduser_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_aduser_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_domainuser_with_powershell.md b/docs/_posts/2021-08-24-get_domainuser_with_powershell.md index b2f3bce39c..9b1691eaf2 100644 --- a/docs/_posts/2021-08-24-get_domainuser_with_powershell.md +++ b/docs/_posts/2021-08-24-get_domainuser_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_domainuser_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md index 0f69ab4fb5..005eb4f0b6 100644 --- a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md +++ b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_ds_user_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-domain_group_discovery_with_net.md b/docs/_posts/2021-08-25-domain_group_discovery_with_net.md index c5dba6147b..b3ff6f72de 100644 --- a/docs/_posts/2021-08-25-domain_group_discovery_with_net.md +++ b/docs/_posts/2021-08-25-domain_group_discovery_with_net.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `net.exe` with command-line arguments u #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_group_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md b/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md index e6e1ad376d..9ebd52fe9c 100644 --- a/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md +++ b/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_group_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md b/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md index 012b231702..504065aa23 100644 --- a/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md +++ b/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-l #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `elevated_group_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md b/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md index fd67f02db7..cb3af437c9 100644 --- a/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md +++ b/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `elevated_group_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getadgroup_with_powershell.md b/docs/_posts/2021-08-25-getadgroup_with_powershell.md index 4237a159a7..c6b7b6fae0 100644 --- a/docs/_posts/2021-08-25-getadgroup_with_powershell.md +++ b/docs/_posts/2021-08-25-getadgroup_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getadgroup_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md b/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md index 694c34a8f9..9d4ba19f80 100644 --- a/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md +++ b/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getdomaingroup_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md b/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md index 4a7b953ba7..92c553a12b 100644 --- a/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md +++ b/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line util #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getnettcpconnection_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md index bfd534892e..6a068534c4 100644 --- a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md +++ b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_ds_group_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md index 5777570de9..212dec8d9f 100644 --- a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md +++ b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` executing the Get-ADDe #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_addefaultdomainpasswordpolicy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md index 80d454e193..222bb9b37a 100644 --- a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md +++ b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` executing the Get ADUs #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_aduserresultantpasswordpolicy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md index e849fd925c..d3bdbc732e 100644 --- a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md +++ b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` executing the `Get-Dom #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_domainpolicy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-password_policy_discovery_with_net.md b/docs/_posts/2021-08-26-password_policy_discovery_with_net.md index 6fed53e6cc..e79440d48e 100644 --- a/docs/_posts/2021-08-26-password_policy_discovery_with_net.md +++ b/docs/_posts/2021-08-26-password_policy_discovery_with_net.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command li #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `password_policy_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md b/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md index a58a8c79aa..e4cdca7c25 100644 --- a/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md +++ b/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md @@ -61,8 +61,8 @@ This search looks for a process launching an `*.lnk` file under `C:\User*` or `* #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `process_creating_lnk_file_in_suspicious_location_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md b/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md index 8baca3b682..e9d2e398e0 100644 --- a/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md +++ b/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md @@ -55,8 +55,8 @@ Review the source attempting to perform this activity against your environment. #### Macros The SPL above uses the following Macros: -* [exchange](https://github.com/splunk/security_content/blob/develop/macros/exchange.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [exchange](https://github.com/splunk/security_content/blob/develop/macros/exchange.yml) Note that `exchange_powershell_abuse_via_ssrf_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md b/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md index 16b61bac18..983e835459 100644 --- a/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md +++ b/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `nltest.exe` with command-line argument #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_controller_discovery_with_nltest_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-30-remote_system_discovery_with_net.md b/docs/_posts/2021-08-30-remote_system_discovery_with_net.md index 1395787618..024f255dc7 100644 --- a/docs/_posts/2021-08-30-remote_system_discovery_with_net.md +++ b/docs/_posts/2021-08-30-remote_system_discovery_with_net.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_system_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md b/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md index 8cdde95137..c85b415367 100644 --- a/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md +++ b/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md @@ -52,8 +52,8 @@ During triage, review parallel security events to identify further suspicious ac #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `petitpotam_network_share_access_request_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md b/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md index ee76206438..92c5a08838 100644 --- a/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md +++ b/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md @@ -49,8 +49,8 @@ The following analytic identifes Event Code 4768, A `Kerberos authentication tic #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `petitpotam_suspicious_kerberos_tgt_request_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md b/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md index df985efbf5..9622853121 100644 --- a/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md +++ b/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `dsquery.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_system_discovery_with_dsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-circle_ci_disable_security_step.md b/docs/_posts/2021-09-01-circle_ci_disable_security_step.md index dca0ed71f3..ba9838d7fc 100644 --- a/docs/_posts/2021-09-01-circle_ci_disable_security_step.md +++ b/docs/_posts/2021-09-01-circle_ci_disable_security_step.md @@ -60,8 +60,8 @@ This search looks for disable security step in CircleCI pipeline. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [circleci](https://github.com/splunk/security_content/blob/develop/macros/circleci.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `circle_ci_disable_security_step_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md b/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md index 99b58384f4..737f5a003b 100644 --- a/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md +++ b/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_controller_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md b/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md index d86fbfac5e..dd349fb47b 100644 --- a/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md +++ b/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `dsquery.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_group_discovery_with_dsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-github_commit_in_develop.md b/docs/_posts/2021-09-01-github_commit_in_develop.md index 1a1c4cbc47..dbd5065cb1 100644 --- a/docs/_posts/2021-09-01-github_commit_in_develop.md +++ b/docs/_posts/2021-09-01-github_commit_in_develop.md @@ -50,8 +50,8 @@ This search is to detect a pushed or commit to develop branch. This is to avoid #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [github](https://github.com/splunk/security_content/blob/develop/macros/github.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `github_commit_in_develop_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-github_dependabot_alert.md b/docs/_posts/2021-09-01-github_dependabot_alert.md index 94945d8496..d2765df053 100644 --- a/docs/_posts/2021-09-01-github_dependabot_alert.md +++ b/docs/_posts/2021-09-01-github_dependabot_alert.md @@ -55,8 +55,8 @@ This search looks for Dependabot Alerts in Github logs. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [github](https://github.com/splunk/security_content/blob/develop/macros/github.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `github_dependabot_alert_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-github_pull_request_from_unknown_user.md b/docs/_posts/2021-09-01-github_pull_request_from_unknown_user.md index 4475fcc7fd..bcae71cacc 100644 --- a/docs/_posts/2021-09-01-github_pull_request_from_unknown_user.md +++ b/docs/_posts/2021-09-01-github_pull_request_from_unknown_user.md @@ -56,9 +56,9 @@ This search looks for Pull Request from unknown user. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [github_known_users](https://github.com/splunk/security_content/blob/develop/macros/github_known_users.yml) * [github](https://github.com/splunk/security_content/blob/develop/macros/github.yml) +* [github_known_users](https://github.com/splunk/security_content/blob/develop/macros/github_known_users.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `github_pull_request_from_unknown_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md b/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md index fef4dd3245..39e4a8e412 100644 --- a/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md +++ b/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_system_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-circle_ci_disable_security_job.md b/docs/_posts/2021-09-02-circle_ci_disable_security_job.md index 3010724abd..ce6e488c3c 100644 --- a/docs/_posts/2021-09-02-circle_ci_disable_security_job.md +++ b/docs/_posts/2021-09-02-circle_ci_disable_security_job.md @@ -56,8 +56,8 @@ This search looks for disable security job in CircleCI pipeline. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [circleci](https://github.com/splunk/security_content/blob/develop/macros/circleci.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `circle_ci_disable_security_job_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md b/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md index b5366d7d2c..8bc380c833 100644 --- a/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md +++ b/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md @@ -50,8 +50,8 @@ This analytic identifies Get-ForestTrust from PowerSploit in order to gather dom #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get-foresttrust_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md b/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md index 58d6aae744..391fdb5923 100644 --- a/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md +++ b/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md @@ -54,8 +54,8 @@ this search is to detect a suspicious registry modification to implement auto ad #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `auto_admin_logon_registry_entry_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md b/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md index c2bf35d29b..0426fb65c8 100644 --- a/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md +++ b/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md @@ -50,8 +50,8 @@ This search is to detect a suspicious bcdedit commandline to configure the host #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `bcdedit_command_back_to_normal_mode_boot_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md b/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md index 3d4a02ce5b..45417a3c6a 100644 --- a/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md +++ b/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md @@ -50,8 +50,8 @@ This search is to detect a suspicious bcdedit commandline to configure the host #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `change_to_safe_mode_with_network_config_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getadcomputer_with_powershell.md b/docs/_posts/2021-09-07-getadcomputer_with_powershell.md index aad6c0b5b7..9f72384e2e 100644 --- a/docs/_posts/2021-09-07-getadcomputer_with_powershell.md +++ b/docs/_posts/2021-09-07-getadcomputer_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getadcomputer_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md b/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md index 70292f8264..0b74dbef3d 100644 --- a/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md +++ b/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getdomaincomputer_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md b/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md index 4de5ff1057..bc6d0016c7 100644 --- a/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md +++ b/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getdomaincontroller_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md b/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md index 13654bf7c8..50105acc34 100644 --- a/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md +++ b/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_ds_computer_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-system_information_discovery_detection.md b/docs/_posts/2021-09-07-system_information_discovery_detection.md index ef6861a54a..39abd7728d 100644 --- a/docs/_posts/2021-09-07-system_information_discovery_detection.md +++ b/docs/_posts/2021-09-07-system_information_discovery_detection.md @@ -53,8 +53,8 @@ Detect system information discovery techniques used by attackers to understand c #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `system_information_discovery_detection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md b/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md index 0924cecba3..7eac6bd245 100644 --- a/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md +++ b/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md @@ -55,8 +55,8 @@ The following detection identifies control.exe loading either a .cpl or .inf fro #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `control_loading_from_world_writable_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md b/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md index 18a8330854..b446240461 100644 --- a/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md +++ b/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md @@ -54,8 +54,8 @@ This search looks for the creation of local administrator accounts using net.exe #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `create_local_admin_accounts_using_net_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-office_spawning_control.md b/docs/_posts/2021-09-08-office_spawning_control.md index 55ca6189cc..b935cbe37c 100644 --- a/docs/_posts/2021-09-08-office_spawning_control.md +++ b/docs/_posts/2021-09-08-office_spawning_control.md @@ -55,8 +55,8 @@ The following detection identifies control.exe spawning from an office product. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `office_spawning_control_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md b/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md index e0cdee3431..99c340e0bd 100644 --- a/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md +++ b/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md @@ -55,9 +55,9 @@ The following hunting detection identifies rundll32.exe with `control_rundll` wi #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_control_rundll_hunt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md b/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md index 6b87bb9866..24310c5a07 100644 --- a/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md +++ b/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md @@ -55,9 +55,9 @@ The following detection identifies rundll32.exe with `control_rundll` within the #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_control_rundll_world_writable_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-09-extraction_of_registry_hives.md b/docs/_posts/2021-09-09-extraction_of_registry_hives.md index a95c7f840e..6f0fe5918e 100644 --- a/docs/_posts/2021-09-09-extraction_of_registry_hives.md +++ b/docs/_posts/2021-09-09-extraction_of_registry_hives.md @@ -54,9 +54,9 @@ The following analytic identifies the use of `reg.exe` exporting Windows Registr #### Macros The SPL above uses the following Macros: +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `extraction_of_registry_hives_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md b/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md index 3e34654908..a4c7f77eac 100644 --- a/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md +++ b/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `arp.exe` utilized to get a listing of #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `network_connection_discovery_with_arp_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-network_connection_discovery_with_net.md b/docs/_posts/2021-09-10-network_connection_discovery_with_net.md index 9eb8ef8d86..bff3a0cdd0 100644 --- a/docs/_posts/2021-09-10-network_connection_discovery_with_net.md +++ b/docs/_posts/2021-09-10-network_connection_discovery_with_net.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `net.exe` with command-line arguments u #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `network_connection_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md b/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md index 200b6f9f42..59599e80a0 100644 --- a/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md +++ b/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `netstat.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `network_connection_discovery_with_netstat_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md b/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md index 1e5f051336..6dac48bf39 100644 --- a/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md +++ b/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powerhsell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getcurrent_user_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md b/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md index bb20cc2205..f8327bd68f 100644 --- a/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md +++ b/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md @@ -54,8 +54,8 @@ This search is to detect a execution of jscript using cscript process. Commonly #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `jscript_execution_using_cscript_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-system_user_discovery_with_query.md b/docs/_posts/2021-09-13-system_user_discovery_with_query.md index da7235fa51..1238807792 100644 --- a/docs/_posts/2021-09-13-system_user_discovery_with_query.md +++ b/docs/_posts/2021-09-13-system_user_discovery_with_query.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `query.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `system_user_discovery_with_query_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md b/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md index a8c5e7ae82..7a24415f51 100644 --- a/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md +++ b/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `whoami.exe` without any arguments. Thi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `system_user_discovery_with_whoami_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md index 721dc7d334..adf35aa472 100644 --- a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md +++ b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `user_discovery_with_env_vars_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md b/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md index 2bd6694188..f73d66cd09 100644 --- a/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md +++ b/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md @@ -50,9 +50,9 @@ This search is to detect a suspicious wmic.exe process or renamed wmic process t #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `xsl_script_execution_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md b/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md index b915b5c803..d4fc4335b8 100644 --- a/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md +++ b/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md @@ -54,8 +54,8 @@ The following analytic identifies a non-standard parent process (not matching CM #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `cmdline_tool_not_executed_in_cmd_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md b/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md index eba7416985..24d603ac29 100644 --- a/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md +++ b/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md @@ -54,8 +54,8 @@ The following hunting analytic identifies the use of `Get-WMIObject Win32_Group` #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_wmiobject_group_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-net_localgroup_discovery.md b/docs/_posts/2021-09-14-net_localgroup_discovery.md index b335c01326..2a2ef0092b 100644 --- a/docs/_posts/2021-09-14-net_localgroup_discovery.md +++ b/docs/_posts/2021-09-14-net_localgroup_discovery.md @@ -54,8 +54,8 @@ The following hunting analytic will identify the use of localgroup discovery usi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `net_localgroup_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md index d74e1a20df..3c28be64bc 100644 --- a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md +++ b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md @@ -54,8 +54,8 @@ The following hunting analytic identifies the use of `get-localgroup` being used #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_get_localgroup_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-wmic_group_discovery.md b/docs/_posts/2021-09-14-wmic_group_discovery.md index b2fcf6fa76..b44b2b897d 100644 --- a/docs/_posts/2021-09-14-wmic_group_discovery.md +++ b/docs/_posts/2021-09-14-wmic_group_discovery.md @@ -56,8 +56,8 @@ During triage, review parallel processes and identify any further suspicious beh #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wmic_group_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md b/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md index 2daa389124..6de4a38180 100644 --- a/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md +++ b/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md @@ -50,8 +50,8 @@ This search is to detect a suspicious whoami execution to check if the cmd or sh #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `check_elevated_cmd_using_whoami_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md b/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md index 231bf4614b..05429abaca 100644 --- a/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md +++ b/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md @@ -53,8 +53,8 @@ This search is to detect an anomaly event of non-chrome process accessing the fi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `non_chrome_process_accessing_chrome_default_dir_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md b/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md index 91bf2f88b4..0cae26e21e 100644 --- a/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md +++ b/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md @@ -53,8 +53,8 @@ This search is to detect an anomaly event of non-firefox process accessing the f #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `non_firefox_process_access_firefox_profile_dir_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-account_discovery_with_net_app.md b/docs/_posts/2021-09-16-account_discovery_with_net_app.md index 652d289406..8cb58b17e2 100644 --- a/docs/_posts/2021-09-16-account_discovery_with_net_app.md +++ b/docs/_posts/2021-09-16-account_discovery_with_net_app.md @@ -55,9 +55,9 @@ this search is to detect a potential account discovery series of command used by #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `account_discovery_with_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md b/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md index 16109e1342..7567de1586 100644 --- a/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md +++ b/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md @@ -54,9 +54,9 @@ Attempt To Add Certificate To Untrusted Store #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `attempt_to_add_certificate_to_untrusted_store_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md b/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md index 394ffc6f86..78e415f73b 100644 --- a/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md +++ b/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md @@ -54,10 +54,10 @@ Monitor for execution of reg.exe with parameters specifying an export of keys th #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `attempted_credential_dump_from_registry_via_reg_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-bits_job_persistence.md b/docs/_posts/2021-09-16-bits_job_persistence.md index b0c2534455..c1322471ce 100644 --- a/docs/_posts/2021-09-16-bits_job_persistence.md +++ b/docs/_posts/2021-09-16-bits_job_persistence.md @@ -51,9 +51,9 @@ The following query identifies Microsoft Background Intelligent Transfer Service #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `bits_job_persistence_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-bitsadmin_download_file.md b/docs/_posts/2021-09-16-bitsadmin_download_file.md index 9b20acf693..18e5f6684c 100644 --- a/docs/_posts/2021-09-16-bitsadmin_download_file.md +++ b/docs/_posts/2021-09-16-bitsadmin_download_file.md @@ -55,9 +55,9 @@ The following query identifies Microsoft Background Intelligent Transfer Service #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `bitsadmin_download_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md b/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md index 7a51df97bb..2e1a863de8 100644 --- a/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md +++ b/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md @@ -54,10 +54,10 @@ This search detects the use of wmic and Powershell to create a shadow copy. #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `creation_of_shadow_copy_with_wmic_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md b/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md index 335b12f7a8..d153559ac5 100644 --- a/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md +++ b/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md @@ -54,9 +54,9 @@ This search detects credential dumping using copy command from a shadow copy. #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `credential_dumping_via_copy_command_from_shadow_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md b/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md index 0486d058cf..34483c6e57 100644 --- a/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md +++ b/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md @@ -54,9 +54,9 @@ This search detects the creation of a symlink to a shadow copy. #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `credential_dumping_via_symlink_to_shadow_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_renamed.md b/docs/_posts/2021-09-16-detect_html_help_renamed.md index f3730fb3c4..b754ab53b6 100644 --- a/docs/_posts/2021-09-16-detect_html_help_renamed.md +++ b/docs/_posts/2021-09-16-detect_html_help_renamed.md @@ -55,8 +55,8 @@ The following analytic identifies a renamed instance of hh.exe (HTML Help) execu #### Macros The SPL above uses the following Macros: * [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_renamed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md b/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md index da1fd2a2e0..33e2392542 100644 --- a/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md +++ b/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md @@ -55,8 +55,8 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: * [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md b/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md index 1e53c41de2..d119b152c6 100644 --- a/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md +++ b/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md @@ -55,8 +55,8 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: * [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_using_infotech_storage_handlers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md b/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md index 567ab364bb..f509e0cd35 100644 --- a/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md +++ b/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md @@ -54,9 +54,9 @@ The following analytic identifies "mshta.exe" execution with inline prot #### Macros The SPL above uses the following Macros: -* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) Note that `detect_mshta_inline_hta_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_renamed.md b/docs/_posts/2021-09-16-detect_mshta_renamed.md index 6a6ea4426c..6e87595887 100644 --- a/docs/_posts/2021-09-16-detect_mshta_renamed.md +++ b/docs/_posts/2021-09-16-detect_mshta_renamed.md @@ -54,9 +54,9 @@ The following analytic identifies renamed instances of mshta.exe executing. Msht #### Macros The SPL above uses the following Macros: -* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) Note that `detect_mshta_renamed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md b/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md index e3d1bec40a..d135f7d181 100644 --- a/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md +++ b/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md @@ -54,9 +54,9 @@ This analytic identifies when Microsoft HTML Application Host (mshta.exe) utilit #### Macros The SPL above uses the following Macros: -* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) Note that `detect_mshta_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md b/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md index 6e80ae0446..b376325cc5 100644 --- a/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md +++ b/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md @@ -54,9 +54,9 @@ This search looks for events where `PsExec.exe` is run with the `accepteula` fla #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_psexec](https://github.com/splunk/security_content/blob/develop/macros/process_psexec.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_psexec_with_accepteula_flag_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_7-zip.md b/docs/_posts/2021-09-16-detect_renamed_7-zip.md index 6aeddd15c1..115a093bc2 100644 --- a/docs/_posts/2021-09-16-detect_renamed_7-zip.md +++ b/docs/_posts/2021-09-16-detect_renamed_7-zip.md @@ -54,8 +54,8 @@ The following analytic identifies renamed 7-Zip usage using Sysmon. At this stag #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_renamed_7-zip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_psexec.md b/docs/_posts/2021-09-16-detect_renamed_psexec.md index 467aa754ad..92507c6a44 100644 --- a/docs/_posts/2021-09-16-detect_renamed_psexec.md +++ b/docs/_posts/2021-09-16-detect_renamed_psexec.md @@ -54,9 +54,9 @@ The following analytic identifies renamed instances of `PsExec.exe` being utiliz #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_psexec](https://github.com/splunk/security_content/blob/develop/macros/process_psexec.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_renamed_psexec_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_rclone.md b/docs/_posts/2021-09-16-detect_renamed_rclone.md index bdda405c1b..ad193294e7 100644 --- a/docs/_posts/2021-09-16-detect_renamed_rclone.md +++ b/docs/_posts/2021-09-16-detect_renamed_rclone.md @@ -49,8 +49,8 @@ The following analytic identifies the usage of `rclone.exe`, renamed, being used #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_renamed_rclone_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_winrar.md b/docs/_posts/2021-09-16-detect_renamed_winrar.md index c93435b1ae..8e774c819f 100644 --- a/docs/_posts/2021-09-16-detect_renamed_winrar.md +++ b/docs/_posts/2021-09-16-detect_renamed_winrar.md @@ -54,8 +54,8 @@ The following analtyic identifies renamed instances of `WinRAR.exe`. In most cas #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_renamed_winrar_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-dump_lsass_via_procdump.md b/docs/_posts/2021-09-16-dump_lsass_via_procdump.md index f44eb0f2f3..f4019ef9bb 100644 --- a/docs/_posts/2021-09-16-dump_lsass_via_procdump.md +++ b/docs/_posts/2021-09-16-dump_lsass_via_procdump.md @@ -55,9 +55,9 @@ During triage, confirm this is procdump.exe executing. If it is the first time a #### Macros The SPL above uses the following Macros: +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_procdump](https://github.com/splunk/security_content/blob/develop/macros/process_procdump.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dump_lsass_via_procdump_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-local_account_discovery_with_net.md b/docs/_posts/2021-09-16-local_account_discovery_with_net.md index 0f16383b80..9d9fd5677d 100644 --- a/docs/_posts/2021-09-16-local_account_discovery_with_net.md +++ b/docs/_posts/2021-09-16-local_account_discovery_with_net.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `local_account_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md b/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md index 25aa1cff46..5a614c8c00 100644 --- a/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md +++ b/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `local_account_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-office_product_spawning_wmic.md b/docs/_posts/2021-09-16-office_product_spawning_wmic.md index fbb75c85c0..e33d43c39a 100644 --- a/docs/_posts/2021-09-16-office_product_spawning_wmic.md +++ b/docs/_posts/2021-09-16-office_product_spawning_wmic.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by Ursnif malwar #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `office_product_spawning_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-processes_launching_netsh.md b/docs/_posts/2021-09-16-processes_launching_netsh.md index 498928836b..ba25f14c2b 100644 --- a/docs/_posts/2021-09-16-processes_launching_netsh.md +++ b/docs/_posts/2021-09-16-processes_launching_netsh.md @@ -55,8 +55,8 @@ This search looks for processes launching netsh.exe. Netsh is a command-line scr #### Macros The SPL above uses the following Macros: * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `processes_launching_netsh_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md b/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md index 3f14989486..8678b2142a 100644 --- a/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md @@ -56,8 +56,8 @@ The following analytic identifies regasm.exe with no command line arguments. Thi #### Macros The SPL above uses the following Macros: * [process_regasm](https://github.com/splunk/security_content/blob/develop/macros/process_regasm.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_regasm_with_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md b/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md index 5653814e0e..69bc0c773d 100644 --- a/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md @@ -55,9 +55,9 @@ The following analytic identifies regsvcs.exe with no command line arguments. Th #### Macros The SPL above uses the following Macros: -* [process_regsvcs](https://github.com/splunk/security_content/blob/develop/macros/process_regsvcs.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_regsvcs](https://github.com/splunk/security_content/blob/develop/macros/process_regsvcs.yml) Note that `detect_regsvcs_with_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md b/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md index 1dfdba4eb4..699869ffa8 100644 --- a/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md +++ b/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md @@ -54,8 +54,8 @@ This search is to detect potential malicious office document executing lolbin ch #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `office_document_spawned_child_process_to_download_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md index b3fe719bed..06f31d1ad1 100644 --- a/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md @@ -52,9 +52,9 @@ The following analytic identifies DLLHost.exe with no command line arguments. It #### Macros The SPL above uses the following Macros: +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_dllhost](https://github.com/splunk/security_content/blob/develop/macros/process_dllhost.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_dllhost_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md index 5dd179ef59..80650cc059 100644 --- a/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md @@ -53,8 +53,8 @@ The following analytic identifies gpupdate.exe with no command line arguments. I #### Macros The SPL above uses the following Macros: * [process_gpupdate](https://github.com/splunk/security_content/blob/develop/macros/process_gpupdate.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_gpupdate_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md b/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md index 92f9407552..14f4335e7c 100644 --- a/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md +++ b/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md @@ -58,9 +58,9 @@ The following analytic identifies a renamed instance of microsoft.workflow.compi #### Macros The SPL above uses the following Macros: -* [process_microsoftworkflowcompiler](https://github.com/splunk/security_content/blob/develop/macros/process_microsoftworkflowcompiler.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_microsoftworkflowcompiler](https://github.com/splunk/security_content/blob/develop/macros/process_microsoftworkflowcompiler.yml) Note that `suspicious_microsoft_workflow_compiler_rename_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md index af9f524a9a..4a64907db8 100644 --- a/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md @@ -56,9 +56,9 @@ The following analytic identifies rundll32.exe with no command line arguments. I #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md index d0145ff922..b764fb9512 100644 --- a/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md @@ -52,8 +52,8 @@ The following analytic identifies searchprotocolhost.exe with no command line ar #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_searchprotocolhost_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md b/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md index 5d0b961c7b..9299ebf7eb 100644 --- a/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md +++ b/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md @@ -50,8 +50,8 @@ This search is to detect file creation in remcos folder in appdata which is the #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remcos_rat_file_creation_in_remcos_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-27-change_default_file_association.md b/docs/_posts/2021-09-27-change_default_file_association.md index 876d040f42..ac01126b44 100644 --- a/docs/_posts/2021-09-27-change_default_file_association.md +++ b/docs/_posts/2021-09-27-change_default_file_association.md @@ -56,8 +56,8 @@ This analytic is developed to detect suspicious registry modification to change #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `change_default_file_association_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md b/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md index 094f57a928..091e2db357 100644 --- a/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md +++ b/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md @@ -56,8 +56,8 @@ This search is to detect a suspicious modification of registry entry to persist #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `logon_script_event_trigger_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md b/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md index bf6a101721..25d8d03904 100644 --- a/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md +++ b/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md @@ -56,8 +56,8 @@ This analytic is developed to detect possible event trigger execution through sc #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `screensaver_event_trigger_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-28-print_processor_registry_autostart.md b/docs/_posts/2021-09-28-print_processor_registry_autostart.md index 4c864c270b..9300bef09e 100644 --- a/docs/_posts/2021-09-28-print_processor_registry_autostart.md +++ b/docs/_posts/2021-09-28-print_processor_registry_autostart.md @@ -58,8 +58,8 @@ This analytic is to detect a suspicious modification or new registry entry regar #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `print_processor_registry_autostart_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-29-verclsid_clsid_execution.md b/docs/_posts/2021-09-29-verclsid_clsid_execution.md index 884e5c0933..59b4d667e6 100644 --- a/docs/_posts/2021-09-29-verclsid_clsid_execution.md +++ b/docs/_posts/2021-09-29-verclsid_clsid_execution.md @@ -54,9 +54,9 @@ This analytic is to detect a possible abuse of verclsid to execute malicious fil #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_verclsid](https://github.com/splunk/security_content/blob/develop/macros/process_verclsid.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `verclsid_clsid_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md b/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md index b59ccb0560..673fc85627 100644 --- a/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md +++ b/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md @@ -54,8 +54,8 @@ This analytic is to detect a suspicious wscript commandline to execute vbscript. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `vbscript_execution_using_wscript_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md b/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md index 630241e430..2a403fd061 100644 --- a/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md +++ b/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md @@ -55,8 +55,8 @@ This analytic is to detect a suspicious child process of MSBuild spawned by Wind #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `msbuild_suspicious_spawned_by_script_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md b/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md index a66980dcc8..620a391ff7 100644 --- a/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md +++ b/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md @@ -56,9 +56,9 @@ This analytic is to detect a loading of dll using regsvr32 application with sile #### Macros The SPL above uses the following Macros: -* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) Note that `regsvr32_silent_and_install_param_dll_loading_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md b/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md index ef79a48cf9..96dcf68ae1 100644 --- a/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md +++ b/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md @@ -59,8 +59,8 @@ The following analytic identifies a process modifying the registry with a known #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `malicious_inprocserver32_modification_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md b/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md index 341b80e448..89217818fe 100644 --- a/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md +++ b/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md @@ -59,8 +59,8 @@ DynamicWrapperX is an ActiveX component that can be used in a script to call Win #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `process_writing_dynamicwrapperx_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-rundll32_shimcache_flush.md b/docs/_posts/2021-10-05-rundll32_shimcache_flush.md index 90fe606905..92a6498679 100644 --- a/docs/_posts/2021-10-05-rundll32_shimcache_flush.md +++ b/docs/_posts/2021-10-05-rundll32_shimcache_flush.md @@ -50,9 +50,9 @@ This analytic is to detect a suspicious rundll32 commandline to clear shim cache #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_shimcache_flush_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-suspicious_copy_on_system32.md b/docs/_posts/2021-10-05-suspicious_copy_on_system32.md index 60adf88691..8c220afd3e 100644 --- a/docs/_posts/2021-10-05-suspicious_copy_on_system32.md +++ b/docs/_posts/2021-10-05-suspicious_copy_on_system32.md @@ -55,8 +55,8 @@ This analytic is to detect a suspicious copy of file from systemroot folder of t #### Macros The SPL above uses the following Macros: * [process_copy](https://github.com/splunk/security_content/blob/develop/macros/process_copy.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_copy_on_system32_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md b/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md index 62dd30cad5..07000ca8d8 100644 --- a/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md +++ b/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md @@ -51,8 +51,8 @@ The following analytic identifies winhlp32.exe, found natively in `c:\windows\`, #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `winhlp32_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-06-sdelete_application_execution.md b/docs/_posts/2021-10-06-sdelete_application_execution.md index ef19d78a8c..0940ace20e 100644 --- a/docs/_posts/2021-10-06-sdelete_application_execution.md +++ b/docs/_posts/2021-10-06-sdelete_application_execution.md @@ -59,8 +59,8 @@ This analytic is to detect the execution of sdelete.exe application sysinternal #### Macros The SPL above uses the following Macros: * [process_sdelete](https://github.com/splunk/security_content/blob/develop/macros/process_sdelete.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `sdelete_application_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md b/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md index 3356e67a7c..4bd103b6ba 100644 --- a/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md +++ b/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md @@ -66,8 +66,8 @@ This analytic identifies a suspicious spawned process by WScript or CScript proc #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wscript_or_cscript_suspicious_child_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md b/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md index 9466679701..56a124fb59 100644 --- a/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md +++ b/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md @@ -54,8 +54,8 @@ The wevtutil.exe application is the windows event log utility. This searches for #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_wevtutil_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md index 65df4e9360..dbc1f9e733 100644 --- a/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md @@ -57,8 +57,8 @@ The following analytic identifies DLLHost.exe with no command line arguments wit #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `dllhost_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md index 3e174fd23d..0374bd9830 100644 --- a/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md @@ -61,9 +61,9 @@ The following analytic identifies rundll32.exe with no command line arguments an #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md b/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md index 47b7ebb958..986b44c6d8 100644 --- a/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md +++ b/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md @@ -57,8 +57,8 @@ The following analytic identifies searchprotocolhost.exe with no command line ar #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `searchprotocolhost_with_no_command_line_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md index b855a6466d..d8bae796cf 100644 --- a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md +++ b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md @@ -57,9 +57,9 @@ During triage, review parallel processes for further suspicious activity. #### Macros The SPL above uses the following Macros: -* [process_setspn](https://github.com/splunk/security_content/blob/develop/macros/process_setspn.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_setspn](https://github.com/splunk/security_content/blob/develop/macros/process_setspn.yml) Note that `serviceprincipalnames_discovery_with_setspn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-18-disable_schedule_task.md b/docs/_posts/2021-10-18-disable_schedule_task.md index b1fc0b2bcf..2d2a735b0b 100644 --- a/docs/_posts/2021-10-18-disable_schedule_task.md +++ b/docs/_posts/2021-10-18-disable_schedule_task.md @@ -54,8 +54,8 @@ This analytic is to detect a suspicious commandline to disable existing schedule #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `disable_schedule_task_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md b/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md index 3d148ba6a9..aa1656b366 100644 --- a/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md +++ b/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md @@ -52,9 +52,9 @@ During triage, review parallel processes for further behavior. In addition, iden #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_curl_download_to_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md b/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md index 01c2128212..43e7df3c56 100644 --- a/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md +++ b/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md @@ -54,8 +54,8 @@ This analytic is to detect a suspicious wmic commandlined that uninstall applica #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wmic_noninteractive_app_uninstallation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-03-windows_adfind_exe.md b/docs/_posts/2021-11-03-windows_adfind_exe.md index f15aa4470c..2365ad9412 100644 --- a/docs/_posts/2021-11-03-windows_adfind_exe.md +++ b/docs/_posts/2021-11-03-windows_adfind_exe.md @@ -50,8 +50,8 @@ This search looks for the execution of `adfind.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_adfind_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md b/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md index 6bf430bdda..66bdb0726b 100644 --- a/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md +++ b/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md @@ -64,8 +64,8 @@ This search looks for execution of commonly used attacker tools on an endpoint. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `attacker_tools_on_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md b/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md index 54627e630d..06eb49603e 100644 --- a/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md +++ b/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md @@ -54,9 +54,9 @@ Adversaries may use one of the three methods based on the remote destination and #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_curl_upload_to_remote_destination_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md b/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md index 4e83ffa6ec..0933a14d59 100644 --- a/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md +++ b/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md @@ -56,8 +56,8 @@ This analytic looks for the execution of `sc.exe` with command-line arguments ut #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_service_creation_on_remote_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md b/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md index 7ffcdd6daf..b2bfdb4876 100644 --- a/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md +++ b/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md @@ -56,8 +56,8 @@ This analytic looks for the execution of `sc.exe` with command-line arguments ut #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_service_initiation_on_remote_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md b/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md index 5be1606447..596c261ddf 100644 --- a/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md +++ b/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `winrs.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_process_instantiation_via_winrm_and_winrs_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md b/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md index b84f77c590..8aeac0139d 100644 --- a/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md +++ b/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md @@ -58,8 +58,8 @@ This analytic looks for the execution of `at.exe` with command-line arguments ut #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `scheduled_task_creation_on_remote_endpoint_using_at_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md b/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md index bd47a26fb2..b0204246dc 100644 --- a/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md +++ b/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md @@ -58,8 +58,8 @@ This analytic looks for the execution of `schtasks.exe` with command-line argume #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `scheduled_task_initiation_on_remote_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md b/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md index 39a20b1c7e..886c5a25ae 100644 --- a/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md +++ b/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md @@ -58,8 +58,8 @@ This analytic looks for the execution of `schtasks.exe` with command-line argume #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `schtasks_scheduling_job_on_remote_system_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md b/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md index e9cfecd406..8f2c312d41 100644 --- a/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md +++ b/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md @@ -50,9 +50,9 @@ The following analytic identifies `wmic.exe` loading a remote XSL (eXtensible St #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `wmic_xsl_execution_via_url_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md b/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md index 1ce1e30f06..a581d5b18c 100644 --- a/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md +++ b/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md @@ -51,8 +51,8 @@ The following detection identifies excessive AccessDenied events within an hour #### Macros The SPL above uses the following Macros: -* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) Note that `aws_iam_accessdenied_discovery_events_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md b/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md index 63f365604a..355fa8a63d 100644 --- a/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md +++ b/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md @@ -54,9 +54,9 @@ this analytic is to detect a suspicious compile before delivery approach of .net #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_csc](https://github.com/splunk/security_content/blob/develop/macros/process_csc.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `csc_net_on_the_fly_compilation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-firewall_allowed_program_enable.md b/docs/_posts/2021-11-12-firewall_allowed_program_enable.md index a5f502c11a..f05ea26467 100644 --- a/docs/_posts/2021-11-12-firewall_allowed_program_enable.md +++ b/docs/_posts/2021-11-12-firewall_allowed_program_enable.md @@ -54,8 +54,8 @@ This analytic detects a potential suspicious modification of firewall rule allow #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `firewall_allowed_program_enable_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md b/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md index cf06088d96..5a46223be1 100644 --- a/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md +++ b/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md @@ -55,8 +55,8 @@ This analytic look for a spawned process of route.exe windows application. Adver #### Macros The SPL above uses the following Macros: * [process_route](https://github.com/splunk/security_content/blob/develop/macros/process_route.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `network_discovery_using_route_windows_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md b/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md index 1a2bccfc70..f5cb7f0f4d 100644 --- a/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md +++ b/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md @@ -50,9 +50,9 @@ This analytic identifies wmic.exe being launched with parameters to spawn a proc #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `remote_process_instantiation_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-runas_execution_in_commandline.md b/docs/_posts/2021-11-12-runas_execution_in_commandline.md index 1e51dcb2cc..2fd20f3adb 100644 --- a/docs/_posts/2021-11-12-runas_execution_in_commandline.md +++ b/docs/_posts/2021-11-12-runas_execution_in_commandline.md @@ -56,9 +56,9 @@ This analytic look for a spawned runas.exe process with a administrator user opt #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_runas](https://github.com/splunk/security_content/blob/develop/macros/process_runas.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_runas](https://github.com/splunk/security_content/blob/develop/macros/process_runas.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `runas_execution_in_commandline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md b/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md index 9c7308a5c6..b4846acfde 100644 --- a/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md +++ b/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md @@ -63,8 +63,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_installutil_remote_network_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md b/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md index 2459c2cdee..116a134d80 100644 --- a/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md +++ b/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md @@ -59,8 +59,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_installutil_uninstall_option_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md b/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md index 4f8305b5bf..0beca946a5 100644 --- a/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md +++ b/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md @@ -64,8 +64,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_installutil_uninstall_option_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md b/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md index 13c8ee8758..b0664aded1 100644 --- a/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md +++ b/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md @@ -58,8 +58,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_installutil_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md index 04e7cc9a34..a295247d9c 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `powershell.exe` with arguments utilize #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `remote_process_instantiation_via_dcom_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md index f694398ec8..78d579a1e8 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md @@ -50,9 +50,9 @@ This analytic looks for the execution of `powershell.exe` leveraging the `Invoke #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `remote_process_instantiation_via_wmi_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-windows_diskcryptor_usage.md b/docs/_posts/2021-11-15-windows_diskcryptor_usage.md index 16dbd729d0..5781744965 100644 --- a/docs/_posts/2021-11-15-windows_diskcryptor_usage.md +++ b/docs/_posts/2021-11-15-windows_diskcryptor_usage.md @@ -50,8 +50,8 @@ The following analytic identifies DiskCryptor process name of dcrypt.exe or int #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_diskcryptor_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md index e9815dca41..3a48317b97 100644 --- a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md +++ b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `powershell.exe` with arguments utilize #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `remote_process_instantiation_via_winrm_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-17-windows_dism_remove_defender.md b/docs/_posts/2021-11-17-windows_dism_remove_defender.md index f6f1d98bbf..ae8c096206 100644 --- a/docs/_posts/2021-11-17-windows_dism_remove_defender.md +++ b/docs/_posts/2021-11-17-windows_dism_remove_defender.md @@ -54,8 +54,8 @@ The following analytic identifies the use of the Windows Disk Image Utility, `di #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_dism_remove_defender_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md b/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md index 2da588a047..1efe6506a5 100644 --- a/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md +++ b/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md @@ -52,8 +52,8 @@ The following analytic identifies executable files (.exe or .dll) being written #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `executable_file_written_in_administrative_smb_share_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md b/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md index 797fe860ba..7e7ff3f8f4 100644 --- a/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md +++ b/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md @@ -50,9 +50,9 @@ This analytic is to detect a suspicious dxdiag.exe process command-line executio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_dxdiag](https://github.com/splunk/security_content/blob/develop/macros/process_dxdiag.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `system_info_gathering_using_dxdiag_application_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md b/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md index 484de028c9..373a3ba41f 100644 --- a/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md +++ b/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md @@ -54,8 +54,8 @@ This analytic will detect if a suspicious process contains a commandline paramet #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `possible_browser_pass_view_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md index 0f96ad7e07..bb96ee95e6 100644 --- a/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md @@ -56,8 +56,8 @@ The following analytic identifies `services.exe` spawning a LOLBAS execution pro #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `services_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md index bf67f1c7be..ec5cb50639 100644 --- a/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md @@ -58,8 +58,8 @@ The following analytic identifies `svchost.exe` spawning a LOLBAS execution proc #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `svchost_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md b/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md index c7e954a989..b3c0ab372e 100644 --- a/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md +++ b/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md @@ -52,8 +52,8 @@ The following analytc uses Windows Event Id 7045, `New Service Was Installed`, t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_service_created_with_suspicious_service_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-windows_service_created_within_public_path.md b/docs/_posts/2021-11-22-windows_service_created_within_public_path.md index 976ce2235e..146cc60089 100644 --- a/docs/_posts/2021-11-22-windows_service_created_within_public_path.md +++ b/docs/_posts/2021-11-22-windows_service_created_within_public_path.md @@ -54,8 +54,8 @@ The following analytc uses Windows Event Id 7045, `New Service Was Installed`, t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_service_created_within_public_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md index 39df0f3eaf..b1d0e3a08d 100644 --- a/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md @@ -50,8 +50,8 @@ The following analytic identifies `wmiprsve.exe` spawning a LOLBAS execution pro #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wmiprsve_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md index ebe504352b..77a8fa581a 100644 --- a/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md @@ -54,8 +54,8 @@ The following analytic identifies `Wsmprovhost.exe` spawning a LOLBAS execution #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wsmprovhost_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md index af71f126a7..0e9786eae5 100644 --- a/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md @@ -54,8 +54,8 @@ The following analytic identifies `mmc.exe` spawning a LOLBAS execution process. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `mmc_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md b/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md index 67d1d8e664..5ea2780a1f 100644 --- a/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md +++ b/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md @@ -54,8 +54,8 @@ This analytic will identify a suspicious process command-line related to Windows #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `add_or_set_windows_defender_exclusion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md b/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md index 5adf251bb4..8cf8835bd7 100644 --- a/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md +++ b/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md @@ -50,9 +50,9 @@ This analytic identifies commonly used command-line arguments used by `rclone.ex #### Macros The SPL above uses the following Macros: -* [process_rclone](https://github.com/splunk/security_content/blob/develop/macros/process_rclone.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_rclone](https://github.com/splunk/security_content/blob/develop/macros/process_rclone.yml) Note that `detect_rclone_command-line_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md b/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md index 8a413f49c0..8f0b126bdd 100644 --- a/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md +++ b/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md @@ -77,8 +77,8 @@ The following analytic assists with identifying a PowerShell process spawned as #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `possible_lateral_movement_powershell_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md b/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md index 044a1c38dd..f631fa4749 100644 --- a/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md +++ b/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md @@ -50,8 +50,8 @@ The following analytic identifies the Raccine Rules Updater scheduled task being #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_raccine_scheduled_task_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-10-curl_download_and_bash_execution.md b/docs/_posts/2021-12-10-curl_download_and_bash_execution.md index 2a9bc5fdc3..76b7efb0ce 100644 --- a/docs/_posts/2021-12-10-curl_download_and_bash_execution.md +++ b/docs/_posts/2021-12-10-curl_download_and_bash_execution.md @@ -52,8 +52,8 @@ The following analytic identifies the use of curl on Linux or MacOS attempting t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `curl_download_and_bash_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-11-wget_download_and_bash_execution.md b/docs/_posts/2021-12-11-wget_download_and_bash_execution.md index 70708a7591..c25394d2fc 100644 --- a/docs/_posts/2021-12-11-wget_download_and_bash_execution.md +++ b/docs/_posts/2021-12-11-wget_download_and_bash_execution.md @@ -52,8 +52,8 @@ The following analytic identifies the use of wget on Linux or MacOS attempting t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wget_download_and_bash_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-linux_java_spawning_shell.md b/docs/_posts/2021-12-13-linux_java_spawning_shell.md index b7726d9ad6..9fa8dd558b 100644 --- a/docs/_posts/2021-12-13-linux_java_spawning_shell.md +++ b/docs/_posts/2021-12-13-linux_java_spawning_shell.md @@ -52,8 +52,8 @@ The following analytic identifies the process name of Java, Apache, or Tomcat sp #### Macros The SPL above uses the following Macros: * [linux_shells](https://github.com/splunk/security_content/blob/develop/macros/linux_shells.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_java_spawning_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md b/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md index e5fd647f8e..b8916a6f5e 100644 --- a/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md +++ b/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md @@ -62,8 +62,8 @@ CVE-2021-44228 Log4Shell payloads can be injected via various methods, but on of #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `log4shell_jndi_payload_injection_with_outbound_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md b/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md index 9d7773f4e6..48d379f0bb 100644 --- a/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md +++ b/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md @@ -55,8 +55,8 @@ A required step while exploiting the CVE-2021-44228-Log4j vulnerability is that #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `outbound_network_connection_from_java_using_default_ports_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-windows_java_spawning_shells.md b/docs/_posts/2021-12-13-windows_java_spawning_shells.md index f50ce4b0d8..158e29cedb 100644 --- a/docs/_posts/2021-12-13-windows_java_spawning_shells.md +++ b/docs/_posts/2021-12-13-windows_java_spawning_shells.md @@ -53,9 +53,9 @@ The following analytic identifies the process name of java.exe and w3wp.exe spaw #### Macros The SPL above uses the following Macros: -* [windows_shells](https://github.com/splunk/security_content/blob/develop/macros/windows_shells.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [windows_shells](https://github.com/splunk/security_content/blob/develop/macros/windows_shells.yml) Note that `windows_java_spawning_shells_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md b/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md index c2c89c4040..32fb481f4d 100644 --- a/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md +++ b/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious file creation in known cron table #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_add_files_in_known_crontab_directories_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md b/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md index 5258bd977c..8ed1056ab5 100644 --- a/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md +++ b/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious file creation of /etc/at.allow or #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_at_allow_config_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_at_application_execution.md b/docs/_posts/2021-12-17-linux_at_application_execution.md index 528875e390..94107498fb 100644 --- a/docs/_posts/2021-12-17-linux_at_application_execution.md +++ b/docs/_posts/2021-12-17-linux_at_application_execution.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious process creation of At applicatio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_at_application_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md b/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md index d0a1c340d8..1b4a8b2249 100644 --- a/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md +++ b/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious cronjobs modification using cront #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_edit_cron_table_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md b/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md index 88507d092e..fd834052de 100644 --- a/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md +++ b/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md @@ -58,8 +58,8 @@ This analytic looks for suspicious commandline that may use to append user entry #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_append_command_to_at_allow_config_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md b/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md index fc1c288449..e66adb435c 100644 --- a/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md +++ b/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md @@ -58,8 +58,8 @@ This analytic looks for possible suspicious commandline that may use to append a #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_append_cronjob_entry_on_existing_cronjob_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md b/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md index ccfee44fa4..12983fb28a 100644 --- a/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md +++ b/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md @@ -58,8 +58,8 @@ This analytic looks for possible modification of cronjobs file using editor. Thi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_cronjob_modification_with_editor_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md b/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md index 1abe911ed3..8d3b4876e8 100644 --- a/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md +++ b/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md @@ -56,8 +56,8 @@ This analytic looks for suspicious file creation on init system directories for #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_file_creation_in_init_boot_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md b/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md index 282c65f35e..0b70b8edc6 100644 --- a/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md +++ b/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md @@ -56,8 +56,8 @@ This analytic looks for suspicious file creation in /etc/profile.d directory to #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_file_creation_in_profile_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md b/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md index 23c4b577d1..c196e50b78 100644 --- a/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md +++ b/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md @@ -56,8 +56,8 @@ This analytic looks for suspicious command-lines that can be possibly used to mo #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_append_command_to_profile_config_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md b/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md index 0eab742f91..9101294dcd 100644 --- a/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md +++ b/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md @@ -58,8 +58,8 @@ This analytic looks for suspicious file creation in systemd timer directory in l #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_service_file_created_in_systemd_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_service_restarted.md b/docs/_posts/2021-12-20-linux_service_restarted.md index aa028400c5..9a9bda411c 100644 --- a/docs/_posts/2021-12-20-linux_service_restarted.md +++ b/docs/_posts/2021-12-20-linux_service_restarted.md @@ -58,8 +58,8 @@ This analytic looks for restarted or re-enable services in linux platform. This #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_service_restarted_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_service_started_or_enabled.md b/docs/_posts/2021-12-20-linux_service_started_or_enabled.md index 398104fe14..b51d1bc3f8 100644 --- a/docs/_posts/2021-12-20-linux_service_started_or_enabled.md +++ b/docs/_posts/2021-12-20-linux_service_started_or_enabled.md @@ -58,8 +58,8 @@ This analytic looks for created or enable services in linux platform. This techn #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_service_started_or_enabled_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_add_user_account.md b/docs/_posts/2021-12-21-linux_add_user_account.md index 45f689150f..ab815b104c 100644 --- a/docs/_posts/2021-12-21-linux_add_user_account.md +++ b/docs/_posts/2021-12-21-linux_add_user_account.md @@ -54,8 +54,8 @@ This analytic looks for commands to create user accounts on the linux platform. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_add_user_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md b/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md index 0dff48962b..dcbc374ace 100644 --- a/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md +++ b/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md @@ -54,8 +54,8 @@ This analytic looks for a commandline that change the file owner to root using c #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_change_file_owner_to_root_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md b/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md index e2e15e4b28..5923d009a9 100644 --- a/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md +++ b/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md @@ -56,8 +56,8 @@ This analytic is to look for suspicious command lines that may add entry to /etc #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_nopasswd_entry_in_sudoers_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md b/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md index 9d06eed015..f98d5833eb 100644 --- a/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md +++ b/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md @@ -47,7 +47,7 @@ This analytic looks for suspicious chmod utility execution to enable SUID bit. T ``` -| tstats `security_content_summariesonly` count min(_time) as firstTime max(_time) as lastTime from datamodel=Endpoint.Processes WHERE (Processes.process_name = chmod OR Processes.process = "*chmod *") AND Processes.process IN("* g+s *", "* u+s *", "* 4777 *", "* 4577 *", "* 777 *") by Processes.dest Processes.user Processes.parent_process_name Processes.process_name Processes.process Processes.process_id Processes.parent_process_id Processes.process_guid +| tstats `security_content_summariesonly` count min(_time) as firstTime max(_time) as lastTime from datamodel=Endpoint.Processes WHERE (Processes.process_name = chmod OR Processes.process = "*chmod *") AND Processes.process IN("* g+s *", "* u+s *", "* 4777 *", "* 4577 *") by Processes.dest Processes.user Processes.parent_process_name Processes.process_name Processes.process Processes.process_id Processes.parent_process_id Processes.process_guid | `drop_dm_object_name(Processes)` | `security_content_ctime(firstTime)` | `security_content_ctime(lastTime)` @@ -56,8 +56,8 @@ This analytic looks for suspicious chmod utility execution to enable SUID bit. T #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_setuid_using_chmod_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md b/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md index 48d7203a69..6742b04ad4 100644 --- a/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md +++ b/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md @@ -56,8 +56,8 @@ This analytic looks for suspicious setcap utility execution to enable SUID bit. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_setuid_using_setcap_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_visudo_utility_execution.md b/docs/_posts/2021-12-21-linux_visudo_utility_execution.md index d08b453bd9..34515737d7 100644 --- a/docs/_posts/2021-12-21-linux_visudo_utility_execution.md +++ b/docs/_posts/2021-12-21-linux_visudo_utility_execution.md @@ -56,8 +56,8 @@ This analytic is to looks for suspicious commandline that add entry to /etc/sudo #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_visudo_utility_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md b/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md index 51b605c196..0cc517b21e 100644 --- a/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md +++ b/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md @@ -56,8 +56,8 @@ This analytic looks for suspicious file creation in kernel/driver directory in l #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_file_created_in_kernel_driver_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md b/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md index cadc06c93f..c1b44cd225 100644 --- a/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md +++ b/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md @@ -56,8 +56,8 @@ This analytic looks for inserting of linux kernel module using insmod utility fu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_insert_kernel_module_using_insmod_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md b/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md index d23ff2aa9e..fc89149e6d 100644 --- a/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md +++ b/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md @@ -56,8 +56,8 @@ This analytic looks for possible installing a linux kernel module using modprobe #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_install_kernel_module_using_modprobe_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md b/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md index 0c29f0a300..e4d2e4753a 100644 --- a/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md +++ b/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md @@ -58,8 +58,8 @@ This analytic is to detect a suspicious command that may hijack a library functi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_preload_hijack_library_calls_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md b/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md index bfc1c81175..10f413d8bf 100644 --- a/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md +++ b/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md @@ -56,8 +56,8 @@ This analytic is to look for possible elevation control access using a common kn #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_common_process_for_elevation_control_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md b/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md index c7440a0e45..d8ff5a17bb 100644 --- a/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md +++ b/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md @@ -56,8 +56,8 @@ This analytic is to looks for file creation of sudoers.tmp file cause by editing #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_sudoers_tmp_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md b/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md index e350e631a2..f129feb0c3 100644 --- a/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md +++ b/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md @@ -56,8 +56,8 @@ This analytic is to detect the execution of sudo or su command in linux operatin #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_sudo_or_su_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md b/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md index 8165e2e463..b18af83410 100644 --- a/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md +++ b/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md @@ -56,8 +56,8 @@ This analytic is to detect the creation of doas.conf file in linux host platform #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_doas_conf_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-05-linux_doas_tool_execution.md b/docs/_posts/2022-01-05-linux_doas_tool_execution.md index 3c45b43911..eefa07fe46 100644 --- a/docs/_posts/2022-01-05-linux_doas_tool_execution.md +++ b/docs/_posts/2022-01-05-linux_doas_tool_execution.md @@ -56,8 +56,8 @@ This analytic is to detect the doas tool execution in linux host platform. This #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_doas_tool_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md b/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md index cc117215d2..c2283612dd 100644 --- a/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md +++ b/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md @@ -54,8 +54,8 @@ This analytic is to detect a possible attempt to dump or access the content of / #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_access_to_credential_files_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md b/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md index 15dcc62695..767f6a7c58 100644 --- a/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md +++ b/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md @@ -56,8 +56,8 @@ This analytic is to detect a possible access or modification of /etc/sudoers fil #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_access_to_sudoers_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md b/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md index f413350326..5bc63bb129 100644 --- a/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md +++ b/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md @@ -54,8 +54,8 @@ This analytic is to look for suspicious process command-line that might be acces #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_access_or_modification_of_sshd_config_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md b/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md index 2376eeec42..4a1612e9f5 100644 --- a/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md +++ b/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md @@ -54,8 +54,8 @@ This analytic is to look for possible ssh key file creation on ~/.ssh/ folder. T #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `linux_possible_ssh_key_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md b/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md index c20e6485d4..5fcc0d07fa 100644 --- a/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md +++ b/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md @@ -60,9 +60,9 @@ The following hunting analytic identifies PowerShell commands utilizing the Wind #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `powershell_-_connect_to_internet_with_hidden_window_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md b/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md index 9c4d5125f9..635c630692 100644 --- a/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md +++ b/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md @@ -56,9 +56,9 @@ The following analytic uses a pretrained machine learning text classifier to det #### Macros The SPL above uses the following Macros: +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [potentially_malicious_code_on_cmdline_tokenize_score](https://github.com/splunk/security_content/blob/develop/macros/potentially_malicious_code_on_cmdline_tokenize_score.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `potentially_malicious_code_on_commandline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md b/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md index 351fb562ff..63f5ffabbb 100644 --- a/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md +++ b/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md @@ -55,9 +55,9 @@ The following analytic identifies command-line arguments where `cmd.exe /c` is u #### Macros The SPL above uses the following Macros: -* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `cmd_carry_out_string_command_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md b/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md index e6e030637a..a00cca9aac 100644 --- a/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md +++ b/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md @@ -67,8 +67,8 @@ This analytic looks for the presence of suspicious commandline parameters typica #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `impacket_lateral_movement_commandline_parameters_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md b/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md index 44ccb02fe1..07a0f653a3 100644 --- a/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md +++ b/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md @@ -58,9 +58,9 @@ Alternatively, may use regex per matching here https://regexr.com/662ov. #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `malicious_powershell_process_-_encoded_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md b/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md index 33d79fa554..7140d9db7c 100644 --- a/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md +++ b/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md @@ -64,8 +64,8 @@ The following analytic identifies native .net binaries within the Windows operat #### Macros The SPL above uses the following Macros: * [is_net_windows_file](https://github.com/splunk/security_content/blob/develop/macros/is_net_windows_file.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_dotnet_binary_in_non_standard_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md b/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md index 573df6dd01..2de027bebb 100644 --- a/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md +++ b/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md @@ -63,8 +63,8 @@ The following analytic identifies the Windows binary InstallUtil.exe running fro #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_installutil_in_non_standard_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-20-ping_sleep_batch_command.md b/docs/_posts/2022-01-20-ping_sleep_batch_command.md index f418b04252..82b7b5e796 100644 --- a/docs/_posts/2022-01-20-ping_sleep_batch_command.md +++ b/docs/_posts/2022-01-20-ping_sleep_batch_command.md @@ -56,9 +56,9 @@ This analytic will identify the possible execution of ping sleep batch commands. #### Macros The SPL above uses the following Macros: +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_ping](https://github.com/splunk/security_content/blob/develop/macros/process_ping.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `ping_sleep_batch_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md b/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md index 1e9c3e44ef..efc47efbe8 100644 --- a/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md +++ b/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md @@ -50,8 +50,8 @@ The following analytic identifies the use of AdvancedRun.exe. AdvancedRun.exe ha #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_nirsoft_advancedrun_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-24-windows_nirsoft_utilities.md b/docs/_posts/2022-01-24-windows_nirsoft_utilities.md index fe518178eb..ed74546b76 100644 --- a/docs/_posts/2022-01-24-windows_nirsoft_utilities.md +++ b/docs/_posts/2022-01-24-windows_nirsoft_utilities.md @@ -52,8 +52,8 @@ The following hunting analytic assists with identifying the proces execution of #### Macros The SPL above uses the following Macros: * [is_nirsoft_software](https://github.com/splunk/security_content/blob/develop/macros/is_nirsoft_software.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_nirsoft_utilities_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md b/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md new file mode 100644 index 0000000000..b3908759e0 --- /dev/null +++ b/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md @@ -0,0 +1,119 @@ +--- +title: "Linux pkexec Privilege Escalation" +excerpt: "Exploitation for Privilege Escalation" +categories: + - Endpoint +last_modified_at: 2022-01-28 +toc: true +toc_label: "" +tags: + - Exploitation for Privilege Escalation + - Privilege Escalation + - Splunk Enterprise + - Splunk Enterprise Security + - Splunk Cloud + - CVE-2021-4034 + - Endpoint +--- + + + +[Try in Splunk Security Cloud](https://www.splunk.com/en_us/cyber-security.html){: .btn .btn--success} + +#### Description + +The following analytic identifies `pkexec` spawning with no command-line arguments. A vulnerability in Polkit's pkexec component identified as CVE-2021-4034 (PwnKit) which is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system. + +- **Type**: [TTP](https://github.com/splunk/security_content/wiki/Detection-Analytic-Types) +- **Product**: Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud +- **Datamodel**: [Endpoint](https://docs.splunk.com/Documentation/CIM/latest/User/Endpoint) +- **Last Updated**: 2022-01-28 +- **Author**: Michael Haag, Splunk +- **ID**: 03e22c1c-8086-11ec-ac2e-acde48001122 + + +#### [ATT&CK](https://attack.mitre.org/) + +| ID | Technique | Tactic | +| -------------- | ---------------- |-------------------- | +| [T1068](https://attack.mitre.org/techniques/T1068/) | Exploitation for Privilege Escalation | Privilege Escalation | + +#### Search + +``` + +| tstats `security_content_summariesonly` count FROM datamodel=Endpoint.Processes where Processes.process_name=pkexec by _time Processes.dest Processes.process_id Processes.parent_process_name Processes.process_name Processes.process Processes.process_path +| `drop_dm_object_name(Processes)` +| `security_content_ctime(firstTime)` +| `security_content_ctime(lastTime)` +| regex process="(^.{1}$)" +| `linux_pkexec_privilege_escalation_filter` +``` + +#### Macros +The SPL above uses the following Macros: +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) + +Note that `linux_pkexec_privilege_escalation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. + +#### Required field +* _time +* Processes.dest +* Processes.user +* Processes.parent_process_name +* Processes.parent_process +* Processes.original_file_name +* Processes.process_name +* Processes.process +* Processes.process_id +* Processes.parent_process_path +* Processes.process_path +* Processes.parent_process_id + + +#### How To Implement +Depending on the EDR product in use, there are multiple ways to "null" the command-line field, Processes.process. Two that may be useful `process="(^.{0}$)"` or `| where isnull(process)`. To generate data for this behavior, Sysmon for Linux was utilized. To successfully implement this search you need to be ingesting information on process that include the name of the process responsible for the changes from your endpoints into the `Endpoint` datamodel in the `Processes` node. In addition, confirm the latest CIM App 4.20 or higher is installed and the latest TA for the endpoint product. + +#### Known False Positives +False positives may be present, filter as needed. + +#### Kill Chain Phase +* Exploitation + + + +#### RBA + +| Risk Score | Impact | Confidence | Message | +| ----------- | ----------- |--------------|--------------| +| 56.0 | 80 | 70 | An instance of $parent_process_name$ spawning $process_name$ was identified on endpoint $dest$ by user $user$ related to a local privilege escalation in polkit pkexec. | + + + +#### CVE + +| ID | Summary | [CVSS](https://nvd.nist.gov/vuln-metrics/cvss) | +| ----------- | ----------- | -------------- | +| [CVE-2021-4034](https://nvd.nist.gov/vuln/detail/CVE-2021-4034) | A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. | 7.2 | + + + +#### Reference + +* [https://www.reddit.com/r/crowdstrike/comments/sdfeig/20220126_cool_query_friday_hunting_pwnkit_local/](https://www.reddit.com/r/crowdstrike/comments/sdfeig/20220126_cool_query_friday_hunting_pwnkit_local/) +* [https://linux.die.net/man/1/pkexec](https://linux.die.net/man/1/pkexec) +* [https://www.bleepingcomputer.com/news/security/linux-system-service-bug-gives-root-on-all-major-distros-exploit-released/](https://www.bleepingcomputer.com/news/security/linux-system-service-bug-gives-root-on-all-major-distros-exploit-released/) +* [https://access.redhat.com/security/security-updates/#/?q=polkit&p=1&sort=portal_publication_date%20desc&rows=10&portal_advisory_type=Security%20Advisory&documentKind=PortalProduct](https://access.redhat.com/security/security-updates/#/?q=polkit&p=1&sort=portal_publication_date%20desc&rows=10&portal_advisory_type=Security%20Advisory&documentKind=PortalProduct) + + + +#### Test Dataset +Replay any dataset to Splunk Enterprise by using our [`replay.py`](https://github.com/splunk/attack_data#using-replaypy) tool or the [UI](https://github.com/splunk/attack_data#using-ui). +Alternatively you can replay a dataset into a [Splunk Attack Range](https://github.com/splunk/attack_range#replay-dumps-into-attack-range-splunk-server) + +* [https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1068/zoom_child_process/linux-sysmon.log](https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1068/zoom_child_process/linux-sysmon.log) + + + +[*source*](https://github.com/splunk/security_content/tree/develop/detections/endpoint/linux_pkexec_privilege_escalation.yml) \| *version*: **1** \ No newline at end of file diff --git a/docs/_stories/linux_privilege_escalation.md b/docs/_stories/linux_privilege_escalation.md index 56481b77b9..6854233057 100644 --- a/docs/_stories/linux_privilege_escalation.md +++ b/docs/_stories/linux_privilege_escalation.md @@ -62,6 +62,7 @@ Privilege escalation is a "land-and-expand" technique, wherein an adversary gain | [Linux Sudo OR Su Execution](/endpoint/linux_sudo_or_su_execution/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | Hunting | | [Linux Sudoers Tmp File Creation](/endpoint/linux_sudoers_tmp_file_creation/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | Anomaly | | [Linux Visudo Utility Execution](/endpoint/linux_visudo_utility_execution/) | [Sudo and Sudo Caching](/tags/#sudo-and-sudo-caching), [Abuse Elevation Control Mechanism](/tags/#abuse-elevation-control-mechanism) | Anomaly | +| [Linux pkexec Privilege Escalation](/endpoint/linux_pkexec_privilege_escalation/) | [Exploitation for Privilege Escalation](/tags/#exploitation-for-privilege-escalation) | TTP | #### Reference diff --git a/docs/_stories/masquerading_-_rename_system_utilities.md b/docs/_stories/masquerading_-_rename_system_utilities.md index 02ad6b8023..83798bb57e 100644 --- a/docs/_stories/masquerading_-_rename_system_utilities.md +++ b/docs/_stories/masquerading_-_rename_system_utilities.md @@ -36,7 +36,6 @@ There will be false positives as some native Windows processes are moved or ran | [Execution of File with Multiple Extensions](/endpoint/execution_of_file_with_multiple_extensions/) | [Masquerading](/tags/#masquerading), [Rename System Utilities](/tags/#rename-system-utilities) | TTP | | [Sdelete Application Execution](/endpoint/sdelete_application_execution/) | [Data Destruction](/tags/#data-destruction), [File Deletion](/tags/#file-deletion), [Indicator Removal on Host](/tags/#indicator-removal-on-host) | TTP | | [Suspicious MSBuild Rename](/endpoint/suspicious_msbuild_rename/) | [Masquerading](/tags/#masquerading), [Trusted Developer Utilities Proxy Execution](/tags/#trusted-developer-utilities-proxy-execution), [Rename System Utilities](/tags/#rename-system-utilities), [MSBuild](/tags/#msbuild) | TTP | -| [Suspicious Rundll32 Rename](/endpoint/suspicious_rundll32_rename/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Masquerading](/tags/#masquerading), [Rundll32](/tags/#rundll32), [Rename System Utilities](/tags/#rename-system-utilities) | Hunting | | [Suspicious microsoft workflow compiler rename](/endpoint/suspicious_microsoft_workflow_compiler_rename/) | [Masquerading](/tags/#masquerading), [Trusted Developer Utilities Proxy Execution](/tags/#trusted-developer-utilities-proxy-execution), [Rename System Utilities](/tags/#rename-system-utilities) | Hunting | | [Suspicious msbuild path](/endpoint/suspicious_msbuild_path/) | [Masquerading](/tags/#masquerading), [Trusted Developer Utilities Proxy Execution](/tags/#trusted-developer-utilities-proxy-execution), [Rename System Utilities](/tags/#rename-system-utilities), [MSBuild](/tags/#msbuild) | TTP | | [System Process Running from Unexpected Location](/endpoint/system_process_running_from_unexpected_location/) | [Masquerading](/tags/#masquerading) | Anomaly | diff --git a/docs/_stories/suspicious_rundll32_activity.md b/docs/_stories/suspicious_rundll32_activity.md index 445e490895..fd9bebf848 100644 --- a/docs/_stories/suspicious_rundll32_activity.md +++ b/docs/_stories/suspicious_rundll32_activity.md @@ -37,7 +37,6 @@ One common adversary tactic is to bypass application control solutions via the r | [Rundll32 Control RunDLL Hunt](/endpoint/rundll32_control_rundll_hunt/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | Hunting | | [Rundll32 Control RunDLL World Writable Directory](/endpoint/rundll32_control_rundll_world_writable_directory/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Rundll32 with no Command Line Arguments with Network](/endpoint/rundll32_with_no_command_line_arguments_with_network/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | -| [Suspicious Rundll32 Rename](/endpoint/suspicious_rundll32_rename/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Masquerading](/tags/#masquerading), [Rundll32](/tags/#rundll32), [Rename System Utilities](/tags/#rename-system-utilities) | Hunting | | [Suspicious Rundll32 StartW](/endpoint/suspicious_rundll32_startw/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Suspicious Rundll32 dllregisterserver](/endpoint/suspicious_rundll32_dllregisterserver/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Suspicious Rundll32 no Command Line Arguments](/endpoint/suspicious_rundll32_no_command_line_arguments/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | diff --git a/docs/_stories/unusual_processes.md b/docs/_stories/unusual_processes.md index 397120f593..4dd5c0cb17 100644 --- a/docs/_stories/unusual_processes.md +++ b/docs/_stories/unusual_processes.md @@ -38,7 +38,6 @@ In the event an unusual process is identified, it is imperative to better unders | [Detect processes used for System Network Configuration Discovery](/endpoint/detect_processes_used_for_system_network_configuration_discovery/) | [System Network Configuration Discovery](/tags/#system-network-configuration-discovery) | TTP | | [First time seen command line argument](/endpoint/first_time_seen_command_line_argument/) | [Command and Scripting Interpreter](/tags/#command-and-scripting-interpreter), [Indirect Command Execution](/tags/#indirect-command-execution) | Anomaly | | [Rare Parent-Child Process Relationship](/endpoint/rare_parent-child_process_relationship/) | [Exploitation for Client Execution](/tags/#exploitation-for-client-execution), [Command and Scripting Interpreter](/tags/#command-and-scripting-interpreter), [Scheduled Task/Job](/tags/#scheduled-task/job), [Software Deployment Tools](/tags/#software-deployment-tools) | Anomaly | -| [RunDLL Loading DLL By Ordinal](/endpoint/rundll_loading_dll_by_ordinal/) | [Signed Binary Proxy Execution](/tags/#signed-binary-proxy-execution), [Rundll32](/tags/#rundll32) | TTP | | [Rundll32 Shimcache Flush](/endpoint/rundll32_shimcache_flush/) | [Modify Registry](/tags/#modify-registry) | TTP | | [Suspicious Copy on System32](/endpoint/suspicious_copy_on_system32/) | [Rename System Utilities](/tags/#rename-system-utilities), [Masquerading](/tags/#masquerading) | TTP | | [System Processes Run From Unexpected Locations](/endpoint/system_processes_run_from_unexpected_locations/) | [Masquerading](/tags/#masquerading), [Rename System Utilities](/tags/#rename-system-utilities) | TTP | diff --git a/docs/index.markdown b/docs/index.markdown index 00832b4738..931ccdf3c5 100644 --- a/docs/index.markdown +++ b/docs/index.markdown @@ -9,12 +9,12 @@ header: actions: - label: "Download" url: "https://splunkbase.splunk.com/app/3449/" -excerpt: "Get the latest **FREE** Enterprise Security Content Update (ESCU) App with **750** detections for Splunk." +excerpt: "Get the latest **FREE** Enterprise Security Content Update (ESCU) App with **749** detections for Splunk." feature_row: - image_path: /static/feature_detection.png alt: "customizable" title: "Detections" - excerpt: "See all **750** Splunk Analytics built to find evil 😈." + excerpt: "See all **749** Splunk Analytics built to find evil 😈." url: "/detections" btn_class: "btn--primary" btn_label: "Explore" From de92a3c7aacb4ce3dcd6f9ee26c85a02228813c1 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Fri, 4 Feb 2022 09:31:08 -0600 Subject: [PATCH 13/16] Additional doc_gen run --- bin/jinja2_templates/doc_index.j2 | 2 +- docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md | 2 +- docs/_posts/2018-10-23-wmi_permanent_event_subscription.md | 2 +- docs/_posts/2018-10-23-wmi_temporary_event_subscription.md | 2 +- docs/_posts/2018-12-03-remote_wmi_command_attempt.md | 2 +- docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md | 2 +- docs/_posts/2020-03-16-detect_rare_executables.md | 2 +- ...20-04-15-amazon_eks_kubernetes_cluster_scan_detection.md | 2 +- .../2020-04-15-amazon_eks_kubernetes_pod_scan_detection.md | 2 +- .../2020-05-20-first_time_seen_child_process_of_zoom.md | 2 +- docs/_posts/2020-07-21-attempt_to_stop_security_service.md | 2 +- ...alicious_powershell_process_-_execution_policy_bypass.md | 2 +- .../2020-07-22-suspicious_email_attachment_extensions.md | 2 +- docs/_posts/2020-08-11-detect_arp_poisoning.md | 2 +- docs/_posts/2020-08-11-detect_rogue_dhcp_server.md | 2 +- ...0-09-16-create_or_delete_windows_shares_using_net_exe.md | 2 +- ...2020-10-28-detect_ipv6_network_infrastructure_threats.md | 2 +- docs/_posts/2020-10-28-detect_port_security_violation.md | 2 +- docs/_posts/2020-10-28-detect_traffic_mirroring.md | 2 +- docs/_posts/2020-11-09-common_ransomware_extensions.md | 2 +- docs/_posts/2020-11-09-common_ransomware_notes.md | 2 +- ...esses_used_for_system_network_configuration_discovery.md | 2 +- ...-12-08-system_processes_run_from_unexpected_locations.md | 2 +- docs/_posts/2020-12-15-o365_suspicious_rights_delegation.md | 2 +- docs/_posts/2020-12-16-o365_disable_mfa.md | 2 +- ...20-12-16-o365_excessive_authentication_failures_alert.md | 2 +- docs/_posts/2020-12-16-o365_pst_export_alert.md | 2 +- .../2020-12-16-o365_suspicious_admin_email_forwarding.md | 2 +- .../2020-12-16-o365_suspicious_user_email_forwarding.md | 2 +- ...t_users_creating_keys_with_encrypt_policy_without_mfa.md | 2 +- ...s_detect_users_with_kms_keys_performing_encryption_s3.md | 2 +- ...twork_access_control_list_created_with_all_open_ports.md | 2 +- .../2021-01-12-aws_network_access_control_list_deleted.md | 2 +- ...icious_powershell_process_with_obfuscation_techniques.md | 2 +- .../2021-01-20-detect_rundll32_inline_hta_execution.md | 2 +- docs/_posts/2021-01-20-suspicious_mshta_spawn.md | 2 +- ...-01-26-aws_saml_access_by_provider_user_and_principal.md | 2 +- docs/_posts/2021-01-26-aws_saml_update_identity_provider.md | 2 +- .../2021-01-26-o365_add_app_role_assignment_grant_user.md | 2 +- docs/_posts/2021-01-26-o365_added_service_principal.md | 2 +- docs/_posts/2021-01-26-o365_excessive_sso_logon_errors.md | 2 +- docs/_posts/2021-01-26-o365_new_federated_domain_added.md | 2 +- ...-detect_rundll32_application_control_bypass_-_advpack.md | 2 +- ...detect_rundll32_application_control_bypass_-_setupapi.md | 2 +- ...detect_rundll32_application_control_bypass_-_syssetup.md | 2 +- docs/_posts/2021-02-04-suspicious_rundll32_startw.md | 2 +- .../2021-02-09-suspicious_rundll32_dllregisterserver.md | 2 +- ...2-22-aws_create_policy_version_to_allow_all_resources.md | 2 +- docs/_posts/2021-03-01-any_powershell_downloadfile.md | 2 +- docs/_posts/2021-03-01-any_powershell_downloadstring.md | 2 +- docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md | 2 +- docs/_posts/2021-03-03-nishang_powershelltcponeline.md | 2 +- docs/_posts/2021-03-03-w3wp_spawning_shell.md | 4 ++-- ...3-certutil_download_with_urlcache_and_split_arguments.md | 2 +- ...-certutil_download_with_verifyctl_and_split_arguments.md | 2 +- docs/_posts/2021-03-23-certutil_with_decode_argument.md | 2 +- docs/_posts/2021-03-29-powershell_start-bitstransfer.md | 2 +- docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md | 2 +- docs/_posts/2021-03-31-disabling_firewall_with_netsh.md | 2 +- .../2021-04-01-aws_iam_assume_role_policy_brute_force.md | 2 +- docs/_posts/2021-04-01-aws_iam_delete_policy.md | 2 +- docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md | 2 +- docs/_posts/2021-04-12-excel_spawning_powershell.md | 2 +- docs/_posts/2021-04-12-winword_spawning_powershell.md | 2 +- docs/_posts/2021-04-13-aws_excessive_security_scanning.md | 2 +- .../2021-04-13-office_application_spawn_rundll32_process.md | 2 +- ...4-19-wermgr_process_spawned_cmd_or_powershell_process.md | 4 ++-- ...21-04-22-office_product_spawning_rundll32_with_no_dll.md | 2 +- docs/_posts/2021-04-26-office_product_spawning_certutil.md | 2 +- docs/_posts/2021-04-26-office_product_spawning_mshta.md | 2 +- docs/_posts/2021-05-04-deleting_of_net_users.md | 2 +- docs/_posts/2021-05-04-disabling_net_user_account.md | 2 +- docs/_posts/2021-05-04-excessive_service_stop_attempt.md | 2 +- docs/_posts/2021-05-04-process_kill_base_on_file_path.md | 2 +- docs/_posts/2021-05-06-excessive_usage_of_net_app.md | 2 +- docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md | 2 +- .../2021-05-19-allow_inbound_traffic_in_firewall_rule.md | 2 +- docs/_posts/2021-05-19-mailsniper_invoke_functions.md | 2 +- ...ershell_fileless_process_injection_via_getprocaddress.md | 2 +- ...shell_fileless_script_contains_base64_encoded_content.md | 2 +- ...09-detect_empire_with_powershell_script_block_logging.md | 2 +- ...-detect_mimikatz_with_powershell_script_block_logging.md | 2 +- docs/_posts/2021-06-09-unloading_amsi_via_reflection.md | 2 +- docs/_posts/2021-06-10-powershell_creating_thread_mutex.md | 2 +- docs/_posts/2021-06-10-powershell_domain_enumeration.md | 2 +- ...ing_dotnet_into_memory_via_system_reflection_assembly.md | 2 +- .../2021-06-10-powershell_processing_stream_of_data.md | 2 +- .../2021-06-10-powershell_using_memory_as_backing_store.md | 2 +- .../_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md | 2 +- docs/_posts/2021-06-10-recon_using_wmi_class.md | 2 +- .../2021-06-14-wmi_recon_running_process_or_services.md | 2 +- .../2021-06-22-powershell_enable_smb1protocol_feature.md | 2 +- ...021-06-23-allow_file_and_printing_sharing_in_firewall.md | 2 +- .../2021-06-23-allow_network_discovery_in_firewall.md | 2 +- docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md | 2 +- .../2021-07-05-powershell_disable_security_monitoring.md | 2 +- docs/_posts/2021-07-19-aws_createaccesskey.md | 2 +- docs/_posts/2021-07-19-aws_createloginprofile.md | 2 +- docs/_posts/2021-07-19-aws_updateloginprofile.md | 2 +- docs/_posts/2021-07-19-detect_new_open_s3_buckets.md | 2 +- .../2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md | 2 +- ...021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md | 4 ++-- docs/_posts/2021-07-19-o365_bypass_mfa_via_trusted_ip.md | 2 +- ...1-detect_copy_of_shadowcopy_with_script_block_logging.md | 2 +- .../_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md | 2 +- docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md | 2 +- docs/_posts/2021-08-10-powershell_execute_com_object.md | 2 +- .../2021-08-16-gsuite_drive_share_in_external_email.md | 2 +- .../2021-08-17-aws_ecr_container_scanning_findings_high.md | 2 +- ...container_scanning_findings_low_informational_unknown.md | 2 +- ...2021-08-17-aws_ecr_container_scanning_findings_medium.md | 2 +- docs/_posts/2021-08-18-esentutl_sam_copy.md | 2 +- ...08-19-aws_ecr_container_upload_outside_business_hours.md | 2 +- .../2021-08-19-aws_ecr_container_upload_unknown_user.md | 2 +- .../2021-08-23-getlocaluser_with_powershell_script_block.md | 2 +- ...etwmiobject_user_account_with_powershell_script_block.md | 2 +- .../_posts/2021-08-23-gsuite_suspicious_shared_file_name.md | 2 +- docs/_posts/2021-08-24-adsisearcher_account_discovery.md | 2 +- .../2021-08-24-domain_account_discovery_with_net_app.md | 2 +- ...21-08-24-get-domaintrust_with_powershell_script_block.md | 2 +- .../2021-08-24-get_aduser_with_powershell_script_block.md | 2 +- ...021-08-24-get_domainuser_with_powershell_script_block.md | 2 +- ...-24-getwmiobject_ds_user_with_powershell_script_block.md | 2 +- .../2021-08-25-domain_group_discovery_with_adsisearcher.md | 2 +- .../2021-08-25-elevated_group_discovery_with_powerview.md | 2 +- .../2021-08-25-getadgroup_with_powershell_script_block.md | 2 +- ...25-getwmiobject_ds_group_with_powershell_script_block.md | 2 +- ...aultdomainpasswordpolicy_with_powershell_script_block.md | 2 +- ...rresultantpasswordpolicy_with_powershell_script_block.md | 2 +- ...1-08-26-get_domainpolicy_with_powershell_script_block.md | 2 +- ...021-08-26-getdomaingroup_with_powershell_script_block.md | 2 +- .../_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md | 2 +- docs/_posts/2021-08-27-exchange_powershell_module_usage.md | 2 +- ...2021-09-01-getadcomputer_with_powershell_script_block.md | 2 +- ...getwmiobject_ds_computer_with_powershell_script_block.md | 2 +- .../2021-09-01-remote_system_discovery_with_adsisearcher.md | 2 +- ...21-09-02-get-foresttrust_with_powershell_script_block.md | 2 +- ...-09-02-getdomaincomputer_with_powershell_script_block.md | 2 +- ...9-02-getdomaincontroller_with_powershell_script_block.md | 2 +- docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md | 2 +- ...9-08-rundll32_control_rundll_world_writable_directory.md | 2 +- docs/_posts/2021-09-09-extraction_of_registry_hives.md | 2 +- ...9-10-getnettcpconnection_with_powershell_script_block.md | 2 +- ...21-09-13-getcurrent_user_with_powershell_script_block.md | 2 +- ...-user_discovery_with_env_vars_powershell_script_block.md | 2 +- docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md | 2 +- ...t_wmiobject_group_discovery_with_script_block_logging.md | 2 +- ...ll_get_localgroup_discovery_with_script_block_logging.md | 2 +- docs/_posts/2021-09-16-account_discovery_with_net_app.md | 2 +- ...1-09-16-attempt_to_add_certificate_to_untrusted_store.md | 2 +- ...6-attempted_credential_dump_from_registry_via_reg_exe.md | 2 +- ...9-16-creation_of_shadow_copy_with_wmic_and_powershell.md | 6 +++--- docs/_posts/2021-09-16-detect_html_help_renamed.md | 2 +- .../2021-09-16-detect_html_help_url_in_command_line.md | 2 +- ...9-16-detect_html_help_using_infotech_storage_handlers.md | 2 +- docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md | 2 +- docs/_posts/2021-09-16-detect_mshta_renamed.md | 2 +- docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md | 2 +- docs/_posts/2021-09-16-dump_lsass_via_procdump.md | 2 +- docs/_posts/2021-09-16-local_account_discovery_with_net.md | 2 +- docs/_posts/2021-09-16-local_account_discovery_with_wmic.md | 2 +- docs/_posts/2021-09-16-office_product_spawning_wmic.md | 2 +- docs/_posts/2021-09-16-processes_launching_netsh.md | 2 +- ...1-09-20-detect_regsvcs_with_no_command_line_arguments.md | 2 +- ...21-09-20-suspicious_dllhost_no_command_line_arguments.md | 2 +- ...1-09-20-suspicious_gpupdate_no_command_line_arguments.md | 2 +- ...1-09-20-suspicious_rundll32_no_command_line_arguments.md | 2 +- docs/_posts/2021-09-29-verclsid_clsid_execution.md | 2 +- docs/_posts/2021-10-05-rundll32_shimcache_flush.md | 2 +- docs/_posts/2021-10-05-suspicious_copy_on_system32.md | 2 +- ...-rundll32_with_no_command_line_arguments_with_network.md | 2 +- ...10-14-serviceprincipalnames_discovery_with_powershell.md | 2 +- ...021-10-14-serviceprincipalnames_discovery_with_setspn.md | 2 +- .../2021-10-19-windows_curl_download_to_suspicious_path.md | 2 +- .../2021-11-10-windows_curl_upload_to_remote_destination.md | 2 +- docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md | 2 +- .../2021-11-12-aws_iam_accessdenied_discovery_events.md | 2 +- .../2021-11-12-remote_process_instantiation_via_wmi.md | 2 +- ...-remote_process_instantiation_via_dcom_and_powershell.md | 2 +- ...ss_instantiation_via_dcom_and_powershell_script_block.md | 2 +- ...5-remote_process_instantiation_via_wmi_and_powershell.md | 2 +- ...ess_instantiation_via_wmi_and_powershell_script_block.md | 2 +- ...remote_process_instantiation_via_winrm_and_powershell.md | 2 +- ...s_instantiation_via_winrm_and_powershell_script_block.md | 2 +- ...-11-25-powershell_windows_defender_exclusion_commands.md | 2 +- docs/_posts/2021-11-29-detect_rclone_command-line_usage.md | 2 +- docs/_posts/2021-12-13-linux_java_spawning_shell.md | 2 +- docs/_posts/2021-12-13-windows_java_spawning_shells.md | 2 +- ...2-powershell_-_connect_to_internet_with_hidden_window.md | 2 +- ...-01-18-malicious_powershell_process_-_encoded_command.md | 2 +- docs/_posts/2022-01-20-ping_sleep_batch_command.md | 2 +- ...22-01-20-powershell_remove_windows_defender_directory.md | 2 +- docs/index.markdown | 2 +- 193 files changed, 198 insertions(+), 198 deletions(-) diff --git a/bin/jinja2_templates/doc_index.j2 b/bin/jinja2_templates/doc_index.j2 index b2b43484e9..bc85d72595 100644 --- a/bin/jinja2_templates/doc_index.j2 +++ b/bin/jinja2_templates/doc_index.j2 @@ -39,7 +39,7 @@ feature_row: # Welcome to Splunk Security Content -This project gives you access to our repository of Analytic Stories that are security guides which provide background on TTPs, mapped to the MITRE framework, the Lockheed Martin Kill Chain, and CIS controls. They include Splunk searches, machine-learning algorithms, and Splunk Phantom playbooks (where available)—all designed to work together to detect, investigate, and respond to threats. +This project gives you access to our repository of Analytic Stories that are security guides which provide background on TTPs, mapped to the MITRE framework, the Lockheed Martin Kill Chain, and CIS controls. They include Splunk searches, machine-learning algorithms, and Splunk SOAR playbooks (where available)—all designed to work together to detect, investigate, and respond to threats. [Try in Splunk Security Cloud](https://www.splunk.com/en_us/cyber-security.html){: .btn .btn--success} diff --git a/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md b/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md index 9c8bb48b5e..df5be71e28 100644 --- a/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md +++ b/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md @@ -59,8 +59,8 @@ This search looks at S3 bucket-access logs and detects new or previously unseen #### Macros The SPL above uses the following Macros: -* [aws_s3_accesslogs](https://github.com/splunk/security_content/blob/develop/macros/aws_s3_accesslogs.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [aws_s3_accesslogs](https://github.com/splunk/security_content/blob/develop/macros/aws_s3_accesslogs.yml) Note that `detect_s3_access_from_a_new_ip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md b/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md index 9036fdc4ca..19d4057454 100644 --- a/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md +++ b/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md @@ -54,8 +54,8 @@ This search looks for the creation of WMI permanent event subscriptions. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wmi_permanent_event_subscription_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md b/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md index c03fdffb58..87adcb75de 100644 --- a/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md +++ b/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md @@ -53,8 +53,8 @@ This search looks for the creation of WMI temporary event subscriptions. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wmi_temporary_event_subscription_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-03-remote_wmi_command_attempt.md b/docs/_posts/2018-12-03-remote_wmi_command_attempt.md index 2711c3f886..928a037227 100644 --- a/docs/_posts/2018-12-03-remote_wmi_command_attempt.md +++ b/docs/_posts/2018-12-03-remote_wmi_command_attempt.md @@ -50,9 +50,9 @@ The following analytic identifies usage of `wmic.exe` spawning a local or remote #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `remote_wmi_command_attempt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md b/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md index 5e5272d2a1..90b383e6dd 100644 --- a/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md +++ b/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md @@ -54,9 +54,9 @@ Detect the usage of comsvcs.dll for dumping the lsass process. #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `dump_lsass_via_comsvcs_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-detect_rare_executables.md b/docs/_posts/2020-03-16-detect_rare_executables.md index bf99f3d01c..6852682986 100644 --- a/docs/_posts/2020-03-16-detect_rare_executables.md +++ b/docs/_posts/2020-03-16-detect_rare_executables.md @@ -50,9 +50,9 @@ This search will return a table of rare processes, the names of the systems runn #### Macros The SPL above uses the following Macros: +* [filter_rare_process_allow_list](https://github.com/splunk/security_content/blob/develop/macros/filter_rare_process_allow_list.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [filter_rare_process_allow_list](https://github.com/splunk/security_content/blob/develop/macros/filter_rare_process_allow_list.yml) Note that `detect_rare_executables_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-04-15-amazon_eks_kubernetes_cluster_scan_detection.md b/docs/_posts/2020-04-15-amazon_eks_kubernetes_cluster_scan_detection.md index 2689915ab5..7e176a34d8 100644 --- a/docs/_posts/2020-04-15-amazon_eks_kubernetes_cluster_scan_detection.md +++ b/docs/_posts/2020-04-15-amazon_eks_kubernetes_cluster_scan_detection.md @@ -51,8 +51,8 @@ This search provides information of unauthenticated requests via user agent, and #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [aws_cloudwatchlogs_eks](https://github.com/splunk/security_content/blob/develop/macros/aws_cloudwatchlogs_eks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `amazon_eks_kubernetes_cluster_scan_detection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-04-15-amazon_eks_kubernetes_pod_scan_detection.md b/docs/_posts/2020-04-15-amazon_eks_kubernetes_pod_scan_detection.md index 8ebf99391c..e46ba8b2ff 100644 --- a/docs/_posts/2020-04-15-amazon_eks_kubernetes_pod_scan_detection.md +++ b/docs/_posts/2020-04-15-amazon_eks_kubernetes_pod_scan_detection.md @@ -51,8 +51,8 @@ This search provides detection information on unauthenticated requests against K #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [aws_cloudwatchlogs_eks](https://github.com/splunk/security_content/blob/develop/macros/aws_cloudwatchlogs_eks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `amazon_eks_kubernetes_pod_scan_detection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md b/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md index d96b377bf2..12266afdf0 100644 --- a/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md +++ b/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md @@ -54,8 +54,8 @@ This search looks for child processes spawned by zoom.exe or zoom.us that has no #### Macros The SPL above uses the following Macros: -* [previously_seen_zoom_child_processes_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_zoom_child_processes_window.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [previously_seen_zoom_child_processes_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_zoom_child_processes_window.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `first_time_seen_child_process_of_zoom_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-attempt_to_stop_security_service.md b/docs/_posts/2020-07-21-attempt_to_stop_security_service.md index d402c4f1de..2315a8604d 100644 --- a/docs/_posts/2020-07-21-attempt_to_stop_security_service.md +++ b/docs/_posts/2020-07-21-attempt_to_stop_security_service.md @@ -56,9 +56,9 @@ This search looks for attempts to stop security-related services on the endpoint #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `attempt_to_stop_security_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md b/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md index dd52674079..2288ee611e 100644 --- a/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md +++ b/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md @@ -54,9 +54,9 @@ This search looks for PowerShell processes started with parameters used to bypas #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `malicious_powershell_process_-_execution_policy_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md b/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md index f110972f9f..b9ef99ed0e 100644 --- a/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md +++ b/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md @@ -57,9 +57,9 @@ This search looks for emails that have attachments with suspicious file extensio #### Macros The SPL above uses the following Macros: +* [suspicious_email_attachments](https://github.com/splunk/security_content/blob/develop/macros/suspicious_email_attachments.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [suspicious_email_attachments](https://github.com/splunk/security_content/blob/develop/macros/suspicious_email_attachments.yml) Note that `suspicious_email_attachment_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-08-11-detect_arp_poisoning.md b/docs/_posts/2020-08-11-detect_arp_poisoning.md index 13f3986a68..c152a08958 100644 --- a/docs/_posts/2020-08-11-detect_arp_poisoning.md +++ b/docs/_posts/2020-08-11-detect_arp_poisoning.md @@ -65,8 +65,8 @@ By enabling Dynamic ARP Inspection as a Layer 2 Security measure on the organiza #### Macros The SPL above uses the following Macros: -* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) Note that `detect_arp_poisoning_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md b/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md index 5980c9d30a..2ce6c3943d 100644 --- a/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md +++ b/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md @@ -59,8 +59,8 @@ By enabling DHCP Snooping as a Layer 2 Security measure on the organization' #### Macros The SPL above uses the following Macros: -* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) Note that `detect_rogue_dhcp_server_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md b/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md index 80476d702e..ef7c149c69 100644 --- a/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md +++ b/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md @@ -55,9 +55,9 @@ This search looks for the creation or deletion of hidden shares using net.exe. #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `create_or_delete_windows_shares_using_net_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md b/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md index 30d8285d5b..082b964421 100644 --- a/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md +++ b/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md @@ -67,8 +67,8 @@ By enabling IPv6 First Hop Security as a Layer 2 Security measure on the organiz #### Macros The SPL above uses the following Macros: -* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) Note that `detect_ipv6_network_infrastructure_threats_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_port_security_violation.md b/docs/_posts/2020-10-28-detect_port_security_violation.md index ded6fc83e1..c50ad696fe 100644 --- a/docs/_posts/2020-10-28-detect_port_security_violation.md +++ b/docs/_posts/2020-10-28-detect_port_security_violation.md @@ -65,8 +65,8 @@ By enabling Port Security on a Cisco switch you can restrict input to an interfa #### Macros The SPL above uses the following Macros: -* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) Note that `detect_port_security_violation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_traffic_mirroring.md b/docs/_posts/2020-10-28-detect_traffic_mirroring.md index 003ac70ed5..1b648d977a 100644 --- a/docs/_posts/2020-10-28-detect_traffic_mirroring.md +++ b/docs/_posts/2020-10-28-detect_traffic_mirroring.md @@ -62,8 +62,8 @@ Adversaries may leverage traffic mirroring in order to automate data exfiltratio #### Macros The SPL above uses the following Macros: -* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) Note that `detect_traffic_mirroring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-common_ransomware_extensions.md b/docs/_posts/2020-11-09-common_ransomware_extensions.md index f37adcf073..a39a399a83 100644 --- a/docs/_posts/2020-11-09-common_ransomware_extensions.md +++ b/docs/_posts/2020-11-09-common_ransomware_extensions.md @@ -52,8 +52,8 @@ The search looks for file modifications with extensions commonly used by Ransomw #### Macros The SPL above uses the following Macros: -* [ransomware_extensions](https://github.com/splunk/security_content/blob/develop/macros/ransomware_extensions.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [ransomware_extensions](https://github.com/splunk/security_content/blob/develop/macros/ransomware_extensions.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `common_ransomware_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-common_ransomware_notes.md b/docs/_posts/2020-11-09-common_ransomware_notes.md index 7b27a062c3..49fa8ac17f 100644 --- a/docs/_posts/2020-11-09-common_ransomware_notes.md +++ b/docs/_posts/2020-11-09-common_ransomware_notes.md @@ -51,9 +51,9 @@ The search looks for files created with names matching those typically used in r #### Macros The SPL above uses the following Macros: +* [ransomware_notes](https://github.com/splunk/security_content/blob/develop/macros/ransomware_notes.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [ransomware_notes](https://github.com/splunk/security_content/blob/develop/macros/ransomware_notes.yml) Note that `common_ransomware_notes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md b/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md index d571cac08a..5b7b5cb1a8 100644 --- a/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md +++ b/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md @@ -55,8 +55,8 @@ This search looks for fast execution of processes used for system network config #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [system_network_configuration_discovery_tools](https://github.com/splunk/security_content/blob/develop/macros/system_network_configuration_discovery_tools.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_processes_used_for_system_network_configuration_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md b/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md index 9e93a6af79..3d15bee34a 100644 --- a/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md +++ b/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md @@ -57,8 +57,8 @@ During triage, review the parallel processes - what process moved the native Win #### Macros The SPL above uses the following Macros: -* [is_windows_system_file](https://github.com/splunk/security_content/blob/develop/macros/is_windows_system_file.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [is_windows_system_file](https://github.com/splunk/security_content/blob/develop/macros/is_windows_system_file.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `system_processes_run_from_unexpected_locations_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-15-o365_suspicious_rights_delegation.md b/docs/_posts/2020-12-15-o365_suspicious_rights_delegation.md index f9608ba934..e143f9fb30 100644 --- a/docs/_posts/2020-12-15-o365_suspicious_rights_delegation.md +++ b/docs/_posts/2020-12-15-o365_suspicious_rights_delegation.md @@ -56,8 +56,8 @@ This search detects the assignment of rights to accesss content from another mai #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_suspicious_rights_delegation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-16-o365_disable_mfa.md b/docs/_posts/2020-12-16-o365_disable_mfa.md index 60a1af64b8..5c0fda596f 100644 --- a/docs/_posts/2020-12-16-o365_disable_mfa.md +++ b/docs/_posts/2020-12-16-o365_disable_mfa.md @@ -51,8 +51,8 @@ This search detects when multi factor authentication has been disabled, what ent #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_disable_mfa_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-16-o365_excessive_authentication_failures_alert.md b/docs/_posts/2020-12-16-o365_excessive_authentication_failures_alert.md index e5a25ac9aa..594a99ea9c 100644 --- a/docs/_posts/2020-12-16-o365_excessive_authentication_failures_alert.md +++ b/docs/_posts/2020-12-16-o365_excessive_authentication_failures_alert.md @@ -50,8 +50,8 @@ This search detects when an excessive number of authentication failures occur th #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_excessive_authentication_failures_alert_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-16-o365_pst_export_alert.md b/docs/_posts/2020-12-16-o365_pst_export_alert.md index 98a35f359f..875631c122 100644 --- a/docs/_posts/2020-12-16-o365_pst_export_alert.md +++ b/docs/_posts/2020-12-16-o365_pst_export_alert.md @@ -49,8 +49,8 @@ This search detects when a user has performed an Ediscovery search or exported a #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_pst_export_alert_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-16-o365_suspicious_admin_email_forwarding.md b/docs/_posts/2020-12-16-o365_suspicious_admin_email_forwarding.md index adc16353f7..415dbd7377 100644 --- a/docs/_posts/2020-12-16-o365_suspicious_admin_email_forwarding.md +++ b/docs/_posts/2020-12-16-o365_suspicious_admin_email_forwarding.md @@ -57,8 +57,8 @@ This search detects when an admin configured a forwarding rule for multiple mail #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_suspicious_admin_email_forwarding_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-16-o365_suspicious_user_email_forwarding.md b/docs/_posts/2020-12-16-o365_suspicious_user_email_forwarding.md index 8a85b518f7..13a1a36240 100644 --- a/docs/_posts/2020-12-16-o365_suspicious_user_email_forwarding.md +++ b/docs/_posts/2020-12-16-o365_suspicious_user_email_forwarding.md @@ -57,8 +57,8 @@ This search detects when multiple user configured a forwarding rule to the same #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_suspicious_user_email_forwarding_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md b/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md index e6a6c7a038..b44cc439fd 100644 --- a/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md +++ b/docs/_posts/2021-01-11-aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.md @@ -56,8 +56,8 @@ This search provides detection of KMS keys where action kms:Encrypt is accessibl #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_detect_users_creating_keys_with_encrypt_policy_without_mfa_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md b/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md index 8454f69e07..3fb4142bd9 100644 --- a/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md +++ b/docs/_posts/2021-01-11-aws_detect_users_with_kms_keys_performing_encryption_s3.md @@ -50,8 +50,8 @@ This search provides detection of users with KMS keys performing encryption spec #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_detect_users_with_kms_keys_performing_encryption_s3_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md b/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md index 4237df15e1..08ed898c0d 100644 --- a/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md +++ b/docs/_posts/2021-01-11-aws_network_access_control_list_created_with_all_open_ports.md @@ -57,8 +57,8 @@ The search looks for AWS CloudTrail events to detect if any network ACLs were cr #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_network_access_control_list_created_with_all_open_ports_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md b/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md index 14ee9b2b1c..3b76728ac7 100644 --- a/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md +++ b/docs/_posts/2021-01-12-aws_network_access_control_list_deleted.md @@ -54,8 +54,8 @@ Enforcing network-access controls is one of the defensive mechanisms used by clo #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_network_access_control_list_deleted_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md b/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md index 641c534fb8..65e7f491f9 100644 --- a/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md +++ b/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md @@ -56,9 +56,9 @@ This search looks for PowerShell processes launched with arguments that have cha #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `malicious_powershell_process_with_obfuscation_techniques_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md b/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md index b752d2c46a..1e4f03629d 100644 --- a/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md +++ b/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md @@ -54,9 +54,9 @@ The following analytic identifies "rundll32.exe" execution with inline p #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_inline_hta_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-20-suspicious_mshta_spawn.md b/docs/_posts/2021-01-20-suspicious_mshta_spawn.md index a793577eb9..b3e0bfb909 100644 --- a/docs/_posts/2021-01-20-suspicious_mshta_spawn.md +++ b/docs/_posts/2021-01-20-suspicious_mshta_spawn.md @@ -55,8 +55,8 @@ The following analytic identifies wmiprvse.exe spawning mshta.exe. This behavior #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_mshta_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md b/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md index 7342d61b19..d593083511 100644 --- a/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md +++ b/docs/_posts/2021-01-26-aws_saml_access_by_provider_user_and_principal.md @@ -52,8 +52,8 @@ This search provides specific SAML access from specific Service Provider, user a #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_saml_access_by_provider_user_and_principal_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md b/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md index 4c4d4ab5eb..10f1bba1a2 100644 --- a/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md +++ b/docs/_posts/2021-01-26-aws_saml_update_identity_provider.md @@ -52,8 +52,8 @@ This search provides detection of updates to SAML provider in AWS. Updates to SA #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_saml_update_identity_provider_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-o365_add_app_role_assignment_grant_user.md b/docs/_posts/2021-01-26-o365_add_app_role_assignment_grant_user.md index d5457b1a9d..082a842ca9 100644 --- a/docs/_posts/2021-01-26-o365_add_app_role_assignment_grant_user.md +++ b/docs/_posts/2021-01-26-o365_add_app_role_assignment_grant_user.md @@ -53,8 +53,8 @@ This search detects the creation of a new Federation setting by alerting about a #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_add_app_role_assignment_grant_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-o365_added_service_principal.md b/docs/_posts/2021-01-26-o365_added_service_principal.md index 69fe81bfd4..c41e86e168 100644 --- a/docs/_posts/2021-01-26-o365_added_service_principal.md +++ b/docs/_posts/2021-01-26-o365_added_service_principal.md @@ -53,8 +53,8 @@ This search detects the creation of a new Federation setting by alerting about a #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_added_service_principal_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-o365_excessive_sso_logon_errors.md b/docs/_posts/2021-01-26-o365_excessive_sso_logon_errors.md index a1814aef2a..6012bca0bf 100644 --- a/docs/_posts/2021-01-26-o365_excessive_sso_logon_errors.md +++ b/docs/_posts/2021-01-26-o365_excessive_sso_logon_errors.md @@ -52,8 +52,8 @@ This search detects accounts with high number of Single Sign ON (SSO) logon erro #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_excessive_sso_logon_errors_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-o365_new_federated_domain_added.md b/docs/_posts/2021-01-26-o365_new_federated_domain_added.md index dc6c13308b..ec2fb1c400 100644 --- a/docs/_posts/2021-01-26-o365_new_federated_domain_added.md +++ b/docs/_posts/2021-01-26-o365_new_federated_domain_added.md @@ -53,8 +53,8 @@ This search detects the addition of a new Federated domain. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_new_federated_domain_added_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md index 53d47e5941..2507cf4991 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe loading advpack.dll and ieadvpack #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_application_control_bypass_-_advpack_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md index 33c451c239..e2ed0e1c84 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe loading setupapi.dll and iesetupa #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_application_control_bypass_-_setupapi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md index 19ef049cb3..56669a3be7 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe loading syssetup.dll by calling t #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `detect_rundll32_application_control_bypass_-_syssetup_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-suspicious_rundll32_startw.md b/docs/_posts/2021-02-04-suspicious_rundll32_startw.md index 8b0c6d3ad9..8a3469734c 100644 --- a/docs/_posts/2021-02-04-suspicious_rundll32_startw.md +++ b/docs/_posts/2021-02-04-suspicious_rundll32_startw.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe executing a DLL function name, St #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_startw_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md b/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md index 6128640c39..5f4a7f9ac3 100644 --- a/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md +++ b/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md @@ -54,9 +54,9 @@ The following analytic identifies rundll32.exe using dllregisterserver on the co #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_dllregisterserver_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md b/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md index 78440dde0c..07770aad57 100644 --- a/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md +++ b/docs/_posts/2021-02-22-aws_create_policy_version_to_allow_all_resources.md @@ -63,8 +63,8 @@ This search looks for AWS CloudTrail events where a user created a policy versio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_create_policy_version_to_allow_all_resources_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-any_powershell_downloadfile.md b/docs/_posts/2021-03-01-any_powershell_downloadfile.md index 887e9f3479..c3a0cde376 100644 --- a/docs/_posts/2021-03-01-any_powershell_downloadfile.md +++ b/docs/_posts/2021-03-01-any_powershell_downloadfile.md @@ -55,9 +55,9 @@ The following analytic identifies the use of PowerShell downloading a file using #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `any_powershell_downloadfile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-any_powershell_downloadstring.md b/docs/_posts/2021-03-01-any_powershell_downloadstring.md index b58b2015c1..c4419f2fd8 100644 --- a/docs/_posts/2021-03-01-any_powershell_downloadstring.md +++ b/docs/_posts/2021-03-01-any_powershell_downloadstring.md @@ -54,9 +54,9 @@ The following analytic identifies the use of PowerShell downloading a file using #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `any_powershell_downloadstring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md b/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md index 65479dc66e..68da1286d8 100644 --- a/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md +++ b/docs/_posts/2021-03-02-aws_setdefaultpolicyversion.md @@ -59,8 +59,8 @@ This search looks for AWS CloudTrail events where a user has set a default polic #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_setdefaultpolicyversion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-03-nishang_powershelltcponeline.md b/docs/_posts/2021-03-03-nishang_powershelltcponeline.md index bc0cd01551..523f5cb6ab 100644 --- a/docs/_posts/2021-03-03-nishang_powershelltcponeline.md +++ b/docs/_posts/2021-03-03-nishang_powershelltcponeline.md @@ -54,9 +54,9 @@ This query detects the Nishang Invoke-PowerShellTCPOneLine utility that spawns a #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `nishang_powershelltcponeline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-03-w3wp_spawning_shell.md b/docs/_posts/2021-03-03-w3wp_spawning_shell.md index d45478d5ea..9eeb9a6c02 100644 --- a/docs/_posts/2021-03-03-w3wp_spawning_shell.md +++ b/docs/_posts/2021-03-03-w3wp_spawning_shell.md @@ -57,9 +57,9 @@ This query identifies a shell, PowerShell.exe or Cmd.exe, spawning from W3WP.exe #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `w3wp_spawning_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md b/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md index fd32005d74..6dd8618f6a 100644 --- a/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md +++ b/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md @@ -50,8 +50,8 @@ Certutil.exe may download a file from a remote destination using `-urlcache`. Th #### Macros The SPL above uses the following Macros: -* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_download_with_urlcache_and_split_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md b/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md index 4831b4b1b7..1f83db873f 100644 --- a/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md +++ b/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md @@ -50,8 +50,8 @@ Certutil.exe may download a file from a remote destination using `-VerifyCtl`. T #### Macros The SPL above uses the following Macros: -* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_download_with_verifyctl_and_split_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_with_decode_argument.md b/docs/_posts/2021-03-23-certutil_with_decode_argument.md index b1515c1a7f..9e98b293f7 100644 --- a/docs/_posts/2021-03-23-certutil_with_decode_argument.md +++ b/docs/_posts/2021-03-23-certutil_with_decode_argument.md @@ -50,8 +50,8 @@ CertUtil.exe may be used to `encode` and `decode` a file, including PE and scrip #### Macros The SPL above uses the following Macros: -* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `certutil_with_decode_argument_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-29-powershell_start-bitstransfer.md b/docs/_posts/2021-03-29-powershell_start-bitstransfer.md index 389fc3d450..3e4ce5253c 100644 --- a/docs/_posts/2021-03-29-powershell_start-bitstransfer.md +++ b/docs/_posts/2021-03-29-powershell_start-bitstransfer.md @@ -51,9 +51,9 @@ Start-BitsTransfer is the PowerShell "version" of BitsAdmin.exe. Similar #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `powershell_start-bitstransfer_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md b/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md index 9e334bb056..9ac197ab0f 100644 --- a/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md +++ b/docs/_posts/2021-03-31-aws_iam_successful_group_deletion.md @@ -57,8 +57,8 @@ The following query uses IAM events to track the success of a group being delete #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_iam_successful_group_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md b/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md index 287c1408bc..2ec0827faa 100644 --- a/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md +++ b/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md @@ -54,8 +54,8 @@ This search is to identifies suspicious firewall disabling using netsh applicati #### Macros The SPL above uses the following Macros: -* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `disabling_firewall_with_netsh_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md b/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md index 08b0383944..1ff8f647af 100644 --- a/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md +++ b/docs/_posts/2021-04-01-aws_iam_assume_role_policy_brute_force.md @@ -54,8 +54,8 @@ The following detection identifies any malformed policy document exceptions with #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_iam_assume_role_policy_brute_force_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-01-aws_iam_delete_policy.md b/docs/_posts/2021-04-01-aws_iam_delete_policy.md index 16cedcea92..969d7f2d51 100644 --- a/docs/_posts/2021-04-01-aws_iam_delete_policy.md +++ b/docs/_posts/2021-04-01-aws_iam_delete_policy.md @@ -49,8 +49,8 @@ The following detection identifes when a policy is deleted on AWS. This does not #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_iam_delete_policy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md b/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md index 2761e4400a..6cbe48ecc4 100644 --- a/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md +++ b/docs/_posts/2021-04-01-aws_iam_failure_group_deletion.md @@ -49,8 +49,8 @@ This detection identifies failure attempts to delete groups. We want to identify #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_iam_failure_group_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-excel_spawning_powershell.md b/docs/_posts/2021-04-12-excel_spawning_powershell.md index 9f2a854748..7e464a8864 100644 --- a/docs/_posts/2021-04-12-excel_spawning_powershell.md +++ b/docs/_posts/2021-04-12-excel_spawning_powershell.md @@ -54,9 +54,9 @@ The following detection identifies Microsoft Excel spawning PowerShell. Typicall #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `excel_spawning_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winword_spawning_powershell.md b/docs/_posts/2021-04-12-winword_spawning_powershell.md index 20d4bbfd84..a0ca6c5e93 100644 --- a/docs/_posts/2021-04-12-winword_spawning_powershell.md +++ b/docs/_posts/2021-04-12-winword_spawning_powershell.md @@ -54,9 +54,9 @@ The following detection identifies Microsoft Word spawning PowerShell. Typically #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `winword_spawning_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-13-aws_excessive_security_scanning.md b/docs/_posts/2021-04-13-aws_excessive_security_scanning.md index 6151d147c5..2beebb149d 100644 --- a/docs/_posts/2021-04-13-aws_excessive_security_scanning.md +++ b/docs/_posts/2021-04-13-aws_excessive_security_scanning.md @@ -50,8 +50,8 @@ This search looks for AWS CloudTrail events and analyse the amount of eventNames #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_excessive_security_scanning_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md b/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md index ce9e2452f7..78b5885963 100644 --- a/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md +++ b/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md @@ -54,9 +54,9 @@ this detection was designed to identifies suspicious spawned process of known MS #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `office_application_spawn_rundll32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md b/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md index 3884e662bf..0c1764a2fd 100644 --- a/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md +++ b/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md @@ -50,9 +50,9 @@ This search is designed to detect suspicious cmd and powershell process spawned #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) Note that `wermgr_process_spawned_cmd_or_powershell_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md b/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md index 855753924d..4e66bf750e 100644 --- a/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md +++ b/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by IcedID malwar #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `office_product_spawning_rundll32_with_no_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_certutil.md b/docs/_posts/2021-04-26-office_product_spawning_certutil.md index 13e98e6382..da9c4a3e27 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_certutil.md +++ b/docs/_posts/2021-04-26-office_product_spawning_certutil.md @@ -54,8 +54,8 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `office_product_spawning_certutil_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_mshta.md b/docs/_posts/2021-04-26-office_product_spawning_mshta.md index 85de955168..caa17a1d71 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_mshta.md +++ b/docs/_posts/2021-04-26-office_product_spawning_mshta.md @@ -55,8 +55,8 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `office_product_spawning_mshta_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-deleting_of_net_users.md b/docs/_posts/2021-05-04-deleting_of_net_users.md index 3e6c825297..bfc03f22fc 100644 --- a/docs/_posts/2021-05-04-deleting_of_net_users.md +++ b/docs/_posts/2021-05-04-deleting_of_net_users.md @@ -50,9 +50,9 @@ This analytic will detect a suspicious net.exe/net1.exe command-line to delete a #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `deleting_of_net_users_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-disabling_net_user_account.md b/docs/_posts/2021-05-04-disabling_net_user_account.md index 6af1adbbd3..ee5f7ab86e 100644 --- a/docs/_posts/2021-05-04-disabling_net_user_account.md +++ b/docs/_posts/2021-05-04-disabling_net_user_account.md @@ -50,9 +50,9 @@ This analytic will identify a suspicious command-line that disables a user accou #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `disabling_net_user_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_service_stop_attempt.md b/docs/_posts/2021-05-04-excessive_service_stop_attempt.md index 932219c7e8..a83b9ba150 100644 --- a/docs/_posts/2021-05-04-excessive_service_stop_attempt.md +++ b/docs/_posts/2021-05-04-excessive_service_stop_attempt.md @@ -51,9 +51,9 @@ This analytic identifies suspicious series of attempt to kill multiple services #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `excessive_service_stop_attempt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-process_kill_base_on_file_path.md b/docs/_posts/2021-05-04-process_kill_base_on_file_path.md index 617f980aaa..d67de7122b 100644 --- a/docs/_posts/2021-05-04-process_kill_base_on_file_path.md +++ b/docs/_posts/2021-05-04-process_kill_base_on_file_path.md @@ -54,9 +54,9 @@ The following analytic identifies the use of `wmic.exe` using `delete` to remove #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `process_kill_base_on_file_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-excessive_usage_of_net_app.md b/docs/_posts/2021-05-06-excessive_usage_of_net_app.md index 8c366d5704..52bab9ea22 100644 --- a/docs/_posts/2021-05-06-excessive_usage_of_net_app.md +++ b/docs/_posts/2021-05-06-excessive_usage_of_net_app.md @@ -51,9 +51,9 @@ This analytic identifies excessive usage of `net.exe` or `net1.exe` within a buc #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `excessive_usage_of_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md b/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md index 120dd18e99..4c9c7f901a 100644 --- a/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md +++ b/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md @@ -49,8 +49,8 @@ This following analytic detects PowerShell command to delete shadow copy using t #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `delete_shadowcopy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md b/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md index 3814f8801e..3f8aae565a 100644 --- a/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md +++ b/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md @@ -53,8 +53,8 @@ The following analytic identifies suspicious PowerShell command to allow inbound #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `allow_inbound_traffic_in_firewall_rule_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-19-mailsniper_invoke_functions.md b/docs/_posts/2021-05-19-mailsniper_invoke_functions.md index 48e19ebeff..180c4e1799 100644 --- a/docs/_posts/2021-05-19-mailsniper_invoke_functions.md +++ b/docs/_posts/2021-05-19-mailsniper_invoke_functions.md @@ -53,8 +53,8 @@ This search is to detect known mailsniper.ps1 functions executed in a machine. T #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `mailsniper_invoke_functions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md b/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md index 04797c98f2..ff238c60f4 100644 --- a/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md +++ b/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md @@ -60,8 +60,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_fileless_process_injection_via_getprocaddress_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md b/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md index 1f05be61d4..7841139e5b 100644 --- a/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md +++ b/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md @@ -59,8 +59,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_fileless_script_contains_base64_encoded_content_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md b/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md index 5fafc0211a..358b89b2a5 100644 --- a/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md +++ b/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `detect_empire_with_powershell_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md b/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md index 168d8c2853..69cfc4803d 100644 --- a/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md +++ b/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `detect_mimikatz_with_powershell_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md b/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md index 00fa349249..eb23e928c6 100644 --- a/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md +++ b/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `unloading_amsi_via_reflection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md b/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md index e1a0455655..d01602857f 100644 --- a/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md +++ b/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md @@ -52,8 +52,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_creating_thread_mutex_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_domain_enumeration.md b/docs/_posts/2021-06-10-powershell_domain_enumeration.md index f52224f48d..968b159011 100644 --- a/docs/_posts/2021-06-10-powershell_domain_enumeration.md +++ b/docs/_posts/2021-06-10-powershell_domain_enumeration.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_domain_enumeration_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md b/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md index 3f6f5036f6..3c171336f9 100644 --- a/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md +++ b/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_loading_dotnet_into_memory_via_system_reflection_assembly_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md b/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md index 31ed3737ec..b6fbc80fd8 100644 --- a/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md +++ b/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md @@ -52,8 +52,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_processing_stream_of_data_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md b/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md index 8efd18241c..80e8134f32 100644 --- a/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md +++ b/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_using_memory_as_backing_store_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md b/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md index f63ec51be1..eee1e001cd 100644 --- a/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md +++ b/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `recon_avproduct_through_pwh_or_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-recon_using_wmi_class.md b/docs/_posts/2021-06-10-recon_using_wmi_class.md index d0db06d31a..092b3c2782 100644 --- a/docs/_posts/2021-06-10-recon_using_wmi_class.md +++ b/docs/_posts/2021-06-10-recon_using_wmi_class.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell via EventCode 4104, wher #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `recon_using_wmi_class_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md b/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md index b811f1695f..f7fe8ed949 100644 --- a/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md +++ b/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `wmi_recon_running_process_or_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md b/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md index 6f53fd32e8..52b9f539ac 100644 --- a/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md +++ b/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md @@ -53,8 +53,8 @@ This search is to detect a suspicious enabling of smb1protocol through "powe #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_enable_smb1protocol_feature_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md b/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md index 762df4ba39..133bddbefc 100644 --- a/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md +++ b/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md @@ -54,8 +54,8 @@ This search is to detect a suspicious modification of firewall to allow file and #### Macros The SPL above uses the following Macros: -* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `allow_file_and_printing_sharing_in_firewall_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md b/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md index d9f541dcea..9c9d5abed6 100644 --- a/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md +++ b/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md @@ -54,8 +54,8 @@ This search is to detect a suspicious modification to the firewall to allow netw #### Macros The SPL above uses the following Macros: -* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `allow_network_discovery_in_firewall_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md b/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md index 3072d6e847..d423992a6b 100644 --- a/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md +++ b/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md @@ -57,9 +57,9 @@ The following analytic identifies a suspicious child process, `rundll32.exe`, wi #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `spoolsv_spawning_rundll32_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md b/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md index 07662b72a4..707e57314e 100644 --- a/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md +++ b/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md @@ -54,9 +54,9 @@ This search is to identifies a modification in registry to disable the windows d #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `powershell_disable_security_monitoring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-aws_createaccesskey.md b/docs/_posts/2021-07-19-aws_createaccesskey.md index c7d99e717b..56322df085 100644 --- a/docs/_posts/2021-07-19-aws_createaccesskey.md +++ b/docs/_posts/2021-07-19-aws_createaccesskey.md @@ -54,8 +54,8 @@ This search looks for AWS CloudTrail events where a user A who has already permi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_createaccesskey_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-aws_createloginprofile.md b/docs/_posts/2021-07-19-aws_createloginprofile.md index ab77a96841..ffaffec65e 100644 --- a/docs/_posts/2021-07-19-aws_createloginprofile.md +++ b/docs/_posts/2021-07-19-aws_createloginprofile.md @@ -58,8 +58,8 @@ This search looks for AWS CloudTrail events where a user A(victim A) creates a l #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_createloginprofile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-aws_updateloginprofile.md b/docs/_posts/2021-07-19-aws_updateloginprofile.md index c87a207e18..b6fe10a320 100644 --- a/docs/_posts/2021-07-19-aws_updateloginprofile.md +++ b/docs/_posts/2021-07-19-aws_updateloginprofile.md @@ -54,8 +54,8 @@ This search looks for AWS CloudTrail events where a user A who has already permi #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_updateloginprofile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md b/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md index f7157aa117..259f638664 100644 --- a/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md +++ b/docs/_posts/2021-07-19-detect_new_open_s3_buckets.md @@ -58,8 +58,8 @@ This search looks for AWS CloudTrail events where a user has created an open/pub #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_new_open_s3_buckets_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md b/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md index c86153f834..d73f7413b9 100644 --- a/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md +++ b/docs/_posts/2021-07-19-detect_new_open_s3_buckets_over_aws_cli.md @@ -51,8 +51,8 @@ This search looks for AWS CloudTrail events where a user has created an open/pub #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_new_open_s3_buckets_over_aws_cli_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md b/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md index da4cd957d5..e763ffbe16 100644 --- a/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md +++ b/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md @@ -54,10 +54,10 @@ This search is to detect a suspicious mshta.exe process that spawn rundll32 or r #### Macros The SPL above uses the following Macros: -* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) +* [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) Note that `mshta_spawning_rundll32_or_regsvr32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-o365_bypass_mfa_via_trusted_ip.md b/docs/_posts/2021-07-19-o365_bypass_mfa_via_trusted_ip.md index 6d94e3da3c..fb65e505ce 100644 --- a/docs/_posts/2021-07-19-o365_bypass_mfa_via_trusted_ip.md +++ b/docs/_posts/2021-07-19-o365_bypass_mfa_via_trusted_ip.md @@ -58,8 +58,8 @@ This search detects newly added IP addresses/CIDR blocks to the list of MFA Trus #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [o365_management_activity](https://github.com/splunk/security_content/blob/develop/macros/o365_management_activity.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `o365_bypass_mfa_via_trusted_ip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md b/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md index 81f21b1c7f..5f944b31a5 100644 --- a/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md +++ b/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md @@ -55,8 +55,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `detect_copy_of_shadowcopy_with_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md b/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md index 058084658d..0ff39c9b81 100644 --- a/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md +++ b/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md @@ -54,9 +54,9 @@ This search is to detect a suspicious rundll32.exe commandline to execute dll fi #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_icedid_rundll32_cmdline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md b/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md index cad2449378..73a1e2788b 100644 --- a/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md +++ b/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md @@ -54,9 +54,9 @@ This search is to detect a suspicious rundll32.exe process with plugininit param #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_plugininit_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-10-powershell_execute_com_object.md b/docs/_posts/2021-08-10-powershell_execute_com_object.md index b01790f811..cdf1ee03c4 100644 --- a/docs/_posts/2021-08-10-powershell_execute_com_object.md +++ b/docs/_posts/2021-08-10-powershell_execute_com_object.md @@ -55,8 +55,8 @@ This search is to detect a COM CLSID execution through powershell. This techniqu #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_execute_com_object_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md b/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md index 965ede12d5..2bc8279ad3 100644 --- a/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md +++ b/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md @@ -59,8 +59,8 @@ This search is to detect suspicious google drive or google docs files shared out #### Macros The SPL above uses the following Macros: -* [gsuite_drive](https://github.com/splunk/security_content/blob/develop/macros/gsuite_drive.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [gsuite_drive](https://github.com/splunk/security_content/blob/develop/macros/gsuite_drive.yml) Note that `gsuite_drive_share_in_external_email_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md index a8bd8bd109..6684677548 100644 --- a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md +++ b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_high.md @@ -61,8 +61,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_ecr_container_scanning_findings_high_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md index c48c06d7e6..e32655fa3f 100644 --- a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md +++ b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_low_informational_unknown.md @@ -61,8 +61,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_ecr_container_scanning_findings_low_informational_unknown_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md index 08afc70480..7b2876790d 100644 --- a/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md +++ b/docs/_posts/2021-08-17-aws_ecr_container_scanning_findings_medium.md @@ -61,8 +61,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_ecr_container_scanning_findings_medium_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-18-esentutl_sam_copy.md b/docs/_posts/2021-08-18-esentutl_sam_copy.md index 1b2072d85b..23eda0ceb1 100644 --- a/docs/_posts/2021-08-18-esentutl_sam_copy.md +++ b/docs/_posts/2021-08-18-esentutl_sam_copy.md @@ -54,9 +54,9 @@ The following analytic identifies the process - `esentutl.exe` - being used to c #### Macros The SPL above uses the following Macros: -* [process_esentutl](https://github.com/splunk/security_content/blob/develop/macros/process_esentutl.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_esentutl](https://github.com/splunk/security_content/blob/develop/macros/process_esentutl.yml) Note that `esentutl_sam_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md b/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md index 266c49ea2b..0e3873a57f 100644 --- a/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md +++ b/docs/_posts/2021-08-19-aws_ecr_container_upload_outside_business_hours.md @@ -57,8 +57,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_ecr_container_upload_outside_business_hours_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md b/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md index 8d99d3ecbe..735b973a36 100644 --- a/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md +++ b/docs/_posts/2021-08-19-aws_ecr_container_upload_unknown_user.md @@ -58,8 +58,8 @@ This search looks for AWS CloudTrail events from AWS Elastic Container Service ( #### Macros The SPL above uses the following Macros: * [aws_ecr_users](https://github.com/splunk/security_content/blob/develop/macros/aws_ecr_users.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_ecr_container_upload_unknown_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md b/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md index b4bc9d298f..e4805e2c76 100644 --- a/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md +++ b/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getlocaluser_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md index 6c7f0a97b3..57bd3cce90 100644 --- a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md +++ b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getwmiobject_user_account_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md b/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md index 2b8567faf5..fdb6b9416e 100644 --- a/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md +++ b/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md @@ -59,8 +59,8 @@ This search is to detect a shared file in google drive with suspicious file name #### Macros The SPL above uses the following Macros: -* [gsuite_drive](https://github.com/splunk/security_content/blob/develop/macros/gsuite_drive.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [gsuite_drive](https://github.com/splunk/security_content/blob/develop/macros/gsuite_drive.yml) Note that `gsuite_suspicious_shared_file_name_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-adsisearcher_account_discovery.md b/docs/_posts/2021-08-24-adsisearcher_account_discovery.md index 74618e251d..59fbc4249a 100644 --- a/docs/_posts/2021-08-24-adsisearcher_account_discovery.md +++ b/docs/_posts/2021-08-24-adsisearcher_account_discovery.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `adsisearcher_account_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md b/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md index 736237cea8..66e9becf44 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `domain_account_discovery_with_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md b/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md index 51d8197492..c073d8c681 100644 --- a/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get-domaintrust_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md b/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md index cc443bae35..fd6107f65f 100644 --- a/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get_aduser_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md b/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md index d262a49a68..41d4d11808 100644 --- a/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get_domainuser_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md index 0a8857b16d..1a0dd3b2a7 100644 --- a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getwmiobject_ds_user_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md b/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md index 0785a82acb..35da6b268a 100644 --- a/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md +++ b/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `domain_group_discovery_with_adsisearcher_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md b/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md index ca7967f2fb..b23f7de343 100644 --- a/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md +++ b/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `elevated_group_discovery_with_powerview_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md b/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md index 611e2a7bbc..b1294fd107 100644 --- a/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md +++ b/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getadgroup_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md index fca1a5aef3..65cc2dca48 100644 --- a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md +++ b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getwmiobject_ds_group_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md index 7e55a15d7a..4cec49dd26 100644 --- a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md @@ -48,8 +48,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get_addefaultdomainpasswordpolicy_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md index 5cd7284eec..26d7a2d74c 100644 --- a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md @@ -48,8 +48,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get_aduserresultantpasswordpolicy_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md index e229aa305e..779753ae4e 100644 --- a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md @@ -48,8 +48,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get_domainpolicy_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md b/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md index 940a68b8c3..6d4ade39b8 100644 --- a/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getdomaingroup_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md b/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md index e9d2e398e0..8baca3b682 100644 --- a/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md +++ b/docs/_posts/2021-08-27-exchange_powershell_abuse_via_ssrf.md @@ -55,8 +55,8 @@ Review the source attempting to perform this activity against your environment. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [exchange](https://github.com/splunk/security_content/blob/develop/macros/exchange.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `exchange_powershell_abuse_via_ssrf_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-27-exchange_powershell_module_usage.md b/docs/_posts/2021-08-27-exchange_powershell_module_usage.md index c497b7c1e8..753fa1439c 100644 --- a/docs/_posts/2021-08-27-exchange_powershell_module_usage.md +++ b/docs/_posts/2021-08-27-exchange_powershell_module_usage.md @@ -57,8 +57,8 @@ Module - New-managementroleassignment can assign a management role to a manageme #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `exchange_powershell_module_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md b/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md index 14dde03e86..fb360592fa 100644 --- a/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md +++ b/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getadcomputer_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md b/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md index 3e73009293..e490537e9d 100644 --- a/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md +++ b/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getwmiobject_ds_computer_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md b/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md index f1c9e16b86..6dca773d90 100644 --- a/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md +++ b/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `remote_system_discovery_with_adsisearcher_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md b/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md index c01c31626c..e435e2c2ca 100644 --- a/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md +++ b/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get-foresttrust_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md b/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md index a00a058550..c008fb0c02 100644 --- a/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md +++ b/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getdomaincomputer_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md b/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md index edc01b6d48..3696c6f5e4 100644 --- a/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md +++ b/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getdomaincontroller_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md b/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md index 99c340e0bd..a4a4de4871 100644 --- a/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md +++ b/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md @@ -55,9 +55,9 @@ The following hunting detection identifies rundll32.exe with `control_rundll` wi #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_control_rundll_hunt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md b/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md index 24310c5a07..be179359aa 100644 --- a/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md +++ b/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md @@ -55,9 +55,9 @@ The following detection identifies rundll32.exe with `control_rundll` within the #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_control_rundll_world_writable_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-09-extraction_of_registry_hives.md b/docs/_posts/2021-09-09-extraction_of_registry_hives.md index 6f0fe5918e..0e24f25950 100644 --- a/docs/_posts/2021-09-09-extraction_of_registry_hives.md +++ b/docs/_posts/2021-09-09-extraction_of_registry_hives.md @@ -55,8 +55,8 @@ The following analytic identifies the use of `reg.exe` exporting Windows Registr #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) Note that `extraction_of_registry_hives_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md b/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md index 882ce7aa05..a8d55baaa3 100644 --- a/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md +++ b/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getnettcpconnection_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md b/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md index b3ec13413f..adb755e334 100644 --- a/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md +++ b/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `getcurrent_user_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md index e2a910be1c..956aef6297 100644 --- a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md +++ b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `user_discovery_with_env_vars_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md b/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md index f73d66cd09..798c328f0a 100644 --- a/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md +++ b/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md @@ -50,9 +50,9 @@ This search is to detect a suspicious wmic.exe process or renamed wmic process t #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `xsl_script_execution_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md b/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md index 15172adde5..50d81d2a7c 100644 --- a/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md +++ b/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `get_wmiobject_group_discovery_with_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md index e6f8e6e1a9..8db2e6d1ac 100644 --- a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md +++ b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_get_localgroup_discovery_with_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-account_discovery_with_net_app.md b/docs/_posts/2021-09-16-account_discovery_with_net_app.md index 8cb58b17e2..6778ca9331 100644 --- a/docs/_posts/2021-09-16-account_discovery_with_net_app.md +++ b/docs/_posts/2021-09-16-account_discovery_with_net_app.md @@ -55,9 +55,9 @@ this search is to detect a potential account discovery series of command used by #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `account_discovery_with_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md b/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md index 7567de1586..7a496f5954 100644 --- a/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md +++ b/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md @@ -54,8 +54,8 @@ Attempt To Add Certificate To Untrusted Store #### Macros The SPL above uses the following Macros: -* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `attempt_to_add_certificate_to_untrusted_store_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md b/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md index 78e415f73b..bea7faa2e0 100644 --- a/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md +++ b/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md @@ -54,8 +54,8 @@ Monitor for execution of reg.exe with parameters specifying an export of keys th #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) diff --git a/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md b/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md index 2e1a863de8..ba47842f36 100644 --- a/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md +++ b/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md @@ -54,10 +54,10 @@ This search detects the use of wmic and Powershell to create a shadow copy. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `creation_of_shadow_copy_with_wmic_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_renamed.md b/docs/_posts/2021-09-16-detect_html_help_renamed.md index b754ab53b6..be475fdcb1 100644 --- a/docs/_posts/2021-09-16-detect_html_help_renamed.md +++ b/docs/_posts/2021-09-16-detect_html_help_renamed.md @@ -54,8 +54,8 @@ The following analytic identifies a renamed instance of hh.exe (HTML Help) execu #### Macros The SPL above uses the following Macros: -* [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_renamed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md b/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md index 33e2392542..aa9239c917 100644 --- a/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md +++ b/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md @@ -54,8 +54,8 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: -* [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md b/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md index d119b152c6..2e1c749817 100644 --- a/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md +++ b/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md @@ -54,8 +54,8 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: -* [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_html_help_using_infotech_storage_handlers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md b/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md index f509e0cd35..3ddc1b4bd7 100644 --- a/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md +++ b/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md @@ -55,8 +55,8 @@ The following analytic identifies "mshta.exe" execution with inline prot #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_mshta_inline_hta_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_renamed.md b/docs/_posts/2021-09-16-detect_mshta_renamed.md index 6e87595887..f2791aed30 100644 --- a/docs/_posts/2021-09-16-detect_mshta_renamed.md +++ b/docs/_posts/2021-09-16-detect_mshta_renamed.md @@ -55,8 +55,8 @@ The following analytic identifies renamed instances of mshta.exe executing. Msht #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_mshta_renamed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md b/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md index d135f7d181..636a090b3d 100644 --- a/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md +++ b/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md @@ -55,8 +55,8 @@ This analytic identifies when Microsoft HTML Application Host (mshta.exe) utilit #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_mshta_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-dump_lsass_via_procdump.md b/docs/_posts/2021-09-16-dump_lsass_via_procdump.md index f4019ef9bb..1305001617 100644 --- a/docs/_posts/2021-09-16-dump_lsass_via_procdump.md +++ b/docs/_posts/2021-09-16-dump_lsass_via_procdump.md @@ -55,8 +55,8 @@ During triage, confirm this is procdump.exe executing. If it is the first time a #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_procdump](https://github.com/splunk/security_content/blob/develop/macros/process_procdump.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `dump_lsass_via_procdump_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-local_account_discovery_with_net.md b/docs/_posts/2021-09-16-local_account_discovery_with_net.md index 9d9fd5677d..93cb296fa0 100644 --- a/docs/_posts/2021-09-16-local_account_discovery_with_net.md +++ b/docs/_posts/2021-09-16-local_account_discovery_with_net.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: +* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) Note that `local_account_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md b/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md index 5a614c8c00..de2d8857ce 100644 --- a/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md +++ b/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `local_account_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-office_product_spawning_wmic.md b/docs/_posts/2021-09-16-office_product_spawning_wmic.md index e33d43c39a..7a705ed64f 100644 --- a/docs/_posts/2021-09-16-office_product_spawning_wmic.md +++ b/docs/_posts/2021-09-16-office_product_spawning_wmic.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by Ursnif malwar #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `office_product_spawning_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-processes_launching_netsh.md b/docs/_posts/2021-09-16-processes_launching_netsh.md index ba25f14c2b..e53b5f6dbe 100644 --- a/docs/_posts/2021-09-16-processes_launching_netsh.md +++ b/docs/_posts/2021-09-16-processes_launching_netsh.md @@ -54,8 +54,8 @@ This search looks for processes launching netsh.exe. Netsh is a command-line scr #### Macros The SPL above uses the following Macros: -* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `processes_launching_netsh_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md b/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md index 69bc0c773d..2e366c2a56 100644 --- a/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md @@ -55,9 +55,9 @@ The following analytic identifies regsvcs.exe with no command line arguments. Th #### Macros The SPL above uses the following Macros: +* [process_regsvcs](https://github.com/splunk/security_content/blob/develop/macros/process_regsvcs.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_regsvcs](https://github.com/splunk/security_content/blob/develop/macros/process_regsvcs.yml) Note that `detect_regsvcs_with_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md index 06f31d1ad1..a80072dd3c 100644 --- a/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md @@ -52,8 +52,8 @@ The following analytic identifies DLLHost.exe with no command line arguments. It #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_dllhost](https://github.com/splunk/security_content/blob/develop/macros/process_dllhost.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `suspicious_dllhost_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md index 80650cc059..cea76ef678 100644 --- a/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md @@ -52,9 +52,9 @@ The following analytic identifies gpupdate.exe with no command line arguments. I #### Macros The SPL above uses the following Macros: -* [process_gpupdate](https://github.com/splunk/security_content/blob/develop/macros/process_gpupdate.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_gpupdate](https://github.com/splunk/security_content/blob/develop/macros/process_gpupdate.yml) Note that `suspicious_gpupdate_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md index 4a64907db8..bfd5158cb4 100644 --- a/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md @@ -56,9 +56,9 @@ The following analytic identifies rundll32.exe with no command line arguments. I #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `suspicious_rundll32_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-29-verclsid_clsid_execution.md b/docs/_posts/2021-09-29-verclsid_clsid_execution.md index 59b4d667e6..f8e60fcc3f 100644 --- a/docs/_posts/2021-09-29-verclsid_clsid_execution.md +++ b/docs/_posts/2021-09-29-verclsid_clsid_execution.md @@ -54,9 +54,9 @@ This analytic is to detect a possible abuse of verclsid to execute malicious fil #### Macros The SPL above uses the following Macros: -* [process_verclsid](https://github.com/splunk/security_content/blob/develop/macros/process_verclsid.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_verclsid](https://github.com/splunk/security_content/blob/develop/macros/process_verclsid.yml) Note that `verclsid_clsid_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-rundll32_shimcache_flush.md b/docs/_posts/2021-10-05-rundll32_shimcache_flush.md index 92a6498679..ea0a7a2b5a 100644 --- a/docs/_posts/2021-10-05-rundll32_shimcache_flush.md +++ b/docs/_posts/2021-10-05-rundll32_shimcache_flush.md @@ -50,9 +50,9 @@ This analytic is to detect a suspicious rundll32 commandline to clear shim cache #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_shimcache_flush_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-suspicious_copy_on_system32.md b/docs/_posts/2021-10-05-suspicious_copy_on_system32.md index 8c220afd3e..f6ad578bea 100644 --- a/docs/_posts/2021-10-05-suspicious_copy_on_system32.md +++ b/docs/_posts/2021-10-05-suspicious_copy_on_system32.md @@ -54,9 +54,9 @@ This analytic is to detect a suspicious copy of file from systemroot folder of t #### Macros The SPL above uses the following Macros: -* [process_copy](https://github.com/splunk/security_content/blob/develop/macros/process_copy.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_copy](https://github.com/splunk/security_content/blob/develop/macros/process_copy.yml) Note that `suspicious_copy_on_system32_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md index 0374bd9830..0d2c4b9b7d 100644 --- a/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md @@ -61,9 +61,9 @@ The following analytic identifies rundll32.exe with no command line arguments an #### Macros The SPL above uses the following Macros: +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) Note that `rundll32_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md index 4d3307d240..500c876e6b 100644 --- a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md +++ b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md @@ -52,8 +52,8 @@ During triage, review parallel processes for further suspicious activity. #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `serviceprincipalnames_discovery_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md index d8bae796cf..99058b0b23 100644 --- a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md +++ b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md @@ -57,9 +57,9 @@ During triage, review parallel processes for further suspicious activity. #### Macros The SPL above uses the following Macros: +* [process_setspn](https://github.com/splunk/security_content/blob/develop/macros/process_setspn.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_setspn](https://github.com/splunk/security_content/blob/develop/macros/process_setspn.yml) Note that `serviceprincipalnames_discovery_with_setspn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md b/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md index aa1656b366..b49c0ec334 100644 --- a/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md +++ b/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md @@ -52,8 +52,8 @@ During triage, review parallel processes for further behavior. In addition, iden #### Macros The SPL above uses the following Macros: -* [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_curl_download_to_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md b/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md index 06eb49603e..f3191d6347 100644 --- a/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md +++ b/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md @@ -54,8 +54,8 @@ Adversaries may use one of the three methods based on the remote destination and #### Macros The SPL above uses the following Macros: -* [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_curl_upload_to_remote_destination_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md b/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md index 8f2c312d41..224fe990cc 100644 --- a/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md +++ b/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md @@ -50,9 +50,9 @@ The following analytic identifies `wmic.exe` loading a remote XSL (eXtensible St #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `wmic_xsl_execution_via_url_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md b/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md index a581d5b18c..1ce1e30f06 100644 --- a/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md +++ b/docs/_posts/2021-11-12-aws_iam_accessdenied_discovery_events.md @@ -51,8 +51,8 @@ The following detection identifies excessive AccessDenied events within an hour #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cloudtrail](https://github.com/splunk/security_content/blob/develop/macros/cloudtrail.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `aws_iam_accessdenied_discovery_events_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md b/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md index f5cb7f0f4d..d1b2fabc18 100644 --- a/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md +++ b/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md @@ -50,9 +50,9 @@ This analytic identifies wmic.exe being launched with parameters to spawn a proc #### Macros The SPL above uses the following Macros: +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) Note that `remote_process_instantiation_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md index a295247d9c..eb619528a6 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `powershell.exe` with arguments utilize #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `remote_process_instantiation_via_dcom_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md index f023d116f6..95bc19ded8 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `remote_process_instantiation_via_dcom_and_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md index 78d579a1e8..02534357ce 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md @@ -50,9 +50,9 @@ This analytic looks for the execution of `powershell.exe` leveraging the `Invoke #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `remote_process_instantiation_via_wmi_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md index 8e9697bb9f..8c391e5a75 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `remote_process_instantiation_via_wmi_and_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md index 3a48317b97..dcc7d6b810 100644 --- a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md +++ b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md @@ -54,9 +54,9 @@ This analytic looks for the execution of `powershell.exe` with arguments utilize #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `remote_process_instantiation_via_winrm_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md index 9e46e88859..67ea04357d 100644 --- a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md +++ b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `remote_process_instantiation_via_winrm_and_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md b/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md index b4d8260afc..d7a8f48ba6 100644 --- a/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md +++ b/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md @@ -53,8 +53,8 @@ This analytic will detect a suspicious process commandline related to windows de #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_windows_defender_exclusion_commands_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md b/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md index 8cf8835bd7..5922705e33 100644 --- a/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md +++ b/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md @@ -50,9 +50,9 @@ This analytic identifies commonly used command-line arguments used by `rclone.ex #### Macros The SPL above uses the following Macros: +* [process_rclone](https://github.com/splunk/security_content/blob/develop/macros/process_rclone.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_rclone](https://github.com/splunk/security_content/blob/develop/macros/process_rclone.yml) Note that `detect_rclone_command-line_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-linux_java_spawning_shell.md b/docs/_posts/2021-12-13-linux_java_spawning_shell.md index 9fa8dd558b..45da2dda41 100644 --- a/docs/_posts/2021-12-13-linux_java_spawning_shell.md +++ b/docs/_posts/2021-12-13-linux_java_spawning_shell.md @@ -51,9 +51,9 @@ The following analytic identifies the process name of Java, Apache, or Tomcat sp #### Macros The SPL above uses the following Macros: -* [linux_shells](https://github.com/splunk/security_content/blob/develop/macros/linux_shells.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [linux_shells](https://github.com/splunk/security_content/blob/develop/macros/linux_shells.yml) Note that `linux_java_spawning_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-windows_java_spawning_shells.md b/docs/_posts/2021-12-13-windows_java_spawning_shells.md index 158e29cedb..4f0365a1d7 100644 --- a/docs/_posts/2021-12-13-windows_java_spawning_shells.md +++ b/docs/_posts/2021-12-13-windows_java_spawning_shells.md @@ -54,8 +54,8 @@ The following analytic identifies the process name of java.exe and w3wp.exe spaw #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [windows_shells](https://github.com/splunk/security_content/blob/develop/macros/windows_shells.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_java_spawning_shells_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md b/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md index 5fcc0d07fa..33fdb26a09 100644 --- a/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md +++ b/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md @@ -60,9 +60,9 @@ The following hunting analytic identifies PowerShell commands utilizing the Wind #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `powershell_-_connect_to_internet_with_hidden_window_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md b/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md index 07a0f653a3..d7cb3ffb27 100644 --- a/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md +++ b/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md @@ -58,9 +58,9 @@ Alternatively, may use regex per matching here https://regexr.com/662ov. #### Macros The SPL above uses the following Macros: +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) Note that `malicious_powershell_process_-_encoded_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-20-ping_sleep_batch_command.md b/docs/_posts/2022-01-20-ping_sleep_batch_command.md index 82b7b5e796..05fa16daef 100644 --- a/docs/_posts/2022-01-20-ping_sleep_batch_command.md +++ b/docs/_posts/2022-01-20-ping_sleep_batch_command.md @@ -57,8 +57,8 @@ This analytic will identify the possible execution of ping sleep batch commands. #### Macros The SPL above uses the following Macros: * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [process_ping](https://github.com/splunk/security_content/blob/develop/macros/process_ping.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [process_ping](https://github.com/splunk/security_content/blob/develop/macros/process_ping.yml) Note that `ping_sleep_batch_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md b/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md index ba0de913dc..58c68517e3 100644 --- a/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md +++ b/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md @@ -53,8 +53,8 @@ This analytic will identify a suspicious PowerShell command used to delete the W #### Macros The SPL above uses the following Macros: -* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) Note that `powershell_remove_windows_defender_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/index.markdown b/docs/index.markdown index 931ccdf3c5..3e8b4cea77 100644 --- a/docs/index.markdown +++ b/docs/index.markdown @@ -39,7 +39,7 @@ feature_row: # Welcome to Splunk Security Content -This project gives you access to our repository of Analytic Stories that are security guides which provide background on TTPs, mapped to the MITRE framework, the Lockheed Martin Kill Chain, and CIS controls. They include Splunk searches, machine-learning algorithms, and Splunk Phantom playbooks (where available)—all designed to work together to detect, investigate, and respond to threats. +This project gives you access to our repository of Analytic Stories that are security guides which provide background on TTPs, mapped to the MITRE framework, the Lockheed Martin Kill Chain, and CIS controls. They include Splunk searches, machine-learning algorithms, and Splunk SOAR playbooks (where available)—all designed to work together to detect, investigate, and respond to threats. [Try in Splunk Security Cloud](https://www.splunk.com/en_us/cyber-security.html){: .btn .btn--success} From 98b2e1055e8d45f1a5abd3f9cb8a81a62fe7b35f Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Fri, 4 Feb 2022 11:34:04 -0600 Subject: [PATCH 14/16] Sorting conflicts --- bin/doc_gen.py | 7 ++++++- .../2017-09-12-detect_new_login_attempts_to_routers.md | 2 +- .../2017-09-15-no_windows_updates_in_a_time_frame.md | 2 +- .../2017-09-19-email_attachments_with_lots_of_spaces.md | 2 +- ...tect_attackers_scanning_for_vulnerable_jboss_servers.md | 2 +- ...3-detect_malicious_requests_to_exploit_jboss_servers.md | 2 +- .../2017-09-23-monitor_web_traffic_for_brand_abuse.md | 2 +- docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md | 2 +- .../2018-06-01-detect_large_outbound_icmp_packets.md | 2 +- docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md | 2 +- docs/_posts/2018-10-23-wmi_permanent_event_subscription.md | 2 +- docs/_posts/2018-10-23-wmi_temporary_event_subscription.md | 2 +- docs/_posts/2018-12-03-remote_wmi_command_attempt.md | 2 +- docs/_posts/2018-12-03-usn_journal_deletion.md | 2 +- docs/_posts/2018-12-06-suspicious_java_classes.md | 2 +- docs/_posts/2018-12-14-file_with_samsam_extension.md | 2 +- docs/_posts/2018-12-14-samsam_test_file_write.md | 2 +- ...019-04-01-web_servers_executing_suspicious_processes.md | 2 +- .../2019-05-08-unusually_long_command_line_-_mltk.md | 2 +- ...12-03-detect_credential_dumping_through_lsass_access.md | 2 +- .../2019-12-03-detect_mimikatz_using_loaded_images.md | 2 +- .../2019-12-06-access_lsass_memory_for_dump_creation.md | 2 +- docs/_posts/2019-12-06-create_remote_thread_into_lsass.md | 2 +- docs/_posts/2019-12-10-creation_of_shadow_copy.md | 2 +- docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md | 2 +- .../2020-02-03-creation_of_lsass_dump_with_taskmgr.md | 2 +- docs/_posts/2020-02-07-macos_-_re-opened_applications.md | 2 +- docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md | 2 +- docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md | 2 +- docs/_posts/2020-03-16-detect_rare_executables.md | 2 +- docs/_posts/2020-03-16-process_execution_via_wmi.md | 2 +- docs/_posts/2020-03-16-script_execution_via_wmi.md | 2 +- .../2020-05-20-first_time_seen_child_process_of_zoom.md | 2 +- ...-detect_path_interception_by_creation_of_program_exe.md | 2 +- docs/_posts/2020-07-06-short_lived_windows_accounts.md | 2 +- docs/_posts/2020-07-06-windows_event_log_cleared.md | 2 +- docs/_posts/2020-07-07-remote_desktop_network_traffic.md | 2 +- docs/_posts/2020-07-08-detect_new_local_admin_account.md | 2 +- docs/_posts/2020-07-21-attempt_to_stop_security_service.md | 2 +- .../2020-07-21-detect_excessive_user_account_lockouts.md | 2 +- docs/_posts/2020-07-21-detect_outbound_smb_traffic.md | 2 +- .../2020-07-21-detect_outlook_exe_writing_a_zip_file.md | 2 +- ...-detect_use_of_cmd_exe_to_launch_script_interpreters.md | 2 +- .../2020-07-21-detection_of_tools_built_by_nirsoft.md | 2 +- ...email_files_written_outside_of_the_outlook_directory.md | 2 +- .../2020-07-21-first_time_seen_running_windows_service.md | 2 +- ...0-07-21-hiding_files_and_directories_with_attrib_exe.md | 2 +- ...licious_powershell_process_-_execution_policy_bypass.md | 2 +- .../2020-07-21-overwriting_accessibility_binaries.md | 2 +- .../2020-07-21-prohibited_network_traffic_allowed.md | 2 +- docs/_posts/2020-07-21-protocol_or_port_mismatch.md | 2 +- .../2020-07-21-remote_desktop_process_running_on_system.md | 2 +- .../2020-07-21-sc_exe_manipulating_windows_services.md | 2 +- .../2020-07-22-suspicious_email_attachment_extensions.md | 4 ++-- docs/_posts/2020-07-22-suspicious_reg_exe_process.md | 2 +- docs/_posts/2020-07-22-tor_traffic.md | 2 +- docs/_posts/2020-07-22-unload_sysmon_filter_driver.md | 2 +- ...20-07-28-detect_windows_dns_sigred_via_splunk_stream.md | 2 +- ...29-cloud_instance_modified_by_previously_unseen_user.md | 2 +- docs/_posts/2020-08-11-detect_arp_poisoning.md | 2 +- docs/_posts/2020-08-11-detect_rogue_dhcp_server.md | 2 +- ...-09-16-create_or_delete_windows_shares_using_net_exe.md | 2 +- ...-15-detect_activity_related_to_pass_the_hash_attacks.md | 2 +- ...-10-16-kerberoasting_spn_request_with_rc4_encryption.md | 2 +- ...020-10-28-detect_ipv6_network_infrastructure_threats.md | 2 +- docs/_posts/2020-10-28-detect_port_security_violation.md | 2 +- ...020-10-28-detect_software_download_to_network_device.md | 2 +- docs/_posts/2020-10-28-detect_traffic_mirroring.md | 2 +- docs/_posts/2020-11-06-ryuk_test_files_detected.md | 2 +- ...owershell_execution_policy_to_unrestricted_or_bypass.md | 2 +- .../2020-11-06-windows_security_account_manager_stopped.md | 2 +- docs/_posts/2020-11-09-common_ransomware_extensions.md | 2 +- docs/_posts/2020-11-09-common_ransomware_notes.md | 2 +- docs/_posts/2020-11-09-deleting_shadow_copies.md | 2 +- ...1-09-detect_excessive_account_lockouts_from_endpoint.md | 2 +- ...sses_used_for_system_network_configuration_discovery.md | 2 +- ...020-11-18-execution_of_file_with_multiple_extensions.md | 2 +- ...him_database_installation_with_suspicious_parameters.md | 2 +- ...-reg_exe_manipulating_windows_services_registry_keys.md | 2 +- ...2020-11-26-registry_keys_for_creating_shim_databases.md | 2 +- .../2020-12-07-schtasks_used_for_forcing_a_reboot.md | 2 +- docs/_posts/2020-12-08-shim_database_file_creation.md | 2 +- .../_posts/2020-12-08-single_letter_process_on_endpoint.md | 2 +- ...12-08-system_processes_run_from_unexpected_locations.md | 2 +- docs/_posts/2020-12-08-unusually_long_command_line.md | 2 +- ...020-12-14-sunburst_correlation_dll_and_network_event.md | 2 +- ...2020-12-17-scheduled_task_deleted_or_created_via_cmd.md | 2 +- .../2020-12-21-bcdedit_failure_recovery_modification.md | 2 +- ...1-01-12-suspicious_microsoft_workflow_compiler_usage.md | 4 ++-- docs/_posts/2021-01-12-suspicious_msbuild_path.md | 2 +- docs/_posts/2021-01-12-suspicious_msbuild_rename.md | 2 +- docs/_posts/2021-01-12-suspicious_msbuild_spawn.md | 2 +- docs/_posts/2021-01-12-suspicious_mshta_child_process.md | 2 +- ...-detect_hosts_connecting_to_dynamic_domain_providers.md | 2 +- ...cious_powershell_process_with_obfuscation_techniques.md | 2 +- .../2021-01-20-detect_rundll32_inline_hta_execution.md | 2 +- docs/_posts/2021-01-20-suspicious_mshta_spawn.md | 2 +- docs/_posts/2021-01-22-wbadmin_delete_system_backups.md | 2 +- docs/_posts/2021-01-25-nltest_domain_trust_discovery.md | 2 +- .../2021-01-26-certutil_exe_certificate_extraction.md | 2 +- ...021-01-28-detect_regsvr32_application_control_bypass.md | 4 ++-- docs/_posts/2021-01-28-ntdsutil_export_ntds.md | 2 +- ...1-01-28-suspicious_regsvr32_register_suspicious_path.md | 4 ++-- ...detect_rundll32_application_control_bypass_-_advpack.md | 2 +- ...etect_rundll32_application_control_bypass_-_setupapi.md | 2 +- ...etect_rundll32_application_control_bypass_-_syssetup.md | 2 +- docs/_posts/2021-02-04-suspicious_rundll32_startw.md | 2 +- .../2021-02-09-suspicious_rundll32_dllregisterserver.md | 2 +- .../2021-02-11-detect_html_help_spawn_child_process.md | 2 +- docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md | 2 +- .../_posts/2021-02-12-detect_regsvcs_spawning_a_process.md | 2 +- .../2021-02-16-detect_regasm_with_network_connection.md | 2 +- .../2021-02-16-detect_regsvcs_with_network_connection.md | 2 +- docs/_posts/2021-02-22-cobalt_strike_named_pipes.md | 2 +- .../2021-02-22-suspicious_curl_network_connection.md | 2 +- docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md | 2 +- .../2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md | 2 +- docs/_posts/2021-03-01-any_powershell_downloadfile.md | 2 +- docs/_posts/2021-03-01-any_powershell_downloadstring.md | 2 +- docs/_posts/2021-03-01-fodhelper_uac_bypass.md | 2 +- docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md | 2 +- ...3-01-suspicious_scheduled_task_from_public_directory.md | 2 +- ...1-03-02-unified_messaging_service_spawning_a_process.md | 2 +- .../2021-03-02-windows_disableantispyware_registry.md | 2 +- docs/_posts/2021-03-03-nishang_powershelltcponeline.md | 2 +- docs/_posts/2021-03-03-w3wp_spawning_shell.md | 6 +++--- docs/_posts/2021-03-12-ransomware_notes_bulk_creation.md | 2 +- docs/_posts/2021-03-12-resize_shadowstorage_volume.md | 2 +- docs/_posts/2021-03-16-high_file_deletion_frequency.md | 2 +- .../2021-03-16-high_process_termination_frequency.md | 2 +- docs/_posts/2021-03-17-clop_common_exec_parameter.md | 2 +- .../2021-03-17-clop_ransomware_known_service_name.md | 2 +- .../2021-03-17-process_deleting_its_process_file_path.md | 2 +- ...-certutil_download_with_urlcache_and_split_arguments.md | 2 +- ...certutil_download_with_verifyctl_and_split_arguments.md | 2 +- docs/_posts/2021-03-23-certutil_with_decode_argument.md | 2 +- docs/_posts/2021-03-29-powershell_start-bitstransfer.md | 2 +- docs/_posts/2021-03-31-disabling_firewall_with_netsh.md | 2 +- docs/_posts/2021-03-31-dsquery_domain_discovery.md | 2 +- ...021-04-07-malicious_powershell_executed_as_a_service.md | 2 +- ...8-winevent_scheduled_task_created_within_public_path.md | 2 +- docs/_posts/2021-04-12-excel_spawning_powershell.md | 2 +- .../2021-04-12-excel_spawning_windows_script_host.md | 2 +- ...04-12-winevent_scheduled_task_created_to_spawn_shell.md | 2 +- docs/_posts/2021-04-12-winword_spawning_powershell.md | 2 +- .../2021-04-12-winword_spawning_windows_script_host.md | 2 +- ...2021-04-13-office_application_spawn_rundll32_process.md | 2 +- .../2021-04-14-office_document_creating_schedule_task.md | 2 +- .../2021-04-14-office_document_executing_macro_code.md | 2 +- .../2021-04-15-dns_exfiltration_using_nslookup_app.md | 2 +- ...gpupdate_with_no_command_line_arguments_with_network.md | 2 +- ...19-powershell_remote_thread_to_known_windows_process.md | 2 +- ...2021-04-19-schedule_task_with_http_command_arguments.md | 2 +- ...21-04-19-schedule_task_with_rundll32_command_trigger.md | 2 +- ...9-wermgr_process_connecting_to_ip_check_web_services.md | 2 +- .../2021-04-19-wermgr_process_create_executable_file.md | 2 +- ...-19-wermgr_process_spawned_cmd_or_powershell_process.md | 6 +++--- docs/_posts/2021-04-21-excessive_usage_of_nslookup_app.md | 2 +- .../2021-04-21-multiple_archive_files_http_post_traffic.md | 2 +- docs/_posts/2021-04-22-anomalous_usage_of_7zip.md | 2 +- ...1-04-22-office_product_spawning_rundll32_with_no_dll.md | 2 +- docs/_posts/2021-04-22-plain_http_post_exfiltrated_data.md | 2 +- docs/_posts/2021-04-22-winword_spawning_cmd.md | 4 ++-- .../_posts/2021-04-26-office_product_spawning_bitsadmin.md | 2 +- docs/_posts/2021-04-26-office_product_spawning_certutil.md | 2 +- docs/_posts/2021-04-26-office_product_spawning_mshta.md | 2 +- docs/_posts/2021-04-26-trickbot_named_pipe.md | 2 +- docs/_posts/2021-04-29-icacls_deny_command.md | 2 +- docs/_posts/2021-04-29-suspicious_driver_loaded_path.md | 2 +- docs/_posts/2021-04-29-xmrig_driver_loaded.md | 2 +- docs/_posts/2021-05-04-deleting_of_net_users.md | 2 +- docs/_posts/2021-05-04-disabling_net_user_account.md | 2 +- .../2021-05-04-excessive_attempt_to_disable_services.md | 2 +- docs/_posts/2021-05-04-excessive_service_stop_attempt.md | 2 +- docs/_posts/2021-05-04-excessive_usage_of_taskkill.md | 2 +- docs/_posts/2021-05-04-icacls_grant_command.md | 2 +- .../2021-05-04-modify_acl_permission_to_files_or_folder.md | 2 +- docs/_posts/2021-05-04-process_kill_base_on_file_path.md | 2 +- docs/_posts/2021-05-05-suspicious_process_file_path.md | 2 +- docs/_posts/2021-05-06-download_files_using_telegram.md | 2 +- ...021-05-06-enumerate_users_local_group_using_telegram.md | 2 +- docs/_posts/2021-05-06-excessive_usage_of_net_app.md | 2 +- ...06-executables_or_script_creation_in_suspicious_path.md | 2 +- docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md | 2 +- docs/_posts/2021-05-07-schtasks_run_task_on_demand.md | 2 +- .../_posts/2021-05-12-delete_shadowcopy_with_powershell.md | 2 +- docs/_posts/2021-05-13-cmlua_or_cmstplua_uac_bypass.md | 2 +- docs/_posts/2021-05-13-slui_runas_elevated.md | 2 +- docs/_posts/2021-05-13-slui_spawning_a_process.md | 2 +- docs/_posts/2021-05-18-services_escalate_exe.md | 2 +- .../2021-05-19-allow_inbound_traffic_in_firewall_rule.md | 2 +- docs/_posts/2021-05-19-mailsniper_invoke_functions.md | 2 +- docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md | 4 ++-- docs/_posts/2021-05-21-winrm_spawning_a_process.md | 2 +- .../2021-05-26-secretdumps_offline_ntds_dumping_tool.md | 2 +- .../2021-05-27-detect_sharphound_file_modifications.md | 2 +- docs/_posts/2021-05-27-detect_sharphound_usage.md | 2 +- .../2021-06-01-detect_azurehound_command-line_arguments.md | 2 +- .../2021-06-01-detect_azurehound_file_modifications.md | 2 +- .../2021-06-01-detect_sharphound_command-line_arguments.md | 2 +- docs/_posts/2021-06-02-conti_common_exec_parameter.md | 2 +- docs/_posts/2021-06-02-modification_of_wallpaper.md | 2 +- docs/_posts/2021-06-02-revil_common_exec_parameter.md | 2 +- docs/_posts/2021-06-02-wbemprox_com_object_execution.md | 2 +- ...of_distinct_processes_created_in_windows_temp_folder.md | 2 +- .../2021-06-04-known_services_killed_by_ransomware.md | 2 +- .../2021-06-07-excessive_number_of_taskhost_processes.md | 2 +- ...rshell_fileless_process_injection_via_getprocaddress.md | 2 +- ...hell_fileless_script_contains_base64_encoded_content.md | 2 +- ...9-detect_empire_with_powershell_script_block_logging.md | 2 +- ...detect_mimikatz_with_powershell_script_block_logging.md | 2 +- docs/_posts/2021-06-09-unloading_amsi_via_reflection.md | 2 +- ...2021-06-10-clear_unallocated_sector_using_cipher_app.md | 2 +- docs/_posts/2021-06-10-disable_logs_using_wevtutil.md | 2 +- ...2021-06-10-permission_modification_using_takeown_app.md | 2 +- docs/_posts/2021-06-10-powershell_creating_thread_mutex.md | 2 +- docs/_posts/2021-06-10-powershell_domain_enumeration.md | 2 +- ...ng_dotnet_into_memory_via_system_reflection_assembly.md | 2 +- .../2021-06-10-powershell_processing_stream_of_data.md | 2 +- .../2021-06-10-powershell_using_memory_as_backing_store.md | 2 +- ...21-06-10-prevent_automatic_repair_mode_using_bcdedit.md | 2 +- .../2021-06-10-recon_avproduct_through_pwh_or_wmi.md | 2 +- docs/_posts/2021-06-10-recon_using_wmi_class.md | 2 +- .../2021-06-14-wmi_recon_running_process_or_services.md | 2 +- ...2021-06-16-detect_wmi_event_subscription_persistence.md | 2 +- .../2021-06-17-suspicious_event_log_service_behavior.md | 2 +- ...2021-06-22-execute_javascript_with_jscript_com_clsid.md | 2 +- .../2021-06-22-powershell_enable_smb1protocol_feature.md | 2 +- ...021-06-22-recursive_delete_of_directory_in_batch_cmd.md | 4 ++-- ...21-06-23-allow_file_and_printing_sharing_in_firewall.md | 2 +- .../2021-06-23-allow_network_discovery_in_firewall.md | 2 +- .../2021-06-24-excessive_usage_of_sc_service_utility.md | 2 +- ...xcessive_number_of_service_control_start_as_disabled.md | 2 +- docs/_posts/2021-07-01-sdclt_uac_bypass.md | 2 +- docs/_posts/2021-07-01-silentcleanup_uac_bypass.md | 2 +- docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md | 2 +- .../_posts/2021-07-01-spoolsv_suspicious_loaded_modules.md | 2 +- .../_posts/2021-07-01-spoolsv_suspicious_process_access.md | 2 +- docs/_posts/2021-07-01-spoolsv_writing_a_dll_-_sysmon.md | 2 +- docs/_posts/2021-07-01-wsreset_uac_bypass.md | 2 +- .../2021-07-05-msmpeng_application_dll_side_loading.md | 2 +- .../2021-07-05-powershell_disable_security_monitoring.md | 2 +- docs/_posts/2021-07-12-net_profiler_uac_bypass.md | 2 +- docs/_posts/2021-07-12-uac_bypass_mmc_load_unsigned_dll.md | 2 +- ...d_compute_instance_created_by_previously_unseen_user.md | 2 +- ...21-07-19-mshta_spawning_rundll32_or_regsvr32_process.md | 6 +++--- docs/_posts/2021-07-19-office_product_spawn_cmd_process.md | 4 ++-- ...-detect_copy_of_shadowcopy_with_script_block_logging.md | 2 +- .../2021-07-26-rundll32_createremotethread_in_browser.md | 2 +- docs/_posts/2021-07-26-rundll32_dnsquery.md | 2 +- .../2021-07-26-rundll32_process_creating_exe_dll_files.md | 2 +- .../2021-07-26-suspicious_icedid_rundll32_cmdline.md | 2 +- docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md | 2 +- docs/_posts/2021-07-27-chcp_command_execution.md | 2 +- ...2021-07-27-regsvr32_with_known_silent_switch_cmdline.md | 4 ++-- ...021-07-29-rundll32_create_remote_thread_to_a_process.md | 2 +- docs/_posts/2021-07-30-drop_icedid_license_dat.md | 2 +- ...2021-07-30-icedid_exfiltrated_archived_file_creation.md | 2 +- ...2021-07-30-office_application_spawn_regsvr32_process.md | 4 ++-- docs/_posts/2021-08-03-sqlite_module_in_temp_folder.md | 2 +- ...2021-08-04-create_remote_thread_in_shell_application.md | 2 +- docs/_posts/2021-08-09-uninstall_app_using_msiexec.md | 2 +- docs/_posts/2021-08-10-powershell_execute_com_object.md | 2 +- docs/_posts/2021-08-11-fsutil_zeroing_file.md | 2 +- .../2021-08-13-uac_bypass_with_colorui_com_object.md | 2 +- .../2021-08-16-gsuite_drive_share_in_external_email.md | 2 +- .../2021-08-17-7zip_commandline_to_smb_share_path.md | 2 +- docs/_posts/2021-08-18-esentutl_sam_copy.md | 4 ++-- ...-08-19-protocols_passing_authentication_in_cleartext.md | 2 +- docs/_posts/2021-08-23-getlocaluser_with_powershell.md | 2 +- ...2021-08-23-getlocaluser_with_powershell_script_block.md | 2 +- ...2021-08-23-getwmiobject_user_account_with_powershell.md | 2 +- ...twmiobject_user_account_with_powershell_script_block.md | 2 +- .../2021-08-23-gsuite_suspicious_shared_file_name.md | 2 +- docs/_posts/2021-08-24-adsisearcher_account_discovery.md | 2 +- .../2021-08-24-domain_account_discovery_with_dsquery.md | 2 +- .../2021-08-24-domain_account_discovery_with_net_app.md | 2 +- .../2021-08-24-domain_account_discovery_with_wmic.md | 2 +- docs/_posts/2021-08-24-get-domaintrust_with_powershell.md | 2 +- ...1-08-24-get-domaintrust_with_powershell_script_block.md | 2 +- docs/_posts/2021-08-24-get_aduser_with_powershell.md | 2 +- .../2021-08-24-get_aduser_with_powershell_script_block.md | 2 +- docs/_posts/2021-08-24-get_domainuser_with_powershell.md | 2 +- ...21-08-24-get_domainuser_with_powershell_script_block.md | 2 +- .../2021-08-24-getwmiobject_ds_user_with_powershell.md | 2 +- ...24-getwmiobject_ds_user_with_powershell_script_block.md | 2 +- .../2021-08-25-domain_group_discovery_with_adsisearcher.md | 2 +- docs/_posts/2021-08-25-domain_group_discovery_with_net.md | 2 +- docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md | 2 +- .../_posts/2021-08-25-elevated_group_discovery_with_net.md | 2 +- .../2021-08-25-elevated_group_discovery_with_powerview.md | 2 +- .../2021-08-25-elevated_group_discovery_with_wmic.md | 2 +- docs/_posts/2021-08-25-getadgroup_with_powershell.md | 2 +- .../2021-08-25-getadgroup_with_powershell_script_block.md | 2 +- docs/_posts/2021-08-25-getdomaingroup_with_powershell.md | 2 +- .../2021-08-25-getnettcpconnection_with_powershell.md | 2 +- .../2021-08-25-getwmiobject_ds_group_with_powershell.md | 2 +- ...5-getwmiobject_ds_group_with_powershell_script_block.md | 2 +- ...26-get_addefaultdomainpasswordpolicy_with_powershell.md | 2 +- ...ultdomainpasswordpolicy_with_powershell_script_block.md | 2 +- ...26-get_aduserresultantpasswordpolicy_with_powershell.md | 2 +- ...resultantpasswordpolicy_with_powershell_script_block.md | 2 +- docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md | 2 +- ...-08-26-get_domainpolicy_with_powershell_script_block.md | 2 +- ...21-08-26-getdomaingroup_with_powershell_script_block.md | 2 +- .../2021-08-26-password_policy_discovery_with_net.md | 2 +- ...-26-process_creating_lnk_file_in_suspicious_location.md | 2 +- docs/_posts/2021-08-27-exchange_powershell_module_usage.md | 2 +- .../2021-08-30-domain_controller_discovery_with_nltest.md | 2 +- docs/_posts/2021-08-30-remote_system_discovery_with_net.md | 2 +- .../2021-08-31-petitpotam_network_share_access_request.md | 2 +- ...021-08-31-petitpotam_suspicious_kerberos_tgt_request.md | 2 +- .../2021-08-31-remote_system_discovery_with_dsquery.md | 2 +- .../2021-09-01-domain_controller_discovery_with_wmic.md | 2 +- .../2021-09-01-domain_group_discovery_with_dsquery.md | 2 +- ...021-09-01-getadcomputer_with_powershell_script_block.md | 2 +- ...etwmiobject_ds_computer_with_powershell_script_block.md | 2 +- ...2021-09-01-remote_system_discovery_with_adsisearcher.md | 2 +- .../_posts/2021-09-01-remote_system_discovery_with_wmic.md | 2 +- docs/_posts/2021-09-02-get-foresttrust_with_powershell.md | 2 +- ...1-09-02-get-foresttrust_with_powershell_script_block.md | 2 +- ...09-02-getdomaincomputer_with_powershell_script_block.md | 2 +- ...-02-getdomaincontroller_with_powershell_script_block.md | 2 +- docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md | 2 +- .../2021-09-06-bcdedit_command_back_to_normal_mode_boot.md | 2 +- .../2021-09-06-change_to_safe_mode_with_network_config.md | 2 +- docs/_posts/2021-09-07-getadcomputer_with_powershell.md | 2 +- .../_posts/2021-09-07-getdomaincomputer_with_powershell.md | 2 +- .../2021-09-07-getdomaincontroller_with_powershell.md | 2 +- .../2021-09-07-getwmiobject_ds_computer_with_powershell.md | 2 +- ...chcache_change_by_app_connect_and_create_adsi_object.md | 2 +- .../2021-09-07-system_information_discovery_detection.md | 2 +- ...-09-08-control_loading_from_world_writable_directory.md | 2 +- ...2021-09-08-create_local_admin_accounts_using_net_exe.md | 2 +- docs/_posts/2021-09-08-office_spawning_control.md | 2 +- docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md | 2 +- ...-08-rundll32_control_rundll_world_writable_directory.md | 2 +- docs/_posts/2021-09-09-extraction_of_registry_hives.md | 4 ++-- .../2021-09-09-mshtml_module_load_in_office_product.md | 2 +- ...-10-getnettcpconnection_with_powershell_script_block.md | 2 +- .../2021-09-10-network_connection_discovery_with_arp.md | 2 +- .../2021-09-10-network_connection_discovery_with_net.md | 2 +- ...2021-09-10-network_connection_discovery_with_netstat.md | 2 +- docs/_posts/2021-09-13-getcurrent_user_with_powershell.md | 2 +- ...1-09-13-getcurrent_user_with_powershell_script_block.md | 2 +- .../2021-09-13-jscript_execution_using_cscript_app.md | 2 +- .../2021-09-13-ms_scripting_process_loading_ldap_module.md | 2 +- .../2021-09-13-ms_scripting_process_loading_wmi_module.md | 2 +- docs/_posts/2021-09-13-system_user_discovery_with_query.md | 2 +- .../_posts/2021-09-13-system_user_discovery_with_whoami.md | 2 +- .../2021-09-13-user_discovery_with_env_vars_powershell.md | 2 +- ...user_discovery_with_env_vars_powershell_script_block.md | 2 +- docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md | 2 +- .../2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md | 2 +- docs/_posts/2021-09-14-get_wmiobject_group_discovery.md | 2 +- ..._wmiobject_group_discovery_with_script_block_logging.md | 2 +- docs/_posts/2021-09-14-net_localgroup_discovery.md | 2 +- .../2021-09-14-powershell_get_localgroup_discovery.md | 2 +- ...l_get_localgroup_discovery_with_script_block_logging.md | 2 +- docs/_posts/2021-09-14-wmic_group_discovery.md | 2 +- docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md | 2 +- ...9-15-non_chrome_process_accessing_chrome_default_dir.md | 2 +- ...09-15-non_firefox_process_access_firefox_profile_dir.md | 2 +- docs/_posts/2021-09-16-account_discovery_with_net_app.md | 2 +- ...-09-16-attempt_to_add_certificate_to_untrusted_store.md | 2 +- ...-attempted_credential_dump_from_registry_via_reg_exe.md | 6 +++--- docs/_posts/2021-09-16-bits_job_persistence.md | 2 +- docs/_posts/2021-09-16-bitsadmin_download_file.md | 2 +- ...-16-creation_of_shadow_copy_with_wmic_and_powershell.md | 4 ++-- ...credential_dumping_via_copy_command_from_shadow_copy.md | 4 ++-- ...-09-16-credential_dumping_via_symlink_to_shadow_copy.md | 4 ++-- docs/_posts/2021-09-16-detect_html_help_renamed.md | 2 +- .../2021-09-16-detect_html_help_url_in_command_line.md | 2 +- ...-16-detect_html_help_using_infotech_storage_handlers.md | 2 +- .../_posts/2021-09-16-detect_mshta_inline_hta_execution.md | 2 +- docs/_posts/2021-09-16-detect_mshta_renamed.md | 2 +- docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md | 2 +- .../2021-09-16-detect_psexec_with_accepteula_flag.md | 2 +- docs/_posts/2021-09-16-detect_renamed_7-zip.md | 2 +- docs/_posts/2021-09-16-detect_renamed_psexec.md | 2 +- docs/_posts/2021-09-16-detect_renamed_rclone.md | 2 +- docs/_posts/2021-09-16-detect_renamed_winrar.md | 2 +- docs/_posts/2021-09-16-dump_lsass_via_procdump.md | 2 +- docs/_posts/2021-09-16-local_account_discovery_with_net.md | 2 +- .../_posts/2021-09-16-local_account_discovery_with_wmic.md | 2 +- docs/_posts/2021-09-16-office_product_spawning_wmic.md | 2 +- docs/_posts/2021-09-16-processes_launching_netsh.md | 2 +- ...1-09-20-detect_regasm_with_no_command_line_arguments.md | 2 +- ...-09-20-detect_regsvcs_with_no_command_line_arguments.md | 2 +- ...20-office_document_spawned_child_process_to_download.md | 2 +- ...1-09-20-suspicious_dllhost_no_command_line_arguments.md | 2 +- ...-09-20-suspicious_gpupdate_no_command_line_arguments.md | 4 ++-- ...-09-20-suspicious_microsoft_workflow_compiler_rename.md | 4 ++-- ...-09-20-suspicious_rundll32_no_command_line_arguments.md | 2 +- ...picious_searchprotocolhost_no_command_line_arguments.md | 2 +- ...2021-09-21-remcos_rat_file_creation_in_remcos_folder.md | 2 +- docs/_posts/2021-09-27-change_default_file_association.md | 2 +- .../2021-09-27-logon_script_event_trigger_execution.md | 2 +- .../2021-09-27-screensaver_event_trigger_execution.md | 2 +- .../2021-09-28-print_processor_registry_autostart.md | 2 +- docs/_posts/2021-09-29-verclsid_clsid_execution.md | 4 ++-- .../2021-10-01-vbscript_execution_using_wscript_app.md | 2 +- ...1-10-04-msbuild_suspicious_spawned_by_script_process.md | 2 +- ...-10-04-regsvr32_silent_and_install_param_dll_loading.md | 4 ++-- .../2021-10-05-malicious_inprocserver32_modification.md | 2 +- docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md | 2 +- docs/_posts/2021-10-05-rundll32_shimcache_flush.md | 2 +- docs/_posts/2021-10-05-suspicious_copy_on_system32.md | 4 ++-- docs/_posts/2021-10-05-winhlp32_spawning_a_process.md | 2 +- docs/_posts/2021-10-06-sdelete_application_execution.md | 2 +- ...21-10-06-wscript_or_cscript_suspicious_child_process.md | 2 +- docs/_posts/2021-10-11-suspicious_wevtutil_usage.md | 2 +- ...-dllhost_with_no_command_line_arguments_with_network.md | 2 +- ...rundll32_with_no_command_line_arguments_with_network.md | 2 +- ...searchprotocolhost_with_no_command_line_with_network.md | 2 +- ...0-14-serviceprincipalnames_discovery_with_powershell.md | 2 +- ...21-10-14-serviceprincipalnames_discovery_with_setspn.md | 2 +- docs/_posts/2021-10-18-disable_schedule_task.md | 2 +- .../2021-10-19-windows_curl_download_to_suspicious_path.md | 2 +- ...winevent_windows_task_scheduler_event_action_started.md | 2 +- .../2021-10-20-wmic_noninteractive_app_uninstallation.md | 2 +- docs/_posts/2021-11-03-windows_adfind_exe.md | 2 +- docs/_posts/2021-11-04-attacker_tools_on_endpoint.md | 2 +- ...2021-11-10-windows_curl_upload_to_remote_destination.md | 2 +- ...21-11-10-windows_service_creation_on_remote_endpoint.md | 2 +- ...-11-10-windows_service_initiation_on_remote_endpoint.md | 2 +- ...-11-remote_process_instantiation_via_winrm_and_winrs.md | 2 +- ...-scheduled_task_creation_on_remote_endpoint_using_at.md | 2 +- ...1-11-11-scheduled_task_initiation_on_remote_endpoint.md | 2 +- .../2021-11-11-schtasks_scheduling_job_on_remote_system.md | 2 +- docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md | 2 +- docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md | 2 +- docs/_posts/2021-11-12-firewall_allowed_program_enable.md | 2 +- ...2021-11-12-network_discovery_using_route_windows_app.md | 2 +- .../2021-11-12-remote_process_instantiation_via_wmi.md | 2 +- docs/_posts/2021-11-12-runas_execution_in_commandline.md | 2 +- .../2021-11-12-windows_installutil_credential_theft.md | 2 +- ...-11-12-windows_installutil_remote_network_connection.md | 2 +- .../2021-11-12-windows_installutil_uninstall_option.md | 2 +- ...12-windows_installutil_uninstall_option_with_network.md | 2 +- .../2021-11-12-windows_installutil_url_in_command_line.md | 2 +- ...remote_process_instantiation_via_dcom_and_powershell.md | 2 +- ...s_instantiation_via_dcom_and_powershell_script_block.md | 2 +- ...-remote_process_instantiation_via_wmi_and_powershell.md | 2 +- ...ss_instantiation_via_wmi_and_powershell_script_block.md | 2 +- docs/_posts/2021-11-15-windows_diskcryptor_usage.md | 2 +- ...emote_process_instantiation_via_winrm_and_powershell.md | 2 +- ..._instantiation_via_winrm_and_powershell_script_block.md | 2 +- docs/_posts/2021-11-17-windows_dism_remove_defender.md | 2 +- ...-executable_file_written_in_administrative_smb_share.md | 2 +- docs/_posts/2021-11-18-loading_of_dynwrapx_module.md | 2 +- ...11-19-system_info_gathering_using_dxdiag_application.md | 2 +- .../2021-11-22-possible_browser_pass_view_parameter.md | 2 +- .../2021-11-22-services_lolbas_execution_process_spawn.md | 2 +- .../2021-11-22-svchost_lolbas_execution_process_spawn.md | 2 +- ...windows_service_created_with_suspicious_service_path.md | 2 +- ...021-11-22-windows_service_created_within_public_path.md | 2 +- .../2021-11-22-wmiprsve_lolbas_execution_process_spawn.md | 2 +- ...021-11-22-wsmprovhost_lolbas_execution_process_spawn.md | 2 +- .../2021-11-23-mmc_lolbas_execution_process_spawn.md | 2 +- .../2021-11-25-add_or_set_windows_defender_exclusion.md | 2 +- ...11-25-powershell_windows_defender_exclusion_commands.md | 2 +- docs/_posts/2021-11-29-detect_rclone_command-line_usage.md | 2 +- ...021-11-29-possible_lateral_movement_powershell_spawn.md | 2 +- .../2021-12-07-windows_raccine_scheduled_task_deletion.md | 2 +- .../2021-12-08-msi_module_loaded_by_non-system_binary.md | 2 +- docs/_posts/2021-12-10-curl_download_and_bash_execution.md | 2 +- docs/_posts/2021-12-11-wget_download_and_bash_execution.md | 2 +- docs/_posts/2021-12-13-linux_java_spawning_shell.md | 4 ++-- ...hell_jndi_payload_injection_with_outbound_connection.md | 2 +- ...und_network_connection_from_java_using_default_ports.md | 2 +- docs/_posts/2021-12-13-windows_java_spawning_shells.md | 2 +- ...1-12-17-linux_add_files_in_known_crontab_directories.md | 2 +- .../2021-12-17-linux_at_allow_config_file_creation.md | 2 +- docs/_posts/2021-12-17-linux_at_application_execution.md | 2 +- docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md | 2 +- ...inux_possible_append_command_to_at_allow_config_file.md | 2 +- ...ssible_append_cronjob_entry_on_existing_cronjob_file.md | 2 +- ...2-17-linux_possible_cronjob_modification_with_editor.md | 2 +- ...021-12-20-linux_file_creation_in_init_boot_directory.md | 2 +- .../2021-12-20-linux_file_creation_in_profile_directory.md | 2 +- ...linux_possible_append_command_to_profile_config_file.md | 2 +- ...2-20-linux_service_file_created_in_systemd_directory.md | 2 +- docs/_posts/2021-12-20-linux_service_restarted.md | 2 +- docs/_posts/2021-12-20-linux_service_started_or_enabled.md | 2 +- docs/_posts/2021-12-21-linux_add_user_account.md | 2 +- docs/_posts/2021-12-21-linux_change_file_owner_to_root.md | 2 +- .../2021-12-21-linux_nopasswd_entry_in_sudoers_file.md | 2 +- docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md | 2 +- .../_posts/2021-12-21-linux_setuid_using_setcap_utility.md | 2 +- docs/_posts/2021-12-21-linux_visudo_utility_execution.md | 2 +- ...-12-22-linux_file_created_in_kernel_driver_directory.md | 2 +- ...2-22-linux_insert_kernel_module_using_insmod_utility.md | 2 +- ...2-linux_install_kernel_module_using_modprobe_utility.md | 2 +- .../2021-12-22-linux_preload_hijack_library_calls.md | 2 +- ...021-12-23-linux_common_process_for_elevation_control.md | 2 +- docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md | 2 +- docs/_posts/2022-01-04-linux_sudo_or_su_execution.md | 2 +- docs/_posts/2022-01-05-linux_doas_conf_file_creation.md | 2 +- docs/_posts/2022-01-05-linux_doas_tool_execution.md | 2 +- ...2022-01-10-linux_possible_access_to_credential_files.md | 2 +- .../2022-01-10-linux_possible_access_to_sudoers_file.md | 2 +- ..._possible_access_or_modification_of_sshd_config_file.md | 2 +- .../2022-01-11-linux_possible_ssh_key_file_creation.md | 2 +- ...-powershell_-_connect_to_internet_with_hidden_window.md | 2 +- ...01-12-windows_hunting_system_account_targeting_lsass.md | 2 +- ...022-01-12-windows_non-system_account_targeting_lsass.md | 2 +- ...2022-01-14-potentially_malicious_code_on_commandline.md | 2 +- .../2022-01-18-cmd_carry_out_string_command_parameter.md | 4 ++-- ...-18-impacket_lateral_movement_commandline_parameters.md | 2 +- ...01-18-malicious_powershell_process_-_encoded_command.md | 2 +- ...uspicious_process_dns_query_known_abuse_web_services.md | 2 +- ...2022-01-19-suspicious_process_with_discord_dns_query.md | 2 +- ...022-01-19-windows_dotnet_binary_in_non_standard_path.md | 2 +- .../2022-01-19-windows_installutil_in_non_standard_path.md | 2 +- ...-01-20-excessive_file_deletion_in_windefender_folder.md | 2 +- docs/_posts/2022-01-20-ping_sleep_batch_command.md | 4 ++-- ...2-01-20-powershell_remove_windows_defender_directory.md | 2 +- docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md | 2 +- docs/_posts/2022-01-24-windows_nirsoft_utilities.md | 2 +- .../2022-01-27-windows_possible_credential_dumping.md | 2 +- .../_posts/2022-01-28-linux_pkexec_privilege_escalation.md | 2 +- 522 files changed, 558 insertions(+), 553 deletions(-) diff --git a/bin/doc_gen.py b/bin/doc_gen.py index 87d1dd247d..cab0cdf6f6 100644 --- a/bin/doc_gen.py +++ b/bin/doc_gen.py @@ -340,7 +340,6 @@ def generate_doc_detections(REPO_PATH, OUTPUT_DIR, TEMPLATE_PATH, attack, messag for macro in detection_yaml['macros']: if 'lookups' in macro: for macro_lookup in macro['lookups']: - print(macro_lookup) detection_lookups.append(macro_lookup) # now any other search lookups additional_detection_lookups = parse_and_add_lookups(detection_yaml['search'], lookups) @@ -349,6 +348,12 @@ def generate_doc_detections(REPO_PATH, OUTPUT_DIR, TEMPLATE_PATH, attack, messag detection_lookups.append(lookup) detection_yaml['lookups'] = detection_lookups detection_yaml['lookups'] = detection_lookups + + # sort macros and lookups + sorted_macros = sorted(detection_yaml['macros'], key=lambda i: i['name']) + detection_yaml['macros'] = sorted_macros + sorted_lookups = sorted(detection_yaml['lookups'], key=lambda i: i['name']) + detection_yaml['lookups'] = sorted_lookups # grab the kind detection_yaml['kind'] = manifest_file.split('/')[-2] diff --git a/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md b/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md index 45a30d6c5e..867f97014a 100644 --- a/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md +++ b/docs/_posts/2017-09-12-detect_new_login_attempts_to_routers.md @@ -45,8 +45,8 @@ The search queries the authentication logs for assets that are categorized as ro #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_new_login_attempts_to_routers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md b/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md index 134e7703af..4e07cfd05b 100644 --- a/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md +++ b/docs/_posts/2017-09-15-no_windows_updates_in_a_time_frame.md @@ -48,8 +48,8 @@ This search looks for Windows endpoints that have not generated an event indicat #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `no_windows_updates_in_a_time_frame_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md b/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md index 1342316602..fdd00b3fba 100644 --- a/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md +++ b/docs/_posts/2017-09-19-email_attachments_with_lots_of_spaces.md @@ -46,8 +46,8 @@ Attackers often use spaces as a means to obfuscate an attachment's file exte #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `email_attachments_with_lots_of_spaces_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md b/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md index 30e50155fa..234e37608b 100644 --- a/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md +++ b/docs/_posts/2017-09-23-detect_attackers_scanning_for_vulnerable_jboss_servers.md @@ -52,8 +52,8 @@ This search looks for specific GET or HEAD requests to web servers that are indi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_attackers_scanning_for_vulnerable_jboss_servers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md b/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md index 630f27a109..b20a46610e 100644 --- a/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md +++ b/docs/_posts/2017-09-23-detect_malicious_requests_to_exploit_jboss_servers.md @@ -45,8 +45,8 @@ This search is used to detect malicious HTTP requests crafted to exploit jmx-con #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_malicious_requests_to_exploit_jboss_servers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md b/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md index 8eb143eec5..4f05ebdfd7 100644 --- a/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md +++ b/docs/_posts/2017-09-23-monitor_web_traffic_for_brand_abuse.md @@ -44,8 +44,8 @@ This search looks for Web requests to faux domains similar to the one that you w #### Macros The SPL above uses the following Macros: * [brand_abuse_web](https://github.com/splunk/security_content/blob/develop/macros/brand_abuse_web.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `monitor_web_traffic_for_brand_abuse_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md b/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md index 0978932cd5..d339ae9964 100644 --- a/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md +++ b/docs/_posts/2018-01-05-monitor_email_for_brand_abuse.md @@ -48,8 +48,8 @@ This search looks for emails claiming to be sent from a domain similar to one th #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `monitor_email_for_brand_abuse_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md b/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md index 3e4597b536..d4da8870de 100644 --- a/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md +++ b/docs/_posts/2018-06-01-detect_large_outbound_icmp_packets.md @@ -53,8 +53,8 @@ This search looks for outbound ICMP packets with a packet size larger than 1,000 #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_large_outbound_icmp_packets_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md b/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md index df5be71e28..9c8bb48b5e 100644 --- a/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md +++ b/docs/_posts/2018-06-28-detect_s3_access_from_a_new_ip.md @@ -59,8 +59,8 @@ This search looks at S3 bucket-access logs and detects new or previously unseen #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [aws_s3_accesslogs](https://github.com/splunk/security_content/blob/develop/macros/aws_s3_accesslogs.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_s3_access_from_a_new_ip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md b/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md index 19d4057454..9036fdc4ca 100644 --- a/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md +++ b/docs/_posts/2018-10-23-wmi_permanent_event_subscription.md @@ -54,8 +54,8 @@ This search looks for the creation of WMI permanent event subscriptions. #### Macros The SPL above uses the following Macros: -* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) Note that `wmi_permanent_event_subscription_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md b/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md index 87adcb75de..c03fdffb58 100644 --- a/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md +++ b/docs/_posts/2018-10-23-wmi_temporary_event_subscription.md @@ -53,8 +53,8 @@ This search looks for the creation of WMI temporary event subscriptions. #### Macros The SPL above uses the following Macros: -* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wmi](https://github.com/splunk/security_content/blob/develop/macros/wmi.yml) Note that `wmi_temporary_event_subscription_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-03-remote_wmi_command_attempt.md b/docs/_posts/2018-12-03-remote_wmi_command_attempt.md index 928a037227..1aa0a18bd1 100644 --- a/docs/_posts/2018-12-03-remote_wmi_command_attempt.md +++ b/docs/_posts/2018-12-03-remote_wmi_command_attempt.md @@ -51,8 +51,8 @@ The following analytic identifies usage of `wmic.exe` spawning a local or remote #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_wmi_command_attempt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-03-usn_journal_deletion.md b/docs/_posts/2018-12-03-usn_journal_deletion.md index b065c05f18..829667578b 100644 --- a/docs/_posts/2018-12-03-usn_journal_deletion.md +++ b/docs/_posts/2018-12-03-usn_journal_deletion.md @@ -51,8 +51,8 @@ The fsutil.exe application is a legitimate Windows utility used to perform tasks #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `usn_journal_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-06-suspicious_java_classes.md b/docs/_posts/2018-12-06-suspicious_java_classes.md index 98109f433a..c2980bf781 100644 --- a/docs/_posts/2018-12-06-suspicious_java_classes.md +++ b/docs/_posts/2018-12-06-suspicious_java_classes.md @@ -44,8 +44,8 @@ This search looks for suspicious Java classes that are often used to exploit rem #### Macros The SPL above uses the following Macros: -* [stream_http](https://github.com/splunk/security_content/blob/develop/macros/stream_http.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [stream_http](https://github.com/splunk/security_content/blob/develop/macros/stream_http.yml) Note that `suspicious_java_classes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-14-file_with_samsam_extension.md b/docs/_posts/2018-12-14-file_with_samsam_extension.md index 05d51efb4c..2a876bf05c 100644 --- a/docs/_posts/2018-12-14-file_with_samsam_extension.md +++ b/docs/_posts/2018-12-14-file_with_samsam_extension.md @@ -43,8 +43,8 @@ The search looks for file writes with extensions consistent with a SamSam ransom #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `file_with_samsam_extension_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2018-12-14-samsam_test_file_write.md b/docs/_posts/2018-12-14-samsam_test_file_write.md index f053d44c0e..69b63fdb65 100644 --- a/docs/_posts/2018-12-14-samsam_test_file_write.md +++ b/docs/_posts/2018-12-14-samsam_test_file_write.md @@ -50,8 +50,8 @@ The search looks for a file named "test.txt" written to the windows syst #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `samsam_test_file_write_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md b/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md index 64615ba5a4..bb38800e84 100644 --- a/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md +++ b/docs/_posts/2019-04-01-web_servers_executing_suspicious_processes.md @@ -52,8 +52,8 @@ This search looks for suspicious processes on all systems labeled as web servers #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `web_servers_executing_suspicious_processes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md b/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md index e86241d63b..dc08d49223 100644 --- a/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md +++ b/docs/_posts/2019-05-08-unusually_long_command_line_-_mltk.md @@ -48,8 +48,8 @@ Command lines that are extremely long may be indicative of malicious activity on #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `unusually_long_command_line_-_mltk_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-12-03-detect_credential_dumping_through_lsass_access.md b/docs/_posts/2019-12-03-detect_credential_dumping_through_lsass_access.md index 646394fd44..d8cadb9742 100644 --- a/docs/_posts/2019-12-03-detect_credential_dumping_through_lsass_access.md +++ b/docs/_posts/2019-12-03-detect_credential_dumping_through_lsass_access.md @@ -53,8 +53,8 @@ This search looks for reading lsass memory consistent with credential dumping. #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `detect_credential_dumping_through_lsass_access_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-12-03-detect_mimikatz_using_loaded_images.md b/docs/_posts/2019-12-03-detect_mimikatz_using_loaded_images.md index 1f2ac999e1..17935af9b1 100644 --- a/docs/_posts/2019-12-03-detect_mimikatz_using_loaded_images.md +++ b/docs/_posts/2019-12-03-detect_mimikatz_using_loaded_images.md @@ -54,8 +54,8 @@ This search looks for reading loaded Images unique to credential dumping with Mi #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `detect_mimikatz_using_loaded_images_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-12-06-access_lsass_memory_for_dump_creation.md b/docs/_posts/2019-12-06-access_lsass_memory_for_dump_creation.md index 1d21b9c7b0..57f9544a47 100644 --- a/docs/_posts/2019-12-06-access_lsass_memory_for_dump_creation.md +++ b/docs/_posts/2019-12-06-access_lsass_memory_for_dump_creation.md @@ -53,8 +53,8 @@ Detect memory dumping of the LSASS process. #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `access_lsass_memory_for_dump_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-12-06-create_remote_thread_into_lsass.md b/docs/_posts/2019-12-06-create_remote_thread_into_lsass.md index c8967f31e2..f5c753564c 100644 --- a/docs/_posts/2019-12-06-create_remote_thread_into_lsass.md +++ b/docs/_posts/2019-12-06-create_remote_thread_into_lsass.md @@ -53,8 +53,8 @@ Detect remote thread creation into LSASS consistent with credential dumping. #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `create_remote_thread_into_lsass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2019-12-10-creation_of_shadow_copy.md b/docs/_posts/2019-12-10-creation_of_shadow_copy.md index a57c715b18..b9329febf9 100644 --- a/docs/_posts/2019-12-10-creation_of_shadow_copy.md +++ b/docs/_posts/2019-12-10-creation_of_shadow_copy.md @@ -54,8 +54,8 @@ Monitor for signs that Vssadmin or Wmic has been used to create a shadow copy. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `creation_of_shadow_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md b/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md index 522bb56ee4..f26b7a1c45 100644 --- a/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md +++ b/docs/_posts/2020-01-22-dns_query_length_outliers_-_mltk.md @@ -63,8 +63,8 @@ This search allows you to identify DNS requests that are unusually large for the #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dns_query_length_outliers_-_mltk_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-02-03-creation_of_lsass_dump_with_taskmgr.md b/docs/_posts/2020-02-03-creation_of_lsass_dump_with_taskmgr.md index c712154c68..3a48814b20 100644 --- a/docs/_posts/2020-02-03-creation_of_lsass_dump_with_taskmgr.md +++ b/docs/_posts/2020-02-03-creation_of_lsass_dump_with_taskmgr.md @@ -53,8 +53,8 @@ Detect the hands on keyboard behavior of Windows Task Manager creating a process #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `creation_of_lsass_dump_with_taskmgr_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-02-07-macos_-_re-opened_applications.md b/docs/_posts/2020-02-07-macos_-_re-opened_applications.md index bd76cad872..6da38f2d96 100644 --- a/docs/_posts/2020-02-07-macos_-_re-opened_applications.md +++ b/docs/_posts/2020-02-07-macos_-_re-opened_applications.md @@ -43,8 +43,8 @@ This search looks for processes referencing the plist files that determine which #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `macos_-_re-opened_applications_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md b/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md index 90b383e6dd..a0be6cc28a 100644 --- a/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md +++ b/docs/_posts/2020-02-21-dump_lsass_via_comsvcs_dll.md @@ -55,8 +55,8 @@ Detect the usage of comsvcs.dll for dumping the lsass process. #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dump_lsass_via_comsvcs_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md b/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md index d9cee3116f..518ce60f00 100644 --- a/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md +++ b/docs/_posts/2020-03-16-child_processes_of_spoolsv_exe.md @@ -53,8 +53,8 @@ This search looks for child processes of spoolsv.exe. This activity is associate #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `child_processes_of_spoolsv_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-detect_rare_executables.md b/docs/_posts/2020-03-16-detect_rare_executables.md index 6852682986..2a8b3abe7c 100644 --- a/docs/_posts/2020-03-16-detect_rare_executables.md +++ b/docs/_posts/2020-03-16-detect_rare_executables.md @@ -51,8 +51,8 @@ This search will return a table of rare processes, the names of the systems runn #### Macros The SPL above uses the following Macros: * [filter_rare_process_allow_list](https://github.com/splunk/security_content/blob/develop/macros/filter_rare_process_allow_list.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_rare_executables_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-process_execution_via_wmi.md b/docs/_posts/2020-03-16-process_execution_via_wmi.md index 7af419bebf..9496fd07bd 100644 --- a/docs/_posts/2020-03-16-process_execution_via_wmi.md +++ b/docs/_posts/2020-03-16-process_execution_via_wmi.md @@ -50,8 +50,8 @@ The following analytic identifies `WmiPrvSE.exe` spawning a process. This typica #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `process_execution_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-03-16-script_execution_via_wmi.md b/docs/_posts/2020-03-16-script_execution_via_wmi.md index a218eaf7c4..298fbb1753 100644 --- a/docs/_posts/2020-03-16-script_execution_via_wmi.md +++ b/docs/_posts/2020-03-16-script_execution_via_wmi.md @@ -50,8 +50,8 @@ This search looks for scripts launched via WMI. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `script_execution_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md b/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md index 12266afdf0..8ac48ea503 100644 --- a/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md +++ b/docs/_posts/2020-05-20-first_time_seen_child_process_of_zoom.md @@ -54,9 +54,9 @@ This search looks for child processes spawned by zoom.exe or zoom.us that has no #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [previously_seen_zoom_child_processes_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_zoom_child_processes_window.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `first_time_seen_child_process_of_zoom_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md b/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md index f91f4ffbdd..8a917ffe3e 100644 --- a/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md +++ b/docs/_posts/2020-07-03-detect_path_interception_by_creation_of_program_exe.md @@ -65,8 +65,8 @@ The detection Detect Path Interception By Creation Of program exe is detecting t #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_path_interception_by_creation_of_program_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-06-short_lived_windows_accounts.md b/docs/_posts/2020-07-06-short_lived_windows_accounts.md index d7890e8875..4aed66bffe 100644 --- a/docs/_posts/2020-07-06-short_lived_windows_accounts.md +++ b/docs/_posts/2020-07-06-short_lived_windows_accounts.md @@ -57,8 +57,8 @@ This search detects accounts that were created and deleted in a short time perio #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `short_lived_windows_accounts_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-06-windows_event_log_cleared.md b/docs/_posts/2020-07-06-windows_event_log_cleared.md index ba93c3217a..bb7983c26b 100644 --- a/docs/_posts/2020-07-06-windows_event_log_cleared.md +++ b/docs/_posts/2020-07-06-windows_event_log_cleared.md @@ -52,9 +52,9 @@ The following analytic utilizes Windows Security Event ID 1102 or System log eve #### Macros The SPL above uses the following Macros: +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_event_log_cleared_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-07-remote_desktop_network_traffic.md b/docs/_posts/2020-07-07-remote_desktop_network_traffic.md index fba39f651e..8aad85046a 100644 --- a/docs/_posts/2020-07-07-remote_desktop_network_traffic.md +++ b/docs/_posts/2020-07-07-remote_desktop_network_traffic.md @@ -56,8 +56,8 @@ This search looks for network traffic on TCP/3389, the default port used by remo #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_desktop_network_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-08-detect_new_local_admin_account.md b/docs/_posts/2020-07-08-detect_new_local_admin_account.md index b86d96734e..6738568aaf 100644 --- a/docs/_posts/2020-07-08-detect_new_local_admin_account.md +++ b/docs/_posts/2020-07-08-detect_new_local_admin_account.md @@ -54,8 +54,8 @@ This search looks for newly created accounts that have been elevated to local ad #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `detect_new_local_admin_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-attempt_to_stop_security_service.md b/docs/_posts/2020-07-21-attempt_to_stop_security_service.md index 2315a8604d..d440d82b46 100644 --- a/docs/_posts/2020-07-21-attempt_to_stop_security_service.md +++ b/docs/_posts/2020-07-21-attempt_to_stop_security_service.md @@ -57,8 +57,8 @@ This search looks for attempts to stop security-related services on the endpoint #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `attempt_to_stop_security_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md b/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md index ded151b76e..a7b95cad3c 100644 --- a/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md +++ b/docs/_posts/2020-07-21-detect_excessive_user_account_lockouts.md @@ -62,8 +62,8 @@ This search detects user accounts that have been locked out a relatively high nu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_excessive_user_account_lockouts_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md b/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md index fad3ba22f2..1a67653342 100644 --- a/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md +++ b/docs/_posts/2020-07-21-detect_outbound_smb_traffic.md @@ -56,8 +56,8 @@ This search looks for outbound SMB connections made by hosts within your network #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_outbound_smb_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md b/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md index 83dfd0fc3b..d4d162ee5c 100644 --- a/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md +++ b/docs/_posts/2020-07-21-detect_outlook_exe_writing_a_zip_file.md @@ -66,8 +66,8 @@ This search looks for execution of process `outlook.exe` where the process is wr #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_outlook_exe_writing_a_zip_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md b/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md index 124b35489e..157b56b014 100644 --- a/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md +++ b/docs/_posts/2020-07-21-detect_use_of_cmd_exe_to_launch_script_interpreters.md @@ -54,8 +54,8 @@ This search looks for the execution of the cscript.exe or wscript.exe processes, #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_use_of_cmd_exe_to_launch_script_interpreters_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md b/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md index 692adf19cd..2d2f485cf8 100644 --- a/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md +++ b/docs/_posts/2020-07-21-detection_of_tools_built_by_nirsoft.md @@ -53,8 +53,8 @@ This search looks for specific command-line arguments that may indicate the exec #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detection_of_tools_built_by_nirsoft_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md b/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md index e3c9fe324a..a672c04359 100644 --- a/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md +++ b/docs/_posts/2020-07-21-email_files_written_outside_of_the_outlook_directory.md @@ -56,8 +56,8 @@ The search looks at the change-analysis data model and detects email files creat #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `email_files_written_outside_of_the_outlook_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md b/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md index cff9613794..4c3da77b2a 100644 --- a/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md +++ b/docs/_posts/2020-07-21-first_time_seen_running_windows_service.md @@ -56,8 +56,8 @@ This search looks for the first and last time a Windows service is seen running #### Macros The SPL above uses the following Macros: -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [previously_seen_windows_services_window](https://github.com/splunk/security_content/blob/develop/macros/previously_seen_windows_services_window.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) Note that `first_time_seen_running_windows_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md b/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md index 23df537e8e..bcd70dc24d 100644 --- a/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md +++ b/docs/_posts/2020-07-21-hiding_files_and_directories_with_attrib_exe.md @@ -54,8 +54,8 @@ Attackers leverage an existing Windows binary, attrib.exe, to mark specific as h #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `hiding_files_and_directories_with_attrib_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md b/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md index 2288ee611e..9c6332f9c0 100644 --- a/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md +++ b/docs/_posts/2020-07-21-malicious_powershell_process_-_execution_policy_bypass.md @@ -55,8 +55,8 @@ This search looks for PowerShell processes started with parameters used to bypas #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `malicious_powershell_process_-_execution_policy_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md b/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md index b83a16a9e1..f30ef06414 100644 --- a/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md +++ b/docs/_posts/2020-07-21-overwriting_accessibility_binaries.md @@ -56,8 +56,8 @@ Microsoft Windows contains accessibility features that can be launched with a ke #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `overwriting_accessibility_binaries_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md b/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md index 63e7d6ee79..cf4ffb1f22 100644 --- a/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md +++ b/docs/_posts/2020-07-21-prohibited_network_traffic_allowed.md @@ -54,8 +54,8 @@ This search looks for network traffic defined by port and transport layer protoc #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `prohibited_network_traffic_allowed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-protocol_or_port_mismatch.md b/docs/_posts/2020-07-21-protocol_or_port_mismatch.md index ee72ce5b6c..959c7450e1 100644 --- a/docs/_posts/2020-07-21-protocol_or_port_mismatch.md +++ b/docs/_posts/2020-07-21-protocol_or_port_mismatch.md @@ -56,8 +56,8 @@ This search looks for network traffic on common ports where a higher layer proto #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `protocol_or_port_mismatch_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md b/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md index ccd93b4db1..f8b0758ffe 100644 --- a/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md +++ b/docs/_posts/2020-07-21-remote_desktop_process_running_on_system.md @@ -56,8 +56,8 @@ This search looks for the remote desktop process mstsc.exe running on systems up #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_desktop_process_running_on_system_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md b/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md index a54fb51100..af7f4c678d 100644 --- a/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md +++ b/docs/_posts/2020-07-21-sc_exe_manipulating_windows_services.md @@ -56,8 +56,8 @@ This search looks for arguments to sc.exe indicating the creation or modificatio #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `sc_exe_manipulating_windows_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md b/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md index b9ef99ed0e..fbcd94aa82 100644 --- a/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md +++ b/docs/_posts/2020-07-22-suspicious_email_attachment_extensions.md @@ -57,9 +57,9 @@ This search looks for emails that have attachments with suspicious file extensio #### Macros The SPL above uses the following Macros: -* [suspicious_email_attachments](https://github.com/splunk/security_content/blob/develop/macros/suspicious_email_attachments.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [suspicious_email_attachments](https://github.com/splunk/security_content/blob/develop/macros/suspicious_email_attachments.yml) Note that `suspicious_email_attachment_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-suspicious_reg_exe_process.md b/docs/_posts/2020-07-22-suspicious_reg_exe_process.md index 8fb5749084..e1d878bde6 100644 --- a/docs/_posts/2020-07-22-suspicious_reg_exe_process.md +++ b/docs/_posts/2020-07-22-suspicious_reg_exe_process.md @@ -58,8 +58,8 @@ This search looks for reg.exe being launched from a command prompt not started b #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_reg_exe_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-tor_traffic.md b/docs/_posts/2020-07-22-tor_traffic.md index a22c98ffff..fde28335a5 100644 --- a/docs/_posts/2020-07-22-tor_traffic.md +++ b/docs/_posts/2020-07-22-tor_traffic.md @@ -56,8 +56,8 @@ This search looks for network traffic identified as The Onion Router (TOR), a be #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `tor_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md b/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md index c08b088437..bf8e020066 100644 --- a/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md +++ b/docs/_posts/2020-07-22-unload_sysmon_filter_driver.md @@ -55,8 +55,8 @@ Attackers often disable security tools to avoid detection. This search looks for #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `unload_sysmon_filter_driver_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md b/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md index 199ace2b85..9ca3673fcc 100644 --- a/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md +++ b/docs/_posts/2020-07-28-detect_windows_dns_sigred_via_splunk_stream.md @@ -56,8 +56,8 @@ This search detects SIGRed via Splunk Stream. #### Macros The SPL above uses the following Macros: -* [stream_tcp](https://github.com/splunk/security_content/blob/develop/macros/stream_tcp.yml) * [stream_dns](https://github.com/splunk/security_content/blob/develop/macros/stream_dns.yml) +* [stream_tcp](https://github.com/splunk/security_content/blob/develop/macros/stream_tcp.yml) Note that `detect_windows_dns_sigred_via_splunk_stream_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md b/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md index f67ec9d79e..ac7e63f4a1 100644 --- a/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md +++ b/docs/_posts/2020-07-29-cloud_instance_modified_by_previously_unseen_user.md @@ -66,8 +66,8 @@ This search looks for cloud instances being modified by users who have not previ #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `cloud_instance_modified_by_previously_unseen_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-08-11-detect_arp_poisoning.md b/docs/_posts/2020-08-11-detect_arp_poisoning.md index c152a08958..13f3986a68 100644 --- a/docs/_posts/2020-08-11-detect_arp_poisoning.md +++ b/docs/_posts/2020-08-11-detect_arp_poisoning.md @@ -65,8 +65,8 @@ By enabling Dynamic ARP Inspection as a Layer 2 Security measure on the organiza #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_arp_poisoning_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md b/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md index 2ce6c3943d..5980c9d30a 100644 --- a/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md +++ b/docs/_posts/2020-08-11-detect_rogue_dhcp_server.md @@ -59,8 +59,8 @@ By enabling DHCP Snooping as a Layer 2 Security measure on the organization' #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_rogue_dhcp_server_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md b/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md index ef7c149c69..a6d08ea3f2 100644 --- a/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md +++ b/docs/_posts/2020-09-16-create_or_delete_windows_shares_using_net_exe.md @@ -56,8 +56,8 @@ This search looks for the creation or deletion of hidden shares using net.exe. #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `create_or_delete_windows_shares_using_net_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md b/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md index cab3e1de0b..7453e7282e 100644 --- a/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md +++ b/docs/_posts/2020-10-15-detect_activity_related_to_pass_the_hash_attacks.md @@ -55,8 +55,8 @@ This search looks for specific authentication events from the Windows Security E #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `detect_activity_related_to_pass_the_hash_attacks_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md b/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md index 927835f1da..a797777947 100644 --- a/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md +++ b/docs/_posts/2020-10-16-kerberoasting_spn_request_with_rc4_encryption.md @@ -52,8 +52,8 @@ This search detects a potential kerberoasting attack via service principal name #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `kerberoasting_spn_request_with_rc4_encryption_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md b/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md index 082b964421..30d8285d5b 100644 --- a/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md +++ b/docs/_posts/2020-10-28-detect_ipv6_network_infrastructure_threats.md @@ -67,8 +67,8 @@ By enabling IPv6 First Hop Security as a Layer 2 Security measure on the organiz #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_ipv6_network_infrastructure_threats_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_port_security_violation.md b/docs/_posts/2020-10-28-detect_port_security_violation.md index c50ad696fe..ded6fc83e1 100644 --- a/docs/_posts/2020-10-28-detect_port_security_violation.md +++ b/docs/_posts/2020-10-28-detect_port_security_violation.md @@ -65,8 +65,8 @@ By enabling Port Security on a Cisco switch you can restrict input to an interfa #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_port_security_violation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_software_download_to_network_device.md b/docs/_posts/2020-10-28-detect_software_download_to_network_device.md index 4391c11cbe..8f5e118015 100644 --- a/docs/_posts/2020-10-28-detect_software_download_to_network_device.md +++ b/docs/_posts/2020-10-28-detect_software_download_to_network_device.md @@ -58,8 +58,8 @@ Adversaries may abuse netbooting to load an unauthorized network device operatin #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_software_download_to_network_device_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-10-28-detect_traffic_mirroring.md b/docs/_posts/2020-10-28-detect_traffic_mirroring.md index 1b648d977a..003ac70ed5 100644 --- a/docs/_posts/2020-10-28-detect_traffic_mirroring.md +++ b/docs/_posts/2020-10-28-detect_traffic_mirroring.md @@ -62,8 +62,8 @@ Adversaries may leverage traffic mirroring in order to automate data exfiltratio #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [cisco_networks](https://github.com/splunk/security_content/blob/develop/macros/cisco_networks.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_traffic_mirroring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-06-ryuk_test_files_detected.md b/docs/_posts/2020-11-06-ryuk_test_files_detected.md index 2351d756f9..cf3782464b 100644 --- a/docs/_posts/2020-11-06-ryuk_test_files_detected.md +++ b/docs/_posts/2020-11-06-ryuk_test_files_detected.md @@ -49,8 +49,8 @@ The search looks for files that contain the key word *Ryuk* under any folder in #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `ryuk_test_files_detected_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md b/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md index d164edfcc1..2657bf5f90 100644 --- a/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md +++ b/docs/_posts/2020-11-06-set_default_powershell_execution_policy_to_unrestricted_or_bypass.md @@ -54,8 +54,8 @@ Monitor for changes of the ExecutionPolicy in the registry to the values "un #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `set_default_powershell_execution_policy_to_unrestricted_or_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md b/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md index 135d0ff2f1..f3ad707faa 100644 --- a/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md +++ b/docs/_posts/2020-11-06-windows_security_account_manager_stopped.md @@ -49,8 +49,8 @@ The search looks for a Windows Security Account Manager (SAM) was stopped via co #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_security_account_manager_stopped_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-common_ransomware_extensions.md b/docs/_posts/2020-11-09-common_ransomware_extensions.md index a39a399a83..2475a86dc5 100644 --- a/docs/_posts/2020-11-09-common_ransomware_extensions.md +++ b/docs/_posts/2020-11-09-common_ransomware_extensions.md @@ -52,9 +52,9 @@ The search looks for file modifications with extensions commonly used by Ransomw #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [ransomware_extensions](https://github.com/splunk/security_content/blob/develop/macros/ransomware_extensions.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `common_ransomware_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-common_ransomware_notes.md b/docs/_posts/2020-11-09-common_ransomware_notes.md index 49fa8ac17f..3cb530adc6 100644 --- a/docs/_posts/2020-11-09-common_ransomware_notes.md +++ b/docs/_posts/2020-11-09-common_ransomware_notes.md @@ -52,8 +52,8 @@ The search looks for files created with names matching those typically used in r #### Macros The SPL above uses the following Macros: * [ransomware_notes](https://github.com/splunk/security_content/blob/develop/macros/ransomware_notes.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `common_ransomware_notes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-deleting_shadow_copies.md b/docs/_posts/2020-11-09-deleting_shadow_copies.md index b827e97043..f4526a1c69 100644 --- a/docs/_posts/2020-11-09-deleting_shadow_copies.md +++ b/docs/_posts/2020-11-09-deleting_shadow_copies.md @@ -50,8 +50,8 @@ The vssadmin.exe utility is used to interact with the Volume Shadow Copy Service #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `deleting_shadow_copies_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md b/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md index e972aff99c..f6cdcea037 100644 --- a/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md +++ b/docs/_posts/2020-11-09-detect_excessive_account_lockouts_from_endpoint.md @@ -62,8 +62,8 @@ This search identifies endpoints that have caused a relatively high number of ac #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_excessive_account_lockouts_from_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md b/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md index 5b7b5cb1a8..ae2b8d16e7 100644 --- a/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md +++ b/docs/_posts/2020-11-10-detect_processes_used_for_system_network_configuration_discovery.md @@ -54,9 +54,9 @@ This search looks for fast execution of processes used for system network config #### Macros The SPL above uses the following Macros: +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [system_network_configuration_discovery_tools](https://github.com/splunk/security_content/blob/develop/macros/system_network_configuration_discovery_tools.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_processes_used_for_system_network_configuration_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md b/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md index 439aa67cbf..3600b15dd1 100644 --- a/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md +++ b/docs/_posts/2020-11-18-execution_of_file_with_multiple_extensions.md @@ -54,8 +54,8 @@ This search looks for processes launched from files that have double extensions #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `execution_of_file_with_multiple_extensions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md b/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md index 9d5325b0ab..bd9de3e6b8 100644 --- a/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md +++ b/docs/_posts/2020-11-23-shim_database_installation_with_suspicious_parameters.md @@ -56,8 +56,8 @@ This search detects the process execution and arguments required to silently cre #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `shim_database_installation_with_suspicious_parameters_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md b/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md index f918645982..67facd573d 100644 --- a/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md +++ b/docs/_posts/2020-11-26-reg_exe_manipulating_windows_services_registry_keys.md @@ -58,8 +58,8 @@ The search looks for reg.exe modifying registry keys that define Windows service #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `reg_exe_manipulating_windows_services_registry_keys_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md b/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md index 0a07e59059..ff24cc057e 100644 --- a/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md +++ b/docs/_posts/2020-11-26-registry_keys_for_creating_shim_databases.md @@ -55,8 +55,8 @@ This search looks for registry activity associated with application compatibilit #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `registry_keys_for_creating_shim_databases_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md b/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md index 1ad60a9fd8..4ea2fd9f70 100644 --- a/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md +++ b/docs/_posts/2020-12-07-schtasks_used_for_forcing_a_reboot.md @@ -58,8 +58,8 @@ This search looks for flags passed to schtasks.exe on the command-line that indi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `schtasks_used_for_forcing_a_reboot_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-shim_database_file_creation.md b/docs/_posts/2020-12-08-shim_database_file_creation.md index b370f5651a..9cb77436c2 100644 --- a/docs/_posts/2020-12-08-shim_database_file_creation.md +++ b/docs/_posts/2020-12-08-shim_database_file_creation.md @@ -55,8 +55,8 @@ This search looks for shim database files being written to default directories. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `shim_database_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md b/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md index 1d719413ca..3ed544d810 100644 --- a/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md +++ b/docs/_posts/2020-12-08-single_letter_process_on_endpoint.md @@ -57,8 +57,8 @@ This search looks for process names that consist only of a single letter. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `single_letter_process_on_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md b/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md index 3d15bee34a..f082ac7ae8 100644 --- a/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md +++ b/docs/_posts/2020-12-08-system_processes_run_from_unexpected_locations.md @@ -57,9 +57,9 @@ During triage, review the parallel processes - what process moved the native Win #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [is_windows_system_file](https://github.com/splunk/security_content/blob/develop/macros/is_windows_system_file.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `system_processes_run_from_unexpected_locations_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-08-unusually_long_command_line.md b/docs/_posts/2020-12-08-unusually_long_command_line.md index d0147c8da9..e10ce8f2f4 100644 --- a/docs/_posts/2020-12-08-unusually_long_command_line.md +++ b/docs/_posts/2020-12-08-unusually_long_command_line.md @@ -47,8 +47,8 @@ Command lines that are extremely long may be indicative of malicious activity on #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `unusually_long_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-14-sunburst_correlation_dll_and_network_event.md b/docs/_posts/2020-12-14-sunburst_correlation_dll_and_network_event.md index 78ee1a5d5f..18c5cafaea 100644 --- a/docs/_posts/2020-12-14-sunburst_correlation_dll_and_network_event.md +++ b/docs/_posts/2020-12-14-sunburst_correlation_dll_and_network_event.md @@ -53,8 +53,8 @@ The malware sunburst will load the malicious dll by SolarWinds.BusinessLayerHost #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `sunburst_correlation_dll_and_network_event_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md b/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md index 374f59d94f..a27f4656cd 100644 --- a/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md +++ b/docs/_posts/2020-12-17-scheduled_task_deleted_or_created_via_cmd.md @@ -58,8 +58,8 @@ This search looks for flags passed to schtasks.exe on the command-line that indi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `scheduled_task_deleted_or_created_via_cmd_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md b/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md index e8eae5df9b..ed3f2af60d 100644 --- a/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md +++ b/docs/_posts/2020-12-21-bcdedit_failure_recovery_modification.md @@ -50,8 +50,8 @@ This search looks for flags passed to bcdedit.exe modifications to the built-in #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `bcdedit_failure_recovery_modification_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md b/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md index 42ffabd213..9cff0748ad 100644 --- a/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md +++ b/docs/_posts/2021-01-12-suspicious_microsoft_workflow_compiler_usage.md @@ -50,9 +50,9 @@ The following analytic identifies microsoft.workflow.compiler.exe usage. microso #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_microsoftworkflowcompiler](https://github.com/splunk/security_content/blob/develop/macros/process_microsoftworkflowcompiler.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_microsoft_workflow_compiler_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_msbuild_path.md b/docs/_posts/2021-01-12-suspicious_msbuild_path.md index 4fe3c6f325..d80ce55062 100644 --- a/docs/_posts/2021-01-12-suspicious_msbuild_path.md +++ b/docs/_posts/2021-01-12-suspicious_msbuild_path.md @@ -63,8 +63,8 @@ The following analytic identifies msbuild.exe executing from a non-standard path #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_msbuild_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_msbuild_rename.md b/docs/_posts/2021-01-12-suspicious_msbuild_rename.md index 96e04cbb2f..8385989040 100644 --- a/docs/_posts/2021-01-12-suspicious_msbuild_rename.md +++ b/docs/_posts/2021-01-12-suspicious_msbuild_rename.md @@ -63,8 +63,8 @@ The following analytic identifies renamed instances of msbuild.exe executing. Ms #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_msbuild_rename_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md b/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md index 783c6be761..97e3352761 100644 --- a/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md +++ b/docs/_posts/2021-01-12-suspicious_msbuild_spawn.md @@ -55,8 +55,8 @@ The following analytic identifies wmiprvse.exe spawning msbuild.exe. This behavi #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_msbuild_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-12-suspicious_mshta_child_process.md b/docs/_posts/2021-01-12-suspicious_mshta_child_process.md index 0dee3d917a..7ee6e8ee00 100644 --- a/docs/_posts/2021-01-12-suspicious_mshta_child_process.md +++ b/docs/_posts/2021-01-12-suspicious_mshta_child_process.md @@ -54,8 +54,8 @@ The following analytic identifies child processes spawning from "mshta.exe& #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_mshta_child_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md b/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md index d792892e5f..92e1219b1d 100644 --- a/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md +++ b/docs/_posts/2021-01-14-detect_hosts_connecting_to_dynamic_domain_providers.md @@ -51,8 +51,8 @@ Malicious actors often abuse legitimate Dynamic DNS services to host malicious p #### Macros The SPL above uses the following Macros: * [dynamic_dns_providers](https://github.com/splunk/security_content/blob/develop/macros/dynamic_dns_providers.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_hosts_connecting_to_dynamic_domain_providers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md b/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md index 65e7f491f9..cf26597d0f 100644 --- a/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md +++ b/docs/_posts/2021-01-19-malicious_powershell_process_with_obfuscation_techniques.md @@ -57,8 +57,8 @@ This search looks for PowerShell processes launched with arguments that have cha #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `malicious_powershell_process_with_obfuscation_techniques_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md b/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md index 1e4f03629d..599cf9fd29 100644 --- a/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md +++ b/docs/_posts/2021-01-20-detect_rundll32_inline_hta_execution.md @@ -55,8 +55,8 @@ The following analytic identifies "rundll32.exe" execution with inline p #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_rundll32_inline_hta_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-20-suspicious_mshta_spawn.md b/docs/_posts/2021-01-20-suspicious_mshta_spawn.md index b3e0bfb909..80bd26e56c 100644 --- a/docs/_posts/2021-01-20-suspicious_mshta_spawn.md +++ b/docs/_posts/2021-01-20-suspicious_mshta_spawn.md @@ -54,9 +54,9 @@ The following analytic identifies wmiprvse.exe spawning mshta.exe. This behavior #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_mshta_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md b/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md index 16ca9e12a5..5cdd4df6b9 100644 --- a/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md +++ b/docs/_posts/2021-01-22-wbadmin_delete_system_backups.md @@ -50,8 +50,8 @@ This search looks for flags passed to wbadmin.exe (Windows Backup Administrator #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wbadmin_delete_system_backups_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md b/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md index cf530df0cb..dfc4b51beb 100644 --- a/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md +++ b/docs/_posts/2021-01-25-nltest_domain_trust_discovery.md @@ -50,8 +50,8 @@ This search looks for the execution of `nltest.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `nltest_domain_trust_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md b/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md index d8e2eb5c1a..1de9b24b58 100644 --- a/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md +++ b/docs/_posts/2021-01-26-certutil_exe_certificate_extraction.md @@ -40,8 +40,8 @@ This search looks for arguments to certutil.exe indicating the manipulation or e #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `certutil_exe_certificate_extraction_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md b/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md index 149555c249..2bb9f1078f 100644 --- a/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md +++ b/docs/_posts/2021-01-28-detect_regsvr32_application_control_bypass.md @@ -55,9 +55,9 @@ Upon investigating, look for network connections to remote destinations (interna #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_regsvr32_application_control_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-28-ntdsutil_export_ntds.md b/docs/_posts/2021-01-28-ntdsutil_export_ntds.md index 7cb3c85c97..818c5b9538 100644 --- a/docs/_posts/2021-01-28-ntdsutil_export_ntds.md +++ b/docs/_posts/2021-01-28-ntdsutil_export_ntds.md @@ -56,8 +56,8 @@ This technique uses "Install from Media" (IFM), which will extract a cop #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `ntdsutil_export_ntds_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md b/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md index 8e831ac2a0..e8f27e3d78 100644 --- a/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md +++ b/docs/_posts/2021-01-28-suspicious_regsvr32_register_suspicious_path.md @@ -54,9 +54,9 @@ Adversaries may abuse Regsvr32.exe to proxy execution of malicious code by using #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_regsvr32_register_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md index 2507cf4991..63bdaeb27b 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_advpack.md @@ -55,8 +55,8 @@ The following analytic identifies rundll32.exe loading advpack.dll and ieadvpack #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_rundll32_application_control_bypass_-_advpack_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md index e2ed0e1c84..551faeaa90 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_setupapi.md @@ -55,8 +55,8 @@ The following analytic identifies rundll32.exe loading setupapi.dll and iesetupa #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_rundll32_application_control_bypass_-_setupapi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md index 56669a3be7..3210b16d24 100644 --- a/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md +++ b/docs/_posts/2021-02-04-detect_rundll32_application_control_bypass_-_syssetup.md @@ -55,8 +55,8 @@ The following analytic identifies rundll32.exe loading syssetup.dll by calling t #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_rundll32_application_control_bypass_-_syssetup_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-04-suspicious_rundll32_startw.md b/docs/_posts/2021-02-04-suspicious_rundll32_startw.md index 8a3469734c..1de93e1a54 100644 --- a/docs/_posts/2021-02-04-suspicious_rundll32_startw.md +++ b/docs/_posts/2021-02-04-suspicious_rundll32_startw.md @@ -55,8 +55,8 @@ The following analytic identifies rundll32.exe executing a DLL function name, St #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_rundll32_startw_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md b/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md index 5f4a7f9ac3..549a698978 100644 --- a/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md +++ b/docs/_posts/2021-02-09-suspicious_rundll32_dllregisterserver.md @@ -55,8 +55,8 @@ The following analytic identifies rundll32.exe using dllregisterserver on the co #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_rundll32_dllregisterserver_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md b/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md index 8c6ba6eddb..789f5db52b 100644 --- a/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md +++ b/docs/_posts/2021-02-11-detect_html_help_spawn_child_process.md @@ -54,8 +54,8 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_html_help_spawn_child_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md b/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md index f61960f475..d0f916d569 100644 --- a/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md +++ b/docs/_posts/2021-02-12-detect_regasm_spawning_a_process.md @@ -54,8 +54,8 @@ The following analytic identifies regasm.exe spawning a process. This particular #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_regasm_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md b/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md index 96ed434ee1..be153ef052 100644 --- a/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md +++ b/docs/_posts/2021-02-12-detect_regsvcs_spawning_a_process.md @@ -54,8 +54,8 @@ The following analytic identifies regsvcs.exe spawning a process. This particula #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_regsvcs_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-16-detect_regasm_with_network_connection.md b/docs/_posts/2021-02-16-detect_regasm_with_network_connection.md index 7b106fae3b..3665d519a8 100644 --- a/docs/_posts/2021-02-16-detect_regasm_with_network_connection.md +++ b/docs/_posts/2021-02-16-detect_regasm_with_network_connection.md @@ -53,8 +53,8 @@ The following analytic identifies regasm.exe with a network connection to a publ #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `detect_regasm_with_network_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-16-detect_regsvcs_with_network_connection.md b/docs/_posts/2021-02-16-detect_regsvcs_with_network_connection.md index 335ad95718..4e20253732 100644 --- a/docs/_posts/2021-02-16-detect_regsvcs_with_network_connection.md +++ b/docs/_posts/2021-02-16-detect_regsvcs_with_network_connection.md @@ -53,8 +53,8 @@ The following analytic identifies Regsvcs.exe with a network connection to a pub #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `detect_regsvcs_with_network_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-cobalt_strike_named_pipes.md b/docs/_posts/2021-02-22-cobalt_strike_named_pipes.md index 3c204bcbda..cae86a69bd 100644 --- a/docs/_posts/2021-02-22-cobalt_strike_named_pipes.md +++ b/docs/_posts/2021-02-22-cobalt_strike_named_pipes.md @@ -51,8 +51,8 @@ Upon triage, review the process performing the named pipe. If it is explorer.exe #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `cobalt_strike_named_pipes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-suspicious_curl_network_connection.md b/docs/_posts/2021-02-22-suspicious_curl_network_connection.md index cb31c2d663..5428e35ec1 100644 --- a/docs/_posts/2021-02-22-suspicious_curl_network_connection.md +++ b/docs/_posts/2021-02-22-suspicious_curl_network_connection.md @@ -52,8 +52,8 @@ The following analytic identifies the use of a curl contacting suspicious remote #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_curl_network_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md b/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md index 9aeec4d031..765ccdd1f7 100644 --- a/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md +++ b/docs/_posts/2021-02-22-suspicious_plistbuddy_usage.md @@ -65,8 +65,8 @@ Upon triage, capture the property list file being written to disk and review for #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_plistbuddy_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md b/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md index 683664f1aa..121d82b08f 100644 --- a/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md +++ b/docs/_posts/2021-02-22-suspicious_sqlite3_lsquarantine_behavior.md @@ -52,8 +52,8 @@ The following analytic identifies the use of a SQLite3 querying the MacOS prefer #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_sqlite3_lsquarantine_behavior_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-any_powershell_downloadfile.md b/docs/_posts/2021-03-01-any_powershell_downloadfile.md index c3a0cde376..0bef56449e 100644 --- a/docs/_posts/2021-03-01-any_powershell_downloadfile.md +++ b/docs/_posts/2021-03-01-any_powershell_downloadfile.md @@ -56,8 +56,8 @@ The following analytic identifies the use of PowerShell downloading a file using #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `any_powershell_downloadfile_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-any_powershell_downloadstring.md b/docs/_posts/2021-03-01-any_powershell_downloadstring.md index c4419f2fd8..da0ec36b57 100644 --- a/docs/_posts/2021-03-01-any_powershell_downloadstring.md +++ b/docs/_posts/2021-03-01-any_powershell_downloadstring.md @@ -55,8 +55,8 @@ The following analytic identifies the use of PowerShell downloading a file using #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `any_powershell_downloadstring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-fodhelper_uac_bypass.md b/docs/_posts/2021-03-01-fodhelper_uac_bypass.md index 61f88dc86f..d7df781863 100644 --- a/docs/_posts/2021-03-01-fodhelper_uac_bypass.md +++ b/docs/_posts/2021-03-01-fodhelper_uac_bypass.md @@ -64,8 +64,8 @@ Upon triage, fodhelper.exe will have a child process and read access will occur #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `fodhelper_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md b/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md index 0519d0ee2d..c6913d9176 100644 --- a/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md +++ b/docs/_posts/2021-03-01-ryuk_wake_on_lan_command.md @@ -54,8 +54,8 @@ This Splunk query identifies the use of Wake-on-LAN utilized by Ryuk ransomware. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `ryuk_wake_on_lan_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md b/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md index 422870cfc7..6baad1e3ba 100644 --- a/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md +++ b/docs/_posts/2021-03-01-suspicious_scheduled_task_from_public_directory.md @@ -58,8 +58,8 @@ The following detection identifies Scheduled Tasks registering (creating a new t #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_scheduled_task_from_public_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md b/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md index c1da9a722c..451e3eae36 100644 --- a/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md +++ b/docs/_posts/2021-03-02-unified_messaging_service_spawning_a_process.md @@ -51,8 +51,8 @@ This detection identifies Microsoft Exchange Server's Unified Messaging serv #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `unified_messaging_service_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-02-windows_disableantispyware_registry.md b/docs/_posts/2021-03-02-windows_disableantispyware_registry.md index e27ddd565f..4014bd1a7b 100644 --- a/docs/_posts/2021-03-02-windows_disableantispyware_registry.md +++ b/docs/_posts/2021-03-02-windows_disableantispyware_registry.md @@ -54,8 +54,8 @@ The search looks for the Registry Key DisableAntiSpyware set to disable. This is #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_disableantispyware_registry_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-03-nishang_powershelltcponeline.md b/docs/_posts/2021-03-03-nishang_powershelltcponeline.md index 523f5cb6ab..7cbe194dbe 100644 --- a/docs/_posts/2021-03-03-nishang_powershelltcponeline.md +++ b/docs/_posts/2021-03-03-nishang_powershelltcponeline.md @@ -55,8 +55,8 @@ This query detects the Nishang Invoke-PowerShellTCPOneLine utility that spawns a #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `nishang_powershelltcponeline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-03-w3wp_spawning_shell.md b/docs/_posts/2021-03-03-w3wp_spawning_shell.md index 9eeb9a6c02..fa685a3fd8 100644 --- a/docs/_posts/2021-03-03-w3wp_spawning_shell.md +++ b/docs/_posts/2021-03-03-w3wp_spawning_shell.md @@ -57,10 +57,10 @@ This query identifies a shell, PowerShell.exe or Cmd.exe, spawning from W3WP.exe #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `w3wp_spawning_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-12-ransomware_notes_bulk_creation.md b/docs/_posts/2021-03-12-ransomware_notes_bulk_creation.md index 6e95a69274..7f8d61d3e7 100644 --- a/docs/_posts/2021-03-12-ransomware_notes_bulk_creation.md +++ b/docs/_posts/2021-03-12-ransomware_notes_bulk_creation.md @@ -51,8 +51,8 @@ The following analytics identifies a big number of instance of ransomware notes #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `ransomware_notes_bulk_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-12-resize_shadowstorage_volume.md b/docs/_posts/2021-03-12-resize_shadowstorage_volume.md index d33046e631..ddd6915e59 100644 --- a/docs/_posts/2021-03-12-resize_shadowstorage_volume.md +++ b/docs/_posts/2021-03-12-resize_shadowstorage_volume.md @@ -50,8 +50,8 @@ The following analytics identifies the resizing of shadowstorage by ransomware m #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `resize_shadowstorage_volume_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-16-high_file_deletion_frequency.md b/docs/_posts/2021-03-16-high_file_deletion_frequency.md index a5e6268704..b41da01825 100644 --- a/docs/_posts/2021-03-16-high_file_deletion_frequency.md +++ b/docs/_posts/2021-03-16-high_file_deletion_frequency.md @@ -50,8 +50,8 @@ This search looks for high frequency of file deletion relative to process name a #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `high_file_deletion_frequency_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-16-high_process_termination_frequency.md b/docs/_posts/2021-03-16-high_process_termination_frequency.md index 8f43fde336..d52c3f6edd 100644 --- a/docs/_posts/2021-03-16-high_process_termination_frequency.md +++ b/docs/_posts/2021-03-16-high_process_termination_frequency.md @@ -51,8 +51,8 @@ This analytics are designed to indentify a high frequency of process termination #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `high_process_termination_frequency_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-17-clop_common_exec_parameter.md b/docs/_posts/2021-03-17-clop_common_exec_parameter.md index 464d1a05de..068515d48f 100644 --- a/docs/_posts/2021-03-17-clop_common_exec_parameter.md +++ b/docs/_posts/2021-03-17-clop_common_exec_parameter.md @@ -50,8 +50,8 @@ The following analytics are designed to identifies some CLOP ransomware variant #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `clop_common_exec_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md b/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md index a544f841d7..11d3adae0e 100644 --- a/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md +++ b/docs/_posts/2021-03-17-clop_ransomware_known_service_name.md @@ -50,8 +50,8 @@ This detection is to identify the common service name created by the CLOP ransom #### Macros The SPL above uses the following Macros: -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) Note that `clop_ransomware_known_service_name_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-17-process_deleting_its_process_file_path.md b/docs/_posts/2021-03-17-process_deleting_its_process_file_path.md index d93f903137..3639071d7f 100644 --- a/docs/_posts/2021-03-17-process_deleting_its_process_file_path.md +++ b/docs/_posts/2021-03-17-process_deleting_its_process_file_path.md @@ -51,8 +51,8 @@ This detection is to identify a suspicious process that tries to delete the proc #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `process_deleting_its_process_file_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md b/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md index 6dd8618f6a..21fba81d1d 100644 --- a/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md +++ b/docs/_posts/2021-03-23-certutil_download_with_urlcache_and_split_arguments.md @@ -50,9 +50,9 @@ Certutil.exe may download a file from a remote destination using `-urlcache`. Th #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `certutil_download_with_urlcache_and_split_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md b/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md index 1f83db873f..dccf148d4f 100644 --- a/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md +++ b/docs/_posts/2021-03-23-certutil_download_with_verifyctl_and_split_arguments.md @@ -50,9 +50,9 @@ Certutil.exe may download a file from a remote destination using `-VerifyCtl`. T #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `certutil_download_with_verifyctl_and_split_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-23-certutil_with_decode_argument.md b/docs/_posts/2021-03-23-certutil_with_decode_argument.md index 9e98b293f7..90c16a6c22 100644 --- a/docs/_posts/2021-03-23-certutil_with_decode_argument.md +++ b/docs/_posts/2021-03-23-certutil_with_decode_argument.md @@ -50,9 +50,9 @@ CertUtil.exe may be used to `encode` and `decode` a file, including PE and scrip #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `certutil_with_decode_argument_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-29-powershell_start-bitstransfer.md b/docs/_posts/2021-03-29-powershell_start-bitstransfer.md index 3e4ce5253c..afa0789b5e 100644 --- a/docs/_posts/2021-03-29-powershell_start-bitstransfer.md +++ b/docs/_posts/2021-03-29-powershell_start-bitstransfer.md @@ -52,8 +52,8 @@ Start-BitsTransfer is the PowerShell "version" of BitsAdmin.exe. Similar #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `powershell_start-bitstransfer_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md b/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md index 2ec0827faa..ba70766735 100644 --- a/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md +++ b/docs/_posts/2021-03-31-disabling_firewall_with_netsh.md @@ -54,9 +54,9 @@ This search is to identifies suspicious firewall disabling using netsh applicati #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `disabling_firewall_with_netsh_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-03-31-dsquery_domain_discovery.md b/docs/_posts/2021-03-31-dsquery_domain_discovery.md index 913c984dbb..8f061790c4 100644 --- a/docs/_posts/2021-03-31-dsquery_domain_discovery.md +++ b/docs/_posts/2021-03-31-dsquery_domain_discovery.md @@ -55,8 +55,8 @@ In addition to trust discovery, review parallel processes for additional behavio #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dsquery_domain_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md b/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md index 814e2838ae..3b2227864e 100644 --- a/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md +++ b/docs/_posts/2021-04-07-malicious_powershell_executed_as_a_service.md @@ -62,8 +62,8 @@ This detection is to identify the abuse the Windows SC.exe to execute malicious #### Macros The SPL above uses the following Macros: -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) Note that `malicious_powershell_executed_as_a_service_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md b/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md index a788c2310f..0532aa09d4 100644 --- a/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md +++ b/docs/_posts/2021-04-08-winevent_scheduled_task_created_within_public_path.md @@ -62,8 +62,8 @@ Upon triage, identify the task scheduled source. Was it schtasks.exe or was it v #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `winevent_scheduled_task_created_within_public_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-excel_spawning_powershell.md b/docs/_posts/2021-04-12-excel_spawning_powershell.md index 7e464a8864..c55a5c0d0e 100644 --- a/docs/_posts/2021-04-12-excel_spawning_powershell.md +++ b/docs/_posts/2021-04-12-excel_spawning_powershell.md @@ -55,8 +55,8 @@ The following detection identifies Microsoft Excel spawning PowerShell. Typicall #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excel_spawning_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md b/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md index eba64cb82c..13653d9f0b 100644 --- a/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md +++ b/docs/_posts/2021-04-12-excel_spawning_windows_script_host.md @@ -54,8 +54,8 @@ The following detection identifies Microsoft Excel spawning Windows Script Host #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excel_spawning_windows_script_host_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md b/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md index bc7d42a910..d60433d5b9 100644 --- a/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md +++ b/docs/_posts/2021-04-12-winevent_scheduled_task_created_to_spawn_shell.md @@ -62,8 +62,8 @@ Upon triage, identify the task scheduled source. Was it schtasks.exe or via Task #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `winevent_scheduled_task_created_to_spawn_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winword_spawning_powershell.md b/docs/_posts/2021-04-12-winword_spawning_powershell.md index a0ca6c5e93..b6ef8edc95 100644 --- a/docs/_posts/2021-04-12-winword_spawning_powershell.md +++ b/docs/_posts/2021-04-12-winword_spawning_powershell.md @@ -55,8 +55,8 @@ The following detection identifies Microsoft Word spawning PowerShell. Typically #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `winword_spawning_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md b/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md index 2a014efeaa..9181dcd42b 100644 --- a/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md +++ b/docs/_posts/2021-04-12-winword_spawning_windows_script_host.md @@ -54,8 +54,8 @@ The following detection identifies Microsoft Winword.exe spawning Windows Script #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `winword_spawning_windows_script_host_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md b/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md index 78b5885963..c2167d1813 100644 --- a/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md +++ b/docs/_posts/2021-04-13-office_application_spawn_rundll32_process.md @@ -55,8 +55,8 @@ this detection was designed to identifies suspicious spawned process of known MS #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_application_spawn_rundll32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-14-office_document_creating_schedule_task.md b/docs/_posts/2021-04-14-office_document_creating_schedule_task.md index 7a693d1251..7bc753ff9e 100644 --- a/docs/_posts/2021-04-14-office_document_creating_schedule_task.md +++ b/docs/_posts/2021-04-14-office_document_creating_schedule_task.md @@ -53,8 +53,8 @@ this search detects a potential malicious office document that create schedule t #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `office_document_creating_schedule_task_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-14-office_document_executing_macro_code.md b/docs/_posts/2021-04-14-office_document_executing_macro_code.md index 4ea71ec1c0..59f4b8372a 100644 --- a/docs/_posts/2021-04-14-office_document_executing_macro_code.md +++ b/docs/_posts/2021-04-14-office_document_executing_macro_code.md @@ -53,8 +53,8 @@ this detection was designed to identifies suspicious office documents that using #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `office_document_executing_macro_code_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md b/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md index 782d7c1420..9e7b9b623b 100644 --- a/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md +++ b/docs/_posts/2021-04-15-dns_exfiltration_using_nslookup_app.md @@ -50,8 +50,8 @@ this search is to detect potential DNS exfiltration using nslookup application. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dns_exfiltration_using_nslookup_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md index 1181ca4594..ac0fbde7e2 100644 --- a/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-04-19-gpupdate_with_no_command_line_arguments_with_network.md @@ -57,8 +57,8 @@ The following analytic identifies gpupdate.exe with no command line arguments an #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `gpupdate_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-powershell_remote_thread_to_known_windows_process.md b/docs/_posts/2021-04-19-powershell_remote_thread_to_known_windows_process.md index 51ba9a56c2..2432be91b7 100644 --- a/docs/_posts/2021-04-19-powershell_remote_thread_to_known_windows_process.md +++ b/docs/_posts/2021-04-19-powershell_remote_thread_to_known_windows_process.md @@ -50,8 +50,8 @@ this search is designed to detect suspicious powershell process that tries to in #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `powershell_remote_thread_to_known_windows_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md b/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md index 8733273052..d3624676df 100644 --- a/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md +++ b/docs/_posts/2021-04-19-schedule_task_with_http_command_arguments.md @@ -53,8 +53,8 @@ The following query utilizes Windows Security EventCode 4698, `A scheduled task #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `schedule_task_with_http_command_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md b/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md index e81409f17a..2b828c2e12 100644 --- a/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md +++ b/docs/_posts/2021-04-19-schedule_task_with_rundll32_command_trigger.md @@ -53,8 +53,8 @@ The following query utilizes Windows Security EventCode 4698, `A scheduled task #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `schedule_task_with_rundll32_command_trigger_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-wermgr_process_connecting_to_ip_check_web_services.md b/docs/_posts/2021-04-19-wermgr_process_connecting_to_ip_check_web_services.md index 7f547f6248..b284f803cb 100644 --- a/docs/_posts/2021-04-19-wermgr_process_connecting_to_ip_check_web_services.md +++ b/docs/_posts/2021-04-19-wermgr_process_connecting_to_ip_check_web_services.md @@ -53,8 +53,8 @@ this search is designed to detect suspicious wermgr.exe process that tries to co #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `wermgr_process_connecting_to_ip_check_web_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-wermgr_process_create_executable_file.md b/docs/_posts/2021-04-19-wermgr_process_create_executable_file.md index eb8b130c76..0ae120e202 100644 --- a/docs/_posts/2021-04-19-wermgr_process_create_executable_file.md +++ b/docs/_posts/2021-04-19-wermgr_process_create_executable_file.md @@ -49,8 +49,8 @@ this search is designed to detect potential malicious wermgr.exe process that dr #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `wermgr_process_create_executable_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md b/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md index 0c1764a2fd..3e3d8ebe9b 100644 --- a/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md +++ b/docs/_posts/2021-04-19-wermgr_process_spawned_cmd_or_powershell_process.md @@ -50,10 +50,10 @@ This search is designed to detect suspicious cmd and powershell process spawned #### Macros The SPL above uses the following Macros: -* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wermgr_process_spawned_cmd_or_powershell_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-21-excessive_usage_of_nslookup_app.md b/docs/_posts/2021-04-21-excessive_usage_of_nslookup_app.md index 771cb509f5..c8c74bbf9a 100644 --- a/docs/_posts/2021-04-21-excessive_usage_of_nslookup_app.md +++ b/docs/_posts/2021-04-21-excessive_usage_of_nslookup_app.md @@ -54,8 +54,8 @@ This search is to detect potential DNS exfiltration using nslookup application. #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `excessive_usage_of_nslookup_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-21-multiple_archive_files_http_post_traffic.md b/docs/_posts/2021-04-21-multiple_archive_files_http_post_traffic.md index 29ecdc775e..84bfbf7b99 100644 --- a/docs/_posts/2021-04-21-multiple_archive_files_http_post_traffic.md +++ b/docs/_posts/2021-04-21-multiple_archive_files_http_post_traffic.md @@ -56,8 +56,8 @@ This search is designed to detect high frequency of archive files data exfiltrat #### Macros The SPL above uses the following Macros: -* [stream_http](https://github.com/splunk/security_content/blob/develop/macros/stream_http.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [stream_http](https://github.com/splunk/security_content/blob/develop/macros/stream_http.yml) Note that `multiple_archive_files_http_post_traffic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md b/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md index 4db93816d9..f6d33e60fe 100644 --- a/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md +++ b/docs/_posts/2021-04-22-anomalous_usage_of_7zip.md @@ -54,8 +54,8 @@ The following detection identifies a 7z.exe spawned from `Rundll32.exe` or `Dllh #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `anomalous_usage_of_7zip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md b/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md index 4e66bf750e..d720b81c21 100644 --- a/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md +++ b/docs/_posts/2021-04-22-office_product_spawning_rundll32_with_no_dll.md @@ -55,8 +55,8 @@ The following detection identifies the latest behavior utilized by IcedID malwar #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_product_spawning_rundll32_with_no_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-plain_http_post_exfiltrated_data.md b/docs/_posts/2021-04-22-plain_http_post_exfiltrated_data.md index ae1f868b91..f218c4ab5e 100644 --- a/docs/_posts/2021-04-22-plain_http_post_exfiltrated_data.md +++ b/docs/_posts/2021-04-22-plain_http_post_exfiltrated_data.md @@ -53,8 +53,8 @@ This search is to detect potential plain HTTP POST method data exfiltration. Thi #### Macros The SPL above uses the following Macros: -* [stream_http](https://github.com/splunk/security_content/blob/develop/macros/stream_http.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [stream_http](https://github.com/splunk/security_content/blob/develop/macros/stream_http.yml) Note that `plain_http_post_exfiltrated_data_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-22-winword_spawning_cmd.md b/docs/_posts/2021-04-22-winword_spawning_cmd.md index 1a832fe905..0bfed594a6 100644 --- a/docs/_posts/2021-04-22-winword_spawning_cmd.md +++ b/docs/_posts/2021-04-22-winword_spawning_cmd.md @@ -54,9 +54,9 @@ The following detection identifies Microsoft Word spawning `cmd.exe`. Typically, #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `winword_spawning_cmd_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md b/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md index 199751ef2a..378a02bcb7 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md +++ b/docs/_posts/2021-04-26-office_product_spawning_bitsadmin.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_product_spawning_bitsadmin_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_certutil.md b/docs/_posts/2021-04-26-office_product_spawning_certutil.md index da9c4a3e27..be59d9ec62 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_certutil.md +++ b/docs/_posts/2021-04-26-office_product_spawning_certutil.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_product_spawning_certutil_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-office_product_spawning_mshta.md b/docs/_posts/2021-04-26-office_product_spawning_mshta.md index caa17a1d71..873b0559c4 100644 --- a/docs/_posts/2021-04-26-office_product_spawning_mshta.md +++ b/docs/_posts/2021-04-26-office_product_spawning_mshta.md @@ -54,9 +54,9 @@ The following detection identifies the latest behavior utilized by different mal #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_product_spawning_mshta_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-26-trickbot_named_pipe.md b/docs/_posts/2021-04-26-trickbot_named_pipe.md index 75b9d04697..d31f359c26 100644 --- a/docs/_posts/2021-04-26-trickbot_named_pipe.md +++ b/docs/_posts/2021-04-26-trickbot_named_pipe.md @@ -50,8 +50,8 @@ this search is to detect potential trickbot infection through the create/connect #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `trickbot_named_pipe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-29-icacls_deny_command.md b/docs/_posts/2021-04-29-icacls_deny_command.md index 08169f6226..f92c477b81 100644 --- a/docs/_posts/2021-04-29-icacls_deny_command.md +++ b/docs/_posts/2021-04-29-icacls_deny_command.md @@ -50,8 +50,8 @@ This analytic identifies a potential adversary that changes the security permiss #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `icacls_deny_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-29-suspicious_driver_loaded_path.md b/docs/_posts/2021-04-29-suspicious_driver_loaded_path.md index 7740190257..6228a76226 100644 --- a/docs/_posts/2021-04-29-suspicious_driver_loaded_path.md +++ b/docs/_posts/2021-04-29-suspicious_driver_loaded_path.md @@ -55,8 +55,8 @@ This analytic will detect suspicious driver loaded paths. This technique is comm #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `suspicious_driver_loaded_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-04-29-xmrig_driver_loaded.md b/docs/_posts/2021-04-29-xmrig_driver_loaded.md index 4987808c8e..7d465dd399 100644 --- a/docs/_posts/2021-04-29-xmrig_driver_loaded.md +++ b/docs/_posts/2021-04-29-xmrig_driver_loaded.md @@ -55,8 +55,8 @@ This analytic identifies XMRIG coinminer driver installation on the system. The #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `xmrig_driver_loaded_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-deleting_of_net_users.md b/docs/_posts/2021-05-04-deleting_of_net_users.md index bfc03f22fc..15c6e1e188 100644 --- a/docs/_posts/2021-05-04-deleting_of_net_users.md +++ b/docs/_posts/2021-05-04-deleting_of_net_users.md @@ -51,8 +51,8 @@ This analytic will detect a suspicious net.exe/net1.exe command-line to delete a #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `deleting_of_net_users_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-disabling_net_user_account.md b/docs/_posts/2021-05-04-disabling_net_user_account.md index ee5f7ab86e..cfe00516cb 100644 --- a/docs/_posts/2021-05-04-disabling_net_user_account.md +++ b/docs/_posts/2021-05-04-disabling_net_user_account.md @@ -51,8 +51,8 @@ This analytic will identify a suspicious command-line that disables a user accou #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `disabling_net_user_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md b/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md index 34f350b7e5..6ab8e32c4b 100644 --- a/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md +++ b/docs/_posts/2021-05-04-excessive_attempt_to_disable_services.md @@ -51,8 +51,8 @@ This analytic will identify suspicious series of command-line to disable several #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_attempt_to_disable_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_service_stop_attempt.md b/docs/_posts/2021-05-04-excessive_service_stop_attempt.md index a83b9ba150..391dc6135f 100644 --- a/docs/_posts/2021-05-04-excessive_service_stop_attempt.md +++ b/docs/_posts/2021-05-04-excessive_service_stop_attempt.md @@ -52,8 +52,8 @@ This analytic identifies suspicious series of attempt to kill multiple services #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_service_stop_attempt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md b/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md index 0bab33876b..1120002bde 100644 --- a/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md +++ b/docs/_posts/2021-05-04-excessive_usage_of_taskkill.md @@ -55,8 +55,8 @@ This analytic identifies excessive usage of `taskkill.exe` application. This app #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_usage_of_taskkill_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-icacls_grant_command.md b/docs/_posts/2021-05-04-icacls_grant_command.md index 9a50e89ba1..24e6cc3b06 100644 --- a/docs/_posts/2021-05-04-icacls_grant_command.md +++ b/docs/_posts/2021-05-04-icacls_grant_command.md @@ -50,8 +50,8 @@ This analytic identifies potential adversaries that modify the security permissi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `icacls_grant_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md b/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md index 8e3ea5c595..3f19c603e7 100644 --- a/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md +++ b/docs/_posts/2021-05-04-modify_acl_permission_to_files_or_folder.md @@ -50,8 +50,8 @@ This analytic identifies suspicious modification of ACL permission to a files or #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `modify_acl_permission_to_files_or_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-04-process_kill_base_on_file_path.md b/docs/_posts/2021-05-04-process_kill_base_on_file_path.md index d67de7122b..2c2a2afd71 100644 --- a/docs/_posts/2021-05-04-process_kill_base_on_file_path.md +++ b/docs/_posts/2021-05-04-process_kill_base_on_file_path.md @@ -55,8 +55,8 @@ The following analytic identifies the use of `wmic.exe` using `delete` to remove #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `process_kill_base_on_file_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-05-suspicious_process_file_path.md b/docs/_posts/2021-05-05-suspicious_process_file_path.md index 531c76a878..c8cb5796e9 100644 --- a/docs/_posts/2021-05-05-suspicious_process_file_path.md +++ b/docs/_posts/2021-05-05-suspicious_process_file_path.md @@ -51,8 +51,8 @@ The following analytic will detect a suspicious process running in a file path w #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_process_file_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-download_files_using_telegram.md b/docs/_posts/2021-05-06-download_files_using_telegram.md index 252e5cf3cf..5710545397 100644 --- a/docs/_posts/2021-05-06-download_files_using_telegram.md +++ b/docs/_posts/2021-05-06-download_files_using_telegram.md @@ -49,8 +49,8 @@ The following analytic will identify a suspicious download by the Telegram appli #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `download_files_using_telegram_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md b/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md index 26075e0b5f..5b09f57178 100644 --- a/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md +++ b/docs/_posts/2021-05-06-enumerate_users_local_group_using_telegram.md @@ -49,8 +49,8 @@ This analytic will detect a suspicious Telegram process enumerating all network #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `enumerate_users_local_group_using_telegram_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-excessive_usage_of_net_app.md b/docs/_posts/2021-05-06-excessive_usage_of_net_app.md index 52bab9ea22..fbf47a5ac1 100644 --- a/docs/_posts/2021-05-06-excessive_usage_of_net_app.md +++ b/docs/_posts/2021-05-06-excessive_usage_of_net_app.md @@ -52,8 +52,8 @@ This analytic identifies excessive usage of `net.exe` or `net1.exe` within a buc #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_usage_of_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md b/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md index 70428770a2..f23306920e 100644 --- a/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md +++ b/docs/_posts/2021-05-06-executables_or_script_creation_in_suspicious_path.md @@ -50,8 +50,8 @@ This analytic will identify suspicious executable or scripts (known file extensi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `executables_or_script_creation_in_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md b/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md index 852d8d5b0e..d71383e033 100644 --- a/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md +++ b/docs/_posts/2021-05-07-excessive_usage_of_cacls_app.md @@ -51,8 +51,8 @@ The following analytic identifies excessive usage of `cacls.exe`, `xcacls.exe` o #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_usage_of_cacls_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md b/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md index 30cf8e8a5a..f6f4ba32f4 100644 --- a/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md +++ b/docs/_posts/2021-05-07-schtasks_run_task_on_demand.md @@ -52,8 +52,8 @@ This analytic identifies an on demand run of a Windows Schedule Task through she #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `schtasks_run_task_on_demand_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md b/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md index 4c9c7f901a..120dd18e99 100644 --- a/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md +++ b/docs/_posts/2021-05-12-delete_shadowcopy_with_powershell.md @@ -49,8 +49,8 @@ This following analytic detects PowerShell command to delete shadow copy using t #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `delete_shadowcopy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-13-cmlua_or_cmstplua_uac_bypass.md b/docs/_posts/2021-05-13-cmlua_or_cmstplua_uac_bypass.md index 786dab457b..342887e653 100644 --- a/docs/_posts/2021-05-13-cmlua_or_cmstplua_uac_bypass.md +++ b/docs/_posts/2021-05-13-cmlua_or_cmstplua_uac_bypass.md @@ -53,8 +53,8 @@ This analytic detects a potential process using COM Object like CMLUA or CMSTPLU #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `cmlua_or_cmstplua_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-13-slui_runas_elevated.md b/docs/_posts/2021-05-13-slui_runas_elevated.md index 96a835b9b7..c151552c3e 100644 --- a/docs/_posts/2021-05-13-slui_runas_elevated.md +++ b/docs/_posts/2021-05-13-slui_runas_elevated.md @@ -56,8 +56,8 @@ The following analytic identifies the Microsoft Software Licensing User Interfac #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `slui_runas_elevated_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-13-slui_spawning_a_process.md b/docs/_posts/2021-05-13-slui_spawning_a_process.md index 88a7e07545..c16c88fc6e 100644 --- a/docs/_posts/2021-05-13-slui_spawning_a_process.md +++ b/docs/_posts/2021-05-13-slui_spawning_a_process.md @@ -56,8 +56,8 @@ The following analytic identifies the Microsoft Software Licensing User Interfac #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `slui_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-18-services_escalate_exe.md b/docs/_posts/2021-05-18-services_escalate_exe.md index d79e112b01..031388332c 100644 --- a/docs/_posts/2021-05-18-services_escalate_exe.md +++ b/docs/_posts/2021-05-18-services_escalate_exe.md @@ -51,8 +51,8 @@ The following analytic identifies the use of `svc-exe` with Cobalt Strike. The b #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `services_escalate_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md b/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md index 3f8aae565a..3814f8801e 100644 --- a/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md +++ b/docs/_posts/2021-05-19-allow_inbound_traffic_in_firewall_rule.md @@ -53,8 +53,8 @@ The following analytic identifies suspicious PowerShell command to allow inbound #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `allow_inbound_traffic_in_firewall_rule_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-19-mailsniper_invoke_functions.md b/docs/_posts/2021-05-19-mailsniper_invoke_functions.md index 180c4e1799..48e19ebeff 100644 --- a/docs/_posts/2021-05-19-mailsniper_invoke_functions.md +++ b/docs/_posts/2021-05-19-mailsniper_invoke_functions.md @@ -53,8 +53,8 @@ This search is to detect known mailsniper.ps1 functions executed in a machine. T #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `mailsniper_invoke_functions_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md b/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md index f2a8ec4706..0e1a42f719 100644 --- a/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md +++ b/docs/_posts/2021-05-20-cmd_echo_pipe_-_escalation.md @@ -64,9 +64,9 @@ This analytic identifies a common behavior by Cobalt Strike and other frameworks #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `cmd_echo_pipe_-_escalation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-21-winrm_spawning_a_process.md b/docs/_posts/2021-05-21-winrm_spawning_a_process.md index c41164db4c..0af7335660 100644 --- a/docs/_posts/2021-05-21-winrm_spawning_a_process.md +++ b/docs/_posts/2021-05-21-winrm_spawning_a_process.md @@ -53,8 +53,8 @@ The following analytic identifies suspicious processes spawning from WinRM (wsmp #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `winrm_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md b/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md index ccc86ea837..ee6712b0e1 100644 --- a/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md +++ b/docs/_posts/2021-05-26-secretdumps_offline_ntds_dumping_tool.md @@ -54,8 +54,8 @@ This analytic detects a potential usage of secretsdump.py tool for dumping crede #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `secretdumps_offline_ntds_dumping_tool_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md b/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md index 1430d2ca8b..a44b78ad45 100644 --- a/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md +++ b/docs/_posts/2021-05-27-detect_sharphound_file_modifications.md @@ -74,8 +74,8 @@ SharpHound is used as a reconnaissance collector, ingestor, for BloodHound. Shar #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_sharphound_file_modifications_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-05-27-detect_sharphound_usage.md b/docs/_posts/2021-05-27-detect_sharphound_usage.md index 615a6cb68d..37366fb272 100644 --- a/docs/_posts/2021-05-27-detect_sharphound_usage.md +++ b/docs/_posts/2021-05-27-detect_sharphound_usage.md @@ -74,8 +74,8 @@ The following analytic identifies SharpHound binary usage by using the original #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_sharphound_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md b/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md index 5e3b8176aa..d16c9052ee 100644 --- a/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md +++ b/docs/_posts/2021-06-01-detect_azurehound_command-line_arguments.md @@ -74,8 +74,8 @@ The following analytic identifies the common command-line argument used by Azure #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_azurehound_command-line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md b/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md index 2ebcbf7db7..47ad9e085a 100644 --- a/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md +++ b/docs/_posts/2021-06-01-detect_azurehound_file_modifications.md @@ -74,8 +74,8 @@ The following analytic is similar to SharpHound file modifications, but this ins #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_azurehound_file_modifications_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md b/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md index 43c9452514..84c5558fbd 100644 --- a/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md +++ b/docs/_posts/2021-06-01-detect_sharphound_command-line_arguments.md @@ -74,8 +74,8 @@ The following analytic identifies common command-line arguments used by SharpHou #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_sharphound_command-line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-02-conti_common_exec_parameter.md b/docs/_posts/2021-06-02-conti_common_exec_parameter.md index ea0201dcbf..0683acef7c 100644 --- a/docs/_posts/2021-06-02-conti_common_exec_parameter.md +++ b/docs/_posts/2021-06-02-conti_common_exec_parameter.md @@ -50,8 +50,8 @@ This search detects the suspicious commandline argument of revil ransomware to e #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `conti_common_exec_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-02-modification_of_wallpaper.md b/docs/_posts/2021-06-02-modification_of_wallpaper.md index 8deae20e99..c5edd79a47 100644 --- a/docs/_posts/2021-06-02-modification_of_wallpaper.md +++ b/docs/_posts/2021-06-02-modification_of_wallpaper.md @@ -49,8 +49,8 @@ This analytic identifies suspicious modification of registry to deface or change #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `modification_of_wallpaper_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-02-revil_common_exec_parameter.md b/docs/_posts/2021-06-02-revil_common_exec_parameter.md index 3fcdcd36e3..25d2f075b5 100644 --- a/docs/_posts/2021-06-02-revil_common_exec_parameter.md +++ b/docs/_posts/2021-06-02-revil_common_exec_parameter.md @@ -50,8 +50,8 @@ This analytic identifies suspicious commandline parameter that are commonly used #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `revil_common_exec_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-02-wbemprox_com_object_execution.md b/docs/_posts/2021-06-02-wbemprox_com_object_execution.md index cf56246092..657442c7b1 100644 --- a/docs/_posts/2021-06-02-wbemprox_com_object_execution.md +++ b/docs/_posts/2021-06-02-wbemprox_com_object_execution.md @@ -53,8 +53,8 @@ this search is designed to detect potential malicious process loading COM object #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `wbemprox_com_object_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md b/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md index 6d2b2ae4db..262c831734 100644 --- a/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md +++ b/docs/_posts/2021-06-03-excessive_number_of_distinct_processes_created_in_windows_temp_folder.md @@ -51,8 +51,8 @@ This analytic will identify suspicious series of process executions. We have ob #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_number_of_distinct_processes_created_in_windows_temp_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md b/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md index f05b025892..2cf00401e7 100644 --- a/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md +++ b/docs/_posts/2021-06-04-known_services_killed_by_ransomware.md @@ -49,8 +49,8 @@ This search detects a suspicioous termination of known services killed by ransom #### Macros The SPL above uses the following Macros: -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) Note that `known_services_killed_by_ransomware_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md b/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md index b972432f9a..428fd6cbe2 100644 --- a/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md +++ b/docs/_posts/2021-06-07-excessive_number_of_taskhost_processes.md @@ -55,8 +55,8 @@ This detection targets behaviors observed in post exploit kits like Meterpreter #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_number_of_taskhost_processes_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md b/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md index ff238c60f4..04797c98f2 100644 --- a/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md +++ b/docs/_posts/2021-06-08-powershell_fileless_process_injection_via_getprocaddress.md @@ -60,8 +60,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_fileless_process_injection_via_getprocaddress_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md b/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md index 7841139e5b..1f05be61d4 100644 --- a/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md +++ b/docs/_posts/2021-06-08-powershell_fileless_script_contains_base64_encoded_content.md @@ -59,8 +59,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_fileless_script_contains_base64_encoded_content_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md b/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md index 358b89b2a5..5fafc0211a 100644 --- a/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md +++ b/docs/_posts/2021-06-09-detect_empire_with_powershell_script_block_logging.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_empire_with_powershell_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md b/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md index 69cfc4803d..168d8c2853 100644 --- a/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md +++ b/docs/_posts/2021-06-09-detect_mimikatz_with_powershell_script_block_logging.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_mimikatz_with_powershell_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md b/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md index eb23e928c6..00fa349249 100644 --- a/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md +++ b/docs/_posts/2021-06-09-unloading_amsi_via_reflection.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `unloading_amsi_via_reflection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md b/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md index 89f6f974af..8b6b343038 100644 --- a/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md +++ b/docs/_posts/2021-06-10-clear_unallocated_sector_using_cipher_app.md @@ -54,8 +54,8 @@ this search is to detect execution of `cipher.exe` to clear the unallocated sect #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `clear_unallocated_sector_using_cipher_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md b/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md index ee11cba6c3..7315fd5660 100644 --- a/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md +++ b/docs/_posts/2021-06-10-disable_logs_using_wevtutil.md @@ -54,8 +54,8 @@ This search is to detect execution of wevtutil.exe to disable logs. This techniq #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `disable_logs_using_wevtutil_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md b/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md index f319a44043..24588a5bff 100644 --- a/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md +++ b/docs/_posts/2021-06-10-permission_modification_using_takeown_app.md @@ -50,8 +50,8 @@ This search is to detect a modification of file or directory permission using ta #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `permission_modification_using_takeown_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md b/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md index d01602857f..e1a0455655 100644 --- a/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md +++ b/docs/_posts/2021-06-10-powershell_creating_thread_mutex.md @@ -52,8 +52,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_creating_thread_mutex_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_domain_enumeration.md b/docs/_posts/2021-06-10-powershell_domain_enumeration.md index 968b159011..f52224f48d 100644 --- a/docs/_posts/2021-06-10-powershell_domain_enumeration.md +++ b/docs/_posts/2021-06-10-powershell_domain_enumeration.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_domain_enumeration_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md b/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md index 3c171336f9..3f6f5036f6 100644 --- a/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md +++ b/docs/_posts/2021-06-10-powershell_loading_dotnet_into_memory_via_system_reflection_assembly.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_loading_dotnet_into_memory_via_system_reflection_assembly_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md b/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md index b6fbc80fd8..31ed3737ec 100644 --- a/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md +++ b/docs/_posts/2021-06-10-powershell_processing_stream_of_data.md @@ -52,8 +52,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_processing_stream_of_data_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md b/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md index 80e8134f32..8efd18241c 100644 --- a/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md +++ b/docs/_posts/2021-06-10-powershell_using_memory_as_backing_store.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_using_memory_as_backing_store_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md b/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md index 5df07e51e3..951a24c8cc 100644 --- a/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md +++ b/docs/_posts/2021-06-10-prevent_automatic_repair_mode_using_bcdedit.md @@ -50,8 +50,8 @@ This search is to detect a suspicious bcdedit.exe execution to ignore all failur #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `prevent_automatic_repair_mode_using_bcdedit_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md b/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md index eee1e001cd..f63ec51be1 100644 --- a/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md +++ b/docs/_posts/2021-06-10-recon_avproduct_through_pwh_or_wmi.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `recon_avproduct_through_pwh_or_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-10-recon_using_wmi_class.md b/docs/_posts/2021-06-10-recon_using_wmi_class.md index 092b3c2782..d0db06d31a 100644 --- a/docs/_posts/2021-06-10-recon_using_wmi_class.md +++ b/docs/_posts/2021-06-10-recon_using_wmi_class.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell via EventCode 4104, wher #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `recon_using_wmi_class_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md b/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md index f7fe8ed949..b811f1695f 100644 --- a/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md +++ b/docs/_posts/2021-06-14-wmi_recon_running_process_or_services.md @@ -48,8 +48,8 @@ The following analytic identifies suspicious PowerShell script execution via Eve #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `wmi_recon_running_process_or_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-16-detect_wmi_event_subscription_persistence.md b/docs/_posts/2021-06-16-detect_wmi_event_subscription_persistence.md index fb9b081bbd..8ca3d83352 100644 --- a/docs/_posts/2021-06-16-detect_wmi_event_subscription_persistence.md +++ b/docs/_posts/2021-06-16-detect_wmi_event_subscription_persistence.md @@ -59,8 +59,8 @@ Monitor for the creation of new WMI EventFilter, EventConsumer, and FilterToCons #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `detect_wmi_event_subscription_persistence_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md b/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md index 3872ba5d17..1da6ef9075 100644 --- a/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md +++ b/docs/_posts/2021-06-17-suspicious_event_log_service_behavior.md @@ -52,8 +52,8 @@ The following analytic utilizes Windows Event ID 1100 to identify when Windows e #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `suspicious_event_log_service_behavior_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md b/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md index 332361f7a3..ec79c76bbb 100644 --- a/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md +++ b/docs/_posts/2021-06-22-execute_javascript_with_jscript_com_clsid.md @@ -54,8 +54,8 @@ This analytic will identify suspicious process of cscript.exe where it tries to #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `execute_javascript_with_jscript_com_clsid_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md b/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md index 52b9f539ac..6f53fd32e8 100644 --- a/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md +++ b/docs/_posts/2021-06-22-powershell_enable_smb1protocol_feature.md @@ -53,8 +53,8 @@ This search is to detect a suspicious enabling of smb1protocol through "powe #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_enable_smb1protocol_feature_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md b/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md index c433912dc9..85c38d4790 100644 --- a/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md +++ b/docs/_posts/2021-06-22-recursive_delete_of_directory_in_batch_cmd.md @@ -54,9 +54,9 @@ This search is to detect a suspicious commandline designed to delete files or di #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `recursive_delete_of_directory_in_batch_cmd_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md b/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md index 133bddbefc..1ccca1addf 100644 --- a/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md +++ b/docs/_posts/2021-06-23-allow_file_and_printing_sharing_in_firewall.md @@ -54,9 +54,9 @@ This search is to detect a suspicious modification of firewall to allow file and #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `allow_file_and_printing_sharing_in_firewall_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md b/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md index 9c9d5abed6..1aa2ee453b 100644 --- a/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md +++ b/docs/_posts/2021-06-23-allow_network_discovery_in_firewall.md @@ -54,9 +54,9 @@ This search is to detect a suspicious modification to the firewall to allow netw #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `allow_network_discovery_in_firewall_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-24-excessive_usage_of_sc_service_utility.md b/docs/_posts/2021-06-24-excessive_usage_of_sc_service_utility.md index 43337bd304..5243b58a6b 100644 --- a/docs/_posts/2021-06-24-excessive_usage_of_sc_service_utility.md +++ b/docs/_posts/2021-06-24-excessive_usage_of_sc_service_utility.md @@ -58,8 +58,8 @@ This search is to detect a suspicious excessive usage of sc.exe in a host machin #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `excessive_usage_of_sc_service_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md b/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md index 59dc867252..07edfc4636 100644 --- a/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md +++ b/docs/_posts/2021-06-25-excessive_number_of_service_control_start_as_disabled.md @@ -55,8 +55,8 @@ This detection targets behaviors observed when threat actors have used sc.exe to #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `excessive_number_of_service_control_start_as_disabled_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-sdclt_uac_bypass.md b/docs/_posts/2021-07-01-sdclt_uac_bypass.md index ff7bee62dd..8fb0d9d929 100644 --- a/docs/_posts/2021-07-01-sdclt_uac_bypass.md +++ b/docs/_posts/2021-07-01-sdclt_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect a suspicious sdclt.exe registry modification. This tech #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `sdclt_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md b/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md index bd03565926..f0de07ad76 100644 --- a/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md +++ b/docs/_posts/2021-07-01-silentcleanup_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect a suspicious modification of registry that may related #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `silentcleanup_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md b/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md index d423992a6b..08354695b7 100644 --- a/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md +++ b/docs/_posts/2021-07-01-spoolsv_spawning_rundll32.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious child process, `rundll32.exe`, wi #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `spoolsv_spawning_rundll32_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-spoolsv_suspicious_loaded_modules.md b/docs/_posts/2021-07-01-spoolsv_suspicious_loaded_modules.md index eef30c8e7f..5914e02709 100644 --- a/docs/_posts/2021-07-01-spoolsv_suspicious_loaded_modules.md +++ b/docs/_posts/2021-07-01-spoolsv_suspicious_loaded_modules.md @@ -57,8 +57,8 @@ This search is to detect suspicious loading of dll in specific path relative to #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `spoolsv_suspicious_loaded_modules_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-spoolsv_suspicious_process_access.md b/docs/_posts/2021-07-01-spoolsv_suspicious_process_access.md index 735a056595..7808716c14 100644 --- a/docs/_posts/2021-07-01-spoolsv_suspicious_process_access.md +++ b/docs/_posts/2021-07-01-spoolsv_suspicious_process_access.md @@ -50,8 +50,8 @@ This analytic identifies a suspicious behavior related to PrintNightmare, or CVE #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `spoolsv_suspicious_process_access_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-spoolsv_writing_a_dll_-_sysmon.md b/docs/_posts/2021-07-01-spoolsv_writing_a_dll_-_sysmon.md index 1073f169cc..87f2a30115 100644 --- a/docs/_posts/2021-07-01-spoolsv_writing_a_dll_-_sysmon.md +++ b/docs/_posts/2021-07-01-spoolsv_writing_a_dll_-_sysmon.md @@ -56,8 +56,8 @@ The following analytic identifies a `.dll` being written by `spoolsv.exe`. This #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `spoolsv_writing_a_dll_-_sysmon_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-01-wsreset_uac_bypass.md b/docs/_posts/2021-07-01-wsreset_uac_bypass.md index 0954637765..59dad6cc32 100644 --- a/docs/_posts/2021-07-01-wsreset_uac_bypass.md +++ b/docs/_posts/2021-07-01-wsreset_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect a suspicious modification of registry related to UAC by #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wsreset_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md b/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md index fa62e0a6f4..b2c91bef2c 100644 --- a/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md +++ b/docs/_posts/2021-07-05-msmpeng_application_dll_side_loading.md @@ -58,8 +58,8 @@ This search is to detect a suspicious creation of msmpeng.exe or mpsvc.dll in no #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `msmpeng_application_dll_side_loading_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md b/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md index 707e57314e..d9f6dac472 100644 --- a/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md +++ b/docs/_posts/2021-07-05-powershell_disable_security_monitoring.md @@ -55,8 +55,8 @@ This search is to identifies a modification in registry to disable the windows d #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `powershell_disable_security_monitoring_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-12-net_profiler_uac_bypass.md b/docs/_posts/2021-07-12-net_profiler_uac_bypass.md index 57d4ee59dd..1ea73760f4 100644 --- a/docs/_posts/2021-07-12-net_profiler_uac_bypass.md +++ b/docs/_posts/2021-07-12-net_profiler_uac_bypass.md @@ -56,8 +56,8 @@ This search is to detect modification of registry to bypass UAC windows feature. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `net_profiler_uac_bypass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-12-uac_bypass_mmc_load_unsigned_dll.md b/docs/_posts/2021-07-12-uac_bypass_mmc_load_unsigned_dll.md index f5319301cc..259f510409 100644 --- a/docs/_posts/2021-07-12-uac_bypass_mmc_load_unsigned_dll.md +++ b/docs/_posts/2021-07-12-uac_bypass_mmc_load_unsigned_dll.md @@ -55,8 +55,8 @@ This search is to detect a suspicious loaded unsigned dll by MMC.exe application #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `uac_bypass_mmc_load_unsigned_dll_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md b/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md index f1384ce737..fc69d53d14 100644 --- a/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md +++ b/docs/_posts/2021-07-13-cloud_compute_instance_created_by_previously_unseen_user.md @@ -66,8 +66,8 @@ This search looks for cloud compute instances created by users who have not crea #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `cloud_compute_instance_created_by_previously_unseen_user_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md b/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md index e763ffbe16..c344f38f11 100644 --- a/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md +++ b/docs/_posts/2021-07-19-mshta_spawning_rundll32_or_regsvr32_process.md @@ -54,10 +54,10 @@ This search is to detect a suspicious mshta.exe process that spawn rundll32 or r #### Macros The SPL above uses the following Macros: -* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `mshta_spawning_rundll32_or_regsvr32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md b/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md index 8ce59b9e64..180aab45a3 100644 --- a/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md +++ b/docs/_posts/2021-07-19-office_product_spawn_cmd_process.md @@ -54,9 +54,9 @@ this search is to detect a suspicious office product process that spawn cmd chil #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_product_spawn_cmd_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md b/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md index 5f944b31a5..81f21b1c7f 100644 --- a/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md +++ b/docs/_posts/2021-07-21-detect_copy_of_shadowcopy_with_script_block_logging.md @@ -55,8 +55,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `detect_copy_of_shadowcopy_with_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-rundll32_createremotethread_in_browser.md b/docs/_posts/2021-07-26-rundll32_createremotethread_in_browser.md index 7aecac3b8c..9ad410defd 100644 --- a/docs/_posts/2021-07-26-rundll32_createremotethread_in_browser.md +++ b/docs/_posts/2021-07-26-rundll32_createremotethread_in_browser.md @@ -50,8 +50,8 @@ This analytic identifies the suspicious Remote Thread execution of rundll32.exe #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `rundll32_createremotethread_in_browser_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-rundll32_dnsquery.md b/docs/_posts/2021-07-26-rundll32_dnsquery.md index 03bf7bddf4..a1a5ab22d8 100644 --- a/docs/_posts/2021-07-26-rundll32_dnsquery.md +++ b/docs/_posts/2021-07-26-rundll32_dnsquery.md @@ -53,8 +53,8 @@ This search is to detect a suspicious rundll32.exe process having a http connect #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `rundll32_dnsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-rundll32_process_creating_exe_dll_files.md b/docs/_posts/2021-07-26-rundll32_process_creating_exe_dll_files.md index 7e4cc71dc8..69c4061d81 100644 --- a/docs/_posts/2021-07-26-rundll32_process_creating_exe_dll_files.md +++ b/docs/_posts/2021-07-26-rundll32_process_creating_exe_dll_files.md @@ -53,8 +53,8 @@ This search is to detect a suspicious rundll32 process that drops executable (.e #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `rundll32_process_creating_exe_dll_files_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md b/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md index 0ff39c9b81..967e0c52d9 100644 --- a/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md +++ b/docs/_posts/2021-07-26-suspicious_icedid_rundll32_cmdline.md @@ -55,8 +55,8 @@ This search is to detect a suspicious rundll32.exe commandline to execute dll fi #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_icedid_rundll32_cmdline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md b/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md index 73a1e2788b..ba8b0c96f5 100644 --- a/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md +++ b/docs/_posts/2021-07-26-suspicious_rundll32_plugininit.md @@ -55,8 +55,8 @@ This search is to detect a suspicious rundll32.exe process with plugininit param #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_rundll32_plugininit_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-27-chcp_command_execution.md b/docs/_posts/2021-07-27-chcp_command_execution.md index 98697535cc..28ba6c02a2 100644 --- a/docs/_posts/2021-07-27-chcp_command_execution.md +++ b/docs/_posts/2021-07-27-chcp_command_execution.md @@ -50,8 +50,8 @@ This search is to detect execution of chcp.exe application. this utility is used #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `chcp_command_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md b/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md index 23604353d7..bbf9bfda37 100644 --- a/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md +++ b/docs/_posts/2021-07-27-regsvr32_with_known_silent_switch_cmdline.md @@ -56,9 +56,9 @@ The following analytic identifies Regsvr32.exe utilizing the silent switch to lo #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `regsvr32_with_known_silent_switch_cmdline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-29-rundll32_create_remote_thread_to_a_process.md b/docs/_posts/2021-07-29-rundll32_create_remote_thread_to_a_process.md index 398d6f1350..91b78c8837 100644 --- a/docs/_posts/2021-07-29-rundll32_create_remote_thread_to_a_process.md +++ b/docs/_posts/2021-07-29-rundll32_create_remote_thread_to_a_process.md @@ -50,8 +50,8 @@ This analytic identifies the suspicious Remote Thread execution of rundll32.exe #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `rundll32_create_remote_thread_to_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-30-drop_icedid_license_dat.md b/docs/_posts/2021-07-30-drop_icedid_license_dat.md index 22062fd68a..e2c72ed890 100644 --- a/docs/_posts/2021-07-30-drop_icedid_license_dat.md +++ b/docs/_posts/2021-07-30-drop_icedid_license_dat.md @@ -53,8 +53,8 @@ This search is to detect dropping a suspicious file named as "license.dat #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `drop_icedid_license_dat_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-30-icedid_exfiltrated_archived_file_creation.md b/docs/_posts/2021-07-30-icedid_exfiltrated_archived_file_creation.md index 77c6fbe855..1dc538318e 100644 --- a/docs/_posts/2021-07-30-icedid_exfiltrated_archived_file_creation.md +++ b/docs/_posts/2021-07-30-icedid_exfiltrated_archived_file_creation.md @@ -53,8 +53,8 @@ This search is to detect a suspicious file creation namely passff.tar and cookie #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `icedid_exfiltrated_archived_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md b/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md index 0d4150a40c..a8e3fb49dd 100644 --- a/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md +++ b/docs/_posts/2021-07-30-office_application_spawn_regsvr32_process.md @@ -54,9 +54,9 @@ this detection was designed to identifies suspicious spawned process of known MS #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_application_spawn_regsvr32_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-03-sqlite_module_in_temp_folder.md b/docs/_posts/2021-08-03-sqlite_module_in_temp_folder.md index 99fed7dfe6..f1c40ebc70 100644 --- a/docs/_posts/2021-08-03-sqlite_module_in_temp_folder.md +++ b/docs/_posts/2021-08-03-sqlite_module_in_temp_folder.md @@ -49,8 +49,8 @@ This search is to detect a suspicious file creation of sqlite3.dll in %temp% fol #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `sqlite_module_in_temp_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-04-create_remote_thread_in_shell_application.md b/docs/_posts/2021-08-04-create_remote_thread_in_shell_application.md index 27a436b590..636d0f7c3c 100644 --- a/docs/_posts/2021-08-04-create_remote_thread_in_shell_application.md +++ b/docs/_posts/2021-08-04-create_remote_thread_in_shell_application.md @@ -50,8 +50,8 @@ This search is to detect suspicious process injection in command shell. This tec #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `create_remote_thread_in_shell_application_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md b/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md index 26651f2d9f..444d41b8e4 100644 --- a/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md +++ b/docs/_posts/2021-08-09-uninstall_app_using_msiexec.md @@ -54,8 +54,8 @@ This search is to detect a suspicious un-installation of application using msiex #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `uninstall_app_using_msiexec_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-10-powershell_execute_com_object.md b/docs/_posts/2021-08-10-powershell_execute_com_object.md index cdf1ee03c4..b01790f811 100644 --- a/docs/_posts/2021-08-10-powershell_execute_com_object.md +++ b/docs/_posts/2021-08-10-powershell_execute_com_object.md @@ -55,8 +55,8 @@ This search is to detect a COM CLSID execution through powershell. This techniqu #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_execute_com_object_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-11-fsutil_zeroing_file.md b/docs/_posts/2021-08-11-fsutil_zeroing_file.md index ecc4925f97..25e088dcb9 100644 --- a/docs/_posts/2021-08-11-fsutil_zeroing_file.md +++ b/docs/_posts/2021-08-11-fsutil_zeroing_file.md @@ -50,8 +50,8 @@ This search is to detect a suspicious fsutil process to zeroing a target file. T #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `fsutil_zeroing_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-13-uac_bypass_with_colorui_com_object.md b/docs/_posts/2021-08-13-uac_bypass_with_colorui_com_object.md index e364aa01b3..37ba7c5c32 100644 --- a/docs/_posts/2021-08-13-uac_bypass_with_colorui_com_object.md +++ b/docs/_posts/2021-08-13-uac_bypass_with_colorui_com_object.md @@ -53,8 +53,8 @@ This search is to detect a possible uac bypass using the colorui.dll COM Object. #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `uac_bypass_with_colorui_com_object_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md b/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md index 2bc8279ad3..965ede12d5 100644 --- a/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md +++ b/docs/_posts/2021-08-16-gsuite_drive_share_in_external_email.md @@ -59,8 +59,8 @@ This search is to detect suspicious google drive or google docs files shared out #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [gsuite_drive](https://github.com/splunk/security_content/blob/develop/macros/gsuite_drive.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `gsuite_drive_share_in_external_email_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md b/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md index a94f563f4e..1d56e4456c 100644 --- a/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md +++ b/docs/_posts/2021-08-17-7zip_commandline_to_smb_share_path.md @@ -54,8 +54,8 @@ This search is to detect a suspicious 7z process with commandline pointing to SM #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `7zip_commandline_to_smb_share_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-18-esentutl_sam_copy.md b/docs/_posts/2021-08-18-esentutl_sam_copy.md index 23eda0ceb1..e0068c1937 100644 --- a/docs/_posts/2021-08-18-esentutl_sam_copy.md +++ b/docs/_posts/2021-08-18-esentutl_sam_copy.md @@ -54,9 +54,9 @@ The following analytic identifies the process - `esentutl.exe` - being used to c #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_esentutl](https://github.com/splunk/security_content/blob/develop/macros/process_esentutl.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `esentutl_sam_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md b/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md index 91187be05f..029966014e 100644 --- a/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md +++ b/docs/_posts/2021-08-19-protocols_passing_authentication_in_cleartext.md @@ -43,8 +43,8 @@ The following analytic identifies cleartext protocols at risk of leaking sensiti #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `protocols_passing_authentication_in_cleartext_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getlocaluser_with_powershell.md b/docs/_posts/2021-08-23-getlocaluser_with_powershell.md index 1a67412e5c..5e7208c6f5 100644 --- a/docs/_posts/2021-08-23-getlocaluser_with_powershell.md +++ b/docs/_posts/2021-08-23-getlocaluser_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getlocaluser_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md b/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md index e4805e2c76..b4bc9d298f 100644 --- a/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md +++ b/docs/_posts/2021-08-23-getlocaluser_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getlocaluser_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md index 3a877844fd..94bf6b1d7b 100644 --- a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md +++ b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getwmiobject_user_account_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md index 57bd3cce90..6c7f0a97b3 100644 --- a/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md +++ b/docs/_posts/2021-08-23-getwmiobject_user_account_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_user_account_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md b/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md index fdb6b9416e..2b8567faf5 100644 --- a/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md +++ b/docs/_posts/2021-08-23-gsuite_suspicious_shared_file_name.md @@ -59,8 +59,8 @@ This search is to detect a shared file in google drive with suspicious file name #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [gsuite_drive](https://github.com/splunk/security_content/blob/develop/macros/gsuite_drive.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `gsuite_suspicious_shared_file_name_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-adsisearcher_account_discovery.md b/docs/_posts/2021-08-24-adsisearcher_account_discovery.md index 59fbc4249a..74618e251d 100644 --- a/docs/_posts/2021-08-24-adsisearcher_account_discovery.md +++ b/docs/_posts/2021-08-24-adsisearcher_account_discovery.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `adsisearcher_account_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md b/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md index 016b804637..b9cf1ffca6 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_dsquery.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `dsquery.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_account_discovery_with_dsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md b/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md index 66e9becf44..8b6f328536 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_net_app.md @@ -55,8 +55,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_account_discovery_with_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md b/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md index b053722ad9..eaae81fccb 100644 --- a/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md +++ b/docs/_posts/2021-08-24-domain_account_discovery_with_wmic.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_account_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md b/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md index ec0c1f5bf4..dfb6588b6d 100644 --- a/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md +++ b/docs/_posts/2021-08-24-get-domaintrust_with_powershell.md @@ -50,8 +50,8 @@ This analytic identifies Get-DomainTrust from PowerView in order to gather domai #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get-domaintrust_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md b/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md index c073d8c681..51d8197492 100644 --- a/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-get-domaintrust_with_powershell_script_block.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get-domaintrust_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_aduser_with_powershell.md b/docs/_posts/2021-08-24-get_aduser_with_powershell.md index 22baa593e1..e9667b952b 100644 --- a/docs/_posts/2021-08-24-get_aduser_with_powershell.md +++ b/docs/_posts/2021-08-24-get_aduser_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get_aduser_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md b/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md index fd6107f65f..cc443bae35 100644 --- a/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-get_aduser_with_powershell_script_block.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_aduser_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_domainuser_with_powershell.md b/docs/_posts/2021-08-24-get_domainuser_with_powershell.md index 9b1691eaf2..b2f3bce39c 100644 --- a/docs/_posts/2021-08-24-get_domainuser_with_powershell.md +++ b/docs/_posts/2021-08-24-get_domainuser_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get_domainuser_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md b/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md index 41d4d11808..d262a49a68 100644 --- a/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-get_domainuser_with_powershell_script_block.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_domainuser_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md index 005eb4f0b6..0f69ab4fb5 100644 --- a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md +++ b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getwmiobject_ds_user_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md index 1a0dd3b2a7..0a8857b16d 100644 --- a/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md +++ b/docs/_posts/2021-08-24-getwmiobject_ds_user_with_powershell_script_block.md @@ -52,8 +52,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_ds_user_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md b/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md index 35da6b268a..0785a82acb 100644 --- a/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md +++ b/docs/_posts/2021-08-25-domain_group_discovery_with_adsisearcher.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `domain_group_discovery_with_adsisearcher_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-domain_group_discovery_with_net.md b/docs/_posts/2021-08-25-domain_group_discovery_with_net.md index b3ff6f72de..c5dba6147b 100644 --- a/docs/_posts/2021-08-25-domain_group_discovery_with_net.md +++ b/docs/_posts/2021-08-25-domain_group_discovery_with_net.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `net.exe` with command-line arguments u #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_group_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md b/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md index 9ebd52fe9c..e6e1ad376d 100644 --- a/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md +++ b/docs/_posts/2021-08-25-domain_group_discovery_with_wmic.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_group_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md b/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md index 504065aa23..012b231702 100644 --- a/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md +++ b/docs/_posts/2021-08-25-elevated_group_discovery_with_net.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-l #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `elevated_group_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md b/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md index b23f7de343..ca7967f2fb 100644 --- a/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md +++ b/docs/_posts/2021-08-25-elevated_group_discovery_with_powerview.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `elevated_group_discovery_with_powerview_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md b/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md index cb3af437c9..fd67f02db7 100644 --- a/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md +++ b/docs/_posts/2021-08-25-elevated_group_discovery_with_wmic.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `elevated_group_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getadgroup_with_powershell.md b/docs/_posts/2021-08-25-getadgroup_with_powershell.md index c6b7b6fae0..4237a159a7 100644 --- a/docs/_posts/2021-08-25-getadgroup_with_powershell.md +++ b/docs/_posts/2021-08-25-getadgroup_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getadgroup_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md b/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md index b1294fd107..611e2a7bbc 100644 --- a/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md +++ b/docs/_posts/2021-08-25-getadgroup_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getadgroup_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md b/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md index 9d4ba19f80..694c34a8f9 100644 --- a/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md +++ b/docs/_posts/2021-08-25-getdomaingroup_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getdomaingroup_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md b/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md index 92c553a12b..4a7b953ba7 100644 --- a/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md +++ b/docs/_posts/2021-08-25-getnettcpconnection_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line util #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getnettcpconnection_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md index 6a068534c4..bfd534892e 100644 --- a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md +++ b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getwmiobject_ds_group_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md index 65cc2dca48..fca1a5aef3 100644 --- a/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md +++ b/docs/_posts/2021-08-25-getwmiobject_ds_group_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_ds_group_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md index 212dec8d9f..5777570de9 100644 --- a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md +++ b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` executing the Get-ADDe #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get_addefaultdomainpasswordpolicy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md index 4cec49dd26..7e55a15d7a 100644 --- a/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-get_addefaultdomainpasswordpolicy_with_powershell_script_block.md @@ -48,8 +48,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_addefaultdomainpasswordpolicy_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md index 222bb9b37a..80d454e193 100644 --- a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md +++ b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` executing the Get ADUs #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get_aduserresultantpasswordpolicy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md index 26d7a2d74c..5cd7284eec 100644 --- a/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-get_aduserresultantpasswordpolicy_with_powershell_script_block.md @@ -48,8 +48,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_aduserresultantpasswordpolicy_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md index d3bdbc732e..e849fd925c 100644 --- a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md +++ b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` executing the `Get-Dom #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get_domainpolicy_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md index 779753ae4e..e229aa305e 100644 --- a/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-get_domainpolicy_with_powershell_script_block.md @@ -48,8 +48,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_domainpolicy_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md b/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md index 6d4ade39b8..940a68b8c3 100644 --- a/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md +++ b/docs/_posts/2021-08-26-getdomaingroup_with_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getdomaingroup_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-password_policy_discovery_with_net.md b/docs/_posts/2021-08-26-password_policy_discovery_with_net.md index e79440d48e..6fed53e6cc 100644 --- a/docs/_posts/2021-08-26-password_policy_discovery_with_net.md +++ b/docs/_posts/2021-08-26-password_policy_discovery_with_net.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command li #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `password_policy_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md b/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md index e4cdca7c25..a58a8c79aa 100644 --- a/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md +++ b/docs/_posts/2021-08-26-process_creating_lnk_file_in_suspicious_location.md @@ -61,8 +61,8 @@ This search looks for a process launching an `*.lnk` file under `C:\User*` or `* #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `process_creating_lnk_file_in_suspicious_location_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-27-exchange_powershell_module_usage.md b/docs/_posts/2021-08-27-exchange_powershell_module_usage.md index 753fa1439c..c497b7c1e8 100644 --- a/docs/_posts/2021-08-27-exchange_powershell_module_usage.md +++ b/docs/_posts/2021-08-27-exchange_powershell_module_usage.md @@ -57,8 +57,8 @@ Module - New-managementroleassignment can assign a management role to a manageme #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `exchange_powershell_module_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md b/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md index 983e835459..16b61bac18 100644 --- a/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md +++ b/docs/_posts/2021-08-30-domain_controller_discovery_with_nltest.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `nltest.exe` with command-line argument #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_controller_discovery_with_nltest_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-30-remote_system_discovery_with_net.md b/docs/_posts/2021-08-30-remote_system_discovery_with_net.md index 024f255dc7..1395787618 100644 --- a/docs/_posts/2021-08-30-remote_system_discovery_with_net.md +++ b/docs/_posts/2021-08-30-remote_system_discovery_with_net.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_system_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md b/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md index c85b415367..8cdde95137 100644 --- a/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md +++ b/docs/_posts/2021-08-31-petitpotam_network_share_access_request.md @@ -52,8 +52,8 @@ During triage, review parallel security events to identify further suspicious ac #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `petitpotam_network_share_access_request_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md b/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md index 92c5a08838..ee76206438 100644 --- a/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md +++ b/docs/_posts/2021-08-31-petitpotam_suspicious_kerberos_tgt_request.md @@ -49,8 +49,8 @@ The following analytic identifes Event Code 4768, A `Kerberos authentication tic #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `petitpotam_suspicious_kerberos_tgt_request_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md b/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md index 9622853121..df985efbf5 100644 --- a/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md +++ b/docs/_posts/2021-08-31-remote_system_discovery_with_dsquery.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `dsquery.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_system_discovery_with_dsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md b/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md index 737f5a003b..99b58384f4 100644 --- a/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md +++ b/docs/_posts/2021-09-01-domain_controller_discovery_with_wmic.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_controller_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md b/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md index dd349fb47b..d86fbfac5e 100644 --- a/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md +++ b/docs/_posts/2021-09-01-domain_group_discovery_with_dsquery.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `dsquery.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `domain_group_discovery_with_dsquery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md b/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md index fb360592fa..14dde03e86 100644 --- a/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md +++ b/docs/_posts/2021-09-01-getadcomputer_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getadcomputer_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md b/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md index e490537e9d..3e73009293 100644 --- a/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md +++ b/docs/_posts/2021-09-01-getwmiobject_ds_computer_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getwmiobject_ds_computer_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md b/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md index 6dca773d90..f1c9e16b86 100644 --- a/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md +++ b/docs/_posts/2021-09-01-remote_system_discovery_with_adsisearcher.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_system_discovery_with_adsisearcher_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md b/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md index 39e4a8e412..fef4dd3245 100644 --- a/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md +++ b/docs/_posts/2021-09-01-remote_system_discovery_with_wmic.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_system_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md b/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md index 8bc380c833..b5366d7d2c 100644 --- a/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md +++ b/docs/_posts/2021-09-02-get-foresttrust_with_powershell.md @@ -50,8 +50,8 @@ This analytic identifies Get-ForestTrust from PowerSploit in order to gather dom #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get-foresttrust_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md b/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md index e435e2c2ca..c01c31626c 100644 --- a/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md +++ b/docs/_posts/2021-09-02-get-foresttrust_with_powershell_script_block.md @@ -50,8 +50,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get-foresttrust_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md b/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md index c008fb0c02..a00a058550 100644 --- a/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md +++ b/docs/_posts/2021-09-02-getdomaincomputer_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getdomaincomputer_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md b/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md index 3696c6f5e4..edc01b6d48 100644 --- a/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md +++ b/docs/_posts/2021-09-02-getdomaincontroller_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getdomaincontroller_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md b/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md index 391fdb5923..58d6aae744 100644 --- a/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md +++ b/docs/_posts/2021-09-06-auto_admin_logon_registry_entry.md @@ -54,8 +54,8 @@ this search is to detect a suspicious registry modification to implement auto ad #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `auto_admin_logon_registry_entry_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md b/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md index 0426fb65c8..c2bf35d29b 100644 --- a/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md +++ b/docs/_posts/2021-09-06-bcdedit_command_back_to_normal_mode_boot.md @@ -50,8 +50,8 @@ This search is to detect a suspicious bcdedit commandline to configure the host #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `bcdedit_command_back_to_normal_mode_boot_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md b/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md index 45417a3c6a..3d4a02ce5b 100644 --- a/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md +++ b/docs/_posts/2021-09-06-change_to_safe_mode_with_network_config.md @@ -50,8 +50,8 @@ This search is to detect a suspicious bcdedit commandline to configure the host #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `change_to_safe_mode_with_network_config_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getadcomputer_with_powershell.md b/docs/_posts/2021-09-07-getadcomputer_with_powershell.md index 9f72384e2e..aad6c0b5b7 100644 --- a/docs/_posts/2021-09-07-getadcomputer_with_powershell.md +++ b/docs/_posts/2021-09-07-getadcomputer_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getadcomputer_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md b/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md index 0b74dbef3d..70292f8264 100644 --- a/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md +++ b/docs/_posts/2021-09-07-getdomaincomputer_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getdomaincomputer_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md b/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md index bc6d0016c7..4de5ff1057 100644 --- a/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md +++ b/docs/_posts/2021-09-07-getdomaincontroller_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getdomaincontroller_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md b/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md index 50105acc34..13654bf7c8 100644 --- a/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md +++ b/docs/_posts/2021-09-07-getwmiobject_ds_computer_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getwmiobject_ds_computer_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-schcache_change_by_app_connect_and_create_adsi_object.md b/docs/_posts/2021-09-07-schcache_change_by_app_connect_and_create_adsi_object.md index df79ec020f..4f51e7bb2a 100644 --- a/docs/_posts/2021-09-07-schcache_change_by_app_connect_and_create_adsi_object.md +++ b/docs/_posts/2021-09-07-schcache_change_by_app_connect_and_create_adsi_object.md @@ -53,8 +53,8 @@ This analytic is to detect an application try to connect and create ADSI Object #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `schcache_change_by_app_connect_and_create_adsi_object_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-07-system_information_discovery_detection.md b/docs/_posts/2021-09-07-system_information_discovery_detection.md index 39abd7728d..ef6861a54a 100644 --- a/docs/_posts/2021-09-07-system_information_discovery_detection.md +++ b/docs/_posts/2021-09-07-system_information_discovery_detection.md @@ -53,8 +53,8 @@ Detect system information discovery techniques used by attackers to understand c #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `system_information_discovery_detection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md b/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md index 7eac6bd245..0924cecba3 100644 --- a/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md +++ b/docs/_posts/2021-09-08-control_loading_from_world_writable_directory.md @@ -55,8 +55,8 @@ The following detection identifies control.exe loading either a .cpl or .inf fro #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `control_loading_from_world_writable_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md b/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md index b446240461..18a8330854 100644 --- a/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md +++ b/docs/_posts/2021-09-08-create_local_admin_accounts_using_net_exe.md @@ -54,8 +54,8 @@ This search looks for the creation of local administrator accounts using net.exe #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `create_local_admin_accounts_using_net_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-office_spawning_control.md b/docs/_posts/2021-09-08-office_spawning_control.md index b935cbe37c..55ca6189cc 100644 --- a/docs/_posts/2021-09-08-office_spawning_control.md +++ b/docs/_posts/2021-09-08-office_spawning_control.md @@ -55,8 +55,8 @@ The following detection identifies control.exe spawning from an office product. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_spawning_control_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md b/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md index a4a4de4871..e0cdee3431 100644 --- a/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md +++ b/docs/_posts/2021-09-08-rundll32_control_rundll_hunt.md @@ -56,8 +56,8 @@ The following hunting detection identifies rundll32.exe with `control_rundll` wi #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `rundll32_control_rundll_hunt_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md b/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md index be179359aa..6b87bb9866 100644 --- a/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md +++ b/docs/_posts/2021-09-08-rundll32_control_rundll_world_writable_directory.md @@ -56,8 +56,8 @@ The following detection identifies rundll32.exe with `control_rundll` within the #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `rundll32_control_rundll_world_writable_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-09-extraction_of_registry_hives.md b/docs/_posts/2021-09-09-extraction_of_registry_hives.md index 0e24f25950..a95c7f840e 100644 --- a/docs/_posts/2021-09-09-extraction_of_registry_hives.md +++ b/docs/_posts/2021-09-09-extraction_of_registry_hives.md @@ -54,9 +54,9 @@ The following analytic identifies the use of `reg.exe` exporting Windows Registr #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `extraction_of_registry_hives_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-09-mshtml_module_load_in_office_product.md b/docs/_posts/2021-09-09-mshtml_module_load_in_office_product.md index 13c4b59676..a45abf8601 100644 --- a/docs/_posts/2021-09-09-mshtml_module_load_in_office_product.md +++ b/docs/_posts/2021-09-09-mshtml_module_load_in_office_product.md @@ -55,8 +55,8 @@ The following detection identifies the module load of mshtml.dll into an Office #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `mshtml_module_load_in_office_product_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md b/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md index a8d55baaa3..882ce7aa05 100644 --- a/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md +++ b/docs/_posts/2021-09-10-getnettcpconnection_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getnettcpconnection_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md b/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md index a4c7f77eac..3e34654908 100644 --- a/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md +++ b/docs/_posts/2021-09-10-network_connection_discovery_with_arp.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `arp.exe` utilized to get a listing of #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `network_connection_discovery_with_arp_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-network_connection_discovery_with_net.md b/docs/_posts/2021-09-10-network_connection_discovery_with_net.md index bff3a0cdd0..9eb8ef8d86 100644 --- a/docs/_posts/2021-09-10-network_connection_discovery_with_net.md +++ b/docs/_posts/2021-09-10-network_connection_discovery_with_net.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `net.exe` with command-line arguments u #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `network_connection_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md b/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md index 59599e80a0..200b6f9f42 100644 --- a/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md +++ b/docs/_posts/2021-09-10-network_connection_discovery_with_netstat.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `netstat.exe` with command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `network_connection_discovery_with_netstat_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md b/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md index 6dac48bf39..1e5f051336 100644 --- a/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md +++ b/docs/_posts/2021-09-13-getcurrent_user_with_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powerhsell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `getcurrent_user_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md b/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md index adb755e334..b3ec13413f 100644 --- a/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md +++ b/docs/_posts/2021-09-13-getcurrent_user_with_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `getcurrent_user_with_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md b/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md index f8327bd68f..bb20cc2205 100644 --- a/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md +++ b/docs/_posts/2021-09-13-jscript_execution_using_cscript_app.md @@ -54,8 +54,8 @@ This search is to detect a execution of jscript using cscript process. Commonly #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `jscript_execution_using_cscript_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-ms_scripting_process_loading_ldap_module.md b/docs/_posts/2021-09-13-ms_scripting_process_loading_ldap_module.md index df997c3d1d..fff24aeb78 100644 --- a/docs/_posts/2021-09-13-ms_scripting_process_loading_ldap_module.md +++ b/docs/_posts/2021-09-13-ms_scripting_process_loading_ldap_module.md @@ -53,8 +53,8 @@ This search is to detect a suspicious MS scripting process such as wscript.exe o #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `ms_scripting_process_loading_ldap_module_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-ms_scripting_process_loading_wmi_module.md b/docs/_posts/2021-09-13-ms_scripting_process_loading_wmi_module.md index 8da9d74d0d..7f40076a7b 100644 --- a/docs/_posts/2021-09-13-ms_scripting_process_loading_wmi_module.md +++ b/docs/_posts/2021-09-13-ms_scripting_process_loading_wmi_module.md @@ -53,8 +53,8 @@ This search is to detect a suspicious MS scripting process such as wscript.exe o #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `ms_scripting_process_loading_wmi_module_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-system_user_discovery_with_query.md b/docs/_posts/2021-09-13-system_user_discovery_with_query.md index 1238807792..da7235fa51 100644 --- a/docs/_posts/2021-09-13-system_user_discovery_with_query.md +++ b/docs/_posts/2021-09-13-system_user_discovery_with_query.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `query.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `system_user_discovery_with_query_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md b/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md index 7a24415f51..a8c5e7ae82 100644 --- a/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md +++ b/docs/_posts/2021-09-13-system_user_discovery_with_whoami.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `whoami.exe` without any arguments. Thi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `system_user_discovery_with_whoami_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md index adf35aa472..721dc7d334 100644 --- a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md +++ b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell.md @@ -50,8 +50,8 @@ This analytic looks for the execution of `powershell.exe` with command-line argu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `user_discovery_with_env_vars_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md index 956aef6297..e2a910be1c 100644 --- a/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md +++ b/docs/_posts/2021-09-13-user_discovery_with_env_vars_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `user_discovery_with_env_vars_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md b/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md index 798c328f0a..2bd6694188 100644 --- a/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md +++ b/docs/_posts/2021-09-13-xsl_script_execution_with_wmic.md @@ -51,8 +51,8 @@ This search is to detect a suspicious wmic.exe process or renamed wmic process t #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `xsl_script_execution_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md b/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md index d4fc4335b8..b915b5c803 100644 --- a/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md +++ b/docs/_posts/2021-09-14-cmdline_tool_not_executed_in_cmd_shell.md @@ -54,8 +54,8 @@ The following analytic identifies a non-standard parent process (not matching CM #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `cmdline_tool_not_executed_in_cmd_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md b/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md index 24d603ac29..eba7416985 100644 --- a/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md +++ b/docs/_posts/2021-09-14-get_wmiobject_group_discovery.md @@ -54,8 +54,8 @@ The following hunting analytic identifies the use of `Get-WMIObject Win32_Group` #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `get_wmiobject_group_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md b/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md index 50d81d2a7c..15172adde5 100644 --- a/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md +++ b/docs/_posts/2021-09-14-get_wmiobject_group_discovery_with_script_block_logging.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `get_wmiobject_group_discovery_with_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-net_localgroup_discovery.md b/docs/_posts/2021-09-14-net_localgroup_discovery.md index 2a2ef0092b..b335c01326 100644 --- a/docs/_posts/2021-09-14-net_localgroup_discovery.md +++ b/docs/_posts/2021-09-14-net_localgroup_discovery.md @@ -54,8 +54,8 @@ The following hunting analytic will identify the use of localgroup discovery usi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `net_localgroup_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md index 3c28be64bc..d74e1a20df 100644 --- a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md +++ b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery.md @@ -54,8 +54,8 @@ The following hunting analytic identifies the use of `get-localgroup` being used #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `powershell_get_localgroup_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md index 8db2e6d1ac..e6f8e6e1a9 100644 --- a/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md +++ b/docs/_posts/2021-09-14-powershell_get_localgroup_discovery_with_script_block_logging.md @@ -54,8 +54,8 @@ During triage, review parallel processes using an EDR product or 4688 events. It #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_get_localgroup_discovery_with_script_block_logging_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-14-wmic_group_discovery.md b/docs/_posts/2021-09-14-wmic_group_discovery.md index b44b2b897d..b2fcf6fa76 100644 --- a/docs/_posts/2021-09-14-wmic_group_discovery.md +++ b/docs/_posts/2021-09-14-wmic_group_discovery.md @@ -56,8 +56,8 @@ During triage, review parallel processes and identify any further suspicious beh #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wmic_group_discovery_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md b/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md index 6de4a38180..2daa389124 100644 --- a/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md +++ b/docs/_posts/2021-09-15-check_elevated_cmd_using_whoami.md @@ -50,8 +50,8 @@ This search is to detect a suspicious whoami execution to check if the cmd or sh #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `check_elevated_cmd_using_whoami_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md b/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md index 05429abaca..231bf4614b 100644 --- a/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md +++ b/docs/_posts/2021-09-15-non_chrome_process_accessing_chrome_default_dir.md @@ -53,8 +53,8 @@ This search is to detect an anomaly event of non-chrome process accessing the fi #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `non_chrome_process_accessing_chrome_default_dir_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md b/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md index 0cae26e21e..91bf2f88b4 100644 --- a/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md +++ b/docs/_posts/2021-09-15-non_firefox_process_access_firefox_profile_dir.md @@ -53,8 +53,8 @@ This search is to detect an anomaly event of non-firefox process accessing the f #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `non_firefox_process_access_firefox_profile_dir_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-account_discovery_with_net_app.md b/docs/_posts/2021-09-16-account_discovery_with_net_app.md index 6778ca9331..652d289406 100644 --- a/docs/_posts/2021-09-16-account_discovery_with_net_app.md +++ b/docs/_posts/2021-09-16-account_discovery_with_net_app.md @@ -56,8 +56,8 @@ this search is to detect a potential account discovery series of command used by #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `account_discovery_with_net_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md b/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md index 7a496f5954..568283a66f 100644 --- a/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md +++ b/docs/_posts/2021-09-16-attempt_to_add_certificate_to_untrusted_store.md @@ -54,9 +54,9 @@ Attempt To Add Certificate To Untrusted Store #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_certutil](https://github.com/splunk/security_content/blob/develop/macros/process_certutil.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `attempt_to_add_certificate_to_untrusted_store_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md b/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md index bea7faa2e0..394ffc6f86 100644 --- a/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md +++ b/docs/_posts/2021-09-16-attempted_credential_dump_from_registry_via_reg_exe.md @@ -54,10 +54,10 @@ Monitor for execution of reg.exe with parameters specifying an export of keys th #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) -* [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [process_reg](https://github.com/splunk/security_content/blob/develop/macros/process_reg.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `attempted_credential_dump_from_registry_via_reg_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-bits_job_persistence.md b/docs/_posts/2021-09-16-bits_job_persistence.md index c1322471ce..18b7535423 100644 --- a/docs/_posts/2021-09-16-bits_job_persistence.md +++ b/docs/_posts/2021-09-16-bits_job_persistence.md @@ -51,9 +51,9 @@ The following query identifies Microsoft Background Intelligent Transfer Service #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `bits_job_persistence_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-bitsadmin_download_file.md b/docs/_posts/2021-09-16-bitsadmin_download_file.md index 18e5f6684c..3a0c29d605 100644 --- a/docs/_posts/2021-09-16-bitsadmin_download_file.md +++ b/docs/_posts/2021-09-16-bitsadmin_download_file.md @@ -55,9 +55,9 @@ The following query identifies Microsoft Background Intelligent Transfer Service #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_bitsadmin](https://github.com/splunk/security_content/blob/develop/macros/process_bitsadmin.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `bitsadmin_download_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md b/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md index ba47842f36..95d6aff2d4 100644 --- a/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md +++ b/docs/_posts/2021-09-16-creation_of_shadow_copy_with_wmic_and_powershell.md @@ -54,10 +54,10 @@ This search detects the use of wmic and Powershell to create a shadow copy. #### Macros The SPL above uses the following Macros: -* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) +* [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `creation_of_shadow_copy_with_wmic_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md b/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md index d153559ac5..335b12f7a8 100644 --- a/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md +++ b/docs/_posts/2021-09-16-credential_dumping_via_copy_command_from_shadow_copy.md @@ -54,9 +54,9 @@ This search detects credential dumping using copy command from a shadow copy. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `credential_dumping_via_copy_command_from_shadow_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md b/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md index 34483c6e57..0486d058cf 100644 --- a/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md +++ b/docs/_posts/2021-09-16-credential_dumping_via_symlink_to_shadow_copy.md @@ -54,9 +54,9 @@ This search detects the creation of a symlink to a shadow copy. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `credential_dumping_via_symlink_to_shadow_copy_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_renamed.md b/docs/_posts/2021-09-16-detect_html_help_renamed.md index be475fdcb1..f3730fb3c4 100644 --- a/docs/_posts/2021-09-16-detect_html_help_renamed.md +++ b/docs/_posts/2021-09-16-detect_html_help_renamed.md @@ -54,9 +54,9 @@ The following analytic identifies a renamed instance of hh.exe (HTML Help) execu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_html_help_renamed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md b/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md index aa9239c917..da1fd2a2e0 100644 --- a/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md +++ b/docs/_posts/2021-09-16-detect_html_help_url_in_command_line.md @@ -54,9 +54,9 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_html_help_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md b/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md index 2e1c749817..1e53c41de2 100644 --- a/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md +++ b/docs/_posts/2021-09-16-detect_html_help_using_infotech_storage_handlers.md @@ -54,9 +54,9 @@ The following analytic identifies hh.exe (HTML Help) execution of a Compiled HTM #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_hh](https://github.com/splunk/security_content/blob/develop/macros/process_hh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_html_help_using_infotech_storage_handlers_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md b/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md index 3ddc1b4bd7..567ab364bb 100644 --- a/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md +++ b/docs/_posts/2021-09-16-detect_mshta_inline_hta_execution.md @@ -54,9 +54,9 @@ The following analytic identifies "mshta.exe" execution with inline prot #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_mshta_inline_hta_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_renamed.md b/docs/_posts/2021-09-16-detect_mshta_renamed.md index f2791aed30..6a6ea4426c 100644 --- a/docs/_posts/2021-09-16-detect_mshta_renamed.md +++ b/docs/_posts/2021-09-16-detect_mshta_renamed.md @@ -54,9 +54,9 @@ The following analytic identifies renamed instances of mshta.exe executing. Msht #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_mshta_renamed_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md b/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md index 636a090b3d..e3d1bec40a 100644 --- a/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md +++ b/docs/_posts/2021-09-16-detect_mshta_url_in_command_line.md @@ -54,9 +54,9 @@ This analytic identifies when Microsoft HTML Application Host (mshta.exe) utilit #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_mshta](https://github.com/splunk/security_content/blob/develop/macros/process_mshta.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_mshta_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md b/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md index b376325cc5..24327aeb4e 100644 --- a/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md +++ b/docs/_posts/2021-09-16-detect_psexec_with_accepteula_flag.md @@ -55,8 +55,8 @@ This search looks for events where `PsExec.exe` is run with the `accepteula` fla #### Macros The SPL above uses the following Macros: * [process_psexec](https://github.com/splunk/security_content/blob/develop/macros/process_psexec.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_psexec_with_accepteula_flag_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_7-zip.md b/docs/_posts/2021-09-16-detect_renamed_7-zip.md index 115a093bc2..6aeddd15c1 100644 --- a/docs/_posts/2021-09-16-detect_renamed_7-zip.md +++ b/docs/_posts/2021-09-16-detect_renamed_7-zip.md @@ -54,8 +54,8 @@ The following analytic identifies renamed 7-Zip usage using Sysmon. At this stag #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_renamed_7-zip_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_psexec.md b/docs/_posts/2021-09-16-detect_renamed_psexec.md index 92507c6a44..42761a7925 100644 --- a/docs/_posts/2021-09-16-detect_renamed_psexec.md +++ b/docs/_posts/2021-09-16-detect_renamed_psexec.md @@ -55,8 +55,8 @@ The following analytic identifies renamed instances of `PsExec.exe` being utiliz #### Macros The SPL above uses the following Macros: * [process_psexec](https://github.com/splunk/security_content/blob/develop/macros/process_psexec.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_renamed_psexec_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_rclone.md b/docs/_posts/2021-09-16-detect_renamed_rclone.md index ad193294e7..bdda405c1b 100644 --- a/docs/_posts/2021-09-16-detect_renamed_rclone.md +++ b/docs/_posts/2021-09-16-detect_renamed_rclone.md @@ -49,8 +49,8 @@ The following analytic identifies the usage of `rclone.exe`, renamed, being used #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_renamed_rclone_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-detect_renamed_winrar.md b/docs/_posts/2021-09-16-detect_renamed_winrar.md index 8e774c819f..c93435b1ae 100644 --- a/docs/_posts/2021-09-16-detect_renamed_winrar.md +++ b/docs/_posts/2021-09-16-detect_renamed_winrar.md @@ -54,8 +54,8 @@ The following analtyic identifies renamed instances of `WinRAR.exe`. In most cas #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_renamed_winrar_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-dump_lsass_via_procdump.md b/docs/_posts/2021-09-16-dump_lsass_via_procdump.md index 1305001617..f44eb0f2f3 100644 --- a/docs/_posts/2021-09-16-dump_lsass_via_procdump.md +++ b/docs/_posts/2021-09-16-dump_lsass_via_procdump.md @@ -56,8 +56,8 @@ During triage, confirm this is procdump.exe executing. If it is the first time a #### Macros The SPL above uses the following Macros: * [process_procdump](https://github.com/splunk/security_content/blob/develop/macros/process_procdump.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dump_lsass_via_procdump_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-local_account_discovery_with_net.md b/docs/_posts/2021-09-16-local_account_discovery_with_net.md index 93cb296fa0..0f16383b80 100644 --- a/docs/_posts/2021-09-16-local_account_discovery_with_net.md +++ b/docs/_posts/2021-09-16-local_account_discovery_with_net.md @@ -55,8 +55,8 @@ This analytic looks for the execution of `net.exe` or `net1.exe` with command-li #### Macros The SPL above uses the following Macros: * [process_net](https://github.com/splunk/security_content/blob/develop/macros/process_net.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `local_account_discovery_with_net_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md b/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md index de2d8857ce..25aa1cff46 100644 --- a/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md +++ b/docs/_posts/2021-09-16-local_account_discovery_with_wmic.md @@ -55,8 +55,8 @@ This analytic looks for the execution of `wmic.exe` with command-line arguments #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `local_account_discovery_with_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-office_product_spawning_wmic.md b/docs/_posts/2021-09-16-office_product_spawning_wmic.md index 7a705ed64f..fbb75c85c0 100644 --- a/docs/_posts/2021-09-16-office_product_spawning_wmic.md +++ b/docs/_posts/2021-09-16-office_product_spawning_wmic.md @@ -55,8 +55,8 @@ The following detection identifies the latest behavior utilized by Ursnif malwar #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_product_spawning_wmic_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-16-processes_launching_netsh.md b/docs/_posts/2021-09-16-processes_launching_netsh.md index e53b5f6dbe..498928836b 100644 --- a/docs/_posts/2021-09-16-processes_launching_netsh.md +++ b/docs/_posts/2021-09-16-processes_launching_netsh.md @@ -54,9 +54,9 @@ This search looks for processes launching netsh.exe. Netsh is a command-line scr #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_netsh](https://github.com/splunk/security_content/blob/develop/macros/process_netsh.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `processes_launching_netsh_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md b/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md index 8678b2142a..3f14989486 100644 --- a/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-detect_regasm_with_no_command_line_arguments.md @@ -56,8 +56,8 @@ The following analytic identifies regasm.exe with no command line arguments. Thi #### Macros The SPL above uses the following Macros: * [process_regasm](https://github.com/splunk/security_content/blob/develop/macros/process_regasm.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_regasm_with_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md b/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md index 2e366c2a56..5653814e0e 100644 --- a/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-detect_regsvcs_with_no_command_line_arguments.md @@ -56,8 +56,8 @@ The following analytic identifies regsvcs.exe with no command line arguments. Th #### Macros The SPL above uses the following Macros: * [process_regsvcs](https://github.com/splunk/security_content/blob/develop/macros/process_regsvcs.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_regsvcs_with_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md b/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md index 699869ffa8..1dfdba4eb4 100644 --- a/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md +++ b/docs/_posts/2021-09-20-office_document_spawned_child_process_to_download.md @@ -54,8 +54,8 @@ This search is to detect potential malicious office document executing lolbin ch #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `office_document_spawned_child_process_to_download_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md index a80072dd3c..b3fe719bed 100644 --- a/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_dllhost_no_command_line_arguments.md @@ -53,8 +53,8 @@ The following analytic identifies DLLHost.exe with no command line arguments. It #### Macros The SPL above uses the following Macros: * [process_dllhost](https://github.com/splunk/security_content/blob/develop/macros/process_dllhost.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_dllhost_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md index cea76ef678..5dd179ef59 100644 --- a/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_gpupdate_no_command_line_arguments.md @@ -52,9 +52,9 @@ The following analytic identifies gpupdate.exe with no command line arguments. I #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_gpupdate](https://github.com/splunk/security_content/blob/develop/macros/process_gpupdate.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_gpupdate_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md b/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md index 14f4335e7c..92f9407552 100644 --- a/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md +++ b/docs/_posts/2021-09-20-suspicious_microsoft_workflow_compiler_rename.md @@ -58,9 +58,9 @@ The following analytic identifies a renamed instance of microsoft.workflow.compi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_microsoftworkflowcompiler](https://github.com/splunk/security_content/blob/develop/macros/process_microsoftworkflowcompiler.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_microsoft_workflow_compiler_rename_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md index bfd5158cb4..af9f524a9a 100644 --- a/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_rundll32_no_command_line_arguments.md @@ -57,8 +57,8 @@ The following analytic identifies rundll32.exe with no command line arguments. I #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_rundll32_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md b/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md index b764fb9512..d0145ff922 100644 --- a/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md +++ b/docs/_posts/2021-09-20-suspicious_searchprotocolhost_no_command_line_arguments.md @@ -52,8 +52,8 @@ The following analytic identifies searchprotocolhost.exe with no command line ar #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_searchprotocolhost_no_command_line_arguments_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md b/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md index 9299ebf7eb..5d0b961c7b 100644 --- a/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md +++ b/docs/_posts/2021-09-21-remcos_rat_file_creation_in_remcos_folder.md @@ -50,8 +50,8 @@ This search is to detect file creation in remcos folder in appdata which is the #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remcos_rat_file_creation_in_remcos_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-27-change_default_file_association.md b/docs/_posts/2021-09-27-change_default_file_association.md index ac01126b44..876d040f42 100644 --- a/docs/_posts/2021-09-27-change_default_file_association.md +++ b/docs/_posts/2021-09-27-change_default_file_association.md @@ -56,8 +56,8 @@ This analytic is developed to detect suspicious registry modification to change #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `change_default_file_association_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md b/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md index 091e2db357..094f57a928 100644 --- a/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md +++ b/docs/_posts/2021-09-27-logon_script_event_trigger_execution.md @@ -56,8 +56,8 @@ This search is to detect a suspicious modification of registry entry to persist #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `logon_script_event_trigger_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md b/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md index 25d8d03904..bf6a101721 100644 --- a/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md +++ b/docs/_posts/2021-09-27-screensaver_event_trigger_execution.md @@ -56,8 +56,8 @@ This analytic is developed to detect possible event trigger execution through sc #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `screensaver_event_trigger_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-28-print_processor_registry_autostart.md b/docs/_posts/2021-09-28-print_processor_registry_autostart.md index 9300bef09e..4c864c270b 100644 --- a/docs/_posts/2021-09-28-print_processor_registry_autostart.md +++ b/docs/_posts/2021-09-28-print_processor_registry_autostart.md @@ -58,8 +58,8 @@ This analytic is to detect a suspicious modification or new registry entry regar #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `print_processor_registry_autostart_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-09-29-verclsid_clsid_execution.md b/docs/_posts/2021-09-29-verclsid_clsid_execution.md index f8e60fcc3f..9a945646b1 100644 --- a/docs/_posts/2021-09-29-verclsid_clsid_execution.md +++ b/docs/_posts/2021-09-29-verclsid_clsid_execution.md @@ -54,9 +54,9 @@ This analytic is to detect a possible abuse of verclsid to execute malicious fil #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_verclsid](https://github.com/splunk/security_content/blob/develop/macros/process_verclsid.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `verclsid_clsid_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md b/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md index 673fc85627..b59ccb0560 100644 --- a/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md +++ b/docs/_posts/2021-10-01-vbscript_execution_using_wscript_app.md @@ -54,8 +54,8 @@ This analytic is to detect a suspicious wscript commandline to execute vbscript. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `vbscript_execution_using_wscript_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md b/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md index 2a403fd061..630241e430 100644 --- a/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md +++ b/docs/_posts/2021-10-04-msbuild_suspicious_spawned_by_script_process.md @@ -55,8 +55,8 @@ This analytic is to detect a suspicious child process of MSBuild spawned by Wind #### Macros The SPL above uses the following Macros: * [process_msbuild](https://github.com/splunk/security_content/blob/develop/macros/process_msbuild.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `msbuild_suspicious_spawned_by_script_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md b/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md index 620a391ff7..a66980dcc8 100644 --- a/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md +++ b/docs/_posts/2021-10-04-regsvr32_silent_and_install_param_dll_loading.md @@ -56,9 +56,9 @@ This analytic is to detect a loading of dll using regsvr32 application with sile #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_regsvr32](https://github.com/splunk/security_content/blob/develop/macros/process_regsvr32.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `regsvr32_silent_and_install_param_dll_loading_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md b/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md index 96dcf68ae1..ef79a48cf9 100644 --- a/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md +++ b/docs/_posts/2021-10-05-malicious_inprocserver32_modification.md @@ -59,8 +59,8 @@ The following analytic identifies a process modifying the registry with a known #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `malicious_inprocserver32_modification_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md b/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md index 89217818fe..341b80e448 100644 --- a/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md +++ b/docs/_posts/2021-10-05-process_writing_dynamicwrapperx.md @@ -59,8 +59,8 @@ DynamicWrapperX is an ActiveX component that can be used in a script to call Win #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `process_writing_dynamicwrapperx_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-rundll32_shimcache_flush.md b/docs/_posts/2021-10-05-rundll32_shimcache_flush.md index ea0a7a2b5a..90fe606905 100644 --- a/docs/_posts/2021-10-05-rundll32_shimcache_flush.md +++ b/docs/_posts/2021-10-05-rundll32_shimcache_flush.md @@ -51,8 +51,8 @@ This analytic is to detect a suspicious rundll32 commandline to clear shim cache #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `rundll32_shimcache_flush_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-suspicious_copy_on_system32.md b/docs/_posts/2021-10-05-suspicious_copy_on_system32.md index f6ad578bea..60adf88691 100644 --- a/docs/_posts/2021-10-05-suspicious_copy_on_system32.md +++ b/docs/_posts/2021-10-05-suspicious_copy_on_system32.md @@ -54,9 +54,9 @@ This analytic is to detect a suspicious copy of file from systemroot folder of t #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_copy](https://github.com/splunk/security_content/blob/develop/macros/process_copy.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_copy_on_system32_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md b/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md index 07000ca8d8..62dd30cad5 100644 --- a/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md +++ b/docs/_posts/2021-10-05-winhlp32_spawning_a_process.md @@ -51,8 +51,8 @@ The following analytic identifies winhlp32.exe, found natively in `c:\windows\`, #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `winhlp32_spawning_a_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-06-sdelete_application_execution.md b/docs/_posts/2021-10-06-sdelete_application_execution.md index 0940ace20e..ef19d78a8c 100644 --- a/docs/_posts/2021-10-06-sdelete_application_execution.md +++ b/docs/_posts/2021-10-06-sdelete_application_execution.md @@ -59,8 +59,8 @@ This analytic is to detect the execution of sdelete.exe application sysinternal #### Macros The SPL above uses the following Macros: * [process_sdelete](https://github.com/splunk/security_content/blob/develop/macros/process_sdelete.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `sdelete_application_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md b/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md index 4bd103b6ba..3356e67a7c 100644 --- a/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md +++ b/docs/_posts/2021-10-06-wscript_or_cscript_suspicious_child_process.md @@ -66,8 +66,8 @@ This analytic identifies a suspicious spawned process by WScript or CScript proc #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wscript_or_cscript_suspicious_child_process_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md b/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md index 56a124fb59..9466679701 100644 --- a/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md +++ b/docs/_posts/2021-10-11-suspicious_wevtutil_usage.md @@ -54,8 +54,8 @@ The wevtutil.exe application is the windows event log utility. This searches for #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `suspicious_wevtutil_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md index dbc1f9e733..65df4e9360 100644 --- a/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-10-13-dllhost_with_no_command_line_arguments_with_network.md @@ -57,8 +57,8 @@ The following analytic identifies DLLHost.exe with no command line arguments wit #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `dllhost_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md b/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md index 0d2c4b9b7d..3e174fd23d 100644 --- a/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md +++ b/docs/_posts/2021-10-13-rundll32_with_no_command_line_arguments_with_network.md @@ -62,8 +62,8 @@ The following analytic identifies rundll32.exe with no command line arguments an #### Macros The SPL above uses the following Macros: * [process_rundll32](https://github.com/splunk/security_content/blob/develop/macros/process_rundll32.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `rundll32_with_no_command_line_arguments_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md b/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md index 986b44c6d8..47b7ebb958 100644 --- a/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md +++ b/docs/_posts/2021-10-13-searchprotocolhost_with_no_command_line_with_network.md @@ -57,8 +57,8 @@ The following analytic identifies searchprotocolhost.exe with no command line ar #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `searchprotocolhost_with_no_command_line_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md index 500c876e6b..4d3307d240 100644 --- a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md +++ b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_powershell.md @@ -52,8 +52,8 @@ During triage, review parallel processes for further suspicious activity. #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `serviceprincipalnames_discovery_with_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md index 99058b0b23..b855a6466d 100644 --- a/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md +++ b/docs/_posts/2021-10-14-serviceprincipalnames_discovery_with_setspn.md @@ -58,8 +58,8 @@ During triage, review parallel processes for further suspicious activity. #### Macros The SPL above uses the following Macros: * [process_setspn](https://github.com/splunk/security_content/blob/develop/macros/process_setspn.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `serviceprincipalnames_discovery_with_setspn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-18-disable_schedule_task.md b/docs/_posts/2021-10-18-disable_schedule_task.md index 2d2a735b0b..b1fc0b2bcf 100644 --- a/docs/_posts/2021-10-18-disable_schedule_task.md +++ b/docs/_posts/2021-10-18-disable_schedule_task.md @@ -54,8 +54,8 @@ This analytic is to detect a suspicious commandline to disable existing schedule #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `disable_schedule_task_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md b/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md index b49c0ec334..e1db7154f8 100644 --- a/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md +++ b/docs/_posts/2021-10-19-windows_curl_download_to_suspicious_path.md @@ -52,9 +52,9 @@ During triage, review parallel processes for further behavior. In addition, iden #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_curl_download_to_suspicious_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-19-winevent_windows_task_scheduler_event_action_started.md b/docs/_posts/2021-10-19-winevent_windows_task_scheduler_event_action_started.md index ce54a18a48..10ae5b6084 100644 --- a/docs/_posts/2021-10-19-winevent_windows_task_scheduler_event_action_started.md +++ b/docs/_posts/2021-10-19-winevent_windows_task_scheduler_event_action_started.md @@ -52,8 +52,8 @@ The following hunting analytic assists with identifying suspicious tasks that ha #### Macros The SPL above uses the following Macros: -* [wineventlog_task_scheduler](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_task_scheduler.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_task_scheduler](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_task_scheduler.yml) Note that `winevent_windows_task_scheduler_event_action_started_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md b/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md index 43e7df3c56..01c2128212 100644 --- a/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md +++ b/docs/_posts/2021-10-20-wmic_noninteractive_app_uninstallation.md @@ -54,8 +54,8 @@ This analytic is to detect a suspicious wmic commandlined that uninstall applica #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wmic_noninteractive_app_uninstallation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-03-windows_adfind_exe.md b/docs/_posts/2021-11-03-windows_adfind_exe.md index 2365ad9412..f15aa4470c 100644 --- a/docs/_posts/2021-11-03-windows_adfind_exe.md +++ b/docs/_posts/2021-11-03-windows_adfind_exe.md @@ -50,8 +50,8 @@ This search looks for the execution of `adfind.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_adfind_exe_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md b/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md index 66bdb0726b..6bf430bdda 100644 --- a/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md +++ b/docs/_posts/2021-11-04-attacker_tools_on_endpoint.md @@ -64,8 +64,8 @@ This search looks for execution of commonly used attacker tools on an endpoint. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `attacker_tools_on_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md b/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md index f3191d6347..7142e64882 100644 --- a/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md +++ b/docs/_posts/2021-11-10-windows_curl_upload_to_remote_destination.md @@ -54,9 +54,9 @@ Adversaries may use one of the three methods based on the remote destination and #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_curl](https://github.com/splunk/security_content/blob/develop/macros/process_curl.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_curl_upload_to_remote_destination_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md b/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md index 0933a14d59..4e83ffa6ec 100644 --- a/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md +++ b/docs/_posts/2021-11-10-windows_service_creation_on_remote_endpoint.md @@ -56,8 +56,8 @@ This analytic looks for the execution of `sc.exe` with command-line arguments ut #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_service_creation_on_remote_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md b/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md index b2bfdb4876..7ffcdd6daf 100644 --- a/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md +++ b/docs/_posts/2021-11-10-windows_service_initiation_on_remote_endpoint.md @@ -56,8 +56,8 @@ This analytic looks for the execution of `sc.exe` with command-line arguments ut #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_service_initiation_on_remote_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md b/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md index 596c261ddf..5be1606447 100644 --- a/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md +++ b/docs/_posts/2021-11-11-remote_process_instantiation_via_winrm_and_winrs.md @@ -54,8 +54,8 @@ This analytic looks for the execution of `winrs.exe` with command-line arguments #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_process_instantiation_via_winrm_and_winrs_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md b/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md index 8aeac0139d..b84f77c590 100644 --- a/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md +++ b/docs/_posts/2021-11-11-scheduled_task_creation_on_remote_endpoint_using_at.md @@ -58,8 +58,8 @@ This analytic looks for the execution of `at.exe` with command-line arguments ut #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `scheduled_task_creation_on_remote_endpoint_using_at_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md b/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md index b0204246dc..bd47a26fb2 100644 --- a/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md +++ b/docs/_posts/2021-11-11-scheduled_task_initiation_on_remote_endpoint.md @@ -58,8 +58,8 @@ This analytic looks for the execution of `schtasks.exe` with command-line argume #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `scheduled_task_initiation_on_remote_endpoint_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md b/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md index 886c5a25ae..39a20b1c7e 100644 --- a/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md +++ b/docs/_posts/2021-11-11-schtasks_scheduling_job_on_remote_system.md @@ -58,8 +58,8 @@ This analytic looks for the execution of `schtasks.exe` with command-line argume #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `schtasks_scheduling_job_on_remote_system_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md b/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md index 224fe990cc..e9cfecd406 100644 --- a/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md +++ b/docs/_posts/2021-11-11-wmic_xsl_execution_via_url.md @@ -51,8 +51,8 @@ The following analytic identifies `wmic.exe` loading a remote XSL (eXtensible St #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wmic_xsl_execution_via_url_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md b/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md index 355fa8a63d..1bbc926782 100644 --- a/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md +++ b/docs/_posts/2021-11-12-csc_net_on_the_fly_compilation.md @@ -55,8 +55,8 @@ this analytic is to detect a suspicious compile before delivery approach of .net #### Macros The SPL above uses the following Macros: * [process_csc](https://github.com/splunk/security_content/blob/develop/macros/process_csc.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `csc_net_on_the_fly_compilation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-firewall_allowed_program_enable.md b/docs/_posts/2021-11-12-firewall_allowed_program_enable.md index f05ea26467..a5f502c11a 100644 --- a/docs/_posts/2021-11-12-firewall_allowed_program_enable.md +++ b/docs/_posts/2021-11-12-firewall_allowed_program_enable.md @@ -54,8 +54,8 @@ This analytic detects a potential suspicious modification of firewall rule allow #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `firewall_allowed_program_enable_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md b/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md index 5a46223be1..cf06088d96 100644 --- a/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md +++ b/docs/_posts/2021-11-12-network_discovery_using_route_windows_app.md @@ -55,8 +55,8 @@ This analytic look for a spawned process of route.exe windows application. Adver #### Macros The SPL above uses the following Macros: * [process_route](https://github.com/splunk/security_content/blob/develop/macros/process_route.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `network_discovery_using_route_windows_app_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md b/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md index d1b2fabc18..1a2bccfc70 100644 --- a/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md +++ b/docs/_posts/2021-11-12-remote_process_instantiation_via_wmi.md @@ -51,8 +51,8 @@ This analytic identifies wmic.exe being launched with parameters to spawn a proc #### Macros The SPL above uses the following Macros: * [process_wmic](https://github.com/splunk/security_content/blob/develop/macros/process_wmic.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_process_instantiation_via_wmi_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-runas_execution_in_commandline.md b/docs/_posts/2021-11-12-runas_execution_in_commandline.md index 2fd20f3adb..40c0850991 100644 --- a/docs/_posts/2021-11-12-runas_execution_in_commandline.md +++ b/docs/_posts/2021-11-12-runas_execution_in_commandline.md @@ -56,9 +56,9 @@ This analytic look for a spawned runas.exe process with a administrator user opt #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [process_runas](https://github.com/splunk/security_content/blob/develop/macros/process_runas.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `runas_execution_in_commandline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_credential_theft.md b/docs/_posts/2021-11-12-windows_installutil_credential_theft.md index 3791775570..61ca76115c 100644 --- a/docs/_posts/2021-11-12-windows_installutil_credential_theft.md +++ b/docs/_posts/2021-11-12-windows_installutil_credential_theft.md @@ -57,8 +57,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `windows_installutil_credential_theft_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md b/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md index b4846acfde..9c7308a5c6 100644 --- a/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md +++ b/docs/_posts/2021-11-12-windows_installutil_remote_network_connection.md @@ -63,8 +63,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_installutil_remote_network_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md b/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md index 116a134d80..2459c2cdee 100644 --- a/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md +++ b/docs/_posts/2021-11-12-windows_installutil_uninstall_option.md @@ -59,8 +59,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_installutil_uninstall_option_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md b/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md index 0beca946a5..4f8305b5bf 100644 --- a/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md +++ b/docs/_posts/2021-11-12-windows_installutil_uninstall_option_with_network.md @@ -64,8 +64,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_installutil_uninstall_option_with_network_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md b/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md index b0664aded1..13c8ee8758 100644 --- a/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md +++ b/docs/_posts/2021-11-12-windows_installutil_url_in_command_line.md @@ -58,8 +58,8 @@ During triage review resulting network connections, file modifications, and para #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_installutil_url_in_command_line_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md index eb619528a6..04e7cc9a34 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell.md @@ -55,8 +55,8 @@ This analytic looks for the execution of `powershell.exe` with arguments utilize #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_process_instantiation_via_dcom_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md index 95bc19ded8..f023d116f6 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_dcom_and_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_process_instantiation_via_dcom_and_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md index 02534357ce..f694398ec8 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell.md @@ -51,8 +51,8 @@ This analytic looks for the execution of `powershell.exe` leveraging the `Invoke #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_process_instantiation_via_wmi_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md index 8c391e5a75..8e9697bb9f 100644 --- a/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md +++ b/docs/_posts/2021-11-15-remote_process_instantiation_via_wmi_and_powershell_script_block.md @@ -47,8 +47,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_process_instantiation_via_wmi_and_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-15-windows_diskcryptor_usage.md b/docs/_posts/2021-11-15-windows_diskcryptor_usage.md index 5781744965..16dbd729d0 100644 --- a/docs/_posts/2021-11-15-windows_diskcryptor_usage.md +++ b/docs/_posts/2021-11-15-windows_diskcryptor_usage.md @@ -50,8 +50,8 @@ The following analytic identifies DiskCryptor process name of dcrypt.exe or int #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_diskcryptor_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md index dcc7d6b810..e9815dca41 100644 --- a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md +++ b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell.md @@ -55,8 +55,8 @@ This analytic looks for the execution of `powershell.exe` with arguments utilize #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `remote_process_instantiation_via_winrm_and_powershell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md index 67ea04357d..9e46e88859 100644 --- a/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md +++ b/docs/_posts/2021-11-16-remote_process_instantiation_via_winrm_and_powershell_script_block.md @@ -51,8 +51,8 @@ The following analytic utilizes PowerShell Script Block Logging (EventCode=4104) #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `remote_process_instantiation_via_winrm_and_powershell_script_block_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-17-windows_dism_remove_defender.md b/docs/_posts/2021-11-17-windows_dism_remove_defender.md index ae8c096206..f6f1d98bbf 100644 --- a/docs/_posts/2021-11-17-windows_dism_remove_defender.md +++ b/docs/_posts/2021-11-17-windows_dism_remove_defender.md @@ -54,8 +54,8 @@ The following analytic identifies the use of the Windows Disk Image Utility, `di #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_dism_remove_defender_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md b/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md index 1efe6506a5..2da588a047 100644 --- a/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md +++ b/docs/_posts/2021-11-18-executable_file_written_in_administrative_smb_share.md @@ -52,8 +52,8 @@ The following analytic identifies executable files (.exe or .dll) being written #### Macros The SPL above uses the following Macros: -* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_security](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_security.yml) Note that `executable_file_written_in_administrative_smb_share_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-18-loading_of_dynwrapx_module.md b/docs/_posts/2021-11-18-loading_of_dynwrapx_module.md index d6d0a21098..03cad349a3 100644 --- a/docs/_posts/2021-11-18-loading_of_dynwrapx_module.md +++ b/docs/_posts/2021-11-18-loading_of_dynwrapx_module.md @@ -55,8 +55,8 @@ DynamicWrapperX is an ActiveX component that can be used in a script to call Win #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `loading_of_dynwrapx_module_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md b/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md index 7e7ff3f8f4..4eed840474 100644 --- a/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md +++ b/docs/_posts/2021-11-19-system_info_gathering_using_dxdiag_application.md @@ -51,8 +51,8 @@ This analytic is to detect a suspicious dxdiag.exe process command-line executio #### Macros The SPL above uses the following Macros: * [process_dxdiag](https://github.com/splunk/security_content/blob/develop/macros/process_dxdiag.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `system_info_gathering_using_dxdiag_application_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md b/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md index 373a3ba41f..484de028c9 100644 --- a/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md +++ b/docs/_posts/2021-11-22-possible_browser_pass_view_parameter.md @@ -54,8 +54,8 @@ This analytic will detect if a suspicious process contains a commandline paramet #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `possible_browser_pass_view_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md index bb96ee95e6..0f96ad7e07 100644 --- a/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-services_lolbas_execution_process_spawn.md @@ -56,8 +56,8 @@ The following analytic identifies `services.exe` spawning a LOLBAS execution pro #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `services_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md index ec5cb50639..bf67f1c7be 100644 --- a/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-svchost_lolbas_execution_process_spawn.md @@ -58,8 +58,8 @@ The following analytic identifies `svchost.exe` spawning a LOLBAS execution proc #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `svchost_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md b/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md index b3c0ab372e..c7e954a989 100644 --- a/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md +++ b/docs/_posts/2021-11-22-windows_service_created_with_suspicious_service_path.md @@ -52,8 +52,8 @@ The following analytc uses Windows Event Id 7045, `New Service Was Installed`, t #### Macros The SPL above uses the following Macros: -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) Note that `windows_service_created_with_suspicious_service_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-windows_service_created_within_public_path.md b/docs/_posts/2021-11-22-windows_service_created_within_public_path.md index 146cc60089..976ce2235e 100644 --- a/docs/_posts/2021-11-22-windows_service_created_within_public_path.md +++ b/docs/_posts/2021-11-22-windows_service_created_within_public_path.md @@ -54,8 +54,8 @@ The following analytc uses Windows Event Id 7045, `New Service Was Installed`, t #### Macros The SPL above uses the following Macros: -* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [wineventlog_system](https://github.com/splunk/security_content/blob/develop/macros/wineventlog_system.yml) Note that `windows_service_created_within_public_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md index b1d0e3a08d..39df0f3eaf 100644 --- a/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-wmiprsve_lolbas_execution_process_spawn.md @@ -50,8 +50,8 @@ The following analytic identifies `wmiprsve.exe` spawning a LOLBAS execution pro #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wmiprsve_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md index 77a8fa581a..ebe504352b 100644 --- a/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-22-wsmprovhost_lolbas_execution_process_spawn.md @@ -54,8 +54,8 @@ The following analytic identifies `Wsmprovhost.exe` spawning a LOLBAS execution #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wsmprovhost_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md b/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md index 0e9786eae5..af71f126a7 100644 --- a/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md +++ b/docs/_posts/2021-11-23-mmc_lolbas_execution_process_spawn.md @@ -54,8 +54,8 @@ The following analytic identifies `mmc.exe` spawning a LOLBAS execution process. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `mmc_lolbas_execution_process_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md b/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md index 5ea2780a1f..67d1d8e664 100644 --- a/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md +++ b/docs/_posts/2021-11-25-add_or_set_windows_defender_exclusion.md @@ -54,8 +54,8 @@ This analytic will identify a suspicious process command-line related to Windows #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `add_or_set_windows_defender_exclusion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md b/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md index d7a8f48ba6..b4d8260afc 100644 --- a/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md +++ b/docs/_posts/2021-11-25-powershell_windows_defender_exclusion_commands.md @@ -53,8 +53,8 @@ This analytic will detect a suspicious process commandline related to windows de #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_windows_defender_exclusion_commands_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md b/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md index 5922705e33..5adf251bb4 100644 --- a/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md +++ b/docs/_posts/2021-11-29-detect_rclone_command-line_usage.md @@ -51,8 +51,8 @@ This analytic identifies commonly used command-line arguments used by `rclone.ex #### Macros The SPL above uses the following Macros: * [process_rclone](https://github.com/splunk/security_content/blob/develop/macros/process_rclone.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `detect_rclone_command-line_usage_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md b/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md index 8f0b126bdd..8a413f49c0 100644 --- a/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md +++ b/docs/_posts/2021-11-29-possible_lateral_movement_powershell_spawn.md @@ -77,8 +77,8 @@ The following analytic assists with identifying a PowerShell process spawned as #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `possible_lateral_movement_powershell_spawn_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md b/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md index f631fa4749..044a1c38dd 100644 --- a/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md +++ b/docs/_posts/2021-12-07-windows_raccine_scheduled_task_deletion.md @@ -50,8 +50,8 @@ The following analytic identifies the Raccine Rules Updater scheduled task being #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_raccine_scheduled_task_deletion_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-08-msi_module_loaded_by_non-system_binary.md b/docs/_posts/2021-12-08-msi_module_loaded_by_non-system_binary.md index c1e89f4337..40afbb3942 100644 --- a/docs/_posts/2021-12-08-msi_module_loaded_by_non-system_binary.md +++ b/docs/_posts/2021-12-08-msi_module_loaded_by_non-system_binary.md @@ -61,8 +61,8 @@ In addition, `msi.dll` has been abused in DLL side-loading attacks by being load #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `msi_module_loaded_by_non-system_binary_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-10-curl_download_and_bash_execution.md b/docs/_posts/2021-12-10-curl_download_and_bash_execution.md index 76b7efb0ce..2a9bc5fdc3 100644 --- a/docs/_posts/2021-12-10-curl_download_and_bash_execution.md +++ b/docs/_posts/2021-12-10-curl_download_and_bash_execution.md @@ -52,8 +52,8 @@ The following analytic identifies the use of curl on Linux or MacOS attempting t #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `curl_download_and_bash_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-11-wget_download_and_bash_execution.md b/docs/_posts/2021-12-11-wget_download_and_bash_execution.md index c25394d2fc..70708a7591 100644 --- a/docs/_posts/2021-12-11-wget_download_and_bash_execution.md +++ b/docs/_posts/2021-12-11-wget_download_and_bash_execution.md @@ -52,8 +52,8 @@ The following analytic identifies the use of wget on Linux or MacOS attempting t #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `wget_download_and_bash_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-linux_java_spawning_shell.md b/docs/_posts/2021-12-13-linux_java_spawning_shell.md index 45da2dda41..b7726d9ad6 100644 --- a/docs/_posts/2021-12-13-linux_java_spawning_shell.md +++ b/docs/_posts/2021-12-13-linux_java_spawning_shell.md @@ -51,9 +51,9 @@ The following analytic identifies the process name of Java, Apache, or Tomcat sp #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [linux_shells](https://github.com/splunk/security_content/blob/develop/macros/linux_shells.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_java_spawning_shell_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md b/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md index b8916a6f5e..e5fd647f8e 100644 --- a/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md +++ b/docs/_posts/2021-12-13-log4shell_jndi_payload_injection_with_outbound_connection.md @@ -62,8 +62,8 @@ CVE-2021-44228 Log4Shell payloads can be injected via various methods, but on of #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `log4shell_jndi_payload_injection_with_outbound_connection_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md b/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md index 48d379f0bb..9d7773f4e6 100644 --- a/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md +++ b/docs/_posts/2021-12-13-outbound_network_connection_from_java_using_default_ports.md @@ -55,8 +55,8 @@ A required step while exploiting the CVE-2021-44228-Log4j vulnerability is that #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `outbound_network_connection_from_java_using_default_ports_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-13-windows_java_spawning_shells.md b/docs/_posts/2021-12-13-windows_java_spawning_shells.md index 4f0365a1d7..8309693947 100644 --- a/docs/_posts/2021-12-13-windows_java_spawning_shells.md +++ b/docs/_posts/2021-12-13-windows_java_spawning_shells.md @@ -53,9 +53,9 @@ The following analytic identifies the process name of java.exe and w3wp.exe spaw #### Macros The SPL above uses the following Macros: +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [windows_shells](https://github.com/splunk/security_content/blob/develop/macros/windows_shells.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `windows_java_spawning_shells_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md b/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md index 32fb481f4d..c2c89c4040 100644 --- a/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md +++ b/docs/_posts/2021-12-17-linux_add_files_in_known_crontab_directories.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious file creation in known cron table #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_add_files_in_known_crontab_directories_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md b/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md index 8ed1056ab5..5258bd977c 100644 --- a/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md +++ b/docs/_posts/2021-12-17-linux_at_allow_config_file_creation.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious file creation of /etc/at.allow or #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_at_allow_config_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_at_application_execution.md b/docs/_posts/2021-12-17-linux_at_application_execution.md index 94107498fb..528875e390 100644 --- a/docs/_posts/2021-12-17-linux_at_application_execution.md +++ b/docs/_posts/2021-12-17-linux_at_application_execution.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious process creation of At applicatio #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_at_application_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md b/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md index 1b4a8b2249..d0a1c340d8 100644 --- a/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md +++ b/docs/_posts/2021-12-17-linux_edit_cron_table_parameter.md @@ -58,8 +58,8 @@ The following analytic identifies a suspicious cronjobs modification using cront #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_edit_cron_table_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md b/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md index fd834052de..88507d092e 100644 --- a/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md +++ b/docs/_posts/2021-12-17-linux_possible_append_command_to_at_allow_config_file.md @@ -58,8 +58,8 @@ This analytic looks for suspicious commandline that may use to append user entry #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_append_command_to_at_allow_config_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md b/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md index e66adb435c..fc1c288449 100644 --- a/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md +++ b/docs/_posts/2021-12-17-linux_possible_append_cronjob_entry_on_existing_cronjob_file.md @@ -58,8 +58,8 @@ This analytic looks for possible suspicious commandline that may use to append a #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_append_cronjob_entry_on_existing_cronjob_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md b/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md index 12983fb28a..ccfee44fa4 100644 --- a/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md +++ b/docs/_posts/2021-12-17-linux_possible_cronjob_modification_with_editor.md @@ -58,8 +58,8 @@ This analytic looks for possible modification of cronjobs file using editor. Thi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_cronjob_modification_with_editor_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md b/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md index 8d3b4876e8..1abe911ed3 100644 --- a/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md +++ b/docs/_posts/2021-12-20-linux_file_creation_in_init_boot_directory.md @@ -56,8 +56,8 @@ This analytic looks for suspicious file creation on init system directories for #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_file_creation_in_init_boot_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md b/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md index 0b70b8edc6..282c65f35e 100644 --- a/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md +++ b/docs/_posts/2021-12-20-linux_file_creation_in_profile_directory.md @@ -56,8 +56,8 @@ This analytic looks for suspicious file creation in /etc/profile.d directory to #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_file_creation_in_profile_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md b/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md index c196e50b78..23c4b577d1 100644 --- a/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md +++ b/docs/_posts/2021-12-20-linux_possible_append_command_to_profile_config_file.md @@ -56,8 +56,8 @@ This analytic looks for suspicious command-lines that can be possibly used to mo #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_append_command_to_profile_config_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md b/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md index 9101294dcd..0eab742f91 100644 --- a/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md +++ b/docs/_posts/2021-12-20-linux_service_file_created_in_systemd_directory.md @@ -58,8 +58,8 @@ This analytic looks for suspicious file creation in systemd timer directory in l #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_service_file_created_in_systemd_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_service_restarted.md b/docs/_posts/2021-12-20-linux_service_restarted.md index 9a9bda411c..aa028400c5 100644 --- a/docs/_posts/2021-12-20-linux_service_restarted.md +++ b/docs/_posts/2021-12-20-linux_service_restarted.md @@ -58,8 +58,8 @@ This analytic looks for restarted or re-enable services in linux platform. This #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_service_restarted_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-20-linux_service_started_or_enabled.md b/docs/_posts/2021-12-20-linux_service_started_or_enabled.md index b51d1bc3f8..398104fe14 100644 --- a/docs/_posts/2021-12-20-linux_service_started_or_enabled.md +++ b/docs/_posts/2021-12-20-linux_service_started_or_enabled.md @@ -58,8 +58,8 @@ This analytic looks for created or enable services in linux platform. This techn #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_service_started_or_enabled_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_add_user_account.md b/docs/_posts/2021-12-21-linux_add_user_account.md index ab815b104c..45f689150f 100644 --- a/docs/_posts/2021-12-21-linux_add_user_account.md +++ b/docs/_posts/2021-12-21-linux_add_user_account.md @@ -54,8 +54,8 @@ This analytic looks for commands to create user accounts on the linux platform. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_add_user_account_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md b/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md index dcbc374ace..0dff48962b 100644 --- a/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md +++ b/docs/_posts/2021-12-21-linux_change_file_owner_to_root.md @@ -54,8 +54,8 @@ This analytic looks for a commandline that change the file owner to root using c #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_change_file_owner_to_root_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md b/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md index 5923d009a9..e2e15e4b28 100644 --- a/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md +++ b/docs/_posts/2021-12-21-linux_nopasswd_entry_in_sudoers_file.md @@ -56,8 +56,8 @@ This analytic is to look for suspicious command lines that may add entry to /etc #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_nopasswd_entry_in_sudoers_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md b/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md index f98d5833eb..653de10ac3 100644 --- a/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md +++ b/docs/_posts/2021-12-21-linux_setuid_using_chmod_utility.md @@ -56,8 +56,8 @@ This analytic looks for suspicious chmod utility execution to enable SUID bit. T #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_setuid_using_chmod_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md b/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md index 6742b04ad4..48d7203a69 100644 --- a/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md +++ b/docs/_posts/2021-12-21-linux_setuid_using_setcap_utility.md @@ -56,8 +56,8 @@ This analytic looks for suspicious setcap utility execution to enable SUID bit. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_setuid_using_setcap_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-21-linux_visudo_utility_execution.md b/docs/_posts/2021-12-21-linux_visudo_utility_execution.md index 34515737d7..d08b453bd9 100644 --- a/docs/_posts/2021-12-21-linux_visudo_utility_execution.md +++ b/docs/_posts/2021-12-21-linux_visudo_utility_execution.md @@ -56,8 +56,8 @@ This analytic is to looks for suspicious commandline that add entry to /etc/sudo #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_visudo_utility_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md b/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md index 0cc517b21e..51b605c196 100644 --- a/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md +++ b/docs/_posts/2021-12-22-linux_file_created_in_kernel_driver_directory.md @@ -56,8 +56,8 @@ This analytic looks for suspicious file creation in kernel/driver directory in l #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_file_created_in_kernel_driver_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md b/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md index c1b44cd225..cadc06c93f 100644 --- a/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md +++ b/docs/_posts/2021-12-22-linux_insert_kernel_module_using_insmod_utility.md @@ -56,8 +56,8 @@ This analytic looks for inserting of linux kernel module using insmod utility fu #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_insert_kernel_module_using_insmod_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md b/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md index fc89149e6d..d23ff2aa9e 100644 --- a/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md +++ b/docs/_posts/2021-12-22-linux_install_kernel_module_using_modprobe_utility.md @@ -56,8 +56,8 @@ This analytic looks for possible installing a linux kernel module using modprobe #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_install_kernel_module_using_modprobe_utility_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md b/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md index e4d2e4753a..0c29f0a300 100644 --- a/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md +++ b/docs/_posts/2021-12-22-linux_preload_hijack_library_calls.md @@ -58,8 +58,8 @@ This analytic is to detect a suspicious command that may hijack a library functi #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_preload_hijack_library_calls_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md b/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md index 10f413d8bf..bfc1c81175 100644 --- a/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md +++ b/docs/_posts/2021-12-23-linux_common_process_for_elevation_control.md @@ -56,8 +56,8 @@ This analytic is to look for possible elevation control access using a common kn #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_common_process_for_elevation_control_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md b/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md index d8ff5a17bb..c7440a0e45 100644 --- a/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md +++ b/docs/_posts/2021-12-23-linux_sudoers_tmp_file_creation.md @@ -56,8 +56,8 @@ This analytic is to looks for file creation of sudoers.tmp file cause by editing #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_sudoers_tmp_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md b/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md index f129feb0c3..e350e631a2 100644 --- a/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md +++ b/docs/_posts/2022-01-04-linux_sudo_or_su_execution.md @@ -56,8 +56,8 @@ This analytic is to detect the execution of sudo or su command in linux operatin #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_sudo_or_su_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md b/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md index b18af83410..8165e2e463 100644 --- a/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md +++ b/docs/_posts/2022-01-05-linux_doas_conf_file_creation.md @@ -56,8 +56,8 @@ This analytic is to detect the creation of doas.conf file in linux host platform #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_doas_conf_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-05-linux_doas_tool_execution.md b/docs/_posts/2022-01-05-linux_doas_tool_execution.md index eefa07fe46..3c45b43911 100644 --- a/docs/_posts/2022-01-05-linux_doas_tool_execution.md +++ b/docs/_posts/2022-01-05-linux_doas_tool_execution.md @@ -56,8 +56,8 @@ This analytic is to detect the doas tool execution in linux host platform. This #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_doas_tool_execution_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md b/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md index c2283612dd..cc117215d2 100644 --- a/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md +++ b/docs/_posts/2022-01-10-linux_possible_access_to_credential_files.md @@ -54,8 +54,8 @@ This analytic is to detect a possible attempt to dump or access the content of / #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_access_to_credential_files_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md b/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md index 767f6a7c58..15dcc62695 100644 --- a/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md +++ b/docs/_posts/2022-01-10-linux_possible_access_to_sudoers_file.md @@ -56,8 +56,8 @@ This analytic is to detect a possible access or modification of /etc/sudoers fil #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_access_to_sudoers_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md b/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md index 5bc63bb129..f413350326 100644 --- a/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md +++ b/docs/_posts/2022-01-11-linux_possible_access_or_modification_of_sshd_config_file.md @@ -54,8 +54,8 @@ This analytic is to look for suspicious process command-line that might be acces #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_access_or_modification_of_sshd_config_file_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md b/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md index 4a1612e9f5..2376eeec42 100644 --- a/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md +++ b/docs/_posts/2022-01-11-linux_possible_ssh_key_file_creation.md @@ -54,8 +54,8 @@ This analytic is to look for possible ssh key file creation on ~/.ssh/ folder. T #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_possible_ssh_key_file_creation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md b/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md index 33fdb26a09..c20e6485d4 100644 --- a/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md +++ b/docs/_posts/2022-01-12-powershell_-_connect_to_internet_with_hidden_window.md @@ -61,8 +61,8 @@ The following hunting analytic identifies PowerShell commands utilizing the Wind #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `powershell_-_connect_to_internet_with_hidden_window_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-12-windows_hunting_system_account_targeting_lsass.md b/docs/_posts/2022-01-12-windows_hunting_system_account_targeting_lsass.md index adad5e9737..b7a8723dbf 100644 --- a/docs/_posts/2022-01-12-windows_hunting_system_account_targeting_lsass.md +++ b/docs/_posts/2022-01-12-windows_hunting_system_account_targeting_lsass.md @@ -53,8 +53,8 @@ The following hunting analytic identifies all processes requesting access into L #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `windows_hunting_system_account_targeting_lsass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-12-windows_non-system_account_targeting_lsass.md b/docs/_posts/2022-01-12-windows_non-system_account_targeting_lsass.md index 322ed34f45..d9f95580ac 100644 --- a/docs/_posts/2022-01-12-windows_non-system_account_targeting_lsass.md +++ b/docs/_posts/2022-01-12-windows_non-system_account_targeting_lsass.md @@ -53,8 +53,8 @@ The following analytic identifies non SYSTEM accounts requesting access to lsass #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `windows_non-system_account_targeting_lsass_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md b/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md index 635c630692..9c4d5125f9 100644 --- a/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md +++ b/docs/_posts/2022-01-14-potentially_malicious_code_on_commandline.md @@ -56,9 +56,9 @@ The following analytic uses a pretrained machine learning text classifier to det #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [potentially_malicious_code_on_cmdline_tokenize_score](https://github.com/splunk/security_content/blob/develop/macros/potentially_malicious_code_on_cmdline_tokenize_score.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `potentially_malicious_code_on_commandline_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md b/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md index 63f5ffabbb..351fb562ff 100644 --- a/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md +++ b/docs/_posts/2022-01-18-cmd_carry_out_string_command_parameter.md @@ -55,9 +55,9 @@ The following analytic identifies command-line arguments where `cmd.exe /c` is u #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_cmd](https://github.com/splunk/security_content/blob/develop/macros/process_cmd.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `cmd_carry_out_string_command_parameter_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md b/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md index a00cca9aac..e6e030637a 100644 --- a/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md +++ b/docs/_posts/2022-01-18-impacket_lateral_movement_commandline_parameters.md @@ -67,8 +67,8 @@ This analytic looks for the presence of suspicious commandline parameters typica #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `impacket_lateral_movement_commandline_parameters_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md b/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md index d7cb3ffb27..44ccb02fe1 100644 --- a/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md +++ b/docs/_posts/2022-01-18-malicious_powershell_process_-_encoded_command.md @@ -59,8 +59,8 @@ Alternatively, may use regex per matching here https://regexr.com/662ov. #### Macros The SPL above uses the following Macros: * [process_powershell](https://github.com/splunk/security_content/blob/develop/macros/process_powershell.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `malicious_powershell_process_-_encoded_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-18-suspicious_process_dns_query_known_abuse_web_services.md b/docs/_posts/2022-01-18-suspicious_process_dns_query_known_abuse_web_services.md index dc9b8f18db..2b06a9469c 100644 --- a/docs/_posts/2022-01-18-suspicious_process_dns_query_known_abuse_web_services.md +++ b/docs/_posts/2022-01-18-suspicious_process_dns_query_known_abuse_web_services.md @@ -53,8 +53,8 @@ This analytic detects a suspicious process making a DNS query via known, abused #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `suspicious_process_dns_query_known_abuse_web_services_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-19-suspicious_process_with_discord_dns_query.md b/docs/_posts/2022-01-19-suspicious_process_with_discord_dns_query.md index 9a85bd5f2c..ddaa5127ea 100644 --- a/docs/_posts/2022-01-19-suspicious_process_with_discord_dns_query.md +++ b/docs/_posts/2022-01-19-suspicious_process_with_discord_dns_query.md @@ -53,8 +53,8 @@ This analytic identifies a process making a DNS query to Discord, a well known i #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `suspicious_process_with_discord_dns_query_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md b/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md index 7140d9db7c..33d79fa554 100644 --- a/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md +++ b/docs/_posts/2022-01-19-windows_dotnet_binary_in_non_standard_path.md @@ -64,8 +64,8 @@ The following analytic identifies native .net binaries within the Windows operat #### Macros The SPL above uses the following Macros: * [is_net_windows_file](https://github.com/splunk/security_content/blob/develop/macros/is_net_windows_file.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_dotnet_binary_in_non_standard_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md b/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md index 2de027bebb..573df6dd01 100644 --- a/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md +++ b/docs/_posts/2022-01-19-windows_installutil_in_non_standard_path.md @@ -63,8 +63,8 @@ The following analytic identifies the Windows binary InstallUtil.exe running fro #### Macros The SPL above uses the following Macros: * [process_installutil](https://github.com/splunk/security_content/blob/develop/macros/process_installutil.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_installutil_in_non_standard_path_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-20-excessive_file_deletion_in_windefender_folder.md b/docs/_posts/2022-01-20-excessive_file_deletion_in_windefender_folder.md index 4cd818b2e4..eca7d0f220 100644 --- a/docs/_posts/2022-01-20-excessive_file_deletion_in_windefender_folder.md +++ b/docs/_posts/2022-01-20-excessive_file_deletion_in_windefender_folder.md @@ -50,8 +50,8 @@ This analytic will identify excessive file deletion events in the Windows Defend #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `excessive_file_deletion_in_windefender_folder_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-20-ping_sleep_batch_command.md b/docs/_posts/2022-01-20-ping_sleep_batch_command.md index 05fa16daef..f418b04252 100644 --- a/docs/_posts/2022-01-20-ping_sleep_batch_command.md +++ b/docs/_posts/2022-01-20-ping_sleep_batch_command.md @@ -56,9 +56,9 @@ This analytic will identify the possible execution of ping sleep batch commands. #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [process_ping](https://github.com/splunk/security_content/blob/develop/macros/process_ping.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `ping_sleep_batch_command_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md b/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md index 58c68517e3..ba0de913dc 100644 --- a/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md +++ b/docs/_posts/2022-01-20-powershell_remove_windows_defender_directory.md @@ -53,8 +53,8 @@ This analytic will identify a suspicious PowerShell command used to delete the W #### Macros The SPL above uses the following Macros: -* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) * [powershell](https://github.com/splunk/security_content/blob/develop/macros/powershell.yml) +* [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) Note that `powershell_remove_windows_defender_directory_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md b/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md index efc47efbe8..1e9c3e44ef 100644 --- a/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md +++ b/docs/_posts/2022-01-21-windows_nirsoft_advancedrun.md @@ -50,8 +50,8 @@ The following analytic identifies the use of AdvancedRun.exe. AdvancedRun.exe ha #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_nirsoft_advancedrun_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-24-windows_nirsoft_utilities.md b/docs/_posts/2022-01-24-windows_nirsoft_utilities.md index ed74546b76..fe518178eb 100644 --- a/docs/_posts/2022-01-24-windows_nirsoft_utilities.md +++ b/docs/_posts/2022-01-24-windows_nirsoft_utilities.md @@ -52,8 +52,8 @@ The following hunting analytic assists with identifying the proces execution of #### Macros The SPL above uses the following Macros: * [is_nirsoft_software](https://github.com/splunk/security_content/blob/develop/macros/is_nirsoft_software.yml) -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `windows_nirsoft_utilities_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-27-windows_possible_credential_dumping.md b/docs/_posts/2022-01-27-windows_possible_credential_dumping.md index 218e72d0ad..9b69e0ec6f 100644 --- a/docs/_posts/2022-01-27-windows_possible_credential_dumping.md +++ b/docs/_posts/2022-01-27-windows_possible_credential_dumping.md @@ -57,8 +57,8 @@ The idea behind using ntdll.dll is to blend in by using native api of ntdll.dll. #### Macros The SPL above uses the following Macros: -* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [sysmon](https://github.com/splunk/security_content/blob/develop/macros/sysmon.yml) Note that `windows_possible_credential_dumping_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. diff --git a/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md b/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md index b3908759e0..f8dd1479bd 100644 --- a/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md +++ b/docs/_posts/2022-01-28-linux_pkexec_privilege_escalation.md @@ -52,8 +52,8 @@ The following analytic identifies `pkexec` spawning with no command-line argumen #### Macros The SPL above uses the following Macros: -* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) * [security_content_ctime](https://github.com/splunk/security_content/blob/develop/macros/security_content_ctime.yml) +* [security_content_summariesonly](https://github.com/splunk/security_content/blob/develop/macros/security_content_summariesonly.yml) Note that `linux_pkexec_privilege_escalation_filter` is a empty macro by default. It allows the user to filter out any results (false positives) without editing the SPL. From 6f9afa43d9bf942f895eb18e4856ff97521581e4 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Fri, 4 Feb 2022 11:41:05 -0600 Subject: [PATCH 15/16] emojis on the index --- bin/jinja2_templates/doc_index.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/jinja2_templates/doc_index.j2 b/bin/jinja2_templates/doc_index.j2 index bc85d72595..d9e8235d66 100644 --- a/bin/jinja2_templates/doc_index.j2 +++ b/bin/jinja2_templates/doc_index.j2 @@ -28,7 +28,7 @@ feature_row: - image_path: /static/feature_playbooks.png alt: "100% free" title: "Playbooks" - excerpt: "See all **{{ playbook_count }}** automated investigation and response playbooks." + excerpt: "See all **{{ playbook_count }}** automated investigation 🔭 and response 🛠 playbooks " url: "/playbooks" btn_class: "btn--primary" btn_label: "Explore" From 17206b7ecc99c1f6bbdbac74864cf7d793019ef9 Mon Sep 17 00:00:00 2001 From: Lou Stella Date: Fri, 4 Feb 2022 11:45:43 -0600 Subject: [PATCH 16/16] Re-Gen w/ Emojis --- docs/index.markdown | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.markdown b/docs/index.markdown index 3e8b4cea77..db6b78b036 100644 --- a/docs/index.markdown +++ b/docs/index.markdown @@ -28,7 +28,7 @@ feature_row: - image_path: /static/feature_playbooks.png alt: "100% free" title: "Playbooks" - excerpt: "See all **31** automated investigation and response playbooks." + excerpt: "See all **31** automated investigation 🔭 and response 🛠 playbooks " url: "/playbooks" btn_class: "btn--primary" btn_label: "Explore"

lSDf6T#xSEcOcL@0)3I#iVXQj=k{en$*dD zh5igu-39<61?qMsu6iwU+w#F<@(dh2G5aInc6=y5hqKbJWs4AB7on-#d8mvip&ZQ!Py8kLG=hu0L>0Y+{Nq%T#&hFZbSQ{gjeKPq#>q zIya-2ZNDMG8#_|KjYIYA+k|g2CR?P8gqmS|5-{o-t^DTV#HP59CEOA*$*c;PMMDya zxnb9Af<^djMOM*=4bZL?JJrd+jB;swow%z?X`^+u2j>HTQ1;?e5sNc(?=~>gi5&$# zfQ#BdJW9l7WfkE&;jfM8CtwbIzt|mJzB2$8*^VksTYYBu!2jMjm@HktZsCFmsAf0( zHAKjbQwHwZL{*#NSX;N+HEhWV5 zl#wv%xQ@-@up`qfE$h044G-N%*DdsL%xvEA23$%oC$6lX(VxWlT^~Sdh0w4%Qtrt~gqh>rX1f8%*}{6_Gy_o2**^2(UlcqkiJE7Q~Nt zGc!qwa>mAP1GQ0QRsi;`2I(n95I;;u9jt>EX(UL~XEBx)m(!nB-O>`qA5YYXCGIKD zmiK3<;;#c`m)}`~c`tl>2)-ze^*A)MH^C?s-(Vt%CV{U z*ux|)C{FrPZ%WxAnc6U~0XEu!Lu|AMc#TRK@h!g7qG<38@|{k z)?D*5x)F=t(id#ncu-mw!m>K9KZCCB@a9?F5YPY*ReRrBrakYix(@#EdIBo~Yt?TJ zkXuHbwvRhJE-KB6Z5r*aWUDlzaBq$qXKo`t$>UQz8JI{@2h4(sg&MSl)76pGdqkYD5rE~*wO&}aWLk{B zrzhL$2@lZqHP|M0%Gk2Tu&DOiFl)`Zhn%uEEqH^&NmWq4dMPAWfHCh~KgIWZFWnxX z=Lwr-i132$76yxD6XURNc?W(UyzaWKC&Z#bO;m^TL*v;^&P{TvQy&e91Yz^@IJ4=@ zxi4X(pRyFrkcmi}3!g&;h2+cdw_S<_qjh%U({Ektil(7|G@N5i@n+EO3whM4-qmpE!u6Bds~atUE@_&s)TInbn4}0 zB9f^-qy}+~%L=E^wA*VY;24CJQJ+qLd)xtucw$d;fFjZmpf?VNXKJ9_c z)8O8_W0g?;v@q*=z#-0iekDl;7(``hF;?)Y{#{P$H>B>W!VQrY^($$N@Vu1%J0Um| z*&Ed1x|FGjy27178>fPaXGl`J4}O#ya<^yFo_#0R^`sp2X41q9Qhm}YkQd^V;KJ_! z^ym!G9Zj=>sbwdUKtJS#An*LoYTY?>UpkFufr!+*Ao+;U(#9F(QX5g7mLpYXvRz6~ zJCD@1$lTIy*ONO}5=+lK%bLG$8GV&L2|kf_jNS!?omamaEK_tH_^c*kW3h+%kR$i=s>6+&NEZXnMDM)K=aY@igk6dTTodT^aHZ7vJf4~oleM^ z46m+Y&P3i3|MX+p`w#%CFghavIp&G#m|*~uuiBD*}#7g#m5>Kqx>NaH)zV9qzfe6pD9 z6@Ro&)eJNk1_iM7^vmO_f4eDyfT~OD)`EkSqK|@2k=w|&+C{qK6Yb4?(NT8Y>1ngx z3_4ZXwkj^z#je!JQ6D*#nd|ASE+ob%gg_AA@Ea3VEB8Cd{M&xOz>v-aqe_#Ia)BZ1 zwPZmVl1anYQ?MIvFL2Xa?fa$U1I(Y~rKMQjcW{69!MP1QZtdSyzBf8!g zXE6Gczn^!PTM5tU{vbzG+a3W+lFAFL^0u66!QbuFM2G|;pB9UO*K1$2)t_s1;;J-G zz*~Yogx!@RTOmDg{d6!ebfEKR{-9PuR#7meW26tPjL56G{1dNq612weJOf7OH-^5n z59IS|yx+fC&R0&1`y&X7x6`+Sb1mySfpzK7dbZkQxxQxe&12D0H*nDTZ;a@Br+=PW z%_w2hG(StnT0+Ai)YTl%=Us1Vfhl&(+n`hMzhB6&NR9zqkjsC~pG) zofNO&3r<)zzAJ6st?3%lQpXh6%^7RiU9Njf(V=!xY#JX>2Op{!{#*BaJ zl^U9I2B~u(fdr1`sKogy*53*w#EXa*j3a#isQU%*2dN9(?a8Y&i@WFMbbYWf=Bgee ztsGI}sV}*km+peb-4?m^=05xpj*e62BZONCMjNM?`L)@A#pdJZw?Ht_9r*G#1zg=i zw+|14zyK|WhnqN@l8vw(JOPv3)amJII#sPJnGM>m#pvg0`bDLIjP@B@WnCjaEqbfd)psD_s!`H2P2Ci?5L#Z zV!K+Jk;TBEufvTlix8K+dou3>6{K)6K=BvRUU7JT$^#Ge#+}~;k6a!IrGk+8FDA4s zcUAl!6zGQEq47`MQu__dL%L1%0Y!bGjT$SDa z^A^L?7+RQC>L4XuR8RzT-iPe1Es86k(J9wQ7-IJ2&#vcVJ^6g^8;r0?| zdW8%2Jr!OTa?Ic>9qZH5o8~29o89Jlb^I$)9STJ=)8?&qUHk?!LrsQW2en5Lgbkn& zuhtGZ_UVsmdHBu{Nehh|w!<|}Ejh%%3Xh-Bpp=NW*%RBwN23<(TCEFxizIiQl*OJz zI=9swLs9Zb9l?k$sR^@z!%C7VeNmsM59m-d+&X-McOAV#k_@$Bq%XC2l%dz3VXg#t zjpT=7S+X$0Vx_wLZZYVJ1DU{IYsr8G#{oD@QE^)$R%^A8kLwcIs+3+QT2y})neXvg zIy;PQdZKa-`m8*CfpV;X%z8&B;k9mS*7)4UC1SxcNM5sS__dl&6vi)_mIkvn~u z`FVJG+b;OIc2?tqnTo=0zbDzYlV%MK&pINlivkU;>;%#!%PAIRmPrEV*UglKF@BDc z!VT@Z@E;1Dm3W+*!~6MBpWul3r=654-$g)pW-fS>hfMEUXi?2SPU&x>UKY2{5CZ3z z&e#XRPWMe5M=}$QEm|j9beIVjUp8kvrM)rt!vA9rVV=;LAuE>j!M#gQEjwtG0m9Do zD>2oup8QFRe$&po`N7hSKXqVVR&_vI0n7b<^#ypDzBPb)s~Y%&TyskdfC=M$2nk?q z;?lGCwREvpalWnP%o{6&{9^p^8>SN2bvE}!Iei!(ufw>d7>VGl{cvJ~_VY^iN;Awy z)OIvzPu7y+J}?h>Eo$$nQfjyRYAls=ytkZn&Tje@V&~S;rkZPRXYZa-zjc{3l%~y2 zwQg@IQ;b@VTeOYZs52)o8A!g*5T)H%j?!@`vzpj9U-O~cC02((nduql=Oj1Oyu4yX z&s>FZcv^FZLUkpZb+u;Ec}@oyK;8x{aOE=1;T-zy$Lq85)0|4H{me|HaZWGwPM$h- zs*8m?A{6u1(c;<0DX*M!DJE?T(>66Fm4`?C9d4AkcNwY;z4F}xxC~M+;u^lLnxgN5 z{!N^Jx#0oA8*l)$ST0&j%})1FvK?J7UQi6D>NLrY(EHJ<9Q377bPGGtxFoW8lCIR5$D$kKX_=cP1Ux9D%CL#OHI40*er}oo}YQ-E@oq zvD>%2!lZp;w*!BI(9?J4w)Xj-sE>GSB`YnpybC%bG98VEl7(1dttr_861_srPl*q!mx{RA`ipW(&z} ziHnfk6%|TIGQLr`VG09IgHCVWB%t$MWJ%?`I#>G6P!@eEozzC^no^WOl%;H^e{*?fPBR(t)T!u9UP{Rctp>c)SrK@)X}_PO|(frZPg% zL`Y)x)Y%Dac(<9{NWRJO$pyxQFaGXW;NjKSi#R)Is;_QQMz(y3`V{6B%c<9;0U|W? zl@SGAp!BM~vesUN@81N^efMCYK_o=OW7p$jv%|G(Yag`CMcvMe?~#aShpxX zQ+lCUMOzi{ScvKhumafzMIHK!ryf6bO3a|Pc;xk_so*1`L&u)8gP@ZOx+R>QCl}3T zTRE+>MkUAOS`mmA{qklI17v292Eqhul>Ye1y#vQz#d9QlYV)zQ;n%olX{}}0U^*O{ zQJt|*VHU&%9eL{(Xb%MfA>Jx0jf|TbZj2P;?jW`)Kt)=Ots!UfrUt{rL;%}Vo?4t9 z$KIHem_PLw^L1*}4c+{)!282dq%X!y4qcyvBmd;g`wBd6Hz6m){#inBY3Ww63p?_X z+XGTnqo$j)r|Wy>2MU9aJRH42iSl?oFTBOAW{XnU=+YrUSsYbGyDo~gGvcxrLOUte ztU3!HjJx`kI5&rKPYbtAwPcSLFwVbDGph8i)ggT#IZWVg=9OdzVEB<8g5%6eoY|JC zQS0leZj0ubuLuG)qyngn#w!Wi<1K03Y$^HY|$u+il6JR zL`KrT2o`EAiO|tPT{?C>DxAmp+8ySCx!4rTwgqp&%IAXImbv4>MHBncl(tbfOg74N zq?}%!*u%mtA$IDvmBZ!AY|o8Ts^}Xm{7xMT-VF=yXOH^dqnCV>t>Z*<-=(3r>JH^? zrL(s9Lf-&sKHwO)0l%9>#~bb*;X#%Lr#(yygNq-TfPYK}Sy{zQGrNt(O1|b|;sJ&2 z+LW^U85yeCaBVN* z2Lb31dV5)$j>OD`9TFTZW*_(tr-8sjoy7Piq&N>0c!=R}rTK8N4P>a7AlECK#(zs~ z76h0>X{F?R6IIno9o(rSv!h?1b&{23LFEBuEfV9b>T+V`do8zbti8|^bSmqsiuN!W!v-Fo zj<4u~ahikyf1R_OEoml!<^O5Q#Gkp+O06Szda&zNKvV!htm_doUWPeRC&PJXBNb$P^r=LS_!wFwX)a8j zM~Z3>^KO~L^@rPbz2C%%uD^M`2jKa!Rt^GF=PFU{x5mf)5jRb2>d3QsqolbGdQ52p zI0nHZI=HE@ao`?S&#P~#L@4A@>@kN&biSLUGWljPcIDd;G!GMybNM1)?~r{Oc-Bt^ z+yy7CIGqoB=CK!$CFtO?VXAg9(Q^cu8`A6yM> zkebX!CE`O(vKHkM0%U39d0YVW9F+K~tj7L;opy`wkAP%QxVW#u;W`W{K0XF0ZqyDh zRap>kZQk4{F*Ywi!?`nH(84BWthm?EFt)HH%WbGlRG~}`i|Bi?iJ88CxGfYSXM`+v z2hMoVPLKyi2^?k(iN17N<@7AcJVyin6jt*+f8G3D{P|;@vL_RncHP^>fiYF;_~4+D z;jz(7olfIXdJz=0>!NaxiOV8o&jpiY>Qp$LGMHrRl@NbuaA?RI z=hS<+Xkt=otX-sQin-_!i=emRS>bkypJNe!Qo(Dra5o-OaKTtpBgj|^{R@Y4ceT@u zZIo1cb`lwwT<5JcKq5}5nhlk>uP^5aqX;R2d3x6#mqd)tg6|D!>a`+;f_`5re}(fT ztIwjUPTGm~@e0Sf{FA^zF*=m(P4gx-MbJ}O@vYO{EngU_FnPvm!B{IR3io4nm-8cz z4E|*Kn@2`i2A(ejC70%Rl$Cx9yab2aBtCk`_%UNbC}8O%E*~Q`n(R-pI3CiL3lj%z zMp)uo0yQnl)Dz>|ox)91UHD6R$m^C>#`j3ZkGUGbt`Q(86%@BfP5Qj)r8lSQh2pj2U}PW9VT&1Z?!hg~cw&VsZ)M@)!TB zfUH9}QqOJWH};Yl*ocnZ6nFMsUgybs-3+esxEjdNr)CnU`zXE2#*9kSZDmy6pd+H_ zZ0a~FU!-8Xoch3}K^Aa<&ujwEiqp{|CK39yKmr|6fyhhgo^^h$qc*0vri%-IHV|$r zj?9Y0TA2itgYr-rMou zR{>%bzvUJGtl%f8B>Qsug6&$W&*xpMYlsyr`Nq1+hzNC6nD>dQ2yY#HiKQ#3&I0kM zbs%mT@Mj^>eD0vNr7upn4$hCYmu4McwUi4}b&`Z>9zG#aX*-_id+%2j14$otd`tR} z`U}1m@)$bXUT3iUK?WF;fF$XOe=mVFUK_P=ZU|c`SyVxpuXOxaradlPM6TWl?Awmn z&O0X6h}$K0`v5VopRT&ST^p?l>}MwmtzzXUYM58Yn?XsuKrMKE4F*RE z9uLI0NkH^k#)7O7PMspQboF4IlmXXP_SR#`TLF&_v$Rwo10x+@0WmCI2PwRvr)5C|reLj^L|}iJ z#e7LbU-6Bo8RRbC+64|%r2$|M@#AL;sD)1Lw<;e(FjDJa>^+PJQ~QpW?HMU)!26Ag z)u}5Miu8;nr%2dr7yyL-8+2U1b;n0TgbJ4)HW)^SDoT@ICu0x&bR`5qC8q(rS$pZG z;JSqj7l#fn$(_L{BFg8IEMUAZ)JE>nS?DzO!8bHJ6|z=7WVOsbM(7?ppwKx%o%c`G zowdeO=I~O!j`@rE^YIchYHU)}e&s6*Z)XeH1Kc!7kV@CD8`K6SBAHcNwN>dPV6k$5 z0O2FNi`{XO3_9}zu|=t7$nk(wrM-%0`T$Mu=-^~;d05wBC9$_j(r)8t{K37qL=IrJ zUTy;cQ4g*uiHbI%=cglQBRHi<9m+)~W7r$4{~&jkc$(YU*%b>ao)Xg07;T246Pj%f zM6mG}?z`x~{RTJ@*GH%oE=Ovt0Xys!r~vZTwQb}!4B3it?~TUUBK=lpC4v}F$lUqL ztKVGQIaX2_bXN>OayFqx1f!NNSWV8JBR8;9xlV&E?dmFSluhld{HP{{vQp0xpd$iu z8^XzsHtk}S?9FI%+==~>*GaWl0wZcM9(UAC(9XE;*adQ`CNhA2g5E+im+DR{xr?ya zPA~5>(9U5YE#-XAJpo1OQcI3b>=p8wu}SZeX9cLm^{+Dg$XigPV~W%?+85B|V%Sw{ zO2&^Lx!V|01xCl<;zH-QjDas73-I{>;ux}lufd-+gBHeTeu)VA{`5r^AWn9IQovG# zD9JrRhBloK@yue4ZEfthg7Mc*i(-@)YATJO+JN>B&iOG9kGAZoRI6efqBEd~Y|4sp zntwh{Pt2EaXfg~=J*b&!{?MN~SY$KrNXbIyB?B^`(!(qqnJ;CuV6k}WR_)fJqERY& zxU8#?bKb;8s>zAeq0m{#j1b_M&8C6Q14H|g3N1$hgK=JWPtk;M{y5z@U~s({3K*pg z+z>^tHC36S-&1vxnQ zGB?}wtIin{yt0V3_%_;x383Hsvu$Wz=+yH4b=8(#T7oVp@=UuX3C{de1!WKN6gUOv zU;4hz0vCX3TYHHFPFvd3qul`?02ERf1O7L}P*FR53X!0mW>ow{j_uEDwt9;MDrL61 z1uHcD9y^k22I0=fTxW**hWZ})RaE@xA0cd|JrdHU-<yDx2#v>A`nk3!5m1a~|E%j}Ng_=dyzGZkpxn#nKC9Oc=bVwGwv z+a37~8I%B!*jfJePgqdb*wH4QV4Dhl`4Q|FZ3(6*x1a5ou>Vhp+p}NP(w+RTD1_%# zy6XGq$oVZ~t4Ktv0|vl!&1f&}b=p2*oUx1aUQMu#nnLOGe-|NJ6%QUtJY~DEe5QrG z0)Ggw>!e#RY1BetH9?qO3Omx4m=(O z9xFEUw_m*h`O>5!BEVO;6H~c>6DcC6D!?2_n6WEz>UX+8Isu@rS)~{IA@0T!tSGH5 zEloHB`NWq0vefv(f7wc!Iwzscx~WnsmO`6V^@J>zS!_@5CSGrzgShC5XuehH3oa&; z4UK?9L;C8?i=T2)luX$G=#`@)^WDZwo1D9>EWH7rJ8Oxp`^O)DAb8<=I;%dnw9xLd z5F~u2S`@}Ri-CU})%r$jbwa$5JL{%5PR$ag-;RIDuY7*zufVe|*0rOZs`O-6Lyx7L zw z3B+%Gwd~-bq0b(X@L)j!<0>WhSF81x^va+zfy2OB;VwGCx<-yzSSWv`g_^tq-R2UC zfW712Wh%rR+Lso^zDsn5zw;2ToS4fP@TPB6g>UO^0)@O?Yt&lp5D(c4Ud?dxFS?}) zQUf516UL|fG;CU|)z}8MH0L^fm|C&71-zmuk~4p`rI!lO{;1*kYB5M4c58x(OqsTK zSe6cW9#%90fIAwM`Z?WZ*=KqXC?3lC=jRJo%X}zc3=?)aFhjxF?vH?+8Q=WN?srwN zqF%1+*4vNv$BjoI{XNbhI_uU5e;#3_}J~? zp+1Mg@LQktt)}!<>90#O9^Eq1oQH2Iw@t>4@YHX+}S zoPI$-xUJsy*Ql@h)!vwO7l5y3IqgD#OmspT7pSavu*}*QX6`I6;L20Q{TSd_bDq5s z2OHidkUPKYQpD<@`jGH-leYWF>Sq=LY$tr7TFe0#b-O$(8dD9+_OoVmEQ|ZfEewB2 zKn3hCg9C#hN=Cbz`!GnbBzj#|A%4nj<&HAl8IL{L5^ny_c`RWSU_zlZ=|DNm~=;RN7^;nXLR zV5stPFjy2V^X z_I`xuCC%x#QVj5Zjr9${eWv-+^_rud1xUdWhIJe{^UI~}*NOVYWQYcdy%&5h+ihR& z(8~EOme-|_G8+vl^YzDH7R^f|LkI1wns@mpIq&Cip6h7Lw9pJaoBqqe_{)TbLaed< zPQkF=djo7)oTRYaYGnW|n?U9|?C?qc?IK@os@n@(+nAdR4CK%n8GorHWn)HcMgB#W z;nl|jl!v-cc=wn7Unc~ps$1?f9FDr;BX?*V7sNdn%-dVp9SQcvc6JWCyxo3xo_|~4 z<6r|tJ$YCK!h*iN-rWvDe&Pcii#_SW^c9qpE?(GPPQ{pWz20_B#U;?a%iC8zK{g|w zKv~?LPWZDLn<1c zGiZW5opktT{AP3@-yJ@oP8lzt4Lo)V-%3Eh;aLe=bTf272DpjqhpB9MiL;3;ZT`x9 zk*T>?6F`7laSTf~Gq~Gig%D0k5h_WxM6@{mu(~R`H0Vl^pS|+ws~LBcl|#L~t2Hh~ zoD$+dePqy|ooVB(sC#f1kd?SjTC{#0=Q+>|LPjfE4O|_Wv_~{DiUj~v?YZ-%gCO+vd3q^1;xp+f zE}*2844`0tx>X^{Jo$AdI#x=k-UZEyvOWo#gelunkT9+t;KHiH)KMADPUFYQtJPC5UdqgcKnE$e!kfCWuwSQyBr==Mj$l&LiPP086}QW|Eyagh?n+!x~-c1f6BR5+F z?SIngvd;0AHs7||dfd1oys;f8L2Whyb%bTYI<^AnzvG4tsvsVN5lZxAZBTm_D3!^* zlsYse`^%e(oSP*ta%O0(n8Mm1)be0mZv4S(>g_v0_%_IwSWcBtbY1+=n&0;>47*Jn zl=%Vk*Yg+u;lr-x#>#(P%PAS4raAIk-wyO3k45cg{X|Cov2H(a@a4Q``ujd5Y<`o7 zFsrK{)XcbSk)i#LDKQIo_iADW$cxzSofw$u^md`%RMRYR^Iyj{m&%y^xw(mM%l+1q zVS@)p0;nL zselVA`7v-vYPVqAK)rN}6IV-3&*={>qE)~Vs%Z){w;zMzlVtOIfcabgwhA~Tht@S| zhN_}dX>VHH(oQKo`Zzz0yrcIUNSumJpLVD^N?dS3Egc>g@o@dNx%oP>_e*bY8NDlG7 z^JK5`iI!ADvutAf;)mfZloS+V&uCxA3qt-syg$3??j2;t#U2;U`}b_;PYX$Yj=p_R zIqA7-Ajd5;3%vv8!6)xmPb)WV@&@$nWy)rl@8)$qjW zVe{N{!|ouPugAX;#PEn*RaJ|fxPCn~{_A-yy};6ISDKhq&V(}>s1#h~$mA_(uZRzi z(|@kKL2h7c!u3dRc@;*sx4bekMLt0=eI;8_=K_fQaB$KkWFp3 z7i_S$nM%|GOt2#}W`_nEMIlVsEbE5oOHOcNs8u(soTWq=|b{=`_tIYJfvl&B*1 zIpKpXafD6W(I`;dKi*7D*=Ii{O+NE&(k;gX!AcQc^r`9efm)tKYN;*ia9;NT+@JZf zS#PcfWm-4TqjnXHdGLGqvI-wK*+QACw|;}+?;fAkMRK;ddSke_U!HvXlCttt>XV#g19s>V5sVii+C_G1b#`y{}$h;?>!ePt1EYGbDL*`HIsS!jF zoHAom|HB2cX&u)eWY>}T)4RRfckq#pby-&-U)gdUds>x#hq8q`T;TRtC;17N98bMw z%JCQj*^pxh+5W0~_wGHZ)4i3iOp8v1>Kd(($5mgH=&h3;7gd}|3k?ZEr(#o0Z4+3k zZHaw^PZriym0usoOe5YuRL+newpYo}G7Zd3t9u$-_8}l@>X}9yBSf8FAz^$=>a_gvFLx>qwm|N zj79LZT;&!qc~+;98!sR5C3`>F&y+0x>Y?)gW$PwzYbx!({zK)+xj(r>iEwP^u(uL< zL>Rb(KxzG`ATanl_ zKA4116&cNo`+`o$8e@ne+0E5w6|lDqed;LeSY+MGsXg#J{^~aaJzXBykIEB%uw5>5+YuFH-iEB!iMFvP{>Z;F!`iTp9ss9qSNj*)Iip2^)n0Dnuxoj;mkV52u4UoA zQTX~rInG0{LYz0VoEJH1*a1qpPOCX{ZPliF3VT_!fXv?mnJt!E&YnH{Z^r)aBQU3x z@>00qp?*(K>abQ+m9&w&Z6)HWT7jDkn#?UV{=~ZG0W{8entQX(4zv0MfG40 z;ev7dx*|GF&fU8=^E>zR8Z5dFRVQ}1Z$dHg{)?Qb7Xcta`N%2;2U&j4iF!*F-UBNd zH+P=j)+Z&lwGXG)xo!dIbRcxjGH8E)38oEGoI9%g-yd3y!@&!>+_(e5>=dIw~n7j6Sx%sg_{`J3I1k z^vi##TQ$FuCQ-*eN8$Enwpry52p3|g3zG&t_-kXE8uBDS!E?OB_&XXYT7QX5A(ekq zH{1^(Ot#_dt1};`uNek4zyzF0*FH2EM_seU(j&(ftSg$+%FSFwS!v{yuI>#`z~z6Z`a*7di9;q_S2c%<<4E^WOBz^95c zwNmt*vu7kmw`X|A`@RQg6>nSG>F&Ld zuLs|B1%BXr?rH2=P?PSBb!EYr%^>yqtI(FCnwckVAnI6wkw^L%I&Hw%K9$4o3C?>R z)01M>U!}7Llf+D+Tq>)8K3KynH$njqf*@`t2cIb>cfh*P>==f5s4L#!-nCO?aVVps zJ3#foNLLZRiymN9>FfeG+vkn1^ExSuC?-kjJio^xNJKZ$>D{w9k}ozj)c^KS+V8?{ zzkT2YaAxA>d;MSst~DFj9e8)+Yipf1dk$K+I}^P;XqgX;SV7xjqAZH#sD|U|xtu65 z?)s!GM=K~+s&KYomb`QsN#N&qGU+<2HyBjjBNOz`OTz?3W^QiRgP$x06D1`nthv_K ztWtAlP!!oGK3_ugII{yF?Q(K*BK@xd^+sAn^{lNA4K<~454Gl)q07Ce+rqGC8eV$| zX4I`^!!3*AHy=m{6zKU-*a5DXzFbBu36_`@4Uwbn3`UVVDnw@=>H!!NpAq%SSJM}CWyLIkloOkPV2SQtuLYmWpFsA`s5W^x zs9@zPgz_hwH%%l@yb35xjV(LQNgC@YNG6Zt3k_O0=)AVGm*zz*W$<0m#nlchaAr>e zTQ1CMS#@BqO_u{oWDp<=i*z;S$Q9pF)Iqh;pXPTR}B8IY!E!H^HLV^PskL+$xu zY>hbnshJtid{O@ED`ppeHRpPQi{__@7oa_JcX*Zg~SM?oTg3$G2~i30`Yp=OKDQ&lPxc{hjQ9 zTC<>ptEYl7JWaCe7G~QVRd=)P-b{1vte%E@?3_-~nGls2^bKn#?A4fw_}m~6{jFsx zwQHI<)=?Nct-|*?TvX8R^Uxsb&k}3ij+>pxCa9+nKaO9eHS^NzyL{4+Ol#7+V0R3on)_YLqsXNC|`#{U}hU9pr z3);qk=GU|e<2Cj>M<}OWvZqThebQ~OQgX6R2puo;v_Tzy&}tI^gj^XAqI0g*etrNi zVvwa2NZc0(C1aKV$sSA=0Ac`=nfW&$k3~x^xW7s0fh4qi^nDmD*O_C_V>+r{6eK%O za`6RgWZKx1kL&=&+G%FZ>;o8Q12?-)ECcluHmKE4WHLl zz7+{1jp5c5!Ksn*T6?jCXNQ&1$1%k__ayRX4ft?ia&5<2oo`LGI;%I?62(DrtUVED zGlC|hFdIKqu#4TEZH%mR7Mf24v#vAm1RAE~JYzl|O~xe5j8U80hvq~rSC#b9j{8U? zsMU4g(tjo)yt$o81pzQO$3X&KJr}^re7WccB0CU!r^hl(DmXA|McmHn7mC1yAAdgg zS3>rMt6LKGKX(#^Tl39nF@rM(g!R?L6p8KERj%HuW7g8KIGSKl-dS@1fNv9Q+B(Xg zL4L!u!aNw8F6Oxum+Ge+E7z={sV0NsZ*FN>Xke-EL((hqYU%V$&F)S3*w2A20C_#H z>~-~U7LrW(5WI&e^*^AVhMOg@dOcSDv z8YydISO)`?k@vpLFDAbsY4jXp3vZxD>IRbLl*x^eatUr585aFLUQSH!V*wzj%L@>b z*cO);q?{wWFmX;Dke{)_@tJ%d-sg~_L&H7qsmD@GuHPS4GtAnVX#hdXsh!4EdGa0x z5LWyHpFEJT)$dDSX>tVp^o7Fs^wL|6NptSmiS!3k<-;xn+M{_SYU)rh#7~{q zGzffsO}zmEngj2tWU2t58ENuY!tsbw85Ic7M#FG_pyrl{xCQFqSO%M<5zXu#r@UiZCn-qKQ~xWpYAB%ivLM(Ox()Ip6gV5G0B0c@v<(t zs?vWZCIc(&< z7PF7jwf__jlz@9`6zUwfpMl?s7Q7OOGzUh;7Sbk?C1vtF94+dBB_Em9i!MEtS36Mh zvFt~y@=;QY9OZuZ1N@B0W%UcO$|&Gm$w6ld`8ek@83rOGfy-b86567#J?sstV_A?v zb*#_dy&%ID86qzJNcDNwDGtoeP0y77x`e)~{Ahp59jNtJ0zix({kW1yM{WR$oRyP8 zuJ0wCjTYUqIJD>yE1x7@@CVh)DY zQTj3p&MpDwnRwt-IYAmX^JLRt_eIiMR(4G@@&YZh*EI*6A1fhr7ww+jQJJzRG2&FH zyYhs%Am*vXcmG1=bB6q*r=+}4gh)J|SEYpEZG3TF{JIP3hJkmlDF=e>j@w!RTQ1TC z&`g4C$F5(hJ3gKtr#=}we^_Q`UHu_mDQw5Eyl-j3kzdk6K)NDYZylbY%1VuU=%3B- zB_`+D-NQeMdZ+^nvizw7+gi5f9>BgM9J;Uwn*wVY7LfIj2(pG*k$3mOH`Q;&Lv(Mg zrl>%6vGh@3iP#?7b_&ME|ITRG1F^hz$cn+=H(AQ-^NJl#Sh>P)%@U}0sEK;Qbc{tQ3r#2kmw%CV1ry^^l_iwSgJp&e(3cy>!d6b)VY7s}1o(l_ru zZbfU?vectT%o|T{+_dq7r&zt0dtdu+IdV(y{RHvK3X0EK!5gL+h%+b6d7-tW`4V$q zU*G1zdM&oCv%cB(_EuZLHGfYE@8SxbutJ%we8nC><|OD|#=?ZW5H&EKhtnBLSshpZ zzL-1N<&v>lTCS}dYp{ioh`^4Mttpb*&dpk`+)%53wKN843Q)|G!Uunpt$qv4ih-A8NKX`Pz$6{B`_YwISGiR=a1FZNV7}~+hz#+5FX86YnLGZD!aE9En zHu`D&T+1VB6=MarMb;5D&W$f!h1Yr(UJIzPHwwIUo^3^e?DJrSl!p4NQl0 z*#?lt1A9b_V-D{q0fY|+Dq;0Kde_AGY5(F4Hnoq%7Aleg%Al)vRwN|!U zHaaGT3$5vBbEvh!c5tA5S1$HsUE0IUwH{u1GTf1-1!ACiXXG*bWEYgc7#G0@-`!XA z)x_`JfKY^9`9Q_zP5<5M5TMoJSiu{A1JTddrL1W)jI4)O2N9&HI{Uh+E#t7lHH#HJ z`DwCX0di*oa7LEXf7pJc{FQ{%L0&pc+g}bRO zGx9eN=BSdoyMN#Em!+SB#bNQ3Sr&@rze8H-Hg8pR^`G^LSdm>Lwac=WesJKQN5ckA zX`+dM9qen+g{nEF_@=KI1iabyaxRaCK}_(!(gdzRfV1!-{cvvhcgH}q%eA$jGk1qS zf2g*M<-uqum;Uo$!XbgS)BTYSFgg>=nFVt!EO{#$-Pd%dLo1Sv?2Xa3_h@MJ3fTt> zrR_%l1@i!k23dR*7zvwq=YZtBhHcg5V*;AC;r-CU9L??P6flsLlgYy73VVzsU1Bs; z`RCD)AZ!x#XbNUxL|+8P(6++AR<8W=YjPMvga$t*J5@gwKvC`{-|SDd?tI9tGL>OG zo0RNGD5%0ZD)lwxV_#OlKAn~QTrn>op`Z>B0g|6@BrK(0fS$v+zg+7+;NH3!eZ%>x znsd#CB5P#5BHgxa_lH|J=^EXk5;s zd$Qvw1>#3t?rF7T zlhZa0XKC)eFjle>aT@!2jx9b3k?Emqb<_Tia-zF0pb=$+cpDDu+3$DBYmRi>jg1WRWp%z>gJ>ukxh$2ZWHL_DDRBnkg+V`l)`LS*BCw|qidw&FMP%AbV3L5YjP;+w6TB~U*;Aoi48585_?WsH1F~|hY@131Q+)~ zWzFG-94++S9T^2Doy?5`#VbE2+zcDoqf+-*$sjG0Y{N@hIgAX*$s*76N!wtVQ~2$s z3pi}W6rJrKUm&4^x1Kf!TWTv{xtzHC`xp}*;iMPdBdrO}&r|}Q1eS0rp z>Jc&%#kNL_ZdsgVH*uCm4L7Ixm#_i!f7+uwjPq8`m(*B=!Wu&bAM)VdX9zh# za%QS3BUKCLXKKd|8CYbS0TL1aNhL@tQdHRe|-G&Dk{fE(|H#>dM zod+)*Si*{bw9G2~l3M%`4CkVj;S`-^I7K1&T!U(vtrJ4|7)C9&eETGf0`5sT5m9<- z3EQ&JV+3h*0H0CESVU|=Ld}VsXFcds@Q63KVHiny9umgc4A~gF8Jy zLa1FwCQj_$UNN{yDp?*$ibtAP#wbhPdq@VkbmkWxZ&N9;&A-eQ9R)+v+EARW2Sok} zkwTqb@WZROwB;WjYRSqPqLBfN>_aVov4xk>$Cum^2~lpg^GDJzeD%5>om#q;R}cF) zxatpt)!DGI!fWB9hpYlm;_W>E3EXQrc<&)vmRPQ)fQHavV=nN;M7VQYk)lQrBHYFJTk;?$ zt0{<0o;XL7xw9u@+Jl&6B^&czqDgk%eEx`2#?H?9WlDWFv|77Orl?=PUWV|(@s~1s zA0eJ?tE4fTmdWohHuSaQ{BPgVK;ILNl6tyMZf6-@?Y+M;R_K8bVf7q09sBzw@ zPb?d!rtCBljwjrkN0^TuF7Ufimhs%M2Pl-99`)G8XWv{ANy&S>lVq^A)_l2#T(s=Q z`vzZ1U~T7|ig@hxpR2wVXADHIMHX(#Iq0I5J{HVbO+d~`sM(!gz@(+M4wxJ*pmV%3 z6*>7d74ZKnrx_DoIbYYZ)P@iwTS1B-VV5=;Y|2hpb3FFY2G34k=_HHqwat4GP3&rrmu zWx6$`TF<8)rDIOS?ge=;Pt_-Zk^!xV+5C>o(L{QJ4<)wkq*M)irX|bvXD)g2L8i0L zfo?{=7`?!@XRFS(wRU<%$T0~Qa(qm>JF((`cjLN*-52!#NH`a&w&DM-bsB=)&z)g} zm5uW*0J#&KiNjZBJqxD`PcJ@c_uDuU##qHEn(DfiW&7ImohUJ!RV7LM@c2!gdGBB^ z=KMa7htqY8;6_zQl$2HcNC$gl2;jrn14Tmx6g zaO;!srFez?3$QI-)ue62@X3#%iyHQ&hdauxkY_~((Sl|WX&B^D5hB%I(s|P~RQ2NQ zl{=`j5UI4>1(dM(hmQPr3{ruk?zH@F8X+L{oO#PNB`wAz?2MLPQ)(>4<1HBXrEV2= zTM!fy?jLF1m76PEhrR|AMpoQQSDIbxH=h8}_c+lCKbVA4wHMfa8&5aWtz~4|(}v$J zjkm5>H#2A{4>`s~YKlVcwR1>%Smzt}HOg|~%v`Bz!JZa7Yij|t4mBU-p4y%8BN5a8 zvrdRlzh(9WQ4d9#uH^}s&6Te0n2)9YabGR0P>xPx@4fV~;J;BGa-3~@{teCUznp_D zpQD7O!l_?q^;^P`3%5GBP}9aK6J30B?;{*N0RO7e0NVuoNv*Dx{`x&z|49V?^WQO@ zqK~@QD(SGF603Y*F&Wx$r$m-yJb%Kx`R51ClUE@*UL-L}`0K`ETk z=v>)1+)p=k^AxA(&h69eTM=H{6@#wb=J>6;>plk@3EVUq&EVc zw(WfAFWR_xM~I-YWr#59{qDr;OTIAol6?XqBD-B&96Vn9BWQ~UonQ- z-7sTje)o%JlAPY>{e67i|NZ{S>oL7v_j29Wecjjnyf#3)y-&;-q+0;j<=P7A0j5=S zs4HF1#(jh}%j|;haDhPTZ)r0m>+#?mj4TQ z8l`Bv-ez}8ys-2&*v24QhL2r9T6~iEHp3%t)!>%J|A8FfLH7zQE5aRsCn1Q7 zG22$XUnl1UqRxGKMJ`!(t>a&IYU(-nSskB{j&W8Cy7NM0<Q8(`onuRnnqneg5G!8~vd+_cmlUta281FHBV9FS@MGe1=Ef9(aW0leaoRa*); zmm>6`iamd9_Wvn;0-&Vi9S+AC{ag3|f{8Tp)5Ce_vy3F zWrJkkgz-=TZr!&sbh;^~0Sl?Uyxh0a7+)Lj(FdH}zu|=&G*s~f&=F^qRsYY%{W1Wo z;**`0LUdF&0`i3oG1(RK!)D+GRA|nZT{4LGoCX~UcE|JltnD@fFzilcbs8O))&PJT z(r-(C!)g-*FH~|u{gN!CEqWb?ih5_QYcN<#f2D7x6Tq*ncJTGUQgwKU#}uu>@Y;^3 z(EDNxOlM;d$l@k?k;BI$THM1X43}dNRr;nYcQ}h3Vr4}q@ZE@}E<or&|Tk~D5Ao~}TCKHfeRCMvi&Sa31!_;Ah`G_}{-klbKNW*jG9 z*NDzSOS9PR4`|7~|C^oS_Fk~mQ3-Y1zMrLH{1&EizB;T!lPs>PKo|D{W40F-en3S`_mE|dyU*#=Bz^!RlWBR-EVPgcxo zErS|#KXk?$7z0bz=FRLrH+^#7(S*6nvUyE=i}<_J8ebKo(t2C%&BEI_lqkR*%NB|f zg?xhfC1m}4VKNTKHqQ{1HSebmT^h_!QQ2;CB%L?pRpVXw!|T;PtmuS+NmOk&{5M|6 zSI?E2dTPdP;vChJqi+gCyt_XL4!de-l))SNP%OhQYF}u&%HxOOS&Sz&IJnNv>%W56 z2i&DDU~LUu#>8Mr4)a(_wK;BXRMu};MDs8Qc6vzUf}<3&KP;UPB#WCyj%wjTVqI*K z-BWzx7HidTEv3})cV>vvp)J4*z92bjm$dC}_Z|%FvZa0bPPI*9Zk7Hj!_JGJYbHjc z5QkEQL>t{wCZk&db~fNZ9pOvKY|eOl#C$oDs&%s@-FC8}+2=x>>-pqc-Q~VG9_&nL zeIe8OjW1(ggPmPaViv()B4sxs8ng!^@#0cn>xt~4Kf5ZP>f8|&QpQN6tHfOB4ef(G z`2P47Y&?3cNw7rfXoN3up#5`341CHRQ)&jhG<9~n1p=UHEoaRoG{F>vML+*&_4kiX zq!q@Y3dHwDA;#~7fxnowY%L(Dmqi?LdTNyytbOq{+isnX4{!qpx zob~`=Bg(o*a&8UQr#rOPUx)qrD+w1ABa7?m@(>;8L64k%y;eAKeKBt^{LeHcjskAg z1il!pg`Bnm6Z3)2sH9;h%|jX}ZBxS~*E^dg9(hB@{?7%|^#cXdnVJ1Hu8TXPH-RC3 zbbXrJ2-aFmzF&v%G+eHvF;J~@!kO?$Id^-Dn(S!fgd4^~HF>NV)Z18W0WqwG9=+&O zdyd7;YHoUg?8~BQ-=dZdQ`H6rc2Mt!zZhkH#__gz%tP=X+-SnT-8$yuH!< zlomBHJ2qQ=Jfqy+5U)q0*uFy>ULHENCz{kXOw0fMm+3L*68Y*_d30l6IkNZ=(DY9y zIG=-;>oX8n{6i?lxhaAxX`tBWAZ z`*%_QD0Vb(TSb3$TjjE`_JKnv^@$u031JBH#)S1xfY|gtf)wTt4W{Lo`kRKTf1n4( zmE7F)Xr!iA;2M21aTpzK2-qunF#~Lhl;4;#wIZ~-vxMD~jrXv9&M3(>S^$QUc8eEJ zn*MzIi3rs?uUMJkT^Wdv)?Yz}_b817u75BT{Grn;buI?W;a`P;3*g?kQa&?lRt6h2 z1&_LBSDD{Up=lo!HWGY%bQ^^F!C<{0sREAIm3@Fm!R2!#9xJ?kebC-KB&}QuN1EmH zLz~BWm?_;wwxo3u#Hd3U<;X%I#cO`Rq^LIXnr*>)(%JEAAbRy^F>2ElvU*(h zHm)xh=@}-zdGUUS-|v6>RNA}Oxaf=T0YLVHf0dLiCtG+w<+|S?cC7rr@l_=oKfvxg z@UMJTeJlT+ud4K&VqSI)mtqycvi%oy64?TqGkJ4%SUqggKJ|R|o7<{KPE%SLC>&sr z7t9)XBm;USnLj1yOl?e&R323i*fMIP*pOQd^SRQLrspN3A^Mw8wr^?amyAb#EMzNt zY93U|?FeFkaiIE+&F%`BG=Z{Dv{e z&T(&ml)+KtA}AJa0vDw+45C6JBG-4b3{+rtIw`e`y6LgIXcCBTGV;zG_!4O>C-jM1 zQ~8C`JSMxhTMg;h7w?w-1gFB(irbi#a_MG^VAKFQ6x$?oOPo*Xm19$wxSdq8n zox3{fKe7qlu$}n)uRv)avNwEmBzwu}=VAVg?GA9C)42pni>Snsn`)VLGEm@3h~Z8y ziEX*->4*T?q2J>YYu(Q#&xh$D*zlzBs0+jA*$@SNL+LjrCwyhc#s*mgss6#uw`9Q5 zEYxHQpxvYH)C_;nD%q2AaB)n=sfd7}Da@SdpP7Rdo4q)A3tzf->Fm?Z0~$~x*A6vB z{49KKf$nE(21{nKJRx*P(A=<~B>mdF`he8Py3 zjB8rOr#9W={<|i)GI1pCtK(0_W$yN;+zHuT0FMBagW~O?=in{(tLfi@kG* z3Y%gUPuza~s^0UI#gPYjB9g+G%pZJ&BA!4Z?g3m8`6-!yJt@XY(--ghAvDp;!$m{u z6PHJOITLoi@k(nFZ7eGRjV^)$jl7aY#AEML8=G$TeW%l|)~)sduMVNggA7gbZ%6|_ z;;WSOoi6!Rp|3rz4g}++(XDl2Gc!X{B?>9}1<#JQ}ANk?pvSLKXpy-^-kLMUsYRh@J#br0GQpT6k^k!{Ixl2vgC;}ze=|}2^ zHr%gL<^u>0m6*z@z_-$2gjEz=YWN3t z*7!qUZB>n(R+qfJ_81%|=6u@gD8@-ntOFQbM->;`IK}4OFUT(%aqN0|3cCNhUO$1N zJ8_N+i69^}R%fWr9I==*@%c2L|FC(C>)HG%KdrDK8){7|p;wTjZ}H*f==M6X=+}ZJ zR-uvK&3rZTvhwQsHBDx=82ujO#R9>zw%3_gTo{(5;eiZAfeobElBu4F>2Oh2p_-V> zPhjrX#BU7`vAN|EecfyZSvqO<@q>FIHN61le97eQQB&}y^rA%%%Iur16S0>Y`mhe0ibap3>i@Nx@cp%0DU!7ZkH zReun~(z^FN7Zf`pD9;N*K41SmhGW9Ic)AeSJX5nvp>z`<qsiW|w;fc8x6(eKxSURt%XGzV{*eNW0Qoe+M9eW>5(V%E;t=-!>Rn=e*6vE@x%{>&rj%-4duWGHx>>_a#FG%eiec;woEcDH-38c%W$=<%&|EPp$i$Ag(-+gU1RQyFv5+csn!!ik9+q;8?b`Anjj;>? zkW9*b^v#9i>oR!lgLsUMB6o8(#rB<`{2uQ5aarjdtm~*P9`n^#&e5y{+j++d5`_k5 zcs09H?s_KR)Z~c$W%hC8XmEUgxk3vTkmq$8A7i1-3F0?#$o;jLun|xlfp@=E}LXWRqnnqvyK_QrJ{A@t3&LUez_R_Hmd6&Qjx5~>(~%#wLEc6A^@5e+JD8x%^* z(Nxi8gbnuzQAlj+_FN46Af6Z_Pe2Reuk7+_Qj6wGb1^cvDFy7R#^TTd-55IMSwH~IDw_VcquKJ-yXd;v0E!+pIpy}qwv5jb`8+W#CB zTXov}CFG^aJcFT3g$PTR&Sj(~{^jYq6;&U*3~6OhH9i#lklN^ci!MpO4kx~oX^Oi}%!T_D ziAcMK$p1pBxw47oWkF#>78bmvOy$K0)Rfwuw4VODn7{V@dON_p<4)Zly}C+W@Or@3b2Q#ay0UAOVodOR`fl2z z7%kS}GWybQD>YF}XWJ3iR=?|%z!qy(NS5czU8aHhA5T&!;B1f2frc{c?67Kr3<^LG z%ekKeUQE+R_d~ua`tT#RdKGV+DMH@aJ)_Vi7<;?*ncuXWyY0b_`B-0E?pUec?R6AZ z_9bhBI0#gu*p;4j9vO0Wjp?>IW}Y@WI!Qm-=&sP(|{lLBZ8LV(ul!G=nI1 z(r_X0sfqf`gp@5X)dCeChP1HHr`42jR=E#{!C2basW(mq8!utxb?%_?z9`u>9YX0c zq4FRQ7CV)jPSCwD4`hJTc%OiN(rVD}V!omws2Auw>w|S2KK*W5e!Tvj@yDsB#yIRa zs|Pc)74H+~84kf6n|*9)fGm;Le3uW#<2NZmAqPLY`qQaPCqIy0@%#X8Y`1HidHR)k z#eKjJKnamuotfZsK9eqg9TsqCI;o@J-E{tBp=tsd$$mp7NypyIyDV3vrCK;w%zK8` zm&%8WA%H;SSRc~9K(*o`27g9 zeQS#x>|Cf(nq1^X7cHaw$u?E!?0#wgihZ!9$m8YxT~_Rg30u#ec&x<&3&BxPK>|7h zm3-NZDe|&GPpWdQhuH9oBPNNnk9^F$XP9P`vpd20f9*C9gKBA$4#yd-ukoM@#j**z zRxm6pJ3#mgHUHDCA7tG@RxkvkfpdFa(C(o%eVY1fRQaE}VY7r5hb!{lwq5mI6dWI7 zlQJwiG{e6uActSg3!Frax4_lI>jw{NI`LO9r=l#7v3aei+ynglM*Y-_V#W960`!{Y1t>PLYICW4Y4ip9^_&_Fojs#fq^`BXiD1V6U6+ z)B<(kPu&FD?f>3X1O&R;ko}%~+M-mdFdR8*qKA{un|ac#%#Autk}B>^NKY+7ytvZ= zblUEh=mJ8&P2tgK&$gS1h2bTOp~l0{gTtDIED3p-#ng0L!o4qJc?kSA1>%BOvs`0u zxDjs}ay%!oa0}nqCWJ@3?1d%pL=Nyui230dhJBsBQC3hF)R_lVy@JnRaMTb4Bt%vJ zx|$cf9xH;29~*xSZ@n0T*ePbik>`HXZP2}q$$x-zXU<}v6G zG!TI;J$NLow#?s%6eZbyyvR1QHqgvXMgZ7r>{pEZyN$A>a{X5ti7ZgS7JCWgGE$2| zu4IS(1vTRg2fge?Z`)a++9PQUy#&QKekyAN3BOq0f9Gt1 zBef5ZJ9c0LL|Fo$vM=s7xvLc*hK2+^#DhJJt;g}w$FEoe*>)5Z3+aY-x(w>kjqhAf zVyf;pbiJKF;d{?pNHlK$xA{qzb{|b>Sw2SAmA26_A3fQI9`NmS$R*jouJR}E7OTrGPMCc zV#i~i(#gh&C-1pK&-OQq-QqBS$#3Nri`(hB&?Mx`*cQM;+L zv-1(*(NS_(b9`NRM&BowzUysAo3=%40^Q7D<1za_VXK1J#yGY&eN%dl zbz~xD0cSh?A@50~`!t^s$NO+G5l`90bLq5!kIxC8-`roi@FOR~1zCb&r6rA?Hwd7- zvyls_L5v+B$%nXSi9}!8Vl9pJ{^j(=1?(L9T_*6n^nD*Y3$p7qdeEx07Lf#Nq>Jj1 z69$QEBFxR=F&6gisrVp;W7ke*jFcnu4@JB7ah53!A2}Rrl8|24!UxJmPgJUPs%ID& z_Zp15>jC^B4u0%V3eRHc!Uu$pIgC72KSw4CZsIX;Kc67eap!$r*%zhfg7fN!50f!y zw5%LRWqL#;S>OH5bR3T%jnu-;Z~h??PO|lRbX1#|P3R7|1s`|eukASKuKk*fK_cdT zjHJaNu&Xf-c=dW0jgcYfN#*6}#F?IF6?x+{}-jgVoPh5WC>4hQUul@#CF& zV){-CVsLjWQiTF3oKSy3q-U42r%H!mTT5qpY1pgo6gNDlXE!a=S!lw}z^7zBm?)Wh zt96gv@r&1G_xOiwExZ4VF-KkI#oA&Ix@hC((Nb9`ezW0wQSc$m+v%Voi{z{2R*?MP%xHH69`>{EB%vE6K>YJIH3w1Bz&&8P-hy{E;PYeRmh&y@(aRQ zy>XnQn988Q`aprwd7s))#G-oM21$tx=cQ@k$OR=rS8VL(k$tPVt40oxEl1Wfg@rfLQB<96SUR zb9r*pWx9-enF_wj9@S<3K{5AIOk$q7aK-@L@5>g~$WnIbW{d zc@-E;`4pzBmAz@C5iHyc_fl2LI~+Te)3gxrus)AQSP>|Ll`e4kWS5GqbXAi zRZAJta|~Nn_a@=WvU^s`wBTVtAn?`o9Y#)!Rz2&Di(9D1`ii+v z`V;(;VDiQD@35L$M64mH%C=io%GdOLm=6$QK4OMsBjZ*Up~jp;Ok+sTmQIkzlUxQ4 z!N*Z&++pq%z7~E1=lc{gZBeWYwunm_3X?h=|0mE6l}5P8Kj`svp$6$H(_m?3F|{Lf zT>jcwwyWz&dUwXaAxbWL{rOr1{I^3ijLq*0nYVmUGM5h>q{$U_d~$T$Qt|Y}=!`~i z?m2;5PPPNrK2hs}?7}QOW~X}mbKVz*g-SWNxa=Dl9A#r>-(^90P|kQ`(+~&**!O>pvk%OLn8UfQ8fXw1oXjjrF9&-HQwT zalmv@bD~$MsO8sDtNYYMp?oowQ-h%`T($0(T&@i_PmK&F#c@MI2abva^@`I*KD{O5 z$zu~K<_4EVgFsrM*}+;=tcc2+=_|jKOv#MjQw|lv5<3yiK2@}SOv%2*9-+L@VS%R` zi8M);M_PtC>nJKZqqTyF(gfa8L6Lam;Bzq+kOoy5<^QB?LCvEr3pIU|GlK%xX*si= zRO{I+fg^X3)2g09LT~t!|w~bF^1|0eQ za^pV6z&_q|Jcm<|TE~p*7IV|jdF4<_8XScIuM`ipe1(F_w>d3TtnED5&Lu4Cm9|BI zEif6GAXQ-Y$;i9*FFp4U;!hP!xG=f5TyKjOE)Hz5R%v-w4$tLB--;^d)eQW-bvh-} zn%7EO((guXR#ooJltZYd&+BrV%umgsz}yB(CyTxiHU@Clm41Id|qB>5tsHmXAt2yxqebK@cTdLN^PGW zU5D2>7VMn^`NC;UAVt|}Bjh6x;Mlu4`F5zCWGo19Ol`V$yL9M$YLUP;W`m-bcaL&7o-YsK|)$;XIotETL)iHV&i@iyGW&27E#DV-wL_8 zhfNFhZ&hKWlM$edWx=iD-EN)t9!YR+8IT(5&WWSl0{JN$(0U?FGZ)zNI*OBZHCfg4 z-78Jd(}@os?gG-Cf;J=$O+0A9rWI0aDJ}gt!O~GR)U*yKI6K>BFYb${r8ygN#u7V> zQjSoQ)hPBZwPb3F4DBV}#lz(T+DIpc)+dGK>Y9IvMo$N>ql6dFa1mZc9oHJ>6G|(d zawYJ$EM7LTb1ZEX6r_=nuZma{bLuyG9cR6GAl?Z1LEL>LG65T?Z0FFxcRc07fuJt$ ze6E(wAtzo3rSo1)Q*!eIVP}67a2vqQ1O$!@EQX6fdiPVFCqti5uz6YFIs&*|VLryJ!FntjTKv(Jn?u*+Kp7~47s0q0#NJP_w z53ZsE-&aoCX$3+pOIL(iGJ&%xczE+VigeNy@ckF2FM7OM-~VZ-MCG3x`qFtAm9MF^ znVDy{oCDOZFbeFS`(2kyLh(R+oIEP1S#IzNo`Xa0_L$3um#Q9*Hjs?w7m*KqDYH`ETE#;-P1dHW7hht9ha=A^(l#Jx`w55CJg=C3oFD|dXCK*xce(F1Tsj*w z@j$AypsnY1x-=10Zn647*DJDp_Wnw&CoyATSMNX zqD6N-ixJLwcRf?M(b~ydwO2}Colkafo)=CUam4~$U#c6DF(&ZwM^Y8SYDuL*@Dk;& zU1+%&l8ol8fU7;fF>t17^~o_Vno{Ki-WJ>c#E7S9zhirwm%>D_J{c%a^rK>i#47D`fq77ZL+bR%fP_+onLS7=@Zc-pT^{iP9u%Tac?VyJsmQZ_$Kqu zZj{Igt<;M(I*H-aa8IMmDq?b~DIEO>_CXk*l$$%CndrfP!}4QqrnC>vCesU?YA$7_gwsfhm!;02zgr?7 ze^1GQcB4?oOE+#6Q&BAsT8w5R!FdxTJGNPDKG7((hBj2KB4IOx?owjLk5n0(3NC{Rc9=lqRWfhzT? zy(&~oL9Dnt5{3%%Aj{&nXq8Y^dl!g{gR(d=YFQS_5v*G*g#1_zJh2F?fb)k4tDvcdqJf;VoP=QkJu&Xs_GI5+E z*mZ;xJ=@|*%_0OyT*B1EIlp;c)j(SijAI#YiGhn^fwjI2Q9L+g+jcYQ0iITZXAz2X zzmj89+>IK&pRt|+-bn@wE% zIdjONQpb-J^js!z3ewt#o+aku=ldK9A+-6y3Fsmu*IOChGCM6|G+Q`<8OOh#vUTql&_Y-sLFv0o4X5JJgy$Y}L_4OUT zN2a(DA5<93y|@BzFid3~2zQz=5v16c}{ zymC&&Tq$Jsy$EU^f& z1=MdbvOb&^h0jWok|RtdHHSXkQ)dGJBPZhB(bf3iO4L0<09?@;o(uBRBWA8a>7{BT z(wyQ~z6M!Bpv+C(>Pa&3Mr~*<><|}0662`^X_}To_?bRDs}Zf-v3CmS9cNEiAcvBZ zuC|AsB1m;+pNMv!I^RoE;R5>JmDc*i3uV)B#Eyw4La;-J&%ZcI(f%Y3e9}@n7Dy<@Qxb*#MfIw`*c4CpP0TqL%XYLkXdIdgQQQNF%l2`L(^};O==`f# z0pT0&JTkw~@r`N--_W6qTCB!5`hdly!Zmkqyise`l|MZfGJB!CGzr_U;&ZH=Pv{#Y zV;1#4HgVO+4OiQO0PV$nEN$WIKXH0EI%772N(mK1W#frLXzb_kski`zkE0jir#N?>8x z5c=gM^)Nqj@Z~RTJV!Q>=SJBQ`Q$E|9X{@uloFr_)wW;{68;(ZzwsF`5j;;m_U#gO z4}7%k&KrgA_x8H=F(3|0u*H6K^FYNY;jLb1tPAy?NSv0T?Ob%L@!;eAy|xP=OTv)m zoRlD`eFFS*&fw`z(Dg+guulf-LxO%<;@J%hqkR}L%-9v2pax0Y?uZ|JFTJ2pGv0vc z%0XZ$L1P!ECmNIF4)wn}y#tilQOjSv2`U|k=f$Xio*keN(WJR(3LVm4Jte3!^~0dO z>$AQkj3~PuP}tqB-A#<4e0}hO3U%y?jzm4(Q3pyyd?3ss7C+SC@kV=%p>hNbpm;6v z&TP_iMnfx57`oi7I|ABps%$?(XS&xf0A~ulGuyLzkrZ{VWv-)CU=~tstLpvD1HQD3 zyD5JZinI)>pD&P87Mt3U;#d*>L0}E7p4Pz zb>q6Wx-K&~Lw?O8?q?RuWwLukWnrA2h2&}eLZVX?)Z`SPoEQ`f3g96V|sDmDqo-0s5OLA*~c+E_G$e z@s=O>iQzwXn)m;7&S$}##SM&=8AG}b#%%KB$C|zYqPB7%HC)T9<)ZHn&`$233H?^o z;JX!Eo{jnqz+1l)gFK)}$)%spfz?ksxBUmUU$N)CZbCjQTV$K|{ETiEkV%EF&KlzL zrQL9C3NlRRW$mLAlKvl{guxDIY+g@6SR^dO4WIGDdNL*tyf+~IVES+>qm05eRzQ%X zUs?~WcxkD*n_%H!)`!-;Cf&K$?qPL44v_wbkMq zK%cUy6(dW&WXCkX8a<6{UgG3`=-?V8|7$x+oqOn_AqYsT@xN`d8diOwcoMYDR=>?@ zN%*xvIgz=Y_!zh2HC9o46rzAZxXkXa!+bphd4YFPh6h&Dq#4?#%`I&Z%f&;1(C@|s z-Bz2RS1x|M1~k*eq!A%Hr4)6*f+_wmjEf)@FmlQ%3_2COYJeNn_@aWt##M8pFZmL) z`RxW?s@{g_9E_Jff&qQJ%FFN%rw`=HdJr?uidK_51W#M$)9Q_0Z@e}nV6lh;yHF;K zljw(0LDTdBt%|=|_W+O^M$pW5-xyR6a=e&6_N0tNwo;bUPe5I^J=bh*>?TUn1~I(Xe< zJ*=I+`|!A~PF+cs-qQQ=1?vGK4>BmE^`$ko{Xj29o8TcL11yn5?l8af*U`jF0KqPs zg&$d+TvuJr%XPXRGJ*JldRE+s{*mRp1Qw59e}3&%hs}d|?^TY>K8ya@iK=+*CE$SC znQfov=`6qxIk6h^n>o{e_&PkVGPc9|+0tNg;=tKLsyb2`df-d2I9M#HSUT1^k6>;311H0*+NI<$x-%QS424{bJU)*3L zx2W!}KCuYFzUo-cpj{_^d*JJfd-LXvxPyg7;jU-h-`@R){w2Txhb(u<*+6gpA_th# z;K$&gH5BjH4%}ehoCj7o#{u1fKMw2V9 z|02QCb}%`tw1=@8eYP8a2l8(3U&q$spLo&r02bbq6n$HFV9ZdGFv`Kf;hV~#uyqWJ zxFGE?Q0E<<_j4fuafi4hSRsw>TT33ROGHrxrwrn^7fp0=#~2HEs5|DhFwNsFA!uhN zJ!ve&Pn1zUd$vs88P6r~=?={f^ZrMN#MLbLqrB5SsLnEgzx{rT@jlmQjT3(p#L?L$ zQ?#K2WhqCiES*OOZa1CHfpbP0X1iR@p%88$*#+dZV-PKGi(RM7I$Z7FN5O8-pWAUM zHeWK@JtMDEOmk8mg!lp&<$a-@qx1=*Eiy)?gBewi&xiBih4<0e*}2B?Z%$F!GgX2o zK0YP^Z0`9VgNHP4hNS$asq@F+?SFcDJa{9=vS}#Y6W40o1h^uDn@j%HGUZu=_9n&FPlgD`U+WFP3tq1nomc?Ku3JsMLP|c_B&)J4Kn> z>NoHC7ko}ztf|qn1`w)L(cStV5XM|1#vjvG7w^Y8j0`91tHe+M?n1dk}2i;KaxAqf9dF_Nqb1MeGTsqW>}&|1?ke~bP~dDuowmk1K`oqde-OWq zY#xujzGGTbrPU<>^I7k(`tx|=t?|+lE$ak+ylqTu%H7o{$$y|g{`D_Xo2;f`f3|$qd7;90sBtQ0P2q~AMM@NA(?d&nO#-S zcNWCJ125ir3~$?q_J)UDER1G6x#LJZptyXpt%k_Z1PAX%nNc%jt7$cPN%F^F4~l}6w3fY*V3P1%W!py-F@)Af^F z)DjbrBP1i-YSInXLwNlEDqn>1<&IQmUnnBeb_Z3xpSV7eu!IqutNp_bKHP?m) zUxvW#?l-bHaa$WWl5wrL!ew{}!1Ti8r|vMyt*d4|p7H^Ocy;g;Y+LN|=4 zy&ZZH(!8&GVq}r)Ku)4!^@G`A9H2idaPm4I`^;5(q$^8^MSR9v4^bjI(v~CZ%)jBh z_zeUtR{hRYA&4l15BzCsy9aT#+w51@z3=m@fW>Bb6Uf|2x?~l>`Q_Fxl}}AW?>DHw zL#^9q9tLN>beaqO>tE42nkS^Uz-NtRrDkt_PL4{=6Snx2c2MdTXB~!5)>YyksH*a( zL>8MB&Z)Py{r|z-L;HMRJ|PbyHPT*08?g5cQgA=m+CFrqx4h5MG{;xN#&u*YI;WR2 z#xQRz#l(LX3o{2h*O%l(kq{xwldkPg4EOHcYuuj}lYqrg_H59sc%br@Lv!1?ipcaK z2Q*jZ0;~S3Ciy#}x^L~?q3pa{YB73JcS^6r z5e?E6ki1Z6wp42Ivwc(UpQ-hvQI6(X%c7+}nGNbHbG*0C8+;%LIdAmZPWS2k(ayhX z*XAN8gc!29-#xT)dwu_$0kEc%rbb+1vUvR6J5@9BtT%S)>nQorqyvp*j;*EX-bMzf0|hZQ%_WK z-l_G}CFPHsSGZEH?0d?z^ppWyD-OvpG0q$%?pGUU#tX?w#@A?yJI<9x+&N}p)HYb)(ND(e(blXugy^6@+4%KH6Hso^#^Y=QbV-en;F{Ure{D4}Y&9O$1)`o zfr;k=j+b3}MGSc_DJ;A=I-JFdr3Ma{DZ@xaWATM*`;?ZNn0Ao1f`h4lF2f-x%yBBe zN&(f}nC|CnD%lB%^@`S=NOe)m0_g?Wn)*m=_x9 zH@oF6WL$D82j=c33NU}I2PP^ie}~~)aPpPI!xY^M@SrT+H{S!k3b=8pm@c`iARgoj z&a8O)?db8G{L*9pk&|_vGWUBdM%$F*#RJ}M#)gHb0DJO=XdU_;!|OWasS|bFL#p-T z^M{X|m}mS&&Bj+M6m&Jr;^k`{^H{D+CuV1kYAvu~C#ok5o)~hZEq%SQN!Pk zc+8lT>yJIvl9Ml<%fal*viaR7(UuDQ7$Va_dT`4O0B3r)droy<{TFrDuMI(W;hMHE z#!w@{H50$_40ej1|N z*EwEzAlkm>!PSMy?d}6O!7WA$RV`Q0ApR8~M@62o!dffH_YbP(#XxY!Xq0Ye1j;Ce z0Fp#)yeYZX@?AW44NgSaj=A!@2y^W)5#;P5HKR3pEA-MK=S)-!_C!wP8?QIOwuTM= zU-bUDTB5~ALrq>Zr9mV*Ep(ZL7Y`UK7!N#&o23;!C=_tCj(oiH+MExzLY%C1TZA4V(>| zCI}of1IthtWl*hbZj>XjitA?`FR%7eVXTsjZy9cnT?Y4yhY^~L+xm+2Q_OyCB1oJU zM|Le1&Ov^dz$?F{F;vpNFV<~r3wAaPe<5|M%Wa%RUY_{kf6;qyIBb8@+(R{Y_k5BR zK0+9w2{0ArG7NT}E4fKNeU>^gEjxbh-xOlk6$4Cu$3%~@$1I+Kb>KXjx@M}*gI*x( zxUZ1H>S{ITA4z5)q1MfXa;!RCVQ5o83`az>5yTGo^u=zK{EB_`da54bl;&{#V7%+jwW5DnsyHgoC{Z_y( zUMwsCr4Z4dn}3f3;G)L+5}L<2t9gv08EVmml{z-Auq}=9CHxB7<+B$VSBvyiMgdrd zex(1?!+(b(h#Py&4%e^?VRS-t$L>wnvbE?>`zB9Sa(CQ*pGpX(^~9JQ@dS0?y-VE4 z75^qR^>XRA@?3^Mt2+a5n*-N%xz-vm=Wp7X4mb0AE{6vdRD*zaHbO7RqZZ-Fd8nhn zUTYqgXTT|N$HL7r!=T9dfgZSE{VNJMLP(0a^@VTS4=Pl${uz8NNiBZU%W?QPWdGV} zzra)c*_E(gjGA+F_&RHzwcEksaSC$VSV4c+(I~t_L+~ji692Ex`~Qv+&a(g%QB41K zWuoz$drT%rkgeTRWuTK9aciaw@MbBXC*1Hf8}XqemcLb*wEyP3=T9 zl1Aa^NizXqU@ZOk?O?}NTPHCLOe=QW_beCz*?*Jma=E?@2UxkJSnAhI>i5Qa zDMP_3dVARcjazq@fL-5HV>ofhuD$$NJ~_6i%tPwtjGzFm8EaU|1o0hD&7TeYO6n~>+k<=hWurLxkQffFk>nlu#y^KFrKqBj!}QrI0ypNw{-8QMRt)4yeW0^H zjDfK;1s~C}zN#mgFxYSjHfurNyJy!fnH{;XY?D*(^PWutJhdz{&9oOTC?LS%c86RB z^m5&dWR}#dy(y&M(3F(&p-+wZ*Cn|%3Q{Ce9z33InyWU6K(T60)~|vfUwSp&taOX6 z*Grso+tsq!RsIeyS}wM*P!|ncJ|@)Hfg(wwvU`Bx&akU?%B}xdaYgb@t(2h$mo3Zl zRUX~oPOo}#9-dtV6|k<+O17ywY>_>rS~E)apU^R4j&29ADf*f|0|+