{ "ml": { "v": "7", "eng": "2.11.0-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.7032149, "rte": "az", "prob": 0.7032149 }, { "cls": 0, "raw": 0.18505299, "rte": "az/zip", "prob": 0.18505299 } ], "prob": 0.7032149, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.7032148838043213, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00003912051397492178, "type": "pe" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00003516674041748047, "type": "pe" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00012085834896424785, "type": "pe" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00002337495425308589, "type": "pe" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.00008312860882142559, "type": "pe" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00003773967546294443, "type": "pe" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.00003912051397492178, "type": "pe" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00003516674041748047, "type": "pe" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.00012060006702085957, "type": "pe" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.00008312860882142559, "type": "pe" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.00003773967546294443, "type": "pe" } ], "version": "v18.18", "analyzed_at": "2026-09-17T05:38:21Z" }, "path": "win-arm64-based-readytorun.zip", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "aG}{FH}Bx57YTKozE)]AfFk4jm}3BQwPQ\u003cZA=#2me[Gos\u003cxVLa99i(\u0026gQB)-0S*d]=/JL33WE)D2!2$6Sc8*ZG*q7\u003cr6)q]5]A\u0026f*r-(6PZ20]weYhtk1F\u003c]sU}5K", "ln": 233783 } ], "mol": "K₃(Li₂LuMc₂)O₈(AlAs₈C₉CaEr₁₂EuPPr)H₉(Cm₁₅Cr₁₀Db₁₆F₁₆MgOs₁₃Po₁₅TiU)Md₆(Bi₁₈Bk₂Pa₂PtSi₄)", "sha": "dd0cdb8e770c7bfb7f9fd498438c74644e3a3b6715d4248cc0e59ad8d0a032b2", "path": "win-arm64-based-readytorun.zip", "risk": 123, "size": 24423323, "type": "zip", "facts": { "metrics": { "file": { "size": 24423323, "entropy": 7.99 }, "binary": { "peak_region_bytes": 24214528, "peak_region_entropy": 7.86 }, "archive": { "file_count": 12, "member_count": 16, "script_count": 0, "zip_bomb_ratio": 5.13, "compressed_size": 24420845, "directory_count": 4, "executable_count": 10, "extra_field_size": 576, "noise_file_count": 0, "compression.ratio": 0.34, "hidden_file_count": 0, "uncompressed_size": 71428472, "crc_collision_count": 4, "entry_comment_count": 0, "max_filename_length": 33, "rtlo_filename_count": 0, "format.regular_count": 12, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "format.directory_count": 4, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 7, "timing.mtime_unique_ratio": 0.44, "misplaced_executable_count": 10, "timing.mtime_dominant_count": 4, "timing.mtime_spread_seconds": 20810102, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 0.25, "compression.method_counts.stored": 4, "compression.method_counts.deflate": 12 } } }, "traits": [ { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-constructors-token", "conf": 0.82, "crit": 3, "desc": "Reflection GetConstructors token", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::process-filename-setter-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET process filename property setter token", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/websocket::connect-async-method-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": ".NET ConnectAsync method token", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/embedded::repeated-standard-pe-images", "conf": 0.97, "crit": 3, "desc": "Four or more embedded standard PE images", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/debug::pdb-absolute-path", "conf": 0.72, "crit": 3, "desc": "Embedded absolute PDB path" }, { "id": "metadata/binary/symbols/imports::imports-advapi32-dll", "conf": 0.95, "crit": 3, "desc": "Binary imports ADVAPI32.dll", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker-rsrc", "conf": 0.9, "crit": 3, "desc": "Microsoft vendor marker in resource section", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/mem/protect/modify::virtual-alloc-string", "atk": "T1587.001", "conf": 0.9, "crit": 3, "desc": "VirtualAlloc API string reference", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::import-count-over-120", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Large PE imports over 120", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/asymmetric/rsa::dotnet-rsa-padding-raw", "conf": 0.8, "crit": 3, "desc": "Dotnet RSA encryption padding API", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/sync/mutex::mutex-api", "mbc": "C0042", "conf": 0.85, "crit": 2, "desc": "Mutex creation/access API", "from": [ { "off": 291024, "file": 1 }, { "off": 291024, "file": 9 } ], "uses": [ 181 ] }, { "id": "micro-behaviors/fs/file/move::move-file-ex", "conf": 0.9, "crit": 2, "desc": "Move or rename file with options", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.8, "crit": 3, "desc": ".NET Activator type reference", "from": [ { "file": 3 } ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::azure-client-secret-env-name", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Azure client secret env name", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/backdoor/binary::managed-authentication", "atk": "T1071", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "Managed authentication method", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/dropper/execution/loader::lua-cpath-env", "atk": "T1027.013", "conf": 0.9, "crit": 3, "desc": "LUA_CPATH runtime env name", "from": [ { "file": 7 } ] }, { "id": "well-known/malware/rat/nanocore::command-type", "atk": "T1219", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "NanoCore command type marker", "from": [ { "file": 2 } ] }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/http/collect::csharp-bytearray-content", "atk": "T1041", "conf": 0.93, "crit": 3, "desc": "C# byte array content", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/instruction/junk::indirect-call-compare-branches", "conf": 0.85, "crit": 3, "desc": "Indirect call followed by a compare branch", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-device-code-path", "conf": 0.9, "crit": 3, "desc": "OAuth device code endpoint path", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::dotnet-aes-rsa-hybrid-keywrap-pattern", "conf": 0.9, "crit": 3, "desc": "Dotnet AES and RSA key-wrap APIs", "from": [ { "off": 5351511, "file": 3 }, { "off": 5528744, "file": 11 } ], "uses": [ 9, 73 ] }, { "id": "micro-behaviors/data/serialize/json::json-polymorphic-attribute", "conf": 0.86, "crit": 3, "desc": ".NET JsonPolymorphic attribute reference", "from": [ { "file": 11 } ] }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-secret-field", "conf": 0.65, "crit": 1, "desc": "OAuth client_secret field", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-interop-services-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Runtime.InteropServices name", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "from": [ { "off": 91198, "file": 2 }, { "off": 139370, "file": 3 }, { "off": 515058, "file": 7 }, { "off": 90686, "file": 10 }, { "off": 132202, "file": 11 }, { "off": 515058, "file": 14 } ], "uses": [ 99, 157, 235 ] }, { "id": "micro-behaviors/os/autorun/scheduled::task-scheduler-keyword", "atk": "T1053.005", "mbc": "F0012", "conf": 0.85, "crit": 3, "desc": "Windows TaskScheduler API keyword", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/network/interface::dotnet-socket-local-endpoint", "conf": 1.0, "crit": 3, "desc": "References Socket LocalEndPoint getter", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-endpointaddress", "conf": 1.0, "crit": 3, "desc": "References WCF EndpointAddress", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-gcm", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt AES-GCM mode property string", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/linking/api-set::api-set-core-cluster", "conf": 0.9, "crit": 3, "desc": "Dense api-ms-win-core string cluster", "from": [ { "file": 7 } ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version" }, { "id": "micro-behaviors/mem/sync/mutex::interlocked-flush-slist", "conf": 0.9, "crit": 2, "desc": "Atomically flush thread-safe list", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/create/spawn::diagnostics-namespace-dotnet", "conf": 0.75, "crit": 3, "desc": ".NET process namespace token", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/resource/manifest::pe-version-and-manifest-only", "conf": 0.88, "crit": 3, "desc": "PE ships only RT_VERSION + RT_MANIFEST resources", "from": [ { "file": 2 }, { "file": 3 }, { "file": 7 }, { "file": 10 }, { "file": 11 }, { "file": 14 } ], "uses": [ 39, 146, 256 ] }, { "id": "micro-behaviors/fs/path/extension::utf16-exe-suffix-token", "conf": 0.84, "crit": 3, "desc": "UTF-16 exe filename suffix token", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/mem/c-runtime/functions::vectorized-zero-fill", "conf": 0.6, "crit": 3, "desc": "Vectorized zero-fill instruction sequence", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/timestamp::set-file-time", "atk": "T1070.006", "conf": 0.85, "crit": 3, "desc": "Modify file creation/access/write times", "from": [ { "file": 8 } ] }, { "id": "metadata/binary/resource/manifest::pe-resource-manifest-second", "conf": 1.0, "crit": 2, "desc": "PE second resource is RT_MANIFEST" }, { "id": "micro-behaviors/process/create/exec::shell-execute", "atk": "T1059.001", "conf": 0.75, "crit": 3, "desc": "Opens a target via ShellExecuteW", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/winhttp::winhttp-dll-name-text", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "WinHTTP DLL name string reference", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "from": [ { "file": 1 } ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "from": [ { "file": 1 }, { "file": 2 }, { "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "file": 11 }, { "file": 15 } ], "uses": [ 110 ] }, { "id": "micro-behaviors/fs/file/handle::device-io-control-win", "conf": 0.85, "crit": 3, "desc": "DeviceIoControl API usage", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/control-flow/dispatch::dense-x64-tls-array-access", "conf": 0.97, "crit": 3, "desc": "Dense x64 TLS-array pointer access", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/symbols/fake-windows::sideload-export-cluster-size-10-25", "conf": 0.9, "crit": 3, "desc": "DLL exports ten to twenty-five APIs", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::find-resource-w", "atk": "T1027.009", "conf": 0.8, "crit": 2, "desc": "Locate PE resource entry", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/process/injection/callback::enum-locale-callback", "atk": "T1106", "mbc": "E1106", "conf": 0.7, "crit": 3, "desc": "EnumSystemLocales callback API", "from": [ { "file": 7 } ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/shape::large-overlay-size", "atk": "T1027", "mbc": "B0032", "conf": 0.7, "crit": 3, "desc": "Overlay large enough to contain payload", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/masquerade/cert::security-dir-embedded-pe", "atk": "T1553.002", "mbc": "F0001", "conf": 0.97, "crit": 3, "desc": "Certificate region begins inside embedded PE", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present" }, { "id": "micro-behaviors/process/control/info::process-info-class-30-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 30", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/traversal/drives::set-current-directory", "conf": 0.9, "crit": 3, "desc": "Switch current working directory", "from": [ { "file": 8 } ] }, { "id": "objectives/evasion/masquerade/binary::dense-microsoft-cert-text", "atk": "T1036", "mbc": "OB0006", "conf": 0.9, "crit": 3, "desc": "Dense Microsoft certificate text", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "from": [ { "off": 405784, "file": 7 }, { "off": 405784, "file": 14 } ], "uses": [ 79 ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-reflection-primitives-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Reflection.Primitives name", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-error-dotnet", "conf": 0.82, "crit": 3, "desc": ".NET child stderr redirection", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/winhttp::winhttp-dll-name-wide", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "WinHTTP DLL name in UTF-16", "from": [ { "file": 11 } ] }, { "id": "metadata/binary/layout/overlay::overlay-over-30pct", "conf": 0.9, "crit": 3, "desc": "PE overlay exceeds thirty percent", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/hash/digest::dotnet-compute-hash", "conf": 0.85, "crit": 3, "desc": ".NET ComputeHash method reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-ops", "atk": "T1129", "conf": 0.7, "crit": 2, "desc": "SRW lock operations", "from": [ { "file": 8 }, { "file": 15 } ], "uses": [ 109, 229 ] }, { "id": "micro-behaviors/fs/temp/directory::temp-file-staging-primitives", "conf": 0.8, "crit": 3, "desc": "Temp directory staging primitives", "from": [ { "off": 497256, "file": 7 }, { "off": 329230, "file": 8 }, { "off": 497256, "file": 14 }, { "off": 329230, "file": 15 } ], "uses": [ 11, 171 ] }, { "id": "metadata/binary/symbols/export-name-pattern::many-lowercase-snakecase-exports", "conf": 0.88, "crit": 3, "desc": "Many lowercase snake-case export names", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-locale-info-import", "conf": 0.86, "crit": 2, "desc": "Query locale information", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-embedded-resource-read-any", "atk": "T1027.009", "conf": 0.86, "crit": 3, "desc": ".NET resource-reading API references", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 91, 95, 339 ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::appdomain-class-token", "conf": 0.65, "crit": 3, "desc": "AppDomain class token", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "from": [ { "file": 1 }, { "file": 2 }, { "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "file": 11 }, { "file": 15 } ], "uses": [ 162, 350 ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 29460, "file": 2 }, { "file": 3 }, { "off": 29460, "file": 10 } ], "uses": [ 82, 196 ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-user-default-lcid", "atk": "T1082", "conf": 0.85, "crit": 2, "desc": "Query user locale identifier", "from": [ { "file": 7 } ] }, { "id": "metadata/package/versioning/scheme::pe-legal-copyright-present", "conf": 0.95, "crit": 2, "desc": "PE LegalCopyright field is populated" }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/encrypt::dotnet-create-encryptor", "conf": 0.9, "crit": 3, "desc": ".NET symmetric encryption API reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::enum-system-locales", "atk": "T1082", "conf": 0.84, "crit": 2, "desc": "Enumerate installed system locales", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-verifier", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-verifier field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-decrypt-api", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt decrypt API", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/ratio::overlay-over-90pct", "conf": 0.95, "crit": 3, "desc": "PE overlay exceeds ninety percent", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-id-field", "conf": 0.65, "crit": 3, "desc": "OAuth client_id field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::create-process-w", "atk": "T1106", "conf": 0.95, "crit": 3, "desc": "CreateProcessW API symbol", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/env/read::get-environment-variable", "conf": 0.85, "crit": 3, "desc": "Read a process env var (GetEnvironmentVariable)", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/delete/file/library::deletefile-w", "conf": 0.66, "crit": 3, "desc": "DeleteFileW API symbol", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-open-algorithm-provider", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt algorithm provider API", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/control-flow/dispatch::sparse-opaque-pe-profile-code", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with elevated code entropy", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "from": [ { "off": 17311865, "file": 3 }, { "off": 20480113, "file": 11 } ], "uses": [ 127, 284, 285 ] }, { "id": "micro-behaviors/os/random/prng/stdlib::random-nextbytes", "conf": 0.84, "crit": 3, "desc": ".NET Random.NextBytes method call", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/hidden::dotnet-create-no-window", "atk": "T1564.003", "conf": 0.86, "crit": 3, "desc": ".NET process window suppression", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-resource-reader", "atk": "T1027.009", "conf": 0.86, "crit": 3, "desc": "References the .NET ResourceReader type", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::get-files-token", "conf": 0.88, "crit": 3, "desc": ".NET GetFiles enumeration token", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/masquerade/version-resource/claim::microsoft-company-name-short", "atk": "T1036.005", "conf": 0.82, "crit": 3, "desc": "Microsoft short company name", "from": [ { "file": 2 } ] }, { "id": "metadata/binary/debug::pdb-ci-build-agent-path", "conf": 0.85, "crit": 3, "desc": "CI build-agent PDB path" }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-getobject-token", "atk": "T1027.009", "conf": 0.72, "crit": 3, "desc": ".NET resource GetObject token", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/decode/hex::dotnet-hexstring-conversion", "conf": 0.86, "crit": 3, "desc": ".NET hex string conversion", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-wait--sleepconditionvariablesrw", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Condition variable (SleepConditionVariableSRW)", "from": [ { "file": 8 } ] }, { "id": "metadata/binary/layout/embedded::pe-embedded", "conf": 0.9, "crit": 3, "desc": "Valid PE/MZ binary found embedded in file", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-function-pointer-delegate", "conf": 0.92, "crit": 3, "desc": ".NET native function-pointer delegate conversion", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/file/handle::set-file-pointer-ex", "conf": 0.9, "crit": 2, "desc": "Set file position extended", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/client/managed::readasstringasync", "conf": 0.84, "crit": 3, "desc": ".NET asynchronous HTTP response body read", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::appdomain-currentdomain", "conf": 0.6, "crit": 3, "desc": ".NET AppDomain CurrentDomain accessor", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/time/query::get-timezone-information", "conf": 0.9, "crit": 3, "desc": "Query timezone configuration", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/threading/create::create-threadpool-work", "conf": 0.9, "crit": 3, "desc": "Create a Windows thread-pool work item", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/dns/tunneling::client-secret-config-field", "atk": "T1071.004", "mbc": "B0030", "conf": 0.92, "crit": 3, "desc": "Entra client secret configuration field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-acquire", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "SRW lock acquisition", "from": [ { "file": 8 } ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "from": [ { "file": 1 }, { "file": 2 }, { "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "file": 11 }, { "file": 15 } ], "uses": [ 211, 281 ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product" }, { "id": "micro-behaviors/fs/file/handle::set-std-handle", "conf": 0.9, "crit": 2, "desc": "Set standard I/O handle", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/os/api-resolution/manual::api-ms-string-reference", "conf": 0.9, "crit": 3, "desc": "Reference to api-ms- Windows API string", "from": [ { "file": 7 } ] }, { "id": "metadata/lang/compiler/systems::rustc-path", "conf": 0.95, "crit": 2, "desc": "Rust compiler path in binary", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-keyword-reference", "conf": 0.5, "crit": 3, "desc": "References an OAuth endpoint marker", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/os/syscall/invoke::all-ones-handle-constant", "conf": 0.8, "crit": 3, "desc": "All-ones x64 handle constant", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/dropper/execution/loader::lua-noenv-env", "atk": "T1027.013", "conf": 0.9, "crit": 3, "desc": "LUA_NOENV runtime env name", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/ui/controls/widget::winforms-timer", "conf": 0.72, "crit": 3, "desc": "WinForms Timer control token", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/ratio::many-pe-embedded", "conf": 0.95, "crit": 3, "desc": "Six or more embedded PE headers", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::pe-product-name-present", "conf": 0.95, "crit": 2, "desc": "PE ProductName field is populated" }, { "id": "micro-behaviors/process/threading/concurrency::get-queued-completion-status", "conf": 0.92, "crit": 3, "desc": "Waits on Windows IOCP", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/communications/http/server/managed::dotnet-loopback-prefix", "atk": "T1071.001", "conf": 0.86, "crit": 3, "desc": ".NET loopback HTTP prefix", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/debug::pdb-visual-studio", "conf": 0.5, "crit": 3, "desc": "Visual Studio PDB build path" }, { "id": "micro-behaviors/os/sysinfo/platform/locale::enum-system-locales-import", "conf": 0.84, "crit": 2, "desc": "Enumerate installed locales", "from": [ { "file": 7 } ] }, { "id": "metadata/binary/section/ratio::inflated-data-section", "conf": 0.86, "crit": 3, "desc": "Data virtual size exceeds raw size" }, { "id": "objectives/command-and-control/backdoor/rat/modular::module-command-handler--registermodule", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Go RAT module command handler (RegisterModule)", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/ssh/client::auth-failed", "atk": "T1021.004", "conf": 0.5, "crit": 3, "desc": "SSH authentication failed message", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::dotnet-hmacsha256", "conf": 0.93, "crit": 3, "desc": ".NET HMAC-SHA256 operation", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/module/load::get-proc-address-import", "conf": 0.9, "crit": 3, "desc": "Resolve exports with GetProcAddress", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/dropper/staging/embedded::has-high-entropy-regions", "atk": "T1105", "conf": 1.0, "crit": 3, "desc": "Binary contains high-entropy data regions", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-authenticated-mode-info", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt authenticated mode struct", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-encrypt-api", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt encrypt API", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/db/access::connection-string-singular", "conf": 0.7, "crit": 3, "desc": "ConnectionString property", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::slist-operations", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Interlocked SList operations", "from": [ { "off": 405616, "file": 7 }, { "off": 405616, "file": 14 } ], "uses": [ 33 ] }, { "id": "micro-behaviors/communications/http/websocket::receive-async-method-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": ".NET ReceiveAsync method token", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/managed::getresponse", "conf": 0.72, "crit": 3, "desc": "HTTP response retrieval method", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-entrypoint", "conf": 0.7, "crit": 3, "desc": "Assembly entry point resolution", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::mscoree-name", "conf": 0.95, "crit": 3, "desc": "References the .NET mscoree loader name", "from": [ { "file": 7 } ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 2 } ] }, { "id": "metadata/binary/signing::signed-pe-large-noncertificate-overlay", "conf": 0.9, "crit": 3, "desc": "Signed PE has large non-certificate overlay", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/telemetry::client-id-request-header", "conf": 0.9, "crit": 3, "desc": "Client-Id HTTP request header literal", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/db/linq::expression-visitor", "conf": 0.6, "crit": 3, "desc": "ExpressionVisitor class", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-dup", "conf": 0.7, "crit": 2, "desc": "Get module file path (Unicode)", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/resource/identity::pe-resource-count-two", "conf": 1.0, "crit": 2, "desc": "PE has exactly two resource entries", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/hook/interception::dynamic-proxy-class", "conf": 0.7, "crit": 3, "desc": "DynamicProxy class reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/handle::writefile-api-text-reference", "conf": 0.9, "crit": 3, "desc": "WriteFile API name in PE text", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/size::small-pe", "conf": 0.6, "crit": 3, "desc": "Small PE binary (\u003c100KB)", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/os/env/read::getenv-profiling-api", "conf": 0.86, "crit": 3, "desc": "GetEnvironmentVariable profiler check", "from": [ { "file": 3 } ] }, { "id": "well-known/lib/runtime/scripted/luajit::luajit-runtime-env-pair", "conf": 0.9, "crit": 3, "desc": "LuaJIT runtime environment variable pair", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/fs/delete/file/library::deletefile-a", "conf": 0.66, "crit": 3, "desc": "Delete files (Windows API ANSI)", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/decode/base64::dotnet-frombase64string-text", "conf": 0.9, "crit": 3, "desc": ".NET FromBase64String method reference", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/section/prose::high-string-count-pe", "conf": 0.9, "crit": 2, "desc": "PE contains many extracted strings", "from": [ { "file": 3 } ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "from": [ { "file": 2 } ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 2 } ] }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/backdoor/rat/config::c2-config-name-marker", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "C2 endpoint configuration name", "from": [ { "file": 3 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/exception/handler::capture-context", "atk": "T1005", "conf": 0.9, "crit": 2, "desc": "Capture CPU context/registers", "from": [ { "file": 1 } ] }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "metadata/lang/encoded/wide::shell-interpreter-encoded", "conf": 0.9, "crit": 3, "desc": "Encoded shell interpreter (wide strings)", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 176 ] }, { "id": "micro-behaviors/communications/socket/create::tcpclient-dotnet-str", "conf": 0.85, "crit": 3, "desc": ".NET TCP client type or method names", "from": [ { "file": 3 } ] }, { "id": "metadata/package/config::get-env-var", "conf": 0.6, "crit": 3, "desc": "GetEnvironmentVariable method", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/library/stdlib::dotnet-cryptostream", "conf": 0.8, "crit": 3, "desc": ".NET CryptoStream symmetric pipeline class", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-gcm-wide", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "UTF-16 Windows BCrypt AES-GCM mode", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "micro-behaviors/communications/http/client/managed::multipart-form-data-content", "conf": 0.9, "crit": 3, "desc": ".NET multipart form-data content type reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/temp/directory::get-temp-path-name", "conf": 0.66, "crit": 2, "desc": "GetTempPath named without a call site", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword", "conf": 0.5, "crit": 3, "desc": "Encryption algorithm keyword", "from": [ { "off": 16963519, "file": 3 }, { "off": 20121195, "file": 11 } ], "uses": [ 50 ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "from": [ { "off": 2186896, "file": 3 }, { "off": 2240920, "file": 11 } ], "uses": [ 278, 309 ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/section/prose::high-string-count-pe-no-exceptions", "conf": 0.9, "crit": 3, "desc": "Non-compiler PE with very high string count", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 155 ] }, { "id": "metadata/lang/encoded/wide::shell-interpreter-cmd", "conf": 0.95, "crit": 1, "desc": "cmd interpreter marker encoded", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/asymmetric/kem::hybrid-key-material-labels", "atk": "T1573", "mbc": "C0027", "conf": 0.9, "crit": 3, "desc": "Hybrid key material labels", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/db/access::connection-strings-plural", "conf": 0.7, "crit": 3, "desc": "ConnectionStrings property", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-generated-code-attribute", "conf": 0.9, "crit": 3, "desc": "WCF generated code attribute", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/sync/mutex::create-mutex", "mbc": "C0042", "conf": 0.9, "crit": 3, "desc": "CreateMutex API call", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-reflection-emit-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Reflection.Emit name", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/indicator-removal/timestamps::export-timestamp-maxval", "atk": "T1070.006", "conf": 0.9, "crit": 3, "desc": "Export dir timestamp set to 0xFFFFFFFF", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-named-algorithm-api", "mbc": "C0029", "conf": 0.9, "crit": 3, "desc": "Named HMAC algorithm API symbol", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/ws-trust::aadsts-authentication-response-code", "conf": 0.94, "crit": 3, "desc": "AADSTS authentication response code", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/shellexec::shell-execute-call", "atk": "T1059.001", "conf": 0.85, "crit": 3, "desc": "ShellExecute API call", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::advanced-sync-primitives", "atk": "T1129", "conf": 0.75, "crit": 2, "desc": "Advanced sync primitives", "from": [ { "file": 8 }, { "file": 15 } ], "uses": [ 62, 225 ] }, { "id": "metadata/binary/layout/checksum::pe-checksum-zeroed", "conf": 0.9, "crit": 3, "desc": "PE checksum is zeroed", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/os/network/interface::dotnet-get-physical-address", "conf": 1.0, "crit": 3, "desc": "References GetPhysicalAddress method", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/exec::cmd-exe-reference", "conf": 0.8, "crit": 3, "desc": "References Windows cmd.exe interpreter", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/library/stdlib::dotnet-icryptotransform", "conf": 0.8, "crit": 3, "desc": ".NET ICryptoTransform cipher interface", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/db/linq::lambda-expression", "conf": 0.6, "crit": 3, "desc": "LambdaExpression class", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/overlay::large-overlay-1mb", "conf": 0.96, "crit": 3, "desc": "Overlay size at least 1 MiB", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-elapsedticks", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch elapsed ticks", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "micro-behaviors/crypto/symmetric/decrypt::transform-final-block", "conf": 0.85, "crit": 3, "desc": "Final-block symmetric transform operation", "from": [ { "file": 3 } ] }, { "id": "objectives/persistence/system/registry/com-hijack::current-user-hive-marker", "atk": "T1546.015", "conf": 0.9, "crit": 3, "desc": "Current-user Windows registry hive", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/overlay::file-over-2mb", "conf": 0.9, "crit": 2, "desc": "PE file larger than 2 MiB", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-file-tree-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST file tree endpoints", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-input-dotnet", "conf": 0.8, "crit": 3, "desc": ".NET child stdin redirection", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/path/extension::exe-name-or-extension", "conf": 0.5, "crit": 1, "desc": "References a Windows .exe filename or extension", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/managed::getresponseasync", "conf": 0.72, "crit": 3, "desc": "Async HTTP response retrieval", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/control-flow/logic::overlay-at-least-half", "conf": 0.9, "crit": 3, "desc": "Binary overlay is at least 50%", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/ratio::multiple-pe-embedded", "conf": 0.9, "crit": 3, "desc": "Two or more embedded PE headers", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/dropper/staging/resource::get-temp-path-w-import", "conf": 1.0, "crit": 3, "desc": "GetTempPathW import", "from": [ { "file": 7 } ] }, { "id": "metadata/binary/layout/tls::pe-tls-callback-table", "conf": 0.9, "crit": 3, "desc": "PE TLS callback table present", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/encode/base64::dotnet-to-base64string-text", "conf": 0.9, "crit": 3, "desc": ".NET Base64 encoder name in binary text", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "from": [ { "file": 1 }, { "file": 2 }, { "off": 34842396, "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "off": 33829355, "file": 11 }, { "file": 15 } ], "uses": [ 317 ] }, { "id": "micro-behaviors/data/encode/image/pixel::pixel-access-stride", "conf": 0.8, "crit": 2, "desc": ".NET BitmapData.Stride row-length field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-protocol-reference", "conf": 0.5, "crit": 3, "desc": "References the OAuth 2 protocol", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::file-enumeration-with-access", "conf": 0.9, "crit": 3, "desc": "Directory enumeration with file-content access", "from": [ { "off": 291152, "file": 1 }, { "off": 94368, "file": 3 }, { "off": 405752, "file": 7 }, { "off": 278568, "file": 8 }, { "off": 291152, "file": 9 }, { "off": 90232, "file": 11 }, { "off": 405752, "file": 14 }, { "off": 278568, "file": 15 } ], "uses": [ 138, 214, 238, 363 ] }, { "id": "metadata/binary/layout/overlay::compact-image-multistage-pe", "conf": 0.96, "crit": 4, "desc": "Compact mapped image with embedded stages", "from": [ { "file": 3 } ], "uses": [ 103, 199, 206 ] }, { "id": "micro-behaviors/communications/http/client/managed::httpclient", "conf": 0.82, "crit": 3, "desc": "System.Net.Http.HttpClient type reference", "from": [ { "file": 3 } ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/env/secret-name::credential-env-read", "conf": 0.9, "crit": 3, "desc": "Reads a credential-bearing environment variable", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 242 ] }, { "id": "micro-behaviors/fs/directory/traverse::std-filesystem-error-rtti", "conf": 0.9, "crit": 3, "desc": "C++ filesystem error RTTI", "from": [ { "file": 8 } ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::jwt-jwe-context--rx-3", "conf": 0.95, "crit": 3, "desc": ".NET X.509 encryption-credentials type", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-credentials", "conf": 0.86, "crit": 3, "desc": "OAuth client credential fields", "from": [ { "off": 12321992, "file": 3 }, { "off": 12601520, "file": 11 } ], "uses": [ 24, 78 ] }, { "id": "micro-behaviors/communications/http/client/managed::default-request-headers", "conf": 0.8, "crit": 3, "desc": "DefaultRequestHeaders accessor", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-ops", "atk": "T1129", "conf": 0.7, "crit": 2, "desc": "Condition variable ops", "from": [ { "file": 8 }, { "file": 15 } ], "uses": [ 368 ] }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/system::programdata-directory-path", "conf": 0.82, "crit": 3, "desc": "ProgramData directory path reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ansi", "conf": 0.7, "crit": 3, "desc": "Get module handle ANSI", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-release", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "SRW lock release", "from": [ { "file": 8 } ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/load/runtime::load-library-ex-a", "atk": "T1574.002", "conf": 0.95, "crit": 2, "desc": "Extended dynamic library loading (ANSI)", "from": [ { "file": 7 } ] }, { "id": "objectives/command-and-control/channel/quic::msquic-library-reference", "conf": 0.82, "crit": 3, "desc": "MsQuic library reference", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/fs/link/reparse::create-symbolic-link-directory-api", "conf": 0.9, "crit": 3, "desc": "Creates a Windows symbolic link", "from": [ { "file": 8 } ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::low-import-count", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Sparse import table", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/tls/fiber::fls-set-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage assignment", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/shape::high-string-density-large-pe", "atk": "T1027", "mbc": "B0032", "conf": 0.82, "crit": 3, "desc": "Large PE with dense string corpus", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/read/file/handle::read-file", "conf": 0.9, "crit": 2, "desc": "Read data from file handle", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/fs/config/system::wininit-rename-section", "conf": 0.72, "crit": 3, "desc": "WININIT rename section marker", "from": [ { "file": 3 } ] }, { "id": "metadata/lang/compiler/systems::rust-src-path", "conf": 0.85, "crit": 2, "desc": "Rust source file path (.rs)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/env/cloud::azure-credentials-dup", "conf": 0.8, "crit": 3, "desc": "Azure credential environment variables", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/load/local::dotnet-load-from", "conf": 0.85, "crit": 3, "desc": ".NET LoadFrom assembly-loading reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/random/crypto::process-prng", "mbc": "C0068", "conf": 0.9, "crit": 1, "desc": "Windows cryptographic PRNG (ProcessPrng)", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::invoke-member-token", "conf": 0.82, "crit": 3, "desc": ".NET InvokeMember method reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-authorization-code-grant", "conf": 0.8, "crit": 3, "desc": "OAuth authorization-code grant field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-ansi-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET ANSI pointer string marshalling", "from": [ { "file": 3 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 2 } ] }, { "id": "objectives/command-and-control/dropper/delivery/http::bun-loader-aes-cbc", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Bun loader AES CBC marker", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/create::submit-threadpool-work", "conf": 0.9, "crit": 3, "desc": "Submit a Windows thread-pool work item", "from": [ { "file": 8 } ] }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-challenge", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-challenge field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-gettimestamp", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch timestamp check", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-append", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder Append use", "from": [ { "off": 55691, "file": 2 }, { "off": 7388206, "file": 3 }, { "off": 55691, "file": 10 }, { "off": 7602614, "file": 11 } ], "uses": [ 272, 359 ] }, { "id": "micro-behaviors/crypto/symmetric/decrypt::dotnet-create-decryptor", "conf": 0.9, "crit": 3, "desc": ".NET symmetric decryptor creation", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/spawn::dotnet-redirected-stdio", "conf": 0.88, "crit": 2, "desc": ".NET child process stdio redirection", "from": [ { "off": 2153264, "file": 3 }, { "off": 2207288, "file": 11 } ], "uses": [ 58, 201, 268, 294 ] }, { "id": "metadata/file/extension/executable::exe", "conf": 1.0, "crit": 2, "desc": "Windows executable extension", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-prop", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt ChainingMode property key", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/compress/stream::system-io-compression", "conf": 0.75, "crit": 3, "desc": ".NET System.IO.Compression namespace reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/email/mime::mime-multipart-marker-pe", "conf": 0.9, "crit": 3, "desc": "PE MIME multipart marker", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-managed-resource-access", "atk": "T1027.009", "conf": 0.9, "crit": 3, "desc": ".NET embedded-resource API references", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 91, 95, 339 ] }, { "id": "metadata/signed/certificate/identity::microsoft-signed-foreign-company", "conf": 0.94, "crit": 3, "desc": "Microsoft-signed PE has non-Microsoft company", "from": [ { "file": 2 } ], "uses": [ 317, 345 ] }, { "id": "micro-behaviors/process/create/spawn::process-token-dotnet", "conf": 0.82, "crit": 3, "desc": ".NET Process type token", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/debug/event::output-debug-string", "conf": 0.82, "crit": 3, "desc": "References the Windows debugger output API", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/debug::pdb-nonstandard-drive", "conf": 0.5, "crit": 3, "desc": "PDB path on non-standard drive letter" }, { "id": "binary/embedded/pe", "atk": "T1027.009", "conf": 0.9, "crit": 3, "desc": "Embedded PE binary at file offset 0x23000 (~1318912 bytes)" }, { "id": "micro-behaviors/data/string/library::dotnet-append-method-token", "conf": 0.72, "crit": 3, "desc": "Append method-name token", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/parse/vocabulary::ciphertext-key-vocabulary", "conf": 0.8, "crit": 3, "desc": "Uses ciphertext, shared-secret, or trailer terms", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/concurrency::create-io-completion-port", "conf": 0.92, "crit": 3, "desc": "Creates a Windows IOCP", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/embedded/payload/image::dotnet-resource-manager-token", "atk": "T1027.003", "mbc": "F0001.006", "conf": 0.78, "crit": 3, "desc": ".NET resource manager reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-set-property", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt property setter API", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/managed::getasync", "atk": "T1105", "conf": 0.86, "crit": 3, "desc": "HttpClient asynchronous HTTP response retrieval", "from": [ { "file": 3 } ] }, { "id": "metadata/file/string/cloud::azure-managed-identity-token-path", "conf": 0.9, "crit": 3, "desc": "Azure managed identity token endpoint", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/process/injection/cluster::memory-injection-recognized-marker", "conf": 0.9, "crit": 3, "desc": "Recognized memory-injection API context", "from": [ { "file": 1 }, { "file": 2 }, { "off": 34842396, "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "off": 33829355, "file": 11 }, { "file": 15 } ], "uses": [ 317 ] }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "from": [ { "file": 2 } ] }, { "id": "metadata/binary/framework::dotnet-selfcontained-bundle", "conf": 0.95, "crit": 2, "desc": ".NET self-contained runtime bundle", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 3, 314, 343 ] }, { "id": "micro-behaviors/fs/file/rename::any-rename", "conf": 0.9, "crit": 3, "desc": "Rename or move file on Windows", "from": [ { "file": 7 }, { "file": 8 }, { "file": 14 }, { "file": 15 } ], "uses": [ 11 ] }, { "id": "metadata/binary/layout/tls::pe-multiple-tls-callbacks", "conf": 0.9, "crit": 3, "desc": "PE has multiple TLS callbacks", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/ssh/client::password-auth-method", "atk": "T1021.004", "conf": 0.7, "crit": 3, "desc": "SSH password authentication method string", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/symbols/count::many-exports-20", "conf": 1.0, "crit": 2, "desc": "Binary has 20+ exports", "from": [ { "file": 7 } ] }, { "id": "metadata/binary/vendor::microsoft-prefixed-company", "conf": 0.9, "crit": 3, "desc": "PE company name identifies Microsoft" }, { "id": "micro-behaviors/fs/enumerate/volume::get-disk-free-space", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "GetDiskFreeSpace API import", "from": [ { "file": 8 } ] }, { "id": "objectives/anti-static/pack/runtime::embedded-dotnet-runtime-assembly-strings", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded .NET runtime assembly-name strings", "from": [ { "off": 8084651, "file": 3 }, { "off": 8309200, "file": 11 } ], "uses": [ 25, 57, 182 ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/random/crypto::dotnet-random-number-generator", "conf": 0.85, "crit": 3, "desc": ".NET cryptographic random generator", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-token-pair", "conf": 0.72, "crit": 3, "desc": "Multiple .NET reflection resolver APIs", "from": [ { "off": 7390506, "file": 3 }, { "off": 7604914, "file": 11 } ], "uses": [ 357, 369 ] }, { "id": "micro-behaviors/data/embedded/payload/resource::find-resource-any", "atk": "T1027.009", "conf": 0.8, "crit": 3, "desc": "Locates a PE resource entry", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 47 ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-output-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET child stdout capture and redirection", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/socket/create::tcplistener-dotnet-str", "conf": 0.82, "crit": 3, "desc": ".NET TcpListener class reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/privilege/check::is-user-an-admin", "atk": "T1033", "conf": 0.75, "crit": 3, "desc": "IsUserAnAdmin API call", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/string/assembly::stack-immediate-byte-string-x64", "conf": 0.86, "crit": 3, "desc": "Native stack immediate byte-string fragment", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/client/managed::user-agent-accessor", "conf": 0.8, "crit": 3, "desc": "HttpClient UserAgent accessor", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "from": [ { "file": 1 }, { "off": 91108, "file": 2 }, { "off": 139276, "file": 3 }, { "file": 8 }, { "file": 9 }, { "off": 90596, "file": 10 }, { "off": 132108, "file": 11 }, { "file": 15 } ], "uses": [ 262, 287 ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-locale-info", "atk": "T1082", "conf": 0.88, "crit": 2, "desc": "Query locale information", "from": [ { "file": 7 } ] }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/commandline::get-command-line", "conf": 0.82, "crit": 2, "desc": "Query current process command line", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/ipc/pipe::create-pipe", "atk": "T1559", "conf": 0.9, "crit": 2, "desc": "Create anonymous pipe", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/encode/image/pixel::pixel-access-lockbits", "conf": 0.8, "crit": 2, "desc": ".NET Bitmap.LockBits raw pixel-buffer lock", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/crypto/asymmetric/ecdh::ecdh-api-reference", "atk": "T1573.001", "conf": 0.88, "crit": 3, "desc": "ECDH key-agreement API reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/oauth::microsoft-login", "conf": 0.6, "crit": 3, "desc": "References a Microsoft login domain", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/full::dotnet-writeallbytes-token", "conf": 0.86, "crit": 3, "desc": ".NET File.WriteAllBytes token", "from": [ { "file": 3 } ] }, { "id": "metadata/file/string/cloud::azure-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "Azure IMDS endpoint", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/dropper/staging/resource::move-file-ex-w-import", "conf": 1.0, "crit": 3, "desc": "MoveFileExW import", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/string/library::dotnet-combine-method-token", "conf": 0.72, "crit": 3, "desc": "Combine method-name token", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::dotnet-corehost-pdb-path", "conf": 0.98, "crit": 2, "desc": ".NET corehost apphost PDB path" }, { "id": "micro-behaviors/data/string/library::dotnet-get-directory-name-token", "conf": 0.72, "crit": 3, "desc": "GetDirectoryName method-name token", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-assembly-token", "conf": 0.78, "crit": 3, "desc": "Assembly accessor token (get_Assembly)", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "from": [ { "file": 1 }, { "file": 2 }, { "off": 34842218, "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "off": 33829177, "file": 11 }, { "file": 15 } ], "uses": [ 252, 326 ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "objectives/command-and-control/dropper/staging/embedded::dotnet-aes-resource-dropper", "atk": "T1027.009", "mbc": "B0030", "conf": 0.92, "crit": 3, "desc": ".NET AES resource extraction dropper", "from": [ { "off": 11616878, "file": 3 }, { "off": 11888966, "file": 11 } ], "uses": [ 66, 258, 308 ] }, { "id": "micro-behaviors/process/create/thread::create-thread", "atk": "T1129", "conf": 0.95, "crit": 3, "desc": "Create thread in current process", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::dotnet-sslstream-type", "conf": 0.94, "crit": 3, "desc": ".NET SslStream transport reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/interpreter/lua::lua-bytecode-magic", "conf": 0.96, "crit": 3, "desc": "Embedded Lua bytecode magic", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/client/managed::custom-user-agent-headers", "conf": 0.85, "crit": 3, "desc": "Default request headers include User-Agent access", "from": [ { "off": 10846302, "file": 3 }, { "off": 11104102, "file": 11 } ], "uses": [ 224, 298 ] }, { "id": "micro-behaviors/communications/socket/raw::raw-socket-ref", "atk": "T1011", "mbc": "C0001", "conf": 0.7, "crit": 1, "desc": "Raw socket terminology", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/sysinfo/network::loopback-adapter-name", "conf": 0.9, "crit": 3, "desc": "Loopback adapter name", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "from": [ { "file": 1 }, { "file": 2 }, { "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "file": 11 }, { "file": 15 } ], "uses": [ 162, 194, 262, 312 ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::jwt-jwe-context--rx-5", "conf": 0.95, "crit": 3, "desc": ".NET JSON Web Token library reference", "from": [ { "file": 3 } ] }, { "id": "objectives/discovery/system/locale::windows-locale-fingerprint", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 2, "desc": "Imports APIs that query multiple Windows locale settings", "from": [ { "off": 497456, "file": 7 }, { "off": 497456, "file": 14 } ], "uses": [ 70, 74, 300 ] }, { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6, "crit": 3, "desc": "System.Linq.Expressions namespace reference", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/symbols/imports::single-import-count", "conf": 0.7, "crit": 3, "desc": "PE with single import", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/read/file/full::dotnet-readallbytes-token", "conf": 0.86, "crit": 3, "desc": ".NET ReadAllBytes method reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ex", "conf": 0.82, "crit": 3, "desc": "Get extended module handle", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/anti-av/code-padding::small-code-section-in-large-pe", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Small code section in large PE", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::pe-file-description-present", "conf": 0.95, "crit": 2, "desc": "PE FileDescription field is populated" }, { "id": "micro-behaviors/data/manipulation::dotnet-name-value-collection", "conf": 0.8, "crit": 3, "desc": ".NET NameValueCollection type reference", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/socket/raw::raw", "atk": "T1011", "mbc": "C0001", "conf": 0.8, "crit": 3, "desc": "Create raw network sockets", "from": [ { "file": 3 }, { "file": 11 } ], "uses": [ 324 ] }, { "id": "metadata/build/manifest::pe-manifest-myapplication-template", "conf": 0.9, "crit": 3, "desc": "Manifest is MyApplication template name" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-getmanifestresourcestream", "atk": "T1027.009", "conf": 0.85, "crit": 3, "desc": ".NET manifest resource stream access", "from": [ { "file": 3 } ] }, { "id": "well-known/malware/worm/ludbaruma::metric-section-count-3", "conf": 0.99, "crit": 3, "desc": "Exactly three sections", "from": [ { "file": 2 } ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-semver-git-hash", "conf": 0.9, "crit": 3, "desc": "PE ProductVersion has SemVer git hash" }, { "id": "micro-behaviors/process/create/spawn::use-shell-execute-property", "conf": 0.82, "crit": 3, "desc": ".NET UseShellExecute property setter", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout/overlay::overlay-dominates-80pct", "conf": 0.94, "crit": 3, "desc": "PE overlay exceeds eighty percent", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/time/query::get-tick-count", "conf": 0.9, "crit": 3, "desc": "Get tick count", "from": [ { "file": 8 } ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated" }, { "id": "micro-behaviors/process/tls/fiber::fls-get-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage retrieval", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/trust-level::dotnet-strong-name-signed", "conf": 0.95, "crit": 3, "desc": "Managed assembly is strong-name signed", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Cleartext http:// URL", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-instance-token", "conf": 0.8, "crit": 3, "desc": "CreateInstance member-name token", "from": [ { "file": 3 } ] }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "micro-behaviors/os/api-resolution/manual::load-library-ex-system32", "conf": 0.85, "crit": 3, "desc": "LoadLibraryExW w/ SYSTEM32 search", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/ipc/pipe::duplicate-handle", "conf": 0.8, "crit": 2, "desc": "Duplicate object handle", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/control/info::process-info-class-31-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 31", "from": [ { "file": 8 } ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/binary/layout/overlay::large-overlay-64k", "conf": 0.95, "crit": 3, "desc": "Overlay size at least 64 KiB", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.72, "crit": 3, "desc": ".NET GetFields reflection method reference", "from": [ { "file": 3 } ] }, { "id": "well-known/dual-use/tunnel/swifttunnel_vpn::swifttunnel-rustc-commit", "conf": 0.95, "crit": 3, "desc": "SwiftTunnel rustc commit path", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder type reference", "from": [ { "file": 2 } ] }, { "id": "objectives/evasion/anti-av/import-pollution::winmm-library", "conf": 0.8, "crit": 3, "desc": "winmm library import", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/tls/fiber::fls-alloc", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage allocation", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/process/hidden/execution::dotnet-hidden-process-launch", "conf": 0.92, "crit": 3, "desc": ".NET hidden process launch setup", "from": [ { "off": 2166597, "file": 3 }, { "off": 2220621, "file": 11 } ], "uses": [ 34, 89, 268, 342 ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file", "conf": 0.9, "crit": 2, "desc": "Begin directory enumeration", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-token-endpoint-field", "conf": 0.8, "crit": 3, "desc": "OAuth token endpoint field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-unmanaged-memory-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET unmanaged memory allocation API", "from": [ { "file": 3 } ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "from": [ { "file": 1 }, { "file": 2 }, { "off": 34842396, "file": 3 }, { "file": 8 }, { "file": 9 }, { "file": 10 }, { "off": 33829355, "file": 11 }, { "file": 15 } ], "uses": [ 281, 317 ] }, { "id": "micro-behaviors/data/encode/charset::lowercase-digits-alphabet", "conf": 0.5, "crit": 3, "desc": "Lowercase alphanumeric character set", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-wait", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Condition variable wait", "from": [ { "off": 279016, "file": 8 }, { "off": 279016, "file": 15 } ], "uses": [ 97 ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-delegate", "conf": 0.8, "crit": 3, "desc": "Creates .NET reflection delegate", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-clientbase", "conf": 1.0, "crit": 3, "desc": "References WCF ClientBase class", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-ansi", "conf": 0.7, "crit": 2, "desc": "Get module file path (ANSI)", "from": [ { "file": 7 } ] }, { "id": "objectives/evasion/masquerade/identity/mimicry::windowsupdate-appdata-path--rx-3", "atk": "T1036.005", "conf": 0.95, "crit": 3, "desc": "ProgramData path fragment", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::dynamic-method-api-token", "conf": 0.8, "crit": 3, "desc": "References the .NET DynamicMethod API", "from": [ { "file": 3 } ] }, { "id": "metadata/build/archive::archive-member-over-10mb", "conf": 0.95, "crit": 3, "desc": "Archive has member larger than 10 MB" }, { "id": "metadata/build/archive::archive-windows-executable-entry", "conf": 0.86, "crit": 3, "desc": "Windows executable archive member" }, { "id": "metadata/build/archive::archive-windows-library-entry", "conf": 0.86, "crit": 1, "desc": "Windows DLL archive member" }, { "id": "metadata/file/archive::archive-executable-member-cluster", "conf": 0.9, "crit": 3, "desc": "Archive contains several executable members" }, { "id": "metadata/package/files/archive-member::nested-native-library-member", "conf": 0.98, "crit": 3, "desc": "Archive has a nested native library member" }, { "id": "metadata/file/archive::archive-misplaced-executable-member", "conf": 0.9, "crit": 3, "desc": "Archive executable in atypical path" }, { "id": "metadata/file/data-blob::near-maximum-entropy-file", "conf": 0.9, "crit": 3, "desc": "File has near-maximum entropy" }, { "id": "metadata/binary/vendor::is-microsoft-named", "conf": 0.8, "crit": 3, "desc": "File name contains Microsoft", "from": [ { "file": 6 } ] }, { "id": "objectives/evasion/masquerade/version-resource/contradiction::microsoft-company-versioninfo-kv", "atk": "T1036.005", "conf": 0.95, "crit": 3, "desc": "Microsoft company version identity", "from": [ { "file": 6 } ] }, { "id": "well-known/lib/runtime/managed/dotnet-runtime::microsoft-dotnet-product-name", "conf": 0.99, "crit": 3, "desc": "Microsoft .NET product version identity", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/code/complexity::few-leaf-functions", "conf": 0.4, "crit": 3, "desc": "Binary has very few leaf functions", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/symbols/count::no-imports", "conf": 0.7, "crit": 3, "desc": "PE has no imported DLL dependencies", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/vendor::microsoft-corp-versioninfo", "conf": 0.9, "crit": 3, "desc": "Claims Microsoft in version resource", "from": [ { "file": 6 } ] }, { "id": "objectives/evasion/masquerade/trust::unsigned-pe-microsoft-version-claim", "atk": "T1036.005", "conf": 0.94, "crit": 3, "desc": "PE has Microsoft version metadata but no verifiable embedded signature", "from": [ { "file": 3 }, { "file": 7 }, { "file": 14 } ], "uses": [ 168, 386 ] } ] }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000[bJB*4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000C3kEPgco@*gco@*gco@*j45zshAMw\u003eYrD^/fGT-!YrDZ^f/%\u0026/YrDQ:h9ln\u003cYrz", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000nq^GVWG5\u003cT4u26a08epN.aoK{PLT/ioK!GZnDD}7IWA1kli{bukP0gM6[oV}08el(n=N!]+/[qP+/[qPr-.?A({%W7!\u003c$S\u003ebTs[WC)D%03p{7w2Uo\u003es7!xS3+YK3*lavj30093lkW\u003c\u0026@nqRBlfO\u0026axil1uiirhQf1?K:m07.@mbP]Tq6@VlT07-8\u003ebRRJ]2lj-7nqV\u003edItuw*\u003cPkAMJrM3R0SU=Fl)J)CJtmg\u003c1oqbPoE8\u003e?Xc8^i07.$p\u003e^fvL01VIibSDsyl)K^H.Uhy-+j-WMBoz(\u003c(Qaj3l)KFWkOwP\u00268C2+(nq/.snq/.Inr1uf.2%:7Xb(Tg0p7E)IWh\u003eikNo]skP04K6}@zC0719}000306]ci203?OoGtZq/uC\u003e1h+/[qP+/[qP+/[qPr.d(fp!lC]I:v#O00002BW@zh000dADQ%53nr3N]jM%@u0SY+B0000\u0026dzXKQ\u00267eHojv\u003er5bQ=iul)J)vXb=Nf07.$pVh)xG:(}P\u003e0SXrMGtZO).:]W(X!a]x07-7M[wkqdnR$L1a4c8enR$/J+7FW:nX%S]54ieNlwOOzi.trc%44!r4[}\u00264CI.THnq^!=5Dz!hnr0/CUMK}$IofuZ4\u003ccD800000nR$/J+7FW:nX%S]54ieNlwOOzi.trc%44!r4[}\u00264CIU]z.2u@=1o.nFZ=Ydt0000\u0026dByXyoE82SI9@QioPokIZxsK5XDh:h07.$pVh%erXb(U(nq1\u0026SuC\u003e1hr.d(fav}y%nr4Q2:3ymp", "ln": 976 }, { "b": "@$NB@1oq2CD)xKe4#16:%nLSx-8{kJuo}*Zt%R^.uTpOkwjlR3GUOaL9@(oulb(qr0rIA#%nS9!Iez(UIdMDMJsyG91ovT\u003ekM?5$3UB064\u003ccD800000nqQp\u003e5lh1$k(", "ln": 2324 }, { "b": "Iss5*-5I7enDf$BtlB}/nq1\u0026uur#!!0001Xnq1\u0026uur$EgnqQp\u003e5lh+4Gx$0SJCpdrI+SXiI:^ziGlNU4Bpy^0mFGAip.q?FUMs/^nq1\u0026eur$E)+/[qP+/[qP+/[qPrr", "ln": 2876 }, { "b": "zEEN7wjXJ6nXetJwO#6(D2c5b+1oi^wPSibwmY\u003cOg1eWIl)KDWIbU-WoO(B*kUN2tbUgE.oE9C9IbU:54{cKS5KW)Lnxjazz#Y\u003er08ekqbQ=iyoE8q.Jz}eK\u003e/0=b08eqAbW:iW\u0026w:HsoEapxI=p@!nq*d!nk7+Wnq/\u003eYfH#k\u003eoP8p:i7Q)54m{Pwnhm$L.ncWRf#lz%Z-VhH=}1hUnwSdPoFKyP.nc\u003cT.n4f:f#lKr:vQ%L@@r30ncd7e0MW*F.vo3\u003c", "ln": 7206 }, { "b": "oO(OhuTySvI+1WUg1/9QA1CZ307^jXoP8ZMnDD$8.nV{Tf#==2.4ohOZ-Vr9^mBxfnwSpTnDD[ag1F[i.4/H$A1CX$.azFWav}tW7!/=.2U^5aoO\u0026+W2MK\u00268oEP", "ln": 9467 }, { "b": "g6vOFInp{{nR#%p6\u0026D^\u002607-3au\u0026Zlc@$NWL1op#Bkl8jFRt72\u0026(a3G/%av]-0SSi34$$rn004]X6m{w/wK}Z/c0gcE07-1J.aoM\u0026h#\u0026{UFvFbI0003[I[r6(002MFYu*JT01T+?bME\u0026o4@RUCI)A@}003R44$qq+%g?fZ1}ImO=R\u003c@D4\u003eizpaPIGM5dL)y1on@YI%}??0a(:\u003eGaGga07.?z4${CO002MHhg!:f0a(:+{75Mms2x", "ln": 13301 }, { "b": "5c8Y3I\u003c6k6008jawDz\u003c5I\u0026g%z0093l1p$Xonq\u0026a/0rr9\u003cGe-\u0026wG\u003en*m%lj^U%nLSH4kf{G08evQniWjSX/H?K0o^FO0%4O31][S]I?tyr002MDGj1(-07-7MoCN:hnqP.Wav}F3^31OjoPoI66A!zfJE$Qy006OX0002.dd)Vx\u003e}98t07.%02MT]9nxlwD0SSic0000\u0026JsCB[1ovVo[De^Q3i*FgnqR%80rr9\u003cJF)oG002MD}SLJG0@$(IV?LTy089", "ln": 22064 }, { "b": "002r{H-cl[nqUgDaC6W}nq\u003c(vh#\u0026%FnDe(8J]yxC0pSLV2y*1y/9RGT[jrM-501)w001+N-!wg/0005tG\u003e-NE00bSIo%vfB[\u003c[RJsu3oXnS0la-dv%?Fw1=s0001vwK}-Asu3oX[jrMXE{h8}3ig7}nDe(8J!dPr05sI[G(5^H00g8[y=zy{0z5hAUT\u003cSwnqU2Zh#\u0026}IItlpWF=C!3Y?*V*000K.z2\u003cRpnq\u0026:nh#\u0026%FnDe-4K6R?!0o(GJ001+4-S", "ln": 45744 }, { "b": "0fx:7-5H$duo}*Zt%R^.uTpLWa3Y/%IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026I?LK#008HV@%i-=-!wW$0002sG)kMS002MFJBjZC0o^Y@0072)C@L^70lf.qh#\u0026{Unq1\u0026utvgY5tTqTYuo}}7.!9H)w[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026I?LK#008HV@%i-=-!w+00002sG)CYU002MFJBjZC0o\u0026/S0072)DPh090lf.sh#\u0026{Unq1\u0026utvgY5tTqTYuo}}7.!9H)w[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nq3m*nr6T10002sG)+]X00bSIo%A?HvGMRIG)+]X00bSy-5H$duo}*Zt%R^.uTpMYw[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026Gs%/n0000", "ln": 48777 }, { "b": "-!w?20003\u003cGtY-NuTu36l0V=.l0){nw[CTc4\u003ccD800000nqQp\u003e5lh1$k#{oKk#Z(^q+hMci7P4eFb/MH-!w[40005tG)\u003e#Y00bSIJx!xZ0o+tc0072)E(EAd0MG?xh#\u0026{Vnq1\u0026utvgY5tTqTYuo}}7.!9Hk4\u003ccD800000nqQp\u003e5lh1$k#{oKk#Z(^q+hMci7P4eFb/MH-!w[40005tG)\u003e#Y00bSIJx!xZ0o?110072)E(EAd0MG?xh#\u0026{Vnq1\u0026utvgY5tTqTYuo}}7.!9Hk4\u003ccD800000nqQp\u003e5lh1$k#{oKk#Z(^q+hMci7P2", "ln": 49516 }, { "b": "0rr92nr5R!0002.p!gP!(7XjU07-35{Y7o]nqUeNY8R*g%nSc0E[g:gnyuS(X=qZg00000kU96Bnd0veiMqO.7YTKnla^s2002Cx{c*.onq\u0026G50002e@@r2#[diu35qf-WBQ){vk[(\u003ex.4=[:{\u003e]jOFv#G{0006hGVi#(07:Q2[C\u0026K*%nNNtiFvCl000KYKn]mX(c{aw07-2H2/.N\u003c0rr92nr5R!0002.S7c\u003c*k^{++I\u003ea!/008oA0002e@@r2#[b", "ln": 55264 }, { "b": "4${LM%nO1hyYKIoGzkUY1][S64)[vE0rr914\u003ca4p]n[*C!9u$GH0\u003e8nI?L%F004VD2zpw6Ig]:D006k7\u003e]oQ3%455r2R(w0G}wwC00bSGJFEMm07.@ubP$8{bQ-W:Inq-t*dWAU7Y:QpoPa)X0002.g/jnNIg{DX004\u003evLMp::k.PdFGU^-\u002607-3QHYEFQFw8P@0000\u0026I\u003ea!/000K-Xc-ioo[?TsGN%m90e4$n0rr934#2cc002MFmhQM12MUD\u00260TX]cnq^EsIWh\u003eg+1hMHnqN(*GE46c07-2Ac}]K:5kn0:7/3500.HkA7FK}DoO}Q%.r8t6I+\u003eJ\u003cf#uQs*d:rJoO(\u003c*nION=I9IRzg4F1{p-@rB.yXrnp:!]K\u003e]-Mk}d96N}anA!aCoY+A.Yk^gY*j:-URqH-.qlznb", "ln": 55616 }, { "b": "0006hG%*%Y07qTJFb]SInq\u003c370rr9\u003cXb(a0%nSc0E[hPq4$*kM002MHLk(c]05qQV\u003e*xIjnR$kOF-3K$%nLVEFCoSP07?:S01Ybgnq\u0026DI0rr9\u003cI?JLW002MFkP04G}B(-mav}t{c}PoG@$T*L0@$(ImjpY-G?}^I08eqtawvSCsoey4-!v!30000!54n(@0rrb=dmx9cLMp::la^m00072)P8!](07-8zfZa/)008om0rr9[I?Lml002AyWvNy007-9eKn]mXnq\u0026:?0rr9", "ln": 57680 }, { "b": "2?cG/0001SM6qpH01RJ?l\u003eu:3l\u003eq-.FCxp?6gvU:N/JG?nr5Q\u003c0002.=Qv*lFB-^LW.\u003eH)bT?+m004\u003e-LMp::nq\u003c3T0rr9\u003cI)Xuw002ABWuHW(0o(6c%nLSFJHfXC07.}KnqQaF(0jk/%hG++0rr92nq*gV\u003e*0oj07.*Vnq\u003c3T0rr9gH2hI5%hG++0r", "ln": 58273 }, { "b": "nr16A)/JNNLW\u003c\u003c@4?3xC{w)*w[-UZq0@$(I21TOt\u003eTZK]nr3vc\u003eU\u0026Sb07-2p\u003eTZAyBqadm@%i-R-ZPR4nr3vc\u003e.yt:07-2xUT\u003cVMnq*sJnq*4JnqUR..r7\u003e\u003e0Of!#rK+ORmAw2RB\u003cJWk:-J26GtFf\u003cI-)!N0@$(I9G$BA0p8yL4\u003ccD800000oPa5Ko]Bh\u0026%jo!#.7\u003cwjIsyL]nq*GDnr2$9nq1+\u003cnq1X?nicfYhB@-#[jnyoS7q?k{^*lg/HQ]=7!xGT\u0026qTKWA038hI:=n?GlNU4BIZO3CN$EdR+A1\u003e\u0026oNvkIsKh]rLVQy{5ETyo$oyIblE}cnp!Zf00016uTu38ubHn^w[CTc4\u003ccD800000nqQp\u003e5lh1%r--i\u003cGx%ZKJJdHe002MFmD^o@Z\u0026QmVnDe%r4Ap\u003ch07-8z\u003e\u0026^Es", "ln": 62784 }, { "b": "nq*ji(LBeBw[AUaaa%Q]0000\u0026I+SWKHGjDR07q-bf#eIAjou4D7xKNpm2uuklav3$002MD/*}95:u+WU@$N$r0%0#G0D!Vpg5{LL4\u003c7/K74Mey06NW)002p}L/CI]nq*jiVh%C9UN}z1?t)PRk[yy(bPhoJ4$$I@002p}WNqxWGUOaKXb(Tgl4Btdu\u0026QZ\u003e/8U\u003cKnxjf.00000nr3vc@$QJf0%14\u003c4$@Ts002MFp3xO=@@IsW7xTUeIn}]s!j+=", "ln": 63693 }, { "b": "I+Cxgl5ObR5qf-V50B/d0ymlXZ^emMB\u003ct?qbQtW=1onA4oO@pkItxJG%nSc0li2F3I:O*4(-J^p6g!3G2Uo\u003eD5j?ZJswjSup!=UVBpvUg@@vH-oP8nm(JoNgZ!xUS5j#]znRu0\u003eoAApbGtFf[IdOebIgc1bI55TsmHhXAmI[WMp9vLCkMTGe-3!?}uTu36", "ln": 75201 }, { "b": "Itx=31Q]bG07+I}nqj?\u0026GP=lj%450$nqUI-Io1*{0S@A]ItfR#/*{$\u003cl5AMDFB@{NWNazQZZ(9x}#uW\u0026IflQ4H\u00267j7JrLUe0@$(Gl)J)CJst#Y0@#2O4gBV/08ewvZ}82@008j?@@Jh+}#uY%oO@pgGt-1suTu36l0V=.l0)[*%0s\u0026+0@$(G=Q-].nb", "ln": 85011 }, { "b": "4{WcB4{v0AndNn/nqUeN.tcrc4\u003ebo+4{PoD2)gg#ndNn#nfMbD3bOBjw!d$Uw!cJnndO88w!cH6nc]v#nxnND%nS9\u00264[sShI:=n?Iae)75jKUJ5K)PFshksUmLExNmNc}N002MDEN)d?zCT@=mQMh@oO\u0026%EIcZDYIfoDImQ=x?Ib4d-d0t2IFY9uA003kguo}*Zt%R^.uTpMuJsCOb0@#2O1S]2)0j\u003cYY008lY\u003c]LJNJsxht0@#2O1/AQF0j\u003e@a008lA\u003c]LJN", "ln": 90392 }, { "b": "002NgH4\u003eSF0096107-34ZYsAnnqS320rrbtG*kUs000Jvmx/svmzGAC21TOu5j?Ub7!zY37Y:Qp0rr91-!AjH0005tH1(Xe002MHJzGSQ07.$2\u003eVzN10lf-G0rr91-!AgG0000\u0026JG9Yk002MD*upRk002PE.gk5#FjLO{2\u003e(ap4#72\u003c002PE=}e(h0.wf{[j:B#k)Q2tY@g@i07-3c=\u0026BaD4$#bl002-IKn5XP0pSNjk)NJ.I?O}E008l-0SSi\u003eI:eaIX=qZf%nSc0E[g:7nibsz4[IRrXb=NfnqV6:b$!jrnq\u0026hq0rr9\u003cX=qW", "ln": 101483 }, { "b": "ONhA#nqUeq^N/q+nq1\u0026etvgY5tTqWZuR7hyD0ZQMKvU2xc%H4+l0MYZl0}KN+T2ogs5RUx()N+}nV@i@wK}Z[c0gcE07-1Z.BPVr2MK\u00268FvVo(0003gH138507-1Fnq!3JIo[\u0026]Z!xN+4$@{x002YJkQYr:ndXsIA2qxg6BmpD.wt]E+1dx-nwTE3oP90}o!\u003c*.g4m\u003c\u003e?BJGx7!(:3oO(pKnIQ9oIc7((.n4S@I9JEX.rJdmyX!", "ln": 132799 }, { "b": "-!z280003gWUmlM004*ybQ=iwG!JJc07.@mbP]T#l)KC^0000\u0026I=C0}I?Nk)002YJJER0e0o!fZ%nN[)-!z590002sG$vr+00bSGJFEMm0o?ce%nQ8)Yz}{i0lf-800000nq\u0026E70rr9\u003cI\u003cpHD008k+\u003ekLxDW/.rr4#0vz%nQ8)Yz}{i0lf-800000nr17blimcXJrLte0SY!C0002.tNgxh\u003e{cDk07wTx(a^o007-2x7!xM=c}Gf@nqP}A(hpzT%46W1%nSc0%nNNtI\u0026xW%002Lmk]roQ\u0026bZJ\u003cG$WJ!00b=I\u0026][mC%nRy9nvXW", "ln": 147400 }, { "b": "zE)Eay!cp%nvS.LBA}tawPQD$.BPJEUMj.7o--%t.nuZRg1e.g.xqyaI)@=/07@jN8aYQp?#J/TnX@pRnSu18nqR#K0rrb:SSi20w@]LdI\u0026W@t08el^]fA[93\u003cV", "ln": 160638 }, { "b": ":4j4!av%t*6?*vmnX1*30000000(mM:W!eRnDD\u003e5.n3HJ0NBB]{^\u0026lq5j!LKnX@B\u0026ncc+50NBrMZ.69({^\u0026lq6?DfYawsJ=o!\u003c%+F+PfA002N\u003e:4clSnwS7JoFD", "ln": 161057 }, { "b": "IsTA0WFgHq07\u00264wg0fCgP-\u003eC%m2y.kIsQVYJrGs.In$s=BQ[A^.36\u0026tG$[jM.t\u003cMol5CwhiMzU:B]RHw@$RBn0rv=EDjLZ+4GDG60SPXf%nS9\u003ciMB/7l?\u003cxj{^{5i0rJl34$!J{%nRsX%nS9\u0026:3.f}0SSi2laE3%002MHJQNRZ07.$q\u003eMHqN08erM[dU\u003c5nq\u0026h%6Awb7Ig$Zu008mz%nS9)iL#wV(Kr*]nr5RA4/=P6IsP\u003ciK]tqJI\u003edS]002K", "ln": 221227 }, { "b": "0SU=B%8/XWIWY?^0SU=J6:npL0ri/e@@r3\u0026G$[jLhv6o.nqUwTI3j5V0S-ln/z+*JnqUeNIsK8([jnAh@$S=U0rv=E0s%\u003e@0rr9\u003cIsHPXeb]OHG$[jP\u0026%kR+InhXy-.qwm-1dGJ0rrb:F=L\u0026Kw[CT!w[AUaaa%Q]0000f5cTH@0rrSVmBhLR1RbhD01QIEZ@w?30ri=Z0097NZ\u0026Tw59@(ov4\u003ccr40000\u0026GzuS2HRTk@0eXNy\u0026TXCplng/!n\u0026In", "ln": 222621 }, { "b": "0001MZ\u0026S?rG}5[U0lmKz00000nr36NnqP.WfI4gS[dU\u003c5nqP.Wc}]FdbP]Jg)m-xjoO}:$f#cIu\u0026yF*T@$MHI004VD0s%[f@R#[QY{]\u0026r0rp8cI((E.008n{@R#)^g3}vf))e#jAV:LO@R#[fw[CT!e!o4S00000073U7k@[(OGQ\u00262v%3sf!4/=P6IsAsG\u003e\u003e-v20lmIt=\u003c6KJ:3)^C0000\u0026:a:0%00000002MHmzIDJl)J)GIto\u00264\u0026ZFZ/oPt536Awb7IsyJWItvhLGzkE\u0026Q(dUIm2K+Jn=M[7iL!x1l=Y=!WCR=101QJ^=\u003eMJX4\u003ej{46-XjAdyDw{000JUWv!lm01QJ^Kqd-}4\u003ej]p6-XjAdyBaf000JUWo%ZH01QJ^p.-%g4\u003ej[K6-XjAdyy\u0026A000JUWicg:01QJ^5etfB4\u003ej)^6-XjAdyFTV00", "ln": 224079 }, { "b": "002-I]!BO*6#l{K07-3c2M$bcoO}:$IrK%O]@Fb[InL4.BQ[A^/@UkOG$[jM-Sb#sl5Bk*iMhI.zu6Uo@$SqJ004VDDjLYD0SSi{0QWz%%nS9\u003ciMjV5l*dm3\u003eT*v20rJl34$WNR%nRs!%nS9\u0026:3.f}0SSi2laE3%002MHJPZDA08emu\u003eP2(*07-3Q\u003eMp!+nq\u0026h\u003e0@@r(Ig(=H008mr%nS9[iMzUZODeY\u003cnr5Rk0@@r{Iq).qiSn$GI)Y+\u003e002K", "ln": 243731 }, { "b": "FDbWvI\u0026EGl004(foO{B*1onA@ItfH]:]r8bFDbWoIn$s=BQ[A^%a7dIG$[jM:n=hum2y[liR9=nwb(Pe@$TTD004VDDjLZ90@@r(0O+c:%nS9\u0026iM1w#l!B}^?BJj%0rJl34$^)Z%nRsF%nS9\u0026:3.f}0SSi2laE3%002MHJO\u003c)s08emenR#%2kwye#oPcsp0@@r(I?Qu%002MDH0P]40o\u003e^e%nLUJ]:=UE0SSi]I)SJ/002QhmI2L1002rq@@Nu", "ln": 254957 }, { "b": "\u003c4a)tBLYLG{\u0026CbsjoJuF^[CRa[dbH0nqS[M4/=P2Jsw+S002YL1*W1=0j\u003c\u0026:008jNpYHFa3RVJ?[819Blau[2001:}nqWibktImVXD8Wg07.$y\u003e+7cu0l*J}IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026Gt2Rx0001v8+t){/BE@Z@$P%0002MD.7\u003cwfIsyJWxkERGKvU2xi9P-@l0MYYl0=\u0026:ubHn^w[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nb", "ln": 260177 }, { "b": "Y5%=Ga4R4x[5CRaFDk-L0000\u0026I3jfp0rydz(vw%o1][S654Z{y4$=zl001*%4/$3F.qVOd3^.C3r3TddY5$4zGy5Ts07-2obRQFFjo=sI?t^JQIV{to0rv+[2/^avFDk-M0001Q1!yhB073s{aARgE:rnIbHjGv91POJ5I3nM-0rtAp\u0026q-\u0026W=}65#IH+^d", "ln": 275262 }, { "b": "000000000000000000000000000000000000000000000000000000000000Z{BmB00000evtSY000006TX8A00000@\u003ch?e00000/0COX00000\u0026iST/00000(A*Y{00000]T1=4000000000000000tcFeg00000m6D*{00000zM\u003coA0000000000000", "ln": 286160 }, { "b": "0rr9100000\u0026qiI80rr915C#JU0rr917YTKo000002MK\u0026800000q2yrz0rr91.2ag.0rr91^er@{0rr91flhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#vqG:#v{B7}v{AR.Bs}PP0000000000npyX(0rr91nb@R\u002600000Iui+T4GDFev{%s+v}*4gaA8BmA+ocaCq0#VB97[Bg*@jLw\u00268I7wIW:Hg=NE8hF1W1f/p)zgby)zi5C82i5@/Pw\u0026sgefkLuiA::0ltW.C+z!03[A:@u{vrV74wN!$Zz!7FvA@Vgu00000.f#Jq0rr91pYHE}000008#]%s1POJ5q94@mA=(CBB-pPcz/oD4xKLQ)B6J^dvpB4:eQflkuP6.)AapFzx(mE1CxkuMB9q4#y?WuiA=(CBy?WuiB8\u003e+zA=(CBtX[a-A::0ltYU0$tYT{}tXOaYzeS@qAS", "ln": 289800 }, { "b": "B8\u003e+zA=(CBtX[a-A::0ltYU0$tYT{}tYUgitY:U1wNPaRy\u0026r/(y*p\u003c^Bzk]ftX)?{C}KbU0000000000UZV!a0rr91CMmZz00000vGlxdbME/Aq94@mA=(CBB-pPcz/oD4xKLQ)B6J^dvpB4:eQflkuP6.)AapFzx(mE1CxkuMB9q4#y?WuiA=(CBy?WuiB8\u003e+zA=(CBtX[a-A::0ltYU0$tYT{}tY:U1wNPaOy\u0026r/(y+x:H0000000000npQ?[0rr91xAe2j00000?ViYS82%TpZ\u0026YWd0rr91fAq7M000002MK\u0026800000kZADY0rr91qDlT{uRK9!uSf]\u0026lRvyVPDa2.0rr912MK\u0026800000", "ln": 290288 }, { "b": "2MK\u0026800000PB.cO0rr91000000000000000000000rr9100000A1A520rr9100000000007YTKo000002MK\u0026800000p.9RT0rr91Kpheu0rr915c8Xg000002MK\u0026800000PB.cO0rr91P.FLr0rr915c8Xg000002MK\u0026800000PB.cO0rr9100000000002MK\u00268000002MK\u002680000001/lZ0rr9100000000002MK\u00268000002MK\u0026800000PD0#.0rr9100000000002MK\u00268000002MK\u0026800000Z-AJb0rr9100000000002MK\u00268000002MK\u002680000003qk(0rr91oL5o^mr9DUy!5ISvru73oMaARwN[exA:%ldvraXSw[CQ{mS\u0026J-pgX0EqE%]\u003evrcD!i:spEvrc10tYKy*x(!xpD0CAhv{A.=wmZ0rv@=11wPGFrz.iX7g=Y5TiaB\u003cQhdwB2h!Dr7w?waBwO0CEe\u0026tmrtYT{}tY+0$wIe1A08U^Ze[nsgxk.3}wOkZ#BAhUiB8\u003e+}x(mD)CRiGDvru74e[]kQf/.6Jv}EYghEXKMh8Ns8tW?p%BAg@7eIF!me\u0026l*OA:@u#vqGg=z!7FvA@Vgu00000G[xIU0rr91q#=)#00000h#\u0026{Uso5s3o\u003e!GVmS\u0026J-lsB}Dpiyw?rC(\u003e^w[stvy?#%ftRoI{A+xq}A+e($B98CFtYT{}tXO7^wQ2?qA::63B1RfBeIPmxiB=UXv(v^NvL{24w)w!SeP=2AwI2O*h7*Z\u003cB8\u003e+}w]?i#ByX:4w]/OBA@Vgu000005}*yr0rr91r@-j200000a]?PybME/A5}*yr0rr91r@-j200000d/YLH4GDFe5}*yr0rr91r@-j200000ec2UIcia2C5}*yr0rr91r@-j200000k(Z(+f-RgN5}*yr0rr91r@-j", "ln": 290800 }, { "b": "wmZ0rv@=11wPGFrz.iX7g=Y5TiaB\u003cQhdwB2h!Dr7w?waBwO0CEe\u0026tmrtYT{}tY1g)x\u003cU*/xjUB*A4VfL000000002eG-(]b0001400000000100000\u003c0000%wNPatBZYr3C4CYnx(v)bz!9AQz!TohzBFO^z/OYotRoI{A+xq}A+e($B98CFtYT{}tXO7^wQ2?qA::63B1RfBeIPmxiB=UXv(v^NvL{24w)w!SeP=2AwI2O*h7*Z\u003cB8\u003e+}A:-\u0026#wNxH*vqWYrA@Z5}C4C35z^Nx[CYU6DzxIX%y?$kkvp%dEH6i2c00012000000000E0000z0001pwQ5r7yH}=lx(+y(z/fbex(k56vpJ$ZuVf*#C{3%xwmU-v0000{H6i2c00", "ln": 291793 }, { "b": "7xsQv1{+Fo2oB2j0@$m.g6^)\u003c0tU?t4/=?n5DSgr0S-En0IxU$0x*L=1PwF]0rJob0TeP82w\u003cXCv1v.DflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tXm?{tY1y\u0026e](1k000000fs@0Fb]SI080p(000000dCpQ044WC0fs@0Fb]SI080p(000000ey{Z02+?q05c8Xf!+vpgCyTth83{xh.WiBiwAixf!\u003eBrgCHZvh8d0zh.^oDiwJozf!$HtgCQ^xh8m6Bh.)uFiwSuBf/7NvgCZ\u003czh8vb", "ln": 307023 }, { "b": "pxgv{00000L)di*6-Xjl]Z\u0026op0rr91pxgv{00000A%hKzc\u0026:kE]Z\u0026op0rr91pxgv{00000A%hKz5=.[iflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tZ7p4i4/k)0000000000nw\u003eTY0rr91nb@R\u002600000blm=Aa]?PycsZ$kD0+f7z/5\u003c5y?Wx\u003ciV@GZB-H#6aAIvkv}u^0wO#d5xDO.sd\u003e8PKz!i#jzF%RtzddJ@xDQ?%B98blvruj4zxK1px\u003e7Y%y?mG%Bz8^BZYt\u003e:5oqh%xjSh%", "ln": 307720 }, { "b": "B0a[kaIW%\u0026A:-\u0026#wGV5ovrcDjx(mD)CP:^CaA8yAaA7\u003cmA:-\u0026#wGUP6AV/Btx\u003e7Y%z!pbdwO#d5xDU7\u003cflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tYTZ}v}w[ZwO\u003e{\u003cAXqxN0000000000PV44:0rr91pYHE}00000PA1@(2(\u003c@9PV44:0rr91pYHE}00000GA7#L9SMfuv{%g\u0026wN(]\u003epJgz\u0026z/dP%B-8zzvq)Rzu)6x9ayMy2ph+2Yu)6S3y\u0026%s80Y?Et0000000ri3G9ip%KP/a)t[-\u003eh5/hVj", "ln": 308064 }, { "b": "?4R%N3i\u0026D}mHfzbBpfb(s{d$mFp!WU3kJ}w1B#vlTe3du1tMOMF.zBQ3\u003cu/^VMH.4oAY)91C1h*8V{PWflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tY\u003c{#v@C)?tYsZ$zGGq@y?kktA@Vgu00000L/%nX0rr91rr910000003ig5ad/YLHL/%nX0rr91rr910000008uo:qhuiZSvruQ5ze:OtBz\u0026pjx)ai3wGUDcaBmQtzVx+q0000000000000002MK\u00268000002MK\u0026800000[BlNg0rr9100000000002MK\u00268000002MK\u0026800000[BlNg0rr91flhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tYsa?x\u003e7{)zF7OxA@VguFxXjE0rr91o-Ld[00000\u0026q-\u0026T1POJ5azC.7wQ2toB-X:Aw/$M3B-7-hiV@JTwGU/2zxJUmaIXQjvS==nBzbkdx(mD)CPZZwaIW$ujS#%1vrlH3A==2lzxJt6wOc3bZ.Xblx\u003eIa3u)65\u0026x(4u\u003e3lQEcwOc3Bao", "ln": 309844 }, { "b": "wmY.3tXEL!xKV12CwX#^e?]mpf\u003cF^uv{B4.Cu/06wg?[z0000063*Yh0rr91dGxCG00000b(^]Bc\u0026:kEflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#Aa9S#v{:v@Cwg@9tYT{}tYTE\u0026e](1ksKdb20rr91pxgv{00000FDk-Ja]?PyfFvD?B966CwPhY}A=(CBv\u003ezk5zddr{y?kgLe?[$lhE7rzv{Bghe](1k00000.oSmm0rr91dGxCG000009SVlvf-RgN.oSmm0rr91dGxCG00000gYWNRm/SI?.oSmm0rr9", "ln": 310552 }, { "b": "82%Tp4fcwd/XlKV0rr91nDn.\u003c00000soX:9aohxww)]y\u0026wN({9zY\u003cmAx()]eBzbkdvS=o{wPzu)ay[]5ve{oc00000[zKI20rr91aPIGx000007xsBn00000flhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wt", "ln": 315344 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000%nSc0000007YTKo0000000000UOdg\u003c0rr910000000000A=(CBuVoB\u003ex\u003e4by000000rr91000000000000000000000000000000000000000000000000000000000", "ln": 370128 }, { "b": "000000000000000000000000000000000000000000000000000000000000kO9[}g7:G^CP3.=kOi$@p7^KbGC\u003e0]p.A:dFd.?ZJ2z\u003c1Fd.?Z?4xX/J2z\u003c1\u00261u1\u0026c\u003e=NXJ2z\u003c1fCsA^G+BB^J2z\u003c1Kp}P]wFCgBLO%Y9A1@uMRXGgiV(f8FUOvcr@Uk", "ln": 370640 }, { "b": "0000000000000000000000000000000000000000000000000000000000000b@5vM\u0026E9^PRwxVU+FU4Z[PhI0hBk9AhOI\u0026KF/4PU=2Nu\u003e+!Y+aGebnsG2SaxSb)GC=ld\u003eN5DWRShM@0XtWiw:F!3}{]1+6d5/+pv5XyIKG3s2\u0026hE\u003c0H]OK@2=/8Gii9", "ln": 381904 }, { "b": "4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 383680 }, { "b": "6?@yLA=l2qw]]d.z/P/nA::67z/do+fFAXkrrJyqdnsI^A=l2qw]]d[z/o.ulUgpWx\u003ez6?vru66l3mo.z/PMlC{1\u003c@f!\u003ev67y-bRfGp:Cgb7Nxf/StM4kP)@gCQZvgbgNsg*hOmf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK", "ln": 385280 }, { "b": "viwu+wPzj3x(v)gf^!U31{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wkhzu{sfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^yfOfJLfOfDlPAtk@0S\u003c2\u003e0006DFx6Q*=8L$V009610WPJf1{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n1p2OBqE%xQz/f8u9XXMr162Eh6bskQv@=Hez!s8llVm0:z/Podx(v(zcnlXH162Ea6cf!Yv@=Hez!s8lrb3hXeMl+1zeZQ]lQq?IfFLmn9V2nvhzu)viwAJJfFCj+7y-bUfF$Nzf/.6AfFM-+FY/+QfBm{=rrJHt0--eN6eg15162Ef6ad/HB7/o9xln6ff+u2G1{m\u003cd2nmtuwN]T@zE+EyfDpo0rrJTx6?@yLA=l2qw]]d.z/P/nA::67z/doQfE3=7rrJWy98gcSA=l2qw]]dYzdN:4v{{GQAaK5#BzkVhB1]3@b)BDK1pC\u003e:zC$j.wO+)1r8VZrmn(@xi5SDDeIG4JfFbWMg=EcnfE3=7rrJyq98gcSA=l2qw]]d{x(dAkq/(C+A3e7\u003cA=#ebwIwYqa$%Dg2}yW2Hw8bT0rAu71a*N+05f0a3iC!X0rx1!5!AyHZ#Im@2(li*yoeQTDA6My\u003cCKmDwFANpL=yud8Y1#\u003cKcms!lCTdnM6auu/j!K*QgyYf(2[hC6uekYnscVm4zApUoc+=b84G4yhWWQ#J1\u003cC5]+.wnU^c0fsbjc()Zv*FCZdV!Zz9pxKW!1KdOM)t3E!mdle5)\u003ca\u003c3la+Lf58fOb6QVQ40iKT%LwtKnX3@=-E3AoWdt=rj}S[-*=?0:WI@6*H0SPKf16L:7=uN+DeC(*!\u003erij5mv7v-OIc\u003e#v-ccOwv0\u003cDw4OC2*V}@/:U5m#qNixR*stjn^H6kb5@TzjYR3S8Z\u003ecV4YG\u0026g\u0026}oe0/oPl{Lq6eAv9Q2Q15g}gbcI[6vas[\u003c953\u0026H1Un:bl8UBKJBcun9-V1F@d+BANGSszElx.r\u0026*RJe4bnVYMgawyF(oMJkY]bhPr%9uOd}]EcPjJvb5amLpd0Z.1SXrM\u003c\u003e$.+kp", "ln": 387801 } ], "depth": 1, "facts": { "exp": [ [ "bftree_are_all_threads_in_next_version" ], [ "bftree_cpr_snapshot" ], [ "bftree_create" ], [ "bftree_delete" ], [ "bftree_drop" ], [ "bftree_insert" ], [ "bftree_new_from_cpr_snapshot" ], [ "bftree_noop" ], [ "bftree_read" ], [ "bftree_scan_drop" ], [ "bftree_scan_next" ], [ "bftree_scan_with_count" ], [ "bftree_scan_with_end_key" ] ], "imp": [ [ "bcryptprimitives", "ProcessPrng" ], [ "api-ms-win-core-synch-l1-2-0", "WakeByAddressAll" ], [ "api-ms-win-core-synch-l1-2-0", "WakeByAddressSingle" ], [ "api-ms-win-core-synch-l1-2-0", "WaitOnAddress" ], [ "kernel32", "CreateMutexA" ], [ "kernel32", "ReleaseMutex" ], [ "kernel32", "RtlVirtualUnwind" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "GetStdHandle" ], [ "kernel32", "GetConsoleMode" ], [ "kernel32", "GetConsoleOutputCP" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "WriteConsoleW" ], [ "kernel32", "lstrlenW" ], [ "kernel32", "GetEnvironmentVariableW" ], [ "kernel32", "CreateDirectoryW" ], [ "kernel32", "GetFullPathNameW" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "FindClose" ], [ "kernel32", "CreateFileW" ], [ "kernel32", "SetFileTime" ], [ "kernel32", "GetFileInformationByHandle" ], [ "kernel32", "GetFileInformationByHandleEx" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "FormatMessageW" ], [ "kernel32", "GetModuleHandleA" ], [ "kernel32", "GetCurrentThread" ], [ "kernel32", "SetThreadStackGuarantee" ], [ "kernel32", "DisableThreadLibraryCalls" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "GetCurrentProcess" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "LoadLibraryA" ], [ "kernel32", "WaitForSingleObjectEx" ], [ "kernel32", "RtlLookupFunctionEntry" ], [ "kernel32", "RtlCaptureContext" ], [ "kernel32", "GetCurrentDirectoryW" ], [ "kernel32", "SetLastError" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "SetFileInformationByHandle" ], [ "kernel32", "FlushFileBuffers" ], [ "kernel32", "QueryPerformanceFrequency" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "SwitchToThread" ], [ "kernel32", "GetLastError" ], [ "kernel32", "CreateThread" ], [ "kernel32", "WaitForSingleObject" ], [ "kernel32", "SetWaitableTimer" ], [ "kernel32", "Sleep" ], [ "kernel32", "CreateWaitableTimerExW" ], [ "kernel32", "HeapReAlloc" ], [ "kernel32", "CloseHandle" ], [ "kernel32", "HeapFree" ], [ "kernel32", "GetProcessHeap" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "HeapAlloc" ], [ "ntdll", "RtlNtStatusToDosError" ], [ "ntdll", "NtWriteFile" ], [ "ntdll", "NtReadFile" ], [ "vcruntime140", "CxxFrameHandler3" ], [ "vcruntime140", "std_type_info_destroy_list" ], [ "vcruntime140", "C_specific_handler" ], [ "vcruntime140", "CxxThrowException" ], [ "vcruntime140", "memmove" ], [ "vcruntime140", "memcpy" ], [ "vcruntime140", "memset" ], [ "vcruntime140", "memcmp" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm_e" ], [ "api-ms-win-crt-runtime-l1-1-0", "seh_filter_dll" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_narrow_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "execute_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "cexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "configure_narrow_argv" ], [ "api-ms-win-crt-heap-l1-1-0", "free" ] ], "sec": [ [ ".text", 1024, 285184, 6.3, "r-x" ], [ ".rdata", 286208, 83968, 5.46, "r--" ], [ ".data", 370176, 512, 1.61, "rw-" ], [ ".pdata", 370688, 11264, 5.62, "r--" ], [ ".reloc", 381952, 1536, 5.01, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 396810, "timestamp": 1788903384, "image_size": 397312, "headers_size": 1024, "checksum_valid": 1, "file_alignment": 512, "cert_table_size": 10040, "export_timestamp": 4294967295, "computed_checksum": 396810, "headers_size_ratio": 0, "tls_callback_count": 1, "prose_section_count": 0, "reloc_overhang_bytes": 224, "reloc_overhang_ratio": 0.15, "bss_like_section_count": 0, "section_overflow_count": 0, "signature_expired_days": -210.57, "misaligned_section_count": 0, "base_relocation_block_count": 12, "base_relocation_entry_count": 602, "declared_data_directory_count": 9, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 393528, "entropy": 6.37 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.3, "data_entropy": 1.61, "overlay_size": 10040, "string_count": 197, "overlay_ratio": 0.03, "overlay_entropy": 7.52, "entropy_variance": 2.72, "avg_string_length": 35.55, "max_string_length": 120, "peak_region_bytes": 9528, "code_to_data_ratio": 1, "peak_region_entropy": 7.51, "string_length_stddev": 35.02, "largest_section_ratio": 0.72, "sentence_string_count": 15, "sentence_string_ratio": 0.08, "high_entropy_string_count": 0 }, "exports": { "count": 13 }, "imports": { "count": 77 }, "sections": { "count": 5, "code_size": 285184, "entropy_max": 6.3, "entropy_mean": 4.8, "name_entropy": 3.11, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "dependencies": { "count": 7 } } }, "id": 1, "ident": { "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:28 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "build_path": { "value": "bftree_garnet.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "K(Lu)O₃(AsEr₂Pr)H₃(Db₂Os₄Po₃)Md₂(Bi₆Si₄)", "path": "win-arm64-based-readytorun.zip!!net10.0/bftree_garnet.dll", "pid": 0, "risk": 23, "sha": "b906e6430b4a2f1ab19df937df016632ac221faeb861ce1026714461d0008456", "size": 393528, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 285184 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/binary/symbols/export-name-pattern::many-lowercase-snakecase-exports", "conf": 0.88, "crit": 3, "desc": "Many lowercase snake-case export names", "spans": [ [ 45808, 13 ], [ 55328, 13 ], [ 55680, 11 ], [ 55808, 13 ], [ 57744, 11 ], [ 57760, 11 ], [ 62848, 16 ], [ 62976, 16 ] ] }, { "id": "metadata/binary/symbols/fake-windows::sideload-export-cluster-size-10-25", "conf": 0.9, "crit": 3, "desc": "DLL exports ten to twenty-five APIs" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/compiler/systems::rust-src-path", "conf": 0.85, "crit": 2, "desc": "Rust source file path (.rs)", "spans": [ [ 318946, 0 ] ] }, { "id": "metadata/lang/compiler/systems::rustc-path", "conf": 0.95, "crit": 2, "desc": "Rust compiler path in binary", "spans": [ [ 289864, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 315392, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "micro-behaviors/data/control-flow/dispatch::dense-x64-tls-array-access", "conf": 0.97, "crit": 3, "desc": "Dense x64 TLS-array pointer access", "spans": [ [ 13365, 2 ], [ 132863, 2 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 383744, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 387865, 0 ] ] }, { "id": "micro-behaviors/data/string/assembly::stack-immediate-byte-string-x64", "conf": 0.86, "crit": 3, "desc": "Native stack immediate byte-string fragment", "spans": [ [ 48841, 59 ], [ 48953, 59 ], [ 49580, 59 ], [ 101547, 59 ], [ 147464, 59 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 291136, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "spans": [ [ 291152, 0 ] ] }, { "id": "micro-behaviors/mem/c-runtime/functions::vectorized-zero-fill", "conf": 0.6, "crit": 3, "desc": "Vectorized zero-fill instruction sequence", "spans": [ [ 7270, 14 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 291080, 0 ] ] }, { "id": "micro-behaviors/os/api-resolution/manual::load-library-ex-system32", "conf": 0.85, "crit": 3, "desc": "LoadLibraryExW w/ SYSTEM32 search", "spans": [ [ 260241, 17 ] ] }, { "id": "micro-behaviors/os/env/read::get-environment-variable", "conf": 0.85, "crit": 3, "desc": "Read a process env var (GetEnvironmentVariable)", "spans": [ [ 291112, 23 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 291352, 0 ] ] }, { "id": "micro-behaviors/os/exception/handler::capture-context", "atk": "T1005", "conf": 0.9, "crit": 2, "desc": "Capture CPU context/registers", "spans": [ [ 291280, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ansi", "conf": 0.7, "crit": 3, "desc": "Get module handle ANSI", "spans": [ [ 291200, 16 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 291184, 16 ] ] }, { "id": "micro-behaviors/process/control/info::process-info-class-30-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 30", "spans": [ [ 22128, 14 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 291304, 0 ] ] }, { "id": "micro-behaviors/process/sync/mutex::create-mutex", "mbc": "C0042", "conf": 0.9, "crit": 3, "desc": "CreateMutex API call", "spans": [ [ 291024, 12 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 291232, 0 ] ] }, { "id": "well-known/dual-use/tunnel/swifttunnel_vpn::swifttunnel-rustc-commit", "conf": 0.95, "crit": 3, "desc": "SwiftTunnel rustc commit path", "spans": [ [ 289864, 72 ], [ 289985, 80 ], [ 307087, 75 ], [ 307784, 72 ], [ 308128, 80 ], [ 309908, 85 ], [ 310144, 77 ], [ 310616, 79 ] ] }, { "id": "metadata/binary/layout/tls::pe-tls-callback-table", "conf": 0.9, "crit": 3, "desc": "PE TLS callback table present" }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99" }, { "id": "micro-behaviors/os/random/crypto::process-prng", "mbc": "C0068", "conf": 0.9, "crit": 1, "desc": "Windows cryptographic PRNG (ProcessPrng)", "spans": [ [ 291008, 0 ] ] }, { "id": "micro-behaviors/os/syscall/invoke::all-ones-handle-constant", "conf": 0.8, "crit": 3, "desc": "All-ones x64 handle constant", "spans": [ [ 90456, 20 ] ] }, { "id": "micro-behaviors/process/create/thread::create-thread", "atk": "T1129", "conf": 0.95, "crit": 3, "desc": "Create thread in current process", "spans": [ [ 291360, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/instruction/junk::indirect-call-compare-branches", "conf": 0.85, "crit": 3, "desc": "Indirect call followed by a compare branch", "spans": [ [ 63757, 11 ], [ 221291, 11 ], [ 222685, 11 ], [ 224143, 11 ], [ 224289, 11 ], [ 243795, 11 ], [ 255021, 11 ] ] }, { "id": "objectives/evasion/indicator-removal/timestamps::export-timestamp-maxval", "atk": "T1070.006", "conf": 0.9, "crit": 3, "desc": "Export dir timestamp set to 0xFFFFFFFF" }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 8 ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 8, 16, 18, 19 ], "spans": [ [ 387865, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 15, 16 ] }, { "id": "micro-behaviors/process/sync/mutex::mutex-api", "mbc": "C0042", "conf": 0.85, "crit": 2, "desc": "Mutex creation/access API", "uses": [ 33 ], "spans": [ [ 291024, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 44 ], "spans": [ [ 387865, 0 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 47 ], "spans": [ [ 387865, 0 ] ] }, { "id": "objectives/evasion/process/injection/cluster::memory-injection-recognized-marker", "conf": 0.9, "crit": 3, "desc": "Recognized memory-injection API context", "uses": [ 47 ], "spans": [ [ 383744, 31 ], [ 387865, 28 ], [ 388043, 29 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 47 ], "spans": [ [ 383744, 31 ], [ 387865, 28 ], [ 388043, 29 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 48 ], "spans": [ [ 387865, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 51 ], "spans": [ [ 383744, 31 ], [ 387865, 28 ], [ 388043, 29 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}RJ0Fk0000000000?#B@z3JR{Y0a2Wa015Ya00000Qi=[v03zmw0dU", "ln": 0 }, { "b": "3\u0026*nc0h6t)00ic20b8xk000000000000000kMy^J00000000000000000000FQmy$00000nb@R\u00260SSx76P\u0026v}XsAQ12(\u003c@9000000000000000+Q@[@Fb/MH0000000000000000000000000000000000000000iSZY@000uc1arJp017hh0^^om019^n000uQ3kUf07aGT)dOZ6EDQv=k3xbt)02(5Vmf0q{dPMT526ill01a2NDQv=k3xbt)02)yaB4lig3vi3}dHD$w8GOyG01a2\u003cB4lig3vl2bnb@R%0^^om015?83JHeCz+f{e3mZ6Anb@R%0^^om015?83JHeCz+f{e3m#q]dI:GLB4lig3viRim/SI@DkZ\u0026{000vLg6h!\u0026000vEl\u0026Wh]dHD$wliw+yB4ccf3vh=2lJv8[dHD$w3kUfgB4lig3viRim/SI@Dp/OR000ucDQv=k3iLir000uQiS/G^DQv=k3zX4f02)yaB4lig3vk2vecZe+000vL0^^om017g]B4lig3vl2bnb@R%0^^om015*DnDn.$eDMUp7aHkzm/SI@DkZ\u0026{000vL9S{Ee000iMa{d%?b(^]HdJOTtn=O?#dLp=8a5DY2o8[@0dGxCG6efK?fAq7M0rr9i0S@Mvya8:Q015\u003cEo-Le23iyzA0SA/y000@y5^54EfAq7N2Q\u0026BF01ab+000cKquu}Gpxgw40T0=W000dI4/=OjdJOUjcia2IdSLPq4/=OjeDEs60^+BT00B0OpYHF5z=3Gm3mVlf8GO^R01a2L6efT\u003eZ5Ock0SSij4/[7S000uxgAlDb", "ln": 464 }, { "b": "00Augd?-Xtvf3uj3i*MU8ux*vEhSa^1o[{O836ZuEhz$+1o{s%0W}WZ00T[Mlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn(}EDWbyPQ)sww?@3[88Qbu5Y8x(mN800000woE}MA0VHAbumUx!pdC#5c8Xgbs+:9l\u0026Wh!\u003cBmdf!eXI?", "ln": 29412 }, { "b": "Byd^is4(gXmf3$iByd{mq=3?5qCQ4TuSf]\u0026r7PC:p^F5K07QErzE)]Zq+{c*q*ACawO\u003c4\u003epxj1dz/e6lq#/Kiz/eGxq#*MxBydQml}6\u003cI0b2\u003e+uS6r\u003ep*V%^s6[-\u0026n\u003c#9DuQmT#qCQ7/08[e:By/qwlVl^SwN/*@z/fRGm}DNHA+P2onLA\u0026tBuAI^e{7=vB6z]Iq*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!qE%oEpI%#]oLFM\u0026jxaG%Bzbxftu}kcD2[7sz7Xg]y\u00260V)BzkVhB1Q3Tx(!wGBzbxftu}kLvqH6$uTA!2zV", "ln": 51233 }, { "b": "wmZ0HyHpBnvpK7!zF8BMwO+(Sl2HikxjVf(mq=SoB7GD2mq=Sorb#X\u0026mq=SoqE%GPB97#llVl*UvqYPQl2Z^OzE--tB8L}%vqH6$okeoO07QQxr://!wLl-Pwb]5bBxrc\u0026By/JjvpJ\u003cGq/3eTwDkqtB97\u0026dv}tTawoIy0v}tTpvrcB2q!Y=N0chT(B.(d(B8L}\u003ez!9zVyiarhph:VO090#:q!o=Rv@$E:wmU:Yz/o.)z!9zVxjVf(o\u003es", "ln": 52058 }, { "b": "z!a0bwDlvOByd^KzdJYqwPQ:?z/xodBA{R\u0026zdJY+vqPMQq*ACawO\u003c4$B-8qnzdJY+wP{*ZzE\u0026/yz/fa^lVl*UvqYQPD2Nr{r://!wMi}]wDkRtxk8BewPy:}AaG2twPQ)%AaG2\u003eD2Nr{lVl*Xvrb]Vrc8F\u003ez/PMlwIdFhA+bk-wPRoJzGYDex\u003c\u003e[3lV)i!B-I3[o(BM+y?k}wB7CtsB-RUyzbjRQwN/*Gvrk#Wmr9DUy\u0026-P}AaK5Svrl0UAa9R", "ln": 52377 }, { "b": "AbYxawk3YVwPzi}090#:p*[x=wKguSvr\u003eKXBy/G3yYD+qyYD$lA=bDgn(FIXe[w^m09shPBy!i\u0026y?%8JxMw3nnOg.uy?%8ID2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtDx(!wUr6z{EwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!qE%oEpI%#]oLFM\u0026jxaG%xjVf(nPXJX08[e:By/qwlVl^SwN/*@z/fRGnLA\u0026tBs}iqBydQYwO?ACD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtDx(!wUr6z{QwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB4oLFM\u0026e]$PCuRbuJz2^{SBy/p?q*ACawO?Aqvrcl%Bs}SCA=#2me\u003c\u003c=5Bz(0@mq^l+07gBhv@1UN08)xozua-/vqV6pB3:!-y?m3)07R6vvru73ra]YT08c%BB5V*Yzu9TIzdMT+vqV6TwPRoXA+PSqwO$B=vqV6hB5N3^zu9grBw)c!zu", "ln": 54368 }, { "b": "uUaF3A+frkx(v\u003e?q*ACawO\u003c4\u0026y\u0026r=\u003ey?Xi7BzkVh08)DsB-IhrC%L}Zx(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9l}z!%l3v@#B6zu9TRC$hB/mr\u0026J/BwD\u003c$x(v\u003e?ph+kCze:r5zdNQbwN[kOv}xR3x(v\u003e?ph+kMB-qqrA=+(6mr\u0026rNAcb/jzu8$yxlw65zGFV%BwDHDvqYZ?mf", "ln": 54905 }, { "b": "A:-E1wPyj:v}xR3x(v\u003e?l#NiSy?lE^z//MilVl^Vzu9gnA=bDge[n*pzeTp(q*ACawO\u003c50wQ5qHn][]*08)#Wx(mMJz/6D4A+PPkzuaS:BAz8mzu9NCBAIRw07gWwAa9=#rbR+rA+PSbrbR+nD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtuz!%l3v@#B6zAH(Ze\u003c\u003cL@", "ln": 55181 }, { "b": "zF0!!qE%]*lVl*UvqYQ%nP5cU0ch}2nP5cU0b2\u003e+uSh5Tz#:@\u003cByd%*wPdS*z/YSmx)a5^By/y\u003ep\u0026ypMq*ACawO\u003c4[x(m[\u003cpJuClD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtuz!%l3v@#B6zAH(Ze\u003c\u003cC^vr8uDD2[7sz7Xg]y\u00260V)BzkVhB1Q3Tx(!wGlU{sxASx6Sq/)4]zF8mMwj7fAvr8uZzE^s6wPydOz/YFSxKL]Yx(mD)CX7[\u003eAaJ[", "ln": 55428 }, { "b": "lUG[G0bVp:vR6MWltpsCA^pL]vpS}\u00260chTVwmY=YnK^SszddJ.A=lbnwmY=Yq/)4]zF8pUx(4r\u003eASye(BydEOv@C)?ASwZuC41rVA+PGmmq=QNwmY=YA=k(rm}D^eB.kk%ASwW8z!AY]ASx]]xj\u003e^@07pygvrDydnP5SYA=t@kvru6\u003eq/)4]zF8HGzE^M{ASx9Uwb", "ln": 55643 }, { "b": "z!%l3v@#B6zGvB2wO#71x\u003e5+!mq^l+wPzi*y?k.dj$YupBvy7\u0026zdN-@Bz(g1q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!mq^l+wPzi*y?k.cD2[7sz7X!0CYUMgB8L}Gph:VOB1Q7az/er*wmW}Sm}D^hzGP/cA::6dASx3-B97#ge\u003c\u003cL[y?m9#x(v)ge\u003eFGHB.$YgvpB4:e\u003eoF{mq^l+wPzj3z/L?OvrcB2pJf(=vruBd08W(IA^pD1wPzj3z/L?@AaK5#Bz(g1e[o0wASv.4v@#Tf06$7n08[e:By/qwl${7xzF%Prx\u003e8h:qE%]*lVl*UvqYQzz!0?*q*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026twNY^{xk8l@o(BMNA@Yc:B97#ge(VzbBs{gbz/dg5z!9B208)DBwN/*Sz!9B208vVNvR6NUBA}XlA@X%zzdN+*uV6p?wPE\u0026tz/]J9wL)O*By/H[q!o#-vqGU7wMiOFBy)H0D30Rs08l)DqE%@Ux(mG)qG3F}m}D^eB.kk%", "ln": 56211 }, { "b": "0cqZ[uQYiUA+frkx(v)g08[e:By/qwraQq@e(Dm[B.\u003eGbmr\u0026=(wPI{bz/fQ@q*ACawO\u003c4#wN/\u003e6x([RMp?sV:x(!ufz/fQ@o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003e*g@xk8l@e\u003cS@/BAg/1BzkVhA@Yc:B97#ge\u003c\u003cL[y?m9#x(v)g07g)IBz(1(vRPE:BvHy\u003cv@#B6zGt^", "ln": 57137 }, { "b": "B97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwPzG{e\u003eFGHB.$YgvruBdjxaG%lV)A\u0026wO#O\u0026q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!mq^l+wPzj3z/N%sD2[7sz7X!0CYUMgB8L}Gph:VOB1Q7az/er*wmW}SlV)A\u0026wO#O\u0026q*ACawO\u003c4!z!%l3v@#B6zGvB4mq^l+wPzj3z/ND$B-IIlzGC\u003eSD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtwzGP/cA::6dAY^q+e[X:quQF%RA+fcg08[e:By/qwlVl^SwN/*@z/fRGm}DNHA+P2onKWJtzdN-@Bz(gZq*ACawO\u003c50wQ5qHn][]*e(3s}wPGE@B8L}\u003ez!9Aye[X:quQF%RA+fcg08[e:By/qwlVl^SwN/*@z/fRGnKWJtzdN-@Bz(gLxjVf(lV)A\u0026wO#O\u0026ju+JcuT[k0A+fcg06AC3uTEq=A=L-eBo2oXC#d{\u0026B7E^Yv{%s/wj7oCwPhN4zGC\u003eS", "ln": 58044 }, { "b": "wDl@Pz#:CHv/QPJwDllvaok)KxAhDvASxIFv/QPJwDl-Jaol0NzVBONyYFwNCk#sSzuaqHaol9QzuahEwDl@PwDl-JiSHo507x(/zuakFCMqW.wDliuBo2\u003eLwb).LwDlPFwb).LCk#pRx-I@HwDi?Mz#:qDASydXx-J2Jx8\u003c4Oz#:qDBo2$Oe=U(kpYK]7Bo2$Oaok%MzuahEwDllvaolP=x-JkPxAfdPzVB.RwDlPFaol9QzuahEwDl@PwDl-Je=U(4k(+{9ASxIFC(O@!x-J2Jwb{fvCMn\u0026^wDl@Pz#:CHv/QPJwDllve=U(4nDrSdB]U}", "ln": 60486 }, { "b": "BPt$MASyv+aolrWz#:CHASxIFBo3jVASvY(08De^zuahEwDl@Paol-*fAuI3aolrWBPuH-A@Y[Owb{fvaolG-xAhPzaok\u003cJzVB[WzuahEA@Wr.zVBwHaok1lk(+{9ASxIFC(PC%05)EHzuahEwDl@Paol-*fAuI3aoloVzVB\u003eVaolM+ve$9zx-IV", "ln": 61542 }, { "b": "zGvBewN/\u003e6x([R%wPzT4B8#5lzB5w^A+P09By^0Cq*ACawO\u003c4$B-8qnzdLmvr+lq)x(v(Lf!+jle?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARC.gIeHRh!B^0whM5HgHR10r00RfyIv-*wPzG%x\u003e7N[x(v\u003e\u00261o]G?P-+MiFtAFP6+V500r\u0026Pg5}Ej?", "ln": 65982 }, { "b": "A=bDgazC)tvixP4zeTJcay!?\u0026xK@=pBz(hhazbUjz6hL!v@=Hez!s8lqE%]Xvrb\u003c\u003eefG4FvrrSgw[CQ{B0bKCA=k\u0026daAg[jw]zZbvqYN^asItBA=l8kxMe9oayPd#az+FdwO#16dj+]narR^HarU-nvqGvYx(4H9C}p7VBz(hdxjSRpA+e:0C4CYtefFCsB-RUoAV/Bpvrb))zF7HyyH}=lze0T6vruj4zy=]szE:(gwPd", "ln": 67528 }, { "b": "NfVsx%kas\u003c]{)Iv!%Phh*)J:Ui-A?oP$)]v1S*}$2\u003e78C\u003epNE!Ca\u0026qz7yAModoLt\u0026F%ZA\u0026{\u0026SFSR8[\u003e2)LF+Epq-H/g*Grv.)O[?@m\u003eMT54Sb\u003ed[P^Bq3bw!c4K/G3(\u003etFX?7SE-SD6FefDvX0{mH\u0026*9qow4quA0-Fzq]mG*hfl#UvW1B[vC\u0026f^:z8\u003cj/07r.qNedqz^5Ni9T[@1OAoP6U6WPCoZ9v((@V0[o-nX^I+0=z#\u003cp@C}#ekuo2i0?c%LFCv32@\u003ck4Z+m$PXD@)[NKwiqbND\u003c:nNK(F1B:4cZ]X\u003c*V}lNlo]o7BR+2-\u003cSST*1bYCwg0!m4rat)BaGvqb=j6.[+84#d}vfMP+TE}L\u003c3i\u003ecBFIa\u0026/@h0^Dso=zj?@4fCW9K$5MRno)xuBQXRvnF@+d{2g21b.cUP=ZA4+SQ[+9G)oy-bvWMCGRr8hdTzk$}(9imtX\u0026*xGo[V\u003c\u003e*Pvgecx/UU/MWG5s@aJ*}\u003eUnxv\u003cc/X?AU@RO{59:2XUP9(+LJ8UbA#XN*JSQ\u0026RAE^dh4Zqm-jhyOJ4SEu49PnEEe68\u0026mx!DoNZ(ebt(%*4%%c6rScPp(#s%meIkGKN8Ys:h\u003e%msSU@igbxp2k\u003clv*N^lt0=/DmM^Hf%k{(^kwxQi0EYIFeRs]^eRsioDdGjja]OWbhn5\u0026K^B*=ZUG3jcHig[99xr.foNwW[N%%.u)#$+ku{\u003c=T9%VGlR.N2ga(h!J2Tw62oH0hYh#L.LZj87aQyy@epyv.::V\u003eW-Z$f130mod5o8#=+42poWf-XN8E/=qsAT8OTzh7]pFeO4XFhR0RZxq.m}QJ2^{-LT5", "ln": 70608 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026sBZzL1o[\u0026a00000000001o{W.00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310rrf3000o80rrf3000o8kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "ln": 90064 }, { "b": "002m/00031fAr^bfAr^bfAr{fvGn7Z0052Xi@]uZlJz38z2!zMwDlPFBo3vZ000Dd3ihgGaoiI:aoiI:aoj[ive$rFzuakFBo0A-x-JhOaok*IaolAZwDlMEzVB\u003eVwDi?Mv/P{qv/QfxwDjpZA@ZpZ", "ln": 90394 }, { "b": "x-JhOBo31PzuaqHaokptwDllvx-JhOaok)KyYFeHwDlPFBo3vZe=VsX3ihgGaoiI:aohxw001?Q3ig8blJz38z2!IPve$fBC(QOtve$cAwDhYg002Z[x-ISyASy1TA@ZaUw=M]M002g.3JHhcmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002H?ve$rFzuakFBo1]kqVGO[p5\u003em]001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001+Oe=WQae=W\u003che=WN9002g.4/=RgnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002H?ve$rFzuakFBo1]kqVGO[p5()Dwb{ACyYBCn004JHe=U[LoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO005$#aokaox-ISyASy1TA@ZaUw=M]Maoj+ezVB!Tz#:!RASxIFBo31PzVBUPe=W0]k(+Z3yYCNTASx!Nx8(PBBo3vZaolAZwDl=KwDl-JB]V7Nwb[jZ002E*4/=Rgpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002H?ve$rFzuakFBo1]kqVGO[p5()Dwb{ACyYBCn001RK2lj=8pYLIozVBqFBPt[KBo25ove$cAwDhYg002H?ve$rFzuakFBn#pv004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003chd/.HdhVLYnf-URZwb[E!f-S%ef-T9ig5%3ewDlrxhVNm^w=MuwgxoAnh#\u003eYlve@d+wb[y=hVLSlhump*f-UU.humj!v/OH?w=MxxvGlxd001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003che=WN9000000000000000000000000000000", "ln": 91018 }, { "b": "0000000000000000000000000000000000000000000000000000000000000b}@s3\u0026*ncQ=OLR00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 92112 }, { "b": "4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 92864 }, { "b": "6?@yLA=l2qw]]d.z/P/nA::67z/do+fFAXkrrJyqdnsI^A=l2qw]]d[z/o.ulUgpWx\u003ez6?vru66l3mo.z/PMlC{1\u003c@f!\u003ev67y-bRfGp:Cgb7Nxf/StM4kP)@gCQZvgbgNsg*hOmf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK", "ln": 94464 }, { "b": "viwu+wPzj3x(v)gf^!U31{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wfh.W3tfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^vfOfJLfOfDlPAtk@0S\u003c2\u003e0006xi=F/]Qa!i+009610V%991{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n1p2OBqE%xQz/f8u9XXMr162Eh6bskQv@=Hez!s8llVm0:z/Podx(v(zcnlXH162Ea6cf!Yv@=Hez!s8lrb3hXeMl+1zeZQ]lQq?IfFLmn9V2nvhzu)viwAJIiw\u0026J{7y-bUfF$Nzf/.3Ih8en*FY/+QfBm{=rrJHt0--eN6eg15162Ef6ad/HB7/o9xln6ff+u2G1{m\u003cd2nmtuwN]T@zE+EyfDpo0rrJTx6?@yLA=l2qw]]d.z/P/nA::67z/doQfE3=7rrJW", "ln": 96986 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 89600, 6.66, "r-x" ], [ ".rsrc", 90112, 2048, 2.87, "r--" ], [ ".reloc", 92160, 512, 0.1, "r--" ] ], "metrics": { "pe": { "checksum": 106719, "timestamp": 4281699750, "image_size": 114688, "headers_size": 512, "checksum_valid": 1, "clr.is_il_only": 1, "file_alignment": 512, "resource_count": 1, "cert_table_size": 10040, "has_version_info": 1, "computed_checksum": 106719, "headers_size_ratio": 0, "prose_section_count": 0, "reloc_overhang_bytes": 500, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0, "bss_like_section_count": 0, "clr.is_32bit_preferred": 0, "clr.strong_name_signed": 1, "section_overflow_count": 0, "signature_expired_days": -210.57, "clr.is_native_entrypoint": 0, "clr.strong_name_sig_size": 128, "misaligned_section_count": 0, "version.identity_entropy": 3.86, "base_relocation_block_count": 1, "base_relocation_entry_count": 1, "declared_data_directory_count": 7, "version.identity_symbol_ratio": 0, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 102712, "entropy": 6.71 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.66, "overlay_size": 10040, "string_count": 685, "overlay_ratio": 0.1, "overlay_entropy": 7.52, "entropy_variance": 7.22, "avg_string_length": 21.69, "max_string_length": 355, "peak_region_bytes": 24888, "code_to_data_ratio": 1, "peak_region_entropy": 7.82, "string_length_stddev": 26.98, "largest_section_ratio": 0.87, "sentence_string_count": 51, "sentence_string_ratio": 0.07, "high_entropy_string_count": 0 }, "imports": { "count": 1 }, "sections": { "count": 3, "code_size": 89600, "entropy_max": 6.66, "entropy_mean": 3.21, "name_entropy": 3.03, "writable_count": 0, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "consistency": { "internal_name_original_filename_mismatch": 0 }, "dependencies": { "count": 1 } } }, "id": 2, "ident": { "name": { "value": "GarnetJSON.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "GarnetJSON", "source": "pe.version.description", "verified": false }, "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:23 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "project": { "value": "Garnet", "source": "pe.version.product_name", "verified": false }, "version": { "value": "2.1.8.0", "source": "pe.version.file_version", "verified": false }, "build_path": { "value": "GarnetJSON.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "K(Mc₂)O₂(ErPr)H₂(Db₃F)Md₃(Bi₄PaSi₄)", "path": "win-arm64-based-readytorun.zip!!net10.0/extensions/GarnetJSON.dll", "pid": 0, "risk": 17, "sha": "4b8501c459621a964ee81de83471e89f996d5a80424ea41ae9c671c3a9c25c2e", "size": 102712, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 512, 89600 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 29460, 0 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-rsrc", "conf": 0.9, "crit": 3, "desc": "Microsoft vendor marker in resource section", "spans": [ [ 91343, 21 ] ] }, { "id": "metadata/binary/vendor::microsoft-prefixed-company", "conf": 0.9, "crit": 3, "desc": "PE company name identifies Microsoft", "spans": [ [ 91108, 9 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 61590, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 67619, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 67576, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 60645, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 91108, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 91082, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 91134, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 91198, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 91246, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 91558, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-semver-git-hash", "conf": 0.9, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 91588, 46 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 91224, 7 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 91536, 6 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 90206, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 91224, 7 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "metadata/signed/trust-level::dotnet-strong-name-signed", "conf": 0.95, "crit": 3, "desc": "Managed assembly is strong-name signed" }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 92928, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 97050, 0 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "spans": [ [ 54575, 44 ], [ 54620, 33 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-append-method-token", "conf": 0.72, "crit": 3, "desc": "Append method-name token", "spans": [ [ 52122, 6 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder type reference", "spans": [ [ 55691, 0 ] ] }, { "id": "micro-behaviors/fs/path/extension::utf16-exe-suffix-token", "conf": 0.84, "crit": 3, "desc": "UTF-16 exe filename suffix token", "spans": [ [ 60550, 17 ] ] }, { "id": "objectives/evasion/masquerade/version-resource/claim::microsoft-company-name-short", "atk": "T1036.005", "conf": 0.82, "crit": 3, "desc": "Microsoft short company name", "spans": [ [ 91108, 9 ] ] }, { "id": "well-known/malware/rat/nanocore::command-type", "atk": "T1219", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "NanoCore command type marker", "spans": [ [ 52441, 11 ] ] }, { "id": "well-known/malware/worm/ludbaruma::metric-section-count-3", "conf": 0.99, "crit": 3, "desc": "Exactly three sections" }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/symbols/imports::single-import-count", "conf": 0.7, "crit": 3, "desc": "PE with single import" }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 91510, 11 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "spans": [ [ 55492, 11 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "uses": [ 3, 4 ], "spans": [ [ 29460, 0 ] ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 7, 9 ], "spans": [ [ 91108, 9 ] ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "uses": [ 20, 22, 26 ], "spans": [ [ 91558, 0 ] ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 7, 30, 32, 33 ], "spans": [ [ 97050, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 29, 30 ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-append", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder Append use", "uses": [ 35, 36 ], "spans": [ [ 52122, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 48 ], "spans": [ [ 97050, 0 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 51 ], "spans": [ [ 97050, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 51 ], "spans": [ [ 92928, 31 ], [ 97050, 28 ], [ 97228, 29 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 52 ], "spans": [ [ 97050, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 54 ], "spans": [ [ 92928, 31 ], [ 97050, 28 ], [ 97228, 29 ] ] }, { "id": "metadata/signed/certificate/identity::microsoft-signed-foreign-company", "conf": 0.94, "crit": 3, "desc": "Microsoft-signed PE has non-Microsoft company", "uses": [ 17, 51 ], "spans": [ [ 91108, 9 ], [ 92928, 31 ], [ 97050, 28 ], [ 97228, 29 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000\u003eL$O.4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000)Ef(ySG9sySG9sySG9sye^ESrRJd1ve^EPqQ(H!te^EMp}\u0026m2vP.nI^XSi2O=\u003c{", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000005ch^n5cq]}5ctb)9@((rk(Z):ZYN@{@D(nT@r04Z5ch^n5cq]}5DI)of-?Dt5ctb)f-\u003cSo[j9IUR9C3B002jj0000000000000005ch^n5nBFvKn]ns007#/0003cZYN@{[bJD}0@MzYlJvb{1n\u0026Z^U(B.X?#:6hZYN@{z#P+FvGlxx000005ch^n5nBFvKn]ns001gL0003cZYN@{[bJD}0^[vhlJvb{1agVoU(B.X?#:6hZYN@{z#P+FqucXh000005ch^n5nBFvKn]ns0Sp@#?#:4XZYN@{5ch^r1n(JEE/GMove{pb0SiIIKPktr?#:7YZYN@{pYyw9k(Z)00rvS.=\u0026s1Y00000000005ch^n5nBFvz#Y\u003e@0dZ=MZYN@{=\u0026s6M0@MzY0ELDm^eTb6?#:3gZYN@{UM1LkfAq7!0000000000000005ch^n5nBFvz#Y\u003e@0d:56ZYN@{=\u0026s6M0@MAD0SiII^eTb6?#:4XZYN@{UM1LkaohxQ000000000000000aPN3\u003cTn\u0026ho0000000000aPN3\u003cXbVEA00000000005ca#aU(/K85DGui9%93\u0026FDk:Ip\u003eRaf5DUkdf\u003e}Tu4[IHO52W0V@@AZEP-t6(5e1#9p\u003eO\u0026A004KEZYN@{aol{\u0026ZYN@{00000000005ce@.5DI)ofLQP#5cdmep^Nd(5dR4Q5ch^r5c+bA5met+9%@2r[hD#d5cupCfLQP#?#K}J^eQq$5l.W^}#uWj000000000000000%3D!l5DI)of*Xe3[NBq%[DP6\u0026ZYN@{0000000000", "ln": 960 }, { "b": "000000000000000000000000000000000000000000000000000000000000*ZBk:00000D\u003c*5R00000J0]:/00000+NsKM00000YBj\u0026w00000QZNq80000000000000008wreL00000{Zvi7000002N{?n000008vV-F00000dH=BV00000iT(b\u003c000", "ln": 88016 }, { "b": "PGi6r0rr91[d+{*0rr91va+MC0rr91PGi6r0rr91[d+{*0rr91[yW?c0rr91u{1AO0rr91USz?I0rr91Z=IJY0rr91Z=8lU0rr91kSw:e0rr91=]g}\u00260rr91Am$sT0rr91Z^w8!0rr91A6jg^0rr91Fir($0rr915i{jX0rr91={4H}0rr91fHbR60rr91US@gN0rr91kTtxn0rr91fHkX70rr91UT5mO0rr91PG@My0rr91p^LdE0rr915jcvZ0rr91fHC?90rr91\u00266EAe0rr912?]wB0rr91PGi6r0rr91[d+{*0rr91eDt+J00000fFLssg=mfIi5$zRv}od.xj#0]yIW\u003c9z/xYpB98LFCx!yV00000001eS5E]lU3KWpG2)*[A2)Z!x2NyXw2l$Fs2l$Fs2l$Fs2lj-7fFLssg=mfIi5$zRv}od.xj#0]yIW\u003c9z/xYpB98LFCx!yV00000002qlaSIvo78mI%5!U=*5FbG+4?xfY4H@%U4H@%T4gJ:Q4fcwdaB%LU0rr91id.e@0rr91^1qu:0rr91aCo+X0rr91C.u8.0rr91d1}W!0rr91nqd7f0rr915c8Xg761sm0@@r33\u0026*nc0rr91bME/A3JHeb00000PXxGj0rr91Kp87O0rr91Z+L%R0rr91u]4\u003cH0rr910000000000df6u#0rr91000000000000000000004/=Of00000ao^@D0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A2]3B0rr917#bcS0rr91FCGmh0rr", "ln": 94160 }, { "b": "3\u0026*nc00000d3sP@0rr914/=Of00000ifBqc0rr912(\u003c@900000m3mNo0rr911][S600000p)7\u0026A0rr912(\u003c@900000v3gKQ0rr912(\u003c@900000Afpk!0rr912(\u003c@900000Frx{#0rr912lj-700000H(}^70rr913ig5a00000N34Fn0rr913JHeb00000SfdfD0rr912(\u003c@9000002=E+?0rr910000000000W2$CP0rr911onA400000Z(!Z-0rr912lj-700000:DuM?0rr910rr9100000+-R#(0rr910SSi200000^2[z{0rr910SSi200000!rf?$0rr910rr9100000/PDn20rr910SSi200000*(.X60rr910SSi200000\u0026f1aa0rr910SSi200000\u003e-L%i0rr912MK\u0026800000]Pxj", "ln": 95000 }, { "b": "ay/tcB98CBv@#TfazC}eA::6dAWH?!0001bwo\u002663ze0G5x(mTbx\u003c\u003e*(Ds.atw]zYjcJBbD0001bwo\u002663ze0G5vru79x(\u003eFdwPI%lBZ]JiAV!$jAV=.f000000001bC4Cf9z/M$gz/x$Av@DmaBAhIlBz(gxx(){bvruBdcJBbD0001bC4Cf9z/M%", "ln": 97957 }, { "b": "UYG\u003eg0rr91UYG\u003eg0rr91KApE/0rr91PMyf00rr91KApE/0rr91p(bfq0rr91rC(O\u0026z*c7wwQ4Y@Acb/jzu6Up00000vQS^\u0026vrcx%C{40oCoyZkzFa6800000B98CpzF78lz/l+mz/fg/q#*OiwDi?Mve$lDz#.D\u0026ASxUJyYE(zBo31PB]V7Naoj1]p5)Y.q#!3vz#:qDBo2$Oaol9QA@Wr.yYFwNzuaqHwDl-JaolG-xAhDvzu7^VBo2$OwDi?Mz2^#ACMn\u0026^ve$9zyYFwNCk#gOwb).LyYF2DzuaqHBo2$Oaoi!\u0026b(?DQdf6tF00000q#*OiwDi?Mve$lDz#.D\u0026ASxUJyYE(zBo31PB]V7Naoj1]p5)Y.q#!3vz#:qDBo2$Oaol9QA@Wr.zuaOPBo0A-wDlMEvGo%twb{cuwDllve=U\u003eK0000000000q#*O", "ln": 98688 }, { "b": "0at\u003eH0bhBK0b.=V0b?\u003cR0cwiP0b?\u003cP0cnc303zm/0aV6f000000b8vJ0cncZ0a(jQ0ce5(0aV7C0bISn000000000008JV70cwiO03zn-0b?\u0026W03}R^03znU0cFo.0cwh-0aC}t03znN0cFoT0bITX03znY0cFoI0bITH0a(jB0a=dv06g9509YBH", "ln": 99431 }, { "b": "hzFR]vpS*E0000000000000000000#0b8vz03znU0at\u003eB0at\u003eu0a=dv03znf089w^03znJ0b?\u003cW0b.^E03zn-0b?\u0026W0cwiO0bhBO03znM0c!GP0aM1K0cwiH0aC}A0a=cM0aM1E0cFoT0aV6L0b.^P0cwh-0aC}t03znZ0a=dL0ce6N0a=dN0a=dv", "ln": 99801 }, { "b": "0ce6F0ce6+03znN0ce6T0bRYU03}R^00000000000000008JVo0b?\u003cD0a=dv03znN0b?\u003cT03znI0b.^E03znL0bhBz03znV0b?\u003cV03znZ0a=dK0b?\u003cN0cOuN03znT0bhBx0ce6F0ce6+03zn.0c[MY0aC}D0bIST03}Rz000000000008JVo0b?\u0026", "ln": 107243 }, { "b": "zuakFBn#pvuJrE]pxjt]p5)Y.q#*n9q#/t!qVG+%uJr$7mf2*TnDqV?q#/!@sPz!epYJ=Yq#/C?00000nb#o.mf3D\u003cuJrB[rrb[%qufb=p5[k[uJs7aqVGk^quf@400000tMvX5wDl/LBPuvXtMvs}zua.TBo2.HyYFnKwDllvrSDXhASydXx-J5Kzua.TtMs:700000nDrSdA@ZpZve$9zyYEcezVBnEve$xHx-J5Kzu6UptMs:700000nb#o.lJy9^tMs:700000nb#o.oAm=!tMs:7000000000000000uJrE]pxjt]p5)Y.q#*n9q#/t!qVG+%uJrN@oAm\u0026*li6pKoAm-^sPz!equfb=m/V9XqVG+%mf3i=mf2ZQuJr[5k(:\u003c:nb@R\u002600000oAn#hzVBLMx-J2J", "ln": 107536 }, { "b": "aol9Qzua.TBo2.HyYFnKaoliTzVBnEve$xHx-J5Kzu7^VcJCB)A@WM/e=U\u003eKzGGA9y+xmmyYBCn00000qGM.BwPQ%:A=U@kzu6UpCk#sSzu8P}0000000000Ck#sSzu8S@0000000000Ck#sSzu8S@f-RgN00000Ck#sSzu6Up0000000000mGu\u0026%x-I@HwD", "ln": 108576 }, { "b": "00000xEA]Z0rr9100000%nSc000000kMy=:k?(wu0000000000qD2$Zu9rsvU7FG5UbH:wv$FER0rr91l][NYtWIX[A+!]mtYTd\u003eA:@u{B-8qnzdM%XA==2cvpKz2tYj7^tZ6[1eN-Wphz^3:wO+{^B7FP^z/PA5z/Z29vq{g0z/Z29B97\u0026dwmop)zE)6YAbYGeB963NwmtJs00000x-Fbkx-Fbk00000x-Fbkm)*lH01YbgFck\u0026Le{7VHBn#pvFd}$-aoqDxe{7VHBr\u003eyh00000PCmCb04[oLe{7VHBr\u003eZv00000PHe.WspLrhe{7VHBr\u003eZvbR?7O{!.4(7.cJCe{7VHBr(8h5mtIs3\u003ccFfe{4", "ln": 115820 }, { "b": "0SSi2003Qx0SSi2002[d0SSi20000000000001FW0SSi2004/=0SSi2001[*0SSi20000000000006k7q!P-Uy^\u0026OWv%8)8r@=e\u0026mncxhga)9NyYI3FqE%/=A=:-[wO#P\u003e005@0qE%GPB97#lmrSlWBw)a2A:@VZ008x^l$HyIxk8BewPyj.wO#P*z/{8gwDm5UqE%GhwPQ%Yy\u0026%q\u003c004-PqE%GpAaJ]WwQcZ?r@=k4qE%Gdy\u0026sxaoj-wGk$1:tp!rC#e[w^m0077ulVM:DBy^:FBvgd{r@-p4l1t1JC42G7l1t17BA^==JrhQYBwca:Bvyj\u003cz/L*TZ5ZYqzE=TRB8Mhwv}wZwt)0PdBxrf]wn=Wkl${WMv@#TfC#\u003c$C?2Z8TBwN0@v)KToA+frk005?%m}D^pz!a0bwK{lEwnC*U", "ln": 128034 }, { "b": "z!a0bwK{lEwnC*CCVK\u003eBP-N.}BwlW:B.\u003eRUx(4uQvqPNS008G\u003coL4TQwKyGLBzkk[y/s[PBzkVh003Khm}D^hzGY-mz/fA6zGF]/A+O@\u003ey?lVFODhh]zE=aJz/YE\u0026z#@KvBvG$XwKgAWA+P09By/I{001kDo)7n]x*N8!wMiOHx\u003eg^xxKL]Yb)3OFBvf$:B8L(ao(BMN003\u003cqm}D^ix(4uDBAzLqvS=^7B47sP008S[oMauIoLE%RvrcSV003pes8@1%wKyxNB8L\u003c", "ln": 128530 }, { "b": "f9aELy?mZ1lVM).x\u003e7N/q!oDXx(v\u003e?n^nvhwmXbwvrbs=o)7n]x*N8!wDoTJnPN%KCq.oOA=kD0B8}rYo9w4kBz#wAl$G?Ixh-[)x(mM+002s!m}D^fB-IIlzGFY}z!0v1B4G)xogq-NmnbG)e[w^m005z*o\u003ewx!vp%drz*ks-rz#s:gCQN[y?%7K7YXe*wN$\u0026waok+YzffGewI#wLA@VguuTEkKA=+V5z^)6=B-7W?3ijBBA+e/?y\u0026r/(y?iODFDfq3B-.?q002H?uW3Qgx-FwruTE\u003e@wnb%?v@Dj3z/e{9w{j", "ln": 128748 }, { "b": "O=A$AB7o6a00000000000000000000000000000000000000000000000000%nSc00rr913ig5a000000SSi20000000000000000000000000000000000000000000000000000000000000000000000000000000000000%nSc000000%nSc00000000000B^Jde000", "ln": 130512 }, { "b": "00000000000000000000000000000000000000000000000000000000000001Ybgf-z7M7.uVEjPkuYp.iQb].[\u003c\u003eKpRx(].[\u003c\u003e=\u003e3fS@qDY%5d[)x1PFG5aq1ON4f3tdu\u003eAws4f3tdPB?e71PFG5UN{\u003cn1PFG5Z.3LD6-Ogl5e1%y9rc3tu\u003eJCteDk", "ln": 133584 }, { "b": "5mLUuwDoHCFmnJV0r90000000000000000000000000000000000000000000b}@s00961aFZAYihx9vp]4i?v5dFiAhm-OFtw0%KFFntU+X!8PR!V+U+[}cZ]2hI\u0026hk.n[tt#T0h*a25t{wyaG3S=fSc[dk=meJp]xbEKF!FzPR[-^U=21eZ]aYx:F]", "ln": 137168 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000001onA4000625c8Xgaohy(7YTKoh#\u0026@e00000000001onA4000310rr91pYHGC00000000001onA4000310rr91xAe3.00000000001onA40003100000D\u003cxYL00000000001onA40003100000J0Gy-5c:@\u003e00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310rrf3000o80rrf3000o8kl7V-000001onA40rr91000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "ln": 138192 }, { "b": "002W@00031fAr^bfAr^bfAr{fvGn7Z0052Xi@]uZlJz38z2!zMwDlPFBo3vZ000Dd3ihgGaoiI:aoiI:aoj[ive$rFzuakFBo0A-x-JhOaok*IaolAZwDlMEzVB\u003eVwDi?Mv/P{qv/QfxwDjpZA@ZpZzVB!TwDi?Mw=M\u0026KzVBROaokaox-ISyASy1TA@ZaUw=M]MaokptwDl=KwDlcsASxOHxAfN-aolG-xAhDvBo0A-zVBwHw=MxxASydXaolD.Bn#", "ln": 138562 }, { "b": "ve$xHwDlPFv/Q=Odf7[04fc.naoiI:aoiI:aoiI:A@YXIve$9zve%:px-I@Hx-JkPC(Pw}aolD.Bo3jVASxIFx8(Gyec3^)ASxUJv/QAEB]V7NASyv+ec3^)v/QrBBPuE.Bo2\u003eLASviZA@Y\u003eNve$rFwb{rzzuaqHec3^)yxd]CC(O@!z2!nIx8(@L", "ln": 138836 }, { "b": "x-JhOBo31PzuaqHaokptwDllvx-JhOaok)KyYFeHwDlPFBo3vZe=VsX3ihgGaoiI:aohxw001?Q3ig8blJz38z2!IPve$fBC(QOtve$cAwDhYg002Z[x-ISyASy1TA@ZaUw=M]M002s=4fczemGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002H?ve$rFzuakFBo2ktwDl-JB]V7NASu7t001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001+Oe=WQae=W\u003che=WN9002s=5Dz?inDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002H?ve$rFzuakFBo2ktwDl-JB]V7NASvY(wb{ACyYBCn004JHe=U[LoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO005$#aokaox-ISyASy1TA@ZaUw=M]Maoj+ezVB!Tz#:!RASxIFBo31PzVBUPe=W0]k(+Z3yYCNTASx!Nx8(PBBo3vZaolAZwDl=KwDl-JB]V7Nwb[jZ002Q\u003e5Dz?ipxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002H?ve$rFzuakFBo2ktwDl-JB]V7NASvY(wb{ACyYBCn001RK2lj=8pYLIozVBqFBPt[KBo25ove$cAwDhYg002H?ve$rFzuakFBn#pv004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003chd/.HdhVLYnf-URZwb[E!f-S%ef-T9ig5%3ewDlrxhVNm^w=MuwgxoAnh#\u003eYlve@d+wb[y=hVLSlhump*f-UU.humj!v/OH?w=MxxvGlxd001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003che=WN9008G1ZDs-9zeptrwPz\u003caz/dYZf!Ld7", "ln": 139186 }, { "b": "w[u49r+lq)x(v(La#7Y7b0DCyarS^PB8$]fvR*rYwmYU2x([RyC4CYnx(v(La#7Y7e?![ia%p=izdL\u003cOo)G3zAbok#vruj4zz2vpA3u@04gjj2jALQ^B96#\u003ew]w/pzes9hjTb2?zAq\u0026GxK#3?B1Ilyv@=Hez!s8yv@DiBvrlorB$$m94gjj2arS^/wN/\u003e6x([R:4gjj2arR^HjAt1MB.bSowN[RTx)aibwOkN}aB4:tzGv@+B-IvXB7n({zddGqze0H2z/Y\u0026eBs?0vz8#9Dz7Y#/b0DCyarR^HarR^HjAt1MB.bSowN[kOwN/\u003e8x(v(.wP?T3az+RjwO:HNvrk1TC5IecAV#SGx*DlswPI]Qb4+n1B7DKGj}d\u0026warR^HauRq$wPq\u003c7B97#7p\u0026Zn[x(4u[wPH3A3lQDlauRq#wN/\u003e6x([R:4gjj2jtg!%B-RT@zF0/J4gkiJvrlH3zdmsbj]+Oku\u0026*rt1][U:1o", "ln": 140037 }, { "b": "o\u003ewAPwmoN*e\u003e]]0vpS!*vo4nSvru73e\u003eHa.B-qqrA=+(6b03\u0026UvqH0@edz}earR^Har\u003c:fB97#ge(D?fBzkP6e(Mt4x\u003c\u003e*(Dsp]fz/df@zEE0\u003cwMrR?vp\u003c7qx(mv1C$8Z)zddKdwPyZXA+O@#x)Kifx(v(kiV@3yy\u0026:d%3lQDlaBKXaarV7w3vI)O000000000000000000000000000000", "ln": 141064 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.iq61h:0000000000[bKTP3JZXo06?d%0mg-D000000000001Ybg0001H0rr9101Ybg01Ybg1onA4000001onA40000003z%Q01Ybg000000@#.W002m:0000006*I:0000", "ln": 143264 }, { "b": "lJy{5x-IYAzua+Uaokjrx-J8LwDlJDx-J2JwDhYgoAk?d0rtE!zVBROz#:qDzua}Zp5[Y5z2!bE00000o-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu6UpxAfdP0rtN?x-I@HwDk9#wDl=Kv/QJHx-J8LBo31PzVBUP00000o-O(cv/QJHzVB?UzVBwHBo0A-k(=ihBPuBZwDi?MlJy{5x-IYAzua+Uaokjrx-J8LwDlJDx-J2JwDhYgkM", "ln": 147852 }, { "b": "00kyo)/JM\u0026)Gjc5yZf%AJ3eQ(I#=itFb})=aol{\u0026]aaaZ@D(zWZYN@{E/YSC?#+5J]aaaZ@D(zWZYN@{z2!XUyYFLSx-J8Lve$rFBo0@]z2!nICMqpPwb[W\u003eaok\u003cJzVB[WzuahEve$rFzVB[WzuahEve$rFC(P#c@D(qU@r04Z@D(wVZYN@{@D(qU@r04Z002pW@D(wVZYN@{002jj002jj002jj@D(qU@r04Z00CN.@D(wVZYN@{002jj002jj002g", "ln": 377024 }, { "b": "z/6DfwPRT8zB5t?zEU\u003evuTCJC090#:m}D^xnP5S8hulY%C$hB/nP5S8huk\u003cqwNPanB9RUkk4F2cgD2j}m}D^uwPI*ezGxwPB9RUkk4F2cgD2kjhuk\u003cJy*?p7wN)$ZuTCX\u003ejySCBw[u0]wk^O\u003cwNPBthd6YG06B.ewo*u@uTCX\u003ejv-$8l3mo.nm=juwPy*Wy\u0026%qPB9RUkk4F2chuk\u003ckz!zvSD2vaQwm5X406Bg\u003eA+O@#x)Kt\u0026z:FeQvrcSYvrt{HzGGDg", "ln": 1115949 }, { "b": "l$7gC07QQxl$7gC08)DJl$7gC0a*s+zGFoPByteox(mv1C%(7.ve%UBvrt]Tq*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/dg4wPRu\u003evrt]TxjVf(rz#zaC1DQ@ve%kKB97#ge(VzbBs{11v@C)(zFa2ys7L?vju^lPxjVf(nPNZJvR/:*0cqZ[uRbrnBZ/f3v/PCMB97#ge\u003c%#5vqPZ*08[e:By/qwlVl=", "ln": 1118133 }, { "b": "nN}*dB9g@kv@=p5BzkVhnN}*lwPRoUwO${]Bv*0yBy/t#zGFDX08)DJp*[xQzGFDX0b2\u003e+uQYcHzGFDX0b2\u003e+uS7DPB.bSonN}*lwPRoYo(\u003cizADL\u0026lBv*0yxjVf(lU{EF", "ln": 1119745 }, { "b": "wJ\u003c)puQwghyIvW0mRMBIwb[.\u0026vrUQXB8V5nB7EKJuTDcdv@2^@xguPDy?9JdlUgpWx\u003ez6?vru6AyHpBnvpK7!zF8BMwO+(SjvA:%wPRGEyHpBnvpK7!zF8BMwO+(Sjxt)bB.9:LuTDcdv@2^@xguPDy?9JdqEK=wB8L}%vqH6$k5jIjlsBwtx(mMMx\u003eq9\u003e06A^", "ln": 1124391 }, { "b": "yHpBnvpK7!zF8BMwO+(Sl2Z^OzE=aFx(4qWluN0Uwb[.QC3!P}A=k/eB7FcVr://!wLWtnzE--CwO#2Ul2Z^OzE--WwPRoLx(mCYxjVf(lUG[CxjT.IzE--wB-.53y?ljWz/d{QvqYZ?okeoO0aPXJzF9JNx(mCYl$7gGrb3hXokeoO0b2\u003e+uSHPKB.aiWzE--mA+eW3wNw5Jz/eP:y\u0026%qZx(mCYxjVf(n][]*r://!wLl-Pwb]RIx?F", "ln": 1129134 }, { "b": "C4\u003eF#A.Z4WwPI*0v}tTUAcb/jzGwMYzdN^cvpJ\u003cGv@b\u003c\u003czGFSZzdN^cvpJ\u003cGxjVf(rb#zSwDkUBx\u003e7YOlVM:DBy!3YB97\u0026dv}tTcA+eW3wM9XVBzkk.wObH]wO#0?0afX-y\u00260*6xh-wYB.bD2wDlvOBydQKo(BMRw[+*!q!ZbVwDl^.BydQKo(BMRw[+*!q!ZbVwDlvOBydQKrC(U(wnbT\u0026wN[.NzEWkTB7GD2nOg$uzeS%0w[+*!q!ZbVwDlvOByb", "ln": 1129944 }, { "b": "zBm\u0026xxK}fJvpJ!UB8$r0yH}xJvpJ$Z0afkAv}YANmq=TczGY@lwDk5dxk8lPzGY@lwDl7UyIv-!vpB4:08)#FBzkkYvp%dWvR/PQm}D^hzGY-mz/fA6zGF]/A+O@\u003ey?iPrB5DN\u003eA+O@\u003ey?iPrB3:qByIdWaB-7.?z!\u0026{4l3uWJy**^?wDkFFy\u00260J?y?iPrmq^l+wPzi*y?iPnzGx@vwM9\u003e(v)$oTzdN-@vR/PQuTX23zEVaMB.$YgvpB4:07QQxmq^l+wPzi*y?iPTzGP/cA:-A[wDkp\u0026x(:", "ln": 1131794 }, { "b": "wmY^Px(mFZxK$Q.wPyEUzE\u0026/tzGYD8x\u003ef+RBz$f2vruTkoLFxQ0crl\u003cBAIT#x(mFZxjVf(pgXSyx(mFZlVl*Jx(mFZnKmAyzEVQ!vru6PvpJ$+zE\u0026/DwPQ\u003c)vru6PvpJ$+zE\u0026/?Byxo5o\u003c}KBx(mFZl3^V]wIct*A+c\u003e1x(ET1x(mFZl${ZYz/Yt@y?ldVBz$5\u003cAaJ\u003c1zE\u0026/nA+eW3wM08VB.bSop?:(Wy?W=#0afXVAaJ\u003c1zE\u0026/XwPRn", "ln": 1133685 }, { "b": "z!0v1B3T?RxLzN1v@#\u003clwDlvOBydQSC42A9vqZfOB.(exA+bkrvq{shA+bkpDuBmt08u%twPHBXrDzZKo\u003ewAWz!8gyB7CtEAaK5#BzkVhnP5SYA=br4lsB}D0b2\u003e+uRbcUvrc6\u003czGFl*y\u0026\u003c/uwL3JLz/PzRvrk#WxjVf(pJx#WzEEuMxkRTdwKx)EwDlvOBydyzzdNJJvrk#WxjVf(qE%oTz/ex+A::3208)DJqE%oTz/ex+A::320af+Tvrh", "ln": 1135065 }, { "b": "xjVf(mriA!A-cE\u0026AbPSnwDkqymriA!A-cE\u0026AbPSnwDlpZA=k$@wPI*ezGxv?xjVf(nmuNqwPI*ezGxv?m}D^uwPI*ezGxv?Aa9=#zGF=/B8V5nB7CtCB.(elAa9^eqE%]*z/fSc07.iNA6[CQwO#P?A:-\u003cbAbP=sqE%]*z/fSc0b2\u003e+uS7rRqE%]*z/fSc0b2\u003e+uQ[WHqEK=EwPI*ezGxv?uVGO0qE%]*z/fSc08m3wz/Qb3wPI*ezGxv?mqV#", "ln": 1135531 }, { "b": "vru5XxjVf(swr\u003c8vru5Xst.=)lUgpWx\u003ez6?vru5XxjVf(lUgpWx\u003ez6?vru5Xv}xX5x\u003ez6?vru5XxjVf(s9F\u003cOB-.qdzGGP5vru5Xs8@1%wLV=IwN/*ZAaAy0wDkLEz/xodBA{(9wmoN\u003e08[e:By/qwlU{EFzGFP\u003ewmYNfp\u0026Zn!x([6jwPGE}p?sV*x(!x8vR/P", "ln": 1135810 }, { "b": "08^xFB.L(cB3$p\u003evqPZ*lVlHDl3di?x\u003c#jbwDkRtADL#owPH\u003c?A+e\u0026]A+fb#wN[eDwmX5GBAh88B-.f{m}DNHA::63wj7oCwKgAWA+P09By+CLzGYPix\u003ez6/vR/Qyz!9ABBAzLqvS=^706$ZGA+P09By!D[vp%dqBAzLqvS=^7099]Dz/f91BzkVhvqF\u003e+AbY\u0026eB8$5!B8$=5wKgAWA+P09By+CEwP-9nvqF?MB8Mhwv}xZPvqY.2vp%dqBAzLqvS=^707?k#C#s", "ln": 1137669 }, { "b": "B4HBAzEWQ4Aa9\u003c5vR/QSx([2/A+Pxcx(mL-A+f8@x(mT5x8\u003e\u003eQB97#ge(D?fBzkP6e((L7B7]Mgx(mL-mSJA:lsB}Dhz!uOA+PA7090(6vrl0rg/FHpx(mL-lVM:DBy!/TBAh8kx8(NQByd%*A+PA707y%svq]^Cvrt{RBAh8kx8\u003e}HwPIu\u0026AaIBCByw9\u0026A+PA707QQxqE%\u0026\u003cx(W=}q/)4]zF5@Gz=gd/z/{8gwM9X\u003ex(mL-l$G\u003eDwmXXYA+PA707y^nz!9ATBAh8kx8\u003eUGy\u0026\u003cv", "ln": 1140963 }, { "b": "A=k![BAh8kx8\u003e[Hq/)4]zF5@nB5Ng3x(mL-m}D^vBAh8kx8\u003eCkzE)\u0026%By!D[wPy7HwO#P*BAh8kx8\u003e[Hnm^3ABAh8kx8\u003e\u003eMvSMTix(mL-wnca7z/YSgx8\u003ewzwO#P*z/{8gwKQ=NzGFu^A=2lbBzkS908^xFB.bSoqE%@\u003cD1?ee0b2\u003e+uQF:HBy/uioL59OBzau^zF5@yz!x5Sy\u0026r}^q/#Lzvru0)0b2\u003e+uRa\u003c8z/fbXvru0)0cqZ[uRa\u003c8zV", "ln": 1141383 }, { "b": "vqM0xwNPaBzFTO%BAg@3z2^pwzeTDuq/)4\u003evqM0KB98ClvqM0gAa@u:A=U@kzCT+ZvqM0SwPRoJBy/p?B7GD2nPXJX0blK^z2^HWB97#g0axXRz/PMlxL^-GA+Pv\u003cra{q-vpSqBw[s\u003eGzE^W50af+PzE^W50b2\u003e+uQ/6Oz2^dGl349YxkRc!y?l7Rz/2F^A=k^{nPNWap\u00266MZw]zZb0b({Py*?A$z/PW{ze0)4zfoW}zddW6zfoW}mq^l+", "ln": 1144690 }, { "b": "A==2cx\u003e7N[wKgDXxM4{9BA{k!vqfPVv}xX5x\u003ez6?vru6DB-.qnA+PSvlUG[xzuarXBye0UCYV+#vqfPVl2Z^hz/5]%zuarXBydyTA=L-eBvp4:vqfPVq!oJQpJyeZx(i]Tz/PM8x(i]yz!T7?o)7n]x\u00265.:D1R5k07QQsp\u0026ye}xk.U/xjVf(r+lq)x(v\u003e?pJf(.raP(SzdN*fC#Fi^wO\u003e\u003cRwPz\u003caz/bL/wPRoTAaJJWwPz\u003caz/bL@wPRoTAaJJWwPz\u003caz/bLvAbYxawkvj", "ln": 1145507 }, { "b": "A6[LYBzkSnvruj4zuaf+zGGPgBZYxaz/bLND2[7sz7Xs{z^)c\u003ex)Kifx(v\u003e?q*ACawO\u003c4$B-8qnzdLs#wPzG[y?Xi7BzkVh06${NA+c\u003c\u003cz/Pzwq!o#-vqGU7vruj4zu9QXB97#ge(VzbBs{gbz/dgawPzG[y?Xi7BzkVh0b2\u003e+uQn*RxM4{9Dsp]fz/bL@wPRoBB-.qnA+P\u0026dBzkVh07.iNA6XR*xM4{9Dsp]fz/bLNwN/\u003e6x([R^v@#B6zuaP]uSh8RBAg/1BzkVh08mPLBzkY5A=+k\u003e", "ln": 1146521 }, { "b": "q!{8^r://UwmoN]z/eG@xj\u003e^%BzkVh07gWwzeTp(l3^V]wIct*A+c\u003c}B8L{@q*ACawO\u003c50wQ5qHn][]*0cJx}i7!mgzuarXBydTYz/bLRA+PSbn][]*090(8D2v5cx\u003e6RMz/59/z/bLMwNPasA=k!!B8L{@rbUMwygQ)%mSJA:n][]*0b2\u003e+uQnTIy?Wx/BzkVhn][]*", "ln": 1148102 }, { "b": "Bx0eUlVl{?rbR+hwPRQ7wjZVJzVAyJz/eK1AaIQUw]vV:B8L}}D2Ns^zF0!!xkzG}vqE$=q*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/dg4wPRu\u003evrt{gnLj5xzD7[2wL3=Kz=gd/z!%PdAXo\u003c[Bx0K8wL3=KzVA:SC$hB/rc-B]nP5cU07g)BBAIRnnP5cU07g^rvru6YvqH6$nP5cU06$:HxH(YywmY^ZvqH6$nP5cU0bb}LwmY^ZvqH6$nP5cU07zcxwPh:9z/d%SB8UMfv/", "ln": 1148438 }, { "b": "oLFM\u0026nP5cU07g^rvru6SA=k]dA==N#zF0!!n][]*p\u0026ZF[wPz)rnP5cU0bls.zVA%LA=g@1zVAZLwO2/Xm}D^wx(dB5Byx3908[e:By/qwpgXJ1now@)09a5Nq!6GLzdMmWBz}jTwPI^jA:@VJA=l8t0bD:%08[e:By/qwoLFx:090(nBAh8kxf*AClU{sxASw{Rz!0v1B4*p=wKyctASwBuzE=mGBwls-vR6MWltpsFq!p5BwO\u003e)/ASx@/zdm6%07y^DB-I4*B.$P0ASxDQy\u0026r*0piyz.wPv=-wPRoSwPR%rpiyz.wPv=(wPRoSwPR%rpiyz.wPv=\u003e", "ln": 1148841 }, { "b": "vqFULy\u00260*bwN/T@wod-uA=k!?x(4Q1B7F\u003c1zE^!*m}D^pwPRQ7wod-tC4CMkoj-x)z/Pxf07}rJzCsX:vpS!*vn*-TC4\u003eC$A@Yc:B97#ge(D?fBzkP6e\u003e71{wPh:9z/eG+A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIcL(By/GhA8Qs*C4\u003eC$A@Yc:B97#ge(D?fBzkP6e\u003c\u003cL]Aa%c1A-lK\u0026C4\u003eC$A@Yc:B97#ge(VI8wNPa-zF7O3vrlj9e(MXhA:@W407QQxq/u/0v}xYYuUay(zGF/}B-H#6A@XHoBzk]jBA{/6B-H#6A@Yc:B97#ge(Dn4z/{8gwPE\u0026UB9g#5wD", "ln": 1154154 }, { "b": "D30Rs0afOKCUA3*xjUQuD30Rs0bVd^v}XhOBy/H[p*[x=wKZYUz9\u0026I\u0026wPE\u0026Jz:F.\u003ewPE\u0026wwPQm:By/H[pgXV(lv0V:A@XZwBw=K\u003elv0V:A@Y\u0026:BydvMB-7.#A^o#%By/H[B7GD2lt}0:wmoI7lv0V:A@YMRD30Rs0b2\u003e+uSHPKB.bQ]nm=juwPyZ\u003eA+PA7r://!wPE\u0026vA=k!}vqH6$A@X*Nz/exWA:-/@By/F:zF0//vqH6$A@X*Jx(lEMve", "ln": 1155614 }, { "b": "06${NA+dNCB7EWXw[CQ{B47s}wO#N6z/fQ@o\u003ewfWA^p8#By/uhx(v)g06$apx)aijC%#$1wO#N6z/fQ@q*ACawO\u003c4[x(m]ymr\u0026=(wPI{bz/fQ@q*ACawO\u003c4#wN/\u003e6x([RMp?sV:x(!ufz/fQ@xjVf(p\u003c3k-x\u003e6IDz/]O:z!0i$x(v)g0afU-wPzj3x(v)g08[e:By/qwlVl^SwN/*@z/fQ@uU%j@l3mo/zddK2v]u(Gx(W={BzkVhA@XKvzE^E0xhSqZBAh89BzkT", "ln": 1156793 }, { "b": "wN//Zmq^f?A+e3QygQ)%07y^FzdN-@By!lSygQ)%09shPBy!lSygQ)%090(jvRPE:Bo1*xz+\u003c?SwN//Zm}D^rvRPE:Bo2x.x()]+ByxiipHX6Iv@}Y?vRPE:Bo2@+Byd%?vRPE:Bo3w[Byd%?vRPE:Bo2lJy?m9#0cqZ[uQnHAz*aG\u0026Bz\u003e5*wnc6}v@}YHwPQjOy\u0026sI-B-.L1wN]H}wN//ZvqG:#Cr{v[z=gdSx(W={Bo1*xBx9u}mSirBwD", "ln": 1160142 }, { "b": "wPyvWC42A9vqZe!rbUDGCv+!^zGYDex\u003c\u003e[3090JEvqZe!lVl\u003c-Byx6e08^xCBo29OqE%\u0026\u003cwPI@(wO#O\u0026xjVf(rDz.(l1:+DBo2V\u003cB7GwTxjU$508#s4x\u003eqg70b2\u003e+uQFTzwO#O\u0026now@)lU{EFzGC\u003eCA+eW3wKH9wvrDydlU{EFzGC\u003e*y?WD#Bo2x.x()]Py?mD{zGC\u003e$vru0)mqMKLwO#O\u0026lVM:DBy!/KB8L}+y?mD{zGC\u003e\u003ewPRoKB8L}+y?mD{zGC\u003eMB-.53y?ljWz/e0WwO(0@Bo2lJA+O@#x)Kt\u0026z+t7?zBFwMzdJ", "ln": 1161506 }, { "b": "B7GD2oj-wGq!PPWwN[hqByv*NC(Rh?vqPN^oj-wGwO#0#D2N\u003epwj{GV0aPXJy\u00260W2xjT.EC(QcDy\u0026sI}wN]H}wN/?6r://!wLlPW09a8KAZstHzGF]/y\u0026%qZwQan{vrb^[oj-wG", "ln": 1166987 }, { "b": "C(R]cA::63xl:FyDuBmte\u003c\u003cL$wIct\u003cD2N\u003ezxl4B1xN6ORD2[7sz7X:#v%8*aBA]GaA^qRCz!B90Aa\u003cH%xjVf(l349Uzdmsb0aP?VwO#PQB8$]fvR*q\u0026vrlH3zdmsb0blHNA:-\u003cbAbP=spJ{X/wjZVXwPzV%y\u00261v%xjVf(nPN^vvpSeKy\u003cu1DAbYSs0b2\u003e+uRbrpB-88hzF8)[zEWv2z/fGoB8la4x(^f{zF\u003cfaxh:7[v}Y[3zF%Vsy\u003cu1LzE^s6", "ln": 1167411 }, { "b": "x-J5Kzu9SozVBLMwDlPF0s-(CwDl/LxAh@Jwb(Pmm/U%Tq#=[6pYKF}q#=[8pYKn\u003eqVG+%00#f@mf2QNl\u0026Wh{pYJ=Yq#/n=nb@S0l\u0026YTQoAmGYq#/t!01R\u003c9pYKC{nDqJ^p5[h)01h:aque#.lJxKP00+K+f90T9010rsBo3y.z#Y\u003eCxAibOBo3mW", "ln": 1179764 }, { "b": "0cnc.0b}{S0b?\u003cT0cwiL0aV6glQ}b/0b?\u003cf08\u0026\u003e[08rIp0b?\u003cD0bqHB0aM1J03znM0c!G.0a=du0cwiL0aV6L0cwiV03znP0at\u003eJ0a=cM04d:E7BGh90b}{U0b?\u003cR0a=dJ0cwi^04[lLBYnuO0a=cM0bITH0b.^F0at\u003eF03znZ0bhBJ0a#oO0bhBO", "ln": 1186867 }, { "b": "B8U@7C$}^+wE6[-mn$x?e?!gA02njxv@=Hez!s8llVm0:z/Podx(v\u003e?01n(d2u2bHwNPT\u003e001!Q04#c/awDMWA=l2qw]]d.z/P/nA::67z/dfIl2puWA+Pf1BAnNBwPIB6C4Chp002aZ05)\u003e\u003cx(+zhB0bNrwGUY7Abo95wO#P#BzkVhaA7\u003cmBzbkdl3^V]wGTuRx\u003eqg7aw==\u003ewO=6#wDhYA0rrS+e\u0026tspfFkare\u0026tHAfF\u0026+fgYWOff!Lsqe?!!mgbH^BhEXy1vMuhPhz)B7gbgNywhDk0fGg}2h-rU", "ln": 1234326 }, { "b": "mriA!A-cE\u0026AbPSnwDhYJ0rr%5DuBmte(Dn4AbPSnwL3=SwPyjWA=k%#0cOwyAz}d7By/qwraQq@e\u003eQh6zz1L5z/e0WwO(0@BsXLkD2[7sz7X!0CYUMgB8L}EaxA5]B7]MgjVC5Fe?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARGth!1G$w[CK-ggT{ah8b7hCl4X:q*ACawO\u003c50wQ5qHn][]*e\u003eQh6zBwzMB.$YcBsXLkD2[7sz7X!0CYUMgB8L}EaxA5]B7]MgjVC5Fe?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARGth!1G$w[CK-ggT{ah8b7hCMv!=q*ACawO\u003c50wQ5qHn][]*e\u003eQh6zDpgZB.aiWzE+pvq*ACawO\u003c50wQ5qHn][]*efE#8A=U@kzAP%ifFk4ifF1tlB.(exA+dyKwP-9nvqEFqp\u003c3k-x\u003e6!EC#OY$wO%Uvv(E\u003cKgIglewhmXawhM7w0a=fhu@It(By/qwq/)4]zF7Hyq*ACawO\u003c4$B-8qnzdLmvr+lq)x(v(Li4=)qfFk4gavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4jZ{93w\u0026jfVw?=1", "ln": 1249923 }, { "b": "wJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARC.gIeHRh!B^0whM5HgHQm-gxvF0q*ACawO\u003c50wQ5qHn][]*e(MXhA:@VJwO#71vruj4zvwGSfFk7ne\u0026kHAf/5!firoapl3^V]wIc\u003e(B8V5nB7E{XzE)\u0026SA=M8sd]G@1AbPSnwL3=SwPyjWA=k$=z/f-fA=+(k0015v02X7GB-I4CqE%]*z/fScl$G?Ix8", "ln": 1250638 }, { "b": "02\u003e[V0384N0uIli10mJl10vNT0u?BS0u}HT0v4NU0rr91y?Wv1wN/:(Bs/j1B8JV+0afnFy*?PCf!-O\u0026l3mo.wO#Q7v{%E\u003cl34r?v)jBguOKkmjv9E%B.L(crbVL-zC$m=wO#PQB9RUkk4F2cf!-O\u0026nP5SYA=br4qE%oEl2pvpwQ5q.B9RUkk4F2cf!-O\u0026nmuyDy?lHQB8V5nB7ETUD2vaQwm5X0fAsj9wPQ)\u0026yH}xPze:qSB9RUkk4F2cgb5X\u003cl1s[Sx-", "ln": 2120185 }, { "b": "vqYN^y\u00260K4x(v(\u0026vqH6$raf\u0026-l3D:KBywS{wNEj)s7#+\u0026lT:\u003exwO=f\u003eBzkVhraf\u0026-l3D:KBywS{wNEj)o(\u003c-VlU{EFzGFiNB7F-l08W(IB.a@n06$WKzEVvUv@2dWBzaY-y\u0026%q%f-Ul.y\u0026%q*vrli(f-THXD2va=z!0i(u[?TEA=LPlp\u0026yn*u[?TVwNPaBzFTO%Aa9S(f-THHBzkVhu[?TMlVl^SwN/*@z/e@q07*71vpSeKy\u003cwx^y\u00260V)BzkVhu[?TE", "ln": 2121931 }, { "b": "x\u003eq9\u003e06Bj(zEEB8nN$22uTDcdv@2^@xguPDy?9JdlU{EFzGFDXk5jIjlsBwtx(mMMx\u003eq9\u003e06A?\u003cBy/G3v@#BdwKpAQCxmtolVM:GwO#Q7vqFqEx\u003eqg7nN$22uTDcdv@2^@", "ln": 2132952 }, { "b": "m}D^dB-.qdzGGP5vruj4zC\u003e4Qz/Pv*uVGZ/z/Pv*xjVf(p*[A^Cw?Ij0cqZ[uR\u003efLB9zLywb]Ltv[QxUv}Yp+zB4/zm}DNHA+P2WvrlHlz/Pv*q!oDiwQd^0vqfQGx(mDKwO#71", "ln": 2137260 }, { "b": "B.(d*zGY-mz/fA6zGF]/A+O@\u003ey?lvIzdJYUzGY-mz/fA6zGF]/A+O@\u003ey?lvIzdJYWwPRoGx(4uQvqPMQB7GD2mRMWIpgn0J0a]}YwLMVJwDl^Yz/xn.vqPMQl$G[KAbok#vru6QvqPMQl${ZJvR/QIB.(elraP@QzGFf!BzaP%x()\u0026#pgn0J07pKxvpB4:lR]HaCX7xcBzkVhq*h}$v}XRCzdJYnx(^Y(y?lgQBy/G3v@#BdwMit-wNPa*z/oCXCX7xcBzkVhq*h}$v}XRCzdJYQAbXf.zGGDmq*h}$v}XRCzdJYWwPRoGB.\u003e\u003e?vqPMQz/xodvruj4zCBRSwDl7IA=l8tpgn0J0bVp?vpS!*vmT%rwmY^RvqPM", "ln": 2141241 }, { "b": "vru5Xv@b\u003c\u003czGFlSA==2cx\u003e7N[wDljKA==2cx\u003e7N[wDk2sBzbl6Bzkk[By+CLAaAy0wDkXIC%=Q-vru5XlVM:DBy^\u003cKy?ml/By+CDB.(elv{%C2l$HgCxjk)[07?3Dz/P}@yH.ABp\u0026Zn[vru6NwQcWPy?ml/By+Czze:AlBwN0(C42G7oj-xpwO+{\u003cvru5XxjVf(rb#zSwM9XVBy+Cvwncd7AZB!+Cxmh4y?lK!vru5Xm}D^dAa9^ezdNQbq/(C\u0026wDh", "ln": 2143412 }, { "b": "BAzLqvS=^706$WEwO\u003e))C%=H!Aa9Tfl3di?x\u003c#jbwDkRJzGGPfwKyxMAa9\u003c5vRGT)BA{e]BAh88B-.f{B7GD2rDz.IxK#0@mr\u0026xNB-.f{lv0V:07pyrB.bYb07y^BB.bYb0ax$\u003eA+P09By^gcvqH6$0ax$\u003eA+P09By^jdvqH6$0b2\u003e+uSHPKB.7L]wPRoWvqH6$06${NA+efWyG1.YAaJ6Uy\u0026%p?m}D^rAZK\u003eUvru6YvqH6$0czTZr://!wDkkiBvf$:w[+(", "ln": 2144886 }, { "b": "wPRoPx\u003egZKwPq\u003c7B97A5x-Ji=Byd*TwmFIGADL\u0026lBx9u}0b2\u003e+uS7DRz/{8gwM08VB.bSorDq^NB-If@p\u0026{.Sz=p:#x(mMHzGxH(uVQHgv]3MG077Zqvqt\u003ceB9RUklT:!EvQS+Z0b2\u003e+uQOEGx\u003e7Zwz!9ADvqG:?vpK6MB7GD2l$HKQv}w2CwmXbpy\u00260M?v}#6PwP?=$wKyxDwKx)xy*{*.yxdsLyH}xJvpJ$ZlT:!EvQS+Z0cqZ[uSgJRC4CXYwPz\u003e", "ln": 2146919 }, { "b": "wPyZ.wO=e.B7GD2rDz.BwOkBYC#eB6wPyZ.wO=e.okeiU07QQxph+2sze:Pxq/)4]zF8:=piyw?07gBhv@1?TBwu%{yYD+xB7Gxlph+kHB.\u003e\u003c]l349UA=+60y?%8W", "ln": 2149450 }, { "b": "x\u003c\u003eE!wMiOmz/oB(nP5SYA:-E1x)a5NB-.qdzGGP5vruj4zBF!Yv%8)czF8:.ra{q-vpShMz!]zwwP?=$wKyxDwKx)xy*{*.yE@wZyYD$pBx0f]wO$7RAbkIuAbX={yH}xWA=lbnwmY^Mze:p\u003elsB}Dhz!AOyYEyxzFsibDsZ8%yYF9VBye6WA+Pc1v{%E[z/b", "ln": 2149573 }, { "b": "zVAZEA+O@#x)Kifx(v(XzF0!!lVl\u003c-BAhIlBz(g\u003ezF0!!xjVf(q/(C*Bv*vZzVB\u0026\u0026Byd%*vrcDYzF0!!m}D^dDuBmtlU{EkA=kD0B8$o4vrcDYzF0!!m}D^dDuBmtl$HKMy\u0026so7AZKUSp\u0026ZF:wPI]\u003eByxiinP5cU07QQxl3^V]wL^q?wPyZ.wO=fVA=kD0B8$o4vrcDYzF0!!Ab](bwPI]\u003eByxiinP5cU0crl\u003cA=:(\u003cw]vV-zF0!!B6\u0026D?A.gd\u003cwOkN{t4I.)06$:HzVBcOvpJ$Zl1szoB8$5:z#-*Lx(B5tvpJ$Zrb3hXB97\u0026cz#:l!x(dB5Byx3908[e:By/qwpgXJ1now@)08)#FA=:/.Bx0e", "ln": 2153200 }, { "b": "A+e6=Cv+![xK#0@o(BM+y?lvWBv*v\u003eByx04wN[kIA=k%#p\u0026yL?A-lT.y?#\u003c+Bv*v\u003eByx04wN[kIA=k%#B7GD2qE%xMA+e:5q/(C=wmoH?mriA!ASx--BydNXzeq{TB8$=5wKQSWz/L\u00260wPRoIBzU?*wPI{3xjTILA=k%#o(\u003e2GzEEY%x(4i!y?l4QA=k%#nN#yIBzk\u0026xrC(k*vqfK^vR/QAA=M8s07ZKownC*CA=M8s08vDgwPI*ezGxwTA=M8s06$mgA+e((By^)YAS", "ln": 2156344 }, { "b": "wJS{Qe\u003eoF{mq^l+wPzj3z/L?RD2[7sz7Xg]y\u00260V)BzkVhB1Q3MzGP/cA:-A[wIcF:Bvy7\u0026zdN-@Bz(g1l1t1JC42GhASv.4Bz(g1e[nykz/L?FwPQpTzGx]uBZ]JiASw*LzFsihASye\u003cxK#3?p\u0026{ZTAa9*eCw?Ijp\u0026{ZTwPz*fA.{\u003c#0aQ4XwmYU2x\u003c\u003e?0p\u0026{ZTnP5SDBAdw5BAdvWwN!UXvruTklVlHDph:6Nv}XeIBAdvXvrc0(Bu%.Sve", "ln": 2156979 }, { "b": "xjVf(oMaMRwN[tyvpS}\u0026pgn0JA@Y\u0026:Byd%Rz/xoe0cqZ[uSgDMAaK7\u003cuT)+-y?cEOz/xoe0cqT*AaK7\u003cq*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPGE\u003ez/5E0AaK7\u003cm0SVUze0G*y\u00261w.v}f7\u003eB7F(RwO\u003e)/A-vs6wPE\u0026uze:Pxrc-B]A@Yc:B97#ge(Ms\u003eB-IhrC}IE8D2N\u003ezxl4B1xN8jjh843TwPz)bw[+:-By/H[l3di?x\u003c#jbwPE\u0026WBAzLqvS=^7A@XHpwkc=QB-.ho07I0Ezb1Z", "ln": 2158037 }, { "b": "BAhU5Acb/jzGt!#wPR%rpJgz\u0026z/fQ@xjVf(nP5ASAZ+j.wPh:9z/fQ@wQ4Y@Acb/jzGt!+z/x/jz/fQ@m}D^sA=kD0B8$o4vrcDYzF0*d0b#%%v}x.5q/(C*Bv*vZz/U[\u003ewPRoDxKL}508[e:By/qwpgXJ1now@)e\u003exLZwmY!50b2\u003e+uR1:pwmY!50afeJy\u0026sJewjQouwmY!507.iNA8Hm*AbPSnwK{xvwmY!50afLXxf*uInm=juwPz?(now@)nm=juwPz?(", "ln": 2161044 }, { "b": "q/(C\u0026B-P]*wmXXZv}f7\u003eA@Y\u0026:BydNXzeq{TB8$=5wM9.Yv}x.50cqZ[uR2oQy!XFZB75Y)q/#OWwPI[)q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@\u003cn0A=kD0B8}sMp\u0026ZF:wPI[)q/(C*BwN0@v}x.50afX=z!0v1A@YM?x(dB1B-Y#)A@XHFBAh88B-.g]vrc0(BAmBRvqfQFC4CMkq/u/0v}wRWvqf?80b2\u003e+uQnjkx([6czEEu$C%Mm.z*b=6raP@QzGG}1B7GD2l1BIuBzkVhvqC", "ln": 2161610 }, { "b": "rb3hXz/{d4B7GD2lVM:GwO#Q7vqF+Xz!0v1B5V\u003c\u003cwP8Zk0af?ZzdNTdBo2@+Byd%*vqYQ:A+4:VAclm5B7GD2qE%xMA+e:5q/(C=wmoH?nP5G\u0026Bo2V*wN]H}wN/*XByx5$vrb)IzG6-u0cqZ[uS7DCx(W={Bw)o\u0026zE^f@wkvt\u0026Aclm5l$HBJA+O@#x)Kt^B-.OBBo3l4Bz#wA08mxPwLM/YBo2l+B97#ge(VzbBo1{Oz/e0Yv@C)?wk)b+Bo2-Wwncd1z/f01o\u003ewx!vp%dJwQ5p%qE%oEl2pvpwQ5p%pJf(.raQq@0b2\u003e+uQF:HBy/Ys08)DJrb#zSwKyw", "ln": 2166114 }, { "b": "wmPmZs7L\u0026wx\u003eqF*s7#+\u0026rDz.uzdm6!wmYpMwNXXOwP[b}wN/:(Byf90xK#3?uV6C00b2\u003e+uSzhTph+sRB7GD2lVM:DBy!i=s7#L.z*8gJvqfKVA:-]MzE=ZWA=ld4o\u003c@nDy\u0026r*0nP56ICMq8+zE^s60cqT*AaI{UxjVq/lT:K{zEE0\u003cwN[epv}YBLB.kl1CMp9twKHlNvpB4:wj6^nxK$a+w[C+407pygvrDydq/#X:x)oRNA+5:4lu@MzwPRoEwO+!20cn", "ln": 2166533 }, { "b": "rrc[pA@Zs.z#:?SzVB!TBo2\u003eLwb).LpYKb*lJy3+blfX6aoj!fve$xHve{ozlJxKPqufU@nDqiWnDq9Tk(:\u003c:mf0r7pYKw[nDq=\u003ek(:\u003c:mf1Cgo8}xXsPwC2q#*OiwDi?Mv/Q6uASygYx-I-Bx-ISyve$xHwDi?Mx-JhOaollUx-JhOA@Y[OzuaqHaolG-xAhP", "ln": 2169420 }, { "b": "zua8Bx8(Gywb]%px-IVzwDlPFBo31PBo3N^uJt9DwDlYIBPt$MA@ZpZuJsWrve$0wyYF2Dwb(Pi3ig5zv/QrBx-IYAzua+UqVHwev/QJHwDl/L03+[LBPuH-xAh@JASx!NDh}vNBo31PzVBUPlJz38wb{fv03MmXz#:$Wx-J5Kzua.Te=X\u0026JwDlPFve$fBBo1(jwb(PopYJ=Yq#/C?0bD0yDh]5/ve%^qv/QAEBPupVBo0A-x8(GyBo0()ve%^qv/Q6uA@ZmYeDx\u003e)zVBLMwDlPFaoi$[eDxX?BPuH-z#+1XBo0A-y5\u0026qPzVBUPaoi$[eDx!\u003e", "ln": 2172144 }, { "b": "0tMZSeDvv5Bo2\u003eLzua8Bzua+UaohA!aoi$[eDx?(BPt\u003eJA@YXIASx!Nz#:$Wx-J5Kzu7^Va]?SCa]?PNv/QuCwb[jZwDl@PwDhYvf92I.aoj4{v/NRKa]?PNf92CYx-J2Jf934[xAe2seDxnXaoiO=0t/eAv/Q0swDl=KA@YetzVBLMwDlPF02o5BCMqW.x-JeNwDl=KuJt0Azu6UIwDl@Pz#:OLASxUJA@X#ozu6U]C(S9\u0026C(S9\u0026eDwG", "ln": 2172420 }, { "b": "w=M]Maoksul\u0026Y\u003cWA@YCBk(=ihBPuBZwDk%nlJx^WnDpHCtMw%FvGp9xzu6U\u0026f93a{A@ZjXf92CYx-J2JiSH/kBPuE.ASv-)yYFwNv/P{qyYD9*vGp9xzu6UAf92CYx-J2Jf8$$}ve$PNiSHMde=Wv3dfak=zVB\u003eVaol0NzVB[WzuahE0d:9e0b8vz03znX0ce6T0cOuR0aV7v0aV6", "ln": 2172744 }, { "b": "0b?\u003cM0a=dF08-/d0c50Y0a=dK0cwid0b?\u003cP0cwiL0c!G=04[lKa.Q\u003c$0cwiW06g9k051s*0b?\u003cE0at\u003ez0b8vJ0cncZ000gp0aV6f4@RC!0cwiP0b?\u003cP0cnbukw*Ef0bRZE0b?\u003cH04m?S0bITH0a=dF0cwib0cncY0a=dJ0cwiP0b?\u003cP07c-{0bITK0aC}p00", "ln": 2181067 }, { "b": "k(:NUoAm\u0026*r@+U?l\u0026ZM]q#/t!p5)MWp5[k[qVD!tk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJrT$l\u0026Wimk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJs18mf2WPqufb=q#=[Wk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJrB[mf3i=q#/F\u0026mGu0WlJxyLq#/t!uJr[5k(:\u003c:nb@SSk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJrB[mf3i=q#/F\u0026mGu0WlJxyLq#/t", "ln": 2185736 }, { "b": "0b?\u003cP004pg09Pw508-!=0abZ$07l/Q08rI[07^e\u002609Gqe07l/U08\u0026\u003e-073VV07u({07^e=08@}!08-!.07c-=07^e\u003e07u(O08-!)09oe007u(=08@}?08-!=06{PM08JU\u003e08AO*07u(\u002607u(P0961#07^e^08rH]gEh1!0cFoZ0a=c.07^f30a=dF0cwiP0cw", "ln": 2186507 }, { "b": "l\u0026YTQp5[k[nDqY\u0026sPz!el\u0026Y^UqVG8-li6WVmf3V{o-Oe[oAn2(nDqY\u0026mf36.k(:TWq#/h:rrb$#nb@SOf92??wDl/Lve%*rve$xHve}}Xx-IVzwDlPFBo31PBo3N^f92[\u003cve$AIBo2$Og5@%cBo3jVyxd]Czu6UMve$lDx-GZ+B]V7NASydXx-J5Kzu6XLg5%0df-TfkeDvE8g5@)afAr*c0tftLwDl=KzVB[WASxOHwDhYzv/QrBx-IYAzua+UuJs^uwb(PAz2!RSx-GZ+ASxUJA@W=(x-IVz0txwKvGpcywDliuBo2UFx-IVz01?{9wDl/Lve%*rve$xHve{oNnDro3wDlPFBo31PBo3N^aoloVzVB\u003eVaol0NzVB[WzuahE0bDlFBo3y.z#.{0f90T9f-T9iirgVig5%figYPcdf-T9iirgVig5%figYPfez2!bEBo2.Hwb{3rBo2.Hf92X^wb{fvzua+Ux-JkPC(PF$zVBhCBPuH-xAf^/f937]zVBLMwDlPF0cHNczu7^VwDl-JASy1TASviZCk#4KA@Wr.wDlPFv/QAEBPupVBo2\u003eLASxUJwb).LCk#pRx-I@HwDi?MASxUJve%*rx-J2", "ln": 2186832 }, { "b": "00uHb06a0UxAhPzaolfSwDl#Qv/Qfxve$0wzu7^Vx-JhOaoloVzVB\u003eVaolM+ve$9zx-IVze=W0]tl1T$k(=3cBo2$OzVB!Tx-JCVve$xHx-J5Kzu8r\u0026k(=3cBo2$OwDlPFBo31Pv/P{qBo31PzVBUPaol0Nve$0wyYF2Dwb[jZaokQC05WZQxAhPzaol9QBo2\u003eLz2+WUve$9zASxUJve%*rC(O@!wDl@Px-JhOBo3vZe=W0]tl1TZq#*OiwDi?Mx-JkPwDlMEaok)Kve$fBzuaOPBo0A-vGl", "ln": 2188054 }, { "b": "wDllvwDlPFBo31Pve$9zaok*IBPuH-xAhPzzua+Ux-ISyve$xHx-J5Kzu7^VBPupVve$DJve$0wyYE(zvGpiAwDjs.aokdpzVy)WASxUJA@ZdVzVBUPA@Y+KaolAZwDliu", "ln": 2204698 }, { "b": "x-I#IwDllvaolrWBPuH-0d\u003e!Y0b}{H0aM1y0a(jR0bhBJ0a#oO0at\u003cI0aM1B0bhBA0b.^U07^f303znW0ce5Z0ce6J0cncU0cFoZ0aM1u07^f303znQ0cnb.0b.^P0cwh-", "ln": 2205519 }, { "b": ".HbZ@Z:9T[MSJWKn1dsb!(W/aQk:PJf$vL/gf$*d\u003e\u003cnGM0rr93dGxOK1onAqeDvv5eDvv5eDw9qmf2*TnDqG=aoi3a04!g504!g507u(.07l/f017pTeDvv5eDvv5c[$YO05sKb05%%n05ay905jEd05BQj05KWo04[ma04[ma04[ma03Tb$e=WTbe=W\u003chgYN", "ln": 2225470 }, { "b": "wh(C7wI^}bgH@ENiwAxCfL9aJv}5$5wN]yZvR64TvkoJBh!3qTvp.wOh90E6vpq97f!)b]004N+0rvWYm0SVUze0GRA=lhFm}DN7B8$]fvR*rBefE=ivR/:*oj-xifFCmsfFCgmfF\u003e:yfFCgmiw-AzfFCgmfG7QufFCgmfFCmsfFCgmh8m3Bg+*^vfFCgqfFCgmfFLmnfFLmnv(l84v{@\u003e6h^{faixpOewmvqHhdZwPw\u0026scUvkx!}gg\u0026sKgD3{B", "ln": 2253499 }, { "b": "l3^V]wIcL+wO#Q7BA]GkB75(LvpJ$Znm=QRwPy\u003c)vq{f%AW%mzzFsibvqGU7wKgx.zEU\u003evuTCL*06gbXh9(LhA+c\u003c{wmYU2x([RMo(\u003c-VlU{EFzGFiNB7F-ld)cskBvf\u003eUwO#PQB9RUkk4F2cgbYajiroapl3^V]wIcL+wO#Q7BA]GkB75(Ly?WD#Bv6zSwNEkyjv-$8rbVL-zBm\u0026xxK%wruTCMG002H\u0026075$$B-I4CnN#yIBzk\u0026xe\u003e{y}y^SbUw[+^!zGGP3y^S2MwO#Pujvsd2vru6Fy?WD#Bvf$!wKgx.zEU\u003evuTCJF002W[07Pt3B-I4CnN#yIBzk\u0026xe\u003e{y}y^SbUw[+^!zGGP3y^S2MwO#Pujv9E%B.L(crbVL-", "ln": 2266765 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.iakMm!0000000000[bKTP3JZXo0pR=A", "ln": 2432960 }, { "b": "y^8rnuPy8Mg5%Bzj#DXOg5%BTv}YB\u003cvlMLQuORQzwO#0#D2N\u003etz/d%KByvu\u003cuTCL*jy?(xvlMLQuORQzvR/%)yE@52hd6YC06CpkvpRLVuTCL*jAt1yz/PwLhd6YC06CafB8$=5wJ*", "ln": 5269622 }, { "b": "hd6YD06Csox\u003ezDJhd6YD06B.bz^(aMCw.knvpSqUA+eV@x(mMYwPJ0gBuRM?uO.WAB97\u0026hBuRM?uO.WAv}/)}wPz)7CYVbbuTCO?jv-$8p*[x^x([6czE)uUAboD3wmY^FwOtH}x(w3kk4m(agxoKqAaAy0wM9XVBy^:VD2vaQwm5X106Bt6x()]=z:wC\u0026zEU\u003evuTCO?jv-$8lVl{?l3mo.z/PMrvruj4zB!tEwmY^EB9RUkk4F2cgxoKnwNL", "ln": 5272276 }, { "b": "zEU\u003evuTCSF06B4@wO$N\u0026x()]TzGGDgzEEuBwm5X2huk\u003cfwPQjFv@DHcBv*vZz+j?*wPzV%y^8xpuO\u003cUvlVl*XB-.g=o*IcBni]0*hul3iq.*i*0b2\u003e+uQF%SBz(2cA.{^{C4\u003eF#wj{GVq!PO{h8UCQwPRoDB-RUyzdN-:A=lbnwmYpAwQdi/vkoX#0aQd)Bz(2cA.{^{C4\u003eF#wj{GVq!PO{h8UCEwPRoFzEWZjAcb/jzCaL^q!PO{h8UCQwPRoFzEWZjAcb/jzCaL^q!PO{h8UCCzEWZjAcb/jzCaL^q!PO{h8UCEwPRoBwPHjFv\u003e]]10b2\u003e+uQnmAm}lx\u003eh8UC2wPGQ:huk\u003caA+eV{oL4TNwKgx.zEU\u003evuTCVG06AU/CwW", "ln": 5276926 }, { "b": "B4{j/vpS!*ve%kqBwls*vpS!*ve%UKwPRu\u003evrt]TwO#0#D2N\u003etz/f8]ByteFD2[7sz7X[3vGp4LBydvJz^\u0026Y/wPRoCy\u0026r+.rD8+)vpRYvz^\u0026YjAbYxawi$9JvGokkxjTzCz^\u0026YmwO.", "ln": 5283029 }, { "b": "vqZf+wNP9Hq*ACawO\u003c50xMvV)wnb{]e(VI8wNP9HoMauI0b2\u003e+uQO*RzFTl1wb]eeB7!oZB8tucv}XUQq/)4\u003evqPN^l#No!y\u0026r-)07ZKownC*MzE(:Wz/!x=Cw.kn", "ln": 5288985 }, { "b": "zEWl]wN\u003e^qvrcB6zF8HZBz$b^zF9JIvqfK?wb]CmA=U@jxgv2Wy!eU\u0026A8HaZxjTLvx(4u\u003e08N9AB7]J8lVl\u003cWwN/*@z/eG}A+PA7mQZ1EwN\u003e^nvrccMvqfK?wb{mNBydsRBzbl6Bzkk[BzkVhmQZ1EwN\u003e^nB.\u003c()y\u003cx2#A=k=gwN\u003e^bB8$]kBvy7\u0026za4@Ex(mG)07?l0z!%l3v@#B6zBw5Fx(mG)07?l1wObT]wN\u003e^NwPRoJB5^9*wObT]wN\u003e^cD30Rs", "ln": 5289966 }, { "b": "jwog9wPI@SyHpBnvpK7!zF8BMwO+(Sjv%BlvqGT*ltQNIyFnC-BuTFEuQwghyIvW0mRMBIwb[.=wNPT\u003eoMa#]k5jIjlsBwtx(mMMx\u003eq9\u003e06B4@wPzj3x(v(*x(dA(pJZ+yyx", "ln": 5307158 }, { "b": "Bz(2cA.{^{C4\u003eF#wj{GVk5jIjlsBwtx(mMMx\u003eq9\u003e06AX/v@=\u003clBy!#QwQcEPuTDcdv@2^@xguPDy?9Jdmq=QQD2N\u003etz/eiVC%l1JuQwghyIvW0mRMBIwb[.[A:-{awN[eDzGGDcBw3g\u003ck5jIjlsBwtx(mMMx\u003eq9\u003e06A!XB5(\u003c)B7]MgB5cW\u0026C%l1JuQwghyIvW0mRMBIwb[.-zEWY#zdNQbvqFqHAcTS.uTDcdv@2^@xguPDy?9JdnPNEvv@=c$wD", "ln": 5307782 }, { "b": "A+P5}0cAl\u0026zGxA3A-MQ+x\u003egT]x(v(+C4CYmx\u003eg=PwO#0#D2N\u003etz/eu\u0026BzkVhB5c%\u003cA=L(8wDkXFnmuNMlVlHD07QQxnmuNMlVlHD0b2\u003e+uQY0Qz/Oi-wmU:cy\u0026r=KA=M8slVlHD0b2\u003e+uQF:JC#FT7AS", "ln": 5310166 }, { "b": "zdJYnwObv[y\u0026\u0026l\u003cwO\u003em:z/xodBA{R\u0026zdJYOx(){6p\u0026ZF[wPz)rpgn0J0b#%%AaK6iC$}^+wDl7PvqPMQqE%-OzdJYVx(4u#vqPMQxjVf(rc-B]zEEx[0cAH9wO${[wDlvOByd%RxK#3(0cqZ[uSgDFwO\u003e#Uv}Yp!y?mG%wM98LwO\u003e#Uls\u003cOCwPyZVxK#3(0af!SxK#3(0b2\u003e+uQOEwwPRG]rb3hX0aYUSwPRG]rb3hX08)DJmq=Tnx(9", "ln": 5314531 }, { "b": "x(v(/v@Dr$0aYUMvrDydmq=QQD2N\u003etz/eG-z/xm/wO#0#D2N\u003etz/eG-z/xm/lVM:DBy!0+Bz%@=B8$=5wL^z=AaK6ix\u003equ:v@Dr$07g^rvru6GwObv[y\u0026\u0026P=z/xm/B7occwDkwmC%#P", "ln": 5315423 }, { "b": "y\u0026%q*D2Nr{l3vo!p\u0026Zn!x([6jwMi}]wDkXFl2}0:CsDp.wN[wIBy/GgvqF[*AaG2ZwPRoJBy/q*D2Nr{B7GD2nPXJXrc-B]0afCZwO\u003ey(AaG2rzEWZjAcb/jzB58Kz/PMlxL*Z]AaG2nC5?H\u0026zGP!}D2Nr{wO#Tcrc-B]0b2\u003e+uSp@VwO$E)AaG2wB8L}}z!\u0026{4rc-B]06$^Gz=HW?z/eK1AaG2Gz+K.JB7E:ZA::67z/eK1AaG2nC5?I2D2Nr{", "ln": 5315888 }, { "b": "D2Nr{q/MRJB.bPsrc-B]0c9c)A^pSfAaG2\u003eD2Nr{q!PPWwDk8oze-{7wDlvOBye9.wPztZCw7MdwDlvOByd^OC4CX.CYmwqwDk2aADL#owDk2xB-I4ClVm0R06$:HzV", "ln": 5316412 }, { "b": "x\u003eg^zzEWZjAcb/jzDps?B7]Mgq/)4]zF5@Gz=QB\u0026B7]Mgq/)4]zF5@)wPz\u003caz/eG}A+PA708)#TA:-P(lVl\u003cWwN/*@z/eG}A+PA70aP}+zE)s1x(v(/BAh8kx8\u003eqqzGYPiBx0fSBAh8kx8(ySz^(WOxld0[A+PA7090(ovp%TWBAh8kx8\u003e[Hp?sV:x(!ufz/fR{BAh8kx8\u003eCkBw)p4x(mL-xjVf(l1:+DBw)p4x(mL-m}DNHA::63l1:+DBw)p4x(mL-", "ln": 5326942 }, { "b": "wNPX6A+ef[x()\u0026#090#:m}D^vCwheexAgOqxj}oTwPRoIvrl8Zv@Dj6B-.h9nmuNM06$NywO#3Hvrl8ZlVl*XB-.g=vrl8Zm}D^ix(mu}nmuNM07QQxmRM:Gy/tB@wNPBDvrl8Zm}D^kvrl8Zm}D^fB-IIlzGFATB7+L^wPRoDz/fVdzGFATB7+L{wPRoDz/fVdzGFATB7+L^wPRoCy\u0026r=Iz/fVdzGFATB7+L{wPRoCy\u0026r=Iz/fVdzGFATB7+K", "ln": 5328710 }, { "b": "z!0L.l$HBJA+O@#x)KtSy\u0026r=Hy\u0026r*006$NywO#3By\u0026r*008)#FxjTzCz!0L.mR)i*xHVYNvqFnDz!0L.rb#z+B7PuhzankSvqFnDz!0L.rb#z+B7Puhz9\u00265Sv}#6Kx(){6B5DN^vqfQ[zF8KUltQNIyxdsOvqZc#z/PXXB-.qdzGGP5vruj4zBeeTv}#6SwPRoJzGYD8x\u003efLDz^(H.ltQNIyxe6^wmZ0!x([35zBnL!A+fcgltQNIyxd*Wz!0L.xjVf(lT:\u003c", "ln": 5331183 }, { "b": "z2=}tx\u003eqg7q!Y=Nmq=QQD2N\u003etz/d\u003cSxk.*8BzbH\u003ewO#0#D2N\u003etz/d\u003cSxk.*8BzbH\u003exjVf(oj-xIA:-]My?EWbx([390cqZ[uRs%Qs8}.*l2pgLA+PSez2^{UwQdu$vq[IGxk.*8BzbH\u003evqGM", "ln": 5337674 }, { "b": "wN[eGD2N\u003ezxl4B1xLy%QA:-\u003cbw]zZb07QKol3mo.wO#Q7v{%E\u003cwj7x.Acc2hA:-{2x\u003e7a.vqZc#z/PW{nKEJzAcc1$A:-\u003cbw]zZb0af?*vqZc#z/PW{q/#{SxjVf(p\u0026Zb:x)1m)ze0)4zfoW}zddW6zfoW}mq^l+0b2\u003e+uQFHrv@3ddz2^{=B7Gw*A=lbnwmYpsxK$W?B9hs1xjVf(p\u0026ZbSvqGB@y*?A%wj73wv@3ddz2!S*Byd\u003c+wN/d+v%8P@By!#I", "ln": 5337881 }, { "b": "y\u0026r=Iz/fV9x(mH5B3T\u003e)zEV4Ly\u00260V)BzkVh07QQxltQNHB3+dyx\u003eqr[A:@^dl34r?v)+fJy?m9#x(v\u003e?pgn0Jr://!wKyxLy?m9#x(v\u003e?zEEx[r://!wKyxLy?m9#x(v\u003e?uVYZ?lVl^SwN/*@z/bLBwPQsOvp%E@B98baq/u/0v}wtFzFIQTy\u00260V)BzkVh06$apx)aijC#Oi+B3\u003c\u003eZy?m9#x(v\u003e?rDq!JB.bPsp*[xMzf56.y\u00260V)BzkVh0aP}-y?m9#x(v\u003e", "ln": 5343048 }, { "b": "z/ec:w]vVJA+PSbmq=QQD2N\u003epwkV#Kx(v(XzF0!!wO#0#D2N\u003epwkV#Kx(v(XzF0!!xjVf(nP5YWy?WACB-.qdzGGP5vruj4zB[.TzVA7AD2va/AaK5#BzkVhnP5cU08m3wvR6NKzF0!!rbU8", "ln": 5345406 }, { "b": "BzkVhB1Q3MzGP/cA:-A[wIcF:Bvy7\u0026zdN-@Bz(g1yiarhl2}0OC%#Q[zdN-@Bz(g1uUaa$zdN-@Bz(g1qEKDNz/5l(zdm6%m}DNHA::6dASv.4Bz(g1e[nykz/L?+A+frmy\u0026\u0026P!y?m9#z/L\u00260wO+{/Bz(g1o(B]-Bz(g1ltQNHlU{EFzGF/\u003ewmXeuv@=\u003clBz(g1lVM:DBy^\u003cKv@=\u003clBz(g1uU0.TA^qRCz/L?HlU{EFzGF/\u003ewmXhEv@=\u003clBz(g1ltQNHlU{EFzGF/\u003ewmXhEv@=\u003clBz(g1m}D^fy?WD#Bw():wKQGDA^qRCz/L?BA+eW3wKQGDA^qRCz/L?+wO#0#D2N\u003ezASxV\u003eASwyD08l)DnN#TGrb3hXo(*q2DuBmte(M\u003egA:-P(e(Mh10b2\u003e+uSgxO0cqZ[uSgxO08)rElVM:GwO#Q7vqF?MADL#owPH\u003c(x\u0026/1\u003cxM53nq^\u003c.EuVPT%06${NA+c\u003e4Bz(hdxjSXZy\u0026r^70a#", "ln": 5351260 }, { "b": "wLWhhz/6DfwPRG]mR(HCA@Y\u0026:Bye0/vpJ\u003ery**%$06$apx)aijC#O/)v}wbCvp%SYw]7)*A@YM?vp%SYlVl\u003cWwN/*@z/eG}A+PA7A@Y\u0026:Byd%TBAzkmxla5]wPRoTwPS3dzFa1\u003cA+flkx(W=}q!p5)x(mN80ax$ywNPU4pI%-xwPS3dzFa1\u003cz/x/jz/f01q!p5)x(mN808N9AB7Fo(A+PA7nP5S*q!p5)x(mN80cqZ[BzkS9A@YMTx\u003c\u003eT(z/Z2mv]Eq*AS", "ln": 5355362 }, { "b": "wMiO-wO$7SBy/ui0a]}YwM08VB.bSonP5SYzGC\u003eTlVl\u003c:wO#O\u0026xjVf(lVl\u003c:wO#O\u0026B7GD2lVl\u003c:wO#O\u0026o)7n]x(EH3BvHg?za4/Ovma%JBy/ui07p:HzFTl1wj7oMBy/ui07/N%Cw.knvpS}WlVl\u003c:wO#O\u0026mSir:rDq[AzEWP}wN[eDzGGDcBo1:OBAg/1Bw=W\u003eAbPSnwKyxNBy/ui08)#Wx(mMJz/fVdzGC\u003eSBAg@3z9@kVBy/ui08)#FBAIT(z!9AOz:OCXBy/ui", "ln": 5370546 }, { "b": "za4/OvnZVRB.bSolVl\u003c:wO#O\u0026q/)4]zF8\u003cUADL\u0026lBvf$:By/ui09abMi7!mgzC\u003e4=B.bSolVl\u003c:wO#O\u0026lv0V:l2}0OC%=H/By/ui06AC3uTEqYzGGDcBo2x.x()]+ByxiimrSlWBo3h!zdMmLzGC\u003evj#lLMAa9x\u003cq!ZL?nnh%-0cq\u003e2wK{JMBo2\u0026.y*?PWx(n1)xjVf(ltQNHmq=TPz!T9h06z@0uTDfszGx]uBZ]IWy\u0026r=KzE^Z8x(n1)xjVf(q!o#)", "ln": 5370826 }, { "b": "B7/Gl0b#%\u0026C5}LfAc2YhBo2@+Byd{:z/+#1z/oZ$l$G\u003eGD2N\u003c9mq=QQD2N\u003c9xjVf(q/(C*Bo3w[Byd%*vrcC\u0026x(mA%B-RnuwL#@OxjU1-vrcC\u0026rb#X\u0026q/(C*Bo1%BC#F/[A=.p%wQdh", "ln": 5371917 }, { "b": "zEWZjAcb/jzCaL^099#Gvru6Fy?WD#Bw():wLlPWmq=QQD2N\u003etz/eiVC(Rh!wQcZZv@=\u003clBzkVhoj-wGwO#0#D2N\u003etz/eiVC(Q]^vq[\u003eJC(Q\u0026ZCxdbhoj-wGqfuC\u003cC#d{\u0026vqPN$wPyBPC(QoNA=k$\u003ewQanyz/fV9x(m#+wQan*wPRoXA:-{awN[eDzGGDcBw3g\u003c0cqZ[uSRnRAbYx0lVl\u003c:wO#P.wQanzwP?0]z/PzPv}fC1zGFJ.C(Rn.v@DHcBn", "ln": 5377283 }, { "b": "000*B0b?\u003cP0cwiL0b.^U08@@z0b}{H000WA0b?\u003cT0bRY/0aV7r0cwiH00dR3fAr*cg5%9ggYPxkhukVoh#\u003e@sjPE+Fli6vMl\u0026YTQmGt{Unb#iYn=RG:oAm=!p5[5\u0026pYKt)qufR}q#/[#rSDh3so8F7s].[fve%:pv/Q3twDlrxx8(PBx-I(FyxeeJz2!CNzVB.RAr71VA@ZpZBPuN+Ck#\u003c/C(Sc\u003c02n@yBPu1Nw=MxxASx2rx-JCVwDhZ0o-PqoA@ZpZaok\u003cJwDi?Mx8(@LwDlcsBo2\u003eLASviZBo2$Ove$fBaolrWASviZwDlYIBPt?IyYCNTBo3jVaoja@05)QL", "ln": 5399326 }, { "b": "0b?\u003cF0bhBB0bhBA0aV6Y0cncO0b.^D0a=ch9E4Mo0bRZS04!g)0at\u003eu04!gX0b?\u003cW0b.^U00a%404!g/0cnb(0a=dF0aM1H0c[M-0cwiP0b?\u003cP04!g^0a=dQ04!g(0b8vv05sKi05:/TiD$JQ0bRZS04!gX0b?\u003cR0c[L@0cncU0cFoZ0aM1u04!g(0cwiH0cwi-0cnb(0aM1E0aV7v009yo0b?\u003cO0b}]r6(r}V0c!G:0a=dK0cFoT0cwiZ000sC0cn", "ln": 5402567 }, { "b": "z2^#A02X65v/Q0swDl=KA@Y2pzVBONx-ISyC(N*LqVH[tve$rFBn#pImf4Mjz#:OLASyv+02nrgwDl-Jz2!nIA@ZmYx-J5Kzu6UEoAn#hx8(MAx-J2Jx8?]xrSDXhAS", "ln": 5410910 }, { "b": "0b?\u003cP03znW0b}{W0bhBK0b.^T04[lLmmd5-0b.^O0b?\u003cV03znM0b.^D0ce6+0b}{W03zn=0bhBP0b8vJ0cFo-03zn.0b}{H0aM1y0a(jR0bhBJ0a#oO001lw0a=dK0b?\u0026", "ln": 5425047 }, { "b": "zVBkD6NfQf0bRZS04!g\u003e0at\u003eB0a#py00UZ?mf3l^9ZY{v0at\u003ew0b.^J0b.^H08iDi0aV7v07N2R08iCglJy^1ve$0wzuawJzuaqHo-P8iwb{fv6Hz^!0ce6+0b}{W04[mZ0bITK03BMcyYFLSwDl-Jzua8BBo2\u003eLnc0MdA@ZpZo8@J6C(Pr(0a=dK0b?\u003cW0ce6H0a=d90b?\u003cV08-/d0b}{O0bhBy0at\u003eH0a=dv00FI!000cQ0rrack(=ihBPuBZ", "ln": 5516796 }, { "b": "avo).vJY-6A=#ebwGUP6AV/BBz/PMfxcpU$zEENhayPd#aARgtBrCa5Byu^earR^HarTc(AV/Eqx(+zqwO+{^B7DFnwO004z//Miat1ZHBAzFyiXJd0x([3hvLheez7!h3B-I4Dvs06pwI4$lyB%dpAXhfuBt49tz^\u003ewpvqfQjB7x5tB98tvvp%c", "ln": 5564259 }, { "b": "001\u003eS00Ao400L-gv(udRpJyeZx(mu}l$7gCoL59OBzgW!pJyeZx(mu}l$7gCoL59OBz7TOa]}VB0000alUQHMwPz)7CYTA:zEWZjAcb/jzBv]Pve{oP0rrf3000:ez/eG+wOUZ-y?k$FAa\u0026*6By/Ys2U!(LvpS!*ve{om0rrf300002000(q00961009700U4Ciy\u0026sI(B.(elAbo7=2MT][00000044ZDkMy=:0SVg34ma/Dz*a]#y\u0026\u003cxgy?i", "ln": 5604024 }, { "b": "C$hB/pgXV(lUG[Ay?mG%wDkbbByv\u003cKyH)GBvqxAOnP5Y\u0026yH)GBvpB4:07g^rvru6DB9RUkp*[0FvpB4:07g^rvru6Svp%dWvR/PQm}D^hzGY-mz/fA6zGF]/A+O@\u003ey?i", "ln": 6664002 }, { "b": "vqGU7vruj4zu94xAcT#@Bz%J*BzbPkx)Kifx(v\u003e?l1t1Jz/bLND2[7sz7XZ$w]83*BzkVh07/K@y\u00260V)BzkVh0b=jZwMAkQB.9{Uy\u00260V)BzkVh0af?Rxg3PNy?m9#x(r", "ln": 6674673 }, { "b": "A@VgNCMoq}z2!RSeDxqYve$xHwDh-AqVHFhve$rFwDllvo8@J6C(N*DiSGd0k(=3cBo2$OzVB!Tx-JCVve$xHx-J5Kzu6UWlJz38zua+UwDlPFBo0()mf4i9v/QAEwb{rzzuaqH0u\u003c/gzVBUPBo2\u003eLzua+UeDwDAve$fBx8)5Ove%{uwDh-ElJz38zua+UwDlPFBn", "ln": 6695312 }, { "b": "z#:$Wx-J5KzuahEve$xHve{\u003cd0cFoT0bIT40bITN0aC{xCMoq}z2!RSeDx!\u003eve$fBx8(Gy20\u0026kT08\u0026\u003eslJy^1ve$0wzuawJzuaqHo-P8iwb{fvm/U)Ro-M1$0b8vv0bhBJ0bhBJ0a#pa0b?\u003cF0a=cAli6vMASyv+z#:$We=YzZyYFnKavc0z0cwiL0ce6S0at\u003eH0a=d30b?\u003cU0cwil0a=dQ04H\u003eDwDl=KzVB[WASxOHwDkE9zVB\u003eVqugndz#:XOx-ISyve$xHwDllv1E5]!00A", "ln": 6717528 }, { "b": "Bz\u0026puzE\u003c@ew/%x=B-I4oq/(}#vp%d0B0bKnA=#2mePUSpwGUM4v@=\u003clBzkVhaAIEqB-.tozGvAMq!oI.xMOuniXJc{yHF\u0026jB1Z%FB98tvvp%dYy?WD#By/u1A^qRCx(v(#y\u0026r@ew]zYjzeTDaay]59vqfL0e=U\u003e]0rrf3000v5A+Px0A^pV9x:^{Kv@Dl}vrcS[A+LHN69e7m00006p*[x=wN\u003e)vvrRXK3ipbd000020rr9c0rri4000010rr9e0rro6000000003101n(d1onA400001000De00Ju", "ln": 6733843 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.iPOgQK0000000000[bKTP3JZXo0fvG", "ln": 6848448 }, { "b": "wDjs.wb{ACyYBCnQYrTW0rt^[wDluyve$9zlJz38z#+d-ASx!Nx8(PBBn#pvlJz38z#+d-ASx!Nx8(PBBo0A-c\u0026^-Sdf7E\u003cg5%0dfAr%gaoi$[aojd%fAr\u003cdfAri}m/Wl6ve%^qzVBROzVy)WqVH[twDlJDyYFOTBo31Paoksuv/P{qyYE(zaoi.*aoj+ezV", "ln": 6853680 }, { "b": "ASx--ByefZvr8u[wNPPVlUG[G07gBdzF9JWD2Ns[v{%gZASwNEA-lERy*?t:x(^i.vqGv)0cqTUy*?t:nP5Y\u0026yH{jKzdm6%07/T#A=2lbp\u0026ZF$x\u003eg^}07?6HByx5%wKpJNy?d9$0b2\u003e+uSgJNBy/u1wKpJNy?d9$07pygvrDydq!o\u0026*wO#0?luN0UwmY=YB7GlhwO#0?luN0UwmY=Yq/)4]zF8pUx(4r\u003eASwi=Byex:B.LV5wPv=.z!@@}ASwBuzE^s007y^qz/Pu0o)7M2vqG+9mr\u0026rUB-RnuwM9eZl2Hj6A=l8tl2{Kiz//02wN[+UxjVf#wPv=Iz:!wZxK#h:wODm1wD", "ln": 7388038 }, { "b": "v{%E[z/d\u003cSx\u003c(5.vqGT^A@XHpwl9nZvSIJ)wPzm30b(*#x(v(/AaJK208[e:By/qwl${7xzF%Prx\u003e8h:m}D^ix\u003eq9\u003eA@XZwBwls*xM4B508)\u0026Fv}/K?v{%E[z/e6/vrb[108NYEAb](bwPI{hAZ$mXA+6j\u003eq^\u003coHm}D^lzGGDgw)]gXA@Z92zdm6%pI9KAvpJ\u003e\u0026090#Ex(4H3xh-+Tv}xYYxjVf(lUHyLv}xYYv}Y^{v}xYYq*ACawO\u003c4$BP", "ln": 7390442 }, { "b": "0uAP?aol9QA@Wr.ASxUJAr7aYx-JeNwDllve=U(:li7{7Bo2$OaoksuwDl/Lp5[Y5z2!bEaok*IzuahEaoj[iASy1TBPuvXaok*IASxUJaoloVzVB\u003eVaok*IyYFnK", "ln": 7403692 }, { "b": "BZXS=Bz$Vax\u003e4cOA=M8sw{503090(gBZWNLy\u0026r!-vqG:#v/PIFr://!wL3zjy\u0026%e=xMvV)wb]CGB7!J^A+eV\u00260b2\u003e+uRK%yzD7p\u0026wNP9HrbU-HA+eV\u002607?lhxMvV)wb", "ln": 7656321 }, { "b": "BZXS\u0026wPRQ7z!/t?BZXS#wPRQ7z!/t=wPRoIz/oz=vrlh:oM:=mz/oz=vrlh:y\u0026%e[xjVf#z/oAdvrlh:l2pvQv[oaaz^)c\u003e07I0uwK]scz^)c\u003e07QQxm@i9MvqC{xwPQBUz^)c\u003e0bM^^uUr}(xkzG}vqC{WBZXS#wPRN3z^)c\u003e07QQxoMaAHyYEyBBwcQ.vqC{WBZXS\u0026wPR:bv{%fNy\u0026%e[B7GDfz!0i(08l)xB7!##07QQrwPzj3x(v($yYE4A", "ln": 7659182 }, { "b": "vS=o{wPv=EB-Rj/zGGD5wPv=rxK$W?nP5SYxjV8-rbUuCBy/8@ASwWLnP5SYxjV8-qEK=twPQHYBy/8@ASx0CCt\u00266{nP5SYxjV8-pJgzEzGGD5wPv=!BZXS@B-RkgzGGD5wD", "ln": 7660488 }, { "b": "BzkSmwOkN{08)DJq/(O\u0026o)7n]x(E)5wPv=Iz+LpZs8@1%wPv={A+PSbASx6SmS\u0026PUBzkVhp\u0026y5=By/E)m}D^gwO+{\u003cvru6Iz/Or\u0026zEW^5z/ex\u0026x(n37ASx6Sp\u0026y5=By/E)y\u0026%e[Bz(bpx(n37ASw^QvnZVHx(!xcASyn]ASx3KASwBAASwyCxlw65zGFr/A=k%#y\u0026%eWuUam#z/L?]BZXS*A=M8s0bM^^oKz)!AaJQ3A=k%#y\u0026%eWuTW$/wPz*fASxJ:y\u0026r/(Bz(g1e[o0wAS", "ln": 7660634 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.inmh!z0000000000[bKTP3JZXo03z", "ln": 7684032 }, { "b": "yE92!zEVaMB.$YgvpB4:mr\u0026]=zGxJgzGt!\u003cwPRoNwO\u003e)/A=Rj$wO\u003e)/A=RjDBAzLqvS=^7raf/WwPR$[xjVf(mq^i/C#eA[zGC(1wPRoFzGG]Ap\u0026y5=Bn#pv005X3-/[K(WNc9n66b8:Z!\u003e7maoqGG10vNA1T0*D5Fkc*0rAVlaozMN4G))P0rJAE0rA=U1T0*D5M5?TDLuC7e.%oOPA3kq00E/L0f^D-00SG8001nA08=-Yf-RsR009620856++xK", "ln": 7694242 }, { "b": "1{22gC)1t52({U424m/rXDA9\u003e3\u0026*\u003ez1#cnYaQeef3\u0026\u003c#C2b8Fa\u0026rxHN09/H7Ul1X7=DtQ\u00260rr91KPkvYy/tR2By/qwqE%]/B-H#6B1Qv4B8Mhwv}wLHvpS}\u0026efF!Jv@Dy7x\u003c@Ror+lq)x(v(Lg+HEmfFk4gavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4jZ{uevkRKLhzEiFg?wv2iu}EFB97#ge(Dn4z/{8gwPGF4B-8qnzdMQRB8Mhwv}wOIBohBx00Ao40000008L%Hp^EGC9haa6}H=P0eInK:ze^fGbldYzp5\u003em]R2QF}00000!bYKH9Z{6H0ce6T0ce6D08rJj08\u0026(o0cFoZ0aM1u0cnbu0000CnDrSdB]U}JyYFeHwb]v8BPujT", "ln": 7718524 }, { "b": "z/ff3xlwl6BzkVhluN0UwmY=Yv@Dl%x\u003eINevruj4zBeFWy?d9$0aH7+y?d9$08#pcw[CQ{0aH7.w[t#.xjVf(qE%]/B-H#6o\u003c}{FxjV8-B6\u0026%0B8Mhwv}wwyzEEf?ASwV#z/ff3xlwl6BzkVho\u003c}{FxjV8-qE%DKA+fb#wKyxUzGGD2p\u0026ZF$x\u003eg^}o\u003c}{FxjV8-uVp47C4\u003eF#A.P$Wvp%d(07pygvrDydnP5SYA=t@kvru6\u003eq/)4]zF8HGzE^M{ASx3WA+Py", "ln": 7768233 }, { "b": "wKguSvr\u003epTwO(0@Bw=WZ08[e:By/qwqGV(0x(dAlr+lq)x(v)6zF5@twPQ*YB8Mhwv}wOXA+PA707QQxlVl\u003cWwN/*@z/eG}A+PA7090(nBAh8kx8\u003eCkBw)p4x(mL-wmYvYB.(d#BAh8kx8\u003e\u003eMvSMTix(mL-rc0mOwPQ\u003c{x()\u0026#08N/VxAhWRByd\u003cMBz7Uxy?#WWAbP=sq!oxTv}XXEBz7Uwz/ff3xlwl6BzkVhp*[DV07QQxp*[xQzGFY-Bz7U[vrb{%", "ln": 7818351 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.i:Nu%Q0000000000[bKTP3JZXo000", "ln": 7835584 }, { "b": "A:-/@By/Gl0b#v!vqPN$wPz?(xjVf(mriA!A:IK-y\u0026\u003cxgy?lBKA:-/@By/GbDsZROz/fSrA=\u003e(lz/P[0m}D^fz/fSrA=\u003e(lz/P[0m}D^jwO#71x\u003e6CHxlw65zGG}1xjVf(m}DNHA+P2.D2NsXA+xJiwO#Qh0b2\u003e+uQF:HB98CBv@#Tfl2{QXzdNQbA@YiYx(mMYwPI^jA:@VNwQes%B6\u003c6hx(mMYwPI^jA:@VNwQes%lVl\u003cLvrqG\u0026wPI^jA:@VIz/PW", "ln": 7893122 }, { "b": "l2Z^OzE--WwPRoLx(mCYlT:!Eq!Zt+okeoO0cz){z*a=+lT:!Eq!Zt+ph+kzz/]@d0b2\u003e+uRL9NxM4zYm0SVUze0GOwPRQ7wb]tjyH{1EzE)\u003c5v[*JRxM4zYm}DNHA::63wkcSSxM4zYm}D^wD2Ns:A=k!=vqYQ(wLD-TxM4zYlT:!Eq!Zt+qGV(0x(dAVwPI^aC4CX(wPI^aC4BxVBzbP60b2\u003e+uQ[WHo\u003ewAWz!5\u0026DBywV{m%elXwb]$TBywV{m/", "ln": 8078299 }, { "b": "o\u003c}:N07gghy/t4\u0026wKyctx(i]Tv{%g\u0026q!Zt+lUG[xzu9pEx(i].z/Pu0r://!wMi}]wKyxNC4CYnx(v\u003e?oKR^Ewmm]KAb]JhB7]Mg077*xy?cEOz/xn#mr\u0026=(wPI{bz/bLwB.LV5mr\u0026=(wPI{bz/bLxvqG:Ux()]:B-8qnzdMQRB8L(rwPyvWB97\u0026dv}w8NAb]JhB7]Mg077Huv@1ITAb]JhB7]Mg07gWxwncd1z/f01mr\u0026=(wPI{bz/bLHwPRQ7wj6^w", "ln": 8084145 }, { "b": "x()]:wPJ0gBvfFDxK%\u003eQv{%E[z/bL+vpJ$ZoMaAHBzkVh0cz){z*a#{lVl\u003c-BAg/7zGF][z!@\u003c7x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zz1v{x(\u003e$0oH\u0026ViwPzj3x(v\u003e?xjVf(l2{WYC#53FAaJ]SwO#71x\u003e77MA=#ebwLNe=mr9DUy^A8QBA{U]pJf(.m}DNHA+P2Pze:r5zdNQbvruj4zuarXByd*.wO$1HzE)\u003c5v]D@VC4\u003eC$qE%\u0026\u003cx(W^apJf(.m}DNHA+P2Pze:r5zdNQbvruj4zu9P", "ln": 8084587 }, { "b": "v}wkxwO#Q7w[+*%0cqZ(C4\u003eC$nN#yIBzku3wPv=swObv[y\u0026\u0026l^By/Giz!@\u003c7wN[.YA+PA7nmuyDy?mR!raf\u0026-q!6GLwozZ1ASx6:AaI^MzdMmHy\u0026A%a090SLz*a--y\u0026A%a0b2\u003e+uRbrewO#71x\u003e6$FA:-/@By/E)lT:}QB-I4Yx(!liB75J]wL=/QvqPN$wPv=Hv@Dr$p*[xMzdN*2ASy5!A:-/@By/E)lVl\u003cOx\u003eINewN[?Iy\u0026%q*vrliICvticwD", "ln": 8086472 }, { "b": "A::6dASv.4Bz(g1e[nykz/L?Ux(!0glVl\u003c-BAhIlBz(g1o(B]-Bz(g1ph:VOlVm9+BzkS9r+VR?Bz(g1mr\u0026=(wPI{bz/eP\u0026B7]-mASx--BydQSC42i3wk^5WC4\u003eC$l$HBHA+PGmz/L?zAbYxawk^5WC4\u003eC$l$HBHA+PGmz/L\u00260wPz%dv}w5tB7ol8Acc2s07I0Eza4@Rv@=p5Bz(g1wmY*(A+PGmz/L??CYmW6pgXSTA=IdCA@Yc:B97#ge\u003c%zZxkRTeBn", "ln": 8087038 }, { "b": "z!8dQBAh88B-.ho07QQxlV)D(z/4^ZBAh88B-.ho0b2\u003e+uQ[WBwPzG{p*[xMzdN*2AZs!?A+P09By/H[q*ACawO\u003c4$wOb:\u0026v@#B6zz1+ax(dNax)a6e077yqwnb{]mR(HCA@X)Lz!\u003cGmmR(HCA@XTLwO#P*z/{8gwM9eZBzkS9A@XTLwO#PSz/6u1zE=gVwO#PQA+xB[vrc1406AC4uTE[*x(:nMD2[7sz7Xj\u003cvp%E@B98baB1P*#wmX5AvqHjgx(:n!wPRoBv@VT9A+e=P", "ln": 8087931 }, { "b": "qE%}Irc0mOwPQ)WA+w%90b2\u003e+uR9{!w[D9}Bo2@+Byd*Qw]?K907?6rA+f90zGFV^w]?K90b(EYB7GB[q*ACawO\u003c4$wOb:\u0026v@#B6zz1v{x(\u003e$3x\u003eIa3Cv+G3xMKkwz/ff3xlwlal3D:KBo3k#uRb9Ny?Wx[Bo2l+B97#ge(Dm)y?m9#x(v(wmqV:X08v9Hl2}0OC$z)/Bo2uQB7]Z@mr\u0026J*07q9IvqPZ*o\u003ewAWz!8gSx(4\u003e\u003elT:!Eq!Zt+luN0UBo2x.x()]+wPz%dv}wFSz*2\u00269wPyaWx(4\u003e\u003exjVf(l$G$sB.(d1m}D^yvqH6$pJw\u003cmw)]*#Bo2orwPJ0gBo1(#B9RUk", "ln": 8089286 }, { "b": "x\u003e7*0x(+zrwPP57C{3Tew)]*#BrC^vwO@R!BZ/f3B7!J[x(dY#wiC3PB.9fFra]YZay/7@v@0i3zF0*czf3?gwP?T3z/xodB0bWuwO@SjxK#l@azkn6wPzG{aAR)FwPF#8z/c}AazthbwGUG3ze-{9x\u003c$)\u0026aARTrzeB08xcpS2zF%S9BzkVhB1S1e", "ln": 8105502 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.i/-qMG0000000000[bKTP3JZXo0pQ0", "ln": 8146880 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.i-oMrq0000000000[bKTP3JZXo0006", "ln": 8388544 }, { "b": "0bISJv/QJHC(R^-Bo3B-x-G:=wb{ACyYCeW0cncX0b?\u003cN0a=c.0aV7C0bISFx8(Dxx-G{?g5@{bwb{ACyYCk:0cwi.0b}{D0b}{L04[mZ0bITK02PzIz#:LKyYFzOve$lDx-G:=wb{ACyYCq/0a=dJ0b.^F0bIS\u003e05sKb0aV7C0bISLyYFwNx8(\u0026IzuaeDyY", "ln": 8714314 }, { "b": "x-G:=wb{ACyYCe(0cncK0ce5}05sKb0aV7C0bISJB]V7NASydXx-J5Kzu8o?wb{ACyYCw$0a=dt0cncU0aM1A0a=dL04[mZ0bITK02x+UwDl(NBo2.Hz#:OLe=YzZyYFnK7iY:)0b.^I0cwi.0b}]\u003c0aV7C0bISFCk#sSzuaINz2=f*wb{ACyYCe[0bzNQ0aM1B0bhA=0aV7C0bISJCk#BVwb{3rz#.V]g5@{bwb{ACyYCe[0cnb}0abZZ05sKb0aV7C0bISLCk#Z+A@YRGz#:OLgxofge=YzZyYFnKi8Y*50cncZ0a=dE04[my08AOE07c:80bRZP0ce6J0cncY0bhBK0b.=?08rJ50cwiP0cOuN05^:QC(R)=Bo2\u003eLz2=f*m/Wu9zVBkDve$9z", "ln": 8714730 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.i\u003e\u0026hSy0000000000[bKTP3JZXo0mg-", "ln": 8753088 }, { "b": "j$YAGwO?ACD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtDx(!wUq*ACawO\u003c4#BAh8kxfE}XwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jx3JDBy/qwq/)4]zF8c=B7GD2nPXJX0blK^z2^HWB97#g090#Mz2^1xB.}aAB5N3^zu94AwNPW(qE%oEpI%#]q/De.07?6Ax(mGFA=LPll32}nvpSeKy\u003cw@#vqV6^Aa9R:xjVf(rbVL-zu9l}xKL^\u003ewMiO-wO}Gnz/6DiB7]-clUG[CxjU4XyH}w-lT:\u003ex", "ln": 8986697 }, { "b": "BzkVhaA8cuCxdztx(mMaqGV(0x(dA7l${WMv@#BdwPF#az/M$px\u003c#9\u003eA+P9aefF[FwNPT\u003eaA?Eux(\u003c^\u003earR^HxMOuniXJd0z.t)vv@=Hez!s8zv@Diqw{n69zFH)\u0026oLFxWnKLY$iwAJGisMrEeJ%QJjvA[7wN/*@C4C.qCX}nmB3gZXBAzE.fe4xRxK#3?B1Rrzv@=Hez!s8zv@DiqzE){4CRp*af/7Epf!WxPBywY*ByuvS4gjj2jwoD#A::0lawMuZwJ.kix\u003e8g4B8LVje\u003eGN", "ln": 9231909 }, { "b": "?#+5J@D(wVZYN@{000000000000000aoiI:aohxwaoiI:aoiI:A@ZmYxAfQ:v/Q6uASygY@D(qU@r04Z@D(wVZYN@{@D(kS]v0-t]+NS7@r04Z]8!#)]Abb]]-Cl", "ln": 9767208 }, { "b": "wm5X1g5$r}wPxNZ08(EbBtCVLo)7n]x\u0026N-xBtCVLqE%oEnP5Sag5$o]C$hB/nP5Sag5%B2iBubFf/Aw}g5%BhB75(:z!\u0026{4qE%]*z/fScp\u0026ZF[nP5l:k4m(af!\u003eN[g+]4[lJ", "ln": 10739736 }, { "b": "zF0P}l3mo.z/PMlC$z)=z:33=uORQzBy/rdj#DXOg5%BMz!AY]AY#u/uORQzB97\u0026hBw#%:yJzV%uTCL*jALHSwO%}Own(E3zGF@]BzaJ]wPA5)vrb^[B3qD*uORQzx\u003eggYyH}xJvpJ$ZnPXJXB3qD*uORQzvq{f+z!\u0026{4p\u0026ZF$x\u003eg^}p*[xMzdN*2A=TA4uTCL*jAt1MB.bSop*[xMzdN*2A=TA4uTCL*jySCyyH}Qej#DXOg5%BJzFsibvqGU7wN[epv}YBDwQcTYze:AhwO#Qhj#A", "ln": 10742618 }, { "b": "wN)K@st.=)lUgpWx\u003ez6?vru6o0c*vPiyvv#Bzku3v{%E\u003cg5$3.v@=Hez!s8znN#yIBzk\u0026xe\u003c\u003cC?wO#PxpEfbBxFGN2wPRoJBy/qA06AC7uTF1$vq)$4wnbK}g5#ukz/^-mju+=juOTAAf/5!(l1BzurDz.(nP5cUp\u0026ZF[nP5l:k4m(agbAn(gxoK3iBubMhd56]06A[=A:\u0026Q2z/X\u003c1AbYS8zdNQbvqF[Sv@2T$p\u0026ZF[nP5l:k4m(ai5H", "ln": 10744102 }, { "b": "v@Dl%x\u003eG.OBzbPkx([R(zF0/Jhd6YD06B+1v}YBLwPI{bz/eoTzEEf?AY#u/uO.WAy\u0026r%0wPx%(uTCO?jy-quwMAw.x\u003ez6\u003cAY#u/uO.WAwmY{#v}w2CwmXXHz/xoej#DXOgxoKJwNPaXA=TA4uTCO?jy@zNx(XcfzdNQbj#DXOgxoKVz!\u0026{4mq=TPz!T9hj#DXOgxoKUCrN(\u003euO.WAvrDW9z/PMlC%j8)uO.WAm}D^pwPRu\u003evrt{wvQAE#06A+.BwDQYv)LfYzEU\u003etuTCO?jwoEgBy/t?z=pv/xkzcSwPq\u003c7B96Y=wkV#WAbPS8l34r?v)jveuO.WAo\u003e!9Tz/Y\u0026eBs{c}wO#Q7BA]GayY", "ln": 10746650 }, { "b": "p^GkCxK#76x\u003e7N[x(v(Xl\u0026Z.nA=L-cvruj4zB)j@l2Z^ml\u0026.vJwPy:YzEEB8nKJL\u003ewPRoDy?WD#Bv!\u003e2B7GD2lU{EFzGFDr0aP?VwO#PYl\u0026ZdOlTJn?q:\u003c5IogJt:px", "ln": 10758388 }, { "b": "A+PSbl34r?v/O@xwN/\u003e8wKgx.zESVjv@VT9A+ei*yH}xPzGGDgvpKy[C4A%XD2v9(qE%Y-C4A%XD2v9(qE%oEl32$DA+PA7l34r?v/PFGC$hB/rbVL-zDg:(zF8BSv}!kID2v9(q/(}%oMa/YqGV\u003e{x(mMWA=kD0B8%]\u003cs7L\u0026bAa}QVD2v9(qGV\u003ezA=k-8A-V%%xI08.Byx04rDq!tB9RUk07?6IwPzo(Acax*BzbPkx)Kifx(v(?A+N*XD2v9(mRcWKxA", "ln": 10762883 }, { "b": "08mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEH5rbVL-zBm\u0026xxK%+MBy/GgvqEL^wPQjFv@DHcBAo-?D2v9(m}D^dB9RUk09rPyBu%$[zESVlvpJ$ZrbVL-zC\u003e4!AbPSnwKgiAlVM:DBy^:XBzbl6Bzkk[BzkVhqE%](y\u0026?%:D2v9(l1s[Sx(W=:z!\u0026{4q!Z5VzGFf=D2v9(mRMWXwPy:*yH}y8lu#1qC4\u003e#nzF-%5Bu%$[zESVpwPQTTCTMEW", "ln": 10764852 }, { "b": "B-8p%A-Ef(A.f^wxjVf(l1szyB-8q3B7Gw-wb{WZBydszv@DHcBx9x[A.f^wm}D^zx(mE1Ct@l@wNPaCA=kD0B8%]-07QQxlV)A\u0026wO#P^A=kD0B8%]-0bMQ+CtJr#v}x.5nN}*lwPRoPvRPE:Bv*0yB7GD2pHX6Iv@$pM09r(RxJoa+AZs+/x\u003eIr{wkuVHwN/*Nwb]eszdMHLygQ)%", "ln": 10766971 }, { "b": "Abok#vruj4zCj$YxjV9EyHpBnvpK7!zF8BMwO+(Sjv%6{zGGPmC$-c?xjV9EyHpBnvpK7!zF8BMwO+(Sjvs3$wMAw.x\u003ez6\u003cAZ1nCuQwghyIvW0mRMBIwb[.*yHZ{yz!9AWwPzG%x\u003eqrGyHpBnvpK7!zF8BMwO+(Sjv%6{zGGP8x\u003eqrGyHpBnvpK7!zF8BMwO+(SjxlokADL?*vRPE:Bv*1OzGGP8x\u003eqrGyHpBnvpK7!zF8BMwO+(SjxlokADL?(wO}", "ln": 10780580 }, { "b": "z!\u0026{8mr\u0026rQvqYZ?lVl*Xz/fc7BwE6\u003eA=L(8wDl7CB-.p:z!9ASwPq\u003c7B96=/ze:AhwO#P=C4CYmx\u003eg=PBz\u003e@azBFCNAbPDdBwE6\u003eA=L(8wDlgWz!\u0026{8q/)4*By/9gpJ*q\u0026A+P5}0aP?VwO#P*BAg/iwOlo:C4CYmx\u003eg=PxjVf(l3mo.z/PMlC#5P{A=L(8wDl^.BydsRBzbPkx([R@C4CYmx\u003eg=PqE%GPz/f01l2Hj0B-.qnA+PSvpJ*q\u0026A+P5}0b2\u003e+uQF:xwD", "ln": 10788334 }, { "b": "B.kk%A-lyUwK{lEwnC/SqGV(0x(dAXD2Ns=vqYQ(wDkRty?m3@wK{lEwnC/SlU{WZwK{lEwnC/SlVM:GwO#Q7vqFFyzE^M{07QQxrc-B]mSJA:nmuyDy?iPoA+e/HA+e=)zGGP3y\u0026-cQzE^M{06$amB.L(clVM:GwO#Q7vqH0QvqYQ(wDl7EA+e=)zGGP3y\u0026-b", "ln": 10793388 }, { "b": "A7\u003c?^wO:.xy?%8)wPRoUwPI@WwOb\u003e3wMiO!oL5xUy^RSEyYFx\u0026wIV7]wnD5Zm}ur\u0026ga)9NyYEjwByxc5gCQN[y?%8WwoIy2x!}H%wnD5ZyH}K7wO:dTe[w^m0cq*+y?$).e[w^m09a8KAX/E6wnD5ZB-RbmgCQN[y?%8)wN/\u003e6gCQN[y?%8?ByYi7e[w^m08mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEHwy?%8sy\u0026sDbq!P-UyYE4qwO#Q7BA{Y6z//]cz!@9=xk8l-A+[G[y?%8zB8I", "ln": 10813404 }, { "b": "A-lKVph:6Nv}XIDD1gI@x(i]^wQd^0vqfPVlum0WwPyjWA=k$^z/5]%zuai=zddc@07H)Ev}wtLxk8k-nPN)MwPy7Ol1B?Dzu9pEx(i]EA=k[(vqPN.wQ5fdA+fr0z/bLFwPzlUg/Wj/xk.U/oj-cMlUgpWx\u003ez6?vru6Vg/Wj/xk.U/oj-cMoM+5WoMaMZzu9svA:?%:vrcDSvrb)Lz!B0a083)zvNBZEBzku3v{%E\u003coMaMZzu9svA:?QTBy/G3v/", "ln": 10817858 }, { "b": "zVBAYByd{OCscgXwO#PYzF0!!B7GD2qEK=py?WD#Bv*vZzVB/^CscgXwO#PYzF0!!uT)[^wO#PYzF0!!p\u0026ZF:wPI]\u003eByxiinP5cU07g^rvru6LoLFM\u0026nP5cU07g^rvru6Ox(!w/zF0!!lVM:DBy^:UA::k+zF0!!lVM:DBy!3ix\u003e8m0z/f07C$z)=zVAdBwNPW(l${dMx(v($A^pk]w]vVZwPRoBB-.qnA+PSvnP5cU0aP}+w[+)zB-.qnA+PSvnP5cU", "ln": 10825118 }, { "b": "ASyb\u003eADL\u0026lBzL(dxjV8-lVM:GwO#Q7vqF[*AaI*!xK#h:l3mo.z/PMlC#P6dwLWzYwPv=?Bzbla0b2\u003e+uQF:xwMAw.x\u003ez6\u003cASye(BydyNwmX!MA+Pc1wPv=-wPRoQyHZ{yz!9AWwPzG%x\u003eqq+B7GD2p?%MLlVlHDr+lq=w[+*%09r(RxI-FOwKyxDwMAw.x\u003ez6\u003cASxD=yHZ{yz!9AWwPzG%x\u003eqq+m}DNHA::63lVlHDr+lq=w[+*%0aP}TwMAw.x\u003ez6\u003cASx--BydQIwO#Q7w[+*%08)/UA:@VLwmYU2x\u003ez6\u003cASx9Sx(OobnN#yIBzku3wPv=Vwm/)OwmYU2x\u003ez6\u003cASx--Bye3=x(OobpHX6Iv@$pMwO#Q7w[+*%0cqZ[uSy#TADL?*vRPE:Bv*1OzGGP8x\u003eqq+B-RbmpHX6Iv/", "ln": 10830049 }, { "b": "08l)io\u003c}:Nra{q-vpSqDxK$Z%y?mR!zdc{GvqfQUxMvV)wk=#KwN]}1wPv=HBywcSB8aY:xK$Z%y?mR!rax(vx(!xczE)?*q*ACawO\u003c4{wPPK}BAzE}x(!xczE)?*xMOunoLFM\u0026wO#7109zQbzGGr3zE)?*xjVf(rb2\u0026TwPQpTzGGr3zE)?*B7GD2rb2\u0026TwPQpTzGGr3zE)?*oj-cMwPzZgrb2\u0026TwPQpTzGGr3zE)?*Bzkl2wPQpTzGGr3zE)?", "ln": 10832342 }, { "b": "uSpPOvqZf-A=kM7y?mU/m}D^wwO${]BwN0@w[=6)A@Zq[zEEB8p\u0026ZF^x(4v407pmqwMiwXwM9X@y?mU/n][]*s7L\u0026lwQd9XA:-/@By/F/vqPN%0cqH?wO${]BzLJfB5VZ*vqZfZvqPN%0cqH.zF%-pp\u0026ZF[wPz)rpgn0JA@Zn*yI[6mzB5z!xK#76x\u003e7N[x(v(/v}YB\u003cwPE\u0026:wPRoTv@Dr$A@Zn)Byd%Rz/xoe07zcOA:.:TwmFLFz/xoe08^xHwPz%9wk=#RAaK7\u003c", "ln": 10840798 }, { "b": "vrl130cqZ[uQnHxvrl130a*4\u003ex(XcfzdNQbl2pmzB7Gy)wO#VSy?Ws0wPE\u0026FA=k[(vqPN.vqGT^B7Gy)q!p5Ez!%b$C%#QYAbPDdBu%CFA+frkwPE\u0026ID2[7sz7X:#v%8*aBA]GaA^qRCz!B90Aa\u003cIHst.=)lUgpWx\u003ez6?vru7408mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEG%B-.p}v}YB\u003cwIc[Wnjc%eBzku3v{%E\u003cA@X{Gv@=Hez!s8znN#yIBzk\u0026xe\u003c\u003cC?wO#Pxq=r", "ln": 10841478 }, { "b": "Bzku3v{%E[z/d\u003cYxla5sDuBmtl1AYjy\u0026\u003cxgy?ly.xla5YA+xB[ju+PeuVY%}A@Y\u0026:Bye0Yv@3b=xjVf(mqMyKB7F(Yx\u003e7}10afLJB97l0z!0v1B8M7^z/]@tqE%DXwPIJ:x\u003e7}10cz{+yJxFwv@VT9A+d{.v@3b=qE%VQvrl0Nz!0N706$amB.L(cl2pvhz!0N707gNlvqZjblT:FrwLNeqz!0N708mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEH5", "ln": 10842532 }, { "b": "nm=juwPz?(lum0WwPys-Bz%=ZvpS}\u0026A@X:MBz%P=zGGDcBvY$KwmY!507.iNA8Hm!B.bSonm=juwPz?(xjVf(l$G$sB.(d$wPq\u003c7B96@:vpS}\u0026A@XZwBw)m0p\u0026ye:v%HQRvpS}\u0026A@YMXwNPaXA=RjFz/ff3wmYU2x\u003c\u003e*By?WD#Bu%\u003e+y?Wx/BzkVhluN0UwmY^Jz/O-!B8Mhwv}wFSz*2\u00269wPz?(l1s[Sx(W=:z!\u0026{4mSirmy?WD#BwMy^vqPN$wPyaWx(4r\u003eAZ\u003c$/qu", "ln": 10846238 }, { "b": "x*(]IAbPDdBo2@+BydZWv{%gxzE^Z8x(n1)xjVf(rbVL-zBFCNAbPDdBo3w[Bye0=yH}xLzE^Z8x(n1)Bz\u003e@azBFCNAbPDdBo29QwO$7IlVl\u003cOx\u003eINevruj4zBFCNAbPDdBo2@+BydsRBzbPkx)Kifx(v(TzE^Z8x(n1)B7GD2l3mo.z/PMrvruj4zBFCNAbPDdBo1WDze:StwK{]+A7aUPAbPDdBo2@+BydQRwoggSwn(E3zGC(1uUKv/B46$Sz#", "ln": 10857399 }, { "b": "v}f7\u003eB5W6[wO%}YBvfFDxK%?FC(Rt.v}YBDwQanACW\u003er7BzkVhrc-B]oj-wGm}D^uq:Bl2x)9{bwLlPW07gsrBwl[0BvY?-wL^zYC42G7oj-wGxjVf(nmuNoA+PY9By!9RC(QiyA=+w%BzbPnBwN0(C42G7oj-wGnP5l:x\u003c\u003e*(DsZ2?xkRB3xg(/Y0af!YxkRB3xg(/Y", "ln": 10863403 }, { "b": "Bo2\u003eLzua8Bzua+Uaoj[irrbO\u003cl\u0026X?taohx^ve$AIBo2$OzVB!Tx-JkPC(QbgBPt}Lx-IYAzuaeDwDhZexAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUPf8$#7x-J2JB]U}JyYFeHwb]%pve$AIBo2$OzVB!Tx-JkPC(RgKBo3N^z#:CH05))Tzua.TBPuvXz#:!RASygYwDllvaok*IBPuH-xAh@JASx!NBn", "ln": 10876102 }, { "b": "0b.=?0bRZI0aM1H0b?\u003cU0b?\u003cH0cwiV0b.^M0bhBJ0a=c.0aM1E0bRY?0aM1E0bRZM0b?\u003cP04[l]004MDk(=3cBo2$OzVB!Tx-JkPC(O@!A@Y\u003eNzVB[WyYE#Caok\u003cJwDi?Mx-J2JaolG-xAhPzaol0NzVB!Tz2+WUjof3{zVB?UBo1G8f919mve$AIwb{rzwDlPFv/Q6uj]^kojofE6wDlPFve$fBBo1(jl\u0026YyJec3^)w=M-HASviZwDl@Pve$cAz#:XOwDi?MxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?wb{VJBo3vZf919mBo2\u003eLzua8Bzua+Ux-IVzj]^hnaohxF", "ln": 10876964 }, { "b": "Ee\u003ew\u00263igwjnc0i3ve%*rwDl-JA@Xl3aol-*g5#.501AAryYE(zx-I#IA@VgVASxUJA@ZdVzVBUPA@Y+KuJsKnzVBqFC(N*+v/QAEASyaWwDlJDve$xHx-J5Kzua2zx-IVz026zNBPt\u003eJuJsTqASyaWzVB!T0d+IX0b?\u003cW0ce5Z0at\u003eD0b}]X0b8vv0cnb.0aC}t00", "ln": 10885512 }, { "b": "0cwiL0ce6N0b.^H03znc08@}v0aC}N03zn-0a=dF0at\u003eB0cwh-0bhBz004M/nc05#B]V7NaoloVzVB\u003eVaol0Nx-I@HBo2\u003eLASxUJwb).LvGpVNaolG-wDlPFve$fBBo0A-nDqcUe=W0]q#*Oix-JhOaok)Kve$fBaol6Pve$lDz#:CHzu7^Vx-J2J", "ln": 10889522 }, { "b": "f93d}g5@{bfAq7$f92[\u003cve$AIBo2$Og5@%cve$AIBo2$OzVB!Tx-JCVwDhYHve$AIBo2$OzVB!Tx-JCVve$xHx-J5Kzu6UAwDl-JASy1TASu7Gli7M%ve$rFwDl-J00=s2zVAPl02FufA@YRGyYEGowDl-JA@Y[OzVBUP01\u00263cyYE(zBo2[MzVB!Tz2:Lzk(+\u003c7x-", "ln": 10893342 }, { "b": "000yC0ce6T0c!G?001J=0b?\u003cQ0b}{E0at\u003eq0bzNw0ce6J0aV7z0ce6J0aM1J0ab.G0ce6N003k00b.^M0c[L!0bITN0b?\u003cR0aC}p0aM1A03znZ0a=dv0bhBN0a=du0cwh-0cFoZ0bhAQ0bhBO03zn.0cFoX0b}{R0ce6Y0a=dv04X9)0aC}J0cwh-004OhaolP=ve$uGaol0NzVB[WzuahEe=W0]lJz38zuanGx-I=CBPuBZwDi?MxAibO", "ln": 10894699 }, { "b": "A@ZaUve$lDe=Y!\u0026ASx.Lf93g@A@W\u0026[g5%0dfAr%gf90Wag5@%cBo3sYBPuE.Bo0@]nDr/iA@Zs.wDhZMxAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@W=(A@ZB+f93g@A@W=(Bo3sYBPuE.Bo0@]g5%0dfAr%gf-S%ef91(IqVG+%f91MzA@ZmYBPt$M0BYTwBo3y.z#.{0f90T9wb{JFv/QMIe=Y!\u0026ve$uGx-JhOeDxX?z#:CHzu8o?zVB!Tx8\u003cN+Ck#W:eDx?(CMow%Ck#W:eDx\u003e)ASyjZA@ZpZf90:cfAr^bh2]uhg5}t[xAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@W=(A@ZB+f93g@A@W=(Bo3sYBPuE.Bo0@]g5%0dfAr%gf-S%ef91rswDlcsASxUJASubSxAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@W=(A@ZB+f93g@A@W=(Bo3sYBPuE.Bo0@]g5%0dfAr%gf-S%ef91MzA@ZmYBPt$M0rWxy01?T1zua?WwDlJDzVB.RwDhZaxAibOBo3mWiSH/kf93g@Ck#*!e=Z7}gxo3czVB!Tx8\u003cN+g5%0dfAr)ef90Wah2)", "ln": 10903558 }, { "b": "00afw0b.^k0cXAw0a=du08@@p0bzM\u002605ayb05T:d009yI0cncY0a=cg5MnWv0aM1K0ce6N0cwi^004LAxAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@ZmYf90:cfAr^bgYPfefAr*cf92[\u003cve$uGx-JhOeDvKafAr^bgYPiff-S^9Ck#W:A@W=(Ck#W:A@Y+Kv/QSKASx!NBo3N^eDx?(wDliuwDl@PBo0()f-S*afArZ9CMq^+wb(Szq#*Rjz2!bEA@ZpZve$cAz#Y\u003eQo-O8(k(:\u003c:x-I#IwDkTeBo2.Hz2!IP00", "ln": 10904914 }, { "b": "v/QPJaol9Qwb).LBo3jVaolG-xAhPzaolAZwDlYIBPt$MA@ZpZe=U\u003e+zVBkDy5?/Bv/QPJuJs^uwb(QBxAibOBo3mWiSH/kf90Zbg5%lke=WN9e=WN9e=WQaiSH#pfAr)egYPohf92??wDl/Lve%*rve$xHve}}Xx-IVzwDlPFBo31PBo3N^f92[\u003cve$AIBo2$Og5@%cBo3jVyxd]Czu6UIk(=ihBPuBZwDi?Mk(+{9v/MHWMS\u003cC:0at\u003eB0at\u003eu0a=dv03znk0aV7v0b.^U0bhBP0c[MI03znw0cncK0ce5Z0at\u003eG00", "ln": 10917282 }, { "b": "x-I@HwDi?MwDl@Px-JhOBo3vZiSHo503%k$aok7nwDlPFx8)2NxAfdPzVBwHaol0Nx-I@HwDj:\u003eaohyIb(*:wASy1Tx8(@Lve$cAl\u0026ZS}Bo2.Hb(?fIk(=ihBPuBZwDk6$zVBUPzuakFv/QPJwDllvo-OP4v/Qfxx-J2JwDk0@x8(Gyzua+UtMv.6zVBLMwDlPFA@YCB00$mTyxd]CC(N?4f93d}ve$rFf92[\u003cz#:$Wf92zXDh}BPz2^#Ax8(Gyzua+Uf937]zVBLMwDlPFA@W\u0026[0d-K508iD40b.^B0a#py", "ln": 10918600 }, { "b": "0a=c.003TT08JVo0b?\u003cI0ce6F0bRZF0bhBH0a=dK03}RI06{Qh0cFoZ0a=c$0b?\u003cP0b.^F0aM1J0a=dv08iD40aM1x0bhBJ0a=c@0a#py0b.^U09/Iq0bhBI0aV7J04[m.0c!GP001-b0b?\u003cR0cwh]0at\u003eN0aM1C0at\u003eu0a=dF0cwh]0aC}x0b.=\u00260b8vD0bR", "ln": 10921981 }, { "b": "aol9QA@Wr.x-I=CzuaOPASxUJwb[jZ03#aPyYFeHwDlPFBo2UFv/QJHwDllvwDlPFBo31Pve$9zA@Vg^ve$AIBo2$OzVB!Tx-JCVve$xHx-J5Kzua2zv/QAEwb{fv02]zFzVBqFwDl6qB]V7NASx!Nw=MJBwDl-J03ujYwDl/LBPuBZzua2zA@ZdVve%Tmv/QAEwb{fv04R:-zua+UwDl-Jve%^qBo31PB]V7NpYK]7ASxIFz2!bEBo2\u003eLASydX03+[LBPuH-xAh@JASx!NDh}vNBo31PzVBUPlJz38wb{fv03Mp", "ln": 10929118 }, { "b": "aohy6aolP=ve$uGaol0NzVB[WzuahEaok\u003cJBPuH-aol9QBo0V*A@Wr.x-J2JB]U}JyYFeHwb[T\u003caohB-xAibOBo3mWiSH/kf90Zbhuk-qe=WTbh2]Dke=WQahuk-qe=WTbh2]Dkf92??wDl/Lve%*rve$xHve}}Xx-J2JA@ZpZve$fBv/Q6uf92FZzVBROz#+1XBo2\u003eLf92!*zVBnEve$xHx-J5Kzu6UOve$lDx-GZ+B]V7NASydXx-J5Kzu8*10t/tFzVB!Tz2^#ABo1D7Bo2\u003eLCMq*=07/fJf-Tfkh#\u003eSjgYPifwb[gYhu", "ln": 10935216 }, { "b": "DJk-1Ee[f=ve$AIBo2$Og5@%cB]Tn$e=WN9f92zXBPuH-xAh@JASx!NDh}HR05F%4fAuI3zVBhCBPuH-xAf^/f93d}g5@{bfAr:awb{fvB]VjRv/Q6uv/QAEwb{fv03uK/fAuI3zVBhCBPuH-xAf^/f937]zVBLMwDlPF04i9[fAuI3zVBhCBPuH-xAf^/f92zXBPuH-xAh@JASx!NDh}HR04Al{fAuI3zVBhCBPuH-xAf^/f92I.wDl(Nx-IS", "ln": 10935596 }, { "b": "0cncZ0a=ds0aV6Z001VX0cFo-0b8vJ0ce6N0cwi^0ab.t0b?\u003cU0cwiF0bRZI0cncS0at\u003eH0aM1x004MxsPAvuBPrJ:wb{rzwb).LzuaOPBo0A-wb{fvw=MJBzuakFaok*Izu7^Vve$AIBo2$OzVB!Tx-JkPC(O@!ve$xHaolG-xAhPzaok*Iz#:?SyYFeHv/P{qBo31PzVBUPaoliTwDl(NwDlJDec3^)A@ZaUaol9QBo0A-wb{fvw=MltBPujTBo3vZaolG-zVy)WBo2$OwDi?MxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUPe=W0]0auim4f", "ln": 10997922 }, { "b": "zuakFBo0()ve$lDz#:XOx-ISyve$xHx-J5Kzu8l*v/QAEzuanGx-I=CBPuBZve$xHx-J5Kzu8o?aol@uk(=3cBo2$OzVB!Tx-JkPC(O@!A@Y\u003eNzVB[WyYE#Caok\u003cJwDi?Mx-J2JaolG-xAhPzaol0NzVB!Tz2+WUjof3{zVB?UBo1G8f919mve$AIwb{rzwDlPFv/Q6uj]^blaol0NzVB!Taok%MCMqdLz2!IPyYF2Daol6PBo3y.z#:}ViSH/kf92!*zVBzIx-J2Je=Y.*x-ISyASy1TA@ZaUw=M]MzVBUPyYFeHzuakFe=YwYzVBROf92FZzVBROz2!FOzu8o?aol@*k(=3cBo2$OzVB!Tx-JkPC(O@!", "ln": 11068438 }, { "b": "yxd=ye=Y.*A@W\u0026[z2!RSve$9zeDxU*wDl/LeDx.\u0026zVB.Raol0NzVB!Taok{LwDl/Lve$0wyYFIRe=ZF\u003ez2^JnoAm#\u003eaok*IBPuH-xAhPzzua+Ux-ISyve$xHx-J5Kzu7^VASxUJAr7aYx-JeNwDl=Kaok*IaolG-wDlPFve$fBBo2\u003eLwb).Lve$AIBo2$OzVB!Tx-JkPC(PC%aokywA@Y[OzuaqHaoi+?v/QAEz2!zMzVBUPcJCW$aoi+?zVB!Tx8(uuzuawJDh}vNBo31PzVBUPA@WM/ec3^)zVB!TaolD.x-I#Ix-I@Hve$rFaoloVzVBUPeDx\u003e)wDlPFve$fBBo2\u003eLwb).Lve$AIBo2$OzVB!Tx-JkPx-IYAA@Wr.x-JhOaoloVzVB\u003eVaok*I", "ln": 11090680 }, { "b": "0cwh)0bhBz019=EBo2.HBo2\u003eLdQ@D%0aV7v0ab.o0b8vv0bITK0a=dF0a#py0ab.y0a=dL0b8vJ0aV6Hv/QAEwb{fvuJsNoxAhDvyYFnKwDlPFx8(Gy8E\u0026+=0aV7v0ab.H0a=dJ0bhBB0bhBA0ce5LyYFwNx8(SCzua2zASxUJAr3X-0b?\u003cO0at\u003ew0b.^z0ce6J0c4#Ez#:[UzVBROz#:$W4SRLX0c50C0aM1D0a(iLASxUJBo3B-ASx$SuJtcEz#Y", "ln": 11097346 }, { "b": "0at\u003eD0b}]vu\u0026QfbgiAOq0b.=$0bhBA0cwiM06ga70a#o)0b?\u003cC0cFo-0b8u[05sKb05ayl0b?\u003cQ0aC}MxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUPf92[\u003cve$AIBo2$Og5@%czua8BBo31PB]V7Nv/QrBx-IYAzua+Uazp:%0cwiW06g9k051s*0b?\u003cE0at\u003ez0b8vJ0cncZ04.^-Bo3y.z#:}ViSH/kf931)wDlVHyYF.Xrrd4tyYEig", "ln": 11100662 }, { "b": "A@VRU0b?\u003cO0bRZO0b.=FyYFeHB]V7Ne=YwYzVBRO9^vVp0at\u003eB0aM1x0b?\u003cT0bRZA0bhBH0aC}D0c!FVk(:gJl\u0026Zc=q#/?%h2]rgf-Tilhui\u003eh0rr9dvGo%tve$rFwDl-J25\u003cMX0b}]Hz2!UTyYFIRuJt3BzVB.R22Cqr08JU7li7M%ve$rFwDl-J4PrvG0b8v10a=dJ0cwhLv/QrBx-IYAzua+Ux-IVz5]N+V0bqHB0aM1J0ab.u0aV6xz2!n", "ln": 11101134 }, { "b": "zVB!TdRF*70cwiW0ab.D0a=dK0b}{R0b.^T0a=dq0b8vz0at\u003er0a=dJ0cnb=xAibOBo3mWuJt9DwDl=Kz#:!Rzua.TwDl6qvGprDwb{(PbXNg10cwiW0ab.D0a=dK0b}{R0b.^T0a=dq0aM1E0aV7v04qpRASy1Tyxd]CASxCDwDl-JASy1TASxCDz2!bEA@ZmYve", "ln": 11103288 }, { "b": "aA.:p004M90rvV4o\u0026BtKaz#9uy\u0026si7wPw]nxMw3nB0bNrx(+zdA=M8sat1ZIBrC^wy?$k5y\u002613laARpdav{P@A6[CQwO#PjwQ4Y@Acb/jzGu}xzY\u003c1tz/xb$vru6kavf%=ay]5bwO=p7wPz\u0026mzddYjCxdztwGV8dwODfcz*c7wy\u0026r%2v\u003c2x4AV![7By!%7x(mMavpJ!UB8@ECzY\u003cdnwGU(4BA.UzyANtjB9h5nefFLyAV!}rvqP$1wGUDcaA.-", "ln": 11156852 }, { "b": "B-8p@vqPMQuU%jYoj-xoxKLQ)l1szyB-8p@vqPMQyH}=UxKLQ)l1szyB-8p@vqPMQvpJ!=B-8p@vqPMQm}D^gx(W={Bz(hBpgn0J0b#v*xL}l}wDkbbBy!A=zdJYCD2[7sz7X.ezGGPfwDlHAwN!CyByO#Tx(dNapI%.zs8@1%wLu/QwDk8ozdmi%wDkp/B9RUkq/(C\u0026wLDPyxLzu}08)DJq/(C\u0026wLDPyxLzu}0crl\u003cBy!fPv}YN]wDkbbByw0^z//M2", "ln": 11611996 }, { "b": "A+P09By/H[yG1!OqE%@)A=af+BAh88B-.ho0ax$\u003eA+P09By/H[lQ\u003e0@A+PA7lVM:DBy!J/Bza0^By/H[qE%oEl2pv7D30Rs09shPBy^:Oy^Jz?wPE\u0026?B.%D\u003cBy/H[m}D^eD30Rs0cqZYA+ftVD30Rs0aHj}wPE\u0026IwN/:(Bw(W.wO\u003e\u003cBy**%$07?6wwPzHbvqYN^mR(HCA@Y3Sz/xb$vruj4zBOCJxla5+y**%$090(LwO%\u003ezv}YBGz//Y9x\u003e7N[x(v(PA+xB[lT:FrwKu", "ln": 11616801 }, { "b": "x-JkPxAfdPzVB\u003eVxAhPzASviZo-OP4v/NRKA@ZpZzVB!Tve%{uwDi?MzVB.RBo31PzVBUPA@W/)aohysxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUP03b\u003eQzVBnEyxdljwDl/LASyv+l\u0026Z=#yYE(zC(N*+yYFwNv/QoAqugndBo3sYC(QhizVB[Wzua+U02oLPv/QfxwDlMEve%45ve$cAwDhYPtl4v$", "ln": 11627098 }, { "b": "h-9/Pl}e\u003c@gc4cJiwrxGk}\u003c#Gk@7hNlPD$Vl]l\u003eSmNYW8hBG(2lPl.NhBfqYi5@(OgDv-?004N[0rvW\u0026m0SVUze0GRA=lhFm}DN7B8$]fvR*rBefD5TarR^HarR^HarTH6vR/:*oj-xifFCmsfFCgmfF\u003e:yfFCgmiw-AzfFCgmfG7QufFCgmfFCmsfFCgmh8m3Bg+*^vfFCgqfFCgmfFLmnfFLmnv(l84v{@\u003e6h^{faixpOewmvqHhdZwPw\u0026scU", "ln": 11634212 }, { "b": "e=XDywb{fvzua+Ux-JkPC(QLszVBqFwDlJDe=U\u003eKp5(7g0rtE!zVBROz#:qDzua}Zp5[Y5z2!bE00000o-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu8o?00000ASvx=0rtN?x-I@HwDk9#wDl=Kv/QJHx-J8LBo31PzVBUP00000o-O(cv/QJHzVB?UzVBwHBo0][nDro3wDlPFBo31PBo3N^o-P8iwb{fvyYD6/k(+u]A@ZpZASxIFv/M", "ln": 11665828 }, { "b": "yIvW0mRMBIwb[.XzEU\u003eCuTDcdv@2^@xguPDy?9Jdp*[S=z^^fuyHpBnvpK7!zF8BMwO+(Sjv%P)x\u003eIr{wiK^ouQwghyIvW0mRMBIwb[.^vr=H6B.%JTw]7)$wM9q?wJ\u003c(", "ln": 11975330 }, { "b": "A+P2onM6bdwkv8VC$.{[BuAI^e[X:quRbuJz2^HWB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eF-JB963EwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jxaG%B7GD2nPXJX08[e:By/qwlVl^SwN/*@z/fRGnLA\u0026tBs}SCBydQYwO?AOx(){608[e:By/p?xjVf(l2pgLA+PSez2^HWzeA\u003caA+P2Hy?EWbx([390cqZ[uSHPKx\u003egT]wN[8yxk.*8BzbH\u003enPN*MAbY-oBy!#Gy?EWbx([3909iJAx\u003egT]wKgcBz/PMlxL^-ZwPRoDz/6DlwPI{bz/d\u003cSxkW", "ln": 11980783 }, { "b": "A+eoWy?WA*BzkVhlVm9+By/E)nP53UwO(0@Bvf$:w[+[2A::67z/eD:w].E7xI@zYB.bSolVm9+By/E)n][]*s7L\u0026lwQcTYzGYPiBy/E)xjVf(nPO@}wPv=(wPRoWvqGT*vru6\u003enPO@}wPv=-wPRoBv@#\u003c4y!nX?B.bN[B7GD2l1t1VvqFIRB9h5m07QQxl1t1VvqFIRB9h5m0blH}B.bN[xjVf(q!Y(ZvruTjwLlPWqE%]/y\u003c6xg0b2\u003e+uRbrWB.bO(x\u003eIq", "ln": 11984605 }, { "b": "x\u003egT]wMiO-wO$ySAbn%d07y^FzdN-@By^:UA::j[n][]*l2}0OC(Q/Zl2}0OC(Rn[A::j[xjVf(oj-wGn][]*s7L\u0026lwQan*wPRoLwQcZ?v}Yp*xjT[ZvR/:*oj-wGCxdbhAaJMMwQan*wPRoFzEWZjAcbV4oj-wGuUaa+A^qRCwN[CBC(R[%Bye6Sy?WA*By!#Yx\u003eIr(BAIRnoj-wGm}DNHA::63oj-wGxjVf(q!Y(Zx(mMRwQan%wPRoTx\u003eE", "ln": 11990489 }, { "b": "0a=dF0aM1E0aV7v0aV6L0cncZ0ce6N0b.^H04[n4L1tTw09xjQ05KWi05jEe06g950962p0at\u003ep0bITD03zn-0b?\u0026W0aV7v0aM1E0aV7v03zn-0b8vz03znK0bhBL0b8vz0ce5Z0cwiL0c!G=03znI0cnb.0at\u003cI073V]0cncK05:*l0962t0bIST0a=dF0aM1E0aV7v0aV6L0cncZ0ce6N0b.^H04[n4R7I!0I=j[xBy/qwq!oDYA+L", "ln": 12042227 }, { "b": "B-.q7B7]o8x(mM\u003cvqGN-C42ifwPIj1B-qqrA=+(60000000000v@bN/zf669B-qqrA=+(60000000000v@C)?uT)+Ty\u00260W2xjUB!wPRQ7woha0B-qqrA=+(60000000000vrDW9z/PMrvruj4zEl%)wn(E3zGC\u003cUA+flkwPI%2z^)D)v@#70x\u003eIr$zF9r+y?E9#vqH6$B6\u003c0hAbY-oBy!$.00000B7]d+00000wPz*fA:Ju*B7ol8Acb/jzu6Up0000", "ln": 12321376 }, { "b": "z^)D)v@#6?zEWZjAcb/jzEl**xj2*\u003cy\u0026%rguVQveAbP=swN\u003e=vwnca7y*?O?vpKs+C42ifwPE?K00000v@b\u003c\u003czGGlbwN/:(Bn#pvvQS+Zv}Yp*zE)S\u003eBz\u003e@azEl{=y?X67A^q2ez!9B2uVQveAbP=swN\u003e=v00000x(!urwPv+JCR9Awx\u003eqg7eP$YC00000Ab](lAcbDgvqH6$B6\u003c0hAbY-oBy!$.B97\u0026jwDhYgy\u0026r%2zEm6\u003ezGC\u003cU00000v@b\u003c\u003czu", "ln": 12321928 }, { "b": "BzbP6B5Nj2AbP=swN\u003e^txM53fwk^5Wx\u003c\u003e*(DsZ5]yH}xLzE^Z8x(n2UB-.p\u003ewPRQ7wogW(AbY-oBy!$.uVZj4wO%}Own(E3zGFf!BzaxWBzbP6B5Nj2AbP=swN\u003e^NwPRoSwP\u002604vruj4zBFCNAbPDdBu$4\u003exIA5WxM4B5q*04#z/P@hwb]Lwz/](bq!o#-vqGU7wM08.z!0i$x(v(TzE^Z8x(n2UB-.p\u003ewPRQ7wogW(AbY-oBy!$.uVG.3z!0i$x(v(TzE^Z8x(n2UB-.p\u003ewPRQ7wod", "ln": 12461418 }, { "b": "z/P@hwb]Lwz/](bq!o#-vqGU7wMiO-wO%}Own(E3zGFf!BzaP!xkRB3xf*uDr://!wPH^)AbY-oBy!$.uVZj4wO%}Own(E3zGFf!BzaP!xkRB3xf*uDr://!wPH^)AbY-oBy!$.xjVf(qE$2\u0026v{%E[z/e0Ywn(E3zGFf!BzaP!xkRB3xf*uDr://!wPH^)AbY-oBy!$.q!Q8(y?cEQA+O@#x)Kt*wP\u002604vruj4zBFCNAbPDdBu$4\u003exJ5RTzFs03l2pgmvqH6$B5Nj2AbP=swN\u003e^FA+fAjv{%E[z/d#", "ln": 12463487 }, { "b": "wN//Zo\u003e!9Tz/Y\u0026eBs{c}wO#Q7BA{P0wmYNfp\u0026ZF@z!0Z4B1QmcwO$7IlVl\u003cWwN//ZrbUlDz*C#jq!p4JxjVf(n][]*s7L\u0026lwQdi=Bo3w[BydTYz/eS/vOpoTq!p4JxjVf(lU{EFzGF/*v@=d50cqZ[uQFTzwO#P*wN/:(Bo1WDzF0P}B-I4VCvtic0b(*-nO@A.x\u003e7\u003e00b2\u003e+uQOEqvrDyd0b2\u003e+uS7DPB.L(cq/#LoC%(jQvrDyd0cqZ[uS7DPB.L(cq/#LoC%(jQvrDyd0b2\u003e+uQX\u0026", "ln": 12475047 }, { "b": "qVG!$pYKq(pxjn)q#/t!l\u0026WiqlJx^Wk(:ERo-OJ2q#*53pYJ]:qVHe8qVG!$pYKq(pxjn)q#/t!l\u0026WiMlJx)Zl\u0026YTQuJrB[nb${QoAm-^mf36.m/U%TuJr!2mf3o!nb#A=l\u0026Zc=uJs18rrb?}pYKn\u003equfU@mf2ZQ06@jqr@+U?oAm-^eDwAzp5[5\u0026r@+$}f91=FpYJ]:p5)\u0026=l\u0026X!slJx)Zp5)--nDqlXrrb[%k(:\u003c:nDqJ^p5\u003eqRl\u0026YTQrSCX\u003elJxK", "ln": 12483098 }, { "b": "ASviZwDlYIBPt?IyYCNTBo3jVaoi+?DJk-1Ee\u003eR{e=W0]rSDLdyYFOTwDj:\u003eaoi+?DJk=2Ee\u003eR{e=ZB)nDqcUso78Rf-Tfkf-TcjiSHo5q#*OiwDi?MpxktlwDlPFnDro3lJz38zuaLOwDliuBo1VdzVBUPw=MJBx8)5OASxIFBo31PzVBUPaok{Lx-IVzaoloVzVB\u003eVaok)KzVBUPBo2.Hx-J2Jaok*Izua}Zaok1lA@ZaUzu9-rwDlfto8@J6C(R)=e=W0]q#*Oix-JhOaol9QA@Wr.ASxUJAr7aYx-JeNwDllvaolG-zVy)WB]U}JyYFeHwb{3rBo2\u003eLaolG-xAhPzaok)KzVBUPw=MJBx8)5OASxIFBo31PzVBUPe=ZB!nDqcUso", "ln": 12517638 }, { "b": "@D(wVZYN@{kM}eS0amBw002pW002pW@D(wVZYN@{kM}eS06\u0026f0002pW002pW@D(wVZYN@{0000000000mf2WPl\u0026Y:TeDwitqVFrFqVFrFk(-Rtg5%olo8@2[qVFrFk(-Rtirg/mo8@2[qVFrFk(-Uuh2]Jmo8@2[@D(nT]a7\u0026%@r04Z]8!#)?#:T)d*k}xyHEyeaPN3\u003c9@[Npz#\u0026l100kyo?#:T)o9CrSyAU3!vf5T?]aaaZ@D(zW", "ln": 12718432 }, { "b": "f!+vqg5%)lstqG!f!@-1o*IcBni]9/g5$@#Byd%qk@ywL08LKcg5$i[vn*\u0026Fh8c\u0026^mpP\u003eHvn*\u0026Fh8c\u0026^l1L9)h8W*hv[pDBv]E5Hh8c\u0026^qGDnBB74)^B5M:Xh8c\u0026^q*Aj%wPR%bv(k$@07/NXf!+Hug5%)lstqG*f!@-2l%8e$i59e*nKMVnf!+vr07/NXf!+vrg5%)lstqG!gbn\u00263l%8e$gbyV=uTD-Nvrui[l2}0OC$z)/Bx0K8wM9q?wD", "ln": 13171264 }, { "b": "07/NXf!\u003evqhulrpstqG!gbYb7l%8e$gby/*nKMVnfG7ZB07/NXf!+vthulrpstqG/g=tt9l%8e$gbQ@\u0026nkhxqq+fhfh8UCEwPRoTni]0*hulfQwohfQgbQ@\u0026xjVf(zFsflp+\u003c)^0b2\u003e+uSYgcq.*i*0cqZ[uSYgcq.*i*08^(Dq!PO{h8UC6v}oT?q!PO{h8UC2wPGNYi74d+nnR^Bq!PO{h8UCjB750*vnI2^q!PO{h8UCkD2mzfBAh89gbP", "ln": 13173554 }, { "b": "mO=]Rk#.h=mn)bJm[3=OqCQ1]q^03#mni+GlSd5-r9}{Wq^R*:m]92Or7GZ-xjVf(p5]uDByd=yju=KvlpjTNp/H^/rA8HTpe\u003c!Lk#ZovuQEyYnjuA-o\u00261eCuRa0ZpxjssB97#ge\u003eF?sxjVf(l@i(8wPRoEpYKymvnxfTpYLctByd\u0026AB7GD2pYLctBydBk0cqZ[uQN-\u003exjVf(q2\u003eVGByd(BnP5Y.A=U!?0764JsX@78ogq#\u003cl{T^ruQvBZlsinLk$1dt07G:Zo*I-=o*}#Vk$svJk$\u003c%FlJ", "ln": 13176167 }, { "b": "wPRoEwNY^{nN}*lwPRoJzGGDgzEEuMwb[#nzGGr3zGwDZC#[Z4xI08-wPzV%y!ndquUKz1wPzV%y!ndqm}D^mB8L}$wNXqzC%MmVz/PMlxL*sK07QQxoj-xmy?EWbx([39nN}*dvqGN{A+PSezaOmrlVM:DBy!uUzE^W5nN}*lwPRoMz!A3/yH}xPwb{WZBydZWxh\u0026!+wO$7I08drzxk8l@mrSlWBv*0ym}D^qwQ5q*wb{mNBydWLC$zJDB7GD2oj-xuwb{yRC$zJD", "ln": 13177791 }, { "b": "mRMBIwb[.Ty?C}EuTDcdv@2^@xguPDy?9JdqD2\u003eWx\u003eIr(BAIRnp*))Bx(mMEyHpBnvpK7!zF8BMwO+(Sjw]9zmq=QQD2N\u003etz/exWwmPy(xfH9ruQwghyIvW0mRMBIwb[.Yz/PY6Bw)p4x(mMEyHpBnvpK7!zF8BMwO+(Sjvs47Ab]JhB7]MgoL5xUy^8SwuQwghyIvW0mRMBIwb[.^wPI{3xjTFxByw)1k5jIjlsBwtx(mMMx\u003eq9\u003e06AL-xk.*8BzbIPyHpBnvpK7!zF8BMwO+(Sjxt)bx-", "ln": 13181152 }, { "b": "x(mMMx\u003eq9\u003e06A$!BywY*ByvECwo8m5B3swDuQwghyIvW0mRMBIwb[.+wQetXyHpBnvpK7!zF8BMwO+(Sjx33fA8*^@wPI^aC4ChRB8L}$wNXqzD2(e+uTDcdv@2^@xguPDy?9Jdq!Y(Zx(mMRwQetXyHpBnvpK7!zF8BMwO+(SjxcuDl2pvox\u003eIr$zF8QND2(e+uTDcdv@2^@xguPDy?9JdnPO@}wPyZ-xkRB3xg(/YB3swDuQwghyIvW0mRMBIwb[.\u003eA^o@!y!nX?B.bO(x\u003eIr$zF8QND2(e+uTA", "ln": 13184164 }, { "b": "x8\u003eFhzE^M{p*))Bx(mL-xjVf(qD2\u003eWx\u003eIr(BAIRnp*))Bx(mL-B7GD2qD2\u003eWx\u003eIr(BAIRnp*))Bx(mL-xjVf(qD2\u003eIzEWZjAcb/jzCT+Lwnb{]0cqZ[uS6/*mq=QQD2N\u003etz/exWwmPy(x8\u003enbB7El^rDq[AzEWP}x(mL-wO#0@wnb{]08mfqA=l2qw]]T%wmYU2x([R{z!9A}e\u003e*g@xk8l@08mfqA=l2qw]]T]CYWImB7]MgB1Qd8xj\u003e{@x8(NQBydyKvqfO1nN#yIBzk\u0026xph-*Av@2^@x8)0:BydyKvqfO1nD", "ln": 13195184 }, { "b": "pHX6Iv@$K=z!]zXvrlZhzdN*fx\u003e6Ctvq{s1A.*dVwN/*Uz/oB(lsB}Dhz!AOyYD\u003emw]7)$wM9X\u003ewNPAQlVND\u003eBz\u003e91A+eV@08m3wz/Qb4BAg@3z2=}zwNPW(nnic!z!B90z2^KNByw#NB-H]jx(v(Wx(!xmxl4A$08^xrz/PwQz/ff3xlwl6BzkVhqE%@\u003cx\u003eqD@y^-z^vruj4zB!F.Bz\u003e/jvqM0gwPGN^gdL?\u003e06$gqgbQ%Wv@hiiwPGNYi7EE}", "ln": 13198275 }, { "b": "q*ACawO\u003c4!z!%l3v@#B6zGvB1A=lnnzu9QHxkNYzx(i]yz!T7?woQQ.w]yZYA=U@kzuai\u003er+lq)x(v\u003e?q*ACawO\u003c4\u003epCb1Mze:JbB8#5lzuarXBye0=yH}xVzBO5Gy?mcTvqGT*vruj4zua-?Bye0=yH}xVzBO5Gy?mcTvqGT*vruj4zuarXBydQSv@co#wMiO-wO$pYmQZ1EwN[?Iy?WA*BzkVh0cqZ[uRbcBy\u0026%o1rbVL-zCLdtvqfK?wl9bPx\u003egT]x(v\u003e?nD", "ln": 13200286 }, { "b": "x\u003eg^}07g^rvru6Vx\u003eIr(BAIRnp\u0026ZF$x\u003eg^}090#:m}D^vx\u003eIr(BAIRnp\u0026ZF$x\u003eg^}0cq\u003c!zEETfA+e6/z*2\u00269wPv=)D2Ntkw(9I^C4\u003eF#ASwA[A^qRClU{WZwKgcBz/PMlxL*N^z*2\u00269wPv=qlVND\u003eBwD\u003c!zB58Kz/PMlxL*N^z*2\u00269wPv=xlVl*XA+frkx(v(=A=lbnwmY=YlVM:DBy^*Tze:JbB8#5lzCUv(C4\u003eF#ASwHsw]7)$wKyxMAb]JhB7]Mgp\u0026ZF$x\u003eg^}0b2\u003e+uQF%SBz(1-z/6DlwPI{bz/ex(z*2\u00269wPv=(wPRoDB-RUyz9@kUAb]JhB7]Mgp\u0026V", "ln": 13205027 }, { "b": "x\u003eIr$zF8sSwN]v\u0026Bzkf1A@Y\u0026:Byd%XxkRB3xg3YJwmYU2x\u003c\u003e?00cqZ[uSgVKzFs03lVM:GwO#Q7vqG#+st.=)mq=QQD2N\u003etzF8sSwN]v\u0026Bzkf1A@Y\u0026:BydEOv@=\u003clBzkS9lVM:GwO#Q7vqG#+B7GD2mq=QQD2N\u003etzF8sSwN]v\u0026Bzkf1A@XWzCX7z+x(dAIADLYaA@YlHy\u0026%q*wQ5q=ADLYaA@XTDv@C)(zF8%\u003ex(4?\u003cqE%oEq/)4]zFa2?yIv-.B.\u003e(n08NYOBz\u003eVcyY", "ln": 13210596 }, { "b": "0b2\u003e+uR\u003e=Yv}x.5z/Oi-B-8p3xjVf(oLFxWwN[FGB96=/B-8p3x(m)jBvf$?zGC\u003e*z/]@t0764[D2N\u003c9lpk^sAcaGVv@=\u003clBo1S{A^qRCmq=QQD2N\u003c9q/(C*Bo1WDzGYPiBo2@+BydZIB94y{wPRoWvqGT*vru6Vx\u003eIr(BAIRnoKS0:0cqZ[uSHPKx\u003egT]wM9qQzEETfA+d{MB94yWwO(vewLuJNBo2iMAaJ(%f/yZNx\u003eI0#Bo2lMvkP+{l${pBB94yXxKJXRg^(4\u003cwPI}", "ln": 13215857 }, { "b": "pJZ+#B-WR4B-.OBBo2@+Byd^OCYS{Wz*2X!wQ5p%q*ACawO\u003c50wQ5p%q*ACawO\u003c4^B.kk%A=S\u003cjwQ5p%v}/)}wPy:YCYS}8y*?3}Bw#*@Bo1*xBw=K\u003eraQq@0b#:.x(n37CYS{#wPRoDz/fVdCYS}bwPRoDz/fVdCYS{}vOHovlVl\u003c:wQ5p%AahKIv)+fLBy/Ys08)#WwNPB\u0026zF8sPzGGDmBo1Wpy?#ESzGGDmBo2/Vy?#ESzGGDmBo2@+Byb", "ln": 13216485 }, { "b": "wPRoUz!\u0026{4l$G\u003eGD2N\u003etz/eiVC(QPToj-wGs8}.*oj-wGrC)23vq[\u003eJC(RhyzGYD8x\u003ef!RB9h5moj-wGl1LagwQan.mr\u0026==A+fq+wQanyz/fV9x(m#+wQan?nO@A+A=:@=C(Qe#A^qRCnO@A+A=:@=C(Qe#A^qRCl$HBYA=lj@wQanEB5(Z=x\u003egs6fGA6yv%8*aBA{I\u003cC(QANx([5$y?XibrDz\u003e(xim2BiA6H0B-IhrC$RZ]07gWxC4y", "ln": 13218164 }, { "b": "nN#yIBzk\u0026x0afkLvqfO1nN#yIBzk\u0026x07?lbB.\u003e\u003e\u0026AZ:?:BA)\u003e0wPRoJB46}+BA)\u003cUB8L})A=k]dA==Nblpk^sAcb2\u0026BwN0@AaK6iC(Qe#A^qRCq!p5xzGFY}z/xodBA)\u003e9B9ZV6z/xodBA)\u003c{A+xW#nP5S@000004nD[004!gz07u(\u003c009Wf08\u0026\u003e-04!ga05ayf05%@V5MeQc06{Pp05BQe05\u003c)k009Wf08\u0026\u003e-04!gc05ayk05:/T7G7li06{Pp0961]00", "ln": 13219525 }, { "b": "B-.qnA+PSvrX=\u003cOuTDcdv@2^@xguPDy?9Jdl1ap\u0026B-.qnA+PSvr+lq)x(v(MyHpBnvpK7!zF8BMwO+(Sjv\u003cNoA6[CQwO#PNyHpBnvpK7!zF8BMwO+(Sjv9y^l3mo.z/PMlC%l1JuQwghyIvW0mRMBIwb]OHx(cpRwb]hxB9h5moKS0:okXV(zBXR-wb{W[w[C+4rbUVCAbn@)wDkqypiyw?pJxJIx()]+Aa9l/08[e:By/qwl${7xzF%Prx\u003e8h", "ln": 13499571 }, { "b": "0cXAO0bITK04!g^0b.^P0cXAX051s\u003c0b}{H0b.^J0aV6Y0aM1E0b.^G0bhBC0cFoZ0at\u003eH0bhBK0b.^8xAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?csW3(0b?\u003cW0aV7p0bhBJ0cncZ0at\u003eB0aM1u0ab.z0at\u003eA0a=dBxAibOBo3mWiSH/kf934[v/QfxwDlMEve$uGe=Y.*x-ISyASy1TA@ZaUw=M]Me=YwYzVx", "ln": 13509732 }, { "b": "zGvB2wO#71x\u003e4cwxLz72qFx=SBu%}YBzbJ5Bzkj+l2pvQv/PhvvpPvcB-Rb8o)7n]x(E)ll1BHalVM:DBy^*MwN/H!wb[#nzGYPiBvf.Mv@2T^090(mvqYZ?rC(qWwD", "ln": 15720069 }, { "b": "wO#NcAXq0oBydQYwO?ACD2[7sz7XOazdN:4v@\u003cn4wO#NcA=S\u003c8qE%oEpI%#]raP@*z/NEywPRoJBy/p?q*ACawO\u003c4{B.$Ygx\u003e8ipraP@*z/P[KnMonsB8M7KB7GD2nPXJX08[e:By/p?y?mj2l${GrA+Pf1Bvo?W08^lywn=q+A:-\u0026@z/2FNmSJA:08[e:By/qwqGV(0x(dAlnP5S\u003cx(n0av@\u003cm*A+$!Kz/PW{BAg/cB7Puhz2^HWB97#ge(D?fBzkP6e\u003eG@5A+PAjx\u003e8ips7ce!0b2\u003e+uR+\u0026R", "ln": 15728540 }, { "b": "v/QPJwDllvl\u0026ZS}Bo2.He=YzZyYFnK00000F=EC70rt^[wDluyve$9zlJz38z#+d-ASx!Nx8(PBBn#pvSq[4vo-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu8o?aoiI:k(+Z3yYCNTASx!Nx8(PBBo3vZaolAZwDl=KwDl-JB]V7Nwb[jZ00000H5-\u003eb0rt)}ASx!Nx8(SCzua8ByYD{8x-I@HwDlPFve$cAwDhYgqVI7yA@ZpZwDlMEe=X/IwDliuBPuBZx-JkPC(PC%lJzcbC(R^", "ln": 15958784 }, { "b": "A=k$)vr\u003egJlT+aUwN[bMrC(R\u003evpS}Wp\u0026ZF^x(4tXoMaAHy!XtFxLzu}07pmqvnH#.By!%7x(v(/v@Dr$0cqT*AaG2ZwPRoSwPI^jA:@VWD2Nr{r://!wMi}]wDk2qB7Gh$y\u003cw-^", "ln": 15973573 }, { "b": "B8Mhwv}wwyzEEf?ASwEED2N\u003ezra{q\u003cCsVpYAaK4\u0026lV)A\u0026wO#P\u0026B7Gv(p?sVVlVm9+By/E)xMs8ywPQQOB97F$zzK4pA=M8s04}=6z/L?AB.kk%A-lW#wL3=HA+eW2wKZ9rBz(g", "ln": 15974903 }, { "b": "e=YzZyYFnK7iPW?0ce6X0bhBK0b.=?0aV7C0bISNCk#gOvGpDHzVBnEyxd]CBo0][wb{ACyYCk{0bhBJ0b8vO0cwiW04[mZ0bITK02fRSA@W@}uJq\u003eZg5@{bwb{ACyYCq@00", "ln": 15977438 }, { "b": "0rr\u003cex\u003e8g4B8LVjavy6/AbP=9BzkVh0018w02!NCv@=Hez!sadT@]t(mn$y0A:-/@Cw?Iq001?R058i*awDMWA=l2qw]]d.z/P/nA::67z/dfIavf*WaAzgexMOqrA+fr6A=#28e=U\u003e-0rrJ+e\u0026Csqhz)iDe?/f-0dZTw0dZB[e\u0026Csqhz)iDe?/gakTGQcy\u0026\u00260?iV}%Hvpy/Rl@)kZs4MdMm[29?iuQNNA:-\u0026}xGvnRwO+{^B7E0We?[Flq/Vwnz!9Auazt\u003esAc15[fk20vxMW=pv@Diqwn=NcwPPOn", "ln": 15978070 }, { "b": "A+e/?B7nS@uW3jaxKts*wm6a-C(R]cvrcD%yH}+\u003eo\u003ewfWA^mT-D2[7sz7X:#v%8*aBA)\u003e0wPRoFze:Px07?lbB.\u003e\u003e\u0026AZ:?:BA)\u0026^00012w=MJByYF2DpYK]7Bo2$Oaoh", "ln": 16031394 }, { "b": "h+3k6i5%n+i5B2?lodt1g=W#\u003egET5/g=46ClO?b0g+.r!h:YF?hBxn/h.WfDh8mGOk}$t!gbH*PgC]d{lVl\u003cWwN/*FB9RUkk4F2cgC]d\u0026hzNPQgCIf.mku!?fF(fOgDd6Fhz)oEf?a2/i6]L(mmGf\u0026mkuUSmLNj=g+{)Ph8WoXgbgZQh:]O\u003cgbH\u0026*jw]:2z/fD7v@$1TD2vaQwm5X3h2]:cCX7xcBy^{WA-m72x(mMHA=LPlqE%](y\u0026\u0026-)Bza3I", "ln": 16440376 }, { "b": "oJt1\u003cmn:aPk$K:CrZ/)^B-Ra[oJ7{=m[3wSq:\u003cT=qb{g!07fBKmnu!ZxjVf(m[3xIr.#7NqB%RZoIXQ/xjVf(q#/rPlSclN07/{MqBjH^xjVf(l}6^xmoGQ?D2[7s", "ln": 16444461 }, { "b": "B.7L\u003ey?cNPy\u0026%p?qE%uRA+5iVy\u0026%p?q!p5KvqH6$0b=v(r://!wDl)Zy\u0026%p?q^\u003c\u0026X08[e:By/qwlVl^SwN/*@z/fRGm}DNHA+P2onKEAjy?m9#x(v(Kr6z{jwO(vewDkUOB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eF-JB963jwO(vewDkUEA=+(6q!p5GwO(ve", "ln": 16448786 }, { "b": "BydQYwO?AwwPR%bv@\u003ej-wO?ADA^p-bx()]LA=LPlnPXJX0afCZwO?ACD2[7sz2^HCzddx%z/Pz/y?W.^oMauImSJA:07y^Fz2^7qBwlsPzuarXByd%=vqV6AA^p-bx()]NxMXidwN[XIv@Dx#q/De.090#:s8@1%wM08Hz/Pw!Aa9R:A+e:0A+59/vqV6Ax(dAWAa9R:lVM:DBy!x\u0026vqV6jz/x$\u003cA=M8srbUYOvqV6nwPQjYvqfK^vR/QJ", "ln": 16451154 }, { "b": "0bVp:vR6O308[e:By/qwluM)LwPz?(qGV(0x(dALwO=r%A=RjLp^FS5A+frk0bMN^x\u003e7N/l1BIDwPI[)m}D^sxNaVkv{%gtwmPZ(B8}s\u0026z!q%Sx(37Cwo8m5A@XZwBw#W.y^zPxA+frk0czT-y^zPxA+frk08c*xBvH7?B7/b}rC([)y^zPxA+frk08c*xBvf\u003e.B7F(ZzGGPel1BIDwPI[)B-8qny^zPxA+frk0a{m\u0026z9.YyA+frk0ax!Tls\u003c!zzB4/zA+b", "ln": 16455214 }, { "b": "zE)s1q!o\u0026Sq/ueYwPN]KA^p2\u003czF\u003c2}Bw)9/yH}O/B8LM7wPN]JD2[7sz7Xg]y\u00260V)BzkVhB1Q3MzGP/cA::6dAXpm3B7GB[xjVf(pIaiWwPN][wPRoPw[D9}Bo2cCxjR", "ln": 16455927 }, { "b": "D2v9(pI@{sBA.UzyF[.NwODs0s7#+\u0026r7{jRB9RUk08^xpwi\u003eoZzESVBwO#3AB9RUk09shPBy^:VD2v9(qE%uHx)a5NB9RUk08^xpwi\u003eoZzEVmQBy/GgvqFkJD2v9(q/=+MwNPaXA.Hy\u0026A6XL\u003czESVFvqf*VzBnkKvraUPD2v9(q/=+MwNPaXAZs+(zESVjB-.qdzGGP5vru6DB5MT\u003cC4CXWB9RUk07QQxnn\u0026M\u003el1BIDwPI{7B3T\u003e)zESVlz/fD7", "ln": 16941726 }, { "b": "x(4{jwDlvOBydQSC42A9vqZfOB.(exA+bkHBAg@3zbtm\u003eC4\u003eF#AZBhQwDkFpBA.UzyG1!ZwmY^Fvrk#WlU{EFzGFiNB7Ct:wPRoPA+5)4vqFIFzF%MblT+4E07y)IvqH0+AbYxelT+4Eq/De.nOq{VA+PA7lT+4E07y)IvqH0Uz*b=klT+4Eq/De.nOq{VA+PA7lT+4E08^xAwNPT\u003e07g^phz^:mBA.CuwDkXIC#]32By^{Iy\u0026:d/q!o\u0026SqE]", "ln": 16945697 }, { "b": "l${*QA+w%3BydsfmQG8oA+eV@06$:HxK#76x\u003e7N[wN[.YA+eV@08^xpwkv8VC#Fo]B.bD2wM9X\u003ewNPAQm}D^pvqY^\u003ewPI@\u003ewPI^jA:@VVBAg@3z2^4ty?lK!A+eV@08)@Pq/)4\u003evqM0=B8j=%A+eV@08drtwjyPTzbUK%wNPAQpgXJ\u003ez/PR:vqYQ(wPyZ\u003eA+eV@08m3wz/Qb4BAg@3z2!T0A+eV@0a/$Tz2!iWBydQYwO?AQwmPmZnPXJX08m3DA+P38nPXJX090#:s8@1%wKguSvr\u003eB^wO?AYBy/p?xjR", "ln": 16950757 }, { "b": "D30Rs07QQxr://!wPE\u0026ID2[7sz7Xg]ze:AhwO#P:z!9A}e(lO5ze19aC4CZ{q*ACawO\u003c4$B-8qnzdLs#wPzG[y?Xi7BzkVhe(lO5ze19aC4CZ{q*ACawO\u003c4{wPPL3A+Px8Bzk]fA@XKvzEENhp\u0026Zn!x([6jwPE\u0026Fx\u003e7{KqEKDNz/56-wmZ0%A@Y](wmZ0%A@Y9HB8U61A+PA7A@Y\u0026:BydKH", "ln": 16957116 }, { "b": "wPJ0gBo2oXC#Fo@qE%](y\u0026/U$wPJ0gBo2oUoMbb^A.gd(vrc6\u003czGC\u003eWvqf*Mz/Ou*vqZe!rc0mZwO#O\u0026rax(my?WD#Bo1*tA=bDglU{EFzGC\u003eLx\u003eIa3lU{EFzGC\u003e*y?WD#Bo2oey?mD{zGC\u003e%A9(yUwPHjSze:r5zdNQb07pydA+f90zGC\u003eIzEWY#zdNQb07gBxzFJfZxkIi$Bo1:EC4\u003e#nzF-%5Bo2@+Byd\u003cMA+fcg08[e:By/qwlVl^SwD", "ln": 16959999 }, { "b": "B8M7\u0026x(n1)nL?\u0026[wkEhUzGC\u003e\u003ewPRoFzE=NZx(n1)B7GD2mq=Tjz!T9h0b2\u003e+uS7DLz//LVzE=NZx(n1)xjVf(oMaAHy^\u0026kLp\u0026y5=Bo1ZDB46$Sp\u0026y5=Bo2rUx)r3:zddc@q/ueYwPQvUwkEhUzGC\u003eTA^p2)wNPW(mq=TPz!T9h0chT/z//LVzE^Z8x(n1)y\u0026r/(y^\u0026kLAbPDdBo2(\u0026wn(E3zGC\u003eRwPhE1v{%E[z/e]Yx(dB1B-Z$^zElpMv}xv$wNv/rwN/H{z!T9h0b2\u003e+uQF:OzGC(0wPRu{zE)uCz/]@t0ax[*x)a5#lVm9+Bo3z@A=l5wy?k$LB-8p3wnca7z/YFSz/]{", "ln": 16960518 }, { "b": "0bITK0a=dv03znU0cFoT0cwiP0b}{O0a=cM0cwiP0bRZE0cnbuD0pn}0ce6J0bRZO0cwiL07u)90aV7G0b?\u003cK0b.^U08rJ50bRZE0ds\u0026M03zne0bhBL0b8vz0ce5Z08\u0026(u0bhBP0a=c\u003e03zn*08rJ90a#pI0cwiP0at\u003eH0a=dv07c:20b}{K0a=dJ08\u0026(u0bhBP0a=dU003qe0daY^0a=dE0b?\u003cV0a=d00b.^E0b}{R0bhBJ0cwio0at", "ln": 16963455 }, { "b": "vGpiAC(O@!w=M\u0026KzVBROaoluXve$xHxAg6[aohxPyYFwNv/P{qyYFbGzVB?UBn#qxp5]hjaoj$kpYIQrve%*rwb{SIwDl=KA@Wr.w=M-HBPupVwb).Lw=M-HASviZxAh@JA@", "ln": 16965778 }, { "b": "x(mMoasY2N3jd[zy\u0026%/vwPy7OzF%Vnv}wkJa%n]?zGP=iedz}earR^o3lQDlatkh!nn\u0026M\u003ezEEx[aARp9BrCWsx(+zmz!9A4vpTK)A==2pwPF#ozY\u0026$uxK#ibzF%5%B0bNyay/tczE)s1aARJAw]zYjxk.\u003cjx(E^7xd+qRfawmharR^JlU{)^By/FUzF\u003cxn", "ln": 17103205 }, { "b": "aARpqz/]YaayMygvrujbwGSytw[ASivqYH^wN)xawNPKb4giy:arUieA+e:5eMLN*vqG:#v{%E$AV==Ezddxpr+VO@BZY8Ly\u0026131diJtxB97#4wft/5aARpdav!^wxK$Q\u003ee*9]caz$Rfx)a5gy?Wv0vrcSox(+zqwPq\u003cbA+e=lasY2N3jd[RB7F9PBzk]fl2pvQv{%E$AW0K!w)]H%wH[n$4giy{dJ?-jwGV8dwGU/2xjkp}aAg[jeO]0wwO-FR", "ln": 17104605 }, { "b": "B97\u00261y?W%7x(mMav@Dm5wN/*@z/cXtzY?t(B-I4oltQNHB0az6z/Po0wIb8Pfawl{b0*J$A+ef\u003ez/Po0wKyxNzE)s1x(v(/BAh8kxcFDVaz#sry+c254giy{dJ?Y7wGT#JnG-a[aA.:paA}HgzxJIiBywS{x(^%4zF784z/fD7v@#B6zxK4tavgr@A+cvWy\u0026r^7ax9x2A:-P(e*8R%4giy=l3^V]wM9X?A:-P(q!o#)x\u003e7ZOA+MZUaz#sry+c254giy{", "ln": 17117395 }, { "b": "vpJ%[B9g@dz!yhlByx04B0a[kayPdgwP?T5atCJ^aAIj8A+cWLat2reay]hcvpB4:wgO\u0026!jUX#uzddViy**%0x(k55D30Rse*8R%4giy=l2QvlD2va^vr+EOxf{(=wD", "ln": 17118834 }, { "b": "CPZ*pvQS$?e*9L[w)]*#Bs[XmD2vb9A=k\u0026lB-OWtz^NNdvR]?3efG1FzF9=%azC+3v@DmbwQ5r7Bs[WUarR^HdLzkr2})+JarTW8x(mMaarSlUoLFx!CPZZsuV*y6zF7NAl34r?v\u003c2\u0026nvR]?3efF+Ev@2)(B8@EAx(mMawo89)zz05fwPq\u003cbA+fqmBzbkdzEA", "ln": 17120752 }, { "b": "avG^:x\u003e7ZND2NsTpgnlUC4AYSzGP/9wPw]iw/$/9wmYZ\u003ezE^r@BrCvgA=bD8azC+3v@DmbwQ5rratj\u0026WarR^HarR^HasY2N3jevnazC+3B-IhlxcqkezFa2kc#%3txcoMqrzDHxefFFmv@DHey?mc1w].*bavG^:x\u003e7Zwz/6DfwPRT8zD7p\u0026wNPa\u003ce*9J4x(\u003c", "ln": 17122322 }, { "b": "yIvW0k5jIjlsBwtx(mMMx\u003eq9\u003e06Bn5vp%dMvrcm1zF8dGuTDcdv@2^@xguPDy?9Jdl3^V]wM9X?A:-P(lVl\u003cWwN/*@z/eG}A+PA7k5jIjlsBwtx(mMMx\u003eq9\u003e06Bd\u003cC4(a{B.$P0A.*plx(m#\u003ez=pjQA:@=DyHpBnvpK7!zF8BMwO+(Sjv%QnB.bOXwPz)bw[+:-By!oSBz9\u003cNuTDcdv@2^@xguPDy?9JdrC(I}q/ueYwPQ:SBz9\u003cNuTDcdv@2^@xguPD", "ln": 17292836 }, { "b": "x(4uZvrcm1zF5@yz!AcWA=bPex8\u003e[EB5l^}Bxq)\u003ezFs030aP}+zC$T$x(mL-xjVf(l3^V]wM9X?A:-P(lVl\u003cWwN/*@z/eG}A+PA70cqZ[uQo0XA+ef\u003ez/Po0wKyxNzE)s1x(v(/BAh8kx8\u003e[Hq/)4]zF5@twPQ\u003c)A+PA708[2HB98CpzF5@ZwPRoMz!x5uvrcl%BwcQ=0afOOzeTDuoMaLzvrb#Xl$G?Ix8()[vPdzUmr0fPxAi9}z/PzTAbPl108d9txMMWZz!0CXwPhM$xAhWRByd{SC4(a{B.$P0A.*plx-", "ln": 17303639 }, { "b": "z:wI/xJ5F:BzkS9A@X=$B-.qdzGGP5vruj4zC$a*BzkS9A@XHmwi\u003euWxK#76x\u003e7N[x(v(/wPS3dzFa1\u003cp*[A^Cw?Ijl3mo.wO#Q7v{%E[z/eG+BAzkmxla5sv@aCNBzbl6Bzkk[BzkVhq!p5)x(mN807QQxl3mo.wO#Q7v{%E[z/eG+BAzkmxla5HvrcB2A-lK\u003eBzkS9A@Zn)A=#2mq!p5)x(mN806$Bqz!0i$z/O=/BAzkmxla5Yy\u0026131vruBdq!p5)x(mN807N", "ln": 17311801 }, { "b": "wQanyz/fV9x(m#+wQan\u003ewQanOD2[7sz7X:#v%8*aBA]GaA^qRCz!B90Aa\u003cH%m}D^hCX7xcBzkS9l349Uzdmsb0cA6%mr\u0026J*m@\u00263FwOc73y\u003cu1(CXIm\u0026A:-D?w{4{aC(Q=*B97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwPzG{e\u003eFAGy\u00260V)BzkVhjxaG%nPN^vvpSeKy\u003cu1VD2[7sz7Xg]", "ln": 17317881 }, { "b": "Bo2\u003eLwb).LA@ZpZASx!NzuaqHaol9Qzu7^VnDqM!B]Tu0aoj4{aoj$kpYLUshuj\u003c1w=M-HASx}Rve$xHaoi!\u0026wDjs.x8\u003cK:aoja@g5%lke=WN9e=WN9e=WQaaoj4{aoj7}iSH\u0026liSH\u0026liSH\u0026liSH\u0026liSH\u0026liSH\u0026liSH(mdf7E\u003czVx", "ln": 17323152 }, { "b": "03znU0b?\u003cT0a=cM0aV7v0cwiH0bhBH0cnb)004MZqugndv/Q6ux-JqRwDllvaok*Izu7^VwDl@PBo2\u003eLASx$Sve$9zaoj$koAn#hx8(MAwDl-JmGu\u0026%v/QPJzVB!TC(O@!", "ln": 17325868 }, { "b": "aoj\u003ehx-I@HwDi?Mz#:qDBo2$OiSHo5DJn0+ve$xHxAiCXe=U\u003e/xAhYCiSIhvz2!zMiSIhvA@ZmYaohyilJz38z#+d-ASx!Nx8(PBBo0A-c\u0026^-Sdf7E\u003co-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu6V9ui1jgA@WY\u003cc\u0026+?0tl57ieDy7%t(VzQaoi?\u003ckl9nneDvg0tl57ieDy7%eDx5Rd/.0#tMw*Bd/Z%$e=Wv3df7Q[0D**hzuaeDzVB[Wzua+UwDl-JwDll", "ln": 17331048 }, { "b": "l$HKQv}wR+AaIgcvrujbwJy@KB.$P0AV/pjazC.7wPhi#wmYU2azULezE)Sbx(vu*z/fVdCYX0HfcB$EuV*y6zF78jx(mN8asInAzF77VpGpd?dj=PLwN/U3Abo8@azbUjz6gzZwmY{#v}vl4z/6DfwPRT8zy]%zA+eV\u0026B1OO5A+PSfv{%f@w]zYjx(vv3A+L", "ln": 17364213 }, { "b": "arR^HarR\u003ecD2Ns.x(^^8x(dN4vruBdb03?\u003cqE%]*lVl*UvqYQxvrlc)l2{QXzdNQba$KfgarR^HarR^HarR^Hb2hM-wG\u003ceTb2}MgqCGILmiTn(3lQDlarR^HarR^Har\u003ci/B8U@7C#Ov1BrS:*b6v%rA=br5wG\u0026Vm3lQDlarR^HarR^Har\u003c^gAaHjOar\u003c:aA+PA7a$KfgarR^HarR^HarR^Hb0*lZB.$YcBvH7PxlbmTar\u003cK5y\u0026\u003cxgy?j!13lQDlarR^HarR!P4gjj2arR^HarT@03lQDlarR!Pedz}earR^HaBs", "ln": 17434726 }, { "b": "arR^HarR\u003ecD2Ns.x(^^8x(dN4vruBdb03?\u003cqE%]*lVl*UvqYQxvrlc)l2{QXzdNQba$KfgarR^HarR^HarR^HarR^HarR^Hb2hM-wG\u003ceTb123}mnu/lnKK:N4gjj2arR^HarR^HarR^HarR^HarR\u003c@x(!lfvr\u003e*-CYUb\u003car\u003erix\u003eqg7eOO-tedz}earR^HarR^HarR^HarR^HarR^Jrc-B]b03?\u003cnP5SYxjV9cedz}earR^HarR^HarR^HarR^HarR^JrbVL-zx.a:b1UfDedz}earR^HarR^HarR^HarR^HarR^Jl2{QXzdNQb", "ln": 17464380 }, { "b": "\u0026Q\u0026Jah.QZTrCW4E3%]f$U?@W4@2bqaoOG3MEgQ:BROZTCH3bvPw^HbK\u003eBBj%\u003eGF{4+:D0#OIJjhKQ4@niDDZ.f$}}1=y8p26)xM]JWGiIROUI8I$%3jRe{k{R[ZJlYED\u0026*\u003eAWk3.s}N()78#xl%=vZU\u0026\u003e1K{h=Seyt?N}{WSBKjKrt.b\u00261ByDTq\u0026WNhm\u0026y}bN)KiR9(}G8F(I.SEXj)aj3d{sSV]xsP^*gJdmeeC[*dG}i2gNF/)T.U#CkZPk^yVW{NE=3?rAvE)kI{wpl+j6@Sn}rA7EE8b1zV8-e1Aq:dc=y4FD])l39x)YC@e2SdwF30\u003esSzmQfj){2f?y1:iqC4PG4k=AXG:6$*/j^hgWG[rVa%XBh6Iq})c\u003eN4W8I!O@wqS{Ca%F/d}/]mu*iWheKi^Z{}8%h:)\u0026RiZ=Wx9[Y4sSIyHcmf(T1!SKr0rTs6qW)}]9Fb86Ro/iO{:5rG+GV)L\u0026[Ui#K/M?nHjRP2hAsu[L%Y(am?[}r?WI@H0sm@*Jv]!v$ahQ#U2\u003e%b7/4*fUi^/B4n.2(n#bL9B-\u003c}TqG/bD{?PE[6cK1O3vW^ec($aPyd6BxX6*{GAb%hX*02FXOF(EvZI]\u0026c=)@\u003cKXGr(}7IWgd3B.412B!wq5-lJculSM5H!f/.xYv:Q4XQ\u0026%egC:E!r]?%wgx5+l:?E\u0026*cTa+a7]-u=+\u0026z+QdH:Q4XE8@zYBTIlX\u003egd7$iJqXx\u0026Mp}]]EWxN}*ck@z+l)(A5bH.jL1BUKe71gpfRgycgd.:kYDl=Rx#}R$k-CV.+ns:?[8CYr:7QWWNh\u003e}\u003c3c4kg\u003c4mnOq.5o9Izr#Z", "ln": 18004944 }, { "b": "sX?G!00000m[3xImoJLXpe:?Zq#=)#sW=l?00000woz:d00000o*I\u003eY00000fFLssg=mfIi5$zRv}od.0000000000pFgV/00000o?w8Ok#ZixoHRXR00000mn^2avrli}wfsO?C42ifwGU\u00267B8tucv}W0ex([2hwQ4{gBzkS9aA?saBz(gxB7GB[00000ohbx^00000", "ln": 18571696 }, { "b": "x\u003eq9\u003e06AO\u003cw[CQ{mq=T1yHpBnvpK7!zF8BMwO+(Sjvs47zddr)k5jIjlsBwtx(mMMx\u003eq9\u003e06A}-B97C\u003ey?WAEz/6u1zE+}DuTDcdv@2^@xguPDy?9JdmriAuzGYD8x\u003efOHz2", "ln": 22030928 }, { "b": "B97#ge(Dm)y?m9#x(v(wp\u0026yw@vpB4:mr\u0026xNB-.53y?iPBD2[7sz7Xg]y\u00260V)BzkVhB1Q43zfo@evR/PQq*ACawO\u003c4[x(m]yqfuC\u003cD0$e#wDk2qqfuC\u003cD0$e#wDkq1wPI/?wPzG[y?Xi7vR/PQx(=\u003c-w)]H(x\u003c$)\u00260b2\u003e+uQO*PvR/PQrc0mZwNPaqz/]J9wDkqyr://UwjguUvR/PQs8@1%wKHDVvR/PQC42ifwKHDVvR/PQlVm9+Bvf.IA=T!", "ln": 22044107 }, { "b": "B-qed090SLz/*8qwDkLnA=U!TlRHy2y?iPuz^^fJz!a0bwDkXIC%L$Ko(BM+y?iPlvqX$=zCt4WB.\u003eQ?qE%GPB97#lo(BM+y?iPwwP{\u003c!wozZ10bVT+B.\u003eQ?xjVf(pgn0J0cqZ[uRU3DwDljRx\u003eqg7oLE%hvqPMQzGP=iraQ8!x(mv3wN[LAzdJY+z/PY6y?XibwklMIwDljSwklMIwDkqyr://Uwj7GXBz(1-z/6u1zE=HJzdJYEzFKcdCwY=^zex", "ln": 22045317 }, { "b": "v}#6yvp\u003c7IvqfKOvp%dIxLz72lT:!EvQS+Z0cqNXwMi8Ly/1LMwM9nRw]{yGy\u00260M?v}#6OvqG:?vpK6MoMa\u0026*vQS+Z0b2\u003e+uRBD=uT^COuTW$/uVoB-yxe0UBydvywi\u003elGrC(+:v}#6io(\u003c@zvpK7MzG62]yxdpPA=\u003e(lrC(+:v}#6SwPRoMry6#3vpS.NA+w:4zG62]yxc.nwN/HOBywV{07y^DB-I4(B.kl1v}/H(BvyB=v%8)cz/eG}", "ln": 22067660 }, { "b": "z*c7{Acb/jzual)A8gB{x(v\u003e?m}DNHA+P2ZD2v.jCTVT[z/OS)BzkVh08)DJq/ueYwPQZ!BzkVh08)DJqEK=Fz!0M]BwD\u003c$x(v\u003e?rc0mOwPQv=x(!w(Acb/jzu8%\u0026oHThowPh:9z/bLDpEPIrwPh:9z/bL/wPRoFCW\u003er7BzkVh08^xuy?m9#x(v(*D2Ns*z^^fBCW\u003er7BzkVh090xFyEqJFv}xE/wjp-MwPh:9z/bLJAaK5#BzkVhlT:\u003exwD", "ln": 22080914 }, { "b": "wL3=IwQ49:Abok#vruj4zB4=Ox)aijx\u003eqt=m}D^xB7Gw.vqYQ(wPE\u0026UB-RbmnmuyDy?mU/xKL^?y?mU/mq^l+wPzj3wKZxIwPE\u0026ZwO+}1wKZxIwPE\u0026uzGP/cA::63mR)i*xHVYLwPE\u0026JA^pe^BvG$XwPE\u0026wwPQ:WA:@V#BzkM5A@Z5}wozZ1A@X%Tzdm6%q/)q3wPE\u0026YB-RUyz9@kUzddr)pgn0JA@XTNBy/GgvqF?MB8TG+zeAZ0wklMIwPE\u0026qy?%", "ln": 22107901 }, { "b": "B5WB7wPE\u0026lj#lLMy*?A%zEW@^wPR%bv@\u003eQ{AaK7\u003cm}D^wD2Nto0aYUMvrDydoKS3OzEW@\u003eD2Nto07y:zBA{\u0026hAaK7\u003cxjVf(q!6-^wPE\u0026:wPRoXx([2!v@Dy0A@Zn)Bye9-", "ln": 22108545 }, { "b": "z/6u9BAz88lv0V:A@Y\u0026:Byd^KzdN^cvpJ\u003enD30Rs0b=jZwPI*0v}v#LBy/H[s8@1%wKZxIwKpV:wPE\u0026:wPRoUz//A7mRMWIlv0V:A@Zr2Byw#Px(4uED30Rs0a]}YwKpV:wPE\u0026twO#N2lv0V:A@YcTvrcB2lv0V:A@X)Rvl[ZCz!0i$wKpV:wPE\u0026?wP}f-y\u0026%qQD2%", "ln": 22109439 }, { "b": "0at\u003eB0cFoX04X9)0at\u003ep0b?\u003cT0cwiP0b.^H03znL0a=dD0a=dL0a=cgwK#(m0b.^P0ce6J0aV6L09f8h0aM1J0b?\u003cT03znu0a=dL03znL0ce6T0b}]X0bhBJ0aV7v0c!F^0aV7L0a=cM0cwiV03zn.0bhBV0a=cM0bRZI0cncS0at\u003eH0aM1x003p)0ce6T0b}]X0cwiY0bhBC0a#py0ce6J0aV6L0bRZU0bITS0bhBL0bITD03zn-0bhBI0a=", "ln": 22233415 }, { "b": "yYCNTDJmHPC(R{^wDl=KEe\u003cmmrrc[pA@Zs.z#:?SzVB!TBo2\u003eLwb).Lx-J2Jv/QAEz2!nIzuaqHaolP=x-JeNwDi?Mw=M-HASx}Rve$xHaohxzaohx(rrc[pve%:pyYF2D", "ln": 22246880 }, { "b": "ASy1Tz2+WUDJni?ve$9zx-IVzmGvDezVBROEe\u003ew\u0026Bo3jVaol-*B]U}JyYFeHwb{3rBo2\u003eLq#*?pEe\u003cl$k(=3cBo2$OwDlPFBo31Pv/P{qBo31PzVBUPaol0Nve$0wyYF2Dwb(Pqve$lDz#:OLwb(QRxAibOBo3mWiSH/kf934[v/QfxwDlMEve$uGe=Y.*x-ISyASy1TA@ZaUw=M]Me=YwYzVBROf92X^wb{fvzua+Ux-JkPC(PF$v/QrBve$0wz2!RSf92[\u003cvG", "ln": 22255756 }, { "b": "zVB?UzVBwHBo0][v/QAEz2=i?x-IVzwDlPFBo31PBo3N^f92FZyYE(zx-I#IA@W\u0026[A@YXIzVB.RwDhZSk(=3cBo2$OwDlPFBo31Pv/P{qBo31PzVBUPaol0Nve$0wyYF2Dwb).LBPupVwDl@Pz#:CHv/QPJwDllvyYF.Xaol0NzVB!TaolJ:A@Y+KASviZDJnf*A@Y+KASx$Sve$cAwDmbUiSHo5DJm).A@Y?MEe\u003cmqk(=3cBo2$OzVB!Tx-JCVwDllvaok*Iz#:?Saoj$kwb{VJaok)Kve$fBzuaOPBo0A-vGo%taok%Mz2!IPBn", "ln": 22256070 }, { "b": "d/.*m00N/KdGxCVk(:NUoAmY=mf3D\u003cqVD!hqufb=qVGk^q#/L\u003emf3D\u003cqVD/Ck(:jKlJxHOmf2^Sm/V6WnDqu.o8}S=o-N]*pxjh\u003eq2\u003cF]qVG+%rrc51r@=t5sPzR9ve%:pv/Q3twDlrxx8(PBx-I(FyxeeJz2!CNzVB.RAr71VA@ZpZBPuN+Ck#\u003c/C(Sc\u003cfAr*cg5%9ggYPxkhukVoh#\u003e@s0dY+?073VM07l/Q07D@U07W8Y07)k:089w!08rI\u002608J", "ln": 22257576 }, { "b": "v@Dx#wPv=TA+e:0A+5:408m3wz/Qa\u0026vrcy5wPv=swObv[y\u0026\u0026l^By/Giz!@\u003c7wN[.YA+PA7nmuyDy?mR!rb3hXASxfYx(){bqE%oEwPyQXvrl1209shPBy/FWA+PSfv{%gLwN/*@z/e0YBy/E)v@=p9x\u003e7N/r://!wKgAbzGGDg0bMj:xlm/^z:OC^wPv=uy\u0026slj07/Q%B.$YgvruBd08NlEv}xL1x(4uHzGP/cA::6dASwymB98Chv/", "ln": 23036234 }, { "b": "wO#16qCyi)qBKL.sZK{1r@=5{mnMoFmpeL.pGEJ/pg3*}pE!qKq=v3[qCQu]lVM:DBy^{Qy?lVFl$HgCBy^{Qy?lVFxjVf(pG7u}pHv0/pFKO^08D%6qCQ4YsPzx1pF%FGmpe\u003e?pF:FTr9rN9ryG!*08DS:qCowMp^)=Vmnu/WsPy@\u0026pGpj#k$jsnpdXz/0cR=", "ln": 32256986 }, { "b": "08[2HB7ol8vR2Klvru73x\u003c\u003e*(DsY]YA+fcgl${Whz/OV{z^)nTqE%/-vpJ\u003cGm}D^gx(!5VA+e/XAa9l/0b2\u003e+uRU3DwPI*0v}tTrwN/U0wklMIwPI*0v}tTMwPRoIvrkgLzdN^cvpJ\u003cGoMaMyA:-D?0ax[Xq/3eTwDldHC4\u003eC$07/N\u0026C4\u003eC$090#:qE%oEl$HKQv}tTX", "ln": 32266664 }, { "b": "B-H#60cr73A:@UXlT:\u003e3y?WA\u003e090#:mqMWGwDl^.B8#5lzB[wmC4CYmx\u003eg=Pq/)4]wmU:hwPQEKB7^{VwmU:Ovrl9Hz!9zVnPc$mzGG]qy^SbKwDk59B7]bWA6[LOwDk2bC42n#wN[OQlVlHD0axIMA+e((By^)YA=k$=z!9zVo\u003c}*Gnk.]$z/4{-A=g", "ln": 32267692 }, { "b": "Bz\u003e@azFiD@wnC/Sq!6lNq!ZbZy?iPAwNPasx(4tXAb]I#y\u0026131vru6Ix(4tXlVM:DBy^{Qy?iPWraP]=y*?A%mRMWI0cz^?Abn%8wKZxIwDk!Lx()]Qx(4tXq!p5tzE=KPmRMWI0ba\u0026oy?iP?B7Fo/vq{p3z/!D.y?iPUx(4tXnPN{Jy*?B1y?iPBD2[7sz7Xg]zGx-jwDlHzwNPy\u003ez^#H:y\u0026\u003c/sy?iPCxMw3kBzLH*BzbYkBAztg0b2\u003e+uRU3DwDl^.Byd^KzdJYqwPQpZA=LZ", "ln": 32270655 }, { "b": "y?ldCzE^M{A@Z2{xgMDGwnC*#08)DwzdNQbnmuyDy?mU/mq^l+wPzj3wKZxIwPE\u0026HwN/U4wPymOy?mU/m}D^ix(4v407QQxnP56ICVes5wKx)oxK%\u003eKzE)\u003e?q!p5xzE^s6q!ZL?mSJA:lT:FrwLu/QwPE\u0026YvpJ$ZoLFxQA@Y](v@co#wMiO+vSMTfzE)\u003e?l$HsQBw)p4x(ET80crm5x(ET80czT+wM08Hz/Pw!x)KtWvqfL2A+fp(x(lpK", "ln": 32305925 }, { "b": "y\u0026%/kC4BuQByO#Jx([y@yGs\u003eWB.alTzFa68ltpK.0bCksC$.^!xlm/Nx([y@oMaARltpK.0bCtLzb1OZxjTCzB-7$Yx([y@yG1}[wP8fFxMXidltpK.0bCLLByw#Lx([y@yGt1!B7]MgltpK.0bC5ry\u00260W6s8Sa\u0026B3:O.A@Y#NwN/U0wk^C-x()l:Byw)3", "ln": 32314999 }, { "b": "z/6u9Bwu%}000xc00ri300031000ub00ic200062015-b0SSi2009613ipbgy?W^fCMmZL0rrvGx(mE1Cxi-:2($2enPXJX000o903zmw000080rr95000006-!po00005vrcx%C)nh0w]?K9000/o00ic200=}ywo8m5A%uC(zFa68001CG00ic200", "ln": 32447552 }, { "b": "xk8lHwmPZ(B8}sYzGxk#wM9nRw]{vJxk8lHwmPZ(B8}s\u003cwOkZ{l1BIDwPI[)x(DvGwo8m5A@XZwBxry3yH}JLwmPZ(B8}s]wPRoQA+fAdz/{a!wmPZ(B8}sKwPQ:?wP?^aB-P\u0026Vwo8m5A@Zf1wP?^aB-P\u0026Vwo8m5A@YM?vrc0(Bu%CFA+frk07g)HA+fcgk(", "ln": 34459142 }, { "b": "C(N*{wb{rzA@Y$QuJsNoxAhPzv/QoAz#:!Rx-J2JBo2UFwDlPFBo3sYC(N*Pv/QAEzuaLOwDliuBn#pEA@ZE=zuaeD03#EZwDlowBo2UFASxUJAr7aYwDl=KBo3vZuJt9DwDliuB]RH)z2!bEwDl/LuJt9DwDlYIBPt$MA@ZpZA@YLEA@Zs.v/Q0swDlo", "ln": 34472534 }, { "b": "04d:?0aM1E0bRZM0at\u003eB0aV7amf3i=qud*tnDrSdB]U}JyYFeHwb).Lq#/n=pYIQrvGo*pA@Y+KaoluXzVB!TBo0A-A@ZdVwDliux-I-Bx-IYAwb[T\u003caol-*fAuI", "ln": 34538206 }, { "b": "0rJrogxmyR9zEA)ps*1Tnb@R\u002600je{4f^a*HdE6[4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 34838000 }, { "b": "1{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wyfFCmlfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^xfOfJLfOfDlPAtk@0S\u003c2\u003e0006yb\u0026N[z7Rc]k009610W6fa1{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n", "ln": 34842170 }, { "b": "wnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrE(bNauJ1oPqTo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39aw+A\u003eatLS9fFBK:4kG*}gbg^ziwSVMgfLF6gb*)Af/H*EgDvrFs$\u003eJJf:/Vw1{m\u003cd1}}5rq.X}t5E5tq1pbUFs7ce-x(mN9z/dovfB!o?rrJKu2u2bzzeTr5f=\u00261*1{m\u003cd3i", "ln": 34842348 } ], "depth": 1, "facts": { "imp": [ [ "shell32", "ShellExecuteW" ], [ "advapi32", "RegCloseKey" ], [ "advapi32", "ReportEventW" ], [ "advapi32", "RegisterEventSourceW" ], [ "advapi32", "RegOpenKeyExW" ], [ "advapi32", "RegGetValueW" ], [ "advapi32", "DeregisterEventSource" ], [ "kernel32", "FlsFree" ], [ "kernel32", "CreateActCtxW" ], [ "kernel32", "ActivateActCtx" ], [ "kernel32", "GetLastError" ], [ "kernel32", "FindResourceW" ], [ "kernel32", "GetWindowsDirectoryW" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "FreeLibrary" ], [ "kernel32", "LoadLibraryExW" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "EnterCriticalSection" ], [ "kernel32", "GetFullPathNameW" ], [ "kernel32", "FindNextFileW" ], [ "kernel32", "GetCurrentProcess" ], [ "kernel32", "GetStdHandle" ], [ "kernel32", "GetModuleHandleExW" ], [ "kernel32", "GetModuleFileNameW" ], [ "kernel32", "LeaveCriticalSection" ], [ "kernel32", "GetEnvironmentVariableW" ], [ "kernel32", "FindClose" ], [ "kernel32", "GetFileAttributesW" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "GetConsoleMode" ], [ "kernel32", "GetFileAttributesExW" ], [ "kernel32", "LoadLibraryA" ], [ "kernel32", "WriteConsoleW" ], [ "kernel32", "DeleteCriticalSection" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "IsWow64Process" ], [ "kernel32", "OutputDebugStringW" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "FlsSetValue" ], [ "kernel32", "FlsGetValue" ], [ "kernel32", "FlsAlloc" ], [ "kernel32", "SetLastError" ], [ "kernel32", "VerifyVersionInfoW" ], [ "kernel32", "VerSetConditionMask" ], [ "kernel32", "RaiseException" ], [ "kernel32", "RtlPcToFileHeader" ], [ "kernel32", "RtlUnwindEx" ], [ "kernel32", "RtlLookupFunctionEntry" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "SetUnhandledExceptionFilter" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "LCMapStringEx" ], [ "kernel32", "DecodePointer" ], [ "kernel32", "EncodePointer" ], [ "kernel32", "GetStringTypeW" ], [ "kernel32", "SwitchToThread" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "InitializeCriticalSectionEx" ], [ "user32", "MessageBoxW" ], [ "api-ms-win-crt-heap-l1-1-0", "malloc" ], [ "api-ms-win-crt-heap-l1-1-0", "callnewh" ], [ "api-ms-win-crt-heap-l1-1-0", "set_new_mode" ], [ "api-ms-win-crt-heap-l1-1-0", "calloc" ], [ "api-ms-win-crt-heap-l1-1-0", "free" ], [ "api-ms-win-crt-time-l1-1-0", "wcsftime" ], [ "api-ms-win-crt-time-l1-1-0", "gmtime64_s" ], [ "api-ms-win-crt-time-l1-1-0", "time64" ], [ "api-ms-win-crt-stdio-l1-1-0", "set_fmode" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vsnwprintf_s" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vfwprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "fputwc" ], [ "api-ms-win-crt-stdio-l1-1-0", "p__commode" ], [ "api-ms-win-crt-stdio-l1-1-0", "acrt_iob_func" ], [ "api-ms-win-crt-stdio-l1-1-0", "setvbuf" ], [ "api-ms-win-crt-stdio-l1-1-0", "fflush" ], [ "api-ms-win-crt-stdio-l1-1-0", "wfsopen" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vswprintf" ], [ "api-ms-win-crt-locale-l1-1-0", "lc_locale_name_func" ], [ "api-ms-win-crt-locale-l1-1-0", "pctype_func" ], [ "api-ms-win-crt-locale-l1-1-0", "setlocale" ], [ "api-ms-win-crt-locale-l1-1-0", "mb_cur_max_func" ], [ "api-ms-win-crt-locale-l1-1-0", "unlock_locales" ], [ "api-ms-win-crt-locale-l1-1-0", "lock_locales" ], [ "api-ms-win-crt-locale-l1-1-0", "configthreadlocale" ], [ "api-ms-win-crt-locale-l1-1-0", "create_locale" ], [ "api-ms-win-crt-locale-l1-1-0", "free_locale" ], [ "api-ms-win-crt-locale-l1-1-0", "lc_codepage_func" ], [ "api-ms-win-crt-string-l1-1-0", "strlen" ], [ "api-ms-win-crt-string-l1-1-0", "strcmp" ], [ "api-ms-win-crt-string-l1-1-0", "wcsdup" ], [ "api-ms-win-crt-string-l1-1-0", "wcscmp" ], [ "api-ms-win-crt-string-l1-1-0", "strcpy_s" ], [ "api-ms-win-crt-string-l1-1-0", "wcsnlen" ], [ "api-ms-win-crt-string-l1-1-0", "wcsncmp" ], [ "api-ms-win-crt-string-l1-1-0", "toupper" ], [ "api-ms-win-crt-convert-l1-1-0", "wtoi" ], [ "api-ms-win-crt-convert-l1-1-0", "wcstoul" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm" ], [ "api-ms-win-crt-runtime-l1-1-0", "errno" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm_e" ], [ "api-ms-win-crt-runtime-l1-1-0", "cexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "get_initial_wide_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "p___wargv" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_wide_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "c_exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "register_thread_local_exe_atexit_callback" ], [ "api-ms-win-crt-runtime-l1-1-0", "terminate" ], [ "api-ms-win-crt-runtime-l1-1-0", "crt_atexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "configure_wide_argv" ], [ "api-ms-win-crt-runtime-l1-1-0", "set_app_type" ], [ "api-ms-win-crt-runtime-l1-1-0", "p___argc" ], [ "api-ms-win-crt-runtime-l1-1-0", "register_onexit_function" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "abort" ], [ "api-ms-win-crt-runtime-l1-1-0", "seh_filter_exe" ], [ "api-ms-win-crt-math-l1-1-0", "setusermatherr" ] ], "sec": [ [ ".text", 1024, 87040, 6.4, "r-x" ], [ ".rdata", 88064, 42496, 4.26, "r--" ], [ ".data", 130560, 3072, 2.27, "rw-" ], [ ".pdata", 133632, 3584, 4.84, "r--" ], [ ".reloc", 137216, 1024, 4.66, "r--" ], [ ".rsrc", 138240, 2560, 3.67, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 34873510, "timestamp": 1787363328, "image_size": 159744, "has_overlay": 1, "overlay_end": 34837840, "has_manifest": 1, "headers_size": 1024, "overlay_size": 34697040, "checksum_valid": 1, "file_alignment": 512, "overlay_offset": 140800, "resource_count": 2, "cert_table_size": 10040, "overlay_padding": 34697040, "has_version_info": 1, "computed_checksum": 34873510, "headers_size_ratio": 0, "prose_section_count": 0, "reloc_overhang_bytes": 232, "reloc_overhang_ratio": 0.23, "bss_like_section_count": 0, "section_overflow_count": 0, "signature_expired_days": -210.56, "misaligned_section_count": 0, "version.identity_entropy": 3.56, "base_relocation_block_count": 6, "base_relocation_entry_count": 368, "declared_data_directory_count": 9, "version.identity_symbol_ratio": 0, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 34847880, "entropy": 6.58 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.4, "data_entropy": 2.27, "overlay_size": 34707080, "string_count": 50989, "overlay_ratio": 1, "embedded_files": 20, "overlay_entropy": 6.58, "entropy_variance": 1.56, "avg_string_length": 26.81, "embedded_binaries": 20, "max_string_length": 842, "peak_region_bytes": 1032192, "code_to_data_ratio": 0.97, "peak_region_entropy": 7.9, "string_length_stddev": 31.95, "largest_section_ratio": 0, "sentence_string_count": 3879, "sentence_string_ratio": 0.08, "high_entropy_string_count": 4 }, "imports": { "count": 120 }, "sections": { "count": 6, "code_size": 87040, "entropy_max": 6.4, "entropy_mean": 4.35, "name_entropy": 3.24, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "consistency": { "internal_name_original_filename_mismatch": 0 }, "dependencies": { "count": 12 } } }, "id": 3, "ident": { "name": { "value": "GarnetServer.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "GarnetServer", "source": "pe.version.description", "verified": false }, "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:32 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "project": { "value": "Garnet", "source": "pe.version.product_name", "verified": false }, "version": { "value": "2.1.8.0", "source": "pe.version.file_version", "verified": false }, "build_path": { "value": "D:\\a\\_work\\1\\s\\src\\runtime\\artifacts\\obj\\win-arm64.Release\\corehost\\apphost\\standalone\\apphost.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "K(Li)O₈(AlAs₇C₆CaEr₉EuPPr)H₈(Cm₁₄Cr₁₀Db₁₃F₆MgOs₁₁Po₉U)Md₆(Bi₁₀BkPaPtSi₄)", "path": "win-arm64-based-readytorun.zip!!net10.0/GarnetServer.exe", "pid": 0, "risk": 100, "sha": "a9227572da0ed57ce3dbe1091e5d14378f6ddaab1333488c2317ec2fdb2cdaa6", "size": 34847880, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "binary/embedded/pe", "atk": "T1027.009", "conf": 0.9, "crit": 3, "desc": "Embedded PE binary at file offset 0x23000 (~1318912 bytes)", "spans": [ [ 143360, 32 ], [ 2433024, 32 ], [ 6848512, 31 ], [ 7684096, 30 ], [ 7835648, 30 ], [ 8146944, 31 ], [ 8388608, 31 ], [ 8753152, 31 ] ] }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 87040 ] ] }, { "id": "metadata/binary/debug::pdb-absolute-path", "conf": 0.72, "crit": 3, "desc": "Embedded absolute PDB path", "spans": [ [ 115884, 98 ] ] }, { "id": "metadata/binary/debug::pdb-ci-build-agent-path", "conf": 0.85, "crit": 3, "desc": "CI build-agent PDB path", "spans": [ [ 115884, 98 ] ] }, { "id": "metadata/binary/framework::dotnet-corehost-pdb-path", "conf": 0.98, "crit": 2, "desc": ".NET corehost apphost PDB path", "spans": [ [ 115884, 0 ] ] }, { "id": "metadata/binary/layout/overlay::file-over-2mb", "conf": 0.9, "crit": 2, "desc": "PE file larger than 2 MiB" }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/layout/overlay::large-overlay-1mb", "conf": 0.96, "crit": 3, "desc": "Overlay size at least 1 MiB" }, { "id": "metadata/binary/layout/overlay::large-overlay-64k", "conf": 0.95, "crit": 3, "desc": "Overlay size at least 64 KiB" }, { "id": "metadata/binary/layout/overlay::overlay-over-30pct", "conf": 0.9, "crit": 3, "desc": "PE overlay exceeds thirty percent" }, { "id": "metadata/binary/layout/ratio::multiple-pe-embedded", "conf": 0.9, "crit": 3, "desc": "Two or more embedded PE headers", "spans": [ [ 143360, 47 ] ] }, { "id": "metadata/binary/layout/ratio::overlay-over-90pct", "conf": 0.95, "crit": 3, "desc": "PE overlay exceeds ninety percent" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/resource/manifest::pe-resource-manifest-second", "conf": 1.0, "crit": 2, "desc": "PE second resource is RT_MANIFEST" }, { "id": "metadata/binary/section/prose::high-string-count-pe", "conf": 0.9, "crit": 2, "desc": "PE contains many extracted strings" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-rsrc", "conf": 0.9, "crit": 3, "desc": "Microsoft vendor marker in resource section", "spans": [ [ 139519, 21 ] ] }, { "id": "metadata/binary/vendor::microsoft-prefixed-company", "conf": 0.9, "crit": 3, "desc": "PE company name identifies Microsoft", "spans": [ [ 139276, 9 ] ] }, { "id": "metadata/file/extension/executable::exe", "conf": 1.0, "crit": 2, "desc": "Windows executable extension" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "spans": [ [ 2187142, 53 ], [ 10935280, 57 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 98841, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 107291, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 8105550, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 1186915, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 5564307, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 138884, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 139276, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 139250, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 139302, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 139370, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 139418, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 139738, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-semver-git-hash", "conf": 0.9, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 139768, 46 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 139396, 7 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 139716, 6 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 138374, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 139396, 7 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "micro-behaviors/communications/email/mime::mime-multipart-marker-pe", "conf": 0.9, "crit": 3, "desc": "PE MIME multipart marker", "spans": [ [ 377088, 15 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::getresponse", "conf": 0.72, "crit": 3, "desc": "HTTP response retrieval method", "spans": [ [ 1135595, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::getresponseasync", "conf": 0.72, "crit": 3, "desc": "Async HTTP response retrieval", "spans": [ [ 1116013, 16 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::multipart-form-data-content", "conf": 0.9, "crit": 3, "desc": ".NET multipart form-data content type reference", "spans": [ [ 5370610, 24 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::user-agent-accessor", "conf": 0.8, "crit": 3, "desc": "HttpClient UserAgent accessor", "spans": [ [ 1161570, 13 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-authorization-code-grant", "conf": 0.8, "crit": 3, "desc": "OAuth authorization-code grant field", "spans": [ [ 10929182, 18 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-id-field", "conf": 0.65, "crit": 3, "desc": "OAuth client_id field", "spans": [ [ 2187024, 9 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-secret-field", "conf": 0.65, "crit": 1, "desc": "OAuth client_secret field", "spans": [ [ 12321992, 0 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-device-code-path", "conf": 0.9, "crit": 3, "desc": "OAuth device code endpoint path", "spans": [ [ 10935660, 11 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-challenge", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-challenge field", "spans": [ [ 11097410, 14 ], [ 12321440, 15 ], [ 12483162, 15 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-verifier", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-verifier field", "spans": [ [ 10746714, 14 ], [ 10780644, 14 ], [ 10830113, 13 ], [ 10830246, 12 ], [ 10929220, 13 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-token-endpoint-field", "conf": 0.8, "crit": 3, "desc": "OAuth token endpoint field", "spans": [ [ 10742682, 34 ], [ 10746788, 19 ], [ 10788398, 21 ], [ 10857463, 13 ], [ 12461482, 34 ], [ 12463551, 43 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::dotnet-loopback-prefix", "atk": "T1071.001", "conf": 0.86, "crit": 3, "desc": ".NET loopback HTTP prefix", "spans": [ [ 10917346, 53 ] ] }, { "id": "micro-behaviors/communications/http/telemetry::client-id-request-header", "conf": 0.9, "crit": 3, "desc": "Client-Id HTTP request header literal", "spans": [ [ 17464444, 11 ], [ 17464493, 11 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-file-tree-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST file tree endpoints", "spans": [ [ 2186896, 9 ] ] }, { "id": "micro-behaviors/communications/http/ws-trust::aadsts-authentication-response-code", "conf": 0.94, "crit": 3, "desc": "AADSTS authentication response code", "spans": [ [ 11101198, 11 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-clientbase", "conf": 1.0, "crit": 3, "desc": "References WCF ClientBase class", "spans": [ [ 2121995, 16 ], [ 2266829, 54 ], [ 2266888, 53 ], [ 16945761, 10 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-endpointaddress", "conf": 1.0, "crit": 3, "desc": "References WCF EndpointAddress", "spans": [ [ 10841542, 26 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-generated-code-attribute", "conf": 0.9, "crit": 3, "desc": "WCF generated code attribute", "spans": [ [ 1137733, 22 ] ] }, { "id": "micro-behaviors/communications/socket/create::tcpclient-dotnet-str", "conf": 0.85, "crit": 3, "desc": ".NET TCP client type or method names", "spans": [ [ 16960063, 9 ] ] }, { "id": "micro-behaviors/communications/socket/create::tcplistener-dotnet-str", "conf": 0.82, "crit": 3, "desc": ".NET TcpListener class reference", "spans": [ [ 10832406, 11 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::dotnet-sslstream-type", "conf": 0.94, "crit": 3, "desc": ".NET SslStream transport reference", "spans": [ [ 16950858, 9 ] ] }, { "id": "micro-behaviors/communications/ssh/client::password-auth-method", "atk": "T1021.004", "conf": 0.7, "crit": 3, "desc": "SSH password authentication method string", "spans": [ [ 17311865, 22 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 9767240, 0 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/kem::hybrid-key-material-labels", "atk": "T1573", "mbc": "C0027", "conf": 0.9, "crit": 3, "desc": "Hybrid key material labels", "spans": [ [ 5402631, 14 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::dotnet-compute-hash", "conf": 0.85, "crit": 3, "desc": ".NET ComputeHash method reference", "spans": [ [ 5328774, 11 ] ] }, { "id": "micro-behaviors/crypto/hash/hmac::dotnet-hmacsha256", "conf": 0.93, "crit": 3, "desc": ".NET HMAC-SHA256 operation", "spans": [ [ 5276990, 17 ], [ 13173618, 10 ] ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-named-algorithm-api", "mbc": "C0029", "conf": 0.9, "crit": 3, "desc": "Named HMAC algorithm API symbol", "spans": [ [ 13173618, 10 ] ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "spans": [ [ 16963519, 0 ] ] }, { "id": "micro-behaviors/crypto/library/stdlib::dotnet-cryptostream", "conf": 0.8, "crit": 3, "desc": ".NET CryptoStream symmetric pipeline class", "spans": [ [ 13198339, 12 ] ] }, { "id": "micro-behaviors/crypto/library/stdlib::dotnet-icryptotransform", "conf": 0.8, "crit": 3, "desc": ".NET ICryptoTransform cipher interface", "spans": [ [ 5337945, 16 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-authenticated-mode-info", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt authenticated mode struct", "spans": [ [ 13176231, 37 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-gcm", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt AES-GCM mode property string", "spans": [ [ 6717592, 15 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-gcm-wide", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "UTF-16 Windows BCrypt AES-GCM mode", "spans": [ [ 6717592, 15 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-prop", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt ChainingMode property key", "spans": [ [ 5516860, 12 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-decrypt-api", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt decrypt API", "spans": [ [ 13215921, 13 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-encrypt-api", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt encrypt API", "spans": [ [ 13215935, 13 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-open-algorithm-provider", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt algorithm provider API", "spans": [ [ 13205142, 27 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-set-property", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt property setter API", "spans": [ [ 13219589, 17 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::jwt-jwe-context--rx-3", "conf": 0.95, "crit": 3, "desc": ".NET X.509 encryption-credentials type", "spans": [ [ 13210660, 25 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::jwt-jwe-context--rx-5", "conf": 0.95, "crit": 3, "desc": ".NET JSON Web Token library reference", "spans": [ [ 10840862, 24 ], [ 11984669, 19 ], [ 11990553, 10 ], [ 12475111, 17 ], [ 12475129, 17 ], [ 12517702, 121 ], [ 13177855, 24 ], [ 13184228, 42 ] ] }, { "id": "micro-behaviors/crypto/symmetric/decrypt::dotnet-create-decryptor", "conf": 0.9, "crit": 3, "desc": ".NET symmetric decryptor creation", "spans": [ [ 5351416, 15 ] ] }, { "id": "micro-behaviors/crypto/symmetric/decrypt::transform-final-block", "conf": 0.85, "crit": 3, "desc": "Final-block symmetric transform operation", "spans": [ [ 5331247, 19 ] ] }, { "id": "micro-behaviors/crypto/symmetric/encrypt::dotnet-create-encryptor", "conf": 0.9, "crit": 3, "desc": ".NET symmetric encryption API reference", "spans": [ [ 5351511, 15 ] ] }, { "id": "micro-behaviors/data/compress/stream::system-io-compression", "conf": 0.75, "crit": 3, "desc": ".NET System.IO.Compression namespace reference", "spans": [ [ 13200350, 21 ] ] }, { "id": "micro-behaviors/data/db/access::connection-string-singular", "conf": 0.7, "crit": 3, "desc": "ConnectionString property", "spans": [ [ 5290030, 16 ], [ 5327006, 16 ], [ 5355426, 16 ], [ 7818415, 16 ], [ 17117459, 16 ], [ 17292900, 16 ], [ 17303703, 16 ], [ 17303736, 16 ] ] }, { "id": "micro-behaviors/data/db/access::connection-strings-plural", "conf": 0.7, "crit": 3, "desc": "ConnectionStrings property", "spans": [ [ 5355426, 17 ] ] }, { "id": "micro-behaviors/data/db/linq::expression-visitor", "conf": 0.6, "crit": 3, "desc": "ExpressionVisitor class", "spans": [ [ 8087102, 17 ] ] }, { "id": "micro-behaviors/data/db/linq::lambda-expression", "conf": 0.6, "crit": 3, "desc": "LambdaExpression class", "spans": [ [ 8084209, 16 ] ] }, { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6, "crit": 3, "desc": "System.Linq.Expressions namespace reference", "spans": [ [ 1156857, 23 ] ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "spans": [ [ 17434790, 10 ], [ 17434830, 10 ] ] }, { "id": "micro-behaviors/data/decode/hex::dotnet-hexstring-conversion", "conf": 0.86, "crit": 3, "desc": ".NET hex string conversion", "spans": [ [ 1141447, 9 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 34838096, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 34842218, 0 ] ] }, { "id": "micro-behaviors/data/embedded/payload/image::dotnet-resource-manager-token", "atk": "T1027.003", "mbc": "F0001.006", "conf": 0.78, "crit": 3, "desc": ".NET resource manager reference", "spans": [ [ 7768297, 19 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-getmanifestresourcestream", "atk": "T1027.009", "conf": 0.85, "crit": 3, "desc": ".NET manifest resource stream access", "spans": [ [ 16950821, 25 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-getobject-token", "atk": "T1027.009", "conf": 0.72, "crit": 3, "desc": ".NET resource GetObject token", "spans": [ [ 1160206, 9 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-resource-reader", "atk": "T1027.009", "conf": 0.86, "crit": 3, "desc": "References the .NET ResourceReader type", "spans": [ [ 7718588, 128 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::find-resource-w", "atk": "T1027.009", "conf": 0.8, "crit": 2, "desc": "Locate PE resource entry", "spans": [ [ 94296, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::dotnet-to-base64string-text", "conf": 0.9, "crit": 3, "desc": ".NET Base64 encoder name in binary text", "spans": [ [ 1141044, 14 ] ] }, { "id": "micro-behaviors/data/encode/charset::lowercase-digits-alphabet", "conf": 0.5, "crit": 3, "desc": "Lowercase alphanumeric character set", "spans": [ [ 94416, 36 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "spans": [ [ 1144754, 8 ], [ 5315952, 12 ], [ 8986761, 56 ], [ 11980847, 44 ], [ 11980892, 33 ], [ 15728604, 40 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-name-value-collection", "conf": 0.8, "crit": 3, "desc": ".NET NameValueCollection type reference", "spans": [ [ 5343112, 19 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-append-method-token", "conf": 0.72, "crit": 3, "desc": "Append method-name token", "spans": [ [ 1129198, 6 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-combine-method-token", "conf": 0.72, "crit": 3, "desc": "Combine method-name token", "spans": [ [ 1133749, 7 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-get-directory-name-token", "conf": 0.72, "crit": 3, "desc": "GetDirectoryName method-name token", "spans": [ [ 11612060, 16 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder type reference", "spans": [ [ 7388206, 0 ] ] }, { "id": "micro-behaviors/fs/config/system::wininit-rename-section", "conf": 0.72, "crit": 3, "desc": "WININIT rename section marker", "spans": [ [ 5314595, 6 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "spans": [ [ 128620, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 94344, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "spans": [ [ 94368, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/full::dotnet-readallbytes-token", "conf": 0.86, "crit": 3, "desc": ".NET ReadAllBytes method reference", "spans": [ [ 11616865, 12 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 94600, 0 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-ansi-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET ANSI pointer string marshalling", "spans": [ [ 2146983, 15 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-function-pointer-delegate", "conf": 0.92, "crit": 3, "desc": ".NET native function-pointer delegate conversion", "spans": [ [ 7660698, 29 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-unmanaged-memory-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET unmanaged memory allocation API", "spans": [ [ 7659246, 12 ] ] }, { "id": "micro-behaviors/os/autorun/scheduled::task-scheduler-keyword", "atk": "T1053.005", "mbc": "F0012", "conf": 0.85, "crit": 3, "desc": "Windows TaskScheduler API keyword", "spans": [ [ 8086536, 13 ] ] }, { "id": "micro-behaviors/os/env/cloud::azure-credentials-dup", "conf": 0.8, "crit": 3, "desc": "Azure credential environment variables", "spans": [ [ 2185800, 19 ] ] }, { "id": "micro-behaviors/os/env/read::get-environment-variable", "conf": 0.85, "crit": 3, "desc": "Read a process env var (GetEnvironmentVariable)", "spans": [ [ 94416, 23 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 94288, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-dup", "conf": 0.7, "crit": 2, "desc": "Get module file path (Unicode)", "spans": [ [ 94400, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ex", "conf": 0.82, "crit": 3, "desc": "Get extended module handle", "spans": [ [ 94392, 18 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 94320, 16 ] ] }, { "id": "micro-behaviors/os/network/interface::dotnet-get-physical-address", "conf": 1.0, "crit": 3, "desc": "References GetPhysicalAddress method", "spans": [ [ 16455278, 18 ] ] }, { "id": "micro-behaviors/os/network/interface::dotnet-socket-local-endpoint", "conf": 1.0, "crit": 3, "desc": "References Socket LocalEndPoint getter", "spans": [ [ 16960582, 17 ] ] }, { "id": "micro-behaviors/os/privilege/check::is-user-an-admin", "atk": "T1033", "conf": 0.75, "crit": 3, "desc": "IsUserAnAdmin API call", "spans": [ [ 10817922, 13 ] ] }, { "id": "micro-behaviors/os/random/crypto::dotnet-random-number-generator", "conf": 0.85, "crit": 3, "desc": ".NET cryptographic random generator", "spans": [ [ 5351324, 21 ] ] }, { "id": "micro-behaviors/os/random/prng/stdlib::random-nextbytes", "conf": 0.84, "crit": 3, "desc": ".NET Random.NextBytes method call", "spans": [ [ 1155678, 9 ] ] }, { "id": "micro-behaviors/os/sysinfo/network::loopback-adapter-name", "conf": 0.9, "crit": 3, "desc": "Loopback adapter name", "spans": [ [ 10894763, 8 ], [ 22067724, 8 ] ] }, { "id": "micro-behaviors/process/create/exec::shell-execute", "atk": "T1059.001", "conf": 0.75, "crit": 3, "desc": "Opens a target via ShellExecuteW", "spans": [ [ 94696, 13 ] ] }, { "id": "micro-behaviors/process/create/load/local::dotnet-load-from", "conf": 0.85, "crit": 3, "desc": ".NET LoadFrom assembly-loading reference", "spans": [ [ 16451218, 8 ] ] }, { "id": "micro-behaviors/process/create/shellexec::shell-execute-call", "atk": "T1059.001", "conf": 0.85, "crit": 3, "desc": "ShellExecute API call", "spans": [ [ 128098, 13 ] ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "spans": [ [ 10793436, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::diagnostics-namespace-dotnet", "conf": 0.75, "crit": 3, "desc": ".NET process namespace token", "spans": [ [ 2161674, 26 ] ] }, { "id": "micro-behaviors/process/create/spawn::process-filename-setter-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET process filename property setter token", "spans": [ [ 2141305, 12 ] ] }, { "id": "micro-behaviors/process/create/spawn::process-token-dotnet", "conf": 0.82, "crit": 3, "desc": ".NET Process type token", "spans": [ [ 2153264, 27 ], [ 2153292, 36 ], [ 2153329, 34 ], [ 2161108, 20 ], [ 10825182, 16 ] ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-error-dotnet", "conf": 0.82, "crit": 3, "desc": ".NET child stderr redirection", "spans": [ [ 2156408, 25 ] ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-input-dotnet", "conf": 0.8, "crit": 3, "desc": ".NET child stdin redirection", "spans": [ [ 2166178, 25 ] ] }, { "id": "micro-behaviors/process/create/spawn::use-shell-execute-property", "conf": 0.82, "crit": 3, "desc": ".NET UseShellExecute property setter", "spans": [ [ 2144950, 19 ] ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "spans": [ [ 2149621, 0 ] ] }, { "id": "micro-behaviors/process/hook/interception::dynamic-proxy-class", "conf": 0.7, "crit": 3, "desc": "DynamicProxy class reference", "spans": [ [ 2253563, 12 ], [ 11634276, 12 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 94672, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::appdomain-currentdomain", "conf": 0.6, "crit": 3, "desc": ".NET AppDomain CurrentDomain accessor", "spans": [ [ 1145581, 17 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-delegate", "conf": 0.8, "crit": 3, "desc": "Creates .NET reflection delegate", "spans": [ [ 2143476, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-instance-token", "conf": 0.8, "crit": 3, "desc": "CreateInstance member-name token", "spans": [ [ 1130008, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::dynamic-method-api-token", "conf": 0.8, "crit": 3, "desc": "References the .NET DynamicMethod API", "spans": [ [ 8078363, 13 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::invoke-member-token", "conf": 0.82, "crit": 3, "desc": ".NET InvokeMember method reference", "spans": [ [ 7388102, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "spans": [ [ 1135129, 10 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-alloc", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage allocation", "spans": [ [ 94536, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-get-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage retrieval", "spans": [ [ 94528, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-set-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage assignment", "spans": [ [ 94520, 0 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 94608, 0 ] ] }, { "id": "micro-behaviors/ui/controls/widget::winforms-timer", "conf": 0.72, "crit": 3, "desc": "WinForms Timer control token", "spans": [ [ 23036298, 5 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-elapsedticks", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch elapsed ticks", "spans": [ [ 10842596, 12 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-gettimestamp", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch timestamp check", "spans": [ [ 1148905, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/shape::high-string-density-large-pe", "atk": "T1027", "mbc": "B0032", "conf": 0.82, "crit": 3, "desc": "Large PE with dense string corpus" }, { "id": "objectives/anti-static/obfuscation/binary-metrics/shape::large-overlay-size", "atk": "T1027", "mbc": "B0032", "conf": 0.7, "crit": 3, "desc": "Overlay large enough to contain payload" }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::import-count-over-120", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Large PE imports over 120" }, { "id": "objectives/anti-static/obfuscation/control-flow/dispatch::sparse-opaque-pe-profile-code", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with elevated code entropy", "spans": [ [ 1024, 87040 ] ] }, { "id": "objectives/anti-static/obfuscation/control-flow/logic::overlay-at-least-half", "conf": 0.9, "crit": 3, "desc": "Binary overlay is at least 50%" }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "spans": [ [ 5307846, 13 ], [ 5377347, 13 ], [ 13218228, 6 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::appdomain-class-token", "conf": 0.65, "crit": 3, "desc": "AppDomain class token", "spans": [ [ 1145571, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-assembly-token", "conf": 0.78, "crit": 3, "desc": "Assembly accessor token (get_Assembly)", "spans": [ [ 1167475, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-constructors-token", "conf": 0.82, "crit": 3, "desc": "Reflection GetConstructors token", "spans": [ [ 7893186, 15 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-entrypoint", "conf": 0.7, "crit": 3, "desc": "Assembly entry point resolution", "spans": [ [ 7694306, 14 ] ] }, { "id": "objectives/command-and-control/backdoor/binary::managed-authentication", "atk": "T1071", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "Managed authentication method", "spans": [ [ 2120249, 17 ] ] }, { "id": "objectives/command-and-control/backdoor/rat/config::c2-config-name-marker", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "C2 endpoint configuration name", "spans": [ [ 16960655, 14 ] ] }, { "id": "objectives/command-and-control/backdoor/rat/modular::module-command-handler--registermodule", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Go RAT module command handler (RegisterModule)", "spans": [ [ 22045381, 14 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/http::bun-loader-aes-cbc", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Bun loader AES CBC marker", "spans": [ [ 13171328, 9 ] ] }, { "id": "objectives/command-and-control/dropper/staging/embedded::has-high-entropy-regions", "atk": "T1105", "conf": 1.0, "crit": 3, "desc": "Binary contains high-entropy data regions" }, { "id": "objectives/credential-access/env/secrets/bulk-access::azure-client-secret-env-name", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Azure client secret env name", "spans": [ [ 2185800, 19 ] ] }, { "id": "objectives/evasion/anti-av/code-padding::small-code-section-in-large-pe", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Small code section in large PE", "spans": [ [ 1024, 19 ] ] }, { "id": "objectives/evasion/masquerade/binary::dense-microsoft-cert-text", "atk": "T1036", "mbc": "OB0006", "conf": 0.9, "crit": 3, "desc": "Dense Microsoft certificate text", "spans": [ [ 139516, 46 ], [ 147916, 21 ], [ 1234390, 43 ], [ 11665892, 22 ], [ 15958848, 47 ], [ 15978134, 44 ], [ 17331112, 35 ], [ 34838064, 25 ] ] }, { "id": "objectives/evasion/masquerade/cert::security-dir-embedded-pe", "atk": "T1553.002", "mbc": "F0001", "conf": 0.97, "crit": 3, "desc": "Certificate region begins inside embedded PE", "spans": [ [ 143361, 44 ] ] }, { "id": "objectives/evasion/masquerade/identity/mimicry::windowsupdate-appdata-path--rx-3", "atk": "T1036.005", "conf": 0.95, "crit": 3, "desc": "ProgramData path fragment", "spans": [ [ 10918664, 48 ] ] }, { "id": "objectives/evasion/masquerade/version-resource/claim::microsoft-company-name-short", "atk": "T1036.005", "conf": 0.82, "crit": 3, "desc": "Microsoft short company name", "spans": [ [ 139276, 9 ] ] }, { "id": "objectives/exfiltration/http/collect::csharp-bytearray-content", "atk": "T1041", "conf": 0.93, "crit": 3, "desc": "C# byte array content", "spans": [ [ 5370890, 16 ] ] }, { "id": "objectives/persistence/system/registry/com-hijack::current-user-hive-marker", "atk": "T1546.015", "conf": 0.9, "crit": 3, "desc": "Current-user Windows registry hive", "spans": [ [ 107600, 17 ], [ 107736, 4 ] ] }, { "id": "metadata/binary/layout/embedded::pe-embedded", "conf": 0.9, "crit": 3, "desc": "Valid PE/MZ binary found embedded in file", "spans": [ [ 143360, 47 ] ] }, { "id": "metadata/binary/layout/embedded::repeated-standard-pe-images", "conf": 0.97, "crit": 3, "desc": "Four or more embedded standard PE images", "spans": [ [ 143360, 47 ] ] }, { "id": "metadata/binary/layout/overlay::overlay-dominates-80pct", "conf": 0.94, "crit": 3, "desc": "PE overlay exceeds eighty percent" }, { "id": "metadata/binary/layout/ratio::many-pe-embedded", "conf": 0.95, "crit": 3, "desc": "Six or more embedded PE headers", "spans": [ [ 143360, 47 ] ] }, { "id": "metadata/binary/signing::signed-pe-large-noncertificate-overlay", "conf": 0.9, "crit": 3, "desc": "Signed PE has large non-certificate overlay" }, { "id": "metadata/binary/symbols/imports::imports-advapi32-dll", "conf": 0.95, "crit": 3, "desc": "Binary imports ADVAPI32.dll", "spans": [ [ 128234, 12 ] ] }, { "id": "metadata/build/manifest::pe-manifest-myapplication-template", "conf": 0.9, "crit": 3, "desc": "Manifest is MyApplication template name", "spans": [ [ 140101, 17 ] ] }, { "id": "metadata/file/string/cloud::azure-managed-identity-token-path", "conf": 0.9, "crit": 3, "desc": "Azure managed identity token endpoint", "spans": [ [ 2186896, 31 ], [ 2187142, 53 ], [ 10917346, 53 ] ] }, { "id": "metadata/file/string/cloud::azure-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "Azure IMDS endpoint", "spans": [ [ 10935280, 57 ] ] }, { "id": "metadata/lang/encoded/wide::shell-interpreter-cmd", "conf": 0.95, "crit": 1, "desc": "cmd interpreter marker encoded", "spans": [ [ 2172484, 0 ] ] }, { "id": "metadata/package/config::get-env-var", "conf": 0.6, "crit": 3, "desc": "GetEnvironmentVariable method", "spans": [ [ 128594, 23 ] ] }, { "id": "metadata/package/versioning/scheme::pe-file-description-present", "conf": 0.95, "crit": 2, "desc": "PE FileDescription field is populated", "spans": [ [ 139336, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-legal-copyright-present", "conf": 0.95, "crit": 2, "desc": "PE LegalCopyright field is populated", "spans": [ [ 139516, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-product-name-present", "conf": 0.95, "crit": 2, "desc": "PE ProductName field is populated", "spans": [ [ 139716, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 139690, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::default-request-headers", "conf": 0.8, "crit": 3, "desc": "DefaultRequestHeaders accessor", "spans": [ [ 10846302, 25 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::getasync", "atk": "T1105", "conf": 0.86, "crit": 3, "desc": "HttpClient asynchronous HTTP response retrieval", "spans": [ [ 10764916, 8 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::httpclient", "conf": 0.82, "crit": 3, "desc": "System.Net.Http.HttpClient type reference", "spans": [ [ 1161614, 10 ], [ 11156916, 11 ], [ 13499635, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::readasstringasync", "conf": 0.84, "crit": 3, "desc": ".NET asynchronous HTTP response body read", "spans": [ [ 10762947, 17 ] ] }, { "id": "micro-behaviors/communications/http/oauth::microsoft-login", "conf": 0.6, "crit": 3, "desc": "References a Microsoft login domain", "spans": [ [ 10876166, 41 ], [ 10877028, 124 ], [ 10997986, 121 ], [ 11068502, 104 ], [ 11090744, 128 ], [ 11100726, 60 ], [ 11627162, 40 ], [ 13509796, 34 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-protocol-reference", "conf": 0.5, "crit": 3, "desc": "References the OAuth 2 protocol", "spans": [ [ 2186915, 6 ], [ 10744166, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Cleartext http:// URL", "spans": [ [ 2187142, 53 ], [ 6733907, 43 ], [ 9231973, 31 ], [ 10903622, 58 ], [ 10903740, 48 ], [ 10903838, 55 ], [ 10903950, 54 ], [ 10904978, 81 ] ] }, { "id": "micro-behaviors/communications/http/websocket::connect-async-method-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": ".NET ConnectAsync method token", "spans": [ [ 16440440, 12 ] ] }, { "id": "micro-behaviors/communications/http/websocket::receive-async-method-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": ".NET ReceiveAsync method token", "spans": [ [ 16941790, 12 ] ] }, { "id": "micro-behaviors/communications/socket/raw::raw-socket-ref", "atk": "T1011", "mbc": "C0001", "conf": 0.7, "crit": 1, "desc": "Raw socket terminology", "spans": [ [ 22080978, 0 ] ] }, { "id": "micro-behaviors/communications/ssh/client::auth-failed", "atk": "T1021.004", "conf": 0.5, "crit": 3, "desc": "SSH authentication failed message", "spans": [ [ 2188118, 38 ], [ 22255820, 21 ], [ 22256134, 61 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/ecdh::ecdh-api-reference", "atk": "T1573.001", "conf": 0.88, "crit": 3, "desc": "ECDH key-agreement API reference", "spans": [ [ 12718496, 4 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/rsa::dotnet-rsa-padding-raw", "conf": 0.8, "crit": 3, "desc": "Dotnet RSA encryption padding API", "spans": [ [ 13181216, 37 ], [ 13195248, 24 ], [ 13195273, 24 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "spans": [ [ 1148966, 11 ], [ 1156857, 11 ], [ 22044171, 11 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "spans": [ [ 22233479, 10 ] ] }, { "id": "micro-behaviors/data/decode/base64::dotnet-frombase64string-text", "conf": 0.9, "crit": 3, "desc": ".NET FromBase64String method reference", "spans": [ [ 1141027, 16 ] ] }, { "id": "micro-behaviors/data/encode/image/pixel::pixel-access-lockbits", "conf": 0.8, "crit": 2, "desc": ".NET Bitmap.LockBits raw pixel-buffer lock", "spans": [ [ 32315047, 0 ] ] }, { "id": "micro-behaviors/data/encode/image/pixel::pixel-access-stride", "conf": 0.8, "crit": 2, "desc": ".NET BitmapData.Stride row-length field", "spans": [ [ 32267740, 0 ] ] }, { "id": "micro-behaviors/data/parse/vocabulary::ciphertext-key-vocabulary", "conf": 0.8, "crit": 3, "desc": "Uses ciphertext, shared-secret, or trailer terms", "spans": [ [ 5272340, 10 ], [ 5604088, 10 ], [ 13216549, 10 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::get-files-token", "conf": 0.88, "crit": 3, "desc": ".NET GetFiles enumeration token", "spans": [ [ 22107965, 14 ], [ 32305989, 8 ] ] }, { "id": "micro-behaviors/fs/path/extension::exe-name-or-extension", "conf": 0.5, "crit": 1, "desc": "References a Windows .exe filename or extension", "spans": [ [ 2172487, 0 ] ] }, { "id": "micro-behaviors/fs/path/system::programdata-directory-path", "conf": 0.82, "crit": 3, "desc": "ProgramData directory path reference", "spans": [ [ 10918664, 40 ] ] }, { "id": "micro-behaviors/fs/write/file/full::dotnet-writeallbytes-token", "conf": 0.86, "crit": 3, "desc": ".NET File.WriteAllBytes token", "spans": [ [ 11616878, 13 ] ] }, { "id": "micro-behaviors/fs/write/file/handle::writefile-api-text-reference", "conf": 0.9, "crit": 3, "desc": "WriteFile API name in PE text", "spans": [ [ 32270741, 9 ] ] }, { "id": "micro-behaviors/mem/protect/modify::virtual-alloc-string", "atk": "T1587.001", "conf": 0.9, "crit": 3, "desc": "VirtualAlloc API string reference", "spans": [ [ 17104669, 12 ] ] }, { "id": "micro-behaviors/os/env/read::getenv-profiling-api", "conf": 0.86, "crit": 3, "desc": "GetEnvironmentVariable profiler check", "spans": [ [ 128594, 23 ], [ 1131874, 22 ] ] }, { "id": "micro-behaviors/os/module/load::get-proc-address-import", "conf": 0.9, "crit": 3, "desc": "Resolve exports with GetProcAddress", "spans": [ [ 94312, 14 ] ] }, { "id": "micro-behaviors/process/create/exec::cmd-exe-reference", "conf": 0.8, "crit": 3, "desc": "References Windows cmd.exe interpreter", "spans": [ [ 2172484, 7 ] ] }, { "id": "micro-behaviors/process/create/hidden::dotnet-create-no-window", "atk": "T1564.003", "conf": 0.86, "crit": 3, "desc": ".NET process window suppression", "spans": [ [ 2166597, 18 ] ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-output-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET child stdout capture and redirection", "spans": [ [ 2166227, 26 ] ] }, { "id": "micro-behaviors/process/debug/event::output-debug-string", "conf": 0.82, "crit": 3, "desc": "References the Windows debugger output API", "spans": [ [ 128814, 18 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.72, "crit": 3, "desc": ".NET GetFields reflection method reference", "spans": [ [ 7390506, 9 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.8, "crit": 3, "desc": ".NET Activator type reference", "spans": [ [ 2157043, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::low-import-count", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Sparse import table" }, { "id": "objectives/anti-static/pack/runtime::dotnet-interop-services-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Runtime.InteropServices name", "spans": [ [ 1154265, 30 ], [ 2158101, 39 ] ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-reflection-emit-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Reflection.Emit name", "spans": [ [ 8084651, 35 ], [ 8089350, 34 ], [ 8089412, 22 ] ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-reflection-primitives-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Reflection.Primitives name", "spans": [ [ 8087995, 28 ] ] }, { "id": "objectives/command-and-control/dns/tunneling::client-secret-config-field", "atk": "T1071.004", "mbc": "B0030", "conf": 0.92, "crit": 3, "desc": "Entra client secret configuration field", "spans": [ [ 2172208, 12 ] ] }, { "id": "objectives/evasion/anti-av/import-pollution::winmm-library", "conf": 0.8, "crit": 3, "desc": "winmm library import", "spans": [ [ 8714858, 9 ] ] }, { "id": "metadata/binary/framework::dotnet-selfcontained-bundle", "conf": 0.95, "crit": 2, "desc": ".NET self-contained runtime bundle", "uses": [ 6, 186, 187 ], "spans": [ [ 115884, 0 ], [ 143360, 0 ] ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 20, 22 ], "spans": [ [ 139276, 9 ] ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "uses": [ 36, 38, 42 ], "spans": [ [ 139738, 0 ] ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 20, 46, 99, 100 ], "spans": [ [ 34842218, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 45, 46 ] }, { "id": "micro-behaviors/communications/http/client/managed::custom-user-agent-headers", "conf": 0.85, "crit": 3, "desc": "Default request headers include User-Agent access", "uses": [ 51, 200 ], "spans": [ [ 1161570, 13 ], [ 10846302, 25 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-credentials", "conf": 0.86, "crit": 3, "desc": "OAuth client credential fields", "uses": [ 53, 54 ], "spans": [ [ 2187024, 9 ], [ 12321992, 13 ] ] }, { "id": "micro-behaviors/communications/socket/raw::raw", "atk": "T1011", "mbc": "C0001", "conf": 0.8, "crit": 3, "desc": "Create raw network sockets", "uses": [ 209 ], "spans": [ [ 22080978, 9 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-embedded-resource-read-any", "atk": "T1027.009", "conf": 0.86, "crit": 3, "desc": ".NET resource-reading API references", "uses": [ 102, 103, 104 ], "spans": [ [ 1160206, 9 ], [ 7718588, 128 ], [ 16950821, 25 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::find-resource-any", "atk": "T1027.009", "conf": 0.8, "crit": 3, "desc": "Locates a PE resource entry", "uses": [ 105 ], "spans": [ [ 94296, 13 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-append", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder Append use", "uses": [ 110, 113 ], "spans": [ [ 1129198, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 69, 70, 210 ], "spans": [ [ 17311865, 0 ] ] }, { "id": "micro-behaviors/os/env/secret-name::credential-env-read", "conf": 0.9, "crit": 3, "desc": "Reads a credential-bearing environment variable", "uses": [ 124 ], "spans": [ [ 2185800, 19 ] ] }, { "id": "micro-behaviors/process/create/spawn::dotnet-redirected-stdio", "conf": 0.88, "crit": 2, "desc": ".NET child process stdio redirection", "uses": [ 142, 143, 144, 229 ], "spans": [ [ 10825182, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-token-pair", "conf": 0.72, "crit": 3, "desc": "Multiple .NET reflection resolver APIs", "uses": [ 150, 231 ], "spans": [ [ 2143476, 14 ], [ 7390506, 9 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 239 ], "spans": [ [ 115884, 0 ], [ 143360, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 242 ], "spans": [ [ 34842218, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 239 ], "spans": [ [ 115884, 98 ], [ 143360, 47 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 255 ], "spans": [ [ 34842218, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 254 ], "spans": [ [ 115884, 98 ], [ 143360, 47 ] ] }, { "id": "metadata/binary/layout/overlay::compact-image-multistage-pe", "conf": 0.96, "crit": 4, "desc": "Compact mapped image with embedded stages", "uses": [ 7, 8, 12 ], "spans": [ [ 143360, 47 ] ] }, { "id": "metadata/binary/section/prose::high-string-count-pe-no-exceptions", "conf": 0.9, "crit": 3, "desc": "Non-compiler PE with very high string count", "uses": [ 17 ] }, { "id": "metadata/lang/encoded/wide::shell-interpreter-encoded", "conf": 0.9, "crit": 3, "desc": "Encoded shell interpreter (wide strings)", "uses": [ 194 ], "spans": [ [ 2172484, 7 ] ] }, { "id": "metadata/signed/certificate/identity::microsoft-signed-foreign-company", "conf": 0.94, "crit": 3, "desc": "Microsoft-signed PE has non-Microsoft company", "uses": [ 33, 255 ], "spans": [ [ 139276, 9 ], [ 34838096, 31 ], [ 34842218, 28 ], [ 34842396, 29 ] ] }, { "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword", "conf": 0.5, "crit": 3, "desc": "Encryption algorithm keyword", "uses": [ 75 ], "spans": [ [ 12042291, 6 ], [ 16963519, 6 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::dotnet-aes-rsa-hybrid-keywrap-pattern", "conf": 0.9, "crit": 3, "desc": "Dotnet AES and RSA key-wrap APIs", "uses": [ 90, 212 ], "spans": [ [ 5351511, 15 ], [ 13181216, 37 ], [ 13195248, 24 ], [ 13195273, 24 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-managed-resource-access", "atk": "T1027.009", "conf": 0.9, "crit": 3, "desc": ".NET embedded-resource API references", "uses": [ 102, 103, 104 ], "spans": [ [ 1160206, 9 ], [ 7718588, 128 ], [ 16950821, 25 ] ] }, { "id": "objectives/anti-static/pack/runtime::embedded-dotnet-runtime-assembly-strings", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded .NET runtime assembly-name strings", "uses": [ 234, 235, 236 ], "spans": [ [ 1154265, 30 ], [ 2158101, 39 ], [ 8084651, 35 ], [ 8087995, 28 ], [ 8089350, 34 ], [ 8089412, 22 ] ] }, { "id": "objectives/command-and-control/dropper/staging/embedded::dotnet-aes-resource-dropper", "atk": "T1027.009", "mbc": "B0030", "conf": 0.92, "crit": 3, "desc": ".NET AES resource extraction dropper", "uses": [ 88, 222, 247 ], "spans": [ [ 1160206, 9 ], [ 5351416, 15 ], [ 7718588, 128 ], [ 11616878, 13 ], [ 16950821, 25 ] ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "uses": [ 192, 193 ], "spans": [ [ 10935280, 0 ] ] }, { "id": "objectives/evasion/process/hidden/execution::dotnet-hidden-process-launch", "conf": 0.92, "crit": 3, "desc": ".NET hidden process launch setup", "uses": [ 140, 142, 145, 228 ], "spans": [ [ 2144950, 19 ], [ 2153264, 27 ], [ 2153292, 36 ], [ 2153329, 34 ], [ 2161108, 20 ], [ 2161674, 26 ], [ 2166597, 18 ], [ 10825182, 16 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/layout/size::small-pe", "conf": 0.6, "crit": 3, "desc": "Small PE binary (\u003c100KB)", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/vendor::is-microsoft-named", "conf": 0.8, "crit": 3, "desc": "File name contains Microsoft", "from": [ { "file": 6 } ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)", "from": [ { "file": 6 } ] }, { "id": "metadata/signed/trust-level::dotnet-strong-name-signed", "conf": 0.95, "crit": 3, "desc": "Managed assembly is strong-name signed", "from": [ { "file": 6 } ] }, { "id": "objectives/evasion/masquerade/version-resource/contradiction::microsoft-company-versioninfo-kv", "atk": "T1036.005", "conf": 0.95, "crit": 3, "desc": "Microsoft company version identity", "from": [ { "file": 6 } ] }, { "id": "well-known/lib/runtime/managed/dotnet-runtime::microsoft-dotnet-product-name", "conf": 0.99, "crit": 3, "desc": "Microsoft .NET product version identity", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/code/complexity::few-leaf-functions", "conf": 0.4, "crit": 3, "desc": "Binary has very few leaf functions", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/symbols/count::no-imports", "conf": 0.7, "crit": 3, "desc": "PE has no imported DLL dependencies", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/vendor::microsoft-corp-versioninfo", "conf": 0.9, "crit": 3, "desc": "Claims Microsoft in version resource", "from": [ { "file": 6 } ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record", "from": [ { "file": 6 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "file": 6 } ], "uses": [ 270, 271 ] }, { "id": "objectives/evasion/masquerade/trust::unsigned-pe-microsoft-version-claim", "atk": "T1036.005", "conf": 0.94, "crit": 3, "desc": "PE has Microsoft version metadata but no verifiable embedded signature", "from": [ { "file": 6 } ], "uses": [ 281, 282 ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.inmh!z0000000000[bKTP3JZXo03zmw03zmw000000000001Ybg000", "ln": 0 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000001onA4000315c8Xg7YTL^00000000001onA4000310rr91fAq9600000000001onA40003100000@00c3V\u003c5t!00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*600031000o8z{Gj1000o800000kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=M-H00000bME@E002%#ASxIFzua.TyYE(zBo31PzVBUP00000006ka6B1Kq0ru3#Bo3sYx-J2Jx8\u003ey3x-I@HwDkp4zuanGzVx+q[c5^(0rs!NfAr^bfAr^bgYQ$+fAq7MPAmHZ0rtE!zVBROz2!bEzua+UA@VgupYLIozVB}Xx-IVzwDl=KaolG-xAhPzaoj$kk(+%aC(RZZv/O{$zua!Vz2!bEASxIFvGpiAwDj*)q#/8Zaok*IzuahEaoj$kk(+%aC(RZZv/O)%x-JhOz#:!RA@YRGvGpiAwDi?Mx-J2JBo2\u003eLASxXKve%^qwDl=Kaok*IzuahEaol6PwDlJDz#:CHASviZBo3N^z#:CHA@Wr.w=M-HASviZe=XSDmf3o!aoksuBo2.HzuahEve$rFwb).Lg5@{bfArZ9aokvvxAh-DA@Wr.z#:qDv/QoAve%{uwDi?Mx-JhOaoloVzVB\u003eVaolAZwDlYIBPuaQASxUJwb).LA@ZpZve$rFBo31PzuaqHaolP=x-JkP", "ln": 4048 }, { "b": "k(+%aC(RZZv/O{$zua!Vz2!bEASxIFBo3jVASu7toAk?d0rtE!zVBROz#:qDzua}Zp5[Y5z2!bE00000o-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu6Upwb)UJ0rtN?x-I@HwDk9#wDl=Kv/QJHx-J8LBo31PzVBUP00000o-O(cv/QJHzVB?UzVBwHBo0][li7G}yYD6/k(+%aC(RZZv/P72zua+UwDl-Jw=Mltv/Q6uA@VguiSGP?0rtN?x-I@HwDk:hwDl-JA@Y[OzVBUP00000h#\u003eMhfArZ9g5%9ge=W:egxocffAr)e00000wb)!N0rtW\u003ezua+UwDl-Jzua8ByYEigve$cAwDhYgo-O(cv/QJHzVB?UzVBwHBo0][li7G}yYD6/k(+%aC(RZZv/P72zua+UwDl-Jw=Mltv/Q6uA@W/)wb{ACyYBCnFb?h40rt^[wDluyve$9zlJz38z#+d-ASx!Nx8(PBBn#pvSq[4vo-O(cv/QJHzVB?UzVBwHBo0A-lJ", "ln": 5028 }, { "b": "v/P72zua+UwDl-Jw=Mltv/Q6uA@W/)wb{ACyYBCnkMzt}0rt{@ASy1Twb{-Lv/QPJp5[Y5z2!bE00000o-O(cv/QJHzVB?UzVBwHBo5Dzaoj1]p5)Y.q#=)#F=EC70rt{@ASy1Twb{-Lv/QPJrSDXhASydXx-J5Kzu6Uph#\u003eMhfArZ9fArQ6h2]GlgxoojwDjH^f-URZhVLMjg5%9ggYPrive@g=gxq1!h2}d!hVNv*hVL\u0026rhumj!wb[N?hVLVmwDjN/hukJkwDjN/ve%^qf-T3g00000h#\u003ci:0rty=A@ZmYwDlMEvGpiAC(O@!rSDXhASydXx-J5Kzu6Uph#\u003eMhfArZ9fArZ9fAq7MndU+3V\u003c3Hg\u003cobC.00000002jjnb@", "ln": 5600 }, { "b": "]z!\u003c\u003eB]RHx]CvMd00000Ck}QykP6L40@@r3002jj0000.!bPFjqD2$ZCXfzxa\u003e?SwJ=0!CJj6=o0rr91fjcwvA==2cvpKz2fk\u003ermfhld\u003cA=l2qw]]T(v@9+-B9RUknP5SYA+n-\u0026wPGI5wO+{^B7E1xwPS0nvqYQ:A+3{Tf!Vmnv@=Hez!s8zlsT*:l34r?v[yMWwPzx\u003ev}xZlAaAzTq+fhfh8UCVw\u003c#Rv*j-W8zq$8AWJk\u003eSgz#\u003cvdwuVJ+\u0026eX3MpRC:00000%1+K=00b!\u003c0SSi2Fb/MH{.J]g{.J]g00000000000rr916951jcJBbDCO*zXCO*zX0000000000000005c8Xg000000000000000002g", "ln": 6096 }, { "b": "dGxDj9S*V]000cKa{4\u003c{2MK\u0026cdGxDj9S*V{000cKa{4\u003c{2(\u003c@ddGxDj!bPFjlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn\u003cokI-byPQ)pZc[1c\u003cG.Lbu5Y8x(mN800000CNTSM1onA4bumUxD\u003c{5Q5c8Xgbs+:9l\u0026Wh!J12:!?#\u003c2W", "ln": 6744 }, { "b": "e\u003cTM7zEVmQBy/G8vpJ\u003e\u0026e[w^m08[e:By/p?lV)D(z/2FyzGP^@r+lq)x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zuaJ+zdm6%06$WKzEVmWwPzj3z/OM-BzbP6luN0UwmY=YxjVf(q!p5AvrlJVA=M8s0cqZ[uSgJToKS0:mriA!ASwKCB.$YgvruBd04}=6z/L?RD2[7sz7Xj\u003cvp%E@B98baA@X{Gv@=Hez!s8zlsT*:l34r?v[yMWwPzx\u003ev}xYYq*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026ID2[7sz7X!3A+eV\u0026x(mMoraf\u0026-B1QyfB-H#6A@XQtvS=r@x(mMTz!9B208[e:By/qwl${7xzF%Prx\u003e4", "ln": 9756 }, { "b": "yE92!zEVaMB.$YgvpB4:mr\u0026]=zGxJgzGt!\u003cwPRoNwO\u003e)/A=Rj$wO\u003e)/A=RjDBAzLqvS=^7raf/WwPR$[xjVf(mq^i/C#eA[zGC(1wPRoFzGG]Ap\u0026y5=Bn#pv005X3-/[K(WNc9n66b8:Z!\u003e7maoqGG10vNA1T0*D5Fkc*0rAVlaozMN4G))P0rJAE0rA=U1T0*D5M5?TDLuC7e.%oOPA3kq00E/L0f^D-00SG8001nA08=-Yf-RsR009620856++xK", "ln": 10146 }, { "b": "000000000000000000000000000000000000000000000000000000000000Kt3Um00000000080000000000Kt3Um000001onGe0000000000Kt3Umaohxw0rr99URl4S00000URl4S000001onAc0000000000URl4S000001onGe0000000000URl4S000001onAc000", "ln": 12240 }, { "b": "00000000000000000000000000000000000000000000000000000000000001Ybg3\u0026*ncAh!I\u00260000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 16336 } ], "depth": 2, "facts": { "sec": [ [ ".text", 4096, 8192, 5.14, "r-x" ], [ ".data", 12288, 4096, 0.14, "rw-" ], [ ".reloc", 16384, 4096, 0.02, "r--" ] ], "funcs": [ [ "entry0", 6442455040 ], [ "fcn.180002a58", 6442461784 ] ], "metrics": { "pe": { "checksum": 0, "timestamp": 3305791560, "image_size": 20480, "headers_size": 4096, "checksum_valid": 0, "clr.is_il_only": 0, "file_alignment": 4096, "resource_count": 1, "has_version_info": 1, "checksum_stripped": 1, "computed_checksum": 50144, "headers_size_ratio": 0.2, "prose_section_count": 0, "reloc_overhang_bytes": 4084, "reloc_overhang_ratio": 1, "clr.is_32bit_required": 0, "bss_like_section_count": 0, "clr.is_32bit_preferred": 0, "clr.strong_name_signed": 1, "section_overflow_count": 0, "clr.is_native_entrypoint": 0, "clr.strong_name_sig_size": 128, "misaligned_section_count": 0, "version.identity_entropy": 4.24, "rizin_importless_analysis": 1, "base_relocation_block_count": 1, "base_relocation_entry_count": 2, "declared_data_directory_count": 4, "version.identity_symbol_ratio": 0.06, "executable_prose_section_count": 0, "rizin_importless_function_count": 2, "directory_section_mismatch_count": 0 }, "file": { "size": 20480, "entropy": 2.61 }, "binary": { "is_pie": 1, "basic_blocks": 2, "code_entropy": 5.14, "data_entropy": 0.14, "string_count": 133, "avg_complexity": 1, "max_complexity": 1, "huge_func_count": 0, "leaf_func_count": 2, "tiny_func_count": 2, "avg_basic_blocks": 1, "entropy_variance": 5.68, "avg_string_length": 25.73, "max_string_length": 324, "peak_region_bytes": 1024, "code_to_data_ratio": 0.67, "peak_region_entropy": 6.1, "string_length_stddev": 38.96, "largest_section_ratio": 0.4, "sentence_string_count": 7, "sentence_string_ratio": 0.05, "high_entropy_string_count": 0 }, "sections": { "count": 3, "code_size": 8192, "entropy_max": 5.14, "entropy_mean": 1.77, "name_entropy": 3.16, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "functions": { "count": 2 }, "consistency": { "extension_content_mismatch": 1, "internal_name_original_filename_mismatch": 0, "extension_content_mismatch.binary_as_unknown": 1 }, "dependencies": { "count": 0 } } }, "id": 6, "mol": "K(Li)O₂(AsEr₂)Md₃(Bi₅PaSi)", "path": "win-arm64-based-readytorun.zip!!net10.0/GarnetServer.exe!!embedded:pe:Microsoft.Bcl.AsyncInterfaces.dll@0x754000", "pid": 3, "risk": 11, "sha": "3fd2218f0a51176e3e511b2da49752405b812a4cc5f121f58ffaca27a7726ac8", "size": 20480, "traits": [ { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 4096, 8192 ] ] }, { "id": "metadata/binary/debug::pdb-ci-build-agent-path", "conf": 0.85, "crit": 3, "desc": "CI build-agent PDB path", "spans": [ [ 6160, 103 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 6792, 0 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/layout/size::small-pe", "conf": 0.6, "crit": 3, "desc": "Small PE binary (\u003c100KB)" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/vendor::is-microsoft-named", "conf": 0.8, "crit": 3, "desc": "File name contains Microsoft" }, { "id": "metadata/binary/vendor::microsoft-prefixed-company", "conf": 0.9, "crit": 3, "desc": "PE company name identifies Microsoft", "spans": [ [ 5092, 21 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 4421, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 4445, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 4494, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 4555, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 5092, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-semver-git-hash", "conf": 0.9, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 5732, 46 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 5268, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 5664, 16 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 5268, 12 ] ] }, { "id": "metadata/signed/trust-level::dotnet-strong-name-signed", "conf": 0.95, "crit": 3, "desc": "Managed assembly is strong-name signed" }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-entrypoint", "conf": 0.7, "crit": 3, "desc": "Assembly entry point resolution", "spans": [ [ 10210, 14 ] ] }, { "id": "objectives/evasion/masquerade/version-resource/contradiction::microsoft-company-versioninfo-kv", "atk": "T1036.005", "conf": 0.95, "crit": 3, "desc": "Microsoft company version identity", "spans": [ [ 5092, 21 ] ] }, { "id": "well-known/lib/runtime/managed/dotnet-runtime::microsoft-dotnet-product-name", "conf": 0.99, "crit": 3, "desc": "Microsoft .NET product version identity", "spans": [ [ 5664, 16 ] ] }, { "id": "metadata/binary/code/complexity::few-leaf-functions", "conf": 0.4, "crit": 3, "desc": "Binary has very few leaf functions" }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/symbols/count::no-imports", "conf": 0.7, "crit": 3, "desc": "PE has no imported DLL dependencies" }, { "id": "metadata/binary/vendor::microsoft-corp-versioninfo", "conf": 0.9, "crit": 3, "desc": "Claims Microsoft in version resource", "spans": [ [ 5092, 21 ] ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "uses": [ 2, 3 ], "spans": [ [ 6792, 0 ] ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 8 ], "spans": [ [ 5092, 21 ] ] }, { "id": "objectives/evasion/masquerade/trust::unsigned-pe-microsoft-version-claim", "atk": "T1036.005", "conf": 0.94, "crit": 3, "desc": "PE has Microsoft version metadata but no verifiable embedded signature", "uses": [ 28, 29 ], "spans": [ [ 5092, 21 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000aoqDx4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000gN$^{CM3tzCM3tzCM3tzjCzSqB]ybxjCzAkX=7tgjCzDlsn*@3[n]^0CkZky[n[", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000%3D!l^e%x}f^n)U[NBq%[DP6\u0026ZYN@{0000000000^e%x}[cqkOf^n)U[mae}9%95uFDbWH%3D^GZYN@{a0pWo?#:K\u003c0SSim00000@D(qU@r04Z1][T/@D(wVZYN@{000000000000000=\u0026To{5cq({5ctb)9@((rk(Z):ZYN@{@D(nT@r04Z=\u0026To{5cq({^e%x}f-?As5ctb)f-\u003cSo[j9IUs\u0026HDa002jj000000000000000aorOn000000000000000=\u0026To{5q\u0026--Kn]ns007#/0003cZYN@{[bJD}0@MzYlJvb{1n\u0026Z^U(B.X?#:6hZYN@{z#P+Fzu6UJ00000\u0026r7kM=\u0026To{5q\u0026--z#Y\u003e@01!b0ZYN@{[bJD}0@MzYlJwnp1n\u0026Z^U(B.X?#:3gZYN@{Kn/d\u003cuh%%t00000=\u0026To{5q\u0026--Kn]ns0Sp@#?#:4XZYN@{5ch^r1n(JEE/GMove{pb0SiIIKPktr?#:7YZYN@{pYyw9o-Lec0rvS.=\u0026s1Y0000000000=\u0026To{5q\u0026--z#Y\u003e@0d:4rZYN@{=\u0026s6M0@MzY0SiH+^eTb6?#:3gZYN@{UM1Lkjobu}000000000000000=\u0026To{5q\u0026--z#Y\u003e@0d:56ZYN@{=\u0026s6M0@MAD0SiII^eTb6?#:4XZYN@{UM1Lkec2U:000000000000000aPN3\u003cTn\u0026ho0000000000=\u0026To{5q\u0026--z#Y\u003e@05ixwZYN@{[bJD}0@MzYlJvcp1n\u0026Z^U(B.X?#:3gZYN@{", "ln": 976 }, { "b": "0%0\u003cH0SW=00rvU#004L$7%J2D1or#20%0\u003cH0SW=00rvU#004L$63Qxx002jjp^F5K000009rl3Pa0pWoa0pWo00000nc5ZL3v%{]2Or1]dfa(@nf[l+\u003e!R/.004KEnc]pbnDw*Md-0\u003c4dffCrds\u0026C2d//UtxH9P1nf[nnZYN@{nc5ZL0fG0#ZYN@{", "ln": 341288 }, { "b": "000000000000000000000000000000000000000000000000000000000000d5^BK00000ih)b.00000mYuQ)00000t=v@d00000zM9\u003cv00000Ft\u0026+N00000PS5d@00000X#t]m00000^5vlI00000\u003ebwN=000000icn7000007odPt00000d5)HL000", "ln": 399824 }, { "b": "1][S6UMK$b00000000000000000000bUSt?r+lq)x(v(Iawu]^at\u003e=de\u0026T%@lVl{?A+Pf1Brz#0diHu9iw-ryfFUHdoM:+@z/PFwaw=69eMcq3as5jaBZWNUBzbPkB2\u003eBwe*9.%A=(Ciy?W:cv}Zcsawsygng(2}wGTDRxlv^1A+e^1efF1DavxZRwPF$t00", "ln": 402696 }, { "b": "c37Hx0001qw[z3Yzu6U.A@VgE000000000)BZVzpvrcm1zF80M0001ez/PzivqYP#y?Wv0vrcSoxKM6}azC.6z/6D4Bzki2wGU(kzdN:4v\u003c2(sAaK7\u003c000000001xwPz\u003caz/cXmx(!c1ByO#BayPkde*b4ywN]\u003c8c1XXJoM:+^v@Dy0aAhvtC4\u003eF#B08=v000090000w", "ln": 403853 }, { "b": "Fjo-[0rr91J7a240rr91V{\u003emI0rr91fV9)v0rr91YHA9Q0rr91FwIqp0rr91A7g4Z0rr91Fw?Is0rr91-6%@Y0rr91k/rUM0rr91+TI!!0rr91KI.6G0rr91!j6T)0rr910k[\u003e/0rr91\u00266){30rr915xaT10rr91({.hf0rr91U/cP)0rr9100000000000000000000A=(nqx(mL-wmYgW00000B9hLywO#3\u0026wb(PfzF%MjvqC]z00000v{%m)z/^aiy\u0026sxaayMxsB0a$hA=l8xx(mFZv@=c?By+BLA+frmzdJXEB97\u0026jB-NJ.Cxdbh00000D1*\u0026awb(Pf00000x(!MlwO+)=vR/PQv@c78wDhYg0000000000000000000000000000og2NyXo0000000000000000000001n#k1oX\u0026g1oX\u0026g1oX\u0026g1qR:*78vV378vU*1oX\u0026g1oYCO6+}C#1Qb5k1Qb5k1Qb5k1Qb5k1Qb5k1oX\u0026g1Q2LP6+}C#1Qb5k1Qb5k1Qb5k1Qb5k1Qb5k1oX\u0026g000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000u}yMM0rr91XjM%Q0rr91Z!a/Y0rr91:vVU!0rr912TX/D0rr91=}jH)0rr91c}:+{0rr91vaUEf0rr91fIqR20rr910lLp(0rr91kUzri0rr91Z$5Ho0rr91nj%eq0rr910lUv)0rr91p!I1y0rr91v9X?60rr91u}QYO0rr91fV:rB0rr9107m3w0rr91v95z00rr91A7Zy=0rr91aKQmu0rr91Fj*8%0rr91U*SP50rr91Kv]!d0rr91fW*2L0rr91PI2Gt0rr91Fxv\u003ex0rr91UUbgJ0rr91Z%\u0026vm0rr91XjW3R0rr91^9I=y0rr91H^RC$0rr91PVEg:0rr91:v=./0rr91PWA*\u003c0rr91/H(B00rr91^aFzH0rr91\u003eT#bg0r", "ln": 405456 }, { "b": "00000uQWZ\u003c00000xkzG}vqC]zw[+*)wb(Pf00000x(n37xjV9ax(mD)CMmZzw]zYjx(){bvruBd00000zdN/$zdN*5z!5?FxM4*80000000000asFKSaswERcN/2}00000vruQ5ze:OtBz\u0026oFB0a)lc37hLvqH6$c364^00000vQS^\u0026cUvpqcM\u003cY", "ln": 407136 }, { "b": "Aa9=#aAR*Cash7KC42ifwPE?K00000003CHBy/rdBrCWzay/tbAa9=#ash7KCwhejash7e001r^iWFq$ash7e00000003OJA=k$vx(k58A=M8sazth3wnC%$x8(BIzF\u003cxmaAz4mB.$XjzF%zAB9hLywO#3\u0026wftx2A=l8xx(mFZ003IqzF\u003cxmaAz4m", "ln": 407382 }, { "b": "00000vruQ5ze:OtBz\u0026prz^^f0viu\u003eqay/8czFHvyzeS@@azC)tcNA*Ydf6tFvRGZ*A^mS+By/Ys000008++x.000008iUHp8vuDA00000C42A9vpB4:aswERcM)5uBrC0mzF%zAv@c78vpB4:aA?gfB.7KM0rSAb1o!#f0000000000-6:/W0rr91aBTrv0rr91UULEN0rr91aIv/a0rr91Xk9rV0rr91^8Viq0rr91-7{O/0rr91U^1mW0rr9", "ln": 407668 }, { "b": "B-7R%y?j-hzY\u0026X7BrBp@wozZ1mRMWIpgn0J00000aPIGx00000B9R?GwO\u0026M3A=M8sasgL90000000000oJsw=pesqNrSAa1uO#gE00000c37wN00000j39Axi@/lX00000zF{Ufx(4u6cJBbD00000cKHe$zY\u0026Uay?j.p00000cJBbD00000cVAH7yHH\u003c!e*UM^az(mxBrC47ayMylBAh8kx8?]iwPz*fAV/gpvpT7\u0026xcq5fwozZ1aswERcJ", "ln": 411136 }, { "b": "Bs}xLvlkSqkq3+{vlkSqku}]ux(\u003e$zBZWuPtRmTlB7/05wN64]vo+Vxg*Al$y\u0026%eFaZuSLtYTN!A+eG(BZXJje\u0026l/$tXO7\u0026Bs}xLvll8Dkq3+{vll8Dku}]ux(\u003e$zBZUmI08cxUuR\u003c3/nb@R\u00260000003LPie[w^mj0v\u0026Ye)JjbvQ9.(vo+Vxg*Al$wnD6zaZw\u00264vpS!.y+xmmy=:mOkq3F.yYBCn08cxUuQETQr7D#?0000009/\u003c)3o[\u003ev3m#O+0aP}+w[+(T00000000330S@Jb0%w-f1oX\u0026g1o!@j1Qb5k1Qb5k1Qb5k1Qken1{Lno1{Lno1{Lno1{Lno1{Lno1{Lno1{Lno1{Uwr2l$Fs2l$Fs2l$Fs2l$Fs2l$Fs2l$Fs2l$Fs2l$", "ln": 411511 }, { "b": "cNy5+B0*@lv/MHtvru66A+frmy\u0026*!fvqY$3BrC47aAz4jA+fr6zGGD2azCZoBzbxfazC.mByx04vruj4zu6U^Bn#pv0001vx(dA7A+frmy\u0026*!fvqY$3BrC47aAz4jA+fr6zGGD2azCZoBzbxfazC.mByx04vruj4zu6Up00000000000000100002", "ln": 412453 }, { "b": "wmoN\u003e00000wnbT/BzkP60000000000wQ4=@B-.f{xjVf@zGV0WA+f9aC4yTNA+fb%zdJXEB7GDfz!0i(wDhYg00000BzU#mvqPMQ3jmaE3KWsI4H\u0026^N3KWdy1oX(i2l$Fs2)ZRn0%nSc0%nSc0%nPa0rAf200000n=O?\u003eo8[}(nDn.\u003co-Ld[c37huCYi", "ln": 412928 }, { "b": "B-qIjy\u0026%rg0000000000jzeOOzY*uEj%joQaz++fwGSpfazM4oAc0dozGG!tBzbkdB7occwGU]6az+$avqE5lc37Bly**^:y\u0026.mxz//]s00000vSD3*yANLrBAqebwGU/cz/u?cBrCylzE\u003c}pwb(PfzF{Uvx(^#$y?j-9vpA!:aswERcM)2tAV^E", "ln": 413264 }, { "b": "BZYxaz/cXbD30P$z!rQ5wPN[Lv@C)?AbPDdBn#pvv@C)?A@Vgu00000v}Yp\u003eAa9\u003cgwPzU*00000tl3m8.y+Z(tyXrut}b*Oy?W:2Bn#pvcUvpqcM)FLwPe=aB0b^uAS", "ln": 417652 }, { "b": "00000000000000000000000000000007^AC0rr91kU?Gj0rr91\u00268G(f0rr91rC(O\u0026z*c7wwQ4Y@Acb/jzu6Up00000CU5c\u003c0rr91kU?Gj0rr91\u00268G(f0rr91vQS^\u0026wQ4Y@Acb/jzu6Up0rr91761sm0SSi20SSi20@@r30SSi21onA47YTKo1POJ54fcwd1][S62(\u003c@92l", "ln": 421664 }, { "b": "0000000000000000000000000000000000000000c\u0026!b+BPujTyYC):00000r+VR$vqE5Nd\u003eq-fqDbX1ph+j%wO#Bexj@A8wO(vaC{4iEay/tbAbo9cwGUF\u003ey?$kozY\u003cayA+foiz/NDgv@k:ewQ4+^atmjE00000lR*APp^).KtMs:7p^F5K0000000000000000000000000tLkf:00000P82PP00000ztpw2000008tyB300000Py]JP00000@QWxX00000gv??q00000jmGWy0000081a\u003c$00000-P$2#00000lfU]", "ln": 422368 }, { "b": "fOY(k\u003e(pX.000001POJ50000000000a{BeF0rr91y\u003e\u0026k}00000000000SSi2Fqjvf\u0026q-\u0026S000001POJ5z2!RSv/QAEASxUJwDjs.wb{ACyYBCnlVm0lCXIm@A=kD0B8}rYlR*APp^).Kv@k:ewQ4+^fjK$Z0000000000000001POLr3JHeb00000000009rl8P1onA40000000000Mh*{21onA40000000000Jq@%]2MK\u002680000000000JSo4", "ln": 430056 }, { "b": "p]%}L0rr91PSFAG0rr91Xub%=0rr91^5^I50rr91\u003e=C5t0rr910iMJR0rr91nuJeE0rr910000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZwb{3rBo2\u003eLBo31Pz2!bEeDxO!f-S^9f-S^9f-RgNve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZw=MJByYF2DeDxO!f-S^9g5@)agYNHQve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZw=MJByYF2DeDxO!f-S^9g5@)ag5}pOve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZyYFwNv/P{qyYFeHDh}vNBo31PzVBUPeDxO!f-S^9g5@)af-RgN0000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZyYFwNv/P{qyYFeHDh}vNBo31PzVBUPeDxX?vGpDHzVBONwDl/LwDjpZyYDf\u0026eDvKaeDvE80000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZz#:[UzVBnEwDl=KA@ZpZxAi5MwDlcswb{VJeDxO!f-S^9f-S^9g5}pO00000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZA@ZpZASx!NzuaqHeDxO!f-S^9f-S^9fAq7M00000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZA@ZE=zuaeDxAfQ:yYDf\u0026eDvKaeDvE80000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZA@ZE=A@Y[OzuanGzVzu?yYDf\u0026eDvKaeDvH900000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!T", "ln": 430880 }, { "b": "wDlMEw=M@NzuaeDBo31PzVBUPA@W=(yYDf\u0026eDvH9eDvE8000000000000000wDl@PBo0()z2!RSeDx${x-J2JeDxU*Bo3B-A@Y+KASvV\u003ewb{rzve$9zzVBzIvGprDCMoq}yYDf\u0026eDvH9eDvE8000000000000000wDl@PBo0()z2!RSeDx${x-J2JeDxU*Bo3B-A@Y+KASvV\u003eCk#sSzuahEzVB$YA@ZpZve$xHx-J5Kzu8l*yYDf\u0026eDvH9eDvE800000ve%*rB]U}Jz#:OLgxofg0000000000yxd]CASx$SwDlJDgxofg0000000000yxd]CASu", "ln": 431824 }, { "b": "l2{Kax(4uDAa%wVpe:Z:1][S65c8XglVl*Xvrb{TBAh8kxgm4B0@@r35c8Xgmq^l+q*ACawO\u003eaVv{%g+B47rN00000000005c8Xgm}D^gvru6Iz/PY6BvyAO0rr915Dz!hm}D^wwO(x.vrufrr@-j20@@r35c8Xgm}D^oz!0i(wL3=Kz:!)J000005c8Xgm}D^wx(dAJz/PY6BvyAO0@@r35c8Xgm}D^xB7GwWwObv[y\u0026\u0026u?v{%g+pgn0J00000000002lj-75c8XgnP5l:x\u003c\u003e*(DsYD:x([60vqF\u003eNv@#B6zBF^I00", "ln": 432264 }, { "b": "x(mv3x(v(-wPRQ7wb(Pf009c61o!#m2NH?C3\u003eiWS5d]J*6CRx17-skh9337xar.{NbQB=+c[cR@eg\u0026FcfFLssg=mfIi5%2YjuU\u003e)kTv.7l}6Nnnj=ADoIFnTp/ga?r8($2sxO*itWpVyu$0IOwmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQZE0{D[05gUZFb]SI00000000000ml(iFb]SI06)^[Fb]SI04thVFb]SI0ml(iFb]SI09DGgFb]SI04thVFb]SI03E:mFb]SI0c2gEFb]SI04thVFb]SI005X@Fb]S", "ln": 432655 }, { "b": "A+PunaA.NgC4293vpB4:0000000000ph+j%wO#Bexj@AeAa9l/0000000000p?sV:x(!ufz/cXdwO#i[wb(Pf00000lsByEvpS[?wPI[)00000rC(O\u0026z*c7wwPz*fASu7tqE%]/B-H#6ay]5bx\u003e7YOmRMWIaz2!iB98E600000nO@A!z/xodaz++fyxatmph.m@BZ]8cwb", "ln": 436096 }, { "b": "008@@lm#(+Nk/2Y3$gXIZ5w0h%nQ$vjxbrXrAm15)CO\u0026brAk\u003eWq)\u0026Al5FoNU00000006I})(ymzln4y+b/CrmY$.\u0026SWE:)V2Y3Ia+UQ^STfNvxGGq\u003e$\u0026my%[000000000000000008HMTwG?Ofx!84ZR0+D8Ve$/zOH#CpDL4dh8Ccej[!teg96oBu6{kRFDv[ExZ$KQuej856jt*)vsSL=N^xGcY$W#{vie#x+!1Dt!Auo+^pOdBDr#YCG[117731:EczVbUTZu-zU#HBqu/7lo6zu5@qQQH^BCgEUU?wFffc.#TdmGJmI61?\u00263F1Pf}I$v@Fx\u003c7=?Ub+OyTzJmf2NvxAfC(ohMgTD!xvqBvAvOtpwncU:Evq?mAs\u003cYQ{pdgd7LRQ\u00260i(/Y#6k5NBr@@\u003cFd/0Gy^a9kecFI\u003eEnw+am\u003edF895!d:gpU6zf{[vRKA\u0026l4#H9#sHEPZay@?M}V\u0026uFG(2*s[V.ED@o%PE8NUO/{ExlOLc1ap8\u003cdXq1ymFe(%hQ@je?Qj^vq\u003eej?:9xQs4BB)4:2lmWn5:0Ex%x-I}:4RjWiv3Vq5.gY}H98}j!\u0026w$elNRsml:xO8d8j%OVcfQIk)4.TIBqDx6}qcKWW0H8$p+\u003cg#\u003ezP50RWKLQ:*M7.!rQ9tr)%[lE+Rr}HY]8nyved\u003c9ph\u003c^SS%4#cSd%+97wcd/bGV7X\u00264p}hNU6#)FmvOv(u[D3e?{d=M45f^Ut[\u0026(\u003ci@Jvqi4G]N0Oi=^Z!u^6.2c=.OZv)Q\u0026#h\u003enrY[n6=RXoDR]hNXn}45o9nrxj7Sp(Z}k\u003e^!nB.tjU\u003e\u003e][e).7(wZ-Z}d/v.", "ln": 439248 }, { "b": "[Bu8v].4}L}1:^-@qDS{009c61o!#m2NH?C3\u003eiWS5d]J*6CRx17-skh9337xar.{NbQB=+c[cR@eg\u0026FcfFLssg=mfIi5%2YjuU\u003e)kW!biwmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQttWpVyu$0IOwmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQZE0{D[FpSr8GOteoH(41EJe-\u003cUKDCY\u0026L:dM3N3\u003czjOsMmzPRn9PQ[%@^ShV!$TGwUeU^7HuW6^uKXvGh.YUh4]Z})[9-kP:p:JqPF+*1CV^9Zp\u003c!yAd4/Xb0k*$.", "ln": 448576 }, { "b": "kl7V-00000003zf?[vN\u003ckIP?C2R3h?Y!iK\u00260000004}=1z2=h1CX3\u003ecvQTuUe[n:e000000rr90@#Idu06g8W09Gp40cXzy0g0P+0jh.a0mH]F0p*9\u002601Yeh051uM08iE]0bIVo000000rr90@#Idu06peX09Pv50c!Fz0g9V=0jq!b0mQ#G0p{f\u003c", "ln": 453903 }, { "b": "vrlJVA=M8s006}rmSJ6KoLE%RvrcR[JSIZZBwlW:B.\u003eRUx(4uQvqPNw007gzm}D^sA=kCNwmPZ(B8}rY\u0026r8+(vpS5CvSC)$C%#%z006+mmSir:vrtjPB8$=5wKcp@ogq-NmnbG)e[w^m003^qqfuC\u003cC#e6)w]zZbvqYN^lVm9+By/E)g6f%SBvgg\u003eA+fcgp\u0026ZF:wPE", "ln": 496430 }, { "b": "x(^\u0026OCW\u003er7BzkVh008/$qGM.Kv]Nwox(4uKwNPaXASzpaqE%oEmRMWI005k-lU{WZwK{lEwnC/Sk(\u003cw@Abok#vru6KvqYQ(wDjB^m}D^fB-IIlzGFY}z!0v1A@+[llVM:DBy!o?z!0v1B5@twCl7cSx()f(z!0v1A@-\u0026RraQ8!x(mv3wL^z=v}x.5005e-m}D=", "ln": 497008 }, { "b": "A=2l5v}wbIwPq\u003c7zEW}(J@?*.BwlW:B.\u003eRUx(4uQvqPNS003Wmnm=jGl2pvQv/QrEnm=jGmSJ6K000/qm}D^wwO(x.vruf:004PMnP5l:x\u003c\u003e*(DsYD:x([60vqF\u003eNv@#B6zB5eJq/DC*lVm9+Bo7q5oMauIoLE%RvrcSZCVK\u003eBjow2:BvoLVwKZPUzddJ/001RNm}D^wx(dAJz/PY6BxnCxSSkz8ze-{7wM9X\u003ex(mM+007vFoHzJ.A8Q\u003e0x(mM+004GIm}D^oz!0i(wL3=Kz=V]sToh4nr://Uwk3]KvqGGPhuMDXBx9x[AZTFJvrDydoHzxt003*omq^l+q*ACawO\u003eaVv{%g+B5@tw[D8i(Bw)o(nmuyDy?iODxAyXnBvG$XwMi}]wDojvmR)i*xHVYLwKpJKw[u17002v\u003cs8@1%wKZxIwDiOHm}D^fz/fSmy?ly+Bz#wAlR):.6-{)pBvf$:B8L(ao(BMN0058-qE%oElVl\u003c-z!@#^003{tnm=jGqE@dgy\u0026r!-w=+FlBvG$XwM9q?wKQ?zp6BNcBvG$XwD", "ln": 497192 }, { "b": "rSU^5BvyB*Bvf$SwL^z=v}x.5003m9m}D^ix(4uDBAzLqvS=^7B47sP008A!lVM:DBy!o.AaG1H*5KGXwNPW(mRMWIr@:]Rm}D^wx(dA+z/fbTzF0*czddK2z/bKP4fPyFy\u0026\u003cwTD30Q%z=ZT-wKyctASv-%s7#hRlUG[GrbUGNy\u0026\u003cwTD30P$c\u0026(.Ey?mZ1mRMWIr@-Bco(Ch^mRMWImr?(l*5TYPBve\u003e@zF0!!JSzQ-zE=aJz/YE\u0026LMsl/zE=jJA=Vs(x(4uHCVK\u003eBR2:51zE=HNCYVz?y?lVFSSL?lr://Uwj7oCwL=/FwDo)Om}D^dlR):.V\u0026S:eBwCt1lR):.)/t{\u0026Bvf$-zddr)oLFxQk(*x", "ln": 497666 }, { "b": "y?iODliZIix()]Nz/fSmy?lVF00000000000000000000000000000000000B^Jde000000000000000000000000000000000000000000000000000000000000000000000000000gnrUTNjwmq00000000000000000000000000000000000000000000000000000", "ln": 498128 }, { "b": "00000000000000000000000000000000000000000000000000000000000001YbgScOWGap[IMW0z@Sp.iQb-cIT*A1A0HW0J2TH.6K^Z\u003cup^ZZ{FC:A[c(=\u003e3fS^0C#$5d[)x^0C#$p.rWc/N0\u00266Kp.D)\u0026cLXePB?e7\u003eZ9Km\u00261k}?\u003eZ9KmaqaUO\u0026cL", "ln": 501712 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000625c8Xgaohy(7YTKoh#\u0026@e000000000000000000310rr91pYHGC000000000000000000310SSi2xAe3.000000000000000000312)pkdFb/MH0000000000000", "ln": 514512 }, { "b": "0rrAe0058X005V62MM%?0000000000007{\u003c2MPnN0000000000002a-gYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rrl51POJ52MK#c1POJ52MK\u00268000000000000000000000000000000005I\u003c00031qVH[tASx!NzuaqHmGvc5yYF2", "ln": 514678 }, { "b": "004lB00031fAr{ffAs9kfAr{fvGn7Z001XM3\u0026*qdlJz38z2!zMwDlPFBo3vZ004iyCk#*!e=YX/BPt?Ie=Y!\u0026ASx.L001XM2MK(9lJz38z2!IPve$fBC(QOtve$cAwDhYg002W)BPt?Ie=Y!\u0026ASx.L002%#761vnmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002W)BPt?Iaok7nve$fBx8)5Ove%{uwDi?Mqug?tzu7^Vq#*Rjz2!bE001LI1][V7mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001\u003eRe=WZde=W\u003ch0049vc\u0026:nFoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002v^zVB.RC(R\u003c+x-I=CxAibOaonwvaoja@irh5tgYP9cg5%0dg5%fiaok7nBPt?Ie=Y!\u0026ASx.Lec3^)pYKF}lJwXrqugzhzVzx\u0026002aY3ig8bpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE003*nBPt?Ih2]Dke=YzZyYFnK002g.4/=RgpYLIox-JqRve$xHwDk3%BPuaQyYE#C002s=BPuaQyYFLSaol0NzVB!TaokdpoAohnve{oc003s99@(rwpYLIozVBqFBPt[KBo25ove$cAwDhYg002W)BPt?Iaoi$[aokvvxAhPzaokjrASy1Tx8(@Lve$cAz2!nIzuaqHaok7nve$fBx8)5Ove%{uwDhYg001XM1][V7pYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001\u003eRe=WZde=W\u003ch002y!00031rSDLdASwMex-I@HwDkp4zuanGzVx+q001nA1onA4q#*}sve$fBA@Z1Rve$xHx-J5Kzu6Up000rdUMK}a002bCCX}mtC4CYnx(v(LcOWkccM(#rv@C)(zF5", "ln": 514846 }, { "b": "j}d\u0026warR^?B7F\u003c7A+PSvj}d\u0026warR^HauTWQADL\u0026lBy!#VA+PYhy?ml\u003cB3p3uarR^HarR^HjAt1MB.bSowN[kOwN/\u003e8x(v(.wP?T3az+RjwO:HSvrk1TC5IecAWI#Lx*DlswPI]QcUu!6B7DZwffP*LarR^HarS^1A+flkwPI%8wkEqXC4\u003e=7xjVcF4gjj2arS^1B7F\u003c7A+PSvj}d\u0026wauRr0A=(CBnP5cUj}d\u0026Yfjw{ywO\u003e))C%hVA0000000000000", "ln": 515737 }, { "b": "00000000000000000000000000000000000000000000000000000000000005aPSc\u0026:kE\u003e+vNv0hyWid5eF\u003eihn:lsFGo0xRPKw:G9W*/Si@h06*.*9033t^4G3:\u0026gPqb[sYMH0hfW(5to@mp[.0+v4?ncAg}JIFt4^)KFe5nPRnrTU+wO2Z[F\u0026y^4H", "ln": 516048 } ], "depth": 1, "facts": { "exp": [ [ "luaL_addgsub" ], [ "luaL_addlstring" ], [ "luaL_addstring" ], [ "luaL_addvalue" ], [ "luaL_argerror" ], [ "luaL_buffinit" ], [ "luaL_buffinitsize" ], [ "luaL_callmeta" ], [ "luaL_checkany" ], [ "luaL_checkinteger" ], [ "luaL_checklstring" ], [ "luaL_checknumber" ], [ "luaL_checkoption" ], [ "luaL_checkstack" ], [ "luaL_checktype" ], [ "luaL_checkudata" ], [ "luaL_checkversion_" ], [ "luaL_error" ], [ "luaL_execresult" ], [ "luaL_fileresult" ], [ "luaL_getmetafield" ], [ "luaL_getsubtable" ], [ "luaL_gsub" ], [ "luaL_len" ], [ "luaL_loadbufferx" ], [ "luaL_loadfilex" ], [ "luaL_loadstring" ], [ "luaL_newmetatable" ], [ "luaL_newstate" ], [ "luaL_openlibs" ], [ "luaL_optinteger" ], [ "luaL_optlstring" ], [ "luaL_optnumber" ], [ "luaL_prepbuffsize" ], [ "luaL_pushresult" ], [ "luaL_pushresultsize" ], [ "luaL_ref" ], [ "luaL_requiref" ], [ "luaL_setfuncs" ], [ "luaL_setmetatable" ], [ "luaL_testudata" ], [ "luaL_tolstring" ], [ "luaL_traceback" ], [ "luaL_typeerror" ], [ "luaL_unref" ], [ "luaL_where" ], [ "lua_absindex" ], [ "lua_arith" ], [ "lua_atpanic" ], [ "lua_callk" ], [ "lua_checkstack" ], [ "lua_close" ], [ "lua_closeslot" ], [ "lua_closethread" ], [ "lua_compare" ], [ "lua_concat" ], [ "lua_copy" ], [ "lua_createtable" ], [ "lua_dump" ], [ "lua_error" ], [ "lua_gc" ], [ "lua_getallocf" ], [ "lua_getfield" ], [ "lua_getglobal" ], [ "lua_gethook" ], [ "lua_gethookcount" ], [ "lua_gethookmask" ], [ "lua_geti" ], [ "lua_getinfo" ], [ "lua_getiuservalue" ], [ "lua_getlocal" ], [ "lua_getmetatable" ], [ "lua_getstack" ], [ "lua_gettable" ], [ "lua_gettop" ], [ "lua_getupvalue" ], [ "lua_iscfunction" ], [ "lua_isinteger" ], [ "lua_isnumber" ], [ "lua_isstring" ], [ "lua_isuserdata" ], [ "lua_isyieldable" ], [ "lua_len" ], [ "lua_load" ], [ "lua_newstate" ], [ "lua_newthread" ], [ "lua_newuserdatauv" ], [ "lua_next" ], [ "lua_pcallk" ], [ "lua_pushboolean" ], [ "lua_pushcclosure" ], [ "lua_pushfstring" ], [ "lua_pushinteger" ], [ "lua_pushlightuserdata" ], [ "lua_pushlstring" ], [ "lua_pushnil" ], [ "lua_pushnumber" ], [ "lua_pushstring" ], [ "lua_pushthread" ], [ "lua_pushvalue" ], [ "lua_pushvfstring" ], [ "lua_rawequal" ], [ "lua_rawget" ], [ "lua_rawgeti" ], [ "lua_rawgetp" ], [ "lua_rawlen" ], [ "lua_rawset" ], [ "lua_rawseti" ], [ "lua_rawsetp" ], [ "lua_resetthread" ], [ "lua_resume" ], [ "lua_rotate" ], [ "lua_setallocf" ], [ "lua_setcstacklimit" ], [ "lua_setfield" ], [ "lua_setglobal" ], [ "lua_sethook" ], [ "lua_seti" ], [ "lua_setiuservalue" ], [ "lua_setlocal" ], [ "lua_setmetatable" ], [ "lua_settable" ], [ "lua_settop" ], [ "lua_setupvalue" ], [ "lua_setwarnf" ], [ "lua_status" ], [ "lua_stringtonumber" ], [ "lua_toboolean" ], [ "lua_tocfunction" ], [ "lua_toclose" ], [ "lua_tointegerx" ], [ "lua_tolstring" ], [ "lua_tonumberx" ], [ "lua_topointer" ], [ "lua_tothread" ], [ "lua_touserdata" ], [ "lua_type" ], [ "lua_typename" ], [ "lua_upvalueid" ], [ "lua_upvaluejoin" ], [ "lua_version" ], [ "lua_warning" ], [ "lua_xmove" ], [ "lua_yieldk" ], [ "luaopen_base" ], [ "luaopen_coroutine" ], [ "luaopen_debug" ], [ "luaopen_io" ], [ "luaopen_math" ], [ "luaopen_os" ], [ "luaopen_package" ], [ "luaopen_string" ], [ "luaopen_table" ], [ "luaopen_utf8" ] ], "imp": [ [ "kernel32", "GetLastError" ], [ "kernel32", "FreeLibrary" ], [ "kernel32", "GetModuleFileNameA" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "LoadLibraryExA" ], [ "kernel32", "FormatMessageA" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "GetStartupInfoW" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "RtlUnwindEx" ], [ "kernel32", "InterlockedFlushSList" ], [ "kernel32", "VerSetConditionMask" ], [ "kernel32", "VerifyVersionInfoW" ], [ "kernel32", "RtlUnwind" ], [ "kernel32", "SetLastError" ], [ "kernel32", "FlsAlloc" ], [ "kernel32", "FlsGetValue" ], [ "kernel32", "FlsSetValue" ], [ "kernel32", "FlsFree" ], [ "kernel32", "EnterCriticalSection" ], [ "kernel32", "LeaveCriticalSection" ], [ "kernel32", "InitializeCriticalSectionEx" ], [ "kernel32", "DeleteCriticalSection" ], [ "kernel32", "RtlLookupFunctionEntry" ], [ "kernel32", "EncodePointer" ], [ "kernel32", "RaiseException" ], [ "kernel32", "RtlPcToFileHeader" ], [ "kernel32", "ReadFile" ], [ "kernel32", "CloseHandle" ], [ "kernel32", "DuplicateHandle" ], [ "kernel32", "GetCurrentProcess" ], [ "kernel32", "CreateProcessW" ], [ "kernel32", "ExitProcess" ], [ "kernel32", "TerminateProcess" ], [ "kernel32", "GetModuleHandleExW" ], [ "kernel32", "QueryPerformanceFrequency" ], [ "kernel32", "GetModuleFileNameW" ], [ "kernel32", "HeapAlloc" ], [ "kernel32", "HeapFree" ], [ "kernel32", "GetTempPathW" ], [ "kernel32", "InitializeCriticalSectionAndSpinCount" ], [ "kernel32", "LoadLibraryExW" ], [ "kernel32", "GetDateFormatW" ], [ "kernel32", "GetTimeFormatW" ], [ "kernel32", "CompareStringW" ], [ "kernel32", "LCMapStringW" ], [ "kernel32", "GetLocaleInfoW" ], [ "kernel32", "IsValidLocale" ], [ "kernel32", "GetUserDefaultLCID" ], [ "kernel32", "EnumSystemLocalesW" ], [ "kernel32", "GetStdHandle" ], [ "kernel32", "GetFileType" ], [ "kernel32", "FlushFileBuffers" ], [ "kernel32", "WriteFile" ], [ "kernel32", "GetConsoleOutputCP" ], [ "kernel32", "GetConsoleMode" ], [ "kernel32", "ReadConsoleW" ], [ "kernel32", "HeapReAlloc" ], [ "kernel32", "GetFileSizeEx" ], [ "kernel32", "SetFilePointerEx" ], [ "kernel32", "WaitForSingleObject" ], [ "kernel32", "GetExitCodeProcess" ], [ "kernel32", "GetFileAttributesExW" ], [ "kernel32", "CreatePipe" ], [ "kernel32", "CreateFileW" ], [ "kernel32", "GetTimeZoneInformation" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "DeleteFileW" ], [ "kernel32", "MoveFileExW" ], [ "kernel32", "GetCPInfo" ], [ "kernel32", "FindClose" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "FindNextFileW" ], [ "kernel32", "IsValidCodePage" ], [ "kernel32", "GetACP" ], [ "kernel32", "GetOEMCP" ], [ "kernel32", "GetCommandLineA" ], [ "kernel32", "GetCommandLineW" ], [ "kernel32", "GetEnvironmentStringsW" ], [ "kernel32", "FreeEnvironmentStringsW" ], [ "kernel32", "SetEnvironmentVariableW" ], [ "kernel32", "GetProcessHeap" ], [ "kernel32", "SetStdHandle" ], [ "kernel32", "GetStringTypeW" ], [ "kernel32", "HeapSize" ], [ "kernel32", "SetEndOfFile" ], [ "kernel32", "WriteConsoleW" ] ], "sec": [ [ ".text", 1024, 398848, 6.48, "r-x" ], [ ".rdata", 399872, 98304, 5.6, "r--" ], [ ".data", 498176, 3584, 1.85, "rw-" ], [ ".pdata", 501760, 12800, 5.59, "r--" ], [ ".rsrc", 514560, 1536, 3.86, "r--" ], [ ".reloc", 516096, 3072, 5.35, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 0, "timestamp": 1768792541, "image_size": 536576, "has_manifest": 1, "headers_size": 1024, "checksum_valid": 0, "file_alignment": 512, "resource_count": 2, "export_timestamp": 4294967295, "has_version_info": 1, "checksum_stripped": 1, "computed_checksum": 559913, "headers_size_ratio": 0, "prose_section_count": 0, "reloc_overhang_bytes": 48, "reloc_overhang_ratio": 0.02, "bss_like_section_count": 0, "section_overflow_count": 0, "misaligned_section_count": 0, "version.identity_entropy": 3.76, "base_relocation_block_count": 15, "base_relocation_entry_count": 1445, "declared_data_directory_count": 8, "version.identity_symbol_ratio": 0.03, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 519168, "entropy": 6.45 }, "binary": { "is_pie": 1, "code_entropy": 6.48, "data_entropy": 1.85, "string_count": 1101, "entropy_variance": 2.33, "avg_string_length": 15.59, "max_string_length": 128, "peak_region_bytes": 7168, "code_to_data_ratio": 0.99, "peak_region_entropy": 7.71, "string_length_stddev": 12.01, "largest_section_ratio": 0.77, "sentence_string_count": 253, "sentence_string_ratio": 0.23, "high_entropy_string_count": 4 }, "exports": { "count": 154 }, "imports": { "count": 92 }, "sections": { "count": 6, "code_size": 398848, "entropy_max": 6.48, "entropy_mean": 4.79, "name_entropy": 3.24, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "dependencies": { "count": 1 } } }, "id": 7, "ident": { "name": { "value": "lua54.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "Lua Language Run Time", "source": "pe.version.description", "verified": false }, "trust": "unsigned", "project": { "value": "Lua - The Programming Language", "source": "pe.version.product_name", "verified": false }, "version": { "value": "5.4.8", "source": "pe.version.file_version", "verified": false }, "organization": { "value": "Lua.org", "source": "pe.version.company", "verified": false } }, "mol": "K(Li)O₂(C₂Er)H₄(F₃Os₂Po₃Ti)Md₃(Bi₆PaSi)", "path": "win-arm64-based-readytorun.zip!!net10.0/lua54.dll", "pid": 0, "risk": 19, "sha": "c21a8ee06181f33fca889bdaaa04a2eccde8722325a935d2075f00b605ee77a2", "size": 519168, "traits": [ { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 398848 ] ] }, { "id": "metadata/binary/framework::mscoree-name", "conf": 0.95, "crit": 3, "desc": "References the .NET mscoree loader name", "spans": [ [ 430120, 11 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/linking/api-set::api-set-core-cluster", "conf": 0.9, "crit": 3, "desc": "Dense api-ms-win-core string cluster", "spans": [ [ 430944, 31 ], [ 431008, 27 ], [ 431064, 27 ], [ 431120, 35 ], [ 431200, 44 ], [ 431296, 37 ], [ 431376, 29 ], [ 431440, 28 ] ] }, { "id": "metadata/binary/resource/identity::pe-resource-count-two", "conf": 1.0, "crit": 2, "desc": "PE has exactly two resource entries" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/resource/manifest::pe-resource-manifest-second", "conf": 1.0, "crit": 2, "desc": "PE second resource is RT_MANIFEST" }, { "id": "metadata/binary/symbols/count::many-exports-20", "conf": 1.0, "crit": 2, "desc": "Binary has 20+ exports" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 413312, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 403901, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 403913, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 407184, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 407430, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 514952, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 514926, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 514974, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 515058, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 515438, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 515084, 5 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 515368, 30 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 514726, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 515084, 5 ] ] }, { "id": "micro-behaviors/communications/ipc/pipe::create-pipe", "atk": "T1559", "conf": 0.9, "crit": 2, "desc": "Create anonymous pipe", "spans": [ [ 497714, 0 ] ] }, { "id": "micro-behaviors/communications/ipc/pipe::duplicate-handle", "conf": 0.8, "crit": 2, "desc": "Duplicate object handle", "spans": [ [ 405768, 0 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::deletefile-w", "conf": 0.66, "crit": 3, "desc": "DeleteFileW API symbol", "spans": [ [ 406080, 11 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "spans": [ [ 497852, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 406112, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "spans": [ [ 406120, 0 ] ] }, { "id": "micro-behaviors/fs/file/handle::set-file-pointer-ex", "conf": 0.9, "crit": 2, "desc": "Set file position extended", "spans": [ [ 406008, 0 ] ] }, { "id": "micro-behaviors/fs/file/handle::set-std-handle", "conf": 0.9, "crit": 2, "desc": "Set standard I/O handle", "spans": [ [ 406200, 0 ] ] }, { "id": "micro-behaviors/fs/file/move::move-file-ex", "conf": 0.9, "crit": 2, "desc": "Move or rename file with options", "spans": [ [ 406088, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "spans": [ [ 406048, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::read-file", "conf": 0.9, "crit": 2, "desc": "Read data from file handle", "spans": [ [ 405752, 0 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 405584, 0 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::interlocked-flush-slist", "conf": 0.9, "crit": 2, "desc": "Atomically flush thread-safe list", "spans": [ [ 405616, 0 ] ] }, { "id": "micro-behaviors/os/api-resolution/manual::api-ms-string-reference", "conf": 0.9, "crit": 3, "desc": "Reference to api-ms- Windows API string", "spans": [ [ 430944, 31 ], [ 431008, 27 ], [ 431064, 27 ], [ 431120, 35 ], [ 431200, 44 ], [ 431296, 37 ], [ 431376, 29 ], [ 431440, 28 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 405504, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-ansi", "conf": 0.7, "crit": 2, "desc": "Get module file path (ANSI)", "spans": [ [ 405520, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-dup", "conf": 0.7, "crit": 2, "desc": "Get module file path (Unicode)", "spans": [ [ 405824, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ex", "conf": 0.82, "crit": 3, "desc": "Get extended module handle", "spans": [ [ 405808, 18 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 405600, 16 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::enum-system-locales", "atk": "T1082", "conf": 0.84, "crit": 2, "desc": "Enumerate installed system locales", "spans": [ [ 432312, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::enum-system-locales-import", "conf": 0.84, "crit": 2, "desc": "Enumerate installed locales", "spans": [ [ 405928, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-locale-info", "atk": "T1082", "conf": 0.88, "crit": 2, "desc": "Query locale information", "spans": [ [ 497400, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-locale-info-import", "conf": 0.86, "crit": 2, "desc": "Query locale information", "spans": [ [ 405904, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-user-default-lcid", "atk": "T1082", "conf": 0.85, "crit": 2, "desc": "Query user locale identifier", "spans": [ [ 405920, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "spans": [ [ 497056, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::create-process-w", "atk": "T1106", "conf": 0.95, "crit": 3, "desc": "CreateProcessW API symbol", "spans": [ [ 405784, 14 ] ] }, { "id": "micro-behaviors/process/info/commandline::get-command-line", "conf": 0.82, "crit": 2, "desc": "Query current process command line", "spans": [ [ 406152, 0 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 405568, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/lua::lua-bytecode-magic", "conf": 0.96, "crit": 3, "desc": "Embedded Lua bytecode magic", "spans": [ [ 407732, 11 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-alloc", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage allocation", "spans": [ [ 405656, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-get-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage retrieval", "spans": [ [ 405664, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-set-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage assignment", "spans": [ [ 405672, 0 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 405576, 0 ] ] }, { "id": "micro-behaviors/time/query::get-timezone-information", "conf": 0.9, "crit": 3, "desc": "Query timezone configuration", "spans": [ [ 406056, 22 ] ] }, { "id": "objectives/command-and-control/dropper/execution/loader::lua-cpath-env", "atk": "T1027.013", "conf": 0.9, "crit": 3, "desc": "LUA_CPATH runtime env name", "spans": [ [ 411688, 9 ] ] }, { "id": "objectives/command-and-control/dropper/execution/loader::lua-noenv-env", "atk": "T1027.013", "conf": 0.9, "crit": 3, "desc": "LUA_NOENV runtime env name", "spans": [ [ 411200, 9 ] ] }, { "id": "objectives/command-and-control/dropper/staging/resource::get-temp-path-w-import", "conf": 1.0, "crit": 3, "desc": "GetTempPathW import", "spans": [ [ 405848, 12 ] ] }, { "id": "objectives/command-and-control/dropper/staging/resource::move-file-ex-w-import", "conf": 1.0, "crit": 3, "desc": "MoveFileExW import", "spans": [ [ 406088, 11 ] ] }, { "id": "well-known/lib/runtime/scripted/luajit::luajit-runtime-env-pair", "conf": 0.9, "crit": 3, "desc": "LuaJIT runtime environment variable pair", "spans": [ [ 411200, 9 ], [ 411688, 9 ] ] }, { "id": "metadata/binary/layout/checksum::pe-checksum-zeroed", "conf": 0.9, "crit": 3, "desc": "PE checksum is zeroed" }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99" }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 515342, 11 ] ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "micro-behaviors/dylib/load/runtime::load-library-ex-a", "atk": "T1574.002", "conf": 0.95, "crit": 2, "desc": "Extended dynamic library loading (ANSI)", "spans": [ [ 405536, 0 ] ] }, { "id": "micro-behaviors/fs/temp/directory::get-temp-path-name", "conf": 0.66, "crit": 2, "desc": "GetTempPath named without a call site", "spans": [ [ 432368, 0 ] ] }, { "id": "micro-behaviors/process/create/exec::cmd-exe-reference", "conf": 0.8, "crit": 3, "desc": "References Windows cmd.exe interpreter", "spans": [ [ 422480, 7 ] ] }, { "id": "objectives/evasion/process/injection/callback::enum-locale-callback", "atk": "T1106", "mbc": "E1106", "conf": 0.7, "crit": 3, "desc": "EnumSystemLocales callback API", "spans": [ [ 405928, 18 ] ] }, { "id": "metadata/binary/resource/manifest::pe-version-and-manifest-only", "conf": 0.88, "crit": 3, "desc": "PE ships only RT_VERSION + RT_MANIFEST resources", "uses": [ 4, 5, 7 ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "uses": [ 21, 22, 25 ], "spans": [ [ 515438, 0 ] ] }, { "id": "micro-behaviors/fs/file/rename::any-rename", "conf": 0.9, "crit": 3, "desc": "Rename or move file on Windows", "uses": [ 35 ], "spans": [ [ 406088, 11 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::slist-operations", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Interlocked SList operations", "uses": [ 39 ], "spans": [ [ 405616, 0 ] ] }, { "id": "micro-behaviors/fs/temp/directory::temp-file-staging-primitives", "conf": 0.8, "crit": 3, "desc": "Temp directory staging primitives", "uses": [ 35, 71 ], "spans": [ [ 406088, 11 ], [ 432368, 13 ], [ 497256, 12 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 52 ], "spans": [ [ 405784, 14 ] ] }, { "id": "objectives/discovery/system/locale::windows-locale-fingerprint", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 2, "desc": "Imports APIs that query multiple Windows locale settings", "uses": [ 46, 48, 50 ], "spans": [ [ 405920, 0 ], [ 497400, 0 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000009614J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000cjE)TvR@5XvR@5XvR@5Xyzw{FxL\u003cX+(/Ll:vqR@W(/Lo+yhG[^(/Lr=CX%x@(/F", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000kVHva)0]6o07-8=bTs[M\u003c?KMH1T+e\u003e0j-7g002PGZ+:yHa3Y*r4\u003ccD800000nqN)GIbjEGJx/:1GxSzV))@wV4\u003ca4p4\u003ccD8000004\u003e6\u003cTnq\u003ep{c}$*P%g}mx\u002608/g6Ay:Zq#^g\u003c4?Rhf5dZfTfHuoZoAlh44?RhffI3=\u003c00961A(HU3-dd*/0a0H^+/[qP+/[qP+/[qPIW:dG1PSa8IV+td0002ggYNHQnq^R(nr164ecC%[1oOS6%nRuB@SreA+/[qPX=z^h0pQJn6@a\u003em0e?pj/-.v!nq^P%so5s3law(O002MF1JS(=6AD4{+/[qPnq3m*nxjazaoqDx07-2obP#OE55wpapYTb6\u003ePz$7BQH-)-5Hr/c6Ha/07.:Xik-$:+/[qP+/[qP+/[qPnq3m*:3.f}0rr91IbU-Cnq/\u003eYaN?]j.2:OKjj59Tnq1\u0026unDf#ogxWXGGtY:!+/[qP+/[qP+/[qP+/[qPnq3m*nxjazaoqDx07-2obP#OE55wpapYTb6\u003ePz$7BQH-)-5Hr/b[\u00266q07.:Xik-$:+/[qP+/[qP+/[qPnqQN%7!xH9bP{eVGx$pI}BDK$gXKv1gJ:UFkMy=:XSw#P0ri!\u0026g6vOFI33q5Z\u0026SNEI7?tQlKnVE5=UibGw(q/I+sEA1is2\u003e6nYu/F+:*W004gc:3.f}0rr91m2sO.bUi?YbP#OE55wtEZ^Ho9BQpP%+kSicg6vOFI8dXVA%R8(nq*Z#p!lH^bV)P\u0026-4UMonq*Z#p!uTi", "ln": 976 }, { "b": "002Mx-5LVU+/[qP+/[qP+/[p4Gx$2IcSHcD(JK=#0SSi\u003eGtYgQ+/[qP+/[qP+/[p4IcIqis4E#gfI4b$4{cKS5KW(!-Zz6{07.@ubQ=iwnF1BJ8aV?(2Y?y8a3Y/%I]e7o0z5gMZ^%B[.aoi{ioTI0002N\u0026.:]XY5j!(=2Y!-26]\u003cZC0fx1\u003ei9#}Z4[kwDH1*X)nq^Na^NYqtnq^GF6?fUQ07-3%nr1854fV:}R$*q(KvUpmbTs[M-4UMo+/[qP+/*", "ln": 3773 }, { "b": "c\u003ew\u003edoaVmGnq^^B:3.gb00000mkJ5xr3S\u003eTXb#Zh0j\u0026dg0kKBVbQ0a4ig{uNnqNBtH5VlCk.e?nAU-^y@$O.g0%0#G0UpNjH.1RxgqJj5@$O1@0@$G[0000fL!-7Wnq^\u003cDGzCK\u00263Jy?)PAtg#1NxeQXF$OH08ewubTw{L000306{Co)0enjheb{s\u003cPAtf+IWI!V1w1gv%8YK^70\u0026GO07+cj%nSc0G$}*A@$TW*0%4S{I:O*QkR\u0026vgI9?M*lOFJ", "ln": 37784 }, { "b": "c\u003ew\u003edoaVmGnq^^B:3.gb00000mkJ5xr3S\u003eTXb#Zh0j\u0026dg0kKBVbQ0a4)2?CJnqNBtH5VlAk.e?nAUJTu@$M3c0%0#G0UpNjH.1Rv(WnZE@e}cZj*$y\u003e01UsfHZcFe3Rk{C%8!XG72$CV0i=Q(AZvkQ0000)Jyk3SX!1\u0026w0ri^9Llg/sZ\u0026.pf6#b[l07-1Qnq3:rBqK@(H(}\u0026unxg\u0026j%nSaMZ\u0026Y\u003eY6}ZS\u003e0ldwW0K8Z)dVlXukUc-02/Yj=0z4[", "ln": 41188 }, { "b": "@$TsG0@%T.0rraL{=@{^w@]-v{i]1)IV#ZZnczD==I[TRI#%5JI$/\u002634Og831v@Tu@$U3Z0@@\u003eu=}68v@$T4y0%0#G%8.)B%ix@Enq^Wyv[l.[1j3]Y.I!M%nq\u003eL-I]nhB!=cw@JroeLjh=n9o[\u0026p\u0026lp^1snmLf[ncvfq6}70.07-4ynq^%Gv[u!]1j3]YJ/j5u54o?QI{IzrA/ye3GztE*1XF:t(+Zmp0001QtQjnVIV#ZZnczD==ni]G6/y%M0fDHRnq?Nnv2FnnA7(gqbP]To21Sk{1v@TumkI-q!bHd8I#%6w\u003e*\u0026Pk0eedg3q3f4@$NUP0%1AOIW8^.nczG^=\u0026jZ/I#%5JI]XCyZ\u0026Q5SIVuqakOi@gWVgB\u0026Kn", "ln": 43470 }, { "b": "{=]vySq([#w!b$K002-E{78?B0000\u0026IV#ZZnczD==I[SmIur\u0026HI$/\u002634Og831v@Tu@$P{s0@@\u003eu=}68v@$O}10%0#G%8?UW1onA4IcIrJo[\u0026p.j4LnlnmLf[ncvfq6?9#Z07-4ynq^%Gv[u!]1j3]Yi/j1t54o?QI{Izr9/ya2GztE?q?Jl@IcIrJnq^Wyv[l.[1i@ZJ@$T:P0%1CGo?Cxg(0st?%454LnmLf[ncvfq743?W07-3?o]D}YI}d?x\u003e86lvnJT\u003c3GNr+0%gnyl008t?n=N92z2:Lnnq?Nnv2FnnCUB3ybP]To21Sk{1v@TumkI-q!bHeDI30:t\u003eL", "ln": 44098 }, { "b": "zB/YhnJVA-7z0$Qw\u003cFI#B6Im*.2?RA1rW.pjihNegS-gw*JjqzW//Gsk%98c7jZ=naolG]nDlH%jiI^fnxnND%nS9)I)K--0rr9\u003cI[}@xJ3GID002LC+\u0026(C00SU=x-5E+$0af5rtF\u003cc]3%#L-/gw71Bq+X03p{8{w!b$K003Q)2Y}mYGtmKWjhu1fnq\u003etQ:hd/Q%nLRu:4jRwnJUr\u003c4[jO9NN\u00267F0.CG3(+U[!q=V%=rZx!TF:uFt002MHy:qnpGxq2ZIV@Rw", "ln": 73594 }, { "b": "0071qz^tR4I+KgqGxjgJJryX4jnr[@4\u003ca4p-OCSi\u00267eHv\u0026kLVD.g/WDis^h%0a]?P4\u003ccD800000]aeKQX/Q[L04VDP+18S^-Qia3-nVgY+mxo90002g0rr91!8Ag2B\u003efbC{\u0026S\u0026oH3=\u003eOCxvuk.g3q6-R\u003c)MaJsrh.g/Xz{\u0026**PnSg\u003c80rr91!8HzIbHyJ@-R%^Qv8-a-t%J1l4\u003ccD800000]aeKKXGp!K04VdeP(6lb3b\u003e?K7T2Bg1pofrXb=Nf0mH", "ln": 80852 }, { "b": "+/[qP+/[qP+/?jxnq\u003es4+/[qP+/[qP+/\u0026RmtQfOCIf70Os4E#gavg}rnq)sgGua9+I$c/ZO(+%)GURZ!@$S:V004VDs9l2YI]e8z/gp?B@$Q5^004X/BRWJatQh0]I/Zj7nq1\u00266uR7hyO(U)(gR=LttQh0]I/Zj7nq1\u00266u=gai+/\u0026Ro0Mid9+/[qP+/[qP+/\u0026RmtQgd/nq3npnq^T\u0026hVS[HgSh?vl)L(9I}Q\u003c..NZuW002r}7YTKonq)rz6#:kO0enjg1t^\u003cVmGj8Yr@-kM{+D{{GznI\u003chaSZabP]To=\u0026j.!so5tPZ\u0026QPPl)K(=I35V7bUT4Z2-z7@p(dKFgR=LrlLeL/@$Urf002MFoE9.hgTb5IeDt=wI\u003c#5y0000\u0026Gt.e8.{3uG+/\u0026sJnq3n9nq^V2hur!GgSh?vl)Lq]I}Q\u003c:l)J)h^M$z(00030", "ln": 252966 }, { "b": "Y5%=Ga4R4x[5CQ?2ls/a0000\u0026I3rwN0rydz^GY^M1][S654Z{y4$=zl001*%4/$3F.qVOd3^.C3r3TddY5$4zGy5Ts07-2obRQFFjo=sI?t^JQIV]EM0rv+[2/^a72ls/b0001Q1+^fZ073s{aARgE:rnIbzu*gx1POJ5I3mY20rtAp\u0026q-\u0026W=}65#AT8QB", "ln": 265262 }, { "b": "0000000000000000000000000000000000000000000000000000000000000rif4000004/VUi000009@=uy00000eDk?M00000kk$-=00000o-Cj}00000sPnH700000wD8=j00000BPhEz00000J@GjZ00000S@Ah400000Zw!ro00000?2vGS000", "ln": 274896 }, { "b": "001b?1onA!c\u003cfIIA3$??0kHY1007}t1onA40000000000000000000000000fFCgnfFUsrfF\u003eEvfG7QzfGp:Df!+spf!$Etf/gQxf/y:Bf/Q)Fgb7ErgbpQvgbH:zgbZ)Dgb}3HgCyQtgCQ:xgC*)BgD43FgDmfJg+Z:vg+{)zg=d3Dg=vfHg=NrLh83)xh8m3Bh8EfFh8WrJh8)DNhzv3zhzNfDhz^rHhA0DLhAiPPh.WfBh.)rFh-9DJh-rPNh-J-Ri4$", "ln": 277104 }, { "b": "irg(oirg]pirg@qirg#rirh2sirh5tU.Aph0rr91Aae/$0rr91PQ(dl0rr91rC(O\u0026z*c7wwQ4Y@Acb/jzu6Up000002-5Rl0rr91=%V{80rr91PQ(dl0rr91d2d}Q0rr91ayUt30rr91PQ(dl0rr91vQS^\u0026vrcx%C{40oCoyZkzFa6800000B98CpzF78lz/l+mz/fg/fA", "ln": 277736 }, { "b": "x(v(Iash7ec37hJxMvWdayPdgB-7(3zE^M{wgO\u003cvz/ddFByVHYd\u003eq-NCW\u003er7BzkVhe=U\u003eKpgnlUC4B6MC4\u003eC$uQF\u003cBvru6Zx([2PvpK7:zE+^JcUv7ewHwQeA+xJiwO#Pjx(+zmB.\u003e\u003eD00000000000000000000pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Zx([2PvpK7:zE+^JB-7#jz*c7wz/M$yzEEY%x(4i!y?j.#vpK7:zE:(7wfrgee=U\u003eKpgnlUC4B6MC4\u003eC$uQOEDBAhqB00000pgnlUC4B6MC4\u003eC$uS7DRwPN[L00000pgnlUC4B6MC4\u003eC$uVP^*Bz(hbB7]@i0000000000pgnlUC4B6MC4\u003eC$uQ[WHq!oPUwO#P*x)Ks\u003c00000pgnlUC4B6MC4\u003eC$uS7Dzwi\u003eoZzESUDpgnlUC4B6MC4\u003eC$uSRnZBy^:VD2v9(pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Gx(VlScUc!ix\u003e7Z4ayPq6B.$YcBrCpsaz#sry+tX/00000pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Gx(VlScUc}icM(\u0026rxlw65zGE1nB0bvyy?$Z7pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Gx(TgNpgnlUC4B6MC4\u003eC$uSq5\u003elVl*Xy?mZ10000000000pgnlUC4B6MC4\u003eC$uSq5\u003elVl*Xy?mZ1o\u003e!GR00000pgnlUC4B6MC4\u003eC$uQ[WHmRMWIq!ZL?0000000000pgnlUC4B6MC4\u003eC$uR$@SB.aD[zu6UppgnlUC4B6MC4\u003eC$uR$@SB.aD[zBOL+0000000000pgnlUC4B6MC4\u003eC$uSQVKwKyxMAbo9cx(v(\u003cz/PS8ASu7t00000pgnlUC4B6MC4\u003eC$uRU-XnPc$mzGGDmBAmAZ00000pgnlUC4B6MC4\u003eC$uS7DLz*2X\u003cwOk\u003c\u003ezGC\u003cU00000iSICCo-NiOve$cAiSI$Ro-NiOz#:.P0000000000{(bAb0rr91aytb00rr91fMWqB0rr91KEl900rr910g:au0rr91\u0026bF:E0rr91[o$v/0r", "ln": 278464 }, { "b": "pgnlUC4z!bwP?=$wGUz$y\u0026r/(BzkVhaAz4nB-Iwhwft=jy?$Z7e=U\u003eK00000lVM:DBy^\u003cOAYLs-wO(vewNw\u003eZy:ZUSB0\u0026yVw)]y\u0026wN)?Ac37WYlUH4vyANe4A+e:5z/QaCAaK6bx(!ufz/fRG000000000000000lVM:DBy^\u003cOAYLsMA+eW3wNw$ZA+e:5z/PM6B0@yZB0\u0026yVw)]y\u0026wN)?Ac37WYlUH4vyANO8A+fcgaAg+hxDRn9A=2JiB7]MgB0a[ewftz%B88[tAa9l/e=U\u003eKC-z]S0rr910ak!S0rr91Z?A!00rr910000000000qE%uRC4CYtaz\u003e?lzddJ@xGvnECXIkvx(mMaB7G03wO#Pjw[=6)aswERcM)bAasg\u0026uBS+dsBy/IovS==nv@Dl%x\u003eINewN({8wOk\u003c\u003ezGGlbx)Ktkx(+yyy\u00261kpvTi6bB1OOmxK@q%vrt{2z/cXdx(!5jCvtLnCxdztBy/tjCwhejayMyevrc0(AV/BmxkIi$BrCTsDsYeXz/xo9x(mMaCwhejaARpdaAIydy\u00260W6aA8deaA}:Dy?aU#z/P(vAc9jAxK@r5z!yWBmql\u003cSwPw]7wO+}1wGV8dwGUMe", "ln": 279584 }, { "b": "0eHQP04v)F0000004x3YqBKI:oJizu09r(LgCQuU0000007ggjzF%RtB7GCoBzbYavpTs}z!{LrxMvV)wft-6zFr%gz6i}satA\u0026@0000007ggjzF%Rtv@=c?By=OpxMvV)wn(E9y-)k7wNPF0A3e!lz/{1007Hyhy?mc1Bz\u0026pyv}YB:B.\u003eRiCw?IqiV[z503}", "ln": 280475 }, { "b": "zVBnEve$9zwDhYg00000tMw1ekla{*m/Vi.pxiYYk(:NUqufF)pxjt]00000yxd]CASx$SwDlJDgxofge=YzZyYFnK0000000000m}D^wwO(x.vrufrr@-j25deL\u003c0rr91PBI9P0rr91Z)b4M0rr91Z.N660rr910000000000vQS^\u0026vqG:#v{%E[z/bKP0000000000kMH\u0026+000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 292064 }, { "b": "PYMsR(MDld5deKuA0#ZDUOEuwKp.D)u[8oVu\u0026Qfb5iH6}UMaU6qD2$Z}xAth4dMwOS+U0-t^pUv0rr91l][NYtXvF=zE)]{xjk*#wPRf[x\u003c#c*B98tvvp%dRrc8F\u003ez/PMlwN5.PtW??\u0026y?c^GwO+{^B7FP]vrujbwNw$VC4\u003eC$e]Uug0000000000cia2Ccia2C1onA4cia2C0000001Ybg00961e{7VHBr\u003eyh0000001/hhZ.)mPe{7VHBr\u003eZv00000Z:YD!kMy=:e{7VHBr\u003eZvbRQ[L04OfLZ.3LDe{7VHBr(8hZ=R-1qVD^$e{7VHBr(cx0000006*U!", "ln": 297140 }, { "b": "1vr7*0sw#g3pj%^1AjDt0X:POa:Ty[D/Lqfb/y8\u003e1.m#v5s0j}rH0K:H[j.HaPIMz0aVDq5s0j}rH0K:H[j.HaPISB0k]oC0aVDq5s0j}rH0K:H[j.H0r@P922UIw0sn(e2#Q{", "ln": 299140 }, { "b": "aPIGxZ+C/?dLZ#7y{0)v0r@P922UHRaRB[T5{aAW1.m(su[IAVE\u003eyZ3PSOy$aPIGxu[IAVE\u003eyZ3PSOy$0sw#g3pj%P1AjDJ0-e\u003c%aQ4]E1VctZPDa1jclrc!^5)GKaPIGxPDa1", "ln": 303248 }, { "b": "0s]ki1#llR0sw@f3n-j)3x+QjaSQ:!9CtMQ732/71.n2w\u0026e!0u[Si!Ld8#C\u003caTmf\u003ebD7Ox4WWm%1:yaH[Si!L5%ij}g@/.0aQd#F28ArX5%ij}ylnL$p@-XsaPIGx5%ij}ylnL", "ln": 309536 }, { "b": "zW(\u003cHJlzz80sn(e2@hXx18[q}aRB$V67=Ih4A5LM1.m(s01/qkjRm+@:JK+!aPIGx01/qkjRm+@:JK+!0sw@f3n-1*3nI/[aQ[LO4DE-]1-%}Gu\u003eSRxMLfD30l\u003eSDaPIGxu\u003eSR", "ln": 310976 }, { "b": "c)O/[sLr(T0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@u5q*L\u0026D5qX7Jm[ymaPISB0cwOG0aVAp5q*L\u0026D5qX7Jm[ymaPIGx5q*L\u0026D5qX7Jm[ym0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@up-/YrXGp?L*$z(haPISB0cwOG0aVApp-/YrXGp?L*$z(haPIGxp-/YrXGp?L*$z(h0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@uAeK!#*LVdlezypcaPISB0cwOG0aVApAeK!#*LVdlezypcaPIGxAeK!#*LVdlezypc0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@up:b]uYcmmQEa[=7aPISB0cwOG0aVApp:b]uYcmmQEa[=7aPIGxp:b]uYcmmQEa[=70t#4v8ft@X5I%K?0:(0d0t$$", "ln": 314500 }, { "b": "-191K000000000000000?t/]-wNPW(mRMWIk(=chm}D^ix(4uVx)KtVCMsomlU{WZwK{lEwnC/Sk(\u003cw+C4\u003eC$nPc$mzGG]qyYDl(l$HgCBy^{Qy?k)jSruagvpR\u0026wy?iODu\u003coXMx()]Qx(4tXJrhQYBwca:Bvyj\u003cz/L*T(I%p)wNPW(nPc$mze:r5BzkVhp\u0026yw@008($m}D^tB.bYbwj7oLAbo9cx(v(/ByxolA@V:LlVM:DBy!A+A+eV\u0026AbPVh006haq!p5IxMvV)wn(E9y/C7*wNPazvr=H6B.}9UUMW%pBw#{]wNPa*z/oC\u003exMvV)wkc=Qx(e0f005!{lU{WZwMit-wNPa*z/oB(5DLmtwNPW(ra{q-vpTs}", "ln": 323824 }, { "b": "uVQsfwNPB+B.i)brx?:sxKL{*BAg/7BAoYnkY.3TkTmOQByWT4ryGhtsxF-bo\u0026C7Wp+:^Xe[w^m001[SuVpddwN/d+yYCWWuTE\u003e@wm6B\u0026A=2Jdvru5XaPL\u003eRB97@1wQ4Y@Acb/jzEl)(AcRA-a]\u003e$SB97@1wQ4Y@Acb/jzEl{=B98CvC(N\u003cBuQG6.ra{q\u003cCsu:^", "ln": 327618 }, { "b": "0024Ym}D^fB-IIlzGFoXA+e:5z/Qb8007HGlVM:DBy^\u003cOA+e:5z/Qb8005L\u003cmRM:JlU{WZwDnUfmRM:JmRM):BvG$XwMF\u003ciQx9?#zE=jJA=Vs(x(4uHCVK\u003eBV\u0026JTgzE=HNCYVz?y?lVFqVYE2Bvo?:yEStQwM9LRv}w8Nr@^gvm}D^ix(4uDBAzLqvS=^7B5@twz30jsBvG$XwKgAWA+P09By/IZCVK\u003eBASO:xBvG$XwL3=Kz/PY6BzkVhlu#agzE^M{004xFm}D^ix(mu}p*[DVpgn0Jli", "ln": 328904 }, { "b": "vrufTvqPNS003Hjq!p5ux(4uDBAzLqvS=^7B5@tww^8aABvG$XwL3=Kz/PY6BzkVhlu#agzE^M{003*sq!p5ux(4uWx(dzYdfA7KBw#**A8o$+xJCfl*YfYZwNPW(mRMWIg5@Q2l2{Kax(4uDAa%wVpe:Z:R2\u003cd#BwlW:B.\u003eRWvqYQ(wMF\u003ci?2Z8TBwN0@v)KToA+frk007yDlVM:DBy^\u003cOA+e:5z/Qa(CVK\u003eBZw{StAcT]!y?kv490w#OC4BcSy?l4Wr@?H=lVM:DBy!0KA+4\u003cTzFJqN4fn?pwNPW(q*Aj?z!%b$oLFxWr@:DFo)7n]", "ln": 329152 }, { "b": "0000000000000000000000000000000000000000000000000000000000005kijS0rr910@@r300000p!R1x0rr912lj-7000000rr910SSi2000o8000000000200000%nSc0%nSc0gnrUTNjwmq00000000000000000000000000000000000000000000000000000", "ln": 329680 }, { "b": "kY.3TkTkqHsC3:b0rr910000000000e\u003czT5uShk\u003eBy/q@wPz*fAZjX/wi-xWsC3:b0rr910000000000e\u003czT5w[=6)B9R?GwO\u003e^=A=M8skXs.DwPJcrBy/qOB97}TkMy=:sC3:b0rr910000000000e\u003czT5x(n95y?WA!vrc16zdNQbkY.3TkTkqH00000sC3:b0rr910000000000e\u003czT5y\u0026r%2v{-!/A=k$-B97}TkMy=:sC3:b0rr910000000000e\u003czT5wPz*fA:Jr+By/96A^o]\u003eBn", "ln": 330080 }, { "b": "0000000000sC3:b0rr910000000000e\u003czT5ko%0jBzk]fl$HKQv}wkGAbm^ura{q-vpShMz!@0-nmuyDy?mSLwO#W9A=k\u0026jwO#PPmNo%Lmn=xokTkqH000000000000000sC3:b0rr910000000000e\u003czT5l34r?v[yPaz/fVdCYVhnbU?=\u0026x)a5QwP?=$wK#", "ln": 330568 }, { "b": "00000000000000000000000000000000000000000000000000000000000001YbgLmNY]sE/M{01/hhg7:G^{).D!kOi$@A1J6I0g:k)FdR+YVjN6p2+q7#Z.3LDBRjVO5s\u0026}7Fd.?Znd$$6aE@Snp.J*eTRgWmfR5sDZ.lXF78c-Gk+e2Taqs!Qvh5", "ln": 332240 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000317YTKo7YTL^000000000000000000310SSi2fAq96000000000000000000312)pkdnb@R\u0026u[.=+Ee%rF00000000000000000000ju[7cy-)[jA=U@kzAPv4e=", "ln": 345040 }, { "b": "j}d\u0026warR^?B7F\u003c7A+PSvj}d\u0026warR^HauTWQADL\u0026lBy!#VA+PYhy?ml\u003cB3p3uarR^HarR^HjAt1MB.bSowN[kOwN/\u003e8x(v(.wP?T3az+RjwO:HSvrk1TC5IecAWI#Lx*DlswPI]QcUu!6B7DZwffP*LarR^HarS^1A+flkwPI%8wkEqXC4\u003e=7xjVcF4gjj2arS^1B7F\u003c7A+PSvj}d\u0026wauRr0A=(CBnP5cUj}d\u0026Yfjw{ywO\u003e))C%hVA000000000000000000000000000000000000000000000kM?7O0001(RkQk{RmrwqRo(6%Rtc\u003e!Rynq}Ru0U5S$qr=T2NdBT4oo/T5#AUTb%xHTdVI(TfwUmTh7^STi^{1TkH5FTn5Z}To+)sTqF2YTsge7Tt)pLTwD02TyebyTn", "ln": 345369 }, { "b": "4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 346304 }, { "b": "y+FH%v@=Hez!s8qgb87lwmW5xfJhW#zFs03b@deJlQr1NfFUsqg+JoUy+PYg2Rc8W1Qbbi0r=*+uOC:\u00262Rc8W1Qbb+0!%M=BAzE.fe4J[Cp)-Dv@=Hez!s8zv@DiqAbffaAc0WxwPz)lfhld\u003cA=l2qw]]sOfHG+?wHf8=q!Y(Zx(mMfgb8J(k{Xougb7Eue[n{zfBOc/ruh.N0SJo7fAr^o1{(=lnqu\u003cF0rAMi00v/O0rt.^WHOuX6c3C)8lA!yUB!byLE9mLN8RtKoQcqyQWm)S\u003c$lFf{5770%fJyXvf+w/+yI#Y/$aER(B)H5OQ#9oWseyY[Z!1*qMakIN+BR4uW10[b!Oa$]YNv}\u003eK(%-JsJ)D@D{WWcV]a2M49z)2O{[nM/EYB^z2u\u003cVQS7eOI]ptgO=Os!\u0026ZeJ?7!bDQ?97:aqynuL5s{]kPeEHslJUoTtockRUPzv^#0#v[)T]3/\u003et\u003e8\u003e6-5RalNSRqc:XK+BEml=eL/bI5}UNH]NfWG6mdP/TTsP.iD/\u0026b?$9Y[mFUpJ6K}\u003cK+nc-rv*T.Ce%EmoX!?n%jNu2q9aCP17\u003ep*?ena7:*VR5eE}j\u003cNYhdS3vMW?6\u003eL$Fo1js}uKy)K2cuMK)cNrN-4{Yh()Ua6{1zI=?pwJK*Vfi)9u0Kn!%L]EVuDgAUIE7:3Mn1PPdvIuaJsyi\u003euYNBEzpkde\u003cm(!\u003euPKQd\u003em=Qh8k(?sU0\u003eC9FA[CVa9MU6V{LkoY8mt\u003e7$oWJ[zHx)xS+]Bf!J)X\u00266)eBZ}D6r)%703y38R@76\u0026Xc8q2-x?d}]jW31kf^CQ-4]rbzJtF]Apf^YKRmlba", "ln": 347088 }, { "b": "6?@yLA=l2qw]]d.z/P/nA::67z/do+fFAXkrrJyqdnsI^A=l2qw]]d[z/o.ulUgpWx\u003ez6?vru66l3mo.z/PMlC{1\u003c@f!\u003ev67y-bRfGp:Cgb7Nxf/StM4kP)@gCQZvgbgNsg*hOmf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK", "ln": 347904 }, { "b": "viwu+wPzj3x(v)gf^!U31{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wwlOHhCfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^vfOfJLfOfDlPAtk@0S\u003c2\u003e0006Cja[=YeuAwa009610WGDe1{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n1p2OBqE%xQz/f8u9XXMr162Eh6bskQv@=Hez!s8llVm0:z/Podx(v(zcnlXH162Ea6cf!Yv@=Hez!s8lrb3hXeMl+1zeZQ]lQq?IfFLmn9V2nvhzu)viwAJIiw\u0026*27y-bUfF$Nzf/.3Ih91?]FY/+QfBm{=rrJHt0--eN6eg15162Ef6ad/HB7/o9xln6ff+u2G1{m\u003cd2nmtuwN]T@zE+EyfDpo0rrJTx6?@yLA=l2qw]]d.z/P/nA::67z/doQfE3=7rrJW", "ln": 350426 } ], "depth": 1, "facts": { "exp": [ [ "NativeDevice_AvailableBackends" ], [ "NativeDevice_CreateDir" ], [ "NativeDevice_CreateWithBackend" ], [ "NativeDevice_Destroy" ], [ "NativeDevice_GetFileSize" ], [ "NativeDevice_GetLastError" ], [ "NativeDevice_GetSegmentSize" ], [ "NativeDevice_NumIoContexts" ], [ "NativeDevice_ProbeAlignment" ], [ "NativeDevice_QueueRun" ], [ "NativeDevice_QueueRunFor" ], [ "NativeDevice_ReadAsync" ], [ "NativeDevice_RemoveSegment" ], [ "NativeDevice_Reset" ], [ "NativeDevice_TryComplete" ], [ "NativeDevice_TryCompleteMine" ], [ "NativeDevice_WakeCompletionWorker" ], [ "NativeDevice_WriteAsync" ], [ "NativeDevice_sector_size" ] ], "imp": [ [ "kernel32", "CreateFileA" ], [ "kernel32", "GetFileSizeEx" ], [ "kernel32", "CloseHandle" ], [ "kernel32", "DeviceIoControl" ], [ "kernel32", "DeleteFileA" ], [ "kernel32", "ReadFile" ], [ "kernel32", "WriteFile" ], [ "kernel32", "GetLastError" ], [ "kernel32", "CreateIoCompletionPort" ], [ "kernel32", "GetQueuedCompletionStatus" ], [ "kernel32", "CreateThreadpool" ], [ "kernel32", "SetThreadpoolThreadMaximum" ], [ "kernel32", "SetThreadpoolThreadMinimum" ], [ "kernel32", "CloseThreadpool" ], [ "kernel32", "CreateThreadpoolCleanupGroup" ], [ "kernel32", "CloseThreadpoolCleanupGroupMembers" ], [ "kernel32", "CloseThreadpoolCleanupGroup" ], [ "kernel32", "CreateThreadpoolWork" ], [ "kernel32", "SubmitThreadpoolWork" ], [ "kernel32", "CloseThreadpoolWork" ], [ "kernel32", "CreateThreadpoolIo" ], [ "kernel32", "StartThreadpoolIo" ], [ "kernel32", "CancelThreadpoolIo" ], [ "kernel32", "GetFileInformationByHandleEx" ], [ "kernel32", "SetUnhandledExceptionFilter" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "DisableThreadLibraryCalls" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "CreateSymbolicLinkW" ], [ "kernel32", "CreateHardLinkW" ], [ "kernel32", "MoveFileExW" ], [ "kernel32", "CopyFile2" ], [ "kernel32", "CreateDirectoryExW" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "AreFileApisANSI" ], [ "kernel32", "CreateFile2" ], [ "kernel32", "GetTempPathW" ], [ "kernel32", "SetFileTime" ], [ "kernel32", "SetFileInformationByHandle" ], [ "kernel32", "SetFileAttributesW" ], [ "kernel32", "GetFullPathNameW" ], [ "kernel32", "GetFinalPathNameByHandleW" ], [ "kernel32", "GetFileInformationByHandle" ], [ "kernel32", "GetFileAttributesExW" ], [ "kernel32", "GetFileAttributesW" ], [ "kernel32", "GetDiskFreeSpaceExW" ], [ "kernel32", "FindNextFileW" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "FindFirstFileW" ], [ "kernel32", "FindClose" ], [ "kernel32", "CreateDirectoryW" ], [ "kernel32", "GetCurrentDirectoryW" ], [ "kernel32", "SetCurrentDirectoryW" ], [ "kernel32", "GetTickCount64" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "Sleep" ], [ "kernel32", "SleepConditionVariableSRW" ], [ "kernel32", "TryAcquireSRWLockShared" ], [ "kernel32", "TryAcquireSRWLockExclusive" ], [ "kernel32", "AcquireSRWLockShared" ], [ "kernel32", "AcquireSRWLockExclusive" ], [ "kernel32", "ReleaseSRWLockShared" ], [ "kernel32", "ReleaseSRWLockExclusive" ], [ "kernel32", "GetLocaleInfoEx" ], [ "kernel32", "FormatMessageA" ], [ "kernel32", "LocalFree" ], [ "kernel32", "GetStartupInfoW" ], [ "msvcp140", "??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z" ], [ "msvcp140", "??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ" ], [ "msvcp140", "?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z" ], [ "msvcp140", "?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ" ], [ "msvcp140", "?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z" ], [ "msvcp140", "?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z" ], [ "msvcp140", "?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z" ], [ "msvcp140", "?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ" ], [ "msvcp140", "?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ" ], [ "msvcp140", "?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ" ], [ "msvcp140", "?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ" ], [ "msvcp140", "?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z" ], [ "msvcp140", "?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z" ], [ "msvcp140", "?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z" ], [ "msvcp140", "?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z" ], [ "msvcp140", "?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ" ], [ "msvcp140", "??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z" ], [ "msvcp140", "??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ" ], [ "msvcp140", "?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z" ], [ "msvcp140", "?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ" ], [ "msvcp140", "?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ" ], [ "msvcp140", "?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ" ], [ "msvcp140", "?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z" ], [ "msvcp140", "??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ" ], [ "msvcp140", "?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ" ], [ "msvcp140", "??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z" ], [ "msvcp140", "??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z" ], [ "msvcp140", "?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ" ], [ "msvcp140", "?_Xbad_alloc@std@@YAXXZ" ], [ "msvcp140", "?_Xlength_error@std@@YAXPEBD@Z" ], [ "msvcp140", "?_Xout_of_range@std@@YAXPEBD@Z" ], [ "msvcp140", "Query_perf_counter" ], [ "msvcp140", "Query_perf_frequency" ], [ "msvcp140", "Thrd_yield" ], [ "msvcp140", "Mtx_lock" ], [ "msvcp140", "Mtx_unlock" ], [ "msvcp140", "?_Throw_Cpp_error@std@@YAXH@Z" ], [ "msvcp140", "?_Syserror_map@std@@YAPEBDH@Z" ], [ "msvcp140", "?_Winerror_map@std@@YAHH@Z" ], [ "msvcp140", "?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ" ], [ "msvcp140", "?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ" ], [ "msvcp140", "?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ" ], [ "msvcp140", "?uncaught_exception@std@@YA_NXZ" ], [ "msvcp140", "?good@ios_base@std@@QEBA_NXZ" ], [ "msvcp140", "?flags@ios_base@std@@QEBAHXZ" ], [ "msvcp140", "?setf@ios_base@std@@QEAAHH@Z" ], [ "msvcp140", "?setf@ios_base@std@@QEAAHHH@Z" ], [ "msvcp140", "?width@ios_base@std@@QEBA_JXZ" ], [ "msvcp140", "?width@ios_base@std@@QEAA_J_J@Z" ], [ "msvcp140", "??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ" ], [ "msvcp140", "??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ" ], [ "msvcp140", "?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z" ], [ "msvcp140", "?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z" ], [ "msvcp140", "?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "vcruntime140", "current_exception_context" ], [ "vcruntime140", "current_exception" ], [ "vcruntime140", "std_type_info_destroy_list" ], [ "vcruntime140", "C_specific_handler" ], [ "vcruntime140", "memchr" ], [ "vcruntime140", "memset" ], [ "vcruntime140", "memmove" ], [ "vcruntime140", "memcpy" ], [ "vcruntime140", "memcmp" ], [ "vcruntime140", "CxxThrowException" ], [ "vcruntime140", "std_exception_destroy" ], [ "vcruntime140", "std_exception_copy" ], [ "vcruntime140", "std_terminate" ], [ "vcruntime140", "purecall" ], [ "vcruntime140_1", "CxxFrameHandler4" ], [ "api-ms-win-crt-heap-l1-1-0", "calloc" ], [ "api-ms-win-crt-heap-l1-1-0", "malloc" ], [ "api-ms-win-crt-heap-l1-1-0", "aligned_free" ], [ "api-ms-win-crt-heap-l1-1-0", "aligned_malloc" ], [ "api-ms-win-crt-heap-l1-1-0", "callnewh" ], [ "api-ms-win-crt-heap-l1-1-0", "free" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vsprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vfprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "acrt_iob_func" ], [ "api-ms-win-crt-string-l1-1-0", "wcslen" ], [ "api-ms-win-crt-string-l1-1-0", "strlen" ], [ "api-ms-win-crt-locale-l1-1-0", "lc_codepage_func" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "crt_at_quick_exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "configure_narrow_argv" ], [ "api-ms-win-crt-runtime-l1-1-0", "register_onexit_function" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm_e" ], [ "api-ms-win-crt-runtime-l1-1-0", "terminate" ], [ "api-ms-win-crt-runtime-l1-1-0", "cexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "abort" ], [ "api-ms-win-crt-runtime-l1-1-0", "execute_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "seh_filter_dll" ], [ "api-ms-win-crt-runtime-l1-1-0", "crt_atexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_narrow_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm" ] ], "sec": [ [ ".text", 1024, 273920, 6.47, "r-x" ], [ ".rdata", 274944, 54784, 5.3, "r--" ], [ ".data", 329728, 2560, 4.22, "rw-" ], [ ".pdata", 332288, 12800, 5.51, "r--" ], [ ".rsrc", 345088, 512, 4.72, "r--" ], [ ".reloc", 345600, 512, 4.39, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 384134, "timestamp": 1788058519, "image_size": 413696, "has_manifest": 1, "headers_size": 1024, "checksum_valid": 1, "file_alignment": 512, "resource_count": 1, "cert_table_size": 10040, "export_timestamp": 4294967295, "computed_checksum": 384134, "headers_size_ratio": 0, "tls_callback_count": 2, "prose_section_count": 0, "reloc_overhang_bytes": 128, "reloc_overhang_ratio": 0.25, "bss_like_section_count": 0, "section_overflow_count": 0, "signature_expired_days": -210.56, "misaligned_section_count": 0, "base_relocation_block_count": 4, "base_relocation_entry_count": 173, "declared_data_directory_count": 10, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 356152, "entropy": 6.57 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.47, "data_entropy": 4.22, "overlay_size": 10040, "string_count": 406, "overlay_ratio": 0.03, "overlay_entropy": 7.52, "entropy_variance": 0.59, "avg_string_length": 27.65, "max_string_length": 287, "peak_region_bytes": 6968, "code_to_data_ratio": 0.99, "peak_region_entropy": 7.6, "string_length_stddev": 29.03, "largest_section_ratio": 0.77, "sentence_string_count": 37, "sentence_string_ratio": 0.09, "high_entropy_string_count": 0 }, "exports": { "count": 19 }, "imports": { "count": 171 }, "sections": { "count": 6, "code_size": 273920, "entropy_max": 6.47, "entropy_mean": 5.1, "name_entropy": 3.24, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "dependencies": { "count": 9 } } }, "id": 8, "ident": { "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:24 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "build_path": { "value": "D:\\a\\garnet\\garnet\\libs\\storage\\Tsavorite\\cc\\build\\Release\\native_device.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "O₃(As₂Er₂Pr)H₅(DbF₁₀Os₂Po₃Ti)Md₂(Bi₆Si₄)", "path": "win-arm64-based-readytorun.zip!!net10.0/native_device.dll", "pid": 0, "risk": 26, "sha": "f343c3d9bc756842ab876d6f78a0f1eacee4e7482e6da851ea9699588e345286", "size": 356152, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 273920 ] ] }, { "id": "metadata/binary/debug::pdb-absolute-path", "conf": 0.72, "crit": 3, "desc": "Embedded absolute PDB path", "spans": [ [ 297204, 76 ] ] }, { "id": "metadata/binary/debug::pdb-visual-studio", "conf": 0.5, "crit": 3, "desc": "Visual Studio PDB build path", "spans": [ [ 297204, 76 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/binary/symbols/fake-windows::sideload-export-cluster-size-10-25", "conf": 0.9, "crit": 3, "desc": "DLL exports ten to twenty-five APIs" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 279943, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 279790, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 279972, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "micro-behaviors/data/control-flow/dispatch::dense-x64-tls-array-access", "conf": 0.97, "crit": 3, "desc": "Dense x64 TLS-array pointer access", "spans": [ [ 1190, 2 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 346368, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 350490, 0 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::deletefile-a", "conf": 0.66, "crit": 3, "desc": "Delete files (Windows API ANSI)", "spans": [ [ 278560, 11 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::std-filesystem-error-rtti", "conf": 0.9, "crit": 3, "desc": "C++ filesystem error RTTI", "spans": [ [ 330144, 37 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "spans": [ [ 328952, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file", "conf": 0.9, "crit": 2, "desc": "Begin directory enumeration", "spans": [ [ 278952, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 278944, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "spans": [ [ 278936, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/volume::get-disk-free-space", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "GetDiskFreeSpace API import", "spans": [ [ 278928, 19 ] ] }, { "id": "micro-behaviors/fs/file/move::move-file-ex", "conf": 0.9, "crit": 2, "desc": "Move or rename file with options", "spans": [ [ 278800, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "spans": [ [ 278528, 0 ] ] }, { "id": "micro-behaviors/fs/link/reparse::create-symbolic-link-directory-api", "conf": 0.9, "crit": 3, "desc": "Creates a Windows symbolic link", "spans": [ [ 278784, 19 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::read-file", "conf": 0.9, "crit": 2, "desc": "Read data from file handle", "spans": [ [ 278568, 0 ] ] }, { "id": "micro-behaviors/mem/c-runtime/functions::vectorized-zero-fill", "conf": 0.6, "crit": 3, "desc": "Vectorized zero-fill instruction sequence", "spans": [ [ 3837, 14 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 278728, 0 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 278584, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 278832, 16 ] ] }, { "id": "micro-behaviors/process/control/info::process-info-class-31-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 31", "spans": [ [ 80916, 14 ] ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "spans": [ [ 323872, 0 ] ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "spans": [ [ 330616, 0 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 279000, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-wait--sleepconditionvariablesrw", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Condition variable (SleepConditionVariableSRW)", "spans": [ [ 279016, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-acquire", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "SRW lock acquisition", "spans": [ [ 279048, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-release", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "SRW lock release", "spans": [ [ 279064, 0 ] ] }, { "id": "micro-behaviors/process/threading/create::create-threadpool-work", "conf": 0.9, "crit": 3, "desc": "Create a Windows thread-pool work item", "spans": [ [ 278664, 20 ] ] }, { "id": "micro-behaviors/process/threading/create::submit-threadpool-work", "conf": 0.9, "crit": 3, "desc": "Submit a Windows thread-pool work item", "spans": [ [ 278672, 20 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 278744, 0 ] ] }, { "id": "micro-behaviors/time/query::get-tick-count", "conf": 0.9, "crit": 3, "desc": "Get tick count", "spans": [ [ 278992, 14 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::import-count-over-120", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Large PE imports over 120" }, { "id": "metadata/binary/debug::pdb-nonstandard-drive", "conf": 0.5, "crit": 3, "desc": "PDB path on non-standard drive letter", "spans": [ [ 297204, 76 ] ] }, { "id": "metadata/binary/layout/tls::pe-multiple-tls-callbacks", "conf": 0.9, "crit": 3, "desc": "PE has multiple TLS callbacks" }, { "id": "metadata/binary/layout/tls::pe-tls-callback-table", "conf": 0.9, "crit": 3, "desc": "PE TLS callback table present" }, { "id": "metadata/binary/section/ratio::inflated-data-section", "conf": 0.86, "crit": 3, "desc": "Data virtual size exceeds raw size" }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99" }, { "id": "micro-behaviors/fs/file/handle::device-io-control-win", "conf": 0.85, "crit": 3, "desc": "DeviceIoControl API usage", "spans": [ [ 278552, 15 ] ] }, { "id": "micro-behaviors/fs/file/timestamp::set-file-time", "atk": "T1070.006", "conf": 0.85, "crit": 3, "desc": "Modify file creation/access/write times", "spans": [ [ 329216, 11 ] ] }, { "id": "micro-behaviors/fs/temp/directory::get-temp-path-name", "conf": 0.66, "crit": 2, "desc": "GetTempPath named without a call site", "spans": [ [ 292144, 0 ] ] }, { "id": "micro-behaviors/fs/traversal/drives::set-current-directory", "conf": 0.9, "crit": 3, "desc": "Switch current working directory", "spans": [ [ 278984, 20 ] ] }, { "id": "micro-behaviors/os/syscall/invoke::all-ones-handle-constant", "conf": 0.8, "crit": 3, "desc": "All-ones x64 handle constant", "spans": [ [ 73658, 20 ] ] }, { "id": "micro-behaviors/process/threading/concurrency::create-io-completion-port", "conf": 0.92, "crit": 3, "desc": "Creates a Windows IOCP", "spans": [ [ 278592, 22 ] ] }, { "id": "micro-behaviors/process/threading/concurrency::get-queued-completion-status", "conf": 0.92, "crit": 3, "desc": "Waits on Windows IOCP", "spans": [ [ 278600, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/instruction/junk::indirect-call-compare-branches", "conf": 0.85, "crit": 3, "desc": "Indirect call followed by a compare branch", "spans": [ [ 37848, 11 ], [ 41252, 11 ], [ 43534, 11 ], [ 43632, 11 ], [ 44162, 11 ], [ 44228, 11 ], [ 253030, 11 ], [ 253179, 11 ] ] }, { "id": "objectives/evasion/indicator-removal/timestamps::export-timestamp-maxval", "atk": "T1070.006", "conf": 0.9, "crit": 3, "desc": "Export dir timestamp set to 0xFFFFFFFF" }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 10 ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 10, 18, 20, 21 ], "spans": [ [ 350490, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 17, 18 ] }, { "id": "micro-behaviors/fs/enumerate/directory::file-enumeration-with-access", "conf": 0.9, "crit": 3, "desc": "Directory enumeration with file-content access", "uses": [ 25, 27, 30, 32 ], "spans": [ [ 278528, 11 ], [ 278568, 8 ], [ 278936, 13 ], [ 278952, 14 ] ] }, { "id": "micro-behaviors/fs/file/rename::any-rename", "conf": 0.9, "crit": 3, "desc": "Rename or move file on Windows", "uses": [ 29 ], "spans": [ [ 278800, 11 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-wait", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Condition variable wait", "uses": [ 41 ], "spans": [ [ 279016, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-ops", "atk": "T1129", "conf": 0.7, "crit": 2, "desc": "SRW lock operations", "uses": [ 42, 43 ], "spans": [ [ 279064, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 64 ], "spans": [ [ 350490, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-ops", "atk": "T1129", "conf": 0.7, "crit": 2, "desc": "Condition variable ops", "uses": [ 68 ], "spans": [ [ 279016, 0 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 70 ], "spans": [ [ 350490, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::advanced-sync-primitives", "atk": "T1129", "conf": 0.75, "crit": 2, "desc": "Advanced sync primitives", "uses": [ 69, 71 ], "spans": [ [ 279064, 0 ] ] }, { "id": "objectives/evasion/process/injection/cluster::memory-injection-recognized-marker", "conf": 0.9, "crit": 3, "desc": "Recognized memory-injection API context", "uses": [ 70 ], "spans": [ [ 346368, 31 ], [ 350490, 28 ], [ 350668, 29 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 70 ], "spans": [ [ 346368, 31 ], [ 350490, 28 ], [ 350668, 29 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 72 ], "spans": [ [ 350490, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 76 ], "spans": [ [ 346368, 31 ], [ 350490, 28 ], [ 350668, 29 ] ] }, { "id": "micro-behaviors/fs/temp/directory::temp-file-staging-primitives", "conf": 0.8, "crit": 3, "desc": "Temp directory staging primitives", "uses": [ 29, 56 ], "spans": [ [ 278800, 11 ], [ 292144, 13 ], [ 329230, 12 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000[bJB*4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000C3kEPgco@*gco@*gco@*j45zshAMw\u003eYrD^/fGT-!YrDZ^f/%\u0026/YrDQ:h9ln\u003cYrz", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000nq^GVWG5\u003cT4u26a08epN.aoK{PLT/ioK!GZnDD}7IWA1kli{bukP0gM6[oV}08el(n=N!]+/[qP+/[qPr-.?A({%W7!\u003c$S\u003ebTs[WC)D%03p{7w2Uo\u003es7!xS3+YK3*lavj30093lkW\u003c\u0026@nqRBlfO\u0026axil1uiirhQf1?K:m07.@mbP]Tq6@VlT07-8\u003ebRRJ]2lj-7nqV\u003edItuw*\u003cPkAMJrM3R0SU=Fl)J)CJtmg\u003c1oqbPoE8\u003e?Xc8^i07.$p\u003e^fvL01VIibSDsyl)K^H.Uhy-+j-WMBoz(\u003c(Qaj3l)KFWkOwP\u00268C2+(nq/.snq/.Inr1uf.2%:7Xb(Tg0p7E)IWh\u003eikNo]skP04K6}@zC0719}000306]ci203?OoGtZq/uC\u003e1h+/[qP+/[qP+/[qPr.d(fp!lC]I:v#O00002BW@zh000dADQ%53nr3N]jM%@u0SY+B0000\u0026dzXKQ\u00267eHojv\u003er5bQ=iul)J)vXb=Nf07.$pVh)xG:(}P\u003e0SXrMGtZO).:]W(X!a]x07-7M[wkqdnR$L1a4c8enR$/J+7FW:nX%S]54ieNlwOOzi.trc%44!r4[}\u00264CI.THnq^!=5Dz!hnr0/CUMK}$IofuZ4\u003ccD800000nR$/J+7FW:nX%S]54ieNlwOOzi.trc%44!r4[}\u00264CIU]z.2u@=1o.nFZ=Ydt0000\u0026dByXyoE82SI9@QioPokIZxsK5XDh:h07.$pVh%erXb(U(nq1\u0026SuC\u003e1hr.d(fav}y%nr4Q2:3ymp", "ln": 976 }, { "b": "@$NB@1oq2CD)xKe4#16:%nLSx-8{kJuo}*Zt%R^.uTpOkwjlR3GUOaL9@(oulb(qr0rIA#%nS9!Iez(UIdMDMJsyG91ovT\u003ekM?5$3UB064\u003ccD800000nqQp\u003e5lh1$k(", "ln": 2324 }, { "b": "Iss5*-5I7enDf$BtlB}/nq1\u0026uur#!!0001Xnq1\u0026uur$EgnqQp\u003e5lh+4Gx$0SJCpdrI+SXiI:^ziGlNU4Bpy^0mFGAip.q?FUMs/^nq1\u0026eur$E)+/[qP+/[qP+/[qPrr", "ln": 2876 }, { "b": "zEEN7wjXJ6nXetJwO#6(D2c5b+1oi^wPSibwmY\u003cOg1eWIl)KDWIbU-WoO(B*kUN2tbUgE.oE9C9IbU:54{cKS5KW)Lnxjazz#Y\u003er08ekqbQ=iyoE8q.Jz}eK\u003e/0=b08eqAbW:iW\u0026w:HsoEapxI=p@!nq*d!nk7+Wnq/\u003eYfH#k\u003eoP8p:i7Q)54m{Pwnhm$L.ncWRf#lz%Z-VhH=}1hUnwSdPoFKyP.nc\u003cT.n4f:f#lKr:vQ%L@@r30ncd7e0MW*F.vo3\u003c", "ln": 7206 }, { "b": "oO(OhuTySvI+1WUg1/9QA1CZ307^jXoP8ZMnDD$8.nV{Tf#==2.4ohOZ-Vr9^mBxfnwSpTnDD[ag1F[i.4/H$A1CX$.azFWav}tW7!/=.2U^5aoO\u0026+W2MK\u00268oEP", "ln": 9467 }, { "b": "g6vOFInp{{nR#%p6\u0026D^\u002607-3au\u0026Zlc@$NWL1op#Bkl8jFRt72\u0026(a3G/%av]-0SSi34$$rn004]X6m{w/wK}Z/c0gcE07-1J.aoM\u0026h#\u0026{UFvFbI0003[I[r6(002MFYu*JT01T+?bME\u0026o4@RUCI)A@}003R44$qq+%g?fZ1}ImO=R\u003c@D4\u003eizpaPIGM5dL)y1on@YI%}??0a(:\u003eGaGga07.?z4${CO002MHhg!:f0a(:+{75Mms2x", "ln": 13301 }, { "b": "5c8Y3I\u003c6k6008jawDz\u003c5I\u0026g%z0093l1p$Xonq\u0026a/0rr9\u003cGe-\u0026wG\u003en*m%lj^U%nLSH4kf{G08evQniWjSX/H?K0o^FO0%4O31][S]I?tyr002MDGj1(-07-7MoCN:hnqP.Wav}F3^31OjoPoI66A!zfJE$Qy006OX0002.dd)Vx\u003e}98t07.%02MT]9nxlwD0SSic0000\u0026JsCB[1ovVo[De^Q3i*FgnqR%80rr9\u003cJF)oG002MD}SLJG0@$(IV?LTy089", "ln": 22064 }, { "b": "002r{H-cl[nqUgDaC6W}nq\u003c(vh#\u0026%FnDe(8J]yxC0pSLV2y*1y/9RGT[jrM-501)w001+N-!wg/0005tG\u003e-NE00bSIo%vfB[\u003c[RJsu3oXnS0la-dv%?Fw1=s0001vwK}-Asu3oX[jrMXE{h8}3ig7}nDe(8J!dPr05sI[G(5^H00g8[y=zy{0z5hAUT\u003cSwnqU2Zh#\u0026}IItlpWF=C!3Y?*V*000K.z2\u003cRpnq\u0026:nh#\u0026%FnDe-4K6R?!0o(GJ001+4-S", "ln": 45744 }, { "b": "0fx:7-5H$duo}*Zt%R^.uTpLWa3Y/%IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026I?LK#008HV@%i-=-!wW$0002sG)kMS002MFJBjZC0o^Y@0072)C@L^70lf.qh#\u0026{Unq1\u0026utvgY5tTqTYuo}}7.!9H)w[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026I?LK#008HV@%i-=-!w+00002sG)CYU002MFJBjZC0o\u0026/S0072)DPh090lf.sh#\u0026{Unq1\u0026utvgY5tTqTYuo}}7.!9H)w[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nq3m*nr6T10002sG)+]X00bSIo%A?HvGMRIG)+]X00bSy-5H$duo}*Zt%R^.uTpMYw[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026Gs%/n0000", "ln": 48777 }, { "b": "-!w?20003\u003cGtY-NuTu36l0V=.l0){nw[CTc4\u003ccD800000nqQp\u003e5lh1$k#{oKk#Z(^q+hMci7P4eFb/MH-!w[40005tG)\u003e#Y00bSIJx!xZ0o+tc0072)E(EAd0MG?xh#\u0026{Vnq1\u0026utvgY5tTqTYuo}}7.!9Hk4\u003ccD800000nqQp\u003e5lh1$k#{oKk#Z(^q+hMci7P4eFb/MH-!w[40005tG)\u003e#Y00bSIJx!xZ0o?110072)E(EAd0MG?xh#\u0026{Vnq1\u0026utvgY5tTqTYuo}}7.!9Hk4\u003ccD800000nqQp\u003e5lh1$k#{oKk#Z(^q+hMci7P2", "ln": 49516 }, { "b": "0rr92nr5R!0002.p!gP!(7XjU07-35{Y7o]nqUeNY8R*g%nSc0E[g:gnyuS(X=qZg00000kU96Bnd0veiMqO.7YTKnla^s2002Cx{c*.onq\u0026G50002e@@r2#[diu35qf-WBQ){vk[(\u003ex.4=[:{\u003e]jOFv#G{0006hGVi#(07:Q2[C\u0026K*%nNNtiFvCl000KYKn]mX(c{aw07-2H2/.N\u003c0rr92nr5R!0002.S7c\u003c*k^{++I\u003ea!/008oA0002e@@r2#[b", "ln": 55264 }, { "b": "4${LM%nO1hyYKIoGzkUY1][S64)[vE0rr914\u003ca4p]n[*C!9u$GH0\u003e8nI?L%F004VD2zpw6Ig]:D006k7\u003e]oQ3%455r2R(w0G}wwC00bSGJFEMm07.@ubP$8{bQ-W:Inq-t*dWAU7Y:QpoPa)X0002.g/jnNIg{DX004\u003evLMp::k.PdFGU^-\u002607-3QHYEFQFw8P@0000\u0026I\u003ea!/000K-Xc-ioo[?TsGN%m90e4$n0rr934#2cc002MFmhQM12MUD\u00260TX]cnq^EsIWh\u003eg+1hMHnqN(*GE46c07-2Ac}]K:5kn0:7/3500.HkA7FK}DoO}Q%.r8t6I+\u003eJ\u003cf#uQs*d:rJoO(\u003c*nION=I9IRzg4F1{p-@rB.yXrnp:!]K\u003e]-Mk}d96N}anA!aCoY+A.Yk^gY*j:-URqH-.qlznb", "ln": 55616 }, { "b": "0006hG%*%Y07qTJFb]SInq\u003c370rr9\u003cXb(a0%nSc0E[hPq4$*kM002MHLk(c]05qQV\u003e*xIjnR$kOF-3K$%nLVEFCoSP07?:S01Ybgnq\u0026DI0rr9\u003cI?JLW002MFkP04G}B(-mav}t{c}PoG@$T*L0@$(ImjpY-G?}^I08eqtawvSCsoey4-!v!30000!54n(@0rrb=dmx9cLMp::la^m00072)P8!](07-8zfZa/)008om0rr9[I?Lml002AyWvNy007-9eKn]mXnq\u0026:?0rr9", "ln": 57680 }, { "b": "2?cG/0001SM6qpH01RJ?l\u003eu:3l\u003eq-.FCxp?6gvU:N/JG?nr5Q\u003c0002.=Qv*lFB-^LW.\u003eH)bT?+m004\u003e-LMp::nq\u003c3T0rr9\u003cI)Xuw002ABWuHW(0o(6c%nLSFJHfXC07.}KnqQaF(0jk/%hG++0rr92nq*gV\u003e*0oj07.*Vnq\u003c3T0rr9gH2hI5%hG++0r", "ln": 58273 }, { "b": "nr16A)/JNNLW\u003c\u003c@4?3xC{w)*w[-UZq0@$(I21TOt\u003eTZK]nr3vc\u003eU\u0026Sb07-2p\u003eTZAyBqadm@%i-R-ZPR4nr3vc\u003e.yt:07-2xUT\u003cVMnq*sJnq*4JnqUR..r7\u003e\u003e0Of!#rK+ORmAw2RB\u003cJWk:-J26GtFf\u003cI-)!N0@$(I9G$BA0p8yL4\u003ccD800000oPa5Ko]Bh\u0026%jo!#.7\u003cwjIsyL]nq*GDnr2$9nq1+\u003cnq1X?nicfYhB@-#[jnyoS7q?k{^*lg/HQ]=7!xGT\u0026qTKWA038hI:=n?GlNU4BIZO3CN$EdR+A1\u003e\u0026oNvkIsKh]rLVQy{5ETyo$oyIblE}cnp!Zf00016uTu38ubHn^w[CTc4\u003ccD800000nqQp\u003e5lh1%r--i\u003cGx%ZKJJdHe002MFmD^o@Z\u0026QmVnDe%r4Ap\u003ch07-8z\u003e\u0026^Es", "ln": 62784 }, { "b": "nq*ji(LBeBw[AUaaa%Q]0000\u0026I+SWKHGjDR07q-bf#eIAjou4D7xKNpm2uuklav3$002MD/*}95:u+WU@$N$r0%0#G0D!Vpg5{LL4\u003c7/K74Mey06NW)002p}L/CI]nq*jiVh%C9UN}z1?t)PRk[yy(bPhoJ4$$I@002p}WNqxWGUOaKXb(Tgl4Btdu\u0026QZ\u003e/8U\u003cKnxjf.00000nr3vc@$QJf0%14\u003c4$@Ts002MFp3xO=@@IsW7xTUeIn}]s!j+=", "ln": 63693 }, { "b": "I+Cxgl5ObR5qf-V50B/d0ymlXZ^emMB\u003ct?qbQtW=1onA4oO@pkItxJG%nSc0li2F3I:O*4(-J^p6g!3G2Uo\u003eD5j?ZJswjSup!=UVBpvUg@@vH-oP8nm(JoNgZ!xUS5j#]znRu0\u003eoAApbGtFf[IdOebIgc1bI55TsmHhXAmI[WMp9vLCkMTGe-3!?}uTu36", "ln": 75201 }, { "b": "Itx=31Q]bG07+I}nqj?\u0026GP=lj%450$nqUI-Io1*{0S@A]ItfR#/*{$\u003cl5AMDFB@{NWNazQZZ(9x}#uW\u0026IflQ4H\u00267j7JrLUe0@$(Gl)J)CJst#Y0@#2O4gBV/08ewvZ}82@008j?@@Jh+}#uY%oO@pgGt-1suTu36l0V=.l0)[*%0s\u0026+0@$(G=Q-].nb", "ln": 85011 }, { "b": "4{WcB4{v0AndNn/nqUeN.tcrc4\u003ebo+4{PoD2)gg#ndNn#nfMbD3bOBjw!d$Uw!cJnndO88w!cH6nc]v#nxnND%nS9\u00264[sShI:=n?Iae)75jKUJ5K)PFshksUmLExNmNc}N002MDEN)d?zCT@=mQMh@oO\u0026%EIcZDYIfoDImQ=x?Ib4d-d0t2IFY9uA003kguo}*Zt%R^.uTpMuJsCOb0@#2O1S]2)0j\u003cYY008lY\u003c]LJNJsxht0@#2O1/AQF0j\u003e@a008lA\u003c]LJN", "ln": 90392 }, { "b": "002NgH4\u003eSF0096107-34ZYsAnnqS320rrbtG*kUs000Jvmx/svmzGAC21TOu5j?Ub7!zY37Y:Qp0rr91-!AjH0005tH1(Xe002MHJzGSQ07.$2\u003eVzN10lf-G0rr91-!AgG0000\u0026JG9Yk002MD*upRk002PE.gk5#FjLO{2\u003e(ap4#72\u003c002PE=}e(h0.wf{[j:B#k)Q2tY@g@i07-3c=\u0026BaD4$#bl002-IKn5XP0pSNjk)NJ.I?O}E008l-0SSi\u003eI:eaIX=qZf%nSc0E[g:7nibsz4[IRrXb=NfnqV6:b$!jrnq\u0026hq0rr9\u003cX=qW", "ln": 101483 }, { "b": "ONhA#nqUeq^N/q+nq1\u0026etvgY5tTqWZuR7hyD0ZQMKvU2xc%H4+l0MYZl0}KN+T2ogs5RUx()N+}nV@i@wK}Z[c0gcE07-1Z.BPVr2MK\u00268FvVo(0003gH138507-1Fnq!3JIo[\u0026]Z!xN+4$@{x002YJkQYr:ndXsIA2qxg6BmpD.wt]E+1dx-nwTE3oP90}o!\u003c*.g4m\u003c\u003e?BJGx7!(:3oO(pKnIQ9oIc7((.n4S@I9JEX.rJdmyX!", "ln": 132799 }, { "b": "-!z280003gWUmlM004*ybQ=iwG!JJc07.@mbP]T#l)KC^0000\u0026I=C0}I?Nk)002YJJER0e0o!fZ%nN[)-!z590002sG$vr+00bSGJFEMm0o?ce%nQ8)Yz}{i0lf-800000nq\u0026E70rr9\u003cI\u003cpHD008k+\u003ekLxDW/.rr4#0vz%nQ8)Yz}{i0lf-800000nr17blimcXJrLte0SY!C0002.tNgxh\u003e{cDk07wTx(a^o007-2x7!xM=c}Gf@nqP}A(hpzT%46W1%nSc0%nNNtI\u0026xW%002Lmk]roQ\u0026bZJ\u003cG$WJ!00b=I\u0026][mC%nRy9nvXW", "ln": 147400 }, { "b": "zE)Eay!cp%nvS.LBA}tawPQD$.BPJEUMj.7o--%t.nuZRg1e.g.xqyaI)@=/07@jN8aYQp?#J/TnX@pRnSu18nqR#K0rrb:SSi20w@]LdI\u0026W@t08el^]fA[93\u003cV", "ln": 160638 }, { "b": ":4j4!av%t*6?*vmnX1*30000000(mM:W!eRnDD\u003e5.n3HJ0NBB]{^\u0026lq5j!LKnX@B\u0026ncc+50NBrMZ.69({^\u0026lq6?DfYawsJ=o!\u003c%+F+PfA002N\u003e:4clSnwS7JoFD", "ln": 161057 }, { "b": "IsTA0WFgHq07\u00264wg0fCgP-\u003eC%m2y.kIsQVYJrGs.In$s=BQ[A^.36\u0026tG$[jM.t\u003cMol5CwhiMzU:B]RHw@$RBn0rv=EDjLZ+4GDG60SPXf%nS9\u003ciMB/7l?\u003cxj{^{5i0rJl34$!J{%nRsX%nS9\u0026:3.f}0SSi2laE3%002MHJQNRZ07.$q\u003eMHqN08erM[dU\u003c5nq\u0026h%6Awb7Ig$Zu008mz%nS9)iL#wV(Kr*]nr5RA4/=P6IsP\u003ciK]tqJI\u003edS]002K", "ln": 221227 }, { "b": "0SU=B%8/XWIWY?^0SU=J6:npL0ri/e@@r3\u0026G$[jLhv6o.nqUwTI3j5V0S-ln/z+*JnqUeNIsK8([jnAh@$S=U0rv=E0s%\u003e@0rr9\u003cIsHPXeb]OHG$[jP\u0026%kR+InhXy-.qwm-1dGJ0rrb:F=L\u0026Kw[CT!w[AUaaa%Q]0000f5cTH@0rrSVmBhLR1RbhD01QIEZ@w?30ri=Z0097NZ\u0026Tw59@(ov4\u003ccr40000\u0026GzuS2HRTk@0eXNy\u0026TXCplng/!n\u0026In", "ln": 222621 }, { "b": "0001MZ\u0026S?rG}5[U0lmKz00000nr36NnqP.WfI4gS[dU\u003c5nqP.Wc}]FdbP]Jg)m-xjoO}:$f#cIu\u0026yF*T@$MHI004VD0s%[f@R#[QY{]\u0026r0rp8cI((E.008n{@R#)^g3}vf))e#jAV:LO@R#[fw[CT!e!o4S00000073U7k@[(OGQ\u00262v%3sf!4/=P6IsAsG\u003e\u003e-v20lmIt=\u003c6KJ:3)^C0000\u0026:a:0%00000002MHmzIDJl)J)GIto\u00264\u0026ZFZ/oPt536Awb7IsyJWItvhLGzkE\u0026Q(dUIm2K+Jn=M[7iL!x1l=Y=!WCR=101QJ^=\u003eMJX4\u003ej{46-XjAdyDw{000JUWv!lm01QJ^Kqd-}4\u003ej]p6-XjAdyBaf000JUWo%ZH01QJ^p.-%g4\u003ej[K6-XjAdyy\u0026A000JUWicg:01QJ^5etfB4\u003ej)^6-XjAdyFTV00", "ln": 224079 }, { "b": "002-I]!BO*6#l{K07-3c2M$bcoO}:$IrK%O]@Fb[InL4.BQ[A^/@UkOG$[jM-Sb#sl5Bk*iMhI.zu6Uo@$SqJ004VDDjLYD0SSi{0QWz%%nS9\u003ciMjV5l*dm3\u003eT*v20rJl34$WNR%nRs!%nS9\u0026:3.f}0SSi2laE3%002MHJPZDA08emu\u003eP2(*07-3Q\u003eMp!+nq\u0026h\u003e0@@r(Ig(=H008mr%nS9[iMzUZODeY\u003cnr5Rk0@@r{Iq).qiSn$GI)Y+\u003e002K", "ln": 243731 }, { "b": "FDbWvI\u0026EGl004(foO{B*1onA@ItfH]:]r8bFDbWoIn$s=BQ[A^%a7dIG$[jM:n=hum2y[liR9=nwb(Pe@$TTD004VDDjLZ90@@r(0O+c:%nS9\u0026iM1w#l!B}^?BJj%0rJl34$^)Z%nRsF%nS9\u0026:3.f}0SSi2laE3%002MHJO\u003c)s08emenR#%2kwye#oPcsp0@@r(I?Qu%002MDH0P]40o\u003e^e%nLUJ]:=UE0SSi]I)SJ/002QhmI2L1002rq@@Nu", "ln": 254957 }, { "b": "\u003c4a)tBLYLG{\u0026CbsjoJuF^[CRa[dbH0nqS[M4/=P2Jsw+S002YL1*W1=0j\u003c\u0026:008jNpYHFa3RVJ?[819Blau[2001:}nqWibktImVXD8Wg07.$y\u003e+7cu0l*J}IbU-iry6XLrZx.Kr9070nq3m*nr6T10000\u0026Gt2Rx0001v8+t){/BE@Z@$P%0002MD.7\u003cwfIsyJWxkERGKvU2xi9P-@l0MYYl0=\u0026:ubHn^w[AUaaa%Q]0000\u0026IbU-iry6XLrZx.Kr9070nb", "ln": 260177 }, { "b": "Y5%=Ga4R4x[5CRaFDk-L0000\u0026I3jfp0rydz(vw%o1][S654Z{y4$=zl001*%4/$3F.qVOd3^.C3r3TddY5$4zGy5Ts07-2obRQFFjo=sI?t^JQIV{to0rv+[2/^avFDk-M0001Q1!yhB073s{aARgE:rnIbHjGv91POJ5I3nM-0rtAp\u0026q-\u0026W=}65#IH+^d", "ln": 275262 }, { "b": "000000000000000000000000000000000000000000000000000000000000Z{BmB00000evtSY000006TX8A00000@\u003ch?e00000/0COX00000\u0026iST/00000(A*Y{00000]T1=4000000000000000tcFeg00000m6D*{00000zM\u003coA0000000000000", "ln": 286160 }, { "b": "0rr9100000\u0026qiI80rr915C#JU0rr917YTKo000002MK\u0026800000q2yrz0rr91.2ag.0rr91^er@{0rr91flhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#vqG:#v{B7}v{AR.Bs}PP0000000000npyX(0rr91nb@R\u002600000Iui+T4GDFev{%s+v}*4gaA8BmA+ocaCq0#VB97[Bg*@jLw\u00268I7wIW:Hg=NE8hF1W1f/p)zgby)zi5C82i5@/Pw\u0026sgefkLuiA::0ltW.C+z!03[A:@u{vrV74wN!$Zz!7FvA@Vgu00000.f#Jq0rr91pYHE}000008#]%s1POJ5q94@mA=(CBB-pPcz/oD4xKLQ)B6J^dvpB4:eQflkuP6.)AapFzx(mE1CxkuMB9q4#y?WuiA=(CBy?WuiB8\u003e+zA=(CBtX[a-A::0ltYU0$tYT{}tXOaYzeS@qAS", "ln": 289800 }, { "b": "B8\u003e+zA=(CBtX[a-A::0ltYU0$tYT{}tYUgitY:U1wNPaRy\u0026r/(y*p\u003c^Bzk]ftX)?{C}KbU0000000000UZV!a0rr91CMmZz00000vGlxdbME/Aq94@mA=(CBB-pPcz/oD4xKLQ)B6J^dvpB4:eQflkuP6.)AapFzx(mE1CxkuMB9q4#y?WuiA=(CBy?WuiB8\u003e+zA=(CBtX[a-A::0ltYU0$tYT{}tY:U1wNPaOy\u0026r/(y+x:H0000000000npQ?[0rr91xAe2j00000?ViYS82%TpZ\u0026YWd0rr91fAq7M000002MK\u0026800000kZADY0rr91qDlT{uRK9!uSf]\u0026lRvyVPDa2.0rr912MK\u0026800000", "ln": 290288 }, { "b": "2MK\u0026800000PB.cO0rr91000000000000000000000rr9100000A1A520rr9100000000007YTKo000002MK\u0026800000p.9RT0rr91Kpheu0rr915c8Xg000002MK\u0026800000PB.cO0rr91P.FLr0rr915c8Xg000002MK\u0026800000PB.cO0rr9100000000002MK\u00268000002MK\u002680000001/lZ0rr9100000000002MK\u00268000002MK\u0026800000PD0#.0rr9100000000002MK\u00268000002MK\u0026800000Z-AJb0rr9100000000002MK\u00268000002MK\u002680000003qk(0rr91oL5o^mr9DUy!5ISvru73oMaARwN[exA:%ldvraXSw[CQ{mS\u0026J-pgX0EqE%]\u003evrcD!i:spEvrc10tYKy*x(!xpD0CAhv{A.=wmZ0rv@=11wPGFrz.iX7g=Y5TiaB\u003cQhdwB2h!Dr7w?waBwO0CEe\u0026tmrtYT{}tY+0$wIe1A08U^Ze[nsgxk.3}wOkZ#BAhUiB8\u003e+}x(mD)CRiGDvru74e[]kQf/.6Jv}EYghEXKMh8Ns8tW?p%BAg@7eIF!me\u0026l*OA:@u#vqGg=z!7FvA@Vgu00000G[xIU0rr91q#=)#00000h#\u0026{Uso5s3o\u003e!GVmS\u0026J-lsB}Dpiyw?rC(\u003e^w[stvy?#%ftRoI{A+xq}A+e($B98CFtYT{}tXO7^wQ2?qA::63B1RfBeIPmxiB=UXv(v^NvL{24w)w!SeP=2AwI2O*h7*Z\u003cB8\u003e+}w]?i#ByX:4w]/OBA@Vgu000005}*yr0rr91r@-j200000a]?PybME/A5}*yr0rr91r@-j200000d/YLH4GDFe5}*yr0rr91r@-j200000ec2UIcia2C5}*yr0rr91r@-j200000k(Z(+f-RgN5}*yr0rr91r@-j", "ln": 290800 }, { "b": "wmZ0rv@=11wPGFrz.iX7g=Y5TiaB\u003cQhdwB2h!Dr7w?waBwO0CEe\u0026tmrtYT{}tY1g)x\u003cU*/xjUB*A4VfL000000002eG-(]b0001400000000100000\u003c0000%wNPatBZYr3C4CYnx(v)bz!9AQz!TohzBFO^z/OYotRoI{A+xq}A+e($B98CFtYT{}tXO7^wQ2?qA::63B1RfBeIPmxiB=UXv(v^NvL{24w)w!SeP=2AwI2O*h7*Z\u003cB8\u003e+}A:-\u0026#wNxH*vqWYrA@Z5}C4C35z^Nx[CYU6DzxIX%y?$kkvp%dEH6i2c00012000000000E0000z0001pwQ5r7yH}=lx(+y(z/fbex(k56vpJ$ZuVf*#C{3%xwmU-v0000{H6i2c00", "ln": 291793 }, { "b": "7xsQv1{+Fo2oB2j0@$m.g6^)\u003c0tU?t4/=?n5DSgr0S-En0IxU$0x*L=1PwF]0rJob0TeP82w\u003cXCv1v.DflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tXm?{tY1y\u0026e](1k000000fs@0Fb]SI080p(000000dCpQ044WC0fs@0Fb]SI080p(000000ey{Z02+?q05c8Xf!+vpgCyTth83{xh.WiBiwAixf!\u003eBrgCHZvh8d0zh.^oDiwJozf!$HtgCQ^xh8m6Bh.)uFiwSuBf/7NvgCZ\u003czh8vb", "ln": 307023 }, { "b": "pxgv{00000L)di*6-Xjl]Z\u0026op0rr91pxgv{00000A%hKzc\u0026:kE]Z\u0026op0rr91pxgv{00000A%hKz5=.[iflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tZ7p4i4/k)0000000000nw\u003eTY0rr91nb@R\u002600000blm=Aa]?PycsZ$kD0+f7z/5\u003c5y?Wx\u003ciV@GZB-H#6aAIvkv}u^0wO#d5xDO.sd\u003e8PKz!i#jzF%RtzddJ@xDQ?%B98blvruj4zxK1px\u003e7Y%y?mG%Bz8^BZYt\u003e:5oqh%xjSh%", "ln": 307720 }, { "b": "B0a[kaIW%\u0026A:-\u0026#wGV5ovrcDjx(mD)CP:^CaA8yAaA7\u003cmA:-\u0026#wGUP6AV/Btx\u003e7Y%z!pbdwO#d5xDU7\u003cflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tYTZ}v}w[ZwO\u003e{\u003cAXqxN0000000000PV44:0rr91pYHE}00000PA1@(2(\u003c@9PV44:0rr91pYHE}00000GA7#L9SMfuv{%g\u0026wN(]\u003epJgz\u0026z/dP%B-8zzvq)Rzu)6x9ayMy2ph+2Yu)6S3y\u0026%s80Y?Et0000000ri3G9ip%KP/a)t[-\u003eh5/hVj", "ln": 308064 }, { "b": "?4R%N3i\u0026D}mHfzbBpfb(s{d$mFp!WU3kJ}w1B#vlTe3du1tMOMF.zBQ3\u003cu/^VMH.4oAY)91C1h*8V{PWflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tY\u003c{#v@C)?tYsZ$zGGq@y?kktA@Vgu00000L/%nX0rr91rr910000003ig5ad/YLHL/%nX0rr91rr910000008uo:qhuiZSvruQ5ze:OtBz\u0026pjx)ai3wGUDcaBmQtzVx+q0000000000000002MK\u00268000002MK\u0026800000[BlNg0rr9100000000002MK\u00268000002MK\u0026800000[BlNg0rr91flhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#v@Dy0tYT{}tYsa?x\u003e7{)zF7OxA@VguFxXjE0rr91o-Ld[00000\u0026q-\u0026T1POJ5azC.7wQ2toB-X:Aw/$M3B-7-hiV@JTwGU/2zxJUmaIXQjvS==nBzbkdx(mD)CPZZwaIW$ujS#%1vrlH3A==2lzxJt6wOc3bZ.Xblx\u003eIa3u)65\u0026x(4u\u003e3lQEcwOc3Bao", "ln": 309844 }, { "b": "wmY.3tXEL!xKV12CwX#^e?]mpf\u003cF^uv{B4.Cu/06wg?[z0000063*Yh0rr91dGxCG00000b(^]Bc\u0026:kEflhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wv0vrcS#Aa9S#v{:v@Cwg@9tYT{}tYTE\u0026e](1ksKdb20rr91pxgv{00000FDk-Ja]?PyfFvD?B966CwPhY}A=(CBv\u003ezk5zddr{y?kgLe?[$lhE7rzv{Bghe](1k00000.oSmm0rr91dGxCG000009SVlvf-RgN.oSmm0rr91dGxCG00000gYWNRm/SI?.oSmm0rr9", "ln": 310552 }, { "b": "82%Tp4fcwd/XlKV0rr91nDn.\u003c00000soX:9aohxww)]y\u0026wN({9zY\u003cmAx()]eBzbkdvS=o{wPzu)ay[]5ve{oc00000[zKI20rr91aPIGx000007xsBn00000flhhRByM%XvkILcg=Wv6gHS0{i5\u003ezawIV7@h8^iAgDm6Fg?5m2iw-ZchE{nIy?Wt", "ln": 315344 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000%nSc0000007YTKo0000000000UOdg\u003c0rr910000000000A=(CBuVoB\u003ex\u003e4by000000rr91000000000000000000000000000000000000000000000000000000000", "ln": 370128 }, { "b": "000000000000000000000000000000000000000000000000000000000000kO9[}g7:G^CP3.=kOi$@p7^KbGC\u003e0]p.A:dFd.?ZJ2z\u003c1Fd.?Z?4xX/J2z\u003c1\u00261u1\u0026c\u003e=NXJ2z\u003c1fCsA^G+BB^J2z\u003c1Kp}P]wFCgBLO%Y9A1@uMRXGgiV(f8FUOvcr@Uk", "ln": 370640 }, { "b": "0000000000000000000000000000000000000000000000000000000000000b@5vM\u0026E9^PRwxVU+FU4Z[PhI0hBk9AhOI\u0026KF/4PU=2Nu\u003e+!Y+aGebnsG2SaxSb)GC=ld\u003eN5DWRShM@0XtWiw:F!3}{]1+6d5/+pv5XyIKG3s2\u0026hE\u003c0H]OK@2=/8Gii9", "ln": 381904 }, { "b": "4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 383680 }, { "b": "6?@yLA=l2qw]]d.z/P/nA::67z/do+fFAXkrrJyqdnsI^A=l2qw]]d[z/o.ulUgpWx\u003ez6?vru66l3mo.z/PMlC{1\u003c@f!\u003ev67y-bRfGp:Cgb7Nxf/StM4kP)@gCQZvgbgNsg*hOmf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK", "ln": 385280 }, { "b": "viwu+wPzj3x(v)gf^!U31{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wkhzu{sfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^yfOfJLfOfDlPAtk@0S\u003c2\u003e0006DFx6Q*=8L$V009610WPJf1{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n1p2OBqE%xQz/f8u9XXMr162Eh6bskQv@=Hez!s8llVm0:z/Podx(v(zcnlXH162Ea6cf!Yv@=Hez!s8lrb3hXeMl+1zeZQ]lQq?IfFLmn9V2nvhzu)viwAJJfFCj+7y-bUfF$Nzf/.6AfFM-+FY/+QfBm{=rrJHt0--eN6eg15162Ef6ad/HB7/o9xln6ff+u2G1{m\u003cd2nmtuwN]T@zE+EyfDpo0rrJTx6?@yLA=l2qw]]d.z/P/nA::67z/doQfE3=7rrJWy98gcSA=l2qw]]dYzdN:4v{{GQAaK5#BzkVhB1]3@b)BDK1pC\u003e:zC$j.wO+)1r8VZrmn(@xi5SDDeIG4JfFbWMg=EcnfE3=7rrJyq98gcSA=l2qw]]d{x(dAkq/(C+A3e7\u003cA=#ebwIwYqa$%Dg2}yW2Hw8bT0rAu71a*N+05f0a3iC!X0rx1!5!AyHZ#Im@2(li*yoeQTDA6My\u003cCKmDwFANpL=yud8Y1#\u003cKcms!lCTdnM6auu/j!K*QgyYf(2[hC6uekYnscVm4zApUoc+=b84G4yhWWQ#J1\u003cC5]+.wnU^c0fsbjc()Zv*FCZdV!Zz9pxKW!1KdOM)t3E!mdle5)\u003ca\u003c3la+Lf58fOb6QVQ40iKT%LwtKnX3@=-E3AoWdt=rj}S[-*=?0:WI@6*H0SPKf16L:7=uN+DeC(*!\u003erij5mv7v-OIc\u003e#v-ccOwv0\u003cDw4OC2*V}@/:U5m#qNixR*stjn^H6kb5@TzjYR3S8Z\u003ecV4YG\u0026g\u0026}oe0/oPl{Lq6eAv9Q2Q15g}gbcI[6vas[\u003c953\u0026H1Un:bl8UBKJBcun9-V1F@d+BANGSszElx.r\u0026*RJe4bnVYMgawyF(oMJkY]bhPr%9uOd}]EcPjJvb5amLpd0Z.1SXrM\u003c\u003e$.+kp", "ln": 387801 } ], "depth": 1, "facts": { "exp": [ [ "bftree_are_all_threads_in_next_version" ], [ "bftree_cpr_snapshot" ], [ "bftree_create" ], [ "bftree_delete" ], [ "bftree_drop" ], [ "bftree_insert" ], [ "bftree_new_from_cpr_snapshot" ], [ "bftree_noop" ], [ "bftree_read" ], [ "bftree_scan_drop" ], [ "bftree_scan_next" ], [ "bftree_scan_with_count" ], [ "bftree_scan_with_end_key" ] ], "imp": [ [ "bcryptprimitives", "ProcessPrng" ], [ "api-ms-win-core-synch-l1-2-0", "WakeByAddressAll" ], [ "api-ms-win-core-synch-l1-2-0", "WakeByAddressSingle" ], [ "api-ms-win-core-synch-l1-2-0", "WaitOnAddress" ], [ "kernel32", "CreateMutexA" ], [ "kernel32", "ReleaseMutex" ], [ "kernel32", "RtlVirtualUnwind" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "GetStdHandle" ], [ "kernel32", "GetConsoleMode" ], [ "kernel32", "GetConsoleOutputCP" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "WriteConsoleW" ], [ "kernel32", "lstrlenW" ], [ "kernel32", "GetEnvironmentVariableW" ], [ "kernel32", "CreateDirectoryW" ], [ "kernel32", "GetFullPathNameW" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "FindClose" ], [ "kernel32", "CreateFileW" ], [ "kernel32", "SetFileTime" ], [ "kernel32", "GetFileInformationByHandle" ], [ "kernel32", "GetFileInformationByHandleEx" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "FormatMessageW" ], [ "kernel32", "GetModuleHandleA" ], [ "kernel32", "GetCurrentThread" ], [ "kernel32", "SetThreadStackGuarantee" ], [ "kernel32", "DisableThreadLibraryCalls" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "GetCurrentProcess" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "LoadLibraryA" ], [ "kernel32", "WaitForSingleObjectEx" ], [ "kernel32", "RtlLookupFunctionEntry" ], [ "kernel32", "RtlCaptureContext" ], [ "kernel32", "GetCurrentDirectoryW" ], [ "kernel32", "SetLastError" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "SetFileInformationByHandle" ], [ "kernel32", "FlushFileBuffers" ], [ "kernel32", "QueryPerformanceFrequency" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "SwitchToThread" ], [ "kernel32", "GetLastError" ], [ "kernel32", "CreateThread" ], [ "kernel32", "WaitForSingleObject" ], [ "kernel32", "SetWaitableTimer" ], [ "kernel32", "Sleep" ], [ "kernel32", "CreateWaitableTimerExW" ], [ "kernel32", "HeapReAlloc" ], [ "kernel32", "CloseHandle" ], [ "kernel32", "HeapFree" ], [ "kernel32", "GetProcessHeap" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "HeapAlloc" ], [ "ntdll", "RtlNtStatusToDosError" ], [ "ntdll", "NtWriteFile" ], [ "ntdll", "NtReadFile" ], [ "vcruntime140", "CxxFrameHandler3" ], [ "vcruntime140", "std_type_info_destroy_list" ], [ "vcruntime140", "C_specific_handler" ], [ "vcruntime140", "CxxThrowException" ], [ "vcruntime140", "memmove" ], [ "vcruntime140", "memcpy" ], [ "vcruntime140", "memset" ], [ "vcruntime140", "memcmp" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm_e" ], [ "api-ms-win-crt-runtime-l1-1-0", "seh_filter_dll" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_narrow_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "execute_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "cexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "configure_narrow_argv" ], [ "api-ms-win-crt-heap-l1-1-0", "free" ] ], "sec": [ [ ".text", 1024, 285184, 6.3, "r-x" ], [ ".rdata", 286208, 83968, 5.46, "r--" ], [ ".data", 370176, 512, 1.61, "rw-" ], [ ".pdata", 370688, 11264, 5.62, "r--" ], [ ".reloc", 381952, 1536, 5.01, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 396810, "timestamp": 1788903384, "image_size": 397312, "headers_size": 1024, "checksum_valid": 1, "file_alignment": 512, "cert_table_size": 10040, "export_timestamp": 4294967295, "computed_checksum": 396810, "headers_size_ratio": 0, "tls_callback_count": 1, "prose_section_count": 0, "reloc_overhang_bytes": 224, "reloc_overhang_ratio": 0.15, "bss_like_section_count": 0, "section_overflow_count": 0, "signature_expired_days": -210.57, "misaligned_section_count": 0, "base_relocation_block_count": 12, "base_relocation_entry_count": 602, "declared_data_directory_count": 9, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 393528, "entropy": 6.37 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.3, "data_entropy": 1.61, "overlay_size": 10040, "string_count": 197, "overlay_ratio": 0.03, "overlay_entropy": 7.52, "entropy_variance": 2.72, "avg_string_length": 35.55, "max_string_length": 120, "peak_region_bytes": 9528, "code_to_data_ratio": 1, "peak_region_entropy": 7.51, "string_length_stddev": 35.02, "largest_section_ratio": 0.72, "sentence_string_count": 15, "sentence_string_ratio": 0.08, "high_entropy_string_count": 0 }, "exports": { "count": 13 }, "imports": { "count": 77 }, "sections": { "count": 5, "code_size": 285184, "entropy_max": 6.3, "entropy_mean": 4.8, "name_entropy": 3.11, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "dependencies": { "count": 7 } } }, "id": 9, "ident": { "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:28 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "build_path": { "value": "bftree_garnet.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "K(Lu)O₃(AsEr₂Pr)H₃(Db₂Os₄Po₃)Md₂(Bi₆Si₄)", "path": "win-arm64-based-readytorun.zip!!net8.0/bftree_garnet.dll", "pid": 0, "risk": 23, "sha": "b906e6430b4a2f1ab19df937df016632ac221faeb861ce1026714461d0008456", "size": 393528, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 285184 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/binary/symbols/export-name-pattern::many-lowercase-snakecase-exports", "conf": 0.88, "crit": 3, "desc": "Many lowercase snake-case export names", "spans": [ [ 45808, 13 ], [ 55328, 13 ], [ 55680, 11 ], [ 55808, 13 ], [ 57744, 11 ], [ 57760, 11 ], [ 62848, 16 ], [ 62976, 16 ] ] }, { "id": "metadata/binary/symbols/fake-windows::sideload-export-cluster-size-10-25", "conf": 0.9, "crit": 3, "desc": "DLL exports ten to twenty-five APIs" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/compiler/systems::rust-src-path", "conf": 0.85, "crit": 2, "desc": "Rust source file path (.rs)", "spans": [ [ 318946, 0 ] ] }, { "id": "metadata/lang/compiler/systems::rustc-path", "conf": 0.95, "crit": 2, "desc": "Rust compiler path in binary", "spans": [ [ 289864, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 315392, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "micro-behaviors/data/control-flow/dispatch::dense-x64-tls-array-access", "conf": 0.97, "crit": 3, "desc": "Dense x64 TLS-array pointer access", "spans": [ [ 13365, 2 ], [ 132863, 2 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 383744, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 387865, 0 ] ] }, { "id": "micro-behaviors/data/string/assembly::stack-immediate-byte-string-x64", "conf": 0.86, "crit": 3, "desc": "Native stack immediate byte-string fragment", "spans": [ [ 48841, 59 ], [ 48953, 59 ], [ 49580, 59 ], [ 101547, 59 ], [ 147464, 59 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 291136, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "spans": [ [ 291152, 0 ] ] }, { "id": "micro-behaviors/mem/c-runtime/functions::vectorized-zero-fill", "conf": 0.6, "crit": 3, "desc": "Vectorized zero-fill instruction sequence", "spans": [ [ 7270, 14 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 291080, 0 ] ] }, { "id": "micro-behaviors/os/api-resolution/manual::load-library-ex-system32", "conf": 0.85, "crit": 3, "desc": "LoadLibraryExW w/ SYSTEM32 search", "spans": [ [ 260241, 17 ] ] }, { "id": "micro-behaviors/os/env/read::get-environment-variable", "conf": 0.85, "crit": 3, "desc": "Read a process env var (GetEnvironmentVariable)", "spans": [ [ 291112, 23 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 291352, 0 ] ] }, { "id": "micro-behaviors/os/exception/handler::capture-context", "atk": "T1005", "conf": 0.9, "crit": 2, "desc": "Capture CPU context/registers", "spans": [ [ 291280, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ansi", "conf": 0.7, "crit": 3, "desc": "Get module handle ANSI", "spans": [ [ 291200, 16 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 291184, 16 ] ] }, { "id": "micro-behaviors/process/control/info::process-info-class-30-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 30", "spans": [ [ 22128, 14 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 291304, 0 ] ] }, { "id": "micro-behaviors/process/sync/mutex::create-mutex", "mbc": "C0042", "conf": 0.9, "crit": 3, "desc": "CreateMutex API call", "spans": [ [ 291024, 12 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 291232, 0 ] ] }, { "id": "well-known/dual-use/tunnel/swifttunnel_vpn::swifttunnel-rustc-commit", "conf": 0.95, "crit": 3, "desc": "SwiftTunnel rustc commit path", "spans": [ [ 289864, 72 ], [ 289985, 80 ], [ 307087, 75 ], [ 307784, 72 ], [ 308128, 80 ], [ 309908, 85 ], [ 310144, 77 ], [ 310616, 79 ] ] }, { "id": "metadata/binary/layout/tls::pe-tls-callback-table", "conf": 0.9, "crit": 3, "desc": "PE TLS callback table present" }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99" }, { "id": "micro-behaviors/os/random/crypto::process-prng", "mbc": "C0068", "conf": 0.9, "crit": 1, "desc": "Windows cryptographic PRNG (ProcessPrng)", "spans": [ [ 291008, 0 ] ] }, { "id": "micro-behaviors/os/syscall/invoke::all-ones-handle-constant", "conf": 0.8, "crit": 3, "desc": "All-ones x64 handle constant", "spans": [ [ 90456, 20 ] ] }, { "id": "micro-behaviors/process/create/thread::create-thread", "atk": "T1129", "conf": 0.95, "crit": 3, "desc": "Create thread in current process", "spans": [ [ 291360, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/instruction/junk::indirect-call-compare-branches", "conf": 0.85, "crit": 3, "desc": "Indirect call followed by a compare branch", "spans": [ [ 63757, 11 ], [ 221291, 11 ], [ 222685, 11 ], [ 224143, 11 ], [ 224289, 11 ], [ 243795, 11 ], [ 255021, 11 ] ] }, { "id": "objectives/evasion/indicator-removal/timestamps::export-timestamp-maxval", "atk": "T1070.006", "conf": 0.9, "crit": 3, "desc": "Export dir timestamp set to 0xFFFFFFFF" }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 8 ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 8, 16, 18, 19 ], "spans": [ [ 387865, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 15, 16 ] }, { "id": "micro-behaviors/process/sync/mutex::mutex-api", "mbc": "C0042", "conf": 0.85, "crit": 2, "desc": "Mutex creation/access API", "uses": [ 33 ], "spans": [ [ 291024, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 44 ], "spans": [ [ 387865, 0 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 47 ], "spans": [ [ 387865, 0 ] ] }, { "id": "objectives/evasion/process/injection/cluster::memory-injection-recognized-marker", "conf": 0.9, "crit": 3, "desc": "Recognized memory-injection API context", "uses": [ 47 ], "spans": [ [ 383744, 31 ], [ 387865, 28 ], [ 388043, 29 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 47 ], "spans": [ [ 383744, 31 ], [ 387865, 28 ], [ 388043, 29 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 48 ], "spans": [ [ 387865, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 51 ], "spans": [ [ 383744, 31 ], [ 387865, 28 ], [ 388043, 29 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}E+M/E0000000000?#B@z3JR{Y09/K8015Ya00000=uYG\u003e03zmw0dU", "ln": 0 }, { "b": "3\u0026*nc0h6t)00ic20a(li000000000000000kMy^J00000000000000000000UZcrI00000nb@R\u00260SSx76P\u0026v}W4df%2(\u003c@9000000000000000:sWF[Fb/MH0000000000000000000000000000000000000000iSZY@000uc1arJp017hh0^^om019^n000uQ3kUf07aGT)dOZ6EDQv=k3xbt)02(5Vmf0q{dPMT526ill01a2NDQv=k3xbt)02)yaB4lig3vi3}dHD$w8GOyG01a2\u003cB4lig3vl2bnb@R%0^^om015?83JHeCz+f{e3mZ6Anb@R%0^^om015?83JHeCz+f{e3m#q]dI:GLB4lig3viRim/SI@DkZ\u0026{000vLg6h!\u0026000vEl\u0026Wh]dHD$wliw+yB4ccf3vh=2lJv8[dHD$w3kUfgB4lig3viRim/SI@Dp/OR000ucDQv=k3iLir000uQiS/G^DQv=k3zX4f02)yaB4lig3vk2vecZe+000vL0^^om017g]B4lig3vl2bnb@R%0^^om015*DnDn.$eDMUp7aHkzm/SI@DkZ\u0026{000vL9S{Ee000iMa{d%?b(^]HdJOTtn=O?#dLp=8a5DY2o8[@0dGxCG6efK?fAq7M0rr9i0S@Mvya8:Q015\u003cEo-Le23iyzA0SA/y000@y5^54EfAq7N2Q\u0026BF01ab+000cKquu}Gpxgw40T0=W000dI4/=OjdJOUjcia2IdSLPq4/=OjeDEs60^+BT00B0OpYHF5z=3Gm3mVlf8GO^R01a2L6efT\u003eZ5Ock0SSij4/[7S000uxgAlDb", "ln": 464 }, { "b": "00Augd?-Xtvf3uj3i*MU8ux*vEhSa^1o[{O836ZuEhz$+1o{s%0W}WZ00T[Mlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn(}EDWbyPQ)sww?@3[88Qbu5Y8x(mN800000woE}MA0VHAbumUx!pdC#5c8Xgbs+:9l\u0026Wh!\u003cBmdf=(A8^", "ln": 29412 }, { "b": "Byd^is4(gXmf3$iByd{mq=3?5qCQ4TuSf]\u0026r7PC:p^F5K07QErzE)]Zq+{c*q*ACawO\u003c4\u003epxj1dz/e6lq#/Kiz/eGxq#*MxBydQml}6\u003cI0b2\u003e+uS6r\u003ep*V%^s6[-\u0026n\u003c#9DuQmT#qCQ7/08[e:By/qwlVl^SwN/*@z/fRGm}DNHA+P2onLA\u0026tBuAI^e{7=vB6z]Iq*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!qE%oEpI%#]oLFM\u0026jxaG%Bzbxftu}kcD2[7sz7Xg]y\u00260V)BzkVhB1Q3Tx(!wGBzbxftu}kLvqH6$uTA!2zV", "ln": 51233 }, { "b": "wmZ0HyHpBnvpK7!zF8BMwO+(Sl2HikxjVf(mq=SoB7GD2mq=Sorb#X\u0026mq=SoqE%GPB97#llVl*UvqYPQl2Z^OzE--tB8L}%vqH6$okeoO07QQxr://!wLl-Pwb]5bBxrc\u0026By/JjvpJ\u003cGq/3eTwDkqtB97\u0026dv}tTawoIy0v}tTpvrcB2q!Y=N0chT(B.(d(B8L}\u003ez!9zVyiarhph:VO090#:q!o=Rv@$E:wmU:Yz/o.)z!9zVxjVf(o\u003es", "ln": 52058 }, { "b": "z!a0bwDlvOByd^KzdJYqwPQ:?z/xodBA{R\u0026zdJY+vqPMQq*ACawO\u003c4$B-8qnzdJY+wP{*ZzE\u0026/yz/fa^lVl*UvqYQPD2Nr{r://!wMi}]wDkRtxk8BewPy:}AaG2twPQ)%AaG2\u003eD2Nr{lVl*Xvrb]Vrc8F\u003ez/PMlwIdFhA+bk-wPRoJzGYDex\u003c\u003e[3lV)i!B-I3[o(BM+y?k}wB7CtsB-RUyzbjRQwN/*Gvrk#Wmr9DUy\u0026-P}AaK5Svrl0UAa9R", "ln": 52377 }, { "b": "AbYxawk3YVwPzi}090#:p*[x=wKguSvr\u003eKXBy/G3yYD+qyYD$lA=bDgn(FIXe[w^m09shPBy!i\u0026y?%8JxMw3nnOg.uy?%8ID2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtDx(!wUr6z{EwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!qE%oEpI%#]oLFM\u0026jxaG%xjVf(nPXJX08[e:By/qwlVl^SwN/*@z/fRGnLA\u0026tBs}iqBydQYwO?ACD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtDx(!wUr6z{QwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB4oLFM\u0026e]$PCuRbuJz2^{SBy/p?q*ACawO?Aqvrcl%Bs}SCA=#2me\u003c\u003c=5Bz(0@mq^l+07gBhv@1UN08)xozua-/vqV6pB3:!-y?m3)07R6vvru73ra]YT08c%BB5V*Yzu9TIzdMT+vqV6TwPRoXA+PSqwO$B=vqV6hB5N3^zu9grBw)c!zu", "ln": 54368 }, { "b": "uUaF3A+frkx(v\u003e?q*ACawO\u003c4\u0026y\u0026r=\u003ey?Xi7BzkVh08)DsB-IhrC%L}Zx(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9l}z!%l3v@#B6zu9TRC$hB/mr\u0026J/BwD\u003c$x(v\u003e?ph+kCze:r5zdNQbwN[kOv}xR3x(v\u003e?ph+kMB-qqrA=+(6mr\u0026rNAcb/jzu8$yxlw65zGFV%BwDHDvqYZ?mf", "ln": 54905 }, { "b": "A:-E1wPyj:v}xR3x(v\u003e?l#NiSy?lE^z//MilVl^Vzu9gnA=bDge[n*pzeTp(q*ACawO\u003c50wQ5qHn][]*08)#Wx(mMJz/6D4A+PPkzuaS:BAz8mzu9NCBAIRw07gWwAa9=#rbR+rA+PSbrbR+nD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtuz!%l3v@#B6zAH(Ze\u003c\u003cL@", "ln": 55181 }, { "b": "zF0!!qE%]*lVl*UvqYQ%nP5cU0ch}2nP5cU0b2\u003e+uSh5Tz#:@\u003cByd%*wPdS*z/YSmx)a5^By/y\u003ep\u0026ypMq*ACawO\u003c4[x(m[\u003cpJuClD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtuz!%l3v@#B6zAH(Ze\u003c\u003cC^vr8uDD2[7sz7Xg]y\u00260V)BzkVhB1Q3Tx(!wGlU{sxASx6Sq/)4]zF8mMwj7fAvr8uZzE^s6wPydOz/YFSxKL]Yx(mD)CX7[\u003eAaJ[", "ln": 55428 }, { "b": "lUG[G0bVp:vR6MWltpsCA^pL]vpS}\u00260chTVwmY=YnK^SszddJ.A=lbnwmY=Yq/)4]zF8pUx(4r\u003eASye(BydEOv@C)?ASwZuC41rVA+PGmmq=QNwmY=YA=k(rm}D^eB.kk%ASwW8z!AY]ASx]]xj\u003e^@07pygvrDydnP5SYA=t@kvru6\u003eq/)4]zF8HGzE^M{ASx9Uwb", "ln": 55643 }, { "b": "z!%l3v@#B6zGvB2wO#71x\u003e5+!mq^l+wPzi*y?k.dj$YupBvy7\u0026zdN-@Bz(g1q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!mq^l+wPzi*y?k.cD2[7sz7X!0CYUMgB8L}Gph:VOB1Q7az/er*wmW}Sm}D^hzGP/cA::6dASx3-B97#ge\u003c\u003cL[y?m9#x(v)ge\u003eFGHB.$YgvpB4:e\u003eoF{mq^l+wPzj3z/L?OvrcB2pJf(=vruBd08W(IA^pD1wPzj3z/L?@AaK5#Bz(g1e[o0wASv.4v@#Tf06$7n08[e:By/qwl${7xzF%Prx\u003e8h:qE%]*lVl*UvqYQzz!0?*q*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026twNY^{xk8l@o(BMNA@Yc:B97#ge(VzbBs{gbz/dg5z!9B208)DBwN/*Sz!9B208vVNvR6NUBA}XlA@X%zzdN+*uV6p?wPE\u0026tz/]J9wL)O*By/H[q!o#-vqGU7wMiOFBy)H0D30Rs08l)DqE%@Ux(mG)qG3F}m}D^eB.kk%", "ln": 56211 }, { "b": "0cqZ[uQYiUA+frkx(v)g08[e:By/qwraQq@e(Dm[B.\u003eGbmr\u0026=(wPI{bz/fQ@q*ACawO\u003c4#wN/\u003e6x([RMp?sV:x(!ufz/fQ@o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003e*g@xk8l@e\u003cS@/BAg/1BzkVhA@Yc:B97#ge\u003c\u003cL[y?m9#x(v)g07g)IBz(1(vRPE:BvHy\u003cv@#B6zGt^", "ln": 57137 }, { "b": "B97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwPzG{e\u003eFGHB.$YgvruBdjxaG%lV)A\u0026wO#O\u0026q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!mq^l+wPzj3z/N%sD2[7sz7X!0CYUMgB8L}Gph:VOB1Q7az/er*wmW}SlV)A\u0026wO#O\u0026q*ACawO\u003c4!z!%l3v@#B6zGvB4mq^l+wPzj3z/ND$B-IIlzGC\u003eSD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtwzGP/cA::6dAY^q+e[X:quQF%RA+fcg08[e:By/qwlVl^SwN/*@z/fRGm}DNHA+P2onKWJtzdN-@Bz(gZq*ACawO\u003c50wQ5qHn][]*e(3s}wPGE@B8L}\u003ez!9Aye[X:quQF%RA+fcg08[e:By/qwlVl^SwN/*@z/fRGnKWJtzdN-@Bz(gLxjVf(lV)A\u0026wO#O\u0026ju+JcuT[k0A+fcg06AC3uTEq=A=L-eBo2oXC#d{\u0026B7E^Yv{%s/wj7oCwPhN4zGC\u003eS", "ln": 58044 }, { "b": "wDl@Pz#:CHv/QPJwDllvaok)KxAhDvASxIFv/QPJwDl-Jaol0NzVBONyYFwNCk#sSzuaqHaol9QzuahEwDl@PwDl-JiSHo507x(/zuakFCMqW.wDliuBo2\u003eLwb).LwDlPFwb).LCk#pRx-I@HwDi?Mz#:qDASydXx-J2Jx8\u003c4Oz#:qDBo2$Oe=U(kpYK]7Bo2$Oaok%MzuahEwDllvaolP=x-JkPxAfdPzVB.RwDlPFaol9QzuahEwDl@PwDl-Je=U(4k(+{9ASxIFC(O@!x-J2Jwb{fvCMn\u0026^wDl@Pz#:CHv/QPJwDllve=U(4nDrSdB]U}", "ln": 60486 }, { "b": "BPt$MASyv+aolrWz#:CHASxIFBo3jVASvY(08De^zuahEwDl@Paol-*fAuI3aolrWBPuH-A@Y[Owb{fvaolG-xAhPzaok\u003cJzVB[WzuahEA@Wr.zVBwHaok1lk(+{9ASxIFC(PC%05)EHzuahEwDl@Paol-*fAuI3aoloVzVB\u003eVaolM+ve$9zx-IV", "ln": 61542 }, { "b": "zGvBewN/\u003e6x([R%wPzT4B8#5lzB5w^A+P09By^0Cq*ACawO\u003c4$B-8qnzdLmvr+lq)x(v(Li4=)qfFk4gavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4jZ{93w\u0026jfVw?=2Jh85C{vhe/x0UwpCx(E9:A+Pc1v{%E[z/bNU1}(DW1o]D*R3vht5}E7+1Q22xFuYg", "ln": 65982 }, { "b": "A=bDgazC)tvixP4zeTJcay!?\u0026xK@=pBz(hhazbUjz6hL!v@=Hez!s8lqE%]Xvrb\u003c\u003eefG4FvrrSgw[CQ{B0bKCA=k\u0026daAg[jw]zZbvqYN^asItBA=l8kxMe9oayPd#az+FdwO#16dj+]narR^HarU-nvqGvYx(4H9C}p7VBz(hdxjSRpA+e:0C4CYtefFCsB-RUoAV/Bpvrb))zF7HyyH}=lze0T6vruj4zy=]szE:(gwPd", "ln": 67525 }, { "b": "%nC)1esIfmzmM}{H60?Y3iBV+H(d[0lKTczf+\u003cnqP}A/*F[3IH1HU2.l]$..*F:i^FR0[yd45[yH6]2nC*.d$?-GiOT]/b+JSMDId1Ehn0VoY\u00260b1t1\u002695RP9?)}g1:2TfFAf/u:C^JSu9M\u003eEGMa[f7d1\u003c25HtzOFqL0v8Z+YRi1Xc\u003c!Z]egg7f^}ex2Mkp^.Dkeh\u003e)T.r9ZcXd\u0026MVpvRxy8e/WA[Nvrk7EL/Vf:%9V.)\u003c}CoPo\u003ea^rEyQcY1D\u003cQ8jHR-H{0vGf#{YlxYsmhcyvNLeV]XVkxIOf@gU4a?Ub#tVeMgfJwLg^.$Sao:)6DvI\u003eE+HkCe7PFKKkksk\u003ek3#lYCvgw$!TykN)ho-\u003ejvFVh6E1FhlMh/dLLTmWk6NBy:P/=lXxeuyNax5S{sYev-c55LeQ%Ieb3JmrcUQ9GX4MNCR:Dn!:JUHTr/Uyoym+LltL9x*m:*zj+T@U4n*cH{ci%:0pHFCbFKw9WF9/t1d*x2E))$FrjUQXlphSM{o{fpbuM*j]EA#\u003cixSDT3EXSe{$.lK.l[zu%Lid)fOOUl.)@\u003cL91nC#tMDyD[)Pr{}f}-\u0026gol4mX9/sQhBMKBVe}a?{?PcWeVU.qlA](%/VFaFGc@X7N@fW\u0026AqG@}d4G$Tv0hGnqrL4aQZ?tOiKtnR7GVXnZT\u003cGTE#?rSl8p34aV4V]trZmo6\u003cF9Lt(gj4Jr]g!t3E[?cIu0\u003e2}L]GY..W\u0026R9xsMXAt[W^1f*pG}Z%rB}0moj7IVB%o42plVd/Y\u00262@@+QU]]o40+NyoAat-u\u003c0l@+xEG(oIJh[LO[iFa9I%eJC0h7RzFz]?e", "ln": 70608 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026sBZzL1o[\u0026a00000000001o{W.00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310rrf3000o80rrf3000o8kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "ln": 89552 }, { "b": "002m/00031fAr^bfAr^bfAr{fvGn7Z0052Xi@]uZlJz38z2!zMwDlPFBo3vZ000Dd3ihgGaoiI:aoiI:aoj[ive$rFzuakFBo0A-x-JhOaok*IaolAZwDlMEzVB\u003eVwDi?Mv/P{qv/QfxwDjpZA@ZpZ", "ln": 89882 }, { "b": "x-JhOBo31PzuaqHaokptwDllvx-JhOaok)KyYFeHwDlPFBo3vZe=VsX3ihgGaoiI:aohxw001?Q3ig8blJz38z2!IPve$fBC(QOtve$cAwDhYg002Z[x-ISyASy1TA@ZaUw=M]M002g.3JHhcmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002H?ve$rFzuakFBo1]kqVGO[p5\u003em]001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001+Oe=WQae=W\u003che=WN9002g.4/=RgnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002H?ve$rFzuakFBo1]kqVGO[p5()Dwb{ACyYBCn004JHe=U[LoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO005$#aokaox-ISyASy1TA@ZaUw=M]Maoj+ezVB!Tz#:!RASxIFBo31PzVBUPe=W0]k(+Z3yYCNTASx!Nx8(PBBo3vZaolAZwDl=KwDl-JB]V7Nwb[jZ002E*4/=Rgpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002H?ve$rFzuakFBo1]kqVGO[p5()Dwb{ACyYBCn001RK2lj=8pYLIozVBqFBPt[KBo25ove$cAwDhYg002H?ve$rFzuakFBn#pv004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003chd/.HdhVLYnf-URZwb[E!f-S%ef-T9ig5%3ewDlrxhVNm^w=MuwgxoAnh#\u003eYlve@d+wb[y=hVLSlhump*f-UU.humj!v/OH?w=MxxvGlxd001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003che=WN9000000000000000000000000000000", "ln": 90506 }, { "b": "0000000000000000000000000000000000000000000000000000000000000b}@s3\u0026*nc=]Idb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 91600 }, { "b": "4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 92352 }, { "b": "6?@yLA=l2qw]]d.z/P/nA::67z/do+fFAXkrrJyqdnsI^A=l2qw]]d[z/o.ulUgpWx\u003ez6?vru66l3mo.z/PMlC{1\u003c@f!\u003ev67y-bRfGp:Cgb7Nxf/StM4kP)@gCQZvgbgNsg*hOmf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK", "ln": 93952 }, { "b": "viwu+wPzj3x(v)gf^!U31{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wtiwSJAfF=cKeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^vfOfJLfOfDlPAtk@0S\u003c2\u003e0006F!XD*PU}x9f009610W/Vh1{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n1p2OBqE%xQz/f8u9XXMr162Eh6bskQv@=Hez!s8llVm0:z/Podx(v(zcnlXH162Ea6cf!Yv@=Hez!s8lrb3hXeMl+1zeZQ]lQq?IfFLmn9V2nvhzu)viwAJJfFCs!7y-bUfF$Nzf/.6AfF(@!FY/+QfBm{=rrJHt0--eN6eg15162Ef6ad/HB7/o9xln6ff+u2G1{m\u003cd2nmtuwN]T@zE+EyfDpo0rrJTx6?@yLA=l2qw]]d.z/P/nA::67z/doQfE3=7rrJW", "ln": 96473 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 89088, 6.67, "r-x" ], [ ".rsrc", 89600, 2048, 2.87, "r--" ], [ ".reloc", 91648, 512, 0.1, "r--" ] ], "metrics": { "pe": { "checksum": 139097, "timestamp": 2520243070, "image_size": 114688, "headers_size": 512, "checksum_valid": 1, "clr.is_il_only": 1, "file_alignment": 512, "resource_count": 1, "cert_table_size": 10040, "has_version_info": 1, "computed_checksum": 139097, "headers_size_ratio": 0.01, "prose_section_count": 0, "reloc_overhang_bytes": 500, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0, "bss_like_section_count": 0, "clr.is_32bit_preferred": 0, "clr.strong_name_signed": 1, "section_overflow_count": 0, "signature_expired_days": -210.56, "clr.is_native_entrypoint": 0, "clr.strong_name_sig_size": 128, "misaligned_section_count": 0, "version.identity_entropy": 3.86, "base_relocation_block_count": 1, "base_relocation_entry_count": 1, "declared_data_directory_count": 7, "version.identity_symbol_ratio": 0, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 102200, "entropy": 6.72 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.67, "overlay_size": 10040, "string_count": 680, "overlay_ratio": 0.1, "overlay_entropy": 7.52, "entropy_variance": 7.25, "avg_string_length": 21.8, "max_string_length": 355, "peak_region_bytes": 25400, "code_to_data_ratio": 1, "peak_region_entropy": 7.79, "string_length_stddev": 27.03, "largest_section_ratio": 0.87, "sentence_string_count": 51, "sentence_string_ratio": 0.08, "high_entropy_string_count": 0 }, "imports": { "count": 1 }, "sections": { "count": 3, "code_size": 89088, "entropy_max": 6.67, "entropy_mean": 3.21, "name_entropy": 3.03, "writable_count": 0, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "consistency": { "internal_name_original_filename_mismatch": 0 }, "dependencies": { "count": 1 } } }, "id": 10, "ident": { "name": { "value": "GarnetJSON.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "GarnetJSON", "source": "pe.version.description", "verified": false }, "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:24 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "project": { "value": "Garnet", "source": "pe.version.product_name", "verified": false }, "version": { "value": "2.1.8.0", "source": "pe.version.file_version", "verified": false }, "build_path": { "value": "GarnetJSON.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "K(Mc₂)O₂(ErPr)H₂(Db₃F)Md₃(Bi₄PaSi₄)", "path": "win-arm64-based-readytorun.zip!!net8.0/extensions/GarnetJSON.dll", "pid": 0, "risk": 17, "sha": "3c3761e56b9f1cc8faab842bba2c799e9adcdfbc2e287f50aef433f6eaf004af", "size": 102200, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 512, 89088 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 29460, 0 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/layout/size::small-pe", "conf": 0.6, "crit": 3, "desc": "Small PE binary (\u003c100KB)" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-rsrc", "conf": 0.9, "crit": 3, "desc": "Microsoft vendor marker in resource section", "spans": [ [ 90831, 21 ] ] }, { "id": "metadata/binary/vendor::microsoft-prefixed-company", "conf": 0.9, "crit": 3, "desc": "PE company name identifies Microsoft", "spans": [ [ 90596, 9 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 61590, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 67616, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 67573, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 60645, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 90596, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 90570, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 90622, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 90686, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 90734, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 91046, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-semver-git-hash", "conf": 0.9, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 91076, 46 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 90712, 7 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 91024, 6 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 89694, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 90712, 7 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "metadata/signed/trust-level::dotnet-strong-name-signed", "conf": 0.95, "crit": 3, "desc": "Managed assembly is strong-name signed" }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 92416, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 96537, 0 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "spans": [ [ 54575, 44 ], [ 54620, 33 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-append-method-token", "conf": 0.72, "crit": 3, "desc": "Append method-name token", "spans": [ [ 52122, 6 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder type reference", "spans": [ [ 55691, 0 ] ] }, { "id": "micro-behaviors/fs/path/extension::utf16-exe-suffix-token", "conf": 0.84, "crit": 3, "desc": "UTF-16 exe filename suffix token", "spans": [ [ 60550, 17 ] ] }, { "id": "objectives/evasion/masquerade/version-resource/claim::microsoft-company-name-short", "atk": "T1036.005", "conf": 0.82, "crit": 3, "desc": "Microsoft short company name", "spans": [ [ 90596, 9 ] ] }, { "id": "well-known/malware/rat/nanocore::command-type", "atk": "T1219", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "NanoCore command type marker", "spans": [ [ 52441, 11 ] ] }, { "id": "well-known/malware/worm/ludbaruma::metric-section-count-3", "conf": 0.99, "crit": 3, "desc": "Exactly three sections" }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/symbols/imports::single-import-count", "conf": 0.7, "crit": 3, "desc": "PE with single import" }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 90998, 11 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "spans": [ [ 55492, 11 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "uses": [ 3, 4 ], "spans": [ [ 29460, 0 ] ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 8, 10 ], "spans": [ [ 90596, 9 ] ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "uses": [ 21, 23, 27 ], "spans": [ [ 91046, 0 ] ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 8, 31, 33, 34 ], "spans": [ [ 96537, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 30, 31 ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-append", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder Append use", "uses": [ 36, 37 ], "spans": [ [ 52122, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 49 ], "spans": [ [ 96537, 0 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 52 ], "spans": [ [ 96537, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 52 ], "spans": [ [ 92416, 31 ], [ 96537, 28 ], [ 96715, 29 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 53 ], "spans": [ [ 96537, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 55 ], "spans": [ [ 92416, 31 ], [ 96537, 28 ], [ 96715, 29 ] ] }, { "id": "metadata/signed/certificate/identity::microsoft-signed-foreign-company", "conf": 0.94, "crit": 3, "desc": "Microsoft-signed PE has non-Microsoft company", "uses": [ 18, 52 ], "spans": [ [ 90596, 9 ], [ 92416, 31 ], [ 96537, 28 ], [ 96715, 29 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000?#A-S4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000yR\u003ehAfqxCtfqxCtfqxCtS45WraFP\u003ceS45\u003cwbCMfhS45)xE4}QlcFKxhkCGcJrW4", "ln": 0 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000[bJET5cq]}5ctb)9@((rk(Z):ZYN@{@D(nT@r04Z[bJET5cq]}[C\u0026NUf-?Dt5ctb)f-\u003cSo[j9IUsV=XG002jj000000000000000[bJET5nBFvKn]ns007#/0003cZYN@{[bJD}0@MzYlJvb{1n\u0026Z^U(B.X?#:6hZYN@{z#P+FvGlxx00000[bJET5nBFvKn]ns001gL0003cZYN@{[bJD}0^[vhlJvb{1agVoU(B.X?#:6hZYN@{z#P+FqucXh00000[bJET5nBFvKn]ns0Sp@#?#:4XZYN@{5ch^r1n(JEE/GMove{pb0SiIIKPktr?#:7YZYN@{pYyw9k(Z)00rvS.=\u0026s1Y0000000000[bJET5nBFvz#Y\u003e@0dZ=MZYN@{=\u0026s6M0@MzY0ELDm^eTb6?#:3gZYN@{UM1LkfAq7!000000000000000[bJET5nBFvz#Y\u003e@0d:56ZYN@{=\u0026s6M0@MAD0SiII^eTb6?#:4XZYN@{UM1LkaohxQ000000000000000aPN3\u003cTn\u0026ho0000000000aPN3\u003cXbVEA00000000005ca#aU(/K85DGui9%93\u0026FDk:Ip\u003eRaf5DUkdf\u003e}Tu4[IHO52W0V@@AZEP-t6(5e1#9p\u003eO\u0026A004KEZYN@{aol{\u0026ZYN@{00000000005ce@.[C\u0026NUfLQP#5cdmep^Nd(5dR4Q5ch^r5c+bA5met+9%@2r[hD#d5cupCfLQP#?#K}J^eQq$5l.W^}#uWj000000000000000%3D!l[C\u0026NUf*Xe3[NBq%[DP6\u0026ZYN@{0000000000", "ln": 960 }, { "b": "000000000000000000000000000000000000000000000000000000000000)!3OX00000?T{)H00000W!fU300000P7J9:00000J}AzM00000=H?hr000000000000000ZvIv900000^dmnr00000\u003cNSxL00000]78\u003eZ000001OqY{000008Us4g000", "ln": 83408 }, { "b": "\u00263np/0rr91PD\u003cI50rr91Z:e$C0rr91A3UGH0rr91H@orV0rr91fDycU0rr91KqE%.0rr91eDt+J00000fFLssg=mfIi5$zRv}od.xj#0]yIW\u003c9z/xYpB98LFCx!yV00000001eS5E]lU3KWpG2)*[A2)Z!x2NyXw2l$Fs2l$Fs2l$Fs2lj-7fFLssg=mfIi5$zRv}od.xj#0]yIW\u003c9z/xYpB98LFCx!yV00000002qlaSIvo78mI%5!U=*5FbG+4?xfY4H@%U4H@%T4gJ:Q4fcwd[nFy[", "ln": 89696 }, { "b": "00000000004/=Of00000ao^@D0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A0#+j0rr91N8G7\u003e0rr915BoxZ0rr91KqE%.0rr91vQS^\u0026wQ4Y@Acb/jzu6Up0000000000PN^be0rr912MK\u0026800000UZ(*u0rr912lj-700000XpBVC0rr912(\u003c@900000:BKvS0rr913ig5a00000/NT5*0rr913ig5a00000\u003eZ-+10rr913\u0026*nc00000{\u003c\u0026Dh0rr914/=Of000002.A7x0rr912(\u003c@9000006OluJ0rr911][S600000aC6RV0rr912(\u003c@900000fOfr\u003c0rr912(\u003c@900000k.o240rr912(\u003c@900000p\u003ewZk0rr912lj-700000sB{Ms0rr913ig5a00000xO3mI0rr913JHeb00000C.b@Y0rr912(\u003c@900000{\u003e]er0rr910000000000GN%j\u00260rr911onA400000KB^G#0rr912lj-700000N1tu70rr910rr9100000OpQ=b0rr910SSi200000PN)hf0rr910SSi200000Q\u003eeRj0rr910rr9100000SdC4n0rr910SSi200000TBZEr0rr910SSi200000UZ#)v0rr910SSi200000XpK-D0rr912MK\u0026800000-dw1P0rr910SSi200000M$DB+0rr910rr9100000:BTBT0rr", "ln": 90064 }, { "b": "0rr9100000\u003cBNy$0rr910rr9100000\u003eZ\u0026?20rr910SSi200000)1bm60rr910rr9100000[pyWa0rr910SSi200000]NW9e0rr910rr9100000{\u003c@Ji0rr910SSi200000@dj@m0rr910rr91000000d$qq0rr910rr91000001Cl.u0rr910rr91000002.Jdy0rr910SSi20000041!NC0rr910SSi2000005q70G0rr910SSi2000006OuAK0rr910SSi2000007\u003eR\u0026O0rr910SSi2000009d[nS0rr910SSi200000aCfXW0rr910SSi200000b.Da.0rr910@@r300000d1.K=0rr910@@r300000eq0%*0rr910SSi200000fOox\u003e0rr910SSi200000g\u003eL/]0rr910SSi200000id?k%0rr912(\u003c@900000np{{", "ln": 90840 }, { "b": "ay/tcB98CBv@#TfazC}eA::6dAWH?!0001bwo\u002663ze0G5x(mTbx\u003c\u003e*(Ds.atw]zYjcJBbD0001bwo\u002663ze0G5vru79x(\u003eFdwPI%lBZ]JiAV!$jAV=.f000000001bC4Cf9z/M$gz/x$Av@DmaBAhIlBz(gxx(){bvruBdcJBbD0001bC4Cf9z/M%", "ln": 93301 }, { "b": "uU%j=zEmEbvrcEjAa%i4zVx+q000000bcp(By]=ruU%j=zu6Up0b8vJ0cncZ0a(jQ0ce5(0aV7C0bISn000000000008@@i0a=cM0bITH0aC}G0at\u003eF0c[L!03}R^03zn=0at\u003eG03znN0b?\u003cW0b.^E04X9)0aC}J0cwh-0bITN0at\u003er0bhBJ0a#oO0bhBP03znN0ce6T0bRYU03}R^03znN", "ln": 94151 }, { "b": "04!f[07^fd0cncZ0at\u003ez0bITH0b.^H03zm]08rI.08@}v0b}{U0a=dJ0a=dI0cFoQ0cncO0cwiL0cnb.0bRZI0a#pB0cwh-0b8vz0bITO03znZ0a=dK0b?\u003cN0cOuN03zn-0b8vD0cnb.0b}{U0b?\u003cD0bITD0bRY*0000000000000000b8vO0cwiW", "ln": 94339 }, { "b": "klbH1x-J2Jyxe5Gwb[:)hVL\u0026rh#\u003e-mfAs0h00000aoiI:aoiI:aoiX/A@VgurC(O\u0026z*c7wwQ4Y@Acb/jzu6Up00000vQS^\u0026vrcx%C{40oCoyZkzFa6800000B98CpzF78lz/l+mz/fg/iV[z500000x(w6mA+eV@0000000000vQS^\u0026v{%C20000000000vQS^\u0026y\u0026r/(yY", "ln": 94544 }, { "b": "00000000000000!0b?\u003cY0b.^M0b?\u003cC0aV6L0bhBP03znV0b?\u003cY015Ze0b?\u003cW03zn=0bhBH0bIST0b.^F0a=dv03zn-0b?\u0026W0ce6Z0b.=V0cwiO0a=cM0aV7F0cXAX0bITN0at\u003er0a=dv03znQ0b.^T0cwiH0bITK0a=dJ000000000)0a=ds0ce5", "ln": 95717 }, { "b": "0ce6F0ce6+03znN0ce6T0bRYU03}R^00000000000000008JVo0b?\u003cD0a=dv03znN0b?\u003cT03znI0b.^E03znL0bhBz03znV0b?\u003cV03znZ0a=dK0b?\u003cN0cOuN03znT0bhBx0ce6F0ce6+03zn.0c[MY0aC}D0bIST03}Rz000000000008JVo0b?\u0026", "ln": 98491 }, { "b": "zuakFBn#pvuJrE]pxjt]p5)Y.q#*n9q#/t!qVG+%uJr$7mf2*TnDqV?q#/!@sPz!epYJ=Yq#/C?00000nb#o.mf3D\u003cuJrB[rrb[%qufb=p5[k[uJs7aqVGk^quf@400000tMvX5wDl/LBPuvXtMvs}zua.TBo2.HyYFnKwDllvrSDXhASydXx-J5Kzua.TtMs:700000nDrSdA@ZpZve$9zyYEcezVBnEve$xHx-J5Kzu6UptMs:700000nb#o.lJy9^tMs:700000nb#o.oAm=!tMs:700000uJrE]pxjt]p5)Y.q#*n9q#/t!qVG+%uJrN@oAm\u0026*li6pKoAm-^sPz!equfb=m/V9XqVG+%mf3i=mf2ZQuJr[5k(:\u003c:nb@R\u002600000oAn#hzVBLMx-J2Jx8\u003c4Ow=M-H", "ln": 98824 }, { "b": "aol9Qzua.TBo2.HyYFnKaoliTzVBnEve$xHx-J5Kzu7^VcJCB)A@WM/e=U\u003eKzGGA9y+xmmyYBCn00000qGM.BwPQ%:A=U@kzu6UpCk#sSzu8P}0000000000Ck#sSzu8S@0000000000Ck#sSzu8S@f-RgN00000Ck#sSzu6Up0000000000mGu\u0026%x-I@HwD", "ln": 99856 }, { "b": "03znZ0a=dI0cFoQ0ce6J0aV6L0bITH0aC}G0at\u003eF0c[L!03}R^03znK0b?\u003cW0bITC03znV0b?\u003cV03znJ0a=cM0a(jH0cFoV0aV6Z03znu0a=ds0ce6H0b8vz0aV6L0cXAS0cwiO03znZ0b?\u003cQ0cwh-0b}{D0cwiO03znC03}R^09]NQ03znM0b.^W", "ln": 101141 }, { "b": "00000A0uvz0rr9100000%nSc000000kMy=:Z@lrO0000000000qD2$Z7ta{!YJ7E[O}u}f@NB\u003c=0rr91l][NYtWIX[A+!]mtYTdUA==2cvpKz2tYj7^tZ6[1eN-Wphz^3:wO+{^B7FP^z/PA5z/Z29vq{g0z/Z29B97\u0026dwmop)zE)6YAbYGeB963NwmtJs00000x-Fbkx-Fbk00000x-Fbkm)*lH01YbgFck\u0026Le{7VHBn#pvFd}$-aoqDxe{7VHBr\u003eyh00000PCmCb\u00262z:$e{7VHBr\u003eZv00000Fhdc9spLrhe{7VHBr\u003eZvbR?7O/GYDq\u003eNvH(e{7VHBr(8hZ!K[g3\u003ccFfe{4", "ln": 109548 }, { "b": "0rr91000x70rr91001}N0rr910000000000007Qz0rr91008xV0rr91008//0rr910000000000006k7q!P-Uy^\u0026OWv%8)8r@=e\u0026mncxhga)9NyYIJRlVM:DBy^:FBvgd{r@-p4l1t1JC42G7l1t17BA^==JrhQYBwca:Bvyj\u003cz/L*TZ5ZYqzE=TRB8Mhwv}wZwt)0PdBxrf]wn=Wkl${WMv@#TfC#\u003c$C?2Z8TBwN0@v)KToA+frk005?%m}D^pz!a0bwK{lEwnC*U007HHmSJ6KoLE%RvrcR[{5!0bvpS5CvSC)$C%#%V002T{pJZ+#B-Z2.vS=rZBAh8kxib6kQx9?#zE=jJA=Vs(x(4uHCVK\u003eBr@\u003e:cBy/FWA+PSfv{%gLwN/*@z/bKPG-T+QBvHy?y/1LZxII#MwMF\u003ciV\u0026JTgzE=HNCYVz?y?lVFk(%L/Bvgg\u003eA+fcgp\u0026ZF:wPI[)QYK4$BwlW:B.\u003eRWvqYQ(wKQ\u0026B005X]m}D^pz!a0bwKZxIwLMVJwMF\u003ci[b(u}vrMiHA+PSfv{%gLwN/*@z/bKPwcbnjBvy7\u003cx(XcfzdNQbr:*2.vpB4:r@!=(mRM:JlU{WZwDi}To)7n]x*N8!wMiOHx\u003eg^xxKL]Yz30jsBvG$XwKgAWA+P09By/IZCVK\u003eB]Ad^9vpS5CvSC)$C%IAgf9aELy?mZ1lVM).x\u003e7N/q!oDXx(v\u003e?n^nvhwmXbwvrbs=o)7n]x*N8!wDoTJnPN%KCq.oOA=kD0B8}rYogq-NmnbG)e[w^m005z*o\u003ewx!vp%drz*ks-rz#s:gCQN[y?%7KX=L=vAbP=smrSlWBxnCxR#/\u003edxk8BewPyj.wO#P*z/{8gwMF\u003ci)ePK=A+e($B97#lmrSlWBw)a2A:@UXDJE8RxgDJPr://!wMF\u003ciH5$m:xhrFTzCaL^mr?(lrru6fxg3GNB7F0QC(Qb#rZxLNgCQN[y?%7K003wkvpKt1uUKB/uUjB#v/R5Ww]I)mCvHQMF=Gz4B-.?G000\u0026ow].D]003QhuW3a6z/xo9004iyw[C\u003e4B7+KN2lnarB97@bz^N0)zeBieuV{49Ab]VgBy\u003eHM3\u0026\u003cTwB97@bz^N0)zeBieuV{HdCw}OpzGGF$A@V", "ln": 121098 }, { "b": "000000000000000000000000000000000000000000000000000000000000%nSc00rr913ig5a000000SSi20000000000000000000000000000000000000000000000000000000000000000000000000000000000000%nSc000000%nSc00000000000B^Jde000", "ln": 123856 }, { "b": "00000000000000000000000000000000000000000000000000000000000001Ybgk\u0026\u00261D7.uVEoYVoPp.iQb1M/Z+KpRx(1M/Z+=\u003e3fS4cvM\u003c5d[)x6Y]z@aq1ON9oEn4u\u003eAws9oEn4PB?e76Y]z@UN{\u003cn6Y]z@Z.3LDb\u003c2ac5e1%yeAM%ku\u003eJCtjMV", "ln": 126416 }, { "b": "0000000000000000000000000000000000000000000000000000000000000ak*c00961{[E?+5tQCAd5nL)ihw*nntG7TsFPu2xRYQyH[{cdAhE(SFtOd1KFXzxU+[}cZ]2hI^5bD)\u0026hk.n[tt#T0h*a25t{wyaG5ttv5EXoAhN@UFtXj3KF^]mN5Q", "ln": 130000 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000001onA4000625c8Xgaohy(7YTKoh#\u0026@e00000000001onA4000310rr91pYHGC00000000001onA4000310rr91xAe3.00000000001onA40003100000D\u003cxYL00000000001onA40003100000J0Gy-5c:@\u003e00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310rrf3000o80rrf3000o8kl7V-000001onA40rr91000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "ln": 131024 }, { "b": "002W@00031fAr^bfAr^bfAr{fvGn7Z0052Xi@]uZlJz38z2!zMwDlPFBo3vZ000Dd3ihgGaoiI:aoiI:aoj[ive$rFzuakFBo0A-x-JhOaok*IaolAZwDlMEzVB\u003eVwDi?Mv/P{qv/QfxwDjpZA@ZpZzVB!TwDi?Mw=M\u0026KzVBROaokaox-ISyASy1TA@ZaUw=M]MaokptwDl=KwDlcsASxOHxAfN-aolG-xAhDvBo0A-zVBwHw=MxxASydXaolD.Bn#", "ln": 131394 }, { "b": "x-JhOBo31PzuaqHaokptwDllvx-JhOaok)KyYFeHwDlPFBo3vZe=VsX3ihgGaoiI:aohxw001?Q3ig8blJz38z2!IPve$fBC(QOtve$cAwDhYg002Z[x-ISyASy1TA@ZaUw=M]M002s=4fczemGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002H?ve$rFzuakFBo2ktwDl-JB]V7NASu7t001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001+Oe=WQae=W\u003che=WN9002s=5Dz?inDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002H?ve$rFzuakFBo2ktwDl-JB]V7NASvY(wb{ACyYBCn004JHe=U[LoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO005$#aokaox-ISyASy1TA@ZaUw=M]Maoj+ezVB!Tz#:!RASxIFBo31PzVBUPe=W0]k(+Z3yYCNTASx!Nx8(PBBo3vZaolAZwDl=KwDl-JB]V7Nwb[jZ002Q\u003e5Dz?ipxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002H?ve$rFzuakFBo2ktwDl-JB]V7NASvY(wb{ACyYBCn001RK2lj=8pYLIozVBqFBPt[KBo25ove$cAwDhYg002H?ve$rFzuakFBn#pv004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003chd/.HdhVLYnf-URZwb[E!f-S%ef-T9ig5%3ewDlrxhVNm^w=MuwgxoAnh#\u003eYlve@d+wb[y=hVLSlhump*f-UU.humj!v/OH?w=MxxvGlxd001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001+Oe=WQae=W\u003che=WN9008G1ZDs-9zeptrwPz\u003caz/dYZf!Ld7", "ln": 132018 }, { "b": "w[u49r+lq)x(v(La#7Y7b0DCyarS^PB8$]fvR*rYwmYU2x([RyC4CYnx(v(La#7Y7e?![ia%p=izdL\u003cOo)G3zAbok#vruj4zz2vpA3u@04gjj2jALQ^B96#\u003ew]w/pzes9hjTb2?zAq\u0026GxK#3?B1Ilyv@=Hez!s8yv@DiBvrlorB$$m94gjj2arS^/wN/\u003e6x([R:4gjj2arR^HjAt1MB.bSowN[RTx)aibwOkN}aB4:tzGv@+B-IvXB7n({zddGqze0H2z/Y\u0026eBs?0vz8#9Dz7Y#/b0DCyarR^HarR^HjAt1MB.bSowN[kOwN/\u003e8x(v(.wP?T3az+RjwO:HNvrk1TC5IecAV#SGx*DlswPI]Qb4+n1B7DKGj}d\u0026warR^HauRq$wPq\u003c7B97#7p\u0026Zn[x(4u[wPH3A3lQDlauRq#wN/\u003e6x([R:4gjj2jtg!%B-RT@zF0/J4gkiJvrlH3zdmsbj]+OkkMQ]%1][U:1o", "ln": 132869 }, { "b": "o\u003ewAPwmoN*e\u003e]]0vpS!*vo4nSvru73e\u003eHa.B-qqrA=+(6b03\u0026UvqH0@edz}earR^Har\u003c:fB97#ge(D?fBzkP6e(Mt4x\u003c\u003e*(Dsp]fz/df@zEE0\u003cwMrR?vp\u003c7qx(mv1C$8Z)zddKdwPyZXA+O@#x)Kifx(v(kiV@3yy\u0026:d%3lQDlaBKXaarV7w3vI)O000000000000000000000000000000", "ln": 133894 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.iq61h:0000000000[bKTP3JZXo0mhtU0mg-D000000000001Ybg0001H0rr9101Ybg01Ybg1onA4000001onA4000000i^dq01Ybg000000@#.W002m:0000006*I:0000", "ln": 135072 }, { "b": "lJy{5x-IYAzua+Uaokjrx-J8LwDlJDx-J2JwDhYgoAk?d0rtE!zVBROz#:qDzua}Zp5[Y5z2!bE00000o-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu6UpxAfdP0rtN?x-I@HwDk9#wDl=Kv/QJHx-J8LBo31PzVBUP00000o-O(cv/QJHzVB?UzVBwHBo0A-k(=ihBPuBZwDi?MlJy{5x-IYAzua+Uaokjrx-J8LwDlJDx-J2JwDhYgkM", "ln": 139660 }, { "b": "z/6DfwPRT8zB5t?zEU\u003evuTCJC090#:m}D^xnP5S8hulY%C$hB/nP5S8huk\u003cqwNPanB9RUkk4F2cgD2j}m}D^uwPI*ezGxwPB9RUkk4F2cgD2kjhuk\u003cJy*?p7wN)$ZuTCX\u003ejySCBw[u0]wk^O\u003cwNPBthd6YG06B.ewo*u@uTCX\u003ejv-$8l3mo.nm=juwPy*Wy\u0026%qPB9RUkk4F2chuk\u003ckz!zvSD2vaQwm5X406Bg\u003eA+O@#x)Kt\u0026z:FeQvrcSYvrt{HzGGDg", "ln": 1137189 }, { "b": "l$7gC07QQxl$7gC08)DJl$7gC0a*s+zGFoPByteox(mv1C%(7.ve%UBvrt]Tq*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/dg4wPRu\u003evrt]TxjVf(rz#zaC1DQ@ve%kKB97#ge(VzbBs{11v@C)(zFa2ys7L?vju^lPxjVf(nPNZJvR/:*0cqZ[uRbrnBZ/f3v/PCMB97#ge\u003c%#5vqPZ*08[e:By/qwlVl=", "ln": 1139373 }, { "b": "nN}*dB9g@kv@=p5BzkVhnN}*lwPRoUwO${]Bv*0yBy/t#zGFDX08)DJp*[xQzGFDX0b2\u003e+uQYcHzGFDX0b2\u003e+uS7DPB.bSonN}*lwPRoYo(\u003cizADL\u0026lBv*0yxjVf(lU{EF", "ln": 1140985 }, { "b": "wJ\u003c)puQwghyIvW0mRMBIwb[.\u0026vrUQXB8V5nB7EKJuTDcdv@2^@xguPDy?9JdlUgpWx\u003ez6?vru6AyHpBnvpK7!zF8BMwO+(SjvA:%wPRGEyHpBnvpK7!zF8BMwO+(Sjxt)bB.9:LuTDcdv@2^@xguPDy?9JdqEK=wB8L}%vqH6$k5jIjlsBwtx(mMMx\u003eq9\u003e06A^", "ln": 1145631 }, { "b": "yHpBnvpK7!zF8BMwO+(Sl2Z^OzE=aFx(4qWluN0Uwb[.QC3!P}A=k/eB7FcVr://!wLWtnzE--CwO#2Ul2Z^OzE--WwPRoLx(mCYxjVf(lUG[CxjT.IzE--wB-.53y?ljWz/d{QvqYZ?okeoO0aPXJzF9JNx(mCYl$7gGrb3hXokeoO0b2\u003e+uSHPKB.aiWzE--mA+eW3wNw5Jz/eP:y\u0026%qZx(mCYxjVf(n][]*r://!wLl-Pwb]RIx?F", "ln": 1150374 }, { "b": "C4\u003eF#A.Z4WwPI*0v}tTUAcb/jzGwMYzdN^cvpJ\u003cGv@b\u003c\u003czGFSZzdN^cvpJ\u003cGxjVf(rb#zSwDkUBx\u003e7YOlVM:DBy!3YB97\u0026dv}tTcA+eW3wM9XVBzkk.wObH]wO#0?0afX-y\u00260*6xh-wYB.bD2wDlvOBydQKo(BMRw[+*!q!ZbVwDl^.BydQKo(BMRw[+*!q!ZbVwDlvOBydQKrC(U(wnbT\u0026wN[.NzEWkTB7GD2nOg$uzeS%0w[+*!q!ZbVwDlvOByb", "ln": 1151184 }, { "b": "zBm\u0026xxK}fJvpJ!UB8$r0yH}xJvpJ$Z0afkAv}YANmq=TczGY@lwDk5dxk8lPzGY@lwDl7UyIv-!vpB4:08)#FBzkkYvp%dWvR/PQm}D^hzGY-mz/fA6zGF]/A+O@\u003ey?iPrB5DN\u003eA+O@\u003ey?iPrB3:qByIdWaB-7.?z!\u0026{4l3uWJy**^?wDkFFy\u00260J?y?iPrmq^l+wPzi*y?iPnzGx@vwM9\u003e(v)$oTzdN-@vR/PQuTX23zEVaMB.$YgvpB4:07QQxmq^l+wPzi*y?iPTzGP/cA:-A[wDkp\u0026x(:", "ln": 1153034 }, { "b": "wmY^Px(mFZxK$Q.wPyEUzE\u0026/tzGYD8x\u003ef+RBz$f2vruTkoLFxQ0crl\u003cBAIT#x(mFZxjVf(pgXSyx(mFZlVl*Jx(mFZnKmAyzEVQ!vru6PvpJ$+zE\u0026/DwPQ\u003c)vru6PvpJ$+zE\u0026/?Byxo5o\u003c}KBx(mFZl3^V]wIct*A+c\u003e1x(ET1x(mFZl${ZYz/Yt@y?ldVBz$5\u003cAaJ\u003c1zE\u0026/nA+eW3wM08VB.bSop?:(Wy?W=#0afXVAaJ\u003c1zE\u0026/XwPRn", "ln": 1154925 }, { "b": "z!0v1B3T?RxLzN1v@#\u003clwDlvOBydQSC42A9vqZfOB.(exA+bkrvq{shA+bkpDuBmt08u%twPHBXrDzZKo\u003ewAWz!8gyB7CtEAaK5#BzkVhnP5SYA=br4lsB}D0b2\u003e+uRbcUvrc6\u003czGFl*y\u0026\u003c/uwL3JLz/PzRvrk#WxjVf(pJx#WzEEuMxkRTdwKx)EwDlvOBydyzzdNJJvrk#WxjVf(qE%oTz/ex+A::3208)DJqE%oTz/ex+A::320af+Tvrh", "ln": 1156305 }, { "b": "xjVf(mriA!A-cE\u0026AbPSnwDkqymriA!A-cE\u0026AbPSnwDlpZA=k$@wPI*ezGxv?xjVf(nmuNqwPI*ezGxv?m}D^uwPI*ezGxv?Aa9=#zGF=/B8V5nB7CtCB.(elAa9^eqE%]*z/fSc07.iNA6[CQwO#P?A:-\u003cbAbP=sqE%]*z/fSc0b2\u003e+uS7rRqE%]*z/fSc0b2\u003e+uQ[WHqEK=EwPI*ezGxv?uVGO0qE%]*z/fSc08m3wz/Qb3wPI*ezGxv?mqV#", "ln": 1156771 }, { "b": "vru5XxjVf(swr\u003c8vru5Xst.=)lUgpWx\u003ez6?vru5XxjVf(lUgpWx\u003ez6?vru5Xv}xX5x\u003ez6?vru5XxjVf(s9F\u003cOB-.qdzGGP5vru5Xs8@1%wLV=IwN/*ZAaAy0wDkLEz/xodBA{(9wmoN\u003e08[e:By/qwlU{EFzGFP\u003ewmYNfp\u0026Zn!x([6jwPGE}p?sV*x(!x8vR/P", "ln": 1157050 }, { "b": "08^xFB.L(cB3$p\u003evqPZ*lVlHDl3di?x\u003c#jbwDkRtADL#owPH\u003c?A+e\u0026]A+fb#wN[eDwmX5GBAh88B-.f{m}DNHA::63wj7oCwKgAWA+P09By+CLzGYPix\u003ez6/vR/Qyz!9ABBAzLqvS=^706$ZGA+P09By!D[vp%dqBAzLqvS=^7099]Dz/f91BzkVhvqF\u003e+AbY\u0026eB8$5!B8$=5wKgAWA+P09By+CEwP-9nvqF?MB8Mhwv}xZPvqY.2vp%dqBAzLqvS=^707?k#C#s", "ln": 1158909 }, { "b": "B4HBAzEWQ4Aa9\u003c5vR/QSx([2/A+Pxcx(mL-A+f8@x(mT5x8\u003e\u003eQB97#ge(D?fBzkP6e((L7B7]Mgx(mL-mSJA:lsB}Dhz!uOA+PA7090(6vrl0rg/FHpx(mL-lVM:DBy!/TBAh8kx8(NQByd%*A+PA707y%svq]^Cvrt{RBAh8kx8\u003e}HwPIu\u0026AaIBCByw9\u0026A+PA707QQxqE%\u0026\u003cx(W=}q/)4]zF5@Gz=gd/z/{8gwM9X\u003ex(mL-l$G\u003eDwmXXYA+PA707y^nz!9ATBAh8kx8\u003eUGy\u0026\u003cv", "ln": 1162203 }, { "b": "A=k![BAh8kx8\u003e[Hq/)4]zF5@nB5Ng3x(mL-m}D^vBAh8kx8\u003eCkzE)\u0026%By!D[wPy7HwO#P*BAh8kx8\u003e[Hnm^3ABAh8kx8\u003e\u003eMvSMTix(mL-wnca7z/YSgx8\u003ewzwO#P*z/{8gwKQ=NzGFu^A=2lbBzkS908^xFB.bSoqE%@\u003cD1?ee0b2\u003e+uQF:HBy/uioL59OBzau^zF5@yz!x5Sy\u0026r}^q/#Lzvru0)0b2\u003e+uRa\u003c8z/fbXvru0)0cqZ[uRa\u003c8zV", "ln": 1162623 }, { "b": "vqM0xwNPaBzFTO%BAg@3z2^pwzeTDuq/)4\u003evqM0KB98ClvqM0gAa@u:A=U@kzCT+ZvqM0SwPRoJBy/p?B7GD2nPXJX0blK^z2^HWB97#g0axXRz/PMlxL^-GA+Pv\u003cra{q-vpSqBw[s\u003eGzE^W50af+PzE^W50b2\u003e+uQ/6Oz2^dGl349YxkRc!y?l7Rz/2F^A=k^{nPNWap\u00266MZw]zZb0b({Py*?A$z/PW{ze0)4zfoW}zddW6zfoW}mq^l+", "ln": 1165930 }, { "b": "A==2cx\u003e7N[wKgDXxM4{9BA{k!vqfPVv}xX5x\u003ez6?vru6DB-.qnA+PSvlUG[xzuarXBye0UCYV+#vqfPVl2Z^hz/5]%zuarXBydyTA=L-eBvp4:vqfPVq!oJQpJyeZx(i]Tz/PM8x(i]yz!T7?o)7n]x\u00265.:D1R5k07QQsp\u0026ye}xk.U/xjVf(r+lq)x(v\u003e?pJf(.raP(SzdN*fC#Fi^wO\u003e\u003cRwPz\u003caz/bL/wPRoTAaJJWwPz\u003caz/bL@wPRoTAaJJWwPz\u003caz/bLvAbYxawkvj", "ln": 1166747 }, { "b": "A6[LYBzkSnvruj4zuaf+zGGPgBZYxaz/bLND2[7sz7Xs{z^)c\u003ex)Kifx(v\u003e?q*ACawO\u003c4$B-8qnzdLs#wPzG[y?Xi7BzkVh06${NA+c\u003c\u003cz/Pzwq!o#-vqGU7vruj4zu9QXB97#ge(VzbBs{gbz/dgawPzG[y?Xi7BzkVh0b2\u003e+uQn*RxM4{9Dsp]fz/bL@wPRoBB-.qnA+P\u0026dBzkVh07.iNA6XR*xM4{9Dsp]fz/bLNwN/\u003e6x([R^v@#B6zuaP]uSh8RBAg/1BzkVh08mPLBzkY5A=+k\u003e", "ln": 1167761 }, { "b": "q!{8^r://UwmoN]z/eG@xj\u003e^%BzkVh07gWwzeTp(l3^V]wIct*A+c\u003c}B8L{@q*ACawO\u003c50wQ5qHn][]*0cJx}i7!mgzuarXBydTYz/bLRA+PSbn][]*090(8D2v5cx\u003e6RMz/59/z/bLMwNPasA=k!!B8L{@rbUMwygQ)%mSJA:n][]*0b2\u003e+uQnTIy?Wx/BzkVhn][]*", "ln": 1169342 }, { "b": "Bx0eUlVl{?rbR+hwPRQ7wjZVJzVAyJz/eK1AaIQUw]vV:B8L}}D2Ns^zF0!!xkzG}vqE$=q*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/dg4wPRu\u003evrt{gnLj5xzD7[2wL3=Kz=gd/z!%PdAXo\u003c[Bx0K8wL3=KzVA:SC$hB/rc-B]nP5cU07g)BBAIRnnP5cU07g^rvru6YvqH6$nP5cU06$:HxH(YywmY^ZvqH6$nP5cU0bb}LwmY^ZvqH6$nP5cU07zcxwPh:9z/d%SB8UMfv/", "ln": 1169678 }, { "b": "oLFM\u0026nP5cU07g^rvru6SA=k]dA==N#zF0!!n][]*p\u0026ZF[wPz)rnP5cU0bls.zVA%LA=g@1zVAZLwO2/Xm}D^wx(dB5Byx3908[e:By/qwpgXJ1now@)09a5Nq!6GLzdMmWBz}jTwPI^jA:@VJA=l8t0bD:%08[e:By/qwoLFx:090(nBAh8kxf*AClU{sxASw{Rz!0v1B4*p=wKyctASwBuzE=mGBwls-vR6MWltpsFq!p5BwO\u003e)/ASx@/zdm6%07y^DB-I4*B.$P0ASxDQy\u0026r*0piyz.wPv=-wPRoSwPR%rpiyz.wPv=(wPRoSwPR%rpiyz.wPv=\u003e", "ln": 1170081 }, { "b": "vqFULy\u00260*bwN/T@wod-uA=k!?x(4Q1B7F\u003c1zE^!*m}D^pwPRQ7wod-tC4CMkoj-x)z/Pxf07}rJzCsX:vpS!*vn*-TC4\u003eC$A@Yc:B97#ge(D?fBzkP6e\u003e71{wPh:9z/eG+A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIcL(By/GhA8Qs*C4\u003eC$A@Yc:B97#ge(D?fBzkP6e\u003c\u003cL]Aa%c1A-lK\u0026C4\u003eC$A@Yc:B97#ge(VI8wNPa-zF7O3vrlj9e(MXhA:@W407QQxq/u/0v}xYYuUay(zGF/}B-H#6A@XHoBzk]jBA{/6B-H#6A@Yc:B97#ge(Dn4z/{8gwPE\u0026UB9g#5wD", "ln": 1175394 }, { "b": "D30Rs0afOKCUA3*xjUQuD30Rs0bVd^v}XhOBy/H[p*[x=wKZYUz9\u0026I\u0026wPE\u0026Jz:F.\u003ewPE\u0026wwPQm:By/H[pgXV(lv0V:A@XZwBw=K\u003elv0V:A@Y\u0026:BydvMB-7.#A^o#%By/H[B7GD2lt}0:wmoI7lv0V:A@YMRD30Rs0b2\u003e+uSHPKB.bQ]nm=juwPyZ\u003eA+PA7r://!wPE\u0026vA=k!}vqH6$A@X*Nz/exWA:-/@By/F:zF0//vqH6$A@X*Jx(lEMve", "ln": 1176854 }, { "b": "06${NA+dNCB7EWXw[CQ{B47s}wO#N6z/fQ@o\u003ewfWA^p8#By/uhx(v)g06$apx)aijC%#$1wO#N6z/fQ@q*ACawO\u003c4[x(m]ymr\u0026=(wPI{bz/fQ@q*ACawO\u003c4#wN/\u003e6x([RMp?sV:x(!ufz/fQ@xjVf(p\u003c3k-x\u003e6IDz/]O:z!0i$x(v)g0afU-wPzj3x(v)g08[e:By/qwlVl^SwN/*@z/fQ@uU%j@l3mo/zddK2v]u(Gx(W={BzkVhA@XKvzE^E0xhSqZBAh89BzkT", "ln": 1178033 }, { "b": "wN//Zmq^f?A+e3QygQ)%07y^FzdN-@By!lSygQ)%09shPBy!lSygQ)%090(jvRPE:Bo1*xz+\u003c?SwN//Zm}D^rvRPE:Bo2x.x()]+ByxiipHX6Iv@}Y?vRPE:Bo2@+Byd%?vRPE:Bo3w[Byd%?vRPE:Bo2lJy?m9#0cqZ[uQnHAz*aG\u0026Bz\u003e5*wnc6}v@}YHwPQjOy\u0026sI-B-.L1wN]H}wN//ZvqG:#Cr{v[z=gdSx(W={Bo1*xBx9u}mSirBwD", "ln": 1181382 }, { "b": "wPyvWC42A9vqZe!rbUDGCv+!^zGYDex\u003c\u003e[3090JEvqZe!lVl\u003c-Byx6e08^xCBo29OqE%\u0026\u003cwPI@(wO#O\u0026xjVf(rDz.(l1:+DBo2V\u003cB7GwTxjU$508#s4x\u003eqg70b2\u003e+uQFTzwO#O\u0026now@)lU{EFzGC\u003eCA+eW3wKH9wvrDydlU{EFzGC\u003e*y?WD#Bo2x.x()]Py?mD{zGC\u003e$vru0)mqMKLwO#O\u0026lVM:DBy!/KB8L}+y?mD{zGC\u003e\u003ewPRoKB8L}+y?mD{zGC\u003eMB-.53y?ljWz/e0WwO(0@Bo2lJA+O@#x)Kt\u0026z+t7?zBFwMzdJ", "ln": 1182746 }, { "b": "B7GD2oj-wGq!PPWwN[hqByv*NC(Rh?vqPN^oj-wGwO#0#D2N\u003epwj{GV0aPXJy\u00260W2xjT.EC(QcDy\u0026sI}wN]H}wN/?6r://!wLlPW09a8KAZstHzGF]/y\u0026%qZwQan{vrb^[oj-wG", "ln": 1188227 }, { "b": "C(R]cA::63xl:FyDuBmte\u003c\u003cL$wIct\u003cD2N\u003ezxl4B1xN6ORD2[7sz7X:#v%8*aBA]GaA^qRCz!B90Aa\u003cH%xjVf(l349Uzdmsb0aP?VwO#PQB8$]fvR*q\u0026vrlH3zdmsb0blHNA:-\u003cbAbP=spJ{X/wjZVXwPzV%y\u00261v%xjVf(nPN^vvpSeKy\u003cu1DAbYSs0b2\u003e+uRbrpB-88hzF8)[zEWv2z/fGoB8la4x(^f{zF\u003cfaxh:7[v}Y[3zF%Vsy\u003cu1LzE^s6", "ln": 1188651 }, { "b": "x-J5Kzu9SozVBLMwDlPF0s-(CwDl/LxAh@Jwb(Pmm/U%Tq#=[6pYKF}q#=[8pYKn\u003eqVG+%00#f@mf2QNl\u0026Wh{pYJ=Yq#/n=nb@S0l\u0026YTQoAmGYq#/t!01R\u003c9pYKC{nDqJ^p5[h)01h:aque#.lJxKP00+K+f90T9010rsBo3y.z#Y\u003eCxAibOBo3mW", "ln": 1201004 }, { "b": "0cnc.0b}{S0b?\u003cT0cwiL0aV6glQ}b/0b?\u003cf08\u0026\u003e[08rIp0b?\u003cD0bqHB0aM1J03znM0c!G.0a=du0cwiL0aV6L0cwiV03znP0at\u003eJ0a=cM04d:E7BGh90b}{U0b?\u003cR0a=dJ0cwi^04[lLBYnuO0a=cM0bITH0b.^F0at\u003eF03znZ0bhBJ0a#oO0bhBO", "ln": 1208107 }, { "b": "B8U@7C$}^+wE6[-mn$x?e?!gA02njxv@=Hez!s8llVm0:z/Podx(v\u003e?01n(d2u2bHwNPT\u003e001!Q04#c/awDMWA=l2qw]]d.z/P/nA::67z/dfIl2puWA+Pf1BAnNBwPIB6C4Chp002aZ05)\u003e\u003cx(+zhB0bNrwGUY7Abo95wO#P#BzkVhaA7\u003cmBzbkdl3^V]wGTuRx\u003eqg7aw==\u003ewO=6#wDhYA0rrS+e\u0026tspfFkare\u0026tHAfF\u0026+fgYWOff!Lsqe?!!mgbH^BhEXy1vMuhPhz)B7gbgNywhDk0fGg}2h-rU", "ln": 1255566 }, { "b": "mriA!A-cE\u0026AbPSnwDhYJ0rr%5DuBmte(Dn4AbPSnwL3=SwPyjWA=k%#0cOwyAz}d7By/qwraQq@e\u003eQh6zz1L5z/e0WwO(0@BsXLkD2[7sz7X!0CYUMgB8L}EaxA5]B7]MgjVC5Fe?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARGth!1G$w[CK-ggT{ah8b7hCl4X:q*ACawO\u003c50wQ5qHn][]*e\u003eQh6zBwzMB.$YcBsXLkD2[7sz7X!0CYUMgB8L}EaxA5]B7]MgjVC5Fe?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARGth!1G$w[CK-ggT{ah8b7hCMv!=q*ACawO\u003c50wQ5qHn][]*e\u003eQh6zDpgZB.aiWzE+pvq*ACawO\u003c50wQ5qHn][]*efE#8A=U@kzAP%ifFk4ifF1tlB.(exA+dyKwP-9nvqEFqp\u003c3k-x\u003e6!EC#OY$wO%Uvv(E\u003cKgIglewhmXawhM7w0a=fhu@It(By/qwq/)4]zF7Hyq*ACawO\u003c4$B-8qnzdLmvr+lq)x(v(Li4=)qfFk4gavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4jZ{93w\u0026jfVw?=1", "ln": 1271163 }, { "b": "wJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARC.gIeHRh!B^0whM5HgHQm-gxvF0q*ACawO\u003c50wQ5qHn][]*e(MXhA:@VJwO#71vruj4zvwGSfFk7ne\u0026kHAf/5!firoapl3^V]wIc\u003e(B8V5nB7E{XzE)\u0026SA=M8sd]G@1AbPSnwL3=SwPyjWA=k$=z/f-fA=+(k0015v02X7GB-I4CqE%]*z/fScl$G?Ix8", "ln": 1271878 }, { "b": "02\u003e[V0384N0uIli10mJl10vNT0u?BS0u}HT0v4NU0rr91y?Wv1wN/:(Bs/j1B8JV+0afnFy*?PCf!-O\u0026l3mo.wO#Q7v{%E\u003cl34r?v)jBguOKkmjv9E%B.L(crbVL-zC$m=wO#PQB9RUkk4F2cf!-O\u0026nP5SYA=br4qE%oEl2pvpwQ5q.B9RUkk4F2cf!-O\u0026nmuyDy?lHQB8V5nB7ETUD2vaQwm5X0fAsj9wPQ)\u0026yH}xPze:qSB9RUkk4F2cgb5X\u003cl1s[Sx-", "ln": 2174209 }, { "b": "vqYN^y\u00260K4x(v(\u0026vqH6$raf\u0026-l3D:KBywS{wNEj)s7#+\u0026lT:\u003exwO=f\u003eBzkVhraf\u0026-l3D:KBywS{wNEj)o(\u003c-VlU{EFzGFiNB7F-l08W(IB.a@n06$WKzEVvUv@2dWBzaY-y\u0026%q%f-Ul.y\u0026%q*vrli(f-THXD2va=z!0i(u[?TEA=LPlp\u0026yn*u[?TVwNPaBzFTO%Aa9S(f-THHBzkVhu[?TMlVl^SwN/*@z/e@q07*71vpSeKy\u003cwx^y\u00260V)BzkVhu[?TE", "ln": 2175955 }, { "b": "x\u003eq9\u003e06Bj(zEEB8nN$22uTDcdv@2^@xguPDy?9JdlU{EFzGFDXk5jIjlsBwtx(mMMx\u003eq9\u003e06A?\u003cBy/G3v@#BdwKpAQCxmtolVM:GwO#Q7vqFqEx\u003eqg7nN$22uTDcdv@2^@", "ln": 2186976 }, { "b": "m}D^dB-.qdzGGP5vruj4zC\u003e4Qz/Pv*uVGZ/z/Pv*xjVf(p*[A^Cw?Ij0cqZ[uR\u003efLB9zLywb]Ltv[QxUv}Yp+zB4/zm}DNHA+P2WvrlHlz/Pv*q!oDiwQd^0vqfQGx(mDKwO#71", "ln": 2191284 }, { "b": "B.(d*zGY-mz/fA6zGF]/A+O@\u003ey?lvIzdJYUzGY-mz/fA6zGF]/A+O@\u003ey?lvIzdJYWwPRoGx(4uQvqPMQB7GD2mRMWIpgn0J0a]}YwLMVJwDl^Yz/xn.vqPMQl$G[KAbok#vru6QvqPMQl${ZJvR/QIB.(elraP@QzGFf!BzaP%x()\u0026#pgn0J07pKxvpB4:lR]HaCX7xcBzkVhq*h}$v}XRCzdJYnx(^Y(y?lgQBy/G3v@#BdwMit-wNPa*z/oCXCX7xcBzkVhq*h}$v}XRCzdJYQAbXf.zGGDmq*h}$v}XRCzdJYWwPRoGB.\u003e\u003e?vqPMQz/xodvruj4zCBRSwDl7IA=l8tpgn0J0bVp?vpS!*vmT%rwmY^RvqPM", "ln": 2195265 }, { "b": "vru5Xv@b\u003c\u003czGFlSA==2cx\u003e7N[wDljKA==2cx\u003e7N[wDk2sBzbl6Bzkk[By+CLAaAy0wDkXIC%=Q-vru5XlVM:DBy^\u003cKy?ml/By+CDB.(elv{%C2l$HgCxjk)[07?3Dz/P}@yH.ABp\u0026Zn[vru6NwQcWPy?ml/By+Czze:AlBwN0(C42G7oj-xpwO+{\u003cvru5XxjVf(rb#zSwM9XVBy+Cvwncd7AZB!+Cxmh4y?lK!vru5Xm}D^dAa9^ezdNQbq/(C\u0026wDh", "ln": 2197436 }, { "b": "BAzLqvS=^706$WEwO\u003e))C%=H!Aa9Tfl3di?x\u003c#jbwDkRJzGGPfwKyxMAa9\u003c5vRGT)BA{e]BAh88B-.f{B7GD2rDz.IxK#0@mr\u0026xNB-.f{lv0V:07pyrB.bYb07y^BB.bYb0ax$\u003eA+P09By^gcvqH6$0ax$\u003eA+P09By^jdvqH6$0b2\u003e+uSHPKB.7L]wPRoWvqH6$06${NA+efWyG1.YAaJ6Uy\u0026%p?m}D^rAZK\u003eUvru6YvqH6$0czTZr://!wDkkiBvf$:w[+(", "ln": 2198910 }, { "b": "wPRoPx\u003egZKwPq\u003c7B97A5x-Ji=Byd*TwmFIGADL\u0026lBx9u}0b2\u003e+uS7DRz/{8gwM08VB.bSorDq^NB-If@p\u0026{.Sz=p:#x(mMHzGxH(uVQHgv]3MG077Zqvqt\u003ceB9RUklT:!EvQS+Z0b2\u003e+uQOEGx\u003e7Zwz!9ADvqG:?vpK6MB7GD2l$HKQv}w2CwmXbpy\u00260M?v}#6PwP?=$wKyxDwKx)xy*{*.yxdsLyH}xJvpJ$ZlT:!EvQS+Z0cqZ[uSgJRC4CXYwPz\u003e", "ln": 2200943 }, { "b": "wPyZ.wO=e.B7GD2rDz.BwOkBYC#eB6wPyZ.wO=e.okeiU07QQxph+2sze:Pxq/)4]zF8:=piyw?07gBhv@1?TBwu%{yYD+xB7Gxlph+kHB.\u003e\u003c]l349UA=+60y?%8W", "ln": 2203474 }, { "b": "x\u003c\u003eE!wMiOmz/oB(nP5SYA:-E1x)a5NB-.qdzGGP5vruj4zBF!Yv%8)czF8:.ra{q-vpShMz!]zwwP?=$wKyxDwKx)xy*{*.yE@wZyYD$pBx0f]wO$7RAbkIuAbX={yH}xWA=lbnwmY^Mze:p\u003elsB}Dhz!AOyYEyxzFsibDsZ8%yYF9VBye6WA+Pc1v{%E[z/b", "ln": 2203597 }, { "b": "zVAZEA+O@#x)Kifx(v(XzF0!!lVl\u003c-BAhIlBz(g\u003ezF0!!xjVf(q/(C*Bv*vZzVB\u0026\u0026Byd%*vrcDYzF0!!m}D^dDuBmtlU{EkA=kD0B8$o4vrcDYzF0!!m}D^dDuBmtl$HKMy\u0026so7AZKUSp\u0026ZF:wPI]\u003eByxiinP5cU07QQxl3^V]wL^q?wPyZ.wO=fVA=kD0B8$o4vrcDYzF0!!Ab](bwPI]\u003eByxiinP5cU0crl\u003cA=:(\u003cw]vV-zF0!!B6\u0026D?A.gd\u003cwOkN{t4I.)06$:HzVBcOvpJ$Zl1szoB8$5:z#-*Lx(B5tvpJ$Zrb3hXB97\u0026cz#:l!x(dB5Byx3908[e:By/qwpgXJ1now@)08)#FA=:/.Bx0e", "ln": 2207224 }, { "b": "A+e6=Cv+![xK#0@o(BM+y?lvWBv*v\u003eByx04wN[kIA=k%#p\u0026yL?A-lT.y?#\u003c+Bv*v\u003eByx04wN[kIA=k%#B7GD2qE%xMA+e:5q/(C=wmoH?mriA!ASx--BydNXzeq{TB8$=5wKQSWz/L\u00260wPRoIBzU?*wPI{3xjTILA=k%#o(\u003e2GzEEY%x(4i!y?l4QA=k%#nN#yIBzk\u0026xrC(k*vqfK^vR/QAA=M8s07ZKownC*CA=M8s08vDgwPI*ezGxwTA=M8s06$mgA+e((By^)YAS", "ln": 2210368 }, { "b": "wJS{Qe\u003eoF{mq^l+wPzj3z/L?RD2[7sz7Xg]y\u00260V)BzkVhB1Q3MzGP/cA:-A[wIcF:Bvy7\u0026zdN-@Bz(g1l1t1JC42GhASv.4Bz(g1e[nykz/L?FwPQpTzGx]uBZ]JiASw*LzFsihASye\u003cxK#3?p\u0026{ZTAa9*eCw?Ijp\u0026{ZTwPz*fA.{\u003c#0aQ4XwmYU2x\u003c\u003e?0p\u0026{ZTnP5SDBAdw5BAdvWwN!UXvruTklVlHDph:6Nv}XeIBAdvXvrc0(Bu%.Sve", "ln": 2211003 }, { "b": "xjVf(oMaMRwN[tyvpS}\u0026pgn0JA@Y\u0026:Byd%Rz/xoe0cqZ[uSgDMAaK7\u003cuT)+-y?cEOz/xoe0cqT*AaK7\u003cq*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPGE\u003ez/5E0AaK7\u003cm0SVUze0G*y\u00261w.v}f7\u003eB7F(RwO\u003e)/A-vs6wPE\u0026uze:Pxrc-B]A@Yc:B97#ge(Ms\u003eB-IhrC}IE8D2N\u003ezxl4B1xN8jjh843TwPz)bw[+:-By/H[l3di?x\u003c#jbwPE\u0026WBAzLqvS=^7A@XHpwkc=QB-.ho07I0Ezb1Z", "ln": 2212061 }, { "b": "BAhU5Acb/jzGt!#wPR%rpJgz\u0026z/fQ@xjVf(nP5ASAZ+j.wPh:9z/fQ@wQ4Y@Acb/jzGt!+z/x/jz/fQ@m}D^sA=kD0B8$o4vrcDYzF0*d0b#%%v}x.5q/(C*Bv*vZz/U[\u003ewPRoDxKL}508[e:By/qwpgXJ1now@)e\u003exLZwmY!50b2\u003e+uR1:pwmY!50afeJy\u0026sJewjQouwmY!507.iNA8Hm*AbPSnwK{xvwmY!50afLXxf*uInm=juwPz?(now@)nm=juwPz?(", "ln": 2215068 }, { "b": "q/(C\u0026B-P]*wmXXZv}f7\u003eA@Y\u0026:BydNXzeq{TB8$=5wM9.Yv}x.50cqZ[uR2oQy!XFZB75Y)q/#OWwPI[)q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@\u003cn0A=kD0B8}sMp\u0026ZF:wPI[)q/(C*BwN0@v}x.50afX=z!0v1A@YM?x(dB1B-Y#)A@XHFBAh88B-.g]vrc0(BAmBRvqfQFC4CMkq/u/0v}wRWvqf?80b2\u003e+uQnjkx([6czEEu$C%Mm.z*b=6raP@QzGG}1B7GD2l1BIuBzkVhvqC", "ln": 2215634 }, { "b": "rb3hXz/{d4B7GD2lVM:GwO#Q7vqF+Xz!0v1B5V\u003c\u003cwP8Zk0af?ZzdNTdBo2@+Byd%*vqYQ:A+4:VAclm5B7GD2qE%xMA+e:5q/(C=wmoH?nP5G\u0026Bo2V*wN]H}wN/*XByx5$vrb)IzG6-u0cqZ[uS7DCx(W={Bw)o\u0026zE^f@wkvt\u0026Aclm5l$HBJA+O@#x)Kt^B-.OBBo3l4Bz#wA08mxPwLM/YBo2l+B97#ge(VzbBo1{Oz/e0Yv@C)?wk)b+Bo2-Wwncd1z/f01o\u003ewx!vp%dJwQ5p%qE%oEl2pvpwQ5p%pJf(.raQq@0b2\u003e+uQF:HBy/Ys08)DJrb#zSwKyw", "ln": 2220138 }, { "b": "wmPmZs7L\u0026wx\u003eqF*s7#+\u0026rDz.uzdm6!wmYpMwNXXOwP[b}wN/:(Byf90xK#3?uV6C00b2\u003e+uSzhTph+sRB7GD2lVM:DBy!i=s7#L.z*8gJvqfKVA:-]MzE=ZWA=ld4o\u003c@nDy\u0026r*0nP56ICMq8+zE^s60cqT*AaI{UxjVq/lT:K{zEE0\u003cwN[epv}YBLB.kl1CMp9twKHlNvpB4:wj6^nxK$a+w[C+407pygvrDydq/#X:x)oRNA+5:4lu@MzwPRoEwO+!20cn", "ln": 2220557 }, { "b": "rrc[pA@Zs.z#:?SzVB!TBo2\u003eLwb).LpYKb*lJy3+blfX6aoj!fve$xHve{ozlJxKPqufU@nDqiWnDq9Tk(:\u003c:mf0r7pYKw[nDq=\u003ek(:\u003c:mf1Cgo8}xXsPwC2q#*OiwDi?Mv/Q6uASygYx-I-Bx-ISyve$xHwDi?Mx-JhOaollUx-JhOA@Y[OzuaqHaolG-xAhP", "ln": 2223444 }, { "b": "zua8Bx8(Gywb]%px-IVzwDlPFBo31PBo3N^uJt9DwDlYIBPt$MA@ZpZuJsWrve$0wyYF2Dwb(Pi3ig5zv/QrBx-IYAzua+UqVHwev/QJHwDl/L03+[LBPuH-xAh@JASx!NDh}vNBo31PzVBUPlJz38wb{fv03MmXz#:$Wx-J5Kzua.Te=X\u0026JwDlPFve$fBBo1(jwb(PopYJ=Yq#/C?0bD0yDh]5/ve%^qv/QAEBPupVBo0A-x8(GyBo0()ve%^qv/Q6uA@ZmYeDx\u003e)zVBLMwDlPFaoi$[eDxX?BPuH-z#+1XBo0A-y5\u0026qPzVBUPaoi$[eDx!\u003e", "ln": 2226168 }, { "b": "0tMZSeDvv5Bo2\u003eLzua8Bzua+UaohA!aoi$[eDx?(BPt\u003eJA@YXIASx!Nz#:$Wx-J5Kzu7^Va]?SCa]?PNv/QuCwb[jZwDl@PwDhYvf92I.aoj4{v/NRKa]?PNf92CYx-J2Jf934[xAe2seDxnXaoiO=0t/eAv/Q0swDl=KA@YetzVBLMwDlPF02o5BCMqW.x-JeNwDl=KuJt0Azu6UIwDl@Pz#:OLASxUJA@X#ozu6U]C(S9\u0026C(S9\u0026eDwG", "ln": 2226444 }, { "b": "w=M]Maoksul\u0026Y\u003cWA@YCBk(=ihBPuBZwDk%nlJx^WnDpHCtMw%FvGp9xzu6U\u0026f93a{A@ZjXf92CYx-J2JiSH/kBPuE.ASv-)yYFwNv/P{qyYD9*vGp9xzu6UAf92CYx-J2Jf8$$}ve$PNiSHMde=Wv3dfak=zVB\u003eVaol0NzVB[WzuahE0d:9e0b8vz03znX0ce6T0cOuR0aV7v0aV6", "ln": 2226768 }, { "b": "0b?\u003cM0a=dF08-/d0c50Y0a=dK0cwid0b?\u003cP0cwiL0c!G=04[lKa.Q\u003c$0cwiW06g9k051s*0b?\u003cE0at\u003ez0b8vJ0cncZ000gp0aV6f4@RC!0cwiP0b?\u003cP0cnbukw*Ef0bRZE0b?\u003cH04m?S0bITH0a=dF0cwib0cncY0a=dJ0cwiP0b?\u003cP07c-{0bITK0aC}p00", "ln": 2235091 }, { "b": "k(:NUoAm\u0026*r@+U?l\u0026ZM]q#/t!p5)MWp5[k[qVD!tk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJrT$l\u0026Wimk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJs18mf2WPqufb=q#=[Wk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJrB[mf3i=q#/F\u0026mGu0WlJxyLq#/t!uJr[5k(:\u003c:nb@SSk(+6*rrb[%mf3V{lJx^WnDqfVp5[k[uJrB[mf3i=q#/F\u0026mGu0WlJxyLq#/t", "ln": 2239760 }, { "b": "0b?\u003cP004pg09Pw508-!=0abZ$07l/Q08rI[07^e\u002609Gqe07l/U08\u0026\u003e-073VV07u({07^e=08@}!08-!.07c-=07^e\u003e07u(O08-!)09oe007u(=08@}?08-!=06{PM08JU\u003e08AO*07u(\u002607u(P0961#07^e^08rH]gEh1!0cFoZ0a=c.07^f30a=dF0cwiP0cw", "ln": 2240531 }, { "b": "l\u0026YTQp5[k[nDqY\u0026sPz!el\u0026Y^UqVG8-li6WVmf3V{o-Oe[oAn2(nDqY\u0026mf36.k(:TWq#/h:rrb$#nb@SOf92??wDl/Lve%*rve$xHve}}Xx-IVzwDlPFBo31PBo3N^f92[\u003cve$AIBo2$Og5@%cBo3jVyxd]Czu6UMve$lDx-GZ+B]V7NASydXx-J5Kzu6XLg5%0df-TfkeDvE8g5@)afAr*c0tftLwDl=KzVB[WASxOHwDhYzv/QrBx-IYAzua+UuJs^uwb(PAz2!RSx-GZ+ASxUJA@W=(x-IVz0txwKvGpcywDliuBo2UFx-IVz01?{9wDl/Lve%*rve$xHve{oNnDro3wDlPFBo31PBo3N^aoloVzVB\u003eVaol0NzVB[WzuahE0bDlFBo3y.z#.{0f90T9f-T9iirgVig5%figYPcdf-T9iirgVig5%figYPfez2!bEBo2.Hwb{3rBo2.Hf92X^wb{fvzua+Ux-JkPC(PF$zVBhCBPuH-xAf^/f937]zVBLMwDlPF0cHNczu7^VwDl-JASy1TASviZCk#4KA@Wr.wDlPFv/QAEBPupVBo2\u003eLASxUJwb).LCk#pRx-I@HwDi?MASxUJve%*rx-J2", "ln": 2240856 }, { "b": "00uHb06a0UxAhPzaolfSwDl#Qv/Qfxve$0wzu7^Vx-JhOaoloVzVB\u003eVaolM+ve$9zx-IVze=W0]tl1T$k(=3cBo2$OzVB!Tx-JCVve$xHx-J5Kzu8r\u0026k(=3cBo2$OwDlPFBo31Pv/P{qBo31PzVBUPaol0Nve$0wyYF2Dwb[jZaokQC05WZQxAhPzaol9QBo2\u003eLz2+WUve$9zASxUJve%*rC(O@!wDl@Px-JhOBo3vZe=W0]tl1TZq#*OiwDi?Mx-JkPwDlMEaok)Kve$fBzuaOPBo0A-vGl", "ln": 2242078 }, { "b": "wDllvwDlPFBo31Pve$9zaok*IBPuH-xAhPzzua+Ux-ISyve$xHx-J5Kzu7^VBPupVve$DJve$0wyYE(zvGpiAwDjs.aokdpzVy)WASxUJA@ZdVzVBUPA@Y+KaolAZwDliu", "ln": 2258722 }, { "b": "x-I#IwDllvaolrWBPuH-0d\u003e!Y0b}{H0aM1y0a(jR0bhBJ0a#oO0at\u003cI0aM1B0bhBA0b.^U07^f303znW0ce5Z0ce6J0cncU0cFoZ0aM1u07^f303znQ0cnb.0b.^P0cwh-", "ln": 2259543 }, { "b": ".HbZ@Z:9T[MSJWKn1dsb!(W/aQk:PJf$vL/gf$*d\u003e\u003cnGM0rr93dGxOK1onAqeDvv5eDvv5eDw9qmf2*TnDqG=aoi3a04!g504!g507u(.07l/f017pTeDvv5eDvv5c[$YO05sKb05%%n05ay905jEd05BQj05KWo04[ma04[ma04[ma03Tb$e=WTbe=W\u003chgYN", "ln": 2279494 }, { "b": "wh(C7wI^}bgH@ENiwAxCfL9aJv}5$5wN]yZvR64TvkoJBh!3qTvp.wOh90E6vpq97f!)b]004N+0rvWYm0SVUze0GRA=lhFm}DN7B8$]fvR*rBefE=ivR/:*oj-xifFCmsfFCgmfF\u003e:yfFCgmiw-AzfFCgmfG7QufFCgmfFCmsfFCgmh8m3Bg+*^vfFCgqfFCgmfFLmnfFLmnv(l84v{@\u003e6h^{faixpOewmvqHhdZwPw\u0026scUvkx!}gg\u0026sKgD3{B", "ln": 2307523 }, { "b": "l3^V]wIcL+wO#Q7BA]GkB75(LvpJ$Znm=QRwPy\u003c)vq{f%AW%mzzFsibvqGU7wKgx.zEU\u003evuTCL*06gbXh9(LhA+c\u003c{wmYU2x([RMo(\u003c-VlU{EFzGFiNB7F-ld)cskBvf\u003eUwO#PQB9RUkk4F2cgbYajiroapl3^V]wIcL+wO#Q7BA]GkB75(Ly?WD#Bv6zSwNEkyjv-$8rbVL-zBm\u0026xxK%wruTCMG002H\u0026075$$B-I4CnN#yIBzk\u0026xe\u003e{y}y^SbUw[+^!zGGP3y^S2MwO#Pujvsd2vru6Fy?WD#Bvf$!wKgx.zEU\u003evuTCJF002W[07Pt3B-I4CnN#yIBzk\u0026xe\u003e{y}y^SbUw[+^!zGGP3y^S2MwO#Pujv9E%B.L(crbVL-", "ln": 2320789 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.i.hGU20000000000[bKTP3JZXo001[S", "ln": 2490304 }, { "b": "y^8rnuPy8Mg5%Bzj#DXOg5%BTv}YB\u003cvlMLQuORQzwO#0#D2N\u003etz/d%KByvu\u003cuTCL*jy?(xvlMLQuORQzvR/%)yE@52hd6YC06CpkvpRLVuTCL*jAt1yz/PwLhd6YC06CafB8$=5wJ*", "ln": 5446978 }, { "b": "hd6YD06Csox\u003ezDJhd6YD06B.bz^(aMCw.knvpSqUA+eV@x(mMYwPJ0gBuRM?uO.WAB97\u0026hBuRM?uO.WAv}/)}wPz)7CYVbbuTCO?jv-$8p*[x^x([6czE)uUAboD3wmY^FwOtH}x(w3kk4m(agxoKqAaAy0wM9XVBy^:VD2vaQwm5X106Bt6x()]=z:wC\u0026zEU\u003evuTCO?jv-$8lVl{?l3mo.z/PMrvruj4zB!tEwmY^EB9RUkk4F2cgxoKnwNL", "ln": 5449632 }, { "b": "zEU\u003evuTCSF06B4@wO$N\u0026x()]TzGGDgzEEuBwm5X2huk\u003cfwPQjFv@DHcBv*vZz+j?*wPzV%y^8xpuO\u003cUvlVl*XB-.g=o*IcBni]0*hul3iq.*i*0b2\u003e+uQF%SBz(2cA.{^{C4\u003eF#wj{GVq!PO{h8UCQwPRoDB-RUyzdN-:A=lbnwmYpAwQdi/vkoX#0aQd)Bz(2cA.{^{C4\u003eF#wj{GVq!PO{h8UCEwPRoFzEWZjAcb/jzCaL^q!PO{h8UCQwPRoFzEWZjAcb/jzCaL^q!PO{h8UCCzEWZjAcb/jzCaL^q!PO{h8UCEwPRoBwPHjFv\u003e]]10b2\u003e+uQnmAm}lx\u003eh8UC2wPGQ:huk\u003caA+eV{oL4TNwKgx.zEU\u003evuTCVG06AU/CwW", "ln": 5454282 }, { "b": "B4{j/vpS!*ve%kqBwls*vpS!*ve%UKwPRu\u003evrt]TwO#0#D2N\u003etz/f8]ByteFD2[7sz7X[3vGp4LBydvJz^\u0026Y/wPRoCy\u0026r+.rD8+)vpRYvz^\u0026YjAbYxawi$9JvGokkxjTzCz^\u0026YmwO.", "ln": 5460385 }, { "b": "vqZf+wNP9Hq*ACawO\u003c50xMvV)wnb{]e(VI8wNP9HoMauI0b2\u003e+uQO*RzFTl1wb]eeB7!oZB8tucv}XUQq/)4\u003evqPN^l#No!y\u0026r-)07ZKownC*MzE(:Wz/!x=Cw.kn", "ln": 5466341 }, { "b": "zEWl]wN\u003e^qvrcB6zF8HZBz$b^zF9JIvqfK?wb]CmA=U@jxgv2Wy!eU\u0026A8HaZxjTLvx(4u\u003e08N9AB7]J8lVl\u003cWwN/*@z/eG}A+PA7mQZ1EwN\u003e^nvrccMvqfK?wb{mNBydsRBzbl6Bzkk[BzkVhmQZ1EwN\u003e^nB.\u003c()y\u003cx2#A=k=gwN\u003e^bB8$]kBvy7\u0026za4@Ex(mG)07?l0z!%l3v@#B6zBw5Fx(mG)07?l1wObT]wN\u003e^NwPRoJB5^9*wObT]wN\u003e^cD30Rs", "ln": 5467322 }, { "b": "jwog9wPI@SyHpBnvpK7!zF8BMwO+(Sjv%BlvqGT*ltQNIyFnC-BuTFEuQwghyIvW0mRMBIwb[.=wNPT\u003eoMa#]k5jIjlsBwtx(mMMx\u003eq9\u003e06B4@wPzj3x(v(*x(dA(pJZ+yyx", "ln": 5484514 }, { "b": "Bz(2cA.{^{C4\u003eF#wj{GVk5jIjlsBwtx(mMMx\u003eq9\u003e06AX/v@=\u003clBy!#QwQcEPuTDcdv@2^@xguPDy?9Jdmq=QQD2N\u003etz/eiVC%l1JuQwghyIvW0mRMBIwb[.[A:-{awN[eDzGGDcBw3g\u003ck5jIjlsBwtx(mMMx\u003eq9\u003e06A!XB5(\u003c)B7]MgB5cW\u0026C%l1JuQwghyIvW0mRMBIwb[.-zEWY#zdNQbvqFqHAcTS.uTDcdv@2^@xguPDy?9JdnPNEvv@=c$wD", "ln": 5485138 }, { "b": "A+P5}0cAl\u0026zGxA3A-MQ+x\u003egT]x(v(+C4CYmx\u003eg=PwO#0#D2N\u003etz/eu\u0026BzkVhB5c%\u003cA=L(8wDkXFnmuNMlVlHD07QQxnmuNMlVlHD0b2\u003e+uQY0Qz/Oi-wmU:cy\u0026r=KA=M8slVlHD0b2\u003e+uQF:JC#FT7AS", "ln": 5487522 }, { "b": "zdJYnwObv[y\u0026\u0026l\u003cwO\u003em:z/xodBA{R\u0026zdJYOx(){6p\u0026ZF[wPz)rpgn0J0b#%%AaK6iC$}^+wDl7PvqPMQqE%-OzdJYVx(4u#vqPMQxjVf(rc-B]zEEx[0cAH9wO${[wDlvOByd%RxK#3(0cqZ[uSgDFwO\u003e#Uv}Yp!y?mG%wM98LwO\u003e#Uls\u003cOCwPyZVxK#3(0af!SxK#3(0b2\u003e+uQOEwwPRG]rb3hX0aYUSwPRG]rb3hX08)DJmq=Tnx(9", "ln": 5491880 }, { "b": "x(v(/v@Dr$0aYUMvrDydmq=QQD2N\u003etz/eG-z/xm/wO#0#D2N\u003etz/eG-z/xm/lVM:DBy!0+Bz%@=B8$=5wL^z=AaK6ix\u003equ:v@Dr$07g^rvru6GwObv[y\u0026\u0026P=z/xm/B7occwDkwmC%#P", "ln": 5492772 }, { "b": "y\u0026%q*D2Nr{l3vo!p\u0026Zn!x([6jwMi}]wDkXFl2}0:CsDp.wN[wIBy/GgvqF[*AaG2ZwPRoJBy/q*D2Nr{B7GD2nPXJXrc-B]0afCZwO\u003ey(AaG2rzEWZjAcb/jzB58Kz/PMlxL*Z]AaG2nC5?H\u0026zGP!}D2Nr{wO#Tcrc-B]0b2\u003e+uSp@VwO$E)AaG2wB8L}}z!\u0026{4rc-B]06$^Gz=HW?z/eK1AaG2Gz+K.JB7E:ZA::67z/eK1AaG2nC5?I2D2Nr{", "ln": 5493237 }, { "b": "D2Nr{q/MRJB.bPsrc-B]0c9c)A^pSfAaG2\u003eD2Nr{q!PPWwDk8oze-{7wDlvOBye9.wPztZCw7MdwDlvOByd^OC4CX.CYmwqwDk2aADL#owDk2xB-I4ClVm0R06$:HzV", "ln": 5493761 }, { "b": "x\u003eg^zzEWZjAcb/jzDps?B7]Mgq/)4]zF5@Gz=QB\u0026B7]Mgq/)4]zF5@)wPz\u003caz/eG}A+PA708)#TA:-P(lVl\u003cWwN/*@z/eG}A+PA70aP}+zE)s1x(v(/BAh8kx8\u003eqqzGYPiBx0fSBAh8kx8(ySz^(WOxld0[A+PA7090(ovp%TWBAh8kx8\u003e[Hp?sV:x(!ufz/fR{BAh8kx8\u003eCkBw)p4x(mL-xjVf(l1:+DBw)p4x(mL-m}DNHA::63l1:+DBw)p4x(mL-", "ln": 5504242 }, { "b": "wNPX6A+ef[x()\u0026#090#:m}D^vCwheexAgOqxj}oTwPRoIvrl8Zv@Dj6B-.h9nmuNM06$NywO#3Hvrl8ZlVl*XB-.g=vrl8Zm}D^ix(mu}nmuNM07QQxmRM:Gy/tB@wNPBDvrl8Zm}D^kvrl8Zm}D^fB-IIlzGFATB7+L^wPRoDz/fVdzGFATB7+L{wPRoDz/fVdzGFATB7+L^wPRoCy\u0026r=Iz/fVdzGFATB7+L{wPRoCy\u0026r=Iz/fVdzGFATB7+K", "ln": 5506010 }, { "b": "z!0L.l$HBJA+O@#x)KtSy\u0026r=Hy\u0026r*006$NywO#3By\u0026r*008)#FxjTzCz!0L.mR)i*xHVYNvqFnDz!0L.rb#z+B7PuhzankSvqFnDz!0L.rb#z+B7Puhz9\u00265Sv}#6Kx(){6B5DN^vqfQ[zF8KUltQNIyxdsOvqZc#z/PXXB-.qdzGGP5vruj4zBeeTv}#6SwPRoJzGYD8x\u003efLDz^(H.ltQNIyxe6^wmZ0!x([35zBnL!A+fcgltQNIyxd*Wz!0L.xjVf(lT:\u003c", "ln": 5508483 }, { "b": "z2=}tx\u003eqg7q!Y=Nmq=QQD2N\u003etz/d\u003cSxk.*8BzbH\u003ewO#0#D2N\u003etz/d\u003cSxk.*8BzbH\u003exjVf(oj-xIA:-]My?EWbx([390cqZ[uRs%Qs8}.*l2pgLA+PSez2^{UwQdu$vq[IGxk.*8BzbH\u003evqGM", "ln": 5514960 }, { "b": "wN[eGD2N\u003ezxl4B1xLy%QA:-\u003cbw]zZb07QKol3mo.wO#Q7v{%E\u003cwj7x.Acc2hA:-{2x\u003e7a.vqZc#z/PW{nKEJzAcc1$A:-\u003cbw]zZb0af?*vqZc#z/PW{q/#{SxjVf(p\u0026Zb:x)1m)ze0)4zfoW}zddW6zfoW}mq^l+0b2\u003e+uQFHrv@3ddz2^{=B7Gw*A=lbnwmYpsxK$W?B9hs1xjVf(p\u0026ZbSvqGB@y*?A%wj73wv@3ddz2!S*Byd\u003c+wN/d+v%8P@By!#I", "ln": 5515167 }, { "b": "y\u0026r=Iz/fV9x(mH5B3T\u003e)zEV4Ly\u00260V)BzkVh07QQxltQNHB3+dyx\u003eqr[A:@^dl34r?v)+fJy?m9#x(v\u003e?pgn0Jr://!wKyxLy?m9#x(v\u003e?zEEx[r://!wKyxLy?m9#x(v\u003e?uVYZ?lVl^SwN/*@z/bLBwPQsOvp%E@B98baq/u/0v}wtFzFIQTy\u00260V)BzkVh06$apx)aijC#Oi+B3\u003c\u003eZy?m9#x(v\u003e?rDq!JB.bPsp*[xMzf56.y\u00260V)BzkVh0aP}-y?m9#x(v\u003e", "ln": 5520289 }, { "b": "z/ec:w]vVJA+PSbmq=QQD2N\u003epwkV#Kx(v(XzF0!!wO#0#D2N\u003epwkV#Kx(v(XzF0!!xjVf(nP5YWy?WACB-.qdzGGP5vruj4zB[.TzVA7AD2va/AaK5#BzkVhnP5cU08m3wvR6NKzF0!!rbU8", "ln": 5522647 }, { "b": "BzkVhB1Q3MzGP/cA:-A[wIcF:Bvy7\u0026zdN-@Bz(g1yiarhl2}0OC%#Q[zdN-@Bz(g1uUaa$zdN-@Bz(g1qEKDNz/5l(zdm6%m}DNHA::6dASv.4Bz(g1e[nykz/L?+A+frmy\u0026\u0026P!y?m9#z/L\u00260wO+{/Bz(g1o(B]-Bz(g1ltQNHlU{EFzGF/\u003ewmXeuv@=\u003clBz(g1lVM:DBy^\u003cKv@=\u003clBz(g1uU0.TA^qRCz/L?HlU{EFzGF/\u003ewmXhEv@=\u003clBz(g1ltQNHlU{EFzGF/\u003ewmXhEv@=\u003clBz(g1m}D^fy?WD#Bw():wKQGDA^qRCz/L?BA+eW3wKQGDA^qRCz/L?+wO#0#D2N\u003ezASxV\u003eASw*xCU8BZwMiwXwLEjCl3^V]wIc]6z/Po0wIc[\u0026A@Y\u0026:Byd%PA@Zn)Byd%PA@YcEB3\u003c$VwmYU2x\u003c\u003e*QwPq\u003cbA+fq(A+OP?BzbPnBw(Q?0af!QA@XHLB-I4Cq/(}#vp%d7ltQNHA@Y\u0026:Byb", "ln": 5528493 }, { "b": "wLWhhz/6DfwPRG]mR(HCA@Y\u0026:Bye0/vpJ\u003ery**%$06$apx)aijC#O/)v}wbCvp%SYw]7)*A@YM?vp%SYlVl\u003cWwN/*@z/eG}A+PA7A@Y\u0026:Byd%TBAzkmxla5]wPRoTwPS3dzFa1\u003cA+flkx(W=}q!p5)x(mN80ax$ywNPU4pI%-xwPS3dzFa1\u003cz/x/jz/f01q!p5)x(mN808N9AB7Fo(A+PA7nP5S*q!p5)x(mN80cqZ[BzkS9A@YMTx\u003c\u003eT(z/Z2mv]Eq*AS", "ln": 5532592 }, { "b": "wMiO-wO$7SBy/ui0a]}YwM08VB.bSonP5SYzGC\u003eTlVl\u003c:wO#O\u0026xjVf(lVl\u003c:wO#O\u0026B7GD2lVl\u003c:wO#O\u0026o)7n]x(EH3BvHg?za4/Ovma%JBy/ui07p:HzFTl1wj7oMBy/ui07/N%Cw.knvpS}WlVl\u003c:wO#O\u0026mSir:rDq[AzEWP}wN[eDzGGDcBo1:OBAg/1Bw=W\u003eAbPSnwKyxNBy/ui08)#Wx(mMJz/fVdzGC\u003eSBAg@3z9@kVBy/ui08)#FBAIT(z!9AOz:OCXBy/ui", "ln": 5547767 }, { "b": "za4/OvnZVRB.bSolVl\u003c:wO#O\u0026q/)4]zF8\u003cUADL\u0026lBvf$:By/ui09abMi7!mgzC\u003e4=B.bSolVl\u003c:wO#O\u0026lv0V:l2}0OC%=H/By/ui06AC3uTEqYzGGDcBo2x.x()]+ByxiimrSlWBo3h!zdMmLzGC\u003evj#lLMAa9x\u003cq!ZL?nnh%-0cq\u003e2wK{JMBo2\u0026.y*?PWx(n1)xjVf(ltQNHmq=TPz!T9h06z@0uTDfszGx]uBZ]IWy\u0026r=KzE^Z8x(n1)xjVf(q!o#)", "ln": 5548047 }, { "b": "B7/Gl0b#%\u0026C5}LfAc2YhBo2@+Byd{:z/+#1z/oZ$l$G\u003eGD2N\u003c9mq=QQD2N\u003c9xjVf(q/(C*Bo3w[Byd%*vrcC\u0026x(mA%B-RnuwL#@OxjU1-vrcC\u0026rb#X\u0026q/(C*Bo1%BC#F/[A=.p%wQdh", "ln": 5549138 }, { "b": "zEWZjAcb/jzCaL^099#Gvru6Fy?WD#Bw():wLlPWmq=QQD2N\u003etz/eiVC(Rh!wQcZZv@=\u003clBzkVhoj-wGwO#0#D2N\u003etz/eiVC(Q]^vq[\u003eJC(Q\u0026ZCxdbhoj-wGqfuC\u003cC#d{\u0026vqPN$wPyBPC(QoNA=k$\u003ewQanyz/fV9x(m#+wQan*wPRoXA:-{awN[eDzGGDcBw3g\u003c0cqZ[uSRnRAbYx0lVl\u003c:wO#P.wQanzwP?0]z/PzPv}fC1zGFJ.C(Rn.v@DHcBn", "ln": 5554504 }, { "b": "0b?\u003cF0bhBB0bhBA0aV6Y0cncO0b.^D0a=ch9E4Mo0bRZS04!g)0at\u003eu04!gX0b?\u003cW0b.^U00a%404!g/0cnb(0a=dF0aM1H0c[M-0cwiP0b?\u003cP04!g^0a=dQ04!g(0b8vv05sKi05:/TiD$JQ0bRZS04!gX0b?\u003cR0c[L@0cncU0cFoZ0aM1u04!g(0cwiH0cwi-0cnb(0aM1E0aV7v009yo0b?\u003cO0b}]r6(r}V0c!G:0a=dK0cFoT0cwiZ000sC0cn", "ln": 5579787 }, { "b": "z2^#A02X65v/Q0swDl=KA@Y2pzVBONx-ISyC(N*LqVH[tve$rFBn#pImf4Mjz#:OLASyv+02nrgwDl-Jz2!nIA@ZmYx-J5Kzu6UEoAn#hx8(MAx-J2Jx8?]xrSDXhAS", "ln": 5588130 }, { "b": "0b?\u003cP03znW0b}{W0bhBK0b.^T04[lLmmd5-0b.^O0b?\u003cV03znM0b.^D0ce6+0b}{W03zn=0bhBP0b8vJ0cFo-03zn.0b}{H0aM1y0a(jR0bhBJ0a#oO001lw0a=dK0b?\u0026", "ln": 5602267 }, { "b": "zVBkD6NfQf0bRZS04!g\u003e0at\u003eB0a#py00UZ?mf3l^9ZY{v0at\u003ew0b.^J0b.^H08iDi0aV7v07N2R08iCglJy^1ve$0wzuawJzuaqHo-P8iwb{fv6Hz^!0ce6+0b}{W04[mZ0bITK03BMcyYFLSwDl-Jzua8BBo2\u003eLnc0MdA@ZpZo8@J6C(Pr(0a=dK0b?\u003cW0ce6H0a=d90b?\u003cV08-/d0b}{O0bhBy0at\u003eH0a=dv00FI!000cQ0rrack(=ihBPuBZ", "ln": 5693880 }, { "b": "avo).vJY-6A=#ebwGUP6AV/BBz/PMfxcpU$zEENhayPd#aARgtBrCa5Byu^earR^HarTc(AV/Eqx(+zqwO+{^B7DFnwO004z//Miat1ZHBAzFyiXJd0x([3hvLheez7!h3B-I4Dvs06pwI4$lyB%dpAXhfuBt49tz^\u003ewpvqfQjB7x5tB98tvvp%c", "ln": 5741289 }, { "b": "001\u003eS00Ao400L-gv(udRpJyeZx(mu}l$7gCoL59OBzgW!pJyeZx(mu}l$7gCoL59OBz7TOa]}VB0000alUQHMwPz)7CYTA:zEWZjAcb/jzBv]Pve{oP0rrf3000:ez/eG+wOUZ-y?k$FAa\u0026*6By/Ys2U!(LvpS!*ve{om0rrf300002000(q00961009700U4Ciy\u0026sI(B.(elAbo7=2MT][00000044ZDkMy=:0SVg34ma/Dz*a]#y\u0026\u003cxgy?i", "ln": 5781053 }, { "b": "C$hB/pgXV(lUG[Ay?mG%wDkbbByv\u003cKyH)GBvqxAOnP5Y\u0026yH)GBvpB4:07g^rvru6DB9RUkp*[0FvpB4:07g^rvru6Svp%dWvR/PQm}D^hzGY-mz/fA6zGF]/A+O@\u003ey?i", "ln": 6868700 }, { "b": "vqGU7vruj4zu94xAcT#@Bz%J*BzbPkx)Kifx(v\u003e?l1t1Jz/bLND2[7sz7XZ$w]83*BzkVh07/K@y\u00260V)BzkVh0b=jZwMAkQB.9{Uy\u00260V)BzkVh0af?Rxg3PNy?m9#x(r", "ln": 6879263 }, { "b": "A@VgNCMoq}z2!RSeDxqYve$xHwDh-AqVHFhve$rFwDllvo8@J6C(N*DiSGd0k(=3cBo2$OzVB!Tx-JCVve$xHx-J5Kzu6UWlJz38zua+UwDlPFBo0()mf4i9v/QAEwb{rzzuaqH0u\u003c/gzVBUPBo2\u003eLzua+UeDwDAve$fBx8)5Ove%{uwDh-ElJz38zua+UwDlPFBn", "ln": 6899884 }, { "b": "z#:$Wx-J5KzuahEve$xHve{\u003cd0cFoT0bIT40bITN0aC{xCMoq}z2!RSeDx!\u003eve$fBx8(Gy20\u0026kT08\u0026\u003eslJy^1ve$0wzuawJzuaqHo-P8iwb{fvm/U)Ro-M1$0b8vv0bhBJ0bhBJ0a#pa0b?\u003cF0a=cAli6vMASyv+z#:$We=YzZyYFnKavc0z0cwiL0ce6S0at\u003eH0a=d30b?\u003cU0cwil0a=dQ04H\u003eDwDl=KzVB[WASxOHwDkE9zVB\u003eVqugndz#:XOx-ISyve$xHwDllv1E5]!00A", "ln": 6921998 }, { "b": "Bz\u0026puzE\u003c@ew/%x=B-I4oq/(}#vp%d0B0bKnA=#2mePUSpwGUM4v@=\u003clBzkVhaAIEqB-.tozGvAMq!oI.xMOuniXJc{yHF\u0026jB1Z%FB98tvvp%dYy?WD#By/u1A^qRCx(v(#y\u0026r@ew]zYjzeTDaay]59vqfL0e=U\u003e]0rrf3000v5A+Px0A^pV9x:^{Kv@Dl}vrcS[A+LHN69e7m00006p*[x=wN\u003e)vvrRXK3ipbd000020rr9c0rri4000010rr9e0rro6000000003101n(d1onA400001000De00Ju", "ln": 6938259 }, { "b": "wDjs.wb{ACyYBCnQYrTW0rt^[wDluyve$9zlJz38z#+d-ASx!Nx8(PBBn#pvlJz38z#+d-ASx!Nx8(PBBo0A-c\u0026^-Sdf7E\u003cg5%0dfAr%gaoi$[aojd%fAr\u003cdfAri}m/Wl6ve%^qzVBROzVy)WqVH[twDlJDyYFOTBo31Paoksuv/P{qyYE(zaoi.*aoj+ezV", "ln": 7058480 }, { "b": "ASx--ByefZvr8u[wNPPVlUG[G07gBdzF9JWD2Ns[v{%gZASwNEA-lERy*?t:x(^i.vqGv)0cqTUy*?t:nP5Y\u0026yH{jKzdm6%07/T#A=2lbp\u0026ZF$x\u003eg^}07?6HByx5%wKpJNy?d9$0b2\u003e+uSgJNBy/u1wKpJNy?d9$07pygvrDydq!o\u0026*wO#0?luN0UwmY=YB7GlhwO#0?luN0UwmY=Yq/)4]zF8pUx(4r\u003eASwi=Byex:B.LV5wPv=.z!@@}ASwBuzE^s007y^qz/Pu0o)7M2vqG+9mr\u0026rUB-RnuwM9eZl2Hj6A=l8tl2{Kiz//02wN[+UxjVf#wPv=Iz:!wZxK#h:wODm1wD", "ln": 7602446 }, { "b": "v{%E[z/d\u003cSx\u003c(5.vqGT^A@XHpwl9nZvSIJ)wPzm30b(*#x(v(/AaJK208[e:By/qwl${7xzF%Prx\u003e8h:m}D^ix\u003eq9\u003eA@XZwBwls*xM4B508)\u0026Fv}/K?v{%E[z/e6/vrb[108NYEAb](bwPI{hAZ$mXA+6j\u003eq^\u003coHm}D^lzGGDgw)]gXA@Z92zdm6%pI9KAvpJ\u003e\u0026090#Ex(4H3xh-+Tv}xYYxjVf(lUHyLv}xYYv}Y^{v}xYYq*ACawO\u003c4$BP", "ln": 7604850 }, { "b": "0uAP?aol9QA@Wr.ASxUJAr7aYx-JeNwDllve=U(:li7{7Bo2$OaoksuwDl/Lp5[Y5z2!bEaok*IzuahEaoj[iASy1TBPuvXaok*IASxUJaoloVzVB\u003eVaok*IyYFnK", "ln": 7618100 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.iB=()]0000000000[bKTP3JZXo0b}@", "ln": 7790528 }, { "b": "BZXS=Bz$Vax\u003e4cOA=M8sw{503090(gBZWNLy\u0026r!-vqG:#v/PIFr://!wL3zjy\u0026%e=xMvV)wb]CGB7!J^A+eV\u00260b2\u003e+uRK%yzD7p\u0026wNP9HrbU-HA+eV\u002607?lhxMvV)wb", "ln": 7873497 }, { "b": "BZXS\u0026wPRQ7z!/t?BZXS#wPRQ7z!/t=wPRoIz/oz=vrlh:oM:=mz/oz=vrlh:y\u0026%e[xjVf#z/oAdvrlh:l2pvQv[oaaz^)c\u003e07I0uwK]scz^)c\u003e07QQxm@i9MvqC{xwPQBUz^)c\u003e0bM^^uUr}(xkzG}vqC{WBZXS#wPRN3z^)c\u003e07QQxoMaAHyYEyBBwcQ.vqC{WBZXS\u0026wPR:bv{%fNy\u0026%e[B7GDfz!0i(08l)xB7!##07QQrwPzj3x(v($yYE4A", "ln": 7876358 }, { "b": "vS=o{wPv=EB-Rj/zGGD5wPv=rxK$W?nP5SYxjV8-rbUuCBy/8@ASwWLnP5SYxjV8-qEK=twPQHYBy/8@ASx0CCt\u00266{nP5SYxjV8-pJgzEzGGD5wPv=!BZXS@B-RkgzGGD5wD", "ln": 7877664 }, { "b": "BzkSmwOkN{08)DJq/(O\u0026o)7n]x(E)5wPv=Iz+LpZs8@1%wPv={A+PSbASx6SmS\u0026PUBzkVhp\u0026y5=By/E)m}D^gwO+{\u003cvru6Iz/Or\u0026zEW^5z/ex\u0026x(n37ASx6Sp\u0026y5=By/E)y\u0026%e[Bz(bpx(n37ASw^QvnZVHx(!xcASyn]ASx3KASwBAASwyCxlw65zGFr/A=k%#y\u0026%eWuUam#z/L?]BZXS*A=M8s0bM^^oKz)!AaJQ3A=k%#y\u0026%eWuTW$/wPz*fASxJ:y\u0026r/(Bz(g1e[o0wAS", "ln": 7877810 }, { "b": "yE92!zEVaMB.$YgvpB4:mr\u0026]=zGxJgzGt!\u003cwPRoNwO\u003e)/A=Rj$wO\u003e)/A=RjDBAzLqvS=^7raf/WwPR$[xjVf(mq^i/C#eA[zGC(1wPRoFzGG]Ap\u0026y5=Bn#pv005X3-/[K(WNc9n66b8:Z!\u003e7maoqGG10vNA1T0*D5Fkc*0rAVlaozMN4G))P0rJAE0rA=U1T0*D5M5?TDLuC7e.%oOPA3kq00E/L0f^D-00SG8001nA08=-Yf-RsR009620856++xK", "ln": 7911322 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.ixFdG!0000000000[bKTP3JZXo03z", "ln": 7921600 }, { "b": "0sn:K1o%z-0hfJ1vf(}A1o]CD009odf:dK?1{R)L09GHgFEIRb1{QB{tMs:/Ul1X7=DtQ\u00260rr91KPkvYy/tR2By/qwqE%]/B-H#6B1Qv4B8Mhwv}wLHvpS}\u0026efF!Jv@Dy7x\u003c@Ror+lq)x(v(Lg+HEmfFk4gavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4jZ{uevkRKLhzEiFg?wv2iu}EFB97#ge(Dn4z/{8gwPGF4B-8qnzdMQRB8Mhwv}wOIBohBx00Ao40000008L%Hp^EGC9haa6}H=P0eInK:ze^fGbldYzp5\u003em]R2QF}00000!bYKH9Z{6H0ce6T0ce6D08rJj08\u0026(o0cFoZ0aM1u0cnbu0000CnDrSdB]U}JyYFeHwb]v8BPujT", "ln": 7936296 }, { "b": "wPv=TAb](ux\u003eg^}07/K@zF0P}B-H]jx(v(QB.LV5wPv=Xz/ff3xlwl6BzkVhluN0UwmY=YvS=y3wmY=YxjVf(qE%]/B-H#6o\u003c}{FxjV8-B6\u0026%0B8Mhwv}wwyzEEf?ASwV#z/ff3xlwl6BzkVho\u003c}{FxjV8-qE%DKA+fb#wKyxUzGGD2p\u0026ZF$x\u003eg^}o\u003c}{FxjV8-uVp47C4\u003eF#A.P$Wvp%d(07pygvrDydnP5SYA=t@kvru6\u003eq/)4]zF8HGzE^M{ASx3WA+Py", "ln": 7986089 }, { "b": "Bzk]f08c*xBv*vXwQ40.08[e:By/qwqGV(0x(dAlr+lq)x(v)6zF5@twPQ*YB8Mhwv}wOXA+PA707QQxlVl\u003cWwN/*@z/eG}A+PA7090(nBAh8kx8\u003eCkBw)p4x(mL-wmYvYB.(d#BAh8kx8\u003e\u003eMvSMTix(mL-rc0mOwPQ\u003c{x()\u0026#08N/VxAhWRByd\u003cMBz7Uxy?#WWAbP=sq!oxTv}XXEBz7Uwz/ff3xlwl6BzkVhp*[DV07QQxp*[xQzGFY-Bz7U[vrb{%", "ln": 8035089 }, { "b": "A:-/@By/Gl0b#v!vqPN$wPz?(xjVf(mriA!A:IK-y\u0026\u003cxgy?lBKA:-/@By/GbDsZROz/fSrA=\u003e(lz/P[0m}D^fz/fSrA=\u003e(lz/P[0m}D^jwO#71x\u003e6CHxlw65zGG}1xjVf(m}DNHA+P2.D2NsXA+xJiwO#Qh0b2\u003e+uQF:HB98CBv@#Tfl2{QXzdNQbA@YiYx(mMYwPI^jA:@VNwQes%B6\u003c6hx(mMYwPI^jA:@VNwQes%lVl\u003cLvrqG\u0026wPI^jA:@VIz/PW", "ln": 8110694 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.ihlAj60000000000[bKTP3JZXo03zv", "ln": 8138688 }, { "b": "l2Z^OzE--WwPRoLx(mCYlT:!Eq!Zt+okeoO0cz){z*a=+lT:!Eq!Zt+ph+kzz/]@d0b2\u003e+uRL9NxM4zYm0SVUze0GOwPRQ7wb]tjyH{1EzE)\u003c5v[*JRxM4zYm}DNHA::63wkcSSxM4zYm}D^wD2Ns:A=k!=vqYQ(wLD-TxM4zYlT:!Eq!Zt+qGV(0x(dAVwPI^aC4CX(wPI^aC4BxVBzbP60b2\u003e+uQ[WHo\u003ewAWz!5\u0026DBywV{m%elXwb]$TBywV{m/", "ln": 8302913 }, { "b": "o\u003c}:N07gghy/t4\u0026wKyctx(i]Tv{%g\u0026q!Zt+lUG[xzu9pEx(i].z/Pu0r://!wMi}]wKyxNC4CYnx(v\u003e?oKR^Ewmm]KAb]JhB7]Mg077*xy?cEOz/xn#mr\u0026=(wPI{bz/bLwB.LV5mr\u0026=(wPI{bz/bLxvqG:Ux()]:B-8qnzdMQRB8L(rwPyvWB97\u0026dv}w8NAb]JhB7]Mg077Huv@1ITAb]JhB7]Mg07gWxwncd1z/f01mr\u0026=(wPI{bz/bLHwPRQ7wj6^w", "ln": 8308694 }, { "b": "x()]:wPJ0gBvfFDxK%\u003eQv{%E[z/bL+vpJ$ZoMaAHBzkVh0cz){z*a#{lVl\u003c-BAg/7zGF][z!@\u003c7x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zz1v{x(\u003e$0oH\u0026ViwPzj3x(v\u003e?xjVf(l2{WYC#53FAaJ]SwO#71x\u003e77MA=#ebwLNe=mr9DUy^A8QBA{U]pJf(.m}DNHA+P2Pze:r5zdNQbvruj4zuarXByd*.wO$1HzE)\u003c5v]D@VC4\u003eC$qE%\u0026\u003cx(W^apJf(.m}DNHA+P2Pze:r5zdNQbvruj4zu9P", "ln": 8309136 }, { "b": "v}wkxwO#Q7w[+*%0cqZ(C4\u003eC$nN#yIBzku3wPv=swObv[y\u0026\u0026l^By/Giz!@\u003c7wN[.YA+PA7nmuyDy?mR!raf\u0026-q!6GLwozZ1ASx6:AaI^MzdMmHy\u0026A%a090SLz*a--y\u0026A%a0b2\u003e+uRbrewO#71x\u003e6$FA:-/@By/E)lT:}QB-I4Yx(!liB75J]wL=/QvqPN$wPv=Hv@Dr$p*[xMzdN*2ASy5!A:-/@By/E)lVl\u003cOx\u003eINewN[?Iy\u0026%q*vrliICvticwD", "ln": 8311006 }, { "b": "A::6dASv.4Bz(g1e[nykz/L?Ux(!0glVl\u003c-BAhIlBz(g1o(B]-Bz(g1ph:VOlVm9+BzkS9r+VR?Bz(g1mr\u0026=(wPI{bz/eP\u0026B7]-mASx--BydQSC42i3wk^5WC4\u003eC$l$HBHA+PGmz/L?zAbYxawk^5WC4\u003eC$l$HBHA+PGmz/L\u00260wPz%dv}w5tB7ol8Acc2s07I0Eza4@Rv@=p5Bz(g1wmY*(A+PGmz/L??CYmW6pgXSTA=IdUD2[7sz7Xj\u003cvp%E@B98baA@", "ln": 8311572 }, { "b": "z!8dQBAh88B-.ho07QQxlV)D(z/4^ZBAh88B-.ho0b2\u003e+uQ[WBwPzG{p*[xMzdN*2AZs!?A+P09By/H[q*ACawO\u003c4$wOb:\u0026v@#B6zz1+ax(dNax)a6e077yqwnb{]mR(HCA@X)Lz!\u003cGmmR(HCA@XTLwO#P*z/{8gwM9eZBzkS9A@XTLwO#PSz/6u1zE=gVwO#PQA+xB[vrc1406AC4uTE[*x(:nMD2[7sz7Xj\u003cvp%E@B98baB1P*#wmX5AvqHjgx(:n!wPRoBv@VT9A+e=P", "ln": 8312462 }, { "b": "qE%}Irc0mOwPQ)WA+w%90b2\u003e+uR9{!w[D9}Bo2@+Byd*Qw]?K907?6rA+f90zGFV^w]?K90b(EYB7GB[q*ACawO\u003c4$wOb:\u0026v@#B6zz1v{x(\u003e$3x\u003eIa3Cv+G3xMKkwz/ff3xlwlal3D:KBo3k#uRb9Ny?Wx[Bo2l+B97#ge(Dm)y?m9#x(v(wmqV:X08v9Hl2}0OC$z)/Bo2uQB7]Z@mr\u0026J*07q9IvqPZ*o\u003ewAWz!8gSx(4\u003e\u003elT:!Eq!Zt+luN0UBo2x.x()]+wPz%dv}wFSz*2\u00269wPyaWx(4\u003e\u003exjVf(l$G$sB.(d1m}D^yvqH6$pJw\u003cmw)]*#Bo2orwPJ0gBo1(#B9RUk", "ln": 8313834 }, { "b": "x\u003e7*0x(+zrwPP57C{3Tew)]*#BrC^vwO@R!BZ/f3B7!J[x(dY#wiC3PB.9fFra]YZay/7@v@0i3zF0*czf3?gwP?T3z/xodB0bWuwO@SjxK#l@azkn6wPzG{aAR)FwPF#8z/c}AazthbwGUG3ze-{9x\u003c$)\u0026aARTrzeB08xcpS2zF%S9BzkVhB1S1e", "ln": 8329983 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.ib\u0026\u0026}f0000000000[bKTP3JZXo05a", "ln": 8519616 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.i(kw(G0000000000[bKTP3JZXo06*O", "ln": 8802240 }, { "b": "02xRQxAhPzyYFnKgxofge=YzZyYFnK7ioE%0b}{L0aM1B0bhA=0aV7C0bISHBPuE.wDl-Jgxofge=YzZyYFnK7iPW?0ce6X0bhBK0b.=?0aV7C0bISNCk#gOvGpDHzVBnEyxd]CBo0][wb{ACyYCk{0a=dN0cwiH0b}{L04[mZ0bITK02x+Ux-J2JxAibOBo3mWe=YzZyYFnK5{Bs\u00260b.^N0bRY*0aV7C0bISHCk#yUA@YXIyYFeHe=YzZyYFnK7iY:{0aV7r0b}]]05sKb0aV7C0bISHCk#W:g5$UYgxofge=YzZyYFnK7\u003ct$40cncG0b}{L05BQg04[mZ0bITK060)SC(R)=Bo2\u003eLz2=f*nDqJ^e=XlszVBROz#:[UwDl=KA@Y[OzVBUPe=XSDve$xHx-JqRwDjR!0c[M=0cwiL0bRY*07N390b?\u003cD0at\u003ez0bhBV0at\u003eH0bhBK0b.=?08rJ50cwiP0cOuN02fnIA@ZgWBPuaQv/OaYwb{ACyYCe.0b?\u003cU0cwiW0b?\u003cN0bhBy0c[LYBPt[KASygYvGo*pA@Y+Ke=YzZyYFnK7i/*$0bITD0b8vG0b}]\u003c0aV7C0bISLv/QAEz2!8DyYF8Fgxofge=YzZyYFnK7h0RT0bhBL0bITT0cnb)0aV7C0bISL", "ln": 8937122 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wu2.ipAaI-0000000000[bKTP3JZXo08J", "ln": 9113536 }, { "b": "j$YAGwO?ACD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtDx(!wUq*ACawO\u003c4#BAh8kxfE}XwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jx3JDBy/qwq/)4]zF8c=B7GD2nPXJX0blK^z2^HWB97#g090#Mz2^1xB.}aAB5N3^zua-%vqV6TwPRoUz!\u0026{407/K\u003evqYZ?rbVL-zu94xze:Amx()]NxKL^\u003ewMiO-wO}GnvqYN^y\u00260K4x(v(RxKL^\u003ewMiO-wO}GnvqYN^y\u00260K4x(v(*z!\u0026{40aPCPv}xE)", "ln": 9203785 }, { "b": "BzkVhaA8cuCxdztx(mMaqGV(0x(dA7l${WMv@#BdwPF#az/M$px\u003c#9\u003eA+P9aefF[FwNPT\u003eaA?Eux(\u003c^\u003earR^HxMOuniXJd0z.t)vv@=Hez!s8zv@Diqw{n69zFH)\u0026oLFxWnKLY$iwAJGisMrEeJ%QJjvA[7wN/*@C4C.qCX}nmB3gZXBAzE.fe4xRxK#3?B1Rrzv@=Hez!s8zv@DiqzE){4CRp*af/7Epf!WxPBywY*ByuvS4gjj2jwoD#A::0lawMuZwJ.kix\u003e8g4B8LVje\u003eGN", "ln": 9467277 }, { "b": "@D(wVZYN@{aol{\u0026@D(wVZYN@{00000aoiI:aohxwaoiI:aoiI:A@ZmYxAfQ:v/Q6uASygY@D(qU@r04Z@D(wVZYN@{@D(kS]v0-t]+NS7@r04Z]8!#)]Abb]]-Cl", "ln": 10010056 }, { "b": "wm5X1g5$r}wPxNZ08(EbBtCVLo)7n]x\u0026N-xBtCVLqE%oEnP5Sag5$o]C$hB/nP5Sag5%B2iBubFf/Aw}g5%BhB75(:z!\u0026{4qE%]*z/fScp\u0026ZF[nP5l:k4m(af!\u003eN[g+]4[lJ", "ln": 10997536 }, { "b": "zF0P}l3mo.z/PMlC$z)=z:33=uORQzBy/rdj#DXOg5%BMz!AY]AY#u/uORQzB97\u0026hBw#%:yJzV%uTCL*jALHSwO%}Own(E3zGF@]BzaJ]wPA5)vrb^[B3qD*uORQzx\u003eggYyH}xJvpJ$ZnPXJXB3qD*uORQzvq{f+z!\u0026{4p\u0026ZF$x\u003eg^}p*[xMzdN*2A=TA4uTCL*jAt1MB.bSop*[xMzdN*2A=TA4uTCL*jySCyyH}Qej#DXOg5%BJzFsibvqGU7wN[epv}YBDwQcTYze:AhwO#Qhj#A", "ln": 11000418 }, { "b": "wN)K@st.=)lUgpWx\u003ez6?vru6o0c*vPiyvv#Bzku3v{%E\u003cg5$3.v@=Hez!s8znN#yIBzk\u0026xe\u003c\u003cC?wO#PxpEfbBxFGN2wPRoJBy/qA06AC7uTF1$vq)$4wnbK}g5#ukz/^-mju+=juOTAAf/5!(l1BzurDz.(nP5cUp\u0026ZF[nP5l:k4m(agbAn(gxoK3iBubMhd56]06A[=A:\u0026Q2z/X\u003c1AbYS8zdNQbvqF[Sv@2T$p\u0026ZF[nP5l:k4m(ai5H", "ln": 11001902 }, { "b": "v@Dl%x\u003eG.OBzbPkx([R(zF0/Jhd6YD06B+1v}YBLwPI{bz/eoTzEEf?AY#u/uO.WAy\u0026r%0wPx%(uTCO?jy-quwMAw.x\u003ez6\u003cAY#u/uO.WAwmY{#v}w2CwmXXHz/xoej#DXOgxoKJwNPaXA=TA4uTCO?jy@zNx(XcfzdNQbj#DXOgxoKVz!\u0026{4mq=TPz!T9hj#DXOgxoKUCrN(\u003euO.WAvrDW9z/PMlC%j8)uO.WAm}D^pwPRu\u003evrt{wvQAE#06A+.BwDQYv)LfYzEU\u003etuTCO?jwoEgBy/t?z=pv/xkzcSwPq\u003c7B96Y=wkV#WAbPS8l34r?v)jveuO.WAo\u003e!9Tz/Y\u0026eBs{c}wO#Q7BA]GayY", "ln": 11004450 }, { "b": "p^GkCxK#76x\u003e7N[x(v(Xl\u0026Z.nA=L-cvruj4zB)j@l2Z^ml\u0026.vJwPy:YzEEB8nKJL\u003ewPRoDy?WD#Bv!\u003e2B7GD2lU{EFzGFDr0aP?VwO#PYl\u0026ZdOlTJn?q:\u003c5IogJt:px", "ln": 11016188 }, { "b": "A+PSbl34r?v/O@xwN/\u003e8wKgx.zESVjv@VT9A+ei*yH}xPzGGDgvpKy[C4A%XD2v9(qE%Y-C4A%XD2v9(qE%oEl32$DA+PA7l34r?v/PFGC$hB/rbVL-zDg:(zF8BSv}!kID2v9(q/(}%oMa/YqGV\u003e{x(mMWA=kD0B8%]\u003cs7L\u0026bAa}QVD2v9(qGV\u003ezA=k-8A-V%%xI08.Byx04rDq!tB9RUk07?6IwPzo(Acax*BzbPkx)Kifx(v(?A+N*XD2v9(mRcWKxA", "ln": 11020683 }, { "b": "08mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEH5rbVL-zBm\u0026xxK%+MBy/GgvqEL^wPQjFv@DHcBAo-?D2v9(m}D^dB9RUk09rPyBu%$[zESVlvpJ$ZrbVL-zC\u003e4!AbPSnwKgiAlVM:DBy^:XBzbl6Bzkk[BzkVhqE%](y\u0026?%:D2v9(l1s[Sx(W=:z!\u0026{4q!Z5VzGFf=D2v9(mRMWXwPy:*yH}y8lu#1qC4\u003e#nzF-%5Bu%$[zESVpwPQTTCTMEW", "ln": 11022652 }, { "b": "B-8p%A-Ef(A.f^wxjVf(l1szyB-8q3B7Gw-wb{WZBydszv@DHcBx9x[A.f^wm}D^zx(mE1Ct@l@wNPaCA=kD0B8%]-07QQxlV)A\u0026wO#P^A=kD0B8%]-0bMQ+CtJr#v}x.5nN}*lwPRoPvRPE:Bv*0yB7GD2pHX6Iv@$pM09r(RxJoa+AZs+/x\u003eIr{wkuVHwN/*Nwb]eszdMHLygQ)%", "ln": 11024771 }, { "b": "Abok#vruj4zCj$YxjV9EyHpBnvpK7!zF8BMwO+(Sjv%6{zGGPmC$-c?xjV9EyHpBnvpK7!zF8BMwO+(Sjvs3$wMAw.x\u003ez6\u003cAZ1nCuQwghyIvW0mRMBIwb[.*yHZ{yz!9AWwPzG%x\u003eqrGyHpBnvpK7!zF8BMwO+(Sjv%6{zGGP8x\u003eqrGyHpBnvpK7!zF8BMwO+(SjxlokADL?*vRPE:Bv*1OzGGP8x\u003eqrGyHpBnvpK7!zF8BMwO+(SjxlokADL?(wO}", "ln": 11038380 }, { "b": "z!\u0026{8mr\u0026rQvqYZ?lVl*Xz/fc7BwE6\u003eA=L(8wDl7CB-.p:z!9ASwPq\u003c7B96=/ze:AhwO#P=C4CYmx\u003eg=PBz\u003e@azBFCNAbPDdBwE6\u003eA=L(8wDlgWz!\u0026{8q/)4*By/9gpJ*q\u0026A+P5}0aP?VwO#P*BAg/iwOlo:C4CYmx\u003eg=PxjVf(l3mo.z/PMlC#5P{A=L(8wDl^.BydsRBzbPkx([R@C4CYmx\u003eg=PqE%GPz/f01l2Hj0B-.qnA+PSvpJ*q\u0026A+P5}0b2\u003e+uQF:xwD", "ln": 11046134 }, { "b": "B.kk%A-lyUwK{lEwnC/SqGV(0x(dAXD2Ns=vqYQ(wDkRty?m3@wK{lEwnC/SlU{WZwK{lEwnC/SlVM:GwO#Q7vqFFyzE^M{07QQxrc-B]mSJA:nmuyDy?iPoA+e/HA+e=)zGGP3y\u0026-cQzE^M{06$amB.L(clVM:GwO#Q7vqH0QvqYQ(wDl7EA+e=)zGGP3y\u0026-b", "ln": 11051188 }, { "b": "A7\u003c?^wO:.xy?%8)wPRoUwPI@WwOb\u003e3wMiO!oL5xUy^RSEyYFx\u0026wIV7]wnD5Zm}ur\u0026ga)9NyYEjwByxc5gCQN[y?%8WwoIy2x!}H%wnD5ZyH}K7wO:dTe[w^m0cq*+y?$).e[w^m09a8KAX/E6wnD5ZB-RbmgCQN[y?%8)wN/\u003e6gCQN[y?%8?ByYi7e[w^m08mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEHwy?%8sy\u0026sDbq!P-UyYE4qwO#Q7BA{Y6z//]cz!@9=xk8k", "ln": 11071204 }, { "b": "A-lKVph:6Nv}XIDD1gI@x(i]^wQd^0vqfPVlum0WwPyjWA=k$^z/5]%zuai=zddc@07H)Ev}wtLxk8k-nPN)MwPy7Ol1B?Dzu9pEx(i]EA=k[(vqPN.wQ5fdA+fr0z/bLFwPzlUg/Wj/xk.U/oj-cMlUgpWx\u003ez6?vru6Vg/Wj/xk.U/oj-cMoM+5WoMaMZzu9svA:?%:vrcDSvrb)Lz!B0a083)zvNBZEBzku3v{%E\u003coMaMZzu9svA:?QTBy/G3v/", "ln": 11075658 }, { "b": "zVBAYByd{OCscgXwO#PYzF0!!B7GD2qEK=py?WD#Bv*vZzVB/^CscgXwO#PYzF0!!uT)[^wO#PYzF0!!p\u0026ZF:wPI]\u003eByxiinP5cU07g^rvru6LoLFM\u0026nP5cU07g^rvru6Ox(!w/zF0!!lVM:DBy^:UA::k+zF0!!lVM:DBy!3ix\u003e8m0z/f07C$z)=zVAdBwNPW(l${dMx(v($A^pk]w]vVZwPRoBB-.qnA+PSvnP5cU0aP}+w[+)zB-.qnA+PSvnP5cU", "ln": 11082918 }, { "b": "ASyb\u003eADL\u0026lBzL(dxjV8-lVM:GwO#Q7vqF[*AaI*!xK#h:l3mo.z/PMlC#P6dwLWzYwPv=?Bzbla0b2\u003e+uQF:xwMAw.x\u003ez6\u003cASye(BydyNwmX!MA+Pc1wPv=-wPRoQyHZ{yz!9AWwPzG%x\u003eqq+B7GD2p?%MLlVlHDr+lq=w[+*%09r(RxI-FOwKyxDwMAw.x\u003ez6\u003cASxD=yHZ{yz!9AWwPzG%x\u003eqq+m}DNHA::63lVlHDr+lq=w[+*%0aP}TwMAw.x\u003ez6\u003cASx--BydQIwO#Q7w[+*%08)/UA:@VLwmYU2x\u003ez6\u003cASx9Sx(OobnN#yIBzku3wPv=Vwm/)OwmYU2x\u003ez6\u003cASx--Bye3=x(OobpHX6Iv@$pMwO#Q7w[+*%0cqZ[uSy#TADL?*vRPE:Bv*1OzGGP8x\u003eqq+B-RbmpHX6Iv/", "ln": 11087849 }, { "b": "08l)io\u003c}:Nra{q-vpSqDxK$Z%y?mR!zdc{GvqfQUxMvV)wk=#KwN]}1wPv=HBywcSB8aY:xK$Z%y?mR!rax(vx(!xczE)?*q*ACawO\u003c4{wPPK}BAzE}x(!xczE)?*xMOunoLFM\u0026wO#7109zQbzGGr3zE)?*xjVf(rb2\u0026TwPQpTzGGr3zE)?*B7GD2rb2\u0026TwPQpTzGGr3zE)?*oj-cMwPzZgrb2\u0026TwPQpTzGGr3zE)?*Bzkl2wPQpTzGGr3zE)?", "ln": 11090142 }, { "b": "uSpPOvqZf-A=kM7y?mU/m}D^wwO${]BwN0@w[=6)A@Zq[zEEB8p\u0026ZF^x(4v407pmqwMiwXwM9X@y?mU/n][]*s7L\u0026lwQd9XA:-/@By/F/vqPN%0cqH?wO${]BzLJfB5VZ*vqZfZvqPN%0cqH.zF%-pp\u0026ZF[wPz)rpgn0JA@Zn*yI[6mzB5z!xK#76x\u003e7N[x(v(/v}YB\u003cwPE\u0026:wPRoTv@Dr$A@Zn)Byd%Rz/xoe07zcOA:.:TwmFLFz/xoe08^xHwPz%9wk=#RAaK7\u003c", "ln": 11098598 }, { "b": "vrl130cqZ[uQnHxvrl130a*4\u003ex(XcfzdNQbl2pmzB7Gy)wO#VSy?Ws0wPE\u0026FA=k[(vqPN.vqGT^B7Gy)q!p5Ez!%b$C%#QYAbPDdBu%CFA+frkwPE\u0026ID2[7sz7X:#v%8*aBA]GaA^qRCz!B90Aa\u003cIHst.=)lUgpWx\u003ez6?vru7408mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEG%B-.p}v}YB\u003cwIc[Wnjc%eBzku3v{%E\u003cA@X{Gv@=Hez!s8znN#yIBzk\u0026xe\u003c\u003cC?wO#Pxq=r", "ln": 11099278 }, { "b": "Bzku3v{%E[z/d\u003cYxla5sDuBmtl1AYjy\u0026\u003cxgy?ly.xla5YA+xB[ju+PeuVY%}A@Y\u0026:Bye0Yv@3b=xjVf(mqMyKB7F(Yx\u003e7}10afLJB97l0z!0v1B8M7^z/]@tqE%DXwPIJ:x\u003e7}10cz{+yJxFwv@VT9A+d{.v@3b=qE%VQvrl0Nz!0N706$amB.L(cl2pvhz!0N707gNlvqZjblT:FrwLNeqz!0N708mfqA=l2qw]]T%wmYU2x([RMlU{EFzGEH5", "ln": 11100332 }, { "b": "nm=juwPz?(lum0WwPys-Bz%=ZvpS}\u0026A@X:MBz%P=zGGDcBvY$KwmY!507.iNA8Hm!B.bSonm=juwPz?(xjVf(l$G$sB.(d$wPq\u003c7B96@:vpS}\u0026A@XZwBw)m0p\u0026ye:v%HQRvpS}\u0026A@YMXwNPaXA=RjFz/ff3wmYU2x\u003c\u003e*By?WD#Bu%\u003e+y?Wx/BzkVhluN0UwmY^Jz/O-!B8Mhwv}wFSz*2\u00269wPz?(l1s[Sx(W=:z!\u0026{4mSirmy?WD#BwMy^vqPN$wPyaWx(4r\u003eAZ\u003c$/qu", "ln": 11104038 }, { "b": "x*(]IAbPDdBo2@+BydZWv{%gxzE^Z8x(n1)xjVf(rbVL-zBFCNAbPDdBo3w[Bye0=yH}xLzE^Z8x(n1)Bz\u003e@azBFCNAbPDdBo29QwO$7IlVl\u003cOx\u003eINevruj4zBFCNAbPDdBo2@+BydsRBzbPkx)Kifx(v(TzE^Z8x(n1)B7GD2l3mo.z/PMrvruj4zBFCNAbPDdBo1WDze:StwK{]+A7aUPAbPDdBo2@+BydQRwoggSwn(E3zGC(1uUKv/B46$Sz#", "ln": 11115199 }, { "b": "v}f7\u003eB5W6[wO%}YBvfFDxK%?FC(Rt.v}YBDwQanACW\u003er7BzkVhrc-B]oj-wGm}D^uq:Bl2x)9{bwLlPW07gsrBwl[0BvY?-wL^zYC42G7oj-wGxjVf(nmuNoA+PY9By!9RC(QiyA=+w%BzbPnBwN0(C42G7oj-wGnP5l:x\u003c\u003e*(DsZ2?xkRB3xg(/Y0af!YxkRB3xg(/Y", "ln": 11121203 }, { "b": "Bo2\u003eLzua8Bzua+Uaoj[irrbO\u003cl\u0026X?taohx^ve$AIBo2$OzVB!Tx-JkPC(QbgBPt}Lx-IYAzuaeDwDhZexAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUPf8$#7x-J2JB]U}JyYFeHwb]%pve$AIBo2$OzVB!Tx-JkPC(RgKBo3N^z#:CH05))Tzua.TBPuvXz#:!RASygYwDllvaok*IBPuH-xAh@JASx!NBn", "ln": 11133902 }, { "b": "0b.=?0bRZI0aM1H0b?\u003cU0b?\u003cH0cwiV0b.^M0bhBJ0a=c.0aM1E0bRY?0aM1E0bRZM0b?\u003cP04[l]004MDk(=3cBo2$OzVB!Tx-JkPC(O@!A@Y\u003eNzVB[WyYE#Caok\u003cJwDi?Mx-J2JaolG-xAhPzaol0NzVB!Tz2+WUjof3{zVB?UBo1G8f919mve$AIwb{rzwDlPFv/Q6uj]^kojofE6wDlPFve$fBBo1(jl\u0026YyJec3^)w=M-HASviZwDl@Pve$cAz#:XOwDi?MxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?wb{VJBo3vZf919mBo2\u003eLzua8Bzua+Ux-IVzj]^hnaohxF", "ln": 11134764 }, { "b": "Ee\u003ew\u00263igwjnc0i3ve%*rwDl-JA@Xl3aol-*g5#.501AAryYE(zx-I#IA@VgVASxUJA@ZdVzVBUPA@Y+KuJsKnzVBqFC(N*+v/QAEASyaWwDlJDve$xHx-J5Kzua2zx-IVz026zNBPt\u003eJuJsTqASyaWzVB!T0d+IX0b?\u003cW0ce5Z0at\u003eD0b}]X0b8vv0cnb.0aC}t00", "ln": 11143312 }, { "b": "0cwiL0ce6N0b.^H03znc08@}v0aC}N03zn-0a=dF0at\u003eB0cwh-0bhBz004M/nc05#B]V7NaoloVzVB\u003eVaol0Nx-I@HBo2\u003eLASxUJwb).LvGpVNaolG-wDlPFve$fBBo0A-nDqcUe=W0]q#*Oix-JhOaok)Kve$fBaol6Pve$lDz#:CHzu7^Vx-J2J", "ln": 11147322 }, { "b": "f93d}g5@{bfAq7$f92[\u003cve$AIBo2$Og5@%cve$AIBo2$OzVB!Tx-JCVwDhYHve$AIBo2$OzVB!Tx-JCVve$xHx-J5Kzu6UAwDl-JASy1TASu7Gli7M%ve$rFwDl-J00=s2zVAPl02FufA@YRGyYEGowDl-JA@Y[OzVBUP01\u00263cyYE(zBo2[MzVB!Tz2:Lzk(+\u003c7x-", "ln": 11151142 }, { "b": "000yC0ce6T0c!G?001J=0b?\u003cQ0b}{E0at\u003eq0bzNw0ce6J0aV7z0ce6J0aM1J0ab.G0ce6N003k00b.^M0c[L!0bITN0b?\u003cR0aC}p0aM1A03znZ0a=dv0bhBN0a=du0cwh-0cFoZ0bhAQ0bhBO03zn.0cFoX0b}{R0ce6Y0a=dv04X9)0aC}J0cwh-004OhaolP=ve$uGaol0NzVB[WzuahEe=W0]lJz38zuanGx-I=CBPuBZwDi?MxAibO", "ln": 11152499 }, { "b": "A@ZaUve$lDe=Y!\u0026ASx.Lf93g@A@W\u0026[g5%0dfAr%gf90Wag5@%cBo3sYBPuE.Bo0@]nDr/iA@Zs.wDhZMxAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@W=(A@ZB+f93g@A@W=(Bo3sYBPuE.Bo0@]g5%0dfAr%gf-S%ef91(IqVG+%f91MzA@ZmYBPt$M0BYTwBo3y.z#.{0f90T9wb{JFv/QMIe=Y!\u0026ve$uGx-JhOeDxX?z#:CHzu8o?zVB!Tx8\u003cN+Ck#W:eDx?(CMow%Ck#W:eDx\u003e)ASyjZA@ZpZf90:cfAr^bh2]uhg5}t[xAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@W=(A@ZB+f93g@A@W=(Bo3sYBPuE.Bo0@]g5%0dfAr%gf-S%ef91rswDlcsASxUJASubSxAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@W=(A@ZB+f93g@A@W=(Bo3sYBPuE.Bo0@]g5%0dfAr%gf-S%ef91MzA@ZmYBPt$M0rWxy01?T1zua?WwDlJDzVB.RwDhZaxAibOBo3mWiSH/kf93g@Ck#*!e=Z7}gxo3czVB!Tx8\u003cN+g5%0dfAr)ef90Wah2)", "ln": 11161358 }, { "b": "00afw0b.^k0cXAw0a=du08@@p0bzM\u002605ayb05T:d009yI0cncY0a=cg5MnWv0aM1K0ce6N0cwi^004LAxAibOBo3mWiSH/kf92I.zVBnEA@W/)zVBhCA@Y[OA@W=(zVB.RwDlPFe=Y!\u0026ASx.Lf93g@A@ZmYf90:cfAr^bgYPfefAr*cf92[\u003cve$uGx-JhOeDvKafAr^bgYPiff-S^9Ck#W:A@W=(Ck#W:A@Y+Kv/QSKASx!NBo3N^eDx?(wDliuwDl@PBo0()f-S*afArZ9CMq^+wb(Szq#*Rjz2!bEA@ZpZve$cAz#Y\u003eQo-O8(k(:\u003c:x-I#IwDkTeBo2.Hz2!IP00", "ln": 11162714 }, { "b": "v/QPJaol9Qwb).LBo3jVaolG-xAhPzaolAZwDlYIBPt$MA@ZpZe=U\u003e+zVBkDy5?/Bv/QPJuJs^uwb(QBxAibOBo3mWiSH/kf90Zbg5%lke=WN9e=WN9e=WQaiSH#pfAr)egYPohf92??wDl/Lve%*rve$xHve}}Xx-IVzwDlPFBo31PBo3N^f92[\u003cve$AIBo2$Og5@%cBo3jVyxd]Czu6UIk(=ihBPuBZwDi?Mk(+{9v/MHWMS\u003cC:0at\u003eB0at\u003eu0a=dv03znk0aV7v0b.^U0bhBP0c[MI03znw0cncK0ce5Z0at\u003eG00", "ln": 11175082 }, { "b": "x-I@HwDi?MwDl@Px-JhOBo3vZiSHo503%k$aok7nwDlPFx8)2NxAfdPzVBwHaol0Nx-I@HwDj:\u003eaohyIb(*:wASy1Tx8(@Lve$cAl\u0026ZS}Bo2.Hb(?fIk(=ihBPuBZwDk6$zVBUPzuakFv/QPJwDllvo-OP4v/Qfxx-J2JwDk0@x8(Gyzua+UtMv.6zVBLMwDlPFA@YCB00$mTyxd]CC(N?4f93d}ve$rFf92[\u003cz#:$Wf92zXDh}BPz2^#Ax8(Gyzua+Uf937]zVBLMwDlPFA@W\u0026[0d-K508iD40b.^B0a#py", "ln": 11176400 }, { "b": "0a=c.003TT08JVo0b?\u003cI0ce6F0bRZF0bhBH0a=dK03}RI06{Qh0cFoZ0a=c$0b?\u003cP0b.^F0aM1J0a=dv08iD40aM1x0bhBJ0a=c@0a#py0b.^U09/Iq0bhBI0aV7J04[m.0c!GP001-b0b?\u003cR0cwh]0at\u003eN0aM1C0at\u003eu0a=dF0cwh]0aC}x0b.=\u00260b8vD0bR", "ln": 11179781 }, { "b": "aol9QA@Wr.x-I=CzuaOPASxUJwb[jZ03#aPyYFeHwDlPFBo2UFv/QJHwDllvwDlPFBo31Pve$9zA@Vg^ve$AIBo2$OzVB!Tx-JCVve$xHx-J5Kzua2zv/QAEwb{fv02]zFzVBqFwDl6qB]V7NASx!Nw=MJBwDl-J03ujYwDl/LBPuBZzua2zA@ZdVve%Tmv/QAEwb{fv04R:-zua+UwDl-Jve%^qBo31PB]V7NpYK]7ASxIFz2!bEBo2\u003eLASydX03+[LBPuH-xAh@JASx!NDh}vNBo31PzVBUPlJz38wb{fv03Mp", "ln": 11186918 }, { "b": "aohy6aolP=ve$uGaol0NzVB[WzuahEaok\u003cJBPuH-aol9QBo0V*A@Wr.x-J2JB]U}JyYFeHwb[T\u003caohB-xAibOBo3mWiSH/kf90Zbhuk-qe=WTbh2]Dke=WQahuk-qe=WTbh2]Dkf92??wDl/Lve%*rve$xHve}}Xx-J2JA@ZpZve$fBv/Q6uf92FZzVBROz#+1XBo2\u003eLf92!*zVBnEve$xHx-J5Kzu6UOve$lDx-GZ+B]V7NASydXx-J5Kzu8*10t/tFzVB!Tz2^#ABo1D7Bo2\u003eLCMq*=07/fJf-Tfkh#\u003eSjgYPifwb[gYhu", "ln": 11193016 }, { "b": "DJk-1Ee[f=ve$AIBo2$Og5@%cB]Tn$e=WN9f92zXBPuH-xAh@JASx!NDh}HR05F%4fAuI3zVBhCBPuH-xAf^/f93d}g5@{bfAr:awb{fvB]VjRv/Q6uv/QAEwb{fv03uK/fAuI3zVBhCBPuH-xAf^/f937]zVBLMwDlPF04i9[fAuI3zVBhCBPuH-xAf^/f92zXBPuH-xAh@JASx!NDh}HR04Al{fAuI3zVBhCBPuH-xAf^/f92I.wDl(Nx-IS", "ln": 11193396 }, { "b": "0cncZ0a=ds0aV6Z001VX0cFo-0b8vJ0ce6N0cwi^0ab.t0b?\u003cU0cwiF0bRZI0cncS0at\u003eH0aM1x004MxsPAvuBPrJ:wb{rzwb).LzuaOPBo0A-wb{fvw=MJBzuakFaok*Izu7^Vve$AIBo2$OzVB!Tx-JkPC(O@!ve$xHaolG-xAhPzaok*Iz#:?SyYFeHv/P{qBo31PzVBUPaoliTwDl(NwDlJDec3^)A@ZaUaol9QBo0A-wb{fvw=MltBPujTBo3vZaolG-zVy)WBo2$OwDi?MxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUPe=W0]0auim4f", "ln": 11255722 }, { "b": "zuakFBo0()ve$lDz#:XOx-ISyve$xHx-J5Kzu8l*v/QAEzuanGx-I=CBPuBZve$xHx-J5Kzu8o?aol@uk(=3cBo2$OzVB!Tx-JkPC(O@!A@Y\u003eNzVB[WyYE#Caok\u003cJwDi?Mx-J2JaolG-xAhPzaol0NzVB!Tz2+WUjof3{zVB?UBo1G8f919mve$AIwb{rzwDlPFv/Q6uj]^blaol0NzVB!Taok%MCMqdLz2!IPyYF2Daol6PBo3y.z#:}ViSH/kf92!*zVBzIx-J2Je=Y.*x-ISyASy1TA@ZaUw=M]MzVBUPyYFeHzuakFe=YwYzVBROf92FZzVBROz2!FOzu8o?aol@*k(=3cBo2$OzVB!Tx-JkPC(O@!", "ln": 11326238 }, { "b": "yxd=ye=Y.*A@W\u0026[z2!RSve$9zeDxU*wDl/LeDx.\u0026zVB.Raol0NzVB!Taok{LwDl/Lve$0wyYFIRe=ZF\u003ez2^JnoAm#\u003eaok*IBPuH-xAhPzzua+Ux-ISyve$xHx-J5Kzu7^VASxUJAr7aYx-JeNwDl=Kaok*IaolG-wDlPFve$fBBo2\u003eLwb).Lve$AIBo2$OzVB!Tx-JkPC(PC%aokywA@Y[OzuaqHaoi+?v/QAEz2!zMzVBUPcJCW$aoi+?zVB!Tx8(uuzuawJDh}vNBo31PzVBUPA@WM/ec3^)zVB!TaolD.x-I#Ix-I@Hve$rFaoloVzVBUPeDx\u003e)wDlPFve$fBBo2\u003eLwb).Lve$AIBo2$OzVB!Tx-JkPx-IYAA@Wr.x-JhOaoloVzVB\u003eVaok*I", "ln": 11348480 }, { "b": "0cwh)0bhBz019=EBo2.HBo2\u003eLdQ@D%0aV7v0ab.o0b8vv0bITK0a=dF0a#py0ab.y0a=dL0b8vJ0aV6Hv/QAEwb{fvuJsNoxAhDvyYFnKwDlPFx8(Gy8E\u0026+=0aV7v0ab.H0a=dJ0bhBB0bhBA0ce5LyYFwNx8(SCzua2zASxUJAr3X-0b?\u003cO0at\u003ew0b.^z0ce6J0c4#Ez#:[UzVBROz#:$W4SRLX0c50C0aM1D0a(iLASxUJBo3B-ASx$SuJtcEz#Y", "ln": 11355146 }, { "b": "0at\u003eD0b}]vu\u0026QfbgiAOq0b.=$0bhBA0cwiM06ga70a#o)0b?\u003cC0cFo-0b8u[05sKb05ayl0b?\u003cQ0aC}MxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUPf92[\u003cve$AIBo2$Og5@%czua8BBo31PB]V7Nv/QrBx-IYAzua+Uazp:%0cwiW06g9k051s*0b?\u003cE0at\u003ez0b8vJ0cncZ04.^-Bo3y.z#:}ViSH/kf931)wDlVHyYF.Xrrd4tyYEig", "ln": 11358462 }, { "b": "A@VRU0b?\u003cO0bRZO0b.=FyYFeHB]V7Ne=YwYzVBRO9^vVp0at\u003eB0aM1x0b?\u003cT0bRZA0bhBH0aC}D0c!FVk(:gJl\u0026Zc=q#/?%h2]rgf-Tilhui\u003eh0rr9dvGo%tve$rFwDl-J25\u003cMX0b}]Hz2!UTyYFIRuJt3BzVB.R22Cqr08JU7li7M%ve$rFwDl-J4PrvG0b8v10a=dJ0cwhLv/QrBx-IYAzua+Ux-IVz5]N+V0bqHB0aM1J0ab.u0aV6xz2!n", "ln": 11358934 }, { "b": "zVB!TdRF*70cwiW0ab.D0a=dK0b}{R0b.^T0a=dq0b8vz0at\u003er0a=dJ0cnb=xAibOBo3mWuJt9DwDl=Kz#:!Rzua.TwDl6qvGprDwb{(PbXNg10cwiW0ab.D0a=dK0b}{R0b.^T0a=dq0aM1E0aV7v04qpRASy1Tyxd]CASxCDwDl-JASy1TASxCDz2!bEA@ZmYve", "ln": 11361088 }, { "b": "aA.:p004M90rvV4o\u0026BtKaz#9uy\u0026si7wPw]nxMw3nB0bNrx(+zdA=M8sat1ZIBrC^wy?$k5y\u002613laARpdav{P@A6[CQwO#PjwQ4Y@Acb/jzGu}xzY\u003c1tz/xb$vru6kavf%=ay]5bwO=p7wPz\u0026mzddYjCxdztwGV8dwODfcz*c7wy\u0026r%2v\u003c2x4AV![7By!%7x(mMavpJ!UB8@ECzY\u003cdnwGU(4BA.UzyANtjB9h5nefFLyAV!}rvqP$1wGUDcaA.-", "ln": 11414652 }, { "b": "B-8p@vqPMQuU%jYoj-xoxKLQ)l1szyB-8p@vqPMQyH}=UxKLQ)l1szyB-8p@vqPMQvpJ!=B-8p@vqPMQm}D^gx(W={Bz(hBpgn0J0b#v*xL}l}wDkbbBy!A=zdJYCD2[7sz7X.ezGGPfwDlHAwN!CyByO#Tx(dNapI%.zs8@1%wLu/QwDk8ozdmi%wDkp/B9RUkq/(C\u0026wLDPyxLzu}08)DJq/(C\u0026wLDPyxLzu}0crl\u003cBy!fPv}YN]wDkbbByw0^z//M2", "ln": 11884084 }, { "b": "A+P09By/H[yG1!OqE%@)A=af+BAh88B-.ho0ax$\u003eA+P09By/H[lQ\u003e0@A+PA7lVM:DBy!J/Bza0^By/H[qE%oEl2pv7D30Rs09shPBy^:Oy^Jz?wPE\u0026?B.%D\u003cBy/H[m}D^eD30Rs0cqZYA+ftVD30Rs0aHj}wPE\u0026IwN/:(Bw(W.wO\u003e\u003cBy**%$07?6wwPzHbvqYN^mR(HCA@Y3Sz/xb$vruj4zBOCJxla5+y**%$090(LwO%\u003ezv}YBGz//Y9x\u003e7N[x(v(PA+xB[lT:FrwKu", "ln": 11888889 }, { "b": "x-JkPxAfdPzVB\u003eVxAhPzASviZo-OP4v/NRKA@ZpZzVB!Tve%{uwDi?MzVB.RBo31PzVBUPA@W/)aohysxAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?v/QAEz2!zMzVBUP03b\u003eQzVBnEyxdljwDl/LASyv+l\u0026Z=#yYE(zC(N*+yYFwNv/QoAqugndBo3sYC(QhizVB[Wzua+U02oLPv/QfxwDlMEve%45ve$cAwDhYPtl4v$", "ln": 11899186 }, { "b": "h-9/Pl}e\u003c@gc4cJiwrxGk}\u003c#Gk@7hNlPD$Vl]l\u003eSmNYW8hBG(2lPl.NhBfqYi5@(OgDv-?004N[0rvW\u0026m0SVUze0GRA=lhFm}DN7B8$]fvR*rBefD5TarR^HarR^HarTH6vR/:*oj-xifFCmsfFCgmfF\u003e:yfFCgmiw-AzfFCgmfG7QufFCgmfFCmsfFCgmh8m3Bg+*^vfFCgqfFCgmfFLmnfFLmnv(l84v{@\u003e6h^{faixpOewmvqHhdZwPw\u0026scU", "ln": 11906300 }, { "b": "e=XDywb{fvzua+Ux-JkPC(QLszVBqFwDlJDe=U\u003eKp5(7g0rtE!zVBROz#:qDzua}Zp5[Y5z2!bE00000o-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu8o?00000ASvx=0rtN?x-I@HwDk9#wDl=Kv/QJHx-J8LBo31PzVBUP00000o-O(cv/QJHzVB?UzVBwHBo0][nDro3wDlPFBo31PBo3N^o-P8iwb{fvyYD6/k(+u]A@ZpZASxIFv/M", "ln": 11940260 }, { "b": "yIvW0mRMBIwb[.XzEU\u003eCuTDcdv@2^@xguPDy?9Jdp*[S=z^^fuyHpBnvpK7!zF8BMwO+(Sjv%P)x\u003eIr{wiK^ouQwghyIvW0mRMBIwb[.^vr=H6B.%JTw]7)$wM9q?wJ\u003c(", "ln": 12253050 }, { "b": "A+P2onM6bdwkv8VC$.{[BuAI^e[X:quRbuJz2^HWB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eF-JB963EwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jxaG%B7GD2nPXJX08[e:By/qwlVl^SwN/*@z/fRGnLA\u0026tBs}SCBydQYwO?AOx(){608[e:By/p?xjVf(l2pgLA+PSez2^HWzeA\u003caA+P2Hy?EWbx([390cqZ[uSHPKx\u003egT]wN[8yxk.*8BzbH\u003enPN*MAbY-oBy!#Gy?EWbx([3909iJAx\u003egT]wKgcBz/PMlxL^-ZwPRoDz/6DlwPI{bz/d\u003cSxkW", "ln": 12258402 }, { "b": "A+eoWy?WA*BzkVhlVm9+By/E)nP53UwO(0@Bvf$:w[+[2A::67z/eD:w].E7xI@zYB.bSolVm9+By/E)n][]*s7L\u0026lwQcTYzGYPiBy/E)xjVf(nPO@}wPv=(wPRoWvqGT*vru6\u003enPO@}wPv=-wPRoBv@#\u003c4y!nX?B.bN[B7GD2l1t1VvqFIRB9h5m07QQxl1t1VvqFIRB9h5m0blH}B.bN[xjVf(q!Y(ZvruTjwLlPWqE%]/y\u003c6xg0b2\u003e+uRbrWB.bO(x\u003eIq", "ln": 12262170 }, { "b": "x\u003egT]wMiO-wO$ySAbn%d07y^FzdN-@By^:UA::j[n][]*l2}0OC(Q/Zl2}0OC(Rn[A::j[xjVf(oj-wGn][]*s7L\u0026lwQan*wPRoLwQcZ?v}Yp*xjT[ZvR/:*oj-wGCxdbhAaJMMwQan*wPRoFzEWZjAcbV4oj-wGuUaa+A^qRCwN[CBC(R[%Bye6Sy?WA*By!#Yx\u003eIr(BAIRnoj-wGm}DNHA::63oj-wGxjVf(q!Y(Zx(mMRwQan%wPRoTx\u003eE", "ln": 12268055 }, { "b": "0a=dF0aM1E0aV7v0aV6L0cncZ0ce6N0b.^H04[n4L1tTw09xjQ05KWi05jEe06g950962p0at\u003ep0bITD03zn-0b?\u0026W0aV7v0aM1E0aV7v03zn-0b8vz03znK0bhBL0b8vz0ce5Z0cwiL0c!G=03znI0cnb.0at\u003cI073V]0cncK05:*l0962t0bIST0a=dF0aM1E0aV7v0aV6L0cncZ0ce6N0b.^H04[n4Q+hW#IC[!wBy/qwq!oDYA+L", "ln": 12319705 }, { "b": "B-.q7B7]o8x(mM\u003cvqGN-C42ifwPIj1B-qqrA=+(60000000000v@bN/zf669B-qqrA=+(60000000000v@C)?uT)+Ty\u00260W2xjUB!wPRQ7woha0B-qqrA=+(60000000000vrDW9z/PMrvruj4zEl%)wn(E3zGC\u003cUA+flkwPI%2z^)D)v@#70x\u003eIr$zF9r+y?E9#vqH6$B6\u003c0hAbY-oBy!$.00000B7]d+00000wPz*fA:Ju*B7ol8Acb/jzu6Up0000", "ln": 12600904 }, { "b": "z^)D)v@#6?zEWZjAcb/jzEl**xj2*\u003cy\u0026%rguVQveAbP=swN\u003e=vwnca7y*?O?vpKs+C42ifwPE?K00000v@b\u003c\u003czGGlbwN/:(Bn#pvvQS+Zv}Yp*zE)S\u003eBz\u003e@azEl{=y?X67A^q2ez!9B2uVQveAbP=swN\u003e=v00000x(!urwPv+JCR9Awx\u003eqg7eP$YC00000Ab](lAcbDgvqH6$B6\u003c0hAbY-oBy!$.B97\u0026jwDhYgy\u0026r%2zEm6\u003ezGC\u003cU00000v@b\u003c\u003czu", "ln": 12601456 }, { "b": "BzbP6B5Nj2AbP=swN\u003e^txM53fwk^5Wx\u003c\u003e*(DsZ5]yH}xLzE^Z8x(n2UB-.p\u003ewPRQ7wogW(AbY-oBy!$.uVZj4wO%}Own(E3zGFf!BzaxWBzbP6B5Nj2AbP=swN\u003e^NwPRoSwP\u002604vruj4zBFCNAbPDdBu$4\u003exIA5WxM4B5q*04#z/P@hwb]Lwz/](bq!o#-vqGU7wM08.z!0i$x(v(TzE^Z8x(n2UB-.p\u003ewPRQ7wogW(AbY-oBy!$.uVG.3z!0i$x(v(TzE^Z8x(n2UB-.p\u003ewPRQ7wod", "ln": 12733122 }, { "b": "z/P@hwb]Lwz/](bq!o#-vqGU7wMiO-wO%}Own(E3zGFf!BzaP!xkRB3xf*uDr://!wPH^)AbY-oBy!$.uVZj4wO%}Own(E3zGFf!BzaP!xkRB3xf*uDr://!wPH^)AbY-oBy!$.xjVf(qE$2\u0026v{%E[z/e0Ywn(E3zGFf!BzaP!xkRB3xf*uDr://!wPH^)AbY-oBy!$.q!Q8(y?cEQA+O@#x)Kt*wP\u002604vruj4zBFCNAbPDdBu$4\u003exJ5RTzFs03l2pgmvqH6$B5Nj2AbP=swN\u003e^FA+fAjv{%E[z/d#", "ln": 12735191 }, { "b": "wN//Zo\u003e!9Tz/Y\u0026eBs{c}wO#Q7BA{P0wmYNfp\u0026ZF@z!0Z4B1QmcwO$7IlVl\u003cWwN//ZrbUlDz*C#jq!p4JxjVf(n][]*s7L\u0026lwQdi=Bo3w[BydTYz/eS/vOpoTq!p4JxjVf(lU{EFzGF/*v@=d50cqZ[uQFTzwO#P*wN/:(Bo1WDzF0P}B-I4VCvtic0b(*-nO@A.x\u003e7\u003e00b2\u003e+uQOEqvrDyd0b2\u003e+uS7DPB.L(cq/#LoC%(jQvrDyd0cqZ[uS7DPB.L(cq/#LoC%(jQvrDyd0b2\u003e+uQX\u0026", "ln": 12746751 }, { "b": "qVG!$pYKq(pxjn)q#/t!l\u0026WiqlJx^Wk(:ERo-OJ2q#*53pYJ]:qVHe8qVG!$pYKq(pxjn)q#/t!l\u0026WiMlJx)Zl\u0026YTQuJrB[nb${QoAm-^mf36.m/U%TuJr!2mf3o!nb#A=l\u0026Zc=uJs18rrb?}pYKn\u003equfU@mf2ZQ06@jqr@+U?oAm-^eDwAzp5[5\u0026r@+$}f91=FpYJ]:p5)\u0026=l\u0026X!slJx)Zp5)--nDqlXrrb[%k(:\u003c:nDqJ^p5\u003eqRl\u0026YTQrSCX\u003elJxK", "ln": 12754802 }, { "b": "ASviZwDlYIBPt?IyYCNTBo3jVaoi+?DJk-1Ee\u003eR{e=W0]rSDLdyYFOTwDj:\u003eaoi+?DJk=2Ee\u003eR{e=ZB)nDqcUso78Rf-Tfkf-TcjiSHo5q#*OiwDi?MpxktlwDlPFnDro3lJz38zuaLOwDliuBo1VdzVBUPw=MJBx8)5OASxIFBo31PzVBUPaok{Lx-IVzaoloVzVB\u003eVaok)KzVBUPBo2.Hx-J2Jaok*Izua}Zaok1lA@ZaUzu9-rwDlfto8@J6C(R)=e=W0]q#*Oix-JhOaol9QA@Wr.ASxUJAr7aYx-JeNwDllvaolG-zVy)WB]U}JyYFeHwb{3rBo2\u003eLaolG-xAhPzaok)KzVBUPw=MJBx8)5OASxIFBo31PzVBUPe=ZB!nDqcUso", "ln": 12789342 }, { "b": "CR%N/q.*i*0000000000yIvqV00000RLZk/RLZk/yiKB[00000yxatm00000k%^}bmmG^rnLhSHo?[FXqbQs(rArg6sZ2lyv}od.xj#0]yIW\u003c9z/xYpB98LFCx!yVfFLssg=mfIi5@M$0000000000CR%Ny00000yJK?400000wb(Pf00000zu6Up00000ACkyM00000CR%Qz00000vqGMR00000wn}OH00000009c61o!#m2NH?C3\u003eiWS5d]J*6CRx1", "ln": 12908888 }, { "b": "K]\u003eYOf=\u00268/5fw8K5t(WH0x{=:kl7YN\u0026tnbP\u0026q-\u003cmkM}eS0dVzU002pW002pW@D(wVZYN@{@D(wVZYN@{mf2WPl\u0026Y:TeDwitqVFrFqVFrFk(-Rtg5%olo8@2[qVFrFk(-Rtirg/mo8@2[qVFrFk(-Uuh2]Jmo8@2[@D(nT]a7\u0026%@r04Z]8!#)?#:T)d*k}xyHEyeaPN3\u003c9@[NpvGw:\u0026kMB41?#:T)o9CrSyOq]lvf5T?]aaaZ@D(zW", "ln": 12995280 }, { "b": "f!+vqg5%)lstqG!f!@-1o*IcBni]9/g5$@#Byd%qk@ywL08LKcg5$i[vn*\u0026Fh8c\u0026^mpP\u003eHvn*\u0026Fh8c\u0026^l1L9)h8W*hv[pDBv]E5Hh8c\u0026^qGDnBB74)^B5M:Xh8c\u0026^q*Aj%wPR%bv(k$@07/NXf!+Hug5%)lstqG*f!@-2l%8e$i59e*nKMVnf!+vr07/NXf!+vrg5%)lstqG!gbn\u00263l%8e$gbyV=uTD-Nvrui[l2}0OC$z)/Bx0K8wM9q?wD", "ln": 13444290 }, { "b": "07/NXf!\u003evqhulrpstqG!gbYb7l%8e$gby/*nKMVnfG7ZB07/NXf!+vthulrpstqG/g=tt9l%8e$gbQ@\u0026nkhxqq+fhfh8UCEwPRoTni]0*hulfQwohfQgbQ@\u0026xjVf(zFsflp+\u003c)^0b2\u003e+uSYgcq.*i*0cqZ[uSYgcq.*i*08^(Dq!PO{h8UC6v}oT?q!PO{h8UC2wPGNYi74d+nnR^Bq!PO{h8UCjB750*vnI2^q!PO{h8UCkD2mzfBAh89gbP", "ln": 13446674 }, { "b": "mO=]Rk#.h=mn)bJm[3=OqCQ1]q^03#mni+GlSd5-r9}{Wq^R*:m]92Or7GZ-xjVf(p5]uDByd=yju=KvlpjTNp/H^/rA8HTpe\u003c!Lk#ZovuQEyYnjuA-o\u00261eCuRa0ZpxjssB97#ge\u003eF?sxjVf(l@i(8wPRoEpYKymvnxfTpYLctByd\u0026AB7GD2pYLctBydBk0cqZ[uQN-\u003exjVf(q2\u003eVGByd(BnP5Y.A=U!?0764JsX@78ogq#\u003cl{T^ruQvBZlsinLk$1dt07G:Zo*I-=o*}#Vk$svJk$\u003c%FlJ", "ln": 13449287 }, { "b": "wPRoEwNY^{nN}*lwPRoJzGGDgzEEuMwb[#nzGGr3zGwDZC#[Z4xI08-wPzV%y!ndquUKz1wPzV%y!ndqm}D^mB8L}$wNXqzC%MmVz/PMlxL*sK07QQxoj-xmy?EWbx([39nN}*dvqGN{A+PSezaOmrlVM:DBy!uUzE^W5nN}*lwPRoMz!A3/yH}xPwb{WZBydZWxh\u0026!+wO$7I08drzxk8l@mrSlWBv*0ym}D^qwQ5q*wb{mNBydWLC$zJDB7GD2oj-xuwb{yRC$zJD", "ln": 13450911 }, { "b": "mRMBIwb[.Ty?C}EuTDcdv@2^@xguPDy?9JdqD2\u003eWx\u003eIr(BAIRnp*))Bx(mMEyHpBnvpK7!zF8BMwO+(Sjw]9zmq=QQD2N\u003etz/exWwmPy(xfH9ruQwghyIvW0mRMBIwb[.Yz/PY6Bw)p4x(mMEyHpBnvpK7!zF8BMwO+(Sjvs47Ab]JhB7]MgoL5xUy^8SwuQwghyIvW0mRMBIwb[.^wPI{3xjTFxByw)1k5jIjlsBwtx(mMMx\u003eq9\u003e06AL-xk.*8BzbIPyHpBnvpK7!zF8BMwO+(Sjxt)bx-", "ln": 13454272 }, { "b": "x(mMMx\u003eq9\u003e06A$!BywY*ByvECwo8m5B3swDuQwghyIvW0mRMBIwb[.+wQetXyHpBnvpK7!zF8BMwO+(Sjx33fA8*^@wPI^aC4ChRB8L}$wNXqzD2(e+uTDcdv@2^@xguPDy?9Jdq!Y(Zx(mMRwQetXyHpBnvpK7!zF8BMwO+(SjxcuDl2pvox\u003eIr$zF8QND2(e+uTDcdv@2^@xguPDy?9JdnPO@}wPyZ-xkRB3xg(/YB3swDuQwghyIvW0mRMBIwb[.\u003eA^o@!y!nX?B.bO(x\u003eIr$zF8QND2(e+uTA", "ln": 13457284 }, { "b": "x(mL-B7GD2p*))Bx(mL-xjVf(qD2\u003eWx\u003eIr(BAIRnp*))Bx(mL-B7GD2qD2\u003eWx\u003eIr(BAIRnp*))Bx(mL-xjVf(qD2\u003eIzEWZjAcb/jzCT+Lwnb{]0cqZ[uS6/*mq=QQD2N\u003etz/exWwmPy(x8\u003enbB7El^rDq[AzEWP}x(mL-wO#0@wnb{]08mfqA=l2qw]]T%wmYU2x([R{z!9A}e\u003e*g@xk8l@08mfqA=l2qw]]T]CYWImB7]MgB1Qd8xj\u003e{@x8(NQBydyKvqfO1nN#yIBzk\u0026xph-*Av@2^@x8)0:BydyKvqfO1nD", "ln": 13468264 }, { "b": "z!]zXvp:HIv@k1JygQ)%p\u0026yn*0afeQD2mzfBAh89l1BzyBy/F*vRPE:BwM)]yYD\u003emw]7)$wM9X\u003ewNPAQlVND\u003eBz\u003e91A+eV@08m3wz/Qb4BAg@3z2=}zwNPW(nnic!z!B90z2^KNByw#NB-H]jx(v(Wx(!xmxl4A$08^xrz/PwQz/ff3xlwl6BzkVhqE%@\u003cx\u003eqD@y^-z^vruj4zB!F.Bz\u003e/jvqM0gwPGN^gdL?\u003e06$gqgbQ%Wv@hiiwPGNYi7EE}", "ln": 13471304 }, { "b": "q*ACawO\u003c4!z!%l3v@#B6zGvB1A=lnnzu9QHxkNYzx(i]yz!T7?woQQ.w]yZYA=U@kzuai\u003er+lq)x(v\u003e?q*ACawO\u003c4\u003epCb1Mze:JbB8#5lzuarXBye0=yH}xVzBO5Gy?mcTvqGT*vruj4zua-?Bye0=yH}xVzBO5Gy?mcTvqGT*vruj4zuarXBydQSv@co#wMiO-wO$pYmQZ1EwN[?Iy?WA*BzkVh0cqZ[uRbcBy\u0026%o1rbVL-zCLdtvqfK?wl9bPx\u003egT]x(v\u003e?nD", "ln": 13473270 }, { "b": "x\u003eg^}07g^rvru6Vx\u003eIr(BAIRnp\u0026ZF$x\u003eg^}090#:m}D^vx\u003eIr(BAIRnp\u0026ZF$x\u003eg^}0cq\u003c!zEETfA+e6/z*2\u00269wPv=)D2Ntkw(9I^C4\u003eF#ASwA[A^qRClU{WZwKgcBz/PMlxL*N^z*2\u00269wPv=qlVND\u003eBwD\u003c!zB58Kz/PMlxL*N^z*2\u00269wPv=xlVl*XA+frkx(v(=A=lbnwmY=YlVM:DBy^*Tze:JbB8#5lzCUv(C4\u003eF#ASwHsw]7)$wKyxMAb]JhB7]Mgp\u0026ZF$x\u003eg^}0b2\u003e+uQF%SBz(1-z/6DlwPI{bz/ex(z*2\u00269wPv=(wPRoDB-RUyz9@kUAb]JhB7]Mgp\u0026V", "ln": 13477989 }, { "b": "x\u003eIr$zF8sSwN]v\u0026Bzkf1A@Y\u0026:Byd%XxkRB3xg3YJwmYU2x\u003c\u003e?00cqZ[uSgVKzFs03lVM:GwO#Q7vqG#+st.=)mq=QQD2N\u003etzF8sSwN]v\u0026Bzkf1A@Y\u0026:BydEOv@=\u003clBzkS9lVM:GwO#Q7vqG#+B7GD2mq=QQD2N\u003etzF8sSwN]v\u0026Bzkf1A@XWzCX7z+x(dAIADLYaA@YlHy\u0026%q*wQ5q=ADLYaA@XTDv@C)(zF8%\u003ex(4?\u003cqE%oEq/)4]zFa2?yIv-.B.\u003e(n08NYOBz\u003eVcyY", "ln": 13483572 }, { "b": "0b2\u003e+uR\u003e=Yv}x.5z/Oi-B-8p3xjVf(oLFxWwN[FGB96=/B-8p3x(m)jBvf$?zGC\u003e*z/]@t0764[D2N\u003c9lpk^sAcaGVv@=\u003clBo1S{A^qRCmq=QQD2N\u003c9q/(C*Bo1WDzGYPiBo2@+BydZIB94y{wPRoWvqGT*vru6Vx\u003eIr(BAIRnoKS0:0cqZ[uSHPKx\u003egT]wM9qQzEETfA+d{MB94yWwO(vewLuJNBo2iMAaJ(%f/yZNx\u003eI0#Bo2lMvkP+{l${pBB94yXxKJXRg^(4\u003cwPI}", "ln": 13488794 }, { "b": "pJZ+#B-WR4B-.OBBo2@+Byd^OCYS{Wz*2X!wQ5p%q*ACawO\u003c50wQ5p%q*ACawO\u003c4^B.kk%A=S\u003cjwQ5p%v}/)}wPy:YCYS}8y*?3}Bw#*@Bo1*xBw=K\u003eraQq@0b#:.x(n37CYS{#wPRoDz/fVdCYS}bwPRoDz/fVdCYS{}vOHovlVl\u003c:wQ5p%AahKIv)+fLBy/Ys08)#WwNPB\u0026zF8sPzGGDmBo1Wpy?#ESzGGDmBo2/Vy?#ESzGGDmBo2@+Byb", "ln": 13489441 }, { "b": "wPRoUz!\u0026{4l$G\u003eGD2N\u003etz/eiVC(QPToj-wGs8}.*oj-wGrC)23vq[\u003eJC(RhyzGYD8x\u003ef!RB9h5moj-wGl1LagwQan.mr\u0026==A+fq+wQanyz/fV9x(m#+wQan?nO@A+A=:@=C(Qe#A^qRCnO@A+A=:@=C(Qe#A^qRCl$HBYA=lj@wQanEB5(Z=x\u003egs6fGA6yv%8*aBA{I\u003cC(QANx([5$y?XibrDz\u003e(xim2BiA6H0B-IhrC$RZ]07gWxC4y", "ln": 13491114 }, { "b": "nN#yIBzk\u0026x0afkLvqfO1nN#yIBzk\u0026x07?lbB.\u003e\u003e\u0026AZ:?:BA)\u003e0wPRoJB46}+BA)\u003cUB8L})A=k]dA==Nblpk^sAcb2\u0026BwN0@AaK6iC(Qe#A^qRCq!p5xzGFY}z/xodBA)\u003e9B9ZV6z/xodBA)\u003c{A+xW#nP5S@0000dp5[5\u0026eDwAzmf3D\u003c0teifqVG8-eDvKafAr{fh#\u0026%\u003equfR}k(-Fpgxo9ehVLPk0teifqVG8-eDvQcfAs9khui:]qufR}k(-Fprrb+]o8", "ln": 13492482 }, { "b": "yYF2DzuaeDblhcLwDl=Kf-Tilg5@)av/P%rv/PLy0cwi.0b}{0051s90cXA!0cXz}0cXA004[m\u00260ce6L051sc05ayb05jEb05ayf051s%0bRZL0a=dF0aM0N0at\u003es0cnb}05T:m04!gX0aC}r08NteBo3y.z#.{0f90T9Ck#*!Ck%k}Ck%A0e=Y!\u0026ASx.Lf90:cfAr^bf-S\u003cbfAr{ff93j%z2!wLwDlPFv/N.Nwb{fvA@W=(v/P%rv/PFw0cw", "ln": 13601173 }, { "b": "B-.qnA+PSvrX=\u003cOuTDcdv@2^@xguPDy?9Jdl1ap\u0026B-.qnA+PSvr+lq)x(v(MyHpBnvpK7!zF8BMwO+(Sjv\u003cNoA6[CQwO#PNyHpBnvpK7!zF8BMwO+(Sjv9y^l3mo.z/PMlC%l1JuQwghyIvW0mRMBIwb]OHx(cpRwb]hxB9h5moKS0:okXV(zBXR-wb{W[w[C+4rbUVCAbn@)wDkqypiyw?pJxJIx()]+Aa9l/08[e:By/qwl${7xzF%Prx\u003e8h", "ln": 13775039 }, { "b": "0cXAO0bITK04!g^0b.^P0cXAX051s\u003c0b}{H0b.^J0aV6Y0aM1E0b.^G0bhBC0cFoZ0at\u003eH0bhBK0b.^8xAibOBo3mWA@Xl3f90T9yYFwNx8(SCzu8o?z2!nIv/QJHzVB?UzVBwHBo3jVzuaFMx-J2JwDjs.v/QAEz2=i?csW3(0b?\u003cW0aV7p0bhBJ0cncZ0at\u003eB0aM1u0ab.z0at\u003eA0a=dBxAibOBo3mWiSH/kf934[v/QfxwDlMEve$uGe=Y.*x-ISyASy1TA@ZaUw=M]Me=YwYzVx", "ln": 13785200 }, { "b": "0b}{H0b.^J0aV6Z0b.^F0cwh]0cncV0a=du0cnb[0bqHT0cwh]05jEa05ayzBPuBZzu8Y$x-IYABo2[MiSKa0ve$rFve$cAA@Xl3zVBhCBPuH-xAg6[Bo3jVyxd]Czu8l*Bo3N^z#:CHiSJ){Ck#Z+u%S?q06{Pp09Pwh04!g%05ay80673h0ab.i04O4O04[mQ06{Pp09Pwh04!g%05ay80673h0ab.i04O4O04[mQ06{Pp09Pwh04!g%05ax", "ln": 15172926 }, { "b": "zE(:RxK$Z%y?mR!p?:(Wq!6GLwozZ1ASx6LA+eV\u0026p\u0026yn*q!6GLwozZ1ASye/BzbYavpShMz!@uZxK$Z%y?mR!xjVf(qE%oEwPyZVxK$Z%y?mR!A+eV\u0026wPyZVxK$Z%y?mR!xjVf(s8@1%wPyZVxK$Z%y?mR!CxdztwPyZVxK$Z%y?mR!B7n({wozZ1ASx--Byb", "ln": 15465027 }, { "b": "zGvB2wO#71x\u003e4cwxLz72qFx=SBu%}YBzbJ5Bzkj+l2pvQv/PhvvpPvcB-Rb8o)7n]x(E)ll1BHalVM:DBy^*MwN/H!wb[#nzGYPiBvf.Mv@2T^090(mvqYZ?rC(qWwD", "ln": 16834126 }, { "b": "wO#NcAXq0oBydQYwO?ACD2[7sz7XOazdN:4v@\u003cn4wO#NcA=S\u003c8qE%oEpI%#]raP@*z/NEywPRoJBy/p?q*ACawO\u003c4{B.$Ygx\u003e8ipraP@*z/P[KnMonsB8M7KB7GD2nPXJX08[e:By/p?y?mj2l${GrA+Pf1Bvo?W08^lywn=q+A:-\u0026@z/2FNmSJA:08[e:By/qwqGV(0x(dAlnP5S\u003cx(n0av@\u003cm*A+$!Kz/PW{BAg/cB7Puhz2^HWB97#ge(D?fBzkP6e\u003eG@5A+PAjx\u003e8ips7ce!0b2\u003e+uR+\u0026R", "ln": 16842160 }, { "b": "v/QPJwDllvl\u0026ZS}Bo2.He=YzZyYFnK00000F=EC70rt^[wDluyve$9zlJz38z#+d-ASx!Nx8(PBBn#pvSq[4vo-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu8o?aoiI:k(+Z3yYCNTASx!Nx8(PBBo3vZaolAZwDl=KwDl-JB]V7Nwb[jZ00000H5-\u003eb0rt)}ASx!Nx8(SCzua8ByYD{8x-I@HwDlPFve$cAwDhYgqVI7yA@ZpZwDlMEe=X/IwDliuBPuBZx-JkPC(PC%lJzcbC(R^", "ln": 17097472 }, { "b": "A=k$)vr\u003egJlT+aUwN[bMrC(R\u003evpS}Wp\u0026ZF^x(4tXoMaAHy!XtFxLzu}07pmqvnH#.By!%7x(v(/v@Dr$0cqT*AaG2ZwPRoSwPI^jA:@VWD2Nr{r://!wMi}]wDk2qB7Gh$y\u003cw-^", "ln": 17112309 }, { "b": "B8Mhwv}wwyzEEf?ASwEED2N\u003ezra{q\u003cCsVpYAaK4\u0026lV)A\u0026wO#P\u0026B7Gv(p?sVVlVm9+By/E)xMs8ywPQQOB97F$zzK4pA=M8s04}=6z/L?AB.kk%A-lW#wL3=HA+eW2wKZ9rBz(g", "ln": 17113639 }, { "b": "0rr\u003cex\u003e8g4B8LVjavy6/AbP=9BzkVh0018w02!NCv@=Hez!sadT@]t(mn$y0A:-/@Cw?Iq001?R058i*awDMWA=l2qw]]d.z/P/nA::67z/dfIavf*WaAzgexMOqrA+fr6A=#28e=U\u003e-0rrJ+e\u0026Csqhz)iDe?/f-0dZTw0dZB[e\u0026Csqhz)iDe?/gakTGQcy\u0026\u00260?iV}%Hvpy/Rl@)kZs4MdMm[29?iuQNNA:-\u0026}xGvnRwO+{^B7E0We?[Flq/Vwnz!9Auazt\u003esAc15[fk20vxMW=pv@Diqwn=NcwPPOn", "ln": 17116806 }, { "b": "r6+RFA+P09By+CAB8L}+CYWImB7]Mgl$7gCl3di?x\u003c#jbwDk2qB7Gh$y\u003cw-^BywY*ByvESBAh88B-.f{n][]*p\u0026ye}zeTDlxLy%xBAzLqvS=^7090SLwNPaFByxo9v)LiUA+P09By+Cvzdm6!wmYpqBAzLqvS=^707?lizF-*1vp%dZl3di?x\u003c#jbwDk8oze:i9wPymKvruTjwM08VB.L(cwi\u003erVA+P09By+CAB8L}]wPq\u003cbA+e=EBAzLqvS=^707gWwAa%c1AZ%XU", "ln": 18742754 }, { "b": "y?m9#x(v)ge\u003eF-JB963EwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB4l${dMx(v($A^ooIwPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jx3JDBy/qwlVl^SwN/*@z/fRGm}DNHA+P2ooj-xHvqH6$p*[6Ujx3JDBy/qwq/)4]zF7I0D2[7sz7X!0CYUMgB8L}Gph:VOB1Q7az/er*wmW}*e]$PCuRbuJz2^HWB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwPzG{e\u003eF-JB96JyD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHz=C#!u\u0026B.axTx(Vsnoj-x1r90BzB.9:2e]$PCuRbuJz2^HWB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwPzG{e\u003eF-JB96Jzr://!wJ?./wPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jxa%+C%i\u003c4wPRoJBy/p?q*ACawO\u003c4!z!%l3v@#B6zGvB4oLFM\u0026e]$PCuJ", "ln": 18757520 }, { "b": "A+e/?B7nS@uW3jaxKts*wm6a-C(R]cvrcD%yH}+\u003eo\u003ewfWA^mT-D2[7sz7X:#v%8*aBA)\u003e0wPRoFze:Px07?lbB.\u003e\u003e\u0026AZ:?:BA)\u0026^00012w=MJByYF2DpYK]7Bo2$Oaoh", "ln": 19160754 }, { "b": "h+3k6i5%n+i5B2?lodt1g=W#\u003egET5/g=46ClO?b0g+.r!h:YF?hBxn/h.WfDh8mGOk}$t!gbH*PgC]d{lVl\u003cWwN/*FB9RUkk4F2cgC]d\u0026hzNPQgCIf.mku!?fF(fOgDd6Fhz)oEf?a2/i6]L(mmGf\u0026mkuUSmLNj=g+{)Ph8WoXgbgZQh:]O\u003cgbH\u0026*jw]:2z/fD7v@$1TD2vaQwm5X3h2]:cCX7xcBy^{WA-m72x(mMHA=LPlqE%](y\u0026\u0026-)Bza3I", "ln": 19583936 }, { "b": "oJt1\u003cmn:aPk$K:CrZ/)^B-Ra[oJ7{=m[3wSq:\u003cT=qb{g!07fBKmnu!ZxjVf(m[3xIr.#7NqB%RZoIXQ/xjVf(q#/rPlSclN07/{MqBjH^xjVf(l}6^xmoGQ?D2[7s", "ln": 19588021 }, { "b": "B.7L\u003ey?cNPy\u0026%p?qE%uRA+5iVy\u0026%p?q!p5KvqH6$0b=v(r://!wDl)Zy\u0026%p?q^\u003c\u0026X08[e:By/qwlVl^SwN/*@z/fRGm}DNHA+P2onKEAjy?m9#x(v(Kr6z{jwO(vewDkUOB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eF-JB963jwO(vewDkUEA=+(6q!p5GwO(ve", "ln": 19592346 }, { "b": "BydQYwO?AwwPR%bv@\u003ej-wO?ADA^p-bx()]LA=LPlnPXJX0afCZwO?ACD2[7sz2^HCzddx%z/Pz/y?W.^oMauImSJA:07y^Fz2^7qBwlsPzuarXByd%=vqV6AA^p-bx()]NxMXidwN[XIv@Dx#q/De.090#:s8@1%wM08Hz/Pw!Aa9R:A+e:0A+59/vqV6Ax(dAWAa9R:lVM:DBy!x\u0026vqV6jz/x$\u003cA=M8srbUYOvqV6nwPQjYvqfK^vR/QJ", "ln": 19594714 }, { "b": "0bVp:vR6O308[e:By/qwluM)LwPz?(qGV(0x(dALwO=r%A=RjLp^FS5A+frk0bMN^x\u003e7N/l1BIDwPI[)m}D^sxNaVkv{%gtwmPZ(B8}s\u0026z!q%Sx(37Cwo8m5A@XZwBw#W.y^zPxA+frk0czT-y^zPxA+frk08c*xBvH7?B7/b}rC([)y^zPxA+frk08c*xBvf\u003e.B7F(ZzGGPel1BIDwPI[)B-8qny^zPxA+frk0a{m\u0026z9.YyA+frk0ax!Tls\u003c!zzB4/zA+b", "ln": 19598774 }, { "b": "zE)s1q!o\u0026Sq/ueYwPN]KA^p2\u003czF\u003c2}Bw)9/yH}O/B8LM7wPN]JD2[7sz7Xg]y\u00260V)BzkVhB1Q3MzGP/cA::6dAXpm3B7GB[xjVf(pIaiWwPN][wPRoPw[D9}Bo2cCxjR", "ln": 19599487 }, { "b": "D2v9(pI@{sBA.UzyF[.NwODs0s7#+\u0026r7{jRB9RUk08^xpwi\u003eoZzESVBwO#3AB9RUk09shPBy^:VD2v9(qE%uHx)a5NB9RUk08^xpwi\u003eoZzEVmQBy/GgvqFkJD2v9(q/=+MwNPaXA.Hy\u0026A6XL\u003czESVFvqf*VzBnkKvraUPD2v9(q/=+MwNPaXAZs+(zESVjB-.qdzGGP5vru6DB5MT\u003cC4CXWB9RUk07QQxnn\u0026M\u003el1BIDwPI{7B3T\u003e)zESVlz/fD7", "ln": 20099535 }, { "b": "x(4{jwDlvOBydQSC42A9vqZfOB.(exA+bkHBAg@3zbtm\u003eC4\u003eF#AZBhQwDkFpBA.UzyG1!ZwmY^Fvrk#WlU{EFzGFiNB7Ct:wPRoPA+5)4vqFIFzF%MblT+4E07y)IvqH0+AbYxelT+4Eq/De.nOq{VA+PA7lT+4E07y)IvqH0Uz*b=klT+4Eq/De.nOq{VA+PA7lT+4E08^xAwNPT\u003e07g^phz^:mBA.CuwDkXIC#]32By^{Iy\u0026:d/q!o\u0026SqE]", "ln": 20103437 }, { "b": "l${*QA+w%3BydsfmQG8oA+eV@06$:HxK#76x\u003e7N[wN[.YA+eV@08^xpwkv8VC#Fo]B.bD2wM9X\u003ewNPAQm}D^pvqY^\u003ewPI@\u003ewPI^jA:@VVBAg@3z2^4ty?lK!A+eV@08)@Pq/)4\u003evqM0=B8j=%A+eV@08drtwjyPTzbUK%wNPAQpgXJ\u003ez/PR:vqYQ(wPyZ\u003eA+eV@08m3wz/Qb4BAg@3z2!T0A+eV@0a/$Tz2!iWBydQYwO?AQwmPmZnPXJX08m3DA+P38nPXJX090#:s8@1%wKguSvr\u003eB^wO?AYBy/p?xjR", "ln": 20108469 }, { "b": "D30Rs07QQxr://!wPE\u0026ID2[7sz7Xg]ze:AhwO#P:z!9A}e(lO5ze19aC4CZ{q*ACawO\u003c4$B-8qnzdLs#wPzG[y?Xi7BzkVhe(lO5ze19aC4CZ{q*ACawO\u003c4{wPPL3A+Px8Bzk]fA@XKvzEENhp\u0026Zn!x([6jwPE\u0026Fx\u003e7{KqEKDNz/56-wmZ0%A@Y](wmZ0%A@Y9HB8U61A+PA7A@Y\u0026:BydKH", "ln": 20114802 }, { "b": "wPJ0gBo2oXC#Fo@qE%](y\u0026/U$wPJ0gBo2oUoMbb^A.gd(vrc6\u003czGC\u003eWvqf*Mz/Ou*vqZe!rc0mZwO#O\u0026rax(my?WD#Bo1*tA=bDglU{EFzGC\u003eLx\u003eIa3lU{EFzGC\u003e*y?WD#Bo3k#uR+MJB3\u003c\u003e.Abo95wO#O\u0026l$G\u003eGwO(0@Bo1)Iv@=c$wO#O\u0026lUHQWyG1!SzdNQb07y^Gx(XcfzdNQb0b2\u003e+uR\u003efKwO#O\u0026q*ACawO\u003c4!z!%l3v@#B6zGvB2wD", "ln": 20117685 }, { "b": "B8M7\u0026x(n1)nL?\u0026[wkEhUzGC\u003e\u003ewPRoFzE=NZx(n1)B7GD2mq=Tjz!T9h0b2\u003e+uS7DLz//LVzE=NZx(n1)xjVf(oMaAHy^\u0026kLp\u0026y5=Bo1ZDB46$Sp\u0026y5=Bo2rUx)r3:zddc@q/ueYwPQvUwkEhUzGC\u003eTA^p2)wNPW(mq=TPz!T9h0chT/z//LVzE^Z8x(n1)y\u0026r/(y^\u0026kLAbPDdBo2(\u0026wn(E3zGC\u003eRwPhE1v{%E[z/e]Yx(dB1B-Z$^zElpMv}xv$wNv/rwN/H{z!T9h0b2\u003e+uQF:OzGC(0wPRu{zE)uCz/]@t0ax[*x)a5#lVm9+Bo3z@A=l5wy?k$LB-8p3wnca7z/YFSz/]{", "ln": 20118195 }, { "b": "0bITK0a=dv03znU0cFoT0cwiP0b}{O0a=cM0cwiP0bRZE0cnbuD0pn}0ce6J0bRZO0cwiL07u)90aV7G0b?\u003cK0b.^U08rJ50bRZE0ds\u0026M03zne0bhBL0b8vz0ce5Z08\u0026(u0bhBP0a=c\u003e03zn*08rJ90a#pI0cwiP0at\u003eH0a=dv07c:20b}{K0a=dJ08\u0026(u0bhBP0a=dU003qe0daY^0a=dE0b?\u003cV0a=d00b.^E0b}{R0bhBJ0cwio0at", "ln": 20121131 }, { "b": "vGpiAC(O@!w=M\u0026KzVBROaoluXve$xHxAg6[aohxPyYFwNv/P{qyYFbGzVB?UBn#qxp5]hjaoj$kpYIQrve%*rwb{SIwDl=KA@Wr.w=M-HBPupVwb).Lw=M-HASviZxAh@JA@", "ln": 20123454 }, { "b": "x(mMoasY2N3jd[zy\u0026%/vwPy7OzF%Vnv}wkJa%n]?zGP=iedz}earR^o3lQDlatkh!nn\u0026M\u003ezEEx[aARp9BrCWsx(+zmz!9A4vpTK)A==2pwPF#ozY\u0026$uxK#ibzF%5%B0bNyay/tczE)s1aARJAw]zYjxk.\u003cjx(E^7xd+qRfawmharR^JlU{)^By/FUzF\u003cxn", "ln": 20267373 }, { "b": "aARpqz/]YaayMygvrujbwGSytw[ASivqYH^wN)xawNPKb4giy:arUieA+e:5eMLN*vqG:#v{%E$AV==Ezddxpr+VO@BZY8Ly\u0026131diJtxB97#4wft/5aARpdav!^wxK$Q\u003ee*9]caz$Rfx)a5gy?Wv0vrcSox(+zqwPq\u003cbA+e=lasY2N3jd[RB7F9PBzk]fl2pvQv{%E$AW0K!w)]H%wH[n$4giy{dJ?-jwGV8dwGU/2xjkp}aAg[jeO]0wwO-FR", "ln": 20268773 }, { "b": "B97\u00261y?W%7x(mMav@Dm5wN/*@z/cXtzY?t(B-I4oltQNHB0az6z/Po0wIb8Pfawl{b0*J$A+ef\u003ez/Po0wKyxNzE)s1x(v(/BAh8kxcFDVaz#sry+c254giy{dJ?Y7wGT#JnG-a[aA.:paA}HgzxJIiBywS{x(^%4zF784z/fD7v@#B6zxK4tavgr@A+cvWy\u0026r^7ax9x2A:-P(e*8R%4giy=l3^V]wM9X?A:-P(q!o#)x\u003e7ZOA+MZUaz#sry+c254giy{", "ln": 20281563 }, { "b": "vpJ%[B9g@dz!yhlByx04B0a[kayPdgwP?T5atCJ^aAIj8A+cWLat2reay]hcvpB4:wgO\u0026!jUX#uzddViy**%0x(k55D30Rse*8R%4giy=l2QvlD2va^vr+EOxf{(=wD", "ln": 20283002 }, { "b": "CPZ*pvQS$?e*9L[w)]*#Bs[XmD2vb9A=k\u0026lB-OWtz^NNdvR]?3efG1FzF9=%azC+3v@DmbwQ5r7Bs[WUarR^HdLzkr2})+JarTW8x(mMaarSlUoLFx!CPZZsuV*y6zF7NAl34r?v\u003c2\u0026nvR]?3efF+Ev@2)(B8@EAx(mMawo89)zz05fwPq\u003cbA+fqmBzbkdzEA", "ln": 20284920 }, { "b": "avG^:x\u003e7ZND2NsTpgnlUC4AYSzGP/9wPw]iw/$/9wmYZ\u003ezE^r@BrCvgA=bD8azC+3v@DmbwQ5rratj\u0026WarR^HarR^HasY2N3jevnazC+3B-IhlxcqkezFa2kc#%3txcoMqrzDHxefFFmv@DHey?mc1w].*bavG^:x\u003e7Zwz/6DfwPRT8zD7p\u0026wNPa\u003ce*9J4x(\u003c", "ln": 20286490 }, { "b": "yIvW0k5jIjlsBwtx(mMMx\u003eq9\u003e06Bn5vp%dMvrcm1zF8dGuTDcdv@2^@xguPDy?9Jdl3^V]wM9X?A:-P(lVl\u003cWwN/*@z/eG}A+PA7k5jIjlsBwtx(mMMx\u003eq9\u003e06Bd\u003cC4(a{B.$P0A.*plx(m#\u003ez=pjQA:@=DyHpBnvpK7!zF8BMwO+(Sjv%QnB.bOXwPz)bw[+:-By!oSBz9\u003cNuTDcdv@2^@xguPDy?9JdrC(I}q/ueYwPQ:SBz9\u003cNuTDcdv@2^@xguPD", "ln": 20461084 }, { "b": "x(4uZvrcm1zF5@yz!AcWA=bPex8\u003e[EB5l^}Bxq)\u003ezFs030aP}+zC$T$x(mL-xjVf(l3^V]wM9X?A:-P(lVl\u003cWwN/*@z/eG}A+PA70cqZ[uQo0XA+ef\u003ez/Po0wKyxNzE)s1x(v(/BAh8kx8\u003e[Hq/)4]zF5@twPQ\u003c)A+PA708[2HB98CpzF5@ZwPRoMz!x5uvrcl%BwcQ=0afOOzeTDuoMaLzvrb#Xl$G?Ix8()[vPdzUmr0fPxAi9}z/PzTAbPl108d9txMMWZz!0CXwPhM$xAhWRByd{SC4(a{B.$P0A.*plx-", "ln": 20471887 }, { "b": "z:wI/xJ5F:BzkS9A@X=$B-.qdzGGP5vruj4zC$a*BzkS9A@XHmwi\u003euWxK#76x\u003e7N[x(v(/wPS3dzFa1\u003cp*[A^Cw?Ijl3mo.wO#Q7v{%E[z/eG+BAzkmxla5sv@aCNBzbl6Bzkk[BzkVhq!p5)x(mN807QQxl3mo.wO#Q7v{%E[z/eG+BAzkmxla5HvrcB2A-lK\u003eBzkS9A@Zn)A=#2mq!p5)x(mN806$Bqz!0i$z/O=/BAzkmxla5Yy\u0026131vruBdq!p5)x(mN807N", "ln": 20480049 }, { "b": "wQanyz/fV9x(m#+wQan\u003ewQanOD2[7sz7X:#v%8*aBA]GaA^qRCz!B90Aa\u003cH%m}D^hCX7xcBzkS9l349Uzdmsb0cA6%mr\u0026J*m@\u00263FwOc73y\u003cu1(CXIm\u0026A:-D?w{4{aC(Q=*B97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwPzG{e\u003eFAGy\u00260V)BzkVhjxaG%nPN^vvpSeKy\u003cu1VD2[7sz7Xg]", "ln": 20486112 }, { "b": "Bo2\u003eLwb).LA@ZpZASx!NzuaqHaol9Qzu7^VnDqM!B]Tu0aoj4{aoj$kpYLUshuj\u003c1w=M-HASx}Rve$xHaoi!\u0026wDjs.x8\u003cK:aoja@g5%lke=WN9e=WN9e=WQaaoj4{aoj7}iSH\u0026liSH\u0026liSH\u0026liSH\u0026liSH\u0026liSH\u0026liSH(mdf7E\u003czVx", "ln": 20491368 }, { "b": "03znU0b?\u003cT0a=cM0aV7v0cwiH0bhBH0cnb)004MZqugndv/Q6ux-JqRwDllvaok*Izu7^VwDl@PBo2\u003eLASx$Sve$9zaoj$koAn#hx8(MAwDl-JmGu\u0026%v/QPJzVB!TC(O@!", "ln": 20494084 }, { "b": "aoj\u003ehx-I@HwDi?Mz#:qDBo2$OiSHo5DJn0+ve$xHxAiCXe=U\u003e/xAhYCiSIhvz2!zMiSIhvA@ZmYaohyilJz38z#+d-ASx!Nx8(PBBo0A-c\u0026^-Sdf7E\u003co-O(cv/QJHzVB?UzVBwHBo0A-lJz38ASy4UzVB!Tve$xHx-J5Kzu6V9ui1jgA@WY\u003cc\u0026+?0tl57ieDy7%t(VzQaoi?\u003ckl9nneDvg0tl57ieDy7%eDx5Rd/.0#tMw*Bd/Z%$e=Wv3df7Q[0D**hzuaeDzVB[Wzua+UwDl-JwDll", "ln": 20499264 }, { "b": "l$HKQv}wR+AaIgcvrujbwJy@KB.$P0AV/pjazC.7wPhi#wmYU2azULezE)Sbx(vu*z/fVdCYX0HfcB$EuV*y6zF78jx(mN8asInAzF77VpGpd?dj=PLwN/U3Abo8@azbUjz6gzZwmY{#v}vl4z/6DfwPRT8zy]%zA+eV\u0026B1OO5A+PSfv{%f@w]zYjx(vv3A+L", "ln": 20532393 }, { "b": "arR^HarR\u003ecD2Ns.x(^^8x(dN4vruBdb03?\u003cqE%]*lVl*UvqYQxvrlc)l2{QXzdNQba$KfgarR^HarR^HarR^Hb2hM-wG\u003ceTb2}MgqCGILmiTn(3lQDlarR^HarR^Har\u003ci/B8U@7C#Ov1BrS:*b6v%rA=br5wG\u0026Vm3lQDlarR^HarR^Har\u003c^gAaHjOar\u003c:aA+PA7a$KfgarR^HarR^HarR^Hb0*lZB.$YcBvH7PxlbmTar\u003cK5y\u0026\u003cxgy?j!13lQDlarR^HarR!P4gjj2arR^HarT@03lQDlarR!Pedz}earR^HaBs", "ln": 20600742 }, { "b": "arR^HarR\u003ecD2Ns.x(^^8x(dN4vruBdb03?\u003cqE%]*lVl*UvqYQxvrlc)l2{QXzdNQba$KfgarR^HarR^HarR^HarR^HarR^Hb2hM-wG\u003ceTb123}mnu/lnKK:N4gjj2arR^HarR^HarR^HarR^HarR\u003c@x(!lfvr\u003e*-CYUb\u003car\u003erix\u003eqg7eOO-tedz}earR^HarR^HarR^HarR^HarR^Jrc-B]b03?\u003cnP5SYxjV9cedz}earR^HarR^HarR^HarR^HarR^JrbVL-zx.a:b1UfDedz}earR^HarR^HarR^HarR^HarR^Jl2{QXzdNQb", "ln": 20630396 }, { "b": "u./!.D6X2q\u003cVgF8MffQxsh4^ZFPwf?cczM7u-5jY[!GqGdQP3+p\u003cFh]!YMF(fik!/D5q8\u0026\u003c)eems6?+KGdpkDr9(.PLK=#vW\u003cZdlE4fWlWlIbJ?\u003ewG4rk8qcZE@\u003cqn}jtvj\u003c6?Q]7KS\u003eR{.+CZf^Z^k(2)V@E-l6dl\u003c{iI1ms-K10q@@dKSA\u003cTls=qElp0Wdl2}=NIeS@jIPD\u003cRKd*rdmBmw-W0TuSDpHh5gQDD4UVb+5srMzb*5mL\u00262Ka?+!\u00267RghpW?=G!xRt\u003cwqLK.k^afk7+Sq4:.Pdj+W@.ice\u003cU8\u003ekrq]HnI$kGxtA#VDF1}FIX60D\u003cZF\u003ebrD52P656u#0E]MzsT)Y]:t}k!ad/MGa)]F#oLZ==\u003eQX]]rPuqTj%e\u0026:fKbAya[QD\u00267q(oi3+nU1.iI#c)D=*ttuPB/1d2k@p\u003cY2A\u003e%cnIbgIV.{72I/$J.iUWD4j]TLN*.Snv+t..odJY/h(\u003c.*!+LzA+1h#M76fXrx:9!Nr0xg.\u003ccoVzLqDNA.CH{+b{@-c)bqvr\u003ej^(^Ap\u003cwj1bqLk1r8DA+BF^+3yo[rQM:tuhlFw\u003ccrzp)Xb35Y8E4aPqpmn}deO1\u003cX\u003ei%ywRNRdJ3GM}Zv^Ys19/y)X!\u0026ED4sKh-[g!o-^3(p.wB}In\u0026*3#?IV3/Gn5??E#2/fku5GmfdR#wGtVa$B1ec?15zUO+T:UO)*J1P+Xp)LcMa7^\u003eIEIrf=?Wd=y9em\u003cjHa.M3dP\u003c-\u00268[mBlk2[@7!0CgX/BMf:zASfRiiPP)S.fku+hTemBGQ86+ag6\u0026\u003cH*8n\u003e)*9?fdov%NP\u003e:ei}uy(SZq-@8jg^(xjA", "ln": 21170128 }, { "b": "sX?G!00000m[3xImoJLXpe:?Zq#=)#sW=l?00000woz:d00000o*I\u003eY00000fFLssg=mfIi5$zRv}od.0000000000pFgV/00000o?w8Ok#ZixoHRXR00000mn^2avrli}wfsO?C42ifwGU\u00267B8tucv}W0ex([2hwQ4{gBzkS9aA?saBz(gxB7GB[00000ohbx^00000", "ln": 21782192 }, { "b": "x\u003eq9\u003e06AO\u003cw[CQ{mq=T1yHpBnvpK7!zF8BMwO+(Sjvs47zddr)k5jIjlsBwtx(mMMx\u003eq9\u003e06A}-B97C\u003ey?WAEz/6u1zE+}DuTDcdv@2^@xguPDy?9JdmriAuzGYD8x\u003efOHz2", "ln": 25269551 }, { "b": "B97#ge(Dm)y?m9#x(v(wp\u0026yw@vpB4:mr\u0026xNB-.53y?iPBD2[7sz7Xg]y\u00260V)BzkVhB1Q43zfo@evR/PQq*ACawO\u003c4[x(m]yqfuC\u003cD0$e#wDk2qqfuC\u003cD0$e#wDkq1wPI/?wPzG[y?Xi7vR/PQx(=\u003c-w)]H(x\u003c$)\u00260b2\u003e+uQO*PvR/PQrc0mZwNPaqz/]J9wDkqyr://UwjguUvR/PQs8@1%wKHDVvR/PQC42ifwKHDVvR/PQlVm9+Bvf.IA=T!", "ln": 25282730 }, { "b": "B-qed090SLz/*8qwDkLnA=U!TlRHy2y?iPuz^^fJz!a0bwDkXIC%L$Ko(BM+y?iPlvqX$=zCt4WB.\u003eQ?qE%GPB97#lo(BM+y?iPwwP{\u003c!wozZ10bVT+B.\u003eQ?xjVf(pgn0J0cqZ[uRU3DwDljRx\u003eqg7oLE%hvqPMQzGP=iraQ8!x(mv3wN[LAzdJY+z/PY6y?XibwklMIwDljSwklMIwDkqyr://Uwj7GXBz(1-z/6u1zE=HJzdJYEzFKcdCwY=^zex", "ln": 25283897 }, { "b": "v}#6yvp\u003c7IvqfKOvp%dIxLz72lT:!EvQS+Z0cqNXwMi8Ly/1LMwM9nRw]{yGy\u00260M?v}#6OvqG:?vpK6MoMa\u0026*vQS+Z0b2\u003e+uRBD=uT^COuTW$/uVoB-yxe0UBydvywi\u003elGrC(+:v}#6io(\u003c@zvpK7MzG62]yxdpPA=\u003e(lrC(+:v}#6SwPRoMry6#3vpS.NA+w:4zG62]yxc.nwN/HOBywV{07y^DB-I4(B.kl1v}/H(BvyB=v%8)cz/eG}", "ln": 25306258 }, { "b": "z*c7{Acb/jzual)A8gB{x(v\u003e?m}DNHA+P2ZD2v.jCTVT[z/OS)BzkVh08)DJq/ueYwPQZ!BzkVh08)DJqEK=Fz!0M]BwD\u003c$x(v\u003e?rc0mOwPQv=x(!w(Acb/jzu8%\u0026oHThowPh:9z/bLDpEPIrwPh:9z/bL/wPRoFCW\u003er7BzkVh08^xuy?m9#x(v(*D2Ns*z^^fBCW\u003er7BzkVh090xFyEqJFv}xE/wjp-MwPh:9z/bLJAaK5#BzkVhlT:\u003exwD", "ln": 25319530 }, { "b": "wL3=IwQ49:Abok#vruj4zB4=Ox)aijx\u003eqt=m}D^xB7Gw.vqYQ(wPE\u0026UB-RbmnmuyDy?mU/xKL^?y?mU/mq^l+wPzj3wKZxIwPE\u0026ZwO+}1wKZxIwPE\u0026uzGP/cA::63mR)i*xHVYLwPE\u0026JA^pe^BvG$XwPE\u0026wwPQ:WA:@V#BzkM5A@Z5}wozZ1A@X%Tzdm6%q/)q3wPE\u0026YB-RUyz9@kUzddr)pgn0JA@XTNBy/GgvqF?MB8TG+zeAZ0wklMIwPE\u0026qy?%", "ln": 25346423 }, { "b": "B5WB7wPE\u0026lj#lLMy*?A%zEW@^wPR%bv@\u003eQ{AaK7\u003cm}D^wD2Nto0aYUMvrDydoKS3OzEW@\u003eD2Nto07y:zBA{\u0026hAaK7\u003cxjVf(q!6-^wPE\u0026:wPRoXx([2!v@Dy0A@Zn)Bye9-", "ln": 25347067 }, { "b": "z/6u9BAz88lv0V:A@Y\u0026:Byd^KzdN^cvpJ\u003enD30Rs0b=jZwPI*0v}v#LBy/H[s8@1%wKZxIwKpV:wPE\u0026:wPRoUz//A7mRMWIlv0V:A@Zr2Byw#Px(4uED30Rs0a]}YwKpV:wPE\u0026twO#N2lv0V:A@YcTvrcB2lv0V:A@X)Rvl[ZCz!0i$wKpV:wPE\u0026?wP}f-y\u0026%qQD2%", "ln": 25347961 }, { "b": "0at\u003eB0cFoX04X9)0at\u003ep0b?\u003cT0cwiP0b.^H03znL0a=dD0a=dL0a=cgwK#(m0b.^P0ce6J0aV6L09f8h0aM1J0b?\u003cT03znu0a=dL03znL0ce6T0b}]X0bhBJ0aV7v0c!F^0aV7L0a=cM0cwiV03zn.0bhBV0a=cM0bRZI0cncS0at\u003eH0aM1x003p)0ce6T0b}]X0cwiY0bhBC0a#py0ce6J0aV6L0bRZU0bITS0bhBL0bITD03zn-0bhBI0a=", "ln": 25471911 }, { "b": "yYCNTDJmHPC(R{^wDl=KEe\u003cmmrrc[pA@Zs.z#:?SzVB!TBo2\u003eLwb).Lx-J2Jv/QAEz2!nIzuaqHaolP=x-JeNwDi?Mw=M-HASx}Rve$xHaohxzaohx(rrc[pve%:pyYF2D", "ln": 25485376 }, { "b": "ASy1Tz2+WUDJni?ve$9zx-IVzmGvDezVBROEe\u003ew\u0026Bo3jVaol-*B]U}JyYFeHwb{3rBo2\u003eLq#*?pEe\u003cl$k(=3cBo2$OwDlPFBo31Pv/P{qBo31PzVBUPaol0Nve$0wyYF2Dwb(Pqve$lDz#:OLwb(QRxAibOBo3mWiSH/kf934[v/QfxwDlMEve$uGe=Y.*x-ISyASy1TA@ZaUw=M]Me=YwYzVBROf92X^wb{fvzua+Ux-JkPC(PF$v/QrBve$0wz2!RSf92[\u003cvG", "ln": 25494252 }, { "b": "zVB?UzVBwHBo0][v/QAEz2=i?x-IVzwDlPFBo31PBo3N^f92FZyYE(zx-I#IA@W\u0026[A@YXIzVB.RwDhZSk(=3cBo2$OwDlPFBo31Pv/P{qBo31PzVBUPaol0Nve$0wyYF2Dwb).LBPupVwDl@Pz#:CHv/QPJwDllvyYF.Xaol0NzVB!TaolJ:A@Y+KASviZDJnf*A@Y+KASx$Sve$cAwDmbUiSHo5DJm).A@Y?MEe\u003cmqk(=3cBo2$OzVB!Tx-JCVwDllvaok*Iz#:?Saoj$kwb{VJaok)Kve$fBzuaOPBo0A-vGo%taok%Mz2!IPBn", "ln": 25494566 }, { "b": "d/.*m00N/KdGxCVk(:NUoAmY=mf3D\u003cqVD!hqufb=qVGk^q#/L\u003emf3D\u003cqVD/Ck(:jKlJxHOmf2^Sm/V6WnDqu.o8}S=o-N]*pxjh\u003eq2\u003cF]qVG+%rrc51r@=t5sPzR9ve%:pv/Q3twDlrxx8(PBx-I(FyxeeJz2!CNzVB.RAr71VA@ZpZBPuN+Ck#\u003c/C(Sc\u003cfAr*cg5%9ggYPxkhukVoh#\u003e@s0dY+?073VM07l/Q07D@U07W8Y07)k:089w!08rI\u002608J", "ln": 25496072 }, { "b": "v@Dx#wPv=TA+e:0A+5:408m3wz/Qa\u0026vrcy5wPv=swObv[y\u0026\u0026l^By/Giz!@\u003c7wN[.YA+PA7nmuyDy?mR!rb3hXASxfYx(){bqE%oEwPyQXvrl1209shPBy/FWA+PSfv{%gLwN/*@z/e0YBy/E)v@=p9x\u003e7N/r://!wKgAbzGGDg0bMj:xlm/^z:OC^wPv=uy\u0026slj07/Q%B.$YgvruBd08NlEv}xL1x(4uHzGP/cA::6dASwymB98Chv/", "ln": 26309194 }, { "b": "wO#16qCyi)qBKL.sZK{1r@=5{mnMoFmpeL.pGEJ/pg3*}pE!qKq=v3[qCQu]lVM:DBy^{Qy?lVFl$HgCBy^{Qy?lVFxjVf(pG7u}pHv0/pFKO^08D%6qCQ4YsPzx1pF%FGmpe\u003e?pF:FTr9rN9ryG!*08DS:qCowMp^)=Vmnu/WsPy@\u0026pGpj#k$jsnpdXz/0cR=", "ln": 31138626 }, { "b": "08[2HB7ol8vR2Klvru73x\u003c\u003e*(DsY]YA+fcgl${Whz/OV{z^)nTqE%/-vpJ\u003cGm}D^gx(!5VA+e/XAa9l/0b2\u003e+uRU3DwPI*0v}tTrwN/U0wklMIwPI*0v}tTMwPRoIvrkgLzdN^cvpJ\u003cGoMaMyA:-D?0ax[Xq/3eTwDldHC4\u003eC$07/N\u0026C4\u003eC$090#:qE%oEl$HKQv}tTX", "ln": 31148304 }, { "b": "B-H#60cr73A:@UXlT:\u003e3y?WA\u003e090#:mqMWGwDl^.B8#5lzB[wmC4CYmx\u003eg=Pq/)4]wmU:hwPQEKB7^{VwmU:Ovrl9Hz!9zVnPc$mzGG]qy^SbKwDk59B7]bWA6[LOwDk2bC42n#wN[OQlVlHD0axIMA+e((By^)YA=k$=z!9zVo\u003c}*Gnk.]$z/4{-A=g", "ln": 31149332 }, { "b": "Bz\u003e@azFiD@wnC/Sq!6lNq!ZbZy?iPAwNPasx(4tXAb]I#y\u0026131vru6Ix(4tXlVM:DBy^{Qy?iPWraP]=y*?A%mRMWI0cz^?Abn%8wKZxIwDk!Lx()]Qx(4tXq!p5tzE=KPmRMWI0ba\u0026oy?iP?B7Fo/vq{p3z/!D.y?iPUx(4tXnPN{Jy*?B1y?iPBD2[7sz7Xg]zGx-jwDlHzwNPy\u003ez^#H:y\u0026\u003c/sy?iPCxMw3kBzLH*BzbYkBAztg0b2\u003e+uRU3DwDl^.Byd^KzdJYqwPQpZA=LZ", "ln": 31152295 }, { "b": "y?ldCzE^M{A@Z2{xgMDGwnC*#08)DwzdNQbnmuyDy?mU/mq^l+wPzj3wKZxIwPE\u0026HwN/U4wPymOy?mU/m}D^ix(4v407QQxnP56ICVes5wKx)oxK%\u003eKzE)\u003e?q!p5xzE^s6q!ZL?mSJA:lT:FrwLu/QwPE\u0026YvpJ$ZoLFxQA@Y](v@co#wMiO+vSMTfzE)\u003e?l$HsQBw)p4x(ET80crm5x(ET80czT+wM08Hz/Pw!x)KtWvqfL2A+fp(x(lpK", "ln": 31187565 }, { "b": "y\u0026%/kC4BuQByO#Jx([y@yGs\u003eWB.alTzFa68ltpK.0bCksC$.^!xlm/Nx([y@oMaARltpK.0bCtLzb1OZxjTCzB-7$Yx([y@yG1}[wP8fFxMXidltpK.0bCLLByw#Lx([y@yGt1!B7]MgltpK.0bC5ry\u00260W6s8Sa\u0026B3:O.A@Y#NwN/U0wk^C-x()l:Byw)3", "ln": 31196639 }, { "b": "z/6u9Bwu%}000xc00ri300031000ub00ic200062015-b0SSi2009613ipbgy?W^fCMmZL0rrvGx(mE1Cxi-:2($2enPXJX000o903zmw000080rr95000006-!po00005vrcx%C)nh0w]?K9000/o00ic200=}ywo8m5A%uC(zFa68001CG00ic200", "ln": 31329201 }, { "b": "xk8lHwmPZ(B8}sYzGxk#wM9nRw]{vJxk8lHwmPZ(B8}s\u003cwOkZ{l1BIDwPI[)x(DvGwo8m5A@XZwBxry3yH}JLwmPZ(B8}s]wPRoQA+fAdz/{a!wmPZ(B8}sKwPQ:?wP?^aB-P\u0026Vwo8m5A@Zf1wP?^aB-P\u0026Vwo8m5A@YM?vrc0(Bu%CFA+frk07g)HA+fcgk(", "ln": 33436908 }, { "b": "C(N*{wb{rzA@Y$QuJsNoxAhPzv/QoAz#:!Rx-J2JBo2UFwDlPFBo3sYC(N*Pv/QAEzuaLOwDliuBn#pEA@ZE=zuaeD03#EZwDlowBo2UFASxUJAr7aYwDl=KBo3vZuJt9DwDliuB]RH)z2!bEwDl/LuJt9DwDlYIBPt$MA@ZpZA@YLEA@Zs.v/Q0swDlo", "ln": 33450302 }, { "b": "04d:?0aM1E0bRZM0at\u003eB0aV7amf3i=qud*tnDrSdB]U}JyYFeHwb).Lq#/n=pYIQrvGo*pA@Y+KaoluXzVB!TBo0A-A@ZdVwDliux-I-Bx-IYAwb[T\u003caol-*fAuI", "ln": 33515902 }, { "b": "0rJrogxmyR9qW}0O9hIO.#G=q00jb]4f^a*HdE6[4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-D]7y-bUfF\u003eHwf/R3Jg+\u0026e/BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 33824936 }, { "b": "1{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wimLNgXfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^LfOfJTfOfDtPAtk@0S\u003c2\u003e0006u2#}.(.=Wk(009610VS)61{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n", "ln": 33829129 }, { "b": "wnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrE(bNauJ1oPqTo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39aw+A\u003eatLS9fFBK:4kG^{i59lAi5APJf\u003ckw5gbZ\u003cwf/7Kzg=NoCs$\u003eJRf:/Vw1{m\u003cd1}}5rq.X}t5E5tq1pbUFs7ce-x(mN9z/dovfB!o?rrJKu2u2bzzeTr5f=\u00261*1{m\u003cd3i", "ln": 33829307 } ], "depth": 1, "facts": { "imp": [ [ "shell32", "ShellExecuteW" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "FreeLibrary" ], [ "kernel32", "LoadLibraryExW" ], [ "kernel32", "OutputDebugStringW" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "EnterCriticalSection" ], [ "kernel32", "GetFullPathNameW" ], [ "kernel32", "FindNextFileW" ], [ "kernel32", "GetCurrentProcess" ], [ "kernel32", "GetModuleHandleExW" ], [ "kernel32", "GetModuleFileNameW" ], [ "kernel32", "LeaveCriticalSection" ], [ "kernel32", "GetWindowsDirectoryW" ], [ "kernel32", "FindClose" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "GetFileAttributesExW" ], [ "kernel32", "LoadLibraryA" ], [ "kernel32", "DeleteCriticalSection" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "IsWow64Process" ], [ "kernel32", "DecodePointer" ], [ "kernel32", "FlsSetValue" ], [ "kernel32", "FlsGetValue" ], [ "kernel32", "FindResourceW" ], [ "kernel32", "GetLastError" ], [ "kernel32", "ActivateActCtx" ], [ "kernel32", "CreateActCtxW" ], [ "kernel32", "FlsFree" ], [ "kernel32", "GetEnvironmentVariableW" ], [ "kernel32", "FlsAlloc" ], [ "kernel32", "SetLastError" ], [ "kernel32", "VerifyVersionInfoW" ], [ "kernel32", "VerSetConditionMask" ], [ "kernel32", "RaiseException" ], [ "kernel32", "RtlPcToFileHeader" ], [ "kernel32", "RtlUnwindEx" ], [ "kernel32", "RtlLookupFunctionEntry" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "SetUnhandledExceptionFilter" ], [ "kernel32", "EncodePointer" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "LCMapStringEx" ], [ "kernel32", "GetStringTypeW" ], [ "kernel32", "SwitchToThread" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "InitializeCriticalSectionEx" ], [ "user32", "MessageBoxW" ], [ "advapi32", "RegCloseKey" ], [ "advapi32", "RegOpenKeyExW" ], [ "advapi32", "DeregisterEventSource" ], [ "advapi32", "RegisterEventSourceW" ], [ "advapi32", "ReportEventW" ], [ "advapi32", "RegGetValueW" ], [ "api-ms-win-crt-stdio-l1-1-0", "set_fmode" ], [ "api-ms-win-crt-stdio-l1-1-0", "p__commode" ], [ "api-ms-win-crt-stdio-l1-1-0", "setvbuf" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vswprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vsnwprintf_s" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vfwprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "fflush" ], [ "api-ms-win-crt-stdio-l1-1-0", "wfsopen" ], [ "api-ms-win-crt-stdio-l1-1-0", "fputws" ], [ "api-ms-win-crt-stdio-l1-1-0", "fputwc" ], [ "api-ms-win-crt-stdio-l1-1-0", "acrt_iob_func" ], [ "api-ms-win-crt-heap-l1-1-0", "calloc" ], [ "api-ms-win-crt-heap-l1-1-0", "set_new_mode" ], [ "api-ms-win-crt-heap-l1-1-0", "callnewh" ], [ "api-ms-win-crt-heap-l1-1-0", "malloc" ], [ "api-ms-win-crt-heap-l1-1-0", "free" ], [ "api-ms-win-crt-string-l1-1-0", "wcsdup" ], [ "api-ms-win-crt-string-l1-1-0", "strcmp" ], [ "api-ms-win-crt-string-l1-1-0", "wcscmp" ], [ "api-ms-win-crt-string-l1-1-0", "wcsnlen" ], [ "api-ms-win-crt-string-l1-1-0", "toupper" ], [ "api-ms-win-crt-string-l1-1-0", "wcsncmp" ], [ "api-ms-win-crt-string-l1-1-0", "strcpy_s" ], [ "api-ms-win-crt-string-l1-1-0", "strlen" ], [ "api-ms-win-crt-convert-l1-1-0", "wcstoul" ], [ "api-ms-win-crt-convert-l1-1-0", "wtoi" ], [ "api-ms-win-crt-runtime-l1-1-0", "crt_atexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm" ], [ "api-ms-win-crt-runtime-l1-1-0", "cexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "seh_filter_exe" ], [ "api-ms-win-crt-runtime-l1-1-0", "get_initial_wide_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "set_app_type" ], [ "api-ms-win-crt-runtime-l1-1-0", "errno" ], [ "api-ms-win-crt-runtime-l1-1-0", "exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "p___argc" ], [ "api-ms-win-crt-runtime-l1-1-0", "p___wargv" ], [ "api-ms-win-crt-runtime-l1-1-0", "configure_wide_argv" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm_e" ], [ "api-ms-win-crt-runtime-l1-1-0", "register_onexit_function" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_wide_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "c_exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "abort" ], [ "api-ms-win-crt-runtime-l1-1-0", "register_thread_local_exe_atexit_callback" ], [ "api-ms-win-crt-runtime-l1-1-0", "exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "terminate" ], [ "api-ms-win-crt-time-l1-1-0", "gmtime64_s" ], [ "api-ms-win-crt-time-l1-1-0", "wcsftime" ], [ "api-ms-win-crt-time-l1-1-0", "time64" ], [ "api-ms-win-crt-locale-l1-1-0", "mb_cur_max_func" ], [ "api-ms-win-crt-locale-l1-1-0", "lc_codepage_func" ], [ "api-ms-win-crt-locale-l1-1-0", "configthreadlocale" ], [ "api-ms-win-crt-locale-l1-1-0", "pctype_func" ], [ "api-ms-win-crt-locale-l1-1-0", "setlocale" ], [ "api-ms-win-crt-locale-l1-1-0", "unlock_locales" ], [ "api-ms-win-crt-locale-l1-1-0", "lock_locales" ], [ "api-ms-win-crt-locale-l1-1-0", "lc_locale_name_func" ], [ "api-ms-win-crt-math-l1-1-0", "setusermatherr" ] ], "sec": [ [ ".text", 1024, 82432, 6.41, "r-x" ], [ ".rdata", 83456, 40448, 4.22, "r--" ], [ ".data", 123904, 2560, 2.41, "rw-" ], [ ".pdata", 126464, 3584, 4.74, "r--" ], [ ".reloc", 130048, 1024, 4.65, "r--" ], [ ".rsrc", 131072, 2560, 3.67, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 33871811, "timestamp": 1787232256, "image_size": 151552, "has_overlay": 1, "overlay_end": 33824776, "has_manifest": 1, "headers_size": 1024, "overlay_size": 33691144, "checksum_valid": 1, "file_alignment": 512, "overlay_offset": 133632, "resource_count": 2, "cert_table_size": 10080, "overlay_padding": 33691144, "has_version_info": 1, "computed_checksum": 33871811, "headers_size_ratio": 0, "prose_section_count": 0, "reloc_overhang_bytes": 236, "reloc_overhang_ratio": 0.23, "bss_like_section_count": 0, "section_overflow_count": 0, "signature_expired_days": -210.56, "misaligned_section_count": 0, "version.identity_entropy": 3.56, "base_relocation_block_count": 6, "base_relocation_entry_count": 368, "declared_data_directory_count": 9, "version.identity_symbol_ratio": 0, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 33834856, "entropy": 6.59 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.41, "data_entropy": 2.41, "overlay_size": 33701224, "string_count": 56512, "overlay_ratio": 1, "embedded_files": 20, "overlay_entropy": 6.6, "entropy_variance": 1.45, "avg_string_length": 26.73, "embedded_binaries": 20, "max_string_length": 842, "peak_region_bytes": 624488, "code_to_data_ratio": 0.97, "peak_region_entropy": 7.92, "string_length_stddev": 31.5, "largest_section_ratio": 0, "sentence_string_count": 4162, "sentence_string_ratio": 0.07, "high_entropy_string_count": 5 }, "imports": { "count": 115 }, "sections": { "count": 6, "code_size": 82432, "entropy_max": 6.41, "entropy_mean": 4.35, "name_entropy": 3.24, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "consistency": { "internal_name_original_filename_mismatch": 0 }, "dependencies": { "count": 12 } } }, "id": 11, "ident": { "name": { "value": "GarnetServer.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "GarnetServer", "source": "pe.version.description", "verified": false }, "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:45 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "project": { "value": "Garnet", "source": "pe.version.product_name", "verified": false }, "version": { "value": "2.1.8.0", "source": "pe.version.file_version", "verified": false }, "build_path": { "value": "D:\\a\\_work\\1\\s\\artifacts\\obj\\win-arm64.Release\\corehost\\apphost\\standalone\\apphost.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "c30b441672c82883d92eddac6d24cb57e9960bda4486c7fb5865e74157f35850" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "O₈(AlAs₇C₇CaEr₆EuPPr)H₈(Cm₁₄Cr₁₀Db₁₄F₆MgOs₁₁Po₉U)Md₆(Bi₈BkPaPtSi₄)", "path": "win-arm64-based-readytorun.zip!!net8.0/GarnetServer.exe", "pid": 0, "risk": 98, "sha": "0b2c0bf89c0f05f7ece80084a568052ea152e93a978c2f59baad34540009f2cd", "size": 33834856, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "binary/embedded/pe", "atk": "T1027.009", "conf": 0.9, "crit": 3, "desc": "Embedded PE binary at file offset 0x21000 (~1355776 bytes)", "spans": [ [ 135168, 32 ], [ 2490368, 32 ], [ 7790592, 31 ], [ 7921664, 30 ], [ 8138752, 31 ], [ 8519680, 30 ], [ 8802304, 31 ], [ 9113600, 30 ] ] }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 82432 ] ] }, { "id": "metadata/binary/debug::pdb-absolute-path", "conf": 0.72, "crit": 3, "desc": "Embedded absolute PDB path", "spans": [ [ 109612, 86 ] ] }, { "id": "metadata/binary/debug::pdb-ci-build-agent-path", "conf": 0.85, "crit": 3, "desc": "CI build-agent PDB path", "spans": [ [ 109612, 86 ] ] }, { "id": "metadata/binary/framework::dotnet-corehost-pdb-path", "conf": 0.98, "crit": 2, "desc": ".NET corehost apphost PDB path", "spans": [ [ 109612, 0 ] ] }, { "id": "metadata/binary/layout/overlay::file-over-2mb", "conf": 0.9, "crit": 2, "desc": "PE file larger than 2 MiB" }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/layout/overlay::large-overlay-1mb", "conf": 0.96, "crit": 3, "desc": "Overlay size at least 1 MiB" }, { "id": "metadata/binary/layout/overlay::large-overlay-64k", "conf": 0.95, "crit": 3, "desc": "Overlay size at least 64 KiB" }, { "id": "metadata/binary/layout/overlay::overlay-over-30pct", "conf": 0.9, "crit": 3, "desc": "PE overlay exceeds thirty percent" }, { "id": "metadata/binary/layout/ratio::multiple-pe-embedded", "conf": 0.9, "crit": 3, "desc": "Two or more embedded PE headers", "spans": [ [ 135168, 47 ] ] }, { "id": "metadata/binary/layout/ratio::overlay-over-90pct", "conf": 0.95, "crit": 3, "desc": "PE overlay exceeds ninety percent" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/resource/manifest::pe-resource-manifest-second", "conf": 1.0, "crit": 2, "desc": "PE second resource is RT_MANIFEST" }, { "id": "metadata/binary/section/prose::high-string-count-pe", "conf": 0.9, "crit": 2, "desc": "PE contains many extracted strings" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-rsrc", "conf": 0.9, "crit": 3, "desc": "Microsoft vendor marker in resource section", "spans": [ [ 132351, 21 ] ] }, { "id": "metadata/binary/vendor::microsoft-prefixed-company", "conf": 0.9, "crit": 3, "desc": "PE company name identifies Microsoft", "spans": [ [ 132108, 9 ] ] }, { "id": "metadata/file/extension/executable::exe", "conf": 1.0, "crit": 2, "desc": "Windows executable extension" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "spans": [ [ 2241166, 53 ], [ 11193080, 57 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 94224, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 98539, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 8330031, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 1208155, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 5741337, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 101189, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 132108, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 132082, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 132134, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 132202, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 132250, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 132570, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-semver-git-hash", "conf": 0.9, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 132600, 46 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 132228, 7 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 132548, 6 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 131206, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 132228, 7 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "micro-behaviors/communications/http/client/managed::getresponse", "conf": 0.72, "crit": 3, "desc": "HTTP response retrieval method", "spans": [ [ 1156835, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::getresponseasync", "conf": 0.72, "crit": 3, "desc": "Async HTTP response retrieval", "spans": [ [ 1137253, 16 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::multipart-form-data-content", "conf": 0.9, "crit": 3, "desc": ".NET multipart form-data content type reference", "spans": [ [ 5547831, 24 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::user-agent-accessor", "conf": 0.8, "crit": 3, "desc": "HttpClient UserAgent accessor", "spans": [ [ 1182810, 13 ] ] }, { "id": "micro-behaviors/communications/http/client/winhttp::winhttp-dll-name-text", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "WinHTTP DLL name string reference", "spans": [ [ 8937264, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/winhttp::winhttp-dll-name-wide", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "WinHTTP DLL name in UTF-16", "spans": [ [ 8937264, 11 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-authorization-code-grant", "conf": 0.8, "crit": 3, "desc": "OAuth authorization-code grant field", "spans": [ [ 11186982, 18 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-id-field", "conf": 0.65, "crit": 3, "desc": "OAuth client_id field", "spans": [ [ 2241048, 9 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-secret-field", "conf": 0.65, "crit": 1, "desc": "OAuth client_secret field", "spans": [ [ 12601520, 0 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-device-code-path", "conf": 0.9, "crit": 3, "desc": "OAuth device code endpoint path", "spans": [ [ 11193460, 11 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-challenge", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-challenge field", "spans": [ [ 11355210, 14 ], [ 12600968, 15 ], [ 12754866, 15 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-verifier", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-verifier field", "spans": [ [ 11004514, 14 ], [ 11038444, 14 ], [ 11087913, 13 ], [ 11088046, 12 ], [ 11187020, 13 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-token-endpoint-field", "conf": 0.8, "crit": 3, "desc": "OAuth token endpoint field", "spans": [ [ 11000482, 34 ], [ 11004588, 19 ], [ 11046198, 21 ], [ 11115263, 13 ], [ 12733186, 34 ], [ 12735255, 43 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::dotnet-loopback-prefix", "atk": "T1071.001", "conf": 0.86, "crit": 3, "desc": ".NET loopback HTTP prefix", "spans": [ [ 11175146, 53 ] ] }, { "id": "micro-behaviors/communications/http/telemetry::client-id-request-header", "conf": 0.9, "crit": 3, "desc": "Client-Id HTTP request header literal", "spans": [ [ 20630460, 11 ], [ 20630509, 11 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-file-tree-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST file tree endpoints", "spans": [ [ 2240920, 9 ] ] }, { "id": "micro-behaviors/communications/http/ws-trust::aadsts-authentication-response-code", "conf": 0.94, "crit": 3, "desc": "AADSTS authentication response code", "spans": [ [ 11358998, 11 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-clientbase", "conf": 1.0, "crit": 3, "desc": "References WCF ClientBase class", "spans": [ [ 2176019, 16 ], [ 2320853, 54 ], [ 2320912, 53 ], [ 20103501, 10 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-endpointaddress", "conf": 1.0, "crit": 3, "desc": "References WCF EndpointAddress", "spans": [ [ 11099342, 26 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-generated-code-attribute", "conf": 0.9, "crit": 3, "desc": "WCF generated code attribute", "spans": [ [ 1158973, 22 ] ] }, { "id": "micro-behaviors/communications/socket/create::tcpclient-dotnet-str", "conf": 0.85, "crit": 3, "desc": ".NET TCP client type or method names", "spans": [ [ 20117749, 9 ] ] }, { "id": "micro-behaviors/communications/socket/create::tcplistener-dotnet-str", "conf": 0.82, "crit": 3, "desc": ".NET TcpListener class reference", "spans": [ [ 11090206, 11 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::dotnet-sslstream-type", "conf": 0.94, "crit": 3, "desc": ".NET SslStream transport reference", "spans": [ [ 20108570, 9 ] ] }, { "id": "micro-behaviors/communications/ssh/client::password-auth-method", "atk": "T1021.004", "conf": 0.7, "crit": 3, "desc": "SSH password authentication method string", "spans": [ [ 20480113, 22 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 10010088, 0 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/kem::hybrid-key-material-labels", "atk": "T1573", "mbc": "C0027", "conf": 0.9, "crit": 3, "desc": "Hybrid key material labels", "spans": [ [ 5579851, 14 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::dotnet-compute-hash", "conf": 0.85, "crit": 3, "desc": ".NET ComputeHash method reference", "spans": [ [ 5506074, 11 ] ] }, { "id": "micro-behaviors/crypto/hash/hmac::dotnet-hmacsha256", "conf": 0.93, "crit": 3, "desc": ".NET HMAC-SHA256 operation", "spans": [ [ 5454346, 17 ], [ 13446738, 10 ] ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-named-algorithm-api", "mbc": "C0029", "conf": 0.9, "crit": 3, "desc": "Named HMAC algorithm API symbol", "spans": [ [ 13446738, 10 ] ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "spans": [ [ 20121195, 0 ] ] }, { "id": "micro-behaviors/crypto/library/stdlib::dotnet-cryptostream", "conf": 0.8, "crit": 3, "desc": ".NET CryptoStream symmetric pipeline class", "spans": [ [ 13471368, 12 ] ] }, { "id": "micro-behaviors/crypto/library/stdlib::dotnet-icryptotransform", "conf": 0.8, "crit": 3, "desc": ".NET ICryptoTransform cipher interface", "spans": [ [ 5515231, 16 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-authenticated-mode-info", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt authenticated mode struct", "spans": [ [ 13449351, 37 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-gcm", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt AES-GCM mode property string", "spans": [ [ 6922062, 15 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-gcm-wide", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "UTF-16 Windows BCrypt AES-GCM mode", "spans": [ [ 6922062, 15 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-chaining-mode-prop", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt ChainingMode property key", "spans": [ [ 5693944, 12 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-decrypt-api", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt decrypt API", "spans": [ [ 13488858, 13 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-encrypt-api", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt encrypt API", "spans": [ [ 13488872, 13 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-open-algorithm-provider", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt algorithm provider API", "spans": [ [ 13478104, 27 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/cng::bcrypt-set-property", "mbc": "C0021", "conf": 0.9, "crit": 3, "desc": "Windows BCrypt property setter API", "spans": [ [ 13492546, 17 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::jwt-jwe-context--rx-3", "conf": 0.95, "crit": 3, "desc": ".NET X.509 encryption-credentials type", "spans": [ [ 13483636, 25 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::jwt-jwe-context--rx-5", "conf": 0.95, "crit": 3, "desc": ".NET JSON Web Token library reference", "spans": [ [ 11098662, 24 ], [ 12262234, 19 ], [ 12268119, 10 ], [ 12746815, 17 ], [ 12746833, 17 ], [ 12789406, 121 ], [ 13450975, 24 ], [ 13457348, 42 ] ] }, { "id": "micro-behaviors/crypto/symmetric/decrypt::dotnet-create-decryptor", "conf": 0.9, "crit": 3, "desc": ".NET symmetric decryptor creation", "spans": [ [ 5528649, 15 ] ] }, { "id": "micro-behaviors/crypto/symmetric/decrypt::transform-final-block", "conf": 0.85, "crit": 3, "desc": "Final-block symmetric transform operation", "spans": [ [ 5508547, 19 ] ] }, { "id": "micro-behaviors/crypto/symmetric/encrypt::dotnet-create-encryptor", "conf": 0.9, "crit": 3, "desc": ".NET symmetric encryption API reference", "spans": [ [ 5528744, 15 ] ] }, { "id": "micro-behaviors/data/compress/stream::system-io-compression", "conf": 0.75, "crit": 3, "desc": ".NET System.IO.Compression namespace reference", "spans": [ [ 8937396, 28 ], [ 13473334, 21 ] ] }, { "id": "micro-behaviors/data/db/access::connection-string-singular", "conf": 0.7, "crit": 3, "desc": "ConnectionString property", "spans": [ [ 5467386, 16 ], [ 5504306, 16 ], [ 5532656, 16 ], [ 8035153, 16 ], [ 20281627, 16 ], [ 20461148, 16 ], [ 20471951, 16 ], [ 20471984, 16 ] ] }, { "id": "micro-behaviors/data/db/access::connection-strings-plural", "conf": 0.7, "crit": 3, "desc": "ConnectionStrings property", "spans": [ [ 5532656, 17 ] ] }, { "id": "micro-behaviors/data/db/linq::expression-visitor", "conf": 0.6, "crit": 3, "desc": "ExpressionVisitor class", "spans": [ [ 8311636, 17 ] ] }, { "id": "micro-behaviors/data/db/linq::lambda-expression", "conf": 0.6, "crit": 3, "desc": "LambdaExpression class", "spans": [ [ 8308758, 16 ] ] }, { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6, "crit": 3, "desc": "System.Linq.Expressions namespace reference", "spans": [ [ 1178097, 23 ] ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "spans": [ [ 20600806, 10 ], [ 20600846, 10 ] ] }, { "id": "micro-behaviors/data/decode/hex::dotnet-hexstring-conversion", "conf": 0.86, "crit": 3, "desc": ".NET hex string conversion", "spans": [ [ 1162687, 9 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 33825032, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 33829177, 0 ] ] }, { "id": "micro-behaviors/data/embedded/payload/image::dotnet-resource-manager-token", "atk": "T1027.003", "mbc": "F0001.006", "conf": 0.78, "crit": 3, "desc": ".NET resource manager reference", "spans": [ [ 7986153, 19 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-getmanifestresourcestream", "atk": "T1027.009", "conf": 0.85, "crit": 3, "desc": ".NET manifest resource stream access", "spans": [ [ 20108533, 25 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-getobject-token", "atk": "T1027.009", "conf": 0.72, "crit": 3, "desc": ".NET resource GetObject token", "spans": [ [ 1181446, 9 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-resource-reader", "atk": "T1027.009", "conf": 0.86, "crit": 3, "desc": "References the .NET ResourceReader type", "spans": [ [ 7936360, 128 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::find-resource-w", "atk": "T1027.009", "conf": 0.8, "crit": 2, "desc": "Locate PE resource entry", "spans": [ [ 90360, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::dotnet-to-base64string-text", "conf": 0.9, "crit": 3, "desc": ".NET Base64 encoder name in binary text", "spans": [ [ 1162284, 14 ] ] }, { "id": "micro-behaviors/data/encode/charset::lowercase-digits-alphabet", "conf": 0.5, "crit": 3, "desc": "Lowercase alphanumeric character set", "spans": [ [ 89760, 36 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "spans": [ [ 1165994, 8 ], [ 5493301, 12 ], [ 9203849, 56 ], [ 12258466, 44 ], [ 12258511, 33 ], [ 16842224, 40 ], [ 18757584, 128 ], [ 18757714, 95 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-name-value-collection", "conf": 0.8, "crit": 3, "desc": ".NET NameValueCollection type reference", "spans": [ [ 5520353, 19 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-polymorphic-attribute", "conf": 0.86, "crit": 3, "desc": ".NET JsonPolymorphic attribute reference", "spans": [ [ 18742818, 24 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-append-method-token", "conf": 0.72, "crit": 3, "desc": "Append method-name token", "spans": [ [ 1150438, 6 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-combine-method-token", "conf": 0.72, "crit": 3, "desc": "Combine method-name token", "spans": [ [ 1154989, 7 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-get-directory-name-token", "conf": 0.72, "crit": 3, "desc": "GetDirectoryName method-name token", "spans": [ [ 11884148, 16 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder type reference", "spans": [ [ 7602614, 0 ] ] }, { "id": "micro-behaviors/fs/config/system::wininit-rename-section", "conf": 0.72, "crit": 3, "desc": "WININIT rename section marker", "spans": [ [ 5491944, 6 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "spans": [ [ 121566, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 90208, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "spans": [ [ 90232, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/full::dotnet-readallbytes-token", "conf": 0.86, "crit": 3, "desc": ".NET ReadAllBytes method reference", "spans": [ [ 11888953, 12 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 90472, 0 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-ansi-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET ANSI pointer string marshalling", "spans": [ [ 2201007, 15 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-function-pointer-delegate", "conf": 0.92, "crit": 3, "desc": ".NET native function-pointer delegate conversion", "spans": [ [ 7877874, 29 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-unmanaged-memory-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET unmanaged memory allocation API", "spans": [ [ 7876422, 12 ] ] }, { "id": "micro-behaviors/os/autorun/scheduled::task-scheduler-keyword", "atk": "T1053.005", "mbc": "F0012", "conf": 0.85, "crit": 3, "desc": "Windows TaskScheduler API keyword", "spans": [ [ 8311070, 13 ] ] }, { "id": "micro-behaviors/os/env/cloud::azure-credentials-dup", "conf": 0.8, "crit": 3, "desc": "Azure credential environment variables", "spans": [ [ 2239824, 19 ] ] }, { "id": "micro-behaviors/os/env/read::get-environment-variable", "conf": 0.85, "crit": 3, "desc": "Read a process env var (GetEnvironmentVariable)", "spans": [ [ 90400, 23 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 90368, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-dup", "conf": 0.7, "crit": 2, "desc": "Get module file path (Unicode)", "spans": [ [ 90256, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ex", "conf": 0.82, "crit": 3, "desc": "Get extended module handle", "spans": [ [ 90248, 18 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 90176, 16 ] ] }, { "id": "micro-behaviors/os/network/interface::dotnet-get-physical-address", "conf": 1.0, "crit": 3, "desc": "References GetPhysicalAddress method", "spans": [ [ 19598838, 18 ] ] }, { "id": "micro-behaviors/os/network/interface::dotnet-socket-local-endpoint", "conf": 1.0, "crit": 3, "desc": "References Socket LocalEndPoint getter", "spans": [ [ 20118259, 17 ] ] }, { "id": "micro-behaviors/os/privilege/check::is-user-an-admin", "atk": "T1033", "conf": 0.75, "crit": 3, "desc": "IsUserAnAdmin API call", "spans": [ [ 11075722, 13 ] ] }, { "id": "micro-behaviors/os/random/crypto::dotnet-random-number-generator", "conf": 0.85, "crit": 3, "desc": ".NET cryptographic random generator", "spans": [ [ 5528557, 21 ] ] }, { "id": "micro-behaviors/os/random/prng/stdlib::random-nextbytes", "conf": 0.84, "crit": 3, "desc": ".NET Random.NextBytes method call", "spans": [ [ 1176918, 9 ] ] }, { "id": "micro-behaviors/os/sysinfo/network::loopback-adapter-name", "conf": 0.9, "crit": 3, "desc": "Loopback adapter name", "spans": [ [ 11152563, 8 ], [ 25306322, 8 ] ] }, { "id": "micro-behaviors/process/create/exec::shell-execute", "atk": "T1059.001", "conf": 0.75, "crit": 3, "desc": "Opens a target via ShellExecuteW", "spans": [ [ 90568, 13 ] ] }, { "id": "micro-behaviors/process/create/load/local::dotnet-load-from", "conf": 0.85, "crit": 3, "desc": ".NET LoadFrom assembly-loading reference", "spans": [ [ 19594778, 8 ] ] }, { "id": "micro-behaviors/process/create/shellexec::shell-execute-call", "atk": "T1059.001", "conf": 0.85, "crit": 3, "desc": "ShellExecute API call", "spans": [ [ 121162, 13 ] ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "spans": [ [ 11051236, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::diagnostics-namespace-dotnet", "conf": 0.75, "crit": 3, "desc": ".NET process namespace token", "spans": [ [ 2215698, 26 ] ] }, { "id": "micro-behaviors/process/create/spawn::process-filename-setter-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET process filename property setter token", "spans": [ [ 2195329, 12 ] ] }, { "id": "micro-behaviors/process/create/spawn::process-token-dotnet", "conf": 0.82, "crit": 3, "desc": ".NET Process type token", "spans": [ [ 2207288, 27 ], [ 2207316, 36 ], [ 2207353, 34 ], [ 2215132, 20 ], [ 11082982, 16 ] ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-error-dotnet", "conf": 0.82, "crit": 3, "desc": ".NET child stderr redirection", "spans": [ [ 2210432, 25 ] ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-input-dotnet", "conf": 0.8, "crit": 3, "desc": ".NET child stdin redirection", "spans": [ [ 2220202, 25 ] ] }, { "id": "micro-behaviors/process/create/spawn::use-shell-execute-property", "conf": 0.82, "crit": 3, "desc": ".NET UseShellExecute property setter", "spans": [ [ 2198974, 19 ] ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "spans": [ [ 2240579, 0 ] ] }, { "id": "micro-behaviors/process/hook/interception::dynamic-proxy-class", "conf": 0.7, "crit": 3, "desc": "DynamicProxy class reference", "spans": [ [ 2307587, 12 ], [ 11906364, 12 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 90544, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::appdomain-currentdomain", "conf": 0.6, "crit": 3, "desc": ".NET AppDomain CurrentDomain accessor", "spans": [ [ 1166821, 17 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-delegate", "conf": 0.8, "crit": 3, "desc": "Creates .NET reflection delegate", "spans": [ [ 2197500, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-instance-token", "conf": 0.8, "crit": 3, "desc": "CreateInstance member-name token", "spans": [ [ 1151248, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::dynamic-method-api-token", "conf": 0.8, "crit": 3, "desc": "References the .NET DynamicMethod API", "spans": [ [ 8302977, 13 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::invoke-member-token", "conf": 0.82, "crit": 3, "desc": ".NET InvokeMember method reference", "spans": [ [ 7602510, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "spans": [ [ 1156369, 10 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-alloc", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage allocation", "spans": [ [ 90408, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-get-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage retrieval", "spans": [ [ 90352, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-set-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage assignment", "spans": [ [ 90344, 0 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 90480, 0 ] ] }, { "id": "micro-behaviors/ui/controls/widget::winforms-timer", "conf": 0.72, "crit": 3, "desc": "WinForms Timer control token", "spans": [ [ 26309258, 5 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-elapsedticks", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch elapsed ticks", "spans": [ [ 11100396, 12 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-gettimestamp", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch timestamp check", "spans": [ [ 1170145, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/shape::high-string-density-large-pe", "atk": "T1027", "mbc": "B0032", "conf": 0.82, "crit": 3, "desc": "Large PE with dense string corpus" }, { "id": "objectives/anti-static/obfuscation/binary-metrics/shape::large-overlay-size", "atk": "T1027", "mbc": "B0032", "conf": 0.7, "crit": 3, "desc": "Overlay large enough to contain payload" }, { "id": "objectives/anti-static/obfuscation/control-flow/dispatch::sparse-opaque-pe-profile-code", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with elevated code entropy", "spans": [ [ 1024, 82432 ] ] }, { "id": "objectives/anti-static/obfuscation/control-flow/logic::overlay-at-least-half", "conf": 0.9, "crit": 3, "desc": "Binary overlay is at least 50%" }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "spans": [ [ 5485202, 13 ], [ 5554568, 13 ], [ 13491178, 6 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::appdomain-class-token", "conf": 0.65, "crit": 3, "desc": "AppDomain class token", "spans": [ [ 1166811, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-assembly-token", "conf": 0.78, "crit": 3, "desc": "Assembly accessor token (get_Assembly)", "spans": [ [ 1188715, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-constructors-token", "conf": 0.82, "crit": 3, "desc": "Reflection GetConstructors token", "spans": [ [ 8110758, 15 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-entrypoint", "conf": 0.7, "crit": 3, "desc": "Assembly entry point resolution", "spans": [ [ 7911386, 14 ] ] }, { "id": "objectives/command-and-control/backdoor/binary::managed-authentication", "atk": "T1071", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "Managed authentication method", "spans": [ [ 2174273, 17 ] ] }, { "id": "objectives/command-and-control/backdoor/rat/config::c2-config-name-marker", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "C2 endpoint configuration name", "spans": [ [ 20118332, 14 ] ] }, { "id": "objectives/command-and-control/backdoor/rat/modular::module-command-handler--registermodule", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Go RAT module command handler (RegisterModule)", "spans": [ [ 25283961, 14 ] ] }, { "id": "objectives/command-and-control/channel/quic::msquic-library-reference", "conf": 0.82, "crit": 3, "desc": "MsQuic library reference", "spans": [ [ 8937508, 10 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/http::bun-loader-aes-cbc", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Bun loader AES CBC marker", "spans": [ [ 13444354, 9 ], [ 13601237, 10 ] ] }, { "id": "objectives/command-and-control/dropper/staging/embedded::has-high-entropy-regions", "atk": "T1105", "conf": 1.0, "crit": 3, "desc": "Binary contains high-entropy data regions" }, { "id": "objectives/credential-access/env/secrets/bulk-access::azure-client-secret-env-name", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Azure client secret env name", "spans": [ [ 2239824, 19 ] ] }, { "id": "objectives/evasion/anti-av/code-padding::small-code-section-in-large-pe", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Small code section in large PE", "spans": [ [ 1024, 19 ] ] }, { "id": "objectives/evasion/masquerade/binary::dense-microsoft-cert-text", "atk": "T1036", "mbc": "OB0006", "conf": 0.9, "crit": 3, "desc": "Dense Microsoft certificate text", "spans": [ [ 132348, 46 ], [ 139724, 21 ], [ 1255630, 43 ], [ 11940324, 22 ], [ 17097536, 47 ], [ 17116870, 44 ], [ 20499328, 35 ], [ 33825000, 25 ] ] }, { "id": "objectives/evasion/masquerade/cert::security-dir-embedded-pe", "atk": "T1553.002", "mbc": "F0001", "conf": 0.97, "crit": 3, "desc": "Certificate region begins inside embedded PE", "spans": [ [ 135169, 44 ] ] }, { "id": "objectives/evasion/masquerade/identity/mimicry::windowsupdate-appdata-path--rx-3", "atk": "T1036.005", "conf": 0.95, "crit": 3, "desc": "ProgramData path fragment", "spans": [ [ 11176464, 48 ] ] }, { "id": "objectives/evasion/masquerade/version-resource/claim::microsoft-company-name-short", "atk": "T1036.005", "conf": 0.82, "crit": 3, "desc": "Microsoft short company name", "spans": [ [ 132108, 9 ] ] }, { "id": "objectives/exfiltration/http/collect::csharp-bytearray-content", "atk": "T1041", "conf": 0.93, "crit": 3, "desc": "C# byte array content", "spans": [ [ 5548111, 16 ] ] }, { "id": "objectives/persistence/system/registry/com-hijack::current-user-hive-marker", "atk": "T1546.015", "conf": 0.9, "crit": 3, "desc": "Current-user Windows registry hive", "spans": [ [ 98888, 17 ], [ 99024, 4 ] ] }, { "id": "metadata/binary/debug::pdb-nonstandard-drive", "conf": 0.5, "crit": 3, "desc": "PDB path on non-standard drive letter", "spans": [ [ 109612, 86 ] ] }, { "id": "metadata/binary/layout/embedded::pe-embedded", "conf": 0.9, "crit": 3, "desc": "Valid PE/MZ binary found embedded in file", "spans": [ [ 135168, 47 ] ] }, { "id": "metadata/binary/layout/embedded::repeated-standard-pe-images", "conf": 0.97, "crit": 3, "desc": "Four or more embedded standard PE images", "spans": [ [ 135168, 47 ] ] }, { "id": "metadata/binary/layout/overlay::overlay-dominates-80pct", "conf": 0.94, "crit": 3, "desc": "PE overlay exceeds eighty percent" }, { "id": "metadata/binary/layout/ratio::many-pe-embedded", "conf": 0.95, "crit": 3, "desc": "Six or more embedded PE headers", "spans": [ [ 135168, 47 ] ] }, { "id": "metadata/binary/signing::signed-pe-large-noncertificate-overlay", "conf": 0.9, "crit": 3, "desc": "Signed PE has large non-certificate overlay" }, { "id": "metadata/binary/symbols/imports::imports-advapi32-dll", "conf": 0.95, "crit": 3, "desc": "Binary imports ADVAPI32.dll", "spans": [ [ 121852, 12 ] ] }, { "id": "metadata/build/manifest::pe-manifest-myapplication-template", "conf": 0.9, "crit": 3, "desc": "Manifest is MyApplication template name", "spans": [ [ 132933, 17 ] ] }, { "id": "metadata/file/string/cloud::azure-managed-identity-token-path", "conf": 0.9, "crit": 3, "desc": "Azure managed identity token endpoint", "spans": [ [ 2240920, 31 ], [ 2241166, 53 ], [ 11175146, 53 ] ] }, { "id": "metadata/file/string/cloud::azure-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "Azure IMDS endpoint", "spans": [ [ 11193080, 57 ] ] }, { "id": "metadata/lang/encoded/wide::shell-interpreter-cmd", "conf": 0.95, "crit": 1, "desc": "cmd interpreter marker encoded", "spans": [ [ 2226508, 0 ] ] }, { "id": "metadata/package/config::get-env-var", "conf": 0.6, "crit": 3, "desc": "GetEnvironmentVariable method", "spans": [ [ 121540, 23 ] ] }, { "id": "metadata/package/versioning/scheme::pe-file-description-present", "conf": 0.95, "crit": 2, "desc": "PE FileDescription field is populated", "spans": [ [ 132168, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-legal-copyright-present", "conf": 0.95, "crit": 2, "desc": "PE LegalCopyright field is populated", "spans": [ [ 132348, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-product-name-present", "conf": 0.95, "crit": 2, "desc": "PE ProductName field is populated", "spans": [ [ 132548, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 132522, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::default-request-headers", "conf": 0.8, "crit": 3, "desc": "DefaultRequestHeaders accessor", "spans": [ [ 11104102, 25 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::getasync", "atk": "T1105", "conf": 0.86, "crit": 3, "desc": "HttpClient asynchronous HTTP response retrieval", "spans": [ [ 11022716, 8 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::httpclient", "conf": 0.82, "crit": 3, "desc": "System.Net.Http.HttpClient type reference", "spans": [ [ 1182854, 10 ], [ 11414716, 11 ], [ 13775103, 11 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::readasstringasync", "conf": 0.84, "crit": 3, "desc": ".NET asynchronous HTTP response body read", "spans": [ [ 11020747, 17 ] ] }, { "id": "micro-behaviors/communications/http/oauth::microsoft-login", "conf": 0.6, "crit": 3, "desc": "References a Microsoft login domain", "spans": [ [ 11133966, 41 ], [ 11134828, 124 ], [ 11255786, 121 ], [ 11326302, 104 ], [ 11348544, 128 ], [ 11358526, 60 ], [ 11899250, 40 ], [ 13785264, 34 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-keyword-reference", "conf": 0.5, "crit": 3, "desc": "References an OAuth endpoint marker", "spans": [ [ 15172990, 11 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-protocol-reference", "conf": 0.5, "crit": 3, "desc": "References the OAuth 2 protocol", "spans": [ [ 2240939, 6 ], [ 11001966, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Cleartext http:// URL", "spans": [ [ 2241166, 53 ], [ 6938323, 43 ], [ 9467341, 31 ], [ 11161422, 58 ], [ 11161540, 48 ], [ 11161638, 55 ], [ 11161750, 54 ], [ 11162778, 81 ] ] }, { "id": "micro-behaviors/communications/http/websocket::connect-async-method-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": ".NET ConnectAsync method token", "spans": [ [ 19584000, 12 ] ] }, { "id": "micro-behaviors/communications/http/websocket::receive-async-method-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": ".NET ReceiveAsync method token", "spans": [ [ 20099599, 12 ] ] }, { "id": "micro-behaviors/communications/socket/raw::raw-socket-ref", "atk": "T1011", "mbc": "C0001", "conf": 0.7, "crit": 1, "desc": "Raw socket terminology", "spans": [ [ 25319594, 0 ] ] }, { "id": "micro-behaviors/communications/ssh/client::auth-failed", "atk": "T1021.004", "conf": 0.5, "crit": 3, "desc": "SSH authentication failed message", "spans": [ [ 2242142, 38 ], [ 25494316, 21 ], [ 25494630, 61 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/ecdh::ecdh-api-reference", "atk": "T1573.001", "conf": 0.88, "crit": 3, "desc": "ECDH key-agreement API reference", "spans": [ [ 12995344, 4 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/rsa::dotnet-rsa-padding-raw", "conf": 0.8, "crit": 3, "desc": "Dotnet RSA encryption padding API", "spans": [ [ 13454336, 37 ], [ 13468328, 24 ], [ 13468353, 24 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "spans": [ [ 1170206, 11 ], [ 1178097, 11 ], [ 25282794, 11 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "spans": [ [ 25471975, 10 ] ] }, { "id": "micro-behaviors/data/decode/base64::dotnet-frombase64string-text", "conf": 0.9, "crit": 3, "desc": ".NET FromBase64String method reference", "spans": [ [ 1162267, 16 ] ] }, { "id": "micro-behaviors/data/encode/image/pixel::pixel-access-lockbits", "conf": 0.8, "crit": 2, "desc": ".NET Bitmap.LockBits raw pixel-buffer lock", "spans": [ [ 31196687, 0 ] ] }, { "id": "micro-behaviors/data/encode/image/pixel::pixel-access-stride", "conf": 0.8, "crit": 2, "desc": ".NET BitmapData.Stride row-length field", "spans": [ [ 31149380, 0 ] ] }, { "id": "micro-behaviors/data/parse/vocabulary::ciphertext-key-vocabulary", "conf": 0.8, "crit": 3, "desc": "Uses ciphertext, shared-secret, or trailer terms", "spans": [ [ 5449696, 10 ], [ 5781117, 10 ], [ 13489505, 10 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::get-files-token", "conf": 0.88, "crit": 3, "desc": ".NET GetFiles enumeration token", "spans": [ [ 25346487, 14 ], [ 31187629, 8 ] ] }, { "id": "micro-behaviors/fs/path/extension::exe-name-or-extension", "conf": 0.5, "crit": 1, "desc": "References a Windows .exe filename or extension", "spans": [ [ 2226511, 0 ] ] }, { "id": "micro-behaviors/fs/path/system::programdata-directory-path", "conf": 0.82, "crit": 3, "desc": "ProgramData directory path reference", "spans": [ [ 11176464, 40 ] ] }, { "id": "micro-behaviors/fs/write/file/full::dotnet-writeallbytes-token", "conf": 0.86, "crit": 3, "desc": ".NET File.WriteAllBytes token", "spans": [ [ 11888966, 13 ] ] }, { "id": "micro-behaviors/fs/write/file/handle::writefile-api-text-reference", "conf": 0.9, "crit": 3, "desc": "WriteFile API name in PE text", "spans": [ [ 31152381, 9 ] ] }, { "id": "micro-behaviors/mem/protect/modify::virtual-alloc-string", "atk": "T1587.001", "conf": 0.9, "crit": 3, "desc": "VirtualAlloc API string reference", "spans": [ [ 20268837, 12 ] ] }, { "id": "micro-behaviors/os/env/read::getenv-profiling-api", "conf": 0.86, "crit": 3, "desc": "GetEnvironmentVariable profiler check", "spans": [ [ 121540, 23 ], [ 1153114, 22 ] ] }, { "id": "micro-behaviors/os/module/load::get-proc-address-import", "conf": 0.9, "crit": 3, "desc": "Resolve exports with GetProcAddress", "spans": [ [ 90168, 14 ] ] }, { "id": "micro-behaviors/process/create/exec::cmd-exe-reference", "conf": 0.8, "crit": 3, "desc": "References Windows cmd.exe interpreter", "spans": [ [ 2226508, 7 ] ] }, { "id": "micro-behaviors/process/create/hidden::dotnet-create-no-window", "atk": "T1564.003", "conf": 0.86, "crit": 3, "desc": ".NET process window suppression", "spans": [ [ 2220621, 18 ] ] }, { "id": "micro-behaviors/process/create/spawn::redirect-standard-output-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET child stdout capture and redirection", "spans": [ [ 2220251, 26 ] ] }, { "id": "micro-behaviors/process/debug/event::output-debug-string", "conf": 0.82, "crit": 3, "desc": "References the Windows debugger output API", "spans": [ [ 121350, 18 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.72, "crit": 3, "desc": ".NET GetFields reflection method reference", "spans": [ [ 7604914, 9 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.8, "crit": 3, "desc": ".NET Activator type reference", "spans": [ [ 2211067, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::low-import-count", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Sparse import table" }, { "id": "objectives/anti-static/pack/runtime::dotnet-interop-services-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Runtime.InteropServices name", "spans": [ [ 1175505, 30 ], [ 2212125, 39 ] ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-reflection-emit-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Reflection.Emit name", "spans": [ [ 8309200, 35 ], [ 8313898, 34 ], [ 8313960, 22 ] ] }, { "id": "objectives/anti-static/pack/runtime::dotnet-reflection-primitives-string", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded System.Reflection.Primitives name", "spans": [ [ 8312526, 28 ] ] }, { "id": "objectives/command-and-control/dns/tunneling::client-secret-config-field", "atk": "T1071.004", "mbc": "B0030", "conf": 0.92, "crit": 3, "desc": "Entra client secret configuration field", "spans": [ [ 2226232, 12 ] ] }, { "id": "metadata/binary/framework::dotnet-selfcontained-bundle", "conf": 0.95, "crit": 2, "desc": ".NET self-contained runtime bundle", "uses": [ 6, 189, 190 ], "spans": [ [ 109612, 0 ], [ 135168, 0 ] ] }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 20, 22 ], "spans": [ [ 132108, 9 ] ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "uses": [ 36, 38, 42 ], "spans": [ [ 132570, 0 ] ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 20, 46, 100, 101 ], "spans": [ [ 33829177, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 45, 46 ] }, { "id": "micro-behaviors/communications/http/client/managed::custom-user-agent-headers", "conf": 0.85, "crit": 3, "desc": "Default request headers include User-Agent access", "uses": [ 50, 203 ], "spans": [ [ 1182810, 13 ], [ 11104102, 25 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-credentials", "conf": 0.86, "crit": 3, "desc": "OAuth client credential fields", "uses": [ 54, 55 ], "spans": [ [ 2241048, 9 ], [ 12601520, 13 ] ] }, { "id": "micro-behaviors/communications/socket/raw::raw", "atk": "T1011", "mbc": "C0001", "conf": 0.8, "crit": 3, "desc": "Create raw network sockets", "uses": [ 213 ], "spans": [ [ 25319594, 9 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-embedded-resource-read-any", "atk": "T1027.009", "conf": 0.86, "crit": 3, "desc": ".NET resource-reading API references", "uses": [ 103, 104, 105 ], "spans": [ [ 1181446, 9 ], [ 7936360, 128 ], [ 20108533, 25 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::find-resource-any", "atk": "T1027.009", "conf": 0.8, "crit": 3, "desc": "Locates a PE resource entry", "uses": [ 106 ], "spans": [ [ 90360, 13 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-append", "conf": 0.86, "crit": 2, "desc": ".NET StringBuilder Append use", "uses": [ 112, 115 ], "spans": [ [ 1150438, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 70, 71, 214 ], "spans": [ [ 20480113, 0 ] ] }, { "id": "micro-behaviors/os/env/secret-name::credential-env-read", "conf": 0.9, "crit": 3, "desc": "Reads a credential-bearing environment variable", "uses": [ 126 ], "spans": [ [ 2239824, 19 ] ] }, { "id": "micro-behaviors/process/create/spawn::dotnet-redirected-stdio", "conf": 0.88, "crit": 2, "desc": ".NET child process stdio redirection", "uses": [ 144, 145, 146, 233 ], "spans": [ [ 11082982, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-token-pair", "conf": 0.72, "crit": 3, "desc": "Multiple .NET reflection resolver APIs", "uses": [ 152, 235 ], "spans": [ [ 2197500, 14 ], [ 7604914, 9 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 242 ], "spans": [ [ 109612, 0 ], [ 135168, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 245 ], "spans": [ [ 33829177, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 242 ], "spans": [ [ 109612, 86 ], [ 135168, 47 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 258 ], "spans": [ [ 33829177, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 257 ], "spans": [ [ 109612, 86 ], [ 135168, 47 ] ] }, { "id": "metadata/binary/layout/overlay::compact-image-multistage-pe", "conf": 0.96, "crit": 4, "desc": "Compact mapped image with embedded stages", "uses": [ 7, 8, 12 ], "spans": [ [ 135168, 47 ] ] }, { "id": "metadata/binary/section/prose::high-string-count-pe-no-exceptions", "conf": 0.9, "crit": 3, "desc": "Non-compiler PE with very high string count", "uses": [ 17 ] }, { "id": "metadata/lang/encoded/wide::shell-interpreter-encoded", "conf": 0.9, "crit": 3, "desc": "Encoded shell interpreter (wide strings)", "uses": [ 197 ], "spans": [ [ 2226508, 7 ] ] }, { "id": "metadata/signed/certificate/identity::microsoft-signed-foreign-company", "conf": 0.94, "crit": 3, "desc": "Microsoft-signed PE has non-Microsoft company", "uses": [ 33, 258 ], "spans": [ [ 132108, 9 ], [ 33825032, 31 ], [ 33829177, 28 ], [ 33829355, 29 ] ] }, { "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword", "conf": 0.5, "crit": 3, "desc": "Encryption algorithm keyword", "uses": [ 76 ], "spans": [ [ 12319769, 6 ], [ 20121195, 6 ] ] }, { "id": "micro-behaviors/crypto/symmetric/aes/library::dotnet-aes-rsa-hybrid-keywrap-pattern", "conf": 0.9, "crit": 3, "desc": "Dotnet AES and RSA key-wrap APIs", "uses": [ 91, 216 ], "spans": [ [ 5528744, 15 ], [ 13454336, 37 ], [ 13468328, 24 ], [ 13468353, 24 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::dotnet-managed-resource-access", "atk": "T1027.009", "conf": 0.9, "crit": 3, "desc": ".NET embedded-resource API references", "uses": [ 103, 104, 105 ], "spans": [ [ 1181446, 9 ], [ 7936360, 128 ], [ 20108533, 25 ] ] }, { "id": "objectives/anti-static/pack/runtime::embedded-dotnet-runtime-assembly-strings", "atk": "T1027.002", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Embedded .NET runtime assembly-name strings", "uses": [ 238, 239, 240 ], "spans": [ [ 1175505, 30 ], [ 2212125, 39 ], [ 8309200, 35 ], [ 8312526, 28 ], [ 8313898, 34 ], [ 8313960, 22 ] ] }, { "id": "objectives/command-and-control/dropper/staging/embedded::dotnet-aes-resource-dropper", "atk": "T1027.009", "mbc": "B0030", "conf": 0.92, "crit": 3, "desc": ".NET AES resource extraction dropper", "uses": [ 89, 226, 250 ], "spans": [ [ 1181446, 9 ], [ 5528649, 15 ], [ 7936360, 128 ], [ 11888966, 13 ], [ 20108533, 25 ] ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "uses": [ 195, 196 ], "spans": [ [ 11193080, 0 ] ] }, { "id": "objectives/evasion/process/hidden/execution::dotnet-hidden-process-launch", "conf": 0.92, "crit": 3, "desc": ".NET hidden process launch setup", "uses": [ 142, 144, 147, 232 ], "spans": [ [ 2198974, 19 ], [ 2207288, 27 ], [ 2207316, 36 ], [ 2207353, 34 ], [ 2215132, 20 ], [ 2215698, 26 ], [ 2220621, 18 ], [ 11082982, 16 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000aoqDx4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000gN$^{CM3tzCM3tzCM3tzjCzSqB]ybxjCzAkX=7tgjCzDlsn*@3[n]^0CkZky[n[", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000%3D!l^e%x}f^n)U[NBq%[DP6\u0026ZYN@{0000000000^e%x}[cqkOf^n)U[mae}9%95uFDbWH%3D^GZYN@{a0pWo?#:K\u003c0SSim00000@D(qU@r04Z1][T/@D(wVZYN@{000000000000000=\u0026To{5cq({5ctb)9@((rk(Z):ZYN@{@D(nT@r04Z=\u0026To{5cq({^e%x}f-?As5ctb)f-\u003cSo[j9IUs\u0026HDa002jj000000000000000aorOn000000000000000=\u0026To{5q\u0026--Kn]ns007#/0003cZYN@{[bJD}0@MzYlJvb{1n\u0026Z^U(B.X?#:6hZYN@{z#P+Fzu6UJ00000\u0026r7kM=\u0026To{5q\u0026--z#Y\u003e@01!b0ZYN@{[bJD}0@MzYlJwnp1n\u0026Z^U(B.X?#:3gZYN@{Kn/d\u003cuh%%t00000=\u0026To{5q\u0026--Kn]ns0Sp@#?#:4XZYN@{5ch^r1n(JEE/GMove{pb0SiIIKPktr?#:7YZYN@{pYyw9o-Lec0rvS.=\u0026s1Y0000000000=\u0026To{5q\u0026--z#Y\u003e@0d:4rZYN@{=\u0026s6M0@MzY0SiH+^eTb6?#:3gZYN@{UM1Lkjobu}000000000000000=\u0026To{5q\u0026--z#Y\u003e@0d:56ZYN@{=\u0026s6M0@MAD0SiII^eTb6?#:4XZYN@{UM1Lkec2U:000000000000000aPN3\u003cTn\u0026ho0000000000=\u0026To{5q\u0026--z#Y\u003e@05ixwZYN@{[bJD}0@MzYlJvcp1n\u0026Z^U(B.X?#:3gZYN@{", "ln": 976 }, { "b": "0%0\u003cH0SW=00rvU#004L$7%J2D1or#20%0\u003cH0SW=00rvU#004L$63Qxx002jjp^F5K000009rl3Pa0pWoa0pWo00000nc5ZL3v%{]2Or1]dfa(@nf[l+\u003e!R/.004KEnc]pbnDw*Md-0\u003c4dffCrds\u0026C2d//UtxH9P1nf[nnZYN@{nc5ZL0fG0#ZYN@{", "ln": 341288 }, { "b": "000000000000000000000000000000000000000000000000000000000000d5^BK00000ih)b.00000mYuQ)00000t=v@d00000zM9\u003cv00000Ft\u0026+N00000PS5d@00000X#t]m00000^5vlI00000\u003ebwN=000000icn7000007odPt00000d5)HL000", "ln": 399824 }, { "b": "1][S6UMK$b00000000000000000000bUSt?r+lq)x(v(Iawu]^at\u003e=de\u0026T%@lVl{?A+Pf1Brz#0diHu9iw-ryfFUHdoM:+@z/PFwaw=69eMcq3as5jaBZWNUBzbPkB2\u003eBwe*9.%A=(Ciy?W:cv}Zcsawsygng(2}wGTDRxlv^1A+e^1efF1DavxZRwPF$t00", "ln": 402696 }, { "b": "c37Hx0001qw[z3Yzu6U.A@VgE000000000)BZVzpvrcm1zF80M0001ez/PzivqYP#y?Wv0vrcSoxKM6}azC.6z/6D4Bzki2wGU(kzdN:4v\u003c2(sAaK7\u003c000000001xwPz\u003caz/cXmx(!c1ByO#BayPkde*b4ywN]\u003c8c1XXJoM:+^v@Dy0aAhvtC4\u003eF#B08=v000090000w", "ln": 403853 }, { "b": "Fjo-[0rr91J7a240rr91V{\u003emI0rr91fV9)v0rr91YHA9Q0rr91FwIqp0rr91A7g4Z0rr91Fw?Is0rr91-6%@Y0rr91k/rUM0rr91+TI!!0rr91KI.6G0rr91!j6T)0rr910k[\u003e/0rr91\u00266){30rr915xaT10rr91({.hf0rr91U/cP)0rr9100000000000000000000A=(nqx(mL-wmYgW00000B9hLywO#3\u0026wb(PfzF%MjvqC]z00000v{%m)z/^aiy\u0026sxaayMxsB0a$hA=l8xx(mFZv@=c?By+BLA+frmzdJXEB97\u0026jB-NJ.Cxdbh00000D1*\u0026awb(Pf00000x(!MlwO+)=vR/PQv@c78wDhYg0000000000000000000000000000og2NyXo0000000000000000000001n#k1oX\u0026g1oX\u0026g1oX\u0026g1qR:*78vV378vU*1oX\u0026g1oYCO6+}C#1Qb5k1Qb5k1Qb5k1Qb5k1Qb5k1oX\u0026g1Q2LP6+}C#1Qb5k1Qb5k1Qb5k1Qb5k1Qb5k1oX\u0026g000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000u}yMM0rr91XjM%Q0rr91Z!a/Y0rr91:vVU!0rr912TX/D0rr91=}jH)0rr91c}:+{0rr91vaUEf0rr91fIqR20rr910lLp(0rr91kUzri0rr91Z$5Ho0rr91nj%eq0rr910lUv)0rr91p!I1y0rr91v9X?60rr91u}QYO0rr91fV:rB0rr9107m3w0rr91v95z00rr91A7Zy=0rr91aKQmu0rr91Fj*8%0rr91U*SP50rr91Kv]!d0rr91fW*2L0rr91PI2Gt0rr91Fxv\u003ex0rr91UUbgJ0rr91Z%\u0026vm0rr91XjW3R0rr91^9I=y0rr91H^RC$0rr91PVEg:0rr91:v=./0rr91PWA*\u003c0rr91/H(B00rr91^aFzH0rr91\u003eT#bg0r", "ln": 405456 }, { "b": "00000uQWZ\u003c00000xkzG}vqC]zw[+*)wb(Pf00000x(n37xjV9ax(mD)CMmZzw]zYjx(){bvruBd00000zdN/$zdN*5z!5?FxM4*80000000000asFKSaswERcN/2}00000vruQ5ze:OtBz\u0026oFB0a)lc37hLvqH6$c364^00000vQS^\u0026cUvpqcM\u003cY", "ln": 407136 }, { "b": "Aa9=#aAR*Cash7KC42ifwPE?K00000003CHBy/rdBrCWzay/tbAa9=#ash7KCwhejash7e001r^iWFq$ash7e00000003OJA=k$vx(k58A=M8sazth3wnC%$x8(BIzF\u003cxmaAz4mB.$XjzF%zAB9hLywO#3\u0026wftx2A=l8xx(mFZ003IqzF\u003cxmaAz4m", "ln": 407382 }, { "b": "00000vruQ5ze:OtBz\u0026prz^^f0viu\u003eqay/8czFHvyzeS@@azC)tcNA*Ydf6tFvRGZ*A^mS+By/Ys000008++x.000008iUHp8vuDA00000C42A9vpB4:aswERcM)5uBrC0mzF%zAv@c78vpB4:aA?gfB.7KM0rSAb1o!#f0000000000-6:/W0rr91aBTrv0rr91UULEN0rr91aIv/a0rr91Xk9rV0rr91^8Viq0rr91-7{O/0rr91U^1mW0rr9", "ln": 407668 }, { "b": "B-7R%y?j-hzY\u0026X7BrBp@wozZ1mRMWIpgn0J00000aPIGx00000B9R?GwO\u0026M3A=M8sasgL90000000000oJsw=pesqNrSAa1uO#gE00000c37wN00000j39Axi@/lX00000zF{Ufx(4u6cJBbD00000cKHe$zY\u0026Uay?j.p00000cJBbD00000cVAH7yHH\u003c!e*UM^az(mxBrC47ayMylBAh8kx8?]iwPz*fAV/gpvpT7\u0026xcq5fwozZ1aswERcJ", "ln": 411136 }, { "b": "Bs}xLvlkSqkq3+{vlkSqku}]ux(\u003e$zBZWuPtRmTlB7/05wN64]vo+Vxg*Al$y\u0026%eFaZuSLtYTN!A+eG(BZXJje\u0026l/$tXO7\u0026Bs}xLvll8Dkq3+{vll8Dku}]ux(\u003e$zBZUmI08cxUuR\u003c3/nb@R\u00260000003LPie[w^mj0v\u0026Ye)JjbvQ9.(vo+Vxg*Al$wnD6zaZw\u00264vpS!.y+xmmy=:mOkq3F.yYBCn08cxUuQETQr7D#?0000009/\u003c)3o[\u003ev3m#O+0aP}+w[+(T00000000330S@Jb0%w-f1oX\u0026g1o!@j1Qb5k1Qb5k1Qb5k1Qken1{Lno1{Lno1{Lno1{Lno1{Lno1{Lno1{Lno1{Uwr2l$Fs2l$Fs2l$Fs2l$Fs2l$Fs2l$Fs2l$Fs2l$", "ln": 411511 }, { "b": "cNy5+B0*@lv/MHtvru66A+frmy\u0026*!fvqY$3BrC47aAz4jA+fr6zGGD2azCZoBzbxfazC.mByx04vruj4zu6U^Bn#pv0001vx(dA7A+frmy\u0026*!fvqY$3BrC47aAz4jA+fr6zGGD2azCZoBzbxfazC.mByx04vruj4zu6Up00000000000000100002", "ln": 412453 }, { "b": "wmoN\u003e00000wnbT/BzkP60000000000wQ4=@B-.f{xjVf@zGV0WA+f9aC4yTNA+fb%zdJXEB7GDfz!0i(wDhYg00000BzU#mvqPMQ3jmaE3KWsI4H\u0026^N3KWdy1oX(i2l$Fs2)ZRn0%nSc0%nSc0%nPa0rAf200000n=O?\u003eo8[}(nDn.\u003co-Ld[c37huCYi", "ln": 412928 }, { "b": "B-qIjy\u0026%rg0000000000jzeOOzY*uEj%joQaz++fwGSpfazM4oAc0dozGG!tBzbkdB7occwGU]6az+$avqE5lc37Bly**^:y\u0026.mxz//]s00000vSD3*yANLrBAqebwGU/cz/u?cBrCylzE\u003c}pwb(PfzF{Uvx(^#$y?j-9vpA!:aswERcM)2tAV^E", "ln": 413264 }, { "b": "BZYxaz/cXbD30P$z!rQ5wPN[Lv@C)?AbPDdBn#pvv@C)?A@Vgu00000v}Yp\u003eAa9\u003cgwPzU*00000tl3m8.y+Z(tyXrut}b*Oy?W:2Bn#pvcUvpqcM)FLwPe=aB0b^uAS", "ln": 417652 }, { "b": "00000000000000000000000000000007^AC0rr91kU?Gj0rr91\u00268G(f0rr91rC(O\u0026z*c7wwQ4Y@Acb/jzu6Up00000CU5c\u003c0rr91kU?Gj0rr91\u00268G(f0rr91vQS^\u0026wQ4Y@Acb/jzu6Up0rr91761sm0SSi20SSi20@@r30SSi21onA47YTKo1POJ54fcwd1][S62(\u003c@92l", "ln": 421664 }, { "b": "0000000000000000000000000000000000000000c\u0026!b+BPujTyYC):00000r+VR$vqE5Nd\u003eq-fqDbX1ph+j%wO#Bexj@A8wO(vaC{4iEay/tbAbo9cwGUF\u003ey?$kozY\u003cayA+foiz/NDgv@k:ewQ4+^atmjE00000lR*APp^).KtMs:7p^F5K0000000000000000000000000tLkf:00000P82PP00000ztpw2000008tyB300000Py]JP00000@QWxX00000gv??q00000jmGWy0000081a\u003c$00000-P$2#00000lfU]", "ln": 422368 }, { "b": "fOY(k\u003e(pX.000001POJ50000000000a{BeF0rr91y\u003e\u0026k}00000000000SSi2Fqjvf\u0026q-\u0026S000001POJ5z2!RSv/QAEASxUJwDjs.wb{ACyYBCnlVm0lCXIm@A=kD0B8}rYlR*APp^).Kv@k:ewQ4+^fjK$Z0000000000000001POLr3JHeb00000000009rl8P1onA40000000000Mh*{21onA40000000000Jq@%]2MK\u002680000000000JSo4", "ln": 430056 }, { "b": "p]%}L0rr91PSFAG0rr91Xub%=0rr91^5^I50rr91\u003e=C5t0rr910iMJR0rr91nuJeE0rr910000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZwb{3rBo2\u003eLBo31Pz2!bEeDxO!f-S^9f-S^9f-RgNve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZw=MJByYF2DeDxO!f-S^9g5@)agYNHQve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZw=MJByYF2DeDxO!f-S^9g5@)ag5}pOve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZyYFwNv/P{qyYFeHDh}vNBo31PzVBUPeDxO!f-S^9g5@)af-RgN0000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZyYFwNv/P{qyYFeHDh}vNBo31PzVBUPeDxX?vGpDHzVBONwDl/LwDjpZyYDf\u0026eDvKaeDvE80000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZz#:[UzVBnEwDl=KA@ZpZxAi5MwDlcswb{VJeDxO!f-S^9f-S^9g5}pO00000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZA@ZpZASx!NzuaqHeDxO!f-S^9f-S^9fAq7M00000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZA@ZE=zuaeDxAfQ:yYDf\u0026eDvKaeDvE80000000000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!TwDjpZA@ZE=A@Y[OzuanGzVzu?yYDf\u0026eDvKaeDvH900000ve$lDx-GZ+z2!RSeDx${x-J2JeDxnXzVB!T", "ln": 430880 }, { "b": "wDlMEw=M@NzuaeDBo31PzVBUPA@W=(yYDf\u0026eDvH9eDvE8000000000000000wDl@PBo0()z2!RSeDx${x-J2JeDxU*Bo3B-A@Y+KASvV\u003ewb{rzve$9zzVBzIvGprDCMoq}yYDf\u0026eDvH9eDvE8000000000000000wDl@PBo0()z2!RSeDx${x-J2JeDxU*Bo3B-A@Y+KASvV\u003eCk#sSzuahEzVB$YA@ZpZve$xHx-J5Kzu8l*yYDf\u0026eDvH9eDvE800000ve%*rB]U}Jz#:OLgxofg0000000000yxd]CASx$SwDlJDgxofg0000000000yxd]CASu", "ln": 431824 }, { "b": "l2{Kax(4uDAa%wVpe:Z:1][S65c8XglVl*Xvrb{TBAh8kxgm4B0@@r35c8Xgmq^l+q*ACawO\u003eaVv{%g+B47rN00000000005c8Xgm}D^gvru6Iz/PY6BvyAO0rr915Dz!hm}D^wwO(x.vrufrr@-j20@@r35c8Xgm}D^oz!0i(wL3=Kz:!)J000005c8Xgm}D^wx(dAJz/PY6BvyAO0@@r35c8Xgm}D^xB7GwWwObv[y\u0026\u0026u?v{%g+pgn0J00000000002lj-75c8XgnP5l:x\u003c\u003e*(DsYD:x([60vqF\u003eNv@#B6zBF^I00", "ln": 432264 }, { "b": "x(mv3x(v(-wPRQ7wb(Pf009c61o!#m2NH?C3\u003eiWS5d]J*6CRx17-skh9337xar.{NbQB=+c[cR@eg\u0026FcfFLssg=mfIi5%2YjuU\u003e)kTv.7l}6Nnnj=ADoIFnTp/ga?r8($2sxO*itWpVyu$0IOwmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQZE0{D[05gUZFb]SI00000000000ml(iFb]SI06)^[Fb]SI04thVFb]SI0ml(iFb]SI09DGgFb]SI04thVFb]SI03E:mFb]SI0c2gEFb]SI04thVFb]SI005X@Fb]S", "ln": 432655 }, { "b": "A+PunaA.NgC4293vpB4:0000000000ph+j%wO#Bexj@AeAa9l/0000000000p?sV:x(!ufz/cXdwO#i[wb(Pf00000lsByEvpS[?wPI[)00000rC(O\u0026z*c7wwPz*fASu7tqE%]/B-H#6ay]5bx\u003e7YOmRMWIaz2!iB98E600000nO@A!z/xodaz++fyxatmph.m@BZ]8cwb", "ln": 436096 }, { "b": "008@@lm#(+Nk/2Y3$gXIZ5w0h%nQ$vjxbrXrAm15)CO\u0026brAk\u003eWq)\u0026Al5FoNU00000006I})(ymzln4y+b/CrmY$.\u0026SWE:)V2Y3Ia+UQ^STfNvxGGq\u003e$\u0026my%[000000000000000008HMTwG?Ofx!84ZR0+D8Ve$/zOH#CpDL4dh8Ccej[!teg96oBu6{kRFDv[ExZ$KQuej856jt*)vsSL=N^xGcY$W#{vie#x+!1Dt!Auo+^pOdBDr#YCG[117731:EczVbUTZu-zU#HBqu/7lo6zu5@qQQH^BCgEUU?wFffc.#TdmGJmI61?\u00263F1Pf}I$v@Fx\u003c7=?Ub+OyTzJmf2NvxAfC(ohMgTD!xvqBvAvOtpwncU:Evq?mAs\u003cYQ{pdgd7LRQ\u00260i(/Y#6k5NBr@@\u003cFd/0Gy^a9kecFI\u003eEnw+am\u003edF895!d:gpU6zf{[vRKA\u0026l4#H9#sHEPZay@?M}V\u0026uFG(2*s[V.ED@o%PE8NUO/{ExlOLc1ap8\u003cdXq1ymFe(%hQ@je?Qj^vq\u003eej?:9xQs4BB)4:2lmWn5:0Ex%x-I}:4RjWiv3Vq5.gY}H98}j!\u0026w$elNRsml:xO8d8j%OVcfQIk)4.TIBqDx6}qcKWW0H8$p+\u003cg#\u003ezP50RWKLQ:*M7.!rQ9tr)%[lE+Rr}HY]8nyved\u003c9ph\u003c^SS%4#cSd%+97wcd/bGV7X\u00264p}hNU6#)FmvOv(u[D3e?{d=M45f^Ut[\u0026(\u003ci@Jvqi4G]N0Oi=^Z!u^6.2c=.OZv)Q\u0026#h\u003enrY[n6=RXoDR]hNXn}45o9nrxj7Sp(Z}k\u003e^!nB.tjU\u003e\u003e][e).7(wZ-Z}d/v.", "ln": 439248 }, { "b": "[Bu8v].4}L}1:^-@qDS{009c61o!#m2NH?C3\u003eiWS5d]J*6CRx17-skh9337xar.{NbQB=+c[cR@eg\u0026FcfFLssg=mfIi5%2YjuU\u003e)kW!biwmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQttWpVyu$0IOwmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQZE0{D[FpSr8GOteoH(41EJe-\u003cUKDCY\u0026L:dM3N3\u003czjOsMmzPRn9PQ[%@^ShV!$TGwUeU^7HuW6^uKXvGh.YUh4]Z})[9-kP:p:JqPF+*1CV^9Zp\u003c!yAd4/Xb0k*$.", "ln": 448576 }, { "b": "kl7V-00000003zf?[vN\u003ckIP?C2R3h?Y!iK\u00260000004}=1z2=h1CX3\u003ecvQTuUe[n:e000000rr90@#Idu06g8W09Gp40cXzy0g0P+0jh.a0mH]F0p*9\u002601Yeh051uM08iE]0bIVo000000rr90@#Idu06peX09Pv50c!Fz0g9V=0jq!b0mQ#G0p{f\u003c", "ln": 453903 }, { "b": "vrlJVA=M8s006}rmSJ6KoLE%RvrcR[JSIZZBwlW:B.\u003eRUx(4uQvqPNw007gzm}D^sA=kCNwmPZ(B8}rY\u0026r8+(vpS5CvSC)$C%#%z006+mmSir:vrtjPB8$=5wKcp@ogq-NmnbG)e[w^m003^qqfuC\u003cC#e6)w]zZbvqYN^lVm9+By/E)g6f%SBvgg\u003eA+fcgp\u0026ZF:wPE", "ln": 496430 }, { "b": "x(^\u0026OCW\u003er7BzkVh008/$qGM.Kv]Nwox(4uKwNPaXASzpaqE%oEmRMWI005k-lU{WZwK{lEwnC/Sk(\u003cw@Abok#vru6KvqYQ(wDjB^m}D^fB-IIlzGFY}z!0v1A@+[llVM:DBy!o?z!0v1B5@twCl7cSx()f(z!0v1A@-\u0026RraQ8!x(mv3wL^z=v}x.5005e-m}D=", "ln": 497008 }, { "b": "A=2l5v}wbIwPq\u003c7zEW}(J@?*.BwlW:B.\u003eRUx(4uQvqPNS003Wmnm=jGl2pvQv/QrEnm=jGmSJ6K000/qm}D^wwO(x.vruf:004PMnP5l:x\u003c\u003e*(DsYD:x([60vqF\u003eNv@#B6zB5eJq/DC*lVm9+Bo7q5oMauIoLE%RvrcSZCVK\u003eBjow2:BvoLVwKZPUzddJ/001RNm}D^wx(dAJz/PY6BxnCxSSkz8ze-{7wM9X\u003ex(mM+007vFoHzJ.A8Q\u003e0x(mM+004GIm}D^oz!0i(wL3=Kz=V]sToh4nr://Uwk3]KvqGGPhuMDXBx9x[AZTFJvrDydoHzxt003*omq^l+q*ACawO\u003eaVv{%g+B5@tw[D8i(Bw)o(nmuyDy?iODxAyXnBvG$XwMi}]wDojvmR)i*xHVYLwKpJKw[u17002v\u003cs8@1%wKZxIwDiOHm}D^fz/fSmy?ly+Bz#wAlR):.6-{)pBvf$:B8L(ao(BMN0058-qE%oElVl\u003c-z!@#^003{tnm=jGqE@dgy\u0026r!-w=+FlBvG$XwM9q?wKQ?zp6BNcBvG$XwD", "ln": 497192 }, { "b": "rSU^5BvyB*Bvf$SwL^z=v}x.5003m9m}D^ix(4uDBAzLqvS=^7B47sP008A!lVM:DBy!o.AaG1H*5KGXwNPW(mRMWIr@:]Rm}D^wx(dA+z/fbTzF0*czddK2z/bKP4fPyFy\u0026\u003cwTD30Q%z=ZT-wKyctASv-%s7#hRlUG[GrbUGNy\u0026\u003cwTD30P$c\u0026(.Ey?mZ1mRMWIr@-Bco(Ch^mRMWImr?(l*5TYPBve\u003e@zF0!!JSzQ-zE=aJz/YE\u0026LMsl/zE=jJA=Vs(x(4uHCVK\u003eBR2:51zE=HNCYVz?y?lVFSSL?lr://Uwj7oCwL=/FwDo)Om}D^dlR):.V\u0026S:eBwCt1lR):.)/t{\u0026Bvf$-zddr)oLFxQk(*x", "ln": 497666 }, { "b": "y?iODliZIix()]Nz/fSmy?lVF00000000000000000000000000000000000B^Jde000000000000000000000000000000000000000000000000000000000000000000000000000gnrUTNjwmq00000000000000000000000000000000000000000000000000000", "ln": 498128 }, { "b": "00000000000000000000000000000000000000000000000000000000000001YbgScOWGap[IMW0z@Sp.iQb-cIT*A1A0HW0J2TH.6K^Z\u003cup^ZZ{FC:A[c(=\u003e3fS^0C#$5d[)x^0C#$p.rWc/N0\u00266Kp.D)\u0026cLXePB?e7\u003eZ9Km\u00261k}?\u003eZ9KmaqaUO\u0026cL", "ln": 501712 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000625c8Xgaohy(7YTKoh#\u0026@e000000000000000000310rr91pYHGC000000000000000000310SSi2xAe3.000000000000000000312)pkdFb/MH0000000000000", "ln": 514512 }, { "b": "0rrAe0058X005V62MM%?0000000000007{\u003c2MPnN0000000000002a-gYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rrl51POJ52MK#c1POJ52MK\u00268000000000000000000000000000000005I\u003c00031qVH[tASx!NzuaqHmGvc5yYF2", "ln": 514678 }, { "b": "004lB00031fAr{ffAs9kfAr{fvGn7Z001XM3\u0026*qdlJz38z2!zMwDlPFBo3vZ004iyCk#*!e=YX/BPt?Ie=Y!\u0026ASx.L001XM2MK(9lJz38z2!IPve$fBC(QOtve$cAwDhYg002W)BPt?Ie=Y!\u0026ASx.L002%#761vnmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002W)BPt?Iaok7nve$fBx8)5Ove%{uwDi?Mqug?tzu7^Vq#*Rjz2!bE001LI1][V7mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001\u003eRe=WZde=W\u003ch0049vc\u0026:nFoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002v^zVB.RC(R\u003c+x-I=CxAibOaonwvaoja@irh5tgYP9cg5%0dg5%fiaok7nBPt?Ie=Y!\u0026ASx.Lec3^)pYKF}lJwXrqugzhzVzx\u0026002aY3ig8bpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE003*nBPt?Ih2]Dke=YzZyYFnK002g.4/=RgpYLIox-JqRve$xHwDk3%BPuaQyYE#C002s=BPuaQyYFLSaol0NzVB!TaokdpoAohnve{oc003s99@(rwpYLIozVBqFBPt[KBo25ove$cAwDhYg002W)BPt?Iaoi$[aokvvxAhPzaokjrASy1Tx8(@Lve$cAz2!nIzuaqHaok7nve$fBx8)5Ove%{uwDhYg001XM1][V7pYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001\u003eRe=WZde=W\u003ch002y!00031rSDLdASwMex-I@HwDkp4zuanGzVx+q001nA1onA4q#*}sve$fBA@Z1Rve$xHx-J5Kzu6Up000rdUMK}a002bCCX}mtC4CYnx(v(LcOWkccM(#rv@C)(zF5", "ln": 514846 }, { "b": "j}d\u0026warR^?B7F\u003c7A+PSvj}d\u0026warR^HauTWQADL\u0026lBy!#VA+PYhy?ml\u003cB3p3uarR^HarR^HjAt1MB.bSowN[kOwN/\u003e8x(v(.wP?T3az+RjwO:HSvrk1TC5IecAWI#Lx*DlswPI]QcUu!6B7DZwffP*LarR^HarS^1A+flkwPI%8wkEqXC4\u003e=7xjVcF4gjj2arS^1B7F\u003c7A+PSvj}d\u0026wauRr0A=(CBnP5cUj}d\u0026Yfjw{ywO\u003e))C%hVA0000000000000", "ln": 515737 }, { "b": "00000000000000000000000000000000000000000000000000000000000005aPSc\u0026:kE\u003e+vNv0hyWid5eF\u003eihn:lsFGo0xRPKw:G9W*/Si@h06*.*9033t^4G3:\u0026gPqb[sYMH0hfW(5to@mp[.0+v4?ncAg}JIFt4^)KFe5nPRnrTU+wO2Z[F\u0026y^4H", "ln": 516048 } ], "depth": 1, "facts": { "exp": [ [ "luaL_addgsub" ], [ "luaL_addlstring" ], [ "luaL_addstring" ], [ "luaL_addvalue" ], [ "luaL_argerror" ], [ "luaL_buffinit" ], [ "luaL_buffinitsize" ], [ "luaL_callmeta" ], [ "luaL_checkany" ], [ "luaL_checkinteger" ], [ "luaL_checklstring" ], [ "luaL_checknumber" ], [ "luaL_checkoption" ], [ "luaL_checkstack" ], [ "luaL_checktype" ], [ "luaL_checkudata" ], [ "luaL_checkversion_" ], [ "luaL_error" ], [ "luaL_execresult" ], [ "luaL_fileresult" ], [ "luaL_getmetafield" ], [ "luaL_getsubtable" ], [ "luaL_gsub" ], [ "luaL_len" ], [ "luaL_loadbufferx" ], [ "luaL_loadfilex" ], [ "luaL_loadstring" ], [ "luaL_newmetatable" ], [ "luaL_newstate" ], [ "luaL_openlibs" ], [ "luaL_optinteger" ], [ "luaL_optlstring" ], [ "luaL_optnumber" ], [ "luaL_prepbuffsize" ], [ "luaL_pushresult" ], [ "luaL_pushresultsize" ], [ "luaL_ref" ], [ "luaL_requiref" ], [ "luaL_setfuncs" ], [ "luaL_setmetatable" ], [ "luaL_testudata" ], [ "luaL_tolstring" ], [ "luaL_traceback" ], [ "luaL_typeerror" ], [ "luaL_unref" ], [ "luaL_where" ], [ "lua_absindex" ], [ "lua_arith" ], [ "lua_atpanic" ], [ "lua_callk" ], [ "lua_checkstack" ], [ "lua_close" ], [ "lua_closeslot" ], [ "lua_closethread" ], [ "lua_compare" ], [ "lua_concat" ], [ "lua_copy" ], [ "lua_createtable" ], [ "lua_dump" ], [ "lua_error" ], [ "lua_gc" ], [ "lua_getallocf" ], [ "lua_getfield" ], [ "lua_getglobal" ], [ "lua_gethook" ], [ "lua_gethookcount" ], [ "lua_gethookmask" ], [ "lua_geti" ], [ "lua_getinfo" ], [ "lua_getiuservalue" ], [ "lua_getlocal" ], [ "lua_getmetatable" ], [ "lua_getstack" ], [ "lua_gettable" ], [ "lua_gettop" ], [ "lua_getupvalue" ], [ "lua_iscfunction" ], [ "lua_isinteger" ], [ "lua_isnumber" ], [ "lua_isstring" ], [ "lua_isuserdata" ], [ "lua_isyieldable" ], [ "lua_len" ], [ "lua_load" ], [ "lua_newstate" ], [ "lua_newthread" ], [ "lua_newuserdatauv" ], [ "lua_next" ], [ "lua_pcallk" ], [ "lua_pushboolean" ], [ "lua_pushcclosure" ], [ "lua_pushfstring" ], [ "lua_pushinteger" ], [ "lua_pushlightuserdata" ], [ "lua_pushlstring" ], [ "lua_pushnil" ], [ "lua_pushnumber" ], [ "lua_pushstring" ], [ "lua_pushthread" ], [ "lua_pushvalue" ], [ "lua_pushvfstring" ], [ "lua_rawequal" ], [ "lua_rawget" ], [ "lua_rawgeti" ], [ "lua_rawgetp" ], [ "lua_rawlen" ], [ "lua_rawset" ], [ "lua_rawseti" ], [ "lua_rawsetp" ], [ "lua_resetthread" ], [ "lua_resume" ], [ "lua_rotate" ], [ "lua_setallocf" ], [ "lua_setcstacklimit" ], [ "lua_setfield" ], [ "lua_setglobal" ], [ "lua_sethook" ], [ "lua_seti" ], [ "lua_setiuservalue" ], [ "lua_setlocal" ], [ "lua_setmetatable" ], [ "lua_settable" ], [ "lua_settop" ], [ "lua_setupvalue" ], [ "lua_setwarnf" ], [ "lua_status" ], [ "lua_stringtonumber" ], [ "lua_toboolean" ], [ "lua_tocfunction" ], [ "lua_toclose" ], [ "lua_tointegerx" ], [ "lua_tolstring" ], [ "lua_tonumberx" ], [ "lua_topointer" ], [ "lua_tothread" ], [ "lua_touserdata" ], [ "lua_type" ], [ "lua_typename" ], [ "lua_upvalueid" ], [ "lua_upvaluejoin" ], [ "lua_version" ], [ "lua_warning" ], [ "lua_xmove" ], [ "lua_yieldk" ], [ "luaopen_base" ], [ "luaopen_coroutine" ], [ "luaopen_debug" ], [ "luaopen_io" ], [ "luaopen_math" ], [ "luaopen_os" ], [ "luaopen_package" ], [ "luaopen_string" ], [ "luaopen_table" ], [ "luaopen_utf8" ] ], "imp": [ [ "kernel32", "GetLastError" ], [ "kernel32", "FreeLibrary" ], [ "kernel32", "GetModuleFileNameA" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "LoadLibraryExA" ], [ "kernel32", "FormatMessageA" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "GetStartupInfoW" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "RtlUnwindEx" ], [ "kernel32", "InterlockedFlushSList" ], [ "kernel32", "VerSetConditionMask" ], [ "kernel32", "VerifyVersionInfoW" ], [ "kernel32", "RtlUnwind" ], [ "kernel32", "SetLastError" ], [ "kernel32", "FlsAlloc" ], [ "kernel32", "FlsGetValue" ], [ "kernel32", "FlsSetValue" ], [ "kernel32", "FlsFree" ], [ "kernel32", "EnterCriticalSection" ], [ "kernel32", "LeaveCriticalSection" ], [ "kernel32", "InitializeCriticalSectionEx" ], [ "kernel32", "DeleteCriticalSection" ], [ "kernel32", "RtlLookupFunctionEntry" ], [ "kernel32", "EncodePointer" ], [ "kernel32", "RaiseException" ], [ "kernel32", "RtlPcToFileHeader" ], [ "kernel32", "ReadFile" ], [ "kernel32", "CloseHandle" ], [ "kernel32", "DuplicateHandle" ], [ "kernel32", "GetCurrentProcess" ], [ "kernel32", "CreateProcessW" ], [ "kernel32", "ExitProcess" ], [ "kernel32", "TerminateProcess" ], [ "kernel32", "GetModuleHandleExW" ], [ "kernel32", "QueryPerformanceFrequency" ], [ "kernel32", "GetModuleFileNameW" ], [ "kernel32", "HeapAlloc" ], [ "kernel32", "HeapFree" ], [ "kernel32", "GetTempPathW" ], [ "kernel32", "InitializeCriticalSectionAndSpinCount" ], [ "kernel32", "LoadLibraryExW" ], [ "kernel32", "GetDateFormatW" ], [ "kernel32", "GetTimeFormatW" ], [ "kernel32", "CompareStringW" ], [ "kernel32", "LCMapStringW" ], [ "kernel32", "GetLocaleInfoW" ], [ "kernel32", "IsValidLocale" ], [ "kernel32", "GetUserDefaultLCID" ], [ "kernel32", "EnumSystemLocalesW" ], [ "kernel32", "GetStdHandle" ], [ "kernel32", "GetFileType" ], [ "kernel32", "FlushFileBuffers" ], [ "kernel32", "WriteFile" ], [ "kernel32", "GetConsoleOutputCP" ], [ "kernel32", "GetConsoleMode" ], [ "kernel32", "ReadConsoleW" ], [ "kernel32", "HeapReAlloc" ], [ "kernel32", "GetFileSizeEx" ], [ "kernel32", "SetFilePointerEx" ], [ "kernel32", "WaitForSingleObject" ], [ "kernel32", "GetExitCodeProcess" ], [ "kernel32", "GetFileAttributesExW" ], [ "kernel32", "CreatePipe" ], [ "kernel32", "CreateFileW" ], [ "kernel32", "GetTimeZoneInformation" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "DeleteFileW" ], [ "kernel32", "MoveFileExW" ], [ "kernel32", "GetCPInfo" ], [ "kernel32", "FindClose" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "FindNextFileW" ], [ "kernel32", "IsValidCodePage" ], [ "kernel32", "GetACP" ], [ "kernel32", "GetOEMCP" ], [ "kernel32", "GetCommandLineA" ], [ "kernel32", "GetCommandLineW" ], [ "kernel32", "GetEnvironmentStringsW" ], [ "kernel32", "FreeEnvironmentStringsW" ], [ "kernel32", "SetEnvironmentVariableW" ], [ "kernel32", "GetProcessHeap" ], [ "kernel32", "SetStdHandle" ], [ "kernel32", "GetStringTypeW" ], [ "kernel32", "HeapSize" ], [ "kernel32", "SetEndOfFile" ], [ "kernel32", "WriteConsoleW" ] ], "sec": [ [ ".text", 1024, 398848, 6.48, "r-x" ], [ ".rdata", 399872, 98304, 5.6, "r--" ], [ ".data", 498176, 3584, 1.85, "rw-" ], [ ".pdata", 501760, 12800, 5.59, "r--" ], [ ".rsrc", 514560, 1536, 3.86, "r--" ], [ ".reloc", 516096, 3072, 5.35, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 0, "timestamp": 1768792541, "image_size": 536576, "has_manifest": 1, "headers_size": 1024, "checksum_valid": 0, "file_alignment": 512, "resource_count": 2, "export_timestamp": 4294967295, "has_version_info": 1, "checksum_stripped": 1, "computed_checksum": 559913, "headers_size_ratio": 0, "prose_section_count": 0, "reloc_overhang_bytes": 48, "reloc_overhang_ratio": 0.02, "bss_like_section_count": 0, "section_overflow_count": 0, "misaligned_section_count": 0, "version.identity_entropy": 3.76, "base_relocation_block_count": 15, "base_relocation_entry_count": 1445, "declared_data_directory_count": 8, "version.identity_symbol_ratio": 0.03, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 519168, "entropy": 6.45 }, "binary": { "is_pie": 1, "code_entropy": 6.48, "data_entropy": 1.85, "string_count": 1101, "entropy_variance": 2.33, "avg_string_length": 15.59, "max_string_length": 128, "peak_region_bytes": 7168, "code_to_data_ratio": 0.99, "peak_region_entropy": 7.71, "string_length_stddev": 12.01, "largest_section_ratio": 0.77, "sentence_string_count": 253, "sentence_string_ratio": 0.23, "high_entropy_string_count": 4 }, "exports": { "count": 154 }, "imports": { "count": 92 }, "sections": { "count": 6, "code_size": 398848, "entropy_max": 6.48, "entropy_mean": 4.79, "name_entropy": 3.24, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "dependencies": { "count": 1 } } }, "id": 14, "ident": { "name": { "value": "lua54.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "Lua Language Run Time", "source": "pe.version.description", "verified": false }, "trust": "unsigned", "project": { "value": "Lua - The Programming Language", "source": "pe.version.product_name", "verified": false }, "version": { "value": "5.4.8", "source": "pe.version.file_version", "verified": false }, "organization": { "value": "Lua.org", "source": "pe.version.company", "verified": false } }, "mol": "K(Li)O₂(C₂Er)H₄(F₃Os₂Po₃Ti)Md₃(Bi₆PaSi)", "path": "win-arm64-based-readytorun.zip!!net8.0/lua54.dll", "pid": 0, "risk": 19, "sha": "c21a8ee06181f33fca889bdaaa04a2eccde8722325a935d2075f00b605ee77a2", "size": 519168, "traits": [ { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 398848 ] ] }, { "id": "metadata/binary/framework::mscoree-name", "conf": 0.95, "crit": 3, "desc": "References the .NET mscoree loader name", "spans": [ [ 430120, 11 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/linking/api-set::api-set-core-cluster", "conf": 0.9, "crit": 3, "desc": "Dense api-ms-win-core string cluster", "spans": [ [ 430944, 31 ], [ 431008, 27 ], [ 431064, 27 ], [ 431120, 35 ], [ 431200, 44 ], [ 431296, 37 ], [ 431376, 29 ], [ 431440, 28 ] ] }, { "id": "metadata/binary/resource/identity::pe-resource-count-two", "conf": 1.0, "crit": 2, "desc": "PE has exactly two resource entries" }, { "id": "metadata/binary/resource/identity::pe-resource-version-first", "conf": 1.0, "crit": 2, "desc": "PE first resource is RT_VERSION" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/resource/manifest::pe-resource-manifest-second", "conf": 1.0, "crit": 2, "desc": "PE second resource is RT_MANIFEST" }, { "id": "metadata/binary/symbols/count::many-exports-20", "conf": 1.0, "crit": 2, "desc": "Binary has 20+ exports" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 413312, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 403901, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 403913, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 407184, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 407430, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-company-name-populated", "conf": 0.85, "crit": 1, "desc": "PE version company name populated", "spans": [ [ 514952, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 514926, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 514974, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 515058, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 515438, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 515084, 5 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 515368, 30 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 514726, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 515084, 5 ] ] }, { "id": "micro-behaviors/communications/ipc/pipe::create-pipe", "atk": "T1559", "conf": 0.9, "crit": 2, "desc": "Create anonymous pipe", "spans": [ [ 497714, 0 ] ] }, { "id": "micro-behaviors/communications/ipc/pipe::duplicate-handle", "conf": 0.8, "crit": 2, "desc": "Duplicate object handle", "spans": [ [ 405768, 0 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::deletefile-w", "conf": 0.66, "crit": 3, "desc": "DeleteFileW API symbol", "spans": [ [ 406080, 11 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "spans": [ [ 497852, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 406112, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "spans": [ [ 406120, 0 ] ] }, { "id": "micro-behaviors/fs/file/handle::set-file-pointer-ex", "conf": 0.9, "crit": 2, "desc": "Set file position extended", "spans": [ [ 406008, 0 ] ] }, { "id": "micro-behaviors/fs/file/handle::set-std-handle", "conf": 0.9, "crit": 2, "desc": "Set standard I/O handle", "spans": [ [ 406200, 0 ] ] }, { "id": "micro-behaviors/fs/file/move::move-file-ex", "conf": 0.9, "crit": 2, "desc": "Move or rename file with options", "spans": [ [ 406088, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "spans": [ [ 406048, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::read-file", "conf": 0.9, "crit": 2, "desc": "Read data from file handle", "spans": [ [ 405752, 0 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 405584, 0 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::interlocked-flush-slist", "conf": 0.9, "crit": 2, "desc": "Atomically flush thread-safe list", "spans": [ [ 405616, 0 ] ] }, { "id": "micro-behaviors/os/api-resolution/manual::api-ms-string-reference", "conf": 0.9, "crit": 3, "desc": "Reference to api-ms- Windows API string", "spans": [ [ 430944, 31 ], [ 431008, 27 ], [ 431064, 27 ], [ 431120, 35 ], [ 431200, 44 ], [ 431296, 37 ], [ 431376, 29 ], [ 431440, 28 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 405504, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-ansi", "conf": 0.7, "crit": 2, "desc": "Get module file path (ANSI)", "spans": [ [ 405520, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-filename-dup", "conf": 0.7, "crit": 2, "desc": "Get module file path (Unicode)", "spans": [ [ 405824, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-ex", "conf": 0.82, "crit": 3, "desc": "Get extended module handle", "spans": [ [ 405808, 18 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 405600, 16 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::enum-system-locales", "atk": "T1082", "conf": 0.84, "crit": 2, "desc": "Enumerate installed system locales", "spans": [ [ 432312, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::enum-system-locales-import", "conf": 0.84, "crit": 2, "desc": "Enumerate installed locales", "spans": [ [ 405928, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-locale-info", "atk": "T1082", "conf": 0.88, "crit": 2, "desc": "Query locale information", "spans": [ [ 497400, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-locale-info-import", "conf": 0.86, "crit": 2, "desc": "Query locale information", "spans": [ [ 405904, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/locale::get-user-default-lcid", "atk": "T1082", "conf": 0.85, "crit": 2, "desc": "Query user locale identifier", "spans": [ [ 405920, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "spans": [ [ 497056, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::create-process-w", "atk": "T1106", "conf": 0.95, "crit": 3, "desc": "CreateProcessW API symbol", "spans": [ [ 405784, 14 ] ] }, { "id": "micro-behaviors/process/info/commandline::get-command-line", "conf": 0.82, "crit": 2, "desc": "Query current process command line", "spans": [ [ 406152, 0 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 405568, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/lua::lua-bytecode-magic", "conf": 0.96, "crit": 3, "desc": "Embedded Lua bytecode magic", "spans": [ [ 407732, 11 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-alloc", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage allocation", "spans": [ [ 405656, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-get-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage retrieval", "spans": [ [ 405664, 0 ] ] }, { "id": "micro-behaviors/process/tls/fiber::fls-set-value", "conf": 0.9, "crit": 2, "desc": "Fiber-local storage assignment", "spans": [ [ 405672, 0 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 405576, 0 ] ] }, { "id": "micro-behaviors/time/query::get-timezone-information", "conf": 0.9, "crit": 3, "desc": "Query timezone configuration", "spans": [ [ 406056, 22 ] ] }, { "id": "objectives/command-and-control/dropper/execution/loader::lua-cpath-env", "atk": "T1027.013", "conf": 0.9, "crit": 3, "desc": "LUA_CPATH runtime env name", "spans": [ [ 411688, 9 ] ] }, { "id": "objectives/command-and-control/dropper/execution/loader::lua-noenv-env", "atk": "T1027.013", "conf": 0.9, "crit": 3, "desc": "LUA_NOENV runtime env name", "spans": [ [ 411200, 9 ] ] }, { "id": "objectives/command-and-control/dropper/staging/resource::get-temp-path-w-import", "conf": 1.0, "crit": 3, "desc": "GetTempPathW import", "spans": [ [ 405848, 12 ] ] }, { "id": "objectives/command-and-control/dropper/staging/resource::move-file-ex-w-import", "conf": 1.0, "crit": 3, "desc": "MoveFileExW import", "spans": [ [ 406088, 11 ] ] }, { "id": "well-known/lib/runtime/scripted/luajit::luajit-runtime-env-pair", "conf": 0.9, "crit": 3, "desc": "LuaJIT runtime environment variable pair", "spans": [ [ 411200, 9 ], [ 411688, 9 ] ] }, { "id": "metadata/binary/layout/checksum::pe-checksum-zeroed", "conf": 0.9, "crit": 3, "desc": "PE checksum is zeroed" }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99" }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 515342, 11 ] ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "micro-behaviors/dylib/load/runtime::load-library-ex-a", "atk": "T1574.002", "conf": 0.95, "crit": 2, "desc": "Extended dynamic library loading (ANSI)", "spans": [ [ 405536, 0 ] ] }, { "id": "micro-behaviors/fs/temp/directory::get-temp-path-name", "conf": 0.66, "crit": 2, "desc": "GetTempPath named without a call site", "spans": [ [ 432368, 0 ] ] }, { "id": "micro-behaviors/process/create/exec::cmd-exe-reference", "conf": 0.8, "crit": 3, "desc": "References Windows cmd.exe interpreter", "spans": [ [ 422480, 7 ] ] }, { "id": "objectives/evasion/process/injection/callback::enum-locale-callback", "atk": "T1106", "mbc": "E1106", "conf": 0.7, "crit": 3, "desc": "EnumSystemLocales callback API", "spans": [ [ 405928, 18 ] ] }, { "id": "metadata/binary/resource/manifest::pe-version-and-manifest-only", "conf": 0.88, "crit": 3, "desc": "PE ships only RT_VERSION + RT_MANIFEST resources", "uses": [ 4, 5, 7 ] }, { "id": "metadata/package/versioning/scheme::version-resource-metadata", "conf": 0.9, "crit": 2, "desc": "PE version resource metadata", "uses": [ 21, 22, 25 ], "spans": [ [ 515438, 0 ] ] }, { "id": "micro-behaviors/fs/file/rename::any-rename", "conf": 0.9, "crit": 3, "desc": "Rename or move file on Windows", "uses": [ 35 ], "spans": [ [ 406088, 11 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::slist-operations", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Interlocked SList operations", "uses": [ 39 ], "spans": [ [ 405616, 0 ] ] }, { "id": "micro-behaviors/fs/temp/directory::temp-file-staging-primitives", "conf": 0.8, "crit": 3, "desc": "Temp directory staging primitives", "uses": [ 35, 71 ], "spans": [ [ 406088, 11 ], [ 432368, 13 ], [ 497256, 12 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 52 ], "spans": [ [ 405784, 14 ] ] }, { "id": "objectives/discovery/system/locale::windows-locale-fingerprint", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 2, "desc": "Imports APIs that query multiple Windows locale settings", "uses": [ 46, 48, 50 ], "spans": [ [ 405920, 0 ], [ 497400, 0 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000009614J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000cjE)TvR@5XvR@5XvR@5Xyzw{FxL\u003cX+(/Ll:vqR@W(/Lo+yhG[^(/Lr=CX%x@(/F", "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000kVHva)0]6o07-8=bTs[M\u003c?KMH1T+e\u003e0j-7g002PGZ+:yHa3Y*r4\u003ccD800000nqN)GIbjEGJx/:1GxSzV))@wV4\u003ca4p4\u003ccD8000004\u003e6\u003cTnq\u003ep{c}$*P%g}mx\u002608/g6Ay:Zq#^g\u003c4?Rhf5dZfTfHuoZoAlh44?RhffI3=\u003c00961A(HU3-dd*/0a0H^+/[qP+/[qP+/[qPIW:dG1PSa8IV+td0002ggYNHQnq^R(nr164ecC%[1oOS6%nRuB@SreA+/[qPX=z^h0pQJn6@a\u003em0e?pj/-.v!nq^P%so5s3law(O002MF1JS(=6AD4{+/[qPnq3m*nxjazaoqDx07-2obP#OE55wpapYTb6\u003ePz$7BQH-)-5Hr/c6Ha/07.:Xik-$:+/[qP+/[qP+/[qPnq3m*:3.f}0rr91IbU-Cnq/\u003eYaN?]j.2:OKjj59Tnq1\u0026unDf#ogxWXGGtY:!+/[qP+/[qP+/[qP+/[qPnq3m*nxjazaoqDx07-2obP#OE55wpapYTb6\u003ePz$7BQH-)-5Hr/b[\u00266q07.:Xik-$:+/[qP+/[qP+/[qPnqQN%7!xH9bP{eVGx$pI}BDK$gXKv1gJ:UFkMy=:XSw#P0ri!\u0026g6vOFI33q5Z\u0026SNEI7?tQlKnVE5=UibGw(q/I+sEA1is2\u003e6nYu/F+:*W004gc:3.f}0rr91m2sO.bUi?YbP#OE55wtEZ^Ho9BQpP%+kSicg6vOFI8dXVA%R8(nq*Z#p!lH^bV)P\u0026-4UMonq*Z#p!uTi", "ln": 976 }, { "b": "002Mx-5LVU+/[qP+/[qP+/[p4Gx$2IcSHcD(JK=#0SSi\u003eGtYgQ+/[qP+/[qP+/[p4IcIqis4E#gfI4b$4{cKS5KW(!-Zz6{07.@ubQ=iwnF1BJ8aV?(2Y?y8a3Y/%I]e7o0z5gMZ^%B[.aoi{ioTI0002N\u0026.:]XY5j!(=2Y!-26]\u003cZC0fx1\u003ei9#}Z4[kwDH1*X)nq^Na^NYqtnq^GF6?fUQ07-3%nr1854fV:}R$*q(KvUpmbTs[M-4UMo+/[qP+/*", "ln": 3773 }, { "b": "c\u003ew\u003edoaVmGnq^^B:3.gb00000mkJ5xr3S\u003eTXb#Zh0j\u0026dg0kKBVbQ0a4ig{uNnqNBtH5VlCk.e?nAU-^y@$O.g0%0#G0UpNjH.1RxgqJj5@$O1@0@$G[0000fL!-7Wnq^\u003cDGzCK\u00263Jy?)PAtg#1NxeQXF$OH08ewubTw{L000306{Co)0enjheb{s\u003cPAtf+IWI!V1w1gv%8YK^70\u0026GO07+cj%nSc0G$}*A@$TW*0%4S{I:O*QkR\u0026vgI9?M*lOFJ", "ln": 37784 }, { "b": "c\u003ew\u003edoaVmGnq^^B:3.gb00000mkJ5xr3S\u003eTXb#Zh0j\u0026dg0kKBVbQ0a4)2?CJnqNBtH5VlAk.e?nAUJTu@$M3c0%0#G0UpNjH.1Rv(WnZE@e}cZj*$y\u003e01UsfHZcFe3Rk{C%8!XG72$CV0i=Q(AZvkQ0000)Jyk3SX!1\u0026w0ri^9Llg/sZ\u0026.pf6#b[l07-1Qnq3:rBqK@(H(}\u0026unxg\u0026j%nSaMZ\u0026Y\u003eY6}ZS\u003e0ldwW0K8Z)dVlXukUc-02/Yj=0z4[", "ln": 41188 }, { "b": "@$TsG0@%T.0rraL{=@{^w@]-v{i]1)IV#ZZnczD==I[TRI#%5JI$/\u002634Og831v@Tu@$U3Z0@@\u003eu=}68v@$T4y0%0#G%8.)B%ix@Enq^Wyv[l.[1j3]Y.I!M%nq\u003eL-I]nhB!=cw@JroeLjh=n9o[\u0026p\u0026lp^1snmLf[ncvfq6}70.07-4ynq^%Gv[u!]1j3]YJ/j5u54o?QI{IzrA/ye3GztE*1XF:t(+Zmp0001QtQjnVIV#ZZnczD==ni]G6/y%M0fDHRnq?Nnv2FnnA7(gqbP]To21Sk{1v@TumkI-q!bHd8I#%6w\u003e*\u0026Pk0eedg3q3f4@$NUP0%1AOIW8^.nczG^=\u0026jZ/I#%5JI]XCyZ\u0026Q5SIVuqakOi@gWVgB\u0026Kn", "ln": 43470 }, { "b": "{=]vySq([#w!b$K002-E{78?B0000\u0026IV#ZZnczD==I[SmIur\u0026HI$/\u002634Og831v@Tu@$P{s0@@\u003eu=}68v@$O}10%0#G%8?UW1onA4IcIrJo[\u0026p.j4LnlnmLf[ncvfq6?9#Z07-4ynq^%Gv[u!]1j3]Yi/j1t54o?QI{Izr9/ya2GztE?q?Jl@IcIrJnq^Wyv[l.[1i@ZJ@$T:P0%1CGo?Cxg(0st?%454LnmLf[ncvfq743?W07-3?o]D}YI}d?x\u003e86lvnJT\u003c3GNr+0%gnyl008t?n=N92z2:Lnnq?Nnv2FnnCUB3ybP]To21Sk{1v@TumkI-q!bHeDI30:t\u003eL", "ln": 44098 }, { "b": "zB/YhnJVA-7z0$Qw\u003cFI#B6Im*.2?RA1rW.pjihNegS-gw*JjqzW//Gsk%98c7jZ=naolG]nDlH%jiI^fnxnND%nS9)I)K--0rr9\u003cI[}@xJ3GID002LC+\u0026(C00SU=x-5E+$0af5rtF\u003cc]3%#L-/gw71Bq+X03p{8{w!b$K003Q)2Y}mYGtmKWjhu1fnq\u003etQ:hd/Q%nLRu:4jRwnJUr\u003c4[jO9NN\u00267F0.CG3(+U[!q=V%=rZx!TF:uFt002MHy:qnpGxq2ZIV@Rw", "ln": 73594 }, { "b": "0071qz^tR4I+KgqGxjgJJryX4jnr[@4\u003ca4p-OCSi\u00267eHv\u0026kLVD.g/WDis^h%0a]?P4\u003ccD800000]aeKQX/Q[L04VDP+18S^-Qia3-nVgY+mxo90002g0rr91!8Ag2B\u003efbC{\u0026S\u0026oH3=\u003eOCxvuk.g3q6-R\u003c)MaJsrh.g/Xz{\u0026**PnSg\u003c80rr91!8HzIbHyJ@-R%^Qv8-a-t%J1l4\u003ccD800000]aeKKXGp!K04VdeP(6lb3b\u003e?K7T2Bg1pofrXb=Nf0mH", "ln": 80852 }, { "b": "+/[qP+/[qP+/?jxnq\u003es4+/[qP+/[qP+/\u0026RmtQfOCIf70Os4E#gavg}rnq)sgGua9+I$c/ZO(+%)GURZ!@$S:V004VDs9l2YI]e8z/gp?B@$Q5^004X/BRWJatQh0]I/Zj7nq1\u00266uR7hyO(U)(gR=LttQh0]I/Zj7nq1\u00266u=gai+/\u0026Ro0Mid9+/[qP+/[qP+/\u0026RmtQgd/nq3npnq^T\u0026hVS[HgSh?vl)L(9I}Q\u003c..NZuW002r}7YTKonq)rz6#:kO0enjg1t^\u003cVmGj8Yr@-kM{+D{{GznI\u003chaSZabP]To=\u0026j.!so5tPZ\u0026QPPl)K(=I35V7bUT4Z2-z7@p(dKFgR=LrlLeL/@$Urf002MFoE9.hgTb5IeDt=wI\u003c#5y0000\u0026Gt.e8.{3uG+/\u0026sJnq3n9nq^V2hur!GgSh?vl)Lq]I}Q\u003c:l)J)h^M$z(00030", "ln": 252966 }, { "b": "Y5%=Ga4R4x[5CQ?2ls/a0000\u0026I3rwN0rydz^GY^M1][S654Z{y4$=zl001*%4/$3F.qVOd3^.C3r3TddY5$4zGy5Ts07-2obRQFFjo=sI?t^JQIV]EM0rv+[2/^a72ls/b0001Q1+^fZ073s{aARgE:rnIbzu*gx1POJ5I3mY20rtAp\u0026q-\u0026W=}65#AT8QB", "ln": 265262 }, { "b": "0000000000000000000000000000000000000000000000000000000000000rif4000004/VUi000009@=uy00000eDk?M00000kk$-=00000o-Cj}00000sPnH700000wD8=j00000BPhEz00000J@GjZ00000S@Ah400000Zw!ro00000?2vGS000", "ln": 274896 }, { "b": "001b?1onA!c\u003cfIIA3$??0kHY1007}t1onA40000000000000000000000000fFCgnfFUsrfF\u003eEvfG7QzfGp:Df!+spf!$Etf/gQxf/y:Bf/Q)Fgb7ErgbpQvgbH:zgbZ)Dgb}3HgCyQtgCQ:xgC*)BgD43FgDmfJg+Z:vg+{)zg=d3Dg=vfHg=NrLh83)xh8m3Bh8EfFh8WrJh8)DNhzv3zhzNfDhz^rHhA0DLhAiPPh.WfBh.)rFh-9DJh-rPNh-J-Ri4$", "ln": 277104 }, { "b": "irg(oirg]pirg@qirg#rirh2sirh5tU.Aph0rr91Aae/$0rr91PQ(dl0rr91rC(O\u0026z*c7wwQ4Y@Acb/jzu6Up000002-5Rl0rr91=%V{80rr91PQ(dl0rr91d2d}Q0rr91ayUt30rr91PQ(dl0rr91vQS^\u0026vrcx%C{40oCoyZkzFa6800000B98CpzF78lz/l+mz/fg/fA", "ln": 277736 }, { "b": "x(v(Iash7ec37hJxMvWdayPdgB-7(3zE^M{wgO\u003cvz/ddFByVHYd\u003eq-NCW\u003er7BzkVhe=U\u003eKpgnlUC4B6MC4\u003eC$uQF\u003cBvru6Zx([2PvpK7:zE+^JcUv7ewHwQeA+xJiwO#Pjx(+zmB.\u003e\u003eD00000000000000000000pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Zx([2PvpK7:zE+^JB-7#jz*c7wz/M$yzEEY%x(4i!y?j.#vpK7:zE:(7wfrgee=U\u003eKpgnlUC4B6MC4\u003eC$uQOEDBAhqB00000pgnlUC4B6MC4\u003eC$uS7DRwPN[L00000pgnlUC4B6MC4\u003eC$uVP^*Bz(hbB7]@i0000000000pgnlUC4B6MC4\u003eC$uQ[WHq!oPUwO#P*x)Ks\u003c00000pgnlUC4B6MC4\u003eC$uS7Dzwi\u003eoZzESUDpgnlUC4B6MC4\u003eC$uSRnZBy^:VD2v9(pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Gx(VlScUc!ix\u003e7Z4ayPq6B.$YcBrCpsaz#sry+tX/00000pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Gx(VlScUc}icM(\u0026rxlw65zGE1nB0bvyy?$Z7pgnlUC4B6MC4\u003eC$uQF\u003cBvru6Gx(TgNpgnlUC4B6MC4\u003eC$uSq5\u003elVl*Xy?mZ10000000000pgnlUC4B6MC4\u003eC$uSq5\u003elVl*Xy?mZ1o\u003e!GR00000pgnlUC4B6MC4\u003eC$uQ[WHmRMWIq!ZL?0000000000pgnlUC4B6MC4\u003eC$uR$@SB.aD[zu6UppgnlUC4B6MC4\u003eC$uR$@SB.aD[zBOL+0000000000pgnlUC4B6MC4\u003eC$uSQVKwKyxMAbo9cx(v(\u003cz/PS8ASu7t00000pgnlUC4B6MC4\u003eC$uRU-XnPc$mzGGDmBAmAZ00000pgnlUC4B6MC4\u003eC$uS7DLz*2X\u003cwOk\u003c\u003ezGC\u003cU00000iSICCo-NiOve$cAiSI$Ro-NiOz#:.P0000000000{(bAb0rr91aytb00rr91fMWqB0rr91KEl900rr910g:au0rr91\u0026bF:E0rr91[o$v/0r", "ln": 278464 }, { "b": "pgnlUC4z!bwP?=$wGUz$y\u0026r/(BzkVhaAz4nB-Iwhwft=jy?$Z7e=U\u003eK00000lVM:DBy^\u003cOAYLs-wO(vewNw\u003eZy:ZUSB0\u0026yVw)]y\u0026wN)?Ac37WYlUH4vyANe4A+e:5z/QaCAaK6bx(!ufz/fRG000000000000000lVM:DBy^\u003cOAYLsMA+eW3wNw$ZA+e:5z/PM6B0@yZB0\u0026yVw)]y\u0026wN)?Ac37WYlUH4vyANO8A+fcgaAg+hxDRn9A=2JiB7]MgB0a[ewftz%B88[tAa9l/e=U\u003eKC-z]S0rr910ak!S0rr91Z?A!00rr910000000000qE%uRC4CYtaz\u003e?lzddJ@xGvnECXIkvx(mMaB7G03wO#Pjw[=6)aswERcM)bAasg\u0026uBS+dsBy/IovS==nv@Dl%x\u003eINewN({8wOk\u003c\u003ezGGlbx)Ktkx(+yyy\u00261kpvTi6bB1OOmxK@q%vrt{2z/cXdx(!5jCvtLnCxdztBy/tjCwhejayMyevrc0(AV/BmxkIi$BrCTsDsYeXz/xo9x(mMaCwhejaARpdaAIydy\u00260W6aA8deaA}:Dy?aU#z/P(vAc9jAxK@r5z!yWBmql\u003cSwPw]7wO+}1wGV8dwGUMe", "ln": 279584 }, { "b": "0eHQP04v)F0000004x3YqBKI:oJizu09r(LgCQuU0000007ggjzF%RtB7GCoBzbYavpTs}z!{LrxMvV)wft-6zFr%gz6i}satA\u0026@0000007ggjzF%Rtv@=c?By=OpxMvV)wn(E9y-)k7wNPF0A3e!lz/{1007Hyhy?mc1Bz\u0026pyv}YB:B.\u003eRiCw?IqiV[z503}", "ln": 280475 }, { "b": "zVBnEve$9zwDhYg00000tMw1ekla{*m/Vi.pxiYYk(:NUqufF)pxjt]00000yxd]CASx$SwDlJDgxofge=YzZyYFnK0000000000m}D^wwO(x.vrufrr@-j25deL\u003c0rr91PBI9P0rr91Z)b4M0rr91Z.N660rr910000000000vQS^\u0026vqG:#v{%E[z/bKP0000000000kMH\u0026+000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 292064 }, { "b": "PYMsR(MDld5deKuA0#ZDUOEuwKp.D)u[8oVu\u0026Qfb5iH6}UMaU6qD2$Z}xAth4dMwOS+U0-t^pUv0rr91l][NYtXvF=zE)]{xjk*#wPRf[x\u003c#c*B98tvvp%dRrc8F\u003ez/PMlwN5.PtW??\u0026y?c^GwO+{^B7FP]vrujbwNw$VC4\u003eC$e]Uug0000000000cia2Ccia2C1onA4cia2C0000001Ybg00961e{7VHBr\u003eyh0000001/hhZ.)mPe{7VHBr\u003eZv00000Z:YD!kMy=:e{7VHBr\u003eZvbRQ[L04OfLZ.3LDe{7VHBr(8hZ=R-1qVD^$e{7VHBr(cx0000006*U!", "ln": 297140 }, { "b": "1vr7*0sw#g3pj%^1AjDt0X:POa:Ty[D/Lqfb/y8\u003e1.m#v5s0j}rH0K:H[j.HaPIMz0aVDq5s0j}rH0K:H[j.HaPISB0k]oC0aVDq5s0j}rH0K:H[j.H0r@P922UIw0sn(e2#Q{", "ln": 299140 }, { "b": "aPIGxZ+C/?dLZ#7y{0)v0r@P922UHRaRB[T5{aAW1.m(su[IAVE\u003eyZ3PSOy$aPIGxu[IAVE\u003eyZ3PSOy$0sw#g3pj%P1AjDJ0-e\u003c%aQ4]E1VctZPDa1jclrc!^5)GKaPIGxPDa1", "ln": 303248 }, { "b": "0s]ki1#llR0sw@f3n-j)3x+QjaSQ:!9CtMQ732/71.n2w\u0026e!0u[Si!Ld8#C\u003caTmf\u003ebD7Ox4WWm%1:yaH[Si!L5%ij}g@/.0aQd#F28ArX5%ij}ylnL$p@-XsaPIGx5%ij}ylnL", "ln": 309536 }, { "b": "zW(\u003cHJlzz80sn(e2@hXx18[q}aRB$V67=Ih4A5LM1.m(s01/qkjRm+@:JK+!aPIGx01/qkjRm+@:JK+!0sw@f3n-1*3nI/[aQ[LO4DE-]1-%}Gu\u003eSRxMLfD30l\u003eSDaPIGxu\u003eSR", "ln": 310976 }, { "b": "c)O/[sLr(T0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@u5q*L\u0026D5qX7Jm[ymaPISB0cwOG0aVAp5q*L\u0026D5qX7Jm[ymaPIGx5q*L\u0026D5qX7Jm[ym0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@up-/YrXGp?L*$z(haPISB0cwOG0aVApp-/YrXGp?L*$z(haPIGxp-/YrXGp?L*$z(h0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@uAeK!#*LVdlezypcaPISB0cwOG0aVApAeK!#*LVdlezypcaPIGxAeK!#*LVdlezypc0t2Cn5l68s5hT^}5oniqaRaXQ4%efV1.m@up:b]uYcmmQEa[=7aPISB0cwOG0aVApp:b]uYcmmQEa[=7aPIGxp:b]uYcmmQEa[=70t#4v8ft@X5I%K?0:(0d0t$$", "ln": 314500 }, { "b": "-191K000000000000000?t/]-wNPW(mRMWIk(=chm}D^ix(4uVx)KtVCMsomlU{WZwK{lEwnC/Sk(\u003cw+C4\u003eC$nPc$mzGG]qyYDl(l$HgCBy^{Qy?k)jSruagvpR\u0026wy?iODu\u003coXMx()]Qx(4tXJrhQYBwca:Bvyj\u003cz/L*T(I%p)wNPW(nPc$mze:r5BzkVhp\u0026yw@008($m}D^tB.bYbwj7oLAbo9cx(v(/ByxolA@V:LlVM:DBy!A+A+eV\u0026AbPVh006haq!p5IxMvV)wn(E9y/C7*wNPazvr=H6B.}9UUMW%pBw#{]wNPa*z/oC\u003exMvV)wkc=Qx(e0f005!{lU{WZwMit-wNPa*z/oB(5DLmtwNPW(ra{q-vpTs}", "ln": 323824 }, { "b": "uVQsfwNPB+B.i)brx?:sxKL{*BAg/7BAoYnkY.3TkTmOQByWT4ryGhtsxF-bo\u0026C7Wp+:^Xe[w^m001[SuVpddwN/d+yYCWWuTE\u003e@wm6B\u0026A=2Jdvru5XaPL\u003eRB97@1wQ4Y@Acb/jzEl)(AcRA-a]\u003e$SB97@1wQ4Y@Acb/jzEl{=B98CvC(N\u003cBuQG6.ra{q\u003cCsu:^", "ln": 327618 }, { "b": "0024Ym}D^fB-IIlzGFoXA+e:5z/Qb8007HGlVM:DBy^\u003cOA+e:5z/Qb8005L\u003cmRM:JlU{WZwDnUfmRM:JmRM):BvG$XwMF\u003ciQx9?#zE=jJA=Vs(x(4uHCVK\u003eBV\u0026JTgzE=HNCYVz?y?lVFqVYE2Bvo?:yEStQwM9LRv}w8Nr@^gvm}D^ix(4uDBAzLqvS=^7B5@twz30jsBvG$XwKgAWA+P09By/IZCVK\u003eBASO:xBvG$XwL3=Kz/PY6BzkVhlu#agzE^M{004xFm}D^ix(mu}p*[DVpgn0Jli", "ln": 328904 }, { "b": "vrufTvqPNS003Hjq!p5ux(4uDBAzLqvS=^7B5@tww^8aABvG$XwL3=Kz/PY6BzkVhlu#agzE^M{003*sq!p5ux(4uWx(dzYdfA7KBw#**A8o$+xJCfl*YfYZwNPW(mRMWIg5@Q2l2{Kax(4uDAa%wVpe:Z:R2\u003cd#BwlW:B.\u003eRWvqYQ(wMF\u003ci?2Z8TBwN0@v)KToA+frk007yDlVM:DBy^\u003cOA+e:5z/Qa(CVK\u003eBZw{StAcT]!y?kv490w#OC4BcSy?l4Wr@?H=lVM:DBy!0KA+4\u003cTzFJqN4fn?pwNPW(q*Aj?z!%b$oLFxWr@:DFo)7n]", "ln": 329152 }, { "b": "0000000000000000000000000000000000000000000000000000000000005kijS0rr910@@r300000p!R1x0rr912lj-7000000rr910SSi2000o8000000000200000%nSc0%nSc0gnrUTNjwmq00000000000000000000000000000000000000000000000000000", "ln": 329680 }, { "b": "kY.3TkTkqHsC3:b0rr910000000000e\u003czT5uShk\u003eBy/q@wPz*fAZjX/wi-xWsC3:b0rr910000000000e\u003czT5w[=6)B9R?GwO\u003e^=A=M8skXs.DwPJcrBy/qOB97}TkMy=:sC3:b0rr910000000000e\u003czT5x(n95y?WA!vrc16zdNQbkY.3TkTkqH00000sC3:b0rr910000000000e\u003czT5y\u0026r%2v{-!/A=k$-B97}TkMy=:sC3:b0rr910000000000e\u003czT5wPz*fA:Jr+By/96A^o]\u003eBn", "ln": 330080 }, { "b": "0000000000sC3:b0rr910000000000e\u003czT5ko%0jBzk]fl$HKQv}wkGAbm^ura{q-vpShMz!@0-nmuyDy?mSLwO#W9A=k\u0026jwO#PPmNo%Lmn=xokTkqH000000000000000sC3:b0rr910000000000e\u003czT5l34r?v[yPaz/fVdCYVhnbU?=\u0026x)a5QwP?=$wK#", "ln": 330568 }, { "b": "00000000000000000000000000000000000000000000000000000000000001YbgLmNY]sE/M{01/hhg7:G^{).D!kOi$@A1J6I0g:k)FdR+YVjN6p2+q7#Z.3LDBRjVO5s\u0026}7Fd.?Znd$$6aE@Snp.J*eTRgWmfR5sDZ.lXF78c-Gk+e2Taqs!Qvh5", "ln": 332240 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000317YTKo7YTL^000000000000000000310SSi2fAq96000000000000000000312)pkdnb@R\u0026u[.=+Ee%rF00000000000000000000ju[7cy-)[jA=U@kzAPv4e=", "ln": 345040 }, { "b": "j}d\u0026warR^?B7F\u003c7A+PSvj}d\u0026warR^HauTWQADL\u0026lBy!#VA+PYhy?ml\u003cB3p3uarR^HarR^HjAt1MB.bSowN[kOwN/\u003e8x(v(.wP?T3az+RjwO:HSvrk1TC5IecAWI#Lx*DlswPI]QcUu!6B7DZwffP*LarR^HarS^1A+flkwPI%8wkEqXC4\u003e=7xjVcF4gjj2arS^1B7F\u003c7A+PSvj}d\u0026wauRr0A=(CBnP5cUj}d\u0026Yfjw{ywO\u003e))C%hVA000000000000000000000000000000000000000000000kM?7O0001(RkQk{RmrwqRo(6%Rtc\u003e!Rynq}Ru0U5S$qr=T2NdBT4oo/T5#AUTb%xHTdVI(TfwUmTh7^STi^{1TkH5FTn5Z}To+)sTqF2YTsge7Tt)pLTwD02TyebyTn", "ln": 345369 }, { "b": "4flFq1PQkTf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK[ci:ML1oPqVo\u003e!9Tz/Y\u0026eBrA}?wmV(Zx\u003eIr$zF77*lQq?IfFUEs9V2nvhzu%xhzEfGiw-J}7y-bUfF\u003eHwf/R3Jg=5q?BtjdS2)HGi1o]Ivrz$Q=fCaG\u003errJNv3rHUSxLzu%Bz(4K5hjN#162Ee69?ADwnMm5whbbV90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrg^90MHB1oPq", "ln": 346304 }, { "b": "y+FH%v@=Hez!s8qgb87lwmW5xfJhW#zFs03b@deJlQr1NfFUsqg+JoUy+PYg2Rc8W1Qbbi0r=*+uOC:\u00262Rc8W1Qbb+0!%M=BAzE.fe4J[Cp)-Dv@=Hez!s8zv@DiqAbffaAc0WxwPz)lfhld\u003cA=l2qw]]sOfHG+?wHf8=q!Y(Zx(mMfgb8J(k{Xougb7Eue[n{zfBOc/ruh.N0SJo7fAr^o1{(=lnqu\u003cF0rAMi00v/O0rt.^WHOuX6c3C)8lA!yUB!byLE9mLN8RtKoQcqyQWm)S\u003c$lFf{5770%fJyXvf+w/+yI#Y/$aER(B)H5OQ#9oWseyY[Z!1*qMakIN+BR4uW10[b!Oa$]YNv}\u003eK(%-JsJ)D@D{WWcV]a2M49z)2O{[nM/EYB^z2u\u003cVQS7eOI]ptgO=Os!\u0026ZeJ?7!bDQ?97:aqynuL5s{]kPeEHslJUoTtockRUPzv^#0#v[)T]3/\u003et\u003e8\u003e6-5RalNSRqc:XK+BEml=eL/bI5}UNH]NfWG6mdP/TTsP.iD/\u0026b?$9Y[mFUpJ6K}\u003cK+nc-rv*T.Ce%EmoX!?n%jNu2q9aCP17\u003ep*?ena7:*VR5eE}j\u003cNYhdS3vMW?6\u003eL$Fo1js}uKy)K2cuMK)cNrN-4{Yh()Ua6{1zI=?pwJK*Vfi)9u0Kn!%L]EVuDgAUIE7:3Mn1PPdvIuaJsyi\u003euYNBEzpkde\u003cm(!\u003euPKQd\u003em=Qh8k(?sU0\u003eC9FA[CVa9MU6V{LkoY8mt\u003e7$oWJ[zHx)xS+]Bf!J)X\u00266)eBZ}D6r)%703y38R@76\u0026Xc8q2-x?d}]jW31kf^CQ-4]rbzJtF]Apf^YKRmlba", "ln": 347088 }, { "b": "6?@yLA=l2qw]]d.z/P/nA::67z/do+fFAXkrrJyqdnsI^A=l2qw]]d[z/o.ulUgpWx\u003ez6?vru66l3mo.z/PMlC{1\u003c@f!\u003ev67y-bRfGp:Cgb7Nxf/StM4kP)@gCQZvgbgNsg*hOmf:/Vw1{m\u003cd1}}5rq.YsE90MHB1pt!So\u003e!9Tz/Y\u0026eBrA}?A=t@qvruj4zzrK", "ln": 347904 }, { "b": "viwu+wPzj3x(v)gf^!U31{m\u003cd3LKO0q!P(Ry?aU/q=s/cq+/wwlOHhCfF#oMeKRPQh.=Qjbl!lI1oPqSo\u003e!9Tz/Y\u0026eBrBK%zdLp$Byx39ax8\u0026(C4\u003eC$PN)^vfOfJLfOfDlPAtk@0S\u003c2\u003e0006Cja[=YeuAwa009610WGDe1{(=lnqu\u003cF0rAMi05e^P3OR\u003e\u003e162Ed69qfjf+VkM1{m\u003cd2ONLDvrl9@zFa6fzzqXR4H92n1p2OBqE%xQz/f8u9XXMr162Eh6bskQv@=Hez!s8llVm0:z/Podx(v(zcnlXH162Ea6cf!Yv@=Hez!s8lrb3hXeMl+1zeZQ]lQq?IfFLmn9V2nvhzu)viwAJIiw\u0026*27y-bUfF$Nzf/.3Ih91?]FY/+QfBm{=rrJHt0--eN6eg15162Ef6ad/HB7/o9xln6ff+u2G1{m\u003cd2nmtuwN]T@zE+EyfDpo0rrJTx6?@yLA=l2qw]]d.z/P/nA::67z/doQfE3=7rrJW", "ln": 350426 } ], "depth": 1, "facts": { "exp": [ [ "NativeDevice_AvailableBackends" ], [ "NativeDevice_CreateDir" ], [ "NativeDevice_CreateWithBackend" ], [ "NativeDevice_Destroy" ], [ "NativeDevice_GetFileSize" ], [ "NativeDevice_GetLastError" ], [ "NativeDevice_GetSegmentSize" ], [ "NativeDevice_NumIoContexts" ], [ "NativeDevice_ProbeAlignment" ], [ "NativeDevice_QueueRun" ], [ "NativeDevice_QueueRunFor" ], [ "NativeDevice_ReadAsync" ], [ "NativeDevice_RemoveSegment" ], [ "NativeDevice_Reset" ], [ "NativeDevice_TryComplete" ], [ "NativeDevice_TryCompleteMine" ], [ "NativeDevice_WakeCompletionWorker" ], [ "NativeDevice_WriteAsync" ], [ "NativeDevice_sector_size" ] ], "imp": [ [ "kernel32", "CreateFileA" ], [ "kernel32", "GetFileSizeEx" ], [ "kernel32", "CloseHandle" ], [ "kernel32", "DeviceIoControl" ], [ "kernel32", "DeleteFileA" ], [ "kernel32", "ReadFile" ], [ "kernel32", "WriteFile" ], [ "kernel32", "GetLastError" ], [ "kernel32", "CreateIoCompletionPort" ], [ "kernel32", "GetQueuedCompletionStatus" ], [ "kernel32", "CreateThreadpool" ], [ "kernel32", "SetThreadpoolThreadMaximum" ], [ "kernel32", "SetThreadpoolThreadMinimum" ], [ "kernel32", "CloseThreadpool" ], [ "kernel32", "CreateThreadpoolCleanupGroup" ], [ "kernel32", "CloseThreadpoolCleanupGroupMembers" ], [ "kernel32", "CloseThreadpoolCleanupGroup" ], [ "kernel32", "CreateThreadpoolWork" ], [ "kernel32", "SubmitThreadpoolWork" ], [ "kernel32", "CloseThreadpoolWork" ], [ "kernel32", "CreateThreadpoolIo" ], [ "kernel32", "StartThreadpoolIo" ], [ "kernel32", "CancelThreadpoolIo" ], [ "kernel32", "GetFileInformationByHandleEx" ], [ "kernel32", "SetUnhandledExceptionFilter" ], [ "kernel32", "InitializeSListHead" ], [ "kernel32", "DisableThreadLibraryCalls" ], [ "kernel32", "GetSystemTimeAsFileTime" ], [ "kernel32", "GetCurrentProcessId" ], [ "kernel32", "QueryPerformanceCounter" ], [ "kernel32", "WideCharToMultiByte" ], [ "kernel32", "MultiByteToWideChar" ], [ "kernel32", "CreateSymbolicLinkW" ], [ "kernel32", "CreateHardLinkW" ], [ "kernel32", "MoveFileExW" ], [ "kernel32", "CopyFile2" ], [ "kernel32", "CreateDirectoryExW" ], [ "kernel32", "GetProcAddress" ], [ "kernel32", "GetModuleHandleW" ], [ "kernel32", "AreFileApisANSI" ], [ "kernel32", "CreateFile2" ], [ "kernel32", "GetTempPathW" ], [ "kernel32", "SetFileTime" ], [ "kernel32", "SetFileInformationByHandle" ], [ "kernel32", "SetFileAttributesW" ], [ "kernel32", "GetFullPathNameW" ], [ "kernel32", "GetFinalPathNameByHandleW" ], [ "kernel32", "GetFileInformationByHandle" ], [ "kernel32", "GetFileAttributesExW" ], [ "kernel32", "GetFileAttributesW" ], [ "kernel32", "GetDiskFreeSpaceExW" ], [ "kernel32", "FindNextFileW" ], [ "kernel32", "FindFirstFileExW" ], [ "kernel32", "FindFirstFileW" ], [ "kernel32", "FindClose" ], [ "kernel32", "CreateDirectoryW" ], [ "kernel32", "GetCurrentDirectoryW" ], [ "kernel32", "SetCurrentDirectoryW" ], [ "kernel32", "GetTickCount64" ], [ "kernel32", "GetCurrentThreadId" ], [ "kernel32", "Sleep" ], [ "kernel32", "SleepConditionVariableSRW" ], [ "kernel32", "TryAcquireSRWLockShared" ], [ "kernel32", "TryAcquireSRWLockExclusive" ], [ "kernel32", "AcquireSRWLockShared" ], [ "kernel32", "AcquireSRWLockExclusive" ], [ "kernel32", "ReleaseSRWLockShared" ], [ "kernel32", "ReleaseSRWLockExclusive" ], [ "kernel32", "GetLocaleInfoEx" ], [ "kernel32", "FormatMessageA" ], [ "kernel32", "LocalFree" ], [ "kernel32", "GetStartupInfoW" ], [ "msvcp140", "??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z" ], [ "msvcp140", "??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ" ], [ "msvcp140", "?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z" ], [ "msvcp140", "?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ" ], [ "msvcp140", "?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z" ], [ "msvcp140", "?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z" ], [ "msvcp140", "?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z" ], [ "msvcp140", "?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ" ], [ "msvcp140", "?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ" ], [ "msvcp140", "?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ" ], [ "msvcp140", "?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ" ], [ "msvcp140", "?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z" ], [ "msvcp140", "?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z" ], [ "msvcp140", "?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z" ], [ "msvcp140", "?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z" ], [ "msvcp140", "?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ" ], [ "msvcp140", "??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z" ], [ "msvcp140", "??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ" ], [ "msvcp140", "?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z" ], [ "msvcp140", "?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ" ], [ "msvcp140", "?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ" ], [ "msvcp140", "?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ" ], [ "msvcp140", "?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z" ], [ "msvcp140", "??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ" ], [ "msvcp140", "?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ" ], [ "msvcp140", "??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z" ], [ "msvcp140", "??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z" ], [ "msvcp140", "?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ" ], [ "msvcp140", "?_Xbad_alloc@std@@YAXXZ" ], [ "msvcp140", "?_Xlength_error@std@@YAXPEBD@Z" ], [ "msvcp140", "?_Xout_of_range@std@@YAXPEBD@Z" ], [ "msvcp140", "Query_perf_counter" ], [ "msvcp140", "Query_perf_frequency" ], [ "msvcp140", "Thrd_yield" ], [ "msvcp140", "Mtx_lock" ], [ "msvcp140", "Mtx_unlock" ], [ "msvcp140", "?_Throw_Cpp_error@std@@YAXH@Z" ], [ "msvcp140", "?_Syserror_map@std@@YAPEBDH@Z" ], [ "msvcp140", "?_Winerror_map@std@@YAHH@Z" ], [ "msvcp140", "?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ" ], [ "msvcp140", "?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ" ], [ "msvcp140", "?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ" ], [ "msvcp140", "?uncaught_exception@std@@YA_NXZ" ], [ "msvcp140", "?good@ios_base@std@@QEBA_NXZ" ], [ "msvcp140", "?flags@ios_base@std@@QEBAHXZ" ], [ "msvcp140", "?setf@ios_base@std@@QEAAHH@Z" ], [ "msvcp140", "?setf@ios_base@std@@QEAAHHH@Z" ], [ "msvcp140", "?width@ios_base@std@@QEBA_JXZ" ], [ "msvcp140", "?width@ios_base@std@@QEAA_J_J@Z" ], [ "msvcp140", "??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ" ], [ "msvcp140", "??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ" ], [ "msvcp140", "?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z" ], [ "msvcp140", "?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z" ], [ "msvcp140", "?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "msvcp140", "?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ" ], [ "vcruntime140", "current_exception_context" ], [ "vcruntime140", "current_exception" ], [ "vcruntime140", "std_type_info_destroy_list" ], [ "vcruntime140", "C_specific_handler" ], [ "vcruntime140", "memchr" ], [ "vcruntime140", "memset" ], [ "vcruntime140", "memmove" ], [ "vcruntime140", "memcpy" ], [ "vcruntime140", "memcmp" ], [ "vcruntime140", "CxxThrowException" ], [ "vcruntime140", "std_exception_destroy" ], [ "vcruntime140", "std_exception_copy" ], [ "vcruntime140", "std_terminate" ], [ "vcruntime140", "purecall" ], [ "vcruntime140_1", "CxxFrameHandler4" ], [ "api-ms-win-crt-heap-l1-1-0", "calloc" ], [ "api-ms-win-crt-heap-l1-1-0", "malloc" ], [ "api-ms-win-crt-heap-l1-1-0", "aligned_free" ], [ "api-ms-win-crt-heap-l1-1-0", "aligned_malloc" ], [ "api-ms-win-crt-heap-l1-1-0", "callnewh" ], [ "api-ms-win-crt-heap-l1-1-0", "free" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vsprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "stdio_common_vfprintf" ], [ "api-ms-win-crt-stdio-l1-1-0", "acrt_iob_func" ], [ "api-ms-win-crt-string-l1-1-0", "wcslen" ], [ "api-ms-win-crt-string-l1-1-0", "strlen" ], [ "api-ms-win-crt-locale-l1-1-0", "lc_codepage_func" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "crt_at_quick_exit" ], [ "api-ms-win-crt-runtime-l1-1-0", "configure_narrow_argv" ], [ "api-ms-win-crt-runtime-l1-1-0", "register_onexit_function" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm_e" ], [ "api-ms-win-crt-runtime-l1-1-0", "terminate" ], [ "api-ms-win-crt-runtime-l1-1-0", "cexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "abort" ], [ "api-ms-win-crt-runtime-l1-1-0", "execute_onexit_table" ], [ "api-ms-win-crt-runtime-l1-1-0", "seh_filter_dll" ], [ "api-ms-win-crt-runtime-l1-1-0", "crt_atexit" ], [ "api-ms-win-crt-runtime-l1-1-0", "initialize_narrow_environment" ], [ "api-ms-win-crt-runtime-l1-1-0", "initterm" ] ], "sec": [ [ ".text", 1024, 273920, 6.47, "r-x" ], [ ".rdata", 274944, 54784, 5.3, "r--" ], [ ".data", 329728, 2560, 4.22, "rw-" ], [ ".pdata", 332288, 12800, 5.51, "r--" ], [ ".rsrc", 345088, 512, 4.72, "r--" ], [ ".reloc", 345600, 512, 4.39, "r--" ] ], "metrics": { "pe": { "has_cfg": 1, "checksum": 384134, "timestamp": 1788058519, "image_size": 413696, "has_manifest": 1, "headers_size": 1024, "checksum_valid": 1, "file_alignment": 512, "resource_count": 1, "cert_table_size": 10040, "export_timestamp": 4294967295, "computed_checksum": 384134, "headers_size_ratio": 0, "tls_callback_count": 2, "prose_section_count": 0, "reloc_overhang_bytes": 128, "reloc_overhang_ratio": 0.25, "bss_like_section_count": 0, "section_overflow_count": 0, "signature_expired_days": -210.56, "misaligned_section_count": 0, "base_relocation_block_count": 4, "base_relocation_entry_count": 173, "declared_data_directory_count": 10, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 356152, "entropy": 6.57 }, "binary": { "is_pie": 1, "has_overlay": 1, "code_entropy": 6.47, "data_entropy": 4.22, "overlay_size": 10040, "string_count": 406, "overlay_ratio": 0.03, "overlay_entropy": 7.52, "entropy_variance": 0.59, "avg_string_length": 27.65, "max_string_length": 287, "peak_region_bytes": 6968, "code_to_data_ratio": 0.99, "peak_region_entropy": 7.6, "string_length_stddev": 29.03, "largest_section_ratio": 0.77, "sentence_string_count": 37, "sentence_string_ratio": 0.09, "high_entropy_string_count": 0 }, "exports": { "count": 19 }, "imports": { "count": 171 }, "sections": { "count": 6, "code_size": 273920, "entropy_max": 6.47, "entropy_mean": 5.1, "name_entropy": 3.24, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "dependencies": { "count": 9 } } }, "id": 15, "ident": { "trust": "platform", "signer": { "issuer": "CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US", "source": "pe.signatures[0]", "subject": "CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", "signed_at": "2026-09-16 23:38:24 UTC", "common_name": "Microsoft Corporation", "organization": "Microsoft Corporation" }, "build_path": { "value": "D:\\a\\garnet\\garnet\\libs\\storage\\Tsavorite\\cc\\build\\Release\\native_device.pdb", "source": "pe.debug.pdb.path", "verified": false }, "unique_ids": { "authenticode_thumbprint_sha256": "d33927e4dda9b91def9f8ed282549a49217ed8cacf54577a690963cbc5eff3ed" }, "organization": { "value": "Microsoft Corporation", "source": "pe.signatures[0]", "verified": true } }, "mol": "O₃(As₂Er₂Pr)H₅(DbF₁₀Os₂Po₃Ti)Md₂(Bi₆Si₄)", "path": "win-arm64-based-readytorun.zip!!net8.0/native_device.dll", "pid": 0, "risk": 26, "sha": "f343c3d9bc756842ab876d6f78a0f1eacee4e7482e6da851ea9699588e345286", "size": 356152, "traits": [ { "id": "metadata/signed/unknown::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Authenticode chain CN: Microsoft Corporation" }, { "id": "metadata/signed/leaf::microsoft-corporation", "conf": 1.0, "crit": 3, "desc": "Signed by Microsoft Corporation" }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 1024, 273920 ] ] }, { "id": "metadata/binary/debug::pdb-absolute-path", "conf": 0.72, "crit": 3, "desc": "Embedded absolute PDB path", "spans": [ [ 297204, 76 ] ] }, { "id": "metadata/binary/debug::pdb-visual-studio", "conf": 0.5, "crit": 3, "desc": "Visual Studio PDB build path", "spans": [ [ 297204, 76 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/resource/identity::rich-header-present", "conf": 0.9, "crit": 2, "desc": "PE Rich header present (MSVC toolchain)" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/binary/symbols/fake-windows::sideload-export-cluster-size-10-25", "conf": 0.9, "crit": 3, "desc": "DLL exports ten to twenty-five APIs" }, { "id": "metadata/binary/vendor::microsoft-corp-marker-cert", "conf": 0.9, "crit": 3, "desc": "Microsoft certificate-chain identity marker" }, { "id": "metadata/file/magic/identity::pe-dos-stub", "conf": 1.0, "crit": 2, "desc": "PE/DOS MZ header at file start", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 279943, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 279790, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 279972, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/signed/certificate/identity::pe-cert-shallow-chain", "conf": 1.0, "crit": 3, "desc": "Cert chain has only 2 entries" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified", "conf": 1.0, "crit": 2, "desc": "PE Authenticode integrity check reports intact" }, { "id": "metadata/signed/certificate/identity::pe-signature-verified-kv", "conf": 1.0, "crit": 2, "desc": "PE Authenticode signer cryptography verifies" }, { "id": "micro-behaviors/data/control-flow/dispatch::dense-x64-tls-array-access", "conf": 0.97, "crit": 3, "desc": "Dense x64 TLS-array pointer access", "spans": [ [ 1190, 2 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-code-signing-pca", "conf": 0.95, "crit": 2, "desc": "Microsoft code-signing certificate chain", "spans": [ [ 346368, 0 ] ] }, { "id": "micro-behaviors/data/embedded/certificate::microsoft-timestamp-chain", "conf": 0.95, "crit": 2, "desc": "Microsoft timestamp certificate chain", "spans": [ [ 350490, 0 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::deletefile-a", "conf": 0.66, "crit": 3, "desc": "Delete files (Windows API ANSI)", "spans": [ [ 278560, 11 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::std-filesystem-error-rtti", "conf": 0.9, "crit": 3, "desc": "C++ filesystem error RTTI", "spans": [ [ 330144, 37 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-close", "conf": 0.9, "crit": 2, "desc": "Close directory enumeration handle", "spans": [ [ 328952, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file", "conf": 0.9, "crit": 2, "desc": "Begin directory enumeration", "spans": [ [ 278952, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-first-file-ex", "conf": 0.9, "crit": 2, "desc": "Extended directory enumeration", "spans": [ [ 278944, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::find-next-file", "conf": 0.9, "crit": 2, "desc": "Directory enumeration", "spans": [ [ 278936, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/volume::get-disk-free-space", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "GetDiskFreeSpace API import", "spans": [ [ 278928, 19 ] ] }, { "id": "micro-behaviors/fs/file/move::move-file-ex", "conf": 0.9, "crit": 2, "desc": "Move or rename file with options", "spans": [ [ 278800, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::file-create-win", "conf": 0.9, "crit": 2, "desc": "Windows file creation/open API", "spans": [ [ 278528, 0 ] ] }, { "id": "micro-behaviors/fs/link/reparse::create-symbolic-link-directory-api", "conf": 0.9, "crit": 3, "desc": "Creates a Windows symbolic link", "spans": [ [ 278784, 19 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::read-file", "conf": 0.9, "crit": 2, "desc": "Read data from file handle", "spans": [ [ 278568, 0 ] ] }, { "id": "micro-behaviors/mem/c-runtime/functions::vectorized-zero-fill", "conf": 0.6, "crit": 3, "desc": "Vectorized zero-fill instruction sequence", "spans": [ [ 3837, 14 ] ] }, { "id": "micro-behaviors/mem/sync/mutex::initialize-slist-head", "conf": 0.9, "crit": 2, "desc": "Initializes a Windows lock-free list", "spans": [ [ 278728, 0 ] ] }, { "id": "micro-behaviors/os/exception/error-handling::get-last-error", "conf": 0.7, "crit": 2, "desc": "Get system error code", "spans": [ [ 278584, 0 ] ] }, { "id": "micro-behaviors/os/module/load::get-module-handle-wide", "conf": 0.78, "crit": 3, "desc": "Get module handle Unicode", "spans": [ [ 278832, 16 ] ] }, { "id": "micro-behaviors/process/control/info::process-info-class-31-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 31", "spans": [ [ 80916, 14 ] ] }, { "id": "micro-behaviors/process/create/spawn::close-handle-dup", "conf": 0.9, "crit": 2, "desc": "Close handle", "spans": [ [ 323872, 0 ] ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "spans": [ [ 330616, 0 ] ] }, { "id": "micro-behaviors/process/info/thread::get-current-thread-id", "conf": 0.9, "crit": 2, "desc": "Get current thread ID", "spans": [ [ 279000, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-wait--sleepconditionvariablesrw", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Condition variable (SleepConditionVariableSRW)", "spans": [ [ 279016, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-acquire", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "SRW lock acquisition", "spans": [ [ 279048, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-release", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "SRW lock release", "spans": [ [ 279064, 0 ] ] }, { "id": "micro-behaviors/process/threading/create::create-threadpool-work", "conf": 0.9, "crit": 3, "desc": "Create a Windows thread-pool work item", "spans": [ [ 278664, 20 ] ] }, { "id": "micro-behaviors/process/threading/create::submit-threadpool-work", "conf": 0.9, "crit": 3, "desc": "Submit a Windows thread-pool work item", "spans": [ [ 278672, 20 ] ] }, { "id": "micro-behaviors/time/query::get-system-time-as-filetime", "conf": 0.9, "crit": 2, "desc": "Get system time as FILETIME", "spans": [ [ 278744, 0 ] ] }, { "id": "micro-behaviors/time/query::get-tick-count", "conf": 0.9, "crit": 3, "desc": "Get tick count", "spans": [ [ 278992, 14 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::import-count-over-120", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Large PE imports over 120" }, { "id": "metadata/binary/debug::pdb-nonstandard-drive", "conf": 0.5, "crit": 3, "desc": "PDB path on non-standard drive letter", "spans": [ [ 297204, 76 ] ] }, { "id": "metadata/binary/layout/tls::pe-multiple-tls-callbacks", "conf": 0.9, "crit": 3, "desc": "PE has multiple TLS callbacks" }, { "id": "metadata/binary/layout/tls::pe-tls-callback-table", "conf": 0.9, "crit": 3, "desc": "PE TLS callback table present" }, { "id": "metadata/binary/section/ratio::inflated-data-section", "conf": 0.86, "crit": 3, "desc": "Data virtual size exceeds raw size" }, { "id": "metadata/binary/section/ratio::pe-near-total-code-data", "conf": 0.94, "crit": 3, "desc": "PE code-to-data ratio at least 0.99" }, { "id": "micro-behaviors/fs/file/handle::device-io-control-win", "conf": 0.85, "crit": 3, "desc": "DeviceIoControl API usage", "spans": [ [ 278552, 15 ] ] }, { "id": "micro-behaviors/fs/file/timestamp::set-file-time", "atk": "T1070.006", "conf": 0.85, "crit": 3, "desc": "Modify file creation/access/write times", "spans": [ [ 329216, 11 ] ] }, { "id": "micro-behaviors/fs/temp/directory::get-temp-path-name", "conf": 0.66, "crit": 2, "desc": "GetTempPath named without a call site", "spans": [ [ 292144, 0 ] ] }, { "id": "micro-behaviors/fs/traversal/drives::set-current-directory", "conf": 0.9, "crit": 3, "desc": "Switch current working directory", "spans": [ [ 278984, 20 ] ] }, { "id": "micro-behaviors/os/syscall/invoke::all-ones-handle-constant", "conf": 0.8, "crit": 3, "desc": "All-ones x64 handle constant", "spans": [ [ 73658, 20 ] ] }, { "id": "micro-behaviors/process/threading/concurrency::create-io-completion-port", "conf": 0.92, "crit": 3, "desc": "Creates a Windows IOCP", "spans": [ [ 278592, 22 ] ] }, { "id": "micro-behaviors/process/threading/concurrency::get-queued-completion-status", "conf": 0.92, "crit": 3, "desc": "Waits on Windows IOCP", "spans": [ [ 278600, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/instruction/junk::indirect-call-compare-branches", "conf": 0.85, "crit": 3, "desc": "Indirect call followed by a compare branch", "spans": [ [ 37848, 11 ], [ 41252, 11 ], [ 43534, 11 ], [ 43632, 11 ], [ 44162, 11 ], [ 44228, 11 ], [ 253030, 11 ], [ 253179, 11 ] ] }, { "id": "objectives/evasion/indicator-removal/timestamps::export-timestamp-maxval", "atk": "T1070.006", "conf": 0.9, "crit": 3, "desc": "Export dir timestamp set to 0xFFFFFFFF" }, { "id": "metadata/binary/vendor::microsoft-corp-marker", "conf": 0.9, "crit": 3, "desc": "Parsed Microsoft vendor claim", "uses": [ 10 ] }, { "id": "metadata/signed/platform::microsoft-signature-verified", "conf": 1.0, "crit": 2, "desc": "Microsoft certificate chain has verified Authenticode signature", "uses": [ 10, 18, 20, 21 ], "spans": [ [ 350490, 0 ] ] }, { "id": "metadata/signed/trust-level::signer-evidence-present", "conf": 1.0, "crit": 3, "desc": "Platform or developer signing evidence", "uses": [ 17, 18 ] }, { "id": "micro-behaviors/fs/enumerate/directory::file-enumeration-with-access", "conf": 0.9, "crit": 3, "desc": "Directory enumeration with file-content access", "uses": [ 25, 27, 30, 32 ], "spans": [ [ 278528, 11 ], [ 278568, 8 ], [ 278936, 13 ], [ 278952, 14 ] ] }, { "id": "micro-behaviors/fs/file/rename::any-rename", "conf": 0.9, "crit": 3, "desc": "Rename or move file on Windows", "uses": [ 29 ], "spans": [ [ 278800, 11 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-wait", "atk": "T1129", "conf": 0.65, "crit": 2, "desc": "Condition variable wait", "uses": [ 41 ], "spans": [ [ 279016, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::srw-lock-ops", "atk": "T1129", "conf": 0.7, "crit": 2, "desc": "SRW lock operations", "uses": [ 42, 43 ], "spans": [ [ 279064, 0 ] ] }, { "id": "metadata/signed/platform::microsoft", "conf": 0.98, "crit": 2, "desc": "Microsoft-signed Windows binary", "uses": [ 1, 64 ], "spans": [ [ 350490, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::condition-variable-ops", "atk": "T1129", "conf": 0.7, "crit": 2, "desc": "Condition variable ops", "uses": [ 68 ], "spans": [ [ 279016, 0 ] ] }, { "id": "metadata/binary/vendor::common-fp-context", "conf": 0.9, "crit": 2, "desc": "Common Windows binary compatibility context", "uses": [ 70 ], "spans": [ [ 350490, 0 ] ] }, { "id": "micro-behaviors/process/threading/advanced-sync::advanced-sync-primitives", "atk": "T1129", "conf": 0.75, "crit": 2, "desc": "Advanced sync primitives", "uses": [ 69, 71 ], "spans": [ [ 279064, 0 ] ] }, { "id": "objectives/evasion/process/injection/cluster::memory-injection-recognized-marker", "conf": 0.9, "crit": 3, "desc": "Recognized memory-injection API context", "uses": [ 70 ], "spans": [ [ 346368, 31 ], [ 350490, 28 ], [ 350668, 29 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::token-manipulation-cluster-recognized-marker", "conf": 0.86, "crit": 3, "desc": "Recognized token manipulation marker", "uses": [ 70 ], "spans": [ [ 346368, 31 ], [ 350490, 28 ], [ 350668, 29 ] ] }, { "id": "metadata/binary/vendor::benign-token-privilege-context", "conf": 0.95, "crit": 2, "desc": "Benign token privilege adjustment context", "uses": [ 72 ], "spans": [ [ 350490, 0 ] ] }, { "id": "objectives/privilege-escalation/token-manipulation::dynamic-token-privilege-recognized-marker", "conf": 0.8, "crit": 3, "desc": "Recognized token privilege marker", "uses": [ 76 ], "spans": [ [ 346368, 31 ], [ 350490, 28 ], [ 350668, 29 ] ] }, { "id": "micro-behaviors/fs/temp/directory::temp-file-staging-primitives", "conf": 0.8, "crit": 3, "desc": "Temp directory staging primitives", "uses": [ 29, 56 ], "spans": [ [ 278800, 11 ], [ 292144, 13 ], [ 329230, 12 ] ] } ], "type": "pe" } ], "rev": "e86a6", "v": "8" } }