diff --git a/objects.html b/objects.html
index d9e3fd4..1d7c87b 100755
--- a/objects.html
+++ b/objects.html
@@ -445,6 +445,9 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
asn
av-signature
bank-account
+cap-alert
+cap-info
+cap-resource
coin-address
cookie
credential
@@ -483,6 +486,7 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
ss7-attack
stix2-pattern
tor-node
+transaction
url
victim
virustotal-report
@@ -568,46 +572,6 @@ ail-leak is a MISP object available in JSON format at text
-text |
-
- A description of the leak which could include the potential victim(s) or description of the leak.
- |
- |
-
-
-duplicate_number |
-counter |
-
- Number of known duplicates.
- |
- |
-
-
-duplicate |
-text |
-
- Duplicate of the existing leaks.
- |
- |
-
-
-raw-data |
-attachment |
-
- Raw data as received by the AIL sensor compressed and encoded in Base64.
- |
- |
-
-
origin |
text |
@@ -628,10 +592,60 @@ ail-leak is a MISP object available in JSON format at type |
+first-seen |
+datetime |
+
+ When the leak has been accessible or seen for the first time.
+ |
+ |
+
+
+duplicate_number |
+counter |
+
+ Number of known duplicates.
+ |
+ |
+
+
+sensor |
text |
- Type of information leak as discovered and classified by an AIL module. ['Credential', 'CreditCards', 'Mail', 'Onion', 'Phone', 'Keys']
+ The AIL sensor uuid where the leak was processed and analysed.
+ |
+ |
+
+
+raw-data |
+attachment |
+
+ Raw data as received by the AIL sensor compressed and encoded in Base64.
+ |
+ |
+
+
+text |
+text |
+
+ A description of the leak which could include the potential victim(s) or description of the leak.
+ |
+ |
+
+
+duplicate |
+text |
+
+ Duplicate of the existing leaks.
|
@@ -648,20 +662,10 @@ ail-leak is a MISP object available in JSON format at first-seen |
-datetime |
-
- When the leak has been accessible or seen for the first time.
- |
- |
-
-
-sensor |
+type |
text |
- The AIL sensor uuid where the leak was processed and analysed.
+ Type of information leak as discovered and classified by an AIL module. ['Credential', 'CreditCards', 'Mail', 'Onion', 'Phone', 'Keys']
|
@@ -764,16 +768,6 @@ annotation is a MISP object available in JSON format at text |
-text |
-
- Raw text of the annotation
- |
- |
-
-
creation-date |
datetime |
@@ -794,13 +788,13 @@ annotation is a MISP object available in JSON format at type |
+text |
text |
- Type of the annotation ['Annotation', 'Executive Summary', 'Introduction', 'Conclusion', 'Disclaimer', 'Keywords', 'Acknowledgement', 'Other', 'Copyright', 'Authors', 'Logo']
+ Raw text of the annotation
|
|
@@ -814,6 +808,16 @@ annotation is a MISP object available in JSON format at type
+text |
+
+ Type of the annotation ['Annotation', 'Executive Summary', 'Introduction', 'Conclusion', 'Disclaimer', 'Keywords', 'Acknowledgement', 'Other', 'Copyright', 'Authors', 'Logo']
+ |
+ |
+
+
modification-date |
datetime |
@@ -862,46 +866,16 @@ asn is a MISP object available in JSON format at description |
+mp-export |
text |
- Description of the autonomous system
+ This attribute performs the same function as the export attribute above. The difference is that mp-export allows both IPv4 and IPv6 address families to be specified. The export is described in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
|
|
-export |
-text |
-
- The outbound routing policy of the AS in RFC 2622 – Routing Policy Specification Language (RPSL) format
- |
- |
-
-
-mp-import |
-text |
-
- The inbound IPv4 or IPv6 routing policy of the AS in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
- |
- |
-
-
-first-seen |
-datetime |
-
- First time the ASN was seen
- |
- |
-
-
import |
text |
@@ -912,20 +886,10 @@ asn is a MISP object available in JSON format at last-seen |
-datetime |
-
- Last time the ASN was seen
- |
- |
-
-
-mp-export |
+description |
text |
- This attribute performs the same function as the export attribute above. The difference is that mp-export allows both IPv4 and IPv6 address families to be specified. The export is described in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
+ Description of the autonomous system
|
@@ -942,6 +906,36 @@ asn is a MISP object available in JSON format at last-seen |
+datetime |
+
+ Last time the ASN was seen
+ |
+ |
+
+
+asn |
+AS |
+
+ Autonomous System Number
+ |
+ |
+
+
+mp-import |
+text |
+
+ The inbound IPv4 or IPv6 routing policy of the AS in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
+ |
+ |
+
+
subnet-announced |
ip-src |
@@ -952,10 +946,20 @@ asn is a MISP object available in JSON format at asn |
-AS |
+first-seen |
+datetime |
- Autonomous System Number
+ First time the ASN was seen
+ |
+ |
+
+
+export |
+text |
+
+ The outbound routing policy of the AS in RFC 2622 – Routing Policy Specification Language (RPSL) format
|
@@ -1000,16 +1004,6 @@ av-signature is a MISP object available in JSON format at text |
-text |
-
- Free text value to attach to the file
- |
- |
-
-
software |
text |
@@ -1030,6 +1024,16 @@ av-signature is a MISP object available in JSON format at text |
+text |
+
+ Free text value to attach to the file
+ |
+ |
+
+
signature |
text |
|
-boolean |
+account |
+bank-account-nr |
- A flag to define if this account belong to a non-banking organisation. If set to true, it’s a non-banking organisation.
+ Account number
|
|
-
-
-swift |
-bic |
-
- SWIFT or BIC as defined in ISO 9362.
- |
- |
@@ -1108,46 +1102,26 @@ bank-account is a MISP object available in JSON format at beneficiary-comment
+status-code |
text |
- Comment about the final beneficiary.
+ Account status at the time of the transaction processed. ['A - Active', 'B - Inactive', 'C - Dormant']
|
|
-beneficiary |
+branch |
text |
- Final beneficiary of the bank account.
+ Branch code or name
|
|
-personal-account-type |
-text |
-
- Account type. ['A - Business', 'B - Personal Current', 'C - Savings', 'D - Trust Account', 'E - Trading Account', 'O - Other']
- |
- |
-
-
-account |
-bank-account-nr |
- |
- |
-
-
date-balance |
datetime |
@@ -1158,10 +1132,20 @@ bank-account is a MISP object available in JSON format at opened |
+closed |
datetime |
- When the account was opened.
+ When the account was closed.
+ |
+ |
+
+
+text |
+text |
+
+ A description of the bank account.
|
@@ -1178,33 +1162,33 @@ bank-account is a MISP object available in JSON format at account-name |
+personal-account-type |
text |
- A field to freely describe the bank account details.
- |
- |
-
-
-text |
-text |
-
- A description of the bank account.
+ Account type. ['A - Business', 'B - Personal Current', 'C - Savings', 'D - Trust Account', 'E - Trading Account', 'O - Other']
|
|
-iban |
-iban |
+swift |
+bic |
- IBAN of the bank account.
+ SWIFT or BIC as defined in ISO 9362.
|
|
+
+
+opened |
+datetime |
+
+ When the account was opened.
+ |
+ |
@@ -1248,35 +1232,549 @@ bank-account is a MISP object available in JSON format at status-code
+beneficiary-comment |
text |
- Account status at the time of the transaction processed. ['A - Active', 'B - Inactive', 'C - Dormant']
+ Comment about the final beneficiary.
|
|
-closed |
+non-banking-institution |
+boolean |
+
+ A flag to define if this account belong to a non-banking organisation. If set to true, it’s a non-banking organisation.
+ |
+ |
+
+
+account-name |
+text |
+
+ A field to freely describe the bank account details.
+ |
+ |
+
+
+beneficiary |
+text |
+
+ Final beneficiary of the bank account.
+ |
+ |
+
+
+iban |
+iban |
+
+ IBAN of the bank account.
+ |
+ |
+
+
+
+
+
+
+
+
+
+
Common Alerting Protocol Version (CAP) alert object.
+
+
+
+
+|
+
+ |
+
+cap-alert is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP.
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+| Object attribute |
+MISP attribute type |
+Description |
+Disable correlation |
+
+
+
+
+source |
+text |
+
+ The text identifying the source of the alert message. The particular source of this alert; e.g., an operator or a specific device.
+ |
+ |
+
+
+identifier |
+text |
+
+ The identifier of the alert message in a number or string uniquely identifying this message, assigned by the sender.
+ |
+ |
+
+
+status |
+text |
+
+ The code denoting the appropriate handling of the alert message. ['Actual', 'Exercise', 'System', 'Test', 'Draft']
+ |
+ |
+
+
+code |
+text |
+
+ The code denoting the special handling of the alert message.
+ |
+ |
+
+
+incident |
+text |
+
+ The group listing naming the referent incident(s) of the alert message. (1) Used to collate multiple messages referring to different aspects of the same incident. (2) If multiple incident identifiers are referenced, they SHALL be separated by whitespace. Incident names including whitespace SHALL be surrounded by double-quotes.
+ |
+ |
+
+
+sender |
+text |
+
+ The identifier of the sender of the alert message which identifies the originator of this alert. Guaranteed by assigner to be unique globally; e.g., may be based on an Internet domain name.
+ |
+ |
+
+
+restriction |
+text |
+
+ The text describing the rule for limiting distribution of the restricted alert message.
+ |
+ |
+
+
+references |
+text |
+
+ The group listing identifying earlier message(s) referenced by the alert message. (1) The extended message identifier(s) (in the form sender,identifier,sent) of an earlier CAP message or messages referenced by this one. (2) If multiple messages are referenced, they SHALL be separated by whitespace.
+ |
+ |
+
+
+msgType |
+text |
+
+ The code denoting the nature of the alert message. ['Alert', 'Update', 'Cancel', 'Ack', 'Error']
+ |
+ |
+
+
+sent |
datetime |
- When the account was closed.
+ The time and date of the origination of the alert message.
|
|
-branch |
+addresses |
text |
- Branch code or name
+ The group listing of intended recipients of the alert message. (1) Required when <scope> is “Private”, optional when <scope> is “Public” or “Restricted”. (2) Each recipient SHALL be identified by an identifier or an address. (3) Multiple space-delimited addresses MAY be included. Addresses including whitespace MUST be enclosed in double-quotes.
|
|
+
+scope |
+text |
+
+ The code denoting the intended distribution of the alert message. ['Public', 'Restricted', 'Private']
+ |
+ |
+
+
+note |
+text |
+
+ The text describing the purpose or significance of the alert message.
+ |
+ |
+
+
+
+
+
+
+
+
+
Common Alerting Protocol Version (CAP) info object.
+
+
+
+
+|
+
+ |
+
+cap-info is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP.
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+| Object attribute |
+MISP attribute type |
+Description |
+Disable correlation |
+
+
+
+
+urgency |
+text |
+
+ The code denoting the urgency of the subject event of the alert message. ['Immediate', 'Expected', 'Future', 'Past', 'Unknown']
+ |
+ |
+
+
+senderName |
+text |
+
+ The text naming the originator of the alert message.
+ |
+ |
+
+
+contact |
+text |
+
+ The text describing the contact for follow-up and confirmation of the alert message.
+ |
+ |
+
+
+parameter |
+text |
+
+ A system-specific additional parameter associated with the alert message.
+ |
+ |
+
+
+event |
+text |
+
+ The text denoting the type of the subject event of the alert message.
+ |
+ |
+
+
+web |
+link |
+
+ The identifier of the hyperlink associating additional information with the alert message.
+ |
+ |
+
+
+audience |
+text |
+
+ The text describing the intended audience of the alert message.
+ |
+ |
+
+
+category |
+text |
+
+ The code denoting the category of the subject event of the alert message. ['Geo', 'Met', 'Safety', 'Security', 'Rescue', 'Fire', 'Health', 'Env', 'Transport', 'Infra', 'CBRNE', 'Other']
+ |
+ |
+
+
+certainty |
+text |
+
+ The code denoting the certainty of the subject event of the alert message. For backward compatibility with CAP 1.0, the deprecated value of “Very Likely” SHOULD be treated as equivalent to “Likely”. ['Likely', 'Possible', 'Unlikely', 'Unknown']
+ |
+ |
+
+
+severity |
+text |
+
+ The code denoting the severity of the subject event of the alert message. ['Extreme', 'Severe', 'Moderate', 'Minor', 'Unknown']
+ |
+ |
+
+
+headline |
+text |
+
+ The text headline of the alert message.
+ |
+ |
+
+
+expires |
+datetime |
+
+ The expiry time of the information of the alert message.
+ |
+ |
+
+
+language |
+text |
+
+ The code denoting the language of the info sub-element of the alert message.
+ |
+ |
+
+
+eventCode |
+text |
+
+ A system-specific code identifying the event type of the alert message.
+ |
+ |
+
+
+description |
+text |
+
+ The text describing the subject event of the alert message.
+ |
+ |
+
+
+instruction |
+text |
+
+ The text describing the recommended action to be taken by recipients of the alert message.
+ |
+ |
+
+
+responseType |
+text |
+
+ The code denoting the type of action recommended for the target audience. ['Shelter', 'Evacuate', 'Prepare', 'Execute', 'Avoid', 'Monitor', 'Assess', 'AllClear', 'None']
+ |
+ |
+
+
+onset |
+datetime |
+
+ The expected time of the beginning of the subject event of the alert message.
+ |
+ |
+
+
+effective |
+datetime |
+
+ The effective time of the information of the alert message.
+ |
+ |
+
+
+
+
+
+
+
+
+
Common Alerting Protocol Version (CAP) resource object.
+
+
+
+
+|
+
+ |
+
+cap-resource is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP.
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+| Object attribute |
+MISP attribute type |
+Description |
+Disable correlation |
+
+
+
+
+uri |
+link |
+
+ The identifier of the hyperlink for the resource file.
+ |
+ |
+
+
+size |
+text |
+
+ The integer indicating the size of the resource file.
+ |
+ |
+
+
+derefUri |
+attachment |
+
+ The base-64 encoded data content of the resource file.
+ |
+ |
+
+
+mimeType |
+mime-type |
+
+ The identifier of the MIME content type and sub-type describing the resource file.
+ |
+ |
+
+
+resourceDesc |
+text |
+
+ The text describing the type and content of the resource file.
+ |
+ |
+
+
+digest |
+sha1 |
+
+ The code representing the digital digest (“hash”) computed from the resource file (OPTIONAL).
+ |
+ |
+
@@ -1316,16 +1814,6 @@ coin-address is a MISP object available in JSON format at
symbol
-text |
-
- The (uppercase) symbol of the cryptocurrency used. Symbol should be from https://coinmarketcap.com/all/views/all/ ['BTC', 'ETH', 'BCH', 'XRP', 'MIOTA', 'DASH', 'BTG', 'LTC', 'ADA', 'XMR', 'ETC', 'NEO', 'NEM', 'EOS', 'XLM', 'BCC', 'LSK', 'OMG', 'QTUM', 'ZEC', 'USDT', 'HSR', 'STRAT', 'WAVES', 'PPT']
- |
-
|
-
-
address |
btc |
@@ -1336,10 +1824,10 @@ coin-address is a MISP object available in JSON format at first-seen |
+last-seen |
datetime |
- First time this payment destination address has been seen
+ Last time this payment destination address has been seen
|
@@ -1356,10 +1844,20 @@ coin-address is a MISP object available in JSON format at last-seen |
+symbol |
+text |
+
+ The (uppercase) symbol of the cryptocurrency used. Symbol should be from https://coinmarketcap.com/all/views/all/ ['BTC', 'ETH', 'BCH', 'XRP', 'MIOTA', 'DASH', 'BTG', 'LTC', 'ADA', 'XMR', 'ETC', 'NEO', 'NEM', 'EOS', 'XLM', 'BCC', 'LSK', 'OMG', 'QTUM', 'ZEC', 'USDT', 'HSR', 'STRAT', 'WAVES', 'PPT']
+ |
+ |
+
+
+first-seen |
datetime |
- Last time this payment destination address has been seen
+ First time this payment destination address has been seen
|
@@ -1404,6 +1902,16 @@ cookie is a MISP object available in JSON format at cookie |
+cookie |
+ |
+ |
+
+
type |
text |
@@ -1414,6 +1922,16 @@ cookie is a MISP object available in JSON format at text |
+text |
+
+ A description of the cookie.
+ |
+ |
+
+
cookie-value |
text |
@@ -1433,26 +1951,6 @@ cookie is a MISP object available in JSON format at
|
-
-text |
-text |
-
- A description of the cookie.
- |
- |
-
-
-cookie |
-cookie |
- |
- |
-
text
+username |
text |
- A description of the credential(s)
+ Username related to the password(s)
|
|
@@ -1512,6 +2010,16 @@ credential is a MISP object available in JSON format at password
+text |
+ |
+ |
+
+
origin |
text |
@@ -1522,23 +2030,13 @@ credential is a MISP object available in JSON format at username |
+text |
text |
- Username related to the password(s)
+ A description of the credential(s)
|
|
-
-
-type |
-text |
-
- Type of password(s) ['password', 'api-key', 'encryption-key', 'unknown']
- |
- |
@@ -1552,10 +2050,10 @@ credential is a MISP object available in JSON format at password
+type |
text |
- Password
+ Type of password(s) ['password', 'api-key', 'encryption-key', 'unknown']
|
@@ -1600,36 +2098,6 @@ credit-card is a MISP object available in JSON format at expiration |
-datetime |
-
- Maximum date of validity
- |
- |
-
-
-card-security-code |
-text |
-
- Card security code (CSC, CVD, CVV, CVC and SPC) as embossed or printed on the card.
- |
- |
-
-
-comment |
-comment |
-
- A description of the card.
- |
- |
-
-
version |
text |
@@ -1640,16 +2108,6 @@ credit-card is a MISP object available in JSON format at name |
-text |
-
- Name of the card owner.
- |
- |
-
-
cc-number |
cc-number |
@@ -1669,6 +2127,46 @@ credit-card is a MISP object available in JSON format at
|
+
+comment |
+comment |
+
+ A description of the card.
+ |
+ |
+
+
+name |
+text |
+
+ Name of the card owner.
+ |
+ |
+
+
+card-security-code |
+text |
+
+ Card security code (CSC, CVD, CVV, CVC and SPC) as embossed or printed on the card.
+ |
+ |
+
+
+expiration |
+datetime |
+
+ Maximum date of validity
+ |
+ |
+
@@ -1708,6 +2206,56 @@ ddos is a MISP object available in JSON format at last-seen
+datetime |
+ |
+ |
+
+
+dst-port |
+port |
+
+ Destination port of the attack
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ Beginning of the attack
+ |
+ |
+
+
+total-bps |
+counter |
+ |
+ |
+
+
+total-pps |
+counter |
+ |
+ |
+
+
text |
text |
@@ -1728,10 +2276,20 @@ ddos is a MISP object available in JSON format at dst-port |
-port |
+protocol |
+text |
- Destination port of the attack
+ Protocol used for the attack ['TCP', 'UDP', 'ICMP', 'IP']
+ |
+ |
+
+
+ip-dst |
+ip-dst |
+ |
@@ -1757,66 +2315,6 @@ ddos is a MISP object available in JSON format at
|
-
-last-seen |
-datetime |
- |
- |
-
-
-ip-dst |
-ip-dst |
-
- Destination IP (victim)
- |
- |
-
-
-total-pps |
-counter |
- |
- |
-
-
-first-seen |
-datetime |
-
- Beginning of the attack
- |
- |
-
-
-protocol |
-text |
-
- Protocol used for the attack ['TCP', 'UDP', 'ICMP', 'IP']
- |
- |
-
-
-total-bps |
-counter |
- |
- |
-
@@ -1856,16 +2354,6 @@ diameter-attack is a MISP object available in JSON format at ApplicationId
-text |
-
- Application-ID is used to identify for which Diameter application the message is applicable. Application-ID is a decimal representation.
- |
- |
-
-
CmdCode |
text |
@@ -1876,26 +2364,6 @@ diameter-attack is a MISP object available in JSON format at Origin-Host |
-text |
- |
- |
-
-
-IdrFlags |
-text |
- |
- |
-
-
SessionId |
text |
@@ -1916,16 +2384,26 @@ diameter-attack is a MISP object available in JSON format at first-seen |
-datetime |
+text |
+text |
- When the attack has been seen for the first time.
+ A description of the attack seen.
|
|
+Origin-Host |
+text |
+ |
+ |
+
+
category |
text |
@@ -1936,26 +2414,16 @@ diameter-attack is a MISP object available in JSON format at text |
+IdrFlags |
text |
- A description of the attack seen.
+ IDR-Flags.
|
|
-Destination-Realm |
-text |
- |
- |
-
-
Origin-Realm |
text |
@@ -1966,6 +2434,16 @@ diameter-attack is a MISP object available in JSON format at ApplicationId |
+text |
+
+ Application-ID is used to identify for which Diameter application the message is applicable. Application-ID is a decimal representation.
+ |
+ |
+
+
Destination-Host |
text |
@@ -1975,6 +2453,26 @@ diameter-attack is a MISP object available in JSON format at
|
+
+Destination-Realm |
+text |
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ When the attack has been seen for the first time.
+ |
+ |
+
@@ -2024,6 +2522,16 @@ domain-ip is a MISP object available in JSON format at last-seen
+datetime |
+
+ Last time the tuple has been seen
+ |
+ |
+
+
domain |
domain |
@@ -2053,16 +2561,6 @@ domain-ip is a MISP object available in JSON format at
|
-
-last-seen |
-datetime |
-
- Last time the tuple has been seen
- |
- |
-
@@ -2112,10 +2610,20 @@ elf is a MISP object available in JSON format at text
+number-sections |
+counter |
+ |
+ |
+
+
+entrypoint-address |
text |
- Free text value to attach to the ELF
+ Address of the entry point
|
@@ -2132,6 +2640,16 @@ elf is a MISP object available in JSON format at text |
+text |
+
+ Free text value to attach to the ELF
+ |
+ |
+
+
type |
text |
@@ -2141,26 +2659,6 @@ elf is a MISP object available in JSON format at
|
-
-entrypoint-address |
-text |
-
- Address of the entry point
- |
- |
-
-
-number-sections |
-counter |
- |
- |
-
@@ -2200,40 +2698,10 @@ elf-section is a MISP object available in JSON format at flag
-text |
+sha256 |
+sha256 |
- Flag of the section ['ALLOC', 'EXCLUDE', 'EXECINSTR', 'GROUP', 'HEX_GPREL', 'INFO_LINK', 'LINK_ORDER', 'MASKOS', 'MASKPROC', 'MERGE', 'MIPS_ADDR', 'MIPS_LOCAL', 'MIPS_MERGE', 'MIPS_NAMES', 'MIPS_NODUPES', 'MIPS_NOSTRIP', 'NONE', 'OS_NONCONFORMING', 'STRINGS', 'TLS', 'WRITE', 'XCORE_SHF_CP_SECTION']
- |
- |
-
-
-text |
-text |
-
- Free text value to attach to the section
- |
- |
-
-
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
-sha224 |
-sha224 |
-
- Secure Hash Algorithm 2 (224 bits)
+ Secure Hash Algorithm 2 (256 bits)
|
@@ -2250,66 +2718,6 @@ elf-section is a MISP object available in JSON format at sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-md5 |
-md5 |
-
- [Insecure] MD5 hash (128 bits)
- |
- |
-
-
-sha256 |
-sha256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the section, in bytes
- |
- |
-
-
-type |
-text |
-
- Type of the section ['NULL', 'PROGBITS', 'SYMTAB', 'STRTAB', 'RELA', 'HASH', 'DYNAMIC', 'NOTE', 'NOBITS', 'REL', 'SHLIB', 'DYNSYM', 'INIT_ARRAY', 'FINI_ARRAY', 'PREINIT_ARRAY', 'GROUP', 'SYMTAB_SHNDX', 'LOOS', 'GNU_ATTRIBUTES', 'GNU_HASH', 'GNU_VERDEF', 'GNU_VERNEED', 'GNU_VERSYM', 'HIOS', 'LOPROC', 'ARM_EXIDX', 'ARM_PREEMPTMAP', 'HEX_ORDERED', 'X86_64_UNWIND', 'MIPS_REGINFO', 'MIPS_OPTIONS', 'MIPS_ABIFLAGS', 'HIPROC', 'LOUSER', 'HIUSER']
- |
- |
-
-
-sha512/256 |
-sha512/256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
sha1 |
sha1 |
@@ -2330,10 +2738,30 @@ elf-section is a MISP object available in JSON format at name |
+size-in-bytes |
+size-in-bytes |
+
+ Size of the section, in bytes
+ |
+ |
+
+
+text |
text |
- Name of the section
+ Free text value to attach to the section
+ |
+ |
+
+
+type |
+text |
+
+ Type of the section ['NULL', 'PROGBITS', 'SYMTAB', 'STRTAB', 'RELA', 'HASH', 'DYNAMIC', 'NOTE', 'NOBITS', 'REL', 'SHLIB', 'DYNSYM', 'INIT_ARRAY', 'FINI_ARRAY', 'PREINIT_ARRAY', 'GROUP', 'SYMTAB_SHNDX', 'LOOS', 'GNU_ATTRIBUTES', 'GNU_HASH', 'GNU_VERDEF', 'GNU_VERNEED', 'GNU_VERSYM', 'HIOS', 'LOPROC', 'ARM_EXIDX', 'ARM_PREEMPTMAP', 'HEX_ORDERED', 'X86_64_UNWIND', 'MIPS_REGINFO', 'MIPS_OPTIONS', 'MIPS_ABIFLAGS', 'HIPROC', 'LOUSER', 'HIUSER']
|
@@ -2349,6 +2777,76 @@ elf-section is a MISP object available in JSON format at
|
+
+md5 |
+md5 |
+
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
+sha512/256 |
+sha512/256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+name |
+text |
+ |
+ |
+
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
+sha224 |
+sha224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+sha512/224 |
+sha512/224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+flag |
+text |
+
+ Flag of the section ['ALLOC', 'EXCLUDE', 'EXECINSTR', 'GROUP', 'HEX_GPREL', 'INFO_LINK', 'LINK_ORDER', 'MASKOS', 'MASKPROC', 'MERGE', 'MIPS_ADDR', 'MIPS_LOCAL', 'MIPS_MERGE', 'MIPS_NAMES', 'MIPS_NODUPES', 'MIPS_NOSTRIP', 'NONE', 'OS_NONCONFORMING', 'STRINGS', 'TLS', 'WRITE', 'XCORE_SHF_CP_SECTION']
+ |
+ |
+
@@ -2388,6 +2886,126 @@ email is a MISP object available in JSON format at to
+email-dst |
+
+ Destination email address
+ |
+ |
+
+
+thread-index |
+email-thread-index |
+
+ Identifies a particular conversation thread
+ |
+ |
+
+
+from-display-name |
+email-src-display-name |
+
+ Display name of the sender
+ |
+ |
+
+
+email-body |
+email-body |
+ |
+ |
+
+
+x-mailer |
+email-x-mailer |
+
+ X-Mailer generally tells the program that was used to draft and send the original email
+ |
+ |
+
+
+subject |
+email-subject |
+ |
+ |
+
+
+reply-to |
+email-reply-to |
+
+ Email address the reply will be sent to
+ |
+ |
+
+
+send-date |
+datetime |
+
+ Date the email has been sent
+ |
+ |
+
+
+cc |
+email-dst |
+ |
+ |
+
+
+mime-boundary |
+email-mime-boundary |
+ |
+ |
+
+
+to-display-name |
+email-dst-display-name |
+
+ Display name of the receiver
+ |
+ |
+
+
+return-path |
+text |
+ |
+ |
+
+
message-id |
email-message-id |
@@ -2408,66 +3026,6 @@ email is a MISP object available in JSON format at x-mailer |
-email-x-mailer |
-
- X-Mailer generally tells the program that was used to draft and send the original email
- |
- |
-
-
-to |
-email-dst |
-
- Destination email address
- |
- |
-
-
-mime-boundary |
-email-mime-boundary |
- |
- |
-
-
-subject |
-email-subject |
- |
- |
-
-
-header |
-email-header |
- |
- |
-
-
-from-display-name |
-email-src-display-name |
-
- Display name of the sender
- |
- |
-
-
screenshot |
attachment |
@@ -2478,66 +3036,6 @@ email is a MISP object available in JSON format at reply-to |
-email-reply-to |
-
- Email address the reply will be sent to
- |
- |
-
-
-thread-index |
-email-thread-index |
-
- Identifies a particular conversation thread
- |
- |
-
-
-return-path |
-text |
- |
- |
-
-
-to-display-name |
-email-dst-display-name |
-
- Display name of the receiver
- |
- |
-
-
-cc |
-email-dst |
- |
- |
-
-
-send-date |
-datetime |
-
- Date the email has been sent
- |
- |
-
-
attachment |
email-attachment |
@@ -2548,10 +3046,10 @@ email is a MISP object available in JSON format at email-body |
-email-body |
+header |
+email-header |
- Body of the email
+ Full headers
|
@@ -2596,90 +3094,10 @@ file is a MISP object available in JSON format at pattern-in-file |
-pattern-in-file |
+sha256 |
+sha256 |
- Pattern that can be found in the file
- |
- |
-
-
-tlsh |
-tlsh |
-
- Fuzzy hash by Trend Micro: Locality Sensitive Hash
- |
- |
-
-
-malware-sample |
-malware-sample |
-
- The file itself (binary)
- |
- |
-
-
-text |
-text |
-
- Free text value to attach to the file
- |
- |
-
-
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
-sha224 |
-sha224 |
-
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-sha384 |
-sha384 |
-
- Secure Hash Algorithm 2 (384 bits)
- |
- |
-
-
-mimetype |
-text |
- |
- |
-
-
-sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
+ Secure Hash Algorithm 2 (256 bits)
|
@@ -2696,50 +3114,20 @@ file is a MISP object available in JSON format at md5 |
-md5 |
+sha384 |
+sha384 |
- [Insecure] MD5 hash (128 bits)
+ Secure Hash Algorithm 2 (384 bits)
|
|
-sha256 |
-sha256 |
+tlsh |
+tlsh |
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the file, in bytes
- |
- |
-
-
-authentihash |
-authentihash |
-
- Authenticode executable signature hash
- |
- |
-
-
-sha512/256 |
-sha512/256 |
-
- Secure Hash Algorithm 2 (256 bits)
+ Fuzzy hash by Trend Micro: Locality Sensitive Hash
|
@@ -2766,6 +3154,56 @@ file is a MISP object available in JSON format at sha512/224 |
+sha512/224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+text |
+text |
+
+ Free text value to attach to the file
+ |
+ |
+
+
+entropy |
+float |
+
+ Entropy of the whole file
+ |
+ |
+
+
+md5 |
+md5 |
+
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
+malware-sample |
+malware-sample |
+
+ The file itself (binary)
+ |
+ |
+
+
state |
text |
@@ -2776,6 +3214,16 @@ file is a MISP object available in JSON format at authentihash |
+authentihash |
+
+ Authenticode executable signature hash
+ |
+ |
+
+
certificate |
x509-fingerprint-sha1 |
@@ -2786,15 +3234,65 @@ file is a MISP object available in JSON format at entropy |
-float |
+sha512/256 |
+sha512/256 |
- Entropy of the whole file
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+mimetype |
+text |
+ |
|
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
+sha224 |
+sha224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+size-in-bytes |
+size-in-bytes |
+
+ Size of the file, in bytes
+ |
+ |
+
+
+pattern-in-file |
+pattern-in-file |
+
+ Pattern that can be found in the file
+ |
+ |
+
@@ -2834,6 +3332,66 @@ geolocation is a MISP object available in JSON format at address
+text |
+ |
+ |
+
+
+city |
+text |
+ |
+ |
+
+
+zipcode |
+text |
+ |
+ |
+
+
+last-seen |
+datetime |
+
+ When the location was seen for the last time.
+ |
+ |
+
+
+longitude |
+float |
+
+ The longitude is the decimal value of the longitude in the World Geodetic System 84 (WGS84) reference
+ |
+ |
+
+
+country |
+text |
+ |
+ |
+
+
text |
text |
@@ -2854,33 +3412,13 @@ geolocation is a MISP object available in JSON format at region |
-text |
- |
- |
-
-
-country |
-text |
- |
- |
-
-
-longitude |
+altitude |
float |
- The longitude is the decimal value of the longitude in the World Geodetic System 84 (WGS84) reference
+ The altitude is the decimal value of the altitude in the World Geodetic System 84 (WGS84) reference.
|
|
@@ -2894,50 +3432,10 @@ geolocation is a MISP object available in JSON format at last-seen
-datetime |
-
- When the location was seen for the last time.
- |
- |
-
-
-address |
+region |
text |
|
- |
-
-
-zipcode |
-text |
- |
- |
-
-
-city |
-text |
- |
- |
-
-
-altitude |
-float |
-
- The altitude is the decimal value of the altitude in the World Geodetic System 84 (WGS84) reference.
+ Region.
|
@@ -2982,30 +3480,10 @@ gtp-attack is a MISP object available in JSON format at GtpInterface |
+GtpMessageType |
text |
- GTP interface. ['S5', 'S11', 'S10', 'S8', 'Gn', 'Gp']
- |
- |
-
-
-first-seen |
-datetime |
-
- When the attack has been seen for the first time.
- |
- |
-
-
-GtpServingNetwork |
-text |
-
- GTP Serving Network.
+ GTP defines a set of messages between two associated GSNs or an SGSN and an RNC. Message type is described as a decimal value.
|
@@ -3022,6 +3500,46 @@ gtp-attack is a MISP object available in JSON format at text |
+text |
+
+ A description of the GTP attack.
+ |
+ |
+
+
+ipDest |
+ip-dst |
+
+ IP destination address.
+ |
+ |
+
+
+GtpMsisdn |
+text |
+ |
+ |
+
+
+PortSrc |
+port |
+ |
+ |
+
+
PortDest |
text |
@@ -3042,26 +3560,6 @@ gtp-attack is a MISP object available in JSON format at GtpImei |
-text |
-
- GTP IMEI (International Mobile Equipment Identity).
- |
- |
-
-
-text |
-text |
-
- A description of the GTP attack.
- |
- |
-
-
GtpImsi |
text |
@@ -3072,40 +3570,40 @@ gtp-attack is a MISP object available in JSON format at GtpMsisdn |
+GtpInterface |
text |
|
- |
-
-
-ipDest |
-ip-dst |
-
- IP destination address.
- |
- |
-
-
-GtpMessageType |
-text |
-
- GTP defines a set of messages between two associated GSNs or an SGSN and an RNC. Message type is described as a decimal value.
+ GTP interface. ['S5', 'S11', 'S10', 'S8', 'Gn', 'Gp']
|
|
-PortSrc |
-port |
+GtpImei |
+text |
- Source port.
+ GTP IMEI (International Mobile Equipment Identity).
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ When the attack has been seen for the first time.
+ |
+ |
+
+
+GtpServingNetwork |
+text |
+ |
@@ -3150,56 +3648,6 @@ http-request is a MISP object available in JSON format at method |
-http-method |
-
- HTTP Method invoked (one of GET, POST, PUT, HEAD, DELETE, OPTIONS, CONNECT)
- |
- |
-
-
-basicauth-user |
-text |
-
- HTTP Basic Authentication Username
- |
- |
-
-
-proxy-password |
-text |
- |
- |
-
-
-cookie |
-text |
-
- An HTTP cookie previously sent by the server with Set-Cookie
- |
- |
-
-
-url |
-url |
- |
- |
-
-
host |
hostname |
@@ -3220,30 +3668,30 @@ http-request is a MISP object available in JSON format at content-type |
-other |
+referer |
+referer |
- The MIME type of the body of the request
+ This is the address of the previous web page from which a link to the currently requested page was followed
|
|
-text |
-text |
+method |
+http-method |
- HTTP Request comment
+ HTTP Method invoked (one of GET, POST, PUT, HEAD, DELETE, OPTIONS, CONNECT)
|
|
-referer |
-referer |
+proxy-password |
+text |
- This is the address of the previous web page from which a link to the currently requested page was followed
+ HTTP Proxy Password
|
@@ -3260,10 +3708,10 @@ http-request is a MISP object available in JSON format at user-agent |
-user-agent |
+content-type |
+other |
- The user agent string of the user agent
+ The MIME type of the body of the request
|
@@ -3279,6 +3727,56 @@ http-request is a MISP object available in JSON format at
|
+
+user-agent |
+user-agent |
+
+ The user agent string of the user agent
+ |
+ |
+
+
+cookie |
+text |
+
+ An HTTP cookie previously sent by the server with Set-Cookie
+ |
+ |
+
+
+basicauth-user |
+text |
+
+ HTTP Basic Authentication Username
+ |
+ |
+
+
+text |
+text |
+ |
+ |
+
+
+url |
+url |
+ |
+ |
+
@@ -3318,6 +3816,36 @@ ip-port is a MISP object available in JSON format at domain
+domain |
+ |
+ |
+
+
+dst-port |
+port |
+ |
+ |
+
+
+last-seen |
+datetime |
+
+ Last time the tuple has been seen
+ |
+ |
+
+
text |
text |
@@ -3338,16 +3866,6 @@ ip-port is a MISP object available in JSON format at dst-port |
-port |
- |
- |
-
-
first-seen |
datetime |
@@ -3358,26 +3876,6 @@ ip-port is a MISP object available in JSON format at last-seen |
-datetime |
-
- Last time the tuple has been seen
- |
- |
-
-
-domain |
-domain |
- |
- |
-
-
ip |
ip-dst |
@@ -3436,13 +3934,13 @@ ja3 is a MISP object available in JSON format at ip-src |
-ip-src |
+last-seen |
+datetime |
- Source IP Address
+ Last seen of the SSL/TLS handshake
|
|
@@ -3456,6 +3954,16 @@ ja3 is a MISP object available in JSON format at ip-dst
+ip-dst |
+
+ Destination IP address
+ |
+ |
+
+
first-seen |
datetime |
@@ -3466,25 +3974,15 @@ ja3 is a MISP object available in JSON format at ip-dst |
-ip-dst |
+ip-src |
+ip-src |
- Destination IP address
+ Source IP Address
|
|
-
-last-seen |
-datetime |
-
- Last seen of the SSL/TLS handshake
- |
- |
-
@@ -3524,13 +4022,13 @@ legal-entity is a MISP object available in JSON format at text
+registration-number |
text |
- A description of the entity.
+ Registration number of an entity in the relevant authority.
|
|
@@ -3554,16 +4052,6 @@ legal-entity is a MISP object available in JSON format at business
-text |
-
- Business area of an entity.
- |
- |
-
-
name |
text |
@@ -3574,13 +4062,13 @@ legal-entity is a MISP object available in JSON format at registration-number |
+text |
text |
- Registration number of an entity in the relevant authority.
+ A description of the entity.
|
|
@@ -3593,6 +4081,16 @@ legal-entity is a MISP object available in JSON format at
+
+business |
+text |
+
+ Business area of an entity.
+ |
+ |
+
@@ -3632,6 +4130,36 @@ macho is a MISP object available in JSON format at name
+text |
+ |
+ |
+
+
+text |
+text |
+
+ Free text value to attach to the Mach-O file
+ |
+ |
+
+
+number-sections |
+counter |
+ |
+ |
+
+
type |
text |
@@ -3651,36 +4179,6 @@ macho is a MISP object available in JSON format at
|
-
-text |
-text |
-
- Free text value to attach to the Mach-O file
- |
- |
-
-
-name |
-text |
- |
- |
-
-
-number-sections |
-counter |
- |
- |
-
@@ -3720,30 +4218,10 @@ macho-section is a MISP object available in JSON format at text
-text |
+sha256 |
+sha256 |
- Free text value to attach to the section
- |
- |
-
-
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
-sha224 |
-sha224 |
-
- Secure Hash Algorithm 2 (224 bits)
+ Secure Hash Algorithm 2 (256 bits)
|
@@ -3760,56 +4238,6 @@ macho-section is a MISP object available in JSON format at sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-md5 |
-md5 |
-
- [Insecure] MD5 hash (128 bits)
- |
- |
-
-
-sha256 |
-sha256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the section, in bytes
- |
- |
-
-
-sha512/256 |
-sha512/256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
sha1 |
sha1 |
@@ -3830,10 +4258,20 @@ macho-section is a MISP object available in JSON format at name |
+size-in-bytes |
+size-in-bytes |
+
+ Size of the section, in bytes
+ |
+ |
+
+
+text |
text |
- Name of the section
+ Free text value to attach to the section
|
@@ -3849,6 +4287,66 @@ macho-section is a MISP object available in JSON format at
|
+
+md5 |
+md5 |
+
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
+sha512/256 |
+sha512/256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+name |
+text |
+ |
+ |
+
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
+sha224 |
+sha224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+sha512/224 |
+sha512/224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
@@ -3888,16 +4386,6 @@ microblog is a MISP object available in JSON format at post
-text |
- |
- |
-
-
creation-date |
datetime |
@@ -3908,50 +4396,20 @@ microblog is a MISP object available in JSON format at username-quoted |
-text |
-
- Username who are quoted into the microblog post
- |
- |
-
-
-username |
-text |
-
- Username who posted the microblog post
- |
- |
-
-
-type |
-text |
-
- Type of the microblog post ['Twitter', 'Facebook', 'LinkedIn', 'Reddit', 'Google+', 'Instagram', 'Forum', 'Other']
- |
- |
-
-
-modification-date |
+removal-date |
datetime |
- Last update of the microblog post
+ When the microblog post was removed
|
|
-url |
-url |
+post |
+text |
- Original URL location of the microblog post
+ Raw post
|
@@ -3968,10 +4426,50 @@ microblog is a MISP object available in JSON format at removal-date |
+username |
+text |
+
+ Username who posted the microblog post
+ |
+ |
+
+
+username-quoted |
+text |
+
+ Username who are quoted into the microblog post
+ |
+ |
+
+
+modification-date |
datetime |
- When the microblog post was removed
+ Last update of the microblog post
+ |
+ |
+
+
+type |
+text |
+
+ Type of the microblog post ['Twitter', 'Facebook', 'LinkedIn', 'Reddit', 'Google+', 'Instagram', 'Forum', 'Other']
+ |
+ |
+
+
+url |
+url |
+
+ Original URL location of the microblog post
|
@@ -4016,16 +4514,6 @@ mutex is a MISP object available in JSON format at description |
-text |
- |
- |
-
-
operating-system |
text |
@@ -4045,6 +4533,16 @@ mutex is a MISP object available in JSON format at
|
+
+description |
+text |
+ |
+ |
+
@@ -4084,6 +4582,126 @@ netflow is a MISP object available in JSON format at src-port
+port |
+
+ Source port of the netflow
+ |
+ |
+
+
+dst-port |
+port |
+
+ Destination port of the netflow
+ |
+ |
+
+
+protocol |
+text |
+
+ Protocol used for this flow ['TCP', 'UDP', 'ICMP', 'IP']
+ |
+ |
+
+
+direction |
+text |
+
+ Direction of this flow ['Ingress', 'Egress']
+ |
+ |
+
+
+tcp-flags |
+text |
+ |
+ |
+
+
+ip-dst |
+ip-dst |
+
+ IP address destination of the netflow
+ |
+ |
+
+
+ip-src |
+ip-src |
+
+ IP address source of the netflow
+ |
+ |
+
+
+ip_version |
+counter |
+
+ IP version of this flow
+ |
+ |
+
+
+flow-count |
+counter |
+
+ Flows counted in this flow
+ |
+ |
+
+
+dst-as |
+AS |
+
+ Destination AS number for this flow
+ |
+ |
+
+
+ip-protocol-number |
+size-in-bytes |
+
+ IP protocol number of this flow
+ |
+ |
+
+
+packet-count |
+counter |
+
+ Packets counted in this flow
+ |
+ |
+
+
byte-count |
counter |
@@ -4104,26 +4722,6 @@ netflow is a MISP object available in JSON format at flow-count |
-counter |
-
- Flows counted in this flow
- |
- |
-
-
-ip-src |
-ip-src |
-
- IP address source of the netflow
- |
- |
-
-
first-packet-seen |
datetime |
@@ -4134,26 +4732,6 @@ netflow is a MISP object available in JSON format at icmp-type |
-text |
-
- ICMP type of the flow (if the traffic is ICMP)
- |
- |
-
-
-tcp-flags |
-text |
- |
- |
-
-
last-packet-seen |
datetime |
@@ -4164,95 +4742,15 @@ netflow is a MISP object available in JSON format at direction |
+icmp-type |
text |
- Direction of this flow ['Ingress', 'Egress']
+ ICMP type of the flow (if the traffic is ICMP)
|
|
-
-packet-count |
-counter |
-
- Packets counted in this flow
- |
- |
-
-
-dst-port |
-port |
-
- Destination port of the netflow
- |
- |
-
-
-ip-dst |
-ip-dst |
-
- IP address destination of the netflow
- |
- |
-
-
-src-port |
-port |
-
- Source port of the netflow
- |
- |
-
-
-ip_version |
-counter |
-
- IP version of this flow
- |
- |
-
-
-ip-protocol-number |
-size-in-bytes |
-
- IP protocol number of this flow
- |
- |
-
-
-protocol |
-text |
-
- Protocol used for this flow ['TCP', 'UDP', 'ICMP', 'IP']
- |
- |
-
-
-dst-as |
-AS |
-
- Destination AS number for this flow
- |
- |
-
@@ -4292,30 +4790,10 @@ passive-dns is a MISP object available in JSON format at zone_time_last
+zone_time_first |
datetime |
- Last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import.
- |
- |
-
-
-rrtype |
-text |
-
- Resource Record type as seen by the passive DNS. ['A', 'AAAA', 'CNAME', 'PTR', 'SOA', 'TXT', 'DNAME', 'NS', 'SRV', 'RP', 'NAPTR', 'HINFO', 'A6']
- |
- |
-
-
-time_first |
-datetime |
-
- First time that the unique tuple (rrname, rrtype, rdata) has been seen by the passive DNS
+ First time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import
|
@@ -4332,33 +4810,13 @@ passive-dns is a MISP object available in JSON format at time_last |
-datetime |
-
- Last time that the unique tuple (rrname, rrtype, rdata) record has been seen by the passive DNS
- |
- |
-
-
-zone_time_first |
-datetime |
-
- First time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import
- |
- |
-
-
-rrname |
+origin |
text |
- Resource Record name of the queried resource.
+ Origin of the Passive DNS response
|
|
@@ -4382,10 +4840,20 @@ passive-dns is a MISP object available in JSON format at origin
-text |
+time_first |
+datetime |
- Origin of the Passive DNS response
+ First time that the unique tuple (rrname, rrtype, rdata) has been seen by the passive DNS
+ |
+ |
+
+
+zone_time_last |
+datetime |
+
+ Last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import.
|
@@ -4402,6 +4870,16 @@ passive-dns is a MISP object available in JSON format at rrname |
+text |
+
+ Resource Record name of the queried resource.
+ |
+ |
+
+
sensor_id |
text |
@@ -4411,6 +4889,26 @@ passive-dns is a MISP object available in JSON format at
|
+
+time_last |
+datetime |
+
+ Last time that the unique tuple (rrname, rrtype, rdata) record has been seen by the passive DNS
+ |
+ |
+
+
+rrtype |
+text |
+
+ Resource Record type as seen by the passive DNS. ['A', 'AAAA', 'CNAME', 'PTR', 'SOA', 'TXT', 'DNAME', 'NS', 'SRV', 'RP', 'NAPTR', 'HINFO', 'A6']
+ |
+ |
+
@@ -4548,56 +5046,6 @@ pe is a MISP object available in JSON format at entrypoint-section-at-position
-text |
-
- Name of the section and position of the section in the PE
- |
- |
-
-
-file-version |
-text |
-
- FileVersion in the resources
- |
- |
-
-
-number-sections |
-counter |
- |
- |
-
-
-compilation-timestamp |
-datetime |
-
- Compilation timestamp defined in the PE header
- |
- |
-
-
-file-description |
-text |
-
- FileDescription in the resources
- |
- |
-
-
pehash |
pehash |
@@ -4608,36 +5056,6 @@ pe is a MISP object available in JSON format at original-filename |
-filename |
-
- OriginalFilename in the resources
- |
- |
-
-
-product-version |
-text |
-
- ProductVersion in the resources
- |
- |
-
-
-text |
-text |
-
- Free text value to attach to the PE
- |
- |
-
-
product-name |
text |
@@ -4648,56 +5066,6 @@ pe is a MISP object available in JSON format at lang-id |
-text |
-
- Lang ID in the resources
- |
- |
-
-
-imphash |
-imphash |
-
- Hash (md5) calculated from the import table
- |
- |
-
-
-company-name |
-text |
-
- CompanyName in the resources
- |
- |
-
-
-type |
-text |
-
- Type of PE ['exe', 'dll', 'driver', 'unknown']
- |
- |
-
-
-entrypoint-address |
-text |
-
- Address of the entry point
- |
- |
-
-
internal-filename |
filename |
@@ -4708,6 +5076,46 @@ pe is a MISP object available in JSON format at number-sections |
+counter |
+ |
+ |
+
+
+entrypoint-address |
+text |
+
+ Address of the entry point
+ |
+ |
+
+
+original-filename |
+filename |
+
+ OriginalFilename in the resources
+ |
+ |
+
+
+text |
+text |
+
+ Free text value to attach to the PE
+ |
+ |
+
+
impfuzzy |
impfuzzy |
@@ -4718,6 +5126,66 @@ pe is a MISP object available in JSON format at type |
+text |
+
+ Type of PE ['exe', 'dll', 'driver', 'unknown']
+ |
+ |
+
+
+file-description |
+text |
+
+ FileDescription in the resources
+ |
+ |
+
+
+imphash |
+imphash |
+
+ Hash (md5) calculated from the import table
+ |
+ |
+
+
+lang-id |
+text |
+
+ Lang ID in the resources
+ |
+ |
+
+
+file-version |
+text |
+
+ FileVersion in the resources
+ |
+ |
+
+
+entrypoint-section-at-position |
+text |
+
+ Name of the section and position of the section in the PE
+ |
+ |
+
+
legal-copyright |
text |
@@ -4727,6 +5195,36 @@ pe is a MISP object available in JSON format at
|
+
+company-name |
+text |
+
+ CompanyName in the resources
+ |
+ |
+
+
+compilation-timestamp |
+datetime |
+
+ Compilation timestamp defined in the PE header
+ |
+ |
+
+
+product-version |
+text |
+
+ ProductVersion in the resources
+ |
+ |
+
@@ -4766,30 +5264,10 @@ pe-section is a MISP object available in JSON format at text
-text |
+sha256 |
+sha256 |
- Free text value to attach to the section
- |
- |
-
-
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
-sha224 |
-sha224 |
-
- Secure Hash Algorithm 2 (224 bits)
+ Secure Hash Algorithm 2 (256 bits)
|
@@ -4806,56 +5284,6 @@ pe-section is a MISP object available in JSON format at sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-md5 |
-md5 |
-
- [Insecure] MD5 hash (128 bits)
- |
- |
-
-
-sha256 |
-sha256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the section, in bytes
- |
- |
-
-
-sha512/256 |
-sha512/256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
sha1 |
sha1 |
@@ -4876,16 +5304,46 @@ pe-section is a MISP object available in JSON format at name |
-text |
+size-in-bytes |
+size-in-bytes |
- Name of the section ['.rsrc', '.reloc', '.rdata', '.data', '.text']
+ Size of the section, in bytes
|
|
+text |
+text |
+
+ Free text value to attach to the section
+ |
+ |
+
+
+entropy |
+float |
+
+ Entropy of the whole section
+ |
+ |
+
+
+md5 |
+md5 |
+
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
characteristic |
text |
@@ -4896,15 +5354,55 @@ pe-section is a MISP object available in JSON format at entropy |
-float |
+sha512/256 |
+sha512/256 |
- Entropy of the whole section
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+name |
+text |
+
+ Name of the section ['.rsrc', '.reloc', '.rdata', '.data', '.text']
|
|
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
+sha224 |
+sha224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+sha512/224 |
+sha512/224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
@@ -4944,16 +5442,36 @@ person is a MISP object available in JSON format at passport-number
-passport-number |
+identity-card-number |
+identity-card-number |
- The passport number of a natural person.
+ The identity card number of a natural person.
|
|
+passport-expiration |
+passport-expiration |
+
+ The expiration date of a passport.
+ |
+ |
+
+
+nationality |
+nationality |
+
+ The nationality of a natural person.
+ |
+ |
+
+
middle-name |
middle-name |
|
-text |
-
- Social security number
- |
- |
-
-
-title |
-text |
-
- Title of the natural person such as Dr. or equivalent.
- |
- |
-
-
-mothers-name |
-text |
-
- Mother name, father, second name or other names following country’s regulation.
- |
- |
-
-
last-name |
last-name |
@@ -5004,20 +5492,80 @@ person is a MISP object available in JSON format at nationality |
-nationality |
+alias |
+text |
- The nationality of a natural person.
+ Alias name or known as.
+ |
+ |
+
+
+mothers-name |
+text |
+
+ Mother name, father, second name or other names following country’s regulation.
+ |
+ |
+
+
+passport-country |
+passport-country |
+
+ The country in which the passport was issued.
|
|
-identity-card-number |
-identity-card-number |
+passport-number |
+passport-number |
- The identity card number of a natural person.
+ The passport number of a natural person.
+ |
+ |
+
+
+redress-number |
+redress-number |
+
+ The Redress Control Number is the record identifier for people who apply for redress through the DHS Travel Redress Inquiry Program (DHS TRIP). DHS TRIP is for travelers who have been repeatedly identified for additional screening and who want to file an inquiry to have erroneous information corrected in DHS systems.
+ |
+ |
+
+
+title |
+text |
+
+ Title of the natural person such as Dr. or equivalent.
+ |
+ |
+
+
+social-security-number |
+text |
+
+ Social security number
+ |
+ |
+
+
+date-of-birth |
+date-of-birth |
+
+ Date of birth of a natural person (in YYYY-MM-DD format).
|
@@ -5034,6 +5582,16 @@ person is a MISP object available in JSON format at place-of-birth |
+place-of-birth |
+
+ Place of birth of a natural person.
+ |
+ |
+
+
text |
text |
@@ -5053,66 +5611,6 @@ person is a MISP object available in JSON format at
|
-
-passport-expiration |
-passport-expiration |
-
- The expiration date of a passport.
- |
- |
-
-
-date-of-birth |
-date-of-birth |
-
- Date of birth of a natural person (in YYYY-MM-DD format).
- |
- |
-
-
-place-of-birth |
-place-of-birth |
-
- Place of birth of a natural person.
- |
- |
-
-
-passport-country |
-passport-country |
-
- The country in which the passport was issued.
- |
- |
-
-
-alias |
-text |
-
- Alias name or known as.
- |
- |
-
-
-redress-number |
-redress-number |
-
- The Redress Control Number is the record identifier for people who apply for redress through the DHS Travel Redress Inquiry Program (DHS TRIP). DHS TRIP is for travelers who have been repeatedly identified for additional screening and who want to file an inquiry to have erroneous information corrected in DHS systems.
- |
- |
-
@@ -5152,16 +5650,6 @@ phone is a MISP object available in JSON format at serial-number
-text |
- |
- |
-
-
imei |
text |
@@ -5172,10 +5660,30 @@ phone is a MISP object available in JSON format at text |
+imsi |
text |
- A description of the phone.
+ A usually unique International Mobile Subscriber Identity (IMSI) is allocated to each mobile subscriber in the GSM/UMTS/EPS system. IMSI can also refer to International Mobile Station Identity in the ITU nomenclature.
+ |
+ |
+
+
+serial-number |
+text |
+ |
+ |
+
+
+last-seen |
+datetime |
+
+ When the phone has been accessible or seen for the last time.
|
@@ -5202,16 +5710,26 @@ phone is a MISP object available in JSON format at imsi |
+guti |
text |
- A usually unique International Mobile Subscriber Identity (IMSI) is allocated to each mobile subscriber in the GSM/UMTS/EPS system. IMSI can also refer to International Mobile Station Identity in the ITU nomenclature.
+ Globally Unique Temporary UE Identity (GUTI) is a temporary identification to not reveal the phone (user equipment in 3GPP jargon) composed of GUMMEI and the M-TMSI.
|
|
+text |
+text |
+
+ A description of the phone.
+ |
+ |
+
+
first-seen |
datetime |
@@ -5222,16 +5740,6 @@ phone is a MISP object available in JSON format at last-seen |
-datetime |
-
- When the phone has been accessible or seen for the last time.
- |
- |
-
-
gummei |
text |
@@ -5241,16 +5749,6 @@ phone is a MISP object available in JSON format at
|
-
-guti |
-text |
-
- Globally Unique Temporary UE Identity (GUTI) is a temporary identification to not reveal the phone (user equipment in 3GPP jargon) composed of GUMMEI and the M-TMSI.
- |
- |
-
@@ -5290,116 +5788,6 @@ r2graphity is a MISP object available in JSON format at not-referenced-strings
-counter |
-
- Amount of not referenced strings
- |
- |
-
-
-callbacks |
-counter |
-
- Amount of callbacks (functions started as thread)
- |
- |
-
-
-gml |
-attachment |
-
- Graph export in G>raph Modelling Language format
- |
- |
-
-
-get-proc-address |
-counter |
-
- Amount of calls to GetProcAddress
- |
- |
-
-
-dangling-strings |
-counter |
-
- Amount of dangling strings (string with a code cross reference, that is not within a function. Radare2 failed to detect that function.)
- |
- |
-
-
-r2-commit-version |
-text |
-
- Radare2 commit ID used to generate this object
- |
- |
-
-
-shortest-path-to-create-thread |
-counter |
-
- Shortest path to the first time the binary calls CreateThread
- |
- |
-
-
-ratio-api |
-float |
-
- Ratio: amount of API calls per kilobyte of code section
- |
- |
-
-
-local-references |
-counter |
-
- Amount of API calls inside a code section
- |
- |
-
-
-callback-largest |
-counter |
- |
- |
-
-
-memory-allocations |
-counter |
-
- Amount of memory allocations
- |
- |
-
-
total-functions |
counter |
@@ -5410,46 +5798,6 @@ r2graphity is a MISP object available in JSON format at ratio-functions |
-float |
-
- Ratio: amount of functions per kilobyte of code section
- |
- |
-
-
-referenced-strings |
-counter |
-
- Amount of referenced strings
- |
- |
-
-
-total-api |
-counter |
-
- Total amount of API calls
- |
- |
-
-
-ratio-string |
-float |
-
- Ratio: amount of referenced strings per kilobyte of code section
- |
- |
-
-
refsglobalvar |
counter |
@@ -5460,20 +5808,20 @@ r2graphity is a MISP object available in JSON format at miss-api |
+create-thread |
counter |
- Amount of API call reference that does not resolve to a function offset
+ Amount of calls to CreateThread
|
|
-callback-average |
+dangling-strings |
counter |
- Average size of a callback
+ Amount of dangling strings (string with a code cross reference, that is not within a function. Radare2 failed to detect that function.)
|
@@ -5490,6 +5838,106 @@ r2graphity is a MISP object available in JSON format at r2-commit-version |
+text |
+
+ Radare2 commit ID used to generate this object
+ |
+ |
+
+
+miss-api |
+counter |
+
+ Amount of API call reference that does not resolve to a function offset
+ |
+ |
+
+
+total-api |
+counter |
+
+ Total amount of API calls
+ |
+ |
+
+
+not-referenced-strings |
+counter |
+
+ Amount of not referenced strings
+ |
+ |
+
+
+shortest-path-to-create-thread |
+counter |
+
+ Shortest path to the first time the binary calls CreateThread
+ |
+ |
+
+
+referenced-strings |
+counter |
+
+ Amount of referenced strings
+ |
+ |
+
+
+callbacks |
+counter |
+
+ Amount of callbacks (functions started as thread)
+ |
+ |
+
+
+local-references |
+counter |
+
+ Amount of API calls inside a code section
+ |
+ |
+
+
+callback-average |
+counter |
+
+ Average size of a callback
+ |
+ |
+
+
+callback-largest |
+counter |
+ |
+ |
+
+
unknown-references |
counter |
@@ -5500,10 +5948,60 @@ r2graphity is a MISP object available in JSON format at create-thread |
+memory-allocations |
counter |
- Amount of calls to CreateThread
+ Amount of memory allocations
+ |
+ |
+
+
+ratio-functions |
+float |
+
+ Ratio: amount of functions per kilobyte of code section
+ |
+ |
+
+
+get-proc-address |
+counter |
+
+ Amount of calls to GetProcAddress
+ |
+ |
+
+
+ratio-api |
+float |
+
+ Ratio: amount of API calls per kilobyte of code section
+ |
+ |
+
+
+gml |
+attachment |
+
+ Graph export in G>raph Modelling Language format
+ |
+ |
+
+
+ratio-string |
+float |
+
+ Ratio: amount of referenced strings per kilobyte of code section
|
@@ -5548,6 +6046,26 @@ regexp is a MISP object available in JSON format at comment |
+comment |
+
+ A description of the regular expression.
+ |
+ |
+
+
+regexp |
+text |
+ |
+ |
+
+
type |
text |
@@ -5567,26 +6085,6 @@ regexp is a MISP object available in JSON format at
|
-
-regexp |
-text |
- |
- |
-
-
-comment |
-comment |
-
- A description of the regular expression.
- |
- |
-
@@ -5626,46 +6124,6 @@ registry-key is a MISP object available in JSON format at data-type
-text |
-
- Registry value type ['REG_NONE', 'REG_SZ', 'REG_EXPAND_SZ', 'REG_BINARY', 'REG_DWORD', 'REG_DWORD_LITTLE_ENDIAN', 'REG_DWORD_BIG_ENDIAN', 'REG_LINK', 'REG_MULTI_SZ', 'REG_RESOURCE_LIST', 'REG_FULL_RESOURCE_DESCRIPTOR', 'REG_RESOURCE_REQUIREMENTS_LIST', 'REG_QWORD', 'REG_QWORD_LITTLE_ENDIAN']
- |
- |
-
-
-root-keys |
-text |
-
- Root key of the Windows registry (extracted from the key) ['HKCC', 'HKCR', 'HKCU', 'HKDD', 'HKEY_CLASSES_ROOT', 'HKEY_CURRENT_CONFIG', 'HKEY_CURRENT_USER', 'HKEY_DYN_DATA', 'HKEY_LOCAL_MACHINE', 'HKEY_PERFORMANCE_DATA', 'HKEY_USERS', 'HKLM', 'HKPD', 'HKU']
- |
- |
-
-
-name |
-text |
-
- Name of the registry key
- |
- |
-
-
-key |
-regkey |
- |
- |
-
-
data |
text |
@@ -5686,6 +6144,36 @@ registry-key is a MISP object available in JSON format at data-type |
+text |
+
+ Registry value type ['REG_NONE', 'REG_SZ', 'REG_EXPAND_SZ', 'REG_BINARY', 'REG_DWORD', 'REG_DWORD_LITTLE_ENDIAN', 'REG_DWORD_BIG_ENDIAN', 'REG_LINK', 'REG_MULTI_SZ', 'REG_RESOURCE_LIST', 'REG_FULL_RESOURCE_DESCRIPTOR', 'REG_RESOURCE_REQUIREMENTS_LIST', 'REG_QWORD', 'REG_QWORD_LITTLE_ENDIAN']
+ |
+ |
+
+
+key |
+regkey |
+ |
+ |
+
+
+name |
+text |
+
+ Name of the registry key
+ |
+ |
+
+
hive |
text |
@@ -5695,6 +6183,16 @@ registry-key is a MISP object available in JSON format at
|
+
+root-keys |
+text |
+
+ Root key of the Windows registry (extracted from the key) ['HKCC', 'HKCR', 'HKCU', 'HKDD', 'HKEY_CLASSES_ROOT', 'HKEY_CURRENT_CONFIG', 'HKEY_CURRENT_USER', 'HKEY_DYN_DATA', 'HKEY_LOCAL_MACHINE', 'HKEY_PERFORMANCE_DATA', 'HKEY_USERS', 'HKLM', 'HKPD', 'HKU']
+ |
+ |
+
@@ -5792,30 +6290,10 @@ rtir is a MISP object available in JSON format at status
+queue |
text |
- Status of the RTIR ticket ['new', 'open', 'stalled', 'resolved', 'rejected', 'deleted']
- |
- |
-
-
-classification |
-text |
-
- Classification of the RTIR ticket
- |
- |
-
-
-constituency |
-text |
-
- Constituency of the RTIR ticket
+ Queue of the RTIR ticket ['incident', 'investigations', 'blocks', 'incident reports']
|
@@ -5832,26 +6310,6 @@ rtir is a MISP object available in JSON format at ip |
-ip-dst |
-
- IPs automatically extracted from the RTIR ticket
- |
- |
-
-
-queue |
-text |
-
- Queue of the RTIR ticket ['incident', 'investigations', 'blocks', 'incident reports']
- |
- |
-
-
ticket-number |
text |
@@ -5861,6 +6319,46 @@ rtir is a MISP object available in JSON format at
|
+
+status |
+text |
+
+ Status of the RTIR ticket ['new', 'open', 'stalled', 'resolved', 'rejected', 'deleted']
+ |
+ |
+
+
+constituency |
+text |
+
+ Constituency of the RTIR ticket
+ |
+ |
+
+
+classification |
+text |
+
+ Classification of the RTIR ticket
+ |
+ |
+
+
+ip |
+ip-dst |
+
+ IPs automatically extracted from the RTIR ticket
+ |
+ |
+
@@ -5900,16 +6398,6 @@ sandbox-report is a MISP object available in JSON format at results
-text |
-
- Freetext result values
- |
- |
-
-
saas-sandbox |
text |
@@ -5920,40 +6408,20 @@ sandbox-report is a MISP object available in JSON format at score |
+on-premise-sandbox |
text |
- Score
+ The on-premise sandbox used ['cuckoo', 'symantec-cas-on-premise', 'bluecoat-maa', 'trendmicro-deep-discovery-analyzer', 'fireeye-ax', 'vmray', 'joe-sandbox-on-premise']
|
|
-web-sandbox |
+results |
text |
- A web sandbox where results are publicly available via an URL ['malwr', 'hybrid-analysis']
- |
- |
-
-
-permalink |
-link |
- |
- |
-
-
-sandbox-type |
-text |
-
- The type of sandbox used ['on-premise', 'web', 'saas']
+ Freetext result values
|
@@ -5970,10 +6438,40 @@ sandbox-report is a MISP object available in JSON format at on-premise-sandbox |
+sandbox-type |
text |
- The on-premise sandbox used ['cuckoo', 'symantec-cas-on-premise', 'bluecoat-maa', 'trendmicro-deep-discovery-analyzer', 'fireeye-ax', 'vmray', 'joe-sandbox-on-premise']
+ The type of sandbox used ['on-premise', 'web', 'saas']
+ |
+ |
+
+
+permalink |
+link |
+ |
+ |
+
+
+web-sandbox |
+text |
+
+ A web sandbox where results are publicly available via an URL ['malwr', 'hybrid-analysis']
+ |
+ |
+
+
+score |
+text |
+ |
@@ -6018,16 +6516,6 @@ sb-signature is a MISP object available in JSON format at text |
-text |
-
- Additional signature description
- |
- |
-
-
software |
text |
@@ -6048,6 +6536,16 @@ sb-signature is a MISP object available in JSON format at text |
+text |
+
+ Additional signature description
+ |
+ |
+
+
signature |
text |
@@ -6096,20 +6594,20 @@ ss7-attack is a MISP object available in JSON format at MapMsisdn |
+SccpCdPC |
text |
- MAP MSISDN. Phone number.
+ Signaling Connection Control Part (SCCP) CdPC - Phone number.
|
|
-MapGsmscfGT |
+MapGmlc |
text |
- MAP GSMSCF GT. Phone number.
+ MAP GMLC. Phone number.
|
@@ -6126,6 +6624,16 @@ ss7-attack is a MISP object available in JSON format at text |
+text |
+
+ A description of the attack seen via SS7 logging.
+ |
+ |
+
+
MapSmsTypeNumber |
text |
@@ -6146,80 +6654,10 @@ ss7-attack is a MISP object available in JSON format at MapMscGT |
+MapGsmscfGT |
text |
- MAP MSC GT. Phone number.
- |
- |
-
-
-MapImsi |
-text |
-
- MAP IMSI. Phone number starting with MCC/MNC.
- |
- |
-
-
-Category |
-text |
-
- Category ['Cat0', 'Cat1', 'Cat2.1', 'Cat2.2', 'Cat3.1', 'Cat3.2', 'Cat3.3', 'CatSMS', 'CatSpoofing']
- |
- |
-
-
-SccpCgPC |
-text |
-
- Signaling Connection Control Part (SCCP) CgPC - Phone number.
- |
- |
-
-
-MapVlrGT |
-text |
-
- MAP VLR GT. Phone number.
- |
- |
-
-
-MapUssdContent |
-text |
- |
- |
-
-
-SccpCdPC |
-text |
-
- Signaling Connection Control Part (SCCP) CdPC - Phone number.
- |
- |
-
-
-MapGmlc |
-text |
-
- MAP GMLC. Phone number.
+ MAP GSMSCF GT. Phone number.
|
@@ -6236,36 +6674,26 @@ ss7-attack is a MISP object available in JSON format at SccpCdSSN |
+MapOpCode |
text |
- Signaling Connection Control Part (SCCP) - Decimal value between 0-255.
+ MAP operation codes - Decimal value between 0-99.
|
|
-MapSmscGT |
+SccpCgGT |
text |
- MAP SMSC. Phone number.
+ Signaling Connection Control Part (SCCP) CgGT - Phone number.
|
|
-first-seen |
-datetime |
-
- When the attack has been seen for the first time.
- |
- |
-
-
MapSmsText |
text |
@@ -6286,56 +6714,6 @@ ss7-attack is a MISP object available in JSON format at text |
-text |
-
- A description of the attack seen via SS7 logging.
- |
- |
-
-
-SccpCgGT |
-text |
-
- Signaling Connection Control Part (SCCP) CgGT - Phone number.
- |
- |
-
-
-MapSmsTP-OA |
-text |
-
- MAP SMS TP-OA. Phone number.
- |
- |
-
-
-MapSmsTP-PID |
-text |
- |
- |
-
-
-MapOpCode |
-text |
-
- MAP operation codes - Decimal value between 0-99.
- |
- |
-
-
SccpCdGT |
text |
@@ -6355,6 +6733,126 @@ ss7-attack is a MISP object available in JSON format at
|
+
+Category |
+text |
+
+ Category ['Cat0', 'Cat1', 'Cat2.1', 'Cat2.2', 'Cat3.1', 'Cat3.2', 'Cat3.3', 'CatSMS', 'CatSpoofing']
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ When the attack has been seen for the first time.
+ |
+ |
+
+
+SccpCgPC |
+text |
+
+ Signaling Connection Control Part (SCCP) CgPC - Phone number.
+ |
+ |
+
+
+MapImsi |
+text |
+
+ MAP IMSI. Phone number starting with MCC/MNC.
+ |
+ |
+
+
+MapMsisdn |
+text |
+
+ MAP MSISDN. Phone number.
+ |
+ |
+
+
+MapMscGT |
+text |
+
+ MAP MSC GT. Phone number.
+ |
+ |
+
+
+MapUssdContent |
+text |
+ |
+ |
+
+
+MapSmscGT |
+text |
+
+ MAP SMSC. Phone number.
+ |
+ |
+
+
+SccpCdSSN |
+text |
+
+ Signaling Connection Control Part (SCCP) - Decimal value between 0-255.
+ |
+ |
+
+
+MapSmsTP-PID |
+text |
+ |
+ |
+
+
+MapVlrGT |
+text |
+
+ MAP VLR GT. Phone number.
+ |
+ |
+
+
+MapSmsTP-OA |
+text |
+
+ MAP SMS TP-OA. Phone number.
+ |
+ |
+
@@ -6394,20 +6892,20 @@ stix2-pattern is a MISP object available in JSON format at stix2-pattern
-stix2-pattern |
+comment |
+comment |
- STIX 2 pattern
+ A description of the stix2-pattern.
|
|
-comment |
-comment |
+stix2-pattern |
+stix2-pattern |
- A description of the stix2-pattern.
+ STIX 2 pattern
|
@@ -6452,10 +6950,20 @@ tor-node is a MISP object available in JSON format at flags |
+address |
+ip-src |
+
+ IP address of the Tor node seen.
+ |
+ |
+
+
+fingerprint |
text |
- list of flag associated with the node.
+ router’s fingerprint.
|
@@ -6472,36 +6980,16 @@ tor-node is a MISP object available in JSON format at version |
+text |
text |
- parsed version of tor, this is None if the relay’s using a new versioning scheme.
- |
- |
-
-
-first-seen |
-datetime |
-
- When the Tor node designed by the IP address has been seen for the first time.
+ Tor node comment.
|
|
-address |
-ip-src |
-
- IP address of the Tor node seen.
- |
- |
-
-
published |
datetime |
@@ -6512,6 +7000,26 @@ tor-node is a MISP object available in JSON format at nickname |
+text |
+ |
+ |
+
+
+version |
+text |
+
+ parsed version of tor, this is None if the relay’s using a new versioning scheme.
+ |
+ |
+
+
description |
text |
@@ -6522,20 +7030,10 @@ tor-node is a MISP object available in JSON format at text |
+flags |
text |
|
- |
-
-
-nickname |
-text |
-
- router’s nickname.
+ list of flag associated with the node.
|
@@ -6562,10 +7060,128 @@ tor-node is a MISP object available in JSON format at fingerprint |
+first-seen |
+datetime |
+
+ When the Tor node designed by the IP address has been seen for the first time.
+ |
+ |
+
+
+
+
+
+
+
+
+
+
An object to describe a financial transaction..
+
+
+
+
+|
+
+ |
+
+transaction is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP.
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+| Object attribute |
+MISP attribute type |
+Description |
+Disable correlation |
+
+
+
+
+transmode-comment |
text |
- router’s fingerprint.
+ Comment describing transmode-code, if needed.
+ |
+ |
+
+
+amount |
+text |
+
+ The value of the transaction in local currency.
+ |
+ |
+
+
+date-posting |
+datetime |
+
+ Date of posting, if different from date of transaction.
+ |
+ |
+
+
+location |
+text |
+
+ Location where the transaction took place.
+ |
+ |
+
+
+text |
+text |
+
+ A description of the transaction.
+ |
+ |
+
+
+transmode-code |
+text |
+
+ How the transaction was conducted.
+ |
+ |
+
+
+date |
+datetime |
+
+ Date and time of the transaction.
+ |
+ |
+
+
+transaction-number |
+text |
+
+ A unique number identifying a transaction.
|
@@ -6610,20 +7226,20 @@ url is a MISP object available in JSON format at scheme |
-text |
+host |
+hostname |
- Scheme ['http', 'https', 'ftp', 'gopher', 'sip']
+ Full hostname
|
|
-fragment |
-text |
+domain |
+domain |
- Fragment identifier is a short string of characters that refers to a resource that is subordinate to another, primary resource.
+ Full domain
|
@@ -6640,60 +7256,10 @@ url is a MISP object available in JSON format at port |
-port |
- |
- |
-
-
-first-seen |
-datetime |
-
- First time this URL has been seen
- |
- |
-
-
-subdomain |
+text |
text |
|
- |
-
-
-domain |
-domain |
- |
- |
-
-
-resource_path |
-text |
-
- Path (between hostname:port and query)
- |
- |
-
-
-url |
-url |
-
- Full URL
+ Description of the URL
|
@@ -6720,10 +7286,10 @@ url is a MISP object available in JSON format at text |
+fragment |
text |
- Description of the URL
+ Fragment identifier is a short string of characters that refers to a resource that is subordinate to another, primary resource.
|
@@ -6740,13 +7306,13 @@ url is a MISP object available in JSON format at host |
-hostname |
+scheme |
+text |
- Full hostname
+ Scheme ['http', 'https', 'ftp', 'gopher', 'sip']
|
|
@@ -6759,6 +7325,56 @@ url is a MISP object available in JSON format at
+
+first-seen |
+datetime |
+
+ First time this URL has been seen
+ |
+ |
+
+
+subdomain |
+text |
+ |
+ |
+
+
+resource_path |
+text |
+
+ Path (between hostname:port and query)
+ |
+ |
+
+
+port |
+port |
+ |
+ |
+
+
+url |
+url |
+ |
+ |
+
@@ -6798,96 +7414,6 @@ victim is a MISP object available in JSON format at
description
-text |
-
- Description of the victim
- |
-
|
-
-
-external |
-target-external |
-
- External target organisations affected by this attack.
- |
- |
-
-
-email |
-target-email |
-
- The email address(es) of the user targeted.
- |
- |
-
-
-classification |
-text |
-
- The type of entity being targeted. ['individual', 'group', 'organization', 'class', 'unknown']
- |
- |
-
-
-node |
-target-machine |
-
- Name(s) of node that was targeted.
- |
- |
-
-
-roles |
-text |
-
- The list of roles targeted within the victim.
- |
- |
-
-
-name |
-target-org |
-
- The name of the department(s) or organisation(s) targeted.
- |
- |
-
-
-regions |
-target-location |
-
- The list of regions or locations from the victim targeted. ISO 3166 should be used.
- |
- |
-
-
-ip-address |
-ip-dst |
-
- IP address(es) of the node targeted.
- |
- |
-
-
sectors |
text |
@@ -6907,6 +7433,96 @@ victim is a MISP object available in JSON format at
|
+
+ip-address |
+ip-dst |
+
+ IP address(es) of the node targeted.
+ |
+ |
+
+
+description |
+text |
+
+ Description of the victim
+ |
+ |
+
+
+email |
+target-email |
+
+ The email address(es) of the user targeted.
+ |
+ |
+
+
+regions |
+target-location |
+
+ The list of regions or locations from the victim targeted. ISO 3166 should be used.
+ |
+ |
+
+
+external |
+target-external |
+
+ External target organisations affected by this attack.
+ |
+ |
+
+
+name |
+target-org |
+
+ The name of the department(s) or organisation(s) targeted.
+ |
+ |
+
+
+roles |
+text |
+
+ The list of roles targeted within the victim.
+ |
+ |
+
+
+node |
+target-machine |
+
+ Name(s) of node that was targeted.
+ |
+ |
+
+
+classification |
+text |
+
+ The type of entity being targeted. ['individual', 'group', 'organization', 'class', 'unknown']
+ |
+ |
+
detection-ratio
-text |
- |
- |
-
-
-permalink |
-link |
- |
- |
-
-
community-score |
text |
@@ -6986,6 +7582,16 @@ virustotal-report is a MISP object available in JSON format at permalink |
+link |
+ |
+ |
+
+
first-submission |
datetime |
@@ -6995,6 +7601,16 @@ virustotal-report is a MISP object available in JSON format at
|
+
+detection-ratio |
+text |
+ |
+ |
+
@@ -7034,20 +7650,10 @@ vulnerability is a MISP object available in JSON format at text
+summary |
text |
- Description of the vulnerability
- |
- |
-
-
-vulnerable_configuration |
-text |
-
- The vulnerable configuration is described in CPE format
+ Summary of the vulnerability
|
@@ -7064,36 +7670,6 @@ vulnerability is a MISP object available in JSON format at summary |
-text |
-
- Summary of the vulnerability
- |
- |
-
-
-created |
-datetime |
-
- First time when the vulnerability was discovered
- |
- |
-
-
-id |
-vulnerability |
-
- Vulnerability ID (generally CVE, but not necessarely). The id is not required as the object itself has an UUID and the CVE id can updated later.
- |
- |
-
-
references |
link |
|
+text |
+
+ The vulnerable configuration is described in CPE format
+ |
+ |
+
+
+text |
+text |
+
+ Description of the vulnerability
+ |
+ |
+
+
+created |
+datetime |
+
+ First time when the vulnerability was discovered
+ |
+ |
+
+
published |
datetime |
@@ -7123,6 +7729,16 @@ vulnerability is a MISP object available in JSON format at
|
+
+id |
+vulnerability |
+
+ Vulnerability ID (generally CVE, but not necessarely). The id is not required as the object itself has an UUID and the CVE id can updated later.
+ |
+ |
+
@@ -7162,16 +7778,6 @@ whois is a MISP object available in JSON format at text
-text |
- |
- |
-
-
creation-date |
datetime |
@@ -7182,26 +7788,6 @@ whois is a MISP object available in JSON format at registrant-org |
-whois-registrant-org |
-
- Registrant organisation
- |
- |
-
-
-nameserver |
-hostname |
- |
- |
-
-
domain |
domain |
@@ -7212,20 +7798,10 @@ whois is a MISP object available in JSON format at registrant-phone |
-whois-registrant-phone |
+nameserver |
+hostname |
- Registrant phone number
- |
- |
-
-
-expiration-date |
-datetime |
-
- Expiration of the whois entry
+ Nameserver
|
@@ -7242,10 +7818,10 @@ whois is a MISP object available in JSON format at registrar |
-whois-registrar |
+registrant-name |
+whois-registrant-name |
- Registrar of the whois entry
+ Registrant name
|
@@ -7262,10 +7838,50 @@ whois is a MISP object available in JSON format at registrant-name |
-whois-registrant-name |
+expiration-date |
+datetime |
- Registrant name
+ Expiration of the whois entry
+ |
+ |
+
+
+text |
+text |
+ |
+ |
+
+
+registrar |
+whois-registrar |
+
+ Registrar of the whois entry
+ |
+ |
+
+
+registrant-phone |
+whois-registrant-phone |
+
+ Registrant phone number
+ |
+ |
+
+
+registrant-org |
+whois-registrant-org |
+ |
@@ -7310,6 +7926,16 @@ x509 is a MISP object available in JSON format at pubkey-info-size |
+text |
+
+ Length of the public key (in bits)
+ |
+ |
+
+
x509-fingerprint-md5 |
x509-fingerprint-md5 |
|
-x509-fingerprint-sha256 |
-
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
-validity-not-after |
-datetime |
-
- Certificate invalid after that date
- |
- |
-
-
-version |
-text |
-
- Version of the certificate
- |
- |
-
-
-subject |
-text |
-
- Subject of the certificate
- |
- |
-
-
-pubkey-info-modulus |
-text |
-
- Modulus of the public key
- |
- |
-
-
-serial-number |
-text |
-
- Serial number of the certificate
- |
- |
-
-
-validity-not-before |
-datetime |
-
- Certificate invalid before that date
- |
- |
-
-
pubkey-info-exponent |
text |
@@ -7400,40 +7956,30 @@ x509 is a MISP object available in JSON format at text |
-text |
+x509-fingerprint-sha256 |
+x509-fingerprint-sha256 |
- Free text description of hte certificate
+ Secure Hash Algorithm 2 (256 bits)
|
|
-pubkey-info-size |
+version |
text |
- Length of the public key (in bits)
+ Version of the certificate
|
|
-pubkey-info-algorithm |
+pubkey-info-modulus |
text |
- Algorithm of the public key
- |
- |
-
-
-issuer |
-text |
-
- Issuer of the certificate
+ Modulus of the public key
|
@@ -7450,6 +7996,46 @@ x509 is a MISP object available in JSON format at serial-number |
+text |
+
+ Serial number of the certificate
+ |
+ |
+
+
+pubkey-info-algorithm |
+text |
+
+ Algorithm of the public key
+ |
+ |
+
+
+subject |
+text |
+
+ Subject of the certificate
+ |
+ |
+
+
+validity-not-before |
+datetime |
+
+ Certificate invalid before that date
+ |
+ |
+
+
x509-fingerprint-sha1 |
x509-fingerprint-sha1 |
@@ -7459,6 +8045,36 @@ x509 is a MISP object available in JSON format at
|
+
+text |
+text |
+
+ Free text description of hte certificate
+ |
+ |
+
+
+validity-not-after |
+datetime |
+
+ Certificate invalid after that date
+ |
+ |
+
+
+issuer |
+text |
+
+ Issuer of the certificate
+ |
+ |
+
@@ -7498,30 +8114,20 @@ yabin is a MISP object available in JSON format at yara-hunt
-yara |
-
- Wide yara rule generated from -yh.
- |
- |
-
-
-whitelist |
+comment |
comment |
- Whitelist name used to generate the rules.
+ A description of Yara rule generated.
|
|
-comment |
+version |
comment |
- A description of Yara rule generated.
+ yabin.py and regex.txt version used for the generation of the yara rules.
|
@@ -7538,15 +8144,25 @@ yabin is a MISP object available in JSON format at version |
+whitelist |
comment |
- yabin.py and regex.txt version used for the generation of the yara rules.
+ Whitelist name used to generate the rules.
|
|
+
+yara-hunt |
+yara |
+
+ Wide yara rule generated from -yh.
+ |
+ |
+
@@ -7911,7 +8527,7 @@ yabin is a MISP object available in JSON format at
diff --git a/objects.pdf b/objects.pdf
index 0b2c447..8a82127 100755
--- a/objects.pdf
+++ b/objects.pdf
@@ -4,16 +4,16 @@
<< /Title (MISP Objects)
/Creator (Asciidoctor PDF 1.5.0.alpha.16, based on Prawn 2.2.2)
/Producer (Asciidoctor PDF 1.5.0.alpha.16, based on Prawn 2.2.2)
-/ModDate (D:20180206161705+01'00')
-/CreationDate (D:20180206161706+01'00')
+/ModDate (D:20180208115906+01'00')
+/CreationDate (D:20180208115907+01'00')
>>
endobj
2 0 obj
<< /Type /Catalog
/Pages 3 0 R
/Names 16 0 R
-/Outlines 451 0 R
-/PageLabels 509 0 R
+/Outlines 483 0 R
+/PageLabels 545 0 R
/PageMode /UseOutlines
/OpenAction [7 0 R /FitH 842.89]
/ViewerPreferences << /DisplayDocTitle true
@@ -22,8 +22,8 @@ endobj
endobj
3 0 obj
<< /Type /Pages
-/Count 72
-/Kids [7 0 R 10 0 R 12 0 R 14 0 R 24 0 R 33 0 R 40 0 R 45 0 R 47 0 R 58 0 R 49 0 R 51 0 R 53 0 R 69 0 R 71 0 R 79 0 R 86 0 R 91 0 R 96 0 R 101 0 R 107 0 R 111 0 R 113 0 R 115 0 R 120 0 R 122 0 R 124 0 R 129 0 R 136 0 R 139 0 R 144 0 R 148 0 R 153 0 R 161 0 R 168 0 R 176 0 R 179 0 R 187 0 R 192 0 R 197 0 R 199 0 R 204 0 R 209 0 R 216 0 R 221 0 R 226 0 R 228 0 R 233 0 R 235 0 R 240 0 R 242 0 R 247 0 R 253 0 R 255 0 R 263 0 R 268 0 R 273 0 R 278 0 R 280 0 R 288 0 R 293 0 R 295 0 R 300 0 R 306 0 R 311 0 R 316 0 R 321 0 R 327 0 R 332 0 R 334 0 R 336 0 R 338 0 R]
+/Count 78
+/Kids [7 0 R 10 0 R 12 0 R 14 0 R 24 0 R 33 0 R 40 0 R 45 0 R 47 0 R 58 0 R 49 0 R 66 0 R 51 0 R 53 0 R 74 0 R 76 0 R 78 0 R 83 0 R 85 0 R 87 0 R 95 0 R 102 0 R 107 0 R 112 0 R 117 0 R 122 0 R 130 0 R 134 0 R 136 0 R 138 0 R 143 0 R 145 0 R 148 0 R 152 0 R 157 0 R 162 0 R 167 0 R 169 0 R 174 0 R 182 0 R 189 0 R 196 0 R 200 0 R 206 0 R 213 0 R 218 0 R 220 0 R 225 0 R 235 0 R 240 0 R 242 0 R 247 0 R 249 0 R 255 0 R 257 0 R 262 0 R 264 0 R 269 0 R 274 0 R 282 0 R 287 0 R 292 0 R 297 0 R 299 0 R 306 0 R 310 0 R 315 0 R 320 0 R 325 0 R 328 0 R 335 0 R 340 0 R 345 0 R 351 0 R 356 0 R 358 0 R 360 0 R 362 0 R]
>>
endobj
4 0 obj
@@ -86,17 +86,17 @@ endobj
endobj
8 0 obj
<< /Type /Font
-/BaseFont /4a2cc7+NotoSerif
+/BaseFont /9dda7d+NotoSerif
/Subtype /TrueType
-/FontDescriptor 511 0 R
+/FontDescriptor 547 0 R
/FirstChar 32
/LastChar 255
-/Widths 513 0 R
-/ToUnicode 512 0 R
+/Widths 549 0 R
+/ToUnicode 548 0 R
>>
endobj
9 0 obj
-<< /Length 28333
+<< /Length 28318
>>
stream
q
@@ -479,7 +479,7 @@ ET
BT
60.24 585.536 Td
/F1.0 10.5 Tf
-<636f696e2d61646472657373> Tj
+<6361702d616c657274> Tj
ET
0.0 0.0 0.0 SCN
@@ -488,9 +488,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-128.4391 585.536 Td
+107.0611 585.536 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -508,7 +508,7 @@ ET
BT
535.301 585.536 Td
/F1.0 10.5 Tf
-<3132> Tj
+<3131> Tj
ET
0.0 0.0 0.0 SCN
@@ -519,7 +519,7 @@ ET
BT
60.24 567.056 Td
/F1.0 10.5 Tf
-<636f6f6b6965> Tj
+<6361702d696e666f> Tj
ET
0.0 0.0 0.0 SCN
@@ -528,9 +528,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 567.056 Td
+101.7166 567.056 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -548,7 +548,7 @@ ET
BT
535.301 567.056 Td
/F1.0 10.5 Tf
-<3132> Tj
+<3134> Tj
ET
0.0 0.0 0.0 SCN
@@ -559,7 +559,7 @@ ET
BT
60.24 548.576 Td
/F1.0 10.5 Tf
-<63726564656e7469616c> Tj
+<6361702d7265736f75726365> Tj
ET
0.0 0.0 0.0 SCN
@@ -568,9 +568,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 548.576 Td
+128.4391 548.576 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -588,7 +588,7 @@ ET
BT
535.301 548.576 Td
/F1.0 10.5 Tf
-<3133> Tj
+<3137> Tj
ET
0.0 0.0 0.0 SCN
@@ -599,7 +599,7 @@ ET
BT
60.24 530.096 Td
/F1.0 10.5 Tf
-<6372656469742d63617264> Tj
+<636f696e2d61646472657373> Tj
ET
0.0 0.0 0.0 SCN
@@ -608,9 +608,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-117.7501 530.096 Td
+128.4391 530.096 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -628,7 +628,7 @@ ET
BT
535.301 530.096 Td
/F1.0 10.5 Tf
-<3134> Tj
+<3137> Tj
ET
0.0 0.0 0.0 SCN
@@ -639,7 +639,7 @@ ET
BT
60.24 511.616 Td
/F1.0 10.5 Tf
-<64646f73> Tj
+<636f6f6b6965> Tj
ET
0.0 0.0 0.0 SCN
@@ -648,9 +648,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-85.6831 511.616 Td
+96.3721 511.616 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -668,7 +668,7 @@ ET
BT
535.301 511.616 Td
/F1.0 10.5 Tf
-<3135> Tj
+<3138> Tj
ET
0.0 0.0 0.0 SCN
@@ -679,7 +679,7 @@ ET
BT
60.24 493.136 Td
/F1.0 10.5 Tf
-<6469616d657465722d61747461636b> Tj
+<63726564656e7469616c> Tj
ET
0.0 0.0 0.0 SCN
@@ -688,9 +688,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-144.4726 493.136 Td
+112.4056 493.136 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -708,7 +708,7 @@ ET
BT
535.301 493.136 Td
/F1.0 10.5 Tf
-<3136> Tj
+<3139> Tj
ET
0.0 0.0 0.0 SCN
@@ -719,7 +719,7 @@ ET
BT
60.24 474.656 Td
/F1.0 10.5 Tf
-<646f6d61696e2d6970> Tj
+<6372656469742d63617264> Tj
ET
0.0 0.0 0.0 SCN
@@ -728,9 +728,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 474.656 Td
+117.7501 474.656 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -748,7 +748,7 @@ ET
BT
535.301 474.656 Td
/F1.0 10.5 Tf
-<3137> Tj
+<3230> Tj
ET
0.0 0.0 0.0 SCN
@@ -759,7 +759,7 @@ ET
BT
60.24 456.176 Td
/F1.0 10.5 Tf
-<656c66> Tj
+<64646f73> Tj
ET
0.0 0.0 0.0 SCN
@@ -768,9 +768,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-74.9941 456.176 Td
+85.6831 456.176 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -788,7 +788,7 @@ ET
BT
535.301 456.176 Td
/F1.0 10.5 Tf
-<3137> Tj
+<3231> Tj
ET
0.0 0.0 0.0 SCN
@@ -799,7 +799,7 @@ ET
BT
60.24 437.696 Td
/F1.0 10.5 Tf
-<656c662d73656374696f6e> Tj
+<6469616d657465722d61747461636b> Tj
ET
0.0 0.0 0.0 SCN
@@ -808,9 +808,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 437.696 Td
+144.4726 437.696 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -828,7 +828,7 @@ ET
BT
535.301 437.696 Td
/F1.0 10.5 Tf
-<3231> Tj
+<3232> Tj
ET
0.0 0.0 0.0 SCN
@@ -839,7 +839,7 @@ ET
BT
60.24 419.216 Td
/F1.0 10.5 Tf
-<656d61696c> Tj
+<646f6d61696e2d6970> Tj
ET
0.0 0.0 0.0 SCN
@@ -848,9 +848,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 419.216 Td
+112.4056 419.216 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -868,7 +868,7 @@ ET
BT
535.301 419.216 Td
/F1.0 10.5 Tf
-<3234> Tj
+<3233> Tj
ET
0.0 0.0 0.0 SCN
@@ -879,7 +879,7 @@ ET
BT
60.24 400.736 Td
/F1.0 10.5 Tf
-<66696c65> Tj
+<656c66> Tj
ET
0.0 0.0 0.0 SCN
@@ -888,9 +888,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 400.736 Td
+74.9941 400.736 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -908,7 +908,7 @@ ET
BT
535.301 400.736 Td
/F1.0 10.5 Tf
-<3235> Tj
+<3233> Tj
ET
0.0 0.0 0.0 SCN
@@ -919,7 +919,7 @@ ET
BT
60.24 382.256 Td
/F1.0 10.5 Tf
-<67656f6c6f636174696f6e> Tj
+<656c662d73656374696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -928,9 +928,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 382.256 Td
+112.4056 382.256 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -948,7 +948,7 @@ ET
BT
535.301 382.256 Td
/F1.0 10.5 Tf
-<3236> Tj
+<3237> Tj
ET
0.0 0.0 0.0 SCN
@@ -959,7 +959,7 @@ ET
BT
60.24 363.776 Td
/F1.0 10.5 Tf
-<6774702d61747461636b> Tj
+<656d61696c> Tj
ET
0.0 0.0 0.0 SCN
@@ -968,9 +968,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 363.776 Td
+91.0276 363.776 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -988,7 +988,7 @@ ET
BT
535.301 363.776 Td
/F1.0 10.5 Tf
-<3237> Tj
+<3239> Tj
ET
0.0 0.0 0.0 SCN
@@ -999,7 +999,7 @@ ET
BT
60.24 345.296 Td
/F1.0 10.5 Tf
-<687474702d72657175657374> Tj
+<66696c65> Tj
ET
0.0 0.0 0.0 SCN
@@ -1008,9 +1008,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 345.296 Td
+80.3386 345.296 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1028,7 +1028,7 @@ ET
BT
535.301 345.296 Td
/F1.0 10.5 Tf
-<3239> Tj
+<3331> Tj
ET
0.0 0.0 0.0 SCN
@@ -1039,7 +1039,7 @@ ET
BT
60.24 326.816 Td
/F1.0 10.5 Tf
-<69702d706f7274> Tj
+<67656f6c6f636174696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1048,9 +1048,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 326.816 Td
+123.0946 326.816 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1068,7 +1068,7 @@ ET
BT
535.301 326.816 Td
/F1.0 10.5 Tf
-<3330> Tj
+<3332> Tj
ET
0.0 0.0 0.0 SCN
@@ -1079,7 +1079,7 @@ ET
BT
60.24 308.336 Td
/F1.0 10.5 Tf
-<6a6133> Tj
+<6774702d61747461636b> Tj
ET
0.0 0.0 0.0 SCN
@@ -1088,9 +1088,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 308.336 Td
+112.4056 308.336 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1108,7 +1108,7 @@ ET
BT
535.301 308.336 Td
/F1.0 10.5 Tf
-<3330> Tj
+<3333> Tj
ET
0.0 0.0 0.0 SCN
@@ -1119,7 +1119,7 @@ ET
BT
60.24 289.856 Td
/F1.0 10.5 Tf
-<6c6567616c2d656e74697479> Tj
+<687474702d72657175657374> Tj
ET
0.0 0.0 0.0 SCN
@@ -1128,9 +1128,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-117.7501 289.856 Td
+123.0946 289.856 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1148,7 +1148,7 @@ ET
BT
535.301 289.856 Td
/F1.0 10.5 Tf
-<3331> Tj
+<3335> Tj
ET
0.0 0.0 0.0 SCN
@@ -1159,7 +1159,7 @@ ET
BT
60.24 271.376 Td
/F1.0 10.5 Tf
-<6d6163686f> Tj
+<69702d706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -1188,7 +1188,7 @@ ET
BT
535.301 271.376 Td
/F1.0 10.5 Tf
-<3332> Tj
+<3336> Tj
ET
0.0 0.0 0.0 SCN
@@ -1199,7 +1199,7 @@ ET
BT
60.24 252.896 Td
/F1.0 10.5 Tf
-<6d6163686f2d73656374696f6e> Tj
+<6a6133> Tj
ET
0.0 0.0 0.0 SCN
@@ -1208,9 +1208,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-133.7836 252.896 Td
+80.3386 252.896 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1228,7 +1228,7 @@ ET
BT
535.301 252.896 Td
/F1.0 10.5 Tf
-<3332> Tj
+<3336> Tj
ET
0.0 0.0 0.0 SCN
@@ -1239,7 +1239,7 @@ ET
BT
60.24 234.416 Td
/F1.0 10.5 Tf
-<6d6963726f626c6f67> Tj
+<6c6567616c2d656e74697479> Tj
ET
0.0 0.0 0.0 SCN
@@ -1248,9 +1248,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 234.416 Td
+117.7501 234.416 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1268,7 +1268,7 @@ ET
BT
535.301 234.416 Td
/F1.0 10.5 Tf
-<3333> Tj
+<3337> Tj
ET
0.0 0.0 0.0 SCN
@@ -1279,7 +1279,7 @@ ET
BT
60.24 215.936 Td
/F1.0 10.5 Tf
-<6d75746578> Tj
+<6d6163686f> Tj
ET
0.0 0.0 0.0 SCN
@@ -1308,7 +1308,7 @@ ET
BT
535.301 215.936 Td
/F1.0 10.5 Tf
-<3334> Tj
+<3338> Tj
ET
0.0 0.0 0.0 SCN
@@ -1319,7 +1319,7 @@ ET
BT
60.24 197.456 Td
/F1.0 10.5 Tf
-<6e6574666c6f77> Tj
+<6d6163686f2d73656374696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1328,9 +1328,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-101.7166 197.456 Td
+133.7836 197.456 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1348,7 +1348,7 @@ ET
BT
535.301 197.456 Td
/F1.0 10.5 Tf
-<3335> Tj
+<3338> Tj
ET
0.0 0.0 0.0 SCN
@@ -1359,7 +1359,7 @@ ET
BT
60.24 178.976 Td
/F1.0 10.5 Tf
-<706173736976652d646e73> Tj
+<6d6963726f626c6f67> Tj
ET
0.0 0.0 0.0 SCN
@@ -1368,9 +1368,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 178.976 Td
+112.4056 178.976 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1388,7 +1388,7 @@ ET
BT
535.301 178.976 Td
/F1.0 10.5 Tf
-<3336> Tj
+<3430> Tj
ET
0.0 0.0 0.0 SCN
@@ -1399,7 +1399,7 @@ ET
BT
60.24 160.496 Td
/F1.0 10.5 Tf
-<7061737465> Tj
+<6d75746578> Tj
ET
0.0 0.0 0.0 SCN
@@ -1408,9 +1408,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 160.496 Td
+96.3721 160.496 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1428,7 +1428,7 @@ ET
BT
535.301 160.496 Td
/F1.0 10.5 Tf
-<3338> Tj
+<3430> Tj
ET
0.0 0.0 0.0 SCN
@@ -1439,7 +1439,7 @@ ET
BT
60.24 142.016 Td
/F1.0 10.5 Tf
-<7065> Tj
+<6e6574666c6f77> Tj
ET
0.0 0.0 0.0 SCN
@@ -1448,9 +1448,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-74.9941 142.016 Td
+101.7166 142.016 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1468,7 +1468,7 @@ ET
BT
535.301 142.016 Td
/F1.0 10.5 Tf
-<3339> Tj
+<3431> Tj
ET
0.0 0.0 0.0 SCN
@@ -1479,7 +1479,7 @@ ET
BT
60.24 123.536 Td
/F1.0 10.5 Tf
-<70652d73656374696f6e> Tj
+<706173736976652d646e73> Tj
ET
0.0 0.0 0.0 SCN
@@ -1488,9 +1488,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 123.536 Td
+123.0946 123.536 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1508,7 +1508,7 @@ ET
BT
535.301 123.536 Td
/F1.0 10.5 Tf
-<3431> Tj
+<3432> Tj
ET
0.0 0.0 0.0 SCN
@@ -1519,7 +1519,7 @@ ET
BT
60.24 105.056 Td
/F1.0 10.5 Tf
-<706572736f6e> Tj
+<7061737465> Tj
ET
0.0 0.0 0.0 SCN
@@ -1528,9 +1528,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 105.056 Td
+91.0276 105.056 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1548,7 +1548,7 @@ ET
BT
535.301 105.056 Td
/F1.0 10.5 Tf
-<3432> Tj
+<3434> Tj
ET
0.0 0.0 0.0 SCN
@@ -1559,7 +1559,7 @@ ET
BT
60.24 86.576 Td
/F1.0 10.5 Tf
-<70686f6e65> Tj
+<7065> Tj
ET
0.0 0.0 0.0 SCN
@@ -1568,9 +1568,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 86.576 Td
+74.9941 86.576 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1588,7 +1588,7 @@ ET
BT
535.301 86.576 Td
/F1.0 10.5 Tf
-<3434> Tj
+<3435> Tj
ET
0.0 0.0 0.0 SCN
@@ -1599,7 +1599,7 @@ ET
BT
60.24 68.096 Td
/F1.0 10.5 Tf
-[<72326772> 20.0195 <617068697479>] TJ
+<70652d73656374696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1608,9 +1608,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-117.7501 68.096 Td
+112.4056 68.096 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1651,11 +1651,11 @@ endobj
/F1.0 8 0 R
>>
>>
-/Annots [339 0 R 340 0 R 341 0 R 342 0 R 343 0 R 344 0 R 345 0 R 346 0 R 347 0 R 348 0 R 349 0 R 350 0 R 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R 359 0 R 360 0 R 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R 373 0 R 374 0 R 375 0 R 376 0 R 377 0 R 378 0 R 379 0 R 380 0 R 381 0 R 382 0 R 383 0 R 384 0 R 385 0 R 386 0 R 387 0 R 388 0 R 389 0 R 390 0 R 391 0 R 392 0 R 393 0 R 394 0 R 395 0 R 396 0 R 397 0 R 398 0 R 399 0 R 400 0 R 401 0 R 402 0 R 403 0 R 404 0 R 405 0 R 406 0 R 407 0 R 408 0 R 409 0 R 410 0 R 411 0 R 412 0 R 413 0 R 414 0 R]
+/Annots [363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R 373 0 R 374 0 R 375 0 R 376 0 R 377 0 R 378 0 R 379 0 R 380 0 R 381 0 R 382 0 R 383 0 R 384 0 R 385 0 R 386 0 R 387 0 R 388 0 R 389 0 R 390 0 R 391 0 R 392 0 R 393 0 R 394 0 R 395 0 R 396 0 R 397 0 R 398 0 R 399 0 R 400 0 R 401 0 R 402 0 R 403 0 R 404 0 R 405 0 R 406 0 R 407 0 R 408 0 R 409 0 R 410 0 R 411 0 R 412 0 R 413 0 R 414 0 R 415 0 R 416 0 R 417 0 R 418 0 R 419 0 R 420 0 R 421 0 R 422 0 R 423 0 R 424 0 R 425 0 R 426 0 R 427 0 R 428 0 R 429 0 R 430 0 R 431 0 R 432 0 R 433 0 R 434 0 R 435 0 R 436 0 R 437 0 R 438 0 R]
>>
endobj
11 0 obj
-<< /Length 12653
+<< /Length 15641
>>
stream
q
@@ -1667,7 +1667,7 @@ q
BT
60.24 794.676 Td
/F1.0 10.5 Tf
-<726567657870> Tj
+<706572736f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1707,7 +1707,7 @@ ET
BT
60.24 776.196 Td
/F1.0 10.5 Tf
-[<72656769737472792d6b> 20.0195 <6579>] TJ
+<70686f6e65> Tj
ET
0.0 0.0 0.0 SCN
@@ -1716,9 +1716,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 776.196 Td
+96.3721 776.196 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1736,7 +1736,7 @@ ET
BT
535.301 776.196 Td
/F1.0 10.5 Tf
-<3439> Tj
+<3530> Tj
ET
0.0 0.0 0.0 SCN
@@ -1747,7 +1747,7 @@ ET
BT
60.24 757.716 Td
/F1.0 10.5 Tf
-<7265706f7274> Tj
+[<72326772> 20.0195 <617068697479>] TJ
ET
0.0 0.0 0.0 SCN
@@ -1756,9 +1756,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 757.716 Td
+117.7501 757.716 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1776,7 +1776,7 @@ ET
BT
535.301 757.716 Td
/F1.0 10.5 Tf
-<3531> Tj
+<3532> Tj
ET
0.0 0.0 0.0 SCN
@@ -1787,7 +1787,7 @@ ET
BT
60.24 739.236 Td
/F1.0 10.5 Tf
-<72746972> Tj
+<726567657870> Tj
ET
0.0 0.0 0.0 SCN
@@ -1796,9 +1796,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 739.236 Td
+96.3721 739.236 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1816,7 +1816,7 @@ ET
BT
535.301 739.236 Td
/F1.0 10.5 Tf
-<3531> Tj
+<3534> Tj
ET
0.0 0.0 0.0 SCN
@@ -1827,7 +1827,7 @@ ET
BT
60.24 720.756 Td
/F1.0 10.5 Tf
-<73616e64626f782d7265706f7274> Tj
+[<72656769737472792d6b> 20.0195 <6579>] TJ
ET
0.0 0.0 0.0 SCN
@@ -1836,9 +1836,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-139.1281 720.756 Td
+123.0946 720.756 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1856,7 +1856,7 @@ ET
BT
535.301 720.756 Td
/F1.0 10.5 Tf
-<3532> Tj
+<3535> Tj
ET
0.0 0.0 0.0 SCN
@@ -1867,7 +1867,7 @@ ET
BT
60.24 702.276 Td
/F1.0 10.5 Tf
-<73622d7369676e6174757265> Tj
+<7265706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -1876,9 +1876,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 702.276 Td
+96.3721 702.276 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1896,7 +1896,7 @@ ET
BT
535.301 702.276 Td
/F1.0 10.5 Tf
-<3533> Tj
+<3536> Tj
ET
0.0 0.0 0.0 SCN
@@ -1907,7 +1907,7 @@ ET
BT
60.24 683.796 Td
/F1.0 10.5 Tf
-<7373372d61747461636b> Tj
+<72746972> Tj
ET
0.0 0.0 0.0 SCN
@@ -1916,9 +1916,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 683.796 Td
+80.3386 683.796 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1936,7 +1936,7 @@ ET
BT
535.301 683.796 Td
/F1.0 10.5 Tf
-<3534> Tj
+<3536> Tj
ET
0.0 0.0 0.0 SCN
@@ -1947,7 +1947,7 @@ ET
BT
60.24 665.316 Td
/F1.0 10.5 Tf
-<73746978322d7061747465726e> Tj
+<73616e64626f782d7265706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -1956,9 +1956,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-128.4391 665.316 Td
+139.1281 665.316 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1976,7 +1976,7 @@ ET
BT
535.301 665.316 Td
/F1.0 10.5 Tf
-<3536> Tj
+<3537> Tj
ET
0.0 0.0 0.0 SCN
@@ -1987,7 +1987,7 @@ ET
BT
60.24 646.836 Td
/F1.0 10.5 Tf
-<746f722d6e6f6465> Tj
+<73622d7369676e6174757265> Tj
ET
0.0 0.0 0.0 SCN
@@ -1996,9 +1996,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-107.0611 646.836 Td
+123.0946 646.836 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2016,7 +2016,7 @@ ET
BT
535.301 646.836 Td
/F1.0 10.5 Tf
-<3536> Tj
+<3538> Tj
ET
0.0 0.0 0.0 SCN
@@ -2027,7 +2027,7 @@ ET
BT
60.24 628.356 Td
/F1.0 10.5 Tf
-<75726c> Tj
+<7373372d61747461636b> Tj
ET
0.0 0.0 0.0 SCN
@@ -2036,9 +2036,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 628.356 Td
+112.4056 628.356 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2056,7 +2056,7 @@ ET
BT
535.301 628.356 Td
/F1.0 10.5 Tf
-<3537> Tj
+<3539> Tj
ET
0.0 0.0 0.0 SCN
@@ -2067,7 +2067,7 @@ ET
BT
60.24 609.876 Td
/F1.0 10.5 Tf
-<76696374696d> Tj
+<73746978322d7061747465726e> Tj
ET
0.0 0.0 0.0 SCN
@@ -2076,9 +2076,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 609.876 Td
+128.4391 609.876 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2096,7 +2096,7 @@ ET
BT
535.301 609.876 Td
/F1.0 10.5 Tf
-<3539> Tj
+<3631> Tj
ET
0.0 0.0 0.0 SCN
@@ -2107,7 +2107,7 @@ ET
BT
60.24 591.396 Td
/F1.0 10.5 Tf
-<7669727573746f74616c2d7265706f7274> Tj
+<746f722d6e6f6465> Tj
ET
0.0 0.0 0.0 SCN
@@ -2116,9 +2116,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-144.4726 591.396 Td
+107.0611 591.396 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2136,7 +2136,7 @@ ET
BT
535.301 591.396 Td
/F1.0 10.5 Tf
-<3630> Tj
+<3631> Tj
ET
0.0 0.0 0.0 SCN
@@ -2147,7 +2147,7 @@ ET
BT
60.24 572.916 Td
/F1.0 10.5 Tf
-[<76756c6e6572> 20.0195 <6162696c697479>] TJ
+[<7472> 20.0195 <616e73616374696f6e>] TJ
ET
0.0 0.0 0.0 SCN
@@ -2156,9 +2156,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-128.4391 572.916 Td
+117.7501 572.916 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2176,7 +2176,7 @@ ET
BT
535.301 572.916 Td
/F1.0 10.5 Tf
-<3631> Tj
+<3633> Tj
ET
0.0 0.0 0.0 SCN
@@ -2187,7 +2187,7 @@ ET
BT
60.24 554.436 Td
/F1.0 10.5 Tf
-<77686f6973> Tj
+<75726c> Tj
ET
0.0 0.0 0.0 SCN
@@ -2196,9 +2196,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 554.436 Td
+80.3386 554.436 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2216,7 +2216,7 @@ ET
BT
535.301 554.436 Td
/F1.0 10.5 Tf
-<3632> Tj
+<3634> Tj
ET
0.0 0.0 0.0 SCN
@@ -2227,7 +2227,7 @@ ET
BT
60.24 535.956 Td
/F1.0 10.5 Tf
-<78353039> Tj
+<76696374696d> Tj
ET
0.0 0.0 0.0 SCN
@@ -2236,9 +2236,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-85.6831 535.956 Td
+96.3721 535.956 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2256,7 +2256,7 @@ ET
BT
535.301 535.956 Td
/F1.0 10.5 Tf
-<3633> Tj
+<3635> Tj
ET
0.0 0.0 0.0 SCN
@@ -2267,7 +2267,7 @@ ET
BT
60.24 517.476 Td
/F1.0 10.5 Tf
-<796162696e> Tj
+<7669727573746f74616c2d7265706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -2276,9 +2276,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 517.476 Td
+144.4726 517.476 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2296,7 +2296,7 @@ ET
BT
535.301 517.476 Td
/F1.0 10.5 Tf
-<3634> Tj
+<3636> Tj
ET
0.0 0.0 0.0 SCN
@@ -2307,7 +2307,7 @@ ET
BT
60.24 498.996 Td
/F1.0 10.5 Tf
-<52656c6174696f6e7368697073> Tj
+[<76756c6e6572> 20.0195 <6162696c697479>] TJ
ET
0.0 0.0 0.0 SCN
@@ -2336,7 +2336,167 @@ ET
BT
535.301 498.996 Td
/F1.0 10.5 Tf
-<3635> Tj
+<3637> Tj
+ET
+
+0.0 0.0 0.0 SCN
+0.0 0.0 0.0 scn
+0.2 0.2 0.2 scn
+0.2 0.2 0.2 SCN
+
+BT
+60.24 480.516 Td
+/F1.0 10.5 Tf
+<77686f6973> Tj
+ET
+
+0.0 0.0 0.0 SCN
+0.0 0.0 0.0 scn
+0.6627 0.6627 0.6627 scn
+0.6627 0.6627 0.6627 SCN
+
+BT
+91.0276 480.516 Td
+/F1.0 10.5 Tf
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+ET
+
+0.0 0.0 0.0 SCN
+0.0 0.0 0.0 scn
+
+BT
+534.6211 480.516 Td
+/F1.0 2.625 Tf
+