diff --git a/objects.html b/objects.html
index 88ae11a..42cee29 100755
--- a/objects.html
+++ b/objects.html
@@ -444,6 +444,7 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
annotation
asn
av-signature
+bank-account
coin-address
cookie
credential
@@ -477,6 +478,7 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
report
rtir
sandbox-report
+sb-signature
ss7-attack
stix2-pattern
tor-node
@@ -565,20 +567,10 @@ ail-leak is a MISP object available in JSON format at sensor
+type |
text |
- The AIL sensor uuid where the leak was processed and analysed.
- |
- |
-
-
-duplicate |
-text |
-
- Duplicate of the existing leaks.
+ Type of information leak as discovered and classified by an AIL module. ['Credential', 'CreditCards', 'Mail', 'Onion', 'Phone', 'Keys']
|
@@ -595,30 +587,10 @@ ail-leak is a MISP object available in JSON format at first-seen |
-datetime |
+raw-data |
+attachment |
- When the leak has been accessible or seen for the first time.
- |
- |
-
-
-text |
-text |
-
- A description of the leak which could include the potential victim(s) or description of the leak.
- |
- |
-
-
-original-date |
-datetime |
-
- When the information available in the leak was created. It’s usually before the first-seen.
+ Raw data as received by the AIL sensor compressed and encoded in Base64.
|
@@ -635,6 +607,36 @@ ail-leak is a MISP object available in JSON format at text |
+text |
+
+ A description of the leak which could include the potential victim(s) or description of the leak.
+ |
+ |
+
+
+sensor |
+text |
+
+ The AIL sensor uuid where the leak was processed and analysed.
+ |
+ |
+
+
+original-date |
+datetime |
+
+ When the information available in the leak was created. It’s usually before the first-seen.
+ |
+ |
+
+
origin |
text |
@@ -645,25 +647,25 @@ ail-leak is a MISP object available in JSON format at type |
-text |
+first-seen |
+datetime |
- Type of information leak as discovered and classified by an AIL module. ['Credential', 'CreditCards', 'Mail', 'Onion', 'Phone', 'Keys']
- |
- |
-
-
-raw-data |
-attachment |
-
- Raw data as received by the AIL sensor compressed and encoded in Base64.
+ When the leak has been accessible or seen for the first time.
|
|
+
+duplicate |
+text |
+
+ Duplicate of the existing leaks.
+ |
+ |
+
@@ -771,26 +773,6 @@ annotation is a MISP object available in JSON format at creation-date
-datetime |
-
- Initial creation of the annotation
- |
- |
-
-
-format |
-text |
-
- Format of the annotation ['text', 'markdown', 'asciidoctor', 'MultiMarkdown', 'GFM', 'pandoc', 'Fountain', 'CommonWork', 'kramdown-rfc2629', 'rfc7328', 'Extra']
- |
- |
-
-
modification-date |
datetime |
@@ -801,16 +783,6 @@ annotation is a MISP object available in JSON format at ref |
-link |
-
- Reference(s) to the annotation
- |
- |
-
-
type |
text |
@@ -820,6 +792,36 @@ annotation is a MISP object available in JSON format at
|
+
+format |
+text |
+
+ Format of the annotation ['text', 'markdown', 'asciidoctor', 'MultiMarkdown', 'GFM', 'pandoc', 'Fountain', 'CommonWork', 'kramdown-rfc2629', 'rfc7328', 'Extra']
+ |
+ |
+
+
+ref |
+link |
+
+ Reference(s) to the annotation
+ |
+ |
+
+
+creation-date |
+datetime |
+
+ Initial creation of the annotation
+ |
+ |
+
@@ -859,40 +861,10 @@ asn is a MISP object available in JSON format at first-seen
-datetime |
+asn |
+AS |
- First time the ASN was seen
- |
- |
-
-
-description |
-text |
-
- Description of the autonomous system
- |
- |
-
-
-export |
-text |
-
- The outbound routing policy of the AS in RFC 2622 – Routing Policy Specification Language (RPSL) format
- |
- |
-
-
-import |
-text |
-
- The inbound IPv4 routing policy of the AS in RFC 2622 – Routing Policy Specification Language (RPSL) format
+ Autonomous System Number
|
@@ -909,20 +881,20 @@ asn is a MISP object available in JSON format at mp-export |
-text |
+subnet-announced |
+ip-src |
- This attribute performs the same function as the export attribute above. The difference is that mp-export allows both IPv4 and IPv6 address families to be specified. The export is described in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
+ Subnet announced
|
|
-asn |
-AS |
+export |
+text |
- Autonomous System Number
+ The outbound routing policy of the AS in RFC 2622 – Routing Policy Specification Language (RPSL) format
|
@@ -939,20 +911,50 @@ asn is a MISP object available in JSON format at mp-import |
+description |
text |
- The inbound IPv4 or IPv6 routing policy of the AS in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
+ Description of the autonomous system
|
|
-subnet-announced |
-ip-src |
+mp-export |
+text |
- Subnet announced
+ This attribute performs the same function as the export attribute above. The difference is that mp-export allows both IPv4 and IPv6 address families to be specified. The export is described in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ First time the ASN was seen
+ |
+ |
+
+
+import |
+text |
+
+ The inbound IPv4 routing policy of the AS in RFC 2622 – Routing Policy Specification Language (RPSL) format
+ |
+ |
+
+
+mp-import |
+text |
+
+ The inbound IPv4 or IPv6 routing policy of the AS in RFC 4012 – Routing Policy Specification Language next generation (RPSLng), section 4.5. format
|
@@ -997,6 +999,26 @@ av-signature is a MISP object available in JSON format at text |
+text |
+
+ Free text value to attach to the file
+ |
+ |
+
+
+datetime |
+datetime |
+ |
+ |
+
+
signature |
text |
@@ -1016,11 +1038,49 @@ av-signature is a MISP object available in JSON format at
|
+
+
+
+
+
+
+
+
+
An object describing bank account information based on account description from goAML 4.0..
+
+
+
-datetime |
-datetime |
+
+
+ |
+
+bank-account is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP.
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+| Object attribute |
+MISP attribute type |
+Description |
+Disable correlation |
+
+
+
+
+branch |
+text |
- Datetime
+ Branch code or name
|
@@ -1030,7 +1090,187 @@ av-signature is a MISP object available in JSON format at text |
text |
- Free text value to attach to the file
+ A description of the bank account.
+ |
+ |
+
+
+institution-code |
+text |
+
+ Name of the bank or financial organisation.
+ |
+ |
+
+
+iban |
+iban |
+
+ IBAN of the bank account.
+ |
+ |
+
+
+account-name |
+text |
+
+ A field to freely describe the bank account details.
+ |
+ |
+
+
+date-balance |
+datetime |
+
+ When the balance was reported.
+ |
+ |
+
+
+personal-account-type |
+text |
+
+ Account type. ['A - Business', 'B - Personal Current', 'C - Savings', 'D - Trust Account', 'E - Trading Account', 'O - Other']
+ |
+ |
+
+
+comments |
+text |
+
+ Comments about the bank account.
+ |
+ |
+
+
+beneficiary |
+text |
+
+ Final beneficiary of the bank account.
+ |
+ |
+
+
+account |
+bank-account-nr |
+ |
+ |
+
+
+status-code |
+text |
+
+ Account status at the time of the transaction processed. ['A - Active', 'B - Inactive', 'C - Dormant']
+ |
+ |
+
+
+report-code |
+text |
+
+ Report code of the bank account. ['CTR Cash Transaction Report', 'STR Suspicious Transaction Report', 'EFT Electronic Funds Transfer', 'IFT International Funds Transfer', 'TFR Terror Financing Report', 'BCR Border Cash Report', 'UTR Unusual Transaction Report', 'AIF Additional Information File – Can be used for example to get full disclosure of transactions of an account for a period of time without reporting it as a CTR.', 'IRI Incoming Request for Information – International', 'ORI Outgoing Request for Information – International', 'IRD Incoming Request for Information – Domestic', 'ORD Outgoing Request for Information – Domestic']
+ |
+ |
+
+
+swift |
+bic |
+
+ SWIFT or BIC as defined in ISO 9362.
+ |
+ |
+
+
+currency-code |
+text |
+
+ Currency of the account. ['USD', 'EUR']
+ |
+ |
+
+
+balance |
+text |
+
+ The balance of the account after the suspicious transaction was processed.
+ |
+ |
+
+
+opened |
+datetime |
+
+ When the account was opened.
+ |
+ |
+
+
+beneficiary-comment |
+text |
+
+ Comment about the final beneficiary.
+ |
+ |
+
+
+closed |
+datetime |
+
+ When the account was closed.
+ |
+ |
+
+
+client-_number |
+text |
+
+ Client number as seen by the bank.
+ |
+ |
+
+
+non-banking-institution |
+boolean |
+
+ A flag to define if this account belong to a non-banking organisation. If set to true, it’s a non-banking organisation.
|
@@ -1075,20 +1315,30 @@ coin-address is a MISP object available in JSON format at first-seen |
-datetime |
+text |
+text |
- First time this payment destination address has been seen
+ Free text value
|
|
-text |
-text |
+address |
+btc |
- Free text value
+ Address used as a payment destination in a cryptocurrency
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ First time this payment destination address has been seen
|
@@ -1114,16 +1364,6 @@ coin-address is a MISP object available in JSON format at
|
-
-address |
-btc |
-
- Address used as a payment destination in a cryptocurrency
- |
- |
-
@@ -1183,10 +1423,10 @@ cookie is a MISP object available in JSON format at
cookie
-cookie |
+
cookie-value |
+
text |
- Full cookie
+ Value of the cookie (if splitted)
|
@@ -1203,10 +1443,10 @@ cookie is a MISP object available in JSON format at cookie-value |
-
text |
+
cookie |
+
cookie |
- Value of the cookie (if splitted)
+ Full cookie
|
@@ -1251,16 +1491,6 @@ credential is a MISP object available in JSON format at text |
-
text |
-
- A description of the credential(s)
- |
-
|
-
-
username |
text |
@@ -1271,20 +1501,20 @@ credential is a MISP object available in JSON format at format |
+text |
text |
- Format of the password(s) ['clear-text', 'hashed', 'encrypted', 'unknown']
+ A description of the credential(s)
|
|
-notification |
+password |
text |
- Mention of any notification(s) towards the potential owner(s) of the credential(s) ['victim-notified', 'service-notified', 'none']
+ Password
|
@@ -1311,10 +1541,20 @@ credential is a MISP object available in JSON format at password |
+format |
text |
- Password
+ Format of the password(s) ['clear-text', 'hashed', 'encrypted', 'unknown']
+ |
+ |
+
+
+notification |
+text |
+
+ Mention of any notification(s) towards the potential owner(s) of the credential(s) ['victim-notified', 'service-notified', 'none']
|
@@ -1369,6 +1609,26 @@ credit-card is a MISP object available in JSON format at expiration |
+datetime |
+
+ Maximum date of validity
+ |
+ |
+
+
+comment |
+comment |
+
+ A description of the card.
+ |
+ |
+
+
version |
text |
@@ -1399,16 +1659,6 @@ credit-card is a MISP object available in JSON format at expiration |
-datetime |
-
- Maximum date of validity
- |
- |
-
-
cc-number |
cc-number |
@@ -1418,16 +1668,6 @@ credit-card is a MISP object available in JSON format at
|
-
-comment |
-comment |
-
- A description of the card.
- |
- |
-
ip-dst
+ip-dst |
+
+ Destination IP (victim)
+ |
+ |
+
+
+ip-src |
+ip-src |
+
+ IP address originating the attack
+ |
+ |
+
+
+protocol |
+text |
+
+ Protocol used for the attack ['TCP', 'UDP', 'ICMP', 'IP']
+ |
+ |
+
+
+dst-port |
+port |
+
+ Destination port of the attack
+ |
+ |
+
+
first-seen |
datetime |
@@ -1487,16 +1767,6 @@ ddos is a MISP object available in JSON format at src-port |
-port |
-
- Port originating the attack
- |
- |
-
-
total-pps |
counter |
@@ -1517,6 +1787,16 @@ ddos is a MISP object available in JSON format at src-port |
+port |
+
+ Port originating the attack
+ |
+ |
+
+
domain-dst |
domain |
@@ -1536,46 +1816,6 @@ ddos is a MISP object available in JSON format at
|
-
-protocol |
-text |
-
- Protocol used for the attack ['TCP', 'UDP', 'ICMP', 'IP']
- |
- |
-
-
-ip-dst |
-ip-dst |
-
- Destination IP (victim)
- |
- |
-
-
-ip-src |
-ip-src |
-
- IP address originating the attack
- |
- |
-
-
-dst-port |
-port |
-
- Destination port of the attack
- |
- |
-
@@ -1615,16 +1855,6 @@ diameter-attack is a MISP object available in JSON format at Origin-Realm
-text |
- |
- |
-
-
text |
text |
@@ -1635,6 +1865,36 @@ diameter-attack is a MISP object available in JSON format at Destination-Realm |
+text |
+ |
+ |
+
+
+Destination-Host |
+text |
+ |
+ |
+
+
+Origin-Realm |
+text |
+ |
+ |
+
+
IdrFlags |
text |
@@ -1645,13 +1905,13 @@ diameter-attack is a MISP object available in JSON format at Username |
-text |
+first-seen |
+datetime |
- Username (in this case, usually the IMSI).
+ When the attack has been seen for the first time.
|
|
@@ -1665,26 +1925,6 @@ diameter-attack is a MISP object available in JSON format at SessionId
-text |
- |
- |
-
-
-first-seen |
-datetime |
-
- When the attack has been seen for the first time.
- |
- |
-
-
Origin-Host |
text |
@@ -1705,26 +1945,6 @@ diameter-attack is a MISP object available in JSON format at Destination-Host |
-text |
- |
- |
-
-
-Destination-Realm |
-text |
- |
- |
-
-
category |
text |
@@ -1734,6 +1954,26 @@ diameter-attack is a MISP object available in JSON format at
|
+
+SessionId |
+text |
+ |
+ |
+
+
+Username |
+text |
+
+ Username (in this case, usually the IMSI).
+ |
+ |
+
@@ -1773,6 +2013,16 @@ domain-ip is a MISP object available in JSON format at ip
+ip-dst |
+ |
+ |
+
+
text |
text |
@@ -1812,16 +2062,6 @@ domain-ip is a MISP object available in JSON format at
|
-
-ip |
-ip-dst |
- |
- |
-
@@ -1861,6 +2101,16 @@ elf is a MISP object available in JSON format at arch
+text |
+
+ Architecture of the ELF file ['None', 'M32', 'SPARC', 'i386', 'ARCH_68K', 'ARCH_88K', 'IAMCU', 'ARCH_860', 'MIPS', 'S370', 'MIPS_RS3_LE', 'PARISC', 'VPP500', 'SPARC32PLUS', 'ARCH_960', 'PPC', 'PPC64', 'S390', 'SPU', 'V800', 'FR20', 'RH32', 'RCE', 'ARM', 'ALPHA', 'SH', 'SPARCV9', 'TRICORE', 'ARC', 'H8_300', 'H8_300H', 'H8S', 'H8_500', 'IA_64', 'MIPS_X', 'COLDFIRE', 'ARCH_68HC12', 'MMA', 'PCP', 'NCPU', 'NDR1', 'STARCORE', 'ME16', 'ST100', 'TINYJ', 'x86_64', 'PDSP', 'PDP10', 'PDP11', 'FX66', 'ST9PLUS', 'ST7', 'ARCH_68HC16', 'ARCH_68HC11', 'ARCH_68HC08', 'ARCH_68HC05', 'SVX', 'ST19', 'VAX', 'CRIS', 'JAVELIN', 'FIREPATH', 'ZSP', 'MMIX', 'HUANY', 'PRISM', 'AVR', 'FR30', 'D10V', 'D30V', 'V850', 'M32R', 'MN10300', 'MN10200', 'PJ', 'OPENRISC', 'ARC_COMPACT', 'XTENSA', 'VIDEOCORE', 'TMM_GPP', 'NS32K', 'TPC', 'SNP1K', 'ST200', 'IP2K', 'MAX', 'CR', 'F2MC16', 'MSP430', 'BLACKFIN', 'SE_C33', 'SEP', 'ARCA', 'UNICORE', 'EXCESS', 'DXP', 'ALTERA_NIOS2', 'CRX', 'XGATE', 'C166', 'M16C', 'DSPIC30F', 'CE', 'M32C', 'TSK3000', 'RS08', 'SHARC', 'ECOG2', 'SCORE7', 'DSP24', 'VIDEOCORE3', 'LATTICEMICO32', 'SE_C17', 'TI_C6000', 'TI_C2000', 'TI_C5500', 'MMDSP_PLUS', 'CYPRESS_M8C', 'R32C', 'TRIMEDIA', 'HEXAGON', 'ARCH_8051', 'STXP7X', 'NDS32', 'ECOG1', 'ECOG1X', 'MAXQ30', 'XIMO16', 'MANIK', 'CRAYNV2', 'RX', 'METAG', 'MCST_ELBRUS', 'ECOG16', 'CR16', 'ETPU', 'SLE9X', 'L10M', 'K10M', 'AARCH64', 'AVR32', 'STM8', 'TILE64', 'TILEPRO', 'CUDA', 'TILEGX', 'CLOUDSHIELD', 'COREA_1ST', 'COREA_2ND', 'ARC_COMPACT2', 'OPEN8', 'RL78', 'VIDEOCORE5', 'ARCH_78KOR', 'ARCH_56800EX', 'BA1', 'BA2', 'XCORE', 'MCHP_PIC', 'INTEL205', 'INTEL206', 'INTEL207', 'INTEL208', 'INTEL209', 'KM32', 'KMX32', 'KMX16', 'KMX8', 'KVARC', 'CDP', 'COGE', 'COOL', 'NORC', 'CSR_KALIMBA', 'AMDGPU']
+ |
+ |
+
+
number-sections |
counter |
@@ -1891,16 +2141,6 @@ elf is a MISP object available in JSON format at arch |
-text |
-
- Architecture of the ELF file ['None', 'M32', 'SPARC', 'i386', 'ARCH_68K', 'ARCH_88K', 'IAMCU', 'ARCH_860', 'MIPS', 'S370', 'MIPS_RS3_LE', 'PARISC', 'VPP500', 'SPARC32PLUS', 'ARCH_960', 'PPC', 'PPC64', 'S390', 'SPU', 'V800', 'FR20', 'RH32', 'RCE', 'ARM', 'ALPHA', 'SH', 'SPARCV9', 'TRICORE', 'ARC', 'H8_300', 'H8_300H', 'H8S', 'H8_500', 'IA_64', 'MIPS_X', 'COLDFIRE', 'ARCH_68HC12', 'MMA', 'PCP', 'NCPU', 'NDR1', 'STARCORE', 'ME16', 'ST100', 'TINYJ', 'x86_64', 'PDSP', 'PDP10', 'PDP11', 'FX66', 'ST9PLUS', 'ST7', 'ARCH_68HC16', 'ARCH_68HC11', 'ARCH_68HC08', 'ARCH_68HC05', 'SVX', 'ST19', 'VAX', 'CRIS', 'JAVELIN', 'FIREPATH', 'ZSP', 'MMIX', 'HUANY', 'PRISM', 'AVR', 'FR30', 'D10V', 'D30V', 'V850', 'M32R', 'MN10300', 'MN10200', 'PJ', 'OPENRISC', 'ARC_COMPACT', 'XTENSA', 'VIDEOCORE', 'TMM_GPP', 'NS32K', 'TPC', 'SNP1K', 'ST200', 'IP2K', 'MAX', 'CR', 'F2MC16', 'MSP430', 'BLACKFIN', 'SE_C33', 'SEP', 'ARCA', 'UNICORE', 'EXCESS', 'DXP', 'ALTERA_NIOS2', 'CRX', 'XGATE', 'C166', 'M16C', 'DSPIC30F', 'CE', 'M32C', 'TSK3000', 'RS08', 'SHARC', 'ECOG2', 'SCORE7', 'DSP24', 'VIDEOCORE3', 'LATTICEMICO32', 'SE_C17', 'TI_C6000', 'TI_C2000', 'TI_C5500', 'MMDSP_PLUS', 'CYPRESS_M8C', 'R32C', 'TRIMEDIA', 'HEXAGON', 'ARCH_8051', 'STXP7X', 'NDS32', 'ECOG1', 'ECOG1X', 'MAXQ30', 'XIMO16', 'MANIK', 'CRAYNV2', 'RX', 'METAG', 'MCST_ELBRUS', 'ECOG16', 'CR16', 'ETPU', 'SLE9X', 'L10M', 'K10M', 'AARCH64', 'AVR32', 'STM8', 'TILE64', 'TILEPRO', 'CUDA', 'TILEGX', 'CLOUDSHIELD', 'COREA_1ST', 'COREA_2ND', 'ARC_COMPACT2', 'OPEN8', 'RL78', 'VIDEOCORE5', 'ARCH_78KOR', 'ARCH_56800EX', 'BA1', 'BA2', 'XCORE', 'MCHP_PIC', 'INTEL205', 'INTEL206', 'INTEL207', 'INTEL208', 'INTEL209', 'KM32', 'KMX32', 'KMX16', 'KMX8', 'KVARC', 'CDP', 'COGE', 'COOL', 'NORC', 'CSR_KALIMBA', 'AMDGPU']
- |
- |
-
-
type |
text |
@@ -1959,23 +2199,23 @@ elf-section is a MISP object available in JSON format at name |
+type |
text |
- Name of the section
+ Type of the section ['NULL', 'PROGBITS', 'SYMTAB', 'STRTAB', 'RELA', 'HASH', 'DYNAMIC', 'NOTE', 'NOBITS', 'REL', 'SHLIB', 'DYNSYM', 'INIT_ARRAY', 'FINI_ARRAY', 'PREINIT_ARRAY', 'GROUP', 'SYMTAB_SHNDX', 'LOOS', 'GNU_ATTRIBUTES', 'GNU_HASH', 'GNU_VERDEF', 'GNU_VERNEED', 'GNU_VERSYM', 'HIOS', 'LOPROC', 'ARM_EXIDX', 'ARM_PREEMPTMAP', 'HEX_ORDERED', 'X86_64_UNWIND', 'MIPS_REGINFO', 'MIPS_OPTIONS', 'MIPS_ABIFLAGS', 'HIPROC', 'LOUSER', 'HIUSER']
|
|
-sha512 |
-sha512 |
+text |
+text |
- Secure Hash Algorithm 2 (512 bits)
+ Free text value to attach to the section
|
|
@@ -1989,40 +2229,20 @@ elf-section is a MISP object available in JSON format at sha224
-sha224 |
+name |
+text |
- Secure Hash Algorithm 2 (224 bits)
+ Name of the section
|
|
-sha512/224 |
-sha512/224 |
+flag |
+text |
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-md5 |
-md5 |
-
- [Insecure] MD5 hash (128 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the section, in bytes
+ Flag of the section ['ALLOC', 'EXCLUDE', 'EXECINSTR', 'GROUP', 'HEX_GPREL', 'INFO_LINK', 'LINK_ORDER', 'MASKOS', 'MASKPROC', 'MERGE', 'MIPS_ADDR', 'MIPS_LOCAL', 'MIPS_MERGE', 'MIPS_NAMES', 'MIPS_NODUPES', 'MIPS_NOSTRIP', 'NONE', 'OS_NONCONFORMING', 'STRINGS', 'TLS', 'WRITE', 'XCORE_SHF_CP_SECTION']
|
@@ -2049,16 +2269,46 @@ elf-section is a MISP object available in JSON format at text |
-text |
+md5 |
+md5 |
- Free text value to attach to the section
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
+size-in-bytes |
+size-in-bytes |
+
+ Size of the section, in bytes
|
|
+sha512/256 |
+sha512/256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
sha256 |
sha256 |
@@ -2069,30 +2319,20 @@ elf-section is a MISP object available in JSON format at flag |
-text |
+sha512/224 |
+sha512/224 |
- Flag of the section ['ALLOC', 'EXCLUDE', 'EXECINSTR', 'GROUP', 'HEX_GPREL', 'INFO_LINK', 'LINK_ORDER', 'MASKOS', 'MASKPROC', 'MERGE', 'MIPS_ADDR', 'MIPS_LOCAL', 'MIPS_MERGE', 'MIPS_NAMES', 'MIPS_NODUPES', 'MIPS_NOSTRIP', 'NONE', 'OS_NONCONFORMING', 'STRINGS', 'TLS', 'WRITE', 'XCORE_SHF_CP_SECTION']
+ Secure Hash Algorithm 2 (224 bits)
|
|
-type |
-text |
+sha224 |
+sha224 |
- Type of the section ['NULL', 'PROGBITS', 'SYMTAB', 'STRTAB', 'RELA', 'HASH', 'DYNAMIC', 'NOTE', 'NOBITS', 'REL', 'SHLIB', 'DYNSYM', 'INIT_ARRAY', 'FINI_ARRAY', 'PREINIT_ARRAY', 'GROUP', 'SYMTAB_SHNDX', 'LOOS', 'GNU_ATTRIBUTES', 'GNU_HASH', 'GNU_VERDEF', 'GNU_VERNEED', 'GNU_VERSYM', 'HIOS', 'LOPROC', 'ARM_EXIDX', 'ARM_PREEMPTMAP', 'HEX_ORDERED', 'X86_64_UNWIND', 'MIPS_REGINFO', 'MIPS_OPTIONS', 'MIPS_ABIFLAGS', 'HIPROC', 'LOUSER', 'HIUSER']
- |
- |
-
-
-sha512/256 |
-sha512/256 |
-
- Secure Hash Algorithm 2 (256 bits)
+ Secure Hash Algorithm 2 (224 bits)
|
@@ -2147,36 +2387,6 @@ email is a MISP object available in JSON format at to-display-name |
-email-dst-display-name |
-
- Display name of the receiver
- |
- |
-
-
-attachment |
-email-attachment |
- |
- |
-
-
-cc |
-email-dst |
- |
- |
-
-
header |
email-header |
@@ -2187,46 +2397,6 @@ email is a MISP object available in JSON format at screenshot |
-attachment |
- |
- |
-
-
-return-path |
-text |
- |
- |
-
-
-message-id |
-email-message-id |
- |
- |
-
-
-x-mailer |
-email-x-mailer |
-
- X-Mailer generally tells the program that was used to draft and send the original email
- |
- |
-
-
to |
email-dst |
@@ -2247,30 +2417,10 @@ email is a MISP object available in JSON format at subject |
-email-subject |
+message-id |
+email-message-id |
|
- |
-
-
-thread-index |
-email-thread-index |
-
- Identifies a particular conversation thread
- |
- |
-
-
-reply-to |
-email-reply-to |
-
- Email address the reply will be sent to
+ Message ID
|
@@ -2287,6 +2437,16 @@ email is a MISP object available in JSON format at attachment |
+email-attachment |
+ |
+ |
+
+
send-date |
datetime |
@@ -2297,6 +2457,76 @@ email is a MISP object available in JSON format at x-mailer |
+email-x-mailer |
+
+ X-Mailer generally tells the program that was used to draft and send the original email
+ |
+ |
+
+
+subject |
+email-subject |
+ |
+ |
+
+
+screenshot |
+attachment |
+ |
+ |
+
+
+to-display-name |
+email-dst-display-name |
+
+ Display name of the receiver
+ |
+ |
+
+
+cc |
+email-dst |
+ |
+ |
+
+
+return-path |
+text |
+ |
+ |
+
+
+reply-to |
+email-reply-to |
+
+ Email address the reply will be sent to
+ |
+ |
+
+
from |
email-src |
@@ -2306,6 +2536,16 @@ email is a MISP object available in JSON format at
|
+
+thread-index |
+email-thread-index |
+
+ Identifies a particular conversation thread
+ |
+ |
+
@@ -2345,16 +2585,26 @@ file is a MISP object available in JSON format at authentihash
-authentihash |
+certificate |
+x509-fingerprint-sha1 |
- Authenticode executable signature hash
+ Certificate value if the binary is signed with another authentication scheme than authenticode
|
|
+text |
+text |
+
+ Free text value to attach to the file
+ |
+ |
+
+
sha1 |
sha1 |
@@ -2365,40 +2615,50 @@ file is a MISP object available in JSON format at filename |
-filename |
+state |
+text |
- Filename on disk
+ State of the file ['Malicious', 'Harmless', 'Signed', 'Revoked', 'Expired', 'Trusted']
|
|
-sha224 |
-sha224 |
+mimetype |
+text |
- Secure Hash Algorithm 2 (224 bits)
+ Mime type
+ |
+ |
+
+
+entropy |
+float |
+
+ Entropy of the whole file
+ |
+ |
+
+
+pattern-in-file |
+pattern-in-file |
+
+ Pattern that can be found in the file
|
|
-certificate |
-x509-fingerprint-sha1 |
+sha384 |
+sha384 |
- Certificate value if the binary is signed with another authentication scheme than authenticode
- |
- |
-
-
-sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
+ Secure Hash Algorithm 2 (384 bits)
|
@@ -2425,80 +2685,10 @@ file is a MISP object available in JSON format at sha384 |
-sha384 |
+authentihash |
+authentihash |
- Secure Hash Algorithm 2 (384 bits)
- |
- |
-
-
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
-text |
-text |
-
- Free text value to attach to the file
- |
- |
-
-
-entropy |
-float |
-
- Entropy of the whole file
- |
- |
-
-
-mimetype |
-text |
- |
- |
-
-
-pattern-in-file |
-pattern-in-file |
-
- Pattern that can be found in the file
- |
- |
-
-
-state |
-text |
-
- State of the file ['Malicious', 'Harmless', 'Signed', 'Revoked', 'Expired', 'Trusted']
- |
- |
-
-
-sha256 |
-sha256 |
-
- Secure Hash Algorithm 2 (256 bits)
+ Authenticode executable signature hash
|
@@ -2525,6 +2715,36 @@ file is a MISP object available in JSON format at sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
+sha256 |
+sha256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+sha512/224 |
+sha512/224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
malware-sample |
malware-sample |
@@ -2535,6 +2755,26 @@ file is a MISP object available in JSON format at sha224 |
+sha224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+filename |
+filename |
+ |
+ |
+
+
ssdeep |
ssdeep |
@@ -2583,16 +2823,6 @@ geolocation is a MISP object available in JSON format at first-seen |
-datetime |
-
- When the location was seen for the first time.
- |
- |
-
-
text |
text |
@@ -2603,26 +2833,6 @@ geolocation is a MISP object available in JSON format at longitude |
-float |
-
- The longitude is the decimal value of the longitude in the World Geodetic System 84 (WGS84) reference
- |
- |
-
-
-region |
-text |
- |
- |
-
-
altitude |
float |
@@ -2633,16 +2843,6 @@ geolocation is a MISP object available in JSON format at latitude |
-float |
-
- The latitude is the decimal value of the latitude in the World Geodetic System 84 (WGS84) reference.
- |
- |
-
-
last-seen |
datetime |
@@ -2653,6 +2853,26 @@ geolocation is a MISP object available in JSON format at city |
+text |
+ |
+ |
+
+
+region |
+text |
+ |
+ |
+
+
country |
text |
@@ -2663,13 +2883,33 @@ geolocation is a MISP object available in JSON format at city |
-text |
+first-seen |
+datetime |
- City.
+ When the location was seen for the first time.
|
|
+
+
+latitude |
+float |
+
+ The latitude is the decimal value of the latitude in the World Geodetic System 84 (WGS84) reference.
+ |
+ |
+
+
+longitude |
+float |
+
+ The longitude is the decimal value of the longitude in the World Geodetic System 84 (WGS84) reference
+ |
+ |
@@ -2711,6 +2951,16 @@ gtp-attack is a MISP object available in JSON format at GtpImsi
+text |
+
+ GTP IMSI (International mobile subscriber identity).
+ |
+ |
+
+
text |
text |
@@ -2721,6 +2971,46 @@ gtp-attack is a MISP object available in JSON format at ipSrc |
+ip-src |
+ |
+ |
+
+
+GtpMsisdn |
+text |
+ |
+ |
+
+
+GtpImei |
+text |
+
+ GTP IMEI (International Mobile Equipment Identity).
+ |
+ |
+
+
+ipDest |
+ip-dst |
+
+ IP destination address.
+ |
+ |
+
+
GtpServingNetwork |
text |
@@ -2731,6 +3021,36 @@ gtp-attack is a MISP object available in JSON format at first-seen |
+datetime |
+
+ When the attack has been seen for the first time.
+ |
+ |
+
+
+GtpInterface |
+text |
+
+ GTP interface. ['S5', 'S11', 'S10', 'S8', 'Gn', 'Gp']
+ |
+ |
+
+
+GtpVersion |
+text |
+
+ GTP version ['0', '1', '2']
+ |
+ |
+
+
PortSrc |
port |
@@ -2751,26 +3071,6 @@ gtp-attack is a MISP object available in JSON format at GtpMsisdn |
-text |
- |
- |
-
-
-first-seen |
-datetime |
-
- When the attack has been seen for the first time.
- |
- |
-
-
PortDest |
text |
@@ -2780,66 +3080,6 @@ gtp-attack is a MISP object available in JSON format at
|
-
-ipSrc |
-ip-src |
- |
- |
-
-
-GtpInterface |
-text |
-
- GTP interface. ['S5', 'S11', 'S10', 'S8', 'Gn', 'Gp']
- |
- |
-
-
-GtpImei |
-text |
-
- GTP IMEI (International Mobile Equipment Identity).
- |
- |
-
-
-ipDest |
-ip-dst |
-
- IP destination address.
- |
- |
-
-
-GtpVersion |
-text |
-
- GTP version ['0', '1', '2']
- |
- |
-
-
-GtpImsi |
-text |
-
- GTP IMSI (International mobile subscriber identity).
- |
- |
-
@@ -2879,10 +3119,20 @@ http-request is a MISP object available in JSON format at referer
-referer |
+text |
+text |
- This is the address of the previous web page from which a link to the currently requested page was followed
+ HTTP Request comment
+ |
+ |
+
+
+uri |
+uri |
+ |
@@ -2899,20 +3149,10 @@ http-request is a MISP object available in JSON format at url |
-url |
+cookie |
+text |
|
- |
-
-
-host |
-hostname |
-
- The domain name of the server
+ An HTTP cookie previously sent by the server with Set-Cookie
|
@@ -2929,10 +3169,10 @@ http-request is a MISP object available in JSON format at user-agent |
-user-agent |
+host |
+hostname |
- The user agent string of the user agent
+ The domain name of the server
|
@@ -2949,30 +3189,20 @@ http-request is a MISP object available in JSON format at text |
-text |
+user-agent |
+user-agent |
|
- |
-
-
-cookie |
-text |
-
- An HTTP cookie previously sent by the server with Set-Cookie
+ The user agent string of the user agent
|
|
-proxy-user |
-text |
+referer |
+referer |
- HTTP Proxy Username
+ This is the address of the previous web page from which a link to the currently requested page was followed
|
@@ -2999,10 +3229,20 @@ http-request is a MISP object available in JSON format at uri |
-uri |
+url |
+url |
- Request URI
+ Full HTTP Request URL
+ |
+ |
+
+
+proxy-user |
+text |
+ |
@@ -3057,20 +3297,20 @@ ip-port is a MISP object available in JSON format at first-seen |
+last-seen |
datetime |
- First time the tuple has been seen
+ Last time the tuple has been seen
|
|
-src-port |
+dst-port |
port |
- Source port
+ Destination port
|
@@ -3087,20 +3327,20 @@ ip-port is a MISP object available in JSON format at last-seen |
+first-seen |
datetime |
- Last time the tuple has been seen
+ First time the tuple has been seen
|
|
-dst-port |
+src-port |
port |
- Destination port
+ Source port
|
@@ -3145,36 +3385,6 @@ ja3 is a MISP object available in JSON format at first-seen |
-datetime |
-
- First seen of the SSL/TLS handshake
- |
- |
-
-
-description |
-text |
-
- Type of detected software ie software, malware
- |
- |
-
-
-last-seen |
-datetime |
-
- Last seen of the SSL/TLS handshake
- |
- |
-
-
ip-dst |
ip-dst |
@@ -3195,6 +3405,26 @@ ja3 is a MISP object available in JSON format at description |
+text |
+
+ Type of detected software ie software, malware
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ First seen of the SSL/TLS handshake
+ |
+ |
+
+
ja3-fingerprint-md5 |
md5 |
@@ -3204,6 +3434,16 @@ ja3 is a MISP object available in JSON format at
|
+
+last-seen |
+datetime |
+
+ Last seen of the SSL/TLS handshake
+ |
+ |
+
@@ -3243,20 +3483,10 @@ macho is a MISP object available in JSON format at number-sections
-counter |
- |
- |
-
-
-name |
+type |
text |
- Binary’s name
+ Type of Mach-O ['BUNDLE', 'CORE', 'DSYM', 'DYLIB', 'DYLIB_STUB', 'DYLINKER', 'EXECUTE', 'FVMLIB', 'KEXT_BUNDLE', 'OBJECT', 'PRELOAD']
|
@@ -3273,20 +3503,30 @@ macho is a MISP object available in JSON format at type |
+entrypoint-address |
text |
- Type of Mach-O ['BUNDLE', 'CORE', 'DSYM', 'DYLIB', 'DYLIB_STUB', 'DYLINKER', 'EXECUTE', 'FVMLIB', 'KEXT_BUNDLE', 'OBJECT', 'PRELOAD']
+ Address of the entry point
+ |
+ |
+
+
+name |
+text |
+ |
|
-entrypoint-address |
-text |
+number-sections |
+counter |
- Address of the entry point
+ Number of sections
|
@@ -3331,26 +3571,16 @@ macho-section is a MISP object available in JSON format at name |
+text |
text |
- Name of the section
+ Free text value to attach to the section
|
|
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
sha1 |
sha1 |
@@ -3361,40 +3591,10 @@ macho-section is a MISP object available in JSON format at sha224 |
-sha224 |
+name |
+text |
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-md5 |
-md5 |
-
- [Insecure] MD5 hash (128 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the section, in bytes
+ Name of the section
|
@@ -3421,16 +3621,46 @@ macho-section is a MISP object available in JSON format at text |
-text |
+md5 |
+md5 |
- Free text value to attach to the section
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
+size-in-bytes |
+size-in-bytes |
+
+ Size of the section, in bytes
|
|
+sha512/256 |
+sha512/256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
sha256 |
sha256 |
@@ -3441,10 +3671,20 @@ macho-section is a MISP object available in JSON format at sha512/256 |
-sha512/256 |
+sha512/224 |
+sha512/224 |
- Secure Hash Algorithm 2 (256 bits)
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
+sha224 |
+sha224 |
+
+ Secure Hash Algorithm 2 (224 bits)
|
@@ -3499,10 +3739,40 @@ microblog is a MISP object available in JSON format at username |
+type |
text |
- Username who posted the microblog post
+ Type of the microblog post ['Twitter', 'Facebook', 'LinkedIn', 'Reddit', 'Google+', 'Instagram', 'Forum', 'Other']
+ |
+ |
+
+
+removal-date |
+datetime |
+
+ When the microblog post was removed
+ |
+ |
+
+
+modification-date |
+datetime |
+
+ Last update of the microblog post
+ |
+ |
+
+
+link |
+url |
+
+ Link into the microblog post
|
@@ -3529,10 +3799,10 @@ microblog is a MISP object available in JSON format at modification-date |
-datetime |
+username |
+text |
- Last update of the microblog post
+ Username who posted the microblog post
|
@@ -3558,36 +3828,6 @@ microblog is a MISP object available in JSON format at
|
-
-type |
-text |
-
- Type of the microblog post ['Twitter', 'Facebook', 'LinkedIn', 'Reddit', 'Google+', 'Instagram', 'Forum', 'Other']
- |
- |
-
-
-link |
-url |
-
- Link into the microblog post
- |
- |
-
-
-removal-date |
-datetime |
-
- When the microblog post was removed
- |
- |
-
@@ -3695,126 +3935,16 @@ netflow is a MISP object available in JSON format at flow-count
+ip_version |
counter |
- Flows counted in this flow
+ IP version of this flow
|
|
-src-port |
-port |
-
- Source port of the netflow
- |
- |
-
-
-src-as |
-AS |
-
- Source AS number for this flow
- |
- |
-
-
-icmp-type |
-text |
-
- ICMP type of the flow (if the traffic is ICMP)
- |
- |
-
-
-protocol |
-text |
-
- Protocol used for this flow ['TCP', 'UDP', 'ICMP', 'IP']
- |
- |
-
-
-last-packet-seen |
-datetime |
-
- Last packet seen in this flow
- |
- |
-
-
-dst-as |
-AS |
-
- Destination AS number for this flow
- |
- |
-
-
-packet-count |
-counter |
-
- Packets counted in this flow
- |
- |
-
-
-direction |
-text |
-
- Direction of this flow ['Ingress', 'Egress']
- |
- |
-
-
-tcp-flags |
-text |
- |
- |
-
-
-ip-protocol-number |
-size-in-bytes |
-
- IP protocol number of this flow
- |
- |
-
-
-first-packet-seen |
-datetime |
-
- First packet seen in this flow
- |
- |
-
-
dst-port |
port |
@@ -3825,6 +3955,16 @@ netflow is a MISP object available in JSON format at ip-protocol-number |
+size-in-bytes |
+
+ IP protocol number of this flow
+ |
+ |
+
+
ip-dst |
ip-dst |
@@ -3845,6 +3985,106 @@ netflow is a MISP object available in JSON format at tcp-flags |
+text |
+ |
+ |
+
+
+first-packet-seen |
+datetime |
+
+ First packet seen in this flow
+ |
+ |
+
+
+packet-count |
+counter |
+
+ Packets counted in this flow
+ |
+ |
+
+
+src-port |
+port |
+
+ Source port of the netflow
+ |
+ |
+
+
+direction |
+text |
+
+ Direction of this flow ['Ingress', 'Egress']
+ |
+ |
+
+
+dst-as |
+AS |
+
+ Destination AS number for this flow
+ |
+ |
+
+
+flow-count |
+counter |
+
+ Flows counted in this flow
+ |
+ |
+
+
+icmp-type |
+text |
+
+ ICMP type of the flow (if the traffic is ICMP)
+ |
+ |
+
+
+src-as |
+AS |
+
+ Source AS number for this flow
+ |
+ |
+
+
+last-packet-seen |
+datetime |
+
+ Last packet seen in this flow
+ |
+ |
+
+
byte-count |
counter |
@@ -3855,13 +4095,13 @@ netflow is a MISP object available in JSON format at ip_version |
-counter |
+protocol |
+text |
- IP version of this flow
+ Protocol used for this flow ['TCP', 'UDP', 'ICMP', 'IP']
|
|
@@ -3903,33 +4143,53 @@ passive-dns is a MISP object available in JSON format at sensor_id
+text |
text |
- Sensor information where the record was seen
+ Description of the passive DNS record.
|
|
-time_first |
-datetime |
+count |
+counter |
- First time that the unique tuple (rrname, rrtype, rdata) has been seen by the passive DNS
+ How many authoritative DNS answers were received at the Passive DNS Server’s collectors with exactly the given set of values as answers.
|
|
-zone_time_first |
+time_last |
datetime |
- First time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import
+ Last time that the unique tuple (rrname, rrtype, rdata) record has been seen by the passive DNS
|
|
+
+
+rrtype |
+text |
+
+ Resource Record type as seen by the passive DNS. ['A', 'AAAA', 'CNAME', 'PTR', 'SOA', 'TXT', 'DNAME', 'NS', 'SRV', 'RP', 'NAPTR', 'HINFO', 'A6']
+ |
+ |
+
+
+zone_time_last |
+datetime |
+
+ Last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import.
+ |
+ |
@@ -3939,17 +4199,17 @@ passive-dns is a MISP object available in JSON format at
-zone_time_last |
-datetime |
+sensor_id |
+text |
- Last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import
+ Sensor information where the record was seen
|
|
@@ -3963,65 +4223,45 @@ passive-dns is a MISP object available in JSON format at time_last
-datetime |
-
- Last time that the unique tuple (rrname, rrtype, rdata) record has been seen by the passive DNS
- |
- |
-
-
-text |
-text |
- |
- |
-
-
-rrtype |
-text |
-
- Resource Record type as seen by the passive DNS ['A', 'AAAA', 'CNAME', 'PTR', 'SOA', 'TXT', 'DNAME', 'NS', 'SRV', 'RP', 'NAPTR', 'HINFO', 'A6']
- |
- |
-
-
-rrname |
-text |
-
- Resource Record name of the queried resource
- |
- |
-
-
-count |
-counter |
-
- How many authoritative DNS answers were received at the Passive DNS Server’s collectors with exactly the given set of values as answers
- |
- |
-
-
origin |
text |
Origin of the Passive DNS response
|
|
+
+
+rrname |
+text |
+
+ Resource Record name of the queried resource.
+ |
+ |
+
+zone_time_first |
+datetime |
+
+ First time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import
+ |
+ |
+
+
+time_first |
+datetime |
+
+ First time that the unique tuple (rrname, rrtype, rdata) has been seen by the passive DNS
+ |
+ |
+
@@ -4061,10 +4301,10 @@ paste is a MISP object available in JSON format at first-seen
+last-seen |
datetime |
- When the paste has been accessible or seen for the first time.
+ When the paste has been accessible or seen for the last time.
|
@@ -4081,6 +4321,26 @@ paste is a MISP object available in JSON format at origin |
+text |
+
+ Original source of the paste or post. ['pastebin.com', 'pastebin.com_pro', 'pastie.org', 'slexy.org', 'gist.github.com', 'codepad.org', 'safebin.net', 'hastebin.com', 'ghostbin.com']
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ When the paste has been accessible or seen for the first time.
+ |
+ |
+
+
title |
text |
@@ -4100,26 +4360,6 @@ paste is a MISP object available in JSON format at
|
-
-origin |
-text |
-
- Original source of the paste or post. ['pastebin.com', 'pastebin.com_pro', 'pastie.org', 'slexy.org', 'gist.github.com', 'codepad.org', 'safebin.net', 'hastebin.com', 'ghostbin.com']
- |
- |
-
-
-last-seen |
-datetime |
-
- When the paste has been accessible or seen for the last time.
- |
- |
-
@@ -4159,6 +4399,16 @@ pe is a MISP object available in JSON format at internal-filename
+filename |
+
+ InternalFilename in the resources
+ |
+ |
+
+
number-sections |
counter |
@@ -4179,60 +4429,10 @@ pe is a MISP object available in JSON format at product-version |
+company-name |
text |
- ProductVersion in the resources
- |
- |
-
-
-legal-copyright |
-text |
-
- LegalCopyright in the resources
- |
- |
-
-
-imphash |
-imphash |
-
- Hash (md5) calculated from the import table
- |
- |
-
-
-original-filename |
-filename |
-
- OriginalFilename in the resources
- |
- |
-
-
-text |
-text |
-
- Free text value to attach to the PE
- |
- |
-
-
-entrypoint-section-at-position |
-text |
-
- Name of the section and position of the section in the PE
+ CompanyName in the resources
|
@@ -4249,10 +4449,70 @@ pe is a MISP object available in JSON format at internal-filename |
+imphash |
+imphash |
+
+ Hash (md5) calculated from the import table
+ |
+ |
+
+
+lang-id |
+text |
+
+ Lang ID in the resources
+ |
+ |
+
+
+text |
+text |
+
+ Free text value to attach to the PE
+ |
+ |
+
+
+product-version |
+text |
+
+ ProductVersion in the resources
+ |
+ |
+
+
+original-filename |
filename |
- InternalFilename in the resources
+ OriginalFilename in the resources
+ |
+ |
+
+
+entrypoint-section-at-position |
+text |
+
+ Name of the section and position of the section in the PE
+ |
+ |
+
+
+legal-copyright |
+text |
+
+ LegalCopyright in the resources
|
@@ -4269,16 +4529,6 @@ pe is a MISP object available in JSON format at lang-id |
-text |
-
- Lang ID in the resources
- |
- |
-
-
product-name |
text |
@@ -4289,26 +4539,6 @@ pe is a MISP object available in JSON format at company-name |
-text |
-
- CompanyName in the resources
- |
- |
-
-
-type |
-text |
-
- Type of PE ['exe', 'dll', 'driver', 'unknown']
- |
- |
-
-
impfuzzy |
impfuzzy |
@@ -4319,6 +4549,16 @@ pe is a MISP object available in JSON format at type |
+text |
+
+ Type of PE ['exe', 'dll', 'driver', 'unknown']
+ |
+ |
+
+
entrypoint-address |
text |
@@ -4377,26 +4617,16 @@ pe-section is a MISP object available in JSON format at name |
+text |
text |
- Name of the section ['.rsrc', '.reloc', '.rdata', '.data', '.text']
+ Free text value to attach to the section
|
|
-sha512 |
-sha512 |
-
- Secure Hash Algorithm 2 (512 bits)
- |
- |
-
-
sha1 |
sha1 |
@@ -4407,40 +4637,10 @@ pe-section is a MISP object available in JSON format at sha224 |
-sha224 |
+name |
+text |
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-sha512/224 |
-sha512/224 |
-
- Secure Hash Algorithm 2 (224 bits)
- |
- |
-
-
-md5 |
-md5 |
-
- [Insecure] MD5 hash (128 bits)
- |
- |
-
-
-size-in-bytes |
-size-in-bytes |
-
- Size of the section, in bytes
+ Name of the section ['.rsrc', '.reloc', '.rdata', '.data', '.text']
|
@@ -4467,16 +4667,66 @@ pe-section is a MISP object available in JSON format at text |
-text |
+md5 |
+md5 |
- Free text value to attach to the section
+ [Insecure] MD5 hash (128 bits)
+ |
+ |
+
+
+size-in-bytes |
+size-in-bytes |
+
+ Size of the section, in bytes
|
|
+sha512/256 |
+sha512/256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+sha512 |
+sha512 |
+
+ Secure Hash Algorithm 2 (512 bits)
+ |
+ |
+
+
+sha256 |
+sha256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+sha512/224 |
+sha512/224 |
+
+ Secure Hash Algorithm 2 (224 bits)
+ |
+ |
+
+
characteristic |
text |
@@ -4487,20 +4737,10 @@ pe-section is a MISP object available in JSON format at sha256 |
-sha256 |
+sha224 |
+sha224 |
- Secure Hash Algorithm 2 (256 bits)
- |
- |
-
-
-sha512/256 |
-sha512/256 |
-
- Secure Hash Algorithm 2 (256 bits)
+ Secure Hash Algorithm 2 (224 bits)
|
@@ -4555,46 +4795,6 @@ person is a MISP object available in JSON format at place-of-birth |
-place-of-birth |
-
- Place of birth of a natural person.
- |
- |
-
-
-gender |
-gender |
-
- The gender of a natural person. ['Male', 'Female', 'Other', 'Prefer not to say']
- |
- |
-
-
-alias |
-text |
-
- Alias name or known as.
- |
- |
-
-
-passport-number |
-passport-number |
-
- The passport number of a natural person.
- |
- |
-
-
last-name |
last-name |
@@ -4605,20 +4805,20 @@ person is a MISP object available in JSON format at nationality |
-nationality |
+text |
+text |
- The nationality of a natural person.
+ A description of the person or identity.
|
|
-text |
-text |
+place-of-birth |
+place-of-birth |
- A description of the person or identity.
+ Place of birth of a natural person.
|
|
+text |
+
+ Social security number
+ |
+ |
+
+
+alias |
+text |
+
+ Alias name or known as.
+ |
+ |
+
+
title |
text |
@@ -4645,40 +4865,30 @@ person is a MISP object available in JSON format at redress-number |
-redress-number |
+gender |
+gender |
- The Redress Control Number is the record identifier for people who apply for redress through the DHS Travel Redress Inquiry Program (DHS TRIP). DHS TRIP is for travelers who have been repeatedly identified for additional screening and who want to file an inquiry to have erroneous information corrected in DHS systems.
- |
- |
-
-
-date-of-birth |
-date-of-birth |
-
- Date of birth of a natural person (in YYYY-MM-DD format).
- |
- |
-
-
-first-name |
-first-name |
-
- First name of a natural person.
+ The gender of a natural person. ['Male', 'Female', 'Other', 'Prefer not to say']
|
|
-social-security-number |
-text |
+middle-name |
+middle-name |
- Social security number
+ Middle name of a natural person.
+ |
+ |
+
+
+passport-number |
+passport-number |
+
+ The passport number of a natural person.
|
@@ -4695,6 +4905,36 @@ person is a MISP object available in JSON format at nationality |
+nationality |
+
+ The nationality of a natural person.
+ |
+ |
+
+
+first-name |
+first-name |
+
+ First name of a natural person.
+ |
+ |
+
+
+date-of-birth |
+date-of-birth |
+
+ Date of birth of a natural person (in YYYY-MM-DD format).
+ |
+ |
+
+
passport-country |
passport-country |
@@ -4705,10 +4945,10 @@ person is a MISP object available in JSON format at middle-name |
-middle-name |
+redress-number |
+redress-number |
- Middle name of a natural person.
+ The Redress Control Number is the record identifier for people who apply for redress through the DHS Travel Redress Inquiry Program (DHS TRIP). DHS TRIP is for travelers who have been repeatedly identified for additional screening and who want to file an inquiry to have erroneous information corrected in DHS systems.
|
@@ -4753,13 +4993,13 @@ phone is a MISP object available in JSON format at serial-number |
+text |
text |
- Serial Number.
+ A description of the phone.
|
|
@@ -4773,6 +5013,26 @@ phone is a MISP object available in JSON format at imsi
+text |
+
+ A usually unique International Mobile Subscriber Identity (IMSI) is allocated to each mobile subscriber in the GSM/UMTS/EPS system. IMSI can also refer to International Mobile Station Identity in the ITU nomenclature.
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ When the phone has been accessible or seen for the first time.
+ |
+ |
+
+
gummei |
text |
@@ -4783,26 +5043,16 @@ phone is a MISP object available in JSON format at guti |
+serial-number |
text |
- Globally Unique Temporary UE Identity (GUTI) is a temporary identification to not reveal the phone (user equipment in 3GPP jargon) composed of GUMMEI and the M-TMSI.
+ Serial Number.
|
|
-text |
-text |
-
- A description of the phone.
- |
- |
-
-
msisdn |
text |
@@ -4813,6 +5063,16 @@ phone is a MISP object available in JSON format at guti |
+text |
+
+ Globally Unique Temporary UE Identity (GUTI) is a temporary identification to not reveal the phone (user equipment in 3GPP jargon) composed of GUMMEI and the M-TMSI.
+ |
+ |
+
+
tmsi |
text |
@@ -4832,26 +5092,6 @@ phone is a MISP object available in JSON format at
|
-
-imsi |
-text |
-
- A usually unique International Mobile Subscriber Identity (IMSI) is allocated to each mobile subscriber in the GSM/UMTS/EPS system. IMSI can also refer to International Mobile Station Identity in the ITU nomenclature.
- |
- |
-
-
-first-seen |
-datetime |
-
- When the phone has been accessible or seen for the first time.
- |
- |
-
@@ -4891,26 +5131,6 @@ r2graphity is a MISP object available in JSON format at callback-average
-counter |
-
- Average size of a callback
- |
- |
-
-
-memory-allocations |
-counter |
-
- Amount of memory allocations
- |
- |
-
-
local-references |
counter |
@@ -4921,40 +5141,10 @@ r2graphity is a MISP object available in JSON format at callback-largest |
+callbacks |
counter |
|
- |
-
-
-text |
-text |
-
- Description of the r2graphity object
- |
- |
-
-
-create-thread |
-counter |
-
- Amount of calls to CreateThread
- |
- |
-
-
-get-proc-address |
-counter |
-
- Amount of calls to GetProcAddress
+ Amount of callbacks (functions started as thread)
|
@@ -4971,6 +5161,36 @@ r2graphity is a MISP object available in JSON format at dangling-strings |
+counter |
+
+ Amount of dangling strings (string with a code cross reference, that is not within a function. Radare2 failed to detect that function.)
+ |
+ |
+
+
+memory-allocations |
+counter |
+
+ Amount of memory allocations
+ |
+ |
+
+
+refsglobalvar |
+counter |
+
+ Amount of API calls outside of code section (glob var, dynamic API)
+ |
+ |
+
+
shortest-path-to-create-thread |
counter |
@@ -4981,6 +5201,26 @@ r2graphity is a MISP object available in JSON format at create-thread |
+counter |
+
+ Amount of calls to CreateThread
+ |
+ |
+
+
+referenced-strings |
+counter |
+
+ Amount of referenced strings
+ |
+ |
+
+
total-functions |
counter |
@@ -4991,20 +5231,40 @@ r2graphity is a MISP object available in JSON format at ratio-api |
-float |
+text |
+text |
- Ratio: amount of API calls per kilobyte of code section
+ Description of the r2graphity object
|
|
-unknown-references |
+gml |
+attachment |
+
+ Graph export in G>raph Modelling Language format
+ |
+ |
+
+
+callback-average |
counter |
- Amount of API calls not ending in a function (Radare2 bug, probalby)
+ Average size of a callback
+ |
+ |
+
+
+ratio-api |
+float |
+
+ Ratio: amount of API calls per kilobyte of code section
|
@@ -5031,30 +5291,10 @@ r2graphity is a MISP object available in JSON format at refsglobalvar |
+unknown-references |
counter |
- Amount of API calls outside of code section (glob var, dynamic API)
- |
- |
-
-
-referenced-strings |
-counter |
-
- Amount of referenced strings
- |
- |
-
-
-ratio-string |
-float |
-
- Ratio: amount of referenced strings per kilobyte of code section
+ Amount of API calls not ending in a function (Radare2 bug, probalby)
|
@@ -5071,10 +5311,20 @@ r2graphity is a MISP object available in JSON format at gml |
-attachment |
+ratio-string |
+float |
- Graph export in G>raph Modelling Language format
+ Ratio: amount of referenced strings per kilobyte of code section
+ |
+ |
+
+
+callback-largest |
+counter |
+ |
@@ -5091,20 +5341,10 @@ r2graphity is a MISP object available in JSON format at callbacks |
+get-proc-address |
counter |
- Amount of callbacks (functions started as thread)
- |
- |
-
-
-dangling-strings |
-counter |
-
- Amount of dangling strings (string with a code cross reference, that is not within a function. Radare2 failed to detect that function.)
+ Amount of calls to GetProcAddress
|
@@ -5149,13 +5389,13 @@ regexp is a MISP object available in JSON format at regexp-type |
+type |
text |
- Type of the regular expression syntax. ['PCRE', 'PCRE2', 'POSIX BRE', 'POSIX ERE']
+ Specify which type corresponds to this regex. ['hostname', 'domain', 'email-src', 'email-dst', 'email-subject', 'url', 'user-agent', 'regkey', 'cookie', 'uri', 'filename', 'windows-service-name', 'windows-scheduled-task']
|
|
@@ -5169,6 +5409,16 @@ regexp is a MISP object available in JSON format at regexp-type
+text |
+
+ Type of the regular expression syntax. ['PCRE', 'PCRE2', 'POSIX BRE', 'POSIX ERE']
+ |
+ |
+
+
comment |
comment |
@@ -5178,16 +5428,6 @@ regexp is a MISP object available in JSON format at
|
-
-type |
-text |
-
- Specify which type corresponds to this regex. ['hostname', 'domain', 'email-src', 'email-dst', 'email-subject', 'url', 'user-agent', 'regkey', 'cookie', 'uri', 'filename', 'windows-service-name', 'windows-scheduled-task']
- |
- |
-
@@ -5227,16 +5467,6 @@ registry-key is a MISP object available in JSON format at name
-text |
-
- Name of the registry key
- |
- |
-
-
data-type |
text |
@@ -5247,6 +5477,16 @@ registry-key is a MISP object available in JSON format at name |
+text |
+
+ Name of the registry key
+ |
+ |
+
+
last-modified |
datetime |
@@ -5257,26 +5497,6 @@ registry-key is a MISP object available in JSON format at data |
-text |
-
- Data stored in the registry key
- |
- |
-
-
-key |
-regkey |
- |
- |
-
-
root-keys |
text |
@@ -5296,6 +5516,26 @@ registry-key is a MISP object available in JSON format at
|
+
+data |
+text |
+
+ Data stored in the registry key
+ |
+ |
+
+
+key |
+regkey |
+ |
+ |
+
@@ -5335,20 +5575,20 @@ report is a MISP object available in JSON format at summary
+case-number |
text |
- Free text summary of the report
+ Case number
|
|
-case-number |
+summary |
text |
- Case number
+ Free text summary of the report
|
@@ -5393,20 +5633,10 @@ rtir is a MISP object available in JSON format at ticket-number |
+constituency |
text |
- ticket-number of the RTIR ticket
- |
- |
-
-
-queue |
-text |
-
- Queue of the RTIR ticket ['incident', 'investigations', 'blocks', 'incident reports']
+ Constituency of the RTIR ticket
|
@@ -5423,10 +5653,20 @@ rtir is a MISP object available in JSON format at constituency |
+queue |
text |
- Constituency of the RTIR ticket
+ Queue of the RTIR ticket ['incident', 'investigations', 'blocks', 'incident reports']
+ |
+ |
+
+
+ticket-number |
+text |
+
+ ticket-number of the RTIR ticket
|
@@ -5443,20 +5683,20 @@ rtir is a MISP object available in JSON format at status |
+classification |
text |
- Status of the RTIR ticket ['new', 'open', 'stalled', 'resolved', 'rejected', 'deleted']
+ Classification of the RTIR ticket
|
|
-classification |
+status |
text |
- Classification of the RTIR ticket
+ Status of the RTIR ticket ['new', 'open', 'stalled', 'resolved', 'rejected', 'deleted']
|
@@ -5501,26 +5741,6 @@ sandbox-report is a MISP object available in JSON format at sandbox-type |
-text |
-
- The type of sandbox used ['on-premise', 'web', 'saas']
- |
- |
-
-
-permalink |
-link |
- |
- |
-
-
score |
text |
@@ -5561,10 +5781,10 @@ sandbox-report is a MISP object available in JSON format at saas-sandbox |
+sandbox-type |
text |
- A non-on-premise sandbox, also results are not publicly available ['forticloud-sandbox', 'joe-sandbox-cloud', 'symantec-cas-cloud']
+ The type of sandbox used ['on-premise', 'web', 'saas']
|
@@ -5580,6 +5800,104 @@ sandbox-report is a MISP object available in JSON format at
|
+
+permalink |
+link |
+ |
+ |
+
+
+saas-sandbox |
+text |
+
+ A non-on-premise sandbox, also results are not publicly available ['forticloud-sandbox', 'joe-sandbox-cloud', 'symantec-cas-cloud']
+ |
+ |
+
+
+
+
+
+
+
+
+
+
Sandbox detection signature.
+
+
+
+
+|
+
+ |
+
+sb-signature is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP.
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+| Object attribute |
+MISP attribute type |
+Description |
+Disable correlation |
+
+
+
+
+text |
+text |
+
+ Additional signature description
+ |
+ |
+
+
+datetime |
+datetime |
+ |
+ |
+
+
+signature |
+text |
+
+ Name of detection signature - set the description of the detection signature as a comment
+ |
+ |
+
+
+software |
+text |
+
+ Name of Sandbox software
+ |
+ |
+
@@ -5619,90 +5937,30 @@ ss7-attack is a MISP object available in JSON format at
SccpCdGT
+MapVersion |
text |
- Signaling Connection Control Part (SCCP) CdGT - Phone number.
- |
-
|
-
-
-Category |
-text |
-
- Category ['Cat0', 'Cat1', 'Cat2.1', 'Cat2.2', 'Cat3.1', 'Cat3.2', 'Cat3.3', 'CatSMS', 'CatSpoofing']
+ Map version. ['1', '2', '3']
|
|
-MapMscGT |
+MapGsmscfGT |
text |
- MAP MSC GT. Phone number.
+ MAP GSMSCF GT. Phone number.
|
|
-SccpCgPC |
+SccpCdSSN |
text |
- Signaling Connection Control Part (SCCP) CgPC - Phone number.
- |
- |
-
-
-MapSmsTP-OA |
-text |
-
- MAP SMS TP-OA. Phone number.
- |
- |
-
-
-MapApplicationContext |
-text |
-
- MAP application context in OID format.
- |
- |
-
-
-SccpCgGT |
-text |
-
- Signaling Connection Control Part (SCCP) CgGT - Phone number.
- |
- |
-
-
-MapMsisdn |
-text |
-
- MAP MSISDN. Phone number.
- |
- |
-
-
-text |
-text |
-
- A description of the attack seen via SS7 logging.
+ Signaling Connection Control Part (SCCP) - Decimal value between 0-255.
|
@@ -5719,120 +5977,10 @@ ss7-attack is a MISP object available in JSON format at SccpCdSSN |
+MapApplicationContext |
text |
- Signaling Connection Control Part (SCCP) - Decimal value between 0-255.
- |
- |
-
-
-MapUssdContent |
-text |
- |
- |
-
-
-MapVersion |
-text |
-
- Map version. ['1', '2', '3']
- |
- |
-
-
-MapSmsTP-DCS |
-text |
- |
- |
-
-
-MapUssdCoding |
-text |
- |
- |
-
-
-MapGmlc |
-text |
-
- MAP GMLC. Phone number.
- |
- |
-
-
-SccpCgSSN |
-text |
-
- Signaling Connection Control Part (SCCP) - Decimal value between 0-255.
- |
- |
-
-
-MapSmsTP-PID |
-text |
- |
- |
-
-
-MapSmsText |
-text |
-
- MAP SMS Text. Important indicators in SMS text.
- |
- |
-
-
-MapSmscGT |
-text |
-
- MAP SMSC. Phone number.
- |
- |
-
-
-MapSmsTypeNumber |
-text |
- |
- |
-
-
-first-seen |
-datetime |
-
- When the attack has been seen for the first time.
+ MAP application context in OID format.
|
@@ -5849,6 +5997,146 @@ ss7-attack is a MISP object available in JSON format at MapUssdContent |
+text |
+ |
+ |
+
+
+MapSmsText |
+text |
+
+ MAP SMS Text. Important indicators in SMS text.
+ |
+ |
+
+
+MapSmsTypeNumber |
+text |
+ |
+ |
+
+
+MapSmsTP-DCS |
+text |
+ |
+ |
+
+
+MapMscGT |
+text |
+
+ MAP MSC GT. Phone number.
+ |
+ |
+
+
+MapMsisdn |
+text |
+
+ MAP MSISDN. Phone number.
+ |
+ |
+
+
+SccpCgPC |
+text |
+
+ Signaling Connection Control Part (SCCP) CgPC - Phone number.
+ |
+ |
+
+
+text |
+text |
+
+ A description of the attack seen via SS7 logging.
+ |
+ |
+
+
+MapSmsTP-OA |
+text |
+
+ MAP SMS TP-OA. Phone number.
+ |
+ |
+
+
+MapSmscGT |
+text |
+
+ MAP SMSC. Phone number.
+ |
+ |
+
+
+MapUssdCoding |
+text |
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ When the attack has been seen for the first time.
+ |
+ |
+
+
+SccpCgGT |
+text |
+
+ Signaling Connection Control Part (SCCP) CgGT - Phone number.
+ |
+ |
+
+
+SccpCdGT |
+text |
+
+ Signaling Connection Control Part (SCCP) CdGT - Phone number.
+ |
+ |
+
+
MapImsi |
text |
@@ -5859,16 +6147,36 @@ ss7-attack is a MISP object available in JSON format at MapGsmscfGT |
+MapGmlc |
text |
- MAP GSMSCF GT. Phone number.
+ MAP GMLC. Phone number.
|
|
+Category |
+text |
+
+ Category ['Cat0', 'Cat1', 'Cat2.1', 'Cat2.2', 'Cat3.1', 'Cat3.2', 'Cat3.3', 'CatSMS', 'CatSpoofing']
+ |
+ |
+
+
+MapSmsTP-PID |
+text |
+ |
+ |
+
+
SccpCdPC |
text |
@@ -5878,6 +6186,16 @@ ss7-attack is a MISP object available in JSON format at
|
+
+SccpCgSSN |
+text |
+
+ Signaling Connection Control Part (SCCP) - Decimal value between 0-255.
+ |
+ |
+
comment
-comment |
+stix2-pattern |
+stix2-pattern |
- A description of the stix2-pattern.
+ STIX 2 pattern
|
|
-stix2-pattern |
-stix2-pattern |
+comment |
+comment |
- STIX 2 pattern
+ A description of the stix2-pattern.
|
@@ -5975,6 +6293,46 @@ tor-node is a MISP object available in JSON format at text |
+text |
+ |
+ |
+
+
+published |
+datetime |
+
+ router’s publication time. This can be different from first-seen and last-seen.
+ |
+ |
+
+
+flags |
+text |
+
+ list of flag associated with the node.
+ |
+ |
+
+
+version |
+text |
+
+ parsed version of tor, this is None if the relay’s using a new versioning scheme.
+ |
+ |
+
+
description |
text |
@@ -6005,36 +6363,6 @@ tor-node is a MISP object available in JSON format at address |
-ip-src |
-
- IP address of the Tor node seen.
- |
- |
-
-
-flags |
-text |
-
- list of flag associated with the node.
- |
- |
-
-
-first-seen |
-datetime |
-
- When the Tor node designed by the IP address has been seen for the first time.
- |
- |
-
-
fingerprint |
text |
@@ -6045,26 +6373,6 @@ tor-node is a MISP object available in JSON format at text |
-text |
- |
- |
-
-
-version |
-text |
-
- parsed version of tor, this is None if the relay’s using a new versioning scheme.
- |
- |
-
-
document |
text |
@@ -6075,16 +6383,26 @@ tor-node is a MISP object available in JSON format at published |
+first-seen |
datetime |
- router’s publication time. This can be different from first-seen and last-seen.
+ When the Tor node designed by the IP address has been seen for the first time.
|
|
+address |
+ip-src |
+
+ IP address of the Tor node seen.
+ |
+ |
+
+
last-seen |
datetime |
@@ -6133,6 +6451,66 @@ url is a MISP object available in JSON format at text |
+text |
+
+ Description of the URL
+ |
+ |
+
+
+tld |
+text |
+ |
+ |
+
+
+last-seen |
+datetime |
+
+ Last time this URL has been seen
+ |
+ |
+
+
+port |
+port |
+ |
+ |
+
+
+domain_without_tld |
+text |
+
+ Domain without Top-Level Domain
+ |
+ |
+
+
+first-seen |
+datetime |
+
+ First time this URL has been seen
+ |
+ |
+
+
query_string |
text |
@@ -6153,60 +6531,10 @@ url is a MISP object available in JSON format at host |
-hostname |
- |
- |
-
-
-url |
-url |
- |
- |
-
-
-port |
-port |
- |
- |
-
-
-credential |
+scheme |
text |
- Credential (username, password)
- |
- |
-
-
-text |
-text |
-
- Description of the URL
- |
- |
-
-
-first-seen |
-datetime |
-
- First time this URL has been seen
+ Scheme ['http', 'https', 'ftp', 'gopher', 'sip']
|
@@ -6223,36 +6551,6 @@ url is a MISP object available in JSON format at domain |
-domain |
- |
- |
-
-
-scheme |
-text |
-
- Scheme ['http', 'https', 'ftp', 'gopher', 'sip']
- |
- |
-
-
-tld |
-text |
- |
- |
-
-
fragment |
text |
@@ -6263,20 +6561,40 @@ url is a MISP object available in JSON format at last-seen |
-datetime |
+credential |
+text |
- Last time this URL has been seen
+ Credential (username, password)
|
|
-domain_without_tld |
-text |
+url |
+url |
- Domain without Top-Level Domain
+ Full URL
+ |
+ |
+
+
+domain |
+domain |
+ |
+ |
+
+
+host |
+hostname |
+ |
@@ -6321,6 +6639,36 @@ victim is a MISP object available in JSON format at external |
+target-external |
+
+ External target organisations affected by this attack.
+ |
+ |
+
+
+node |
+target-machine |
+
+ Name(s) of node that was targeted.
+ |
+ |
+
+
+sectors |
+text |
+
+ The list of sectors that the victim belong to ['agriculture', 'aerospace', 'automotive', 'communications', 'construction', 'defence', 'education', 'energy', 'engineering', 'entertainment', 'financial services', 'government national', 'government regional', 'government local', 'government public services', 'healthcare', 'hospitality leisure', 'infrastructure', 'insurance', 'manufacturing', 'mining', 'non profit', 'pharmaceuticals', 'retail', 'technology', 'telecommunications', 'transportation', 'utilities']
+ |
+ |
+
+
name |
target-org |
@@ -6331,6 +6679,26 @@ victim is a MISP object available in JSON format at ip-address |
+ip-dst |
+
+ IP address(es) of the node targeted.
+ |
+ |
+
+
+roles |
+text |
+
+ The list of roles targeted within the victim.
+ |
+ |
+
+
description |
text |
@@ -6351,30 +6719,10 @@ victim is a MISP object available in JSON format at sectors |
-text |
+user |
+target-user |
- The list of sectors that the victim belong to ['agriculture', 'aerospace', 'automotive', 'communications', 'construction', 'defence', 'education', 'energy', 'engineering', 'entertainment', 'financial services', 'government national', 'government regional', 'government local', 'government public services', 'healthcare', 'hospitality leisure', 'infrastructure', 'insurance', 'manufacturing', 'mining', 'non profit', 'pharmaceuticals', 'retail', 'technology', 'telecommunications', 'transportation', 'utilities']
- |
- |
-
-
-ip-address |
-ip-dst |
-
- IP address(es) of the node targeted.
- |
- |
-
-
-node |
-target-machine |
-
- Name(s) of node that was targeted.
+ The username(s) of the user targeted.
|
@@ -6391,16 +6739,6 @@ victim is a MISP object available in JSON format at external |
-target-external |
-
- External target organisations affected by this attack.
- |
- |
-
-
email |
target-email |
@@ -6410,26 +6748,6 @@ victim is a MISP object available in JSON format at
|
-
-user |
-target-user |
-
- The username(s) of the user targeted.
- |
- |
-
-
-roles |
-text |
-
- The list of roles targeted within the victim.
- |
- |
-
@@ -6469,10 +6787,20 @@ virustotal-report is a MISP object available in JSON format at first-submission
+community-score |
+text |
+ |
+ |
+
+
+last-submission |
datetime |
- First Submission
+ Last Submission
|
@@ -6489,20 +6817,10 @@ virustotal-report is a MISP object available in JSON format at community-score |
-text |
- |
- |
-
-
-last-submission |
+first-submission |
datetime |
- Last Submission
+ First Submission
|
|
-text |
+published |
+datetime |
- The vulnerable configuration is described in CPE format
+ Initial publication date
|
|
-
-
-summary |
-text |
-
- Summary of the vulnerability
- |
- |
@@ -6597,20 +6905,10 @@ vulnerability is a MISP object available in JSON format at published
-datetime |
+state |
+text |
- Initial publication date
- |
- |
-
-
-created |
-datetime |
-
- First time when the vulnerability was discovered
+ State of the vulnerability. A vulnerability can have multiple states depending of the current actions performed. ['Published', 'Embargo', 'Reviewed', 'Vulnerability ID Assigned', 'Reported', 'Fixed']
|
|
+text |
+
+ The vulnerable configuration is described in CPE format
+ |
+ |
+
+
+created |
+datetime |
+
+ First time when the vulnerability was discovered
+ |
+ |
+
+
+summary |
+text |
+
+ Summary of the vulnerability
+ |
+ |
+
+
references |
link |
@@ -6636,16 +6964,6 @@ vulnerability is a MISP object available in JSON format at
|
-
-state |
-text |
-
- State of the vulnerability. A vulnerability can have multiple states depending of the current actions performed. ['Published', 'Embargo', 'Reviewed', 'Vulnerability ID Assigned', 'Reported', 'Fixed']
- |
- |
-
@@ -6685,6 +7003,16 @@ whois is a MISP object available in JSON format at registrant-org
+whois-registrant-org |
+
+ Registrant organisation
+ |
+ |
+
+
text |
text |
@@ -6695,20 +7023,10 @@ whois is a MISP object available in JSON format at creation-date |
-datetime |
+registrar |
+whois-registrar |
- Initial creation of the whois entry
- |
- |
-
-
-registrant-org |
-whois-registrant-org |
-
- Registrant organisation
+ Registrar of the whois entry
|
@@ -6725,6 +7043,26 @@ whois is a MISP object available in JSON format at registrant-name |
+whois-registrant-name |
+ |
+ |
+
+
+nameserver |
+hostname |
+ |
+ |
+
+
modification-date |
datetime |
@@ -6735,10 +7073,10 @@ whois is a MISP object available in JSON format at registrant-name |
-whois-registrant-name |
+registrant-email |
+whois-registrant-email |
- Registrant name
+ Registrant email address
|
@@ -6755,26 +7093,6 @@ whois is a MISP object available in JSON format at registrant-email |
-whois-registrant-email |
-
- Registrant email address
- |
- |
-
-
-registrar |
-whois-registrar |
-
- Registrar of the whois entry
- |
- |
-
-
registrant-phone |
whois-registrant-phone |
@@ -6785,10 +7103,10 @@ whois is a MISP object available in JSON format at nameserver |
-hostname |
+creation-date |
+datetime |
- Nameserver
+ Initial creation of the whois entry
|
|
-text |
-
- Modulus of the public key
- |
- |
-
-
-x509-fingerprint-sha1 |
-x509-fingerprint-sha1 |
-
- [Insecure] Secure Hash Algorithm 1 (160 bits)
- |
- |
-
-
text |
text |
@@ -6863,56 +7161,6 @@ x509 is a MISP object available in JSON format at version |
-text |
-
- Version of the certificate
- |
- |
-
-
-serial-number |
-text |
-
- Serial number of the certificate
- |
- |
-
-
-pubkey-info-size |
-text |
-
- Length of the public key (in bits)
- |
- |
-
-
-pubkey-info-exponent |
-text |
-
- Exponent of the public key
- |
- |
-
-
-issuer |
-text |
-
- Issuer of the certificate
- |
- |
-
-
pubkey-info-algorithm |
text |
|
-x509-fingerprint-sha256 |
+validity-not-before |
+datetime |
- Secure Hash Algorithm 2 (256 bits)
+ Certificate invalid before that date
|
|
-subject |
+pubkey-info-size |
text |
- Subject of the certificate
+ Length of the public key (in bits)
|
@@ -6953,20 +7201,10 @@ x509 is a MISP object available in JSON format at raw-base64 |
-text |
+x509-fingerprint-sha1 |
+x509-fingerprint-sha1 |
- Raw certificate base64 encoded
- |
- |
-
-
-validity-not-before |
-datetime |
-
- Certificate invalid before that date
+ [Insecure] Secure Hash Algorithm 1 (160 bits)
|
@@ -6982,6 +7220,86 @@ x509 is a MISP object available in JSON format at
|
+
+pubkey-info-modulus |
+text |
+
+ Modulus of the public key
+ |
+ |
+
+
+pubkey-info-exponent |
+text |
+
+ Exponent of the public key
+ |
+ |
+
+
+serial-number |
+text |
+
+ Serial number of the certificate
+ |
+ |
+
+
+subject |
+text |
+
+ Subject of the certificate
+ |
+ |
+
+
+x509-fingerprint-sha256 |
+x509-fingerprint-sha256 |
+
+ Secure Hash Algorithm 2 (256 bits)
+ |
+ |
+
+
+raw-base64 |
+text |
+
+ Raw certificate base64 encoded
+ |
+ |
+
+
+issuer |
+text |
+
+ Issuer of the certificate
+ |
+ |
+
+
+version |
+text |
+
+ Version of the certificate
+ |
+ |
+
@@ -7021,10 +7339,10 @@ yabin is a MISP object available in JSON format at yara
+yara-hunt |
yara |
- Yara rule generated from -y.
+ Wide yara rule generated from -yh.
|
@@ -7041,6 +7359,16 @@ yabin is a MISP object available in JSON format at whitelist |
+comment |
+
+ Whitelist name used to generate the rules.
+ |
+ |
+
+
comment |
comment |
@@ -7051,25 +7379,15 @@ yabin is a MISP object available in JSON format at yara-hunt |
+yara |
yara |
- Wide yara rule generated from -yh.
+ Yara rule generated from -y.
|
|
-
-whitelist |
-comment |
-
- Whitelist name used to generate the rules.
- |
- |
-
@@ -7434,7 +7752,7 @@ yabin is a MISP object available in JSON format at
diff --git a/objects.pdf b/objects.pdf
index 3fecf63..b179a39 100755
--- a/objects.pdf
+++ b/objects.pdf
@@ -4,16 +4,16 @@
<< /Title (MISP Objects)
/Creator (Asciidoctor PDF 1.5.0.alpha.16, based on Prawn 2.2.2)
/Producer (Asciidoctor PDF 1.5.0.alpha.16, based on Prawn 2.2.2)
-/ModDate (D:20180122181315+01'00')
-/CreationDate (D:20180122181316+01'00')
+/ModDate (D:20180129082931+01'00')
+/CreationDate (D:20180129082932+01'00')
>>
endobj
2 0 obj
<< /Type /Catalog
/Pages 3 0 R
/Names 16 0 R
-/Outlines 424 0 R
-/PageLabels 479 0 R
+/Outlines 442 0 R
+/PageLabels 499 0 R
/PageMode /UseOutlines
/OpenAction [7 0 R /FitH 842.89]
/ViewerPreferences << /DisplayDocTitle true
@@ -22,8 +22,8 @@ endobj
endobj
3 0 obj
<< /Type /Pages
-/Count 66
-/Kids [7 0 R 10 0 R 12 0 R 14 0 R 24 0 R 33 0 R 40 0 R 45 0 R 47 0 R 58 0 R 49 0 R 51 0 R 53 0 R 74 0 R 79 0 R 87 0 R 92 0 R 97 0 R 102 0 R 104 0 R 109 0 R 111 0 R 116 0 R 118 0 R 123 0 R 130 0 R 135 0 R 140 0 R 142 0 R 152 0 R 160 0 R 163 0 R 170 0 R 175 0 R 181 0 R 183 0 R 188 0 R 198 0 R 200 0 R 205 0 R 210 0 R 212 0 R 217 0 R 219 0 R 224 0 R 226 0 R 231 0 R 236 0 R 245 0 R 250 0 R 255 0 R 257 0 R 260 0 R 267 0 R 272 0 R 277 0 R 279 0 R 287 0 R 289 0 R 298 0 R 300 0 R 309 0 R 311 0 R 313 0 R 315 0 R 317 0 R]
+/Count 70
+/Kids [7 0 R 10 0 R 12 0 R 14 0 R 24 0 R 33 0 R 40 0 R 45 0 R 47 0 R 58 0 R 49 0 R 51 0 R 53 0 R 69 0 R 74 0 R 81 0 R 86 0 R 91 0 R 96 0 R 101 0 R 109 0 R 111 0 R 113 0 R 118 0 R 120 0 R 122 0 R 127 0 R 134 0 R 136 0 R 141 0 R 146 0 R 151 0 R 156 0 R 166 0 R 171 0 R 176 0 R 181 0 R 187 0 R 192 0 R 194 0 R 202 0 R 209 0 R 214 0 R 219 0 R 221 0 R 226 0 R 228 0 R 233 0 R 235 0 R 240 0 R 245 0 R 247 0 R 256 0 R 261 0 R 266 0 R 271 0 R 273 0 R 281 0 R 286 0 R 288 0 R 293 0 R 298 0 R 304 0 R 309 0 R 314 0 R 320 0 R 325 0 R 327 0 R 329 0 R 331 0 R]
>>
endobj
4 0 obj
@@ -88,15 +88,15 @@ endobj
<< /Type /Font
/BaseFont /4a2cc7+NotoSerif
/Subtype /TrueType
-/FontDescriptor 481 0 R
+/FontDescriptor 501 0 R
/FirstChar 32
/LastChar 255
-/Widths 483 0 R
-/ToUnicode 482 0 R
+/Widths 503 0 R
+/ToUnicode 502 0 R
>>
endobj
9 0 obj
-<< /Length 28353
+<< /Length 28336
>>
stream
q
@@ -439,7 +439,7 @@ ET
BT
60.24 604.016 Td
/F1.0 10.5 Tf
-<636f696e2d61646472657373> Tj
+<62616e6b2d6163636f756e74> Tj
ET
0.0 0.0 0.0 SCN
@@ -468,7 +468,7 @@ ET
BT
541.1705 604.016 Td
/F1.0 10.5 Tf
-<39> Tj
+<38> Tj
ET
0.0 0.0 0.0 SCN
@@ -479,7 +479,7 @@ ET
BT
60.24 585.536 Td
/F1.0 10.5 Tf
-<636f6f6b6965> Tj
+<636f696e2d61646472657373> Tj
ET
0.0 0.0 0.0 SCN
@@ -488,9 +488,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 585.536 Td
+128.4391 585.536 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -508,7 +508,7 @@ ET
BT
535.301 585.536 Td
/F1.0 10.5 Tf
-<3130> Tj
+<3131> Tj
ET
0.0 0.0 0.0 SCN
@@ -519,7 +519,7 @@ ET
BT
60.24 567.056 Td
/F1.0 10.5 Tf
-<63726564656e7469616c> Tj
+<636f6f6b6965> Tj
ET
0.0 0.0 0.0 SCN
@@ -528,9 +528,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 567.056 Td
+96.3721 567.056 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -548,7 +548,7 @@ ET
BT
535.301 567.056 Td
/F1.0 10.5 Tf
-<3131> Tj
+<3132> Tj
ET
0.0 0.0 0.0 SCN
@@ -559,7 +559,7 @@ ET
BT
60.24 548.576 Td
/F1.0 10.5 Tf
-<6372656469742d63617264> Tj
+<63726564656e7469616c> Tj
ET
0.0 0.0 0.0 SCN
@@ -568,9 +568,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-117.7501 548.576 Td
+112.4056 548.576 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -588,7 +588,7 @@ ET
BT
535.301 548.576 Td
/F1.0 10.5 Tf
-<3132> Tj
+<3133> Tj
ET
0.0 0.0 0.0 SCN
@@ -599,7 +599,7 @@ ET
BT
60.24 530.096 Td
/F1.0 10.5 Tf
-<64646f73> Tj
+<6372656469742d63617264> Tj
ET
0.0 0.0 0.0 SCN
@@ -608,9 +608,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-85.6831 530.096 Td
+117.7501 530.096 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -628,7 +628,7 @@ ET
BT
535.301 530.096 Td
/F1.0 10.5 Tf
-<3132> Tj
+<3134> Tj
ET
0.0 0.0 0.0 SCN
@@ -639,7 +639,7 @@ ET
BT
60.24 511.616 Td
/F1.0 10.5 Tf
-<6469616d657465722d61747461636b> Tj
+<64646f73> Tj
ET
0.0 0.0 0.0 SCN
@@ -648,9 +648,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-144.4726 511.616 Td
+85.6831 511.616 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -668,7 +668,7 @@ ET
BT
535.301 511.616 Td
/F1.0 10.5 Tf
-<3133> Tj
+<3135> Tj
ET
0.0 0.0 0.0 SCN
@@ -679,7 +679,7 @@ ET
BT
60.24 493.136 Td
/F1.0 10.5 Tf
-<646f6d61696e2d6970> Tj
+<6469616d657465722d61747461636b> Tj
ET
0.0 0.0 0.0 SCN
@@ -688,9 +688,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 493.136 Td
+144.4726 493.136 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -708,7 +708,7 @@ ET
BT
535.301 493.136 Td
/F1.0 10.5 Tf
-<3134> Tj
+<3136> Tj
ET
0.0 0.0 0.0 SCN
@@ -719,7 +719,7 @@ ET
BT
60.24 474.656 Td
/F1.0 10.5 Tf
-<656c66> Tj
+<646f6d61696e2d6970> Tj
ET
0.0 0.0 0.0 SCN
@@ -728,9 +728,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-74.9941 474.656 Td
+112.4056 474.656 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -748,7 +748,7 @@ ET
BT
535.301 474.656 Td
/F1.0 10.5 Tf
-<3135> Tj
+<3137> Tj
ET
0.0 0.0 0.0 SCN
@@ -759,7 +759,7 @@ ET
BT
60.24 456.176 Td
/F1.0 10.5 Tf
-<656c662d73656374696f6e> Tj
+<656c66> Tj
ET
0.0 0.0 0.0 SCN
@@ -768,9 +768,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 456.176 Td
+74.9941 456.176 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -799,7 +799,7 @@ ET
BT
60.24 437.696 Td
/F1.0 10.5 Tf
-<656d61696c> Tj
+<656c662d73656374696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -808,9 +808,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 437.696 Td
+112.4056 437.696 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -828,7 +828,7 @@ ET
BT
535.301 437.696 Td
/F1.0 10.5 Tf
-<3139> Tj
+<3230> Tj
ET
0.0 0.0 0.0 SCN
@@ -839,7 +839,7 @@ ET
BT
60.24 419.216 Td
/F1.0 10.5 Tf
-<66696c65> Tj
+<656d61696c> Tj
ET
0.0 0.0 0.0 SCN
@@ -848,9 +848,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 419.216 Td
+91.0276 419.216 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -868,7 +868,7 @@ ET
BT
535.301 419.216 Td
/F1.0 10.5 Tf
-<3231> Tj
+<3233> Tj
ET
0.0 0.0 0.0 SCN
@@ -879,7 +879,7 @@ ET
BT
60.24 400.736 Td
/F1.0 10.5 Tf
-<67656f6c6f636174696f6e> Tj
+<66696c65> Tj
ET
0.0 0.0 0.0 SCN
@@ -888,9 +888,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 400.736 Td
+80.3386 400.736 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -908,7 +908,7 @@ ET
BT
535.301 400.736 Td
/F1.0 10.5 Tf
-<3232> Tj
+<3234> Tj
ET
0.0 0.0 0.0 SCN
@@ -919,7 +919,7 @@ ET
BT
60.24 382.256 Td
/F1.0 10.5 Tf
-<6774702d61747461636b> Tj
+<67656f6c6f636174696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -928,9 +928,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 382.256 Td
+123.0946 382.256 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -948,7 +948,7 @@ ET
BT
535.301 382.256 Td
/F1.0 10.5 Tf
-<3233> Tj
+<3236> Tj
ET
0.0 0.0 0.0 SCN
@@ -959,7 +959,7 @@ ET
BT
60.24 363.776 Td
/F1.0 10.5 Tf
-<687474702d72657175657374> Tj
+<6774702d61747461636b> Tj
ET
0.0 0.0 0.0 SCN
@@ -968,9 +968,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 363.776 Td
+112.4056 363.776 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -988,7 +988,7 @@ ET
BT
535.301 363.776 Td
/F1.0 10.5 Tf
-<3234> Tj
+<3237> Tj
ET
0.0 0.0 0.0 SCN
@@ -999,7 +999,7 @@ ET
BT
60.24 345.296 Td
/F1.0 10.5 Tf
-<69702d706f7274> Tj
+<687474702d72657175657374> Tj
ET
0.0 0.0 0.0 SCN
@@ -1008,9 +1008,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 345.296 Td
+123.0946 345.296 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1028,7 +1028,7 @@ ET
BT
535.301 345.296 Td
/F1.0 10.5 Tf
-<3236> Tj
+<3238> Tj
ET
0.0 0.0 0.0 SCN
@@ -1039,7 +1039,7 @@ ET
BT
60.24 326.816 Td
/F1.0 10.5 Tf
-<6a6133> Tj
+<69702d706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -1048,9 +1048,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 326.816 Td
+96.3721 326.816 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1068,7 +1068,7 @@ ET
BT
535.301 326.816 Td
/F1.0 10.5 Tf
-<3236> Tj
+<3239> Tj
ET
0.0 0.0 0.0 SCN
@@ -1079,7 +1079,7 @@ ET
BT
60.24 308.336 Td
/F1.0 10.5 Tf
-<6d6163686f> Tj
+<6a6133> Tj
ET
0.0 0.0 0.0 SCN
@@ -1088,9 +1088,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 308.336 Td
+80.3386 308.336 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1108,7 +1108,7 @@ ET
BT
535.301 308.336 Td
/F1.0 10.5 Tf
-<3237> Tj
+<3330> Tj
ET
0.0 0.0 0.0 SCN
@@ -1119,7 +1119,7 @@ ET
BT
60.24 289.856 Td
/F1.0 10.5 Tf
-<6d6163686f2d73656374696f6e> Tj
+<6d6163686f> Tj
ET
0.0 0.0 0.0 SCN
@@ -1128,9 +1128,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-133.7836 289.856 Td
+96.3721 289.856 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1148,7 +1148,7 @@ ET
BT
535.301 289.856 Td
/F1.0 10.5 Tf
-<3237> Tj
+<3330> Tj
ET
0.0 0.0 0.0 SCN
@@ -1159,7 +1159,7 @@ ET
BT
60.24 271.376 Td
/F1.0 10.5 Tf
-<6d6963726f626c6f67> Tj
+<6d6163686f2d73656374696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1168,9 +1168,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 271.376 Td
+133.7836 271.376 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1188,7 +1188,7 @@ ET
BT
535.301 271.376 Td
/F1.0 10.5 Tf
-<3238> Tj
+<3331> Tj
ET
0.0 0.0 0.0 SCN
@@ -1199,7 +1199,7 @@ ET
BT
60.24 252.896 Td
/F1.0 10.5 Tf
-<6d75746578> Tj
+<6d6963726f626c6f67> Tj
ET
0.0 0.0 0.0 SCN
@@ -1208,9 +1208,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 252.896 Td
+112.4056 252.896 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1228,7 +1228,7 @@ ET
BT
535.301 252.896 Td
/F1.0 10.5 Tf
-<3239> Tj
+<3332> Tj
ET
0.0 0.0 0.0 SCN
@@ -1239,7 +1239,7 @@ ET
BT
60.24 234.416 Td
/F1.0 10.5 Tf
-<6e6574666c6f77> Tj
+<6d75746578> Tj
ET
0.0 0.0 0.0 SCN
@@ -1248,9 +1248,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-101.7166 234.416 Td
+96.3721 234.416 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1268,7 +1268,7 @@ ET
BT
535.301 234.416 Td
/F1.0 10.5 Tf
-<3330> Tj
+<3333> Tj
ET
0.0 0.0 0.0 SCN
@@ -1279,7 +1279,7 @@ ET
BT
60.24 215.936 Td
/F1.0 10.5 Tf
-<706173736976652d646e73> Tj
+<6e6574666c6f77> Tj
ET
0.0 0.0 0.0 SCN
@@ -1288,9 +1288,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 215.936 Td
+101.7166 215.936 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1308,7 +1308,7 @@ ET
BT
535.301 215.936 Td
/F1.0 10.5 Tf
-<3331> Tj
+<3334> Tj
ET
0.0 0.0 0.0 SCN
@@ -1319,7 +1319,7 @@ ET
BT
60.24 197.456 Td
/F1.0 10.5 Tf
-<7061737465> Tj
+<706173736976652d646e73> Tj
ET
0.0 0.0 0.0 SCN
@@ -1328,9 +1328,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 197.456 Td
+123.0946 197.456 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1348,7 +1348,7 @@ ET
BT
535.301 197.456 Td
/F1.0 10.5 Tf
-<3333> Tj
+<3335> Tj
ET
0.0 0.0 0.0 SCN
@@ -1359,7 +1359,7 @@ ET
BT
60.24 178.976 Td
/F1.0 10.5 Tf
-<7065> Tj
+<7061737465> Tj
ET
0.0 0.0 0.0 SCN
@@ -1368,9 +1368,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-74.9941 178.976 Td
+91.0276 178.976 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1388,7 +1388,7 @@ ET
BT
535.301 178.976 Td
/F1.0 10.5 Tf
-<3334> Tj
+<3337> Tj
ET
0.0 0.0 0.0 SCN
@@ -1399,7 +1399,7 @@ ET
BT
60.24 160.496 Td
/F1.0 10.5 Tf
-<70652d73656374696f6e> Tj
+<7065> Tj
ET
0.0 0.0 0.0 SCN
@@ -1408,9 +1408,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 160.496 Td
+74.9941 160.496 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1428,7 +1428,7 @@ ET
BT
535.301 160.496 Td
/F1.0 10.5 Tf
-<3336> Tj
+<3337> Tj
ET
0.0 0.0 0.0 SCN
@@ -1439,7 +1439,7 @@ ET
BT
60.24 142.016 Td
/F1.0 10.5 Tf
-<706572736f6e> Tj
+<70652d73656374696f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1448,9 +1448,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 142.016 Td
+112.4056 142.016 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1468,7 +1468,7 @@ ET
BT
535.301 142.016 Td
/F1.0 10.5 Tf
-<3337> Tj
+<3339> Tj
ET
0.0 0.0 0.0 SCN
@@ -1479,7 +1479,7 @@ ET
BT
60.24 123.536 Td
/F1.0 10.5 Tf
-<70686f6e65> Tj
+<706572736f6e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1508,7 +1508,7 @@ ET
BT
535.301 123.536 Td
/F1.0 10.5 Tf
-<3339> Tj
+<3430> Tj
ET
0.0 0.0 0.0 SCN
@@ -1519,7 +1519,7 @@ ET
BT
60.24 105.056 Td
/F1.0 10.5 Tf
-[<72326772> 20.0195 <617068697479>] TJ
+<70686f6e65> Tj
ET
0.0 0.0 0.0 SCN
@@ -1528,9 +1528,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-117.7501 105.056 Td
+96.3721 105.056 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1548,7 +1548,7 @@ ET
BT
535.301 105.056 Td
/F1.0 10.5 Tf
-<3431> Tj
+<3432> Tj
ET
0.0 0.0 0.0 SCN
@@ -1559,7 +1559,7 @@ ET
BT
60.24 86.576 Td
/F1.0 10.5 Tf
-<726567657870> Tj
+[<72326772> 20.0195 <617068697479>] TJ
ET
0.0 0.0 0.0 SCN
@@ -1568,9 +1568,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 86.576 Td
+117.7501 86.576 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1588,7 +1588,7 @@ ET
BT
535.301 86.576 Td
/F1.0 10.5 Tf
-<3433> Tj
+<3434> Tj
ET
0.0 0.0 0.0 SCN
@@ -1599,7 +1599,7 @@ ET
BT
60.24 68.096 Td
/F1.0 10.5 Tf
-[<72656769737472792d6b> 20.0195 <6579>] TJ
+<726567657870> Tj
ET
0.0 0.0 0.0 SCN
@@ -1608,9 +1608,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-123.0946 68.096 Td
+96.3721 68.096 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1628,7 +1628,7 @@ ET
BT
535.301 68.096 Td
/F1.0 10.5 Tf
-<3434> Tj
+<3436> Tj
ET
0.0 0.0 0.0 SCN
@@ -1651,11 +1651,11 @@ endobj
/F1.0 8 0 R
>>
>>
-/Annots [318 0 R 319 0 R 320 0 R 321 0 R 322 0 R 323 0 R 324 0 R 325 0 R 326 0 R 327 0 R 328 0 R 329 0 R 330 0 R 331 0 R 332 0 R 333 0 R 334 0 R 335 0 R 336 0 R 337 0 R 338 0 R 339 0 R 340 0 R 341 0 R 342 0 R 343 0 R 344 0 R 345 0 R 346 0 R 347 0 R 348 0 R 349 0 R 350 0 R 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R 359 0 R 360 0 R 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R 373 0 R 374 0 R 375 0 R 376 0 R 377 0 R 378 0 R 379 0 R 380 0 R 381 0 R 382 0 R 383 0 R 384 0 R 385 0 R 386 0 R 387 0 R 388 0 R 389 0 R 390 0 R 391 0 R 392 0 R 393 0 R]
+/Annots [332 0 R 333 0 R 334 0 R 335 0 R 336 0 R 337 0 R 338 0 R 339 0 R 340 0 R 341 0 R 342 0 R 343 0 R 344 0 R 345 0 R 346 0 R 347 0 R 348 0 R 349 0 R 350 0 R 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R 359 0 R 360 0 R 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R 373 0 R 374 0 R 375 0 R 376 0 R 377 0 R 378 0 R 379 0 R 380 0 R 381 0 R 382 0 R 383 0 R 384 0 R 385 0 R 386 0 R 387 0 R 388 0 R 389 0 R 390 0 R 391 0 R 392 0 R 393 0 R 394 0 R 395 0 R 396 0 R 397 0 R 398 0 R 399 0 R 400 0 R 401 0 R 402 0 R 403 0 R 404 0 R 405 0 R 406 0 R 407 0 R]
>>
endobj
11 0 obj
-<< /Length 10422
+<< /Length 11909
>>
stream
q
@@ -1667,7 +1667,7 @@ q
BT
60.24 794.676 Td
/F1.0 10.5 Tf
-<7265706f7274> Tj
+[<72656769737472792d6b> 20.0195 <6579>] TJ
ET
0.0 0.0 0.0 SCN
@@ -1676,9 +1676,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 794.676 Td
+123.0946 794.676 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1696,7 +1696,7 @@ ET
BT
535.301 794.676 Td
/F1.0 10.5 Tf
-<3435> Tj
+<3437> Tj
ET
0.0 0.0 0.0 SCN
@@ -1707,7 +1707,7 @@ ET
BT
60.24 776.196 Td
/F1.0 10.5 Tf
-<72746972> Tj
+<7265706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -1716,9 +1716,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 776.196 Td
+96.3721 776.196 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1736,7 +1736,7 @@ ET
BT
535.301 776.196 Td
/F1.0 10.5 Tf
-<3435> Tj
+<3439> Tj
ET
0.0 0.0 0.0 SCN
@@ -1747,7 +1747,7 @@ ET
BT
60.24 757.716 Td
/F1.0 10.5 Tf
-<73616e64626f782d7265706f7274> Tj
+<72746972> Tj
ET
0.0 0.0 0.0 SCN
@@ -1756,9 +1756,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-139.1281 757.716 Td
+80.3386 757.716 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1776,7 +1776,7 @@ ET
BT
535.301 757.716 Td
/F1.0 10.5 Tf
-<3436> Tj
+<3439> Tj
ET
0.0 0.0 0.0 SCN
@@ -1787,7 +1787,7 @@ ET
BT
60.24 739.236 Td
/F1.0 10.5 Tf
-<7373372d61747461636b> Tj
+<73616e64626f782d7265706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -1796,9 +1796,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-112.4056 739.236 Td
+139.1281 739.236 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1816,7 +1816,7 @@ ET
BT
535.301 739.236 Td
/F1.0 10.5 Tf
-<3437> Tj
+<3530> Tj
ET
0.0 0.0 0.0 SCN
@@ -1827,7 +1827,7 @@ ET
BT
60.24 720.756 Td
/F1.0 10.5 Tf
-<73746978322d7061747465726e> Tj
+<73622d7369676e6174757265> Tj
ET
0.0 0.0 0.0 SCN
@@ -1836,9 +1836,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-128.4391 720.756 Td
+123.0946 720.756 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1856,7 +1856,7 @@ ET
BT
535.301 720.756 Td
/F1.0 10.5 Tf
-<3439> Tj
+<3531> Tj
ET
0.0 0.0 0.0 SCN
@@ -1867,7 +1867,7 @@ ET
BT
60.24 702.276 Td
/F1.0 10.5 Tf
-<746f722d6e6f6465> Tj
+<7373372d61747461636b> Tj
ET
0.0 0.0 0.0 SCN
@@ -1876,9 +1876,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-107.0611 702.276 Td
+112.4056 702.276 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1896,7 +1896,7 @@ ET
BT
535.301 702.276 Td
/F1.0 10.5 Tf
-<3530> Tj
+<3532> Tj
ET
0.0 0.0 0.0 SCN
@@ -1907,7 +1907,7 @@ ET
BT
60.24 683.796 Td
/F1.0 10.5 Tf
-<75726c> Tj
+<73746978322d7061747465726e> Tj
ET
0.0 0.0 0.0 SCN
@@ -1916,9 +1916,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-80.3386 683.796 Td
+128.4391 683.796 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1936,7 +1936,7 @@ ET
BT
535.301 683.796 Td
/F1.0 10.5 Tf
-<3531> Tj
+<3534> Tj
ET
0.0 0.0 0.0 SCN
@@ -1947,7 +1947,7 @@ ET
BT
60.24 665.316 Td
/F1.0 10.5 Tf
-<76696374696d> Tj
+<746f722d6e6f6465> Tj
ET
0.0 0.0 0.0 SCN
@@ -1956,9 +1956,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-96.3721 665.316 Td
+107.0611 665.316 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -1976,7 +1976,7 @@ ET
BT
535.301 665.316 Td
/F1.0 10.5 Tf
-<3532> Tj
+<3534> Tj
ET
0.0 0.0 0.0 SCN
@@ -1987,7 +1987,7 @@ ET
BT
60.24 646.836 Td
/F1.0 10.5 Tf
-<7669727573746f74616c2d7265706f7274> Tj
+<75726c> Tj
ET
0.0 0.0 0.0 SCN
@@ -1996,9 +1996,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-144.4726 646.836 Td
+80.3386 646.836 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2016,7 +2016,7 @@ ET
BT
535.301 646.836 Td
/F1.0 10.5 Tf
-<3534> Tj
+<3535> Tj
ET
0.0 0.0 0.0 SCN
@@ -2027,7 +2027,7 @@ ET
BT
60.24 628.356 Td
/F1.0 10.5 Tf
-[<76756c6e6572> 20.0195 <6162696c697479>] TJ
+<76696374696d> Tj
ET
0.0 0.0 0.0 SCN
@@ -2036,9 +2036,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-128.4391 628.356 Td
+96.3721 628.356 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2056,7 +2056,7 @@ ET
BT
535.301 628.356 Td
/F1.0 10.5 Tf
-<3534> Tj
+<3537> Tj
ET
0.0 0.0 0.0 SCN
@@ -2067,7 +2067,7 @@ ET
BT
60.24 609.876 Td
/F1.0 10.5 Tf
-<77686f6973> Tj
+<7669727573746f74616c2d7265706f7274> Tj
ET
0.0 0.0 0.0 SCN
@@ -2076,9 +2076,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-91.0276 609.876 Td
+144.4726 609.876 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2096,7 +2096,7 @@ ET
BT
535.301 609.876 Td
/F1.0 10.5 Tf
-<3536> Tj
+<3538> Tj
ET
0.0 0.0 0.0 SCN
@@ -2107,7 +2107,7 @@ ET
BT
60.24 591.396 Td
/F1.0 10.5 Tf
-<78353039> Tj
+[<76756c6e6572> 20.0195 <6162696c697479>] TJ
ET
0.0 0.0 0.0 SCN
@@ -2116,9 +2116,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-85.6831 591.396 Td
+128.4391 591.396 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2136,7 +2136,7 @@ ET
BT
535.301 591.396 Td
/F1.0 10.5 Tf
-<3536> Tj
+<3539> Tj
ET
0.0 0.0 0.0 SCN
@@ -2147,7 +2147,7 @@ ET
BT
60.24 572.916 Td
/F1.0 10.5 Tf
-<796162696e> Tj
+<77686f6973> Tj
ET
0.0 0.0 0.0 SCN
@@ -2176,7 +2176,7 @@ ET
BT
535.301 572.916 Td
/F1.0 10.5 Tf
-<3538> Tj
+<3630> Tj
ET
0.0 0.0 0.0 SCN
@@ -2187,7 +2187,7 @@ ET
BT
60.24 554.436 Td
/F1.0 10.5 Tf
-<52656c6174696f6e7368697073> Tj
+<78353039> Tj
ET
0.0 0.0 0.0 SCN
@@ -2196,9 +2196,9 @@ ET
0.6627 0.6627 0.6627 SCN
BT
-128.4391 554.436 Td
+85.6831 554.436 Td
/F1.0 10.5 Tf
-<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
ET
0.0 0.0 0.0 SCN
@@ -2216,7 +2216,87 @@ ET
BT
535.301 554.436 Td
/F1.0 10.5 Tf
-<3538> Tj
+<3631> Tj
+ET
+
+0.0 0.0 0.0 SCN
+0.0 0.0 0.0 scn
+0.2 0.2 0.2 scn
+0.2 0.2 0.2 SCN
+
+BT
+60.24 535.956 Td
+/F1.0 10.5 Tf
+<796162696e> Tj
+ET
+
+0.0 0.0 0.0 SCN
+0.0 0.0 0.0 scn
+0.6627 0.6627 0.6627 scn
+0.6627 0.6627 0.6627 SCN
+
+BT
+91.0276 535.956 Td
+/F1.0 10.5 Tf
+<2e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e202e20> Tj
+ET
+
+0.0 0.0 0.0 SCN
+0.0 0.0 0.0 scn
+
+BT
+534.6211 535.956 Td
+/F1.0 2.625 Tf
+