2025-02-24

Author: evild3ad

CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All changes to the Microsoft-Analyzer-Suite will be documented in this file.  
 
+## [1.4.0] - 2025-02-24
+### Added
+- UAL-Analyzer: Detection of suspicious Inbox Rules via RegEx (incl. Conditional Formatting)
+- UAL-Analyzer: MoveToFolder-Blacklist.csv
+- UAL-Analyzer: UniqueTokenId and IssuedAtTime added to Hunt View → correlate with SignInLogs
+- UAL-Analyzer: RecordType / Id (Stats)
+- UAL-Analyzer: Line Charts - SharePoint (Workload), OneDrive (Workload), and FileDownloaded (SharePoint and OneDrive)
+- OAuthPermissions-Analyzer: Microsoft Graph Edition
+- OAuthPermissions-Analyzer: Detection of suspicious OAuth Apps (Anomalous ReplyUrls, Common Naming Patterns)
+
+### Fixed
+- Minor fixes and improvements
+
 ## [1.3.0] - 2025-01-27
 ### Added
 - UAL-Analyzer: UserAgent-Blacklist.csv
@@ -12,7 +25,7 @@ All changes to the Microsoft-Analyzer-Suite will be documented in this file.
 - EntraSignInLogs-Analyzer: UserAgent-Blacklist.csv
 - EntraSignInLogs-Analyzer: SignInEventTypes (Stats)
 
-## Fixed
+### Fixed
 - ReadTheDocs links of the Microsoft-Extractor-Suite documentation updated
 - Multiple minor fixes and improvements
 

Config.ps1

@@ -4,7 +4,7 @@
 # @copyright: Copyright (c) 2025 Martin Willing. All rights reserved. Licensed under the MIT license.
 # @contact:   Any feedback or suggestions are always welcome and much appreciated - mwilling@lethal-forensics.com
 # @url:       https://lethal-forensics.com/
-# @date:      2025-01-27
+# @date:      2025-02-24
 #
 #
 # ██╗     ███████╗████████╗██╗  ██╗ █████╗ ██╗      ███████╗ ██████╗ ██████╗ ███████╗███╗   ██╗███████╗██╗ ██████╗███████╗

Config/MicrosoftApps.csv

@@ -180,6 +180,7 @@
 "0517ffae-825d-4aff-999e-3f2336b8a20a","M365 App Management Service","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
 "6da466b6-1d13-4a2c-97bd-51a99e8d4d74","Exchange Office Graph Client for AAD - Interactive","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
 "5e5e43d4-54da-4211-86a4-c6e7f3715801","Azure Regional Service Manager","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
+"32b6d34b-c894-4971-8223-e17b86e9ad26","Signal B2 Service","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
 "1fec8e78-bce4-4aaf-ab1b-5451cc387264","Microsoft Teams","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
 "0c708d37-30b2-4f22-8168-5d0cba6f37be","Microsoft Teams Partner Tenant Administration ","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
 "562db366-1b96-45d2-aa4a-f2148cef2240","Diagnostic Services Trusted Storage Access","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Graph"
@@ -550,6 +551,7 @@
 "51be292c-a17e-4f17-9a7e-4b661fb16dd2","Microsoft Exchange ProtectedServiceHost","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "fb78d390-0c51-40cd-8e17-fdbfab77341b","Microsoft Exchange REST API Based Powershell","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "47629505-c2b6-4a80-adb1-9b3a3d233b7b","Microsoft Exchange Web Services","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
+"6326e366-9d6d-4c70-b22a-34c7ea72d73d","Microsoft Exchange Message Tracking Service","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "fc0f3af4-6835-4174-b806-f7db311fd2f3","Microsoft Intune Windows Agent","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "d3590ed6-52b3-4102-aeff-aad2292ab01c","Microsoft Office","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "d176f6e7-38e5-40c9-8a78-3998aab820e7","Microsoft Online Syndication Partner Portal","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
@@ -585,6 +587,7 @@
 "a970bac6-63fe-4ec5-8884-8536862c42d4","Substrate Search Settings Management Service","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "97cb1f73-50df-47d1-8fb0-0271f2728514","Transcript Ingestion","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "268761a2-03f3-40df-8a8b-c3db24145b6b","Universal Store Native Client","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
+"fe93bfe1-7947-460a-a5e0-7a5906b51360","Viva Insights","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "3c896ded-22c5-450f-91f6-3d1ef0848f6e","WeveEngine","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "a3b79187-70b2-4139-83f9-6016c58cd27b","WindowsDefenderATP Portal","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "26a7ee05-5602-4d76-a7ba-eae8b7b67941","Windows Search","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
@@ -593,7 +596,6 @@
 "e1ef36fd-b883-4dbf-97f0-9ece4b576fc6","Yammer Web Embed","f8cdef31-a31e-4b4a-93e4-5f571e91255a","Learn"
 "7ae974c5-1af7-4923-af3a-fb1fd14dcb7e","OutlookUserSettingsConsumer","72f988bf-86f1-41af-91ab-2d7cd011db47","Learn"
 "5572c4c0-d078-44ce-b81c-6cbf8d3ed39e","Vortex [wsfed enabled]","72f988bf-86f1-41af-91ab-2d7cd011db47","Learn"
-"fe93bfe1-7947-460a-a5e0-7a5906b51360","Exchange Online [Community Contributed]","","GitHub"
 "a3883eba-fbe9-48bd-9ed3-dca3e0e84250","Exchange Online [Community Contributed]","","GitHub"
 "d396de1f-10d4-4023-aae2-5bb3d724ba9a","Exchange Online [Community Contributed]","","GitHub"
 "82d8ab62-be52-a567-14ea-1616c4ee06c4","Exchange Online [Community Contributed]","","GitHub"
@@ -768,4 +770,4 @@
 "f7a2a81e-ab33-4560-a3dd-6ddca3c5ec6d","Membership View Service [Community Contributed]","f8cdef31-a31e-4b4a-93e4-5f571e91255a","GitHub"
 "fd225045-a727-45dc-8caa-77c8eb1b9521","Azure Diagnostics Resource Provider [Community Contributed]","f8cdef31-a31e-4b4a-93e4-5f571e91255a","GitHub"
 "fd642066-7bfc-4b65-9463-6a08841c12f0","Microsoft Purview Platform [Community Contributed]","f8cdef31-a31e-4b4a-93e4-5f571e91255a","GitHub"
-"8e55a7b1-6766-4f0a-8610-ecacfe3d569a","Microsoft Teams Copilot Bot [Community Contributed]","","GitHub"
+"8e55a7b1-6766-4f0a-8610-ecacfe3d569a","Microsoft Teams Copilot Bot [Community Contributed]","","GitHub"

Devices-Analyzer.ps1

@@ -4,7 +4,7 @@
 # @copyright: Copyright (c) 2025 Martin Willing. All rights reserved. Licensed under the MIT license.
 # @contact:   Any feedback or suggestions are always welcome and much appreciated - mwilling@lethal-forensics.com
 # @url:       https://lethal-forensics.com/
-# @date:      2025-01-27
+# @date:      2025-02-24
 #
 #
 # ██╗     ███████╗████████╗██╗  ██╗ █████╗ ██╗      ███████╗ ██████╗ ██████╗ ███████╗███╗   ██╗███████╗██╗ ██████╗███████╗
@@ -21,8 +21,8 @@
 # https://github.com/dfinke/ImportExcel
 #
 #
-# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5371) and PowerShell 5.1 (5.1.19041.5369)
-# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5371) and PowerShell 7.5.0
+# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5487) and PowerShell 5.1 (5.1.19041.5486)
+# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5487) and PowerShell 7.5.0
 #
 #
 #############################################################################################################################################################################################
@@ -35,9 +35,9 @@
 .DESCRIPTION
   Devices-Analyzer.ps1 is a PowerShell script utilized to simplify the analysis of Microsoft Entra ID Device Information extracted via "Microsoft-Extractor-Suite" by Invictus Incident Response.
 
-  https://github.com/invictus-ir/Microsoft-Extractor-Suite (Microsoft-Extractor-Suite v3.0.1)
+  https://github.com/invictus-ir/Microsoft-Extractor-Suite (Microsoft-Extractor-Suite v3.0.2)
 
-  https://microsoft-365-extractor-suite.readthedocs.io/en/latest/
+  https://microsoft-365-extractor-suite.readthedocs.io/en/latest/functionality/Azure/Devices.html
 
 .PARAMETER OutputDir
   Specifies the output directory. Default is "$env:USERPROFILE\Desktop\Devices-Analyzer".
@@ -476,8 +476,8 @@ $Host.UI.RawUI.WindowTitle = "$DefaultWindowsTitle"
 # SIG # Begin signature block
 # MIIrxQYJKoZIhvcNAQcCoIIrtjCCK7ICAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB
 # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR
-# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUakOVL4pd+5/v75vDMDEdpJhs
-# QzmggiT/MIIFbzCCBFegAwIBAgIQSPyTtGBVlI02p8mKidaUFjANBgkqhkiG9w0B
+# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUrACvAGE1RG1H5isbPp6xSaBm
+# +JKggiT/MIIFbzCCBFegAwIBAgIQSPyTtGBVlI02p8mKidaUFjANBgkqhkiG9w0B
 # AQwFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVy
 # MRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEh
 # MB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTIxMDUyNTAwMDAw
@@ -679,33 +679,33 @@ $Host.UI.RawUI.WindowTitle = "$DefaultWindowsTitle"
 # YmxpYyBDb2RlIFNpZ25pbmcgQ0EgUjM2AhEAjEGek78rzqyIBig7dhm9PDAJBgUr
 # DgMCGgUAoHgwGAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMx
 # DAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAjBgkq
-# hkiG9w0BCQQxFgQUI/BWVye1Y641bAegmunG6WiBGKEwDQYJKoZIhvcNAQEBBQAE
-# ggIAsG5zI7qNARF8SiuCEnmoQ6fUDsJfa4B0kboEf2dlZOWTEHZ/T+yr8pQph4Ng
-# /hkTYAOr52Vt47fSrOeCDHVgpccvYWFj4x9HdKooSNNzvSCOB6HTdF97T8A56/J+
-# vjhNZYN+dNzvCOAVsEEiE7xWIyldR6G7ZRpWfTTb9qWc0GVwBBtYsC6u602+yuhI
-# qqTBvyZrxWm06mChXFCJ3iO+cWfjnxdg1fJ+D/RNOAXJYsS2UiROo27DVSbhYQHV
-# oyv+kASOiEkEG/987Wy32TJ/zH+DzClPJftyxJxD4SUNYSXxbxiTXbSTJmoIxhNp
-# klQDdKlgjKDoR5O49SsEbueXf0cIGU1nVh1NfBVx+zbY/rN39zWFJCga5d/TX+NM
-# 2f791Vs4x0hJnTKoJJ3XAPEDrF9j0CY1NwfhoCjev0nFjZcLbppMtJxVETDNcJKd
-# eB4Iqkf5wzR1V58kg6BGRiUkhHWGHpfc8LtXbPVELa/2UPFiiQhYRGcg3uD96mLQ
-# y2UQrYxkskJw6MItHbdswBIBYbuaHXcqhAEiciYcGob+AP7HM+YL+DAKvWpP7ODD
-# 6lP6WhcBW2BKx81cLx3HTOkQpXHU/uiyTAT1r9bvDP+lS9KrTyX85JyK89/bHtA4
-# cp9tXF1++VUM3uo+fZwIg1iCk5139+6TBeU2kHPEMRD0c3ShggMiMIIDHgYJKoZI
+# hkiG9w0BCQQxFgQUfxqOxBGgOzLCB/unYHjK0vJgE+cwDQYJKoZIhvcNAQEBBQAE
+# ggIATCQ768GZt40xrCA5P4Pgqm4Nph5otQsIPWe8z70il6LRc9K7F9UP2pTadkN6
+# bArnLyjHwLLJEyU5WCwuPgCON0KQ+OOsdiDEvEwCNlKlGOUAtt6wTTUDqYSvdAH9
+# mBL+n2lHdMo8S4AUiPQPyHela9++pKfSz1l7FC4Uvs/EUckxwIS8/Ea1xphr1W6y
+# Me3xKAckJllqdKRaFklwQM29+SLACF7nD9B2mAb4LMAHA5lrmZIrQEBW4aKgrHEM
+# Mr2p6aBOC2MImTnYmMWMQYqRJjPtyGMXJJWVFgFcptamw3k+seNpSqWpqQJioxah
+# 2ELCBYWa0i7Ww2L4U90w7GFQUdGmcR09RXquzNhuv8209VI2WvyWqYtLrVAoYf4F
+# QAs2/5EWR96zfK3wjNPqNAfzeiHBgs+0wyHRfD8uew9T05Y2V+ys4dXO4Oz6PR/q
+# XZoOVV8GOBbmkNKdupHoozp+tKNDR+r1U5C3gxLic8+7uacUPb1v6DFZQRtRHdE3
+# MOi2qt3+Ae+O+BV+L5lnZAJagVrt5dbnt+D9MYCBe56c1LSrWTxYavHJ2csz5D8P
+# x5Zqq3Pg83oJYNniMRjQW6rzhXB3fHAdKdCuoNYOxxH9wayBFGGqr+fAJIDD1x1N
+# AYR7P1jc1L3KwnZByQooFrdVhzKgiqTFnOrpF2QT2Erx1FGhggMiMIIDHgYJKoZI
 # hvcNAQkGMYIDDzCCAwsCAQEwaTBVMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2Vj
 # dGlnbyBMaW1pdGVkMSwwKgYDVQQDEyNTZWN0aWdvIFB1YmxpYyBUaW1lIFN0YW1w
 # aW5nIENBIFIzNgIQOlJqLITOVeYdZfzMEtjpiTANBglghkgBZQMEAgIFAKB5MBgG
-# CSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MDEyNzA1
-# NDkxN1owPwYJKoZIhvcNAQkEMTIEMDfdEKi9ZQ5iPVZ947cKxSXVLrULNdhwOrTv
-# 2P1QPEsTGi1zMzjjPqxm3cHvt/7Q3zANBgkqhkiG9w0BAQEFAASCAgBkd9Td4Iai
-# ymJp2WufLprLXOmISHxtIWESgiOZ02m3Yx2raZIj9Fn3vnpluCPc/PWB+DxCVvVp
-# D53anLNlxM9JRFpLMHUBaO4jxlkWILHTwrBrnCjsJI6dq6sjIpoVfQQmHZN2zmrE
-# 5ipp2z59bRKuYAlbyGUx6it5YjEJ+qtmYPvON/1PEtxGwSeMHj5k+SbW91xo2iGD
-# fELqUzYjG6uaNtZ9cVvOzK8hVPV8F8tt7norxIKAKg5j/ACl7/LoRB0wPHrQQiFo
-# mCnFF2DtySzs7G9WR7xceE2KLPDra6OJ1jqae+i4y3/RzK8mok3biMQSIGEET5p7
-# 2dT/4K8T550shVE9OhL5du96DaSMOlVLsSslCV7rf/woOHP8hVjrmU9EKEUtwek5
-# tcG7QVFBIWHKPTP0WsfOobOQmyLdlQ1LBpFe1UAjtPHu1tqXzmcEd5LZlUjlHWZT
-# ZgVKITkfJksi6EzT/lEloTu+a5Q5wU7pWcG8n8IgXoNo/Zjae5ensEI5Jx4mChsx
-# 5EC9pkI13B8TR20K6yK2/7ISP9HHMM/Q+3DKIxSBlX7Lp8ZZhUn9lHLVBKcDPI8f
-# Yo9nyLlDRYfOf0XLleyKL1fVmG3+lfsmkMEnaJY6tYvA52GOPvHUebi7uBzDTJWX
-# jIhkX2bXOx8NzbYG9Fli50Z7hCJ1Z5A+bQ==
+# CSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MDIyNDA2
+# MDAzNlowPwYJKoZIhvcNAQkEMTIEMI1HXkthalwD6fwiS8tgBPzxTDCyHorQ3hdK
+# nx7EAwKR2NXtFWwTl3pGLkKOB/tlVjANBgkqhkiG9w0BAQEFAASCAgB6zoq4z9Qo
+# ppRyNO3R7eVd6Av1jhOaRppZqzgrgCWmtQMNwWBng/exIYZ2t3lm8aZm8SrnCyUF
+# 7T/p3EElfW8z5UNvj/c1i1KkM5mmI4E5yRbTrKsTJOhxc194JlHnF+rGWkCb636J
+# YaoYxAISotVrVYUH5zYBlnDsI9//wHLGmpAI/bqElRaaxbY6dbsLFCACuVRmnRJT
+# dIuBrI74ZeyTxGEcoagKz496oL2rmgmgsGKA8VUam3U8lDicOrrce+5Ybs7dR2nk
+# 6VmxY1Hr5fQcyVuiOynp+difKGCOjqSuHN2OXIQSG7UZmRMBfjqIPq1KxO2UgTor
+# ycjseaaegHemOb6pEuwtqKwE5irLpFy3Rz2+6WTC3GLI+BCa9UKvrPQ0Eqtbhxic
+# dBl9cPnXL1vHG+NRtoG3vG7cWYjlOuUVC6vBmXVFpRIbdZBK6UJjPoYLZ7/TsF10
+# 6H+Y2O63lGYyBIyFcnYG9M5fAmKlSEyp/g1zFWPSgk7ryl04aYqQB5IXgHi4/ryO
+# NtiMr6gLnyyaOfNyFqbggVZ5b9PmEQvDX1pK5zrSdaKNGRbXzhcxeXgTnzrVnu2P
+# 5Pv6/rAZcKyoMbAeMNgqSUuE7rlo3zsl4fiSx1RvmgZsdeW9MCznp9JrPd02ZMi8
+# B45qzK/+GppRKjo2/6JyVKgzz1xwrN29HA==
 # SIG # End signature block

EntraAuditLogs-Analyzer.ps1

@@ -4,7 +4,7 @@
 # @copyright: Copyright (c) 2025 Martin Willing. All rights reserved. Licensed under the MIT license.
 # @contact:   Any feedback or suggestions are always welcome and much appreciated - mwilling@lethal-forensics.com
 # @url:       https://lethal-forensics.com/
-# @date:      2025-01-27
+# @date:      2025-02-24
 #
 #
 # ██╗     ███████╗████████╗██╗  ██╗ █████╗ ██╗      ███████╗ ██████╗ ██████╗ ███████╗███╗   ██╗███████╗██╗ ██████╗███████╗
@@ -28,8 +28,8 @@
 # https://github.com/BurntSushi/xsv
 #
 #
-# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5371) and PowerShell 5.1 (5.1.19041.5247)
-# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5371) and PowerShell 7.5.0
+# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5487) and PowerShell 5.1 (5.1.19041.5486)
+# Tested on Windows 10 Pro (x64) Version 22H2 (10.0.19045.5487) and PowerShell 7.5.0
 #
 #
 #############################################################################################################################################################################################
@@ -42,7 +42,7 @@
 .DESCRIPTION
   EntraAuditLogs-Analyzer.ps1 is a PowerShell script utilized to simplify the analysis of Microsoft Entra ID Audit Logs extracted via "Microsoft Extractor Suite" by Invictus-IR.
 
-  https://github.com/invictus-ir/Microsoft-Extractor-Suite (Microsoft-Extractor-Suite v3.0.1)
+  https://github.com/invictus-ir/Microsoft-Extractor-Suite (Microsoft-Extractor-Suite v3.0.2)
 
   https://microsoft-365-extractor-suite.readthedocs.io/en/latest/functionality/Azure/AzureActiveDirectoryAuditLog.html
 
@@ -2260,8 +2260,8 @@ if ($Result -eq "OK" )
 # SIG # Begin signature block
 # MIIrxQYJKoZIhvcNAQcCoIIrtjCCK7ICAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB
 # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR
-# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUquWkRazZmEPLWOHP83ZEvEGp
-# BlyggiT/MIIFbzCCBFegAwIBAgIQSPyTtGBVlI02p8mKidaUFjANBgkqhkiG9w0B
+# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUlS61hMMBSSuJ//9Rbp/AetiW
+# oqWggiT/MIIFbzCCBFegAwIBAgIQSPyTtGBVlI02p8mKidaUFjANBgkqhkiG9w0B
 # AQwFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVy
 # MRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEh
 # MB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTIxMDUyNTAwMDAw
@@ -2463,33 +2463,33 @@ if ($Result -eq "OK" )
 # YmxpYyBDb2RlIFNpZ25pbmcgQ0EgUjM2AhEAjEGek78rzqyIBig7dhm9PDAJBgUr
 # DgMCGgUAoHgwGAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMx
 # DAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAjBgkq
-# hkiG9w0BCQQxFgQUQ1NVGOADVqQ/Qfi6BchHgyeRygIwDQYJKoZIhvcNAQEBBQAE
-# ggIAz+yjVO7LOL3WDMvtJlqPoPgA3gZNh/zfVmJFcSC4AReN9UNCXr+KROAoew1a
-# SacUgk4OdchAofjMSoTVg8IwuSlRDXmd56Lr3i+Znuo/g0eg06ypOwcKIe5M6s6C
-# FNTz6G+v+5e1KYKv+fh5l8nUpG7CZeh7rXS8D9VaUkx9uTLAMyteqkyC1+M9JegF
-# GRYEIA0zeYuh9Lf7cExVc+iy110+5KroufLzB/S4nKlznl++qT4E85iUqRJYpfx/
-# URaEPBTQ8i5oLBJ5d2JblrVbA699YDWVtSqq8R4ZbsO8ioDRdDeMYMxKNkeaTXgy
-# Cc4eYJ9xIPNe1vw6jCcqFPmYRQlCzjv2CJWGMLiSTOnqNamQ6NiOt2o/ifMwJmso
-# OlEv4BM2TUosVeeiF0j0Q5pwf2EgqQcMZw7O8beEYlSKKbPTbhGrAbN9PWaZZzwp
-# oYlmHFNfqMNxcuxDuvQ+zDwZRoYQQo7vPP2ItL9PUOxRBsCJfvLR9pycyuQ9zFLR
-# v9lAFb7ezPDz3LWcBf7VpFhnGEBhMZGvmyfnaefrErk25WAGMVmQqiFvIIhEID30
-# JkR7ehWoTIMHlMXkFnD/w5LCVDI6+33+X4HT4ECnb8n11yrRc2e0oiu2uTfyYXr4
-# M611wAvcvfoo0TMLDT07ShFcETCNPjuqlA5Igd4WQE0pb/KhggMiMIIDHgYJKoZI
+# hkiG9w0BCQQxFgQUsfDGgpCbCsMG6E+BMSC4iOYOCYcwDQYJKoZIhvcNAQEBBQAE
+# ggIArazh1yn7bCnW2IDfgv3mOGL/7gBjXsZumzejAXfeAow9MN8efd6KAXBZRAzi
+# KwQZ28PyDKWqqcdiBd3kOBuBnrpHhsr5IhEUTR5wb9MdAygjiXinsfVPo7HyfP8x
+# J112AXQmqEJhCpZLHbV33Avfd/03SUafPYkhocuinmo9KaYmL9eKQ7oeO75aXXQd
+# 6Wvw9pqJwMoFzw9iHEjqJkNsBJwjxmy/jo/gXBvDmOu4ZAcJmG1Wk7FIbL/7uCpr
+# rHbRDSp18+EjbYkXUp4s6c7W/rC2wvZxU34kJSw/vfKTVwiJ1JIttiKoDv3iuzFb
+# Lz0O4bB6oFW37PpRf17DrwqdusxZVndoKrkcDGYxnft9OJPVbCnHGK144KV80aba
+# E08WAGOIynXVt8+ZsmJCoL6DlIePUvvWcOVmvC02I8L8Gc3D8suOV6M8b0/uHjvU
+# 7jjqJPGxG9efED8FFvjFNo4DVkikocIv/2FhNdJeePFs/6KGls15ju64Eh88+iZq
+# zDDlHwcYsgE11lPpBCB+KGnInttwqdHJ46bjyUwpOtQp1KYZL6O91gcbZimd5CX5
+# xwJ9LCNjFBVqfGAl/3aHS0v0yK+n53sVCYv9cIApJWJ2aeyS1VoGVpPQipCvWJuV
+# ot9HWgkYEjE7YdfemDQeH1uB0VX/tOdBOe5/LbDcXYkKxCChggMiMIIDHgYJKoZI
 # hvcNAQkGMYIDDzCCAwsCAQEwaTBVMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2Vj
 # dGlnbyBMaW1pdGVkMSwwKgYDVQQDEyNTZWN0aWdvIFB1YmxpYyBUaW1lIFN0YW1w
 # aW5nIENBIFIzNgIQOlJqLITOVeYdZfzMEtjpiTANBglghkgBZQMEAgIFAKB5MBgG
-# CSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MDEyNzA1
-# NDkyMFowPwYJKoZIhvcNAQkEMTIEMBEQI47lnqVdtmSnWjJTnYMV+07uvI0KSKPD
-# cqgpIlHBD6WPnAXBKwMuW/5l0s6FiTANBgkqhkiG9w0BAQEFAASCAgBDqNDYcb45
-# 0Mv1a8s/3KIRL+xjXXfDErIDv+pn+kz5Sju77cmDsa1lLs9gQetjQ7zkbP/C/phs
-# wfnfFQGzFCB5WqH/NxwkZcnDmIv0/yBgPLYwh+GYwZV/z+9gdqk14vKD5prZC0v4
-# KxQSl+H9Tvqg1xUrFDwjEJU+tuBCcw3hTjGjxMTtnbQDjC81eY8u7AOhLbtIIgyl
-# bevZ1DthKwAZA4C48lTzcft2EjDNV1rgkap5GuwtnkIBAgcwBRil9X6i4dePJ+L9
-# vaEg3m0nRT81qXm/Bo1W6DZMsVaXy1+rjuFNDYB8ecis3Sq9a8T0oX2KgKYQanqi
-# aEJ16yg4rY5TueCRXfUEbJx2evJ3E8QWqYph39rWQ37wzEUGzH4B1HsCLKRe0xqE
-# njeVfiVjDV0M4b7duf1Sv4TohwTSfT9qQv0MpeNZGkoHpWuzsBp56ZIcBy/En/cB
-# nO2eZ/yjRRJs/H7sWqh7Ym+NzrPqlJvUIE+Y4qTPXEe5NR87kG74+Fwp2sX+11dQ
-# JxFO9phvgepCPpz9YaFQLyjFC/kL5go1K/Ii2mE1yiau2NS1L+VYi2vOxwAHFS4p
-# Cpjefb3YyzJC/FkRfM2NAG01k+JJTP70VFulN7rPW+ZmdoSzEFCTxFlR4vrAxML3
-# hbqueEiJWuKmoXJFVn+NGQdSNIhx2rvdtQ==
+# CSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MDIyNDA2
+# MDAzOVowPwYJKoZIhvcNAQkEMTIEMHFQYUt2aIHqk8nEluciKKFaCj387bUZttNi
+# BIgpiMd2P5dmP7GOlP5Xoqw8zstPcTANBgkqhkiG9w0BAQEFAASCAgBOChy/TzGO
+# hUROr3y45YqRALzl/UOfZ8wnpD69cSsHE2aAAHCQmnjwisxVkx2JyiMD3BjU/u1d
+# JcMa2bQQSHAgICNWKNciIQxt6dUiz5SLsQnI+MN1D8n2tf351q/zleamrDCexd0j
+# pJ93JTDKHQXSXSOFvFAM8aQ2s0gRwLuTqUHZLrp7i5e/sWfM7WULJrTAIUtYUPHF
+# Rez1QHXuNdjmofz8REjDd5omfzfRjM5G5lM8EEA1P7Sfbt0XnOXzGqPuRWJZ1TFK
+# VGAFEVj9Kg5tDLF614SWPwudosO6BhHvo6RmJm1Pgnt/rAyRr2SaYYefGFMjw/2r
+# rLFI2C6hPYKTRKcsSvuBPG+wyD4emgnTVqP4i8vAcecFLnylG19QAijMj6NFulz8
+# oLob+8Ii+T/TzViDknBqsO+yr1UeZn3FKt0kv76TuFmS2KmyQqBmpbwICJeFujH5
+# SZJ5abjJHXqgsc4vAi/a0H0AntSQbL1v1pbopmmMPZ4poyTg4TTusr/uiZ89GlVD
+# 3PyFeVyiqtJqbmoMZKyZeeflsmyBaUoXJTPL7B1JCZigRKOQlxLfkt1ujw9kd26m
+# mGsbZY3zM2noJYduUhbIDtnqA40+qq1FZaAhOfok6/EtDei8KLG7d8LTJtukBcIv
+# y5YSl3BgrjujjSdsylzA09pvB+ZGAY5GlQ==
 # SIG # End signature block