AzureADAssessment

2.3.15

AzureADAssessment.psm1

                                <#

.DISCLAIMER

    THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF

    ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO

    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A

    PARTICULAR PURPOSE.

    Copyright (c) Microsoft Corporation. All rights reserved.

#>

param (

    # Provide module configuration

    [Parameter(Mandatory = $false)]

    [psobject] $ModuleConfiguration

)

## Set Strict Mode for Module. https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/set-strictmode

Set-StrictMode -Version 3.0

## Display Warning on old PowerShell versions. https://docs.microsoft.com/en-us/powershell/scripting/install/PowerShell-Support-Lifecycle#powershell-end-of-support-dates

# ToDo: Only Windows PowerShell can currently satify device compliance CA requirement. Look at adding Windows Broker (WAM) support to support device compliance on PowerShell 7.

# if ($PSVersionTable.PSVersion -lt [version]'7.0') {

#     Write-Warning 'It is recommended to use this module with the latest version of PowerShell which can be downloaded here: https://aka.ms/install-powershell'

# }

## Initialize Module Configuration

$script:ModuleConfigDefault = Import-Config -Path (Join-Path $PSScriptRoot 'config.json')

$script:ModuleConfig = $script:ModuleConfigDefault.psobject.Copy()

Import-Config | Set-Config

if ($PSBoundParameters.ContainsKey('ModuleConfiguration')) { Set-Config $ModuleConfiguration }

#Export-Config

# Load zip dll on Windows PowerShell

if ($PSVersionTable.PSEdition -eq 'Desktop') {

    Add-Type -AssemblyName System.IO.Compression.FileSystem -ErrorAction Stop

}

## Initialize Module Variables

$script:ConnectState = @{

    ClientApplication = $null

    CloudEnvironment  = 'Global'

    MsGraphToken      = $null

}

$script:MsGraphSession = New-Object Microsoft.PowerShell.Commands.WebRequestSession

$script:MsGraphSession.Headers.Add('ConsistencyLevel', 'eventual')

$script:MsGraphSession.UserAgent += ' AzureADAssessment'

#$script:MsGraphSession.UserAgent += '{0}/{1}' -f $MyInvocation.MyCommand.Module.Name,$MyInvocation.MyCommand.Module.Version

# $script:MsGraphSession.Proxy = New-Object System.Net.WebProxy -Property @{

#     Address = localhost

#     UseDefaultCredentials = $true

# }

[string[]] $script:MsGraphScopes = @(

    'Organization.Read.All'

    'RoleManagement.Read.Directory'

    'Application.Read.All'

    'User.Read.All'

    'Group.Read.All'

    'Policy.Read.All'

    'Directory.Read.All'

    'SecurityEvents.Read.All'

    'UserAuthenticationMethod.Read.All'

    'AuditLog.Read.All'

    'Reports.Read.All'

)

$script:mapMgEnvironmentToAzureCloudInstance = @{

    'Global'   = 'AzurePublic'

    'China'    = 'AzureChina'

    'Germany'  = 'AzureGermany'

    'USGov'    = 'AzureUsGovernment'

    'USGovDoD' = 'AzureUsGovernment'

}

$script:mapMgEnvironmentToAzureEnvironment = @{

    'Global'   = 'AzureCloud'

    'China'    = 'AzureChinaCloud'

    'Germany'  = 'AzureGermanyCloud'

    'USGov'    = 'AzureUSGovernment'

    'USGovDoD' = 'AzureUsGovernment'

}

$script:mapMgEnvironmentToAadRedirectUri = @{

    'Global'   = 'https://login.microsoftonline.com/common/oauth2/nativeclient'

    'China'    = 'https://login.partner.microsoftonline.cn/common/oauth2/nativeclient'

    'Germany'  = 'https://login.microsoftonline.com/common/oauth2/nativeclient'

    'USGov'    = 'https://login.microsoftonline.us/common/oauth2/nativeclient'

    'USGovDoD' = 'https://login.microsoftonline.us/common/oauth2/nativeclient'

}

$script:mapMgEnvironmentToMgEndpoint = @{

    'Global'   = 'https://graph.microsoft.com/'

    'China'    = 'https://microsoftgraph.chinacloudapi.cn/'

    'Germany'  = 'https://graph.microsoft.de/'

    'USGov'    = 'https://graph.microsoft.us/'

    'USGovDoD' = 'https://dod-graph.microsoft.us/'

}

## Initialize Application Insights for Anonymous Telemetry

$script:AppInsightsRuntimeState = [PSCustomObject]@{

    OperationStack = New-Object System.Collections.Generic.Stack[PSCustomObject]

    SessionId      = New-Guid

}

if (!$script:ModuleConfig.'ai.disabled') {

    $script:AppInsightsState = [PSCustomObject]@{

        UserId = New-Guid

    }

    Import-Config -Path 'AppInsightsState.json' | Set-Config -OutConfig ([ref]$script:AppInsightsState)

    Export-Config -Path 'AppInsightsState.json' -InputObject $script:AppInsightsState -IgnoreDefaultValues $null

}

## HashArray with already read evidence

$script:Evidences =  @{

    'Tenant' = @{} # tenant files

    'AADC' = @{} # aadconnect files indexed by server name

    'ADFS' = @{} # ADFS files indexed by server name

    'AADAP' = @{} # AAD Proxy Agent files indexed by server name

}

#Future

#Get PIM data

#Get Secure Score

#Add Master CmdLet and make it in parallel

# SIG # Begin signature block

# MIInoAYJKoZIhvcNAQcCoIInkTCCJ40CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDsF3z+GVG+FIi/

# J3qn9pagpJYzfISqxlfhqY1jAAzlQKCCDYEwggX/MIID56ADAgECAhMzAAACzI61

# lqa90clOAAAAAALMMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjIwNTEyMjA0NjAxWhcNMjMwNTExMjA0NjAxWjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQCiTbHs68bADvNud97NzcdP0zh0mRr4VpDv68KobjQFybVAuVgiINf9aG2zQtWK

# No6+2X2Ix65KGcBXuZyEi0oBUAAGnIe5O5q/Y0Ij0WwDyMWaVad2Te4r1Eic3HWH

# UfiiNjF0ETHKg3qa7DCyUqwsR9q5SaXuHlYCwM+m59Nl3jKnYnKLLfzhl13wImV9

# DF8N76ANkRyK6BYoc9I6hHF2MCTQYWbQ4fXgzKhgzj4zeabWgfu+ZJCiFLkogvc0

# RVb0x3DtyxMbl/3e45Eu+sn/x6EVwbJZVvtQYcmdGF1yAYht+JnNmWwAxL8MgHMz

# xEcoY1Q1JtstiY3+u3ulGMvhAgMBAAGjggF+MIIBejAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUiLhHjTKWzIqVIp+sM2rOHH11rfQw

# UAYDVR0RBEkwR6RFMEMxKTAnBgNVBAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1

# ZXJ0byBSaWNvMRYwFAYDVQQFEw0yMzAwMTIrNDcwNTI5MB8GA1UdIwQYMBaAFEhu

# ZOVQBdOCqhc3NyK1bajKdQKVMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly93d3cu

# bWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY0NvZFNpZ1BDQTIwMTFfMjAxMS0w

# Ny0wOC5jcmwwYQYIKwYBBQUHAQEEVTBTMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY0NvZFNpZ1BDQTIwMTFfMjAx

# MS0wNy0wOC5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAgEAeA8D

# sOAHS53MTIHYu8bbXrO6yQtRD6JfyMWeXaLu3Nc8PDnFc1efYq/F3MGx/aiwNbcs

# J2MU7BKNWTP5JQVBA2GNIeR3mScXqnOsv1XqXPvZeISDVWLaBQzceItdIwgo6B13

# vxlkkSYMvB0Dr3Yw7/W9U4Wk5K/RDOnIGvmKqKi3AwyxlV1mpefy729FKaWT7edB

# d3I4+hldMY8sdfDPjWRtJzjMjXZs41OUOwtHccPazjjC7KndzvZHx/0VWL8n0NT/

# 404vftnXKifMZkS4p2sB3oK+6kCcsyWsgS/3eYGw1Fe4MOnin1RhgrW1rHPODJTG

# AUOmW4wc3Q6KKr2zve7sMDZe9tfylonPwhk971rX8qGw6LkrGFv31IJeJSe/aUbG

# dUDPkbrABbVvPElgoj5eP3REqx5jdfkQw7tOdWkhn0jDUh2uQen9Atj3RkJyHuR0

# GUsJVMWFJdkIO/gFwzoOGlHNsmxvpANV86/1qgb1oZXdrURpzJp53MsDaBY/pxOc

# J0Cvg6uWs3kQWgKk5aBzvsX95BzdItHTpVMtVPW4q41XEvbFmUP1n6oL5rdNdrTM

# j/HXMRk1KCksax1Vxo3qv+13cCsZAaQNaIAvt5LvkshZkDZIP//0Hnq7NnWeYR3z

# 4oFiw9N2n3bb9baQWuWPswG0Dq9YT9kb+Cs4qIIwggd6MIIFYqADAgECAgphDpDS

# AAAAAAADMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgMjAxMTAeFw0xMTA3MDgyMDU5MDlaFw0yNjA3MDgyMTA5MDla

# MH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMT

# H01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTEwggIiMA0GCSqGSIb3DQEB

# AQUAA4ICDwAwggIKAoICAQCr8PpyEBwurdhuqoIQTTS68rZYIZ9CGypr6VpQqrgG

# OBoESbp/wwwe3TdrxhLYC/A4wpkGsMg51QEUMULTiQ15ZId+lGAkbK+eSZzpaF7S

# 35tTsgosw6/ZqSuuegmv15ZZymAaBelmdugyUiYSL+erCFDPs0S3XdjELgN1q2jz

# y23zOlyhFvRGuuA4ZKxuZDV4pqBjDy3TQJP4494HDdVceaVJKecNvqATd76UPe/7

# 4ytaEB9NViiienLgEjq3SV7Y7e1DkYPZe7J7hhvZPrGMXeiJT4Qa8qEvWeSQOy2u

# M1jFtz7+MtOzAz2xsq+SOH7SnYAs9U5WkSE1JcM5bmR/U7qcD60ZI4TL9LoDho33

# X/DQUr+MlIe8wCF0JV8YKLbMJyg4JZg5SjbPfLGSrhwjp6lm7GEfauEoSZ1fiOIl

# XdMhSz5SxLVXPyQD8NF6Wy/VI+NwXQ9RRnez+ADhvKwCgl/bwBWzvRvUVUvnOaEP

# 6SNJvBi4RHxF5MHDcnrgcuck379GmcXvwhxX24ON7E1JMKerjt/sW5+v/N2wZuLB

# l4F77dbtS+dJKacTKKanfWeA5opieF+yL4TXV5xcv3coKPHtbcMojyyPQDdPweGF

# RInECUzF1KVDL3SV9274eCBYLBNdYJWaPk8zhNqwiBfenk70lrC8RqBsmNLg1oiM

# CwIDAQABo4IB7TCCAekwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFEhuZOVQ

# BdOCqhc3NyK1bajKdQKVMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1Ud

# DwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFHItOgIxkEO5FAVO

# 4eqnxzHRI4k0MFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwubWljcm9zb2Z0

# LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18y

# Mi5jcmwwXgYIKwYBBQUHAQEEUjBQME4GCCsGAQUFBzAChkJodHRwOi8vd3d3Lm1p

# Y3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18y

# Mi5jcnQwgZ8GA1UdIASBlzCBlDCBkQYJKwYBBAGCNy4DMIGDMD8GCCsGAQUFBwIB

# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2RvY3MvcHJpbWFyeWNw

# cy5odG0wQAYIKwYBBQUHAgIwNB4yIB0ATABlAGcAYQBsAF8AcABvAGwAaQBjAHkA

# XwBzAHQAYQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZIhvcNAQELBQADggIBAGfyhqWY

# 4FR5Gi7T2HRnIpsLlhHhY5KZQpZ90nkMkMFlXy4sPvjDctFtg/6+P+gKyju/R6mj

# 82nbY78iNaWXXWWEkH2LRlBV2AySfNIaSxzzPEKLUtCw/WvjPgcuKZvmPRul1LUd

# d5Q54ulkyUQ9eHoj8xN9ppB0g430yyYCRirCihC7pKkFDJvtaPpoLpWgKj8qa1hJ

# Yx8JaW5amJbkg/TAj/NGK978O9C9Ne9uJa7lryft0N3zDq+ZKJeYTQ49C/IIidYf

# wzIY4vDFLc5bnrRJOQrGCsLGra7lstnbFYhRRVg4MnEnGn+x9Cf43iw6IGmYslmJ

# aG5vp7d0w0AFBqYBKig+gj8TTWYLwLNN9eGPfxxvFX1Fp3blQCplo8NdUmKGwx1j

# NpeG39rz+PIWoZon4c2ll9DuXWNB41sHnIc+BncG0QaxdR8UvmFhtfDcxhsEvt9B

# xw4o7t5lL+yX9qFcltgA1qFGvVnzl6UJS0gQmYAf0AApxbGbpT9Fdx41xtKiop96

# eiL6SJUfq/tHI4D1nvi/a7dLl+LrdXga7Oo3mXkYS//WsyNodeav+vyL6wuA6mk7

# r/ww7QRMjt/fdW1jkT3RnVZOT7+AVyKheBEyIXrvQQqxP/uozKRdwaGIm1dxVk5I

# RcBCyZt2WwqASGv9eZ/BvW1taslScxMNelDNMYIZdTCCGXECAQEwgZUwfjELMAkG

# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx

# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9z

# b2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAxMQITMwAAAsyOtZamvdHJTgAAAAACzDAN

# BglghkgBZQMEAgEFAKCBrjAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgor

# BgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQg5SqAOd5O

# IktSAMfyo9umMvbmCv5ycRK+k4PvInhh9LowQgYKKwYBBAGCNwIBDDE0MDKgFIAS

# AE0AaQBjAHIAbwBzAG8AZgB0oRqAGGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbTAN

# BgkqhkiG9w0BAQEFAASCAQBBrQeTmlWxb3bFSrHE1w4cJtgaW2x0A8zVyeeI066K

# 1fjmGdvm2doTokGvPcemOAG6ol4FEt//eqlZlv9kHG64bJa2t58ZQr1BzSyt9pJH

# YiLABA/VMoWc8fcgvwSKzEREhhtm2lbqGVC66C44J/A9WVo0oOxUnl5eDk8l3Hfj

# DBKZNKHVs7KPE2WXTkyAY05m62qQZgdjZU2+4kR4DZKlqSEyKP3WK8szv2HNHVIa

# wGZi620mNX2DU9CStk5Ku8IzVn44+LUfqIC3NbmLpOKkofepF0IJd1Tyqjc8cKZc

# kf4jg0vFxGreOxoGEpYDSwzC3pJHU6SDJ1aNbEU1fwODoYIW/zCCFvsGCisGAQQB

# gjcDAwExghbrMIIW5wYJKoZIhvcNAQcCoIIW2DCCFtQCAQMxDzANBglghkgBZQME

# AgEFADCCAVAGCyqGSIb3DQEJEAEEoIIBPwSCATswggE3AgEBBgorBgEEAYRZCgMB

# MDEwDQYJYIZIAWUDBAIBBQAEIPfvdkp1yDGiyS/TRbcUe6YgOxY4SpDVb5x1Gqo0

# PvziAgZjv/DJL4cYEjIwMjMwMTI3MjAxMjUwLjI5WjAEgAIB9KCB0KSBzTCByjEL

# MAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v

# bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWlj

# cm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEmMCQGA1UECxMdVGhhbGVzIFRTUyBF

# U046OEE4Mi1FMzRGLTlEREExJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFNlcnZpY2WgghFXMIIHDDCCBPSgAwIBAgITMwAAAcL6fYcOVFNHJAABAAABwjAN

# BgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0y

# MjExMDQxOTAxMjhaFw0yNDAyMDIxOTAxMjhaMIHKMQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBP

# cGVyYXRpb25zMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjo4QTgyLUUzNEYtOURE

# QTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBALXxCbzyjkhZ96XrafcHKNvf1KCZgw8h

# 6ZpqUa7kVVgRd+wctJ767M0nDlfyvi7x1llguEvXJnuD+txJjYcUzf5NgoD5yLf7

# A3qcgAkpMmuLpKnNbE9iPtFKHdMY8vStvoyx/FDW/bzN8h/7wmJ2iUlKoLamVJcv

# NqYGEgerQ3mSGHEKDoUyPjNR4UcZsbfEWgCmZw514C3ZIZyGAya0ZEAaSIGobRMb

# U7jpJladsvGAqBT2lIVA9iU+oT4gw+6g+wO+zy6Rcw9kBZjXs0/Ghx4SrFQbiTCz

# 12TtZNeI9P5OvA2RrbNWAbRnoFzZMr5F0oAgsbd0PFhfJWgV2w54R2gywYQjgWmU

# PI6nBVMfGSUl0PLG7xJ5lhWZoDPdwfT/yUxUxeqgVRTA3f1dDwW0UAtk3LWR+G37

# /o8lr2Tnhc+cpbTy0cVKgY7+ChyGiYAYVNp7TMOB9IaZuAe7Oiy8ZE7Iy7Go4wiS

# PD4iov5jymBEXZkcrxS/P2APz3apCMFloNk4+bcrrRhbX1Ufuhm3AlYYo48u5e6L

# cWv8GFUl+ui6NGpWk4Y3PrqI1cB+KbC/gNar21gwfbMKCpWttHmbm8O38wqRXuqr

# PvhtNbLLdUmgNBhps7kAndOFHtXh9wxUQ2T7DfmlrwOOeUJnfWSSxl7qpwaOAV8F

# cXVmTY+vm+D/AgMBAAGjggE2MIIBMjAdBgNVHQ4EFgQURrGIe+leNWlAkVxPVrw/

# vrCHxmowHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgw

# VjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWlj

# cm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUF

# BwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgx

# KS5jcnQwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDCDANBgkqhkiG

# 9w0BAQsFAAOCAgEAEXbt3QpHCyz32id60dTOw/Y1h753n35Jl7xSCbasRxljNaKg

# Ifm6saSOx2c9jHjYYdQqPhPQGmzoI/eEqdbHl8XViEifZURmgAFswPO92kwd/0o8

# Lhqm6kLgL1MwRQjuNFCfWp6Wr5Kav9Jw6i2+1yOR/p7JoxcrvMql9TzJp2+LNX23

# Pxd9Io2gEs6ifqea64GFsA6DIoTOWxdGNK4l4ocBO3k0oWpPxMHMUZht4fjk/jsf

# Cji7i6sBRZdbIk3kAqfmEreCdbVl2qahiQ5Qm2K90c/Pq8k0vAqGQFNL0hwjkHKt

# dk4fNae0JR2b/XE0Q4WYNk1coPBsd1+ppKTTl2+ekFKISN0p9/VkCcIw5++CdGlW

# DGovJmOv1jrqyjChLkjYQonotEyuvLzmO7B9FxAVp0Um1Xn3krQ6PeFCFFU8Hdh5

# gRH2PJH68qd0ZQPQOBb31LwxzGhfQbb1P6SundQnShtvVdFjd7lc32BEyaEaYy2B

# RqtDLyukFTJrjcZN2wkX49WnElnnteFBo4JcVsL8jnzSXt6cXDRTnfB4cqfXeAJU

# BlSzaLWhb6KYDy3icFE93ZeVWgAITMLyBZqsLH30Mvd5qK66a3J7++K+YN3owt/T

# WKRRKMvqpsy1tYxWtWlxNl2/ymcNsmsKpXUqdB7uFRJIxsRTXPgM7SFFsJkwggdx

# MIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGI

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylN

# aWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5

# MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD

# QSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciEL

# eaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa

# 4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxR

# MTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEByd

# Uv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi9

# 47SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJi

# ss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+

# /NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY

# 7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtco

# dgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH

# 29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94

# q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcV

# AQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0G

# A1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQB

# gjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v

# cGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgw

# GQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB

# /wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0f

# BE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJv

# ZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4w

# TDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0

# cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIB

# AJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRs

# fNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6

# Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveV

# tihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKB

# GUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoy

# GtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQE

# cb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFU

# a2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+

# k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0

# +CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cir

# Ooo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYICzjCCAjcCAQEwgfih

# gdCkgc0wgcoxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAj

# BgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJjAkBgNVBAsTHVRo

# YWxlcyBUU1MgRVNOOjhBODItRTM0Ri05RERBMSUwIwYDVQQDExxNaWNyb3NvZnQg

# VGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQDKdTdVS4TzL1lxKGX5

# heGqWZZ0VKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0G

# CSqGSIb3DQEBBQUAAgUA5341bzAiGA8yMDIzMDEyNzE5MzUxMVoYDzIwMjMwMTI4

# MTkzNTExWjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDnfjVvAgEAMAoCAQACAiFX

# AgH/MAcCAQACAhG4MAoCBQDnf4bvAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisG

# AQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQEFBQAD

# gYEAB/bm91j3OmHNYp+NciV9AlHaBwnDq9sAL6lvAEgIXZI2xpm2j3j8I1gxJWo+

# r5Pp92aXqHdj8ZI7j5pz4NfLo5ZLCAX++UexXkQp0PRe5je/HJCkcPBsiJGSC8qx

# 54S9XAX+56cmDcryi2KKsdvuqIMoADYSZB0kCJuyT4CE7U8xggQNMIIECQIBATCB

# kzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD

# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAcL6fYcOVFNHJAAB

# AAABwjANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJ

# EAEEMC8GCSqGSIb3DQEJBDEiBCAQ/Vv9kNWNlnFOVy8cOxq2TJH2ZzsPmsk5bi6m

# q6ZeNTCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIMqTYFvH6bDFee69BeW3

# lLohFTlXuAXZmjvntvJhg1AWMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg

# UENBIDIwMTACEzMAAAHC+n2HDlRTRyQAAQAAAcIwIgQgMesGgfGPO5i1GNAYZIB8

# ux0aUkDXrLeQ9g0u7iTPYsgwDQYJKoZIhvcNAQELBQAEggIAJfEq+VX/F/3RYyU1

# 40FZKKqbuDNNsxxA/PowGZ8Oo7w4OePUEr5UdC0ro/CFkty4iH0/IK0DH1R4MOUa

# 19ljdEls9QjC8N9oxPj+vzHUqHYaDttoAnXs+xVxsHSnLGJJlZKcGVKQ7AnGCwSz

# +dFcLDKP5/DMNfwm+oFmX/+giQEV+IzkyJZtfNVSbwPq9v5y72Hp/XSyN9RI8xvi

# RoS+xl/axZP+ImchKBuPEB5EUYg8Gmu4Twyp5gIFfkLC0/4nt9CAkoWC+qzU14TO

# F/hG+eJ2zW+czy4svxYd2y8w2Pb7k+CAy6MAV9t+8XS3KIQaok/SS6+2mKK+dvW+

# r05y/Qe2X0Z4TsxQDpDbHHjqoliLkpEMPqO8RE+o7orkQJjeohdpu4OzSEfca0r7

# gDEoRq89Npmo6pJF1v+IN7jymf1RNAzyBJ+h+TCDZ8Ry3JNhyKDqWRpBOB3Bt8kO

# +eVKp8H/0aaiHZKUPGowOWwQ4+z2SOEiMfHM0JUkvUzfCay3TtYkLIv4tN/haCAp

# LcWo2V+ZGlNIsANltupyLsGEORrck2jlRbtAQcA7lbLWH8qU9yw76tke5AlwHq1v

# pzJS3j02VfDU3FdHqBxBPjsTejC4JdrQNlii6Td58GqD50GvUlOUGcvjDoBrx7n6

# SpdJIOe/ruVKQOK1qOI0U7+1UlU=

# SIG # End signature block